feat(ECR-042): OpsCMS FeedSlot 薄写面

Admin POST/PUT 复用 admin.cms.write；C 端 GET /home/feed-slots；首页无 active 槽隐藏推荐区、失败回退展示；无新 migration。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/handler/admin_cms.go

@@ -20,6 +20,8 @@ func (h *AdminHandler) registerCMS(authed *gin.RouterGroup) {
 	g.PUT("/banners/:id", middleware.RequireAdminPermission(h.Svc, admin.PermCMSWrite), h.UpdateBanner)
 	g.GET("/feed-slots", middleware.RequireAdminPermission(h.Svc, admin.PermCMSRead), h.ListFeedSlots)
 	g.GET("/feed-slots/:id", middleware.RequireAdminPermission(h.Svc, admin.PermCMSRead), h.GetFeedSlot)
+	g.POST("/feed-slots", middleware.RequireAdminPermission(h.Svc, admin.PermCMSWrite), h.CreateFeedSlot)
+	g.PUT("/feed-slots/:id", middleware.RequireAdminPermission(h.Svc, admin.PermCMSWrite), h.UpdateFeedSlot)
 }
 
 func (h *AdminHandler) ListBanners(c *gin.Context) {
@@ -138,3 +140,66 @@ func (h *AdminHandler) GetFeedSlot(c *gin.Context) {
 	}
 	response.OK(c, row)
 }
+
+func (h *AdminHandler) CreateFeedSlot(c *gin.Context) {
+	adminID, ok := middleware.AdminIDFromContext(c)
+	if !ok {
+		response.Fail(c, http.StatusUnauthorized, 40101, "admin auth required")
+		return
+	}
+	var body admin.FeedSlotWriteBody
+	if err := c.ShouldBindJSON(&body); err != nil {
+		response.Fail(c, http.StatusBadRequest, 40052, "invalid body")
+		return
+	}
+	row, err := h.Svc.CreateFeedSlot(c.Request.Context(), adminID, body)
+	if errors.Is(err, admin.ErrInvalidFeedSlot) {
+		response.Fail(c, http.StatusBadRequest, 40053, "invalid feed slot")
+		return
+	}
+	if errors.Is(err, admin.ErrFeedSlotConflict) {
+		response.Fail(c, http.StatusConflict, 40911, "feed slot code conflict")
+		return
+	}
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50047, "create feed slot failed")
+		return
+	}
+	response.OK(c, row)
+}
+
+func (h *AdminHandler) UpdateFeedSlot(c *gin.Context) {
+	adminID, ok := middleware.AdminIDFromContext(c)
+	if !ok {
+		response.Fail(c, http.StatusUnauthorized, 40101, "admin auth required")
+		return
+	}
+	id, err := uuid.Parse(c.Param("id"))
+	if err != nil {
+		response.Fail(c, http.StatusBadRequest, 40002, "invalid id")
+		return
+	}
+	var body admin.FeedSlotWriteBody
+	if err := c.ShouldBindJSON(&body); err != nil {
+		response.Fail(c, http.StatusBadRequest, 40052, "invalid body")
+		return
+	}
+	row, err := h.Svc.UpdateFeedSlot(c.Request.Context(), adminID, id, body)
+	if errors.Is(err, admin.ErrFeedSlotNotFound) {
+		response.Fail(c, http.StatusNotFound, 40411, "feed slot not found")
+		return
+	}
+	if errors.Is(err, admin.ErrInvalidFeedSlot) {
+		response.Fail(c, http.StatusBadRequest, 40053, "invalid feed slot")
+		return
+	}
+	if errors.Is(err, admin.ErrFeedSlotConflict) {
+		response.Fail(c, http.StatusConflict, 40911, "feed slot code conflict")
+		return
+	}
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50048, "update feed slot failed")
+		return
+	}
+	response.OK(c, row)
+}

apps/api/internal/handler/home.go

@@ -21,6 +21,7 @@ func (h *HomeHandler) Register(api *gin.RouterGroup) {
 	g := api.Group("/home")
 	g.GET("/tools", h.Tools)
 	g.GET("/banners", h.Banners)
+	g.GET("/feed-slots", h.FeedSlots)
 	g.GET("/daily-tips", h.DailyTips)
 }
 
@@ -46,6 +47,16 @@ func (h *HomeHandler) Banners(c *gin.Context) {
 	response.OK(c, gin.H{"items": items})
 }
 
+func (h *HomeHandler) FeedSlots(c *gin.Context) {
+	placement := c.DefaultQuery("placement", "home")
+	items, err := h.Svc.ListPublicFeedSlots(c.Request.Context(), placement)
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50049, "home feed slots failed")
+		return
+	}
+	response.OK(c, gin.H{"items": items})
+}
+
 func (h *HomeHandler) DailyTips(c *gin.Context) {
 	uid, _ := middleware.UserIDFromContext(c)
 	tips, err := h.Svc.DailyTips(c.Request.Context(), uid)