minitest2.0 0.0.4 → 0.0.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "minitest2.0",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "private": false,
   "type": "module",
   "repository": {

package/src/App.vue

@@ -22,7 +22,7 @@ const tabItems = computed(() =>
   }),
 )
 
-const showTabbar = computed(() => route.meta.hideTabbar !== true)
+const showTabbar = computed(() => route.meta.showTabbar === true)
 const noBackRouteNames = new Set(['Home', 'Login', 'Dashboard', 'Articles', 'Mine'])
 const headerTitle = computed(() => String(route.meta.title || ''))
 const showHeaderBack = computed(() => !noBackRouteNames.has(String(route.name || '')))

package/src/api/announcement.ts

@@ -44,6 +44,7 @@ const ALLOWED_TAGS = new Set([
   'H2',
   'H3',
   'I',
+  'IMG',
   'LI',
   'OL',
   'P',
@@ -56,6 +57,22 @@ const ALLOWED_TAGS = new Set([
   'CODE',
 ])
 
+const ALLOWED_IMAGE_MIME_TYPES = new Set([
+  'image/png',
+  'image/jpeg',
+  'image/gif',
+  'image/webp',
+  'image/bmp',
+])
+
+const BASE64_IMAGE_SIGNATURES = [
+  { mime: 'image/png', pattern: /^iVBORw0KGgo/ },
+  { mime: 'image/jpeg', pattern: /^\/9j\// },
+  { mime: 'image/gif', pattern: /^R0lGOD/ },
+  { mime: 'image/webp', pattern: /^UklGR/ },
+  { mime: 'image/bmp', pattern: /^Qk/ },
+]
+
 export async function queryArticles() {
   const response = await request<unknown>({
     url: LIST_URL,
@@ -334,6 +351,11 @@ function sanitizeAttributes(element: HTMLElement) {
   Array.from(element.attributes).forEach((attribute) => {
     const name = attribute.name.toLowerCase()
 
+    if (element.tagName === 'IMG') {
+      sanitizeImageAttribute(element, attribute)
+      return
+    }
+
     if (element.tagName === 'A' && name === 'href') {
       if (!isSafeHref(attribute.value)) {
         element.removeAttribute(attribute.name)
@@ -369,6 +391,137 @@ function sanitizeAttributes(element: HTMLElement) {
 
     element.removeAttribute(attribute.name)
   })
+
+  if (element.tagName === 'IMG') {
+    finalizeImageElement(element)
+  }
+}
+
+function sanitizeImageAttribute(element: HTMLElement, attribute: Attr) {
+  const name = attribute.name.toLowerCase()
+
+  if (name === 'src') {
+    const src = normalizeImageSource(attribute.value)
+
+    if (src) {
+      element.setAttribute('src', src)
+      return
+    }
+  }
+
+  if (name === 'alt' || name === 'title') {
+    element.setAttribute(name, attribute.value.trim().slice(0, 120))
+    return
+  }
+
+  if (name === 'width' || name === 'height') {
+    const dimension = normalizeImageDimension(attribute.value)
+
+    if (dimension) {
+      element.setAttribute(name, dimension)
+      return
+    }
+  }
+
+  element.removeAttribute(attribute.name)
+}
+
+function finalizeImageElement(element: HTMLElement) {
+  if (!element.getAttribute('src')) {
+    element.remove()
+    return
+  }
+
+  if (!element.hasAttribute('alt')) {
+    element.setAttribute('alt', '')
+  }
+
+  element.setAttribute('loading', 'lazy')
+  element.setAttribute('decoding', 'async')
+}
+
+function normalizeImageSource(value: string) {
+  const source = value.trim()
+
+  if (!source) {
+    return ''
+  }
+
+  const dataImageSource = normalizeDataImageSource(source)
+
+  if (dataImageSource) {
+    return dataImageSource
+  }
+
+  const bareBase64Source = normalizeBareBase64ImageSource(source)
+
+  if (bareBase64Source) {
+    return bareBase64Source
+  }
+
+  try {
+    const url = new URL(source, window.location.origin)
+
+    return ['http:', 'https:'].includes(url.protocol) ? source : ''
+  } catch {
+    return ''
+  }
+}
+
+function normalizeDataImageSource(value: string) {
+  const match = value.match(/^data:(image\/[a-z0-9.+-]+);base64,([\s\S]+)$/i)
+
+  if (!match) {
+    return ''
+  }
+
+  const mime = normalizeImageMimeType(match[1] || '')
+  const base64 = normalizeBase64Payload(match[2] || '')
+
+  if (!mime || !isBase64Payload(base64)) {
+    return ''
+  }
+
+  return `data:${mime};base64,${base64}`
+}
+
+function normalizeBareBase64ImageSource(value: string) {
+  const base64 = normalizeBase64Payload(value)
+  const mime = getBase64ImageMimeType(base64)
+
+  if (!mime || !isBase64Payload(base64)) {
+    return ''
+  }
+
+  return `data:${mime};base64,${base64}`
+}
+
+function normalizeImageMimeType(value: string) {
+  const mime = value.trim().toLowerCase().replace(/^image\/jpg$/, 'image/jpeg')
+
+  return ALLOWED_IMAGE_MIME_TYPES.has(mime) ? mime : ''
+}
+
+function normalizeBase64Payload(value: string) {
+  return value.replace(/\s+/g, '')
+}
+
+function isBase64Payload(value: string) {
+  return Boolean(value) && value.length % 4 !== 1 && /^[A-Za-z0-9+/]+={0,2}$/.test(value)
+}
+
+function getBase64ImageMimeType(value: string) {
+  return BASE64_IMAGE_SIGNATURES.find(({ pattern }) => pattern.test(value))?.mime || ''
+}
+
+function normalizeImageDimension(value: string) {
+  const dimension = Number.parseInt(value, 10)
+
+  if (!Number.isFinite(dimension) || dimension <= 0 || dimension > 4096) {
+    return ''
+  }
+
+  return String(dimension)
 }
 
 function normalizeCodeLanguageClass(value: string) {

package/src/api/clearing-detail.ts

@@ -0,0 +1,66 @@
+import {
+  buildTamRequestPayload,
+  tamRequest,
+  type TamRequestPayload,
+  type TamResponse,
+} from '@/api/tam'
+
+export type ClearingDetailQueryForm = {
+  /** 清算日期，页面日期控件为 YYYY-MM-DD，接口入参为 YYYYMMDD。 */
+  queryDate: string
+}
+
+export type ClearingDetailPayload = TamRequestPayload<ClearingDetailQueryBody>
+
+export type ClearingDetailResult = TamResponse<ClearingDetailResponseBody>
+
+export type ClearingDetailRecord = {
+  /** 时间 */
+  msgSendDt?: string
+  /** 进款 */
+  secreditLineAmt?: string
+  /** 出款 */
+  sedebtLineAmt?: string
+  /** 轧差 */
+  txnetgBalance?: string
+  /** 轧差方向 */
+  txnetgBalanceDirection?: string
+  /** 轧差日期 */
+  txnetgDt?: string
+  /** 场次 */
+  txnetgRnd?: string
+  /** 清算报文编号 */
+  txnetgType?: string
+}
+
+type ClearingDetailQueryBody = {
+  /** 清算日期，格式 YYYYMMDD。 */
+  queryDate: string
+}
+
+type ClearingDetailResponseBody = {
+  result?: ClearingDetailRecord[]
+}
+
+const QUERY_TRAN_CODE = '/TAM/0001/140110006'
+
+export function buildClearingDetailPayload(form: ClearingDetailQueryForm): ClearingDetailPayload {
+  return buildTamRequestPayload({
+    tranCode: QUERY_TRAN_CODE,
+    body: {
+      queryDate: normalizeDate(form.queryDate),
+    },
+  })
+}
+
+export async function queryClearingDetail(
+  payload: ClearingDetailPayload,
+): Promise<ClearingDetailResult> {
+  return tamRequest<ClearingDetailQueryBody, ClearingDetailResponseBody>(payload)
+}
+
+function normalizeDate(value: string) {
+  if (/^\d{8}$/.test(value)) return value
+
+  return value.replaceAll('-', '')
+}

package/src/api/foreign-position.ts

@@ -0,0 +1,142 @@
+import {
+  buildTamRequestPayload,
+  tamRequest,
+  type TamRequestPayload,
+  type TamResponse,
+} from '@/api/tam'
+import { useAppStore } from '@/stores/app'
+
+export type ForeignForecastRecord = {
+  /** 业务类型。 */
+  busiType?: string
+  /** 币种字段，不同后端版本可能返回不同命名。 */
+  ccy?: string
+  currency?: string
+  currencyCode?: string
+  currCode?: string
+  curType?: string
+  tranCcy?: string
+  /** 客户类型或客户名称，用于列表副标题兜底。 */
+  clientName?: string
+  clientType?: string
+  competName?: string
+  /** 交易对手或清算行信息。 */
+  bankSwift?: string
+  bicCode?: string
+  routeCode?: string
+  swiftCode?: string
+  /** 落地机构，列表主标题展示字段。 */
+  groundBranch?: string
+  /** 预报金额，接口按元级金额返回，页面转换为万元级展示。 */
+  predAmt?: string
+  /** 预报流水号，后续详情查询主键。 */
+  predRefNo?: string
+  /** 预报状态。 */
+  predStatus?: string
+  /** 交易日期。 */
+  tranDate?: string
+  /** 核销状态。 */
+  verifyStatus?: string
+}
+
+export type ForeignForecastQueryForm = {
+  /** 交易时间，当前视图必填筛选项。 */
+  tranDate: string
+  /** 落地机构关键字。 */
+  groundBranch?: string
+  /** 币种，当前后端交易未明确入参时页面做兼容筛选。 */
+  currency?: string
+  /** 业务类型。 */
+  busiType?: string
+  /** 预报状态。 */
+  predStatus?: string
+  /** 起始金额，页面单位为万元。 */
+  startTranAmt?: string
+  /** 截止金额，页面单位为万元。 */
+  endTranAmt?: string
+}
+
+export type ForeignForecastQueryPayload = {
+  appHead: TamRequestPayload<ForeignForecastQueryBody>['appHead']
+  body: ForeignForecastQueryBody
+  head: TamRequestPayload<ForeignForecastQueryBody>['head']
+}
+
+export type ForeignForecastQueryResult = {
+  body: ForeignForecastQueryResultBody
+  head: TamResponse<ForeignForecastQueryResultBody>['head']
+}
+
+type ForeignForecastQueryBody = {
+  busiType: string
+  clientName: string
+  competName: string
+  endTransAmt: string
+  groundBranch: string
+  payChannel: string
+  payDirec: string
+  predStatus: string
+  sortRule: string
+  startTransAmt: string
+  tranDate: string
+  verifyStatus: string
+}
+
+type ForeignForecastQueryResultBody = {
+  resultList: ForeignForecastRecord[]
+  totalCount: string
+}
+
+type QueryOptions = {
+  form: ForeignForecastQueryForm
+  pageIndex: number
+  pageSize: number
+}
+
+const QUERY_TRAN_CODE = '/TAM/0001/140101001'
+
+export function buildForeignForecastQueryPayload({
+  form,
+  pageIndex,
+  pageSize,
+}: QueryOptions): ForeignForecastQueryPayload {
+  const tranDate = normalizeDate(form.tranDate || useAppStore().systemWorkDate)
+
+  return buildTamRequestPayload({
+    tranCode: QUERY_TRAN_CODE,
+    pageIndex,
+    pageSize,
+    body: {
+      busiType: form.busiType || '',
+      clientName: '',
+      competName: '',
+      endTransAmt: toRequestAmount(form.endTranAmt),
+      groundBranch: form.groundBranch || '',
+      payChannel: '',
+      payDirec: '',
+      predStatus: form.predStatus || '',
+      sortRule: '',
+      startTransAmt: toRequestAmount(form.startTranAmt),
+      tranDate,
+      verifyStatus: '',
+    },
+  })
+}
+
+export async function queryForeignForecastPage(
+  payload: ForeignForecastQueryPayload,
+): Promise<ForeignForecastQueryResult> {
+  return tamRequest<ForeignForecastQueryBody, ForeignForecastQueryResultBody>(payload)
+}
+
+function normalizeDate(value: string) {
+  if (/^\d{8}$/.test(value)) return value
+  return value.replaceAll('-', '')
+}
+
+function toRequestAmount(value?: string) {
+  if (!value?.trim()) return ''
+
+  const amount = Number(value)
+  return Number.isFinite(amount) ? String(Math.round(amount * 10000)) : ''
+}

package/src/api/net-debit.ts

@@ -0,0 +1,90 @@
+import {
+  buildTamRequestPayload,
+  tamRequest,
+  type TamRequestPayload,
+  type TamResponse,
+} from '@/api/tam'
+
+type NetDebitEmptyBody = Record<string, never>
+
+export type NetDebitSendPayload = TamRequestPayload<NetDebitEmptyBody>
+
+export type NetDebitQueryPayload = TamRequestPayload<NetDebitQueryBody>
+
+export type NetDebitSendResult = TamResponse<NetDebitSendBody>
+
+export type NetDebitQueryResult = TamResponse<NetDebitQuotaDetail>
+
+export type NetDebitQuotaDetail = {
+  /** 净借记限额 */
+  availableDrAmt?: string
+  /** 查询处理状态 */
+  busiStatus?: string
+  /** 委托日期 */
+  consignDate?: string
+  /** 授信额度 */
+  creditAmt?: string
+  /** 可用净借记限额 */
+  currentAvailableDrAmt?: string
+  /** 圈存资金 */
+  encloseAmt?: string
+  /** 质押额度 */
+  impawnLimit?: string
+  /** 报文标识号 */
+  msgRefNo?: string
+  /** 被查询行行号 */
+  rcvBankCode?: string
+  /** 平台流水号 */
+  refNo?: string
+  /** 应答委托日期 */
+  responseDate?: string
+  /** 应答报文序号 */
+  responseNo?: string
+  /** 被查询清算行行号 */
+  settleBankCode?: string
+  /** 业务处理状态 */
+  status?: string
+  /** 发送交易返回的平台流水号，页面状态流转使用。 */
+  requestRefNo?: string
+}
+
+type NetDebitSendBody = {
+  /** 平台流水号，后续查询交易 body.msgId 使用该值。 */
+  refNo?: string
+}
+
+type NetDebitQueryBody = {
+  /** 发送交易返回的平台流水号。 */
+  msgId: string
+}
+
+const SEND_TRAN_CODE = '/TAM/0001/140110003'
+const QUERY_TRAN_CODE = '/TAM/0001/140110004'
+
+export function buildNetDebitSendPayload(): NetDebitSendPayload {
+  return buildTamRequestPayload({
+    tranCode: SEND_TRAN_CODE,
+    body: {},
+  })
+}
+
+export async function sendNetDebitRequest(
+  payload: NetDebitSendPayload,
+): Promise<NetDebitSendResult> {
+  return tamRequest<NetDebitEmptyBody, NetDebitSendBody>(payload)
+}
+
+export function buildNetDebitQueryPayload(msgId: string): NetDebitQueryPayload {
+  return buildTamRequestPayload({
+    tranCode: QUERY_TRAN_CODE,
+    body: {
+      msgId,
+    },
+  })
+}
+
+export async function queryNetDebitQuota(
+  payload: NetDebitQueryPayload,
+): Promise<NetDebitQueryResult> {
+  return tamRequest<NetDebitQueryBody, NetDebitQuotaDetail>(payload)
+}

package/src/api/opening-reserve-estimate.ts

@@ -0,0 +1,42 @@
+import {
+  buildTamRequestPayload,
+  tamRequest,
+  type TamRequestPayload,
+  type TamResponse,
+} from '@/api/tam'
+
+type OpeningReserveEstimateEmptyBody = Record<string, never>
+
+export type OpeningReserveEstimateBody = {
+  /** 法定准备金 */
+  fzAmt?: string
+  /** 总分行铺底资金之和 */
+  pdAmt?: string
+  /** 日初备款 */
+  preAmt?: string
+  /** 人行时点头寸 */
+  rhAmt?: string
+  /** 预报未核销收入金额 */
+  unverifyAmtIn?: string
+  /** 预报未核销支出金额 */
+  unverifyAmtOut?: string
+}
+
+export type OpeningReserveEstimatePayload = TamRequestPayload<OpeningReserveEstimateEmptyBody>
+
+export type OpeningReserveEstimateResult = TamResponse<OpeningReserveEstimateBody>
+
+const QUERY_TRAN_CODE = '/TAM/0001/140103004'
+
+export function buildOpeningReserveEstimatePayload(): OpeningReserveEstimatePayload {
+  return buildTamRequestPayload({
+    tranCode: QUERY_TRAN_CODE,
+    body: {},
+  })
+}
+
+export async function queryOpeningReserveEstimate(
+  payload: OpeningReserveEstimatePayload,
+): Promise<OpeningReserveEstimateResult> {
+  return tamRequest<OpeningReserveEstimateEmptyBody, OpeningReserveEstimateBody>(payload)
+}