@fui-org/fui-cli 2.1.3 → 2.2.0

package/skills/{fui-skill → fui}/references/platform-architecture.md

@@ -1,269 +1,269 @@
-# FUI Platform Architecture
-
-> Owns: **FUI structure and Project→Module hierarchy: how import/component/set merge, `vueData`/`v_Set`, runtime lifecycle**.
-
-Source of truth (not training data): runtime `scripts/fastproject.js` (main), `defaultfunction.js` (shared functions), `component.js`/`componentTable.js` (V3: `componentTable-3.0.js`) — core components (`f-table`, `t-*`, dialog, editor...). `f-echart` (`fechart.js`) and `f-sheet` (`fsheet.js`) are **separate files loaded via imports declared in module/project**, not auto-loaded.
-
-> Read BEFORE designing a system/module. Then: per-part config → [module-json-anatomy.md](module-json-anatomy.md); project.json & set → [project-config.md](project-config.md); UI patterns → [ui-patterns.md](ui-patterns.md) (high priority, battle-tested).
-
-## 1. What FUI is
-
-Metadata-driven low-code: each page (module) declares UI + logic in `module.json`; `fastproject.js` builds the Vue 2 + Vuetify DOM from it. Declare only — never hand-write a Vue component per page.
-
-Page load order (pre-bundled, **never re-import**):
-
-1. jQuery, Lodash (`_`), Moment, Numeral, Vuetify, vue-toast, jquery-confirm
-2. `defaultfunction.js` — utilities (`openWindow`, `CALL`, `confirm`, `showMessage`, `ajaxCALL`, `jsonToExcel`...)
-3. `component.js` + `componentTable.js` — register all `f-*` / `t-*`
-4. `fastproject.js` — read `module.json`, merge config, build DOM, run actions, attach watch
-5. Page data: `$projectData` (project.json), `$moduleUI` (module.json), `$projectGroupSetting`
-
-## 2. Project → Module hierarchy (merge rules — most important)
-
-**Project** (shared) parts auto-merge into every **Module** (one page); on conflict **Module wins**.
-
-### 2.1 `set`
-
-Effective config `v_Set` (fastproject.js):
-
-```js
-$.extend(vueData.v_Set, $projectGroupSetting, $projectData, $moduleUI.set);
-// rồi nếu có: $.extend(v_Set, v_Set.domainSetting[domain hiện tại])
-```
-
-Priority (later overrides earlier):
-
-```
-$projectGroupSetting   (cấu hình nhóm project — thấp nhất)
-   ⤵ bị override bởi
-$projectData           = project.json (khối "data")
-   ⤵ bị override bởi
-$moduleUI.set          = "set" trong module.json   ← ƯU TIÊN CAO NHẤT
-   ⤵ cuối cùng override bởi
-v_Set.domainSetting[domain]   (nếu đang chạy trên domain đó)
-```
-
-→ Module inherits all project config (menu, apiDomain, style, login...); declare `set` only for differences. A normal page has **no `set`**. Properties: [project-config.md](project-config.md).
-
-### 2.2 `imports` — appended, not replaced
-
-Project and module imports both load. `addImport`: `.css` → `<link>`; else `<script>`.
-
-Order is **not** framework → project → module: server (`spA_FUI_ModuleDataSelect`) UNIONs framework (per V2/V3), project (`ModuleID IS NULL`) and module scopes, then sorts **once** by `FileSort, FileName`. A module import with small `FileSort` loads **before** a project import. Express order dependencies (e.g. `echarts.min.js` before `fechart.js`) with `FileSort`, never via scope.
-
-Framework uses `FileSort` ~1-10. `fui import new`/`fui import update` guard this in code (`resolveImportSort`, `src/tools/module.ts`): empty sort → scope default (project ≥ 20, module ≥ 50); lower value → raised, with an `ℹ️` note in output. They cannot place an import before the framework — if truly needed, deploy via a route outside fui.
-
-- Project-scope: shared libs for all modules.
-- Module-scope: that page only (e.g. `echarts.min.js` + `fechart.js` for `f-echart`).
-- `imports/_imports.json` = `[]` is normal when only bundled libs are used.
-
-> Adding/removing a component that needs imports (f-echart, f-file-upload, f-editor...) → always `fui import list`, then `fui import new`/`fui import delete`. Import table: [component-quickref.md](component-quickref.md).
-
-#### Import kinds by `ContentType`
-
-| Kind                    | `ContentType`                  | Source                                                    | Edit with                                            |
-| ----------------------- | ------------------------------ | --------------------------------------------------------- | ---------------------------------------------------- |
-| **CDN / URL reference** | empty or not JS/CSS            | External URL (jsdelivr, cdnjs, custom...) — no local file | `fui import update` (metadata only: url, sort, name) |
-| **Uploaded content**    | `text/javascript` / `text/css` | Stored on FUI server; has `fileID` and local `filePath`   | `fui import upload` (overwrite content)              |
-
-User attaches a JS/CSS file and asks for an import:
-
-```
-❌ WRONG: fui import new --content-type link --name "<some url>"
-   → creates a CDN reference; file.js is never stored on the server
-
-✅ RIGHT:
-  1. fui import new ... --content-type text/javascript   → metadata (name, sort, scope)
-  2. fui import upload <fileId> -f file.js                → upload content to FUI server
-```
-
-(Flags: `fui import new --help`.)
-
-- `fui import upload` syncs to **every local `imports/`** declaring that `fileID` — no per-scope repeat.
-- CDN imports: change URL/sort/name via `fui import update`; content **cannot** be uploaded into them.
-- `fui import get` shows the kind (`ContentType`, `FilePath`); `fui import list` shows `ContentType` for all — check it first to pick the next command.
-
-### 2.3 `components`
-
-- `component.js` registers all `f-*`/`t-*` **globally**.
-- Project-scope `uc-*.vue` (`{projectId}/components/`) → auto-loaded globally in **every** module, used by name (no `components:{}`).
-- Module-scope `uc-*.vue` (`{moduleId}/components/`) → that module only.
-- Same name → module-scope wins in that module.
-
-> Design & scope: [component-design.md](component-design.md).
-
-### 2.4 Summary
-
-| Part             | Project provides                              | Merge                           | On conflict         |
-| ---------------- | --------------------------------------------- | ------------------------------- | ------------------- |
-| **set / config** | `project.json` (`data`)                       | Into `v_Set`, then `module.set` | **Module.set wins** |
-| **imports**      | project `_imports.json`                       | **Appended** to module imports  | Both load           |
-| **components**   | project-scope `uc-*.vue` + global `f-*`/`t-*` | Global in every module          | Module-scope wins   |
-
-## 3. Built-in state (`vueData`)
-
-Pre-initialized; use directly in `module.json`/`script.js`:
-
-| Variable                         | Meaning                                                                                |
-| -------------------------------- | -------------------------------------------------------------------------------------- |
-| `user`                           | Logged-in user (from `v_Set.userInfo`)                                                 |
-| `v_Set`                          | Effective page config (§2.1) — [project-config.md](project-config.md)                  |
-| `p_domain`                       | Hostname (e.g. `tsa.example.vn`)                                                       |
-| `p_router` / `p_routers`         | Path (`/manager/schedule-assignment`) / segments (`["manager","schedule-assignment"]`) |
-| `p_params`                       | Query string (`?...`)                                                                  |
-| `p_urlReferrer`                  | Referrer URL                                                                           |
-| `v_Loading` / `v_LoadingOverlay` | API loading state (self-managed)                                                       |
-| `v_containerOn`                  | Toggle main content area                                                               |
-
-Real `vueData` (trimmed) — use for exact paths:
-
-```json
-{
-  "p_domain": "tsa.example.vn",
-  "p_routers": ["manager", "schedule-assignment"],
-  "p_router": "/manager/schedule-assignment",
-  "p_params": "",
-  "user": {
-    "UserID": "NV0000001", "UserName": "nguyenvana",
-    "LastName": "Nguyễn Văn", "FirstName": "A",
-    "Phone": "09xxxxxxxx", "Email": "nguyenvana@example.vn",
-    "GroupID": 1, "DepartmentID": "BGH", "ClassID": null,
-    "SystemRight": 9, "LastLogin": "2026-06-05 09:16:42",
-    "FunctionRight": ["1","2","3","4","5","6","7","8","9","10","11","12","13","14"]
-  },
-  "v_Set": {
-    "title": "Hệ thống quản lý tuyển sinh",
-    "apiDomain": "https://tapi.example.vn/",
-    "login": "https://app.example.vn",
-    "userInfo": "https://tapi.example.vn/acc/userinfo/ts",
-    "logo": "https://.../Logo_ChimLac_W.png",
-    "ProjectName": "Tuyển Sinh",
-    "menuLeft": false,
-    "menu": [ { "name": "...", "right": { "FunctionRight": ["10"] }, "submenu": [ ... ] } ],
-    "userProfile": {
-      "color": "white",
-      "url-signout": "https://app.example.vn/Signout",
-      "url-change-password": "https://app.example.vn/ChangePassword",
-      "url-account": "https://app.example.vn",
-      "url-avatar": "https://file.example.vn/me/avatarOrigin/",
-      "url-app-list": "https://tapi.example.vn/me/auth/ApplicationList"
-    }
-  }
-}
-```
-
-`user` fields depend on the `userInfo` endpoint; usually `UserID`, `UserName`, `LastName`, `FirstName`, `Phone`, `Email`, `GroupID`, `DepartmentID`, `ClassID`, `SystemRight` (int), `FunctionRight` (**string array**, e.g. `["10","14"]`), `LastLogin`; some systems add `Sex`.
-
-> `user.SystemRight` is a **number** (compare `>= 2`); `user.FunctionRight` is a **string array** (`.includes('10')` or `rightTest`). In controls: `vueData.user.UserID`, `vueData.user.SystemRight`, `vueData.v_Set.apiDomain`...
-
-### userInfo endpoint
-
-Permission DB is reached via **apiName/Alias `acc`**:
-
-```
-{apiDomain}/acc/userinfo/{project_apiName}
-```
-
-- `{apiDomain}` — tAPI domain (`vueData.v_Set.apiDomain`)
-- `acc` — fixed permission-DB alias
-- `userinfo` — API name
-- `{project_apiName}` — project apiName/code (admin-set, e.g. `quansinh`, `ts`, `qlsv`)
-
-Declare `userInfo` in `set` of `project.json` or `module.json`; FUI fetches it on load into `vueData.user`.
-
-```json
-// project.json → set
-{
-  "userInfo": "https://tapi.example.vn/acc/userinfo/quansinh"
-}
-```
-
-```js
-vueData.user.UserID; // mã nhân viên/sinh viên
-vueData.user.UserName; // tên đăng nhập
-vueData.user.SystemRight; // quyền hệ thống (int 0–9)
-vueData.user.FunctionRight; // mảng quyền chức năng ["1","2","10",...]
-vueData.user.DepartmentID; // mã đơn vị
-```
-
-In controls (`v-if` by right):
-
-```json
-{ "col": { "v-if": "vueData.user.SystemRight >= 5" } }
-{ "col": { "v-if": "vueData.user.FunctionRight.includes('10')" } }
-```
-
-In action `IN`:
-
-```json
-{ "API": "SP_GetDuLieu", "IN": { "UserID": "vueData.user.UserID", "DeptID": "vueData.user.DepartmentID" } }
-```
-
-> tAPI auto-injects `@sys_UserID`, `@sys_UserName`, `@sys_GroupID`... into every SP — never pass them via `IN`. Use `vueData.user.*` only for client-side JS/Vue logic.
-
-### URL params → `vueData`
-
-`buildParamURL()` sets `vueData[key] = value` for each `?key=value` **before** `data[]` runs. A child module opened via `openWindow`/`redirect` just declares same-named variables and ends `data[]` with `{ "CALL": "apiLoad" }` ([ui-crosswindow-patterns.md](ui-crosswindow-patterns.md)).
-
-### User rights
-
-Two independent kinds, both in the central permission DB (alias `acc`, `{project_apiName}` = project APIName in `tblModules`): `SystemRight` (rank on project, int) and `FunctionRight` (per function, string array). Use in `v-if` and menu `right`; `rightTest({ SystemRight:[...], FunctionRight:[...] })` checks intersection.
-
-Concepts, `tblSysRight`/`tblFunction`, managing definitions (`fui right system|function list|new|update|delete`): [permission-system.md](permission-system.md).
-
-## 4. Page init lifecycle (fastproject.js)
-
-```
-$(document).ready → loadModuleInfo()
-  1. Merge v_Set: $projectGroupSetting ← $projectData ← $moduleUI.set
-  2. Áp domainSetting[domain hiện tại] (nếu có)
-  3. buildParamURL(): query ?key=value → vueData[key]
-  4. Nếu v_Set.userInfo: fetch thông tin user → vueData.user
-  5. createModuleDom():
-     - runAction($moduleUI.data)        → khởi tạo state + chạy action/CALL đầu
-     - buildModuleUI($moduleUI.controls) → dựng DOM (container>rows>cols)
-     - createWatch_Data / createWatch($moduleUI.watch) → gắn watcher
-     - new Vue(...) với Vuetify(v_Set.themeStyle)
-     - Kết nối websocket nếu có vueData.webSocket
-     - Kiểm tra đăng nhập (v_Set.login)
-```
-
-- `data[]` runs top to bottom: state init first, auto-startup `{ "CALL": ... }` last.
-- Put `#PARENT.*` / URL variable assignments **before** fetch CALLs.
-
-## 5. Action keys (quick ref)
-
-Handled by `runAction`/`vueAction`. Patterns + value resolution: **[controls-patterns.md](controls-patterns.md)**.
-
-| Key                            | Effect                                                                                     |
-| ------------------------------ | ------------------------------------------------------------------------------------------ |
-| `API`                          | Call endpoint (POST default). Path without `http` → `v_Set.apiDomain` prepended (`fixURL`) |
-| `IN`                           | Params (mapped from `vueData`)                                                             |
-| `OUT`                          | Result target. Response with only key `data` + string `OUT` → auto-unwrap `d.data`         |
-| `METHOD`                       | Override HTTP method (default POST)                                                        |
-| `HEADER`                       | Override header (default `authorization: Bearer awt`)                                      |
-| `MESS`                         | Success toast                                                                              |
-| `MESSBOX`                      | Message dialog (`showMessage`)                                                             |
-| `CALLBACK`                     | Runs after API/FUN finishes                                                                |
-| `ERROROUT` / `ERRORCALLBACK`   | Error branch                                                                               |
-| `CALL`                         | Call another named action                                                                  |
-| `CONFIRM` / `CANCEL`           | Confirm first; cancel branch                                                               |
-| `IF` / `THEN` / `ELSE`         | Branch (JS expression on vueData)                                                          |
-| `FUN` (+`IN`/`OUT`/`CALLBACK`) | Global function (`openWindow`, `jsonToExcel`, `printPDF`...)                               |
-| `EXE`                          | Raw JS (sparingly)                                                                         |
-| _(plain object)_               | Assigned into `vueData`                                                                    |
-
-`json_data_parse` auto-parses `json_data:Field` response columns into objects ([tapi-reference.md](tapi-reference.md)).
-
-## 6. Entry points
-
-- `f-*` / `t-*` list + required imports → [component-quickref.md](component-quickref.md).
-- Global utilities (`openWindow`, `CALL`, `confirm`, `showMessage`, `ajaxCALL`, `jsonToExcel`, `groupBy`, `pushRouter`, `rightTest`, `printPDF`, `webSocket_Send`...) → [default-function.md](default-function.md).
-- Global libs (`$`, `_`, `moment`, `numeral`, `Vue.$toast`) → [script-map.md](script-map.md) §0 — read before adding any CDN.
-
-## 7. Design rules
-
-- Project provides the frame (menu, apiDomain, style, shared components); Module declares only differences — never repeat project config per module.
-- Component used by >1 module → project-scope, never copied per module.
-- Declare imports only where used; shared component → project-scope import.
-- Everything runs on `vueData`; reference state with the `vueData.` prefix in controls/attrs.
+# FUI Platform Architecture
+
+> Owns: **FUI structure and Project→Module hierarchy: how import/component/set merge, `vueData`/`v_Set`, runtime lifecycle**.
+
+Source of truth (not training data): runtime `scripts/fastproject.js` (main), `defaultfunction.js` (shared functions), `component.js`/`componentTable.js` (V3: `componentTable-3.0.js`) — core components (`f-table`, `t-*`, dialog, editor...). `f-echart` (`fechart.js`) and `f-sheet` (`fsheet.js`) are **separate files loaded via imports declared in module/project**, not auto-loaded.
+
+> Read BEFORE designing a system/module. Then: per-part config → [module-json-anatomy.md](module-json-anatomy.md); project.json & set → [project-config.md](project-config.md); UI patterns → [ui-patterns.md](ui-patterns.md) (high priority, battle-tested).
+
+## 1. What FUI is
+
+Metadata-driven low-code: each page (module) declares UI + logic in `module.json`; `fastproject.js` builds the Vue 2 + Vuetify DOM from it. Declare only — never hand-write a Vue component per page.
+
+Page load order (pre-bundled, **never re-import**):
+
+1. jQuery, Lodash (`_`), Moment, Numeral, Vuetify, vue-toast, jquery-confirm
+2. `defaultfunction.js` — utilities (`openWindow`, `CALL`, `confirm`, `showMessage`, `ajaxCALL`, `jsonToExcel`...)
+3. `component.js` + `componentTable.js` — register all `f-*` / `t-*`
+4. `fastproject.js` — read `module.json`, merge config, build DOM, run actions, attach watch
+5. Page data: `$projectData` (project.json), `$moduleUI` (module.json), `$projectGroupSetting`
+
+## 2. Project → Module hierarchy (merge rules — most important)
+
+**Project** (shared) parts auto-merge into every **Module** (one page); on conflict **Module wins**.
+
+### 2.1 `set`
+
+Effective config `v_Set` (fastproject.js):
+
+```js
+$.extend(vueData.v_Set, $projectGroupSetting, $projectData, $moduleUI.set);
+// rồi nếu có: $.extend(v_Set, v_Set.domainSetting[domain hiện tại])
+```
+
+Priority (later overrides earlier):
+
+```
+$projectGroupSetting   (cấu hình nhóm project — thấp nhất)
+   ⤵ bị override bởi
+$projectData           = project.json (khối "data")
+   ⤵ bị override bởi
+$moduleUI.set          = "set" trong module.json   ← ƯU TIÊN CAO NHẤT
+   ⤵ cuối cùng override bởi
+v_Set.domainSetting[domain]   (nếu đang chạy trên domain đó)
+```
+
+→ Module inherits all project config (menu, apiDomain, style, login...); declare `set` only for differences. A normal page has **no `set`**. Properties: [project-config.md](project-config.md).
+
+### 2.2 `imports` — appended, not replaced
+
+Project and module imports both load. `addImport`: `.css` → `<link>`; else `<script>`.
+
+Order is **not** framework → project → module: server (`spA_FUI_ModuleDataSelect`) UNIONs framework (per V2/V3), project (`ModuleID IS NULL`) and module scopes, then sorts **once** by `FileSort, FileName`. A module import with small `FileSort` loads **before** a project import. Express order dependencies (e.g. `echarts.min.js` before `fechart.js`) with `FileSort`, never via scope.
+
+Framework uses `FileSort` ~1-10. `fui import new`/`fui import update` guard this in code: empty sort → scope default (project ≥ 20, module ≥ 50); lower value → raised, with a `fileSort N raised to M` note in the output. They cannot place an import before the framework — if truly needed, deploy via a route outside fui.
+
+- Project-scope: shared libs for all modules.
+- Module-scope: that page only (e.g. `echarts.min.js` + `fechart.js` for `f-echart`).
+- `imports/_imports.json` = `[]` is normal when only bundled libs are used.
+
+> Adding/removing a component that needs imports (f-echart, f-file-upload, f-editor...) → always `fui import list`, then `fui import new`/`fui import delete`. Import table: [component-quickref.md](component-quickref.md).
+
+#### Import kinds by `ContentType`
+
+| Kind                    | `ContentType`                  | Source                                                    | Edit with                                            |
+| ----------------------- | ------------------------------ | --------------------------------------------------------- | ---------------------------------------------------- |
+| **CDN / URL reference** | empty or not JS/CSS            | External URL (jsdelivr, cdnjs, custom...) — no local file | `fui import update` (metadata only: url, sort, name) |
+| **Uploaded content**    | `text/javascript` / `text/css` | Stored on FUI server; has `fileID` and local `filePath`   | `fui import upload` (overwrite content)              |
+
+User attaches a JS/CSS file and asks for an import:
+
+```
+❌ WRONG: fui import new --content-type link --name "<some url>"
+   → creates a CDN reference; file.js is never stored on the server
+
+✅ RIGHT:
+  1. fui import new ... --content-type text/javascript   → metadata (name, sort, scope)
+  2. fui import upload <fileId> -f file.js                → upload content to FUI server
+```
+
+(Flags: `fui import new --help`.)
+
+- `fui import upload` syncs to **every local `imports/`** declaring that `fileID` — no per-scope repeat.
+- CDN imports: change URL/sort/name via `fui import update`; content **cannot** be uploaded into them.
+- `fui import get` shows the kind (`ContentType`, `FilePath`); `fui import list` shows `ContentType` for all — check it first to pick the next command.
+
+### 2.3 `components`
+
+- `component.js` registers all `f-*`/`t-*` **globally**.
+- Project-scope `uc-*.vue` (`{projectId}/components/`) → auto-loaded globally in **every** module, used by name (no `components:{}`).
+- Module-scope `uc-*.vue` (`{moduleId}/components/`) → that module only.
+- Same name → module-scope wins in that module.
+
+> Design & scope: [component-design.md](component-design.md).
+
+### 2.4 Summary
+
+| Part             | Project provides                              | Merge                           | On conflict         |
+| ---------------- | --------------------------------------------- | ------------------------------- | ------------------- |
+| **set / config** | `project.json` (`data`)                       | Into `v_Set`, then `module.set` | **Module.set wins** |
+| **imports**      | project `_imports.json`                       | **Appended** to module imports  | Both load           |
+| **components**   | project-scope `uc-*.vue` + global `f-*`/`t-*` | Global in every module          | Module-scope wins   |
+
+## 3. Built-in state (`vueData`)
+
+Pre-initialized; use directly in `module.json`/`script.js`:
+
+| Variable                         | Meaning                                                                                |
+| -------------------------------- | -------------------------------------------------------------------------------------- |
+| `user`                           | Logged-in user (from `v_Set.userInfo`)                                                 |
+| `v_Set`                          | Effective page config (§2.1) — [project-config.md](project-config.md)                  |
+| `p_domain`                       | Hostname (e.g. `tsa.example.vn`)                                                       |
+| `p_router` / `p_routers`         | Path (`/manager/schedule-assignment`) / segments (`["manager","schedule-assignment"]`) |
+| `p_params`                       | Query string (`?...`)                                                                  |
+| `p_urlReferrer`                  | Referrer URL                                                                           |
+| `v_Loading` / `v_LoadingOverlay` | API loading state (self-managed)                                                       |
+| `v_containerOn`                  | Toggle main content area                                                               |
+
+Real `vueData` (trimmed) — use for exact paths:
+
+```json
+{
+  "p_domain": "tsa.example.vn",
+  "p_routers": ["manager", "schedule-assignment"],
+  "p_router": "/manager/schedule-assignment",
+  "p_params": "",
+  "user": {
+    "UserID": "NV0000001", "UserName": "nguyenvana",
+    "LastName": "Nguyễn Văn", "FirstName": "A",
+    "Phone": "09xxxxxxxx", "Email": "nguyenvana@example.vn",
+    "GroupID": 1, "DepartmentID": "BGH", "ClassID": null,
+    "SystemRight": 9, "LastLogin": "2026-06-05 09:16:42",
+    "FunctionRight": ["1","2","3","4","5","6","7","8","9","10","11","12","13","14"]
+  },
+  "v_Set": {
+    "title": "Hệ thống quản lý tuyển sinh",
+    "apiDomain": "https://tapi.example.vn/",
+    "login": "https://app.example.vn",
+    "userInfo": "https://tapi.example.vn/acc/userinfo/ts",
+    "logo": "https://.../Logo_ChimLac_W.png",
+    "ProjectName": "Tuyển Sinh",
+    "menuLeft": false,
+    "menu": [ { "name": "...", "right": { "FunctionRight": ["10"] }, "submenu": [ ... ] } ],
+    "userProfile": {
+      "color": "white",
+      "url-signout": "https://app.example.vn/Signout",
+      "url-change-password": "https://app.example.vn/ChangePassword",
+      "url-account": "https://app.example.vn",
+      "url-avatar": "https://file.example.vn/me/avatarOrigin/",
+      "url-app-list": "https://tapi.example.vn/me/auth/ApplicationList"
+    }
+  }
+}
+```
+
+`user` fields depend on the `userInfo` endpoint; usually `UserID`, `UserName`, `LastName`, `FirstName`, `Phone`, `Email`, `GroupID`, `DepartmentID`, `ClassID`, `SystemRight` (int), `FunctionRight` (**string array**, e.g. `["10","14"]`), `LastLogin`; some systems add `Sex`.
+
+> `user.SystemRight` is a **number** (compare `>= 2`); `user.FunctionRight` is a **string array** (`.includes('10')` or `rightTest`). In controls: `vueData.user.UserID`, `vueData.user.SystemRight`, `vueData.v_Set.apiDomain`...
+
+### userInfo endpoint
+
+Permission DB is reached via **apiName/Alias `acc`**:
+
+```
+{apiDomain}/acc/userinfo/{project_apiName}
+```
+
+- `{apiDomain}` — tAPI domain (`vueData.v_Set.apiDomain`)
+- `acc` — fixed permission-DB alias
+- `userinfo` — API name
+- `{project_apiName}` — project apiName/code (admin-set, e.g. `quansinh`, `ts`, `qlsv`)
+
+Declare `userInfo` in `set` of `project.json` or `module.json`; FUI fetches it on load into `vueData.user`.
+
+```json
+// project.json → set
+{
+  "userInfo": "https://tapi.example.vn/acc/userinfo/quansinh"
+}
+```
+
+```js
+vueData.user.UserID; // mã nhân viên/sinh viên
+vueData.user.UserName; // tên đăng nhập
+vueData.user.SystemRight; // quyền hệ thống (int 0–9)
+vueData.user.FunctionRight; // mảng quyền chức năng ["1","2","10",...]
+vueData.user.DepartmentID; // mã đơn vị
+```
+
+In controls (`v-if` by right):
+
+```json
+{ "col": { "v-if": "vueData.user.SystemRight >= 5" } }
+{ "col": { "v-if": "vueData.user.FunctionRight.includes('10')" } }
+```
+
+In action `IN`:
+
+```json
+{ "API": "SP_GetDuLieu", "IN": { "UserID": "vueData.user.UserID", "DeptID": "vueData.user.DepartmentID" } }
+```
+
+> tAPI auto-injects `@sys_UserID`, `@sys_UserName`, `@sys_GroupID`... into every SP — never pass them via `IN`. Use `vueData.user.*` only for client-side JS/Vue logic.
+
+### URL params → `vueData`
+
+`buildParamURL()` sets `vueData[key] = value` for each `?key=value` **before** `data[]` runs. A child module opened via `openWindow`/`redirect` just declares same-named variables and ends `data[]` with `{ "CALL": "apiLoad" }` ([ui-crosswindow-patterns.md](ui-crosswindow-patterns.md)).
+
+### User rights
+
+Two independent kinds, both in the central permission DB (alias `acc`, `{project_apiName}` = project APIName in `tblModules`): `SystemRight` (rank on project, int) and `FunctionRight` (per function, string array). Use in `v-if` and menu `right`; `rightTest({ SystemRight:[...], FunctionRight:[...] })` checks intersection.
+
+Concepts, `tblSysRight`/`tblFunction`, managing definitions (`fui right system|function list|new|update|delete`): [permission-system.md](permission-system.md).
+
+## 4. Page init lifecycle (fastproject.js)
+
+```
+$(document).ready → loadModuleInfo()
+  1. Merge v_Set: $projectGroupSetting ← $projectData ← $moduleUI.set
+  2. Áp domainSetting[domain hiện tại] (nếu có)
+  3. buildParamURL(): query ?key=value → vueData[key]
+  4. Nếu v_Set.userInfo: fetch thông tin user → vueData.user
+  5. createModuleDom():
+     - runAction($moduleUI.data)        → khởi tạo state + chạy action/CALL đầu
+     - buildModuleUI($moduleUI.controls) → dựng DOM (container>rows>cols)
+     - createWatch_Data / createWatch($moduleUI.watch) → gắn watcher
+     - new Vue(...) với Vuetify(v_Set.themeStyle)
+     - Kết nối websocket nếu có vueData.webSocket
+     - Kiểm tra đăng nhập (v_Set.login)
+```
+
+- `data[]` runs top to bottom: state init first, auto-startup `{ "CALL": ... }` last.
+- Put `#PARENT.*` / URL variable assignments **before** fetch CALLs.
+
+## 5. Action keys (quick ref)
+
+Handled by `runAction`/`vueAction`. Patterns + value resolution: **[controls-patterns.md](controls-patterns.md)**.
+
+| Key                            | Effect                                                                                     |
+| ------------------------------ | ------------------------------------------------------------------------------------------ |
+| `API`                          | Call endpoint (POST default). Path without `http` → `v_Set.apiDomain` prepended (`fixURL`) |
+| `IN`                           | Params (mapped from `vueData`)                                                             |
+| `OUT`                          | Result target. Response with only key `data` + string `OUT` → auto-unwrap `d.data`         |
+| `METHOD`                       | Override HTTP method (default POST)                                                        |
+| `HEADER`                       | Override header (default `authorization: Bearer awt`)                                      |
+| `MESS`                         | Success toast                                                                              |
+| `MESSBOX`                      | Message dialog (`showMessage`)                                                             |
+| `CALLBACK`                     | Runs after API/FUN finishes                                                                |
+| `ERROROUT` / `ERRORCALLBACK`   | Error branch                                                                               |
+| `CALL`                         | Call another named action                                                                  |
+| `CONFIRM` / `CANCEL`           | Confirm first; cancel branch                                                               |
+| `IF` / `THEN` / `ELSE`         | Branch (JS expression on vueData)                                                          |
+| `FUN` (+`IN`/`OUT`/`CALLBACK`) | Global function (`openWindow`, `jsonToExcel`, `printPDF`...)                               |
+| `EXE`                          | Raw JS (sparingly)                                                                         |
+| _(plain object)_               | Assigned into `vueData`                                                                    |
+
+`json_data_parse` auto-parses `json_data:Field` response columns into objects ([tapi-reference.md](tapi-reference.md)).
+
+## 6. Entry points
+
+- `f-*` / `t-*` list + required imports → [component-quickref.md](component-quickref.md).
+- Global utilities (`openWindow`, `CALL`, `confirm`, `showMessage`, `ajaxCALL`, `jsonToExcel`, `groupBy`, `pushRouter`, `rightTest`, `printPDF`, `webSocket_Send`...) → [default-function.md](default-function.md).
+- Global libs (`$`, `_`, `moment`, `numeral`, `Vue.$toast`) → [script-map.md](script-map.md) §0 — read before adding any CDN.
+
+## 7. Design rules
+
+- Project provides the frame (menu, apiDomain, style, shared components); Module declares only differences — never repeat project config per module.
+- Component used by >1 module → project-scope, never copied per module.
+- Declare imports only where used; shared component → project-scope import.
+- Everything runs on `vueData`; reference state with the `vueData.` prefix in controls/attrs.