xuans
413a0e66a9
保留管理与业务续期调度，增加系统级幂等任务、取消传播和统计审计原子收尾；前端跟踪真实任务状态。原生 Linux 全后端、静态检查、相关专项二十次重复及前端二百七十二项测试和生产构建通过，未进行正式生产部署。
31 lines
1.2 KiB
Go
31 lines
1.2 KiB
Go
package repository
|
|
|
|
import (
|
|
"context"
|
|
"database/sql"
|
|
"fmt"
|
|
)
|
|
|
|
// 完成审计从已锁定的任务取资源、操作者及项目，不信任外部传入的归属字段。
|
|
func (r *SQLTaskRepository) recordCompletionAudit(ctx context.Context, tx *sql.Tx, completion TaskCompletion) error {
|
|
status := completion.Status
|
|
if status == "failed" {
|
|
status = "error"
|
|
}
|
|
result, err := tx.ExecContext(ctx, r.query(`INSERT INTO audit_logs
|
|
(action, resource_type, resource_id, status, message, created_at, scope_type, project_id, task_id, operator_id)
|
|
SELECT ?, CASE WHEN task_type = 'renewal_check' THEN 'task' WHEN scope_type = 'system' THEN 'management_certificate' ELSE 'domain' END,
|
|
CASE WHEN task_type = 'renewal_check' THEN id ELSE domain_id END, ?, ?, ?, scope_type, project_id, id, operator_id
|
|
FROM tasks WHERE id = ?`), completion.AuditAction, status, completion.Message,
|
|
completion.FinishedAt.UTC(), completion.TaskID)
|
|
if err != nil {
|
|
return fmt.Errorf("保存任务完成审计失败：%w", err)
|
|
}
|
|
if count, err := result.RowsAffected(); err != nil {
|
|
return fmt.Errorf("读取任务完成审计写入结果失败：%w", err)
|
|
} else if count != 1 {
|
|
return sql.ErrNoRows
|
|
}
|
|
return nil
|
|
}
|