feat: 完成P10生产硬化与矩阵收口（P10E1-P10G1）
这个提交包含在：
@@ -4,6 +4,10 @@
|
|||||||
**日期**：2026-02-09
|
**日期**：2026-02-09
|
||||||
**目的**：描述系统当前实现（P5/F25 完备态）并为未来演进提供参考。
|
**目的**：描述系统当前实现（P5/F25 完备态）并为未来演进提供参考。
|
||||||
|
|
||||||
|
**相关文档**：
|
||||||
|
- [需求规格说明书](./requirements-specification.md)
|
||||||
|
- [实现状态矩阵（P5-P10）](./feature-matrix.md)
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## 1. 部署视图 (As-Is)
|
## 1. 部署视图 (As-Is)
|
||||||
|
|||||||
@@ -0,0 +1,95 @@
|
|||||||
|
# hyb-oa 实现状态矩阵（P5-P10）
|
||||||
|
|
||||||
|
**快照日期**：2026-02-10
|
||||||
|
**范围**：`F1-F42`（含 `F19b/F19c/F19d`）+ `R1-S2` + `P9A1-P9D1` + `P10E1-P10G1`，共 80 项。
|
||||||
|
**事实源**：`issues/2026-02-09_13-39-02-p5-blueprint-v3.csv` + `issues/2026-02-09_23-30-00-p6-p8-remaining-work-master.csv` + `issues/2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv` + `issues/2026-02-10_10-35-30-p10-production-hardening.csv`（执行合同）
|
||||||
|
|
||||||
|
**说明**：
|
||||||
|
- 本矩阵用于全局读图（审计/交接/回归覆盖追踪），不替代 `issues/*.csv` 的执行合同职责。
|
||||||
|
- `首次规划 CSV` 为该 ID 首次出现的执行合同；`首次完成 CSV` 为三状态首次全 `DONE` 的执行合同。
|
||||||
|
- `规格书章节` 优先引用 `docs/requirements-specification.md`；规格未显式覆盖时标注 `N/A`。
|
||||||
|
|
||||||
|
| ID | 功能项 | 规格书章节 | 首次规划 CSV | 首次完成 CSV | 完成日期 | 当前状态 | 回归覆盖 | Notes |
|
||||||
|
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
|
||||||
|
| F1 | CSV快照收口（P5蓝图v2） | §16 迭代计划（执行合同收口） | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F2 | 费用类型只读API（expense-types） | §9.1-§9.2，§13.2/§13.3 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F3 | 费用类型管理API（system.settings） | §9.1-§9.2，§13.2/§13.3 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F4 | 报销单编辑与删除（补齐CRUD） | §4.2，§13.2 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-workflow-actions.sh | none |
|
||||||
|
| F5 | 报销明细CRUD与总金额重算 | §4.2，§13.2 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-workflow-actions.sh | none |
|
||||||
|
| F6 | 前端报销编辑器（明细+费用类型） | §4.2，§13.2 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | client:typecheck/build/test:e2e | none |
|
||||||
|
| F7 | 代提交（expense.proxy_submit） | §4.2.3-§4.2.4，§13.5 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-workflow-actions.sh | none |
|
||||||
|
| F8 | 行政代上传（owner≠uploaded_by） | §4.2.3-§4.2.4，§10.7 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-ocr.sh + regression-audit.sh | none |
|
||||||
|
| F9 | 票据解绑/重绑（bound->available） | §4.4，§10.4-§10.7 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-workflow-actions.sh | none |
|
||||||
|
| F10 | 判重例外（override duplicate） | §4.4，§10.7，§12.4 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-dedup.sh + regression-audit.sh | none |
|
||||||
|
| F11 | OCR失败重试API（次数/频控） | §4.4，§10.7 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-ocr.sh + regression-audit.sh | none |
|
||||||
|
| F12 | 90天未绑定自动归档（unused_timeout） | §4.4，§10.4-§10.7 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-ocr.sh | none |
|
||||||
|
| F13 | signed-url审计与下载行为记录 | §10.2，§10.7，§12.4 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-audit.sh | none |
|
||||||
|
| F14 | 站内通知基础设施（DB+API） | §4.6 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F15 | 邮件通知（SMTP/Nodemailer） | §4.6 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F16 | 前端通知入口（Bell） | §4.6 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | client:test:e2e | none |
|
||||||
|
| F17 | 报表导出（CSV/Excel） | §16 Phase 2（报表导出） | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F18 | 审批规则维护（system.settings） | §6，§13.3 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-workflow-actions.sh | none |
|
||||||
|
| F19 | 作业系统升级（pg-boss 基础设施） | §16 Phase 2（队列/作业） | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-all.sh | none |
|
||||||
|
| F19b | 作业迁移（OCR -> pg-boss） | §16 Phase 2（OCR队列化） | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-ocr.sh + regression-all.sh | none |
|
||||||
|
| F19c | 作业迁移（委派回收 -> pg-boss） | §16 Phase 2（委派回收队列化） | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-workflow-actions.sh | none |
|
||||||
|
| F19d | 作业迁移（超期归档 -> pg-boss） | §16 Phase 2（归档作业队列化） | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-ocr.sh + regression-all.sh | none |
|
||||||
|
| F20 | Worker进程拆分（可选） | §14（部署），§16 Phase 2 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F21 | 对象存储（MinIO/S3兼容） | §10.3，§16 Phase 2 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F22 | 可观测性增强（metrics/日志） | §14 非功能需求（可观测性） | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F23 | SSO/OIDC（可选，P7+） | §11.1（登录扩展），§16 Phase 2 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | 规格扩展项（P6+/P7+） |
|
||||||
|
| F24 | 工作流扩展到其他实体（P7+） | §5，§16 Phase 2 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | 规格扩展项（P6+/P7+） |
|
||||||
|
| F25 | 敏感字段加密与脱敏（P6+） | §12.1-§12.3 | 2026-02-09_11-17-07-p5-blueprint.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | 规格扩展项（P6+/P7+） |
|
||||||
|
| F26 | 部门API（departments） | §3.2，§4.1，§13.2 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F27 | 员工API对齐（新增别名 /api/employees） | §4.1，§13.2 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F28 | 票据人工修正与手工归档（invoice-pool patch/archive） | §4.4，§10.4-§10.7 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-audit.sh | none |
|
||||||
|
| F29 | 配置只读API（approval-rules/document-sequences） | §6，§8，§13.3 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F30 | 通知触发集成（workflow/pay/auth） | §4.6，§12.4 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F31 | Delegation Grants API对齐（新增别名/增强响应） | §4.2.4，§13.5 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F32 | 前端组织与员工最小运营 | §3.2，§4.1（前端运营） | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | client:typecheck/build | none |
|
||||||
|
| F33 | 前端行政代提交/代上传入口 | §4.2.3-§4.2.4 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | client:typecheck/build/test:e2e | none |
|
||||||
|
| F34 | 前端票据中心增强（编辑/归档/解绑/重试/例外） | §4.4，§10.7（前端增强） | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | client:typecheck/build/test:e2e | none |
|
||||||
|
| F35 | 前端错误码文案补齐（VALID/AUTH/PERM） | §13.6 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | client:typecheck/build | none |
|
||||||
|
| F36 | 首次登录强制改密（后端） | §11.2-§11.5，§13.6 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F37 | 登录失败锁定与解锁（AUTH_002） | §11.2-§11.5，§13.6 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F38 | 首次登录改密与锁定提示（前端） | §11.2-§11.5，§13.6（前端） | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | client:typecheck/build/test:e2e | none |
|
||||||
|
| F39 | 弱密码库拦截（Top 10k） | §11.2，§13.6 | 2026-02-09_12-34-42-p5-blueprint-v2.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| F40 | 组织/配置回归脚本（org+settings） | §16（回归工程化） | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-org-settings.sh | 治理/回归工程项 |
|
||||||
|
| F41 | 认证安全回归脚本（auth security） | §11，§16（认证回归） | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | server/scripts/regression-auth-security.sh | 治理/回归工程项 |
|
||||||
|
| F42 | 架构文档修订（As-Is/To-Be） | N/A（架构文档治理） | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09_13-39-02-p5-blueprint-v3.csv | 2026-02-09 | DONE | manual | 治理/回归工程项 |
|
||||||
|
|
||||||
|
| R1 | 历史TODO清账映射（A/C -> E/F） | N/A（治理项） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| R2 | 规格与计划文档状态同步 | §16（执行合同与文档对齐） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | manual | none |
|
||||||
|
| R3 | 状态一致性自动校验与CI接入 | §16（门禁与漂移阻断） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | scripts/check-minimal.sh | none |
|
||||||
|
| V1 | 验真域模型与Provider抽象 | §4.4（发票治理扩展） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-verification.sh | none |
|
||||||
|
| V2 | 验真API与异步任务（pg-boss） | §4.4，§16（作业体系） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-verification.sh | none |
|
||||||
|
| V3 | 票据中心验真前端闭环 | §4.4（票据中心前端） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | client:typecheck/build | none |
|
||||||
|
| V4 | 验真回归脚本与总回归接入 | §16（回归工程化） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-verification.sh + regression-all.sh | none |
|
||||||
|
| D1 | 看板聚合API | §16 Phase 2（可视化看板） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-dashboard.sh | none |
|
||||||
|
| D2 | 前端Dashboard强化 | §16 Phase 2（可视化看板） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | client:typecheck/build | none |
|
||||||
|
| D3 | 看板导出联动 | §16 Phase 2（报表导出联动） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-dashboard.sh | none |
|
||||||
|
| B1 | 预算池与台账模型 | §16 Phase 2（预算管控） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-budget.sh | none |
|
||||||
|
| B2 | 预算API与提交流程拦截 | §16 Phase 2（预算管控） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-budget.sh | none |
|
||||||
|
| B3 | 预算前端运营页 | §16 Phase 2（预算运营） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | client:typecheck/build | none |
|
||||||
|
| B4 | 预算回归脚本 | §16（回归工程化） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-budget.sh | none |
|
||||||
|
| I1 | 集成框架（Outbox+Adapter） | §16 Phase 2（外部集成） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-integrations.sh | none |
|
||||||
|
| I2 | ERP最小集成（paid同步） | §16 Phase 2（ERP 集成） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-integrations.sh | 默认关闭，按需灰度 |
|
||||||
|
| I3 | 差旅单导入与报销关联 | §16 Phase 2（差旅闭环） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-integrations.sh | 默认关闭，按需灰度 |
|
||||||
|
| I4 | 通知渠道扩展（企微/钉钉） | §4.6（多渠道通知） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | server/scripts/regression-integrations.sh | 默认关闭，按需灰度 |
|
||||||
|
| S1 | 企业卡/虚拟卡管控预研 | N/A（ADR 决策项） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | manual | docs/adr/adr-enterprise-card-control.md |
|
||||||
|
| S2 | 移动端路线决策预研 | N/A（ADR 决策项） | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09_23-30-00-p6-p8-remaining-work-master.csv | 2026-02-09 | DONE | manual | docs/adr/adr-mobile-strategy.md |
|
||||||
|
|
||||||
|
| P9A1 | invoicePool拆分方案设计与边界冻结 | §16（维护性治理） | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10 | DONE | manual | none |
|
||||||
|
| P9A2 | invoicePool验真路由独立化实施 | §16（维护性治理） | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10 | DONE | server/scripts/regression-verification.sh | none |
|
||||||
|
| P9A3 | invoicePool共享select与响应映射收敛 | §16（维护性治理） | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10 | DONE | server/scripts/regression-workflow-actions.sh + regression-verification.sh | none |
|
||||||
|
| P9B1 | Dashboard趋势改为SQL聚合 | §16（看板性能） | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10 | DONE | server/scripts/regression-dashboard.sh | none |
|
||||||
|
| P9B2 | Dashboard聚合性能回归脚本补强 | §16（回归工程化） | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10 | DONE | server/scripts/regression-dashboard.sh + regression-all.sh | none |
|
||||||
|
| P9C1 | feature-matrix纳入P6-P8能力 | §16（状态治理） | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10 | DONE | manual | none |
|
||||||
|
| P9C2 | 矩阵一致性校验脚本扩展 | §16（门禁与漂移阻断） | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10 | DONE | scripts/check-minimal.sh | none |
|
||||||
|
| P9D1 | P9整体验收与回归基线 | §16（回归基线） | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv | 2026-02-10 | DONE | scripts/check-minimal.sh + server/scripts/regression-all.sh | none |
|
||||||
|
| P10E1 | ERP适配器配置模型收口 | §16（外部集成硬化） | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10 | DONE | server/src/config.js 静态检查 | none |
|
||||||
|
| P10E2 | ERP真实HTTP适配器实现 | §16（ERP 同步硬化） | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10 | DONE | server/scripts/regression-integrations.sh | 4xx dead_letter / 5xx+timeout retry |
|
||||||
|
| P10E3 | Outbox失败分类与重试语义强化 | §16（Outbox 可靠性） | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10 | DONE | server/scripts/regression-integrations.sh | none |
|
||||||
|
| P10E4 | 集成回归脚本引入本地Mock ERP | §16（回归工程化） | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10 | DONE | server/scripts/regression-integrations.sh | 脚本内嵌 Node mock server |
|
||||||
|
| P10M1 | invoicePool二阶段拆分（读路径） | §16（维护性治理） | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10 | DONE | node --check invoicePool 主/子模块 | none |
|
||||||
|
| P10M2 | invoicePool二阶段拆分回归与基线更新 | §16（回归与文档） | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10 | DONE | server/scripts/regression-verification.sh + regression-workflow-actions.sh | none |
|
||||||
|
| P10G1 | 矩阵与执行合同同步到P10 | §16（状态治理） | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10_10-35-30-p10-production-hardening.csv | 2026-02-10 | DONE | scripts/check-minimal.sh | 覆盖 P5-P10 全量 |
|
||||||
@@ -0,0 +1,8 @@
|
|||||||
|
ID,Title,Description,Acceptance,Test_Method,Tools,Dev_Status,Review1_Status,Regression_Status,Files,Dependencies,Notes
|
||||||
|
P10E1,ERP适配器配置模型收口,补齐ERP真实对接所需配置项（endpoint/auth/timeout/retry）并保持默认关闭,配置项命名一致且默认不影响现有mock行为,cd server && node --check src/config.js && node --check src/services/integrations/erp.js,manual,DONE,DONE,DONE,server/src/config.js | server/.env.example | server/src/services/integrations/erp.js,[],回滚=保持ERP_SYNC_ENABLED=false
|
||||||
|
P10E2,ERP真实HTTP适配器实现,在现有erp adapter中新增HTTP调用分支并保留mock分支作为降级路径,ERP enabled时可向mock ERP服务发送请求并拿到可解析响应,manual: 启动本地mock ERP服务后调用 /api/integrations/erp/sync/:id?runNow=1 验证成功与失败路径,manual,DONE,DONE,DONE,server/src/services/integrations/erp.js | server/src/services/integrations/dispatcher.js,"[""P10E1""]",不引入重型依赖优先复用Node内置fetch
|
||||||
|
P10E3,Outbox失败分类与重试语义强化,区分可重试错误与不可重试错误并准确写入failed/dead_letter状态,重试/死信行为可预测且审计信息可定位,cd server && node --check src/services/integrations/outbox.js && node --check src/jobs/integrationOutboxJob.js,manual,DONE,DONE,DONE,server/src/services/integrations/outbox.js | server/src/jobs/integrationOutboxJob.js | server/src/services/integrations/dispatcher.js,"[""P10E2""]",保持历史outbox记录不回写覆盖
|
||||||
|
P10E4,集成回归脚本引入本地Mock ERP,增强regression-integrations脚本覆盖真实HTTP适配器（成功+超时+错误码）,CI/本地可在无外部凭据条件下稳定回归ERP链路,cd server && ./scripts/regression-integrations.sh,manual,DONE,DONE,DONE,server/scripts/regression-integrations.sh | server/src/scripts/*.js,"[""P10E3""]",默认仍不依赖真实外部ERP
|
||||||
|
P10M1,invoicePool二阶段拆分（读路径）,继续将invoicePool读路径（list/detail/file/signed-url）拆分为子模块并维持主入口兼容,主文件体量继续下降且接口行为无变化,cd server && node --check src/routes/invoicePool.js && node --check src/routes/invoicePool/*.js,manual,DONE,DONE,DONE,server/src/routes/invoicePool.js | server/src/routes/invoicePool/*.js | server/src/routes/invoicePool/shared/*.js,[],延续P9拆分策略不改路径
|
||||||
|
P10M2,invoicePool二阶段拆分回归与基线更新,补充拆分后的定向回归并更新README中的拆分维护说明,拆分后验证与文档一致且可回滚,cd server && ./scripts/regression-verification.sh && ./scripts/regression-workflow-actions.sh,manual,DONE,DONE,DONE,server/README.md | server/scripts/regression-verification.sh | server/scripts/regression-workflow-actions.sh,"[""P10M1""]",回滚=恢复子模块注册到主文件内联
|
||||||
|
P10G1,矩阵与执行合同同步到P10,在feature-matrix新增P10项并扩展校验脚本事实源列表,矩阵可展示P5-P10全局能力且check-minimal可阻断漂移,cd /home/shunli/Projects/hyb-oa && ./scripts/check-minimal.sh,manual,DONE,DONE,DONE,docs/feature-matrix.md | scripts/validate-feature-matrix.py | scripts/check-minimal.sh,"[""P10E4"",""P10M2""]",保持历史CSV快照只读
|
||||||
|
+36
-3
@@ -3,40 +3,73 @@ set -euo pipefail
|
|||||||
|
|
||||||
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||||||
|
|
||||||
echo "=== [1/3] Server Prisma Validate ==="
|
echo "=== [1/4] Server Prisma Validate ==="
|
||||||
(
|
(
|
||||||
cd "$ROOT_DIR/server"
|
cd "$ROOT_DIR/server"
|
||||||
npm run prisma:validate
|
npm run prisma:validate
|
||||||
)
|
)
|
||||||
|
|
||||||
echo ""
|
echo ""
|
||||||
echo "=== [2/3] Server Static Checks ==="
|
echo "=== [2/4] Server Static Checks ==="
|
||||||
(
|
(
|
||||||
cd "$ROOT_DIR/server"
|
cd "$ROOT_DIR/server"
|
||||||
node --check src/routes/reimbursements.js
|
node --check src/routes/reimbursements.js
|
||||||
node --check src/routes/workflow.js
|
node --check src/routes/workflow.js
|
||||||
node --check src/routes/delegations.js
|
node --check src/routes/delegations.js
|
||||||
node --check src/routes/invoicePool.js
|
node --check src/routes/invoicePool.js
|
||||||
|
node --check src/routes/invoicePool/verification.js
|
||||||
|
node --check src/routes/invoicePool/read.js
|
||||||
|
node --check src/routes/invoicePool/shared/selects.js
|
||||||
|
node --check src/routes/invoicePool/shared/mappers.js
|
||||||
|
node --check src/routes/invoicePool/shared/schemas.js
|
||||||
|
node --check src/routes/invoicePool/shared/helpers.js
|
||||||
node --check src/routes/audit.js
|
node --check src/routes/audit.js
|
||||||
node --check src/routes/users.js
|
node --check src/routes/users.js
|
||||||
|
node --check src/routes/dashboard.js
|
||||||
|
node --check src/routes/budgets.js
|
||||||
|
node --check src/routes/integrations.js
|
||||||
|
node --check src/routes/travelOrders.js
|
||||||
|
node --check src/routes/notifications.js
|
||||||
|
|
||||||
node --check src/jobs/delegationRevokeJob.js
|
node --check src/jobs/delegationRevokeJob.js
|
||||||
node --check src/jobs/ocrJob.js
|
node --check src/jobs/ocrJob.js
|
||||||
|
node --check src/jobs/pgBossJobs.js
|
||||||
|
node --check src/jobs/verificationJob.js
|
||||||
|
node --check src/jobs/integrationOutboxJob.js
|
||||||
|
node --check src/jobs/integrationOutboxWorker.js
|
||||||
|
|
||||||
node --check src/services/ocr/index.js
|
node --check src/services/ocr/index.js
|
||||||
|
node --check src/services/verification/index.js
|
||||||
|
node --check src/services/integrations/outbox.js
|
||||||
|
node --check src/services/integrations/erp.js
|
||||||
|
node --check src/services/integrations/dispatcher.js
|
||||||
|
|
||||||
bash -n scripts/regression-workflow-actions.sh
|
bash -n scripts/regression-workflow-actions.sh
|
||||||
bash -n scripts/regression-audit.sh
|
bash -n scripts/regression-audit.sh
|
||||||
bash -n scripts/regression-ocr.sh
|
bash -n scripts/regression-ocr.sh
|
||||||
bash -n scripts/regression-org-settings.sh
|
bash -n scripts/regression-org-settings.sh
|
||||||
bash -n scripts/regression-auth-security.sh
|
bash -n scripts/regression-auth-security.sh
|
||||||
|
bash -n scripts/regression-verification.sh
|
||||||
|
bash -n scripts/regression-dashboard.sh
|
||||||
|
bash -n scripts/regression-budget.sh
|
||||||
|
bash -n scripts/regression-integrations.sh
|
||||||
bash -n scripts/regression-all.sh
|
bash -n scripts/regression-all.sh
|
||||||
)
|
)
|
||||||
|
|
||||||
echo ""
|
echo ""
|
||||||
echo "=== [3/3] Client Typecheck + Build ==="
|
echo "=== [3/4] Client Typecheck + Build ==="
|
||||||
(
|
(
|
||||||
cd "$ROOT_DIR/client"
|
cd "$ROOT_DIR/client"
|
||||||
npm run typecheck
|
npm run typecheck
|
||||||
npm run build
|
npm run build
|
||||||
)
|
)
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo "=== [4/4] Feature Matrix Consistency ==="
|
||||||
|
(
|
||||||
|
cd "$ROOT_DIR"
|
||||||
|
python3 scripts/validate-feature-matrix.py
|
||||||
|
)
|
||||||
|
|
||||||
echo ""
|
echo ""
|
||||||
echo "[OK] Minimal checks passed"
|
echo "[OK] Minimal checks passed"
|
||||||
|
|||||||
+149
@@ -0,0 +1,149 @@
|
|||||||
|
#!/usr/bin/env python3
|
||||||
|
"""Validate docs/feature-matrix.md against execution-contract CSV sources.
|
||||||
|
|
||||||
|
Checks:
|
||||||
|
- feature-matrix contains exactly one row per ID in CSV fact sources
|
||||||
|
- every ID from CSVs appears in matrix
|
||||||
|
- matrix does not contain unknown IDs
|
||||||
|
- every matrix row status equals DONE
|
||||||
|
- every fact-source CSV row is fully DONE on Dev/Review1/Regression axes
|
||||||
|
"""
|
||||||
|
|
||||||
|
from __future__ import annotations
|
||||||
|
|
||||||
|
import csv
|
||||||
|
import re
|
||||||
|
import sys
|
||||||
|
from pathlib import Path
|
||||||
|
|
||||||
|
ROOT = Path(__file__).resolve().parent.parent
|
||||||
|
MATRIX_PATH = ROOT / "docs" / "feature-matrix.md"
|
||||||
|
CSV_FACT_SOURCES = [
|
||||||
|
ROOT / "issues" / "2026-02-09_13-39-02-p5-blueprint-v3.csv",
|
||||||
|
ROOT / "issues" / "2026-02-09_23-30-00-p6-p8-remaining-work-master.csv",
|
||||||
|
ROOT / "issues" / "2026-02-10_09-42-31-p9-maintenance-performance-matrix.csv",
|
||||||
|
ROOT / "issues" / "2026-02-10_10-35-30-p10-production-hardening.csv",
|
||||||
|
]
|
||||||
|
|
||||||
|
ID_PATTERN = re.compile(r"^[A-Z][0-9][0-9A-Za-z]*$")
|
||||||
|
STATUS_INDEX = 6
|
||||||
|
|
||||||
|
|
||||||
|
def load_csv_rows(path: Path) -> list[dict[str, str]]:
|
||||||
|
with path.open(encoding="utf-8", newline="") as fp:
|
||||||
|
return list(csv.DictReader(fp))
|
||||||
|
|
||||||
|
|
||||||
|
def collect_expected_ids_and_source_status(paths: list[Path]) -> tuple[list[str], list[str]]:
|
||||||
|
ids: list[str] = []
|
||||||
|
source_errors: list[str] = []
|
||||||
|
|
||||||
|
for path in paths:
|
||||||
|
rows = load_csv_rows(path)
|
||||||
|
for row in rows:
|
||||||
|
row_id = (row.get("ID") or "").strip()
|
||||||
|
if not row_id:
|
||||||
|
continue
|
||||||
|
ids.append(row_id)
|
||||||
|
|
||||||
|
dev_status = (row.get("Dev_Status") or "").strip().upper()
|
||||||
|
review_status = (row.get("Review1_Status") or "").strip().upper()
|
||||||
|
regression_status = (row.get("Regression_Status") or "").strip().upper()
|
||||||
|
if not (dev_status == review_status == regression_status == "DONE"):
|
||||||
|
source_errors.append(
|
||||||
|
f"{path.name}:{row_id} source status not all DONE "
|
||||||
|
f"(Dev={dev_status}, Review1={review_status}, Regression={regression_status})"
|
||||||
|
)
|
||||||
|
|
||||||
|
return ids, source_errors
|
||||||
|
|
||||||
|
|
||||||
|
def load_matrix_rows(path: Path) -> list[list[str]]:
|
||||||
|
rows: list[list[str]] = []
|
||||||
|
for line in path.read_text(encoding="utf-8").splitlines():
|
||||||
|
stripped = line.strip()
|
||||||
|
if not stripped.startswith("|"):
|
||||||
|
continue
|
||||||
|
if stripped.startswith("| ---"):
|
||||||
|
continue
|
||||||
|
|
||||||
|
parts = [part.strip() for part in stripped.strip("|").split("|")]
|
||||||
|
if not parts:
|
||||||
|
continue
|
||||||
|
|
||||||
|
row_id = parts[0]
|
||||||
|
if not ID_PATTERN.match(row_id):
|
||||||
|
continue
|
||||||
|
|
||||||
|
rows.append(parts)
|
||||||
|
|
||||||
|
return rows
|
||||||
|
|
||||||
|
|
||||||
|
def main() -> int:
|
||||||
|
errors: list[str] = []
|
||||||
|
|
||||||
|
if not MATRIX_PATH.exists():
|
||||||
|
errors.append(f"Missing matrix file: {MATRIX_PATH}")
|
||||||
|
|
||||||
|
for source in CSV_FACT_SOURCES:
|
||||||
|
if not source.exists():
|
||||||
|
errors.append(f"Missing csv file: {source}")
|
||||||
|
|
||||||
|
if errors:
|
||||||
|
for err in errors:
|
||||||
|
print(f"[ERR] {err}")
|
||||||
|
return 1
|
||||||
|
|
||||||
|
expected_ids, source_status_errors = collect_expected_ids_and_source_status(CSV_FACT_SOURCES)
|
||||||
|
matrix_rows = load_matrix_rows(MATRIX_PATH)
|
||||||
|
|
||||||
|
matrix_ids = [row[0] for row in matrix_rows]
|
||||||
|
expected_id_set = set(expected_ids)
|
||||||
|
matrix_id_set = set(matrix_ids)
|
||||||
|
|
||||||
|
missing_in_matrix = sorted(expected_id_set - matrix_id_set)
|
||||||
|
extra_in_matrix = sorted(matrix_id_set - expected_id_set)
|
||||||
|
|
||||||
|
if missing_in_matrix:
|
||||||
|
errors.append(f"IDs missing in matrix: {missing_in_matrix}")
|
||||||
|
if extra_in_matrix:
|
||||||
|
errors.append(f"Extra IDs in matrix: {extra_in_matrix}")
|
||||||
|
|
||||||
|
duplicate_matrix_ids = sorted({item for item in matrix_ids if matrix_ids.count(item) > 1})
|
||||||
|
if duplicate_matrix_ids:
|
||||||
|
errors.append(f"Duplicate IDs in matrix: {duplicate_matrix_ids}")
|
||||||
|
|
||||||
|
if len(matrix_ids) != len(expected_ids):
|
||||||
|
errors.append(f"Row count mismatch: matrix={len(matrix_ids)} expected={len(expected_ids)}")
|
||||||
|
|
||||||
|
duplicate_expected_ids = sorted({item for item in expected_ids if expected_ids.count(item) > 1})
|
||||||
|
if duplicate_expected_ids:
|
||||||
|
errors.append(f"Duplicate IDs in fact-source CSVs: {duplicate_expected_ids}")
|
||||||
|
|
||||||
|
for row in matrix_rows:
|
||||||
|
if len(row) <= STATUS_INDEX:
|
||||||
|
errors.append(f"Malformed matrix row (too few columns): {row}")
|
||||||
|
continue
|
||||||
|
status = row[STATUS_INDEX].upper()
|
||||||
|
if status != "DONE":
|
||||||
|
errors.append(f"Non-DONE status in matrix for {row[0]}: {row[STATUS_INDEX]}")
|
||||||
|
|
||||||
|
errors.extend(source_status_errors)
|
||||||
|
|
||||||
|
if errors:
|
||||||
|
print("[ERR] feature-matrix validation failed")
|
||||||
|
for err in errors:
|
||||||
|
print(f" - {err}")
|
||||||
|
return 1
|
||||||
|
|
||||||
|
source_names = ", ".join(path.name for path in CSV_FACT_SOURCES)
|
||||||
|
print(
|
||||||
|
f"[OK] feature-matrix matches fact sources ({source_names}) "
|
||||||
|
f"(IDs/status/count)"
|
||||||
|
)
|
||||||
|
return 0
|
||||||
|
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
sys.exit(main())
|
||||||
@@ -55,6 +55,14 @@ OCR_POLL_CRON="* * * * *"
|
|||||||
OCR_MAX_ATTEMPTS="3"
|
OCR_MAX_ATTEMPTS="3"
|
||||||
OCR_TIMEOUT_MS="5000"
|
OCR_TIMEOUT_MS="5000"
|
||||||
|
|
||||||
|
# ===== 发票验真（P6）=====
|
||||||
|
INVOICE_VERIFICATION_ENABLED="false"
|
||||||
|
VERIFICATION_PROVIDER="mock" # mock|tax
|
||||||
|
VERIFICATION_POLL_CRON="* * * * *"
|
||||||
|
VERIFICATION_MAX_ATTEMPTS="3"
|
||||||
|
VERIFICATION_RETRY_COOLDOWN_SECONDS="60"
|
||||||
|
VERIFICATION_TIMEOUT_MS="5000"
|
||||||
|
|
||||||
INVOICE_ARCHIVE_CRON="30 2 * * *"
|
INVOICE_ARCHIVE_CRON="30 2 * * *"
|
||||||
INVOICE_ARCHIVE_UNUSED_DAYS="90"
|
INVOICE_ARCHIVE_UNUSED_DAYS="90"
|
||||||
INVOICE_ARCHIVE_BATCH_SIZE="200"
|
INVOICE_ARCHIVE_BATCH_SIZE="200"
|
||||||
@@ -62,6 +70,20 @@ TENCENT_SECRET_ID=""
|
|||||||
TENCENT_SECRET_KEY=""
|
TENCENT_SECRET_KEY=""
|
||||||
TENCENT_OCR_REGION="ap-beijing"
|
TENCENT_OCR_REGION="ap-beijing"
|
||||||
|
|
||||||
|
# ===== 预算与集成（P7-P8）=====
|
||||||
|
BUDGET_CONTROL_MODE="warn" # warn|block
|
||||||
|
ERP_SYNC_ENABLED="false"
|
||||||
|
ERP_SYNC_PROVIDER="mock" # mock|http
|
||||||
|
ERP_SYNC_ENDPOINT=""
|
||||||
|
ERP_SYNC_TIMEOUT_MS="5000"
|
||||||
|
ERP_SYNC_AUTH_TOKEN=""
|
||||||
|
TRAVEL_SYNC_ENABLED="false"
|
||||||
|
IM_NOTIFIER_ENABLED="false"
|
||||||
|
INTEGRATION_OUTBOX_CRON="* * * * *"
|
||||||
|
INTEGRATION_OUTBOX_BATCH_SIZE="20"
|
||||||
|
INTEGRATION_OUTBOX_MAX_ATTEMPTS="5"
|
||||||
|
INTEGRATION_OUTBOX_RETRY_SECONDS="120"
|
||||||
|
|
||||||
# ===== 试运行引导管理员（E20，可选）=====
|
# ===== 试运行引导管理员（E20，可选）=====
|
||||||
# TRIALRUN_ADMIN_EMAIL="[email protected]"
|
# TRIALRUN_ADMIN_EMAIL="[email protected]"
|
||||||
# TRIALRUN_ADMIN_PHONE="13800000000"
|
# TRIALRUN_ADMIN_PHONE="13800000000"
|
||||||
|
|||||||
+79
@@ -442,3 +442,82 @@ npm run job:ocr-once
|
|||||||
### 8.2 磁盘空间不足（ENOSPC）
|
### 8.2 磁盘空间不足（ENOSPC）
|
||||||
- 在受控环境中制造磁盘满条件后重试上传。
|
- 在受控环境中制造磁盘满条件后重试上传。
|
||||||
- 预期：错误路径可观测（日志中能定位到 I/O 错误），不要求纳入日常 CI 冒烟。
|
- 预期：错误路径可观测（日志中能定位到 I/O 错误），不要求纳入日常 CI 冒烟。
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## 9. P6-P10 增量能力（验真 / 看板 / 预算 / 集成 / 生产硬化）
|
||||||
|
|
||||||
|
### 9.1 特性开关（默认值）
|
||||||
|
- `INVOICE_VERIFICATION_ENABLED=false`
|
||||||
|
- `VERIFICATION_PROVIDER=mock`
|
||||||
|
- `BUDGET_CONTROL_MODE=warn`
|
||||||
|
- `ERP_SYNC_ENABLED=false`
|
||||||
|
- `ERP_SYNC_PROVIDER=mock`
|
||||||
|
- `ERP_SYNC_ENDPOINT=`
|
||||||
|
- `ERP_SYNC_TIMEOUT_MS=5000`
|
||||||
|
- `ERP_SYNC_AUTH_TOKEN=`
|
||||||
|
- `TRAVEL_SYNC_ENABLED=false`
|
||||||
|
- `IM_NOTIFIER_ENABLED=false`
|
||||||
|
|
||||||
|
建议：先在测试组织灰度开启，再逐步扩大范围。
|
||||||
|
|
||||||
|
### 9.2 新增 API 摘要
|
||||||
|
- 发票验真：
|
||||||
|
- `POST /api/invoice-pool/:id/verify`
|
||||||
|
- `GET /api/invoice-pool/:id/verification`
|
||||||
|
- `POST /api/invoice-pool/:id/verification/retry`
|
||||||
|
- 看板聚合：
|
||||||
|
- `GET /api/dashboard/expense-overview`
|
||||||
|
- `GET /api/dashboard/trends`
|
||||||
|
- `GET /api/dashboard/top-categories`
|
||||||
|
- `GET /api/dashboard/approval-efficiency`
|
||||||
|
- 预算管理：
|
||||||
|
- `GET /api/budgets`
|
||||||
|
- `POST /api/budgets`
|
||||||
|
- `PATCH /api/budgets/:id`
|
||||||
|
- `POST /api/budgets/:id/archive`
|
||||||
|
- 外部集成：
|
||||||
|
- `POST /api/integrations/erp/sync/:reimbursementId`
|
||||||
|
- `POST /api/travel/orders/import`
|
||||||
|
- `GET /api/notifications/channels`
|
||||||
|
- `POST /api/notifications/channels/test`
|
||||||
|
|
||||||
|
### 9.3 新增回归脚本
|
||||||
|
```bash
|
||||||
|
cd /home/shunli/Projects/hyb-oa/server
|
||||||
|
./scripts/regression-verification.sh
|
||||||
|
./scripts/regression-dashboard.sh
|
||||||
|
./scripts/regression-budget.sh
|
||||||
|
./scripts/regression-integrations.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
可通过总回归开关启用：
|
||||||
|
```bash
|
||||||
|
cd /home/shunli/Projects/hyb-oa/server
|
||||||
|
RUN_VERIFICATION_REGRESSION=1 \
|
||||||
|
RUN_DASHBOARD_REGRESSION=1 \
|
||||||
|
RUN_BUDGET_REGRESSION=1 \
|
||||||
|
RUN_INTEGRATIONS_REGRESSION=1 \
|
||||||
|
./scripts/regression-all.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
### 9.4 单次任务脚本（调试）
|
||||||
|
```bash
|
||||||
|
cd /home/shunli/Projects/hyb-oa/server
|
||||||
|
VERIFICATION_RECORD_ID=<uuid> npm run job:verification-once
|
||||||
|
npm run job:integration-outbox-once
|
||||||
|
```
|
||||||
|
|
||||||
|
### 9.5 回滚建议
|
||||||
|
1. 先关闭特性开关（验真/ERP/差旅/IM）。
|
||||||
|
2. 再停止相关任务调度（verification / integration outbox）。
|
||||||
|
3. 不回滚审计与历史台账数据，保持可追溯。
|
||||||
|
|
||||||
|
|
||||||
|
### 9.6 P9/P10 维护性与硬化说明
|
||||||
|
- 票据路由拆分：验真端点已拆到 `src/routes/invoicePool/verification.js`，读路径端点已拆到 `src/routes/invoicePool/read.js`，主入口仍为 `src/routes/invoicePool.js`，API 路径不变。
|
||||||
|
- Shared 抽象：`src/routes/invoicePool/shared/{selects,mappers,schemas,helpers}.js` 统一验真映射与票据查询 `select`，避免字段漂移。
|
||||||
|
- 看板聚合：`/api/dashboard/trends` 与 `/api/dashboard/top-categories` 已改为数据库聚合（groupBy），降低大数据量下内存聚合开销。
|
||||||
|
- 看板回归：`./scripts/regression-dashboard.sh` 新增重复请求一致性断言；可通过 `DASHBOARD_PERF_CHECK=1` 打印趋势接口耗时探针。
|
||||||
|
- ERP硬化回归：`./scripts/regression-integrations.sh` 内嵌最小 Node Mock ERP 服务，覆盖 success / 4xx(dead_letter) / 5xx(retry) / timeout(retry)。
|
||||||
|
- 矩阵门禁：`scripts/validate-feature-matrix.py` 默认校验 P5 + P6-P8 + P9 + P10 四事实源；`./scripts/check-minimal.sh` 会自动执行该校验。
|
||||||
|
|||||||
+375
@@ -0,0 +1,375 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
ERP_SYNC_TIMEOUT_MS="${ERP_SYNC_TIMEOUT_MS:-300}"
|
||||||
|
MOCK_ERP_PORT="${MOCK_ERP_PORT:-$((3900 + RANDOM % 500))}"
|
||||||
|
|
||||||
|
if ! command -v node >/dev/null 2>&1; then
|
||||||
|
echo "[ERROR] node not found" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! command -v curl >/dev/null 2>&1; then
|
||||||
|
echo "[ERROR] curl not found" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! command -v jq >/dev/null 2>&1; then
|
||||||
|
echo "[ERROR] jq not found" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||||||
|
cd "$ROOT_DIR"
|
||||||
|
|
||||||
|
if [[ -z "${DATABASE_URL:-}" && -f ".env" ]]; then
|
||||||
|
set -a
|
||||||
|
# shellcheck disable=SC1091
|
||||||
|
source .env
|
||||||
|
set +a
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ -z "${DATABASE_URL:-}" ]]; then
|
||||||
|
echo "[ERROR] DATABASE_URL is required (export it or provide server/.env)" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
TMP_DIR="$(mktemp -d)"
|
||||||
|
RUN_SUFFIX="$(date +%s)-$RANDOM"
|
||||||
|
MOCK_SERVER_PID=""
|
||||||
|
|
||||||
|
cleanup() {
|
||||||
|
if [[ -n "$MOCK_SERVER_PID" ]] && kill -0 "$MOCK_SERVER_PID" >/dev/null 2>&1; then
|
||||||
|
kill "$MOCK_SERVER_PID" >/dev/null 2>&1 || true
|
||||||
|
wait "$MOCK_SERVER_PID" >/dev/null 2>&1 || true
|
||||||
|
fi
|
||||||
|
rm -rf "$TMP_DIR"
|
||||||
|
}
|
||||||
|
trap cleanup EXIT
|
||||||
|
|
||||||
|
start_mock_erp_server() {
|
||||||
|
local server_file="$TMP_DIR/mock-erp-server.js"
|
||||||
|
|
||||||
|
cat >"$server_file" <<'NODE'
|
||||||
|
const http = require("node:http");
|
||||||
|
const { URL } = require("node:url");
|
||||||
|
|
||||||
|
const port = Number(process.argv[2] || 3900);
|
||||||
|
|
||||||
|
function sendJson(res, status, payload) {
|
||||||
|
res.statusCode = status;
|
||||||
|
res.setHeader("content-type", "application/json; charset=utf-8");
|
||||||
|
res.end(JSON.stringify(payload));
|
||||||
|
}
|
||||||
|
|
||||||
|
const server = http.createServer(async (req, res) => {
|
||||||
|
const url = new URL(req.url, `http://${req.headers.host || `127.0.0.1:${port}`}`);
|
||||||
|
|
||||||
|
if (req.method === "GET" && url.pathname === "/health") {
|
||||||
|
return sendJson(res, 200, { ok: true, mode: "health" });
|
||||||
|
}
|
||||||
|
|
||||||
|
if (req.method === "POST" && url.pathname === "/erp/reimbursements/paid") {
|
||||||
|
const mode = url.searchParams.get("mode") || "success";
|
||||||
|
|
||||||
|
const chunks = [];
|
||||||
|
for await (const chunk of req) {
|
||||||
|
chunks.push(chunk);
|
||||||
|
}
|
||||||
|
|
||||||
|
let parsedBody = null;
|
||||||
|
try {
|
||||||
|
parsedBody = JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}");
|
||||||
|
} catch {
|
||||||
|
parsedBody = null;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (mode === "timeout") {
|
||||||
|
setTimeout(() => {
|
||||||
|
sendJson(res, 200, {
|
||||||
|
ok: true,
|
||||||
|
scenario: "timeout",
|
||||||
|
externalId: `ERP-TIMEOUT-${Date.now()}`,
|
||||||
|
reimbursementId: parsedBody?.reimbursementId || null,
|
||||||
|
});
|
||||||
|
}, 1500);
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (mode === "client") {
|
||||||
|
return sendJson(res, 422, {
|
||||||
|
ok: false,
|
||||||
|
scenario: "client",
|
||||||
|
code: "invalid_payload",
|
||||||
|
message: "mock client error",
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
if (mode === "server") {
|
||||||
|
return sendJson(res, 503, {
|
||||||
|
ok: false,
|
||||||
|
scenario: "server",
|
||||||
|
code: "service_unavailable",
|
||||||
|
message: "mock server error",
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
return sendJson(res, 200, {
|
||||||
|
ok: true,
|
||||||
|
scenario: "success",
|
||||||
|
externalId: `ERP-${parsedBody?.formNumber || parsedBody?.reimbursementId || Date.now()}`,
|
||||||
|
reimbursementId: parsedBody?.reimbursementId || null,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
sendJson(res, 404, { ok: false, message: "not_found" });
|
||||||
|
});
|
||||||
|
|
||||||
|
server.listen(port, "127.0.0.1", () => {
|
||||||
|
process.stdout.write(`mock-erp-listening:${port}\n`);
|
||||||
|
});
|
||||||
|
NODE
|
||||||
|
|
||||||
|
node "$server_file" "$MOCK_ERP_PORT" >"$TMP_DIR/mock-erp.log" 2>&1 &
|
||||||
|
MOCK_SERVER_PID="$!"
|
||||||
|
|
||||||
|
for _ in $(seq 1 30); do
|
||||||
|
if curl -sS "http://127.0.0.1:$MOCK_ERP_PORT/health" >/dev/null 2>&1; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
sleep 0.2
|
||||||
|
done
|
||||||
|
|
||||||
|
echo "[ERROR] mock ERP server failed to start" >&2
|
||||||
|
cat "$TMP_DIR/mock-erp.log" >&2 || true
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
create_paid_reimbursement_and_enqueue() {
|
||||||
|
local scenario="$1"
|
||||||
|
DATABASE_URL="$DATABASE_URL" RUN_SUFFIX="$RUN_SUFFIX" SCENARIO="$scenario" node <<'NODE'
|
||||||
|
require("dotenv/config");
|
||||||
|
|
||||||
|
const { createPrismaClient } = require("./src/prismaClient");
|
||||||
|
const { getConfig } = require("./src/config");
|
||||||
|
const { buildErpPayload } = require("./src/services/integrations/erp");
|
||||||
|
const { enqueueIntegrationEvent } = require("./src/services/integrations/outbox");
|
||||||
|
|
||||||
|
(async () => {
|
||||||
|
const runSuffix = process.env.RUN_SUFFIX;
|
||||||
|
const scenario = process.env.SCENARIO;
|
||||||
|
const config = getConfig();
|
||||||
|
const { prisma, pool } = createPrismaClient();
|
||||||
|
|
||||||
|
await prisma.$connect();
|
||||||
|
try {
|
||||||
|
const owner = await prisma.employee.findFirst({
|
||||||
|
where: {
|
||||||
|
email: {
|
||||||
|
in: ["[email protected]", "[email protected]"],
|
||||||
|
},
|
||||||
|
},
|
||||||
|
select: { id: true, department_id: true },
|
||||||
|
orderBy: { created_at: "asc" },
|
||||||
|
});
|
||||||
|
|
||||||
|
if (!owner) {
|
||||||
|
throw new Error("employee/finance_mgr not found");
|
||||||
|
}
|
||||||
|
|
||||||
|
const reimbursement = await prisma.reimbursementForm.create({
|
||||||
|
data: {
|
||||||
|
form_number: `BX-P10-${scenario}-${runSuffix}`.slice(0, 60),
|
||||||
|
submitter_id: owner.id,
|
||||||
|
owner_id: owner.id,
|
||||||
|
department_id: owner.department_id,
|
||||||
|
reimbursement_date: new Date("2026-02-10T00:00:00.000Z"),
|
||||||
|
total_amount: "100.00",
|
||||||
|
status: "paid",
|
||||||
|
payment_voucher_no: `PV-${scenario}-${runSuffix}`.slice(0, 60),
|
||||||
|
payment_date: new Date("2026-02-10T00:00:00.000Z"),
|
||||||
|
paid_at: new Date(),
|
||||||
|
created_by: owner.id,
|
||||||
|
updated_by: owner.id,
|
||||||
|
},
|
||||||
|
select: {
|
||||||
|
id: true,
|
||||||
|
form_number: true,
|
||||||
|
owner_id: true,
|
||||||
|
submitter_id: true,
|
||||||
|
total_amount: true,
|
||||||
|
payment_voucher_no: true,
|
||||||
|
payment_date: true,
|
||||||
|
paid_at: true,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
const payload = buildErpPayload({ reimbursement });
|
||||||
|
const enqueued = await enqueueIntegrationEvent(prisma, {
|
||||||
|
eventType: "erp.reimbursement.paid",
|
||||||
|
payload,
|
||||||
|
dedupeKey: reimbursement.id,
|
||||||
|
maxAttempts: config.integrationOutboxMaxAttempts,
|
||||||
|
actorId: owner.id,
|
||||||
|
});
|
||||||
|
|
||||||
|
process.stdout.write(
|
||||||
|
JSON.stringify({
|
||||||
|
scenario,
|
||||||
|
reimbursementId: reimbursement.id,
|
||||||
|
outboxId: enqueued.id,
|
||||||
|
duplicated: enqueued.duplicated,
|
||||||
|
}),
|
||||||
|
);
|
||||||
|
} finally {
|
||||||
|
await prisma.$disconnect();
|
||||||
|
await pool.end();
|
||||||
|
}
|
||||||
|
})().catch((error) => {
|
||||||
|
console.error(error);
|
||||||
|
process.exit(1);
|
||||||
|
});
|
||||||
|
NODE
|
||||||
|
}
|
||||||
|
|
||||||
|
query_outbox_state() {
|
||||||
|
local outbox_id="$1"
|
||||||
|
DATABASE_URL="$DATABASE_URL" OUTBOX_ID="$outbox_id" node <<'NODE'
|
||||||
|
require("dotenv/config");
|
||||||
|
|
||||||
|
const { createPrismaClient } = require("./src/prismaClient");
|
||||||
|
|
||||||
|
(async () => {
|
||||||
|
const outboxId = process.env.OUTBOX_ID;
|
||||||
|
const { prisma, pool } = createPrismaClient();
|
||||||
|
await prisma.$connect();
|
||||||
|
|
||||||
|
try {
|
||||||
|
const row = await prisma.integrationOutbox.findUnique({
|
||||||
|
where: { id: outboxId },
|
||||||
|
select: {
|
||||||
|
id: true,
|
||||||
|
status: true,
|
||||||
|
attempts: true,
|
||||||
|
next_retry_at: true,
|
||||||
|
dead_letter_at: true,
|
||||||
|
last_error: true,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
if (!row) {
|
||||||
|
throw new Error(`outbox not found: ${outboxId}`);
|
||||||
|
}
|
||||||
|
|
||||||
|
process.stdout.write(
|
||||||
|
JSON.stringify({
|
||||||
|
id: row.id,
|
||||||
|
status: row.status,
|
||||||
|
attempts: row.attempts,
|
||||||
|
nextRetryAt: row.next_retry_at ? row.next_retry_at.toISOString() : null,
|
||||||
|
deadLetterAt: row.dead_letter_at ? row.dead_letter_at.toISOString() : null,
|
||||||
|
lastError: row.last_error,
|
||||||
|
}),
|
||||||
|
);
|
||||||
|
} finally {
|
||||||
|
await prisma.$disconnect();
|
||||||
|
await pool.end();
|
||||||
|
}
|
||||||
|
})().catch((error) => {
|
||||||
|
console.error(error);
|
||||||
|
process.exit(1);
|
||||||
|
});
|
||||||
|
NODE
|
||||||
|
}
|
||||||
|
|
||||||
|
run_outbox_once() {
|
||||||
|
local endpoint="$1"
|
||||||
|
ERP_SYNC_ENABLED=true \
|
||||||
|
ERP_SYNC_PROVIDER=http \
|
||||||
|
ERP_SYNC_ENDPOINT="$endpoint" \
|
||||||
|
ERP_SYNC_TIMEOUT_MS="$ERP_SYNC_TIMEOUT_MS" \
|
||||||
|
ERP_SYNC_AUTH_TOKEN="" \
|
||||||
|
npm run --silent job:integration-outbox-once >"$TMP_DIR/outbox-once.log"
|
||||||
|
}
|
||||||
|
|
||||||
|
assert_mode_semantics() {
|
||||||
|
local mode="$1"
|
||||||
|
local state_json="$2"
|
||||||
|
|
||||||
|
case "$mode" in
|
||||||
|
success)
|
||||||
|
jq -e '.status == "succeeded" and .nextRetryAt == null and .deadLetterAt == null' <<<"$state_json" >/dev/null
|
||||||
|
;;
|
||||||
|
client)
|
||||||
|
jq -e '.status == "dead_letter" and .attempts == 1 and .deadLetterAt != null and .nextRetryAt == null' <<<"$state_json" >/dev/null
|
||||||
|
jq -e '.lastError | tostring | test("422|erp_sync_http_4xx")' <<<"$state_json" >/dev/null
|
||||||
|
;;
|
||||||
|
server)
|
||||||
|
jq -e '.status == "failed" and .attempts == 1 and .deadLetterAt == null and .nextRetryAt != null' <<<"$state_json" >/dev/null
|
||||||
|
jq -e '.lastError | tostring | test("503|erp_sync_http_5xx")' <<<"$state_json" >/dev/null
|
||||||
|
;;
|
||||||
|
timeout)
|
||||||
|
jq -e '.status == "failed" and .attempts == 1 and .deadLetterAt == null and .nextRetryAt != null' <<<"$state_json" >/dev/null
|
||||||
|
jq -e '.lastError | tostring | test("erp_sync_timeout|timeout")' <<<"$state_json" >/dev/null
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "[ERROR] unsupported mode assertion: $mode" >&2
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
}
|
||||||
|
|
||||||
|
run_mode_case() {
|
||||||
|
local mode="$1"
|
||||||
|
|
||||||
|
local created_json
|
||||||
|
created_json="$(create_paid_reimbursement_and_enqueue "$mode")"
|
||||||
|
local outbox_id
|
||||||
|
outbox_id="$(jq -er '.outboxId' <<<"$created_json")"
|
||||||
|
|
||||||
|
local endpoint="http://127.0.0.1:$MOCK_ERP_PORT/erp/reimbursements/paid?mode=$mode"
|
||||||
|
|
||||||
|
local state_json=""
|
||||||
|
local status=""
|
||||||
|
for _ in $(seq 1 8); do
|
||||||
|
run_outbox_once "$endpoint"
|
||||||
|
state_json="$(query_outbox_state "$outbox_id")"
|
||||||
|
status="$(jq -r '.status' <<<"$state_json")"
|
||||||
|
if [[ "$status" != "pending" && "$status" != "processing" ]]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
sleep 0.2
|
||||||
|
done
|
||||||
|
|
||||||
|
if [[ "$status" == "pending" || "$status" == "processing" ]]; then
|
||||||
|
echo "[ERROR] mode=$mode did not finish processing" >&2
|
||||||
|
echo "$state_json" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! assert_mode_semantics "$mode" "$state_json"; then
|
||||||
|
echo "[ERROR] mode=$mode semantics assertion failed" >&2
|
||||||
|
echo "$state_json" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "[OK] mode=$mode outbox_status=$status"
|
||||||
|
}
|
||||||
|
|
||||||
|
echo "[1/6] Start embedded mock ERP server"
|
||||||
|
start_mock_erp_server
|
||||||
|
|
||||||
|
echo "[2/6] ERP success path => succeeded"
|
||||||
|
run_mode_case "success"
|
||||||
|
|
||||||
|
echo "[3/6] ERP 4xx path => dead_letter"
|
||||||
|
run_mode_case "client"
|
||||||
|
|
||||||
|
echo "[4/6] ERP 5xx path => failed(retryable)"
|
||||||
|
run_mode_case "server"
|
||||||
|
|
||||||
|
echo "[5/6] ERP timeout path => failed(retryable)"
|
||||||
|
run_mode_case "timeout"
|
||||||
|
|
||||||
|
echo "[6/6] Done"
|
||||||
|
echo "[OK] Integrations regression passed"
|
||||||
@@ -90,6 +90,29 @@ function getConfig() {
|
|||||||
ocrMaxAttempts: Number(process.env.OCR_MAX_ATTEMPTS ?? 3),
|
ocrMaxAttempts: Number(process.env.OCR_MAX_ATTEMPTS ?? 3),
|
||||||
ocrTimeoutMs: Number(process.env.OCR_TIMEOUT_MS ?? 5000),
|
ocrTimeoutMs: Number(process.env.OCR_TIMEOUT_MS ?? 5000),
|
||||||
|
|
||||||
|
invoiceVerificationEnabled: process.env.INVOICE_VERIFICATION_ENABLED === "true",
|
||||||
|
verificationProvider: process.env.VERIFICATION_PROVIDER ?? "mock",
|
||||||
|
verificationPollCron: process.env.VERIFICATION_POLL_CRON ?? "* * * * *",
|
||||||
|
verificationMaxAttempts: Number(process.env.VERIFICATION_MAX_ATTEMPTS ?? 3),
|
||||||
|
verificationRetryCooldownSeconds: Number(
|
||||||
|
process.env.VERIFICATION_RETRY_COOLDOWN_SECONDS ?? 60,
|
||||||
|
),
|
||||||
|
verificationTimeoutMs: Number(process.env.VERIFICATION_TIMEOUT_MS ?? 5000),
|
||||||
|
|
||||||
|
budgetControlMode: process.env.BUDGET_CONTROL_MODE ?? "warn",
|
||||||
|
|
||||||
|
erpSyncEnabled: process.env.ERP_SYNC_ENABLED === "true",
|
||||||
|
erpSyncProvider: process.env.ERP_SYNC_PROVIDER ?? "mock",
|
||||||
|
erpSyncEndpoint: process.env.ERP_SYNC_ENDPOINT ?? "",
|
||||||
|
erpSyncTimeoutMs: Number(process.env.ERP_SYNC_TIMEOUT_MS ?? 5000),
|
||||||
|
erpSyncAuthToken: process.env.ERP_SYNC_AUTH_TOKEN ?? "",
|
||||||
|
travelSyncEnabled: process.env.TRAVEL_SYNC_ENABLED === "true",
|
||||||
|
imNotifierEnabled: process.env.IM_NOTIFIER_ENABLED === "true",
|
||||||
|
integrationOutboxCron: process.env.INTEGRATION_OUTBOX_CRON ?? "* * * * *",
|
||||||
|
integrationOutboxBatchSize: Number(process.env.INTEGRATION_OUTBOX_BATCH_SIZE ?? 20),
|
||||||
|
integrationOutboxMaxAttempts: Number(process.env.INTEGRATION_OUTBOX_MAX_ATTEMPTS ?? 5),
|
||||||
|
integrationOutboxRetrySeconds: Number(process.env.INTEGRATION_OUTBOX_RETRY_SECONDS ?? 120),
|
||||||
|
|
||||||
invoiceArchiveCron: process.env.INVOICE_ARCHIVE_CRON ?? "30 2 * * *",
|
invoiceArchiveCron: process.env.INVOICE_ARCHIVE_CRON ?? "30 2 * * *",
|
||||||
invoiceArchiveUnusedDays: Number(process.env.INVOICE_ARCHIVE_UNUSED_DAYS ?? 90),
|
invoiceArchiveUnusedDays: Number(process.env.INVOICE_ARCHIVE_UNUSED_DAYS ?? 90),
|
||||||
invoiceArchiveBatchSize: Number(process.env.INVOICE_ARCHIVE_BATCH_SIZE ?? 200),
|
invoiceArchiveBatchSize: Number(process.env.INVOICE_ARCHIVE_BATCH_SIZE ?? 200),
|
||||||
|
|||||||
@@ -0,0 +1,124 @@
|
|||||||
|
const cron = require("node-cron");
|
||||||
|
|
||||||
|
const {
|
||||||
|
fetchPendingOutboxEvents,
|
||||||
|
markOutboxFailed,
|
||||||
|
markOutboxProcessing,
|
||||||
|
markOutboxSucceeded,
|
||||||
|
} = require("../services/integrations/outbox");
|
||||||
|
const { dispatchOutboxEvent } = require("../services/integrations/dispatcher");
|
||||||
|
|
||||||
|
async function runIntegrationOutboxOnce(prisma, config, logger) {
|
||||||
|
const items = await fetchPendingOutboxEvents(prisma, {
|
||||||
|
batchSize: config.integrationOutboxBatchSize,
|
||||||
|
});
|
||||||
|
|
||||||
|
let succeeded = 0;
|
||||||
|
let failed = 0;
|
||||||
|
|
||||||
|
for (const item of items) {
|
||||||
|
await markOutboxProcessing(prisma, item.id, null);
|
||||||
|
|
||||||
|
try {
|
||||||
|
await dispatchOutboxEvent({
|
||||||
|
config,
|
||||||
|
eventType: item.event_type,
|
||||||
|
payload: item.payload,
|
||||||
|
});
|
||||||
|
await markOutboxSucceeded(prisma, item.id, null);
|
||||||
|
succeeded += 1;
|
||||||
|
} catch (error) {
|
||||||
|
const retryable = typeof error?.retryable === "boolean" ? error.retryable : true;
|
||||||
|
await markOutboxFailed(prisma, config, item, error, null, { retryable });
|
||||||
|
failed += 1;
|
||||||
|
logger.error(
|
||||||
|
{
|
||||||
|
err: error,
|
||||||
|
retryable,
|
||||||
|
outboxId: item.id,
|
||||||
|
eventType: item.event_type,
|
||||||
|
},
|
||||||
|
"Integration outbox dispatch failed",
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
total: items.length,
|
||||||
|
succeeded,
|
||||||
|
failed,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
function startIntegrationOutboxJob(fastify) {
|
||||||
|
let running = false;
|
||||||
|
|
||||||
|
const task = cron.schedule(fastify.config.integrationOutboxCron, async () => {
|
||||||
|
if (running) {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
running = true;
|
||||||
|
try {
|
||||||
|
const result = await runIntegrationOutboxOnce(
|
||||||
|
fastify.prisma,
|
||||||
|
fastify.config,
|
||||||
|
fastify.log,
|
||||||
|
);
|
||||||
|
fastify.metrics?.jobRunsTotal?.inc?.({
|
||||||
|
job: "integration.outbox.dispatch",
|
||||||
|
driver: "cron",
|
||||||
|
outcome: "success",
|
||||||
|
});
|
||||||
|
if (result.succeeded > 0) {
|
||||||
|
fastify.metrics?.jobProcessedTotal?.inc?.(
|
||||||
|
{
|
||||||
|
job: "integration.outbox.dispatch",
|
||||||
|
driver: "cron",
|
||||||
|
kind: "succeeded",
|
||||||
|
},
|
||||||
|
result.succeeded,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
if (result.failed > 0) {
|
||||||
|
fastify.metrics?.jobProcessedTotal?.inc?.(
|
||||||
|
{
|
||||||
|
job: "integration.outbox.dispatch",
|
||||||
|
driver: "cron",
|
||||||
|
kind: "failed",
|
||||||
|
},
|
||||||
|
result.failed,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
} catch (error) {
|
||||||
|
fastify.log.error({ err: error }, "Integration outbox job failed");
|
||||||
|
fastify.metrics?.jobRunsTotal?.inc?.({
|
||||||
|
job: "integration.outbox.dispatch",
|
||||||
|
driver: "cron",
|
||||||
|
outcome: "failure",
|
||||||
|
});
|
||||||
|
} finally {
|
||||||
|
running = false;
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
fastify.addHook("onClose", async () => {
|
||||||
|
task.stop();
|
||||||
|
task.destroy();
|
||||||
|
});
|
||||||
|
|
||||||
|
fastify.log.info(
|
||||||
|
{
|
||||||
|
cron: fastify.config.integrationOutboxCron,
|
||||||
|
batchSize: fastify.config.integrationOutboxBatchSize,
|
||||||
|
},
|
||||||
|
"Integration outbox job scheduled",
|
||||||
|
);
|
||||||
|
|
||||||
|
return task;
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = {
|
||||||
|
runIntegrationOutboxOnce,
|
||||||
|
startIntegrationOutboxJob,
|
||||||
|
};
|
||||||
+14
-790
@@ -7,11 +7,14 @@ const { sendData } = require("../utils/reply");
|
|||||||
const { buildAuditLogData } = require("../utils/audit");
|
const { buildAuditLogData } = require("../utils/audit");
|
||||||
const { compactDateString } = require("../utils/date");
|
const { compactDateString } = require("../utils/date");
|
||||||
const { sha256Hex } = require("../utils/crypto");
|
const { sha256Hex } = require("../utils/crypto");
|
||||||
const { signPayload, verifyToken } = require("../utils/signedUrl");
|
|
||||||
const { toMoneyString } = require("../utils/workflow");
|
const { toMoneyString } = require("../utils/workflow");
|
||||||
const { findActiveDelegationForDelegate } = require("../utils/delegation");
|
const { findActiveDelegationForDelegate } = require("../utils/delegation");
|
||||||
const { isOcrEnabledForType } = require("../services/ocr");
|
const { isOcrEnabledForType } = require("../services/ocr");
|
||||||
const { openReadStream, StorageNotFoundError, writeBuffer } = require("../services/storage");
|
const { registerInvoiceVerificationRoutes } = require("./invoicePool/verification");
|
||||||
|
const { registerInvoicePoolReadRoutes } = require("./invoicePool/read");
|
||||||
|
const { normalizeInvoiceResponse } = require("./invoicePool/shared/mappers");
|
||||||
|
const { buildInvoiceDetailSelect } = require("./invoicePool/shared/selects");
|
||||||
|
const { writeBuffer } = require("../services/storage");
|
||||||
|
|
||||||
const MIME_ALLOWLIST = new Set([
|
const MIME_ALLOWLIST = new Set([
|
||||||
"application/pdf",
|
"application/pdf",
|
||||||
@@ -52,13 +55,6 @@ const overrideDuplicateBodySchema = z
|
|||||||
})
|
})
|
||||||
.strict();
|
.strict();
|
||||||
|
|
||||||
const invoiceListQuerySchema = z.object({
|
|
||||||
page: z.coerce.number().int().min(1).optional(),
|
|
||||||
pageSize: z.coerce.number().int().min(1).max(100).optional(),
|
|
||||||
status: z.enum(["pending_ocr", "ocr_failed", "available", "bound", "archived"]).optional(),
|
|
||||||
ownerScope: z.enum(["own", "all"]).optional(),
|
|
||||||
});
|
|
||||||
|
|
||||||
const DEDUP_CONSTRAINT_NAMES = new Set([
|
const DEDUP_CONSTRAINT_NAMES = new Set([
|
||||||
"invoice_pool_file_sha256_dedup_ux",
|
"invoice_pool_file_sha256_dedup_ux",
|
||||||
"invoice_pool_invoice_code_number_dedup_ux",
|
"invoice_pool_invoice_code_number_dedup_ux",
|
||||||
@@ -148,36 +144,6 @@ function isInvoiceDedupConflict(error) {
|
|||||||
return isFieldBasedDedup(fieldTokens);
|
return isFieldBasedDedup(fieldTokens);
|
||||||
}
|
}
|
||||||
|
|
||||||
function ensureInvoiceReadableByUser(request, invoice) {
|
|
||||||
const roleCodes = request.employee.roleCodes;
|
|
||||||
if (
|
|
||||||
roleCodes.includes("admin") ||
|
|
||||||
roleCodes.includes("finance") ||
|
|
||||||
roleCodes.includes("finance_mgr")
|
|
||||||
) {
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (
|
|
||||||
invoice.owner_employee_id === request.employee.id ||
|
|
||||||
invoice.uploaded_by_employee_id === request.employee.id
|
|
||||||
) {
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (invoice.linked_reimbursement) {
|
|
||||||
const reimbursement = invoice.linked_reimbursement;
|
|
||||||
if (
|
|
||||||
reimbursement.owner_id === request.employee.id ||
|
|
||||||
reimbursement.submitter_id === request.employee.id
|
|
||||||
) {
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
function normalizeMoneyInput(value) {
|
function normalizeMoneyInput(value) {
|
||||||
if (value == null) {
|
if (value == null) {
|
||||||
return null;
|
return null;
|
||||||
@@ -218,205 +184,9 @@ function parseDateOnlyString(value) {
|
|||||||
return new Date(`${trimmed}T00:00:00.000Z`);
|
return new Date(`${trimmed}T00:00:00.000Z`);
|
||||||
}
|
}
|
||||||
|
|
||||||
function sanitizeFilename(fileName) {
|
|
||||||
if (!fileName) return "file";
|
|
||||||
return fileName.replace(/[\r\n"]/g, "_");
|
|
||||||
}
|
|
||||||
|
|
||||||
function parseInvoiceListQuery(query) {
|
|
||||||
const parsed = invoiceListQuerySchema.safeParse(query ?? {});
|
|
||||||
if (!parsed.success) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "VALID_001",
|
|
||||||
message: "参数校验失败",
|
|
||||||
statusCode: 400,
|
|
||||||
details: parsed.error.flatten(),
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
return {
|
|
||||||
page: parsed.data.page ?? 1,
|
|
||||||
pageSize: parsed.data.pageSize ?? 20,
|
|
||||||
status: parsed.data.status,
|
|
||||||
ownerScope: parsed.data.ownerScope,
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
function mapInvoiceSummary(item) {
|
|
||||||
return {
|
|
||||||
id: item.id,
|
|
||||||
status: item.status,
|
|
||||||
ocrType: item.ocr_type,
|
|
||||||
ocrProvider: item.ocr_provider,
|
|
||||||
ocrAttempts: item.ocr_attempts,
|
|
||||||
ocrLastError: item.ocr_last_error,
|
|
||||||
ocrCompletedAt: item.ocr_completed_at?.toISOString?.() ?? null,
|
|
||||||
invoiceCode: item.invoice_code,
|
|
||||||
invoiceNumber: item.invoice_number,
|
|
||||||
invoiceDate: item.invoice_date?.toISOString?.()?.slice(0, 10) ?? null,
|
|
||||||
amount: toMoneyString(item.amount),
|
|
||||||
taxAmount: toMoneyString(item.tax_amount),
|
|
||||||
totalAmount: toMoneyString(item.total_amount),
|
|
||||||
linkedReimbursementId: item.linked_reimbursement_id,
|
|
||||||
linkedItemId: item.linked_item_id,
|
|
||||||
originalName: item.original_name,
|
|
||||||
mimeType: item.mime_type,
|
|
||||||
fileSize: item.file_size,
|
|
||||||
owner: item.owner_employee
|
|
||||||
? {
|
|
||||||
id: item.owner_employee.id,
|
|
||||||
employeeNo: item.owner_employee.employee_no,
|
|
||||||
name: item.owner_employee.name,
|
|
||||||
}
|
|
||||||
: null,
|
|
||||||
uploadedBy: item.uploaded_by_employee
|
|
||||||
? {
|
|
||||||
id: item.uploaded_by_employee.id,
|
|
||||||
employeeNo: item.uploaded_by_employee.employee_no,
|
|
||||||
name: item.uploaded_by_employee.name,
|
|
||||||
}
|
|
||||||
: null,
|
|
||||||
createdAt: item.created_at?.toISOString?.() ?? null,
|
|
||||||
updatedAt: item.updated_at?.toISOString?.() ?? null,
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
function normalizeInvoiceResponse(invoice) {
|
|
||||||
return {
|
|
||||||
id: invoice.id,
|
|
||||||
status: invoice.status,
|
|
||||||
archivedReason: invoice.archived_reason ?? null,
|
|
||||||
archivedAt: invoice.archived_at?.toISOString?.() ?? null,
|
|
||||||
ownerEmployeeId: invoice.owner_employee_id,
|
|
||||||
uploadedByEmployeeId: invoice.uploaded_by_employee_id,
|
|
||||||
originalName: invoice.original_name ?? null,
|
|
||||||
mimeType: invoice.mime_type ?? null,
|
|
||||||
fileSize: invoice.file_size ?? null,
|
|
||||||
fileSha256: invoice.file_sha256 ?? null,
|
|
||||||
remarks: invoice.remarks ?? null,
|
|
||||||
ocrType: invoice.ocr_type,
|
|
||||||
ocrProvider: invoice.ocr_provider,
|
|
||||||
ocrAttempts: invoice.ocr_attempts,
|
|
||||||
ocrLastRequestedAt: invoice.ocr_last_requested_at?.toISOString?.() ?? null,
|
|
||||||
ocrLastError: invoice.ocr_last_error,
|
|
||||||
ocrCompletedAt: invoice.ocr_completed_at?.toISOString?.() ?? null,
|
|
||||||
invoiceCode: invoice.invoice_code,
|
|
||||||
invoiceNumber: invoice.invoice_number,
|
|
||||||
invoiceDate: invoice.invoice_date ? invoice.invoice_date.toISOString().slice(0, 10) : null,
|
|
||||||
sellerName: invoice.seller_name ?? null,
|
|
||||||
buyerName: invoice.buyer_name ?? null,
|
|
||||||
amount: toMoneyString(invoice.amount),
|
|
||||||
taxAmount: toMoneyString(invoice.tax_amount),
|
|
||||||
totalAmount: toMoneyString(invoice.total_amount),
|
|
||||||
linkedReimbursementId: invoice.linked_reimbursement_id,
|
|
||||||
linkedItemId: invoice.linked_item_id,
|
|
||||||
isDuplicateOverride: invoice.is_duplicate_override ?? false,
|
|
||||||
overrideRefFormNumber: invoice.override_ref_form_number ?? null,
|
|
||||||
overrideReason: invoice.override_reason ?? null,
|
|
||||||
overriddenBy: invoice.overridden_by ?? null,
|
|
||||||
createdAt: invoice.created_at?.toISOString?.() ?? null,
|
|
||||||
updatedAt: invoice.updated_at?.toISOString?.() ?? null,
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
async function invoicePoolRoutes(fastify) {
|
async function invoicePoolRoutes(fastify) {
|
||||||
|
|
||||||
fastify.get(
|
registerInvoicePoolReadRoutes(fastify);
|
||||||
"/invoice-pool",
|
|
||||||
{
|
|
||||||
preHandler: fastify.authenticate,
|
|
||||||
},
|
|
||||||
async (request, reply) => {
|
|
||||||
const query = parseInvoiceListQuery(request.query);
|
|
||||||
|
|
||||||
const canViewOwn = fastify.hasPermission(request.employee, "invoice.view_own");
|
|
||||||
const canManage = fastify.hasPermission(request.employee, "invoice.manage");
|
|
||||||
|
|
||||||
if (!canViewOwn && !canManage) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "PERM_001",
|
|
||||||
message: "无权限",
|
|
||||||
statusCode: 403,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
const ownerScope = query.ownerScope ?? (canManage ? "all" : "own");
|
|
||||||
if (ownerScope === "all" && !canManage) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "PERM_001",
|
|
||||||
message: "无权限",
|
|
||||||
statusCode: 403,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
const skip = (query.page - 1) * query.pageSize;
|
|
||||||
const where = {
|
|
||||||
...(query.status ? { status: query.status } : {}),
|
|
||||||
...(ownerScope === "all"
|
|
||||||
? {}
|
|
||||||
: {
|
|
||||||
OR: [
|
|
||||||
{ owner_employee_id: request.employee.id },
|
|
||||||
{ uploaded_by_employee_id: request.employee.id },
|
|
||||||
{
|
|
||||||
linked_reimbursement: {
|
|
||||||
OR: [
|
|
||||||
{ owner_id: request.employee.id },
|
|
||||||
{ submitter_id: request.employee.id },
|
|
||||||
],
|
|
||||||
},
|
|
||||||
},
|
|
||||||
],
|
|
||||||
}),
|
|
||||||
};
|
|
||||||
|
|
||||||
const [items, total] = await Promise.all([
|
|
||||||
fastify.prisma.invoicePool.findMany({
|
|
||||||
where,
|
|
||||||
orderBy: { created_at: "desc" },
|
|
||||||
skip,
|
|
||||||
take: query.pageSize,
|
|
||||||
select: {
|
|
||||||
id: true,
|
|
||||||
status: true,
|
|
||||||
ocr_type: true,
|
|
||||||
ocr_provider: true,
|
|
||||||
ocr_attempts: true,
|
|
||||||
ocr_last_error: true,
|
|
||||||
ocr_completed_at: true,
|
|
||||||
invoice_code: true,
|
|
||||||
invoice_number: true,
|
|
||||||
invoice_date: true,
|
|
||||||
amount: true,
|
|
||||||
tax_amount: true,
|
|
||||||
total_amount: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_item_id: true,
|
|
||||||
original_name: true,
|
|
||||||
mime_type: true,
|
|
||||||
file_size: true,
|
|
||||||
created_at: true,
|
|
||||||
updated_at: true,
|
|
||||||
owner_employee: {
|
|
||||||
select: { id: true, employee_no: true, name: true },
|
|
||||||
},
|
|
||||||
uploaded_by_employee: {
|
|
||||||
select: { id: true, employee_no: true, name: true },
|
|
||||||
},
|
|
||||||
},
|
|
||||||
}),
|
|
||||||
fastify.prisma.invoicePool.count({ where }),
|
|
||||||
]);
|
|
||||||
|
|
||||||
return sendData(reply, request, {
|
|
||||||
page: query.page,
|
|
||||||
pageSize: query.pageSize,
|
|
||||||
total,
|
|
||||||
ownerScope,
|
|
||||||
items: items.map(mapInvoiceSummary),
|
|
||||||
});
|
|
||||||
},
|
|
||||||
);
|
|
||||||
|
|
||||||
fastify.post(
|
fastify.post(
|
||||||
"/invoice-pool/upload",
|
"/invoice-pool/upload",
|
||||||
@@ -626,107 +396,7 @@ async function invoicePoolRoutes(fastify) {
|
|||||||
},
|
},
|
||||||
);
|
);
|
||||||
|
|
||||||
fastify.get(
|
registerInvoiceVerificationRoutes(fastify);
|
||||||
"/invoice-pool/:id",
|
|
||||||
{
|
|
||||||
preHandler: fastify.authenticate,
|
|
||||||
},
|
|
||||||
async (request, reply) => {
|
|
||||||
const parsedInvoiceId = z.string().uuid().safeParse(request.params?.id);
|
|
||||||
if (!parsedInvoiceId.success) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "VALID_001",
|
|
||||||
message: "参数校验失败",
|
|
||||||
statusCode: 400,
|
|
||||||
details: { id: "invalid_uuid" },
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
const invoice = await fastify.prisma.invoicePool.findUnique({
|
|
||||||
where: { id: parsedInvoiceId.data },
|
|
||||||
select: {
|
|
||||||
id: true,
|
|
||||||
status: true,
|
|
||||||
archived_reason: true,
|
|
||||||
archived_at: true,
|
|
||||||
owner_employee_id: true,
|
|
||||||
uploaded_by_employee_id: true,
|
|
||||||
original_name: true,
|
|
||||||
mime_type: true,
|
|
||||||
file_size: true,
|
|
||||||
file_sha256: true,
|
|
||||||
remarks: true,
|
|
||||||
ocr_type: true,
|
|
||||||
ocr_provider: true,
|
|
||||||
ocr_attempts: true,
|
|
||||||
ocr_last_requested_at: true,
|
|
||||||
ocr_last_error: true,
|
|
||||||
ocr_completed_at: true,
|
|
||||||
invoice_code: true,
|
|
||||||
invoice_number: true,
|
|
||||||
invoice_date: true,
|
|
||||||
seller_name: true,
|
|
||||||
buyer_name: true,
|
|
||||||
amount: true,
|
|
||||||
tax_amount: true,
|
|
||||||
total_amount: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_item_id: true,
|
|
||||||
is_duplicate_override: true,
|
|
||||||
override_ref_form_number: true,
|
|
||||||
override_reason: true,
|
|
||||||
overridden_by: true,
|
|
||||||
created_at: true,
|
|
||||||
updated_at: true,
|
|
||||||
linked_reimbursement: {
|
|
||||||
select: {
|
|
||||||
owner_id: true,
|
|
||||||
submitter_id: true,
|
|
||||||
},
|
|
||||||
},
|
|
||||||
},
|
|
||||||
});
|
|
||||||
|
|
||||||
if (!invoice) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "SYS_404",
|
|
||||||
message: "Not Found",
|
|
||||||
statusCode: 404,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
let canAccess = ensureInvoiceReadableByUser(request, invoice);
|
|
||||||
if (!canAccess && invoice.linked_reimbursement_id) {
|
|
||||||
const pendingTask = await fastify.prisma.workflowTask.findFirst({
|
|
||||||
where: {
|
|
||||||
status: "pending",
|
|
||||||
workflow_instance: {
|
|
||||||
entity_type: "reimbursement",
|
|
||||||
entity_id: invoice.linked_reimbursement_id,
|
|
||||||
current_status: "pending",
|
|
||||||
},
|
|
||||||
OR: [
|
|
||||||
{ assignee_id: request.employee.id },
|
|
||||||
{ assignee_role: { in: request.employee.roleCodes } },
|
|
||||||
],
|
|
||||||
},
|
|
||||||
select: { id: true },
|
|
||||||
});
|
|
||||||
|
|
||||||
canAccess = Boolean(pendingTask);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (!canAccess) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "PERM_001",
|
|
||||||
message: "无权限",
|
|
||||||
statusCode: 403,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
return sendData(reply, request, normalizeInvoiceResponse(invoice));
|
|
||||||
},
|
|
||||||
);
|
|
||||||
|
|
||||||
fastify.patch(
|
fastify.patch(
|
||||||
"/invoice-pool/:id",
|
"/invoice-pool/:id",
|
||||||
@@ -783,41 +453,7 @@ async function invoicePoolRoutes(fastify) {
|
|||||||
|
|
||||||
const current = await tx.invoicePool.findUnique({
|
const current = await tx.invoicePool.findUnique({
|
||||||
where: { id: invoiceId },
|
where: { id: invoiceId },
|
||||||
select: {
|
select: buildInvoiceDetailSelect(),
|
||||||
id: true,
|
|
||||||
status: true,
|
|
||||||
archived_reason: true,
|
|
||||||
archived_at: true,
|
|
||||||
owner_employee_id: true,
|
|
||||||
uploaded_by_employee_id: true,
|
|
||||||
original_name: true,
|
|
||||||
mime_type: true,
|
|
||||||
file_size: true,
|
|
||||||
file_sha256: true,
|
|
||||||
remarks: true,
|
|
||||||
ocr_type: true,
|
|
||||||
ocr_provider: true,
|
|
||||||
ocr_attempts: true,
|
|
||||||
ocr_last_requested_at: true,
|
|
||||||
ocr_last_error: true,
|
|
||||||
ocr_completed_at: true,
|
|
||||||
invoice_code: true,
|
|
||||||
invoice_number: true,
|
|
||||||
invoice_date: true,
|
|
||||||
seller_name: true,
|
|
||||||
buyer_name: true,
|
|
||||||
amount: true,
|
|
||||||
tax_amount: true,
|
|
||||||
total_amount: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_item_id: true,
|
|
||||||
is_duplicate_override: true,
|
|
||||||
override_ref_form_number: true,
|
|
||||||
override_reason: true,
|
|
||||||
overridden_by: true,
|
|
||||||
created_at: true,
|
|
||||||
updated_at: true,
|
|
||||||
},
|
|
||||||
});
|
});
|
||||||
|
|
||||||
if (!current) {
|
if (!current) {
|
||||||
@@ -955,41 +591,7 @@ async function invoicePoolRoutes(fastify) {
|
|||||||
const updated = await tx.invoicePool.update({
|
const updated = await tx.invoicePool.update({
|
||||||
where: { id: invoiceId },
|
where: { id: invoiceId },
|
||||||
data: updateData,
|
data: updateData,
|
||||||
select: {
|
select: buildInvoiceDetailSelect(),
|
||||||
id: true,
|
|
||||||
status: true,
|
|
||||||
archived_reason: true,
|
|
||||||
archived_at: true,
|
|
||||||
owner_employee_id: true,
|
|
||||||
uploaded_by_employee_id: true,
|
|
||||||
original_name: true,
|
|
||||||
mime_type: true,
|
|
||||||
file_size: true,
|
|
||||||
file_sha256: true,
|
|
||||||
remarks: true,
|
|
||||||
ocr_type: true,
|
|
||||||
ocr_provider: true,
|
|
||||||
ocr_attempts: true,
|
|
||||||
ocr_last_requested_at: true,
|
|
||||||
ocr_last_error: true,
|
|
||||||
ocr_completed_at: true,
|
|
||||||
invoice_code: true,
|
|
||||||
invoice_number: true,
|
|
||||||
invoice_date: true,
|
|
||||||
seller_name: true,
|
|
||||||
buyer_name: true,
|
|
||||||
amount: true,
|
|
||||||
tax_amount: true,
|
|
||||||
total_amount: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_item_id: true,
|
|
||||||
is_duplicate_override: true,
|
|
||||||
override_ref_form_number: true,
|
|
||||||
override_reason: true,
|
|
||||||
overridden_by: true,
|
|
||||||
created_at: true,
|
|
||||||
updated_at: true,
|
|
||||||
},
|
|
||||||
});
|
});
|
||||||
|
|
||||||
const changes = {};
|
const changes = {};
|
||||||
@@ -1128,41 +730,7 @@ async function invoicePoolRoutes(fastify) {
|
|||||||
if (current.status === "archived" && current.archived_reason === "manual") {
|
if (current.status === "archived" && current.archived_reason === "manual") {
|
||||||
return tx.invoicePool.findUnique({
|
return tx.invoicePool.findUnique({
|
||||||
where: { id: invoiceId },
|
where: { id: invoiceId },
|
||||||
select: {
|
select: buildInvoiceDetailSelect(),
|
||||||
id: true,
|
|
||||||
status: true,
|
|
||||||
archived_reason: true,
|
|
||||||
archived_at: true,
|
|
||||||
owner_employee_id: true,
|
|
||||||
uploaded_by_employee_id: true,
|
|
||||||
original_name: true,
|
|
||||||
mime_type: true,
|
|
||||||
file_size: true,
|
|
||||||
file_sha256: true,
|
|
||||||
remarks: true,
|
|
||||||
ocr_type: true,
|
|
||||||
ocr_provider: true,
|
|
||||||
ocr_attempts: true,
|
|
||||||
ocr_last_requested_at: true,
|
|
||||||
ocr_last_error: true,
|
|
||||||
ocr_completed_at: true,
|
|
||||||
invoice_code: true,
|
|
||||||
invoice_number: true,
|
|
||||||
invoice_date: true,
|
|
||||||
seller_name: true,
|
|
||||||
buyer_name: true,
|
|
||||||
amount: true,
|
|
||||||
tax_amount: true,
|
|
||||||
total_amount: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_item_id: true,
|
|
||||||
is_duplicate_override: true,
|
|
||||||
override_ref_form_number: true,
|
|
||||||
override_reason: true,
|
|
||||||
overridden_by: true,
|
|
||||||
created_at: true,
|
|
||||||
updated_at: true,
|
|
||||||
},
|
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -1184,41 +752,7 @@ async function invoicePoolRoutes(fastify) {
|
|||||||
archived_at: now,
|
archived_at: now,
|
||||||
updated_by: request.employee.id,
|
updated_by: request.employee.id,
|
||||||
},
|
},
|
||||||
select: {
|
select: buildInvoiceDetailSelect(),
|
||||||
id: true,
|
|
||||||
status: true,
|
|
||||||
archived_reason: true,
|
|
||||||
archived_at: true,
|
|
||||||
owner_employee_id: true,
|
|
||||||
uploaded_by_employee_id: true,
|
|
||||||
original_name: true,
|
|
||||||
mime_type: true,
|
|
||||||
file_size: true,
|
|
||||||
file_sha256: true,
|
|
||||||
remarks: true,
|
|
||||||
ocr_type: true,
|
|
||||||
ocr_provider: true,
|
|
||||||
ocr_attempts: true,
|
|
||||||
ocr_last_requested_at: true,
|
|
||||||
ocr_last_error: true,
|
|
||||||
ocr_completed_at: true,
|
|
||||||
invoice_code: true,
|
|
||||||
invoice_number: true,
|
|
||||||
invoice_date: true,
|
|
||||||
seller_name: true,
|
|
||||||
buyer_name: true,
|
|
||||||
amount: true,
|
|
||||||
tax_amount: true,
|
|
||||||
total_amount: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_item_id: true,
|
|
||||||
is_duplicate_override: true,
|
|
||||||
override_ref_form_number: true,
|
|
||||||
override_reason: true,
|
|
||||||
overridden_by: true,
|
|
||||||
created_at: true,
|
|
||||||
updated_at: true,
|
|
||||||
},
|
|
||||||
});
|
});
|
||||||
|
|
||||||
await tx.auditLog.create({
|
await tx.auditLog.create({
|
||||||
@@ -1330,41 +864,7 @@ async function invoicePoolRoutes(fastify) {
|
|||||||
linked_item_id: null,
|
linked_item_id: null,
|
||||||
updated_by: request.employee.id,
|
updated_by: request.employee.id,
|
||||||
},
|
},
|
||||||
select: {
|
select: buildInvoiceDetailSelect(),
|
||||||
id: true,
|
|
||||||
status: true,
|
|
||||||
archived_reason: true,
|
|
||||||
archived_at: true,
|
|
||||||
owner_employee_id: true,
|
|
||||||
uploaded_by_employee_id: true,
|
|
||||||
original_name: true,
|
|
||||||
mime_type: true,
|
|
||||||
file_size: true,
|
|
||||||
file_sha256: true,
|
|
||||||
remarks: true,
|
|
||||||
ocr_type: true,
|
|
||||||
ocr_provider: true,
|
|
||||||
ocr_attempts: true,
|
|
||||||
ocr_last_requested_at: true,
|
|
||||||
ocr_last_error: true,
|
|
||||||
ocr_completed_at: true,
|
|
||||||
invoice_code: true,
|
|
||||||
invoice_number: true,
|
|
||||||
invoice_date: true,
|
|
||||||
seller_name: true,
|
|
||||||
buyer_name: true,
|
|
||||||
amount: true,
|
|
||||||
tax_amount: true,
|
|
||||||
total_amount: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_item_id: true,
|
|
||||||
is_duplicate_override: true,
|
|
||||||
override_ref_form_number: true,
|
|
||||||
override_reason: true,
|
|
||||||
overridden_by: true,
|
|
||||||
created_at: true,
|
|
||||||
updated_at: true,
|
|
||||||
},
|
|
||||||
});
|
});
|
||||||
});
|
});
|
||||||
|
|
||||||
@@ -1491,41 +991,7 @@ async function invoicePoolRoutes(fastify) {
|
|||||||
ocr_lock_owner: null,
|
ocr_lock_owner: null,
|
||||||
updated_by: request.employee.id,
|
updated_by: request.employee.id,
|
||||||
},
|
},
|
||||||
select: {
|
select: buildInvoiceDetailSelect(),
|
||||||
id: true,
|
|
||||||
status: true,
|
|
||||||
archived_reason: true,
|
|
||||||
archived_at: true,
|
|
||||||
owner_employee_id: true,
|
|
||||||
uploaded_by_employee_id: true,
|
|
||||||
original_name: true,
|
|
||||||
mime_type: true,
|
|
||||||
file_size: true,
|
|
||||||
file_sha256: true,
|
|
||||||
remarks: true,
|
|
||||||
ocr_type: true,
|
|
||||||
ocr_provider: true,
|
|
||||||
ocr_attempts: true,
|
|
||||||
ocr_last_requested_at: true,
|
|
||||||
ocr_last_error: true,
|
|
||||||
ocr_completed_at: true,
|
|
||||||
invoice_code: true,
|
|
||||||
invoice_number: true,
|
|
||||||
invoice_date: true,
|
|
||||||
seller_name: true,
|
|
||||||
buyer_name: true,
|
|
||||||
amount: true,
|
|
||||||
tax_amount: true,
|
|
||||||
total_amount: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_item_id: true,
|
|
||||||
is_duplicate_override: true,
|
|
||||||
override_ref_form_number: true,
|
|
||||||
override_reason: true,
|
|
||||||
overridden_by: true,
|
|
||||||
created_at: true,
|
|
||||||
updated_at: true,
|
|
||||||
},
|
|
||||||
});
|
});
|
||||||
|
|
||||||
await tx.auditLog.create({
|
await tx.auditLog.create({
|
||||||
@@ -1702,41 +1168,7 @@ async function invoicePoolRoutes(fastify) {
|
|||||||
overridden_by: request.employee.id,
|
overridden_by: request.employee.id,
|
||||||
updated_by: request.employee.id,
|
updated_by: request.employee.id,
|
||||||
},
|
},
|
||||||
select: {
|
select: buildInvoiceDetailSelect(),
|
||||||
id: true,
|
|
||||||
status: true,
|
|
||||||
archived_reason: true,
|
|
||||||
archived_at: true,
|
|
||||||
owner_employee_id: true,
|
|
||||||
uploaded_by_employee_id: true,
|
|
||||||
original_name: true,
|
|
||||||
mime_type: true,
|
|
||||||
file_size: true,
|
|
||||||
file_sha256: true,
|
|
||||||
remarks: true,
|
|
||||||
ocr_type: true,
|
|
||||||
ocr_provider: true,
|
|
||||||
ocr_attempts: true,
|
|
||||||
ocr_last_requested_at: true,
|
|
||||||
ocr_last_error: true,
|
|
||||||
ocr_completed_at: true,
|
|
||||||
invoice_code: true,
|
|
||||||
invoice_number: true,
|
|
||||||
invoice_date: true,
|
|
||||||
seller_name: true,
|
|
||||||
buyer_name: true,
|
|
||||||
amount: true,
|
|
||||||
tax_amount: true,
|
|
||||||
total_amount: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_item_id: true,
|
|
||||||
is_duplicate_override: true,
|
|
||||||
override_ref_form_number: true,
|
|
||||||
override_reason: true,
|
|
||||||
overridden_by: true,
|
|
||||||
created_at: true,
|
|
||||||
updated_at: true,
|
|
||||||
},
|
|
||||||
});
|
});
|
||||||
|
|
||||||
await tx.auditLog.create({
|
await tx.auditLog.create({
|
||||||
@@ -1760,214 +1192,6 @@ async function invoicePoolRoutes(fastify) {
|
|||||||
},
|
},
|
||||||
);
|
);
|
||||||
|
|
||||||
fastify.post(
|
|
||||||
"/invoice-pool/:id/signed-url",
|
|
||||||
{
|
|
||||||
preHandler: fastify.authenticate,
|
|
||||||
},
|
|
||||||
async (request, reply) => {
|
|
||||||
const parsedInvoiceId = z.string().uuid().safeParse(request.params?.id);
|
|
||||||
if (!parsedInvoiceId.success) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "VALID_001",
|
|
||||||
message: "参数校验失败",
|
|
||||||
statusCode: 400,
|
|
||||||
details: { id: "invalid_uuid" },
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
const invoice = await fastify.prisma.invoicePool.findUnique({
|
|
||||||
where: { id: parsedInvoiceId.data },
|
|
||||||
select: {
|
|
||||||
id: true,
|
|
||||||
owner_employee_id: true,
|
|
||||||
uploaded_by_employee_id: true,
|
|
||||||
linked_reimbursement_id: true,
|
|
||||||
linked_reimbursement: {
|
|
||||||
select: {
|
|
||||||
owner_id: true,
|
|
||||||
submitter_id: true,
|
|
||||||
},
|
|
||||||
},
|
|
||||||
},
|
|
||||||
});
|
|
||||||
|
|
||||||
if (!invoice) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "SYS_404",
|
|
||||||
message: "Not Found",
|
|
||||||
statusCode: 404,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
let canAccess = ensureInvoiceReadableByUser(request, invoice);
|
|
||||||
|
|
||||||
if (!canAccess && invoice.linked_reimbursement_id) {
|
|
||||||
const pendingTask = await fastify.prisma.workflowTask.findFirst({
|
|
||||||
where: {
|
|
||||||
status: "pending",
|
|
||||||
workflow_instance: {
|
|
||||||
entity_type: "reimbursement",
|
|
||||||
entity_id: invoice.linked_reimbursement_id,
|
|
||||||
current_status: "pending",
|
|
||||||
},
|
|
||||||
OR: [
|
|
||||||
{ assignee_id: request.employee.id },
|
|
||||||
{ assignee_role: { in: request.employee.roleCodes } },
|
|
||||||
],
|
|
||||||
},
|
|
||||||
select: { id: true },
|
|
||||||
});
|
|
||||||
|
|
||||||
canAccess = Boolean(pendingTask);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (!canAccess) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "PERM_001",
|
|
||||||
message: "无权限",
|
|
||||||
statusCode: 403,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
const expiresAt = Date.now() + fastify.config.signedUrlTtlSeconds * 1000;
|
|
||||||
const token = signPayload(
|
|
||||||
{
|
|
||||||
invoiceId: invoice.id,
|
|
||||||
actorId: request.employee.id,
|
|
||||||
exp: expiresAt,
|
|
||||||
},
|
|
||||||
fastify.config.jwtSecret,
|
|
||||||
);
|
|
||||||
|
|
||||||
const origin =
|
|
||||||
fastify.config.appOrigin ||
|
|
||||||
`${request.protocol}://${request.headers.host ?? "localhost:3000"}`;
|
|
||||||
const signedUrl = `${origin}/api/invoice-pool/${invoice.id}/file?token=${encodeURIComponent(token)}`;
|
|
||||||
|
|
||||||
await fastify.prisma.auditLog.create({
|
|
||||||
data: buildAuditLogData(request, {
|
|
||||||
actorId: request.employee.id,
|
|
||||||
action: "INVOICE_SIGNED_URL_ISSUED",
|
|
||||||
targetType: "invoice_pool",
|
|
||||||
targetId: invoice.id,
|
|
||||||
extra: {
|
|
||||||
invoiceId: invoice.id,
|
|
||||||
expiresAt,
|
|
||||||
},
|
|
||||||
}),
|
|
||||||
});
|
|
||||||
|
|
||||||
return sendData(reply, request, {
|
|
||||||
signedUrl,
|
|
||||||
expiresAt: new Date(expiresAt).toISOString(),
|
|
||||||
});
|
|
||||||
},
|
|
||||||
);
|
|
||||||
|
|
||||||
fastify.get("/invoice-pool/:id/file", async (request, reply) => {
|
|
||||||
const parsedInvoiceId = z.string().uuid().safeParse(request.params?.id);
|
|
||||||
const token = request.query?.token;
|
|
||||||
if (!parsedInvoiceId.success || typeof token !== "string") {
|
|
||||||
throw new AppError({
|
|
||||||
code: "PERM_001",
|
|
||||||
message: "无权限",
|
|
||||||
statusCode: 403,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
const verified = verifyToken(token, fastify.config.jwtSecret);
|
|
||||||
if (!verified.ok) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "PERM_001",
|
|
||||||
message: "无权限",
|
|
||||||
statusCode: 403,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
const payload = verified.payload;
|
|
||||||
const parsedActorId = z.string().uuid().safeParse(payload?.actorId);
|
|
||||||
if (
|
|
||||||
payload?.invoiceId !== parsedInvoiceId.data ||
|
|
||||||
typeof payload?.exp !== "number" ||
|
|
||||||
payload.exp <= Date.now() ||
|
|
||||||
!parsedActorId.success
|
|
||||||
) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "PERM_001",
|
|
||||||
message: "无权限",
|
|
||||||
statusCode: 403,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
const actorId = parsedActorId.data;
|
|
||||||
|
|
||||||
const invoice = await fastify.prisma.invoicePool.findUnique({
|
|
||||||
where: { id: parsedInvoiceId.data },
|
|
||||||
select: {
|
|
||||||
storage_path: true,
|
|
||||||
mime_type: true,
|
|
||||||
original_name: true,
|
|
||||||
},
|
|
||||||
});
|
|
||||||
|
|
||||||
if (!invoice) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "SYS_404",
|
|
||||||
message: "Not Found",
|
|
||||||
statusCode: 404,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
let stream = null;
|
|
||||||
try {
|
|
||||||
const opened = await openReadStream({
|
|
||||||
config: fastify.config,
|
|
||||||
storagePath: invoice.storage_path,
|
|
||||||
});
|
|
||||||
stream = opened.stream;
|
|
||||||
} catch (error) {
|
|
||||||
if (error instanceof StorageNotFoundError) {
|
|
||||||
throw new AppError({
|
|
||||||
code: "SYS_404",
|
|
||||||
message: "Not Found",
|
|
||||||
statusCode: 404,
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
throw new AppError({
|
|
||||||
code: "SYS_001",
|
|
||||||
message: "服务器内部错误",
|
|
||||||
statusCode: 500,
|
|
||||||
details: {},
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
try {
|
|
||||||
await fastify.prisma.auditLog.create({
|
|
||||||
data: buildAuditLogData(request, {
|
|
||||||
actorId,
|
|
||||||
action: "INVOICE_FILE_DOWNLOADED",
|
|
||||||
targetType: "invoice_pool",
|
|
||||||
targetId: parsedInvoiceId.data,
|
|
||||||
extra: {
|
|
||||||
invoiceId: parsedInvoiceId.data,
|
|
||||||
exp: payload.exp,
|
|
||||||
},
|
|
||||||
}),
|
|
||||||
});
|
|
||||||
} catch (error) {
|
|
||||||
fastify.log.error({ err: error, invoiceId: parsedInvoiceId.data }, "Audit log write failed");
|
|
||||||
}
|
|
||||||
|
|
||||||
reply.type(invoice.mime_type || "application/octet-stream");
|
|
||||||
reply.header(
|
|
||||||
"content-disposition",
|
|
||||||
`inline; filename=\"${sanitizeFilename(invoice.original_name)}\"`,
|
|
||||||
);
|
|
||||||
return reply.send(stream);
|
|
||||||
});
|
|
||||||
|
|
||||||
fastify.post(
|
fastify.post(
|
||||||
"/invoice-pool/:id/bind",
|
"/invoice-pool/:id/bind",
|
||||||
{
|
{
|
||||||
|
|||||||
@@ -0,0 +1,413 @@
|
|||||||
|
const { z } = require("zod");
|
||||||
|
|
||||||
|
const { AppError } = require("../../utils/AppError");
|
||||||
|
const { sendData } = require("../../utils/reply");
|
||||||
|
const { buildAuditLogData } = require("../../utils/audit");
|
||||||
|
const { signPayload, verifyToken } = require("../../utils/signedUrl");
|
||||||
|
const { openReadStream, StorageNotFoundError } = require("../../services/storage");
|
||||||
|
const {
|
||||||
|
mapInvoiceSummary,
|
||||||
|
normalizeInvoiceResponse,
|
||||||
|
} = require("./shared/mappers");
|
||||||
|
const {
|
||||||
|
buildInvoiceDetailSelect,
|
||||||
|
buildInvoiceSummarySelect,
|
||||||
|
} = require("./shared/selects");
|
||||||
|
|
||||||
|
const invoiceListQuerySchema = z.object({
|
||||||
|
page: z.coerce.number().int().min(1).optional(),
|
||||||
|
pageSize: z.coerce.number().int().min(1).max(100).optional(),
|
||||||
|
status: z.enum(["pending_ocr", "ocr_failed", "available", "bound", "archived"]).optional(),
|
||||||
|
ownerScope: z.enum(["own", "all"]).optional(),
|
||||||
|
});
|
||||||
|
|
||||||
|
function sanitizeFilename(fileName) {
|
||||||
|
if (!fileName) return "file";
|
||||||
|
return fileName.replace(/[\r\n"]/g, "_");
|
||||||
|
}
|
||||||
|
|
||||||
|
function parseInvoiceListQuery(query) {
|
||||||
|
const parsed = invoiceListQuerySchema.safeParse(query ?? {});
|
||||||
|
if (!parsed.success) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "VALID_001",
|
||||||
|
message: "参数校验失败",
|
||||||
|
statusCode: 400,
|
||||||
|
details: parsed.error.flatten(),
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
page: parsed.data.page ?? 1,
|
||||||
|
pageSize: parsed.data.pageSize ?? 20,
|
||||||
|
status: parsed.data.status,
|
||||||
|
ownerScope: parsed.data.ownerScope,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
function ensureInvoiceReadableByUser(request, invoice) {
|
||||||
|
const roleCodes = request.employee.roleCodes;
|
||||||
|
if (
|
||||||
|
roleCodes.includes("admin") ||
|
||||||
|
roleCodes.includes("finance") ||
|
||||||
|
roleCodes.includes("finance_mgr")
|
||||||
|
) {
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (
|
||||||
|
invoice.owner_employee_id === request.employee.id ||
|
||||||
|
invoice.uploaded_by_employee_id === request.employee.id
|
||||||
|
) {
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (invoice.linked_reimbursement) {
|
||||||
|
const reimbursement = invoice.linked_reimbursement;
|
||||||
|
if (
|
||||||
|
reimbursement.owner_id === request.employee.id ||
|
||||||
|
reimbursement.submitter_id === request.employee.id
|
||||||
|
) {
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
async function hasPendingTaskAccess(fastify, request, linkedReimbursementId) {
|
||||||
|
if (!linkedReimbursementId) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
const pendingTask = await fastify.prisma.workflowTask.findFirst({
|
||||||
|
where: {
|
||||||
|
status: "pending",
|
||||||
|
workflow_instance: {
|
||||||
|
entity_type: "reimbursement",
|
||||||
|
entity_id: linkedReimbursementId,
|
||||||
|
current_status: "pending",
|
||||||
|
},
|
||||||
|
OR: [
|
||||||
|
{ assignee_id: request.employee.id },
|
||||||
|
{ assignee_role: { in: request.employee.roleCodes } },
|
||||||
|
],
|
||||||
|
},
|
||||||
|
select: { id: true },
|
||||||
|
});
|
||||||
|
|
||||||
|
return Boolean(pendingTask);
|
||||||
|
}
|
||||||
|
|
||||||
|
function registerInvoicePoolReadRoutes(fastify) {
|
||||||
|
fastify.get(
|
||||||
|
"/invoice-pool",
|
||||||
|
{
|
||||||
|
preHandler: fastify.authenticate,
|
||||||
|
},
|
||||||
|
async (request, reply) => {
|
||||||
|
const query = parseInvoiceListQuery(request.query);
|
||||||
|
|
||||||
|
const canViewOwn = fastify.hasPermission(request.employee, "invoice.view_own");
|
||||||
|
const canManage = fastify.hasPermission(request.employee, "invoice.manage");
|
||||||
|
|
||||||
|
if (!canViewOwn && !canManage) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "PERM_001",
|
||||||
|
message: "无权限",
|
||||||
|
statusCode: 403,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
const ownerScope = query.ownerScope ?? (canManage ? "all" : "own");
|
||||||
|
if (ownerScope === "all" && !canManage) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "PERM_001",
|
||||||
|
message: "无权限",
|
||||||
|
statusCode: 403,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
const skip = (query.page - 1) * query.pageSize;
|
||||||
|
const where = {
|
||||||
|
...(query.status ? { status: query.status } : {}),
|
||||||
|
...(ownerScope === "all"
|
||||||
|
? {}
|
||||||
|
: {
|
||||||
|
OR: [
|
||||||
|
{ owner_employee_id: request.employee.id },
|
||||||
|
{ uploaded_by_employee_id: request.employee.id },
|
||||||
|
{
|
||||||
|
linked_reimbursement: {
|
||||||
|
OR: [
|
||||||
|
{ owner_id: request.employee.id },
|
||||||
|
{ submitter_id: request.employee.id },
|
||||||
|
],
|
||||||
|
},
|
||||||
|
},
|
||||||
|
],
|
||||||
|
}),
|
||||||
|
};
|
||||||
|
|
||||||
|
const [items, total] = await Promise.all([
|
||||||
|
fastify.prisma.invoicePool.findMany({
|
||||||
|
where,
|
||||||
|
orderBy: { created_at: "desc" },
|
||||||
|
skip,
|
||||||
|
take: query.pageSize,
|
||||||
|
select: buildInvoiceSummarySelect(),
|
||||||
|
}),
|
||||||
|
fastify.prisma.invoicePool.count({ where }),
|
||||||
|
]);
|
||||||
|
|
||||||
|
return sendData(reply, request, {
|
||||||
|
page: query.page,
|
||||||
|
pageSize: query.pageSize,
|
||||||
|
total,
|
||||||
|
ownerScope,
|
||||||
|
items: items.map(mapInvoiceSummary),
|
||||||
|
});
|
||||||
|
},
|
||||||
|
);
|
||||||
|
|
||||||
|
fastify.get(
|
||||||
|
"/invoice-pool/:id",
|
||||||
|
{
|
||||||
|
preHandler: fastify.authenticate,
|
||||||
|
},
|
||||||
|
async (request, reply) => {
|
||||||
|
const parsedInvoiceId = z.string().uuid().safeParse(request.params?.id);
|
||||||
|
if (!parsedInvoiceId.success) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "VALID_001",
|
||||||
|
message: "参数校验失败",
|
||||||
|
statusCode: 400,
|
||||||
|
details: { id: "invalid_uuid" },
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
const invoice = await fastify.prisma.invoicePool.findUnique({
|
||||||
|
where: { id: parsedInvoiceId.data },
|
||||||
|
select: buildInvoiceDetailSelect({ includeLinkedReimbursement: true }),
|
||||||
|
});
|
||||||
|
|
||||||
|
if (!invoice) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "SYS_404",
|
||||||
|
message: "Not Found",
|
||||||
|
statusCode: 404,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
let canAccess = ensureInvoiceReadableByUser(request, invoice);
|
||||||
|
if (!canAccess) {
|
||||||
|
canAccess = await hasPendingTaskAccess(fastify, request, invoice.linked_reimbursement_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!canAccess) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "PERM_001",
|
||||||
|
message: "无权限",
|
||||||
|
statusCode: 403,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
return sendData(reply, request, normalizeInvoiceResponse(invoice));
|
||||||
|
},
|
||||||
|
);
|
||||||
|
|
||||||
|
fastify.post(
|
||||||
|
"/invoice-pool/:id/signed-url",
|
||||||
|
{
|
||||||
|
preHandler: fastify.authenticate,
|
||||||
|
},
|
||||||
|
async (request, reply) => {
|
||||||
|
const parsedInvoiceId = z.string().uuid().safeParse(request.params?.id);
|
||||||
|
if (!parsedInvoiceId.success) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "VALID_001",
|
||||||
|
message: "参数校验失败",
|
||||||
|
statusCode: 400,
|
||||||
|
details: { id: "invalid_uuid" },
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
const invoice = await fastify.prisma.invoicePool.findUnique({
|
||||||
|
where: { id: parsedInvoiceId.data },
|
||||||
|
select: {
|
||||||
|
id: true,
|
||||||
|
owner_employee_id: true,
|
||||||
|
uploaded_by_employee_id: true,
|
||||||
|
linked_reimbursement_id: true,
|
||||||
|
linked_reimbursement: {
|
||||||
|
select: {
|
||||||
|
owner_id: true,
|
||||||
|
submitter_id: true,
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
if (!invoice) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "SYS_404",
|
||||||
|
message: "Not Found",
|
||||||
|
statusCode: 404,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
let canAccess = ensureInvoiceReadableByUser(request, invoice);
|
||||||
|
if (!canAccess) {
|
||||||
|
canAccess = await hasPendingTaskAccess(fastify, request, invoice.linked_reimbursement_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!canAccess) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "PERM_001",
|
||||||
|
message: "无权限",
|
||||||
|
statusCode: 403,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
const expiresAt = Date.now() + fastify.config.signedUrlTtlSeconds * 1000;
|
||||||
|
const token = signPayload(
|
||||||
|
{
|
||||||
|
invoiceId: invoice.id,
|
||||||
|
actorId: request.employee.id,
|
||||||
|
exp: expiresAt,
|
||||||
|
},
|
||||||
|
fastify.config.jwtSecret,
|
||||||
|
);
|
||||||
|
|
||||||
|
const origin =
|
||||||
|
fastify.config.appOrigin ||
|
||||||
|
`${request.protocol}://${request.headers.host ?? "localhost:3000"}`;
|
||||||
|
const signedUrl = `${origin}/api/invoice-pool/${invoice.id}/file?token=${encodeURIComponent(token)}`;
|
||||||
|
|
||||||
|
await fastify.prisma.auditLog.create({
|
||||||
|
data: buildAuditLogData(request, {
|
||||||
|
actorId: request.employee.id,
|
||||||
|
action: "INVOICE_SIGNED_URL_ISSUED",
|
||||||
|
targetType: "invoice_pool",
|
||||||
|
targetId: invoice.id,
|
||||||
|
extra: {
|
||||||
|
invoiceId: invoice.id,
|
||||||
|
expiresAt,
|
||||||
|
},
|
||||||
|
}),
|
||||||
|
});
|
||||||
|
|
||||||
|
return sendData(reply, request, {
|
||||||
|
signedUrl,
|
||||||
|
expiresAt: new Date(expiresAt).toISOString(),
|
||||||
|
});
|
||||||
|
},
|
||||||
|
);
|
||||||
|
|
||||||
|
fastify.get("/invoice-pool/:id/file", async (request, reply) => {
|
||||||
|
const parsedInvoiceId = z.string().uuid().safeParse(request.params?.id);
|
||||||
|
const token = request.query?.token;
|
||||||
|
if (!parsedInvoiceId.success || typeof token !== "string") {
|
||||||
|
throw new AppError({
|
||||||
|
code: "PERM_001",
|
||||||
|
message: "无权限",
|
||||||
|
statusCode: 403,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
const verified = verifyToken(token, fastify.config.jwtSecret);
|
||||||
|
if (!verified.ok) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "PERM_001",
|
||||||
|
message: "无权限",
|
||||||
|
statusCode: 403,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
const payload = verified.payload;
|
||||||
|
const parsedActorId = z.string().uuid().safeParse(payload?.actorId);
|
||||||
|
if (
|
||||||
|
payload?.invoiceId !== parsedInvoiceId.data ||
|
||||||
|
typeof payload?.exp !== "number" ||
|
||||||
|
payload.exp <= Date.now() ||
|
||||||
|
!parsedActorId.success
|
||||||
|
) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "PERM_001",
|
||||||
|
message: "无权限",
|
||||||
|
statusCode: 403,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
const actorId = parsedActorId.data;
|
||||||
|
|
||||||
|
const invoice = await fastify.prisma.invoicePool.findUnique({
|
||||||
|
where: { id: parsedInvoiceId.data },
|
||||||
|
select: {
|
||||||
|
storage_path: true,
|
||||||
|
mime_type: true,
|
||||||
|
original_name: true,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
if (!invoice) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "SYS_404",
|
||||||
|
message: "Not Found",
|
||||||
|
statusCode: 404,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
let stream = null;
|
||||||
|
try {
|
||||||
|
const opened = await openReadStream({
|
||||||
|
config: fastify.config,
|
||||||
|
storagePath: invoice.storage_path,
|
||||||
|
});
|
||||||
|
stream = opened.stream;
|
||||||
|
} catch (error) {
|
||||||
|
if (error instanceof StorageNotFoundError) {
|
||||||
|
throw new AppError({
|
||||||
|
code: "SYS_404",
|
||||||
|
message: "Not Found",
|
||||||
|
statusCode: 404,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
throw new AppError({
|
||||||
|
code: "SYS_001",
|
||||||
|
message: "服务器内部错误",
|
||||||
|
statusCode: 500,
|
||||||
|
details: {},
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
try {
|
||||||
|
await fastify.prisma.auditLog.create({
|
||||||
|
data: buildAuditLogData(request, {
|
||||||
|
actorId,
|
||||||
|
action: "INVOICE_FILE_DOWNLOADED",
|
||||||
|
targetType: "invoice_pool",
|
||||||
|
targetId: parsedInvoiceId.data,
|
||||||
|
extra: {
|
||||||
|
invoiceId: parsedInvoiceId.data,
|
||||||
|
exp: payload.exp,
|
||||||
|
},
|
||||||
|
}),
|
||||||
|
});
|
||||||
|
} catch (error) {
|
||||||
|
fastify.log.error({ err: error, invoiceId: parsedInvoiceId.data }, "Audit log write failed");
|
||||||
|
}
|
||||||
|
|
||||||
|
reply.type(invoice.mime_type || "application/octet-stream");
|
||||||
|
reply.header(
|
||||||
|
"content-disposition",
|
||||||
|
`inline; filename=\"${sanitizeFilename(invoice.original_name)}\"`,
|
||||||
|
);
|
||||||
|
return reply.send(stream);
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = {
|
||||||
|
registerInvoicePoolReadRoutes,
|
||||||
|
};
|
||||||
@@ -0,0 +1,58 @@
|
|||||||
|
const { pushPaidReimbursementToErp } = require("./erp");
|
||||||
|
|
||||||
|
class IntegrationDispatchError extends Error {
|
||||||
|
constructor({ code, message, retryable, statusCode, response }) {
|
||||||
|
super(message || code || "integration_dispatch_failed");
|
||||||
|
this.name = "IntegrationDispatchError";
|
||||||
|
this.code = code || "integration_dispatch_failed";
|
||||||
|
this.retryable = typeof retryable === "boolean" ? retryable : true;
|
||||||
|
this.statusCode = Number.isFinite(statusCode) ? Number(statusCode) : null;
|
||||||
|
this.response = response ?? null;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function toDispatchError(result) {
|
||||||
|
return new IntegrationDispatchError({
|
||||||
|
code: result?.code,
|
||||||
|
message: result?.message,
|
||||||
|
retryable: result?.retryable,
|
||||||
|
statusCode: result?.httpStatus,
|
||||||
|
response: result?.response,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
async function dispatchOutboxEvent({ config, eventType, payload }) {
|
||||||
|
if (eventType === "erp.reimbursement.paid") {
|
||||||
|
const result = await pushPaidReimbursementToErp(config, payload);
|
||||||
|
if (!result.ok) {
|
||||||
|
throw toDispatchError(result);
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
channel: "erp",
|
||||||
|
code: result.code,
|
||||||
|
response: result.response ?? null,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
if (eventType === "notification.im") {
|
||||||
|
return {
|
||||||
|
channel: "im",
|
||||||
|
code: "mock_sent",
|
||||||
|
response: {
|
||||||
|
channelType: payload.channelType,
|
||||||
|
},
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
throw new IntegrationDispatchError({
|
||||||
|
code: "unsupported_outbox_event",
|
||||||
|
message: `unsupported_outbox_event:${eventType}`,
|
||||||
|
retryable: false,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = {
|
||||||
|
IntegrationDispatchError,
|
||||||
|
dispatchOutboxEvent,
|
||||||
|
};
|
||||||
@@ -0,0 +1,157 @@
|
|||||||
|
function buildErpPayload(input) {
|
||||||
|
return {
|
||||||
|
reimbursementId: input.reimbursement.id,
|
||||||
|
formNumber: input.reimbursement.form_number,
|
||||||
|
ownerEmployeeId: input.reimbursement.owner_id,
|
||||||
|
submitterEmployeeId: input.reimbursement.submitter_id,
|
||||||
|
totalAmount: input.reimbursement.total_amount?.toString?.() ?? null,
|
||||||
|
paymentVoucherNo: input.reimbursement.payment_voucher_no ?? null,
|
||||||
|
paymentDate: input.reimbursement.payment_date
|
||||||
|
? new Date(input.reimbursement.payment_date).toISOString().slice(0, 10)
|
||||||
|
: null,
|
||||||
|
paidAt: input.reimbursement.paid_at ? new Date(input.reimbursement.paid_at).toISOString() : null,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
function normalizeProvider(config) {
|
||||||
|
return String(config.erpSyncProvider ?? "mock").trim().toLowerCase() || "mock";
|
||||||
|
}
|
||||||
|
|
||||||
|
function buildAuthHeaders(config) {
|
||||||
|
const token = String(config.erpSyncAuthToken ?? "").trim();
|
||||||
|
if (!token) {
|
||||||
|
return {};
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
authorization: `Bearer ${token}`,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
async function postToErpHttp(config, payload) {
|
||||||
|
const endpoint = String(config.erpSyncEndpoint ?? "").trim();
|
||||||
|
if (!endpoint) {
|
||||||
|
return {
|
||||||
|
ok: false,
|
||||||
|
code: "erp_sync_endpoint_missing",
|
||||||
|
message: "ERP sync endpoint missing",
|
||||||
|
retryable: false,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
const timeoutMs = Math.max(100, Number(config.erpSyncTimeoutMs ?? 5000));
|
||||||
|
const controller = new AbortController();
|
||||||
|
const timer = setTimeout(() => {
|
||||||
|
controller.abort();
|
||||||
|
}, timeoutMs);
|
||||||
|
|
||||||
|
try {
|
||||||
|
const response = await fetch(endpoint, {
|
||||||
|
method: "POST",
|
||||||
|
headers: {
|
||||||
|
"content-type": "application/json",
|
||||||
|
...buildAuthHeaders(config),
|
||||||
|
},
|
||||||
|
body: JSON.stringify(payload),
|
||||||
|
signal: controller.signal,
|
||||||
|
});
|
||||||
|
|
||||||
|
let responseBody = null;
|
||||||
|
const contentType = response.headers.get("content-type") || "";
|
||||||
|
if (contentType.includes("application/json")) {
|
||||||
|
try {
|
||||||
|
responseBody = await response.json();
|
||||||
|
} catch {
|
||||||
|
responseBody = null;
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
try {
|
||||||
|
responseBody = await response.text();
|
||||||
|
} catch {
|
||||||
|
responseBody = null;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (response.ok) {
|
||||||
|
return {
|
||||||
|
ok: true,
|
||||||
|
code: "http_synced",
|
||||||
|
message: "ERP synced",
|
||||||
|
response: {
|
||||||
|
status: response.status,
|
||||||
|
body: responseBody,
|
||||||
|
},
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
const retryable = response.status >= 500;
|
||||||
|
return {
|
||||||
|
ok: false,
|
||||||
|
code: retryable ? "erp_sync_http_5xx" : "erp_sync_http_4xx",
|
||||||
|
message: `ERP sync HTTP ${response.status}`,
|
||||||
|
retryable,
|
||||||
|
httpStatus: response.status,
|
||||||
|
response: {
|
||||||
|
status: response.status,
|
||||||
|
body: responseBody,
|
||||||
|
},
|
||||||
|
};
|
||||||
|
} catch (error) {
|
||||||
|
if (error?.name === "AbortError") {
|
||||||
|
return {
|
||||||
|
ok: false,
|
||||||
|
code: "erp_sync_timeout",
|
||||||
|
message: `ERP sync timeout (${timeoutMs}ms)`,
|
||||||
|
retryable: true,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
ok: false,
|
||||||
|
code: "erp_sync_network_error",
|
||||||
|
message: String(error?.message ?? error ?? "ERP sync network error"),
|
||||||
|
retryable: true,
|
||||||
|
};
|
||||||
|
} finally {
|
||||||
|
clearTimeout(timer);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async function pushPaidReimbursementToErp(config, payload) {
|
||||||
|
if (!config.erpSyncEnabled) {
|
||||||
|
return {
|
||||||
|
ok: false,
|
||||||
|
code: "erp_sync_disabled",
|
||||||
|
message: "ERP sync disabled",
|
||||||
|
retryable: false,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
const provider = normalizeProvider(config);
|
||||||
|
if (provider === "mock") {
|
||||||
|
return {
|
||||||
|
ok: true,
|
||||||
|
code: "mock_synced",
|
||||||
|
message: "mock ERP synced",
|
||||||
|
response: {
|
||||||
|
externalId: `ERP-${payload.formNumber ?? payload.reimbursementId}`,
|
||||||
|
},
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
if (provider === "http") {
|
||||||
|
return postToErpHttp(config, payload);
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
ok: false,
|
||||||
|
code: "erp_sync_provider_invalid",
|
||||||
|
message: `Unsupported ERP sync provider: ${provider}`,
|
||||||
|
retryable: false,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = {
|
||||||
|
buildErpPayload,
|
||||||
|
pushPaidReimbursementToErp,
|
||||||
|
};
|
||||||
@@ -0,0 +1,161 @@
|
|||||||
|
const OUTBOX_STATUSES = {
|
||||||
|
pending: "pending",
|
||||||
|
processing: "processing",
|
||||||
|
succeeded: "succeeded",
|
||||||
|
failed: "failed",
|
||||||
|
dead_letter: "dead_letter",
|
||||||
|
};
|
||||||
|
|
||||||
|
function nextRetryAt(config, attempts) {
|
||||||
|
const waitSeconds = Math.max(30, Number(config.integrationOutboxRetrySeconds ?? 120));
|
||||||
|
const backoff = waitSeconds * Math.max(1, attempts);
|
||||||
|
return new Date(Date.now() + backoff * 1000);
|
||||||
|
}
|
||||||
|
|
||||||
|
function formatDispatchError(error) {
|
||||||
|
const code = error?.code ? String(error.code) : null;
|
||||||
|
const statusCode = Number.isFinite(error?.statusCode) ? Number(error.statusCode) : null;
|
||||||
|
const message = String(error?.message ?? error ?? "integration_outbox_error").trim();
|
||||||
|
|
||||||
|
const parts = [];
|
||||||
|
if (code) {
|
||||||
|
parts.push(code);
|
||||||
|
}
|
||||||
|
if (statusCode != null) {
|
||||||
|
parts.push(`HTTP ${statusCode}`);
|
||||||
|
}
|
||||||
|
if (message) {
|
||||||
|
parts.push(message);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!parts.length) {
|
||||||
|
return "integration_outbox_error";
|
||||||
|
}
|
||||||
|
|
||||||
|
return parts.join(" | ");
|
||||||
|
}
|
||||||
|
|
||||||
|
async function enqueueIntegrationEvent(prisma, input) {
|
||||||
|
const dedupeKey = input.dedupeKey ?? null;
|
||||||
|
|
||||||
|
const existed =
|
||||||
|
dedupeKey != null
|
||||||
|
? await prisma.integrationOutbox.findUnique({
|
||||||
|
where: {
|
||||||
|
event_type_dedupe_key: {
|
||||||
|
event_type: input.eventType,
|
||||||
|
dedupe_key: dedupeKey,
|
||||||
|
},
|
||||||
|
},
|
||||||
|
select: { id: true, status: true },
|
||||||
|
})
|
||||||
|
: null;
|
||||||
|
|
||||||
|
if (existed) {
|
||||||
|
return {
|
||||||
|
id: existed.id,
|
||||||
|
status: existed.status,
|
||||||
|
duplicated: true,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
const created = await prisma.integrationOutbox.create({
|
||||||
|
data: {
|
||||||
|
event_type: input.eventType,
|
||||||
|
status: OUTBOX_STATUSES.pending,
|
||||||
|
payload: input.payload,
|
||||||
|
dedupe_key: dedupeKey,
|
||||||
|
max_attempts: input.maxAttempts,
|
||||||
|
created_by: input.actorId ?? null,
|
||||||
|
updated_by: input.actorId ?? null,
|
||||||
|
},
|
||||||
|
select: {
|
||||||
|
id: true,
|
||||||
|
status: true,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
return {
|
||||||
|
id: created.id,
|
||||||
|
status: created.status,
|
||||||
|
duplicated: false,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
async function fetchPendingOutboxEvents(prisma, options) {
|
||||||
|
const batchSize = Math.max(1, Number(options.batchSize ?? 20));
|
||||||
|
const now = new Date();
|
||||||
|
|
||||||
|
return prisma.integrationOutbox.findMany({
|
||||||
|
where: {
|
||||||
|
status: {
|
||||||
|
in: [OUTBOX_STATUSES.pending, OUTBOX_STATUSES.failed],
|
||||||
|
},
|
||||||
|
OR: [{ next_retry_at: null }, { next_retry_at: { lte: now } }],
|
||||||
|
},
|
||||||
|
orderBy: [{ created_at: "asc" }],
|
||||||
|
take: batchSize,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
async function markOutboxProcessing(prisma, id, actorId) {
|
||||||
|
return prisma.integrationOutbox.update({
|
||||||
|
where: { id },
|
||||||
|
data: {
|
||||||
|
status: OUTBOX_STATUSES.processing,
|
||||||
|
updated_by: actorId ?? null,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
async function markOutboxSucceeded(prisma, id, actorId) {
|
||||||
|
return prisma.integrationOutbox.update({
|
||||||
|
where: { id },
|
||||||
|
data: {
|
||||||
|
status: OUTBOX_STATUSES.succeeded,
|
||||||
|
processed_at: new Date(),
|
||||||
|
last_error: null,
|
||||||
|
updated_by: actorId ?? null,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
async function markOutboxFailed(prisma, config, item, error, actorId, options = {}) {
|
||||||
|
const attempts = Number(item.attempts ?? 0) + 1;
|
||||||
|
const maxAttempts = Math.max(
|
||||||
|
1,
|
||||||
|
Number(item.max_attempts ?? config.integrationOutboxMaxAttempts ?? 5),
|
||||||
|
);
|
||||||
|
|
||||||
|
const retryable =
|
||||||
|
typeof options.retryable === "boolean"
|
||||||
|
? options.retryable
|
||||||
|
: typeof error?.retryable === "boolean"
|
||||||
|
? error.retryable
|
||||||
|
: true;
|
||||||
|
|
||||||
|
const deadByAttempts = retryable && attempts >= maxAttempts;
|
||||||
|
const deadByPolicy = !retryable;
|
||||||
|
const dead = deadByPolicy || deadByAttempts;
|
||||||
|
|
||||||
|
return prisma.integrationOutbox.update({
|
||||||
|
where: { id: item.id },
|
||||||
|
data: {
|
||||||
|
attempts,
|
||||||
|
status: dead ? OUTBOX_STATUSES.dead_letter : OUTBOX_STATUSES.failed,
|
||||||
|
dead_letter_at: dead ? new Date() : null,
|
||||||
|
next_retry_at: dead ? null : nextRetryAt(config, attempts),
|
||||||
|
last_error: formatDispatchError(error).slice(0, 500),
|
||||||
|
updated_by: actorId ?? null,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = {
|
||||||
|
OUTBOX_STATUSES,
|
||||||
|
enqueueIntegrationEvent,
|
||||||
|
fetchPendingOutboxEvents,
|
||||||
|
markOutboxProcessing,
|
||||||
|
markOutboxSucceeded,
|
||||||
|
markOutboxFailed,
|
||||||
|
};
|
||||||
在新工单中引用
屏蔽一个用户