feat: 增强代理和玩家管理功能

- 在 SyncAdminAuthorizationCommand 中新增对代理线路和结算菜单操作的同步功能，确保缺失的菜单操作行能够被创建。 - 更新多个控制器中的权限检查逻辑，使用 hasPermissionCode 替代原有的权限验证方式，提升权限管理的灵活性。 - 在 AdminPlayerStoreController 中引入对玩家创建能力的验证，确保只有具备相应权限的管理员能够创建玩家。 - 更新请求验证逻辑，新增 credit_limit、rebate_rate 和 extra_rebate_rate 字段，以支持更细粒度的玩家管理。 - 在 AdminUser 和 AgentNode 模型中增强角色与用户的权限管理功能，支持更细粒度的权限控制。
2026-06-04 09:17:47 +08:00
parent 240d585f15
commit e3ffffad9c
74 changed files with 3076 additions and 65 deletions
--- a/app/Http/Controllers/Api/V1/Admin/Agent/AgentLineShowController.php
+++ b/app/Http/Controllers/Api/V1/Admin/Agent/AgentLineShowController.php
@@ -0,0 +1,43 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Admin\Agent;
+
+use App\Http\Controllers\Controller;
+use App\Models\AdminSite;
+use App\Models\AgentNode;
+use App\Support\AdminIntegrationSitePresenter;
+use App\Support\AdminSiteScope;
+use App\Support\AgentLinePresenter;
+use App\Support\AgentNodePresenter;
+use App\Support\ApiResponse;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+/** GET /api/v1/admin/agent-lines/{admin_site} */
+final class AgentLineShowController extends Controller
+{
+    public function __invoke(Request $request, AdminSite $admin_site): JsonResponse
+    {
+        $admin = $request->lotteryAdmin();
+        abort_if($admin === null, 401);
+
+        if (! AdminSiteScope::siteIdAllowed($admin, (int) $admin_site->id)) {
+            abort(403);
+        }
+
+        $root = AgentNode::query()
+            ->where('admin_site_id', $admin_site->id)
+            ->where('depth', 0)
+            ->firstOrFail();
+
+        return ApiResponse::success([
+            'site' => AdminIntegrationSitePresenter::detail($admin_site),
+            'agent_node' => AgentNodePresenter::item($root),
+            'line_root' => [
+                'agent_node_id' => (int) $root->id,
+                'site_code' => (string) $admin_site->code,
+                'is_line_root' => true,
+            ],
+        ]);
+    }
+}
--- a/app/Http/Controllers/Api/V1/Admin/Agent/AgentLineStoreController.php
+++ b/app/Http/Controllers/Api/V1/Admin/Agent/AgentLineStoreController.php
@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Admin\Agent;
+
+use App\Http\Controllers\Controller;
+use App\Http\Middleware\RecordAdminApiAudit;
+use App\Http\Requests\Admin\AdminAgentLineStoreRequest;
+use App\Services\Agent\AgentSiteProvisioningService;
+use App\Services\AuditLogger;
+use App\Support\AdminIntegrationSitePresenter;
+use App\Support\AgentLinePresenter;
+use App\Support\ApiResponse;
+use Illuminate\Http\JsonResponse;
+
+/** POST /api/v1/admin/agent-lines */
+final class AgentLineStoreController extends Controller
+{
+    public function __invoke(
+        AdminAgentLineStoreRequest $request,
+        AgentSiteProvisioningService $service,
+    ): JsonResponse {
+        $admin = $request->lotteryAdmin();
+        abort_if($admin === null, 401);
+
+        $result = $service->createRootAgent($admin, $request->validated());
+        $site = $result['site'];
+        $node = $result['agent_node'];
+
+        $payload = AgentLinePresenter::provisioned($site, $node, $result['secrets']);
+
+        AuditLogger::recordForAdmin(
+            $admin,
+            $request,
+            moduleCode: 'agent',
+            actionCode: 'agent_line.provision',
+            targetType: 'admin_site',
+            targetId: (string) $site->id,
+            afterJson: [
+                'site' => AdminIntegrationSitePresenter::detail($site),
+                'agent_node_id' => (int) $node->id,
+            ],
+        );
+        $request->attributes->set(RecordAdminApiAudit::ATTRIBUTE_AUDIT_RECORDED, true);
+
+        return ApiResponse::success($payload)->setStatusCode(201);
+    }
+}
--- a/app/Http/Controllers/Api/V1/Admin/Agent/AgentNodeDestroyController.php
+++ b/app/Http/Controllers/Api/V1/Admin/Agent/AgentNodeDestroyController.php
@@ -43,12 +43,8 @@ final class AgentNodeDestroyController extends Controller
            return ApiMessage::errorResponse($request, 'admin.agent_node_has_children_cannot_delete', ErrorCode::ValidationFailed->value, null, 422);
        }

-        if (DB::table('admin_user_agents')->where('agent_node_id', (int) $agent_node->id)->exists()) {
-            return ApiMessage::errorResponse($request, 'admin.agent_node_has_users_cannot_delete', ErrorCode::ValidationFailed->value, null, 422);
-        }
-
-        if ($service->hasBlockingCustomRoles($agent_node)) {
-            return ApiMessage::errorResponse($request, 'admin.agent_node_has_roles_cannot_delete', ErrorCode::ValidationFailed->value, null, 422);
+        if (DB::table('players')->where('agent_node_id', $agent_node->id)->exists()) {
+            return ApiMessage::errorResponse($request, 'admin.agent_node_has_players_cannot_delete', ErrorCode::ValidationFailed->value, null, 422);
        }

        $before = AgentNodePresenter::item($agent_node);
--- a/app/Http/Controllers/Api/V1/Admin/Agent/AgentNodeProfileController.php
+++ b/app/Http/Controllers/Api/V1/Admin/Agent/AgentNodeProfileController.php
@@ -0,0 +1,49 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Admin\Agent;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Admin\AdminAgentProfileUpdateRequest;
+use App\Models\AgentNode;
+use App\Models\AgentProfile;
+use App\Services\Agent\AgentNodeService;
+use App\Services\Agent\AgentProfileService;
+use App\Support\AdminAgentScope;
+use App\Support\ApiResponse;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+/** GET/PUT /api/v1/admin/agent-nodes/{agent_node}/profile */
+final class AgentNodeProfileController extends Controller
+{
+    public function show(Request $request, AgentNode $agent_node): JsonResponse
+    {
+        $admin = $request->lotteryAdmin();
+        abort_if($admin === null, 401);
+        abort_if(! AdminAgentScope::nodeVisibleTo($admin, $agent_node), 403);
+
+        $profile = AgentProfile::query()->firstOrNew(['agent_node_id' => $agent_node->id]);
+
+        return ApiResponse::success(app(AgentProfileService::class)->present($profile));
+    }
+
+    public function update(
+        AdminAgentProfileUpdateRequest $request,
+        AgentNode $agent_node,
+        AgentProfileService $service,
+        AgentNodeService $agentNodeService,
+    ): JsonResponse {
+        $admin = $request->lotteryAdmin();
+        abort_if($admin === null, 401);
+        abort_if(! AdminAgentScope::nodeVisibleTo($admin, $agent_node), 403);
+
+        $parent = $agent_node->parent_id !== null
+            ? AgentNode::query()->find($agent_node->parent_id)
+            : null;
+
+        $profile = $service->upsertForNode($agent_node, $request->validated(), $parent);
+        $agentNodeService->syncPrimaryOwnerRoleFromProfile($agent_node, $profile);
+
+        return ApiResponse::success($service->present($profile));
+    }
+}