更新

server/app/adminapi/controller/firstvisit/WecomPromotionController.php

@@ -78,6 +78,19 @@ class WecomPromotionController extends BaseAdminController
         )));
     }
 
+    public function batchUpdatePools()
+    {
+        if (!$this->hasBasePagePermission()) {
+            return $this->fail('权限不足');
+        }
+
+        return $this->run(fn () => $this->success('分流方案配置已批量更新', WecomPromotionLogic::batchUpdatePools(
+            $this->request->post(),
+            $this->adminId,
+            $this->adminInfo
+        )));
+    }
+
     public function saveWidget()
     {
         if (!$this->hasPagePermission()) {

server/app/adminapi/controller/qywx/CustomerController.php

@@ -4,16 +4,19 @@ declare(strict_types=1);
 
 namespace app\adminapi\controller\qywx;
 
-use app\adminapi\controller\BaseAdminController;
-use app\adminapi\lists\qywx\CustomerLists;
-use app\adminapi\logic\qywx\CustomerLogic;
-use app\adminapi\validate\qywx\CustomerValidate;
+use app\adminapi\controller\BaseAdminController;
+use app\adminapi\lists\qywx\CustomerLists;
+use app\adminapi\logic\auth\AuthLogic;
+use app\adminapi\logic\qywx\CustomerLogic;
+use app\adminapi\validate\qywx\CustomerValidate;
 
 /**
  * 企业微信客户管理控制器
  */
-class CustomerController extends BaseAdminController
-{
+class CustomerController extends BaseAdminController
+{
+    private const DELETE_PERMISSION = 'qywx.customer/delete';
+
     /**
      * @notes 客户列表
      */
@@ -25,16 +28,34 @@ class CustomerController extends BaseAdminController
     /**
      * @notes 同步企业微信客户
      */
-    public function sync()
-    {
+    public function sync()
+    {
         $result = CustomerLogic::triggerBackgroundSync();
         if ($result === false) {
             return $this->fail(CustomerLogic::getError());
         }
         $msg = is_array($result) && isset($result['message']) ? (string) $result['message'] : '已提交同步';
 
-        return $this->success($msg, $result);
-    }
+        return $this->success($msg, $result);
+    }
+
+    /**
+     * @notes 删除一条本地企业微信客户同步记录
+     */
+    public function delete()
+    {
+        // 显式鉴权，避免权限菜单迁移漏执行时被通用中间件当成“未受控 URI”放行。
+        if (!$this->canDeleteCustomer()) {
+            return $this->fail('权限不足，无法删除企业微信客户');
+        }
+
+        $params = (new CustomerValidate())->post()->goCheck('delete');
+        if (!CustomerLogic::deleteCustomer((int) $params['id'])) {
+            return $this->fail(CustomerLogic::getError());
+        }
+
+        return $this->success('删除成功');
+    }
 
     /**
      * @notes 获取统计信息
@@ -84,13 +105,22 @@ class CustomerController extends BaseAdminController
     /**
      * @notes 保存同步设置
      */
-    public function saveSyncSettings()
+    public function saveSyncSettings()
     {
         $params = (new CustomerValidate())->post()->goCheck('syncSettings');
         $result = CustomerLogic::saveSyncSettings($params);
         if ($result === false) {
             return $this->fail(CustomerLogic::getError());
         }
-        return $this->success('保存成功');
-    }
-}
+        return $this->success('保存成功');
+    }
+
+    private function canDeleteCustomer(): bool
+    {
+        if ((int) ($this->adminInfo['root'] ?? 0) === 1) {
+            return true;
+        }
+
+        return in_array(self::DELETE_PERMISSION, AuthLogic::getAuthByAdminId($this->adminId), true);
+    }
+}