操作日志

internal/service/device/audit.go

@@ -0,0 +1,88 @@
+package device
+
+import (
+	"context"
+	"strings"
+
+	"github.com/break/junhong_cmp_fiber/internal/model"
+	assetAuditSvc "github.com/break/junhong_cmp_fiber/internal/service/asset_audit"
+	"github.com/break/junhong_cmp_fiber/pkg/constants"
+)
+
+// AssetAuditService 资产审计服务接口。
+type AssetAuditService interface {
+	LogOperation(ctx context.Context, log *model.AssetOperationLog)
+}
+
+func (s *Service) logDeviceAudit(ctx context.Context, p assetAuditSvc.BuildLogParams) {
+	if s == nil || s.assetAuditService == nil {
+		return
+	}
+	if p.Operator.Type == "" {
+		p.Operator = assetAuditSvc.OperatorFromContext(ctx)
+	}
+	if p.AssetType == "" {
+		p.AssetType = constants.AssetTypeDevice
+	}
+	s.assetAuditService.LogOperation(ctx, assetAuditSvc.BuildLog(ctx, p))
+}
+
+func (s *Service) logDeviceOperation(
+	ctx context.Context,
+	operationType string,
+	operationDesc string,
+	resultStatus string,
+	device *model.Device,
+	beforeData map[string]any,
+	afterData map[string]any,
+	batchTotal int,
+	successCount int,
+	failCount int,
+	err error,
+) {
+	if strings.TrimSpace(operationDesc) == "" {
+		operationDesc = operationType
+	}
+	if strings.TrimSpace(resultStatus) == "" {
+		if err != nil {
+			resultStatus = constants.AssetAuditResultFailed
+		} else {
+			resultStatus = constants.AssetAuditResultSuccess
+		}
+	}
+
+	params := assetAuditSvc.BuildLogParams{
+		OperationType: operationType,
+		OperationDesc: operationDesc,
+		ResultStatus:  resultStatus,
+		BeforeData:    beforeData,
+		AfterData:     afterData,
+		BatchTotal:    batchTotal,
+		SuccessCount:  successCount,
+		FailCount:     failCount,
+	}
+	if device != nil {
+		params.AssetID = device.ID
+		params.AssetIdentifier = device.VirtualNo
+	}
+	if err != nil {
+		params.ErrorCode, params.ErrorMsg = assetAuditSvc.BuildErrorInfo(err)
+	}
+
+	s.logDeviceAudit(ctx, params)
+}
+
+func deviceSnapshot(device *model.Device) map[string]any {
+	if device == nil {
+		return nil
+	}
+	return map[string]any{
+		"id":              device.ID,
+		"virtual_no":      device.VirtualNo,
+		"shop_id":         device.ShopID,
+		"status":          device.Status,
+		"series_id":       device.SeriesID,
+		"enable_polling":  device.EnablePolling,
+		"realname_policy": device.RealnamePolicy,
+	}
+}

internal/service/device/binding.go

@@ -77,37 +77,195 @@ func (s *Service) BindCard(ctx context.Context, deviceID uint, req *dto.BindCard
 	device, err := s.deviceStore.GetByID(ctx, deviceID)
 	if err != nil {
 		if err == gorm.ErrRecordNotFound {
-			return nil, errors.New(errors.CodeNotFound, "设备不存在")
+			appErr := errors.New(errors.CodeNotFound, "设备不存在")
+			s.logDeviceOperation(
+				ctx,
+				constants.AssetAuditOpDeviceBindCard,
+				"设备绑卡失败",
+				constants.AssetAuditResultFailed,
+				nil,
+				nil,
+				map[string]any{
+					"device_id":     deviceID,
+					"iot_card_id":   req.IotCardID,
+					"slot_position": req.SlotPosition,
+				},
+				0,
+				0,
+				0,
+				appErr,
+			)
+			return nil, appErr
 		}
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceBindCard,
+			"设备绑卡失败",
+			constants.AssetAuditResultFailed,
+			nil,
+			nil,
+			map[string]any{
+				"device_id":     deviceID,
+				"iot_card_id":   req.IotCardID,
+				"slot_position": req.SlotPosition,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return nil, err
 	}
 
 	if req.SlotPosition > device.MaxSimSlots {
-		return nil, errors.New(errors.CodeInvalidParam, "插槽位置超出设备最大插槽数")
+		appErr := errors.New(errors.CodeInvalidParam, "插槽位置超出设备最大插槽数")
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceBindCard,
+			"设备绑卡被拒绝",
+			constants.AssetAuditResultDenied,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{
+				"iot_card_id":   req.IotCardID,
+				"slot_position": req.SlotPosition,
+			},
+			0,
+			0,
+			0,
+			appErr,
+		)
+		return nil, appErr
 	}
 
 	existingBinding, err := s.deviceSimBindingStore.GetByDeviceAndSlot(ctx, device.ID, req.SlotPosition)
 	if err != nil && err != gorm.ErrRecordNotFound {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceBindCard,
+			"设备绑卡失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{
+				"iot_card_id":   req.IotCardID,
+				"slot_position": req.SlotPosition,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return nil, err
 	}
 	if existingBinding != nil {
-		return nil, errors.New(errors.CodeConflict, "该插槽已有绑定的卡")
+		appErr := errors.New(errors.CodeConflict, "该插槽已有绑定的卡")
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceBindCard,
+			"设备绑卡被拒绝",
+			constants.AssetAuditResultDenied,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{
+				"iot_card_id":   req.IotCardID,
+				"slot_position": req.SlotPosition,
+			},
+			0,
+			0,
+			0,
+			appErr,
+		)
+		return nil, appErr
 	}
 
 	card, err := s.iotCardStore.GetByID(ctx, req.IotCardID)
 	if err != nil {
 		if err == gorm.ErrRecordNotFound {
-			return nil, errors.New(errors.CodeIotCardNotFound)
+			appErr := errors.New(errors.CodeIotCardNotFound)
+			s.logDeviceOperation(
+				ctx,
+				constants.AssetAuditOpDeviceBindCard,
+				"设备绑卡失败",
+				constants.AssetAuditResultFailed,
+				device,
+				map[string]any{"device": deviceSnapshot(device)},
+				map[string]any{
+					"iot_card_id":   req.IotCardID,
+					"slot_position": req.SlotPosition,
+				},
+				0,
+				0,
+				0,
+				appErr,
+			)
+			return nil, appErr
 		}
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceBindCard,
+			"设备绑卡失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{
+				"iot_card_id":   req.IotCardID,
+				"slot_position": req.SlotPosition,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return nil, err
 	}
 
 	activeBinding, err := s.deviceSimBindingStore.GetActiveBindingByCardID(ctx, card.ID)
 	if err != nil && err != gorm.ErrRecordNotFound {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceBindCard,
+			"设备绑卡失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{
+				"iot_card_id":   req.IotCardID,
+				"slot_position": req.SlotPosition,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return nil, err
 	}
 	if activeBinding != nil {
-		return nil, errors.New(errors.CodeIotCardBoundToDevice, "该卡已绑定到其他设备")
+		appErr := errors.New(errors.CodeIotCardBoundToDevice, "该卡已绑定到其他设备")
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceBindCard,
+			"设备绑卡被拒绝",
+			constants.AssetAuditResultDenied,
+			device,
+			map[string]any{
+				"device": deviceSnapshot(device),
+				"card": map[string]any{
+					"id":     card.ID,
+					"iccid":  card.ICCID,
+					"status": card.Status,
+				},
+			},
+			map[string]any{
+				"iot_card_id":   req.IotCardID,
+				"slot_position": req.SlotPosition,
+			},
+			0,
+			0,
+			0,
+			appErr,
+		)
+		return nil, appErr
 	}
 
 	binding := &model.DeviceSimBinding{
@@ -118,6 +276,28 @@ func (s *Service) BindCard(ctx context.Context, deviceID uint, req *dto.BindCard
 	}
 
 	if err := s.deviceSimBindingStore.Create(ctx, binding); err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceBindCard,
+			"设备绑卡失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{
+				"device": deviceSnapshot(device),
+				"card": map[string]any{
+					"id":     card.ID,
+					"iccid":  card.ICCID,
+					"status": card.Status,
+				},
+			},
+			map[string]any{
+				"slot_position": req.SlotPosition,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return nil, err
 	}
 
@@ -130,6 +310,32 @@ func (s *Service) BindCard(ctx context.Context, deviceID uint, req *dto.BindCard
 		)
 	}
 
+	s.logDeviceOperation(
+		ctx,
+		constants.AssetAuditOpDeviceBindCard,
+		"设备绑卡",
+		constants.AssetAuditResultSuccess,
+		device,
+		map[string]any{
+			"device": deviceSnapshot(device),
+			"card": map[string]any{
+				"id":     card.ID,
+				"iccid":  card.ICCID,
+				"status": card.Status,
+			},
+		},
+		map[string]any{
+			"binding_id":    binding.ID,
+			"slot_position": req.SlotPosition,
+			"iot_card_id":   card.ID,
+			"iccid":         card.ICCID,
+		},
+		1,
+		1,
+		0,
+		nil,
+	)
+
 	return &dto.BindCardToDeviceResponse{
 		BindingID: binding.ID,
 		Message:   "绑定成功",
@@ -140,20 +346,97 @@ func (s *Service) UnbindCard(ctx context.Context, deviceID uint, cardID uint) (*
 	device, err := s.deviceStore.GetByID(ctx, deviceID)
 	if err != nil {
 		if err == gorm.ErrRecordNotFound {
-			return nil, errors.New(errors.CodeNotFound, "设备不存在")
+			appErr := errors.New(errors.CodeNotFound, "设备不存在")
+			s.logDeviceOperation(
+				ctx,
+				constants.AssetAuditOpDeviceUnbindCard,
+				"设备解绑卡失败",
+				constants.AssetAuditResultFailed,
+				nil,
+				nil,
+				map[string]any{
+					"device_id":   deviceID,
+					"iot_card_id": cardID,
+				},
+				0,
+				0,
+				0,
+				appErr,
+			)
+			return nil, appErr
 		}
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceUnbindCard,
+			"设备解绑卡失败",
+			constants.AssetAuditResultFailed,
+			nil,
+			nil,
+			map[string]any{
+				"device_id":   deviceID,
+				"iot_card_id": cardID,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return nil, err
 	}
 
 	binding, err := s.deviceSimBindingStore.GetByDeviceAndCard(ctx, device.ID, cardID)
 	if err != nil {
 		if err == gorm.ErrRecordNotFound {
-			return nil, errors.New(errors.CodeNotFound, "该卡未绑定到此设备")
+			appErr := errors.New(errors.CodeNotFound, "该卡未绑定到此设备")
+			s.logDeviceOperation(
+				ctx,
+				constants.AssetAuditOpDeviceUnbindCard,
+				"设备解绑卡被拒绝",
+				constants.AssetAuditResultDenied,
+				device,
+				map[string]any{"device": deviceSnapshot(device)},
+				map[string]any{"iot_card_id": cardID},
+				0,
+				0,
+				0,
+				appErr,
+			)
+			return nil, appErr
 		}
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceUnbindCard,
+			"设备解绑卡失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{"iot_card_id": cardID},
+			0,
+			0,
+			0,
+			err,
+		)
 		return nil, err
 	}
 
 	if err := s.deviceSimBindingStore.Unbind(ctx, binding.ID); err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceUnbindCard,
+			"设备解绑卡失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{
+				"device":      deviceSnapshot(device),
+				"binding_id":  binding.ID,
+				"iot_card_id": binding.IotCardID,
+			},
+			nil,
+			0,
+			0,
+			0,
+			err,
+		)
 		return nil, err
 	}
 
@@ -166,6 +449,27 @@ func (s *Service) UnbindCard(ctx context.Context, deviceID uint, cardID uint) (*
 		)
 	}
 
+	s.logDeviceOperation(
+		ctx,
+		constants.AssetAuditOpDeviceUnbindCard,
+		"设备解绑卡",
+		constants.AssetAuditResultSuccess,
+		device,
+		map[string]any{
+			"device":      deviceSnapshot(device),
+			"binding_id":  binding.ID,
+			"iot_card_id": binding.IotCardID,
+		},
+		map[string]any{
+			"iot_card_id": cardID,
+			"unbind":      true,
+		},
+		1,
+		1,
+		0,
+		nil,
+	)
+
 	return &dto.UnbindCardFromDeviceResponse{
 		Message: "解绑成功",
 	}, nil

internal/service/device/gateway_service.go

@@ -4,26 +4,28 @@ import (
 	"context"
 
 	"github.com/break/junhong_cmp_fiber/internal/gateway"
+	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/internal/model/dto"
+	"github.com/break/junhong_cmp_fiber/pkg/constants"
 	"github.com/break/junhong_cmp_fiber/pkg/errors"
 )
 
-// getDeviceIMEI 通过标识符获取设备并验证 IMEI 存在
+// getGatewayDevice 通过标识符获取设备并验证 IMEI 存在
 // 提供统一的设备查找 + IMEI 校验逻辑，供所有 Gateway 代理方法复用
-func (s *Service) getDeviceIMEI(ctx context.Context, identifier string) (string, error) {
+func (s *Service) getGatewayDevice(ctx context.Context, identifier string) (*model.Device, string, error) {
 	device, err := s.deviceStore.GetByIdentifier(ctx, identifier)
 	if err != nil {
-		return "", errors.New(errors.CodeNotFound, "设备不存在或无权限访问")
+		return nil, "", errors.New(errors.CodeNotFound, "设备不存在或无权限访问")
 	}
 	if device.IMEI == "" {
-		return "", errors.New(errors.CodeInvalidParam, "该设备未配置 IMEI，无法调用网关接口")
+		return nil, "", errors.New(errors.CodeInvalidParam, "该设备未配置 IMEI，无法调用网关接口")
 	}
-	return device.IMEI, nil
+	return device, device.IMEI, nil
 }
 
 // GatewayGetDeviceInfo 通过标识符查询设备网关信息
 func (s *Service) GatewayGetDeviceInfo(ctx context.Context, identifier string) (*gateway.DeviceInfoResp, error) {
-	imei, err := s.getDeviceIMEI(ctx, identifier)
+	_, imei, err := s.getGatewayDevice(ctx, identifier)
 	if err != nil {
 		return nil, err
 	}
@@ -34,7 +36,7 @@ func (s *Service) GatewayGetDeviceInfo(ctx context.Context, identifier string) (
 
 // GatewayGetSlotInfo 通过标识符查询设备卡槽信息
 func (s *Service) GatewayGetSlotInfo(ctx context.Context, identifier string) (*gateway.SlotInfoResp, error) {
-	imei, err := s.getDeviceIMEI(ctx, identifier)
+	_, imei, err := s.getGatewayDevice(ctx, identifier)
 	if err != nil {
 		return nil, err
 	}
@@ -45,73 +47,356 @@ func (s *Service) GatewayGetSlotInfo(ctx context.Context, identifier string) (*g
 
 // GatewaySetSpeedLimit 通过标识符设置设备限速
 func (s *Service) GatewaySetSpeedLimit(ctx context.Context, identifier string, req *dto.SetSpeedLimitRequest) error {
-	imei, err := s.getDeviceIMEI(ctx, identifier)
+	device, imei, err := s.getGatewayDevice(ctx, identifier)
 	if err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceSpeedLimit,
+			"设备限速失败",
+			constants.AssetAuditResultFailed,
+			nil,
+			nil,
+			map[string]any{
+				"identifier":  identifier,
+				"speed_limit": req.SpeedLimit,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return err
 	}
-	return s.gatewayClient.SetSpeedLimit(ctx, &gateway.SpeedLimitReq{
+	if err = s.gatewayClient.SetSpeedLimit(ctx, &gateway.SpeedLimitReq{
 		DeviceID:   imei,
 		SpeedLimit: req.SpeedLimit,
-	})
+	}); err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceSpeedLimit,
+			"设备限速失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{"speed_limit": req.SpeedLimit},
+			0,
+			0,
+			0,
+			err,
+		)
+		return err
+	}
+
+	s.logDeviceOperation(
+		ctx,
+		constants.AssetAuditOpDeviceSpeedLimit,
+		"设备限速",
+		constants.AssetAuditResultSuccess,
+		device,
+		map[string]any{"device": deviceSnapshot(device)},
+		map[string]any{"speed_limit": req.SpeedLimit},
+		0,
+		0,
+		0,
+		nil,
+	)
+	return nil
 }
 
 // GatewaySetWiFi 通过标识符设置设备 WiFi
 func (s *Service) GatewaySetWiFi(ctx context.Context, identifier string, req *dto.SetWiFiRequest) error {
-	imei, err := s.getDeviceIMEI(ctx, identifier)
+	device, imei, err := s.getGatewayDevice(ctx, identifier)
 	if err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceSetWiFi,
+			"设备设置WiFi失败",
+			constants.AssetAuditResultFailed,
+			nil,
+			nil,
+			map[string]any{
+				"identifier": identifier,
+				"card_no":    req.CardNo,
+				"ssid":       req.SSID,
+				"enabled":    req.Enabled,
+				"password":   req.Password,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return err
 	}
-	return s.gatewayClient.SetWiFi(ctx, &gateway.WiFiReq{
+	if err = s.gatewayClient.SetWiFi(ctx, &gateway.WiFiReq{
 		CardNo:   req.CardNo,
 		DeviceID: imei,
 		SSID:     req.SSID,
 		Password: req.Password,
 		Enabled:  req.Enabled,
-	})
+	}); err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceSetWiFi,
+			"设备设置WiFi失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{
+				"card_no":  req.CardNo,
+				"ssid":     req.SSID,
+				"enabled":  req.Enabled,
+				"password": req.Password,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
+		return err
+	}
+
+	s.logDeviceOperation(
+		ctx,
+		constants.AssetAuditOpDeviceSetWiFi,
+		"设备设置WiFi",
+		constants.AssetAuditResultSuccess,
+		device,
+		map[string]any{"device": deviceSnapshot(device)},
+		map[string]any{
+			"card_no":  req.CardNo,
+			"ssid":     req.SSID,
+			"enabled":  req.Enabled,
+			"password": req.Password,
+		},
+		0,
+		0,
+		0,
+		nil,
+	)
+	return nil
 }
 
 // GatewaySwitchCard 通过标识符切换设备使用的卡
 func (s *Service) GatewaySwitchCard(ctx context.Context, identifier string, req *dto.SwitchCardRequest) error {
-	imei, err := s.getDeviceIMEI(ctx, identifier)
+	device, imei, err := s.getGatewayDevice(ctx, identifier)
 	if err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceSwitchCard,
+			"设备切卡失败",
+			constants.AssetAuditResultFailed,
+			nil,
+			nil,
+			map[string]any{
+				"identifier":   identifier,
+				"target_iccid": req.TargetICCID,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return err
 	}
-	return s.gatewayClient.SwitchCard(ctx, &gateway.SwitchCardReq{
+	if err = s.gatewayClient.SwitchCard(ctx, &gateway.SwitchCardReq{
 		CardNo: imei,
 		ICCID:  req.TargetICCID,
-	})
+	}); err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceSwitchCard,
+			"设备切卡失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{"target_iccid": req.TargetICCID},
+			0,
+			0,
+			0,
+			err,
+		)
+		return err
+	}
+
+	s.logDeviceOperation(
+		ctx,
+		constants.AssetAuditOpDeviceSwitchCard,
+		"设备切卡",
+		constants.AssetAuditResultSuccess,
+		device,
+		map[string]any{"device": deviceSnapshot(device)},
+		map[string]any{"target_iccid": req.TargetICCID},
+		0,
+		0,
+		0,
+		nil,
+	)
+	return nil
 }
 
 // GatewayRebootDevice 通过标识符重启设备
 func (s *Service) GatewayRebootDevice(ctx context.Context, identifier string) error {
-	imei, err := s.getDeviceIMEI(ctx, identifier)
+	device, imei, err := s.getGatewayDevice(ctx, identifier)
 	if err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceReboot,
+			"设备重启失败",
+			constants.AssetAuditResultFailed,
+			nil,
+			nil,
+			map[string]any{"identifier": identifier},
+			0,
+			0,
+			0,
+			err,
+		)
 		return err
 	}
-	return s.gatewayClient.RebootDevice(ctx, &gateway.DeviceOperationReq{
+	if err = s.gatewayClient.RebootDevice(ctx, &gateway.DeviceOperationReq{
 		DeviceID: imei,
-	})
+	}); err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceReboot,
+			"设备重启失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			nil,
+			0,
+			0,
+			0,
+			err,
+		)
+		return err
+	}
+
+	s.logDeviceOperation(
+		ctx,
+		constants.AssetAuditOpDeviceReboot,
+		"设备重启",
+		constants.AssetAuditResultSuccess,
+		device,
+		map[string]any{"device": deviceSnapshot(device)},
+		nil,
+		0,
+		0,
+		0,
+		nil,
+	)
+	return nil
 }
 
 // GatewayResetDevice 通过标识符恢复设备出厂设置
 func (s *Service) GatewayResetDevice(ctx context.Context, identifier string) error {
-	imei, err := s.getDeviceIMEI(ctx, identifier)
+	device, imei, err := s.getGatewayDevice(ctx, identifier)
 	if err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceReset,
+			"设备恢复出厂失败",
+			constants.AssetAuditResultFailed,
+			nil,
+			nil,
+			map[string]any{"identifier": identifier},
+			0,
+			0,
+			0,
+			err,
+		)
 		return err
 	}
-	return s.gatewayClient.ResetDevice(ctx, &gateway.DeviceOperationReq{
+	if err = s.gatewayClient.ResetDevice(ctx, &gateway.DeviceOperationReq{
 		DeviceID: imei,
-	})
+	}); err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceReset,
+			"设备恢复出厂失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			nil,
+			0,
+			0,
+			0,
+			err,
+		)
+		return err
+	}
+
+	s.logDeviceOperation(
+		ctx,
+		constants.AssetAuditOpDeviceReset,
+		"设备恢复出厂",
+		constants.AssetAuditResultSuccess,
+		device,
+		map[string]any{"device": deviceSnapshot(device)},
+		nil,
+		0,
+		0,
+		0,
+		nil,
+	)
+	return nil
 }
 
 // GatewaySwitchMode 通过标识符设置设备切卡模式
 func (s *Service) GatewaySwitchMode(ctx context.Context, identifier string, req *dto.SetSwitchModeRequest) error {
-	imei, err := s.getDeviceIMEI(ctx, identifier)
+	device, imei, err := s.getGatewayDevice(ctx, identifier)
 	if err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceSwitchMode,
+			"设备切卡模式切换失败",
+			constants.AssetAuditResultFailed,
+			nil,
+			nil,
+			map[string]any{
+				"identifier":  identifier,
+				"switch_mode": req.SwitchMode,
+			},
+			0,
+			0,
+			0,
+			err,
+		)
 		return err
 	}
-	return s.gatewayClient.SwitchMode(ctx, &gateway.SwitchModeReq{
+	if err = s.gatewayClient.SwitchMode(ctx, &gateway.SwitchModeReq{
 		CardNo:     imei,
 		SwitchMode: req.SwitchMode,
-	})
+	}); err != nil {
+		s.logDeviceOperation(
+			ctx,
+			constants.AssetAuditOpDeviceSwitchMode,
+			"设备切卡模式切换失败",
+			constants.AssetAuditResultFailed,
+			device,
+			map[string]any{"device": deviceSnapshot(device)},
+			map[string]any{"switch_mode": req.SwitchMode},
+			0,
+			0,
+			0,
+			err,
+		)
+		return err
+	}
+
+	s.logDeviceOperation(
+		ctx,
+		constants.AssetAuditOpDeviceSwitchMode,
+		"设备切卡模式切换",
+		constants.AssetAuditResultSuccess,
+		device,
+		map[string]any{"device": deviceSnapshot(device)},
+		map[string]any{"switch_mode": req.SwitchMode},
+		0,
+		0,
+		0,
+		nil,
+	)
+	return nil
 }