Files
junhong_cmp_fiber/internal/infrastructure/audit/refund_channel.go
break ba0855d9eb feat(退款): AUG26-006 退款方式选择与原路退款
按 PRD 2.3/2.4/2.5 落地套餐退款的方式矩阵与原路渠道退款:

- 退款申请派生并冻结权威实收金额(线上取原成功支付记录,钱包/线下取订单实际收款),
  提交人不可填写或修改;按来源支付方式生成可选方式矩阵并在创建、提交、执行前重复校验。
- 审批切换为「每次提交一条不可变审批尝试记录 + 独立企业微信审批实例」,业务标识取尝试
  记录主键;终态消费按尝试记录优先、退款申请兜底双读,兼容存量无实例与已关联实例申请。
  新增活动退款部分唯一索引 (order_id) WHERE status IN (1,5,6)。
- 本地人工终审保持既有开关,补齐通过入口的 approval_instance_id IS NULL 守卫,使三个
  入口一致拒绝已关联审批实例的申请;重提按尝试模式重写(仅已拒绝/已退回/原路失败且无异常)。
- 权益时点:企微通过事务写退款终态、按方式确定的订单态、钱包回款、员工账单冲销与可靠
  失效事实;套餐失效/接续/停机仍由既有可靠机制最终一致执行,不把外部调用放入资金事务。
  订单支付状态按方式置位:凭证退款与退回原钱包在企微通过时置已退款,原路须渠道明确成功。
- 按官方契约实现微信直连 v3、微信 v2(双向证书)、富友(/commonRefund 与 /refundQuery)、
  支付宝四类原路退款;能力只由服务商类型与退款必需凭证完整性决定,无人工开关。
  渠道请求号在提交时冻结到尝试记录,并以 channel_submitted_at 条件认领保证资金动作至多
  提交一次(重复投递只查询不二次提交);不向任何渠道传递退款结果通知地址。
- 新增 refund:channel:recovery 恢复任务只查询回填;本地查询窗口超期(富友 72 小时、
  微信 v2 7 天)转原路退款失败、渠道状态已失败、分类超时未知并置异常转人工,不放行自动
  重提以避免重复退款。
- 同步退款 DTO/导出/审计资源与审计查询关联、商户凭证文档,并修正 fuiou 集成契约文档。

迁移 000218(退款尝试与渠道退款事实)、000219(微信 v2 客户端证书凭证)成对提供,
未修改既有迁移;测试库 junhong_cmp_test 完成 up/down/up 与行为核对,未调用真实渠道。
2026-09-14 11:55:16 +08:00

106 lines
4.9 KiB
Go
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
package audit
import (
"context"
"strconv"
"gorm.io/gorm"
"github.com/break/junhong_cmp_fiber/internal/model"
"github.com/break/junhong_cmp_fiber/pkg/auditcontext"
"github.com/break/junhong_cmp_fiber/pkg/constants"
"github.com/break/junhong_cmp_fiber/pkg/errors"
)
// WriteRefundChannelResult 在调用方事务内写入渠道原路退款的调用、恢复与异常事实。
//
// 主资源固定为退款单,渠道原路退款事实作为引用资源;快照只记录业务标识、金额、状态与
// 结构化失败分类,不记录商户密钥、渠道报文或客户收款信息原文。摘要由调用方提供,
// 必须为不含凭证与渠道报文的简短中文说明。
//
// 渠道调用与恢复都由后台任务触发,因此操作者固定为系统任务;审计上下文提供了更具体的
// 操作者标识时沿用,避免任务未装配审计上下文时审计被拒绝并连带回滚业务事务。
func (w *Writer) WriteRefundChannelResult(ctx context.Context, tx *gorm.DB, refund *model.RefundRequest, action, message string) error {
if refund == nil || refund.ID == 0 || refund.RefundNo == "" {
return errors.New(errors.CodeInvalidParam, "退款渠道审计资源不完整")
}
summary := message
if summary == "" {
summary = "渠道原路退款结果更新"
}
refundID := strconv.FormatUint(uint64(refund.ID), 10)
actorID, actorName := constants.AuditActorIDRefundChannel, "退款渠道原路退款任务"
if linkage := auditcontext.From(ctx); linkage.ActorID != "" {
actorID = linkage.ActorID
if linkage.ActorName != "" {
actorName = linkage.ActorName
}
}
resources := refundChannelResources(refund, refundID, summary)
// 用 AppendAndGet 而非 Append渠道调用与恢复的审计属于「要求成功必达」的事实
// 必须与业务事实同事务原子提交,失败时向调用方显式返回错误。
if _, err := w.AppendAndGet(ctx, tx, AppendInput{
ActionCode: action, Summary: summary,
Actor: ActorInput{Kind: constants.AuditActorSystemTask, ID: actorID, Name: actorName},
Source: constants.AuditSourceWorker, ScopeType: constants.AuditScopePlatform,
Result: constants.AuditResultSuccess, CorrelationID: refund.RefundNo, Resources: resources,
}); err != nil {
return errors.Wrap(errors.CodeDatabaseError, err, "写入退款渠道审计失败")
}
return nil
}
// refundChannelResources 构造退款渠道审计资源:退款单为主资源,渠道原路退款事实为引用资源。
func refundChannelResources(refund *model.RefundRequest, refundID, summary string) []ResourceInput {
return []ResourceInput{
{
Type: constants.AuditResourceRefund, ID: &refundID, Key: refund.RefundNo, DisplayName: refund.RefundNo,
Relation: constants.AuditResourceRelationPrimary, Role: constants.AuditResourceRoleRefundTarget,
IdentitySnapshot: map[string]any{
"id": refund.ID, "refund_no": refund.RefundNo, "method": refund.Method,
"frozen_actual_received_amount": refund.FrozenActualReceivedAmount,
"requested_refund_amount": refund.RequestedRefundAmount,
"approved_refund_amount": refund.ApprovedRefundAmount,
"status": refund.Status,
"channel_refund_status": refund.ChannelRefundStatus,
"channel_refund_no": refund.ChannelRefundNo,
"channel_refund_request_no": refund.ChannelRefundRequestNo,
"channel_refund_amount": refund.ChannelRefundAmount,
"failure_reason": refund.FailureReason,
"anomaly_flag": refund.AnomalyFlag,
},
AfterData: channelRefundState(refund),
SubjectVisibility: constants.AuditSubjectResult, SubjectSummary: summary,
},
{
Type: constants.AuditResourceRefundChannelRefund, ID: &refundID, Key: refund.RefundNo,
DisplayName: "渠道原路退款 " + refund.RefundNo,
Relation: constants.AuditResourceRelationReference, Role: constants.AuditResourceRoleRefundChannelRefund,
IdentitySnapshot: map[string]any{
"id": refund.ID, "refund_no": refund.RefundNo,
"channel_refund_status": refund.ChannelRefundStatus,
"channel_refund_no": refund.ChannelRefundNo,
"channel_refund_request_no": refund.ChannelRefundRequestNo,
"channel_refund_amount": refund.ChannelRefundAmount,
"failure_reason": refund.FailureReason,
"anomaly_flag": refund.AnomalyFlag,
},
},
}
}
// channelRefundState 构造渠道原路退款状态快照,只包含状态与结构化失败分类。
func channelRefundState(refund *model.RefundRequest) map[string]any {
state := map[string]any{
"status": refund.Status,
"channel_refund_status": refund.ChannelRefundStatus,
"channel_refund_amount": refund.ChannelRefundAmount,
"failure_reason": refund.FailureReason,
"anomaly_flag": refund.AnomalyFlag,
}
if refund.ChannelRefundedAt != nil {
state["channel_refunded_at"] = *refund.ChannelRefundedAt
}
return state
}