release: 1.1.0

server/exporter.ts

@@ -89,7 +89,7 @@ async function workbookBuffer(snapshot: ExportSnapshot, config: AppConfig): Prom
     { header: "无发票原因", key: "invoiceMissingReason", width: 44 },
   ];
   sheet.getRow(1).font = { bold: true, color: { argb: "FFFFFFFF" } };
-  sheet.getRow(1).fill = { type: "pattern", pattern: "solid", fgColor: { argb: "FF1F4D43" } };
+  sheet.getRow(1).fill = { type: "pattern", pattern: "solid", fgColor: { argb: "FF175CD3" } };
   sheet.getRow(1).height = 24;
   snapshot.expenses.forEach((expense, index) => {
     const row = sheet.addRow({
@@ -210,7 +210,8 @@ async function buildExportJobOnce(sqlite: Database.Database, config: AppConfig,
     // Never expose filesystem paths, attachment IDs, or raw OS errors through
     // the export status API. Keep a small allowlist of actionable messages.
     const raw = error instanceof Error ? error.message : "";
-    const safe = raw.startsWith("附件校验失败") || raw.includes("ENOENT")
+    const safe = (error as { code?: unknown } | null)?.code === "ATTACHMENT_MISSING"
+      || raw.startsWith("附件校验失败") || raw.includes("ENOENT")
       ? "导出失败：附件文件缺失或校验不通过"
       : "导出失败：服务器无法生成导出文件";
     sqlite.prepare("UPDATE export_jobs SET status='failed', error_message=? WHERE id=? AND status='building'").run(safe, jobId);