```

feat: 添加飞书集成和审计API密钥认证

- 在数据库配置中添加飞书模型导入
- 添加审计API密钥配置项和认证中间件
- 实现飞书事件重复处理防止机制
- 为审批路由添加API密钥认证
- 优化AI适配器错误处理并添加JSON解析异常捕获
- 更新测试用例以包含新的认证和事件处理逻辑
```

app/modules/approvals/routes.py

@@ -23,12 +23,19 @@ def list_approvals(
     status: str | None = None,
     limit: int = Query(default=100, ge=1, le=500),
     db: Session = Depends(get_db),
+    principal: ApiPrincipal = Depends(require_approval_api_key),
 ):
+    _ = principal
     return ApprovalService(db).list(status_filter=status, limit=limit)
 
 
 @router.get("/{ticket_id}", response_model=ApprovalRead)
-def get_approval(ticket_id: str, db: Session = Depends(get_db)):
+def get_approval(
+    ticket_id: str,
+    db: Session = Depends(get_db),
+    principal: ApiPrincipal = Depends(require_approval_api_key),
+):
+    _ = principal
     return ApprovalService(db).get_by_ticket(ticket_id)
 
 

app/modules/approvals/service.py

@@ -5,7 +5,7 @@ from decimal import Decimal
 from typing import Any
 
 from fastapi import HTTPException, status
-from sqlalchemy import select
+from sqlalchemy import select, update
 from sqlalchemy.orm import Session
 
 from app.core.pagination import bounded_limit
@@ -135,11 +135,29 @@ class ApprovalService:
                 status_code=status.HTTP_403_FORBIDDEN,
                 detail=ApprovalErrorDetail.PAYLOAD_MISMATCH,
             )
-        ticket.status = ApprovalStatus.USED
-        ticket.used_by = actor
-        ticket.used_at = utc_now()
+        used_at = utc_now()
+        values: dict[str, Any] = {
+            "status": ApprovalStatus.USED,
+            "used_by": actor,
+            "used_at": used_at,
+        }
         if record_id is not None and not ticket.record_id:
-            ticket.record_id = str(record_id)
+            values["record_id"] = str(record_id)
+        result = self.db.execute(
+            update(ApprovalRequest)
+            .where(
+                ApprovalRequest.ticket_id == ticket_id,
+                ApprovalRequest.status == ApprovalStatus.APPROVED,
+            )
+            .values(**values)
+        )
+        if result.rowcount != 1:
+            raise HTTPException(
+                status_code=status.HTTP_403_FORBIDDEN,
+                detail=ApprovalErrorDetail.NOT_APPROVED,
+            )
+        for key, value in values.items():
+            setattr(ticket, key, value)
         return ticket
 
     def is_approved_for(