增加充值审计日志

web/backend/routers/douyu.py

@@ -26,6 +26,7 @@ from ..schemas import (
     DouyuXpdGoodsOut,
 )
 from ..services.douyu_runner import DouyuBatchRunner, douyu_batch_registry
+from ..services.audit_service import record_audit
 from ..services.douyu_service import (
     DOUYU_CONFIG_FIELDS,
     DOUYU_HANDBOOK_TASK_TYPES,
@@ -110,6 +111,19 @@ async def supplier_recharge_callback(request: Request, db: Session = Depends(get
             task.status = "running"
             task.message = f"供应商直充订单处理中（状态 {status if status is not None else '-'}）"
     task.result = result
+    callback_success = status not in {3, 4}
+    record_audit(
+        db, None, action="recharge:douyu:callback", target=f"supplier_order:{out_order_id}",
+        detail={
+            "out_order_id": out_order_id,
+            "task_id": task.id,
+            "order_id": result.get("order_id"),
+            "supplier_order_status": status,
+            "task_status": task.status,
+            "message": task.message,
+        },
+        success=callback_success,
+    )
     db.commit()
     logger.info("[douyu] 供应商直充回调已处理: out_order_id={} status={}", out_order_id, status)
     acknowledgement = {"code": 200, "message": "success"}
@@ -400,13 +414,21 @@ def update_config(
 ):
     """更新斗鱼活动配置。"""
     config = ensure_douyu_config(db)
+    changed_fields = []
     for field in DOUYU_CONFIG_FIELDS:
         value = getattr(req, field)
         if value is None:
             continue
         setattr(config, field, value.strip() if isinstance(value, str) else value)
+        changed_fields.append(field)
     apply_douyu_config_defaults(config)
     config.updated_at = datetime.now(timezone.utc)
+    recharge_fields = [field for field in changed_fields if field.startswith("gold_")]
+    if recharge_fields:
+        record_audit(
+            db, current, action="recharge:douyu:config", target="douyu_config",
+            detail={"changed_fields": recharge_fields},
+        )
     db.commit()
     db.refresh(config)
     return _config_out(config)
@@ -474,6 +496,35 @@ async def create_task_batch(
     if count == 0:
         raise HTTPException(status_code=400, detail="没有可执行的斗鱼账号，请先登录获取 Cookie")
 
+    if req.task_type == "create_gold_qr":
+        recharge_accounts = (
+            db.query(DouyuTask, Account)
+            .join(Account, Account.id == DouyuTask.account_id)
+            .filter(DouyuTask.batch_id == batch_id, DouyuTask.task_type == "create_gold_qr")
+            .order_by(DouyuTask.id.asc())
+            .limit(100)
+            .all()
+        )
+        record_audit(
+            db, current, action="recharge:douyu:create", target=f"douyu_batch:{batch_id}",
+            detail={
+                "batch_id": batch_id, "task_type": req.task_type, "count": count,
+                "account_count": len(req.account_ids), "handbook_scope": req.handbook_scope,
+                # 仅记录充值身份，禁止在审计中写入 Cookie、密码等凭据。
+                "recharge_accounts": [
+                    {
+                        "task_id": task.id,
+                        "username": account.username,
+                        "douyu_uid": account.uid or "",
+                        "douyu_nickname": account.nickname or "",
+                    }
+                    for task, account in recharge_accounts
+                ],
+                "recharge_accounts_truncated": count > len(recharge_accounts),
+            },
+        )
+        db.commit()
+
     log_queue = asyncio.Queue()
     loop = asyncio.get_running_loop()
     thread_db = SessionLocal()
@@ -565,6 +616,12 @@ def stop_batch(
 ):
     """停止正在运行的斗鱼批次。"""
     _require_batch_owner(db, current, batch_id)
+    is_recharge_batch = (
+        db.query(DouyuTask.id)
+        .filter(DouyuTask.batch_id == batch_id, DouyuTask.task_type == "create_gold_qr")
+        .first()
+        is not None
+    )
     batch = douyu_batch_registry.get(batch_id)
     if batch:
         if batch.get("finished"):
@@ -574,10 +631,22 @@ def stop_batch(
                 return {"message": f"批次已结束，已清理 {cleaned} 个残留任务", "success": True}
             raise HTTPException(status_code=404, detail="批次已结束")
         batch["runner"].stop()
+        if is_recharge_batch:
+            record_audit(
+                db, current, action="recharge:douyu:stop", target=f"douyu_batch:{batch_id}",
+                detail={"batch_id": batch_id, "mode": "running"},
+            )
+            db.commit()
         return {"message": "已发送停止信号", "success": True}
 
     cleaned = cleanup_orphan_douyu_tasks(db, batch_id=batch_id, message="任务已停止（批次不存在）")
     if cleaned:
+        if is_recharge_batch:
+            record_audit(
+                db, current, action="recharge:douyu:stop", target=f"douyu_batch:{batch_id}",
+                detail={"batch_id": batch_id, "mode": "orphan_cleanup", "cleaned": cleaned},
+            )
+            db.commit()
         return {"message": f"已清理 {cleaned} 个残留任务", "success": True}
     raise HTTPException(status_code=404, detail="批次不存在或已结束")