feat: 为核心业务 API 全面挂载审计日志装饰器

inventory-backend/app/api/v1/inbound/product.py

@@ -1,7 +1,7 @@
 # inventory-backend/app/api/v1/inbound/product.py
 from flask import Blueprint, request, jsonify
 from app.services.inbound.product_service import ProductInboundService
-from app.utils.decorators import permission_required
+from app.utils.decorators import permission_required, audit_log
 import traceback
 
 # === 这一行非常关键，绝对不能丢！===
@@ -123,6 +123,11 @@ def get_list():
 
 @inbound_product_bp.route('/submit', methods=['POST'])
 @permission_required('inbound_product:operation')
+@audit_log(
+    module='成品入库',
+    action='新增',
+    get_target_name_fn=lambda: request.get_json().get('material_name') if request.get_json() else None
+)
 def submit():
     try:
         data = request.get_json()
@@ -141,6 +146,12 @@ def submit():
 
 @inbound_product_bp.route('/<int:id>', methods=['PUT'])
 @permission_required('inbound_product:operation')
+@audit_log(
+    module='成品入库',
+    action='修改',
+    get_target_id_fn=lambda: request.view_args.get('id'),
+    get_target_name_fn=lambda: request.get_json().get('material_name') if request.get_json() else None
+)
 def update(id):
     try:
         data = request.get_json()
@@ -158,6 +169,11 @@ def update(id):
 
 @inbound_product_bp.route('/<int:id>', methods=['DELETE'])
 @permission_required('inbound_product:operation')
+@audit_log(
+    module='成品入库',
+    action='删除',
+    get_target_id_fn=lambda: request.view_args.get('id')
+)
 def delete(id):
     try:
         ProductInboundService.delete_inbound(id)