openxiangda 1.0.268 → 1.0.270

package/openxiangda-skills/references/webhooks.md

@@ -0,0 +1,213 @@
+# OpenXiangda 1.x Inbound Webhooks
+
+Inbound Webhook 用于让门禁、支付、IoT 等外部系统主动调用 OpenXiangda
+应用。平台只负责通用接入：接收和保存原始请求、限制大小、按幂等键串行化、
+调用唯一绑定的 App Function，并把 Function 的处理结果映射为稳定 HTTP 状态。
+供应商签名规则、事件筛选和业务写入始终属于应用 Function。
+
+## 声明 Webhook
+
+在 `src/resources/webhooks/<code>.json` 创建 Manifest：
+
+```json
+{
+  "code": "yuquan_access",
+  "name": "玉泉门禁开门事件",
+  "description": "接收 REC_SUCCESS 事件并匹配琴房预约",
+  "targetFunctionCode": "qfyy_access_event",
+  "idempotencyQueryParam": "nonce",
+  "maxBodyBytes": 262144,
+  "status": "active"
+}
+```
+
+- `targetFunctionCode` 必须是同一租户、同一应用内已经启用的 Function。
+- `idempotencyQueryParam` 默认是 `nonce`。该参数为空时，平台使用请求摘要。
+- `maxBodyBytes` 默认 256 KiB，允许范围为 1 KiB 到 1 MiB。
+- 平台网关对公开入口统一限制 1 MiB，并按来源 IP 限制 100 请求/秒、突发
+  200；超限返回 429。该限制不代替验签和业务幂等。
+- Manifest 不得包含 Webhook Secret、签名算法或供应商凭据。
+- 发布后从 `.openxiangda/state.json` 的
+  `resources.webhooks.<code>.callbackUrl` 取得完整回调地址；`callbackPath` 是相对
+  当前 profile API base（通常为 `<origin>/service`）的路径。不要自行用 `appType`
+  拼接公开 URL。
+
+## 声明和配置 Secret
+
+Webhook Secret 使用现有 App Function Secret。Function 必须使用
+`function_v2 + trusted_node_v2`，并在 Manifest 顶层声明引用：
+
+```json
+{
+  "code": "qfyy_access_event",
+  "name": "处理玉泉门禁事件",
+  "secretRefs": [
+    { "name": "yuquan_webhook_secret", "required": true }
+  ],
+  "definitionJson": {
+    "version": "function_v2",
+    "runtimeMode": "trusted_node",
+    "runtimeContractVersion": "trusted_node_v2",
+    "timeoutMs": 30000,
+    "sourceFile": {
+      "localPath": "src/functions/qfyy_access_event/index.ts"
+    }
+  },
+  "status": "active"
+}
+```
+
+Webhook Function 的 `timeoutMs` 必须在 1 到 120000 毫秒之间。平台在配置和
+每次调用时都会重新校验运行时契约，Function 后续被禁用、降级为旧运行时或把
+超时调到上限之外时，Webhook 会返回可重试的非 2xx，而不会以宽权限身份执行。
+
+Secret 值只通过隐藏输入或标准输入写入平台：
+
+```bash
+openxiangda secret create yuquan_webhook_secret \
+  --value-stdin --change <change-id> --profile <name>
+```
+
+禁止把值写进 Webhook/Function Manifest、源码、`.env`、日志、异常或函数返回值。
+
+## Function 输入
+
+Function 的第二个参数和 `ctx.input` 都是以下对象：
+
+```ts
+interface WebhookInput {
+  deliveryId: string;
+  idempotencyKey: string;
+  webhookCode: string;
+  receivedAt: string;
+  rawBody: string;
+  rawBodyBase64: string;
+  rawQueryString: string;
+  query: Record<string, string[]>;
+  headers: Record<string, string[]>;
+  body: unknown;
+  request: { method: "POST"; path: string };
+}
+```
+
+`query` 保留重复参数及其顺序。`rawBody` 是签名使用的原始 UTF-8 文本；
+`body` 只用于验签成功后的业务解析。平台会从 `headers` 中移除 Authorization、
+Cookie、代理凭据和客户端证书头。
+
+## 验签顺序
+
+验签、时间窗和事件来源检查必须发生在任何 `ctx.form`、`ctx.dataView`、
+`ctx.connector`、`ctx.notification`、`ctx.platform` 或 `ctx.utils.http` 调用之前。
+永远不要对 `input.body` 再 `JSON.stringify` 后验签，空格、字段顺序或转义变化会
+使签名失真。
+
+下面展示 HMAC-SHA1 和常量时间比较。`buildCanonicalText` 只是结构示例；必须按
+供应商正式文档确认字段顺序、分隔符、URL 编码和 hex/base64 输出格式：
+
+```ts
+import { createHmac, timingSafeEqual } from "node:crypto";
+import type { AppFunctionContextV2 } from "openxiangda/runtime";
+
+type WebhookInput = {
+  deliveryId: string;
+  idempotencyKey: string;
+  rawBody: string;
+  query: Record<string, string[]>;
+  body: unknown;
+};
+
+function first(query: Record<string, string[]>, name: string) {
+  return String(query[name]?.[0] || "");
+}
+
+function equalEncodedSignature(actual: string, expected: string) {
+  const left = Buffer.from(actual.trim().toLowerCase(), "utf8");
+  const right = Buffer.from(expected.trim().toLowerCase(), "utf8");
+  return left.length === right.length && timingSafeEqual(left, right);
+}
+
+function buildCanonicalText(input: WebhookInput) {
+  // Replace this illustrative order with the provider's exact contract.
+  return [
+    first(input.query, "nonce"),
+    first(input.query, "timestamp"),
+    first(input.query, "orgId"),
+    input.rawBody,
+  ].join("");
+}
+
+export default async function handleWebhook(
+  ctx: AppFunctionContextV2,
+  input: WebhookInput,
+) {
+  const secret = await ctx.secrets.get("yuquan_webhook_secret");
+  const expected = createHmac("sha1", secret)
+    .update(buildCanonicalText(input), "utf8")
+    .digest("hex");
+  const actual = first(input.query, "signature");
+  if (!actual || !equalEncodedSignature(actual, expected)) {
+    return { webhook: { outcome: "rejected", status: 401 } };
+  }
+
+  const timestamp = Number(first(input.query, "timestamp"));
+  if (!Number.isFinite(timestamp) || Math.abs(Date.now() - timestamp) > 5 * 60_000) {
+    return { webhook: { outcome: "rejected", status: 401 } };
+  }
+
+  const event = input.body as {
+    callbackTag?: string;
+    data?: {
+      isAuth?: boolean;
+      deviceSn?: string;
+      jobNum?: string;
+      recognizeTime?: string;
+      recognizeType?: number;
+      memberId?: string;
+      personType?: number;
+    };
+  };
+  if (event.callbackTag !== "REC_SUCCESS" || event.data?.isAuth !== true) {
+    return { webhook: { outcome: "ignored" } };
+  }
+
+  // The application must atomically claim input.idempotencyKey in its own
+  // business record before creating/updating reservation data.
+  await processAccessEventIdempotently(ctx, input.idempotencyKey, event.data);
+  return { webhook: { outcome: "accepted" } };
+}
+```
+
+`processAccessEventIdempotently` 是应用函数中的业务实现，不是平台内置 API。应把
+`idempotencyKey` 写入带唯一约束或等价原子保护的业务记录，然后再执行副作用。
+平台提供 at-least-once 投递；如果 Function 已产生副作用，但进程在成功回执落库前
+中断，同一事件会再次执行。
+
+## 返回契约
+
+- 普通返回，或 `{ webhook: { outcome: "accepted" } }`：HTTP 200。
+- `{ webhook: { outcome: "ignored" } }`：HTTP 200，适合已验签但无需处理的事件。
+- `{ webhook: { outcome: "rejected", status: 400|401|403|409|422 } }`：指定 4xx。
+- `{ webhook: { outcome: "retry" } }` 或抛出异常：HTTP 503，通知供应商重试。
+
+平台不会把 Function 返回值、日志、异常详情或 Secret 回显给外部调用方。
+投递原始请求和审计信息默认保留 180 天，由平台部署环境统一配置；应用不应把
+Webhook 投递表当作永久业务档案，需要长期保存的字段应在验签后写入自己的表单。
+
+## 校验、发布和诊断
+
+```bash
+openxiangda resource validate webhook --profile <name>
+openxiangda resource plan webhook --only yuquan_access --profile <name> --json
+openxiangda resource publish webhook --only yuquan_access \
+  --change <change-id> --profile <name>
+
+openxiangda webhook list --profile <name> --json
+openxiangda webhook get yuquan_access --profile <name> --json
+openxiangda webhook deliveries yuquan_access --profile <name> --json
+openxiangda webhook delivery yuquan_access <delivery-id> --profile <name> --json
+openxiangda webhook disable yuquan_access \
+  --change <change-id> --profile <name>
+```
+
+先发布并验证 Function，再启用 Webhook。新 Function 与 Webhook 同轮交付时，可以
+先以 `status: "disabled"` 发布 Webhook，验证 Function 后再把状态改为 `active`。

package/openxiangda-skills/references/workspace-state.md

@@ -2,7 +2,7 @@
 
 OpenXiangda durable project bindings live in `.openxiangda/state.json`. Volatile release execution, candidate, deployment, and recovery progress lives under the private `.openxiangda/releases/` journal and must not be copied into the durable ID map.
 
-Tokens never belong in the project. User tokens live in `~/.openxiangda/profiles.json`. Shared workspace env values such as `APP_OSS_*` live in `~/.openxiangda/.env` by default, while project `.env` is only a local override.
+Tokens are private workspace files and must never be committed. User tokens live in `.openxiangda/profiles.json`. Shared workspace env values such as `APP_OSS_*` live in `~/.openxiangda/.env` by default, while project `.env` is only a local override.
 
 ## Shape
 

package/openxiangda-skills/skills/openxiangda-core/SKILL.md

@@ -181,7 +181,7 @@ openxiangda platform use dev
 
 Root, `/platform`, and `/view` URLs normalize to `<origin>/service`. Normal work uses the user's profile token and `/openxiangda-api/v1`; never ask for AK/SK. Each profile has independent `appType` and resource IDs.
 
-Durable local resource/environment mappings live in `.openxiangda/state.json`; volatile candidate/deployment progress lives in the private `.openxiangda/releases/` journal. User tokens live in `~/.openxiangda/profiles.json`; shared environment values live in `~/.openxiangda/.env`. Never copy resource IDs between profiles or put tokens in the workspace.
+Durable local resource/environment mappings live in `.openxiangda/state.json`; volatile candidate/deployment progress lives in the private `.openxiangda/releases/` journal. User tokens live in `.openxiangda/profiles.json`; shared environment values live in `~/.openxiangda/.env`. Never copy resource IDs between profiles or commit workspace login files.
 
 For an environment-managed workspace with more than one target, `function invoke` requires an explicit `--environment <target>` and prints the resolved profile, environment, kind, appType, and environmentId to stderr before the request. Treat this line as part of the diagnostic evidence; do not infer production behavior from an invocation whose resolved target is preproduction.
 

package/openxiangda-skills/skills/openxiangda-workflow-automation/SKILL.md

@@ -105,6 +105,8 @@ JS_CODE is the backend execution escape hatch for workflow and automation. Use i
 
 App Function is the reusable backend execution model. Use it when the logic should be called by custom pages, multiple automations, workflows, or the runtime API. Source lives in `src/functions/<functionCode>/index.ts`; manifest lives in `src/resources/functions/<functionCode>.json`. Call it from pages with `sdk.function.invoke(code, { input })`, from graph definitions with `function_call`, or from the runtime endpoint `/:appType/v1/functions/:code/invoke.json`. Direct runtime invocation defaults to app automation management permission; ordinary page callers must declare `definitionJson.runtimeInvoke.audience` (`authenticated`, `page_permission_group`, `app_roles`, or `scope_policy`). Prefer `export default async function(ctx, input) {}` for App Function source; the second argument is the invoke input and the same value is available as `ctx.input`. Current MVP exposes controlled helpers only and does not expose raw SQL or Redis. App Functions and trusted-node Automation scripts can call `ctx.files.readAsBase64` with an attachment from the current `ctx.formData`, or with a server-verified form record/field reference. This helper reads platform storage without a browser session, rejects arbitrary URLs and non-images, caps files at 10 MiB, and must be used without logging or persisting the Base64. App Functions can call `ctx.process.startFromExistingInstance`, `resolveCapabilities`, `resubmitTask`, `withdraw`, and `transferTask`; published trusted code may access resources in its current tenant/application, while workflow/task authorization, audit, event, replay, cross-app, and cross-tenant boundaries remain enforced. `resources` is optional mapping/audit metadata rather than an application-internal authorization list. Keep internal forms closed to direct user submit unless the business explicitly needs raw form submission; use `runtimeWrite.mode="function_only"` for function-only forms.
 
+For inbound third-party callbacks, declare `src/resources/webhooks/<code>.json` with a fixed `targetFunctionCode`; do not expose `appType` as a public routing identifier and do not put provider verification fields or Secret values in the Webhook manifest. The Function must use `input.rawBody` for signature verification before any data/helper/network call, read only top-level declared `secretRefs`, and use `input.idempotencyKey` to protect business writes because delivery is at-least-once. Read `references/webhooks.md` for the complete envelope, HMAC example, response directives, publish commands, and delivery diagnosis.
+
 For third-party credentials, use top-level metadata-only `secretRefs` plus `definitionJson.version="function_v2"` and `runtimeContractVersion="trusted_node_v2"`; read a declared value with `await ctx.secrets.get(name)` and call public business APIs through `ctx.utils.http`. Never use `process.env` for platform secrets. Values are managed with `openxiangda secret create|rotate --value-stdin --change <change> --profile <name>` and never appear in Git, build output, snapshots, plan diffs, logs, exceptions, or traces. Local tests may use `function test --secret-from-env logical=ENV` only; the value is passed to an isolated child over stdin and is never written to workspace/cache/state. For a Root App transaction, use exact-scope `resource publish function --only <code> --stage-only` and include its verified `stagedResource` in `release app-finalize`.
 
 For new AI-authored automations, prefer code-first `automation_code_ts` resources instead of visual v3 graph definitions. Put the source in `src/automations/<resourceCode>/index.ts`, define `definition.code.json` with `kind: "automation_code_ts"`, and provide `preview.json` for read-only frontend display. Use `ctx.logger.debug/info/warn/error(message, data?)` at every important step; OpenXiangda can inspect logs with `automation executions`, `automation logs`, and `automation diagnose`.
@@ -199,3 +201,4 @@ Use `automation disable` before risky edits. Published automations create a draf
 - Notification resources and runtime calls: `references/notifications.md`
 - API fields: `references/openxiangda-api.md`
 - Profile-isolated IDs: `references/workspace-state.md`
+- Inbound Webhook declaration, verification, idempotency, and delivery diagnosis: `references/webhooks.md`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.268",
+  "version": "1.0.270",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {
@@ -68,7 +68,7 @@
     "source:admin-list": "node scripts/sync-admin-list-source.mjs",
     "check": "node --check bin/openxiangda.js && node --check lib/*.js && node --check packages/sdk/src/build-source/src/cli.mjs && node --check packages/sdk/src/build-source/scripts/*.mjs && node --check packages/sdk/src/build-source/scripts/utils/*.mjs",
     "test": "npm run test:fast",
-    "test:fast": "npm run check && node scripts/delivery-v2-package-smoke.mjs && node scripts/delivery-v2-executor-smoke.mjs && node scripts/delivery-v2-release-conformance-smoke.mjs && node scripts/http-proxy-smoke.mjs && node scripts/form-export-cli-smoke.mjs && node scripts/open-api-cli-smoke.mjs && node scripts/release-plan-smoke.mjs && node scripts/typed-resource-plan-smoke.mjs && node scripts/integration-bundle-smoke.mjs && node scripts/content-cache-smoke.mjs && node scripts/dependency-capsule-smoke.mjs && node scripts/sdd-stages-smoke.mjs && node scripts/environment-swap-cli-smoke.mjs && node scripts/environment-policy-cli-smoke.mjs",
+    "test:fast": "npm run check && node scripts/delivery-v2-package-smoke.mjs && node scripts/delivery-v2-executor-smoke.mjs && node scripts/delivery-v2-release-conformance-smoke.mjs && node scripts/http-proxy-smoke.mjs && node scripts/form-export-cli-smoke.mjs && node scripts/open-api-cli-smoke.mjs && node scripts/release-plan-smoke.mjs && node scripts/typed-resource-plan-smoke.mjs && node scripts/webhook-resource-cli-smoke.mjs && node scripts/integration-bundle-smoke.mjs && node scripts/content-cache-smoke.mjs && node scripts/dependency-capsule-smoke.mjs && node scripts/sdd-stages-smoke.mjs && node scripts/environment-swap-cli-smoke.mjs && node scripts/environment-policy-cli-smoke.mjs",
     "test:changed": "npm run check && node scripts/run-test-suite.mjs --changed --evidence",
     "test:contract": "npm run check && node scripts/run-test-suite.mjs --contract --evidence",
     "test:release": "npm run check && node scripts/run-test-suite.mjs --release --evidence",
@@ -80,6 +80,7 @@
     "test:content-cache": "node scripts/content-cache-smoke.mjs",
     "test:dependency-capsule": "node scripts/dependency-capsule-smoke.mjs",
     "test:typed-resource-plan": "node scripts/typed-resource-plan-smoke.mjs",
+    "test:webhook-resource": "node scripts/webhook-resource-cli-smoke.mjs",
     "test:integration-bundle": "node scripts/integration-bundle-smoke.mjs",
     "prepublishOnly": "npm run release:evidence:verify && node scripts/release-mainline-guard.mjs",
     "prepack": "npm run source:admin-list && npm run build:sdk",
@@ -146,7 +147,9 @@
     "test:skill-install": "bash scripts/skill-install-smoke.sh",
     "test:workspace-init": "bash scripts/workspace-init-smoke.sh",
     "open-api:sync": "node scripts/sync-dingtalk-openapi.mjs",
-    "open-api:verify": "node scripts/sync-dingtalk-openapi.mjs --check"
+    "open-api:verify": "node scripts/sync-dingtalk-openapi.mjs --check",
+    "test:migration-advice": "node scripts/migration-advice-smoke.mjs",
+    "test:workspace-auth": "node scripts/workspace-auth-smoke.mjs"
   },
   "dependencies": {
     "@ant-design/cssinjs": "^1.23.0",
@@ -230,43 +233,43 @@
   },
   "openxiangdaRelease": {
     "schemaVersion": "openxiangda.release-notes/v1",
-    "version": "1.0.268",
-    "title": "OpenXiangda V1 维护版 1.0.268",
+    "version": "1.0.270",
+    "title": "OpenXiangda V1 Inbound Webhook",
     "status": "reviewed",
-    "summary": "旧项目继续使用 V1 引擎，项目升级保持在 V1 维护渠道；同时兼容新的全局统一入口与独立的 V2 Skill。",
+    "summary": "V1 应用可以声明公开 Inbound Webhook，由平台可靠接入并转发给固定 App Function，供应商验签和业务处理仍由应用负责。",
     "newFeatures": [
-      "V1 工具源码从经审查的公开基线发布到独立 GitHub 仓库，并提供对应版本说明。"
+      "新增 src/resources/webhooks/*.json 资源声明、校验、计划、发布、拉取和停用能力。",
+      "新增 webhook list/get/create/update/upsert/disable/deliveries/delivery 命令，用于配置和投递诊断。",
+      "Webhook Function 获得原始 Body、原始 Query、重复参数数组、安全 Headers、投递 ID 和幂等键。"
     ],
     "fixes": [
-      "在 V1 项目内执行 update 默认更新项目依赖，使用 v1 维护渠道并固定具体版本。",
-      "全局入口更新单独使用 --target launcher，检查 Node.js 24 要求并安装统一 V2 入口。",
-      "V1 主 Skill 使用 openxiangda-v1 名称，安装时保留统一入口和 V2 技能。",
-      "V1 发布仅允许 legacy-v1 渠道，防止维护版覆盖 V2 的 latest。"
+      "Function 资源在 Webhook 之前发布，prune 对遗失的 Webhook 执行停用而不是删除审计数据。",
+      "模板、Skill、命令发现和 API 参考统一说明 rawBody 验签、secretRefs 和业务幂等要求。"
     ],
     "affectedUsers": [
-      "维护既有 V1 项目的开发者",
-      "已经安装全局统一入口的 V1 用户"
+      "需要接收门禁、支付、IoT 或其他第三方主动回调的 OpenXiangda V1 应用开发者。"
     ],
     "compatibility": {
       "node": ">=18；全局 V2 统一入口需要 >=24",
       "workspaceGenerations": [
         "v1"
       ],
-      "workspacePolicy": "沿用现有 app-workspace.config.ts、平台绑定、登录态、业务数据及流程。",
-      "platformPolicy": "本次维护不改变平台协议或部署状态。"
+      "workspacePolicy": "现有 V1 资源保持兼容；只有声明 webhooks 的应用会创建公开回调端点。",
+      "platformPolicy": "必须部署包含 V1 Webhook 管理/公开入口、SQL 迁移和网关规则的平台版本。App Function Secret 必须按部署规范启用。"
     },
     "upgradeSteps": [
-      "项目依赖通过 v1 维护渠道升级，例如 npm install --save-dev --save-exact openxiangda@1.0.268；按项目实际包管理器和依赖类型调整。",
-      "安装全局 V2 统一入口后，进入旧项目运行 openxiangda version --json 核对 V1 引擎来源。",
-      "刷新对应项目的 V1 Skill，检查依赖与锁文件差异，并执行原有项目测试。",
-      "V2 能力满足、项目仍在测试阶段且迁移成本可控时，优先建议 V1 项目采用 V2；先完成项目评估、设计确认和迁移验收。"
+      "将 V1 项目依赖锁定到 openxiangda@1.0.270 或运行同代 update install。",
+      "执行 skill install --force 和 skill bootstrap --force，阅读 references/webhooks.md。",
+      "先发布声明 secretRefs 的 trusted_node_v2 Function，再声明并发布 Webhook。",
+      "从 .openxiangda/state.json 读取 callbackUrl，配置到供应商并用投递查询命令完成验签、重试和幂等验收。"
     ],
     "knownLimitations": [
-      "本版本不会自动把 V1 应用迁移到 V2；跨代迁移需要独立设计、映射、演练和批准。",
-      "既有 1.0.267 及更早版本的全局更新命令可能安装 latest；新统一入口仍按旧项目标记调用 V1 引擎。"
+      "首版公开入口只接受 application/json 的 HTTP POST，单端点 Body 上限不超过 1 MiB。",
+      "平台不内置供应商签名算法；Function 必须按照供应商正式协议使用 rawBody 验签。",
+      "投递语义为 at-least-once，应用必须用 input.idempotencyKey 原子保护业务副作用。"
     ],
     "issues": [],
-    "sha256": "7aaa99d31b91f725b785259031daaeaf3841cb18a95f6155e43009f1f601e6c9",
-    "url": "https://github.com/1377385356/openxiangda-v1/releases/tag/v1.0.268"
+    "sha256": "7ec9e6eebb0b509833283274bde2fdfba48a099c76cea862f77a08441a4ef1dd",
+    "url": "https://github.com/1377385356/openxiangda-v1/releases/tag/v1.0.270"
   }
 }

package/packages/sdk/dist/{ProcessPreview-Cyk6uv-w.d.mts → ProcessPreview-DSUIJi5V.d.mts}

@@ -1,5 +1,4 @@
 import React__default, { ReactNode } from 'react';
-import * as react_jsx_runtime from 'react/jsx-runtime';
 
 type FormSectionVariant = 'plain' | 'card';
 type FormSectionAccent = 'blue' | 'green';
@@ -18,7 +17,7 @@ interface FormSectionProps {
     contentClassName?: string;
     children: React__default.ReactNode;
 }
-declare function FormSection({ title, description, variant, accent, icon, iconKey, collapsible, defaultCollapsed, className, titleClassName, contentClassName, children, }: FormSectionProps): react_jsx_runtime.JSX.Element;
+declare function FormSection({ title, description, variant, accent, icon, iconKey, collapsible, defaultCollapsed, className, titleClassName, contentClassName, children, }: FormSectionProps): React__default.JSX.Element;
 
 /** 字段行为状态 */
 type FieldBehavior = 'NORMAL' | 'READONLY' | 'DISABLED' | 'HIDDEN';
@@ -1290,4 +1289,4 @@ interface ProcessPreviewProps {
 }
 declare const ProcessPreview: React__default.FC<ProcessPreviewProps>;
 
-export { type FormDataDeleteParams as $, type AddressFieldProps as A, type BaseFieldProps as B, type CascadeDateFieldProps as C, type DataFilter as D, type DepartmentSearchParams as E, type DepartmentSearchResult as F, type DepartmentSearchScope as G, type DepartmentSelectFieldProps as H, type DepartmentTreeNode as I, type DigitalSignatureFieldProps as J, type DigitalSignatureValue as K, type EditorChoiceOption as L, type EditorFieldProps as M, type EditorToolbarAction as N, type FieldBehavior as O, type FieldDefinition as P, type FieldLayoutNode as Q, type FieldValueSyncConfig as R, type FilePreviewCapability as S, type FilePreviewCapabilityBatch as T, type FilePreviewMetadata as U, type FilePreviewProvider as V, type FilePreviewRenderMode as W, type FilePreviewRequest as X, type FilePreviewSurface as Y, type FilePreviewType as Z, type FormAppearanceConfig as _, type AddressValue as a, type RuntimeAuthHeadersProvider as a$, type FormDataQueryParams as a0, type FormEffect as a1, type FormEffectAction as a2, type FormEffectCondition as a3, type FormEffectConditionOperator as a4, type FormEngineConfig as a5, type FormEngineMode as a6, type FormInstanceData as a7, type FormLayoutNode as a8, type FormRuntimeApi as a9, type LowcodePageNodeType as aA, type LowcodePageSchema as aB, type MultiSelectFieldProps as aC, type NumberFieldProps as aD, type OptionItem as aE, type OptionSourceConfig as aF, type OptionSourceType as aG, type PeopleShortcutConfig as aH, type PeopleShortcutType as aI, type PreparedFilePreview as aJ, type PreviewImageItem as aK, type PreviewParams as aL, type ProcessAction as aM, type ProcessBasicInfo as aN, type ProcessDefinition as aO, type ProcessNodeType as aP, ProcessPreview as aQ, type ProcessPreviewProps as aR, type ProcessRoute as aS, type ProcessStatus as aT, type ProcessTask as aU, type RadioFieldProps as aV, type ResubmitParams as aW, type ReturnParams as aX, type ReturnPolicy as aY, type ReturnableNode as aZ, type ReturnableNodeResult as a_, type FormRuntimeApiConfig as aa, type FormRuntimeConfig as ab, type FormSchema as ac, FormSection as ad, type FormSectionProps as ae, type FormSubmitBehavior as af, type FormTemplateConfig as ag, type GridLayoutCell as ah, type GridLayoutNode as ai, type ImageCompressionConfig as aj, type ImageCompressionVariantConfig as ak, type ImageFieldProps as al, type ImageVariant as am, type InitiatorSelectCandidate as an, type InitiatorSelectRequirement as ao, type InitiatorSelectScope as ap, type InitiatorSelectedApprovers as aq, type JSONFieldEditorContext as ar, type JSONFieldProps as as, type JSONFieldRendererContext as at, type LayoutVisibleWhen as au, type LinkedFormOptionConfig as av, type LocationFieldProps as aw, type LocationValue as ax, type LowcodePageMeta as ay, type LowcodePageNode as az, type ApprovalActionType as b, type RuntimeDataQueryParams as b0, type RuntimeDataQueryResult as b1, type RuntimeRequestConfig as b2, type RuntimeResponse as b3, type RuntimeUploadOptions as b4, type RuntimeUploadProvider as b5, type SaveTaskParams as b6, type SectionLayoutNode as b7, type SelectFieldProps as b8, type SerialNumberFieldProps as b9, type SignaturePoint as ba, type StandardFormPageMode as bb, type StatusMeta as bc, type StepLayoutItem as bd, type StepsLayoutNode as be, type SubFormColumn as bf, type SubFormFieldProps as bg, type TabLayoutItem as bh, type TabsLayoutNode as bi, type TaskStatus as bj, type TextAreaFieldProps as bk, type TextFieldProps as bl, type TextShortcutConfig as bm, type TextShortcutType as bn, type TransferParams as bo, type UserDisplayFormat as bp, type UserItem as bq, type UserSelectFieldProps as br, type ValidationPreset as bs, type ValidationRule as bt, type ViewPermissionQueryParams as bu, type ViewPermissionSummary as bv, type WithdrawParams as bw, type ApprovalPermission as c, ApprovalTimeline as d, type ApprovalTimelineProps as e, type ApproveParams as f, type AssociationFormConfig as g, type AssociationFormFieldProps as h, type AssociationValue as i, type AttachmentFieldProps as j, type AttachmentImageVariants as k, type AttachmentItem as l, type BaseLayoutNode as m, type CascadeSelectFieldProps as n, type ChangeRecord as o, type ChangeRecordListResponse as p, type ChangeRecordQueryParams as q, type CheckboxFieldProps as r, type DataLinkageCondition as s, type DataLinkageConfig as t, type DateFieldProps as u, type DateRangeRestriction as v, type DateRestrictionConfig as w, type DateShortcutConfig as x, type DateShortcutType as y, type DefaultValueLinkageConfig as z };
+export { type DepartmentSelectFieldProps as $, type ApprovalPermission as A, type ReturnParams as B, type ChangeRecordQueryParams as C, type SaveTaskParams as D, type TransferParams as E, type FieldDefinition as F, type TextFieldProps as G, type TextAreaFieldProps as H, type InitiatorSelectCandidate as I, type SelectFieldProps as J, type RadioFieldProps as K, type CheckboxFieldProps as L, type MultiSelectFieldProps as M, type NumberFieldProps as N, type OptionItem as O, type ProcessStatus as P, type DateFieldProps as Q, type RuntimeResponse as R, type StatusMeta as S, type TaskStatus as T, type CascadeDateFieldProps as U, type ValidationPreset as V, type WithdrawParams as W, type AttachmentFieldProps as X, type ImageFieldProps as Y, type SubFormFieldProps as Z, type UserSelectFieldProps as _, type FormRuntimeApi as a, type ImageVariant as a$, type CascadeSelectFieldProps as a0, type AddressFieldProps as a1, type AssociationFormFieldProps as a2, type EditorFieldProps as a3, type EditorChoiceOption as a4, type SerialNumberFieldProps as a5, type LocationFieldProps as a6, type DigitalSignatureFieldProps as a7, type JSONFieldProps as a8, type AttachmentItem as a9, type DefaultValueLinkageConfig as aA, type DepartmentSearchParams as aB, type DepartmentSearchResult as aC, type DepartmentSearchScope as aD, type DepartmentTreeNode as aE, type DigitalSignatureValue as aF, type EditorToolbarAction as aG, type FieldLayoutNode as aH, type FieldValueSyncConfig as aI, type FilePreviewCapabilityBatch as aJ, type FilePreviewProvider as aK, type FilePreviewRenderMode as aL, type FilePreviewSurface as aM, type FilePreviewType as aN, type FormEffectAction as aO, type FormEffectCondition as aP, type FormEffectConditionOperator as aQ, type FormEngineMode as aR, type FormLayoutNode as aS, FormSection as aT, type FormSectionProps as aU, type FormSubmitBehavior as aV, type FormTemplateConfig as aW, type GridLayoutCell as aX, type GridLayoutNode as aY, type ImageCompressionConfig as aZ, type ImageCompressionVariantConfig as a_, type PreparedFilePreview as aa, type FilePreviewCapability as ab, type FilePreviewMetadata as ac, type FilePreviewRequest as ad, type ProcessAction as ae, type InitiatorSelectedApprovers as af, type ReturnPolicy as ag, type ChangeRecord as ah, type StandardFormPageMode as ai, type LowcodePageSchema as aj, type AddressValue as ak, type ApprovalActionType as al, ApprovalTimeline as am, type ApprovalTimelineProps as an, type AssociationFormConfig as ao, type AssociationValue as ap, type AttachmentImageVariants as aq, type BaseFieldProps as ar, type BaseLayoutNode as as, type DataFilter as at, type DataLinkageCondition as au, type DataLinkageConfig as av, type DateRangeRestriction as aw, type DateRestrictionConfig as ax, type DateShortcutConfig as ay, type DateShortcutType as az, type FormSchema as b, type InitiatorSelectScope as b0, type JSONFieldEditorContext as b1, type JSONFieldRendererContext as b2, type LayoutVisibleWhen as b3, type LinkedFormOptionConfig as b4, type LocationValue as b5, type LowcodePageMeta as b6, type LowcodePageNode as b7, type LowcodePageNodeType as b8, type OptionSourceType as b9, type PeopleShortcutConfig as ba, type PeopleShortcutType as bb, type PreviewImageItem as bc, type ProcessNodeType as bd, ProcessPreview as be, type ProcessPreviewProps as bf, type RuntimeAuthHeadersProvider as bg, type RuntimeDataQueryParams as bh, type RuntimeDataQueryResult as bi, type RuntimeRequestConfig as bj, type RuntimeUploadOptions as bk, type RuntimeUploadProvider as bl, type SectionLayoutNode as bm, type SignaturePoint as bn, type StepLayoutItem as bo, type StepsLayoutNode as bp, type SubFormColumn as bq, type TabLayoutItem as br, type TabsLayoutNode as bs, type TextShortcutConfig as bt, type TextShortcutType as bu, type UserDisplayFormat as bv, type UserItem as bw, type FormRuntimeApiConfig as c, type FormEngineConfig as d, type FieldBehavior as e, type FormRuntimeConfig as f, type FormAppearanceConfig as g, type ValidationRule as h, type FormEffect as i, type OptionSourceConfig as j, type FormDataDeleteParams as k, type ChangeRecordListResponse as l, type FormDataQueryParams as m, type FormInstanceData as n, type InitiatorSelectRequirement as o, type ProcessBasicInfo as p, type ProcessDefinition as q, type ProcessTask as r, type ReturnableNodeResult as s, type ReturnableNode as t, type ViewPermissionQueryParams as u, type ViewPermissionSummary as v, type ApproveParams as w, type PreviewParams as x, type ProcessRoute as y, type ResubmitParams as z };

package/packages/sdk/dist/{ProcessPreview-Cyk6uv-w.d.ts → ProcessPreview-DSUIJi5V.d.ts}

@@ -1,5 +1,4 @@
 import React__default, { ReactNode } from 'react';
-import * as react_jsx_runtime from 'react/jsx-runtime';
 
 type FormSectionVariant = 'plain' | 'card';
 type FormSectionAccent = 'blue' | 'green';
@@ -18,7 +17,7 @@ interface FormSectionProps {
     contentClassName?: string;
     children: React__default.ReactNode;
 }
-declare function FormSection({ title, description, variant, accent, icon, iconKey, collapsible, defaultCollapsed, className, titleClassName, contentClassName, children, }: FormSectionProps): react_jsx_runtime.JSX.Element;
+declare function FormSection({ title, description, variant, accent, icon, iconKey, collapsible, defaultCollapsed, className, titleClassName, contentClassName, children, }: FormSectionProps): React__default.JSX.Element;
 
 /** 字段行为状态 */
 type FieldBehavior = 'NORMAL' | 'READONLY' | 'DISABLED' | 'HIDDEN';
@@ -1290,4 +1289,4 @@ interface ProcessPreviewProps {
 }
 declare const ProcessPreview: React__default.FC<ProcessPreviewProps>;
 
-export { type FormDataDeleteParams as $, type AddressFieldProps as A, type BaseFieldProps as B, type CascadeDateFieldProps as C, type DataFilter as D, type DepartmentSearchParams as E, type DepartmentSearchResult as F, type DepartmentSearchScope as G, type DepartmentSelectFieldProps as H, type DepartmentTreeNode as I, type DigitalSignatureFieldProps as J, type DigitalSignatureValue as K, type EditorChoiceOption as L, type EditorFieldProps as M, type EditorToolbarAction as N, type FieldBehavior as O, type FieldDefinition as P, type FieldLayoutNode as Q, type FieldValueSyncConfig as R, type FilePreviewCapability as S, type FilePreviewCapabilityBatch as T, type FilePreviewMetadata as U, type FilePreviewProvider as V, type FilePreviewRenderMode as W, type FilePreviewRequest as X, type FilePreviewSurface as Y, type FilePreviewType as Z, type FormAppearanceConfig as _, type AddressValue as a, type RuntimeAuthHeadersProvider as a$, type FormDataQueryParams as a0, type FormEffect as a1, type FormEffectAction as a2, type FormEffectCondition as a3, type FormEffectConditionOperator as a4, type FormEngineConfig as a5, type FormEngineMode as a6, type FormInstanceData as a7, type FormLayoutNode as a8, type FormRuntimeApi as a9, type LowcodePageNodeType as aA, type LowcodePageSchema as aB, type MultiSelectFieldProps as aC, type NumberFieldProps as aD, type OptionItem as aE, type OptionSourceConfig as aF, type OptionSourceType as aG, type PeopleShortcutConfig as aH, type PeopleShortcutType as aI, type PreparedFilePreview as aJ, type PreviewImageItem as aK, type PreviewParams as aL, type ProcessAction as aM, type ProcessBasicInfo as aN, type ProcessDefinition as aO, type ProcessNodeType as aP, ProcessPreview as aQ, type ProcessPreviewProps as aR, type ProcessRoute as aS, type ProcessStatus as aT, type ProcessTask as aU, type RadioFieldProps as aV, type ResubmitParams as aW, type ReturnParams as aX, type ReturnPolicy as aY, type ReturnableNode as aZ, type ReturnableNodeResult as a_, type FormRuntimeApiConfig as aa, type FormRuntimeConfig as ab, type FormSchema as ac, FormSection as ad, type FormSectionProps as ae, type FormSubmitBehavior as af, type FormTemplateConfig as ag, type GridLayoutCell as ah, type GridLayoutNode as ai, type ImageCompressionConfig as aj, type ImageCompressionVariantConfig as ak, type ImageFieldProps as al, type ImageVariant as am, type InitiatorSelectCandidate as an, type InitiatorSelectRequirement as ao, type InitiatorSelectScope as ap, type InitiatorSelectedApprovers as aq, type JSONFieldEditorContext as ar, type JSONFieldProps as as, type JSONFieldRendererContext as at, type LayoutVisibleWhen as au, type LinkedFormOptionConfig as av, type LocationFieldProps as aw, type LocationValue as ax, type LowcodePageMeta as ay, type LowcodePageNode as az, type ApprovalActionType as b, type RuntimeDataQueryParams as b0, type RuntimeDataQueryResult as b1, type RuntimeRequestConfig as b2, type RuntimeResponse as b3, type RuntimeUploadOptions as b4, type RuntimeUploadProvider as b5, type SaveTaskParams as b6, type SectionLayoutNode as b7, type SelectFieldProps as b8, type SerialNumberFieldProps as b9, type SignaturePoint as ba, type StandardFormPageMode as bb, type StatusMeta as bc, type StepLayoutItem as bd, type StepsLayoutNode as be, type SubFormColumn as bf, type SubFormFieldProps as bg, type TabLayoutItem as bh, type TabsLayoutNode as bi, type TaskStatus as bj, type TextAreaFieldProps as bk, type TextFieldProps as bl, type TextShortcutConfig as bm, type TextShortcutType as bn, type TransferParams as bo, type UserDisplayFormat as bp, type UserItem as bq, type UserSelectFieldProps as br, type ValidationPreset as bs, type ValidationRule as bt, type ViewPermissionQueryParams as bu, type ViewPermissionSummary as bv, type WithdrawParams as bw, type ApprovalPermission as c, ApprovalTimeline as d, type ApprovalTimelineProps as e, type ApproveParams as f, type AssociationFormConfig as g, type AssociationFormFieldProps as h, type AssociationValue as i, type AttachmentFieldProps as j, type AttachmentImageVariants as k, type AttachmentItem as l, type BaseLayoutNode as m, type CascadeSelectFieldProps as n, type ChangeRecord as o, type ChangeRecordListResponse as p, type ChangeRecordQueryParams as q, type CheckboxFieldProps as r, type DataLinkageCondition as s, type DataLinkageConfig as t, type DateFieldProps as u, type DateRangeRestriction as v, type DateRestrictionConfig as w, type DateShortcutConfig as x, type DateShortcutType as y, type DefaultValueLinkageConfig as z };
+export { type DepartmentSelectFieldProps as $, type ApprovalPermission as A, type ReturnParams as B, type ChangeRecordQueryParams as C, type SaveTaskParams as D, type TransferParams as E, type FieldDefinition as F, type TextFieldProps as G, type TextAreaFieldProps as H, type InitiatorSelectCandidate as I, type SelectFieldProps as J, type RadioFieldProps as K, type CheckboxFieldProps as L, type MultiSelectFieldProps as M, type NumberFieldProps as N, type OptionItem as O, type ProcessStatus as P, type DateFieldProps as Q, type RuntimeResponse as R, type StatusMeta as S, type TaskStatus as T, type CascadeDateFieldProps as U, type ValidationPreset as V, type WithdrawParams as W, type AttachmentFieldProps as X, type ImageFieldProps as Y, type SubFormFieldProps as Z, type UserSelectFieldProps as _, type FormRuntimeApi as a, type ImageVariant as a$, type CascadeSelectFieldProps as a0, type AddressFieldProps as a1, type AssociationFormFieldProps as a2, type EditorFieldProps as a3, type EditorChoiceOption as a4, type SerialNumberFieldProps as a5, type LocationFieldProps as a6, type DigitalSignatureFieldProps as a7, type JSONFieldProps as a8, type AttachmentItem as a9, type DefaultValueLinkageConfig as aA, type DepartmentSearchParams as aB, type DepartmentSearchResult as aC, type DepartmentSearchScope as aD, type DepartmentTreeNode as aE, type DigitalSignatureValue as aF, type EditorToolbarAction as aG, type FieldLayoutNode as aH, type FieldValueSyncConfig as aI, type FilePreviewCapabilityBatch as aJ, type FilePreviewProvider as aK, type FilePreviewRenderMode as aL, type FilePreviewSurface as aM, type FilePreviewType as aN, type FormEffectAction as aO, type FormEffectCondition as aP, type FormEffectConditionOperator as aQ, type FormEngineMode as aR, type FormLayoutNode as aS, FormSection as aT, type FormSectionProps as aU, type FormSubmitBehavior as aV, type FormTemplateConfig as aW, type GridLayoutCell as aX, type GridLayoutNode as aY, type ImageCompressionConfig as aZ, type ImageCompressionVariantConfig as a_, type PreparedFilePreview as aa, type FilePreviewCapability as ab, type FilePreviewMetadata as ac, type FilePreviewRequest as ad, type ProcessAction as ae, type InitiatorSelectedApprovers as af, type ReturnPolicy as ag, type ChangeRecord as ah, type StandardFormPageMode as ai, type LowcodePageSchema as aj, type AddressValue as ak, type ApprovalActionType as al, ApprovalTimeline as am, type ApprovalTimelineProps as an, type AssociationFormConfig as ao, type AssociationValue as ap, type AttachmentImageVariants as aq, type BaseFieldProps as ar, type BaseLayoutNode as as, type DataFilter as at, type DataLinkageCondition as au, type DataLinkageConfig as av, type DateRangeRestriction as aw, type DateRestrictionConfig as ax, type DateShortcutConfig as ay, type DateShortcutType as az, type FormSchema as b, type InitiatorSelectScope as b0, type JSONFieldEditorContext as b1, type JSONFieldRendererContext as b2, type LayoutVisibleWhen as b3, type LinkedFormOptionConfig as b4, type LocationValue as b5, type LowcodePageMeta as b6, type LowcodePageNode as b7, type LowcodePageNodeType as b8, type OptionSourceType as b9, type PeopleShortcutConfig as ba, type PeopleShortcutType as bb, type PreviewImageItem as bc, type ProcessNodeType as bd, ProcessPreview as be, type ProcessPreviewProps as bf, type RuntimeAuthHeadersProvider as bg, type RuntimeDataQueryParams as bh, type RuntimeDataQueryResult as bi, type RuntimeRequestConfig as bj, type RuntimeUploadOptions as bk, type RuntimeUploadProvider as bl, type SectionLayoutNode as bm, type SignaturePoint as bn, type StepLayoutItem as bo, type StepsLayoutNode as bp, type SubFormColumn as bq, type TabLayoutItem as br, type TabsLayoutNode as bs, type TextShortcutConfig as bt, type TextShortcutType as bu, type UserDisplayFormat as bv, type UserItem as bw, type FormRuntimeApiConfig as c, type FormEngineConfig as d, type FieldBehavior as e, type FormRuntimeConfig as f, type FormAppearanceConfig as g, type ValidationRule as h, type FormEffect as i, type OptionSourceConfig as j, type FormDataDeleteParams as k, type ChangeRecordListResponse as l, type FormDataQueryParams as m, type FormInstanceData as n, type InitiatorSelectRequirement as o, type ProcessBasicInfo as p, type ProcessDefinition as q, type ProcessTask as r, type ReturnableNodeResult as s, type ReturnableNode as t, type ViewPermissionQueryParams as u, type ViewPermissionSummary as v, type ApproveParams as w, type PreviewParams as x, type ProcessRoute as y, type ResubmitParams as z };