futucli/cmd/

key_enums.rs

//! `gen-key` / `bind-key` 共用 enum / CSV 解析器
//!
//! v1.4.106 codex 0608 F5 (P3) sweep — 从 `gen_key.rs` / `bind_key.rs`
//! 抽出 enum / 字面量解析, 替代松散的 `parse_csv` (any-string-OK) 与每个
//! 字段独立大小写归一化, 让早期 reject 取代 silent stash:
//!
//! - **trd_sides**: BUY / SELL / SELL_SHORT / BUY_BACK 等 backend 枚举严格匹配
//! - **markets**: HK / US / CN / HKCC / FUTURES / SG / AU / JP / MY / CA /
//!   HKFUND / USFUND / CRYPTO (大小写归一化为 upper, 别名 `HK_FUND` /
//!   `US_FUND` / `CC` 仍接受) — 与 `cmd::account::parse_trd_market`
//!   对齐已支持的 trade/QOT surface 语义
//! - **symbols**: `MARKET.CODE` 形式校验 (e.g. "HK.00700"); `MARKET` 必须
//!   是上述合法 market 列表的一个, `CODE` 不能为空 — 拒绝 "07000" /
//!   "AAPL" / 单纯 "HK" 等显然漏写市场前缀的 input
//! - **machine_csv**: 64-hex 指纹严格校验 (失败早 fail) — 复用 gen-key /
//!   bind-key 的格式约束
//!
//! 与 `parse_csv` 的差别: 这里**对每个 token loud reject 不合法 input**,
//! 不再 silent insert "随便什么字符串" 进 `HashSet<String>` 然后留给 daemon /
//! backend 拒绝. 与 v1.4.93 BUG-001 修法 (schema-runtime layer 双 layer 对齐,
//! pitfall #54) 同精神 — CLI 是离 daemon 的第一道闸门, 早期严格 = 后续少 silent.
//!
//! **空 CSV 语义** (与 v1.4.104 external reviewer P2-008 fix 一致): 全空 token (e.g. " ,," /
//! "  ") 解析后是空集 → 调用方应**显式拒绝**, 不 silently stash 空集 (空集
//! 在 daemon 端可能被当 "无限制" sentinel, silent inverse). 见
//! `parse_strict_csv_non_empty` helper 文档.

use std::collections::HashSet;

use anyhow::{Result, anyhow, bail};
use futu_core::trade_parsing;

/// 解析 `--allowed-trd-sides` CSV → `HashSet<String>` (uppercase).
///
/// 行为:
/// - case-insensitive 接入, uppercase 归一化输出 (与 daemon 校验大小写一致)
/// - 空 token / trailing comma 跳过
/// - **不在 core `TRD_SIDE_PARSE_CHOICES` 集合的 token → loud Err** (避免 v1.4.93
///   BUG-001 schema-runtime drift: CLI 接受任意字符串然后 daemon 接 wire
///   时拒掉, 用户体验差)
/// - 全空 / 空 CSV → 返空集; 调用方决定如何对待空集 (gen-key 走 None 表示
///   不限制, 见调用点逻辑)
pub fn parse_trd_sides_csv(s: &str) -> Result<HashSet<String>> {
    let mut out = HashSet::new();
    for token in s.split(',').map(|p| p.trim()).filter(|p| !p.is_empty()) {
        let Some(side_id) = trade_parsing::parse_trd_side_id(token) else {
            bail!(
                "invalid trd_side {token:?}: expected one of {} \
                 (case-insensitive). v1.4.106 F5 strict parser 拒绝未知 \
                 trd_side, 不再 silently stash 任意字符串.",
                trade_parsing::TRD_SIDE_PARSE_CHOICES
            );
        };
        let canonical = trade_parsing::trd_side_label_from_id(side_id).ok_or_else(|| {
            anyhow!(
                "trade-side parser returned id {side_id} without a canonical label; refusing to write an ambiguous API-key policy"
            )
        })?;
        out.insert(canonical.to_string());
    }
    Ok(out)
}

/// Trd market 合法集 — 与 backend `Trd_Common.proto::TrdMarket` enum 对齐
/// 已支持 variant. 与 `cmd::account::parse_trd_market` 同源 (单一 source of truth).
const ALLOWED_MARKETS: &[&str] = &[
    "HK", "US", "CN", "HKCC", "FUTURES", "SG", "AU", "JP", "MY", "CA", "HKFUND", "USFUND", "CRYPTO",
];

/// 别名 → 规范名映射 (额外接受 `HK_FUND` / `US_FUND` / `CC`).
fn canonicalize_market(s: &str) -> Option<&'static str> {
    let upper = s.to_ascii_uppercase();
    match upper.as_str() {
        "HK" => Some("HK"),
        "US" => Some("US"),
        "CN" => Some("CN"),
        "HKCC" => Some("HKCC"),
        "FUTURES" => Some("FUTURES"),
        "SG" => Some("SG"),
        "AU" => Some("AU"),
        "JP" => Some("JP"),
        "MY" => Some("MY"),
        "CA" => Some("CA"),
        "HKFUND" | "HK_FUND" => Some("HKFUND"),
        "USFUND" | "US_FUND" => Some("USFUND"),
        // Ref: proto/Qot_Common.proto `QotMarket_CC_Security = 91`.
        // `CC` is the public proto spelling; keep canonical user-facing key
        // scope as CRYPTO so agent/key policies do not split one market into
        // two names.
        "CRYPTO" | "CC" => Some("CRYPTO"),
        _ => None,
    }
}

/// 解析 `--allowed-markets` CSV → `HashSet<String>` (canonical names).
///
/// 行为:
/// - case-insensitive 接入, canonical name 输出 ("HK_FUND" → "HKFUND")
/// - 空 token / trailing comma 跳过
/// - **不在 [`ALLOWED_MARKETS`] 集合 (含别名) 的 token → loud Err**
pub fn parse_markets_csv(s: &str) -> Result<HashSet<String>> {
    let mut out = HashSet::new();
    for token in s.split(',').map(|p| p.trim()).filter(|p| !p.is_empty()) {
        match canonicalize_market(token) {
            Some(canon) => {
                out.insert(canon.to_string());
            }
            None => bail!(
                "invalid market {token:?}: expected one of {:?} \
                 (case-insensitive; HK_FUND / US_FUND 等同 HKFUND / USFUND; \
                  CC 等同 CRYPTO). \
                 v1.4.106 F5 strict parser 拒绝未知 market, 不再 silently \
                 stash 任意字符串.",
                ALLOWED_MARKETS
            ),
        }
    }
    Ok(out)
}

/// 解析 `--allowed-symbols` CSV → `HashSet<String>` (uppercase).
///
/// 接受格式: `MARKET.CODE` (e.g. `HK.00700`, `US.AAPL`). 校验:
/// - 必须含 `.` 分隔符
/// - `MARKET` 部分必须在 [`ALLOWED_MARKETS`] (含别名)
/// - `CODE` 部分非空
/// - case-insensitive 接入, **uppercase 归一化** 输出 (`hk.00700` → `HK.00700`)
///
/// 拒绝:
/// - "AAPL" (缺市场前缀)
/// - "HK." (code 空)
/// - ".00700" (market 空)
/// - "FOO.BAR" (market 不在白名单)
pub fn parse_symbols_csv(s: &str) -> Result<HashSet<String>> {
    let mut out = HashSet::new();
    for token in s.split(',').map(|p| p.trim()).filter(|p| !p.is_empty()) {
        let (market, code) = token.split_once('.').ok_or_else(|| {
            anyhow!(
                "invalid symbol {token:?}: expected MARKET.CODE (e.g. HK.00700). \
                 v1.4.106 F5 strict parser 拒绝缺市场前缀的 symbol."
            )
        })?;
        if code.is_empty() {
            bail!(
                "invalid symbol {token:?}: code part empty after '.'. \
                 expected MARKET.CODE (e.g. HK.00700)."
            );
        }
        let canon_market = canonicalize_market(market).ok_or_else(|| {
            anyhow!(
                "invalid symbol {token:?}: market {market:?} not in {:?} \
                 (case-insensitive; HK_FUND / US_FUND 等同 HKFUND / USFUND; \
                  CC 等同 CRYPTO). \
                 v1.4.106 F5 strict parser 拒绝未知 market 前缀.",
                ALLOWED_MARKETS
            )
        })?;
        // 输出: 大写归一化 (CODE 部分保持原样大小写? 用户指定 case-sensitive,
        // 但 daemon symbol cache 是 uppercase 归一化, 所以 CLI 也归一)
        out.insert(format!("{canon_market}.{}", code.to_ascii_uppercase()));
    }
    Ok(out)
}

/// 解析 64-hex 指纹 CSV → `Vec<String>` (保序去重由调用方做).
///
/// 与 `bind_key::parse_fingerprints` 同语义, 抽出来给 gen-key /
/// bind-key 共用. 单个 token:
/// - 必须 64 字符
/// - 必须全 ASCII hex digit
pub fn parse_fingerprints_csv(s: &str) -> Result<Vec<String>> {
    let mut out = Vec::new();
    for part in s.split(',') {
        let fp = part.trim();
        if fp.is_empty() {
            continue;
        }
        if fp.len() != 64 || !fp.chars().all(|c| c.is_ascii_hexdigit()) {
            bail!(
                "invalid fingerprint {fp:?}: expect 64 hex chars \
                 (run `futucli machine-id --for-key <id>`)"
            );
        }
        out.push(fp.to_string());
    }
    Ok(out)
}

#[cfg(test)]
mod tests;