文件
hyb-oa/server/tests/unit/routes/invoicePool.travel-bind.test.js
wangsli e5685f18b2
ci-e2e / e2e (push) Canceled after 0s
ci-minimal / check-minimal (push) Canceled after 0s
feat: 选票自动生成报销明细并支持集中分类(08-29-reimbursement-expense-policy-invoice-guard)
2026-09-09 23:19:02 +08:00

572 行
21 KiB
JavaScript

const Fastify = require("fastify");
const { AppError } = require("../../../src/utils/AppError");
const invoicePoolRoutes = require("../../../src/routes/invoicePool");
function buildQueryRawHandler(state) {
return vi.fn(async (strings) => {
const sql = Array.isArray(strings) ? strings.join("?") : String(strings);
if (sql.includes('FROM "invoice_pool"')) {
return state.invoice ? [{
id: state.invoice.id,
status: state.invoice.status,
linked_reimbursement_id: state.invoice.linked_reimbursement_id,
travel_order_id: state.invoice.travel_order_id,
}] : [];
}
if (sql.includes('FROM "travel_orders"')) {
return state.travelOrder ? [{ id: state.travelOrder.id, status: state.travelOrder.status }] : [];
}
if (sql.includes('FROM "reimbursement_forms"')) {
return state.reimbursement ? [state.reimbursement] : [];
}
return [];
});
}
function buildPrisma({
invoice,
travelOrder,
reimbursement = null,
reimbursementItems = [{ id: "item-1", amount: "500.00" }],
linkedItem = { id: "item-1" },
expenseType = { id: "expense-type-1" },
}) {
const state = {
invoice: {
owner_employee_id: "actor-1",
uploaded_by_employee_id: "actor-1",
file_sha256: "sha256-1",
invoice_code: null,
invoice_number: null,
invoice_date: new Date("2026-05-08T00:00:00.000Z"),
seller_name: "测试商户",
original_name: "invoice.pdf",
archived_reason: null,
is_duplicate_override: false,
...invoice,
},
travelOrder: travelOrder ? { ...travelOrder } : null,
reimbursement,
};
const prisma = {
invoicePool: {
findUnique: vi.fn().mockImplementation(async () => state.invoice),
findMany: vi.fn().mockResolvedValue([]),
update: vi.fn().mockImplementation(async ({ data, select }) => {
state.invoice = { ...state.invoice, ...data };
if (!select) {
return state.invoice;
}
return {
...state.invoice,
verification_records: [],
};
}),
},
reimbursementItem: {
findFirst: vi.fn().mockResolvedValue(linkedItem),
findMany: vi.fn().mockResolvedValue(reimbursementItems),
create: vi.fn().mockResolvedValue({ id: "item-auto-1" }),
aggregate: vi.fn().mockResolvedValue({ _sum: { amount: state.invoice.total_amount ?? "0.00" } }),
},
reimbursementForm: {
update: vi.fn().mockResolvedValue({ id: reimbursement?.id ?? "reim-1" }),
},
expenseType: {
findFirst: vi.fn().mockResolvedValue(expenseType),
findMany: vi.fn().mockResolvedValue([{ id: "train-type", code: "travel_train", enabled: true }]),
},
auditLog: {
create: vi.fn().mockResolvedValue({ id: "audit-1" }),
},
featureFlag: {
findUnique: vi.fn().mockResolvedValue({
id: "99999999-9999-4999-8999-999999999999",
flag_key: "reimbursement_invoice_guard_v1",
override_mode: "force_on",
rollout_type: "global",
department_ids: [],
note: "test",
version: 1,
created_at: new Date(),
updated_at: new Date(),
}),
},
$queryRaw: buildQueryRawHandler(state),
$transaction: vi.fn().mockImplementation(async (callback) => callback(prisma)),
};
return { prisma, state };
}
async function buildApp({ prisma, permissionCodes = ["travel.payment.manage"], employeeId = "actor-1", invoiceGuardEnabled = false }) {
const app = Fastify();
app.decorate("prisma", prisma);
app.decorate("config", {
storageDir: "/tmp",
appOrigin: "http://localhost:5173",
maxUploadSizeBytes: 10 * 1024 * 1024,
invoiceArchiveUnusedDays: 30,
reimbursementInvoiceGuardEnabled: invoiceGuardEnabled,
});
app.decorate("authenticate", async (request) => {
if (!request.headers.authorization) {
throw new AppError({ code: "AUTH_001", message: "未登录", statusCode: 401 });
}
request.employee = { id: employeeId, permissionCodes };
});
app.decorate("hasPermission", (employee, permissionCode) => (employee?.permissionCodes ?? []).includes("*") || (employee?.permissionCodes ?? []).includes(permissionCode));
app.decorate("requirePermission", (permissionCode) => async (request) => {
await app.authenticate(request);
if (!app.hasPermission(request.employee, permissionCode)) {
throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403 });
}
});
app.setErrorHandler((error, request, reply) => {
if (error instanceof AppError) {
return reply.status(error.statusCode).send({
requestId: request.id,
error: {
code: error.code,
message: error.message,
details: error.details ?? {},
},
});
}
return reply.status(500).send({
requestId: request.id,
error: { code: "SYS_001", message: "服务器内部错误", details: {} },
});
});
await app.register(invoicePoolRoutes, { prefix: "/api" });
return app;
}
describe("invoicePool travel-order bind routes", () => {
const explicitFormId = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
const explicitInvoiceId = "11111111-1111-4111-8111-111111111111";
function explicitInput(overrides = {}) {
return {
invoice: {
id: explicitInvoiceId, status: "available", linked_reimbursement_id: null,
linked_item_id: null, travel_order_id: null, total_amount: "168.00",
...overrides.invoice,
},
reimbursement: {
id: explicitFormId, owner_id: "actor-1", submitter_id: "actor-1", status: "draft",
...overrides.reimbursement,
},
reimbursementItems: [{ id: "existing-same-amount", amount: "168.00" }],
};
}
function explicitRequest(payload = {}) {
return {
method: "POST", url: `/api/invoice-pool/${explicitInvoiceId}/bind`,
headers: { authorization: "Bearer test" },
payload: { reimbursementId: explicitFormId, createItem: true, ...payload },
};
}
it.each([false, true])("explicitly creates an unclassified item without guessing or matching (guard=%s)", async (invoiceGuardEnabled) => {
const { prisma } = buildPrisma(explicitInput());
const app = await buildApp({ prisma, permissionCodes: ["invoice.upload"], invoiceGuardEnabled });
try {
const response = await app.inject(explicitRequest());
expect(response.statusCode, response.body).toBe(200);
expect(prisma.reimbursementItem.create).toHaveBeenCalledWith({
data: {
reimbursement_id: explicitFormId, expense_type_id: null,
expense_date: new Date("2026-05-08T00:00:00Z"), amount: "168.00", description: "",
created_by: "actor-1", updated_by: "actor-1",
}, select: { id: true },
});
expect(prisma.reimbursementItem.findMany).not.toHaveBeenCalled();
expect(prisma.expenseType.findFirst).not.toHaveBeenCalled();
expect(response.json().data.linkedItemId).toBe("item-auto-1");
} finally { await app.close(); }
});
it("uses persisted train metadata and keeps same-form retries write-free", async () => {
const { prisma, state } = buildPrisma(explicitInput({ invoice: {
ocr_result: { result_json: { documentCategory: "electronic_train_ticket" } },
} }));
const app = await buildApp({ prisma, permissionCodes: ["invoice.upload"], invoiceGuardEnabled: true });
try {
const first = await app.inject(explicitRequest());
expect(first.statusCode, first.body).toBe(200);
expect(prisma.reimbursementItem.create.mock.calls[0][0].data).toMatchObject({
expense_type_id: "train-type", description: "铁路交通费用",
});
prisma.reimbursementItem.findFirst.mockResolvedValue({ id: state.invoice.linked_item_id });
const retry = await app.inject(explicitRequest());
expect(retry.statusCode, retry.body).toBe(200);
expect(prisma.reimbursementItem.create).toHaveBeenCalledTimes(1);
expect(prisma.invoicePool.update).toHaveBeenCalledTimes(1);
expect(prisma.reimbursementForm.update).toHaveBeenCalledTimes(1);
state.reimbursement.status = "reviewing";
expect((await app.inject(explicitRequest())).statusCode).toBe(409);
} finally { await app.close(); }
});
it.each([
[{ invoice_date: null }, 409],
[{ total_amount: null }, 409],
[{ total_amount: "0.00" }, 409],
[{ status: "pending_ocr" }, 409],
[{ owner_employee_id: "other-owner" }, 409],
[{ status: "bound", linked_reimbursement_id: "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb" }, 409],
])("rejects invalid or unavailable evidence without creating an item: %j", async (invoice, expectedStatus) => {
const { prisma } = buildPrisma(explicitInput({ invoice }));
const app = await buildApp({ prisma, permissionCodes: ["invoice.upload"] });
try {
expect((await app.inject(explicitRequest())).statusCode).toBe(expectedStatus);
expect(prisma.reimbursementItem.create).not.toHaveBeenCalled();
expect(prisma.invoicePool.update).not.toHaveBeenCalled();
} finally { await app.close(); }
});
it("rejects conflicting create and existing-item intents before querying", async () => {
const { prisma } = buildPrisma(explicitInput());
const app = await buildApp({ prisma, permissionCodes: ["invoice.upload"] });
try {
expect((await app.inject(explicitRequest({ linkedItemId: explicitInvoiceId }))).statusCode).toBe(400);
expect(prisma.$transaction).not.toHaveBeenCalled();
} finally { await app.close(); }
});
it("rejects a nonparticipant retry even when the invoice already points to this form", async () => {
const { prisma } = buildPrisma(explicitInput({
invoice: { status: "bound", linked_reimbursement_id: explicitFormId, linked_item_id: explicitInvoiceId },
reimbursement: { owner_id: "other", submitter_id: "other" },
}));
const app = await buildApp({ prisma, permissionCodes: ["invoice.upload"] });
try {
expect((await app.inject(explicitRequest())).statusCode).toBe(403);
expect(prisma.reimbursementItem.create).not.toHaveBeenCalled();
expect(prisma.invoicePool.update).not.toHaveBeenCalled();
} finally { await app.close(); }
});
it("requires an explicit reimbursement item while the invoice guard is enabled", async () => {
const reimbursementId = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
const { prisma, state } = buildPrisma({
invoice: {
id: "11111111-1111-4111-8111-111111111111",
status: "available",
linked_reimbursement_id: null,
linked_item_id: null,
travel_order_id: null,
total_amount: "1683.00",
},
reimbursement: {
id: reimbursementId,
owner_id: "actor-1",
submitter_id: "actor-1",
status: "draft",
reimbursement_date: new Date("2026-05-08T00:00:00.000Z"),
},
});
const app = await buildApp({
prisma,
permissionCodes: ["invoice.upload"],
invoiceGuardEnabled: true,
});
const response = await app.inject({
method: "POST",
url: "/api/invoice-pool/11111111-1111-4111-8111-111111111111/bind",
headers: { authorization: "Bearer test" },
payload: { reimbursementId },
});
expect(response.statusCode).toBe(400);
expect(response.json().error.details).toEqual({
linkedItemId: "required_when_invoice_guard_enabled",
reasonCode: "reimbursement.invoice_item_required",
});
expect(state.invoice.status).toBe("available");
expect(prisma.reimbursementItem.create).not.toHaveBeenCalled();
await app.close();
});
it("rejects a view-all nonparticipant before binding a reimbursement invoice", async () => {
const reimbursementId = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
const { prisma, state } = buildPrisma({
invoice: {
id: "11111111-1111-4111-8111-111111111111",
status: "available",
linked_reimbursement_id: null,
linked_item_id: null,
travel_order_id: null,
total_amount: "1683.00",
},
reimbursement: {
id: reimbursementId,
owner_id: "actor-1",
submitter_id: "actor-1",
status: "draft",
reimbursement_date: new Date("2026-05-08T00:00:00.000Z"),
},
});
const app = await buildApp({
prisma,
employeeId: "finance-viewer",
permissionCodes: ["invoice.upload", "expense.view_all"],
});
const response = await app.inject({
method: "POST",
url: "/api/invoice-pool/11111111-1111-4111-8111-111111111111/bind",
headers: { authorization: "Bearer test" },
payload: { reimbursementId },
});
expect(response.statusCode).toBe(403);
expect(state.invoice.status).toBe("available");
expect(prisma.invoicePool.update).not.toHaveBeenCalled();
expect(prisma.reimbursementItem.create).not.toHaveBeenCalled();
expect(prisma.auditLog.create).not.toHaveBeenCalled();
await app.close();
});
it("refuses to unbind when the form changed after the binding snapshot", async () => {
const { prisma } = buildPrisma(explicitInput({ invoice: {
status: "bound", linked_reimbursement_id: explicitFormId, linked_item_id: "item-1",
} }));
prisma.invoicePool.findUnique.mockResolvedValueOnce({ linked_reimbursement_id: "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb" });
const app = await buildApp({ prisma, permissionCodes: ["invoice.upload"] });
try {
const response = await app.inject({ method: "POST", url: `/api/invoice-pool/${explicitInvoiceId}/unbind`, headers: { authorization: "Bearer test" }, payload: {} });
expect(response.statusCode).toBe(409);
expect(response.json().error.details.reasonCode).toBe("reimbursement.invoice_unbind_status_invalid");
expect(prisma.invoicePool.update).not.toHaveBeenCalled();
const firstLock = prisma.$queryRaw.mock.calls[0][0].join("?");
expect(firstLock).toContain('FROM "reimbursement_forms"');
} finally { await app.close(); }
});
it("rejects a view-all nonparticipant before unbinding a reimbursement invoice", async () => {
const reimbursementId = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
const { prisma, state } = buildPrisma({
invoice: {
id: "11111111-1111-4111-8111-111111111111",
status: "bound",
linked_reimbursement_id: reimbursementId,
linked_item_id: "item-1",
travel_order_id: null,
total_amount: "1683.00",
},
reimbursement: {
id: reimbursementId,
owner_id: "actor-1",
submitter_id: "actor-1",
status: "draft",
},
});
const app = await buildApp({
prisma,
employeeId: "finance-viewer",
permissionCodes: ["expense.view_all"],
});
const response = await app.inject({
method: "POST",
url: "/api/invoice-pool/11111111-1111-4111-8111-111111111111/unbind",
headers: { authorization: "Bearer test" },
payload: {},
});
expect(response.statusCode).toBe(403);
expect(state.invoice.status).toBe("bound");
expect(prisma.invoicePool.update).not.toHaveBeenCalled();
expect(prisma.auditLog.create).not.toHaveBeenCalled();
await app.close();
});
it("adds invoice to reimbursement and auto-creates an item when no detail matches", async () => {
const reimbursementId = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
const { prisma, state } = buildPrisma({
invoice: {
id: "11111111-1111-4111-8111-111111111111",
status: "available",
linked_reimbursement_id: null,
linked_item_id: null,
travel_order_id: null,
total_amount: "1683.00",
},
travelOrder: null,
reimbursement: {
id: reimbursementId,
owner_id: "actor-1",
submitter_id: "actor-1",
status: "draft",
reimbursement_date: new Date("2026-05-08T00:00:00.000Z"),
},
reimbursementItems: [],
});
const app = await buildApp({ prisma, permissionCodes: ["invoice.upload"] });
const response = await app.inject({
method: "POST",
url: "/api/invoice-pool/11111111-1111-4111-8111-111111111111/bind",
headers: { authorization: "Bearer test" },
payload: { reimbursementId },
});
expect(response.statusCode).toBe(200);
expect(response.json().data.linkedReimbursementId).toBe(reimbursementId);
expect(response.json().data.linkedItemId).toBe("item-auto-1");
expect(state.invoice.linked_item_id).toBe("item-auto-1");
expect(prisma.reimbursementItem.create).toHaveBeenCalledWith(
expect.objectContaining({
data: expect.objectContaining({
reimbursement_id: reimbursementId,
expense_type_id: "expense-type-1",
amount: "1683.00",
}),
}),
);
expect(prisma.reimbursementForm.update).toHaveBeenCalledWith(
expect.objectContaining({
where: { id: reimbursementId },
data: expect.objectContaining({
total_amount: "1683.00",
updated_by: "actor-1",
}),
}),
);
await app.close();
});
it("rejects reimbursement binding when linked item does not belong to the form", async () => {
const reimbursementId = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
const { prisma } = buildPrisma({
invoice: {
id: "11111111-1111-4111-8111-111111111111",
status: "available",
linked_reimbursement_id: null,
linked_item_id: null,
travel_order_id: null,
total_amount: "1683.00",
},
travelOrder: null,
reimbursement: {
id: reimbursementId,
owner_id: "actor-1",
submitter_id: "actor-1",
status: "draft",
reimbursement_date: new Date("2026-05-08T00:00:00.000Z"),
},
linkedItem: null,
});
const app = await buildApp({ prisma, permissionCodes: ["invoice.upload"] });
const response = await app.inject({
method: "POST",
url: "/api/invoice-pool/11111111-1111-4111-8111-111111111111/bind",
headers: { authorization: "Bearer test" },
payload: {
reimbursementId,
linkedItemId: "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
},
});
expect(response.statusCode).toBe(400);
expect(response.json().error.details).toEqual({ linkedItemId: "item_not_in_reimbursement", reasonCode: "reimbursement.linked_item_id_item_not_in_reimbursement" });
await app.close();
});
it("binds invoice to confirmed travel order", async () => {
const { prisma, state } = buildPrisma({
invoice: {
id: "11111111-1111-4111-8111-111111111111",
status: "available",
linked_reimbursement_id: null,
linked_item_id: null,
travel_order_id: null,
total_amount: "500.00",
verification_records: [],
},
travelOrder: { id: "22222222-2222-4222-8222-222222222222", status: "confirmed" },
});
const app = await buildApp({ prisma });
const response = await app.inject({
method: "POST",
url: "/api/invoice-pool/11111111-1111-4111-8111-111111111111/bind",
headers: { authorization: "Bearer test" },
payload: { travelOrderId: "22222222-2222-4222-8222-222222222222" },
});
expect(response.statusCode).toBe(200);
expect(response.json().data.linkedTravelOrderId).toBe("22222222-2222-4222-8222-222222222222");
expect(state.invoice.travel_order_id).toBe("22222222-2222-4222-8222-222222222222");
await app.close();
});
it("rejects binding when invoice is already linked elsewhere", async () => {
const { prisma } = buildPrisma({
invoice: {
id: "11111111-1111-4111-8111-111111111111",
status: "bound",
linked_reimbursement_id: "reim-1",
linked_item_id: null,
travel_order_id: null,
total_amount: "500.00",
verification_records: [],
},
travelOrder: { id: "22222222-2222-4222-8222-222222222222", status: "confirmed" },
});
const app = await buildApp({ prisma });
const response = await app.inject({
method: "POST",
url: "/api/invoice-pool/11111111-1111-4111-8111-111111111111/bind",
headers: { authorization: "Bearer test" },
payload: { travelOrderId: "22222222-2222-4222-8222-222222222222" },
});
expect(response.statusCode).toBe(409);
expect(response.json().error.code).toBe("VALID_005");
await app.close();
});
it("unbinds invoice from travel order with payment manage permission", async () => {
const { prisma, state } = buildPrisma({
invoice: {
id: "11111111-1111-4111-8111-111111111111",
status: "bound",
linked_reimbursement_id: null,
linked_item_id: null,
travel_order_id: "22222222-2222-4222-8222-222222222222",
total_amount: "500.00",
verification_records: [],
},
travelOrder: { id: "22222222-2222-4222-8222-222222222222", status: "paid" },
});
const app = await buildApp({ prisma });
const response = await app.inject({
method: "POST",
url: "/api/invoice-pool/11111111-1111-4111-8111-111111111111/unbind",
headers: { authorization: "Bearer test" },
payload: {},
});
expect(response.statusCode).toBe(200);
expect(response.json().data.linkedTravelOrderId).toBe(null);
expect(state.invoice.status).toBe("available");
await app.close();
});
});