mirror of
https://github.com/larksuite/cli.git
synced 2026-07-09 02:14:02 +08:00
bdb0cd14d1
Replace the embedded bootstrap manifest with a typed OAPI call to GET /open-apis/security_plugin/v1/sec_cli/manifest, resolving the download URL per-platform/per-arch against the live release set. TAT auth flows through the existing credential chain; an x-tt-env header is injected when LARKSUITE_CLI_X_TT_ENV is set, for BOE routing. Drop the standalone `sec install` verb — `sec run --auto-install` (default on) makes it redundant. Add a persistent --verbose / -v flag on the sec parent, inherited by every subcommand, that emits step-by-step trace output on stderr. bootstrap.json and bootstrap.go remain in-tree as dead code; they will be removed in a follow-up cleanup.
83 lines
2.7 KiB
Go
83 lines
2.7 KiB
Go
// Copyright (c) 2026 Lark Technologies Pte. Ltd.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package sec
|
|
|
|
import (
|
|
"bytes"
|
|
"fmt"
|
|
"os/exec"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
"github.com/larksuite/cli/internal/cmdutil"
|
|
"github.com/larksuite/cli/internal/output"
|
|
intsec "github.com/larksuite/cli/internal/sec"
|
|
)
|
|
|
|
// StopOptions holds inputs for `lark-cli sec stop`.
|
|
type StopOptions struct {
|
|
Factory *cmdutil.Factory
|
|
}
|
|
|
|
// NewCmdSecStop disables and removes the lark-sec-cli user system service.
|
|
// Counterpart to `sec run` — internally invokes `lark-sec-cli service disable`,
|
|
// which uninstalls the launchd / systemd / VBS-watchdog registration.
|
|
//
|
|
// The daemon itself wipes ~/.lark-cli/sec_config.json on shutdown (see its
|
|
// --disable-on-exit flag, default true), so subsequent lark-cli runs route
|
|
// directly to the upstream API instead of dangling through a dead local proxy.
|
|
func NewCmdSecStop(f *cmdutil.Factory, runF func(*StopOptions) error) *cobra.Command {
|
|
opts := &StopOptions{Factory: f}
|
|
cmd := &cobra.Command{
|
|
Use: "stop",
|
|
Short: "Disable and remove the lark-sec-cli user system service",
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
if runF != nil {
|
|
return runF(opts)
|
|
}
|
|
return runStop(cmd, opts)
|
|
},
|
|
}
|
|
return cmd
|
|
}
|
|
|
|
func runStop(cmd *cobra.Command, opts *StopOptions) error {
|
|
out := opts.Factory.IOStreams.ErrOut
|
|
trace := verboseOut(cmd, out)
|
|
|
|
tracef(trace, "sec stop", "constructing installer (lazy credentials)")
|
|
_, paths, err := installer(opts.Factory)
|
|
if err != nil {
|
|
return output.Errorf(output.ExitInternal, "internal", "%v", err)
|
|
}
|
|
tracef(trace, "sec stop", "loading state from %s", paths.StateFile())
|
|
state, err := intsec.LoadState(paths.StateFile())
|
|
if err != nil {
|
|
return output.Errorf(output.ExitInternal, "internal", "load sec state: %v", err)
|
|
}
|
|
if state == nil {
|
|
// Nothing on disk to stop — no-op.
|
|
tracef(trace, "sec stop", "no install on disk; nothing to stop")
|
|
output.PrintSuccess(out, "lark-sec-cli not installed; nothing to stop")
|
|
return nil
|
|
}
|
|
|
|
args := []string{"service", "disable"}
|
|
fmt.Fprintf(out, "Running: %s %v\n", state.BinaryPath, args)
|
|
tracef(trace, "sec stop", "shelling out to %s %v", state.BinaryPath, args)
|
|
|
|
c := exec.CommandContext(cmd.Context(), state.BinaryPath, args...)
|
|
var stdout, stderr bytes.Buffer
|
|
c.Stdout = &stdout
|
|
c.Stderr = &stderr
|
|
if err := c.Run(); err != nil {
|
|
return output.Errorf(output.ExitInternal, "sec_service_disable",
|
|
"`lark-sec-cli service disable` failed: %v\nstderr: %s", err, stderr.String())
|
|
}
|
|
tracef(trace, "sec stop", "service disable returned ok (%d bytes stdout)", stdout.Len())
|
|
fmt.Fprint(out, stdout.String())
|
|
output.PrintSuccess(out, "lark-sec-cli service disabled")
|
|
return nil
|
|
}
|