feat: 新增代理分配套餐上架状态（shelf_status）功能

- 新增数据库迁移：为 shop_package_allocation 表添加 shelf_status 字段
- 更新模型/DTO：ShopPackageAllocation 增加 ShelfStatus 字段及相关枚举
- 更新套餐分配 Service：支持上架/下架状态管理逻辑
- 更新套餐 Store/Service：根据 shelf_status 过滤可售套餐
- 更新购买验证 Service：引入上架状态校验逻辑
- 归档 OpenSpec 变更：2026-03-02-agent-allocation-shelf-status
- 同步更新主规范文档：allocation-shelf-status、package-management、purchase-validation

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

internal/service/purchase_validation/service.go

@@ -11,10 +11,11 @@ import (
 )
 
 type Service struct {
-	db           *gorm.DB
-	iotCardStore *postgres.IotCardStore
-	deviceStore  *postgres.DeviceStore
-	packageStore *postgres.PackageStore
+	db                     *gorm.DB
+	iotCardStore           *postgres.IotCardStore
+	deviceStore            *postgres.DeviceStore
+	packageStore           *postgres.PackageStore
+	packageAllocationStore *postgres.ShopPackageAllocationStore
 }
 
 func New(
@@ -22,12 +23,14 @@ func New(
 	iotCardStore *postgres.IotCardStore,
 	deviceStore *postgres.DeviceStore,
 	packageStore *postgres.PackageStore,
+	packageAllocationStore *postgres.ShopPackageAllocationStore,
 ) *Service {
 	return &Service{
-		db:           db,
-		iotCardStore: iotCardStore,
-		deviceStore:  deviceStore,
-		packageStore: packageStore,
+		db:                     db,
+		iotCardStore:           iotCardStore,
+		deviceStore:            deviceStore,
+		packageStore:           packageStore,
+		packageAllocationStore: packageAllocationStore,
 	}
 }
 
@@ -51,7 +54,13 @@ func (s *Service) ValidateCardPurchase(ctx context.Context, cardID uint, package
 		return nil, errors.New(errors.CodeInvalidParam, "该卡未关联套餐系列，无法购买套餐")
 	}
 
-	packages, totalPrice, err := s.validatePackages(ctx, packageIDs, *card.SeriesID)
+	// 确定卖家店铺ID：卡所属店铺即为卖家（代理渠道），平台自营时为0
+	var sellerShopID uint
+	if card.ShopID != nil {
+		sellerShopID = *card.ShopID
+	}
+
+	packages, totalPrice, err := s.validatePackages(ctx, packageIDs, *card.SeriesID, sellerShopID)
 	if err != nil {
 		return nil, err
 	}
@@ -76,7 +85,13 @@ func (s *Service) ValidateDevicePurchase(ctx context.Context, deviceID uint, pac
 		return nil, errors.New(errors.CodeInvalidParam, "该设备未关联套餐系列，无法购买套餐")
 	}
 
-	packages, totalPrice, err := s.validatePackages(ctx, packageIDs, *device.SeriesID)
+	// 确定卖家店铺ID：设备所属店铺即为卖家（代理渠道），平台自营时为0
+	var sellerShopID uint
+	if device.ShopID != nil {
+		sellerShopID = *device.ShopID
+	}
+
+	packages, totalPrice, err := s.validatePackages(ctx, packageIDs, *device.SeriesID, sellerShopID)
 	if err != nil {
 		return nil, err
 	}
@@ -88,7 +103,10 @@ func (s *Service) ValidateDevicePurchase(ctx context.Context, deviceID uint, pac
 	}, nil
 }
 
-func (s *Service) validatePackages(ctx context.Context, packageIDs []uint, seriesID uint) ([]*model.Package, int64, error) {
+// validatePackages 验证套餐列表是否可购买
+// sellerShopID > 0 表示代理渠道，校验该代理的 allocation.shelf_status；
+// sellerShopID == 0 表示平台自营渠道，校验 package.shelf_status
+func (s *Service) validatePackages(ctx context.Context, packageIDs []uint, seriesID uint, sellerShopID uint) ([]*model.Package, int64, error) {
 	if len(packageIDs) == 0 {
 		return nil, 0, errors.New(errors.CodeInvalidParam, "请选择至少一个套餐")
 	}
@@ -109,12 +127,21 @@ func (s *Service) validatePackages(ctx context.Context, packageIDs []uint, serie
 			return nil, 0, errors.New(errors.CodeInvalidParam, "套餐不在可购买范围内")
 		}
 
+		// Package.status 为全局开关，任何渠道都必须检查
 		if pkg.Status != constants.StatusEnabled {
 			return nil, 0, errors.New(errors.CodeInvalidParam, "套餐已禁用")
 		}
 
-		if pkg.ShelfStatus != constants.ShelfStatusOn {
-			return nil, 0, errors.New(errors.CodeInvalidParam, "套餐已下架")
+		if sellerShopID > 0 {
+			// 代理渠道：检查卖家代理的 allocation.shelf_status，不检查 package.shelf_status
+			if err := s.validateAgentShelfStatus(ctx, sellerShopID, pkgID); err != nil {
+				return nil, 0, err
+			}
+		} else {
+			// 平台自营渠道：检查 package.shelf_status
+			if pkg.ShelfStatus != constants.ShelfStatusOn {
+				return nil, 0, errors.New(errors.CodeInvalidParam, "套餐已下架")
+			}
 		}
 
 		packages = append(packages, pkg)
@@ -124,6 +151,25 @@ func (s *Service) validatePackages(ctx context.Context, packageIDs []uint, serie
 	return packages, totalPrice, nil
 }
 
+// validateAgentShelfStatus 校验卖家代理的分配记录上架状态
+func (s *Service) validateAgentShelfStatus(ctx context.Context, sellerShopID, packageID uint) error {
+	// 使用不带数据权限过滤的查询，避免 buyer ctx 的权限限制干扰系统级校验
+	allocation, err := s.packageAllocationStore.GetByShopAndPackageForSystem(ctx, sellerShopID, packageID)
+	if err != nil {
+		if err == gorm.ErrRecordNotFound {
+			return errors.New(errors.CodeInvalidParam, "套餐已下架")
+		}
+		return errors.Wrap(errors.CodeInternalError, err, "查询套餐分配记录失败")
+	}
+
+	if allocation.ShelfStatus != constants.ShelfStatusOn {
+		return errors.New(errors.CodeInvalidParam, "套餐已下架")
+	}
+
+	return nil
+}
+
 func (s *Service) GetPurchasePrice(ctx context.Context, pkg *model.Package, buyerType string) int64 {
 	return pkg.SuggestedRetailPrice
 }
+