SNAPSHOT W7 已部署稳定态 — 凯迪ERP+OA一体化平台 (MET 73.3%)

恢复点(restore point)。别人改崩后可 git reset --hard 回到此提交。

== 此快照内容 ==
- 后端 oa-backend: 734 控制器 / 711 实体 (Spring Boot 3.2.5 + SQLite, 端口8091)
- 前端 modern-ui/app: Vue3+Vite, 约700页 (构建产物已在 oa-backend/src/main/resources/static)
- 数据库 oa-backend/data/oa.db: 含全部演示数据 (强制入库, 6.6MB)
- 交接文档 go.md + go-code-reference/endpoints/entities/database.md
- 多代理建设脚本 .claude/wf-*.js

== 状态 ==
- 对 凯迪科技ERP_20260507.xlsx 合规 MET ~73.3% (PARTIAL 75: 34可建+6种子/bug+35外部硬天花板)
- 安全: 5轮红队+5轮复检, default-deny分级鉴权, 连续零可利用
- W3~W7 累计补完436缺口; W8末轮(40缺口)为半成品(源码树可编译但未集成)
- 运行: cd oa-backend; java -jar build/libs/oa-backend-0.1.0.jar --server.port=8091; admin/123456

== 排除(gitignore, 可再生) ==
node_modules / oa-backend/build / .jdks / *.log / Backup-ERP-* / 弃用的OFBiz核心(只保留modern-ui)
完整文件夹备份见同目录 Backup-ERP-20260615-191517/ (含上述全部, 仅缺 node_modules)

时间戳: 20260615-191517

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

oa-backend/src/main/java/com/kaidi/oa/web/DeclarationController.java

@@ -0,0 +1,112 @@
+package com.kaidi.oa.web;
+
+import com.kaidi.oa.common.Money;
+
+import com.kaidi.oa.common.ApiException;
+import com.kaidi.oa.common.ApiResp;
+import com.kaidi.oa.common.NotFoundException;
+import com.kaidi.oa.domain.Declaration;
+import com.kaidi.oa.repository.DeclarationRepository;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.time.Instant;
+import java.util.List;
+
+/**
+ * R&D innovation center: government program declarations (政府项目申报). program
+ * is one of 高新技术企业 / 科技型中小企业 / 省重点研发计划 / 专精特新 / 创新平台;
+ * status is one of 准备中 / 已申报 / 已立项 / 已结题 / 未通过. Tail link of business
+ * chain 6: rdProjectId (nullable) references an RdProject.
+ */
+@RestController
+@RequestMapping("/api/oa/declarations")
+public class DeclarationController {
+
+    private final DeclarationRepository declarationRepo;
+
+    public DeclarationController(DeclarationRepository declarationRepo) {
+        this.declarationRepo = declarationRepo;
+    }
+
+    @GetMapping
+    public ApiResp<List<Declaration>> list(@RequestParam(required = false) String program,
+                                           @RequestParam(required = false) String status) {
+        List<Declaration> list;
+        if (program != null && !program.isBlank()) {
+            list = declarationRepo.findByProgram(program);
+        } else if (status != null && !status.isBlank()) {
+            list = declarationRepo.findByStatus(status);
+        } else {
+            list = declarationRepo.findAll();
+        }
+        return ApiResp.ok(list);
+    }
+
+    @GetMapping("/{id}")
+    public ApiResp<Declaration> get(@PathVariable Long id) {
+        return ApiResp.ok(declarationRepo.findById(id)
+                .orElseThrow(() -> new NotFoundException("declaration not found: " + id)));
+    }
+
+    public record CreateDeclarationRequest(
+            String name, String program, String authority, Long rdProjectId, Double amount,
+            String deadline, String status, String owner) {
+    }
+
+    @PostMapping
+    public ApiResp<Declaration> create(@RequestBody CreateDeclarationRequest req) {
+        if (req.name() == null || req.name().isBlank()) {
+            throw new ApiException(400, "name is required");
+        }
+        Declaration d = new Declaration();
+        d.setName(req.name());
+        d.setProgram(req.program());
+        d.setAuthority(req.authority());
+        d.setRdProjectId(req.rdProjectId());
+        d.setAmount(Money.of(req.amount() == null ? 0 : req.amount()));
+        d.setDeadline(req.deadline());
+        d.setStatus(req.status() == null || req.status().isBlank() ? "准备中" : req.status());
+        d.setOwner(req.owner());
+        d.setCreatedAt(Instant.now());
+        return ApiResp.ok(declarationRepo.save(d));
+    }
+
+    /** PUT /{id} -> 编辑政府项目申报; 只覆盖请求体里给出的字段。 */
+    @PutMapping("/{id}")
+    public ApiResp<Declaration> update(@PathVariable Long id, @RequestBody CreateDeclarationRequest req) {
+        Declaration d = declarationRepo.findById(id)
+                .orElseThrow(() -> new NotFoundException("declaration not found: " + id));
+        if (req.name() != null) {
+            if (req.name().isBlank()) {
+                throw new ApiException(400, "name is required");
+            }
+            d.setName(req.name());
+        }
+        if (req.program() != null) d.setProgram(req.program());
+        if (req.authority() != null) d.setAuthority(req.authority());
+        if (req.rdProjectId() != null) d.setRdProjectId(req.rdProjectId());
+        if (req.amount() != null) d.setAmount(Money.of(req.amount()));
+        if (req.deadline() != null) d.setDeadline(req.deadline());
+        if (req.status() != null && !req.status().isBlank()) d.setStatus(req.status());
+        // 归属仅 create 定调, update 不接收客户端 owner, 不得被篡改。
+        return ApiResp.ok(declarationRepo.save(d));
+    }
+
+    /** DELETE /{id} -> 删除政府项目申报。 */
+    @DeleteMapping("/{id}")
+    public ApiResp<Void> delete(@PathVariable Long id) {
+        if (!declarationRepo.existsById(id)) {
+            throw new NotFoundException("declaration not found: " + id);
+        }
+        declarationRepo.deleteById(id);
+        return ApiResp.ok(null);
+    }
+}