weaver-work-cli 0.1.2 → 0.1.5

package/dist/shortcuts/asset/host.js

@@ -0,0 +1,438 @@
+import { requireE10Session } from '../../internal/e10/context.js';
+import { getActiveProfile } from '../../internal/e10/auth/session.js';
+import { createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
+import { ziguanjiaAuthError, ziguanjiaBusinessError, ziguanjiaNetworkError, ziguanjiaValidationError, } from './errors.js';
+const EBUILDER_PREFIX = process.env.WEAVER_EBUILDER_PREFIX || '/api/ebuilder';
+const ESB_TRIGGER_PATH = '/api/esb/server/event/triggerActionFlow';
+/** 卡片链接 /sp/ebdfpage/card/0/{表单ID}/{数据ID} 用到的资产域应用标签（固定值）。 */
+const ASSET_APP_TAG = 'weaver-asset-eb';
+const GET_APP_IDS_PATH = '/api/bs/ebuilder/app/tags/getAppIds';
+const GET_OBJS_BY_TAG_PATH = '/api/ebuilder/form/obj/getObjsByTag';
+/** 表单字段定义接口（OpenAPI）：传入表单 objId，返回主表/明细表字段列表（name / config.dataKey / 显示文本）。 */
+const FORM_FIELDS_PATH = '/api/ebuilder/common/ds/fields';
+/** 分部（subcompany）浏览接口：按名称解析「当前登录人所属分部」ID（折旧分组计提等场景需要）。 */
+const SEARCH_SUBCOMPANY_PATH = '/api/hrm/common/browser/data/subcompany';
+const FORBIDDEN_INPUT_KEYS = new Set([
+    'access_token',
+    'app_key',
+    'app_secret',
+    'cookie',
+    'eteamsid',
+    'token',
+    'sedit',
+]);
+/**
+ * 从表单字段定义中挑出「人员」字段（领用人 / 使用人）。
+ * 优先按候选 dataKey 精确命中 `name` 或 `config.dataKey`（来自运行时字段定义，非臆造）；
+ * 兜底按显示文本含「领用/使用」且含「人」匹配。都不命中返回 undefined，由调用方报错而非猜字段。
+ */
+export function pickPersonField(fields, candidates) {
+    const lower = new Set(candidates.map((c) => c.toLowerCase()));
+    const byKey = fields.find((f) => (f.name && lower.has(f.name.toLowerCase())) || (f.dataKey && lower.has(f.dataKey.toLowerCase())));
+    if (byKey)
+        return byKey;
+    const byText = fields.find((f) => {
+        const t = f.text ?? '';
+        return /领用|使用/.test(t) && /人|人员/.test(t);
+    });
+    return byText;
+}
+function ebuilderPath(endpoint, interfacePk) {
+    return `${EBUILDER_PREFIX}/form/formdata/v2/${endpoint}/${interfacePk}`;
+}
+/**
+ * ebuilder 自定义接口的请求体必须整体包在 datajson 内，且 header.operator 位于 datajson 内部（不是根层级）。
+ * 抽成纯函数以便单测直接断言真实请求形状，避免测试里重复实现一遍包装逻辑。
+ */
+export function wrapEbuilderBody(body, operator) {
+    return {
+        datajson: {
+            ...body,
+            header: { operator, ...(body.header && typeof body.header === 'object' ? body.header : {}) },
+        },
+    };
+}
+function assertPath(requestPath) {
+    if (typeof requestPath !== 'string' || !requestPath.startsWith('/') || requestPath.startsWith('//')) {
+        throw ziguanjiaValidationError('path_invalid', '请求路径必须是相对绝对路径');
+    }
+    if (/^https?:/i.test(requestPath) || /[\r\n]/.test(requestPath) || requestPath.includes('/../')) {
+        throw ziguanjiaValidationError('path_invalid', '请求路径不允许跨域或路径逃逸');
+    }
+    if (!requestPath.startsWith('/api/')) {
+        throw ziguanjiaValidationError('path_not_allowed', 'E10 API 只能调用 /api/ 路径');
+    }
+}
+function responseDatajson(value) {
+    if (value && typeof value === 'object' && 'datajson' in value)
+        return value.datajson;
+    return value;
+}
+function isEbSessionExpired(value) {
+    const root = responseDatajson(value);
+    const code = root?.ret ?? root?.code ?? root?.status;
+    return code !== undefined && (String(code) === '-2' || String(code) === '401' || String(code) === '403');
+}
+function ebMessage(value) {
+    const root = responseDatajson(value);
+    return typeof root?.message === 'string'
+        ? root.message
+        : typeof root?.msg === 'string'
+            ? root.msg
+            : '泛微接口返回业务失败';
+}
+function ebCode(value) {
+    const root = responseDatajson(value);
+    return root?.ret ?? root?.code ?? root?.status;
+}
+/**
+ * E10 各接口的成功码口径不一：
+ * - ebuilder 自定义接口：数字 0 / 200；
+ * - 部分环境的查询/动作流接口用布尔 `true` 或字符串 `"true"` 表示成功（`"false"` 表示失败）。
+ * 因此除 0/200 外，布尔 true 与字符串 "true"（含数字字符串 "0"/"200"）也视为成功。
+ */
+export function isEbSuccessCode(code) {
+    if (code === undefined)
+        return true;
+    if (code === 0 || code === 200)
+        return true;
+    if (code === true || code === 'true')
+        return true;
+    if (typeof code === 'string') {
+        const text = code.trim();
+        return text === '0' || text === '200';
+    }
+    return false;
+}
+/**
+ * 大整数（应用 ID / 表单 ID / 数据 ID）全程按字符串处理，避免精度丢失导致链接指向错误卡片。
+ */
+function normalizeBigId(raw) {
+    if (raw === undefined || raw === null)
+        return undefined;
+    if (typeof raw === 'object')
+        return undefined;
+    const text = String(raw).trim();
+    return text === '' ? undefined : text;
+}
+function tagDataRoot(value) {
+    const root = value && typeof value === 'object' && 'datajson' in value ? value.datajson : value;
+    return root && typeof root === 'object' ? root : undefined;
+}
+/** getAppIds 返回 data 数组首元素即该资产域应用 ID。 */
+export function pickAppId(value) {
+    const data = tagDataRoot(value)?.data;
+    if (!Array.isArray(data) || data.length === 0)
+        return undefined;
+    const first = data[0];
+    const raw = first && typeof first === 'object' ? (first.appId ?? first.id) : first;
+    return normalizeBigId(raw);
+}
+/** getObjsByTag 返回 data 中 tag 命中的那条记录的 objId。 */
+export function pickObjId(value, formTag) {
+    const data = tagDataRoot(value)?.data;
+    if (!Array.isArray(data))
+        return undefined;
+    const match = data.find((item) => item && typeof item === 'object' && String(item.tag ?? '') === formTag);
+    if (!match)
+        return undefined;
+    return normalizeBigId(match.objId ?? match.id);
+}
+export function createZiguanjiaHost(ctx) {
+    let e10Session = null;
+    let sessionContext = null;
+    async function ensureSession() {
+        if (!e10Session) {
+            e10Session = await requireE10Session(ctx);
+            sessionContext = {
+                baseUrl: e10Session.getBaseUrl(),
+                profile: ctx.getGlobalOptions().profile || getActiveProfile(),
+                userId: e10Session.userId,
+                subcompany: e10Session.subcompany,
+            };
+        }
+        return e10Session;
+    }
+    async function getSession() {
+        await ensureSession();
+        return sessionContext;
+    }
+    async function runtime() {
+        return createE10RequestRuntime(ctx, await ensureSession(), {});
+    }
+    // 缓存键统一带环境标识（baseUrl），换环境即作废，不跨环境沿用。
+    const appIdCache = new Map();
+    const formIdCache = new Map();
+    const formFieldsCache = new Map();
+    const subcompanyIdCache = new Map();
+    async function ebuilderGetJson(path, query, operation) {
+        assertPath(path);
+        const response = await (await runtime()).requestJson({
+            module: 'asset',
+            operation,
+            method: 'GET',
+            path,
+            query,
+            bigIntStrings: true,
+        });
+        if (response.status === 401 || response.status === 302) {
+            throw ziguanjiaAuthError('session_expired', 'E10 登录态已失效，请先运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录后再试', { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            throw ziguanjiaNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw ziguanjiaBusinessError('http_error', `泛微接口 HTTP ${response.status}`, { code: response.status, details: { message: ebMessage(response.value) } });
+        }
+        // GET 标签接口的成功标识不统一（可能没有 ret/code/status，也可能用 1 表示成功），
+        // 这里不做业务码判定，交由调用方按 data 结构判定，避免把 status=1 误判为失败。
+        return response.value;
+    }
+    async function resolveAppId(appTag, envKey, operation) {
+        const cacheKey = `${envKey}|app|${appTag}`;
+        const cached = appIdCache.get(cacheKey);
+        if (cached)
+            return cached;
+        const value = await ebuilderGetJson(GET_APP_IDS_PATH, { tag: appTag }, operation);
+        const appId = pickAppId(value);
+        if (!appId) {
+            throw ziguanjiaValidationError('resolve_not_found', `未解析到应用标签 ${appTag} 对应的应用 ID，链接暂不可用`);
+        }
+        appIdCache.set(cacheKey, appId);
+        return appId;
+    }
+    async function resolveFormId(request) {
+        const appTag = request.appTag && request.appTag.trim() !== '' ? request.appTag : ASSET_APP_TAG;
+        const { formTag, operation } = request;
+        const session = await getSession();
+        const cacheKey = `${session.baseUrl}|${appTag}|${formTag}`;
+        const cached = formIdCache.get(cacheKey);
+        if (cached)
+            return cached;
+        const appId = await resolveAppId(appTag, session.baseUrl, operation);
+        const value = await ebuilderGetJson(GET_OBJS_BY_TAG_PATH, { appId, tag: formTag }, operation);
+        const objId = pickObjId(value, formTag);
+        if (!objId) {
+            throw ziguanjiaValidationError('resolve_not_found', `未解析到表单标识 ${formTag} 对应的表单 ID（objId），链接暂不可用`);
+        }
+        formIdCache.set(cacheKey, objId);
+        return objId;
+    }
+    async function getFormFields(formTag) {
+        const session = await getSession();
+        const cacheKey = `${session.baseUrl}|${formTag}`;
+        const cached = formFieldsCache.get(cacheKey);
+        if (cached)
+            return cached;
+        const objId = await resolveFormId({ formTag, operation: `getFormFields:${formTag}` });
+        const fd = new FormData();
+        fd.set('groupId', objId);
+        fd.set('sourceId', objId);
+        fd.set('sourceType', 'FORM');
+        fd.set('detailFieldsGroup', 'true');
+        fd.set('enableMerge', 'true');
+        fd.set('customParam', '{"terminal":""}');
+        fd.set('params', '[]');
+        const response = await (await runtime()).requestJson({
+            module: 'asset',
+            operation: `getFormFields:${formTag}`,
+            method: 'POST',
+            path: FORM_FIELDS_PATH,
+            formData: fd,
+            bigIntStrings: false,
+        });
+        if (response.status === 401 || response.status === 302) {
+            throw ziguanjiaAuthError('session_expired', 'E10 登录态已失效，请先运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录后再试', { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            throw ziguanjiaNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw ziguanjiaBusinessError('http_error', `泛微接口 HTTP ${response.status}`, { code: response.status, details: { message: ebMessage(response.value) } });
+        }
+        const value = response.value;
+        if (!isEbSuccessCode(value?.code ?? value?.status)) {
+            throw ziguanjiaBusinessError('form_fields_failed', ebMessage(value), { code: String(value?.code ?? value?.status), details: { result: value } });
+        }
+        const groups = Array.isArray(value?.data) ? value.data : [];
+        const fields = [];
+        for (const group of groups) {
+            if (!group || typeof group !== 'object')
+                continue;
+            const groupFields = group.fields;
+            if (!Array.isArray(groupFields))
+                continue;
+            for (const f of groupFields) {
+                if (!f || typeof f !== 'object')
+                    continue;
+                fields.push({
+                    name: typeof f.name === 'string' ? f.name : String(f.name ?? ''),
+                    dataKey: f.config?.dataKey !== undefined ? String(f.config.dataKey) : undefined,
+                    text: f.text !== undefined ? String(f.text) : undefined,
+                    compType: f.compType !== undefined ? String(f.compType) : undefined,
+                    mainField: f.mainField === true,
+                });
+            }
+        }
+        formFieldsCache.set(cacheKey, fields);
+        return fields;
+    }
+    /**
+     * 按分部名称精确解析分部 ID（折旧「分组计提」需当前登录人所属分部 ID）。
+     * 走 E10 组织浏览接口，name 条件 eq 精确匹配；命中 0 条或重名时明确报错，绝不臆造 ID。
+     */
+    async function resolveSubcompanyIdByName(name) {
+        const trimmed = typeof name === 'string' ? name.trim() : '';
+        if (trimmed === '') {
+            throw ziguanjiaValidationError('company_unresolved', '无法从登录会话确定当前登录人所属分部名称，请在输入中显式提供 company_ids');
+        }
+        const session = await getSession();
+        const cacheKey = `${session.baseUrl}|subcompany|${trimmed}`;
+        const cached = subcompanyIdCache.get(cacheKey);
+        if (cached)
+            return cached;
+        assertPath(SEARCH_SUBCOMPANY_PATH);
+        const response = await (await runtime()).requestJson({
+            module: 'asset',
+            operation: 'resolveSubcompany',
+            method: 'POST',
+            path: SEARCH_SUBCOMPANY_PATH,
+            body: {
+                browserMultiple: true,
+                authWecahtBook: false,
+                wxDepNeedConvertCount: 0,
+                wxEmpNeedConvertCount: 0,
+                wxTotalNeedConvertCount: 0,
+                virtualType: 'ALL',
+                cmd: 'list',
+                current: 1,
+                pageSize: 200,
+                formDatas: { name: [{ nameCondition: { id: 'eq', content: '等于', disabled: false }, name: trimmed }] },
+                quickSearchDatas: {},
+                type: 'and',
+                stopDepartment: false,
+            },
+            bigIntStrings: true,
+        });
+        if (response.status === 401 || response.status === 302) {
+            throw ziguanjiaAuthError('session_expired', 'E10 登录态已失效，请先运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录后再试', { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            throw ziguanjiaNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw ziguanjiaBusinessError('http_error', `泛微接口 HTTP ${response.status}`, { code: response.status, details: { message: ebMessage(response.value) } });
+        }
+        const value = response.value;
+        const rows = Array.isArray(value?.data?.data) ? value.data.data : [];
+        if (rows.length === 0) {
+            throw ziguanjiaValidationError('company_unresolved', `未找到分部「${trimmed}」对应的 ID，请在输入中显式提供 company_ids`);
+        }
+        if (rows.length > 1) {
+            throw ziguanjiaValidationError('company_ambiguous', `分部名称「${trimmed}」命中 ${rows.length} 条，无法唯一确定，请在输入中显式提供 company_ids`);
+        }
+        const id = normalizeBigId(rows[0]?.id ?? rows[0]?.subcompanyId);
+        if (!id) {
+            throw ziguanjiaValidationError('company_unresolved', `分部「${trimmed}」返回缺少 ID，请在输入中显式提供 company_ids`);
+        }
+        subcompanyIdCache.set(cacheKey, id);
+        return id;
+    }
+    function handleEbusiness(value) {
+        if (isEbSessionExpired(value)) {
+            throw ziguanjiaAuthError('session_expired', 'E10 登录态已失效，请先运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录后再试', { ret: ebCode(value) });
+        }
+        const code = ebCode(value);
+        if (!isEbSuccessCode(code)) {
+            throw ziguanjiaBusinessError('business_error', ebMessage(value), { code: String(code), details: { result: value } });
+        }
+        return value;
+    }
+    async function ebuilderRequest(request) {
+        const { endpoint, interfacePk, body, operation, query } = request;
+        assertPath(ebuilderPath(endpoint, interfacePk));
+        const session = await getSession();
+        const fullBody = wrapEbuilderBody(body, session.userId);
+        const response = await (await runtime()).requestJson({
+            module: 'asset',
+            operation,
+            method: 'POST',
+            path: ebuilderPath(endpoint, interfacePk),
+            query,
+            body: fullBody,
+            bigIntStrings: true,
+        });
+        if (response.status === 401 || response.status === 302) {
+            throw ziguanjiaAuthError('session_expired', 'E10 登录态已失效，请先运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录后再试', { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            throw ziguanjiaNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw ziguanjiaBusinessError('http_error', `泛微接口 HTTP ${response.status}`, { code: response.status, details: { message: ebMessage(response.value) } });
+        }
+        return handleEbusiness(response.value);
+    }
+    async function actionFlow(request) {
+        const { uniqueIndent, mainTable, operation, moduleSource } = request;
+        assertPath(ESB_TRIGGER_PATH);
+        const session = await getSession();
+        const payload = {
+            customParams: { mainTable },
+            uniqueIndent,
+            employeeId: session.userId,
+        };
+        if (moduleSource)
+            payload.moduleSource = moduleSource;
+        const response = await (await runtime()).requestJson({
+            module: 'asset',
+            operation,
+            method: 'POST',
+            path: ESB_TRIGGER_PATH,
+            body: payload,
+            bigIntStrings: true,
+        });
+        if (response.status === 401 || response.status === 302) {
+            throw ziguanjiaAuthError('session_expired', 'E10 登录态已失效，请先运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录后再试', { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            throw ziguanjiaNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw ziguanjiaBusinessError('http_error', `ESB 接口 HTTP ${response.status}`, { code: response.status, details: { message: ebMessage(response.value) } });
+        }
+        const value = response.value;
+        const resultCode = value?.resultCode;
+        if (resultCode === undefined) {
+            throw ziguanjiaBusinessError('actionflow_no_code', '动作流返回缺少 resultCode', { details: { result: value } });
+        }
+        if (resultCode !== 200) {
+            throw ziguanjiaBusinessError('actionflow_failed', `动作流执行未成功（resultCode=${resultCode}）：${value?.resultMsg || ''}`, { code: resultCode, details: { result: value }, retryable: resultCode === 507 || resultCode === 508 || resultCode === 511 });
+        }
+        return value;
+    }
+    return { ebuilderRequest, actionFlow, getSession, resolveFormId, getFormFields, resolveSubcompanyIdByName };
+}
+/**
+ * 拼卡片式查看链接 `/sp/ebdfpage/card/0/{表单ID}/{数据ID}`（去域名路径 + 当前环境地址）。
+ * 表单 ID（objId）与数据 ID 均为长整型，由调用方以字符串传入，避免精度丢失。
+ */
+export function buildCardLink(baseUrl, objId, dataId) {
+    if (typeof baseUrl !== 'string' || baseUrl.trim() === '' || !objId || !dataId)
+        return null;
+    return `${baseUrl.replace(/\/+$/u, '')}/sp/ebdfpage/card/0/${objId}/${dataId}`;
+}
+export function assertNoForbiddenKeys(value, location = 'input') {
+    if (!value || typeof value !== 'object')
+        return;
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => assertNoForbiddenKeys(item, `${location}[${index}]`));
+        return;
+    }
+    for (const [key, child] of Object.entries(value)) {
+        if (FORBIDDEN_INPUT_KEYS.has(key) || FORBIDDEN_INPUT_KEYS.has(key.toLowerCase())) {
+            throw ziguanjiaValidationError('field_forbidden', `禁止业务输入字段：${location}.${key}`);
+        }
+        assertNoForbiddenKeys(child, `${location}.${key}`);
+    }
+}