bdip-office-assistant-cli 0.0.0-stage → 1.0.1

package/dist/todobatch.js

@@ -0,0 +1,172 @@
+import { createApiFromProfile } from './client.js';
+import { getWfList } from './workflow.js';
+import { extractRows } from './parse.js';
+
+/**
+ * 流程批量操作（待办域）。
+ *
+ * 接口契约以 2026-09-09 抓包实证为准：
+ *   - 批量提交   POST /api/workflow/reqform/requestBatchSubmit
+ *                multiSubIds=<rid,rid,>&belongtoUserids=<uid,uid,>&pagefromtype=1&needBatchSubmit=1
+ *   - 批量转发   GET  /api/workflow/forward/getBatchForwardInfo（预检）
+ *                POST /api/workflow/reqform/batchForward
+ *                forwardflag=1&field5=<接收人>&multiSubIds=<rid_uid,rid_uid>&operate=save
+ *   - 批量关注   POST /api/workflow/requestAttention/getAttentionTypeSet（查类型）
+ *                POST /api/workflow/requestAttention/saveAttention
+ *                src=batchadd&requestids=<rid,rid>&ids=<类型id,>
+ *   - 门禁       POST /api/ec/dev/table/checks（dataKey + checkId + randomDatas=每行 randomField0~14+randomFieldId）
+ *   - 二次验证   POST /api/workflow/secondauth/getSecondAuthConfig4List（requestIds=rid_uid + __weaver_request_url__=base64(baseUrl)）
+ *
+ * multiSubIds 尾逗号、ids 尾逗号、belongtoUserids 尾逗号均为抓包原样，不能去掉。
+ */
+
+/** 将用户输入的逗号列表规范化，并在真正调用前阻止常见的错配。 */
+export function parseIdList(value, label) {
+    const ids = String(value ?? '').split(',').map((item) => item.trim()).filter(Boolean);
+    if (!ids.length)
+        throw new Error(`${label}不能为空，请用英文逗号分隔多个 ID。`);
+    if (ids.some((id) => !/^\d+$/.test(id)))
+        throw new Error(`${label}只能包含数字 ID。`);
+    return ids;
+}
+
+/** 从待办列表原始行提取门禁所需的随机字段（与抓包 checks 的 randomDatas 结构一致）。 */
+function pickRandomFields(row) {
+    const out = {};
+    for (let i = 0; i <= 14; i++)
+        out[`randomField${i}`] = String(row?.[`randomField${i}`] ?? '');
+    out.randomFieldId = String(row?.randomFieldId ?? row?.requestid ?? row?.randomField2 ?? '');
+    return out;
+}
+
+/** 分类 → 人类可读列表名（用于进度与报错文案）。 */
+const CATEGORY_LABEL = { todo: '待办（待处理）', done: '已办', mine: '我发起的' };
+
+/**
+ * 在指定分类列表中取出与 requestIds 匹配的原始行（含 randomField）+ dataKey。跨页匹配直到全部命中或到末尾。
+ * opts.category：'todo'（默认，待处理）/ 'done'（已办）/ 'mine'（我发起的）——关注在三个分类里都可用；
+ *   提交/转发只对待办有意义，调用方自行传 'todo'。
+ */
+async function loadRowsFor(cfg, requestIds, opts = {}) {
+    const category = opts.category ?? 'todo';
+    const label = CATEGORY_LABEL[category] ?? category;
+    // 修复 #6：逐页定位是最耗时环节，实时打印进度，避免长时间无输出被误判卡死。
+    const wanted = new Set(requestIds.map(String));
+    const found = new Map();
+    let dataKey = '';
+    console.error(`  [批量] 正在「${label}」列表定位 ${requestIds.length} 条流程（按请求顺序逐页搜索）...`);
+    for (let current = 1; current <= 10; current++) {
+        console.error(`  [批量] 读取${label}第 ${current} 页...`);
+        const list = await getWfList(cfg, { category, page: current, pageSize: '100' });
+        dataKey = list.dataKey || dataKey;
+        const rows = extractRows(list.raw?.datas);
+        for (const row of rows) {
+            const rid = String(row?.requestid ?? row?.randomField2 ?? row?.randomFieldId ?? '');
+            if (wanted.has(rid) && !found.has(rid))
+                found.set(rid, row);
+        }
+        console.error(`  [批量] 第 ${current} 页已定位 ${found.size}/${requestIds.length} 条`);
+        if (rows.length < 100 || found.size === wanted.size)
+            break;
+        if (!rows.length)
+            break;
+    }
+    const missing = requestIds.map(String).filter((id) => !found.has(id));
+    if (missing.length)
+        throw new Error(`批量操作需要在「${label}」列表中定位这 ${missing.length} 条，未找到：${missing.join(', ')}。请确认 request-id 属于该列表（可用 --category 切换 待办/已办/我发起），或该流程已不在列表中。`);
+    // 保持调用方传入顺序，便于回执与 multiSubIds 对应
+    const rows = requestIds.map((id) => found.get(String(id)));
+    return { dataKey, rows };
+}
+
+/** 批量门禁（抓包实证）：checks(dataKey+randomDatas) + getSecondAuthConfig4List(requestIds=rid_uid+__weaver_request_url__=base64)。 */
+async function runGate(api, checkId, rows, dataKey) {
+    console.error(`  [批量] 执行门禁检查（${checkId}）...`);
+    const check = await api.post('/api/ec/dev/table/checks', {
+        dataKey,
+        checkId,
+        randomDatas: JSON.stringify(rows.map(pickRandomFields)),
+    });
+    const ridUids = rows
+        .map((r) => `${r?.randomField2 ?? r?.requestid}_${r?.randomField4 ?? r?.userid ?? ''}`)
+        .join(',');
+    const secondAuth = await api.post('/api/workflow/secondauth/getSecondAuthConfig4List', {
+        requestIds: ridUids,
+        __weaver_request_url__: Buffer.from(api.baseUrl).toString('base64'),
+    });
+    return { check, secondAuth };
+}
+
+/** 批量提交。调用方必须先展示预览，且只有 --yes 才会调用本函数。 */
+export async function batchSubmit(cfg, opts) {
+    const requestIds = parseIdList(opts.requestIds, 'requestIds');
+    const userIds = parseIdList(opts.userIds, 'userIds');
+    if (requestIds.length !== userIds.length)
+        throw new Error('requestIds 与 userIds 数量必须一致，确保每条待办对应正确处理人。');
+    const api = await createApiFromProfile(cfg);
+    const { dataKey, rows } = await loadRowsFor(cfg, requestIds);
+    const gate = await runGate(api, 'batchSubmit', rows, dataKey);
+    console.error(`  [批量] 提交 ${requestIds.length} 条流程（requestBatchSubmit）...`);
+    const result = await api.post('/api/workflow/reqform/requestBatchSubmit', {
+        multiSubIds: requestIds.join(',') + ',',
+        remark: String(opts.remark ?? 'OK'),
+        pagefromtype: '1',
+        belongtoUserids: userIds.join(',') + ',',
+        needBatchSubmit: '1',
+    });
+    console.error(`  [批量] 提交响应已返回（status=${result?.status ?? '?'}）`);
+    return { requestIds, userIds, gate, result };
+}
+
+/** 批量转发（抓包实证：batchForward，multiSubIds=requestId_userId）。 */
+export async function batchForward(cfg, opts) {
+    const requestIds = parseIdList(opts.requestIds, 'requestIds');
+    const receiver = parseIdList(opts.receiver, 'receiver');
+    const api = await createApiFromProfile(cfg);
+    // 前置预检（抓包：getBatchForwardInfo → {"allowAllPersonGroup":true}）
+    const info = await api.get('/api/workflow/forward/getBatchForwardInfo');
+    const { dataKey, rows } = await loadRowsFor(cfg, requestIds);
+    const gate = await runGate(api, 'batchForward', rows, dataKey);
+    // multiSubIds = requestId_userId（userId 为待办当前处理人，来自列表行 randomField4）
+    const multiSubIds = rows
+        .map((r) => `${r?.randomField2 ?? r?.requestid}_${r?.randomField4 ?? r?.userid ?? ''}`)
+        .join(',');
+    const result = await api.post('/api/workflow/reqform/batchForward', {
+        forwardflag: '1',
+        field5: receiver.join(','),
+        remark: String(opts.remark ?? ''),
+        multiSubIds,
+        operate: 'save',
+    });
+    return { requestIds, receiver, info, gate, result };
+}
+
+/** 查询关注类型（只读，供 dry-run 预览展示与 batchAttention 选择类型）。 */
+export async function getAttentionTypes(cfg, requestIds) {
+    const api = await createApiFromProfile(cfg);
+    const resp = await api.post('/api/workflow/requestAttention/getAttentionTypeSet', {
+        src: 'getData2',
+        requestid: requestIds.join(','),
+    });
+    return resp?.json?.datas ?? [];
+}
+
+/** 批量关注（抓包实证：getAttentionTypeSet → saveAttention(src=batchadd, ids=类型id,)）。 */
+export async function batchAttention(cfg, opts) {
+    const requestIds = parseIdList(opts.requestIds, 'requestIds');
+    const api = await createApiFromProfile(cfg);
+    const types = await getAttentionTypes(cfg, requestIds);
+    const attentionId = String(opts.attentionId ?? types[0]?.id ?? '');
+    if (!attentionId)
+        throw new Error('未能获取关注类型（getAttentionTypeSet 返回空），请确认该环境的“关注类型”已配置，或手动传 --attention-id。');
+    // 关注在 待办/已办/我发起 三个分类下都有「我的关注」页签，故定位列表可指定（默认待办）
+    const category = opts.category ?? 'todo';
+    const { dataKey, rows } = await loadRowsFor(cfg, requestIds, { category });
+    const gate = await runGate(api, 'batchAttention', rows, dataKey);
+    const result = await api.post('/api/workflow/requestAttention/saveAttention', {
+        src: 'batchadd',
+        requestids: requestIds.join(','),
+        ids: attentionId + ',',
+    });
+    return { requestIds, category, attentionTypes: types, attentionId, gate, result };
+}

package/dist/todocc.js

@@ -0,0 +1,128 @@
+import { createApiFromProfile } from './client.js';
+import { todayStr, nowTimeStr } from './util.js';
+/**
+ * 抄送/批注操作。POST remarkOperation（isremark=9, actiontype=remarkOperation）。
+ * 先 loadForm 拿签名，再 remarkOperation 抄送。
+ *
+ * 修复（P0-4）：submit_token key 旧硬编码 `1_<rid>_...`（前缀=1=sysadmin），非 sysadmin 取不到 token；
+ *   改用 `p.f_weaver_belongto_userid` 动态拼 key，兜底旧 `1_` 前缀。
+ */
+export async function ccTodo(cfg, opts) {
+    const { requestId } = opts;
+    const remarkText = opts.remark ?? '抄送';
+    const remarkHtml = remarkText.split(/\r?\n/).map((l) => `<p>${l}</p>`).join('');
+    const api = await createApiFromProfile(cfg);
+    // 第一步 loadForm → 拿签名
+    const r0 = await api.post('/api/workflow/reqform/loadForm', { iscreate: '0', requestid: requestId });
+    const j0 = r0.json ?? {};
+    const p0 = j0.params ?? {};
+    const sp0 = j0.submitParams ?? {};
+    const wfId = String(p0.workflowid ?? '');
+    const nodeId = String(p0.nodeid ?? '');
+    let p = p0;
+    let sp = sp0;
+    if (wfId && nodeId) {
+        const r1 = await api.post('/api/workflow/reqform/loadForm', { iscreate: '0', requestid: requestId, workflowid: wfId, nodeid: nodeId });
+        const j1 = r1.json ?? {};
+        p = j1.params ?? p0;
+        sp = j1.submitParams ?? sp0;
+    }
+    const userId = String(p.f_weaver_belongto_userid ?? '1');
+    const submitTokenKey = `${userId}_${requestId}_request_submit_token`;
+    const submitToken = String(sp[submitTokenKey] ?? sp[`1_${requestId}_request_submit_token`] ?? '');
+    const sigDecoded = Buffer.from(String(p.signatureAttributesStr ?? ''), 'base64').toString('utf8');
+    const lastOpDate = (sigDecoded.match(/lastOperateDate=([^|]*)/)?.[1] ?? '').trim();
+    const lastOpTime = (sigDecoded.match(/lastOperateTime=([^|]*)/)?.[1] ?? '').trim();
+    const todayStrVal = todayStr();
+    const timeStr = nowTimeStr();
+    const body = {
+        formid: String(sp.formid ?? p.formid ?? ''),
+        isSubmitDirectNode: '',
+        openByDefaultBrowser: '',
+        iscreate: '0',
+        creatertype: '0',
+        isdialog: '1',
+        lastOperateDate: lastOpDate,
+        createdoc: '',
+        [submitTokenKey]: submitToken,
+        nodeid: nodeId,
+        workflowid: wfId,
+        isbill: String(sp.isbill ?? p.isbill ?? '1'),
+        authStr: String(p.authStr ?? ''),
+        'f_weaver_belongto_userid': userId,
+        currenttime: timeStr,
+        'f_weaver_belongto_usertype': '0',
+        agentorByAgentId: '-1',
+        isMultiDoc: '',
+        inputcheck: '',
+        comemessage: '',
+        lastOperateTime: lastOpTime,
+        temphasUseTempletSucceed: '',
+        workflowRequestLogId: '',
+        edesign_layout: '',
+        requestid: requestId,
+        isremark: '9',
+        creater: String(p.creater ?? userId),
+        htmlfieldids: '',
+        SubmitToNodeid: '',
+        isCptwf: 'false',
+        isovertime: '',
+        agentType: '0',
+        authSignatureStr: String(p.authSignatureStr ?? ''),
+        nodetype: String(p.nodetype ?? sp.nodetype ?? '1'),
+        needoutprint: '',
+        lastOperator: '1',
+        topage: '',
+        isFormSignature: '0',
+        remindTypes: '',
+        fromFlowDoc: '',
+        RejectNodes: '',
+        linkageUUID: String(sp.linkageUUID ?? ''),
+        billid: String(sp.billid ?? ''),
+        lastnodeid: '',
+        uploadType: '',
+        isSignMustInput: '',
+        RejectToNodeid: '',
+        isWorkflowDoc: 'false',
+        src: 'save',
+        annexmaxUploadImageSize: '',
+        takisremark: '0',
+        workflowtype: String(sp.workflowtype ?? p.workflowtype ?? ''),
+        remarkLocation: '',
+        needcheck: '',
+        needcheckLock: 'false',
+        selectfieldvalue: '',
+        RejectToType: '',
+        currentdate: todayStrVal,
+        needwfback: '1',
+        remark: remarkHtml,
+        'field-annexupload': '',
+        signdocids: '',
+        signworkflowids: '',
+        annexdocids: '',
+        annexdocinfos: '',
+        handWrittenSign: '',
+        isOdocRequest: '0',
+        enableIntervenor: '',
+        verifyRequiredRange: 'field-9999,',
+        linkageUnFinishedKey: '',
+        remarkquote: remarkHtml,
+        actiontype: 'remarkOperation',
+        isFirstSubmit: '0',
+        existChangeRange: '',
+        requestname: String(p.requestname ?? ''),
+        requestlevel: '0',
+        chatsType: '-1',
+        messageType: '-1',
+        'field-9': '0',
+        'field-10': '4',
+        mainFieldUnEmptyCount: '0',
+        detailFieldUnEmptyCount: '0',
+        signatureAttributesStr: String(p.signatureAttributesStr ?? ''),
+        signatureSecretKey: String(p.signatureSecretKey ?? ''),
+        selectNextFlow: '0',
+        openDataVerify: '0',
+        wfTestStr: '',
+    };
+    return api.post('/api/workflow/reqform/remarkOperation', body);
+}

package/dist/todoforward.js

@@ -0,0 +1,66 @@
+import { createApiFromProfile } from './client.js';
+import { resolveReceivers } from './wfreceiver.js';
+/**
+ * 转发/传阅。链路（与意见征询同构，流程抓包8.har/7.har 实证 forwardflag=1/4 走同一 ForwardDialog）：
+ *   loadForm(取 workflowid/nodeid/操作人 userid) → signInput(forwardflag 预载) →
+ *   remarkOperate(operate=save, forwardflag, field5=接收人) → {"success":true,...}。
+ *
+ * 修复（0.5.1）：旧实现走 requestOperation(src=submit, forwardOperators=接收人) 且不带 forwardflag，
+ *   被服务端当成"批准"——用户实测转发被记录成"批准"（签字意见写"转发"然后点通过）。
+ *   前端 bundle 实证 doReviewE9(转发 forwardflag="1") / doChuanyue(传阅 forwardflag="4")
+ *   打开同一 ForwardDialog，提交统一走 signInput → remarkOperate：
+ *     · forward_token_<requestid>_<userid> 由客户端 Date.now() 生成，signInput 与 remarkOperate 须用同一值
+ *     · signInput：IsSubmitedOpinion=1 & IsBeForwardTodo=1 & field5= 空
+ *     · remarkOperate：operate=save & field5=接收人 & isSubmitSign/isChuanyue/isRemind
+ *     · 转发(flag=1) 的 signInput 带 forwardOperators= 空串；传阅(flag=4) 不带 —— 与抓包一致
+ *     · 传阅(flag=4) 的 isSubmitSign/isChuanyue/isRemind 为空串；转发(flag=1) 为 0 —— 与抓包一致
+ */
+async function forwardOrCirculate(cfg, opts, forwardflag) {
+    const { requestId } = opts;
+    const remarkText = opts.remark ?? '';
+    const remarkHtml = remarkText.split(/\r?\n/).map((l) => `<p>${l}</p>`).join('');
+    const api = await createApiFromProfile(cfg);
+    const r0 = await api.post('/api/workflow/reqform/loadForm', { iscreate: '0', requestid: String(requestId) });
+    const p = (r0.json ?? {}).params ?? {};
+    const userId = String(p.f_weaver_belongto_userid ?? '1');
+    const userType = String(p.f_weaver_belongto_usertype ?? '0');
+    const workflowid = String(p.workflowid ?? '');
+    const nodeid = String(p.nodeid ?? '');
+    const field5 = await resolveReceivers(cfg, opts);
+    if (!field5)
+        throw new Error(`${forwardflag === '1' ? '转发' : '传阅'}需要目标人：传 --receiver <userId> 或 --receiver-name <姓名>`);
+    const tokenKey = `forward_token_${requestId}_${userId}`;
+    const token = String(Date.now());
+    const common = {
+        isShowReplyNotice: '0', takOverMins: '30', remark: remarkHtml,
+        workflowRequestLogId: '', forwardflag, requestid: String(requestId),
+        nodeid, workflowid, 'f_weaver_belongto_userid': userId, 'f_weaver_belongto_usertype': userType,
+        agentType: '0', agentorByAgentId: '-1', secLevelInfo: '[object Object]',
+        [tokenKey]: token,
+    };
+    // ① signInput 预载（forwardflag，field5 空）
+    const signBody = forwardflag === '1'
+        ? { ...common, field5: '', IsSubmitedOpinion: '1', IsBeForwardTodo: '1', forwardOperators: '' }
+        : { ...common, field5: '', IsSubmitedOpinion: '1', IsBeForwardTodo: '1' };
+    await api.post('/api/workflow/reqform/signInput', signBody);
+    // ② remarkOperate 提交（operate=save，field5=接收人）
+    const remFlags = forwardflag === '4' ? '' : '0';
+    return api.post('/api/workflow/reqform/remarkOperate', {
+        ...common, field5,
+        operate: 'save',
+        openByDefaultBrowser: '', IsBeForwardSubmitAlready: '', IsBeForwardAlready: '',
+        IsSubmitedOpinion: '', IsBeForwardTodo: '',
+        isSubmitSign: remFlags, isChuanyue: remFlags, isRemind: remFlags,
+        signworkflowids: '', signdocids: '', remarkLocation: '',
+        'field-annexupload': '', 'field-annexupload-request': String(requestId),
+        handWrittenSign: '0', remindTypes: '',
+    });
+}
+/** 转发（分享给某人看，不改变审批人） */
+export async function forwardTodo(cfg, opts) {
+    return forwardOrCirculate(cfg, opts, '1');
+}
+/** 传阅 */
+export async function circulateTodo(cfg, opts) {
+    return forwardOrCirculate(cfg, opts, '4');
+}

package/dist/todoreject.js

@@ -0,0 +1,215 @@
+import { createApiFromProfile } from './client.js';
+import { todayStr, nowTimeStr } from './util.js';
+/**
+ * 退回/驳回流程。HAR 正确链路：
+ *   loadForm(2步拿签名) → judgeRejectWay(判断退回方式) → getForwardDatas(取可退回节点) →
+ *   doBack(selectRow=选定节点行id) → requestOperation(src=reject)
+ *
+ * 修复（P0-3）：旧实现跳过 judgeRejectWay/getForwardDatas/doBack，直接 requestOperation(src=reject)，
+ *   且 RejectNodes/RejectToNodeid/RejectToType 全空 → 报"流程数据已更改"。
+ *
+ * ⚠ getForwardDatas 响应结构未抓到（HAR 只抓请求），selectRow/RejectToNodeid 的取值路径属 best-effort，
+ *   需实跑校准；如失败可用 --reject-node/--reject-to-node/--reject-to-type 手工指定。
+ */
+export async function rejectTodo(cfg, opts) {
+    const { requestId } = opts;
+    const remarkText = opts.remark ?? '退回';
+    const remarkHtml = remarkText.split(/\r?\n/).map((l) => `<p>${l}</p>`).join('');
+    const api = await createApiFromProfile(cfg);
+    // 第一步 loadForm → 拿签名
+    const r0 = await api.post('/api/workflow/reqform/loadForm', { iscreate: '0', requestid: requestId });
+    const j0 = r0.json ?? {};
+    const p0 = j0.params ?? {};
+    const sp0 = j0.submitParams ?? {};
+    const wfId = String(p0.workflowid ?? '');
+    const nodeId = String(p0.nodeid ?? '');
+    let p = p0;
+    let sp = sp0;
+    if (wfId && nodeId) {
+        const r1 = await api.post('/api/workflow/reqform/loadForm', { iscreate: '0', requestid: requestId, workflowid: wfId, nodeid: nodeId });
+        const j1 = r1.json ?? {};
+        p = j1.params ?? p0;
+        sp = j1.submitParams ?? sp0;
+    }
+    const userId = String(p.f_weaver_belongto_userid ?? '1');
+    // ② judgeRejectWay（HAR：requestid/workflowid/nodeid/f_weaver_belongto_userid/...）
+    try {
+        await api.post('/api/workflow/reqform/judgeRejectWay', {
+            requestid: requestId,
+            workflowid: wfId,
+            nodeid: nodeId,
+            'f_weaver_belongto_userid': userId,
+            'f_weaver_belongto_usertype': String(p.f_weaver_belongto_usertype ?? '0'),
+            wfTestStr: '',
+        });
+    }
+    catch { /* 判断失败不阻断，继续走退回 */ }
+    // ③ getForwardDatas（GET，取可退回节点列表；响应未抓，best-effort 解析 selectRow + nodeid）
+    let rejectNodes = [];
+    let selectRow = '';
+    let rejectToNode = opts.rejectToNode ?? '';
+    let rejectToType = opts.rejectToType ?? '';
+    let rejectNodesField = opts.rejectNode ?? '';
+    try {
+        const rFd = await api.get('/api/workflow/reqform/getForwardDatas', {
+            requestid: requestId, workflowid: wfId, nodeid: nodeId,
+            'f_weaver_belongto_userid': userId, 'f_weaver_belongto_usertype': String(p.f_weaver_belongto_usertype ?? '0'),
+        });
+        const fdText = rFd.text ?? '';
+        // best-effort：从响应里提节点行 id（selectRow）与 nodeid/nodename
+        rejectNodes = [...fdText.matchAll(/["']?selectRow["']?\s*[:=]\s*["']?(\d+)["']?[^}]*?["']?nodeid["']?\s*[:=]\s*["']?(\d+)["']?(?:[^}]*?["']?nodename["']?\s*[:=]\s*["']?([^"',}]+)["']?)?/gi)]
+            .map((m) => ({ selectRow: m[1], nodeid: m[2], nodename: m[3] ?? '' }));
+        if (rejectNodes.length === 0) {
+            // 兜底：分别提 selectRow 与 nodeid
+            const srs = [...fdText.matchAll(/selectRow["']?\s*[:=]\s*["']?(\d+)/gi)].map((m) => m[1]);
+            const nids = [...fdText.matchAll(/nodeid["']?\s*[:=]\s*["']?(\d+)/gi)].map((m) => m[1]);
+            rejectNodes = srs.map((sr, i) => ({ selectRow: sr, nodeid: nids[i] ?? '', nodename: '' }));
+        }
+        // 选定目标节点：用户传 --reject-to-node(=nodeid) 优先，否则取第一个
+        const picked = rejectToNode
+            ? rejectNodes.find((n) => n.nodeid === rejectToNode) ?? rejectNodes[0]
+            : rejectNodes[0];
+        if (picked) {
+            selectRow = picked.selectRow;
+            if (!rejectToNode)
+                rejectToNode = picked.nodeid;
+        }
+    }
+    catch { /* getForwardDatas 失败不阻断 */ }
+    // ④ doBack(selectRow)（HAR：selectRow=<节点行id>）
+    if (selectRow) {
+        try {
+            await api.post('/api/workflow/reqform/doBack', {
+                selectRow,
+                requestid: requestId,
+                workflowid: wfId,
+                nodeid: nodeId,
+                'f_weaver_belongto_userid': userId,
+                'f_weaver_belongto_usertype': String(p.f_weaver_belongto_usertype ?? '0'),
+            });
+        }
+        catch { /* doBack 失败不阻断 */ }
+    }
+    const sigDecoded = Buffer.from(String(p.signatureAttributesStr ?? ''), 'base64').toString('utf8');
+    const lastOpDate = (sigDecoded.match(/lastOperateDate=([^|]*)/)?.[1] ?? '').trim();
+    const lastOpTime = (sigDecoded.match(/lastOperateTime=([^|]*)/)?.[1] ?? '').trim();
+    const todayStrVal = todayStr();
+    const timeStr = nowTimeStr();
+    const submitTokenKey = `${userId}_${requestId}_request_submit_token`;
+    const submitToken = String(sp[submitTokenKey] ?? Date.now());
+    // ⑤ requestOperation(src=reject)，带上退回目标（HAR 实测旧实现三字段全空是失败根因）
+    const body = {
+        formid: String(sp.formid ?? p.formid ?? ''),
+        isSubmitDirectNode: '',
+        openByDefaultBrowser: '',
+        iscreate: '0',
+        creatertype: '0',
+        isdialog: '1',
+        lastOperateDate: lastOpDate,
+        createdoc: '',
+        nodeid: nodeId,
+        workflowid: wfId,
+        isbill: String(sp.isbill ?? p.isbill ?? '1'),
+        authStr: String(p.authStr ?? ''),
+        'f_weaver_belongto_userid': userId,
+        currenttime: timeStr,
+        'f_weaver_belongto_usertype': String(p.f_weaver_belongto_usertype ?? '0'),
+        agentorByAgentId: '-1',
+        isMultiDoc: '',
+        inputcheck: '',
+        comemessage: '',
+        lastOperateTime: lastOpTime,
+        temphasUseTempletSucceed: '',
+        workflowRequestLogId: '',
+        edesign_layout: '',
+        [submitTokenKey]: submitToken,
+        requestid: requestId,
+        isremark: '0',
+        creater: String(p.creater ?? userId),
+        htmlfieldids: '',
+        SubmitToNodeid: '',
+        isCptwf: 'false',
+        isovertime: '',
+        agentType: '0',
+        authSignatureStr: String(p.authSignatureStr ?? ''),
+        nodetype: String(p.nodetype ?? sp.nodetype ?? '0'),
+        needoutprint: '',
+        lastOperator: String(sp.lastOperator ?? p.lastOperator ?? userId),
+        topage: '',
+        isFormSignature: '0',
+        remindTypes: '',
+        fromFlowDoc: '',
+        RejectNodes: rejectNodesField,
+        linkageUUID: String(sp.linkageUUID ?? ''),
+        billid: String(sp.billid ?? ''),
+        lastnodeid: '',
+        uploadType: '',
+        isSignMustInput: '',
+        RejectToNodeid: rejectToNode,
+        isWorkflowDoc: 'false',
+        src: 'reject',
+        annexmaxUploadImageSize: '',
+        takisremark: '0',
+        workflowtype: String(sp.workflowtype ?? p.workflowtype ?? ''),
+        remarkLocation: '',
+        needcheck: '',
+        needcheckLock: 'false',
+        selectfieldvalue: '',
+        RejectToType: rejectToType,
+        currentdate: todayStrVal,
+        needwfback: '0',
+        remark: remarkHtml,
+        'field-annexupload': '',
+        signdocids: '',
+        signworkflowids: '',
+        annexdocids: '',
+        annexdocinfos: '',
+        handWrittenSign: '',
+        isOdocRequest: '0',
+        enableIntervenor: '',
+        verifyRequiredRange: 'field-9999,',
+        linkageUnFinishedKey: '',
+        remarkquote: remarkHtml,
+        actiontype: 'requestOperation',
+        isFirstSubmit: '0',
+        existChangeRange: '',
+        requestname: String(p.requestname ?? ''),
+        requestlevel: '0',
+        chatsType: '-1',
+        messageType: '-1',
+        'field-9': '0',
+        'field-10': '4',
+        mainFieldUnEmptyCount: '0',
+        detailFieldUnEmptyCount: '0',
+        signatureAttributesStr: String(p.signatureAttributesStr ?? ''),
+        signatureSecretKey: String(p.signatureSecretKey ?? ''),
+        selectNextFlow: '0',
+        openDataVerify: '0',
+        wfTestStr: '',
+    };
+    return api.post('/api/workflow/reqform/requestOperation', body);
+}
+/**
+ * 获取可退回的节点列表（judgeRejectWay → getForwardDatas）。
+ */
+export async function getRejectNodes(cfg, requestId) {
+    const api = await createApiFromProfile(cfg);
+    const r0 = await api.post('/api/workflow/reqform/loadForm', { iscreate: '0', requestid: requestId });
+    const j0 = r0.json ?? {};
+    const p0 = j0.params ?? {};
+    const wfId = String(p0.workflowid ?? '');
+    const nodeId = String(p0.nodeid ?? '');
+    const userId = String(p0.f_weaver_belongto_userid ?? '1');
+    try {
+        await api.post('/api/workflow/reqform/judgeRejectWay', {
+            requestid: requestId, workflowid: wfId, nodeid: nodeId,
+            'f_weaver_belongto_userid': userId, 'f_weaver_belongto_usertype': String(p0.f_weaver_belongto_usertype ?? '0'),
+            wfTestStr: '',
+        });
+    }
+    catch { /* 忽略 */ }
+    return api.get('/api/workflow/reqform/getForwardDatas', {
+        requestid: requestId, workflowid: wfId, nodeid: nodeId,
+        'f_weaver_belongto_userid': userId, 'f_weaver_belongto_usertype': String(p0.f_weaver_belongto_usertype ?? '0'),
+    });
+}