feat(admin): 上报更低价人工审核(通过发1000金币/拒绝填理由)

运营后台审核用户上报的"某平台比我们算的最低价更便宜": - routers/price_report.py: GET 列表+/summary、POST {id}/approve|reject(require operator) - repositories/queries.py: list_price_reports + price_report_summary - repositories/mutations.py: review_price_report(置状态+审核时间,北京 wall-clock) - core/rewards.py: PRICE_REPORT_REWARD_COINS=1000(通过即发,grant_coins 由 router 同事务调) - admin/main.py: 注册 price_report_router Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-10 13:45:03 +08:00
10 changed files with 6 additions and 126 deletions
@@ -1,49 +0,0 @@
-"""add user.debug_trace_enabled + comparison_record.trace_url
-
-调试链接权限功能：
-  - user.debug_trace_enabled：运营后台给指定用户开「复制调试链接」权限
-  - comparison_record.trace_url：比价记录页「复制调试链接」的数据（pricebot done 帧给，
-    dir 名含落盘时分秒、前端/server 拼不出，必须落库）
-
-注：本迁移最初基于旧 main（#31，双 head）写、down_revision 曾指向那对父；但 #33 已用
-a8c47fc4dc39 合并了那对双 head，故改为线性接在 a8c47fc4dc39 之后、只负责加两列
-（避免与 a8c47fc4dc39 平行再造一个双 head）。
-
-Revision ID: f8d3b1e60a27
-Revises: a8c47fc4dc39
-Create Date: 2026-06-10 02:40:00.000000
-
-"""
-from typing import Sequence, Union
-
-from alembic import op
-import sqlalchemy as sa
-
-
-# revision identifiers, used by Alembic.
-revision: str = "f8d3b1e60a27"
-down_revision: Union[str, Sequence[str], None] = "a8c47fc4dc39"
-branch_labels: Union[str, Sequence[str], None] = None
-depends_on: Union[str, Sequence[str], None] = None
-
-
-def upgrade() -> None:
-    # sa.false() 渲染成 PG 的 false / SQLite 的 0，两端兼容（避免字符串 "false" 在 SQLite 上存歪）
-    op.add_column(
-        "user",
-        sa.Column(
-            "debug_trace_enabled",
-            sa.Boolean(),
-            nullable=False,
-            server_default=sa.false(),
-        ),
-    )
-    op.add_column(
-        "comparison_record",
-        sa.Column("trace_url", sa.String(length=512), nullable=True),
-    )
-
-
-def downgrade() -> None:
-    op.drop_column("comparison_record", "trace_url")
-    op.drop_column("user", "debug_trace_enabled")
@@ -28,20 +28,6 @@ def set_user_status(db: Session, user: User, *, status: str, commit: bool = True
    return user


-def set_user_debug_trace(
-    db: Session, user: User, *, enabled: bool, commit: bool = True
-) -> User:
-    """开关用户「复制调试链接」权限。同 set_user_status：支持 commit=False 让 router 把
-    业务写 + 审计写放进同一事务。"""
-    user.debug_trace_enabled = enabled
-    if commit:
-        db.commit()
-        db.refresh(user)
-    else:
-        db.flush()
-    return user
-
-
 def update_feedback_status(
    db: Session, feedback: Feedback, *, status: str, commit: bool = True
 ) -> Feedback:
@@ -13,7 +13,6 @@ from app.admin.schemas.user import (
    AdminUserListItem,
    AdminUserOverview,
    GrantCoinsRequest,
-    SetDebugTraceRequest,
    SetUserStatusRequest,
 )
 from app.models.admin import AdminUser
@@ -78,28 +77,6 @@ def set_user_status(
    return OkResponse()


-@router.post("/{user_id}/debug-trace", response_model=OkResponse, summary="开关调试链接权限")
-def set_user_debug_trace(
-    user_id: int,
-    body: SetDebugTraceRequest,
-    request: Request,
-    admin: Annotated[AdminUser, Depends(require_role("operator"))],
-    db: AdminDb,
-) -> OkResponse:
-    user = user_repo.get_user_by_id(db, user_id)
-    if user is None:
-        raise HTTPException(status_code=404, detail="用户不存在")
-    before = user.debug_trace_enabled
-    # 业务写 + 审计写同一事务(commit=False),最后一起 commit(同 set_user_status)
-    mutations.set_user_debug_trace(db, user, enabled=body.enabled, commit=False)
-    write_audit(
-        db, admin, action="user.debug_trace.set", target_type="user", target_id=user_id,
-        detail={"before": before, "after": body.enabled}, ip=get_client_ip(request), commit=False,
-    )
-    db.commit()
-    return OkResponse()
-
-
@router.post("/{user_id}/coins", response_model=OkResponse, summary="手动增减金币(带审计)")
 def grant_user_coins(
    user_id: int,
@@ -15,7 +15,6 @@ class AdminUserListItem(BaseModel):
    nickname: str | None = None
    register_channel: str
    status: str
-    debug_trace_enabled: bool = False
    wechat_openid: str | None = None
    created_at: datetime
    last_login_at: datetime
@@ -46,7 +45,3 @@ class SetUserStatusRequest(BaseModel):
    status: Literal["active", "disabled"] = Field(
        ..., description="active=解封 / disabled=封禁(注销 deleted 不走此接口)"
    )
-
-
-class SetDebugTraceRequest(BaseModel):
-    enabled: bool = Field(..., description="是否给该用户开「复制调试链接」权限")
@@ -77,12 +77,10 @@ def list_records(
    items, next_cursor = crud_compare.list_records(
        db, user.id, limit=limit, cursor=cursor
    )
-    outs = [ComparisonRecordOut.model_validate(it) for it in items]
-    # 权限闸:未开 debug_trace_enabled 的用户不下发 trace_url(列表页「复制调试链接」靠它)
-    if not user.debug_trace_enabled:
-        for o in outs:
-            o.trace_url = None
-    return ComparisonRecordPage(items=outs, next_cursor=next_cursor)
+    return ComparisonRecordPage(
+        items=[ComparisonRecordOut.model_validate(it) for it in items],
+        next_cursor=next_cursor,
+    )


@router.get(
@@ -96,12 +94,4 @@ def get_record(
    rec = crud_compare.get_record(db, user.id, record_id)
    if rec is None:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="record not found")
-    out = ComparisonRecordDetailOut.model_validate(rec)
-    # 权限闸:未开 debug_trace_enabled 的用户不下发 trace_url。
-    # ⚠️ raw_payload 是上报体全量(model_dump),里面也藏着一份 trace_url,必须一并抹掉——
-    # 否则无权限用户从详情接口的 raw_payload 绕过权限闸拿到 trace_url。
-    if not user.debug_trace_enabled:
-        out.trace_url = None
-        if isinstance(out.raw_payload, dict):
-            out.raw_payload.pop("trace_url", None)
-    return out
+    return ComparisonRecordDetailOut.model_validate(rec)
@@ -53,10 +53,6 @@ class ComparisonRecord(Base):
    )
    # pricebot 侧 trace_id:关联调试落盘 + 幂等去重键
    trace_id: Mapped[str] = mapped_column(String(64), nullable=False)
-    # 本次比价的公网调试链接(price.shaguabijia.com/traces/{dir}/)。pricebot done 帧给、
-    # 客户端上报带上——dir 名含 pricebot 落盘的时分秒,前端/server 都拼不出,必须存。
-    # 查看接口按 user.debug_trace_enabled 决定返不返回。旧记录 / 未开上云为 None。
-    trace_url: Mapped[str | None] = mapped_column(String(512), nullable=True)

    # ===== 源平台(发起比价的那家)=====
    source_platform_id: Mapped[str | None] = mapped_column(String(32), nullable=True)
@@ -11,7 +11,7 @@ from __future__ import annotations

 from datetime import datetime, timezone

-from sqlalchemy import Boolean, DateTime, Integer, String, false, func
+from sqlalchemy import DateTime, Integer, String, func
 from sqlalchemy.orm import Mapped, mapped_column

 from app.db.base import Base
@@ -51,13 +51,6 @@ class User(Base):
    # 账号状态:active / disabled / deleted
    status: Mapped[str] = mapped_column(String(20), nullable=False, default="active")

-    # 调试链接权限:开了的用户在比价完成弹窗 + 比价记录页能看到「复制调试链接」按钮
-    # (复制 price.shaguabijia.com 的 trace 链接发给开发排障)。运营后台按用户配置;
-    # /me 与登录响应里带出给前端做条件渲染。默认 false。
-    debug_trace_enabled: Mapped[bool] = mapped_column(
-        Boolean, nullable=False, default=False, server_default=false()
-    )
-
    created_at: Mapped[datetime] = mapped_column(
        DateTime(timezone=True), server_default=func.now(), nullable=False
    )
@@ -84,7 +84,6 @@ def upsert_record(
        source_package=payload.source_package,
        information=payload.information,
        best_deeplink=payload.best_deeplink,
-        trace_url=payload.trace_url,
        total_dish_count=payload.total_dish_count,
        skipped_dish_count=payload.skipped_dish_count,
        items=[it.model_dump(exclude_none=True) for it in payload.items],
@@ -25,8 +25,6 @@ class UserOut(BaseModel):
    status: str
    created_at: datetime
    last_login_at: datetime
-    # 调试链接权限:前端据此在比价结果弹窗/记录页显示「复制调试链接」按钮。默认 false。
-    debug_trace_enabled: bool = False


 # ===== Token 通用结构 =====
@@ -67,9 +67,6 @@ class ComparisonRecordIn(BaseModel):
    status: str | None = Field(None, description="success / failed,可不传由服务端派生")
    # 最优平台商家/商品深链(客户端从 collectedLinks[best_index] 取);「再次比价」直达用
    best_deeplink: str | None = Field(None, description="最优平台深链,再次比价直达")
-    # pricebot done.params.trace_url 原样上报,落库供记录页「复制调试链接」(dir 名含落盘
-    # 时分秒前端拼不出,必须由后端透传)。
-    trace_url: str | None = Field(None, description="本次比价公网调试链接")


 # ===== 读取出参 =====
@@ -82,8 +79,6 @@ class ComparisonRecordOut(BaseModel):
    id: int
    business_type: str
    trace_id: str
-    # 公网调试链接;仅当 user.debug_trace_enabled 时由端点填充,否则端点层置 None(权限闸)。
-    trace_url: str | None = None
    source_platform_id: str | None = None
    source_platform_name: str | None = None
    source_package: str | None = None