feat: complete pet SOP governance workflow

internal/scenario/handler.go

@@ -7,6 +7,7 @@ import (
 	"regexp"
 	"strconv"
 
+	"git.iwork-ai.com/xdc/iqudo-top1/internal/access"
 	"git.iwork-ai.com/xdc/iqudo-top1/internal/audit"
 	"git.iwork-ai.com/xdc/iqudo-top1/internal/auth"
 	"git.iwork-ai.com/xdc/iqudo-top1/internal/model"
@@ -47,20 +48,20 @@ var fieldKeyPattern = regexp.MustCompile(`^[A-Za-z][A-Za-z0-9_]*$`)
 
 func (h *Handler) List(c *gin.Context) {
 	p, _ := auth.PrincipalFromContext(c)
-	var items []model.Scenario
-	query := h.db.Where("tenant_id = ? AND status <> ?", p.TenantID, "archived")
+	items := make([]model.Scenario, 0)
+	query := access.ScopeScenarios(h.db.Model(&model.Scenario{}), p, "scenarios").Where("scenarios.status <> ?", "archived")
 	if keyword := c.Query("keyword"); keyword != "" {
-		query = query.Where("name LIKE ? OR industry LIKE ?", "%"+keyword+"%", "%"+keyword+"%")
+		query = query.Where("scenarios.name LIKE ? OR scenarios.industry LIKE ?", "%"+keyword+"%", "%"+keyword+"%")
 	}
 	if status := c.Query("status"); status != "" {
 		query = query.Where("status = ?", status)
 	}
 	var total int64
-	if err := query.Model(&model.Scenario{}).Count(&total).Error; err != nil {
+	if err := query.Count(&total).Error; err != nil {
 		response.Error(c, http.StatusInternalServerError, "QUERY_FAILED", "查询场景失败")
 		return
 	}
-	if err := query.Order("updated_at DESC").Find(&items).Error; err != nil {
+	if err := query.Order("scenarios.updated_at DESC").Find(&items).Error; err != nil {
 		response.Error(c, http.StatusInternalServerError, "QUERY_FAILED", "查询场景失败")
 		return
 	}
@@ -93,15 +94,21 @@ func (h *Handler) Get(c *gin.Context) {
 	if !ok {
 		return
 	}
+	if !access.CanViewScenario(h.db, p, id) {
+		response.Error(c, http.StatusNotFound, "NOT_FOUND", "场景不存在")
+		return
+	}
 	var item model.Scenario
 	if err := h.db.Where("id = ? AND tenant_id = ?", id, p.TenantID).First(&item).Error; err != nil {
 		notFound(c, err, "场景不存在")
 		return
 	}
-	var fields []model.ScenarioField
-	var sops []model.SOP
+	fields := make([]model.ScenarioField, 0)
+	sops := make([]model.SOP, 0)
 	h.db.Where("scenario_id = ? AND tenant_id = ?", id, p.TenantID).Order("sort_order, id").Find(&fields)
-	h.db.Where("scenario_id = ? AND tenant_id = ?", id, p.TenantID).Order("updated_at DESC").Find(&sops)
+	if auth.HasPermission(p, "sop.view") {
+		h.db.Where("scenario_id = ? AND tenant_id = ?", id, p.TenantID).Order("updated_at DESC").Find(&sops)
+	}
 	response.OK(c, gin.H{"scenario": item, "fields": fields, "sops": sops})
 }
 
@@ -111,12 +118,20 @@ func (h *Handler) Update(c *gin.Context) {
 	if !ok {
 		return
 	}
+	if !access.CanEditScenario(h.db, p, id) {
+		response.Error(c, http.StatusNotFound, "NOT_FOUND", "场景不存在或不可编辑")
+		return
+	}
 	var input scenarioInput
 	if err := c.ShouldBindJSON(&input); err != nil {
 		response.Error(c, http.StatusBadRequest, "INVALID_ARGUMENT", "场景信息不完整")
 		return
 	}
-	updates := map[string]interface{}{"name": input.Name, "industry": input.Industry, "role_name": input.RoleName, "goal": input.Goal, "trigger_text": input.TriggerText, "visibility": input.Visibility}
+	visibility := input.Visibility
+	if visibility == "" {
+		visibility = "tenant"
+	}
+	updates := map[string]interface{}{"name": input.Name, "industry": input.Industry, "role_name": input.RoleName, "goal": input.Goal, "trigger_text": input.TriggerText, "visibility": visibility}
 	result := h.db.Model(&model.Scenario{}).Where("id = ? AND tenant_id = ? AND status <> ?", id, p.TenantID, "archived").Updates(updates)
 	if result.Error != nil || result.RowsAffected == 0 {
 		response.Error(c, http.StatusNotFound, "NOT_FOUND", "场景不存在")
@@ -132,8 +147,26 @@ func (h *Handler) Archive(c *gin.Context) {
 	if !ok {
 		return
 	}
-	result := h.db.Model(&model.Scenario{}).Where("id = ? AND tenant_id = ?", id, p.TenantID).Update("status", "archived")
-	if result.Error != nil || result.RowsAffected == 0 {
+	if !access.CanEditScenario(h.db, p, id) {
+		response.Error(c, http.StatusNotFound, "NOT_FOUND", "场景不存在或不可归档")
+		return
+	}
+	var activeSOPs int64
+	if err := h.db.Model(&model.SOP{}).Where("scenario_id = ? AND tenant_id = ? AND status IN ?", id, p.TenantID, []string{"published", "reviewing"}).Count(&activeSOPs).Error; err != nil {
+		response.Error(c, http.StatusInternalServerError, "QUERY_FAILED", "检查场景状态失败")
+		return
+	}
+	if activeSOPs > 0 {
+		response.Error(c, http.StatusConflict, "SCENARIO_IN_USE", "请先下线已发布 SOP 或处理审核任务")
+		return
+	}
+	err := h.db.Transaction(func(tx *gorm.DB) error {
+		if err := tx.Model(&model.SOP{}).Where("scenario_id = ? AND tenant_id = ?", id, p.TenantID).Update("status", "archived").Error; err != nil {
+			return err
+		}
+		return tx.Model(&model.Scenario{}).Where("id = ? AND tenant_id = ?", id, p.TenantID).Update("status", "archived").Error
+	})
+	if err != nil {
 		response.Error(c, http.StatusNotFound, "NOT_FOUND", "场景不存在")
 		return
 	}
@@ -144,7 +177,7 @@ func (h *Handler) Archive(c *gin.Context) {
 func (h *Handler) CreateField(c *gin.Context) {
 	p, _ := auth.PrincipalFromContext(c)
 	scenarioID, ok := idParam(c, "id")
-	if !ok || !h.scenarioExists(p.TenantID, scenarioID) {
+	if !ok || !access.CanEditScenario(h.db, p, scenarioID) {
 		if ok {
 			response.Error(c, http.StatusNotFound, "NOT_FOUND", "场景不存在")
 		}
@@ -174,6 +207,15 @@ func (h *Handler) UpdateField(c *gin.Context) {
 	if !ok {
 		return
 	}
+	var existing model.ScenarioField
+	if err := h.db.Where("id = ? AND tenant_id = ?", id, p.TenantID).First(&existing).Error; err != nil || !access.CanEditScenario(h.db, p, existing.ScenarioID) {
+		response.Error(c, http.StatusNotFound, "NOT_FOUND", "字段不存在或不可编辑")
+		return
+	}
+	if h.fieldReferencedByReleasedSOP(existing.ScenarioID, existing.FieldKey, p.TenantID) {
+		response.Error(c, http.StatusConflict, "FIELD_IN_USE", "字段已被发布版本引用，不能修改；请新增字段并创建 SOP 新版本")
+		return
+	}
 	var input fieldInput
 	if err := c.ShouldBindJSON(&input); err != nil {
 		response.Error(c, http.StatusBadRequest, "INVALID_ARGUMENT", "字段配置不正确")
@@ -201,6 +243,15 @@ func (h *Handler) DeleteField(c *gin.Context) {
 	if !ok {
 		return
 	}
+	var existing model.ScenarioField
+	if err := h.db.Where("id = ? AND tenant_id = ?", id, p.TenantID).First(&existing).Error; err != nil || !access.CanEditScenario(h.db, p, existing.ScenarioID) {
+		response.Error(c, http.StatusNotFound, "NOT_FOUND", "字段不存在或不可删除")
+		return
+	}
+	if h.fieldReferencedByReleasedSOP(existing.ScenarioID, existing.FieldKey, p.TenantID) {
+		response.Error(c, http.StatusConflict, "FIELD_IN_USE", "字段已被发布版本引用，不能删除")
+		return
+	}
 	result := h.db.Where("id = ? AND tenant_id = ?", id, p.TenantID).Delete(&model.ScenarioField{})
 	if result.Error != nil || result.RowsAffected == 0 {
 		response.Error(c, http.StatusNotFound, "NOT_FOUND", "字段不存在")
@@ -210,12 +261,6 @@ func (h *Handler) DeleteField(c *gin.Context) {
 	response.OK(c, gin.H{"id": id})
 }
 
-func (h *Handler) scenarioExists(tenantID, id uint64) bool {
-	var count int64
-	h.db.Model(&model.Scenario{}).Where("id = ? AND tenant_id = ? AND status <> ?", id, tenantID, "archived").Count(&count)
-	return count == 1
-}
-
 func normalizedJSON(value json.RawMessage, fallback string) datatypes.JSON {
 	if len(value) == 0 || !json.Valid(value) {
 		return datatypes.JSON([]byte(fallback))