feat(finance): add financial disclosure publishing

2026-08-13 17:17:33 +08:00
parent 39a2e53e61
commit 65d23eab4a
49 changed files with 2096 additions and 3 deletions
@@ -0,0 +1,91 @@
+import {
+  Body,
+  Controller,
+  Get,
+  Inject,
+  Param,
+  Patch,
+  Post,
+  Query,
+  Req,
+  ValidationPipe,
+} from '@nestjs/common';
+import { PERMISSION_CODES } from '@lehuo/contracts';
+import { RequireSessionChannel } from '../auth/decorators/require-session-channel.decorator';
+import { CurrentAuth } from '../common/decorators/current-auth.decorator';
+import { Public } from '../common/decorators/public.decorator';
+import { RequirePermissions } from '../common/decorators/require-permissions.decorator';
+import type { AuthContext, RequestContext } from '../common/request-context';
+import { SessionChannel } from '../generated/prisma/enums';
+import {
+  CreateFinancialDisclosureDto,
+  FinancialDisclosureQueryDto,
+  TransitionFinancialDisclosureDto,
+  UpdateFinancialDisclosureDto,
+} from './dto/financial-disclosure.dto';
+import { FinancialDisclosuresService } from './financial-disclosures.service';
+
+const strict = (expectedType: new () => object) =>
+  new ValidationPipe({
+    transform: true,
+    whitelist: true,
+    forbidNonWhitelisted: true,
+    expectedType,
+  });
+
+@Controller('api/v1/financial-disclosures')
+@Public()
+export class PublicFinancialDisclosuresController {
+  constructor(
+    @Inject(FinancialDisclosuresService) private readonly service: FinancialDisclosuresService,
+  ) {}
+  @Get() list(@Query(strict(FinancialDisclosureQueryDto)) q: FinancialDisclosureQueryDto) {
+    return this.service.listPublic(q);
+  }
+  @Get(':publicId') get(@Param('publicId') id: string) {
+    return this.service.getPublic(id);
+  }
+}
+
+@Controller('api/v1/admin/financial-disclosures')
+@RequireSessionChannel(SessionChannel.ADMIN)
+export class AdminFinancialDisclosuresController {
+  constructor(
+    @Inject(FinancialDisclosuresService) private readonly service: FinancialDisclosuresService,
+  ) {}
+  @Get() @RequirePermissions(PERMISSION_CODES.FINANCIAL_DISCLOSURES_READ) list(
+    @Query(strict(FinancialDisclosureQueryDto)) q: FinancialDisclosureQueryDto,
+  ) {
+    return this.service.listAdmin(q);
+  }
+  @Get(':publicId') @RequirePermissions(PERMISSION_CODES.FINANCIAL_DISCLOSURES_READ) get(
+    @Param('publicId') id: string,
+  ) {
+    return this.service.getAdmin(id);
+  }
+  @Post() @RequirePermissions(PERMISSION_CODES.FINANCIAL_DISCLOSURES_MANAGE) create(
+    @Body(strict(CreateFinancialDisclosureDto)) input: CreateFinancialDisclosureDto,
+    @CurrentAuth() actor: AuthContext,
+    @Req() req: RequestContext,
+  ) {
+    return this.service.create(input, actor, req);
+  }
+  @Patch(':publicId') @RequirePermissions(PERMISSION_CODES.FINANCIAL_DISCLOSURES_MANAGE) update(
+    @Param('publicId') id: string,
+    @Body(strict(UpdateFinancialDisclosureDto)) input: UpdateFinancialDisclosureDto,
+    @CurrentAuth() actor: AuthContext,
+    @Req() req: RequestContext,
+  ) {
+    return this.service.update(id, input, actor, req);
+  }
+  @Post(':publicId/transition')
+  @RequirePermissions(PERMISSION_CODES.FINANCIAL_DISCLOSURES_PUBLISH)
+  transition(
+    @Param('publicId') id: string,
+    @Body(strict(TransitionFinancialDisclosureDto)) input: TransitionFinancialDisclosureDto,
+    @CurrentAuth() actor: AuthContext,
+    @Req() req: RequestContext,
+  ) {
+    return this.service.transition(id, input, actor, req);
+  }
+}