feat(debug-trace): 调试链接权限 + trace_url 落库与按权限下发

- user 加 debug_trace_enabled、comparison_record 加 trace_url
- 迁移 f8d3b1e60a27：加两列，down_revision 用 tuple 顺带合并既存双 head(invite_fingerprint_table + 044dce6e9b1f)
- UserOut 加 debug_trace_enabled → /me 与登录响应带出
- ComparisonRecordIn/Out 加 trace_url；upsert 落库
- /compare/records 列表与详情按 user.debug_trace_enabled 下发；详情连 raw_payload 里那份一并抹掉，防权限绕过
- admin 加 POST /users/{id}/debug-trace（operator + 审计），列表带该字段

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

alembic/versions/a8c47fc4dc39_merge_invite_fingerprint_and_ad_reward_.py

@@ -1,26 +0,0 @@
-"""merge invite_fingerprint and ad_reward heads
-
-Revision ID: a8c47fc4dc39
-Revises: invite_fingerprint_table, 044dce6e9b1f
-Create Date: 2026-06-10 01:03:03.699443
-
-"""
-from typing import Sequence, Union
-
-from alembic import op
-import sqlalchemy as sa
-
-
-# revision identifiers, used by Alembic.
-revision: str = 'a8c47fc4dc39'
-down_revision: Union[str, Sequence[str], None] = ('invite_fingerprint_table', '044dce6e9b1f')
-branch_labels: Union[str, Sequence[str], None] = None
-depends_on: Union[str, Sequence[str], None] = None
-
-
-def upgrade() -> None:
-    pass
-
-
-def downgrade() -> None:
-    pass

app/admin/main.py

@@ -21,7 +21,6 @@ from app.admin.routers.dashboard import router as dashboard_router
 from app.admin.routers.ops_stat_config import router as ops_stat_config_router
 from app.admin.routers.feedback import router as feedback_router
 from app.admin.routers.ops_marquee_seed import router as ops_marquee_seed_router
-from app.admin.routers.price_report import router as price_report_router
 from app.admin.routers.users import router as users_router
 from app.admin.routers.wallet import router as wallet_router
 from app.admin.routers.withdraw import router as withdraw_router
@@ -81,7 +80,6 @@ admin_app.include_router(ops_marquee_seed_router)
 admin_app.include_router(users_router)
 admin_app.include_router(wallet_router)
 admin_app.include_router(withdraw_router)
-admin_app.include_router(price_report_router)
 admin_app.include_router(feedback_router)
 admin_app.include_router(admins_router)
 admin_app.include_router(audit_router)

app/admin/repositories/mutations.py

@@ -8,13 +8,9 @@ set_user_status / update_feedback_status 支持 commit=False,让 router 把"业
 """
 from __future__ import annotations
 
-from datetime import datetime
-
 from sqlalchemy.orm import Session
 
-from app.core.rewards import CN_TZ
 from app.models.feedback import Feedback
-from app.models.price_report import PriceReport
 from app.models.user import User
 
 
@@ -52,30 +48,3 @@ def update_feedback_status(
     else:
         db.flush()
     return feedback
-
-
-def review_price_report(
-    db: Session,
-    report: PriceReport,
-    *,
-    status: str,
-    reward_coins: int | None = None,
-    reject_reason: str | None = None,
-    commit: bool = True,
-) -> PriceReport:
-    """审核上报:置 approved/rejected + 记审核时间;通过填 reward_coins、拒绝填 reject_reason。
-
-    发金币(wallet.grant_coins)不在这里——由 router 在同一事务里调,涉钱逻辑不重写(见模块头注释)。
-    """
-    report.status = status
-    if reward_coins is not None:
-        report.reward_coins = reward_coins
-    if reject_reason is not None:
-        report.reject_reason = reject_reason
-    report.reviewed_at = datetime.now(CN_TZ).replace(tzinfo=None)  # 北京 wall-clock,同 created_at
-    if commit:
-        db.commit()
-        db.refresh(report)
-    else:
-        db.flush()
-    return report

app/admin/repositories/queries.py

@@ -14,7 +14,6 @@ from sqlalchemy.orm import Session
 from app.models.admin import AdminAuditLog
 from app.models.comparison import ComparisonRecord
 from app.models.feedback import Feedback
-from app.models.price_report import PriceReport
 from app.models.user import User
 from app.models.wallet import CashTransaction, CoinAccount, CoinTransaction, WithdrawOrder
 
@@ -396,34 +395,3 @@ def get_user_overview(db: Session, user_id: int) -> dict | None:
         ).scalar_one(),
         "feedback_total": _count(Feedback, Feedback.user_id == user_id),
     }
-
-
-def list_price_reports(
-    db: Session,
-    *,
-    status: str | None = None,
-    user_id: int | None = None,
-    limit: int = 20,
-    cursor: int | None = None,
-) -> tuple[list[PriceReport], int | None]:
-    """上报更低价列表(admin 全量,可按状态/用户筛)。游标同 feedback:id 倒序。"""
-    stmt = select(PriceReport)
-    if status:
-        stmt = stmt.where(PriceReport.status == status)
-    if user_id is not None:
-        stmt = stmt.where(PriceReport.user_id == user_id)
-    return cursor_paginate(db, stmt, PriceReport.id, limit=limit, cursor=cursor)
-
-
-def price_report_summary(db: Session) -> dict:
-    """上报审核台各状态计数(待审核/已通过/已拒绝/合计)。"""
-    rows = db.execute(
-        select(PriceReport.status, func.count(PriceReport.id)).group_by(PriceReport.status)
-    ).all()
-    by_status = {status: int(count) for status, count in rows}
-    return {
-        "pending": by_status.get("pending", 0),
-        "approved": by_status.get("approved", 0),
-        "rejected": by_status.get("rejected", 0),
-        "total": sum(by_status.values()),
-    }

app/admin/routers/price_report.py

@@ -1,103 +0,0 @@
-"""admin 上报更低价审核:列表 + 统计(读)+ 通过(发金币)/拒绝(写,带审计)。
-
-数据由客户端 POST /api/v1/report 写入 price_report 表(提交即 pending);本路由是运营后台
-对它的人工审核窗口。**通过** → 给上报用户钱包发固定金币(PRICE_REPORT_REWARD_COINS):
-改状态 + 发金币(wallet.grant_coins)+ 审计同一事务一起 commit(原子,仿 users.grant_user_coins),
-绝不只改状态不发钱或反之。客户端轮询 GET /api/v1/report/records 自动看到结果(无需推送)。
-"""
-from __future__ import annotations
-
-from typing import Annotated
-
-from fastapi import APIRouter, Depends, HTTPException, Query, Request
-
-from app.admin.audit import write_audit
-from app.admin.deps import AdminDb, get_client_ip, get_current_admin, require_role
-from app.admin.repositories import mutations, queries
-from app.admin.schemas.common import CursorPage, OkResponse
-from app.admin.schemas.price_report import (
-    PriceReportOut,
-    PriceReportRejectRequest,
-    PriceReportSummary,
-)
-from app.core.rewards import PRICE_REPORT_REWARD_COINS
-from app.models.admin import AdminUser
-from app.models.price_report import PriceReport
-from app.repositories import wallet as wallet_repo
-
-router = APIRouter(
-    prefix="/admin/api/price-reports",
-    tags=["admin-price-report"],
-    dependencies=[Depends(get_current_admin)],
-)
-
-
-@router.get("", response_model=CursorPage[PriceReportOut], summary="上报更低价列表(筛选+分页)")
-def list_price_reports(
-    db: AdminDb,
-    status: Annotated[str | None, Query()] = None,
-    user_id: Annotated[int | None, Query()] = None,
-    limit: Annotated[int, Query(ge=1, le=100)] = 20,
-    cursor: Annotated[int | None, Query()] = None,
-) -> CursorPage[PriceReportOut]:
-    items, next_cursor = queries.list_price_reports(
-        db, status=status, user_id=user_id, limit=limit, cursor=cursor,
-    )
-    return CursorPage(
-        items=[PriceReportOut.model_validate(r) for r in items], next_cursor=next_cursor,
-    )
-
-
-@router.get("/summary", response_model=PriceReportSummary, summary="上报审核统计(各状态计数)")
-def price_report_summary(db: AdminDb) -> PriceReportSummary:
-    return PriceReportSummary.model_validate(queries.price_report_summary(db))
-
-
-@router.post("/{report_id}/approve", response_model=OkResponse, summary="通过上报(发固定金币)")
-def approve_price_report(
-    report_id: int,
-    request: Request,
-    admin: Annotated[AdminUser, Depends(require_role("operator"))],
-    db: AdminDb,
-) -> OkResponse:
-    rep = db.get(PriceReport, report_id)
-    if rep is None:
-        raise HTTPException(status_code=404, detail="上报记录不存在")
-    if rep.status != "pending":
-        raise HTTPException(status_code=400, detail=f"该上报已审核过(当前 {rep.status}),不可重复操作")
-    coins = PRICE_REPORT_REWARD_COINS
-    # 改状态 + 发金币 + 审计同一事务(commit=False),最后一起 commit:改了就有痕、发了就留账
-    mutations.review_price_report(db, rep, status="approved", reward_coins=coins, commit=False)
-    wallet_repo.grant_coins(
-        db, rep.user_id, coins,
-        biz_type="price_report_reward", ref_id=str(rep.id), remark="上报更低价审核通过",
-    )
-    write_audit(
-        db, admin, action="price_report.approve", target_type="price_report", target_id=report_id,
-        detail={"reward_coins": coins, "user_id": rep.user_id}, ip=get_client_ip(request), commit=False,
-    )
-    db.commit()
-    return OkResponse()
-
-
-@router.post("/{report_id}/reject", response_model=OkResponse, summary="拒绝上报")
-def reject_price_report(
-    report_id: int,
-    body: PriceReportRejectRequest,
-    request: Request,
-    admin: Annotated[AdminUser, Depends(require_role("operator"))],
-    db: AdminDb,
-) -> OkResponse:
-    rep = db.get(PriceReport, report_id)
-    if rep is None:
-        raise HTTPException(status_code=404, detail="上报记录不存在")
-    if rep.status != "pending":
-        raise HTTPException(status_code=400, detail=f"该上报已审核过(当前 {rep.status}),不可重复操作")
-    reason = body.reason.strip()
-    mutations.review_price_report(db, rep, status="rejected", reject_reason=reason, commit=False)
-    write_audit(
-        db, admin, action="price_report.reject", target_type="price_report", target_id=report_id,
-        detail={"reason": reason, "user_id": rep.user_id}, ip=get_client_ip(request), commit=False,
-    )
-    db.commit()
-    return OkResponse()

app/admin/schemas/price_report.py

@@ -1,46 +0,0 @@
-"""admin 上报更低价审核 schemas。"""
-from __future__ import annotations
-
-from datetime import datetime
-
-from pydantic import BaseModel, ConfigDict, Field
-
-
-class PriceReportOut(BaseModel):
-    """admin 列表项:price_report 全字段(审核要看的快照 + 截图 + 状态 + 奖励)。"""
-
-    model_config = ConfigDict(from_attributes=True)
-
-    id: int
-    user_id: int
-    comparison_record_id: int | None = None
-    # 选中比价记录的快照
-    store_name: str | None = None
-    dish_summary: str | None = None
-    original_platform_id: str | None = None
-    original_platform_name: str | None = None
-    original_price_cents: int | None = None
-    # 用户上报的更低价
-    reported_platform_id: str
-    reported_platform_name: str
-    reported_price_cents: int
-    images: list[str] = []
-    # 审核
-    status: str
-    reject_reason: str | None = None
-    reward_coins: int | None = None
-    reviewed_at: datetime | None = None
-    created_at: datetime
-
-
-class PriceReportRejectRequest(BaseModel):
-    reason: str = Field(min_length=1, max_length=256, description="拒绝理由,用户端记录页会看到")
-
-
-class PriceReportSummary(BaseModel):
-    """审核台顶部各状态计数。"""
-
-    pending: int
-    approved: int
-    rejected: int
-    total: int

app/core/rewards.py

@@ -77,12 +77,6 @@ def record_milestone_reward(milestone: int) -> int:
     return RECORD_MILESTONES[milestone - 1]
 
 
-# ===== 上报更低价(人工审核通过发固定金币)=====
-# 用户上报"某平台比我们算的最低价更便宜"+ 截图,经运营后台人工审核通过后发放的固定金币奖励。
-# 与广告/任务同量级;固定值(产品 2026-06 定),要调直接改这里;客户端记录页按 reward_coins 显示。
-PRICE_REPORT_REWARD_COINS: int = 1000
-
-
 # ===== 邀请好友(注册即生效,邀请人 + 被邀请人各发金币)=====
 # 10000 金币 = 1 元,双方各得 1 元。MVP 先用固定常量(不走 app_config)。
 INVITE_INVITER_COINS: int = 10000

data/media/dl.html

@@ -62,11 +62,11 @@
     <div class="feat">💰 <span>省下的钱看得见,还能<b>赚金币提现</b></span></div>
   </div>
 
-  <button class="btn" id="dlbtn">🏪 打开应用商店下载</button>
-  <div class="hint" id="hint">Android 安卓版 · 应用商店安全下载</div>
+  <button class="btn" id="dlbtn">⬇️ 下载安装包</button>
+  <div class="hint" id="hint">Android 安卓版 · 安装包约 24 MB</div>
 
   <div class="foot">
-    将前往应用商店下载,安全放心。<br>
+    安装时如提示「未知来源」,请允许后继续安装。<br>
     本页为内部测试页。
   </div>
 
@@ -82,18 +82,16 @@
       <div class="wxsteps">
         <div><span class="n">1</span>点右上角的 ··· 菜单</div>
         <div><span class="n">2</span>选择「在浏览器打开」</div>
-        <div><span class="n">3</span>在浏览器里按提示去应用商店下载</div>
+        <div><span class="n">3</span>在浏览器里点「下载安装包」</div>
       </div>
     </div>
     <div class="closebar" id="wxclose">我知道了 ✕</div>
   </div>
 
 <script>
-  // 应用商店跳转:用包名(App 唯一标识 = 身份证号)定位到傻瓜比价的商店下载页。
-  // 主:market:// 唤起手机自带应用市场(华为/小米/OV);兜底:应用宝网页(任何浏览器都能开)。
-  var PKG = "com.jishisongfu.shaguabijia";
-  var MARKET_URL = "market://details?id=" + PKG;
-  var YYB_URL = "https://a.app.qq.com/o/simple.jsp?pkgname=" + PKG;
+  // APK 下载地址跟随当前页面 origin:本地测试时页面由笔记本 app-server(LAN:8770)托管 →
+  // 下载也走 LAN;生产由 app-api.shaguabijia.com 托管 → 下载走生产域名。无需按机器改 IP。
+  var APK_URL = location.origin + "/media/shaguabijia.apk";
   var ua = navigator.userAgent || "";
   var isWeChat = /MicroMessenger/i.test(ua);
   var isIOS = /iPhone|iPad|iPod/i.test(ua);
@@ -140,20 +138,12 @@
     }
     return Promise.resolve();
   }
-  // 跳应用商店:先尝试 market:// 唤起手机自带商店;若 2.5s 内页面没切到后台
-  //(= 没有商店接管 market://),兜底跳应用宝网页下载页,不让用户卡死。
-  function openStore() {
-    var jumped = false;
-    function markJumped() { jumped = true; }           // 页面切到后台 = 商店已唤起
-    document.addEventListener("visibilitychange", function () {
-      if (document.hidden) jumped = true;
-    });
-    window.addEventListener("pagehide", markJumped);
-    window.addEventListener("blur", markJumped);
-    window.location.href = MARKET_URL;                 // 唤起自带应用市场
-    setTimeout(function () {
-      if (!jumped) window.location.href = YYB_URL;     // 没唤起 → 应用宝网页兜底
-    }, 2500);
+  // 确保剪贴板写完(或最多等 400ms 兜底,防写入卡住)再触发下载。
+  function startDownload() {
+    var fired = false;
+    function go() { if (!fired) { fired = true; window.location.href = APK_URL; } }
+    copyInviteCode().then(go);
+    setTimeout(go, 400);
   }
 
   var hint = document.getElementById("hint");
@@ -170,10 +160,8 @@
   document.getElementById("dlbtn").addEventListener("click", function(){
     if (isWeChat) { showMask(); return; }           // 微信内:引导去浏览器
     if (isIOS)    { alert("iOS 版即将上线,请前往 App Store 搜索「傻瓜比价」"); return; }
-    // 安卓浏览器:先把邀请码写进剪贴板(legacyCopy 同步写、最可靠),再跳应用商店。
-    // 剪贴板供 App 首启归因;链路长易丢时由指纹兜底(已上报 landing-track)接住。
-    copyInviteCode();
-    openStore();
+    // 普通浏览器:先把邀请码写进剪贴板(写完或 400ms 兜底),再下载 APK(首启读回完成归因)
+    startDownload();
   });
 </script>
 </body>