feat(platform): add device safety commerce APIs

backend/api/internal/routers/platform.go

@@ -26,6 +26,9 @@ func RegisterPlatform(serviceKey string, engine *gin.Engine) {
 	registerDeliveryRoute(protected)
 	registerStaffRoute(protected)
 	registerUserRoute(protected)
+	registerDeviceRoute(protected)
+	registerSafetyRoute(protected)
+	registerCommerceRoute(protected)
 	registerPlatformRoute(protected)
 }
 
@@ -37,6 +40,37 @@ func registerGasRoute(group *gin.RouterGroup) {
 func registerDeliveryRoute(group *gin.RouterGroup) {
 	registerWritableResource(group, "/delivery/delivery_basic", platform.ListDeliveryBasic, platform.CreateDeliveryBasic, platform.GetDeliveryBasic, platform.UpdateDeliveryBasic, &models.DeliveryBasic{})
 	registerWritableResource(group, "/delivery/delivery_account", platform.ListDeliveryAccount, platform.CreateDeliveryAccount, platform.GetDeliveryAccount, platform.UpdateDeliveryAccount, &models.DeliveryAccount{})
+	registerRestrictedWritableResource(group, "/delivery/delivery_task", &models.DeliveryTask{}, []string{"ec_order_id", "staff_account_id", "delivery_point_id"})
+	list, create, _, update := platform.ResourceHandlers(&models.DeliveryTrack{}, []string{"delivery_task_id", "started_at", "completed_at"}, []string{"delivery_task_id", "started_at", "completed_at"})
+	registerWritableResource(group, "/delivery/delivery_track", list, create, platform.GetDeliveryTrack, update, &models.DeliveryTrack{})
+	registerRestrictedWritableResource(group, "/delivery/delivery_track_point", &models.DeliveryTrackPoint{}, []string{"delivery_track_id", "point_type", "occurred_at", "longitude", "latitude"})
+}
+
+func registerDeviceRoute(group *gin.RouterGroup) {
+	registerRestrictedWritableResource(group, "/device/dev_smart_cylinder_valve", &models.DevSmartCylinderValve{}, []string{"device_no", "model", "online_status", "owner_identity"})
+	registerRestrictedWritableResource(group, "/device/dev_device_binding", &models.DevDeviceBinding{}, []string{"smart_cylinder_valve_id", "user_account_id", "effective_at", "expired_at"})
+	list, _, get, _ := platform.ResourceHandlers(&models.DevTelemetry{}, nil, nil)
+	telemetry := group.Group("/device/dev_telemetry")
+	telemetry.GET("", list)
+	telemetry.GET("/:identity", get)
+}
+
+func registerSafetyRoute(group *gin.RouterGroup) {
+	registerRestrictedWritableResource(group, "/safety/saf_rule", &models.SafRule{}, []string{"rule_code", "version_no", "threshold", "action", "gray_scope"})
+	registerRestrictedWritableResource(group, "/safety/saf_event", &models.SafEvent{}, []string{"event_code", "level", "title", "smart_cylinder_valve_identity", "sla_at"})
+	registerRestrictedWritableResource(group, "/safety/saf_inspection", &models.SafInspection{}, []string{"user_account_id", "staff_account_id", "result", "evidence_uri"})
+	group.POST("/safety/saf_event/:identity/disposals", platform.DisposeSafetyEvent)
+}
+
+func registerCommerceRoute(group *gin.RouterGroup) {
+	registerRestrictedWritableResource(group, "/ec/ec_category", &models.EcCategory{}, []string{"parent_id", "name", "sort_no"})
+	registerRestrictedWritableResource(group, "/ec/ec_product", &models.EcProduct{}, []string{"ec_category_id", "product_code", "name", "price_amount", "stock_quantity"})
+	registerRestrictedWritableResource(group, "/ec/ec_product_attribute", &models.EcProductAttribute{}, []string{"ec_product_id", "name", "value", "sort_no"})
+	registerRestrictedWritableResource(group, "/ec/ec_product_image", &models.EcProductImage{}, []string{"ec_product_id", "image_uri", "sort_no", "is_cover"})
+	registerRestrictedWritableResource(group, "/ec/ec_cart", &models.EcCart{}, []string{"user_account_id", "ec_product_id", "quantity", "selected"})
+	list, create, _, update := platform.ResourceHandlers(&models.EcOrder{}, []string{"order_no", "user_account_id", "gas_station_id", "delivery_point_id", "total_amount"}, []string{"gas_station_id", "delivery_point_id", "total_amount"})
+	registerWritableResource(group, "/ec/ec_order", list, create, platform.GetEcOrder, update, &models.EcOrder{})
+	registerRestrictedWritableResource(group, "/ec/ec_review", &models.EcReview{}, []string{"ec_order_id", "ec_product_id", "user_account_id", "score", "content"})
 }
 
 func registerStaffRoute(group *gin.RouterGroup) {
@@ -72,3 +106,8 @@ func registerWritableResource(group *gin.RouterGroup, path string, list, create,
 	resource.PATCH("/:identity/status", func(ctx *gin.Context) { platform.UpdateRecordStatus(ctx, model) })
 	resource.DELETE("/:identity", func(ctx *gin.Context) { platform.ArchiveRecord(ctx, model) })
 }
+
+func registerRestrictedWritableResource(group *gin.RouterGroup, path string, model any, fields []string) {
+	list, create, get, update := platform.ResourceHandlers(model, fields, fields)
+	registerWritableResource(group, path, list, create, get, update, model)
+}

backend/api/internal/routers/platform_test.go

@@ -56,6 +56,45 @@ func TestPlatformOrganizationAndAccountRoutesExposeResourceCRUD(t *testing.T) {
 	assertRouteMethods(t, routes, "/heqi/platform/v1/platform/platform_role/:identity/menus", http.MethodPut)
 }
 
+func TestPlatformDeviceSafetyCommerceAndDeliveryRoutesFollowTheirContracts(t *testing.T) {
+	engine := gin.New()
+	RegisterPlatform("heqi", engine)
+
+	routes := make(map[string]map[string]bool)
+	for _, route := range engine.Routes() {
+		if routes[route.Path] == nil {
+			routes[route.Path] = make(map[string]bool)
+		}
+		routes[route.Path][route.Method] = true
+	}
+
+	for _, resource := range []string{
+		"/device/dev_smart_cylinder_valve", "/device/dev_device_binding",
+		"/safety/saf_rule", "/safety/saf_event", "/safety/saf_inspection",
+		"/ec/ec_category", "/ec/ec_product", "/ec/ec_product_attribute", "/ec/ec_product_image", "/ec/ec_cart", "/ec/ec_order", "/ec/ec_review",
+		"/delivery/delivery_task", "/delivery/delivery_track", "/delivery/delivery_track_point",
+	} {
+		assertRouteMethods(t, routes, "/heqi/platform/v1"+resource, http.MethodGet, http.MethodPost)
+		assertRouteMethods(t, routes, "/heqi/platform/v1"+resource+"/:identity", http.MethodGet, http.MethodPut, http.MethodDelete)
+		assertRouteMethods(t, routes, "/heqi/platform/v1"+resource+"/:identity/status", http.MethodPatch)
+	}
+
+	telemetry := "/heqi/platform/v1/device/dev_telemetry"
+	assertRouteMethods(t, routes, telemetry, http.MethodGet)
+	assertRouteMethods(t, routes, telemetry+"/:identity", http.MethodGet)
+	for _, method := range []string{http.MethodPost, http.MethodPut, http.MethodPatch, http.MethodDelete} {
+		if routes[telemetry][method] || routes[telemetry+"/:identity"][method] {
+			t.Errorf("telemetry unexpectedly permits %s", method)
+		}
+	}
+
+	disposal := "/heqi/platform/v1/safety/saf_event/:identity/disposals"
+	assertRouteMethods(t, routes, disposal, http.MethodPost)
+	if routes[disposal][http.MethodDelete] {
+		t.Fatal("safety event disposals must be append-only")
+	}
+}
+
 func assertRouteMethods(t *testing.T, routes map[string]map[string]bool, path string, methods ...string) {
 	t.Helper()
 	for _, method := range methods {