feat: 增强管理员功能与数据处理

- 在多个控制器中引入 agent_node_id，以支持基于代理节点的权限和数据过滤。 - 更新 AdminRole 和 AdminUser 模型，新增角色范围和代理节点相关功能，提升角色管理的灵活性。 - 在请求验证中添加 agent_node_id 字段，确保 API 接口支持代理节点的相关操作。 - 优化 LotterySettings 服务，支持批量写入设置，提升配置管理的效率。 - 更新仪表板和报告服务，增强数据统计功能，确保管理员能够获取更全面的统计信息。
2026-06-02 14:36:58 +08:00
parent d5232c756f
commit 0841fbed32
96 changed files with 5004 additions and 182 deletions
--- a/app/Services/Agent/AgentAdminUserService.php
+++ b/app/Services/Agent/AgentAdminUserService.php
@@ -0,0 +1,85 @@
+<?php
+
+namespace App\Services\Agent;
+
+use App\Models\AdminRole;
+use App\Models\AdminUser;
+use App\Models\AgentNode;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Validation\ValidationException;
+
+final class AgentAdminUserService
+{
+    /**
+     * @param  array{
+     *   username: string,
+     *   nickname: string,
+     *   email?: ?string,
+     *   password: string,
+     *   status?: int,
+     *   role_ids?: list<int>
+     * }  $payload
+     */
+    public function createUnderAgent(AgentNode $agent, array $payload): AdminUser
+    {
+        $roleIds = array_values(array_unique(array_map('intval', $payload['role_ids'] ?? [])));
+        $this->assertRolesAssignable($agent, $roleIds);
+
+        return DB::transaction(function () use ($agent, $payload, $roleIds): AdminUser {
+            $user = AdminUser::query()->create([
+                'username' => $payload['username'],
+                'name' => $payload['nickname'],
+                'email' => isset($payload['email']) ? trim((string) $payload['email']) : null,
+                'password' => $payload['password'],
+                'status' => (int) ($payload['status'] ?? 0),
+            ]);
+
+            DB::table('admin_user_agents')->insert([
+                'admin_user_id' => $user->id,
+                'agent_node_id' => $agent->id,
+                'is_primary' => true,
+                'granted_at' => now(),
+            ]);
+
+            $user->syncAgentRoleIds($agent->id, $roleIds);
+
+            return $user->fresh();
+        });
+    }
+
+    /**
+     * @param  list<int>  $roleIds
+     */
+    public function syncRoles(AgentNode $agent, AdminUser $user, array $roleIds): AdminUser
+    {
+        if ((int) $user->primaryAgentNodeId() !== (int) $agent->id) {
+            throw ValidationException::withMessages(['user' => ['agent_mismatch']]);
+        }
+
+        $roleIds = array_values(array_unique(array_map('intval', $roleIds)));
+        $this->assertRolesAssignable($agent, $roleIds);
+        $user->syncAgentRoleIds($agent->id, $roleIds);
+
+        return $user->fresh();
+    }
+
+    /**
+     * @param  list<int>  $roleIds
+     */
+    private function assertRolesAssignable(AgentNode $agent, array $roleIds): void
+    {
+        if ($roleIds === []) {
+            return;
+        }
+
+        $validCount = AdminRole::query()
+            ->where('scope_type', AdminRole::SCOPE_AGENT)
+            ->where('owner_agent_id', $agent->id)
+            ->whereIn('id', $roleIds)
+            ->count();
+
+        if ($validCount !== count($roleIds)) {
+            throw ValidationException::withMessages(['role_ids' => ['invalid_for_agent']]);
+        }
+    }
+}