Constraint: 在线热修前必须保存当前迭代分支全部有效代码进展 Confidence: medium Scope-risk: broad Directive: 后续修改需保持审计事件与业务事务边界一致 Tested: git diff --cached --check Not-tested: 未运行全量测试,提交用于切换分支前保存既有工作
87 lines
4.7 KiB
Go
87 lines
4.7 KiB
Go
package commission_withdrawal
|
|
|
|
import (
|
|
"context"
|
|
"strconv"
|
|
|
|
"gorm.io/gorm"
|
|
|
|
"github.com/break/junhong_cmp_fiber/internal/infrastructure/audit"
|
|
"github.com/break/junhong_cmp_fiber/internal/model"
|
|
"github.com/break/junhong_cmp_fiber/pkg/constants"
|
|
"github.com/break/junhong_cmp_fiber/pkg/errors"
|
|
)
|
|
|
|
func (s *Service) appendWithdrawalDecisionAudit(ctx context.Context, tx *gorm.DB, before *model.CommissionWithdrawalRequest, wallet *model.AgentWallet, transaction *model.AgentWalletTransaction, actionCode, summary string, amount int64) error {
|
|
if s.auditWriter == nil {
|
|
return errors.New(errors.CodeInvalidStatus, "佣金提现统一审计接缝未配置")
|
|
}
|
|
var saved model.CommissionWithdrawalRequest
|
|
if err := tx.WithContext(ctx).First(&saved, before.ID).Error; err != nil {
|
|
return errors.Wrap(errors.CodeDatabaseError, err, "查询提现审批审计快照失败")
|
|
}
|
|
expectedStatus := constants.WithdrawalStatusApproved
|
|
if actionCode == constants.AuditActionCommissionWithdrawalRejected {
|
|
expectedStatus = constants.WithdrawalStatusRejected
|
|
}
|
|
if saved.Status != expectedStatus {
|
|
return errors.New(errors.CodeInvalidStatus, "提现申请终态更新未生效")
|
|
}
|
|
var shop model.Shop
|
|
if err := tx.WithContext(ctx).First(&shop, saved.ShopID).Error; err != nil {
|
|
return errors.Wrap(errors.CodeDatabaseError, err, "查询提现审批店铺审计快照失败")
|
|
}
|
|
primary := audit.CommissionWithdrawalResource(&saved, constants.AuditResourceRelationPrimary, constants.AuditResourceRoleWithdrawalTarget,
|
|
withdrawalDecisionState(before), withdrawalDecisionState(&saved))
|
|
primary.SubjectVisibility = constants.AuditSubjectResult
|
|
primary.SubjectSummary = summary
|
|
walletResource := audit.AgentWalletResource(wallet, constants.AuditResourceRelationAffected, constants.AuditResourceRoleWithdrawalWallet,
|
|
map[string]any{"balance": wallet.Balance, "frozen_balance": wallet.FrozenBalance},
|
|
map[string]any{"balance": wallet.Balance, "frozen_balance": wallet.FrozenBalance - amount})
|
|
walletResource.SubjectVisibility = constants.AuditSubjectInternalOnly
|
|
transactionResource := audit.AgentWalletTransactionResource(transaction, constants.AuditResourceRelationAffected, constants.AuditResourceRoleWithdrawalTransaction)
|
|
transactionResource.SubjectVisibility = constants.AuditSubjectInternalOnly
|
|
shopResource := audit.ShopResource(&shop, constants.AuditResourceRelationReference, constants.AuditResourceRoleWithdrawalShop)
|
|
shopResource.SubjectVisibility = constants.AuditSubjectInternalOnly
|
|
suffix := "approved"
|
|
if actionCode == constants.AuditActionCommissionWithdrawalRejected {
|
|
suffix = "rejected"
|
|
}
|
|
return s.auditWriter.Append(ctx, tx, audit.AppendInput{
|
|
EventID: "commission-withdrawal:" + strconv.FormatUint(uint64(saved.ID), 10) + ":" + suffix,
|
|
ActionCode: actionCode, Summary: summary, ScopeType: constants.AuditScopePlatform,
|
|
Result: constants.AuditResultSuccess, CorrelationID: saved.WithdrawalNo,
|
|
Metadata: map[string]any{"amount": saved.Amount, "fee": saved.Fee, "actual_amount": saved.ActualAmount, "status": saved.Status},
|
|
Resources: []audit.ResourceInput{primary, walletResource, transactionResource, shopResource},
|
|
})
|
|
}
|
|
|
|
func (s *Service) recordWithdrawalDecisionFailure(ctx context.Context, withdrawal *model.CommissionWithdrawalRequest, wallet *model.AgentWallet, actionCode, summary string, businessErr error) {
|
|
if businessErr == nil || withdrawal == nil || withdrawal.WithdrawalNo == "" || s.auditWriter == nil || s.db == nil {
|
|
return
|
|
}
|
|
primary := audit.CommissionWithdrawalResource(withdrawal, constants.AuditResourceRelationPrimary, constants.AuditResourceRoleWithdrawalTarget,
|
|
withdrawalDecisionState(withdrawal), nil)
|
|
primary.SubjectVisibility = constants.AuditSubjectInternalOnly
|
|
resources := []audit.ResourceInput{primary}
|
|
if wallet != nil {
|
|
resource := audit.AgentWalletResource(wallet, constants.AuditResourceRelationReference, constants.AuditResourceRoleWithdrawalWallet, nil, nil)
|
|
resource.SubjectVisibility = constants.AuditSubjectInternalOnly
|
|
resources = append(resources, resource)
|
|
}
|
|
s.auditWriter.RecordFailure(ctx, s.db, audit.AppendInput{
|
|
ActionCode: actionCode, Summary: summary, ScopeType: constants.AuditScopePlatform,
|
|
CorrelationID: withdrawal.WithdrawalNo, Resources: resources,
|
|
}, businessErr)
|
|
}
|
|
|
|
func withdrawalDecisionState(withdrawal *model.CommissionWithdrawalRequest) map[string]any {
|
|
return map[string]any{
|
|
"amount": withdrawal.Amount, "fee": withdrawal.Fee, "actual_amount": withdrawal.ActualAmount,
|
|
"withdrawal_method": withdrawal.WithdrawalMethod, "payment_type": withdrawal.PaymentType,
|
|
"status": withdrawal.Status, "processor_id": withdrawal.ProcessorID,
|
|
"processed_at": withdrawal.ProcessedAt, "paid_at": withdrawal.PaidAt,
|
|
"reject_reason": withdrawal.RejectReason, "remark": withdrawal.Remark,
|
|
}
|
|
}
|