feat: add real account workspace controls

app/api/account/profile/route.ts

@@ -0,0 +1,66 @@
+import { eq } from "drizzle-orm";
+
+import { jsonFailure, jsonSuccess, readJsonBody } from "@/modules/core/server/api";
+import { recordAuditLog } from "@/modules/core/server/audit";
+import { getCurrentAuthContext, toPublicAccount } from "@/modules/core/server/auth";
+import { getDatabase } from "@/modules/core/server/db";
+import { accounts } from "@/modules/core/server/schema";
+
+export const dynamic = "force-dynamic";
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+function readString(source: Record<string, unknown>, key: string): string {
+  const value = source[key];
+  return typeof value === "string" ? value.trim() : "";
+}
+
+export async function PATCH(request: Request): Promise<Response> {
+  const context = await getCurrentAuthContext();
+  if (!context) {
+    return jsonFailure("未登录或会话已过期", 401);
+  }
+
+  const body = await readJsonBody(request);
+  if (!isRecord(body)) {
+    return jsonFailure("请求数据格式无效");
+  }
+
+  const name = readString(body, "name");
+  const avatarUrl = readString(body, "avatarUrl");
+
+  if (!name) {
+    return jsonFailure("用户名称不能为空");
+  }
+
+  const database = getDatabase();
+  const rows = await database
+    .update(accounts)
+    .set({
+      name,
+      avatarUrl,
+      updatedAt: new Date(),
+    })
+    .where(eq(accounts.id, context.account.id))
+    .returning();
+  const account = rows[0];
+  if (!account) {
+    return jsonFailure("账号不存在", 404);
+  }
+
+  const publicAccount = toPublicAccount(account, context.account.role, context.organization);
+
+  await recordAuditLog({
+    actor: publicAccount,
+    organizationId: context.organization?.id,
+    action: "account.profile.update",
+    targetType: "account",
+    targetId: publicAccount.id,
+    result: "success",
+    reason: "更新个人资料",
+  });
+
+  return jsonSuccess("用户资料已保存", { account: publicAccount });
+}