fix: 优化报销制单下载与付款进度（09-08-reimbursement-payment-closeout）

scripts/qa/test-payment-experience.cjs

@@ -0,0 +1,97 @@
+const assert = require("node:assert/strict");
+const { randomBytes } = require("node:crypto");
+const { readFileSync } = require("node:fs");
+const { createRequire } = require("node:module");
+const path = require("node:path");
+
+module.exports = async function verifyPaymentExperience({
+  app, prisma, employee, approvers, form, post, origin, tokens, serverRequire, passed, browser, preview, loginPassword,
+}) {
+  app.config.fieldEncryptionKey = randomBytes(32).toString("base64");
+  app.config.paymentBatchEnabled = true;
+  const { encryptStringOrThrow } = serverRequire("./src/services/crypto");
+  const company = await prisma.legalEntity.create({ data: { code: "SYN-PAY", name: "合成测试主体" } });
+  const bank = await prisma.bankInstitution.upsert({
+    where: { code: "CCB" }, create: { code: "CCB", name: "中国建设银行" }, update: {},
+  });
+  await prisma.employee.update({ where: { id: employee.id }, data: {
+    legal_entity_id: company.id, bank_institution_id: bank.id, bank_name: bank.name,
+    bank_account_encrypted: encryptStringOrThrow(app.config, `6222${"0".repeat(8)}5678`),
+  } });
+  await prisma.paymentAccount.create({ data: {
+    legal_entity_id: company.id, bank_institution_id: bank.id, account_name: "合成测试主体",
+    account_number_encrypted: encryptStringOrThrow(app.config, `6217${"0".repeat(8)}1234`),
+  } });
+  await prisma.featureFlag.create({ data: { flag_key: "payment_batch_v1", override_mode: "force_on", rollout_type: "global", department_ids: [] } });
+  const created = await post("/payment-batches", {
+    entityType: "reimbursement", entityIds: [form.id], defaultPaymentChannel: "bank",
+  }, approvers.finance.id);
+  assert.equal(created.status, 201, `create payment batch: ${created.body.error?.details?.reasonCode ?? created.status}`);
+  const batch = created.body.data.item;
+  const download = (actor) => fetch(`${origin}/api/payment-batches/${batch.id}/payment-order`, {
+    method: "POST", headers: { "content-type": "application/json", authorization: `Bearer ${tokens.get(actor.id)}` },
+    body: "{}", signal: AbortSignal.timeout(15000),
+  });
+  assert.equal((await download(approvers.finance)).status, 409);
+  assert.equal((await post(`/payment-batches/${batch.id}/review`, {}, approvers.finance.id)).status, 403);
+  assert.equal((await post(`/payment-batches/${batch.id}/review`, {}, approvers.ceo.id)).status, 200);
+  assert.equal((await download(approvers.ceo)).status, 403);
+  assert.equal((await download(employee)).status, 403);
+  for (const count of [1, 2]) {
+    const response = await download(approvers.finance);
+    assert.equal(response.status, 200);
+    assert.ok(decodeURIComponent(response.headers.get("content-disposition")).includes(`报销制单_${batch.batchNo}.xls`));
+    assert.equal(response.headers.get("cache-control"), "no-store");
+    const workbook = Buffer.from(await response.arrayBuffer());
+    assert.equal(workbook.subarray(0, 8).toString("hex"), "d0cf11e0a1b11ae1");
+    const current = await prisma.paymentBatch.findUnique({ where: { id: batch.id } });
+    assert.equal(current.payment_order_export_count, count);
+    assert.equal(current.status, "reviewed");
+    const source = await prisma.reimbursementForm.findUnique({ where: { id: form.id } });
+    assert.equal(source.status, "approved");
+    assert.equal(source.paid_at, null);
+  }
+  const audits = await prisma.auditLog.findMany({ where: { target_id: batch.id, action: { in: ["PAYMENT_ORDER_EXPORTED", "PAYMENT_ORDER_REEXPORTED"] } } });
+  assert.equal(audits.length, 2);
+  for (const audit of audits) {
+    assert.equal(audit.extra.purpose, "reimbursement_bank_transfer");
+    assert.equal(audit.extra.purposeSource, "system");
+    assert.equal(Object.hasOwn(audit.extra, "reason"), false);
+  }
+  if (browser && preview) {
+    const clientRequire = createRequire(path.resolve(__dirname, "../../client/package.json"));
+    const { expect } = clientRequire("@playwright/test");
+    const uiOrigin = `http://127.0.0.1:${preview.httpServer.address().port}`;
+    for (const mobile of [false, true]) {
+      const context = await browser.newContext({ serviceWorkers: "block", viewport: mobile ? { width: 390, height: 844 } : { width: 1440, height: 960 } });
+      try {
+        const fingerprint = `synthetic-payment-${mobile}`;
+        await context.addCookies([{ name: "hyb_oa_device_fingerprint", value: fingerprint, url: uiOrigin }]);
+        const login = await context.request.post(`${uiOrigin}/api/auth/login`, { headers: { "x-device-fingerprint": fingerprint }, data: { identifier: approvers.finance.email, password: loginPassword } });
+        assert.equal(login.status(), 200);
+        const page = await context.newPage();
+        await page.goto(`${uiOrigin}/payment-batches?id=${batch.id}`);
+        const actions = page.getByTestId(mobile ? "payment-batch-mobile-actions" : "payment-batch-action-panel");
+        await expect(actions.getByRole("button", { name: "上传银行回单" })).toBeVisible();
+        await actions.getByText("更多", { exact: true }).click();
+        if (mobile) await page.getByRole("menuitem", { name: "重新下载制单" }).click();
+        else await actions.getByTestId("payment-batch-action-redownloadOrder").click();
+        const dialog = page.getByRole("dialog");
+        await expect(dialog).toContainText("请勿重复提交");
+        await expect(dialog.getByRole("textbox")).toHaveCount(0);
+        const received = page.waitForEvent("download");
+        await dialog.getByRole("button", { name: "确认下载" }).click();
+        const downloaded = await received;
+        assert.equal(downloaded.suggestedFilename(), `报销制单_${batch.batchNo}.xls`);
+        assert.equal(readFileSync(await downloaded.path()).subarray(0, 8).toString("hex"), "d0cf11e0a1b11ae1");
+        await expect(dialog).toBeHidden();
+        await expect(page.getByTestId("payment-batch-processing-panel")).toBeVisible();
+        assert.equal(await page.evaluate(() => document.documentElement.scrollWidth <= window.innerWidth), true);
+      } finally {
+        await context.close();
+      }
+    }
+    passed.push("payment: real authenticated desktop/mobile browser downloads Chinese BIFF8 with no reason input; repeat warning and receipt action retained");
+  }
+  passed.push("payment: real finance create, CEO review, unauthorized export refused, Chinese BIFF8 first/re-download without reason, audited and still unpaid");
+};