weaver-work-cli 0.1.32 → 0.1.33

package/dist/shortcuts/cowork/operations/shared.js

@@ -0,0 +1,215 @@
+import { coworkConfirmationError, coworkValidationError } from '../errors.js';
+/** 原型污染防护：输入 JSON 不得携带这些键。 */
+const FORBIDDEN_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+export function asObject(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw coworkValidationError('input_not_object', '输入必须是 JSON 对象');
+    }
+    return value;
+}
+export function assertNoForbiddenKeys(input) {
+    for (const key of Object.keys(input)) {
+        if (FORBIDDEN_KEYS.has(key)) {
+            throw coworkValidationError('forbidden_key', `输入包含非法字段：${key}`);
+        }
+    }
+}
+/** 协作所有 ID 都是 18 位大整数，必须以字符串形式保留（JSON number 会丢精度）。 */
+export function toId(value, field) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    if (typeof value === 'number' && !Number.isSafeInteger(value)) {
+        throw coworkValidationError('id_precision', `${field} 超出安全整数范围，请以字符串传入`);
+    }
+    const text = String(value).trim();
+    if (!/^\d+$/.test(text)) {
+        throw coworkValidationError('id_invalid', `${field} 必须是数字 ID：${text}`);
+    }
+    return text;
+}
+export function toIdList(value, field) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (!Array.isArray(value))
+        throw coworkValidationError('id_list_invalid', `${field} 必须是 ID 数组`);
+    return value.map((item, index) => {
+        const id = toId(item, `${field}[${index}]`);
+        if (!id)
+            throw coworkValidationError('id_list_invalid', `${field}[${index}] 不能为空`);
+        return id;
+    });
+}
+export function toPositiveInt(value, field) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    const numeric = Number(value);
+    if (!Number.isFinite(numeric)) {
+        throw coworkValidationError('number_invalid', `${field} 必须是数字`);
+    }
+    const truncated = Math.trunc(numeric);
+    if (truncated !== numeric || truncated <= 0) {
+        throw coworkValidationError('number_invalid', `${field} 必须是正整数`);
+    }
+    return truncated;
+}
+export function compact(body) {
+    for (const key of Object.keys(body)) {
+        if (body[key] === undefined)
+            delete body[key];
+    }
+    return body;
+}
+export function assertEnum(value, allowed, field) {
+    const text = typeof value === 'string' ? value : String(value);
+    if (!allowed.includes(text)) {
+        throw coworkValidationError('enum_invalid', `${field} 取值必须是 ${allowed.join(' / ')} 之一`);
+    }
+    return text;
+}
+export function assertString(value, field, maxLength = 500) {
+    if (typeof value !== 'string' || !value.trim()) {
+        throw coworkValidationError('string_invalid', `${field} 必须是非空字符串`);
+    }
+    const text = value.trim();
+    if (text.length > maxLength) {
+        throw coworkValidationError('string_too_long', `${field} 超过 ${maxLength} 字符上限`);
+    }
+    return text;
+}
+export function assertDateTime(value, field) {
+    const text = assertString(value, field, 32);
+    if (!/^\d{4}-\d{2}-\d{2} \d{2}:\d{2}$/.test(text)) {
+        throw coworkValidationError('datetime_invalid', `${field} 格式必须是 YYYY-MM-DD HH:mm`);
+    }
+    return text;
+}
+export function unwrapData(response) {
+    if (!response || typeof response !== 'object')
+        return response;
+    return response.data;
+}
+/** 协作列表的 data 形如 { pageSize, total, current, pageUid, columns[], data[] }。 */
+export function normalizePaged(response) {
+    const data = unwrapData(response);
+    const page = {};
+    const candidates = [data, response];
+    for (const source of candidates) {
+        if (!source || typeof source !== 'object')
+            continue;
+        for (const key of ['current', 'pageSize', 'total', 'pageUid', 'tableType']) {
+            if (source[key] !== undefined && page[key] === undefined)
+                page[key] = source[key];
+        }
+    }
+    return { data, page };
+}
+/** 列表归一化：协作列表把行放在 data.data，个别接口用 records/list。 */
+export function normalizeList(response) {
+    const { data, page } = normalizePaged(response);
+    const payload = data;
+    const items = Array.isArray(payload?.data) ? payload.data
+        : Array.isArray(payload?.records) ? payload.records
+            : Array.isArray(payload?.list) ? payload.list
+                : Array.isArray(payload) ? payload
+                    : [];
+    return { data: items, page };
+}
+/** 协作正文（itemContent / clobContent）要求 Base64 编码的 HTML。 */
+export function toBase64Html(text) {
+    return Buffer.from(String(text), 'utf8').toString('base64');
+}
+export function requireConfirm(args, action) {
+    if (args.confirm !== true) {
+        throw coworkConfirmationError(action, { hint: '重新调用时传入 confirm=true 与 prepare 返回的 continuation' });
+    }
+}
+/** 校验 continuation 与当前登录上下文一致，避免切换租户/账号后误执行写操作。 */
+export async function verifyLease(args, action, env) {
+    const lease = await env.continuation.verify(args.continuation, action);
+    const session = await env.host.getSession();
+    if (lease.baseUrl !== session.baseUrl || lease.profile !== session.profile || lease.userId !== session.userId) {
+        throw coworkValidationError('context_mismatch', '确认上下文已变化（租户或登录账号不同），请重新执行 prepare');
+    }
+    return lease;
+}
+/**
+ * 协作主列表族（main / attention / collect / mineDiscuss / mineComment / mineItem / related /
+ * apply / approve / log / quit）的通用请求体。
+ * 文档给出的固定默认值：itemStatus=1（进行中）、hidden=0（不含隐藏）、type=and。
+ */
+export function buildListBody(args, scope) {
+    // 交流审批表口径最窄：只有分页 + 组合方式 + dateType（脚本实测）。
+    if (scope === 'discussApprove') {
+        return compact({
+            current: toPositiveInt(args.current, 'current') ?? 1,
+            type: typeof args.type === 'string' && args.type ? args.type : 'and',
+            dateType: typeof args.dateType === 'string' ? args.dateType : '',
+            ...(toPositiveInt(args.pageSize, 'pageSize') !== undefined
+                ? { pageSize: toPositiveInt(args.pageSize, 'pageSize') }
+                : {}),
+        });
+    }
+    const body = {
+        current: toPositiveInt(args.current, 'current') ?? 1,
+        type: typeof args.type === 'string' && args.type ? args.type : 'and',
+    };
+    const paging = toPositiveInt(args.pageSize, 'pageSize');
+    if (paging !== undefined)
+        body.pageSize = paging;
+    // 条件匹配字段：值 + 匹配模式（in 精确 / bl 模糊），与页面高级搜索一致。
+    const conditions = [
+        ['itemName', 'itemNameCondition'],
+        ['sectionId', 'sectionCondition'],
+        ['principal', 'principalCondition'],
+        ['creator', 'creatorCondition'],
+        ['tagId', 'tagCondition'],
+        ['tagCommonId', 'tagCommonCondition'],
+        ['applyer', 'applyerCondition'],
+        ['applyerDept', 'applyerDeptCondition'],
+        ['approver', 'approverCondition'],
+        ['applyStatus', 'applyStatusCondition'],
+    ];
+    for (const [valueField, conditionField] of conditions) {
+        if (args[valueField] === undefined)
+            continue;
+        const condition = typeof args[conditionField] === 'string' && args[conditionField]
+            ? String(args[conditionField])
+            : 'in';
+        body[conditionField] = condition;
+        body[valueField] = String(args[valueField]);
+    }
+    // 状态/隐藏开关只对事项型列表生效（申请/日志/退出列表没有这两个字段）。
+    if (scope === 'main' || scope === 'attention' || scope === 'mineItem' || scope === 'apply' || scope === 'itemApprove') {
+        body.itemStatus = args.itemStatus === undefined ? '1' : String(args.itemStatus);
+        body.hidden = args.hidden === undefined ? '0' : String(args.hidden);
+    }
+    // 事项审批表的固定条件（脚本实测口径：主题精确 + 版块/负责人/创建人模糊占位）。
+    if (scope === 'itemApprove') {
+        body.itemNameCondition = body.itemNameCondition ?? 'in';
+        body.sectionCondition = body.sectionCondition ?? 'bl';
+        body.principalCondition = body.principalCondition ?? 'bl';
+        body.creatorCondition = body.creatorCondition ?? 'bl';
+    }
+    // 交流审批表已在上方单独返回，此处只剩事项型列表。
+    if (scope === 'main' && typeof args.creatorSearch === 'string' && args.creatorSearch) {
+        body.creatorSearch = args.creatorSearch;
+    }
+    if (scope === 'collect') {
+        body.orderBy = typeof args.orderBy === 'string' && args.orderBy ? args.orderBy : 'collectTime';
+        body.sortOrder = typeof args.sortOrder === 'string' && args.sortOrder ? args.sortOrder : 'desc';
+        if (args.quickSearchDatas && typeof args.quickSearchDatas === 'object') {
+            body.quickSearchDatas = args.quickSearchDatas;
+        }
+    }
+    if (scope === 'mineDiscuss' || scope === 'mineComment') {
+        if (typeof args.tabKey === 'string' && args.tabKey)
+            body.tabKey = args.tabKey;
+    }
+    if (scope === 'mineItem') {
+        body.tabKey = typeof args.tabKey === 'string' && args.tabKey ? args.tabKey : 'mineItemCreate';
+    }
+    if (scope === 'related') {
+        body.discussFrom = typeof args.discussFrom === 'string' && args.discussFrom ? args.discussFrom : 'relatedMenu';
+    }
+    return compact(body);
+}

package/dist/shortcuts/cowork/operations/types.js

@@ -0,0 +1,24 @@
+export const READ = 'read';
+export const READ_BEFORE_WRITE = 'read-before-write';
+export const WRITE = 'write';
+export function coworkSuccess(action, data, meta) {
+    const payload = { ok: true, action, data };
+    if (meta && Object.keys(meta).length > 0)
+        payload.meta = meta;
+    return payload;
+}
+/** 构造「对象类型 + 严格禁止额外字段」的 JSON Schema。 */
+export function schemaOf(properties, options = {}) {
+    return {
+        type: 'object',
+        additionalProperties: false,
+        properties,
+        ...(options.required?.length ? { required: options.required } : {}),
+        ...(options.description ? { description: options.description } : {}),
+    };
+}
+export const SCHEMA_ID = { oneOf: [{ type: 'integer' }, { type: 'string', pattern: '^\\d+$' }] };
+export const SCHEMA_ID_LIST = { type: 'array', items: SCHEMA_ID };
+export const SCHEMA_PAGE_CURRENT = { type: 'integer', minimum: 1 };
+export const SCHEMA_PAGE_SIZE = { type: 'integer', minimum: 1, maximum: 200 };
+export const SCHEMA_DATETIME = { type: 'string', pattern: '^\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}$' };

package/dist/shortcuts/cowork/operations.js

@@ -0,0 +1,19 @@
+import { getCoworkOperation } from './operations/registry.js';
+import { assertNoForbiddenKeys, asObject } from './operations/shared.js';
+export async function executeCoworkOperation(operation, rawInput, context) {
+    const definition = getCoworkOperation(operation);
+    const input = asObject(rawInput);
+    assertNoForbiddenKeys(input);
+    const host = {
+        request(request) {
+            return context.host.request({
+                ...request,
+                operation: request.operation || operation,
+            });
+        },
+        getSession() {
+            return context.host.getSession();
+        },
+    };
+    return definition.handler(input, { ...context, host });
+}

package/dist/shortcuts/ehr/host.js

@@ -116,7 +116,10 @@ function mapRuntimeNetworkError(error) {
 export function createEhrHost(ctx, dependencies = {}) {
     let e10Session = null;
     let sessionContext = null;
-    const requireSession = dependencies.requireSession || requireE10Session;
+    // 与 workflow 模块同口径（2026-10-29 实测）：auth 文件里已有登录时落盘的 userId，
+    // 业务命令不需要 teamsCheck 的登录人信息富化 ⇒ 跳过它，省掉每次调用一次串行 HTTPS 往返（实测约 250ms）。
+    const requireSession = dependencies.requireSession
+        || ((innerCtx) => requireE10Session(innerCtx, { skipProfileEnrichment: true }));
     async function ensureSession() {
         if (!e10Session) {
             e10Session = await requireSession(ctx);