weaver-work-cli 0.1.39 → 0.1.42

package/dist/shortcuts/recruit-stage/context.js

@@ -0,0 +1,119 @@
+import { join, resolve } from 'node:path';
+import { existsSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { createRecruitContextLoader, } from '../ehr/operations/recruit.js';
+import { rsFail } from './errors.js';
+const flowMemo = new Map();
+const digitalMenuMemo = new Map();
+function cacheDirFor(baseUrl) {
+    const url = new URL(baseUrl);
+    const host = url.hostname + (url.port ? `_${url.port}` : '');
+    const envRoot = process.env.E10_SKILL_CACHE_DIR;
+    if (envRoot)
+        return join(envRoot, host);
+    const home = process.env.WEAVER_WORK_CLI_HOME || process.env.WORK_CLI_HOME || resolve(homedir(), '.weaver-work-cli');
+    return join(home, 'env-cache', 'recruit-ops', host);
+}
+/**
+ * 磁盘缓存兼容：脚本版（recruit-stage 技能）播种的缓存里若已带 defaultRecruitFlow /
+ * lists.digital_human，直接复用（同环境免请求）；CLI 侧则运行时解析一次并 memo。
+ */
+async function readLegacyCacheExtra(baseUrl) {
+    try {
+        const dir = cacheDirFor(baseUrl);
+        if (!existsSync(dir))
+            return { defaultRecruitFlow: null, digitalHumanMenu: null };
+        const files = (await import('node:fs/promises')).readdir(dir);
+        const jsonFiles = (await files).filter((f) => f.endsWith('.json'));
+        if (jsonFiles.length !== 1)
+            return { defaultRecruitFlow: null, digitalHumanMenu: null };
+        const raw = JSON.parse(await readFile(join(dir, jsonFiles[0]), 'utf8'));
+        const flow = raw?.defaultRecruitFlow && raw.defaultRecruitFlow.id
+            ? { id: String(raw.defaultRecruitFlow.id), name: String(raw.defaultRecruitFlow.name || '') }
+            : null;
+        const dh = raw?.lists?.digital_human?.listId
+            ? {
+                menuName: String(raw.lists.digital_human.menuName || '面试数字人配置'),
+                listId: String(raw.lists.digital_human.listId),
+                cusMenuId: String(raw.lists.digital_human.cusMenuId || ''),
+            }
+            : null;
+        return { defaultRecruitFlow: flow, digitalHumanMenu: dh };
+    }
+    catch {
+        return { defaultRecruitFlow: null, digitalHumanMenu: null };
+    }
+}
+/** 默认招聘流程解析：招聘设置/流程列表中「默认启用」的那条（运行时解析，跨环境不写死）。 */
+async function resolveDefaultRecruitFlow(host, baseUrl, appId) {
+    const memoKey = baseUrl;
+    if (flowMemo.has(memoKey))
+        return flowMemo.get(memoKey) ?? null;
+    const legacy = await readLegacyCacheExtra(baseUrl);
+    if (legacy.defaultRecruitFlow) {
+        flowMemo.set(memoKey, legacy.defaultRecruitFlow);
+        return legacy.defaultRecruitFlow;
+    }
+    let result = null;
+    try {
+        // 招聘流程配置（ hire structures ）：优先业务配置通道；接口不可用或为空时保持 null（由摘要标注"未解析到默认流程"）
+        const r = await host.request({
+            path: '/api/recruit/position/recruitFlow/list',
+            method: 'POST',
+            body: { appId, current: 1, pageSize: 50 },
+            operation: 'context.defaultRecruitFlow',
+        });
+        const rows = r?.data?.list || r?.data?.rows || r?.data || [];
+        const list = Array.isArray(rows) ? rows : [];
+        const enabled = list.find((x) => x && (x.isDefault === true || Number(x.isDefault) === 1 || x.default_flow === '1'))
+            || list.find((x) => x && x.id);
+        if (enabled?.id) {
+            result = { id: String(enabled.id), name: String(enabled.name || enabled.flow_name || '') };
+        }
+    }
+    catch { /* 接口形态不符/未开放：保持 null，不阻塞建职位 */ }
+    flowMemo.set(memoKey, result);
+    return result;
+}
+async function resolveDigitalHumanMenu(host, baseUrl, cache) {
+    const memoKey = baseUrl;
+    if (digitalMenuMemo.has(memoKey))
+        return digitalMenuMemo.get(memoKey) ?? null;
+    const legacy = await readLegacyCacheExtra(baseUrl);
+    if (legacy.digitalHumanMenu) {
+        digitalMenuMemo.set(memoKey, legacy.digitalHumanMenu);
+        return legacy.digitalHumanMenu;
+    }
+    // 从 all_search 菜单里按别名找（跨基线菜单名不同：面试数字人配置/数字人配置）
+    const allSearch = (cache.lists?.all_search || []);
+    const candidates = allSearch.filter((m) => m.listId);
+    let hit = (candidates.find((m) => (m.menuName || '').includes('面试数字人'))
+        || candidates.find((m) => (m.menuName || '').includes('数字人配置'))) ?? null;
+    digitalMenuMemo.set(memoKey, hit);
+    return hit;
+}
+const loaders = new Map();
+export function createRecruitStageContext() {
+    return async (host) => {
+        const loaderKey = 'shared';
+        if (!loaders.has(loaderKey))
+            loaders.set(loaderKey, createRecruitContextLoader());
+        const cache = await loaders.get(loaderKey).load(host);
+        const baseUrl = (await host.getSession()).baseUrl.replace(/\/+$/, '');
+        const [defaultRecruitFlow, digitalHumanMenu] = await Promise.all([
+            resolveDefaultRecruitFlow(host, baseUrl, cache.appId),
+            resolveDigitalHumanMenu(host, baseUrl, cache),
+        ]);
+        return { ...cache, defaultRecruitFlow, digitalHumanMenu };
+    };
+}
+/** 供 operation 内直接取上下文的辅助（失败统一转 rs 错误）。 */
+export async function loadContext(host) {
+    try {
+        return await createRecruitStageContext()(host);
+    }
+    catch (e) {
+        throw rsFail(e?.message || '招聘环境上下文解析失败', { stage: 'context' });
+    }
+}

package/dist/shortcuts/recruit-stage/continuation.js

@@ -0,0 +1,73 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { resolve } from 'node:path';
+import { rsValidationError } from './errors.js';
+function stateRoot(ctx) {
+    const configured = ctx?.config?.path();
+    if (configured)
+        return resolve(configured, '..');
+    return process.env.WEAVER_WORK_CLI_HOME || process.env.WORK_CLI_HOME || resolve(homedir(), '.weaver-work-cli');
+}
+async function loadKey(ctx) {
+    const keysDir = resolve(stateRoot(ctx), 'keys');
+    const filename = resolve(keysDir, 'recruit-stage-continuation.key');
+    await mkdir(keysDir, { recursive: true, mode: 0o700 });
+    if (existsSync(filename))
+        return readFile(filename);
+    const key = randomBytes(32);
+    try {
+        await writeFile(filename, key, { flag: 'wx', mode: 0o600 });
+        if (process.platform !== 'win32')
+            await chmod(filename, 0o600).catch(() => undefined);
+        return key;
+    }
+    catch {
+        return readFile(filename);
+    }
+}
+function encode(value) {
+    return Buffer.from(JSON.stringify(value)).toString('base64url');
+}
+function signature(payload, key) {
+    return createHmac('sha256', key).update(payload).digest('base64url');
+}
+export function createRecruitStageContinuationSigner(ctx) {
+    return {
+        async issue(payload, ttlMs = 10 * 60_000) {
+            const issuedAt = Date.now();
+            const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
+            const sig = signature(body, await loadKey(ctx));
+            return `${body}.${sig}`;
+        },
+        async verify(token, expectedOperation) {
+            if (typeof token !== 'string' || !token.includes('.')) {
+                throw rsValidationError('continuation_invalid', 'continuation 无效');
+            }
+            const [body, provided] = token.split('.');
+            const expected = signature(body, await loadKey(ctx));
+            const valid = provided.length === expected.length
+                && timingSafeEqual(Buffer.from(provided), Buffer.from(expected));
+            if (!valid)
+                throw rsValidationError('continuation_invalid', 'continuation 签名校验失败');
+            let payload;
+            try {
+                payload = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
+            }
+            catch {
+                throw rsValidationError('continuation_invalid', 'continuation 载荷解析失败');
+            }
+            if (!payload || typeof payload !== 'object') {
+                throw rsValidationError('continuation_invalid', 'continuation 载荷必须是对象');
+            }
+            if (typeof payload.expiresAt === 'number' && Date.now() > payload.expiresAt) {
+                throw rsValidationError('continuation_expired', 'continuation 已过期，请重新 prepare');
+            }
+            if (payload.operation && String(payload.operation) !== String(expectedOperation)) {
+                throw rsValidationError('continuation_operation_mismatch', `continuation 属于操作 ${String(payload.operation)}，不能用于 ${expectedOperation}`);
+            }
+            return payload;
+        },
+    };
+}

package/dist/shortcuts/recruit-stage/errors.js

@@ -0,0 +1,65 @@
+import { CliError, ExitCode } from '../../core/errors.js';
+/**
+ * recruit-stage 模块错误类型。
+ * 形态与 ehr 模块一致（type/subtype/details/partialData），
+ * 前缀 rs 避免与 ehr 的错误类型混淆。
+ */
+export class RecruitStageCliError extends CliError {
+    type;
+    subtype;
+    code;
+    retryable;
+    stage;
+    details;
+    partialData;
+    constructor(type, subtype, message, options = {}) {
+        super(message, options.exitCode ?? ExitCode.InternalError);
+        this.name = 'RecruitStageCliError';
+        this.type = type;
+        this.subtype = subtype;
+        this.code = options.code;
+        this.retryable = options.retryable ?? false;
+        this.stage = options.stage;
+        this.details = options.details;
+        this.partialData = options.partialData;
+    }
+}
+export function rsValidationError(subtype, message, details) {
+    return new RecruitStageCliError('validation', subtype, message, {
+        details,
+        exitCode: ExitCode.UsageError,
+    });
+}
+export function rsAuthError(subtype, message, details) {
+    return new RecruitStageCliError('authentication', subtype, message, {
+        details,
+        exitCode: ExitCode.AuthError,
+    });
+}
+export function rsNetworkError(subtype, message, options = {}) {
+    return new RecruitStageCliError('network', subtype, message, {
+        ...options,
+        retryable: options.retryable ?? true,
+        exitCode: ExitCode.NetworkError,
+    });
+}
+export function rsConfirmationError(action, details) {
+    return new RecruitStageCliError('confirmation', 'required', '该操作需要明确确认', {
+        details: { action, ...details },
+        exitCode: ExitCode.ConfirmationRequired,
+    });
+}
+/** 业务失败（对应脚本版 throw new Error(...) 的主通道）。 */
+export function rsFail(message, details) {
+    return new RecruitStageCliError('api', 'business_error', message, {
+        details,
+        exitCode: ExitCode.GeneralError,
+    });
+}
+export function rsPartialError(message, partialData, details) {
+    return new RecruitStageCliError('partial', 'write_uncertain', message, {
+        details,
+        partialData,
+        exitCode: ExitCode.Partial,
+    });
+}

package/dist/shortcuts/recruit-stage/host.js

@@ -0,0 +1,109 @@
+import { E10_SESSION_EXPIRED_MESSAGE } from '../../internal/e10/auth/messages.js';
+import { requireE10Session } from '../../internal/e10/context.js';
+import { getActiveProfile } from '../../internal/e10/auth/session.js';
+import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
+import { isE10SessionExpiredResponse } from '../../internal/e10/auth-recovery.js';
+import { rsAuthError, rsNetworkError, RecruitStageCliError, rsValidationError } from './errors.js';
+function inferProfile(ctx) {
+    const options = ctx.getGlobalOptions();
+    return options.profile || getActiveProfile();
+}
+export function assertPath(requestPath) {
+    if (typeof requestPath !== 'string' || !requestPath.startsWith('/') || requestPath.startsWith('//')) {
+        throw rsValidationError('path_invalid', '请求路径必须是相对绝对路径');
+    }
+    if (/^https?:/i.test(requestPath) || /[\r\n]/.test(requestPath) || requestPath.includes('/../')) {
+        throw rsValidationError('path_invalid', '请求路径不允许跨域或路径逃逸');
+    }
+    if (!requestPath.startsWith('/api/')) {
+        throw rsValidationError('path_not_allowed', '只能调用 /api/ 路径');
+    }
+}
+/**
+ * 与 ehr host 的刻意差异：**不做全局 isBusinessSuccess 强判定**。
+ * 原因：EB 表单引擎各接口响应契约不一（getListDatas 返回 {data:{...}} 未必带 status/success/code），
+ * 脚本版（write-op/e10-request.mjs）也只在 saveFormData 等个别接口做业务判定——
+ * 业务成功判定留给各 operation 按接口语义自行处理，宿主只判 HTTP 状态与会话失效。
+ */
+export function createRecruitStageHost(ctx, dependencies = {}) {
+    let e10Session = null;
+    let sessionContext = null;
+    const requireSession = dependencies.requireSession
+        || ((innerCtx) => requireE10Session(innerCtx, { skipProfileEnrichment: true }));
+    async function ensureSession() {
+        if (!e10Session) {
+            e10Session = await requireSession(ctx);
+            sessionContext = {
+                baseUrl: e10Session.getBaseUrl(),
+                profile: inferProfile(ctx),
+                userId: e10Session.userId,
+                tenantKey: e10Session.tenantKey,
+                eteamsId: e10Session.eteamsId,
+            };
+        }
+        return e10Session;
+    }
+    async function getSession() {
+        await ensureSession();
+        return sessionContext;
+    }
+    async function runtime() {
+        return createE10RequestRuntime(ctx, await ensureSession(), {
+            interceptors: dependencies.interceptors,
+            fetch: dependencies.fetch,
+        });
+    }
+    async function request(request) {
+        const { method, path, query, body, operation, multipart, headers: extraHeaders = {}, timeoutMs = 30_000, } = request;
+        assertPath(path);
+        const resolvedMethod = method || (body === undefined && multipart === undefined ? 'GET' : 'POST');
+        let response;
+        try {
+            response = await (await runtime()).requestJson({
+                module: 'recruit-stage',
+                operation,
+                method: resolvedMethod,
+                path,
+                query,
+                body: multipart === undefined ? body : undefined,
+                formData: multipart,
+                headers: { 'X-Requested-With': 'XMLHttpRequest', ...extraHeaders },
+                timeoutMs,
+            });
+        }
+        catch (error) {
+            if (error instanceof E10ApiError && error.type === 'network') {
+                throw rsNetworkError(error.subtype, error.message, {
+                    retryable: error.retryable,
+                    details: error.details,
+                });
+            }
+            throw error;
+        }
+        if (isE10SessionExpiredResponse(response)) {
+            throw rsAuthError('session_expired', E10_SESSION_EXPIRED_MESSAGE, { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            if (response.status < 200 || response.status >= 300) {
+                throw new RecruitStageCliError('api', 'http_error', `泛微接口 HTTP ${response.status}`, {
+                    code: response.status,
+                    details: { status: response.status },
+                    exitCode: 1,
+                });
+            }
+            throw rsNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw new RecruitStageCliError('api', 'http_error', `泛微接口 HTTP ${response.status}`, {
+                code: response.status,
+                details: { status: response.status, message: response.value?.msg },
+                exitCode: 1,
+            });
+        }
+        // 注意：运行时对响应做了 parseJsonPreservingBigInts（16+ 位整数加引号保精度），
+        // 业务代码拿到的 18 位 id 已是字符串形态——脚本版「从原文提取 formDataIds 防丢精度」的
+        // 特殊处理在 CLI 侧不再需要。
+        return response.value;
+    }
+    return { request, getSession };
+}

package/dist/shortcuts/recruit-stage/index.js

@@ -0,0 +1,115 @@
+import { readFile } from 'node:fs/promises';
+import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { createRecruitStageContinuationSigner } from './continuation.js';
+import { createRecruitStageHost } from './host.js';
+import { recruitStageManifest } from './manifest.js';
+import { executeRecruitStageOperation } from './operations/registry.js';
+import { createRecruitStageContext } from './context.js';
+import { rsValidationError } from './errors.js';
+function asOptions(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+/** Windows PowerShell 管道可能写入 UTF-8 BOM，JSON.parse 不接受前导 BOM，先剥离。 */
+function stripBom(value) {
+    return value.replace(/^\uFEFF+/, '');
+}
+export async function inputFrom(options, extra = {}) {
+    const opts = asOptions(options);
+    let input = {};
+    if (opts.input && opts.inputJson) {
+        throw rsValidationError('input_conflict', '不能同时传 --input 和 --input-json');
+    }
+    if (opts.inputJson) {
+        input = parseJsonInput(String(opts.inputJson), '--input-json');
+    }
+    if (opts.input) {
+        let raw;
+        try {
+            raw = stripBom(opts.input === '-' ? await readStdin() : await readFile(String(opts.input), 'utf8'));
+        }
+        catch {
+            throw rsValidationError('input_unreadable', `无法读取 --input：${String(opts.input)}`);
+        }
+        input = parseJsonInput(raw, '--input');
+    }
+    return {
+        ...input,
+        ...Object.fromEntries(Object.entries(extra).filter(([, value]) => value !== undefined && value !== '')),
+    };
+}
+function parseJsonInput(raw, label) {
+    try {
+        const parsed = JSON.parse(stripBom(raw));
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            throw new Error('input must be an object');
+        }
+        return parsed;
+    }
+    catch {
+        throw rsValidationError('input_invalid', `${label} 不是合法 JSON 对象`);
+    }
+}
+export function successEnvelope(operation, result) {
+    return {
+        schemaVersion: 1,
+        ok: true,
+        operation,
+        data: result.data === undefined ? null : result.data,
+        ...(result.meta ? { meta: result.meta } : {}),
+        warnings: [],
+    };
+}
+function failureEnvelope(error) {
+    const structured = error;
+    return {
+        schemaVersion: 1,
+        ok: false,
+        ...(structured?.partialData === undefined ? {} : { data: structured.partialData }),
+        error: toErrorEnvelope(error),
+    };
+}
+async function executeAndPrint(ctx, operation, input) {
+    try {
+        const host = createRecruitStageHost(ctx);
+        const contextLoader = createRecruitStageContext();
+        const result = await executeRecruitStageOperation(operation, input, {
+            ctx,
+            host,
+            continuation: createRecruitStageContinuationSigner(ctx),
+            recruitContext: () => contextLoader(host),
+        });
+        ctx.output.write(successEnvelope(operation, result), { json: true });
+    }
+    catch (error) {
+        console.error(JSON.stringify(failureEnvelope(error), null, 2));
+        process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
+    }
+}
+export const recruitStageShortcut = {
+    name: 'recruit-stage',
+    description: '泛微E10招聘助手（JD生成/简历建档/AI面试邀约）CLI',
+    category: 'shortcut',
+    register({ program, action }) {
+        const rs = program.command('recruit-stage').description('泛微E10招聘助手（招聘启事生成/简历解析建档/AI面试邀约与反馈）');
+        rs.command('schema')
+            .description('Print recruit-stage operation manifest for agents')
+            .action(action((ctx) => {
+            ctx.output.write(recruitStageManifest, { json: true });
+        }));
+        rs.command('run')
+            .description('Run a recruit-stage operation with JSON input')
+            .argument('<operation>', 'operation name, e.g. recruit-stage.jd.create.prepare')
+            .option('--input <path>', 'JSON input file, or - for stdin')
+            .option('--input-json <json>', 'inline JSON input object')
+            .action(action(async (ctx, operation, options) => {
+            await executeAndPrint(ctx, String(operation), await inputFrom(options));
+        }));
+    },
+};

package/dist/shortcuts/recruit-stage/manifest.js

@@ -0,0 +1,29 @@
+import { recruitStageOperationDefinitions } from './operations/registry.js';
+/**
+ * 招聘助手（recruit-stage）模块清单。
+ * 面向小E「人事管理 → 招聘入职」场景：招聘启事生成 / 简历建档与匹配 / AI 面试邀约与反馈。
+ * 产物口径：写操作成功后返回可点击的 Markdown 双链接（详情页 + 列表定位）。
+ */
+function buildOperations() {
+    return recruitStageOperationDefinitions().map((definition) => ({
+        name: definition.name,
+        resource: definition.resource,
+        summary: definition.summary,
+        ...(definition.capability ? { capability: definition.capability } : {}),
+        risk: definition.risk,
+        ...(definition.requiresConfirmation ? { requiresConfirmation: true } : {}),
+        inputSchema: definition.inputSchema,
+    }));
+}
+export const recruitStageManifest = {
+    schemaVersion: 1,
+    name: 'recruit-stage',
+    title: '泛微E10招聘助手（JD生成/简历建档/AI面试邀约）',
+    version: '0.1.0',
+    host: 'e10-recruit-stage',
+    status: 'builtin',
+    sourceSkill: 'weaver-e10-recruit-stage',
+    capabilities: ['recruit.jd.create', 'recruit.resume.import', 'recruit.interview.arrange', 'recruit.interview.feedback', 'recruit.list', 'recruit.candidate.search'],
+    operations: buildOperations(),
+    withheldOperations: [],
+};