dsh-form-fill-agent 0.1.0-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-data-cleaning-agent plugin contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: form-fill-agent
+      name: dsh-form-fill-agent

package/lib/client.js

@@ -0,0 +1,20 @@
+// Optional native entry: never claims or reuses another agent's session.
+window.__ModuleLoader__.load({
+  id: 'dsh-form-fill-agent',
+  factory(require) {
+    function apply(ctx) {
+      try {
+        const react = require('react');
+        if (typeof react?.createElement !== 'function' || typeof ctx.slots?.inject !== 'function' || typeof ctx.slots?.register !== 'function') return;
+        ctx.slots.inject('sidebar.footer.action', () => ctx.slots.register({
+          name: 'sidebar.footer.action', id: 'form-fill-agent', order: 12,
+        }, function FormFillEntry() {
+          return react.createElement('a', { href: '/form-fill/', target: '_blank', rel: 'noopener noreferrer', title: 'AI填表', 'aria-label': '打开 AI填表工作台', style: { display: 'block', padding: '8px 12px', color: 'inherit', textDecoration: 'none' } }, '▦ AI填表');
+        }));
+      } catch {
+        // Public /form-fill/ page remains available if optional Client slots differ.
+      }
+    }
+    return { name: 'form-fill-agent', inject: [], apply };
+  },
+});

package/lib/http.js

@@ -0,0 +1,100 @@
+import { randomUUID } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { applyChangeSet } from 'form-fill-core';
+import { previewBytes } from './workflow.js';
+import { createTaskStore } from './task-store.js';
+const XLSX_TYPE = 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet';
+const FIXTURES = ['客户台账', '供应商准入表', '合同主体信息表'];
+export function createFormFillHandler({ basePath = '', getPort, now = Date.now, ttlMs = 15 * 60 * 1000, maxTasks = 10, taskDirectory } = {}) {
+  const tasks = createTaskStore({ directory: taskDirectory, maxTasks, now, ttlMs });
+  let inFlight = 0, disposed = false;
+  const running = new Set();
+  const sweep = () => { for (const [id, task] of tasks) if (now() - task.created >= ttlMs) tasks.delete(id); };
+  const timer = setInterval(sweep, Math.min(ttlMs, 60000)); timer.unref();
+  const handler = async (request, response) => {
+    const send = (status, data, type = 'application/json') => {
+      response.writeHead(status, { 'Content-Type': type, 'Cache-Control': 'no-store', 'X-Content-Type-Options': 'nosniff', 'Content-Security-Policy': "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'" });
+      response.end(type === 'application/json' ? JSON.stringify(data) : data);
+    };
+    if (disposed) return send(503, { message: '插件已卸载，请重新打开' });
+    const host = request.headers.host, port = getPort?.();
+    if (!Number.isInteger(port) || port === 43120 || !['127.0.0.1:' + port, 'localhost:' + port].includes(host)) return send(403, { message: '仅允许本机隔离端口访问' });
+    const origin = 'http://' + host;
+    if (request.headers['sec-fetch-site'] === 'cross-site' || (request.headers.origin && request.headers.origin !== origin)) return send(403, { message: '仅允许同源访问' });
+    let reserved = false;
+    try {
+      sweep();
+      const url = new URL(request.url, origin);
+      if (url.pathname !== basePath && !url.pathname.startsWith(basePath + '/')) return send(404, { message: '路径不存在' });
+      const path = url.pathname.slice(basePath.length) || '/';
+      if (request.method === 'GET' && path === '/') return send(200, await readFile(new URL('./ui.html', import.meta.url)), 'text/html; charset=utf-8');
+      if (request.method === 'GET' && path === '/health') return send(200, { plugin: 'form-fill-agent', product: 'AI填表', version: '0.1.0-alpha.1', provider: 'mock-only', companionRequired: false, taskStorage: taskDirectory ? 'disk' : 'memory', tasks: tasks.size });
+      if (request.method === 'GET' && path.startsWith('/task/')) {
+        const id = path.slice(6), task = tasks.get(id);
+        if (!task) return send(404, { message: '任务不存在或已过期' });
+        return send(200, { id, ...task.preview, confirmed: !!task.result });
+      }
+      if (request.method === 'GET' && path.startsWith('/fixture/')) {
+        const name = decodeURIComponent(path.slice(9));
+        if (!FIXTURES.includes(name)) return send(404, { message: '模板不存在' });
+        return send(200, await readFile(new URL('./fixtures/' + name + '.xlsx', import.meta.url)), XLSX_TYPE);
+      }
+      if (request.method === 'GET' && path.startsWith('/download/')) {
+        const parts = path.split('/'), [, , id, kind] = parts, task = tasks.get(id);
+        if (parts.length !== 4 || !task?.result) return send(404, { message: '请先确认写回，或预览已过期' });
+        if (kind === 'xlsx') return send(200, task.result.bytes, XLSX_TYPE);
+        if (kind === 'changes') return send(200, { kind: 'WritebackReport', changeSet: task.preview.changeSet, appliedChanges: task.result.changes, outputChecksum: task.result.checksum });
+        if (kind === 'incomplete') return send(200, task.result.incomplete);
+        return send(404, { message: '制品不存在' });
+      }
+      if (request.method !== 'POST' || !['/preview', '/confirm', '/discard'].includes(path)) return send(404, { message: '路径不存在' });
+      if (request.headers.origin !== origin || request.headers['content-type'] !== 'application/json') return send(403, { message: '请求需来自本页' });
+      if (path === '/preview') {
+        if (tasks.size + inFlight >= maxTasks) return send(429, { message: '预览数量已达上限，请先释放旧预览' });
+        inFlight++; reserved = true;
+      }
+      const chunks = []; let length = 0;
+      for await (const chunk of request) {
+        length += chunk.length;
+        if (length > (path === '/preview' ? 12 * 1024 * 1024 : 4096)) return send(413, { message: '请求过大' });
+        chunks.push(chunk);
+      }
+      let body; try { body = JSON.parse(Buffer.concat(chunks).toString()); } catch { return send(400, { message: '请求格式无效' }); }
+      if (!body || Array.isArray(body) || typeof body !== 'object') return send(400, { message: '请求格式无效' });
+      if (path === '/preview') {
+        if (typeof body.base64 !== 'string' || !body.base64 || !/^[A-Za-z0-9+/]*={0,2}$/.test(body.base64) || body.base64.length % 4) return send(400, { message: '文件编码无效' });
+        const bytes = Buffer.from(body.base64, 'base64');
+        if (bytes.toString('base64') !== body.base64) return send(400, { message: '文件编码无效' });
+        const preview = await previewBytes(bytes), id = randomUUID();
+        if (disposed) return send(503, { message: '插件已卸载' });
+        tasks.set(id, { bytes, preview, created: now() });
+        return send(200, { id, ...preview });
+      }
+      const task = tasks.get(body.id);
+      if (!task) return send(404, { message: '预览已过期，请重新上传' });
+      if (running.has(body.id)) return send(409, { message: '任务正在查询，请稍后再操作' });
+      if (path === '/discard') { tasks.delete(body.id); return send(200, { discarded: true }); }
+      if (body.confirmChangeSetId !== task.preview.changeSet.changeSetId) return send(409, { message: '请确认当前预览' });
+      const result = task.result ?? applyChangeSet(task.bytes, task.preview.plan, task.preview.changeSet, { confirmChangeSetId: body.confirmChangeSetId });
+      tasks.set(body.id, { ...task, result });
+      return send(200, { filled: result.changes.length, incomplete: result.incomplete.length, checksum: result.checksum });
+    } catch (error) { return send(400, { code: error.code ?? 'FORM_FILL_ERROR', message: error.code ? error.message : '处理失败，请检查输入文件' }); }
+    finally { if (reserved) inFlight--; }
+  };
+  return {
+    handler,
+    async enrich(id, provider) {
+      sweep();
+      const task = tasks.get(id);
+      if (disposed || !task || task.result || running.has(id)) throw Error('任务不存在、已确认或正在执行');
+      running.add(id);
+      try {
+        const preview = await previewBytes(task.bytes, { provider, confirmPaidCalls: true });
+        if (disposed || tasks.get(id) !== task) throw Error('任务已过期或被替换');
+        tasks.set(id, { ...task, preview, revision: (task.revision ?? 1) + 1 });
+        return { taskId: id, filled: preview.changeSet.changes.length, incomplete: preview.changeSet.incomplete.length, previewPath: basePath + '/#task=' + id };
+      } finally { running.delete(id); }
+    },
+    dispose() { if (disposed) return; disposed = true; clearInterval(timer); tasks.close(); },
+  };
+}

package/lib/index.js

@@ -0,0 +1,40 @@
+import { createFormFillHandler } from './http.js';
+import { createQccProvider, REGISTRATION_TOOL } from 'qcc-form-fill-provider';
+import { randomUUID } from 'node:crypto';
+import { join } from 'node:path';
+export { previewBytes, previewFile, writeCopy } from './workflow.js';
+export const name = 'form-fill-agent';
+export const inject = [];
+export function apply(ctx, config = {}) {
+  ctx.inject(['webServer'], scope => {
+    const taskDirectory = config.taskDirectory ?? (process.env.DSH_HOME ? join(process.env.DSH_HOME, 'form-fill-tasks') : undefined);
+    const service = createFormFillHandler({ basePath: '/form-fill', getPort: () => scope.webServer.port, taskDirectory, ttlMs: 86400000 });
+    scope.inject?.(['tools'], toolScope => {
+      const tools = toolScope.tools;
+      const disposeTool = tools.register({
+        name: 'form_fill_enrich',
+        description: 'Use QCC to fill an uploaded AI填表 task. Invoke only when the user requests QCC enrichment. Returns counts and a preview link; the user confirms cell changes in the workbench.',
+        parameters: { type: 'object', additionalProperties: false, properties: { taskId: { type: 'string' } }, required: ['taskId'] },
+        output: {
+          schema: { type: 'object', properties: { taskId: { type: 'string' }, filled: { type: 'integer' }, incomplete: { type: 'integer' }, previewPath: { type: 'string' } }, required: ['taskId','filled','incomplete','previewPath'] },
+          render: (_args, value) => [{ type: 'text', text: 'AI填表：可填写 ' + value.filled + ' 格，未完成 ' + value.incomplete + ' 项。预览：' + value.previewPath }],
+        },
+        async execute(args, execution) {
+          if (!execution?.agent || !execution?.token) throw Error('需要 Agent-owned 工具执行上下文');
+          const provider = createQccProvider({ callTool: async (name, arguments_, { signal }) => {
+            if (name !== REGISTRATION_TOOL) throw Error('不支持的 QCC 工具');
+            const names = ['mcp__qcc-company__', 'mcp__company__', 'mcp__qcc_company__'].map(prefix => prefix + name);
+            const selected = names.find(candidate => tools.get(candidate));
+            if (!selected) throw Error('请先连接企查查企业数据 MCP');
+            const result = await tools.execute({ name: selected, arguments: arguments_, signal, callId: randomUUID(), rootCallId: execution.rootCallId, parent: execution.token, agent: execution.agent });
+            return result?.isError ? { isError: true } : result?.value;
+          } });
+          return service.enrich(args.taskId, provider);
+        },
+      });
+      toolScope.effect?.(() => () => disposeTool?.());
+    });
+    const disposeRoute = scope.webServer.register({ kind: 'prefix', path: '/form-fill', handler: service.handler });
+    ctx.effect(() => () => { disposeRoute?.(); service.dispose(); });
+  });
+}

package/lib/task-store.js

@@ -0,0 +1,69 @@
+import { mkdirSync, lstatSync, readdirSync, readFileSync, writeFileSync, renameSync, unlinkSync, rmdirSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { assertPlan, assertChangeSet, parseWorkbook, applyChangeSet } from 'form-fill-core';
+const idPattern = /^[0-9a-f-]{36}$/;
+export function createTaskStore({ directory, maxTasks = 10, now = Date.now, ttlMs = 86400000 } = {}) {
+  const tasks = new Map();
+  let root, lock;
+  if (directory) {
+    root = resolve(directory);
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    if (!lstatSync(root).isDirectory() || lstatSync(root).isSymbolicLink() || (process.platform !== 'win32' && (lstatSync(root).mode & 0o077))) throw Error('Task directory must be private (0700) and not a symlink');
+    lock = join(root, '.lock');
+    try { mkdirSync(lock, { mode: 0o700 }); }
+    catch (error) {
+      if (error.code !== 'EEXIST') throw error;
+      const pid = Number(readFileSync(join(lock, 'pid'), 'utf8'));
+      if (!Number.isSafeInteger(pid) || pid <= 0) throw Error('Invalid task store lock');
+      let alive = true;
+      try { process.kill(pid, 0); } catch (e) { if (e.code === 'ESRCH') alive = false; }
+      if (alive) throw Error('Task store already in use');
+      unlinkSync(join(lock, 'pid')); rmdirSync(lock); mkdirSync(lock, { mode: 0o700 });
+    }
+    writeFileSync(join(lock, 'pid'), String(process.pid), { mode: 0o600, flag: 'wx' });
+    try {
+      for (const file of readdirSync(root)) {
+        if (!file.endsWith('.json')) continue;
+        const id = file.slice(0,-5), path = join(root,file);
+        if (!idPattern.test(id) || lstatSync(path).isSymbolicLink() || lstatSync(path).size > 48 * 1024 * 1024) throw Error('Invalid persisted task');
+        const saved = JSON.parse(readFileSync(path,'utf8'));
+        if (saved.schema !== 1 || saved.id !== id || !Number.isFinite(saved.created)) throw Error('Invalid task schema');
+        if (now() - saved.created >= ttlMs) { unlinkSync(path); continue; }
+        if (tasks.size >= maxTasks) throw Error('Task capacity exceeded');
+        const bytes = Buffer.from(saved.base64,'base64');
+        const doc = parseWorkbook(bytes);
+        if (saved.preview) {
+          assertPlan(saved.preview.plan); assertChangeSet(saved.preview.changeSet);
+          if (saved.preview.plan.documentHash !== doc.documentHash || saved.preview.changeSet.planId !== saved.preview.plan.planId) throw Error('Persisted document mismatch');
+        }
+        const task = { bytes, preview: saved.preview, created: saved.created, revision: saved.revision ?? 1 };
+        if (saved.confirmed && task.preview) task.result = applyChangeSet(bytes,task.preview.plan,task.preview.changeSet,{confirmChangeSetId:task.preview.changeSet.changeSetId});
+        tasks.set(id,task);
+      }
+    } catch (error) { unlinkSync(join(lock,'pid')); rmdirSync(lock); throw error; }
+  }
+  return {
+    get size() { return tasks.size; },
+    [Symbol.iterator]: () => tasks[Symbol.iterator](),
+    get: id => tasks.get(id),
+    set(id, task) {
+      if (!idPattern.test(id)) throw Error('Invalid task ID');
+      if (!tasks.has(id) && tasks.size >= maxTasks) throw Error('Task capacity exceeded');
+      if (root) {
+        const json = JSON.stringify({ schema:1,id,base64:task.bytes.toString('base64'),preview:task.preview,created:task.created,revision:task.revision ?? 1,confirmed:!!task.result });
+        if (Buffer.byteLength(json) > 48*1024*1024) throw Error('Task too large');
+        const temp = join(root,'.'+randomUUID()+'.tmp');
+        try { writeFileSync(temp,json,{mode:0o600,flag:'wx'});renameSync(temp,join(root,id+'.json')); }
+        finally { try { unlinkSync(temp); } catch (e) { if (e.code !== 'ENOENT') throw e; } }
+      }
+      tasks.set(id,task);
+    },
+    delete(id) {
+      if (!idPattern.test(id)) return false;
+      if (root) { try { unlinkSync(join(root,id+'.json')); } catch (e) { if(e.code!=='ENOENT')throw e; } }
+      return tasks.delete(id);
+    },
+    close() { tasks.clear(); if(lock) { unlinkSync(join(lock,'pid'));rmdirSync(lock);lock=null; } },
+  };
+}

package/lib/ui.html

@@ -0,0 +1,57 @@
+<!doctype html>
+<html lang="zh-CN"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>AI填表工作台</title>
+<style>
+:root{color-scheme:light dark;font-family:system-ui,sans-serif;background:#f4f7f9;color:#203848}*{box-sizing:border-box}body{max-width:1120px;margin:48px auto;padding:0 24px}h1{font-size:36px;margin-bottom:8px}p{line-height:1.7}.badge{font-size:13px;background:#dcece9;color:#205e50;border-radius:16px;padding:6px 12px;display:inline-block}.card{background:white;border:1px solid #d8e2e8;border-radius:16px;padding:24px;margin:24px 0}.controls{display:flex;gap:12px;flex-wrap:wrap;align-items:center}button,a.download{background:#225f73;color:white;padding:11px 18px;border:0;border-radius:8px;font-size:15px;cursor:pointer;text-decoration:none}button.secondary{background:#e9f0f4;color:#225064}button:disabled{opacity:.45;cursor:default}button:focus-visible,a:focus-visible{outline:3px solid #e8a829;outline-offset:3px}input{max-width:100%;font-size:15px}.scroll{overflow-x:auto}table{border-collapse:collapse;width:100%;font-size:14px}th,td{text-align:left;border-bottom:1px solid #e0e6eb;padding:12px;vertical-align:top;overflow-wrap:anywhere;min-width:70px}th{background:#edf3f6}td small{display:block;color:#64798a;margin-top:5px}#status{min-height:28px;color:#315e70}#summary{font-weight:650}h2{font-size:21px}#downloads{margin-top:18px;display:flex;gap:12px;flex-wrap:wrap}.muted{color:#607888;font-size:14px}@media(max-width:640px){body{margin:24px auto;padding:0 14px}.card{padding:16px}h1{font-size:30px}}@media(prefers-color-scheme:dark){:root{background:#15232d;color:#dce7ed}.card{background:#1b2d39;border-color:#354c59}th{background:#243f4e}td,th{border-color:#38505e}.muted,td small,#status{color:#adcad7}.badge{background:#244c46;color:#c5e6da}button.secondary{background:#304b5a;color:#d4e7f0}}
+@media(max-width:640px){.scroll table,.scroll tbody,.scroll tr{display:block;width:100%}.scroll thead{display:none}.scroll tr{padding:8px 0;border-bottom:1px solid #71818c55}.scroll td{display:grid;grid-template-columns:72px minmax(0,1fr);gap:8px;border:0;padding:6px 0;min-width:0}.scroll td::before{content:attr(data-label);font-weight:600;opacity:.7}}
+</style>
+<span class="badge">AI填表 · 单元格预览 · 原件不覆盖</span>
+<h1>AI填表</h1><p>上传已有 Excel，查看哪些空位可以填写，确认后下载新副本。</p>
+<div class="card">
+<h2>1. 选择表格</h2>
+<p class="muted">仅支持简单 XLSX 表格，最大 8 MiB。含公式、宏、图片、数据验证等复杂结构会明确拒绝。模板体验使用合成数据。真实表格上传后可在 DSH 对话中使用企查查查询。</p>
+<div class="controls"><input type="file" id="file" accept=".xlsx" aria-label="选择 XLSX 文件"><button id="upload">分析表格</button></div>
+<p>也可以直接体验三套合成模板：</p>
+<div class="controls" id="samples"><button class="secondary" data-name="客户台账">客户台账</button><button class="secondary" data-name="供应商准入表">供应商准入表</button><button class="secondary" data-name="合同主体信息表">合同主体信息表</button></div>
+</div>
+<p id="status" role="status" aria-live="polite"></p>
+<section id="preview" hidden>
+<div class="card"><h2>企查查补全与任务恢复</h2><p>首次分析不调用企查查。需要真实数据时，复制下面的任务指令到 DSH 对话，完成后点击刷新。保留本页地址可恢复任务；DSH 中默认保存 24 小时，可手动删除。</p><p id="qcc-command" style="overflow-wrap:anywhere"></p><div class="controls"><button id="copy-command">复制查询指令</button><button id="refresh">刷新任务</button><button id="discard" class="secondary">删除任务</button></div></div>
+<div class="card"><h2>2. 预览填写内容</h2><p id="summary"></p><p id="structure" class="muted"></p><p class="muted">默认只填空白，已有值保持原样。每个值均标注来源、获取时间及置信度。</p>
+<div class="scroll"><table><thead><tr><th>位置</th><th>字段</th><th>原值</th><th>准备填写</th><th>依据与来源</th></tr></thead><tbody id="changes"></tbody></table></div></div>
+<div class="card"><h2>需要你处理的内容</h2><div class="scroll"><table><thead><tr><th>位置</th><th>字段</th><th>原因</th></tr></thead><tbody id="incomplete"></tbody></table></div></div>
+<div class="card"><h2>3. 确认并生成副本</h2><p>原文件不会被覆盖。确认后可下载已填表格、变更清单及未完成项。</p><button id="confirm">确认这些填写，生成新副本</button><div id="downloads"></div></div>
+</section>
+<script>
+const basePath=location.pathname.startsWith('/form-fill')?'/form-fill':'';
+const $=id=>document.getElementById(id);let current,filename='已填表格',busy=false;
+const reasons={'unknown-field':'缺少可靠来源，请人工填写','no-match':'未匹配到企业','candidate-review-required':'主体需要人工确认，请使用完整登记名称','no-data':'该字段未返回','hidden-sheet':'隐藏工作表保持原样','hidden-row':'隐藏行保持原样','hidden-or-merged':'隐藏或合并位置需人工确认','placeholder-needs-confirmation':'已有占位文字，默认不覆盖','missing-anchor':'缺少主体名称','header-not-found':'未识别可靠表头','ambiguous-mapping':'重复字段需要人工选择','multiple-tables':'多个表头，请先拆分','provider-error':'企查查工具调用失败或未连接，请稍后重试','low-confidence':'置信度不足','missing-provenance':'缺少来源证据','unsafe-value':'值不安全，已阻止写入'};
+function controls(value){busy=value;document.querySelectorAll('button').forEach(b=>b.disabled=value)}
+function row(target,values,labels){const tr=document.createElement('tr');values.forEach((value,i)=>{const td=document.createElement('td');td.textContent=value;td.dataset.label=labels[i];tr.append(td)});$(target).append(tr)}
+async function api(path,body){const response=await fetch(basePath+path,body===undefined?{}:{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(body)});const data=await response.json();if(!response.ok)throw Error(data.message);return data}
+function downloads(){ $('downloads').replaceChildren();for(const [kind,label,suffix] of [['xlsx','下载已填副本','-已填副本.xlsx'],['changes','下载变更清单','-变更.json'],['incomplete','下载未完成项','-未完成.json']]){const a=document.createElement('a');Object.assign(a,{className:'download',href:basePath+'/download/'+current.id+'/'+kind,download:filename+suffix,textContent:label});$('downloads').append(a)}}
+function render(data){
+ current=data;location.hash='task='+data.id;$('changes').replaceChildren();$('incomplete').replaceChildren();$('downloads').replaceChildren();
+ const real=data.plan.paidCalls>0;
+ $('summary').textContent='可填写 '+data.changeSet.changes.length+' 格 · 预计 '+data.plan.estimatedCalls+' 次'+(real?'企查查调用':'合成调用 · 费用 0')+' · 未完成 '+data.changeSet.incomplete.length+' 项';
+ $('structure').textContent=data.analysis.tables.map(t=>t.sheet+'：表头在第 '+t.headerRow+' 行').join('；');
+ $('qcc-command').textContent='使用企查查填写任务 '+data.id+'，请调用 form_fill_enrich，taskId 为 '+data.id;
+ for(const c of data.changeSet.changes)row('changes',[c.sheet+' ! '+c.cell,c.label,c.oldValue||'（空白）',c.newValue,(c.source.startsWith('qcc://')?'企查查 · '+c.source.slice(6):'合成工商示例')+' · 获取于 '+c.acquiredAt.slice(0,10)+' · '+Math.round(c.confidence*100)+'%'],['位置','字段','原值','准备填写','来源']);
+ for(const i of data.changeSet.incomplete)row('incomplete',[i.sheet+' '+(i.cell||''),i.label||'—',reasons[i.reason]||'此项需要人工处理'],['位置','字段','原因']);
+ $('preview').hidden=false;if(data.confirmed)downloads();$('status').textContent='预览已准备好，请检查后确认。';
+}
+async function restore(){if(busy)return;const id=new URLSearchParams(location.hash.slice(1)).get('task');if(!id)return;controls(true);try{render(await api('/task/'+encodeURIComponent(id)))}catch(e){$('status').textContent=e.message}finally{controls(false)}}
+async function preview(buffer,name){
+ controls(true);$('status').textContent='正在识别表头、主体和待填空位…';$('preview').hidden=true;
+ try{const bytes=new Uint8Array(buffer);if(bytes.length>8388608)throw Error('文件超过 8 MiB');let binary='';for(let i=0;i<bytes.length;i+=32768)binary+=String.fromCharCode(...bytes.subarray(i,i+32768));
+ const data=await api('/preview',{base64:btoa(binary)});filename=name.replace(/\.xlsx$/i,'');render(data);
+ }catch(e){$('status').textContent=e.message}finally{controls(false)}
+}
+$('upload').onclick=async()=>{const f=$('file').files[0];if(!f){$('status').textContent='请先选择 XLSX 文件';return}await preview(await f.arrayBuffer(),f.name)};
+$('samples').onclick=async e=>{if(!e.target.dataset.name||busy)return;const name=e.target.dataset.name;try{const r=await fetch(basePath+'/fixture/'+encodeURIComponent(name));if(!r.ok)throw Error('模板读取失败');await preview(await r.arrayBuffer(),name)}catch(e){$('status').textContent=e.message}};
+$('confirm').onclick=async()=>{if(!current||busy)return;controls(true);try{await api('/confirm',{id:current.id,confirmChangeSetId:current.changeSet.changeSetId});downloads();$('status').textContent='副本已生成，原文件保持不变。'}catch(e){$('status').textContent=e.message}finally{controls(false)}};
+$('refresh').onclick=restore;
+$('discard').onclick=async()=>{if(!current||busy)return;controls(true);try{await api('/discard',{id:current.id});current=null;history.replaceState(null,'',location.pathname);$('preview').hidden=true;$('status').textContent='任务及保存的表格已删除。'}catch(e){$('status').textContent=e.message}finally{controls(false)}};
+$('copy-command').onclick=async()=>{try{await navigator.clipboard.writeText($('qcc-command').textContent);$('status').textContent='已复制，请在 DSH 对话中发送。'}catch{$('status').textContent='请手动复制上面的文字。'}};
+restore();
+</script></html>

package/lib/workflow.js

@@ -0,0 +1,34 @@
+import { readFile, mkdir, writeFile, lstat } from 'node:fs/promises';
+import { join, resolve, dirname, basename } from 'node:path';
+import { analyzeDocument, buildFillPlan, executePlan, applyChangeSet, serialize, FillError } from 'form-fill-core';
+import { createMockProvider, FIELD_CATALOG } from 'qcc-form-fill-provider';
+
+export async function previewBytes(bytes, { provider = createMockProvider(), maxCalls = 100, confirmPaidCalls = false } = {}) {
+  if (provider.mode !== 'mock' && (provider.mode !== 'qcc' || confirmPaidCalls !== true)) throw new FillError('REAL_PROVIDER_DISABLED', '真实来源需要调用方明确授权');
+  const { analysis } = analyzeDocument(bytes, FIELD_CATALOG);
+  const plan = buildFillPlan(analysis, provider.capabilities, provider.version);
+  const changeSet = await executePlan(plan, provider, { maxCalls, confirmPaidCalls });
+  return { analysis, plan, changeSet };
+}
+export async function previewFile(path, options) {
+  if (!path.toLowerCase().endsWith('.xlsx')) throw new FillError('NOT_XLSX', '请选择 XLSX 文件');
+  const stat = await lstat(path);
+  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 8 * 1024 * 1024) throw new FillError('FILE_TOO_LARGE', '需要不超过 8 MiB 的普通 XLSX 文件');
+  return previewBytes(await readFile(path), options);
+}
+export async function writeCopy(inputPath, outputDirectory, preview, confirmation) {
+  const input = resolve(inputPath), directory = resolve(outputDirectory);
+  // Exclusive directory creation prevents overwrite and simultaneous duplicate writes.
+  if (directory === input || dirname(input) === directory) throw new FillError('OUTPUT_PATH', '请选择新的独立输出目录');
+  const result = applyChangeSet(await readFile(input), preview.plan, preview.changeSet, { confirmChangeSetId: confirmation });
+  await mkdir(directory, { recursive: false, mode: 0o700 });
+  const paths = {
+    workbook: join(directory, basename(input, '.xlsx') + '-已填副本.xlsx'),
+    changes: join(directory, 'changes.json'), incomplete: join(directory, 'incomplete.json'), plan: join(directory, 'plan.json'),
+  };
+  await writeFile(paths.workbook, result.bytes, { flag: 'wx', mode: 0o600 });
+  await writeFile(paths.changes, JSON.stringify({ kind: 'WritebackReport', changeSet: preview.changeSet, appliedChanges: result.changes, outputChecksum: result.checksum }, null, 2), { flag: 'wx', mode: 0o600 });
+  await writeFile(paths.incomplete, JSON.stringify(result.incomplete, null, 2), { flag: 'wx', mode: 0o600 });
+  await writeFile(paths.plan, serialize(preview.plan), { flag: 'wx', mode: 0o600 });
+  return { paths, checksum: result.checksum, filled: result.changes.length, incomplete: result.incomplete.length };
+}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "dsh-form-fill-agent",
+  "version": "0.1.0-alpha.1",
+  "private": false,
+  "description": "AI填表智能体：XLSX blank-cell preview, QCC enrichment and persistent tasks for DSH.",
+  "repository": { "type": "git", "url": "git+https://github.com/duhu2000/dsh-form-fill-agent.git", "directory": "packages/dsh-form-fill-agent" },
+  "publishConfig": { "access": "public", "tag": "next", "registry": "https://registry.npmjs.org/" },
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./http": "./lib/http.js",
+    "./client": "./lib/client.js"
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml",
+    "LICENSE"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "form-fill-core": "0.1.0-alpha.1",
+    "qcc-form-fill-provider": "0.1.0-alpha.1"
+  },
+  "dsh": {
+    "client": { "inject": [], "platform": "web" },
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  }
+}