weaver-work-cli 0.1.6 → 0.1.7

package/dist/shortcuts/workflow/errors.js

@@ -0,0 +1,112 @@
+import { CliError, ExitCode } from '../../core/errors.js';
+export class WorkflowCliError extends CliError {
+    type;
+    subtype;
+    code;
+    retryable;
+    stage;
+    details;
+    partialData;
+    constructor(type, subtype, message, options = {}) {
+        super(message, options.exitCode ?? ExitCode.InternalError);
+        this.name = 'WorkflowCliError';
+        this.type = type;
+        this.subtype = subtype;
+        this.code = options.code;
+        this.retryable = options.retryable ?? false;
+        this.stage = options.stage;
+        this.details = options.details;
+        this.partialData = options.partialData;
+    }
+}
+export function workflowValidationError(subtype, message, details) {
+    return new WorkflowCliError('validation', subtype, message, {
+        details,
+        exitCode: ExitCode.UsageError,
+    });
+}
+export function workflowAuthError(subtype, message, details) {
+    return new WorkflowCliError('authentication', subtype, message, {
+        details,
+        exitCode: ExitCode.AuthError,
+    });
+}
+export function workflowApiError(subtype, message, options = {}) {
+    return new WorkflowCliError('api', subtype, message, {
+        ...options,
+        exitCode: ExitCode.GeneralError,
+    });
+}
+export function workflowNetworkError(subtype, message, options = {}) {
+    return new WorkflowCliError('network', subtype, message, {
+        ...options,
+        retryable: options.retryable ?? true,
+        exitCode: ExitCode.NetworkError,
+    });
+}
+export function workflowConfirmationError(action, details) {
+    return new WorkflowCliError('confirmation', 'required', '该操作需要明确确认', {
+        details: { action, ...details },
+        exitCode: ExitCode.ConfirmationRequired,
+    });
+}
+/**
+ * 写操作结果不确定：请求可能已经送达服务端并生效，但本地无法确认。
+ * 一律返回该错误，禁止自动重试，必须先做只读回查确认流程状态。
+ */
+export function workflowPartialError(message, partialData, details) {
+    return new WorkflowCliError('partial', 'write_uncertain', message, {
+        details,
+        partialData,
+        exitCode: ExitCode.Partial,
+    });
+}
+/**
+ * 一次性 continuation 的**幂等重放**：上一次同句柄的 Apply 已经执行并且**成功**。
+ *
+ * 这不是失败——调度层（operations.ts）会把它转换成成功信封（`status: ALREADY_APPLIED`）。
+ * 之所以仍以错误形式在底层传递：`verify()/consume()` 只能返回「已占用」，无法直接产出信封。
+ *
+ * 来源：2026-09-16 线上——命令被执行两次（沙箱内首跑成功写入并消费句柄，宿主逃逸重跑），
+ * 重跑只能报 `continuation_consumed`，把**已经生效的写入报成失败**，模型被迫连查三次才确认真相。
+ */
+export function workflowAlreadyAppliedError(operation, details) {
+    return new WorkflowCliError('validation', 'continuation_already_applied', `该 continuation 已经执行过且已成功（${operation}），本次未重复写入。`
+        + '请不要重跑 Prepare，也不要再次提交——如需确认结果，直接看本次返回的上一次执行结果。', { details, exitCode: ExitCode.UsageError });
+}
+export function workflowPolicyError(subtype, message, details) {
+    return new WorkflowCliError('policy', subtype, message, {
+        details,
+        exitCode: ExitCode.PolicyError,
+    });
+}
+/** 澄清错误的 subtype 标记（调度层据此转成功信封，见 operations.ts 的 clarificationEnvelope）。 */
+export const CLARIFICATION_SUBTYPE = 'needs_clarification';
+/**
+ * 名称→ID 解析需要用户澄清 —— **这不是失败**。
+ *
+ * 底层解析函数（`read.ts` 的 `resolveTerm` / `resolveRequestLevel` / `resolveFilterFieldItem` /
+ * `resolveFieldValues`）无法直接产出信封，故仍以错误形式向上抛；**调度层（`operations.ts`）会把它
+ * 转成成功信封**：`ok:true` + `data.type=workflowClarification` + `data.status=NEEDS_CLARIFICATION`。
+ * 这与 `workflow.createList` 已有的 `ok:true` + `status:SELECTED/NEEDS_SELECTION` 是同一套约定。
+ *
+ * 形态来源（对齐 V11.3）：`e10_workflow.py:10356-10400`（工作流名 0 命中 / 多命中分支）与
+ * `resolve_system_name_condition`（L8262）都返回 `success:true` + `needClarification:true`
+ * （多命中时另带 `candidates` + `clarificationType` + `clarificationKeyword`），
+ * 文档见 `references/workflow-search.md`「异常返回处理 · 澄清后回传」。
+ *
+ * 覆盖的两种情形（与 V11.3 一致）：
+ * 1. **0 命中** —— 名称在当前环境没有对应对象（`candidates` 为空）；
+ * 2. **多命中且没有唯一全名精确匹配** —— 列出候选让用户挑；有唯一全名精确匹配时**不澄清**，直接用。
+ */
+export function workflowClarificationError(clarificationType, keyword, question, candidates = []) {
+    return new WorkflowCliError('validation', CLARIFICATION_SUBTYPE, question, {
+        details: {
+            clarificationType,
+            clarificationKeyword: keyword,
+            clarificationQuestion: question,
+            candidates,
+        },
+        exitCode: ExitCode.UsageError,
+    });
+}

package/dist/shortcuts/workflow/host.js

@@ -0,0 +1,224 @@
+import { requireE10Session } from '../../internal/e10/context.js';
+import { getActiveProfile } from '../../internal/e10/auth/session.js';
+import { createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
+import { workflowApiError, workflowAuthError, workflowNetworkError } from './errors.js';
+const DEFAULT_TIMEOUT_MS = 30_000;
+/**
+ * 登录失效关键词（与登录页/网关返回文本做大小写无关匹配）。
+ * 来源：原 Python skill `e10_workflow.py` 的 `LOGIN_EXPIRED_WORDS`，逐条对齐。
+ */
+const LOGIN_EXPIRED_WORDS = [
+    '未登录',
+    '请登录',
+    '登录失效',
+    '登录超时',
+    '会话过期',
+    '认证失败',
+    '身份认证失败',
+    'token失效',
+    'token超时',
+    'token过期',
+    'token expired',
+    'token timeout',
+    'token invalid',
+    'session expired',
+    'login required',
+    'not login',
+    'not logged',
+];
+/** 响应原文（用于 aTrust 重定向识别），等价原 Python `response_raw_text`。 */
+function responseRawText(value) {
+    if (typeof value === 'string')
+        return value;
+    if (value === undefined || value === null)
+        return '';
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+function payloadTexts(value) {
+    const texts = [];
+    if (typeof value === 'string') {
+        texts.push(value);
+        return texts;
+    }
+    if (!value || typeof value !== 'object')
+        return texts;
+    const record = value;
+    for (const key of ['code', 'status', 'message', 'msg', 'error', 'errorMsg', 'rawText']) {
+        const item = record[key];
+        if (item !== undefined && item !== null)
+            texts.push(String(item));
+    }
+    const data = record.data;
+    if (data && typeof data === 'object') {
+        const nested = data;
+        for (const key of ['code', 'status', 'message', 'msg', 'error', 'errorMsg']) {
+            const item = nested[key];
+            if (item !== undefined && item !== null)
+                texts.push(String(item));
+        }
+    }
+    return texts;
+}
+/**
+ * aTrust 网关重定向识别：3xx 且响应文本含 atrust。
+ * 来源：原 Python `is_atrust_redirect_response`。
+ */
+export function isAtustRedirect(status, value) {
+    if (status === undefined || !(status >= 300 && status < 400))
+        return false;
+    return responseRawText(value).toLowerCase().includes('atrust');
+}
+/**
+ * 登录失效判定：401/403、aTrust 重定向、或响应文本命中登录失效特征。
+ * 来源：原 Python `is_login_expired_payload`。
+ */
+export function isLoginExpired(value, httpStatus) {
+    if (httpStatus === 401 || httpStatus === 403)
+        return true;
+    if (isAtustRedirect(httpStatus, value))
+        return true;
+    const joined = payloadTexts(value).join('\n').toLowerCase();
+    if (joined.includes('login.jsp'))
+        return true;
+    if (joined.includes('<input') && joined.includes('password'))
+        return true;
+    return LOGIN_EXPIRED_WORDS.some((word) => joined.includes(word.toLowerCase()));
+}
+/**
+ * 业务错误提取。来源：原 Python `extract_api_business_error`，语义逐条对齐。
+ * 返回空串表示无业务错误。
+ */
+export function extractApiBusinessError(payload) {
+    if (!payload || typeof payload !== 'object')
+        return '';
+    const record = payload;
+    const message = record.message;
+    if (message && typeof message === 'object') {
+        const info = message;
+        const errcode = String(info.errcode ?? '').trim();
+        const errmsg = String(info.errmsg ?? '').trim();
+        if (errcode && !['0', '200'].includes(errcode)) {
+            return errmsg || `接口错误码 ${errcode}`;
+        }
+    }
+    if (record.fail === true || record.status === false) {
+        for (const key of ['msg', 'message', 'error', 'errorMsg']) {
+            const value = record[key];
+            if (typeof value === 'string' && value.trim())
+                return value.trim();
+        }
+        if (record.code !== undefined && record.code !== null) {
+            return `接口返回状态异常，code=${String(record.code)}`;
+        }
+    }
+    return '';
+}
+function loginExpiredMessage() {
+    return 'OA 登录状态或系统认证信息无效，本次任务已停止。请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> --agent_type <当前智能体名称> 完成登录，随后重放原请求。';
+}
+export function createWorkflowHost(ctx, dependencies = {}) {
+    let session = null;
+    let sessionContext = null;
+    const requireSession = dependencies.requireSession || requireE10Session;
+    async function ensureSession() {
+        if (!session) {
+            session = await requireSession(ctx);
+            const options = ctx.getGlobalOptions();
+            sessionContext = {
+                baseUrl: session.getBaseUrl(),
+                profile: options.profile || getActiveProfile(),
+                userId: session.userId,
+                agentType: session.agentType,
+                ...(session.version ? { version: session.version } : {}),
+                ...(session.tenantKey ? { tenantKey: session.tenantKey } : {}),
+                ...(session.tenantName ? { tenantName: session.tenantName } : {}),
+                ...(session.department ? { department: session.department } : {}),
+                ...(session.subcompany ? { subcompany: session.subcompany } : {}),
+                ...(session.position ? { position: session.position } : {}),
+            };
+        }
+        return session;
+    }
+    async function getSession() {
+        await ensureSession();
+        return sessionContext;
+    }
+    async function run(request, responseType) {
+        const { method = 'POST', path, query, body, form, formData, operation, timeoutMs = DEFAULT_TIMEOUT_MS, } = request;
+        const runtime = createE10RequestRuntime(ctx, await ensureSession(), {
+            interceptors: dependencies.interceptors,
+            fetch: dependencies.fetch,
+        });
+        let response;
+        try {
+            const base = { method, path, query, body, form, formData, operation, timeoutMs, module: 'workflow' };
+            response = responseType === 'binary'
+                ? await runtime.requestBinary(base)
+                : await runtime.requestJson(base);
+        }
+        catch (error) {
+            const structured = error;
+            if (structured?.type === 'network') {
+                throw workflowNetworkError(structured.subtype || 'transport', structured.message || '网络请求失败', { retryable: false, details: structured.details });
+            }
+            throw error;
+        }
+        if ('content' in response) {
+            if (isLoginExpired({}, response.status)) {
+                throw workflowAuthError('session_expired', loginExpiredMessage(), { httpStatus: response.status });
+            }
+            return {
+                status: response.status,
+                value: {},
+                content: response.content,
+                contentType: response.contentType,
+            };
+        }
+        if (isLoginExpired(response.value, response.status)) {
+            throw workflowAuthError('session_expired', loginExpiredMessage(), {
+                httpStatus: response.status,
+                details: { endpointKey: operation, response: response.value },
+            });
+        }
+        if (response.parseError) {
+            if (response.status < 200 || response.status >= 300) {
+                throw workflowApiError('http_error', `OA 接口 HTTP ${response.status}`, {
+                    code: response.status,
+                    details: { status: response.status },
+                });
+            }
+            throw workflowNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw workflowApiError('http_error', `OA 接口 HTTP ${response.status}`, {
+                code: response.status,
+                details: { status: response.status },
+            });
+        }
+        const businessError = extractApiBusinessError(response.value);
+        if (businessError) {
+            throw workflowApiError('business_error', `OA 接口返回错误，本次操作已停止。接口提示：${businessError}。如果您无法处理，请联系系统管理员。`, { details: { endpointKey: operation, businessError } });
+        }
+        return { status: response.status, value: response.value };
+    }
+    return {
+        async workflowRequest(request) {
+            const result = await run(request, 'json');
+            return result.value;
+        },
+        async workflowBinaryRequest(request) {
+            const result = await run(request, 'binary');
+            return {
+                content: result.content,
+                contentType: result.contentType || 'application/octet-stream',
+                status: result.status,
+            };
+        },
+        getSession,
+    };
+}

package/dist/shortcuts/workflow/index.js

@@ -0,0 +1,116 @@
+import { readFile } from 'node:fs/promises';
+import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { createWorkflowContinuationSigner } from './continuation.js';
+import { createWorkflowHost } from './host.js';
+import { workflowManifest } from './manifest.js';
+import { executeWorkflowOperation } from './operations.js';
+import { workflowValidationError } from './errors.js';
+function asOptions(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+function stripBom(value) {
+    return value.replace(/^\uFEFF+/u, '');
+}
+export async function inputFrom(options, extra = {}) {
+    const opts = asOptions(options);
+    if (opts.input && opts.inputJson) {
+        throw workflowValidationError('input_conflict', '不能同时传 --input 和 --input-json');
+    }
+    let input = {};
+    if (opts.inputJson) {
+        input = parseJsonInput(String(opts.inputJson), '--input-json');
+    }
+    if (opts.input) {
+        let raw;
+        try {
+            raw = stripBom(opts.input === '-' ? await readStdin() : await readFile(String(opts.input), 'utf8'));
+        }
+        catch {
+            throw workflowValidationError('input_unreadable', `无法读取 --input：${String(opts.input)}`);
+        }
+        input = parseJsonInput(raw, '--input');
+    }
+    return {
+        ...input,
+        ...Object.fromEntries(Object.entries(extra).filter(([, value]) => value !== undefined && value !== '')),
+    };
+}
+function parseJsonInput(raw, label) {
+    try {
+        const parsed = JSON.parse(stripBom(raw));
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            throw new Error('input must be an object');
+        }
+        return parsed;
+    }
+    catch {
+        throw workflowValidationError('input_invalid', `${label} 不是合法 JSON 对象`);
+    }
+}
+export function successEnvelope(operation, result) {
+    return {
+        schemaVersion: 1,
+        ok: true,
+        operation,
+        data: result.data === undefined ? null : result.data,
+        ...(result.meta ? { meta: result.meta } : {}),
+        warnings: [],
+    };
+}
+function failureEnvelope(error) {
+    const structured = error;
+    return {
+        schemaVersion: 1,
+        ok: false,
+        ...(structured?.partialData === undefined ? {} : { data: structured.partialData }),
+        error: toErrorEnvelope(error),
+    };
+}
+async function executeAndPrint(ctx, operation, input) {
+    try {
+        const result = await executeWorkflowOperation(operation, input, {
+            ctx,
+            host: createWorkflowHost(ctx),
+            continuation: createWorkflowContinuationSigner(ctx),
+        });
+        ctx.output.write(successEnvelope(operation, result), { json: true });
+    }
+    catch (error) {
+        console.error(JSON.stringify(failureEnvelope(error), null, 2));
+        process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
+    }
+}
+function withJsonInputOptions(command) {
+    command
+        .option('--input <path>', 'JSON input file, or - for stdin')
+        .option('--input-json <json>', 'inline JSON input object');
+    return command;
+}
+export const workflowShortcut = {
+    name: 'workflow',
+    description: '泛微E10流程智能助手 CLI（查询/查看/操作/批量/发起/修改）',
+    category: 'shortcut',
+    register({ program, action }) {
+        const workflow = program
+            .command('workflow')
+            .description('泛微E10流程智能助手（待办/已办/我发起/全部、详情、操作、批量、发起、修改）');
+        workflow.command('schema')
+            .description('Print workflow operation manifest for agents')
+            .action(action((ctx) => {
+            ctx.output.write(workflowManifest, { json: true });
+        }));
+        withJsonInputOptions(workflow.command('run')
+            .description('Run a workflow operation with JSON input')
+            .argument('<operation>', 'operation name, e.g. workflow.search'))
+            .action(action(async (ctx, operation, options) => {
+            await executeAndPrint(ctx, String(operation), await inputFrom(options));
+        }));
+    },
+};

package/dist/shortcuts/workflow/manifest.js

@@ -0,0 +1,30 @@
+import { workflowOperationDefinitions } from './operations/registry.js';
+/**
+ * 禁用边界：本模块保留原 skill 的全部可自动化能力，暂无可声明为"暂缓"的 operation。
+ * 明确不在本模块范围的能力（例如"姓名 → 人员 ID"解析）由 weaver-e10-hrm 提供，
+ * 不属于流程模块的 operation。
+ */
+const WITHHELD = [];
+function buildOperations() {
+    return workflowOperationDefinitions().map((definition) => ({
+        name: definition.name,
+        resource: definition.resource,
+        summary: definition.summary,
+        ...(definition.capability ? { capability: definition.capability } : {}),
+        risk: definition.risk,
+        ...(definition.requiresConfirmation ? { requiresConfirmation: true } : {}),
+        inputSchema: definition.inputSchema,
+    }));
+}
+export const workflowManifest = {
+    schemaVersion: 1,
+    name: 'workflow',
+    title: '泛微E10流程智能助手（查询/查看/操作/批量/发起/修改）',
+    version: '0.1.0',
+    host: 'e10-workflow',
+    status: 'builtin',
+    sourceSkill: 'weaver-e10-workflow',
+    capabilities: ['workflow'],
+    operations: buildOperations(),
+    withheldOperations: WITHHELD,
+};