weaver-work-cli 0.1.4 → 0.1.6

package/dist/shortcuts/meeting/operations/shared.js

@@ -0,0 +1,112 @@
+/** 保留凭据头：输入里出现即拒绝（认证由 E10 runtime 托管）。 */
+const FORBIDDEN_KEYS = new Set([
+    'cookie',
+    'eteamsid',
+    'eteam_sid',
+    'token',
+    'authorization',
+    'appkey',
+    'app_secret',
+    'appsecret',
+]);
+export function asObject(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? { ...value }
+        : {};
+}
+export function assertNoForbiddenKeys(input) {
+    for (const key of Object.keys(input)) {
+        if (FORBIDDEN_KEYS.has(key.toLowerCase())) {
+            throw meetingValidationError('forbidden_input_key', `输入不允许携带认证字段：${key}`);
+        }
+    }
+}
+import { meetingValidationError } from '../errors.js';
+/** 校验 yyyy-MM-dd HH:mm（标准版 @DateTimeFormat 契约），返回原串。 */
+export function assertDateTimeMinute(value, label) {
+    if (typeof value !== 'string' || !/^\d{4}-\d{2}-\d{2} \d{2}:\d{2}$/.test(value)) {
+        throw meetingValidationError('datetime_invalid', `${label} 必须是 yyyy-MM-dd HH:mm 格式`);
+    }
+    return value;
+}
+/** 校验 yyyy-MM-dd，返回原串。 */
+export function assertDate(value, label) {
+    if (typeof value !== 'string' || !/^\d{4}-\d{2}-\d{2}$/.test(value)) {
+        throw meetingValidationError('date_invalid', `${label} 必须是 yyyy-MM-dd 格式`);
+    }
+    return value;
+}
+/** 长 id 一律转字符串（超 2^53 数字会失真）。 */
+export function toIdString(value, label) {
+    if (typeof value === 'number') {
+        if (!Number.isSafeInteger(value)) {
+            throw meetingValidationError('id_invalid', `${label} 超过安全整数范围，必须用字符串传`);
+        }
+        return String(value);
+    }
+    if (typeof value === 'string' && /^\d+$/.test(value))
+        return value;
+    throw meetingValidationError('id_invalid', `${label} 必须是数字 id（超长 id 用字符串）`);
+}
+/** 逗号分隔 id 串：接受数组或字符串，输出字符串。 */
+export function toIdCsv(value, label) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    const parts = Array.isArray(value)
+        ? value
+        : String(value).split(',');
+    return parts.map((item) => toIdString(item, label).trim()).filter(Boolean).join(',');
+}
+/** 标准版列表响应归一化：提取 rows/displayData/data 数组。 */
+export function extractRows(value) {
+    const data = value?.data ?? value;
+    if (Array.isArray(data?.displayData)) {
+        return { rows: data.displayData, total: data.total };
+    }
+    if (Array.isArray(data?.data?.rows)) {
+        return { rows: data.data.rows, total: data.data.count ?? data.total };
+    }
+    if (Array.isArray(data?.rows)) {
+        return { rows: data.rows, total: data.count ?? data.total };
+    }
+    if (Array.isArray(data?.data)) {
+        return { rows: data.data, total: data.total };
+    }
+    if (Array.isArray(data?.datas)) {
+        return { rows: data.datas, total: data.total };
+    }
+    return { rows: [], total: 0 };
+}
+/** 冲突接口返回归一化：提取 cansub（是否可提交）与冲突描述。 */
+export function extractConflict(value) {
+    const payload = value?.data ?? value ?? {};
+    const cansubRaw = payload.cansub ?? payload.canSub;
+    const cansub = typeof cansubRaw === 'boolean' ? cansubRaw : undefined;
+    const message = [payload.conflictMsg, payload.conflictmsg, payload.message, payload.msg]
+        .find((item) => typeof item === 'string' && item.trim()) || '';
+    return { cansub, message };
+}
+/**
+ * 回查会议是否存在且可读（getMeetingDetailField）。
+ *
+ * 注意：**权限判定不在 CLI 侧做**。源码依据：
+ * - MeetingPermissionEvent 用 MeetingBaseServiceUtils.getShowButtons(会议, operateType, tenant, user)
+ *   按会议状态 + 会议基础设置 + 权限判定按钮，并在不通过时返回本地化提示
+ *   （如"您没有变更权限！"/"您没有取消权限！"/"您没有提前结束权限！"）；
+ * - getMeetingDetailField 返回的 showButtons 是页面新建按钮配置（实测为 ["save","submit"]），
+ *   其中 canChange/canCancel/canDel 等键并不存在，不能作为权限依据。
+ * 因此 CLI 只确认目标存在，权限交给服务端，并把服务端返回的提示原样透传给用户。
+ */
+export async function assertMeetingExists(id, host, operation) {
+    try {
+        await host.request({
+            method: 'GET',
+            path: '/api/meeting/detail/getMeetingDetailField',
+            operation,
+            query: { id },
+        });
+    }
+    catch (error) {
+        throw meetingValidationError('meeting_not_operable', `未能确认会议 ${id} 存在或可读（getMeetingDetailField 查询失败）：${error instanceof Error ? error.message : String(error)}`);
+    }
+}

package/dist/shortcuts/meeting/operations/signs.js

@@ -0,0 +1,41 @@
+import { meetingSuccess, SCHEMA_ID } from './types.js';
+import { extractRows, toIdString } from './shared.js';
+// ---------------------------------------------------------------------------
+// 签到列表（getMeetingSignInfoList）
+// ---------------------------------------------------------------------------
+const meetingSignList = {
+    name: 'meeting.sign.list',
+    resource: 'sign',
+    method: 'sign.list',
+    action: 'meeting.sign.list',
+    summary: '查询会议签到记录（getMeetingSignInfoList）并输出已签/未签统计',
+    capability: 'sign',
+    risk: 'read',
+    inputSchema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+            mtId: { ...SCHEMA_ID, description: '会议 id（必填）' },
+        },
+        required: ['mtId'],
+    },
+    handler: async (args, { host }) => {
+        // 源码依据（MeetingSignController.getMeetingSignInfoList）：body 是 Map，
+        // 方法体读取的键名是 "meetingid"（不是 mtId）；缺失会 Long.parseLong("") 抛异常。
+        // 对外 CLI 参数保持 mtId 统一，此处仅做键名适配。
+        const response = await host.request({
+            method: 'POST',
+            path: '/api/meeting/sign/getMeetingSignInfoList',
+            operation: 'meeting.sign.list',
+            body: { meetingid: toIdString(args.mtId, 'mtId') },
+        });
+        const { rows, total } = extractRows(response);
+        const signed = rows.filter((row) => row?.signtime !== undefined && row?.signtime !== null && row?.signtime !== '').length;
+        return meetingSuccess('meeting.sign.list', {
+            total,
+            summary: { total: rows.length, signed, unsigned: Math.max(rows.length - signed, 0) },
+            signs: rows,
+        });
+    },
+};
+export const meetingSignOperations = [meetingSignList];

package/dist/shortcuts/meeting/operations/types.js

@@ -0,0 +1,25 @@
+export function meetingSuccess(action, data, options = {}) {
+    const payload = { ok: true, action, data };
+    if (options.meta && Object.keys(options.meta).length > 0)
+        payload.meta = options.meta;
+    if (options.warnings && options.warnings.length > 0)
+        payload.warnings = options.warnings;
+    return payload;
+}
+/** 构造「对象类型 + 严格禁止额外字段」的 JSON Schema。 */
+export function schemaOf(properties, options = {}) {
+    return {
+        type: 'object',
+        additionalProperties: false,
+        properties,
+        ...(options.required?.length ? { required: options.required } : {}),
+        ...(options.description ? { description: options.description } : {}),
+    };
+}
+/** E10 长 ID：源资料返回字符串，请求也接受数字或数字字符串（超 2^53 必须字符串）。 */
+export const SCHEMA_ID = { oneOf: [{ type: 'integer' }, { type: 'string', pattern: '^\\d+$' }] };
+export const SCHEMA_ID_LIST = { type: 'array', items: SCHEMA_ID };
+/** 会议时间格式 yyyy-MM-dd HH:mm（标准版 @DateTimeFormat 契约）。 */
+export const SCHEMA_DATETIME_MINUTE = { type: 'string', pattern: '^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}$' };
+/** 日期格式 yyyy-MM-dd。 */
+export const SCHEMA_DATE = { type: 'string', pattern: '^\\d{4}-\\d{2}-\\d{2}$' };

package/dist/shortcuts/meeting/operations.js

@@ -0,0 +1,19 @@
+import { getMeetingOperation } from './operations/registry.js';
+import { assertNoForbiddenKeys, asObject } from './operations/shared.js';
+export async function executeMeetingOperation(operation, rawInput, context) {
+    const definition = getMeetingOperation(operation);
+    const input = asObject(rawInput);
+    assertNoForbiddenKeys(input);
+    const host = {
+        request(request) {
+            return context.host.request({
+                ...request,
+                operation: request.operation || operation,
+            });
+        },
+        getSession() {
+            return context.host.getSession();
+        },
+    };
+    return definition.handler(input, { ...context, host });
+}

package/dist/shortcuts/yimiaoban/continuation.js

@@ -0,0 +1,70 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { resolve } from 'node:path';
+import { ymbValidationError } from './errors.js';
+function stateRoot(ctx) {
+    const configured = ctx?.config?.path();
+    if (configured)
+        return resolve(configured, '..');
+    return process.env.WEAVER_WORK_CLI_HOME || process.env.WORK_CLI_HOME || resolve(homedir(), '.weaver-work-cli');
+}
+async function loadKey(ctx) {
+    const keysDir = resolve(stateRoot(ctx), 'keys');
+    const filename = resolve(keysDir, 'yimiaoban-continuation.key');
+    await mkdir(keysDir, { recursive: true, mode: 0o700 });
+    if (existsSync(filename))
+        return readFile(filename);
+    const key = randomBytes(32);
+    try {
+        await writeFile(filename, key, { flag: 'wx', mode: 0o600 });
+        if (process.platform !== 'win32')
+            await chmod(filename, 0o600).catch(() => undefined);
+        return key;
+    }
+    catch {
+        return readFile(filename);
+    }
+}
+function encode(value) {
+    return Buffer.from(JSON.stringify(value)).toString('base64url');
+}
+function signature(payload, key) {
+    return createHmac('sha256', key).update(payload).digest('base64url');
+}
+export function createYmbContinuationSigner(ctx) {
+    return {
+        async issue(payload, ttlMs = 10 * 60_000) {
+            const issuedAt = Date.now();
+            const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
+            const sig = signature(body, await loadKey(ctx));
+            return `${body}.${sig}`;
+        },
+        async verify(token, expectedOperation) {
+            if (typeof token !== 'string' || !token.includes('.')) {
+                throw ymbValidationError('continuation_invalid', 'continuation 无效');
+            }
+            const [body, provided] = token.split('.');
+            const expected = signature(body, await loadKey(ctx));
+            const valid = provided.length === expected.length
+                && timingSafeEqual(Buffer.from(provided), Buffer.from(expected));
+            if (!valid)
+                throw ymbValidationError('continuation_invalid', 'continuation 签名校验失败');
+            let value;
+            try {
+                value = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
+            }
+            catch {
+                throw ymbValidationError('continuation_invalid', 'continuation 内容无法解析');
+            }
+            if (value.operation !== expectedOperation) {
+                throw ymbValidationError('continuation_mismatch', 'continuation 不属于当前操作');
+            }
+            if (!Number.isSafeInteger(value.expiresAt) || value.expiresAt < Date.now()) {
+                throw ymbValidationError('continuation_expired', 'continuation 已过期');
+            }
+            return value;
+        },
+    };
+}

package/dist/shortcuts/yimiaoban/errors.js

@@ -0,0 +1,61 @@
+import { CliError, ExitCode } from '../../core/errors.js';
+export class YmbCliError extends CliError {
+    type;
+    subtype;
+    code;
+    retryable;
+    stage;
+    details;
+    partialData;
+    constructor(type, subtype, message, options = {}) {
+        super(message, options.exitCode ?? ExitCode.InternalError);
+        this.name = 'YmbCliError';
+        this.type = type;
+        this.subtype = subtype;
+        this.code = options.code;
+        this.retryable = options.retryable ?? false;
+        this.stage = options.stage;
+        this.details = options.details;
+        this.partialData = options.partialData;
+    }
+}
+export function ymbValidationError(subtype, message, details) {
+    return new YmbCliError('validation', subtype, message, {
+        details,
+        exitCode: ExitCode.UsageError,
+    });
+}
+export function ymbAuthError(subtype, message, details) {
+    return new YmbCliError('authentication', subtype, message, {
+        details,
+        exitCode: ExitCode.AuthError,
+    });
+}
+export function ymbNetworkError(subtype, message, options = {}) {
+    return new YmbCliError('network', subtype, message, {
+        ...options,
+        retryable: options.retryable ?? true,
+        exitCode: ExitCode.NetworkError,
+    });
+}
+export function ymbConfirmationError(action, details) {
+    return new YmbCliError('confirmation', 'required', '该操作需要明确确认', {
+        details: { action, ...details },
+        exitCode: ExitCode.ConfirmationRequired,
+    });
+}
+export function ymbPartialError(message, partialData, details) {
+    return new YmbCliError('partial', 'write_uncertain', message, {
+        details,
+        partialData,
+        exitCode: ExitCode.Partial,
+    });
+}
+/** 业务失败（HTTP 200 但接口 code 非 0 / actionMsg.code 非 0 等）。 */
+export function ymbBusinessError(subtype, message, options = {}) {
+    return new YmbCliError('api', subtype, message, {
+        ...options,
+        code: options.code,
+        exitCode: 1,
+    });
+}