feat: 初始化短剧服务端（管理后台 API + 客户端 API）

Spring Boot 3.2 / MyBatis-Plus / PostgreSQL，7 个 Maven 模块；含认证鉴权、内容与媒资管理、操作日志，以及客户端 /app/** 接口。

reelshort-admin-api/src/main/java/com/reelshort/ReelShortApplication.java

@@ -0,0 +1,14 @@
+package com.reelshort;
+
+import org.mybatis.spring.annotation.MapperScan;
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+@MapperScan("com.reelshort.**.dal.mapper")
+public class ReelShortApplication {
+
+    public static void main(String[] args) {
+        SpringApplication.run(ReelShortApplication.class, args);
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/AdminUserController.java

@@ -0,0 +1,83 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.PageResult;
+import com.reelshort.common.pojo.Result;
+import com.reelshort.framework.security.SecurityUtils;
+import com.reelshort.system.service.AdminUserService;
+import com.reelshort.framework.log.OperationLog;
+import com.reelshort.system.vo.AdminUserPageReqVO;
+import com.reelshort.system.vo.AdminUserRespVO;
+import com.reelshort.system.vo.AdminUserSaveReqVO;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.Map;
+
+@RestController
+@RequestMapping("/admin/admin-users")
+@RequiredArgsConstructor
+public class AdminUserController {
+
+    private final AdminUserService adminUserService;
+
+    @GetMapping("/page")
+    @PreAuthorize("@ss.hasPermission('system:admin-user')")
+    public Result<PageResult<AdminUserRespVO>> page(AdminUserPageReqVO req) {
+        return Result.ok(adminUserService.page(req));
+    }
+
+    @GetMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:admin-user')")
+    public Result<AdminUserRespVO> get(@PathVariable Long id) {
+        return Result.ok(adminUserService.get(id));
+    }
+
+    @PostMapping
+    @PreAuthorize("@ss.hasPermission('system:admin-user')")
+    @OperationLog(module = "后台管理", action = "新增管理员")
+    public Result<Long> create(@Valid @RequestBody AdminUserSaveReqVO req) {
+        return Result.ok(adminUserService.create(req));
+    }
+
+    @PutMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:admin-user')")
+    @OperationLog(module = "后台管理", action = "编辑管理员")
+    public Result<Void> update(@PathVariable Long id, @Valid @RequestBody AdminUserSaveReqVO req) {
+        adminUserService.update(id, req);
+        return Result.ok();
+    }
+
+    @DeleteMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:admin-user')")
+    @OperationLog(module = "后台管理", action = "删除管理员")
+    public Result<Void> delete(@PathVariable Long id) {
+        adminUserService.delete(id);
+        return Result.ok();
+    }
+
+    @PutMapping("/{id}/status")
+    @PreAuthorize("@ss.hasPermission('system:admin-user')")
+    @OperationLog(module = "后台管理", action = "修改管理员状态")
+    public Result<Void> updateStatus(@PathVariable Long id, @RequestParam Integer status) {
+        adminUserService.updateStatus(id, status);
+        return Result.ok();
+    }
+
+    @PutMapping("/{id}/password")
+    @PreAuthorize("@ss.hasPermission('system:admin-user')")
+    @OperationLog(module = "后台管理", action = "重置管理员密码")
+    public Result<Void> resetPassword(@PathVariable Long id, @RequestBody Map<String, String> body) {
+        adminUserService.resetPassword(id, body.get("password"));
+        return Result.ok();
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/AuthController.java

@@ -0,0 +1,61 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.Result;
+import com.reelshort.framework.security.SecurityUtils;
+import com.reelshort.framework.log.OperationLog;
+import com.reelshort.framework.web.WebUtils;
+import com.reelshort.system.service.AuthService;
+import com.reelshort.system.vo.LoginReqVO;
+import com.reelshort.system.vo.LoginRespVO;
+import com.reelshort.system.vo.MenuVO;
+import com.reelshort.system.vo.PasswordChangeReqVO;
+import com.reelshort.system.vo.ProfileRespVO;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/admin/auth")
+@RequiredArgsConstructor
+public class AuthController {
+
+    private final AuthService authService;
+
+    @PostMapping("/login")
+    @OperationLog(module = "认证", action = "登录")
+    public Result<LoginRespVO> login(@Valid @RequestBody LoginReqVO req, HttpServletRequest request) {
+        return Result.ok(authService.login(req, WebUtils.getClientIp(request)));
+    }
+
+    /** 当前用户的菜单路由树，结构与前端 element-plus-admin 的动态路由一致。 */
+    @GetMapping("/menus")
+    public Result<List<MenuVO>> menus() {
+        return Result.ok(authService.listMenus(SecurityUtils.getUserId()));
+    }
+
+    @GetMapping("/profile")
+    public Result<ProfileRespVO> profile() {
+        return Result.ok(authService.profile(SecurityUtils.getUserId()));
+    }
+
+    /** JWT 无状态，登出由前端清除 token 即可。 */
+    @PostMapping("/logout")
+    @OperationLog(module = "认证", action = "退出登录")
+    public Result<Void> logout() {
+        return Result.ok();
+    }
+
+    @PostMapping("/password")
+    @OperationLog(module = "认证", action = "修改密码")
+    public Result<Void> changePassword(@Valid @RequestBody PasswordChangeReqVO req) {
+        authService.changePassword(SecurityUtils.getUserId(), req.getOldPassword(), req.getNewPassword());
+        return Result.ok();
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/BannerController.java

@@ -0,0 +1,86 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.PageResult;
+import com.reelshort.common.pojo.Result;
+import com.reelshort.content.service.BannerService;
+import com.reelshort.content.vo.BannerRespVO;
+import com.reelshort.content.vo.BannerSaveReqVO;
+import com.reelshort.framework.security.SecurityUtils;
+import com.reelshort.framework.log.OperationLog;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+import java.util.Map;
+
+@RestController
+@RequestMapping("/admin/banners")
+@RequiredArgsConstructor
+public class BannerController {
+
+    private final BannerService bannerService;
+
+    @GetMapping("/page")
+    @PreAuthorize("@ss.hasPermission('banner:list')")
+    public Result<PageResult<BannerRespVO>> page(@RequestParam(required = false) String position,
+                                                 @RequestParam(required = false) Integer status,
+                                                 @RequestParam(defaultValue = "1") Integer pageIndex,
+                                                 @RequestParam(defaultValue = "10") Integer pageSize) {
+        return Result.ok(bannerService.page(position, status, pageIndex, pageSize));
+    }
+
+    @GetMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('banner:list')")
+    public Result<BannerRespVO> get(@PathVariable Long id) {
+        return Result.ok(bannerService.get(id));
+    }
+
+    @PostMapping
+    @PreAuthorize("@ss.hasPermission('banner:create')")
+    @OperationLog(module = "内容管理", action = "新增轮播图")
+    public Result<Long> create(@Valid @RequestBody BannerSaveReqVO req) {
+        return Result.ok(bannerService.create(req, SecurityUtils.getUserId()));
+    }
+
+    @PutMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('banner:update')")
+    @OperationLog(module = "内容管理", action = "编辑轮播图")
+    public Result<Void> update(@PathVariable Long id, @Valid @RequestBody BannerSaveReqVO req) {
+        bannerService.update(id, req);
+        return Result.ok();
+    }
+
+    @DeleteMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('banner:delete')")
+    @OperationLog(module = "内容管理", action = "删除轮播图")
+    public Result<Void> delete(@PathVariable Long id) {
+        bannerService.delete(id);
+        return Result.ok();
+    }
+
+    @PutMapping("/{id}/status")
+    @PreAuthorize("@ss.hasPermission('banner:update')")
+    @OperationLog(module = "内容管理", action = "修改轮播图状态")
+    public Result<Void> updateStatus(@PathVariable Long id, @RequestParam Integer status) {
+        bannerService.updateStatus(id, status);
+        return Result.ok();
+    }
+
+    @PutMapping("/sort")
+    @PreAuthorize("@ss.hasPermission('banner:update')")
+    public Result<Void> sort(@RequestBody Map<String, List<Long>> body) {
+        bannerService.updateSort(body.getOrDefault("ids", List.of()));
+        return Result.ok();
+    }
+
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/ConfigController.java

@@ -0,0 +1,38 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.Result;
+import com.reelshort.system.service.ConfigService;
+import com.reelshort.framework.log.OperationLog;
+import com.reelshort.system.vo.ConfigItemVO;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+import java.util.Map;
+
+@RestController
+@RequestMapping("/admin/configs")
+@RequiredArgsConstructor
+public class ConfigController {
+
+    private final ConfigService configService;
+
+    @GetMapping
+    @PreAuthorize("@ss.hasAnyPermission('system:role','system:menu')")
+    public Result<List<ConfigItemVO>> list() {
+        return Result.ok(configService.list());
+    }
+
+    @PutMapping
+    @PreAuthorize("@ss.hasPermission('system:role')")
+    @OperationLog(module = "后台管理", action = "修改系统设置")
+    public Result<Void> update(@RequestBody Map<String, String> values) {
+        configService.update(values);
+        return Result.ok();
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/DictController.java

@@ -0,0 +1,40 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.Result;
+import com.reelshort.content.enums.ContentStatus;
+import com.reelshort.content.service.DramaCategoryService;
+import com.reelshort.content.vo.DramaCategoryRespVO;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.Arrays;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * 字典接口：题材、内容状态等下拉数据。
+ */
+@RestController
+@RequestMapping("/admin/dicts")
+@RequiredArgsConstructor
+public class DictController {
+
+    private final DramaCategoryService dramaCategoryService;
+
+    @GetMapping("/drama-category")
+    @PreAuthorize("@ss.hasPermission('drama:list')")
+    public Result<List<DramaCategoryRespVO>> dramaCategories() {
+        return Result.ok(dramaCategoryService.list());
+    }
+
+    @GetMapping("/content-status")
+    @PreAuthorize("@ss.hasPermission('drama:list')")
+    public Result<List<Map<String, String>>> contentStatus() {
+        return Result.ok(Arrays.stream(ContentStatus.values())
+                .map(status -> Map.of("code", status.getCode(), "text", status.getText()))
+                .toList());
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/DramaCategoryController.java

@@ -0,0 +1,61 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.Result;
+import com.reelshort.content.service.DramaCategoryService;
+import com.reelshort.content.vo.DramaCategoryRespVO;
+import com.reelshort.content.vo.DramaCategorySaveReqVO;
+import com.reelshort.framework.security.SecurityUtils;
+import com.reelshort.framework.log.OperationLog;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+/**
+ * 短剧类型管理。类型属于短剧域，权限沿用 drama:*，不再单开权限点。
+ */
+@RestController
+@RequestMapping("/admin/drama-categories")
+@RequiredArgsConstructor
+public class DramaCategoryController {
+
+    private final DramaCategoryService dramaCategoryService;
+
+    @GetMapping
+    @PreAuthorize("@ss.hasPermission('drama:list')")
+    public Result<List<DramaCategoryRespVO>> list() {
+        return Result.ok(dramaCategoryService.list());
+    }
+
+    @PostMapping
+    @PreAuthorize("@ss.hasPermission('drama:create')")
+    @OperationLog(module = "内容管理", action = "新增短剧类型")
+    public Result<Long> create(@Valid @RequestBody DramaCategorySaveReqVO req) {
+        return Result.ok(dramaCategoryService.create(req));
+    }
+
+    @PutMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('drama:update')")
+    @OperationLog(module = "内容管理", action = "编辑短剧类型")
+    public Result<Void> update(@PathVariable Long id, @Valid @RequestBody DramaCategorySaveReqVO req) {
+        dramaCategoryService.update(id, req);
+        return Result.ok();
+    }
+
+    @DeleteMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('drama:delete')")
+    @OperationLog(module = "内容管理", action = "删除短剧类型")
+    public Result<Void> delete(@PathVariable Long id) {
+        dramaCategoryService.delete(id);
+        return Result.ok();
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/DramaController.java

@@ -0,0 +1,120 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.PageResult;
+import com.reelshort.common.pojo.Result;
+import com.reelshort.content.dal.entity.DramaReviewRecord;
+import com.reelshort.content.service.DramaService;
+import com.reelshort.content.vo.DramaPageReqVO;
+import com.reelshort.content.vo.DramaRespVO;
+import com.reelshort.content.vo.DramaSaveReqVO;
+import com.reelshort.content.vo.DramaStatusReqVO;
+import com.reelshort.framework.security.SecurityUtils;
+import com.reelshort.framework.log.OperationLog;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/admin/dramas")
+@RequiredArgsConstructor
+public class DramaController {
+
+    private final DramaService dramaService;
+
+    @GetMapping("/page")
+    @PreAuthorize("@ss.hasPermission('drama:list')")
+    public Result<PageResult<DramaRespVO>> page(DramaPageReqVO req) {
+        return Result.ok(dramaService.page(req));
+    }
+
+    @GetMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('drama:list')")
+    public Result<DramaRespVO> get(@PathVariable Long id) {
+        return Result.ok(dramaService.get(id));
+    }
+
+    @PostMapping
+    @PreAuthorize("@ss.hasPermission('drama:create')")
+    @OperationLog(module = "内容管理", action = "新建短剧")
+    public Result<Long> create(@Valid @RequestBody DramaSaveReqVO req) {
+        return Result.ok(dramaService.create(req, SecurityUtils.getUserId()));
+    }
+
+    @PutMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('drama:update')")
+    @OperationLog(module = "内容管理", action = "编辑短剧")
+    public Result<Void> update(@PathVariable Long id, @Valid @RequestBody DramaSaveReqVO req) {
+        dramaService.update(id, req);
+        return Result.ok();
+    }
+
+    @DeleteMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('drama:delete')")
+    @OperationLog(module = "内容管理", action = "删除短剧")
+    public Result<Void> delete(@PathVariable Long id) {
+        dramaService.delete(id);
+        return Result.ok();
+    }
+
+    /** 提交审核：内容运营即可操作。 */
+    @PostMapping("/{id}/submit")
+    @PreAuthorize("@ss.hasAnyPermission('drama:review','drama:update')")
+    @OperationLog(module = "内容管理", action = "提交审核")
+    public Result<Void> submit(@PathVariable Long id, @RequestBody(required = false) DramaStatusReqVO req) {
+        changeStatus(id, "SUBMIT", req);
+        return Result.ok();
+    }
+
+    @PostMapping("/{id}/approve")
+    @PreAuthorize("@ss.hasPermission('drama:review')")
+    @OperationLog(module = "内容管理", action = "审核通过")
+    public Result<Void> approve(@PathVariable Long id, @RequestBody(required = false) DramaStatusReqVO req) {
+        changeStatus(id, "APPROVE", req);
+        return Result.ok();
+    }
+
+    @PostMapping("/{id}/reject")
+    @PreAuthorize("@ss.hasPermission('drama:review')")
+    @OperationLog(module = "内容管理", action = "驳回短剧")
+    public Result<Void> reject(@PathVariable Long id, @RequestBody(required = false) DramaStatusReqVO req) {
+        changeStatus(id, "REJECT", req);
+        return Result.ok();
+    }
+
+    @PostMapping("/{id}/publish")
+    @PreAuthorize("@ss.hasPermission('drama:review')")
+    @OperationLog(module = "内容管理", action = "短剧上线")
+    public Result<Void> publish(@PathVariable Long id, @RequestBody(required = false) DramaStatusReqVO req) {
+        changeStatus(id, "PUBLISH", req);
+        return Result.ok();
+    }
+
+    @PostMapping("/{id}/offline")
+    @PreAuthorize("@ss.hasPermission('drama:review')")
+    @OperationLog(module = "内容管理", action = "短剧下线")
+    public Result<Void> offline(@PathVariable Long id, @RequestBody(required = false) DramaStatusReqVO req) {
+        changeStatus(id, "OFFLINE", req);
+        return Result.ok();
+    }
+
+    @GetMapping("/{id}/review-records")
+    @PreAuthorize("@ss.hasPermission('drama:list')")
+    public Result<List<DramaReviewRecord>> reviewRecords(@PathVariable Long id) {
+        return Result.ok(dramaService.listReviewRecords(id));
+    }
+
+    private void changeStatus(Long id, String action, DramaStatusReqVO req) {
+        dramaService.changeStatus(id, action, req == null ? null : req.getReason(),
+                SecurityUtils.getUserId(), SecurityUtils.getUsername());
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/EpisodeController.java

@@ -0,0 +1,68 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.Result;
+import com.reelshort.content.service.EpisodeService;
+import com.reelshort.content.vo.EpisodeRespVO;
+import com.reelshort.content.vo.EpisodeSaveReqVO;
+import com.reelshort.content.vo.EpisodeSortReqVO;
+import com.reelshort.framework.log.OperationLog;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/admin/episodes")
+@RequiredArgsConstructor
+public class EpisodeController {
+
+    private final EpisodeService episodeService;
+
+    @GetMapping
+    @PreAuthorize("@ss.hasPermission('episode:list')")
+    public Result<List<EpisodeRespVO>> list(@RequestParam Long dramaId,
+                                            @RequestParam(required = false) String status) {
+        return Result.ok(episodeService.listByDrama(dramaId, status));
+    }
+
+    @PostMapping
+    @PreAuthorize("@ss.hasPermission('episode:upload')")
+    @OperationLog(module = "内容管理", action = "新增剧集")
+    public Result<Long> create(@Valid @RequestBody EpisodeSaveReqVO req) {
+        return Result.ok(episodeService.create(req));
+    }
+
+    @PutMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('episode:upload')")
+    @OperationLog(module = "内容管理", action = "编辑剧集")
+    public Result<Void> update(@PathVariable Long id, @Valid @RequestBody EpisodeSaveReqVO req) {
+        episodeService.update(id, req);
+        return Result.ok();
+    }
+
+    @DeleteMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('episode:upload')")
+    @OperationLog(module = "内容管理", action = "删除剧集")
+    public Result<Void> delete(@PathVariable Long id) {
+        episodeService.delete(id);
+        return Result.ok();
+    }
+
+    @PutMapping("/sort")
+    @PreAuthorize("@ss.hasPermission('episode:sort')")
+    @OperationLog(module = "内容管理", action = "调整剧集顺序")
+    public Result<Void> sort(@Valid @RequestBody EpisodeSortReqVO req) {
+        episodeService.updateSort(req.getIds());
+        return Result.ok();
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/MediaController.java

@@ -0,0 +1,58 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.Result;
+import com.reelshort.framework.security.SecurityUtils;
+import com.reelshort.media.service.MediaService;
+import com.reelshort.media.vo.MediaAssetRespVO;
+import com.reelshort.media.vo.UploadCompleteReqVO;
+import com.reelshort.media.vo.UploadInitReqVO;
+import com.reelshort.media.vo.UploadInitRespVO;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.multipart.MultipartFile;
+
+/**
+ * 媒资上传（本地存储版）：init 建会话 → chunk 传分片 → complete 合并出地址。
+ */
+@RestController
+@RequestMapping("/admin/media")
+@RequiredArgsConstructor
+public class MediaController {
+
+    private final MediaService mediaService;
+
+    @PostMapping("/upload/init")
+    @PreAuthorize("@ss.hasAnyPermission('cover:upload','episode:upload')")
+    public Result<UploadInitRespVO> init(@Valid @RequestBody UploadInitReqVO req) {
+        return Result.ok(mediaService.init(req, SecurityUtils.getUserId()));
+    }
+
+    @PostMapping("/upload/chunk")
+    @PreAuthorize("@ss.hasAnyPermission('cover:upload','episode:upload')")
+    public Result<Integer> uploadChunk(@RequestParam String uploadId,
+                                       @RequestParam int index,
+                                       @RequestParam("file") MultipartFile file) {
+        mediaService.saveChunk(uploadId, index, file);
+        return Result.ok(index);
+    }
+
+    @PostMapping("/upload/complete")
+    @PreAuthorize("@ss.hasAnyPermission('cover:upload','episode:upload')")
+    public Result<MediaAssetRespVO> complete(@Valid @RequestBody UploadCompleteReqVO req) {
+        return Result.ok(mediaService.complete(req));
+    }
+
+    @GetMapping("/{id}")
+    @PreAuthorize("@ss.hasAnyPermission('cover:upload','episode:upload')")
+    public Result<MediaAssetRespVO> get(@PathVariable Long id) {
+        return Result.ok(mediaService.get(id));
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/MenuController.java

@@ -0,0 +1,57 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.Result;
+import com.reelshort.system.service.MenuService;
+import com.reelshort.framework.log.OperationLog;
+import com.reelshort.system.vo.MenuSaveReqVO;
+import com.reelshort.system.vo.MenuVO;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/admin/menus")
+@RequiredArgsConstructor
+public class MenuController {
+
+    private final MenuService menuService;
+
+    @GetMapping("/tree")
+    @PreAuthorize("@ss.hasPermission('system:menu')")
+    public Result<List<MenuVO>> tree() {
+        return Result.ok(menuService.listAll());
+    }
+
+    @PostMapping
+    @PreAuthorize("@ss.hasPermission('system:menu')")
+    @OperationLog(module = "后台管理", action = "新增菜单")
+    public Result<Long> create(@Valid @RequestBody MenuSaveReqVO req) {
+        return Result.ok(menuService.create(req));
+    }
+
+    @PutMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:menu')")
+    @OperationLog(module = "后台管理", action = "编辑菜单")
+    public Result<Void> update(@PathVariable Long id, @Valid @RequestBody MenuSaveReqVO req) {
+        menuService.update(id, req);
+        return Result.ok();
+    }
+
+    @DeleteMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:menu')")
+    @OperationLog(module = "后台管理", action = "删除菜单")
+    public Result<Void> delete(@PathVariable Long id) {
+        menuService.delete(id);
+        return Result.ok();
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/OperationLogController.java

@@ -0,0 +1,33 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.PageResult;
+import com.reelshort.common.pojo.Result;
+import com.reelshort.system.service.OperationLogService;
+import com.reelshort.system.vo.OperationLogPageReqVO;
+import com.reelshort.system.vo.OperationLogRespVO;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequestMapping("/admin/operation-logs")
+@RequiredArgsConstructor
+public class OperationLogController {
+
+    private final OperationLogService operationLogService;
+
+    @GetMapping("/page")
+    @PreAuthorize("@ss.hasPermission('log:list')")
+    public Result<PageResult<OperationLogRespVO>> page(OperationLogPageReqVO req) {
+        return Result.ok(operationLogService.page(req));
+    }
+
+    @GetMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('log:list')")
+    public Result<OperationLogRespVO> get(@PathVariable Long id) {
+        return Result.ok(operationLogService.get(id));
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/PermissionController.java

@@ -0,0 +1,27 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.Result;
+import com.reelshort.system.service.PermissionService;
+import com.reelshort.system.vo.PermissionGroupVO;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/admin/permissions")
+@RequiredArgsConstructor
+public class PermissionController {
+
+    private final PermissionService permissionService;
+
+    /** 按分组返回权限点，直接喂给前端的角色权限配置页。 */
+    @GetMapping
+    @PreAuthorize("@ss.hasPermission('system:role')")
+    public Result<List<PermissionGroupVO>> groups() {
+        return Result.ok(permissionService.listGroups());
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/RoleCategoryController.java

@@ -0,0 +1,57 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.Result;
+import com.reelshort.system.service.RoleCategoryService;
+import com.reelshort.framework.log.OperationLog;
+import com.reelshort.system.vo.RoleCategoryRespVO;
+import com.reelshort.system.vo.RoleCategorySaveReqVO;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/admin/role-categories")
+@RequiredArgsConstructor
+public class RoleCategoryController {
+
+    private final RoleCategoryService roleCategoryService;
+
+    @GetMapping
+    @PreAuthorize("@ss.hasPermission('system:role-category')")
+    public Result<List<RoleCategoryRespVO>> list() {
+        return Result.ok(roleCategoryService.list());
+    }
+
+    @PostMapping
+    @PreAuthorize("@ss.hasPermission('system:role-category')")
+    @OperationLog(module = "后台管理", action = "新增角色分类")
+    public Result<Long> create(@Valid @RequestBody RoleCategorySaveReqVO req) {
+        return Result.ok(roleCategoryService.create(req));
+    }
+
+    @PutMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:role-category')")
+    @OperationLog(module = "后台管理", action = "编辑角色分类")
+    public Result<Void> update(@PathVariable Long id, @Valid @RequestBody RoleCategorySaveReqVO req) {
+        roleCategoryService.update(id, req);
+        return Result.ok();
+    }
+
+    @DeleteMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:role-category')")
+    @OperationLog(module = "后台管理", action = "删除角色分类")
+    public Result<Void> delete(@PathVariable Long id) {
+        roleCategoryService.delete(id);
+        return Result.ok();
+    }
+}

reelshort-admin-api/src/main/java/com/reelshort/admin/controller/RoleController.java

@@ -0,0 +1,88 @@
+package com.reelshort.admin.controller;
+
+import com.reelshort.common.pojo.PageResult;
+import com.reelshort.common.pojo.Result;
+import com.reelshort.system.service.RoleService;
+import com.reelshort.framework.log.OperationLog;
+import com.reelshort.system.vo.RolePermissionSaveReqVO;
+import com.reelshort.system.vo.RoleRespVO;
+import com.reelshort.system.vo.RoleSaveReqVO;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/admin/roles")
+@RequiredArgsConstructor
+public class RoleController {
+
+    private final RoleService roleService;
+
+    @GetMapping("/page")
+    @PreAuthorize("@ss.hasPermission('system:role')")
+    public Result<PageResult<RoleRespVO>> page(@RequestParam(required = false) String keyword,
+                                               @RequestParam(defaultValue = "1") Integer pageIndex,
+                                               @RequestParam(defaultValue = "10") Integer pageSize) {
+        return Result.ok(roleService.page(keyword, pageIndex, pageSize));
+    }
+
+    @GetMapping("/list")
+    public Result<List<RoleRespVO>> list() {
+        return Result.ok(roleService.listAll());
+    }
+
+    @GetMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:role')")
+    public Result<RoleRespVO> get(@PathVariable Long id) {
+        return Result.ok(roleService.get(id));
+    }
+
+    @PostMapping
+    @PreAuthorize("@ss.hasPermission('system:role')")
+    @OperationLog(module = "后台管理", action = "新增角色")
+    public Result<Long> create(@Valid @RequestBody RoleSaveReqVO req) {
+        return Result.ok(roleService.create(req));
+    }
+
+    @PutMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:role')")
+    @OperationLog(module = "后台管理", action = "编辑角色")
+    public Result<Void> update(@PathVariable Long id, @Valid @RequestBody RoleSaveReqVO req) {
+        roleService.update(id, req);
+        return Result.ok();
+    }
+
+    @DeleteMapping("/{id}")
+    @PreAuthorize("@ss.hasPermission('system:role')")
+    @OperationLog(module = "后台管理", action = "删除角色")
+    public Result<Void> delete(@PathVariable Long id) {
+        roleService.delete(id);
+        return Result.ok();
+    }
+
+    @GetMapping("/{id}/permissions")
+    @PreAuthorize("@ss.hasPermission('system:role')")
+    public Result<List<String>> permissions(@PathVariable Long id) {
+        return Result.ok(roleService.listCodesByRoleId(id));
+    }
+
+    @PutMapping("/{id}/permissions")
+    @PreAuthorize("@ss.hasPermission('system:role')")
+    @OperationLog(module = "后台管理", action = "修改角色权限")
+    public Result<Void> updatePermissions(@PathVariable Long id,
+                                          @Valid @RequestBody RolePermissionSaveReqVO req) {
+        roleService.updatePermissions(id, req.getPermissions());
+        return Result.ok();
+    }
+}

reelshort-admin-api/src/main/resources/application.yml

@@ -0,0 +1,53 @@
+server:
+  port: 8080
+
+spring:
+  application:
+    name: reelshort-admin-api
+  autoconfigure:
+    exclude: org.springframework.boot.autoconfigure.security.servlet.UserDetailsServiceAutoConfiguration
+  datasource:
+    driver-class-name: org.postgresql.Driver
+    url: jdbc:postgresql://127.0.0.1:5432/reelshort
+    username: ${DB_USER:reelshort}
+    password: ${DB_PASSWORD:reelshort}
+  jackson:
+    date-format: yyyy-MM-dd HH:mm:ss
+    time-zone: Asia/Shanghai
+  servlet:
+    multipart:
+      # 分片上传，单个请求只需要容纳一个分片
+      max-file-size: 20MB
+      max-request-size: 20MB
+
+mybatis-plus:
+  configuration:
+    map-underscore-to-camel-case: true
+  global-config:
+    banner: false
+    db-config:
+      id-type: auto
+      logic-delete-field: deleted
+      logic-delete-value: 1
+      logic-not-delete-value: 0
+
+reelshort:
+  media:
+    # 本地媒资目录（相对应用启动目录），通过 /files/** 访问
+    root-dir: ./data/uploads
+    public-prefix: /files
+    chunk-size: 5242880
+    max-file-size: 2147483648
+  jwt:
+    admin-secret: ${JWT_ADMIN_SECRET:reelshort-admin-dev-secret-change-me-in-production-32b}
+    admin-ttl-hours: 12
+  cors:
+    allowed-origins: http://localhost:3005,http://127.0.0.1:3005
+
+springdoc:
+  swagger-ui:
+    path: /doc.html
+
+logging:
+  level:
+    com.reelshort: debug