feat(ops): add global test whitelist and exclude test accounts from settlement

Unify product/store visibility on HQ whitelist, mark isTest snapshots, and fix SUPER_ADMIN access for the new module.

server/dukang-api/src/modules/store/store.service.ts

@@ -16,6 +16,10 @@ import { PartnerCityService } from '../city-scope/partner-city.service';
 import { AuthService } from '../iam/auth.service';
 import { StoreCategoryService } from './store-category.service';
 import { TencentLbsProvider } from '../../integrations/map/tencent-lbs.provider';
+import {
+  TestWhitelistService,
+  normalizeTestPhone,
+} from '../../common/test-whitelist/test-whitelist.service';
 
 function haversineMeters(lat1: number, lng1: number, lat2: number, lng2: number): number {
   const toRad = (d: number) => (d * Math.PI) / 180;
@@ -43,10 +47,6 @@ export type StoreViewer = {
   bypassWhitelist?: boolean;
 };
 
-function normalizePhone(phone: string | null | undefined): string {
-  return (phone || '').replace(/\D/g, '').trim();
-}
-
 function parseOptionalCoord(value: unknown, kind: 'lat' | 'lng' = 'lng'): number | null {
   if (value == null || value === '') return null;
   const n = typeof value === 'number' ? value : Number(value);
@@ -67,8 +67,16 @@ export class StoreService {
     private readonly authService: AuthService,
     private readonly storeCategoryService: StoreCategoryService,
     private readonly tencentLbs: TencentLbsProvider,
+    private readonly testWhitelist: TestWhitelistService,
   ) {}
 
+  private async whitelistPhoneSet(): Promise<Set<string>> {
+    const rows = await this.prisma.commonTestWhitelistPhone.findMany({
+      select: { phone: true },
+    });
+    return new Set(rows.map((r) => normalizeTestPhone(r.phone)).filter(Boolean));
+  }
+
   private storeAddressText(store: {
     province?: string | null;
     cityName?: string | null;
@@ -116,17 +124,16 @@ export class StoreService {
   }
 
   isVisibleToViewer(
-    store: {
-      visibilityWhitelistEnabled: boolean;
-      visibilityPhones: Array<{ phone: string }>;
-    },
+    store: { visibilityWhitelistEnabled: boolean },
     viewer?: StoreViewer,
+    whitelistPhones?: Set<string>,
   ): boolean {
     if (viewer?.bypassWhitelist) return true;
     if (!store.visibilityWhitelistEnabled) return true;
-    const phone = normalizePhone(viewer?.phone);
+    const phone = normalizeTestPhone(viewer?.phone);
     if (!phone) return false;
-    return store.visibilityPhones.some((row) => normalizePhone(row.phone) === phone);
+    if (whitelistPhones) return whitelistPhones.has(phone);
+    return false;
   }
 
   async listOpenStores(
@@ -145,12 +152,14 @@ export class StoreService {
       include: {
         category: true,
         coverResource: true,
-        visibilityPhones: { select: { phone: true } },
       },
       orderBy: { createdAt: 'desc' },
     });
 
-    const visible = stores.filter((s) => this.isVisibleToViewer(s, viewer));
+    const whitelistPhones = stores.some((s) => s.visibilityWhitelistEnabled)
+      ? await this.whitelistPhoneSet()
+      : new Set<string>();
+    const visible = stores.filter((s) => this.isVisibleToViewer(s, viewer, whitelistPhones));
 
     const hasUser =
       userLat != null &&
@@ -167,7 +176,7 @@ export class StoreService {
     const items: StoreListItem[] = [];
     for (const store of visible) {
       const coords = await this.ensureStoreCoordinates(store);
-      const { visibilityPhones: _phones, visibilityWhitelistEnabled: _wl, ...rest } = store;
+      const { visibilityWhitelistEnabled: _wl, ...rest } = store;
       const mapped = mapStoreCompat({
         ...rest,
         latitude: coords?.latitude ?? store.latitude,
@@ -197,10 +206,12 @@ export class StoreService {
       include: {
         category: true,
         coverResource: true,
-        visibilityPhones: { select: { phone: true } },
       },
     });
-    if (!store || !this.isVisibleToViewer(store, viewer)) {
+    const whitelistPhones = store?.visibilityWhitelistEnabled
+      ? await this.whitelistPhoneSet()
+      : new Set<string>();
+    if (!store || !this.isVisibleToViewer(store, viewer, whitelistPhones)) {
       throw new NotFoundException('门店不存在');
     }
     const coords = await this.ensureStoreCoordinates(store);
@@ -212,7 +223,7 @@ export class StoreService {
       where: { storeId: id },
       orderBy: [{ sortOrder: 'asc' }, { id: 'asc' }],
     });
-    const { visibilityPhones: _phones, visibilityWhitelistEnabled: _wl, ...rest } = store;
+    const { visibilityWhitelistEnabled: _wl, ...rest } = store;
     return serializeBigInt(
       mapStoreCompat({
         ...rest,