mirror of
https://github.com/larksuite/cli.git
synced 2026-07-03 14:02:43 +08:00
Every failure on the authentication, authorization, and configuration
path now surfaces as a typed structured error instead of an ad-hoc
envelope. Users and scripts that consume CLI output get:
- a fixed nine-category taxonomy on the wire, each mapped to a
stable shell exit code (authentication/authorization/config = 3,
network = 4, internal = 5, policy = 6, confirmation = 10)
- identity-aware detail fields (missing_scopes, requested_scopes,
granted_scopes, console_url, log_id, retryable, hint) carried
uniformly on the envelope
- a single canonical policy envelope at exit 6; the legacy
auth_error carve-out is retired
- per-subtype canonical message + hint that preserves Lark's
diagnostic phrasing and routes recovery to the right actor:
app developer (app_scope_not_applied), user (missing_scope,
token_scope_insufficient, user_unauthorized), or tenant admin
(app_unavailable, app_disabled)
- wrong app credentials classify as config/invalid_client whether
surfaced by the Open API endpoint (99991543) or the tenant
access-token mint endpoint (10003 / 10014), instead of
collapsing to a transport error or api/unknown
- local shortcut scope preflight emits the same
authorization/missing_scope envelope (identity + deterministic
missing-scope set) used by the post-call permission path, so AI
consumers read the same structured shape from precheck and from
server-returned permission denial
- streaming download/upload failures keep the same network subtype
split (timeout / TLS / DNS / transport) as the non-stream path
instead of collapsing every cause to a generic transport failure
- console_url is carried only on the bot-perspective
app_scope_not_applied envelope (where the recovery action is
"developer applies the scope at the developer console"); the
user-perspective missing_scope envelope drops the field, since
the only actionable user recovery is `lark-cli auth login --scope`
and pointing an end user at a console they cannot modify is
misleading
- bind workflows (Hermes / OpenClaw / lark-channel) flatten dynamic
Type tags to wire 'config' with the original module name kept
as a metric label
All 10 typed errors are cause-bearing, nil-safe on .Error() and
.Unwrap(), and defensively clone slice setter inputs. Four lint
rules (CheckNilSafeError / CheckBuilderImmutable / CheckUnwrapSymmetry
/ CheckBuildAPIErrorArms) lock these invariants on migrated paths.
245 lines
7.3 KiB
Go
245 lines
7.3 KiB
Go
// Copyright (c) 2026 Lark Technologies Pte. Ltd.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package output
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"errors"
|
|
"io"
|
|
"testing"
|
|
|
|
"github.com/larksuite/cli/errs"
|
|
)
|
|
|
|
// failingWriter writes up to limit bytes then returns io.ErrShortWrite on
|
|
// the write that would push past the limit. Used to simulate a stderr that
|
|
// dies mid-envelope.
|
|
type failingWriter struct {
|
|
limit int
|
|
n int
|
|
}
|
|
|
|
func (f *failingWriter) Write(p []byte) (int, error) {
|
|
if f.n+len(p) > f.limit {
|
|
canWrite := f.limit - f.n
|
|
if canWrite < 0 {
|
|
canWrite = 0
|
|
}
|
|
f.n += canWrite
|
|
return canWrite, io.ErrShortWrite
|
|
}
|
|
f.n += len(p)
|
|
return len(p), nil
|
|
}
|
|
|
|
// TestWriteTypedErrorEnvelope_PartialWritePreservesSuccessStatus pins that
|
|
// when serialization succeeds but the underlying write fails mid-envelope,
|
|
// WriteTypedErrorEnvelope returns true so the dispatcher does NOT fall
|
|
// through to the legacy "Error:" path and clobber the typed exit code with
|
|
// 1. Exit code is preserved separately by handleRootError computing
|
|
// ExitCodeOf(err) before the write.
|
|
func TestWriteTypedErrorEnvelope_PartialWritePreservesSuccessStatus(t *testing.T) {
|
|
err := errs.NewAuthenticationError(errs.SubtypeTokenExpired, "token expired")
|
|
w := &failingWriter{limit: 20} // dies mid-envelope
|
|
if ok := WriteTypedErrorEnvelope(w, err, "user"); !ok {
|
|
t.Error("partial write must return true; exit code is preserved separately")
|
|
}
|
|
}
|
|
|
|
func TestWriteErrorEnvelope_WithNotice(t *testing.T) {
|
|
// Set up PendingNotice
|
|
origNotice := PendingNotice
|
|
PendingNotice = func() map[string]interface{} {
|
|
return map[string]interface{}{
|
|
"update": map[string]interface{}{
|
|
"current": "1.0.0",
|
|
"latest": "2.0.0",
|
|
},
|
|
}
|
|
}
|
|
defer func() { PendingNotice = origNotice }()
|
|
|
|
exitErr := &ExitError{
|
|
Code: 1,
|
|
Detail: &ErrDetail{Type: "api_error", Message: "something failed"},
|
|
}
|
|
|
|
var buf bytes.Buffer
|
|
WriteErrorEnvelope(&buf, exitErr, "user")
|
|
|
|
var env map[string]interface{}
|
|
if err := json.Unmarshal(buf.Bytes(), &env); err != nil {
|
|
t.Fatalf("failed to parse output: %v", err)
|
|
}
|
|
|
|
// Verify _notice is present
|
|
notice, ok := env["_notice"].(map[string]interface{})
|
|
if !ok {
|
|
t.Fatal("expected _notice field in output")
|
|
}
|
|
update, ok := notice["update"].(map[string]interface{})
|
|
if !ok {
|
|
t.Fatal("expected _notice.update field")
|
|
}
|
|
if update["latest"] != "2.0.0" {
|
|
t.Errorf("expected latest=2.0.0, got %v", update["latest"])
|
|
}
|
|
|
|
// Verify standard fields
|
|
if env["ok"] != false {
|
|
t.Error("expected ok=false")
|
|
}
|
|
if env["identity"] != "user" {
|
|
t.Errorf("expected identity=user, got %v", env["identity"])
|
|
}
|
|
}
|
|
|
|
func TestWriteErrorEnvelope_WithoutNotice(t *testing.T) {
|
|
// Ensure PendingNotice is nil
|
|
origNotice := PendingNotice
|
|
PendingNotice = nil
|
|
defer func() { PendingNotice = origNotice }()
|
|
|
|
exitErr := &ExitError{
|
|
Code: 1,
|
|
Detail: &ErrDetail{Type: "api_error", Message: "something failed"},
|
|
}
|
|
|
|
var buf bytes.Buffer
|
|
WriteErrorEnvelope(&buf, exitErr, "bot")
|
|
|
|
var env map[string]interface{}
|
|
if err := json.Unmarshal(buf.Bytes(), &env); err != nil {
|
|
t.Fatalf("failed to parse output: %v", err)
|
|
}
|
|
|
|
if _, ok := env["_notice"]; ok {
|
|
t.Error("expected no _notice field when PendingNotice is nil")
|
|
}
|
|
}
|
|
|
|
func TestWriteErrorEnvelope_NilDetail(t *testing.T) {
|
|
exitErr := &ExitError{Code: 1}
|
|
|
|
var buf bytes.Buffer
|
|
WriteErrorEnvelope(&buf, exitErr, "user")
|
|
|
|
if buf.Len() != 0 {
|
|
t.Errorf("expected no output for nil Detail, got: %s", buf.String())
|
|
}
|
|
}
|
|
|
|
func TestGetNotice(t *testing.T) {
|
|
// Nil PendingNotice → nil
|
|
origNotice := PendingNotice
|
|
PendingNotice = nil
|
|
if got := GetNotice(); got != nil {
|
|
t.Errorf("expected nil, got %v", got)
|
|
}
|
|
|
|
// With PendingNotice → returns value
|
|
PendingNotice = func() map[string]interface{} {
|
|
return map[string]interface{}{"update": "test"}
|
|
}
|
|
got := GetNotice()
|
|
if got == nil || got["update"] != "test" {
|
|
t.Errorf("expected {update: test}, got %v", got)
|
|
}
|
|
|
|
// PendingNotice returns nil → nil
|
|
PendingNotice = func() map[string]interface{} { return nil }
|
|
if got := GetNotice(); got != nil {
|
|
t.Errorf("expected nil, got %v", got)
|
|
}
|
|
|
|
PendingNotice = origNotice
|
|
}
|
|
|
|
// TestErrValidation_LegacyExitErrorShape pins the wire contract for
|
|
// output.ErrValidation: the helper MUST return *output.ExitError (so
|
|
// callers using errors.As(&exitErr) continue to work), with wire fields
|
|
// restricted to type+message — no `subtype` emission. Typed
|
|
// *errs.ValidationError carries the extension fields when needed.
|
|
func TestErrValidation_LegacyExitErrorShape(t *testing.T) {
|
|
err := ErrValidation("bad arg: %s", "x")
|
|
|
|
var exitErr *ExitError
|
|
if !errors.As(err, &exitErr) {
|
|
t.Fatalf("ErrValidation must return *ExitError, got %T", err)
|
|
}
|
|
if exitErr.Code != ExitValidation {
|
|
t.Errorf("Code = %d, want ExitValidation (%d)", exitErr.Code, ExitValidation)
|
|
}
|
|
if exitErr.Detail == nil {
|
|
t.Fatal("Detail must be populated")
|
|
}
|
|
if exitErr.Detail.Type != "validation" {
|
|
t.Errorf("Detail.Type = %q, want %q", exitErr.Detail.Type, "validation")
|
|
}
|
|
if exitErr.Detail.Message != "bad arg: x" {
|
|
t.Errorf("Detail.Message = %q, want %q", exitErr.Detail.Message, "bad arg: x")
|
|
}
|
|
|
|
// Wire envelope must have only type+message — no subtype field.
|
|
var buf bytes.Buffer
|
|
WriteErrorEnvelope(&buf, exitErr, "user")
|
|
var wire map[string]any
|
|
if err := json.Unmarshal(buf.Bytes(), &wire); err != nil {
|
|
t.Fatalf("envelope JSON parse failed: %v\nraw: %s", err, buf.String())
|
|
}
|
|
errObj, ok := wire["error"].(map[string]any)
|
|
if !ok {
|
|
t.Fatalf("envelope missing 'error' object; got: %s", buf.String())
|
|
}
|
|
if _, hasSubtype := errObj["subtype"]; hasSubtype {
|
|
t.Errorf("legacy ErrValidation envelope must NOT emit `subtype`; got: %s", buf.String())
|
|
}
|
|
if errObj["type"] != "validation" {
|
|
t.Errorf("envelope error.type = %v, want \"validation\"", errObj["type"])
|
|
}
|
|
}
|
|
|
|
// TestErrNetwork_LegacyExitErrorShape pins the wire contract for
|
|
// output.ErrNetwork: same legacy *output.ExitError shape as ErrValidation —
|
|
// no subtype field, errors.As(&exitErr) must succeed, exit code ExitNetwork.
|
|
func TestErrNetwork_LegacyExitErrorShape(t *testing.T) {
|
|
err := ErrNetwork("conn refused: %s", "10.0.0.1")
|
|
|
|
var exitErr *ExitError
|
|
if !errors.As(err, &exitErr) {
|
|
t.Fatalf("ErrNetwork must return *ExitError, got %T", err)
|
|
}
|
|
if exitErr.Code != ExitNetwork {
|
|
t.Errorf("Code = %d, want ExitNetwork (%d)", exitErr.Code, ExitNetwork)
|
|
}
|
|
if exitErr.Detail == nil {
|
|
t.Fatal("Detail must be populated")
|
|
}
|
|
if exitErr.Detail.Type != "network" {
|
|
t.Errorf("Detail.Type = %q, want %q", exitErr.Detail.Type, "network")
|
|
}
|
|
if exitErr.Detail.Message != "conn refused: 10.0.0.1" {
|
|
t.Errorf("Detail.Message = %q, want %q", exitErr.Detail.Message, "conn refused: 10.0.0.1")
|
|
}
|
|
|
|
// Wire envelope must have only type+message — no subtype field.
|
|
var buf bytes.Buffer
|
|
WriteErrorEnvelope(&buf, exitErr, "user")
|
|
var wire map[string]any
|
|
if err := json.Unmarshal(buf.Bytes(), &wire); err != nil {
|
|
t.Fatalf("envelope JSON parse failed: %v\nraw: %s", err, buf.String())
|
|
}
|
|
errObj, ok := wire["error"].(map[string]any)
|
|
if !ok {
|
|
t.Fatalf("envelope missing 'error' object; got: %s", buf.String())
|
|
}
|
|
if _, hasSubtype := errObj["subtype"]; hasSubtype {
|
|
t.Errorf("legacy ErrNetwork envelope must NOT emit `subtype`; got: %s", buf.String())
|
|
}
|
|
if errObj["type"] != "network" {
|
|
t.Errorf("envelope error.type = %v, want \"network\"", errObj["type"])
|
|
}
|
|
}
|