wangsli
1f8d5b658a
汇总已落盘的借款本金与还款、兼容历史编号的周期化编号、付款责任与回单核验、报销进度和排序、PWA/采购事务、错误原因与日期校验及ERP退役。 统一共享预算池锁序和锁后判断，恢复差旅原预算选择，补原因码固定夹具及反向完整性检查。 纳入配套迁移、测试、受管QA、分层验收合同、规约及任务记录；原始证据留在ignored artifacts。 关联任务：09-17-company-loan-principal-repayment、09-17-erp-exclusive-retirement、09-18-reimbursement-periodic-numbering、09-08-reimbursement-payment-closeout、09-18-local-concurrency-product-fixes、09-19-budget-pool-concurrency、09-05-error-explainability-payment-readiness。 预算补审由Claude定向验证2文件928项通过，原4446/28及r6结果仍仅对应各自历史输入；本轮未重跑测试。 完整新候选门禁、R1真实入口接入与12项公网义务仍开放。生产编号未启用、差旅仍冻结；不推送、不部署，不宣称发布资格。
401 行
14 KiB
JavaScript
401 行
14 KiB
JavaScript
const Fastify = require("fastify");
|
|
|
|
const { AppError } = require("../../../src/utils/AppError");
|
|
const travelOrdersRoutes = require("../../../src/routes/travelOrders");
|
|
|
|
function buildQueryRawHandler({ currentOrder, reimbursement = null }) {
|
|
return vi.fn(async (strings) => {
|
|
const sql = Array.isArray(strings) ? strings.join("?") : String(strings);
|
|
if (sql.includes('FROM "travel_orders"')) {
|
|
return currentOrder ? [currentOrder] : [];
|
|
}
|
|
if (sql.includes('FROM "reimbursement_forms"')) {
|
|
return reimbursement ? [reimbursement] : [];
|
|
}
|
|
return [];
|
|
});
|
|
}
|
|
|
|
function buildTravelOrderRecord(overrides = {}) {
|
|
const now = new Date("2026-03-10T10:00:00.000Z");
|
|
return {
|
|
id: "11111111-1111-4111-8111-111111111111",
|
|
source: "ctrip",
|
|
external_order_no: "EXT-001",
|
|
employee_id: "employee-1",
|
|
department_id: "dept-1",
|
|
linked_reimbursement_id: null,
|
|
travel_request_id: "22222222-2222-4222-8222-222222222222",
|
|
amount: "1888.00",
|
|
currency: "CNY",
|
|
status: "confirmed",
|
|
payment_voucher_no: null,
|
|
payment_date: null,
|
|
payment_channel: null,
|
|
paid_at: null,
|
|
paid_by: null,
|
|
created_at: now,
|
|
updated_at: now,
|
|
...overrides,
|
|
};
|
|
}
|
|
|
|
function buildTravelOrderWithRequest(order) {
|
|
return {
|
|
...order,
|
|
travel_request: {
|
|
id: order.travel_request_id,
|
|
request_no: "CL-20260310-0001",
|
|
department_id: order.department_id,
|
|
applicant_employee_id: "employee-1",
|
|
submitter_id: null,
|
|
legal_entity: { code: "HY" },
|
|
cost_center: { code: "CC001" },
|
|
budget_pool: { code: "POOL-1" },
|
|
},
|
|
};
|
|
}
|
|
|
|
function buildPrisma({
|
|
employees = [],
|
|
travelRequests = [],
|
|
existingOrders = [],
|
|
currentOrder = null,
|
|
matchedTransaction = { id: "txn-1" },
|
|
featureFlagRecord = {
|
|
id: "flag-1",
|
|
flag_key: "erp_sync",
|
|
override_mode: "inherit",
|
|
rollout_type: "global",
|
|
department_ids: [],
|
|
note: "",
|
|
version: 1,
|
|
created_at: new Date("2026-03-10T00:00:00.000Z"),
|
|
updated_at: new Date("2026-03-10T00:00:00.000Z"),
|
|
},
|
|
existingOutbox = null,
|
|
} = {}) {
|
|
const state = {
|
|
currentOrder: currentOrder ? { ...currentOrder } : null,
|
|
};
|
|
|
|
const prisma = {
|
|
employee: {
|
|
findMany: vi.fn().mockResolvedValue(employees),
|
|
},
|
|
travelRequest: {
|
|
findMany: vi.fn().mockResolvedValue(travelRequests),
|
|
},
|
|
travelOrder: {
|
|
findMany: vi.fn().mockResolvedValue(existingOrders),
|
|
upsert: vi.fn().mockImplementation(async ({ create, update }) => ({
|
|
id: state.currentOrder?.id ?? "order-1",
|
|
source: create.source,
|
|
external_order_no: create.external_order_no,
|
|
employee_id: create.employee_id,
|
|
department_id: create.department_id,
|
|
linked_reimbursement_id: create.linked_reimbursement_id,
|
|
travel_request_id: update.travel_request_id === undefined ? state.currentOrder?.travel_request_id ?? create.travel_request_id : update.travel_request_id,
|
|
occurred_at: create.occurred_at,
|
|
amount: create.amount,
|
|
currency: create.currency,
|
|
status: update.status,
|
|
payment_voucher_no: state.currentOrder?.payment_voucher_no ?? null,
|
|
payment_date: state.currentOrder?.payment_date ?? null,
|
|
payment_channel: state.currentOrder?.payment_channel ?? null,
|
|
paid_at: state.currentOrder?.paid_at ?? null,
|
|
paid_by: state.currentOrder?.paid_by ?? null,
|
|
created_at: new Date("2026-03-10T00:00:00.000Z"),
|
|
updated_at: new Date("2026-03-10T00:00:00.000Z"),
|
|
})),
|
|
update: vi.fn().mockImplementation(async ({ data }) => {
|
|
state.currentOrder = {
|
|
...state.currentOrder,
|
|
...data,
|
|
updated_at: new Date("2026-03-10T11:00:00.000Z"),
|
|
};
|
|
return state.currentOrder;
|
|
}),
|
|
findUnique: vi.fn().mockImplementation(async () => {
|
|
if (!state.currentOrder) {
|
|
return null;
|
|
}
|
|
return buildTravelOrderWithRequest(state.currentOrder);
|
|
}),
|
|
},
|
|
cardTransaction: {
|
|
findFirst: vi.fn().mockResolvedValue(matchedTransaction),
|
|
},
|
|
featureFlag: {
|
|
findUnique: vi.fn().mockResolvedValue(featureFlagRecord),
|
|
},
|
|
integrationOutbox: {
|
|
findUnique: vi.fn().mockResolvedValue(existingOutbox),
|
|
create: vi.fn().mockResolvedValue({ id: "outbox-1", status: "pending" }),
|
|
},
|
|
auditLog: {
|
|
create: vi.fn().mockResolvedValue({ id: "audit-1" }),
|
|
},
|
|
$queryRaw: buildQueryRawHandler({ currentOrder: state.currentOrder }),
|
|
$transaction: vi.fn().mockImplementation(async (callback) => callback(prisma)),
|
|
};
|
|
|
|
return { prisma, state };
|
|
}
|
|
|
|
async function buildApp({ prisma, permissionCodes = ["integration.manage", "travel.payment.manage"] , config = {} }) {
|
|
const app = Fastify();
|
|
|
|
app.decorate("prisma", prisma);
|
|
app.decorate("config", {
|
|
travelSyncEnabled: true,
|
|
erpSyncEnabled: true,
|
|
integrationOutboxMaxAttempts: 5,
|
|
...config,
|
|
});
|
|
app.decorate("authenticate", async (request) => {
|
|
if (!request.headers.authorization) {
|
|
throw new AppError({ code: "AUTH_001", message: "未登录", statusCode: 401 });
|
|
}
|
|
request.employee = { id: "actor-1", department_id: "dept-1", permissionCodes };
|
|
});
|
|
app.decorate("hasPermission", (employee, permissionCode) => (employee?.permissionCodes ?? []).includes("*") || (employee?.permissionCodes ?? []).includes(permissionCode));
|
|
app.decorate("requirePermission", (permissionCode) => async (request) => {
|
|
await app.authenticate(request);
|
|
if (!app.hasPermission(request.employee, permissionCode)) {
|
|
throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403 });
|
|
}
|
|
});
|
|
|
|
app.setErrorHandler((error, request, reply) => {
|
|
if (error instanceof AppError) {
|
|
return reply.status(error.statusCode).send({
|
|
requestId: request.id,
|
|
error: {
|
|
code: error.code,
|
|
message: error.message,
|
|
details: error.details ?? {},
|
|
},
|
|
});
|
|
}
|
|
return reply.status(500).send({
|
|
requestId: request.id,
|
|
error: { code: "SYS_001", message: "服务器内部错误", details: {} },
|
|
});
|
|
});
|
|
|
|
await app.register(travelOrdersRoutes, { prefix: "/api" });
|
|
return app;
|
|
}
|
|
|
|
describe("travelOrders routes", () => {
|
|
it("imports rows with legal travelRequestId linkage", async () => {
|
|
const { prisma } = buildPrisma({
|
|
employees: [{ id: "employee-1", department_id: "dept-1" }],
|
|
travelRequests: [{ id: "11111111-1111-4111-8111-111111111111", applicant_employee_id: "employee-1" }],
|
|
});
|
|
const app = await buildApp({ prisma, permissionCodes: ["integration.manage"] });
|
|
|
|
const response = await app.inject({
|
|
method: "POST",
|
|
url: "/api/travel/orders/import",
|
|
headers: { authorization: "Bearer test" },
|
|
payload: {
|
|
orders: [
|
|
{
|
|
source: "ctrip",
|
|
externalOrderNo: "EXT-001",
|
|
employeeId: "employee-1",
|
|
travelRequestId: "11111111-1111-4111-8111-111111111111",
|
|
amount: "1888.00",
|
|
},
|
|
],
|
|
},
|
|
});
|
|
|
|
expect(response.statusCode).toBe(200);
|
|
expect(response.json().data).toEqual(
|
|
expect.objectContaining({
|
|
imported: 1,
|
|
linkedTravelRequestCount: 1,
|
|
}),
|
|
);
|
|
|
|
await app.close();
|
|
});
|
|
|
|
it("preserves existing travel linkage when new row omits travelRequestId", async () => {
|
|
const existingOrder = buildTravelOrderRecord({
|
|
id: "order-2",
|
|
source: "ctrip",
|
|
external_order_no: "EXT-004",
|
|
status: "paid",
|
|
travel_request_id: "existing-travel-request",
|
|
});
|
|
const { prisma } = buildPrisma({
|
|
employees: [{ id: "employee-1", department_id: "dept-1" }],
|
|
existingOrders: [existingOrder],
|
|
currentOrder: existingOrder,
|
|
});
|
|
const app = await buildApp({ prisma, permissionCodes: ["integration.manage"] });
|
|
|
|
const response = await app.inject({
|
|
method: "POST",
|
|
url: "/api/travel/orders/import",
|
|
headers: { authorization: "Bearer test" },
|
|
payload: {
|
|
orders: [{ source: "ctrip", externalOrderNo: "EXT-004", employeeId: "employee-1", amount: "500.00" }],
|
|
},
|
|
});
|
|
|
|
expect(response.statusCode).toBe(200);
|
|
expect(response.json().data.items[0].travelRequestId).toBe("existing-travel-request");
|
|
expect(response.json().data.items[0].status).toBe("paid");
|
|
|
|
await app.close();
|
|
});
|
|
|
|
it("marks confirmed order as paid without ERP side effects", async () => {
|
|
const { prisma, state } = buildPrisma({
|
|
currentOrder: buildTravelOrderRecord(),
|
|
});
|
|
const app = await buildApp({ prisma });
|
|
|
|
const response = await app.inject({
|
|
method: "POST",
|
|
url: "/api/travel-orders/11111111-1111-4111-8111-111111111111/mark-paid",
|
|
headers: { authorization: "Bearer test" },
|
|
payload: {
|
|
paymentVoucherNo: "BANK-001",
|
|
paymentDate: "2026-03-10",
|
|
paymentChannel: "bank_transfer",
|
|
},
|
|
});
|
|
|
|
expect(response.statusCode).toBe(200);
|
|
expect(response.json().data).toEqual(
|
|
expect.objectContaining({
|
|
status: "paid",
|
|
paymentVoucherNo: "BANK-001",
|
|
paymentDate: "2026-03-10",
|
|
paymentChannel: "bank_transfer",
|
|
}),
|
|
);
|
|
expect(state.currentOrder.status).toBe("paid");
|
|
expect(prisma.integrationOutbox.create).not.toHaveBeenCalled();
|
|
|
|
await app.close();
|
|
});
|
|
|
|
it("returns idempotent success for already paid order with same payload", async () => {
|
|
const currentOrder = buildTravelOrderRecord({
|
|
status: "paid",
|
|
payment_voucher_no: "BANK-001",
|
|
payment_date: new Date("2026-03-10T00:00:00.000Z"),
|
|
payment_channel: "bank_transfer",
|
|
paid_at: new Date("2026-03-10T12:00:00.000Z"),
|
|
paid_by: "actor-1",
|
|
});
|
|
const { prisma } = buildPrisma({
|
|
currentOrder,
|
|
existingOutbox: { id: "outbox-existing", status: "pending", payload: {} },
|
|
});
|
|
const app = await buildApp({ prisma });
|
|
|
|
const response = await app.inject({
|
|
method: "POST",
|
|
url: "/api/travel-orders/11111111-1111-4111-8111-111111111111/mark-paid",
|
|
headers: { authorization: "Bearer test" },
|
|
payload: {
|
|
paymentVoucherNo: "BANK-001",
|
|
paymentDate: "2026-03-10",
|
|
paymentChannel: "bank_transfer",
|
|
},
|
|
});
|
|
|
|
expect(response.statusCode).toBe(200);
|
|
expect(prisma.travelOrder.update).not.toHaveBeenCalled();
|
|
|
|
await app.close();
|
|
});
|
|
|
|
it("rejects conflicting paid payload", async () => {
|
|
const { prisma } = buildPrisma({
|
|
currentOrder: buildTravelOrderRecord({
|
|
status: "paid",
|
|
payment_voucher_no: "BANK-001",
|
|
payment_date: new Date("2026-03-10T00:00:00.000Z"),
|
|
payment_channel: "bank_transfer",
|
|
}),
|
|
});
|
|
const app = await buildApp({ prisma });
|
|
|
|
const response = await app.inject({
|
|
method: "POST",
|
|
url: "/api/travel-orders/11111111-1111-4111-8111-111111111111/mark-paid",
|
|
headers: { authorization: "Bearer test" },
|
|
payload: {
|
|
paymentVoucherNo: "BANK-002",
|
|
paymentDate: "2026-03-10",
|
|
paymentChannel: "bank_transfer",
|
|
},
|
|
});
|
|
|
|
expect(response.statusCode).toBe(409);
|
|
expect(response.json().error.details).toEqual({ payment: "already_paid_conflict", reasonCode: "travel_order.already_paid_conflict" });
|
|
|
|
await app.close();
|
|
});
|
|
|
|
it("returns 409 when no settled transaction matches the order", async () => {
|
|
const { prisma } = buildPrisma({
|
|
currentOrder: buildTravelOrderRecord(),
|
|
matchedTransaction: null,
|
|
});
|
|
const app = await buildApp({ prisma });
|
|
|
|
const response = await app.inject({
|
|
method: "POST",
|
|
url: "/api/travel-orders/11111111-1111-4111-8111-111111111111/mark-paid",
|
|
headers: { authorization: "Bearer test" },
|
|
payload: {
|
|
paymentVoucherNo: null,
|
|
paymentDate: null,
|
|
paymentChannel: "manual",
|
|
},
|
|
});
|
|
|
|
expect(response.statusCode).toBe(409);
|
|
expect(response.json().error.details).toEqual({ payment: "missing_settled_transaction", reasonCode: "travel_order.settled_transaction_required" });
|
|
|
|
await app.close();
|
|
});
|
|
});
|
|
|
|
|
|
describe("travel payment calendar input", () => {
|
|
it.each(["2026-02-29", "2026-04-31", "2026-13-01", ""])("rejects %s before payment side effects", async (date) => {
|
|
const { prisma, state } = buildPrisma({ currentOrder: buildTravelOrderRecord() });
|
|
const app = await buildApp({ prisma });
|
|
try {
|
|
const response = await app.inject({ method: "POST", url: `/api/travel-orders/${state.currentOrder.id}/mark-paid`, headers: { authorization: "Bearer test" }, payload: { paymentDate: date } });
|
|
expect(response.statusCode).toBe(400);
|
|
expect(prisma.$transaction).not.toHaveBeenCalled();
|
|
expect(prisma.travelOrder.update).not.toHaveBeenCalled();
|
|
expect(prisma.integrationOutbox.create).not.toHaveBeenCalled();
|
|
expect(prisma.auditLog.create).not.toHaveBeenCalled();
|
|
expect(state.currentOrder.status).toBe("confirmed");
|
|
} finally { await app.close(); }
|
|
});
|
|
it.each(["2024-02-29", "2026-04-30", null, undefined])("preserves payment date %s", async (date) => {
|
|
const { prisma, state } = buildPrisma({ currentOrder: buildTravelOrderRecord() });
|
|
const app = await buildApp({ prisma });
|
|
try {
|
|
const response = await app.inject({ method: "POST", url: `/api/travel-orders/${state.currentOrder.id}/mark-paid`, headers: { authorization: "Bearer test" }, payload: { paymentVoucherNo: "SYNTHETIC", paymentChannel: "bank_transfer", ...(date === undefined ? {} : { paymentDate: date }) } });
|
|
expect(response.statusCode).toBe(200);
|
|
expect(state.currentOrder.payment_date).toEqual(date ? new Date(`${date}T00:00:00.000Z`) : null);
|
|
expect(state.currentOrder.status).toBe("paid");
|
|
} finally { await app.close(); }
|
|
});
|
|
});
|