feat: 增强管理员功能与数据处理

- 在多个控制器中引入 agent_node_id，以支持基于代理节点的权限和数据过滤。 - 更新 AdminRole 和 AdminUser 模型，新增角色范围和代理节点相关功能，提升角色管理的灵活性。 - 在请求验证中添加 agent_node_id 字段，确保 API 接口支持代理节点的相关操作。 - 优化 LotterySettings 服务，支持批量写入设置，提升配置管理的效率。 - 更新仪表板和报告服务，增强数据统计功能，确保管理员能够获取更全面的统计信息。
2026-06-02 14:36:58 +08:00
parent d5232c756f
commit 0841fbed32
96 changed files with 5004 additions and 182 deletions
--- a/app/Services/Agent/AgentRoleService.php
+++ b/app/Services/Agent/AgentRoleService.php
@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Services\Agent;
+
+use App\Models\AdminRole;
+use App\Models\AdminUser;
+use App\Models\AgentNode;
+use App\Support\AgentRoleAuthorization;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Validation\ValidationException;
+
+final class AgentRoleService
+{
+    /**
+     * @param  array{slug: string, name: string, description?: ?string, status?: int, permission_slugs?: list<string>}  $payload
+     */
+    public function createForAgent(AdminUser $actor, AgentNode $owner, array $payload): AdminRole
+    {
+        AgentRoleAuthorization::assertSlugsForAgentRole(
+            $actor,
+            $owner,
+            array_values(array_unique($payload['permission_slugs'] ?? [])),
+        );
+
+        $slug = trim((string) $payload['slug']);
+        if (AdminRole::query()
+            ->where('owner_agent_id', $owner->id)
+            ->where('slug', $slug)
+            ->exists()) {
+            throw ValidationException::withMessages(['slug' => ['unique']]);
+        }
+
+        return DB::transaction(function () use ($payload, $owner, $slug): AdminRole {
+            $role = AdminRole::query()->create([
+                'slug' => $slug,
+                'code' => $slug,
+                'name' => trim((string) $payload['name']),
+                'description' => $payload['description'] ?? null,
+                'status' => (int) ($payload['status'] ?? 1) === 0 ? 0 : 1,
+                'is_system' => false,
+                'sort_order' => 0,
+                'scope_type' => AdminRole::SCOPE_AGENT,
+                'owner_agent_id' => $owner->id,
+                'delegated_from_role_id' => null,
+            ]);
+
+            $role->syncLegacyPermissionSlugs($payload['permission_slugs'] ?? []);
+
+            return $role->fresh();
+        });
+    }
+
+    /**
+     * @param  array{name?: string, description?: ?string, status?: int}  $payload
+     */
+    public function update(AdminRole $role, array $payload): AdminRole
+    {
+        if (array_key_exists('name', $payload)) {
+            $name = trim((string) $payload['name']);
+            if ($name !== '') {
+                $role->name = $name;
+            }
+        }
+
+        if (array_key_exists('description', $payload)) {
+            $role->description = $payload['description'];
+        }
+
+        if (array_key_exists('status', $payload)) {
+            $role->status = (int) $payload['status'] === 0 ? 0 : 1;
+        }
+
+        $role->save();
+
+        return $role->fresh();
+    }
+
+    /**
+     * @param  list<string>  $permissionSlugs
+     */
+    public function syncPermissions(AdminUser $actor, AdminRole $role, array $permissionSlugs): AdminRole
+    {
+        $owner = AgentNode::query()->findOrFail((int) $role->owner_agent_id);
+        AgentRoleAuthorization::assertSlugsForAgentRole($actor, $owner, $permissionSlugs);
+        $role->syncLegacyPermissionSlugs($permissionSlugs);
+
+        return $role->fresh();
+    }
+
+    public function destroy(AdminRole $role): void
+    {
+        if ($role->is_system) {
+            throw ValidationException::withMessages(['role' => ['system_role']]);
+        }
+
+        if ($role->assignedUserCount() > 0) {
+            throw ValidationException::withMessages(['role' => ['in_use']]);
+        }
+
+        $role->delete();
+    }
+}