bdip-office-assistant-cli 0.0.0-stage → 1.0.0

package/dist/wfupload.js

@@ -0,0 +1,78 @@
+/**
+ * BDIP5 表单文件上传（图片/附件）。
+ *
+ * 接口（用户抓包确认）：POST /api/doc/upload/uploadFile2Doc
+ *   query: category=,,<cat>&workflowid=<wf>&listType=<img|list>&uploadSrc=wfform&loginuserid=<uid>
+ *   multipart: name=<filename>, isFirstUploadFile=9, fieldId=<表单字段id>,
+ *              workflowId=<wf>, secretLevel=<>, ts=<时间戳>, file=<二进制>
+ *   listType=img→图片字段；listType=list→附件字段。
+ *   aiAgentToken 鉴权可用。
+ * 响应：data.imagefileid（上传后文件 id，填进表单字段的值）、filename、filelink、versionId、fileidCode 等。
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+const IMG_EXT = new Set(['png', 'jpg', 'jpeg', 'gif', 'bmp', 'webp', 'svg', 'tif', 'tiff']);
+/** 判断文件按图片还是附件上传（按扩展名；可被 --list-type 覆盖）。 */
+export function guessListType(filePath) {
+    const ext = (path.extname(filePath).slice(1) || '').toLowerCase();
+    return IMG_EXT.has(ext) ? 'img' : 'list';
+}
+/**
+ * 上传本地文件到表单字段。返回 imagefileid（填进 field<id> 的值）。
+ * listType: 'img'(图片字段) / 'list'(附件字段)，不传按扩展名猜。
+ */
+export async function uploadFile(cfg, opts) {
+    const { workflowId, fieldId, filePath } = opts;
+    const listType = opts.listType ?? guessListType(filePath);
+    const category = opts.category ?? '21';
+    const loginuserid = opts.loginuserid ?? '1';
+    if (!fs.existsSync(filePath))
+        throw new Error(`文件不存在: ${filePath}`);
+    const buf = fs.readFileSync(filePath);
+    const filename = path.basename(filePath);
+    const ext = (path.extname(filename).slice(1) || '').toLowerCase();
+    const mime = ext === 'png' ? 'image/png'
+        : ext === 'jpg' || ext === 'jpeg' ? 'image/jpeg'
+            : ext === 'gif' ? 'image/gif'
+                : 'application/octet-stream';
+    // 直接用 fetch + aiAgentToken（不走 E9Api，因 multipart 需自定义 body）
+    const sess = (await import('./auth-token.js')).AuthTokenSession.fromProfile(cfg);
+    const base = cfg.baseUrl.replace(/\/+$/, '');
+    const url = `${base}/api/doc/upload/uploadFile2Doc?category=,,${category}&workflowid=${workflowId}&listType=${listType}&wfTestStr=&uploadSrc=wfform&loginuserid=${loginuserid}`;
+    const fd = new FormData();
+    fd.append('name', filename);
+    fd.append('isFirstUploadFile', '9');
+    fd.append('fieldId', fieldId);
+    fd.append('workflowId', String(workflowId));
+    fd.append('secretLevel', '');
+    fd.append('ts', String(Date.now()));
+    fd.append('file', new Blob([buf], { type: mime }), filename);
+    const r = await fetch(url, {
+        method: 'POST',
+        headers: { aiAgentToken: sess.token },
+        body: fd,
+        signal: AbortSignal.timeout(60000),
+    });
+    const t = await r.text();
+    let j = null;
+    try {
+        j = JSON.parse(t);
+    }
+    catch { /* non-json */ }
+    if (!r.ok || !j?.data?.fileid) {
+        throw new Error(`上传失败 status=${r.status}: ${t.slice(0, 300)}`);
+    }
+    const d = j.data;
+    return {
+        fileid: String(d.fileid),
+        imagefileid: String(d.imagefileid ?? ''),
+        filename: d.filename,
+        filelink: d.filelink,
+        loadlink: d.loadlink,
+        versionId: d.versionId,
+        fileidCode: d.fileidCode,
+        isImg: d.isImg,
+        filesize: d.filesize,
+        raw: j,
+    };
+}

package/dist/wfuser.js

@@ -0,0 +1,96 @@
+/**
+ * 当前用户信息（发起流程时，申请人/部门等字段默认填值用）。
+ *
+ * 接口（用户抓包确认）：GET /api/hrm/login/getAccountList?__random__=<ts>
+ *   aiAgentToken 鉴权。返回 data.{userid, username, deptid, deptname, subcompanyname, jobs}。
+ */
+import { createApiFromProfile } from './client.js';
+import { todayStr } from './util.js';
+/**
+ * 取当前登录用户信息。GET /api/hrm/login/getAccountList?__random__=<ts>
+ * 走 E9Api（ensureValid + 双头 + 重试 + 失效逃生，见 client.js）——2026-09-20 e9pc 实测：
+ * 裸 fetch(aiAgentToken) 会 404（缺头/token 状态不同步），E9Api 通道正常返回 accountlist。
+ */
+export async function getCurrentUser(cfg) {
+    const api = await createApiFromProfile(cfg);
+    const r = await api.get('/api/hrm/login/getAccountList', { __random__: Date.now() });
+    const j = r?.json ?? {};
+    const d = j?.data ?? {};
+    // accountlist 里 iscurrent=1 的是当前账号；data 顶层也有当前用户字段
+    const list = Array.isArray(d.accountlist) ? d.accountlist : [];
+    const cur = list.find((a) => String(a.iscurrent) === '1') ?? list[0] ?? d;
+    return {
+        userid: String(cur.userid ?? ''),
+        username: String(cur.username ?? ''),
+        deptid: String(cur.deptid ?? ''),
+        deptname: String(cur.deptname ?? ''),
+        subcompanyname: String(cur.subcompanyname ?? ''),
+        jobs: String(cur.jobs ?? ''),
+    };
+}
+/**
+ * 当前用户是否系统管理员。GET /api/ec/dev/app/getUserInfo?__random__=<ts> → isAdmin===true。
+ * 返回 { isAdmin: true|false|undefined }——undefined 表示无法确认（未取到 isAdmin 字段），
+ * 调用方按「非管理员」fail-closed 处理（越权防护默认不放行）。
+ * 鉴权：token 通道优先；token no-op（200 但无 isAdmin）且配了 cookie → 强制 cookie 头重发逃生。
+ */
+export async function getCurrentUserIsAdmin(cfg) {
+    const api = await createApiFromProfile(cfg);
+    let r = await api.get('/api/ec/dev/app/getUserInfo', { __random__: Date.now() });
+    let isAdmin = pickIsAdmin(r?.json);
+    if (isAdmin === undefined && cfg.cookie) {
+        r = await api.get('/api/ec/dev/app/getUserInfo', { __random__: Date.now() }, { forceCookie: true });
+        isAdmin = pickIsAdmin(r?.json);
+    }
+    return { isAdmin, raw: r?.json ?? null };
+}
+
+/** 深度扫描找 isAdmin 字段（键名大小写不敏感，取值 true/'true'/1 → true）。 */
+function pickIsAdmin(obj) {
+    if (obj == null)
+        return undefined;
+    if (typeof obj === 'object') {
+        for (const [k, v] of Object.entries(obj)) {
+            if (String(k).toLowerCase() === 'isadmin') {
+                return v === true || v === 'true' || v === '1' || v === 1;
+            }
+            if (v && typeof v === 'object') {
+                const r = pickIsAdmin(v);
+                if (r !== undefined)
+                    return r;
+            }
+        }
+    }
+    return undefined;
+}
+
+// 人员类标签（→ userid 或 username）
+const PERSON_LABEL = /申请人|发起人|续签人|经办人|经手人|创建人|人员|姓名|联系人|负责人|填报人/;
+// 部门类标签（→ deptid 或 deptname）
+const DEPT_LABEL = /申请部门|所属部门|部门|部门名称|单位|科室|组织/;
+// 日期类标签（→ 今天）
+const DATE_LABEL = /日期/;
+// 时间类标签（结束时间/开始时间，不填默认值，避免时间字段误填日期）
+const TIME_LABEL = /时间$/;
+/**
+ * 按字段标签 + 类型，返回当前用户相关的默认值（无则 undefined）。
+ * htmltype: 3=浏览选择（给 id），1/2=文本（给名称）。
+ */
+export function defaultForField(label, htmltype, user) {
+    if (!label)
+        return undefined;
+    if (PERSON_LABEL.test(label)) {
+        if (htmltype === 3)
+            return user.userid || undefined;
+        return user.username || undefined;
+    }
+    if (DEPT_LABEL.test(label)) {
+        if (htmltype === 3)
+            return user.deptid || undefined;
+        return user.deptname || undefined;
+    }
+    if (DATE_LABEL.test(label) && !TIME_LABEL.test(label)) {
+        return todayStr();
+    }
+    return undefined;
+}

package/dist/workflow-runtime.js

@@ -0,0 +1,151 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {createHash} from 'node:crypto';
+import {pathToFileURL} from 'node:url';
+import {createApiFromProfile} from './client.js';
+import {buildCreateSubmitBody} from './wfstart.js';
+import {stableConfig} from './field-preparation.js';
+
+const idOf = id => String(id).replace(/^field/, '');
+export function definitions(form) {
+    return Object.entries(form.tableInfo ?? {}).flatMap(([table,t]) => Object.entries(t.fieldinfomap ?? {}).map(([id,f]) => ({...f,id:String(f.fieldid ?? id),table})));
+}
+export function fingerprint(form) {
+    const schema = definitions(form).map(f => [f.table,f.id,f.fieldname,f.fieldlabel,f.viewattr,f.htmltype,f.detailtype,f.fielddbtype,f.browserattr]).sort((a,b)=>String(a).localeCompare(String(b)));
+    const browsers = Object.entries(form.browserInfo ?? {}).map(([key,b]) => [key,b.relateFieldid,Object.keys(b.dataParams??{}).sort(),b.dataParams?.type,b.dataParams?.fielddbtype,b.conditionDataParams?.type]);
+    return createHash('sha256').update(JSON.stringify(['unified-linkage-2',schema,browsers,form.params?.formid,form.params?.layoutversion,stableConfig(form.linkageCfg??{})])).digest('hex');
+}
+export function adapterDirectory(cfg, workflowId) {
+    const env = createHash('sha256').update(cfg.baseUrl.replace(/\/+$/,'')).digest('hex').slice(0,24);
+    if (!/^\d+$/.test(String(workflowId))) throw Error('流程ID格式错误');
+    return path.join(path.dirname(cfg._configPath),'workflow-adapters',env,String(workflowId));
+}
+export function registerAdapter(cfg, workflowId, form, source, mapping) {
+    // 仅保存经用户/维护者审查的逻辑和映射；不保存本次业务值或服务器表单快照。
+    for (const [name,id] of Object.entries(mapping)) if (!definitions(form).some(f=>f.id===String(id))) throw Error('映射字段不在当前表单：'+name);
+    const dir=adapterDirectory(cfg,workflowId);fs.mkdirSync(dir,{recursive:true});
+    const hash=fingerprint(form), script=hash+'.mjs';
+    fs.copyFileSync(source,path.join(dir,script));
+    fs.writeFileSync(path.join(dir,'index.json'),JSON.stringify({fingerprint:hash,script,mapping,scriptDigest:createHash('sha256').update(fs.readFileSync(source)).digest('hex')},null,2));
+}
+export async function loadAdapter(cfg,workflowId,form) {
+    const dir=adapterDirectory(cfg,workflowId),index=path.join(dir,'index.json');
+    if (!fs.existsSync(index)) return null;
+    const item=JSON.parse(fs.readFileSync(index,'utf8'));
+    if (item.fingerprint!==fingerprint(form)) throw Error('表单结构已变化，本地适配失效；请重新适配');
+    if (item.script!==item.fingerprint+'.mjs') throw Error('适配索引无效');
+    const digest=createHash('sha256').update(fs.readFileSync(path.join(dir,item.script))).digest('hex');
+    if(item.scriptDigest!==digest)throw Error('适配逻辑已变化或旧索引缺少校验，请重新验证登记');
+    return {...await import(pathToFileURL(path.join(dir,item.script)).href+'?v='+digest),mapping:item.mapping,scriptDigest:digest};
+}
+export async function detailTables(api,form,workflowId,requestId) {
+    const result={};
+    for(const [mark,t] of Object.entries(form.tableInfo??{})) {
+        if(!/^detail_\d+$/.test(mark))continue;
+        const r=await api.post('/api/workflow/reqform/detailData',{iscreate:requestId?'0':'1',requestid:String(requestId??'-1'),workflowid:String(workflowId),detailmark:mark,
+            reqParams:JSON.stringify({...form.params,...form.submitParams}),f_weaver_belongto_userid:String(form.params.currentUserid),f_weaver_belongto_usertype:String(form.params.f_weaver_belongto_usertype??'0')},{forceCookie:true});
+        if(!r.json?.[mark])throw Error('未返回明细表 '+mark);
+        const d=r.json[mark];
+        result[mark]={...d,rows:Object.entries(d.rowDatas??{}).sort(([a],[b])=>Number(a.replace('row_',''))-Number(b.replace('row_',''))).map(([,row])=>row)};
+    }
+    return result;
+}
+export function browserQuery(form,fieldId,context={}) {
+    const f=definitions(form).find(x=>x.id===String(fieldId));if(!f)throw Error('浏览框字段不存在');
+    const b=form.browserInfo?.[`${f.detailtype}_${f.fielddbtype}`];
+    if(!b)throw Error('缺少浏览框配置，请读取网页配置后适配');
+    const p=form.params;
+    const query={...b.conditionDataParams,...b.completeParams,...b.dataParams,wfid:String(p.workflowid),billid:p.formid,isbill:p.isbill,
+        requestid:String(p.requestid??'-1'),fieldid:String(fieldId),viewtype:f.table==='main'?'0':'1',fromModule:'workflow',
+        f_weaver_belongto_userid:p.f_weaver_belongto_userid,f_weaver_belongto_usertype:p.f_weaver_belongto_usertype,
+        current:'1',pageSize:String(context.pageSize??10),min:'1',max:String(context.pageSize??10)};
+    for(const dep of f.browserattr?.cusDependShip??[]) {
+        const dependency=definitions(form).find(x=>x.id===String(dep.fieldid));
+        if(!dependency)throw Error('依赖字段不存在');
+        const values=dependency.table==='main'?context.main:context.row;
+        const cell=dependency.table==='main'?form.maindata?.['field'+dep.fieldid]:context.rowCells?.['field'+dep.fieldid];
+        const value=values?.[dep.fieldid]??values?.['field'+dep.fieldid]??cell?.value;
+        if(value===undefined)throw Error('缺少同一行/主表依赖值：'+dep.fieldid);
+        if(!dep.key||!b.dataParams?.currenttime)throw Error('缺少依赖字段key或服务器时间标识');
+        query[dep.key.toLowerCase()+'_'+b.dataParams.currenttime]=value;
+    }
+    return {field:f,query};
+}
+export async function queryBrowser(api,form,fieldId,context={}) {
+    const {field,query}=browserQuery(form,fieldId,context);
+    const condition=await api.get('/api/public/browser/condition/'+field.detailtype,query,{forceCookie:true});
+    const conditions=condition.json?.conditions??condition.json?.conditioninfo?.conditions;
+    if(context.search) {
+        const candidates=(conditions??[]).filter(c=>context.conditionTitle?c.label===context.conditionTitle||c.title===context.conditionTitle:true).filter(c=>c.domkey);
+        if(candidates.length!==1)throw Error('查询条件不唯一，请选择服务器返回的条件名称');
+        const key=Array.isArray(candidates[0].domkey)?candidates[0].domkey[0]:candidates[0].domkey;
+        query[key]=context.search;
+    }
+    const r=await api.get('/api/public/browser/data/'+field.detailtype,query,{forceCookie:true});
+    if(!r.json||r.json.status===false||r.json.msg==='登录信息超时')throw Error('关联查询失败');
+    return {conditions,result:r.json};
+}
+const strip=v=>String(v??'').replace(/<[^>]*>/g,'').trim();
+const names=c=>(Array.isArray(c?.specialobj)?c.specialobj:[]).map(x=>strip(x.name)).join('##~~@@~~##');
+export function isEntityBrowser(f) { return Number(f?.htmltype)===3 && ![2,19,20,402,403].includes(Number(f?.detailtype)); }
+export function richText(value) { return String(value??'').replace(/<br\s*\/?\s*>/gi,'\n').replace(/<\/(?:p|div)>/gi,'\n').replace(/<(?:p|div)[^>]*>/gi,'').replace(/&nbsp;/g,' ').replace(/&lt;/g,'<').replace(/&gt;/g,'>').replace(/&amp;/g,'&').replace(/\r\n/g,'\n').replace(/\n$/,''); }
+export function sameValue(a,b,field={}) {
+    if(Number(field.htmltype)===1 && [2,3,4,5].includes(Number(field.detailtype)) && a!=='' && b!=='' && Number.isFinite(Number(a))&&Number.isFinite(Number(b)))return Number(a)===Number(b);
+    if(Number(field.htmltype)===2&&String(field.fielddbtype??'').toLowerCase().includes('text'))return richText(a)===richText(b);
+    return String(a??'')===String(b??'');
+}
+export function buildDraft(plan,form,tables={}) {
+    if(form.params?.verifyRight!==true||String(form.params.currentUserid)!==plan.accountId)throw Error('账号或权限变化');
+    if(plan.requestId&&String(form.params.currentnodetype??form.params.nodetype)!=='0')throw Error('原请求已不在创建节点');
+    if(String(form.params.workflowtype)==='26'||form.params.isWorkflowDoc===true)throw Error('公文保存需单独验证');
+    const defs=definitions(form),main={};const expectedMain={},expectedDetails=[];
+    for(const f of defs.filter(f=>f.table==='main')){
+        const cell=form.maindata?.['field'+f.id];
+        if(cell && Number(f.id)>=0){main[f.id]=cell.value;expectedMain[f.id]={value:cell.value,name:names(cell)};}
+    }
+    const assign=(target,expected,values,fields)=>{
+        for(const [raw,value] of Object.entries(values??{})){
+            const id=idOf(raw),f=fields.find(x=>x.id===id);if(!f||![2,3].includes(Number(f.viewattr)))throw Error('字段不可由用户赋值：'+id);
+            target[id]=value;expected[id]={value,name:plan.browserNames?.[id]??''};
+        }
+    };
+    assign(main,expectedMain,plan.values,defs.filter(f=>f.table==='main'));
+    const requested=[...(plan.details??[])];
+    for(const [mark,source]of Object.entries(tables))if(!requested.some(d=>'detail_'+(Number(d.index)+1)===mark))requested.push({index:Number(mark.replace('detail_',''))-1,rows:source.rows.map(()=>({}))});
+    const details=requested.map(dt=>{
+        const mark='detail_'+(Number(dt.index)+1),source=tables[mark];if(!source)throw Error('缺少明细配置');
+        if(plan.requestId&&source.rows.length!==dt.rows.length)throw Error('原草稿明细行数变化；增删行需重新预览适配');
+        const expected=[];
+        const rows=dt.rows.map((row,i)=>{
+            const cells=plan.requestId||plan.serverResolved?source.rows[i]:source.addRowDefValue;
+            const values={},exp={};
+            for(const f of defs.filter(f=>f.table===mark)){
+                const c=cells?.['field'+f.id];
+                const actual=c??cells?.[f.id];
+                if(actual&&typeof actual==='object'&&'value'in actual){values[f.id]=actual.value;exp[f.id]={value:actual.value,name:names(actual)};}
+            }
+            assign(values,exp,row,defs.filter(f=>f.table===mark));
+            for(const [id,c]of Object.entries(exp))c.name=plan.detailBrowserNames?.[dt.index]?.[i]?.[id]??c.name;
+            expected.push({keyid:plan.requestId?source.rows[i].keyid:undefined,fields:exp});return values;
+        });expectedDetails.push({mark,index:dt.index,rows:expected});return {index:dt.index,rows};
+    });
+    for(const [id,c]of Object.entries(expectedMain))if(isEntityBrowser(defs.find(f=>f.id===id))&&c.value&&!c.name)throw Error('浏览框显示名缺失，请查询实际选项并确认：'+id);
+    for(const dt of expectedDetails)for(const row of dt.rows)for(const [id,c]of Object.entries(row.fields))if(isEntityBrowser(defs.find(f=>f.id===id))&&c.value&&!c.name)throw Error('明细浏览框显示名缺失，请查询实际选项并确认：'+id);
+    const body={...form.submitParams,...buildCreateSubmitBody(plan.workflowId,main,plan.requestName,form.params,form.submitParams,plan.browserNames,details),src:'save',isaffirmance:'0',isaffirmanceSrc:''};
+    for(const [id,c]of Object.entries(expectedMain))if(c.name)body['field'+id+'name']=c.name;
+    for(const dt of expectedDetails)dt.rows.forEach((r,i)=>{for(const [id,c]of Object.entries(r.fields))if(c.name)body[`field${id}_${i}name`]=c.name;});
+    if(plan.requestId){body.iscreate='0';body.requestid=String(plan.requestId);for(const dt of expectedDetails){body['submitdtlid'+dt.index]=dt.rows.map((r,i)=>{body[`dtl_id_${dt.index}_${i}`]=String(r.keyid??'');return i;}).join(',')+',';}}
+    return {body,expected:{main:expectedMain,details:expectedDetails,fingerprint:fingerprint(form),accountId:plan.accountId,requestName:plan.requestName}};
+}
+export function verifyDraft(expected,form,tables,{action='save'}={}) {
+    const problems=[],defs=definitions(form),p=form.params??{};
+    if(String(p.currentUserid)!==expected.accountId||String(p.creater)!==expected.accountId)problems.push('账号/创建人');
+    if(action==='save'&&String(p.currentnodetype??p.nodetype)!=='0')problems.push('非创建节点');
+    if(action==='submit'&&String(p.currentnodetype??p.nodetype)==='0')problems.push('提交后仍为创建节点');
+    if(fingerprint(form)!==expected.fingerprint)problems.push('结构变化');
+    if(String(p.requestname??form.maindata?.['field-1']?.value)!==expected.requestName)problems.push('标题');
+    const check=(fields,cells,table)=>{for(const [id,e]of Object.entries(fields)){const c=cells?.['field'+id];if(!c||!sameValue(c.value,e.value,defs.find(f=>f.id===id)))problems.push(table+':'+id);if(e.name&&names(c)!==strip(e.name))problems.push(table+':'+id+':显示名');}};
+    check(expected.main,form.maindata,'main');
+    for(const dt of expected.details){const rows=tables[dt.mark]?.rows;if(!rows||rows.length!==dt.rows.length){problems.push(dt.mark+':行数');continue;}dt.rows.forEach((r,i)=>{if(r.keyid&&String(rows[i].keyid)!==String(r.keyid))problems.push(dt.mark+':行标识');check(r.fields,rows[i],dt.mark+':'+i);});}
+    return problems;
+}