test(backend): C 端核心链路契约测试 37 条，mvn test 不再是 No tests to run

为什么：红线第 8 条要求后端 mvn test 通过且核心接口有契约测试；此前 13 个模块全是
No tests to run.，这个"通过"是空的。按 M2 口径只补 C 端核心链路最小集。

- 接入层契约（MockMvc，真控制器 + 真全局异常处理器 + service 替身）：
  /app/auth 注册与登录、目录四条路由、播放票据 FREE 与 COIN_REQUIRED 的字段形态
- 业务规则（真 service + 替身 Mapper）：
  EMAIL 免码不走验证码且 verified=0、PHONE 必须带码、验证码错/过期被拒、
  密码强度、注册频控 429、账号重复 200001、密码错误 100000、封禁 100001、
  免费/已购/未解锁/无片源四个播放分支
- 依赖只加到 fruitshorts-app-api（spring-boot-starter-test，test scope），不动其它模块
- 测试放在接入层模块，避免动 01-08 冻结模块目录；只新增测试，未改业务逻辑
- 实测：mvn test BUILD SUCCESS，app-api Tests run: 37, Failures: 0, Errors: 0；
  mvn -DskipTests package 仍 BUILD SUCCESS

deploy/docker-compose.yml

@@ -1,32 +0,0 @@
-# Author: fruit.com.cn
-# 监控组件编排：Prometheus + Grafana（Loki 日志后续接入）
-services:
-  prometheus:
-    image: prom/prometheus:latest
-    container_name: fruitshorts-prometheus
-    ports:
-      - "9090:9090"
-    volumes:
-      - ./prometheus.yml:/etc/prometheus/prometheus.yml
-      - prometheus-data:/prometheus
-    command:
-      - "--config.file=/etc/prometheus/prometheus.yml"
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
-    restart: unless-stopped
-
-  grafana:
-    image: grafana/grafana:latest
-    container_name: fruitshorts-grafana
-    ports:
-      - "3000:3000"
-    volumes:
-      - grafana-data:/var/lib/grafana
-    environment:
-      - GF_SECURITY_ADMIN_USER=admin
-      - GF_SECURITY_ADMIN_PASSWORD=admin
-    restart: unless-stopped
-
-volumes:
-  prometheus-data:
-  grafana-data:

deploy/prometheus.yml

@@ -1,16 +0,0 @@
-# Author: fruit.com.cn
-# Prometheus 抓取配置：抓取后端双服务的 actuator 指标
-global:
-  scrape_interval: 15s
-  evaluation_interval: 15s
-
-scrape_configs:
-  - job_name: "fruitshorts-app-api"
-    metrics_path: "/actuator/prometheus"
-    static_configs:
-      - targets: ["host.docker.internal:8081"]
-
-  - job_name: "fruitshorts-admin-api"
-    metrics_path: "/actuator/prometheus"
-    static_configs:
-      - targets: ["host.docker.internal:8080"]

docs/api-phase1.md

@@ -74,6 +74,30 @@ POST /app/auth/register
 }
 ```
 
+**邮箱 + 密码注册（C 端第一批口径）**
+
+```json
+POST /app/auth/register
+{
+  "targetType": "EMAIL", "target": "User@Example.com ", "password": "nonton2026",
+  "deviceId": "d-1", "countryCode": "ID", "agreementVersion": "2026-10-01"
+}
+```
+
+| 规则 | 口径 |
+| --- | --- |
+| `targetType=EMAIL` | **`code` 可以不传**（邮箱+密码直接注册）；传了就走一次验证码校验（邮箱验证能力保留） |
+| `targetType=PHONE` | 维持原状：`code` **必填** |
+| 邮箱规范化 | 去空格 + 转小写（`batch1@Example.com ` → `batch1@example.com`）；格式不合法直接 `400 邮箱格式不正确` |
+| 密码强度 | 8–64 位，且**同时包含字母与数字**（不强制特殊字符：低端机输入成本高，拦机器注册靠频控） |
+| 注册频控 | 同 IP 24h ≤ **5** 个、同设备 24h ≤ **3** 个，超出返回 `429`（`TOO_MANY_REQUESTS`） |
+| 邮箱验证状态 | 免码注册时 `app_user_credential.verified = 0`（保留"待验证"），**不阻塞登录**；只有**验证码登录**会把 `verified` 置 1，密码登录不改变该状态 |
+
+频控口径落库在 `app_user.register_ip` / `register_device_id` 上（按 24h 计数，不新建计数表）。
+**残留风险**：IP 取自 `X-Forwarded-For`、设备号由客户端上报，都能伪造，只能挡脚本批量；
+真要防住需要接图形/行为验证码或风控服务，本阶段未做。验证码通道目前是 `LogOtpSender`（只写日志不发信），
+所以邮箱**可达性**未验证 —— 这也是"不阻塞注册"的前提。
+
 响应（登录、刷新同结构）：
 
 ```json
@@ -219,98 +243,24 @@ POST /app/auth/register
 
 ### 2.1 认证与系统（已实现）
 
-**认证**
-
-| 方法 | 路径 | 鉴权 | 说明 |
-| --- | --- | --- | --- |
-| POST | `/admin/auth/login` | 匿名 | 登录，返回 token |
-| GET | `/admin/auth/menus` | 登录 | 当前用户菜单树 |
-| GET | `/admin/auth/profile` | 登录 | 当前用户资料 |
-| POST | `/admin/auth/logout` | 登录 | 登出 |
-| POST | `/admin/auth/password` | 登录 | 修改密码 |
-
-**系统管理（RBAC）**
-
-| 资源 | 方法 | 路径 | 权限点 |
-| --- | --- | --- | --- |
-| 管理员 | GET | `/admin/admin-users/page` · `/{id}` | `system:admin-user` |
-| 管理员 | POST | `/admin/admin-users` | `system:admin-user` |
-| 管理员 | PUT | `/admin/admin-users/{id}` · `/{id}/status` · `/{id}/password` | `system:admin-user` |
-| 管理员 | DELETE | `/admin/admin-users/{id}` | `system:admin-user` |
-| 角色 | GET | `/admin/roles/page` · `/list` · `/{id}` · `/{id}/permissions` | `system:role`（`/list` 登录即可） |
-| 角色 | POST | `/admin/roles` | `system:role` |
-| 角色 | PUT | `/admin/roles/{id}` · `/{id}/permissions` | `system:role` |
-| 角色 | DELETE | `/admin/roles/{id}` | `system:role` |
-| 权限 | GET | `/admin/permissions` | `system:role` |
-| 菜单 | GET | `/admin/menus/tree` | `system:menu` |
-| 菜单 | POST · PUT · DELETE | `/admin/menus` · `/admin/menus/{id}` | `system:menu` |
-| 角色分类 | GET · POST | `/admin/role-categories` | `system:role-category` |
-| 角色分类 | PUT · DELETE | `/admin/role-categories/{id}` | `system:role-category` |
-| 系统配置 | GET | `/admin/configs` | `system:role` / `system:menu` |
-| 系统配置 | PUT | `/admin/configs` | `system:role` |
-| 操作日志 | GET | `/admin/operation-logs/page` · `/{id}` | `log:list` |
-| 字典 | GET | `/admin/dicts/drama-category` · `/content-status` | `drama:list` |
+`POST /admin/auth/login`、`GET /admin/auth/menus`、`GET /admin/auth/profile`、
+`POST /admin/auth/logout`、`POST /admin/auth/password`；
+管理员、角色、权限、菜单、角色分类、系统配置、操作日志各自一套增删改查。
 
 ### 2.2 内容与媒资（已实现）
 
+短剧（含是否热门、审核发布状态机）、剧集、分类、轮播图；媒资分片上传（init/chunk/complete）。
 新增字段：短剧 `rating`（内容分级）、`regionCodes`（可播区域）、版权窗口、
 `creatorId`、`tags`、`trailerUrl`；剧集 `transcodeStatus`、`hlsUrl`、`previewSeconds`、字幕。
 
-**短剧（含审核发布状态机）**
-
-| 方法 | 路径 | 权限点 | 说明 |
-| --- | --- | --- | --- |
-| GET | `/admin/dramas/page` | `drama:list` | 检索（含热门、状态筛选） |
-| GET | `/admin/dramas/{id}` | `drama:list` | 详情 |
-| POST | `/admin/dramas` | `drama:create` | 新建短剧 |
-| PUT | `/admin/dramas/{id}` | `drama:update` | 编辑短剧 |
-| DELETE | `/admin/dramas/{id}` | `drama:delete` | 删除短剧 |
-| POST | `/admin/dramas/{id}/submit` | `drama:review` / `drama:update` | 提交审核 |
-| POST | `/admin/dramas/{id}/approve` | `drama:review` | 审核通过 |
-| POST | `/admin/dramas/{id}/reject` | `drama:review` | 驳回 |
-| POST | `/admin/dramas/{id}/publish` | `drama:review` | 上线 |
-| POST | `/admin/dramas/{id}/offline` | `drama:review` | 下线 |
-| GET | `/admin/dramas/{id}/review-records` | `drama:list` | 审核记录 |
-
-**剧集**
-
-| 方法 | 路径 | 权限点 | 说明 |
-| --- | --- | --- | --- |
-| GET | `/admin/episodes?dramaId=` | `episode:list` | 某剧分集列表 |
-| POST | `/admin/episodes` | `episode:upload` | 新增分集 |
-| PUT | `/admin/episodes/{id}` | `episode:upload` | 编辑分集 |
-| DELETE | `/admin/episodes/{id}` | `episode:upload` | 删除分集 |
-| PUT | `/admin/episodes/sort` | `episode:sort` | 批量排序 |
-
-**短剧类型**
-
-| 方法 | 路径 | 权限点 | 说明 |
-| --- | --- | --- | --- |
-| GET | `/admin/drama-categories` | `drama:list` | 类型列表 |
-| POST | `/admin/drama-categories` | `drama:create` | 新增类型 |
-| PUT | `/admin/drama-categories/{id}` | `drama:update` | 编辑类型 |
-| DELETE | `/admin/drama-categories/{id}` | `drama:delete` | 删除类型 |
-
-**轮播图**
-
-| 方法 | 路径 | 权限点 | 说明 |
-| --- | --- | --- | --- |
-| GET | `/admin/banners/page` · `/admin/banners/{id}` | `banner:list` | 检索 / 详情 |
-| POST | `/admin/banners` | `banner:create` | 新增 |
-| PUT | `/admin/banners/{id}` · `/{id}/status` · `/sort` | `banner:update` | 编辑 / 改状态 / 排序 |
-| DELETE | `/admin/banners/{id}` | `banner:delete` | 删除 |
-
-**媒资分片上传（后台与创作者共用）**
+媒资上传补充（批 3 加固，后台与创作者共用同一套接口，未重写）：
 
 | 方法 | 路径 | 说明 |
 | --- | --- | --- |
 | POST | `/admin/media/upload/init` | 建上传会话（返回 `uploadId` / `chunkSize` / `totalChunks` / `objectKey`） |
 | POST | `/admin/media/upload/chunk` | 传分片（`uploadId` + `index` + `file`），可重复传同一片 |
-| GET | `/admin/media/upload/{uploadId}` | 断点续传回显（`receivedChunks` / `totalChunks` / `percent` / `status` / 完成后带 `url`） |
+| GET | `/admin/media/upload/{uploadId}` | **新增**：断点续传回显（`receivedChunks` / `totalChunks` / `percent` / `status` / 完成后带 `url`） |
 | POST | `/admin/media/upload/complete` | 合并分片出媒资（幂等：同一 uploadId 重复调用返回同一产物） |
-| GET | `/admin/media/{id}` | 媒资详情 |
-
-> 媒资上传与详情权限点均为 `cover:upload` 或 `episode:upload`（`@ss.hasAnyPermission`）。
 
 **上传会话归属**：`uploadId` 相当于上传凭证，`chunk` / `complete` / 进度查询都校验会话发起人，
 别人拿到 `uploadId` 也塞不进分片（`{"code":403,"message":"无权操作该上传会话"}`）。
@@ -322,7 +272,6 @@ POST /app/auth/register
 | GET | `/admin/app-users/page` | `app-user:list` | 检索：keyword（uid/昵称/手机号/邮箱）、status、countryCode、registerSource |
 | GET | `/admin/app-users/{id}` | `app-user:list` | 详情 |
 | GET | `/admin/app-users/{id}/ban-records` | `app-user:list` | 封禁与申诉记录 |
-| GET | `/admin/app-users/{id}/watch-history` | `app-user:list` | 观看流水明细（带剧名/集号，客服核对用） |
 | PUT | `/admin/app-users/{id}/status` | `app-user:update` | 改状态：normal/limited/banned |
 
 状态处置会**立即吊销该用户全部会话**并写入封禁记录，避免"封了还能用"。
@@ -369,9 +318,6 @@ POST /app/auth/register
 | --- | --- | --- | --- |
 | GET | `/admin/creators/page` `/admin/creators/{id}` `/{id}/documents` | `creator:list` | 创作者检索、详情、资质文件 |
 | PUT | `/admin/creators/{id}/audit` | `creator:audit` | 入驻审核：`APPROVE` / `REJECT`（必填原因+原因码）/ `FREEZE` |
-| POST | `/admin/creators` | `creator:audit` | 手工录入创作者主体（C 端申请入驻未实现前的打通用口） |
-| POST | `/admin/creators/{id}/account` | `creator:account` | 开通创作者账号（幂等） |
-| POST | `/admin/creators/{id}/account/reset-password` | `creator:account` | 重置创作者账号密码（一次性明文返回） |
 | GET | `/admin/submissions/page` `/admin/submissions/{id}` | `submission:list` | 内容提交检索与详情 |
 | PUT | `/admin/submissions/{id}/audit` | `submission:audit` | 审核通过后按 `type` 落到短剧状态机（CREATE/UPDATE 留档、PUBLISH 上线、OFFLINE 下线） |
 | GET · PUT | `/admin/prices` | `price:update` | 分集价格：整剧 `freeEpisodes`/`unlockCoin` + 逐集覆盖；改价立即影响播放与下载判定 |
@@ -426,6 +372,7 @@ POST /app/auth/register
 | PUT | `/admin/prices` | 分集价格与免费集配置 |
 | GET | `/admin/dashboard/overview` | 经营大盘（用户/播放/收入/成本） |
 | GET | `/admin/dashboard/transcode` | 转码队列与失败任务 |
+| POST | `/admin/notices` | 发布系统公告 |
 
 ### 2.9 后台前端页面（已实现）
 

fruitshorts-admin-api/pom.xml

@@ -1,6 +1,4 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<!-- Author: fruit.com.cn -->
-
 <project xmlns="http://maven.apache.org/POM/4.0.0"
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">

fruitshorts-admin-api/src/main/java/com/fruitshorts/FruitShortsApplication.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts;
 
 import org.mybatis.spring.annotation.MapperScan;

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/AdminUserController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -10,8 +8,6 @@ import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.system.vo.AdminUserPageReqVO;
 import com.fruitshorts.system.vo.AdminUserRespVO;
 import com.fruitshorts.system.vo.AdminUserSaveReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -27,7 +23,6 @@ import org.springframework.web.bind.annotation.RestController;
 
 import java.util.Map;
 
-@Tag(name = "管理员管理")
 @RestController
 @RequestMapping("/admin/admin-users")
 @RequiredArgsConstructor
@@ -35,21 +30,18 @@ public class AdminUserController {
 
     private final AdminUserService adminUserService;
 
-    @Operation(summary = "管理员分页检索")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('system:admin-user')")
     public Result<PageResult<AdminUserRespVO>> page(AdminUserPageReqVO req) {
         return Result.ok(adminUserService.page(req));
     }
 
-    @Operation(summary = "管理员详情")
     @GetMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:admin-user')")
     public Result<AdminUserRespVO> get(@PathVariable Long id) {
         return Result.ok(adminUserService.get(id));
     }
 
-    @Operation(summary = "新增管理员")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('system:admin-user')")
     @OperationLog(module = "后台管理", action = "新增管理员")
@@ -57,7 +49,6 @@ public class AdminUserController {
         return Result.ok(adminUserService.create(req));
     }
 
-    @Operation(summary = "编辑管理员")
     @PutMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:admin-user')")
     @OperationLog(module = "后台管理", action = "编辑管理员")
@@ -66,7 +57,6 @@ public class AdminUserController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除管理员")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:admin-user')")
     @OperationLog(module = "后台管理", action = "删除管理员")
@@ -75,7 +65,6 @@ public class AdminUserController {
         return Result.ok();
     }
 
-    @Operation(summary = "修改管理员状态")
     @PutMapping("/{id}/status")
     @PreAuthorize("@ss.hasPermission('system:admin-user')")
     @OperationLog(module = "后台管理", action = "修改管理员状态")
@@ -84,7 +73,6 @@ public class AdminUserController {
         return Result.ok();
     }
 
-    @Operation(summary = "重置管理员密码")
     @PutMapping("/{id}/password")
     @PreAuthorize("@ss.hasPermission('system:admin-user')")
     @OperationLog(module = "后台管理", action = "重置管理员密码")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/AppUserAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -18,8 +16,6 @@ import com.fruitshorts.user.dal.entity.AppUserBanRecord;
 import com.fruitshorts.user.service.AppUserAdminService;
 import com.fruitshorts.user.vo.AppUserQueryReqVO;
 import com.fruitshorts.user.vo.AppUserAdminRespVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -34,7 +30,6 @@ import java.util.Map;
 import java.util.stream.Collectors;
 
 /** 后台用户管理。 */
-@Tag(name = "App 用户管理")
 @RestController
 @RequestMapping("/admin/app-users")
 @RequiredArgsConstructor
@@ -45,21 +40,18 @@ public class AppUserAdminController {
     private final DramaService dramaService;
     private final EpisodeService episodeService;
 
-    @Operation(summary = "用户分页检索（uid/昵称/手机号/邮箱/状态/国家/注册来源）")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('app-user:list')")
     public Result<PageResult<AppUserAdminRespVO>> page(AppUserQueryReqVO req) {
         return Result.ok(appUserAdminService.page(req));
     }
 
-    @Operation(summary = "用户详情")
     @GetMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('app-user:list')")
     public Result<AppUserAdminRespVO> detail(@PathVariable Long id) {
         return Result.ok(appUserAdminService.detail(id));
     }
 
-    @Operation(summary = "封禁与申诉记录")
     @GetMapping("/{id}/ban-records")
     @PreAuthorize("@ss.hasPermission('app-user:list')")
     public Result<List<AppUserBanRecord>> banRecords(@PathVariable Long id) {
@@ -67,7 +59,6 @@ public class AppUserAdminController {
     }
 
     /** 观看流水明细：客服核对"用户说看了但没记录"这类问题时用，带上剧名与集号。 */
-    @Operation(summary = "观看流水明细（客服核对用，带剧名与集号）")
     @GetMapping("/{id}/watch-history")
     @PreAuthorize("@ss.hasPermission('app-user:list')")
     public Result<List<AppUserWatchHistoryVO>> watchHistory(@PathVariable Long id,
@@ -115,7 +106,6 @@ public class AppUserAdminController {
     }
 
     /** 状态处置：normal/limited/banned。封禁会立即吊销该用户全部会话。 */
-    @Operation(summary = "修改用户状态（normal/limited/banned，封禁立即吊销全部会话）")
     @PutMapping("/{id}/status")
     @PreAuthorize("@ss.hasPermission('app-user:update')")
     @OperationLog(module = "用户管理", action = "修改用户状态")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/AuthController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -12,8 +10,6 @@ import com.fruitshorts.system.vo.LoginRespVO;
 import com.fruitshorts.system.vo.MenuVO;
 import com.fruitshorts.system.vo.PasswordChangeReqVO;
 import com.fruitshorts.system.vo.ProfileRespVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
@@ -25,7 +21,6 @@ import org.springframework.web.bind.annotation.RestController;
 
 import java.util.List;
 
-@Tag(name = "后台认证")
 @RestController
 @RequestMapping("/admin/auth")
 @RequiredArgsConstructor
@@ -33,7 +28,6 @@ public class AuthController {
 
     private final AuthService authService;
 
-    @Operation(summary = "后台登录，返回 token")
     @PostMapping("/login")
     @OperationLog(module = "认证", action = "登录")
     public Result<LoginRespVO> login(@Valid @RequestBody LoginReqVO req, HttpServletRequest request) {
@@ -41,27 +35,23 @@ public class AuthController {
     }
 
     /** 当前用户的菜单路由树，结构与前端 element-plus-admin 的动态路由一致。 */
-    @Operation(summary = "当前用户菜单路由树")
     @GetMapping("/menus")
     public Result<List<MenuVO>> menus() {
         return Result.ok(authService.listMenus(SecurityUtils.getUserId()));
     }
 
-    @Operation(summary = "当前用户资料")
     @GetMapping("/profile")
     public Result<ProfileRespVO> profile() {
         return Result.ok(authService.profile(SecurityUtils.getUserId()));
     }
 
     /** JWT 无状态，登出由前端清除 token 即可。 */
-    @Operation(summary = "登出（JWT 无状态，前端清除 token 即可）")
     @PostMapping("/logout")
     @OperationLog(module = "认证", action = "退出登录")
     public Result<Void> logout() {
         return Result.ok();
     }
 
-    @Operation(summary = "修改密码")
     @PostMapping("/password")
     @OperationLog(module = "认证", action = "修改密码")
     public Result<Void> changePassword(@Valid @RequestBody PasswordChangeReqVO req) {

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/BannerController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -9,8 +7,6 @@ import com.fruitshorts.content.vo.BannerRespVO;
 import com.fruitshorts.content.vo.BannerSaveReqVO;
 import com.fruitshorts.framework.security.SecurityUtils;
 import com.fruitshorts.framework.log.OperationLog;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -27,7 +23,6 @@ import org.springframework.web.bind.annotation.RestController;
 import java.util.List;
 import java.util.Map;
 
-@Tag(name = "轮播图管理")
 @RestController
 @RequestMapping("/admin/banners")
 @RequiredArgsConstructor
@@ -35,7 +30,6 @@ public class BannerController {
 
     private final BannerService bannerService;
 
-    @Operation(summary = "轮播图分页检索（按位置/状态过滤）")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('banner:list')")
     public Result<PageResult<BannerRespVO>> page(@RequestParam(required = false) String position,
@@ -45,14 +39,12 @@ public class BannerController {
         return Result.ok(bannerService.page(position, status, pageIndex, pageSize));
     }
 
-    @Operation(summary = "轮播图详情")
     @GetMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('banner:list')")
     public Result<BannerRespVO> get(@PathVariable Long id) {
         return Result.ok(bannerService.get(id));
     }
 
-    @Operation(summary = "新增轮播图")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('banner:create')")
     @OperationLog(module = "内容管理", action = "新增轮播图")
@@ -60,7 +52,6 @@ public class BannerController {
         return Result.ok(bannerService.create(req, SecurityUtils.getUserId()));
     }
 
-    @Operation(summary = "编辑轮播图")
     @PutMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('banner:update')")
     @OperationLog(module = "内容管理", action = "编辑轮播图")
@@ -69,7 +60,6 @@ public class BannerController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除轮播图")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('banner:delete')")
     @OperationLog(module = "内容管理", action = "删除轮播图")
@@ -78,7 +68,6 @@ public class BannerController {
         return Result.ok();
     }
 
-    @Operation(summary = "修改轮播图状态")
     @PutMapping("/{id}/status")
     @PreAuthorize("@ss.hasPermission('banner:update')")
     @OperationLog(module = "内容管理", action = "修改轮播图状态")
@@ -87,7 +76,6 @@ public class BannerController {
         return Result.ok();
     }
 
-    @Operation(summary = "调整轮播图排序")
     @PutMapping("/sort")
     @PreAuthorize("@ss.hasPermission('banner:update')")
     public Result<Void> sort(@RequestBody Map<String, List<Long>> body) {

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/CommentAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -11,8 +9,6 @@ import com.fruitshorts.interaction.service.CommentService;
 import com.fruitshorts.interaction.vo.CommentAuditReqVO;
 import com.fruitshorts.interaction.vo.CommentQueryReqVO;
 import com.fruitshorts.interaction.vo.CommentRespVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -27,7 +23,6 @@ import org.springframework.web.bind.annotation.RestController;
 import java.util.List;
 
 /** 后台评论审核。 */
-@Tag(name = "评论治理")
 @RestController
 @RequestMapping("/admin/comments")
 @RequiredArgsConstructor
@@ -36,7 +31,6 @@ public class CommentAdminController {
     private final CommentService commentService;
 
     /** 检索评论：默认按状态过滤，`status=pending` 即审核队列。 */
-    @Operation(summary = "评论检索（status=pending 即审核队列）")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('comment:list')")
     public Result<PageResult<CommentRespVO>> page(CommentQueryReqVO req) {
@@ -44,14 +38,12 @@ public class CommentAdminController {
     }
 
     /** 审核留证：机审与人审的完整链路。 */
-    @Operation(summary = "审核留证（机审与人审完整链路）")
     @GetMapping("/{id}/audit-records")
     @PreAuthorize("@ss.hasPermission('comment:list')")
     public Result<List<ContentAuditRecord>> auditRecords(@PathVariable Long id) {
         return Result.ok(commentService.auditRecords(id));
     }
 
-    @Operation(summary = "审核评论（通过/驳回，带原因码与说明）")
     @PutMapping("/{id}/audit")
     @PreAuthorize("@ss.hasPermission('comment:audit')")
     @OperationLog(module = "内容治理", action = "审核评论")
@@ -60,7 +52,6 @@ public class CommentAdminController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除评论")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('comment:audit')")
     @OperationLog(module = "内容治理", action = "删除评论")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/ConfigController.java

@@ -1,13 +1,9 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.system.service.ConfigService;
 import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.system.vo.ConfigItemVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -19,7 +15,6 @@ import org.springframework.web.bind.annotation.RestController;
 import java.util.List;
 import java.util.Map;
 
-@Tag(name = "系统配置")
 @RestController
 @RequestMapping("/admin/configs")
 @RequiredArgsConstructor
@@ -27,14 +22,12 @@ public class ConfigController {
 
     private final ConfigService configService;
 
-    @Operation(summary = "系统配置列表")
     @GetMapping
     @PreAuthorize("@ss.hasAnyPermission('system:role','system:menu')")
     public Result<List<ConfigItemVO>> list() {
         return Result.ok(configService.list());
     }
 
-    @Operation(summary = "批量修改系统配置")
     @PutMapping
     @PreAuthorize("@ss.hasPermission('system:role')")
     @OperationLog(module = "后台管理", action = "修改系统设置")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/CreatorAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -15,8 +13,6 @@ import com.fruitshorts.creator.vo.CreatorAuditReqVO;
 import com.fruitshorts.creator.vo.CreatorQueryReqVO;
 import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.framework.security.SecurityUtils;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -31,7 +27,6 @@ import org.springframework.web.bind.annotation.RestController;
 import java.util.List;
 
 /** 后台创作者：检索、详情、资质、入驻审核。 */
-@Tag(name = "创作者管理")
 @RestController
 @RequestMapping("/admin/creators")
 @RequiredArgsConstructor
@@ -40,14 +35,12 @@ public class CreatorAdminController {
     private final CreatorService creatorService;
     private final CreatorAccountService creatorAccountService;
 
-    @Operation(summary = "创作者分页检索")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('creator:list')")
     public Result<PageResult<Creator>> page(CreatorQueryReqVO req) {
         return Result.ok(creatorService.page(req));
     }
 
-    @Operation(summary = "创作者详情")
     @GetMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('creator:list')")
     public Result<Creator> detail(@PathVariable Long id) {
@@ -55,14 +48,12 @@ public class CreatorAdminController {
     }
 
     /** 资质文件：审核前要看证件原件。 */
-    @Operation(summary = "资质文件（审核前查看证件原件）")
     @GetMapping("/{id}/documents")
     @PreAuthorize("@ss.hasPermission('creator:list')")
     public Result<List<CreatorDocument>> documents(@PathVariable Long id) {
         return Result.ok(creatorService.documents(id));
     }
 
-    @Operation(summary = "入驻审核（通过/驳回/冻结）")
     @PutMapping("/{id}/audit")
     @PreAuthorize("@ss.hasPermission('creator:audit')")
     @OperationLog(module = "创作者管理", action = "入驻审核")
@@ -71,7 +62,6 @@ public class CreatorAdminController {
     }
 
     /** 手工录入创作者主体（C 端申请入驻还没实现，先用它打通链路）。 */
-    @Operation(summary = "手工录入创作者主体（C 端申请未实现前的打通用口）")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('creator:audit')")
     @OperationLog(module = "创作者管理", action = "新增创作者")
@@ -80,7 +70,6 @@ public class CreatorAdminController {
     }
 
     /** 开通创作者账号：仅审核通过可开；已开通则幂等返回，不重复建号。 */
-    @Operation(summary = "开通创作者账号（仅审核通过可开，幂等）")
     @PostMapping("/{id}/account")
     @PreAuthorize("@ss.hasPermission('creator:account')")
     @OperationLog(module = "创作者管理", action = "开通创作者账号")
@@ -90,7 +79,6 @@ public class CreatorAdminController {
     }
 
     /** 重置创作者账号密码：一次性明文返回，旧密码立即失效。 */
-    @Operation(summary = "重置创作者账号密码（一次性明文返回）")
     @PostMapping("/{id}/account/reset-password")
     @PreAuthorize("@ss.hasPermission('creator:account')")
     @OperationLog(module = "创作者管理", action = "重置创作者密码")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/CreatorCenterController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -11,8 +9,6 @@ import com.fruitshorts.creator.vo.CreatorCenterNoticeVO;
 import com.fruitshorts.creator.vo.CreatorCenterProfileVO;
 import com.fruitshorts.creator.vo.CreatorCenterTargetVO;
 import com.fruitshorts.admin.service.CreatorDashboardService;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -30,7 +26,6 @@ import java.util.Map;
  * 归属由 {@link CreatorCenterService#requireCurrentCreator()} 从登录态解析，
  * 查询强制带 `where creator_id = 当前创作者`；访问他人作品统一 403。
  */
-@Tag(name = "创作者中心")
 @RestController
 @RequestMapping("/admin/creator-center")
 @RequiredArgsConstructor
@@ -40,7 +35,6 @@ public class CreatorCenterController {
     private final CreatorDashboardService creatorDashboardService;
 
     /** 当前创作者的主体信息与入驻状态。 */
-    @Operation(summary = "当前创作者的主体信息与入驻状态")
     @GetMapping("/profile")
     @PreAuthorize("@ss.hasPermission('creator-center:view')")
     public Result<CreatorCenterProfileVO> profile() {
@@ -48,7 +42,6 @@ public class CreatorCenterController {
     }
 
     /** 我的作品列表（含最近一次提交的审核进度）。 */
-    @Operation(summary = "我的作品列表（含最近一次提交的审核进度）")
     @GetMapping("/dramas/page")
     @PreAuthorize("@ss.hasPermission('creator-center:view')")
     public Result<PageResult<CreatorCenterDramaVO>> pageMyDramas(CreatorCenterDramaQueryReqVO req) {
@@ -56,7 +49,6 @@ public class CreatorCenterController {
     }
 
     /** 我的作品详情：id 是别人的作品时返回 403，不区分"不存在"。 */
-    @Operation(summary = "我的作品详情（他人作品返回 403）")
     @GetMapping("/dramas/{id}")
     @PreAuthorize("@ss.hasPermission('creator-center:view')")
     public Result<CreatorCenterDramaVO> myDrama(@PathVariable Long id) {
@@ -64,7 +56,6 @@ public class CreatorCenterController {
     }
 
     /** 我的通知：入驻审核结果 + 我提交内容的审核结果。 */
-    @Operation(summary = "我的通知（入驻审核 + 内容审核结果）")
     @GetMapping("/notices")
     @PreAuthorize("@ss.hasPermission('creator-center:view')")
     public Result<List<CreatorCenterNoticeVO>> notices() {
@@ -72,7 +63,6 @@ public class CreatorCenterController {
     }
 
     /** 我的数据看板：播放 / 完播 / 收藏 / 评论 / 解锁收入概览（只读，只含自己的作品）。 */
-    @Operation(summary = "我的数据看板（播放/完播/收藏/评论/解锁收入，只读）")
     @GetMapping("/dashboard")
     @PreAuthorize("@ss.hasPermission('creator-center:stat:view')")
     public Result<Map<String, Object>> dashboard() {
@@ -83,7 +73,6 @@ public class CreatorCenterController {
      * 代看目标下拉的数据源：只有带 `creator-center:impersonate` 的账号（第一阶段 = 超管）能调。
      * 前端拿它渲染顶部的「当前创作者」下拉；没权限的账号不显示下拉，也不会请求这个接口。
      */
-    @Operation(summary = "代看目标下拉数据源（仅持 creator-center:impersonate 可调）")
     @GetMapping("/impersonation/targets")
     @PreAuthorize("@ss.hasPermission('creator-center:impersonate')")
     public Result<List<CreatorCenterTargetVO>> impersonationTargets() {

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/CreatorContentController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -14,8 +12,6 @@ import com.fruitshorts.creator.vo.CreatorDramaEditReqVO;
 import com.fruitshorts.creator.vo.CreatorEpisodeReqVO;
 import com.fruitshorts.creator.vo.CreatorSubmitReqVO;
 import com.fruitshorts.framework.log.OperationLog;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -36,7 +32,6 @@ import java.util.List;
  * 与 {@link CreatorCenterController} 一样**不接收 creatorId**：归属由登录态解析，
  * 服务层强制 `where creator_id = 当前创作者`，改别人的剧或分集一律 403。
  */
-@Tag(name = "创作者作品")
 @RestController
 @RequestMapping("/admin/creator-center")
 @RequiredArgsConstructor
@@ -45,7 +40,6 @@ public class CreatorContentController {
     private final CreatorContentService creatorContentService;
 
     /** 新建草稿。 */
-    @Operation(summary = "新建作品草稿")
     @PostMapping("/dramas")
     @PreAuthorize("@ss.hasPermission('creator-center:drama:edit')")
     @OperationLog(module = "创作者中心", action = "新建作品")
@@ -54,7 +48,6 @@ public class CreatorContentController {
     }
 
     /** 编辑作品信息（仅草稿 / 已下线可改）。 */
-    @Operation(summary = "编辑作品信息（仅草稿/已下线可改）")
     @PutMapping("/dramas/{id}")
     @PreAuthorize("@ss.hasPermission('creator-center:drama:edit')")
     @OperationLog(module = "创作者中心", action = "编辑作品")
@@ -64,7 +57,6 @@ public class CreatorContentController {
     }
 
     /** 分集列表。 */
-    @Operation(summary = "分集列表")
     @GetMapping("/dramas/{id}/episodes")
     @PreAuthorize("@ss.hasPermission('creator-center:view')")
     public Result<List<EpisodeRespVO>> listEpisodes(@PathVariable Long id) {
@@ -72,7 +64,6 @@ public class CreatorContentController {
     }
 
     /** 新增分集（集号不传自动排到最后）。 */
-    @Operation(summary = "新增分集（不传集号自动排到最后）")
     @PostMapping("/dramas/{id}/episodes")
     @PreAuthorize("@ss.hasPermission('creator-center:drama:edit')")
     @OperationLog(module = "创作者中心", action = "新增分集")
@@ -81,7 +72,6 @@ public class CreatorContentController {
     }
 
     /** 编辑分集（时长 / 封面 / 片源 / 排序）。 */
-    @Operation(summary = "编辑分集（时长/封面/片源/排序）")
     @PutMapping("/dramas/{id}/episodes/{episodeId}")
     @PreAuthorize("@ss.hasPermission('creator-center:drama:edit')")
     @OperationLog(module = "创作者中心", action = "编辑分集")
@@ -92,7 +82,6 @@ public class CreatorContentController {
     }
 
     /** 删除分集。 */
-    @Operation(summary = "删除分集")
     @DeleteMapping("/dramas/{id}/episodes/{episodeId}")
     @PreAuthorize("@ss.hasPermission('creator-center:drama:edit')")
     @OperationLog(module = "创作者中心", action = "删除分集")
@@ -102,7 +91,6 @@ public class CreatorContentController {
     }
 
     /** 批量排序：body 里按新顺序给出分集 id。 */
-    @Operation(summary = "批量排序分集")
     @PutMapping("/dramas/{id}/episodes/sort")
     @PreAuthorize("@ss.hasPermission('creator-center:drama:edit')")
     @OperationLog(module = "创作者中心", action = "调整分集顺序")
@@ -112,7 +100,6 @@ public class CreatorContentController {
     }
 
     /** 提交审核：CREATE / UPDATE / PUBLISH / OFFLINE。 */
-    @Operation(summary = "提交审核（CREATE/UPDATE/PUBLISH/OFFLINE）")
     @PostMapping("/dramas/{id}/submit")
     @PreAuthorize("@ss.hasPermission('creator-center:drama:edit')")
     @OperationLog(module = "创作者中心", action = "提交审核")
@@ -121,7 +108,6 @@ public class CreatorContentController {
     }
 
     /** 撤回自己的提交（撤回后作品退回草稿，可继续编辑）。 */
-    @Operation(summary = "撤回提交（撤回后作品退回草稿）")
     @PostMapping("/submissions/{id}/withdraw")
     @PreAuthorize("@ss.hasPermission('creator-center:drama:edit')")
     @OperationLog(module = "创作者中心", action = "撤回提交")
@@ -130,7 +116,6 @@ public class CreatorContentController {
     }
 
     /** 我的提交历史（审核进度）。 */
-    @Operation(summary = "我的提交历史（审核进度）")
     @GetMapping("/dramas/{id}/submissions")
     @PreAuthorize("@ss.hasPermission('creator-center:view')")
     public Result<List<ContentSubmission>> listSubmissions(@PathVariable Long id) {
@@ -138,7 +123,6 @@ public class CreatorContentController {
     }
 
     /** 把上传好的视频产物挂到自己的分集上（产物必须是本人上传的）。 */
-    @Operation(summary = "挂载分集视频产物（产物必须是本人上传）")
     @PostMapping("/dramas/{id}/episodes/{episodeId}/attach")
     @PreAuthorize("@ss.hasPermission('creator-center:upload')")
     @OperationLog(module = "创作者中心", action = "挂载分集视频")
@@ -149,7 +133,6 @@ public class CreatorContentController {
     }
 
     /** 分集收费与试看秒数：读现状。 */
-    @Operation(summary = "分集收费与试看秒数：读取")
     @GetMapping("/dramas/{id}/prices")
     @PreAuthorize("@ss.hasPermission('creator-center:view')")
     public Result<PriceRespVO> priceDetail(@PathVariable Long id) {
@@ -157,7 +140,6 @@ public class CreatorContentController {
     }
 
     /** 分集收费与试看秒数：保存（复用后台同一套 PriceService，改完立即影响付费判定）。 */
-    @Operation(summary = "分集收费与试看秒数：保存（改完立即影响付费判定）")
     @PutMapping("/dramas/{id}/prices")
     @PreAuthorize("@ss.hasPermission('creator-center:price:update')")
     @OperationLog(module = "创作者中心", action = "配置分集价格")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/DashboardAdminController.java

@@ -1,11 +1,7 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.admin.service.DashboardService;
 import com.fruitshorts.common.pojo.Result;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -20,7 +16,6 @@ import java.util.Map;
  * 指标口径写在 DashboardService 的类注释与 docs/api-phase1.md 里；
  * 取不到数据源的指标返回 null 并在 notes 里说明，不用 0 冒充。
  */
-@Tag(name = "数据看板")
 @RestController
 @RequestMapping("/admin/dashboard")
 @RequiredArgsConstructor
@@ -29,7 +24,6 @@ public class DashboardAdminController {
     private final DashboardService dashboardService;
 
     /** 总览：用户 / 内容 / 播放 / 收入 / 成本。 */
-    @Operation(summary = "总览：用户/内容/播放/收入/成本")
     @GetMapping("/overview")
     @PreAuthorize("@ss.hasPermission('dashboard:view')")
     public Result<Map<String, Object>> overview() {
@@ -37,7 +31,6 @@ public class DashboardAdminController {
     }
 
     /** 转码看板：队列积压与失败任务明细。 */
-    @Operation(summary = "转码看板：队列积压与失败任务明细")
     @GetMapping("/transcode")
     @PreAuthorize("@ss.hasPermission('dashboard:view')")
     public Result<Map<String, Object>> transcode() {

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/DictController.java

@@ -1,13 +1,9 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.content.enums.ContentStatus;
 import com.fruitshorts.content.service.DramaCategoryService;
 import com.fruitshorts.content.vo.DramaCategoryRespVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -21,7 +17,6 @@ import java.util.Map;
 /**
  * 字典接口：题材、内容状态等下拉数据。
  */
-@Tag(name = "数据字典")
 @RestController
 @RequestMapping("/admin/dicts")
 @RequiredArgsConstructor
@@ -29,14 +24,12 @@ public class DictController {
 
     private final DramaCategoryService dramaCategoryService;
 
-    @Operation(summary = "题材字典（下拉数据）")
     @GetMapping("/drama-category")
     @PreAuthorize("@ss.hasPermission('drama:list')")
     public Result<List<DramaCategoryRespVO>> dramaCategories() {
         return Result.ok(dramaCategoryService.list());
     }
 
-    @Operation(summary = "内容状态字典")
     @GetMapping("/content-status")
     @PreAuthorize("@ss.hasPermission('drama:list')")
     public Result<List<Map<String, String>>> contentStatus() {

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/DownloadAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -8,8 +6,6 @@ import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.playback.service.DownloadService;
 import com.fruitshorts.playback.vo.DownloadLicenseRespVO;
 import com.fruitshorts.playback.vo.DownloadQueryReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -22,7 +18,6 @@ import org.springframework.web.bind.annotation.RestController;
 import java.util.Map;
 
 /** 后台下载授权管理。 */
-@Tag(name = "下载管理")
 @RestController
 @RequestMapping("/admin/downloads")
 @RequiredArgsConstructor
@@ -30,14 +25,12 @@ public class DownloadAdminController {
 
     private final DownloadService downloadService;
 
-    @Operation(summary = "下载授权分页检索（含剧名与集号）")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('download:list')")
     public Result<PageResult<DownloadLicenseRespVO>> page(DownloadQueryReqVO req) {
         return Result.ok(downloadService.page(req));
     }
 
-    @Operation(summary = "授权与任务分布统计")
     @GetMapping("/stats")
     @PreAuthorize("@ss.hasPermission('download:list')")
     public Result<Map<String, Object>> stats() {
@@ -45,7 +38,6 @@ public class DownloadAdminController {
     }
 
     /** 吊销单条授权：用户侧下次联网即失效。 */
-    @Operation(summary = "吊销授权（用户侧下次联网即失效）")
     @PutMapping("/{id}/revoke")
     @PreAuthorize("@ss.hasPermission('download:revoke')")
     @OperationLog(module = "下载管理", action = "吊销下载授权")
@@ -55,7 +47,6 @@ public class DownloadAdminController {
     }
 
     /** 手动触发过期清理，正常情况下由定时任务每天执行。 */
-    @Operation(summary = "手动清理过期授权（默认每天凌晨自动执行）")
     @PostMapping("/cleanup")
     @PreAuthorize("@ss.hasPermission('download:revoke')")
     @OperationLog(module = "下载管理", action = "清理过期下载授权")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/DramaCategoryController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -8,8 +6,6 @@ import com.fruitshorts.content.vo.DramaCategoryRespVO;
 import com.fruitshorts.content.vo.DramaCategorySaveReqVO;
 import com.fruitshorts.framework.security.SecurityUtils;
 import com.fruitshorts.framework.log.OperationLog;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -27,7 +23,6 @@ import java.util.List;
 /**
  * 短剧类型管理。类型属于短剧域，权限沿用 drama:*，不再单开权限点。
  */
-@Tag(name = "短剧类型")
 @RestController
 @RequestMapping("/admin/drama-categories")
 @RequiredArgsConstructor
@@ -35,14 +30,12 @@ public class DramaCategoryController {
 
     private final DramaCategoryService dramaCategoryService;
 
-    @Operation(summary = "短剧类型列表")
     @GetMapping
     @PreAuthorize("@ss.hasPermission('drama:list')")
     public Result<List<DramaCategoryRespVO>> list() {
         return Result.ok(dramaCategoryService.list());
     }
 
-    @Operation(summary = "新增短剧类型")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('drama:create')")
     @OperationLog(module = "内容管理", action = "新增短剧类型")
@@ -50,7 +43,6 @@ public class DramaCategoryController {
         return Result.ok(dramaCategoryService.create(req));
     }
 
-    @Operation(summary = "编辑短剧类型")
     @PutMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('drama:update')")
     @OperationLog(module = "内容管理", action = "编辑短剧类型")
@@ -59,7 +51,6 @@ public class DramaCategoryController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除短剧类型")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('drama:delete')")
     @OperationLog(module = "内容管理", action = "删除短剧类型")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/DramaController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -12,8 +10,6 @@ import com.fruitshorts.content.vo.DramaSaveReqVO;
 import com.fruitshorts.content.vo.DramaStatusReqVO;
 import com.fruitshorts.framework.security.SecurityUtils;
 import com.fruitshorts.framework.log.OperationLog;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -28,7 +24,6 @@ import org.springframework.web.bind.annotation.RestController;
 
 import java.util.List;
 
-@Tag(name = "短剧管理")
 @RestController
 @RequestMapping("/admin/dramas")
 @RequiredArgsConstructor
@@ -36,21 +31,18 @@ public class DramaController {
 
     private final DramaService dramaService;
 
-    @Operation(summary = "短剧分页检索（含热门、状态筛选）")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('drama:list')")
     public Result<PageResult<DramaRespVO>> page(DramaPageReqVO req) {
         return Result.ok(dramaService.page(req));
     }
 
-    @Operation(summary = "短剧详情")
     @GetMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('drama:list')")
     public Result<DramaRespVO> get(@PathVariable Long id) {
         return Result.ok(dramaService.get(id));
     }
 
-    @Operation(summary = "新建短剧")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('drama:create')")
     @OperationLog(module = "内容管理", action = "新建短剧")
@@ -58,7 +50,6 @@ public class DramaController {
         return Result.ok(dramaService.create(req, SecurityUtils.getUserId()));
     }
 
-    @Operation(summary = "编辑短剧")
     @PutMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('drama:update')")
     @OperationLog(module = "内容管理", action = "编辑短剧")
@@ -67,7 +58,6 @@ public class DramaController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除短剧")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('drama:delete')")
     @OperationLog(module = "内容管理", action = "删除短剧")
@@ -77,7 +67,6 @@ public class DramaController {
     }
 
     /** 提交审核：内容运营即可操作。 */
-    @Operation(summary = "提交审核")
     @PostMapping("/{id}/submit")
     @PreAuthorize("@ss.hasAnyPermission('drama:review','drama:update')")
     @OperationLog(module = "内容管理", action = "提交审核")
@@ -86,7 +75,6 @@ public class DramaController {
         return Result.ok();
     }
 
-    @Operation(summary = "审核通过")
     @PostMapping("/{id}/approve")
     @PreAuthorize("@ss.hasPermission('drama:review')")
     @OperationLog(module = "内容管理", action = "审核通过")
@@ -95,7 +83,6 @@ public class DramaController {
         return Result.ok();
     }
 
-    @Operation(summary = "驳回短剧")
     @PostMapping("/{id}/reject")
     @PreAuthorize("@ss.hasPermission('drama:review')")
     @OperationLog(module = "内容管理", action = "驳回短剧")
@@ -104,7 +91,6 @@ public class DramaController {
         return Result.ok();
     }
 
-    @Operation(summary = "短剧上线")
     @PostMapping("/{id}/publish")
     @PreAuthorize("@ss.hasPermission('drama:review')")
     @OperationLog(module = "内容管理", action = "短剧上线")
@@ -113,7 +99,6 @@ public class DramaController {
         return Result.ok();
     }
 
-    @Operation(summary = "短剧下线")
     @PostMapping("/{id}/offline")
     @PreAuthorize("@ss.hasPermission('drama:review')")
     @OperationLog(module = "内容管理", action = "短剧下线")
@@ -122,7 +107,6 @@ public class DramaController {
         return Result.ok();
     }
 
-    @Operation(summary = "审核记录")
     @GetMapping("/{id}/review-records")
     @PreAuthorize("@ss.hasPermission('drama:list')")
     public Result<List<DramaReviewRecord>> reviewRecords(@PathVariable Long id) {

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/EntitlementAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.commerce.dal.entity.Entitlement;
@@ -8,8 +6,6 @@ import com.fruitshorts.commerce.vo.EntitlementGrantReqVO;
 import com.fruitshorts.common.pojo.PageResult;
 import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.framework.log.OperationLog;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -23,7 +19,6 @@ import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RestController;
 
 /** 后台权益：检索、人工补发、回收。 */
-@Tag(name = "权益管理")
 @RestController
 @RequestMapping("/admin/entitlements")
 @RequiredArgsConstructor
@@ -31,7 +26,6 @@ public class EntitlementAdminController {
 
     private final EntitlementService entitlementService;
 
-    @Operation(summary = "权益分页检索")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('entitlement:list')")
     public Result<PageResult<Entitlement>> page(@RequestParam(required = false) Long userId,
@@ -43,7 +37,6 @@ public class EntitlementAdminController {
     }
 
     /** 客服补偿：直接给用户某集/整剧的播放权益。 */
-    @Operation(summary = "人工补发权益（客服补偿）")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('entitlement:update')")
     @OperationLog(module = "订单管理", action = "人工补发权益")
@@ -55,7 +48,6 @@ public class EntitlementAdminController {
     }
 
     /** 回收权益：退款、违规处置后用。 */
-    @Operation(summary = "回收权益（退款/违规处置用，播放判定实时生效）")
     @PutMapping("/{id}/revoke")
     @PreAuthorize("@ss.hasPermission('entitlement:update')")
     @OperationLog(module = "订单管理", action = "回收权益")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/EpisodeController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -8,8 +6,6 @@ import com.fruitshorts.content.vo.EpisodeRespVO;
 import com.fruitshorts.content.vo.EpisodeSaveReqVO;
 import com.fruitshorts.content.vo.EpisodeSortReqVO;
 import com.fruitshorts.framework.log.OperationLog;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -25,7 +21,6 @@ import org.springframework.web.bind.annotation.RestController;
 
 import java.util.List;
 
-@Tag(name = "剧集管理")
 @RestController
 @RequestMapping("/admin/episodes")
 @RequiredArgsConstructor
@@ -33,7 +28,6 @@ public class EpisodeController {
 
     private final EpisodeService episodeService;
 
-    @Operation(summary = "某剧分集列表")
     @GetMapping
     @PreAuthorize("@ss.hasPermission('episode:list')")
     public Result<List<EpisodeRespVO>> list(@RequestParam Long dramaId,
@@ -41,7 +35,6 @@ public class EpisodeController {
         return Result.ok(episodeService.listByDrama(dramaId, status));
     }
 
-    @Operation(summary = "新增分集")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('episode:upload')")
     @OperationLog(module = "内容管理", action = "新增剧集")
@@ -49,7 +42,6 @@ public class EpisodeController {
         return Result.ok(episodeService.create(req));
     }
 
-    @Operation(summary = "编辑分集")
     @PutMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('episode:upload')")
     @OperationLog(module = "内容管理", action = "编辑剧集")
@@ -58,7 +50,6 @@ public class EpisodeController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除分集")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('episode:upload')")
     @OperationLog(module = "内容管理", action = "删除剧集")
@@ -67,7 +58,6 @@ public class EpisodeController {
         return Result.ok();
     }
 
-    @Operation(summary = "批量排序分集")
     @PutMapping("/sort")
     @PreAuthorize("@ss.hasPermission('episode:sort')")
     @OperationLog(module = "内容管理", action = "调整剧集顺序")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/MediaController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -11,8 +9,6 @@ import com.fruitshorts.media.vo.UploadCompleteReqVO;
 import com.fruitshorts.media.vo.UploadInitReqVO;
 import com.fruitshorts.media.vo.UploadInitRespVO;
 import com.fruitshorts.media.vo.UploadProgressRespVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -28,7 +24,6 @@ import org.springframework.web.multipart.MultipartFile;
 /**
  * 媒资上传（本地存储版）：init 建会话 → chunk 传分片 → complete 合并出地址。
  */
-@Tag(name = "媒资上传")
 @RestController
 @RequestMapping("/admin/media")
 @RequiredArgsConstructor
@@ -36,7 +31,6 @@ public class MediaController {
 
     private final MediaService mediaService;
 
-    @Operation(summary = "建上传会话（返回 uploadId / chunkSize / totalChunks）")
     @PostMapping("/upload/init")
     @PreAuthorize("@ss.hasAnyPermission('cover:upload','episode:upload')")
     public Result<UploadInitRespVO> init(@Valid @RequestBody UploadInitReqVO req) {
@@ -45,7 +39,6 @@ public class MediaController {
         return Result.ok(mediaService.init(req, SecurityUtils.getUserId()));
     }
 
-    @Operation(summary = "上传分片（可重复传同一片）")
     @PostMapping("/upload/chunk")
     @PreAuthorize("@ss.hasAnyPermission('cover:upload','episode:upload')")
     public Result<Integer> uploadChunk(@RequestParam String uploadId,
@@ -56,7 +49,6 @@ public class MediaController {
         return Result.ok(index);
     }
 
-    @Operation(summary = "合并分片出媒资（同一 uploadId 幂等）")
     @PostMapping("/upload/complete")
     @PreAuthorize("@ss.hasAnyPermission('cover:upload','episode:upload')")
     public Result<MediaAssetRespVO> complete(@Valid @RequestBody UploadCompleteReqVO req) {
@@ -65,14 +57,12 @@ public class MediaController {
     }
 
     /** 断点续传：查上传会话进度（只能查自己发起的会话）。 */
-    @Operation(summary = "断点续传进度查询（只能查自己发起的会话）")
     @GetMapping("/upload/{uploadId}")
     @PreAuthorize("@ss.hasAnyPermission('cover:upload','episode:upload')")
     public Result<UploadProgressRespVO> progress(@PathVariable String uploadId) {
         return Result.ok(mediaService.progress(uploadId, SecurityUtils.getUserId()));
     }
 
-    @Operation(summary = "媒资详情")
     @GetMapping("/{id}")
     @PreAuthorize("@ss.hasAnyPermission('cover:upload','episode:upload')")
     public Result<MediaAssetRespVO> get(@PathVariable Long id) {

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/MenuController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -7,8 +5,6 @@ import com.fruitshorts.system.service.MenuService;
 import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.system.vo.MenuSaveReqVO;
 import com.fruitshorts.system.vo.MenuVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -23,7 +19,6 @@ import org.springframework.web.bind.annotation.RestController;
 
 import java.util.List;
 
-@Tag(name = "菜单管理")
 @RestController
 @RequestMapping("/admin/menus")
 @RequiredArgsConstructor
@@ -31,14 +26,12 @@ public class MenuController {
 
     private final MenuService menuService;
 
-    @Operation(summary = "菜单树")
     @GetMapping("/tree")
     @PreAuthorize("@ss.hasPermission('system:menu')")
     public Result<List<MenuVO>> tree() {
         return Result.ok(menuService.listAll());
     }
 
-    @Operation(summary = "新增菜单")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('system:menu')")
     @OperationLog(module = "后台管理", action = "新增菜单")
@@ -46,7 +39,6 @@ public class MenuController {
         return Result.ok(menuService.create(req));
     }
 
-    @Operation(summary = "编辑菜单")
     @PutMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:menu')")
     @OperationLog(module = "后台管理", action = "编辑菜单")
@@ -55,7 +47,6 @@ public class MenuController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除菜单")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:menu')")
     @OperationLog(module = "后台管理", action = "删除菜单")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/OperationLogController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -7,8 +5,6 @@ import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.system.service.OperationLogService;
 import com.fruitshorts.system.vo.OperationLogPageReqVO;
 import com.fruitshorts.system.vo.OperationLogRespVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -16,7 +12,6 @@ import org.springframework.web.bind.annotation.PathVariable;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
-@Tag(name = "操作日志")
 @RestController
 @RequestMapping("/admin/operation-logs")
 @RequiredArgsConstructor
@@ -24,14 +19,12 @@ public class OperationLogController {
 
     private final OperationLogService operationLogService;
 
-    @Operation(summary = "操作日志分页检索")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('log:list')")
     public Result<PageResult<OperationLogRespVO>> page(OperationLogPageReqVO req) {
         return Result.ok(operationLogService.page(req));
     }
 
-    @Operation(summary = "操作日志详情")
     @GetMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('log:list')")
     public Result<OperationLogRespVO> get(@PathVariable Long id) {

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/OrderAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.commerce.dal.entity.OrderEvent;
@@ -10,8 +8,6 @@ import com.fruitshorts.common.pojo.PageResult;
 import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.framework.security.SecurityUtils;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -26,7 +22,6 @@ import java.util.List;
 import java.util.Map;
 
 /** 后台订单：检索、补发、退款回收。 */
-@Tag(name = "订单管理")
 @RestController
 @RequestMapping("/admin/orders")
 @RequiredArgsConstructor
@@ -34,14 +29,12 @@ public class OrderAdminController {
 
     private final OrderService orderService;
 
-    @Operation(summary = "订单分页检索")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('order:list')")
     public Result<PageResult<Orders>> page(OrderQueryReqVO req) {
         return Result.ok(orderService.page(req));
     }
 
-    @Operation(summary = "订单详情")
     @GetMapping("/{orderNo}")
     @PreAuthorize("@ss.hasPermission('order:list')")
     public Result<Orders> detail(@PathVariable String orderNo) {
@@ -49,7 +42,6 @@ public class OrderAdminController {
     }
 
     /** 订单状态流转流水：支付争议时的证据链。 */
-    @Operation(summary = "订单状态流转流水（支付争议证据链）")
     @GetMapping("/{orderNo}/events")
     @PreAuthorize("@ss.hasPermission('order:list')")
     public Result<List<OrderEvent>> events(@PathVariable String orderNo) {
@@ -57,7 +49,6 @@ public class OrderAdminController {
     }
 
     /** 补发：已支付未交付的订单重新交付；已交付时幂等返回。 */
-    @Operation(summary = "订单补发（已交付时幂等返回）")
     @PostMapping("/{orderNo}/compensate")
     @PreAuthorize("@ss.hasPermission('order:update')")
     @OperationLog(module = "订单管理", action = "补发订单")
@@ -66,7 +57,6 @@ public class OrderAdminController {
     }
 
     /** 退款/撤销：回收权益并扣回金币。 */
-    @Operation(summary = "订单退款/撤销（回收权益并扣回金币）")
     @PostMapping("/{orderNo}/refund")
     @PreAuthorize("@ss.hasPermission('order:update')")
     @OperationLog(module = "订单管理", action = "订单退款")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/PermissionController.java

@@ -1,12 +1,8 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.system.service.PermissionService;
 import com.fruitshorts.system.vo.PermissionGroupVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -15,7 +11,6 @@ import org.springframework.web.bind.annotation.RestController;
 
 import java.util.List;
 
-@Tag(name = "权限管理")
 @RestController
 @RequestMapping("/admin/permissions")
 @RequiredArgsConstructor
@@ -24,7 +19,6 @@ public class PermissionController {
     private final PermissionService permissionService;
 
     /** 按分组返回权限点，直接喂给前端的角色权限配置页。 */
-    @Operation(summary = "权限点分组列表（角色权限配置页用）")
     @GetMapping
     @PreAuthorize("@ss.hasPermission('system:role')")
     public Result<List<PermissionGroupVO>> groups() {

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/PriceAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -7,8 +5,6 @@ import com.fruitshorts.content.service.PriceService;
 import com.fruitshorts.content.vo.PriceRespVO;
 import com.fruitshorts.content.vo.PriceSaveReqVO;
 import com.fruitshorts.framework.log.OperationLog;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.PutMapping;
@@ -19,7 +15,6 @@ import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RestController;
 
 /** 后台分集价格与免费集配置。 */
-@Tag(name = "分集价格")
 @RestController
 @RequestMapping("/admin/prices")
 @RequiredArgsConstructor
@@ -28,14 +23,12 @@ public class PriceAdminController {
     private final PriceService priceService;
 
     /** 当前价格配置：整剧默认 + 分集明细。 */
-    @Operation(summary = "当前价格配置：整剧默认 + 分集明细")
     @GetMapping
     @PreAuthorize("@ss.hasPermission('price:update')")
     public Result<PriceRespVO> detail(@RequestParam Long dramaId) {
         return Result.ok(priceService.detail(dramaId));
     }
 
-    @Operation(summary = "保存价格配置（改价立即影响播放与下载判定）")
     @PutMapping
     @PreAuthorize("@ss.hasPermission('price:update')")
     @OperationLog(module = "定价管理", action = "配置分集价格")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/ReconcileAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.commerce.dal.entity.ReconcileTask;
@@ -7,8 +5,6 @@ import com.fruitshorts.commerce.service.ReconcileService;
 import com.fruitshorts.common.pojo.PageResult;
 import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.framework.log.OperationLog;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -20,7 +16,6 @@ import org.springframework.web.bind.annotation.RestController;
 import java.time.LocalDate;
 
 /** 后台对账：手动触发与历史查看。 */
-@Tag(name = "对账管理")
 @RestController
 @RequestMapping("/admin/reconcile")
 @RequiredArgsConstructor
@@ -28,7 +23,6 @@ public class ReconcileAdminController {
 
     private final ReconcileService reconcileService;
 
-    @Operation(summary = "对账历史分页")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('order:list')")
     public Result<PageResult<ReconcileTask>> page(@RequestParam(defaultValue = "1") Integer pageIndex,
@@ -37,7 +31,6 @@ public class ReconcileAdminController {
     }
 
     /** 手动对账：默认前一天，可指定日期与渠道。 */
-    @Operation(summary = "手动对账（默认前一天，可指定日期与渠道）")
     @PostMapping("/run")
     @PreAuthorize("@ss.hasPermission('reconcile:run')")
     @OperationLog(module = "订单管理", action = "手动对账")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/ReportAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -10,8 +8,6 @@ import com.fruitshorts.interaction.dal.entity.ContentReport;
 import com.fruitshorts.interaction.service.ReportService;
 import com.fruitshorts.interaction.vo.ReportHandleReqVO;
 import com.fruitshorts.interaction.vo.ReportQueryReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -22,7 +18,6 @@ import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
 /** 后台举报工单。 */
-@Tag(name = "举报工单")
 @RestController
 @RequestMapping("/admin/reports")
 @RequiredArgsConstructor
@@ -30,7 +25,6 @@ public class ReportAdminController {
 
     private final ReportService reportService;
 
-    @Operation(summary = "举报工单检索（状态/类型/原因）")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('report:list')")
     public Result<PageResult<ContentReport>> page(ReportQueryReqVO req) {
@@ -38,7 +32,6 @@ public class ReportAdminController {
     }
 
     /** 处理工单：结论成立会联动驳回被举报评论，可选择同时封禁被举报用户。 */
-    @Operation(summary = "处理工单（结论成立联动驳回被举报评论，可选择同时封禁用户）")
     @PutMapping("/{id}/handle")
     @PreAuthorize("@ss.hasPermission('report:handle')")
     @OperationLog(module = "内容治理", action = "处理举报")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/RoleCategoryController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -7,8 +5,6 @@ import com.fruitshorts.system.service.RoleCategoryService;
 import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.system.vo.RoleCategoryRespVO;
 import com.fruitshorts.system.vo.RoleCategorySaveReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -23,7 +19,6 @@ import org.springframework.web.bind.annotation.RestController;
 
 import java.util.List;
 
-@Tag(name = "角色分类")
 @RestController
 @RequestMapping("/admin/role-categories")
 @RequiredArgsConstructor
@@ -31,14 +26,12 @@ public class RoleCategoryController {
 
     private final RoleCategoryService roleCategoryService;
 
-    @Operation(summary = "角色分类列表")
     @GetMapping
     @PreAuthorize("@ss.hasPermission('system:role-category')")
     public Result<List<RoleCategoryRespVO>> list() {
         return Result.ok(roleCategoryService.list());
     }
 
-    @Operation(summary = "新增角色分类")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('system:role-category')")
     @OperationLog(module = "后台管理", action = "新增角色分类")
@@ -46,7 +39,6 @@ public class RoleCategoryController {
         return Result.ok(roleCategoryService.create(req));
     }
 
-    @Operation(summary = "编辑角色分类")
     @PutMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:role-category')")
     @OperationLog(module = "后台管理", action = "编辑角色分类")
@@ -55,7 +47,6 @@ public class RoleCategoryController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除角色分类")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:role-category')")
     @OperationLog(module = "后台管理", action = "删除角色分类")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/RoleController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -9,8 +7,6 @@ import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.system.vo.RolePermissionSaveReqVO;
 import com.fruitshorts.system.vo.RoleRespVO;
 import com.fruitshorts.system.vo.RoleSaveReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -26,7 +22,6 @@ import org.springframework.web.bind.annotation.RestController;
 
 import java.util.List;
 
-@Tag(name = "角色管理")
 @RestController
 @RequestMapping("/admin/roles")
 @RequiredArgsConstructor
@@ -34,7 +29,6 @@ public class RoleController {
 
     private final RoleService roleService;
 
-    @Operation(summary = "角色分页检索")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('system:role')")
     public Result<PageResult<RoleRespVO>> page(@RequestParam(required = false) String keyword,
@@ -43,20 +37,17 @@ public class RoleController {
         return Result.ok(roleService.page(keyword, pageIndex, pageSize));
     }
 
-    @Operation(summary = "角色全量列表")
     @GetMapping("/list")
     public Result<List<RoleRespVO>> list() {
         return Result.ok(roleService.listAll());
     }
 
-    @Operation(summary = "角色详情")
     @GetMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:role')")
     public Result<RoleRespVO> get(@PathVariable Long id) {
         return Result.ok(roleService.get(id));
     }
 
-    @Operation(summary = "新增角色")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('system:role')")
     @OperationLog(module = "后台管理", action = "新增角色")
@@ -64,7 +55,6 @@ public class RoleController {
         return Result.ok(roleService.create(req));
     }
 
-    @Operation(summary = "编辑角色")
     @PutMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:role')")
     @OperationLog(module = "后台管理", action = "编辑角色")
@@ -73,7 +63,6 @@ public class RoleController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除角色")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('system:role')")
     @OperationLog(module = "后台管理", action = "删除角色")
@@ -82,14 +71,12 @@ public class RoleController {
         return Result.ok();
     }
 
-    @Operation(summary = "查询角色权限码")
     @GetMapping("/{id}/permissions")
     @PreAuthorize("@ss.hasPermission('system:role')")
     public Result<List<String>> permissions(@PathVariable Long id) {
         return Result.ok(roleService.listCodesByRoleId(id));
     }
 
-    @Operation(summary = "保存角色权限")
     @PutMapping("/{id}/permissions")
     @PreAuthorize("@ss.hasPermission('system:role')")
     @OperationLog(module = "后台管理", action = "修改角色权限")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/SensitiveWordAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -8,8 +6,6 @@ import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.interaction.dal.entity.SensitiveWord;
 import com.fruitshorts.interaction.service.SensitiveWordService;
 import com.fruitshorts.interaction.vo.SensitiveWordReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -24,7 +20,6 @@ import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RestController;
 
 /** 后台敏感词库。改动即时生效（服务端词库缓存会失效重建）。 */
-@Tag(name = "敏感词")
 @RestController
 @RequestMapping("/admin/sensitive-words")
 @RequiredArgsConstructor
@@ -32,7 +27,6 @@ public class SensitiveWordAdminController {
 
     private final SensitiveWordService sensitiveWordService;
 
-    @Operation(summary = "敏感词分页检索")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('sensitive-word:list')")
     public Result<PageResult<SensitiveWord>> page(@RequestParam(required = false) String keyword,
@@ -43,7 +37,6 @@ public class SensitiveWordAdminController {
         return Result.ok(sensitiveWordService.page(keyword, category, level, pageIndex, pageSize));
     }
 
-    @Operation(summary = "新增敏感词")
     @PostMapping
     @PreAuthorize("@ss.hasPermission('sensitive-word:update')")
     @OperationLog(module = "内容治理", action = "新增敏感词")
@@ -51,7 +44,6 @@ public class SensitiveWordAdminController {
         return Result.ok(sensitiveWordService.create(req));
     }
 
-    @Operation(summary = "修改敏感词")
     @PutMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('sensitive-word:update')")
     @OperationLog(module = "内容治理", action = "修改敏感词")
@@ -60,7 +52,6 @@ public class SensitiveWordAdminController {
         return Result.ok();
     }
 
-    @Operation(summary = "删除敏感词")
     @DeleteMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('sensitive-word:update')")
     @OperationLog(module = "内容治理", action = "删除敏感词")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/SubmissionAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.common.pojo.PageResult;
@@ -10,8 +8,6 @@ import com.fruitshorts.creator.vo.SubmissionAuditReqVO;
 import com.fruitshorts.creator.vo.SubmissionQueryReqVO;
 import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.framework.security.SecurityUtils;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -22,7 +18,6 @@ import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
 /** 后台内容提交审核：检索、详情、审核（通过 / 驳回 / 撤回）。 */
-@Tag(name = "内容提交审核")
 @RestController
 @RequestMapping("/admin/submissions")
 @RequiredArgsConstructor
@@ -30,21 +25,18 @@ public class SubmissionAdminController {
 
     private final ContentSubmissionService submissionService;
 
-    @Operation(summary = "内容提交分页检索")
     @GetMapping("/page")
     @PreAuthorize("@ss.hasPermission('submission:list')")
     public Result<PageResult<ContentSubmission>> page(SubmissionQueryReqVO req) {
         return Result.ok(submissionService.page(req));
     }
 
-    @Operation(summary = "内容提交详情")
     @GetMapping("/{id}")
     @PreAuthorize("@ss.hasPermission('submission:list')")
     public Result<ContentSubmission> detail(@PathVariable Long id) {
         return Result.ok(submissionService.getExisting(id));
     }
 
-    @Operation(summary = "审核内容提交（通过后按类型落短剧状态机）")
     @PutMapping("/{id}/audit")
     @PreAuthorize("@ss.hasPermission('submission:audit')")
     @OperationLog(module = "内容审核", action = "提交审核")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/controller/WalletAdminController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.controller;
 
 import com.fruitshorts.commerce.dal.entity.CoinLedger;
@@ -11,8 +9,6 @@ import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.framework.log.OperationLog;
 import com.fruitshorts.framework.security.SecurityUtils;
 import com.fruitshorts.user.dal.mapper.AppUserMapper;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -27,7 +23,6 @@ import org.springframework.web.bind.annotation.RestController;
 import java.util.List;
 
 /** 后台钱包：人工补币/扣回，全部进流水且必须带幂等键。 */
-@Tag(name = "钱包管理")
 @RestController
 @RequestMapping("/admin/wallets")
 @RequiredArgsConstructor
@@ -36,7 +31,6 @@ public class WalletAdminController {
     private final WalletService walletService;
     private final AppUserMapper appUserMapper;
 
-    @Operation(summary = "金币流水查询")
     @GetMapping("/{userId}/ledger")
     @PreAuthorize("@ss.hasPermission('order:list')")
     public Result<List<CoinLedger>> ledger(@PathVariable Long userId,
@@ -44,7 +38,6 @@ public class WalletAdminController {
         return Result.ok(walletService.recentLedger(userId, limit));
     }
 
-    @Operation(summary = "人工补币/扣回（必须带幂等键，先校验用户存在）")
     @PostMapping("/coins")
     @PreAuthorize("@ss.hasPermission('wallet:update')")
     @OperationLog(module = "订单管理", action = "人工补币")

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/service/CreatorDashboardService.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.service;
 
 import com.baomidou.mybatisplus.core.toolkit.Wrappers;

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/service/DashboardService.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.service;
 
 import com.baomidou.mybatisplus.core.toolkit.Wrappers;

fruitshorts-admin-api/src/main/java/com/fruitshorts/admin/vo/AppUserWatchHistoryVO.java

@@ -1,8 +1,5 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.admin.vo;
 
-import io.swagger.v3.oas.annotations.media.Schema;
 import lombok.Data;
 
 import java.time.LocalDateTime;
@@ -16,30 +13,18 @@ import java.time.LocalDateTime;
 @Data
 public class AppUserWatchHistoryVO {
 
-    @Schema(description = "ID")
     private Long id;
-    @Schema(description = "短剧 ID")
     private Long dramaId;
-    @Schema(description = "剧名")
     private String dramaTitle;
     /** 短剧当前是否已上线，用于识别"用户说看了但剧已下线"的情况 */
-    @Schema(description = "短剧当前是否已上线")
     private Boolean dramaPublished;
-    @Schema(description = "剧集 ID")
     private Long episodeId;
-    @Schema(description = "集号")
     private Integer episodeNo;
-    @Schema(description = "播放进度（毫秒）")
     private Long positionMs;
-    @Schema(description = "时长（毫秒）")
     private Long durationMs;
     /** 是否已看完（进度到达片尾 1 秒内） */
-    @Schema(description = "是否已看完")
     private Boolean finished;
-    @Schema(description = "来源")
     private String source;
-    @Schema(description = "设备 ID")
     private String deviceId;
-    @Schema(description = "观看时间")
     private LocalDateTime watchedAt;
 }

fruitshorts-admin-api/src/main/resources/application.yml

@@ -1,5 +1,3 @@
-# Author: fruit.com.cn
-
 server:
   port: 8080
 
@@ -28,10 +26,15 @@ mybatis-plus:
   global-config:
     banner: false
     db-config:
+      # 主键由应用侧雪花算法生成（S0），数据库不再自增
       id-type: assign_id
       logic-delete-field: deleted
       logic-delete-value: 1
       logic-not-delete-value: 0
+    sequence:
+      # 单机开发用固定值；上多实例前必须改成按实例分配（环境变量注入），否则会撞 ID
+      worker-id: 1
+      datacenter-id: 1
 
 fruitshorts:
   media:
@@ -53,15 +56,3 @@ springdoc:
 logging:
   level:
     com.fruitshorts: debug
-
-management:
-  endpoints:
-    web:
-      exposure:
-        include: prometheus,health
-  endpoint:
-    health:
-      show-details: always
-  metrics:
-    tags:
-      application: ${spring.application.name}

fruitshorts-app-api/pom.xml

@@ -1,6 +1,4 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<!-- Author: fruit.com.cn -->
-
 <project xmlns="http://maven.apache.org/POM/4.0.0"
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
@@ -41,6 +39,12 @@
             <groupId>com.fruitshorts</groupId>
             <artifactId>fruitshorts-module-commerce</artifactId>
         </dependency>
+        <!-- 契约测试用：MockMvc + Mockito + JUnit5，test scope，不进运行态依赖 -->
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-test</artifactId>
+            <scope>test</scope>
+        </dependency>
     </dependencies>
 
     <build>

fruitshorts-app-api/src/main/java/com/fruitshorts/app/AppApiApplication.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app;
 
 import org.mybatis.spring.annotation.MapperScan;

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppAuthController.java

@@ -1,9 +1,6 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.common.pojo.Result;
-import com.fruitshorts.framework.redis.RateLimit;
 import com.fruitshorts.framework.security.SecurityUtils;
 import com.fruitshorts.framework.web.WebUtils;
 import com.fruitshorts.user.service.AppAuthService;
@@ -14,8 +11,6 @@ import com.fruitshorts.user.vo.OtpSendReqVO;
 import com.fruitshorts.user.vo.RefreshReqVO;
 import com.fruitshorts.user.vo.RegisterReqVO;
 import com.fruitshorts.user.vo.TokenRespVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
@@ -25,7 +20,6 @@ import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
 /** 客户端账号：验证码、注册、登录、刷新、登出。 */
-@Tag(name = "账号")
 @RestController
 @RequestMapping("/app/auth")
 @RequiredArgsConstructor
@@ -35,37 +29,30 @@ public class AppAuthController {
     private final AppAuthService authService;
 
     /** 发送验证码。频控在服务端，客户端不需要自己限流。 */
-    @Operation(summary = "发送验证码（注册/登录/找回密码，服务端频控）")
-    @RateLimit(limit = 20, windowSeconds = 60, key = "otp")
     @PostMapping("/otp")
     public Result<Void> sendOtp(@Valid @RequestBody OtpSendReqVO req, HttpServletRequest request) {
         otpService.send(req, WebUtils.getClientIp(request));
         return Result.ok();
     }
 
-    @Operation(summary = "注册账号（手机号/邮箱 + 验证码），返回令牌")
     @PostMapping("/register")
     public Result<TokenRespVO> register(@Valid @RequestBody RegisterReqVO req,
                                         HttpServletRequest request) {
         return Result.ok(authService.register(req, WebUtils.getClientIp(request)));
     }
 
-    @Operation(summary = "登录（验证码或密码），返回令牌")
-    @RateLimit(limit = 10, windowSeconds = 60, key = "login")
     @PostMapping("/login")
     public Result<TokenRespVO> login(@Valid @RequestBody LoginReqVO req,
                                      HttpServletRequest request) {
         return Result.ok(authService.login(req, WebUtils.getClientIp(request)));
     }
 
-    @Operation(summary = "刷新令牌（refresh token 轮换）")
     @PostMapping("/refresh")
     public Result<TokenRespVO> refresh(@Valid @RequestBody RefreshReqVO req) {
         return Result.ok(authService.refresh(req.getRefreshToken()));
     }
 
     /** 登出：默认只吊销当前设备的会话，allDevices=true 时吊销全部。 */
-    @Operation(summary = "登出（allDevices=true 时吊销全部设备会话）")
     @PostMapping("/logout")
     public Result<Void> logout(@RequestBody(required = false) LogoutReqVO req) {
         authService.logout(SecurityUtils.getUserIdOrNull(), req == null ? new LogoutReqVO() : req);

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppCatalogController.java

@@ -1,13 +1,9 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.app.service.AppCatalogService;
 import com.fruitshorts.app.vo.AppCategoryVO;
 import com.fruitshorts.app.vo.AppFeedVO;
 import com.fruitshorts.common.pojo.Result;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
@@ -18,7 +14,6 @@ import java.util.List;
 /**
  * 客户端目录接口：首页与发现页各一次请求拿全量聚合数据。
  */
-@Tag(name = "内容浏览")
 @RestController
 @RequestMapping("/app")
 @RequiredArgsConstructor
@@ -26,19 +21,16 @@ public class AppCatalogController {
 
     private final AppCatalogService appCatalogService;
 
-    @Operation(summary = "首页聚合数据（轮播 + 分区卡片，卡片带预览集）")
     @GetMapping("/home/feed")
     public Result<AppFeedVO> homeFeed() {
         return Result.ok(appCatalogService.homeFeed());
     }
 
-    @Operation(summary = "发现页聚合数据")
     @GetMapping("/discover/feed")
     public Result<AppFeedVO> discoverFeed() {
         return Result.ok(appCatalogService.discoverFeed());
     }
 
-    @Operation(summary = "分类列表")
     @GetMapping("/categories")
     public Result<List<AppCategoryVO>> categories() {
         return Result.ok(appCatalogService.categories());

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppCommentController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.common.pojo.CursorResult;
@@ -10,8 +8,6 @@ import com.fruitshorts.interaction.service.CommentService;
 import com.fruitshorts.interaction.vo.CommentPublishReqVO;
 import com.fruitshorts.interaction.vo.CommentQueryReqVO;
 import com.fruitshorts.interaction.vo.CommentRespVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
@@ -31,7 +27,6 @@ import org.springframework.web.bind.annotation.RestController;
  * 不传 `rootId` 时返回顶层评论，传了则返回该楼层的回复。
  * 列表允许匿名浏览；发布与删除需要登录。
  */
-@Tag(name = "评论")
 @RestController
 @RequestMapping("/app/comments")
 @RequiredArgsConstructor
@@ -39,7 +34,6 @@ public class AppCommentController {
 
     private final CommentService commentService;
 
-    @Operation(summary = "发表评论或回复（敏感词处置后按策略发布或转待审）")
     @PostMapping
     public Result<CommentRespVO> publish(@Valid @RequestBody CommentPublishReqVO req,
                                          HttpServletRequest request) {
@@ -47,7 +41,6 @@ public class AppCommentController {
                 WebUtils.getClientIp(request), request.getHeader("X-Device-Id")));
     }
 
-    @Operation(summary = "评论列表（游标翻页；不传 rootId 为顶层评论，传了为楼层回复）")
     @GetMapping
     public Result<CursorResult<CommentRespVO>> page(@RequestParam Long dramaId,
                                                     @RequestParam(required = false) Long episodeId,
@@ -63,7 +56,6 @@ public class AppCommentController {
         return Result.ok(commentService.page(SecurityUtils.getUserIdOrNull(), query));
     }
 
-    @Operation(summary = "删除自己的评论（逻辑删除）")
     @DeleteMapping("/{id}")
     public Result<Void> delete(@PathVariable Long id) {
         commentService.delete(SecurityUtils.getAppUserId(), id);

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppCommerceController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.commerce.dal.entity.Orders;
@@ -8,8 +6,6 @@ import com.fruitshorts.commerce.service.UnlockService;
 import com.fruitshorts.commerce.service.WalletService;
 import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.framework.security.SecurityUtils;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PathVariable;
@@ -28,7 +24,6 @@ import java.util.Map;
  * 金币解锁是第一阶段真实的收费方式；真实商店购买走 {@code /app/orders/verify}，
  * 本轮只预留接口（商店未接入时返回明确业务提示，不会产生假订单）。
  */
-@Tag(name = "金币与订单")
 @RestController
 @RequestMapping("/app")
 @RequiredArgsConstructor
@@ -39,7 +34,6 @@ public class AppCommerceController {
     private final OrderService orderService;
 
     /** 我的钱包：余额 + 最近流水，客户端一处渲染。 */
-    @Operation(summary = "我的钱包：金币余额 + 最近流水")
     @GetMapping("/wallet")
     public Result<Map<String, Object>> wallet() {
         Long userId = SecurityUtils.getAppUserId();
@@ -50,25 +44,20 @@ public class AppCommerceController {
     }
 
     /** 金币解锁分集：幂等，重复点击不会重复扣币。 */
-    @Operation(summary = "金币解锁分集（幂等，重复调用不重复扣币）")
     @PostMapping("/episodes/{episodeId}/unlock")
     public Result<Map<String, Object>> unlock(@PathVariable Long episodeId) {
         return Result.ok(unlockService.unlock(SecurityUtils.getAppUserId(), episodeId));
     }
 
-    @Operation(summary = "我的订单列表")
     @GetMapping("/orders")
     public Result<List<Orders>> orders() {
         return Result.ok(orderService.listByUser(SecurityUtils.getAppUserId()));
     }
 
     /** 提交商店票据。第一阶段商店未接入，会返回明确的"尚未配置"。 */
-    @Operation(summary = "提交商店票据（IAP/Google Play；商店未接入时返回明确业务提示）")
     @PostMapping("/orders/verify")
     public Result<Orders> verify(@RequestBody Map<String, String> body) {
         return Result.ok(orderService.verifyAndDeliver(SecurityUtils.getAppUserId(),
-                body.getOrDefault("platform", ""),
-                body.getOrDefault("productId", ""),
-                body.getOrDefault("receipt", "")));
+                body.getOrDefault("platform", ""), body.getOrDefault("receipt", "")));
     }
 }

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppDownloadController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -10,8 +8,6 @@ import com.fruitshorts.playback.vo.DownloadLicenseRespVO;
 import com.fruitshorts.playback.vo.DownloadPolicyRespVO;
 import com.fruitshorts.playback.vo.DownloadProgressReqVO;
 import com.fruitshorts.playback.vo.DownloadSettingReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
@@ -33,7 +29,6 @@ import java.util.List;
  * <p>服务端只发授权与地址，分片由客户端向 CDN 拉取；进度上报用于断点续传与跨端展示。
  * 设备标识优先取请求体，其次取请求头 X-Device-Id。
  */
-@Tag(name = "离线下载")
 @RestController
 @RequestMapping("/app/downloads")
 @RequiredArgsConstructor
@@ -42,7 +37,6 @@ public class AppDownloadController {
     private final DownloadService downloadService;
 
     /** 申请下载授权（同一剧集重复申请幂等，只刷新有效期）。 */
-    @Operation(summary = "申请下载授权（同剧集重复申请幂等，只刷新有效期）")
     @PostMapping
     public Result<DownloadLicenseRespVO> grant(@Valid @RequestBody DownloadGrantReqVO req,
                                                HttpServletRequest request) {
@@ -50,20 +44,17 @@ public class AppDownloadController {
                 request.getHeader("X-Device-Id")));
     }
 
-    @Operation(summary = "下载列表（授权 + 任务进度，可直接渲染）")
     @GetMapping
     public Result<List<DownloadLicenseRespVO>> list(@RequestParam(required = false) String deviceId) {
         return Result.ok(downloadService.list(SecurityUtils.getAppUserId(), deviceId));
     }
 
-    @Operation(summary = "下载策略与配额（单设备上限/授权天数/仅 Wi-Fi/清晰度上限）")
     @GetMapping("/policy")
     public Result<DownloadPolicyRespVO> policy(@RequestParam(required = false) String deviceId) {
         return Result.ok(downloadService.policy(SecurityUtils.getAppUserId(), deviceId));
     }
 
     /** 仅 Wi-Fi 下载、清晰度上限等偏好。 */
-    @Operation(summary = "更新下载偏好（仅 Wi-Fi 下载、最高清晰度）")
     @PutMapping("/settings")
     public Result<Void> updateSettings(@RequestBody DownloadSettingReqVO req) {
         downloadService.updateSettings(SecurityUtils.getAppUserId(), req);
@@ -71,7 +62,6 @@ public class AppDownloadController {
     }
 
     /** 断点续传前重新取一次地址：授权不变，只有地址是短时效的。 */
-    @Operation(summary = "断点续传前重新获取下载地址（授权不变，地址短时效）")
     @GetMapping("/{episodeId}/url")
     public Result<DownloadLicenseRespVO> refreshUrl(@PathVariable Long episodeId,
                                                     HttpServletRequest request) {
@@ -79,7 +69,6 @@ public class AppDownloadController {
                 request.getHeader("X-Device-Id")));
     }
 
-    @Operation(summary = "上报下载进度（用于断点续传与跨端展示）")
     @PostMapping("/{episodeId}/progress")
     public Result<DownloadLicenseRespVO> reportProgress(@PathVariable Long episodeId,
                                                         @RequestBody DownloadProgressReqVO req,
@@ -88,7 +77,6 @@ public class AppDownloadController {
                 request.getHeader("X-Device-Id")));
     }
 
-    @Operation(summary = "删除单条下载（吊销授权）")
     @DeleteMapping("/{episodeId}")
     public Result<Void> revoke(@PathVariable Long episodeId,
                                @RequestParam(required = false) String deviceId,
@@ -99,7 +87,6 @@ public class AppDownloadController {
     }
 
     /** 清空当前设备的全部下载授权。 */
-    @Operation(summary = "清空当前设备全部下载（返回清除条数）")
     @DeleteMapping
     public Result<Integer> clear(@RequestParam(required = false) String deviceId,
                                  HttpServletRequest request) {

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppDramaController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.app.service.AppCatalogService;
@@ -9,8 +7,6 @@ import com.fruitshorts.framework.security.SecurityUtils;
 import com.fruitshorts.framework.web.WebUtils;
 import com.fruitshorts.playback.service.PlaybackService;
 import com.fruitshorts.playback.vo.PlayRespVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.servlet.http.HttpServletRequest;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -18,7 +14,6 @@ import org.springframework.web.bind.annotation.PathVariable;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
-@Tag(name = "短剧与播放")
 @RestController
 @RequestMapping("/app")
 @RequiredArgsConstructor
@@ -28,7 +23,6 @@ public class AppDramaController {
     private final PlaybackService playbackService;
 
     /** 详情：包含剧集列表，客户端进详情页一次请求即可渲染 */
-    @Operation(summary = "短剧详情（含剧集列表，免费集带已签名播放地址）")
     @GetMapping("/dramas/{id}")
     public Result<AppDramaDetailVO> detail(@PathVariable Long id) {
         return Result.ok(appCatalogService.dramaDetail(id));
@@ -38,7 +32,6 @@ public class AppDramaController {
      * 播放票据：服务端判定权益后签发短时效播放地址。
      * 未登录也能播免费集；付费集未解锁时只返回需要多少金币。
      */
-    @Operation(summary = "签发播放票据与签名地址（服务端判定权益：免费/已购/需解锁/无片源）")
     @GetMapping("/episodes/{id}/play")
     public Result<PlayRespVO> play(@PathVariable Long id, HttpServletRequest request) {
         return Result.ok(playbackService.play(

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppEventController.java

@@ -1,35 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.app.controller;
-
-import com.fruitshorts.app.service.AppEventService;
-import com.fruitshorts.app.vo.AppEventReqVO;
-import com.fruitshorts.common.pojo.Result;
-import com.fruitshorts.framework.security.SecurityUtils;
-import com.fruitshorts.framework.web.WebUtils;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
-import jakarta.servlet.http.HttpServletRequest;
-import jakarta.validation.Valid;
-import lombok.RequiredArgsConstructor;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestBody;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RestController;
-
-/** 客户端埋点上报。 */
-@Tag(name = "埋点")
-@RestController
-@RequestMapping("/app")
-@RequiredArgsConstructor
-public class AppEventController {
-
-    private final AppEventService eventService;
-
-    @Operation(summary = "埋点事件批量上报")
-    @PostMapping("/events")
-    public Result<Void> report(@Valid @RequestBody AppEventReqVO req, HttpServletRequest request) {
-        eventService.save(req, SecurityUtils.getUserIdOrNull(), WebUtils.getClientIp(request));
-        return Result.ok();
-    }
-}

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppFavoriteController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.app.service.AppCatalogService;
@@ -8,8 +6,6 @@ import com.fruitshorts.common.pojo.Result;
 import com.fruitshorts.framework.security.SecurityUtils;
 import com.fruitshorts.playback.service.FavoriteService;
 import com.fruitshorts.playback.vo.FavoriteToggleReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.DeleteMapping;
@@ -23,7 +19,6 @@ import org.springframework.web.bind.annotation.RestController;
 import java.util.List;
 
 /** 收藏。 */
-@Tag(name = "收藏")
 @RestController
 @RequestMapping("/app/favorites")
 @RequiredArgsConstructor
@@ -33,21 +28,18 @@ public class AppFavoriteController {
     private final AppCatalogService appCatalogService;
 
     /** 切换收藏，返回切换后的状态：true 为已收藏。 */
-    @Operation(summary = "切换收藏状态（返回切换后的结果）")
     @PostMapping("/toggle")
     public Result<Boolean> toggle(@Valid @RequestBody FavoriteToggleReqVO req) {
         return Result.ok(favoriteService.toggle(SecurityUtils.getAppUserId(), req.getDramaId()));
     }
 
     /** 收藏列表，卡片结构与首页一致。 */
-    @Operation(summary = "收藏列表（卡片结构与首页一致）")
     @GetMapping
     public Result<List<AppDramaCardVO>> list() {
         return Result.ok(appCatalogService.toCards(
                 favoriteService.listDramas(SecurityUtils.getAppUserId())));
     }
 
-    @Operation(summary = "取消收藏")
     @DeleteMapping("/{dramaId}")
     public Result<Void> remove(@PathVariable Long dramaId) {
         favoriteService.remove(SecurityUtils.getAppUserId(), dramaId);

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppInteractionController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -9,8 +7,6 @@ import com.fruitshorts.interaction.service.ReportService;
 import com.fruitshorts.interaction.vo.LikeToggleReqVO;
 import com.fruitshorts.interaction.vo.LikeToggleRespVO;
 import com.fruitshorts.interaction.vo.ReportCreateReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.PostMapping;
@@ -19,7 +15,6 @@ import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
 /** 点赞与举报。 */
-@Tag(name = "点赞与举报")
 @RestController
 @RequestMapping("/app")
 @RequiredArgsConstructor
@@ -29,14 +24,12 @@ public class AppInteractionController {
     private final ReportService reportService;
 
     /** 点赞/取消点赞，返回切换后的状态与最新计数。 */
-    @Operation(summary = "点赞/取消点赞（支持短剧与评论），返回切换后状态与计数")
     @PostMapping("/likes/toggle")
     public Result<LikeToggleRespVO> toggleLike(@Valid @RequestBody LikeToggleReqVO req) {
         return Result.ok(likeService.toggle(SecurityUtils.getAppUserId(), req));
     }
 
     /** 提交举报：同一用户对同一目标只保留一条待处理工单。 */
-    @Operation(summary = "提交举报（评论/用户/短剧，同一目标仅保留一条待处理工单）")
     @PostMapping("/reports")
     public Result<Long> report(@Valid @RequestBody ReportCreateReqVO req) {
         return Result.ok(reportService.create(SecurityUtils.getAppUserId(), req));

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppMeController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -9,8 +7,6 @@ import com.fruitshorts.user.service.AppUserService;
 import com.fruitshorts.user.vo.AppUserRespVO;
 import com.fruitshorts.user.vo.DeactivateReqVO;
 import com.fruitshorts.user.vo.ProfileUpdateReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -25,7 +21,6 @@ import java.util.List;
 import java.util.Map;
 
 /** 客户端个人中心：资料、设备、注销、数据导出。 */
-@Tag(name = "个人中心")
 @RestController
 @RequestMapping("/app/me")
 @RequiredArgsConstructor
@@ -33,39 +28,33 @@ public class AppMeController {
 
     private final AppUserService userService;
 
-    @Operation(summary = "获取当前用户资料")
     @GetMapping
     public Result<AppUserRespVO> me() {
         return Result.ok(userService.me(SecurityUtils.getAppUserId()));
     }
 
-    @Operation(summary = "修改资料（昵称/头像/性别/生日/语言/时区/区域）")
     @PutMapping
     public Result<AppUserRespVO> update(@Valid @RequestBody ProfileUpdateReqVO req) {
         return Result.ok(userService.updateProfile(SecurityUtils.getAppUserId(), req));
     }
 
-    @Operation(summary = "登录设备列表")
     @GetMapping("/devices")
     public Result<List<AppUserDevice>> devices() {
         return Result.ok(userService.devices(SecurityUtils.getAppUserId()));
     }
 
     /** 商店与隐私法规要求的数据导出，返回账号侧数据；内容侧数据由客户端自行下载。 */
-    @Operation(summary = "数据导出（商店与隐私法规要求，返回账号侧数据）")
     @GetMapping("/export")
     public Result<Map<String, Object>> export() {
         return Result.ok(userService.exportAccount(SecurityUtils.getAppUserId()));
     }
 
     /** 申请注销：立即登出全部设备，进入冷静期，期间可撤销。 */
-    @Operation(summary = "申请注销（进入冷静期并登出全部设备，期间可撤销）")
     @PostMapping("/deactivate")
     public Result<LocalDateTime> deactivate(@RequestBody(required = false) DeactivateReqVO req) {
         return Result.ok(userService.requestDeactivation(SecurityUtils.getAppUserId(), req));
     }
 
-    @Operation(summary = "撤销注销申请")
     @PostMapping("/deactivate/cancel")
     public Result<Void> cancelDeactivate() {
         userService.cancelDeactivation(SecurityUtils.getAppUserId());

fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppWatchController.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.controller;
 
 import com.fruitshorts.common.pojo.Result;
@@ -7,8 +5,6 @@ import com.fruitshorts.framework.security.SecurityUtils;
 import com.fruitshorts.playback.service.WatchProgressService;
 import com.fruitshorts.playback.vo.ProgressRespVO;
 import com.fruitshorts.playback.vo.ProgressSaveReqVO;
-import io.swagger.v3.oas.annotations.Operation;
-import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.DeleteMapping;
@@ -23,7 +19,6 @@ import org.springframework.web.bind.annotation.RestController;
 import java.util.List;
 
 /** 观看进度与观看记录。 */
-@Tag(name = "观看记录")
 @RestController
 @RequestMapping("/app/watch")
 @RequiredArgsConstructor
@@ -32,33 +27,28 @@ public class AppWatchController {
     private final WatchProgressService progressService;
 
     /** 上报进度：客户端每 10 秒一次，切集时立即上报一次。 */
-    @Operation(summary = "上报观看进度（建议每 10 秒一次，切集时补报）")
     @PostMapping("/progress")
     public Result<ProgressRespVO> save(@Valid @RequestBody ProgressSaveReqVO req) {
         return Result.ok(progressService.save(SecurityUtils.getAppUserId(), req));
     }
 
     /** 某部剧的续看位置，进详情页时用它决定"续看第 N 集"。 */
-    @Operation(summary = "查询某部剧的续看位置")
     @GetMapping("/progress")
     public Result<ProgressRespVO> ofDrama(@RequestParam Long dramaId) {
         return Result.ok(progressService.ofDrama(SecurityUtils.getAppUserId(), dramaId));
     }
 
-    @Operation(summary = "最近观看列表")
     @GetMapping("/recent")
     public Result<List<ProgressRespVO>> recent(@RequestParam(defaultValue = "20") int limit) {
         return Result.ok(progressService.recent(SecurityUtils.getAppUserId(), limit));
     }
 
-    @Operation(summary = "删除某部剧的观看记录")
     @DeleteMapping("/progress/{dramaId}")
     public Result<Void> remove(@PathVariable Long dramaId) {
         progressService.remove(SecurityUtils.getAppUserId(), dramaId);
         return Result.ok();
     }
 
-    @Operation(summary = "清空全部观看记录")
     @DeleteMapping("/progress")
     public Result<Void> clear() {
         progressService.clear(SecurityUtils.getAppUserId());

fruitshorts-app-api/src/main/java/com/fruitshorts/app/dal/entity/AppEventLog.java

@@ -1,33 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.app.dal.entity;
-
-import com.baomidou.mybatisplus.annotation.FieldStrategy;
-import com.baomidou.mybatisplus.annotation.IdType;
-import com.baomidou.mybatisplus.annotation.TableField;
-import com.baomidou.mybatisplus.annotation.TableId;
-import com.baomidou.mybatisplus.annotation.TableName;
-import lombok.Data;
-
-import java.time.LocalDateTime;
-
-/** 埋点事件落库记录，为后续分析/漏斗预留原始数据。 */
-@Data
-@TableName("app_event_log")
-public class AppEventLog {
-
-    @TableId(type = IdType.ASSIGN_ID)
-    private Long id;
-    private String eventName;
-    private LocalDateTime eventTime;
-    private Long userId;
-    private String deviceId;
-    private String sessionId;
-    private String page;
-    private String properties;
-    private String clientIp;
-    private LocalDateTime createdAt;
-
-    @TableField(updateStrategy = FieldStrategy.NEVER)
-    private LocalDateTime updatedAt;
-}

fruitshorts-app-api/src/main/java/com/fruitshorts/app/dal/mapper/AppEventLogMapper.java

@@ -1,10 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.app.dal.mapper;
-
-import com.baomidou.mybatisplus.core.mapper.BaseMapper;
-import com.fruitshorts.app.dal.entity.AppEventLog;
-
-/** 埋点事件 Mapper。 */
-public interface AppEventLogMapper extends BaseMapper<AppEventLog> {
-}

fruitshorts-app-api/src/main/java/com/fruitshorts/app/service/AppCatalogService.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.service;
 
 import com.fruitshorts.app.vo.AppBannerVO;
@@ -168,7 +166,10 @@ public class AppCatalogService {
         vo.setNumber(episode.getEpNo());
         vo.setTitle(episode.getTitle());
         vo.setDurationSec(episode.getDurationSec());
+        int seconds = episode.getDurationSec() == null ? 0 : episode.getDurationSec();
+        vo.setDuration(String.format("%02d:%02d", seconds / 60, seconds % 60));
         boolean free = episode.getIsFree() != null && episode.getIsFree() == 1;
+        vo.setIsFree(free);
         vo.setLocked(!free);
         vo.setUnlockCoin(episode.getUnlockCoin());
         if (free) {

fruitshorts-app-api/src/main/java/com/fruitshorts/app/service/AppEventService.java

@@ -1,40 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.app.service;
-
-import com.fasterxml.jackson.databind.ObjectMapper;
-import com.fruitshorts.app.dal.entity.AppEventLog;
-import com.fruitshorts.app.dal.mapper.AppEventLogMapper;
-import com.fruitshorts.app.vo.AppEventReqVO;
-import lombok.RequiredArgsConstructor;
-import lombok.SneakyThrows;
-import org.springframework.stereotype.Service;
-
-import java.time.LocalDateTime;
-
-/** 埋点事件接收：批量落库，事件名与属性暂不校验、透传，口径后续与运营对齐。 */
-@Service
-@RequiredArgsConstructor
-public class AppEventService {
-
-    private final AppEventLogMapper eventLogMapper;
-    private final ObjectMapper objectMapper;
-
-    @SneakyThrows
-    public void save(AppEventReqVO req, Long userId, String clientIp) {
-        for (AppEventReqVO.EventItem item : req.getEvents()) {
-            AppEventLog log = new AppEventLog();
-            log.setEventName(item.getEventName());
-            log.setEventTime(item.getEventTime() == null ? LocalDateTime.now() : item.getEventTime());
-            log.setUserId(userId);
-            log.setDeviceId(req.getDeviceId());
-            log.setSessionId(req.getSessionId());
-            log.setPage(item.getPage());
-            log.setProperties(item.getProperties() == null ? null
-                    : objectMapper.writeValueAsString(item.getProperties()));
-            log.setClientIp(clientIp);
-            log.setCreatedAt(LocalDateTime.now());
-            eventLogMapper.insert(log);
-        }
-    }
-}

fruitshorts-app-api/src/main/java/com/fruitshorts/app/vo/AppBannerVO.java

@@ -1,22 +1,14 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.vo;
 
-import io.swagger.v3.oas.annotations.media.Schema;
 import lombok.Data;
 
 @Data
 public class AppBannerVO {
 
-    @Schema(description = "轮播图 ID")
     private Long id;
-
-    @Schema(description = "图片地址")
     private String imageUrl;
-
-    @Schema(description = "跳转类型：NONE / DRAMA / URL")
+    /** NONE / DRAMA / URL */
     private String linkType;
-
-    @Schema(description = "跳转目标：短剧 ID 或跳转地址")
+    /** 短剧 ID 或跳转地址 */
     private String linkValue;
 }

fruitshorts-app-api/src/main/java/com/fruitshorts/app/vo/AppCategoryVO.java

@@ -1,8 +1,5 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.vo;
 
-import io.swagger.v3.oas.annotations.media.Schema;
 import lombok.AllArgsConstructor;
 import lombok.Data;
 
@@ -10,9 +7,6 @@ import lombok.Data;
 @AllArgsConstructor
 public class AppCategoryVO {
 
-    @Schema(description = "分类 ID")
     private Long id;
-
-    @Schema(description = "分类名称")
     private String name;
 }

fruitshorts-app-api/src/main/java/com/fruitshorts/app/vo/AppDramaCardVO.java

@@ -1,41 +1,23 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.vo;
 
-import io.swagger.v3.oas.annotations.media.Schema;
 import lombok.Data;
 
 /** 列表卡片，用于首页/发现页/分类分区 */
 @Data
 public class AppDramaCardVO {
 
-    @Schema(description = "短剧 ID")
     private Long id;
-
-    @Schema(description = "短剧标题")
     private String title;
-
-    @Schema(description = "封面地址")
     private String cover;
-
-    @Schema(description = "简介")
     private String synopsis;
-
-    @Schema(description = "题材")
     private String genre;
-
-    @Schema(description = "分类名称")
     private String category;
-
-    @Schema(description = "总集数")
     private Integer totalEpisodes;
-
-    @Schema(description = "是否热门")
     private Boolean isHot;
-
-    @Schema(description = "播放量")
     private Long viewCount;
-
-    @Schema(description = "首个可播免费集；首页竖屏播放可直接起播，省去再请求详情/播放地址的往返")
+    /**
+     * 首个可播免费集。首页竖屏播放需要在列表阶段就能起播，
+     * 带上这一集可以省掉「点开→请求详情→再请求播放地址」的往返。
+     */
     private AppEpisodeVO preview;
 }

fruitshorts-app-api/src/main/java/com/fruitshorts/app/vo/AppDramaDetailVO.java

@@ -1,8 +1,5 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.vo;
 
-import io.swagger.v3.oas.annotations.media.Schema;
 import lombok.Data;
 
 import java.util.List;
@@ -10,39 +7,16 @@ import java.util.List;
 @Data
 public class AppDramaDetailVO {
 
-    @Schema(description = "短剧 ID")
     private Long id;
-
-    @Schema(description = "短剧标题")
     private String title;
-
-    @Schema(description = "简介")
     private String synopsis;
-
-    @Schema(description = "封面地址")
     private String cover;
-
-    @Schema(description = "题材")
     private String genre;
-
-    @Schema(description = "分类名称")
     private String category;
-
-    @Schema(description = "总集数")
     private Integer totalEpisodes;
-
-    @Schema(description = "免费集数")
     private Integer freeEpisodes;
-
-    @Schema(description = "单集解锁所需金币数")
     private Integer unlockCoin;
-
-    @Schema(description = "是否热门")
     private Boolean isHot;
-
-    @Schema(description = "播放量")
     private Long viewCount;
-
-    @Schema(description = "剧集列表")
     private List<AppEpisodeVO> episodes;
 }

fruitshorts-app-api/src/main/java/com/fruitshorts/app/vo/AppEpisodeVO.java

@@ -1,31 +1,23 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.vo;
 
-import io.swagger.v3.oas.annotations.media.Schema;
 import lombok.Data;
 
 @Data
 public class AppEpisodeVO {
 
-    @Schema(description = "剧集 ID")
     private Long id;
-
-    @Schema(description = "集号（第几集）")
     private Integer number;
-
-    @Schema(description = "剧集标题")
     private String title;
-
-    @Schema(description = "时长（秒）")
+    /** 展示用时长 mm:ss */
+    private String duration;
     private Integer durationSec;
-
-    @Schema(description = "是否锁定，true 表示需要解锁后才能播放")
+    private Boolean isFree;
+    /** true 表示需要解锁后才能播放 */
     private Boolean locked;
-
-    @Schema(description = "解锁所需金币数")
     private Integer unlockCoin;
-
-    @Schema(description = "可播放地址；锁定或无片源时为空")
+    /**
+     * 可播放时的地址；锁定或不含片源时为空。
+     * 详情页拿到就能直接播，不必按集再请求一次播放票据。
+     */
     private String playUrl;
 }

fruitshorts-app-api/src/main/java/com/fruitshorts/app/vo/AppEventReqVO.java

@@ -1,48 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.app.vo;
-
-import io.swagger.v3.oas.annotations.media.Schema;
-import jakarta.validation.Valid;
-import jakarta.validation.constraints.NotBlank;
-import jakarta.validation.constraints.NotEmpty;
-import jakarta.validation.constraints.Size;
-import lombok.Data;
-
-import java.time.LocalDateTime;
-import java.util.List;
-import java.util.Map;
-
-/** 埋点事件批量上报请求。 */
-@Data
-public class AppEventReqVO {
-
-    @Schema(description = "设备ID")
-    private String deviceId;
-
-    @Schema(description = "会话ID")
-    private String sessionId;
-
-    @Schema(description = "事件列表")
-    @NotEmpty(message = "事件列表不能为空")
-    @Size(max = 50, message = "单次最多上报 50 条事件")
-    @Valid
-    private List<EventItem> events;
-
-    @Data
-    public static class EventItem {
-
-        @Schema(description = "事件名，如 playback_start/playback_end/pay_success")
-        @NotBlank(message = "事件名不能为空")
-        private String eventName;
-
-        @Schema(description = "事件发生时间，缺省用服务端接收时间")
-        private LocalDateTime eventTime;
-
-        @Schema(description = "页面/场景标识")
-        private String page;
-
-        @Schema(description = "事件属性（key-value）")
-        private Map<String, Object> properties;
-    }
-}

fruitshorts-app-api/src/main/java/com/fruitshorts/app/vo/AppFeedVO.java

@@ -1,8 +1,5 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.vo;
 
-import io.swagger.v3.oas.annotations.media.Schema;
 import lombok.AllArgsConstructor;
 import lombok.Data;
 
@@ -13,9 +10,6 @@ import java.util.List;
 @AllArgsConstructor
 public class AppFeedVO {
 
-    @Schema(description = "轮播图列表")
     private List<AppBannerVO> banners;
-
-    @Schema(description = "分区列表")
     private List<AppSectionVO> sections;
 }

fruitshorts-app-api/src/main/java/com/fruitshorts/app/vo/AppSectionVO.java

@@ -1,8 +1,5 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.app.vo;
 
-import io.swagger.v3.oas.annotations.media.Schema;
 import lombok.AllArgsConstructor;
 import lombok.Data;
 
@@ -13,12 +10,8 @@ import java.util.List;
 @AllArgsConstructor
 public class AppSectionVO {
 
-    @Schema(description = "分区标识：hot / new / category-{id}，客户端据此做埋点与样式")
+    /** 分区标识：hot / new / category-{id}，客户端可据此做埋点与样式 */
     private String code;
-
-    @Schema(description = "分区标题")
     private String title;
-
-    @Schema(description = "分区内短剧列表")
     private List<AppDramaCardVO> dramas;
 }

fruitshorts-app-api/src/main/resources/application.yml

@@ -1,5 +1,3 @@
-# Author: fruit.com.cn
-
 server:
   port: 8081
 
@@ -16,10 +14,6 @@ spring:
   jackson:
     date-format: yyyy-MM-dd HH:mm:ss
     time-zone: Asia/Shanghai
-  data:
-    redis:
-      host: ${REDIS_HOST:127.0.0.1}
-      port: ${REDIS_PORT:6379}
 
 mybatis-plus:
   configuration:
@@ -27,16 +21,15 @@ mybatis-plus:
   global-config:
     banner: false
     db-config:
+      # 主键由应用侧雪花算法生成（S0），数据库不再自增
       id-type: assign_id
       logic-delete-field: deleted
       logic-delete-value: 1
       logic-not-delete-value: 0
-
-springdoc:
-  swagger-ui:
-    path: /doc.html
-  api-docs:
-    path: /v3/api-docs
+    sequence:
+      # 单机开发用固定值；上多实例前必须改成按实例分配（环境变量注入），否则会撞 ID
+      worker-id: 1
+      datacenter-id: 1
 
 fruitshorts:
   interaction:
@@ -61,25 +54,7 @@ fruitshorts:
     admin-ttl-hours: 12
   cors:
     allowed-origins: "*"
-  pay:
-    google:
-      # 接入 Google Play Billing 后置 true，并注入服务账号 JSON
-      enabled: false
-      package-name: com.nontonki
-      service-account-json: ${GOOGLE_PLAY_SERVICE_ACCOUNT_JSON:}
 
 logging:
   level:
     com.fruitshorts: info
-
-management:
-  endpoints:
-    web:
-      exposure:
-        include: prometheus,health
-  endpoint:
-    health:
-      show-details: always
-  metrics:
-    tags:
-      application: ${spring.application.name}

fruitshorts-app-api/src/test/java/com/fruitshorts/app/controller/AppAuthControllerContractTest.java

@@ -0,0 +1,140 @@
+// Author: fruit.com.cn
+package com.fruitshorts.app.controller;
+
+import com.fruitshorts.app.support.ControllerContractSupport;
+import com.fruitshorts.common.exception.ErrorCode;
+import com.fruitshorts.common.exception.ServiceException;
+import com.fruitshorts.user.service.AppAuthService;
+import com.fruitshorts.user.service.AppOtpService;
+import com.fruitshorts.user.vo.TokenRespVO;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.servlet.MockMvc;
+
+import static org.hamcrest.Matchers.containsString;
+import static org.hamcrest.Matchers.nullValue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.BDDMockito.given;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+/**
+ * `/app/auth/**` 的接入层契约：路由、请求体绑定、统一响应包 `{code,message,data}`、错误码映射。
+ *
+ * <p>业务规则（免码、密码强度、频控）在 {@code AppAuthServiceTest} / {@code AppOtpServiceTest} 里用真服务验证，
+ * 这里只钉"接口长什么样"。
+ */
+class AppAuthControllerContractTest {
+
+    private AppOtpService otpService;
+    private AppAuthService authService;
+    private MockMvc mockMvc;
+
+    @BeforeEach
+    void setUp() {
+        otpService = mock(AppOtpService.class);
+        authService = mock(AppAuthService.class);
+        mockMvc = ControllerContractSupport.mockMvcOf(new AppAuthController(otpService, authService));
+    }
+
+    @Test
+    void should_return_access_token_when_email_register_succeeds() throws Exception {
+        given(authService.register(any(), any())).willReturn(tokens("access-1", "refresh-1"));
+
+        mockMvc.perform(post("/app/auth/register")
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content("{\"targetType\":\"EMAIL\",\"target\":\"a@b.com\",\"password\":\"abcd1234\"}"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.message").value("ok"))
+                .andExpect(jsonPath("$.data.accessToken").value("access-1"))
+                .andExpect(jsonPath("$.data.tokenType").value("Bearer"))
+                .andExpect(jsonPath("$.data.newUser").value(true));
+    }
+
+    @Test
+    void should_return_data_exists_code_when_email_is_already_registered() throws Exception {
+        given(authService.register(any(), any())).willThrow(
+                new ServiceException(ErrorCode.DATA_EXISTS, "该账号已注册，请直接登录"));
+
+        mockMvc.perform(post("/app/auth/register")
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content("{\"targetType\":\"EMAIL\",\"target\":\"a@b.com\",\"password\":\"abcd1234\"}"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(ErrorCode.DATA_EXISTS.getCode()))
+                .andExpect(jsonPath("$.message").value("该账号已注册，请直接登录"))
+                .andExpect(jsonPath("$.data").value(nullValue()));
+    }
+
+    @Test
+    void should_map_otp_required_error_when_phone_register_has_no_code() throws Exception {
+        given(authService.register(any(), any())).willThrow(
+                new ServiceException(ErrorCode.BAD_REQUEST, "请先获取验证码"));
+
+        mockMvc.perform(post("/app/auth/register")
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content("{\"targetType\":\"PHONE\",\"target\":\"08123456789\"}"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(ErrorCode.BAD_REQUEST.getCode()))
+                .andExpect(jsonPath("$.message").value("请先获取验证码"));
+    }
+
+    @Test
+    void should_return_bad_request_code_when_register_body_has_no_target() throws Exception {
+        mockMvc.perform(post("/app/auth/register")
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content("{\"targetType\":\"EMAIL\"}"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(ErrorCode.BAD_REQUEST.getCode()))
+                .andExpect(jsonPath("$.message").value(containsString("请输入手机号或邮箱")));
+    }
+
+    @Test
+    void should_return_access_token_when_password_login_succeeds() throws Exception {
+        given(authService.login(any(), any())).willReturn(tokens("access-2", "refresh-2"));
+
+        mockMvc.perform(post("/app/auth/login")
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content("{\"targetType\":\"EMAIL\",\"target\":\"a@b.com\",\"password\":\"abcd1234\"}"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.accessToken").value("access-2"));
+    }
+
+    @Test
+    void should_return_login_failed_code_when_password_is_wrong() throws Exception {
+        given(authService.login(any(), any())).willThrow(new ServiceException(ErrorCode.LOGIN_FAILED));
+
+        mockMvc.perform(post("/app/auth/login")
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content("{\"targetType\":\"EMAIL\",\"target\":\"a@b.com\",\"password\":\"wrongpass1\"}"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(ErrorCode.LOGIN_FAILED.getCode()))
+                .andExpect(jsonPath("$.message").value("账号或密码错误"));
+    }
+
+    @Test
+    void should_return_ok_envelope_when_otp_send_succeeds() throws Exception {
+        mockMvc.perform(post("/app/auth/otp")
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content("{\"scene\":\"REGISTER\",\"targetType\":\"PHONE\",\"target\":\"08123456789\",\"deviceId\":\"d-1\"}"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data").value(nullValue()));
+
+        verify(otpService).send(any(), any());
+    }
+
+    private TokenRespVO tokens(String accessToken, String refreshToken) {
+        TokenRespVO vo = new TokenRespVO();
+        vo.setAccessToken(accessToken);
+        vo.setRefreshToken(refreshToken);
+        vo.setExpiresIn(7200);
+        vo.setNewUser(true);
+        return vo;
+    }
+}

fruitshorts-app-api/src/test/java/com/fruitshorts/app/controller/AppCatalogControllerContractTest.java

@@ -0,0 +1,114 @@
+// Author: fruit.com.cn
+package com.fruitshorts.app.controller;
+
+import com.fruitshorts.app.service.AppCatalogService;
+import com.fruitshorts.app.support.ControllerContractSupport;
+import com.fruitshorts.app.vo.AppBannerVO;
+import com.fruitshorts.app.vo.AppCategoryVO;
+import com.fruitshorts.app.vo.AppDramaDetailVO;
+import com.fruitshorts.app.vo.AppFeedVO;
+import com.fruitshorts.common.exception.ErrorCode;
+import com.fruitshorts.common.exception.ServiceException;
+import com.fruitshorts.playback.service.PlaybackService;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.test.web.servlet.MockMvc;
+
+import java.util.List;
+
+import static org.hamcrest.Matchers.nullValue;
+import static org.mockito.BDDMockito.given;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+/**
+ * 目录接口的接入层契约：`/app/home/feed`、`/app/discover/feed`、`/app/categories`、`/app/dramas/{id}`。
+ *
+ * <p>关注三件事：路由通不通、路径参数有没有绑对、响应壳是不是 `{code,message,data}`。
+ */
+class AppCatalogControllerContractTest {
+
+    private AppCatalogService catalogService;
+    private MockMvc catalogMvc;
+    private MockMvc dramaMvc;
+
+    @BeforeEach
+    void setUp() {
+        catalogService = mock(AppCatalogService.class);
+        catalogMvc = ControllerContractSupport.mockMvcOf(new AppCatalogController(catalogService));
+        dramaMvc = ControllerContractSupport.mockMvcOf(
+                new AppDramaController(catalogService, mock(PlaybackService.class)));
+    }
+
+    @Test
+    void should_return_banners_and_sections_when_home_feed_is_requested() throws Exception {
+        AppBannerVO banner = new AppBannerVO();
+        banner.setId(9L);
+        banner.setImageUrl("/files/banner/9.png");
+        banner.setLinkType("DRAMA");
+        banner.setLinkValue("12");
+        AppFeedVO feed = new AppFeedVO(List.of(banner), List.of());
+        given(catalogService.homeFeed()).willReturn(feed);
+
+        catalogMvc.perform(get("/app/home/feed"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.banners[0].id").value(9))
+                .andExpect(jsonPath("$.data.banners[0].imageUrl").value("/files/banner/9.png"))
+                .andExpect(jsonPath("$.data.banners[0].linkType").value("DRAMA"));
+    }
+
+    @Test
+    void should_return_sections_when_discover_feed_is_requested() throws Exception {
+        AppFeedVO feed = new AppFeedVO(List.of(), List.of());
+        given(catalogService.discoverFeed()).willReturn(feed);
+
+        catalogMvc.perform(get("/app/discover/feed"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.sections").isArray());
+    }
+
+    @Test
+    void should_return_category_list_when_categories_are_requested() throws Exception {
+        AppCategoryVO category = new AppCategoryVO(3L, "都市");
+        given(catalogService.categories()).willReturn(List.of(category));
+
+        catalogMvc.perform(get("/app/categories"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data[0].id").value(3))
+                .andExpect(jsonPath("$.data[0].name").value("都市"));
+    }
+
+    @Test
+    void should_bind_path_variable_when_drama_detail_is_requested() throws Exception {
+        AppDramaDetailVO detail = new AppDramaDetailVO();
+        detail.setId(42L);
+        detail.setTitle("命运的相遇");
+        detail.setEpisodes(List.of());
+        given(catalogService.dramaDetail(42L)).willReturn(detail);
+
+        dramaMvc.perform(get("/app/dramas/42"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.id").value(42))
+                .andExpect(jsonPath("$.data.title").value("命运的相遇"));
+
+        verify(catalogService).dramaDetail(42L);
+    }
+
+    @Test
+    void should_return_data_not_found_code_when_drama_does_not_exist() throws Exception {
+        given(catalogService.dramaDetail(404L))
+                .willThrow(new ServiceException(ErrorCode.DATA_NOT_FOUND, "短剧不存在"));
+
+        dramaMvc.perform(get("/app/dramas/404"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(ErrorCode.DATA_NOT_FOUND.getCode()))
+                .andExpect(jsonPath("$.data").value(nullValue()));
+    }
+}

fruitshorts-app-api/src/test/java/com/fruitshorts/app/controller/AppPlaybackContractTest.java

@@ -0,0 +1,96 @@
+// Author: fruit.com.cn
+package com.fruitshorts.app.controller;
+
+import com.fruitshorts.app.service.AppCatalogService;
+import com.fruitshorts.app.support.ControllerContractSupport;
+import com.fruitshorts.playback.service.PlaybackService;
+import com.fruitshorts.playback.vo.PlayRespVO;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.test.web.servlet.MockMvc;
+
+import java.util.List;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isNull;
+import static org.mockito.BDDMockito.given;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+/**
+ * 播放票据接口的接入层契约：`/app/episodes/{id}/play` 的免费/付费两种形态与参数透传。
+ *
+ * <p>免费 / 付费的**判定规则**在 {@code PlaybackServiceTest} 里用真服务验证；
+ * 这里钉的是"下发给客户端的字段长什么样"（客户端 Flutter 依赖这些字段名）。
+ */
+class AppPlaybackContractTest {
+
+    private PlaybackService playbackService;
+    private MockMvc mockMvc;
+
+    @BeforeEach
+    void setUp() {
+        playbackService = mock(PlaybackService.class);
+        mockMvc = ControllerContractSupport.mockMvcOf(
+                new AppDramaController(mock(AppCatalogService.class), playbackService));
+    }
+
+    @Test
+    void should_return_free_access_when_episode_is_free() throws Exception {
+        given(playbackService.play(isNull(), eq(11L), any(), any()))
+                .willReturn(ticket(11L, true, PlaybackService.ACCESS_FREE, "/files/ep.mp4?s=1"));
+
+        mockMvc.perform(get("/app/episodes/11/play").header("X-Device-Id", "device-9"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.episodeId").value(11))
+                .andExpect(jsonPath("$.data.accessible").value(true))
+                .andExpect(jsonPath("$.data.accessType").value(PlaybackService.ACCESS_FREE))
+                .andExpect(jsonPath("$.data.playUrl").value("/files/ep.mp4?s=1"));
+    }
+
+    @Test
+    void should_return_coin_required_when_episode_is_locked_and_not_entitled() throws Exception {
+        PlayRespVO locked = ticket(12L, false, PlaybackService.ACCESS_COIN_REQUIRED, "");
+        locked.setUnlockCoin(60);
+        given(playbackService.play(isNull(), eq(12L), any(), any())).willReturn(locked);
+
+        mockMvc.perform(get("/app/episodes/12/play"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.data.accessible").value(false))
+                .andExpect(jsonPath("$.data.accessType").value(PlaybackService.ACCESS_COIN_REQUIRED))
+                .andExpect(jsonPath("$.data.playUrl").value(""))
+                .andExpect(jsonPath("$.data.unlockCoin").value(60));
+    }
+
+    @Test
+    void should_pass_episode_id_and_device_header_when_play_is_requested() throws Exception {
+        given(playbackService.play(isNull(), eq(13L), eq("device-9"), any()))
+                .willReturn(ticket(13L, true, PlaybackService.ACCESS_FREE, "/files/ep13.mp4?s=1"));
+
+        mockMvc.perform(get("/app/episodes/13/play").header("X-Device-Id", "device-9"))
+                .andExpect(status().isOk());
+
+        verify(playbackService).play(isNull(), eq(13L), eq("device-9"), any());
+    }
+
+    private PlayRespVO ticket(Long episodeId, boolean accessible, String accessType, String playUrl) {
+        PlayRespVO vo = new PlayRespVO();
+        vo.setEpisodeId(episodeId);
+        vo.setDramaId(7L);
+        vo.setNumber(1);
+        vo.setTitle("第 1 集");
+        vo.setDurationSec(120);
+        vo.setAccessible(accessible);
+        vo.setAccessType(accessType);
+        vo.setPlayUrl(playUrl);
+        vo.setQualities(List.of("AUTO"));
+        vo.setUnlockCoin(0);
+        vo.setPreviewSeconds(0);
+        return vo;
+    }
+}

fruitshorts-app-api/src/test/java/com/fruitshorts/app/service/AppAuthServiceTest.java

@@ -0,0 +1,320 @@
+// Author: fruit.com.cn
+package com.fruitshorts.app.service;
+
+import com.fruitshorts.common.exception.ErrorCode;
+import com.fruitshorts.common.exception.ServiceException;
+import com.fruitshorts.framework.security.JwtTokenProvider;
+import com.fruitshorts.user.dal.entity.AppUser;
+import com.fruitshorts.user.dal.entity.AppUserCredential;
+import com.fruitshorts.user.dal.entity.AppUserOtp;
+import com.fruitshorts.user.dal.entity.AppUserSession;
+import com.fruitshorts.user.dal.mapper.AppUserConsentMapper;
+import com.fruitshorts.user.dal.mapper.AppUserCredentialMapper;
+import com.fruitshorts.user.dal.mapper.AppUserDeviceMapper;
+import com.fruitshorts.user.dal.mapper.AppUserMapper;
+import com.fruitshorts.user.dal.mapper.AppUserOtpMapper;
+import com.fruitshorts.user.dal.mapper.AppUserSessionMapper;
+import com.fruitshorts.user.enums.AppUserStatus;
+import com.fruitshorts.user.service.AppAuthService;
+import com.fruitshorts.user.service.AppOtpService;
+import com.fruitshorts.user.service.CredentialHasher;
+import com.fruitshorts.user.service.OtpSender;
+import com.fruitshorts.user.vo.LoginReqVO;
+import com.fruitshorts.user.vo.RegisterReqVO;
+import com.fruitshorts.user.vo.TokenRespVO;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.security.crypto.password.PasswordEncoder;
+
+import java.time.Duration;
+import java.time.LocalDateTime;
+import java.util.concurrent.atomic.AtomicReference;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.BDDMockito.given;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+
+/**
+ * C 端注册 / 登录的**业务规则**测试：真 `AppAuthService` + 替身 Mapper，不连库。
+ *
+ * <p>覆盖几件接入层测不到的事：EMAIL 免码到底走没走验证码、密码强度、注册频控、
+ * 账号重复、密码比对与封禁判断。验证码本身的校验规则在 `AppOtpServiceTest`。
+ */
+class AppAuthServiceTest {
+
+    private AppUserMapper userMapper;
+    private AppUserCredentialMapper credentialMapper;
+    private AppUserSessionMapper sessionMapper;
+    private AppUserConsentMapper consentMapper;
+    private AppUserDeviceMapper deviceMapper;
+    private AppOtpService otpService;
+    private CredentialHasher hasher;
+    private JwtTokenProvider tokenProvider;
+    private PasswordEncoder passwordEncoder;
+    private AppAuthService authService;
+
+    @BeforeEach
+    void setUp() {
+        userMapper = mock(AppUserMapper.class);
+        credentialMapper = mock(AppUserCredentialMapper.class);
+        sessionMapper = mock(AppUserSessionMapper.class);
+        consentMapper = mock(AppUserConsentMapper.class);
+        deviceMapper = mock(AppUserDeviceMapper.class);
+        otpService = mock(AppOtpService.class);
+        hasher = mock(CredentialHasher.class);
+        tokenProvider = mock(JwtTokenProvider.class);
+        passwordEncoder = mock(PasswordEncoder.class);
+        authService = new AppAuthService(userMapper, credentialMapper, sessionMapper, consentMapper,
+                deviceMapper, otpService, hasher, tokenProvider, passwordEncoder);
+    }
+
+    @Test
+    void should_register_without_otp_when_target_type_is_email() {
+        stubHappyRegister();
+        AtomicReference<AppUserCredential> saved = captureCredential();
+
+        TokenRespVO resp = authService.register(emailRegister("abcd1234", null), "203.0.113.8");
+
+        assertThat(resp.getAccessToken()).isEqualTo("access-1");
+        assertThat(resp.getRefreshToken()).isEqualTo("refresh-1");
+        assertThat(resp.isNewUser()).isTrue();
+        // 免码注册不等于"已验证"：邮箱可达性没验证过，所以先记 0，等日后点验证链接再置 1
+        assertThat(saved.get().getVerified()).isZero();
+        verify(otpService, never()).consume(anyString(), anyString(), anyString(), any());
+    }
+
+    @Test
+    void should_consume_otp_when_email_register_carries_a_code() {
+        stubHappyRegister();
+
+        authService.register(emailRegister("abcd1234", "654321"), "203.0.113.8");
+
+        verify(otpService).consume(eq("REGISTER"), eq("EMAIL"), eq("a@b.com"), eq("654321"));
+    }
+
+    @Test
+    void should_consume_otp_when_target_type_is_phone() {
+        stubHappyRegister();
+
+        authService.register(phoneRegister("+628123456789", "654321"), "203.0.113.8");
+
+        verify(otpService).consume(eq("REGISTER"), eq("PHONE"), eq("+628123456789"), eq("654321"));
+    }
+
+    @Test
+    void should_reject_phone_register_when_no_code_was_requested() {
+        AppAuthService serviceWithRealOtp = serviceWithRealOtpService(null);
+
+        assertThatThrownBy(() -> serviceWithRealOtp.register(phoneRegister("+628123456789", ""), "203.0.113.8"))
+                .isInstanceOf(ServiceException.class)
+                .hasMessage("请先获取验证码");
+    }
+
+    @Test
+    void should_reject_phone_register_when_code_is_wrong() {
+        AppUserOtp issued = new AppUserOtp();
+        issued.setCodeHash("hash-of-654321");
+        issued.setExpireAt(LocalDateTime.now().plusMinutes(5));
+        issued.setFailCount(0);
+        AppAuthService serviceWithRealOtp = serviceWithRealOtpService(issued);
+
+        assertThatThrownBy(() -> serviceWithRealOtp.register(phoneRegister("+628123456789", "000000"), "203.0.113.8"))
+                .isInstanceOf(ServiceException.class)
+                .hasMessage("验证码不正确");
+    }
+
+    @Test
+    void should_reject_email_register_when_password_is_weak() {
+        RegisterReqVO req = emailRegister("abcdefgh", null);
+
+        assertThatThrownBy(() -> authService.register(req, "203.0.113.8"))
+                .isInstanceOf(ServiceException.class)
+                .hasMessageContaining("密码需同时包含字母和数字");
+    }
+
+    @Test
+    void should_reject_email_register_when_format_is_invalid() {
+        RegisterReqVO req = emailRegister("abcd1234", null);
+        req.setTarget("not-an-email");
+
+        assertThatThrownBy(() -> authService.register(req, "203.0.113.8"))
+                .isInstanceOf(ServiceException.class)
+                .hasMessage("邮箱格式不正确");
+    }
+
+    @Test
+    void should_return_data_exists_when_email_is_already_registered() {
+        given(userMapper.selectCount(any())).willReturn(0L);
+        AppUserCredential existing = new AppUserCredential();
+        existing.setUserId(1001L);
+        given(credentialMapper.selectOne(any())).willReturn(existing);
+
+        assertThatThrownBy(() -> authService.register(emailRegister("abcd1234", null), "203.0.113.8"))
+                .isInstanceOf(ServiceException.class)
+                .satisfies(ex -> assertThat(((ServiceException) ex).getCode())
+                        .isEqualTo(ErrorCode.DATA_EXISTS.getCode()))
+                .hasMessage("该账号已注册，请直接登录");
+    }
+
+    @Test
+    void should_reject_register_when_ip_reaches_the_daily_limit() {
+        given(userMapper.selectCount(any())).willReturn(5L);
+
+        assertThatThrownBy(() -> authService.register(emailRegister("abcd1234", null), "203.0.113.8"))
+                .isInstanceOf(ServiceException.class)
+                .satisfies(ex -> assertThat(((ServiceException) ex).getCode())
+                        .isEqualTo(ErrorCode.TOO_MANY_REQUESTS.getCode()))
+                .hasMessageContaining("当前网络注册过于频繁");
+    }
+
+    @Test
+    void should_return_tokens_when_password_matches() {
+        stubLogin(credential("bcrypt-hash"), user(AppUserStatus.NORMAL));
+        given(passwordEncoder.matches("abcd1234", "bcrypt-hash")).willReturn(true);
+
+        TokenRespVO resp = authService.login(emailLogin("abcd1234"), "203.0.113.8");
+
+        assertThat(resp.getAccessToken()).isEqualTo("access-1");
+        assertThat(resp.getUser().getUid()).isEqualTo("UAB12CD");
+        verify(sessionMapper).insert(any(AppUserSession.class));
+    }
+
+    @Test
+    void should_reject_login_when_password_does_not_match() {
+        stubLogin(credential("bcrypt-hash"), user(AppUserStatus.NORMAL));
+        given(passwordEncoder.matches("wrongpass1", "bcrypt-hash")).willReturn(false);
+
+        assertThatThrownBy(() -> authService.login(emailLogin("wrongpass1"), "203.0.113.8"))
+                .isInstanceOf(ServiceException.class)
+                .satisfies(ex -> assertThat(((ServiceException) ex).getCode())
+                        .isEqualTo(ErrorCode.LOGIN_FAILED.getCode()))
+                .hasMessage("账号或密码错误");
+    }
+
+    @Test
+    void should_reject_login_when_account_does_not_exist() {
+        given(credentialMapper.selectOne(any())).willReturn(null);
+
+        assertThatThrownBy(() -> authService.login(emailLogin("abcd1234"), "203.0.113.8"))
+                .isInstanceOf(ServiceException.class)
+                .satisfies(ex -> assertThat(((ServiceException) ex).getCode())
+                        .isEqualTo(ErrorCode.LOGIN_FAILED.getCode()))
+                .hasMessage("账号不存在，请先注册");
+    }
+
+    @Test
+    void should_reject_login_when_account_is_banned() {
+        stubLogin(credential("bcrypt-hash"), user(AppUserStatus.BANNED));
+        given(passwordEncoder.matches("abcd1234", "bcrypt-hash")).willReturn(true);
+
+        assertThatThrownBy(() -> authService.login(emailLogin("abcd1234"), "203.0.113.8"))
+                .isInstanceOf(ServiceException.class)
+                .satisfies(ex -> assertThat(((ServiceException) ex).getCode())
+                        .isEqualTo(ErrorCode.ACCOUNT_DISABLED.getCode()));
+    }
+
+    private void stubHappyRegister() {
+        given(userMapper.selectCount(any())).willReturn(0L);
+        given(credentialMapper.selectOne(any())).willReturn(null);
+        given(hasher.newUid()).willReturn("UAB12CD");
+        given(hasher.newRefreshToken()).willReturn("refresh-1");
+        given(hasher.sha256(anyString())).willReturn("hash-1");
+        given(passwordEncoder.encode(anyString())).willReturn("bcrypt-hash");
+        given(tokenProvider.createAppToken(any(), anyString(), any())).willReturn("access-1");
+        given(tokenProvider.accessTtlSeconds()).willReturn(7200L);
+        given(tokenProvider.appRefreshTtl()).willReturn(Duration.ofDays(30));
+        AtomicReference<AppUser> inserted = new AtomicReference<>();
+        given(userMapper.insert(any(AppUser.class))).willAnswer(invocation -> {
+            AppUser saved = invocation.getArgument(0);
+            saved.setId(1001L);
+            inserted.set(saved);
+            return 1;
+        });
+        given(userMapper.selectById(any())).willAnswer(invocation -> inserted.get());
+    }
+
+    private AtomicReference<AppUserCredential> captureCredential() {
+        AtomicReference<AppUserCredential> saved = new AtomicReference<>();
+        given(credentialMapper.insert(any(AppUserCredential.class))).willAnswer(invocation -> {
+            saved.set(invocation.getArgument(0));
+            return 1;
+        });
+        return saved;
+    }
+
+    private void stubLogin(AppUserCredential credential, AppUser user) {
+        given(credentialMapper.selectOne(any())).willReturn(credential);
+        given(userMapper.selectById(any())).willReturn(user);
+        given(hasher.newRefreshToken()).willReturn("refresh-1");
+        given(hasher.sha256(anyString())).willReturn("hash-1");
+        given(tokenProvider.createAppToken(any(), anyString(), any())).willReturn("access-1");
+        given(tokenProvider.accessTtlSeconds()).willReturn(7200L);
+        given(tokenProvider.appRefreshTtl()).willReturn(Duration.ofDays(30));
+    }
+
+    private AppAuthService serviceWithRealOtpService(AppUserOtp issued) {
+        AppUserOtpMapper otpMapper = mock(AppUserOtpMapper.class);
+        CredentialHasher otpHasher = mock(CredentialHasher.class);
+        given(otpMapper.selectOne(any())).willReturn(issued);
+        given(otpHasher.hashOtp(any())).willReturn("hash-of-something-else");
+        AppOtpService realOtpService = new AppOtpService(otpMapper, mock(OtpSender.class), otpHasher);
+        return new AppAuthService(userMapper, credentialMapper, sessionMapper, consentMapper,
+                deviceMapper, realOtpService, hasher, tokenProvider, passwordEncoder);
+    }
+
+    private RegisterReqVO emailRegister(String password, String code) {
+        RegisterReqVO req = new RegisterReqVO();
+        req.setTargetType("EMAIL");
+        req.setTarget("a@b.com");
+        req.setPassword(password);
+        req.setCode(code);
+        req.setDeviceId("device-9");
+        req.setAgreementVersion("2026-10-01");
+        return req;
+    }
+
+    private RegisterReqVO phoneRegister(String target, String code) {
+        RegisterReqVO req = new RegisterReqVO();
+        req.setTargetType("PHONE");
+        req.setTarget(target);
+        req.setCode(code);
+        req.setDeviceId("device-9");
+        req.setAgreementVersion("2026-10-01");
+        return req;
+    }
+
+    private LoginReqVO emailLogin(String password) {
+        LoginReqVO req = new LoginReqVO();
+        req.setTargetType("EMAIL");
+        req.setTarget("a@b.com");
+        req.setPassword(password);
+        req.setDeviceId("device-9");
+        return req;
+    }
+
+    private AppUserCredential credential(String passwordHash) {
+        AppUserCredential credential = new AppUserCredential();
+        credential.setId(1L);
+        credential.setUserId(1001L);
+        credential.setType("EMAIL");
+        credential.setIdentifier("a@b.com");
+        credential.setPasswordHash(passwordHash);
+        return credential;
+    }
+
+    private AppUser user(String status) {
+        AppUser user = new AppUser();
+        user.setId(1001L);
+        user.setUid("UAB12CD");
+        user.setNickname("UserAB12CD");
+        user.setStatus(status);
+        user.setCountryCode("ID");
+        return user;
+    }
+}

fruitshorts-app-api/src/test/java/com/fruitshorts/app/service/AppOtpServiceTest.java

@@ -0,0 +1,104 @@
+// Author: fruit.com.cn
+package com.fruitshorts.app.service;
+
+import com.fruitshorts.common.exception.ErrorCode;
+import com.fruitshorts.common.exception.ServiceException;
+import com.fruitshorts.user.dal.entity.AppUserOtp;
+import com.fruitshorts.user.dal.mapper.AppUserOtpMapper;
+import com.fruitshorts.user.service.AppOtpService;
+import com.fruitshorts.user.service.CredentialHasher;
+import com.fruitshorts.user.service.OtpSender;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+import java.time.LocalDateTime;
+import java.util.concurrent.atomic.AtomicReference;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.BDDMockito.given;
+import static org.mockito.Mockito.mock;
+
+/**
+ * 验证码**校验规则**测试：真 `AppOtpService` + 替身 Mapper。
+ *
+ * <p>注册/登录链路"PHONE 必须带验证码"的拒绝对外表现，靠这里的真规则 + `AppAuthServiceTest`
+ * 里的"必须调用 consume"两条一起钉住，避免两边都用替身导致互相假装。
+ */
+class AppOtpServiceTest {
+
+    private AppUserOtpMapper otpMapper;
+    private CredentialHasher hasher;
+    private AppOtpService otpService;
+
+    @BeforeEach
+    void setUp() {
+        otpMapper = mock(AppUserOtpMapper.class);
+        hasher = mock(CredentialHasher.class);
+        otpService = new AppOtpService(otpMapper, mock(OtpSender.class), hasher);
+    }
+
+    @Test
+    void should_reject_consume_when_no_code_was_requested() {
+        given(otpMapper.selectOne(any())).willReturn(null);
+
+        assertThatThrownBy(() -> otpService.consume("REGISTER", "PHONE", "+628123456789", "123456"))
+                .isInstanceOf(ServiceException.class)
+                .satisfies(ex -> assertThat(((ServiceException) ex).getCode())
+                        .isEqualTo(ErrorCode.BAD_REQUEST.getCode()))
+                .hasMessage("请先获取验证码");
+    }
+
+    @Test
+    void should_reject_consume_when_code_is_wrong() {
+        AppUserOtp issued = issuedOtp("hash-of-123456");
+        given(otpMapper.selectOne(any())).willReturn(issued);
+        given(hasher.hashOtp("000000")).willReturn("hash-of-000000");
+
+        assertThatThrownBy(() -> otpService.consume("REGISTER", "PHONE", "+628123456789", "000000"))
+                .isInstanceOf(ServiceException.class)
+                .hasMessage("验证码不正确");
+        // 失败要计数，连续错 5 次就作废（防爆破）
+        assertThat(issued.getFailCount()).isEqualTo(1);
+    }
+
+    @Test
+    void should_reject_consume_when_code_is_expired() {
+        AppUserOtp issued = issuedOtp("hash-of-123456");
+        issued.setExpireAt(LocalDateTime.now().minusMinutes(1));
+        given(otpMapper.selectOne(any())).willReturn(issued);
+
+        assertThatThrownBy(() -> otpService.consume("REGISTER", "PHONE", "+628123456789", "123456"))
+                .isInstanceOf(ServiceException.class)
+                .hasMessage("验证码已过期");
+    }
+
+    @Test
+    void should_mark_code_used_when_code_matches() {
+        AppUserOtp issued = issuedOtp("hash-of-123456");
+        AtomicReference<AppUserOtp> updated = new AtomicReference<>();
+        given(otpMapper.selectOne(any())).willReturn(issued);
+        given(hasher.hashOtp("123456")).willReturn("hash-of-123456");
+        given(otpMapper.updateById(any(AppUserOtp.class))).willAnswer(invocation -> {
+            updated.set(invocation.getArgument(0));
+            return 1;
+        });
+
+        otpService.consume("REGISTER", "PHONE", "+628123456789", "123456");
+
+        assertThat(updated.get().getUsedAt()).isNotNull();
+    }
+
+    private AppUserOtp issuedOtp(String codeHash) {
+        AppUserOtp otp = new AppUserOtp();
+        otp.setId(1L);
+        otp.setScene("REGISTER");
+        otp.setTargetType("PHONE");
+        otp.setTarget("+628123456789");
+        otp.setCodeHash(codeHash);
+        otp.setExpireAt(LocalDateTime.now().plusMinutes(5));
+        otp.setFailCount(0);
+        return otp;
+    }
+}

fruitshorts-app-api/src/test/java/com/fruitshorts/app/service/PlaybackServiceTest.java

@@ -0,0 +1,146 @@
+// Author: fruit.com.cn
+package com.fruitshorts.app.service;
+
+import com.fruitshorts.content.dal.entity.Drama;
+import com.fruitshorts.content.dal.entity.DramaEpisode;
+import com.fruitshorts.content.service.DramaService;
+import com.fruitshorts.content.service.EpisodeService;
+import com.fruitshorts.media.service.PlaybackSigner;
+import com.fruitshorts.media.service.TranscodeService;
+import com.fruitshorts.playback.dal.entity.PlaybackTicket;
+import com.fruitshorts.playback.dal.mapper.PlaybackTicketMapper;
+import com.fruitshorts.playback.service.EntitlementPort;
+import com.fruitshorts.playback.service.PlaybackService;
+import com.fruitshorts.playback.vo.PlayRespVO;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+import java.util.List;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyLong;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isNull;
+import static org.mockito.BDDMockito.given;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+
+/**
+ * 播放票据的**判定规则**测试：真 `PlaybackService` + 替身依赖，不连库。
+ *
+ * <p>两条关键分支（接入层只验证字段形态，判定在这里）：免费集一律给签名地址；
+ * 付费集在没权益时**不给地址**，只回 `COIN_REQUIRED` 与所需金币。
+ */
+class PlaybackServiceTest {
+
+    private EpisodeService episodeService;
+    private DramaService dramaService;
+    private PlaybackTicketMapper ticketMapper;
+    private PlaybackSigner signer;
+    private EntitlementPort entitlementPort;
+    private TranscodeService transcodeService;
+    private PlaybackService playbackService;
+
+    @BeforeEach
+    void setUp() {
+        episodeService = mock(EpisodeService.class);
+        dramaService = mock(DramaService.class);
+        ticketMapper = mock(PlaybackTicketMapper.class);
+        signer = mock(PlaybackSigner.class);
+        entitlementPort = mock(EntitlementPort.class);
+        transcodeService = mock(TranscodeService.class);
+        playbackService = new PlaybackService(episodeService, dramaService, ticketMapper, signer,
+                entitlementPort, transcodeService);
+        given(dramaService.getPublished(anyLong())).willReturn(drama());
+        given(transcodeService.listRenditions(anyLong())).willReturn(List.of());
+        given(signer.sign(anyString())).willReturn("/files/episode/1.mp4?e=1&s=sig");
+    }
+
+    @Test
+    void should_return_free_access_when_episode_is_free() {
+        given(episodeService.getPublished(11L)).willReturn(episode(11L, 1, 0, "/files/episode/1.mp4"));
+
+        PlayRespVO resp = playbackService.play(null, 11L, "device-9", "203.0.113.8");
+
+        assertThat(resp.getAccessible()).isTrue();
+        assertThat(resp.getAccessType()).isEqualTo(PlaybackService.ACCESS_FREE);
+        assertThat(resp.getPlayUrl()).isEqualTo("/files/episode/1.mp4?e=1&s=sig");
+        // 未登录不记票据（票据是"已登录用户"的签发审计）
+        verify(ticketMapper, never()).insert(any(PlaybackTicket.class));
+    }
+
+    @Test
+    void should_return_coin_required_when_episode_is_locked_and_not_entitled() {
+        given(episodeService.getPublished(12L)).willReturn(episode(12L, 0, 60, "/files/episode/2.mp4"));
+        given(entitlementPort.isUnlocked(anyLong(), anyLong(), anyLong())).willReturn(false);
+
+        PlayRespVO resp = playbackService.play(1001L, 12L, "device-9", "203.0.113.8");
+
+        assertThat(resp.getAccessible()).isFalse();
+        assertThat(resp.getAccessType()).isEqualTo(PlaybackService.ACCESS_COIN_REQUIRED);
+        assertThat(resp.getPlayUrl()).isEmpty();
+        assertThat(resp.getUnlockCoin()).isEqualTo(60);
+        verify(ticketMapper, never()).insert(any(PlaybackTicket.class));
+    }
+
+    @Test
+    void should_return_entitled_access_when_entitlement_port_confirms_unlock() {
+        given(episodeService.getPublished(13L)).willReturn(episode(13L, 0, 60, "/files/episode/3.mp4"));
+        given(entitlementPort.isUnlocked(eq(1001L), anyLong(), eq(13L))).willReturn(true);
+
+        PlayRespVO resp = playbackService.play(1001L, 13L, "device-9", "203.0.113.8");
+
+        assertThat(resp.getAccessible()).isTrue();
+        assertThat(resp.getAccessType()).isEqualTo(PlaybackService.ACCESS_ENTITLED);
+        assertThat(resp.getPlayUrl()).isEqualTo("/files/episode/1.mp4?e=1&s=sig");
+        verify(ticketMapper).insert(any(PlaybackTicket.class));
+    }
+
+    @Test
+    void should_return_no_media_when_episode_has_no_source() {
+        given(episodeService.getPublished(14L)).willReturn(episode(14L, 1, 0, ""));
+
+        PlayRespVO resp = playbackService.play(isNull(), 14L, "device-9", "203.0.113.8");
+
+        assertThat(resp.getAccessible()).isFalse();
+        assertThat(resp.getAccessType()).isEqualTo(PlaybackService.ACCESS_NO_MEDIA);
+        assertThat(resp.getPlayUrl()).isEmpty();
+    }
+
+    @Test
+    void should_prefer_hls_url_when_the_episode_has_multi_bitrate_renditions() {
+        DramaEpisode episode = episode(15L, 1, 0, "/files/episode/origin.mp4");
+        episode.setHlsUrl("/files/episode/15/master.m3u8");
+        given(episodeService.getPublished(15L)).willReturn(episode);
+
+        PlayRespVO resp = playbackService.play(null, 15L, "device-9", "203.0.113.8");
+
+        assertThat(resp.getPlayUrl()).isEqualTo("/files/episode/1.mp4?e=1&s=sig");
+        verify(signer).sign("/files/episode/15/master.m3u8");
+    }
+
+    private DramaEpisode episode(Long id, int isFree, int unlockCoin, String videoUrl) {
+        DramaEpisode episode = new DramaEpisode();
+        episode.setId(id);
+        episode.setDramaId(7L);
+        episode.setEpNo(1);
+        episode.setTitle("第 1 集");
+        episode.setDurationSec(120);
+        episode.setIsFree(isFree);
+        episode.setUnlockCoin(unlockCoin);
+        episode.setPreviewSeconds(0);
+        episode.setVideoUrl(videoUrl);
+        episode.setStatus("published");
+        return episode;
+    }
+
+    private Drama drama() {
+        Drama drama = new Drama();
+        drama.setId(7L);
+        drama.setTitle("命运的相遇");
+        return drama;
+    }
+}

fruitshorts-app-api/src/test/java/com/fruitshorts/app/support/ControllerContractSupport.java

@@ -0,0 +1,33 @@
+// Author: fruit.com.cn
+package com.fruitshorts.app.support;
+
+import com.fruitshorts.framework.log.AccessDeniedRecorder;
+import com.fruitshorts.framework.web.GlobalExceptionHandler;
+import org.mockito.Mockito;
+import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.test.web.servlet.setup.MockMvcBuilders;
+
+/**
+ * 控制器契约测试的公共装配：真控制器 + 真全局异常处理器 + 真校验器，**不启 Spring 容器**。
+ *
+ * <p>为什么不用 {@code @WebMvcTest}：{@code AppApiApplication} 上挂着
+ * {@code @MapperScan("com.fruitshorts.**.dal.mapper")}，而切片测试不装配 DataSource / MyBatis，
+ * 扫描出的 Mapper 工厂会因为缺少 {@code SqlSessionFactory} 直接报错；要绕开就得再加一套测试专用的
+ * 引导配置。这里的 standaloneSetup 同样只装 Web 层（路由、参数绑定、消息转换、异常处理），
+ * 覆盖面不变而更轻、更稳。
+ */
+public final class ControllerContractSupport {
+
+    private ControllerContractSupport() {
+    }
+
+    /** 组装一个只含指定控制器与全局异常处理的 MockMvc。 */
+    @SuppressWarnings("unchecked")
+    public static MockMvc mockMvcOf(Object controller) {
+        AccessDeniedRecorder recorder = new AccessDeniedRecorder(Mockito.mock(ObjectProvider.class));
+        return MockMvcBuilders.standaloneSetup(controller)
+                .setControllerAdvice(new GlobalExceptionHandler(recorder))
+                .build();
+    }
+}

fruitshorts-common/pom.xml

@@ -1,6 +1,4 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<!-- Author: fruit.com.cn -->
-
 <project xmlns="http://maven.apache.org/POM/4.0.0"
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">

fruitshorts-common/src/main/java/com/fruitshorts/common/exception/ErrorCode.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.common.exception;
 
 import lombok.Getter;

fruitshorts-common/src/main/java/com/fruitshorts/common/exception/ServiceException.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.common.exception;
 
 import lombok.Getter;

fruitshorts-common/src/main/java/com/fruitshorts/common/pojo/CursorResult.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.common.pojo;
 
 import lombok.Getter;

fruitshorts-common/src/main/java/com/fruitshorts/common/pojo/PageParam.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.common.pojo;
 
 import lombok.Data;

fruitshorts-common/src/main/java/com/fruitshorts/common/pojo/PageResult.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.common.pojo;
 
 import lombok.AllArgsConstructor;

fruitshorts-common/src/main/java/com/fruitshorts/common/pojo/Result.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.common.pojo;
 
 import com.fruitshorts.common.exception.ErrorCode;

fruitshorts-framework/pom.xml

@@ -1,6 +1,4 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<!-- Author: fruit.com.cn -->
-
 <project xmlns="http://maven.apache.org/POM/4.0.0"
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
@@ -66,19 +64,5 @@
             <groupId>org.springdoc</groupId>
             <artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
         </dependency>
-
-        <!-- 监控：暴露 actuator 指标供 Prometheus 抓取 -->
-        <dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-starter-actuator</artifactId>
-        </dependency>
-        <dependency>
-            <groupId>io.micrometer</groupId>
-            <artifactId>micrometer-registry-prometheus</artifactId>
-        </dependency>
-        <dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-starter-data-redis</artifactId>
-        </dependency>
     </dependencies>
 </project>

fruitshorts-framework/src/main/java/com/fruitshorts/framework/compliance/ComplianceNotice.java

@@ -1,27 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.framework.compliance;
-
-/**
- * 平台合规声明（法律红线，不可删除或修改）。
- *
- * <p>本软件「水果短剧（FruitShorts）」为正规短剧平台，仅用于承载、分发符合法律法规
- * 与公序良俗的短剧内容。平台严禁且不提供任何用于上传、传播、存储色情、淫秽、露骨或
- * 违法犯罪内容的功能。任何运营方利用本软件从事违法犯罪行为的，其法律责任由运营方独立
- * 承担，与开发者无任何法律关系。
- */
-public final class ComplianceNotice {
-
-    private ComplianceNotice() {
-    }
-
-    /** 平台定位与合法用途声明。 */
-    public static final String PLATFORM_STATEMENT =
-            "水果短剧（FruitShorts）为正规短剧平台，仅用于合法合规的短剧内容运营，"
-                    + "严禁用于任何违法犯罪活动或色情、淫秽、露骨内容的传播。";
-
-    /** 内容合规红线：用户生成内容发布前必须通过敏感词自动检查。 */
-    public static final String CONTENT_RED_LINE =
-            "所有用户生成内容必须通过敏感词自动检查（BLOCK 级直接拦截），"
-                    + "命中待审词必须进入人工审核，禁止任何违规内容上线。";
-}

fruitshorts-framework/src/main/java/com/fruitshorts/framework/compliance/ContentModerationService.java

@@ -1,31 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.framework.compliance;
-
-/**
- * 图片/视频内容审核抽象（露骨内容、违规画面检测）。
- * 第一阶段默认未接入第三方，接入时新增实现类即可，业务侧不感知。
- */
-public interface ContentModerationService {
-
-    /** 审核结论：通过 / 拦截 / 转人工。 */
-    enum Verdict {
-        PASS, BLOCK, REVIEW
-    }
-
-    /**
-     * 审核图片。
-     *
-     * @param imageUrl 图片地址
-     * @return 审核结论
-     */
-    Verdict checkImage(String imageUrl);
-
-    /**
-     * 审核视频（实现方负责抽帧）。
-     *
-     * @param videoUrl 视频地址
-     * @return 审核结论
-     */
-    Verdict checkVideo(String videoUrl);
-}

fruitshorts-framework/src/main/java/com/fruitshorts/framework/compliance/DisabledContentModeration.java

@@ -1,20 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.framework.compliance;
-
-/**
- * 默认内容审核实现：未配置第三方审核服务时一律放行，交由运营方人工审核兜底。
- * 接入第三方（如阿里云内容安全 / Google Cloud Vision SafeSearch）后新增实现类并替换装配。
- */
-public class DisabledContentModeration implements ContentModerationService {
-
-    @Override
-    public Verdict checkImage(String imageUrl) {
-        return Verdict.PASS;
-    }
-
-    @Override
-    public Verdict checkVideo(String videoUrl) {
-        return Verdict.PASS;
-    }
-}

fruitshorts-framework/src/main/java/com/fruitshorts/framework/config/MybatisPlusConfig.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.config;
 
 import com.baomidou.mybatisplus.annotation.DbType;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/config/SchedulingConfig.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.config;
 
 import org.springframework.context.annotation.Configuration;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/log/AccessDeniedRecorder.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.log;
 
 import com.fruitshorts.framework.security.LoginUser;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/log/OperationLog.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.log;
 
 import java.lang.annotation.ElementType;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/log/OperationLogAspect.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.log;
 
 import com.fasterxml.jackson.databind.ObjectMapper;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/log/OperationLogEntry.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.log;
 
 import lombok.Builder;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/log/OperationLogSink.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.log;
 
 /**

fruitshorts-framework/src/main/java/com/fruitshorts/framework/partition/PartitionMaintainer.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.partition;
 
 import lombok.RequiredArgsConstructor;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/partition/PartitionProperties.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.partition;
 
 import lombok.Data;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/redis/RateLimit.java

@@ -1,25 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.framework.redis;
-
-import java.lang.annotation.ElementType;
-import java.lang.annotation.Retention;
-import java.lang.annotation.RetentionPolicy;
-import java.lang.annotation.Target;
-
-/**
- * 接口级固定窗口限流。基于 Redis INCR，key 按客户端 IP 维度隔离。
- */
-@Target(ElementType.METHOD)
-@Retention(RetentionPolicy.RUNTIME)
-public @interface RateLimit {
-
-    /** 窗口内允许的最大请求次数。 */
-    int limit() default 10;
-
-    /** 窗口时长（秒）。 */
-    int windowSeconds() default 60;
-
-    /** 限流维度前缀，默认取方法名。 */
-    String key() default "";
-}

fruitshorts-framework/src/main/java/com/fruitshorts/framework/redis/RateLimitAspect.java

@@ -1,54 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.framework.redis;
-
-import com.fruitshorts.common.exception.ErrorCode;
-import com.fruitshorts.common.exception.ServiceException;
-import jakarta.servlet.http.HttpServletRequest;
-import lombok.RequiredArgsConstructor;
-import org.aspectj.lang.annotation.Aspect;
-import org.aspectj.lang.annotation.Before;
-import org.springframework.stereotype.Component;
-import org.springframework.web.context.request.RequestContextHolder;
-import org.springframework.web.context.request.ServletRequestAttributes;
-
-import java.time.Duration;
-
-/**
- * 固定窗口限流切面：每次命中注解先 INCR，超阈值即拒绝。
- */
-@Aspect
-@Component
-@RequiredArgsConstructor
-public class RateLimitAspect {
-
-    private final RedisService redisService;
-
-    @Before("@annotation(rateLimit)")
-    public void check(RateLimit rateLimit) {
-        long count = redisService.increment(
-                buildKey(rateLimit), Duration.ofSeconds(rateLimit.windowSeconds()));
-        if (count > rateLimit.limit()) {
-            throw new ServiceException(ErrorCode.TOO_MANY_REQUESTS, "请求过于频繁，请稍后再试");
-        }
-    }
-
-    private String buildKey(RateLimit rateLimit) {
-        String scope = rateLimit.key().isBlank() ? "default" : rateLimit.key();
-        return "rate:" + scope + ":" + clientIp();
-    }
-
-    private String clientIp() {
-        ServletRequestAttributes attrs =
-                (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
-        if (attrs == null) {
-            return "unknown";
-        }
-        HttpServletRequest request = attrs.getRequest();
-        String forwarded = request.getHeader("X-Forwarded-For");
-        if (forwarded != null && !forwarded.isBlank()) {
-            return forwarded.split(",")[0].trim();
-        }
-        return request.getRemoteAddr();
-    }
-}

fruitshorts-framework/src/main/java/com/fruitshorts/framework/redis/RedisService.java

@@ -1,45 +0,0 @@
-// Author: fruit.com.cn
-
-package com.fruitshorts.framework.redis;
-
-import lombok.RequiredArgsConstructor;
-import org.springframework.data.redis.core.StringRedisTemplate;
-import org.springframework.stereotype.Component;
-
-import java.time.Duration;
-
-/**
- * Redis 字符串操作封装，供缓存与限流复用。
- * 统一在这里兜底过期策略，业务侧不直接接触 RedisTemplate。
- */
-@Component
-@RequiredArgsConstructor
-public class RedisService {
-
-    private final StringRedisTemplate redisTemplate;
-
-    public void set(String key, String value, Duration ttl) {
-        redisTemplate.opsForValue().set(key, value, ttl);
-    }
-
-    public String get(String key) {
-        return redisTemplate.opsForValue().get(key);
-    }
-
-    public void delete(String key) {
-        redisTemplate.delete(key);
-    }
-
-    /**
-     * 固定窗口计数：自增并保证首次写入时设置过期时间。
-     * 用于接口限流，返回当前窗口内的累计次数。
-     */
-    public long increment(String key, Duration window) {
-        Long count = redisTemplate.opsForValue().increment(key);
-        long value = count == null ? 1 : count;
-        if (value == 1) {
-            redisTemplate.expire(key, window);
-        }
-        return value;
-    }
-}

fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/AppUserStatusChecker.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.security;
 
 /**

fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/ImpersonationGuard.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.security;
 
 import com.fruitshorts.common.exception.ErrorCode;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/JwtAuthenticationFilter.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.security;
 
 import jakarta.servlet.FilterChain;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/JwtProperties.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.security;
 
 import lombok.Data;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/JwtTokenProvider.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.security;
 
 import com.fasterxml.jackson.databind.JsonNode;

fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/LoginUser.java

@@ -1,5 +1,3 @@
-// Author: fruit.com.cn
-
 package com.fruitshorts.framework.security;
 
 import java.util.List;