R46 A1-A7：落地绩效考核模块首版
这个提交包含在：
@@ -0,0 +1,88 @@
|
||||
-- CreateEnum
|
||||
CREATE TYPE "PerformanceReviewCycleType" AS ENUM ('monthly', 'quarterly', 'semi_annual', 'annual');
|
||||
|
||||
-- CreateEnum
|
||||
CREATE TYPE "PerformanceReviewCycleStatus" AS ENUM ('draft', 'active', 'completed');
|
||||
|
||||
-- CreateEnum
|
||||
CREATE TYPE "PerformanceReviewDimensionType" AS ENUM ('work_quality', 'work_efficiency', 'teamwork', 'initiative', 'professional_skill');
|
||||
|
||||
-- CreateTable
|
||||
CREATE TABLE "performance_review_cycles" (
|
||||
"id" UUID NOT NULL,
|
||||
"name" TEXT NOT NULL,
|
||||
"cycle_type" "PerformanceReviewCycleType" NOT NULL,
|
||||
"start_date" DATE NOT NULL,
|
||||
"end_date" DATE NOT NULL,
|
||||
"status" "PerformanceReviewCycleStatus" NOT NULL DEFAULT 'draft',
|
||||
"activated_at" TIMESTAMP(3),
|
||||
"completed_at" TIMESTAMP(3),
|
||||
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
"created_by" UUID,
|
||||
"updated_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
"updated_by" UUID,
|
||||
|
||||
CONSTRAINT "performance_review_cycles_pkey" PRIMARY KEY ("id")
|
||||
);
|
||||
|
||||
-- CreateTable
|
||||
CREATE TABLE "performance_reviews" (
|
||||
"id" UUID NOT NULL,
|
||||
"cycle_id" UUID NOT NULL,
|
||||
"employee_id" UUID NOT NULL,
|
||||
"reviewer_employee_id" UUID NOT NULL,
|
||||
"overall_score" DECIMAL(3,1) NOT NULL,
|
||||
"comment" TEXT,
|
||||
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
"created_by" UUID,
|
||||
"updated_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
"updated_by" UUID,
|
||||
|
||||
CONSTRAINT "performance_reviews_pkey" PRIMARY KEY ("id")
|
||||
);
|
||||
|
||||
-- CreateTable
|
||||
CREATE TABLE "performance_review_dimensions" (
|
||||
"id" UUID NOT NULL,
|
||||
"review_id" UUID NOT NULL,
|
||||
"dimension_type" "PerformanceReviewDimensionType" NOT NULL,
|
||||
"score" DECIMAL(3,1) NOT NULL,
|
||||
|
||||
CONSTRAINT "performance_review_dimensions_pkey" PRIMARY KEY ("id")
|
||||
);
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_performance_review_cycles_status_start" ON "performance_review_cycles"("status", "start_date");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_performance_review_cycles_status_completed" ON "performance_review_cycles"("status", "completed_at");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE UNIQUE INDEX "performance_review_cycles_single_active_ux" ON "performance_review_cycles"("status") WHERE "status" = 'active';
|
||||
|
||||
-- CreateIndex
|
||||
CREATE UNIQUE INDEX "performance_reviews_cycle_employee_ux" ON "performance_reviews"("cycle_id", "employee_id");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_performance_reviews_cycle_reviewer" ON "performance_reviews"("cycle_id", "reviewer_employee_id");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_performance_reviews_employee_created" ON "performance_reviews"("employee_id", "created_at");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE UNIQUE INDEX "performance_review_dimensions_review_dimension_ux" ON "performance_review_dimensions"("review_id", "dimension_type");
|
||||
|
||||
-- CreateIndex
|
||||
CREATE INDEX "idx_performance_review_dimensions_dimension_score" ON "performance_review_dimensions"("dimension_type", "score");
|
||||
|
||||
-- AddForeignKey
|
||||
ALTER TABLE "performance_reviews" ADD CONSTRAINT "performance_reviews_cycle_id_fkey" FOREIGN KEY ("cycle_id") REFERENCES "performance_review_cycles"("id") ON DELETE CASCADE ON UPDATE CASCADE;
|
||||
|
||||
-- AddForeignKey
|
||||
ALTER TABLE "performance_reviews" ADD CONSTRAINT "performance_reviews_employee_id_fkey" FOREIGN KEY ("employee_id") REFERENCES "employees"("id") ON DELETE CASCADE ON UPDATE CASCADE;
|
||||
|
||||
-- AddForeignKey
|
||||
ALTER TABLE "performance_reviews" ADD CONSTRAINT "performance_reviews_reviewer_employee_id_fkey" FOREIGN KEY ("reviewer_employee_id") REFERENCES "employees"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
|
||||
|
||||
-- AddForeignKey
|
||||
ALTER TABLE "performance_review_dimensions" ADD CONSTRAINT "performance_review_dimensions_review_id_fkey" FOREIGN KEY ("review_id") REFERENCES "performance_reviews"("id") ON DELETE CASCADE ON UPDATE CASCADE;
|
||||
+85
-3
@@ -363,6 +363,27 @@ enum EmployeeTrainingStatus {
|
||||
cancelled
|
||||
}
|
||||
|
||||
enum PerformanceReviewCycleType {
|
||||
monthly
|
||||
quarterly
|
||||
semi_annual
|
||||
annual
|
||||
}
|
||||
|
||||
enum PerformanceReviewCycleStatus {
|
||||
draft
|
||||
active
|
||||
completed
|
||||
}
|
||||
|
||||
enum PerformanceReviewDimensionType {
|
||||
work_quality
|
||||
work_efficiency
|
||||
teamwork
|
||||
initiative
|
||||
professional_skill
|
||||
}
|
||||
|
||||
enum WeeklyReportStatus {
|
||||
draft
|
||||
submitted
|
||||
@@ -609,6 +630,8 @@ model Employee {
|
||||
contracts EmployeeContract[]
|
||||
trainings EmployeeTraining[]
|
||||
certificates EmployeeCertificate[]
|
||||
performance_reviews_received PerformanceReview[] @relation("PerformanceReviewEmployee")
|
||||
performance_reviews_authored PerformanceReview[] @relation("PerformanceReviewReviewer")
|
||||
|
||||
@@index([department_id])
|
||||
@@index([legal_entity_id], map: "idx_employees_legal_entity")
|
||||
@@ -2045,11 +2068,11 @@ model EmployeeTraining {
|
||||
}
|
||||
|
||||
model EmployeeCertificate {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
employee_id String @db.Uuid
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
employee_id String @db.Uuid
|
||||
name String
|
||||
issuer String
|
||||
obtained_date DateTime @db.Date
|
||||
obtained_date DateTime @db.Date
|
||||
expiry_date DateTime? @db.Date
|
||||
certificate_no String?
|
||||
attachment_path String?
|
||||
@@ -2066,6 +2089,65 @@ model EmployeeCertificate {
|
||||
@@map("employee_certificates")
|
||||
}
|
||||
|
||||
model PerformanceReviewCycle {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
name String
|
||||
cycle_type PerformanceReviewCycleType
|
||||
start_date DateTime @db.Date
|
||||
end_date DateTime @db.Date
|
||||
status PerformanceReviewCycleStatus @default(draft)
|
||||
activated_at DateTime?
|
||||
completed_at DateTime?
|
||||
|
||||
created_at DateTime @default(now())
|
||||
created_by String? @db.Uuid
|
||||
updated_at DateTime @default(now()) @updatedAt
|
||||
updated_by String? @db.Uuid
|
||||
|
||||
reviews PerformanceReview[]
|
||||
|
||||
@@index([status, start_date], map: "idx_performance_review_cycles_status_start")
|
||||
@@index([status, completed_at], map: "idx_performance_review_cycles_status_completed")
|
||||
@@map("performance_review_cycles")
|
||||
}
|
||||
|
||||
model PerformanceReview {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
cycle_id String @db.Uuid
|
||||
employee_id String @db.Uuid
|
||||
reviewer_employee_id String @db.Uuid
|
||||
overall_score Decimal @db.Decimal(3, 1)
|
||||
comment String?
|
||||
|
||||
created_at DateTime @default(now())
|
||||
created_by String? @db.Uuid
|
||||
updated_at DateTime @default(now()) @updatedAt
|
||||
updated_by String? @db.Uuid
|
||||
|
||||
cycle PerformanceReviewCycle @relation(fields: [cycle_id], references: [id], onDelete: Cascade)
|
||||
employee Employee @relation("PerformanceReviewEmployee", fields: [employee_id], references: [id], onDelete: Cascade)
|
||||
reviewer_employee Employee @relation("PerformanceReviewReviewer", fields: [reviewer_employee_id], references: [id], onDelete: Restrict)
|
||||
dimensions PerformanceReviewDimension[]
|
||||
|
||||
@@unique([cycle_id, employee_id], map: "performance_reviews_cycle_employee_ux")
|
||||
@@index([cycle_id, reviewer_employee_id], map: "idx_performance_reviews_cycle_reviewer")
|
||||
@@index([employee_id, created_at], map: "idx_performance_reviews_employee_created")
|
||||
@@map("performance_reviews")
|
||||
}
|
||||
|
||||
model PerformanceReviewDimension {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
review_id String @db.Uuid
|
||||
dimension_type PerformanceReviewDimensionType
|
||||
score Decimal @db.Decimal(3, 1)
|
||||
|
||||
review PerformanceReview @relation(fields: [review_id], references: [id], onDelete: Cascade)
|
||||
|
||||
@@unique([review_id, dimension_type], map: "performance_review_dimensions_review_dimension_ux")
|
||||
@@index([dimension_type, score], map: "idx_performance_review_dimensions_dimension_score")
|
||||
@@map("performance_review_dimensions")
|
||||
}
|
||||
|
||||
model ProjectDeliveryRecord {
|
||||
id String @id @default(uuid()) @db.Uuid
|
||||
project_id String @db.Uuid
|
||||
|
||||
@@ -31,6 +31,7 @@ const masterDataRoutes = require("./routes/masterData");
|
||||
const masterDataHolidayCalendarsRoutes = require("./routes/masterDataHolidayCalendars");
|
||||
const masterDataSuppliersRoutes = require("./routes/masterDataSuppliers");
|
||||
const employeesRoutes = require("./routes/employees");
|
||||
const performanceRoutes = require("./routes/performance");
|
||||
const expenseTypesRoutes = require("./routes/expenseTypes");
|
||||
const configReadRoutes = require("./routes/configRead");
|
||||
const approvalRulesRoutes = require("./routes/approvalRules");
|
||||
@@ -313,6 +314,7 @@ async function buildApp() {
|
||||
await app.register(auditRoutes, { prefix: "/api" });
|
||||
await app.register(usersRoutes, { prefix: "/api" });
|
||||
await app.register(employeesRoutes, { prefix: "/api" });
|
||||
await app.register(performanceRoutes, { prefix: "/api" });
|
||||
await app.register(departmentsRoutes, { prefix: "/api" });
|
||||
await app.register(masterDataRoutes, { prefix: "/api" });
|
||||
await app.register(masterDataHolidayCalendarsRoutes, { prefix: "/api" });
|
||||
|
||||
@@ -0,0 +1,661 @@
|
||||
const { z } = require("zod");
|
||||
|
||||
const { FEATURE_FLAG_KEYS, evaluateFeatureFlag } = require("../services/featureFlags");
|
||||
const { currentDateString } = require("../utils/date");
|
||||
const { AppError } = require("../utils/AppError");
|
||||
const { sendData } = require("../utils/reply");
|
||||
const { buildAuditLogData } = require("../utils/audit");
|
||||
|
||||
const UUID_SCHEMA = z.string().uuid();
|
||||
const DATE_SCHEMA = z.string().regex(/^\d{4}-\d{2}-\d{2}$/);
|
||||
const CYCLE_TYPE_SCHEMA = z.enum(["monthly", "quarterly", "semi_annual", "annual"]);
|
||||
const CYCLE_STATUS_SCHEMA = z.enum(["draft", "active", "completed"]);
|
||||
const DIMENSION_TYPE_SCHEMA = z.enum([
|
||||
"work_quality",
|
||||
"work_efficiency",
|
||||
"teamwork",
|
||||
"initiative",
|
||||
"professional_skill",
|
||||
]);
|
||||
|
||||
const SCORE_SCHEMA = z
|
||||
.number()
|
||||
.min(1)
|
||||
.max(5)
|
||||
.refine((value) => Number.isFinite(value) && Math.abs(value * 2 - Math.round(value * 2)) < 1e-9, {
|
||||
message: "invalid_score_step",
|
||||
});
|
||||
|
||||
const CYCLE_CREATE_SCHEMA = z
|
||||
.object({
|
||||
name: z.string().trim().min(1).max(200),
|
||||
cycleType: CYCLE_TYPE_SCHEMA,
|
||||
startDate: DATE_SCHEMA,
|
||||
endDate: DATE_SCHEMA,
|
||||
})
|
||||
.strict();
|
||||
|
||||
const CYCLE_PATCH_SCHEMA = z
|
||||
.object({
|
||||
name: z.string().trim().min(1).max(200).optional(),
|
||||
cycleType: CYCLE_TYPE_SCHEMA.optional(),
|
||||
startDate: DATE_SCHEMA.optional(),
|
||||
endDate: DATE_SCHEMA.optional(),
|
||||
status: CYCLE_STATUS_SCHEMA.optional(),
|
||||
})
|
||||
.strict()
|
||||
.refine((value) => Object.keys(value).length > 0, { message: "empty_patch" });
|
||||
|
||||
const REVIEW_UPSERT_SCHEMA = z
|
||||
.object({
|
||||
overallScore: SCORE_SCHEMA,
|
||||
comment: z.string().trim().max(3000).nullable().optional(),
|
||||
dimensions: z
|
||||
.array(
|
||||
z
|
||||
.object({
|
||||
dimensionType: DIMENSION_TYPE_SCHEMA,
|
||||
score: SCORE_SCHEMA,
|
||||
})
|
||||
.strict(),
|
||||
)
|
||||
.max(5)
|
||||
.optional()
|
||||
.default([]),
|
||||
})
|
||||
.strict()
|
||||
.superRefine((value, ctx) => {
|
||||
const seen = new Set();
|
||||
value.dimensions.forEach((item, index) => {
|
||||
if (seen.has(item.dimensionType)) {
|
||||
ctx.addIssue({
|
||||
code: z.ZodIssueCode.custom,
|
||||
path: ["dimensions", index, "dimensionType"],
|
||||
message: "duplicate_dimension",
|
||||
});
|
||||
return;
|
||||
}
|
||||
seen.add(item.dimensionType);
|
||||
});
|
||||
});
|
||||
|
||||
const EMPLOYEE_SUMMARY_SELECT = {
|
||||
id: true,
|
||||
employee_no: true,
|
||||
name: true,
|
||||
title: true,
|
||||
status: true,
|
||||
direct_manager_id: true,
|
||||
avatar_path: true,
|
||||
department: { select: { id: true, name: true } },
|
||||
};
|
||||
|
||||
const REVIEW_DETAIL_INCLUDE = {
|
||||
dimensions: true,
|
||||
reviewer_employee: {
|
||||
select: {
|
||||
id: true,
|
||||
employee_no: true,
|
||||
name: true,
|
||||
},
|
||||
},
|
||||
};
|
||||
|
||||
const DIMENSION_ORDER = ["work_quality", "work_efficiency", "teamwork", "initiative", "professional_skill"];
|
||||
|
||||
function buildValidationError(details, statusCode = 400) {
|
||||
return new AppError({ code: "VALID_001", message: "参数校验失败", statusCode, details });
|
||||
}
|
||||
|
||||
function parseId(value) {
|
||||
const parsed = UUID_SCHEMA.safeParse(value);
|
||||
if (!parsed.success) {
|
||||
throw buildValidationError({ id: "invalid_uuid" });
|
||||
}
|
||||
return parsed.data;
|
||||
}
|
||||
|
||||
function parseBody(schema, body) {
|
||||
const parsed = schema.safeParse(body ?? {});
|
||||
if (!parsed.success) {
|
||||
throw buildValidationError(parsed.error.flatten());
|
||||
}
|
||||
return parsed.data;
|
||||
}
|
||||
|
||||
function parseDateOnly(value) {
|
||||
return value ? new Date(`${value}T00:00:00.000Z`) : null;
|
||||
}
|
||||
|
||||
function buildAvatarUrl(employeeId, avatarPath) {
|
||||
return avatarPath ? `/api/avatars/${employeeId}` : null;
|
||||
}
|
||||
|
||||
function toNumber(value) {
|
||||
return value == null ? null : Number(value);
|
||||
}
|
||||
|
||||
function validateCycleDates(startDate, endDate) {
|
||||
if (startDate && endDate && startDate > endDate) {
|
||||
throw buildValidationError({ endDate: "must_be_after_or_equal_startDate" });
|
||||
}
|
||||
}
|
||||
|
||||
async function ensureFeatureEnabled(fastify, request) {
|
||||
const gate = await evaluateFeatureFlag({
|
||||
prisma: fastify.prisma,
|
||||
config: fastify.config,
|
||||
flagKey: FEATURE_FLAG_KEYS.employeeLifecycle,
|
||||
departmentId: request.employee.department_id ?? null,
|
||||
strictDepartment: false,
|
||||
});
|
||||
if (!gate.enabled) {
|
||||
throw buildValidationError({ featureFlag: "employee_lifecycle_v1_disabled", reason: gate.reason }, 409);
|
||||
}
|
||||
}
|
||||
|
||||
function mapEmployeeSummary(employee) {
|
||||
return {
|
||||
id: employee.id,
|
||||
employeeNo: employee.employee_no,
|
||||
name: employee.name,
|
||||
title: employee.title,
|
||||
status: employee.status,
|
||||
avatarUrl: buildAvatarUrl(employee.id, employee.avatar_path),
|
||||
department: employee.department ? { id: employee.department.id, name: employee.department.name } : null,
|
||||
};
|
||||
}
|
||||
|
||||
function mapCycle(cycle) {
|
||||
return {
|
||||
id: cycle.id,
|
||||
name: cycle.name,
|
||||
cycleType: cycle.cycle_type,
|
||||
status: cycle.status,
|
||||
startDate: cycle.start_date?.toISOString?.()?.slice(0, 10) ?? null,
|
||||
endDate: cycle.end_date?.toISOString?.()?.slice(0, 10) ?? null,
|
||||
activatedAt: cycle.activated_at?.toISOString?.() ?? null,
|
||||
completedAt: cycle.completed_at?.toISOString?.() ?? null,
|
||||
createdAt: cycle.created_at?.toISOString?.() ?? null,
|
||||
createdBy: cycle.created_by ?? null,
|
||||
updatedAt: cycle.updated_at?.toISOString?.() ?? null,
|
||||
updatedBy: cycle.updated_by ?? null,
|
||||
};
|
||||
}
|
||||
|
||||
function mapReview(review) {
|
||||
return {
|
||||
id: review.id,
|
||||
cycleId: review.cycle_id,
|
||||
employeeId: review.employee_id,
|
||||
reviewerEmployeeId: review.reviewer_employee_id,
|
||||
overallScore: toNumber(review.overall_score),
|
||||
comment: review.comment ?? null,
|
||||
reviewer: review.reviewer_employee
|
||||
? {
|
||||
id: review.reviewer_employee.id,
|
||||
employeeNo: review.reviewer_employee.employee_no,
|
||||
name: review.reviewer_employee.name,
|
||||
}
|
||||
: null,
|
||||
dimensions: [...(review.dimensions ?? [])]
|
||||
.sort((left, right) => DIMENSION_ORDER.indexOf(left.dimension_type) - DIMENSION_ORDER.indexOf(right.dimension_type))
|
||||
.map((item) => ({
|
||||
dimensionType: item.dimension_type,
|
||||
score: toNumber(item.score),
|
||||
})),
|
||||
createdAt: review.created_at?.toISOString?.() ?? null,
|
||||
createdBy: review.created_by ?? null,
|
||||
updatedAt: review.updated_at?.toISOString?.() ?? null,
|
||||
updatedBy: review.updated_by ?? null,
|
||||
};
|
||||
}
|
||||
|
||||
function resolveViewerRole(fastify, request, employee) {
|
||||
if (fastify.hasPermission(request.employee, "system.users")) {
|
||||
return "admin";
|
||||
}
|
||||
if (request.employee.id === employee.id) {
|
||||
return "self";
|
||||
}
|
||||
if (employee.direct_manager_id && employee.direct_manager_id === request.employee.id) {
|
||||
return "manager";
|
||||
}
|
||||
return null;
|
||||
}
|
||||
|
||||
async function ensureCycleExists(prisma, cycleId) {
|
||||
const cycle = await prisma.performanceReviewCycle.findUnique({ where: { id: cycleId } });
|
||||
if (!cycle) {
|
||||
throw new AppError({ code: "SYS_404", message: "Not Found", statusCode: 404 });
|
||||
}
|
||||
return cycle;
|
||||
}
|
||||
|
||||
async function ensureEmployeeExists(prisma, employeeId) {
|
||||
const employee = await prisma.employee.findUnique({
|
||||
where: { id: employeeId },
|
||||
select: EMPLOYEE_SUMMARY_SELECT,
|
||||
});
|
||||
if (!employee) {
|
||||
throw new AppError({ code: "SYS_404", message: "Not Found", statusCode: 404 });
|
||||
}
|
||||
return employee;
|
||||
}
|
||||
|
||||
async function ensureNoOtherActiveCycle(prisma, excludedCycleId = null) {
|
||||
const existing = await prisma.performanceReviewCycle.findFirst({
|
||||
where: {
|
||||
status: "active",
|
||||
...(excludedCycleId ? { id: { not: excludedCycleId } } : {}),
|
||||
},
|
||||
});
|
||||
if (existing) {
|
||||
throw buildValidationError({ cycle: "active_cycle_exists", activeCycleId: existing.id }, 409);
|
||||
}
|
||||
}
|
||||
|
||||
async function lockCycleForUpdate(prisma, cycleId) {
|
||||
if (typeof prisma.$queryRaw === "function") {
|
||||
const rows = await prisma.$queryRaw`
|
||||
SELECT "id", "status"
|
||||
FROM "performance_review_cycles"
|
||||
WHERE "id" = ${cycleId}::uuid
|
||||
FOR UPDATE
|
||||
`;
|
||||
if (!rows.length) {
|
||||
throw new AppError({ code: "SYS_404", message: "Not Found", statusCode: 404 });
|
||||
}
|
||||
return rows[0];
|
||||
}
|
||||
|
||||
return ensureCycleExists(prisma, cycleId);
|
||||
}
|
||||
|
||||
function isPrismaUniqueConstraintError(error) {
|
||||
return Boolean(error && typeof error === "object" && "code" in error && error.code === "P2002");
|
||||
}
|
||||
|
||||
function sortCycles(items) {
|
||||
const rank = { active: 0, draft: 1, completed: 2 };
|
||||
return [...items].sort((left, right) => {
|
||||
const rankDiff = (rank[left.status] ?? 9) - (rank[right.status] ?? 9);
|
||||
if (rankDiff !== 0) return rankDiff;
|
||||
const leftDate = left.endDate ?? left.startDate ?? "";
|
||||
const rightDate = right.endDate ?? right.startDate ?? "";
|
||||
return rightDate.localeCompare(leftDate) || String(right.name ?? "").localeCompare(String(left.name ?? ""));
|
||||
});
|
||||
}
|
||||
|
||||
function sortEmployeeItems(items) {
|
||||
return [...items].sort((left, right) => {
|
||||
const leftDepartment = left.employee.department?.name ?? "";
|
||||
const rightDepartment = right.employee.department?.name ?? "";
|
||||
return (
|
||||
leftDepartment.localeCompare(rightDepartment) ||
|
||||
left.employee.employeeNo.localeCompare(right.employee.employeeNo) ||
|
||||
left.employee.name.localeCompare(right.employee.name)
|
||||
);
|
||||
});
|
||||
}
|
||||
|
||||
async function buildCycleOverview(prisma, cycle) {
|
||||
const reviews = await prisma.performanceReview.findMany({
|
||||
where: { cycle_id: cycle.id },
|
||||
include: {
|
||||
...REVIEW_DETAIL_INCLUDE,
|
||||
employee: {
|
||||
select: EMPLOYEE_SUMMARY_SELECT,
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
const reviewByEmployeeId = new Map(reviews.map((item) => [item.employee_id, item]));
|
||||
|
||||
if (cycle.status === "completed") {
|
||||
return sortEmployeeItems(
|
||||
reviews.map((item) => ({
|
||||
employee: mapEmployeeSummary(item.employee),
|
||||
review: mapReview(item),
|
||||
})),
|
||||
);
|
||||
}
|
||||
|
||||
const activeEmployees = await prisma.employee.findMany({
|
||||
where: { status: "active" },
|
||||
select: EMPLOYEE_SUMMARY_SELECT,
|
||||
});
|
||||
|
||||
const items = activeEmployees.map((employee) => ({
|
||||
employee: mapEmployeeSummary(employee),
|
||||
review: reviewByEmployeeId.has(employee.id) ? mapReview(reviewByEmployeeId.get(employee.id)) : null,
|
||||
}));
|
||||
|
||||
for (const review of reviews) {
|
||||
if (!items.some((item) => item.employee.id === review.employee_id)) {
|
||||
items.push({
|
||||
employee: mapEmployeeSummary(review.employee),
|
||||
review: mapReview(review),
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
return sortEmployeeItems(items);
|
||||
}
|
||||
|
||||
async function buildEmployeeTimeline(prisma, employeeId, viewerRole) {
|
||||
const cycles = await prisma.performanceReviewCycle.findMany({
|
||||
where:
|
||||
viewerRole === "self"
|
||||
? {
|
||||
status: "completed",
|
||||
}
|
||||
: {
|
||||
status: {
|
||||
in: ["active", "completed"],
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
if (!cycles.length) {
|
||||
return [];
|
||||
}
|
||||
|
||||
const reviews = await prisma.performanceReview.findMany({
|
||||
where: {
|
||||
employee_id: employeeId,
|
||||
cycle_id: { in: cycles.map((item) => item.id) },
|
||||
},
|
||||
include: REVIEW_DETAIL_INCLUDE,
|
||||
});
|
||||
|
||||
const reviewByCycleId = new Map(reviews.map((item) => [item.cycle_id, item]));
|
||||
const items = cycles
|
||||
.map((cycle) => ({
|
||||
cycle: mapCycle(cycle),
|
||||
review: reviewByCycleId.has(cycle.id) ? mapReview(reviewByCycleId.get(cycle.id)) : null,
|
||||
canEdit: viewerRole !== "self" && cycle.status === "active",
|
||||
}))
|
||||
.filter((item) => (viewerRole === "self" ? Boolean(item.review) : true));
|
||||
|
||||
return sortCycles(items.map((item) => ({ ...item, status: item.cycle.status, endDate: item.cycle.endDate, startDate: item.cycle.startDate }))).map(
|
||||
({ status, endDate, startDate, ...item }) => item,
|
||||
);
|
||||
}
|
||||
|
||||
async function performanceRoutes(fastify) {
|
||||
fastify.get("/performance/cycles", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request);
|
||||
if (!fastify.hasPermission(request.employee, "system.users")) {
|
||||
throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403, details: { permission: "system.users" } });
|
||||
}
|
||||
|
||||
const cycles = await fastify.prisma.performanceReviewCycle.findMany();
|
||||
return sendData(reply, request, {
|
||||
items: sortCycles(cycles.map(mapCycle)),
|
||||
});
|
||||
});
|
||||
|
||||
fastify.post("/performance/cycles", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request);
|
||||
if (!fastify.hasPermission(request.employee, "system.users")) {
|
||||
throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403, details: { permission: "system.users" } });
|
||||
}
|
||||
|
||||
const body = parseBody(CYCLE_CREATE_SCHEMA, request.body);
|
||||
validateCycleDates(body.startDate, body.endDate);
|
||||
|
||||
const cycle = await fastify.prisma.performanceReviewCycle.create({
|
||||
data: {
|
||||
name: body.name,
|
||||
cycle_type: body.cycleType,
|
||||
start_date: parseDateOnly(body.startDate),
|
||||
end_date: parseDateOnly(body.endDate),
|
||||
created_by: request.employee.id,
|
||||
updated_by: request.employee.id,
|
||||
},
|
||||
});
|
||||
|
||||
await fastify.prisma.auditLog.create({
|
||||
data: buildAuditLogData(request, {
|
||||
actorId: request.employee.id,
|
||||
action: "PERFORMANCE_REVIEW_CYCLE_CREATED",
|
||||
targetType: "performance_review_cycle",
|
||||
targetId: cycle.id,
|
||||
extra: { status: cycle.status },
|
||||
}),
|
||||
});
|
||||
|
||||
return sendData(reply, request, mapCycle(cycle));
|
||||
});
|
||||
|
||||
fastify.patch("/performance/cycles/:cycleId", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request);
|
||||
if (!fastify.hasPermission(request.employee, "system.users")) {
|
||||
throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403, details: { permission: "system.users" } });
|
||||
}
|
||||
|
||||
const cycleId = parseId(request.params?.cycleId);
|
||||
const body = parseBody(CYCLE_PATCH_SCHEMA, request.body);
|
||||
const current = await ensureCycleExists(fastify.prisma, cycleId);
|
||||
const nextStartDate = body.startDate ?? current.start_date?.toISOString?.()?.slice(0, 10) ?? null;
|
||||
const nextEndDate = body.endDate ?? current.end_date?.toISOString?.()?.slice(0, 10) ?? null;
|
||||
validateCycleDates(nextStartDate, nextEndDate);
|
||||
|
||||
if (current.status === "completed") {
|
||||
throw buildValidationError({ cycle: "completed_cycle_locked" }, 409);
|
||||
}
|
||||
|
||||
let action = "PERFORMANCE_REVIEW_CYCLE_UPDATED";
|
||||
let data;
|
||||
|
||||
if (current.status === "active") {
|
||||
const invalidKeys = Object.keys(body).filter((key) => key !== "status");
|
||||
if (invalidKeys.length > 0 || body.status !== "completed") {
|
||||
throw buildValidationError({ cycle: "active_cycle_only_supports_complete" }, 409);
|
||||
}
|
||||
action = "PERFORMANCE_REVIEW_CYCLE_COMPLETED";
|
||||
data = {
|
||||
status: "completed",
|
||||
completed_at: new Date(),
|
||||
updated_by: request.employee.id,
|
||||
};
|
||||
} else {
|
||||
if (body.status === "completed") {
|
||||
throw buildValidationError({ cycle: "draft_cycle_cannot_complete_directly" }, 409);
|
||||
}
|
||||
if (body.status === "active") {
|
||||
await ensureNoOtherActiveCycle(fastify.prisma, cycleId);
|
||||
action = "PERFORMANCE_REVIEW_CYCLE_ACTIVATED";
|
||||
}
|
||||
|
||||
data = {
|
||||
...(body.name !== undefined ? { name: body.name } : {}),
|
||||
...(body.cycleType !== undefined ? { cycle_type: body.cycleType } : {}),
|
||||
...(body.startDate !== undefined ? { start_date: parseDateOnly(body.startDate) } : {}),
|
||||
...(body.endDate !== undefined ? { end_date: parseDateOnly(body.endDate) } : {}),
|
||||
...(body.status !== undefined ? { status: body.status } : {}),
|
||||
...(body.status === "active" ? { activated_at: new Date() } : {}),
|
||||
updated_by: request.employee.id,
|
||||
};
|
||||
}
|
||||
|
||||
let cycle;
|
||||
try {
|
||||
cycle = await fastify.prisma.performanceReviewCycle.update({
|
||||
where: { id: cycleId },
|
||||
data,
|
||||
});
|
||||
} catch (error) {
|
||||
if (body.status === "active" && isPrismaUniqueConstraintError(error)) {
|
||||
throw buildValidationError({ cycle: "active_cycle_exists" }, 409);
|
||||
}
|
||||
throw error;
|
||||
}
|
||||
|
||||
await fastify.prisma.auditLog.create({
|
||||
data: buildAuditLogData(request, {
|
||||
actorId: request.employee.id,
|
||||
action,
|
||||
targetType: "performance_review_cycle",
|
||||
targetId: cycle.id,
|
||||
extra: { status: cycle.status },
|
||||
}),
|
||||
});
|
||||
|
||||
return sendData(reply, request, mapCycle(cycle));
|
||||
});
|
||||
|
||||
fastify.get("/performance/cycles/:cycleId/reviews", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request);
|
||||
if (!fastify.hasPermission(request.employee, "system.users")) {
|
||||
throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403, details: { permission: "system.users" } });
|
||||
}
|
||||
|
||||
const cycleId = parseId(request.params?.cycleId);
|
||||
const cycle = await ensureCycleExists(fastify.prisma, cycleId);
|
||||
const items = await buildCycleOverview(fastify.prisma, cycle);
|
||||
|
||||
return sendData(reply, request, {
|
||||
cycle: mapCycle(cycle),
|
||||
items,
|
||||
});
|
||||
});
|
||||
|
||||
fastify.get("/performance/employees/:employeeId/reviews", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request);
|
||||
const employeeId = parseId(request.params?.employeeId);
|
||||
const employee = await ensureEmployeeExists(fastify.prisma, employeeId);
|
||||
const viewerRole = resolveViewerRole(fastify, request, employee);
|
||||
|
||||
if (!viewerRole) {
|
||||
throw new AppError({
|
||||
code: "PERM_001",
|
||||
message: "无权限",
|
||||
statusCode: 403,
|
||||
details: { permission: "performance.review.view" },
|
||||
});
|
||||
}
|
||||
|
||||
const items = await buildEmployeeTimeline(fastify.prisma, employeeId, viewerRole);
|
||||
|
||||
return sendData(reply, request, {
|
||||
employee: mapEmployeeSummary(employee),
|
||||
viewerRole,
|
||||
items,
|
||||
});
|
||||
});
|
||||
|
||||
fastify.put("/performance/cycles/:cycleId/reviews/:employeeId", { preHandler: fastify.authenticate }, async (request, reply) => {
|
||||
await ensureFeatureEnabled(fastify, request);
|
||||
const cycleId = parseId(request.params?.cycleId);
|
||||
const employeeId = parseId(request.params?.employeeId);
|
||||
const body = parseBody(REVIEW_UPSERT_SCHEMA, request.body);
|
||||
const employee = await ensureEmployeeExists(fastify.prisma, employeeId);
|
||||
const viewerRole = resolveViewerRole(fastify, request, employee);
|
||||
|
||||
if (viewerRole !== "admin" && viewerRole !== "manager") {
|
||||
throw new AppError({
|
||||
code: "PERM_001",
|
||||
message: "无权限",
|
||||
statusCode: 403,
|
||||
details: { permission: "performance.review.write" },
|
||||
});
|
||||
}
|
||||
|
||||
if (employee.status !== "active") {
|
||||
throw buildValidationError({ employee: "inactive_employee_not_reviewable" }, 409);
|
||||
}
|
||||
|
||||
await ensureCycleExists(fastify.prisma, cycleId);
|
||||
|
||||
const savedReview = await fastify.prisma.$transaction(async (tx) => {
|
||||
const lockedCycle = await lockCycleForUpdate(tx, cycleId);
|
||||
if (lockedCycle.status !== "active") {
|
||||
throw buildValidationError({ cycle: "active_cycle_required" }, 409);
|
||||
}
|
||||
|
||||
const existing = await tx.performanceReview.findFirst({
|
||||
where: {
|
||||
cycle_id: cycleId,
|
||||
employee_id: employeeId,
|
||||
},
|
||||
include: REVIEW_DETAIL_INCLUDE,
|
||||
});
|
||||
|
||||
const payload = {
|
||||
reviewer_employee_id: request.employee.id,
|
||||
overall_score: body.overallScore,
|
||||
comment: body.comment?.trim() ? body.comment.trim() : null,
|
||||
updated_by: request.employee.id,
|
||||
};
|
||||
|
||||
let reviewId = existing?.id ?? null;
|
||||
|
||||
if (existing) {
|
||||
await tx.performanceReview.update({
|
||||
where: { id: existing.id },
|
||||
data: payload,
|
||||
});
|
||||
} else {
|
||||
const created = await tx.performanceReview.create({
|
||||
data: {
|
||||
cycle_id: cycleId,
|
||||
employee_id: employeeId,
|
||||
...payload,
|
||||
created_by: request.employee.id,
|
||||
},
|
||||
});
|
||||
reviewId = created.id;
|
||||
}
|
||||
|
||||
await tx.performanceReviewDimension.deleteMany({
|
||||
where: { review_id: reviewId },
|
||||
});
|
||||
|
||||
if (body.dimensions.length > 0) {
|
||||
await tx.performanceReviewDimension.createMany({
|
||||
data: body.dimensions.map((item) => ({
|
||||
review_id: reviewId,
|
||||
dimension_type: item.dimensionType,
|
||||
score: item.score,
|
||||
})),
|
||||
});
|
||||
}
|
||||
|
||||
return tx.performanceReview.findUnique({
|
||||
where: { id: reviewId },
|
||||
include: REVIEW_DETAIL_INCLUDE,
|
||||
});
|
||||
});
|
||||
|
||||
await fastify.prisma.auditLog.create({
|
||||
data: buildAuditLogData(request, {
|
||||
actorId: request.employee.id,
|
||||
action: "PERFORMANCE_REVIEW_UPSERTED",
|
||||
targetType: "performance_review",
|
||||
targetId: savedReview.id,
|
||||
extra: {
|
||||
cycleId,
|
||||
employeeId,
|
||||
reviewerRole: viewerRole,
|
||||
},
|
||||
}),
|
||||
});
|
||||
|
||||
return sendData(reply, request, mapReview(savedReview));
|
||||
});
|
||||
}
|
||||
|
||||
module.exports = performanceRoutes;
|
||||
|
||||
module.exports.__testables = {
|
||||
buildCycleOverview,
|
||||
buildEmployeeTimeline,
|
||||
buildValidationError,
|
||||
mapCycle,
|
||||
mapEmployeeSummary,
|
||||
mapReview,
|
||||
resolveViewerRole,
|
||||
sortCycles,
|
||||
};
|
||||
@@ -6,6 +6,22 @@ function addDays(date, days) {
|
||||
return next;
|
||||
}
|
||||
|
||||
function toNumber(value) {
|
||||
return value == null ? null : Number(value);
|
||||
}
|
||||
|
||||
function buildPerformanceDistribution(rows) {
|
||||
const countByScore = new Map(rows.map((item) => [toNumber(item.overall_score), item._count._all]));
|
||||
const items = [];
|
||||
for (let score = 1; score <= 5; score += 0.5) {
|
||||
items.push({
|
||||
score: Number(score.toFixed(1)),
|
||||
count: countByScore.get(Number(score.toFixed(1))) ?? 0,
|
||||
});
|
||||
}
|
||||
return items;
|
||||
}
|
||||
|
||||
async function buildEmployeeStats(prisma, options = {}) {
|
||||
const timeZone = options.timeZone ?? "Asia/Shanghai";
|
||||
const todayString = currentDateString(timeZone);
|
||||
@@ -14,7 +30,7 @@ async function buildEmployeeStats(prisma, options = {}) {
|
||||
const next30DateTo = addDays(today, 30);
|
||||
const activeEmployeeWhere = { status: "active" };
|
||||
|
||||
const [employmentStatusRows, departmentRows, departments, recentHires, recentDepartures, expiringContracts, validCertificateHolders, expiringCertificates] = await Promise.all([
|
||||
const [employmentStatusRows, departmentRows, departments, recentHires, recentDepartures, expiringContracts, validCertificateHolders, expiringCertificates, activeCycle, completedCycle] = await Promise.all([
|
||||
prisma.employee.groupBy({
|
||||
by: ["employment_status"],
|
||||
where: activeEmployeeWhere,
|
||||
@@ -78,9 +94,53 @@ async function buildEmployeeStats(prisma, options = {}) {
|
||||
},
|
||||
},
|
||||
}),
|
||||
prisma.performanceReviewCycle.findFirst({
|
||||
where: { status: "active" },
|
||||
orderBy: [{ activated_at: "desc" }, { start_date: "desc" }],
|
||||
}),
|
||||
prisma.performanceReviewCycle.findFirst({
|
||||
where: { status: "completed" },
|
||||
orderBy: [{ completed_at: "desc" }, { end_date: "desc" }],
|
||||
}),
|
||||
]);
|
||||
|
||||
const departmentMap = new Map(departments.map((item) => [item.id, item.name]));
|
||||
const performanceCycle = activeCycle ?? completedCycle ?? null;
|
||||
let performanceSummary = {
|
||||
cycle: null,
|
||||
averageScore: null,
|
||||
reviewedCount: 0,
|
||||
distribution: [],
|
||||
};
|
||||
|
||||
if (performanceCycle) {
|
||||
const [reviewAggregate, reviewDistribution] = await Promise.all([
|
||||
prisma.performanceReview.aggregate({
|
||||
where: { cycle_id: performanceCycle.id },
|
||||
_avg: { overall_score: true },
|
||||
_count: { _all: true },
|
||||
}),
|
||||
prisma.performanceReview.groupBy({
|
||||
by: ["overall_score"],
|
||||
where: { cycle_id: performanceCycle.id },
|
||||
_count: { _all: true },
|
||||
}),
|
||||
]);
|
||||
|
||||
performanceSummary = {
|
||||
cycle: {
|
||||
id: performanceCycle.id,
|
||||
name: performanceCycle.name,
|
||||
cycleType: performanceCycle.cycle_type,
|
||||
status: performanceCycle.status,
|
||||
startDate: performanceCycle.start_date?.toISOString?.()?.slice(0, 10) ?? null,
|
||||
endDate: performanceCycle.end_date?.toISOString?.()?.slice(0, 10) ?? null,
|
||||
},
|
||||
averageScore: toNumber(reviewAggregate._avg.overall_score),
|
||||
reviewedCount: reviewAggregate._count._all,
|
||||
distribution: buildPerformanceDistribution(reviewDistribution),
|
||||
};
|
||||
}
|
||||
|
||||
return {
|
||||
asOfDate: todayString,
|
||||
@@ -117,6 +177,7 @@ async function buildEmployeeStats(prisma, options = {}) {
|
||||
validHolderCount: validCertificateHolders.length,
|
||||
expiringSoonCount: expiringCertificates,
|
||||
},
|
||||
performanceSummary,
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
@@ -27,6 +27,32 @@ async function buildApp({ permissionCodes = ["system.users"], stats } = {}) {
|
||||
{ employee_id: "emp-3" },
|
||||
]);
|
||||
const certificateCount = vi.fn().mockResolvedValue(4);
|
||||
const performanceCycleFindFirst = vi
|
||||
.fn()
|
||||
.mockResolvedValueOnce({
|
||||
id: "cycle-active",
|
||||
name: "2026 Q2",
|
||||
cycle_type: "quarterly",
|
||||
status: "active",
|
||||
start_date: new Date("2026-04-01T00:00:00.000Z"),
|
||||
end_date: new Date("2026-06-30T00:00:00.000Z"),
|
||||
})
|
||||
.mockResolvedValueOnce({
|
||||
id: "cycle-completed",
|
||||
name: "2026 Q1",
|
||||
cycle_type: "quarterly",
|
||||
status: "completed",
|
||||
start_date: new Date("2026-01-01T00:00:00.000Z"),
|
||||
end_date: new Date("2026-03-31T00:00:00.000Z"),
|
||||
});
|
||||
const performanceReviewAggregate = vi.fn().mockResolvedValue({
|
||||
_avg: { overall_score: 4.2 },
|
||||
_count: { _all: 5 },
|
||||
});
|
||||
const performanceReviewGroupBy = vi.fn().mockResolvedValue([
|
||||
{ overall_score: 4, _count: { _all: 3 } },
|
||||
{ overall_score: 4.5, _count: { _all: 2 } },
|
||||
]);
|
||||
|
||||
app.decorate("prisma", {
|
||||
employee: {
|
||||
@@ -47,6 +73,13 @@ async function buildApp({ permissionCodes = ["system.users"], stats } = {}) {
|
||||
count: stats?.employeeCertificateCount ?? certificateCount,
|
||||
findMany: vi.fn().mockResolvedValue([]),
|
||||
},
|
||||
performanceReviewCycle: {
|
||||
findFirst: stats?.performanceReviewCycleFindFirst ?? performanceCycleFindFirst,
|
||||
},
|
||||
performanceReview: {
|
||||
aggregate: stats?.performanceReviewAggregate ?? performanceReviewAggregate,
|
||||
groupBy: stats?.performanceReviewGroupBy ?? performanceReviewGroupBy,
|
||||
},
|
||||
});
|
||||
app.decorate("authenticate", async (request) => {
|
||||
request.employee = {
|
||||
@@ -79,12 +112,34 @@ async function buildApp({ permissionCodes = ["system.users"], stats } = {}) {
|
||||
});
|
||||
|
||||
await app.register(employeesRoutes, { prefix: "/api" });
|
||||
return { app, employeeGroupBy, employeeCount, departmentFindMany, contractCount, certificateGroupBy, certificateCount };
|
||||
return {
|
||||
app,
|
||||
employeeGroupBy,
|
||||
employeeCount,
|
||||
departmentFindMany,
|
||||
contractCount,
|
||||
certificateGroupBy,
|
||||
certificateCount,
|
||||
performanceCycleFindFirst,
|
||||
performanceReviewAggregate,
|
||||
performanceReviewGroupBy,
|
||||
};
|
||||
}
|
||||
|
||||
describe("employees stats route", () => {
|
||||
it("returns aggregated employee stats for read-only viewers", async () => {
|
||||
const { app, employeeGroupBy, employeeCount, departmentFindMany, contractCount, certificateGroupBy, certificateCount } = await buildApp({
|
||||
const {
|
||||
app,
|
||||
employeeGroupBy,
|
||||
employeeCount,
|
||||
departmentFindMany,
|
||||
contractCount,
|
||||
certificateGroupBy,
|
||||
certificateCount,
|
||||
performanceCycleFindFirst,
|
||||
performanceReviewAggregate,
|
||||
performanceReviewGroupBy,
|
||||
} = await buildApp({
|
||||
permissionCodes: ["report.dashboard.view"],
|
||||
});
|
||||
|
||||
@@ -109,12 +164,38 @@ describe("employees stats route", () => {
|
||||
validHolderCount: 3,
|
||||
expiringSoonCount: 4,
|
||||
});
|
||||
expect(payload.data.performanceSummary).toEqual({
|
||||
cycle: {
|
||||
id: "cycle-active",
|
||||
name: "2026 Q2",
|
||||
cycleType: "quarterly",
|
||||
status: "active",
|
||||
startDate: "2026-04-01",
|
||||
endDate: "2026-06-30",
|
||||
},
|
||||
averageScore: 4.2,
|
||||
reviewedCount: 5,
|
||||
distribution: [
|
||||
{ score: 1, count: 0 },
|
||||
{ score: 1.5, count: 0 },
|
||||
{ score: 2, count: 0 },
|
||||
{ score: 2.5, count: 0 },
|
||||
{ score: 3, count: 0 },
|
||||
{ score: 3.5, count: 0 },
|
||||
{ score: 4, count: 3 },
|
||||
{ score: 4.5, count: 2 },
|
||||
{ score: 5, count: 0 },
|
||||
],
|
||||
});
|
||||
expect(employeeGroupBy).toHaveBeenCalledTimes(2);
|
||||
expect(employeeCount).toHaveBeenCalledTimes(2);
|
||||
expect(departmentFindMany).toHaveBeenCalledTimes(1);
|
||||
expect(contractCount).toHaveBeenCalledTimes(1);
|
||||
expect(certificateGroupBy).toHaveBeenCalledTimes(1);
|
||||
expect(certificateCount).toHaveBeenCalledTimes(1);
|
||||
expect(performanceCycleFindFirst).toHaveBeenCalledTimes(2);
|
||||
expect(performanceReviewAggregate).toHaveBeenCalledTimes(1);
|
||||
expect(performanceReviewGroupBy).toHaveBeenCalledTimes(1);
|
||||
|
||||
await app.close();
|
||||
});
|
||||
|
||||
@@ -0,0 +1,248 @@
|
||||
const crypto = require("node:crypto");
|
||||
const Fastify = require("fastify");
|
||||
|
||||
const performanceRoutes = require("../../../src/routes/performance");
|
||||
const { AppError } = require("../../../src/utils/AppError");
|
||||
|
||||
const ADMIN_ID = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
|
||||
const DEPARTMENT_ID = "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb";
|
||||
|
||||
function buildFeatureFlagRecord() {
|
||||
return {
|
||||
id: "flag-1",
|
||||
flag_key: "employee_lifecycle_v1",
|
||||
override_mode: "force_on",
|
||||
rollout_type: "global",
|
||||
department_ids: [],
|
||||
note: "",
|
||||
version: 1,
|
||||
created_at: new Date("2026-03-28T00:00:00.000Z"),
|
||||
created_by: null,
|
||||
updated_at: new Date("2026-03-28T00:00:00.000Z"),
|
||||
updated_by: null,
|
||||
};
|
||||
}
|
||||
|
||||
function buildCycleRow(overrides = {}) {
|
||||
return {
|
||||
id: "11111111-1111-4111-8111-111111111111",
|
||||
name: "2026 Q1",
|
||||
cycle_type: "quarterly",
|
||||
start_date: new Date("2026-01-01T00:00:00.000Z"),
|
||||
end_date: new Date("2026-03-31T00:00:00.000Z"),
|
||||
status: "draft",
|
||||
activated_at: null,
|
||||
completed_at: null,
|
||||
created_at: new Date("2026-03-29T08:00:00.000Z"),
|
||||
created_by: ADMIN_ID,
|
||||
updated_at: new Date("2026-03-29T08:00:00.000Z"),
|
||||
updated_by: ADMIN_ID,
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
async function buildApp({ actor = { id: ADMIN_ID, department_id: DEPARTMENT_ID, permissionCodes: ["system.users"] } } = {}) {
|
||||
const app = Fastify();
|
||||
const state = {
|
||||
cycles: [],
|
||||
};
|
||||
const idSequence = [
|
||||
"11111111-1111-4111-8111-111111111111",
|
||||
"22222222-2222-4222-8222-222222222222",
|
||||
"33333333-3333-4333-8333-333333333333",
|
||||
];
|
||||
|
||||
const performanceReviewCycle = {
|
||||
findMany: vi.fn(async () => [...state.cycles]),
|
||||
findUnique: vi.fn(async ({ where }) => state.cycles.find((item) => item.id === where.id) ?? null),
|
||||
findFirst: vi.fn(async ({ where }) => {
|
||||
return (
|
||||
state.cycles.find((item) => {
|
||||
if (where.status && item.status !== where.status) {
|
||||
return false;
|
||||
}
|
||||
if (where.id?.not && item.id === where.id.not) {
|
||||
return false;
|
||||
}
|
||||
return true;
|
||||
}) ?? null
|
||||
);
|
||||
}),
|
||||
create: vi.fn(async ({ data }) => {
|
||||
const cycle = buildCycleRow({
|
||||
id: idSequence[state.cycles.length] ?? crypto.randomUUID(),
|
||||
name: data.name,
|
||||
cycle_type: data.cycle_type,
|
||||
start_date: data.start_date,
|
||||
end_date: data.end_date,
|
||||
created_by: data.created_by,
|
||||
updated_by: data.updated_by,
|
||||
});
|
||||
state.cycles.push(cycle);
|
||||
return cycle;
|
||||
}),
|
||||
update: vi.fn(async ({ where, data }) => {
|
||||
const index = state.cycles.findIndex((item) => item.id === where.id);
|
||||
state.cycles[index] = {
|
||||
...state.cycles[index],
|
||||
...data,
|
||||
updated_at: new Date("2026-03-29T09:00:00.000Z"),
|
||||
};
|
||||
return state.cycles[index];
|
||||
}),
|
||||
};
|
||||
|
||||
app.decorate("config", { appTimezone: "Asia/Shanghai", employeeLifecycleEnabled: true });
|
||||
app.decorate("authenticate", async (request) => {
|
||||
request.employee = actor;
|
||||
});
|
||||
app.decorate("requirePermission", (permissionCode) => async (request) => {
|
||||
request.employee = actor;
|
||||
const codes = actor.permissionCodes ?? [];
|
||||
if (!codes.includes("*") && !codes.includes(permissionCode)) {
|
||||
throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403 });
|
||||
}
|
||||
});
|
||||
app.decorate("hasPermission", (employee, permissionCode) => {
|
||||
const codes = employee.permissionCodes ?? [];
|
||||
return codes.includes("*") || codes.includes(permissionCode);
|
||||
});
|
||||
app.decorate("prisma", {
|
||||
featureFlag: {
|
||||
findUnique: vi.fn().mockResolvedValue(buildFeatureFlagRecord()),
|
||||
},
|
||||
performanceReviewCycle,
|
||||
auditLog: {
|
||||
create: vi.fn().mockResolvedValue({}),
|
||||
},
|
||||
});
|
||||
app.setErrorHandler((error, request, reply) => {
|
||||
reply.status(error.statusCode || 500).send({
|
||||
requestId: request.id,
|
||||
error: {
|
||||
code: error.code || "SYS_001",
|
||||
message: error.message,
|
||||
details: error.details ?? null,
|
||||
},
|
||||
});
|
||||
});
|
||||
|
||||
await app.register(performanceRoutes, { prefix: "/api" });
|
||||
return { app, state, performanceReviewCycle };
|
||||
}
|
||||
|
||||
describe("performance cycle routes", () => {
|
||||
it("allows admins to create, update, activate and complete cycles with a single active cycle guard", async () => {
|
||||
const { app, state, performanceReviewCycle } = await buildApp();
|
||||
|
||||
const createResponse = await app.inject({
|
||||
method: "POST",
|
||||
url: "/api/performance/cycles",
|
||||
payload: {
|
||||
name: "2026 Q1",
|
||||
cycleType: "quarterly",
|
||||
startDate: "2026-01-01",
|
||||
endDate: "2026-03-31",
|
||||
},
|
||||
});
|
||||
|
||||
expect(createResponse.statusCode).toBe(200);
|
||||
expect(createResponse.json().data).toMatchObject({
|
||||
name: "2026 Q1",
|
||||
cycleType: "quarterly",
|
||||
status: "draft",
|
||||
});
|
||||
|
||||
const patchResponse = await app.inject({
|
||||
method: "PATCH",
|
||||
url: `/api/performance/cycles/${state.cycles[0].id}`,
|
||||
payload: {
|
||||
name: "2026 Q1 调整版",
|
||||
endDate: "2026-04-05",
|
||||
},
|
||||
});
|
||||
|
||||
expect(patchResponse.statusCode).toBe(200);
|
||||
expect(patchResponse.json().data).toMatchObject({
|
||||
name: "2026 Q1 调整版",
|
||||
endDate: "2026-04-05",
|
||||
status: "draft",
|
||||
});
|
||||
|
||||
const activateResponse = await app.inject({
|
||||
method: "PATCH",
|
||||
url: `/api/performance/cycles/${state.cycles[0].id}`,
|
||||
payload: {
|
||||
status: "active",
|
||||
},
|
||||
});
|
||||
|
||||
expect(activateResponse.statusCode).toBe(200);
|
||||
expect(activateResponse.json().data).toMatchObject({
|
||||
status: "active",
|
||||
});
|
||||
|
||||
const secondCreateResponse = await app.inject({
|
||||
method: "POST",
|
||||
url: "/api/performance/cycles",
|
||||
payload: {
|
||||
name: "2026 Q2",
|
||||
cycleType: "quarterly",
|
||||
startDate: "2026-04-01",
|
||||
endDate: "2026-06-30",
|
||||
},
|
||||
});
|
||||
|
||||
expect(secondCreateResponse.statusCode).toBe(200);
|
||||
|
||||
const secondActivateResponse = await app.inject({
|
||||
method: "PATCH",
|
||||
url: `/api/performance/cycles/${state.cycles[1].id}`,
|
||||
payload: {
|
||||
status: "active",
|
||||
},
|
||||
});
|
||||
|
||||
expect(secondActivateResponse.statusCode).toBe(409);
|
||||
expect(secondActivateResponse.json().error.details).toMatchObject({
|
||||
cycle: "active_cycle_exists",
|
||||
activeCycleId: state.cycles[0].id,
|
||||
});
|
||||
|
||||
const completeResponse = await app.inject({
|
||||
method: "PATCH",
|
||||
url: `/api/performance/cycles/${state.cycles[0].id}`,
|
||||
payload: {
|
||||
status: "completed",
|
||||
},
|
||||
});
|
||||
|
||||
expect(completeResponse.statusCode).toBe(200);
|
||||
expect(completeResponse.json().data).toMatchObject({
|
||||
status: "completed",
|
||||
});
|
||||
expect(performanceReviewCycle.create).toHaveBeenCalledTimes(2);
|
||||
expect(performanceReviewCycle.update).toHaveBeenCalledTimes(3);
|
||||
|
||||
await app.close();
|
||||
});
|
||||
|
||||
it("rejects non-admin users", async () => {
|
||||
const { app } = await buildApp({
|
||||
actor: {
|
||||
id: "employee-1",
|
||||
department_id: DEPARTMENT_ID,
|
||||
permissionCodes: ["employee"],
|
||||
},
|
||||
});
|
||||
|
||||
const response = await app.inject({
|
||||
method: "GET",
|
||||
url: "/api/performance/cycles",
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
await app.close();
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,396 @@
|
||||
const Fastify = require("fastify");
|
||||
|
||||
const performanceRoutes = require("../../../src/routes/performance");
|
||||
const { AppError } = require("../../../src/utils/AppError");
|
||||
|
||||
const ADMIN_ID = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
|
||||
const MANAGER_ID = "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb";
|
||||
const EMPLOYEE_ID = "cccccccc-cccc-4ccc-8ccc-cccccccccccc";
|
||||
const OTHER_EMPLOYEE_ID = "dddddddd-dddd-4ddd-8ddd-dddddddddddd";
|
||||
const DEPARTMENT_ID = "eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee";
|
||||
const ACTIVE_CYCLE_ID = "11111111-1111-4111-8111-111111111111";
|
||||
const COMPLETED_CYCLE_ID = "22222222-2222-4222-8222-222222222222";
|
||||
|
||||
function buildFeatureFlagRecord() {
|
||||
return {
|
||||
id: "flag-1",
|
||||
flag_key: "employee_lifecycle_v1",
|
||||
override_mode: "force_on",
|
||||
rollout_type: "global",
|
||||
department_ids: [],
|
||||
note: "",
|
||||
version: 1,
|
||||
created_at: new Date("2026-03-28T00:00:00.000Z"),
|
||||
created_by: null,
|
||||
updated_at: new Date("2026-03-28T00:00:00.000Z"),
|
||||
updated_by: null,
|
||||
};
|
||||
}
|
||||
|
||||
function buildCycleRow(overrides = {}) {
|
||||
return {
|
||||
id: ACTIVE_CYCLE_ID,
|
||||
name: "2026 Q2",
|
||||
cycle_type: "quarterly",
|
||||
start_date: new Date("2026-04-01T00:00:00.000Z"),
|
||||
end_date: new Date("2026-06-30T00:00:00.000Z"),
|
||||
status: "active",
|
||||
activated_at: new Date("2026-04-01T00:00:00.000Z"),
|
||||
completed_at: null,
|
||||
created_at: new Date("2026-03-29T08:00:00.000Z"),
|
||||
created_by: ADMIN_ID,
|
||||
updated_at: new Date("2026-03-29T08:00:00.000Z"),
|
||||
updated_by: ADMIN_ID,
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
function buildEmployeeRow(overrides = {}) {
|
||||
return {
|
||||
id: EMPLOYEE_ID,
|
||||
employee_no: "E001",
|
||||
name: "Alice",
|
||||
title: "专员",
|
||||
status: "active",
|
||||
direct_manager_id: MANAGER_ID,
|
||||
avatar_path: null,
|
||||
department: { id: DEPARTMENT_ID, name: "行政部" },
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
function buildReviewRow(overrides = {}) {
|
||||
return {
|
||||
id: "33333333-3333-4333-8333-333333333333",
|
||||
cycle_id: COMPLETED_CYCLE_ID,
|
||||
employee_id: EMPLOYEE_ID,
|
||||
reviewer_employee_id: MANAGER_ID,
|
||||
overall_score: 4,
|
||||
comment: "完成良好",
|
||||
created_at: new Date("2026-03-28T08:00:00.000Z"),
|
||||
created_by: MANAGER_ID,
|
||||
updated_at: new Date("2026-03-28T08:00:00.000Z"),
|
||||
updated_by: MANAGER_ID,
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
async function buildApp({
|
||||
actor = { id: MANAGER_ID, department_id: DEPARTMENT_ID, permissionCodes: ["employee"] },
|
||||
} = {}) {
|
||||
const app = Fastify();
|
||||
const state = {
|
||||
cycles: [
|
||||
buildCycleRow(),
|
||||
buildCycleRow({
|
||||
id: COMPLETED_CYCLE_ID,
|
||||
name: "2026 Q1",
|
||||
start_date: new Date("2026-01-01T00:00:00.000Z"),
|
||||
end_date: new Date("2026-03-31T00:00:00.000Z"),
|
||||
status: "completed",
|
||||
activated_at: new Date("2026-01-01T00:00:00.000Z"),
|
||||
completed_at: new Date("2026-03-31T10:00:00.000Z"),
|
||||
}),
|
||||
],
|
||||
employees: [
|
||||
buildEmployeeRow(),
|
||||
buildEmployeeRow({
|
||||
id: MANAGER_ID,
|
||||
employee_no: "M001",
|
||||
name: "Bob",
|
||||
title: "经理",
|
||||
direct_manager_id: null,
|
||||
}),
|
||||
buildEmployeeRow({
|
||||
id: OTHER_EMPLOYEE_ID,
|
||||
employee_no: "E002",
|
||||
name: "Carol",
|
||||
direct_manager_id: ADMIN_ID,
|
||||
}),
|
||||
],
|
||||
reviews: [buildReviewRow()],
|
||||
dimensions: [
|
||||
{
|
||||
id: "dim-1",
|
||||
review_id: "33333333-3333-4333-8333-333333333333",
|
||||
dimension_type: "work_quality",
|
||||
score: 4,
|
||||
},
|
||||
],
|
||||
};
|
||||
|
||||
function hydrateReview(review) {
|
||||
const employee = state.employees.find((item) => item.id === review.employee_id);
|
||||
const reviewer = state.employees.find((item) => item.id === review.reviewer_employee_id);
|
||||
return {
|
||||
...review,
|
||||
employee,
|
||||
reviewer_employee: reviewer
|
||||
? {
|
||||
id: reviewer.id,
|
||||
employee_no: reviewer.employee_no,
|
||||
name: reviewer.name,
|
||||
}
|
||||
: null,
|
||||
dimensions: state.dimensions.filter((item) => item.review_id === review.id),
|
||||
};
|
||||
}
|
||||
|
||||
const performanceReview = {
|
||||
findMany: vi.fn(async ({ where }) => {
|
||||
let rows = [...state.reviews];
|
||||
if (typeof where?.cycle_id === "string") {
|
||||
rows = rows.filter((item) => item.cycle_id === where.cycle_id);
|
||||
}
|
||||
if (where?.cycle_id?.in) {
|
||||
rows = rows.filter((item) => where.cycle_id.in.includes(item.cycle_id));
|
||||
}
|
||||
if (where?.employee_id) {
|
||||
rows = rows.filter((item) => item.employee_id === where.employee_id);
|
||||
}
|
||||
return rows.map(hydrateReview);
|
||||
}),
|
||||
findFirst: vi.fn(async ({ where }) => {
|
||||
const review = state.reviews.find((item) => item.cycle_id === where.cycle_id && item.employee_id === where.employee_id);
|
||||
return review ? hydrateReview(review) : null;
|
||||
}),
|
||||
findUnique: vi.fn(async ({ where }) => {
|
||||
const review = state.reviews.find((item) => item.id === where.id);
|
||||
return review ? hydrateReview(review) : null;
|
||||
}),
|
||||
create: vi.fn(async ({ data }) => {
|
||||
const review = buildReviewRow({
|
||||
id: "44444444-4444-4444-8444-444444444444",
|
||||
cycle_id: data.cycle_id,
|
||||
employee_id: data.employee_id,
|
||||
reviewer_employee_id: data.reviewer_employee_id,
|
||||
overall_score: data.overall_score,
|
||||
comment: data.comment,
|
||||
created_by: data.created_by,
|
||||
updated_by: data.updated_by,
|
||||
});
|
||||
state.reviews.push(review);
|
||||
return review;
|
||||
}),
|
||||
update: vi.fn(async ({ where, data }) => {
|
||||
const index = state.reviews.findIndex((item) => item.id === where.id);
|
||||
state.reviews[index] = {
|
||||
...state.reviews[index],
|
||||
...data,
|
||||
};
|
||||
return state.reviews[index];
|
||||
}),
|
||||
};
|
||||
|
||||
const performanceReviewDimension = {
|
||||
deleteMany: vi.fn(async ({ where }) => {
|
||||
state.dimensions = state.dimensions.filter((item) => item.review_id !== where.review_id);
|
||||
return { count: 1 };
|
||||
}),
|
||||
createMany: vi.fn(async ({ data }) => {
|
||||
state.dimensions.push(
|
||||
...data.map((item, index) => ({
|
||||
id: `dim-${state.dimensions.length + index + 1}`,
|
||||
review_id: item.review_id,
|
||||
dimension_type: item.dimension_type,
|
||||
score: item.score,
|
||||
})),
|
||||
);
|
||||
return { count: data.length };
|
||||
}),
|
||||
};
|
||||
|
||||
app.decorate("config", { appTimezone: "Asia/Shanghai", employeeLifecycleEnabled: true });
|
||||
app.decorate("authenticate", async (request) => {
|
||||
request.employee = actor;
|
||||
});
|
||||
app.decorate("requirePermission", (permissionCode) => async (request) => {
|
||||
request.employee = actor;
|
||||
const codes = actor.permissionCodes ?? [];
|
||||
if (!codes.includes("*") && !codes.includes(permissionCode)) {
|
||||
throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403 });
|
||||
}
|
||||
});
|
||||
app.decorate("hasPermission", (employee, permissionCode) => {
|
||||
const codes = employee.permissionCodes ?? [];
|
||||
return codes.includes("*") || codes.includes(permissionCode);
|
||||
});
|
||||
app.decorate("prisma", {
|
||||
featureFlag: {
|
||||
findUnique: vi.fn().mockResolvedValue(buildFeatureFlagRecord()),
|
||||
},
|
||||
employee: {
|
||||
findUnique: vi.fn(async ({ where }) => state.employees.find((item) => item.id === where.id) ?? null),
|
||||
findMany: vi.fn(async ({ where }) => {
|
||||
if (where?.status === "active") {
|
||||
return state.employees.filter((item) => item.status === "active");
|
||||
}
|
||||
return [...state.employees];
|
||||
}),
|
||||
},
|
||||
performanceReviewCycle: {
|
||||
findMany: vi.fn(async ({ where }) =>
|
||||
state.cycles.filter((item) => {
|
||||
if (!where) {
|
||||
return true;
|
||||
}
|
||||
if (where?.status?.in) {
|
||||
return where.status.in.includes(item.status);
|
||||
}
|
||||
return item.status === where?.status;
|
||||
}),
|
||||
),
|
||||
findUnique: vi.fn(async ({ where }) => state.cycles.find((item) => item.id === where.id) ?? null),
|
||||
findFirst: vi.fn(async ({ where }) =>
|
||||
state.cycles.find((item) => {
|
||||
if (where?.status && item.status !== where.status) {
|
||||
return false;
|
||||
}
|
||||
if (where?.id?.not && item.id === where.id.not) {
|
||||
return false;
|
||||
}
|
||||
return true;
|
||||
}) ?? null,
|
||||
),
|
||||
},
|
||||
performanceReview,
|
||||
performanceReviewDimension,
|
||||
auditLog: {
|
||||
create: vi.fn().mockResolvedValue({}),
|
||||
},
|
||||
$transaction: vi.fn(async (callback) => callback(app.prisma)),
|
||||
});
|
||||
app.setErrorHandler((error, request, reply) => {
|
||||
reply.status(error.statusCode || 500).send({
|
||||
requestId: request.id,
|
||||
error: {
|
||||
code: error.code || "SYS_001",
|
||||
message: error.message,
|
||||
details: error.details ?? null,
|
||||
},
|
||||
});
|
||||
});
|
||||
|
||||
await app.register(performanceRoutes, { prefix: "/api" });
|
||||
return { app, state, performanceReview, performanceReviewDimension };
|
||||
}
|
||||
|
||||
describe("performance review routes", () => {
|
||||
it("allows direct managers to score direct reports in active cycles", async () => {
|
||||
const { app, state, performanceReviewDimension } = await buildApp();
|
||||
|
||||
const response = await app.inject({
|
||||
method: "PUT",
|
||||
url: `/api/performance/cycles/${ACTIVE_CYCLE_ID}/reviews/${EMPLOYEE_ID}`,
|
||||
payload: {
|
||||
overallScore: 4.5,
|
||||
comment: "表现稳定",
|
||||
dimensions: [
|
||||
{ dimensionType: "work_quality", score: 4.5 },
|
||||
{ dimensionType: "teamwork", score: 4 },
|
||||
],
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
expect(response.json().data).toMatchObject({
|
||||
employeeId: EMPLOYEE_ID,
|
||||
overallScore: 4.5,
|
||||
comment: "表现稳定",
|
||||
dimensions: [
|
||||
{ dimensionType: "work_quality", score: 4.5 },
|
||||
{ dimensionType: "teamwork", score: 4 },
|
||||
],
|
||||
});
|
||||
expect(state.reviews.find((item) => item.cycle_id === ACTIVE_CYCLE_ID && item.employee_id === EMPLOYEE_ID)).toBeTruthy();
|
||||
expect(performanceReviewDimension.createMany).toHaveBeenCalledTimes(1);
|
||||
|
||||
await app.close();
|
||||
});
|
||||
|
||||
it("returns completed results only for self viewers", async () => {
|
||||
const { app } = await buildApp({
|
||||
actor: {
|
||||
id: EMPLOYEE_ID,
|
||||
department_id: DEPARTMENT_ID,
|
||||
permissionCodes: ["employee"],
|
||||
},
|
||||
});
|
||||
|
||||
const response = await app.inject({
|
||||
method: "GET",
|
||||
url: `/api/performance/employees/${EMPLOYEE_ID}/reviews`,
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(200);
|
||||
expect(response.json().data.viewerRole).toBe("self");
|
||||
expect(response.json().data.items).toHaveLength(1);
|
||||
expect(response.json().data.items[0].cycle.status).toBe("completed");
|
||||
expect(response.json().data.items[0].review.overallScore).toBe(4);
|
||||
|
||||
await app.close();
|
||||
});
|
||||
|
||||
it("rejects non-manager non-admin access to other employees", async () => {
|
||||
const { app } = await buildApp({
|
||||
actor: {
|
||||
id: OTHER_EMPLOYEE_ID,
|
||||
department_id: DEPARTMENT_ID,
|
||||
permissionCodes: ["employee"],
|
||||
},
|
||||
});
|
||||
|
||||
const response = await app.inject({
|
||||
method: "PUT",
|
||||
url: `/api/performance/cycles/${ACTIVE_CYCLE_ID}/reviews/${EMPLOYEE_ID}`,
|
||||
payload: {
|
||||
overallScore: 4,
|
||||
comment: "无权限",
|
||||
},
|
||||
});
|
||||
|
||||
expect(response.statusCode).toBe(403);
|
||||
|
||||
await app.close();
|
||||
});
|
||||
|
||||
it("blocks updates on completed cycles and lets admins inspect cycle overviews", async () => {
|
||||
const { app } = await buildApp({
|
||||
actor: {
|
||||
id: ADMIN_ID,
|
||||
department_id: DEPARTMENT_ID,
|
||||
permissionCodes: ["system.users"],
|
||||
},
|
||||
});
|
||||
|
||||
const overviewResponse = await app.inject({
|
||||
method: "GET",
|
||||
url: `/api/performance/cycles/${ACTIVE_CYCLE_ID}/reviews`,
|
||||
});
|
||||
|
||||
expect(overviewResponse.statusCode).toBe(200);
|
||||
expect(overviewResponse.json().data.items).toEqual(
|
||||
expect.arrayContaining([
|
||||
expect.objectContaining({
|
||||
employee: expect.objectContaining({ id: EMPLOYEE_ID }),
|
||||
}),
|
||||
]),
|
||||
);
|
||||
|
||||
const completedResponse = await app.inject({
|
||||
method: "PUT",
|
||||
url: `/api/performance/cycles/${COMPLETED_CYCLE_ID}/reviews/${EMPLOYEE_ID}`,
|
||||
payload: {
|
||||
overallScore: 4.5,
|
||||
comment: "不允许修改",
|
||||
},
|
||||
});
|
||||
|
||||
expect(completedResponse.statusCode).toBe(409);
|
||||
expect(completedResponse.json().error.details).toMatchObject({
|
||||
cycle: "active_cycle_required",
|
||||
});
|
||||
|
||||
await app.close();
|
||||
});
|
||||
});
|
||||
在新工单中引用
屏蔽一个用户