更新

app/src/doctor_workstation/services/repository.py

@@ -712,10 +712,10 @@ class DoctorRepository(Protocol):
     def generate_order_qrcode(self, order_no: str) -> dict[str, Any]:
         """Generate the payment mini-program QR code for a generic order."""
 
-    def get_call_ticket(self, patient_id: int, diagnosis_id: int) -> CallTicket:
+    def get_call_ticket(self, patient_id: int, diagnosis_id: int, *, appointment_id: int = 0) -> CallTicket:
         """Return short-lived call credentials."""
 
-    def start_call(self, diagnosis_id: int, patient_id: int, *, call_type: int = 2) -> Any:
+    def start_call(self, diagnosis_id: int, patient_id: int, *, call_type: int = 2, appointment_id: int = 0) -> Any:
         """Create a call record."""
 
     def end_call(
@@ -2629,22 +2629,51 @@ class RemoteDoctorRepository:
             )
         return result
 
-    def get_call_ticket(self, patient_id: int, diagnosis_id: int) -> CallTicket:
+    def get_call_ticket(self, patient_id: int, diagnosis_id: int, *, appointment_id: int = 0) -> CallTicket:
         """Obtain short-lived Tencent credentials for a consultation call."""
 
-        result = _require_mapping(
-            self.client.post(
-                "tcm.diagnosis/getCallSignature",
-                {"patient_id": patient_id, "diagnosis_id": diagnosis_id},
+        result = _require_mapping(
+            self.client.post(
+                "tcm.diagnosis/getCallSignature",
+                {"patient_id": patient_id, "diagnosis_id": diagnosis_id, "appointment_id": appointment_id},
             ),
-            "tcm.diagnosis/getCallSignature",
-        )
-        ticket = CallTicket.from_dict(result)
+            "tcm.diagnosis/getCallSignature",
+        )
+        policy_fields = {
+            "appointment_id", "appointmentId", "appointment_type", "appointment_type_desc",
+            "can_video_call", "can_audio_call", "call_disabled_reason",
+        }
+        if appointment_id > 0 and not policy_fields.intersection(result):
+            # Older signature endpoints authenticate the patient/diagnosis but
+            # do not echo the appointment. Keep the requested chat context;
+            # never treat it as server authorization for an audio/video call.
+            if (
+                str(result.get("diagnosis_id", "")).strip() != str(diagnosis_id)
+                or str(result.get("patient_id", "")).strip() != str(patient_id)
+                or result.get("patientUserId") != f"patient_{patient_id}"
+            ):
+                raise ValueError("聊天凭证与当前患者或诊单不匹配，请重新打开聊天窗口。")
+            result = dict(result)
+            result.update(
+                appointment_id=appointment_id,
+                can_video_call=False,
+                can_audio_call=False,
+                call_disabled_reason="暂未获取到本次挂号的通话权限，仍可图文聊天",
+            )
+        if appointment_id > 0:
+            returned_id = result.get("appointment_id")
+            if (
+                isinstance(returned_id, bool)
+                or not isinstance(returned_id, (int, str))
+                or str(returned_id).strip() != str(appointment_id)
+            ):
+                raise ValueError("通话凭证与本次挂号不匹配，请重新打开聊天窗口。")
+        ticket = CallTicket.from_dict(result)
         if ticket.diagnosis_id is None:
             ticket.diagnosis_id = diagnosis_id
         return ticket
 
-    def start_call(self, diagnosis_id: int, patient_id: int, *, call_type: int = 2) -> Any:
+    def start_call(self, diagnosis_id: int, patient_id: int, *, call_type: int = 2, appointment_id: int = 0) -> Any:
         """Create the server-side call record before ringing participants."""
 
         payload = self.client.post(
@@ -2652,7 +2681,8 @@ class RemoteDoctorRepository:
             {
                 "diagnosis_id": diagnosis_id,
                 "patient_id": patient_id,
-                "call_type": call_type,
+                "call_type": call_type,
+                "appointment_id": appointment_id,
             },
         )
         if not isinstance(payload, Mapping):