# workspace_view.dspy - 查看文件:txt/md 用 MdWidget 渲染,其他文档下载查看 import os import json as _json from urllib.parse import quote file_id = (params_kw or {}).get('id', '').strip() uid = await get_user() if not uid: uid = 'user-01' dbname = get_module_dbname('pipeline-sdlc') async with DBPools().sqlorContext(dbname) as sor: ws_dir, _ = await get_workspace_dir(sor, uid) if not file_id or file_id == '__root__': return {"widgettype": "Message", "options": {"title": "查看失败", "message": "未指定文件"}} full_path = ws_dir + '/' + file_id if ws_dir else file_id # 路径穿越校验 real_ws = os.path.realpath(ws_dir) real_full = os.path.realpath(full_path) if not real_full.startswith(real_ws + os.sep): return {"widgettype": "Message", "options": {"title": "错误", "message": "非法路径"}} if not os.path.isfile(full_path): return {"widgettype": "Message", "options": {"title": "查看失败", "message": "文件不存在: " + file_id}} name = os.path.basename(full_path) ext = os.path.splitext(name)[1].lower() file_url = entire_url("/pipeline-sdlc/api/workspace_file.dspy") + "?id=" + quote(file_id) # txt/md → VScrollPanel 包裹 MdWidget 渲染(可滚动,长文档不截断) md_exts = ['.md', '.txt'] if ext in md_exts: return { "widgettype": "PopupWindow", "options": {"title": name + " (查看)", "width": "85%", "height": "85%", "auto_open": True, "resizable": True}, "subwidgets": [{ "widgettype": "VScrollPanel", "options": {"css": "filler", "width": "100%", "height": "100%"}, "subwidgets": [{ "widgettype": "MdWidget", "options": {"md_url": file_url, "width": "100%"} }] }] } # 其他 → 下载查看 download_url = file_url + "&download=1" download_script = ( "window.open(" + _json.dumps(download_url) + ",'_blank');" ) return { "widgettype": "PopupWindow", "options": {"title": name, "cwidth": 34, "cheight": 12, "auto_open": True, "resizable": True}, "subwidgets": [ {"widgettype": "Text", "options": {"text": "该文件类型需下载后查看", "cfontsize": 1, "padding": "16px", "halign": "middle"}}, {"widgettype": "Button", "options": {"label": "下载文件", "css": "primary"}, "binds": [{"wid": "self", "event": "click", "actiontype": "script", "target": "self", "script": download_script}]} ] }