feat(ECR-042): OpsCMS FeedSlot 薄写面

Admin POST/PUT 复用 admin.cms.write；C 端 GET /home/feed-slots；首页无 active 槽隐藏推荐区、失败回退展示；无新 migration。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/internal/handler/admin_cms.go

@@ -20,6 +20,8 @@ func (h *AdminHandler) registerCMS(authed *gin.RouterGroup) {
 	g.PUT("/banners/:id", middleware.RequireAdminPermission(h.Svc, admin.PermCMSWrite), h.UpdateBanner)
 	g.GET("/feed-slots", middleware.RequireAdminPermission(h.Svc, admin.PermCMSRead), h.ListFeedSlots)
 	g.GET("/feed-slots/:id", middleware.RequireAdminPermission(h.Svc, admin.PermCMSRead), h.GetFeedSlot)
+	g.POST("/feed-slots", middleware.RequireAdminPermission(h.Svc, admin.PermCMSWrite), h.CreateFeedSlot)
+	g.PUT("/feed-slots/:id", middleware.RequireAdminPermission(h.Svc, admin.PermCMSWrite), h.UpdateFeedSlot)
 }
 
 func (h *AdminHandler) ListBanners(c *gin.Context) {
@@ -138,3 +140,66 @@ func (h *AdminHandler) GetFeedSlot(c *gin.Context) {
 	}
 	response.OK(c, row)
 }
+
+func (h *AdminHandler) CreateFeedSlot(c *gin.Context) {
+	adminID, ok := middleware.AdminIDFromContext(c)
+	if !ok {
+		response.Fail(c, http.StatusUnauthorized, 40101, "admin auth required")
+		return
+	}
+	var body admin.FeedSlotWriteBody
+	if err := c.ShouldBindJSON(&body); err != nil {
+		response.Fail(c, http.StatusBadRequest, 40052, "invalid body")
+		return
+	}
+	row, err := h.Svc.CreateFeedSlot(c.Request.Context(), adminID, body)
+	if errors.Is(err, admin.ErrInvalidFeedSlot) {
+		response.Fail(c, http.StatusBadRequest, 40053, "invalid feed slot")
+		return
+	}
+	if errors.Is(err, admin.ErrFeedSlotConflict) {
+		response.Fail(c, http.StatusConflict, 40911, "feed slot code conflict")
+		return
+	}
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50047, "create feed slot failed")
+		return
+	}
+	response.OK(c, row)
+}
+
+func (h *AdminHandler) UpdateFeedSlot(c *gin.Context) {
+	adminID, ok := middleware.AdminIDFromContext(c)
+	if !ok {
+		response.Fail(c, http.StatusUnauthorized, 40101, "admin auth required")
+		return
+	}
+	id, err := uuid.Parse(c.Param("id"))
+	if err != nil {
+		response.Fail(c, http.StatusBadRequest, 40002, "invalid id")
+		return
+	}
+	var body admin.FeedSlotWriteBody
+	if err := c.ShouldBindJSON(&body); err != nil {
+		response.Fail(c, http.StatusBadRequest, 40052, "invalid body")
+		return
+	}
+	row, err := h.Svc.UpdateFeedSlot(c.Request.Context(), adminID, id, body)
+	if errors.Is(err, admin.ErrFeedSlotNotFound) {
+		response.Fail(c, http.StatusNotFound, 40411, "feed slot not found")
+		return
+	}
+	if errors.Is(err, admin.ErrInvalidFeedSlot) {
+		response.Fail(c, http.StatusBadRequest, 40053, "invalid feed slot")
+		return
+	}
+	if errors.Is(err, admin.ErrFeedSlotConflict) {
+		response.Fail(c, http.StatusConflict, 40911, "feed slot code conflict")
+		return
+	}
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50048, "update feed slot failed")
+		return
+	}
+	response.OK(c, row)
+}