@stalfh233/omc-fake-platform 0.4.80 → 0.4.82

package/dist/runtime-data.js

@@ -322,6 +322,15 @@ export const runtimeDataRoute = (ctx, input) => {
                 const replayRefusal = verifyReplayToken(ctx.state, body);
                 if (replayRefusal)
                     return replayRefusal;
+                // Opt-in 40009 fidelity (real 1.1.25, WorkflowAspect.validateWorkflowPermission):
+                // starting a workflow requires a matching h_workflow_permission row, and
+                // publishing a flow creates none. Default off — the diagnostic test sets it.
+                if (ctx.state.enforceWorkflowStartPermission === true) {
+                    const startCode = String(body.workflowCode ?? "");
+                    const hasPermission = [...ctx.state.workflowPermissions.values()].some((row) => row.workflowCode === startCode);
+                    if (!hasPermission)
+                        return businessRefusal(40009, "流程发起权限不足");
+                }
                 const bizObject = (body.bizObject ?? {});
                 // WorkItemSubmitVO carries no top-level bizObjectId (ticket 22): the
                 // created id comes from bizObject.id only — a top-level key is an

package/dist/state.d.ts

@@ -380,6 +380,22 @@ export interface FakeState {
         roleIds: string[];
         deptIds?: string[];
     }>;
+    /** Workflow start permissions (h_workflow_permission): who may originate. */
+    workflowPermissions: Map<string, {
+        id: string;
+        workflowCode: string;
+        unitId: string;
+        unitType: string;
+        name: string | null;
+        code: string | null;
+    }>;
+    /**
+     * Opt-in fidelity: when true a workflow START submit answers 40009 unless the
+     * workflow has at least one start-permission row (real 1.1.25 requires a
+     * matching h_workflow_permission row, and publishing creates none). Default
+     * false so existing flows keep working; the 40009 diagnostic test sets it.
+     */
+    enforceWorkflowStartPermission: boolean;
     workflows: Map<string, FakeWorkflow>;
     workItems: Map<string, FakeWorkItem>;
     dataRows: Map<string, Record<string, unknown>>;

package/dist/state.js

@@ -64,6 +64,8 @@ export function createFakeState(options = {}) {
         orgUsers: new Map(),
         orgRoles: new Map(),
         orgMembers: new Map(),
+        workflowPermissions: new Map(),
+        enforceWorkflowStartPermission: false,
         workflows: new Map(),
         workItems: new Map(),
         dataRows: new Map(),

package/dist/workflow.js

@@ -314,6 +314,42 @@ export const workflowRoute = (ctx, input) => {
             wf.published = { ...body, templateType: "PUBLISH", workflowVersion: (wf.published ? Number(wf.published.workflowVersion ?? 1) : 0) + 1 };
             return { code, workflowVersion: wf.published.workflowVersion };
         }
+        case "/api/api/workflow/list_permission": {
+            const workflowCode = String(q.workflowCode ?? "");
+            const rows = [...ctx.state.workflowPermissions.values()].filter((row) => row.workflowCode === workflowCode);
+            // Live face (WorkflowTemplateController.listPermissions): id/name/unitType/
+            // fullName/corpId/code — unitId is deliberately NOT echoed.
+            return rows.map((row) => ({
+                id: row.id,
+                name: row.name ?? row.unitId,
+                unitType: row.unitType === "DEPARTMENT" ? 1 : row.unitType === "ROLE" ? 2 : 3,
+                fullName: row.name ?? row.unitId,
+                corpId: "corp-1",
+                code: row.code ?? row.unitId,
+            }));
+        }
+        case "/api/api/workflow/create_permission": {
+            const workflowCode = String(body.workflowCode ?? "");
+            const unitId = String(body.unitId ?? "");
+            if (!ctx.state.workflows.has(workflowCode))
+                return businessRefusal(401001, "流程不存在！");
+            if (!unitId)
+                return businessRefusal(40000, "id为空");
+            const unitType = Number(body.unitType ?? 0) === 1 ? "DEPARTMENT" : Number(body.unitType ?? 0) === 2 ? "ROLE" : "USER";
+            if ([...ctx.state.workflowPermissions.values()].some((row) => row.workflowCode === workflowCode && row.unitId === unitId))
+                return businessRefusal(402003, "流程发起权限已存在！");
+            const id = `wfp-${ctx.state.workflowPermissions.size + 1}`;
+            const name = unitType === "DEPARTMENT" ? (ctx.state.orgDepartments.get(unitId)?.name ?? "总所") : unitType === "ROLE" ? (ctx.state.orgRoles.get(unitId)?.name ?? null) : (ctx.state.orgUsers.get(unitId)?.name ?? null);
+            ctx.state.workflowPermissions.set(id, { id, workflowCode, unitId, unitType, name, code: unitId });
+            return null;
+        }
+        case "/api/api/workflow/delete_permission": {
+            const permissionId = String(q.permissionId ?? body.permissionId ?? "");
+            if (!permissionId)
+                return businessRefusal(40000, "权限id为空");
+            ctx.state.workflowPermissions.delete(permissionId);
+            return null;
+        }
         case "/api/api/workflow/delete":
             ctx.state.workflows.delete(String(body.workflowCode ?? q.workflowCode ?? q.code ?? ""));
             return null;
@@ -411,10 +447,17 @@ export const workflowRoute = (ctx, input) => {
             return dept;
         }
         case "/api/api/organization/department/get_dept_info": {
-            const dept = ctx.state.orgDepartments.get(String(q.deptId ?? ""));
-            if (!dept)
-                return businessRefusal(10011, "部门不存在");
-            return dept;
+            const wanted = String(q.deptId ?? "");
+            const dept = ctx.state.orgDepartments.get(wanted);
+            if (dept)
+                return dept;
+            // The static tree roots live outside `orgDepartments`; resolve them so a
+            // caller can name a real department (r11: workflow start permission needs
+            // the unit's display name, which reads this face).
+            const staticDept = [{ id: "dept-1", name: "总所", code: "1", corpId: "corp-1", parentId: null }, { id: "dept-2", name: "业务部", code: "1_1", corpId: "corp-1", parentId: "dept-1" }].find((entry) => entry.id === wanted);
+            if (staticDept)
+                return staticDept;
+            return businessRefusal(10011, "部门不存在");
         }
         case "/api/api/organization/department/strike_out": {
             const deptId = String(q.id ?? "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stalfh233/omc-fake-platform",
-  "version": "0.4.80",
+  "version": "0.4.82",
   "description": "OMC 的内存假 CloudPivot 平台（wire 接缝的第二个适配器）+ HTTP 假服务器——@stalfh233/omc-cli 的测试与 bench 基准基座",
   "type": "module",
   "main": "dist/index.js",
@@ -18,7 +18,7 @@
     "build": "tsc --project tsconfig.build.json"
   },
   "dependencies": {
-    "omc-core": "0.4.80"
+    "omc-core": "0.4.82"
   },
   "engines": {
     "node": ">=22.13"