fix(widget): 完善自动回复与新会话进线提醒

server/internal/handler/security_integration_test.go

@@ -810,6 +810,33 @@ func TestSettingsAndExportsHonorFineGrainedPermissions(t *testing.T) {
 		t.Fatalf("缺少分配规则权限仍可修改设置: %d %s", settings.Code, settings.Body.String())
 	}
 
+	autoReplyRoleRec := httptest.NewRecorder()
+	autoReplyRoleBody := []byte(`{"name":"自动回复主管","permissions":["settings.auto_reply"],"data_scopes":{}}`)
+	router.ServeHTTP(autoReplyRoleRec, bearerRequest(t, http.MethodPost, "/api/roles", autoReplyRoleBody, admin))
+	if autoReplyRoleRec.Code != http.StatusOK {
+		t.Fatalf("创建自动回复角色失败: %d %s", autoReplyRoleRec.Code, autoReplyRoleRec.Body.String())
+	}
+	var autoReplyRoleResp struct {
+		Data model.Role `json:"data"`
+	}
+	if err := json.Unmarshal(autoReplyRoleRec.Body.Bytes(), &autoReplyRoleResp); err != nil {
+		t.Fatalf("解析自动回复角色失败: %v", err)
+	}
+	autoReplyUser := createUser(t, tenant.ID, "auto-reply-supervisor", autoReplyRoleResp.Data.Code)
+
+	autoReplySave := httptest.NewRecorder()
+	autoReplyBody := []byte(`{"welcome_messages":[{"type":"text","content":"主管配置的欢迎语"}],"offline_prompt":"主管配置的离线提示"}`)
+	router.ServeHTTP(autoReplySave, bearerRequest(t, http.MethodPut, "/api/settings", autoReplyBody, autoReplyUser))
+	if autoReplySave.Code != http.StatusOK {
+		t.Fatalf("自动回复权限应允许保存: %d %s", autoReplySave.Code, autoReplySave.Body.String())
+	}
+
+	basicSettingsSave := httptest.NewRecorder()
+	router.ServeHTTP(basicSettingsSave, bearerRequest(t, http.MethodPut, "/api/settings", []byte(`{"display_name":"越权修改"}`), autoReplyUser))
+	if basicSettingsSave.Code != http.StatusForbidden {
+		t.Fatalf("自动回复权限不应允许修改基本设置: %d %s", basicSettingsSave.Code, basicSettingsSave.Body.String())
+	}
+
 	customerOne := model.Customer{TenantID: tenant.ID, Name: "客户一"}
 	customerTwo := model.Customer{TenantID: tenant.ID, Name: "客户二"}
 	if err := model.DB.Create(&customerOne).Error; err != nil {
@@ -1037,6 +1064,8 @@ func TestTenantSettingsPersistAndAffectWidgetPrompt(t *testing.T) {
 	}
 	var initResp struct {
 		Data struct {
+			SessionID       uint   `json:"session_id"`
+			VisitorToken    string `json:"visitor_token"`
 			WelcomeMessage  string `json:"welcome_message"`
 			WelcomeMessages []struct {
 				Type    string `json:"type"`
@@ -1058,4 +1087,40 @@ func TestTenantSettingsPersistAndAffectWidgetPrompt(t *testing.T) {
 	if len(initResp.Data.WelcomeMessages) != 2 {
 		t.Fatalf("widget 未返回多段欢迎语: %+v", initResp.Data.WelcomeMessages)
 	}
+
+	// 已存在的会话重新拉消息时，应同步最新的自动回复配置。
+	updateRec := httptest.NewRecorder()
+	updateBody := `{"welcome_messages":[{"type":"text","content":"刷新后的欢迎语"}],"offline_prompt":"刷新后的离线提示"}`
+	router.ServeHTTP(updateRec, bearerRequest(t, http.MethodPut, "/api/settings", []byte(updateBody), admin))
+	if updateRec.Code != http.StatusOK {
+		t.Fatalf("更新自动回复失败: %s", updateRec.Body.String())
+	}
+
+	messageReq := httptest.NewRequest(http.MethodGet, fmt.Sprintf("/api/widget/messages?session_id=%d", initResp.Data.SessionID), nil)
+	messageReq.Header.Set("X-Visitor-Token", initResp.Data.VisitorToken)
+	messageRec := httptest.NewRecorder()
+	router.ServeHTTP(messageRec, messageReq)
+	if messageRec.Code != http.StatusOK {
+		t.Fatalf("读取已有会话消息失败: %s", messageRec.Body.String())
+	}
+	var messageResp struct {
+		Data struct {
+			WelcomeMessage  string `json:"welcome_message"`
+			WelcomeMessages []struct {
+				Type    string `json:"type"`
+				Content string `json:"content"`
+			} `json:"welcome_messages"`
+			OfflinePrompt string `json:"offline_prompt"`
+			AgentsOnline  bool   `json:"agents_online"`
+		} `json:"data"`
+	}
+	if err := json.Unmarshal(messageRec.Body.Bytes(), &messageResp); err != nil {
+		t.Fatalf("解析已有会话消息响应失败: %v", err)
+	}
+	if messageResp.Data.WelcomeMessage != "刷新后的欢迎语" ||
+		len(messageResp.Data.WelcomeMessages) != 1 ||
+		messageResp.Data.OfflinePrompt != "刷新后的离线提示" ||
+		messageResp.Data.AgentsOnline {
+		t.Fatalf("已有会话未同步最新自动回复: %+v", messageResp.Data)
+	}
 }