feat: harden platform workflows and UI governance

2026-07-22 14:14:55 +08:00
parent ef957f7daa
commit 0f223f7f91
80 changed files with 4958 additions and 764 deletions
@@ -0,0 +1,110 @@
+import { BadRequestException, ConflictException } from '@nestjs/common';
+import { DeletionGovernanceService } from './deletion-governance.service';
+
+describe('DeletionGovernanceService', () => {
+  const now = new Date('2026-07-21T10:00:00.000Z');
+
+  function setup() {
+    const tx = {
+      operationLog: { findFirst: jest.fn(), create: jest.fn() },
+      smsChannel: { updateMany: jest.fn() },
+      smsSignature: { updateMany: jest.fn() },
+      smsTemplate: { updateMany: jest.fn() },
+    };
+    const prisma = {
+      operationLog: { findFirst: jest.fn() },
+      smsChannel: { findUnique: jest.fn() },
+      smsSignature: { findFirst: jest.fn() },
+      smsTemplate: { findFirst: jest.fn() },
+      $transaction: jest.fn((callback: (client: typeof tx) => unknown) => callback(tx)),
+    };
+    return { service: new DeletionGovernanceService(prisma as never), prisma, tx };
+  }
+
+  it('blocks channel deletion when a live group still references it', async () => {
+    const { service, prisma } = setup();
+    prisma.smsChannel.findUnique.mockResolvedValue({
+      id: 'channel-1', name: '移动主通道', code: 'CH-1', status: 'active', updatedAt: now,
+      groupItems: [{ priority: 10, group: { name: '移动主通道组' } }], routeRules: [], connectionStates: [], reportTasks: [],
+    });
+
+    const result = await service.preflight('channel', 'channel-1');
+
+    expect(result.allowedActions).toEqual([]);
+    expect(result.blockedReasons).toContain('引用该通道的通道组共 1 项，请先解除或完成');
+    expect(result.dependencies[0].items).toEqual(['移动主通道组（优先级 10）']);
+  });
+
+  it('returns an allowed template preflight scoped to the client tenant', async () => {
+    const { service, prisma } = setup();
+    prisma.smsTemplate.findFirst.mockResolvedValue({
+      id: 'template-1', name: '验证码模板', auditStatus: 'approved', updatedAt: now,
+      tenant: { name: '示例企业' }, application: { name: '验证码应用' }, signature: { name: '示例签名' },
+      sendTasks: [], batchTasks: [],
+    });
+
+    const result = await service.preflight('template', 'template-1', 'tenant-1');
+
+    expect(prisma.smsTemplate.findFirst).toHaveBeenCalledWith(expect.objectContaining({ where: { id: 'template-1', tenantId: 'tenant-1' } }));
+    expect(result.allowedActions).toEqual(['delete']);
+    expect(result.identity.tenant).toBe('示例企业');
+  });
+
+  it('blocks signature deletion and exposes the referencing template and drainage items', async () => {
+    const { service, prisma } = setup();
+    prisma.smsSignature.findFirst.mockResolvedValue({
+      id: 'signature-1', name: '示例签名', auditStatus: 'approved', updatedAt: now,
+      tenant: { name: '示例企业' }, application: { name: '验证码应用' },
+      templates: [{ id: 'template-1', name: '验证码模板' }],
+      drainageItems: [{ id: 'drainage-1', siteName: '示例站点' }], reportTasks: [],
+    });
+
+    const result = await service.preflight('signature', 'signature-1', 'tenant-1');
+
+    expect(result.allowedActions).toEqual([]);
+    expect(result.dependencies).toEqual(expect.arrayContaining([
+      expect.objectContaining({ kind: 'templates', count: 1, items: ['验证码模板（template-1）'] }),
+      expect.objectContaining({ kind: 'drainage', count: 1, items: ['示例站点（drainage-1）'] }),
+    ]));
+  });
+
+  it('requires version, idempotency key and a meaningful reason', async () => {
+    const { service } = setup();
+    await expect(service.delete('template', 'template-1', {})).rejects.toBeInstanceOf(BadRequestException);
+    await expect(service.delete('template', 'template-1', { expectedUpdatedAt: now.toISOString(), idempotencyKey: 'key', reason: '短' })).rejects.toBeInstanceOf(BadRequestException);
+  });
+
+  it('soft deletes once and writes an auditable operation number', async () => {
+    const { service, prisma, tx } = setup();
+    prisma.operationLog.findFirst.mockResolvedValue(null);
+    prisma.smsTemplate.findFirst.mockResolvedValue({
+      id: 'template-1', name: '验证码模板', auditStatus: 'approved', updatedAt: now,
+      tenant: { name: '示例企业' }, application: { name: '验证码应用' }, signature: null,
+      sendTasks: [], batchTasks: [],
+    });
+    tx.operationLog.findFirst.mockResolvedValue(null);
+    tx.smsTemplate.updateMany.mockResolvedValue({ count: 1 });
+    tx.operationLog.create.mockResolvedValue({ id: 'operation-1' });
+
+    const result = await service.delete('template', 'template-1', {
+      expectedUpdatedAt: now.toISOString(), idempotencyKey: 'delete-template-1', reason: '测试删除治理', operatorId: 'user-1',
+    }, 'tenant-1');
+
+    expect(result).toEqual({ operationId: 'operation-1', status: 'deleted', replayed: false });
+    expect(tx.smsTemplate.updateMany).toHaveBeenCalledWith(expect.objectContaining({ data: { auditStatus: 'deleted' } }));
+    expect(tx.operationLog.create).toHaveBeenCalledWith(expect.objectContaining({ data: expect.objectContaining({ action: 'governance.delete', userId: 'user-1' }) }));
+  });
+
+  it('rejects a stale optimistic-lock version', async () => {
+    const { service, prisma } = setup();
+    prisma.operationLog.findFirst.mockResolvedValue(null);
+    prisma.smsTemplate.findFirst.mockResolvedValue({
+      id: 'template-1', name: '验证码模板', auditStatus: 'approved', updatedAt: now,
+      tenant: { name: '示例企业' }, application: { name: '验证码应用' }, signature: null,
+      sendTasks: [], batchTasks: [],
+    });
+    await expect(service.delete('template', 'template-1', {
+      expectedUpdatedAt: '2026-07-20T10:00:00.000Z', idempotencyKey: 'stale', reason: '测试版本冲突',
+    }, 'tenant-1')).rejects.toBeInstanceOf(ConflictException);
+  });
+});