weaver-work-cli 0.1.2 → 0.1.5

package/dist/shortcuts/jiuchuanhui/operations/shared.js

@@ -0,0 +1,158 @@
+import { jiuchuanhuiValidationError } from '../errors.js';
+const FORBIDDEN_INPUT_KEYS = new Set([
+    'access_token',
+    'app_key',
+    'app_secret',
+    'cookie',
+    'eteamsid',
+    'token',
+    'sessionid',
+]);
+const FORBIDDEN_NORMALIZED_KEYS = new Set([...FORBIDDEN_INPUT_KEYS].map((key) => key.toLowerCase()));
+export function asObject(value, name = '业务输入') {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw jiuchuanhuiValidationError('input_invalid', `${name}必须是 JSON 对象`);
+    }
+    return value;
+}
+export function asNonEmptyString(value, name) {
+    if (typeof value !== 'string' || !value.trim()) {
+        throw jiuchuanhuiValidationError('input_invalid', `${name} 必须是非空字符串`);
+    }
+    return value.trim();
+}
+export function asPositiveString(value, name) {
+    if (typeof value !== 'string' || !/^\d+$/u.test(value) || value === '0') {
+        throw jiuchuanhuiValidationError('input_invalid', `${name} 必须是正整数文本`);
+    }
+    return value;
+}
+export function asOptionalStringArray(value, name) {
+    if (value === undefined || value === null || value === '')
+        return [];
+    const raw = Array.isArray(value) ? value : String(value).split(',');
+    return raw.map((item) => String(item).trim()).filter(Boolean);
+}
+export function assertNoForbiddenKeys(value, location = 'input') {
+    if (!value || typeof value !== 'object')
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => assertNoForbiddenKeys(item, `${location}[${index}]`));
+        return;
+    }
+    for (const [key, child] of Object.entries(value)) {
+        if (FORBIDDEN_INPUT_KEYS.has(key) || FORBIDDEN_NORMALIZED_KEYS.has(key.toLowerCase())) {
+            throw jiuchuanhuiValidationError('field_forbidden', `禁止业务输入字段：${location}.${key}`);
+        }
+        assertNoForbiddenKeys(child, `${location}.${key}`);
+    }
+}
+export function sessionMatches(lease, session) {
+    return lease.baseUrl === session.baseUrl && lease.profile === session.profile && lease.userId === session.userId;
+}
+export function workflow(name, state) {
+    return { workflow: name, version: 1, state };
+}
+/**
+ * ESB 动作流请求体组装：
+ * { customParams: { mainTable }, uniqueIndent, employeeId }
+ */
+export function esbBody(mainTable, uniqueIndent, userId) {
+    return {
+        customParams: { mainTable },
+        uniqueIndent,
+        employeeId: userId,
+    };
+}
+/**
+ * datajson datas 请求体组装（创建/更新类 saveFormData/updateFormData 接口）：
+ * { datajson: { datas: [ ... ], header: { operator } } }
+ * 入参 form 即 datas 数组元素（含 mainTable 与各明细表数组）。
+ */
+export function datasBody(form, userId) {
+    const datas = Array.isArray(form.datas) ? form.datas : [form];
+    const cleansed = datas.map((item) => stripForbidden(item));
+    return {
+        datajson: {
+            datas: cleansed,
+            header: { operator: userId },
+        },
+    };
+}
+/**
+ * datajson 详情请求体组装（getFormDataByPk 接口）：
+ * { datajson: { mainTable: { id }, header: { operator } } }
+ */
+export function byIdBody(id, userId) {
+    return {
+        datajson: {
+            mainTable: { id },
+            header: { operator: userId },
+        },
+    };
+}
+/**
+ * datajson 列表搜索请求体组装（getFormDataList 接口）：
+ * { datajson: { mainTable: {...}, pageInfo: { pageNo, pageSize }, header: { operator } } }
+ * 搜索条件走 URL query，mainTable 保持空（源文档要求），但分页必须放 pageInfo。
+ */
+export function listBody(userId, pageNo, pageSize, mainTable) {
+    const mt = mainTable && Object.keys(mainTable).length ? { ...mainTable } : {};
+    return {
+        datajson: {
+            mainTable: mt,
+            pageInfo: { pageNo, pageSize },
+            header: { operator: userId },
+        },
+    };
+}
+function stripForbidden(value) {
+    if (Array.isArray(value))
+        return value.map(stripForbidden);
+    if (!value || typeof value !== 'object')
+        return value;
+    const result = {};
+    for (const [key, child] of Object.entries(value)) {
+        if (FORBIDDEN_INPUT_KEYS.has(key) || FORBIDDEN_NORMALIZED_KEYS.has(key.toLowerCase()))
+            continue;
+        result[key] = stripForbidden(child);
+    }
+    return result;
+}
+export function stripForbiddenKeys(value) {
+    return stripForbidden(value);
+}
+/** 从 datajson-list 响应中安全提取 records 数组。 */
+export function listRecords(value) {
+    if (!value || typeof value !== 'object')
+        return [];
+    const root = value;
+    const datas = root.datajson?.datas;
+    if (Array.isArray(datas))
+        return datas;
+    return [];
+}
+/** datajson 类创建/更新成功后的 dataIds。 */
+export function resultDataIds(value) {
+    if (!value || typeof value !== 'object')
+        return [];
+    const ids = value.datajson?.dataIds;
+    if (Array.isArray(ids))
+        return ids.map((item) => String(item));
+    return [];
+}
+/** ESB 动作流的 resultCode 与 resultMsg。 */
+export function esbOutcome(value) {
+    if (!value || typeof value !== 'object')
+        return { resultCode: 0, resultMsg: '' };
+    const root = value;
+    return {
+        resultCode: Number(root.resultCode ?? 0),
+        resultMsg: typeof root.resultMsg === 'string' ? root.resultMsg : '',
+    };
+}
+export function pagingFrom(input) {
+    const pageNo = Number.isInteger(input.pageNo) && input.pageNo >= 1 ? input.pageNo : 1;
+    const pageSize = Number.isInteger(input.pageSize) && input.pageSize >= 1 ? input.pageSize : 10;
+    return { pageNo, pageSize };
+}

package/dist/shortcuts/jiuchuanhui/operations/types.js

@@ -0,0 +1 @@
+export {};

package/dist/shortcuts/jiuchuanhui/operations.js

@@ -0,0 +1,8 @@
+import { getJiuchuanhuiOperation } from './operations/registry.js';
+import { asObject, assertNoForbiddenKeys } from './operations/shared.js';
+export async function executeJiuchuanhuiOperation(operation, rawInput, context) {
+    const handler = getJiuchuanhuiOperation(operation);
+    const input = asObject(rawInput);
+    assertNoForbiddenKeys(input);
+    return handler.execute(input, context);
+}

package/dist/shortcuts/mail/continuation.js

@@ -0,0 +1,70 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { resolve } from 'node:path';
+import { mailValidationError } from './errors.js';
+function stateRoot(ctx) {
+    const configured = ctx?.config?.path();
+    if (configured)
+        return resolve(configured, '..');
+    return process.env.WEAVER_WORK_CLI_HOME || process.env.WORK_CLI_HOME || resolve(homedir(), '.weaver-work-cli');
+}
+async function loadKey(ctx) {
+    const keysDir = resolve(stateRoot(ctx), 'keys');
+    const filename = resolve(keysDir, 'mail-continuation.key');
+    await mkdir(keysDir, { recursive: true, mode: 0o700 });
+    if (existsSync(filename))
+        return readFile(filename);
+    const key = randomBytes(32);
+    try {
+        await writeFile(filename, key, { flag: 'wx', mode: 0o600 });
+        if (process.platform !== 'win32')
+            await chmod(filename, 0o600).catch(() => undefined);
+        return key;
+    }
+    catch {
+        return readFile(filename);
+    }
+}
+function encode(value) {
+    return Buffer.from(JSON.stringify(value)).toString('base64url');
+}
+function signature(payload, key) {
+    return createHmac('sha256', key).update(payload).digest('base64url');
+}
+export function createMailContinuationSigner(ctx) {
+    return {
+        async issue(payload, ttlMs = 10 * 60_000) {
+            const issuedAt = Date.now();
+            const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
+            const sig = signature(body, await loadKey(ctx));
+            return `${body}.${sig}`;
+        },
+        async verify(token, expectedOperation) {
+            if (typeof token !== 'string' || !token.includes('.')) {
+                throw mailValidationError('continuation_invalid', 'continuation 无效');
+            }
+            const [body, provided] = token.split('.');
+            const expected = signature(body, await loadKey(ctx));
+            const valid = provided.length === expected.length
+                && timingSafeEqual(Buffer.from(provided), Buffer.from(expected));
+            if (!valid)
+                throw mailValidationError('continuation_invalid', 'continuation 签名校验失败');
+            let value;
+            try {
+                value = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
+            }
+            catch {
+                throw mailValidationError('continuation_invalid', 'continuation 内容无法解析');
+            }
+            if (value.operation !== expectedOperation) {
+                throw mailValidationError('continuation_mismatch', 'continuation 不属于当前操作');
+            }
+            if (!Number.isSafeInteger(value.expiresAt) || value.expiresAt < Date.now()) {
+                throw mailValidationError('continuation_expired', 'continuation 已过期');
+            }
+            return value;
+        },
+    };
+}

package/dist/shortcuts/mail/errors.js

@@ -0,0 +1,53 @@
+import { CliError, ExitCode } from '../../core/errors.js';
+export class MailCliError extends CliError {
+    type;
+    subtype;
+    code;
+    retryable;
+    stage;
+    details;
+    partialData;
+    constructor(type, subtype, message, options = {}) {
+        super(message, options.exitCode ?? ExitCode.InternalError);
+        this.name = 'MailCliError';
+        this.type = type;
+        this.subtype = subtype;
+        this.code = options.code;
+        this.retryable = options.retryable ?? false;
+        this.stage = options.stage;
+        this.details = options.details;
+        this.partialData = options.partialData;
+    }
+}
+export function mailValidationError(subtype, message, details) {
+    return new MailCliError('validation', subtype, message, {
+        details,
+        exitCode: ExitCode.UsageError,
+    });
+}
+export function mailAuthError(subtype, message, details) {
+    return new MailCliError('authentication', subtype, message, {
+        details,
+        exitCode: ExitCode.AuthError,
+    });
+}
+export function mailNetworkError(subtype, message, options = {}) {
+    return new MailCliError('network', subtype, message, {
+        ...options,
+        retryable: options.retryable ?? true,
+        exitCode: ExitCode.NetworkError,
+    });
+}
+export function mailConfirmationError(action, details) {
+    return new MailCliError('confirmation', 'required', '该操作需要明确确认', {
+        details: { action, ...details },
+        exitCode: ExitCode.ConfirmationRequired,
+    });
+}
+export function mailPartialError(message, partialData, details) {
+    return new MailCliError('partial', 'write_uncertain', message, {
+        details,
+        partialData,
+        exitCode: ExitCode.Partial,
+    });
+}

package/dist/shortcuts/mail/host.js

@@ -0,0 +1,182 @@
+import { randomBytes } from 'node:crypto';
+import { requireE10Session } from '../../internal/e10/context.js';
+import { getActiveProfile } from '../../internal/e10/auth/session.js';
+import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
+import { mailAuthError, mailNetworkError, MailCliError, mailValidationError } from './errors.js';
+function inferProfile(ctx) {
+    const options = ctx.getGlobalOptions();
+    return options.profile || getActiveProfile();
+}
+/**
+ * 生成详情/正文接口防缓存随机串：randomkey_<6位>=<6位随机小写>。
+ * 每请求必须重新生成，写死会命中旧缓存/失效。
+ */
+export function mailRandomKey() {
+    const r = randomBytes(3).toString('hex').slice(0, 6).toLowerCase();
+    return `randomkey_${r}=${r}`;
+}
+function formBody(form) {
+    if (!form)
+        return undefined;
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(form)) {
+        if (value === undefined || value === null)
+            continue;
+        params.set(key, typeof value === 'string' ? value : String(value));
+    }
+    return params;
+}
+function omitEmptyQueryValues(query) {
+    if (!query)
+        return undefined;
+    return Object.fromEntries(Object.entries(query).filter(([, value]) => value !== '' && value !== undefined && value !== null));
+}
+export function assertPath(requestPath) {
+    if (typeof requestPath !== 'string' || !requestPath.startsWith('/') || requestPath.startsWith('//')) {
+        throw mailValidationError('path_invalid', '请求路径必须是相对绝对路径');
+    }
+    if (/^https?:/i.test(requestPath) || /[\r\n]/.test(requestPath) || requestPath.includes('/../')) {
+        throw mailValidationError('path_invalid', '请求路径不允许跨域或路径逃逸');
+    }
+    if (!requestPath.startsWith('/api/')) {
+        throw mailValidationError('path_not_allowed', '邮件模块只能调用 /api/ 路径');
+    }
+}
+/**
+ * 邮件业务成功判定（覆盖多类接口契约）：
+ * - 列表/详情/标星/已读/删除/移动：`code=200`（或 code="0"）且 `data === "SUCCESS"` / 对象 / 数组
+ * - 联系人/模板/签名/黑名单：`code="0"`（字符串零），`data` 为 id 字符串 / true / 数组 / 对象
+ * - 发送：`data.success === 1`；`data.success === 0` 视为拦截失败
+ * - 存草稿：`data.status === 1`；`data.status === 0` 失败
+ * - 撤回/重发：`data.success === 1`
+ * 约定：成功码仅 200 与 0（含字符串）；其余 code 一律判失败。仅当 `code` 缺省时才纯以 data 形态判定。
+ */
+function isMailSuccess(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const code = value.code;
+    if (code !== undefined) {
+        const c = Number(code);
+        if (!Number.isFinite(c) || (c !== 200 && c !== 0))
+            return false;
+    }
+    if (value.success === false)
+        return false;
+    if (value.status === false)
+        return false;
+    const data = value.data;
+    if (data === null || data === undefined)
+        return true;
+    if (typeof data === 'string')
+        return data.length > 0; // "SUCCESS" 或 id 串均为成功
+    if (typeof data === 'boolean')
+        return data === true;
+    if (Array.isArray(data))
+        return true;
+    if (typeof data === 'object') {
+        if (data.success === 0 || data.success === false)
+            return false;
+        if (data.status === 0 || data.status === false)
+            return false;
+        return true;
+    }
+    return true;
+}
+function mailMessage(value) {
+    if (!value || typeof value !== 'object')
+        return '邮件接口返回业务失败';
+    const candidates = [value.msg, value.message, value.data?.message, value.data?.msg];
+    for (const item of candidates) {
+        if (typeof item === 'string' && item.trim())
+            return item;
+    }
+    return '邮件接口返回业务失败';
+}
+export function createMailHost(ctx, dependencies = {}) {
+    let e10Session = null;
+    let sessionContext = null;
+    const requireSession = dependencies.requireSession || requireE10Session;
+    async function ensureSession() {
+        if (!e10Session) {
+            e10Session = await requireSession(ctx);
+            sessionContext = {
+                baseUrl: e10Session.getBaseUrl(),
+                profile: inferProfile(ctx),
+                userId: e10Session.userId,
+                tenantKey: e10Session.tenantKey,
+                eteamsId: e10Session.eteamsId,
+            };
+        }
+        return e10Session;
+    }
+    async function getSession() {
+        await ensureSession();
+        return sessionContext;
+    }
+    async function runtime() {
+        return createE10RequestRuntime(ctx, await ensureSession(), {
+            interceptors: dependencies.interceptors,
+            fetch: dependencies.fetch,
+        });
+    }
+    async function request(request) {
+        const { method, path, query, body, operation, form, multipart, headers: extraHeaders = {}, timeoutMs = 30_000, } = request;
+        assertPath(path);
+        const resolvedMethod = method || (body === undefined && form === undefined && multipart === undefined ? 'GET' : 'POST');
+        let response;
+        try {
+            response = await (await runtime()).requestJson({
+                module: 'mail',
+                operation,
+                method: resolvedMethod,
+                path,
+                query: omitEmptyQueryValues(query),
+                body: multipart === undefined ? body : undefined,
+                form: multipart === undefined && form === undefined ? undefined : formBody(form ?? {}),
+                formData: multipart,
+                // 邮件接口依赖 langType / timeZoneOffset 头
+                headers: { 'X-Requested-With': 'XMLHttpRequest', 'langType': 'zh_CN', 'timeZoneOffset': '-480', ...extraHeaders },
+                timeoutMs,
+            });
+        }
+        catch (error) {
+            if (error instanceof E10ApiError && error.type === 'network') {
+                throw mailNetworkError(error.subtype, error.message, {
+                    retryable: error.retryable,
+                    details: error.details,
+                });
+            }
+            throw error;
+        }
+        if (response.status === 401 || response.status === 302) {
+            throw mailAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            if (response.status < 200 || response.status >= 300) {
+                throw new MailCliError('api', 'http_error', `邮件接口 HTTP ${response.status}`, {
+                    code: response.status,
+                    details: { status: response.status },
+                    exitCode: 1,
+                });
+            }
+            throw mailNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw new MailCliError('api', 'http_error', `邮件接口 HTTP ${response.status}`, {
+                code: response.status,
+                details: { status: response.status, message: mailMessage(response.value) },
+                exitCode: 1,
+            });
+        }
+        if (!isMailSuccess(response.value)) {
+            const value = response.value;
+            throw new MailCliError('api', 'business_error', mailMessage(value), {
+                code: value?.code ?? response.status,
+                details: { code: value?.code, message: mailMessage(value) },
+                exitCode: 1,
+            });
+        }
+        return response.value;
+    }
+    return { request, getSession };
+}