openxiangda-cli 2.0.0-alpha.173 → 2.0.0-alpha.174

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda-cli",
-  "version": "2.0.0-alpha.173",
+  "version": "2.0.0-alpha.174",
   "description": "Thin application-level CLI for OpenXiangda 2.0.",
   "type": "module",
   "main": "./dist/index.js",

package/template/apps/web/e2e/workflow-entry.spec.ts

@@ -19,7 +19,7 @@ async function workflowEntryPlatform(page: Page) {
   const state = {
     admin: true,
     record: { id: 'record-1', revision: 8, title: '原业务申请', amount: 28600, decision: '已同意', internalNote: '不得显示', systemValue: '内部标识', attachments: [], richText: '<p>原说明</p>' },
-    complexFields: false, uploads: [] as any[], childQueries: [] as any[],
+    complexFields: false, uploads: [] as any[], childQueries: [] as any[], auditReads: 0,
     children: [
       { id: 'line-1', revision: 3, purchaseId: 'record-1', sortOrder: 0, name: '原明细甲', quantity: 2, hiddenNote: '不得显示的明细值', detailNote: '保留详情说明' },
       { id: 'line-2', revision: 4, purchaseId: 'record-1', sortOrder: 1, name: '原明细乙', quantity: 3, hiddenNote: '不得显示的明细值', detailNote: '第二项说明' },
@@ -74,7 +74,11 @@ async function workflowEntryPlatform(page: Page) {
       return ok({ schemaVersion: 'openxiangda.workflow-detail-surface/v2', protocolVersion: 'workflow_detail_surface_v2', detailRevision: 'd'.repeat(64), instanceSequence: 4, timelineRevision: timeline.timelineRevision, surface, timeline,
         currentStatus: { code: 'approved', label: '已同意', tone: 'success' }, nodes: [], handlingRecords: [], operations: [], navigationContext: { desktopReturnPath: '/admin/purchases', mobileReturnPath: '/m/admin/purchases' } });
     }
-    if (path.endsWith(`/workflow/instances/${instanceId}/data-audit`)) return ok({ schemaVersion: 'openxiangda.data-audit-page/v2', items: [], total: 0, offset: 0, limit: 50 });
+    if (path.endsWith(`/workflow/instances/${instanceId}/data-audit`)) {
+      if (request.headers()['x-openxiangda-csrf-token'] !== 'workflow-entry-csrf') return fail(403, 'WORKFLOW_V2_CSRF_INVALID');
+      state.auditReads += 1;
+      return ok({ schemaVersion: 'openxiangda.data-audit-page/v2', items: [], total: 0, offset: 0, limit: 50 });
+    }
     if (path.endsWith('/native/data/purchase-lines/query')) {
       state.childQueries.push(request.postDataJSON());
       return ok({ schemaVersion: 'openxiangda.data-page/v2', resourceCode: 'purchase-lines', items: state.children, total: state.children.length, offset: 0, limit: 20 });
@@ -391,6 +395,17 @@ test('supplementary answers are guarded and resume completion without resubmitti
   expect(state.launches).toHaveLength(1);
 });
 
+test('workflow change history uses the acquired Surface CSRF token', async ({ page }) => {
+  const state = await workflowEntryPlatform(page);
+  await page.goto('/workflow-entry.e2e.html');
+  await page.getByRole('button', { name: '查看', exact: true }).click();
+  const detail = page.getByRole('dialog', { name: '申请详情' });
+  await detail.getByRole('tab', { name: '变更记录' }).click();
+  await expect.poll(() => state.auditReads).toBeGreaterThan(0);
+  await expect(detail.getByText('暂无变更记录', { exact: true })).toBeVisible();
+  await expect(detail.getByText(/变更记录读取失败/)).toHaveCount(0);
+});
+
 test('detail switches to the ordinary full-width editor and back with only one dialog', async ({ page }, testInfo) => {
   const state = await workflowEntryPlatform(page);
   await page.goto('/workflow-entry.e2e.html');

package/template/apps/web/package.json

@@ -14,7 +14,7 @@
     "@ant-design/icons": "6.2.3",
     "@refinedev/core": "5.0.12",
     "antd": "6.4.3",
-    "openxiangda": "2.0.0-alpha.99",
+    "openxiangda": "2.0.0-alpha.100",
     "react": "19.2.8",
     "react-dom": "19.2.8",
     "react-router-dom": "7.8.2"

package/template/package.json

@@ -22,7 +22,7 @@
     "build": "pnpm --recursive build"
   },
   "devDependencies": {
-    "openxiangda": "2.0.0-alpha.99",
+    "openxiangda": "2.0.0-alpha.100",
     "typescript": "5.9.3"
   }
 }