fix(osi): 加固 Phase 0 验收实现（T-006）

main.go

@@ -30,7 +30,7 @@ func parseMode(raw string) (appMode, error) {
 func main() {
 	modeFlag := flag.String("mode", string(modeServer), "运行模式：server 或 deliver")
 	configPath := flag.String("config", "config.yaml", "配置文件路径")
-	verifyJKDAIDCard := flag.String("verify-jkda-id-card", "", "阶段0联调验收：按身份证查询 JKDA00002；为空则不发真实请求")
+	verifyJKDA := flag.Bool("verify-jkda", false, "阶段0联调验收：从 OSI_VERIFY_ID_CARD 读取身份证并查询 JKDA00002")
 	flag.Parse()
 
 	mode, err := parseMode(*modeFlag)
@@ -45,8 +45,13 @@ func main() {
 		os.Exit(2)
 	}
 
-	if *verifyJKDAIDCard != "" {
-		result, err := runJKDAFindCheck(context.Background(), cfg, *verifyJKDAIDCard)
+	if *verifyJKDA {
+		idCard, err := resolveVerifyIDCard(*verifyJKDA, os.Getenv)
+		if err != nil {
+			fmt.Fprintf(os.Stderr, "verify JKDA00002: %v\n", err)
+			os.Exit(2)
+		}
+		result, err := runJKDAFindCheck(context.Background(), cfg, idCard)
 		if err != nil {
 			fmt.Fprintf(os.Stderr, "verify JKDA00002 failed: code=%s message=%s err=%v\n", result.Code, result.Message, err)
 			os.Exit(1)
@@ -57,3 +62,14 @@ func main() {
 
 	fmt.Printf("chis_osi mode=%s\n", mode)
 }
+
+func resolveVerifyIDCard(enabled bool, getenv func(string) string) (string, error) {
+	if !enabled {
+		return "", nil
+	}
+	idCard := getenv("OSI_VERIFY_ID_CARD")
+	if idCard == "" {
+		return "", fmt.Errorf("OSI_VERIFY_ID_CARD is required when -verify-jkda is set")
+	}
+	return idCard, nil
+}