pdf task-h

2026-06-19 15:09:58 +07:00
parent a85d24235c
commit fd01ebf7c7
35 changed files with 3905 additions and 133 deletions
--- a/scripts/audit-approved-snapshot-parity.ts
+++ b/scripts/audit-approved-snapshot-parity.ts
@@ -0,0 +1,67 @@
+import {
+  buildAuditPayload,
+  buildComputedSnapshotPayload,
+  computePayloadHash,
+  createSqlClient,
+  getSnapshotDocumentData,
+  getSnapshotTemplateInput,
+  summarizeIssues,
+  writeAuditArtifact
+} from './pdf-audit-utils.ts';
+
+async function main() {
+  const sql = createSqlClient();
+
+  try {
+    const payload = await buildAuditPayload(sql);
+    const computedSnapshot = buildComputedSnapshotPayload(payload, {
+      generatedAt: 'audit-generated',
+      generatedBy: 'audit-suite'
+    });
+    const storedTemplateInput = getSnapshotTemplateInput(payload.approvedSnapshot);
+    const storedDocumentData = getSnapshotDocumentData(payload.approvedSnapshot);
+    const comparableKeys = storedTemplateInput
+      ? Object.keys(computedSnapshot.templateInput).filter((key) => key in storedTemplateInput)
+      : [];
+    const inconsistentTemplateKeys = storedTemplateInput
+      ? comparableKeys.filter(
+          (key) =>
+            JSON.stringify(computedSnapshot.templateInput[key]) !==
+            JSON.stringify(storedTemplateInput[key])
+        )
+      : [];
+    const computedSignatureHash = computePayloadHash(
+      (computedSnapshot.documentData.signatures as Record<string, unknown>) ?? {}
+    );
+    const storedSignatureHash = storedDocumentData
+      ? computePayloadHash((storedDocumentData.signatures as Record<string, unknown>) ?? {})
+      : null;
+    const status = summarizeIssues([
+      payload.approvedSnapshot ? 'PASS' : 'WARNING',
+      inconsistentTemplateKeys.length ? 'FAIL' : 'PASS',
+      payload.approvedSnapshot && computedSignatureHash !== storedSignatureHash ? 'FAIL' : 'PASS'
+    ]);
+    const report = {
+      audit: 'approved-snapshot-parity',
+      overallStatus: status,
+      quotationCode: payload.quotationCode,
+      approvedSnapshotAvailable: Boolean(payload.approvedSnapshot),
+      approvedTemplateVersionId: payload.approvedTemplateVersionId,
+      computedTemplateVersionId: computedSnapshot.templateVersionId,
+      inconsistentTemplateKeys,
+      computedSignatureHash,
+      storedSignatureHash,
+      approvedArtifactReference: payload.approvedArtifactReference
+    };
+    const artifactPath = await writeAuditArtifact('signature-audit-report.json', report);
+
+    console.log(JSON.stringify({ ...report, artifactPath }, null, 2));
+  } finally {
+    await sql.end({ timeout: 5 });
+  }
+}
+
+main().catch((error) => {
+  console.error(`[audit-approved-snapshot-parity] ${error.message}`);
+  process.exit(1);
+});