feat(task1): restructure directories for turborepo monorepo

- Move backend/ to apps/server/ via git mv
- Move frontend/ to apps/admin/ via git mv
- Create packages/typescript-config/ with base, nestjs, and react-vite presets

apps/server/src/deposits/deposits.controller.ts

@@ -0,0 +1,55 @@
+import { Controller, Get, Post, Put, Delete, Body, Param, Query, UseGuards, Request } from '@nestjs/common';
+import { DepositsService } from './deposits.service';
+import { CreateDepositDto, RefundDepositDto } from './dto/deposit.dto';
+import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
+import { OperationLogsService } from '../operation-logs/operation-logs.service';
+import { extractRequestInfo } from '../common/request-utils';
+import { RequirePermission } from '../auth/decorators/permission.decorator';
+
+@UseGuards(JwtAuthGuard)
+@Controller('deposits')
+export class DepositsController {
+  constructor(private service: DepositsService, private logService: OperationLogsService) {}
+
+  @Get()
+  @RequirePermission('deposit:view')
+  findAll(@Query('studentId') studentId?: string, @Query('status') status?: string) {
+    return this.service.findAll({
+      studentId: studentId ? +studentId : undefined,
+      status: status || undefined,
+    });
+  }
+
+  @Get('stats')
+  @RequirePermission('deposit:view')
+  getStats() {
+    return this.service.getStats();
+  }
+
+  @Post()
+  @RequirePermission('deposit:create')
+  async create(@Body() dto: CreateDepositDto, @Request() req: any) {
+    const { ipAddress, userAgent } = extractRequestInfo(req);
+    const result = await this.service.create(dto, req.user?.id);
+    await this.logService.log({ userId: req.user?.id, username: req.user?.username, module: '押金', action: '收取押金', targetId: result.id, targetType: 'deposit', detail: `学生${dto.studentId} ¥${dto.amount}`, ipAddress, userAgent });
+    return result;
+  }
+
+  @Put(':id/refund')
+  @RequirePermission('deposit:edit')
+  async refund(@Param('id') id: string, @Body() dto: RefundDepositDto, @Request() req: any) {
+    const { ipAddress, userAgent } = extractRequestInfo(req);
+    const result = await this.service.refund(+id, dto, req.user?.id);
+    await this.logService.log({ userId: req.user?.id, username: req.user?.username, module: '押金', action: '退还押金', targetId: +id, targetType: 'deposit', detail: `退还¥${result.refundAmount}, 扣除¥${result.deductionAmount}`, ipAddress, userAgent });
+    return result;
+  }
+
+  @Delete(':id')
+  @RequirePermission('deposit:delete')
+  async remove(@Param('id') id: string, @Request() req: any) {
+    const { ipAddress, userAgent } = extractRequestInfo(req);
+    const result = await this.service.remove(+id);
+    await this.logService.log({ userId: req.user?.id, username: req.user?.username, module: '押金', action: '删除押金记录', targetId: +id, targetType: 'deposit', ipAddress, userAgent });
+    return result;
+  }
+}