WARCH1 实现企微审批最小历史留存

2026-05-20 00:22:27 +08:00
@@ -98,12 +98,14 @@ describe("check-wecom-approval-compensation-poc", () => {
    expect(options.size).toBe(50);
    expect(options.discoverTemplateIds).toBe(true);
    expect(options.discoverApplicantEmployeeNo).toBe("SMOKE002");
+    expect(options.persistToDb).toBe(false);
    expect(options.templates).toEqual({
      leave: "tpl-leave",
      missed_punch: "tpl-missed",
    });
    expect(() => parseArgs(["--template=outing:tpl"])).toThrow(/unsupported target/);
    expect(() => parseArgs(["--size=101"])).toThrow(/--size/);
+    expect(parseArgs(["--persist-to-db"]).persistToDb).toBe(true);
  });

  it("builds a default 72-hour time window", () => {
@@ -396,6 +398,195 @@ describe("check-wecom-approval-compensation-poc", () => {
    expect(fetchApprovalInfoListImpl).toHaveBeenCalledTimes(2);
    expect(fetchApprovalDetailImpl).toHaveBeenCalledTimes(2);
    expect(report.checks.callbackCompare.findings).toEqual([]);
+    expect(fetchApprovalDetailImpl.mock.calls.every((call) => call[0].includeRawPayload === false)).toBe(true);
+    expect(report.checks.archivePersistence.status).toBe("SKIPPED");
+  });
+
+  it("requires both --persist-to-db and WECOM_ARCHIVE_WRITE=1 before OA archive writes", async () => {
+    const report = await executeCompensationPoc(baseOptions({
+      live: true,
+      persistToDb: true,
+    }), {
+      config: baseConfig(),
+      env: {
+        DATABASE_URL: "postgres://example",
+      },
+      generatedAt: "2026-05-20T00:00:00.000Z",
+      fetchApprovalInfoListImpl: vi.fn(async () => ({
+        ok: true,
+        tokenSource: "WECOM_AGENT_SECRET",
+        response: { errcode: 0, spNoCount: 0 },
+        spNos: [],
+        nextCursor: "",
+      })),
+      fetchApprovalDetailImpl: vi.fn(),
+      readCallbackEvidenceImpl: vi.fn(async () => []),
+    });
+
+    expect(report.status).toBe("PARTIAL_COMPENSATION_NEEDS_CONFIG");
+    expect(report.checks.archivePersistence).toMatchObject({
+      status: "NEEDS_CONFIG",
+      reason: "missing_archive_write_switch",
+    });
+    expect(report.configGaps.map((item) => item.id)).toContain("archive_persistence");
+  });
+
+  it("persists pulled details to OA archive only when the double switch is present", async () => {
+    const sensitiveLeaveSpNo = `${SENSITIVE_TEMPLATE_ID}-sp`;
+    const sensitiveMissedSpNo = "tpl-missed-punch-sp";
+    const mockPrisma = buildArchiveMockPrisma();
+    mockPrisma.wecomApprovalCallbackEvent.findMany.mockResolvedValueOnce([
+      {
+        callback_kind: "approval_status_change",
+        approval_type: "leave",
+        wecom_status: "2",
+        sp_no: sensitiveLeaveSpNo,
+        template_id: SENSITIVE_TEMPLATE_ID,
+        received_at: new Date("2026-05-20T00:00:00.000Z"),
+      },
+      {
+        callback_kind: "approval_status_change",
+        approval_type: "missed_punch",
+        wecom_status: "2",
+        sp_no: sensitiveMissedSpNo,
+        template_id: "tpl-missed-punch",
+        received_at: new Date("2026-05-20T00:00:01.000Z"),
+      },
+    ]);
+    const fetchApprovalInfoListImpl = vi.fn(async ({ filters }) => ({
+      ok: true,
+      tokenSource: "WECOM_AGENT_SECRET",
+      response: {
+        errcode: 0,
+        spNoCount: 1,
+        spNoPrefixes: [maskApprovalIdentifier(`${filters[0].value}-sp`)],
+      },
+      spNos: [`${filters[0].value}-sp`],
+      nextCursor: "",
+    }));
+    const fetchApprovalDetailImpl = vi.fn(async ({ spNo, includeRawPayload }) => ({
+      ok: true,
+      tokenSource: "WECOM_AGENT_SECRET",
+      summary: detailSummary(spNo, {
+        spStatus: "2",
+        templateIdPrefix: spNo === sensitiveLeaveSpNo
+          ? maskApprovalIdentifier(SENSITIVE_TEMPLATE_ID)
+          : maskApprovalIdentifier("tpl-missed-punch"),
+      }),
+      rawPayload: includeRawPayload ? {
+        errcode: 0,
+        info: {
+          sp_no: spNo,
+          template_id: spNo === sensitiveLeaveSpNo ? SENSITIVE_TEMPLATE_ID : "tpl-missed-punch",
+          sp_name: spNo === sensitiveLeaveSpNo ? "OA-POC-请假" : "OA-POC-补卡",
+          sp_status: "2",
+          apply_time: "1779148800",
+          applyer: { userid: SENSITIVE_USER_ID },
+          apply_data: { contents: [] },
+          sp_record: [],
+        },
+      } : undefined,
+      response: { errcode: 0, spStatus: "2" },
+    }));
+    const readCallbackEvidenceImpl = vi.fn(async () => []);
+    const report = await executeCompensationPoc(baseOptions({
+      live: true,
+      persistToDb: true,
+    }), {
+      config: baseConfig(),
+      env: {
+        DATABASE_URL: "postgres://example",
+        WECOM_ARCHIVE_WRITE: "1",
+      },
+      generatedAt: "2026-05-20T00:00:00.000Z",
+      prisma: mockPrisma,
+      fetchApprovalInfoListImpl,
+      fetchApprovalDetailImpl,
+      readCallbackEvidenceImpl,
+    });
+
+    expect(report.status).toBe("PASS_COMPENSATION_POC");
+    expect(report.checks.callbackEvidence.source).toBe("db");
+    expect(readCallbackEvidenceImpl).not.toHaveBeenCalled();
+    expect(fetchApprovalDetailImpl.mock.calls.every((call) => call[0].includeRawPayload === true)).toBe(true);
+    expect(mockPrisma.wecomApprovalCompensationRun.create).toHaveBeenCalledTimes(1);
+    expect(mockPrisma.wecomApprovalArchive.upsert).toHaveBeenCalledTimes(2);
+    expect(mockPrisma.wecomApprovalCompensationRun.update).toHaveBeenCalledWith(expect.objectContaining({
+      where: { id: "run-archive-1" },
+      data: expect.objectContaining({
+        status: "completed",
+        item_count: 2,
+        detail_count: 2,
+      }),
+    }));
+    expect(report.checks.archivePersistence).toMatchObject({
+      status: "OK",
+      storedCount: 2,
+      failedCount: 0,
+    });
+    const serialized = JSON.stringify(report);
+    expect(serialized).not.toContain(SENSITIVE_SP_NO);
+    expect(serialized).not.toContain(SENSITIVE_TEMPLATE_ID);
+    expect(serialized).not.toContain(SENSITIVE_USER_ID);
+  });
+
+  it("records compare findings on the correct archive when masked prefixes collide", async () => {
+    const leaveSpNo = "20260519-leave-approval-full-id";
+    const missedSpNo = "20260519-missed-punch-sp";
+    const mockPrisma = buildArchiveMockPrisma();
+    const fetchApprovalInfoListImpl = vi.fn(async ({ filters }) => ({
+      ok: true,
+      tokenSource: "WECOM_AGENT_SECRET",
+      response: { errcode: 0, spNoCount: 1 },
+      spNos: [filters[0].value === SENSITIVE_TEMPLATE_ID ? leaveSpNo : missedSpNo],
+      nextCursor: "",
+    }));
+    const fetchApprovalDetailImpl = vi.fn(async ({ spNo, includeRawPayload }) => ({
+      ok: true,
+      tokenSource: "WECOM_AGENT_SECRET",
+      summary: detailSummary(spNo, { spStatus: "2" }),
+      rawPayload: includeRawPayload ? {
+        errcode: 0,
+        info: {
+          sp_no: spNo,
+          template_id: spNo === leaveSpNo ? SENSITIVE_TEMPLATE_ID : "tpl-missed-punch",
+          sp_name: spNo === leaveSpNo ? "OA-POC-请假" : "OA-POC-补卡",
+          sp_status: "2",
+          apply_time: "1779148800",
+          applyer: { userid: SENSITIVE_USER_ID },
+          apply_data: { contents: [] },
+          sp_record: [],
+        },
+      } : undefined,
+      response: { errcode: 0, spStatus: "2" },
+    }));
+
+    const report = await executeCompensationPoc(baseOptions({
+      live: true,
+      persistToDb: true,
+    }), {
+      config: baseConfig(),
+      env: {
+        DATABASE_URL: "postgres://example",
+        WECOM_ARCHIVE_WRITE: "1",
+      },
+      generatedAt: "2026-05-20T00:00:00.000Z",
+      prisma: mockPrisma,
+      fetchApprovalInfoListImpl,
+      fetchApprovalDetailImpl,
+      readCallbackEvidenceImpl: vi.fn(async () => []),
+    });
+
+    expect(report.status).toBe("PASS_WITH_FINDINGS");
+    expect(report.checks.callbackCompare.findings).toHaveLength(2);
+    expect(report.checks.callbackCompare.findings.every((item) => item.spNoPrefix === "20260519***")).toBe(true);
+    const archiveIds = mockPrisma.wecomApprovalReconcileFinding.upsert.mock.calls
+      .map((call) => call[0].create.archive_id)
+      .sort();
+    expect(archiveIds).toEqual(["archive-leave", "archive-missed"]);
+    const serialized = JSON.stringify(report);
+    expect(serialized).not.toContain(leaveSpNo);
+    expect(serialized).not.toContain(missedSpNo);
  });

  it("returns PASS_WITH_FINDINGS for missing callback and status mismatch", async () => {
@@ -561,3 +752,47 @@ describe("check-wecom-approval-compensation-poc", () => {
    expect(statusLabelFromSpStatus("2")).toBe("已通过");
  });
 });
+
+function buildArchiveMockPrisma() {
+  const prisma = {
+    wecomIdentityBinding: {
+      findUnique: vi.fn(async () => null),
+    },
+    wecomApprovalCompensationRun: {
+      create: vi.fn(async () => ({
+        id: "run-archive-1",
+        started_at: new Date("2026-05-20T00:00:00.000Z"),
+      })),
+      update: vi.fn(async (args) => ({ id: args.where.id, ...args.data })),
+    },
+    wecomApprovalArchive: {
+      findUnique: vi.fn(async () => null),
+      upsert: vi.fn(async (args) => ({
+        id: args.create.sp_no.endsWith("missed-punch-sp") ? "archive-missed" : "archive-leave",
+        ...args.create,
+      })),
+    },
+    wecomApprovalFieldSummary: {
+      deleteMany: vi.fn(async () => ({ count: 0 })),
+      createMany: vi.fn(async () => ({ count: 0 })),
+    },
+    wecomApprovalParticipant: {
+      deleteMany: vi.fn(async () => ({ count: 0 })),
+      createMany: vi.fn(async () => ({ count: 0 })),
+    },
+    wecomApprovalAction: {
+      upsert: vi.fn(async () => ({ id: "action-archive" })),
+    },
+    wecomApprovalCompensationItem: {
+      upsert: vi.fn(async () => ({ id: "item-archive" })),
+    },
+    wecomApprovalCallbackEvent: {
+      findMany: vi.fn(async () => []),
+    },
+    wecomApprovalReconcileFinding: {
+      upsert: vi.fn(async () => ({ id: "finding-archive" })),
+    },
+  };
+  prisma.$transaction = vi.fn(async (callback) => callback(prisma));
+  return prisma;
+}