openxiangda 2.44.0 → 2.55.1

package/dist/browser/platform-client.js

@@ -152,7 +152,12 @@ async function request(path, init) {
             ? payload
             : null;
         if (!response.ok || (envelope && envelope.code !== 200)) {
-            throw responseRequestError(path, init, response, envelope, '平台请求失败');
+            // Application backends may return Nest HttpException JSON without an envelope code.
+            // Only failed HTTP responses use that object as an error payload; successful JSON
+            // retains the existing envelope/plain-response contract.
+            const failurePayload = payload && typeof payload === 'object' && !Array.isArray(payload)
+                ? payload : null;
+            throw responseRequestError(path, init, response, failurePayload, '平台请求失败');
         }
         return envelope ? envelope.data : payload;
     }
@@ -283,7 +288,7 @@ function bindWorkflowCsrf(surface, csrf) {
     bindWorkflowCommandCsrf(surface.commandToken, surface.commandTokenExpiresAt, csrf);
     return surface;
 }
-function bindWorkflowCommandCsrf(commandToken, expiration, csrf) {
+function bindWorkflowCommandCsrf(commandToken, expiration, csrf, retainForReceipt = false) {
     const now = Date.now();
     for (const [key, value] of workflowCommandCsrf)
         if (value.expiresAt <= now)
@@ -292,7 +297,9 @@ function bindWorkflowCommandCsrf(commandToken, expiration, csrf) {
     if (commandToken && Number.isFinite(expiresAt) && expiresAt > now) {
         if (!workflowCommandCsrf.has(commandToken) && workflowCommandCsrf.size >= 512)
             workflowCommandCsrf.delete(workflowCommandCsrf.keys().next().value);
-        workflowCommandCsrf.set(commandToken, { csrf, expiresAt });
+        // Record deletion receipts can outlive their preview. Keep the original header
+        // in the same bounded, identity-cleared command cache until it is evicted.
+        workflowCommandCsrf.set(commandToken, { csrf, expiresAt: retainForReceipt ? Infinity : expiresAt });
     }
 }
 async function commandBoundCsrf(commandToken) {
@@ -934,6 +941,7 @@ export async function searchResource(resourceCode, fieldCode, options) {
         schemaVersion: SCHEMA_VERSIONS.dataFieldSourceQuery,
         operation: options.operation,
         ...(options.launch ? { launch: options.launch } : {}),
+        ...(options.action ? { action: options.action } : {}),
         ...(options.keyword.trim() ? { keyword: options.keyword.trim() } : {}),
         ...(options.cursor ? { cursor: options.cursor } : {}),
         ...(options.bindings && Object.keys(options.bindings).length
@@ -948,6 +956,12 @@ export async function searchResource(resourceCode, fieldCode, options) {
         }),
     });
 }
+export async function queryFieldUserCandidates(resourceCode, fieldCode, input) {
+    return requestRead(`${nativeBase()}/data-resources/${encodeURIComponent(resourceCode)}/fields/${encodeURIComponent(fieldCode)}/user-candidates/query`, { method: 'POST', body: JSON.stringify({ ...input, environmentKey: currentEnvironmentKey() }) });
+}
+export async function queryWorkflowTaskUserCandidates(taskId, fieldCode, input) {
+    return requestRead(`${workflowBase()}/tasks/${encodeURIComponent(taskId)}/fields/${encodeURIComponent(fieldCode)}/user-candidates/query`, { method: 'POST', body: JSON.stringify(input) });
+}
 function nativeResourceListQuery(code, surface, query) {
     const sorts = query.sorts ?? (query.sort ? [query.sort] : surface.list?.defaultSort ? [surface.list.defaultSort] : []);
     const where = buildResourceWhere(code, surface, query);
@@ -1063,6 +1077,103 @@ export async function batchAggregateNativeResources(operations) {
         };
     });
 }
+export async function loadNativeRecordPrint(code, recordId, options = {}) {
+    const query = new URLSearchParams({ environmentKey: currentEnvironmentKey(),
+        ...(options.viewCode === undefined ? {} : { viewCode: options.viewCode }) });
+    const snapshot = await requestRead(`${dataBase(code)}/records/${encodeURIComponent(recordId)}/print?${query}`);
+    if (snapshot.schemaVersion !== 'openxiangda.data-record-print/v1' || snapshot.resourceCode !== code ||
+        snapshot.recordId !== recordId || snapshot.viewCode !== options.viewCode ||
+        !Array.isArray(snapshot.fields) || snapshot.fields.length < 1 || snapshot.fields.length > 100 ||
+        new Set(snapshot.fields.map(field => field.code)).size !== snapshot.fields.length ||
+        !snapshot.data || typeof snapshot.data !== 'object' || Array.isArray(snapshot.data))
+        throw new Error('OPENXIANGDA_NATIVE_RECORD_PRINT_RESPONSE_INVALID');
+    return snapshot;
+}
+/** Comment reads retain current Perspective; writes/recovery use Native current-user authority. */
+export async function loadNativeRecordComments(code, recordId, options = {}) {
+    const limit = options.limit ?? 20;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 50 ||
+        (options.cursor !== undefined && (!/^[A-Za-z0-9_-]{1,256}$/.test(options.cursor))))
+        throw new Error('OPENXIANGDA_NATIVE_RECORD_COMMENTS_PAGE_INVALID');
+    const query = new URLSearchParams({ environmentKey: currentEnvironmentKey(), limit: String(limit),
+        ...(options.cursor === undefined ? {} : { cursor: options.cursor }) });
+    const page = await requestRead(`${dataBase(code)}/records/${encodeURIComponent(recordId)}/comments?${query}`);
+    if (page.schemaVersion !== 'openxiangda.data-record-comments/v1' || page.resourceCode !== code ||
+        page.recordId !== recordId || page.limit !== limit || !Array.isArray(page.items) || page.items.length > limit ||
+        !page.items.every(validRecordComment) || (page.nextCursor !== null &&
+        (typeof page.nextCursor !== 'string' || !/^[A-Za-z0-9_-]{1,256}$/.test(page.nextCursor))))
+        throw new Error('OPENXIANGDA_NATIVE_RECORD_COMMENTS_RESPONSE_INVALID');
+    return page;
+}
+function validRecordComment(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const comment = value;
+    return typeof comment.id === 'string' && typeof comment.body === 'string' && comment.body.length <= 4000 &&
+        typeof comment.authorUserId === 'string' && typeof comment.isOwn === 'boolean' &&
+        typeof comment.createdAt === 'string' && Number.isFinite(Date.parse(comment.createdAt)) &&
+        typeof comment.appVersionId === 'string' && Number.isSafeInteger(comment.environmentHeadRevision) && comment.environmentHeadRevision > 0;
+}
+function checkedRecordCommentReceipt(receipt, code, recordId, key) {
+    if (receipt.schemaVersion !== 'openxiangda.data-record-comment-receipt/v1' || receipt.resourceCode !== code ||
+        receipt.recordId !== recordId || receipt.idempotencyKey !== key || !validRecordComment(receipt.comment) ||
+        receipt.comment.isOwn !== true || typeof receipt.replayed !== 'boolean')
+        throw new Error('OPENXIANGDA_NATIVE_RECORD_COMMENTS_RESPONSE_INVALID');
+    return receipt;
+}
+/** Fix the mutation before sending; never generate a replacement key for an unknown result. */
+export async function createNativeRecordComment(code, recordId, input) {
+    const receipt = await request(`${dataBase(code)}/records/${encodeURIComponent(recordId)}/comments`, { method: 'POST', body: JSON.stringify({ ...input, environmentKey: currentEnvironmentKey() }) });
+    return checkedRecordCommentReceipt(receipt, code, recordId, input.idempotencyKey);
+}
+/** Author-only original-key recovery is re-authorized, even after a new application Head. */
+export async function loadNativeRecordCommentReceipt(code, recordId, idempotencyKey) {
+    const query = new URLSearchParams({ environmentKey: currentEnvironmentKey(), idempotencyKey });
+    const receipt = await requestRead(`${dataBase(code)}/records/${encodeURIComponent(recordId)}/comments/receipt?${query}`);
+    return checkedRecordCommentReceipt(receipt, code, recordId, idempotencyKey);
+}
+function checkedRecordDeletionPreview(value, code, recordId) {
+    const count = (n, min = 0, max = 100) => Number.isSafeInteger(n) && n >= min && n <= max;
+    if (value.schemaVersion !== 'openxiangda.data-record-deletion-preview/v1' || value.resourceCode !== code || value.recordId !== recordId ||
+        typeof value.resourceName !== 'string' || typeof value.appVersionId !== 'string' || !count(value.environmentHeadRevision, 1, Number.MAX_SAFE_INTEGER) ||
+        !count(value.recordRevision, 1, Number.MAX_SAFE_INTEGER) || !count(value.affectedRecords, 1) || !count(value.workflowCount) ||
+        !count(value.pendingLaunchCount) || !count(value.cancelledTaskCount, 0, Number.MAX_SAFE_INTEGER) || typeof value.canCommit !== 'boolean' ||
+        (value.canCommit ? value.workflowCount > 1 || value.pendingLaunchCount !== 0 || value.blocker !== undefined ||
+            !['native-transaction', 'workflow-command'].includes(value.receiptOwner || '') ||
+            (value.receiptOwner === 'workflow-command') !== (value.workflowCount === 1) ||
+            typeof value.previewToken !== 'string' || !/^[A-Za-z0-9_-]{100,16384}$/.test(value.previewToken) ||
+            typeof value.expiresAt !== 'string' || !Number.isFinite(Date.parse(value.expiresAt))
+            : !['pending_launch', 'multiple_workflows', 'owned_workflow'].includes(value.blocker || '') || value.previewToken !== undefined || value.receiptOwner !== undefined))
+        throw new Error('OPENXIANGDA_NATIVE_RECORD_DELETION_RESPONSE_INVALID');
+    return value;
+}
+function checkedRecordDeletionReceipt(value, code, recordId, key) {
+    if (value.schemaVersion !== 'openxiangda.data-record-deletion-receipt/v1' || value.resourceCode !== code || value.recordId !== recordId ||
+        value.idempotencyKey !== key || !['native-transaction', 'workflow-command'].includes(value.receiptOwner) ||
+        typeof value.receiptId !== 'string' || !value.receiptId || value.receiptId.length > 255 ||
+        typeof value.deleted !== 'boolean' || typeof value.replayed !== 'boolean' ||
+        (!value.deleted && (typeof value.errorCode !== 'string' || !value.errorCode)))
+        throw new Error('OPENXIANGDA_NATIVE_RECORD_DELETION_RESPONSE_INVALID');
+    return value;
+}
+/** Maintenance uses the current user role union, independent of read Perspective. */
+export async function previewNativeRecordDeletion(code, recordId) {
+    const csrf = await workflowCsrfToken();
+    const result = await request(`${dataBase(code)}/records/${encodeURIComponent(recordId)}/deletion/preview`, { method: 'POST', headers: { 'x-openxiangda-csrf-token': csrf }, body: JSON.stringify({ environmentKey: currentEnvironmentKey() }) });
+    const preview = checkedRecordDeletionPreview(result, code, recordId);
+    if (preview.canCommit)
+        bindWorkflowCommandCsrf(preview.previewToken, preview.expiresAt, csrf, true);
+    return preview;
+}
+export async function deleteNativeRecordWithPreview(code, recordId, input) {
+    const result = await request(`${dataBase(code)}/records/${encodeURIComponent(recordId)}/deletion/execute`, { method: 'POST', headers: { 'x-openxiangda-csrf-token': await commandBoundCsrf(input.previewToken) }, body: JSON.stringify({ ...input, environmentKey: currentEnvironmentKey() }) });
+    return checkedRecordDeletionReceipt(result, code, recordId, input.idempotencyKey);
+}
+/** Read the original owner receipt; never replace the pending request with a new key. */
+export async function recoverNativeRecordDeletion(code, recordId, input) {
+    const result = await request(`${dataBase(code)}/records/${encodeURIComponent(recordId)}/deletion/receipt`, { method: 'POST', headers: { 'x-openxiangda-csrf-token': await commandBoundCsrf(input.previewToken) }, body: JSON.stringify({ ...input, environmentKey: currentEnvironmentKey() }) });
+    return checkedRecordDeletionReceipt(result, code, recordId, input.idempotencyKey);
+}
 export function createNativeResourceClient(code, surface) {
     const base = dataBase(code);
     const declaredFields = new Set(Object.keys(surface.fields));
@@ -1072,6 +1183,9 @@ export function createNativeResourceClient(code, surface) {
         return field;
     };
     return {
+        previewDeletion: (recordId) => previewNativeRecordDeletion(code, recordId),
+        deleteWithPreview: (recordId, input) => deleteNativeRecordWithPreview(code, recordId, input),
+        deletionReceipt: (recordId, input) => recoverNativeRecordDeletion(code, recordId, input),
         async list(query) {
             const body = nativeResourceListQuery(code, surface, query);
             const page = await requestRead(`${base}/query`, {
@@ -1237,6 +1351,9 @@ export async function loadApplicationOperationSurfaces(options = {}) {
  * The caller never supplies a runtime path, capability, or subject resource.
  */
 export async function executeApplicationOperation(operationSurface, input, options = {}) {
+    return executeApplicationOperationWithCsrf(operationSurface, input, options, workflowCsrfToken);
+}
+async function executeApplicationOperationWithCsrf(operationSurface, input, options, csrf) {
     if (!operationSurface?.code ||
         !operationSurface.appVersionId ||
         operationSurface.fileIntent ||
@@ -1249,7 +1366,7 @@ export async function executeApplicationOperation(operationSurface, input, optio
         (!idempotencyKey || idempotencyKey.length > 128)) {
         throw new Error('OPENXIANGDA_APPLICATION_OPERATION_IDEMPOTENCY_REQUIRED');
     }
-    const csrfToken = await workflowCsrfToken();
+    const csrfToken = await csrf();
     return await request(`${nativeBase()}/operation-surfaces/${encodeURIComponent(operationSurface.code)}/execute`, {
         method: 'POST',
         headers: { 'x-openxiangda-csrf-token': csrfToken },
@@ -1790,6 +1907,18 @@ export async function loadWorkflowInstanceSurface(instanceId) {
     const surface = await requestRead(`${workflowBase()}/instances/${encodeURIComponent(instanceId)}/surface`, { headers: { 'x-openxiangda-csrf-token': csrfToken } });
     return bindWorkflowCsrf(normalizeWorkflowSurface(surface), csrfToken);
 }
+/** Current record read/RLS plus explicit history policy, without handling authority. */
+export async function loadWorkflowRecordHistory(resourceCode, recordId, options = {}) {
+    const limit = options.limit ?? 20;
+    const offset = options.offset ?? 0;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100 ||
+        !Number.isSafeInteger(offset) || offset < 0 || offset > 500)
+        throw new Error('WORKFLOW_V2_RECORD_HISTORY_PAGE_INVALID');
+    const query = new URLSearchParams({ environmentKey: currentEnvironmentKey(), limit: String(limit), offset: String(offset) });
+    if (options.instanceId)
+        query.set('instanceId', options.instanceId);
+    return await requestRead(`${workflowBase()}/records/${encodeURIComponent(resourceCode)}/${encodeURIComponent(recordId)}/history?${query}`);
+}
 export async function loadWorkflowTimeline(instanceId) {
     return await requestRead(`${workflowBase()}/instances/${encodeURIComponent(instanceId)}/timeline`);
 }
@@ -1940,6 +2069,33 @@ export async function executeWorkflowOperation(surface, operation, input = {}, o
     if (!surface.commandToken) {
         throw new Error('OPENXIANGDA_WORKFLOW_COMMAND_TOKEN_REQUIRED');
     }
+    const idempotencyKey = options.idempotencyKey || randomWorkflowIdempotencyKey(operation.key);
+    if (operation.execute.operationCode) {
+        const catalog = await loadApplicationOperationSurfaces();
+        const action = catalog.operations.find(item => item.code === operation.execute.operationCode);
+        if (!action)
+            throw new Error('OPENXIANGDA_WORKFLOW_BUSINESS_OPERATION_UNAVAILABLE');
+        const instance = surface.instance;
+        const dataRef = instance.dataRef;
+        const resourceCode = surface.navigationTarget?.resourceCode || dataRef?.resourceCode;
+        const recordId = surface.navigationTarget?.recordId || dataRef?.id;
+        const detail = surface.presentation.businessDetail;
+        const expectedRevision = surface.taskForm?.expectedRevision || detail?.sourceRevision;
+        if (!recordId || !resourceCode || resourceCode !== action.subject.resourceCode ||
+            !Number.isSafeInteger(expectedRevision) || Number(expectedRevision) < 1 ||
+            !['approve', 'reject', 'withdraw'].includes(operation.key))
+            throw new Error('OPENXIANGDA_WORKFLOW_BUSINESS_SUBJECT_UNAVAILABLE');
+        const target = operation.key === 'withdraw'
+            ? { kind: 'instance', id: String(instance.id), command: 'withdraw' }
+            : { kind: 'task', id: String(surface.task?.id || ''), command: operation.key };
+        if (!target.id || target.id === 'undefined')
+            throw new Error('OPENXIANGDA_WORKFLOW_BUSINESS_TARGET_UNAVAILABLE');
+        const receipt = await executeApplicationOperationWithCsrf(action, {
+            workflowCode: instance.workflowCode, target, recordId, expectedRevision,
+            commandToken: surface.commandToken, idempotencyKey, input,
+        }, { idempotencyKey }, () => commandBoundCsrf(surface.commandToken));
+        return receipt.result;
+    }
     const csrfToken = await commandBoundCsrf(surface.commandToken);
     const href = operation.execute.href.startsWith('/service/')
         ? operation.execute.href
@@ -1949,7 +2105,7 @@ export async function executeWorkflowOperation(surface, operation, input = {}, o
         headers: { 'x-openxiangda-csrf-token': csrfToken },
         body: JSON.stringify({
             commandToken: surface.commandToken,
-            idempotencyKey: options.idempotencyKey || randomWorkflowIdempotencyKey(operation.key),
+            idempotencyKey,
             input,
         }),
     });