AI_skill/单点_待办skill/kdshrpmsg/weaver-baoy-plan.md

BaoYPro — Weaver E10 接收统一待办数据（已实现骨架）

Source doc: 接收统一待办数据.docx
Field extract: weaver-receive-todo-api.md
SSO deep link: skill kdshrsso Option B-qy (/qy/auth/weaver/app.do).

Target: Kingdee SHR → Weaver/Fanwei E10 统一待办中心（报业 BaoYPro）。

New project / new channel: complete Agent intake in SKILL.md before coding.

Endpoint (E10 OpenAPI)

Private E10 often needs /papi/openapi prefix (root /oauth2/authorize may hit portal HTML):

POST {host}/papi/openapi/api/open_intunifytodo/server_engine/receiveRequestInfo?access_token={token}

Auth:

1. corpid / app_key / app_secret (开放平台，与 SSO oauth apps 分开)
2. authorize → code → access_token (~2h)
3. Success: message.errcode == "200" and data.operResult == "1"

Upsert / concurrency

Same syscode + flowid + workflowname(workflowcode) + receiver → update; else insert.
Update compares receivets (ms): newer wins.

isremark / viewtype

isremark	Meaning	SHR SPI
0	待办	addMessage
2	已办	addCompletedMessage (task done)
4	办结	Flow end (requestStatus often 3)
8	抄送/待阅	updateMessages
-1	删除	removeMessage

viewtype	Meaning
0	未读
1	已读

Field map (highlights)

Weaver	SHR
syscode	e.g. s-HRCloud (后台注册，<=10)
flowid	procInstId（不要用 assignId）
receiver	工号 / PERSON_NUMBER 规则
pcurl / appurl	相对路径 only（禁止 http/https 开头）
receivets	毫秒时间戳，乱序必传

pcurl 拼法（BaoYPro 已落地）

Weaver 禁止绝对 URL。SHR 推相对路径，由泛微外链前缀补全域名。

/{weaver.sso.entryPath}?appId={weaver.sso.appId}&redirect={encode(approveAbs)}

Defaults:

• weaver.sso.entryPath=/qy/auth/weaver/app.do
• approveAbs = shrServerName + path.pc.approve + ?AssignmentId=&billID=

Code: WeaverTodoSupport.buildRelativePcUrl + WeaverTodoConfig.

Do not use Unified /qy/auth/app + UA for todo links (PC browser from Weaver fails UA detect).

Config strategy (multi-platform later)

File	Scope
baoye/weaverTodoConfig.properties	Keep name — Weaver OpenAPI push only
baoye/dingtalkTodoConfig.properties	Future — separate credentials + dingtalk.sso.entryPath
baoye/feishuTodoConfig.properties	Future
integration-config-*.json	SSO OAuth only（kdshrsso），not OpenAPI push secrets

Do not rename weaverTodoConfig into a mega shared file for BY. Shared ideas: approve path builder + SSO entry template convention; each channel own config + push client.

Hot-reload: WeaverTodoConfig reloads on file mtime (WEAVER_TODO_CONFIG_PATH override optional).

Template

weaver.todo.enabled=true
weaver.openapi.host=http://{e10-host}:{port}
weaver.openapi.authorizePath=/papi/openapi/oauth2/authorize
weaver.openapi.accessTokenPath=/papi/openapi/oauth2/access_token
weaver.openapi.receivePath=/papi/openapi/api/open_intunifytodo/server_engine/receiveRequestInfo
weaver.corpid=
weaver.app_key=
weaver.app_secret=
weaver.syscode=s-HRCloud
weaver.shrServerName=http://{shr-host}:{port}
weaver.sso.appId={integration oauth appId}
weaver.sso.entryPath=/qy/auth/weaver/app.do
weaver.path.pc.approve=/easweb/webviews/workflow/transferApprove.jsp
weaver.wf.delayMs=3000

SPI (BaoYPro)

Package: com.kingdee.eas.custom.weaverTodo
Facade: WeaverMessageWebServiceDao → WeaverTodoMessageServer / ToBeRead path as implemented.

addMessage            → isremark=0
addCompletedMessage   → isremark=2; flow end → 4
removeMessage         → isremark=-1
updateMessages        → isremark=8 (+ viewtype)

CallLog: empty requestparams often means exception path (e.g. authorize HTTP 502) — check server logs, not only CallLog.

Checklist BaoYPro

- [x] OpenAPI token + receiveRequestInfo
- [x] WeaverMessageWebServiceDao + relative pcurl via weaver entryPath
- [x] flowid=procInstId; receivets; sanitize title
- [x] weaver.sso.entryPath configurable
- [ ] 泛微后台：异构系统 / IP 白名单 / 流程类型开关
- [ ] SPI 产品注册 + deploy jar/properties to EAS_HOME
- [ ] E2E: 0→2→4; 待阅; delete -1
- [ ] Compensation via CallLog (optional)
- [ ] 切生产：见项目 docs/integration/go-live-prod.html + skill Go-live

Diff vs YHPro PORTAL-*

Item	YHPro	BaoY Weaver E10
APIs	Many PORTAL URLs	One receiveRequestInfo (+ oauth)
Auth	HTTP Basic	OAuth2 → access_token
Links	Absolute HTTPS OK	Relative path only
SSO wrap	/shr/api/oAToSHR?redirect=	/qy/auth/weaver/app.do?appId&redirect=
Config	receiveOAConfig	weaverTodoConfig (per platform later)

Future DingTalk / Feishu todos

1. New *TodoConfig.properties + push client (different API — not Weaver receive)
2. Deep link = that platform SSO entry + same approve redirect
3. Fan-out from SPI / router by enabled flags — do not overload weaverTodoConfig