feat: implement entry variant tagging, backend action handlers, batch variant loading, and rule application API.

internal/api/handlers.go

@@ -17,6 +17,7 @@ import (
 	"git.pengzhan.dev/haopengzhan/rsspipe/internal/models"
 	"git.pengzhan.dev/haopengzhan/rsspipe/internal/opml"
 	"git.pengzhan.dev/haopengzhan/rsspipe/internal/parser"
+	"git.pengzhan.dev/haopengzhan/rsspipe/internal/rules"
 	"git.pengzhan.dev/haopengzhan/rsspipe/internal/worker"
 	"github.com/go-chi/chi/v5"
 )
@@ -662,8 +663,13 @@ func (h *Handler) CreateRule(w http.ResponseWriter, r *http.Request) {
 	if strings.TrimSpace(body.Trigger) == "" {
 		body.Trigger = "on_post_created"
 	}
-	if strings.TrimSpace(body.MatchMode) == "" {
-		body.MatchMode = "all"
+	if err := rules.ValidateRuleSafety(models.Rule{
+		Trigger:    body.Trigger,
+		Conditions: body.Conditions,
+		Actions:    body.Actions,
+	}); err != nil {
+		h.writeError(w, http.StatusBadRequest, err.Error())
+		return
 	}
 
 	rule, err := h.db.CreateRule(body.Name, body.Trigger, body.MatchMode, body.Conditions, body.Actions)
@@ -691,6 +697,15 @@ func (h *Handler) UpdateRule(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	if err := rules.ValidateRuleSafety(models.Rule{
+		Trigger:    body.Trigger,
+		Conditions: body.Conditions,
+		Actions:    body.Actions,
+	}); err != nil {
+		h.writeError(w, http.StatusBadRequest, err.Error())
+		return
+	}
+
 	rule, err := h.db.UpdateRule(id, body.Name, body.Trigger, body.MatchMode, body.Conditions, body.Actions, body.IsActive)
 	if err != nil {
 		h.writeError(w, http.StatusInternalServerError, err.Error())