固化七月迭代审计治理进展以隔离线上热修

Constraint: 切换 main 前必须保存当前七月分支全部项目进展，套餐生效提案仅属于 Iteration/7-11。

Rejected: 将七月套餐修复直接移植到 main | 两个分支的可靠投递架构不同。

Confidence: medium

Scope-risk: broad

Directive: 不得将本提交整体 cherry-pick 到 main；main 套餐热修必须基于其纯 Asynq 代码独立实施。

Tested: git diff --check；openspec validate fix-package-activation-starvation --strict。

Not-tested: 按用户要求未运行自动化测试；go build ./... 因当前审计改造中的 Enterprise 模型字面量和 role.recordFailure 参数类型错误未通过。

internal/application/shop/create.go

@@ -3,11 +3,13 @@ package shop
 
 import (
 	"context"
+	stderrors "errors"
 	"strings"
 
 	"golang.org/x/crypto/bcrypt"
 	"gorm.io/gorm"
 
+	accessauditapp "github.com/break/junhong_cmp_fiber/internal/application/accessaudit"
 	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/internal/model/dto"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
@@ -17,12 +19,13 @@ import (
 
 // CreateService 收口平台与代理创建店铺的完整事务。
 type CreateService struct {
-	db *gorm.DB
+	db    *gorm.DB
+	audit accessauditapp.Writer
 }
 
 // NewCreateService 创建店铺创建事务脚本。
-func NewCreateService(db *gorm.DB) *CreateService {
-	return &CreateService{db: db}
+func NewCreateService(db *gorm.DB, audit accessauditapp.Writer) *CreateService {
+	return &CreateService{db: db, audit: audit}
 }
 
 // Create 按操作者类型执行平台显式归属或代理安全继承。
@@ -37,26 +40,26 @@ func (s *CreateService) Create(ctx context.Context, request *dto.CreateShopReque
 	case constants.UserTypeSuperAdmin, constants.UserTypePlatform:
 	case constants.UserTypeAgent:
 		if request.BusinessOwnerAccountIDSet {
-			return nil, errors.New(errors.CodeForbidden, "无权限设置店铺业务员")
+			return s.fail(ctx, request, errors.New(errors.CodeForbidden, "无权限设置店铺业务员"))
 		}
 		if request.ParentID == nil {
-			return nil, errors.New(errors.CodeForbidden, "无权限操作该资源或资源不存在")
+			return s.fail(ctx, request, errors.New(errors.CodeForbidden, "无权限操作该资源或资源不存在"))
 		}
 		if err := middleware.CanManageShop(ctx, *request.ParentID); err != nil {
-			return nil, errors.New(errors.CodeForbidden, "无权限操作该资源或资源不存在")
+			return s.fail(ctx, request, errors.New(errors.CodeForbidden, "无权限操作该资源或资源不存在"))
 		}
 		resolver = resolveInheritedBusinessOwner
 	default:
-		return nil, errors.New(errors.CodeForbidden, "无权限操作该资源或资源不存在")
+		return s.fail(ctx, request, errors.New(errors.CodeForbidden, "无权限操作该资源或资源不存在"))
 	}
 	hashedPassword, err := bcrypt.GenerateFromPassword([]byte(request.InitPassword), bcrypt.DefaultCost)
 	if err != nil {
-		return nil, errors.Wrap(errors.CodeInternalError, err, "密码哈希失败")
+		return s.fail(ctx, request, errors.Wrap(errors.CodeInternalError, err, "密码哈希失败"))
 	}
 
 	var response *dto.ShopResponse
 	err = s.db.WithContext(ctx).Transaction(func(tx *gorm.DB) error {
-		created, createErr := createShop(tx, request, operatorID, string(hashedPassword), resolver)
+		created, createErr := createShop(ctx, tx, request, operatorID, string(hashedPassword), resolver, s.audit)
 		if createErr != nil {
 			return createErr
 		}
@@ -64,14 +67,14 @@ func (s *CreateService) Create(ctx context.Context, request *dto.CreateShopReque
 		return nil
 	})
 	if err != nil {
-		return nil, err
+		return s.fail(ctx, request, err)
 	}
 	return response, nil
 }
 
 type businessOwnerResolver func(*gorm.DB, *dto.CreateShopRequest, *model.Shop) (*uint, error)
 
-func createShop(tx *gorm.DB, request *dto.CreateShopRequest, operatorID uint, hashedPassword string, resolveOwner businessOwnerResolver) (*dto.ShopResponse, error) {
+func createShop(ctx context.Context, tx *gorm.DB, request *dto.CreateShopRequest, operatorID uint, hashedPassword string, resolveOwner businessOwnerResolver, audit accessauditapp.Writer) (*dto.ShopResponse, error) {
 	if exists, err := recordExists(tx, &model.Shop{}, "shop_code = ?", request.ShopCode); err != nil {
 		return nil, errors.Wrap(errors.CodeDatabaseError, err, "校验店铺编号失败")
 	} else if exists {
@@ -157,9 +160,77 @@ func createShop(tx *gorm.DB, request *dto.CreateShopRequest, operatorID uint, ha
 	if err := fillBusinessOwnerResponse(tx, shop, response); err != nil {
 		return nil, err
 	}
+	if audit == nil {
+		return nil, errors.New(errors.CodeInvalidStatus, "店铺创建审计接缝未配置")
+	}
+	if err := audit.WriteAccessChange(ctx, tx, accessauditapp.ChangeAudit{
+		ActionCode: constants.AuditActionShopCreated, Summary: "创建店铺",
+		OperatorID: operatorID, Shop: shop, ParentShop: parent,
+		AfterData: shopCreationData(shop),
+	}); err != nil {
+		return nil, errors.Wrap(errors.CodeInternalError, err, "写入店铺创建审计失败")
+	}
+	if ownerID != nil {
+		if err := audit.WriteAccessChange(ctx, tx, accessauditapp.ChangeAudit{
+			ActionCode: constants.AuditActionShopBusinessOwnerUpdated, Summary: "设置店铺业务员归属",
+			OperatorID: operatorID, Shop: shop, ParentShop: parent,
+			Accounts:          businessOwnerAuditAccounts(tx, nil, ownerID),
+			AfterData:         map[string]any{"business_owner_account_id": ownerID},
+			SubjectVisibility: constants.AuditSubjectResult, SubjectSummary: "店铺业务员归属已设置",
+		}); err != nil {
+			return nil, errors.Wrap(errors.CodeInternalError, err, "写入店铺业务员审计失败")
+		}
+	}
 	return response, nil
 }
 
+func (s *CreateService) fail(ctx context.Context, request *dto.CreateShopRequest, originalErr error) (*dto.ShopResponse, error) {
+	shop := &model.Shop{ShopName: request.ShopName, ShopCode: request.ShopCode, ParentID: request.ParentID}
+	var parent *model.Shop
+	if request.ParentID != nil {
+		parent = &model.Shop{}
+		parent.ID = *request.ParentID
+	}
+	accessauditapp.RecordFailure(ctx, s.db, s.audit, accessauditapp.ChangeAudit{
+		ActionCode: constants.AuditActionShopCreated, Summary: "创建店铺失败", Result: shopAuditFailureResult(originalErr),
+		OperatorID: middleware.GetUserIDFromContext(ctx), Shop: shop, ParentShop: parent,
+	}, originalErr)
+	return nil, originalErr
+}
+
+func shopCreationData(shop *model.Shop) map[string]any {
+	data := shopProfileData(shop)
+	data["shop_code"] = shop.ShopCode
+	data["parent_id"] = shop.ParentID
+	data["level"] = shop.Level
+	return data
+}
+
+func shopProfileData(shop *model.Shop) map[string]any {
+	return map[string]any{
+		"shop_name": shop.ShopName, "contact_name": shop.ContactName, "contact_phone": shop.ContactPhone,
+		"province": shop.Province, "city": shop.City, "district": shop.District, "address": shop.Address,
+	}
+}
+
+func shopProfileChanged(before, after *model.Shop) bool {
+	return before.ShopName != after.ShopName || before.ContactName != after.ContactName ||
+		before.ContactPhone != after.ContactPhone || before.Province != after.Province || before.City != after.City ||
+		before.District != after.District || before.Address != after.Address
+}
+
+func shopAuditFailureResult(err error) string {
+	var appErr *errors.AppError
+	if stderrors.As(err, &appErr) {
+		switch appErr.Code {
+		case errors.CodeForbidden, errors.CodeInvalidParam, errors.CodeNotFound, errors.CodeInvalidParentID,
+			errors.CodeShopLevelExceeded, errors.CodeShopCodeExists, errors.CodeUsernameExists, errors.CodePhoneExists:
+			return constants.AuditResultDenied
+		}
+	}
+	return constants.AuditResultFailed
+}
+
 func resolveParent(tx *gorm.DB, parentID *uint) (*model.Shop, int, error) {
 	if parentID == nil {
 		return nil, 1, nil