feat: 班级小助手 阶段1-3（monorepo + 后端 REST/Socket.IO + Web 管理端）

packages/server/src/modules/courses/courses.module.ts

@@ -0,0 +1,66 @@
+import { Router } from 'express';
+import { sendCreated, sendOk } from '../../lib/http.js';
+import { idParamSchema } from '../../lib/schemas.js';
+import { authenticate, getAuthUser, requireRole } from '../../middleware/auth.js';
+import { validate, validatedParams, validatedQuery } from '../../middleware/validate.js';
+import { defineModule } from '../module.types.js';
+import {
+  createCourseSchema,
+  listCoursesQuerySchema,
+  updateCourseSchema,
+  type CreateCourseInput,
+  type UpdateCourseInput,
+} from './courses.schemas.js';
+import * as courseService from './courses.service.js';
+
+const router = Router();
+router.use(authenticate());
+
+/** GET /api/courses?classId= - 课程列表 */
+router.get('/', validate({ query: listCoursesQuerySchema }), async (req, res) => {
+  const user = getAuthUser(req);
+  const { classId } = validatedQuery<{ classId?: string }>(req);
+  sendOk(res, await courseService.listCourses(user, classId), '获取课程列表成功');
+});
+
+/** POST /api/courses - 新增课程 */
+router.post(
+  '/',
+  requireRole('ADMIN', 'TEACHER'),
+  validate({ body: createCourseSchema }),
+  async (req, res) => {
+    const user = getAuthUser(req);
+    sendCreated(res, await courseService.createCourse(user, req.body as CreateCourseInput), '课程创建成功');
+  },
+);
+
+/** PATCH /api/courses/:id - 修改课程 */
+router.patch(
+  '/:id',
+  requireRole('ADMIN', 'TEACHER'),
+  validate({ params: idParamSchema, body: updateCourseSchema }),
+  async (req, res) => {
+    const user = getAuthUser(req);
+    const { id } = validatedParams<{ id: string }>(req);
+    sendOk(res, await courseService.updateCourse(user, id, req.body as UpdateCourseInput), '课程更新成功');
+  },
+);
+
+/** DELETE /api/courses/:id - 删除课程 */
+router.delete(
+  '/:id',
+  requireRole('ADMIN', 'TEACHER'),
+  validate({ params: idParamSchema }),
+  async (req, res) => {
+    const user = getAuthUser(req);
+    const { id } = validatedParams<{ id: string }>(req);
+    await courseService.deleteCourse(user, id);
+    sendOk(res, { id }, '课程已删除');
+  },
+);
+
+export const coursesModule = defineModule({
+  name: 'courses',
+  basePath: '/courses',
+  router,
+});

packages/server/src/modules/courses/courses.schemas.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+
+export const createCourseSchema = z.object({
+  name: z.string().trim().min(1, '请输入课程名称').max(64),
+  classId: z.string().min(1, '请选择班级'),
+});
+
+export const updateCourseSchema = z.object({
+  name: z.string().trim().min(1).max(64).optional(),
+});
+
+export const listCoursesQuerySchema = z.object({
+  classId: z.string().min(1).optional(),
+});
+
+export type CreateCourseInput = z.infer<typeof createCourseSchema>;
+export type UpdateCourseInput = z.infer<typeof updateCourseSchema>;

packages/server/src/modules/courses/courses.service.ts

@@ -0,0 +1,53 @@
+import type { CourseDto } from '@classhelper/shared';
+import { assertClassWritable, classScopeWhere, resolveClassScope } from '../../lib/access.js';
+import { prisma } from '../../lib/db.js';
+import { ApiError } from '../../lib/http.js';
+import type { TokenPayload } from '../../lib/jwt.js';
+import { toCourseDto } from '../../lib/mappers.js';
+import type { CreateCourseInput, UpdateCourseInput } from './courses.schemas.js';
+
+const teacherSelect = { select: { id: true, name: true, username: true } } as const;
+
+export async function listCourses(user: TokenPayload, classId?: string): Promise<CourseDto[]> {
+  const scope = await resolveClassScope(user, classId);
+  const courses = await prisma.course.findMany({
+    where: classScopeWhere(scope),
+    include: { teacher: teacherSelect },
+    orderBy: [{ classId: 'asc' }, { name: 'asc' }],
+  });
+  return courses.map(toCourseDto);
+}
+
+export async function createCourse(user: TokenPayload, input: CreateCourseInput): Promise<CourseDto> {
+  await assertClassWritable(user, input.classId);
+
+  const created = await prisma.course.create({
+    data: { name: input.name, classId: input.classId, teacherId: user.sub },
+    include: { teacher: teacherSelect },
+  });
+  return toCourseDto(created);
+}
+
+export async function updateCourse(
+  user: TokenPayload,
+  courseId: string,
+  input: UpdateCourseInput,
+): Promise<CourseDto> {
+  const course = await prisma.course.findUnique({ where: { id: courseId } });
+  if (!course) throw ApiError.notFound('课程不存在');
+  await assertClassWritable(user, course.classId);
+
+  const updated = await prisma.course.update({
+    where: { id: courseId },
+    data: { ...(input.name ? { name: input.name } : {}) },
+    include: { teacher: teacherSelect },
+  });
+  return toCourseDto(updated);
+}
+
+export async function deleteCourse(user: TokenPayload, courseId: string): Promise<void> {
+  const course = await prisma.course.findUnique({ where: { id: courseId } });
+  if (!course) throw ApiError.notFound('课程不存在');
+  await assertClassWritable(user, course.classId);
+  await prisma.course.delete({ where: { id: courseId } });
+}