FL6 完善财务台账与导出审计

server/src/routes/apOperations.js

@@ -2,11 +2,30 @@ const { AppError } = require("../utils/AppError");
 const { sendData } = require("../utils/reply");
 const { FEATURE_FLAG_KEYS, evaluateFeatureFlag } = require("../services/featureFlags");
 const { BUDGET_RISK_CODES, buildPersistedRiskFlag, toMoneyNumber, toMoneyString } = require("../services/feeControl");
+const { z } = require("zod");
+const {
+  REIMBURSEMENT_LEDGER_INVOICE_STATUS_VALUES,
+  REIMBURSEMENT_LEDGER_PAYMENT_STATUS_VALUES,
+  REIMBURSEMENT_LEDGER_STATUS_VALUES,
+  listFinanceLedger,
+} = require("../services/financeLedger");
+
+const FINANCE_LEDGER_PERMISSION_CODES = ["payment.batch.manage", "risk.review.manage", "expense.finance.pay"];
+
+const FINANCE_LEDGER_QUERY_SCHEMA = z.object({
+  page: z.coerce.number().int().min(1).optional(),
+  pageSize: z.coerce.number().int().min(1).max(100).optional(),
+  status: z.enum(REIMBURSEMENT_LEDGER_STATUS_VALUES).optional(),
+  paymentStatus: z.enum(REIMBURSEMENT_LEDGER_PAYMENT_STATUS_VALUES).optional(),
+  invoiceStatus: z.enum(REIMBURSEMENT_LEDGER_INVOICE_STATUS_VALUES).optional(),
+  dateFrom: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional(),
+  dateTo: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional(),
+  q: z.string().trim().max(100).optional(),
+});
 
 function ensureReadPermission(fastify, request) {
   if (
-    !fastify.hasPermission(request.employee, "payment.batch.manage") &&
-    !fastify.hasPermission(request.employee, "risk.review.manage")
+    !FINANCE_LEDGER_PERMISSION_CODES.some((permission) => fastify.hasPermission(request.employee, permission))
   ) {
     throw new AppError({ code: "PERM_001", message: "无权限", statusCode: 403 });
   }
@@ -182,6 +201,24 @@ async function apOperationsRoutes(fastify) {
       partialMatchItems: anomalies.map(mapReconciliationAnomaly),
     });
   });
+
+  fastify.get("/ap-operations/reimbursement-ledger", { preHandler: fastify.authenticate }, async (request, reply) => {
+    await ensureFeatureEnabled(fastify);
+    ensureReadPermission(fastify, request);
+
+    const parsed = FINANCE_LEDGER_QUERY_SCHEMA.safeParse(request.query ?? {});
+    if (!parsed.success) {
+      throw new AppError({
+        code: "VALID_001",
+        message: "参数校验失败",
+        statusCode: 400,
+        details: parsed.error.flatten(),
+      });
+    }
+
+    const ledger = await listFinanceLedger(fastify.prisma, parsed.data);
+    return sendData(reply, request, ledger);
+  });
 }
 
 module.exports = apOperationsRoutes;