初始化询价智能体新仓：同步本地工程并排除密钥与 .env。

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-13 14:30:44 +08:00
commit 2a14def882
2621 changed files with 393165 additions and 0 deletions
@@ -0,0 +1,138 @@
+"""
+企微主动发消息客户端（应用消息）。
+
+本文件职责：取 access_token、发送文本；密钥来自环境变量。
+禁止：在发送成功时冒充业务成功；禁止按 userid 伪造业务分支。
+出站唯一入口应经 outbox 消费调用本客户端。
+"""
+
+from __future__ import annotations
+
+import logging
+import threading
+import time
+from dataclasses import dataclass
+from typing import Any, Optional
+
+import httpx
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass
+class WeComSendResult:
+    """企微发送结果（通道层）。"""
+
+    ok: bool
+    errcode: int = 0
+    errmsg: str = ""
+    raw: dict[str, Any] | None = None
+
+
+class WeComAppClient:
+    """
+    询价应用（默认 AgentId 1000010）主动消息客户端。
+
+    线程安全：token 缓存带锁；HTTP 带超时，禁止无限阻塞。
+    """
+
+    def __init__(
+        self,
+        *,
+        corp_id: str,
+        secret: str,
+        agent_id: int,
+        api_base: str = "https://qyapi.weixin.qq.com",
+        timeout_sec: float = 10.0,
+    ) -> None:
+        self._corp_id = corp_id
+        self._secret = secret
+        self._agent_id = agent_id
+        self._api_base = api_base.rstrip("/")
+        self._timeout = timeout_sec
+        self._token: Optional[str] = None
+        self._token_expire_at: float = 0.0
+        self._lock = threading.Lock()
+
+    def send_text(self, *, touser: str, content: str) -> WeComSendResult:
+        """
+        向指定企微 userid 发送文本应用消息。
+
+        参数：touser 必须是入站 sender_id；content 测试环境应由上层加 [test] 前缀。
+        副作用：出站 HTTP 调企微；失败返回 ok=False，不抛给回调线程（由 outbox 重试）。
+        """
+        if not self._corp_id or not self._secret:
+            return WeComSendResult(ok=False, errcode=-1, errmsg="WECOM_CORP_ID/SECRET 未配置")
+        if not touser or not content:
+            return WeComSendResult(ok=False, errcode=-1, errmsg="touser/content 为空")
+
+        try:
+            token = self._get_token()
+        except Exception as exc:  # noqa: BLE001
+            logger.exception("获取 access_token 失败")
+            return WeComSendResult(ok=False, errcode=-1, errmsg=str(exc))
+
+        url = f"{self._api_base}/cgi-bin/message/send"
+        body = {
+            "touser": touser,
+            "msgtype": "text",
+            "agentid": self._agent_id,
+            "text": {"content": content},
+            "safe": 0,
+        }
+        try:
+            with httpx.Client(timeout=self._timeout) as client:
+                resp = client.post(url, params={"access_token": token}, json=body)
+                data = resp.json()
+        except Exception as exc:  # noqa: BLE001
+            logger.exception("企微 message/send 网络失败")
+            return WeComSendResult(ok=False, errcode=-1, errmsg=str(exc))
+
+        errcode = int(data.get("errcode") or 0)
+        errmsg = str(data.get("errmsg") or "")
+        if errcode != 0:
+            # token 失效则清空缓存，下次重试
+            if errcode in (40014, 42001, 42007):
+                with self._lock:
+                    self._token = None
+                    self._token_expire_at = 0.0
+            logger.warning("企微发送失败 errcode=%s errmsg=%s", errcode, errmsg)
+            return WeComSendResult(ok=False, errcode=errcode, errmsg=errmsg, raw=data)
+        logger.info("企微发送成功 touser=%s", touser)
+        return WeComSendResult(ok=True, errcode=0, errmsg=errmsg, raw=data)
+
+    def _get_token(self) -> str:
+        with self._lock:
+            now = time.time()
+            if self._token and now < self._token_expire_at - 60:
+                return self._token
+        # 注意：勿把 corpsecret 打进日志；httpx 默认 INFO 会打印完整 URL
+        url = f"{self._api_base}/cgi-bin/gettoken"
+        with httpx.Client(timeout=self._timeout) as client:
+            resp = client.get(
+                url,
+                params={"corpid": self._corp_id, "corpsecret": self._secret},
+            )
+            data = resp.json()
+        errcode = int(data.get("errcode") or 0)
+        if errcode != 0 or not data.get("access_token"):
+            raise RuntimeError(f"gettoken 失败 errcode={errcode}")
+        token = str(data["access_token"])
+        expires_in = int(data.get("expires_in") or 7200)
+        with self._lock:
+            self._token = token
+            self._token_expire_at = time.time() + expires_in
+        return token
+
+
+# 企微侧明确不可重试的错误（IP 白名单、非法 userid 等）
+PERMANENT_SEND_ERRORS = frozenset(
+    {
+        60020,  # not allow to access from your ip
+        60111,  # invalid user
+        81013,  # user not in app visible range
+        40003,  # invalid openid/userid
+        40013,  # invalid corpid
+        40001,  # invalid credential（非 token 过期类时也停）
+    }
+)