xiaoshu-app/scripts/smoke-operations-functions.mjs

#!/usr/bin/env node

import { randomBytes } from 'node:crypto';

const APP_ID = process.env.XIAOSHU_PARSE_APP_ID || '7pIbDBJmKx_main';
const MASTER_KEY = process.env.XIAOSHU_MASTER_KEY || '';
const PARSE_URL = (process.env.XIAOSHU_PARSE_URL || 'https://server.xiaoshu.pro/parse').replace(/\/$/, '');
const FUNCTION_URL = (process.env.XIAOSHU_FUNCTION_URL || 'https://server.xiaoshu.pro/api/functions').replace(/\/$/, '');
if (!MASTER_KEY) throw new Error('缺少 XIAOSHU_MASTER_KEY');

async function request(url, init = {}, master = false) {
  const response = await fetch(url, { ...init, headers: { 'X-Parse-Application-Id': APP_ID, ...(master ? { 'X-Parse-Master-Key': MASTER_KEY } : {}), 'Content-Type': 'application/json', ...(init.headers || {}) } });
  const payload = await response.json().catch(() => ({}));
  if (!response.ok) throw new Error(`${response.status}: ${payload.message || payload.error || JSON.stringify(payload)}`);
  return payload;
}

async function call(path, token, params, expectedStatus = 200) {
  const response = await fetch(`${FUNCTION_URL}/${path}`, { method: 'POST', headers: { 'X-Parse-Application-Id': APP_ID, 'Content-Type': 'application/json' }, body: JSON.stringify({ token, params }) });
  const payload = await response.json().catch(() => ({}));
  if (response.status !== expectedStatus) throw new Error(`${path} 期望 ${expectedStatus}，实际 ${response.status}: ${payload.message || payload.error || ''}`);
  if (expectedStatus === 200 && payload.success !== true) throw new Error(payload.message || `${path} 返回失败`);
  return payload;
}

let userId = '';
try {
  const companies = await request(`${PARSE_URL}/classes/Company?limit=1&keys=objectId`, {}, true);
  const companyId = companies.results?.[0]?.objectId;
  if (!companyId) throw new Error('没有可用于运营网关测试的帐套');
  const company = { __type: 'Pointer', className: 'Company', objectId: companyId };
  const username = `codex_ops_smoke_${Date.now()}`;
  const password = randomBytes(24).toString('base64url');
  const created = await request(`${PARSE_URL}/users`, { method: 'POST', body: JSON.stringify({ username, password, isAdmin: true, roles: ['admin', 'ops-manager'], company }) }, true);
  userId = created.objectId;
  const login = await request(`${PARSE_URL}/login`, { method: 'POST', body: JSON.stringify({ username, password }) });
  const token = login.sessionToken;
  if (!token) throw new Error('临时运营管理员未返回会话');

  const dashboard = (await call('xiaoshu/ops/gateway', token, { operation: 'ops/dashboard/summary' })).data;
  if (dashboard.identity?.operationsRole !== 'ops-manager' || !Array.isArray(dashboard.metrics) || dashboard.metrics.length < 4) throw new Error('运营工作台返回结构无效');

  const users = (await call('xiaoshu/ops/gateway', token, { operation: 'ops/users/list', page: 1, pageSize: 20, search: '' })).data;
  if (!Array.isArray(users.items) || !users.items.length || users.items.some((item) => 'legacyUserData' in item || 'legacyPasswordHash' in item || 'ACL' in item)) throw new Error('用户业务投影为空或泄漏技术字段');
  if (users.items.some((item) => item.username === username) || users.items.some((item) => !item.learningStatus || !item.learningStatusLabel) || !users.refreshedAt) throw new Error('管理员过滤、学习状态或刷新时间无效');
  const learningCounts = {};
  for (const learningStatus of ['trial', 'studying', 'completed', 'not_started', 'not_applicable']) {
    const result = (await call('xiaoshu/ops/gateway', token, { operation: 'ops/users/list', page: 1, pageSize: 1, search: '', filters: { learningStatus } })).data;
    learningCounts[learningStatus] = result.total;
  }
  if (Object.values(learningCounts).reduce((sum, value) => sum + Number(value || 0), 0) !== users.total) throw new Error(`学习状态分类数量与会员总数不一致：${JSON.stringify(learningCounts)}`);
  const named = (await call('xiaoshu/ops/gateway', token, { operation: 'ops/users/list', page: 1, pageSize: 20, search: '万宇昊' })).data;
  if (!named.items?.some((item) => item.displayName === '万宇昊')) throw new Error('用户显示名称兜底未找到“万宇昊”');
  const legacyAdmin = (await call('xiaoshu/ops/gateway', token, { operation: 'ops/users/list', page: 1, pageSize: 20, search: 'admin' })).data;
  if (legacyAdmin.items?.some((item) => String(item.username || '').toLowerCase() === 'admin')) throw new Error('Manager 表中的历史管理员仍混入会员列表');

  const coaches = (await call('xiaoshu/ops/gateway', token, { operation: 'ops/coaches/list', page: 1, pageSize: 20, search: '' })).data;
  if (!Array.isArray(coaches.items) || coaches.items.some((item) => !item.userId || !item.displayName)) throw new Error('陪练老师业务投影无效');
  const today = new Date().toISOString().slice(0, 10);
  const schedule = (await call('xiaoshu/ops/gateway', token, { operation: 'ops/schedule/calendar', dateFrom: today, dateTo: today, filters: {} })).data;
  if (!Array.isArray(schedule.appointments) || !Array.isArray(schedule.coaches) || !Array.isArray(schedule.members) || !Array.isArray(schedule.courses) || !schedule.refreshedAt) throw new Error('排课中心日历或业务选项结构无效');
  const rates = (await call('xiaoshu/ops/gateway', token, { operation: 'ops/pay-rates/list', page: 1, pageSize: 100 })).data;
  for (const expected of [{ type: 1, amount: 20, hours: .5 }, { type: 2, amount: 40, hours: 1 }, { type: 3, amount: 40, hours: 1 }]) {
    if (!rates.items?.some((item) => item.classType === expected.type && item.amount === expected.amount && item.durationHours === expected.hours)) throw new Error(`原系统课酬规则缺失：课型 ${expected.type}`);
  }
  if (rates.items?.some((item) => item.classType === 4 && item.isDefault)) throw new Error('课型4不应存在默认工资规则');
  const payrolls = (await call('xiaoshu/ops/gateway', token, { operation: 'ops/payroll/list', page: 1, pageSize: 20 })).data;
  if (!Array.isArray(payrolls.items) || typeof payrolls.total !== 'number') throw new Error('工资批次未返回统一分页结构');

  for (const operation of ['ops/relations/list', 'ops/course-bindings/list', 'ops/appointments/list', 'ops/lessons/list', 'ops/learning-records/list', 'ops/finance/list', 'ops/money-logs/list']) {
    const page = (await call('xiaoshu/ops/gateway', token, { operation, page: 1, pageSize: 5, search: '' })).data;
    if (!Array.isArray(page.items) || typeof page.total !== 'number') throw new Error(`${operation} 未返回统一分页结构`);
  }

  const denied = await call('xiaoshu/admin/gateway', token, { operation: 'catalog' }, 403);
  if (denied.success !== false) throw new Error('普通运营管理员仍可访问技术数据目录');
  console.log(`Operations smoke passed: users=${users.total}, coaches=${coaches.total}, appointments=${schedule.appointments.length}, metrics=${dashboard.metrics.length}, learning=${JSON.stringify(learningCounts)}.`);
} finally {
  if (userId) {
    const sessions = await request(`${PARSE_URL}/classes/_Session?where=${encodeURIComponent(JSON.stringify({ user: { __type: 'Pointer', className: '_User', objectId: userId } }))}&limit=1000`, {}, true).catch(() => ({ results: [] }));
    for (const session of sessions.results || []) await request(`${PARSE_URL}/classes/_Session/${session.objectId}`, { method: 'DELETE' }, true).catch(() => undefined);
    await request(`${PARSE_URL}/users/${userId}`, { method: 'DELETE' }, true).catch(() => undefined);
  }
}