修复bug

README.md

@@ -35,7 +35,7 @@ pnpm test
 
 依赖和 `pnpm-lock.yaml` 均保存在当前前端项目中，不需要在仓库根目录安装 Node 依赖。
 
-工作台已从一期菜单和默认入口移除；登录后按当前角色进入第一个有权限的业务页面。历史工作台仍保留为不展示菜单的原型路由。一期 Admin 正式路由聚焦登录、客户及注册审核、平台收货仓、快递公司、往来单位、头程订单、内部用户、角色管理和菜单权限。
+工作台已从一期菜单和默认入口移除；登录后按当前角色进入第一个有权限的业务页面。历史工作台仍保留为不展示菜单的原型路由。一期 Admin 正式路由聚焦登录、客户及注册审核、平台收货仓、快递公司、往来单位、头程订单、内部用户、角色管理和菜单权限；企业注册审核已合并到客户列表，不再保留独立菜单。
 
 后台菜单仅展示已接入的一期模块；其余平台原型菜单保留为导航配置中的注释，待对应业务契约接入后再恢复展示。企业审核、仓库、头程订单、平台角色、菜单及按钮权限资源均接入真实接口；用户管理通过 IAM 统一维护平台账号和企业租户账号。运行时不再提供本地演示业务数据或静态角色预览。
 
@@ -48,7 +48,7 @@ VITE_API_BASE_URL=/api
 API_PROXY_TARGET=http://8.163.30.128:9000
 ```
 
-认证请求使用 `/api/auth/**`，平台 IAM 请求使用 `/api/platform/v1/iam/**`。登录后从 JWT 读取平台身份和授权快照，再与 IAM 返回的启用权限资源取交集。企业审核调用 `/reviews`，打开审核详情后按租户调用 `/tenants/{tenantId}/qualifications`；营业执照通过 `/api/platform/v1/files/qualifications/{tenantId}/{fileName}` 携带平台 Token 临时读取，关闭预览后释放本地对象地址。平台角色查询、新增、编辑、启停、删除和权限全量保存均已按 `RbacController` 接入真实 `/roles` 契约，角色返回的 `permissionIds` 用于授权回显；系统内置角色及仍被成员使用的角色继续由服务端保护。权限资源查询和新增调用 `/permissions`，尚未提供的权限编辑、删除和启停不会模拟成功。一期真实权限资源只创建 `MENU` 与 `BUTTON`，不创建 `PAGE` 或 `API` 类型。其余业务页面需在对应服务契约确认后逐项替换，生产逻辑不得静默回退到模拟数据。
+认证请求使用 `/api/auth/**`，平台 IAM 请求使用 `/api/platform/v1/iam/**`。登录后从 JWT 读取平台身份和授权快照，再与 IAM 返回的启用权限资源取交集。企业审核调用 `/reviews`，打开审核详情后按租户调用 `/tenants/{tenantId}/qualifications`；营业执照通过 `/api/platform/v1/files/qualifications/{tenantId}/{fileName}` 携带平台 Token 临时读取，关闭预览后释放本地对象地址。审核通过新企业并由后端创建管理员时，页面必须展示不可通过遮罩、Esc 或关闭按钮跳过的一次性凭据弹窗，运营人员确认保存后才清除账号密码。平台角色查询、新增、编辑、启停、删除和权限全量保存均已按 `RbacController` 接入真实 `/roles` 契约，角色返回的 `permissionIds` 用于授权回显；系统内置角色及仍被成员使用的角色继续由服务端保护。权限资源查询和新增调用 `/permissions`，尚未提供的权限编辑、删除和启停不会模拟成功。一期真实权限资源只创建 `MENU` 与 `BUTTON`，不创建 `PAGE` 或 `API` 类型。其余业务页面需在对应服务契约确认后逐项替换，生产逻辑不得静默回退到模拟数据。
 
 仓库管理已接入真实平台 Warehouse API，支持按租户筛选、详情、新增、编辑和启停，并在更新时保留后端返回的地址、能力和截单时间等完整字段。停用仓库保留历史数据，但不再提供给客户新建头程订单选择；订单详情使用下单时保存的仓库编码、名称和地址快照，仓库主数据后续修改不改变历史展示。本阶段不包含 FBA/海外目的仓、库存、库位或出入库作业。
 

src/app/router/index.test.ts

@@ -37,11 +37,13 @@ describe('admin router access metadata', () => {
     expect(route?.meta.permission).toBe('platform:download:list')
   })
 
-  it('protects enterprise reviews with the backend review menu permission', () => {
+  it('redirects the removed enterprise review route to the protected customer list', () => {
     const route = router.getRoutes().find((item) => item.name === 'enterprise-reviews')
 
     expect(route?.path).toBe('/customers/reviews')
-    expect(route?.meta.permission).toBe('platform:customer:review')
+    expect(route?.redirect).toBe('/customers')
+    expect(route?.meta.permission).toBe('platform:customer:list')
+    expect(route?.meta.permissionAnyOf).toContain('platform:customer:review')
   })
 
   it('keeps forbidden inside the authenticated layout without a business permission', () => {

src/app/router/index.ts

@@ -60,12 +60,18 @@ router.beforeEach((to) => {
 
   const access = useAccessPreviewStore()
   if (auth.isAuthenticated) access.initializeAfterLogin()
+  const alternativePermissions = to.meta.permissionAnyOf ?? []
+  const requiresRoutePermission = Boolean(to.meta.permission || alternativePermissions.length)
+  const hasRoutePermission = !requiresRoutePermission || Boolean(
+    (to.meta.permission && access.can(to.meta.permission))
+    || alternativePermissions.some((permission) => access.can(permission)),
+  )
   const decision = decideRouteAccess({
     requiresAuth: to.meta.requiresAuth,
     isAuthenticated: auth.isAuthenticated,
     fullPath: to.fullPath,
-    permission: to.meta.permission,
+    permission: to.meta.permission ?? alternativePermissions[0],
-    hasPermission: to.meta.permission ? access.can(to.meta.permission) : true,
+    hasPermission: hasRoutePermission,
   })
 
   if (decision.type === 'login') {

src/app/router/meta.d.ts

@@ -7,5 +7,6 @@ declare module 'vue-router' {
     showPageHeading?: boolean
     requiresAuth?: boolean
     permission?: string
+    permissionAnyOf?: string[]
   }
 }

src/core/navigation/adminNavigation.test.ts

@@ -16,10 +16,7 @@ describe('adminNavigation', () => {
       '通用',
       '系统管理',
     ])
-    expect(adminNavigation[0].children?.map((item) => item.title)).toEqual([
+    expect(adminNavigation[0].children?.map((item) => item.title)).toEqual(['客户列表'])
-      '客户列表',
-      '企业审核',
-    ])
     expect(adminNavigation.find((item) => item.key === 'general')?.children?.map((item) => item.title)).toContain('快递公司')
     expect(adminNavigation.find((item) => item.key === 'general')?.children?.map((item) => item.title)).toContain('下载中心')
     expect(adminNavigation.find((item) => item.key === 'system')?.children?.map((item) => item.title)).toEqual([
@@ -56,6 +53,12 @@ describe('adminNavigation', () => {
     expect(JSON.stringify(adminNavigation, (key, value) => key === 'icon' ? '[icon]' : value)).toBe(sourceSnapshot)
   })
 
+  it('keeps the merged customer entry for existing review-only roles', () => {
+    const filtered = filterAdminNavigation(adminNavigation, new Set(['platform:customer:review']))
+
+    expect(getNavigationLeaves(filtered).map((item) => item.path)).toContain('/customers')
+  })
+
   it('supports manually hiding a module without removing its route definition', () => {
     const filtered = filterAdminNavigation([{ key: 'hidden', title: '隐藏模块', icon: adminNavigation[0].icon, path: '/hidden', hidden: true }], new Set())
 

src/core/navigation/adminNavigation.ts

@@ -5,7 +5,6 @@ import {
   ClipboardList,
   Database,
   Download,
-  FileCheck2,
   KeyRound,
   Settings,
   ShieldCheck,
@@ -21,6 +20,7 @@ export interface AdminNavigationNode {
   iconColor?: string
   path?: string
   permission?: string
+  permissionAnyOf?: string[]
   /** Set to true to remove a prototype module from the sidebar without deleting its route. */
   hidden?: boolean
   children?: AdminNavigationNode[]
@@ -41,8 +41,7 @@ export const adminNavigation: AdminNavigationNode[] = [
     icon: Building2,
     iconColor: '#52c41a',
     children: [
-      { key: 'customers-list', title: '客户列表', icon: Building2, path: '/customers', permission: 'platform:customer:list' },
+      { key: 'customers-list', title: '客户列表', icon: Building2, path: '/customers', permission: 'platform:customer:list', permissionAnyOf: ['platform:customer:review'] },
-      { key: 'enterprise-reviews', title: '企业审核', icon: FileCheck2, path: '/customers/reviews', permission: 'platform:customer:review' },
       // { key: 'warehouse-tier-fee', title: '海外仓阶梯费用', icon: Building2, path: '/prototype/customer-management/warehouse-tier-fee' },
     ],
   },
@@ -258,7 +257,13 @@ export function filterAdminNavigation(
       const children = filterAdminNavigation(node.children, permissionCodes)
       return children.length ? [{ ...node, children }] : []
     }
-    if (!node.path || (node.permission && !permissionCodes.has(node.permission))) return []
+    const alternativePermissions = node.permissionAnyOf ?? []
+    const requiresPermission = Boolean(node.permission || alternativePermissions.length)
+    const hasPermission = !requiresPermission || Boolean(
+      (node.permission && permissionCodes.has(node.permission))
+      || alternativePermissions.some((permission) => permissionCodes.has(permission)),
+    )
+    if (!node.path || !hasPermission) return []
     return [{ ...node }]
   })
 }

src/modules/customers/pages/CustomersView.test.ts

@@ -3,12 +3,16 @@ import { createPinia, setActivePinia } from 'pinia'
 import { enableAutoUnmount, flushPromises, mount } from '@vue/test-utils'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import {
+  approveEnterpriseReview,
   downloadTenantQualification,
   getPlatformTenant,
+  listEnterpriseReviews,
   listPlatformTenants,
   listTenantQualifications,
+  rejectEnterpriseReview,
   updatePlatformTenant,
   uploadPlatformTenantQualification,
+  type EnterpriseReview,
   type PlatformTenantResource,
 } from '@/modules/iam'
 import { createPlatformExportTask } from '@/modules/downloads'
@@ -17,14 +21,17 @@ import { useAuthStore } from '@/core/auth/auth'
 import CustomersView from './CustomersView.vue'
 
 vi.mock('@/modules/iam', () => ({
+  approveEnterpriseReview: vi.fn(),
   changePlatformTenantStatus: vi.fn(),
   createPlatformTenant: vi.fn(),
   downloadTenantQualification: vi.fn(),
   getPlatformTenant: vi.fn(),
+  listEnterpriseReviews: vi.fn(),
   listPlatformTenantOrderCounts: vi.fn(),
   listPlatformTenants: vi.fn(),
   listTenantQualifications: vi.fn(),
   qualificationFileName: vi.fn((documentUrl: string) => documentUrl.split('/').at(-1) || '资质文件'),
+  rejectEnterpriseReview: vi.fn(),
   submitPlatformTenantReview: vi.fn(),
   updatePlatformTenant: vi.fn(),
   uploadPlatformTenantQualification: vi.fn(),
@@ -48,6 +55,14 @@ const fullTenant: PlatformTenantResource = {
   createdAt: '2026-08-01T10:00:00', approvedAt: null,
 }
 
+const pendingReview: EnterpriseReview = {
+  id: '190000000000000001',
+  tenantId: fullTenant.id,
+  tenantName: fullTenant.tenantName,
+  tenantCode: fullTenant.tenantCode,
+  status: 'PENDING',
+}
+
 function tableButtonByText(text: string) {
   return [...document.querySelectorAll<HTMLButtonElement>('.el-table__body button')]
     .find((button) => button.textContent?.trim() === text)
@@ -76,6 +91,7 @@ describe('CustomersView', () => {
     })
     vi.mocked(getPlatformTenant).mockResolvedValue(fullTenant)
     vi.mocked(listTenantQualifications).mockResolvedValue([])
+    vi.mocked(listEnterpriseReviews).mockResolvedValue([])
     vi.mocked(updatePlatformTenant).mockResolvedValue(fullTenant)
     vi.mocked(uploadPlatformTenantQualification).mockResolvedValue({
       qualificationId: 'qualification-1', reviewId: null, tenantStatus: 'PROFILE_REQUIRED', documentUrl: '/files/license.png',
@@ -181,4 +197,80 @@ describe('CustomersView', () => {
     })
     expect(listPlatformTenants).toHaveBeenCalledTimes(1)
   })
+
+  it('approves a pending enterprise directly from the customer list', async () => {
+    const auth = useAuthStore()
+    auth.permissions = [...auth.permissions, 'platform:customer:review', 'platform:customer:approve']
+    useAccessPreviewStore().initializeAfterLogin()
+    vi.mocked(listPlatformTenants).mockResolvedValue({
+      records: [{ ...fullTenant, status: 'PENDING' }], page: 1, size: 10, total: 1, pages: 1,
+    })
+    vi.mocked(listEnterpriseReviews).mockResolvedValue([pendingReview])
+    vi.mocked(approveEnterpriseReview).mockResolvedValue({
+      tenantId: fullTenant.id,
+      administratorCreated: true,
+      administratorUsername: 'merchant_8_owner',
+      temporaryPassword: 'Temporary#2026',
+    })
+
+    mount(CustomersView, { attachTo: document.body, global: { plugins: [pinia, ElementPlus] } })
+    await flushPromises()
+    tableButtonByText('通过')?.click()
+    await flushPromises()
+    ;[...document.querySelectorAll<HTMLButtonElement>('button')]
+      .find((button) => button.textContent?.trim() === '确认通过')?.click()
+    await flushPromises()
+
+    expect(approveEnterpriseReview).toHaveBeenCalledWith(pendingReview.id, '企业资料与必填资质完整、清晰，审核通过')
+    expect(rejectEnterpriseReview).not.toHaveBeenCalled()
+    expect(document.body.textContent).toContain('请立即保存以下一次性凭证')
+    expect(document.body.textContent).toContain('merchant_8_owner')
+    expect(document.body.textContent).toContain('Temporary#2026')
+  })
+
+  it('keeps review-only roles on the merged customer page without calling the customer list endpoint', async () => {
+    const auth = useAuthStore()
+    auth.permissions = ['platform:customer:review', 'platform:customer:approve']
+    useAccessPreviewStore().initializeAfterLogin()
+    vi.mocked(listEnterpriseReviews).mockResolvedValue([pendingReview])
+
+    mount(CustomersView, { attachTo: document.body, global: { plugins: [pinia, ElementPlus] } })
+    await flushPromises()
+
+    expect(listPlatformTenants).not.toHaveBeenCalled()
+    expect(document.body.textContent).toContain(fullTenant.tenantName)
+    expect(tableButtonByText('通过')).toBeDefined()
+  })
+
+  it('does not let an older review response restore stale actions', async () => {
+    const auth = useAuthStore()
+    auth.permissions = [...auth.permissions, 'platform:customer:review', 'platform:customer:approve']
+    useAccessPreviewStore().initializeAfterLogin()
+    let resolveFirst!: (value: EnterpriseReview[]) => void
+    let resolveSecond!: (value: EnterpriseReview[]) => void
+    vi.mocked(listEnterpriseReviews)
+      .mockImplementationOnce(() => new Promise((resolve) => { resolveFirst = resolve }))
+      .mockImplementationOnce(() => new Promise((resolve) => { resolveSecond = resolve }))
+
+    mount(CustomersView, { attachTo: document.body, global: { plugins: [pinia, ElementPlus] } })
+    await Promise.resolve()
+    ;[...document.querySelectorAll<HTMLButtonElement>('.query-toolbar__actions button')]
+      .find((button) => button.textContent?.trim() === '查询')?.click()
+    await Promise.resolve()
+
+    resolveSecond([pendingReview])
+    await flushPromises()
+    expect(tableButtonByText('通过')).toBeDefined()
+
+    resolveFirst([])
+    await flushPromises()
+    expect(tableButtonByText('通过')).toBeDefined()
+  })
+
+  it('keeps the first operation column unfixed so it cannot cover a 320px table viewport', async () => {
+    mount(CustomersView, { attachTo: document.body, global: { plugins: [pinia, ElementPlus] } })
+    await flushPromises()
+
+    expect(document.querySelector('.el-table__fixed')).toBeNull()
+  })
 })

src/modules/customers/pages/CustomersView.vue

@@ -1,28 +1,34 @@
 <script setup lang="ts">
-import { computed, nextTick, onBeforeUnmount, onMounted, ref, watch } from 'vue'
+import { computed, nextTick, onBeforeUnmount, onMounted, reactive, ref, watch } from 'vue'
-import { Building2, CheckCircle2, Download, Eye, FileCheck2, FileText, FileUp, Pencil, Plus, Power } from '@lucide/vue'
+import { Building2, CheckCircle2, Download, Eye, FileCheck2, FileText, FileUp, Pencil, Plus, Power, ShieldCheck, ShieldX } from '@lucide/vue'
 import { ElMessage, ElMessageBox, type FormInstance, type FormRules } from 'element-plus'
 import { getApiErrorDetails, getApiErrorMessage, type ApiErrorDetails } from '@/shared/api/http'
 import { createPlatformExportTask } from '@/modules/downloads'
 import {
+  approveEnterpriseReview,
   changePlatformTenantStatus,
   createPlatformTenant,
   downloadTenantQualification,
   getPlatformTenant,
+  listEnterpriseReviews,
   listPlatformTenantOrderCounts,
   listPlatformTenants,
   listTenantQualifications,
   qualificationFileName,
+  rejectEnterpriseReview,
   submitPlatformTenantReview,
   updatePlatformTenant,
   uploadPlatformTenantQualification,
   type CreatePlatformTenantRequest,
+  type EnterpriseApprovalResponse,
+  type EnterpriseReview,
   type PlatformQualificationType,
   type PlatformTenantQualification,
   type PlatformTenantResource,
   type PlatformTenantStatus,
 } from '@/modules/iam'
 import ApiErrorMeta from '@/shared/components/ApiErrorMeta.vue'
+import CopyButton from '@/shared/components/CopyButton.vue'
 import DataTable, { type DataTableColumn } from '@/shared/components/DataTable.vue'
 import QueryToolbar, { type QueryField, type QueryModel } from '@/shared/components/QueryToolbar.vue'
 import { useAccessPreviewStore } from '@/core/access/accessPreview'
@@ -60,6 +66,15 @@ const loadError = ref<ApiErrorDetails | null>(null)
 const result = ref({ records: [] as PlatformTenantResource[], total: 0, pages: 0 })
 const orderCounts = ref<Record<string, number>>({})
 const rowActionId = ref('')
+const pendingReviews = ref<EnterpriseReview[]>([])
+const reviewLoadError = ref<ApiErrorDetails | null>(null)
+const selectedReview = ref<EnterpriseReview | null>(null)
+const decisionOpen = ref(false)
+const reviewSubmitting = ref(false)
+const approvalResultOpen = ref(false)
+const approvalResult = ref<EnterpriseApprovalResponse | null>(null)
+const decision = reactive({ type: 'approve' as 'approve' | 'reject', comment: '' })
+const decisionFormRef = ref<FormInstance>()
 const editorOpen = ref(false)
 const editorLoading = ref(false)
 const saving = ref(false)
@@ -109,13 +124,22 @@ const rules: FormRules = {
   servicePackage: [{ required: true, message: '请选择客户套餐', trigger: 'change' }],
   paymentTermDays: [{ required: true, message: '请输入账期天数', trigger: 'change' }],
 }
+const decisionRules: FormRules = {
+  comment: [{
+    validator: (_rule, value, callback) => {
+      if (typeof value === 'string' && value.trim()) callback()
+      else callback(new Error('请填写审核说明或驳回原因'))
+    },
+    trigger: ['blur', 'change'],
+  }],
+}
 
 function newQualificationDrafts(): QualificationDraft[] {
   const definitions: Array<Pick<QualificationDraft, 'type' | 'label' | 'required'>> = [
     { type: 'BUSINESS_LICENSE', label: '营业执照', required: true },
     { type: 'LEGAL_PERSON_ID', label: '法人身份证', required: true },
-    { type: 'FREIGHT_FORWARDER_CERTIFICATE', label: '货代资质证书', required: false },
+    { type: 'FREIGHT_FORWARDER_CERTIFICATE', label: '货代资质证书', required: true },
-    { type: 'BANK_ACCOUNT_LICENSE', label: '银行开户许可证', required: false },
+    { type: 'BANK_ACCOUNT_LICENSE', label: '银行开户许可证', required: true },
   ]
   return definitions.map((item) => ({
     ...item,
@@ -135,7 +159,7 @@ function newQualificationDrafts(): QualificationDraft[] {
 const qualifications = ref<QualificationDraft[]>(newQualificationDrafts())
 
 const customerColumns: DataTableColumn[] = [
-  { key: 'actions', label: '操作', width: 245, fixed: 'left', slotName: 'actions' },
+  { key: 'actions', label: '操作', minWidth: 190, slotName: 'actions' },
   { prop: 'tenantCode', label: '客户ID', minWidth: 170 },
   { key: 'company', label: '公司名称', minWidth: 230, slotName: 'company' },
   { prop: 'unifiedSocialCreditCode', label: '统一社会信用代码', minWidth: 205, formatter: (row: PlatformTenantResource) => displayText(row.unifiedSocialCreditCode) },
@@ -149,12 +173,14 @@ const customerColumns: DataTableColumn[] = [
 ]
 
 let loadSequence = 0
+let reviewLoadSequence = 0
 const editorTitle = computed(() => editingId.value ? '编辑客户' : '新增客户')
 const canUploadQualifications = computed(() => !editorStatus.value || ['PROFILE_REQUIRED', 'REJECTED'].includes(editorStatus.value))
 const canSubmitReview = computed(() => Boolean(editingId.value) && ['PROFILE_REQUIRED', 'REJECTED'].includes(editorStatus.value || ''))
 const uploadingQualifications = computed(() => qualifications.value.some((item) => item.uploading))
 const hasSelectedQualifications = computed(() => qualifications.value.some((item) => item.file))
 const hasUnsavedChanges = computed(() => Boolean(editingId.value) && JSON.stringify(form.value) !== savedFormSnapshot.value)
+const pendingReviewByTenantId = computed(() => new Map(pendingReviews.value.map((review) => [String(review.tenantId), review])))
 function displayText(value?: string | null) { return value?.trim() || '—' }
 function formatDate(value?: string | null) { return value ? value.replace('T', ' ').slice(0, 16) : '—' }
 function statusMeta(status: PlatformTenantStatus) {
@@ -165,11 +191,90 @@ function statusMeta(status: PlatformTenantStatus) {
   return { label: '已停用', type: 'info' as const }
 }
 
+async function loadPendingReviews() {
+  const sequence = ++reviewLoadSequence
+  if (!access.can('platform:customer:review')) {
+    if (sequence === reviewLoadSequence) {
+      pendingReviews.value = []
+      reviewLoadError.value = null
+    }
+    return [] as EnterpriseReview[]
+  }
+  if (sequence === reviewLoadSequence) reviewLoadError.value = null
+  try {
+    const reviews = await listEnterpriseReviews()
+    if (sequence === reviewLoadSequence) pendingReviews.value = reviews
+    return reviews
+  } catch (error) {
+    if (sequence === reviewLoadSequence) {
+      pendingReviews.value = []
+      reviewLoadError.value = getApiErrorDetails(error, '待审核客户加载失败，审核操作暂不可用')
+    }
+    return [] as EnterpriseReview[]
+  }
+}
+
+async function reloadPendingReviews() {
+  const reviews = await loadPendingReviews()
+  if (!access.can('platform:customer:list')) result.value = reviewOnlyPage(reviews)
+}
+
+function reviewToCustomer(review: EnterpriseReview): PlatformTenantResource {
+  const tenantId = String(review.tenantId)
+  return {
+    id: tenantId,
+    tenantCode: review.tenantCode?.trim() || tenantId,
+    tenantName: review.tenantName?.trim() || `待审核企业（${tenantId}）`,
+    status: 'PENDING',
+    legalName: null,
+    unifiedSocialCreditCode: null,
+    contactName: review.contactName ?? null,
+    contactPhone: review.contactPhone ?? null,
+    contactEmail: review.contactEmail ?? null,
+    servicePackage: null,
+    contactWechat: null,
+    salesOwnerName: null,
+    paymentTermDays: null,
+    enterpriseType: null,
+    establishedDate: null,
+    registeredCapital: null,
+    registeredCapitalCurrency: null,
+    registeredAddress: null,
+    internalRemark: null,
+    createdAt: review.submittedAt ?? review.createdAt ?? null,
+    approvedAt: null,
+  }
+}
+
+function reviewOnlyPage(reviews: EnterpriseReview[]) {
+  const keyword = filters.value.keyword.trim().toLowerCase()
+  const records = reviews
+    .map(reviewToCustomer)
+    .filter((row) => (!filters.value.status || filters.value.status === 'PENDING') && (
+      !keyword
+      || row.tenantName.toLowerCase().includes(keyword)
+      || row.tenantCode.toLowerCase().includes(keyword)
+      || String(row.id).includes(keyword)
+    ))
+  const start = (page.value - 1) * pageSize.value
+  return {
+    records: records.slice(start, start + pageSize.value),
+    page: page.value,
+    size: pageSize.value,
+    total: records.length,
+    pages: Math.ceil(records.length / pageSize.value),
+  }
+}
+
 async function loadCustomers() {
   const sequence = ++loadSequence
   loading.value = true; loadError.value = null
   try {
-    const pageResult = await listPlatformTenants({ page: page.value, size: pageSize.value, keyword: filters.value.keyword.trim() || undefined, status: filters.value.status || undefined })
+    const reviewsRequest = loadPendingReviews()
+    const pageResult = access.can('platform:customer:list')
+      ? await listPlatformTenants({ page: page.value, size: pageSize.value, keyword: filters.value.keyword.trim() || undefined, status: filters.value.status || undefined })
+      : reviewOnlyPage(await reviewsRequest)
+    if (access.can('platform:customer:list')) await reviewsRequest
     if (sequence !== loadSequence) return
     result.value = pageResult; orderCounts.value = {}
     if (access.can('platform:order:list') && pageResult.records.length) {
@@ -419,17 +524,18 @@ async function saveCustomer() {
 }
 
 async function submitReview() {
-  if (!editingId.value) { ElMessage.warning('请先保存客户资料和资质文件'); return }
+  if (submitting.value) return
-  if (!formRef.value || !(await formRef.value.validate().catch(() => false))) return
+  submitting.value = true
-  if (hasUnsavedChanges.value) { ElMessage.warning('客户资料有未保存的修改，请先保存资料'); return }
-  if (uploadingQualifications.value) { ElMessage.warning('资质文件正在上传，请稍候再提交审核'); return }
-  if (hasSelectedQualifications.value) { ElMessage.warning('存在尚未保存的已选文件，请先点击“保存资料和资质”'); return }
-  const missing = qualifications.value.filter((item) => item.required && !item.uploaded)
-  for (const item of missing) item.error = `${item.label}为提交审核必填文件`
-  if (missing.length) { ElMessage.warning('请先上传营业执照和法人身份证'); return }
   try {
+    if (!editingId.value) { ElMessage.warning('请先保存客户资料和资质文件'); return }
+    if (!formRef.value || !(await formRef.value.validate().catch(() => false))) return
+    if (hasUnsavedChanges.value) { ElMessage.warning('客户资料有未保存的修改，请先保存资料'); return }
+    if (uploadingQualifications.value) { ElMessage.warning('资质文件正在上传，请稍候再提交审核'); return }
+    if (hasSelectedQualifications.value) { ElMessage.warning('存在尚未保存的已选文件，请先点击“保存资料和资质”'); return }
+    const missing = qualifications.value.filter((item) => item.required && !item.uploaded)
+    for (const item of missing) item.error = `${item.label}为提交审核必填文件`
+    if (missing.length) { ElMessage.warning(`请先上传${missing.map((item) => item.label).join('、')}`); return }
     await ElMessageBox.confirm('提交后客户资料与资质将进入企业审核，审核完成前不能继续替换文件。确认提交吗？', '提交企业审核', { type: 'warning', confirmButtonText: '确认提交', cancelButtonText: '继续完善' })
-    submitting.value = true
     const saved = await submitPlatformTenantReview(editingId.value)
     editorStatus.value = saved.status; ElMessage.success('审核单已提交')
     editorOpen.value = false; await loadCustomers()
@@ -466,6 +572,53 @@ async function toggleStatus(row: PlatformTenantResource) {
   } finally { rowActionId.value = '' }
 }
 
+function openDecision(row: PlatformTenantResource, type: 'approve' | 'reject') {
+  if (reviewSubmitting.value) return
+  const review = pendingReviewByTenantId.value.get(String(row.id))
+  if (!review) {
+    ElMessage.warning('未找到该客户的待审核单，请刷新列表后重试')
+    return
+  }
+  selectedReview.value = review
+  decision.type = type
+  decision.comment = type === 'approve' ? '企业资料与必填资质完整、清晰，审核通过' : ''
+  decisionOpen.value = true
+  void nextTick(() => decisionFormRef.value?.clearValidate('comment'))
+}
+
+async function submitDecision() {
+  const review = selectedReview.value
+  if (!review || !decisionFormRef.value || reviewSubmitting.value) return
+  const valid = await decisionFormRef.value.validate().then(() => true).catch(() => false)
+  if (!valid) return
+  reviewSubmitting.value = true
+  try {
+    let approved: EnterpriseApprovalResponse | null = null
+    if (decision.type === 'approve') {
+      approved = await approveEnterpriseReview(review.id, decision.comment.trim())
+    } else {
+      await rejectEnterpriseReview(review.id, decision.comment.trim())
+    }
+    decisionOpen.value = false
+    detailOpen.value = false
+    ElMessage.success(decision.type === 'approve' ? '企业资料已审核通过' : '企业资料已驳回')
+    if (approved?.administratorCreated) {
+      approvalResult.value = approved
+      approvalResultOpen.value = true
+    }
+    await loadCustomers()
+  } catch (error) {
+    ElMessage.error(getApiErrorMessage(error, '审核提交失败，请稍后重试'))
+  } finally {
+    reviewSubmitting.value = false
+  }
+}
+
+function closeApprovalResult() {
+  approvalResultOpen.value = false
+  approvalResult.value = null
+}
+
 async function exportCustomers() {
   exportSubmitting.value = true
   try {
@@ -486,6 +639,12 @@ async function exportCustomers() {
 watch([page, pageSize], () => { void loadCustomers() })
 watch(editorOpen, (open) => { if (!open) clearQualificationPreviews() })
 watch(detailOpen, (open) => { if (!open) clearDetailQualificationPreviews() })
+watch(
+  () => [access.can('platform:customer:approve'), access.can('platform:customer:reject')],
+  ([canApprove, canReject]) => {
+    if ((decision.type === 'approve' && !canApprove) || (decision.type === 'reject' && !canReject)) decisionOpen.value = false
+  },
+)
 onBeforeUnmount(clearQualificationPreviews)
 onBeforeUnmount(clearDetailQualificationPreviews)
 onMounted(loadCustomers)
@@ -497,8 +656,9 @@ onMounted(loadCustomers)
     <section v-if="loadError" class="surface-panel customers-error" role="alert"><div><strong>客户列表暂时无法加载</strong><p>{{ loadError.message }}</p><ApiErrorMeta :details="loadError" /></div><el-button type="primary" :loading="loading" @click="loadCustomers">重新加载</el-button></section>
     <section v-else class="surface-panel table-panel" :aria-busy="loading">
       <div class="customers-table-header"><div class="customers-table-heading"><h2>客户列表</h2><span>共 {{ result.total }} 个客户</span></div><div class="customers-table-actions"><el-button v-if="access.can('platform:customer:export')" :loading="exportSubmitting" :disabled="loading" @click="exportCustomers"><Download :size="16" />导出Excel</el-button><el-button v-if="access.can('platform:customer:create')" type="primary" :disabled="loading" @click="openCreate"><Plus :size="16" />新增客户</el-button></div></div>
+      <div v-if="reviewLoadError" class="review-sync-error" role="alert"><div><ShieldX :size="17" /><span>{{ reviewLoadError.message }}</span></div><el-button link type="primary" @click="reloadPendingReviews">重新加载待审核客户</el-button></div>
       <DataTable v-model:page="page" v-model:page-size="pageSize" :data="result.records" :columns="customerColumns" :loading="loading" :total="result.total" aria-label="客户列表" row-key="id" empty-text="暂无符合筛选条件的客户">
-        <template #actions="{ row }"><div class="table-actions"><el-button v-if="access.can('platform:customer:view')" link type="primary" @click="showDetail(row as PlatformTenantResource)"><Eye :size="15" />详情</el-button><el-button v-if="access.can('platform:customer:view') && access.can('platform:customer:edit')" link type="primary" @click="openEdit(row as PlatformTenantResource)"><Pencil :size="15" />编辑</el-button><el-button v-if="access.can('platform:customer:status') && ['ACTIVE','DISABLED'].includes((row as PlatformTenantResource).status)" link :type="(row as PlatformTenantResource).status === 'ACTIVE' ? 'danger' : 'success'" :loading="rowActionId === String((row as PlatformTenantResource).id)" @click="toggleStatus(row as PlatformTenantResource)"><Power :size="15" />{{ (row as PlatformTenantResource).status === 'ACTIVE' ? '停用' : '启用' }}</el-button></div></template>
+        <template #actions="{ row }"><div class="table-actions"><el-button v-if="access.can('platform:customer:view')" link type="primary" @click="showDetail(row as PlatformTenantResource)"><Eye :size="15" />详情</el-button><el-button v-if="access.can('platform:customer:view') && access.can('platform:customer:edit')" link type="primary" @click="openEdit(row as PlatformTenantResource)"><Pencil :size="15" />编辑</el-button><el-button v-if="pendingReviewByTenantId.has(String((row as PlatformTenantResource).id)) && access.can('platform:customer:approve')" link type="success" :disabled="reviewSubmitting" @click="openDecision(row as PlatformTenantResource, 'approve')"><ShieldCheck :size="15" />通过</el-button><el-button v-if="pendingReviewByTenantId.has(String((row as PlatformTenantResource).id)) && access.can('platform:customer:reject')" link type="danger" :disabled="reviewSubmitting" @click="openDecision(row as PlatformTenantResource, 'reject')"><ShieldX :size="15" />驳回</el-button><el-button v-if="access.can('platform:customer:status') && ['ACTIVE','DISABLED'].includes((row as PlatformTenantResource).status)" link :type="(row as PlatformTenantResource).status === 'ACTIVE' ? 'danger' : 'success'" :loading="rowActionId === String((row as PlatformTenantResource).id)" @click="toggleStatus(row as PlatformTenantResource)"><Power :size="15" />{{ (row as PlatformTenantResource).status === 'ACTIVE' ? '停用' : '启用' }}</el-button></div></template>
         <template #company="{ row }"><div class="customer-company-cell"><span><Building2 :size="18" /></span><strong>{{ (row as PlatformTenantResource).tenantName }}</strong></div></template>
         <template #status="{ row }"><el-tag :type="statusMeta((row as PlatformTenantResource).status).type" effect="light">{{ statusMeta((row as PlatformTenantResource).status).label }}</el-tag></template>
         <template #orderCount="{ row }">{{ access.can('platform:order:list') ? (orderCounts[String((row as PlatformTenantResource).id)] ?? '—') : '—' }}</template>
@@ -557,6 +717,17 @@ onMounted(loadCustomers)
       <template #footer><el-button @click="qualificationPreviewOpen = false">关闭预览</el-button></template>
     </el-dialog>
 
+    <el-dialog v-model="approvalResultOpen" title="审核通过，管理员账号已创建" width="min(560px, calc(100vw - 28px))" class="approval-result-dialog" :close-on-click-modal="false" :close-on-press-escape="false" :show-close="false">
+      <div v-if="approvalResult" class="approval-result-content">
+        <div class="approval-result-warning" role="alert"><ShieldCheck :size="20" /><div><strong>请立即保存以下一次性凭证</strong><span>临时密码只在本次审核响应中返回，关闭后无法再次查看。</span></div></div>
+        <dl class="approval-credentials">
+          <div><dt>登录账号</dt><dd><code>{{ approvalResult.administratorUsername || '未返回' }}</code><CopyButton v-if="approvalResult.administratorUsername" :value="approvalResult.administratorUsername" label="登录账号" size="small" /></dd></div>
+          <div><dt>临时密码</dt><dd><code>{{ approvalResult.temporaryPassword || '未返回' }}</code><CopyButton v-if="approvalResult.temporaryPassword" :value="approvalResult.temporaryPassword" label="临时密码" size="small" /></dd></div>
+        </dl>
+      </div>
+      <template #footer><el-button type="primary" @click="closeApprovalResult">我已保存，关闭</el-button></template>
+    </el-dialog>
+
     <el-drawer v-model="detailOpen" title="客户详情" size="620px" class="business-drawer">
       <div v-loading="detailLoading" class="customer-detail">
         <template v-if="detail">
@@ -599,7 +770,16 @@ onMounted(loadCustomers)
           </section>
         </template>
       </div>
+      <template #footer><div class="drawer-footer"><el-button @click="detailOpen = false">关闭</el-button><el-button v-if="detail && pendingReviewByTenantId.has(String(detail.id)) && access.can('platform:customer:reject')" type="danger" plain @click="openDecision(detail, 'reject')">驳回</el-button><el-button v-if="detail && pendingReviewByTenantId.has(String(detail.id)) && access.can('platform:customer:approve')" type="success" @click="openDecision(detail, 'approve')">审核通过</el-button></div></template>
     </el-drawer>
+
+    <el-dialog v-model="decisionOpen" :title="decision.type === 'approve' ? '确认审核通过' : '确认驳回企业资料'" width="min(520px, calc(100vw - 28px))" class="review-decision-dialog" :close-on-click-modal="false">
+      <div v-if="selectedReview" class="decision-summary"><strong>{{ selectedReview.tenantName || detail?.tenantName || '当前客户' }}</strong><span>审核单 {{ selectedReview.id }}</span></div>
+      <el-form ref="decisionFormRef" :model="decision" :rules="decisionRules" label-position="top">
+        <el-form-item prop="comment" :label="decision.type === 'approve' ? '审核说明' : '驳回原因'" required><el-input v-model="decision.comment" type="textarea" :rows="4" maxlength="300" show-word-limit :placeholder="decision.type === 'approve' ? '请填写审核通过说明' : '请明确说明需要企业修改的内容'" /></el-form-item>
+      </el-form>
+      <template #footer><div class="drawer-footer"><el-button :disabled="reviewSubmitting" @click="decisionOpen = false">取消</el-button><el-button :type="decision.type === 'approve' ? 'success' : 'danger'" :loading="reviewSubmitting" @click="submitDecision">{{ decision.type === 'approve' ? '确认通过' : '确认驳回' }}</el-button></div></template>
+    </el-dialog>
   </div>
 </template>
 
@@ -609,6 +789,8 @@ onMounted(loadCustomers)
 .customers-table-header { display:flex; min-width:0; align-items:center; justify-content:space-between; gap:16px; padding:16px 18px; border-bottom:1px solid var(--cc-border); }
 .customers-table-heading { display:flex; min-width:0; align-items:baseline; gap:10px; } .customers-table-heading h2 { margin:0; color:var(--cc-text); font-size:16px; } .customers-table-heading span { color:var(--cc-muted); font-size:12px; white-space:nowrap; }
 .customers-table-actions { display:flex; flex-wrap:wrap; gap:8px; } .customers-table-actions :deep(.el-button + .el-button) { margin-left:0; }
+.table-actions { display:flex; flex-wrap:wrap; align-items:center; gap:2px 8px; } .table-actions :deep(.el-button) { margin-left:0; }
+.review-sync-error { display:flex; min-width:0; align-items:center; justify-content:space-between; gap:12px; padding:10px 18px; border-bottom:1px solid #fecdca; background:#fffafa; color:#b42318; font-size:12px; } .review-sync-error > div { display:flex; min-width:0; align-items:center; gap:8px; } .review-sync-error span { overflow-wrap:anywhere; }
 .customer-company-cell { display:flex; min-width:0; align-items:center; gap:10px; } .customer-company-cell > span,.detail-title > span { display:grid; width:34px; height:34px; flex:0 0 auto; place-items:center; border-radius:7px; background:#eef4ff; color:var(--cc-primary); } .customer-company-cell strong { overflow:hidden; text-overflow:ellipsis; }
 .capital-input { display:grid; grid-template-columns:minmax(0,1fr) 130px; width:100%; gap:8px; } .capital-input :deep(.el-input-number),.capital-input :deep(.el-select) { width:100%; }
 .qualification-heading { display:flex; align-items:flex-start; justify-content:space-between; gap:16px; } .qualification-heading h3 { margin-bottom:4px; } .qualification-heading p,.qualification-hint { margin:0; color:var(--cc-muted); font-size:12px; line-height:1.6; } .qualification-hint { margin-top:12px; } .qualification-hint span,.qualification-label > span { color:var(--el-color-danger); }
@@ -644,6 +826,8 @@ onMounted(loadCustomers)
 .customer-detail-item:last-child { border-bottom:0; }
 .customer-detail-item dt { margin-bottom:5px; color:var(--cc-muted); font-size:12px; line-height:1.4; }
 .customer-detail-item dd { margin:0; color:var(--cc-text); font-size:14px; font-weight:600; line-height:1.55; overflow-wrap:anywhere; }
+.decision-summary { display:flex; min-width:0; align-items:center; justify-content:space-between; gap:12px; margin-bottom:18px; padding:12px 14px; border-radius:8px; background:#f8fafc; } .decision-summary > * { min-width:0; overflow-wrap:anywhere; } .decision-summary strong { color:var(--cc-text); font-size:13px; } .decision-summary span { color:var(--cc-muted); font-size:11px; }
+.approval-result-warning { display:flex; align-items:flex-start; gap:10px; padding:12px 14px; border:1px solid #fecdca; border-radius:8px; background:#fffafa; color:#b42318; } .approval-result-warning strong,.approval-result-warning span { display:block; } .approval-result-warning strong { font-size:14px; } .approval-result-warning span { margin-top:4px; font-size:12px; line-height:1.5; } .approval-credentials { margin:18px 0 0; border:1px solid var(--cc-border); border-radius:8px; } .approval-credentials > div { display:grid; grid-template-columns:90px minmax(0,1fr); gap:12px; padding:12px 14px; } .approval-credentials > div + div { border-top:1px solid var(--cc-border); } .approval-credentials dt { color:var(--cc-muted); font-size:12px; } .approval-credentials dd { display:flex; min-width:0; align-items:center; gap:10px; margin:0; } .approval-credentials code { min-width:0; flex:1; overflow-wrap:anywhere; color:var(--cc-text); font-size:14px; font-weight:700; }
 .detail-section-heading { display:flex; align-items:baseline; justify-content:space-between; gap:12px; }
 .detail-section-heading h4 { margin-bottom:12px; }
 .detail-section-heading span { color:var(--cc-muted); font-size:12px; }
@@ -663,7 +847,7 @@ onMounted(loadCustomers)
 .detail-qualification-meta { display:flex; align-items:flex-end; gap:8px; flex-direction:column; }
 .detail-qualification-meta > span { display:flex; align-items:center; gap:4px; color:var(--cc-primary); font-size:11px; font-weight:600; }
 .detail-empty-qualification { display:flex; min-height:88px; align-items:center; justify-content:center; gap:8px; border:1px dashed var(--cc-border); border-radius:8px; background:#fafbfc; color:var(--cc-muted); font-size:12px; }
-@media (max-width:720px) { .customers-error,.customers-table-header,.customer-editor-footer { align-items:stretch; flex-direction:column; } .customers-table-actions { display:grid; grid-template-columns:1fr 1fr; } .customers-table-actions :deep(.el-button) { min-height:40px; margin:0; } .qualification-table { overflow-x:auto; } .qualification-row { min-width:640px; } .customer-editor-footer > div { display:grid; grid-template-columns:repeat(auto-fit,minmax(110px,1fr)); width:100%; } .customer-editor-footer :deep(.el-button) { min-height:40px; margin:0; } .customer-detail { padding:16px; } .customer-detail-grid { grid-template-columns:1fr; } .customer-detail-item,.customer-detail-item:nth-child(odd):not(.is-wide) { grid-column:1; border-right:0; } .customer-detail-item:last-child { border-bottom:0; } }
+@media (max-width:720px) { .customers-error,.customers-table-header,.customer-editor-footer,.review-sync-error { align-items:stretch; flex-direction:column; } .customers-table-actions { display:grid; grid-template-columns:1fr 1fr; } .customers-table-actions :deep(.el-button) { min-height:40px; margin:0; } .qualification-table { overflow-x:auto; } .qualification-row { min-width:640px; } .customer-editor-footer > div { display:grid; grid-template-columns:repeat(auto-fit,minmax(110px,1fr)); width:100%; } .customer-editor-footer :deep(.el-button) { min-height:40px; margin:0; } .customer-detail { padding:16px; } .customer-detail-grid { grid-template-columns:1fr; } .customer-detail-item,.customer-detail-item:nth-child(odd):not(.is-wide) { grid-column:1; border-right:0; } .customer-detail-item:last-child { border-bottom:0; } .decision-summary { align-items:flex-start; flex-direction:column; } }
 @media (max-width:480px) { .detail-qualification-item { grid-template-columns:44px minmax(0,1fr); } .detail-qualification-icon { width:44px; height:44px; } .detail-qualification-meta { grid-column:2; align-items:center; flex-direction:row; justify-content:space-between; } }
 @media (max-width:360px) { .customers-table-actions,.capital-input { grid-template-columns:1fr; } }
 </style>

src/modules/customers/pages/EnterpriseReviewsView.test.ts

@@ -1,194 +0,0 @@
-import ElementPlus from 'element-plus'
-import { createPinia, setActivePinia } from 'pinia'
-import { enableAutoUnmount, flushPromises, mount } from '@vue/test-utils'
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import {
-  approveEnterpriseReview,
-  downloadTenantQualification,
-  listEnterpriseReviews,
-  listTenantQualifications,
-  qualificationFileName,
-  rejectEnterpriseReview,
-  type EnterpriseReview,
-  type PlatformTenantQualification,
-} from '@/modules/iam'
-import { useAccessPreviewStore } from '@/core/access/accessPreview'
-import { useAuthStore } from '@/core/auth/auth'
-import EnterpriseReviewsView from './EnterpriseReviewsView.vue'
-
-vi.mock('@/modules/iam', () => ({
-  listEnterpriseReviews: vi.fn(),
-  listTenantQualifications: vi.fn(),
-  downloadTenantQualification: vi.fn(),
-  qualificationFileName: vi.fn(() => 'test.png'),
-  approveEnterpriseReview: vi.fn(),
-  rejectEnterpriseReview: vi.fn(),
-}))
-
-class ResizeObserverStub implements ResizeObserver {
-  observe() {}
-  unobserve() {}
-  disconnect() {}
-}
-
-const pendingReview: EnterpriseReview = {
-  id: 202607290005,
-  tenantId: 202607290002,
-  tenantName: '深圳测试跨境科技有限公司',
-  tenantCode: 'TEN202607290002',
-  qualificationId: 202607290004,
-  qualificationType: 'BUSINESS_LICENSE',
-  certificateNo: '91440300XXXXXXXXXX',
-  documentUrl: '/api/merchant/v1/files/qualifications/test.png',
-  contactName: '张三',
-  contactPhone: '13800138000',
-  contactEmail: 'test01@example.com',
-  submittedAt: '2026-07-29T10:00:00Z',
-  status: 'PENDING',
-}
-
-const pendingQualification: PlatformTenantQualification = {
-  id: 202607290004,
-  tenantId: pendingReview.tenantId,
-  qualificationType: 'BUSINESS_LICENSE',
-  certificateNo: '91440300XXXXXXXXXX',
-  documentUrl: '/api/merchant/v1/files/qualifications/test.png',
-  status: 'PENDING',
-  reviewComment: null,
-}
-
-async function mountView() {
-  const pinia = createPinia()
-  setActivePinia(pinia)
-  const auth = useAuthStore()
-  auth.token = 'token'
-  auth.permissions = ['platform:customer:review', 'platform:customer:approve', 'platform:customer:reject']
-  useAccessPreviewStore().initializeAfterLogin()
-  const wrapper = mount(EnterpriseReviewsView, {
-    attachTo: document.body,
-    global: { plugins: [pinia, ElementPlus] },
-  })
-  await flushPromises()
-  return wrapper
-}
-
-function buttonByText(text: string) {
-  return [...document.querySelectorAll<HTMLButtonElement>('button')]
-    .find((button) => button.textContent?.trim() === text)
-}
-
-function tableButtonByText(text: string) {
-  return [...document.querySelectorAll<HTMLButtonElement>('.el-table__body button')]
-    .find((button) => button.textContent?.trim() === text)
-}
-
-enableAutoUnmount(afterEach)
-
-describe('EnterpriseReviewsView', () => {
-  beforeEach(() => {
-    vi.stubGlobal('ResizeObserver', ResizeObserverStub)
-    vi.mocked(listEnterpriseReviews).mockReset()
-    vi.mocked(listTenantQualifications).mockReset()
-    vi.mocked(downloadTenantQualification).mockReset()
-    vi.mocked(downloadTenantQualification).mockResolvedValue(new Blob(['image'], { type: 'image/png' }))
-    vi.mocked(approveEnterpriseReview).mockReset()
-    vi.mocked(rejectEnterpriseReview).mockReset()
-    vi.mocked(qualificationFileName).mockReset()
-    vi.mocked(qualificationFileName).mockReturnValue('test.png')
-    Object.defineProperty(URL, 'createObjectURL', { configurable: true, value: vi.fn(() => 'blob:qualification-preview') })
-    Object.defineProperty(URL, 'revokeObjectURL', { configurable: true, value: vi.fn() })
-    document.body.innerHTML = ''
-  })
-
-  it('renders an honest empty state from the real review endpoint', async () => {
-    vi.mocked(listEnterpriseReviews).mockResolvedValue([])
-
-    const wrapper = await mountView()
-
-    expect(listEnterpriseReviews).toHaveBeenCalledTimes(1)
-    expect(wrapper.text()).toContain('暂无待审核企业')
-    expect(wrapper.text()).toContain('共 0 条')
-  })
-
-  it('shows review identity and submits approval with the review id', async () => {
-    vi.mocked(listEnterpriseReviews).mockResolvedValue([pendingReview])
-    vi.mocked(approveEnterpriseReview).mockResolvedValue(undefined)
-
-    const wrapper = await mountView()
-    expect(wrapper.text()).toContain('深圳测试跨境科技有限公司')
-    expect(wrapper.text()).toContain('91440300XXXXXXXXXX')
-
-    const approve = tableButtonByText('通过')
-    expect(approve).toBeDefined()
-    approve?.click()
-    await flushPromises()
-
-    const confirm = buttonByText('确认通过')
-    expect(confirm).toBeDefined()
-    confirm?.click()
-    await flushPromises()
-
-    expect(approveEnterpriseReview).toHaveBeenCalledWith(
-      pendingReview.id,
-      '企业资料与必填资质完整、清晰，审核通过',
-    )
-    expect(wrapper.text()).toContain('暂无待审核企业')
-    expect(wrapper.text()).toContain('共 0 条')
-  })
-
-  it('loads tenant qualifications when the reviewer opens the detail drawer', async () => {
-    vi.mocked(listEnterpriseReviews).mockResolvedValue([pendingReview])
-    vi.mocked(listTenantQualifications).mockResolvedValue([pendingQualification])
-
-    const wrapper = await mountView()
-    tableButtonByText('详情')?.click()
-    await flushPromises()
-
-    expect(listTenantQualifications).toHaveBeenCalledWith(pendingReview.tenantId)
-    expect(downloadTenantQualification).toHaveBeenCalledWith(pendingReview.tenantId, pendingQualification.documentUrl)
-    expect(wrapper.text()).toContain('信用代码：91440300XXXXXXXXXX')
-    expect(document.querySelector<HTMLImageElement>('.qualification-thumbnail img')?.getAttribute('alt')).toBe('营业执照缩略图')
-  })
-
-  it('keeps qualification loading recoverable without using a direct file link', async () => {
-    vi.mocked(listEnterpriseReviews).mockResolvedValue([pendingReview])
-    vi.mocked(listTenantQualifications).mockRejectedValue(new Error('qualification unavailable'))
-
-    const wrapper = await mountView()
-    tableButtonByText('详情')?.click()
-    await flushPromises()
-
-    expect(wrapper.text()).toContain('资质暂时无法加载')
-    expect(wrapper.text()).toContain('qualification unavailable')
-    expect(wrapper.find('a[href*="qualifications"]').exists()).toBe(false)
-    expect(buttonByText('重新加载')).toBeDefined()
-  })
-
-  it('renders uploaded PDF qualifications in a PDF preview frame', async () => {
-    vi.mocked(listEnterpriseReviews).mockResolvedValue([pendingReview])
-    vi.mocked(listTenantQualifications).mockResolvedValue([pendingQualification])
-    vi.mocked(downloadTenantQualification).mockResolvedValue(new Blob(['%PDF-1.4'], { type: 'application/pdf' }))
-    vi.mocked(qualificationFileName).mockReturnValue('test.pdf')
-
-    await mountView()
-    tableButtonByText('详情')?.click()
-    await flushPromises()
-    document.querySelector<HTMLButtonElement>('.qualification-thumbnail')?.click()
-    await flushPromises()
-
-    const frame = document.querySelector<HTMLIFrameElement>('.qualification-preview iframe')
-    expect(frame?.getAttribute('src')).toBe('blob:qualification-preview')
-    expect(frame?.getAttribute('title')).toContain('PDF 预览')
-    expect(downloadTenantQualification).toHaveBeenCalledTimes(1)
-  })
-
-  it('keeps the page recoverable when the endpoint fails', async () => {
-    vi.mocked(listEnterpriseReviews).mockRejectedValue(new Error('IAM unavailable'))
-
-    const wrapper = await mountView()
-
-    expect(wrapper.get('[role="alert"]').text()).toContain('审核列表暂时无法加载')
-    expect(wrapper.get('[role="alert"]').text()).toContain('IAM unavailable')
-    expect(buttonByText('重新加载')).toBeDefined()
-  })
-})

src/modules/customers/pages/EnterpriseReviewsView.vue

@@ -1,500 +0,0 @@
-<script setup lang="ts">
-import { computed, nextTick, onBeforeUnmount, onMounted, reactive, ref, watch } from 'vue'
-import { ElMessage, type FormInstance, type FormRules } from 'element-plus'
-import { Eye, FileCheck2, FileText, ImageOff, LoaderCircle, ShieldCheck, ShieldX } from '@lucide/vue'
-import {
-  approveEnterpriseReview,
-  downloadTenantQualification,
-  listEnterpriseReviews,
-  listTenantQualifications,
-  qualificationFileName,
-  rejectEnterpriseReview,
-  type EnterpriseReview,
-  type PlatformTenantQualification,
-} from '@/modules/iam'
-import { getApiErrorDetails, getApiErrorMessage, type ApiErrorDetails } from '@/shared/api/http'
-import ApiErrorMeta from '@/shared/components/ApiErrorMeta.vue'
-import DataTable, { type DataTableColumn } from '@/shared/components/DataTable.vue'
-import QueryToolbar, { type QueryField, type QueryModel } from '@/shared/components/QueryToolbar.vue'
-import { useAccessPreviewStore } from '@/core/access/accessPreview'
-
-const access = useAccessPreviewStore()
-const loading = ref(false)
-const loadError = ref<ApiErrorDetails | null>(null)
-const reviews = ref<EnterpriseReview[]>([])
-const page = ref(1)
-const pageSize = ref(10)
-type ReviewFilters = QueryModel & { keyword: string }
-const filters = ref<ReviewFilters>({ keyword: '' })
-const appliedFilters = ref<ReviewFilters>({ keyword: '' })
-const queryFields: QueryField[] = [
-  { key: 'keyword', type: 'input', placeholder: '企业名称、企业编号、信用代码或审核单号' },
-]
-const detailOpen = ref(false)
-const selectedReview = ref<EnterpriseReview | null>(null)
-const qualifications = ref<PlatformTenantQualification[]>([])
-const qualificationsLoading = ref(false)
-const qualificationsError = ref<ApiErrorDetails | null>(null)
-const previewOpen = ref(false)
-const previewUrl = ref('')
-const previewName = ref('')
-const previewKind = ref<'image' | 'pdf' | ''>('')
-type QualificationAsset = { url: string; name: string; kind: 'image' | 'pdf' }
-const qualificationAssets = ref<Record<string, QualificationAsset>>({})
-const qualificationAssetLoadingIds = ref<string[]>([])
-const qualificationAssetErrorIds = ref<string[]>([])
-const qualificationAssetRequests = new Map<string, Promise<QualificationAsset | undefined>>()
-const decisionOpen = ref(false)
-const submitting = ref(false)
-const decision = reactive({ type: 'approve' as 'approve' | 'reject', comment: '' })
-const decisionFormRef = ref<FormInstance>()
-const decisionRules: FormRules = {
-  comment: [{
-    validator: (_rule, value, callback) => {
-      if (typeof value === 'string' && value.trim()) {
-        callback()
-        return
-      }
-      callback(new Error('请填写审核说明或驳回原因'))
-    },
-    trigger: ['blur', 'change'],
-  }],
-}
-
-const filteredReviews = computed(() => {
-  const query = appliedFilters.value.keyword.trim().toLowerCase()
-  if (!query) return reviews.value
-  return reviews.value.filter((review) => [
-    review.tenantName,
-    review.tenantCode,
-    review.certificateNo,
-    String(review.tenantId),
-    String(review.id),
-  ].some((value) => value?.toLowerCase().includes(query)))
-})
-
-const pagedReviews = computed(() => {
-  const start = (page.value - 1) * pageSize.value
-  return filteredReviews.value.slice(start, start + pageSize.value)
-})
-
-const reviewColumns: DataTableColumn[] = [
-  { key: 'actions', label: '操作', width: 250, fixed: 'left', slotName: 'actions' },
-  { key: 'company', label: '企业', minWidth: 230, slotName: 'company' },
-  { key: 'qualification', label: '资质', minWidth: 210, slotName: 'qualification' },
-  { key: 'contact', label: '联系人', minWidth: 180, slotName: 'contact' },
-  { key: 'submittedAt', label: '提交时间', minWidth: 175, slotName: 'submittedAt' },
-  { key: 'status', label: '状态', width: 110, slotName: 'status' },
-]
-
-function displayText(value: unknown) {
-  return typeof value === 'string' && value.trim() ? value : '—'
-}
-
-function formatDate(value?: string | null) {
-  if (!value) return '—'
-  const date = new Date(value)
-  return Number.isNaN(date.getTime()) ? value : date.toLocaleString('zh-CN', { hour12: false })
-}
-
-function qualificationName(value?: string | null) {
-  const names: Record<string, string> = {
-    BUSINESS_LICENSE: '营业执照',
-    LEGAL_PERSON_ID: '法人身份证',
-    FREIGHT_FORWARDER_CERTIFICATE: '货代资质证书',
-    BANK_ACCOUNT_LICENSE: '银行开户许可证',
-  }
-  return value ? (names[value] || value) : '—'
-}
-
-function qualificationStatus(status: PlatformTenantQualification['status']) {
-  if (status === 'APPROVED') return { label: '已通过', tone: 'is-success' }
-  if (status === 'REJECTED') return { label: '已驳回', tone: 'is-danger' }
-  return { label: '待审核', tone: 'is-warning' }
-}
-
-async function loadReviews() {
-  loading.value = true
-  loadError.value = null
-  try {
-    reviews.value = await listEnterpriseReviews()
-  } catch (error) {
-    loadError.value = getApiErrorDetails(error, '审核列表加载失败，请稍后重试')
-  } finally {
-    loading.value = false
-  }
-}
-
-function searchReviews() {
-  appliedFilters.value = { ...filters.value }
-  page.value = 1
-  void loadReviews()
-}
-
-async function loadSelectedQualifications() {
-  const tenantId = selectedReview.value?.tenantId
-  if (!tenantId) return
-  previewOpen.value = false
-  clearQualificationAssets()
-  qualificationsLoading.value = true
-  qualificationsError.value = null
-  qualifications.value = []
-  try {
-    const result = await listTenantQualifications(tenantId)
-    if (selectedReview.value?.tenantId === tenantId) {
-      qualifications.value = result
-      preloadQualificationAssets(result, tenantId)
-    }
-  } catch (error) {
-    if (selectedReview.value?.tenantId === tenantId) {
-      qualificationsError.value = getApiErrorDetails(error, '资质列表加载失败，请稍后重试')
-    }
-  } finally {
-    if (selectedReview.value?.tenantId === tenantId) qualificationsLoading.value = false
-  }
-}
-
-function openDetail(review: EnterpriseReview) {
-  selectedReview.value = review
-  detailOpen.value = true
-  void loadSelectedQualifications()
-}
-
-function clearPreview() {
-  previewUrl.value = ''
-  previewName.value = ''
-  previewKind.value = ''
-}
-
-function qualificationKey(qualification: PlatformTenantQualification) {
-  return String(qualification.id)
-}
-
-function clearQualificationAssets() {
-  Object.values(qualificationAssets.value).forEach((asset) => URL.revokeObjectURL(asset.url))
-  qualificationAssets.value = {}
-  qualificationAssetLoadingIds.value = []
-  qualificationAssetErrorIds.value = []
-  qualificationAssetRequests.clear()
-  clearPreview()
-}
-
-async function loadQualificationAsset(
-  qualification: PlatformTenantQualification,
-  tenantId: number | string,
-) {
-  const key = qualificationKey(qualification)
-  const cached = qualificationAssets.value[key]
-  if (cached) return cached
-
-  const pending = qualificationAssetRequests.get(key)
-  if (pending) return pending
-
-  qualificationAssetLoadingIds.value = [...qualificationAssetLoadingIds.value, key]
-  qualificationAssetErrorIds.value = qualificationAssetErrorIds.value.filter((id) => id !== key)
-
-  const request = (async () => {
-    const blob = await downloadTenantQualification(tenantId, qualification.documentUrl)
-    if (!blob.size) throw new Error('资质文件内容为空')
-    const name = qualificationFileName(qualification.documentUrl)
-    const asset: QualificationAsset = {
-      url: URL.createObjectURL(blob),
-      name,
-      kind: blob.type === 'application/pdf' || name.toLowerCase().endsWith('.pdf') ? 'pdf' : 'image',
-    }
-    const isCurrent = detailOpen.value
-      && selectedReview.value?.tenantId === tenantId
-      && qualifications.value.some((item) => qualificationKey(item) === key && item.documentUrl === qualification.documentUrl)
-    if (!isCurrent) {
-      URL.revokeObjectURL(asset.url)
-      return undefined
-    }
-    qualificationAssets.value = { ...qualificationAssets.value, [key]: asset }
-    return asset
-  })()
-
-  qualificationAssetRequests.set(key, request)
-  try {
-    return await request
-  } catch (error) {
-    if (detailOpen.value && selectedReview.value?.tenantId === tenantId) {
-      qualificationAssetErrorIds.value = [...new Set([...qualificationAssetErrorIds.value, key])]
-    }
-    throw error
-  } finally {
-    qualificationAssetLoadingIds.value = qualificationAssetLoadingIds.value.filter((id) => id !== key)
-    if (qualificationAssetRequests.get(key) === request) qualificationAssetRequests.delete(key)
-  }
-}
-
-function preloadQualificationAssets(items: PlatformTenantQualification[], tenantId: number | string) {
-  items.forEach((qualification) => {
-    if (qualification.documentUrl) {
-      void loadQualificationAsset(qualification, tenantId).catch(() => undefined)
-    }
-  })
-}
-
-async function previewQualification(qualification: PlatformTenantQualification) {
-  const tenantId = selectedReview.value?.tenantId
-  if (!tenantId || !qualification.documentUrl) return
-  try {
-    const asset = await loadQualificationAsset(qualification, tenantId)
-    if (!asset) return
-    previewUrl.value = asset.url
-    previewName.value = asset.name
-    previewKind.value = asset.kind
-    previewOpen.value = true
-  } catch (error) {
-    ElMessage.error(getApiErrorMessage(error, '资质文件加载失败，请稍后重试'))
-  }
-}
-
-function openDecision(review: EnterpriseReview, type: 'approve' | 'reject') {
-  selectedReview.value = review
-  decision.type = type
-  decision.comment = type === 'approve' ? '企业资料与必填资质完整、清晰，审核通过' : ''
-  decisionOpen.value = true
-  void nextTick(() => decisionFormRef.value?.clearValidate('comment'))
-}
-
-async function submitDecision() {
-  const review = selectedReview.value
-  const form = decisionFormRef.value
-  if (!review || !form || submitting.value) return
-  const valid = await form.validate().then(() => true).catch(() => false)
-  if (!valid) return
-
-  submitting.value = true
-  try {
-    if (decision.type === 'approve') {
-      await approveEnterpriseReview(review.id, decision.comment.trim())
-    } else {
-      await rejectEnterpriseReview(review.id, decision.comment.trim())
-    }
-    reviews.value = reviews.value.filter((item) => item.id !== review.id)
-    decisionOpen.value = false
-    detailOpen.value = false
-    ElMessage.success(decision.type === 'approve' ? '企业资料已审核通过' : '企业资料已驳回')
-  } catch (error) {
-    ElMessage.error(getApiErrorMessage(error, '审核提交失败，请稍后重试'))
-  } finally {
-    submitting.value = false
-  }
-}
-
-watch(
-  () => [access.can('platform:customer:approve'), access.can('platform:customer:reject')],
-  ([canApprove, canReject]) => {
-    if ((decision.type === 'approve' && !canApprove) || (decision.type === 'reject' && !canReject)) {
-      decisionOpen.value = false
-    }
-  },
-)
-
-watch(previewOpen, (open) => {
-  if (!open) clearPreview()
-})
-
-watch(detailOpen, (open) => {
-  if (!open) {
-    previewOpen.value = false
-    clearQualificationAssets()
-  }
-})
-
-onMounted(loadReviews)
-onBeforeUnmount(clearQualificationAssets)
-</script>
-
-<template>
-  <div class="business-page enterprise-review-page">
-    <QueryToolbar v-model="filters" class="surface-panel" ariaLabel="企业审核筛选" :fields="queryFields" @search="searchReviews" />
-
-    <section v-if="loadError" class="surface-panel review-error" role="alert">
-      <ShieldX :size="22" />
-      <div><strong>审核列表暂时无法加载</strong><p>{{ loadError.message }}</p><ApiErrorMeta :details="loadError" /></div>
-      <el-button type="primary" @click="loadReviews">重新加载</el-button>
-    </section>
-
-    <section v-else class="surface-panel table-panel" :aria-busy="loading">
-      <DataTable
-        v-model:page="page"
-        v-model:page-size="pageSize"
-        :data="pagedReviews"
-        :columns="reviewColumns"
-        :loading="loading"
-        :total="filteredReviews.length"
-        aria-label="企业审核列表"
-        row-key="id"
-        empty-text="暂无待审核企业"
-      >
-        <template #actions="{ row }">
-            <div class="table-actions">
-              <el-button link type="primary" @click="openDetail(row as EnterpriseReview)"><Eye :size="15" />详情</el-button>
-              <el-button v-if="access.can('platform:customer:approve')" link type="success" @click="openDecision(row as EnterpriseReview, 'approve')"><ShieldCheck :size="15" />通过</el-button>
-              <el-button v-if="access.can('platform:customer:reject')" link type="danger" @click="openDecision(row as EnterpriseReview, 'reject')"><ShieldX :size="15" />驳回</el-button>
-            </div>
-        </template>
-        <template #company="{ row }"><div class="primary-cell"><strong>{{ displayText((row as EnterpriseReview).tenantName) }}</strong><span>{{ displayText((row as EnterpriseReview).tenantCode) }} · 租户 {{ (row as EnterpriseReview).tenantId }}</span></div></template>
-        <template #qualification="{ row }"><div class="primary-cell"><strong>{{ qualificationName((row as EnterpriseReview).qualificationType) }}</strong><span>{{ displayText((row as EnterpriseReview).certificateNo) }}</span></div></template>
-        <template #contact="{ row }"><div class="primary-cell"><strong>{{ displayText((row as EnterpriseReview).contactName) }}</strong><span>{{ displayText((row as EnterpriseReview).contactPhone) }}</span></div></template>
-        <template #submittedAt="{ row }">{{ formatDate((row as EnterpriseReview).submittedAt ?? (row as EnterpriseReview).createdAt) }}</template>
-        <template #status><span class="status-badge is-warning"><i />待审核</span></template>
-      </DataTable>
-    </section>
-
-    <el-drawer v-model="detailOpen" title="企业审核详情" size="620px" class="business-drawer">
-      <template v-if="selectedReview">
-        <div class="detail-identity">
-          <span><FileCheck2 :size="20" /></span>
-          <div><h2>{{ displayText(selectedReview.tenantName) }}</h2><p>审核单 {{ selectedReview.id }} · 租户 {{ selectedReview.tenantId }}</p></div>
-          <span class="status-badge is-warning"><i />待审核</span>
-        </div>
-        <section class="detail-section">
-          <h3>企业与联系人</h3>
-          <el-descriptions :column="1" border>
-            <el-descriptions-item label="企业编号">{{ displayText(selectedReview.tenantCode) }}</el-descriptions-item>
-            <el-descriptions-item label="联系人">{{ displayText(selectedReview.contactName) }}</el-descriptions-item>
-            <el-descriptions-item label="联系电话">{{ displayText(selectedReview.contactPhone) }}</el-descriptions-item>
-            <el-descriptions-item label="联系邮箱">{{ displayText(selectedReview.contactEmail) }}</el-descriptions-item>
-          </el-descriptions>
-        </section>
-        <section class="detail-section">
-          <h3>资质文件</h3>
-          <div class="qualification-state" :aria-busy="qualificationsLoading">
-            <div v-if="qualificationsLoading" v-loading="true" class="qualification-loading">正在读取该企业资质…</div>
-            <div v-else-if="qualificationsError" class="qualification-error" role="alert">
-              <div><strong>资质暂时无法加载</strong><p>{{ qualificationsError.message }}</p><ApiErrorMeta :details="qualificationsError" /></div>
-              <el-button type="primary" plain @click="loadSelectedQualifications">重新加载</el-button>
-            </div>
-            <el-empty v-else-if="qualifications.length === 0" :image-size="64" description="该企业暂未提交资质" />
-            <div v-else class="qualification-list">
-              <article v-for="qualification in qualifications" :key="qualification.id" class="qualification-item">
-                <button
-                  type="button"
-                  class="qualification-thumbnail"
-                  :disabled="!qualification.documentUrl"
-                  :aria-label="qualification.documentUrl ? `查看${qualificationName(qualification.qualificationType)}大图` : `${qualificationName(qualification.qualificationType)}未上传文件`"
-                  @click="previewQualification(qualification)"
-                >
-                  <img
-                    v-if="qualificationAssets[qualificationKey(qualification)]?.kind === 'image'"
-                    :src="qualificationAssets[qualificationKey(qualification)]?.url"
-                    :alt="`${qualificationName(qualification.qualificationType)}缩略图`"
-                  />
-                  <span v-else-if="qualificationAssets[qualificationKey(qualification)]?.kind === 'pdf'" class="thumbnail-placeholder">
-                    <FileText :size="24" />
-                    <small>PDF</small>
-                  </span>
-                  <span v-else-if="qualificationAssetLoadingIds.includes(qualificationKey(qualification))" class="thumbnail-placeholder" role="status">
-                    <LoaderCircle :size="22" class="is-spinning" />
-                    <small>加载中</small>
-                  </span>
-                  <span v-else-if="qualificationAssetErrorIds.includes(qualificationKey(qualification))" class="thumbnail-placeholder is-error">
-                    <ImageOff :size="22" />
-                    <small>重新加载</small>
-                  </span>
-                  <span v-else class="thumbnail-placeholder">
-                    <FileText :size="22" />
-                    <small>未上传</small>
-                  </span>
-                  <span v-if="qualificationAssets[qualificationKey(qualification)]" class="thumbnail-action" aria-hidden="true"><Eye :size="15" /></span>
-                </button>
-                <div class="qualification-copy">
-                  <div><strong>{{ qualificationName(qualification.qualificationType) }}</strong><span class="status-badge" :class="qualificationStatus(qualification.status).tone"><i />{{ qualificationStatus(qualification.status).label }}</span></div>
-                  <p>信用代码：{{ displayText(qualification.certificateNo) }}</p>
-                  <p v-if="qualification.reviewComment">审核意见：{{ qualification.reviewComment }}</p>
-                </div>
-              </article>
-            </div>
-          </div>
-          <p class="detail-note">请核对企业名称、统一社会信用代码和营业执照内容。通过后企业获得下单资格；驳回时必须说明原因。</p>
-        </section>
-      </template>
-      <template #footer>
-        <div class="drawer-footer">
-          <el-button @click="detailOpen = false">关闭</el-button>
-          <el-button v-if="selectedReview && access.can('platform:customer:reject')" type="danger" plain @click="openDecision(selectedReview, 'reject')">驳回</el-button>
-          <el-button v-if="selectedReview && access.can('platform:customer:approve')" type="success" @click="openDecision(selectedReview, 'approve')">审核通过</el-button>
-        </div>
-      </template>
-    </el-drawer>
-
-    <el-dialog v-model="previewOpen" :title="previewName || '查看资质文件'" width="min(860px, calc(100vw - 28px))" class="qualification-preview-dialog" destroy-on-close>
-      <div class="qualification-preview">
-        <img v-if="previewUrl && previewKind === 'image'" :src="previewUrl" :alt="`${previewName}预览`" />
-        <iframe v-else-if="previewUrl && previewKind === 'pdf'" :src="previewUrl" :title="`${previewName} PDF 预览`" />
-      </div>
-      <template #footer><el-button @click="previewOpen = false">关闭预览</el-button></template>
-    </el-dialog>
-
-    <el-dialog v-model="decisionOpen" :title="decision.type === 'approve' ? '确认审核通过' : '确认驳回企业资料'" width="min(520px, calc(100vw - 28px))" class="review-decision-dialog" :close-on-click-modal="false">
-      <div v-if="selectedReview" class="decision-summary">
-        <strong>{{ displayText(selectedReview.tenantName) }}</strong>
-        <span>审核单 {{ selectedReview.id }}</span>
-      </div>
-      <el-form ref="decisionFormRef" :model="decision" :rules="decisionRules" label-position="top">
-        <el-form-item prop="comment" :label="decision.type === 'approve' ? '审核说明' : '驳回原因'" required>
-          <el-input v-model="decision.comment" type="textarea" :rows="4" maxlength="300" show-word-limit :placeholder="decision.type === 'approve' ? '请填写审核通过说明' : '请明确说明需要企业修改的内容'" />
-        </el-form-item>
-      </el-form>
-      <template #footer>
-        <div class="drawer-footer">
-          <el-button :disabled="submitting" @click="decisionOpen = false">取消</el-button>
-          <el-button :type="decision.type === 'approve' ? 'success' : 'danger'" :loading="submitting" @click="submitDecision">{{ decision.type === 'approve' ? '确认通过' : '确认驳回' }}</el-button>
-        </div>
-      </template>
-    </el-dialog>
-  </div>
-</template>
-
-<style scoped>
-.review-error { display: grid; grid-template-columns: auto minmax(0, 1fr) auto; align-items: center; gap: 14px; padding: 18px 20px; border-color: #fecdca; background: #fffafa; color: #b42318; }
-.review-error strong { color: #7a271a; font-size: 13px; }
-.review-error p { margin: 4px 0 0; color: #b54708; font-size: 12px; }
-.qualification-state { min-height: 112px; }
-.qualification-loading { display: grid; min-height: 112px; place-items: center; color: var(--cc-muted); font-size: 12px; }
-.qualification-error { display: flex; min-width: 0; align-items: center; justify-content: space-between; gap: 16px; padding: 14px; border: 1px solid #fecdca; border-radius: 6px; background: #fffafa; }
-.qualification-error strong { color: #7a271a; font-size: 13px; }
-.qualification-error p { margin: 4px 0 0; color: #b54708; font-size: 12px; overflow-wrap: anywhere; }
-.qualification-list { display: flex; flex-direction: column; gap: 10px; }
-.qualification-item { display: grid; min-width: 0; grid-template-columns: 112px minmax(0, 1fr); align-items: center; gap: 14px; padding: 12px; border: 1px solid var(--cc-border); border-radius: 6px; background: #fff; }
-.qualification-thumbnail { position: relative; display: grid; width: 112px; height: 84px; place-items: center; overflow: hidden; padding: 0; border: 1px solid #d5dce7; border-radius: 6px; background: #f8fafc; color: #475467; cursor: zoom-in; }
-.qualification-thumbnail:not(:disabled):hover { border-color: var(--cc-primary); }
-.qualification-thumbnail:focus-visible { outline: 2px solid var(--cc-primary); outline-offset: 2px; }
-.qualification-thumbnail:disabled { cursor: not-allowed; opacity: .72; }
-.qualification-thumbnail > img { display: block; width: 100%; height: 100%; object-fit: contain; background: #fff; }
-.thumbnail-placeholder { display: flex; align-items: center; justify-content: center; flex-direction: column; gap: 5px; color: #667085; }
-.thumbnail-placeholder small { font-size: 10px; line-height: 1; }
-.thumbnail-placeholder.is-error { color: #b42318; }
-.thumbnail-action { position: absolute; top: 6px; right: 6px; display: grid; width: 28px; height: 28px; place-items: center; border-radius: 50%; background: rgba(23, 32, 51, .78); color: #fff; }
-.is-spinning { animation: thumbnail-spin 1s linear infinite; }
-.qualification-copy { min-width: 0; }
-.qualification-copy > div { display: flex; min-width: 0; flex-wrap: wrap; align-items: center; gap: 8px; }
-.qualification-copy strong { overflow-wrap: anywhere; font-size: 13px; }
-.qualification-copy p { margin: 5px 0 0; color: var(--cc-muted); font-size: 11px; line-height: 1.55; overflow-wrap: anywhere; }
-.qualification-preview { display: grid; max-height: min(70vh, 760px); min-height: 240px; place-items: center; overflow: auto; border: 1px solid var(--cc-border); border-radius: 6px; background: #f8fafc; }
-.qualification-preview img { display: block; max-width: 100%; height: auto; }
-.qualification-preview iframe { width: 100%; min-height: min(68vh, 720px); border: 0; background: #fff; }
-.decision-summary { display: flex; align-items: center; justify-content: space-between; gap: 12px; margin-bottom: 18px; padding: 12px 14px; border-radius: 8px; background: #f8fafc; }
-.decision-summary > * { min-width: 0; overflow-wrap: anywhere; }
-.decision-summary strong { color: #172033; font-size: 13px; }
-.decision-summary span { color: var(--cc-muted); font-size: 11px; }
-:deep(.review-decision-dialog .el-form-item__error) { line-height: 1.45; overflow-wrap: anywhere; }
-@media (max-width: 720px) {
-  .review-error { grid-template-columns: auto minmax(0, 1fr); }
-  .review-error .el-button { grid-column: 1 / -1; min-height: 44px; }
-  .qualification-error { align-items: stretch; flex-direction: column; }
-  .qualification-error .el-button { min-height: 44px; }
-  .decision-summary { align-items: flex-start; flex-direction: column; }
-}
-@media (max-width: 420px) {
-  .qualification-item { grid-template-columns: 96px minmax(0, 1fr); gap: 12px; padding: 10px; }
-  .qualification-thumbnail { width: 96px; height: 76px; }
-}
-@keyframes thumbnail-spin { to { transform: rotate(360deg); } }
-@media (prefers-reduced-motion: reduce) {
-  .is-spinning { animation: none; }
-}
-</style>

src/modules/customers/routes.ts

@@ -5,12 +5,12 @@ export const customerRoutes = [
     path: 'customers',
     name: 'customers',
     component: () => import('@/modules/customers/pages/CustomersView.vue'),
-    meta: { title: '客户管理', description: '维护客户企业资料、合作状态和注册审核', permission: 'platform:customer:list' },
+    meta: { title: '客户管理', description: '维护客户企业资料、合作状态和注册审核', permission: 'platform:customer:list', permissionAnyOf: ['platform:customer:review'] },
   },
   {
     path: 'customers/reviews',
     name: 'enterprise-reviews',
-    component: () => import('@/modules/customers/pages/EnterpriseReviewsView.vue'),
+    redirect: '/customers',
-    meta: { title: '企业审核', description: '核验企业资质并维护客户下单资格', permission: 'platform:customer:review' },
+    meta: { title: '客户管理', description: '企业审核已合并到客户列表', permission: 'platform:customer:list', permissionAnyOf: ['platform:customer:review'] },
   },
 ] satisfies RouteRecordRaw[]

src/modules/iam/api/platformIam.test.ts

@@ -1,6 +1,7 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 import { http } from '@/shared/api/http'
 import {
+  approveEnterpriseReview,
   assignPlatformInternalUserRoles,
   changePlatformManagedUserStatus,
   changePlatformInternalUserStatus,
@@ -311,6 +312,20 @@ describe('platform IAM roles', () => {
     expect(http.post).toHaveBeenNthCalledWith(2, '/platform/v1/iam/tenants/8/submit-review', {})
   })
 
+  it('preserves long review identifiers and returns one-time administrator credentials', async () => {
+    const reviewId = '190000000000000001'
+    const approval = {
+      tenantId: '190000000000000099',
+      administratorCreated: true,
+      administratorUsername: 'merchant_owner',
+      temporaryPassword: 'Temporary#2026',
+    }
+    vi.mocked(http.post).mockResolvedValue({ code: '200', message: 'success', data: approval })
+
+    await expect(approveEnterpriseReview(reviewId, '资料完整')).resolves.toEqual(approval)
+    expect(http.post).toHaveBeenCalledWith(`/platform/v1/iam/reviews/${reviewId}/approve`, { comment: '资料完整' })
+  })
+
   it('downloads a qualification with the platform file endpoint and a safe filename', async () => {
     const blob = new Blob(['image'], { type: 'image/png' })
     vi.mocked(http.get).mockResolvedValue(blob)

src/modules/iam/api/platformIam.ts

@@ -4,12 +4,12 @@ import type { PlatformPermissionResource } from '@/shared/types/platformPermissi
 export type { PlatformPermissionResource } from '@/shared/types/platformPermission'
 
 export interface EnterpriseReview {
-  id: number
+  id: number | string
-  tenantId: number
+  tenantId: number | string
   status: 'PENDING' | 'APPROVED' | 'REJECTED'
   tenantName?: string | null
   tenantCode?: string | null
-  qualificationId?: number | null
+  qualificationId?: number | string | null
   qualificationType?: string | null
   certificateNo?: string | null
   documentUrl?: string | null
@@ -95,7 +95,7 @@ export interface PlatformTenantQualification {
   qualificationType: 'BUSINESS_LICENSE' | string
   certificateNo: string | null
   documentUrl: string
-  status: 'PENDING' | 'APPROVED' | 'REJECTED'
+  status: 'PENDING' | 'APPROVED' | 'REJECTED' | 'SUPERSEDED'
   reviewComment: string | null
   validTo?: string | null
 }
@@ -110,6 +110,13 @@ export interface PlatformQualificationUploadResponse {
   replacedDocumentUrl?: string | null
 }
 
+export interface EnterpriseApprovalResponse {
+  tenantId: number | string
+  administratorCreated: boolean
+  administratorUsername: string | null
+  temporaryPassword: string | null
+}
+
 export interface PlatformRoleResource {
   id: number | string
   tenantId: number | string
@@ -437,10 +444,10 @@ export function resetPlatformManagedUserPassword(membershipId: number | string,
   return putData<void>(`/platform/v1/iam/users/${membershipId}/password`, { newPassword })
 }
 
-export function approveEnterpriseReview(reviewId: number, comment: string) {
+export function approveEnterpriseReview(reviewId: number | string, comment: string) {
-  return postData<unknown>(`/platform/v1/iam/reviews/${reviewId}/approve`, { comment })
+  return postData<EnterpriseApprovalResponse>(`/platform/v1/iam/reviews/${reviewId}/approve`, { comment })
 }
 
-export function rejectEnterpriseReview(reviewId: number, comment: string) {
+export function rejectEnterpriseReview(reviewId: number | string, comment: string) {
-  return postData<unknown>(`/platform/v1/iam/reviews/${reviewId}/reject`, { comment })
+  return postData<void>(`/platform/v1/iam/reviews/${reviewId}/reject`, { comment })
 }