企业授权增强与资产列表扩展

- 企业卡授权唯一约束：新增 DB 迁移（000154），卡级部分唯一索引防止同一张卡被多个企业同时持有，Service 层新增跨企业冲突检测
- 单卡列表新增 network_status 过滤参数
- 单卡/设备列表新增 asset_status、asset_status_name、generation 响应字段
- 单卡/设备列表新增企业维度过滤（authorized_enterprise_id、is_authorized_to_enterprise）及响应中企业授权信息（批量加载，无 N+1）
- 主钱包流水/退款列表新增 asset_identifier 精确过滤参数
- 企业卡授权/收回接口升级为三模式（list/range/filter），企业设备授权/收回升级为双模式（list/filter）
- 升级 sonic v1.14.2 → v1.15.2 以兼容 Go 1.26

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

internal/store/postgres/device_store.go

@@ -99,7 +99,7 @@ func (s *DeviceStore) List(ctx context.Context, opts *store.QueryOptions, filter
 	query := s.db.WithContext(ctx).Model(&model.Device{})
 	// 应用数据权限过滤（NULL shop_id 对代理用户不可见）
 	query = middleware.ApplyShopFilter(ctx, query)
-	query = s.applyDeviceFilters(query, filters)
+	query = s.applyDeviceFilters(ctx, query, filters)
 
 	if err := query.Count(&total).Error; err != nil {
 		return nil, 0, err
@@ -127,7 +127,7 @@ func (s *DeviceStore) List(ctx context.Context, opts *store.QueryOptions, filter
 	return devices, total, nil
 }
 
-func (s *DeviceStore) applyDeviceFilters(query *gorm.DB, filters map[string]any) *gorm.DB {
+func (s *DeviceStore) applyDeviceFilters(ctx context.Context, query *gorm.DB, filters map[string]any) *gorm.DB {
 	if virtualNo, ok := filters["virtual_no"].(string); ok && virtualNo != "" {
 		query = query.Where("virtual_no LIKE ?", "%"+virtualNo+"%")
 	}
@@ -186,6 +186,23 @@ func (s *DeviceStore) applyDeviceFilters(query *gorm.DB, filters map[string]any)
 	if hasActive, ok := filters["has_active_package"].(bool); ok {
 		query = s.applyHasActivePackageFilter(query, hasActive)
 	}
+	if enterpriseID, ok := filters["authorized_enterprise_id"].(uint); ok && enterpriseID > 0 {
+		// 只返回当前有效授权给该企业的设备
+		query = query.Where("id IN (?)",
+			s.db.WithContext(ctx).Table("tb_enterprise_device_authorization").
+				Select("device_id").
+				Where("enterprise_id = ? AND revoked_at IS NULL AND deleted_at IS NULL", enterpriseID))
+	}
+	if isAuthorized, ok := filters["is_authorized_to_enterprise"].(bool); ok {
+		subQ := s.db.WithContext(ctx).Table("tb_enterprise_device_authorization").
+			Select("device_id").
+			Where("revoked_at IS NULL AND deleted_at IS NULL")
+		if isAuthorized {
+			query = query.Where("id IN (?)", subQ)
+		} else {
+			query = query.Where("id NOT IN (?)", subQ)
+		}
+	}
 	return query
 }
 
@@ -241,7 +258,7 @@ func (s *DeviceStore) GetByFilters(ctx context.Context, filters map[string]any)
 	var devices []*model.Device
 	query := s.db.WithContext(ctx).Model(&model.Device{})
 	query = middleware.ApplyShopFilter(ctx, query)
-	query = s.applyDeviceFilters(query, filters)
+	query = s.applyDeviceFilters(ctx, query, filters)
 	if err := query.Find(&devices).Error; err != nil {
 		return nil, err
 	}