b02ee5f345
与 f0c4c10(upload_url) 同族缺陷全量排查修复,共5处:
1. workspace_view.dspy: md_url(file_url)只拼session_id漏pipeline_id→
通用助手(_generic无session_id)下MdWidget二次请求workspace_file.dspy
回退全局项目指针→在别产线空间找文件→弹'文件不存在: projects/调研1/docs/xxx.md'
(2026-09-17实测复现+修复验证)
2. workspace_open.dspy: file_url/ws_url(xterm)/univer_url三处同病灶,统一_fq_s双透传
3. workspace_edit.xterm: 根本不读pipeline_id且用无隔离get_project_dir→
改get_project_dir_pl+_generic锁_general/{uid}(与9个子端点对齐)
4. office_read.dspy/office_save.dspy: 读了pipeline_id但缺_generic分支→
通用助手在线编辑docx报'未指定文件或无工作空间',补齐分支
univer-office前端main.ts配套透传pipeline_id(独立仓库另行部署)
76 lines
2.7 KiB
Plaintext
76 lines
2.7 KiB
Plaintext
# office_save.dspy - univer-office 编辑后保存：IDocumentData -> docx 写回工作空间
|
||
import os
|
||
import json as _json
|
||
import aiohttp
|
||
|
||
file_id = (params_kw or {}).get('file', '').strip()
|
||
docdata_str = (params_kw or {}).get('documentData', '') or ''
|
||
|
||
uid = await get_user()
|
||
if not uid:
|
||
uid = 'user-01'
|
||
|
||
session_id = (params_kw or {}).get('session_id', '') or ''
|
||
pipeline_id = (params_kw or {}).get('pipeline_id', '') or ''
|
||
|
||
dbname = get_module_dbname('pipeline-sdlc')
|
||
|
||
async with DBPools().sqlorContext(dbname) as sor:
|
||
# 产线隔离：跨产线项目视为无项目（与弹窗入口一致，防绕过）
|
||
project_dir, _ = await get_project_dir_pl(sor, uid, session_id, pipeline_id)
|
||
space_dir, _ = await get_space_dir(sor, uid, session_id)
|
||
# 通用会话（pipeline_id=_generic）：锁用户专属目录 _general/{uid}
|
||
# （2026-09-17 补齐：此前缺该分支，通用助手在线编辑 docx 保存失败）
|
||
if pipeline_id == '_generic':
|
||
_gd = generic_workspace_dir(uid)
|
||
os.makedirs(_gd, exist_ok=True)
|
||
project_dir = _gd
|
||
space_dir = _gd
|
||
|
||
if not file_id or not space_dir:
|
||
return {"success": False, "error": "未指定文件或无工作空间"}
|
||
|
||
if not docdata_str:
|
||
return {"success": False, "error": "缺少文档数据"}
|
||
|
||
try:
|
||
documentData = _json.loads(docdata_str)
|
||
except Exception as e:
|
||
return {"success": False, "error": f"文档数据解析失败: {e}"}
|
||
|
||
full_path = resolve_workspace_path(project_dir, space_dir, file_id)
|
||
|
||
# 路径穿越校验
|
||
real_ws = os.path.realpath(space_dir)
|
||
real_full = os.path.realpath(full_path)
|
||
if not real_full.startswith(real_ws + os.sep):
|
||
return {"success": False, "error": "非法路径"}
|
||
|
||
# 只允许覆盖已存在的 office 文件（防任意写入）
|
||
if not os.path.isfile(full_path):
|
||
return {"success": False, "error": "目标文件不存在"}
|
||
|
||
title = os.path.basename(full_path)
|
||
|
||
# 调 univer-office 生成 docx（IDocumentData -> docx，保留格式）
|
||
try:
|
||
timeout = aiohttp.ClientTimeout(total=120)
|
||
async with aiohttp.ClientSession(timeout=timeout) as session:
|
||
async with session.post(
|
||
'http://127.0.0.1:19091/convert/doc-data-to-docx',
|
||
json={'documentData': documentData, 'title': title},
|
||
) as resp:
|
||
if resp.status != 200:
|
||
return {"success": False, "error": f"导出失败 HTTP {resp.status}"}
|
||
docx_bytes = await resp.read()
|
||
except Exception as e:
|
||
return {"success": False, "error": str(e)}
|
||
|
||
# 写回工作空间
|
||
try:
|
||
with open(full_path, 'wb') as f:
|
||
f.write(docx_bytes)
|
||
return {"success": True, "bytes": len(docx_bytes)}
|
||
except Exception as e:
|
||
return {"success": False, "error": str(e)}
|