feat(health): 班次管理与护士分配 — Shift/PatientAssignment/HandoffLog CRUD

- 新增 3 张数据表迁移 (shifts, patient_assignments, shift_handoff_log)
- 3 个 SeaORM Entity (shift, patient_assignment, handoff_log)
- 完整 CRUD 服务层：班次管理、患者分配（含批量分配）、交接记录
- 12 个 API 端点 + health.shifts.list/manage 权限
- 班次列表含患者分配摘要 (patient_count/critical_count/attention_count)
- 乐观锁、软删除、审计日志、事件发布
- 输入验证：period/shift_status/care_level 白名单

crates/erp-health/src/handler/shift_handler.rs

@@ -0,0 +1,207 @@
+use axum::extract::{FromRef, Json, Path, Query, State};
+use axum::Extension;
+use erp_core::error::AppError;
+use erp_core::rbac::require_permission;
+use erp_core::types::{ApiResponse, TenantContext};
+use uuid::Uuid;
+
+use crate::dto::shift_dto::*;
+use crate::service::shift_service;
+use crate::state::HealthState;
+
+#[derive(Debug, serde::Deserialize)]
+pub struct PaginationParams {
+    pub page: Option<u64>,
+    pub page_size: Option<u64>,
+}
+
+// ---------------------------------------------------------------------------
+// Shift
+// ---------------------------------------------------------------------------
+
+pub async fn list_shifts<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Query(params): Query<ListShiftsParams>,
+) -> Result<Json<ApiResponse<erp_core::types::PaginatedResponse<ShiftResp>>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.list")?;
+    let result = shift_service::list_shifts(&state, ctx.tenant_id, &params).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}
+
+pub async fn get_shift<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Path(shift_id): Path<Uuid>,
+) -> Result<Json<ApiResponse<ShiftResp>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.list")?;
+    let result = shift_service::get_shift(&state, ctx.tenant_id, shift_id).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}
+
+pub async fn create_shift<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Json(mut body): Json<CreateShiftReq>,
+) -> Result<Json<ApiResponse<ShiftResp>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.manage")?;
+    body.sanitize();
+    let result = shift_service::create_shift(&state, ctx.tenant_id, Some(ctx.user_id), body).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}
+
+pub async fn update_shift<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Path(shift_id): Path<Uuid>,
+    Json(body): Json<UpdateShiftWithVersion>,
+) -> Result<Json<ApiResponse<ShiftResp>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.manage")?;
+    let result = shift_service::update_shift(&state, ctx.tenant_id, shift_id, Some(ctx.user_id), body).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}
+
+pub async fn delete_shift<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Path(shift_id): Path<Uuid>,
+    Query(params): Query<crate::dto::DeleteWithVersion>,
+) -> Result<Json<ApiResponse<()>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.manage")?;
+    shift_service::delete_shift(&state, ctx.tenant_id, shift_id, Some(ctx.user_id), params.version).await?;
+    Ok(Json(ApiResponse::ok(())))
+}
+
+// ---------------------------------------------------------------------------
+// PatientAssignment
+// ---------------------------------------------------------------------------
+
+pub async fn list_assignments<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Path(shift_id): Path<Uuid>,
+    Query(params): Query<PaginationParams>,
+) -> Result<Json<ApiResponse<erp_core::types::PaginatedResponse<PatientAssignmentResp>>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.list")?;
+    let page = params.page.unwrap_or(1);
+    let page_size = params.page_size.unwrap_or(20);
+    let result = shift_service::list_assignments(&state, ctx.tenant_id, shift_id, page, page_size).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}
+
+pub async fn create_assignment<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Path(shift_id): Path<Uuid>,
+    Json(mut body): Json<CreatePatientAssignmentReq>,
+) -> Result<Json<ApiResponse<PatientAssignmentResp>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.manage")?;
+    body.sanitize();
+    let result = shift_service::create_assignment(&state, ctx.tenant_id, shift_id, Some(ctx.user_id), body).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}
+
+pub async fn batch_assign<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Path(shift_id): Path<Uuid>,
+    Json(body): Json<BatchAssignReq>,
+) -> Result<Json<ApiResponse<Vec<PatientAssignmentResp>>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.manage")?;
+    let result = shift_service::batch_assign(&state, ctx.tenant_id, shift_id, Some(ctx.user_id), body).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}
+
+pub async fn update_assignment<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Path((shift_id, assignment_id)): Path<(Uuid, Uuid)>,
+    Json(body): Json<UpdatePatientAssignmentWithVersion>,
+) -> Result<Json<ApiResponse<PatientAssignmentResp>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.manage")?;
+    let result = shift_service::update_assignment(&state, ctx.tenant_id, shift_id, assignment_id, Some(ctx.user_id), body).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}
+
+pub async fn delete_assignment<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Path((shift_id, assignment_id)): Path<(Uuid, Uuid)>,
+    Query(params): Query<crate::dto::DeleteWithVersion>,
+) -> Result<Json<ApiResponse<()>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.manage")?;
+    shift_service::delete_assignment(&state, ctx.tenant_id, shift_id, assignment_id, Some(ctx.user_id), params.version).await?;
+    Ok(Json(ApiResponse::ok(())))
+}
+
+// ---------------------------------------------------------------------------
+// HandoffLog
+// ---------------------------------------------------------------------------
+
+pub async fn list_handoffs<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Query(params): Query<ListHandoffParams>,
+) -> Result<Json<ApiResponse<erp_core::types::PaginatedResponse<HandoffLogResp>>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.list")?;
+    let result = shift_service::list_handoffs(&state, ctx.tenant_id, &params).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}
+
+pub async fn create_handoff<S>(
+    State(state): State<HealthState>,
+    Extension(ctx): Extension<TenantContext>,
+    Json(body): Json<CreateHandoffReq>,
+) -> Result<Json<ApiResponse<HandoffLogResp>>, AppError>
+where
+    HealthState: FromRef<S>,
+    S: Clone + Send + Sync + 'static,
+{
+    require_permission(&ctx, "health.shifts.manage")?;
+    let result = shift_service::create_handoff(&state, ctx.tenant_id, Some(ctx.user_id), body).await?;
+    Ok(Json(ApiResponse::ok(result)))
+}