fenleixinxi/application/api/controller/Post.php

<?php

namespace app\api\controller;

use think\Db;

/**
 * 用户端 · 信息发布与详情（Module-POST）
 * 路由：
 *   POST   /api/v1/post/upload           P0 发布媒体上传（图片/视频）
 *   POST   /api/v1/post/create           P1 发布信息（服务端定价）
 *   GET    /api/v1/post/mine             P8 我的发布（含审核状态与计数）
 *   GET    /api/v1/post/publish-config   P9 发布配置（发布模式/价格/我的剩余额度）
 *   GET    /api/v1/post/drafts           P2 草稿列表
 *   POST   /api/v1/post/draft            P3 保存草稿
 *   DELETE /api/v1/post/:id              P4 删除信息
 *   GET    /api/v1/post/:id              P5 信息详情
 *   POST   /api/v1/post/:id/pay-view     P6 付费查看联系方式
 *   POST   /api/v1/post/:id/comment      P7 发表评价
 *
 * 计费口径（后台「发布与费用配置」维护，真源=fc_config）；
 *   金额一律由服务端按配置计算，**不接受客户端传入金额**；
 *   判定顺序：① 套餐额度（fc_user_ext.post_quota_left，开通月/年卡赠送）
 *             → ② 免费发布条数（post.freeQuota，按 post.freeQuotaCycle 统计周期，0 = 不限制）
 *             → ③ 单条付费（post.singlePrice，即「付费发布」标准）；
 *   免费发布模式下免费条数用完即按 ③ 计费（客户端需切到「会员单条」并选支付方式重新提交）；
 *   月卡/年卡（含发布条数）的购买复用 POST /member/open，本控制器只处理
 *   「套餐额度/免费条数内免费发布」与「单条付费发布」两种。
 */
class Post extends V1
{
    /**
     * P0 发布媒体上传
     * POST /api/v1/post/upload   multipart: file（+ 可选 type=image|video）
     *   →  {url,type,size,name}
     * 白名单：图片 jpg/jpeg/png/gif/webp（≤10MB）、视频 mp4/mov（≤50MB）；
     * 按「扩展名 + 真实 MIME（finfo）」双重校验（防改后缀绕过）；
     * 落盘 public/uploads/YYYYMMDD/<md5>.<ext>，返回相对 URL（形如 /uploads/20261017/xxx.jpg），
     * 与 fa_user.avatar 存储口径一致（相对路径入库、前端自行拼域名）。
     */
    public function uploadMedia()
    {
        $this->auth();

        $file = $this->request->file('file');
        if (!$file) {
            $this->fail('未接收到上传文件');
        }

        $info = $file->getInfo();
        $name = isset($info['name']) ? (string)$info['name'] : '';
        $size = isset($info['size']) ? (int)$info['size'] : 0;
        $ext  = strtolower(pathinfo($name, PATHINFO_EXTENSION));

        // 扩展名白名单：[媒体类型, 体积上限(字节), 允许的真实 MIME]
        $allow = [
            'jpg'  => ['image', 10 * 1024 * 1024, ['image/jpeg']],
            'jpeg' => ['image', 10 * 1024 * 1024, ['image/jpeg']],
            'png'  => ['image', 10 * 1024 * 1024, ['image/png']],
            'gif'  => ['image', 10 * 1024 * 1024, ['image/gif']],
            'webp' => ['image', 10 * 1024 * 1024, ['image/webp']],
            'mp4'  => ['video', 50 * 1024 * 1024, ['video/mp4']],
            'mov'  => ['video', 50 * 1024 * 1024, ['video/quicktime']],
        ];
        if (!isset($allow[$ext])) {
            $this->fail('文件类型不支持');
        }
        list($type, $maxSize, $mimes) = $allow[$ext];

        // 客户端可选声明 type：与扩展名推导出的类型不一致时按非法类型拒绝
        $wantType = strtolower(trim((string)$this->input('type', '')));
        if ($wantType !== '' && $wantType !== $type) {
            $this->fail('文件类型不支持');
        }
        if ($size <= 0) {
            $this->fail('文件大小超出限制');
        }
        if ($size > $maxSize) {
            $this->fail('文件大小超出限制');
        }

        // 真实 MIME 双重校验（读临时文件头，图片/视频都必须命中白名单）；
        // 服务器未启用 finfo 时跳过（退化为扩展名 + makeUpload 的 checkImg 兜底）
        if (function_exists('finfo_open')) {
            $finfo = finfo_open(FILEINFO_MIME_TYPE);
            $mime = $finfo ? (string)finfo_file($finfo, $file->getPathname()) : '';
            if ($finfo) {
                finfo_close($finfo);
            }
            if ($mime === '' || !in_array($mime, $mimes, true)) {
                $this->fail('文件类型不支持');
            }
        }

        $dirName  = date('Ymd');
        $saveName = $file->hash('md5') . '.' . $ext;   // md5 命名：同内容文件天然去重
        $destDir  = ROOT_PATH . 'public' . DS . 'uploads' . DS . $dirName . DS;
        $moved    = $file->move($destDir, $saveName, true);
        if (!$moved) {
            $this->fail('文件上传失败，请稍后重试');
        }

        $this->ok([
            'url'  => '/uploads/' . $dirName . '/' . $saveName,
            'type' => $type,
            'size' => $size,
            'name' => $name,
        ]);
    }

    /**
     * P1 发布信息
     * POST /api/v1/post/create
     *   入参 {categoryId,title,content,media[],contact,phone,address,lat?,lng?,plan,payType}
     *   →  {postId,auditStatus,order,plan,amount,discountRate,quotaLeft,freeQuotaLeft}
     * 规则 BR-03/BR-04/BR-02/BR-13（计费顺序：套餐额度 → 免费发布条数 → 单条付费）
     * 说明：
     *   - `media` 接收**上传后的 URL 数组**（先调 POST /post/upload 拿 url，再随发布提交）；
     *   - `lat`/`lng` 可选（gcj02），由前端 chooseLocation 采集，用于首页「附近」排序；
     *   - 单条付费金额 = round(单条价格 × 会员折扣率, 2)，折扣率取自 member.benefit.postDiscount
     *     （会员权益，非会员/解析失败视作 1）；金额一律服务端计算，忽略客户端传值。
     */
    public function create()
    {
        $user = $this->auth();

        $categoryId = (int)$this->input('categoryId', 0);
        $title = trim((string)$this->input('title', ''));
        $content = trim((string)$this->input('content', ''));

        if ($categoryId <= 0) {
            $this->fail('分类不能为空');
        }
        if ($title === '') {
            $this->fail('标题不能为空');
        }
        if ($content === '') {
            $this->fail('内容不能为空');
        }
        if (mb_strlen($title) > 40) {
            $this->fail('标题不能超过 40 字');
        }
        if (mb_strlen($content) > 500) {
            $this->fail('内容不能超过 500 字');
        }

        $phone = trim((string)$this->input('phone', ''));
        if ($phone !== '' && !preg_match('/^1\d{10}$/', $phone)) {
            $this->fail('手机号格式不正确');
        }

        // ---- 发布计费：金额一律由服务端按后台配置计算，不信任客户端传值 ----
        $rule = $this->publishRule();
        $plan = trim((string)$this->input('plan', ''));
        if ($plan === '' && (bool)$this->input('paid', false)) {
            // 兼容 v1.0.6 及更早客户端：paid=true 视为单条付费（金额仍由服务端决定）
            $plan = 'single';
        }
        if ($plan === '') {
            $plan = 'free';
        }
        if (!in_array($plan, ['free', 'single'], true)) {
            // 月卡/年卡走会员接口开通（POST /member/open），拿到额度后再以 free 发布
            $this->fail('发布方式不支持，请先开通会员套餐');
        }

        $ext = $this->ext($user['id']);
        $quotaLeft = $this->quotaLeft($ext);
        $free = $this->freeQuotaState($user['id']);

        // 会员发布折扣：member.benefit.postDiscount（如 '8 折'→0.8、'9.5折'→0.95）；
        // 折扣属**会员权益**，非会员 / 解析失败 / 不含折扣时视作 1（原价）。
        $discountRate = $this->memberPostDiscount($ext);
        $unitPrice = round($rule['singlePrice'] * $discountRate, 2);

        $amount = 0;
        $payType = '';
        $useQuota = false;      // 套餐额度内免费
        $useFreeQuota = false;  // 免费发布条数内免费
        if ($plan === 'single') {
            // 单条付费 = 付费发布标准（免费发布条数用完后即按此计费）；会员按折扣率计价
            $amount = $unitPrice;
            $payType = trim((string)$this->input('payType', ''));
            if ($amount > 0 && !in_array($payType, ['wxpay', 'balance'], true)) {
                $this->fail('支付方式不支持');
            }
            // 余额校验须在落库之前：否则余额不足时会残留一条 is_paid=1 的无效发布
            if ($amount > 0 && $payType === 'balance' && (float)$user['money'] < $amount) {
                $this->fail('余额不足');
            }
        } elseif ($quotaLeft > 0) {
            $useQuota = true;        // ① 套餐额度（开通月/年卡赠送，随会员有效期）
        } elseif ($free['unlimited'] || $free['left'] > 0) {
            $useFreeQuota = true;    // ② 免费发布条数（post.freeQuota + post.freeQuotaCycle）
        } elseif ($rule['mode'] === 'free') {
            // 免费发布模式下免费条数已用完 → 按「付费发布」标准计费：
            // 需要客户端切到「会员单条」（plan=single）并选支付方式后重新提交，
            // 服务端不主动扣款（避免未经用户确认就产生订单）
            $this->fail('免费额度已用完，请按 ' . number_format((float)$unitPrice, 2) . ' 元/条付费发布');
        } else {
            $this->fail('请选择发布方式');
        }
        $paid = $amount > 0;

        $now = time();
        $postId = Db::name('fc_post')->insertGetId([
            'user_id'       => $user['id'],
            'category_id'   => $categoryId,
            'title'         => $title,
            'content'       => $content,
            'cover'         => '',
            'media'         => json_encode($this->mediaArray(), JSON_UNESCAPED_UNICODE),
            'price'         => round((float)$this->input('price', 0), 2),
            'price_unit'    => (string)$this->input('priceUnit', ''),
            'area'          => (string)$this->input('area', ''),
            'address'       => (string)$this->input('address', ''),
            'contact'       => (string)$this->input('contact', ''),
            'phone'         => $phone,
            'wechat'        => '',
            'tags'          => $this->tagsString(),
            // LBS 坐标（gcj02；未定位/为 0 时存 NULL，首页「附近」不参与距离排序）
            'lat'           => $this->coord('lat', 90),
            'lng'           => $this->coord('lng', 180),
            'is_paid'       => $paid ? 1 : 0,
            'amount'        => $paid ? $amount : 0,
            'pay_type'      => $paid ? $payType : '',
            'audit_status'  => 0,
            'views'         => 0,
            'likes'         => 0,
            'comment_count' => 0,
            'status'        => 1,
            'createtime'    => $now,
            'updatetime'    => $now,
        ]);

        $order = null;
        if ($paid) {
            // 余额支付为「即时支付」：下单即扣款、订单直接置为已支付；
            // 微信支付需要前端调起收银台，保持 pending 由支付回调置为 paid。
            $paidNow = $payType === 'balance';
            $orderNo = $this->orderNo('PO');
            Db::name('fc_order')->insert([
                'order_no'   => $orderNo,
                'user_id'    => $user['id'],
                'type'       => 'post',
                'title'      => $title,
                'amount'     => $amount,
                'pay_type'   => $payType,
                'status'     => $paidNow ? 'paid' : 'pending',
                'paytime'    => $paidNow ? $now : null,
                'related_id' => $postId,
                'createtime' => $now,
                'updatetime' => $now,
            ]);

            if ($paidNow) {
                $balance = round((float)$user['money'] - $amount, 2);
                Db::name('user')->where('id', $user['id'])->update([
                    'money'      => $balance,
                    'updatetime' => $now,
                ]);
                $this->flow('income', '发布付费', $amount, $balance, $postId);
            }

            $order = [
                'orderNo' => $orderNo,
                'amount'  => $amount,
                'payType' => $payType,
                'status'  => $paidNow ? 'paid' : 'pending',
            ];
        }

        // 套餐额度内免费发布：落库成功后扣减 1 条额度（先发布后扣，发布失败不白扣）
        if ($useQuota) {
            $quotaLeft = max(0, $quotaLeft - 1);
            Db::name('fc_user_ext')->where('user_id', $user['id'])->update([
                'post_quota_left' => $quotaLeft,
                'updatetime'      => $now,
            ]);
        }

        $this->ok([
            'postId'        => $postId,
            'auditStatus'   => 0,
            'order'         => $order,
            'plan'          => $useQuota ? 'quota' : ($useFreeQuota ? 'free' : ($paid ? 'single' : 'free')),
            'amount'        => $amount,
            // 本次生效的会员发布折扣率（非会员/未配置为 1）
            'discountRate'  => $discountRate,
            'quotaLeft'     => $quotaLeft,
            // -1 = 不限制（免费发布模式且未设置免费条数）
            'freeQuotaLeft' => $free['unlimited'] ? -1 : max(0, $free['left'] - ($useFreeQuota ? 1 : 0)),
        ]);
    }

    /**
     * P8 我的发布
     * GET /api/v1/post/mine  {status?,page,size}
     *   →  {list,page,size,total,hasMore,counts}
     * status: all(默认) / pending 待审核 / passed 已通过 / rejected 已驳回 / offline 已下架
     * 规则：仅本人（过滤软删）；置顶优先、其次按发布时间倒序；counts 为各状态条数
     */
    public function mine()
    {
        $user = $this->auth();
        list($page, $size) = $this->pager();

        $status = (string)$this->input('status', 'all');

        /** 组合状态筛选（all 不加条件） */
        $apply = function ($query, $status) {
            if ($status === 'pending') {
                $query->where('audit_status', 0)->where('status', 1);
            } elseif ($status === 'passed') {
                $query->where('audit_status', 1)->where('status', 1);
            } elseif ($status === 'rejected') {
                $query->where('audit_status', 2);
            } elseif ($status === 'offline') {
                $query->where('status', 0);
            }
            return $query;
        };
        $base = function () use ($user) {
            return Db::name('fc_post')->where('user_id', $user['id'])->whereNull('deletetime');
        };

        $total = $apply($base(), $status)->count();
        $rows = $apply($base(), $status)->order('is_top desc, createtime desc')
            ->page($page, $size)->select();

        $list = [];
        foreach ($rows as $row) {
            $cat = Db::name('fc_category')->where('id', $row['category_id'])->find();
            $list[] = [
                'id'           => (int)$row['id'],
                'title'        => (string)$row['title'],
                'content'      => (string)$row['content'],
                'categoryId'   => (int)$row['category_id'],
                'categoryName' => $cat ? (string)$cat['name'] : '',
                'cover'        => (string)$row['cover'],
                'price'        => (float)$row['price'],
                'priceUnit'    => (string)$row['price_unit'],
                'area'         => (string)$row['area'],
                'address'      => (string)$row['address'],
                'auditStatus'  => (int)$row['audit_status'],
                'auditReason'  => (string)$row['audit_reason'],
                'status'       => (int)$row['status'],
                'isTop'        => (int)$row['is_top'] === 1,
                'isPaid'       => (int)$row['is_paid'] === 1,
                'amount'       => (float)$row['amount'],
                'views'        => (int)$row['views'],
                'likes'        => (int)$row['likes'],
                'commentCount' => (int)$row['comment_count'],
                'createdAt'    => $this->iso($row['createtime']),
            ];
        }

        $counts = [
            'all'      => (int)$base()->count(),
            'pending'  => (int)$apply($base(), 'pending')->count(),
            'passed'   => (int)$apply($base(), 'passed')->count(),
            'rejected' => (int)$apply($base(), 'rejected')->count(),
            'offline'  => (int)$apply($base(), 'offline')->count(),
        ];

        $this->ok(array_merge($this->paginate($list, $total, $page, $size), ['counts' => $counts]));
    }

    /**
     * P9 发布配置
     * GET /api/v1/post/publish-config
     *   →  {mode,singlePrice,monthPrice,monthQuota,yearPrice,yearQuota,
     *       quotaLeft,quotaExpireAt,isMember,memberExpireAt}
     * 用途：发布页按「免费/付费」呈现并显示套餐价格与剩余额度（价格由后台配置，前端不再写死）
     */
    public function publishConfig()
    {
        $user = $this->auth();
        $rule = $this->publishRule();
        $ext = $this->ext($user['id']);
        $now = time();

        $quotaExpire = (int)$ext['post_quota_expire'];
        $memberExpire = (int)$ext['member_expiretime'];

        // 免费发布条数（post.freeQuota / post.freeQuotaCycle）：超出即按付费发布标准计费
        $free = $this->freeQuotaState($user['id']);

        // 会员发布折扣：与发布接口 create() 同一口径（非会员 / 解析失败一律 1 = 原价）
        $discountRate = $this->memberPostDiscount($ext);

        $this->ok([
            'mode'           => $rule['mode'],
            'singlePrice'    => $rule['singlePrice'],
            // 会员折扣：前端按 singlePrice × discountRate 展示折后价，discountText 用于文案（如「8 折」）
            'discountRate'   => $discountRate,
            'discountText'   => $this->memberPostDiscountText($discountRate),
            'monthPrice'     => $rule['monthPrice'],
            'monthQuota'     => $rule['monthQuota'],
            'yearPrice'      => $rule['yearPrice'],
            'yearQuota'      => $rule['yearQuota'],
            'quotaLeft'      => $this->quotaLeft($ext),
            // 免费发布条数（0 条 + freeUnlimited=true 表示「不限制」，免费到底）
            'freeQuota'      => $free['quota'],
            'freeQuotaCycle' => $free['cycle'],
            'freeQuotaUsed'  => $free['used'],
            'freeQuotaLeft'  => $free['unlimited'] ? -1 : $free['left'],
            'freeUnlimited'  => $free['unlimited'],
            'quotaExpireAt'  => $quotaExpire > 0 ? $this->iso($quotaExpire) : '',
            'isMember'       => (int)$ext['is_member'] === 1 && ($memberExpire === 0 || $memberExpire > $now),
            'memberExpireAt' => $memberExpire > 0 ? $this->iso($memberExpire) : '',
        ]);
    }

    /**
     * 发布规则（后台「发布与费用配置」维护；配置缺失时回落旧 fee.* 再回落内置默认）
     * @return array
     */
    protected function publishRule()
    {
        $mode = (string)$this->cfg('post.mode', 'paid');
        if (!in_array($mode, ['free', 'paid'], true)) {
            $mode = 'paid';
        }
        return [
            'mode'        => $mode,
            'singlePrice' => round((float)$this->cfg('post.singlePrice', $this->cfg('fee.singlePost', 5)), 2),
            'monthPrice'  => round((float)$this->cfg('post.monthPrice', $this->cfg('fee.memberMonth', 19.9)), 2),
            'monthQuota'  => max(0, (int)$this->cfg('post.monthQuota', 30)),
            'yearPrice'   => round((float)$this->cfg('post.yearPrice', $this->cfg('fee.memberYear', 168)), 2),
            'yearQuota'   => max(0, (int)$this->cfg('post.yearQuota', 500)),
        ];
    }

    /**
     * 免费发布条数规则（v1.0.10）
     *   post.freeQuota      免费发布条数（0 = 不限制，免费发布模式下「免费到底」）
     *   post.freeQuotaCycle 统计周期：day 每日 / month 每月 / total 累计（不重置）
     * 兼容：配置项 **缺失** 时（老库未执行新版 fc:install）回落 `fee.freePostPerDay` 按日计；
     *       一旦配置项存在（后台「发布与费用配置」保存过或 fc:install 种过），就以配置为准，
     *       此时 `0` 表示「不限制」而不再回落旧值。
     * @return array{quota:int,cycle:string}
     */
    protected function freeQuotaRule()
    {
        $cycle = (string)$this->cfg('post.freeQuotaCycle', 'day');
        if (!in_array($cycle, ['day', 'month', 'total'], true)) {
            $cycle = 'day';
        }
        $raw = $this->cfg('post.freeQuota', null);
        if ($raw === null || $raw === '') {
            $legacy = max(0, (int)$this->cfg('fee.freePostPerDay', 0));
            return ['quota' => $legacy, 'cycle' => $legacy > 0 ? 'day' : $cycle];
        }
        return ['quota' => max(0, (int)$raw), 'cycle' => $cycle];
    }

    /**
     * 免费条数使用情况（按周期统计本人已发布条数，不含软删）
     * @param int $userId
     * @return array{quota:int,cycle:string,used:int,left:int,unlimited:bool}
     */
    protected function freeQuotaState($userId)
    {
        $rule = $this->freeQuotaRule();
        if ($rule['quota'] <= 0) {
            // 0 = 不限制：免费发布模式「免费到底」；付费发布模式视为不额外提供免费条数（走套餐额度或单条付费）
            $unlimited = $this->publishRule()['mode'] === 'free';
            return ['quota' => 0, 'cycle' => $rule['cycle'], 'used' => 0, 'left' => 0, 'unlimited' => $unlimited];
        }
        $used = $this->periodPostCount($userId, $rule['cycle']);
        return [
            'quota'     => $rule['quota'],
            'cycle'     => $rule['cycle'],
            'used'      => $used,
            'left'      => max(0, $rule['quota'] - $used),
            'unlimited' => false,
        ];
    }

    /**
     * 周期起点时间戳
     * @param string $cycle day|month|total
     * @return int
     */
    protected function quotaCycleStart($cycle)
    {
        if ($cycle === 'day') {
            return strtotime(date('Y-m-d') . ' 00:00:00');
        }
        if ($cycle === 'month') {
            return strtotime(date('Y-m') . '-01 00:00:00');
        }
        return 0;
    }

    /**
     * 周期内已发布条数（不含软删）
     * @param int $userId
     * @param string $cycle
     * @return int
     */
    protected function periodPostCount($userId, $cycle)
    {
        $start = $this->quotaCycleStart($cycle);
        $query = Db::name('fc_post')->where('user_id', $userId)->whereNull('deletetime');
        if ($start > 0) {
            $query->where('createtime', '>=', $start);
        }
        return (int)$query->count();
    }

    /**
     * 剩余发布条数（超出有效期视为 0，并顺手把过期额度清零）
     * @param array $ext fc_user_ext 行
     * @return int
     */
    protected function quotaLeft($ext)
    {
        $left = (int)(isset($ext['post_quota_left']) ? $ext['post_quota_left'] : 0);
        $expire = (int)(isset($ext['post_quota_expire']) ? $ext['post_quota_expire'] : 0);
        if ($left > 0 && $expire > 0 && $expire < time()) {
            Db::name('fc_user_ext')->where('user_id', $ext['user_id'])->update([
                'post_quota_left' => 0,
                'updatetime'      => time(),
            ]);
            return 0;
        }
        return $left;
    }

    /**
     * P2 草稿列表
     * GET /api/v1/post/drafts  →  [{draftId,title,content,categoryId,savedAt}]
     */
    public function drafts()
    {
        $user = $this->auth();

        $rows = Db::name('fc_draft')
            ->where('user_id', $user['id'])
            ->order('savedat desc')
            ->select();

        $list = [];
        foreach ($rows as $row) {
            $list[] = [
                'draftId'    => (int)$row['id'],
                'title'      => (string)$row['title'],
                'content'    => (string)$row['content'],
                'categoryId' => (int)$row['category_id'],
                'savedAt'    => $this->iso($row['savedat']),
            ];
        }
        $this->ok($list);
    }

    /**
     * P3 保存草稿
     * POST /api/v1/post/draft  {draftId?,categoryId?,title?,content?,media?,contact?,phone?,address?}
     *   →  {draftId,savedAt,categoryId,title,content}
     */
    public function saveDraft()
    {
        $user = $this->auth();

        $draftId = (int)$this->input('draftId', 0);
        $categoryId = (int)$this->input('categoryId', 0);
        $title = (string)$this->input('title', '');
        $content = (string)$this->input('content', '');
        $now = time();

        $data = [
            'user_id'    => $user['id'],
            'category_id' => $categoryId,
            'title'      => $title,
            'content'    => $content,
            'media'      => json_encode($this->mediaArray(), JSON_UNESCAPED_UNICODE),
            'contact'    => (string)$this->input('contact', ''),
            'phone'      => (string)$this->input('phone', ''),
            'address'    => (string)$this->input('address', ''),
            'savedat'    => $now,
            'updatetime' => $now,
        ];

        if ($draftId > 0) {
            $exist = Db::name('fc_draft')->where('id', $draftId)->find();
            if (!$exist || (int)$exist['user_id'] !== (int)$user['id']) {
                $this->fail('草稿不存在');
            }
            Db::name('fc_draft')->where('id', $draftId)->update($data);
        } else {
            $data['createtime'] = $now;
            $draftId = Db::name('fc_draft')->insertGetId($data);
        }

        $this->ok([
            'draftId'    => $draftId,
            'savedAt'    => $this->iso($now),
            'categoryId' => $categoryId,
            'title'      => $title,
            'content'    => $content,
        ]);
    }

    /**
     * P4 删除信息（软删）
     * DELETE /api/v1/post/:id  →  {deleted:true}
     * 规则：仅能删除本人发布
     */
    public function remove()
    {
        $user = $this->auth();
        $id = $this->routeId();

        $post = Db::name('fc_post')->where('id', $id)->whereNull('deletetime')->find();
        if (!$post) {
            $this->fail('信息不存在', 404);
        }
        if ((int)$post['user_id'] !== (int)$user['id']) {
            $this->fail('无权操作');
        }

        Db::name('fc_post')->where('id', $id)->update([
            'deletetime' => time(),
            'updatetime' => time(),
        ]);

        $this->ok(['deleted' => true]);
    }

    /**
     * P5 信息详情
     * GET /api/v1/post/:id  →  Post 结构（contact 为脱敏串，绝不返回完整手机号）
     *   出参新增：lat / lng（gcj02，未定位为 null）、faved（我是否已收藏）、
     *            followed（我是否已关注发布者）、favoriteCount（该信息收藏数）
     * 规则：允许游客；不存在 fail('信息不存在',404)；每次浏览 views+1
     */
    public function detail()
    {
        // GET /post/:id（详情）与 DELETE /post/:id（软删）共用同一路径，
        // PHP 数组键无法为同一路径注册两条规则，故在此按请求方法分派。
        if ($this->request->isDelete()) {
            $this->remove();
        }

        $id = $this->routeId();

        $post = Db::name('fc_post')->where('id', $id)->whereNull('deletetime')->find();
        if (!$post) {
            $this->fail('信息不存在', 404);
        }

        Db::name('fc_post')->where('id', $id)->setInc('views');
        $post['views'] = (int)$post['views'] + 1;

        $this->ok($this->buildPost($post));
    }

    /**
     * P6 付费查看联系方式
     * POST /api/v1/post/:id/pay-view  {payType}
     *   →  {unlocked:true,contact:{phone,wechat}}（余额/会员免费：立即解锁）
     *   →  {order:{orderNo,amount,payType,status:'pending'}}（微信支付：前端再调 POST /pay/prepay 调起收银台）
     * 规则 BR-05；金额取 fee.payView；会员或已解锁免费
     * 说明：微信支付改为**真实闭环** —— 下单只落 pending 订单（type=payview、related_id=信息ID），
     *      解锁记录 fc_pay_view 由支付回调 /pay/notify 独立写入（回调无需前端参与）。
     */
    public function payView()
    {
        $user = $this->auth();
        $id = $this->routeId();

        $payType = (string)$this->input('payType', '');
        if (!in_array($payType, ['wxpay', 'balance'], true)) {
            $this->fail('支付方式不支持');
        }

        $post = Db::name('fc_post')->where('id', $id)->whereNull('deletetime')->find();
        if (!$post) {
            $this->fail('信息不存在', 404);
        }

        $contact = [
            'phone'  => (string)$post['phone'],
            'wechat' => $post['wechat'] !== '' ? (string)$post['wechat'] : ('tongcheng_' . $id),
        ];

        // 已解锁直接返回
        $exist = Db::name('fc_pay_view')
            ->where('user_id', $user['id'])
            ->where('post_id', $id)
            ->find();
        if ($exist) {
            $this->ok(['unlocked' => true, 'contact' => $contact]);
        }

        $amount = round((float)$this->cfg('fee.payView', 2), 2);
        $now = time();

        $ext = $this->ext($user['id']);
        $isMember = (int)$ext['is_member'] === 1
            && (!$ext['member_expiretime'] || $ext['member_expiretime'] > $now);

        $orderId = 0;
        if ($isMember) {
            // 会员免费解锁
            $amount = 0;
            $payType = 'free';
        } elseif ($payType === 'balance') {
            $balance = (float)$user['money'];
            if ($balance < $amount) {
                $this->fail('余额不足');
            }
            $balance = round($balance - $amount, 2);
            Db::name('user')->where('id', $user['id'])->update([
                'money'      => $balance,
                'updatetime' => $now,
            ]);
            $this->flow('expense', '付费查看', $amount, $balance, $id);
        } else {
            // 微信支付：只落 pending 订单（不预写解锁记录），
            // 支付成功后由 /pay/notify 按 type=payview + related_id 解锁（回调可独立完成）
            $orderNo = $this->orderNo('VO');
            Db::name('fc_order')->insert([
                'order_no'   => $orderNo,
                'user_id'    => $user['id'],
                'type'       => 'payview',
                'title'      => '付费查看 #' . $id,
                'amount'     => $amount,
                'pay_type'   => 'wxpay',
                'status'     => 'pending',
                'paytime'    => null,
                'related_id' => $id,
                'createtime' => $now,
                'updatetime' => $now,
            ]);

            $this->ok([
                'order' => [
                    'orderNo' => $orderNo,
                    'amount'  => $amount,
                    'payType' => 'wxpay',
                    'status'  => 'pending',
                ],
            ]);
        }

        Db::name('fc_pay_view')->insert([
            'user_id'    => $user['id'],
            'post_id'    => $id,
            'pay_type'   => $payType,
            'amount'     => $amount,
            'order_id'   => $orderId,
            'createtime' => $now,
        ]);

        $this->ok(['unlocked' => true, 'contact' => $contact]);
    }

    /**
     * P7 发表评价
     * POST /api/v1/post/:id/comment  {score,content}  →  {commentId}
     * 规则 BR-06
     */
    public function comment()
    {
        $user = $this->auth();
        $id = $this->routeId();

        $content = trim((string)$this->input('content', ''));
        if ($content === '') {
            $this->fail('评价内容不能为空');
        }

        $score = (int)$this->input('score', 5);
        if ($score < 1 || $score > 5) {
            $this->fail('评分需在 1-5 之间');
        }

        $post = Db::name('fc_post')->where('id', $id)->whereNull('deletetime')->find();
        if (!$post) {
            $this->fail('信息不存在', 404);
        }

        $now = time();
        $commentId = Db::name('fc_comment')->insertGetId([
            'post_id'    => $id,
            'user_id'    => $user['id'],
            'score'      => $score,
            'content'    => $content,
            'images'     => '',
            'reply'      => '',
            'top'        => 0,
            'status'     => 1,
            'createtime' => $now,
            'updatetime' => $now,
        ]);

        Db::name('fc_post')->where('id', $id)->setInc('comment_count');

        $this->notify(
            $post['user_id'],
            'interact',
            '收到新评价',
            '用户「' . (string)$user['nickname'] . '」评价了您的信息：' . $content
        );

        $this->ok(['commentId' => $commentId]);
    }

    /**
     * 读取路由 :id 参数（兼容 POST 体/查询串传入）
     * @return int
     */
    protected function routeId()
    {
        $id = (int)$this->input('id', 0);
        if ($id <= 0) {
            $id = (int)$this->request->param('id', 0);
        }
        return $id;
    }

    /**
     * media 入参归一化为字符串数组
     * 约定：接收 **上传后的 URL 数组**（POST /post/upload 返回的 url），
     *       兼容 JSON 字符串（老客户端 media='["/uploads/.."]'）与逗号分隔串。
     * @return array
     */
    protected function mediaArray()
    {
        $media = $this->input('media', []);
        if (is_string($media)) {
            $decoded = json_decode($media, true);
            $media = is_array($decoded) ? $decoded : explode(',', $media);
        }
        if (!is_array($media)) {
            return [];
        }
        $list = [];
        foreach ($media as $item) {
            $item = trim((string)$item);
            if ($item !== '') {
                $list[] = $item;
            }
        }
        return array_values(array_unique($list));
    }

    /**
     * 发布纬度/经度入参（可选 float，gcj02）
     * 未传 / 非数字 / 越界 / 为 0（视为未定位）时返回 null，落库为 NULL。
     * @param string $key   lat|lng
     * @param float  $limit 绝对值上限（纬度 90 / 经度 180）
     * @return float|null
     */
    protected function coord($key, $limit)
    {
        $val = $this->input($key, null);
        if ($val === null || $val === '' || !is_numeric($val)) {
            return null;
        }
        $val = round((float)$val, 6);
        if ($val == 0.0 || $val < -$limit || $val > $limit) {
            return null;
        }
        return $val;
    }

    /**
     * 会员发布折扣率
     * 取自 member.benefit.postDiscount（如 '8 折'→0.8、'9.5折'→0.95、'八折' 视为解析失败→1）；
     * 折扣属会员权益：非会员、解析失败、不含折扣时一律返回 1（原价）。
     * @param array $ext fc_user_ext 行
     * @return float
     */
    protected function memberPostDiscount($ext)
    {
        $now = time();
        $isMember = (int)$ext['is_member'] === 1
            && (empty($ext['member_expiretime']) || (int)$ext['member_expiretime'] > $now);
        if (!$isMember) {
            return 1.0;
        }
        $cfg = $this->cfg('member.benefit', null);
        $text = is_array($cfg) && isset($cfg['postDiscount']) ? (string)$cfg['postDiscount'] : '8 折';
        if (!preg_match('/(\d+(?:\.\d+)?)/', $text, $m)) {
            return 1.0;
        }
        $rate = (float)$m[1] / 10;      // 「8 折」= 0.8；「9.5 折」= 0.95
        if ($rate <= 0 || $rate > 1) {
            return 1.0;
        }
        return round($rate, 2);
    }

    /**
     * 会员发布折扣文案（与 memberPostDiscount 同源；无折扣返回空串）
     * @param float $rate memberPostDiscount() 的返回值
     * @return string
     */
    protected function memberPostDiscountText($rate)
    {
        if ($rate >= 1) {
            return '';
        }
        $cfg = $this->cfg('member.benefit', null);
        return is_array($cfg) && isset($cfg['postDiscount']) ? (string)$cfg['postDiscount'] : '8 折';
    }

    /**
     * Haversine 距离（km，保留一位小数）
     * 自实现而不用 SQL 复杂函数，避免不同 MySQL 版本/字符集下的兼容问题。
     * @param float $lat1
     * @param float $lng1
     * @param float $lat2
     * @param float $lng2
     * @return float
     */
    protected function haversine($lat1, $lng1, $lat2, $lng2)
    {
        $earth = 6371.0;    // 地球平均半径（km）
        $rad = M_PI / 180;
        $dLat = ($lat2 - $lat1) * $rad;
        $dLng = ($lng2 - $lng1) * $rad;
        $a = sin($dLat / 2) * sin($dLat / 2)
            + cos($lat1 * $rad) * cos($lat2 * $rad) * sin($dLng / 2) * sin($dLng / 2);
        $c = 2 * asin(min(1.0, sqrt($a)));
        return round($earth * $c, 1);
    }

    /**
     * 列表项距离（km，一位小数）
     * 请求未带 lat/lng 或信息未定位时返回 null（前端显示「未知距离」）。
     * @param array $row fc_post 行
     * @return float|null
     */
    protected function postDistance($row)
    {
        $lat = $this->input('lat', null);
        $lng = $this->input('lng', null);
        if (!is_numeric($lat) || !is_numeric($lng)) {
            return null;
        }
        $lat = (float)$lat;
        $lng = (float)$lng;
        if ($lat == 0.0 && $lng == 0.0) {
            return null;
        }
        $plat = isset($row['lat']) && $row['lat'] !== null ? (float)$row['lat'] : 0.0;
        $plng = isset($row['lng']) && $row['lng'] !== null ? (float)$row['lng'] : 0.0;
        if ($plat == 0.0 && $plng == 0.0) {
            return null;
        }
        return $this->haversine($lat, $lng, $plat, $plng);
    }

    /**
     * tags 入参归一化为逗号分隔字符串
     * @return string
     */
    protected function tagsString()
    {
        $tags = $this->input('tags', []);
        if (is_array($tags)) {
            $tags = implode(',', $tags);
        }
        return (string)$tags;
    }

    /**
     * 组装 Post 结构（与前端 mock 数据字段严格对齐）
     * public：供 Favorite 等其它用户端控制器复用（保证「我的收藏」列表项与信息流同构）。
     * @param array $row            fc_post 行
     * @param bool  $withInteract   是否附带「我是否收藏/关注」等登录态字段
     * @return array
     */
    public function buildPost($row, $withInteract = true)
    {
        $categoryName = '';
        if (!empty($row['category_id'])) {
            $cat = Db::name('fc_category')->where('id', $row['category_id'])->find();
            if ($cat) {
                $categoryName = (string)$cat['name'];
            }
        }

        $publisher = ['id' => 0, 'name' => '', 'avatar' => '', 'isMerchant' => false, 'verified' => false];
        if (!empty($row['user_id'])) {
            $pub = Db::name('user')->where('id', $row['user_id'])->find();
            if ($pub) {
                $pubExt = Db::name('fc_user_ext')->where('user_id', $pub['id'])->find();
                $isMerchant = $pubExt && (int)$pubExt['user_type'] === 2;
                $publisher = [
                    'id'         => (int)$pub['id'],
                    'name'       => (string)$pub['nickname'],
                    'avatar'     => (string)$pub['avatar'],
                    'isMerchant' => (bool)$isMerchant,
                    'verified'   => (bool)$isMerchant,
                ];
            }
        }

        $tags = [];
        if (!empty($row['tags'])) {
            foreach (explode(',', (string)$row['tags']) as $tag) {
                $tag = trim($tag);
                if ($tag !== '') {
                    $tags[] = $tag;
                }
            }
        }

        // LBS：坐标与距离（未定位 = null）
        $lat = isset($row['lat']) && $row['lat'] !== null && $row['lat'] !== '' ? round((float)$row['lat'], 6) : null;
        $lng = isset($row['lng']) && $row['lng'] !== null && $row['lng'] !== '' ? round((float)$row['lng'], 6) : null;
        if ($lat === 0.0) {
            $lat = null;
        }
        if ($lng === 0.0) {
            $lng = null;
        }

        // 收藏数（公开）+ 我的收藏/关注状态（需登录）
        $postId = (int)$row['id'];
        $favoriteCount = (int)Db::name('fc_favorite')->where('post_id', $postId)->count();
        $faved = false;
        $followed = false;
        if ($withInteract) {
            $me = $this->user();
            if ($me) {
                $faved = (bool)Db::name('fc_favorite')
                    ->where('user_id', $me['id'])
                    ->where('post_id', $postId)
                    ->find();
                $pubId = (int)$row['user_id'];
                if ($pubId > 0 && $pubId !== (int)$me['id']) {
                    $followed = (bool)Db::name('fc_follow')
                        ->where('user_id', $me['id'])
                        ->where('target_user_id', $pubId)
                        ->find();
                }
            }
        }

        return [
            'id'            => $postId,
            'categoryId'    => (int)$row['category_id'],
            'categoryName'  => $categoryName,
            'title'         => (string)$row['title'],
            'content'       => (string)$row['content'],
            'cover'         => (string)$row['cover'],
            'media'         => $this->jsonArr(isset($row['media']) ? $row['media'] : ''),
            'price'         => (float)$row['price'],
            'priceUnit'     => (string)$row['price_unit'],
            'area'          => (string)$row['area'],
            'address'       => (string)$row['address'],
            'contact'       => $this->maskPhone($row['phone']),
            'views'         => (int)$row['views'],
            'likes'         => (int)$row['likes'],
            'isPaid'        => (int)$row['is_paid'] === 1,
            'auditStatus'   => (int)$row['audit_status'],
            'createdAt'     => $this->iso($row['createtime']),
            'tags'          => $tags,
            'publisher'     => $publisher,
            'commentCount'  => (int)$row['comment_count'],
            'lat'           => $lat,
            'lng'           => $lng,
            'distance'      => $this->postDistance($row),
            'faved'         => $faved,
            'followed'      => $followed,
            'favoriteCount' => $favoriteCount,
        ];
    }
}