feat: 实现企业设备授权功能并归档 OpenSpec 变更

- 新增企业设备授权模块（Model、DTO、Service、Handler、Store）
- 实现设备授权的创建、查询、更新、删除等完整业务逻辑
- 添加企业卡授权与设备授权的关联关系
- 新增 2 个数据库迁移脚本
- 同步 OpenSpec delta specs 到 main specs
- 归档 add-enterprise-device-authorization 变更
- 更新 API 文档和路由配置
- 新增完整的集成测试和单元测试覆盖

internal/handler/admin/enterprise_device.go

@@ -0,0 +1,80 @@
+package admin
+
+import (
+	"strconv"
+
+	"github.com/gofiber/fiber/v2"
+
+	"github.com/break/junhong_cmp_fiber/internal/model/dto"
+	enterpriseDeviceService "github.com/break/junhong_cmp_fiber/internal/service/enterprise_device"
+	"github.com/break/junhong_cmp_fiber/pkg/errors"
+	"github.com/break/junhong_cmp_fiber/pkg/response"
+)
+
+type EnterpriseDeviceHandler struct {
+	service *enterpriseDeviceService.Service
+}
+
+func NewEnterpriseDeviceHandler(service *enterpriseDeviceService.Service) *EnterpriseDeviceHandler {
+	return &EnterpriseDeviceHandler{service: service}
+}
+
+func (h *EnterpriseDeviceHandler) AllocateDevices(c *fiber.Ctx) error {
+	enterpriseIDStr := c.Params("id")
+	enterpriseID, err := strconv.ParseUint(enterpriseIDStr, 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "企业ID格式错误")
+	}
+
+	var req dto.AllocateDevicesReq
+	if err := c.BodyParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	result, err := h.service.AllocateDevices(c.UserContext(), uint(enterpriseID), &req)
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, result)
+}
+
+func (h *EnterpriseDeviceHandler) RecallDevices(c *fiber.Ctx) error {
+	enterpriseIDStr := c.Params("id")
+	enterpriseID, err := strconv.ParseUint(enterpriseIDStr, 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "企业ID格式错误")
+	}
+
+	var req dto.RecallDevicesReq
+	if err := c.BodyParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	result, err := h.service.RecallDevices(c.UserContext(), uint(enterpriseID), &req)
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, result)
+}
+
+func (h *EnterpriseDeviceHandler) ListDevices(c *fiber.Ctx) error {
+	enterpriseIDStr := c.Params("id")
+	enterpriseID, err := strconv.ParseUint(enterpriseIDStr, 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "企业ID格式错误")
+	}
+
+	var req dto.EnterpriseDeviceListReq
+	if err := c.QueryParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	result, err := h.service.ListDevices(c.UserContext(), uint(enterpriseID), &req)
+	if err != nil {
+		return err
+	}
+
+	return response.SuccessWithPagination(c, result.List, result.Total, req.Page, req.PageSize)
+}

internal/handler/admin/role.go

@@ -3,6 +3,7 @@ package admin
 import (
 	"strconv"
 
+	"github.com/go-playground/validator/v10"
 	"github.com/gofiber/fiber/v2"
 
 	"github.com/break/junhong_cmp_fiber/pkg/errors"
@@ -14,12 +15,16 @@ import (
 
 // RoleHandler 角色 Handler
 type RoleHandler struct {
-	service *roleService.Service
+	service   *roleService.Service
+	validator *validator.Validate
 }
 
 // NewRoleHandler 创建角色 Handler
-func NewRoleHandler(service *roleService.Service) *RoleHandler {
-	return &RoleHandler{service: service}
+func NewRoleHandler(service *roleService.Service, validator *validator.Validate) *RoleHandler {
+	return &RoleHandler{
+		service:   service,
+		validator: validator,
+	}
 }
 
 // Create 创建角色
@@ -30,6 +35,10 @@ func (h *RoleHandler) Create(c *fiber.Ctx) error {
 		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
 	}
 
+	if err := h.validator.Struct(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "参数验证失败: "+err.Error())
+	}
+
 	role, err := h.service.Create(c.UserContext(), &req)
 	if err != nil {
 		return err
@@ -67,6 +76,10 @@ func (h *RoleHandler) Update(c *fiber.Ctx) error {
 		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
 	}
 
+	if err := h.validator.Struct(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "参数验证失败: "+err.Error())
+	}
+
 	role, err := h.service.Update(c.UserContext(), uint(id), &req)
 	if err != nil {
 		return err
@@ -119,6 +132,10 @@ func (h *RoleHandler) AssignPermissions(c *fiber.Ctx) error {
 		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
 	}
 
+	if err := h.validator.Struct(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "参数验证失败: "+err.Error())
+	}
+
 	rps, err := h.service.AssignPermissions(c.UserContext(), uint(id), req.PermIDs)
 	if err != nil {
 		return err
@@ -176,6 +193,10 @@ func (h *RoleHandler) UpdateStatus(c *fiber.Ctx) error {
 		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
 	}
 
+	if err := h.validator.Struct(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "参数验证失败: "+err.Error())
+	}
+
 	if err := h.service.UpdateStatus(c.UserContext(), uint(id), req.Status); err != nil {
 		return err
 	}

internal/handler/h5/enterprise_device.go

@@ -0,0 +1,107 @@
+package h5
+
+import (
+	"strconv"
+
+	"github.com/gofiber/fiber/v2"
+
+	"github.com/break/junhong_cmp_fiber/internal/model/dto"
+	enterpriseDeviceService "github.com/break/junhong_cmp_fiber/internal/service/enterprise_device"
+	"github.com/break/junhong_cmp_fiber/pkg/errors"
+	"github.com/break/junhong_cmp_fiber/pkg/response"
+)
+
+type EnterpriseDeviceHandler struct {
+	service *enterpriseDeviceService.Service
+}
+
+func NewEnterpriseDeviceHandler(service *enterpriseDeviceService.Service) *EnterpriseDeviceHandler {
+	return &EnterpriseDeviceHandler{service: service}
+}
+
+func (h *EnterpriseDeviceHandler) ListDevices(c *fiber.Ctx) error {
+	var req dto.H5EnterpriseDeviceListReq
+	if err := c.QueryParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	serviceReq := &dto.EnterpriseDeviceListReq{
+		Page:     req.Page,
+		PageSize: req.PageSize,
+		DeviceNo: req.DeviceNo,
+	}
+
+	result, err := h.service.ListDevicesForEnterprise(c.UserContext(), serviceReq)
+	if err != nil {
+		return err
+	}
+
+	return response.SuccessWithPagination(c, result.List, result.Total, req.Page, req.PageSize)
+}
+
+func (h *EnterpriseDeviceHandler) GetDeviceDetail(c *fiber.Ctx) error {
+	deviceIDStr := c.Params("device_id")
+	deviceID, err := strconv.ParseUint(deviceIDStr, 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "设备ID格式错误")
+	}
+
+	result, err := h.service.GetDeviceDetail(c.UserContext(), uint(deviceID))
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, result)
+}
+
+func (h *EnterpriseDeviceHandler) SuspendCard(c *fiber.Ctx) error {
+	deviceIDStr := c.Params("device_id")
+	deviceID, err := strconv.ParseUint(deviceIDStr, 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "设备ID格式错误")
+	}
+
+	cardIDStr := c.Params("card_id")
+	cardID, err := strconv.ParseUint(cardIDStr, 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "卡ID格式错误")
+	}
+
+	var req dto.DeviceCardOperationReq
+	if err := c.BodyParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	result, err := h.service.SuspendCard(c.UserContext(), uint(deviceID), uint(cardID), &req)
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, result)
+}
+
+func (h *EnterpriseDeviceHandler) ResumeCard(c *fiber.Ctx) error {
+	deviceIDStr := c.Params("device_id")
+	deviceID, err := strconv.ParseUint(deviceIDStr, 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "设备ID格式错误")
+	}
+
+	cardIDStr := c.Params("card_id")
+	cardID, err := strconv.ParseUint(cardIDStr, 10, 64)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam, "卡ID格式错误")
+	}
+
+	var req dto.DeviceCardOperationReq
+	if err := c.BodyParser(&req); err != nil {
+		return errors.New(errors.CodeInvalidParam, "请求参数解析失败")
+	}
+
+	result, err := h.service.ResumeCard(c.UserContext(), uint(deviceID), uint(cardID), &req)
+	if err != nil {
+		return err
+	}
+
+	return response.Success(c, result)
+}