weaver-work-cli 0.1.4 → 0.1.6

package/dist/shortcuts/yimiaoban/host.js

@@ -0,0 +1,469 @@
+import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { mkdir, readFile, stat, writeFile } from 'node:fs/promises';
+import { dirname, extname, resolve } from 'node:path';
+import { requireE10Session } from '../../internal/e10/context.js';
+import { getActiveProfile } from '../../internal/e10/auth/session.js';
+import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
+import { ymbAuthError, ymbNetworkError, YmbCliError, ymbValidationError } from './errors.js';
+export const IM_PREFIX = '/api/em/msg/executeIm';
+function inferProfile(ctx) {
+    const options = ctx.getGlobalOptions();
+    return options.profile || getActiveProfile();
+}
+export function assertPath(requestPath) {
+    if (typeof requestPath !== 'string' || !requestPath.startsWith('/') || requestPath.startsWith('//')) {
+        throw ymbValidationError('path_invalid', '请求路径必须是相对绝对路径');
+    }
+    if (/^https?:/i.test(requestPath) || /[\r\n]/.test(requestPath) || requestPath.includes('/../')) {
+        throw ymbValidationError('path_invalid', '请求路径不允许跨域或路径逃逸');
+    }
+}
+function formBody(form) {
+    if (!form)
+        return undefined;
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(form)) {
+        if (value === undefined || value === null)
+            continue;
+        params.set(key, typeof value === 'string' ? value : JSON.stringify(value));
+    }
+    return params;
+}
+function mapRuntimeNetworkError(error) {
+    if (error instanceof E10ApiError && error.type === 'network') {
+        throw ymbNetworkError(error.subtype, error.message, {
+            retryable: error.retryable,
+            details: error.details,
+        });
+    }
+    throw error;
+}
+function guessMime(name) {
+    const ext = extname(String(name || '')).toLowerCase();
+    const map = {
+        '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.png': 'image/png', '.gif': 'image/gif',
+        '.webp': 'image/webp', '.bmp': 'image/bmp', '.svg': 'image/svg+xml',
+        '.pdf': 'application/pdf', '.txt': 'text/plain', '.md': 'text/markdown',
+        '.doc': 'application/msword',
+        '.docx': 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+        '.xls': 'application/vnd.ms-excel',
+        '.xlsx': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+        '.ppt': 'application/vnd.ms-powerpoint',
+        '.pptx': 'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+        '.zip': 'application/zip', '.rar': 'application/x-rar-compressed',
+        '.mp4': 'video/mp4', '.mp3': 'audio/mpeg',
+    };
+    return map[ext] || 'application/octet-stream';
+}
+async function md5File(filePath) {
+    const hash = createHash('md5');
+    const { createReadStream } = await import('node:fs');
+    const stream = createReadStream(filePath);
+    for await (const chunk of stream)
+        hash.update(chunk);
+    return hash.digest('hex');
+}
+export function createYmbHost(ctx, dependencies = {}) {
+    let e10Session = null;
+    let sessionContext = null;
+    let selfIdentity = null;
+    const personCache = new Map();
+    const i18nCache = new Map();
+    const requireSession = dependencies.requireSession || requireE10Session;
+    async function ensureSession() {
+        if (!e10Session) {
+            e10Session = await requireSession(ctx);
+            sessionContext = {
+                baseUrl: e10Session.getBaseUrl(),
+                profile: inferProfile(ctx),
+                userId: e10Session.userId,
+                tenantKey: e10Session.tenantKey,
+                eteamsId: e10Session.eteamsId,
+                agentType: e10Session.agentType,
+            };
+        }
+        return e10Session;
+    }
+    async function getSession() {
+        await ensureSession();
+        return sessionContext;
+    }
+    async function runtime() {
+        return createE10RequestRuntime(ctx, await ensureSession(), {
+            interceptors: dependencies.interceptors,
+            fetch: dependencies.fetch,
+        });
+    }
+    async function request(request) {
+        const { method, path, query, body, operation, form, multipart, headers: extraHeaders = {}, 
+        // 与源 skill 一致：普通 JSON 请求 15 秒超时即视为失败（超时不做重试）
+        timeoutMs = 15_000, } = request;
+        assertPath(path);
+        const resolvedMethod = method || (body === undefined && form === undefined && multipart === undefined ? 'GET' : 'POST');
+        let response;
+        try {
+            response = await (await runtime()).requestJson({
+                module: 'yimiaoban',
+                operation,
+                method: resolvedMethod,
+                path,
+                query,
+                body: multipart === undefined ? body : undefined,
+                form: multipart === undefined && form === undefined ? undefined : formBody(form ?? {}),
+                formData: multipart,
+                headers: { 'X-Requested-With': 'XMLHttpRequest', ...extraHeaders },
+                timeoutMs,
+            });
+        }
+        catch (error) {
+            mapRuntimeNetworkError(error);
+        }
+        if (response.status === 401 || response.status === 302) {
+            throw ymbAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            if (response.status < 200 || response.status >= 300) {
+                throw new YmbCliError('api', 'http_error', `泛微接口 HTTP ${response.status}`, {
+                    code: response.status,
+                    details: { status: response.status },
+                    exitCode: 1,
+                });
+            }
+            throw ymbNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw new YmbCliError('api', 'http_error', `泛微接口 HTTP ${response.status}`, {
+                code: response.status,
+                details: { status: response.status },
+                exitCode: 1,
+            });
+        }
+        return response.value;
+    }
+    async function requestBinary(url, headers = {}) {
+        const session = await ensureSession();
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), 60_000);
+        try {
+            const resp = await (dependencies.fetch || globalThis.fetch)(url, {
+                headers: {
+                    accept: 'application/json, text/plain, */*',
+                    cookie: session.cookieHeader(),
+                    eteamsid: session.eteamsId,
+                    'user-agent': session.uaHeader(),
+                    origin: session.getBaseUrl(),
+                    ...headers,
+                },
+                redirect: 'manual',
+                signal: controller.signal,
+            });
+            if (resp.status === 401 || resp.status === 302) {
+                throw ymbAuthError('session_expired', '登录态已失效：下载需有效登录态，请重新登录后重试');
+            }
+            if (resp.status !== 200) {
+                throw new YmbCliError('api', 'download_failed', `下载失败 HTTP ${resp.status}`, {
+                    code: resp.status,
+                    exitCode: 1,
+                });
+            }
+            return Buffer.from(await resp.arrayBuffer());
+        }
+        catch (error) {
+            if (error instanceof YmbCliError)
+                throw error;
+            const message = error instanceof Error ? error.message : String(error);
+            throw ymbNetworkError('transport', `下载失败：${message}`, { retryable: true });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    /** teamsCheck：解析当前登录人的 imUid/imCid/name（IM uid 语义 = 员工 id）。 */
+    async function getSelfIdentity() {
+        if (selfIdentity)
+            return selfIdentity;
+        await ensureSession();
+        const base = sessionContext?.baseUrl || '';
+        if (!base)
+            throw ymbAuthError('self_identity_unavailable', '缺少 baseUrl，请先登录');
+        const res = await request({
+            method: 'POST',
+            path: `/api/baseserver/layout/teamsCheck?clientType=not_xinchuang&client=WEB&domainName=${encodeURIComponent(base)}`,
+            body: {},
+            operation: 'yimiaoban.self.identity',
+        });
+        const cur = res?.currentUser || res?.data?.currentUser || {};
+        const uid = String(cur.imUid || sessionContext?.userId || '');
+        const cid = String(cur.imCid || '');
+        const name = cur.name || cur.realName || cur.userName || '';
+        if (!uid || !cid) {
+            throw ymbAuthError('self_identity_incomplete', `teamsCheck 未返回完整 IM 身份（imUid=${uid || '-'}, imCid=${cid || '-'}），请确认登录态后重试`);
+        }
+        selfIdentity = { uid, cid, name };
+        return selfIdentity;
+    }
+    /** 文件两段式上传：preUploadCheck → valid/upload。 */
+    async function uploadFile(filePath, options = {}) {
+        const abs = resolve(filePath);
+        if (!existsSync(abs))
+            throw ymbValidationError('file_not_found', `文件不存在: ${abs}`);
+        const st = await stat(abs);
+        if (!st.isFile())
+            throw ymbValidationError('file_invalid', `不是文件: ${abs}`);
+        const name = options.name || filePath.split(/[\\/]/).pop() || 'file';
+        const size = st.size;
+        const md5 = await md5File(abs);
+        const data = await readFile(abs);
+        const mime = guessMime(name);
+        const permission = options.permission !== undefined ? String(options.permission) : '3';
+        const shareUsers = options.shareUsers !== undefined ? String(options.shareUsers) : '';
+        const shareGroups = options.shareGroups !== undefined ? String(options.shareGroups) : '';
+        const lastModified = Math.round(st.mtimeMs);
+        const base = sessionContext?.baseUrl || (await getSession()).baseUrl;
+        const uploadHeaders = { devtype: '5', langtype: 'zh_CN', timezoneoffset: String(new Date().getTimezoneOffset()) };
+        // 第 1 步：预检
+        const preForm = new FormData();
+        const preFields = {
+            module: 'im',
+            size: String(size),
+            name,
+            lastModified: String(lastModified),
+            lastModifiedDate: String(lastModified),
+            MD5: md5,
+            permission,
+            shareUsers,
+            shareGroups,
+            shareExternals: '',
+        };
+        for (const [k, v] of Object.entries(preFields))
+            preForm.append(k, v);
+        const preRes = await request({
+            method: 'POST',
+            path: '/api/file/preUploadCheck',
+            multipart: preForm,
+            headers: uploadHeaders,
+            operation: 'yimiaoban.file.upload.check',
+            timeoutMs: 15_000,
+        });
+        const preData = preRes?.data || {};
+        if (!preData.preUploadId) {
+            throw new YmbCliError('api', 'upload_check_failed', `preUploadCheck 失败`, { details: preRes, exitCode: 1 });
+        }
+        const preUploadId = String(preData.preUploadId);
+        const uploadType = preData.uploadType || 'common';
+        // 第 2 步：实传
+        const upForm = new FormData();
+        upForm.append('data', new Blob([data], { type: mime }), name);
+        for (const [k, v] of Object.entries({ module: 'im', permission, shareUsers, shareGroups, shareExternals: '', uploadType, preUploadId, MD5: md5 })) {
+            upForm.append(k, v);
+        }
+        const upRes = await request({
+            method: 'POST',
+            path: '/api/file/valid/upload',
+            multipart: upForm,
+            headers: uploadHeaders,
+            operation: 'yimiaoban.file.upload.do',
+            timeoutMs: 60_000,
+        });
+        const upData = upRes?.data || {};
+        if (!upData.fileObj || (!upData.fileObj.id && !upData.fileObj.fileid)) {
+            throw new YmbCliError('api', 'upload_failed', `valid/upload 失败`, { details: upRes, exitCode: 1 });
+        }
+        return upData.fileObj;
+    }
+    /** hrm getEmployeeByIds：uid 列表批量（一次最多 100，自动分批）。 */
+    async function resolveUsersByIds(ids) {
+        const unique = [...new Set(ids.map((x) => String(x)).filter(Boolean))];
+        const miss = unique.filter((id) => !personCache.has(id));
+        const result = {};
+        for (const id of unique) {
+            const hit = personCache.get(id);
+            if (hit)
+                result[id] = hit;
+        }
+        for (let i = 0; i < miss.length; i += 100) {
+            const batch = miss.slice(i, i + 100);
+            const res = await request({
+                method: 'POST',
+                path: '/api/hrm/common/getEmployeeByIds',
+                body: { userIdList: batch, externalIdList: [] },
+                headers: { devtype: '5' },
+                operation: 'yimiaoban.person.resolveByIds',
+                timeoutMs: 15_000,
+            });
+            const list = res?.data?.userList;
+            if (Array.isArray(list)) {
+                for (const u of list) {
+                    const brief = {
+                        uid: String(u.id ?? ''),
+                        name: String(u.name ?? ''),
+                        cid: String(u.imCid ?? u.cid ?? ''),
+                        jobNum: String(u.jobNum ?? u.job_num ?? ''),
+                        department: String(u.department ?? ''),
+                        departmentId: String(u.departmentId ?? u.department_id ?? ''),
+                        subCompany: String(u.subCompany ?? u.subcompany ?? ''),
+                        position: String(u.position ?? ''),
+                        mobile: String(u.mobile ?? ''),
+                    };
+                    if (brief.uid) {
+                        personCache.set(brief.uid, brief);
+                        result[brief.uid] = brief;
+                    }
+                }
+            }
+        }
+        return result;
+    }
+    /** hrm 员工浏览：按姓名/工号/手机/邮箱 模糊（in 包含）查询。 */
+    async function searchEmployeeByName(name) {
+        const baseForm = {
+            browserMultiple: true, authWecahtBook: false,
+            wxDepNeedConvertCount: 0, wxEmpNeedConvertCount: 0, wxTotalNeedConvertCount: 0,
+        };
+        const formDatas = {
+            status: [{ statusSelect: ['normal'] }],
+            subcompany: [{ subcompanyOpt: 'in' }], department: [{ departmentOpt: 'in' }],
+            role: [{ roleOpt: 'in' }], position: [{ positionOpt: 'in' }], superior: [{ superiorOpt: 'in' }],
+        };
+        if (/@/.test(name))
+            formDatas.email = [{ emailOpt: 'in', emailInput: name }];
+        else if (/^\d{11}$/.test(name))
+            formDatas.mobile = [{ mobileOpt: 'in', mobileInput: name }];
+        else if (/^\d+$/.test(name) || /^[A-Za-z][A-Za-z0-9]*\d[A-Za-z0-9]*$/.test(name))
+            formDatas.job_num = [{ job_numOpt: 'in', job_numInput: name }];
+        else
+            formDatas.username = [{ usernameOpt: 'in', usernameInput: name }];
+        const out = [];
+        let current = 1;
+        const pageSize = 200;
+        for (;;) {
+            const res = await request({
+                method: 'POST',
+                path: '/api/hrm/common/browser/data/resource',
+                body: { ...baseForm, cmd: 'all', formDatas, quickSearchDatas: {}, type: 'and', current, pageSize, containsNoneAccount: false, containsPartTimeEmployee: false, containsDls: false },
+                operation: 'yimiaoban.person.search',
+                timeoutMs: 15_000,
+            });
+            const rows = res?.data?.data;
+            if (!Array.isArray(rows))
+                break;
+            for (const r of rows) {
+                if (!r?.name)
+                    continue;
+                const brief = {
+                    uid: String(r.id ?? ''),
+                    name: String(r.name),
+                    cid: String(r.imCid ?? r.cid ?? ''),
+                    jobNum: String(r.jobNum ?? r.job_num ?? ''),
+                    department: String(r.department ?? ''),
+                    departmentId: String(r.departmentId ?? r.department_id ?? ''),
+                    subCompany: String(r.subCompany ?? r.subcompany ?? ''),
+                    position: String(r.position ?? ''),
+                    mobile: String(r.mobile ?? ''),
+                };
+                if (brief.uid)
+                    personCache.set(brief.uid, brief);
+                out.push(brief);
+            }
+            if (rows.length < pageSize)
+                break;
+            current++;
+            if (current > 5)
+                break; // 防超长翻页（服务端通常一次返回全部命中）
+        }
+        return out;
+    }
+    /** i18n 标签翻译：POST body 为 id 字符串数组。 */
+    async function fetchI18nLabels(ids) {
+        const result = {};
+        const unique = [...new Set(ids.map((x) => String(x)).filter((x) => /^\d+$/.test(x)))];
+        const miss = unique.filter((id) => !i18nCache.has(id));
+        for (const id of unique) {
+            const hit = i18nCache.get(id);
+            if (hit !== undefined)
+                result[id] = hit;
+        }
+        if (miss.length === 0)
+            return result;
+        try {
+            const res = await request({
+                method: 'POST',
+                path: '/api/bs/i18n/labelmanage/getHtmlLabelNames',
+                body: miss,
+                operation: 'yimiaoban.i18n.labels',
+                timeoutMs: 15_000,
+            });
+            const data = res?.data || {};
+            for (const id of miss) {
+                if (data[id] !== undefined && data[id] !== null) {
+                    const text = String(data[id]);
+                    i18nCache.set(id, text);
+                    result[id] = text;
+                }
+            }
+        }
+        catch {
+            // 翻译失败不抛错，调用方回退原样
+        }
+        return result;
+    }
+    /** 构造媒体（图片/视频）预览 URL（绝对地址；调用前确保会话就绪，避免返回相对路径）。 */
+    async function buildPreviewUrl(options) {
+        await ensureSession();
+        const kind = options.kind === 'video' ? 'video' : 'img';
+        const payload = { tag: kind === 'video' ? '1' : '0', msgid: String(options.msgid) };
+        if (options.groupId !== undefined && options.groupId !== null && String(options.groupId) !== '') {
+            payload.flag = 1;
+            payload.group_id = String(options.groupId);
+        }
+        else {
+            payload.flag = 0;
+            payload.user = { cid: String(options.user?.cid ?? ''), uid: String(options.user?.uid ?? '') };
+        }
+        const weappAuthStr = Buffer.from(JSON.stringify(payload), 'utf-8').toString('base64');
+        const params = new URLSearchParams();
+        params.set('fileId', String(options.fileId));
+        params.set('type', kind === 'video' ? 'video' : 'imgs');
+        if (kind !== 'video')
+            params.set('imgFormat', options.imgFormat || 'small');
+        params.set('authModule', 'im');
+        params.set('weappAuthStr', weappAuthStr);
+        return `${(sessionContext?.baseUrl || '').replace(/\/+$/, '')}/api/file/preview?${params.toString()}`;
+    }
+    /** 构造媒体下载 URL（/api/file/remotedownload/{fileId}/im/true；绝对地址）。 */
+    async function buildDownloadUrl(options) {
+        await ensureSession();
+        const kind = options.kind === 'video' ? 'video' : 'img';
+        const payload = { tag: kind === 'video' ? '1' : '0', msgid: String(options.msgid) };
+        if (options.groupId !== undefined && options.groupId !== null && String(options.groupId) !== '') {
+            payload.flag = 1;
+            payload.group_id = String(options.groupId);
+        }
+        else {
+            payload.flag = 0;
+            payload.user = { cid: String(options.user?.cid ?? ''), uid: String(options.user?.uid ?? '') };
+        }
+        const weappAuthStr = Buffer.from(JSON.stringify(payload), 'utf-8').toString('base64');
+        const params = new URLSearchParams();
+        params.set('type', kind === 'video' ? 'video' : 'imgs');
+        if (kind !== 'video')
+            params.set('imgFormat', options.imgFormat || 'small');
+        params.set('authModule', 'im');
+        params.set('weappAuthStr', weappAuthStr);
+        return `${(sessionContext?.baseUrl || '').replace(/\/+$/, '')}/api/file/remotedownload/${String(options.fileId)}/im/true?${params.toString()}`;
+    }
+    return {
+        request,
+        requestBinary,
+        getSession,
+        getSelfIdentity,
+        uploadFile,
+        resolveUsersByIds,
+        searchEmployeeByName,
+        fetchI18nLabels,
+        buildPreviewUrl,
+        buildDownloadUrl,
+    };
+}
+export { mkdir as ensureDir, dirname, writeFile };