feat: 优化发布清单和安装结构自动识别

app/api/routes/admin_policy.py

@@ -3,7 +3,7 @@ from datetime import datetime
 
 from fastapi import APIRouter, Depends, HTTPException
 
-from app.core.security import admin_auth
+from app.core.security import require_permission
 from app.repositories import policy_repository
 from app.schemas.policy import PolicySaveRequest
 from app.services.common_service import policy_row_to_dict, validate_channel_code
@@ -13,7 +13,7 @@ router = APIRouter(tags=["admin-policy"])
 
 
 @router.get("/admin/policy")
-def admin_get_policy(app_id: str, channel: str, auth=Depends(admin_auth)):
+def admin_get_policy(app_id: str, channel: str, auth=Depends(require_permission("policy:view"))):
     row = policy_repository.get_policy(app_id, channel)
     result = policy_row_to_dict(row)
     result.update({"app_id": app_id, "channel": channel, "saved": bool(row)})
@@ -21,7 +21,7 @@ def admin_get_policy(app_id: str, channel: str, auth=Depends(admin_auth)):
 
 
 @router.post("/admin/policy/save")
-def admin_save_policy(body: PolicySaveRequest, auth=Depends(admin_auth)):
+def admin_save_policy(body: PolicySaveRequest, auth=Depends(require_permission("policy:manage"))):
     app_id = body.app_id.strip()
     channel = body.channel.strip()
     if not app_id or not validate_channel_code(channel):