refactor：拆分 API 路由与请求校验，统一 final 类和代码风格

app/Http/Controllers/Api/V1/Admin/Audit/AuditLogIndexController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Audit;
 
-use App\Http\Controllers\Controller;
 use App\Models\AuditLog;
+use Illuminate\Http\Request;
 use App\Support\AdminApiList;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
 
 /**
  * GET /api/v1/admin/audit-logs — 运营/客服查询审计留痕。

app/Http/Controllers/Api/V1/Admin/Auth/CaptchaController.php

@@ -2,9 +2,9 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Auth;
 
-use App\Services\AdminCaptchaService;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Services\AdminCaptchaService;
 
 /**
  * GET /api/v1/admin/auth/captcha

app/Http/Controllers/Api/V1/Admin/Auth/LoginController.php

@@ -2,38 +2,28 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Auth;
 
-use App\Lottery\ErrorCode;
 use App\Models\AdminUser;
-use App\Services\AdminCaptchaService;
+use App\Lottery\ErrorCode;
+use Illuminate\Support\Str;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
 use Illuminate\Support\Facades\Hash;
-use Illuminate\Support\Str;
+use App\Services\AdminCaptchaService;
+use App\Http\Requests\Admin\AdminLoginRequest;
 
 /**
  * POST /api/v1/admin/auth/login
  *
  * Body: account（登录账号，与 username 对应，ASCII 仅存小写比对）、password、captcha_key、captcha_code。
  */
-final class LoginController
+final class LoginController extends Controller
 {
-    public function __invoke(Request $request, AdminCaptchaService $captcha): JsonResponse
+    public function __invoke(AdminLoginRequest $request, AdminCaptchaService $captcha): JsonResponse
     {
         $locale = $request->lotteryLocale();
 
-        /** @var array{account:string,password:string,captcha_key:string,captcha_code:string} $data */
-        $data = validator($request->all(), [
-            'account' => ['required', 'string', 'min:2', 'max:64', 'regex:/^[a-zA-Z0-9._-]+$/u'],
-            'password' => ['required', 'string', 'max:256'],
-            'captcha_key' => ['required', 'string', 'uuid'],
-            'captcha_code' => ['required', 'string', 'max:32'],
-        ], [], [
-            'account' => 'account',
-            'password' => 'password',
-            'captcha_key' => 'captcha_key',
-            'captcha_code' => 'captcha_code',
-        ])->validate();
+        $data = $request->validated();
 
         if (! $captcha->verify($data['captcha_key'], $data['captcha_code'])) {
             return ApiResponse::error(

app/Http/Controllers/Api/V1/Admin/Config/OddsItemsReplaceController.php

@@ -2,17 +2,17 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
-use App\Lottery\ConfigVersionStatus;
-use App\Lottery\ErrorCode;
 use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
 use App\Models\OddsVersion;
-use App\Services\Config\OddsStreamService;
-use App\Support\AdminConfigPresenter;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\Validation\Rule;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Lottery\ConfigVersionStatus;
+use App\Support\AdminConfigPresenter;
+use App\Services\Config\OddsStreamService;
 
 /** PUT /api/v1/admin/config/odds-versions/{id}/items */
 final class OddsItemsReplaceController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/OddsVersionIndexController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
 use App\Models\OddsVersion;
-use App\Services\Config\OddsStreamService;
-use App\Support\AdminApiList;
-use App\Support\AdminConfigPresenter;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
+use App\Services\Config\OddsStreamService;
 
 /** GET /api/v1/admin/config/odds-versions */
 final class OddsVersionIndexController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/OddsVersionPublishController.php

@@ -2,16 +2,16 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
+use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
+use App\Models\OddsVersion;
+use App\Support\ApiResponse;
+use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
 use App\Lottery\ConfigVersionStatus;
-use App\Lottery\ErrorCode;
-use App\Models\AdminUser;
-use App\Models\OddsVersion;
-use App\Services\Config\OddsStreamService;
 use App\Support\AdminConfigPresenter;
-use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Services\Config\OddsStreamService;
 
 /** POST /api/v1/admin/config/odds-versions/{id}/publish */
 final class OddsVersionPublishController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/OddsVersionShowController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
 use App\Models\OddsVersion;
-use App\Support\AdminConfigPresenter;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
 
 /** GET /api/v1/admin/config/odds-versions/{id} */
 final class OddsVersionShowController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/OddsVersionStoreController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
-use App\Services\Config\OddsStreamService;
-use App\Support\AdminConfigPresenter;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
+use App\Services\Config\OddsStreamService;
 
 /** POST /api/v1/admin/config/odds-versions */
 final class OddsVersionStoreController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/PlayConfigItemsReplaceController.php

@@ -2,17 +2,17 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
-use App\Lottery\ConfigVersionStatus;
-use App\Lottery\ErrorCode;
 use App\Models\AdminUser;
-use App\Models\PlayConfigVersion;
-use App\Services\Config\PlayConfigStreamService;
-use App\Support\AdminConfigPresenter;
+use App\Lottery\ErrorCode;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use Illuminate\Validation\Rule;
+use App\Models\PlayConfigVersion;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Lottery\ConfigVersionStatus;
+use App\Support\AdminConfigPresenter;
+use App\Services\Config\PlayConfigStreamService;
 
 /** PUT /api/v1/admin/config/play-versions/{id}/items */
 final class PlayConfigItemsReplaceController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/PlayConfigVersionIndexController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
-use App\Models\PlayConfigVersion;
-use App\Services\Config\PlayConfigStreamService;
-use App\Support\AdminApiList;
-use App\Support\AdminConfigPresenter;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use App\Models\PlayConfigVersion;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
+use App\Services\Config\PlayConfigStreamService;
 
 /** GET /api/v1/admin/config/play-versions */
 final class PlayConfigVersionIndexController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/PlayConfigVersionPublishController.php

@@ -2,16 +2,16 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
+use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
+use App\Support\ApiResponse;
+use Illuminate\Http\Request;
+use App\Models\PlayConfigVersion;
+use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
 use App\Lottery\ConfigVersionStatus;
-use App\Lottery\ErrorCode;
-use App\Models\AdminUser;
-use App\Models\PlayConfigVersion;
-use App\Services\Config\PlayConfigStreamService;
 use App\Support\AdminConfigPresenter;
-use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Services\Config\PlayConfigStreamService;
 
 /** POST /api/v1/admin/config/play-versions/{id}/publish */
 final class PlayConfigVersionPublishController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/PlayConfigVersionShowController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
-use App\Models\PlayConfigVersion;
-use App\Support\AdminConfigPresenter;
 use App\Support\ApiResponse;
+use App\Models\PlayConfigVersion;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
 
 /** GET /api/v1/admin/config/play-versions/{id} */
 final class PlayConfigVersionShowController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/PlayConfigVersionStoreController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
-use App\Services\Config\PlayConfigStreamService;
-use App\Support\AdminConfigPresenter;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
+use App\Services\Config\PlayConfigStreamService;
 
 /** POST /api/v1/admin/config/play-versions — 新建草稿（默认克隆当前 active，若无则按 play_types 生成）。 */
 final class PlayConfigVersionStoreController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/RiskCapItemsReplaceController.php

@@ -2,16 +2,16 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
+use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
+use App\Support\ApiResponse;
+use Illuminate\Http\Request;
+use App\Models\RiskCapVersion;
+use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
 use App\Lottery\ConfigVersionStatus;
-use App\Lottery\ErrorCode;
-use App\Models\AdminUser;
-use App\Models\RiskCapVersion;
-use App\Services\Config\RiskCapStreamService;
 use App\Support\AdminConfigPresenter;
-use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Services\Config\RiskCapStreamService;
 
 /** PUT /api/v1/admin/config/risk-cap-versions/{id}/items */
 final class RiskCapItemsReplaceController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/RiskCapVersionIndexController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
-use App\Models\RiskCapVersion;
-use App\Services\Config\RiskCapStreamService;
-use App\Support\AdminApiList;
-use App\Support\AdminConfigPresenter;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use App\Models\RiskCapVersion;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
+use App\Services\Config\RiskCapStreamService;
 
 /** GET /api/v1/admin/config/risk-cap-versions */
 final class RiskCapVersionIndexController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/RiskCapVersionPublishController.php

@@ -2,16 +2,16 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
+use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
+use App\Support\ApiResponse;
+use Illuminate\Http\Request;
+use App\Models\RiskCapVersion;
+use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
 use App\Lottery\ConfigVersionStatus;
-use App\Lottery\ErrorCode;
-use App\Models\AdminUser;
-use App\Models\RiskCapVersion;
-use App\Services\Config\RiskCapStreamService;
 use App\Support\AdminConfigPresenter;
-use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Services\Config\RiskCapStreamService;
 
 /** POST /api/v1/admin/config/risk-cap-versions/{id}/publish */
 final class RiskCapVersionPublishController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/RiskCapVersionShowController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
-use App\Models\RiskCapVersion;
-use App\Support\AdminConfigPresenter;
 use App\Support\ApiResponse;
+use App\Models\RiskCapVersion;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
 
 /** GET /api/v1/admin/config/risk-cap-versions/{id} */
 final class RiskCapVersionShowController extends Controller

app/Http/Controllers/Api/V1/Admin/Config/RiskCapVersionStoreController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Config;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
-use App\Services\Config\RiskCapStreamService;
-use App\Support\AdminConfigPresenter;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
+use App\Services\Config\RiskCapStreamService;
 
 /** POST /api/v1/admin/config/risk-cap-versions */
 final class RiskCapVersionStoreController extends Controller

app/Http/Controllers/Api/V1/Admin/Dashboard/AdminDashboardController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Dashboard;
 
-use App\Http\Controllers\Controller;
-use App\Lottery\ErrorCode;
 use App\Models\AdminUser;
-use App\Services\Admin\AdminDashboardSnapshotBuilder;
+use App\Lottery\ErrorCode;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Services\Admin\AdminDashboardSnapshotBuilder;
 
 /**
  * GET /api/v1/admin/dashboard — 首页仪表盘聚合数据（需登录；按权限返回子块）。

app/Http/Controllers/Api/V1/Admin/Draw/AdminDrawFinanceSummaryController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Draw;
 
-use App\Http\Controllers\Controller;
 use App\Models\Draw;
-use App\Models\SettlementBatch;
 use App\Models\TicketItem;
 use App\Models\TicketOrder;
 use App\Support\ApiResponse;
+use App\Models\SettlementBatch;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * GET /api/v1/admin/draws/{draw}/finance-summary — 单期投注/派彩汇总（客服/财务视角，PRD §15.4）。

app/Http/Controllers/Api/V1/Admin/Draw/AdminDrawIndexController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Draw;
 
-use App\Http\Controllers\Controller;
-use App\Models\Draw;
-use App\Support\AdminApiList;
 use Carbon\Carbon;
-use Illuminate\Contracts\Pagination\LengthAwarePaginator;
-use Illuminate\Http\JsonResponse;
+use App\Models\Draw;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use Illuminate\Contracts\Pagination\LengthAwarePaginator;
 
 /**
  * GET /api/v1/admin/draws — 期号列表。

app/Http/Controllers/Api/V1/Admin/Draw/AdminDrawResultBatchesIndexController.php

@@ -2,12 +2,12 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Draw;
 
-use App\Http\Controllers\Controller;
 use App\Models\Draw;
-use App\Models\DrawResultBatch;
-use App\Models\DrawResultItem;
 use App\Support\ApiResponse;
+use App\Models\DrawResultItem;
+use App\Models\DrawResultBatch;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * GET /api/v1/admin/draws/{draw}/result-batches — 开奖批次与号码（审核/结果核对）。

app/Http/Controllers/Api/V1/Admin/Draw/AdminDrawShowController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Draw;
 
+use Carbon\Carbon;
+use App\Models\Draw;
+use App\Support\ApiResponse;
+use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
 use App\Lottery\DrawResultBatchStatus;
-use App\Models\Draw;
 use App\Services\Draw\DrawHallSnapshotBuilder;
-use App\Support\ApiResponse;
-use Carbon\Carbon;
-use Illuminate\Http\JsonResponse;
 
 /**
  * GET /api/v1/admin/draws/{draw} — 当期状态明细（后台查看 DB 为准 + 大厅展示态预览）。

app/Http/Controllers/Api/V1/Admin/Draw/DrawResultBatchPublishController.php

@@ -2,20 +2,20 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Draw;
 
-use App\Http\Controllers\Controller;
-use App\Lottery\ErrorCode;
-use App\Models\AdminUser;
 use App\Models\Draw;
-use App\Models\DrawResultBatch;
-use App\Services\Draw\DrawPublishService;
+use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Models\DrawResultBatch;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Services\Draw\DrawPublishService;
 
 /**
  * POST /api/v1/admin/draws/{draw}/result-batches/{batch}/publish — 人工审核发布 RNG 批次。
  */
-class DrawResultBatchPublishController extends Controller
+final class DrawResultBatchPublishController extends Controller
 {
     public function __construct(
         private readonly DrawPublishService $publishService,

app/Http/Controllers/Api/V1/Admin/Draw/DrawSettlementRunController.php

@@ -2,14 +2,14 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Draw;
 
-use App\Http\Controllers\Controller;
-use App\Lottery\ErrorCode;
-use App\Models\AdminUser;
 use App\Models\Draw;
-use App\Services\Settlement\SettlementOrchestrator;
+use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Services\Settlement\SettlementOrchestrator;
 
 /**
  * POST /api/v1/admin/draws/{draw}/settlement/run — 对 `settling` 期号执行结算（可关自动结算时手工触发）。

app/Http/Controllers/Api/V1/Admin/Jackpot/AdminJackpotContributionIndexController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Jackpot;
 
-use App\Http\Controllers\Controller;
-use App\Models\JackpotContribution;
+use Illuminate\Http\Request;
 use App\Support\AdminApiList;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Models\JackpotContribution;
+use App\Http\Controllers\Controller;
 
 /**
  * GET /api/v1/admin/jackpot/contributions — Jackpot 蓄水流水。

app/Http/Controllers/Api/V1/Admin/Jackpot/AdminJackpotPayoutLogIndexController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Jackpot;
 
-use App\Http\Controllers\Controller;
-use App\Models\JackpotPayoutLog;
-use App\Support\AdminApiList;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use App\Models\JackpotPayoutLog;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * GET /api/v1/admin/jackpot/payout-logs — Jackpot 派彩（爆池）记录。

app/Http/Controllers/Api/V1/Admin/Jackpot/AdminJackpotPoolIndexController.php

@@ -2,10 +2,10 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Jackpot;
 
-use App\Http\Controllers\Controller;
 use App\Models\JackpotPool;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * GET /api/v1/admin/jackpot/pools — Jackpot 奖池配置列表。

app/Http/Controllers/Api/V1/Admin/Jackpot/AdminJackpotPoolUpdateController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Jackpot;
 
-use App\Http\Controllers\Controller;
 use App\Models\JackpotPool;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * PUT /api/v1/admin/jackpot/pools/{pool} — 更新奖池运营参数（蓄水比例、阈值等）。

app/Http/Controllers/Api/V1/Admin/PingController.php

@@ -2,15 +2,15 @@
 
 namespace App\Http\Controllers\Api\V1\Admin;
 
-use App\Http\Controllers\Controller;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * Bearer Token 必填（{@see EnsureAdminApi} + Sanctum）；确认 `/api/v1/admin` 鉴权链路可达。
  * 路由：GET /api/v1/admin/ping
  */
-class PingController extends Controller
+final class PingController extends Controller
 {
     public function __invoke(): JsonResponse
     {

app/Http/Controllers/Api/V1/Admin/PlayTypeIndexController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin;
 
-use App\Http\Controllers\Controller;
 use App\Models\PlayType;
-use App\Support\AdminConfigPresenter;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
 
 /** GET /api/v1/admin/play-types */
 final class PlayTypeIndexController extends Controller

app/Http/Controllers/Api/V1/Admin/PlayTypePatchController.php

@@ -2,12 +2,12 @@
 
 namespace App\Http\Controllers\Api\V1\Admin;
 
-use App\Http\Controllers\Controller;
 use App\Models\PlayType;
-use App\Support\AdminConfigPresenter;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminConfigPresenter;
 
 /** PATCH /api/v1/admin/play-types/{play_code} — 主目录层开关与展示名（不等同于版本化 items）。 */
 final class PlayTypePatchController extends Controller

app/Http/Controllers/Api/V1/Admin/Player/AdminPlayerTicketItemsIndexController.php

@@ -2,12 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Player;
 
-use App\Http\Controllers\Controller;
 use App\Models\Player;
 use App\Models\TicketItem;
 use App\Support\ApiResponse;
+use App\Support\PaginationTrait;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Admin\AdminPlayerTicketItemsRequest;
 
 /**
  * GET /api/v1/admin/players/{player}/ticket-items — 客服/财务按玩家查注单（PRD §15.4）。
@@ -16,17 +17,16 @@ use Illuminate\Http\Request;
  */
 final class AdminPlayerTicketItemsIndexController extends Controller
 {
-    public function __invoke(Request $request, Player $player): JsonResponse
-    {
-        $validated = validator($request->query(), [
-            'page' => ['sometimes', 'integer', 'min:1'],
-            'per_page' => ['sometimes', 'integer', 'min:1', 'max:50'],
-            'draw_no' => ['sometimes', 'nullable', 'string', 'max:32'],
-        ])->validate();
+    use PaginationTrait;
 
-        $perPage = max(1, min(50, (int) ($validated['per_page'] ?? 20)));
-        $page = max(1, (int) ($validated['page'] ?? 1));
-        $drawNo = isset($validated['draw_no']) ? trim((string) $validated['draw_no']) : '';
+    public function __invoke(AdminPlayerTicketItemsRequest $request, Player $player): JsonResponse
+    {
+        $perPage = $this->perPage($request, 'per_page', 20, 50);
+        $page = $this->page($request);
+        $drawNo = $request->validated('draw_no');
+        if (is_string($drawNo)) {
+            $drawNo = trim($drawNo);
+        }
 
         $query = TicketItem::query()
             ->where('ticket_items.player_id', $player->id)

app/Http/Controllers/Api/V1/Admin/Player/PlayerWalletShowController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Player;
 
-use App\Http\Controllers\Controller;
 use App\Models\Player;
 use App\Models\PlayerWallet;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * 后台：按玩家查询钱包余额（`player_wallets` 全币种）。

app/Http/Controllers/Api/V1/Admin/Reconcile/ReconcileItemIndexController.php

@@ -2,12 +2,12 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Reconcile;
 
-use App\Http\Controllers\Controller;
-use App\Models\ReconcileItem;
 use App\Models\ReconcileJob;
+use Illuminate\Http\Request;
+use App\Models\ReconcileItem;
 use App\Support\AdminApiList;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
 
 /** GET /api/v1/admin/reconcile-jobs/{reconcile_job}/items */
 final class ReconcileItemIndexController extends Controller

app/Http/Controllers/Api/V1/Admin/Reconcile/ReconcileJobIndexController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Reconcile;
 
-use App\Http\Controllers\Controller;
 use App\Models\ReconcileJob;
+use Illuminate\Http\Request;
 use App\Support\AdminApiList;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
 
 /** GET /api/v1/admin/reconcile-jobs */
 final class ReconcileJobIndexController extends Controller

app/Http/Controllers/Api/V1/Admin/Reconcile/ReconcileJobShowController.php

@@ -2,10 +2,10 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Reconcile;
 
-use App\Http\Controllers\Controller;
 use App\Models\ReconcileJob;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /** GET /api/v1/admin/reconcile-jobs/{reconcile_job} */
 final class ReconcileJobShowController extends Controller

app/Http/Controllers/Api/V1/Admin/Reconcile/ReconcileJobStoreController.php

@@ -2,32 +2,23 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Reconcile;
 
-use App\Http\Controllers\Controller;
-use App\Models\AdminUser;
-use App\Services\Admin\AdminReconcileJobService;
-use App\Support\ApiResponse;
 use Carbon\Carbon;
+use App\Models\AdminUser;
+use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
+use App\Services\Admin\AdminReconcileJobService;
+use App\Http\Requests\Admin\ReconcileJobStoreRequest;
 
 /** POST /api/v1/admin/reconcile-jobs */
 final class ReconcileJobStoreController extends Controller
 {
-    public function __invoke(Request $request, AdminReconcileJobService $service): JsonResponse
+    public function __invoke(ReconcileJobStoreRequest $request, AdminReconcileJobService $service): JsonResponse
     {
         /** @var AdminUser $admin */
         $admin = $request->lotteryAdmin();
 
-        $data = validator($request->all(), [
-            'reconcile_type' => ['required', 'string', 'max:32'],
-            'period_start' => ['nullable', 'date'],
-            'period_end' => ['nullable', 'date', 'after_or_equal:period_start'],
-            'items' => ['nullable', 'array', 'max:5000'],
-            'items.*.side_a_ref' => ['nullable', 'string', 'max:128'],
-            'items.*.side_b_ref' => ['nullable', 'string', 'max:128'],
-            'items.*.difference_amount' => ['nullable', 'integer'],
-            'items.*.status' => ['nullable', 'string', 'max:32'],
-        ])->validate();
+        $data = $request->validated();
 
         $job = $service->createJob(
             $admin,

app/Http/Controllers/Api/V1/Admin/Reports/ReportJobIndexController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Reports;
 
-use App\Http\Controllers\Controller;
 use App\Models\ReportJob;
+use Illuminate\Http\Request;
 use App\Support\AdminApiList;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
 
 /** GET /api/v1/admin/report-jobs */
 final class ReportJobIndexController extends Controller

app/Http/Controllers/Api/V1/Admin/Reports/ReportJobShowController.php

@@ -2,10 +2,10 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Reports;
 
-use App\Http\Controllers\Controller;
 use App\Models\ReportJob;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /** GET /api/v1/admin/report-jobs/{report_job} */
 final class ReportJobShowController extends Controller

app/Http/Controllers/Api/V1/Admin/Reports/ReportJobStoreController.php

@@ -2,26 +2,22 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Reports;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
-use App\Services\Admin\AdminReportJobService;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
+use App\Services\Admin\AdminReportJobService;
+use App\Http\Requests\Admin\ReportJobStoreRequest;
 
 /** POST /api/v1/admin/report-jobs */
 final class ReportJobStoreController extends Controller
 {
-    public function __invoke(Request $request, AdminReportJobService $service): JsonResponse
+    public function __invoke(ReportJobStoreRequest $request, AdminReportJobService $service): JsonResponse
     {
         /** @var AdminUser $admin */
         $admin = $request->lotteryAdmin();
 
-        $data = validator($request->all(), [
-            'report_type' => ['required', 'string', 'max:64'],
-            'export_format' => ['sometimes', 'string', 'in:csv,xlsx'],
-            'filter_json' => ['nullable', 'array'],
-        ])->validate();
+        $data = $request->validated();
 
         $job = $service->enqueue(
             $admin,

app/Http/Controllers/Api/V1/Admin/Risk/AdminRiskPoolIndexController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Risk;
 
-use App\Http\Controllers\Controller;
 use App\Models\Draw;
 use App\Models\RiskPool;
-use App\Support\AdminApiList;
-use Illuminate\Contracts\Pagination\LengthAwarePaginator;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use Illuminate\Contracts\Pagination\LengthAwarePaginator;
 
 /**
  * GET /api/v1/admin/draws/{draw}/risk-pools — 按期号分页查询赔付池事实（售罄筛选、排序）。

app/Http/Controllers/Api/V1/Admin/Risk/AdminRiskPoolLockLogIndexController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Risk;
 
-use App\Http\Controllers\Controller;
 use App\Models\Draw;
-use App\Models\RiskPoolLockLog;
-use App\Support\AdminApiList;
-use Illuminate\Contracts\Pagination\LengthAwarePaginator;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use App\Models\RiskPoolLockLog;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use Illuminate\Contracts\Pagination\LengthAwarePaginator;
 
 /**
  * GET /api/v1/admin/draws/{draw}/risk-pool-lock-logs — 风险池占用/释放流水（审计与监控）。

app/Http/Controllers/Api/V1/Admin/Risk/AdminRiskPoolShowController.php

@@ -21,7 +21,12 @@ final class AdminRiskPoolShowController extends Controller
     public function __invoke(Request $request, Draw $draw, string $number_4d): JsonResponse
     {
         if (preg_match('/^[0-9]{4}$/', $number_4d) !== 1) {
-            return ApiResponse::error('normalized_number 须为 4 位数字', ErrorCode::ValidationFailed->value, null, 422);
+            return ApiResponse::error(
+                trans('api.validation_failed', [], $request->lotteryLocale()),
+                ErrorCode::ValidationFailed->value,
+                null,
+                422,
+            );
         }
 
         $pool = RiskPool::query()
@@ -30,7 +35,12 @@ final class AdminRiskPoolShowController extends Controller
             ->first();
 
         if ($pool === null) {
-            return ApiResponse::error('该期尚无此号码的风险池记录', ErrorCode::NotFound->value, null, 404);
+            return ApiResponse::error(
+                trans('api.not_found', [], $request->lotteryLocale()),
+                ErrorCode::NotFound->value,
+                null,
+                404,
+            );
         }
 
         $p = AdminApiList::readPaging($request, 20, AdminApiList::MAX_PER_PAGE);

app/Http/Controllers/Api/V1/Admin/Settlement/AdminSettlementBatchDetailsController.php

@@ -2,12 +2,12 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Settlement;
 
-use App\Http\Controllers\Controller;
-use App\Models\SettlementBatch;
-use App\Models\TicketSettlementDetail;
-use App\Support\AdminApiList;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use App\Models\SettlementBatch;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Models\TicketSettlementDetail;
 
 /**
  * GET /api/v1/admin/settlement-batches/{batch}/details — 该批次下注单结算明细分页。

app/Http/Controllers/Api/V1/Admin/Settlement/AdminSettlementBatchIndexController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Settlement;
 
-use App\Http\Controllers\Controller;
-use App\Models\SettlementBatch;
-use App\Support\AdminApiList;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use App\Models\SettlementBatch;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * GET /api/v1/admin/settlement-batches — 结算批次分页列表。

app/Http/Controllers/Api/V1/Admin/Settlement/AdminSettlementBatchShowController.php

@@ -2,10 +2,10 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Settlement;
 
-use App\Http\Controllers\Controller;
-use App\Models\SettlementBatch;
 use App\Support\ApiResponse;
+use App\Models\SettlementBatch;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * GET /api/v1/admin/settlement-batches/{batch} — 单批次摘要。

app/Http/Controllers/Api/V1/Admin/User/AdminPermissionCatalogController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\User;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminRole;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Support\Facades\DB;
+use App\Http\Controllers\Controller;
 
 /** GET /api/v1/admin/admin-user-permission-catalog */
 final class AdminPermissionCatalogController extends Controller

app/Http/Controllers/Api/V1/Admin/User/AdminUserDestroyController.php

@@ -2,14 +2,14 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\User;
 
-use App\Http\Controllers\Controller;
-use App\Lottery\ErrorCode;
 use App\Models\AdminUser;
-use App\Services\AuditLogger;
-use App\Support\AdminUserApiPresenter;
+use App\Lottery\ErrorCode;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Services\AuditLogger;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminUserApiPresenter;
 
 /** DELETE /api/v1/admin/admin-users/{admin_user} */
 final class AdminUserDestroyController extends Controller

app/Http/Controllers/Api/V1/Admin/User/AdminUserIndexController.php

@@ -2,12 +2,12 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\User;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
-use App\Support\AdminApiList;
-use App\Support\AdminUserApiPresenter;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\AdminApiList;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminUserApiPresenter;
 
 /** GET /api/v1/admin/admin-users */
 final class AdminUserIndexController extends Controller

app/Http/Controllers/Api/V1/Admin/User/AdminUserPermissionSyncController.php

@@ -2,27 +2,20 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\User;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
-use App\Support\AdminPermissionBridge;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
 use Illuminate\Support\Facades\DB;
-use Illuminate\Validation\Rule;
+use App\Http\Controllers\Controller;
+use App\Support\AdminPermissionBridge;
+use App\Http\Requests\Admin\AdminUserPermissionSyncRequest;
 
 /** PUT /api/v1/admin/admin-users/{admin_user}/permissions */
 final class AdminUserPermissionSyncController extends Controller
 {
-    public function __invoke(Request $request, AdminUser $admin_user): JsonResponse
+    public function __invoke(AdminUserPermissionSyncRequest $request, AdminUser $admin_user): JsonResponse
     {
-        /** @var array{permission_slugs:list<string>} $data */
-        $data = validator($request->all(), [
-            'permission_slugs' => ['required', 'array'],
-            'permission_slugs.*' => ['string', 'max:128', 'distinct', Rule::in(AdminPermissionBridge::allLegacySlugs())],
-        ])->validate();
-
-        $slugs = array_values(array_unique($data['permission_slugs']));
+        $slugs = array_values(array_unique($request->validated('permissions')));
         $siteId = AdminUser::defaultAdminSiteId();
 
         $codes = [];

app/Http/Controllers/Api/V1/Admin/User/AdminUserRoleSyncController.php

@@ -2,25 +2,18 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\User;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
-use Illuminate\Validation\Rule;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Admin\AdminUserRoleSyncRequest;
 
 /** PUT /api/v1/admin/admin-users/{admin_user}/roles */
 final class AdminUserRoleSyncController extends Controller
 {
-    public function __invoke(Request $request, AdminUser $admin_user): JsonResponse
+    public function __invoke(AdminUserRoleSyncRequest $request, AdminUser $admin_user): JsonResponse
     {
-        /** @var array{role_slugs:list<string>} $data */
-        $data = validator($request->all(), [
-            'role_slugs' => ['required', 'array'],
-            'role_slugs.*' => ['string', 'max:64', 'distinct', Rule::exists('admin_roles', 'slug')],
-        ])->validate();
-
-        $slugs = array_values(array_unique($data['role_slugs']));
+        $slugs = array_values(array_unique($request->validated('role_slugs')));
         $admin_user->syncRoleSlugsForDefaultSite($slugs);
 
         $admin_user->load('roles');

app/Http/Controllers/Api/V1/Admin/User/AdminUserShowController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\User;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
-use App\Support\AdminUserApiPresenter;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Support\AdminUserApiPresenter;
 
 /** GET /api/v1/admin/admin-users/{admin_user} */
 final class AdminUserShowController extends Controller

app/Http/Controllers/Api/V1/Admin/User/AdminUserStoreController.php

@@ -2,55 +2,40 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\User;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
-use App\Services\AuditLogger;
-use App\Support\AdminUserApiPresenter;
 use App\Support\ApiResponse;
+use App\Services\AuditLogger;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
 use Illuminate\Support\Facades\DB;
-use Illuminate\Support\Str;
+use App\Http\Controllers\Controller;
+use App\Support\AdminUserApiPresenter;
+use App\Http\Requests\Admin\AdminUserStoreRequest;
 
-/** POST /api/v1/admin/admin-users */
+/**
+ * 管理员用户创建。
+ *
+ * POST /api/v1/admin/admin-users
+ */
 final class AdminUserStoreController extends Controller
 {
-    public function __invoke(Request $request): JsonResponse
+    public function __invoke(AdminUserStoreRequest $request): JsonResponse
     {
         /** @var AdminUser $actor */
         $actor = $request->lotteryAdmin();
 
-        $payload = $request->all();
-        if (isset($payload['username']) && is_string($payload['username'])) {
-            $payload['username'] = Str::lower(trim($payload['username']));
-        }
-        if (array_key_exists('email', $payload) && $payload['email'] === '') {
-            $payload['email'] = null;
-        }
-
-        $data = validator($payload, [
-            'username' => ['required', 'string', 'min:2', 'max:64', 'regex:/^[a-zA-Z0-9._-]+$/u', 'unique:admin_users,username'],
-            'nickname' => ['required', 'string', 'max:128'],
-            'email' => ['nullable', 'string', 'email', 'max:255'],
-            'password' => ['required', 'string', 'min:8', 'max:256'],
-            'status' => ['sometimes', 'integer', 'in:0,1'],
-            'role_slugs' => ['required', 'array', 'min:1'],
-            'role_slugs.*' => ['string', 'max:64', 'distinct', 'exists:admin_roles,slug'],
-        ])->validate();
-
-        $email = is_string($data['email'] ?? null) && trim($data['email']) !== ''
-            ? trim($data['email'])
+        $email = is_string($request->validated('email'))
+            ? trim($request->validated('email'))
             : null;
 
-        $roleSlugs = array_values(array_unique($data['role_slugs']));
+        $roleSlugs = array_values(array_unique($request->validated('role_slugs')));
 
-        $user = DB::transaction(function () use ($data, $email, $roleSlugs): AdminUser {
+        $user = DB::transaction(function () use ($request, $email, $roleSlugs): AdminUser {
             $created = AdminUser::query()->create([
-                'username' => $data['username'],
-                'name' => $data['nickname'],
+                'username' => $request->validated('username'),
+                'name' => $request->validated('nickname'),
                 'email' => $email,
-                'password' => $data['password'],
-                'status' => array_key_exists('status', $data) ? (int) $data['status'] : 0,
+                'password' => $request->validated('password'),
+                'status' => $request->validated('status', 0),
             ]);
             $created->syncRoleSlugsForDefaultSite($roleSlugs);
 

app/Http/Controllers/Api/V1/Admin/User/AdminUserUpdateController.php

@@ -2,19 +2,18 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\User;
 
-use App\Http\Controllers\Controller;
 use App\Models\AdminUser;
-use App\Services\AuditLogger;
-use App\Support\AdminUserApiPresenter;
 use App\Support\ApiResponse;
+use App\Services\AuditLogger;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
-use Illuminate\Validation\Rule;
+use App\Http\Controllers\Controller;
+use App\Support\AdminUserApiPresenter;
+use App\Http\Requests\Admin\AdminUserUpdateRequest;
 
 /** PUT /api/v1/admin/admin-users/{admin_user} */
 final class AdminUserUpdateController extends Controller
 {
-    public function __invoke(Request $request, AdminUser $admin_user): JsonResponse
+    public function __invoke(AdminUserUpdateRequest $request, AdminUser $admin_user): JsonResponse
     {
         /** @var AdminUser $actor */
         $actor = $request->lotteryAdmin();
@@ -22,18 +21,7 @@ final class AdminUserUpdateController extends Controller
         $admin_user->load('roles');
         $before = AdminUserApiPresenter::listItem($admin_user);
 
-        $payload = $request->all();
-        if (array_key_exists('email', $payload) && $payload['email'] === '') {
-            $payload['email'] = null;
-        }
-
-        /** @var array{nickname?:string,email?:?string,password?:?string,status?:int} $data */
-        $data = validator($payload, [
-            'nickname' => ['sometimes', 'string', 'max:128'],
-            'email' => ['sometimes', 'nullable', 'string', 'email', 'max:255', Rule::unique('admin_users', 'email')->ignore($admin_user->id)],
-            'password' => ['sometimes', 'nullable', 'string', 'min:8', 'max:256'],
-            'status' => ['sometimes', 'integer', Rule::in([0, 1])],
-        ])->validate();
+        $data = $request->validated();
 
         $updates = [];
         if (array_key_exists('nickname', $data)) {

app/Http/Controllers/Api/V1/Admin/Wallet/TransferOrderListController.php

@@ -2,11 +2,12 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Wallet;
 
-use App\Http\Controllers\Controller;
-use App\Models\TransferOrder;
 use App\Support\ApiResponse;
+use App\Models\TransferOrder;
+use App\Support\PaginationTrait;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Admin\TransferOrderListRequest;
 
 /**
  * 后台：转账单列表（主站 ↔ 彩票 {@see transfer_orders}）。
@@ -25,26 +26,16 @@ use Illuminate\Http\Request;
  */
 final class TransferOrderListController extends Controller
 {
+    use PaginationTrait;
+
     private const ALLOWED_STATUS = ['processing', 'success', 'failed', 'pending_reconcile'];
 
-    public function __invoke(Request $request): JsonResponse
+    public function __invoke(TransferOrderListRequest $request): JsonResponse
     {
-        $validated = validator($request->query(), [
-            'page' => ['sometimes', 'integer', 'min:1'],
-            'per_page' => ['sometimes', 'integer', 'min:1', 'max:100'],
-            'size' => ['sometimes', 'integer', 'min:1', 'max:100'],
-            'player_id' => ['sometimes', 'nullable', 'integer', 'min:1'],
-            'player_account' => ['sometimes', 'nullable', 'string', 'max:128'],
-            'transfer_no' => ['sometimes', 'nullable', 'string', 'max:96'],
-            'external_ref_no' => ['sometimes', 'nullable', 'string', 'max:96'],
-            'created_from' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
-            'created_to' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
-            'status' => ['sometimes', 'nullable', 'string', 'max:256'],
-        ])->validate();
+        $validated = $request->validated();
 
-        $perPage = (int) ($validated['per_page'] ?? $validated['size'] ?? 20);
-        $perPage = min(100, max(1, $perPage));
-        $page = max(1, (int) ($validated['page'] ?? 1));
+        $perPage = $this->perPage($request, 'per_page', 20, 100);
+        $page = $this->page($request);
 
         $query = TransferOrder::query()
             ->with(['player:id,site_code,site_player_id,username,nickname'])

app/Http/Controllers/Api/V1/Admin/Wallet/WalletTransactionListController.php

@@ -2,11 +2,12 @@
 
 namespace App\Http\Controllers\Api\V1\Admin\Wallet;
 
-use App\Http\Controllers\Controller;
 use App\Models\WalletTxn;
 use App\Support\ApiResponse;
+use App\Support\PaginationTrait;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Admin\WalletTransactionListRequest;
 
 /**
  * 后台：彩票钱包流水列表 {@see wallet_txns}。
@@ -25,27 +26,16 @@ use Illuminate\Http\Request;
  */
 final class WalletTransactionListController extends Controller
 {
+    use PaginationTrait;
+
     private const ALLOWED_STATUS = ['posted', 'pending_reconcile'];
 
-    public function __invoke(Request $request): JsonResponse
+    public function __invoke(WalletTransactionListRequest $request): JsonResponse
     {
-        $validated = validator($request->query(), [
-            'page' => ['sometimes', 'integer', 'min:1'],
-            'per_page' => ['sometimes', 'integer', 'min:1', 'max:100'],
-            'size' => ['sometimes', 'integer', 'min:1', 'max:100'],
-            'player_id' => ['sometimes', 'nullable', 'integer', 'min:1'],
-            'player_account' => ['sometimes', 'nullable', 'string', 'max:128'],
-            'txn_no' => ['sometimes', 'nullable', 'string', 'max:96'],
-            'external_ref_no' => ['sometimes', 'nullable', 'string', 'max:96'],
-            'created_from' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
-            'created_to' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
-            'biz_type' => ['sometimes', 'nullable', 'string', 'max:64'],
-            'status' => ['sometimes', 'nullable', 'string', 'max:128'],
-        ])->validate();
+        $validated = $request->validated();
 
-        $perPage = (int) ($validated['per_page'] ?? $validated['size'] ?? 20);
-        $perPage = min(100, max(1, $perPage));
-        $page = max(1, (int) ($validated['page'] ?? 1));
+        $perPage = $this->perPage($request, 'per_page', 20, 100);
+        $page = $this->page($request);
 
         $query = WalletTxn::query()
             ->with(['player:id,site_code,site_player_id,username,nickname'])

app/Http/Controllers/Api/V1/Draw/DrawCurrentController.php

@@ -2,16 +2,16 @@
 
 namespace App\Http\Controllers\Api\V1\Draw;
 
+use App\Support\ApiResponse;
+use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
 use App\Services\Draw\DrawHallSnapshotBuilder;
-use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
 
 /**
  * 下注大厅：`GET /api/v1/draw/current`。
  */
-class DrawCurrentController extends Controller
+final class DrawCurrentController extends Controller
 {
     public function __construct(
         private readonly DrawHallSnapshotBuilder $snapshot,

app/Http/Controllers/Api/V1/Draw/DrawResultShowController.php

@@ -2,18 +2,18 @@
 
 namespace App\Http\Controllers\Api\V1\Draw;
 
-use App\Http\Controllers\Controller;
-use App\Lottery\ErrorCode;
 use App\Models\Draw;
-use App\Services\Draw\DrawResultViewService;
+use App\Lottery\ErrorCode;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Services\Draw\DrawResultViewService;
 
 /**
  * `GET /api/v1/draw/results/{draw_no}` — 单期详情（便于玩家端[< >]切换）。
  */
-class DrawResultShowController extends Controller
+final class DrawResultShowController extends Controller
 {
     public function __construct(
         private readonly DrawResultViewService $viewer,

app/Http/Controllers/Api/V1/Draw/DrawResultsIndexController.php

@@ -2,29 +2,32 @@
 
 namespace App\Http\Controllers\Api\V1\Draw;
 
+use App\Models\Draw;
+use App\Support\ApiResponse;
+use Illuminate\Http\Request;
+use App\Models\DrawResultBatch;
+use App\Support\PaginationTrait;
+use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
 use App\Lottery\DrawResultBatchStatus;
-use App\Models\Draw;
-use App\Models\DrawResultBatch;
 use App\Services\Draw\DrawResultViewService;
-use App\Support\ApiResponse;
 use Illuminate\Contracts\Pagination\LengthAwarePaginator;
-use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
 
 /**
  * `GET /api/v1/draw/results` — 已发布开奖往期（公开；对齐 PRD `/api/v1/results`）。
  */
-class DrawResultsIndexController extends Controller
+final class DrawResultsIndexController extends Controller
 {
+    use PaginationTrait;
+
     public function __construct(
         private readonly DrawResultViewService $viewer,
     ) {}
 
     public function __invoke(Request $request): JsonResponse
     {
-        $perPage = max(1, min(50, (int) $request->query('size', $request->query('per_page', 15))));
-        $page = max(1, (int) $request->query('page', 1));
+        $perPage = $this->perPage($request, 'size', 15, 50);
+        $page = $this->page($request);
         /** @var string|null $bizDate query `business_date` 或旧的 `date` */
         $bizDate = $request->query('business_date') ?? $request->query('date');
 

app/Http/Controllers/Api/V1/HealthController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers\Api\V1;
 
-use App\Http\Controllers\Controller;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
-class HealthController extends Controller
+final class HealthController extends Controller
 {
     /**
      * 健康检查（Next / 网关探活）。路径：GET /api/v1/health

app/Http/Controllers/Api/V1/Jackpot/JackpotSummaryController.php

@@ -2,16 +2,16 @@
 
 namespace App\Http\Controllers\Api\V1\Jackpot;
 
-use App\Http\Controllers\Controller;
 use App\Models\JackpotPool;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * `GET /api/v1/jackpot/summary` — 当前奖池水位（公开；玩家端开奖区展示）。
  */
-class JackpotSummaryController extends Controller
+final class JackpotSummaryController extends Controller
 {
     public function __invoke(Request $request): JsonResponse
     {

app/Http/Controllers/Api/V1/Play/PlayEffectiveCatalogController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Play;
 
-use App\Http\Controllers\Controller;
 use App\Lottery\ErrorCode;
-use App\Services\Config\EffectivePlayCatalogService;
 use App\Support\ApiResponse;
-use Illuminate\Database\Eloquent\ModelNotFoundException;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Services\Config\EffectivePlayCatalogService;
+use Illuminate\Database\Eloquent\ModelNotFoundException;
 
 /**
  * GET /api/v1/play/effective — 当前生效的玩法目录 + 赔率 + 封顶（公开，无需登录）。

app/Http/Controllers/Api/V1/Player/MeController.php

@@ -2,10 +2,10 @@
 
 namespace App\Http\Controllers\Api\V1\Player;
 
-use App\Http\Controllers\Controller;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * 鉴权自检：返回当前 Token 对应的玩家公开字段（不含密码）。
@@ -15,7 +15,7 @@ use Illuminate\Http\Request;
  * 补充字段与 PRD「识别玩家」及前端引导一致：`locale` 为当次 API 实际使用的语言（与 `NegotiateLotteryLocale` 一致）；
  * 时间类为 ISO 8601 字符串，便于 H5 展示与排错。
  */
-class MeController extends Controller
+final class MeController extends Controller
 {
     public function __invoke(Request $request): JsonResponse
     {

app/Http/Controllers/Api/V1/Player/PingController.php

@@ -2,15 +2,15 @@
 
 namespace App\Http\Controllers\Api\V1\Player;
 
-use App\Http\Controllers\Controller;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * 无需登录：仅供网关/前端确认「玩家 API 前缀」可达。
  * 路由：GET /api/v1/player/ping
  */
-class PingController extends Controller
+final class PingController extends Controller
 {
     public function __invoke(): JsonResponse
     {

app/Http/Controllers/Api/V1/Ticket/TicketDrawMyMatchController.php

@@ -2,20 +2,20 @@
 
 namespace App\Http\Controllers\Api\V1\Ticket;
 
-use App\Http\Controllers\Controller;
 use App\Models\Draw;
 use App\Models\Player;
-use App\Models\TicketCombination;
 use App\Models\TicketItem;
-use App\Services\Draw\DrawResultViewService;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Models\TicketCombination;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Services\Draw\DrawResultViewService;
 
 /**
  * `GET /api/v1/ticket/draws/{draw_no}/my-match` — 当期本人号码与已发布开奖 23 格的交集（用于开奖页高亮）。
  */
-class TicketDrawMyMatchController extends Controller
+final class TicketDrawMyMatchController extends Controller
 {
     public function __construct(
         private readonly DrawResultViewService $drawResultView,

app/Http/Controllers/Api/V1/Ticket/TicketItemShowController.php

@@ -2,19 +2,19 @@
 
 namespace App\Http\Controllers\Api\V1\Ticket;
 
-use App\Http\Controllers\Controller;
-use App\Lottery\ErrorCode;
 use App\Models\Player;
+use App\Lottery\ErrorCode;
 use App\Models\TicketItem;
-use App\Services\Draw\DrawResultViewService;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Services\Draw\DrawResultViewService;
 
 /**
  * `GET /api/v1/ticket/items/{ticket_no}` — 注单详情（单注项 + 组合 + 结算摘要）。
  */
-class TicketItemShowController extends Controller
+final class TicketItemShowController extends Controller
 {
     public function __construct(
         private readonly DrawResultViewService $drawResultView,

app/Http/Controllers/Api/V1/Ticket/TicketItemsIndexController.php

@@ -2,25 +2,28 @@
 
 namespace App\Http\Controllers\Api\V1\Ticket;
 
-use App\Http\Controllers\Controller;
 use App\Models\Player;
 use App\Models\TicketItem;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\PaginationTrait;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * `GET /api/v1/ticket/items` — 我的注单（注项列表，支持 `draw_no` 筛选）。
  */
-class TicketItemsIndexController extends Controller
+final class TicketItemsIndexController extends Controller
 {
+    use PaginationTrait;
+
     public function __invoke(Request $request): JsonResponse
     {
         /** @var Player $player */
         $player = $request->attributes->get('lottery_player');
 
-        $perPage = max(1, min(50, (int) $request->query('per_page', 20)));
-        $page = max(1, (int) $request->query('page', 1));
+        $perPage = $this->perPage($request, 'per_page', 20, 50);
+        $page = $this->page($request);
         $drawNo = $request->query('draw_no');
 
         $query = TicketItem::query()

app/Http/Controllers/Api/V1/Ticket/TicketPlaceController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Ticket;
 
-use App\Exceptions\TicketOperationException;
-use App\Http\Controllers\Controller;
-use App\Http\Requests\Ticket\TicketPlaceRequest;
-use App\Services\Ticket\TicketPlacementService;
 use App\Support\ApiResponse;
 use App\Support\LotteryMessage;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Exceptions\TicketOperationException;
+use App\Services\Ticket\TicketPlacementService;
+use App\Http\Requests\Ticket\TicketPlaceRequest;
 
 final class TicketPlaceController extends Controller
 {

app/Http/Controllers/Api/V1/Ticket/TicketPreviewController.php

@@ -2,13 +2,13 @@
 
 namespace App\Http\Controllers\Api\V1\Ticket;
 
-use App\Exceptions\TicketOperationException;
-use App\Http\Controllers\Controller;
-use App\Http\Requests\Ticket\TicketPreviewRequest;
-use App\Services\Ticket\TicketPreviewService;
 use App\Support\ApiResponse;
 use App\Support\LotteryMessage;
 use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Exceptions\TicketOperationException;
+use App\Services\Ticket\TicketPreviewService;
+use App\Http\Requests\Ticket\TicketPreviewRequest;
 
 final class TicketPreviewController extends Controller
 {

app/Http/Controllers/Api/V1/Wallet/WalletBalanceController.php

@@ -2,13 +2,14 @@
 
 namespace App\Http\Controllers\Api\V1\Wallet;
 
-use App\Http\Controllers\Controller;
-use App\Lottery\ErrorCode;
 use App\Models\Player;
+use App\Lottery\ErrorCode;
 use App\Models\PlayerWallet;
 use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use App\Support\CurrencyResolver;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * 【玩家】查询彩票侧钱包余额。
@@ -22,7 +23,7 @@ use Illuminate\Http\Request;
  * - `available_balance`：`balance - frozen_balance`，表示当前可用于下注的整数最小货币单位（不为负）
  * - `main_balance`：主站钱包余额占位，接入主站 API 后再返回实数；当前固定 `null`
  */
-class WalletBalanceController extends Controller
+final class WalletBalanceController extends Controller
 {
     private const WALLET_TYPE_LOTTERY = 'lottery';
 
@@ -68,16 +69,9 @@ class WalletBalanceController extends Controller
      */
     private function resolveCurrencyCode(Request $request, Player $player): string|JsonResponse
     {
-        $raw = $request->query('currency');
-        if (is_string($raw) && $raw !== '') {
-            $code = strtoupper(substr(trim($raw), 0, 16));
-        } else {
-            $fallback = $player->default_currency ?? config('lottery.default_currency', 'NPR');
-            $code = strtoupper(substr(trim((string) $fallback), 0, 16));
-        }
+        $code = CurrencyResolver::resolve($request, $player, 'currency');
 
-        // 币种码：字母数字，长度 1–16，与 migrations 字段一致
-        if (! preg_match('/^[A-Z0-9]{1,16}$/', $code)) {
+        if (! CurrencyResolver::isValid($code)) {
             return ApiResponse::error(
                 __('wallet.invalid_currency'),
                 ErrorCode::WalletInvalidCurrency->value,

app/Http/Controllers/Api/V1/Wallet/WalletLogsController.php

@@ -2,21 +2,24 @@
 
 namespace App\Http\Controllers\Api\V1\Wallet;
 
-use App\Http\Controllers\Controller;
-use App\Models\TransferOrder;
 use App\Models\WalletTxn;
-use App\Support\ApiResponse;
-use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
 use Illuminate\Support\Str;
+use App\Support\ApiResponse;
+use Illuminate\Http\Request;
+use App\Models\TransferOrder;
+use App\Support\PaginationTrait;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
 
 /**
  * PRD §10.1.1：`GET /api/v1/wallet/logs` — 钱包流水。
  *
  * Query：`page`、`size`（每页条数，默认 20）、`type`（逗号分隔：transfer_in,transfer_out,bet,prize,refund）
  */
-class WalletLogsController extends Controller
+final class WalletLogsController extends Controller
 {
+    use PaginationTrait;
+
     /** PRD 对外类型 → 本地 biz_type */
     private const TYPE_TO_BIZ = [
         'transfer_in' => ['transfer_in'],
@@ -31,8 +34,8 @@ class WalletLogsController extends Controller
         $player = $request->lotteryPlayer();
         abort_if($player === null, 500, 'lottery_player missing');
 
-        $perPage = min(100, max(1, (int) $request->query('size', $request->query('per_page', 20))));
-        $page = max(1, (int) $request->query('page', 1));
+        $perPage = $this->perPage($request, 'size', 20, 100);
+        $page = $this->page($request);
 
         $pendingPayload = $this->pendingReconcilePayload((int) $player->id);
 

app/Http/Controllers/Api/V1/Wallet/WalletTransferInController.php

@@ -2,23 +2,23 @@
 
 namespace App\Http\Controllers\Api\V1\Wallet;
 
-use App\Exceptions\WalletOperationException;
-use App\Http\Controllers\Controller;
-use App\Http\Requests\Wallet\WalletTransferRequest;
-use App\Lottery\ErrorCode;
 use App\Models\Player;
-use App\Services\Wallet\LotteryTransferService;
+use App\Lottery\ErrorCode;
 use App\Support\ApiResponse;
 use App\Support\LotteryMessage;
+use App\Support\CurrencyResolver;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
+use App\Exceptions\WalletOperationException;
+use App\Services\Wallet\LotteryTransferService;
+use App\Http\Requests\Wallet\WalletTransferRequest;
 
 /**
  * 转入：主站扣款 → 彩票钱包加款。
  *
  * `POST /api/v1/wallet/transfer-in` ，body JSON：`amount`（最小货币单位整数）, `idempotent_key`, `currency`（可选）
  */
-class WalletTransferInController extends Controller
+final class WalletTransferInController extends Controller
 {
     public function __construct(
         private readonly LotteryTransferService $transferService,
@@ -53,17 +53,11 @@ class WalletTransferInController extends Controller
         return ApiResponse::success($data);
     }
 
-    private function resolveCurrencyCode(Request $request, Player $player): string|JsonResponse
+    private function resolveCurrencyCode(WalletTransferRequest $request, Player $player): string|JsonResponse
     {
-        $raw = $request->input('currency');
-        if (is_string($raw) && $raw !== '') {
-            $code = strtoupper(substr(trim($raw), 0, 16));
-        } else {
-            $fallback = $player->default_currency ?? config('lottery.default_currency', 'NPR');
-            $code = strtoupper(substr(trim((string) $fallback), 0, 16));
-        }
+        $code = CurrencyResolver::resolve($request, $player, 'currency');
 
-        if (! preg_match('/^[A-Z0-9]{1,16}$/', $code)) {
+        if (! CurrencyResolver::isValid($code)) {
             return ApiResponse::error(
                 __('wallet.invalid_currency'),
                 ErrorCode::WalletInvalidCurrency->value,

app/Http/Controllers/Api/V1/Wallet/WalletTransferOutController.php

@@ -2,23 +2,23 @@
 
 namespace App\Http\Controllers\Api\V1\Wallet;
 
-use App\Exceptions\WalletOperationException;
-use App\Http\Controllers\Controller;
-use App\Http\Requests\Wallet\WalletTransferRequest;
-use App\Lottery\ErrorCode;
 use App\Models\Player;
-use App\Services\Wallet\LotteryTransferService;
+use App\Lottery\ErrorCode;
 use App\Support\ApiResponse;
 use App\Support\LotteryMessage;
+use App\Support\CurrencyResolver;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
+use App\Exceptions\WalletOperationException;
+use App\Services\Wallet\LotteryTransferService;
+use App\Http\Requests\Wallet\WalletTransferRequest;
 
 /**
  * 转出：彩票钱包扣款 → 主站加款；主站失败则冲正彩票余额。
  *
  * `POST /api/v1/wallet/transfer-out`
  */
-class WalletTransferOutController extends Controller
+final class WalletTransferOutController extends Controller
 {
     public function __construct(
         private readonly LotteryTransferService $transferService,
@@ -53,17 +53,11 @@ class WalletTransferOutController extends Controller
         return ApiResponse::success($data);
     }
 
-    private function resolveCurrencyCode(Request $request, Player $player): string|JsonResponse
+    private function resolveCurrencyCode(WalletTransferRequest $request, Player $player): string|JsonResponse
     {
-        $raw = $request->input('currency');
-        if (is_string($raw) && $raw !== '') {
-            $code = strtoupper(substr(trim($raw), 0, 16));
-        } else {
-            $fallback = $player->default_currency ?? config('lottery.default_currency', 'NPR');
-            $code = strtoupper(substr(trim((string) $fallback), 0, 16));
-        }
+        $code = CurrencyResolver::resolve($request, $player, 'currency');
 
-        if (! preg_match('/^[A-Z0-9]{1,16}$/', $code)) {
+        if (! CurrencyResolver::isValid($code)) {
             return ApiResponse::error(
                 __('wallet.invalid_currency'),
                 ErrorCode::WalletInvalidCurrency->value,

app/Http/Middleware/EnsureAdminApi.php

@@ -2,10 +2,10 @@
 
 namespace App\Http\Middleware;
 
-use App\Lottery\ErrorCode;
-use App\Models\AdminUser;
-use App\Support\ApiResponse;
 use Closure;
+use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
+use App\Support\ApiResponse;
 use Illuminate\Http\Request;
 use Symfony\Component\HttpFoundation\Response;
 
@@ -13,7 +13,7 @@ use Symfony\Component\HttpFoundation\Response;
  * 后台 API：`auth:sanctum` 之后执行，校验为 {@link AdminUser} 且未禁用；
  * 上下文可通过 `$request->lotteryAdmin()` 读取。
  */
-class EnsureAdminApi
+final class EnsureAdminApi
 {
     public function handle(Request $request, Closure $next): Response
     {

app/Http/Middleware/EnsureAdminPermission.php

@@ -2,10 +2,10 @@
 
 namespace App\Http\Middleware;
 
-use App\Lottery\ErrorCode;
-use App\Models\AdminUser;
-use App\Support\ApiResponse;
 use Closure;
+use App\Models\AdminUser;
+use App\Lottery\ErrorCode;
+use App\Support\ApiResponse;
 use Illuminate\Http\Request;
 use Symfony\Component\HttpFoundation\Response;
 
@@ -13,7 +13,7 @@ use Symfony\Component\HttpFoundation\Response;
  * 后台 RBAC：在 {@see EnsureAdminApi} 之后校验 `prd.*` 等功能权限 slug（与 {@see AdminUser::hasAdminPermission} 一致）。
  * 路由参数支持 `slug` 或 `slug1|slug2`（满足其一即可）。
  */
-class EnsureAdminPermission
+final class EnsureAdminPermission
 {
     public function handle(Request $request, Closure $next, string $permissionSlugs): Response
     {

app/Http/Middleware/EnsurePlayerApi.php

@@ -2,14 +2,14 @@
 
 namespace App\Http\Middleware;
 
-use App\Exceptions\PlayerAuthenticationException;
-use App\Lottery\ErrorCode;
-use App\Services\PlayerTokenResolver;
-use App\Support\ApiResponse;
-use App\Support\LotteryMessage;
 use Closure;
+use App\Lottery\ErrorCode;
+use App\Support\ApiResponse;
 use Illuminate\Http\Request;
+use App\Support\LotteryMessage;
+use App\Services\PlayerTokenResolver;
 use Symfony\Component\HttpFoundation\Response;
+use App\Exceptions\PlayerAuthenticationException;
 
 /**
  * 【玩家端 API 鉴权中间件】
@@ -20,7 +20,7 @@ use Symfony\Component\HttpFoundation\Response;
  *
  * PlayerAuthenticationException 的 getMessage() 仅作开发与日志用语，可与 API msg 语种不一致。
  */
-class EnsurePlayerApi
+final class EnsurePlayerApi
 {
     public function handle(Request $request, Closure $next): Response
     {

app/Http/Middleware/NegotiateLotteryLocale.php

@@ -2,9 +2,9 @@
 
 namespace App\Http\Middleware;
 
-use App\Support\LotteryLocale;
 use Closure;
 use Illuminate\Http\Request;
+use App\Support\LotteryLocale;
 use Symfony\Component\HttpFoundation\Response;
 
 /**
@@ -20,7 +20,7 @@ use Symfony\Component\HttpFoundation\Response;
  *
  * 【与异常 JSON】{@see LotteryLocale} 与 middleware 同源，在未命中路由、`lottery_locale` 未写入时仍可从 Header 推导。
  */
-class NegotiateLotteryLocale
+final class NegotiateLotteryLocale
 {
     public function handle(Request $request, Closure $next): Response
     {

app/Http/Requests/Admin/AdminLoginRequest.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 管理员登录请求。
+ *
+ * @see LoginController
+ */
+final class AdminLoginRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'account' => ['required', 'string', 'min:2', 'max:64', 'regex:/^[a-zA-Z0-9._-]+$/u'],
+            'password' => ['required', 'string', 'max:256'],
+            'captcha_key' => ['required', 'string', 'uuid'],
+            'captcha_code' => ['required', 'string', 'max:32'],
+        ];
+    }
+
+    /**
+     * @return array<string, string>
+     */
+    public function attributes(): array
+    {
+        return [
+            'account' => 'account',
+            'password' => 'password',
+            'captcha_key' => 'captcha_key',
+            'captcha_code' => 'captcha_code',
+        ];
+    }
+}

app/Http/Requests/Admin/AdminPlayerTicketItemsRequest.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 管理员查看玩家注单列表请求。
+ *
+ * @see AdminPlayerTicketItemsIndexController
+ */
+final class AdminPlayerTicketItemsRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'page' => ['sometimes', 'integer', 'min:1'],
+            'per_page' => ['sometimes', 'integer', 'min:1', 'max:50'],
+            'draw_no' => ['sometimes', 'nullable', 'string', 'max:32'],
+        ];
+    }
+}

app/Http/Requests/Admin/AdminUserPermissionSyncRequest.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 管理员用户权限同步请求。
+ *
+ * @see AdminUserPermissionSyncController
+ */
+final class AdminUserPermissionSyncRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'permissions' => ['required', 'array'],
+            'permissions.*' => ['string', 'max:128'],
+        ];
+    }
+}

app/Http/Requests/Admin/AdminUserRoleSyncRequest.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 管理员用户角色同步请求。
+ *
+ * @see AdminUserRoleSyncController
+ */
+final class AdminUserRoleSyncRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'role_slugs' => ['required', 'array', 'min:1'],
+            'role_slugs.*' => ['string', 'max:64', 'distinct', 'exists:admin_roles,slug'],
+        ];
+    }
+}

app/Http/Requests/Admin/AdminUserStoreRequest.php

@@ -0,0 +1,59 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Support\Str;
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 管理员用户创建请求。
+ *
+ * @see AdminUserStoreController
+ */
+final class AdminUserStoreRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Prepare the data for validation.
+     */
+    protected function prepareForValidation(): void
+    {
+        $username = $this->input('username');
+        if (is_string($username)) {
+            $this->merge([
+                'username' => Str::lower(trim($username)),
+            ]);
+        }
+
+        if ($this->input('email') === '') {
+            $this->merge([
+                'email' => null,
+            ]);
+        }
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'username' => ['required', 'string', 'min:2', 'max:64', 'regex:/^[a-zA-Z0-9._-]+$/u', 'unique:admin_users,username'],
+            'nickname' => ['required', 'string', 'max:128'],
+            'email' => ['nullable', 'string', 'email', 'max:255'],
+            'password' => ['required', 'string', 'min:8', 'max:256'],
+            'status' => ['sometimes', 'integer', 'in:0,1'],
+            'role_slugs' => ['required', 'array', 'min:1'],
+            'role_slugs.*' => ['string', 'max:64', 'distinct', 'exists:admin_roles,slug'],
+        ];
+    }
+}

app/Http/Requests/Admin/AdminUserUpdateRequest.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Validation\Rule;
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 管理员用户更新请求。
+ *
+ * @see AdminUserUpdateController
+ */
+final class AdminUserUpdateRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    protected function prepareForValidation(): void
+    {
+        if ($this->input('email') === '') {
+            $this->merge(['email' => null]);
+        }
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        $adminUser = $this->route('admin_user');
+
+        return [
+            'nickname' => ['sometimes', 'string', 'max:128'],
+            'email' => ['sometimes', 'nullable', 'string', 'email', 'max:255', Rule::unique('admin_users', 'email')->ignore($adminUser?->id)],
+            'password' => ['sometimes', 'nullable', 'string', 'min:8', 'max:256'],
+            'status' => ['sometimes', 'integer', Rule::in([0, 1])],
+        ];
+    }
+}

app/Http/Requests/Admin/ReconcileJobStoreRequest.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 对账任务创建请求。
+ *
+ * @see ReconcileJobStoreController
+ */
+final class ReconcileJobStoreRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'date_from' => ['required', 'date_format:Y-m-d'],
+            'date_to' => ['required', 'date_format:Y-m-d', 'after_or_equal:date_from'],
+            'player_id' => ['sometimes', 'nullable', 'integer', 'min:1'],
+        ];
+    }
+}

app/Http/Requests/Admin/ReportJobStoreRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 报表任务创建请求。
+ *
+ * @see ReportJobStoreController
+ */
+final class ReportJobStoreRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'report_type' => ['required', 'string', 'max:64'],
+            'parameters' => ['sometimes', 'array'],
+            'parameters.date_from' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
+            'parameters.date_to' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
+        ];
+    }
+}

app/Http/Requests/Admin/TransferOrderListRequest.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 转账单列表查询请求。
+ *
+ * @see TransferOrderListController
+ */
+final class TransferOrderListRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'page' => ['sometimes', 'integer', 'min:1'],
+            'per_page' => ['sometimes', 'integer', 'min:1', 'max:100'],
+            'size' => ['sometimes', 'integer', 'min:1', 'max:100'],
+            'player_id' => ['sometimes', 'nullable', 'integer', 'min:1'],
+            'player_account' => ['sometimes', 'nullable', 'string', 'max:128'],
+            'transfer_no' => ['sometimes', 'nullable', 'string', 'max:96'],
+            'external_ref_no' => ['sometimes', 'nullable', 'string', 'max:96'],
+            'created_from' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
+            'created_to' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
+            'status' => ['sometimes', 'nullable', 'string', 'max:256'],
+        ];
+    }
+}

app/Http/Requests/Admin/WalletTransactionListRequest.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Http\Requests\Admin;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+/**
+ * 钱包流水列表查询请求。
+ *
+ * @see WalletTransactionListController
+ */
+final class WalletTransactionListRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, array<int, mixed>>
+     */
+    public function rules(): array
+    {
+        return [
+            'page' => ['sometimes', 'integer', 'min:1'],
+            'per_page' => ['sometimes', 'integer', 'min:1', 'max:100'],
+            'size' => ['sometimes', 'integer', 'min:1', 'max:100'],
+            'player_id' => ['sometimes', 'nullable', 'integer', 'min:1'],
+            'player_account' => ['sometimes', 'nullable', 'string', 'max:128'],
+            'txn_no' => ['sometimes', 'nullable', 'string', 'max:96'],
+            'external_ref_no' => ['sometimes', 'nullable', 'string', 'max:96'],
+            'created_from' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
+            'created_to' => ['sometimes', 'nullable', 'date_format:Y-m-d'],
+            'biz_type' => ['sometimes', 'nullable', 'string', 'max:64'],
+            'status' => ['sometimes', 'nullable', 'string', 'max:128'],
+        ];
+    }
+}

app/Http/Requests/Ticket/TicketPlaceRequest.php

@@ -2,7 +2,7 @@
 
 namespace App\Http\Requests\Ticket;
 
-class TicketPlaceRequest extends TicketPreviewRequest
+final class TicketPlaceRequest extends TicketPreviewRequest
 {
     /**
      * @return array<string, mixed>

app/Http/Requests/Ticket/TicketPreviewRequest.php

@@ -4,7 +4,7 @@ namespace App\Http\Requests\Ticket;
 
 use Illuminate\Foundation\Http\FormRequest;
 
-class TicketPreviewRequest extends FormRequest
+final class TicketPreviewRequest extends FormRequest
 {
     public function authorize(): bool
     {

app/Http/Requests/Wallet/WalletTransferRequest.php

@@ -7,7 +7,7 @@ use Illuminate\Foundation\Http\FormRequest;
 /**
  * 转入 / 转出共用请求体：最小货币单位金额、幂等键、可选币种。
  */
-class WalletTransferRequest extends FormRequest
+final class WalletTransferRequest extends FormRequest
 {
     public function authorize(): bool
     {