[v2.1] C 应用内审批前端：flow-approval 共享组件四件套(List/Card/RecordDrawer/TaskEmbed)+approvalAdapter，NoticeApproval/NoticeDetails 换组件化实现，完整办理走去壳任务页(embed=1 由组件补)

src/components/flow-approval/FlowApprovalCard.vue

@@ -0,0 +1,303 @@
+<template>
+    <div class="flow-card-region">
+        <!-- 不可达：本地状态照常展示，动作明确提示稍后重试（绝不伪装成功，也不静默变只读） -->
+        <Alert v-if="unavailable" type="warning" show-icon class="flow-alert">
+            流程中心暂时不可达，审批动作稍后重试。
+            <a class="operating-link" @click="load">重新加载</a>
+        </Alert>
+
+        <!-- 首次加载：data 还没回来时不得渲染成"尚未进入流程"（空态与未加载是两回事，误报会误导审批人） -->
+        <div v-else-if="loading" class="flow-muted">审批状态加载中…</div>
+
+        <!-- NO_INSTANCE：未进入流程 -->
+        <div v-else-if="state === 'NO_INSTANCE'" class="flow-muted">该业务尚未进入审批流程。</div>
+
+        <div v-else class="flow-body">
+            <div class="flow-head">
+                <Tag :color="statusTag">{{ statusText }}</Tag>
+                <span v-if="currentNodeText" class="flow-nodes">当前节点：{{ currentNodeText }}</span>
+                <span v-if="lastTraceText" class="flow-trace">最近轨迹：{{ lastTraceText }}</span>
+            </div>
+
+            <!-- ONE_TASK：当前人可办理（readonly 视角即使有待办也不给动作） -->
+            <div v-if="state === 'ONE_TASK' && !readonly" class="flow-actions">
+                <Button size="small" type="primary" :loading="acting" @click="openApprove">通过</Button>
+                <Button size="small" :loading="acting" @click="openReject">驳回</Button>
+                <Button size="small" @click="emitTask">完整办理</Button>
+            </div>
+
+            <!-- MULTI_TASK：不猜选，引导逐条办理 -->
+            <div v-else-if="state === 'MULTI_TASK' && !readonly" class="flow-multi">
+                <span>你在本单据上有 <b>{{ tasks.length }}</b> 个待办，请逐条处理。</span>
+                <Button size="small" @click="emitTask">逐条办理</Button>
+            </div>
+            <div v-else-if="state === 'MULTI_TASK'" class="flow-multi">
+                <span>本单据有多个待办。</span>
+            </div>
+
+            <!-- NO_TASK / TERMINAL：无动作区，只保留下方的"查看审批记录" -->
+
+            <div class="flow-links">
+                <a class="operating-link" @click="$emit('open-record', bizId)">查看审批记录</a>
+            </div>
+        </div>
+
+        <!-- 通过：意见可选；多出口必须先选出口，不选不给提交 -->
+        <Modal v-model="approveVisible" title="通过审核" :loading="acting" @on-ok="doApprove" @on-cancel="reset">
+            <div class="flow-modal-row" v-if="chosenOutlets.length > 1">
+                <span class="flow-modal-label">办理去向：</span>
+                <Select v-model="chosenEdge" size="small" style="width: 260px" placeholder="请选择办理去向">
+                    <Option v-for="o in chosenOutlets" :key="o.name" :value="o.name" :label="o.name">
+                        {{ o.name }}（{{ o.toNodeName }}）
+                    </Option>
+                </Select>
+            </div>
+            <p class="flow-modal-tip">
+                通过「<b>{{ title || bizId }}</b>」
+                <template v-if="chosenOutlets.length > 1">，该节点有多个去向，必须选择其一</template>
+                <template v-else>（单去向，无需选择）</template>
+            </p>
+            <Input v-model="opinion" type="textarea" :rows="3" placeholder="办理意见（可选）" />
+        </Modal>
+
+        <!-- 驳回：意见必填 -->
+        <Modal v-model="rejectVisible" title="驳回审核" :loading="acting" @on-ok="doReject" @on-cancel="reset">
+            <p class="flow-modal-tip">驳回「<b>{{ title || bizId }}</b>」，必须填写意见：</p>
+            <Input v-model="opinion" type="textarea" :rows="3" placeholder="驳回意见（必填）" />
+        </Modal>
+    </div>
+</template>
+
+<script setup lang="ts">
+/**
+ * 业务详情审批卡片（方案 §4.3）。数据来源只有一个：`api.byBiz(bizId)`——
+ * 与列表共用同一个 taskId 口径，杜绝"卡片和列表算出两个待办"。
+ *
+ * 卡片只管**当前人**的动作：
+ * - 非待办人 / readonly / 终态 → 只读状态 + 查看记录，不出通过/驳回；
+ * - tasks>1（会签/并行分支）→ 不猜选，引导逐条办理；
+ * - outlets>1 → 通过弹窗必须选出口，未选不提交；
+ * - 动作成功后只刷新自己与通知父页，业务状态由 flow-center 回调推进，卡片不本地写状态。
+ */
+import { computed, onMounted, ref, watch } from "vue";
+import { Message } from "view-ui-plus";
+import type { ByBizResult, ByBizTask, FlowApprovalApi, TraceVo } from "./types";
+import { INSTANCE_STATUS_TAG, INSTANCE_STATUS_TEXT } from "./types";
+
+const props = withDefaults(
+    defineProps<{
+        api: FlowApprovalApi;
+        bizType: string;
+        bizId: string;
+        title?: string;
+        /** 外部已有进度时可传入，卡片不重复拉轨迹 */
+        trace?: TraceVo | null;
+        /** 提交人/管理员视角：即便有待办也不给动作 */
+        readonly?: boolean;
+    }>(),
+    { title: "", trace: null, readonly: false }
+);
+
+const emit = defineEmits<{
+    (e: "handled", payload: { taskId: number; action: string }): void;
+    (e: "open-record", bizId: string): void;
+    (e: "open-task", taskId: number): void;
+}>();
+
+const data = ref<ByBizResult | null>(null);
+const unavailable = ref(false);
+const acting = ref(false);
+const loading = ref(false);
+
+const approveVisible = ref(false);
+const rejectVisible = ref(false);
+const opinion = ref("");
+const chosenEdge = ref("");
+const targetTask = ref<ByBizTask | null>(null);
+
+const tasks = computed<ByBizTask[]>(() => data.value?.tasks || []);
+
+type CardState = "NO_INSTANCE" | "NO_TASK" | "ONE_TASK" | "MULTI_TASK" | "TERMINAL";
+
+/**
+ * 终态判定优先于"我有待办"：办件已完成/拒绝/撤回时即便残留 pending 行也不给动作，
+ * 由 flow-center 复核并拒绝重复办理（前端先少给一个必然失败的按钮）。
+ */
+const state = computed<CardState>(() => {
+    const d = data.value;
+    if (!d) return "NO_INSTANCE";
+    if (d.instanceId == null && tasks.value.length === 0) return "NO_INSTANCE";
+    if (d.status != null && d.status !== 10) return "TERMINAL";
+    if (tasks.value.length === 0) return "NO_TASK";
+    if (tasks.value.length > 1) return "MULTI_TASK";
+    return "ONE_TASK";
+});
+
+const chosenOutlets = computed(() => targetTask.value?.outlets || []);
+
+const statusText = computed(() => {
+    const s = data.value?.status;
+    if (s != null && INSTANCE_STATUS_TEXT[s]) return INSTANCE_STATUS_TEXT[s];
+    return props.trace?.auditStatusDesc || "—";
+});
+
+const statusTag = computed(() => {
+    const s = data.value?.status;
+    return (s != null && INSTANCE_STATUS_TAG[s]) || "default";
+});
+
+/** 人读当前节点：优先本人待办的节点名（by-biz 给的是快照名），退回 trace 摘要 */
+const currentNodeText = computed(() => tasks.value[0]?.nodeName || props.trace?.nodeSummary || "");
+
+const lastTraceText = computed(() => {
+    const steps = props.trace?.steps;
+    if (!steps || !steps.length) return "";
+    const last = steps[steps.length - 1];
+    const who = last?.assignees?.map((a) => a?.userName).filter(Boolean).join("、");
+    const label = last?.label || "";
+    if (!last?.nodeName && !label) return "";
+    return [last?.nodeName, who, label].filter(Boolean).join(" ");
+});
+
+async function load() {
+    loading.value = true;
+    unavailable.value = false;
+    try {
+        data.value = (await props.api.byBiz(props.bizId)) as ByBizResult;
+    } catch (e: any) {
+        unavailable.value = true;
+        data.value = null;
+    } finally {
+        loading.value = false;
+    }
+}
+
+function openApprove() {
+    if (state.value !== "ONE_TASK") return;
+    targetTask.value = tasks.value[0];
+    opinion.value = "";
+    chosenEdge.value = "";
+    approveVisible.value = true;
+}
+
+function openReject() {
+    if (state.value !== "ONE_TASK") return;
+    targetTask.value = tasks.value[0];
+    opinion.value = "";
+    rejectVisible.value = true;
+}
+
+async function doApprove() {
+    const task = targetTask.value;
+    if (!task) return;
+    // 多出口未选 → 拦下并留在弹窗，不发一个必然被后端拒绝的请求
+    if (task.outlets.length > 1 && !chosenEdge.value) {
+        Message.warning("该节点有多个办理去向，请先选择");
+        acting.value = false;
+        return;
+    }
+    acting.value = true;
+    try {
+        await props.api.approve(task.taskId, opinion.value.trim() || undefined,
+            task.outlets.length > 1 ? chosenEdge.value : undefined);
+        Message.success("已通过");
+        approveVisible.value = false;
+        emit("handled", { taskId: task.taskId, action: "approve" });
+        await load();
+    } catch (e: any) {
+        Message.error(e?.msg || e?.message || "操作失败");
+        approveVisible.value = false;
+    } finally {
+        acting.value = false;
+    }
+}
+
+async function doReject() {
+    const task = targetTask.value;
+    if (!task) return;
+    if (!opinion.value.trim()) {
+        Message.warning("驳回必须填写意见");
+        acting.value = false;
+        return;
+    }
+    acting.value = true;
+    try {
+        await props.api.reject(task.taskId, opinion.value.trim());
+        Message.success("已驳回");
+        rejectVisible.value = false;
+        emit("handled", { taskId: task.taskId, action: "reject" });
+        await load();
+    } catch (e: any) {
+        Message.error(e?.msg || e?.message || "操作失败");
+        rejectVisible.value = false;
+    } finally {
+        acting.value = false;
+    }
+}
+
+function emitTask() {
+    const task = tasks.value[0];
+    if (!task) return;
+    emit("open-task", task.taskId);
+}
+
+function reset() {
+    opinion.value = "";
+    chosenEdge.value = "";
+    targetTask.value = null;
+}
+
+watch(() => props.bizId, load);
+onMounted(load);
+defineExpose({ load, state });
+</script>
+
+<style scoped>
+.flow-card-region {
+    margin-top: 12px;
+}
+.flow-alert {
+    margin-bottom: 8px;
+}
+.flow-muted {
+    padding: 8px 0;
+}
+.flow-head {
+    display: flex;
+    align-items: center;
+    flex-wrap: wrap;
+    gap: 10px;
+    margin-bottom: 10px;
+}
+.flow-nodes,
+.flow-trace {
+    font-size: 13px;
+}
+.flow-actions {
+    display: flex;
+    align-items: center;
+    gap: 8px;
+    flex-wrap: wrap;
+}
+.flow-multi {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+}
+.flow-links {
+    margin-top: 10px;
+}
+.flow-modal-row {
+    display: flex;
+    align-items: center;
+    margin-bottom: 10px;
+}
+.flow-modal-label {
+    width: 90px;
+    font-size: 13px;
+    flex-shrink: 0;
+}
+.flow-modal-tip {
+    margin-bottom: 8px;
+}
+</style>

src/components/flow-approval/FlowApprovalList.vue

@@ -0,0 +1,348 @@
+<template>
+    <div class="yh-fill">
+        <div class="main-container yh-tabs-card">
+            <Tabs class="tabs-panel" :model-value="innerTab" @on-click="switchTab">
+                <TabPane v-for="t in tabs" :key="t" :label="tabLabel(t)" :name="t" />
+            </Tabs>
+
+            <!-- 待办 -->
+            <div class="tab-body" v-if="innerTab === 'todo'">
+                <div class="table-region" ref="todoRegionRef">
+                    <Table :columns="todoCols" :data="todoRows" :height="todoH || undefined" :loading="loading"
+                           no-data-text="暂无待审核通知">
+                        <template #action="{ row }">
+                            <span class="operating-link" @click="$emit('open-record', row.bizId)">审批记录</span>
+                            <span class="operating-link" @click="openApprove(row)">通过</span>
+                            <span class="operating-link text-error" @click="openReject(row)">驳回</span>
+                            <span class="operating-link" @click="openTask(row)">完整办理</span>
+                        </template>
+                    </Table>
+                </div>
+                <div class="page-panel" v-if="todoPage.total > todoPage.pageSize">
+                    <Page class="page-box fr" :current="todoPage.pageIndex" :page-size="todoPage.pageSize"
+                          :total="todoPage.total" show-total @on-change="loadTodo" />
+                </div>
+            </div>
+
+            <!-- 办件视角 -->
+            <div class="tab-body" v-else>
+                <div class="filter-bar">
+                    <RadioGroup :model-value="instStatus" type="button" @on-change="onStatusChange">
+                        <Radio :label="0">全部</Radio>
+                        <Radio :label="10">审批中</Radio>
+                        <Radio :label="20">已完成</Radio>
+                        <Radio :label="30">已拒绝</Radio>
+                        <Radio :label="40">已撤回</Radio>
+                    </RadioGroup>
+                </div>
+                <div class="table-region" ref="instRegionRef">
+                    <Table :columns="instCols" :data="instRows" :height="instH || undefined" :loading="loading"
+                           no-data-text="暂无办件">
+                        <template #status="{ row }">
+                            <Tag :color="statusTag(row.status)">{{ statusText(row.status) }}</Tag>
+                        </template>
+                        <template #instAction="{ row }">
+                            <Button size="small" @click="$emit('open-record', row.bizId)">审批记录</Button>
+                        </template>
+                    </Table>
+                </div>
+                <div class="page-panel" v-if="instPage.total > instPage.pageSize">
+                    <Page class="page-box fr" :current="instPage.pageIndex" :page-size="instPage.pageSize"
+                          :total="instPage.total" show-total @on-change="loadInstances" />
+                </div>
+            </div>
+        </div>
+
+        <!-- 通过：意见可选；多出口必须先选出口 -->
+        <Modal v-model="approveVisible" title="通过审核" :loading="acting" @on-ok="doApprove" @on-cancel="reset">
+            <div class="modal-row" v-if="chosenOutlets.length > 1">
+                <span class="modal-label">办理去向：</span>
+                <Select v-model="chosenEdge" size="small" style="width: 260px" placeholder="请选择办理去向">
+                    <Option v-for="o in chosenOutlets" :key="o.name" :value="o.name" :label="o.name">
+                        {{ o.name }}（{{ o.toNodeName }}）
+                    </Option>
+                </Select>
+            </div>
+            <p class="modal-tip">
+                通过「<b>{{ targetTitle }}</b>」
+                <template v-if="chosenOutlets.length > 1">，该节点有多个去向，必须选择其一</template>
+            </p>
+            <Input v-model="opinion" type="textarea" :rows="3" placeholder="办理意见（可选）" />
+        </Modal>
+
+        <!-- 驳回：意见必填 -->
+        <Modal v-model="rejectVisible" title="驳回审核" :loading="acting" @on-ok="doReject" @on-cancel="reset">
+            <p class="modal-tip">驳回「<b>{{ targetTitle }}</b>」，必须填写意见：</p>
+            <Input v-model="opinion" type="textarea" :rows="3" placeholder="驳回意见（必填）" />
+        </Modal>
+    </div>
+</template>
+
+<script setup lang="ts">
+/**
+ * 独立审批列表（方案 §4.2）。两个页签共用本组件与同一套动作，数据面全部走注入的 `api`，
+ * 组件不认得 Notice 也不认得 flow-center。
+ *
+ * 三条硬纪律：
+ * 1. 动作只认 `taskId`（行数据里带），不按行号/标题猜；
+ * 2. 列表的 todo 出参**没有 outlets**（那是 by-biz 才给的），所以点"通过"时现拉一次
+ *    `byBiz(bizId)` 定位本行 taskId：既拿到出口清单，也顺带确认"这条仍然是我的待办"——
+ *    已被他人办理/已失效的行会在这里被拦下并刷新列表，而不是发一个必然失败的请求；
+ * 3. 多出口未选不得提交；驳回意见必填。
+ */
+import { computed, onMounted, ref } from "vue";
+import { Message } from "view-ui-plus";
+import { useElementHeight } from "@/utils/hook/useElementHeight";
+import type { ByBizTask, FlowApprovalApi, FlowPage, InstanceItem, TodoTask } from "./types";
+import { INSTANCE_STATUS_TAG, INSTANCE_STATUS_TEXT } from "./types";
+
+const props = withDefaults(
+    defineProps<{
+        api: FlowApprovalApi;
+        bizType: string;
+        tabs?: Array<"todo" | "instances">;
+        /** 保留位：多业务共页时由调用方渲染筛选（本期 Notice 单一 bizType，不用） */
+        showAppFilter?: boolean;
+    }>(),
+    { tabs: () => ["todo", "instances"], showAppFilter: false }
+);
+
+const emit = defineEmits<{
+    (e: "handled", payload: { taskId: number; action: string }): void;
+    (e: "open-record", bizId: string): void;
+    (e: "open-task", payload: { bizId: string; taskId: number }): void;
+}>();
+
+const innerTab = ref<"todo" | "instances">(props.tabs[0] || "todo");
+const loading = ref(false);
+const acting = ref(false);
+
+const todoRegionRef = ref<HTMLElement | null>(null);
+const instRegionRef = ref<HTMLElement | null>(null);
+const todoH = useElementHeight(todoRegionRef);
+const instH = useElementHeight(instRegionRef);
+
+const todoRows = ref<Array<TodoTask & { _summary: string }>>([]);
+const todoPage = ref({ total: 0, pageIndex: 1, pageSize: 10 });
+const instRows = ref<InstanceItem[]>([]);
+const instPage = ref({ total: 0, pageIndex: 1, pageSize: 10 });
+const instStatus = ref(0);
+
+const approveVisible = ref(false);
+const rejectVisible = ref(false);
+const opinion = ref("");
+const chosenEdge = ref("");
+const targetTask = ref<ByBizTask | null>(null);
+const targetTitle = ref("");
+
+const chosenOutlets = computed(() => targetTask.value?.outlets || []);
+
+const TAB_LABELS: Record<string, string> = { todo: "我的待审核", instances: "办件视角" };
+function tabLabel(t: string) {
+    return TAB_LABELS[t] || t;
+}
+
+const todoCols = [
+    { title: "通知", key: "bizTitle", minWidth: 220, ellipsis: true, tooltip: true },
+    { title: "摘要", key: "_summary", minWidth: 180, ellipsis: true, tooltip: true },
+    { title: "当前节点", key: "nodeName", width: 120 },
+    { title: "到达时间", key: "arriveTime", width: 170, render: fmtTime },
+    { title: "操作", slot: "action", width: 250, align: "center" },
+];
+
+const instCols = [
+    { title: "通知", key: "bizTitle", minWidth: 240, ellipsis: true, tooltip: true },
+    { title: "状态", slot: "status", minWidth: 100 },
+    { title: "提交人", key: "submitterName", minWidth: 100 },
+    { title: "提交时间", key: "submitTime", minWidth: 170, render: fmtTime },
+    { title: "办结时间", key: "finishTime", minWidth: 170, render: fmtTime },
+    { title: "操作", slot: "instAction", width: 150, align: "center" },
+];
+
+function fmtTime(h: any, p: any) {
+    return h("span", {}, String(p.row[p.column.key] || "").replace("T", " ").slice(0, 19) || "—");
+}
+
+function statusText(s: number) {
+    return INSTANCE_STATUS_TEXT[s] || String(s);
+}
+
+function statusTag(s: number) {
+    return INSTANCE_STATUS_TAG[s] || "default";
+}
+
+function parseSummary(task: TodoTask): string {
+    if (!task.bizSnapshot) return "—";
+    try {
+        const snap = JSON.parse(task.bizSnapshot);
+        return snap.summary || snap.title || "—";
+    } catch {
+        return "—";
+    }
+}
+
+function switchTab(name: any) {
+    innerTab.value = String(name) as "todo" | "instances";
+    load();
+}
+
+function onStatusChange(val: any) {
+    instStatus.value = Number(val);
+    loadInstances(1);
+}
+
+async function loadTodo(page = 1) {
+    loading.value = true;
+    try {
+        const res: FlowPage<TodoTask> = await props.api.todo({ page, size: todoPage.value.pageSize });
+        todoPage.value = { total: res.total, pageIndex: res.pageIndex, pageSize: res.pageSize };
+        todoRows.value = (res.content || []).map((t) => ({ ...t, _summary: parseSummary(t) }));
+    } catch (e: any) {
+        Message.error(e?.msg || e?.message || "待审核列表加载失败");
+    } finally {
+        loading.value = false;
+    }
+}
+
+async function loadInstances(page = 1) {
+    loading.value = true;
+    try {
+        const res: FlowPage<InstanceItem> = await props.api.instances({
+            status: instStatus.value || undefined,
+            page,
+            size: instPage.value.pageSize,
+        });
+        instPage.value = { total: res.total, pageIndex: res.pageIndex, pageSize: res.pageSize };
+        instRows.value = res.content || [];
+    } catch (e: any) {
+        Message.error(e?.msg || e?.message || "办件列表加载失败");
+    } finally {
+        loading.value = false;
+    }
+}
+
+function load() {
+    if (innerTab.value === "todo") loadTodo(1);
+    else loadInstances(1);
+}
+
+/**
+ * 现取本行的出口与归属：by-biz 只返回"当前人 PENDING"，所以这一步同时充当
+ * "这条还是不是我办的"复核——查不到即说明已被办理/失效，刷新列表而不是白点一次。
+ */
+async function resolveTask(row: TodoTask): Promise<ByBizTask | null> {
+    try {
+        const data: any = await props.api.byBiz(row.bizId);
+        const tasks: ByBizTask[] = data?.tasks || [];
+        return tasks.find((t) => Number(t.taskId) === Number(row.taskId)) || null;
+    } catch (e: any) {
+        Message.error(e?.msg || e?.message || "办理信息获取失败");
+        return null;
+    }
+}
+
+async function openApprove(row: TodoTask) {
+    if (acting.value) return;
+    const task = await resolveTask(row);
+    if (!task) {
+        Message.warning("该任务已不在你的待办中（可能已被办理），列表已刷新");
+        loadTodo(todoPage.value.pageIndex);
+        return;
+    }
+    targetTask.value = task;
+    targetTitle.value = row.bizTitle;
+    opinion.value = "";
+    chosenEdge.value = "";
+    approveVisible.value = true;
+}
+
+function openReject(row: TodoTask) {
+    if (acting.value) return;
+    targetTask.value = { taskId: row.taskId, nodeId: row.nodeId, nodeName: row.nodeName,
+        arriveTime: row.arriveTime, outlets: [] };
+    targetTitle.value = row.bizTitle;
+    opinion.value = "";
+    rejectVisible.value = true;
+}
+
+async function openTask(row: TodoTask) {
+    emit("open-task", { bizId: row.bizId, taskId: row.taskId });
+}
+
+async function doApprove() {
+    const task = targetTask.value;
+    if (!task) return;
+    if (task.outlets.length > 1 && !chosenEdge.value) {
+        Message.warning("该节点有多个办理去向，请先选择");
+        acting.value = false;
+        return;
+    }
+    acting.value = true;
+    try {
+        await props.api.approve(task.taskId, opinion.value.trim() || undefined,
+            task.outlets.length > 1 ? chosenEdge.value : undefined);
+        Message.success("已通过");
+        approveVisible.value = false;
+        emit("handled", { taskId: task.taskId, action: "approve" });
+        loadTodo(todoPage.value.pageIndex);
+    } catch (e: any) {
+        Message.error(e?.msg || e?.message || "操作失败");
+        approveVisible.value = false;
+        loadTodo(todoPage.value.pageIndex);
+    } finally {
+        acting.value = false;
+    }
+}
+
+async function doReject() {
+    const task = targetTask.value;
+    if (!task) return;
+    if (!opinion.value.trim()) {
+        Message.warning("驳回必须填写意见");
+        acting.value = false;
+        return;
+    }
+    acting.value = true;
+    try {
+        await props.api.reject(task.taskId, opinion.value.trim());
+        Message.success("已驳回");
+        rejectVisible.value = false;
+        emit("handled", { taskId: task.taskId, action: "reject" });
+        loadTodo(todoPage.value.pageIndex);
+    } catch (e: any) {
+        Message.error(e?.msg || e?.message || "操作失败");
+        rejectVisible.value = false;
+    } finally {
+        acting.value = false;
+    }
+}
+
+function reset() {
+    opinion.value = "";
+    chosenEdge.value = "";
+    targetTask.value = null;
+    targetTitle.value = "";
+}
+
+onMounted(load);
+defineExpose({ load, loadTodo, loadInstances });
+</script>
+
+<style scoped>
+.filter-bar {
+    margin-bottom: 12px;
+}
+.modal-row {
+    display: flex;
+    align-items: center;
+    margin-bottom: 10px;
+}
+.modal-label {
+    width: 90px;
+    font-size: 13px;
+    flex-shrink: 0;
+}
+.modal-tip {
+    margin-bottom: 8px;
+}
+</style>

src/components/flow-approval/FlowRecordDrawer.vue

@@ -0,0 +1,109 @@
+<template>
+    <Drawer :model-value="modelValue" :title="title" :width="width" :transfer="false"
+            :styles="{ body: { padding: '0' } }" @update:model-value="close">
+        <div class="flow-embed-region">
+            <div v-if="error" class="flow-embed-error">
+                <Alert type="error" show-icon>{{ error }}</Alert>
+                <Button size="small" @click="load">重试</Button>
+            </div>
+            <!-- iframe 一旦给出就是只读嵌入页：本组件不放任何通过/驳回入口 -->
+            <iframe v-else-if="pageUrl" :src="pageUrl" :title="title" class="flow-embed-frame" />
+            <div v-else class="flow-embed-loading">{{ loading ? "加载中…" : "" }}</div>
+        </div>
+    </Drawer>
+</template>
+
+<script setup lang="ts">
+/**
+ * 审批记录抽屉（方案 §4.4）：iframe 嵌 flow-center 的 **token 只读页**。
+ *
+ * 三条纪律写死在组件里，不给调用方犯错的机会：
+ * 1. pageUrl **每次打开现取**（token 10 分钟短时效），关闭即清空——不缓存、不进 storage；
+ * 2. 只读：组件内不出现通过/驳回，也不接收这类回调；
+ * 3. 换址失败（未进入流程 / 无权限 / 过期）原文提示 + 重试，不白屏。
+ */
+import { ref, watch } from "vue";
+import type { FlowApprovalApi } from "./types";
+
+const props = withDefaults(
+    defineProps<{
+        modelValue: boolean;
+        api: FlowApprovalApi;
+        bizId: string;
+        title?: string;
+        width?: number;
+    }>(),
+    { title: "审批记录", width: 740 }
+);
+
+const emit = defineEmits<{
+    (e: "update:modelValue", v: boolean): void;
+}>();
+
+const pageUrl = ref("");
+const loading = ref(false);
+const error = ref("");
+
+async function load() {
+    loading.value = true;
+    error.value = "";
+    pageUrl.value = "";
+    try {
+        const res: any = await props.api.recordUrl(props.bizId);
+        const url = res?.pageUrl || "";
+        if (!url) {
+            error.value = "审批记录地址获取失败，请稍后重试";
+            return;
+        }
+        pageUrl.value = url;
+    } catch (e: any) {
+        // 后端信封 msg 原文透传（"该通知尚未进入流程"/"通知不存在或未发布"等）
+        error.value = e?.msg || e?.message || String(e) || "审批记录打开失败";
+    } finally {
+        loading.value = false;
+    }
+}
+
+watch(
+    () => props.modelValue,
+    (open) => {
+        if (open) load();
+        else {
+            // 关闭即丢地址：token 不进缓存，下次打开重新签发
+            pageUrl.value = "";
+            error.value = "";
+        }
+    }
+);
+
+function close(v: boolean) {
+    emit("update:modelValue", v);
+}
+</script>
+
+<style scoped>
+.flow-embed-region {
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+}
+.flow-embed-frame {
+    display: block;
+    width: 100%;
+    height: 100%;
+    border: 0;
+}
+.flow-embed-loading {
+    flex: 1;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+}
+.flow-embed-error {
+    padding: 16px;
+    display: flex;
+    flex-direction: column;
+    gap: 12px;
+    align-items: flex-start;
+}
+</style>

src/components/flow-approval/FlowTaskEmbed.vue

@@ -0,0 +1,144 @@
+<template>
+    <Modal :model-value="modelValue" :title="title" :width="width" footer-hide transfer
+           @update:model-value="close">
+        <div class="flow-task-wrap">
+            <!-- CAS 会话页被 X-Frame-Options/CSP 挡住时 iframe 只会留白：给出显式逃生口 -->
+            <!-- 新窗口用的是后端原样地址（完整窗口形态，不该带 embed 壳标记） -->
+            <div class="flow-task-fallback">
+                <span class="flow-task-tip">打不开办理面板？</span>
+                <a class="operating-link" :href="pageUrl" target="_blank" rel="noopener">在新窗口打开任务页</a>
+            </div>
+            <iframe v-if="embedSrc" ref="frameEl" :src="embedSrc" :title="title" class="flow-task-frame"
+                    :style="frameStyle" />
+        </div>
+    </Modal>
+</template>
+
+<script setup lang="ts">
+/**
+ * 去壳任务办理页容器（方案 §4.5）：iframe 嵌 flow-center `/task/{taskId}?embed=1`。
+ *
+ * 该页是 **CAS 写面**（不是 token 页），办理权由任务页自己的用户面接口按 assigneeId 复核；
+ * 本组件只负责三件事——收 `handled` 通知父页刷新、转 `open-biz` 让父页开业务详情、按 `height` 自适应。
+ *
+ * origin 双向校验：子页 targetOrigin 取 document.referrer 的 origin；父页这里把**期望 origin
+ * 直接算自 pageUrl**（不是通配），并且再核对消息确实来自本 iframe。跨端口 dev（8077↔8088）
+ * 靠的是两端 origin 都在 pageUrl 里显式出现，而不是放宽成 `*`。
+ */
+import { computed, onBeforeUnmount, onMounted, ref, watch } from "vue";
+import { isFlowEmbedMessage } from "./types";
+
+const props = withDefaults(
+    defineProps<{
+        modelValue: boolean;
+        pageUrl: string;
+        taskId?: number | string;
+        title?: string;
+        width?: number;
+    }>(),
+    { title: "完整办理", width: 860, taskId: "" }
+);
+
+const emit = defineEmits<{
+    (e: "update:modelValue", v: boolean): void;
+    (e: "handled", payload: { taskId: string; action?: string }): void;
+    (e: "open-biz", payload: { bizId?: string | null; bizUrl?: string }): void;
+    (e: "close"): void;
+}>();
+
+const frameEl = ref<HTMLIFrameElement | null>(null);
+const frameHeight = ref(0);
+
+/**
+ * 后端 TaskPageUrl 给的是**完整窗口形态**的 `#/task/{id}`（svc-hall 等"新窗口打开"场景要用它）。
+ * 内嵌时"去壳"是嵌入方的诉求，所以由本组件补 `embed=1`——hash 路由下 query 必须落在 `#` 之后，
+ * 写成 `?embed=1#/task/1` 是进不去的（vue-router 读的是 hash 段）。
+ */
+function asEmbedUrl(raw: string): string {
+    if (!raw) return "";
+    const hashAt = raw.indexOf("#");
+    if (hashAt < 0) return raw;
+    const head = raw.slice(0, hashAt);
+    const hash = raw.slice(hashAt);
+    if (/[?&]embed=1(?:&|$)/.test(hash)) return raw;
+    return head + hash + (hash.includes("?") ? "&" : "?") + "embed=1";
+}
+
+const embedSrc = computed(() => asEmbedUrl(props.pageUrl));
+
+/** iframe 的期望 origin——pageUrl 解析失败即拒绝接收一切消息 */
+const expectedOrigin = computed(() => {
+    try {
+        const origin = new URL(props.pageUrl).origin;
+        return origin && origin !== "null" ? origin : "";
+    } catch {
+        return "";
+    }
+});
+
+const frameStyle = computed(() =>
+    frameHeight.value ? { height: `${Math.min(Math.max(frameHeight.value, 320), 1600)}px` } : {}
+);
+
+function onMessage(ev: MessageEvent) {
+    if (!expectedOrigin.value || ev.origin !== expectedOrigin.value) return;
+    // 同一页面里可能并存多个嵌入实例，来源窗口必须是本 iframe
+    if (frameEl.value && ev.source !== frameEl.value.contentWindow) return;
+    if (!isFlowEmbedMessage(ev.data)) return;
+
+    if (ev.data.type === "handled") {
+        emit("handled", { taskId: String(ev.data.taskId ?? props.taskId), action: ev.data.action });
+    } else if (ev.data.type === "open-biz") {
+        emit("open-biz", { bizId: ev.data.bizId, bizUrl: ev.data.bizUrl });
+    } else if (ev.data.type === "height" && typeof ev.data.height === "number") {
+        frameHeight.value = ev.data.height;
+    }
+}
+
+onMounted(() => window.addEventListener("message", onMessage));
+onBeforeUnmount(() => window.removeEventListener("message", onMessage));
+
+watch(
+    () => props.modelValue,
+    (open) => {
+        if (open) return;
+        frameHeight.value = 0;
+        sendClose();
+    }
+);
+
+/** 父→子可选指令：任务页目前不消费 close 之外的入向消息，保留协议位 */
+function sendClose() {
+    const win = frameEl.value?.contentWindow;
+    if (!win || !expectedOrigin.value) return;
+    win.postMessage({ proto: "flow", v: 1, type: "close" }, expectedOrigin.value);
+}
+
+function close(v: boolean) {
+    emit("update:modelValue", v);
+    emit("close");
+}
+</script>
+
+<style scoped>
+.flow-task-wrap {
+    position: relative;
+}
+.flow-task-fallback {
+    display: flex;
+    gap: 6px;
+    align-items: center;
+    justify-content: flex-end;
+    margin-bottom: 6px;
+}
+.flow-task-tip {
+    font-size: 12px;
+}
+.flow-task-frame {
+    display: block;
+    width: 100%;
+    min-height: 320px;
+    height: 70vh;
+    border: 0;
+}
+</style>

src/components/flow-approval/README.md

@@ -0,0 +1,80 @@
+# flow-approval 共享组件（v2.1 应用内审批）
+
+子应用侧的审批 UI 组件族。**组件不直连 flow-center**，一律通过注入的 `api`（`FlowApprovalApi`）
+打本应用自己的后端代理，由本应用后端持 app 签名调 `/oapi/flow/**`。
+
+对应方案：`flow-center/docs/ysch-flow应用内审批-列表与卡片-实施方案v2.1-20261019.md` §4/§5.4/§7。
+组件版本：**v2.1-Notice1** ｜ 最后同步：2026-10-19。
+
+## 文件
+
+| 文件 | 职责 | 可写 |
+|---|---|---|
+| `types.ts` | `FlowApprovalApi` 契约 + `TodoTask/InstanceItem/ByBizResult/TraceVo` + postMessage 信封 | - |
+| `FlowApprovalList.vue` | 独立待办/办件列表（页签、分页、行内动作、出口选择） | 是 |
+| `FlowApprovalCard.vue` | 业务详情卡片（0/1/N 待办、终态、只读） | 是（当前人待办时） |
+| `FlowRecordDrawer.vue` | 审批记录抽屉（token 只读页 iframe） | 否 |
+| `FlowTaskEmbed.vue` | 完整办理任务页 iframe/modal（CAS 去壳页） | 是 |
+
+## 用法
+
+```vue
+<script setup lang="ts">
+import FlowApprovalList from "@/components/flow-approval/FlowApprovalList.vue";
+import FlowApprovalCard from "@/components/flow-approval/FlowApprovalCard.vue";
+import FlowRecordDrawer from "@/components/flow-approval/FlowRecordDrawer.vue";
+import FlowTaskEmbed from "@/components/flow-approval/FlowTaskEmbed.vue";
+import myFlowApi from "@/api/module/approvalAdapter"; // 你的 FlowApprovalApi 实现
+</script>
+
+<template>
+    <FlowApprovalList :api="myFlowApi" biz-type="notice" :tabs="['todo', 'instances']"
+        @open-record="openRecord" @open-task="openTask" @handled="reload" />
+    <FlowRecordDrawer v-model="recordVisible" :api="myFlowApi" :biz-id="recordBizId" />
+    <FlowTaskEmbed v-model="taskVisible" :page-url="taskUrl" @handled="reload" @open-biz="goBiz" />
+</template>
+```
+
+`FlowApprovalApi` 的返回值可以是 alova `Method`，也可以是 Promise——组件只 `await`。
+
+## 必须遵守的契约（改代码前先读）
+
+1. **身份不从前端来**。`api` 的入参只允许 `bizId / taskId / opinion / edgeName / 分页`。
+   `operatorId / schId / name` 一律由子应用后端从 CAS 会话取；组件与适配器都不带这些字段。
+2. **token 记录页只读**。`FlowRecordDrawer` 内不出现通过/驳回，也不接收动作回调；
+   `pageUrl` 每次打开现取、关闭即丢，不缓存、不进 storage。
+3. **多待办不猜**。`byBiz().tasks.length > 1` → 卡片只显示"你有 N 个待办"+引导，不代替用户挑一条办理。
+4. **多出口必选**。`outlets.length > 1` 时通过弹窗必须选到 `edgeName` 才允许提交；未选不发请求。
+5. **驳回意见必填，通过意见可选**。
+6. **列表行"通过"前现拉一次 `byBiz`**。`tasks/todo` 出参没有 `outlets`，且行数据可能是陈旧快照；
+   点通过时以 `byBiz(bizId)` 里 `taskId` 命中为准——命中不到就是"已不属于你的待办"，刷新列表。
+7. **`currentNodes` 是节点 id 逗号串**（办件原文口径，与 `/oapi/flow/instances`、`progress` 一致）。
+   要给人看节点名，用 `tasks[].nodeName`。
+8. **错误原文透传**。flow-center 业务码拒绝的 `msg` 直接展示；网络故障提示稍后重试，不伪装成功。
+9. **postMessage 双向校验 origin**。父侧期望 origin 算自 `pageUrl`，并核对 `event.source` 是本 iframe；
+   子侧 targetOrigin 取 `document.referrer` 的 origin。任一侧都不许用 `*`。
+
+## 去壳任务页协议（子页 → 父页）
+
+flow-center 前端 `/task/{taskId}?embed=1` 发出，字面量与
+`flow-center/front/src/utils/taskEmbed.ts` 一致：
+
+```json
+{"proto":"flow","v":1,"type":"handled","taskId":"442","action":"approve"}
+{"proto":"flow","v":1,"type":"open-biz","bizId":"71","bizUrl":"/list/detail?serid=71"}
+{"proto":"flow","v":1,"type":"height","height":1200}
+```
+
+父 → 子：`{"proto":"flow","v":1,"type":"close"}`（任务页当前不消费，协议占位）。
+
+## 复制到 svc-hall 的同步清单
+
+平台现行约定不抽 npm 包（《云海子应用前端接入规范》），因此**改本目录任一文件必须双端同步**。
+
+1. 整目录复制到 `svc-hall/hall/src/components/flow-approval/`；
+2. 只改两处：`api` 适配器（`/api/apply/approval/**`）与 `bizType`（决策见方案 §8.5，二选一不许混用）；
+3. 两侧 README 头部「组件版本 / 最后同步日期」一起更新；
+4. 依赖前提：宿主应用需有平台中央静态通道下发的布局类
+   （`page-wrapper` / `yh-fill` / `yh-tabs-card` / `tab-body` / `table-region` / `page-panel` /
+   `operating-link` / `text-error`）与 `@/utils/hook/useElementHeight`；
+5. UI 库沿用 `view-ui-plus`，不新增 UI/图标依赖，不写死品牌色。

src/components/flow-approval/types.ts

@@ -0,0 +1,155 @@
+/**
+ * v2.1 应用内审批共享组件的契约类型（方案 §4）。
+ *
+ * 本文件刻意**不 import 本应用任何业务类型**：组件靠 `FlowApprovalApi` 注入数据面，
+ * 迁移到下一个子应用（svc-hall）时只换适配器，类型与组件本体一字不改。
+ * 改这里必须双端同步（与平台"四端同构文件"纪律一致）。
+ */
+
+/** 分页信封（flow-center BasePageResult 经子应用后端原样透出） */
+export interface FlowPage<T> {
+    total: number;
+    content: T[];
+    pageIndex: number;
+    pageSize: number;
+    totalPages: number;
+    hasNext: boolean;
+}
+
+/** 待办行（列表"我的待办"数据源） */
+export interface TodoTask {
+    taskId: number;
+    instanceId: number;
+    instanceVersion?: number | null;
+    bizType: string;
+    bizId: string;
+    bizTitle: string;
+    bizSnapshot?: string | null;
+    nodeId: string;
+    nodeName: string;
+    arriveTime: string;
+}
+
+/** 办件行（列表"办件视角"数据源） */
+export interface InstanceItem {
+    instanceId: number;
+    status: number;
+    bizType: string;
+    bizId: string;
+    bizTitle: string;
+    bizUrl?: string | null;
+    submitterName?: string | null;
+    submitTime?: string | null;
+    finishTime?: string | null;
+    currentNodes?: string | null;
+}
+
+/** 出口：多出口节点办理时须选其一（选中值作为 approve 的 edgeName） */
+export interface ByBizOutlet {
+    name: string;
+    toNodeId: string;
+    toNodeName: string;
+}
+
+/** 当前人在该业务单据上的一条待办 */
+export interface ByBizTask {
+    taskId: number;
+    nodeId: string;
+    nodeName: string;
+    arriveTime: string;
+    /** 单出口节点为空数组；>1 即"必须先选出口" */
+    outlets: ByBizOutlet[];
+}
+
+/**
+ * by-biz 出参。注意两点契约：
+ * - `tasks` 的 0/1/N 都是成功；N>1 时卡片不得猜选（引导列表/任务页）；
+ * - `currentNodes` 是**节点 id** 逗号串（办件原文口径），给人看的节点名用 `tasks[].nodeName`。
+ */
+export interface ByBizResult {
+    instanceId: number | null;
+    bizType: string;
+    bizId: string;
+    status: number | null;
+    currentNodes: string | null;
+    tasks: ByBizTask[];
+}
+
+/** 审批轨迹（各子应用自有进度接口形态；组件只用其中"最近一步"做摘要，缺位则不展示） */
+export interface TraceStep {
+    nodeName?: string | null;
+    label?: string | null;
+    assignees?: Array<{ userName?: string | null; statusLabel?: string | null; opinion?: string | null }> | null;
+}
+
+export interface TraceVo {
+    bound?: boolean;
+    auditStatus?: number | null;
+    auditStatusDesc?: string | null;
+    instanceStatus?: number | null;
+    currentNodes?: string | null;
+    nodeSummary?: string | null;
+    steps?: TraceStep[] | null;
+    flowResult?: { result?: string; opinion?: string; rejectNode?: string } | null;
+}
+
+/** 换址类返回 */
+export interface PageUrlResult {
+    pageUrl: string;
+}
+
+/**
+ * 组件与子应用后端之间的唯一契约。方法返回 alova `Method` 或 Promise 都可——组件只 `await`，
+ * 两种都成立（alova 的 Method 实现了 thenable）。
+ */
+export interface FlowApprovalApi {
+    /** 我的待办分页 */
+    todo(params?: { page?: number; size?: number }): any;
+    /** 办件视角分页 */
+    instances(params?: { status?: number; page?: number; size?: number }): any;
+    /** 当前人在该单据上的待办 */
+    byBiz(bizId: string): any;
+    /** 审批轨迹（可缺省：传了就不再由卡片自取） */
+    trace?(bizId: string): any;
+    approve(taskId: number, opinion?: string, edgeName?: string): any;
+    reject(taskId: number, opinion: string): any;
+    recordUrl(bizId: string): any;
+    taskPageUrl(bizId: string, taskId: number): any;
+}
+
+/** 办件状态 → 文案（flow-center 实例状态；组件不依赖子应用的枚举字典） */
+export const INSTANCE_STATUS_TEXT: Record<number, string> = {
+    10: "审批中",
+    20: "已完成",
+    30: "已拒绝",
+    40: "已撤回",
+};
+
+/** 办件状态 → view-ui-plus Tag 预设色名（用组件库语义色，不写死色值） */
+export const INSTANCE_STATUS_TAG: Record<number, string> = {
+    10: "blue",
+    20: "green",
+    30: "red",
+    40: "default",
+};
+
+/** 去壳任务页 postMessage 协议信封（与 flow-center front `utils/taskEmbed.ts` 同字面量，双端同步） */
+export const FLOW_EMBED_PROTO = "flow";
+export const FLOW_EMBED_VERSION = 1;
+
+export interface FlowEmbedMessage {
+    proto: string;
+    v: number;
+    type: "handled" | "open-biz" | "height";
+    taskId?: string;
+    action?: string;
+    bizId?: string | null;
+    bizUrl?: string;
+    height?: number;
+}
+
+/** 父侧只认本协议的消息体；origin 白名单由 FlowTaskEmbed 按 iframe 地址另判 */
+export function isFlowEmbedMessage(data: unknown): data is FlowEmbedMessage {
+    const d = data as FlowEmbedMessage | null;
+    return !!d && d.proto === FLOW_EMBED_PROTO && d.v === FLOW_EMBED_VERSION && !!d.type;
+}