feat(client): initialize procurement tool skeleton

2026-08-03 18:32:00 +08:00
parent 2ab5baa776
commit bcec012c8b
18 changed files with 516 additions and 31 deletions
@@ -0,0 +1,6 @@
+"""采购工具桌面端包。
+
+本包当前只提供应用骨架和安全的本地运行基础设施；不包含真机操作或采购流程。
+"""
+
+__version__ = "0.1.0"
@@ -0,0 +1,7 @@
+"""支持通过 ``python -m cmbuyer_client`` 启动应用。"""
+
+from .app import main
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
@@ -0,0 +1,57 @@
+"""采购工具的最小桌面应用入口。"""
+
+from __future__ import annotations
+
+import sys
+from collections.abc import Sequence
+
+from .logging_policy import configure_application_logger
+from .runtime import RuntimePaths
+
+
+def select_application_argv(argv: Sequence[str] | None) -> list[str]:
+    """保留调用方明确给出的空参数列表，避免改变测试或打包入口的语义。"""
+
+    return list(sys.argv if argv is None else argv)
+
+
+def main(argv: Sequence[str] | None = None) -> int:
+    """启动只表达当前工程状态的桌面外壳。
+
+    真机控制和采购执行必须在完成取证并实现后才可接入，因此此入口不导入
+    uiautomator2，也不提供任何会影响采购或支付状态的命令。
+    """
+
+    try:
+        paths = RuntimePaths.default()
+        logger = configure_application_logger(paths)
+    except OSError as error:
+        print(f"无法创建采购工具运行目录：{error}", file=sys.stderr)
+        return 1
+
+    try:
+        from PySide6.QtCore import Qt
+        from PySide6.QtWidgets import QApplication, QLabel, QMainWindow
+    except ImportError:
+        logger.error("缺少 PySide6，无法启动桌面界面。")
+        print("无法启动采购工具：缺少 PySide6。请先安装 requirements.txt 中的依赖。", file=sys.stderr)
+        return 2
+
+    application = QApplication.instance() or QApplication(select_application_argv(argv))
+    application.setApplicationName("采购工具")
+
+    window = QMainWindow()
+    window.setWindowTitle("采购工具")
+    window.setAccessibleName("采购工具")
+    window.setMinimumSize(420, 240)
+    window.resize(560, 320)
+
+    message = QLabel("应用骨架已初始化。\n采购执行功能尚未启用。")
+    message.setAlignment(Qt.AlignmentFlag.AlignCenter)
+    message.setWordWrap(True)
+    message.setAccessibleName("当前状态")
+    window.setCentralWidget(message)
+
+    logger.info("应用已启动；采购执行功能尚未启用。")
+    window.show()
+    return application.exec()
@@ -0,0 +1,66 @@
+"""采购工具日志的最小脱敏策略。"""
+
+from __future__ import annotations
+
+import logging
+from pathlib import Path
+import re
+
+from .runtime import RuntimePaths
+
+
+LOGGER_NAME = "cmbuyer_client"
+REDACTED = "[已隐藏]"
+
+_SENSITIVE_KEY_PATTERN = (
+    r"token|authorization|password|secret|api[_-]?key|"
+    r"address|phone|mobile|payment|pay|card|bank[_-]?account|"
+    r"令牌|授权|密码|密钥|地址|手机号|电话|支付|银行卡"
+)
+_KEY_VALUE_PATTERN = re.compile(
+    rf"(?P<key>{_SENSITIVE_KEY_PATTERN})\s*(?P<separator>[:=])\s*"
+    r"(?P<value>\"[^\"]*\"|'[^']*'|[^\s,;]+)",
+    flags=re.IGNORECASE,
+)
+_PHONE_PATTERN = re.compile(r"(?<!\d)1[3-9]\d{9}(?!\d)")
+
+
+def redact_text(message: str) -> str:
+    """移除日志文本中的凭据、地址、手机号和支付字段值。"""
+
+    def replace_key_value(match: re.Match[str]) -> str:
+        return f"{match.group('key')}{match.group('separator')}{REDACTED}"
+
+    redacted = _KEY_VALUE_PATTERN.sub(replace_key_value, message)
+    return _PHONE_PATTERN.sub(REDACTED, redacted)
+
+
+class SensitiveDataFilter(logging.Filter):
+    """在任何 handler 格式化记录前，清除敏感字段。
+
+    该过滤器在日志写入前替换 ``msg`` 与 ``args``，确保文件 handler 不会得到原始值。
+    """
+
+    def filter(self, record: logging.LogRecord) -> bool:
+        record.msg = redact_text(record.getMessage())
+        record.args = ()
+        return True
+
+
+def configure_application_logger(paths: RuntimePaths) -> logging.Logger:
+    """配置唯一的 UTF-8 文件日志，并确保其先经过脱敏过滤。"""
+
+    paths.ensure_exists()
+    logger = logging.getLogger(LOGGER_NAME)
+    logger.setLevel(logging.INFO)
+    logger.propagate = False
+
+    for handler in tuple(logger.handlers):
+        logger.removeHandler(handler)
+        handler.close()
+
+    handler = logging.FileHandler(Path(paths.logs) / "client.log", encoding="utf-8")
+    handler.addFilter(SensitiveDataFilter())
+    handler.setFormatter(logging.Formatter("%(asctime)s %(levelname)s %(message)s"))
+    logger.addHandler(handler)
+    return logger
@@ -0,0 +1,42 @@
+"""采购工具的本地运行目录策略。"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+import os
+from pathlib import Path
+
+
+@dataclass(frozen=True)
+class RuntimePaths:
+    """仅包含应用生成物的本地目录。
+
+    日志和证据产物不落在源码树中，避免把含有现场信息的运行数据误提交到 Git。
+    """
+
+    root: Path
+    logs: Path
+    artifacts: Path
+
+    @classmethod
+    def from_root(cls, root: Path) -> "RuntimePaths":
+        resolved_root = root.expanduser()
+        return cls(
+            root=resolved_root,
+            logs=resolved_root / "logs",
+            artifacts=resolved_root / "artifacts",
+        )
+
+    @classmethod
+    def default(cls) -> "RuntimePaths":
+        local_app_data = os.environ.get("LOCALAPPDATA")
+        if local_app_data:
+            return cls.from_root(Path(local_app_data) / "cmbuyer")
+
+        return cls.from_root(Path.home() / ".local" / "share" / "cmbuyer")
+
+    def ensure_exists(self) -> None:
+        """创建运行目录；调用方负责向用户呈现无法创建目录的错误。"""
+
+        self.logs.mkdir(parents=True, exist_ok=True)
+        self.artifacts.mkdir(parents=True, exist_ok=True)