weaver-work-cli 0.1.40 → 0.1.44

package/dist/internal/e10/context.js

@@ -1,14 +1,56 @@
 import { CliError, ExitCode } from '../../core/errors.js';
-import { E10_AUTH_REQUIRED_MESSAGE, E10_XIAOE_RECOVERY_FAILED_MESSAGE } from './auth/messages.js';
-import { E10AuthSession } from './auth/session.js';
+import { E10_AUTH_REQUIRED_MESSAGE, E10_XIAOE_HOST_CREDENTIAL_MISSING_MESSAGE, E10_XIAOE_NETWORK_UNAVAILABLE_MESSAGE, E10_XIAOE_RECOVERY_FAILED_MESSAGE, } from './auth/messages.js';
+import { lastXiaoEFailure, summarizeXiaoEFailureKind, } from './auth/xiaoe.js';
+import { appendXiaoEAuthErrorLog, xiaoEAuthLogSecrets } from './auth/error-log.js';
+import { E10AuthSession, getActiveProfile } from './auth/session.js';
 import { E10ApiClient } from './client.js';
-import { canAutomaticallyRecoverXiaoE, recoverXiaoEAuthSession } from './auth-recovery.js';
-function xiaoERecoveryFailedError() {
-    return Object.assign(new CliError(E10_XIAOE_RECOVERY_FAILED_MESSAGE, ExitCode.AuthError), {
+import { canAutomaticallyRecoverXiaoE, recoverXiaoEAuthSession, recoverXiaoEAuthSessionWithDiagnostics, } from './auth-recovery.js';
+/**
+ * 把一次失败的静默恢复转成可定位的结构化错误。文案按归因分流：只有网络层
+ * 完全没打通时才提示「稍后重试」（此时登录态根本没被验证过，让人去重新登录
+ * 是误导）；其余情况沿用原文案。诊断放进 `details`：`attemptedSteps` 说明
+ * 评估过哪些凭证通道及各自结果，`failures` 保留每一次失败的阶段、类别和
+ * `error.cause.code`，`lastError` 是最后一条真实原因（已脱敏截断），
+ * `resultSessionExpired` 表示票其实换到了、但被判为已过期。
+ */
+function xiaoERecoveryFailedError(diagnostics, resultSessionExpired = false) {
+    const failureKind = summarizeXiaoEFailureKind(diagnostics);
+    const lastFailure = lastXiaoEFailure(diagnostics);
+    const networkUnavailable = failureKind === 'network';
+    // Web sandboxes only have the platform credential channel. If the runtime
+    // marker survived but the host credential pair did not, asking the user to
+    // log in again is misleading: the sandbox launcher dropped the injection.
+    const hostCredentialMissing = diagnostics?.clientType === 'cloud'
+        && diagnostics.platformCredentialDetected === false
+        && diagnostics.attemptedSteps.includes('platform_token:missing')
+        && diagnostics.attemptedSteps.includes('environment_map:empty');
+    const details = diagnostics
+        ? {
+            ...(diagnostics.baseUrl ? { baseUrl: diagnostics.baseUrl } : {}),
+            ...(diagnostics.clientType ? { clientType: diagnostics.clientType } : {}),
+            ...(diagnostics.platformCredentialDetected === undefined
+                ? {}
+                : { platformCredentialDetected: diagnostics.platformCredentialDetected }),
+            attemptedSteps: diagnostics.attemptedSteps,
+            ...(diagnostics.lastError ? { lastError: diagnostics.lastError } : {}),
+            ...(failureKind ? { errorKind: failureKind } : {}),
+            ...(lastFailure ? { failureStage: lastFailure.stage } : {}),
+            ...(diagnostics.failures?.length ? { failures: diagnostics.failures } : {}),
+            ...(hostCredentialMissing ? { reason: 'host_credential_not_injected' } : {}),
+            ...(resultSessionExpired ? { resultSessionExpired: true } : {}),
+        }
+        : undefined;
+    return Object.assign(new CliError(networkUnavailable
+        ? E10_XIAOE_NETWORK_UNAVAILABLE_MESSAGE
+        : hostCredentialMissing
+            ? E10_XIAOE_HOST_CREDENTIAL_MISSING_MESSAGE
+            : E10_XIAOE_RECOVERY_FAILED_MESSAGE, ExitCode.AuthError), {
         type: 'authentication',
-        subtype: 'xiaoe_credential_unavailable',
-        retryable: false,
-        stage: 'xiaoe_unified_login',
+        subtype: networkUnavailable ? 'xiaoe_network_unavailable' : 'xiaoe_credential_unavailable',
+        // 网络错误是可重试的；凭证缺失/被拒重试也一样失败，不能让调用方空转。
+        retryable: networkUnavailable,
+        stage: lastFailure?.stage || 'xiaoe_unified_login',
+        ...(details ? { details } : {}),
     });
 }
 export async function getE10Session(ctx, load = {}) {
@@ -16,18 +58,35 @@ export async function getE10Session(ctx, load = {}) {
     return E10AuthSession.fromOptions(options, ctx.cwd, load);
 }
 export async function requireE10Session(ctx, load = {}) {
+    const options = ctx.getGlobalOptions();
     let session = await getE10Session(ctx, load);
     if (session?.isExpired() && canAutomaticallyRecoverXiaoE(ctx, session)) {
-        session = await recoverXiaoEAuthSession(ctx, session).catch(() => null);
-        if (!session || session.isExpired())
-            throw xiaoERecoveryFailedError();
+        const outcome = await recoverXiaoEAuthSessionWithDiagnostics(ctx, session).catch(() => null);
+        session = outcome?.session || null;
+        if (!session || session.isExpired()) {
+            const resultSessionExpired = session?.isExpired() === true;
+            const error = xiaoERecoveryFailedError(outcome?.diagnostics, resultSessionExpired);
+            if (resultSessionExpired) {
+                await appendXiaoEAuthErrorLog({
+                    source: 'recovery',
+                    profile: options.profile || getActiveProfile(),
+                    baseUrl: session?.getBaseUrl(),
+                    diagnostics: outcome?.diagnostics,
+                    resultSessionExpired: true,
+                    error,
+                    secrets: xiaoEAuthLogSecrets(ctx.env),
+                }).catch(() => undefined);
+            }
+            throw error;
+        }
     }
     if (!session && canAutomaticallyRecoverXiaoE(ctx)) {
         // Read-only probes use getE10Session; only a command requiring a session
         // may establish one from the current XiaoE host's credentials.
-        session = await recoverXiaoEAuthSession(ctx).catch(() => null);
+        const outcome = await recoverXiaoEAuthSessionWithDiagnostics(ctx).catch(() => null);
+        session = outcome?.session || null;
         if (!session) {
-            throw xiaoERecoveryFailedError();
+            throw xiaoERecoveryFailedError(outcome?.diagnostics);
         }
     }
     if (!session) {

package/dist/internal/e10/index.js

@@ -1,4 +1,4 @@
 export { E10ApiClient } from './client.js';
 export { getE10Client, getE10Session, requireE10Client, requireE10Session } from './context.js';
 export { E10ApiError, E10RequestRuntime, createE10RequestRuntime } from './request-runtime.js';
-export { canAutomaticallyRecoverXiaoE, isE10AuthenticationRequired, recoverXiaoEAuthSession, } from './auth-recovery.js';
+export { canAutomaticallyRecoverXiaoE, isE10AuthenticationRequired, recoverXiaoEAuthSession, recoverXiaoEAuthSessionWithDiagnostics, } from './auth-recovery.js';

package/dist/internal/e10/network-error.js

@@ -0,0 +1,93 @@
+/**
+ * 网络错误的统一识别。
+ *
+ * Node/undici 的 `fetch` 只抛 `TypeError: fetch failed`，真实原因（拒绝连接、
+ * DNS 失败、TLS 失败、连接/响应超时）放在 `error.cause.code` 上。丢掉这条 code，
+ * 「连不上 E10」就会被误报成「登录态不可用」，把用户引导去重新登录。
+ */
+/** 明确属于「网络层没打通」的系统错误码（Node 常见 errno + undici 内部码）。 */
+const NETWORK_ERROR_CODES = new Set([
+    'ECONNREFUSED',
+    'ECONNRESET',
+    'ECONNABORTED',
+    'EHOSTUNREACH',
+    'EHOSTDOWN',
+    'ENETUNREACH',
+    'ENETDOWN',
+    'ENETRESET',
+    'ENOTFOUND',
+    'EAI_AGAIN',
+    'EPIPE',
+    'ETIMEDOUT',
+    'ESOCKETTIMEDOUT',
+    'ERR_SOCKET_CONNECTION_TIMEOUT',
+    'UND_ERR_CONNECT_TIMEOUT',
+    'UND_ERR_HEADERS_TIMEOUT',
+    'UND_ERR_BODY_TIMEOUT',
+    'UND_ERR_SOCKET',
+    'UND_ERR_CLOSED',
+    'UND_ERR_ABORTED',
+    'CERT_HAS_EXPIRED',
+    'DEPTH_ZERO_SELF_SIGNED_CERT',
+    'SELF_SIGNED_CERT_IN_CHAIN',
+    'UNABLE_TO_VERIFY_LEAF_SIGNATURE',
+    'ERR_TLS_CERT_ALTNAME_INVALID',
+    'ERR_SSL_WRONG_VERSION_NUMBER',
+]);
+/** `AbortController.abort()` 抛出的 DOMException 没有 errno，统一用这个码表示「超时」。 */
+export const ABORT_ERROR_CODE = 'ABORT_ERR';
+function asRecord(value) {
+    return value && typeof value === 'object' ? value : null;
+}
+/**
+ * 取错误链上最内层的系统错误码（`error.cause.code`）；`AbortError` 归一化成
+ * `ABORT_ERR`。用 `seen` 防环：Node 的 cause 链偶尔会指回上层。
+ */
+export function readErrorCauseCode(error, maxDepth = 5) {
+    let current = error;
+    const seen = new Set();
+    for (let depth = 0; depth < maxDepth; depth += 1) {
+        if (current === undefined || current === null || seen.has(current))
+            return undefined;
+        seen.add(current);
+        if (current instanceof Error && current.name === 'AbortError')
+            return ABORT_ERROR_CODE;
+        const record = asRecord(current);
+        if (!record)
+            return undefined;
+        if (record.name === 'AbortError')
+            return ABORT_ERROR_CODE;
+        const code = record.code;
+        if (typeof code === 'string' && code)
+            return code;
+        const errno = record.errno;
+        if (typeof errno === 'string' && errno)
+            return errno;
+        if (typeof errno === 'number')
+            return String(errno);
+        current = record.cause;
+    }
+    return undefined;
+}
+export function isAbortError(error) {
+    if (error instanceof Error && error.name === 'AbortError')
+        return true;
+    return asRecord(error)?.name === 'AbortError';
+}
+export function isNetworkErrorCode(code) {
+    return typeof code === 'string' && NETWORK_ERROR_CODES.has(code.toUpperCase());
+}
+/** undici 把底层原因藏起来时只剩这句话，但语义已经很明确了。 */
+const TRANSPORT_MESSAGE_PATTERN = /fetch failed|socket hang up|other side closed|network|connection (?:refused|reset|closed)|timed? ?out|timeout|certificate|getaddrinfo|dns lookup/i;
+export function looksLikeTransportMessage(message) {
+    return TRANSPORT_MESSAGE_PATTERN.test(message);
+}
+/**
+ * 给一次 fetch（含读响应体）套上超时。调用方必须在 `finally` 里 `clear()`，
+ * 否则进程会被这一个定时器拖住。
+ */
+export function createTimeoutSignal(timeoutMs) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    return { signal: controller.signal, clear: () => clearTimeout(timer) };
+}

package/dist/internal/e10/request-runtime.js

@@ -1,6 +1,7 @@
 import { CliError, ExitCode } from '../../core/errors.js';
 import { classifyE10Redirect, isE10AuthenticationRequired, recoverXiaoEAuthSession, sameE10SessionIdentity, } from './auth-recovery.js';
 import { startFetchTiming } from './fetch-timing.js';
+import { readErrorCauseCode } from './network-error.js';
 import { E10_XIAOE_RECOVERY_FAILED_MESSAGE } from './auth/messages.js';
 const DEFAULT_TIMEOUT_MS = 30_000;
 const DEFAULT_BIG_INT_STRINGS = true;
@@ -314,12 +315,17 @@ export class E10RequestRuntime {
                 throw new E10ApiError('network', 'timeout', `请求超时（${timeoutMs}ms）`, {
                     retryable: false,
                     exitCode: ExitCode.NetworkError,
+                    details: { timeoutMs },
                 });
             }
             const message = error instanceof Error ? error.message : String(error);
+            // Node 的 `fetch failed` 不带原因，真正的 errno（ECONNREFUSED/ENOTFOUND…）
+            // 在 `error.cause.code` 上：保留下来才能区分「断网」与「服务端报错」。
+            const causeCode = readErrorCauseCode(error);
             throw new E10ApiError('network', 'transport', `请求失败：${message}`, {
                 retryable: true,
                 exitCode: ExitCode.NetworkError,
+                ...(causeCode ? { details: { causeCode } } : {}),
             });
         }
         finally {

package/dist/internal/skills/install.js

@@ -272,6 +272,14 @@ function writeProductMetadata(target, productContent) {
         return;
     writeFileSync(resolve(target, 'product.json'), productContent, 'utf8');
 }
+/**
+ * 拷贝白名单：整目录复制，只剔除本地依赖与系统垃圾。
+ *
+ * 历史实现把 `scripts/` 与 `assets/` 一并排除，导致带资产的技能装出来是残缺的——
+ * reception 缺 `scripts/render.py` 与 `assets/行程单模板-泛微.docx` 会直接跑不出 docx，
+ * builder 缺 `assets/dom-structure/` 也少一半能力。
+ * 技能包是受控的内部产物，资产就应当随包分发，因此只保留 node_modules 这一条硬排除。
+ */
 function shouldCopy(entry, sourceRoot, skipSkillProduct) {
     const relativePath = relative(sourceRoot, entry);
     const name = basename(entry);
@@ -282,7 +290,7 @@ function shouldCopy(entry, sourceRoot, skipSkillProduct) {
     if (name === '.DS_Store' || name.startsWith('.'))
         return false;
     const parts = relativePath.split(sep);
-    return !parts.includes('node_modules') && !parts.includes('scripts') && !parts.includes('assets');
+    return !parts.includes('node_modules');
 }
 function countFiles(root) {
     let count = 0;

package/dist/shortcuts/archive/continuation.js

@@ -1,3 +1,4 @@
+import { CONTINUATION_TTL_MS } from '../../core/continuation-ttl.js';
 import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
 import { existsSync } from 'node:fs';
 import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
@@ -35,7 +36,7 @@ function signature(payload, key) {
 }
 export function createArchiveContinuationSigner(ctx) {
     return {
-        async issue(payload, ttlMs = 10 * 60_000) {
+        async issue(payload, ttlMs = CONTINUATION_TTL_MS) {
             const issuedAt = Date.now();
             const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
             const sig = signature(body, await loadKey(ctx));

package/dist/shortcuts/archive/index.js

@@ -1,6 +1,7 @@
 import { readFile, writeFile } from 'node:fs/promises';
 import { resolve } from 'node:path';
 import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { reportPlatformError } from '../../core/error-codes.js';
 import { formatSearchCard, formatSearchHtml, formatSearchText } from './render/search-format.js';
 import { createArchiveContinuationSigner } from './continuation.js';
 import { createArchiveHost } from './host.js';
@@ -99,6 +100,7 @@ async function executeAndPrint(ctx, operation, input) {
         ctx.output.write(successEnvelope(result), { json: true });
     }
     catch (error) {
+        reportPlatformError(error);
         console.error(JSON.stringify(failureEnvelope(error), null, 2));
         process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
     }
@@ -140,6 +142,7 @@ async function executeSearchPrint(ctx, input, format, outputPath) {
         ctx.output.raw(formatSearchText(rows, meta));
     }
     catch (error) {
+        reportPlatformError(error);
         console.error(JSON.stringify(failureEnvelope(error), null, 2));
         process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
     }

package/dist/shortcuts/archive/operations/confirm.js

@@ -1,3 +1,4 @@
+import { CONTINUATION_TTL_MS } from '../../../core/continuation-ttl.js';
 import { archiveConfirmationError, archiveValidationError } from '../errors.js';
 /** apply 类写操作必须显式确认。 */
 export function requireConfirm(args, action) {
@@ -11,7 +12,7 @@ export function requireConfirm(args, action) {
  * prepare 阶段签发 continuation。
  * 环境指纹（baseUrl + 登录账号）写进票据，apply 时校验，避免跨环境/跨账号复用。
  */
-export async function issueLease(env, action, payload, ttlMs = 10 * 60_000) {
+export async function issueLease(env, action, payload, ttlMs = CONTINUATION_TTL_MS) {
     const session = await env.host.getSession();
     const continuation = await env.continuation.issue({
         operation: action,

package/dist/shortcuts/archive-oa/continuation.js

@@ -1,3 +1,4 @@
+import { CONTINUATION_TTL_MS } from '../../core/continuation-ttl.js';
 import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
 import { existsSync } from 'node:fs';
 import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
@@ -35,7 +36,7 @@ function signature(payload, key) {
 }
 export function createArchiveOaContinuationSigner(ctx) {
     return {
-        async issue(payload, ttlMs = 10 * 60_000) {
+        async issue(payload, ttlMs = CONTINUATION_TTL_MS) {
             const issuedAt = Date.now();
             const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
             const sig = signature(body, await loadKey(ctx));

package/dist/shortcuts/archive-oa/index.js

@@ -1,5 +1,6 @@
 import { readFile } from 'node:fs/promises';
 import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { reportPlatformError } from '../../core/error-codes.js';
 import { createArchiveOaContinuationSigner } from './continuation.js';
 import { createArchiveOaHost } from './host.js';
 import { archiveOaManifest } from './manifest.js';
@@ -116,6 +117,7 @@ async function executeAndPrint(ctx, operation, input) {
         ctx.output.write(successEnvelope(result), { json: true });
     }
     catch (error) {
+        reportPlatformError(error);
         console.error(JSON.stringify(failureEnvelope(error), null, 2));
         process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
     }

package/dist/shortcuts/archive-oa/operations/confirm.js

@@ -1,3 +1,4 @@
+import { CONTINUATION_TTL_MS } from '../../../core/continuation-ttl.js';
 import { archiveOaConfirmationError, archiveOaValidationError } from '../errors.js';
 /** apply 类写操作必须显式确认。 */
 export function requireConfirm(args, action) {
@@ -11,7 +12,7 @@ export function requireConfirm(args, action) {
  * prepare 阶段签发 continuation。
  * 环境指纹（baseUrl + 登录账号）写进票据，apply 时校验，避免跨环境/跨账号复用。
  */
-export async function issueLease(env, action, payload, ttlMs = 10 * 60_000) {
+export async function issueLease(env, action, payload, ttlMs = CONTINUATION_TTL_MS) {
     const session = await env.host.getSession();
     const continuation = await env.continuation.issue({
         operation: action,

package/dist/shortcuts/asset/continuation.js

@@ -1,3 +1,4 @@
+import { CONTINUATION_TTL_MS } from '../../core/continuation-ttl.js';
 import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
 import { existsSync } from 'node:fs';
 import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
@@ -35,7 +36,7 @@ function signature(payload, key) {
 }
 export function createZiguanjiaContinuationSigner(ctx) {
     return {
-        async issue(payload, ttlMs = 10 * 60_000) {
+        async issue(payload, ttlMs = CONTINUATION_TTL_MS) {
             const issuedAt = Date.now();
             const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
             const sig = signature(body, await loadKey(ctx));

package/dist/shortcuts/asset/index.js

@@ -1,5 +1,6 @@
 import { readFile } from 'node:fs/promises';
 import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { reportPlatformError } from '../../core/error-codes.js';
 import { createZiguanjiaContinuationSigner } from './continuation.js';
 import { createZiguanjiaHost } from './host.js';
 import { ziguanjiaManifest } from './manifest.js';
@@ -85,6 +86,7 @@ async function executeAndPrint(ctx, operation, input) {
         ctx.output.write(successEnvelope(operation, result), { json: true });
     }
     catch (error) {
+        reportPlatformError(error);
         console.error(JSON.stringify(failureEnvelope(error), null, 2));
         process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
     }

package/dist/shortcuts/asset-idle/index.js

@@ -1,5 +1,6 @@
 import { readFile } from 'node:fs/promises';
 import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { reportPlatformError } from '../../core/error-codes.js';
 import { createAssetIdleHost } from './host.js';
 import { assetIdleManifest } from './manifest.js';
 import { executeAssetIdleOperation } from './operations.js';
@@ -83,6 +84,7 @@ async function executeAndPrint(ctx, operation, input) {
         ctx.output.write(successEnvelope(operation, result), { json: true });
     }
     catch (error) {
+        reportPlatformError(error);
         console.error(JSON.stringify(failureEnvelope(error), null, 2));
         process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
     }

package/dist/shortcuts/blog/continuation.js

@@ -1,3 +1,4 @@
+import { CONTINUATION_TTL_MS } from '../../core/continuation-ttl.js';
 import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
 import { existsSync } from 'node:fs';
 import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
@@ -39,7 +40,7 @@ function signature(payload, key) {
  */
 export function createBlogContinuationSigner(ctx) {
     return {
-        async issue(payload, ttlMs = 10 * 60_000) {
+        async issue(payload, ttlMs = CONTINUATION_TTL_MS) {
             const issuedAt = Date.now();
             const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
             const sig = signature(body, await loadKey(ctx));

package/dist/shortcuts/blog/index.js

@@ -1,5 +1,6 @@
 import { readFile } from 'node:fs/promises';
 import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { reportPlatformError } from '../../core/error-codes.js';
 import { createBlogContinuationSigner } from './continuation.js';
 import { blogValidationError } from './errors.js';
 import { createBlogHost } from './host.js';
@@ -101,6 +102,7 @@ async function executeAndPrint(ctx, operation, input) {
         ctx.output.write(successEnvelope(operation, result), { json: true });
     }
     catch (error) {
+        reportPlatformError(error);
         console.error(JSON.stringify(failureEnvelope(error), null, 2));
         process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
     }

package/dist/shortcuts/caizhilian/continuation.js

@@ -1,3 +1,4 @@
+import { CONTINUATION_TTL_MS } from '../../core/continuation-ttl.js';
 import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
 import { existsSync } from 'node:fs';
 import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
@@ -35,7 +36,7 @@ function signature(payload, key) {
 }
 export function createCaizhilianContinuationSigner(ctx) {
     return {
-        async issue(payload, ttlMs = 10 * 60_000) {
+        async issue(payload, ttlMs = CONTINUATION_TTL_MS) {
             const issuedAt = Date.now();
             const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
             const sig = signature(body, await loadKey(ctx));

package/dist/shortcuts/caizhilian/index.js

@@ -1,5 +1,6 @@
 import { readFile } from 'node:fs/promises';
 import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { reportPlatformError } from '../../core/error-codes.js';
 import { createCaizhilianContinuationSigner } from './continuation.js';
 import { caizhilianValidationError } from './errors.js';
 import { createCaizhilianHost } from './host.js';
@@ -88,6 +89,7 @@ async function executeAndPrint(ctx, operation, input) {
         ctx.output.write(successEnvelope(operation, result), { json: true });
     }
     catch (error) {
+        reportPlatformError(error);
         console.error(JSON.stringify(failureEnvelope(error), null, 2));
         process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
     }

package/dist/shortcuts/caizhilian/operations/confirm.js

@@ -1,3 +1,4 @@
+import { CONTINUATION_TTL_MS } from '../../../core/continuation-ttl.js';
 import { caizhilianConfirmationError, caizhilianValidationError } from '../errors.js';
 import { fingerprint } from './shared.js';
 /** apply 类写操作必须显式确认。 */
@@ -12,7 +13,7 @@ export function requireConfirm(args, action) {
  * prepare 阶段签发 continuation。
  * 环境指纹（baseUrl + 登录账号）写进票据，apply 时校验，避免跨环境/跨账号复用。
  */
-export async function issueLease(env, action, payload, ttlMs = 10 * 60_000) {
+export async function issueLease(env, action, payload, ttlMs = CONTINUATION_TTL_MS) {
     const session = await env.host.getSession();
     const continuation = await env.continuation.issue({
         operation: action,
@@ -61,7 +62,7 @@ export function leaseArgsFingerprint(args) {
     return fingerprint(picked);
 }
 /** prepare 签发票据：自动附带入参指纹（apply 时由 assertLeaseArgs 校验）。 */
-export async function issueWriteLease(env, action, args, payload, ttlMs = 10 * 60_000) {
+export async function issueWriteLease(env, action, args, payload, ttlMs = CONTINUATION_TTL_MS) {
     return issueLease(env, action, { ...payload, argsFingerprint: leaseArgsFingerprint(args) }, ttlMs);
 }
 /** apply 校验整体入参与 prepare 时一致（比 assertLeaseTarget 更严格的全量防漂移）。 */

package/dist/shortcuts/calendar/continuation.js

@@ -1,3 +1,4 @@
+import { CONTINUATION_TTL_MS } from '../../core/continuation-ttl.js';
 import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
 import { existsSync } from 'node:fs';
 import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
@@ -35,7 +36,7 @@ function signature(payload, key) {
 }
 export function createCalendarContinuationSigner(ctx) {
     return {
-        async issue(payload, ttlMs = 10 * 60_000) {
+        async issue(payload, ttlMs = CONTINUATION_TTL_MS) {
             const issuedAt = Date.now();
             const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
             const sig = signature(body, await loadKey(ctx));

package/dist/shortcuts/calendar/index.js

@@ -1,5 +1,6 @@
 import { readFile } from 'node:fs/promises';
 import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { reportPlatformError } from '../../core/error-codes.js';
 import { createCalendarContinuationSigner } from './continuation.js';
 import { createCalendarHost } from './host.js';
 import { calendarManifest } from './manifest.js';
@@ -83,6 +84,7 @@ async function executeAndPrint(ctx, operation, input) {
         ctx.output.write(successEnvelope(operation, result), { json: true });
     }
     catch (error) {
+        reportPlatformError(error);
         console.error(JSON.stringify(failureEnvelope(error), null, 2));
         process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
     }

package/dist/shortcuts/calendar/operations/read.js

@@ -184,6 +184,36 @@ function firstId(value) {
         return String(value);
     return undefined;
 }
+/**
+ * 取「日程」应用 appId 与日程表单 formId（用于详情卡片页链接）。
+ * 偶发空返回时 getObjsByTag 原样重试最多 3 次。任一获取失败返回 null。
+ * 创建日程后需用 formId 拼卡片页链接，故抽为可复用函数。
+ */
+export async function fetchAgendaAppAndForm(host) {
+    const appIdsResponse = await host.request({
+        method: 'GET',
+        path: '/api/bs/ebuilder/app/tags/getAppIds',
+        operation: 'calendar.app.check',
+        query: { tag: AGENDA_APP_TAG },
+    }).catch(() => undefined);
+    const appId = firstId(appIdsResponse?.data);
+    let formId;
+    if (appId) {
+        for (let attempt = 0; attempt < 3 && !formId; attempt++) {
+            const formResponse = await host.request({
+                method: 'GET',
+                path: '/api/ebuilder/form/obj/getObjsByTag',
+                operation: 'calendar.app.check',
+                query: { tag: AGENDA_FORM_TAG, appId },
+            }).catch(() => undefined);
+            formId = firstId(formResponse?.data);
+            if (!formId && attempt < 2) {
+                await new Promise((resolve) => setTimeout(resolve, 800));
+            }
+        }
+    }
+    return { appId: appId ?? null, formId: formId ?? null };
+}
 const calendarAppCheck = {
     name: 'calendar.app.check',
     resource: 'calendar',
@@ -194,14 +224,7 @@ const calendarAppCheck = {
     risk: 'read',
     inputSchema: schemaOf({}),
     handler: async (_args, { host }) => {
-        // 1. getAppIds 取当前环境 appId
-        const appIdsResponse = await host.request({
-            method: 'GET',
-            path: '/api/bs/ebuilder/app/tags/getAppIds',
-            operation: 'calendar.app.check',
-            query: { tag: AGENDA_APP_TAG },
-        }).catch(() => undefined);
-        const appId = firstId(appIdsResponse?.data);
+        const { appId, formId } = await fetchAgendaAppAndForm(host);
         if (!appId) {
             return calendarSuccess('calendar.app.check', {
                 installed: false,
@@ -217,20 +240,6 @@ const calendarAppCheck = {
             query: { appId },
         }).catch(() => undefined);
         const commitVersion = versionResponse?.data?.commitVersion ?? versionResponse?.commitVersion;
-        // 3. 查询日程表单 ID（偶发空返回，参数原样重试最多 3 次）
-        let formId;
-        for (let attempt = 0; attempt < 3 && !formId; attempt++) {
-            const formResponse = await host.request({
-                method: 'GET',
-                path: '/api/ebuilder/form/obj/getObjsByTag',
-                operation: 'calendar.app.check',
-                query: { tag: AGENDA_FORM_TAG, appId },
-            }).catch(() => undefined);
-            formId = firstId(formResponse?.data);
-            if (!formId && attempt < 2) {
-                await new Promise((resolve) => setTimeout(resolve, 800));
-            }
-        }
         const hasVersion = typeof commitVersion === 'string' && commitVersion.trim() !== '';
         const installed = hasVersion && commitVersion !== null && commitVersion !== undefined;
         const versionOk = installed && compareVersion(commitVersion, MIN_APP_VERSION) >= 0;