// Copyright (c) 2026 Lark Technologies Pte. Ltd. // SPDX-License-Identifier: MIT package common import ( "strconv" "strings" "github.com/larksuite/cli/errs" "github.com/larksuite/cli/extension/fileio" ) // ValidationErrorf returns a typed validation error with invalid_argument subtype. func ValidationErrorf(format string, args ...any) *errs.ValidationError { return errs.NewValidationError(errs.SubtypeInvalidArgument, format, args...) } // MutuallyExclusiveTyped checks that at most one of the given flags is set. func MutuallyExclusiveTyped(rt *RuntimeContext, flags ...string) error { var set []string for _, f := range flags { val := rt.Str(f) if val != "" { set = append(set, "--"+f) } } if len(set) > 1 { return ValidationErrorf("%s are mutually exclusive", strings.Join(set, " and ")). WithParams(invalidParams(set, "mutually exclusive")...) } return nil } // AtLeastOneTyped checks that at least one of the given flags is set. func AtLeastOneTyped(rt *RuntimeContext, flags ...string) error { for _, f := range flags { if rt.Str(f) != "" { return nil } } names := make([]string, len(flags)) for i, f := range flags { names[i] = "--" + f } return ValidationErrorf("specify at least one of %s", strings.Join(names, " or ")). WithParams(invalidParams(names, "required; specify at least one")...) } // ExactlyOneTyped checks that exactly one of the given flags is set. func ExactlyOneTyped(rt *RuntimeContext, flags ...string) error { if err := AtLeastOneTyped(rt, flags...); err != nil { return err } return MutuallyExclusiveTyped(rt, flags...) } // ValidatePageSizeTyped validates that the named flag (if set) is an integer within [minVal, maxVal]. // It returns the parsed value (or defaultVal if the flag is empty) and any validation error. func ValidatePageSizeTyped(rt *RuntimeContext, flagName string, defaultVal, minVal, maxVal int) (int, error) { param := "--" + flagName if rt.Cmd == nil { return defaultVal, nil } flag := rt.Cmd.Flags().Lookup(flagName) if flag == nil { return defaultVal, nil } s := flag.Value.String() if s == "" { return defaultVal, nil } n, err := strconv.Atoi(s) if err != nil { return 0, ValidationErrorf("invalid --%s %q: must be an integer", flagName, s).WithParam(param) } if n < minVal || n > maxVal { return 0, ValidationErrorf("invalid --%s %d: must be between %d and %d", flagName, n, minVal, maxVal). WithParam(param) } return n, nil } // ValidateSafePathTyped ensures path is relative and resolves within the // current working directory. It catches traversal, symlink escape, and control // characters by delegating to FileIO.ResolvePath. Works for both file and // directory paths. func ValidateSafePathTyped(fio fileio.FileIO, path string) error { _, err := fio.ResolvePath(path) if err != nil { return ValidationErrorf("%s", err).WithCause(err) } return nil } // RejectDangerousCharsTyped returns an error if value contains ASCII control // characters or dangerous Unicode code points. func RejectDangerousCharsTyped(paramName, value string) error { for _, r := range value { if r < 0x20 && r != '\t' && r != '\n' { return ValidationErrorf("parameter %q contains control character U+%04X", paramName, r). WithParam(paramName) } if r == 0x7F { return ValidationErrorf("parameter %q contains DEL character", paramName). WithParam(paramName) } if IsDangerousUnicode(r) { return ValidationErrorf("parameter %q contains dangerous Unicode character U+%04X", paramName, r). WithParam(paramName) } } return nil } func invalidParams(names []string, reason string) []errs.InvalidParam { params := make([]errs.InvalidParam, len(names)) for i, name := range names { params[i] = errs.InvalidParam{Name: name, Reason: reason} } return params }