feat(user): 支持后台调整等级并限制极品专区可见性

backend/internal/modules/adminuser/dto.go

@@ -19,6 +19,8 @@ type UserDTO struct {
 	PointsAvailable               int64      `json:"points_available"`
 	RenterGrowthLevel             string     `json:"renter_growth_level"`
 	RenterGrowthLevelName         string     `json:"renter_growth_level_name"`
+	RenterGrowthLevelOverride     string     `json:"renter_growth_level_override"`
+	RenterGrowthLevelManual       bool       `json:"renter_growth_level_manual"`
 	AvailableBalanceCent          int64      `json:"available_balance_cent"`
 	FrozenBalanceCent             int64      `json:"frozen_balance_cent"`
 	QualityOwnerStatus            string     `json:"quality_owner_status"`
@@ -56,6 +58,11 @@ type GrowthPointsAdjustRequest struct {
 	Reason       string `json:"reason" binding:"required"`
 }
 
+type GrowthLevelAdjustRequest struct {
+	TargetLevel string `json:"target_level"`
+	Reason      string `json:"reason" binding:"required"`
+}
+
 // WalletAdjustRequest 后台人工调整用户可用余额。
 // Direction: in=加款 out=扣款；仅操作 available，不改 frozen。
 type WalletAdjustRequest struct {

backend/internal/modules/adminuser/handler.go

@@ -144,6 +144,29 @@ func (h *Handler) AdjustGrowthPoints(c *gin.Context) {
 	response.OK(c, item)
 }
 
+func (h *Handler) AdjustGrowthLevel(c *gin.Context) {
+	adminID, ok := currentAdminID(c)
+	if !ok {
+		response.Unauthorized(c, "缺少管理员上下文")
+		return
+	}
+	userID, ok := parseID(c)
+	if !ok {
+		return
+	}
+	var req GrowthLevelAdjustRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.BadRequest(c, "成长等级调整参数不正确")
+		return
+	}
+	item, err := h.service.AdjustGrowthLevel(c.Request.Context(), adminID, userID, req, auditMeta(c))
+	if err != nil {
+		writeAdminUserError(c, err)
+		return
+	}
+	response.OK(c, item)
+}
+
 func (h *Handler) RevokeRealname(c *gin.Context) {
 	adminID, ok := currentAdminID(c)
 	if !ok {
@@ -265,6 +288,12 @@ func writeAdminUserError(c *gin.Context, err error) {
 		response.BadRequest(c, "请填写 2-200 字的积分调整原因")
 	case errors.Is(err, ErrGrowthPointsUnchanged):
 		response.Error(c, http.StatusConflict, "growth_points_unchanged", "目标积分与当前积分相同")
+	case errors.Is(err, ErrInvalidGrowthLevel):
+		response.BadRequest(c, "目标成长等级不正确")
+	case errors.Is(err, ErrInvalidGrowthLevelReason):
+		response.BadRequest(c, "请填写 2-200 字的等级调整原因")
+	case errors.Is(err, ErrGrowthLevelUnchanged):
+		response.Error(c, http.StatusConflict, "growth_level_unchanged", "目标等级与当前手动等级相同")
 	case IsNotFound(err):
 		response.Error(c, http.StatusNotFound, "not_found", "用户不存在")
 	default:

backend/internal/modules/adminuser/repository.go

@@ -100,8 +100,18 @@ func applyUserFilter(tx *gorm.DB, query ListQuery, growthConfig rentergrowth.Con
 		tx = tx.Where("u.status = ?", query.Status)
 	}
 	if query.HasDepositFreeQuota {
+		quotaLevelCodes := growthQuotaLevelCodes(growthConfig)
 		if minPoints, ok := minimumGrowthQuotaPoints(growthConfig); ok {
-			tx = tx.Where("u.deposit_free_quota_cent > 0 OR u.renter_growth_points >= ?", minPoints)
+			tx = tx.Where(
+				"u.deposit_free_quota_cent > 0 OR u.renter_growth_points >= ? OR u.renter_growth_level_override IN ?",
+				minPoints,
+				quotaLevelCodes,
+			)
+		} else if len(quotaLevelCodes) > 0 {
+			tx = tx.Where(
+				"u.deposit_free_quota_cent > 0 OR u.renter_growth_level_override IN ?",
+				quotaLevelCodes,
+			)
 		} else {
 			tx = tx.Where("u.deposit_free_quota_cent > 0")
 		}
@@ -125,6 +135,16 @@ func applyUserFilter(tx *gorm.DB, query ListQuery, growthConfig rentergrowth.Con
 	return tx
 }
 
+func growthQuotaLevelCodes(cfg rentergrowth.Config) []string {
+	codes := make([]string, 0, len(cfg.Levels))
+	for _, level := range cfg.Levels {
+		if level.DepositFreeQuotaCent > 0 {
+			codes = append(codes, level.Code)
+		}
+	}
+	return codes
+}
+
 func minimumGrowthQuotaPoints(cfg rentergrowth.Config) (int64, bool) {
 	if !cfg.Enabled {
 		return 0, false
@@ -198,9 +218,9 @@ func (r *Repository) AdjustGrowthPoints(ctx context.Context, adminID uint64, use
 		if afterAvailable < 0 {
 			afterAvailable = 0
 		}
-		beforeLevel := rentergrowth.LevelForPoints(cfg, beforePoints)
-		afterLevel := rentergrowth.LevelForPoints(cfg, req.TargetPoints)
-		if !cfg.Enabled {
+		beforeLevel := rentergrowth.EffectiveLevelForUser(cfg, beforePoints, user.RenterGrowthLevelOverride)
+		afterLevel := rentergrowth.LevelForUserAfterPoints(cfg, req.TargetPoints, user.RenterGrowthLevelOverride)
+		if !cfg.Enabled && user.RenterGrowthLevelOverride == "" {
 			beforeLevel = rentergrowth.LevelForPoints(cfg, 0)
 			afterLevel = beforeLevel
 		}
@@ -245,6 +265,56 @@ func (r *Repository) AdjustGrowthPoints(ctx context.Context, adminID uint64, use
 	return r.Find(ctx, userID)
 }
 
+func (r *Repository) AdjustGrowthLevel(ctx context.Context, adminID uint64, userID uint64, req GrowthLevelAdjustRequest, meta AuditMeta) (*UserDTO, error) {
+	err := r.db.WithContext(ctx).Transaction(func(tx *gorm.DB) error {
+		var user model.User
+		if err := tx.Clauses(clause.Locking{Strength: "UPDATE"}).First(&user, userID).Error; err != nil {
+			return err
+		}
+		cfg, err := rentergrowth.ConfigForTx(tx)
+		if err != nil {
+			return err
+		}
+		targetLevel := strings.TrimSpace(req.TargetLevel)
+		beforeOverride := user.RenterGrowthLevelOverride
+		beforeLevel := rentergrowth.EffectiveLevelForUser(cfg, user.RenterGrowthPoints, beforeOverride)
+		if beforeOverride == "" && !cfg.Enabled {
+			beforeLevel = rentergrowth.LevelForPoints(cfg, 0)
+		}
+		afterLevel := rentergrowth.LevelForPoints(cfg, user.RenterGrowthPoints)
+		if targetLevel != "" {
+			level, ok := rentergrowth.LevelForCode(cfg, targetLevel)
+			if !ok {
+				return ErrInvalidGrowthLevel
+			}
+			afterLevel = level
+		} else if !cfg.Enabled {
+			afterLevel = rentergrowth.LevelForPoints(cfg, 0)
+		}
+		if targetLevel == beforeOverride && user.RenterGrowthLevel == afterLevel.Code {
+			return ErrGrowthLevelUnchanged
+		}
+
+		user.RenterGrowthLevelOverride = targetLevel
+		user.RenterGrowthLevel = afterLevel.Code
+		if err := tx.Save(&user).Error; err != nil {
+			return err
+		}
+		return appendAuditLog(tx, adminID, "admin_user.adjust_growth_level", user.ID, meta, map[string]any{
+			"user_id":         user.ID,
+			"before_level":    beforeLevel.Code,
+			"after_level":     afterLevel.Code,
+			"before_override": beforeOverride,
+			"after_override":  targetLevel,
+			"reason":          req.Reason,
+		})
+	})
+	if err != nil {
+		return nil, err
+	}
+	return r.Find(ctx, userID)
+}
+
 func (r *Repository) updateStatus(ctx context.Context, adminID uint64, userID uint64, status string, riskStatus string, action string, reason string, meta AuditMeta) (*UserDTO, error) {
 	statusChanged := false
 	err := r.db.WithContext(ctx).Transaction(func(tx *gorm.DB) error {
@@ -548,9 +618,13 @@ type userRow struct {
 }
 
 func (row userRow) toDTO(growthConfig rentergrowth.Config) UserDTO {
-	level := rentergrowth.LevelForPoints(growthConfig, row.RenterGrowthPoints)
+	level := rentergrowth.EffectiveLevelForUser(
+		growthConfig,
+		row.RenterGrowthPoints,
+		row.RenterGrowthLevelOverride,
+	)
 	levelQuotaCent := level.DepositFreeQuotaCent
-	if !growthConfig.Enabled {
+	if !growthConfig.Enabled && row.RenterGrowthLevelOverride == "" {
 		level = rentergrowth.LevelForPoints(growthConfig, 0)
 		levelQuotaCent = 0
 	}
@@ -576,6 +650,8 @@ func (row userRow) toDTO(growthConfig rentergrowth.Config) UserDTO {
 		PointsAvailable:               row.PointsAvailable,
 		RenterGrowthLevel:             level.Code,
 		RenterGrowthLevelName:         level.Name,
+		RenterGrowthLevelOverride:     row.RenterGrowthLevelOverride,
+		RenterGrowthLevelManual:       row.RenterGrowthLevelOverride != "",
 		AvailableBalanceCent:          row.AvailableBalanceCent,
 		FrozenBalanceCent:             row.FrozenBalanceCent,
 		QualityOwnerStatus:            row.QualityOwnerStatus,

backend/internal/modules/adminuser/repository_test.go

@@ -73,9 +73,16 @@ func TestApplyUserFilterHasDepositFreeQuota(t *testing.T) {
 	if !strings.Contains(sql, "u.deposit_free_quota_cent > 0 OR u.renter_growth_points >=") {
 		t.Fatalf("SQL 未包含免押额度过滤：%s", sql)
 	}
-	if len(stmt.Vars) != 2 || stmt.Vars[0] != "active" || stmt.Vars[1] != int64(300) {
+	if len(stmt.Vars) != 5 || stmt.Vars[0] != "active" || stmt.Vars[1] != int64(300) {
 		t.Fatalf("筛选变量不正确：%v", stmt.Vars)
 	}
+	overrideCodes := stmt.Vars[2:]
+	if len(overrideCodes) != 3 ||
+		overrideCodes[0] != "platinum" ||
+		overrideCodes[1] != "diamond" ||
+		overrideCodes[2] != "peak" {
+		t.Fatalf("手动等级筛选变量不正确：%v", overrideCodes)
+	}
 }
 
 func TestAdjustGrowthPointsWritesRepeatableLedgers(t *testing.T) {
@@ -120,6 +127,65 @@ func TestAdjustGrowthPointsWritesRepeatableLedgers(t *testing.T) {
 	}
 }
 
+func TestAdjustGrowthLevelLocksLevelAndWritesAudit(t *testing.T) {
+	db := setupAdminUserTestDB(t)
+	user := model.User{
+		Phone:              "13900000006",
+		Status:             "active",
+		RenterGrowthPoints: 100,
+		RenterGrowthLevel:  rentergrowth.DefaultLevelCode,
+	}
+	if err := db.Create(&user).Error; err != nil {
+		t.Fatalf("创建用户失败：%v", err)
+	}
+	repo := NewRepository(db)
+
+	got, err := repo.AdjustGrowthLevel(t.Context(), 66, user.ID, GrowthLevelAdjustRequest{
+		TargetLevel: "platinum",
+		Reason:      "客服核验后手动调整",
+	}, AuditMeta{RequestID: "level-1"})
+	if err != nil {
+		t.Fatalf("手动调整等级失败：%v", err)
+	}
+	if got.RenterGrowthLevel != "platinum" || !got.RenterGrowthLevelManual ||
+		got.RenterGrowthLevelOverride != "platinum" {
+		t.Fatalf("手动等级结果不正确：%+v", got)
+	}
+
+	got, err = repo.AdjustGrowthPoints(t.Context(), 66, user.ID, GrowthPointsAdjustRequest{
+		TargetPoints: 1000,
+		Reason:       "补充成长积分",
+	}, AuditMeta{RequestID: "points-after-level"})
+	if err != nil {
+		t.Fatalf("调整积分失败：%v", err)
+	}
+	if got.RenterGrowthLevel != "platinum" || got.RenterGrowthLevelOverride != "platinum" {
+		t.Fatalf("积分调整不应覆盖手动等级：%+v", got)
+	}
+
+	got, err = repo.AdjustGrowthLevel(t.Context(), 66, user.ID, GrowthLevelAdjustRequest{
+		TargetLevel: "",
+		Reason:      "恢复积分自动计算",
+	}, AuditMeta{RequestID: "level-auto"})
+	if err != nil {
+		t.Fatalf("恢复自动等级失败：%v", err)
+	}
+	if got.RenterGrowthLevel != "diamond" || got.RenterGrowthLevelManual ||
+		got.RenterGrowthLevelOverride != "" {
+		t.Fatalf("恢复自动等级结果不正确：%+v", got)
+	}
+
+	var auditCount int64
+	if err := db.Model(&model.AuditLog{}).
+		Where("action = ? AND biz_id = ?", "admin_user.adjust_growth_level", user.ID).
+		Count(&auditCount).Error; err != nil {
+		t.Fatalf("查询审计日志失败：%v", err)
+	}
+	if auditCount != 2 {
+		t.Fatalf("等级调整审计日志数量 = %d, want 2", auditCount)
+	}
+}
+
 func TestManualRealnameUpdatesUserRecordAndAudit(t *testing.T) {
 	db := setupAdminUserTestDB(t)
 	user := model.User{

backend/internal/modules/adminuser/service.go

@@ -7,22 +7,26 @@ import (
 	"strings"
 
 	"hfb_sys/backend/internal/modules/realname"
+	"hfb_sys/backend/internal/modules/rentergrowth"
 )
 
 var (
-	ErrDependencyUnavailable   = errors.New("dependency unavailable")
-	ErrInvalidUser             = errors.New("invalid user")
-	ErrInvalidRealnameInput    = errors.New("invalid realname input")
-	ErrRealnameAlreadyVerified = errors.New("realname already verified")
-	ErrRealnameIDNoUsed        = realname.ErrIDNoAlreadyUsed
-	ErrRealnameNotRevocable    = errors.New("realname not revocable")
-	ErrInvalidWalletDirection  = errors.New("invalid wallet direction")
-	ErrInvalidWalletAmount     = errors.New("invalid wallet amount")
-	ErrInvalidWalletReason     = errors.New("invalid wallet reason")
-	ErrInsufficientBalance     = errors.New("insufficient balance")
-	ErrInvalidGrowthPoints     = errors.New("invalid growth points")
-	ErrInvalidGrowthReason     = errors.New("invalid growth reason")
-	ErrGrowthPointsUnchanged   = errors.New("growth points unchanged")
+	ErrDependencyUnavailable    = errors.New("dependency unavailable")
+	ErrInvalidUser              = errors.New("invalid user")
+	ErrInvalidRealnameInput     = errors.New("invalid realname input")
+	ErrRealnameAlreadyVerified  = errors.New("realname already verified")
+	ErrRealnameIDNoUsed         = realname.ErrIDNoAlreadyUsed
+	ErrRealnameNotRevocable     = errors.New("realname not revocable")
+	ErrInvalidWalletDirection   = errors.New("invalid wallet direction")
+	ErrInvalidWalletAmount      = errors.New("invalid wallet amount")
+	ErrInvalidWalletReason      = errors.New("invalid wallet reason")
+	ErrInsufficientBalance      = errors.New("insufficient balance")
+	ErrInvalidGrowthPoints      = errors.New("invalid growth points")
+	ErrInvalidGrowthReason      = errors.New("invalid growth reason")
+	ErrGrowthPointsUnchanged    = errors.New("growth points unchanged")
+	ErrInvalidGrowthLevel       = errors.New("invalid growth level")
+	ErrInvalidGrowthLevelReason = errors.New("invalid growth level reason")
+	ErrGrowthLevelUnchanged     = errors.New("growth level unchanged")
 )
 
 // 单笔人工调账上限：10 万元，防止误填。
@@ -99,6 +103,27 @@ func (s *Service) AdjustGrowthPoints(ctx context.Context, adminID uint64, userID
 	return s.repo.AdjustGrowthPoints(ctx, adminID, userID, req, meta)
 }
 
+func (s *Service) AdjustGrowthLevel(ctx context.Context, adminID uint64, userID uint64, req GrowthLevelAdjustRequest, meta AuditMeta) (*UserDTO, error) {
+	if s.repo == nil {
+		return nil, ErrDependencyUnavailable
+	}
+	if userID == 0 {
+		return nil, ErrInvalidUser
+	}
+	req.TargetLevel = strings.TrimSpace(req.TargetLevel)
+	if req.TargetLevel != "" {
+		if _, ok := rentergrowth.LevelForCode(rentergrowth.DefaultConfig(), req.TargetLevel); !ok {
+			return nil, ErrInvalidGrowthLevel
+		}
+	}
+	reason := strings.TrimSpace(req.Reason)
+	if reasonLen := len([]rune(reason)); reasonLen < 2 || reasonLen > 200 {
+		return nil, ErrInvalidGrowthLevelReason
+	}
+	req.Reason = reason
+	return s.repo.AdjustGrowthLevel(ctx, adminID, userID, req, meta)
+}
+
 func (s *Service) RevokeRealname(ctx context.Context, adminID uint64, userID uint64, req RevokeRealnameRequest, meta AuditMeta) (*UserDTO, error) {
 	if s.repo == nil {
 		return nil, ErrDependencyUnavailable