171 lines
10 KiB
JavaScript
171 lines
10 KiB
JavaScript
const MODULE = 'phase3-carrier-schedule-queries'
|
|
const OPTIONS = { scenario: 'carrier-schedule-query-policy', deploymentBlocker: true }
|
|
const BASE = '/api/platform/v1/carrier-schedule-queries'
|
|
const OCEAN = '/api/platform/v1/ocean-bookings'
|
|
const PORT = '/api/platform/v1/port-schedules'
|
|
import { resolveOceanBookingMaster, oceanBookingDraft } from './ocean-booking-fixture.mjs'
|
|
|
|
function id(value) { return value == null ? '' : String(value) }
|
|
export function matchesManualScheduleScope(resource, expected) {
|
|
return Boolean(resource?.id)
|
|
&& id(resource.customerId) === id(expected.customerId)
|
|
&& id(resource.oceanBookingId) === id(expected.oceanBookingId)
|
|
&& id(resource.containerBookingId) === id(expected.containerBookingId)
|
|
}
|
|
function codeOf(response) { return response?.body?.code == null ? 'missing' : String(response.body.code) }
|
|
function data(response) { return codeOf(response) === '200' ? response.body.data : null }
|
|
function localIso(value) { return value.toISOString().slice(0, 19) }
|
|
function at(offsetMinutes) { return localIso(new Date(Date.now() + offsetMinutes * 60_000)) }
|
|
function step(context, name, response, passed, evidence) {
|
|
context.addStep(MODULE, name, response, passed, evidence, { ...OPTIONS, deploymentBlocker: !passed })
|
|
}
|
|
async function request(context, method, path, body, headers = {}) {
|
|
try {
|
|
const response = await fetch(`${context.options.gateway}${path}`, {
|
|
method,
|
|
headers: {
|
|
Accept: 'application/json', Authorization: `Bearer ${context.token}`,
|
|
...(body === undefined ? {} : { 'Content-Type': 'application/json; charset=utf-8' }), ...headers,
|
|
},
|
|
body: body === undefined ? undefined : JSON.stringify(body), signal: AbortSignal.timeout(60_000),
|
|
})
|
|
const raw = await response.text(); let payload = null
|
|
try { payload = raw ? JSON.parse(raw) : null } catch { /* bounded raw evidence */ }
|
|
return { method, path, http: response.status, body: payload, raw: payload === null ? raw.slice(0, 500) : null,
|
|
requestId: payload?.requestId || response.headers.get('x-request-id'),
|
|
traceId: payload?.traceId || response.headers.get('x-trace-id') }
|
|
} catch (error) {
|
|
return { method, path, http: 0, body: null, raw: String(error), requestId: null, traceId: null }
|
|
}
|
|
}
|
|
|
|
function oceanDraft(context, suffix, master) {
|
|
return {
|
|
...oceanBookingDraft(context, suffix, master),
|
|
departurePortCode: 'CNSZX',
|
|
departurePortName: '深圳', destinationPortCode: 'USLAX', destinationPortName: '洛杉矶',
|
|
placeOfDelivery: 'LAX', serviceTerm: 'CY-CY', freightTerm: 'NINGBO',
|
|
remark: context.marker,
|
|
parties: [
|
|
{ partyType: 'SHIPPER', partyName: `发货方-${suffix}` },
|
|
{ partyType: 'CONSIGNEE', partyName: `收货方-${suffix}` },
|
|
{ partyType: 'NOTIFY_PARTY', partyName: `通知方-${suffix}` },
|
|
],
|
|
}
|
|
}
|
|
|
|
async function ensureOcean(context, suffix, master) {
|
|
const existing = context.createdResources?.oceanBooking
|
|
if (existing?.id && id(existing.customerId) === id(master.customerId)) return { id: id(existing.id), containerBookingId: null }
|
|
const response = await request(context, 'POST', OCEAN, { expectedVersion: 0, data: oceanDraft(context, suffix, master) },
|
|
{ 'Idempotency-Key': `${context.marker}-carrier-query-ocean`.slice(0, 128) })
|
|
const detail = context.apiSuccess(MODULE, '创建船司查询隔离订舱', response, '', OPTIONS)
|
|
return { id: id(detail?.oceanBooking?.id), containerBookingId: null }
|
|
}
|
|
|
|
async function createManualSchedule(context, suffix, oceanBookingId, customerId) {
|
|
const existing = context.createdResources?.portSchedule
|
|
const expectedScope = { customerId, oceanBookingId, containerBookingId: null }
|
|
if (matchesManualScheduleScope(existing, expectedScope)) return id(existing.id)
|
|
const body = {
|
|
expectedVersion: 0,
|
|
data: {
|
|
customerId, oceanBookingId, containerBookingId: null, sourceType: 'MANUAL',
|
|
sourceName: `船司查询人工兜底-${suffix}`, sourceRef: `${context.marker}-CARRIER-MANUAL`,
|
|
vesselName: `人工船期船-${suffix}`, voyageNo: `CM${suffix}`, departurePortCode: 'CNSZX',
|
|
departurePortName: '深圳', destinationPortCode: 'USLAX', destinationPortName: '洛杉矶',
|
|
etdAt: at(10 * 24 * 60), etaAt: at(30 * 24 * 60), bookingCutoffAt: at(7 * 24 * 60),
|
|
customsCutoffAt: at(8 * 24 * 60), portCutoffAt: at(9 * 24 * 60),
|
|
observedAt: at(-1), expiresAt: at(3 * 24 * 60), remark: context.marker,
|
|
},
|
|
reason: '船司官网人工查询兜底',
|
|
}
|
|
const response = await request(context, 'POST', PORT, body,
|
|
{ 'Idempotency-Key': `${context.marker}-carrier-manual-schedule`.slice(0, 128) })
|
|
const detail = context.apiSuccess(MODULE, '创建真实人工船期兜底结果', response, '', OPTIONS)
|
|
return id(detail?.portSchedule?.schedule?.id)
|
|
}
|
|
|
|
export async function run(context) {
|
|
context.addCoverageGap(MODULE, OPTIONS.scenario, 'ZIM官方API自动查询',
|
|
'ZIM Cargo Tracking API 未配置订阅凭据或来源授权时返回MANUAL_REQUIRED；不记录或回显订阅键',
|
|
'external-third-party')
|
|
context.addCoverageGap(MODULE, OPTIONS.scenario, 'COSCO官方API自动查询',
|
|
'COSCO Shipping Open Platform Cargo Tracking API 待注册订阅和凭据；当前返回MANUAL_REQUIRED，不逆向网页WAF或伪造自动成功',
|
|
'external-third-party')
|
|
|
|
const suffix = context.marker.replace(/\D/g, '').slice(-10)
|
|
const carriersResponse = await request(context, 'GET', `${BASE}/carriers`)
|
|
const carriers = context.apiSuccess(MODULE, '六家船司查询策略入口已部署', carriersResponse, '', OPTIONS)
|
|
const byCode = new Map((Array.isArray(carriers) ? carriers : []).map((item) => [item.carrierCode, item]))
|
|
context.assert(MODULE, '六家官方来源及合规模式完整', carriersResponse,
|
|
['MATSON', 'SML', 'ZIM', 'COSCO', 'EMC', 'HEDE'].every((code) => byCode.has(code))
|
|
&& byCode.get('ZIM')?.accessMode === 'OFFICIAL_API' && byCode.get('ZIM')?.coverageGap === true
|
|
&& byCode.get('ZIM')?.coverageGapCode === 'OFFICIAL_API_CREDENTIALS_REQUIRED'
|
|
&& byCode.get('COSCO')?.accessMode === 'OFFICIAL_API' && byCode.get('COSCO')?.coverageGap === true
|
|
&& byCode.get('COSCO')?.coverageGapCode === 'OFFICIAL_API_CREDENTIALS_REQUIRED'
|
|
&& [...byCode.values()].every((item) => item.officialUrl?.startsWith('http') && item.automated === false),
|
|
`codes=${[...byCode.keys()].join(',') || 'missing'}`, OPTIONS)
|
|
|
|
const master = await resolveOceanBookingMaster(context, MODULE)
|
|
if (!master) return
|
|
const ocean = await ensureOcean(context, suffix, master)
|
|
if (!ocean.id) return
|
|
const createBody = {
|
|
expectedVersion: 0, customerId: master.customerId, oceanBookingId: ocean.id,
|
|
containerBookingId: ocean.containerBookingId, carrierCode: 'ZIM', trackingType: 'BILL_OF_LADING',
|
|
trackingNo: `${context.marker}-ZIM`, remark: context.marker,
|
|
}
|
|
const createKey = `${context.marker}-carrier-query-create`.slice(0, 128)
|
|
const createResponse = await request(context, 'POST', BASE, createBody, { 'Idempotency-Key': createKey })
|
|
const created = context.apiSuccess(MODULE, '创建真实船司查询任务', createResponse, '', OPTIONS)
|
|
const queryId = id(created?.query?.query?.id)
|
|
context.assert(MODULE, '查询任务初始来源和过期字段稳定', createResponse,
|
|
Boolean(queryId) && created?.query?.query?.status === 'READY'
|
|
&& created?.query?.expired === true && created?.query?.query?.accessMode === 'OFFICIAL_API',
|
|
`queryId=${queryId || 'missing'}, status=${created?.query?.query?.status || 'missing'}`, OPTIONS)
|
|
if (!queryId) return
|
|
|
|
const replay = await request(context, 'POST', BASE, createBody, { 'Idempotency-Key': createKey })
|
|
context.assert(MODULE, '创建任务幂等重放返回同一资源', replay,
|
|
id(data(replay)?.query?.query?.id) === queryId,
|
|
`first=${queryId}, replay=${id(data(replay)?.query?.query?.id) || 'missing'}`, OPTIONS)
|
|
|
|
const version = Number(created.query.query.version)
|
|
|
|
const unknownCarrier = await request(context, 'POST', BASE,
|
|
{ ...createBody, carrierCode: 'UNKNOWN', trackingNo: `${context.marker}-UNKNOWN` },
|
|
{ 'Idempotency-Key': `${context.marker}-carrier-unknown`.slice(0, 128) })
|
|
step(context, '非法船司代码被拒绝', unknownCarrier,
|
|
unknownCarrier.http === 200 && ['A0400', '400'].includes(codeOf(unknownCarrier)),
|
|
`HTTP=${unknownCarrier.http}, code=${codeOf(unknownCarrier)}`)
|
|
|
|
const forgedCustomer = await request(context, 'POST', BASE,
|
|
{ ...createBody, customerId: '10002', trackingNo: `${context.marker}-FORGED` },
|
|
{ 'Idempotency-Key': `${context.marker}-carrier-forged-customer`.slice(0, 128) })
|
|
step(context, '伪造客户与订舱关联被拒绝', forgedCustomer,
|
|
forgedCustomer.http === 200 && ['A0400', '400'].includes(codeOf(forgedCustomer)),
|
|
`HTTP=${forgedCustomer.http}, code=${codeOf(forgedCustomer)}`)
|
|
|
|
const scheduleId = await createManualSchedule(context, suffix, ocean.id, master.customerId)
|
|
if (!scheduleId) return
|
|
const manual = await request(context, 'POST', `${BASE}/${queryId}/manual-results`,
|
|
{ expectedVersion: version, portScheduleId: scheduleId, reason: '人工完成官网查询并复核船期' },
|
|
{ 'Idempotency-Key': `${context.marker}-carrier-manual-result`.slice(0, 128) })
|
|
const completed = context.apiSuccess(MODULE, '绑定真实人工船期结果', manual, '', OPTIONS)
|
|
context.assert(MODULE, '人工兜底保留官网尝试且形成有效更新时间和过期状态', manual,
|
|
completed?.query?.query?.status === 'READY' && id(completed?.query?.query?.resultPortScheduleId) === scheduleId
|
|
&& Boolean(completed?.query?.query?.lastSuccessAt) && Boolean(completed?.query?.query?.sourceUpdatedAt)
|
|
&& completed?.query?.expired === false
|
|
&& completed?.histories?.some((item) => item.action === 'MANUAL_RESULT'),
|
|
`status=${completed?.query?.query?.status || 'missing'}, result=${id(completed?.query?.query?.resultPortScheduleId) || 'missing'}`, OPTIONS)
|
|
|
|
const detailResponse = await request(context, 'GET', `${BASE}/${queryId}`)
|
|
const detail = context.apiSuccess(MODULE, '回查船司查询任务详情与历史', detailResponse, '', OPTIONS)
|
|
context.assert(MODULE, '平台详情不暴露调度尝试且保留业务版本历史', detailResponse,
|
|
!Object.hasOwn(detail || {}, 'attempts')
|
|
&& detail?.histories?.some((item) => item.action === 'CREATE')
|
|
&& detail?.histories?.some((item) => item.action === 'MANUAL_RESULT'),
|
|
`attemptsExposed=${Object.hasOwn(detail || {}, 'attempts')}, histories=${detail?.histories?.length ?? 'missing'}`, OPTIONS)
|
|
}
|