feat(*): 功能开放与页面布局 - 新增运维开关并优化后台及创作界面空间利用

backend/internal/handler/auth.go

@@ -127,7 +127,12 @@ func RegisterAuthRoutes(r *gin.RouterGroup, svc *service.Service) {
 			failService(c, err)
 			return
 		}
-		ok(c, gin.H{"user": publicUser, "systemChannels": channels, "runtimeLimits": limits, "drawingEngine": drawingEngine})
+		features, err := svc.FeatureAvailability()
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		ok(c, gin.H{"user": publicUser, "systemChannels": channels, "runtimeLimits": limits, "drawingEngine": drawingEngine, "features": features})
 	})
 	r.GET("/channels/system", func(c *gin.Context) {
 		if _, err := currentUser(c, svc); err != nil {
@@ -750,11 +755,13 @@ func proxySystemRequest(c *gin.Context, svc *service.Service, user *model.User,
 			failService(c, err)
 			return
 		}
-		billingOrderID = order.ID
-		if err := svc.MarkBillingRunning(billingOrderID); err != nil {
-			_ = svc.RefundBilling(billingOrderID, "系统渠道请求尚未发出")
-			failService(c, err)
-			return
+		if order != nil {
+			billingOrderID = order.ID
+			if err := svc.MarkBillingRunning(billingOrderID); err != nil {
+				_ = svc.RefundBilling(billingOrderID, "系统渠道请求尚未发出")
+				failService(c, err)
+				return
+			}
 		}
 	}
 	upstreamReq, err := http.NewRequestWithContext(c.Request.Context(), c.Request.Method, target, bytes.NewReader(body))

backend/internal/handler/feature_availability.go

@@ -0,0 +1,75 @@
+package handler
+
+import (
+	"net/http"
+
+	"infinite-canvas/backend/internal/service"
+
+	"github.com/gin-gonic/gin"
+)
+
+func RegisterFeatureAvailabilityRoutes(r *gin.RouterGroup, svc *service.Service) {
+	r.GET("/features", func(c *gin.Context) {
+		if _, err := currentUser(c, svc); err != nil {
+			failService(c, err)
+			return
+		}
+		setting, err := svc.FeatureAvailability()
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		ok(c, gin.H{"features": setting})
+	})
+
+	r.GET("/admin/settings/features", func(c *gin.Context) {
+		user, err := currentUser(c, svc)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		setting, err := svc.AdminFeatureAvailability(user)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		ok(c, gin.H{"features": setting})
+	})
+
+	r.PATCH("/admin/settings/features", func(c *gin.Context) {
+		user, err := currentUser(c, svc)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 16<<10)
+		var req service.FeatureAvailability
+		if err := c.ShouldBindJSON(&req); err != nil {
+			fail(c, http.StatusBadRequest, err)
+			return
+		}
+		setting, err := svc.UpdateFeatureAvailability(user, req)
+		if err != nil {
+			failService(c, err)
+			return
+		}
+		ok(c, gin.H{"features": setting})
+	})
+}
+
+// 功能守卫先校验登录态再判断开放状态，避免关闭功能时改变未登录请求的认证语义。
+func RequireFeature(svc *service.Service, feature string) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		if _, err := currentUser(c, svc); err != nil {
+			failService(c, err)
+			c.Abort()
+			return
+		}
+		if err := svc.RequireFeature(feature); err != nil {
+			failService(c, err)
+			c.Abort()
+			return
+		}
+		c.Next()
+	}
+}