docs: define store onboarding and invitation boundary

This commit is contained in:
malei 2026-08-02 01:02:10 +08:00
parent 66b844a1c6
commit 133834ed02
14 changed files with 405 additions and 103 deletions

View File

@ -62,6 +62,7 @@
| **A15** | **BusinessEvent 业务事件落库**:经营漏斗不再依赖日志或前端猜测 | 首批 7 类事实统一落库稳定事件幂等metadata 不含 token/手机号/IP工作台已打开可统计历史可靠事实可回填 | Backend Core / Report Media Backend / Data Model | ✅ 已实现(待生产迁移) | `mvn -f backend/pom.xml test` + `npm --prefix admin run build` + 本体漂移审计 | 迁移见 `backend/db/migrations/20260801_create_business_event.sql` |
| **A16** | **真实预约容量与连续排班占用**:服务时长、门店并发容量和预约时长快照共同决定号源 | 长服务跨半小时桶占号;`walk_in` 消耗一份容量,`blocked` 关闭全部;并发创建不超卖 | Backend Core / Store Admin FE / Data Model | ✅ 已实现(待生产迁移) | backend 全测 + admin/H5/小程序构建 + 本体漂移审计 | 迁移见 `backend/db/migrations/20260801_create_booking_capacity.sql`;不等同排队/准点承诺 |
| **A17** | **报告显式确认发送状态**:传播动作与发送事实分离 | 历史为 `unknown`;新报告为 `unsent`;首次确认写不可覆盖回执与幂等 `report_sent`;工作台仅提醒新报告待发送 | Report Media Backend / Store Miniapp FE / Store Admin FE / Data Model | ✅ 已实现(待生产迁移) | backend 全测 + admin/H5/小程序构建 + 本体漂移审计 | 迁移见 `backend/db/migrations/20260801_create_report_send_status.sql`;不宣称微信投递成功 |
| **A18** | **门店开通 + 一次性员工邀请 + AuditLog** | 老板入驻须微信核验;历史开通状态 unknown完成清单需资料/容量/服务;邀请 token 只显一次且库内仅 hash手机号微信核验、限时/一次/可撤销;删员工立即失效旧会话 | Backend Core / Store Miniapp FE / Store Admin FE / Data Model | ✅ 代码完成(待生产迁移与微信真机验收) | backend 全测 + admin/H5/小程序构建 + 本体漂移审计 | 迁移见 `backend/db/migrations/20260802_create_store_onboarding.sql`;单角色账号冲突明确拒绝 |
---
@ -74,6 +75,7 @@
| **B3** | **报告提交锁死提示** | 提交前弹窗固定文案:「提交后不可修改,请确认照片与备注无误」 | Store Miniapp FE | 🟡 部分实现:核对文案与位置 | 手工 smoke | 与产品 v1 锁死策略一致 |
| **B4** | **「我的」老板端分组标题** | 至少两组:`店铺与经营` / `团队与账号`;高频在上;使用 `.module-title` | Store Miniapp FE | ✅ 已实现 | `npm --prefix frontend run build:h5` + 手工 smoke | 见《产品全方位优化说明》§2.2 |
| **B5** | **报告前后照片必填前端校验** | 无 before 提示「请至少上传1张服务前照片」无 after 提示「请至少上传1张服务后照片」 | Store Miniapp FE / Customer Experience FE | ✅ 已实现Batch A | `npm --prefix frontend run build:h5` + `npm --prefix frontend run build:mp-weixin` | 对应 A7、P0-4 |
| **B6** | **小程序开通向导与员工邀请卡片** | 老板可查看/完成开通清单;创建邀请后原始口令只显示一次,可直接 `open-type=share` 转发;员工预览脱敏信息并经微信手机号核验加入 | Store Miniapp FE / Backend Core | ✅ 代码完成,待微信真机 smoke | H5 + mp-weixin 构建;老板/员工双微信真机验收 | H5 只预览,不绕过微信核验 |
---
@ -132,7 +134,7 @@
| ID | 需求 | 验收标准 | Owner | 状态 | 验收命令 | 备注 |
|----|------|----------|-------|------|----------|------|
| **H1** | **后端可重复发布门禁** | README + production profile + 配置校验 + schema/18 项只读预检 + liveness/readiness + 只读 smoke + systemd/Nginx 模板 | Backend Ops | ✅ 仓库能力已实现;待真实环境执行 | backend 全测/打包 + `bash -n deploy/*.sh` + Runbook | 不把模板/本地通过写成已上线 |
| **H1** | **后端可重复发布门禁** | README + production profile + 配置校验 + schema/24 项只读预检 + liveness/readiness + 只读 smoke + systemd/Nginx 模板 | Backend Ops | ✅ 仓库能力已实现;待真实环境执行 | backend 全测/打包 + `bash -n deploy/*.sh` + Runbook | 不把模板/本地通过写成已上线 |
| **H2** | **前端可重复发布门禁** | admin/H5/小程序真实域名配置先门禁再构建;仓库占位值不能进入正式包;微信合法域名、体验版、静态回滚路径明确 | Frontend Release Ops | ✅ 仓库能力已实现;待真实环境执行 | admin/frontend preflight + 三端构建 + Runbook | 真实配置不得提交 |
| **H3** | **P0 通过条件** | 见下方「P0 通过条件」块 | System Architect / Core Flow QA | 🟡 待人工 smoke 复核 | 见下方 | 对应 P0-10 |

View File

@ -3,7 +3,7 @@
> 本体条目 ↔ 文档章节 ↔ 代码路径 ↔ 测试用例 三方对齐审计。
> 证据强度:`anchored`(三处对齐)/ `documented`(仅文档)/ `implemented`(仅代码)/ `gap`(缺失)。
>
> **刷新时间**2026-08-01BusinessEvent、StoreCustomer、身份语义与工作台行动聚合收口后刷新)
> **刷新时间**2026-08-02门店开通、一次性员工邀请、AuditLog 与活跃账号鉴权收口后刷新)
## 审计方法
@ -18,14 +18,14 @@
| 类型 | 数量 |
|------|------|
| Entity | 25 |
| Action | 64 |
| Event | 26 |
| Rule | 40 |
| Relation | 81 |
| **合计** | **236** |
| Entity | 27 |
| Action | 73 |
| Event | 27 |
| Rule | 46 |
| Relation | 85 |
| **合计** | **258** |
证据强度:`anchored` 18578.4%/ `documented` 37 / `gap` 12 / `implemented` 2。
证据强度:`anchored` 21282.2%/ `documented` 33 / `gap` 11 / `implemented` 2。
> anchored 占比相对 Batch 2 下降,是因为主动录入了 P1/P2 `gap` 占位与客户端埋点 `documented` 条目;端点漂移仍为 0。
@ -36,7 +36,7 @@ python3 docs/graph/validate_ontology.py docs
python3 docs/graph/audit_drift.py
```
当前结果校验通过HTTP 端点 55/55、JPA Entity 13/13 对齐;非 JPA 领域实体 12 个
当前结果校验通过HTTP 端点 65/65、JPA Entity 15/15 对齐;非 JPA 领域实体 12 个;代码与本体均无单边漂移
## 元数据卫生
@ -66,11 +66,13 @@ python3 docs/graph/audit_drift.py
| service_interval | ✅ | ✅ | 间接 ReportLeadControllerTest | anchored | |
| store_customer | ✅ | ✅ | StoreCustomerServiceTest / IdentityOwnershipQueryTest | anchored | 稳定门店客户关系 |
| business_event | ✅ | ✅ | BusinessEventServiceTest / MigrationTest | anchored | 不可变低敏事件;工作台去重统计 |
| staff_invitation | ✅ | ✅ | StaffInvitationServiceTest / StoreOnboardingMigrationTest | anchored | 原始 token 只显一次;库内 hash、限时、可撤销、手机号绑定 |
| audit_log | ✅ | ✅ | AuditLogServiceTest / StoreOnboardingMigrationTest | anchored | 低敏不可变安全/配置审计 |
| highlight_fail_reason | ✅ | ✅ 枚举 | ReportHighlightVideoServiceTest | anchored | jpa:false |
| current_user | ✅ | ✅ record | SessionTokenServiceTest | anchored | jpa:false |
| membership 等 5 个 | 方向库 | — | — | gap | roadmap 占位 |
## 规则覆盖度40 条)
## 规则覆盖度46 条)
| 规则 | 测试 | 证据 |
|------|------|------|
@ -92,6 +94,9 @@ python3 docs/graph/audit_drift.py
| BR-TST-001 一报告一寄语 | ReportTestimonialServiceTest | anchored |
| BR-UNSUB-001 / BR-INT-001 | ReportLeadControllerTest | anchored |
| BR-SC-001 / BR-BE-001 | StoreCustomerServiceTest / BusinessEventServiceTest / MigrationTest | anchored |
| BR-ONBOARD-001 | MerchantOnboardingServiceTest / StoreOnboardingServiceTest / StoreServiceTest | anchored |
| BR-INVITE-001 | StaffInvitationServiceTest / AuthInterceptorActiveUserTest | anchored |
| BR-AUDIT-001 | AuditLogServiceTest / StoreOnboardingMigrationTest | anchored |
## 待补 gap 清单
@ -135,4 +140,4 @@ python3 docs/graph/audit_drift.py
**页面清单 PRD已写**`docs/门店管理后台-PhaseA-页面清单PRD.md`A0A7 全页字段/筛选/API/验收)。
当前 validate 规模以脚本输出为准236 条目)。
当前 validate 规模以脚本输出为准258 条目)。

View File

@ -1,13 +1,13 @@
{"id":"entity:store","type":"Entity","name":"Store","nameZh":"门店","domain":"store","fields":["id","name","logo","phone","address","latitude","longitude","intro","owner_id","invite_code","booking_day_start","booking_last_slot_start","booking_capacity","create_time","update_time","deleted"],"systems":["Backend Core"],"code":"backend/src/main/java/com/petstore/entity/Store.java","doc":"docs/产品设计文档.md §三 t_store","test":"StoreControllerTest","evidence":"anchored"}
{"id":"entity:store","type":"Entity","name":"Store","nameZh":"门店","domain":"store","fields":["id","name","logo","phone","address","latitude","longitude","intro","owner_id","invite_code","booking_day_start","booking_last_slot_start","booking_capacity","onboarding_status","onboarding_completed_at","onboarding_completed_by_user_id","create_time","update_time","deleted"],"systems":["Backend Core"],"code":"backend/src/main/java/com/petstore/entity/Store.java","doc":"docs/产品设计文档.md §三 t_store; docs/架构决策-门店开通与员工邀请-2026-08-02.md","test":"StoreControllerTest; StoreOnboardingServiceTest; StoreOnboardingMigrationTest","evidence":"anchored","note":"invite_code 仅保留数据库兼容,不再返回客户端或作为注册凭证"}
{"id":"entity:user","type":"Entity","name":"User","nameZh":"用户","domain":"user","fields":["id","username","password","name","phone","avatar","store_id","role","wechat_openid","wechat_unionid","create_time","update_time","deleted"],"systems":["Backend Core"],"code":"backend/src/main/java/com/petstore/entity/User.java","doc":"docs/产品设计文档.md §三 t_user; docs/.agents/common-context.md 术语规则","test":"UserServiceLoginStrategyTest; UserJsonIgnoreTest","evidence":"anchored"}
{"id":"entity:appointment","type":"Entity","name":"Appointment","nameZh":"预约","domain":"appointment","fields":["id","pet_name","pet_type","service_type","appointment_time","duration_minutes","status","store_id","user_id","customer_user_id","created_by_user_id","assigned_user_id","pet_id","remark","create_time","update_time","deleted"],"systems":["Backend Core"],"code":"backend/src/main/java/com/petstore/entity/Appointment.java; backend/src/main/java/com/petstore/service/AppointmentService.java","doc":"docs/产品设计文档.md §三 t_appointment §5.2; docs/架构决策-真实预约容量模型-2026-08-01.md","test":"AppointmentServiceTest; BookingCapacityServiceTest; AppointmentControllerDetailTest; AppointmentControllerIdentityTest; BookingCapacityMigrationTest","evidence":"anchored"}
{"id":"entity:report","type":"Entity","name":"Report","nameZh":"服务报告","domain":"report","fields":["id","appointment_id","remark","user_id","customer_user_id","author_staff_id","store_id","report_token","pet_name","service_type","appointment_time","staff_name","send_status","sent_at","sent_by_user_id","send_channel","highlight_video_url","highlight_video_status","highlight_video_error","highlight_duration_sec","highlight_compose_mode","highlight_fail_reason","highlight_share_cover_url","create_time","update_time","deleted"],"systems":["Report Media Backend","Store Miniapp FE","Store Admin FE"],"code":"backend/src/main/java/com/petstore/entity/Report.java; backend/src/main/java/com/petstore/service/ReportService.java","doc":"docs/产品设计文档.md §三 t_report §5.3; docs/架构决策-报告确认发送状态-2026-08-02.md","test":"ReportServiceTest; ReportControllerTest; ReportSendMigrationTest","evidence":"anchored"}
{"id":"entity:report_lead","type":"Entity","name":"ReportLead","nameZh":"留资线索","domain":"lead","fields":["id","report_id","store_id","phone","pet_name","service_type","wechat_openid","wechat_unionid","reminder_type","remind_date","remind_status","unsubscribe_token","client_ip","create_time","update_time","deleted"],"systems":["Report Media Backend"],"code":"backend/src/main/java/com/petstore/controller/ReportLeadController.java; backend/src/main/java/com/petstore/entity/ReportLead.java","doc":"docs/本期主线-下一步产品优化点.md §C 留资","test":"ReportLeadControllerTest","evidence":"anchored"}
{"id":"entity:business_event","type":"Entity","name":"BusinessEvent","nameZh":"不可变业务事件","domain":"platform","jpa":true,"fields":["id","event_id","event_type","event_version","store_id","store_customer_id","aggregate_type","aggregate_id","actor_user_id","actor_role","source","occurred_at","metadata_json","idempotency_key","create_time"],"systems":["Backend Core","Report Media Backend","Store Admin FE"],"code":"backend/src/main/java/com/petstore/entity/BusinessEvent.java; backend/src/main/java/com/petstore/service/BusinessEventService.java","doc":"docs/ontology/objects.md#entity:business_event; docs/架构决策-业务事件落库-2026-08-01.md","test":"BusinessEventServiceTest; BusinessEventMigrationTest","evidence":"anchored"}
{"id":"action:register_boss","type":"Action","name":"registerBoss","nameZh":"老板入驻","inputs":["storeName","bossName","phone","password"],"outputs":["entity:store","entity:user","session_token"],"entrypoints":["POST /api/user/register-boss","UserService#registerBoss"],"appliesRules":["rule:BR-AUTH-001"],"code":"backend/src/main/java/com/petstore/service/UserService.java#registerBoss","evidence":"anchored","domain":"user"}
{"id":"action:register_boss","type":"Action","name":"registerBoss","nameZh":"微信核验老板入驻","inputs":["storeName","bossName","phoneCode","loginCode"],"outputs":["entity:store","entity:user","session_token","entity:business_event","entity:audit_log"],"entrypoints":["POST /api/onboarding/register-boss","MerchantOnboardingController#registerBoss","MerchantOnboardingService#registerVerifiedBoss"],"appliesRules":["rule:BR-ONBOARD-001","rule:BR-AUDIT-001"],"code":"backend/src/main/java/com/petstore/controller/MerchantOnboardingController.java#registerBoss; backend/src/main/java/com/petstore/service/MerchantOnboardingService.java#registerVerifiedBoss","test":"MerchantOnboardingServiceTest; BusinessEventServiceTest","evidence":"anchored","domain":"user"}
{"id":"action:update_store","type":"Action","name":"updateStore","nameZh":"更新店铺","inputs":["entity:store"],"outputs":["entity:store"],"entrypoints":["PUT /api/store/update","StoreController#update","StoreService#update"],"appliesRules":["rule:BR-STORE-001"],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#update","test":"StoreControllerTest","evidence":"anchored","domain":"store"}
{"id":"action:delete_store","type":"Action","name":"deleteStore","nameZh":"删除店铺","inputs":["id"],"outputs":[],"entrypoints":["DELETE /api/store/delete","StoreController#delete"],"appliesRules":["rule:BR-STORE-001"],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#delete","test":"StoreControllerTest","evidence":"anchored","domain":"store"}
{"id":"action:get_store_by_invite_code","type":"Action","name":"getStoreByInviteCode","nameZh":"按邀请码查门店","inputs":["code"],"outputs":["entity:store"],"entrypoints":["GET /api/store/invite-code","StoreController#getByInviteCode"],"appliesRules":["rule:BR-STORE-002"],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#getByInviteCode","test":"StoreControllerTest","evidence":"anchored","domain":"store"}
{"id":"action:get_store_by_invite_code","type":"Action","name":"getStoreByInviteCode","nameZh":"永久邀请码查询(停用)","inputs":["code"],"outputs":[],"entrypoints":["GET /api/store/invite-code","StoreController#getByInviteCode"],"appliesRules":["rule:BR-STORE-002"],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#getByInviteCode","test":"StoreControllerTest","evidence":"anchored","domain":"store","status":"deprecated","deprecated":true,"note":"固定返回 LEGACY_INVITE_DISABLED不查询或返回门店"}
{"id":"action:login","type":"Action","name":"login","nameZh":"手机号验证码登录","inputs":["phone","code"],"outputs":["entity:user","entity:store","session_token"],"entrypoints":["POST /api/user/login","UserService#login"],"appliesRules":["rule:BR-AUTH-001","rule:BR-AUTH-002"],"code":"backend/src/main/java/com/petstore/service/UserService.java#login","test":"UserServiceLoginStrategyTest","evidence":"anchored","domain":"auth"}
{"id":"action:wx_phone_login","type":"Action","name":"wxPhoneLogin","nameZh":"微信手机号授权登录","inputs":["phoneCode","loginCode"],"outputs":["entity:user","entity:store","session_token"],"entrypoints":["POST /api/user/wx-phone-login","UserController#wxPhoneLogin","UserService#loginByVerifiedPhone"],"appliesRules":["rule:BR-AUTH-001"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#wxPhoneLogin","evidence":"anchored","domain":"auth"}
{"id":"action:bind_wechat","type":"Action","name":"bindWechat","nameZh":"绑定微信标识","inputs":["userId","openid","unionid"],"outputs":["entity:user"],"entrypoints":["UserService#bindWechatMiniIdentity"],"appliesRules":[],"code":"backend/src/main/java/com/petstore/service/UserService.java#bindWechatMiniIdentity","evidence":"anchored","domain":"auth"}
@ -24,8 +24,8 @@
{"id":"action:submit_lead","type":"Action","name":"submitLead","nameZh":"宠主留资","inputs":["token","phone","consent","loginCode"],"outputs":["leadId","remindDate","unsubscribeToken","wechatBound"],"entrypoints":["POST /api/report/{token}/reminder","ReportLeadController#submitReminder","ReportLeadService#submit"],"appliesRules":["rule:BR-LEAD-001","rule:BR-SC-001","rule:BR-BE-001"],"code":"backend/src/main/java/com/petstore/controller/ReportLeadController.java#submitReminder; backend/src/main/java/com/petstore/service/ReportLeadService.java#submit; backend/src/main/java/com/petstore/service/StoreCustomerService.java#touchLead; backend/src/main/java/com/petstore/service/BusinessEventService.java#recordLeadSubmitted","evidence":"anchored","test":"ReportLeadControllerTest; ReportLeadServiceStoreCustomerTest; StoreCustomerServiceTest; BusinessEventServiceTest","domain":"lead"}
{"id":"action:unsubscribe","type":"Action","name":"unsubscribe","nameZh":"一键退订","inputs":["unsubscribeToken"],"outputs":[],"entrypoints":["POST /api/report/unsubscribe","ReportLeadController#unsubscribe"],"appliesRules":["rule:BR-UNSUB-001"],"code":"backend/src/main/java/com/petstore/controller/ReportLeadController.java#unsubscribe","evidence":"anchored","domain":"lead","test":"ReportLeadControllerTest"}
{"id":"action:list_leads","type":"Action","name":"listLeads","nameZh":"回访池列表","inputs":["status"],"outputs":["entity:report_lead"],"entrypoints":["GET /api/report/leads","ReportLeadController#leads"],"appliesRules":["rule:BR-LEAD-002","rule:BR-LEAD-003"],"code":"backend/src/main/java/com/petstore/controller/ReportLeadController.java#leads","evidence":"anchored","test":"ReportLeadControllerTest","domain":"lead"}
{"id":"event:store_registered","type":"Event","name":"StoreRegistered","nameZh":"门店入驻","domain":"store","payload":["storeId","bossUserId","inviteCode"],"emittedBy":["action:register_boss"],"evidence":"anchored"}
{"id":"event:session_issued","type":"Event","name":"SessionIssued","nameZh":"签发会话令牌","domain":"auth","payload":["userId","storeId","role","exp"],"emittedBy":["action:register_boss","action:login","action:wx_phone_login"],"code":"backend/src/main/java/com/petstore/auth/SessionTokenService.java#issue","test":"SessionTokenServiceTest","evidence":"anchored"}
{"id":"event:store_registered","type":"Event","name":"StoreRegistered","nameZh":"门店入驻","domain":"store","payload":["storeId","bossUserId","occurredAt"],"emittedBy":["action:register_boss"],"code":"backend/src/main/java/com/petstore/service/BusinessEventService.java#recordStoreRegistered","test":"BusinessEventServiceTest","evidence":"anchored","note":"持久化 BusinessEvent 与 AuditLog均不含手机号或 legacy inviteCode"}
{"id":"event:session_issued","type":"Event","name":"SessionIssued","nameZh":"签发会话令牌","domain":"auth","payload":["userId","storeId","role","exp"],"emittedBy":["action:register_boss","action:login","action:wx_phone_login","action:accept_staff_invitation"],"code":"backend/src/main/java/com/petstore/auth/SessionTokenService.java#issue","test":"SessionTokenServiceTest","evidence":"anchored"}
{"id":"event:wx_bound","type":"Event","name":"WxBound","nameZh":"微信标识绑定","domain":"auth","payload":["userId","openid","unionid"],"emittedBy":["action:bind_wechat"],"code":"backend/src/main/java/com/petstore/service/UserService.java#bindWechatMiniIdentity","evidence":"anchored"}
{"id":"event:appointment_created","type":"Event","name":"AppointmentCreated","nameZh":"预约创建","domain":"appointment","payload":["storeId","storeCustomerId","aggregateId","actorUserId","actorRole","bookingOrigin","durationMinutes","occurredAt"],"emittedBy":["action:create_appointment"],"appliesRules":["rule:BR-BE-001","rule:BR-APPT-004"],"code":"backend/src/main/java/com/petstore/service/AppointmentService.java#createBooking; backend/src/main/java/com/petstore/service/BusinessEventService.java#recordAppointmentCreated","test":"AppointmentServiceTest; BusinessEventServiceTest","evidence":"anchored"}
{"id":"event:appointment_status_changed","type":"Event","name":"AppointmentStatusChanged","nameZh":"预约状态迁移","domain":"appointment","payload":["storeId","storeCustomerId","aggregateId","fromStatus","toStatus","actorUserId","actorRole","occurredAt"],"emittedBy":["action:start_service","action:transition_appointment_status","action:submit_report"],"appliesRules":["rule:BR-APPT-001","rule:BR-BE-001"],"code":"backend/src/main/java/com/petstore/service/AppointmentService.java#startService; #transitionStatus; backend/src/main/java/com/petstore/service/ReportService.java#create; backend/src/main/java/com/petstore/service/BusinessEventService.java#recordAppointmentStatusChanged","test":"AppointmentServiceTest; ReportServiceTest#createDoingAppointmentMarksDone; BusinessEventServiceTest","evidence":"anchored"}
@ -36,10 +36,10 @@
{"id":"event:report_opened","type":"Event","name":"ReportOpened","nameZh":"报告首次打开","domain":"report","payload":["storeId","storeCustomerId","reportId","visitType","occurredAt"],"emittedBy":["action:track_report_open"],"appliesRules":["rule:BR-RPT-007","rule:BR-BE-001"],"code":"backend/src/main/java/com/petstore/controller/ReportController.java#trackReportOpen; backend/src/main/java/com/petstore/service/BusinessEventService.java#recordReportOpenByToken","doc":"docs/本期主线-下一步产品优化点.md 埋点事件 schema","test":"ReportControllerTest; BusinessEventServiceTest","evidence":"anchored"}
{"id":"event:report_reopened","type":"Event","name":"ReportReopened","nameZh":"报告再次打开","domain":"report","payload":["storeId","storeCustomerId","reportId","visitType","occurredAt"],"emittedBy":["action:track_report_open"],"appliesRules":["rule:BR-RPT-007","rule:BR-BE-001"],"code":"backend/src/main/java/com/petstore/service/BusinessEventService.java#recordReportOpenByToken","doc":"docs/本期主线-下一步产品优化点.md 埋点事件 schema","test":"BusinessEventServiceTest#reportOpenStoresReportIdButNeverToken","evidence":"anchored"}
{"id":"event:lead_submitted","type":"Event","name":"LeadSubmitted","nameZh":"留资提交","domain":"lead","payload":["storeId","storeCustomerId","leadId","repeatSubmit","occurredAt"],"emittedBy":["action:submit_lead"],"appliesRules":["rule:BR-LEAD-001","rule:BR-BE-001"],"code":"backend/src/main/java/com/petstore/service/ReportLeadService.java#submit; backend/src/main/java/com/petstore/service/BusinessEventService.java#recordLeadSubmitted","doc":"docs/本期主线-下一步产品优化点.md 埋点事件 schema","test":"ReportLeadServiceStoreCustomerTest; BusinessEventMigrationTest","evidence":"anchored"}
{"id":"rule:BR-AUTH-001","type":"Rule","name":"HMAC session token 鉴权","domain":"auth","appliesTo":["action:register_boss","action:login","action:wx_phone_login","action:update_store","action:delete_store","action:get_store_by_invite_code","action:create_appointment","action:start_service","action:transition_appointment_status","action:get_appointment_detail","action:list_appointments","action:submit_report","action:get_report_by_token","action:track_report_open","action:delete_report","action:list_leads"],"code":"backend/src/main/java/com/petstore/auth/AuthInterceptor.java; SessionTokenService.java; CurrentUserContext.java","test":"SessionTokenServiceTest","evidence":"anchored"}
{"id":"rule:BR-AUTH-001","type":"Rule","name":"HMAC session token + 活跃账号范围鉴权","domain":"auth","appliesTo":["action:update_store","action:delete_store","action:get_store_by_invite_code","action:create_appointment","action:start_service","action:transition_appointment_status","action:get_appointment_detail","action:list_appointments","action:submit_report","action:delete_report","action:list_leads","action:get_store_onboarding","action:complete_store_onboarding","action:create_staff_invitation","action:list_staff_invitations","action:revoke_staff_invitation","action:list_staff","action:delete_staff"],"code":"backend/src/main/java/com/petstore/auth/AuthInterceptor.java; SessionTokenService.java; CurrentUserContext.java","test":"SessionTokenServiceTest; AuthInterceptorActiveUserTest","evidence":"anchored","note":"除签名和过期外,每次受保护请求校验账号仍存在且 role/storeId 与 token 一致,门店角色还须归属有效 Store"}
{"id":"rule:BR-AUTH-002","type":"Rule","name":"生产登录策略:仅微信授权","domain":"auth","appliesTo":["action:login","action:wx_phone_login"],"code":"backend/src/main/java/com/petstore/service/UserService.java#login; SmsController.java","test":"UserServiceLoginStrategyTest","evidence":"anchored"}
{"id":"rule:BR-STORE-001","type":"Rule","name":"店铺更新/删除仅 boss + 同店","domain":"store","appliesTo":["action:update_store","action:delete_store"],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#update; #delete","test":"StoreControllerTest","evidence":"anchored"}
{"id":"rule:BR-STORE-002","type":"Rule","name":"邀请码查询仅 boss/staff + 同店","domain":"store","appliesTo":["action:get_store_by_invite_code"],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#getByInviteCode","test":"StoreControllerTest#inviteCodeCrossStoreForbidden","evidence":"anchored"}
{"id":"rule:BR-STORE-002","type":"Rule","name":"legacy 永久邀请码禁用","domain":"store","appliesTo":["action:get_store_by_invite_code","action:register_staff"],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#getByInviteCode; backend/src/main/java/com/petstore/controller/UserController.java#registerStaff","test":"StoreControllerTest","evidence":"anchored","note":"legacy invite_code 保留数据库兼容,不返回客户端、不再作为注册凭证"}
{"id":"rule:BR-APPT-001","type":"Rule","name":"预约状态机","domain":"appointment","appliesTo":["action:start_service","action:transition_appointment_status","action:submit_report"],"code":"backend/src/main/java/com/petstore/service/AppointmentService.java#startService; #transitionStatus","test":"AppointmentServiceTest","evidence":"anchored"}
{"id":"rule:BR-APPT-002","type":"Rule","name":"预约跨店 403","domain":"appointment","appliesTo":["action:list_appointments","action:start_service","action:transition_appointment_status","action:get_appointment_detail"],"code":"backend/src/main/java/com/petstore/controller/AppointmentController.java","test":"AppointmentControllerDetailTest","evidence":"anchored"}
{"id":"rule:BR-APPT-003","type":"Rule","name":"预约客户归属与跨用户 403","domain":"appointment","appliesTo":["action:create_appointment","action:get_appointment_detail","action:transition_appointment_status"],"code":"backend/src/main/java/com/petstore/controller/AppointmentController.java#create; #detail; #updateStatus; backend/src/main/java/com/petstore/service/AppointmentService.java#createBooking","test":"AppointmentControllerIdentityTest; AppointmentControllerDetailTest#customerCannotViewOthersAppointment","evidence":"anchored"}
@ -110,7 +110,7 @@
{"id":"action:upload_image","type":"Action","name":"uploadImage","nameZh":"上传图片/视频","inputs":["file"],"outputs":["url"],"entrypoints":["POST /api/upload/image","FileController#uploadImage"],"appliesRules":["rule:BR-UPLOAD-001","rule:BR-UPLOAD-002"],"code":"backend/src/main/java/com/petstore/controller/FileController.java#uploadImage","evidence":"anchored","domain":"upload"}
{"id":"action:get_upload_image","type":"Action","name":"getUploadImage","nameZh":"读取上传资源","inputs":["path"],"outputs":[],"entrypoints":["GET /api/upload/image/**","FileController#getImage"],"appliesRules":["rule:BR-UPLOAD-001"],"code":"backend/src/main/java/com/petstore/controller/FileController.java#getImage","evidence":"anchored","domain":"upload"}
{"id":"action:generate_highlight","type":"Action","name":"generateHighlight","nameZh":"触发成片生成","inputs":["reportId","composeMode"],"outputs":["entity:highlight_video"],"entrypoints":["POST /api/report/highlight/start","ReportController#startHighlight","ReportHighlightVideoService#requestGenerate"],"appliesRules":["rule:BR-HL-001","rule:BR-HL-002"],"code":"backend/src/main/java/com/petstore/controller/ReportController.java#startHighlight; service/ReportHighlightVideoService.java#requestGenerate","doc":"docs/洗美报告短视频成片方案.md","evidence":"anchored","domain":"report","test":"ReportHighlightVideoServiceTest"}
{"id":"action:create_staff","type":"Action","name":"createStaff","nameZh":"老板创建员工","inputs":["name","phone"],"outputs":["entity:user"],"entrypoints":["POST /api/user/create-staff","UserController#createStaff","UserService#createStaff"],"appliesRules":["rule:BR-USER-001"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#createStaff","evidence":"anchored","domain":"user"}
{"id":"action:create_staff","type":"Action","name":"createStaff","nameZh":"直接创建员工(停用)","inputs":["name","phone"],"outputs":[],"entrypoints":["POST /api/user/create-staff","UserController#createStaff"],"appliesRules":["rule:BR-USER-001"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#createStaff","evidence":"anchored","domain":"user","status":"deprecated","deprecated":true,"note":"固定返回 DIRECT_STAFF_CREATION_DISABLED员工必须接受限时邀请"}
{"id":"action:list_staff","type":"Action","name":"listStaff","nameZh":"员工列表","inputs":[],"outputs":["entity:user"],"entrypoints":["GET /api/user/staff-list","UserController#staffList"],"appliesRules":["rule:BR-USER-001"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#staffList","evidence":"anchored","domain":"user"}
{"id":"action:delete_staff","type":"Action","name":"deleteStaff","nameZh":"删除员工","inputs":["staffId"],"outputs":[],"entrypoints":["DELETE /api/user/staff","UserController#deleteStaff"],"appliesRules":["rule:BR-USER-001"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#deleteStaff","evidence":"anchored","domain":"user"}
{"id":"action:update_user","type":"Action","name":"updateUser","nameZh":"更新当前用户信息","inputs":["name","phone","avatar","code"],"outputs":["entity:user"],"entrypoints":["PUT /api/user/update","UserController#updateUser","UserService#updateUser"],"appliesRules":["rule:BR-USER-002","rule:BR-AUTH-002"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#updateUser","evidence":"anchored","domain":"user"}
@ -125,7 +125,7 @@
{"id":"event:service_type_created","type":"Event","name":"ServiceTypeCreated","nameZh":"服务类型创建","domain":"service_type","payload":["serviceTypeId","storeId","name"],"emittedBy":["action:create_service_type"],"code":"backend/src/main/java/com/petstore/service/ServiceTypeService.java#create","evidence":"anchored"}
{"id":"event:service_type_deleted","type":"Event","name":"ServiceTypeDeleted","nameZh":"服务类型删除","domain":"service_type","payload":["serviceTypeId","storeId"],"emittedBy":["action:delete_service_type"],"code":"backend/src/main/java/com/petstore/service/ServiceTypeService.java#delete","evidence":"anchored"}
{"id":"event:pet_created","type":"Event","name":"PetCreated","nameZh":"宠物档案创建","domain":"pet","payload":["petId","ownerUserId","name","petType"],"emittedBy":["action:create_pet"],"code":"backend/src/main/java/com/petstore/service/PetService.java#create","evidence":"anchored"}
{"id":"event:staff_created","type":"Event","name":"StaffCreated","nameZh":"员工创建","domain":"user","payload":["staffId","storeId","name","phone"],"emittedBy":["action:create_staff"],"code":"backend/src/main/java/com/petstore/service/UserService.java#createStaff","evidence":"anchored"}
{"id":"event:staff_invitation_accepted","type":"Event","name":"StaffInvitationAccepted","nameZh":"员工接受邀请","domain":"user","payload":["storeId","staffUserId","invitationId","verificationMethod","occurredAt"],"emittedBy":["action:accept_staff_invitation"],"code":"backend/src/main/java/com/petstore/service/StaffInvitationService.java#acceptVerified; backend/src/main/java/com/petstore/service/AuditLogService.java#record","test":"StaffInvitationServiceTest","evidence":"anchored","note":"以 AuditLog 持久化不含手机号、token、openid 或 unionid"}
{"id":"event:user_updated","type":"Event","name":"UserUpdated","nameZh":"用户信息更新","domain":"user","payload":["userId","updatedFields"],"emittedBy":["action:update_user"],"code":"backend/src/main/java/com/petstore/service/UserService.java#updateUser","evidence":"anchored"}
{"id":"rule:BR-UPLOAD-001","type":"Rule","name":"上传路径归一化","domain":"upload","appliesTo":["action:upload_image","action:get_upload_image"],"code":"backend/src/main/java/com/petstore/controller/FileController.java#resolveSafePath; #uploadRoot","evidence":"anchored"}
{"id":"rule:BR-UPLOAD-002","type":"Rule","name":"上传扩展名/MIME 校验","domain":"upload","appliesTo":["action:upload_image"],"code":"backend/src/main/java/com/petstore/controller/FileController.java#isAllowedMediaType; #hasMediaExtension","evidence":"anchored"}
@ -135,11 +135,11 @@
{"id":"rule:BR-SCH-002","type":"Rule","name":"手动占用容量语义walk_in 消耗一份blocked 关闭全部","domain":"schedule","appliesTo":["action:day_agenda","action:create_schedule_block"],"code":"backend/src/main/java/com/petstore/service/ScheduleService.java; backend/src/main/java/com/petstore/service/BookingCapacityService.java","test":"BookingCapacityServiceTest; ScheduleControllerTest","evidence":"anchored"}
{"id":"rule:BR-ST-001","type":"Rule","name":"服务类型仅 boss + 同店 + 系统默认不可改删","domain":"service_type","appliesTo":["action:create_service_type","action:update_service_type","action:delete_service_type","action:init_service_types"],"code":"backend/src/main/java/com/petstore/controller/ServiceTypeController.java","test":"ServiceTypeControllerTest","evidence":"anchored"}
{"id":"rule:BR-PET-001","type":"Rule","name":"宠物跨用户/跨店","domain":"pet","appliesTo":["action:list_pets","action:create_pet","action:update_pet","action:delete_pet","action:get_pet_history"],"code":"backend/src/main/java/com/petstore/controller/PetController.java","evidence":"anchored","test":"PetControllerTest"}
{"id":"rule:BR-USER-001","type":"Rule","name":"员工管理仅 boss + 同店","domain":"user","appliesTo":["action:create_staff","action:list_staff","action:delete_staff"],"code":"backend/src/main/java/com/petstore/controller/UserController.java","evidence":"anchored"}
{"id":"rule:BR-USER-001","type":"Rule","name":"员工管理与邀请仅 boss + 同店","domain":"user","appliesTo":["action:create_staff","action:list_staff","action:delete_staff","action:create_staff_invitation","action:list_staff_invitations","action:revoke_staff_invitation"],"code":"backend/src/main/java/com/petstore/controller/UserController.java; backend/src/main/java/com/petstore/controller/StaffInvitationController.java","test":"StaffInvitationServiceTest","evidence":"anchored","note":"门店成员可看成员列表;仅 boss 可创建/查看/撤销邀请和删除本店 staff不能删除 boss"}
{"id":"rule:BR-USER-002","type":"Rule","name":"用户更新仅本人","domain":"user","appliesTo":["action:update_user","action:get_user_info"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#updateUser; #info","evidence":"anchored"}
{"id":"rule:BR-CONFIG-001","type":"Rule","name":"生产配置环境变量","domain":"config","appliesTo":[],"code":"backend/src/main/resources/application.yml; application-example.yml","doc":"backend/README.md 环境变量表","evidence":"anchored"}
{"id":"rule:BR-CONFIG-002","type":"Rule","name":"production profile 强制只读 schema 安全配置","domain":"config","appliesTo":[],"code":"backend/src/main/resources/application.yml production profile; backend/src/main/java/com/petstore/config/ProductionConfigurationValidator.java; backend/src/main/java/com/petstore/PetstoreApplication.java","doc":"backend/README.md production profile","test":"ProductionConfigurationValidatorTest","evidence":"anchored","note":"生产禁用自动建表/show-sql/SMS 万能码/默认数据初始化,并拒绝弱密钥、占位域名和宽 CORS"}
{"id":"rule:BR-CONFIG-003","type":"Rule","name":"生产发布只读门禁","domain":"config","appliesTo":[],"code":"backend/src/main/java/com/petstore/config/ProductionDatabasePreflightRunner.java; backend/src/main/java/com/petstore/config/PetstoreRuntimeHealthIndicator.java; backend/deploy/release-preflight.sh; backend/deploy/production-smoke.sh","doc":"docs/生产发布与回滚Runbook-2026-08-01.md; docs/生产监控与告警基线-2026-08-01.md","evidence":"anchored","note":"备份和五迁移后运行 schema validate + 18 项只读不变量readiness 覆盖 DB/磁盘/上传/FFmpeg自动 smoke 只读"}
{"id":"rule:BR-CONFIG-003","type":"Rule","name":"生产发布只读门禁","domain":"config","appliesTo":[],"code":"backend/src/main/java/com/petstore/config/ProductionDatabasePreflightRunner.java; backend/src/main/java/com/petstore/config/PetstoreRuntimeHealthIndicator.java; backend/deploy/release-preflight.sh; backend/deploy/production-smoke.sh","doc":"docs/生产发布与回滚Runbook-2026-08-01.md; docs/生产监控与告警基线-2026-08-01.md","evidence":"anchored","note":"备份和六迁移后运行 schema validate + 24 项只读不变量readiness 覆盖 DB/磁盘/上传/FFmpeg自动 smoke 只读"}
{"id":"rel:user_owns_pets","type":"Relation","subject":"entity:user","predicate":"OWNS","object":"entity:pet","cardinality":"1—N","evidence":"anchored","doc":"Pet.owner_user_id → User.id","domain":"user"}
{"id":"rel:pet_has_appointments","type":"Relation","subject":"entity:pet","predicate":"HAS","object":"entity:appointment","cardinality":"1—N","evidence":"anchored","doc":"Appointment.pet_id可空","domain":"pet"}
{"id":"rel:store_has_service_types","type":"Relation","subject":"entity:store","predicate":"HAS","object":"entity:service_type","cardinality":"1—N","evidence":"anchored","doc":"ServiceType.store_idNULL=系统默认)","domain":"store"}
@ -156,7 +156,7 @@
{"id":"rel:create_service_type_emits_type_created","type":"Relation","subject":"action:create_service_type","predicate":"EMITS","object":"event:service_type_created","evidence":"anchored","domain":"service_type"}
{"id":"rel:delete_service_type_emits_type_deleted","type":"Relation","subject":"action:delete_service_type","predicate":"EMITS","object":"event:service_type_deleted","evidence":"anchored","domain":"service_type"}
{"id":"rel:create_pet_emits_pet_created","type":"Relation","subject":"action:create_pet","predicate":"EMITS","object":"event:pet_created","evidence":"anchored","domain":"pet"}
{"id":"rel:create_staff_emits_staff_created","type":"Relation","subject":"action:create_staff","predicate":"EMITS","object":"event:staff_created","evidence":"anchored","domain":"user"}
{"id":"rel:accept_staff_invitation_emits_accepted","type":"Relation","subject":"action:accept_staff_invitation","predicate":"EMITS","object":"event:staff_invitation_accepted","evidence":"anchored","domain":"user"}
{"id":"rel:update_user_emits_user_updated","type":"Relation","subject":"action:update_user","predicate":"EMITS","object":"event:user_updated","evidence":"anchored","domain":"user"}
{"id":"rel:bind_wechat_emits_wx_bound","type":"Relation","subject":"action:bind_wechat","predicate":"EMITS","object":"event:wx_bound","evidence":"anchored","domain":"auth"}
{"id":"entity:report_testimonial","type":"Entity","name":"ReportTestimonial","nameZh":"宠主寄语","domain":"report","fields":["id","report_id","store_id","content","is_public","create_time","update_time"],"systems":["Report Media Backend"],"code":"backend/src/main/java/com/petstore/entity/ReportTestimonial.java; service/ReportTestimonialService.java","doc":"docs/ontology/objects.md#entity:report_testimonial","test":"ReportTestimonialServiceTest","evidence":"anchored"}
@ -167,9 +167,9 @@
{"id":"action:get_report_suggestion","type":"Action","name":"getReportSuggestion","nameZh":"报告下次建议日期","inputs":["token"],"outputs":[],"entrypoints":["GET /api/report/{token}/suggestion","ReportLeadController#suggestion"],"appliesRules":["rule:BR-INT-001"],"code":"backend/src/main/java/com/petstore/controller/ReportLeadController.java#suggestion","evidence":"anchored","domain":"lead"}
{"id":"action:submit_testimonial","type":"Action","name":"submitTestimonial","nameZh":"宠主寄语提交","inputs":["token","content","isPublic"],"outputs":["entity:report_testimonial"],"entrypoints":["POST /api/report/{token}/testimonial","ReportController#submitTestimonial"],"appliesRules":["rule:BR-TST-001"],"code":"backend/src/main/java/com/petstore/controller/ReportController.java#submitTestimonial","evidence":"anchored","domain":"report","test":"ReportTestimonialServiceTest"}
{"id":"action:get_legacy_upload","type":"Action","name":"getLegacyUpload","nameZh":"兼容旧路径读取上传资源","inputs":["path"],"outputs":[],"entrypoints":["GET /api/upload/legacy/**","FileController#getLegacyImage"],"appliesRules":["rule:BR-UPLOAD-001"],"code":"backend/src/main/java/com/petstore/controller/FileController.java#getLegacyImage","evidence":"anchored","domain":"upload"}
{"id":"action:register_staff","type":"Action","name":"registerStaff","nameZh":"员工注册(邀请码","inputs":["phone","password","name","inviteCode"],"outputs":["entity:user","entity:store","session_token"],"entrypoints":["POST /api/user/register-staff","UserController#registerStaff","UserService#registerStaff"],"appliesRules":["rule:BR-AUTH-001"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#registerStaff","evidence":"anchored","domain":"user"}
{"id":"action:register_staff","type":"Action","name":"registerStaff","nameZh":"永久邀请码员工注册(停用","inputs":["phone","password","name","inviteCode"],"outputs":[],"entrypoints":["POST /api/user/register-staff","UserController#registerStaff"],"appliesRules":["rule:BR-STORE-002"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#registerStaff","evidence":"anchored","domain":"user","status":"deprecated","deprecated":true,"note":"固定返回 LEGACY_INVITE_DISABLED"}
{"id":"action:send_sms","type":"Action","name":"sendSms","nameZh":"发送短信验证码","inputs":["phone"],"outputs":[],"entrypoints":["POST /api/sms/send","SmsController#send"],"appliesRules":["rule:BR-AUTH-002"],"code":"backend/src/main/java/com/petstore/controller/SmsController.java#send","evidence":"anchored","domain":"auth"}
{"id":"action:register_store","type":"Action","name":"registerStore","nameZh":"店铺注册(旧入口)","inputs":["entity:store"],"outputs":["entity:store"],"entrypoints":["POST /api/store/register","StoreController#register","StoreService#create"],"appliesRules":[],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#register","evidence":"gap","domain":"store","status":"deprecated","deprecated":true,"doc":"deprecated勿作为新集成入口"}
{"id":"action:register_store","type":"Action","name":"registerStore","nameZh":"店铺注册(旧入口停用","inputs":["entity:store"],"outputs":[],"entrypoints":["POST /api/store/register","StoreController#register"],"appliesRules":[],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#register","evidence":"anchored","domain":"store","status":"deprecated","deprecated":true,"doc":"固定返回 LEGACY_STORE_REGISTRATION_DISABLED"}
{"id":"action:delete_appointment","type":"Action","name":"deleteAppointment","nameZh":"删除预约","inputs":["id"],"outputs":[],"entrypoints":["DELETE /api/appointment/delete","AppointmentController#delete"],"appliesRules":["rule:BR-APPT-002"],"code":"backend/src/main/java/com/petstore/controller/AppointmentController.java#delete","evidence":"anchored","domain":"appointment"}
{"id":"action:list_reports","type":"Action","name":"listReports","nameZh":"报告列表","inputs":["page","pageSize"],"outputs":["entity:report"],"entrypoints":["GET /api/report/list","ReportController#list"],"appliesRules":["rule:BR-RPT-005"],"code":"backend/src/main/java/com/petstore/controller/ReportController.java#list","evidence":"anchored","domain":"report"}
{"id":"action:wechat_authorize","type":"Action","name":"wechatAuthorize","nameZh":"获取微信授权跳转URL","inputs":[],"outputs":[],"entrypoints":["GET /api/wechat/authorize","WechatController#getAuthorizeUrl"],"appliesRules":[],"code":"backend/src/main/java/com/petstore/controller/WechatController.java#getAuthorizeUrl","evidence":"gap","domain":"auth","status":"deprecated","deprecated":true,"doc":"deprecated勿作为新集成入口"}
@ -185,7 +185,7 @@
{"id":"entity:service_package","type":"Entity","name":"ServicePackage","nameZh":"套餐","domain":"growth","jpa":false,"fields":[],"systems":[],"code":"","doc":"docs/ontology/objects.md#待录入P1/P2 方向gap 证据)","test":"","evidence":"gap","status":"roadmap","note":"Phase A 明确不做;次卡/套餐属 C 期。"}
{"id":"entity:report_history","type":"Entity","name":"ReportHistory","nameZh":"宠主历史报告汇总","domain":"report","jpa":false,"fields":[],"systems":[],"code":"","doc":"docs/ontology/objects.md#待录入P1/P2 方向gap 证据)","test":"","evidence":"gap","status":"roadmap","note":"P2 方向库占位,不展开字段"}
{"id":"entity:analytics_dashboard","type":"Entity","name":"AnalyticsDashboard","nameZh":"经营分析看板","domain":"analytics","jpa":false,"fields":[],"systems":[],"code":"","doc":"docs/ontology/objects.md#待录入P1/P2 方向gap 证据)","test":"","evidence":"gap","status":"roadmap","note":"B 期经营看板A 期工作台仅轻量指标卡,不展开本实体。"}
{"id":"rule:BR-USER-003","type":"Rule","name":"userSensitiveFieldsJsonIgnore","nameZh":"User 敏感字段不序列化","domain":"user","appliesTo":["action:login","action:wx_phone_login","action:get_user_info","action:update_user","action:register_boss","action:register_staff","action:list_staff"],"code":"backend/src/main/java/com/petstore/entity/User.java","doc":"docs/ontology/rules.md#rule:BR-USER-003","test":"UserJsonIgnoreTest","evidence":"anchored"}
{"id":"rule:BR-USER-003","type":"Rule","name":"userSensitiveFieldsJsonIgnore","nameZh":"User 敏感字段不序列化","domain":"user","appliesTo":["action:login","action:wx_phone_login","action:get_user_info","action:update_user","action:register_boss","action:accept_staff_invitation","action:list_staff"],"code":"backend/src/main/java/com/petstore/entity/User.java","doc":"docs/ontology/rules.md#rule:BR-USER-003","test":"UserJsonIgnoreTest","evidence":"anchored"}
{"id":"rule:BR-STORE-003","type":"Rule","name":"publicStoreFieldTrim","nameZh":"公开门店字段裁剪","domain":"store","appliesTo":["action:get_store","action:list_stores"],"code":"backend/src/main/java/com/petstore/controller/StoreController.java#toPublicStoreView","doc":"docs/ontology/rules.md#rule:BR-STORE-003","test":"StoreControllerTest#publicGetHidesOwnerIdAndInviteCode; StoreControllerTest#publicListHidesOwnerIdAndInviteCode","evidence":"anchored","note":"公开 get/list 经 toPublicStoreView 裁剪,不含 ownerId/inviteCode/deleted"}
{"id":"rule:BR-TST-001","type":"Rule","name":"oneReportOneTestimonial","nameZh":"一报告一寄语(重复提交更新)","domain":"report","appliesTo":["action:submit_testimonial"],"code":"backend/src/main/java/com/petstore/service/ReportTestimonialService.java","doc":"docs/ontology/rules.md#rule:BR-TST-001","test":"ReportTestimonialServiceTest","evidence":"anchored"}
{"id":"rule:BR-UNSUB-001","type":"Rule","name":"unsubscribeByToken","nameZh":"凭 unsubscribeToken 一键退订","domain":"lead","appliesTo":["action:unsubscribe"],"code":"backend/src/main/java/com/petstore/controller/ReportLeadController.java#unsubscribe","doc":"docs/ontology/rules.md#rule:BR-UNSUB-001","test":"ReportLeadControllerTest","evidence":"anchored"}
@ -211,7 +211,7 @@
{"id":"entity:store_customer","type":"Entity","name":"StoreCustomer","nameZh":"门店客户主档(瘦身)","domain":"admin","jpa":true,"fields":["id","store_id","customer_user_id","phone","display_name","source","first_contact_at","last_contact_at","create_time","update_time","deleted"],"systems":["Store Admin FE","Backend Core","Report Media Backend"],"code":"backend/src/main/java/com/petstore/entity/StoreCustomer.java; backend/src/main/java/com/petstore/service/StoreCustomerService.java; backend/src/main/java/com/petstore/service/AdminServiceCustomerService.java","doc":"docs/ontology/objects.md#entity:store_customer; docs/架构决策-门店客户主档-2026-08-01.md","test":"StoreCustomerServiceTest; AdminServiceCustomerServiceTest; IdentityOwnershipQueryTest","evidence":"anchored","note":"门店与客户的稳定关系实体API 动态聚合宠物/到店/报告/留资,不含余额/次卡/积分。","status":"implemented"}
{"id":"rule:BR-ADMIN-001","type":"Rule","name":"adminRoleGate","nameZh":"门店后台角色门禁boss/staff 可读写)","domain":"admin","appliesTo":["action:view_workbench","action:admin_list_appointments","action:admin_list_reports","action:admin_list_leads","action:admin_list_service_customers","action:admin_update_settings"],"code":"","doc":"docs/ontology/rules.md#rule:BR-ADMIN-001; docs/门店管理后台-PhaseA-页面清单PRD.md","test":"","evidence":"documented","note":"boss 与 staff 均可进入 admin_console 并编辑本店数据customer 禁止。删店/部分设置仍仅 bossBR-STORE-001/BR-USER-001。产品决策 2026-07-10。"}
{"id":"rule:BR-ADMIN-002","type":"Rule","name":"adminStoreScope","nameZh":"后台数据仅本店 storeId","domain":"admin","appliesTo":["action:view_workbench","action:admin_list_appointments","action:admin_list_reports","action:admin_list_leads","action:admin_list_service_customers","action:admin_update_settings"],"code":"","doc":"docs/ontology/rules.md#rule:BR-ADMIN-002","test":"","evidence":"documented","note":"所有后台查询/写操作强制 current.storeId忽略跨店请求参数。连锁同步不在 Phase A。"}
{"id":"rule:BR-ADMIN-003","type":"Rule","name":"adminInternalFieldsAllowed","nameZh":"后台可看内部字段(与公开裁剪对称)","domain":"admin","appliesTo":["action:admin_list_reports","action:admin_update_settings","action:admin_list_service_customers"],"code":"","doc":"docs/ontology/rules.md#rule:BR-ADMIN-003","test":"","evidence":"documented","note":"经 BR-ADMIN-001 鉴权后,后台可返回 inviteCode、完整报告内部字段等公开 API 仍受 BR-STORE-003/BR-RPT-006 约束。手机号默认仍脱敏,明文需更高权限(预留)。"}
{"id":"rule:BR-ADMIN-003","type":"Rule","name":"adminInternalFieldsAllowed","nameZh":"后台内部字段按用途最小返回","domain":"admin","appliesTo":["action:admin_list_reports","action:admin_update_settings","action:admin_list_service_customers","action:list_staff_invitations"],"code":"","doc":"docs/ontology/rules.md#rule:BR-ADMIN-003","test":"","evidence":"documented","note":"后台可返回报告内部状态legacy inviteCode 不再返回。员工邀请列表仅返回脱敏手机号且不返回 token/hash原始 token 仅创建响应返回一次。"}
{"id":"rule:BR-ADMIN-004","type":"Rule","name":"adminPhaseAOutOfScope","nameZh":"Phase A 后台范围闸门","domain":"admin","appliesTo":["entity:admin_console","entity:workbench"],"code":"","doc":"docs/ontology/rules.md#rule:BR-ADMIN-004","test":"","evidence":"documented","note":"禁止将 membership/stored_value/service_package/收银/库存/寄养/押金/点餐/支付宝渠道 写入 Phase A 后台范围或设计稿。上述保持 evidence=gap。"}
{"id":"action:view_workbench","type":"Action","name":"viewWorkbench","nameZh":"查看今日行动工作台","domain":"admin","inputs":["date","entity:current_user"],"outputs":["entity:workbench","entity:workbench_todo_item"],"entrypoints":["GET /api/admin/workbench/actions","GET /api/admin/workbench/report-funnel","Admin UI /workbench"],"appliesRules":["rule:BR-ADMIN-001","rule:BR-ADMIN-002","rule:BR-ADMIN-004","rule:BR-BE-001"],"code":"backend/src/main/java/com/petstore/controller/AdminBusinessEventController.java#actions; #reportFunnel; backend/src/main/java/com/petstore/service/AdminWorkbenchService.java; backend/src/main/java/com/petstore/service/AdminBusinessEventService.java; admin/src/views/WorkbenchView.vue","doc":"docs/ontology/actions.md#action:view_workbench","test":"AdminBusinessEventControllerTest; AdminWorkbenchServiceTest; AdminBusinessEventServiceTest","evidence":"anchored","note":"按会话 storeId 聚合完整本店行动与低敏预览;事件漏斗按日期汇总。"}
{"id":"action:drilldown_workbench_todo","type":"Action","name":"drilldownWorkbenchTodo","nameZh":"工作台行动下钻","domain":"admin","inputs":["entity:workbench_todo_item"],"outputs":[],"entrypoints":["Admin UI workbench action click"],"appliesRules":["rule:BR-ADMIN-001","rule:BR-ADMIN-002"],"code":"admin/src/views/WorkbenchView.vue; admin/src/views/AppointmentsView.vue","doc":"docs/ontology/actions.md#action:drilldown_workbench_todo","evidence":"anchored","note":"按 kind 跳转 appointments/reports/leads 并带筛选;预约预览可按受保护 ID 详情打开。"}
@ -219,7 +219,7 @@
{"id":"action:admin_list_reports","type":"Action","name":"adminListReports","nameZh":"后台报告列表","domain":"admin","inputs":["dateFrom","dateTo","highlightStatus","page","pageSize"],"outputs":["entity:report","entity:highlight_video"],"entrypoints":["Admin UI /reports (planned)","reuses GET /api/report/list"],"appliesRules":["rule:BR-ADMIN-001","rule:BR-ADMIN-002","rule:BR-ADMIN-003","rule:BR-RPT-005"],"code":"backend/.../ReportController.java#list (reuse)","doc":"docs/ontology/actions.md#action:admin_list_reports","evidence":"documented","note":"含成片三态、复制公开链接、触发重生成(复用 generate_highlight。"}
{"id":"action:admin_list_leads","type":"Action","name":"adminListLeads","nameZh":"后台回访线索列表","domain":"admin","inputs":["remindStatus","remindDateTo","page","pageSize"],"outputs":["entity:report_lead"],"entrypoints":["Admin UI /leads (planned)","reuses GET /api/report/leads"],"appliesRules":["rule:BR-ADMIN-001","rule:BR-ADMIN-002","rule:BR-LEAD-002","rule:BR-LEAD-003"],"code":"backend/.../ReportLeadController.java#leads (reuse)","doc":"docs/ontology/actions.md#action:admin_list_leads","evidence":"documented"}
{"id":"action:admin_list_service_customers","type":"Action","name":"adminListServiceCustomers","nameZh":"后台服务客户列表","domain":"admin","inputs":["source","hasPendingLead","lastVisitFrom","lastVisitTo","q","page","pageSize"],"outputs":["entity:store_customer"],"entrypoints":["GET /api/admin/service-customers","Admin UI /customers"],"appliesRules":["rule:BR-ADMIN-001","rule:BR-ADMIN-002","rule:BR-ADMIN-003","rule:BR-ADMIN-004","rule:BR-SC-001"],"code":"backend/src/main/java/com/petstore/controller/AdminServiceCustomerController.java#listServiceCustomers; backend/src/main/java/com/petstore/service/AdminServiceCustomerService.java","doc":"docs/ontology/actions.md#action:admin_list_service_customers; docs/门店管理后台-PhaseA-页面清单PRD.md §7.6","test":"AdminServiceCustomerControllerTest; AdminServiceCustomerServiceTest","evidence":"anchored","note":"以 t_store_customer 稳定主档为入口,动态聚合宠物/到店/报告/留资;返回 storeCustomerId 和脱敏手机号。"}
{"id":"action:admin_update_settings","type":"Action","name":"adminUpdateSettings","nameZh":"后台门店设置读写","domain":"admin","inputs":["entity:store","entity:service_type","entity:user"],"outputs":["entity:store","entity:service_type","entity:user"],"entrypoints":["GET /api/admin/store","Admin UI /settings","PUT /api/store/update"],"appliesRules":["rule:BR-ADMIN-001","rule:BR-ADMIN-002","rule:BR-ADMIN-003","rule:BR-STORE-001","rule:BR-ST-001","rule:BR-USER-001"],"code":"","doc":"docs/ontology/actions.md#action:admin_update_settings","evidence":"anchored","note":"后台读本店含 inviteCodeGET /api/admin/store写资料复用 PUT /api/store/update仅 boss服务类型/员工复用既有 API。","code_refs":["backend/src/main/java/com/petstore/controller/AdminStoreController.java#currentStore","backend/src/main/java/com/petstore/controller/StoreController.java#update"]}
{"id":"action:admin_update_settings","type":"Action","name":"adminUpdateSettings","nameZh":"后台门店设置读写","domain":"admin","inputs":["entity:store","entity:service_type","entity:user"],"outputs":["entity:store","entity:service_type","entity:user","entity:audit_log"],"entrypoints":["GET /api/admin/store","Admin UI /settings","PUT /api/store/update"],"appliesRules":["rule:BR-ADMIN-001","rule:BR-ADMIN-002","rule:BR-ADMIN-003","rule:BR-STORE-001","rule:BR-ST-001","rule:BR-USER-001","rule:BR-AUDIT-001"],"code":"","doc":"docs/ontology/actions.md#action:admin_update_settings","evidence":"anchored","note":"后台不再读取 legacy inviteCode写资料复用 PUT /api/store/update 并写低敏审计;员工改走限时邀请。","code_refs":["backend/src/main/java/com/petstore/controller/AdminStoreController.java#currentStore","backend/src/main/java/com/petstore/controller/StoreController.java#update"]}
{"id":"action:admin_manage_schedule","type":"Action","name":"adminManageSchedule","nameZh":"后台排班与占用","domain":"admin","inputs":["date","entity:schedule_block"],"outputs":["entity:schedule_block","entity:appointment"],"entrypoints":["Admin UI /schedule","GET /api/schedule/day","POST /api/schedule/block","DELETE /api/schedule/block"],"appliesRules":["rule:BR-ADMIN-001","rule:BR-ADMIN-002","rule:BR-SCH-001","rule:BR-SCH-002","rule:BR-APPT-004"],"code":"","doc":"docs/ontology/actions.md#action:admin_manage_schedule","evidence":"anchored","note":"Web 排班日视图展示容量占用;增删带时长占用复用 ScheduleController。"}
{"id":"event:workbench_viewed","type":"Event","name":"workbenchViewed","nameZh":"工作台已打开","domain":"admin","emittedBy":["action:view_workbench"],"payload":["storeId","userId","ts"],"code":"","doc":"docs/ontology/events.md#event:workbench_viewed","evidence":"gap","note":"可选埋点A 期可不实现上报。"}
{"id":"rel:admin_console_has_workbench","type":"Relation","subject":"entity:admin_console","predicate":"HAS","object":"entity:workbench","domain":"admin","evidence":"documented","cardinality":"1—1","doc":"登录默认工作台"}
@ -240,3 +240,19 @@
{"id":"rel:admin_list_leads_reads_lead","type":"Relation","subject":"action:admin_list_leads","predicate":"READS","object":"entity:report_lead","domain":"admin","evidence":"documented"}
{"id":"rel:admin_list_customers_reads_sc","type":"Relation","subject":"action:admin_list_service_customers","predicate":"READS","object":"entity:store_customer","domain":"admin","evidence":"anchored"}
{"id":"rel:drilldown_todo_to_list_appts","type":"Relation","subject":"action:drilldown_workbench_todo","predicate":"ROUTES_TO","object":"action:admin_list_appointments","domain":"admin","evidence":"anchored","doc":"kind=overdue_appointment|in_service|upcoming_today按 ID 或服务端口径筛选"}
{"id":"entity:staff_invitation","type":"Entity","name":"StaffInvitation","nameZh":"一次性员工邀请","domain":"user","jpa":true,"fields":["id","invitation_id","token_hash","store_id","invited_name","invited_phone","status","expires_at","created_by_user_id","accepted_by_user_id","accepted_at","revoked_by_user_id","revoked_at","create_time","update_time"],"systems":["Backend Core","Store Miniapp FE","Store Admin FE"],"code":"backend/src/main/java/com/petstore/entity/StaffInvitation.java; backend/src/main/java/com/petstore/service/StaffInvitationService.java","doc":"docs/ontology/objects.md#entity:staff_invitation; docs/架构决策-门店开通与员工邀请-2026-08-02.md","test":"StaffInvitationServiceTest; StoreOnboardingMigrationTest","evidence":"anchored","note":"原始 token 只在创建响应返回一次;库内仅 SHA-256列表/预览只返回 maskedPhone"}
{"id":"entity:audit_log","type":"Entity","name":"AuditLog","nameZh":"不可变操作审计","domain":"platform","jpa":true,"fields":["id","audit_id","store_id","actor_user_id","actor_role","action","target_type","target_id","outcome","metadata_json","occurred_at","create_time"],"systems":["Backend Core"],"code":"backend/src/main/java/com/petstore/entity/AuditLog.java; backend/src/main/java/com/petstore/service/AuditLogService.java","doc":"docs/ontology/objects.md#entity:audit_log; docs/架构决策-门店开通与员工邀请-2026-08-02.md","test":"AuditLogServiceTest; StoreOnboardingMigrationTest","evidence":"anchored","note":"只追加metadata 禁止 phone/token/url/openid/unionid/password/secret/IP/地址坐标/原始请求"}
{"id":"action:legacy_register_boss_disabled","type":"Action","name":"legacyRegisterBossDisabled","nameZh":"旧老板注册停用","domain":"user","inputs":["legacyRequest"],"outputs":[],"entrypoints":["POST /api/user/register-boss","UserController#registerBoss"],"appliesRules":["rule:BR-ONBOARD-001"],"code":"backend/src/main/java/com/petstore/controller/UserController.java#registerBoss","evidence":"anchored","status":"deprecated","deprecated":true,"note":"固定返回 LEGACY_REGISTRATION_DISABLED"}
{"id":"action:get_store_onboarding","type":"Action","name":"getStoreOnboarding","nameZh":"查看门店开通清单","domain":"store","inputs":["entity:current_user"],"outputs":["status","steps","missingRequiredSteps","readyToComplete"],"entrypoints":["GET /api/admin/onboarding","AdminOnboardingController#status","StoreOnboardingService#getStatus"],"appliesRules":["rule:BR-AUTH-001","rule:BR-ONBOARD-001"],"code":"backend/src/main/java/com/petstore/controller/AdminOnboardingController.java#status; backend/src/main/java/com/petstore/service/StoreOnboardingService.java#getStatus; admin/src/views/SettingsView.vue; frontend/src/pages/mine/Onboarding.vue","test":"StoreOnboardingServiceTest","evidence":"anchored"}
{"id":"action:complete_store_onboarding","type":"Action","name":"completeStoreOnboarding","nameZh":"显式完成门店开通","domain":"store","inputs":["entity:current_user"],"outputs":["entity:store","entity:audit_log"],"entrypoints":["POST /api/admin/onboarding/complete","AdminOnboardingController#complete","StoreOnboardingService#complete"],"appliesRules":["rule:BR-AUTH-001","rule:BR-ONBOARD-001","rule:BR-AUDIT-001"],"code":"backend/src/main/java/com/petstore/controller/AdminOnboardingController.java#complete; backend/src/main/java/com/petstore/service/StoreOnboardingService.java#complete","test":"StoreOnboardingServiceTest","evidence":"anchored"}
{"id":"action:create_staff_invitation","type":"Action","name":"createStaffInvitation","nameZh":"创建一次性员工邀请","domain":"user","inputs":["name","phone","validDays","entity:current_user"],"outputs":["entity:staff_invitation","inviteToken","invitePath","entity:audit_log"],"entrypoints":["POST /api/admin/staff-invitations","StaffInvitationController#create","StaffInvitationService#create"],"appliesRules":["rule:BR-AUTH-001","rule:BR-USER-001","rule:BR-INVITE-001","rule:BR-AUDIT-001"],"code":"backend/src/main/java/com/petstore/controller/StaffInvitationController.java#create; backend/src/main/java/com/petstore/service/StaffInvitationService.java#create","test":"StaffInvitationServiceTest","evidence":"anchored","note":"inviteToken 仅当前创建响应出现一次"}
{"id":"action:list_staff_invitations","type":"Action","name":"listStaffInvitations","nameZh":"员工邀请记录","domain":"user","inputs":["entity:current_user"],"outputs":["entity:staff_invitation"],"entrypoints":["GET /api/admin/staff-invitations","StaffInvitationController#list","StaffInvitationService#list"],"appliesRules":["rule:BR-AUTH-001","rule:BR-USER-001","rule:BR-INVITE-001"],"code":"backend/src/main/java/com/petstore/controller/StaffInvitationController.java#list; backend/src/main/java/com/petstore/service/StaffInvitationService.java#list","test":"StaffInvitationServiceTest","evidence":"anchored","note":"不返回 invitedPhone、tokenHash 或原始 token"}
{"id":"action:revoke_staff_invitation","type":"Action","name":"revokeStaffInvitation","nameZh":"撤销员工邀请","domain":"user","inputs":["invitationId","entity:current_user"],"outputs":["entity:staff_invitation","entity:audit_log"],"entrypoints":["DELETE /api/admin/staff-invitations","StaffInvitationController#revoke","StaffInvitationService#revoke"],"appliesRules":["rule:BR-AUTH-001","rule:BR-USER-001","rule:BR-INVITE-001","rule:BR-AUDIT-001"],"code":"backend/src/main/java/com/petstore/controller/StaffInvitationController.java#revoke; backend/src/main/java/com/petstore/service/StaffInvitationService.java#revoke","test":"StaffInvitationServiceTest","evidence":"anchored"}
{"id":"action:preview_staff_invitation","type":"Action","name":"previewStaffInvitation","nameZh":"公开预览员工邀请","domain":"user","inputs":["token"],"outputs":["storeName","invitedName","maskedPhone","status","expiresAt","canAccept"],"entrypoints":["GET /api/staff-invitations/preview","StaffInvitationController#preview","StaffInvitationService#preview"],"appliesRules":["rule:BR-INVITE-001"],"code":"backend/src/main/java/com/petstore/controller/StaffInvitationController.java#preview; backend/src/main/java/com/petstore/service/StaffInvitationService.java#preview","test":"StaffInvitationServiceTest","evidence":"anchored"}
{"id":"action:accept_staff_invitation","type":"Action","name":"acceptStaffInvitation","nameZh":"微信核验并接受员工邀请","domain":"user","inputs":["token","phoneCode","loginCode"],"outputs":["entity:user","entity:store","session_token","entity:audit_log"],"entrypoints":["POST /api/staff-invitations/accept","StaffInvitationController#accept","StaffInvitationService#acceptVerified"],"appliesRules":["rule:BR-INVITE-001","rule:BR-AUDIT-001","rule:BR-USER-003"],"code":"backend/src/main/java/com/petstore/controller/StaffInvitationController.java#accept; backend/src/main/java/com/petstore/service/StaffInvitationService.java#acceptVerified; frontend/src/pages/login/Login.vue","test":"StaffInvitationServiceTest","evidence":"anchored"}
{"id":"rule:BR-ONBOARD-001","type":"Rule","name":"verifiedMerchantOnboarding","nameZh":"微信核验入驻与显式开通","domain":"store","appliesTo":["action:register_boss","action:legacy_register_boss_disabled","action:get_store_onboarding","action:complete_store_onboarding"],"code":"backend/src/main/java/com/petstore/service/MerchantOnboardingService.java; backend/src/main/java/com/petstore/service/StoreOnboardingService.java","doc":"docs/ontology/rules.md#rule:BR-ONBOARD-001","test":"StoreOnboardingServiceTest","evidence":"anchored","note":"新老板手机号由微信核验;完成开通要求门店资料、预约容量、至少一个服务项目,邀请员工为选填;历史状态 unknown 不推断"}
{"id":"rule:BR-INVITE-001","type":"Rule","name":"oneTimeStaffInvitation","nameZh":"一次性员工邀请安全边界","domain":"user","appliesTo":["action:create_staff_invitation","action:list_staff_invitations","action:revoke_staff_invitation","action:preview_staff_invitation","action:accept_staff_invitation"],"code":"backend/src/main/java/com/petstore/service/StaffInvitationService.java; backend/src/main/java/com/petstore/controller/StaffInvitationController.java","doc":"docs/ontology/rules.md#rule:BR-INVITE-001","test":"StaffInvitationServiceTest; StoreOnboardingMigrationTest","evidence":"anchored","note":"256-bit token 原文只返回一次,库内 SHA-256手机号绑定且由微信核验1-30 天、一次使用、可撤销;账号/微信冲突拒绝,不升级 customer 角色"}
{"id":"rule:BR-AUDIT-001","type":"Rule","name":"immutableLowSensitivityAudit","nameZh":"不可变低敏操作审计","domain":"platform","appliesTo":["action:register_boss","action:update_store","action:complete_store_onboarding","action:create_staff_invitation","action:revoke_staff_invitation","action:accept_staff_invitation","action:delete_staff"],"code":"backend/src/main/java/com/petstore/service/AuditLogService.java","doc":"docs/ontology/rules.md#rule:BR-AUDIT-001","test":"AuditLogServiceTest; StoreOnboardingMigrationTest","evidence":"anchored","note":"只追加metadata 仅服务端白名单标量且禁止 PII、凭证、地址坐标和原始请求"}
{"id":"rel:store_has_staff_invitations","type":"Relation","subject":"entity:store","predicate":"HAS","object":"entity:staff_invitation","cardinality":"1—N","domain":"user","evidence":"anchored","doc":"StaffInvitation.store_id"}
{"id":"rel:store_has_audit_logs","type":"Relation","subject":"entity:store","predicate":"HAS","object":"entity:audit_log","cardinality":"1—N","domain":"platform","evidence":"anchored","doc":"AuditLog.store_id"}
{"id":"rel:staff_invitation_creates_user","type":"Relation","subject":"action:accept_staff_invitation","predicate":"CREATES","object":"entity:user","domain":"user","evidence":"anchored","doc":"仅微信核验手机号匹配且无账号冲突时创建 staff"}

View File

@ -6,13 +6,13 @@
### action:register_boss
老板入驻:创建 `Store` + `boss` `User`,签发 `session_token`
老板入驻:微信核验手机号后,在同一事务创建 `Store` + `boss` `User`,签发 `session_token`,写 `store_registered` BusinessEvent 与 AuditLog
- **入口**`POST /api/user/register-boss` → `UserService#registerBoss`(公开,在 AuthInterceptor allowlist
- **输入**`storeName`、`bossName`、`phone`、`password`
- **输出**`entity:store`、`entity:user`、`session_token`
- **适用规则**`rule:BR-AUTH-001`session token 签发)
- **代码**`backend/src/main/java/com/petstore/service/UserService.java#registerBoss`
- **入口**`POST /api/onboarding/register-boss` → `MerchantOnboardingController#registerBoss``MerchantOnboardingService#registerVerifiedBoss`(公开
- **输入**`storeName`、`bossName`、微信 `phoneCode`、可选 `loginCode`;不接受手填手机号或明文密码
- **输出**`entity:store`、`entity:user`、`session_token`、`entity:business_event`、`entity:audit_log`
- **适用规则**`rule:BR-ONBOARD-001`、`rule:BR-AUDIT-001`
- **代码**`backend/src/main/java/com/petstore/service/MerchantOnboardingService.java`
- **证据**`anchored`
### action:update_store
@ -39,10 +39,10 @@
### action:get_store_by_invite_code
按邀请码查门店:仅 boss/staff 且邀请码对应门店必须为当前用户所属门店。
legacy 永久邀请码查询入口已停用,固定返回 `410 / LEGACY_INVITE_DISABLED`,不再查询或返回门店。
- **入口**`GET /api/store/invite-code` → `StoreController#getByInviteCode`
- **适用规则**`rule:BR-STORE-002`邀请码同店校验
- **适用规则**`rule:BR-STORE-002`legacy 禁用
- **代码**`backend/src/main/java/com/petstore/controller/StoreController.java#getByInviteCode`
- **测试**`StoreControllerTest`
- **证据**`anchored`
@ -388,9 +388,9 @@
### action:create_staff
老板创建员工:仅 boss`storeId=current.storeId`
旧“直接创建员工”入口已停用,固定返回 `DIRECT_STAFF_CREATION_DISABLED`;新员工必须由老板创建限时邀请后本人接受
- **入口**`POST /api/user/create-staff` → `UserController#createStaff``UserService#createStaff`
- **入口**`POST /api/user/create-staff` → `UserController#createStaff`deprecated
- **适用规则**`rule:BR-USER-001`(仅 boss
- **代码**`backend/src/main/java/com/petstore/controller/UserController.java#createStaff`
- **证据**`anchored`
@ -406,7 +406,7 @@
### action:delete_staff
删除员工:仅 boss目标员工必须属于本店
删除员工:仅 boss目标必须是本店 `staff`,不能删除 boss。删除后活跃账号校验会立即让旧 session token 失效,并写低敏 AuditLog
- **入口**`DELETE /api/user/staff` → `UserController#deleteStaff`
- **适用规则**`rule:BR-USER-001`
@ -490,11 +490,10 @@
### action:register_staff
员工注册(邀请码方式):公开接口,凭邀请码加入对应门店
永久邀请码员工注册已停用,固定返回 `410 / LEGACY_INVITE_DISABLED`
- **入口**`POST /api/user/register-staff` → `UserController#registerStaff``UserService#registerStaff`(公开)
- **输出**`entity:user`staff、`entity:store`、`session_token`
- **适用规则**`rule:BR-AUTH-001`
- **入口**`POST /api/user/register-staff` → `UserController#registerStaff`公开、deprecated
- **适用规则**`rule:BR-STORE-002`
- **代码**`backend/src/main/java/com/petstore/controller/UserController.java#registerStaff`
- **证据**`anchored`
@ -509,13 +508,32 @@
### action:register_store
店铺注册(旧入口):公开接口,创建 Store。**deprecated**:与 `action:register_boss` 重复,勿作为新集成入口
店铺注册旧入口固定返回 `LEGACY_STORE_REGISTRATION_DISABLED`,不创建 Store
- **入口**`POST /api/store/register` → `StoreController#register``StoreService#create`
- **输出**`entity:store`
- **入口**`POST /api/store/register` → `StoreController#register`
- **状态**`deprecated`
- **代码**`backend/src/main/java/com/petstore/controller/StoreController.java#register`
- **证据**`gap`(与 `register_boss` 重复,建议废弃或合并)
- **证据**`anchored`
## 门店开通与员工邀请Phase 0
### action:get_store_onboarding / action:complete_store_onboarding
- `GET /api/admin/onboarding`boss/staff 查看 4 步清单;必填为门店资料、预约容量、至少一个服务项目,邀请员工为选填。
- `POST /api/admin/onboarding/complete`:仅 boss必填项全部满足才写 `completed_at/by` 与 AuditLog重复确认幂等。
- 历史门店迁移为 `unknown`,不推测已经完成。
### action:create_staff_invitation / action:list_staff_invitations / action:revoke_staff_invitation
- `POST /api/admin/staff-invitations`:仅 boss按姓名、本人手机号、130 天有效期创建。返回原始 `inviteToken` 和小程序 `invitePath` **一次**
- `GET /api/admin/staff-invitations`:仅 boss只返回脱敏手机号和状态不返回原始 token/hash。
- `DELETE /api/admin/staff-invitations?invitationId=`:仅 boss + 同店;已接受不能撤销,重复撤销幂等。
### action:preview_staff_invitation / action:accept_staff_invitation
- `GET /api/staff-invitations/preview?token=`:公开预览门店、受邀姓名、脱敏手机号、状态和有效期。
- `POST /api/staff-invitations/accept`:公开但必须提交微信 `phoneCode`;服务端换得的手机号必须与邀请绑定手机号一致。成功后创建 staff、消费邀请、写 AuditLog 并签发新 session。
- 已存在 User、openid 或 unionid 冲突时拒绝;本期不把 customer 静默升级为 staff避免单角色模型混淆。
## 删除/列表类protected

View File

@ -6,10 +6,11 @@
### event:store_registered
老板入驻成功,`Store` + `boss` `User` 创建完成,`session_token` 签发。
微信核验手机号后的老板入驻成功,`Store` + `boss` `User` 创建完成,`session_token` 签发;同时以 BusinessEvent 和 AuditLog 持久化
- **触发动作**`action:register_boss`
- **payload**`storeId`、`bossUserId`、`inviteCode`
- **payload**`storeId`、`bossUserId`、`occurredAt`;不含手机号或 legacy inviteCode
- **代码**`BusinessEventService#recordStoreRegistered`、`MerchantOnboardingService#registerVerifiedBoss`
- **证据**`anchored`
## User / 鉴权相关
@ -18,7 +19,7 @@
登录/注册成功后签发 HMAC session token。
- **触发动作**`action:register_boss`、`action:login`、`action:wx_phone_login`、`register_staff`
- **触发动作**`action:register_boss`、`action:login`、`action:wx_phone_login`、`action:accept_staff_invitation`
- **payload**`userId`、`storeId`、`role`、`exp`
- **代码**`backend/src/main/java/com/petstore/auth/SessionTokenService.java#issue`
- **测试**`SessionTokenServiceTest`
@ -244,13 +245,14 @@
- **代码**`backend/src/main/java/com/petstore/service/PetService.java#create`
- **证据**`anchored`
### event:staff_created
### event:staff_invitation_accepted
老板创建员工
受邀员工通过微信手机号核验后首次接受邀请并创建 staff 账号;以 AuditLog 持久化
- **触发动作**`action:create_staff`
- **payload**`staffId`、`storeId`、`name`、`phone`
- **代码**`backend/src/main/java/com/petstore/service/UserService.java#createStaff`
- **触发动作**`action:accept_staff_invitation`
- **payload**`storeId`、`staffUserId`、`invitationId`、`verificationMethod`、`occurredAt`不含手机号、token 或微信标识
- **代码**`StaffInvitationService#acceptVerified`、`AuditLogService#record`
- **测试**`StaffInvitationServiceTest`
- **证据**`anchored`
### event:user_updated

View File

@ -1,6 +1,6 @@
# Objects实体
> 持久名词 + 字段 + 归属系统。本批覆盖 P0 核心闭环的 5 个实体
> 持久名词 + 字段 + 归属系统。`graph/ontology.jsonl` 为机器可审计真源
## entity:store
@ -17,10 +17,13 @@
| longitude | Double | 经度(公开报告页不返回) |
| intro | TEXT | 简介 |
| owner_id | BIGINT | 老板用户 ID |
| invite_code | VARCHAR(8) | 员工邀请码 |
| invite_code | VARCHAR(8) | legacy 兼容字段;不返回客户端、不再作为员工注册凭证 |
| booking_day_start | LocalTime | 预约首号 |
| booking_last_slot_start | LocalTime | 预约末号 |
| booking_capacity | INT | 门店承诺的并发接待数110 |
| onboarding_status | VARCHAR(16) | unknown历史不可推断/ in_progress / completed |
| onboarding_completed_at | DATETIME | 老板显式完成开通时间 |
| onboarding_completed_by_user_id | BIGINT | 显式完成开通的老板 |
| create_time / update_time | DATETIME | 时间戳 |
| deleted | TINYINT(1) | 软删 |
@ -30,6 +33,48 @@
- **测试**`StoreControllerTest`
- **证据**`anchored`
## entity:staff_invitation
**一次性员工邀请**。老板按员工本人手机号创建130 天有效、可撤销且只能接受一次。
| 字段 | 类型 | 说明 |
|------|------|------|
| invitation_id | VARCHAR(36) | 对外随机 ID管理端撤销使用 |
| token_hash | VARCHAR(64) | 256-bit 原始 token 的 SHA-256原始 token 不落库 |
| store_id | BIGINT | 受邀门店 |
| invited_name / invited_phone | VARCHAR | 受邀姓名 / 服务端核验手机号API 只返回脱敏手机号 |
| status | VARCHAR(16) | pending / accepted / revoked / expired |
| expires_at | DATETIME | 到期时间 |
| created_by_user_id | BIGINT | 创建邀请的老板 |
| accepted_by_user_id / accepted_at | BIGINT / DATETIME | 首次成功接受回执 |
| revoked_by_user_id / revoked_at | BIGINT / DATETIME | 撤销回执 |
| create_time / update_time | DATETIME | 时间戳 |
- **安全边界**:原始 token 仅在创建响应返回一次;列表/预览不返回 `token_hash`、原始 token 或完整手机号。
- **代码**`backend/src/main/java/com/petstore/entity/StaffInvitation.java`、`service/StaffInvitationService.java`
- **测试**`StaffInvitationServiceTest`、`StoreOnboardingMigrationTest`
- **证据**`anchored`
## entity:audit_log
**不可变操作审计**。记录开店、门店配置和员工权限类操作,与可统计经营事实 `BusinessEvent` 分开。
| 字段 | 类型 | 说明 |
|------|------|------|
| audit_id | VARCHAR(36) | 随机审计 ID |
| store_id | BIGINT | 强制门店范围 |
| actor_user_id / actor_role | BIGINT / VARCHAR | 操作人快照 |
| action | VARCHAR(64) | 受控动作名 |
| target_type / target_id | VARCHAR | 目标类型 / 安全引用 ID |
| outcome | VARCHAR(16) | success 等受控结果 |
| metadata_json | TEXT | 服务端白名单低敏标量 JSON |
| occurred_at / create_time | DATETIME | 发生 / 入库时间 |
- **禁止字段**手机号、token/URL、openid/unionid、密码/密钥、IP、地址/坐标、备注/内容和原始请求体。
- **代码**`backend/src/main/java/com/petstore/entity/AuditLog.java`、`service/AuditLogService.java`
- **测试**`AuditLogServiceTest`、`StoreOnboardingMigrationTest`
- **证据**`anchored`
## entity:user
**用户**。三角色:`boss`(老板)/ `staff`(员工)/ `customer`(宠主)。

View File

@ -18,6 +18,8 @@
| `ReportLead` N—1 `Store` | 留资归属门店(回访池范围) | `ReportLead.store_id``Store.id` |
| `Store` 1—N `BusinessEvent` | 所有可统计事实强制归属门店 | `BusinessEvent.store_id``Store.id` |
| `StoreCustomer` 1—N `BusinessEvent` | 客户时间线;无客户语义事件可空 | `BusinessEvent.store_customer_id``StoreCustomer.id` |
| `Store` 1—N `StaffInvitation` | 一个门店可签发多次限时邀请 | `StaffInvitation.store_id``Store.id` |
| `Store` 1—N `AuditLog` | 安全/配置审计强制归属门店 | `AuditLog.store_id``Store.id` |
## 动作—事件(触发)
@ -33,6 +35,7 @@
| `action:confirm_report_sent` | `event:report_sent`(仅首次确认) |
| `action:track_report_open` | `event:report_opened` / `event:report_reopened` |
| `action:submit_lead` | `event:lead_submitted` |
| `action:accept_staff_invitation` | `event:staff_invitation_accepted`、`event:session_issued` |
## 规则—动作(适用)
@ -41,7 +44,7 @@
| `rule:BR-AUTH-001` | 所有 protected 接口 |
| `rule:BR-AUTH-002` | `action:login`、`action:wx_phone_login` |
| `rule:BR-STORE-001` | `action:update_store`、`action:delete_store` |
| `rule:BR-STORE-002` | `action:get_store_by_invite_code` |
| `rule:BR-STORE-002` | legacy 永久邀请码查询/注册停用入口 |
| `rule:BR-APPT-001` | `action:start_service`、`action:transition_appointment_status`、`action:submit_report` |
| `rule:BR-APPT-002` | `action:list_appointments`、`action:start_service`、`action:transition_appointment_status`、`action:get_appointment_detail`、`delete` |
| `rule:BR-APPT-003` | `action:get_appointment_detail`、`action:transition_appointment_status`(仅 cancel |
@ -96,7 +99,7 @@
| `action:create_service_type` | `event:service_type_created` |
| `action:delete_service_type` | `event:service_type_deleted` |
| `action:create_pet` | `event:pet_created` |
| `action:create_staff` | `event:staff_created` |
| `action:accept_staff_invitation` | `event:staff_invitation_accepted` |
| `action:update_user` | `event:user_updated` |
| `action:bind_wechat` | `event:wx_bound`(已在 Batch 1 录入) |
| `action:submit_testimonial` | `event:testimonial_saved` |
@ -115,7 +118,10 @@
| `rule:BR-SCH-001` | `action:day_agenda`、`action:create_schedule_block`、`action:delete_schedule_block` |
| `rule:BR-ST-001` | `action:create_service_type`、`action:update_service_type`、`action:delete_service_type`、`action:init_service_types` |
| `rule:BR-PET-001` | `action:list_pets`、`action:create_pet`、`action:update_pet`、`action:delete_pet`、`action:get_pet_history` |
| `rule:BR-USER-001` | `action:create_staff`、`action:list_staff`、`action:delete_staff` |
| `rule:BR-USER-001` | 员工列表/删除与邀请创建/列表/撤销 |
| `rule:BR-ONBOARD-001` | 老板入驻、查看/完成开通清单 |
| `rule:BR-INVITE-001` | 员工邀请创建/列表/撤销/预览/接受 |
| `rule:BR-AUDIT-001` | 门店和员工权限类敏感操作 |
| `rule:BR-USER-002` | `action:update_user`、`action:get_user_info` |
| `rule:BR-USER-003` | 返回 `User` 的登录/注册/信息类动作 |
| `rule:BR-STORE-003` | `action:get_store`、`action:list_stores` |

View File

@ -6,11 +6,11 @@
### rule:BR-AUTH-001
**HMAC session token 鉴权**protected `/api/**` 要求 `Authorization: Bearer <token>`token 格式 `base64url(payload).base64url(sig)`HMAC-SHA256默认 7 天有效期;public allowlist 见 `AuthInterceptor.PUBLIC_PATTERNS`
**HMAC session token + 活跃账号范围鉴权**protected `/api/**` 要求 `Authorization: Bearer <token>`token 为 HMAC-SHA256、默认 7 天有效期。签名通过后仍须读取活跃 User确认账号未删除且 `role/storeId` 与 token 快照一致boss/staff 还须确认所属 Store 仍为有效门店。删员工、停用门店或权限范围变化会立即令旧 token 失效。public allowlist 见 `AuthInterceptor.PUBLIC_PATTERNS`
- **适用动作**:所有 protected 接口
- **代码**`backend/src/main/java/com/petstore/auth/AuthInterceptor.java`、`SessionTokenService.java`、`CurrentUserContext.java`
- **测试**`SessionTokenServiceTest`
- **测试**`SessionTokenServiceTest`、`AuthInterceptorActiveUserTest`
- **证据**`anchored`
### rule:BR-AUTH-002
@ -35,11 +35,11 @@
### rule:BR-STORE-002
**邀请码查询仅 boss/staff + 同店**:按 code 查到的 store.id 必须等于 `current.storeId`;新员工注册预览走公开 `/api/user/register-staff`(请求体含 inviteCode
**legacy 永久邀请码禁用**`invite_code` 仅保留数据库兼容,不返回客户端、不再作为员工注册凭证;`GET /api/store/invite-code` 与 `POST /api/user/register-staff` 固定返回停用业务码,不查询门店或创建账号
- **适用动作**`action:get_store_by_invite_code`
- **代码**`backend/src/main/java/com/petstore/controller/StoreController.java#getByInviteCode`
- **测试**`StoreControllerTest#inviteCodeCrossStoreForbidden`
- **适用动作**`action:get_store_by_invite_code`、`action:register_staff`
- **代码**`StoreController#getByInviteCode`、`UserController#registerStaff`
- **测试**`StoreControllerTest`
- **证据**`anchored`
### rule:BR-STORE-003
@ -280,10 +280,11 @@
### rule:BR-USER-001
**员工管理仅 boss + 同店**`create_staff`/`list_staff`/`delete_staff` 仅 `isBoss()``storeId=current.storeId``delete_staff` 校验目标员工属于本店
**员工管理与邀请仅 boss + 同店**:门店成员可查看本店成员列表;只有 boss 可创建/查看/撤销本店邀请并删除本店 `staff`。不能删除 boss不能直接创建员工账号员工须本人接受邀请
- **适用动作**`action:create_staff`、`action:list_staff`、`action:delete_staff`
- **代码**`backend/src/main/java/com/petstore/controller/UserController.java`
- **适用动作**`action:create_staff`、`action:list_staff`、`action:delete_staff`、`action:create_staff_invitation`、`action:list_staff_invitations`、`action:revoke_staff_invitation`
- **代码**`UserController.java`、`StaffInvitationController.java`
- **测试**`StaffInvitationServiceTest`
- **证据**`anchored`
### rule:BR-USER-002
@ -298,11 +299,38 @@
**User 敏感字段不序列化**`password`、`wechatOpenid`、`wechatUnionid` 必须 `@JsonIgnore`,禁止随 API JSON 返回。
- **适用动作**`action:login`、`action:wx_phone_login`、`action:get_user_info`、`action:update_user`、`action:register_boss`、`action:register_staff`、`action:list_staff`
- **适用动作**`action:login`、`action:wx_phone_login`、`action:get_user_info`、`action:update_user`、`action:register_boss`、`action:accept_staff_invitation`、`action:list_staff`
- **代码**`backend/src/main/java/com/petstore/entity/User.java`
- **测试**`UserJsonIgnoreTest`
- **证据**`anchored`
### rule:BR-ONBOARD-001
**微信核验入驻与显式开通**:新老板只能用微信 `phoneCode` 核验手机号后入驻,不接收手填手机号或明文密码。历史门店开通状态迁移为 `unknown`,不得推测。完成开通必须满足:门店名称/电话/地址完整、预约首末时段与并发容量合法、至少一个服务项目;邀请员工为选填,支持单人门店。
- **适用动作**`action:register_boss`、`action:get_store_onboarding`、`action:complete_store_onboarding`
- **代码**`MerchantOnboardingService.java`、`StoreOnboardingService.java`
- **测试**`StoreOnboardingServiceTest`、`StoreOnboardingMigrationTest`
- **证据**`anchored`
### rule:BR-INVITE-001
**一次性员工邀请安全边界**:邀请 token 为 256-bit 随机值,原文只在创建响应出现一次,数据库只存 SHA-256邀请绑定手机号、130 天有效、可撤销且仅首次接受有效。接受时必须由微信换得的手机号精确匹配。已有 User/openid/unionid 冲突均拒绝,本期不把 customer 静默升级为 staff。
- **适用动作**:创建、列表、撤销、预览、接受员工邀请
- **代码**`StaffInvitationService.java`、`StaffInvitationController.java`
- **测试**`StaffInvitationServiceTest`、`StoreOnboardingMigrationTest`
- **证据**`anchored`
### rule:BR-AUDIT-001
**不可变低敏操作审计**AuditLog 只追加,强制 `storeId`、受控 action/target/outcome。metadata 只允许服务端白名单标量禁止手机号、token/URL、openid/unionid、密码/密钥、IP、地址/坐标、备注/内容和原始请求体。
- **适用动作**:门店入驻/完成开通/更新设置、员工邀请创建/撤销/接受、删除员工
- **代码**`AuditLogService.java`
- **测试**`AuditLogServiceTest`、`StoreOnboardingMigrationTest`
- **证据**`anchored`
## Config
### rule:BR-CONFIG-001
@ -326,7 +354,7 @@
### rule:BR-CONFIG-003
**生产发布只读门禁**:正式切流前必须按固定顺序完成备份和五个版本化迁移,再以最终生产配置运行 JPA schema `validate` 与 18 项只读数据不变量检查。运行期 readiness 必须同时覆盖数据库、磁盘、上传目录和 FFmpeg/ffprobe上线自动 smoke 只允许 GET不创建或修改业务数据。
**生产发布只读门禁**:正式切流前必须按固定顺序完成备份和六个版本化迁移,再以最终生产配置运行 JPA schema `validate` 与 24 项只读数据不变量检查。运行期 readiness 必须同时覆盖数据库、磁盘、上传目录和 FFmpeg/ffprobe上线自动 smoke 只允许 GET不创建或修改业务数据。
- **适用动作**:—(发布全局约束)
- **代码**`backend/src/main/java/com/petstore/config/ProductionDatabasePreflightRunner.java`、`PetstoreRuntimeHealthIndicator.java`、`backend/deploy/release-preflight.sh`、`production-smoke.sh`
@ -382,9 +410,9 @@
### rule:BR-ADMIN-003
**后台可看内部字段**:经鉴权后可返回公开 API 裁剪掉的字段(如 inviteCode、报告内部字段`rule:BR-STORE-003` / `rule:BR-RPT-006` 对称。手机号默认仍脱敏,明文权限预留
**后台内部字段按用途最小返回**经鉴权后可返回报告内部状态等必要字段legacy `inviteCode` 不再返回。邀请列表仅返回脱敏手机号且不返回 token/hash原始 token 只在创建响应返回一次
- **适用动作**`action:admin_list_reports`、`action:admin_update_settings`、`action:admin_list_service_customers`
- **适用动作**`action:admin_list_reports`、`action:admin_update_settings`、`action:admin_list_service_customers`、`action:list_staff_invitations`
- **证据**`documented`
### rule:BR-ADMIN-004

View File

@ -0,0 +1,59 @@
# Phase 0 门店开通与员工邀请验收记录
> 日期2026-08-02
> 状态Code Complete / Ready for Release待生产迁移与微信真机验收
> 生产数据库与服务器:本批未触碰
## 1. 自动验证
| 检查 | 结果 |
|------|------|
| Backend tests | PASS193 tests0 failure/error/skip |
| Backend package | PASS |
| Admin production build | PASS |
| H5 build | PASS |
| mp-weixin build + app-json verification | PASS |
| Ontology validation/drift | PASS258 条65/65 HTTP、15/15 JPA、0 drift |
| Release shell syntax | PASS`backend/deploy/*.sh` |
## 2. 自动化覆盖
- token 原文与数据库 hash 分离、手机号脱敏;
- 邀请手机号不匹配不创建账号;
- 接受成功创建 staff、消费邀请、写低敏 AuditLog
- 开通必填项缺失不能完成,单人门店可完成;
- 已完成开通的门店不能再清空名称、电话或地址;
- 老板微信核验注册不产生可登录密码,并同时写入 `store_registered` BusinessEvent 与 AuditLog
- Audit metadata 拒绝 token/手机号;
- 门店/角色/删除状态变化会立即让旧 session 失效;
- Nginx Petstore 专用 access log 只记录 `$uri`,不记录携带报告/邀请 token 的 query
- 第六个迁移包含 token hash、状态机与六项回执不变量。
## 3. 三角色真机验收(发布前必做)
### Boss
- [ ] 新微信手机号创建门店,无手填手机号/明文密码;自动登录后进入开通清单。
- [ ] 缺地址时不能完成;补齐资料、确认容量和服务后可完成;单人门店无需先邀请员工。
- [ ] 创建 3/7/14/30 天邀请,创建后只显示一次原始口令;可分享小程序卡片。
- [ ] 邀请列表只有脱敏手机号pending 可撤销accepted 不能撤销。
### Staff
- [ ] 从卡片进入看到正确门店、姓名、脱敏手机号与有效期。
- [ ] 不匹配微信手机号被拒绝且不创建账号;匹配手机号成功加入并直接获得 staff session。
- [ ] 邀请重复打开幂等登录同一 staff过期/撤销邀请有明确提示。
- [ ] 被老板删除后,已有页面下一次受保护请求立即 401 并要求重新登录。
### Customer / 权限反例
- [ ] customer 不能查看/创建/撤销门店邀请,也不能完成开通。
- [ ] 已有 customer 手机号接受员工邀请明确返回账号冲突,不静默改变角色。
- [ ] legacy 永久邀请码查询/注册、直接创建员工、旧老板/门店注册入口均返回明确停用码且无写入。
## 4. 发布门禁
- [ ] 按固定顺序执行第六个迁移 `20260802_create_store_onboarding.sql`,六项验证均为 0。
- [ ] 以最终生产配置运行 JPA `validate` + 24 项只读不变量预检。
- [ ] 微信体验版双微信账号完成 Boss → 分享 → Staff 接受全链路;证据不包含完整手机号或 token。
- [ ] 旧版本回滚已确认忽略新增表/列;不执行 down migration。

View File

@ -48,7 +48,7 @@ auth_get() { curl -sf -H "$AUTH" "$@"; }
auth_post() { curl -sf -H "$AUTH" -H 'Content-Type: application/json' -X POST "$@"; }
step "2) customer 门禁:用 customer 应 403若有— 跳过;校验 admin store"
auth_get "$BASE/admin/store" | python3 -c 'import json,sys; d=json.load(sys.stdin); assert d.get("code")==200, d; assert "inviteCode" in d["data"]; print("store", d["data"].get("name"), "invite", d["data"].get("inviteCode"))'
auth_get "$BASE/admin/store" | python3 -c 'import json,sys; d=json.load(sys.stdin); assert d.get("code")==200, d; assert "inviteCode" not in d["data"]; assert "onboardingStatus" in d["data"]; print("store", d["data"].get("name"), "onboarding", d["data"].get("onboardingStatus"))'
step "3) 预约列表(含 admin enrichment"
auth_get "$BASE/appointment/list?page=1&pageSize=20" | python3 -c '

View File

@ -2,8 +2,8 @@
> **本体对齐**:本文档与 [`ontology/objects.md`](./ontology/objects.md) 对齐(`entity:store`/`entity:user`/`entity:appointment`/`entity:report`),规则见 [`ontology/rules.md`](./ontology/rules.md)。冲突以本体为准。
>
> 版本v1.9
> 日期2026-04-18v1.9:对外品牌统一为「宠小它」及主/副 Sloganv1.8:成片「可变时长 + 双编排」与 §5.3 对齐专文 §0
> 版本v2.0
> 日期2026-08-02v2.0:面向 35 家独立单店真实试点,补齐门店开通、一次性员工邀请与审计边界
> **品牌**:宠小它 · **主 Slogan**:用心宠小它,温暖伴一生 · **副 Slogan**:智慧宠物门店服务系统
> **Logo / VI**[《宠小它-Logo与品牌识别说明》](./宠小它-Logo与品牌识别说明.md)(含概念草案图)
@ -20,7 +20,7 @@
## 一、产品定位
**平台定位:** 宠物店服务管理 SaaS 平台,支持多家宠物店入驻
**平台定位:** 面向独立宠物洗护单店的服务管理 SaaS平台可承载多家独立试点门店但本期不做连锁多门店组织。
**目标用户v1**
- 宠物店老板 / 员工(管理预约 + 填写报告 + 发送报告 + 回访池)
@ -37,8 +37,18 @@
> - 完整经营分析看板。
**登录方式:**
- 微信授权登录(老板/员工主要登录方式)
- 手机号+短信验证码(备用)
- 生产:微信手机号授权登录;老板入驻和员工接受邀请均必须经微信核验手机号。
- 开发:手机号+演示短信验证码production profile 默认关闭,不作为生产备用通道。
**门店开通流程:**
```text
老板微信核验手机号创建门店
→ 补全门店名称/电话/地址
→ 确认预约首末时段与并发容量
→ 确认至少一个服务项目
→ 显式完成开通(邀请员工为选填,支持单人门店)
```
---
@ -71,10 +81,13 @@
| address | VARCHAR | 地址 |
| intro | TEXT | 简介 |
| owner_id | BIGINT | 老板用户ID |
| invite_code | VARCHAR | 员工邀请码8位 |
| invite_code | VARCHAR | legacy 兼容字段;不返回客户端、不再作为注册凭证 |
| booking_day_start | TIME | 每日首个容量桶开始时间 |
| booking_last_slot_start | TIME | 每日最后一个容量桶开始时间 |
| booking_capacity | INT | 门店并发接待数110 |
| onboarding_status | VARCHAR | unknown / in_progress / completed |
| onboarding_completed_at | DATETIME | 老板显式完成开通时间 |
| onboarding_completed_by_user_id | BIGINT | 完成开通的老板用户 |
| create_time | DATETIME | 创建时间 |
| update_time | DATETIME | 更新时间 |
@ -83,7 +96,7 @@
|------|------|------|
| id | BIGINT | 主键 |
| username | VARCHAR | 用户名 |
| password | VARCHAR | 密码 |
| password | VARCHAR | legacy 服务端兼容字段;生产微信注册只写不可登录哨兵值,不接收或下发密码 |
| name | VARCHAR | 姓名/技师名 |
| phone | VARCHAR | 手机号 |
| avatar | VARCHAR | 头像 |
@ -92,6 +105,23 @@
| create_time | DATETIME | 创建时间 |
| update_time | DATETIME | 更新时间 |
### t_staff_invitation员工邀请
| 字段 | 类型 | 说明 |
|------|------|------|
| invitation_id | VARCHAR(36) | 对外随机 ID |
| token_hash | VARCHAR(64) | 原始 256-bit token 的 SHA-256原文不落库 |
| store_id | BIGINT | 门店 |
| invited_name / invited_phone | VARCHAR | 受邀姓名 / 服务端核验手机号 |
| status | VARCHAR | pending / accepted / revoked / expired |
| expires_at | DATETIME | 130 天有效期 |
| accepted_by_user_id / accepted_at | BIGINT / DATETIME | 接受回执 |
| revoked_by_user_id / revoked_at | BIGINT / DATETIME | 撤销回执 |
### t_audit_log不可变操作审计
记录门店入驻/开通/设置与员工邀请/删除等操作。metadata 仅允许服务端白名单低敏标量禁止手机号、token、微信标识、密码/密钥、IP、地址坐标和原始请求体。
### t_store_customer门店客户主档
| 字段 | 类型 | 说明 |
|------|------|------|
@ -212,8 +242,9 @@
**手机号+短信验证码登录**(备用)
**员工入职流程:**
- 老板后台生成邀请码 → 员工点链接注册 → 自动关联店铺
- 老板后台直接新增员工 → 系统生成随机6位密码 → 员工用手机号+密码登录
- 老板按员工本人手机号创建 130 天有效的一次性邀请;原始 token 仅创建响应显示一次,数据库只保存 hash
- 员工从小程序卡片进入,核对门店、姓名与脱敏手机号,再用微信核验的同一手机号接受邀请并自动关联门店
- 邀请可在接受前撤销,过期或已使用后不可再次创建账号;不支持永久邀请码、直接建号或随机密码登录
### 5.2 预约管理
@ -318,9 +349,10 @@
### 5.6 老板后台(合并到「我的」页面)
**员工管理:**
- 员工邀请码(复制分享)
- 新增员工(姓名+手机号,系统生成密码)
- 删除员工
- 老板按员工本人微信手机号创建 130 天有效的一次性邀请
- 小程序直接转发带受控 path 的邀请卡片;原始口令仅创建后显示一次
- 员工从卡片进入,查看门店/姓名/脱敏手机号,经微信核验后加入
- 老板查看邀请状态、撤销待接受邀请、删除已加入员工
**服务类型:**
- 新增服务类型
@ -351,8 +383,8 @@
| 优先级 | 功能 | 状态 |
|--------|------|------|
| P0 | 老板入驻/登录 | ✅ |
| P0 | 员工邀请码注册 | ✅ |
| P0 | 微信核验老板入驻 + 门店开通清单 | ✅ 代码完成,待生产迁移/真机验收 |
| P0 | 一次性员工邀请、微信核验接受、撤销与状态 | ✅ 代码完成,待生产迁移/真机验收 |
| P0 | 员工登录(微信+验证码) | ✅ |
| P0 | 预约列表 | ✅ |
| P0 | 预约创建 | ✅ |
@ -365,7 +397,7 @@
| P0 | H5报告页链接+二维码) | ✅ |
| P1 | 报告过程素材回传duringMedia | 🔨 进行中 |
| **P0** | **洗美过程短视频自动成片(可变时长、双编排、模板拼接)** | **🔨 本期迭代重点** |
| P0 | 老板后台(员工管理+邀请码) | ✅ 已合并到index.html |
| P0 | 老板后台(开通清单+员工邀请中心) | ✅ Admin 与小程序均已接入 |
| P0 | 老板后台(预约概览) | ✅ 已合并到index.html |
| P1 | 服务类型管理(老板后台) | ✅ |
| P1 | 店铺设置(老板后台) | ✅ |

View File

@ -0,0 +1,87 @@
# 架构决策:门店开通、一次性员工邀请与操作审计
> 日期2026-08-02
> 状态Accepted / Code Complete待生产迁移与微信真机验收
> OwnerBackend Core + Store Miniapp FE + Store Admin FE
> ReviewData Model / Architecture / Access & Privacy = Yes
## 1. 决策背景
旧流程把 `Store.invite_code` 当作永久共享凭证,公开员工注册只凭 8 位码和手填手机号即可创建 staff老板注册也接受未核验手机号和明文密码。Admin/小程序的“直接创建员工”还生成无法安全交付的初始密码。该模型不满足真实试点的身份核验、撤销、有效期、审计和离职失效要求。
本批目标不是扩展组织/权限系统,而是让 35 家独立单店能自行完成开通,并让受邀员工本人安全加入。
## 2. 已冻结决策
### 2.1 门店开通
- 新老板只走 `POST /api/onboarding/register-boss`,服务端用微信 `phoneCode` 换取并核验手机号;不接受手填手机号或明文密码。
- 新门店状态为 `in_progress`;历史门店无法可靠判断是否已完成开通,迁移统一写 `unknown`
- 开通清单四步:门店资料、预约容量、服务项目为必填;邀请员工为选填,支持单人门店。
- 只有 boss 可显式完成;完成回执保存 `completed_at/by` 并写 AuditLog。清单不阻断已有业务接口避免历史门店升级即停摆。
### 2.2 员工邀请
- legacy `invite_code` 仅保留数据库兼容,不返回 Admin/小程序,不再参与查询或注册。
- 老板创建 `StaffInvitation`姓名、本人微信手机号、130 天有效期。
- token 使用 32 字节 `SecureRandom`256-bit原文只在创建响应返回一次数据库仅保存 SHA-256。
- 邀请状态:`pending → accepted`,或 `pending → revoked/expired`;只能首次接受,已接受不能撤销。
- 预览只返回门店名、受邀姓名、脱敏手机号、状态和有效期。
- 接受时必须由微信换得的手机号与邀请绑定手机号精确匹配;成功后才创建 staff、消费邀请并签发 session。
- 已存在 User/openid/unionid 冲突均拒绝。本期 User 仍是单角色模型,不把 customer 静默升级为 staff试点遇到冲突时使用独立工作手机号后续如有真实频次再引入 Account + StoreMembership。
### 2.3 会话与离职
HMAC 签名和过期校验之后,每次受保护请求继续读取活跃 User校验账号未删除且 `role/storeId` 与 token 一致boss/staff 还必须归属仍有效的 Store。删除员工、停用门店或权限范围变化后旧 token 立即 401无需等待 7 天到期。
### 2.4 AuditLog 与 BusinessEvent
- `BusinessEvent` 记录可统计经营事实;本批补齐 `store_registered`
- `AuditLog` 记录门店开通/设置与员工权限操作,只追加、不更新/软删。
- Audit metadata 只允许服务端白名单标量禁止手机号、token/URL、openid/unionid、密码/密钥、IP、地址/坐标、备注/内容和原始请求体。
## 3. API 契约
| 方法 | 路径 | 权限 | 关键语义 |
|------|------|------|----------|
| POST | `/api/onboarding/register-boss` | public + 微信手机号核验 | 原子创建门店/老板,返回 session |
| GET | `/api/admin/onboarding` | boss/staff + 本店 | 计算开通清单 |
| POST | `/api/admin/onboarding/complete` | boss + 本店 | 必填项齐全后显式完成 |
| POST | `/api/admin/staff-invitations` | boss + 本店 | 原始 token 仅本响应一次 |
| GET | `/api/admin/staff-invitations` | boss + 本店 | 脱敏列表,无 token/hash |
| DELETE | `/api/admin/staff-invitations` | boss + 本店 | 撤销 pending 邀请 |
| GET | `/api/staff-invitations/preview` | public | 脱敏预览 |
| POST | `/api/staff-invitations/accept` | public + 微信手机号核验 | 手机号匹配才创建 staff |
`/api/user/register-boss`、`/api/user/register-staff`、`/api/user/create-staff`、`/api/store/register`、`/api/store/invite-code` 保留兼容入口但只返回明确 410 业务码,不产生写入。
## 4. 数据迁移与不变量
迁移:`backend/db/migrations/20260802_create_store_onboarding.sql`,在前五个迁移之后第六个执行。
新增 6 项生产只读不变量,总数由 18 增至 24
1. 门店开通状态枚举合法;
2. completed 必须有完成回执;
3. unknown/in_progress 不得带完成回执;
4. 邀请状态枚举合法;
5. accepted 与接受回执一致;
6. revoked 与撤销回执一致。
## 5. 前端行为
- Admin 设置页顶部显示开通清单,员工页改为邀请中心;创建后必须立即复制,之后只能撤销并重建。
- 小程序老板可直接用 `open-type=share` 转发带受控 path 的邀请卡片。
- 员工从卡片进入可先匿名预览,再点击微信手机号授权接受。
- H5 允许预览,但不会提供绕过微信手机号核验的接受路径。
## 6. 明确不做
- 不引入多门店组织、复杂 RBAC、StoreMembership、审批流或通用 IAM。
- 不接入短信生产登录,不恢复明文密码交付。
- 不调用微信 URL Link/小程序码后台 API试点先使用小程序原生分享卡片Admin 提供复制消息作为补充。
- 不自动执行生产迁移、不改生产数据。
## 7. 回滚
应用回滚只切回前一 backend/Admin/H5/小程序版本;数据库新增列/表/索引保留,不执行 down migration不覆盖已经产生的邀请、审计或员工账号。旧应用会忽略新增结构但 legacy 注册仍应保持关闭,避免重新暴露永久凭证路径。

View File

@ -29,7 +29,7 @@
| Priority | P0 |
| Repo/Path | `backend/deploy/**`、前端发布配置、`docs/**` |
| Service Lock | Petstore backend unit + Petstore 专用 Nginx server blocks + Petstore static roots |
| Depends On | 冻结 RC、真实域名/TLS、备份、个迁移、微信合法域名 |
| Depends On | 冻结 RC、真实域名/TLS、备份、个迁移、微信合法域名 |
| Acceptance | 预检、构建、readiness、只读 smoke、三角色人工 smoke、回滚演练均有证据 |
| RC Included | Yes |
| Due Date | TBD |
@ -47,7 +47,7 @@
- 四仓 commit、构建产物或校验和与 RC manifest 不一致;
- 生产域名仍为 localhost、`.invalid`、`api.s-good.com` 或 `www.s-good.com` 等非本项目域名;
- 数据库备份未完成、校验和缺失或未在隔离库验证可恢复;
- 任一迁移末尾验证查询非 0或预检的 18 项只读不变量非 0
- 任一迁移末尾验证查询非 0或预检的 24 项只读不变量非 0
- `nginx -t` 失败,或 diff 显示将修改 Gitea/GitLab 的 server block
- readiness 非 `UP`,上传目录/FFmpeg/数据库任一依赖失败;
- 发现凭据、完整 token、手机号或私密媒体地址进入日志/工单/截图;
@ -108,8 +108,9 @@ shasum -a 256 /secure/backup/petstore-before-<rc>-<timestamp>.sql
3. `backend/db/migrations/20260801_create_business_event.sql`
4. `backend/db/migrations/20260801_create_booking_capacity.sql`
5. `backend/db/migrations/20260801_create_report_send_status.sql`
6. `backend/db/migrations/20260802_create_store_onboarding.sql`
禁止跳步、交换顺序或让应用自动补表。任一验证项非 0停止发布并由 Data Model/业务 owner 判断修复方案;不得猜测性回填客户身份、报告作者或事件
禁止跳步、交换顺序或让应用自动补表。任一验证项非 0停止发布并由 Data Model/业务 owner 判断修复方案;不得猜测性回填客户身份、报告作者、事件、历史发送事实或历史开通状态
### 5.3 生产只读预检
@ -128,7 +129,7 @@ systemd-run --wait --pipe --collect \
./deploy/release-preflight.sh
```
通过条件静态配置检查通过、JPA `validate` 通过、18 项数据不变量全部为 0并以退出码 0 结束。预检不会执行迁移或修复数据。
通过条件静态配置检查通过、JPA `validate` 通过、24 项数据不变量全部为 0并以退出码 0 结束。预检不会执行迁移或修复数据。
## 6. 构建发布产物
@ -170,8 +171,9 @@ npm run build:mp-weixin
1. 将后端 `current` 指向新版本目录,执行 `systemctl daemon-reload`,只重启 Petstore 独立 unit。
2. 确认进程稳定并通过本机 readiness再切 admin/H5 静态目录 `current`
3. 以 `backend/deploy/nginx-petstore.conf.example` 新建 Petstore 专用配置文件;替换域名、证书路径和静态根目录。
4. 执行 `nginx -t`。检查配置 diff 仅增加/修改 Petstore 的三个 server block不改 Gitea/GitLab upstream、端口、证书和 location。
5. 只执行 Nginx reload不停止 Nginxreload 后同时检查 Petstore、Gitea、GitLab 的既有健康入口。
4. 保留模板中的 `petstore_safe` access log 格式,只记录 `$uri`,不得改回会包含 query 的 `$request` / `$request_uri`,避免报告 token 与邀请 token 进入访问日志。
5. 执行 `nginx -t`。检查配置 diff 仅增加/修改 Petstore 的日志格式和三个 server block不改 Gitea/GitLab upstream、端口、证书和 location。
6. 只执行 Nginx reload不停止 Nginxreload 后同时检查 Petstore、Gitea、GitLab 的既有健康入口。
证书续签必须沿用服务器现有 ACME/证书管理方式,为 Petstore 新域名单独申请/续签;不要替换其他产品证书。续签后先 `nginx -t` 再 reload并记录证书到期时间。
@ -190,11 +192,11 @@ API_ORIGIN=https://<api-domain> ./deploy/production-smoke.sh
仅在预先标记的试点门店和测试宠主上执行,记录匿名化预约 ID/报告 ID不记录完整 token/手机号:
1. **boss**登录 admin核对门店营业时段、并发容量、服务时长创建员工;查看工作台、客户、日程。
2. **staff**代客预约,开始服务,上传最小合规素材,提交一约一报告,复制报告话术;确认重复提交被拒绝
1. **boss**用微信核验手机号创建试点门店;在 Admin/小程序补齐资料、容量、服务并显式完成开通;创建一次性员工邀请、保存创建证据后用小程序分享卡片;查看工作台、客户、日程。
2. **staff**从分享卡片进入,核对门店/姓名/脱敏手机号;用受邀微信手机号成功加入。用不匹配手机号验证被拒绝;加入后代客预约、开始服务、提交一约一报告并确认发送
3. **customer**:小程序自助预约并验证长服务跨时段占号;打开匿名报告页;提交提醒留资;再次预约。
4. **权限反例**customer 不可进入后台A 店账号不可读取 B 店预约/报告/线索;公开报告响应不含内部身份字段
5. **异常反例**:无容量、非法状态迁移、缺前/后照片、错误 token、FFmpeg 失败均有可理解提示。
4. **权限反例**customer 不可进入后台A 店账号不可读取 B 店预约/报告/线索/邀请legacy 永久邀请码与直接建员工均返回停用码;删除员工后旧 session 立即 401
5. **异常反例**邀请手机号不匹配/过期/撤销/重复使用、无容量、非法状态迁移、缺前/后照片、错误报告 token、FFmpeg 失败均有可理解提示。
## 9. 回滚
@ -206,7 +208,7 @@ API_ORIGIN=https://<api-domain> ./deploy/production-smoke.sh
### 9.2 数据库回滚边界
本批个迁移以新增列/表/索引和兼容回填为主,旧应用应忽略新增结构。因此常规回滚只回应用,不删除列、表、索引,不执行自动 down migration也不把已产生的新业务数据覆盖回旧备份。
本批个迁移以新增列/表/索引和兼容回填为主,旧应用应忽略新增结构。因此常规回滚只回应用,不删除列、表、索引,不执行自动 down migration也不把已产生的新业务数据覆盖回旧备份。
只有确认发生灾难性数据破坏、已冻结所有写入、明确接受备份时间点之后的数据丢失,并取得用户/业务负责人、DBA 和隐私责任人的书面授权后,才可执行整库恢复。恢复必须先在隔离库验证,再制定专门变更单;本 Runbook 不授权该操作。
@ -216,7 +218,7 @@ API_ORIGIN=https://<api-domain> ./deploy/production-smoke.sh
- 四仓冻结 commit 与产物校验和;
- 备份及隔离恢复验证;
- 个迁移执行和末尾验证结果;
- 个迁移执行和末尾验证结果;
- 最终配置门禁与后端只读预检;
- `nginx -t`、readiness、自动只读 smoke
- boss/staff/customer 三角色人工 smoke

View File

@ -83,7 +83,7 @@
- [ ] 外部 HTTPS 探测覆盖 liveness/readiness、admin、H5 报告入口;
- [ ] 5xx、延迟、DB 池、磁盘、证书和进程重启已配置告警;
- [ ] FFmpeg/上传失败有可聚合字段,而非只能搜索自由文本;
- [ ] BusinessEvent 日漏斗和 18 项只读数据审计有每日结果;
- [ ] BusinessEvent 日漏斗和 24 项只读数据审计有每日结果;
- [ ] 通知渠道、Primary/Backup 值班人和升级联系人完成真实测试;
- [ ] 日志脱敏抽查通过,访问权限和保留周期已批准;
- [ ] 发布标记能关联四仓 commit 与 RC