feat: 添加管理员权限管理功能，更新 AdminUser 模型以支持权限加载，扩展 API 路由以管理后台用户及其权限

app/Http/Controllers/Api/V1/Admin/User/AdminPermissionCatalogController.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Admin\User;
+
+use App\Http\Controllers\Controller;
+use App\Models\AdminPermission;
+use App\Models\AdminRole;
+use App\Support\ApiResponse;
+use Illuminate\Http\JsonResponse;
+
+/** GET /api/v1/admin/admin-user-permission-catalog */
+final class AdminPermissionCatalogController extends Controller
+{
+    public function __invoke(): JsonResponse
+    {
+        $permissions = AdminPermission::query()
+            ->orderBy('slug')
+            ->get(['id', 'slug', 'name']);
+
+        $roles = AdminRole::query()
+            ->with(['permissions:id,slug', 'users:id'])
+            ->orderBy('slug')
+            ->get(['id', 'slug', 'name']);
+
+        return ApiResponse::success([
+            'permissions' => $permissions->map(static fn (AdminPermission $permission): array => [
+                'id' => (int) $permission->id,
+                'slug' => $permission->slug,
+                'name' => $permission->name,
+            ])->values()->all(),
+            'roles' => $roles->map(static fn (AdminRole $role): array => [
+                'id' => (int) $role->id,
+                'slug' => $role->slug,
+                'name' => $role->name,
+                'permission_slugs' => $role->permissions
+                    ->pluck('slug')
+                    ->filter(static fn ($slug): bool => is_string($slug) && $slug !== '')
+                    ->values()
+                    ->all(),
+                'user_count' => $role->users->count(),
+            ])->values()->all(),
+        ]);
+    }
+}

app/Http/Controllers/Api/V1/Admin/User/AdminUserIndexController.php

@@ -0,0 +1,65 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Admin\User;
+
+use App\Http\Controllers\Controller;
+use App\Models\AdminUser;
+use App\Support\ApiResponse;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+/** GET /api/v1/admin/admin-users */
+final class AdminUserIndexController extends Controller
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $perPage = min(max((int) $request->integer('per_page', 25), 1), 100);
+        $page = max((int) $request->integer('page', 1), 1);
+        $keyword = trim((string) $request->query('keyword', ''));
+
+        $q = AdminUser::query()
+            ->with(['roles.permissions', 'permissions'])
+            ->orderByDesc('id');
+
+        if ($keyword !== '') {
+            $q->where(function ($sub) use ($keyword): void {
+                $sub->where('username', 'like', '%'.$keyword.'%')
+                    ->orWhere('name', 'like', '%'.$keyword.'%')
+                    ->orWhere('email', 'like', '%'.$keyword.'%');
+            });
+        }
+
+        $paginator = $q->paginate($perPage, ['*'], 'page', $page);
+
+        return ApiResponse::success([
+            'items' => collect($paginator->items())->map(
+                fn (AdminUser $user): array => $this->row($user)
+            )->all(),
+            'meta' => [
+                'current_page' => $paginator->currentPage(),
+                'per_page' => $paginator->perPage(),
+                'total' => $paginator->total(),
+                'last_page' => $paginator->lastPage(),
+            ],
+        ]);
+    }
+
+    /** @return array<string, mixed> */
+    private function row(AdminUser $user): array
+    {
+        return [
+            'id' => (int) $user->id,
+            'username' => $user->username,
+            'nickname' => $user->name,
+            'email' => $user->email,
+            'status' => (int) $user->status,
+            'roles' => $user->adminRoleSlugs(),
+            'direct_permissions' => $user->permissions
+                ->pluck('slug')
+                ->filter(static fn ($slug): bool => is_string($slug) && $slug !== '')
+                ->values()
+                ->all(),
+            'effective_permissions' => $user->adminPermissionSlugs(),
+        ];
+    }
+}

app/Http/Controllers/Api/V1/Admin/User/AdminUserPermissionSyncController.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Admin\User;
+
+use App\Http\Controllers\Controller;
+use App\Models\AdminPermission;
+use App\Models\AdminUser;
+use App\Support\ApiResponse;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+/** PUT /api/v1/admin/admin-users/{admin_user}/permissions */
+final class AdminUserPermissionSyncController extends Controller
+{
+    public function __invoke(Request $request, AdminUser $admin_user): JsonResponse
+    {
+        /** @var array{permission_slugs:list<string>} $data */
+        $data = validator($request->all(), [
+            'permission_slugs' => ['required', 'array'],
+            'permission_slugs.*' => ['string', 'max:128', 'distinct', 'exists:admin_permissions,slug'],
+        ])->validate();
+
+        $slugs = array_values(array_unique($data['permission_slugs']));
+        $permissionIds = AdminPermission::query()
+            ->whereIn('slug', $slugs)
+            ->pluck('id')
+            ->all();
+
+        $admin_user->permissions()->sync($permissionIds);
+        $admin_user->load(['roles.permissions', 'permissions']);
+
+        return ApiResponse::success([
+            'id' => (int) $admin_user->id,
+            'username' => $admin_user->username,
+            'nickname' => $admin_user->name,
+            'roles' => $admin_user->adminRoleSlugs(),
+            'direct_permissions' => $admin_user->permissions
+                ->pluck('slug')
+                ->filter(static fn ($slug): bool => is_string($slug) && $slug !== '')
+                ->values()
+                ->all(),
+            'effective_permissions' => $admin_user->adminPermissionSlugs(),
+        ]);
+    }
+}