Files
junhong_cmp_fiber/internal/service/commission_withdrawal/audit.go
break 5e552d99bc 收口审计治理与套餐任务进展
Constraint: 在线热修前必须保存当前迭代分支全部有效代码进展
Confidence: medium
Scope-risk: broad
Directive: 后续修改需保持审计事件与业务事务边界一致
Tested: git diff --cached --check
Not-tested: 未运行全量测试,提交用于切换分支前保存既有工作
2026-08-05 14:30:54 +08:00

87 lines
4.7 KiB
Go

package commission_withdrawal
import (
"context"
"strconv"
"gorm.io/gorm"
"github.com/break/junhong_cmp_fiber/internal/infrastructure/audit"
"github.com/break/junhong_cmp_fiber/internal/model"
"github.com/break/junhong_cmp_fiber/pkg/constants"
"github.com/break/junhong_cmp_fiber/pkg/errors"
)
func (s *Service) appendWithdrawalDecisionAudit(ctx context.Context, tx *gorm.DB, before *model.CommissionWithdrawalRequest, wallet *model.AgentWallet, transaction *model.AgentWalletTransaction, actionCode, summary string, amount int64) error {
if s.auditWriter == nil {
return errors.New(errors.CodeInvalidStatus, "佣金提现统一审计接缝未配置")
}
var saved model.CommissionWithdrawalRequest
if err := tx.WithContext(ctx).First(&saved, before.ID).Error; err != nil {
return errors.Wrap(errors.CodeDatabaseError, err, "查询提现审批审计快照失败")
}
expectedStatus := constants.WithdrawalStatusApproved
if actionCode == constants.AuditActionCommissionWithdrawalRejected {
expectedStatus = constants.WithdrawalStatusRejected
}
if saved.Status != expectedStatus {
return errors.New(errors.CodeInvalidStatus, "提现申请终态更新未生效")
}
var shop model.Shop
if err := tx.WithContext(ctx).First(&shop, saved.ShopID).Error; err != nil {
return errors.Wrap(errors.CodeDatabaseError, err, "查询提现审批店铺审计快照失败")
}
primary := audit.CommissionWithdrawalResource(&saved, constants.AuditResourceRelationPrimary, constants.AuditResourceRoleWithdrawalTarget,
withdrawalDecisionState(before), withdrawalDecisionState(&saved))
primary.SubjectVisibility = constants.AuditSubjectResult
primary.SubjectSummary = summary
walletResource := audit.AgentWalletResource(wallet, constants.AuditResourceRelationAffected, constants.AuditResourceRoleWithdrawalWallet,
map[string]any{"balance": wallet.Balance, "frozen_balance": wallet.FrozenBalance},
map[string]any{"balance": wallet.Balance, "frozen_balance": wallet.FrozenBalance - amount})
walletResource.SubjectVisibility = constants.AuditSubjectInternalOnly
transactionResource := audit.AgentWalletTransactionResource(transaction, constants.AuditResourceRelationAffected, constants.AuditResourceRoleWithdrawalTransaction)
transactionResource.SubjectVisibility = constants.AuditSubjectInternalOnly
shopResource := audit.ShopResource(&shop, constants.AuditResourceRelationReference, constants.AuditResourceRoleWithdrawalShop)
shopResource.SubjectVisibility = constants.AuditSubjectInternalOnly
suffix := "approved"
if actionCode == constants.AuditActionCommissionWithdrawalRejected {
suffix = "rejected"
}
return s.auditWriter.Append(ctx, tx, audit.AppendInput{
EventID: "commission-withdrawal:" + strconv.FormatUint(uint64(saved.ID), 10) + ":" + suffix,
ActionCode: actionCode, Summary: summary, ScopeType: constants.AuditScopePlatform,
Result: constants.AuditResultSuccess, CorrelationID: saved.WithdrawalNo,
Metadata: map[string]any{"amount": saved.Amount, "fee": saved.Fee, "actual_amount": saved.ActualAmount, "status": saved.Status},
Resources: []audit.ResourceInput{primary, walletResource, transactionResource, shopResource},
})
}
func (s *Service) recordWithdrawalDecisionFailure(ctx context.Context, withdrawal *model.CommissionWithdrawalRequest, wallet *model.AgentWallet, actionCode, summary string, businessErr error) {
if businessErr == nil || withdrawal == nil || withdrawal.WithdrawalNo == "" || s.auditWriter == nil || s.db == nil {
return
}
primary := audit.CommissionWithdrawalResource(withdrawal, constants.AuditResourceRelationPrimary, constants.AuditResourceRoleWithdrawalTarget,
withdrawalDecisionState(withdrawal), nil)
primary.SubjectVisibility = constants.AuditSubjectInternalOnly
resources := []audit.ResourceInput{primary}
if wallet != nil {
resource := audit.AgentWalletResource(wallet, constants.AuditResourceRelationReference, constants.AuditResourceRoleWithdrawalWallet, nil, nil)
resource.SubjectVisibility = constants.AuditSubjectInternalOnly
resources = append(resources, resource)
}
s.auditWriter.RecordFailure(ctx, s.db, audit.AppendInput{
ActionCode: actionCode, Summary: summary, ScopeType: constants.AuditScopePlatform,
CorrelationID: withdrawal.WithdrawalNo, Resources: resources,
}, businessErr)
}
func withdrawalDecisionState(withdrawal *model.CommissionWithdrawalRequest) map[string]any {
return map[string]any{
"amount": withdrawal.Amount, "fee": withdrawal.Fee, "actual_amount": withdrawal.ActualAmount,
"withdrawal_method": withdrawal.WithdrawalMethod, "payment_type": withdrawal.PaymentType,
"status": withdrawal.Status, "processor_id": withdrawal.ProcessorID,
"processed_at": withdrawal.ProcessedAt, "paid_at": withdrawal.PaidAt,
"reject_reason": withdrawal.RejectReason, "remark": withdrawal.Remark,
}
}