weaver-e9-assistant-cli 1.0.0

package/dist/fileutil.js

@@ -0,0 +1,20 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+/** 下载文件不覆盖用户已有文件；重名时追加 (1)、(2)… */
+export function nextAvailablePath(outDir, filename) {
+    const parsed = path.parse(filename);
+    let candidate = path.join(outDir, filename);
+    for (let index = 1; fs.existsSync(candidate); index++)
+        candidate = path.join(outDir, `${parsed.name} (${index})${parsed.ext}`);
+    return candidate;
+}
+
+/** 接受 OOXML zip 或传统 OLE Excel；拒绝 HTML 登录页、JSON 错误和空响应。 */
+export function assertExcelLike(buf, label = 'Excel 文件') {
+    const isZip = Buffer.isBuffer(buf) && buf.length >= 64 && buf.readUInt32LE(0) === 0x04034b50;
+    const isOle = Buffer.isBuffer(buf) && buf.length >= 512 && buf.subarray(0, 8).equals(Buffer.from('D0CF11E0A1B11AE1', 'hex'));
+    if (!isZip && !isOle)
+        throw new Error(`${label}响应不是有效的 xls/xlsx，可能是登录页或错误页。`);
+    return { format: isZip ? 'xlsx' : 'xls', size: buf.length };
+}

package/dist/kq.js

@@ -0,0 +1,204 @@
+/**
+ * E9 考勤（kq）打卡模块。
+ *
+ * 抓包+实跑确认的接口（测试环境，2026-08-12）：
+ *   POST /api/hrm/kq/attendanceButton/getButtons    页面加载预发：取 timeline 班次参数（无 body）
+ *   POST /api/hrm/kq/attendanceButton/punchButton   打卡（带 timeline 班次参数 + signTime + encryptObj）
+ *
+ * signSecret 签名算法从前端 signFunc.js 逆向（webpack source map 虚拟路径，靠 Sources 复制源码）：
+ *   signSecret(str) = md5("wea" + str) + "ver"（小写；标准 MD5，但输入前缀加 "wea"）
+ *   encryptObj = [timestamp, userid, signSecret(userid + groupid)] = `${ts},${uid},${md5("wea"+uid+gid)+"ver"}`
+ *   timestamp = Date.now()（现算，服务端不校验时效）；signTime = 现算 HH:mm:ss
+ *   groupid = 考勤组 id（222222600 默认考勤组=1；每用户可能不同，待校准，CLI 可配 --group-id）
+ *
+ * 走当前 baseUrl（单一环境），aiAgentToken 鉴权（服务端只校验 md5(uid+gid) 防篡改，不校验会话/时效）。
+ */
+import * as crypto from 'crypto';
+import { createApiFromProfile } from './client.js';
+// ───────────────── signSecret（前端 signFunc.js 逆向）─────────────────
+/** md5 小写。 */
+function md5Hex(s) {
+    return crypto.createHash('md5').update(s, 'utf8').digest('hex');
+}
+/**
+ * 考勤签名：signSecret(str) = md5("wea" + str) + "ver"（与前端 signFunc.js 一致）。
+ * 前端输入经 uTF8Encode，但纯 ASCII（"wea"+uid+gid）无变化，故直接 md5。
+ */
+export function signSecret(str) {
+    return md5Hex(`wea${str}`) + 'ver';
+}
+/**
+ * 构造 encryptObj = `${timestamp},${userid},${signSecret(userid+groupid)}ver`。
+ * 与 DataList.js 的 `signData=[generateTimeStamp(), userid, signSecret(userid+groupid)]` 一致
+ * （数组 toString() = "ts,uid,signSecret结果"，signSecret 已含 ver 后缀）。
+ */
+export function buildEncryptObj(userid, groupId, timestamp) {
+    const ts = (timestamp ?? Date.now()) + '';
+    return `${ts},${userid},${signSecret(`${userid}${groupId}`)}`;
+}
+/**
+ * 取打卡班次 timeline。POST /api/hrm/kq/attendanceButton/getButtons（无 body）。
+ * 返回 timeline[]（每项=一个打卡时段，含全部班次参数）+ date/now/groupname。
+ * 不返回 encryptObj/groupid/signature（前端 JS 现算）。
+ */
+export async function getButtons(cfg) {
+    const api = await createApiFromProfile(cfg);
+    const r = await api.post('/api/hrm/kq/attendanceButton/getButtons', {});
+    const j = r.json || {};
+    const tlRaw = Array.isArray(j.timeline) ? j.timeline : [];
+    const timeline = tlRaw.map((t) => ({
+        date: s(t.date),
+        type: s(t.type),
+        belongtime: s(t.belongtime),
+        canSignTime: s(t.canSignTime),
+        across: s(t.across),
+        belongdate: s(t.belongdate),
+        datetime: s(t.datetime),
+        min: s(t.min),
+        signSectionEndTime: s(t.signSectionEndTime),
+        islastsign: s(t.islastsign),
+        signSectionTime: s(t.signSectionTime),
+        signSectionBeginTime: s(t.signSectionBeginTime),
+        isYellow: s(t.isYellow),
+        isPunchOpen: s(t.isPunchOpen),
+        isacross: s(t.isacross),
+        pre: s(t.pre),
+        signSection: s(t.signSection),
+        signbelongspan: s(t.signbelongspan),
+        active: s(t.active),
+        needSign: s(t.needSign),
+        workmins: s(t.workmins),
+        signbelong: s(t.signbelong),
+        reSign: s(t.reSign),
+        min_next: s(t.min_next),
+        signfrom: s(t.signfrom),
+        serialid: s(t.serialid),
+        signAcross: s(t.signAcross),
+        signAcross_next: s(t.signAcross_next),
+        time: s(t.time),
+        signTime: s(t.signTime),
+        position: s(t.position),
+        isfirstsign: s(t.isfirstsign),
+    }));
+    return {
+        date: s(j.date),
+        now: s(j.now),
+        groupname: s(j.groupname),
+        lastname: s(j.lastname),
+        timeline,
+        raw: j,
+    };
+}
+/**
+ * 解析本次允许操作的打卡时段。
+ *
+ * getButtons 是当天考勤页的状态，不是历史补签查询接口。历史日期若在
+ * timeline 中不存在，绝不能回退到同卡种的当天记录，否则一次失败的补卡会
+ * 变成对今天记录的真实写入。
+ */
+export function resolvePunchItem(buttons, opts) {
+    const targetDate = String(opts?.date ?? buttons?.date ?? '');
+    const type = String(opts?.type ?? '');
+    const currentDate = String(buttons?.date ?? '');
+    if (!currentDate)
+        throw new Error('考勤接口未返回当前日期，无法安全打卡');
+    if (targetDate !== currentDate) {
+        throw new Error(`当前考勤接口只支持当天(${currentDate})打卡；不能安全处理 ${targetDate || '未指定日期'} 的历史补卡，请在 OA 考勤补签流程办理`);
+    }
+    const item = (buttons?.timeline ?? []).find((t) => String(t.date) === targetDate && String(t.type) === type);
+    if (!item)
+        throw new Error(`未找到当天打卡时段（date=${targetDate}, type=${type}），已停止执行以避免误写其他记录`);
+    return { targetDate, item };
+}
+/**
+ * 打卡。链路：getButtons（取 timeline 班次参数）→ 生成 encryptObj → punchButton。
+ * - type=on 上班卡 / off 下班卡，按 date（默认今天）匹配 timeline 时段。
+ * - encryptObj = [Date.now(), userid, signSecret(userid+groupId)+"ver"]（前端 signFunc.js 算法）。
+ * - signTime = 当前时刻 HH:mm:ss（或传入）。
+ * 服务端只校验 md5("wea"+uid+gid) 防篡改，不校验 timestamp/会话，token 鉴权可行。
+ */
+export async function punch(cfg, opts) {
+    const api = await createApiFromProfile(cfg);
+    const buttons = await getButtons(cfg);
+    const { item } = resolvePunchItem(buttons, opts);
+    // userid：优先传入；否则从 config.cookie 的 loginuuids 解析（token-login 写回 cookie 含用户 id）
+    const userid = opts.userid ?? parseUserIdFromCookie(cfg.cookie) ?? '';
+    if (!userid) {
+        throw new Error('未取到 userid：punch 需 --userid，或 config.cookie 须含 loginuuids（token-login 会写回）');
+    }
+    const groupId = opts.groupId ?? '1';
+    // punchButton 的 signTime 是本次打卡时刻，不是修改既有打卡时间的参数。
+    // 始终现算，避免调用方把历史或任意时间写入当天记录。
+    const signTime = nowHHmmss();
+    const encryptObj = buildEncryptObj(userid, groupId, opts.timestamp);
+    const body = {
+        date: item.date,
+        belongtime: item.belongtime,
+        type: item.type,
+        canSignTime: item.canSignTime,
+        across: item.across,
+        belongdate: item.belongdate,
+        datetime: item.datetime,
+        min: item.min,
+        islastsign: item.islastsign,
+        signSectionTime: item.signSectionTime,
+        signSectionBeginTime: item.signSectionBeginTime ?? '',
+        isYellow: item.isYellow,
+        isPunchOpen: item.isPunchOpen,
+        isacross: item.isacross,
+        pre: item.pre ?? '0',
+        signSection: item.signSection,
+        signbelongspan: item.signbelongspan ?? '今天',
+        active: item.active ?? '0',
+        needSign: item.needSign ?? '0',
+        workmins: item.workmins,
+        signbelong: item.signbelong ?? '今天',
+        reSign: item.reSign ?? '1',
+        min_next: item.min_next,
+        signfrom: item.signfrom ?? 'e9pc',
+        serialid: item.serialid,
+        signAcross: item.signAcross,
+        signAcross_next: item.signAcross_next,
+        time: item.time,
+        position: '',
+        longitude: '',
+        latitude: '',
+        sid: '',
+        mac: '',
+        deviceId: '',
+        deviceInfo: '',
+        signTime,
+        encryptObj,
+        ...(item.isfirstsign !== undefined ? { isfirstsign: item.isfirstsign } : {}),
+    };
+    const r = await api.post('/api/hrm/kq/attendanceButton/punchButton', body);
+    const j = r.json || {};
+    return {
+        success: s(j.success),
+        message: s(j.message),
+        signtime: s(j.signtime),
+        signdate: s(j.signdate),
+        kqstatus: s(j.kqstatus),
+        status: s(j.status),
+        raw: j,
+    };
+}
+// ───────────────── 工具 ─────────────────
+function s(v) {
+    if (v === undefined || v === null)
+        return '';
+    return String(v);
+}
+/** 从 cookie 串解析 loginuuids（当前登录用户 id）。token-login 写回 cookie 含此字段。 */
+function parseUserIdFromCookie(cookie) {
+    if (!cookie)
+        return '';
+    const m = cookie.match(/loginuuids=([^;]+)/);
+    return m ? m[1].trim() : '';
+}
+/** 当前时刻 HH:mm:ss（本地时区）。 */
+function nowHHmmss() {
+    const d = new Date();
+    const p = (n) => String(n).padStart(2, '0');
+    return `${p(d.getHours())}:${p(d.getMinutes())}:${p(d.getSeconds())}`;
+}

package/dist/links.js

@@ -0,0 +1,34 @@
+function baseUrl(base) {
+    return String(base ?? '').replace(/\/+$/, '');
+}
+
+export function buildBlogMyUrl(base) {
+    return `${baseUrl(base)}/wui/index.html#/main/blog/myBlog?menuIds=392,393&menuPathIds=392,393`;
+}
+
+export function buildCubeCardUrl(base, { modeId, formId, billid, customid }) {
+    if ([modeId, formId, billid, customid].some((value) => value === undefined || value === null || value === ''))
+        return undefined;
+    return `${baseUrl(base)}/spa/cube/index.html#/main/cube/card?type=0&modeId=${modeId}&formId=${formId}&billid=${billid}&opentype=0&customid=${customid}&viewfrom=fromsearchlist`;
+}
+
+export function buildCubeSearchUrl(base, customid) {
+    if (customid === undefined || customid === null || customid === '')
+        return undefined;
+    return `${baseUrl(base)}/spa/cube/index.html#/main/cube/search?customid=${encodeURIComponent(String(customid))}`;
+}
+
+/** 把 E9 菜单返回的相对地址补成可点击的绝对地址。 */
+export function normalizeE9Url(base, value) {
+    const raw = String(value ?? '').trim();
+    if (!raw)
+        return undefined;
+    if (/^https?:\/\//i.test(raw))
+        return raw;
+    const b = baseUrl(base);
+    if (raw.startsWith('#/'))
+        return `${b}/spa/cube/index.html${raw}`;
+    if (raw.startsWith('/main/cube/'))
+        return `${b}/spa/cube/index.html#${raw}`;
+    return `${b}/${raw.replace(/^\/+/, '')}`;
+}

package/dist/odoc.js

@@ -0,0 +1,194 @@
+/**
+ * E9 公文（odoc）模块。
+ *
+ * 抓包+实跑确认的接口（测试环境）：
+ *   POST /api/odoc/odocCustomPage/getCustomPageList   公文待办/待阅列表入口（拿 dataKey，customListId/customTabId 定列表与 tab）
+ *   POST /api/ec/dev/table/datas                       取列+行（同待办 table 链路第 2 步）
+ *   POST /api/ec/dev/table/counts                      取总数（同待办 table 链路第 3 步）
+ *   POST /api/odoc/odocTodoList/getTodoCount           待办/待阅计数（发文/收文/签报，按 officalType 分）
+ *   POST /api/odoc/odocCenter/createOfficalList        发文/收文流程列表（officalType=1 发文拟稿 / 2 收文登记，结构同 create 列表）
+ *   POST /api/odoc/odocCenter/getCenterInfo            公文中心首页两个新建入口（发文拟稿/收文登记）
+ *   POST /api/odoc/odocCenter/getCountByOdocType       按公文种类计数
+ *   POST /api/odoc/odocCenter/getCountByTopicType      按主题分类计数
+ *
+ * 走当前 baseUrl（单一环境，所有功能同地址），aiAgentToken 鉴权（e9pc 不支持 token 时回退 cookie）。
+ */
+import { createApiFromProfile } from './client.js';
+import { pickByPaths, stripHtml, extractDataKey, extractColumns, extractRows, extractTotal } from './parse.js';
+const DATERANGE_EMPTY = '0,,'; // type=0(不过滤), from 空, to 空
+/**
+ * 公文待办/待阅列表。3 步 table 链路（POST，form-urlencoded），同待办/workplan-search：
+ *   1. /api/odoc/odocCustomPage/getCustomPageList（过滤项 + customListId/customTabId）→ dataKey（sessionkey 字段）
+ *   2. /api/ec/dev/table/datas（dataKey + current + sortParams=[]）→ columns + 行
+ *   3. /api/ec/dev/table/counts（dataKey）→ 总数（失败不阻断）
+ * 行字段：原值 + `<字段>span` 渲染值（去 HTML）。
+ */
+export async function listOdocTodo(cfg, opts = {}) {
+    const api = await createApiFromProfile(cfg);
+    const filters = {
+        btnType: opts.btnType ?? '1',
+        readstatus: opts.readStatus ?? '',
+        odocSubject: opts.odocSubject ?? '',
+        sendnode: '',
+        topictype: opts.topicType ?? '',
+        secretlevel: opts.secretLevel ?? '',
+        send_unit: opts.sendUnit ?? '',
+        issueduserid: opts.issuedUserid ?? '',
+        writtendateselect: opts.writtenDateSelect ?? DATERANGE_EMPTY,
+        ownerid: opts.ownerId ?? '',
+        createdateselect: opts.createDateSelect ?? DATERANGE_EMPTY,
+        lastmodifydateselect: opts.lastModifyDateSelect ?? DATERANGE_EMPTY,
+        dealinguserid: opts.dealingUserid ?? '',
+        undealeduserid: opts.undealedUserid ?? '',
+        docabstract: opts.docAbstract ?? '',
+        opendateselect: opts.openDateSelect ?? DATERANGE_EMPTY,
+        deadlineselect: opts.deadlineSelect ?? DATERANGE_EMPTY,
+        receivenum: opts.receiveNum ?? '',
+        receivedateselect: opts.receiveDateSelect ?? DATERANGE_EMPTY,
+        workflowid: opts.workflowId ?? '',
+        requestname: opts.requestName ?? '',
+        dispatchnum: opts.dispatchNum ?? '',
+        urgencydegree: opts.urgencyDegree ?? '',
+        receive_unit: opts.receiveUnit ?? '',
+        issueddateselect: opts.issuedDateSelect ?? DATERANGE_EMPTY,
+        departmentid: opts.departmentId ?? '',
+        odoctype: opts.odocType ?? '',
+        customListId: opts.customListId ?? '-12',
+        customTabId: opts.customTabId ?? '-24',
+    };
+    const r1 = await api.post('/api/odoc/odocCustomPage/getCustomPageList', filters);
+    const dataKey = extractDataKey(r1.json);
+    if (!dataKey) {
+        throw new Error(`odoc list 未拿到 dataKey，getCustomPageList 响应: ${(r1.text ?? '').slice(0, 200)}`);
+    }
+    const page = opts.page ?? 1;
+    const r2 = await api.post('/api/ec/dev/table/datas', {
+        dataKey,
+        current: String(page),
+        sortParams: '[]',
+        // table/datas 认 pageSize（同待办链路）：显式 10 条/页，避免服务端默认 30 条/页导致
+        // --page N 按 30 条跳页、本页第 11~30 条看不到的错位。
+        pageSize: opts.pageSize ?? '10',
+    });
+    const columns = extractColumns(r2.json);
+    const rows = extractRows(r2.json);
+    const items = rows.map((r) => normalizeOdocRow(r)).filter((it) => it.requestId || it.requestName);
+    const pageSize = pickByPaths(r2.json, ['pageSize', 'data.pageSize']);
+    let total = null;
+    let countsResp = null;
+    try {
+        const r3 = await api.post('/api/ec/dev/table/counts', { dataKey });
+        countsResp = r3.json;
+        total = extractTotal(r3.json);
+    }
+    catch {
+        // counts 失败不阻断
+    }
+    return {
+        dataKey,
+        page,
+        total,
+        pageSize: typeof pageSize === 'number' ? pageSize : null,
+        columns,
+        items,
+        raw: { getCustomPageList: r1.json, datas: r2.json, counts: countsResp },
+    };
+}
+/** 解析公文待办表行（原值 + span 渲染值）。 */
+export function normalizeOdocRow(row) {
+    if (!row || typeof row !== 'object')
+        return {};
+    const get = (keys) => pickByPaths(row, keys);
+    const spanOr = (dataIndex, extraKeys = []) => stripHtml(get([`${dataIndex}span`, dataIndex, ...extraKeys]));
+    return {
+        requestId: stringify(get(['requestid', 'randomField2'])),
+        requestName: stripHtml(get(['requestnamespan'])) || stringify(get(['requestname'])),
+        odocType: stringify(get(['odoctype'])),
+        odocTypeName: stripHtml(get(['odoctypespan'])),
+        issuedNum: stringify(get(['issued_num', 'issued_numspan'])),
+        receiveNum: stripHtml(get(['receivenumspan'])) || stringify(get(['receivenum'])),
+        topicType: stringify(get(['topictype'])),
+        urgencyDegree: stringify(get(['urgencydegree'])),
+        secretLevel: stripHtml(get(['secretlevelspan'])) || stringify(get(['secretlevel'])),
+        issuedUnit: stringify(get(['issued_unit'])),
+        receiveUnit: stripHtml(get(['receiveunitspan'])) || stringify(get(['receiveunit'])),
+        issuedUserid: stripHtml(get(['issued_useridspan'])) || stringify(get(['issued_userid'])),
+        writtenDate: stripHtml(get(['written_datespan'])) || stringify(get(['written_date'])),
+        issuedDate: stringify(get(['issued_date'])),
+        createrId: stripHtml(get(['createridspan'])) || stringify(get(['createrid', 'creater'])),
+        createDate: stringify(get(['createdate'])),
+        sendDepartment: stringify(get(['senddepartment'])),
+        lastOperateDate: stringify(get(['lastoperatedate'])),
+        currentNodeId: stripHtml(get(['currentnodeidspan'])) || stringify(get(['currentnodeid'])),
+        currentNode: stripHtml(get(['currentnodespan'])) || stringify(get(['currentnode'])),
+        zbr: stringify(get(['zbr'])),
+        wbr: stringify(get(['wbr'])),
+        docAbstract: stripHtml(get(['docabstractspan'])) || stringify(get(['docabstract'])),
+        deadline: stripHtml(get(['deadlinespan'])) || stringify(get(['deadline'])),
+        openDate: stripHtml(get(['opendatespan'])) || stringify(get(['opendate'])),
+        receiveDate: stripHtml(get(['receivedatespan'])) || stringify(get(['receivedate'])),
+        operateDate: stripHtml(get(['operatedatespan'])) || stringify(get(['operatedate'])),
+        workflowId: stringify(get(['workflowid', 'randomField0'])),
+        raw: row,
+    };
+}
+/**
+ * 公文待办/待阅计数。POST /api/odoc/odocTodoList/getTodoCount。
+ * - view=false（默认）：待办计数（iscomplete=0）
+ * - view=true：待阅计数（isview=0）
+ * 返回 datalist：[{officalType, title, count}]（发文/收文/签报）。
+ */
+export async function getOdocTodoCount(cfg, opts = {}) {
+    const api = await createApiFromProfile(cfg);
+    const body = opts.view
+        ? { isview: '0', isNew: 'false' }
+        : { iscomplete: '0', isNew: 'false' };
+    const r = await api.post('/api/odoc/odocTodoList/getTodoCount', body);
+    const j = r.json || {};
+    const arr = pickByPaths(j, ['datalist', 'data.datalist']) ?? [];
+    const items = (Array.isArray(arr) ? arr : [])
+        .map((d) => ({
+        officalType: stringify(d?.officalType) ?? '',
+        title: stringify(d?.title) ?? '',
+        count: typeof d?.count === 'number' ? d.count : Number(d?.count ?? 0),
+    }))
+        .filter((it) => it.title);
+    return { view: !!opts.view, items, raw: j };
+}
+/**
+ * 发文/收文流程列表。POST /api/odoc/odocCenter/createOfficalList。
+ * - officalType=1（默认）：发文拟稿
+ * - officalType=2：收文登记
+ * 返回 datas[{typeName, id, wfCount, wfbeans[]}]，结构同 create 列表，
+ * 故"新建公文"可复用 create start（wfstart.ts）的发起链路。
+ */
+export async function listOdocCreate(cfg, opts = {}) {
+    const api = await createApiFromProfile(cfg);
+    const officalType = opts.officalType ?? '1';
+    const r = await api.post('/api/odoc/odocCenter/createOfficalList', { officalType });
+    const j = r.json || {};
+    const arr = pickByPaths(j, ['datas', 'data.datas']) ?? [];
+    const toplabel = stringify(pickByPaths(j, ['createwflabels.toplabel']));
+    const categories = (Array.isArray(arr) ? arr : [])
+        .map((d) => ({
+        id: stringify(d?.id),
+        name: stringify(d?.typeName),
+        wfCount: typeof d?.wfCount === 'number' ? d.wfCount : Number(d?.wfCount ?? 0),
+        workflows: (Array.isArray(d?.wfbeans) ? d.wfbeans : [])
+            .map((w) => ({
+            id: stringify(w?.id),
+            name: stringify(w?.name),
+            typeId: stringify(w?.typeId),
+            spell: stringify(w?.spell),
+            letter: stringify(w?.letter),
+        }))
+            .filter((w) => w.id || w.name),
+    }))
+        .filter((c) => c.workflows.length > 0);
+    return { officalType, toplabel, categories, raw: j };
+}
+function stringify(v) {
+    if (v === undefined || v === null || v === '')
+        return undefined;
+    return String(v);
+}

package/dist/pageopen.js

@@ -0,0 +1,29 @@
+import { endpointFor } from './config.js';
+
+const PAGE_MAP = {
+    center: '/wui/index.html#/main/workflow/index',
+    todo: '/wui/index.html#/main/workflow/doing',
+    done: '/wui/index.html#/main/workflow/done',
+    mine: '/wui/index.html#/main/workflow/mine',
+    draft: '/wui/index.html#/main/workflow/draft',
+    all: '/wui/index.html#/main/workflow/all',
+    newflow: '/spa/workflow/static4form/index.html#/main/workflow/req?iscreate=1',
+    monitor: '/wui/index.html#/main/workflow/monitor',
+};
+
+export function pageUrl(cfg, page, requestId) {
+    const base = endpointFor(cfg).baseUrl.replace(/\/+$/, '');
+    if (page === 'view') {
+        if (!requestId)
+            throw new Error('打开流程详情需要 --request-id <请求 ID>。');
+        return `${base}/spa/workflow/static4form/index.html#/main/workflow/req?iscreate=0&requestid=${encodeURIComponent(requestId)}`;
+    }
+    const path = PAGE_MAP[page];
+    if (!path)
+        throw new Error(`不支持的页面“${page}”。可选：${Object.keys(PAGE_MAP).join('、')}、view。`);
+    return base + path;
+}
+
+export function availablePages() {
+    return [...Object.keys(PAGE_MAP), 'view'];
+}

package/dist/parse.js

@@ -0,0 +1,159 @@
+/**
+ * E9 ec/dev/table/datas 响应解析。
+ *
+ * 实跑确认的结构：
+ *   - splitPageKey 响应里 dataKey 在 `sessionkey` 字段（小写）。
+ *   - datas 响应顶层含 `columns`（列定义，dataIndex/title/dbField）和 `datas`（行数组，50 行/页）。
+ *   - 每行同时有原始字段（如 creater="1" 是 id）和 `<field>span` 渲染字段（含可读名称 / HTML）。
+ *     可读值优先取 span 字段并去 HTML 标签。
+ *   - counts 响应 `{"count":N,"status":true}`。
+ */
+/** 从一组候选路径里取第一个非空值，路径用点号分隔、支持下标。 */
+export function pickByPaths(obj, paths) {
+    if (obj == null)
+        return undefined;
+    for (const p of paths) {
+        const v = getPath(obj, p);
+        if (v !== undefined && v !== null && v !== '')
+            return v;
+    }
+    return undefined;
+}
+function getPath(obj, path) {
+    const tokens = path.replace(/\[(\d+)\]/g, '.$1').split('.').filter((t) => t.length > 0);
+    let cur = obj;
+    for (const t of tokens) {
+        if (cur == null)
+            return undefined;
+        cur = cur[t];
+    }
+    return cur;
+}
+/** 从 getWfListParams / splitPageKey 响应里提取 dataKey（sessionkey）。 */
+export function extractDataKey(resp) {
+    const v = pickByPaths(resp, [
+        'sessionkey',
+        'data.sessionkey',
+        'sessionKey',
+        'data.sessionKey',
+        'dataKey',
+        'data.dataKey',
+        'data',
+    ]);
+    if (typeof v === 'string' && v.trim())
+        return v.trim();
+    return scanForDataKey(resp);
+}
+function scanForDataKey(obj) {
+    if (obj == null)
+        return null;
+    if (typeof obj === 'string') {
+        if (/^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}_[A-F0-9]{32}$/.test(obj)) {
+            return obj;
+        }
+        return null;
+    }
+    if (Array.isArray(obj)) {
+        for (const it of obj) {
+            const r = scanForDataKey(it);
+            if (r)
+                return r;
+        }
+        return null;
+    }
+    if (typeof obj === 'object') {
+        for (const v of Object.values(obj)) {
+            const r = scanForDataKey(v);
+            if (r)
+                return r;
+        }
+    }
+    return null;
+}
+/** 提取列定义（可用于把行字段映射到中文标题）。 */
+export function extractColumns(datasResp) {
+    const cols = pickByPaths(datasResp, ['columns', 'data.columns', 'result.columns']);
+    if (!Array.isArray(cols))
+        return [];
+    return cols.map((c) => ({ dataIndex: c?.dataIndex, title: c?.title, dbField: c?.dbField })).filter((c) => c.dataIndex);
+}
+/** 从 datas 响应里提取行数组。 */
+export function extractRows(datasResp) {
+    const arr = pickByPaths(datasResp, ['datas', 'data.datas', 'rows', 'data.rows', 'data', 'list']);
+    if (Array.isArray(arr))
+        return arr;
+    if (arr && typeof arr === 'object' && !Array.isArray(arr)) {
+        const vals = Object.values(arr).filter((v) => v && typeof v === 'object');
+        if (vals.length)
+            return vals;
+    }
+    return [];
+}
+/** 从 counts 或 datas 响应里提取总数。 */
+export function extractTotal(resp) {
+    const v = pickByPaths(resp, ['count', 'data.count', 'total', 'data.total', 'totalCount', 'data.totalCount', 'result.count']);
+    if (typeof v === 'number')
+        return v;
+    if (typeof v === 'string' && /^\d+$/.test(v))
+        return parseInt(v, 10);
+    return null;
+}
+/** 去掉 HTML 标签与常见实体，得到纯文本。 */
+export function stripHtml(s) {
+    if (s == null)
+        return '';
+    let str = String(s);
+    str = str.replace(/<[^>]*>/g, '');
+    str = str
+        .replace(/&nbsp;/g, ' ')
+        .replace(/&amp;/g, '&')
+        .replace(/&lt;/g, '<')
+        .replace(/&gt;/g, '>')
+        .replace(/&quot;/g, '"')
+        .replace(/&#39;/g, "'");
+    return str.trim();
+}
+const LEVEL_LABEL = {
+    '0': '一般',
+    '1': '重要',
+    '2': '紧急',
+    '3': '紧急',
+};
+/**
+ * 把一行数据映射成标准待办项。
+ * 可读值优先取 `<field>span`（去 HTML），其次原始字段。
+ */
+export function normalizeRow(row, columns) {
+    if (!row || typeof row !== 'object')
+        return {};
+    void columns; // 列定义目前仅用于 extractColumns；字段名已稳定，直接按已知 dataIndex 取
+    const get = (keys) => pickByPaths(row, keys);
+    const spanOr = (dataIndex, extraKeys = []) => stripHtml(get([`${dataIndex}span`, dataIndex, ...extraKeys]));
+    // requestnamespan 是 OA 已按管理员模板渲染的可见标题；原始 requestname 仅作回退。
+    const rawTitle = stringify(get(['requestname', 'requestName']));
+    const title = stripHtml(get(['requestnamespan'])) || rawTitle;
+    const levelRaw = stringify(get(['requestlevel', 'level'])) ?? '';
+    const level = levelRaw ? (LEVEL_LABEL[levelRaw] ?? levelRaw) : undefined;
+    const creatorIdRaw = get(['createrid', 'creatorid', 'creatorId', 'creater']);
+    const creatorId = /^\d+$/.test(String(creatorIdRaw ?? '').trim()) ? String(creatorIdRaw).trim() : undefined;
+    return {
+        requestId: stringify(get(['requestid', 'requestId', 'id', 'randomField2', 'randomFieldId'])),
+        title,
+        rawTitle,
+        creator: spanOr('creater', ['createrName', 'creator', 'createName']),
+        creatorId,
+        createdate: spanOr('createdate', ['createdatespan', 'createDate']),
+        receivedate: spanOr('receivedate', ['receivedate', 'recieveDate']),
+        node: stripHtml(get(['currentnodeidspan', 'currentnodespan'])) || stringify(get(['currentnodeid', 'nodeName', 'nodename'])),
+        status: stripHtml(get(['statusspan'])) || stringify(get(['status'])),
+        level,
+        requestmark: stringify(get(['requestmark'])),
+        currentOperator: spanOr('unoperators', ['unoperatorspan', 'currentoperator', 'operator']),
+        raw: row,
+    };
+}
+function stringify(v) {
+    if (v === undefined || v === null || v === '')
+        return undefined;
+    return String(v);
+}