feat(songs): 歌曲管理支持批量驳回、投稿留言自动审查与排期范围可见性过滤

- 新增 /api/admin/songs/batch-reject.post 批量驳回接口（事务清排期/投票/扣接纳数/黑名单去重/异步通知）
- requireSongAdmin 三角色校验 + createApiError 统一错误包装
- scheduleDaysBefore/After 四字段排期可见范围限制（开放 API 与公开排期接口三处缓存路径 + DB 条件过滤）
- submissionNoteAutoModeration 基于黑名单 KEYWORD/LANGUAGE/GENRE 自动判定留言 publicStatus，命中自动关闭 submissionNotePublic
- 更新 songs/request.post 与 songs/[id]/update.put 接入自动审查逻辑

server/api/songs/public.get.ts

@@ -11,7 +11,12 @@ import {
   users,
   votes
 } from '~/drizzle/schema'
-import { and, count, desc, eq, inArray } from 'drizzle-orm'
+import { and, count, desc, eq, gte, inArray, lt, like, or } from 'drizzle-orm'
+import {
+  resolveScheduleVisibilityRange,
+  isPlayDateInRange,
+  type VisibilitySettingsLike
+} from '~~/server/utils/schedule-visibility'
 import { cacheService } from '~~/server/services/cacheService'
 import { executeRedisCommand, isRedisReady } from '../../utils/redis'
 import { formatDateTime } from '~/utils/timeUtils'
@@ -38,6 +43,13 @@ export default defineEventHandler(async (event) => {
       .limit(1)
     const systemSettingsData = systemSettingsDataResult[0] || null
     const shouldHideStudentInfo = systemSettingsData?.hideStudentInfo ?? true
+    const visibilitySettings: VisibilitySettingsLike = {
+      scheduleDaysBeforeEnabled: systemSettingsData?.scheduleDaysBeforeEnabled,
+      scheduleDaysBefore: systemSettingsData?.scheduleDaysBefore,
+      scheduleDaysAfterEnabled: systemSettingsData?.scheduleDaysAfterEnabled,
+      scheduleDaysAfter: systemSettingsData?.scheduleDaysAfter
+    }
+    const visibilityRange = resolveScheduleVisibilityRange(visibilitySettings)
 
     // 初始化缓存服务
 
@@ -73,7 +85,14 @@ export default defineEventHandler(async (event) => {
       })
 
       if (cachedData) {
-        return cachedData
+        const filtered = visibilityRange.startAt || visibilityRange.endAt
+          ? cachedData.filter((s) => isPlayDateInRange(s.playDate, visibilityRange))
+          : cachedData
+        const resultData = JSON.parse(JSON.stringify(filtered)) as PublicScheduleItem[]
+        if (shouldHideStudentInfo && !isAdmin) {
+          maskPublicScheduleData(resultData)
+        }
+        return resultData
       }
     }
 
@@ -91,6 +110,12 @@ export default defineEventHandler(async (event) => {
         filteredSchedules = cachedSchedules.filter((s) => s.song?.semester === semester)
         console.log(`[Cache] 过滤学期 ${semester} 后的数量: ${filteredSchedules.length}`)
       }
+      // 应用排期可见范围过滤
+      if (visibilityRange.startAt || visibilityRange.endAt) {
+        filteredSchedules = filteredSchedules.filter((s) =>
+          isPlayDateInRange(s.playDate, visibilityRange)
+        )
+      }
 
       // 将过滤后的数据缓存到Redis（缓存完整数据，不进行模糊化）
       if (isRedisReady()) {
@@ -116,6 +141,13 @@ export default defineEventHandler(async (event) => {
     }
 
     // 获取排期的歌曲，包含播放时段信息（查询所有学期的数据）
+    const scheduleWhere: any[] = [eq(schedules.isDraft, false)]
+    if (visibilityRange.startAt) {
+      scheduleWhere.push(gte(schedules.playDate, visibilityRange.startAt)!)
+    }
+    if (visibilityRange.endAt) {
+      scheduleWhere.push(lt(schedules.playDate, visibilityRange.endAt)!)
+    }
     const schedulesData = await db
       .select({
         id: schedules.id,
@@ -153,10 +185,9 @@ export default defineEventHandler(async (event) => {
       .leftJoin(songs, eq(schedules.songId, songs.id))
       .leftJoin(users, eq(songs.requesterId, users.id))
       .leftJoin(playTimes, eq(schedules.playTimeId, playTimes.id))
-      .where(eq(schedules.isDraft, false)) // 只查询已发布的排期
+      .where(and(...scheduleWhere)) // 只查询已发布的排期（+可见范围）
       .orderBy(schedules.playDate)
 
-    // 获取每首歌的投票数
     const voteCountsQuery = await db
       .select({
         songId: votes.songId,