junhong_cmp_fiber/internal/infrastructure/audit/refund.go

package audit

import (
	"context"
	"strconv"

	"gorm.io/gorm"

	refundapprovalapp "github.com/break/junhong_cmp_fiber/internal/application/refundapproval"
	"github.com/break/junhong_cmp_fiber/internal/model"
	"github.com/break/junhong_cmp_fiber/pkg/constants"
	pkgerrors "github.com/break/junhong_cmp_fiber/pkg/errors"
)

// WriteRefundApplication 将退款申请、审批和关联业务资源写入同一事务。
func (w *Writer) WriteRefundApplication(ctx context.Context, tx *gorm.DB, input refundapprovalapp.ApplicationAudit) error {
	if input.Refund == nil || input.Order == nil || input.Approval == nil || input.Submitter == nil {
		return pkgerrors.New(pkgerrors.CodeInvalidParam, "退款申请审计资源不完整")
	}
	primary := RefundResource(input.Refund, constants.AuditResourceRelationPrimary, constants.AuditResourceRoleRefundTarget)
	primary.AfterData = refundStateData(input.Refund)
	primary.SubjectVisibility = constants.AuditSubjectResult
	primary.SubjectSummary = "退款申请已提交"
	resources := []ResourceInput{
		primary,
		OrderResource(input.Order, constants.AuditResourceRelationReference, constants.AuditResourceRoleRefundOrder),
		ApprovalInstanceResource(input.Approval, constants.AuditResourceRelationAffected, constants.AuditResourceRoleRefundApproval, nil, map[string]any{"status": input.Approval.Status}),
		AccountResource(input.Submitter, constants.AuditResourceRelationReference, constants.AuditResourceRoleRefundSubmitter),
	}
	for index := 1; index < len(resources); index++ {
		resources[index].SubjectVisibility = constants.AuditSubjectInternalOnly
	}
	asset, err := RefundAssetResource(ctx, tx, input.Order, "退款申请已提交")
	if err != nil {
		return err
	}
	if asset != nil {
		resources = append(resources, *asset)
	}
	return w.Append(ctx, tx, AppendInput{
		EventID:    "refund:" + strconv.FormatUint(uint64(input.Refund.ID), 10) + ":created",
		ActionCode: constants.AuditActionRefundCreated, Summary: "提交退款申请",
		Actor:  ActorInput{Kind: constants.AuditActorAccount, ID: strconv.FormatUint(uint64(input.Submitter.ID), 10), Name: input.Submitter.Username},
		Source: constants.AuditSourceAdminAPI, ScopeType: constants.AuditScopePlatform,
		Result: constants.AuditResultSuccess, CorrelationID: input.Refund.RefundNo,
		Metadata:  map[string]any{"requested_refund_amount": input.Refund.RequestedRefundAmount},
		Resources: resources,
	})
}

// ApprovalInstanceResource 构造审批实例审计资源。
func ApprovalInstanceResource(instance *model.ApprovalInstance, relation, role string, beforeData, afterData map[string]any) ResourceInput {
	id := strconv.FormatUint(uint64(instance.ID), 10)
	return ResourceInput{
		Type: constants.AuditResourceApprovalInstance, ID: &id, Key: id, DisplayName: "审批实例 " + id,
		Relation: relation, Role: role,
		IdentitySnapshot: map[string]any{
			"id": instance.ID, "business_type": instance.BusinessType, "business_id": instance.BusinessID,
			"provider": instance.Provider, "external_ref": instance.ExternalRef, "status": instance.Status,
		},
		BeforeData: beforeData, AfterData: afterData,
	}
}

// AccountResource 构造退款链路中的后台账号资源。
func AccountResource(account *model.Account, relation, role string) ResourceInput {
	id := strconv.FormatUint(uint64(account.ID), 10)
	return ResourceInput{
		Type: constants.AuditResourceAccount, ID: &id, Key: id, DisplayName: account.Username,
		Relation: relation, Role: role, IdentitySnapshot: accountIdentity(account),
	}
}

// RefundAssetResource 构造退款订单实际关联的卡或设备资源。
func RefundAssetResource(ctx context.Context, tx *gorm.DB, order *model.Order, subjectSummary string) (*ResourceInput, error) {
	if order.IotCardID != nil {
		var card model.IotCard
		if err := tx.WithContext(ctx).First(&card, *order.IotCardID).Error; err != nil {
			return nil, pkgerrors.Wrap(pkgerrors.CodeDatabaseError, err, "查询退款关联卡审计快照失败")
		}
		id := strconv.FormatUint(uint64(card.ID), 10)
		return &ResourceInput{
			Type: constants.AuditResourceIotCard, ID: &id, Key: IotCardResourceKey(&card), DisplayName: card.ICCID,
			Relation: constants.AuditResourceRelationReference, Role: constants.AuditResourceRoleRefundAsset,
			IdentitySnapshot: IotCardIdentitySnapshot(&card), SubjectVisibility: constants.AuditSubjectResult,
			SubjectSummary: subjectSummary,
		}, nil
	}
	if order.DeviceID != nil {
		var device model.Device
		if err := tx.WithContext(ctx).First(&device, *order.DeviceID).Error; err != nil {
			return nil, pkgerrors.Wrap(pkgerrors.CodeDatabaseError, err, "查询退款关联设备审计快照失败")
		}
		id := strconv.FormatUint(uint64(device.ID), 10)
		return &ResourceInput{
			Type: constants.AuditResourceDevice, ID: &id, Key: DeviceResourceKey(&device), DisplayName: device.VirtualNo,
			Relation: constants.AuditResourceRelationReference, Role: constants.AuditResourceRoleRefundAsset,
			IdentitySnapshot: DeviceIdentitySnapshot(&device), SubjectVisibility: constants.AuditSubjectResult,
			SubjectSummary: subjectSummary,
		}, nil
	}
	return nil, nil
}

// CommissionRecordResource 构造退款失效的佣金记录资源。
func CommissionRecordResource(record *model.CommissionRecord, beforeData, afterData map[string]any) ResourceInput {
	id := strconv.FormatUint(uint64(record.ID), 10)
	return ResourceInput{
		Type: constants.AuditResourceCommissionRecord, ID: &id, Key: id, DisplayName: "佣金记录 " + id,
		Relation: constants.AuditResourceRelationAffected, Role: constants.AuditResourceRoleRefundCommission,
		IdentitySnapshot: map[string]any{
			"id": record.ID, "shop_id": record.ShopID, "order_id": record.OrderID,
			"iot_card_id": record.IotCardID, "device_id": record.DeviceID,
			"commission_source": record.CommissionSource, "amount": record.Amount,
			"status": record.Status, "released_at": record.ReleasedAt,
		},
		BeforeData: beforeData, AfterData: afterData,
	}
}

// CommissionClawbackResource 构造退款生成的佣金回溯明细资源。
// 金额按分保留负数、余额可为负，与资金事实一致；不含任何凭证或敏感内容。
func CommissionClawbackResource(record *model.CommissionClawbackRecord) ResourceInput {
	id := strconv.FormatUint(uint64(record.ID), 10)
	return ResourceInput{
		Type: constants.AuditResourceCommissionClawback, ID: &id, Key: id, DisplayName: "佣金回溯明细 " + id,
		Relation: constants.AuditResourceRelationAffected, Role: constants.AuditResourceRoleRefundClawback,
		IdentitySnapshot: map[string]any{
			"id": record.ID, "refund_id": record.RefundID, "refund_no": record.RefundNo,
			"original_commission_id": record.OriginalCommissionID,
			"order_id":               record.OrderID, "order_no": record.OrderNo, "shop_id": record.ShopID,
			"commission_source": record.CommissionSource, "amount": record.Amount,
			"balance_after": record.BalanceAfter, "withdrawable": record.Withdrawable,
			"status": record.Status, "created_at": record.CreatedAt,
		},
	}
}

func refundStateData(refund *model.RefundRequest) map[string]any {
	return map[string]any{
		"status": refund.Status, "approved_refund_amount": refund.ApprovedRefundAmount,
		"approval_instance_id": refund.ApprovalInstanceID, "processor_id": refund.ProcessorID,
		"processed_at": refund.ProcessedAt, "commission_deducted": refund.CommissionDeducted,
		"asset_reset": refund.AssetReset, "reject_reason": refund.RejectReason, "remark": refund.Remark,
	}
}