fix(ops-backend/service-station): close Phase 19 KEEP-VERIFY — 25 defects (unreachable announcements + station write privilege escalation; banner 500 + soft-delete leak; content publish dead-end; program approval dead-end/draft leak/zero counts/missing withdraw; zero-coverage test schema) ; add V042 announcement chain + 34 guard tests; full regression 602 green

Backend
- Service Station: expose the 「临时公告」 chain end-to-end (V042 table/service existed
  but had ZERO endpoints -> both admin and miniapp could never reach it): 5 operator
  endpoints (list/create/update/publish/archive) + 1 user-facing read endpoint.
- Fix privilege escalation: create/update were guarded only by the class-level
  service_location.view, making V015's service_location.manage a never-used dead
  permission -> read-only roles could edit stations. Permissions moved to method level.
- Add ServiceLocationOperatorController to OperatorEndpointPermissionCoverageTest
  (it was NOT scanned, which is why the escalation stayed invisible).
- Add create/update validation (address NOT NULL + status CHECK only blew up on PG).
- Banner: validation failures threw bare RuntimeException -> 500; now VALIDATION_ERROR
  -> 400. Add deleted_at IS NULL to both home queries (soft-deleted banners stayed live).
- Content: operator list/detail split (admin «publish» was a dead end because it reused
  the published-only public API); category deactivate/reactivate; article body on edit.
- Service Program: operator member list now includes pending (approval reachable);
  active-only public visibility (draft leak); memberCount/pendingCount aggregation;
  withdraw/removeMember; reuse row on re-apply (UNIQUE(program_id,user_id) crash).
- MeController: add the missing GET /me/service-history route.

Schema / guards
- schema-h2.sql: add service_location_announcements (+ chk_announcement_status) and
  content_categories (+ uk_content_category_code, chk_category_status); move both into
  REQUIRED_IN_TEST_SCHEMA. MigrationValidationTest baseline 41 -> 42.
- V11PermissionMatrixContractTest now scans ALL migrations instead of hardcoding V015+V029.
- New: ServiceLocationAnnouncementPhase19IntegrationTest (24),
  ServiceLocationControllerPermissionContractTest (5),
  ServiceLocationAnnouncementConstraintParityTest (5, prod DDL <-> test schema <->
  backend whitelist <-> admin labels).

Frontend
- admin-web: ServiceStationView gains announcement management (statuses, create/edit,
  publish/archive with confirm, expiry); write buttons gated by service_location.manage.
- miniapp: U50 renders the 临时公告 block via new serviceStationService; page no longer
  talks to utils/api directly; announcement failure degrades to [] instead of erroring.
- ui-tests: U37 four-group + U50 announcement contracts; /home assertion retargeted to
  the service layer.

Verification
- Negative verification: 3 injected defects (drop soft-delete filter / drop test-schema
  CHECK / downgrade write endpoint to view) -> 4 named tests fail precisely, no
  collateral failures; restored, NEG-VAL residue = 0.
- Backend full regression: 602 tests, 0 failures, 0 errors, 3 skipped (baseline 420).
- admin-web: vue-tsc --noEmit EXIT=0, vite build EXIT=0. Miniapp: tsc --noEmit EXIT=0.
- ui-tests 14/14 PASS.
This commit is contained in:
WorkBuddy
2026-09-17 22:21:31 +08:00
parent 3f60611a74
commit 72b4e9b846
70 changed files with 5847 additions and 308 deletions
@@ -1 +1,92 @@
Page({data:{date:'',service:'请选择服务项目',services:['资料填写协助','公益红娘咨询','活动报名指导','婚恋咨询预约'],note:''},chooseService(e){this.setData({service:this.data.services[Number(e.detail.value)]})},chooseDate(e){this.setData({date:e.detail.value})},submit(){if(!this.data.date)return wx.showToast({title:'请选择预约日期',icon:'none'});wx.showModal({title:'预约已提交',content:'工作人员确认后会通过平台通知你。',showCancel:false,success(){wx.navigateTo({url:'/pages/my-appointments/my-appointments'})}})}})
/**
* U51 服务预约
*
* Phase 19:此前提交只弹本地 Modal(后端收不到任何记录),属"假成功"。
* 现接入 POST /service-appointments:来源由服务端强制为 user_self,
* 前端**不传** requestSource / createdByOperatorId / userId(防伪造运营代登记身份)。
*
* 站点上下文:从 U50 服务站页跳转时携带 `?serviceLocationId=`,本页解析后
* 原样回传,保证预约真正落在该站点;站点名仅作展示,解析失败不阻断提交。
*/
const { serviceAppointmentService } = require('../../services');
const SERVICE_OPTIONS = [
{ label: '到站资料协助', type: 'station_visit' },
{ label: '公益红娘咨询', type: 'matchmaker' },
{ label: '活动报名指导', type: 'station_visit' },
{ label: '婚恋咨询预约', type: 'counselor_consultation' },
];
Page({
data: {
services: SERVICE_OPTIONS.map((option) => option.label),
service: '请选择服务项目',
date: '',
note: '',
serviceLocationId: '',
serviceLocationName: '',
submitting: false,
},
selectedIndex: -1,
onLoad(options) {
const raw = options && options.serviceLocationId;
const serviceLocationId = raw ? decodeURIComponent(raw).trim() : '';
if (!serviceLocationId) {
return;
}
this.setData({ serviceLocationId });
this.resolveStationName(serviceLocationId);
},
async resolveStationName(serviceLocationId) {
const location = await serviceAppointmentService.getCurrentServiceLocation();
if (location && location.id === serviceLocationId) {
this.setData({ serviceLocationName: location.name });
} else {
// 站点信息不可得时仍保留归属 ID,仅以占位文案展示,避免误导为空
this.setData({ serviceLocationName: '已选服务站点' });
}
},
chooseService(event) {
const index = Number(event.detail.value);
this.selectedIndex = index;
this.setData({ service: SERVICE_OPTIONS[index].label });
},
chooseDate(event) {
this.setData({ date: event.detail.value });
},
onNoteInput(event) {
this.setData({ note: event.detail.value });
},
async submit() {
if (this.selectedIndex < 0) {
wx.showToast({ title: '请选择服务项目', icon: 'none' });
return;
}
if (!this.data.date) {
wx.showToast({ title: '请选择预约日期', icon: 'none' });
return;
}
if (this.data.submitting) {
return;
}
this.setData({ submitting: true });
try {
await serviceAppointmentService.createAppointment({
serviceLocationId: this.data.serviceLocationId || undefined,
serviceType: SERVICE_OPTIONS[this.selectedIndex].type,
preferredDate: this.data.date,
userNote: this.data.note,
});
wx.showModal({
title: '预约已提交',
content: '工作人员确认后会通过平台通知你。',
showCancel: false,
success: () => wx.navigateTo({ url: '/pages/my-appointments/my-appointments' }),
});
} catch (error) {
wx.showToast({ title: '提交失败,请稍后重试', icon: 'none' });
} finally {
this.setData({ submitting: false });
}
},
});