feat: 优化发布清单和安装结构自动识别

app/api/routes/admin_app_channel.py

@@ -1,6 +1,6 @@
 from fastapi import APIRouter, Depends, HTTPException
 
-from app.core.security import admin_auth
+from app.core.security import require_permission
 from app.repositories import app_channel_repository
 from app.schemas.app_channel import AppCreateRequest, ChannelSaveRequest
 from app.services.common_service import validate_channel_code
@@ -10,12 +10,12 @@ router = APIRouter(tags=["admin-app-channel"])
 
 
 @router.get("/admin/app/list")
-def admin_get_app_list(auth=Depends(admin_auth)):
+def admin_get_app_list(auth=Depends(require_permission("app:view"))):
     return {"list": app_channel_repository.list_apps()}
 
 
 @router.post("/admin/app/add")
-def admin_add_app(body: AppCreateRequest, auth=Depends(admin_auth)):
+def admin_add_app(body: AppCreateRequest, auth=Depends(require_permission("app:manage"))):
     aid = body.app_id
     aname = body.app_name
     try:
@@ -26,12 +26,12 @@ def admin_add_app(body: AppCreateRequest, auth=Depends(admin_auth)):
 
 
 @router.get("/admin/channel/list")
-def admin_channel_list(app_id: str, include_disabled: bool = True, auth=Depends(admin_auth)):
+def admin_channel_list(app_id: str, include_disabled: bool = True, auth=Depends(require_permission("app:view"))):
     return {"list": app_channel_repository.list_channels(app_id, include_disabled)}
 
 
 @router.post("/admin/channel/save")
-def admin_channel_save(body: ChannelSaveRequest, auth=Depends(admin_auth)):
+def admin_channel_save(body: ChannelSaveRequest, auth=Depends(require_permission("channel:manage"))):
     app_id = body.app_id.strip()
     code = body.channel_code.strip()
     name = body.display_name.strip()