feat(admin): 增加玩家密码管理与角色边界

app/Support/AdminAuthorizationRegistry.php

@@ -550,6 +550,7 @@ final class AdminAuthorizationRegistry
             ['code' => 'admin.players.store', 'module_code' => 'player_service', 'name' => '创建玩家', 'http_method' => 'POST', 'uri_pattern' => '/api/v1/admin/players', 'route_name' => 'api.v1.admin.players.store', 'auth_mode' => 'permission_required', 'is_audit_required' => true, 'permission_codes' => ['service.players.manage']],
             ['code' => 'admin.players.show', 'module_code' => 'player_service', 'name' => '玩家详情', 'http_method' => 'GET', 'uri_pattern' => '/api/v1/admin/players/{player}', 'route_name' => 'api.v1.admin.players.show', 'auth_mode' => 'permission_required', 'is_audit_required' => false, 'permission_codes' => ['service.players.manage', 'service.players.view']],
             ['code' => 'admin.players.update', 'module_code' => 'player_service', 'name' => '更新玩家', 'http_method' => 'PUT', 'uri_pattern' => '/api/v1/admin/players/{player}', 'route_name' => 'api.v1.admin.players.update', 'auth_mode' => 'permission_required', 'is_audit_required' => true, 'permission_codes' => ['service.players.manage']],
+            ['code' => 'admin.players.password.reset', 'module_code' => 'player_service', 'name' => '重置玩家密码', 'http_method' => 'PUT', 'uri_pattern' => '/api/v1/admin/players/{player}/password', 'route_name' => 'api.v1.admin.players.password.reset', 'auth_mode' => 'permission_required', 'is_audit_required' => true, 'permission_codes' => ['service.players.manage']],
             ['code' => 'admin.players.destroy', 'module_code' => 'player_service', 'name' => '删除玩家', 'http_method' => 'DELETE', 'uri_pattern' => '/api/v1/admin/players/{player}', 'route_name' => 'api.v1.admin.players.destroy', 'auth_mode' => 'permission_required', 'is_audit_required' => true, 'permission_codes' => ['service.players.manage']],
             ['code' => 'admin.players.freeze', 'module_code' => 'player_service', 'name' => '冻结玩家', 'http_method' => 'POST', 'uri_pattern' => '/api/v1/admin/players/{player}/freeze', 'route_name' => 'api.v1.admin.players.freeze', 'auth_mode' => 'permission_required', 'is_audit_required' => true, 'permission_codes' => ['service.players.freeze']],
             ['code' => 'admin.players.unfreeze', 'module_code' => 'player_service', 'name' => '解冻玩家', 'http_method' => 'POST', 'uri_pattern' => '/api/v1/admin/players/{player}/unfreeze', 'route_name' => 'api.v1.admin.players.unfreeze', 'auth_mode' => 'permission_required', 'is_audit_required' => true, 'permission_codes' => ['service.players.freeze']],

app/Support/AdminRoleApiPresenter.php

@@ -7,8 +7,25 @@ use App\Models\AdminRole;
 final class AdminRoleApiPresenter
 {
     /** @return array<string, mixed> */
-    public static function item(AdminRole $role): array
+    public static function item(AdminRole $role, ?array $userCounts = null): array
     {
+        if ($userCounts !== null) {
+            $counts = $userCounts;
+        } elseif (($role->scope_type ?? AdminRole::SCOPE_SYSTEM) === AdminRole::SCOPE_SYSTEM) {
+            $counts = AdminRoleUserCounts::forRoleIds([$role->id])[(int) $role->id] ?? [
+                'user_count' => 0,
+                'platform_user_count' => 0,
+                'agent_user_count' => 0,
+            ];
+        } else {
+            $assignedCount = $role->assignedUserCount();
+            $counts = [
+                'user_count' => $assignedCount,
+                'platform_user_count' => 0,
+                'agent_user_count' => $assignedCount,
+            ];
+        }
+
         return [
             'id' => (int) $role->id,
             'slug' => $role->slug,
@@ -22,7 +39,9 @@ final class AdminRoleApiPresenter
             'delegated_from_role_id' => $role->delegated_from_role_id !== null ? (int) $role->delegated_from_role_id : null,
             'is_read_only_template' => $role->isReadOnlyTemplate(),
             'permission_slugs' => $role->legacyPermissionSlugs(),
-            'user_count' => $role->assignedUserCount(),
+            'user_count' => $counts['user_count'],
+            'platform_user_count' => $counts['platform_user_count'],
+            'agent_user_count' => $counts['agent_user_count'],
         ];
     }
 }

app/Support/AdminRoleUserCounts.php

@@ -0,0 +1,46 @@
+<?php
+
+namespace App\Support;
+
+use Illuminate\Support\Facades\DB;
+
+final class AdminRoleUserCounts
+{
+    /**
+     * @param  iterable<int>  $roleIds
+     * @return array<int, array{user_count: int, platform_user_count: int, agent_user_count: int}>
+     */
+    public static function forRoleIds(iterable $roleIds): array
+    {
+        $ids = collect($roleIds)
+            ->map(static fn ($id): int => (int) $id)
+            ->unique()
+            ->values();
+
+        if ($ids->isEmpty()) {
+            return [];
+        }
+
+        return DB::table('admin_user_site_roles as usr')
+            ->leftJoin('admin_user_agents as uag', 'uag.admin_user_id', '=', 'usr.admin_user_id')
+            ->whereIn('usr.role_id', $ids->all())
+            ->groupBy('usr.role_id')
+            ->selectRaw(
+                'usr.role_id, '
+                .'COUNT(DISTINCT CASE WHEN uag.admin_user_id IS NULL THEN usr.admin_user_id END) AS platform_user_count, '
+                .'COUNT(DISTINCT CASE WHEN uag.admin_user_id IS NOT NULL THEN usr.admin_user_id END) AS agent_user_count'
+            )
+            ->get()
+            ->mapWithKeys(static function (object $row): array {
+                $platformCount = (int) $row->platform_user_count;
+                $agentCount = (int) $row->agent_user_count;
+
+                return [(int) $row->role_id => [
+                    'user_count' => $platformCount + $agentCount,
+                    'platform_user_count' => $platformCount,
+                    'agent_user_count' => $agentCount,
+                ]];
+            })
+            ->all();
+    }
+}

app/Support/InvalidPlatformAgentRoleCleanup.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Support;
+
+use App\Models\AdminRole;
+use Illuminate\Support\Facades\DB;
+
+final class InvalidPlatformAgentRoleCleanup
+{
+    public static function run(): int
+    {
+        $agentRoleId = DB::table('admin_roles')
+            ->where('scope_type', AdminRole::SCOPE_SYSTEM)
+            ->where('slug', PlatformSystemRoles::SLUG_AGENT)
+            ->value('id');
+
+        if ($agentRoleId === null) {
+            return 0;
+        }
+
+        return DB::table('admin_user_site_roles')
+            ->where('role_id', (int) $agentRoleId)
+            ->whereNotExists(static function ($query): void {
+                $query->selectRaw('1')
+                    ->from('admin_user_agents as cleanup_uag')
+                    ->whereColumn('cleanup_uag.admin_user_id', 'admin_user_site_roles.admin_user_id');
+            })
+            ->delete();
+    }
+}