feat(admin): 增加玩家密码管理与角色边界

app/Http/Controllers/Api/V1/Admin/Player/AdminPlayerPasswordResetController.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Admin\Player;
+
+use App\Models\Player;
+use App\Support\ApiResponse;
+use App\Support\AdminSiteScope;
+use Illuminate\Http\JsonResponse;
+use App\Http\Controllers\Controller;
+use App\Services\Player\PlayerPasswordService;
+use App\Http\Requests\Admin\AdminPlayerPasswordResetRequest;
+
+/** PUT /api/v1/admin/players/{player}/password */
+final class AdminPlayerPasswordResetController extends Controller
+{
+    public function __invoke(
+        AdminPlayerPasswordResetRequest $request,
+        Player $player,
+        PlayerPasswordService $passwords,
+    ): JsonResponse {
+        $admin = $request->lotteryAdmin();
+        abort_if($admin === null, 401);
+
+        if ($denied = AdminSiteScope::denyUnlessPlayerAccessible($admin, $player)) {
+            return $denied;
+        }
+
+        $updated = $passwords->reset($player, (string) $request->validated('password'));
+
+        return ApiResponse::success([
+            'password_reset' => true,
+            'player_id' => (int) $updated->id,
+        ], request: $request);
+    }
+}

app/Http/Controllers/Api/V1/Admin/User/AdminPermissionCatalogController.php

@@ -4,11 +4,12 @@ namespace App\Http\Controllers\Api\V1\Admin\User;
 
 use App\Models\AdminRole;
 use App\Support\ApiResponse;
-use App\Support\AdminAuthorizationRegistry;
 use Illuminate\Http\JsonResponse;
-use Illuminate\Support\Facades\DB;
 use App\Http\Controllers\Controller;
+use App\Support\AdminRoleUserCounts;
+use App\Support\PlatformSystemRoles;
 use App\Support\AdminRoleApiPresenter;
+use App\Support\AdminAuthorizationRegistry;
 
 /** GET /api/v1/admin/admin-user-permission-catalog */
 final class AdminPermissionCatalogController extends Controller
@@ -61,12 +62,26 @@ final class AdminPermissionCatalogController extends Controller
             ->where('scope_type', AdminRole::SCOPE_SYSTEM)
             ->orderBy('slug')
             ->get(['id', 'slug', 'name']);
+        $userCounts = AdminRoleUserCounts::forRoleIds($roles->pluck('id'));
+        $presentedRoles = $roles->map(
+            static fn (AdminRole $role): array => AdminRoleApiPresenter::item(
+                $role,
+                $userCounts[(int) $role->id] ?? null,
+            )
+        )->values();
 
         return ApiResponse::success([
             'permissions' => $permissions,
             'permission_menu_groups' => $permissionMenuGroups,
             'navigation' => AdminAuthorizationRegistry::navigationItems(),
-            'roles' => $roles->map(static fn (AdminRole $role): array => AdminRoleApiPresenter::item($role))->values()->all(),
+            'roles' => $presentedRoles->all(),
+            'assignable_roles' => $presentedRoles
+                ->reject(static fn (array $role): bool => in_array($role['slug'], [
+                    PlatformSystemRoles::SLUG_AGENT,
+                    PlatformSystemRoles::SLUG_SUPER_ADMIN,
+                ], true))
+                ->values()
+                ->all(),
         ]);
     }
 }

app/Http/Controllers/Api/V1/Admin/User/AdminRoleIndexController.php

@@ -6,7 +6,9 @@ use App\Models\AdminRole;
 use App\Support\ApiResponse;
 use Illuminate\Http\JsonResponse;
 use App\Http\Controllers\Controller;
+use App\Support\AdminRoleUserCounts;
 use App\Support\AdminRoleApiPresenter;
+
 final class AdminRoleIndexController extends Controller
 {
     public function __invoke(): JsonResponse
@@ -16,9 +18,15 @@ final class AdminRoleIndexController extends Controller
             ->orderBy('sort_order')
             ->orderBy('id')
             ->get();
+        $userCounts = AdminRoleUserCounts::forRoleIds($roles->pluck('id'));
 
         return ApiResponse::success([
-            'items' => $roles->map(static fn (AdminRole $role): array => AdminRoleApiPresenter::item($role))->values()->all(),
+            'items' => $roles->map(
+                static fn (AdminRole $role): array => AdminRoleApiPresenter::item(
+                    $role,
+                    $userCounts[(int) $role->id] ?? null,
+                )
+            )->values()->all(),
         ]);
     }
 }

app/Http/Controllers/Api/V1/Admin/User/AdminUserIndexController.php

@@ -3,10 +3,10 @@
 namespace App\Http\Controllers\Api\V1\Admin\User;
 
 use App\Models\AdminUser;
-use Illuminate\Support\Facades\DB;
 use Illuminate\Http\Request;
 use App\Support\AdminApiList;
 use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Facades\DB;
 use App\Http\Controllers\Controller;
 use App\Support\AdminUserApiPresenter;
 
@@ -17,6 +17,7 @@ final class AdminUserIndexController extends Controller
     {
         $p = AdminApiList::readPaging($request);
         $keyword = trim((string) $request->query('keyword', ''));
+        $roleSlug = trim((string) $request->query('role_slug', ''));
 
         $q = AdminUser::query()
             ->with(['roles'])
@@ -35,6 +36,12 @@ final class AdminUserIndexController extends Controller
             });
         }
 
+        if ($roleSlug !== '') {
+            $q->whereHas('roles', static function ($roles) use ($roleSlug): void {
+                $roles->where('admin_roles.slug', $roleSlug);
+            });
+        }
+
         $paginator = $q->paginate($p['perPage'], ['*'], 'page', $p['page']);
 
         return AdminApiList::json($paginator, fn (AdminUser $user): array => AdminUserApiPresenter::listItem($user));