feat: M3-M7 全模块落地 + 集成接线

- M3 认证/权限/审计/限流 + 全部 REST 接口 - M4 管理面板（MIUIx + 成绩录入/积分榜下钻/大屏控制） - M5a 大屏页面（六页 + 明细覆盖层 + 缩放适配） - M6 WebSocket 实时同步中心 - M7 xlsx 导出 + 赛事包 zip + 备份 - 规则包 YAML 导入导出（差异预览） - 字体 vendor 子集化（4 套 x2 字重） - 集成：realtime/export/rules 接入 main+httpapi；backup 子命令 - 修复：中间件包装 ResponseWriter 丢失 Hijacker，导致 WS 握手 501
2026-09-09 19:02:24 +08:00
1 parent d0e3b93e76
commit bc8b1ee6c0
@@ -0,0 +1,222 @@
+package httpapi
+
+import (
+	"net/http"
+	"strings"
+
+	"git.yeij.top/AskaEth/Scoreboard/server/internal/domain"
+)
+
+// ---------- 成绩 ----------
+
+func (s *server) listResultsHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	eventID, _ := int64Query(r, "eventId")
+	state := strings.TrimSpace(r.URL.Query().Get("state"))
+	if state != "" && state != string(domain.ResultStateDraft) && state != string(domain.ResultStatePublished) {
+		return nil, badRequest("state 只能是 draft/published", state)
+	}
+	page, size := pageQuery(r)
+	return s.listResultsPage(r.Context(), eventID, state, page, size)
+}
+
+func (s *server) saveDraftHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	var in saveDraftPayload
+	if err := decodeJSON(r, &in); err != nil {
+		return nil, err
+	}
+	if in.EventID == 0 {
+		return nil, badRequest("eventId 必填", nil)
+	}
+	if len(in.Results) == 0 {
+		return nil, badRequest("results 不能为空", nil)
+	}
+	return nil, s.idempotent(w, r, in.RequestID, func() (any, error) {
+		saved, err := s.upsertDraft(r.Context(), in.EventID, middlewareUserID(r), in.Results)
+		if err != nil {
+			return nil, err
+		}
+		s.audit(r.Context(), "result.draft.save", "event", in.EventID, nil, saved)
+		return saved, nil
+	})
+}
+
+func (s *server) publishHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	var in publishPayload
+	if err := decodeJSON(r, &in); err != nil {
+		return nil, err
+	}
+	return nil, s.idempotent(w, r, in.RequestID, func() (any, error) {
+		return s.publishResults(r.Context(), in, middlewareUserID(r))
+	})
+}
+
+func (s *server) unpublishHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	var in publishPayload
+	if err := decodeJSON(r, &in); err != nil {
+		return nil, err
+	}
+	return nil, s.idempotent(w, r, in.RequestID, func() (any, error) {
+		return s.unpublishResults(r.Context(), in, middlewareUserID(r))
+	})
+}
+
+func (s *server) voidResultHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	id, err := pathID(r, "id")
+	if err != nil {
+		return nil, err
+	}
+	var in voidResultPayload
+	if err := decodeJSON(r, &in); err != nil {
+		return nil, err
+	}
+	return nil, s.idempotent(w, r, in.RequestID, func() (any, error) {
+		return s.voidResult(r.Context(), id, in.Reason, middlewareUserID(r))
+	})
+}
+
+// ---------- 积分与排名 ----------
+
+func (s *server) standingsHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	in, err := s.loadStandingsInput(r.Context())
+	if err != nil {
+		return nil, err
+	}
+	teams, err := s.teamMap(r.Context())
+	if err != nil {
+		return nil, err
+	}
+	return standingRowsDTO(domain.BuildTeamStandings(in), teams), nil
+}
+
+func (s *server) athleteStandingsHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	in, err := s.loadStandingsInput(r.Context())
+	if err != nil {
+		return nil, err
+	}
+	genders := make(map[int64]*string, len(in.Athletes))
+	for _, a := range in.Athletes {
+		if a.Gender != "" {
+			g := a.Gender
+			genders[a.ID] = &g
+		}
+	}
+	rows := domain.BuildAthleteStandings(in)
+	out := make([]athleteStandingDTO, 0, len(rows))
+	for _, row := range rows {
+		out = append(out, athleteStandingDTO{
+			Rank:        row.Rank,
+			AthleteID:   row.AthleteID,
+			AthleteName: row.Name,
+			Gender:      genders[row.AthleteID],
+			TeamID:      row.TeamID,
+			TeamCode:    row.TeamCode,
+			TeamName:    row.TeamName,
+			ShortName:   nilIfEmpty(row.TeamName),
+			TotalPoints: row.Points,
+			Gold:        row.Gold,
+			Silver:      row.Silver,
+			Bronze:      row.Bronze,
+		})
+	}
+	return out, nil
+}
+
+func (s *server) breakdownHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	id, err := pathID(r, "id")
+	if err != nil {
+		return nil, err
+	}
+	return s.teamBreakdown(r.Context(), id)
+}
+
+// ---------- 人工调整 ----------
+
+func (s *server) listAdjustmentsHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	teamID, _ := int64Query(r, "teamId")
+	page, size := pageQuery(r)
+	return s.listAdjustments(r.Context(), teamID, page, size)
+}
+
+func (s *server) createAdjustmentHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	var in adjustmentInput
+	if err := decodeJSON(r, &in); err != nil {
+		return nil, err
+	}
+	return nil, s.idempotent(w, r, in.RequestID, func() (any, error) {
+		return s.createAdjustment(r.Context(), in, middlewareUserID(r))
+	})
+}
+
+func (s *server) voidAdjustmentHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	id, err := pathID(r, "id")
+	if err != nil {
+		return nil, err
+	}
+	var in voidAdjustmentPayload
+	if err := decodeJSON(r, &in); err != nil {
+		return nil, err
+	}
+	return nil, s.idempotent(w, r, in.RequestID, func() (any, error) {
+		return s.voidAdjustment(r.Context(), id, middlewareUserID(r), in.Reason)
+	})
+}
+
+// ---------- 纪录 ----------
+
+func (s *server) listRecordsHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	eventID, _ := int64Query(r, "eventId")
+	return s.listRecords(r.Context(), eventID)
+}
+
+func (s *server) createRecordBreakHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	var in recordBreakInput
+	if err := decodeJSON(r, &in); err != nil {
+		return nil, err
+	}
+	return nil, s.idempotent(w, r, in.RequestID, func() (any, error) {
+		created, err := s.createRecordBreak(r.Context(), in, middlewareUserID(r))
+		if err != nil {
+			return nil, err
+		}
+		s.audit(r.Context(), "record_break.create", "record_break", created.ID, nil, created)
+		return created, nil
+	})
+}
+
+func (s *server) approveRecordBreakHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	id, err := pathID(r, "id")
+	if err != nil {
+		return nil, err
+	}
+	return s.approveRecordBreak(r.Context(), id, middlewareUserID(r))
+}
+
+// ---------- 大屏控制与运维 ----------
+
+func (s *server) displayCommandHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	var in displayCommandInput
+	if err := decodeJSON(r, &in); err != nil {
+		return nil, err
+	}
+	if in.Action == "" {
+		return nil, badRequest("action 必填", nil)
+	}
+	if s.display != nil {
+		if err := s.display.SendDisplayCommand(in.Action, in.Payload); err != nil {
+			return nil, internal(err)
+		}
+	}
+	s.audit(r.Context(), "display.command", "display", 0, nil, in)
+	return nil, nil
+}
+
+func (s *server) listAuditLogsHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	page, size := pageQuery(r)
+	entityType := strings.TrimSpace(r.URL.Query().Get("entityType"))
+	userID, _ := int64Query(r, "userId")
+	return s.listAuditLogs(r.Context(), page, size, entityType, userID)
+}
+
+func (s *server) backupHandler(w http.ResponseWriter, r *http.Request) (any, error) {
+	return s.backup(r.Context())
+}