@tachybase/plugin-action-export 1.6.24 → 1.6.26

package/dist/externalVersion.js

@@ -1,6 +1,6 @@
 module.exports = {
   "react": "18.3.1",
-  "@tachybase/client": "1.6.24",
+  "@tachybase/client": "1.6.26",
   "@tachybase/schema": "1.6.16",
   "@tego/client": "1.6.16",
   "react-i18next": "16.2.1",

package/dist/node_modules/node-xlsx/package.json

@@ -1 +1 @@
-{"name":"node-xlsx","author":"Olivier Louvignes <olivier@mg-crea.com>","version":"0.24.0","description":"NodeJS Excel files parser & builder","type":"module","main":"./dist/index.cjs","exports":{".":{"require":"./dist/index.cjs","import":"./dist/index.js","types":"./dist/index.d.ts"}},"bin":{"node-xlsx":"./dist/bin/cli.js"},"files":["dist"],"scripts":{"start":"npm run spec -- --watch","build":"tsup --entry src/index.ts --format cjs,esm --sourcemap --dts --clean --entry src/bin/cli.ts","lint":"eslint src/ test/","prettycheck":"prettier --check src/ test/","prettify":"prettier --write src/ test/","typecheck":"tsc --noEmit","spec":"DEBUG=node-xlsx* vitest --run","watch":"DEBUG=node-xlsx* vitest --watch","test":"npm run lint && npm run prettycheck && npm run typecheck && npm run spec","prepublishOnly":"npm run build"},"repository":"github:mgcrea/node-xlsx","license":"Apache-2.0","dependencies":{"xlsx":"https://cdn.sheetjs.com/xlsx-0.20.2/xlsx-0.20.2.tgz"},"devDependencies":{"@mgcrea/eslint-config-node":"^0.10.0","@tsconfig/node-lts":"^20.1.1","@types/node":"^20.12.7","eslint":"^8.57.0","prettier":"^3.2.5","prettier-plugin-organize-imports":"^3.2.4","tsup":"^8.0.2","typescript":"^5.4.5","vite-tsconfig-paths":"^4.3.2","vitest":"^1.5.0"},"engines":{"node":">=10.0.0"},"keywords":["excel","parser","builder","xlsx","xls"],"_lastModified":"2026-07-09T11:40:13.733Z"}
+{"name":"node-xlsx","author":"Olivier Louvignes <olivier@mg-crea.com>","version":"0.24.0","description":"NodeJS Excel files parser & builder","type":"module","main":"./dist/index.cjs","exports":{".":{"require":"./dist/index.cjs","import":"./dist/index.js","types":"./dist/index.d.ts"}},"bin":{"node-xlsx":"./dist/bin/cli.js"},"files":["dist"],"scripts":{"start":"npm run spec -- --watch","build":"tsup --entry src/index.ts --format cjs,esm --sourcemap --dts --clean --entry src/bin/cli.ts","lint":"eslint src/ test/","prettycheck":"prettier --check src/ test/","prettify":"prettier --write src/ test/","typecheck":"tsc --noEmit","spec":"DEBUG=node-xlsx* vitest --run","watch":"DEBUG=node-xlsx* vitest --watch","test":"npm run lint && npm run prettycheck && npm run typecheck && npm run spec","prepublishOnly":"npm run build"},"repository":"github:mgcrea/node-xlsx","license":"Apache-2.0","dependencies":{"xlsx":"https://cdn.sheetjs.com/xlsx-0.20.2/xlsx-0.20.2.tgz"},"devDependencies":{"@mgcrea/eslint-config-node":"^0.10.0","@tsconfig/node-lts":"^20.1.1","@types/node":"^20.12.7","eslint":"^8.57.0","prettier":"^3.2.5","prettier-plugin-organize-imports":"^3.2.4","tsup":"^8.0.2","typescript":"^5.4.5","vite-tsconfig-paths":"^4.3.2","vitest":"^1.5.0"},"engines":{"node":">=10.0.0"},"keywords":["excel","parser","builder","xlsx","xls"],"_lastModified":"2026-08-11T06:21:06.688Z"}

package/dist/server/actions/export-xlsx.d.ts

@@ -1,2 +1,5 @@
 import { Context, Next } from '@tego/server';
+/**
+ * Handles the export xlsx resource action.
+ */
 export declare function exportXlsx(ctx: Context, next: Next): Promise<any>;

package/dist/server/actions/export-xlsx.js

@@ -36,28 +36,61 @@ var import__ = __toESM(require(".."));
 var import_constants = require("../constants");
 var import_renders = __toESM(require("../renders"));
 var import_utils = require("../utils");
+function uniqueTenantIds(ids) {
+  return Array.from(new Set(ids || []));
+}
+function getExportTenantContext(ctx) {
+  const currentTenantId = (0, import_utils.getExportTenantId)(ctx);
+  if (currentTenantId === null || currentTenantId === void 0) {
+    return;
+  }
+  return {
+    currentTenant: ctx.state.currentTenant || { id: currentTenantId },
+    currentTenantId,
+    currentTenantDescendantIds: uniqueTenantIds(ctx.state.currentTenantDescendantIds),
+    currentTenancyMode: ctx.state.currentTenancyMode,
+    currentLegacyDataTenantIds: uniqueTenantIds(ctx.state.currentLegacyDataTenantIds)
+  };
+}
 async function exportXlsx(ctx, next) {
-  var _a, _b, _c;
-  const { title, filter, sort, fields, except } = ctx.action.params;
+  var _a, _b, _c, _d, _e;
+  const { filter, sort, fields, except } = ctx.action.params;
+  const title = ctx.action.params.title ?? ((_a = ctx.action.params.values) == null ? void 0 : _a.title);
   const { resourceName, resourceOf } = ctx.action;
-  let columns = ((_a = ctx.action.params.values) == null ? void 0 : _a.columns) || ((_b = ctx.action.params) == null ? void 0 : _b.columns);
-  if (typeof columns === "string") {
-    columns = JSON.parse(columns);
+  const currentTenantId = (0, import_utils.getExportTenantId)(ctx);
+  const tenantContext = getExportTenantContext(ctx);
+  let columns;
+  try {
+    columns = (0, import_utils.normalizeExportColumns)(((_b = ctx.action.params.values) == null ? void 0 : _b.columns) ?? ((_c = ctx.action.params) == null ? void 0 : _c.columns));
+  } catch (error) {
+    if (error instanceof import_utils.ExportColumnsError) {
+      ctx.throw(400, error.message);
+      return;
+    }
+    throw error;
   }
   const repository = ctx.db.getRepository(resourceName, resourceOf);
   const collection = repository.collection;
-  columns = columns == null ? void 0 : columns.filter((col) => {
-    var _a2;
-    return collection.hasField(col.dataIndex[0]) && ((_a2 = col == null ? void 0 : col.dataIndex) == null ? void 0 : _a2.length) > 0;
-  });
+  columns = (0, import_utils.filterExportColumnsByCollection)(columns, collection);
   const appends = (0, import_utils.columns2Appends)(columns, ctx);
   const count = await repository.count({
     filter,
     context: ctx
   });
+  if (count >= import_constants.BULK_EXPORT_THRESHOLD && ctx.state.currentTenancyMode) {
+    (0, import_utils.emitSecurityViolation)(ctx, {
+      type: "tenant_bulk_export_alert",
+      userId: (_d = ctx.state.currentUser) == null ? void 0 : _d.id,
+      actorUserId: ctx.state.actorUserId,
+      tenantId: currentTenantId,
+      collectionName: resourceName,
+      action: "export",
+      details: { rowCount: count, threshold: import_constants.BULK_EXPORT_THRESHOLD }
+    });
+  }
   if (count > import_constants.EXPORT_LENGTH_MAX) {
     const app = ctx.tego;
-    if (!((_c = app.worker) == null ? void 0 : _c.available)) {
+    if (!((_e = app.worker) == null ? void 0 : _e.available)) {
       ctx.throw(400, `Too many records to export: ${count} > ${import_constants.EXPORT_LENGTH_MAX}`);
     }
     let fileWithPath;
@@ -78,6 +111,8 @@ async function exportXlsx(ctx, next) {
           resourceName,
           resourceOf,
           appends,
+          currentTenantId,
+          tenantContext,
           timezone: ctx.get("X-Timezone")
         }
       });
@@ -127,7 +162,7 @@ async function exportXlsx(ctx, next) {
   ctx.set({
     "Content-Type": "application/octet-stream",
     // to avoid "invalid character" error in header (RFC)
-    "Content-Disposition": `attachment; filename=${encodeURI(title)}.xlsx`
+    "Content-Disposition": `attachment; filename=${encodeURI((0, import_utils.buildExportDownloadName)(title, currentTenantId))}.xlsx`
   });
   await next();
 }

package/dist/server/constants.d.ts

@@ -1,2 +1,3 @@
 export declare const EXPORT_LENGTH_MAX: number;
 export declare const EXPORT_WORKER_PAGESIZE: number;
+export declare const BULK_EXPORT_THRESHOLD: number;

package/dist/server/constants.js

@@ -17,14 +17,21 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var constants_exports = {};
 __export(constants_exports, {
+  BULK_EXPORT_THRESHOLD: () => BULK_EXPORT_THRESHOLD,
   EXPORT_LENGTH_MAX: () => EXPORT_LENGTH_MAX,
   EXPORT_WORKER_PAGESIZE: () => EXPORT_WORKER_PAGESIZE
 });
 module.exports = __toCommonJS(constants_exports);
 const EXPORT_LENGTH_MAX = +process.env.EXPORT_LENGTH_MAX || 2e3;
 const EXPORT_WORKER_PAGESIZE = +process.env.EXPORT_WORKER_PAGESIZE || 1e3;
+function parseBulkExportThreshold(value) {
+  const parsed = Number(value);
+  return Number.isFinite(parsed) && parsed > 0 && parsed <= 1e6 ? parsed : 1e3;
+}
+const BULK_EXPORT_THRESHOLD = parseBulkExportThreshold(process.env.BULK_EXPORT_THRESHOLD);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  BULK_EXPORT_THRESHOLD,
   EXPORT_LENGTH_MAX,
   EXPORT_WORKER_PAGESIZE
 });

package/dist/server/index.d.ts

@@ -1,4 +1,7 @@
 import { InstallOptions, Plugin } from '@tego/server';
+/**
+ * Provides the export plugin helper for this module.
+ */
 export declare class ExportPlugin extends Plugin {
     beforeLoad(): void;
     load(): Promise<void>;

package/dist/server/index.js

@@ -39,6 +39,115 @@ var import_node_xlsx = __toESM(require("node-xlsx"));
 var import_actions = require("./actions");
 var import_constants = require("./constants");
 var import_renders = __toESM(require("./renders"));
+var import_utils = require("./utils");
+function isEmptyObject(value) {
+  return isPlainObject(value) && Object.keys(value).length === 0;
+}
+function isPlainObject(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return false;
+  }
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+function cleanFilter(filter, stripTenant) {
+  if (!filter || typeof filter !== "object") {
+    return filter;
+  }
+  if (Array.isArray(filter)) {
+    return filter.map((item) => cleanFilter(item, stripTenant)).filter((item) => !isEmptyObject(item));
+  }
+  if (!isPlainObject(filter)) {
+    return filter;
+  }
+  const next = Object.fromEntries(
+    Object.entries(filter).filter(([key]) => !stripTenant || key !== "tenantId" && !key.startsWith("tenantId.")).map(([key, value]) => [key, cleanFilter(value, stripTenant)])
+  );
+  for (const key of ["$and", "$or"]) {
+    if (Array.isArray(next[key])) {
+      next[key] = next[key].filter((item) => !isEmptyObject(item));
+      if (next[key].length === 0) {
+        delete next[key];
+      }
+    }
+  }
+  return next;
+}
+function stripTenantFilter(filter) {
+  return cleanFilter(filter, true);
+}
+function canReadLegacyData(tenantId, legacyDataTenantIds) {
+  return (legacyDataTenantIds || []).some((item) => `${item}` === `${tenantId}`);
+}
+function getLegacyDataTenantIds(tenantContext, collection) {
+  var _a;
+  if (tenantContext && Object.prototype.hasOwnProperty.call(tenantContext, "currentLegacyDataTenantIds") && Array.isArray(tenantContext.currentLegacyDataTenantIds)) {
+    return Array.from(new Set(tenantContext.currentLegacyDataTenantIds));
+  }
+  return ((_a = collection == null ? void 0 : collection.options) == null ? void 0 : _a.legacyDataTenantIds) || [];
+}
+function appendTenantFilter(original, tenantFilter) {
+  const sanitizedOriginal = cleanFilter(original, false);
+  if (!sanitizedOriginal || Object.keys(sanitizedOriginal).length === 0) {
+    return tenantFilter;
+  }
+  return {
+    $and: [sanitizedOriginal, tenantFilter]
+  };
+}
+function buildTenantFilter(tenantId, includeLegacyData = false) {
+  if (!includeLegacyData) {
+    return { tenantId };
+  }
+  return {
+    $or: [{ tenantId }, { tenantId: null }]
+  };
+}
+function buildInheritedTenantFilter(tenantIds, includeLegacyData = false) {
+  const tenantFilter = { tenantId: { $in: tenantIds } };
+  if (!includeLegacyData) {
+    return tenantFilter;
+  }
+  return {
+    $or: [tenantFilter, { tenantId: null }]
+  };
+}
+function buildWorkerTenantState(currentTenantId, tenantContext) {
+  const tenantId = (0, import_utils.getExportTenantId)({
+    state: tenantContext,
+    currentTenantId
+  });
+  if (tenantId === null || tenantId === void 0) {
+    return;
+  }
+  const hasLegacyDataTenantIds = tenantContext && Object.prototype.hasOwnProperty.call(tenantContext, "currentLegacyDataTenantIds");
+  return {
+    ...tenantContext,
+    currentTenant: (tenantContext == null ? void 0 : tenantContext.currentTenant) || { id: tenantId },
+    currentTenantId: tenantId,
+    currentTenantDescendantIds: Array.from(new Set((tenantContext == null ? void 0 : tenantContext.currentTenantDescendantIds) || [])),
+    ...hasLegacyDataTenantIds ? {
+      currentLegacyDataTenantIds: Array.from(new Set((tenantContext == null ? void 0 : tenantContext.currentLegacyDataTenantIds) || []))
+    } : {}
+  };
+}
+function applyTenantScopeToWorkerFindOptions(options, collection, tenantContext) {
+  var _a, _b;
+  const tenancyMode = (_a = collection == null ? void 0 : collection.options) == null ? void 0 : _a.tenancy;
+  if (tenancyMode !== "tenantScoped" && tenancyMode !== "tenantInherited") {
+    return options;
+  }
+  const tenantId = ((_b = tenantContext == null ? void 0 : tenantContext.currentTenant) == null ? void 0 : _b.id) ?? (tenantContext == null ? void 0 : tenantContext.currentTenantId);
+  if (tenantId === null || tenantId === void 0) {
+    throw new Error("Tenant context is required for tenant-scoped export worker");
+  }
+  const includeLegacyData = canReadLegacyData(tenantId, getLegacyDataTenantIds(tenantContext, collection));
+  const tenantFilter = tenancyMode === "tenantInherited" ? buildInheritedTenantFilter([tenantId, ...tenantContext.currentTenantDescendantIds || []], includeLegacyData) : buildTenantFilter(tenantId, includeLegacyData);
+  return {
+    ...options,
+    filter: appendTenantFilter(options.filter, tenantFilter)
+  };
+}
 const _ExportPlugin = class _ExportPlugin extends import_server.Plugin {
   beforeLoad() {
   }
@@ -55,30 +164,49 @@ const _ExportPlugin = class _ExportPlugin extends import_server.Plugin {
     return import_node_path.default.resolve(process.env.TEGO_RUNTIME_HOME, _ExportPlugin.defaultSavePath);
   }
   async workerExportXlsx(params) {
-    const { title, filter, sort, fields, except, appends, resourceName, resourceOf, timezone } = params;
-    let columns = (params == null ? void 0 : params.columns) || (params == null ? void 0 : params.columns);
-    if (typeof columns === "string") {
-      columns = JSON.parse(columns);
-    }
+    const {
+      title,
+      filter,
+      sort,
+      fields,
+      except,
+      appends,
+      resourceName,
+      resourceOf,
+      timezone,
+      currentTenantId,
+      tenantContext: rawTenantContext
+    } = params;
+    let columns = (0, import_utils.normalizeExportColumns)(params == null ? void 0 : params.columns);
     const repository = this.db.getRepository(resourceName, resourceOf);
     const collection = repository.collection;
-    columns = columns == null ? void 0 : columns.filter((col) => {
-      var _a;
-      return collection.hasField(col.dataIndex[0]) && ((_a = col == null ? void 0 : col.dataIndex) == null ? void 0 : _a.length) > 0;
-    });
+    const tenantState = buildWorkerTenantState(currentTenantId, rawTenantContext);
+    const tenantId = (0, import_utils.getExportTenantId)({ state: tenantState });
+    const tenantContext = tenantState ? {
+      state: tenantState
+    } : void 0;
+    const findOptions = applyTenantScopeToWorkerFindOptions(
+      {
+        filter,
+        fields,
+        appends,
+        except,
+        sort
+      },
+      collection,
+      tenantState
+    );
+    columns = (0, import_utils.filterExportColumnsByCollection)(columns, collection);
     let page = 1;
     const pageSize = import_constants.EXPORT_WORKER_PAGESIZE;
     let data = [];
     let hasMore = true;
     while (hasMore) {
       const pageData = await repository.find({
-        filter,
-        fields,
-        appends,
-        except,
-        sort,
+        ...findOptions,
         offset: (page - 1) * pageSize,
-        limit: pageSize
+        limit: pageSize,
+        context: tenantContext
       });
       data = data.concat(pageData);
       hasMore = pageData.length === pageSize;
@@ -104,14 +232,14 @@ const _ExportPlugin = class _ExportPlugin extends import_server.Plugin {
         }
       }
     ]);
-    const savePath = this.xlsxStorageDir();
+    const savePath = (0, import_utils.buildWorkerExportSavePath)(this.xlsxStorageDir(), tenantId);
     if (!(0, import_node_fs.existsSync)(savePath)) {
       (0, import_node_fs.mkdirSync)(savePath, { recursive: true });
     }
-    const fileName = `${resourceName}_${(0, import_dayjs.default)().format("YYYYMMDDHHmm")}.xlsx`;
+    const fileName = (0, import_utils.buildWorkerExportFileName)(resourceName, title, tenantId);
     const rawFile = `${savePath}/${fileName}`;
     (0, import_node_fs.writeFileSync)(rawFile, Buffer.from(stream));
-    return `${_ExportPlugin.defaultSavePath}/${fileName}`;
+    return (0, import_utils.buildWorkerExportRelativePath)(fileName, tenantId, _ExportPlugin.defaultSavePath);
   }
 };
 _ExportPlugin.defaultSavePath = "storage/uploads";

package/dist/server/renders/index.js

@@ -109,6 +109,12 @@ async function renderRows({ columns, fields, data, utcOffset }, db) {
   }, Promise.resolve([]));
 }
 async function renders_default({ columns, fields, data, utcOffset }, db) {
+  if (fields.length === 0) {
+    return {
+      rows: [],
+      ranges: []
+    };
+  }
   const headers = [];
   renderHeader({ columns, fields, headers });
   const ranges = [];

package/dist/server/utils/index.d.ts

@@ -1 +1,44 @@
 export * from './columns2Appends';
+/**
+ * Error thrown when an export columns payload cannot be normalized safely.
+ */
+export declare class ExportColumnsError extends Error {
+    constructor(message: string);
+}
+/**
+ * Parses and validates the client-provided columns option for xlsx export.
+ */
+export declare function normalizeExportColumns(columns: any): any[];
+/**
+ * Keeps only export columns whose root field exists on the target collection.
+ */
+export declare function filterExportColumnsByCollection(columns: any[], collection: any): any[];
+type TenantId = string | number | undefined | null;
+/**
+ * Sanitizes a value for use as one segment of an export filename or path.
+ */
+export declare function sanitizeExportSegment(value: string | number): string;
+/**
+ * Resolves the effective tenant ID from request state or worker context.
+ */
+export declare function getExportTenantId(source: any): any;
+/**
+ * Builds the user-facing export download name with an optional tenant suffix.
+ */
+export declare function buildExportDownloadName(title: string, tenantId?: TenantId): string;
+/**
+ * Emits a tenant security event without blocking the export request path.
+ */
+export declare function emitSecurityViolation(ctx: any, event: Record<string, any>): void;
+/**
+ * Builds a collision-resistant worker export filename for the target tenant.
+ */
+export declare function buildWorkerExportFileName(resourceName: string, title: string, tenantId?: TenantId): string;
+/**
+ * Builds the persisted relative path for an exported worker file.
+ */
+export declare function buildWorkerExportRelativePath(fileName: string, tenantId?: TenantId, basePath?: string): string;
+/**
+ * Builds the local directory used by worker exports for a tenant.
+ */
+export declare function buildWorkerExportSavePath(rootPath: string, tenantId?: TenantId): string;

package/dist/server/utils/index.js

@@ -1,7 +1,13 @@
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -11,11 +17,158 @@ var __copyProps = (to, from, except, desc) => {
   return to;
 };
 var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var utils_exports = {};
+__export(utils_exports, {
+  ExportColumnsError: () => ExportColumnsError,
+  buildExportDownloadName: () => buildExportDownloadName,
+  buildWorkerExportFileName: () => buildWorkerExportFileName,
+  buildWorkerExportRelativePath: () => buildWorkerExportRelativePath,
+  buildWorkerExportSavePath: () => buildWorkerExportSavePath,
+  emitSecurityViolation: () => emitSecurityViolation,
+  filterExportColumnsByCollection: () => filterExportColumnsByCollection,
+  getExportTenantId: () => getExportTenantId,
+  normalizeExportColumns: () => normalizeExportColumns,
+  sanitizeExportSegment: () => sanitizeExportSegment
+});
 module.exports = __toCommonJS(utils_exports);
+var import_node_crypto = require("node:crypto");
+var import_node_path = __toESM(require("node:path"));
+var import_dayjs = __toESM(require("dayjs"));
 __reExport(utils_exports, require("./columns2Appends"), module.exports);
+class ExportColumnsError extends Error {
+  constructor(message) {
+    super(`Invalid export columns: ${message}`);
+    this.name = "ExportColumnsError";
+  }
+}
+function parseColumns(columns) {
+  if (columns == null || columns === "") {
+    return [];
+  }
+  if (typeof columns !== "string") {
+    return columns;
+  }
+  try {
+    return JSON.parse(columns);
+  } catch {
+    throw new ExportColumnsError("columns must be valid JSON");
+  }
+}
+function normalizeColumn(column, index) {
+  if (typeof column === "string") {
+    if (!column.trim()) {
+      throw new ExportColumnsError(`columns[${index}] must be a non-empty string`);
+    }
+    return { dataIndex: [column] };
+  }
+  if (!column || typeof column !== "object" || Array.isArray(column)) {
+    throw new ExportColumnsError(`columns[${index}] must be a string or object with dataIndex`);
+  }
+  if (!Array.isArray(column.dataIndex) || column.dataIndex.length === 0) {
+    throw new ExportColumnsError(`columns[${index}].dataIndex must be a non-empty array`);
+  }
+  for (const [dataIndexPosition, segment] of column.dataIndex.entries()) {
+    if (typeof segment !== "string" || !segment.trim()) {
+      throw new ExportColumnsError(`columns[${index}].dataIndex[${dataIndexPosition}] must be a non-empty string`);
+    }
+  }
+  return column;
+}
+function normalizeExportColumns(columns) {
+  const parsedColumns = parseColumns(columns);
+  if (!Array.isArray(parsedColumns)) {
+    throw new ExportColumnsError("columns must be an array");
+  }
+  return parsedColumns.map(normalizeColumn);
+}
+function filterExportColumnsByCollection(columns, collection) {
+  return columns.filter((col) => {
+    var _a;
+    return ((_a = col == null ? void 0 : col.dataIndex) == null ? void 0 : _a.length) > 0 && collection.hasField(col.dataIndex[0]);
+  });
+}
+function hasTenantId(tenantId) {
+  return tenantId !== null && tenantId !== void 0 && tenantId !== "";
+}
+function sanitizeExportSegment(value) {
+  const normalized = String(value ?? "").trim().replace(/[^a-zA-Z0-9._-]+/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "");
+  if (normalized === "." || normalized === "..") {
+    return "export";
+  }
+  return normalized || "export";
+}
+function getExportTenantId(source) {
+  var _a, _b, _c;
+  return ((_b = (_a = source == null ? void 0 : source.state) == null ? void 0 : _a.currentTenant) == null ? void 0 : _b.id) ?? ((_c = source == null ? void 0 : source.state) == null ? void 0 : _c.currentTenantId) ?? (source == null ? void 0 : source.currentTenantId);
+}
+function buildExportDownloadName(title, tenantId) {
+  const base = String(title || "export").trim().replace(/[\\/:*?"<>|]/g, "_") || "export";
+  return hasTenantId(tenantId) ? `${base}_${sanitizeExportSegment(tenantId)}` : base;
+}
+function resolveApplicationEmitter(ctx) {
+  var _a, _b, _c, _d, _e, _f;
+  const backRef = (_a = ctx.app) == null ? void 0 : _a.__application;
+  if (backRef && typeof backRef.emit === "function") {
+    return backRef;
+  }
+  const logger = ((_b = ctx.tego) == null ? void 0 : _b.logger) || ((_c = ctx.app) == null ? void 0 : _c.logger);
+  (_f = logger == null ? void 0 : logger.warn) == null ? void 0 : _f.call(
+    logger,
+    "Application emitter back-reference is missing; tenant security events may not reach audit listeners",
+    {
+      resourceName: (_d = ctx.action) == null ? void 0 : _d.resourceName,
+      actionName: (_e = ctx.action) == null ? void 0 : _e.actionName
+    }
+  );
+  return ctx.app;
+}
+function emitSecurityViolation(ctx, event) {
+  var _a, _b, _c, _d, _e;
+  try {
+    const emitter = resolveApplicationEmitter(ctx);
+    emitter.emit("tenant.securityViolation", event);
+  } catch (error) {
+    const logger = ((_a = ctx.tego) == null ? void 0 : _a.logger) || ((_b = ctx.app) == null ? void 0 : _b.logger);
+    (_e = logger == null ? void 0 : logger.warn) == null ? void 0 : _e.call(logger, "Failed to emit tenant security event; export flow will continue", {
+      resourceName: (_c = ctx.action) == null ? void 0 : _c.resourceName,
+      actionName: (_d = ctx.action) == null ? void 0 : _d.actionName,
+      eventType: event == null ? void 0 : event.type,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  }
+}
+function buildWorkerExportFileName(resourceName, title, tenantId) {
+  const base = sanitizeExportSegment(title || resourceName || "export");
+  const tenantSuffix = hasTenantId(tenantId) ? `_${sanitizeExportSegment(tenantId)}` : "";
+  const uniqueSuffix = (0, import_node_crypto.randomUUID)().slice(0, 8);
+  return `${base}${tenantSuffix}_${(0, import_dayjs.default)().format("YYYYMMDDHHmm")}_${uniqueSuffix}.xlsx`;
+}
+function buildWorkerExportRelativePath(fileName, tenantId, basePath = "storage/uploads") {
+  return hasTenantId(tenantId) ? import_node_path.default.posix.join(basePath, "tenants", sanitizeExportSegment(tenantId), fileName) : import_node_path.default.posix.join(basePath, fileName);
+}
+function buildWorkerExportSavePath(rootPath, tenantId) {
+  return hasTenantId(tenantId) ? import_node_path.default.join(rootPath, "tenants", sanitizeExportSegment(tenantId)) : rootPath;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ExportColumnsError,
+  buildExportDownloadName,
+  buildWorkerExportFileName,
+  buildWorkerExportRelativePath,
+  buildWorkerExportSavePath,
+  emitSecurityViolation,
+  filterExportColumnsByCollection,
+  getExportTenantId,
+  normalizeExportColumns,
+  sanitizeExportSegment,
   ...require("./columns2Appends")
 });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tachybase/plugin-action-export",
   "displayName": "Action: Export records",
-  "version": "1.6.24",
+  "version": "1.6.26",
   "description": "Export filtered records to excel, you can configure which fields to export.",
   "keywords": [
     "Actions"
@@ -30,7 +30,7 @@
     "node-xlsx": "^0.24.0",
     "react": "18.3.1",
     "react-i18next": "16.2.1",
-    "@tachybase/client": "1.6.24"
+    "@tachybase/client": "1.6.26"
   },
   "description.zh-CN": "导出筛选后的记录到 Excel 中，可以配置导出哪些字段。",
   "displayName.zh-CN": "操作：导出记录",