R23-5：补齐关键E2E并修复试点验收稳定性

client/tests/e2e/confidential-boundary.spec.ts

@@ -0,0 +1,114 @@
+import { expect, test, type APIRequestContext } from "@playwright/test";
+
+import { apiGetData, apiPostData, createAuthenticatedApiClient, login } from "./helpers/auth";
+
+const ADMIN = {
+  identifier: "[email protected]",
+  password: "AdminPassword1234",
+  name: "Admin",
+};
+
+type FeatureFlagItem = {
+  flagKey: string;
+  overrideMode: "inherit" | "force_on" | "force_off";
+  rolloutType: "global" | "department_allowlist";
+  departmentIds: string[];
+  note: string;
+  version: number;
+  effectiveEnabled: boolean;
+};
+
+async function readApiData<T>(response: Awaited<ReturnType<APIRequestContext["put"]>>) {
+  const payload = (await response.json()) as { data?: T; error?: { code?: string; message?: string } };
+  if (!response.ok()) {
+    throw new Error(`${payload.error?.code ?? response.status()}: ${payload.error?.message ?? "request_failed"}`);
+  }
+  return payload.data as T;
+}
+
+async function ensureFeatureFlags(api: APIRequestContext, keys: string[]) {
+  const list = await apiGetData<{ items: FeatureFlagItem[] }>(api, "/api/system/feature-flags");
+  for (const key of keys) {
+    const item = list.items.find((flag) => flag.flagKey === key);
+    if (!item) {
+      throw new Error(`Missing feature flag: ${key}`);
+    }
+    if (item.overrideMode === "force_on" && item.effectiveEnabled) {
+      continue;
+    }
+    await readApiData<{ item: FeatureFlagItem }>(
+      await api.put(`/api/system/feature-flags/${key}`, {
+        data: {
+          overrideMode: "force_on",
+          rolloutType: "global",
+          departmentIds: [],
+          note: "playwright e2e",
+          expectedVersion: item.version,
+        },
+      }),
+    );
+  }
+}
+
+test("E2E 涉密边界：敏感摘要不可搜索，编号可命中", async ({ page }) => {
+  const adminClient = await createAuthenticatedApiClient(ADMIN);
+  const suffix = Date.now();
+  const sensitivePhrase = `极密摘要${suffix}`;
+  const contractNo = `HT-${suffix}`;
+  const docNo = `DOC-${suffix}`;
+
+  await ensureFeatureFlags(adminClient.api, [
+    "global_search_v1",
+    "project_domain_v1",
+    "project_linking_v1",
+    "confidential_doc_refs_v1",
+    "public_security_hardening_v1",
+  ]);
+
+  const project = await apiPostData<{ item: { id: string; name: string } }>(adminClient.api, "/api/projects", {
+    name: `涉密项目 ${suffix}`,
+    clientName: `涉密客户 ${suffix}`,
+    summary: "用于 R23 涉密边界 E2E",
+    isConfidential: true,
+  });
+
+  const contract = await apiPostData<{ item: { id: string } }>(adminClient.api, "/api/contracts-registry", {
+    contractNo,
+    projectId: project.item.id,
+    counterpartyName: `客户 ${suffix}`,
+    summary: sensitivePhrase,
+    confidentialityLevel: "restricted",
+    archiveLocation: `NAS/Contracts/${suffix}`,
+    offlineArchiveNo: `ARC-${suffix}`,
+  });
+
+  await apiPostData<{ item: { id: string } }>(adminClient.api, "/api/confidential-doc-refs", {
+    projectId: project.item.id,
+    contractRegistryId: contract.item.id,
+    title: `资料引用 ${suffix}`,
+    documentNo: docNo,
+    confidentialityLevel: "confidential",
+    storageType: "offline_archive",
+    storagePath: `OFFLINE/${suffix}`,
+    offlineArchiveNo: `DOC-ARC-${suffix}`,
+  });
+
+  await login(page, ADMIN);
+  await page.goto(`/projects/${project.item.id}`);
+  await expect(page.getByText(sensitivePhrase)).toHaveCount(0);
+
+  await page.getByTestId("global-search-trigger").click();
+  const searchInput = page.getByPlaceholder("搜索人员、项目、合同、公告、资产、请假、报销、周报、待办");
+
+  await searchInput.fill(sensitivePhrase);
+  await expect(page.getByRole("button", { name: new RegExp(contractNo) })).toHaveCount(0);
+  await expect(page.getByRole("button", { name: new RegExp(docNo) })).toHaveCount(0);
+
+  await searchInput.fill(contractNo);
+  await expect(page.getByRole("button", { name: new RegExp(contractNo) })).toBeVisible();
+
+  await searchInput.fill(docNo);
+  await expect(page.getByRole("button", { name: new RegExp(docNo) })).toBeVisible();
+
+  await adminClient.dispose();
+});

client/tests/e2e/procurement-flow.spec.ts

@@ -45,7 +45,7 @@ test("E2E 采购主链路：员工提单→经理审批→财务归档", async (
   const title = `Playwright 采购 ${Date.now()}`;
 
   await login(page, EMPLOYEE);
-  await page.getByRole("link", { name: "采购申请" }).click();
+  await page.getByRole("link", { name: "采购申请", exact: true }).first().click();
   await page.getByTestId("purchase-requests-create").click();
 
   await expect(page.getByTestId("purchase-title")).toBeVisible();
@@ -85,7 +85,7 @@ test("E2E 采购主链路：员工提单→经理审批→财务归档", async (
   await logout(page, MANAGER.name);
 
   await login(page, FINANCE_MGR);
-  await page.getByRole("link", { name: "采购申请" }).click();
+  await page.getByRole("link", { name: "采购申请", exact: true }).first().click();
   await page.getByRole("button", { name: "全范围" }).click();
   await page.getByRole("combobox").first().selectOption("approved");
   const purchaseRow = page.getByRole("row").filter({ hasText: title }).first();

client/tests/e2e/project-workbench.spec.ts

@@ -0,0 +1,106 @@
+import { expect, test, type APIRequestContext } from "@playwright/test";
+
+import { apiGetData, apiPostData, createAuthenticatedApiClient, login } from "./helpers/auth";
+
+const ADMIN = {
+  identifier: "[email protected]",
+  password: "AdminPassword1234",
+  name: "Admin",
+};
+
+type FeatureFlagItem = {
+  flagKey: string;
+  overrideMode: "inherit" | "force_on" | "force_off";
+  rolloutType: "global" | "department_allowlist";
+  departmentIds: string[];
+  note: string;
+  version: number;
+  effectiveEnabled: boolean;
+};
+
+async function readApiData<T>(response: Awaited<ReturnType<APIRequestContext["put"]>>) {
+  const payload = (await response.json()) as { data?: T; error?: { code?: string; message?: string } };
+  if (!response.ok()) {
+    throw new Error(`${payload.error?.code ?? response.status()}: ${payload.error?.message ?? "request_failed"}`);
+  }
+  return payload.data as T;
+}
+
+async function ensureFeatureFlags(api: APIRequestContext, keys: string[]) {
+  const list = await apiGetData<{ items: FeatureFlagItem[] }>(api, "/api/system/feature-flags");
+  for (const key of keys) {
+    const item = list.items.find((flag) => flag.flagKey === key);
+    if (!item) {
+      throw new Error(`Missing feature flag: ${key}`);
+    }
+    if (item.overrideMode === "force_on" && item.effectiveEnabled) {
+      continue;
+    }
+    await readApiData<{ item: FeatureFlagItem }>(
+      await api.put(`/api/system/feature-flags/${key}`, {
+        data: {
+          overrideMode: "force_on",
+          rolloutType: "global",
+          departmentIds: [],
+          note: "playwright e2e",
+          expectedVersion: item.version,
+        },
+      }),
+    );
+  }
+}
+
+test("E2E 项目工作台：沟通回填 + 收口面板 + Portal 摘要", async ({ page }) => {
+  const adminClient = await createAuthenticatedApiClient(ADMIN);
+  const suffix = Date.now();
+  const today = new Date().toISOString().slice(0, 10);
+
+  await ensureFeatureFlags(adminClient.api, [
+    "portal_home_v1",
+    "project_domain_v1",
+    "project_linking_v1",
+    "project_communication_log_v1",
+    "project_closure_checklist_v1",
+    "confidential_doc_refs_v1",
+  ]);
+
+  const created = await apiPostData<{ item: { id: string; projectNo: string; name: string } }>(adminClient.api, "/api/projects", {
+    name: `Playwright 项目工作台 ${suffix}`,
+    clientName: `客户 ${suffix}`,
+    summary: "用于验证 R23 项目工作台",
+  });
+  const projectId = created.item.id;
+  const projectName = created.item.name;
+  const communicationSummary = `客户确认现场启动安排 ${suffix}`;
+  const deliveryTitle = `阶段交付 ${suffix}`;
+  const deliverySummary = `已完成现场启动与交付确认 ${suffix}`;
+
+  await apiPostData<{ item: { id: string } }>(adminClient.api, `/api/projects/${projectId}/deliveries`, {
+    title: deliveryTitle,
+    recordType: "onsite",
+    summary: deliverySummary,
+    occurredAt: `${today}T00:00:00.000Z`,
+  });
+
+  await login(page, ADMIN);
+  await page.goto(`/projects/${projectId}`);
+  await expect(page.getByRole("heading", { name: new RegExp(projectName) })).toBeVisible();
+  await expect(page.getByTestId("project-communication-panel")).toBeVisible();
+  await expect(page.getByTestId("project-closure-panel")).toBeVisible();
+
+  const communicationPanel = page.getByTestId("project-communication-panel");
+  await communicationPanel.getByTestId("project-communication-summary-input").fill(communicationSummary);
+  await communicationPanel.locator('input[type="date"]').nth(1).fill(today);
+  await communicationPanel.getByTestId("project-communication-submit").click();
+  await expect(communicationPanel.getByText(communicationSummary)).toBeVisible();
+
+  await expect(page.getByText(deliveryTitle)).toBeVisible();
+
+  await expect(page.getByTestId("project-closure-panel")).toContainText("确认交付/验收记录齐全");
+
+  await page.goto("/portal");
+  await expect(page.getByText(/项目摘要：/)).toContainText("今日待跟进");
+  await expect(page.getByText(/项目摘要：/)).toContainText("待收口项目");
+
+  await adminClient.dispose();
+});

client/tests/e2e/wecom-entry.spec.ts

@@ -0,0 +1,40 @@
+import { expect, test } from "@playwright/test";
+
+import { EMPLOYEE, login } from "./helpers/auth";
+
+test("E2E 企微入口：登录页展示入口并保留账号密码回退", async ({ page }) => {
+  await page.route("**/api/auth/wecom/config", async (route) => {
+    await route.fulfill({
+      status: 200,
+      contentType: "application/json",
+      body: JSON.stringify({
+        requestId: "mock-wecom-config",
+        data: {
+          enabled: true,
+          corpId: "wx-test-corp",
+          agentId: "1000001",
+          oauthEnabled: true,
+          loginUrl: "/api/auth/wecom/login?returnTo=%2Fportal",
+        },
+      }),
+    });
+  });
+  await page.route("**/api/auth/wecom/login?**", async (route) => {
+    await route.fulfill({
+      status: 200,
+      contentType: "text/plain",
+      body: "mock wecom login entry",
+    });
+  });
+
+  await page.goto("/login");
+  await expect(page.getByRole("button", { name: "使用企业微信进入工作台" })).toBeVisible();
+
+  await page.getByRole("button", { name: "使用企业微信进入工作台" }).click();
+  await expect(page).toHaveURL(/\/api\/auth\/wecom\/login\?returnTo=/);
+
+  await login(page, EMPLOYEE);
+  await page.goto("/settings/profile");
+  await expect(page.getByText("企业微信绑定")).toBeVisible();
+  await expect(page.getByText(/接入状态：/)).toBeVisible();
+});