R23-1/R23-2/R23-4：完成项目沟通回填与收口治理后端
这个提交包含在：
@@ -0,0 +1,68 @@
|
||||
-- CreateEnum
|
||||
CREATE TYPE "ProjectCommunicationChannel" AS ENUM ('wechat', 'phone', 'meeting', 'wecom', 'email', 'onsite', 'other');
|
||||
|
||||
-- CreateEnum
|
||||
CREATE TYPE "ProjectClosureChecklistStatus" AS ENUM ('pending', 'done', 'waived');
|
||||
|
||||
-- CreateTable
|
||||
CREATE TABLE "project_communication_logs" (
|
||||
"id" UUID NOT NULL,
|
||||
"project_id" UUID NOT NULL,
|
||||
"happened_at" TIMESTAMP(3) NOT NULL,
|
||||
"channel" "ProjectCommunicationChannel" NOT NULL,
|
||||
"external_contact_name" TEXT,
|
||||
"external_org_name" TEXT,
|
||||
"summary" TEXT NOT NULL,
|
||||
"next_action" TEXT,
|
||||
"next_follow_up_date" DATE,
|
||||
"created_by" UUID NOT NULL,
|
||||
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
"updated_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
CONSTRAINT "project_communication_logs_pkey" PRIMARY KEY ("id")
|
||||
);
|
||||
|
||||
-- CreateTable
|
||||
CREATE TABLE "project_closure_checklist_items" (
|
||||
"id" UUID NOT NULL,
|
||||
"project_id" UUID NOT NULL,
|
||||
"item_key" VARCHAR(64) NOT NULL,
|
||||
"title" TEXT NOT NULL,
|
||||
"status" "ProjectClosureChecklistStatus" NOT NULL DEFAULT 'pending',
|
||||
"note" TEXT,
|
||||
"sort_order" INTEGER NOT NULL DEFAULT 100,
|
||||
"completed_at" TIMESTAMP(3),
|
||||
"completed_by" UUID,
|
||||
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
"updated_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
CONSTRAINT "project_closure_checklist_items_pkey" PRIMARY KEY ("id")
|
||||
);
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_project_communication_logs_project_happened" ON "project_communication_logs"("project_id", "happened_at");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_project_communication_logs_followup" ON "project_communication_logs"("project_id", "next_follow_up_date");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_project_communication_logs_creator_created" ON "project_communication_logs"("created_by", "created_at");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE UNIQUE INDEX "project_closure_checklists_project_key_ux" ON "project_closure_checklist_items"("project_id", "item_key");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_project_closure_checklists_project_status" ON "project_closure_checklist_items"("project_id", "status", "sort_order");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_project_closure_checklists_completed" ON "project_closure_checklist_items"("completed_by", "completed_at");
|
||||
|
||||
-- AddForeignKey
|
||||
ALTER TABLE "project_communication_logs" ADD CONSTRAINT "project_communication_logs_project_id_fkey" FOREIGN KEY ("project_id") REFERENCES "projects"("id") ON DELETE CASCADE ON UPDATE CASCADE;
|
||||
|
||||
-- AddForeignKey
|
||||
ALTER TABLE "project_communication_logs" ADD CONSTRAINT "project_communication_logs_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "employees"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
|
||||
|
||||
-- AddForeignKey
|
||||
ALTER TABLE "project_closure_checklist_items" ADD CONSTRAINT "project_closure_checklist_items_project_id_fkey" FOREIGN KEY ("project_id") REFERENCES "projects"("id") ON DELETE CASCADE ON UPDATE CASCADE;
|
||||
|
||||
-- AddForeignKey
|
||||
ALTER TABLE "project_closure_checklist_items" ADD CONSTRAINT "project_closure_checklist_items_completed_by_fkey" FOREIGN KEY ("completed_by") REFERENCES "employees"("id") ON DELETE SET NULL ON UPDATE CASCADE;
|
||||
+71
-4
@@ -417,6 +417,22 @@ enum ProjectDeliveryRecordType {
|
||||
handover
|
||||
}
|
||||
|
||||
enum ProjectCommunicationChannel {
|
||||
wechat
|
||||
phone
|
||||
meeting
|
||||
wecom
|
||||
email
|
||||
onsite
|
||||
other
|
||||
}
|
||||
|
||||
enum ProjectClosureChecklistStatus {
|
||||
pending
|
||||
done
|
||||
waived
|
||||
}
|
||||
|
||||
enum ConfidentialityLevel {
|
||||
public
|
||||
internal
|
||||
@@ -564,6 +580,8 @@ model Employee {
|
||||
created_project_tasks ProjectTask[] @relation("ProjectTaskCreator")
|
||||
owned_project_risks ProjectRisk[] @relation("ProjectRiskOwner")
|
||||
owned_project_delivery_records ProjectDeliveryRecord[] @relation("ProjectDeliveryRecordOwner")
|
||||
created_project_communication_logs ProjectCommunicationLog[] @relation("ProjectCommunicationLogCreator")
|
||||
completed_project_closure_checklists ProjectClosureChecklistItem[] @relation("ProjectClosureChecklistItemCompleter")
|
||||
owned_contract_registries ContractRegistry[] @relation("ContractRegistryOwner")
|
||||
owned_confidential_document_refs ConfidentialDocumentRef[] @relation("ConfidentialDocumentRefOwner")
|
||||
|
||||
@@ -1767,10 +1785,12 @@ model Project {
|
||||
reimbursements ReimbursementForm[]
|
||||
travel_requests TravelRequest[]
|
||||
todo_items TodoItem[]
|
||||
weekly_reports ProjectLinkOnWeeklyReport[]
|
||||
contracts ContractRegistry[]
|
||||
deliveries ProjectDeliveryRecord[]
|
||||
document_refs ConfidentialDocumentRef[]
|
||||
weekly_reports ProjectLinkOnWeeklyReport[]
|
||||
communication_logs ProjectCommunicationLog[]
|
||||
closure_checklist_items ProjectClosureChecklistItem[]
|
||||
contracts ContractRegistry[]
|
||||
deliveries ProjectDeliveryRecord[]
|
||||
document_refs ConfidentialDocumentRef[]
|
||||
|
||||
@@index([owner_employee_id, status], map: "idx_projects_owner_status")
|
||||
@@index([manager_employee_id, status], map: "idx_projects_manager_status")
|
||||
@@ -1880,6 +1900,53 @@ model ProjectLinkOnWeeklyReport {
|
||||
@@map("weekly_report_project_links")
|
||||
}
|
||||
|
||||
model ProjectCommunicationLog {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
project_id String @db.Uuid
|
||||
happened_at DateTime
|
||||
channel ProjectCommunicationChannel
|
||||
external_contact_name String?
|
||||
external_org_name String?
|
||||
summary String
|
||||
next_action String?
|
||||
next_follow_up_date DateTime? @db.Date
|
||||
created_by String @db.Uuid
|
||||
|
||||
created_at DateTime @default(now())
|
||||
updated_at DateTime @default(now()) @updatedAt
|
||||
|
||||
project Project @relation(fields: [project_id], references: [id], onDelete: Cascade)
|
||||
creator Employee @relation("ProjectCommunicationLogCreator", fields: [created_by], references: [id], onDelete: Restrict)
|
||||
|
||||
@@index([project_id, happened_at], map: "idx_project_communication_logs_project_happened")
|
||||
@@index([project_id, next_follow_up_date], map: "idx_project_communication_logs_followup")
|
||||
@@index([created_by, created_at], map: "idx_project_communication_logs_creator_created")
|
||||
@@map("project_communication_logs")
|
||||
}
|
||||
|
||||
model ProjectClosureChecklistItem {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
project_id String @db.Uuid
|
||||
item_key String @db.VarChar(64)
|
||||
title String
|
||||
status ProjectClosureChecklistStatus @default(pending)
|
||||
note String?
|
||||
sort_order Int @default(100)
|
||||
completed_at DateTime?
|
||||
completed_by String? @db.Uuid
|
||||
|
||||
created_at DateTime @default(now())
|
||||
updated_at DateTime @default(now()) @updatedAt
|
||||
|
||||
project Project @relation(fields: [project_id], references: [id], onDelete: Cascade)
|
||||
completer Employee? @relation("ProjectClosureChecklistItemCompleter", fields: [completed_by], references: [id], onDelete: SetNull)
|
||||
|
||||
@@unique([project_id, item_key], map: "project_closure_checklists_project_key_ux")
|
||||
@@index([project_id, status, sort_order], map: "idx_project_closure_checklists_project_status")
|
||||
@@index([completed_by, completed_at], map: "idx_project_closure_checklists_completed")
|
||||
@@map("project_closure_checklist_items")
|
||||
}
|
||||
|
||||
model ContractRegistry {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
contract_no String @unique
|
||||
|
||||
@@ -126,6 +126,8 @@ function getConfig() {
|
||||
wecomEntryEnabled: process.env.WECOM_ENTRY_ENABLED === "true",
|
||||
projectDomainEnabled: process.env.PROJECT_DOMAIN_ENABLED === "true",
|
||||
projectLinkingEnabled: process.env.PROJECT_LINKING_ENABLED === "true",
|
||||
projectCommunicationLogEnabled: process.env.PROJECT_COMMUNICATION_LOG_ENABLED === "true",
|
||||
projectClosureChecklistEnabled: process.env.PROJECT_CLOSURE_CHECKLIST_ENABLED === "true",
|
||||
confidentialDocRefsEnabled: process.env.CONFIDENTIAL_DOC_REFS_ENABLED === "true",
|
||||
publicSecurityHardeningEnabled: process.env.PUBLIC_SECURITY_HARDENING_ENABLED === "true",
|
||||
|
||||
|
||||
+45
-36
@@ -44,6 +44,23 @@ async function evaluateOptionalFlag(fastify, request, flagKey) {
|
||||
return gate.enabled;
|
||||
}
|
||||
|
||||
function canReadAllProjects(fastify, employee) {
|
||||
return fastify.hasPermission(employee, "project.view_all") || fastify.hasPermission(employee, "project.manage") || fastify.hasPermission(employee, "*");
|
||||
}
|
||||
|
||||
function projectScopeWhere(fastify, employee) {
|
||||
if (canReadAllProjects(fastify, employee)) {
|
||||
return undefined;
|
||||
}
|
||||
return {
|
||||
OR: [
|
||||
{ owner_employee_id: employee.id },
|
||||
{ manager_employee_id: employee.id },
|
||||
{ members: { some: { employee_id: employee.id, left_at: null } } },
|
||||
],
|
||||
};
|
||||
}
|
||||
|
||||
function resolveWeekStart(rawDateString) {
|
||||
const date = parseDateOnlyString(rawDateString);
|
||||
const day = date.getUTCDay() || 7;
|
||||
@@ -190,6 +207,8 @@ async function portalRoutes(fastify) {
|
||||
todoBoard: await evaluateOptionalFlag(fastify, request, FEATURE_FLAG_KEYS.todoBoard),
|
||||
paymentBatch: await evaluateOptionalFlag(fastify, request, FEATURE_FLAG_KEYS.paymentBatch),
|
||||
projectDomain: await evaluateOptionalFlag(fastify, request, FEATURE_FLAG_KEYS.projectDomain),
|
||||
projectCommunicationLog: await evaluateOptionalFlag(fastify, request, FEATURE_FLAG_KEYS.projectCommunicationLog),
|
||||
projectClosureChecklist: await evaluateOptionalFlag(fastify, request, FEATURE_FLAG_KEYS.projectClosureChecklist),
|
||||
};
|
||||
|
||||
const [
|
||||
@@ -210,6 +229,8 @@ async function portalRoutes(fastify) {
|
||||
overdueProjectMilestoneCount,
|
||||
highPriorityProjectTaskCount,
|
||||
openProjectRiskCount,
|
||||
projectFollowUpDueTodayCount,
|
||||
closurePendingProjectCount,
|
||||
] = await Promise.all([
|
||||
fastify.prisma.workflowTask.count({ where: { status: "pending", OR: assigneeFilters } }),
|
||||
fastify.prisma.reimbursementForm.count({ where: { OR: [{ owner_id: request.employee.id }, { submitter_id: request.employee.id }] } }),
|
||||
@@ -270,15 +291,7 @@ async function portalRoutes(fastify) {
|
||||
: Promise.resolve(0),
|
||||
featureEnabled.projectDomain
|
||||
? fastify.prisma.project.count({
|
||||
where: fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "*")
|
||||
? {}
|
||||
: {
|
||||
OR: [
|
||||
{ owner_employee_id: request.employee.id },
|
||||
{ manager_employee_id: request.employee.id },
|
||||
{ members: { some: { employee_id: request.employee.id, left_at: null } } },
|
||||
],
|
||||
},
|
||||
where: projectScopeWhere(fastify, request.employee) ?? {},
|
||||
})
|
||||
: Promise.resolve(0),
|
||||
featureEnabled.projectDomain
|
||||
@@ -286,15 +299,7 @@ async function portalRoutes(fastify) {
|
||||
where: {
|
||||
status: { in: ["pending", "in_progress", "delayed"] },
|
||||
due_date: { lt: new Date() },
|
||||
project: fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "*")
|
||||
? undefined
|
||||
: {
|
||||
OR: [
|
||||
{ owner_employee_id: request.employee.id },
|
||||
{ manager_employee_id: request.employee.id },
|
||||
{ members: { some: { employee_id: request.employee.id, left_at: null } } },
|
||||
],
|
||||
},
|
||||
project: projectScopeWhere(fastify, request.employee),
|
||||
},
|
||||
})
|
||||
: Promise.resolve(0),
|
||||
@@ -303,15 +308,7 @@ async function portalRoutes(fastify) {
|
||||
where: {
|
||||
status: { in: ["todo", "doing", "blocked"] },
|
||||
priority: { in: ["high", "urgent"] },
|
||||
project: fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "*")
|
||||
? undefined
|
||||
: {
|
||||
OR: [
|
||||
{ owner_employee_id: request.employee.id },
|
||||
{ manager_employee_id: request.employee.id },
|
||||
{ members: { some: { employee_id: request.employee.id, left_at: null } } },
|
||||
],
|
||||
},
|
||||
project: projectScopeWhere(fastify, request.employee),
|
||||
},
|
||||
})
|
||||
: Promise.resolve(0),
|
||||
@@ -319,18 +316,28 @@ async function portalRoutes(fastify) {
|
||||
? fastify.prisma.projectRisk.count({
|
||||
where: {
|
||||
status: { not: "closed" },
|
||||
project: fastify.hasPermission(request.employee, "project.view_all") || fastify.hasPermission(request.employee, "project.manage") || fastify.hasPermission(request.employee, "*")
|
||||
? undefined
|
||||
: {
|
||||
OR: [
|
||||
{ owner_employee_id: request.employee.id },
|
||||
{ manager_employee_id: request.employee.id },
|
||||
{ members: { some: { employee_id: request.employee.id, left_at: null } } },
|
||||
],
|
||||
},
|
||||
project: projectScopeWhere(fastify, request.employee),
|
||||
},
|
||||
})
|
||||
: Promise.resolve(0),
|
||||
featureEnabled.projectDomain && featureEnabled.projectCommunicationLog
|
||||
? fastify.prisma.projectCommunicationLog.count({
|
||||
where: {
|
||||
next_follow_up_date: parseDateOnlyString(today),
|
||||
project: projectScopeWhere(fastify, request.employee),
|
||||
},
|
||||
})
|
||||
: Promise.resolve(0),
|
||||
featureEnabled.projectDomain && featureEnabled.projectClosureChecklist
|
||||
? fastify.prisma.projectClosureChecklistItem.findMany({
|
||||
where: {
|
||||
status: "pending",
|
||||
project: projectScopeWhere(fastify, request.employee),
|
||||
},
|
||||
distinct: ["project_id"],
|
||||
select: { project_id: true },
|
||||
}).then((items) => items.length)
|
||||
: Promise.resolve(0),
|
||||
]);
|
||||
|
||||
const todayPresence = featureEnabled.presenceBoard
|
||||
@@ -507,6 +514,8 @@ async function portalRoutes(fastify) {
|
||||
overdueMilestonesCount: overdueProjectMilestoneCount,
|
||||
highPriorityTaskCount: highPriorityProjectTaskCount,
|
||||
openRiskCount: openProjectRiskCount,
|
||||
followUpDueTodayCount: projectFollowUpDueTodayCount,
|
||||
closurePendingProjectCount,
|
||||
href: "/projects",
|
||||
}
|
||||
: null,
|
||||
|
||||
+350
-51
@@ -86,6 +86,34 @@ const DELIVERY_CREATE_SCHEMA = z.object({
|
||||
ownerEmployeeId: UUID_SCHEMA.optional(),
|
||||
}).strict();
|
||||
|
||||
const COMMUNICATION_CHANNEL_SCHEMA = z.enum(["wechat", "phone", "meeting", "wecom", "email", "onsite", "other"]);
|
||||
const CLOSURE_CHECKLIST_STATUS_SCHEMA = z.enum(["pending", "done", "waived"]);
|
||||
const COMMUNICATION_LOG_CREATE_SCHEMA = z.object({
|
||||
happenedAt: z.string().datetime(),
|
||||
channel: COMMUNICATION_CHANNEL_SCHEMA,
|
||||
externalContactName: z.string().trim().max(120).nullable().optional(),
|
||||
externalOrgName: z.string().trim().max(200).nullable().optional(),
|
||||
summary: z.string().trim().min(1).max(1000),
|
||||
nextAction: z.string().trim().max(300).nullable().optional(),
|
||||
nextFollowUpDate: DATE_SCHEMA.nullable().optional(),
|
||||
}).strict();
|
||||
const COMMUNICATION_LOG_PATCH_SCHEMA = COMMUNICATION_LOG_CREATE_SCHEMA.partial().refine((value) => Object.keys(value).length > 0, { message: "empty_patch" });
|
||||
const CLOSURE_CHECKLIST_PATCH_SCHEMA = z.object({
|
||||
status: CLOSURE_CHECKLIST_STATUS_SCHEMA.optional(),
|
||||
note: z.string().trim().max(500).nullable().optional(),
|
||||
}).strict().refine((value) => Object.keys(value).length > 0, { message: "empty_patch" });
|
||||
|
||||
const PROJECT_CLOSURE_TEMPLATE = [
|
||||
{ itemKey: "delivery_record_checked", title: "确认交付/验收记录齐全", sortOrder: 10 },
|
||||
{ itemKey: "risk_review_done", title: "确认项目风险已收口或转监控", sortOrder: 20 },
|
||||
{ itemKey: "reimbursement_cleared", title: "确认关联报销已处理", sortOrder: 30 },
|
||||
{ itemKey: "travel_cleared", title: "确认关联差旅已处理", sortOrder: 40 },
|
||||
{ itemKey: "contract_archive_confirmed", title: "确认合同台账与归档位置已核对", sortOrder: 50 },
|
||||
{ itemKey: "handover_note_done", title: "确认项目交接说明已补齐", sortOrder: 60 },
|
||||
];
|
||||
|
||||
const PROJECT_COMMUNICATION_EDIT_WINDOW_MS = 24 * 60 * 60 * 1000;
|
||||
|
||||
function buildValidationError(details, statusCode = 400) {
|
||||
return new AppError({ code: "VALID_001", message: "参数校验失败", statusCode, details });
|
||||
}
|
||||
@@ -131,36 +159,51 @@ function hasGlobalProjectManage(fastify, employee) {
|
||||
return fastify.hasPermission(employee, "project.manage") || fastify.hasPermission(employee, "system.settings");
|
||||
}
|
||||
|
||||
async function loadProjectContext(prisma, projectId, employeeId) {
|
||||
return prisma.project.findUnique({
|
||||
where: { id: projectId },
|
||||
include: {
|
||||
owner: { select: { id: true, employee_no: true, name: true } },
|
||||
manager: { select: { id: true, employee_no: true, name: true } },
|
||||
members: {
|
||||
where: { left_at: null },
|
||||
include: { employee: { select: { id: true, employee_no: true, name: true } } },
|
||||
orderBy: [{ role: "asc" }, { joined_at: "asc" }],
|
||||
function buildProjectDetailInclude() {
|
||||
return {
|
||||
owner: { select: { id: true, employee_no: true, name: true } },
|
||||
manager: { select: { id: true, employee_no: true, name: true } },
|
||||
members: {
|
||||
where: { left_at: null },
|
||||
include: { employee: { select: { id: true, employee_no: true, name: true } } },
|
||||
orderBy: [{ role: "asc" }, { joined_at: "asc" }],
|
||||
},
|
||||
milestones: { orderBy: [{ sort_order: "asc" }, { due_date: "asc" }] },
|
||||
tasks: {
|
||||
include: {
|
||||
assignee: { select: { id: true, employee_no: true, name: true } },
|
||||
creator: { select: { id: true, employee_no: true, name: true } },
|
||||
},
|
||||
milestones: { orderBy: [{ sort_order: "asc" }, { due_date: "asc" }] },
|
||||
tasks: { include: { assignee: { select: { id: true, employee_no: true, name: true } }, creator: { select: { id: true, employee_no: true, name: true } } }, orderBy: [{ priority: "desc" }, { due_date: "asc" }, { created_at: "desc" }] },
|
||||
risks: { include: { owner: { select: { id: true, employee_no: true, name: true } } }, orderBy: [{ level: "desc" }, { created_at: "desc" }] },
|
||||
_count: {
|
||||
select: {
|
||||
members: true,
|
||||
milestones: true,
|
||||
tasks: true,
|
||||
risks: true,
|
||||
reimbursements: true,
|
||||
travel_requests: true,
|
||||
todo_items: true,
|
||||
weekly_reports: true,
|
||||
contracts: true,
|
||||
deliveries: true,
|
||||
document_refs: true,
|
||||
},
|
||||
orderBy: [{ priority: "desc" }, { due_date: "asc" }, { created_at: "desc" }],
|
||||
},
|
||||
risks: {
|
||||
include: { owner: { select: { id: true, employee_no: true, name: true } } },
|
||||
orderBy: [{ level: "desc" }, { created_at: "desc" }],
|
||||
},
|
||||
_count: {
|
||||
select: {
|
||||
members: true,
|
||||
milestones: true,
|
||||
tasks: true,
|
||||
risks: true,
|
||||
reimbursements: true,
|
||||
travel_requests: true,
|
||||
todo_items: true,
|
||||
weekly_reports: true,
|
||||
communication_logs: true,
|
||||
closure_checklist_items: true,
|
||||
contracts: true,
|
||||
deliveries: true,
|
||||
document_refs: true,
|
||||
},
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
async function loadProjectContext(prisma, projectId) {
|
||||
return prisma.project.findUnique({
|
||||
where: { id: projectId },
|
||||
include: buildProjectDetailInclude(),
|
||||
});
|
||||
}
|
||||
|
||||
@@ -224,6 +267,139 @@ function mapEmployeeBasic(employee) {
|
||||
return { id: employee.id, employeeNo: employee.employee_no, name: employee.name };
|
||||
}
|
||||
|
||||
|
||||
function startOfUtcDay(value = new Date()) {
|
||||
return new Date(`${value.toISOString().slice(0, 10)}T00:00:00.000Z`);
|
||||
}
|
||||
|
||||
function endOfUtcDay(value = new Date()) {
|
||||
return new Date(`${value.toISOString().slice(0, 10)}T23:59:59.999Z`);
|
||||
}
|
||||
|
||||
function mapProjectCommunicationLog(item, canEdit) {
|
||||
return {
|
||||
id: item.id,
|
||||
happenedAt: item.happened_at?.toISOString?.() ?? null,
|
||||
channel: item.channel,
|
||||
externalContactName: item.external_contact_name ?? null,
|
||||
externalOrgName: item.external_org_name ?? null,
|
||||
summary: item.summary,
|
||||
nextAction: item.next_action ?? null,
|
||||
nextFollowUpDate: item.next_follow_up_date?.toISOString?.().slice(0, 10) ?? null,
|
||||
createdBy: item.created_by,
|
||||
createdAt: item.created_at?.toISOString?.() ?? null,
|
||||
updatedAt: item.updated_at?.toISOString?.() ?? null,
|
||||
canEdit,
|
||||
creator: mapEmployeeBasic(item.creator),
|
||||
};
|
||||
}
|
||||
|
||||
function mapProjectClosureChecklistItem(item, canEdit) {
|
||||
return {
|
||||
id: item.id,
|
||||
itemKey: item.item_key,
|
||||
title: item.title,
|
||||
status: item.status,
|
||||
note: item.note ?? null,
|
||||
sortOrder: item.sort_order,
|
||||
completedAt: item.completed_at?.toISOString?.() ?? null,
|
||||
completedBy: item.completed_by ?? null,
|
||||
canEdit,
|
||||
completer: mapEmployeeBasic(item.completer),
|
||||
};
|
||||
}
|
||||
|
||||
function canEditCommunicationLog(fastify, employee, project, item) {
|
||||
if (hasGlobalProjectManage(fastify, employee) || canManageProjectRecord(fastify, employee.id, project)) {
|
||||
return true;
|
||||
}
|
||||
if (item.created_by !== employee.id) {
|
||||
return false;
|
||||
}
|
||||
return Date.now() - new Date(item.created_at).getTime() <= PROJECT_COMMUNICATION_EDIT_WINDOW_MS;
|
||||
}
|
||||
|
||||
async function ensureClosureChecklistBootstrapped(prisma, projectId) {
|
||||
const count = await prisma.projectClosureChecklistItem.count({ where: { project_id: projectId } });
|
||||
if (count > 0) {
|
||||
return false;
|
||||
}
|
||||
await prisma.projectClosureChecklistItem.createMany({
|
||||
data: PROJECT_CLOSURE_TEMPLATE.map((item) => ({
|
||||
project_id: projectId,
|
||||
item_key: item.itemKey,
|
||||
title: item.title,
|
||||
sort_order: item.sortOrder,
|
||||
status: "pending",
|
||||
})),
|
||||
skipDuplicates: true,
|
||||
});
|
||||
return true;
|
||||
}
|
||||
|
||||
async function buildProjectCommunicationSummary(prisma, projectId) {
|
||||
const todayStart = startOfUtcDay();
|
||||
const todayEnd = endOfUtcDay();
|
||||
const [totalCount, latest, followUpDueTodayCount, overdueFollowUpCount] = await Promise.all([
|
||||
prisma.projectCommunicationLog.count({ where: { project_id: projectId } }),
|
||||
prisma.projectCommunicationLog.findFirst({ where: { project_id: projectId }, orderBy: [{ happened_at: "desc" }, { updated_at: "desc" }] }),
|
||||
prisma.projectCommunicationLog.count({ where: { project_id: projectId, next_follow_up_date: { gte: todayStart, lte: todayEnd } } }),
|
||||
prisma.projectCommunicationLog.count({ where: { project_id: projectId, next_follow_up_date: { lt: todayStart } } }),
|
||||
]);
|
||||
return {
|
||||
totalCount,
|
||||
latestHappenedAt: latest?.happened_at?.toISOString?.() ?? null,
|
||||
followUpDueTodayCount,
|
||||
overdueFollowUpCount,
|
||||
};
|
||||
}
|
||||
|
||||
async function buildProjectClosureSummary(prisma, projectId) {
|
||||
const items = await prisma.projectClosureChecklistItem.findMany({ where: { project_id: projectId }, select: { status: true } });
|
||||
const pendingCount = items.filter((item) => item.status === "pending").length;
|
||||
const waivedCount = items.filter((item) => item.status === "waived").length;
|
||||
const [openRiskCount, openReimbursementCount, openTravelCount, deliveryRecordCount, contractCount, confidentialDocRefCount] = await Promise.all([
|
||||
prisma.projectRisk.count({ where: { project_id: projectId, status: { not: "closed" } } }),
|
||||
prisma.reimbursementForm.count({ where: { project_id: projectId, status: { notIn: ["paid", "cancelled", "rejected"] } } }),
|
||||
prisma.travelRequest.count({ where: { project_id: projectId, status: { notIn: ["rejected"] } } }),
|
||||
prisma.projectDeliveryRecord.count({ where: { project_id: projectId } }),
|
||||
prisma.contractRegistry.count({ where: { project_id: projectId } }),
|
||||
prisma.confidentialDocumentRef.count({ where: { project_id: projectId } }),
|
||||
]);
|
||||
return {
|
||||
totalCount: items.length,
|
||||
pendingCount,
|
||||
waivedCount,
|
||||
warned: pendingCount > 0,
|
||||
facts: {
|
||||
openRiskCount,
|
||||
openReimbursementCount,
|
||||
openTravelCount,
|
||||
deliveryRecordCount,
|
||||
contractCount,
|
||||
confidentialDocRefCount,
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
async function buildProjectDetailPayload(fastify, request, project) {
|
||||
const [communicationSummary, closureSummary, communicationGate, closureGate] = await Promise.all([
|
||||
buildProjectCommunicationSummary(fastify.prisma, project.id),
|
||||
buildProjectClosureSummary(fastify.prisma, project.id),
|
||||
evaluateFeatureFlag({ prisma: fastify.prisma, config: fastify.config, flagKey: FEATURE_FLAG_KEYS.projectCommunicationLog, departmentId: request.employee.department_id ?? null, strictDepartment: false }),
|
||||
evaluateFeatureFlag({ prisma: fastify.prisma, config: fastify.config, flagKey: FEATURE_FLAG_KEYS.projectClosureChecklist, departmentId: request.employee.department_id ?? null, strictDepartment: false }),
|
||||
]);
|
||||
return {
|
||||
...mapProjectDetail(project),
|
||||
communicationSummary,
|
||||
closureSummary,
|
||||
capabilities: {
|
||||
communicationLogEnabled: communicationGate.enabled,
|
||||
closureChecklistEnabled: closureGate.enabled,
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
function mapProjectDetail(project) {
|
||||
return {
|
||||
id: project.id,
|
||||
@@ -252,6 +428,8 @@ function mapProjectDetail(project) {
|
||||
travelRequests: project._count?.travel_requests ?? 0,
|
||||
todoItems: project._count?.todo_items ?? 0,
|
||||
weeklyReports: project._count?.weekly_reports ?? 0,
|
||||
communicationLogs: project._count?.communication_logs ?? 0,
|
||||
closureChecklistItems: project._count?.closure_checklist_items ?? 0,
|
||||
contracts: project._count?.contracts ?? 0,
|
||||
deliveries: project._count?.deliveries ?? 0,
|
||||
documentRefs: project._count?.document_refs ?? 0,
|
||||
@@ -405,25 +583,18 @@ async function projectsRoutes(fastify) {
|
||||
},
|
||||
},
|
||||
},
|
||||
include: {
|
||||
owner: { select: { id: true, employee_no: true, name: true } },
|
||||
manager: { select: { id: true, employee_no: true, name: true } },
|
||||
members: { where: { left_at: null }, include: { employee: { select: { id: true, employee_no: true, name: true } } } },
|
||||
milestones: true,
|
||||
tasks: { include: { assignee: { select: { id: true, employee_no: true, name: true } }, creator: { select: { id: true, employee_no: true, name: true } } } },
|
||||
risks: { include: { owner: { select: { id: true, employee_no: true, name: true } } } },
|
||||
_count: { select: { members: true, milestones: true, tasks: true, risks: true, reimbursements: true, travel_requests: true, todo_items: true, weekly_reports: true, contracts: true, deliveries: true, document_refs: true } },
|
||||
},
|
||||
include: buildProjectDetailInclude(),
|
||||
});
|
||||
await writeAudit(fastify, request, "PROJECT_CREATED", created.id, { projectNo: created.project_no });
|
||||
return reply.code(201).send({ requestId: request.id, data: { item: mapProjectDetail(created) } });
|
||||
const payload = await buildProjectDetailPayload(fastify, request, created);
|
||||
return reply.code(201).send({ requestId: request.id, data: { item: payload } });
|
||||
});
|
||||
|
||||
fastify.get("/projects/:id", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request, FEATURE_FLAG_KEYS.projectDomain);
|
||||
const projectId = parseId(request.params?.id);
|
||||
const project = await ensureReadableProject(fastify, request, projectId);
|
||||
return sendData(reply, request, { item: mapProjectDetail(project) });
|
||||
return sendData(reply, request, { item: await buildProjectDetailPayload(fastify, request, project) });
|
||||
});
|
||||
|
||||
fastify.patch("/projects/:id", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
@@ -431,6 +602,11 @@ async function projectsRoutes(fastify) {
|
||||
const projectId = parseId(request.params?.id);
|
||||
await ensureManageableProject(fastify, request, projectId);
|
||||
const body = parseBody(PROJECT_PATCH_SCHEMA, request.body);
|
||||
const wantsClosureWarning = ["completed", "archived"].includes(body.status ?? "");
|
||||
if (wantsClosureWarning) {
|
||||
await ensureFeatureEnabled(fastify, request, FEATURE_FLAG_KEYS.projectClosureChecklist);
|
||||
await ensureClosureChecklistBootstrapped(fastify.prisma, projectId);
|
||||
}
|
||||
const updated = await fastify.prisma.project.update({
|
||||
where: { id: projectId },
|
||||
data: {
|
||||
@@ -447,27 +623,32 @@ async function projectsRoutes(fastify) {
|
||||
...(body.summary !== undefined ? { summary: body.summary ?? null } : {}),
|
||||
...(body.isConfidential !== undefined ? { is_confidential: body.isConfidential } : {}),
|
||||
},
|
||||
include: {
|
||||
owner: { select: { id: true, employee_no: true, name: true } },
|
||||
manager: { select: { id: true, employee_no: true, name: true } },
|
||||
members: { where: { left_at: null }, include: { employee: { select: { id: true, employee_no: true, name: true } } } },
|
||||
milestones: true,
|
||||
tasks: { include: { assignee: { select: { id: true, employee_no: true, name: true } }, creator: { select: { id: true, employee_no: true, name: true } } } },
|
||||
risks: { include: { owner: { select: { id: true, employee_no: true, name: true } } } },
|
||||
_count: { select: { members: true, milestones: true, tasks: true, risks: true, reimbursements: true, travel_requests: true, todo_items: true, weekly_reports: true, contracts: true, deliveries: true, document_refs: true } },
|
||||
},
|
||||
include: buildProjectDetailInclude(),
|
||||
});
|
||||
await writeAudit(fastify, request, "PROJECT_UPDATED", projectId, { fields: Object.keys(body) });
|
||||
return sendData(reply, request, { item: mapProjectDetail(updated) });
|
||||
const item = await buildProjectDetailPayload(fastify, request, updated);
|
||||
const closureWarning = wantsClosureWarning && item.closureSummary.pendingCount > 0
|
||||
? { pendingCount: item.closureSummary.pendingCount, message: `项目仍有 ${item.closureSummary.pendingCount} 项待收口，请尽快补齐。` }
|
||||
: null;
|
||||
return sendData(reply, request, { item, closureWarning });
|
||||
});
|
||||
|
||||
fastify.post("/projects/:id/archive", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request, FEATURE_FLAG_KEYS.projectDomain);
|
||||
const projectId = parseId(request.params?.id);
|
||||
await ensureManageableProject(fastify, request, projectId);
|
||||
const updated = await fastify.prisma.project.update({ where: { id: projectId }, data: { status: "archived", actual_end_at: new Date() } });
|
||||
await writeAudit(fastify, request, "PROJECT_ARCHIVED", projectId, {});
|
||||
return sendData(reply, request, { item: { id: updated.id, status: updated.status } });
|
||||
let closureWarning = null;
|
||||
const closureGate = await evaluateFeatureFlag({ prisma: fastify.prisma, config: fastify.config, flagKey: FEATURE_FLAG_KEYS.projectClosureChecklist, departmentId: request.employee.department_id ?? null, strictDepartment: false });
|
||||
if (closureGate.enabled) {
|
||||
await ensureClosureChecklistBootstrapped(fastify.prisma, projectId);
|
||||
}
|
||||
const updated = await fastify.prisma.project.update({ where: { id: projectId }, data: { status: "archived", actual_end_at: new Date() }, include: buildProjectDetailInclude() });
|
||||
const item = await buildProjectDetailPayload(fastify, request, updated);
|
||||
if (closureGate.enabled && item.closureSummary.pendingCount > 0) {
|
||||
closureWarning = { pendingCount: item.closureSummary.pendingCount, message: `项目仍有 ${item.closureSummary.pendingCount} 项待收口，请尽快补齐。` };
|
||||
}
|
||||
await writeAudit(fastify, request, "PROJECT_ARCHIVED", projectId, { warned: Boolean(closureWarning) });
|
||||
return sendData(reply, request, { item, closureWarning });
|
||||
});
|
||||
|
||||
fastify.get("/projects/:id/members", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
@@ -692,6 +873,124 @@ async function projectsRoutes(fastify) {
|
||||
return sendData(reply, request, { items: items.map((item) => ({ id: item.id, weeklyReportId: item.weekly_report_id, weekStart: item.weekly_report.week_start?.toISOString?.().slice(0, 10) ?? null, status: item.weekly_report.status, employee: mapEmployeeBasic(item.weekly_report.employee), progressText: item.progress_text, riskText: item.risk_text, nextStepText: item.next_step_text, updatedAt: item.updated_at?.toISOString?.() ?? null })) });
|
||||
});
|
||||
|
||||
fastify.get("/projects/:id/communication-logs", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request, FEATURE_FLAG_KEYS.projectCommunicationLog);
|
||||
const projectId = parseId(request.params?.id);
|
||||
const project = await ensureReadableProject(fastify, request, projectId);
|
||||
const items = await fastify.prisma.projectCommunicationLog.findMany({
|
||||
where: { project_id: projectId },
|
||||
orderBy: [{ happened_at: "desc" }, { updated_at: "desc" }],
|
||||
take: 50,
|
||||
include: { creator: { select: { id: true, employee_no: true, name: true } } },
|
||||
});
|
||||
return sendData(reply, request, { items: items.map((item) => mapProjectCommunicationLog(item, canEditCommunicationLog(fastify, request.employee, project, item))) });
|
||||
});
|
||||
|
||||
fastify.post("/projects/:id/communication-logs", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request, FEATURE_FLAG_KEYS.projectCommunicationLog);
|
||||
const projectId = parseId(request.params?.id);
|
||||
await ensureReadableProject(fastify, request, projectId);
|
||||
const body = parseBody(COMMUNICATION_LOG_CREATE_SCHEMA, request.body);
|
||||
const created = await fastify.prisma.projectCommunicationLog.create({
|
||||
data: {
|
||||
project_id: projectId,
|
||||
happened_at: new Date(body.happenedAt),
|
||||
channel: body.channel,
|
||||
external_contact_name: body.externalContactName ?? null,
|
||||
external_org_name: body.externalOrgName ?? null,
|
||||
summary: body.summary,
|
||||
next_action: body.nextAction ?? null,
|
||||
next_follow_up_date: parseDateOnly(body.nextFollowUpDate),
|
||||
created_by: request.employee.id,
|
||||
},
|
||||
include: { creator: { select: { id: true, employee_no: true, name: true } } },
|
||||
});
|
||||
await writeAudit(fastify, request, "PROJECT_COMMUNICATION_LOG_CREATED", projectId, { logId: created.id, channel: created.channel });
|
||||
return reply.code(201).send({ requestId: request.id, data: { item: mapProjectCommunicationLog(created, true) } });
|
||||
});
|
||||
|
||||
fastify.patch("/projects/:id/communication-logs/:logId", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request, FEATURE_FLAG_KEYS.projectCommunicationLog);
|
||||
const projectId = parseId(request.params?.id);
|
||||
const logId = parseId(request.params?.logId, "logId");
|
||||
const project = await ensureReadableProject(fastify, request, projectId);
|
||||
const current = await fastify.prisma.projectCommunicationLog.findUnique({
|
||||
where: { id: logId },
|
||||
include: { creator: { select: { id: true, employee_no: true, name: true } } },
|
||||
});
|
||||
if (!current || current.project_id !== projectId) {
|
||||
throw new AppError({ code: "SYS_404", message: "Not Found", statusCode: 404 });
|
||||
}
|
||||
if (!canEditCommunicationLog(fastify, request.employee, project, current)) {
|
||||
throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403, details: { permission: "project.manage" } });
|
||||
}
|
||||
const body = parseBody(COMMUNICATION_LOG_PATCH_SCHEMA, request.body);
|
||||
const updated = await fastify.prisma.projectCommunicationLog.update({
|
||||
where: { id: logId },
|
||||
data: {
|
||||
...(body.happenedAt !== undefined ? { happened_at: new Date(body.happenedAt) } : {}),
|
||||
...(body.channel !== undefined ? { channel: body.channel } : {}),
|
||||
...(body.externalContactName !== undefined ? { external_contact_name: body.externalContactName ?? null } : {}),
|
||||
...(body.externalOrgName !== undefined ? { external_org_name: body.externalOrgName ?? null } : {}),
|
||||
...(body.summary !== undefined ? { summary: body.summary } : {}),
|
||||
...(body.nextAction !== undefined ? { next_action: body.nextAction ?? null } : {}),
|
||||
...(body.nextFollowUpDate !== undefined ? { next_follow_up_date: parseDateOnly(body.nextFollowUpDate) } : {}),
|
||||
},
|
||||
include: { creator: { select: { id: true, employee_no: true, name: true } } },
|
||||
});
|
||||
await writeAudit(fastify, request, "PROJECT_COMMUNICATION_LOG_UPDATED", projectId, { logId });
|
||||
return sendData(reply, request, { item: mapProjectCommunicationLog(updated, canEditCommunicationLog(fastify, request.employee, project, updated)) });
|
||||
});
|
||||
|
||||
fastify.get("/projects/:id/closure-checklist", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request, FEATURE_FLAG_KEYS.projectClosureChecklist);
|
||||
const projectId = parseId(request.params?.id);
|
||||
const project = await ensureReadableProject(fastify, request, projectId);
|
||||
await ensureClosureChecklistBootstrapped(fastify.prisma, projectId);
|
||||
const canEdit = hasGlobalProjectManage(fastify, request.employee) || canManageProjectRecord(fastify, request.employee.id, project);
|
||||
const items = await fastify.prisma.projectClosureChecklistItem.findMany({
|
||||
where: { project_id: projectId },
|
||||
orderBy: [{ sort_order: "asc" }, { created_at: "asc" }],
|
||||
include: { completer: { select: { id: true, employee_no: true, name: true } } },
|
||||
});
|
||||
return sendData(reply, request, { items: items.map((item) => mapProjectClosureChecklistItem(item, canEdit)) });
|
||||
});
|
||||
|
||||
fastify.patch("/projects/:id/closure-checklist/:itemId", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request, FEATURE_FLAG_KEYS.projectClosureChecklist);
|
||||
const projectId = parseId(request.params?.id);
|
||||
await ensureManageableProject(fastify, request, projectId);
|
||||
await ensureClosureChecklistBootstrapped(fastify.prisma, projectId);
|
||||
const itemId = parseId(request.params?.itemId, "itemId");
|
||||
const current = await fastify.prisma.projectClosureChecklistItem.findUnique({
|
||||
where: { id: itemId },
|
||||
include: { completer: { select: { id: true, employee_no: true, name: true } } },
|
||||
});
|
||||
if (!current || current.project_id !== projectId) {
|
||||
throw new AppError({ code: "SYS_404", message: "Not Found", statusCode: 404 });
|
||||
}
|
||||
const body = parseBody(CLOSURE_CHECKLIST_PATCH_SCHEMA, request.body);
|
||||
const nextStatus = body.status ?? current.status;
|
||||
const nextNote = body.note !== undefined ? (body.note ?? null) : current.note;
|
||||
if (nextStatus === "waived" && !String(nextNote ?? "").trim()) {
|
||||
throw buildValidationError({ note: "waived_requires_note" });
|
||||
}
|
||||
const completedMeta = nextStatus === "pending"
|
||||
? { completed_at: null, completed_by: null }
|
||||
: { completed_at: new Date(), completed_by: request.employee.id };
|
||||
const updated = await fastify.prisma.projectClosureChecklistItem.update({
|
||||
where: { id: itemId },
|
||||
data: {
|
||||
...(body.status !== undefined ? { status: body.status } : {}),
|
||||
...(body.note !== undefined ? { note: body.note ?? null } : {}),
|
||||
...(body.status !== undefined ? completedMeta : {}),
|
||||
},
|
||||
include: { completer: { select: { id: true, employee_no: true, name: true } } },
|
||||
});
|
||||
await writeAudit(fastify, request, "PROJECT_CLOSURE_CHECKLIST_UPDATED", projectId, { itemId, status: updated.status });
|
||||
return sendData(reply, request, { item: mapProjectClosureChecklistItem(updated, true) });
|
||||
});
|
||||
|
||||
fastify.get("/projects/:id/deliveries", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request, FEATURE_FLAG_KEYS.projectLinking);
|
||||
const projectId = parseId(request.params?.id);
|
||||
|
||||
+51
-25
@@ -313,23 +313,38 @@ async function searchRoutes(fastify) {
|
||||
where: {
|
||||
OR: [
|
||||
{ contract_no: { contains: q, mode: "insensitive" } },
|
||||
{ counterparty_name: { contains: q, mode: "insensitive" } },
|
||||
{ summary: { contains: q, mode: "insensitive" } },
|
||||
{
|
||||
AND: [
|
||||
{ confidentiality_level: { in: ["public", "internal"] } },
|
||||
{
|
||||
OR: [
|
||||
{ counterparty_name: { contains: q, mode: "insensitive" } },
|
||||
{ summary: { contains: q, mode: "insensitive" } },
|
||||
],
|
||||
},
|
||||
],
|
||||
},
|
||||
{ project: { is: { project_no: { contains: q, mode: "insensitive" } } } },
|
||||
],
|
||||
},
|
||||
take: limit,
|
||||
orderBy: { updated_at: "desc" },
|
||||
select: { id: true, contract_no: true, counterparty_name: true, confidentiality_level: true, summary: true, updated_at: true },
|
||||
}).then((rows) => rows.map((item) => ({
|
||||
entityType: "contract_registry",
|
||||
entityId: item.id,
|
||||
title: item.contract_no,
|
||||
subtitle: ["confidential", "restricted"].includes(item.confidentiality_level) ? "涉密合同台账" : item.counterparty_name,
|
||||
status: item.confidentiality_level,
|
||||
href: "/contracts-registry",
|
||||
matchedBy: matchByValue(q, item.contract_no, item.counterparty_name, item.summary),
|
||||
updatedAt: item.updated_at?.toISOString?.() ?? null,
|
||||
}))),
|
||||
select: { id: true, contract_no: true, counterparty_name: true, confidentiality_level: true, summary: true, updated_at: true, project: { select: { project_no: true } } },
|
||||
}).then((rows) => rows.map((item) => {
|
||||
const isSensitive = ["confidential", "restricted"].includes(item.confidentiality_level);
|
||||
return {
|
||||
entityType: "contract_registry",
|
||||
entityId: item.id,
|
||||
title: item.contract_no,
|
||||
subtitle: isSensitive ? "涉密合同台账" : item.counterparty_name,
|
||||
status: item.confidentiality_level,
|
||||
href: "/contracts-registry",
|
||||
matchedBy: isSensitive
|
||||
? matchByValue(q, item.contract_no, item.project?.project_no)
|
||||
: matchByValue(q, item.contract_no, item.counterparty_name, item.summary, item.project?.project_no),
|
||||
updatedAt: item.updated_at?.toISOString?.() ?? null,
|
||||
};
|
||||
})),
|
||||
);
|
||||
}
|
||||
|
||||
@@ -338,24 +353,35 @@ async function searchRoutes(fastify) {
|
||||
fastify.prisma.confidentialDocumentRef.findMany({
|
||||
where: {
|
||||
OR: [
|
||||
{ title: { contains: q, mode: "insensitive" } },
|
||||
{ document_no: { contains: q, mode: "insensitive" } },
|
||||
{ offline_archive_no: { contains: q, mode: "insensitive" } },
|
||||
{ project: { is: { project_no: { contains: q, mode: "insensitive" } } } },
|
||||
{
|
||||
AND: [
|
||||
{ confidentiality_level: { in: ["public", "internal"] } },
|
||||
{ title: { contains: q, mode: "insensitive" } },
|
||||
],
|
||||
},
|
||||
],
|
||||
},
|
||||
take: limit,
|
||||
orderBy: { updated_at: "desc" },
|
||||
select: { id: true, title: true, document_no: true, confidentiality_level: true, updated_at: true },
|
||||
}).then((rows) => rows.map((item) => ({
|
||||
entityType: "confidential_doc_ref",
|
||||
entityId: item.id,
|
||||
title: item.document_no || item.title,
|
||||
subtitle: ["confidential", "restricted"].includes(item.confidentiality_level) ? "涉密资料引用" : item.title,
|
||||
status: item.confidentiality_level,
|
||||
href: "/contracts-registry",
|
||||
matchedBy: matchByValue(q, item.title, item.document_no),
|
||||
updatedAt: item.updated_at?.toISOString?.() ?? null,
|
||||
}))),
|
||||
select: { id: true, title: true, document_no: true, offline_archive_no: true, confidentiality_level: true, updated_at: true, project: { select: { project_no: true } } },
|
||||
}).then((rows) => rows.map((item) => {
|
||||
const isSensitive = ["confidential", "restricted"].includes(item.confidentiality_level);
|
||||
return {
|
||||
entityType: "confidential_doc_ref",
|
||||
entityId: item.id,
|
||||
title: item.document_no || item.title,
|
||||
subtitle: isSensitive ? "涉密资料引用" : item.title,
|
||||
status: item.confidentiality_level,
|
||||
href: "/contracts-registry",
|
||||
matchedBy: isSensitive
|
||||
? matchByValue(q, item.document_no, item.offline_archive_no, item.project?.project_no)
|
||||
: matchByValue(q, item.title, item.document_no, item.offline_archive_no, item.project?.project_no),
|
||||
updatedAt: item.updated_at?.toISOString?.() ?? null,
|
||||
};
|
||||
})),
|
||||
);
|
||||
}
|
||||
|
||||
|
||||
@@ -331,6 +331,20 @@ const DEFAULT_FEATURE_FLAGS = [
|
||||
department_ids: [],
|
||||
note: "bootstrap default: force_off",
|
||||
},
|
||||
{
|
||||
flag_key: "project_communication_log_v1",
|
||||
override_mode: "force_off",
|
||||
rollout_type: "global",
|
||||
department_ids: [],
|
||||
note: "bootstrap default: force_off",
|
||||
},
|
||||
{
|
||||
flag_key: "project_closure_checklist_v1",
|
||||
override_mode: "force_off",
|
||||
rollout_type: "global",
|
||||
department_ids: [],
|
||||
note: "bootstrap default: force_off",
|
||||
},
|
||||
{
|
||||
flag_key: "confidential_doc_refs_v1",
|
||||
override_mode: "force_off",
|
||||
|
||||
@@ -263,6 +263,11 @@ async function main() {
|
||||
"weekly_report_v1",
|
||||
"employee_lifecycle_v1",
|
||||
"todo_board_v1",
|
||||
"project_domain_v1",
|
||||
"project_linking_v1",
|
||||
"project_communication_log_v1",
|
||||
"project_closure_checklist_v1",
|
||||
"confidential_doc_refs_v1",
|
||||
]) {
|
||||
await ensureFeatureFlag(prisma, {
|
||||
flag_key: flagKey,
|
||||
|
||||
@@ -17,6 +17,8 @@ const FEATURE_FLAG_KEYS = {
|
||||
wecomEntry: "wecom_entry_v1",
|
||||
projectDomain: "project_domain_v1",
|
||||
projectLinking: "project_linking_v1",
|
||||
projectCommunicationLog: "project_communication_log_v1",
|
||||
projectClosureChecklist: "project_closure_checklist_v1",
|
||||
confidentialDocRefs: "confidential_doc_refs_v1",
|
||||
publicSecurityHardening: "public_security_hardening_v1",
|
||||
};
|
||||
@@ -144,6 +146,14 @@ function resolveEnvGate(config, flagKey) {
|
||||
return Boolean(config.projectLinkingEnabled);
|
||||
}
|
||||
|
||||
if (flagKey === FEATURE_FLAG_KEYS.projectCommunicationLog) {
|
||||
return Boolean(config.projectCommunicationLogEnabled);
|
||||
}
|
||||
|
||||
if (flagKey === FEATURE_FLAG_KEYS.projectClosureChecklist) {
|
||||
return Boolean(config.projectClosureChecklistEnabled);
|
||||
}
|
||||
|
||||
if (flagKey === FEATURE_FLAG_KEYS.confidentialDocRefs) {
|
||||
return Boolean(config.confidentialDocRefsEnabled);
|
||||
}
|
||||
|
||||
@@ -85,8 +85,9 @@ function redactImMessage(config, payload) {
|
||||
}
|
||||
|
||||
if (effectiveType === 'project') {
|
||||
const genericTitle = rawTitle.includes('收口') ? '有项目待收口' : '有项目待跟进';
|
||||
return {
|
||||
title: rawTitle || '项目待处理事项',
|
||||
title: genericTitle,
|
||||
body: '',
|
||||
};
|
||||
}
|
||||
|
||||
@@ -0,0 +1,483 @@
|
||||
const Fastify = require("fastify");
|
||||
|
||||
const { AppError } = require("../../../src/utils/AppError");
|
||||
const projectsRoutes = require("../../../src/routes/projects");
|
||||
|
||||
const PROJECT_ID = "11111111-1111-4111-8111-111111111111";
|
||||
const OWNER_ID = "22222222-2222-4222-8222-222222222222";
|
||||
const MANAGER_ID = "33333333-3333-4333-8333-333333333333";
|
||||
const MEMBER_ID = "44444444-4444-4444-8444-444444444444";
|
||||
const OUTSIDER_ID = "55555555-5555-4555-8555-555555555555";
|
||||
const NOW = new Date("2026-03-22T09:30:00.000Z");
|
||||
|
||||
function buildFeatureFlagRecord(flagKey) {
|
||||
return {
|
||||
id: `flag-${flagKey}`,
|
||||
flag_key: flagKey,
|
||||
override_mode: "force_on",
|
||||
rollout_type: "global",
|
||||
department_ids: [],
|
||||
note: "unit-test",
|
||||
version: 1,
|
||||
created_at: NOW,
|
||||
created_by: null,
|
||||
updated_at: NOW,
|
||||
updated_by: null,
|
||||
};
|
||||
}
|
||||
|
||||
function buildEmployee(id, name, employeeNo) {
|
||||
return { id, name, employee_no: employeeNo };
|
||||
}
|
||||
|
||||
function buildProjectState(overrides = {}) {
|
||||
return {
|
||||
id: PROJECT_ID,
|
||||
project_no: "PRJ-001",
|
||||
name: "试点项目",
|
||||
client_name: "测试客户",
|
||||
client_alias: "测试客户简称",
|
||||
owner_employee_id: OWNER_ID,
|
||||
manager_employee_id: MANAGER_ID,
|
||||
status: "active",
|
||||
starts_at: new Date("2026-03-01T00:00:00.000Z"),
|
||||
target_end_at: new Date("2026-03-31T00:00:00.000Z"),
|
||||
actual_end_at: null,
|
||||
summary: "用于 R23 单测的项目",
|
||||
is_confidential: false,
|
||||
created_at: NOW,
|
||||
updated_at: NOW,
|
||||
owner: buildEmployee(OWNER_ID, "Owner", "E001"),
|
||||
manager: buildEmployee(MANAGER_ID, "Manager", "E002"),
|
||||
members: [
|
||||
{
|
||||
id: "aaaaaaa1-1111-4111-8111-111111111111",
|
||||
employee_id: MEMBER_ID,
|
||||
role: "member",
|
||||
joined_at: NOW,
|
||||
left_at: null,
|
||||
employee: buildEmployee(MEMBER_ID, "Member", "E003"),
|
||||
},
|
||||
],
|
||||
milestones: [],
|
||||
tasks: [],
|
||||
risks: [],
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
function createPrismaState({ communicationLogs = [], closureChecklistItems = [] } = {}) {
|
||||
const state = {
|
||||
project: buildProjectState(),
|
||||
communicationLogs: communicationLogs.map((item) => ({ ...item })),
|
||||
closureChecklistItems: closureChecklistItems.map((item) => ({ ...item })),
|
||||
openRiskCount: 0,
|
||||
openReimbursementCount: 0,
|
||||
openTravelCount: 0,
|
||||
deliveryRecordCount: 0,
|
||||
contractCount: 0,
|
||||
confidentialDocRefCount: 0,
|
||||
auditEntries: [],
|
||||
};
|
||||
|
||||
function withProjectCounts(project) {
|
||||
return {
|
||||
...project,
|
||||
_count: {
|
||||
members: (project.members ?? []).length,
|
||||
milestones: (project.milestones ?? []).length,
|
||||
tasks: (project.tasks ?? []).length,
|
||||
risks: (project.risks ?? []).length,
|
||||
reimbursements: 0,
|
||||
travel_requests: 0,
|
||||
todo_items: 0,
|
||||
weekly_reports: 0,
|
||||
communication_logs: state.communicationLogs.length,
|
||||
closure_checklist_items: state.closureChecklistItems.length,
|
||||
contracts: state.contractCount,
|
||||
deliveries: state.deliveryRecordCount,
|
||||
document_refs: state.confidentialDocRefCount,
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
function nextUuid(seed) {
|
||||
return `99999999-9999-4999-8999-${String(seed).padStart(12, "0")}`;
|
||||
}
|
||||
|
||||
function attachChecklistCompleter(item) {
|
||||
return {
|
||||
...item,
|
||||
completer: item.completed_by ? buildEmployee(item.completed_by, item.completed_by === OWNER_ID ? "Owner" : "Manager", "E999") : null,
|
||||
};
|
||||
}
|
||||
|
||||
function attachCommunicationCreator(item) {
|
||||
const creators = {
|
||||
[OWNER_ID]: buildEmployee(OWNER_ID, "Owner", "E001"),
|
||||
[MANAGER_ID]: buildEmployee(MANAGER_ID, "Manager", "E002"),
|
||||
[MEMBER_ID]: buildEmployee(MEMBER_ID, "Member", "E003"),
|
||||
};
|
||||
return {
|
||||
...item,
|
||||
creator: creators[item.created_by] ?? buildEmployee(item.created_by, "Unknown", "E000"),
|
||||
};
|
||||
}
|
||||
|
||||
const prisma = {
|
||||
featureFlag: {
|
||||
findUnique: vi.fn().mockImplementation(async ({ where }) => buildFeatureFlagRecord(where.flag_key)),
|
||||
},
|
||||
project: {
|
||||
findUnique: vi.fn().mockImplementation(async () => withProjectCounts(state.project)),
|
||||
update: vi.fn().mockImplementation(async ({ data }) => {
|
||||
state.project = {
|
||||
...state.project,
|
||||
...(data.name !== undefined ? { name: data.name } : {}),
|
||||
...(data.client_name !== undefined ? { client_name: data.client_name } : {}),
|
||||
...(data.client_alias !== undefined ? { client_alias: data.client_alias } : {}),
|
||||
...(data.owner_employee_id !== undefined ? { owner_employee_id: data.owner_employee_id } : {}),
|
||||
...(data.manager_employee_id !== undefined ? { manager_employee_id: data.manager_employee_id } : {}),
|
||||
...(data.status !== undefined ? { status: data.status } : {}),
|
||||
...(data.starts_at !== undefined ? { starts_at: data.starts_at } : {}),
|
||||
...(data.target_end_at !== undefined ? { target_end_at: data.target_end_at } : {}),
|
||||
...(data.actual_end_at !== undefined ? { actual_end_at: data.actual_end_at } : {}),
|
||||
...(data.summary !== undefined ? { summary: data.summary } : {}),
|
||||
...(data.is_confidential !== undefined ? { is_confidential: data.is_confidential } : {}),
|
||||
updated_at: NOW,
|
||||
};
|
||||
return withProjectCounts(state.project);
|
||||
}),
|
||||
},
|
||||
projectCommunicationLog: {
|
||||
count: vi.fn().mockImplementation(async ({ where }) => {
|
||||
const items = state.communicationLogs.filter((item) => item.project_id === where.project_id);
|
||||
if (!where.next_follow_up_date) {
|
||||
return items.length;
|
||||
}
|
||||
return items.filter((item) => {
|
||||
if (!item.next_follow_up_date) {
|
||||
return false;
|
||||
}
|
||||
const next = new Date(item.next_follow_up_date).getTime();
|
||||
if (where.next_follow_up_date.gte && where.next_follow_up_date.lte) {
|
||||
return next >= new Date(where.next_follow_up_date.gte).getTime() && next <= new Date(where.next_follow_up_date.lte).getTime();
|
||||
}
|
||||
if (where.next_follow_up_date.lt) {
|
||||
return next < new Date(where.next_follow_up_date.lt).getTime();
|
||||
}
|
||||
return false;
|
||||
}).length;
|
||||
}),
|
||||
findFirst: vi.fn().mockImplementation(async ({ where }) => {
|
||||
const items = state.communicationLogs
|
||||
.filter((item) => item.project_id === where.project_id)
|
||||
.sort((left, right) => new Date(right.happened_at).getTime() - new Date(left.happened_at).getTime());
|
||||
return items[0] ? attachCommunicationCreator(items[0]) : null;
|
||||
}),
|
||||
findMany: vi.fn().mockImplementation(async ({ where }) => {
|
||||
return state.communicationLogs
|
||||
.filter((item) => item.project_id === where.project_id)
|
||||
.sort((left, right) => new Date(right.happened_at).getTime() - new Date(left.happened_at).getTime())
|
||||
.map((item) => attachCommunicationCreator(item));
|
||||
}),
|
||||
create: vi.fn().mockImplementation(async ({ data }) => {
|
||||
const created = {
|
||||
id: nextUuid(state.communicationLogs.length + 1),
|
||||
project_id: data.project_id,
|
||||
happened_at: data.happened_at,
|
||||
channel: data.channel,
|
||||
external_contact_name: data.external_contact_name,
|
||||
external_org_name: data.external_org_name,
|
||||
summary: data.summary,
|
||||
next_action: data.next_action,
|
||||
next_follow_up_date: data.next_follow_up_date,
|
||||
created_by: data.created_by,
|
||||
created_at: NOW,
|
||||
updated_at: NOW,
|
||||
};
|
||||
state.communicationLogs.unshift(created);
|
||||
return attachCommunicationCreator(created);
|
||||
}),
|
||||
findUnique: vi.fn().mockImplementation(async ({ where }) => {
|
||||
const item = state.communicationLogs.find((entry) => entry.id === where.id);
|
||||
return item ? attachCommunicationCreator(item) : null;
|
||||
}),
|
||||
update: vi.fn().mockImplementation(async ({ where, data }) => {
|
||||
const index = state.communicationLogs.findIndex((entry) => entry.id === where.id);
|
||||
if (index < 0) {
|
||||
return null;
|
||||
}
|
||||
state.communicationLogs[index] = {
|
||||
...state.communicationLogs[index],
|
||||
...(data.happened_at !== undefined ? { happened_at: data.happened_at } : {}),
|
||||
...(data.channel !== undefined ? { channel: data.channel } : {}),
|
||||
...(data.external_contact_name !== undefined ? { external_contact_name: data.external_contact_name } : {}),
|
||||
...(data.external_org_name !== undefined ? { external_org_name: data.external_org_name } : {}),
|
||||
...(data.summary !== undefined ? { summary: data.summary } : {}),
|
||||
...(data.next_action !== undefined ? { next_action: data.next_action } : {}),
|
||||
...(data.next_follow_up_date !== undefined ? { next_follow_up_date: data.next_follow_up_date } : {}),
|
||||
updated_at: NOW,
|
||||
};
|
||||
return attachCommunicationCreator(state.communicationLogs[index]);
|
||||
}),
|
||||
},
|
||||
projectClosureChecklistItem: {
|
||||
count: vi.fn().mockImplementation(async ({ where }) => state.closureChecklistItems.filter((item) => item.project_id === where.project_id).length),
|
||||
createMany: vi.fn().mockImplementation(async ({ data }) => {
|
||||
data.forEach((item, index) => {
|
||||
if (state.closureChecklistItems.some((current) => current.project_id === item.project_id && current.item_key === item.item_key)) {
|
||||
return;
|
||||
}
|
||||
state.closureChecklistItems.push({
|
||||
id: nextUuid(100 + state.closureChecklistItems.length + index),
|
||||
project_id: item.project_id,
|
||||
item_key: item.item_key,
|
||||
title: item.title,
|
||||
status: item.status,
|
||||
note: null,
|
||||
sort_order: item.sort_order,
|
||||
completed_at: null,
|
||||
completed_by: null,
|
||||
created_at: NOW,
|
||||
updated_at: NOW,
|
||||
});
|
||||
});
|
||||
return { count: data.length };
|
||||
}),
|
||||
findMany: vi.fn().mockImplementation(async ({ where, select }) => {
|
||||
const items = state.closureChecklistItems
|
||||
.filter((item) => item.project_id === where.project_id)
|
||||
.sort((left, right) => left.sort_order - right.sort_order);
|
||||
if (select?.status) {
|
||||
return items.map((item) => ({ status: item.status }));
|
||||
}
|
||||
return items.map((item) => attachChecklistCompleter(item));
|
||||
}),
|
||||
findUnique: vi.fn().mockImplementation(async ({ where }) => {
|
||||
const item = state.closureChecklistItems.find((entry) => entry.id === where.id);
|
||||
return item ? attachChecklistCompleter(item) : null;
|
||||
}),
|
||||
update: vi.fn().mockImplementation(async ({ where, data }) => {
|
||||
const index = state.closureChecklistItems.findIndex((entry) => entry.id === where.id);
|
||||
if (index < 0) {
|
||||
return null;
|
||||
}
|
||||
state.closureChecklistItems[index] = {
|
||||
...state.closureChecklistItems[index],
|
||||
...(data.status !== undefined ? { status: data.status } : {}),
|
||||
...(data.note !== undefined ? { note: data.note } : {}),
|
||||
...(data.completed_at !== undefined ? { completed_at: data.completed_at } : {}),
|
||||
...(data.completed_by !== undefined ? { completed_by: data.completed_by } : {}),
|
||||
updated_at: NOW,
|
||||
};
|
||||
return attachChecklistCompleter(state.closureChecklistItems[index]);
|
||||
}),
|
||||
},
|
||||
projectRisk: { count: vi.fn().mockImplementation(async () => state.openRiskCount) },
|
||||
reimbursementForm: { count: vi.fn().mockImplementation(async () => state.openReimbursementCount) },
|
||||
travelRequest: { count: vi.fn().mockImplementation(async () => state.openTravelCount) },
|
||||
projectDeliveryRecord: { count: vi.fn().mockImplementation(async () => state.deliveryRecordCount) },
|
||||
contractRegistry: { count: vi.fn().mockImplementation(async () => state.contractCount) },
|
||||
confidentialDocumentRef: { count: vi.fn().mockImplementation(async () => state.confidentialDocRefCount) },
|
||||
auditLog: {
|
||||
create: vi.fn().mockImplementation(async ({ data }) => {
|
||||
state.auditEntries.push(data);
|
||||
return { id: nextUuid(500 + state.auditEntries.length) };
|
||||
}),
|
||||
},
|
||||
};
|
||||
|
||||
return { state, prisma };
|
||||
}
|
||||
|
||||
async function buildApp({ employee, prisma }) {
|
||||
const app = Fastify();
|
||||
|
||||
app.decorate("prisma", prisma);
|
||||
app.decorate("config", {
|
||||
projectDomainEnabled: true,
|
||||
projectLinkingEnabled: true,
|
||||
projectCommunicationLogEnabled: true,
|
||||
projectClosureChecklistEnabled: true,
|
||||
confidentialDocRefsEnabled: true,
|
||||
});
|
||||
app.decorate("authenticate", async (request) => {
|
||||
if (!request.headers.authorization) {
|
||||
throw new AppError({ code: "AUTH_001", message: "未登录", statusCode: 401 });
|
||||
}
|
||||
request.employee = employee;
|
||||
});
|
||||
app.decorate("hasPermission", (actor, permissionCode) => {
|
||||
return (actor?.permissionCodes ?? []).includes("*") || (actor?.permissionCodes ?? []).includes(permissionCode);
|
||||
});
|
||||
app.setErrorHandler((error, request, reply) => {
|
||||
if (error instanceof AppError) {
|
||||
return reply.status(error.statusCode).send({
|
||||
requestId: request.id,
|
||||
error: { code: error.code, message: error.message, details: error.details ?? {} },
|
||||
});
|
||||
}
|
||||
return reply.status(500).send({
|
||||
requestId: request.id,
|
||||
error: { code: "SYS_001", message: "服务器内部错误", details: {} },
|
||||
});
|
||||
});
|
||||
|
||||
await app.register(projectsRoutes, { prefix: "/api" });
|
||||
return app;
|
||||
}
|
||||
|
||||
describe("project R23 routes", () => {
|
||||
it("allows project member to create communication logs and blocks outsiders", async () => {
|
||||
const { prisma } = createPrismaState();
|
||||
const memberApp = await buildApp({
|
||||
employee: { id: MEMBER_ID, department_id: null, permissionCodes: ["project.view_own"] },
|
||||
prisma,
|
||||
});
|
||||
|
||||
const createResponse = await memberApp.inject({
|
||||
method: "POST",
|
||||
url: `/api/projects/${PROJECT_ID}/communication-logs`,
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
payload: {
|
||||
happenedAt: "2026-03-22T08:00:00.000Z",
|
||||
channel: "wechat",
|
||||
externalContactName: "王总",
|
||||
externalOrgName: "测试客户",
|
||||
summary: "客户确认下周一现场启动。",
|
||||
nextAction: "准备启动材料",
|
||||
nextFollowUpDate: "2026-03-24",
|
||||
},
|
||||
});
|
||||
|
||||
expect(createResponse.statusCode).toBe(201);
|
||||
expect(createResponse.json().data.item).toEqual(
|
||||
expect.objectContaining({
|
||||
channel: "wechat",
|
||||
summary: "客户确认下周一现场启动。",
|
||||
canEdit: true,
|
||||
}),
|
||||
);
|
||||
|
||||
const outsiderApp = await buildApp({
|
||||
employee: { id: OUTSIDER_ID, department_id: null, permissionCodes: ["project.view_own"] },
|
||||
prisma,
|
||||
});
|
||||
const outsiderResponse = await outsiderApp.inject({
|
||||
method: "GET",
|
||||
url: `/api/projects/${PROJECT_ID}/communication-logs`,
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
});
|
||||
|
||||
expect(outsiderResponse.statusCode).toBe(403);
|
||||
expect(outsiderResponse.json().error.code).toBe("PERM_001");
|
||||
|
||||
await Promise.all([memberApp.close(), outsiderApp.close()]);
|
||||
});
|
||||
|
||||
it("enforces 24h edit window for creators while allowing owners to edit anytime", async () => {
|
||||
const { state, prisma } = createPrismaState({
|
||||
communicationLogs: [
|
||||
{
|
||||
id: "66666666-6666-4666-8666-666666666666",
|
||||
project_id: PROJECT_ID,
|
||||
happened_at: new Date("2026-03-21T08:00:00.000Z"),
|
||||
channel: "phone",
|
||||
external_contact_name: "李总",
|
||||
external_org_name: "测试客户",
|
||||
summary: "客户电话确认测试安排。",
|
||||
next_action: "同步排期",
|
||||
next_follow_up_date: new Date("2026-03-23T00:00:00.000Z"),
|
||||
created_by: MEMBER_ID,
|
||||
created_at: new Date("2026-03-20T08:00:00.000Z"),
|
||||
updated_at: new Date("2026-03-20T08:00:00.000Z"),
|
||||
},
|
||||
],
|
||||
});
|
||||
|
||||
const staleCreatorApp = await buildApp({
|
||||
employee: { id: MEMBER_ID, department_id: null, permissionCodes: ["project.view_own"] },
|
||||
prisma,
|
||||
});
|
||||
const staleResponse = await staleCreatorApp.inject({
|
||||
method: "PATCH",
|
||||
url: `/api/projects/${PROJECT_ID}/communication-logs/66666666-6666-4666-8666-666666666666`,
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
payload: { summary: "尝试修改过期记录" },
|
||||
});
|
||||
|
||||
expect(staleResponse.statusCode).toBe(403);
|
||||
|
||||
const ownerApp = await buildApp({
|
||||
employee: { id: OWNER_ID, department_id: null, permissionCodes: ["project.view_own"] },
|
||||
prisma,
|
||||
});
|
||||
const ownerResponse = await ownerApp.inject({
|
||||
method: "PATCH",
|
||||
url: `/api/projects/${PROJECT_ID}/communication-logs/66666666-6666-4666-8666-666666666666`,
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
payload: { summary: "Owner 已补充最新沟通结果" },
|
||||
});
|
||||
|
||||
expect(ownerResponse.statusCode).toBe(200);
|
||||
expect(ownerResponse.json().data.item.summary).toBe("Owner 已补充最新沟通结果");
|
||||
expect(state.communicationLogs[0].summary).toBe("Owner 已补充最新沟通结果");
|
||||
|
||||
await Promise.all([staleCreatorApp.close(), ownerApp.close()]);
|
||||
});
|
||||
|
||||
it("bootstraps closure checklist and requires note when waiving", async () => {
|
||||
const { prisma } = createPrismaState();
|
||||
const app = await buildApp({
|
||||
employee: { id: OWNER_ID, department_id: null, permissionCodes: ["project.view_own"] },
|
||||
prisma,
|
||||
});
|
||||
|
||||
const listResponse = await app.inject({
|
||||
method: "GET",
|
||||
url: `/api/projects/${PROJECT_ID}/closure-checklist`,
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
});
|
||||
|
||||
expect(listResponse.statusCode).toBe(200);
|
||||
expect(listResponse.json().data.items).toHaveLength(6);
|
||||
expect(prisma.projectClosureChecklistItem.createMany).toHaveBeenCalledTimes(1);
|
||||
|
||||
const firstItemId = listResponse.json().data.items[0].id;
|
||||
const waiveResponse = await app.inject({
|
||||
method: "PATCH",
|
||||
url: `/api/projects/${PROJECT_ID}/closure-checklist/${firstItemId}`,
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
payload: { status: "waived", note: "" },
|
||||
});
|
||||
|
||||
expect(waiveResponse.statusCode).toBe(400);
|
||||
expect(waiveResponse.json().error.details).toEqual(expect.objectContaining({ note: "waived_requires_note" }));
|
||||
|
||||
await app.close();
|
||||
});
|
||||
|
||||
it("returns closureWarning when project is completed with pending checklist items", async () => {
|
||||
const { prisma } = createPrismaState();
|
||||
const app = await buildApp({
|
||||
employee: { id: OWNER_ID, department_id: null, permissionCodes: ["project.view_own"] },
|
||||
prisma,
|
||||
});
|
||||
|
||||
const response = await app.inject({
|
||||
method: "PATCH",
|
||||
url: `/api/projects/${PROJECT_ID}`,
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
payload: { status: "completed" },
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
expect(response.json().data.item.status).toBe("completed");
|
||||
expect(response.json().data.closureWarning).toEqual(
|
||||
expect.objectContaining({ pendingCount: 6 }),
|
||||
);
|
||||
|
||||
await app.close();
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,153 @@
|
||||
const Fastify = require("fastify");
|
||||
|
||||
const { AppError } = require("../../../src/utils/AppError");
|
||||
const searchRoutes = require("../../../src/routes/search");
|
||||
|
||||
const NOW = new Date("2026-03-22T10:00:00.000Z");
|
||||
|
||||
function buildFeatureFlagRecord(flagKey) {
|
||||
return {
|
||||
id: `flag-${flagKey}`,
|
||||
flag_key: flagKey,
|
||||
override_mode: "force_on",
|
||||
rollout_type: "global",
|
||||
department_ids: [],
|
||||
note: "unit-test",
|
||||
version: 1,
|
||||
created_at: NOW,
|
||||
created_by: null,
|
||||
updated_at: NOW,
|
||||
updated_by: null,
|
||||
};
|
||||
}
|
||||
|
||||
function createPrisma() {
|
||||
const contractRow = {
|
||||
id: "11111111-1111-4111-8111-111111111111",
|
||||
contract_no: "HT-001",
|
||||
counterparty_name: "涉密客户",
|
||||
confidentiality_level: "restricted",
|
||||
summary: "极密摘要内容",
|
||||
updated_at: NOW,
|
||||
project: { project_no: "PRJ-001" },
|
||||
};
|
||||
const docRow = {
|
||||
id: "22222222-2222-4222-8222-222222222222",
|
||||
title: "极密技术方案",
|
||||
document_no: "DOC-001",
|
||||
offline_archive_no: "ARC-001",
|
||||
confidentiality_level: "confidential",
|
||||
updated_at: NOW,
|
||||
project: { project_no: "PRJ-001" },
|
||||
};
|
||||
|
||||
return {
|
||||
featureFlag: {
|
||||
findUnique: vi.fn().mockImplementation(async ({ where }) => buildFeatureFlagRecord(where.flag_key)),
|
||||
},
|
||||
employee: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
portalAnnouncement: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
assetCard: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
reimbursementForm: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
leaveRequest: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
weeklyReport: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
todoItem: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
purchaseRequest: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
travelRequest: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
project: { findMany: vi.fn().mockResolvedValue([]) },
|
||||
contractRegistry: {
|
||||
findMany: vi.fn().mockImplementation(async ({ where }) => {
|
||||
const query = where?.OR?.[0]?.contract_no?.contains ?? "";
|
||||
return ["HT-001", "PRJ-001"].includes(query) ? [contractRow] : [];
|
||||
}),
|
||||
},
|
||||
confidentialDocumentRef: {
|
||||
findMany: vi.fn().mockImplementation(async ({ where }) => {
|
||||
const query = where?.OR?.[0]?.document_no?.contains ?? "";
|
||||
return ["DOC-001", "PRJ-001", "ARC-001"].includes(query) ? [docRow] : [];
|
||||
}),
|
||||
},
|
||||
};
|
||||
}
|
||||
|
||||
async function buildApp({ employee, prisma }) {
|
||||
const app = Fastify();
|
||||
app.decorate("prisma", prisma);
|
||||
app.decorate("config", {
|
||||
globalSearchEnabled: true,
|
||||
announcementsEnabled: false,
|
||||
weeklyReportEnabled: false,
|
||||
todoBoardEnabled: false,
|
||||
projectDomainEnabled: false,
|
||||
projectLinkingEnabled: true,
|
||||
confidentialDocRefsEnabled: true,
|
||||
});
|
||||
app.decorate("authenticate", async (request) => {
|
||||
if (!request.headers.authorization) {
|
||||
throw new AppError({ code: "AUTH_001", message: "未登录", statusCode: 401 });
|
||||
}
|
||||
request.employee = employee;
|
||||
});
|
||||
app.decorate("hasPermission", (actor, permissionCode) => {
|
||||
return (actor?.permissionCodes ?? []).includes("*") || (actor?.permissionCodes ?? []).includes(permissionCode);
|
||||
});
|
||||
app.setErrorHandler((error, request, reply) => {
|
||||
if (error instanceof AppError) {
|
||||
return reply.status(error.statusCode).send({
|
||||
requestId: request.id,
|
||||
error: { code: error.code, message: error.message, details: error.details ?? {} },
|
||||
});
|
||||
}
|
||||
return reply.status(500).send({
|
||||
requestId: request.id,
|
||||
error: { code: "SYS_001", message: "服务器内部错误", details: {} },
|
||||
});
|
||||
});
|
||||
|
||||
await app.register(searchRoutes, { prefix: "/api" });
|
||||
return app;
|
||||
}
|
||||
|
||||
describe("global search R23 confidential boundary", () => {
|
||||
it("does not match sensitive summary text but still matches minimal identifiers", async () => {
|
||||
const prisma = createPrisma();
|
||||
const app = await buildApp({
|
||||
employee: { id: "employee-1", department_id: null, permissionCodes: ["system.settings"] },
|
||||
prisma,
|
||||
});
|
||||
|
||||
const sensitiveResponse = await app.inject({
|
||||
method: "GET",
|
||||
url: "/api/search?q=%E6%9E%81%E5%AF%86%E6%91%98%E8%A6%81",
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
});
|
||||
expect(sensitiveResponse.statusCode).toBe(200);
|
||||
expect(sensitiveResponse.json().data.items).toEqual([]);
|
||||
|
||||
const contractResponse = await app.inject({
|
||||
method: "GET",
|
||||
url: "/api/search?q=HT-001",
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
});
|
||||
expect(contractResponse.statusCode).toBe(200);
|
||||
expect(contractResponse.json().data.items).toEqual(
|
||||
expect.arrayContaining([
|
||||
expect.objectContaining({ entityType: "contract_registry", title: "HT-001", subtitle: "涉密合同台账" }),
|
||||
]),
|
||||
);
|
||||
|
||||
const docResponse = await app.inject({
|
||||
method: "GET",
|
||||
url: "/api/search?q=DOC-001",
|
||||
headers: { authorization: "Bearer test-token" },
|
||||
});
|
||||
expect(docResponse.statusCode).toBe(200);
|
||||
expect(docResponse.json().data.items).toEqual(
|
||||
expect.arrayContaining([
|
||||
expect.objectContaining({ entityType: "confidential_doc_ref", title: "DOC-001", subtitle: "涉密资料引用" }),
|
||||
]),
|
||||
);
|
||||
|
||||
await app.close();
|
||||
});
|
||||
});
|
||||
@@ -117,6 +117,61 @@ describe("IM enqueue", () => {
|
||||
);
|
||||
});
|
||||
|
||||
it("redacts project follow-up notifications under public security hardening", async () => {
|
||||
const tx = {
|
||||
employeeRole: {
|
||||
findMany: vi.fn().mockResolvedValue([{ role_code: "manager" }]),
|
||||
},
|
||||
notificationChannel: {
|
||||
findMany: vi.fn().mockResolvedValue([
|
||||
{
|
||||
id: "channel-project",
|
||||
channel_type: "wecom",
|
||||
name: "project-workflow",
|
||||
enabled: true,
|
||||
config_json: {
|
||||
routing: {
|
||||
roleCodes: ["manager"],
|
||||
domainScopes: ["workflow"],
|
||||
allowedTypes: ["workflow.task_assigned"],
|
||||
},
|
||||
},
|
||||
template_json: null,
|
||||
},
|
||||
]),
|
||||
},
|
||||
integrationOutbox: {
|
||||
findUnique: vi.fn().mockResolvedValue(null),
|
||||
create: vi.fn().mockImplementation(async ({ data }) => ({ id: `${data.dedupe_key}-id`, status: "pending" })),
|
||||
},
|
||||
};
|
||||
|
||||
const result = await enqueueImNotifications(tx, {
|
||||
config: {
|
||||
imNotifierEnabled: true,
|
||||
integrationOutboxMaxAttempts: 5,
|
||||
appOrigin: "https://app.example.com",
|
||||
jwtSecret: "test-secret",
|
||||
publicSecurityHardeningEnabled: true,
|
||||
},
|
||||
logger: { warn: vi.fn() },
|
||||
recipientEmployeeIds: ["employee-1"],
|
||||
type: "workflow.task_assigned",
|
||||
title: "项目收口提醒：合同与沟通记录待补齐",
|
||||
body: "请补齐沟通摘要、收口备注与合同要点。",
|
||||
targetType: "workflow_task",
|
||||
targetId: "task-project-1",
|
||||
targetPath: "/projects/11111111-1111-4111-8111-111111111111",
|
||||
entityType: "project",
|
||||
entityId: "11111111-1111-4111-8111-111111111111",
|
||||
actorId: "actor-1",
|
||||
});
|
||||
|
||||
expect(result.queued).toBe(1);
|
||||
expect(tx.integrationOutbox.create.mock.calls[0][0].data.payload.title).toBe("有项目待收口");
|
||||
expect(tx.integrationOutbox.create.mock.calls[0][0].data.payload.body).toBe("");
|
||||
});
|
||||
|
||||
it("safely skips when no channel matches", async () => {
|
||||
const tx = {
|
||||
employeeRole: {
|
||||
|
||||
在新工单中引用
屏蔽一个用户