@gadmin2n/schematics 0.0.64 → 0.0.65

package/dist/lib/application/files/gadmin2-game-angle-demo/server/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "gadmin2-demo-server",
+  "name": "erp-backend",
   "version": "0.0.1",
   "description": "",
   "author": "",
@@ -10,84 +10,108 @@
     "build": "gadmin2 build",
     "format": "prettier --write \"../config/*.ts\" \"src/**/*.ts\" \"src/**/*.tsx\" \"test/**/*.ts\"",
     "prepare": "cd .. && husky install",
-    "start": "gadmin2 start",
-    "start:dev": "gadmin2 start --watch",
-    "start:debug": "gadmin2 start --debug --watch",
-    "start:prod": "node dist/src/main",
+    "start": "dotenv -e .env.local -e .env  -- gadmin2 start",
+    "start:dev": "dotenv -e .env.local -e .env  -- gadmin2 start --watch",
+    "start:debug": "dotenv -e .env.local -e .env  -- gadmin2 start --debug --watch",
+    "start:prod": "/bin/sh start-prod.sh",
     "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
     "test": "jest",
     "test:watch": "jest --watch",
     "test:cov": "jest --coverage",
     "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",
     "test:e2e": "jest --config ./test/jest-e2e.json",
-    "migrate:dev": "dotenv -e .env.local -e .env -- prisma migrate dev",
-    "migrate:dev:create": "dotenv -e .env.local -e .env -- prisma migrate dev --create-only",
-    "migrate:deploy": "dotenv -e .env.local -e .env -- prisma migrate deploy",
-    "generate": "dotenv -e .env.local -e .env -- npx prisma generate",
-    "generate:dev": "npm run push:db && dotenv -e .env.local -e .env -- npx prisma generate",
-    "generate:web": "dotenv -e .env.local -e .env -- npx prisma generate --generator react",
-    "generate:server": "dotenv -e .env.local -e .env -- npx prisma generate --generator client --generator nestjs",
-    "push:db": "dotenv -e .env.local -e .env -- prisma db push",
-    "seed": "dotenv -e .env.local -e .env -- ts-node seed/index.ts",
-    "prisma:studio": "dotenv -e .env.local -e .env -- prisma studio"
+    "migrate:dev": "npm run push:db && dotenv -e .env.local -e .env  -- prisma migrate",
+    "migrate:dev:create": "dotenv -e .env.local -e .env  -- prisma migrate dev --create-only",
+    "migrate:deploy": "dotenv -e .env.local -e .env  -- prisma migrate deploy",
+    "migrate:status": "dotenv -e .env.local -e .env  -- prisma migrate status",
+    "generate": "dotenv -e .env.local -e .env  -- npx prisma generate",
+    "generate:dev": "npm run migrate:dev && dotenv -e .env.local -e .env  -- npx prisma generate",
+    "postgenerate:dev": "dotenv -e .env.local -e .env  -- ts-node seed/seedDataMngtPages.ts",
+    "generate:web": "dotenv -e .env.local -e .env  -- npx prisma generate --generator react",
+    "generate:server": "dotenv -e .env.local -e .env  -- npx prisma generate --generator client --generator nestjs",
+    "push:db": "dotenv -e .env.local -e .env  -- prisma db push --skip-generate",
+    "seed": "dotenv -e .env.local -e .env  -- ts-node seed/index.ts",
+    "prisma:studio": "dotenv -e .env.local -e .env  -- prisma studio"
   },
   "dependencies": {
-    "@gadmin2n/nest-common": "^0.0.32",
-    "@nestjs/common": "^8.0.0",
-    "@nestjs/config": "^2.0.0",
-    "@nestjs/core": "^8.0.0",
-    "@nestjs/mapped-types": "*",
-    "@nestjs/platform-express": "^8.0.0",
-    "@nestjs/serve-static": "^3.0.1",
-    "@nestjs/swagger": "^5.2.1",
-    "@prisma/client": "^4.12.0",
+    "@azure/identity": "^4.13.0",
+    "@gadmin2n/nest-common": "^0.0.33",
+    "@nestjs/cache-manager": "^3.0.1",
+    "@nestjs/common": "^10.4.15",
+    "@nestjs/config": "^3.2.0",
+    "@nestjs/core": "^10.4.15",
+    "@nestjs/mapped-types": "^2.0.0",
+    "@nestjs/platform-express": "^10.4.15",
+    "@nestjs/schedule": "^4.0.1",
+    "@nestjs/serve-static": "^4.0.1",
+    "@nestjs/swagger": "^7.3.0",
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/exporter-trace-otlp-grpc": "^0.211.0",
+    "@opentelemetry/instrumentation-express": "^0.47.0",
+    "@opentelemetry/instrumentation-http": "^0.211.0",
+    "@opentelemetry/instrumentation-nestjs-core": "^0.44.0",
+    "@opentelemetry/instrumentation-pg": "^0.51.0",
+    "@opentelemetry/resources": "^2.0.0",
+    "@opentelemetry/sdk-node": "^0.211.0",
+    "@opentelemetry/semantic-conventions": "^1.39.0",
+    "@prisma/client": "^6.19.0",
+    "@prisma/instrumentation": "6.19.0",
+    "axios": "^1.13.2",
+    "cache-manager": "^6.4.3",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.13.2",
     "cookie-parser": "^1.4.6",
+    "crypto-js": "^4.2.0",
+    "csvtojson": "^2.0.10",
+    "dayjs": "^1.10.7",
     "dotenv": "^16.1.3",
+    "dotenv-cli": "^7.4.4",
     "jose": "^4.14.4",
     "js-md5": "^0.7.3",
-    "jsonwebtoken": "^9.0.1",
+    "jsonwebtoken": "^9.0.2",
+    "module-alias": "^2.2.3",
     "nest-access-control": "^2.2.0",
-    "nest-winston": "^1.6.2",
-    "nestjs-prisma": "^0.20.0",
-    "prisma": "^4.12.0",
+    "nest-winston": "^1.9.7",
+    "nestjs-prisma": "^0.25.0",
+    "pg": "^8.16.3",
+    "prisma": "^6.19.0",
     "reflect-metadata": "^0.1.13",
     "request": "^2.88.2",
     "rimraf": "^3.0.2",
     "rxjs": "^7.2.0",
     "swagger-ui-express": "^4.3.0",
-    "winston": "^3.7.2"
+    "winston": "^3.7.2",
+    "xlsx": "^0.18.5"
   },
   "devDependencies": {
-    "@gadmin2n/prisma-nest-generator": "^0.0.29",
-    "@gadmin2n/prisma-react-generator": "^0.0.45",
-    "@nestjs/testing": "^8.0.0",
+    "@gadmin2n/prisma-nest-generator": "^0.0.30",
+    "@gadmin2n/prisma-react-generator": "^0.0.46",
+    "@nestjs/testing": "^10.4.15",
     "@types/cookie-parser": "^1.4.3",
-    "@types/express": "^4.17.13",
-    "@types/jest": "27.4.1",
+    "@types/express": "^4.17.21",
+    "@types/jest": "^29.0.0",
+    "@types/jsonwebtoken": "^9.0.10",
     "@types/multer": "^1.4.7",
     "@types/node": "^16.0.0",
     "@types/supertest": "^2.0.11",
     "@typescript-eslint/eslint-plugin": "^5.0.0",
     "@typescript-eslint/parser": "^5.0.0",
-    "dotenv-cli": "^7.4.4",
     "eslint": "^8.0.1",
     "eslint-config-prettier": "^8.3.0",
     "eslint-plugin-prettier": "^4.0.0",
-    "jest": "^27.2.5",
     "husky": "^8.0.0",
+    "jest": "^29.0.0",
     "lint-staged": "^13.0.0",
     "prettier": "^2.3.2",
     "prettier-plugin-organize-imports": "^3.0.3",
     "prisma-dbml-generator": "^0.9.1",
     "source-map-support": "^0.5.20",
     "supertest": "^6.1.3",
-    "ts-jest": "^27.0.3",
+    "ts-jest": "^29.0.0",
     "ts-loader": "^9.2.3",
     "ts-node": "^10.0.0",
     "tsconfig-paths": "^3.10.1",
-    "typescript": "^4.3.5"
+    "typescript": "^5.3.3"
   },
   "jest": {
     "moduleFileExtensions": [
@@ -106,6 +130,9 @@
     "coverageDirectory": "../coverage",
     "testEnvironment": "node"
   },
+  "_moduleAliases": {
+    "@": "src"
+  },
   "prisma": {
     "seed": "echo 'npm run seed'"
   },

package/dist/lib/application/files/gadmin2-game-angle-demo/server/prisma/.generator.prisma

@@ -1,12 +1,13 @@
 // This is your Prisma schema file,
 // learn more about it in the docs: https://pris.ly/d/prisma-schema
 datasource db {
-  provider = "mysql"
+  provider = "postgresql"
   url      = env("DATABASE_URL")
 }
 
 generator client {
-  provider = "prisma-client-js"
+  provider        = "prisma-client-js"
+  previewFeatures = ["tracing"]
 }
 
 generator nestjs {
@@ -25,7 +26,7 @@ generator nestjs {
 
 generator react {
   provider = "prisma-react-generator"
-  pagesDir = "../../web/src/pages"
+  pagesDir = "../../web/src/routes"
 }
 
 generator dbml {

package/dist/lib/application/files/gadmin2-game-angle-demo/server/prisma.config.ts

@@ -0,0 +1,16 @@
+import 'dotenv/config';
+import { defineConfig } from 'prisma/config';
+
+export default defineConfig({
+  experimental: {
+    externalTables: true,
+  },
+  // 将要被 Prisma 标记为“外部管理”的表名列表
+  // 可以使用 "schema.table" 或仅 "table"（依你 DB/项目设置）
+  tables: {
+    external: [
+      'public.users', // public.users
+    ],
+  },
+  // 其余配置项...
+});

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/games.ts

@@ -1,71 +1 @@
-export default [
-  { label: 'HOK', value: 'u10000000066' },
-  { label: 'PUBG', value: 'ufc454d9b1af70b40588e2a6fa4da4a8b' },
-  { label: 'NIKKE', value: 'uef4312b08dde07820374dd57086ea2fb' },
-  { label: 'Fatshark（战锤）', value: 'e72b4feda779c36a6b6d3cb5eb8efe5d1' },
-  { label: '阿凡达-蓝色行动', value: 'u10000000033' },
-  { label: 'SOP 重生边缘', value: 'eaccc6f302cd02c7e0cf7c806497a3395' },
-  { label: 'Vrising', value: 'ec41360495e0a6b2eb0809ded33746044' },
-  { label: 'Bloodhunt', value: 'e00000000001' },
-  { label: 'Conan Exiles', value: 'efc7a5eee1d6ca668931bcebf69198b60' },
-  { label: 'ACM刺客信条', value: 'e22eae55990dfe9ef2932e5a8234d63db' },
-  {
-    label: '黎明觉醒（生机/Undawn）',
-    value: 'u037857a0ad6aaad86a15227be23adcc4',
-  },
-  { label: '幻塔', value: 'u6d721eb69ef7de198bb84be26be6d40b' },
-  { label: 'NBA2', value: 'u03e9e2775cf377904ca6583456d9f411' },
-  { label: 'world of Taris', value: 'u10000000073' },
-  { label: 'CNC', value: 'u10000000074' },
-  {
-    label: 'Party Animals派对动物',
-    value: 'ea08cbff9a96b95174d530e2eb67c5974',
-  },
-  {
-    label: 'Super Buckyball Tournament超级巴基球',
-    value: 'edd8d6e6890b8dbb27c5c88a082d0143b',
-  },
-  {
-    label: 'Blackmyth: Wukong黑神话：悟空',
-    value: 'e3798a6c4b1afee6ac5f161202a27a7ae',
-  },
-  {
-    label: 'Amazing Cultivation Simulator了不起的修仙模拟器',
-    value: 'e49e633f2e87e606376af989abab855a4',
-  },
-  { label: 'DFM', value: 'DFM' },
-  { label: 'Apex', value: 'u10000000015' },
-  { label: '龙之谷2', value: 'u9d2a3dcc71529b3e0cd5f486d4cd9adb' },
-  { label: '代号GST', value: 'u10000000075' },
-  { label: '小森生活', value: 'ubc78e405a8e320c58a8247299252c522' },
-  { label: 'CODM', value: 'uef76e8182c79db6aafefdfbdd04b7d99' },
-  { label: 'UAMO', value: 'u10000000022' },
-  { label: 'Nightingale', value: 'e11000000297' },
-  { label: 'Brawl Stars', value: 'u84eb1af3a729e5d540b6b78073938574' },
-  { label: 'Transformers Reactivate', value: 'e11000000300' },
-  { label: 'Project Astrid', value: 'e11000000301' },
-  { label: 'Path of Exile', value: 'e91eeea272398097f28c93d0a49f58379' },
-  { label: 'GTFO', value: 'e0e9148a8f7c2e98a5b7d538a75afc932' },
-  { label: 'Warframe', value: 'e11000000282' },
-  { label: 'Xdefiant', value: 'e11000000302' },
-  { label: 'Project EVO', value: 'u10000000079' },
-  { label: 'Derby', value: 'u610b8f6f9103f9431dac99aa5bd45953' },
-  { label: 'Jade', value: 'u10000000071' },
-  { label: 'PAX DEI', value: 'ece5b843df224627f4cc626d9e1f84db5' },
-  { label: 'Perfect New World', value: 'e42a5670bf7a585bce3ac55ad2c384284' },
-  { label: 'Lost Ark', value: 'e7052d6286075a212db99f5ecb452a340' },
-  { label: 'Life After', value: 'u6869b6d91db0225ff10cdf25178b5da6' },
-  {
-    label: 'ミスティックアビス：遺失海域',
-    value: 'u48be1ec5b04c723a894928133d31059c',
-  },
-  { label: 'Once Human', value: 'u909c7ab2e46afc2bc64442c51c62126d' },
-  { label: 'Marathon', value: 'e11000000306' },
-  { label: 'Eggy Party', value: 'u1e7b2b31e2fc1897e6093cd1ee2925b4' },
-  { label: 'AOV', value: 'u539c87d525e9cf649cea9bc6319d4b8f' },
-  { label: 'MLBB', value: 'u1426b49d8626e915264442d821e41a4e' },
-  { label: 'Wild Rift', value: 'u354f6a7c0b0b7af46839c9b4beeefe15' },
-  { label: 'Free Fire', value: 'u589791f804845507e85fa880c6d88d41' },
-  { label: 'AIGC', value: 'u10000000080' },
-  { label: 'Garena Undawn', value: 'u337f01e5662eb90de6e6aafb28f0a4be' },
-];
+export default [];

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/index.ts

@@ -1,27 +1,23 @@
-
 import { PrismaClient } from '@prisma/client';
-import games from './games';
-import roles from './roles';
+import users from './users';
+import { seedPermissions } from './permissions';
+import { seedDataMngtPages } from './seedDataMngtPages';
 
 const prisma = new PrismaClient();
 
-async function main() {
-  await prisma.game.createMany({
-    data: games.map((game) => ({
-      unified_editionid: game.value,
-      name: game.label,
-      creator: 'clzhu',
-    })),
-    skipDuplicates: true,
-  });
-  await prisma.role.createMany({ data: roles });
+export async function main() {
+  await prisma.user.createMany({ data: users, skipDuplicates: true });
+  await seedPermissions(prisma);
+  await seedDataMngtPages(prisma);
 }
 
-main()
-  .catch((e) => {
-    console.log(e);
-    process.exit(1);
-  })
-  .finally(async () => {
-    await prisma.$disconnect();
-  });
+if (require.main === module) {
+  main()
+    .catch((e) => {
+      console.log(e);
+      process.exit(1);
+    })
+    .finally(async () => {
+      await prisma.$disconnect();
+    });
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/permissions.ts

@@ -0,0 +1,278 @@
+import { PrismaClient } from '@prisma/client';
+
+const FULL_ACTIONS = ['createAny', 'readAny', 'updateAny', 'deleteAny'];
+
+/**
+ * Seed permission-related tables so that the SYSTEM_ADMIN role is recognised
+ * by nest-access-control on first startup.
+ *
+ * Covers the two prisma schema files that define the admin/permission modules:
+ *   - config/prisma/default-schema.prisma  → user, audit resources
+ *   - config/prisma/page.prisma            → role, page, resource resources
+ *
+ * Safe to re-run: every write uses upsert / createMany + skipDuplicates.
+ */
+export async function seedPermissions(prisma: PrismaClient) {
+  // ------------------------------------------------------------------ Role --
+  const systemAdminRole = await prisma.role.upsert({
+    where: { name: 'SYSTEM_ADMIN' },
+    update: {},
+    create: {
+      name: 'SYSTEM_ADMIN',
+      description: 'System administrator with full access',
+    },
+  });
+  console.log(`[seed] Role: SYSTEM_ADMIN (id=${systemAdminRole.id})`);
+
+  // --------------------------------------------------------------- Resources -
+  // Resource.name is used as the resource identifier in @UseRoles({ resource: '...' })
+  // Resource.code is a unique slug (same value used here)
+  const resourceDefs = [
+    // from default-schema.prisma
+    { code: 'user', name: 'user', description: 'User management' },
+    { code: 'audit', name: 'audit', description: 'Audit logs' },
+    // from page.prisma
+    { code: 'role', name: 'role', description: 'Role management' },
+    { code: 'page', name: 'page', description: 'Page / menu management' },
+    { code: 'resource', name: 'resource', description: 'Resource management' },
+    // junction-table modules (page.prisma)
+    { code: 'rolePages', name: 'rolePages', description: 'Role-page assignments' },
+    { code: 'roleResource', name: 'roleResource', description: 'Role-resource grants' },
+    { code: 'pageResource', name: 'pageResource', description: 'Page-resource configuration' },
+    // business
+    { code: 'game', name: 'game', description: 'Business / Game management' },
+  ];
+
+  const resources: { id: number; name: string }[] = [];
+  for (const def of resourceDefs) {
+    const r = await prisma.resource.upsert({
+      where: { code: def.code },
+      update: {},
+      create: {
+        code: def.code,
+        name: def.name,
+        description: def.description,
+        isCommonResource: false,
+      },
+    });
+    resources.push({ id: r.id, name: r.name });
+    console.log(`[seed] Resource: ${r.name} (id=${r.id})`);
+  }
+
+  // ------------------------------------------------------------------ Pages --
+  // Pages are created in order (parent first) so that parentId can be resolved.
+
+  const pages: { id: number; code: string }[] = [];
+
+  // Level 1: top-level group (系统管理)
+  const adminPage = await prisma.page.upsert({
+    where: { code: 'admin' },
+    update: {}, // preserve user edits (name, sortOrder, etc.)
+    create: {
+      code: 'admin',
+      name: '系统管理',
+      zhName: '系统管理',
+      enName: 'System Management',
+      isVirtual: false,
+      sortOrder: 1000,
+    },
+  });
+  pages.push({ id: adminPage.id, code: adminPage.code });
+  console.log(`[seed] Page: ${adminPage.code} (id=${adminPage.id})`);
+
+  // Level 2: permission group (权限管理) — child of admin
+  const permissionPage = await prisma.page.upsert({
+    where: { code: 'permission' },
+    update: {}, // preserve user edits
+    create: {
+      code: 'permission',
+      name: '权限管理',
+      zhName: '权限管理',
+      enName: 'Permission Management',
+      isVirtual: false,
+      sortOrder: 1000,
+      parentId: adminPage.id,
+    },
+  });
+  pages.push({ id: permissionPage.id, code: permissionPage.code });
+  console.log(`[seed] Page: ${permissionPage.code} (id=${permissionPage.id})`);
+
+  // Level 3: leaf pages under permission group
+  const permissionChildDefs = [
+    {
+      code: 'permission_readme',
+      name: '菜单指引',
+      zhName: '菜单指引',
+      enName: 'Menu Guide',
+      sortOrder: 1005,
+    },
+    {
+      code: 'user',
+      name: '用户管理',
+      zhName: '用户管理',
+      enName: 'User Management',
+      sortOrder: 1010,
+    },
+    {
+      code: 'role',
+      name: '角色管理',
+      zhName: '角色管理',
+      enName: 'Role Management',
+      sortOrder: 1020,
+    },
+    {
+      code: 'page',
+      name: '页面管理',
+      zhName: '页面管理',
+      enName: 'Page Management',
+      sortOrder: 1030,
+    },
+    {
+      code: 'resource',
+      name: '资源管理',
+      zhName: '资源管理',
+      enName: 'Resource Management',
+      sortOrder: 1040,
+    },
+  ];
+
+  for (const def of permissionChildDefs) {
+    const p = await prisma.page.upsert({
+      where: { code: def.code },
+      update: {}, // preserve user edits (name, sortOrder, parentId)
+      create: {
+        code: def.code,
+        name: def.name,
+        zhName: def.zhName,
+        enName: def.enName,
+        isVirtual: false,
+        sortOrder: def.sortOrder,
+        parentId: permissionPage.id,
+      },
+    });
+    pages.push({ id: p.id, code: p.code });
+    console.log(`[seed] Page: ${p.code} (id=${p.id})`);
+  }
+
+  // Level 2: 数据管理 — child of admin
+  const dataMngt = await prisma.page.upsert({
+    where: { code: 'dataMngt' },
+    update: {}, // preserve user edits
+    create: {
+      code: 'dataMngt',
+      name: '数据管理',
+      zhName: '数据管理',
+      enName: 'Data Management',
+      isVirtual: false,
+      sortOrder: 1010,
+      parentId: adminPage.id,
+    },
+  });
+  pages.push({ id: dataMngt.id, code: dataMngt.code });
+  console.log(`[seed] Page: ${dataMngt.code} (id=${dataMngt.id})`);
+
+  // Level 2: other top-level children of admin (业务、审计日志)
+  const adminChildDefs = [
+    {
+      code: 'game',
+      name: '业务',
+      zhName: '业务',
+      enName: 'Business',
+      isVirtual: false,
+      sortOrder: 1050,
+    },
+    {
+      code: 'audits',
+      name: '审计日志',
+      zhName: '审计日志',
+      enName: 'Audit Log',
+      isVirtual: false,
+      sortOrder: 1060,
+    },
+  ];
+
+  for (const def of adminChildDefs) {
+    const p = await prisma.page.upsert({
+      where: { code: def.code },
+      update: {}, // preserve user edits (name, sortOrder, parentId)
+      create: {
+        code: def.code,
+        name: def.name,
+        zhName: def.zhName,
+        enName: def.enName,
+        isVirtual: def.isVirtual,
+        sortOrder: def.sortOrder,
+        parentId: adminPage.id,
+      },
+    });
+    pages.push({ id: p.id, code: p.code });
+    console.log(`[seed] Page: ${p.code} (id=${p.id})`);
+  }
+
+  // ------------------------------------------------------- PageResource links -
+  // Each leaf page that directly corresponds to a resource must have a
+  // PageResource record so that the permission-sync mechanism works correctly
+  // (Role → Page → PageResource → Resource).
+  //
+  // Mapping: page.code → resource.code (same value where they match)
+  const pageResourceMappings: { pageCode: string; resourceCode: string }[] = [
+    { pageCode: 'user',     resourceCode: 'user' },
+    { pageCode: 'role',     resourceCode: 'role' },
+    { pageCode: 'page',     resourceCode: 'page' },
+    { pageCode: 'resource', resourceCode: 'resource' },
+    { pageCode: 'audits',   resourceCode: 'audit' },
+    { pageCode: 'game',     resourceCode: 'game' },
+  ];
+
+  for (const mapping of pageResourceMappings) {
+    const targetPage = pages.find((p) => p.code === mapping.pageCode);
+    const targetResource = resources.find((r) => r.name === mapping.resourceCode);
+
+    if (!targetPage || !targetResource) {
+      console.warn(
+        `[seed] PageResource: skipping ${mapping.pageCode} → ${mapping.resourceCode} (not found)`,
+      );
+      continue;
+    }
+
+    await prisma.pageResource.upsert({
+      where: {
+        pageId_resourceId: { pageId: targetPage.id, resourceId: targetResource.id },
+      },
+      update: { actions: FULL_ACTIONS },
+      create: {
+        pageId: targetPage.id,
+        resourceId: targetResource.id,
+        actions: FULL_ACTIONS,
+      },
+    });
+    console.log(
+      `[seed] PageResource: page(${targetPage.code}) ↔ resource(${targetResource.name})`,
+    );
+  }
+
+  // --------------------------------------------------- RoleResource (grants) -
+  await prisma.roleResource.createMany({
+    data: resources.map((r) => ({
+      roleId: systemAdminRole.id,
+      resourceId: r.id,
+      actions: FULL_ACTIONS,
+    })),
+    skipDuplicates: true,
+  });
+  console.log(
+    `[seed] RoleResource: SYSTEM_ADMIN granted full access to ${resources.length} resources`,
+  );
+
+  // ------------------------------------------------------ RolePages (access) -
+  await prisma.rolePages.createMany({
+    data: pages.map((p) => ({
+      roleId: systemAdminRole.id,
+      pageId: p.id,
+    })),
+    skipDuplicates: true,
+  });
+  console.log(
+    `[seed] RolePages: SYSTEM_ADMIN granted access to ${pages.length} pages`,
+  );
+}