feat: 优化发布清单和安装结构自动识别

app/api/routes/admin_device.py

@@ -1,6 +1,6 @@
 from fastapi import APIRouter, Depends, HTTPException
 
-from app.core.security import admin_auth
+from app.core.security import require_permission
 from app.repositories import device_repository
 from app.schemas.device import DeviceSetDisabledRequest
 
@@ -9,12 +9,12 @@ router = APIRouter(tags=["admin-device"])
 
 
 @router.get("/admin/device/list")
-def admin_device_list(app_id: str = "", auth=Depends(admin_auth)):
+def admin_device_list(app_id: str = "", auth=Depends(require_permission("device:view"))):
     return {"list": device_repository.list_devices(app_id)}
 
 
 @router.post("/admin/device/set-disabled")
-def admin_device_set_disabled(body: DeviceSetDisabledRequest, auth=Depends(admin_auth)):
+def admin_device_set_disabled(body: DeviceSetDisabledRequest, auth=Depends(require_permission("device:manage"))):
     device_id = body.device_id.strip()
     disabled = bool(body.disabled)
     reason = body.reason.strip()