feat(M04-A): 完成定价快照与并发时段预占

backend/src/routes/pricing.ts

@@ -0,0 +1,117 @@
+import type { FastifyInstance, FastifyReply } from 'fastify';
+import { z } from 'zod';
+import type { AuthRepository } from '../auth/auth-repository.js';
+import { authenticateAccessToken } from '../auth/authenticate.js';
+import type { AccessProfile } from '../auth/rbac-repository.js';
+import { PricingError, type PricingRepository } from '../orders/pricing-repository.js';
+
+const requestSchema = z.object({
+  roomId: z.string().regex(/^[1-9]\d{0,19}$/),
+  startAt: z.coerce.date(),
+  endAt: z.coerce.date(),
+  pricingMode: z.enum(['HOURLY', 'OVERNIGHT', 'FULL_DAY']).default('HOURLY')
+}).refine((value) => value.endAt > value.startAt);
+
+export interface PricingRouteOptions {
+  repository: Pick<PricingRepository, 'quote' | 'reserve' | 'releaseExpired'>;
+  authRepository: Pick<AuthRepository, 'validateSession'>;
+  accessControl: { getAccessProfile(tenantId: string, userId: string): Promise<AccessProfile> };
+  jwtSecret: string;
+}
+
+export async function registerPricingRoutes(app: FastifyInstance, options: PricingRouteOptions) {
+  app.post('/app-api/pricing/quote', async (request, reply) => {
+    const auth = await authenticate(request.headers.authorization, options);
+    const body = requestSchema.safeParse(request.body);
+    if (!auth) return unauthorized(reply, request.traceId);
+    if (!body.success) return invalid(reply, request.traceId);
+    return handle(reply, request.traceId, async () => ({
+      code: 0,
+      data: await options.repository.quote({
+        tenantId: auth.tenantId,
+        ...body.data
+      }),
+      traceId: request.traceId
+    }));
+  });
+
+  app.post('/app-api/orders/reserve', async (request, reply) => {
+    const auth = await authenticate(request.headers.authorization, options);
+    const body = requestSchema.safeParse(request.body);
+    if (!auth) return unauthorized(reply, request.traceId);
+    if (!body.success) return invalid(reply, request.traceId);
+    return handle(reply, request.traceId, async () => reply.status(201).send({
+      code: 0,
+      data: await options.repository.reserve({
+        tenantId: auth.tenantId,
+        userId: auth.userId,
+        ...body.data
+      }),
+      traceId: request.traceId
+    }));
+  });
+
+  app.post('/admin-api/reservations/release-expired', async (request, reply) => {
+    const auth = await authenticate(request.headers.authorization, options);
+    if (!auth) return unauthorized(reply, request.traceId);
+    const access = await options.accessControl.getAccessProfile(auth.tenantId, auth.userId);
+    if (!access.capabilities.includes('tenant.manage')
+        && !access.roles.includes('PLATFORM_ADMIN')) {
+      return reply.status(403).send({
+        code: 'RESERVATION_RELEASE_FORBIDDEN',
+        message: 'Tenant management permission is required.',
+        traceId: request.traceId
+      });
+    }
+    return {
+      code: 0,
+      data: await options.repository.releaseExpired(auth.tenantId),
+      traceId: request.traceId
+    };
+  });
+}
+
+async function authenticate(
+  authorization: string | undefined,
+  options: PricingRouteOptions
+) {
+  const result = await authenticateAccessToken(
+    authorization, options.authRepository, options.jwtSecret
+  );
+  if (!result) return null;
+  return {
+    tenantId: result.session.tenantId,
+    userId: result.session.user.id
+  };
+}
+
+async function handle(reply: FastifyReply, traceId: string, work: () => Promise<unknown>) {
+  try {
+    return await work();
+  } catch (error) {
+    if (!(error instanceof PricingError)) throw error;
+    const conflict = error.code === 'TIME_SLOT_CONFLICT';
+    const notFound = error.code === 'ROOM_NOT_FOUND';
+    return reply.status(conflict ? 409 : notFound ? 404 : 400).send({
+      code: error.code,
+      message: 'The requested price or time slot is not available.',
+      traceId
+    });
+  }
+}
+
+function unauthorized(reply: FastifyReply, traceId: string) {
+  return reply.status(401).send({
+    code: 'AUTH_SESSION_INVALID',
+    message: 'Authentication required.',
+    traceId
+  });
+}
+
+function invalid(reply: FastifyReply, traceId: string) {
+  return reply.status(400).send({
+    code: 'INVALID_PRICING_REQUEST',
+    message: 'The pricing request is invalid.',
+    traceId
+  });
+}

backend/src/routes/store-room-management.ts

@@ -44,6 +44,8 @@ const roomSchema = z.object({
   weekdayPriceCents: z.number().int().min(0).max(10000000),
   holidayPriceCents: z.number().int().min(0).max(10000000),
   overnightPriceCents: z.number().int().min(0).max(10000000),
+  fullDayPriceCents: z.number().int().min(0).max(10000000).default(0),
+  minimumSpendCents: z.number().int().min(0).max(10000000).default(0),
   depositCents: z.number().int().min(0).max(10000000),
   minimumMinutes: z.number().int().min(15).max(1440),
   maxAdvanceStartMinutes: z.number().int().min(0).max(1440),