@lovrabet/sdk 1.5.3 → 1.5.4-beta.2

package/dist/src/auth/auth-manager.d.ts

@@ -1,4 +1,5 @@
 import type { ClientConfig, AuthHeaders } from '../types';
+import { type OpenApiAuthContext } from './openapi-auth';
 export declare class AuthManager {
     private config;
     private openApiAuth?;
@@ -7,6 +8,7 @@ export declare class AuthManager {
     constructor(config: ClientConfig);
     private initAuthMethods;
     getAuthHeaders(appCode?: string, datasetCode?: string): Promise<AuthHeaders>;
+    getFlowAuthContext(appCode: string, operatorUserId: string): Promise<OpenApiAuthContext>;
     validateAuth(): Promise<boolean>;
     isCookieAuth(): boolean;
     isClientAkAuth(): boolean;

package/dist/src/auth/auth-utils.d.ts

@@ -37,7 +37,8 @@ export declare function generateToken(params: {
     accessKey: string;
     timestamp: number;
     appCode: string;
-    datasetCode: string;
+    datasetCode?: string;
+    operatorUserId?: string;
     secretKey?: string;
 }): Promise<string>;
 /**

package/dist/src/auth/index.d.ts

@@ -1,5 +1,6 @@
 export { AuthManager } from './auth-manager';
 export { OpenApiAuth } from './openapi-auth';
+export type { OpenApiAuthContext } from './openapi-auth';
 export { ClientAkAuth } from './client-ak-auth';
 export type { AuthHeaders, OpenApiAuthConfig } from '../types';
-export { generateOpenApiToken, TokenGenerator, isTokenExpiring, getTokenRemainingTime, type GenerateTokenParams, type TokenResult } from './token-generator';
+export { generateOpenApiToken, generateFlowOpenApiToken, TokenGenerator, isTokenExpiring, getTokenRemainingTime, type GenerateTokenParams, type GenerateFlowTokenParams, type TokenResult } from './token-generator';

package/dist/src/auth/openapi-auth.d.ts

@@ -1,6 +1,13 @@
 import type { OpenApiAuthConfig, AuthHeaders } from '../types';
+export interface OpenApiAuthContext {
+    timestamp: number;
+    token: string;
+    headers: AuthHeaders;
+}
 export declare class OpenApiAuth {
     private config;
     constructor(config: OpenApiAuthConfig);
     getAuthHeaders(appCode: string, datasetCode: string): Promise<AuthHeaders>;
+    getFlowAuthContext(appCode: string, operatorUserId: string): Promise<OpenApiAuthContext>;
+    private createAuthContext;
 }

package/dist/src/auth/token-generator.d.ts

@@ -22,6 +22,19 @@ export interface GenerateTokenParams {
     /** 自定义时间戳（可选，默认为当前时间） */
     timestamp?: number;
 }
+/** Flow OpenAPI Token 生成参数。 */
+export interface GenerateFlowTokenParams {
+    /** 应用代码 */
+    appCode: string;
+    /** 本次 Flow 调用绑定的操作人用户 ID */
+    operatorUserId: string;
+    /** API 访问密钥 */
+    accessKey: string;
+    /** API 密钥（可选，有默认值） */
+    secretKey?: string;
+    /** 自定义时间戳（可选，默认为当前时间） */
+    timestamp?: number;
+}
 /**
  * Token 生成结果
  */
@@ -65,6 +78,11 @@ export interface TokenResult {
  * @returns Token 和配对的 timestamp
  */
 export declare function generateOpenApiToken(params: GenerateTokenParams): Promise<TokenResult>;
+/**
+ * 为浏览器或其他不保存 accessKey 的调用方生成 Flow OpenAPI Token。
+ * Token 与 appCode、operatorUserId、timestamp 绑定，三者必须原样用于请求。
+ */
+export declare function generateFlowOpenApiToken(params: GenerateFlowTokenParams): Promise<TokenResult>;
 /**
  * Token 生成器类（可选的面向对象接口）
  *
@@ -96,6 +114,12 @@ export declare class TokenGenerator {
         datasetCode: string;
         timestamp?: number;
     }): Promise<TokenResult>;
+    /** 为指定操作人生成 Flow OpenAPI Token。 */
+    generateFlow(params: {
+        appCode: string;
+        operatorUserId: string;
+        timestamp?: number;
+    }): Promise<TokenResult>;
     /**
      * 批量生成 Token（为多个数据集生成 token）
      */

package/dist/src/client/client.d.ts

@@ -7,6 +7,7 @@ import { BffClient } from '../api/bff-client';
 import { ClientAkBffClient } from '../api/client-ak-bff-client';
 import { UserClient } from '../api/user-client';
 import { ServicesNamespace } from '../services';
+import { LovrabetFlowClient } from '../flow';
 import { PersonalNamespace } from '../personal';
 /**
  * Lovrabet SDK 核心客户端类
@@ -144,6 +145,10 @@ export declare class LovrabetClient implements ILovrabetClient {
      * 检查当前是否为 OpenAPI 模式
      */
     isOpenApiMode(): boolean;
+    /**
+     * 创建使用当前登录用户身份的独立流程自定义页面客户端。
+     */
+    flow(): LovrabetFlowClient;
     /**
      * 解析鉴权模式。无 authMode → cookie；有则严格遵循。
      */

package/dist/src/config/constants.d.ts

@@ -1,7 +1,3 @@
-/**
- * SDK 配置常量定义
- * 统一管理 SDK 中使用的各种常量值
- */
 /**
  * 默认配置名称常量
  */
@@ -32,9 +28,7 @@ export declare const ENVIRONMENTS: {
  * Lovrabet official deployment regions.
  */
 export declare const REGIONS: {
-    /** Mainland China node (default). */
     readonly CN: "cn";
-    /** Indonesia node. */
     readonly ID: "id";
 };
 /**

package/dist/src/config/endpoints.d.ts

@@ -3,8 +3,8 @@ import type { Region } from '../types';
 export declare const API_ENDPOINTS: {
     readonly production: "https://runtime.lovrabet.com";
     readonly online: "https://runtime.lovrabet.com";
-    readonly daily: "https://daily-runtime.lovrabet.com";
     readonly development: "https://dev.lovrabet.com";
+    readonly daily: "https://daily-runtime.lovrabet.com";
 };
 export type Environment = keyof typeof API_ENDPOINTS;
 /** Runtime endpoints selected by official region and environment. */
@@ -12,20 +12,19 @@ export declare const REGION_API_ENDPOINTS: {
     readonly cn: {
         readonly production: "https://runtime.lovrabet.com";
         readonly online: "https://runtime.lovrabet.com";
-        readonly daily: "https://daily-runtime.lovrabet.com";
         readonly development: "https://dev.lovrabet.com";
+        readonly daily: "https://daily-runtime.lovrabet.com";
     };
     readonly id: {
         readonly production: "https://runtime.lovrabet.id";
         readonly online: "https://runtime.lovrabet.id";
-        readonly daily: "https://daily-runtime.lovrabet.id";
         readonly development: "https://dev.lovrabet.id";
     };
 };
 /**
  * 获取指定环境的 API 端点（支持向下兼容）
  * @param env - 环境名称（支持 "production", "online", "daily", "dev", "development"）
- * @param region - 官方节点（"cn" 或 "id"），默认 "cn"
+ * @param region - 官方节点；支持值来自生成的节点目录，省略时使用目录默认节点
  * @returns API 端点 URL
  */
 export declare function getApiEndpoint(env: Environment | string, region?: Region | string): string;

package/dist/src/config/generated-region-endpoints.d.ts

@@ -0,0 +1,19 @@
+export declare const ROUTING_CATALOG_DIGEST: "8410411aea1931279b7de881e8b743f3385db7e669cd8408dde550d5cffb4a4c";
+export declare const DEFAULT_REGION: "cn";
+export declare const GENERATED_REGIONS: {
+    readonly CN: "cn";
+    readonly ID: "id";
+};
+export declare const GENERATED_REGION_API_ENDPOINTS: {
+    readonly cn: {
+        readonly production: "https://runtime.lovrabet.com";
+        readonly online: "https://runtime.lovrabet.com";
+        readonly development: "https://dev.lovrabet.com";
+        readonly daily: "https://daily-runtime.lovrabet.com";
+    };
+    readonly id: {
+        readonly production: "https://runtime.lovrabet.id";
+        readonly online: "https://runtime.lovrabet.id";
+        readonly development: "https://dev.lovrabet.id";
+    };
+};

package/dist/src/flow/flow-client.d.ts

@@ -0,0 +1,46 @@
+import type { HttpClient } from "../http/http-client";
+import type { FlowBatchTaskActionRequest, FlowBatchTransferRequest, FlowCcQuery, FlowCcRequest, FlowCustomPageCcDetail, FlowDefinitionQuery, FlowCustomPageDefinition, FlowCustomPageStartResponse, FlowCustomPageSubmittedProcess, FlowCustomPageTaskDetail, FlowCustomPageTaskItem, FlowCustomPageTimeline, FlowPage, FlowProcessReasonRequest, FlowRecord, FlowResubmitRequest, FlowReturnRequest, FlowReturnTarget, FlowStartRequest, FlowSubmittedQuery, FlowTaskActionRequest, FlowTransferRequest, FlowUpdateVariablesRequest, FlowVariableQuery } from "./types";
+/** 使用当前登录用户身份的独立流程自定义页面客户端。 */
+export declare class LovrabetFlowClient {
+    private readonly httpClient;
+    private readonly appCode;
+    constructor(httpClient: HttpClient, appCode: string);
+    start<T = FlowCustomPageStartResponse>(request: FlowStartRequest): Promise<T>;
+    listTodo<T = FlowCustomPageTaskItem>(query?: FlowVariableQuery): Promise<FlowPage<T>>;
+    listAppTodo<T = FlowCustomPageTaskItem>(query?: FlowVariableQuery): Promise<FlowPage<T>>;
+    listDone<T = FlowCustomPageTaskItem>(query?: FlowVariableQuery): Promise<FlowPage<T>>;
+    listAppDone<T = FlowCustomPageTaskItem>(query?: FlowVariableQuery): Promise<FlowPage<T>>;
+    listSubmitted<T = FlowCustomPageSubmittedProcess>(query?: FlowSubmittedQuery): Promise<FlowPage<T>>;
+    listAppSubmitted<T = FlowCustomPageSubmittedProcess>(query?: FlowSubmittedQuery): Promise<FlowPage<T>>;
+    /** 列出 SDK 可发起的独立流程；服务端仅返回 CUSTOM_PAGE。 */
+    listIndependentFlows<T = FlowCustomPageDefinition>(query?: FlowDefinitionQuery): Promise<FlowPage<T>>;
+    getTaskDetail<T = FlowCustomPageTaskDetail>(taskId: string, variableKeys?: string[]): Promise<T>;
+    getProcessDetail<T = FlowCustomPageTaskDetail>(processInstanceId: string, variableKeys?: string[]): Promise<T>;
+    getCurrentTask<T = FlowCustomPageTaskDetail>(processInstanceId: string, variableKeys?: string[]): Promise<T>;
+    getTimeline<T = FlowCustomPageTimeline>(processInstanceId: string): Promise<T>;
+    getRecords<T = FlowRecord>(processInstanceId: string): Promise<T>;
+    updateVariables(request: FlowUpdateVariablesRequest): Promise<void>;
+    approve(request: FlowTaskActionRequest): Promise<void>;
+    reject(request: FlowTaskActionRequest): Promise<void>;
+    complete(request: FlowTaskActionRequest): Promise<void>;
+    batchApprove<T = FlowRecord>(request: FlowBatchTaskActionRequest): Promise<T>;
+    batchReject<T = FlowRecord>(request: FlowBatchTaskActionRequest): Promise<T>;
+    transfer(request: FlowTransferRequest): Promise<void>;
+    batchTransfer<T = FlowRecord>(request: FlowBatchTransferRequest): Promise<T>;
+    cancel(request: FlowProcessReasonRequest): Promise<void>;
+    withdraw(request: FlowProcessReasonRequest): Promise<void>;
+    resubmit(request: FlowResubmitRequest): Promise<void>;
+    getReturnTargets(taskId: string): Promise<FlowReturnTarget[]>;
+    returnTask(request: FlowReturnRequest): Promise<void>;
+    voidProcess(request: FlowProcessReasonRequest): Promise<void>;
+    ccProcess<T = FlowRecord>(request: FlowCcRequest): Promise<T[]>;
+    listCc<T = FlowRecord>(query?: FlowCcQuery): Promise<FlowPage<T>>;
+    getCcDetail<T = FlowCustomPageCcDetail>(ccRecordId: number | string): Promise<T>;
+    markCcRead(ccRecordId: number | string): Promise<void>;
+    private completeTask;
+    private completeTasks;
+    private processReason;
+    private executePage;
+    private executeCustomPage;
+    private post;
+}

package/dist/src/flow/index.d.ts

@@ -0,0 +1,2 @@
+export { LovrabetFlowClient } from "./flow-client";
+export type { FlowBatchTaskActionRequest, FlowBatchTransferRequest, FlowCcQuery, FlowCcRequest, FlowCustomPageCcDetail, FlowCustomPageDefinition, FlowCustomPageStartResponse, FlowCustomPageSubmittedProcess, FlowCustomPageTaskDetail, FlowCustomPageTaskItem, FlowCustomPageTimeline, FlowDefinitionQuery, FlowPage, FlowPageMode, FlowPageQuery, FlowProcessReasonRequest, FlowRecord, FlowResubmitRequest, FlowReturnRequest, FlowReturnTarget, FlowStartRequest, FlowSubmittedQuery, FlowTaskActionRequest, FlowTransferRequest, FlowUpdateVariablesRequest, FlowVariableProjectionQuery, FlowVariableQuery, } from "./types";

package/dist/src/flow/types.d.ts

@@ -0,0 +1,203 @@
+export type FlowRecord = Record<string, any>;
+export type FlowPageMode = "CUSTOM_PAGE" | "PLATFORM_FORM";
+/** SDK 可见的独立流程定义；服务端只返回业务自定义页面类型。 */
+export interface FlowCustomPageDefinition {
+    flowCode: string;
+    flowName?: string;
+    flowDesc?: string;
+    version?: number;
+    pageMode: "CUSTOM_PAGE";
+}
+/** 业务自定义页面独立流程的发起结果。 */
+export interface FlowCustomPageStartResponse {
+    flowCode: string;
+    processInstanceId: string;
+    idempotentReplay?: boolean;
+}
+/** 业务自定义页面独立流程的待办或已办列表项。 */
+export interface FlowCustomPageTaskItem {
+    taskId: string;
+    taskName?: string;
+    taskDefinitionKey?: string;
+    taskMode?: string;
+    assignee?: string;
+    assigneeName?: string;
+    handleMode?: string;
+    transferCandidates?: FlowRecord[];
+    processInstanceId: string;
+    flowCode?: string;
+    flowName?: string;
+    initiatorUserId?: string;
+    initiatorUsername?: string;
+    taskStatus?: string;
+    processStatus?: string;
+    createTime?: number;
+    endTime?: number;
+    processStartTime?: number;
+    businessVariables?: FlowRecord;
+}
+/** 业务自定义页面独立流程的已发起列表项。 */
+export interface FlowCustomPageSubmittedProcess {
+    processInstanceId: string;
+    flowCode?: string;
+    flowName?: string;
+    startTime?: number;
+    endTime?: number;
+    status?: string;
+    cancelReason?: string;
+    currentNodeNames?: string[];
+    currentNodes?: FlowRecord[];
+    nextNodes?: FlowRecord[];
+    businessVariables?: FlowRecord;
+}
+/** 不包含数据集、平台页面或业务数据主键的独立流程轨迹。 */
+export interface FlowCustomPageTimeline {
+    processInstanceId: string;
+    flowCode?: string;
+    flowName?: string;
+    startUserId?: string;
+    startUserName?: string;
+    startTime?: number;
+    endTime?: number;
+    status?: string;
+    cancelReason?: string;
+    canCancel: boolean;
+    canWithdraw: boolean;
+    canResubmit: boolean;
+    canVoid: boolean;
+    approvalRound?: number;
+    steps?: FlowRecord[];
+    flowDiagram?: FlowRecord;
+}
+/** 业务自定义页面独立流程详情；保留 formData，不返回平台表单渲染配置。 */
+export interface FlowCustomPageTaskDetail {
+    taskId?: string;
+    taskName?: string;
+    taskDefinitionKey?: string;
+    taskMode?: string;
+    assignee?: string;
+    assigneeName?: string;
+    processInstanceId: string;
+    flowCode?: string;
+    flowName?: string;
+    initiatorUserId?: string;
+    initiatorUsername?: string;
+    taskCreateTime?: number;
+    taskEndTime?: number;
+    processStartTime?: number;
+    processEndTime?: number;
+    taskStatus?: string;
+    processStatus?: string;
+    canHandle: boolean;
+    handleMode?: string;
+    canCancel: boolean;
+    canWithdraw: boolean;
+    canResubmit: boolean;
+    canVoid: boolean;
+    canReturn: boolean;
+    returnTargets?: FlowReturnTarget[];
+    approvalRound?: number;
+    transferCandidates?: FlowRecord[];
+    formData?: FlowRecord;
+    businessVariables?: FlowRecord;
+    timeline?: FlowCustomPageTimeline;
+}
+export interface FlowCustomPageCcDetail {
+    ccRecord: FlowRecord;
+    processDetail: FlowCustomPageTaskDetail;
+    approvalRecords: FlowRecord;
+}
+export interface FlowPage<T = FlowRecord> {
+    records: T[];
+    currentPage: number;
+    pageSize: number;
+    totalCount: number;
+    totalPages: number;
+}
+export interface FlowPageQuery {
+    currentPage?: number;
+    pageSize?: number;
+}
+export interface FlowVariableProjectionQuery extends FlowPageQuery {
+    /** 指定响应 businessVariables 中需要返回的普通业务变量名。 */
+    variableKeys?: string[];
+}
+export interface FlowVariableQuery extends FlowVariableProjectionQuery {
+    /** 按流程变量精确匹配；服务端会屏蔽 sys 前缀变量。 */
+    variables?: FlowRecord;
+}
+export interface FlowSubmittedQuery extends FlowVariableProjectionQuery {
+    status?: string;
+}
+export interface FlowDefinitionQuery extends FlowPageQuery {
+    flowName?: string;
+}
+export interface FlowStartRequest {
+    flowCode: string;
+    formData?: FlowRecord;
+    variables?: FlowRecord;
+    /** 同一应用内相同幂等键返回首次创建的流程实例。 */
+    idempotencyKey?: string;
+}
+export interface FlowUpdateVariablesRequest {
+    processInstanceId: string;
+    /** 可设置普通业务变量，也可包含 formData；系统变量不可修改。 */
+    set?: FlowRecord;
+    /** 仅允许删除普通业务变量。 */
+    remove?: string[];
+}
+export interface FlowTaskActionRequest {
+    taskId: string;
+    formPatch?: FlowRecord;
+    formDataVersion?: number;
+    variables?: FlowRecord;
+    comment?: string;
+}
+export interface FlowBatchTaskActionRequest {
+    taskIds: string[];
+    comment?: string;
+    variables?: FlowRecord;
+}
+export interface FlowTransferRequest {
+    taskId: string;
+    targetUserId: string;
+    comment?: string;
+}
+export interface FlowBatchTransferRequest {
+    taskIds: string[];
+    targetUserId: string;
+    comment?: string;
+}
+export interface FlowProcessReasonRequest {
+    processInstanceId: string;
+    reason?: string;
+}
+export interface FlowResubmitRequest {
+    processInstanceId: string;
+    formPatch?: FlowRecord;
+    /** 重新提交时同步更新的普通业务流程变量；系统变量仍由 Runtime 拒绝。 */
+    variables?: FlowRecord;
+    /** 动态表单流程必填；非动态表单或没有版本号的自定义页面流程可省略。 */
+    formDataVersion?: number;
+    comment?: string;
+}
+export interface FlowReturnRequest {
+    taskId: string;
+    targetNodeId: string;
+    reason?: string;
+}
+export interface FlowCcRequest {
+    processInstanceId: string;
+    taskId?: string;
+    recipientUserIds: string[];
+    comment?: string;
+    /** 调用方幂等请求号。 */
+    requestId?: string;
+}
+export interface FlowCcQuery extends FlowPageQuery {
+    readStatus?: string;
+}
+export interface FlowReturnTarget {
+    nodeId: string;
+    nodeName: string;
+}

package/dist/src/http/http-client.d.ts

@@ -27,6 +27,11 @@ export declare class HttpClient {
     private makeRequest;
     get<T = any>(url: string, params?: Record<string, any>, options?: RequestInit, datasetCode?: string): Promise<T>;
     post<T = any>(url: string, data?: any, options?: RequestInit, datasetCode?: string): Promise<T>;
+    /**
+     * 调用绑定应用与操作人的 Flow OpenAPI。
+     * Flow 签名使用 operatorUserId，不使用 datasetCode；签名字段也必须随请求体发送。
+     */
+    postFlow<T = any>(url: string, paramMap: Record<string, any>, appCode: string, operatorUserId: string, options?: RequestInit): Promise<T>;
     postForm<T = any>(url: string, data: FormData, options?: RequestInit): Promise<T>;
     put<T = any>(url: string, data?: any, options?: RequestInit, datasetCode?: string): Promise<T>;
     delete<T = any>(url: string, options?: RequestInit, datasetCode?: string): Promise<T>;

package/dist/src/http/transport.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Shared HTTP transport for the SDK.
+ *
+ * Routing and authentication stay in the SDK. The shared fetch package only
+ * owns request execution, serialization, tracing, redirects, and telemetry.
+ * All SDK callers pass an absolute URL, so routing remains an SDK concern.
+ */
+export declare const transportGet: <ResponseData>(url: string, params?: Record<string, any>, init?: RequestInit & {
+    reqHeaders?: HeadersInit;
+}) => Promise<ResponseData>;
+export declare const transportPost: <ResponseData>(url: string, body?: Record<string, any> | FormData, init?: RequestInit & {
+    reqHeaders?: HeadersInit;
+}) => Promise<ResponseData>;
+export declare const generateTransportTraceparent: (headers?: HeadersInit) => string;

package/dist/src/types/index.d.ts

@@ -18,7 +18,7 @@
  */
 export type Environment = "production" | "online" | "daily" | "development";
 /** Official Lovrabet Runtime region. Mainland China is the default. */
-export type Region = "cn" | "id";
+export type Region = keyof typeof import("../config/generated-region-endpoints").GENERATED_REGION_API_ENDPOINTS;
 /**
  * 排序方向枚举
  * @description 定义数据排序的方向
@@ -799,6 +799,8 @@ export interface AuthManager {
      * @returns 包含认证信息的请求头对象
      */
     getAuthHeaders(appCode?: string, datasetCode?: string): Promise<AuthHeaders>;
+    /** 为绑定应用和操作人的审批 Flow OpenAPI 生成签名上下文。 */
+    getFlowAuthContext(appCode: string, operatorUserId: string): Promise<import("../auth/openapi-auth").OpenApiAuthContext>;
     /**
      * 验证当前认证是否有效
      * @returns 认证是否有效
@@ -844,6 +846,8 @@ export interface AuthManager {
 export interface LovrabetClient {
     /** 运行态通用服务，如文件与 OCR。 */
     readonly services: import("../services/types").LovrabetServices;
+    /** 创建使用当前登录用户身份的独立流程自定义页面客户端。 */
+    flow(): import("../flow").LovrabetFlowClient;
     /**
      * 当前用户拥有的资源，如个人 BFF。
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovrabet/sdk",
-  "version": "1.5.3",
+  "version": "1.5.4-beta.2",
   "license": "SEE LICENSE IN LICENSE",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -43,6 +43,7 @@
     "dist"
   ],
   "devDependencies": {
+    "@lovrabet/fetch": "1.0.3-beta.5",
     "@types/bun": "latest",
     "@vitest/coverage-v8": "^2.1.9",
     "@vitest/ui": "^2.1.8",

package/dist/src/http/traceparent.d.ts

@@ -1,5 +0,0 @@
-/**
- * 生成新的 traceparent
- * @param parentTraceparent
- */
-export declare function generateTraceparent(): string;