feat(ECR-026): OpsCMS ScheduledPublication 只读并 Closed

定时发布目录（ops_scheduled_publications），并加固 catalog 生成器。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/admin-h5/src/api/client.ts

@@ -437,6 +437,10 @@ export const adminApi = {
       system: boolean
       updated_at: string
     }>('GET', `/cms/feed-slots/${id}`),
+  publications: () =>
+    request<{ items: Array<Record<string, unknown>> }>('GET', '/cms/publications'),
+  publication: (id: string) =>
+    request<Record<string, unknown>>('GET', `/cms/publications/${id}`),
   orders: () =>
     request<{
       items: Array<{

apps/api/internal/handler/admin.go

@@ -54,6 +54,7 @@ func (h *AdminHandler) Register(api *gin.RouterGroup) {
 	h.registerAIConfig(authed)
 	h.registerCrisis(authed)
 	h.registerCMS(authed)
+	h.registerCMSPublications(authed)
 }
 
 func (h *AdminHandler) Login(c *gin.Context) {

apps/api/internal/handler/admin_scheduled_publication.go

@@ -0,0 +1,46 @@
+package handler
+
+import (
+	"errors"
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+	"github.com/google/uuid"
+
+	"github.com/yuxingu/digital-psychology/apps/api/internal/middleware"
+	"github.com/yuxingu/digital-psychology/apps/api/internal/service/admin"
+	"github.com/yuxingu/digital-psychology/apps/api/pkg/response"
+)
+
+func (h *AdminHandler) registerCMSPublications(authed *gin.RouterGroup) {
+	g := authed.Group("/cms")
+	g.GET("/publications", middleware.RequireAdminPermission(h.Svc, admin.PermCMSRead), h.ListScheduledPublications)
+	g.GET("/publications/:id", middleware.RequireAdminPermission(h.Svc, admin.PermCMSRead), h.GetScheduledPublication)
+}
+
+func (h *AdminHandler) ListScheduledPublications(c *gin.Context) {
+	items, err := h.Svc.ListScheduledPublications(c.Request.Context())
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50050, "list scheduled-publication failed")
+		return
+	}
+	response.OK(c, gin.H{"items": items})
+}
+
+func (h *AdminHandler) GetScheduledPublication(c *gin.Context) {
+	id, err := uuid.Parse(c.Param("id"))
+	if err != nil {
+		response.Fail(c, http.StatusBadRequest, 40002, "invalid id")
+		return
+	}
+	row, err := h.Svc.GetScheduledPublication(c.Request.Context(), id)
+	if errors.Is(err, admin.ErrScheduledPublicationNotFound) {
+		response.Fail(c, http.StatusNotFound, 40420, "scheduled-publication not found")
+		return
+	}
+	if err != nil {
+		response.Fail(c, http.StatusInternalServerError, 50051, "get scheduled-publication failed")
+		return
+	}
+	response.OK(c, row)
+}

apps/api/internal/integration/scheduled_publication_test.go

@@ -0,0 +1,88 @@
+package integration_test
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"testing"
+	"time"
+
+	"github.com/google/uuid"
+	"golang.org/x/crypto/bcrypt"
+)
+
+func TestOpsCMSPublications(t *testing.T) {
+	r, pool := setupAPIPool(t)
+	ctx := context.Background()
+	tok := adminLogin(t, r, "admin", "change-me")
+
+	_, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/cms/publications", nil, "")
+	if code != http.StatusUnauthorized {
+		t.Fatalf("expected 401, got %d", code)
+	}
+
+	limitedRoleID := uuid.New()
+	_, err := pool.Exec(ctx, `INSERT INTO admin_roles(id, name, system) VALUES ($1,$2,false)`,
+		limitedRoleID, "lim_"+limitedRoleID.String()[:8])
+	if err != nil {
+		t.Fatal(err)
+	}
+	_, err = pool.Exec(ctx, `INSERT INTO admin_role_permissions(role_id, code) VALUES ($1,'admin.users.read')`, limitedRoleID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	hash, err := bcrypt.GenerateFromPassword([]byte("limited-pass"), bcrypt.DefaultCost)
+	if err != nil {
+		t.Fatal(err)
+	}
+	limUser := fmt.Sprintf("lim_%d", time.Now().UnixNano())
+	_, err = pool.Exec(ctx, `INSERT INTO admin_accounts(username, password_hash, role_id) VALUES ($1,$2,$3)`,
+		limUser, string(hash), limitedRoleID)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() {
+		_, _ = pool.Exec(ctx, `DELETE FROM admin_accounts WHERE username=$1`, limUser)
+		_, _ = pool.Exec(ctx, `DELETE FROM admin_roles WHERE id=$1`, limitedRoleID)
+	})
+	limTok := adminLogin(t, r, limUser, "limited-pass")
+	_, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/cms/publications", nil, limTok)
+	if code != http.StatusForbidden {
+		t.Fatalf("expected 403, got %d", code)
+	}
+
+	start := time.Now()
+	env, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/cms/publications", nil, tok)
+	if code != 200 || env.Code != 0 {
+		t.Fatalf("list http=%d msg=%s", code, env.Message)
+	}
+	if time.Since(start) > 500*time.Millisecond {
+		t.Fatalf("list too slow %v", time.Since(start))
+	}
+	var list struct {
+		Items []struct {
+			ID   string `json:"id"`
+			Code string `json:"code"`
+		} `json:"items"`
+	}
+	_ = json.Unmarshal(env.Data, &list)
+	var id string
+	for _, it := range list.Items {
+		if it.Code == "home_banner_week" {
+			id = it.ID
+			break
+		}
+	}
+	if id == "" {
+		t.Fatalf("missing home_banner_week: %#v", list.Items)
+	}
+	env, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/cms/publications/"+id, nil, tok)
+	if code != 200 {
+		t.Fatalf("get %d", code)
+	}
+	_, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/cms/publications/"+fakeUUID(), nil, tok)
+	if code != http.StatusNotFound {
+		t.Fatalf("expected 404, got %d", code)
+	}
+}

apps/api/internal/repository/scheduled_publication_repo.go

@@ -0,0 +1,59 @@
+package repository
+
+import (
+	"context"
+	"errors"
+	"time"
+
+	"github.com/google/uuid"
+	"github.com/jackc/pgx/v5"
+)
+
+// ScheduledPublicationRow is ScheduledPublication catalog row.
+type ScheduledPublicationRow struct {
+	ID uuid.UUID `json:"id"`
+	Code string `json:"code"`
+	Title string `json:"title"`
+	TargetKind string `json:"target_kind"`
+	TargetCode string `json:"target_code"`
+	Active bool `json:"active"`
+	System bool `json:"system"`
+	UpdatedAt time.Time `json:"updated_at"`
+}
+
+// ListScheduledPublications returns ScheduledPublication catalog.
+func (r *AdminRepo) ListScheduledPublications(ctx context.Context) ([]ScheduledPublicationRow, error) {
+	rows, err := r.Pool.Query(ctx, `
+		SELECT id, code, title, target_kind, target_code, active, system, updated_at
+		FROM ops_scheduled_publications
+		ORDER BY active DESC, code ASC`)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var out []ScheduledPublicationRow
+	for rows.Next() {
+		var row ScheduledPublicationRow
+		if err := rows.Scan(&row.ID, &row.Code, &row.Title, &row.TargetKind, &row.TargetCode, &row.Active, &row.System, &row.UpdatedAt); err != nil {
+			return nil, err
+		}
+		out = append(out, row)
+	}
+	return out, rows.Err()
+}
+
+// GetScheduledPublication loads one by id.
+func (r *AdminRepo) GetScheduledPublication(ctx context.Context, id uuid.UUID) (*ScheduledPublicationRow, error) {
+	var row ScheduledPublicationRow
+	err := r.Pool.QueryRow(ctx, `
+		SELECT id, code, title, target_kind, target_code, active, system, updated_at
+		FROM ops_scheduled_publications WHERE id=$1`, id,
+	).Scan(&row.ID, &row.Code, &row.Title, &row.TargetKind, &row.TargetCode, &row.Active, &row.System, &row.UpdatedAt)
+	if errors.Is(err, pgx.ErrNoRows) {
+		return nil, err
+	}
+	if err != nil {
+		return nil, err
+	}
+	return &row, nil
+}

apps/api/internal/service/admin/scheduled_publication.go

@@ -0,0 +1,34 @@
+package admin
+
+import (
+	"context"
+	"errors"
+
+	"github.com/google/uuid"
+	"github.com/jackc/pgx/v5"
+
+	"github.com/yuxingu/digital-psychology/apps/api/internal/repository"
+)
+
+var ErrScheduledPublicationNotFound = errString("scheduled publication not found")
+
+// ListScheduledPublications returns catalog.
+func (s *Service) ListScheduledPublications(ctx context.Context) ([]repository.ScheduledPublicationRow, error) {
+	items, err := s.Repo.ListScheduledPublications(ctx)
+	if err != nil {
+		return nil, err
+	}
+	if items == nil {
+		items = []repository.ScheduledPublicationRow{}
+	}
+	return items, nil
+}
+
+// GetScheduledPublication loads one.
+func (s *Service) GetScheduledPublication(ctx context.Context, id uuid.UUID) (*repository.ScheduledPublicationRow, error) {
+	row, err := s.Repo.GetScheduledPublication(ctx, id)
+	if errors.Is(err, pgx.ErrNoRows) {
+		return nil, ErrScheduledPublicationNotFound
+	}
+	return row, err
+}

apps/api/migrations/000027_ops_scheduled_publications.down.sql

@@ -0,0 +1 @@
+DROP TABLE IF EXISTS ops_scheduled_publications;

apps/api/migrations/000027_ops_scheduled_publications.up.sql

@@ -0,0 +1,19 @@
+-- ECR-026 ScheduledPublication (read catalog)
+
+CREATE TABLE IF NOT EXISTS ops_scheduled_publications (
+  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  code varchar(64) NOT NULL UNIQUE,
+  title varchar(128) NOT NULL,
+  target_kind varchar(32) NOT NULL CHECK (target_kind IN ('banner','feed_slot')),
+  target_code varchar(64) NOT NULL,
+  active boolean NOT NULL DEFAULT true,
+  system boolean NOT NULL DEFAULT false,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_ops_scheduled_publications_active ON ops_scheduled_publications(active);
+
+INSERT INTO ops_scheduled_publications(code, title, target_kind, target_code, active, system)
+VALUES ('home_banner_week', '首页横幅周排期占位', 'banner', 'home_promo', true, true)
+ON CONFLICT (code) DO NOTHING;