feat(admin,player,api): 玩家账号密码管理与代理上下分

新增玩家头像、可查密码与全局改密/改账号开关；玩家资料页合并账号密码展示；代理直属玩家列表支持自定义上下分。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/admin/src/i18n/admin-pages-ms.ts

@@ -51,6 +51,22 @@ export const adminPagesMs: Record<string, string> = {
   'user.field.login_fail': 'Log masuk gagal',
   'user.field.phone': 'Telefon',
   'user.field.email': 'E-mel',
+  'user.field.allow_password_change': 'Benarkan pemain tukar kata laluan',
+  'user.field.allow_username_change': 'Benarkan pemain tukar nama akaun',
+  'user.field.view_password': 'Kata laluan log masuk',
+  'user.field.reset_password': 'Set semula kata laluan',
+  'user.password_not_stored': 'Tiada rekod (pemain telah ubah sendiri)',
+  'user.btn.show_password': 'Lihat',
+  'user.btn.hide_password': 'Sembunyi',
+  'user.ph.reset_password': 'Biarkan kosong untuk kekalkan; nilai baharu boleh dilihat',
+  'user.ph.reset_password_short': 'Biarkan kosong',
+  'user.global_settings': 'Kata laluan & akaun (global)',
+  'user.global_settings_hint': 'Kawal sama ada semua pemain boleh ubah kata laluan/nama akaun dalam app',
+  'user.section.password_mgmt': 'Pengurusan kata laluan',
+  'user.field.current_password': 'Kata laluan semasa',
+  'user.msg.created_with_password': 'Pemain dicipta. Kata laluan: {password}',
+  'user.msg.password_saved': 'Kata laluan dikemas kini: {password}',
+  'user.hint.password_reset_to_view': 'Tiada rekod. Isi Set semula kata laluan di bawah dan simpan untuk lihat di sini.',
   'user.ph.username_unique': 'Nama log masuk unik',
   'user.ph.no_agent': 'Tiada (terus platform)',
   'user.hint.no_agent': 'Biarkan kosong untuk pemain diurus platform',
@@ -58,6 +74,10 @@ export const adminPagesMs: Record<string, string> = {
   'user.hint.deposit_remark': 'Ditulis ke lejar jika baki permulaan > 0',
   'user.hint.freeze_in_list': 'Beku/nyahbeku dari lajur tindakan senarai',
   'user.hint.agent_change': 'Kosong = terus platform; perubahan dikira semula kredit ejen',
+  'user.hint.allow_password_change': 'Matikan: semua pemain tidak boleh ubah kata laluan',
+  'user.hint.allow_username_change': 'Hidupkan: semua pemain boleh ubah nama log masuk',
+  'user.hint.view_password': 'Hanya kata laluan cipta/set semula admin; dibersihkan jika pemain ubah sendiri',
+  'user.hint.reset_password': 'Berkuat kuasa serta-merta dan kemas kini kata laluan boleh lihat',
   'user.btn.create': 'Cipta',
   'user.btn.save_profile': 'Simpan',
   'user.btn.confirm_deposit': 'Sahkan tambah baki',
@@ -222,6 +242,9 @@ export const adminPagesMs: Record<string, string> = {
   'agent_portal.agent_username_ph': 'Nama pengguna ejen',
   'agent_portal.player_id_ph': 'ID pemain',
   'agent_portal.withdraw_btn': 'Keluarkan {amount}',
+  'agent_portal.withdraw_btn_label': 'Keluarkan',
+  'agent_portal.transfer_title_deposit': 'Tambah baki {name}',
+  'agent_portal.transfer_title_withdraw': 'Keluarkan dari {name}',
   'msg.agent_sub_created': 'Sub-ejen dicipta',
   'msg.withdraw_ok': 'Pengeluaran berjaya',
 
@@ -241,6 +264,7 @@ export const adminPagesMs: Record<string, string> = {
   'msg.import_done': 'Import: {imported} ok, {skipped} dilangkau, {failed} gagal / {total} jumlah',
   'msg.topup_ok': 'Tambah baki berjaya',
   'msg.topup_failed': 'Tambah baki gagal',
+  'msg.transfer_failed': 'Operasi gagal',
   'msg.amount_gt_zero': 'Jumlah mesti lebih daripada 0',
   'msg.credit_zero': 'Pelarasan tidak boleh 0',
   'msg.credit_adjusted': 'Kredit dikemas kini',

apps/admin/src/i18n/admin-pages.ts

@@ -51,6 +51,22 @@ export const adminPagesZh: Record<string, string> = {
   'user.field.login_fail': '登录失败',
   'user.field.phone': '手机',
   'user.field.email': '邮箱',
+  'user.field.allow_password_change': '允许玩家改密码',
+  'user.field.allow_username_change': '允许玩家改账号名',
+  'user.field.view_password': '登录密码',
+  'user.field.reset_password': '重置密码',
+  'user.password_not_stored': '未记录（玩家已自行修改或未保存）',
+  'user.btn.show_password': '查看',
+  'user.btn.hide_password': '隐藏',
+  'user.ph.reset_password': '留空则不修改；填写后将更新并可查看',
+  'user.ph.reset_password_short': '留空不修改',
+  'user.global_settings': '密码与账号管理（全局）',
+  'user.global_settings_hint': '控制所有玩家是否可在 App 内改密码、改账号名',
+  'user.section.password_mgmt': '密码管理',
+  'user.field.current_password': '当前密码',
+  'user.msg.created_with_password': '玩家已创建，登录密码：{password}',
+  'user.msg.password_saved': '密码已更新，当前可查密码：{password}',
+  'user.hint.password_reset_to_view': '旧账号暂无记录。请在下方「重置密码」填写新密码并保存，即可在此查看。',
   'user.ph.username_unique': '登录用户名，唯一',
   'user.ph.no_agent': '不设置（平台直属玩家）',
   'user.hint.no_agent': '留空表示不挂靠代理，由平台直接管理',
@@ -58,6 +74,10 @@ export const adminPagesZh: Record<string, string> = {
   'user.hint.deposit_remark': '有初始余额时写入流水备注',
   'user.hint.freeze_in_list': '冻结/解冻请在列表操作列进行',
   'user.hint.agent_change': '留空表示平台直属；变更后会重算相关代理已用授信',
+  'user.hint.allow_password_change': '关闭后所有玩家均不可在客户端修改密码',
+  'user.hint.allow_username_change': '开启后所有玩家均可在资料页修改登录账号名',
+  'user.hint.view_password': '仅保存后台创建或重置时的密码；玩家自行改密后会清除',
+  'user.hint.reset_password': '重置后立即生效，并更新上方可查密码',
   'user.btn.create': '创建',
   'user.btn.save_profile': '保存资料',
   'user.btn.confirm_deposit': '确认上分',
@@ -222,6 +242,9 @@ export const adminPagesZh: Record<string, string> = {
   'agent_portal.agent_username_ph': '代理用户名',
   'agent_portal.player_id_ph': '玩家 ID',
   'agent_portal.withdraw_btn': '下分 {amount}',
+  'agent_portal.withdraw_btn_label': '下分',
+  'agent_portal.transfer_title_deposit': '给 {name} 上分',
+  'agent_portal.transfer_title_withdraw': '从 {name} 下分',
   'msg.agent_sub_created': '下级代理已创建',
   'msg.withdraw_ok': '下分成功',
 
@@ -241,6 +264,7 @@ export const adminPagesZh: Record<string, string> = {
   'msg.import_done': '导入完成：成功 {imported}，跳过 {skipped}，失败 {failed} / 共 {total}',
   'msg.topup_ok': '上分成功',
   'msg.topup_failed': '上分失败',
+  'msg.transfer_failed': '操作失败',
   'msg.amount_gt_zero': '金额须大于 0',
   'msg.credit_zero': '调整金额不能为 0',
   'msg.credit_adjusted': '授信已调整',
@@ -403,6 +427,22 @@ export const adminPagesEn: Record<string, string> = {
   'user.field.login_fail': 'Failed logins',
   'user.field.phone': 'Phone',
   'user.field.email': 'Email',
+  'user.field.allow_password_change': 'Allow player password change',
+  'user.field.allow_username_change': 'Allow player username change',
+  'user.field.view_password': 'Login password',
+  'user.field.reset_password': 'Reset password',
+  'user.password_not_stored': 'Not stored (player changed it or never saved)',
+  'user.btn.show_password': 'Show',
+  'user.btn.hide_password': 'Hide',
+  'user.ph.reset_password': 'Leave empty to keep; new value will be viewable',
+  'user.ph.reset_password_short': 'Leave empty to keep',
+  'user.global_settings': 'Password & account (global)',
+  'user.global_settings_hint': 'Controls whether all players can change password or username in the app',
+  'user.section.password_mgmt': 'Password management',
+  'user.field.current_password': 'Current password',
+  'user.msg.created_with_password': 'Player created. Login password: {password}',
+  'user.msg.password_saved': 'Password updated. Viewable password: {password}',
+  'user.hint.password_reset_to_view': 'No stored password. Set one below under Reset password and save to view it here.',
   'user.ph.username_unique': 'Unique login username',
   'user.ph.no_agent': 'None (platform direct)',
   'user.hint.no_agent': 'Leave empty for platform-managed player',
@@ -410,6 +450,10 @@ export const adminPagesEn: Record<string, string> = {
   'user.hint.deposit_remark': 'Written to ledger when initial balance > 0',
   'user.hint.freeze_in_list': 'Freeze/unfreeze from the list actions',
   'user.hint.agent_change': 'Empty = platform direct; changes recalc agent credit',
+  'user.hint.allow_password_change': 'When off, no player can change password in the app',
+  'user.hint.allow_username_change': 'When on, all players can change login username in profile',
+  'user.hint.view_password': 'Only passwords set on create/reset; cleared after player self-change',
+  'user.hint.reset_password': 'Takes effect immediately and updates viewable password above',
   'user.btn.create': 'Create',
   'user.btn.save_profile': 'Save',
   'user.btn.confirm_deposit': 'Confirm top-up',
@@ -574,6 +618,9 @@ export const adminPagesEn: Record<string, string> = {
   'agent_portal.agent_username_ph': 'Agent username',
   'agent_portal.player_id_ph': 'Player ID',
   'agent_portal.withdraw_btn': 'Withdraw {amount}',
+  'agent_portal.withdraw_btn_label': 'Withdraw',
+  'agent_portal.transfer_title_deposit': 'Top up {name}',
+  'agent_portal.transfer_title_withdraw': 'Withdraw from {name}',
   'msg.agent_sub_created': 'Sub-agent created',
   'msg.withdraw_ok': 'Withdrawal successful',
 
@@ -593,6 +640,7 @@ export const adminPagesEn: Record<string, string> = {
   'msg.import_done': 'Import: {imported} ok, {skipped} skipped, {failed} failed / {total} total',
   'msg.topup_ok': 'Top-up successful',
   'msg.topup_failed': 'Top-up failed',
+  'msg.transfer_failed': 'Operation failed',
   'msg.amount_gt_zero': 'Amount must be greater than 0',
   'msg.credit_zero': 'Adjustment cannot be 0',
   'msg.credit_adjusted': 'Credit updated',