refactor(api): 统一 HTTP 200 响应契约

common-web/src/main/java/com/baiyue/common/web/CommonWebAutoConfiguration.java

@@ -0,0 +1,25 @@
+package com.baiyue.common.web;
+
+import org.springframework.boot.autoconfigure.AutoConfiguration;
+import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
+import org.springframework.context.annotation.Bean;
+
+/**
+ * Registers the common servlet response contract even when an application only scans its own
+ * package, such as audit-service and event-bridge-service.
+ */
+@AutoConfiguration
+public class CommonWebAutoConfiguration {
+
+    @Bean
+    @ConditionalOnMissingBean(GlobalExceptionHandler.class)
+    GlobalExceptionHandler globalExceptionHandler() {
+        return new GlobalExceptionHandler();
+    }
+
+    @Bean
+    @ConditionalOnMissingBean(CorrelationIdFilter.class)
+    CorrelationIdFilter correlationIdFilter() {
+        return new CorrelationIdFilter();
+    }
+}

common-web/src/main/java/com/baiyue/common/web/GlobalExceptionHandler.java

@@ -5,9 +5,11 @@ import com.baiyue.common.core.api.ResultCode;
 import com.baiyue.common.core.exception.BizException;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.validation.ConstraintViolationException;
+import io.micrometer.core.instrument.MeterRegistry;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.http.ResponseEntity;
+import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.security.access.AccessDeniedException;
 import org.springframework.security.core.AuthenticationException;
 import org.springframework.validation.BindException;
@@ -29,6 +31,9 @@ import java.util.Map;
 public class GlobalExceptionHandler {
     private static final Logger log = LoggerFactory.getLogger(GlobalExceptionHandler.class);
 
+    @Autowired(required = false)
+    private MeterRegistry meterRegistry;
+
     @ExceptionHandler(BizException.class)
     public ResponseEntity<ApiResponse<Void>> handleBusiness(BizException exception, HttpServletRequest request) {
         return failure(exception.getResultCode(), exception.getMessage(), request);
@@ -91,14 +96,21 @@ public class GlobalExceptionHandler {
         ResultCode code = ResultCode.VALIDATION_FAILED;
         ApiResponse<Map<String, String>> body = ApiResponse.of(code, code.message(), errors,
                 CorrelationContext.requestId(request), CorrelationContext.traceId(request));
-        return ResponseEntity.status(code.httpStatus()).body(body);
+        recordFailure(code);
+        return ResponseEntity.ok(body);
     }
 
     private ResponseEntity<ApiResponse<Void>> failure(ResultCode code, String message,
                                                        HttpServletRequest request) {
         ApiResponse<Void> body = ApiResponse.failure(code, message,
                 CorrelationContext.requestId(request), CorrelationContext.traceId(request));
-        return ResponseEntity.status(code.httpStatus()).body(body);
+        recordFailure(code);
+        return ResponseEntity.ok(body);
+    }
+
+    private void recordFailure(ResultCode code) {
+        if (meterRegistry != null) {
+            meterRegistry.counter("baiyue.api.business.failures", "code", code.code()).increment();
+        }
     }
 }
-