weaver-work-cli 0.1.26 → 0.1.28

package/dist/shortcuts/contract/host.js

@@ -1,5 +1,7 @@
+import { E10_SESSION_EXPIRED_MESSAGE } from '../../internal/e10/auth/messages.js';
 import { requireE10Session } from '../../internal/e10/context.js';
 import { getActiveProfile } from '../../internal/e10/auth/session.js';
+import { E10ApiError, createE10RequestRuntime, } from '../../internal/e10/request-runtime.js';
 import { ContractCliError, contractAuthError, contractNetworkError, contractValidationError, } from './errors.js';
 const DEFAULT_TIMEOUT_MS = 30_000;
 function assertPath(requestPath) {
@@ -13,38 +15,6 @@ function assertPath(requestPath) {
         throw contractValidationError('path_not_allowed', '今承达合同管理只能调用 /api/ 路径');
     }
 }
-function withQuery(baseUrl, requestPath, query = {}) {
-    const url = new URL(`${baseUrl}${requestPath}`);
-    for (const [key, value] of Object.entries(query)) {
-        if (value === undefined || value === null || value === '')
-            continue;
-        if (Array.isArray(value)) {
-            for (const item of value)
-                url.searchParams.append(key, String(item));
-        }
-        else {
-            url.searchParams.set(key, String(value));
-        }
-    }
-    return url;
-}
-async function fetchWithTimeout(url, options, timeoutMs) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-        return await fetch(url, { ...options, signal: controller.signal, redirect: 'manual' });
-    }
-    catch (error) {
-        if (error instanceof Error && error.name === 'AbortError') {
-            throw contractNetworkError('timeout', `请求超时（${timeoutMs}ms）`, { retryable: false });
-        }
-        const message = error instanceof Error ? error.message : String(error);
-        throw contractNetworkError('transport', `请求失败：${message}`, { retryable: true });
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
 function textOf(value, keys) {
     for (const key of keys) {
         const candidate = value?.[key];
@@ -111,15 +81,6 @@ function inferProfile(ctx) {
     const options = ctx.getGlobalOptions();
     return options.profile || getActiveProfile();
 }
-function requestHeaders(session) {
-    return {
-        Accept: 'application/json, text/plain, */*',
-        Cookie: session.cookieHeader(),
-        eteamsid: session.eteamsId,
-        'User-Agent': session.uaHeader(),
-        Origin: session.getBaseUrl(),
-    };
-}
 export function createContractHost(ctx, dependencies = {}) {
     let e10Session = null;
     let sessionContext = null;
@@ -144,10 +105,9 @@ export function createContractHost(ctx, dependencies = {}) {
         assertPath(path);
         const session = await ensureSession();
         const context = await getSession();
-        const headers = requestHeaders(session);
-        const finalQuery = { ...query };
+        const finalQuery = Object.fromEntries(Object.entries(query).filter(([, value]) => value !== undefined && value !== null && value !== ''));
         let finalBody = body;
-        const init = { method, headers };
+        let formData;
         if (userIdField) {
             if (!context.userId) {
                 throw contractAuthError('user_id_missing', '当前会话没有可用的用户 ID，请确认 E10 登录态');
@@ -158,26 +118,41 @@ export function createContractHost(ctx, dependencies = {}) {
                 finalBody = { ...finalBody, [userIdField]: context.userId };
         }
         if (form) {
-            const data = new FormData();
+            formData = new FormData();
             for (const [key, value] of Object.entries(form))
-                data.append(key, value);
-            init.body = data;
+                formData.append(key, value);
+        }
+        const runtime = createE10RequestRuntime(ctx, session, {
+            interceptors: dependencies.interceptors,
+            fetch: dependencies.fetch,
+        });
+        let response;
+        try {
+            response = await runtime.requestJson({
+                module: 'contract',
+                method,
+                path,
+                query: finalQuery,
+                body: formData ? undefined : finalBody,
+                formData,
+                timeoutMs,
+            });
         }
-        else if (finalBody !== undefined) {
-            headers['Content-Type'] = 'application/json;charset=UTF-8';
-            init.body = JSON.stringify(finalBody);
+        catch (error) {
+            if (error instanceof E10ApiError && error.type === 'network') {
+                throw contractNetworkError(error.subtype, error.message, {
+                    retryable: error.retryable,
+                    details: error.details,
+                });
+            }
+            throw error;
         }
-        const url = withQuery(context.baseUrl, path, finalQuery);
-        const response = await fetchWithTimeout(url, init, timeoutMs);
         if (response.status === 401 || response.status === 302) {
-            throw contractAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status, path });
-        }
-        const text = await response.text();
-        let value = {};
-        try {
-            value = text ? JSON.parse(text) : {};
+            throw contractAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status, path });
         }
-        catch {
+        const text = response.text;
+        const value = response.value;
+        if (response.parseError) {
             throw contractNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, {
                 retryable: false,
                 details: { path, status: response.status },

package/dist/shortcuts/ehr/host.js

@@ -1,4 +1,5 @@
 import { createHash } from 'node:crypto';
+import { E10_SESSION_EXPIRED_MESSAGE } from '../../internal/e10/auth/messages.js';
 import { requireE10Session } from '../../internal/e10/context.js';
 import { getActiveProfile } from '../../internal/e10/auth/session.js';
 import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
@@ -162,7 +163,7 @@ export function createEhrHost(ctx, dependencies = {}) {
             mapRuntimeNetworkError(error);
         }
         if (response.status === 401 || response.status === 302) {
-            throw ehrAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status });
+            throw ehrAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
         }
         if (response.parseError) {
             if (response.status < 200 || response.status >= 300) {

package/dist/shortcuts/esb/host.js

@@ -1,3 +1,4 @@
+import { E10_SESSION_EXPIRED_MESSAGE } from '../../internal/e10/auth/messages.js';
 import { requireE10Session } from '../../internal/e10/context.js';
 import { getActiveProfile } from '../../internal/e10/auth/session.js';
 import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
@@ -117,7 +118,7 @@ export function createEsbHost(ctx, dependencies = {}) {
             mapRuntimeNetworkError(error);
         }
         if (response.status === 401 || response.status === 302) {
-            throw esbAuthError('session_expired', 'E10 登录态已失效，请先确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status });
+            throw esbAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
         }
         if (response.parseError) {
             if (response.status < 200 || response.status >= 300) {

package/dist/shortcuts/fna/host.js

@@ -1,3 +1,4 @@
+import { E10_SESSION_EXPIRED_MESSAGE } from '../../internal/e10/auth/messages.js';
 import { requireE10Session } from '../../internal/e10/context.js';
 import { getActiveProfile } from '../../internal/e10/auth/session.js';
 import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
@@ -48,8 +49,10 @@ export function assertPath(requestPath) {
     if (/^https?:/i.test(requestPath) || /[\r\n]/.test(requestPath) || requestPath.includes('/../')) {
         throw fnaValidationError('path_invalid', '请求路径不允许跨域或路径逃逸');
     }
-    if (!requestPath.startsWith('/api/fna/') && !requestPath.startsWith('/api/app/fna/')) {
-        throw fnaValidationError('path_not_allowed', 'FNA 费控中心只能调用 /api/fna/ 或 /api/app/fna/ 路径');
+    if (!requestPath.startsWith('/api/fna/')
+        && !requestPath.startsWith('/api/app/fna/')
+        && !requestPath.startsWith('/api/secondev/fna/')) {
+        throw fnaValidationError('path_not_allowed', 'FNA 费控中心只能调用 /api/fna/、/api/app/fna/ 或 /api/secondev/fna/ 路径');
     }
 }
 function omitEmptyQueryValues(query) {
@@ -114,7 +117,7 @@ export function createFnaHost(ctx, dependencies = {}) {
             mapRuntimeNetworkError(error);
         }
         if (response.status === 401 || response.status === 302) {
-            throw fnaAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status });
+            throw fnaAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
         }
         if (response.parseError) {
             if (response.status < 200 || response.status >= 300) {

package/dist/shortcuts/fna/manifest.js

@@ -1,10 +1,11 @@
 import { fnaOperationDefinitions } from './operations/registry.js';
 /**
  * FNA 费控中心（齐业成）模块禁用/暂缓边界。
- * 11 个源接口全部落地；以下几类能力不在本 CLI，写入 manifest 供 Agent 判断，
+ * 12 个源接口全部落地；以下几类能力不在本 CLI，写入 manifest 供 Agent 判断，
  * 不得编造 operation 或绕过 CLI 直连接口：
  * - 姓名/流程名 → employeeId/workflowId 的人员与流程解析不在本模块；
- * - 借款「确认已还 confirmRepay」、核销明细等页面按钮能力未随源资料提供接口，未实现。
+ * - 借款「确认已还 confirmRepay」、核销明细等页面按钮能力未随源资料提供接口，未实现；
+ * - 报销报表 AI 问答只暴露自然语言问题，不接受也不回传 AI 生成的 SQL。
  */
 const FNA_WITHHELD = [
     {
@@ -15,6 +16,10 @@ const FNA_WITHHELD = [
         name: 'fna.resolve.person.workflow',
         reason: '姓名→employeeId、流程名→workflowId 的解析依赖人员/流程基表接口，源资料未提供；需要时请使用已提供的 ID 或由用户在对话中提供。',
     },
+    {
+        name: 'fna.expense.chart.raw.sql',
+        reason: '报销报表 AI 问答由服务端生成 SQL 并做租户隔离改写与安全校验；CLI 只接受 userInput，不暴露、不回传 SQL，也不允许调用方绕过安全校验自写 SQL。',
+    },
 ];
 function buildOperations() {
     return fnaOperationDefinitions().map((definition) => ({
@@ -30,12 +35,12 @@ function buildOperations() {
 export const fnaManifest = {
     schemaVersion: 1,
     name: 'fna',
-    title: '泛微E10齐业成费控中心（预算查询/费用中心/借款管理/发票核销）',
-    version: '0.1.0',
+    title: '泛微E10齐业成费控中心（预算查询/费用中心/报销报表/借款管理/发票核销）',
+    version: '0.1.1',
     host: 'e10-fna',
     status: 'builtin',
     sourceSkill: 'weaver-e10-qiyecheng',
-    capabilities: ['budget', 'expense', 'loan', 'invoice-writeoff'],
+    capabilities: ['budget', 'expense', 'expense-chart', 'loan', 'invoice-writeoff'],
     operations: buildOperations(),
     withheldOperations: FNA_WITHHELD,
 };

package/dist/shortcuts/fna/operations/expense-chart.js

@@ -0,0 +1,162 @@
+import { FnaCliError, fnaValidationError } from '../errors.js';
+import { fnaSuccess, READ, schemaOf, SCHEMA_INTEGER_POSITIVE, SCHEMA_STRING_NONEMPTY } from './types.js';
+import { unwrapData } from './shared.js';
+/** 实测真实查询最慢约 66.6s；超时必须覆盖该耗时，且失败后不得自动重试（每次都会消耗模型额度）。 */
+const CHART_TIMEOUT_MS = 180_000;
+const DEFAULT_MAX_ROWS = 200;
+const MAX_ROWS_LIMIT = 5000;
+const USER_INPUT_LIMIT = 500;
+const BLOCKED_MESSAGE = /拦截|高危|安全校验/;
+const CLARIFY_MESSAGE = /不明确|请补充|补充查询/;
+function requireUserInput(value) {
+    if (typeof value !== 'string' || value.trim().length === 0) {
+        throw fnaValidationError('user_input_required', 'userInput 必填（自然语言问题，不能为空白）');
+    }
+    const userInput = value.trim();
+    if (userInput.length > USER_INPUT_LIMIT) {
+        throw fnaValidationError('user_input_too_long', 'userInput 不能超过 500 个字符');
+    }
+    return userInput;
+}
+function resolveMaxRows(value) {
+    if (value === undefined || value === null || value === '')
+        return DEFAULT_MAX_ROWS;
+    if (typeof value !== 'number' || !Number.isInteger(value) || value < 1 || value > MAX_ROWS_LIMIT) {
+        throw fnaValidationError('max_rows_invalid', 'maxRows 必须是 1 到 5000 的整数');
+    }
+    return value;
+}
+function mapChartApiError(error) {
+    if (error instanceof FnaCliError && error.type === 'api') {
+        const code = Number(error.code);
+        if (code === 400) {
+            throw fnaValidationError('user_input_required', 'userInput 未通过服务端校验（缺少或非法）');
+        }
+        if (code === 500) {
+            throw new FnaCliError('api', 'server_error', error.message || '报销报表服务异常', {
+                code: error.code ?? 500,
+                retryable: false,
+                details: error.details,
+            });
+        }
+    }
+    throw error;
+}
+function dataTypeOf(value) {
+    if (value === null)
+        return 'null';
+    if (Array.isArray(value))
+        return 'array';
+    return typeof value;
+}
+function isRow(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+function collectColumns(rows) {
+    const columns = [];
+    const seen = new Set();
+    for (const row of rows) {
+        for (const key of Object.keys(row)) {
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            columns.push(key);
+        }
+    }
+    return columns;
+}
+function classifyMessage(message) {
+    if (BLOCKED_MESSAGE.test(message))
+        return 'blocked';
+    if (CLARIFY_MESSAGE.test(message))
+        return 'clarify';
+    return undefined;
+}
+/**
+ * 归一化 getExpenseChart 的 data。code 恒为 200，成败只看 data 形态：
+ * 对象数组 → rows/empty；追问/安全拦截文案 → clarify/blocked（按文案推断）；其余 → unexpected。
+ * maxRows 只截断本地返回，列名仍按服务端全量结果收集。
+ */
+function normalizeChart(data, maxRows) {
+    if (Array.isArray(data) && data.every(isRow)) {
+        const columns = collectColumns(data);
+        const rows = data.slice(0, maxRows);
+        if (data.length === 0) {
+            return fnaSuccess('fna.expense.chart', {
+                kind: 'empty',
+                columns,
+                rows,
+                rowCount: 0,
+                truncated: false,
+            }, {
+                requestedRows: 0,
+                returnedRows: 0,
+                maxRows,
+            });
+        }
+        return fnaSuccess('fna.expense.chart', {
+            kind: 'rows',
+            columns,
+            rows,
+            rowCount: data.length,
+            truncated: rows.length < data.length,
+        }, {
+            requestedRows: data.length,
+            returnedRows: rows.length,
+            maxRows,
+        });
+    }
+    if (typeof data === 'string') {
+        const kind = classifyMessage(data);
+        if (kind) {
+            return fnaSuccess('fna.expense.chart', { kind, message: data }, { messageKindInferred: true });
+        }
+    }
+    return fnaSuccess('fna.expense.chart', { kind: 'unexpected' }, { dataType: dataTypeOf(data) });
+}
+/**
+ * 报销报表 AI 问答（只读，但每次调用消耗一次大模型对话 + 一次 SQL）。
+ * GET /api/secondev/fna/getExpenseChart?userInput=...
+ * 只接受自然语言问题，不接受、不回传 SQL；maxRows 仅做本地截断。
+ */
+const fnaExpenseChart = {
+    name: 'fna.expense.chart',
+    resource: 'expense',
+    method: 'expense.chart',
+    action: 'fna.expense.chart',
+    summary: '报销报表 AI 问答：用自然语言查询分组/排名/趋势，返回 kind=rows/empty/clarify/blocked/unexpected；maxRows 只截断本地展示',
+    capability: 'expense-chart',
+    risk: READ,
+    inputSchema: schemaOf({
+        userInput: {
+            ...SCHEMA_STRING_NONEMPTY,
+            maxLength: USER_INPUT_LIMIT,
+            description: '自然语言问题（必填，≤500 字符）。只写业务问题，不要传 SQL，也不要自拼当前用户/部门 ID',
+        },
+        maxRows: {
+            ...SCHEMA_INTEGER_POSITIVE,
+            maximum: MAX_ROWS_LIMIT,
+            description: '本地展示行数上限，默认 200，最大 5000；不传给服务端，不改变查询',
+        },
+    }, { required: ['userInput'], description: '报销报表 AI 问答（二开接口，每次消耗一次大模型对话与一次 SQL）' }),
+    handler: async (args, { host }) => {
+        const userInput = requireUserInput(args.userInput);
+        const maxRows = resolveMaxRows(args.maxRows);
+        let response;
+        try {
+            response = await host.request({
+                method: 'GET',
+                path: '/api/secondev/fna/getExpenseChart',
+                query: { userInput },
+                timeoutMs: CHART_TIMEOUT_MS,
+            });
+        }
+        catch (error) {
+            throw mapChartApiError(error);
+        }
+        return normalizeChart(unwrapData(response), maxRows);
+    },
+};
+export const expenseChartOperations = [
+    fnaExpenseChart,
+];

package/dist/shortcuts/fna/operations/registry.js

@@ -1,6 +1,7 @@
 import { fnaValidationError } from '../errors.js';
 import { budgetOperations } from './budget.js';
 import { expenseCenterOperations } from './expense-center.js';
+import { expenseChartOperations } from './expense-chart.js';
 import { loanOperations } from './loan.js';
 import { invoiceWriteOffOperations } from './invoice-writeoff.js';
 function buildRegistry() {
@@ -8,6 +9,7 @@ function buildRegistry() {
     const definitions = [
         ...budgetOperations,
         ...expenseCenterOperations,
+        ...expenseChartOperations,
         ...loanOperations,
         ...invoiceWriteOffOperations,
     ];

package/dist/shortcuts/hrm/host.js

@@ -1,3 +1,4 @@
+import { E10_SESSION_EXPIRED_MESSAGE } from '../../internal/e10/auth/messages.js';
 import { requireE10Session } from '../../internal/e10/context.js';
 import { getActiveProfile } from '../../internal/e10/auth/session.js';
 import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
@@ -114,7 +115,7 @@ export function createHrmHost(ctx, dependencies = {}) {
             mapRuntimeNetworkError(error);
         }
         if (response.status === 401 || response.status === 302) {
-            throw hrmAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status });
+            throw hrmAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
         }
         if (response.parseError) {
             if (response.status < 200 || response.status >= 300) {

package/dist/shortcuts/im/host.js

@@ -2,6 +2,7 @@ import { createHash } from 'node:crypto';
 import { existsSync } from 'node:fs';
 import { mkdir, readFile, stat, writeFile } from 'node:fs/promises';
 import { dirname, extname, resolve } from 'node:path';
+import { E10_SESSION_EXPIRED_MESSAGE } from '../../internal/e10/auth/messages.js';
 import { requireE10Session } from '../../internal/e10/context.js';
 import { getActiveProfile } from '../../internal/e10/auth/session.js';
 import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
@@ -120,7 +121,7 @@ export function createImHost(ctx, dependencies = {}) {
             mapRuntimeNetworkError(error);
         }
         if (response.status === 401 || response.status === 302) {
-            throw imAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status });
+            throw imAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
         }
         if (response.parseError) {
             if (response.status < 200 || response.status >= 300) {
@@ -159,7 +160,7 @@ export function createImHost(ctx, dependencies = {}) {
                 signal: controller.signal,
             });
             if (resp.status === 401 || resp.status === 302) {
-                throw imAuthError('session_expired', '登录态已失效：下载需有效登录态，请重新登录后重试');
+                throw imAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE);
             }
             if (resp.status !== 200) {
                 throw new ImCliError('api', 'download_failed', `下载失败 HTTP ${resp.status}`, {

package/dist/shortcuts/invoice/host.js

@@ -1,5 +1,6 @@
 import { createHash } from 'node:crypto';
 import { readFile } from 'node:fs/promises';
+import { E10_REAUTH_GUIDANCE, E10_SESSION_EXPIRED_MESSAGE } from '../../internal/e10/auth/messages.js';
 import { requireE10Session } from '../../internal/e10/context.js';
 import { getActiveProfile } from '../../internal/e10/auth/session.js';
 import { createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
@@ -179,7 +180,7 @@ export function createInvoiceHost(ctx, dependencies = {}) {
             await clearCachedInvoiceToken();
             if (canRetry)
                 return retry();
-            throw invoiceAuthError('invoice_session_expired', '发票业务登录态已失效，已清理本地发票 Token；请重新运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 后再试', { ret: code });
+            throw invoiceAuthError('invoice_session_expired', `发票业务登录态已失效，已清理本地发票 Token。${E10_REAUTH_GUIDANCE}`, { ret: code });
         }
         throw businessError(value);
     }
@@ -198,7 +199,7 @@ export function createInvoiceHost(ctx, dependencies = {}) {
             trustedHeaders: trustedInvoiceHeaders(token),
         });
         if (response.status === 401 || response.status === 302) {
-            throw invoiceAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录', { httpStatus: response.status });
+            throw invoiceAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
         }
         if (response.parseError) {
             if (response.status < 200 || response.status >= 300) {
@@ -257,7 +258,7 @@ export function createInvoiceHost(ctx, dependencies = {}) {
             trustedHeaders: trustedInvoiceHeaders(token),
         });
         if (response.status === 401 || response.status === 302) {
-            throw invoiceAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录', { httpStatus: response.status });
+            throw invoiceAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
         }
         if (response.parseError) {
             throw invoiceNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
@@ -292,7 +293,7 @@ export function createInvoiceHost(ctx, dependencies = {}) {
             trustedHeaders: trustedInvoiceHeaders(token),
         });
         if (response.status === 401 || response.status === 302) {
-            throw invoiceAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录', { httpStatus: response.status });
+            throw invoiceAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
         }
         if (response.parseError) {
             throw invoiceNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
@@ -319,7 +320,7 @@ export function createInvoiceHost(ctx, dependencies = {}) {
             trustedHeaders: trustedInvoiceHeaders(token),
         });
         if (response.status === 401 || response.status === 302) {
-            throw invoiceAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录', { httpStatus: response.status });
+            throw invoiceAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
         }
         const contentType = response.contentType;
         const declaredLength = Number(response.headers.get('content-length'));
@@ -340,7 +341,7 @@ export function createInvoiceHost(ctx, dependencies = {}) {
                 await clearCachedInvoiceToken();
                 if (canRetryExpiredToken && token)
                     return invoiceDownload({ id, fid, needLog, operation, timeoutMs }, false);
-                throw invoiceAuthError('invoice_session_expired', '发票业务登录态已失效，已清理本地发票 Token；请重新运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 后再试', { ret: responseCode(value), status: response.status });
+                throw invoiceAuthError('invoice_session_expired', `发票业务登录态已失效，已清理本地发票 Token。${E10_REAUTH_GUIDANCE}`, { ret: responseCode(value), status: response.status });
             }
             throw new InvoiceCliError('api', 'download_failed', responseMessage(value) || `下载失败（HTTP ${response.status}）`, {
                 code: response.status,