refactor: 更新权限管理与请求验证逻辑

- 在多个控制器中将权限检查从 hasAdminPermission 更新为 hasPermissionCode，以增强权限管理的灵活性。
- 引入 AdminScopePolicy，优化基于代理节点的权限和数据过滤逻辑，确保管理员能够更精确地控制访问权限。
- 在请求验证中添加 agent_node_id 字段，确保 API 接口支持代理节点的相关操作。
- 更新 AdminUser 模型，新增 hasPermissionCode 方法，以支持更细粒度的权限检查。
- 优化审计日志记录逻辑，确保在处理请求时能够准确记录管理员的操作。

app/Services/Admin/AdminDashboardAnalyticsBuilder.php

@@ -3,6 +3,7 @@
 namespace App\Services\Admin;
 
 use App\Models\AdminUser;
+use App\Support\AdminScopeContextResolver;
 
 /**
  * 仪表盘可筛选分析数据：区间汇总、日趋势、玩法拆解。
@@ -30,6 +31,12 @@ final class AdminDashboardAnalyticsBuilder
             return null;
         }
 
+        $scope = AdminScopeContextResolver::fromValues(
+            $admin,
+            requestedSiteCode: isset($filters['site_code']) ? (string) $filters['site_code'] : null,
+            requestedAgentNodeId: isset($filters['agent_node_id']) ? (int) $filters['agent_node_id'] : null,
+        );
+
         $period = (string) ($filters['period'] ?? 'last_7_days');
         $metric = (string) ($filters['metric'] ?? 'overview');
         $playCode = isset($filters['play_code']) && $filters['play_code'] !== ''
@@ -45,7 +52,7 @@ final class AdminDashboardAnalyticsBuilder
         $dateFrom = $range['date_from'];
         $dateTo = $range['date_to'];
 
-        $trend = $this->reportQuery->dailyProfitSeriesFilled($dateFrom, $dateTo, scopedAdmin: $admin);
+        $trend = $this->reportQuery->dailyProfitSeriesFilled($dateFrom, $dateTo, scope: $scope);
 
         return [
             'period' => $period,
@@ -53,8 +60,8 @@ final class AdminDashboardAnalyticsBuilder
             'play_code' => $playCode,
             'date_from' => $dateFrom,
             'date_to' => $dateTo,
-            'currency_code' => $this->reportQuery->resolvePeriodCurrencyCode($dateFrom, $dateTo, $admin),
-            'summary' => $this->reportQuery->periodFinanceTotals($dateFrom, $dateTo, $admin),
+            'currency_code' => $this->reportQuery->resolvePeriodCurrencyCode($dateFrom, $dateTo, $scope),
+            'summary' => $this->reportQuery->periodFinanceTotals($dateFrom, $dateTo, $scope),
             'daily_series' => $trend['series'],
             'chart_meta' => [
                 'chart_date_from' => $trend['chart_date_from'],
@@ -66,14 +73,14 @@ final class AdminDashboardAnalyticsBuilder
                 $dateFrom,
                 $dateTo,
                 $playCode,
-                scopedAdmin: $admin,
+                scope: $scope,
             ),
             'agent_breakdown' => $this->reportQuery->agentRankingRows(
                 $dateFrom,
                 $dateTo,
                 $playCode,
                 limit: 200,
-                scopedAdmin: $admin,
+                scope: $scope,
             ),
         ];
     }
@@ -81,6 +88,6 @@ final class AdminDashboardAnalyticsBuilder
     /** 与 {@see AdminAuthorizationRegistry} 中 dashboard 类 API 资源的 `dashboard.view` 绑定一致。 */
     private function canView(AdminUser $admin): bool
     {
-        return $admin->hasAdminPermission('prd.dashboard.view');
+        return $admin->hasPermissionCode('dashboard.view');
     }
 }