property.list.query 销售非负责人规则改为 1:1 复刻老代码 saleFlag 分支（id IN 自建∪代管物业，互斥 return）；新增销售视角种子 ak，dev 实测 total=14 与老语义 SQL 逐 id 一致

2026-09-03 14:00:13 +08:00
parent fd7ec29374
commit ddd4b3b4ed
5 changed files with 84 additions and 30 deletions
@@ -6,6 +6,8 @@
 --   HQ      user_id=46   xqak_1d21057ad83203dbeb767eb5069701046b27debdc08a733c
 --   AGENT   user_id=1000 xqak_7df02ccee2133dc2cf951db12e3958557bdf2d30a91e7f08
 --   NOSCOPE user_id=1000 xqak_5bdc0eac8c1cab535f22dc3e9757f72b3127de43a14997a7  (未授权任何 scope，验证拒绝)
+--   SALES   user_id=1727 xqak_cb006faf86c0db6f2f47b3eb8872f8b5d495b0c05a6fb52c  (北京销售1，dept_id=4 命中 authDeptId，
+--          post_id=103 不在 authDeptPostId → 销售非负责人；warehouse_agent_auth 代管 agent 19)
 -- 依赖：tool 表已由应用启动时 ToolSyncService 同步（sys.ping/agent.count/agent.list.query）
 -- =============================================================

@@ -26,6 +28,10 @@ INSERT INTO agent_api_key (user_id, key_prefix, key_hash, memo, status, create_i
 SELECT 1000, 'xqak_5bdc', '85733c4eaab02e956bc555e0f25e5043629f9b8f8ad9ca39046735f5e817ca9c', 'dev 测试：无任何 scope 授权', 1, 0
 WHERE NOT EXISTS (SELECT 1 FROM agent_api_key WHERE key_hash = '85733c4eaab02e956bc555e0f25e5043629f9b8f8ad9ca39046735f5e817ca9c');

+INSERT INTO agent_api_key (user_id, key_prefix, key_hash, memo, status, create_id)
+SELECT 1727, 'xqak_cb00', '9fd25466ad4913b0c48e60d853b1bb27ba75bec426a117978e8c95687917bada', 'dev 测试：销售非负责人(北京销售1, dept 4/post 103, 代管 agent 19)', 1, 0
+WHERE NOT EXISTS (SELECT 1 FROM agent_api_key WHERE key_hash = '9fd25466ad4913b0c48e60d853b1bb27ba75bec426a117978e8c95687917bada');
+
 -- 作用域：运营
 INSERT INTO agent_scope (name, code, memo, status, create_id)
 SELECT '运营', 'operation', 'dev 种子：运营作用域', 1, 0
@@ -37,11 +43,12 @@ SELECT s.id, t.id, 0 FROM agent_scope s JOIN tool t
 WHERE s.code = 'operation' AND t.name IN ('sys.ping', 'agent.count', 'agent.list.query', 'property.list.query')
  AND NOT EXISTS (SELECT 1 FROM scope_tool st WHERE st.scope_id = s.id AND st.tool_id = t.id);

-- token-作用域：HQ 与 AGENT 两把 token 授权"运营"；NOSCOPE 不授权
+-- token-作用域：HQ / AGENT / SALES 三把 token 授权"运营"；NOSCOPE 不授权
 INSERT INTO token_scope (token_id, scope_id, create_id)
 SELECT k.id, s.id, 0 FROM agent_api_key k JOIN agent_scope s
 WHERE k.key_hash IN ('9068d5a6406afdb853cdc9f5e45e16a5191255e2feb1aba171cd66ea13d5711c',
-                     '00ab77ba18c11c8870500e1c09a9e25747e4cf0d8f1c88ae255a2beca6eef007')
+                     '00ab77ba18c11c8870500e1c09a9e25747e4cf0d8f1c88ae255a2beca6eef007',
+                     '9fd25466ad4913b0c48e60d853b1bb27ba75bec426a117978e8c95687917bada')
  AND s.code = 'operation'
  AND NOT EXISTS (SELECT 1 FROM token_scope ts WHERE ts.token_id = k.id AND ts.scope_id = s.id);