feat(M4): 生命周期 + 审计 — 到期锁定/回收 cron、审计查询/CSV 导出/每日归档、settings 动态策略

internal/api/handler.go

@@ -1,7 +1,8 @@
 // Package api 为 HTTP handler 层（RESTful v1）。
 // M1 覆盖认证（管理员/外部用户登录、会话、OTP）与用户管理 CRUD；
 // M2 覆盖 SSH 公钥管理（上传/重命名/吊销/列表）；
-// M3 覆盖申请审批（公开提交 + 管理员审批 + 邮件通知）。
+// M3 覆盖申请审批（公开提交 + 管理员审批 + 邮件通知）；
+// M4 覆盖审计查询/导出与系统设置。
 package api
 
 import (
@@ -24,13 +25,15 @@ type Handler struct {
 	User     *UserHandler
 	Key      *KeyHandler
 	Approval *ApprovalHandler
+	Audit    *AuditHandler
+	Settings *SettingsHandler
 
 	authSvc  *service.AuthService
 	auditSvc *service.AuditService
 }
 
 // New 创建 handler 集合。
-func New(cfg *config.Config, authSvc *service.AuthService, userSvc *service.UserService, keySvc *service.KeyService, approvalSvc *service.ApprovalService, auditSvc *service.AuditService) *Handler {
+func New(cfg *config.Config, authSvc *service.AuthService, userSvc *service.UserService, keySvc *service.KeyService, approvalSvc *service.ApprovalService, auditSvc *service.AuditService, settingsSvc *service.SettingService) *Handler {
 	h := &Handler{
 		Health:   &HealthHandler{startedAt: time.Now()},
 		authSvc:  authSvc,
@@ -40,6 +43,8 @@ func New(cfg *config.Config, authSvc *service.AuthService, userSvc *service.User
 	h.User = &UserHandler{svc: userSvc, cfg: cfg, h: h}
 	h.Key = &KeyHandler{svc: keySvc, cfg: cfg, h: h}
 	h.Approval = &ApprovalHandler{svc: approvalSvc, cfg: cfg, h: h}
+	h.Audit = NewAuditHandler(auditSvc, cfg)
+	h.Settings = NewSettingsHandler(settingsSvc)
 	return h
 }
 
@@ -66,7 +71,7 @@ type HealthHandler struct {
 func (h *HealthHandler) Healthz(c *gin.Context) {
 	c.JSON(http.StatusOK, gin.H{
 		"status":    "ok",
-		"version":   "0.3.0-m3",
+		"version":   "0.3.0-m4",
 		"uptime":    time.Since(h.startedAt).String(),
 		"go":        runtime.Version(),
 		"timestamp": time.Now().UTC().Format(time.RFC3339),