feat: complete Vue UI parity (full backend + frontend)

== New domain models (7) == - UserPermission: per-user feature toggles (13 booleans) - StorageConfig: encrypted Alist/S3/WebDAV adapters - LicenseKey + LicenseActivation: offline license issuance - DownloadClient: multi-client downloader configs - AssistantSession + AssistantMessage: multi-turn AI chat persistence == New services (5) == - PermissionService: admin grants always-true; user defaults seeded - StorageConfigService: AES-GCM encryption + per-type connection probe - LicenseService: 24-char hyphenated key generation, activation/heartbeat - DownloadClientService: qB/Aria2/Transmission CRUD + WebUI test - AssistantService: chat history + execute/undo stubs (op_id tracking) == Extended AIService.Chat == - Multi-turn LLM call with chat history; offline fallback reply == New endpoints (60+) == Auth: POST /auth/refresh, /auth/logout, /auth/change-password PATCH /auth/profile GET /auth/permissions, /auth/me Permissions admin: GET/PUT /admin/users/:id/permissions POST /admin/users/:id/permissions/reset Search: GET /search, /search/advanced, /search/tmdb, /search/sites System: GET /system/config, /settings/schema, /system/events/ticket POST /admin/system/scheduler/:name/trigger Stats: GET /stats/user/:id, /stats/top-users POST /stats/play Sites: GET /sites/:id/resource, /sites/:id/userdata Subscriptions: PUT /subscriptions/:id, POST /subscriptions/:id/search Playlists: POST /playlists/:id/reorder DELETE /playlists/:id/items/by-id/:item_id DLNA per-renderer: POST /dlna/:uuid/{play,pause,stop}, GET /dlna/:uuid/status Media: POST/DELETE /media/:id/favorite, GET /media/:id/favorite/status POST /media/:id/ai-scrape, /media/scrape/test, /media/organize GET /favorites (alias) Playback: GET /playback/:id/info, /playback/:id/external-players, /playback/:id/external-url POST /playback/:id/progress GET /playback/transcode/:job_id/status Downloads: POST /download/:id/{pause,resume,organize} POST /download/{organize,sync,start-auto-sync} GET /download/tasks Admin: full CRUD on /admin/download/clients + /admin/download/aria2/stats License: POST /license/{activate,heartbeat} GET /license/{status,heartbeat-status} Admin: /admin/license/{generate,list,:id/activations,:id/revoke,activation/:id/unbind} Storage: GET /admin/storage/{status,:type} PUT /admin/storage/:type, POST /admin/storage/:type/test Assistant (multi-turn AI): GET/POST /admin/assistant/sessions GET/DELETE /admin/assistant/session/:id POST /admin/assistant/{chat,execute} POST /admin/assistant/undo/:op_id GET /admin/assistant/history == New React pages (4) == - AssistantChatPage (/assistant): full multi-turn chat UI with sessions sidebar, optimistic user-turn append, live AI response. - DownloadClientsPage (/download-clients): typed CRUD form for qBittorrent / Aria2 / Transmission + per-row Test action. - LicensePage (/license): generate keys, list activations, revoke, unbind individual devices. - StorageConfigPage (/storage-config): tabbed Alist/WebDAV/S3 form with secret-aware redaction + connection probe. == New API helpers (5) == - assistant, download_clients, license, permissions, storage_config == Layout == - Sidebar gains 4 new admin links (AI 对话, 下载器, 外部存储, 许可证).
2026-10-13 08:36:38 +08:00 · 2026-05-16 09:49:35 +00:00
parent 7095d9ebec
commit 1dbd73b30b
38 changed files with 4496 additions and 14 deletions
@@ -0,0 +1,111 @@
+// Package service — per-user feature toggles.
+//
+// PermissionService persists model.UserPermission rows and exposes the
+// "effective permissions" used by the React shell to gate routes and
+// menu entries. Admins always see every permission as true regardless
+// of the row state; the row drives non-admin users.
+package service
+
+import (
+	"context"
+
+	"go.uber.org/zap"
+
+	"github.com/ShukeBta/MediaStationGo/internal/model"
+	"github.com/ShukeBta/MediaStationGo/internal/repository"
+)
+
+// PermissionService manages user permissions.
+type PermissionService struct {
+	log  *zap.Logger
+	repo *repository.Container
+}
+
+// NewPermissionService is the constructor.
+func NewPermissionService(log *zap.Logger, repo *repository.Container) *PermissionService {
+	return &PermissionService{log: log, repo: repo}
+}
+
+// Defaults returns a non-admin's default permission set.
+func DefaultPermissions(userID string) *model.UserPermission {
+	return &model.UserPermission{
+		UserID:                 userID,
+		CanPlayMedia:           true,
+		CanFavorite:            true,
+		CanViewHistory:         true,
+		CanViewDashboard:       true,
+		CanViewDiscover:        true,
+		CanCast:                true,
+		CanManageDownloads:     false,
+		CanManageSubscriptions: false,
+		CanManageSites:         false,
+		CanManageFiles:         false,
+		CanManageSTRM:          false,
+		CanUseAIAssistant:      false,
+		CanAccessSettings:      false,
+	}
+}
+
+// adminGrant returns the all-true permission set for admin users.
+func adminGrant(userID string) *model.UserPermission {
+	return &model.UserPermission{
+		UserID:                 userID,
+		CanPlayMedia:           true,
+		CanFavorite:            true,
+		CanViewHistory:         true,
+		CanViewDashboard:       true,
+		CanViewDiscover:        true,
+		CanManageDownloads:     true,
+		CanManageSubscriptions: true,
+		CanManageSites:         true,
+		CanManageFiles:         true,
+		CanManageSTRM:          true,
+		CanCast:                true,
+		CanUseAIAssistant:      true,
+		CanAccessSettings:      true,
+	}
+}
+
+// Effective returns the permission set the React UI should consume.
+// Admins skip the table entirely and get a synthetic all-grant row.
+func (s *PermissionService) Effective(ctx context.Context, userID string) (*model.UserPermission, error) {
+	u, err := s.repo.User.FindByID(ctx, userID)
+	if err != nil {
+		return nil, err
+	}
+	if u == nil {
+		return nil, nil
+	}
+	if u.Role == "admin" {
+		return adminGrant(userID), nil
+	}
+	row, err := s.repo.Permission.Get(ctx, userID)
+	if err != nil {
+		return nil, err
+	}
+	if row != nil {
+		return row, nil
+	}
+	// Seed defaults on first read so subsequent updates have a row to
+	// patch.
+	def := DefaultPermissions(userID)
+	if err := s.repo.Permission.Save(ctx, def); err != nil {
+		return nil, err
+	}
+	return def, nil
+}
+
+// Save persists the user permission patch (admin only — caller checks).
+func (s *PermissionService) Save(ctx context.Context, userID string, in *model.UserPermission) error {
+	in.UserID = userID
+	return s.repo.Permission.Save(ctx, in)
+}
+
+// Reset reverts to the non-admin defaults.
+func (s *PermissionService) Reset(ctx context.Context, userID string) (*model.UserPermission, error) {
+	def := DefaultPermissions(userID)
+	if err := s.repo.Permission.Save(ctx, def); err != nil {
+		return nil, err
+	}
+	return def, nil
+}