weaver-work-cli 0.1.8 → 0.1.20

package/dist/shortcuts/caizhilian/operations/handlers/setting-backup.js

@@ -0,0 +1,423 @@
+/**
+ * caizhilian.setting-backup — 备份设置（文件设置 → 备份设置）
+ *
+ * 覆盖「文件设置 → 备份设置」页面：
+ * - 开关本地备份（sysLocalFileBackup）
+ * - 备份规则 CRUD（list/get/update/delete/enable）
+ *
+ * 接口：
+ * - 拉 settings：POST /api/file/tenant/setting
+ * - 改开关：POST /api/file/tenant/setting/save
+ * - 列规则：POST /api/file/get/backup/rule/list
+ * - 单个规则详情：GET /api/file/get/backup/rule?id=N
+ * - 更新规则：POST /api/file/update/backup/rule
+ * - 删除规则：POST /api/file/delete/backup/rule
+ * - 启停规则：POST /api/file/enable/backup/rule
+ */
+import { CaizhilianCliError, caizhilianValidationError } from '../../errors.js';
+import { caizhilianSuccess } from '../types.js';
+import { requireId } from '../shared.js';
+const ACTION = 'caizhilian.setting-backup';
+// ── 接口路径 ──────────────────────────────────────────────
+const GET_SETTING_PATH = '/api/file/tenant/setting';
+const SAVE_SETTING_PATH = '/api/file/tenant/setting/save';
+const LIST_RULES_PATH = '/api/file/get/backup/rule/list';
+const GET_RULE_PATH = '/api/file/get/backup/rule';
+const UPDATE_RULE_PATH = '/api/file/update/backup/rule';
+const DELETE_RULE_PATH = '/api/file/delete/backup/rule';
+const ENABLE_RULE_PATH = '/api/file/enable/backup/rule';
+// ── 辅助函数 ──────────────────────────────────────────────
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+function asList(value) {
+    return Array.isArray(value) ? value : [];
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function parseBoolean(value) {
+    if (typeof value === 'boolean')
+        return value;
+    const s = String(value).toLowerCase();
+    return ['true', '1', '开', '启用'].includes(s);
+}
+// ── 读取备份开关状态 ──────────────────────────────────────
+async function getBackupSetting(args, env) {
+    const response = await env.host.request({
+        method: 'POST',
+        path: GET_SETTING_PATH,
+        body: {},
+        operation: ACTION,
+    });
+    const data = asRecord(response);
+    if (!data.status && !data.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(data.msg || data.message || '读取备份设置失败'), {
+            code: data.code ?? data.status,
+            details: { action: ACTION, message: String(data.msg || data.message || '读取备份设置失败') },
+            exitCode: 1,
+        });
+    }
+    const settings = asRecord(data.data);
+    return caizhilianSuccess(ACTION, {
+        enabled: settings.sysLocalFileBackup ?? false,
+    });
+}
+// ── 设置备份开关（prepare/apply）──────────────────────────────────────
+async function setBackupSettingPrepare(args, env) {
+    const enabled = parseBoolean(args.enabled);
+    // 读取当前设置
+    const currentResponse = await env.host.request({
+        method: 'POST',
+        path: GET_SETTING_PATH,
+        body: {},
+        operation: ACTION,
+    });
+    const currentData = asRecord(currentResponse);
+    if (!currentData.status && !currentData.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(currentData.msg || currentData.message || '读取备份设置失败'), {
+            code: currentData.code ?? currentData.status,
+            details: { action: ACTION, message: String(currentData.msg || currentData.message || '读取备份设置失败') },
+            exitCode: 1,
+        });
+    }
+    const current = asRecord(currentData.data);
+    const currentEnabled = current.sysLocalFileBackup ?? false;
+    // 签发 continuation
+    const continuation = await env.continuation.issue({
+        operation: 'caizhilian.setting-backup.set.apply',
+        enabled,
+        currentEnabled,
+    });
+    return caizhilianSuccess('caizhilian.setting-backup.set.prepare', {
+        enabled,
+        current_enabled: currentEnabled,
+        continuation,
+    });
+}
+async function setBackupSettingApply(args, env, lease) {
+    const enabled = lease.payload?.enabled;
+    // 保存
+    const saveResponse = await env.host.request({
+        method: 'POST',
+        path: SAVE_SETTING_PATH,
+        body: { sysLocalFileBackup: enabled },
+        operation: 'caizhilian.setting-backup.set.apply',
+    });
+    const saveData = asRecord(saveResponse);
+    if (!saveData.status && !saveData.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(saveData.msg || saveData.message || '保存备份设置失败'), {
+            code: saveData.code ?? saveData.status,
+            details: { action: 'caizhilian.setting-backup.set.apply', message: String(saveData.msg || saveData.message || '保存备份设置失败') },
+            exitCode: 1,
+        });
+    }
+    // 回读复核
+    const verifyResponse = await env.host.request({
+        method: 'POST',
+        path: GET_SETTING_PATH,
+        body: {},
+        operation: 'caizhilian.setting-backup.set.apply',
+    });
+    const verifyData = asRecord(verifyResponse);
+    const verified = asRecord(verifyData.data);
+    return caizhilianSuccess('caizhilian.setting-backup.set.apply', {
+        enabled: verified.sysLocalFileBackup ?? false,
+    });
+}
+// ── 列出备份规则 ──────────────────────────────────────────
+async function listBackupRules(args, env) {
+    const response = await env.host.request({
+        method: 'POST',
+        path: LIST_RULES_PATH,
+        body: { pageNo: args.page_no || 1, pageSize: args.page_size || 20 },
+        operation: ACTION,
+    });
+    const data = asRecord(response);
+    if (!data.status && !data.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(data.msg || data.message || '查询备份规则失败'), {
+            code: data.code ?? data.status,
+            details: { action: ACTION, message: String(data.msg || data.message || '查询备份规则失败') },
+            exitCode: 1,
+        });
+    }
+    const result = asRecord(data.data);
+    const rules = asList(result.list || result.data).map((item) => ({
+        id: item.id,
+        name: item.backupName || '',
+        path: item.backupPath || '',
+        period: item.period || 0,
+        enabled: item.enableStatus ?? false,
+        create_time: item.createTime || '',
+    }));
+    return caizhilianSuccess(ACTION, {
+        total: result.total || 0,
+        page_no: args.page_no || 1,
+        page_size: args.page_size || 20,
+        rules,
+    });
+}
+// ── 获取单个备份规则详情 ──────────────────────────────────
+async function getBackupRule(args, env) {
+    const ruleId = requireId(args.id, 'id');
+    const response = await env.host.request({
+        method: 'GET',
+        path: `${GET_RULE_PATH}?id=${ruleId}`,
+        operation: ACTION,
+    });
+    const data = asRecord(response);
+    if (!data.status && !data.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(data.msg || data.message || '查询备份规则失败'), {
+            code: data.code ?? data.status,
+            details: { action: ACTION, message: String(data.msg || data.message || '查询备份规则失败') },
+            exitCode: 1,
+        });
+    }
+    const rule = asRecord(data.data);
+    return caizhilianSuccess(ACTION, {
+        id: rule.id,
+        name: rule.backupName || '',
+        path: rule.backupPath || '',
+        period: rule.period || 0,
+        enabled: rule.enableStatus ?? false,
+        create_time: rule.createTime || '',
+    });
+}
+// ── 更新备份规则（prepare/apply）──────────────────────────────────────
+async function updateBackupRulePrepare(args, env) {
+    const ruleId = requireId(args.id, 'id');
+    // 读取当前规则
+    const currentResponse = await env.host.request({
+        method: 'GET',
+        path: `${GET_RULE_PATH}?id=${ruleId}`,
+        operation: ACTION,
+    });
+    const currentData = asRecord(currentResponse);
+    if (!currentData.status && !currentData.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(currentData.msg || currentData.message || '查询备份规则失败'), {
+            code: currentData.code ?? currentData.status,
+            details: { action: ACTION, message: String(currentData.msg || currentData.message || '查询备份规则失败') },
+            exitCode: 1,
+        });
+    }
+    const current = asRecord(currentData.data);
+    // 构建改动
+    const changed = { id: ruleId };
+    if (args.name !== undefined)
+        changed.backupName = String(args.name);
+    if (args.path !== undefined)
+        changed.backupPath = String(args.path);
+    if (args.period !== undefined) {
+        const period = parseInt(String(args.period), 10);
+        if (isNaN(period) || period < 60 || period > 1440) {
+            throw caizhilianValidationError('range_invalid', '备份周期必须在 60-1440 分钟之间');
+        }
+        changed.period = period;
+    }
+    // 签发 continuation
+    const continuation = await env.continuation.issue({
+        operation: 'caizhilian.setting-backup.rule.update.apply',
+        changed,
+        current: {
+            id: current.id,
+            name: current.backupName || '',
+            path: current.backupPath || '',
+            period: current.period || 0,
+            enabled: current.enableStatus ?? false,
+        },
+    });
+    return caizhilianSuccess('caizhilian.setting-backup.rule.update.prepare', {
+        rule_id: ruleId,
+        changed,
+        current: {
+            id: current.id,
+            name: current.backupName || '',
+            path: current.backupPath || '',
+            period: current.period || 0,
+            enabled: current.enableStatus ?? false,
+        },
+        continuation,
+    });
+}
+async function updateBackupRuleApply(args, env, lease) {
+    const changed = lease.payload?.changed;
+    const saveResponse = await env.host.request({
+        method: 'POST',
+        path: UPDATE_RULE_PATH,
+        body: changed,
+        operation: 'caizhilian.setting-backup.rule.update.apply',
+    });
+    const saveData = asRecord(saveResponse);
+    if (!saveData.status && !saveData.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(saveData.msg || saveData.message || '更新备份规则失败'), {
+            code: saveData.code ?? saveData.status,
+            details: { action: 'caizhilian.setting-backup.rule.update.apply', message: String(saveData.msg || saveData.message || '更新备份规则失败') },
+            exitCode: 1,
+        });
+    }
+    // 回读复核
+    const verifyResponse = await env.host.request({
+        method: 'GET',
+        path: `${GET_RULE_PATH}?id=${changed.id}`,
+        operation: 'caizhilian.setting-backup.rule.update.apply',
+    });
+    const verifyData = asRecord(verifyResponse);
+    const verified = asRecord(verifyData.data);
+    return caizhilianSuccess('caizhilian.setting-backup.rule.update.apply', {
+        rule: {
+            id: verified.id,
+            name: verified.backupName || '',
+            path: verified.backupPath || '',
+            period: verified.period || 0,
+            enabled: verified.enableStatus ?? false,
+        },
+    });
+}
+// ── 删除备份规则（prepare/apply）──────────────────────────────────────
+async function deleteBackupRulePrepare(args, env) {
+    const ruleId = requireId(args.id, 'id');
+    // 读取当前规则
+    const currentResponse = await env.host.request({
+        method: 'GET',
+        path: `${GET_RULE_PATH}?id=${ruleId}`,
+        operation: ACTION,
+    });
+    const currentData = asRecord(currentResponse);
+    if (!currentData.status && !currentData.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(currentData.msg || currentData.message || '查询备份规则失败'), {
+            code: currentData.code ?? currentData.status,
+            details: { action: ACTION, message: String(currentData.msg || currentData.message || '查询备份规则失败') },
+            exitCode: 1,
+        });
+    }
+    const current = asRecord(currentData.data);
+    // 签发 continuation
+    const continuation = await env.continuation.issue({
+        operation: 'caizhilian.setting-backup.rule.delete.apply',
+        ruleId,
+        current: {
+            id: current.id,
+            name: current.backupName || '',
+            path: current.backupPath || '',
+        },
+    });
+    return caizhilianSuccess('caizhilian.setting-backup.rule.delete.prepare', {
+        rule_id: ruleId,
+        current: {
+            id: current.id,
+            name: current.backupName || '',
+            path: current.backupPath || '',
+        },
+        continuation,
+    });
+}
+async function deleteBackupRuleApply(args, env, lease) {
+    const ruleId = lease.payload?.ruleId;
+    const deleteResponse = await env.host.request({
+        method: 'POST',
+        path: DELETE_RULE_PATH,
+        body: { ids: [ruleId] },
+        operation: 'caizhilian.setting-backup.rule.delete.apply',
+    });
+    const deleteData = asRecord(deleteResponse);
+    if (!deleteData.status && !deleteData.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(deleteData.msg || deleteData.message || '删除备份规则失败'), {
+            code: deleteData.code ?? deleteData.status,
+            details: { action: 'caizhilian.setting-backup.rule.delete.apply', message: String(deleteData.msg || deleteData.message || '删除备份规则失败') },
+            exitCode: 1,
+        });
+    }
+    return caizhilianSuccess('caizhilian.setting-backup.rule.delete.apply', {
+        deleted: true,
+        rule_id: ruleId,
+    });
+}
+// ── 启停备份规则（prepare/apply）──────────────────────────────────────
+async function enableBackupRulePrepare(args, env) {
+    const ruleId = requireId(args.id, 'id');
+    const enabled = parseBoolean(args.enabled);
+    // 读取当前规则
+    const currentResponse = await env.host.request({
+        method: 'GET',
+        path: `${GET_RULE_PATH}?id=${ruleId}`,
+        operation: ACTION,
+    });
+    const currentData = asRecord(currentResponse);
+    if (!currentData.status && !currentData.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(currentData.msg || currentData.message || '查询备份规则失败'), {
+            code: currentData.code ?? currentData.status,
+            details: { action: ACTION, message: String(currentData.msg || currentData.message || '查询备份规则失败') },
+            exitCode: 1,
+        });
+    }
+    const current = asRecord(currentData.data);
+    // 签发 continuation
+    const continuation = await env.continuation.issue({
+        operation: 'caizhilian.setting-backup.rule.enable.apply',
+        ruleId,
+        enabled,
+        currentEnabled: current.enableStatus ?? false,
+    });
+    return caizhilianSuccess('caizhilian.setting-backup.rule.enable.prepare', {
+        rule_id: ruleId,
+        enabled,
+        current_enabled: current.enableStatus ?? false,
+        continuation,
+    });
+}
+async function enableBackupRuleApply(args, env, lease) {
+    const ruleId = lease.payload?.ruleId;
+    const enabled = lease.payload?.enabled;
+    const enableResponse = await env.host.request({
+        method: 'POST',
+        path: ENABLE_RULE_PATH,
+        body: { id: ruleId, enableStatus: enabled },
+        operation: 'caizhilian.setting-backup.rule.enable.apply',
+    });
+    const enableData = asRecord(enableResponse);
+    if (!enableData.status && !enableData.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(enableData.msg || enableData.message || '启停备份规则失败'), {
+            code: enableData.code ?? enableData.status,
+            details: { action: 'caizhilian.setting-backup.rule.enable.apply', message: String(enableData.msg || enableData.message || '启停备份规则失败') },
+            exitCode: 1,
+        });
+    }
+    // 回读复核
+    const verifyResponse = await env.host.request({
+        method: 'GET',
+        path: `${GET_RULE_PATH}?id=${ruleId}`,
+        operation: 'caizhilian.setting-backup.rule.enable.apply',
+    });
+    const verifyData = asRecord(verifyResponse);
+    const verified = asRecord(verifyData.data);
+    return caizhilianSuccess('caizhilian.setting-backup.rule.enable.apply', {
+        rule_id: ruleId,
+        enabled: verified.enableStatus ?? false,
+    });
+}
+// ── 处理器汇总 ────────────────────────────────────────────
+export const caizhilianSettingBackupHandlers = {
+    'caizhilian.setting-backup.get': { execute: getBackupSetting },
+    'caizhilian.setting-backup.set': {
+        prepare: setBackupSettingPrepare,
+        apply: setBackupSettingApply,
+        targetKeys: ['enabled'],
+    },
+    'caizhilian.setting-backup.rule.list': { execute: listBackupRules },
+    'caizhilian.setting-backup.rule.get': { execute: getBackupRule },
+    'caizhilian.setting-backup.rule.update': {
+        prepare: updateBackupRulePrepare,
+        apply: updateBackupRuleApply,
+        targetKeys: ['id'],
+    },
+    'caizhilian.setting-backup.rule.delete': {
+        prepare: deleteBackupRulePrepare,
+        apply: deleteBackupRuleApply,
+        targetKeys: ['id'],
+    },
+    'caizhilian.setting-backup.rule.enable': {
+        prepare: enableBackupRulePrepare,
+        apply: enableBackupRuleApply,
+        targetKeys: ['id'],
+    },
+};

package/dist/shortcuts/caizhilian/operations/handlers/setting-encrypt.js

@@ -0,0 +1,238 @@
+/**
+ * caizhilian.setting-encrypt — 加解密设置（文件设置 → 加解密设置）
+ *
+ * 覆盖「文件设置 → 加解密设置」页面的 8 项配置：
+ * - openEncryptFunction: 是否启用加解密功能
+ * - encryptPlugs: 加解密插件类型
+ * - encryptUrl: 加解密服务地址
+ * - encryptScene: 加解密场景
+ * - encryptFileUpload: 加密文件上传规则
+ * - encryptFileDownload: 加密文件下载规则
+ * - unencryptedFileUpload: 未加密文件上传规则
+ * - unencryptedFileDownload: 未加密文件下载规则
+ *
+ * 接口：
+ * - 拉配置（新版本）：GET /api/file/thirdPlugEncDec/config
+ * - 拉配置（旧版本兼容）：POST /api/file/tenant/setting
+ * - 保存：POST /api/file/tenant/setting/save（整对象 POST）
+ */
+import { CaizhilianCliError, caizhilianValidationError } from '../../errors.js';
+import { caizhilianSuccess } from '../types.js';
+const ACTION = 'caizhilian.setting-encrypt';
+// ── 接口路径 ──────────────────────────────────────────────
+const GET_CONFIG_V2_PATH = '/api/file/thirdPlugEncDec/config';
+const GET_SETTING_PATH = '/api/file/tenant/setting';
+const SAVE_SETTING_PATH = '/api/file/tenant/setting/save';
+// ── 字段映射 ──────────────────────────────────────────────
+const FIELD_MAP = {
+    'enabled': 'openEncryptFunction',
+    'plugs': 'encryptPlugs',
+    'url': 'encryptUrl',
+    'scene': 'encryptScene',
+    'upload-encrypted': 'encryptFileUpload',
+    'download-encrypted': 'encryptFileDownload',
+    'upload-unencrypted': 'unencryptedFileUpload',
+    'download-unencrypted': 'unencryptedFileDownload',
+};
+const VALID_SCENES = ['uploadAndDownloadEncrypt', 'uploadEncrypt', 'downloadEncrypt', 'custom'];
+// ── 辅助函数 ──────────────────────────────────────────────
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function parseBoolean(value) {
+    if (typeof value === 'boolean')
+        return value;
+    const s = String(value).toLowerCase();
+    return ['true', '1', '开', '启用'].includes(s);
+}
+// ── 读取加解密配置 ──────────────────────────────────────
+async function getEncryptSetting(args, env) {
+    let settings = {};
+    // 优先走新版本接口
+    try {
+        const response = await env.host.request({
+            method: 'GET',
+            path: GET_CONFIG_V2_PATH,
+            operation: ACTION,
+        });
+        const data = asRecord(response);
+        if (data.code === 200 || data.status === 0 || data.success) {
+            settings = asRecord(data.data);
+        }
+    }
+    catch (error) {
+        // 新版本接口失败，走旧版本兼容接口
+        const response = await env.host.request({
+            method: 'POST',
+            path: GET_SETTING_PATH,
+            body: {},
+            operation: ACTION,
+        });
+        const data = asRecord(response);
+        if (!data.status && !data.success) {
+            throw new CaizhilianCliError('api', 'business_error', String(data.msg || data.message || '读取加解密设置失败'), {
+                code: data.code ?? data.status,
+                details: { action: ACTION, message: String(data.msg || data.message || '读取加解密设置失败') },
+                exitCode: 1,
+            });
+        }
+        const settingData = asRecord(data.data);
+        settings = asRecord(settingData.encryptionSettings);
+    }
+    return caizhilianSuccess(ACTION, {
+        settings: {
+            enabled: settings.openEncryptFunction ?? false,
+            plugs: settings.encryptPlugs || '',
+            url: settings.encryptUrl || '',
+            scene: settings.encryptScene || 'uploadAndDownloadEncrypt',
+            upload_encrypted: settings.encryptFileUpload || '',
+            download_encrypted: settings.encryptFileDownload || '',
+            upload_unencrypted: settings.unencryptedFileUpload || '',
+            download_unencrypted: settings.unencryptedFileDownload || '',
+        },
+    });
+}
+// ── 保存加解密配置（prepare/apply）──────────────────────────────────────
+async function setEncryptSettingPrepare(args, env) {
+    const items = args.items;
+    if (!isPlainObject(items)) {
+        throw caizhilianValidationError('input_not_object', 'items 必须是对象');
+    }
+    // 读取当前配置
+    let current = {};
+    try {
+        const response = await env.host.request({
+            method: 'GET',
+            path: GET_CONFIG_V2_PATH,
+            operation: ACTION,
+        });
+        const data = asRecord(response);
+        if (data.code === 200 || data.status === 0 || data.success) {
+            current = asRecord(data.data);
+        }
+    }
+    catch (error) {
+        const response = await env.host.request({
+            method: 'POST',
+            path: GET_SETTING_PATH,
+            body: {},
+            operation: ACTION,
+        });
+        const data = asRecord(response);
+        if (!data.status && !data.success) {
+            throw new CaizhilianCliError('api', 'business_error', String(data.msg || data.message || '读取加解密设置失败'), {
+                code: data.code ?? data.status,
+                details: { action: ACTION, message: String(data.msg || data.message || '读取加解密设置失败') },
+                exitCode: 1,
+            });
+        }
+        const settingData = asRecord(data.data);
+        current = asRecord(settingData.encryptionSettings);
+    }
+    // 构建改动
+    const changed = {};
+    for (const [key, value] of Object.entries(items)) {
+        const dtoKey = FIELD_MAP[key];
+        if (!dtoKey) {
+            throw caizhilianValidationError('unknown_field', `未知字段: ${key}`);
+        }
+        if (key === 'enabled') {
+            changed[dtoKey] = parseBoolean(value);
+        }
+        else if (key === 'scene') {
+            const scene = String(value);
+            if (!VALID_SCENES.includes(scene)) {
+                throw caizhilianValidationError('enum_invalid', `encryptScene 不支持: ${scene}，可选值: ${VALID_SCENES.join(', ')}`);
+            }
+            changed[dtoKey] = scene;
+        }
+        else {
+            changed[dtoKey] = String(value);
+        }
+    }
+    // 签发 continuation
+    const continuation = await env.continuation.issue({
+        operation: 'caizhilian.setting-encrypt.set.apply',
+        changed,
+        current,
+    });
+    return caizhilianSuccess('caizhilian.setting-encrypt.set.prepare', {
+        changed,
+        current: {
+            enabled: current.openEncryptFunction ?? false,
+            plugs: current.encryptPlugs || '',
+            url: current.encryptUrl || '',
+            scene: current.encryptScene || 'uploadAndDownloadEncrypt',
+        },
+        continuation,
+    });
+}
+async function setEncryptSettingApply(args, env, lease) {
+    const changed = lease.payload?.changed;
+    const current = lease.payload?.current;
+    // 合并当前配置与改动
+    const merged = { ...current, ...changed };
+    // 保存（整对象 POST）
+    const saveResponse = await env.host.request({
+        method: 'POST',
+        path: SAVE_SETTING_PATH,
+        body: { encryptionSettings: merged },
+        operation: 'caizhilian.setting-encrypt.set.apply',
+    });
+    const saveData = asRecord(saveResponse);
+    if (!saveData.status && !saveData.success) {
+        throw new CaizhilianCliError('api', 'business_error', String(saveData.msg || saveData.message || '保存加解密设置失败'), {
+            code: saveData.code ?? saveData.status,
+            details: { action: 'caizhilian.setting-encrypt.set.apply', message: String(saveData.msg || saveData.message || '保存加解密设置失败') },
+            exitCode: 1,
+        });
+    }
+    // 回读复核
+    let verified = {};
+    try {
+        const response = await env.host.request({
+            method: 'GET',
+            path: GET_CONFIG_V2_PATH,
+            operation: 'caizhilian.setting-encrypt.set.apply',
+        });
+        const data = asRecord(response);
+        if (data.code === 200 || data.status === 0 || data.success) {
+            verified = asRecord(data.data);
+        }
+    }
+    catch (error) {
+        const response = await env.host.request({
+            method: 'POST',
+            path: GET_SETTING_PATH,
+            body: {},
+            operation: 'caizhilian.setting-encrypt.set.apply',
+        });
+        const data = asRecord(response);
+        const settingData = asRecord(data.data);
+        verified = asRecord(settingData.encryptionSettings);
+    }
+    return caizhilianSuccess('caizhilian.setting-encrypt.set.apply', {
+        settings: {
+            enabled: verified.openEncryptFunction ?? false,
+            plugs: verified.encryptPlugs || '',
+            url: verified.encryptUrl || '',
+            scene: verified.encryptScene || 'uploadAndDownloadEncrypt',
+            upload_encrypted: verified.encryptFileUpload || '',
+            download_encrypted: verified.encryptFileDownload || '',
+            upload_unencrypted: verified.unencryptedFileUpload || '',
+            download_unencrypted: verified.unencryptedFileDownload || '',
+        },
+    });
+}
+// ── 处理器汇总 ────────────────────────────────────────────
+export const caizhilianSettingEncryptHandlers = {
+    'caizhilian.setting-encrypt.get': { execute: getEncryptSetting },
+    'caizhilian.setting-encrypt.set': {
+        prepare: setEncryptSettingPrepare,
+        apply: setEncryptSettingApply,
+        targetKeys: ['items'],
+    },
+};