feat: 增强代理和玩家管理功能

- 在多个控制器中更新权限检查逻辑，确保管理员能够更灵活地管理代理和玩家。
- 在 AdminPlayerStoreController 中引入对玩家创建能力的验证，确保只有具备相应权限的管理员能够创建玩家。
- 更新请求验证逻辑，新增 credit_limit、rebate_rate 和 extra_rebate_rate 字段，以支持更细粒度的玩家管理。
- 在 AgentNodeProfileController 中添加对父代理能力授予的验证，确保子代理的权限在父代理范围内。
- 引入 AgentProfileFieldRules 以简化代理资料更新请求的规则定义，提升代码复用性。

app/Http/Controllers/Api/V1/Admin/Draw/AdminDrawResultBatchesIndexController.php

@@ -4,56 +4,46 @@ namespace App\Http\Controllers\Api\V1\Admin\Draw;
 
 use App\Models\Draw;
 use App\Support\ApiResponse;
-use App\Models\DrawResultItem;
 use App\Models\DrawResultBatch;
+use Illuminate\Http\Request;
 use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
+use App\Support\AdminDrawApiPresenter;
+use App\Support\AdminDrawResponsePolicy;
+use App\Lottery\DrawResultBatchStatus;
 
 /**
  * GET /api/v1/admin/draws/{draw}/result-batches — 开奖批次与号码（审核/结果核对）。
  */
 final class AdminDrawResultBatchesIndexController extends Controller
 {
-    public function __invoke(Draw $draw): JsonResponse
+    public function __invoke(Request $request, Draw $draw): JsonResponse
     {
-        $batches = $draw->resultBatches()
+        $admin = $request->lotteryAdmin();
+        abort_if($admin === null, 401);
+
+        $manage = AdminDrawResponsePolicy::canManageDrawResults($admin);
+
+        $query = $draw->resultBatches()
             ->with(['items' => function ($q): void {
                 $q->orderBy('prize_type')->orderBy('prize_index');
             }])
-            ->orderByDesc('result_version')
-            ->get();
+            ->orderByDesc('result_version');
+
+        if (! $manage) {
+            $query->where('status', DrawResultBatchStatus::Published->value);
+        }
+
+        $batches = $query->get();
 
         return ApiResponse::success([
             'draw_id' => (int) $draw->id,
             'draw_no' => $draw->draw_no,
             'draw_status' => $draw->status,
-            'batches' => $batches->map(fn (DrawResultBatch $b) => $this->serializeBatch($b))->all(),
+            'capabilities' => AdminDrawResponsePolicy::capabilities($admin),
+            'batches' => $batches
+                ->map(fn (DrawResultBatch $b): array => AdminDrawApiPresenter::resultBatch($b, $admin))
+                ->all(),
         ]);
     }
-
-    /** @return array<string, mixed> */
-    private function serializeBatch(DrawResultBatch $batch): array
-    {
-        return [
-            'id' => (int) $batch->id,
-            'result_version' => (int) $batch->result_version,
-            'source_type' => $batch->source_type,
-            'rng_seed_hash' => $batch->rng_seed_hash,
-            'status' => $batch->status,
-            'created_by' => $batch->created_by,
-            'confirmed_by' => $batch->confirmed_by,
-            'confirmed_at' => $batch->confirmed_at?->toIso8601String(),
-            'created_at' => $batch->created_at?->toIso8601String(),
-            'updated_at' => $batch->updated_at?->toIso8601String(),
-            'items' => $batch->items->map(fn (DrawResultItem $item) => [
-                'prize_type' => $item->prize_type,
-                'prize_index' => (int) $item->prize_index,
-                'number_4d' => $item->number_4d,
-                'suffix_3d' => $item->suffix_3d,
-                'suffix_2d' => $item->suffix_2d,
-                'head_digit' => $item->head_digit,
-                'tail_digit' => $item->tail_digit,
-            ])->values()->all(),
-        ];
-    }
 }