feat: add tenant admin configuration and governance endpoints

Tiku.Api/Controllers/TenantAdminDirectController.cs

@@ -5,6 +5,7 @@ using Tiku.Application.Catalog;
 using Tiku.Application.Content;
 using Tiku.Application.Security;
 using Tiku.Application.TenantAdmin;
+using Tiku.Domain.Tenancy;
 
 namespace Tiku.Api.Controllers;
 
@@ -147,6 +148,176 @@ public sealed class TenantAdminDirectController(
         return Ok(await tenantAdminService.UpsertStudentFollowupAsync(ResolveActor(), request.ToCommand(), cancellationToken));
     }
 
+    [HttpGet("members")]
+    [EndpointSummary("查询租户成员")]
+    [ProducesResponseType<CatalogList<TenantAdminMemberItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<CatalogList<TenantAdminMemberItem>>> GetMembers(
+        [FromQuery] TenantAdminMemberQueryDto query,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.GetMembersAsync(ResolveActor(), query.ToFilter(), cancellationToken));
+    }
+
+    [HttpPut("members")]
+    [EndpointSummary("新增或更新租户成员")]
+    [ProducesResponseType<ContentManagementResult<TenantAdminMemberItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantAdminMemberItem>>> UpsertMember(
+        UpsertTenantAdminMemberDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.UpsertMemberAsync(ResolveActor(), request.ToCommand(), cancellationToken));
+    }
+
+    [HttpPost("members/disable")]
+    [EndpointSummary("停用租户成员并撤销会话")]
+    [ProducesResponseType<ContentManagementResult<TenantAdminMemberItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantAdminMemberItem>>> DisableMember(
+        DisableTenantAdminMemberDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.DisableMemberAsync(ResolveActor(), request.MembershipId, cancellationToken));
+    }
+
+    [HttpGet("audit-logs")]
+    [EndpointSummary("查询租户审计日志")]
+    [ProducesResponseType<CatalogList<TenantAdminAuditLogItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<CatalogList<TenantAdminAuditLogItem>>> GetAuditLogs(
+        [FromQuery] TenantAdminAuditLogQueryDto query,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.GetAuditLogsAsync(ResolveActor(), query.ToFilter(), cancellationToken));
+    }
+
+    [HttpGet("permissions")]
+    [EndpointSummary("查询租户后台权限矩阵")]
+    [ProducesResponseType<TenantAdminPermissionMatrix>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<TenantAdminPermissionMatrix>> GetPermissions(CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.GetPermissionMatrixAsync(ResolveActor(), cancellationToken));
+    }
+
+    [HttpGet("role-templates")]
+    [EndpointSummary("查询租户角色模板")]
+    [ProducesResponseType<CatalogList<TenantAdminRoleTemplateItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<CatalogList<TenantAdminRoleTemplateItem>>> GetRoleTemplates(
+        [FromQuery] TenantAdminRoleTemplateQueryDto query,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.GetRoleTemplatesAsync(ResolveActor(), query.ToFilter(), cancellationToken));
+    }
+
+    [HttpPut("role-templates")]
+    [EndpointSummary("新增或更新租户角色模板")]
+    [ProducesResponseType<ContentManagementResult<TenantAdminRoleTemplateItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantAdminRoleTemplateItem>>> UpsertRoleTemplate(
+        UpsertTenantAdminRoleTemplateDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.UpsertRoleTemplateAsync(ResolveActor(), request.ToCommand(), cancellationToken));
+    }
+
+    [HttpPost("role-templates/disable")]
+    [EndpointSummary("停用租户角色模板")]
+    [ProducesResponseType<ContentManagementResult<TenantAdminRoleTemplateItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantAdminRoleTemplateItem>>> DisableRoleTemplate(
+        DisableTenantAdminRoleTemplateDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.DisableRoleTemplateAsync(ResolveActor(), request.RoleTemplateId, cancellationToken));
+    }
+
+    [HttpPut("branding")]
+    [EndpointSummary("更新租户品牌信息")]
+    [ProducesResponseType<ContentManagementResult<TenantBrandingItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantBrandingItem>>> UpsertBranding(
+        UpsertTenantBrandingDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.UpsertBrandingAsync(ResolveActor(), request.ToCommand(), cancellationToken));
+    }
+
+    [HttpPut("settings")]
+    [EndpointSummary("更新租户公开设置与功能开关")]
+    [ProducesResponseType<ContentManagementResult<TenantSettingsItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantSettingsItem>>> UpsertSettings(
+        UpsertTenantSettingsDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.UpsertSettingsAsync(ResolveActor(), request.ToCommand(), cancellationToken));
+    }
+
+    [HttpGet("theme-templates")]
+    [EndpointSummary("查询可用租户主题模板")]
+    [ProducesResponseType<CatalogList<TenantThemeTemplateItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<CatalogList<TenantThemeTemplateItem>>> GetThemeTemplates(CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.GetThemeTemplatesAsync(ResolveActor(), cancellationToken));
+    }
+
+    [HttpGet("theme")]
+    [EndpointSummary("查询租户当前主题与草稿")]
+    [ProducesResponseType<ContentManagementResult<TenantThemeItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantThemeItem>>> GetTheme(CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.GetThemeAsync(ResolveActor(), cancellationToken));
+    }
+
+    [HttpPost("theme/preview")]
+    [EndpointSummary("生成租户主题草稿")]
+    [ProducesResponseType<ContentManagementResult<TenantThemeItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantThemeItem>>> PreviewTheme(
+        PreviewTenantThemeDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.PreviewThemeAsync(ResolveActor(), request.ToCommand(), cancellationToken));
+    }
+
+    [HttpPost("theme/publish")]
+    [EndpointSummary("发布租户主题")]
+    [ProducesResponseType<ContentManagementResult<TenantThemeItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantThemeItem>>> PublishTheme(
+        PublishTenantThemeDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.PublishThemeAsync(ResolveActor(), request.ToCommand(), cancellationToken));
+    }
+
+    [HttpGet("domains")]
+    [EndpointSummary("查询租户域名")]
+    [ProducesResponseType<CatalogList<TenantDomainItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<CatalogList<TenantDomainItem>>> GetDomains(CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.GetDomainsAsync(ResolveActor(), cancellationToken));
+    }
+
+    [HttpPost("domains")]
+    [EndpointSummary("添加租户域名")]
+    [ProducesResponseType<ContentManagementResult<TenantDomainItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantDomainItem>>> CreateDomain(
+        CreateTenantDomainDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.CreateDomainAsync(ResolveActor(), request.ToCommand(), cancellationToken));
+    }
+
+    [HttpGet("auth-providers")]
+    [EndpointSummary("查询租户登录 Provider 公开配置")]
+    [ProducesResponseType<CatalogList<TenantAuthProviderItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<CatalogList<TenantAuthProviderItem>>> GetAuthProviders(CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.GetAuthProvidersAsync(ResolveActor(), cancellationToken));
+    }
+
+    [HttpPut("auth-providers")]
+    [EndpointSummary("新增或更新租户登录 Provider")]
+    [ProducesResponseType<ContentManagementResult<TenantAuthProviderItem>>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<ContentManagementResult<TenantAuthProviderItem>>> UpsertAuthProvider(
+        UpsertTenantAuthProviderDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await tenantAdminService.UpsertAuthProviderAsync(ResolveActor(), request.ToCommand(), cancellationToken));
+    }
+
     private TenantAdminActor ResolveActor()
     {
         if (currentTenant.TenantId is null || currentUser.UserId is null)
@@ -154,6 +325,12 @@ public sealed class TenantAdminDirectController(
             throw new TenantAdminDirectException("Tenant admin actor was not resolved.", "tenant_admin_access_denied");
         }
 
-        return new TenantAdminActor(currentTenant.TenantId.Value, currentUser.UserId.Value);
+        var role = Enum.TryParse<TenantRole>(
+            currentTenant.Role?.Replace("_", string.Empty, StringComparison.Ordinal),
+            ignoreCase: true,
+            out var parsedRole)
+            ? parsedRole
+            : TenantRole.TenantAdmin;
+        return new TenantAdminActor(currentTenant.TenantId.Value, currentUser.UserId.Value, role);
     }
 }