f

app/main/api/desc/admin/order.api

@@ -59,6 +59,10 @@ type (
 		PayTimeEnd      string  `form:"pay_time_end,optional"` // 支付时间结束
 		RefundTimeStart string  `form:"refund_time_start,optional"` // 退款时间开始
 		RefundTimeEnd   string  `form:"refund_time_end,optional"` // 退款时间结束
+		// 被查询人（与 query_subject_index 密文一致，多条件为 AND）
+		QuerySubjectName   string `form:"query_subject_name,optional"`   // 姓名（明文，服务端转密文查询）
+		QuerySubjectMobile string `form:"query_subject_mobile,optional"` // 手机号
+		QuerySubjectIdCard  string `form:"query_subject_id_card,optional"`  // 身份证
 	}
 	// 列表响应
 	AdminGetOrderListResp {

app/main/api/internal/handler/routes.go

@@ -79,6 +79,11 @@ func RegisterHandlers(server *rest.Server, serverCtx *svc.ServiceContext) {
 					Path:    "/list",
 					Handler: admin_agent.AdminGetAgentListHandler(serverCtx),
 				},
+				{
+					Method:  http.MethodPost,
+					Path:    "/mobile/update",
+					Handler: admin_agent.AdminUpdateAgentMobileHandler(serverCtx),
+				},
 				{
 					Method:  http.MethodGet,
 					Path:    "/order/list",
@@ -94,11 +99,6 @@ func RegisterHandlers(server *rest.Server, serverCtx *svc.ServiceContext) {
 					Path:    "/product_config/update",
 					Handler: admin_agent.AdminUpdateAgentProductConfigHandler(serverCtx),
 				},
-				{
-					Method:  http.MethodPost,
-					Path:    "/mobile/update",
-					Handler: admin_agent.AdminUpdateAgentMobileHandler(serverCtx),
-				},
 				{
 					Method:  http.MethodGet,
 					Path:    "/real_name/list",

app/main/api/internal/logic/admin_order/admingetorderlistlogic.go

@@ -2,12 +2,16 @@ package admin_order
 
 import (
 	"context"
+	"encoding/hex"
+	"strings"
 	"sync"
 
 	"ycc-server/app/main/api/internal/svc"
 	"ycc-server/app/main/api/internal/types"
 	"ycc-server/app/main/model"
+	"ycc-server/common/globalkey"
 	"ycc-server/common/xerr"
+	"ycc-server/pkg/lzkit/crypto"
 
 	"github.com/Masterminds/squirrel"
 	"github.com/pkg/errors"
@@ -72,6 +76,44 @@ func (l *AdminGetOrderListLogic) AdminGetOrderList(req *types.AdminGetOrderListR
 	if req.RefundTimeEnd != "" {
 		builder = builder.Where("refund_time <= ?", req.RefundTimeEnd)
 	}
+	if req.QuerySubjectName != "" || req.QuerySubjectMobile != "" || req.QuerySubjectIdCard != "" {
+		key, decodeErr := hex.DecodeString(l.svcCtx.Config.Encrypt.SecretKey)
+		if decodeErr != nil {
+			return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR),
+				"AdminGetOrderList, AES密钥解析失败 err: %v", decodeErr)
+		}
+		conds := []string{"del_state = ?"}
+		args := []interface{}{globalkey.DelStateNo}
+		if req.QuerySubjectName != "" {
+			enc, _, encErr := crypto.EncryptDeterministicOptional(req.QuerySubjectName, key)
+			if encErr != nil {
+				return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR),
+					"AdminGetOrderList, 加密筛选姓名失败 err: %v", encErr)
+			}
+			conds = append(conds, "enc_real_name = ?")
+			args = append(args, enc)
+		}
+		if req.QuerySubjectMobile != "" {
+			enc, encErr := crypto.EncryptMobile(req.QuerySubjectMobile, l.svcCtx.Config.Encrypt.SecretKey)
+			if encErr != nil {
+				return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR),
+					"AdminGetOrderList, 加密筛选手机号失败 err: %v", encErr)
+			}
+			conds = append(conds, "enc_mobile = ?")
+			args = append(args, enc)
+		}
+		if req.QuerySubjectIdCard != "" {
+			enc, encErr := crypto.EncryptIDCard(req.QuerySubjectIdCard, key)
+			if encErr != nil {
+				return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR),
+					"AdminGetOrderList, 加密筛选身份证失败 err: %v", encErr)
+			}
+			conds = append(conds, "enc_id_card = ?")
+			args = append(args, enc)
+		}
+		subSQL := "id IN (SELECT order_id FROM query_subject_index WHERE " + strings.Join(conds, " AND ") + ")"
+		builder = builder.Where(subSQL, args...)
+	}
 
 	// 并发获取总数和列表
 	var total int64

app/main/api/internal/pkg/querysubject/extract.go

@@ -0,0 +1,60 @@
+package querysubject
+
+import (
+	"strings"
+)
+
+func isNameField(key string) bool {
+	key = strings.ToLower(key)
+	if isPhoneField(key) || isIDCardField(key) {
+		return false
+	}
+	return strings.Contains(key, "name") || strings.Contains(key, "姓名") ||
+		strings.Contains(key, "owner") || strings.Contains(key, "main")
+}
+
+func isIDCardField(key string) bool {
+	key = strings.ToLower(key)
+	return strings.Contains(key, "idcard") || strings.Contains(key, "id_card") ||
+		strings.Contains(key, "身份证") || strings.Contains(key, "证件号")
+}
+
+func isPhoneField(key string) bool {
+	key = strings.ToLower(key)
+	return strings.Contains(key, "phone") || strings.Contains(key, "mobile") ||
+		strings.Contains(key, "手机") || strings.Contains(key, "电话")
+}
+
+// ExtractPlainSubject 从解密后的 query 参数 map 中提取被查询人姓名、手机、身份证（首次匹配优先）
+func ExtractPlainSubject(m map[string]interface{}) (name, mobile, idCard string) {
+	walkMap(m, &name, &mobile, &idCard)
+	return name, mobile, idCard
+}
+
+func walkMap(m map[string]interface{}, name, mobile, idCard *string) {
+	for k, v := range m {
+		switch val := v.(type) {
+		case string:
+			assignSubjectField(k, val, name, mobile, idCard)
+		case map[string]interface{}:
+			walkMap(val, name, mobile, idCard)
+		}
+	}
+}
+
+func assignSubjectField(key, val string, name, mobile, idCard *string) {
+	if val == "" {
+		return
+	}
+	if *idCard == "" && isIDCardField(key) {
+		*idCard = val
+		return
+	}
+	if *mobile == "" && isPhoneField(key) {
+		*mobile = val
+		return
+	}
+	if *name == "" && isNameField(key) {
+		*name = val
+	}
+}

app/main/api/internal/queue/paySuccessNotify.go

@@ -2,15 +2,18 @@ package queue
 
 import (
 	"context"
+	"database/sql"
 	"encoding/hex"
 	"encoding/json"
 	"fmt"
 	"os"
 	"regexp"
 	"strings"
+	"ycc-server/app/main/api/internal/pkg/querysubject"
 	"ycc-server/app/main/api/internal/svc"
 	"ycc-server/app/main/api/internal/types"
 	"ycc-server/app/main/model"
+	"ycc-server/common/globalkey"
 	"ycc-server/pkg/lzkit/crypto"
 	"ycc-server/pkg/lzkit/lzUtils"
 
@@ -73,6 +76,11 @@ func (l *PaySuccessNotifyUserHandler) ProcessTask(ctx context.Context, t *asynq.
 		return fmt.Errorf("解密参数失败: %+v", aesdecryptErr)
 	}
 
+	var userInfo map[string]interface{}
+	if err := json.Unmarshal(decryptData, &userInfo); err != nil {
+		return fmt.Errorf("解析用户信息失败: %+v", err)
+	}
+
 	query := &model.Query{
 		Id:          uuid.NewString(),
 		OrderId:     order.Id,
@@ -86,6 +94,10 @@ func (l *PaySuccessNotifyUserHandler) ProcessTask(ctx context.Context, t *asynq.
 		return fmt.Errorf("保存查询失败: %+v", insertQueryErr)
 	}
 
+	if err := l.insertQuerySubjectIndex(ctx, query.Id, order.Id, userInfo, key); err != nil {
+		logx.Errorf("写入被查询人密文索引失败 order=%s query=%s err=%v", order.Id, query.Id, err)
+	}
+
 	// 插入后使用预生成的查询ID
 	queryId := query.Id
 
@@ -95,12 +107,6 @@ func (l *PaySuccessNotifyUserHandler) ProcessTask(ctx context.Context, t *asynq.
 		return fmt.Errorf("获取插入后的查询记录失败: %+v", err)
 	}
 
-	// 解析解密后的参数获取用户信息
-	var userInfo map[string]interface{}
-	if err := json.Unmarshal(decryptData, &userInfo); err != nil {
-		return fmt.Errorf("解析用户信息失败: %+v", err)
-	}
-
 	// 生成授权书
 	authDoc, err := l.svcCtx.AuthorizationService.GenerateAuthorizationDocument(
 		ctx, order.UserId, order.Id, queryId, userInfo,
@@ -262,6 +268,42 @@ func (l *PaySuccessNotifyUserHandler) handleError(ctx context.Context, err error
 	return asynq.SkipRetry
 }
 
+func (l *PaySuccessNotifyUserHandler) insertQuerySubjectIndex(
+	ctx context.Context,
+	queryId, orderId string,
+	userInfo map[string]interface{},
+	aesKey []byte,
+) error {
+	name, mobile, idCard := querysubject.ExtractPlainSubject(userInfo)
+	if name == "" && mobile == "" && idCard == "" {
+		return nil
+	}
+	row := &model.QuerySubjectIndex{
+		Id:       uuid.New().String(),
+		QueryId:  queryId,
+		OrderId:  orderId,
+		DelState: globalkey.DelStateNo,
+		Version:  0,
+	}
+	if enc, ok, err := crypto.EncryptDeterministicOptional(name, aesKey); err != nil {
+		return err
+	} else if ok {
+		row.EncRealName = sql.NullString{String: enc, Valid: true}
+	}
+	if enc, ok, err := crypto.EncryptDeterministicOptional(mobile, aesKey); err != nil {
+		return err
+	} else if ok {
+		row.EncMobile = sql.NullString{String: enc, Valid: true}
+	}
+	if enc, ok, err := crypto.EncryptDeterministicOptional(idCard, aesKey); err != nil {
+		return err
+	} else if ok {
+		row.EncIdCard = sql.NullString{String: enc, Valid: true}
+	}
+	_, err := l.svcCtx.QuerySubjectIndexModel.Insert(ctx, row)
+	return err
+}
+
 // desensitizeParams 对敏感数据进行脱敏处理
 func (l *PaySuccessNotifyUserHandler) desensitizeParams(data []byte) ([]byte, error) {
 	// 解析JSON数据到map

app/main/api/internal/svc/servicecontext.go

@@ -47,6 +47,7 @@ type ServiceContext struct {
 	OrderModel              model.OrderModel
 	OrderRefundModel        model.OrderRefundModel
 	QueryModel              model.QueryModel
+	QuerySubjectIndexModel  model.QuerySubjectIndexModel
 	QueryCleanupLogModel    model.QueryCleanupLogModel
 	QueryCleanupDetailModel model.QueryCleanupDetailModel
 	QueryCleanupConfigModel model.QueryCleanupConfigModel
@@ -143,6 +144,7 @@ func NewServiceContext(c config.Config) *ServiceContext {
 	// ============================== 订单相关模型 ==============================
 	orderModel := model.NewOrderModel(db, cacheConf)
 	queryModel := model.NewQueryModel(db, cacheConf)
+	querySubjectIndexModel := model.NewQuerySubjectIndexModel(db, cacheConf)
 	orderRefundModel := model.NewOrderRefundModel(db, cacheConf)
 	queryCleanupLogModel := model.NewQueryCleanupLogModel(db, cacheConf)
 	queryCleanupDetailModel := model.NewQueryCleanupDetailModel(db, cacheConf)
@@ -261,6 +263,7 @@ func NewServiceContext(c config.Config) *ServiceContext {
 		// 订单相关模型
 		OrderModel:              orderModel,
 		QueryModel:              queryModel,
+		QuerySubjectIndexModel:  querySubjectIndexModel,
 		OrderRefundModel:        orderRefundModel,
 		QueryCleanupLogModel:    queryCleanupLogModel,
 		QueryCleanupDetailModel: queryCleanupDetailModel,

app/main/api/internal/types/types.go

@@ -559,21 +559,24 @@ type AdminGetOrderDetailResp struct {
 }
 
 type AdminGetOrderListReq struct {
-	Page            int64   `form:"page,default=1"`             // 页码
+	Page               int64   `form:"page,default=1"`                 // 页码
-	PageSize        int64   `form:"pageSize,default=20"`        // 每页数量
+	PageSize           int64   `form:"pageSize,default=20"`            // 每页数量
-	OrderNo         string  `form:"order_no,optional"`          // 商户订单号
+	OrderNo            string  `form:"order_no,optional"`              // 商户订单号
-	PlatformOrderId string  `form:"platform_order_id,optional"` // 支付订单号
+	PlatformOrderId    string  `form:"platform_order_id,optional"`     // 支付订单号
-	ProductName     string  `form:"product_name,optional"`      // 产品名称
+	ProductName        string  `form:"product_name,optional"`          // 产品名称
-	PaymentPlatform string  `form:"payment_platform,optional"`  // 支付方式
+	PaymentPlatform    string  `form:"payment_platform,optional"`      // 支付方式
-	PaymentScene    string  `form:"payment_scene,optional"`     // 支付平台
+	PaymentScene       string  `form:"payment_scene,optional"`         // 支付平台
-	Amount          float64 `form:"amount,optional"`            // 金额
+	Amount             float64 `form:"amount,optional"`                // 金额
-	Status          string  `form:"status,optional"`            // 支付状态：pending-待支付，paid-已支付，refunded-已退款，closed-已关闭，failed-支付失败
+	Status             string  `form:"status,optional"`                // 支付状态：pending-待支付，paid-已支付，refunded-已退款，closed-已关闭，failed-支付失败
-	CreateTimeStart string  `form:"create_time_start,optional"` // 创建时间开始
+	CreateTimeStart    string  `form:"create_time_start,optional"`     // 创建时间开始
-	CreateTimeEnd   string  `form:"create_time_end,optional"`   // 创建时间结束
+	CreateTimeEnd      string  `form:"create_time_end,optional"`       // 创建时间结束
-	PayTimeStart    string  `form:"pay_time_start,optional"`    // 支付时间开始
+	PayTimeStart       string  `form:"pay_time_start,optional"`        // 支付时间开始
-	PayTimeEnd      string  `form:"pay_time_end,optional"`      // 支付时间结束
+	PayTimeEnd         string  `form:"pay_time_end,optional"`          // 支付时间结束
-	RefundTimeStart string  `form:"refund_time_start,optional"` // 退款时间开始
+	RefundTimeStart    string  `form:"refund_time_start,optional"`     // 退款时间开始
-	RefundTimeEnd   string  `form:"refund_time_end,optional"`   // 退款时间结束
+	RefundTimeEnd      string  `form:"refund_time_end,optional"`       // 退款时间结束
+	QuerySubjectName   string  `form:"query_subject_name,optional"`    // 姓名（明文，服务端转密文查询）
+	QuerySubjectMobile string  `form:"query_subject_mobile,optional"`  // 手机号
+	QuerySubjectIdCard string  `form:"query_subject_id_card,optional"` // 身份证
 }
 
 type AdminGetOrderListResp struct {
@@ -693,10 +696,10 @@ type AdminGetQueryDetailByOrderIdReq struct {
 }
 
 type AdminGetQueryDetailByOrderIdResp struct {
-	Id              string                 `json:"id"`                // 主键ID
+	Id              string                 `json:"id"`           // 主键ID
-	OrderId         string                 `json:"order_id"`          // 订单ID
+	OrderId         string                 `json:"order_id"`     // 订单ID
-	UserId          string                 `json:"user_id"`           // 用户ID
+	UserId          string                 `json:"user_id"`      // 用户ID
-	ProductName     string                 `json:"product_name"`      // 产品名称
+	ProductName     string                 `json:"product_name"` // 产品名称
 	QueryParams     map[string]interface{} `json:"query_params"`
 	QueryData       []AdminQueryItem       `json:"query_data"`
 	CreateTime      string                 `json:"create_time"`       // 创建时间
@@ -872,6 +875,15 @@ type AdminUpdateAgentConfigResp struct {
 	Success bool `json:"success"`
 }
 
+type AdminUpdateAgentMobileReq struct {
+	AgentId string `json:"agent_id"` // 代理ID
+	Mobile  string `json:"mobile"`   // 新手机号
+}
+
+type AdminUpdateAgentMobileResp struct {
+	Success bool `json:"success"`
+}
+
 type AdminUpdateAgentProductConfigReq struct {
 	Id             string   `json:"id"`                       // 主键
 	BasePrice      float64  `json:"base_price"`               // 基础底价
@@ -884,16 +896,6 @@ type AdminUpdateAgentProductConfigResp struct {
 	Success bool `json:"success"`
 }
 
-// 代理手机号修改
-type AdminUpdateAgentMobileReq struct {
-	AgentId string `json:"agent_id"` // 代理ID
-	Mobile  string `json:"mobile"`   // 新手机号
-}
-
-type AdminUpdateAgentMobileResp struct {
-	Success bool `json:"success"`
-}
-
 type AdminUpdateApiReq struct {
 	Id          string `path:"id"`
 	ApiName     string `json:"api_name"`

app/main/model/querySubjectIndexModel.go

@@ -0,0 +1,27 @@
+package model
+
+import (
+	"github.com/zeromicro/go-zero/core/stores/cache"
+	"github.com/zeromicro/go-zero/core/stores/sqlx"
+)
+
+var _ QuerySubjectIndexModel = (*customQuerySubjectIndexModel)(nil)
+
+type (
+	// QuerySubjectIndexModel is an interface to be customized, add more methods here,
+	// and implement the added methods in customQuerySubjectIndexModel.
+	QuerySubjectIndexModel interface {
+		querySubjectIndexModel
+	}
+
+	customQuerySubjectIndexModel struct {
+		*defaultQuerySubjectIndexModel
+	}
+)
+
+// NewQuerySubjectIndexModel returns a model for the database table.
+func NewQuerySubjectIndexModel(conn sqlx.SqlConn, c cache.CacheConf, opts ...cache.Option) QuerySubjectIndexModel {
+	return &customQuerySubjectIndexModel{
+		defaultQuerySubjectIndexModel: newQuerySubjectIndexModel(conn, c, opts...),
+	}
+}

app/main/model/querySubjectIndexModel_gen.go

@@ -0,0 +1,155 @@
+// Code generated by goctl. DO NOT EDIT.
+// versions:
+//  goctl version: 1.8.4
+
+package model
+
+import (
+	"context"
+	"database/sql"
+	"fmt"
+	"strings"
+	"time"
+
+	"github.com/zeromicro/go-zero/core/stores/builder"
+	"github.com/zeromicro/go-zero/core/stores/cache"
+	"github.com/zeromicro/go-zero/core/stores/sqlc"
+	"github.com/zeromicro/go-zero/core/stores/sqlx"
+	"github.com/zeromicro/go-zero/core/stringx"
+)
+
+var (
+	querySubjectIndexFieldNames          = builder.RawFieldNames(&QuerySubjectIndex{})
+	querySubjectIndexRows                = strings.Join(querySubjectIndexFieldNames, ",")
+	querySubjectIndexRowsExpectAutoSet   = strings.Join(stringx.Remove(querySubjectIndexFieldNames, "`create_at`", "`create_time`", "`created_at`", "`update_at`", "`update_time`", "`updated_at`"), ",")
+	querySubjectIndexRowsWithPlaceHolder = strings.Join(stringx.Remove(querySubjectIndexFieldNames, "`id`", "`create_at`", "`create_time`", "`created_at`", "`update_at`", "`update_time`", "`updated_at`"), "=?,") + "=?"
+
+	cacheQuerySubjectIndexIdPrefix      = "cache:querySubjectIndex:id:"
+	cacheQuerySubjectIndexQueryIdPrefix = "cache:querySubjectIndex:queryId:"
+)
+
+type (
+	querySubjectIndexModel interface {
+		Insert(ctx context.Context, data *QuerySubjectIndex) (sql.Result, error)
+		FindOne(ctx context.Context, id string) (*QuerySubjectIndex, error)
+		FindOneByQueryId(ctx context.Context, queryId string) (*QuerySubjectIndex, error)
+		Update(ctx context.Context, data *QuerySubjectIndex) error
+		Delete(ctx context.Context, id string) error
+	}
+
+	defaultQuerySubjectIndexModel struct {
+		sqlc.CachedConn
+		table string
+	}
+
+	QuerySubjectIndex struct {
+		Id          string         `db:"id"`            // UUID主键
+		CreateTime  time.Time      `db:"create_time"`   // 创建时间
+		UpdateTime  time.Time      `db:"update_time"`   // 更新时间
+		DeleteTime  sql.NullTime   `db:"delete_time"`   // 删除时间
+		DelState    int64          `db:"del_state"`     // 删除状态：0=未删除，1=已删除
+		Version     int64          `db:"version"`       // 版本号
+		QueryId     string         `db:"query_id"`      // query 表主键
+		OrderId     string         `db:"order_id"`      // 订单ID
+		EncRealName sql.NullString `db:"enc_real_name"` // 被查询人姓名密文(Base64)
+		EncMobile   sql.NullString `db:"enc_mobile"`    // 手机号密文(Base64)
+		EncIdCard   sql.NullString `db:"enc_id_card"`   // 身份证密文(Base64)
+	}
+)
+
+func newQuerySubjectIndexModel(conn sqlx.SqlConn, c cache.CacheConf, opts ...cache.Option) *defaultQuerySubjectIndexModel {
+	return &defaultQuerySubjectIndexModel{
+		CachedConn: sqlc.NewConn(conn, c, opts...),
+		table:      "`query_subject_index`",
+	}
+}
+
+func (m *defaultQuerySubjectIndexModel) Delete(ctx context.Context, id string) error {
+	data, err := m.FindOne(ctx, id)
+	if err != nil {
+		return err
+	}
+
+	querySubjectIndexIdKey := fmt.Sprintf("%s%v", cacheQuerySubjectIndexIdPrefix, id)
+	querySubjectIndexQueryIdKey := fmt.Sprintf("%s%v", cacheQuerySubjectIndexQueryIdPrefix, data.QueryId)
+	_, err = m.ExecCtx(ctx, func(ctx context.Context, conn sqlx.SqlConn) (result sql.Result, err error) {
+		query := fmt.Sprintf("delete from %s where `id` = ?", m.table)
+		return conn.ExecCtx(ctx, query, id)
+	}, querySubjectIndexIdKey, querySubjectIndexQueryIdKey)
+	return err
+}
+
+func (m *defaultQuerySubjectIndexModel) FindOne(ctx context.Context, id string) (*QuerySubjectIndex, error) {
+	querySubjectIndexIdKey := fmt.Sprintf("%s%v", cacheQuerySubjectIndexIdPrefix, id)
+	var resp QuerySubjectIndex
+	err := m.QueryRowCtx(ctx, &resp, querySubjectIndexIdKey, func(ctx context.Context, conn sqlx.SqlConn, v any) error {
+		query := fmt.Sprintf("select %s from %s where `id` = ? limit 1", querySubjectIndexRows, m.table)
+		return conn.QueryRowCtx(ctx, v, query, id)
+	})
+	switch err {
+	case nil:
+		return &resp, nil
+	case sqlc.ErrNotFound:
+		return nil, ErrNotFound
+	default:
+		return nil, err
+	}
+}
+
+func (m *defaultQuerySubjectIndexModel) FindOneByQueryId(ctx context.Context, queryId string) (*QuerySubjectIndex, error) {
+	querySubjectIndexQueryIdKey := fmt.Sprintf("%s%v", cacheQuerySubjectIndexQueryIdPrefix, queryId)
+	var resp QuerySubjectIndex
+	err := m.QueryRowIndexCtx(ctx, &resp, querySubjectIndexQueryIdKey, m.formatPrimary, func(ctx context.Context, conn sqlx.SqlConn, v any) (i any, e error) {
+		query := fmt.Sprintf("select %s from %s where `query_id` = ? limit 1", querySubjectIndexRows, m.table)
+		if err := conn.QueryRowCtx(ctx, &resp, query, queryId); err != nil {
+			return nil, err
+		}
+		return resp.Id, nil
+	}, m.queryPrimary)
+	switch err {
+	case nil:
+		return &resp, nil
+	case sqlc.ErrNotFound:
+		return nil, ErrNotFound
+	default:
+		return nil, err
+	}
+}
+
+func (m *defaultQuerySubjectIndexModel) Insert(ctx context.Context, data *QuerySubjectIndex) (sql.Result, error) {
+	querySubjectIndexIdKey := fmt.Sprintf("%s%v", cacheQuerySubjectIndexIdPrefix, data.Id)
+	querySubjectIndexQueryIdKey := fmt.Sprintf("%s%v", cacheQuerySubjectIndexQueryIdPrefix, data.QueryId)
+	ret, err := m.ExecCtx(ctx, func(ctx context.Context, conn sqlx.SqlConn) (result sql.Result, err error) {
+		query := fmt.Sprintf("insert into %s (%s) values (?, ?, ?, ?, ?, ?, ?, ?, ?)", m.table, querySubjectIndexRowsExpectAutoSet)
+		return conn.ExecCtx(ctx, query, data.Id, data.DeleteTime, data.DelState, data.Version, data.QueryId, data.OrderId, data.EncRealName, data.EncMobile, data.EncIdCard)
+	}, querySubjectIndexIdKey, querySubjectIndexQueryIdKey)
+	return ret, err
+}
+
+func (m *defaultQuerySubjectIndexModel) Update(ctx context.Context, newData *QuerySubjectIndex) error {
+	data, err := m.FindOne(ctx, newData.Id)
+	if err != nil {
+		return err
+	}
+
+	querySubjectIndexIdKey := fmt.Sprintf("%s%v", cacheQuerySubjectIndexIdPrefix, data.Id)
+	querySubjectIndexQueryIdKey := fmt.Sprintf("%s%v", cacheQuerySubjectIndexQueryIdPrefix, data.QueryId)
+	_, err = m.ExecCtx(ctx, func(ctx context.Context, conn sqlx.SqlConn) (result sql.Result, err error) {
+		query := fmt.Sprintf("update %s set %s where `id` = ?", m.table, querySubjectIndexRowsWithPlaceHolder)
+		return conn.ExecCtx(ctx, query, newData.DeleteTime, newData.DelState, newData.Version, newData.QueryId, newData.OrderId, newData.EncRealName, newData.EncMobile, newData.EncIdCard, newData.Id)
+	}, querySubjectIndexIdKey, querySubjectIndexQueryIdKey)
+	return err
+}
+
+func (m *defaultQuerySubjectIndexModel) formatPrimary(primary any) string {
+	return fmt.Sprintf("%s%v", cacheQuerySubjectIndexIdPrefix, primary)
+}
+
+func (m *defaultQuerySubjectIndexModel) queryPrimary(ctx context.Context, conn sqlx.SqlConn, v, primary any) error {
+	query := fmt.Sprintf("select %s from %s where `id` = ? limit 1", querySubjectIndexRows, m.table)
+	return conn.QueryRowCtx(ctx, v, query, primary)
+}
+
+func (m *defaultQuerySubjectIndexModel) tableName() string {
+	return m.table
+}

deploy/sql/query_subject_index_migration.sql

@@ -0,0 +1,26 @@
+-- ============================================
+-- 被查询人密文索引表：用于管理后台按姓名/手机/身份证筛选订单（字段均为 AES-ECB 确定性密文）
+-- ============================================
+
+CREATE TABLE IF NOT EXISTS `query_subject_index` (
+  `id` CHAR(36) NOT NULL COMMENT 'UUID主键',
+  `create_time` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
+  `update_time` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
+  `delete_time` datetime DEFAULT NULL COMMENT '删除时间',
+  `del_state` tinyint NOT NULL DEFAULT '0' COMMENT '删除状态：0=未删除，1=已删除',
+  `version` bigint NOT NULL DEFAULT '0' COMMENT '版本号',
+
+  `query_id` CHAR(36) NOT NULL COMMENT 'query 表主键',
+  `order_id` CHAR(36) NOT NULL COMMENT '订单ID',
+
+  `enc_real_name` varchar(768) DEFAULT NULL COMMENT '被查询人姓名密文(Base64)',
+  `enc_mobile` varchar(768) DEFAULT NULL COMMENT '手机号密文(Base64)',
+  `enc_id_card` varchar(768) DEFAULT NULL COMMENT '身份证密文(Base64)',
+
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `uk_query_id` (`query_id`),
+  KEY `idx_order_id` (`order_id`),
+  KEY `idx_enc_mobile` (`enc_mobile`),
+  KEY `idx_enc_id_card` (`enc_id_card`),
+  KEY `idx_enc_real_name` (`enc_real_name`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_general_ci COMMENT='被查询人密文索引（仅用于后台筛选）';

pkg/lzkit/crypto/ecb.go

@@ -214,6 +214,18 @@ func EncryptIDCard(idCard string, key []byte) (string, error) {
 	return AesEcbEncrypt([]byte(idCard), key)
 }
 
+// EncryptDeterministicOptional 对非空明文做 AES-ECB 确定性加密；空串表示不建索引列，返回 ok=false
+func EncryptDeterministicOptional(plain string, key []byte) (cipher string, ok bool, err error) {
+	if plain == "" {
+		return "", false, nil
+	}
+	cipher, err = AesEcbEncrypt([]byte(plain), key)
+	if err != nil {
+		return "", false, err
+	}
+	return cipher, true, nil
+}
+
 // DecryptIDCard 解密身份证号
 func DecryptIDCard(encryptedIDCard string, key []byte) (string, error) {
 	if encryptedIDCard == "" {