Files
WonderQ-Project/WonderQ-Admin/app/routers/admin.py
duanshuwen 7ba92f3c5d feat: 新增客片案例与团队共创模块,重构玩法与配置
- 新增客片案例全流程功能,包含前台页面、管理端配置、后端API、数据库迁移与文档
- 新增团队共创详情页面与对应接口
- 重构玩法模块:将静态playData替换为动态API获取,拆分类型定义到playTypes.ts
- 优化vite构建配置与环境变量处理,调整详情页操作栏文案
- 更新全量相关文档与配图,新增客片案例、团队共创API文档
- 新增测试用例,完善数据归一化逻辑
- 调整路由配置与环境变量示例文件
2026-08-19 20:23:04 +08:00

1351 lines
48 KiB
Python

import base64
import hashlib
import hmac
import http.client
import os
import re
from email.utils import formatdate
from uuid import uuid4
from urllib.parse import quote, urlsplit, urlunsplit
from fastapi import APIRouter, Depends, File, Form, HTTPException, Query, Request, UploadFile, status
from sqlalchemy import func, or_, select
from sqlalchemy.orm import Session, selectinload
from ..auth import create_token, get_actor_id, require_admin, verify_password
from ..config import get_settings
from ..database import get_db
from ..models import (
AdminUser,
AuditLog,
ConciergeAdvisor,
DemandFeatureCard,
DemandForm,
DemandHero,
DestinationHero,
HeroSlide,
HomeExperience,
HomeTeamBuilding,
HomeWanfaRecommendation,
HomeWildArchive,
Lead,
MediaAsset,
SiteVersion,
VehicleOption,
WanfaCategory,
WanfaRoute,
utc_now,
)
from ..schemas import (
LeadQuery,
LeadStatus,
LeadStatusIn,
LoginIn,
HomeExperienceCreate,
HomeExperiencePatch,
HomeReorderIn,
HomeTeamBuildingCreate,
HomeTeamBuildingPatch,
HomeWanfaRecommendationCreate,
HomeWanfaRecommendationPatch,
HomeWildArchiveCreate,
HomeWildArchivePatch,
SiteConfigPatchIn,
SiteConfigReorderIn,
WanfaCategoryCreate,
WanfaCategoryPatch,
WanfaReorderIn,
WanfaRouteCreate,
WanfaRoutePatch,
ConciergeAdvisorCreate,
ConciergeAdvisorPatch,
)
from ..seed import create_media, reset_guizhou_content
from ..serializers import concierge_advisor_dict, encode_value, lead_dict, model_dict
from .shared import site_config
router = APIRouter(prefix="/api/admin")
MEDIA_UPLOAD_MAX_BYTES = 5 * 1024 * 1024
MEDIA_ALLOWED_MIME_TYPES = {
"image/jpeg": "jpg",
"image/png": "png",
"image/webp": "webp",
"image/gif": "gif",
}
SITE_CONFIG_MODULES = {
"heroSlides": {
"model": HeroSlide,
"entity": "hero_slide",
"primary": "title",
"fields": {"title", "kicker", "image", "isActive", "sortOrder"},
"none_to_empty": {"image"},
"create_defaults": {"kicker": "", "image": ""},
},
"destinationHero": {
"model": DestinationHero,
"entity": "destination_hero",
"primary": "title",
"fields": {"title", "kicker", "image", "isActive", "sortOrder"},
"none_to_empty": set(),
"empty_to_none": {"kicker", "image"},
"create_defaults": {"kicker": None, "image": None},
},
"demandHero": {
"model": DemandHero,
"entity": "demand_hero",
"primary": "title",
"fields": {"title", "kicker", "description", "steps", "isActive", "sortOrder"},
"none_to_empty": set(),
"empty_to_none": {"kicker", "description"},
"create_defaults": {"kicker": None, "description": None, "steps": []},
},
"demandFeatureCards": {
"model": DemandFeatureCard,
"entity": "demand_feature_card",
"primary": "title",
"fields": {"title", "description", "isActive", "sortOrder"},
"none_to_empty": set(),
"empty_to_none": {"description"},
"create_defaults": {"description": None},
},
"demandForm": {
"model": DemandForm,
"entity": "demand_form",
"primary": "submitLabel",
"fields": {
"destinationLabel",
"destinationPlaceholder",
"phoneLabel",
"phonePlaceholder",
"noteLabel",
"notePlaceholder",
"submitLabel",
"chips",
"isActive",
},
"none_to_empty": set(),
"empty_to_none": {"destinationPlaceholder", "phonePlaceholder", "notePlaceholder"},
"create_defaults": {
"destinationLabel": "目的地/玩法",
"destinationPlaceholder": "例如:贵州、黄果树、西江苗寨",
"phoneLabel": "联系方式",
"phonePlaceholder": "手机号 / 微信号",
"noteLabel": "补充说明",
"notePlaceholder": "出行日期、人数、酒店偏好、预算范围",
"submitLabel": "提交出行需求",
"chips": ["贵州", "黄果树", "荔波小七孔", "西江苗寨", "梵净山", "万峰林"],
},
"ordered": False,
"singleton": True,
},
"vehicleOptions": {
"model": VehicleOption,
"entity": "vehicle_option",
"primary": "title",
"fields": {"title", "description", "image", "isActive", "sortOrder"},
"none_to_empty": set(),
"empty_to_none": {"description", "image"},
"create_defaults": {"description": None, "image": None},
},
}
def media_error(status_code: int, message: str, code: str, details: dict | None = None) -> None:
raise HTTPException(status_code=status_code, detail={"message": message, "code": code, "details": details or {}})
def normalize_media_group(group: str | None) -> str:
value = (group or "general").strip() or "general"
if len(value) > 32 or not re.fullmatch(r"[A-Za-z0-9_-]+", value):
media_error(400, "素材分组只能包含字母、数字、下划线和中划线", "MEDIA_UPLOAD_INVALID_GROUP", {"group": group})
return value
def safe_media_name(filename: str | None) -> str:
name = os.path.basename((filename or "upload").replace("\\", "/")).strip()
return name[:120] or "upload"
def detect_image_mime(head: bytes) -> str | None:
if head.startswith(b"\xff\xd8\xff"):
return "image/jpeg"
if head.startswith(b"\x89PNG\r\n\x1a\n"):
return "image/png"
if head.startswith((b"GIF87a", b"GIF89a")):
return "image/gif"
if len(head) >= 12 and head[:4] == b"RIFF" and head[8:12] == b"WEBP":
return "image/webp"
return None
def inspect_upload_image(file: UploadFile) -> tuple[str, int]:
content_type = (file.content_type or "").split(";", 1)[0].strip().lower()
if content_type == "image/jpg":
content_type = "image/jpeg"
if content_type and content_type not in MEDIA_ALLOWED_MIME_TYPES and content_type != "application/octet-stream":
media_error(400, "仅支持上传 JPG、PNG、WebP 或 GIF 图片", "MEDIA_UPLOAD_INVALID_TYPE", {"mimeType": content_type})
file.file.seek(0, os.SEEK_END)
size_bytes = file.file.tell()
file.file.seek(0)
if size_bytes <= 0:
media_error(400, "上传文件不能为空", "MEDIA_UPLOAD_EMPTY_FILE")
if size_bytes > MEDIA_UPLOAD_MAX_BYTES:
media_error(
413,
"图片大小不能超过 5MB",
"MEDIA_UPLOAD_TOO_LARGE",
{"maxBytes": MEDIA_UPLOAD_MAX_BYTES, "sizeBytes": size_bytes},
)
head = file.file.read(512)
file.file.seek(0)
detected = detect_image_mime(head)
if not detected:
media_error(400, "仅支持上传 JPG、PNG、WebP 或 GIF 图片", "MEDIA_UPLOAD_INVALID_TYPE")
if content_type in MEDIA_ALLOWED_MIME_TYPES and content_type != detected:
media_error(
400,
"图片内容与文件类型不一致",
"MEDIA_UPLOAD_TYPE_MISMATCH",
{"mimeType": content_type, "detectedMimeType": detected},
)
return detected, size_bytes
def media_object_key(group: str, mime_type: str) -> str:
extension = MEDIA_ALLOWED_MIME_TYPES[mime_type]
return f"admin/{group}/{utc_now().strftime('%Y/%m/%d')}/{uuid4().hex}.{extension}"
def oss_settings():
settings = get_settings()
values = {
"OSS_ACCESS_KEY_ID": settings.oss_access_key_id,
"OSS_ACCESS_KEY_SECRET": settings.oss_access_key_secret,
"OSS_ENDPOINT": settings.oss_endpoint,
"OSS_BUCKET_NAME": settings.oss_bucket_name,
}
missing = [key for key, value in values.items() if not (value and value.strip())]
if missing:
media_error(503, "OSS 存储配置不完整", "MEDIA_STORAGE_NOT_CONFIGURED", {"missing": missing})
return settings
def normalized_oss_host(endpoint: str, bucket: str) -> tuple[str, str]:
raw = endpoint.strip().rstrip("/")
if "://" not in raw:
raw = f"https://{raw}"
parsed = urlsplit(raw)
if parsed.scheme not in {"http", "https"} or not parsed.netloc:
media_error(503, "OSS Endpoint 配置不正确", "MEDIA_STORAGE_INVALID_ENDPOINT")
host = parsed.netloc
if not host.startswith(f"{bucket}."):
host = f"{bucket}.{host}"
return parsed.scheme, host
def upload_image_to_oss(file_obj, key: str, mime_type: str, size_bytes: int) -> str:
settings = oss_settings()
bucket = settings.oss_bucket_name.strip()
scheme, host = normalized_oss_host(settings.oss_endpoint, bucket)
date = formatdate(usegmt=True)
canonical_resource = f"/{bucket}/{key}"
string_to_sign = f"PUT\n\n{mime_type}\n{date}\n{canonical_resource}"
signature = base64.b64encode(
hmac.new(settings.oss_access_key_secret.strip().encode("utf-8"), string_to_sign.encode("utf-8"), hashlib.sha1).digest()
).decode("ascii")
quoted_key = quote(key, safe="/-_.~")
headers = {
"Authorization": f"OSS {settings.oss_access_key_id.strip()}:{signature}",
"Content-Type": mime_type,
"Content-Length": str(size_bytes),
"Date": date,
}
connection_class = http.client.HTTPSConnection if scheme == "https" else http.client.HTTPConnection
connection = connection_class(host, timeout=20)
try:
file_obj.seek(0)
connection.request("PUT", f"/{quoted_key}", body=file_obj, headers=headers)
response = connection.getresponse()
response.read(2048)
if response.status < 200 or response.status >= 300:
media_error(502, "OSS 上传失败", "MEDIA_STORAGE_UPLOAD_FAILED", {"status": response.status})
except OSError:
media_error(502, "OSS 上传失败", "MEDIA_STORAGE_UPLOAD_FAILED")
finally:
connection.close()
return urlunsplit((scheme, host, f"/{quoted_key}", "", ""))
def audit(db: Session, actor_id: str | None, action: str, entity: str, entity_id: str | None = None, after=None, before=None) -> None:
db.add(
AuditLog(
actorId=actor_id,
action=action,
entity=entity,
entityId=entity_id,
before=encode_value(before) if before is not None else None,
after=encode_value(after) if after is not None else None,
)
)
def site_config_error(status_code: int, message: str, code: str, details: dict | None = None) -> None:
raise HTTPException(status_code=status_code, detail={"message": message, "code": code, "details": details or {}})
def site_module(module: str) -> dict:
config = SITE_CONFIG_MODULES.get(module)
if not config:
site_config_error(400, "模块不存在或无权限操作", "MODULE_CONFIG_FORBIDDEN", {"module": module})
return config
def clean_site_value(value):
return value.strip() if isinstance(value, str) else value
def normalize_string_list(value) -> list[str]:
if value is None:
return []
return [item.strip() for item in value if isinstance(item, str) and item.strip()]
def site_field_value(config: dict, field: str, value):
if field in {"steps", "chips"}:
return normalize_string_list(value)
value = clean_site_value(value)
if value == "" and field in config.get("empty_to_none", set()):
return None
if value is None and field in config["none_to_empty"]:
return ""
return value
def validate_site_primary(config: dict, body: SiteConfigPatchIn) -> str:
primary = config["primary"]
value = clean_site_value(getattr(body, primary))
if not value:
site_config_error(422, "必填字段不能为空", "MODULE_CONFIG_VALIDATION_ERROR", {"field": primary})
return value
def next_site_sort_order(db: Session, model) -> int:
highest = db.scalar(select(func.max(model.sortOrder)))
return (highest + 1) if highest is not None else 0
def hero_slide_admin_dict(item: HeroSlide) -> dict:
return {
"id": item.id,
"title": item.title,
"kicker": item.kicker or None,
"image": item.image or None,
"isActive": item.isActive,
"sortOrder": item.sortOrder,
"createdAt": encode_value(item.createdAt),
"updatedAt": encode_value(item.updatedAt),
}
def site_item_dict(module: str, item) -> dict:
if module == "heroSlides":
return hero_slide_admin_dict(item)
return model_dict(item)
def module_items(db: Session, config: dict) -> list:
model = config["model"]
stmt = select(model)
if config.get("ordered", True):
stmt = stmt.order_by(model.sortOrder.asc())
else:
stmt = stmt.order_by(model.createdAt.asc())
return db.scalars(stmt).all()
def normalize_site_sort_orders(items: list) -> None:
for index, item in enumerate(items):
item.sortOrder = index
def site_create_payload(module: str, config: dict, body: SiteConfigPatchIn, db: Session) -> dict:
fields = body.model_fields_set
payload = {
field: site_field_value(config, field, getattr(body, field))
for field in config["fields"]
if field in fields
}
payload[config["primary"]] = validate_site_primary(config, body)
for field, value in config["create_defaults"].items():
payload.setdefault(field, value)
if "isActive" in config["fields"]:
payload["isActive"] = payload.get("isActive", True)
if config.get("ordered", True) and payload.get("sortOrder") is None:
payload["sortOrder"] = next_site_sort_order(db, config["model"])
return payload
def apply_site_patch(module: str, config: dict, item, body: SiteConfigPatchIn) -> None:
fields = body.model_fields_set
for field in config["fields"]:
if field not in fields:
continue
value = site_field_value(config, field, getattr(body, field))
if field == config["primary"] and not value:
site_config_error(422, "必填字段不能为空", "MODULE_CONFIG_VALIDATION_ERROR", {"field": field})
setattr(item, field, value)
def wanfa_route_dict(route: WanfaRoute) -> dict:
return {
"id": route.id,
"title": route.title,
"subtitle": route.subtitle,
"image": route.image,
"routeCount": route.routeCount,
"demandKeyword": route.demandKeyword,
}
def wanfa_category_dict(category: WanfaCategory) -> dict:
routes = sorted(category.routes or [], key=lambda item: item.sortOrder)
return {
"id": category.id,
"label": category.label,
"routes": [wanfa_route_dict(route) for route in routes],
}
def home_wanfa_recommendation_dict(item: HomeWanfaRecommendation) -> dict:
category = item.category
return model_dict(
item,
{
"categoryLabel": category.label if category else "",
"routeCount": len(category.routes) if category else 0,
},
)
def wanfa_category_or_error(db: Session, category_id: str) -> WanfaCategory:
category = db.get(WanfaCategory, category_id)
if not category:
site_config_error(404, "玩法分类不存在", "WANFA_CATEGORY_NOT_FOUND", {"categoryId": category_id})
return category
def wanfa_route_or_error(db: Session, category: WanfaCategory, route_id: str) -> WanfaRoute:
route = db.get(WanfaRoute, route_id)
if not route or route.categoryId != category.id:
site_config_error(
404,
"玩法路线不存在",
"WANFA_ROUTE_NOT_FOUND",
{"categoryId": category.id, "routeId": route_id},
)
return route
def validate_wanfa_order(item_ids: list[str], current_ids: list[str], code: str) -> None:
if len(item_ids) != len(current_ids) or len(set(item_ids)) != len(item_ids) or set(item_ids) != set(current_ids):
site_config_error(400, "排序项目必须完整且不能重复", code)
def apply_wanfa_order(items: list, item_ids: list[str]) -> list:
by_id = {item.id: item for item in items}
ordered = [by_id[item_id] for item_id in item_ids]
for index, item in enumerate(ordered):
item.sortOrder = index
return ordered
def home_error(status_code: int, message: str, code: str, details: dict | None = None) -> None:
raise HTTPException(status_code=status_code, detail={"message": message, "code": code, "details": details or {}})
def home_item_or_error(db: Session, model, item_id: str, label: str, code: str):
item = db.get(model, item_id)
if not item:
home_error(404, f"{label}不存在", code, {"id": item_id})
return item
def home_items(db: Session, model) -> list:
return db.scalars(select(model).order_by(model.sortOrder.asc())).all()
def validate_home_order(item_ids: list[str], current_ids: list[str]) -> None:
if len(item_ids) != len(current_ids) or len(set(item_ids)) != len(item_ids) or set(item_ids) != set(current_ids):
home_error(400, "排序项目必须完整且不能重复", "HOME_REORDER_INVALID")
def apply_home_order(items: list, item_ids: list[str]) -> list:
by_id = {item.id: item for item in items}
ordered = [by_id[item_id] for item_id in item_ids]
for index, item in enumerate(ordered):
item.sortOrder = index
return ordered
def create_home_item(db: Session, request: Request, body, model, entity: str):
payload = body.model_dump(exclude_none=True)
if body.sortOrder is None:
payload["sortOrder"] = next_site_sort_order(db, model)
item = model(**payload)
db.add(item)
db.flush()
after = model_dict(item)
audit(db, get_actor_id(request), "create", entity, item.id, after=after)
db.commit()
return after
def update_home_item(db: Session, request: Request, item_id: str, body, model, entity: str, label: str, code: str):
item = home_item_or_error(db, model, item_id, label, code)
before = model_dict(item)
for field, value in body.model_dump(exclude_unset=True).items():
setattr(item, field, value)
db.flush()
after = model_dict(item)
audit(db, get_actor_id(request), "update", entity, item.id, after=after, before=before)
db.commit()
return after
def delete_home_item(db: Session, request: Request, item_id: str, model, entity: str, label: str, code: str):
item = home_item_or_error(db, model, item_id, label, code)
before = model_dict(item)
db.delete(item)
db.flush()
for index, remaining in enumerate(home_items(db, model)):
remaining.sortOrder = index
result = {"id": item_id}
audit(db, get_actor_id(request), "delete", entity, item_id, before=before, after=result)
db.commit()
return result
def reorder_home_items(db: Session, request: Request, body: HomeReorderIn, model, entity: str):
items = home_items(db, model)
validate_home_order(body.itemIds, [item.id for item in items])
ordered = apply_home_order(items, body.itemIds)
db.flush()
after = [model_dict(item) for item in ordered]
audit(db, get_actor_id(request), "reorder", entity, after=after)
db.commit()
return {"items": after}
@router.get("/home/experiences")
def list_home_experiences(_user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
return {"items": [model_dict(item) for item in home_items(db, HomeExperience)]}
@router.post("/home/experiences", status_code=status.HTTP_201_CREATED)
def create_home_experience(
body: HomeExperienceCreate,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return create_home_item(db, request, body, HomeExperience, "home_experience")
@router.patch("/home/experiences/reorder")
def reorder_home_experiences(
body: HomeReorderIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return reorder_home_items(db, request, body, HomeExperience, "home_experience")
@router.patch("/home/experiences/{experience_id}")
def update_home_experience(
experience_id: str,
body: HomeExperiencePatch,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return update_home_item(db, request, experience_id, body, HomeExperience, "home_experience", "体验推荐", "HOME_EXPERIENCE_NOT_FOUND")
@router.delete("/home/experiences/{experience_id}")
def delete_home_experience(
experience_id: str,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return delete_home_item(db, request, experience_id, HomeExperience, "home_experience", "体验推荐", "HOME_EXPERIENCE_NOT_FOUND")
@router.get("/home/team-buildings")
def list_home_team_buildings(_user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
return {"items": [model_dict(item) for item in home_items(db, HomeTeamBuilding)]}
@router.post("/home/team-buildings", status_code=status.HTTP_201_CREATED)
def create_home_team_building(
body: HomeTeamBuildingCreate,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return create_home_item(db, request, body, HomeTeamBuilding, "home_team_building")
@router.patch("/home/team-buildings/reorder")
def reorder_home_team_buildings(
body: HomeReorderIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return reorder_home_items(db, request, body, HomeTeamBuilding, "home_team_building")
@router.patch("/home/team-buildings/{team_building_id}")
def update_home_team_building(
team_building_id: str,
body: HomeTeamBuildingPatch,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return update_home_item(db, request, team_building_id, body, HomeTeamBuilding, "home_team_building", "团队共创", "HOME_TEAM_BUILDING_NOT_FOUND")
@router.delete("/home/team-buildings/{team_building_id}")
def delete_home_team_building(
team_building_id: str,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return delete_home_item(db, request, team_building_id, HomeTeamBuilding, "home_team_building", "团队共创", "HOME_TEAM_BUILDING_NOT_FOUND")
@router.get("/home/wild-archives")
def list_home_wild_archives(_user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
return {"items": [model_dict(item) for item in home_items(db, HomeWildArchive)]}
@router.post("/home/wild-archives", status_code=status.HTTP_201_CREATED)
def create_home_wild_archive(
body: HomeWildArchiveCreate,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return create_home_item(db, request, body, HomeWildArchive, "home_wild_archive")
@router.patch("/home/wild-archives/reorder")
def reorder_home_wild_archives(
body: HomeReorderIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return reorder_home_items(db, request, body, HomeWildArchive, "home_wild_archive")
@router.patch("/home/wild-archives/{archive_id}")
def update_home_wild_archive(
archive_id: str,
body: HomeWildArchivePatch,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return update_home_item(db, request, archive_id, body, HomeWildArchive, "home_wild_archive", "极境视界", "HOME_WILD_ARCHIVE_NOT_FOUND")
@router.delete("/home/wild-archives/{archive_id}")
def delete_home_wild_archive(
archive_id: str,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
return delete_home_item(db, request, archive_id, HomeWildArchive, "home_wild_archive", "极境视界", "HOME_WILD_ARCHIVE_NOT_FOUND")
def home_wanfa_recommendation_items(db: Session) -> list[HomeWanfaRecommendation]:
return db.scalars(
select(HomeWanfaRecommendation)
.options(selectinload(HomeWanfaRecommendation.category).selectinload(WanfaCategory.routes))
.order_by(HomeWanfaRecommendation.sortOrder.asc())
).all()
def home_wanfa_recommendation_or_error(db: Session, recommendation_id: str) -> HomeWanfaRecommendation:
recommendation = db.get(HomeWanfaRecommendation, recommendation_id)
if not recommendation:
home_error(404, "首页玩法推荐不存在", "HOME_WANFA_RECOMMENDATION_NOT_FOUND", {"id": recommendation_id})
return recommendation
def ensure_home_wanfa_category_available(
db: Session,
category_id: str,
recommendation_id: str | None = None,
) -> WanfaCategory:
category = wanfa_category_or_error(db, category_id)
query = select(func.count()).select_from(HomeWanfaRecommendation).where(
HomeWanfaRecommendation.categoryId == category.id
)
if recommendation_id:
query = query.where(HomeWanfaRecommendation.id != recommendation_id)
if db.scalar(query):
home_error(409, "该玩法分类已经关联到首页推荐", "HOME_WANFA_CATEGORY_DUPLICATE", {"categoryId": category.id})
return category
@router.get("/home/play-recommendations")
def list_home_wanfa_recommendations(_user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
return {"items": [home_wanfa_recommendation_dict(item) for item in home_wanfa_recommendation_items(db)]}
@router.post("/home/play-recommendations", status_code=status.HTTP_201_CREATED)
def create_home_wanfa_recommendation(
body: HomeWanfaRecommendationCreate,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
category = ensure_home_wanfa_category_available(db, body.categoryId)
next_sort = db.scalar(select(func.max(HomeWanfaRecommendation.sortOrder)))
recommendation = HomeWanfaRecommendation(
categoryId=category.id,
category=category,
isActive=body.isActive,
sortOrder=body.sortOrder if body.sortOrder is not None else ((next_sort + 1) if next_sort is not None else 0),
)
db.add(recommendation)
db.flush()
after = home_wanfa_recommendation_dict(recommendation)
audit(db, get_actor_id(request), "create", "home_wanfa_recommendation", recommendation.id, after=after)
db.commit()
return after
@router.patch("/home/play-recommendations/reorder")
def reorder_home_wanfa_recommendations(
body: HomeReorderIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
items = home_wanfa_recommendation_items(db)
validate_home_order(body.itemIds, [item.id for item in items])
ordered = apply_home_order(items, body.itemIds)
db.flush()
after = [home_wanfa_recommendation_dict(item) for item in ordered]
audit(db, get_actor_id(request), "reorder", "home_wanfa_recommendation", after=after)
db.commit()
return {"items": after}
@router.patch("/home/play-recommendations/{recommendation_id}")
def update_home_wanfa_recommendation(
recommendation_id: str,
body: HomeWanfaRecommendationPatch,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
recommendation = home_wanfa_recommendation_or_error(db, recommendation_id)
before = home_wanfa_recommendation_dict(recommendation)
if "categoryId" in body.model_fields_set:
category = ensure_home_wanfa_category_available(db, body.categoryId, recommendation.id)
recommendation.categoryId = category.id
recommendation.category = category
for field in ("isActive", "sortOrder"):
if field in body.model_fields_set:
setattr(recommendation, field, getattr(body, field))
db.flush()
after = home_wanfa_recommendation_dict(recommendation)
audit(db, get_actor_id(request), "update", "home_wanfa_recommendation", recommendation.id, after=after, before=before)
db.commit()
return after
@router.delete("/home/play-recommendations/{recommendation_id}")
def delete_home_wanfa_recommendation(
recommendation_id: str,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
recommendation = home_wanfa_recommendation_or_error(db, recommendation_id)
before = home_wanfa_recommendation_dict(recommendation)
db.delete(recommendation)
db.flush()
for index, remaining in enumerate(home_wanfa_recommendation_items(db)):
remaining.sortOrder = index
result = {"id": recommendation_id}
audit(db, get_actor_id(request), "delete", "home_wanfa_recommendation", recommendation_id, before=before, after=result)
db.commit()
return result
def concierge_error(status_code: int, message: str, code: str, details: dict | None = None) -> None:
raise HTTPException(status_code=status_code, detail={"message": message, "code": code, "details": details or {}})
def concierge_advisor_or_error(db: Session, advisor_id: str) -> ConciergeAdvisor:
advisor = db.get(ConciergeAdvisor, advisor_id)
if not advisor:
concierge_error(404, "管家顾问不存在", "CONCIERGE_ADVISOR_NOT_FOUND", {"advisorId": advisor_id})
return advisor
def validate_concierge_order(item_ids: list[str], current_ids: list[str]) -> None:
if len(item_ids) != len(current_ids) or len(set(item_ids)) != len(item_ids) or set(item_ids) != set(current_ids):
concierge_error(400, "排序项目必须完整且不能重复", "CONCIERGE_REORDER_INVALID")
def apply_concierge_order(items: list[ConciergeAdvisor], item_ids: list[str]) -> list[ConciergeAdvisor]:
by_id = {item.id: item for item in items}
ordered = [by_id[item_id] for item_id in item_ids]
for index, item in enumerate(ordered):
item.sortOrder = index
return ordered
@router.get("/wanfa/categories")
def list_wanfa_categories(_user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
categories = db.scalars(
select(WanfaCategory).options(selectinload(WanfaCategory.routes)).order_by(WanfaCategory.sortOrder.asc())
).all()
return {"categories": [wanfa_category_dict(category) for category in categories]}
@router.post("/wanfa/categories", status_code=status.HTTP_201_CREATED)
def create_wanfa_category(
body: WanfaCategoryCreate,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
category = WanfaCategory(label=body.label, sortOrder=next_site_sort_order(db, WanfaCategory))
db.add(category)
db.flush()
after = wanfa_category_dict(category)
audit(db, get_actor_id(request), "create", "wanfa_category", category.id, after=after)
db.commit()
return after
@router.patch("/wanfa/categories/reorder")
def reorder_wanfa_categories(
body: WanfaReorderIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
categories = db.scalars(select(WanfaCategory).order_by(WanfaCategory.sortOrder.asc())).all()
validate_wanfa_order(body.itemIds, [category.id for category in categories], "WANFA_CATEGORY_REORDER_INVALID")
ordered = apply_wanfa_order(categories, body.itemIds)
db.flush()
after = [wanfa_category_dict(category) for category in ordered]
audit(db, get_actor_id(request), "reorder", "wanfa_category", after=after)
db.commit()
return {"items": after}
@router.patch("/wanfa/categories/{category_id}")
def update_wanfa_category(
category_id: str,
body: WanfaCategoryPatch,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
category = wanfa_category_or_error(db, category_id)
before = wanfa_category_dict(category)
if "label" in body.model_fields_set:
category.label = body.label
db.flush()
after = wanfa_category_dict(category)
audit(db, get_actor_id(request), "update", "wanfa_category", category.id, after=after, before=before)
db.commit()
return after
@router.delete("/wanfa/categories/{category_id}")
def delete_wanfa_category(
category_id: str,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
category = wanfa_category_or_error(db, category_id)
if category.routes:
site_config_error(409, "玩法分类下仍有路线,不能删除", "WANFA_CATEGORY_NOT_EMPTY", {"categoryId": category.id})
recommendation_count = db.scalar(
select(func.count())
.select_from(HomeWanfaRecommendation)
.where(HomeWanfaRecommendation.categoryId == category.id)
)
if recommendation_count:
site_config_error(
409,
"该玩法分类已被首页推荐,不能删除",
"WANFA_CATEGORY_RECOMMENDED",
{"categoryId": category.id},
)
before = wanfa_category_dict(category)
db.delete(category)
audit(db, get_actor_id(request), "delete", "wanfa_category", category.id, before=before)
db.commit()
return {"id": category.id}
@router.post("/wanfa/categories/{category_id}/routes", status_code=status.HTTP_201_CREATED)
def create_wanfa_route(
category_id: str,
body: WanfaRouteCreate,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
category = wanfa_category_or_error(db, category_id)
next_sort = db.scalar(
select(func.max(WanfaRoute.sortOrder)).where(WanfaRoute.categoryId == category.id)
)
route = WanfaRoute(
categoryId=category.id,
title=body.title,
subtitle=body.subtitle,
image=body.image,
routeCount=body.routeCount,
demandKeyword=body.demandKeyword,
sortOrder=(next_sort + 1) if next_sort is not None else 0,
)
db.add(route)
db.flush()
after = wanfa_route_dict(route)
audit(db, get_actor_id(request), "create", "wanfa_route", route.id, after=after)
db.commit()
return after
@router.patch("/wanfa/categories/{category_id}/routes/reorder")
def reorder_wanfa_routes(
category_id: str,
body: WanfaReorderIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
category = wanfa_category_or_error(db, category_id)
routes = list(category.routes or [])
validate_wanfa_order(body.itemIds, [route.id for route in routes], "WANFA_ROUTE_REORDER_INVALID")
ordered = apply_wanfa_order(routes, body.itemIds)
db.flush()
after = [wanfa_route_dict(route) for route in ordered]
audit(db, get_actor_id(request), "reorder", "wanfa_route", category.id, after=after)
db.commit()
return {"items": after}
@router.patch("/wanfa/categories/{category_id}/routes/{route_id}")
def update_wanfa_route(
category_id: str,
route_id: str,
body: WanfaRoutePatch,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
category = wanfa_category_or_error(db, category_id)
route = wanfa_route_or_error(db, category, route_id)
before = wanfa_route_dict(route)
for field in ("title", "subtitle", "image", "routeCount", "demandKeyword"):
if field in body.model_fields_set:
setattr(route, field, getattr(body, field))
db.flush()
after = wanfa_route_dict(route)
audit(db, get_actor_id(request), "update", "wanfa_route", route.id, after=after, before=before)
db.commit()
return after
@router.delete("/wanfa/categories/{category_id}/routes/{route_id}")
def delete_wanfa_route(
category_id: str,
route_id: str,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
category = wanfa_category_or_error(db, category_id)
route = wanfa_route_or_error(db, category, route_id)
before = wanfa_route_dict(route)
db.delete(route)
audit(db, get_actor_id(request), "delete", "wanfa_route", route.id, before=before)
db.commit()
return {"id": route.id}
@router.get("/concierge/advisors")
def list_concierge_advisors(_user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
advisors = db.scalars(select(ConciergeAdvisor).order_by(ConciergeAdvisor.sortOrder.asc())).all()
return {"advisors": [concierge_advisor_dict(advisor) for advisor in advisors]}
@router.post("/concierge/advisors", status_code=status.HTTP_201_CREATED)
def create_concierge_advisor(
body: ConciergeAdvisorCreate,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
payload = body.model_dump(exclude_none=True)
payload["details"] = body.details
if body.sortOrder is None:
payload["sortOrder"] = next_site_sort_order(db, ConciergeAdvisor)
advisor = ConciergeAdvisor(**payload)
db.add(advisor)
db.flush()
after = concierge_advisor_dict(advisor)
audit(db, get_actor_id(request), "create", "concierge_advisor", advisor.id, after=after)
db.commit()
return after
@router.patch("/concierge/advisors/reorder")
def reorder_concierge_advisors(
body: WanfaReorderIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
advisors = db.scalars(select(ConciergeAdvisor).order_by(ConciergeAdvisor.sortOrder.asc())).all()
validate_concierge_order(body.itemIds, [advisor.id for advisor in advisors])
ordered = apply_concierge_order(advisors, body.itemIds)
db.flush()
after = [concierge_advisor_dict(advisor) for advisor in ordered]
audit(db, get_actor_id(request), "reorder", "concierge_advisor", after=after)
db.commit()
return {"items": after}
@router.patch("/concierge/advisors/{advisor_id}")
def update_concierge_advisor(
advisor_id: str,
body: ConciergeAdvisorPatch,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
advisor = concierge_advisor_or_error(db, advisor_id)
before = concierge_advisor_dict(advisor)
payload = body.model_dump(exclude_unset=True)
if "details" in payload:
payload["details"] = body.details or []
for field, value in payload.items():
setattr(advisor, field, value)
db.flush()
after = concierge_advisor_dict(advisor)
audit(db, get_actor_id(request), "update", "concierge_advisor", advisor.id, after=after, before=before)
db.commit()
return after
@router.delete("/concierge/advisors/{advisor_id}")
def delete_concierge_advisor(
advisor_id: str,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
advisor = concierge_advisor_or_error(db, advisor_id)
before = concierge_advisor_dict(advisor)
db.delete(advisor)
db.flush()
remaining = db.scalars(select(ConciergeAdvisor).order_by(ConciergeAdvisor.sortOrder.asc())).all()
for index, item in enumerate(remaining):
item.sortOrder = index
result = {"id": advisor_id}
audit(db, get_actor_id(request), "delete", "concierge_advisor", advisor_id, before=before, after=result)
db.commit()
return result
@router.post("/auth/login")
def login(body: LoginIn, db: Session = Depends(get_db)):
user = db.scalar(select(AdminUser).where(AdminUser.email == body.email))
if not user or not user.isActive or not verify_password(body.password, user.passwordHash):
raise HTTPException(status_code=401, detail="账号或密码错误")
return {
"token": create_token(user),
"user": {"id": user.id, "email": user.email, "name": user.name, "role": user.role},
}
@router.get("/me")
def me(user: AdminUser = Depends(require_admin)):
return {"id": user.id, "email": user.email, "name": user.name, "role": user.role}
@router.get("/dashboard")
def dashboard(_user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
stats = {
"newLeadCount": db.scalar(select(func.count()).select_from(Lead).where(Lead.status == "new")),
"leadCount": db.scalar(select(func.count()).select_from(Lead)),
}
recent = db.scalars(
select(Lead).options(selectinload(Lead.assignedUser)).order_by(Lead.createdAt.desc()).limit(5)
).all()
return {"stats": stats, "recentLeads": [lead_dict(lead) for lead in recent]}
@router.get("/site-config")
def admin_site_config(_user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
return {
"heroSlides": [
hero_slide_admin_dict(item)
for item in db.scalars(select(HeroSlide).order_by(HeroSlide.sortOrder.asc())).all()
],
"destinationHero": [
model_dict(item)
for item in db.scalars(select(DestinationHero).order_by(DestinationHero.sortOrder.asc())).all()
],
"vehicleOptions": [
model_dict(item)
for item in db.scalars(select(VehicleOption).order_by(VehicleOption.sortOrder.asc())).all()
],
"demandHero": [
model_dict(item)
for item in db.scalars(select(DemandHero).order_by(DemandHero.sortOrder.asc())).all()
],
"demandFeatureCards": [
model_dict(item)
for item in db.scalars(select(DemandFeatureCard).order_by(DemandFeatureCard.sortOrder.asc())).all()
],
"demandForm": [
model_dict(item)
for item in db.scalars(select(DemandForm).order_by(DemandForm.createdAt.asc())).all()
],
}
@router.post("/site-config/{module}", status_code=status.HTTP_201_CREATED)
def create_site_config(
module: str,
body: SiteConfigPatchIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
config = site_module(module)
if config.get("fixed"):
site_config_error(405, "固定模块不支持新增", "MODULE_CONFIG_CREATE_UNSUPPORTED", {"module": module})
if config.get("singleton") and module_items(db, config):
site_config_error(409, "单例配置已存在", "MODULE_CONFIG_SINGLETON_EXISTS", {"module": module})
item = config["model"](**site_create_payload(module, config, body, db))
db.add(item)
db.flush()
after = site_item_dict(module, item)
audit(db, get_actor_id(request), "create", config["entity"], item.id, after)
db.commit()
return after
@router.patch("/site-config/{module}/reorder")
def reorder_site_config(
module: str,
body: SiteConfigReorderIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
config = site_module(module)
if not config.get("ordered", True):
site_config_error(400, "模块不支持排序", "MODULE_CONFIG_REORDER_UNSUPPORTED", {"module": module})
items = module_items(db, config)
current_ids = [item.id for item in items]
requested_ids = body.itemIds
if len(set(requested_ids)) != len(requested_ids) or set(requested_ids) != set(current_ids):
site_config_error(
400,
"排序配置项必须完整且不能重复",
"MODULE_CONFIG_REORDER_INVALID",
{"module": module, "itemIds": requested_ids},
)
items_by_id = {item.id: item for item in items}
ordered_items = [items_by_id[item_id] for item_id in requested_ids]
before = [site_item_dict(module, item) for item in items]
normalize_site_sort_orders(ordered_items)
after = [site_item_dict(module, item) for item in ordered_items]
audit(db, get_actor_id(request), "reorder", config["entity"], module, {"items": after}, {"items": before})
db.commit()
return {"items": after}
@router.patch("/site-config/{module}/{item_id}")
def update_site_config(
module: str,
item_id: str,
body: SiteConfigPatchIn,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
config = site_module(module)
item = db.get(config["model"], item_id)
if not item:
site_config_error(404, "维护项不存在", "MODULE_CONFIG_NOT_FOUND", {"module": module, "id": item_id})
before = site_item_dict(module, item)
apply_site_patch(module, config, item, body)
db.flush()
after = site_item_dict(module, item)
audit(db, get_actor_id(request), "update", config["entity"], item.id, after, before)
db.commit()
return after
@router.delete("/site-config/{module}/{item_id}")
def delete_site_config(
module: str,
item_id: str,
request: Request,
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
config = site_module(module)
if config.get("fixed"):
site_config_error(405, "固定模块不支持删除", "MODULE_CONFIG_DELETE_UNSUPPORTED", {"module": module})
item = db.get(config["model"], item_id)
if not item:
site_config_error(404, "维护项不存在", "MODULE_CONFIG_NOT_FOUND", {"module": module, "id": item_id})
before = site_item_dict(module, item)
db.delete(item)
db.flush()
if config.get("ordered", True):
normalize_site_sort_orders(module_items(db, config))
result = {"id": item_id}
audit(db, get_actor_id(request), "delete", config["entity"], item_id, result, before)
db.commit()
return result
@router.get("/leads")
def list_leads(
status_value: LeadStatus | None = Query(default=None, alias="status"),
sourcePage: str | None = None,
keyword: str | None = None,
createdFrom: str | None = None,
createdTo: str | None = None,
take: int = Query(default=100, ge=1, le=200),
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
query = LeadQuery(
status=status_value,
sourcePage=sourcePage,
keyword=keyword,
createdFrom=createdFrom,
createdTo=createdTo,
take=take,
)
stmt = (
select(Lead)
.options(selectinload(Lead.assignedUser))
.order_by(Lead.createdAt.desc())
.limit(query.take)
)
if query.status:
stmt = stmt.where(Lead.status == query.status)
if query.sourcePage:
stmt = stmt.where(Lead.sourcePage == query.sourcePage.strip())
if query.createdFrom:
stmt = stmt.where(Lead.createdAt >= query.createdFrom)
if query.createdTo:
stmt = stmt.where(Lead.createdAt < query.createdTo)
if query.keyword and query.keyword.strip():
pattern = f"%{query.keyword.strip()}%"
stmt = stmt.where(
or_(
Lead.phone.ilike(pattern),
Lead.destination.ilike(pattern),
Lead.note.ilike(pattern),
)
).distinct()
leads = db.scalars(stmt).all()
return {"items": [lead_dict(lead) for lead in leads]}
@router.patch("/leads/{lead_id}/status")
def update_lead_status(lead_id: str, body: LeadStatusIn, request: Request, _user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
lead = db.get(Lead, lead_id)
if not lead:
raise HTTPException(status_code=404, detail="线索不存在")
before = model_dict(lead)
lead.status = body.status
db.flush()
audit(db, get_actor_id(request), "update_status", "lead", lead.id, model_dict(lead), before)
db.commit()
return model_dict(lead)
@router.get("/media-assets")
def list_media_assets(_user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
assets = db.scalars(select(MediaAsset).order_by(MediaAsset.createdAt.desc()).limit(200)).all()
return {"items": [model_dict(asset) for asset in assets]}
@router.post("/media-assets/upload", status_code=status.HTTP_201_CREATED)
def upload_media_asset(
request: Request,
file: UploadFile = File(...),
group: str | None = Form(default="general"),
_user: AdminUser = Depends(require_admin),
db: Session = Depends(get_db),
):
safe_group = normalize_media_group(group)
mime_type, size_bytes = inspect_upload_image(file)
key = media_object_key(safe_group, mime_type)
url = upload_image_to_oss(file.file, key, mime_type, size_bytes)
asset = MediaAsset(
url=url,
name=safe_media_name(file.filename),
mimeType=mime_type,
sizeBytes=size_bytes,
group=safe_group,
)
db.add(asset)
db.flush()
after = model_dict(asset)
audit(db, get_actor_id(request), "upload", "media_asset", asset.id, after)
db.commit()
return after
@router.post("/reset-guizhou-content")
def reset_content(request: Request, _user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
result = reset_guizhou_content(db)
audit(db, get_actor_id(request), "reset_guizhou_content", "site_content", after=result)
db.commit()
return result
@router.post("/publish", status_code=status.HTTP_201_CREATED)
def publish(request: Request, _user: AdminUser = Depends(require_admin), db: Session = Depends(get_db)):
snapshot = site_config(db, active_only=True)
version = SiteVersion(title=f"manual-{utc_now().isoformat()}", status="published", snapshot=snapshot, publishedAt=utc_now())
db.add(version)
db.flush()
audit(db, get_actor_id(request), "publish", "site_version", version.id, model_dict(version))
db.commit()
return model_dict(version)