wangsli/hyb-oa
1
0
派生 0
代码 工单 合并请求 工作流 8 软件包 项目 发布 百科 活动

R18-4/R21-2: 收口企微脱敏通知与 Portal 搜索摘要

浏览代码
这个提交包含在：
wangsli
2026-03-22 08:34:05 +08:00
父节点 215e3967bc
当前提交 0235ccb968
共修改 7 个文件，包含 250 行新增和 10 行删除
下载 Patch 文件 下载 Diff 文件 展开所有文件 折叠所有文件
server/src/routes/portal.js
+87
查看文件
@@ -139,6 +139,9 @@ function buildQuickLinks({ request, featureEnabled }) {
if (featureEnabled.todoBoard) {
items.push({ key: "todo", title: "待办", href: "/todos" });
}
if (featureEnabled.projectDomain) {
items.push({ key: "projects", title: "项目", href: "/projects" });
}
if (request.employee.permissionCodes.includes("system.users") || request.employee.permissionCodes.includes("system.settings")) {
items.push({ key: "people", title: "人员管理", href: "/people" });
items.push({ key: "workspace", title: "工作区设置", href: "/system/workspace" });
@@ -186,6 +189,7 @@ async function portalRoutes(fastify) {
employeeLifecycle: await evaluateOptionalFlag(fastify, request, FEATURE_FLAG_KEYS.employeeLifecycle),
todoBoard: await evaluateOptionalFlag(fastify, request, FEATURE_FLAG_KEYS.todoBoard),
paymentBatch: await evaluateOptionalFlag(fastify, request, FEATURE_FLAG_KEYS.paymentBatch),
projectDomain: await evaluateOptionalFlag(fastify, request, FEATURE_FLAG_KEYS.projectDomain),
};
const [
@@ -202,6 +206,10 @@ async function portalRoutes(fastify) {
assetReturnPendingCount,
activeEmployeeCount,
login7dCount,
myProjectCount,
overdueProjectMilestoneCount,
highPriorityProjectTaskCount,
openProjectRiskCount,
] = await Promise.all([
fastify.prisma.workflowTask.count({ where: { status: "pending", OR: assigneeFilters } }),
fastify.prisma.reimbursementForm.count({ where: { OR: [{ owner_id: request.employee.id }, { submitter_id: request.employee.id }] } }),
@@ -260,6 +268,69 @@ async function portalRoutes(fastify) {
distinct: ["employee_id"],
}).then((rows) => rows.length)
: Promise.resolve(0),
featureEnabled.projectDomain
? fastify.prisma.project.count({
where: fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "*")
? {}
: {
OR: [
{ owner_employee_id: request.employee.id },
{ manager_employee_id: request.employee.id },
{ members: { some: { employee_id: request.employee.id, left_at: null } } },
],
},
})
: Promise.resolve(0),
featureEnabled.projectDomain
? fastify.prisma.projectMilestone.count({
where: {
status: { in: ["pending", "in_progress", "delayed"] },
due_date: { lt: new Date() },
project: fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "*")
? undefined
: {
OR: [
{ owner_employee_id: request.employee.id },
{ manager_employee_id: request.employee.id },
{ members: { some: { employee_id: request.employee.id, left_at: null } } },
],
},
},
})
: Promise.resolve(0),
featureEnabled.projectDomain
? fastify.prisma.projectTask.count({
where: {
status: { in: ["todo", "doing", "blocked"] },
priority: { in: ["high", "urgent"] },
project: fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "*")
? undefined
: {
OR: [
{ owner_employee_id: request.employee.id },
{ manager_employee_id: request.employee.id },
{ members: { some: { employee_id: request.employee.id, left_at: null } } },
],
},
},
})
: Promise.resolve(0),
featureEnabled.projectDomain
? fastify.prisma.projectRisk.count({
where: {
status: { not: "closed" },
project: fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "*")
? undefined
: {
OR: [
{ owner_employee_id: request.employee.id },
{ manager_employee_id: request.employee.id },
{ members: { some: { employee_id: request.employee.id, left_at: null } } },
],
},
},
})
: Promise.resolve(0),
]);
const todayPresence = featureEnabled.presenceBoard
@@ -328,6 +399,10 @@ async function portalRoutes(fastify) {
href: "/workflow/tasks",
severity: pendingTaskCount > 0 ? "warning" : "normal",
});
if (featureEnabled.projectDomain) {
cards.push({ key: "project_milestones", title: "逾期里程碑", value: overdueProjectMilestoneCount, href: "/projects", severity: overdueProjectMilestoneCount > 0 ? "warning" : "normal" });
cards.push({ key: "project_risks", title: "项目风险", value: openProjectRiskCount, href: "/projects", severity: openProjectRiskCount > 0 ? "high" : "normal" });
}
} else {
cards.push({
key: "my_todos",
@@ -353,6 +428,9 @@ async function portalRoutes(fastify) {
href: "/weekly-reports",
severity: myWeeklyReport?.status === "submitted" ? "normal" : "warning",
});
if (featureEnabled.projectDomain) {
cards.push({ key: "my_projects", title: "我的项目", value: myProjectCount, href: "/projects", severity: highPriorityProjectTaskCount > 0 ? "warning" : "normal" });
}
}
if (featureEnabled.paymentBatch && riskCount > 0) {
@@ -423,6 +501,15 @@ async function portalRoutes(fastify) {
href: "/todos",
}
: null,
projectSummary: featureEnabled.projectDomain
? {
myCount: myProjectCount,
overdueMilestonesCount: overdueProjectMilestoneCount,
highPriorityTaskCount: highPriorityProjectTaskCount,
openRiskCount: openProjectRiskCount,
href: "/projects",
}
: null,
peopleLifecycle: featureEnabled.employeeLifecycle && isManagerView
? {
onboardingCount,
server/src/routes/search.js
+104 -6
查看文件
@@ -13,12 +13,15 @@ const ENTITY_PRIORITY = {
employee: 0,
announcement: 1,
asset: 2,
leave: 3,
reimbursement: 4,
weekly_report: 5,
todo: 6,
purchase_request: 7,
travel_request: 8,
project: 3,
contract_registry: 4,
confidential_doc_ref: 5,
leave: 6,
reimbursement: 7,
weekly_report: 8,
todo: 9,
purchase_request: 10,
travel_request: 11,
};
function buildValidationError(details, statusCode = 400) {
@@ -75,6 +78,9 @@ async function searchRoutes(fastify) {
announcements: await isFlagEnabled(fastify, request, FEATURE_FLAG_KEYS.announcements),
weeklyReport: await isFlagEnabled(fastify, request, FEATURE_FLAG_KEYS.weeklyReport),
todoBoard: await isFlagEnabled(fastify, request, FEATURE_FLAG_KEYS.todoBoard),
projectDomain: await isFlagEnabled(fastify, request, FEATURE_FLAG_KEYS.projectDomain),
projectLinking: await isFlagEnabled(fastify, request, FEATURE_FLAG_KEYS.projectLinking),
confidentialDocRefs: await isFlagEnabled(fastify, request, FEATURE_FLAG_KEYS.confidentialDocRefs),
};
const tasks = [];
@@ -261,6 +267,98 @@ async function searchRoutes(fastify) {
);
}
if (featureEnabled.projectDomain && (fastify.hasPermission(request.employee, "project.view_own") || fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage"))) {
tasks.push(
fastify.prisma.project.findMany({
where: {
AND: [
fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || isAdmin
? {}
: {
OR: [
{ owner_employee_id: request.employee.id },
{ manager_employee_id: request.employee.id },
{ members: { some: { employee_id: request.employee.id, left_at: null } } },
],
},
{
OR: [
{ project_no: { contains: q, mode: "insensitive" } },
{ name: { contains: q, mode: "insensitive" } },
{ client_name: { contains: q, mode: "insensitive" } },
{ client_alias: { contains: q, mode: "insensitive" } },
],
},
],
},
take: limit,
orderBy: { updated_at: "desc" },
select: { id: true, project_no: true, name: true, client_name: true, client_alias: true, is_confidential: true, updated_at: true },
}).then((rows) => rows.map((item) => ({
entityType: "project",
entityId: item.id,
title: `${item.project_no} · ${item.name}`,
subtitle: item.is_confidential ? "涉密项目" : item.client_alias || item.client_name || null,
status: null,
href: `/projects/${item.id}`,
matchedBy: matchByValue(q, item.project_no, item.name, item.client_name, item.client_alias),
updatedAt: item.updated_at?.toISOString?.() ?? null,
}))),
);
}
if (featureEnabled.projectLinking && (fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "system.settings") || isAdmin)) {
tasks.push(
fastify.prisma.contractRegistry.findMany({
where: {
OR: [
{ contract_no: { contains: q, mode: "insensitive" } },
{ counterparty_name: { contains: q, mode: "insensitive" } },
{ summary: { contains: q, mode: "insensitive" } },
],
},
take: limit,
orderBy: { updated_at: "desc" },
select: { id: true, contract_no: true, counterparty_name: true, confidentiality_level: true, summary: true, updated_at: true },
}).then((rows) => rows.map((item) => ({
entityType: "contract_registry",
entityId: item.id,
title: item.contract_no,
subtitle: ["confidential", "restricted"].includes(item.confidentiality_level) ? "涉密合同台账" : item.counterparty_name,
status: item.confidentiality_level,
href: "/contracts-registry",
matchedBy: matchByValue(q, item.contract_no, item.counterparty_name, item.summary),
updatedAt: item.updated_at?.toISOString?.() ?? null,
}))),
);
}
if (featureEnabled.confidentialDocRefs && (fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "system.settings") || isAdmin)) {
tasks.push(
fastify.prisma.confidentialDocumentRef.findMany({
where: {
OR: [
{ title: { contains: q, mode: "insensitive" } },
{ document_no: { contains: q, mode: "insensitive" } },
{ offline_archive_no: { contains: q, mode: "insensitive" } },
],
},
take: limit,
orderBy: { updated_at: "desc" },
select: { id: true, title: true, document_no: true, confidentiality_level: true, updated_at: true },
}).then((rows) => rows.map((item) => ({
entityType: "confidential_doc_ref",
entityId: item.id,
title: item.document_no || item.title,
subtitle: ["confidential", "restricted"].includes(item.confidentiality_level) ? "涉密资料引用" : item.title,
status: item.confidentiality_level,
href: "/contracts-registry",
matchedBy: matchByValue(q, item.title, item.document_no),
updatedAt: item.updated_at?.toISOString?.() ?? null,
}))),
);
}
if (featureEnabled.todoBoard) {
tasks.push(
fastify.prisma.todoItem.findMany({
server/src/services/notifications/imEnqueue.js
+36 -2
查看文件
@@ -75,6 +75,32 @@ function buildImDedupeKey({ notificationType, targetType, targetId, targetPath,
].join(':');
}
function redactImMessage(config, payload) {
const effectiveType = String(payload?.entityType ?? payload?.targetType ?? '').trim();
const rawTitle = String(payload?.title ?? '系统通知').slice(0, 200);
const rawBody = payload?.body == null ? '' : String(payload.body);
if (!config?.publicSecurityHardeningEnabled) {
return { title: rawTitle, body: rawBody.slice(0, 4000) };
}
if (effectiveType === 'project') {
return {
title: rawTitle || '项目待处理事项',
body: '',
};
}
if (['contract_registry', 'confidential_doc_ref'].includes(effectiveType)) {
return {
title: '有待处理事项',
body: `事项编号：${String(payload?.targetId ?? payload?.entityId ?? '-').slice(0, 80)}`,
};
}
return { title: rawTitle, body: rawBody.slice(0, 4000) };
}
async function enqueueImNotifications(tx, params) {
const {
config,
@@ -154,6 +180,14 @@ async function enqueueImNotifications(tx, params) {
let queued = 0;
let duplicated = 0;
const redactedMessage = redactImMessage(config, {
title,
body,
targetType,
targetId,
entityType,
entityId,
});
for (const channel of matchedChannels) {
const result = await enqueueIntegrationEvent(tx, {
eventType: 'notification.im',
@@ -171,8 +205,8 @@ async function enqueueImNotifications(tx, params) {
channelType: normalizeChannelType(channel.channel_type),
notificationType,
domainScope,
title: String(title ?? '').slice(0, 200),
body: body == null ? '' : String(body).slice(0, 4000),
title: redactedMessage.title,
body: redactedMessage.body,
targetType: targetType ?? null,
targetId: targetId ?? null,
targetPath: targetPath ?? null,