feat: enhance employee CRUD with search, filters, and security module

server/src/app/services/employee.py

@@ -4,10 +4,12 @@ from collections import Counter
 from datetime import date, datetime
 from typing import Any
 
+from sqlalchemy import inspect, text
 from sqlalchemy.orm import Session
 
 from app.core.config import get_settings
 from app.core.logging import get_logger
+from app.core.security import hash_password
 from app.db.base import Base
 from app.db.session import get_session_factory
 from app.models.employee import Employee
@@ -23,6 +25,7 @@ from app.schemas.employee import (
     EmployeeRead,
     EmployeeRoleOptionRead,
     EmployeeStatusSummaryRead,
+    EmployeeUpdate,
 )
 from app.services.employee_seed import (
     EMPLOYEE_DEFINITIONS,
@@ -64,6 +67,7 @@ class EmployeeService:
     def ensure_directory_ready(self) -> None:
         try:
             Base.metadata.create_all(bind=self.db.get_bind())
+            self._ensure_employee_schema()
             self._prune_extra_seed_employees()
             self._seed_roles()
             self._seed_organization_units()
@@ -170,6 +174,163 @@ class EmployeeService:
         hydrated = self.repository.get(created.id)
         return self._serialize_employee(hydrated or created)
 
+    def update_employee(self, employee_id: str, payload: EmployeeUpdate) -> EmployeeRead:
+        self.ensure_directory_ready()
+
+        employee = self.repository.get(employee_id)
+        if employee is None:
+            raise LookupError("Employee not found")
+
+        changed_fields: list[str] = []
+        password_changed = False
+
+        if "name" in payload.model_fields_set and payload.name is not None:
+            name = payload.name.strip()
+            if not name:
+                raise ValueError("员工姓名不能为空")
+            if name != employee.name:
+                employee.name = name
+                changed_fields.append("姓名")
+
+        if "gender" in payload.model_fields_set:
+            gender = self._normalize_optional_text(payload.gender)
+            if gender != employee.gender:
+                employee.gender = gender
+                changed_fields.append("性别")
+
+        if "birth_date" in payload.model_fields_set:
+            birth_date = payload.parsed_birth_date() if payload.birth_date else None
+            if birth_date != employee.birth_date:
+                employee.birth_date = birth_date
+                changed_fields.append("出生日期")
+
+        if "phone" in payload.model_fields_set:
+            phone = self._normalize_optional_text(payload.phone)
+            if phone != employee.phone:
+                employee.phone = phone
+                changed_fields.append("手机号")
+
+        if "email" in payload.model_fields_set and payload.email is not None:
+            email = str(payload.email)
+            existing = self.repository.get_by_email(email)
+            if existing is not None and existing.id != employee.id:
+                raise ValueError(f"邮箱 {email} 已存在")
+            if email != employee.email:
+                employee.email = email
+                changed_fields.append("邮箱")
+
+        if "join_date" in payload.model_fields_set:
+            join_date = payload.parsed_join_date() if payload.join_date else None
+            if join_date != employee.join_date:
+                employee.join_date = join_date
+                changed_fields.append("入职日期")
+
+        if "location" in payload.model_fields_set:
+            location = self._normalize_optional_text(payload.location)
+            if location != employee.location:
+                employee.location = location
+                changed_fields.append("办公地点")
+
+        if "position" in payload.model_fields_set and payload.position is not None:
+            position = payload.position.strip()
+            if not position:
+                raise ValueError("岗位不能为空")
+            if position != employee.position:
+                employee.position = position
+                changed_fields.append("岗位")
+
+        if "grade" in payload.model_fields_set and payload.grade is not None:
+            grade = payload.grade.strip()
+            if not grade:
+                raise ValueError("职级不能为空")
+            if grade != employee.grade:
+                employee.grade = grade
+                changed_fields.append("职级")
+
+        if "cost_center" in payload.model_fields_set:
+            cost_center = self._normalize_optional_text(payload.cost_center)
+            if cost_center != employee.cost_center:
+                employee.cost_center = cost_center
+                changed_fields.append("成本中心")
+
+        if "finance_owner_name" in payload.model_fields_set:
+            finance_owner_name = self._normalize_optional_text(payload.finance_owner_name)
+            if finance_owner_name != employee.finance_owner_name:
+                employee.finance_owner_name = finance_owner_name
+                changed_fields.append("财务归口")
+
+        if "role_codes" in payload.model_fields_set and payload.role_codes is not None:
+            requested_codes = list(dict.fromkeys(payload.role_codes))
+            roles: list[Role] = []
+            invalid_codes: list[str] = []
+            for code in requested_codes:
+                role = self.repository.get_role_by_code(code)
+                if role is None:
+                    invalid_codes.append(code)
+                    continue
+                roles.append(role)
+
+            if invalid_codes:
+                raise ValueError(f"角色不存在：{'、'.join(invalid_codes)}")
+
+            sorted_roles = self._sorted_roles(roles)
+            next_role_codes = [role.role_code for role in sorted_roles]
+            current_role_codes = [role.role_code for role in self._sorted_roles(list(employee.roles))]
+            if next_role_codes != current_role_codes:
+                employee.roles = sorted_roles
+                changed_fields.append("系统角色")
+
+        if "password" in payload.model_fields_set and payload.password:
+            password = payload.password.strip()
+            if len(password) < 5:
+                raise ValueError("员工密码至少需要 5 位")
+            employee.password_hash = hash_password(password)
+            password_changed = True
+
+        if not changed_fields and not password_changed:
+            return self._serialize_employee(employee)
+
+        now = datetime.now()
+        employee.last_sync_at = now
+        employee.sync_state = "已同步"
+
+        if changed_fields:
+            self._append_change_log(
+                employee,
+                action=f"更新员工信息（{'、'.join(changed_fields)}）",
+                occurred_at=now,
+            )
+
+        if password_changed:
+            self._append_change_log(employee, action="重置员工登录密码", occurred_at=now)
+
+        saved = self.repository.save(employee)
+        hydrated = self.repository.get(saved.id)
+        logger.info("Updated employee id=%s fields=%s", employee.id, ",".join(changed_fields))
+        return self._serialize_employee(hydrated or saved)
+
+    def disable_employee(self, employee_id: str) -> EmployeeRead:
+        self.ensure_directory_ready()
+
+        employee = self.repository.get(employee_id)
+        if employee is None:
+            raise LookupError("Employee not found")
+
+        if employee.employment_status == "停用":
+            return self._serialize_employee(employee)
+
+        now = datetime.now()
+        employee.employment_status = "停用"
+        employee.sync_state = "已同步"
+        employee.last_sync_at = now
+        employee.spotlight = False
+        self._append_change_log(employee, action="停用员工账号", occurred_at=now)
+
+        saved = self.repository.save(employee)
+        hydrated = self.repository.get(saved.id)
+        logger.info("Disabled employee id=%s no=%s", employee.id, employee.employee_no)
+        return self._serialize_employee(hydrated or saved)
+
     def _seed_roles(self) -> None:
         existing_by_code = {role.role_code: role for role in self.repository.list_roles()}
 
@@ -293,6 +454,17 @@ class EmployeeService:
             if employee is not None:
                 self.db.delete(employee)
 
+    def _ensure_employee_schema(self) -> None:
+        bind = self.db.get_bind()
+        inspector = inspect(bind)
+        if "employees" not in inspector.get_table_names():
+            return
+
+        column_names = {column["name"] for column in inspector.get_columns("employees")}
+        if "password_hash" not in column_names:
+            self.db.execute(text("ALTER TABLE employees ADD COLUMN password_hash VARCHAR(255)"))
+            self.db.flush()
+
     def _seed_employee_history(self, employee: Employee, definition: dict[str, Any]) -> None:
         existing_keys = {
             (item.action, item.owner, self._format_datetime(item.occurred_at))
@@ -332,6 +504,22 @@ class EmployeeService:
             )
             existing_keys.add(identity)
 
+    def _append_change_log(
+        self,
+        employee: Employee,
+        action: str,
+        owner: str = "系统管理员",
+        occurred_at: datetime | None = None,
+    ) -> None:
+        self.db.add(
+            EmployeeChangeLog(
+                employee=employee,
+                action=action,
+                owner=owner,
+                occurred_at=occurred_at or datetime.now(),
+            )
+        )
+
     def _serialize_employee(self, employee: Employee) -> EmployeeRead:
         organization = employee.organization_unit
         roles = self._sorted_roles(list(employee.roles))
@@ -407,6 +595,13 @@ class EmployeeService:
     def _sorted_roles(self, roles: list[Role]) -> list[Role]:
         return sorted(roles, key=lambda item: (ROLE_DISPLAY_ORDER.get(item.role_code, 999), item.name))
 
+    @staticmethod
+    def _normalize_optional_text(value: str | None) -> str | None:
+        if value is None:
+            return None
+        text_value = value.strip()
+        return text_value or None
+
     @staticmethod
     def _parse_date(value: str | None) -> date | None:
         if not value: