@ximatai/muyun-web-app 0.26.11 → 0.26.12

package/dist/workspaceViews-DI_1vYX9.js

@@ -0,0 +1,3518 @@
+import { n as e } from "./rolldown-runtime-DPVXH0ON.js";
+import { $t as t, A as n, Br as r, Cn as i, Dn as a, Dr as o, Et as s, Hr as c, I as l, L as u, O as d, P as f, Pr as p, Qt as m, R as h, Rn as ee, Sn as g, Tn as _, Vn as v, Y as y, Zt as b, _t as x, an as S, ar as C, bn as w, bt as T, cn as E, dr as te, en as ne, f as re, fr as D, gn as O, h as k, hn as A, in as j, lr as M, mr as N, o as P, on as ie, rn as ae, s as F, ur as I, vr as oe, vt as L, xn as se, y as ce, z as le } from "./platform-workbench-DJj42YQP.js";
+import { n as ue, r as de } from "./moduleGovernanceWorkspaceView-C5pqJOEJ.js";
+import { Fragment as R, computed as z, createBlock as B, createCommentVNode as V, createElementBlock as H, createElementVNode as U, createSlots as fe, createTextVNode as W, createVNode as G, defineAsyncComponent as pe, defineComponent as K, guardReactiveProps as me, mergeProps as he, normalizeClass as ge, normalizeProps as _e, onBeforeUnmount as ve, onMounted as ye, onUnmounted as be, openBlock as q, ref as J, renderList as xe, renderSlot as Se, resolveDynamicComponent as Ce, toDisplayString as Y, toValue as we, unref as X, watch as Z, withCtx as Q, withKeys as Te, withModifiers as Ee } from "vue";
+//#region src/web-core/dataChanges.ts
+function De(e = {}) {
+	let t = Math.max(1, e.maxHandledChangeSetIds ?? 1e3), n = /* @__PURE__ */ new Set(), r = /* @__PURE__ */ new Set();
+	return {
+		async dispatch(e) {
+			let t = Oe(e);
+			return !t || n.has(t.changeSetId) ? !1 : (i(t.changeSetId), await Promise.allSettled([...r].map((e) => Promise.resolve().then(() => e(t)))), !0);
+		},
+		subscribe(e) {
+			return r.add(e), { unsubscribe() {
+				r.delete(e);
+			} };
+		},
+		markHandled(e) {
+			let t = ke(e);
+			t && i(t);
+		}
+	};
+	function i(e) {
+		for (n.delete(e), n.add(e); n.size > t;) {
+			let e = n.values().next().value;
+			if (!e) return;
+			n.delete(e);
+		}
+	}
+}
+function Oe(e) {
+	let t = ke(e?.changeSetId);
+	if (t && Array.isArray(e?.changes)) return {
+		changeSetId: t,
+		changes: e.changes.filter(Ae)
+	};
+}
+function ke(e) {
+	return e?.trim() || void 0;
+}
+function Ae(e) {
+	if (!e || typeof e != "object") return !1;
+	let t = e.type, n = e.moduleAlias;
+	return typeof t == "string" && t.trim() !== "" && typeof n == "string" && n.trim() !== "";
+}
+//#endregion
+//#region src/views/roleDetailWorkspaceView.ts
+var je = /* @__PURE__ */ new Set([
+	"platform",
+	"tenant",
+	"organization"
+]), Me = de({
+	type: "iam.role.detail",
+	route: "/iam/role",
+	moduleAlias: "iam.role",
+	component: pe(() => import("./RoleDetailWorkspaceView-D6X7pAj5.js")),
+	layout: "workspace",
+	routeTitle: "角色管理",
+	presentations: ["drawer", "tab"],
+	titleOf: () => "角色详情",
+	parentRouteQueryOf(e) {
+		return e.scopeKind === "platform" ? { scopeKind: e.scopeKind } : {
+			scopeKind: e.scopeKind,
+			scopeId: e.scopeId
+		};
+	},
+	parse(e) {
+		let t = e.recordId, n = e.scopeKind, r = e.scopeId;
+		if (!(typeof t != "string" || !t || typeof n != "string" || !je.has(n) || (n === "platform" ? r !== void 0 : typeof r != "string" || !r))) return {
+			recordId: t,
+			scopeKind: n,
+			...typeof r == "string" ? { scopeId: r } : {}
+		};
+	}
+}), Ne = de({
+	type: "iam.role.authorization",
+	route: "/iam/role/authorization",
+	moduleAlias: "iam.role",
+	component: pe(() => Promise.resolve().then(() => sr)),
+	layout: "workspace",
+	routeTitle: "角色授权",
+	drawerProfile: "wide-work",
+	presentations: ["drawer", "tab"],
+	titleOf: () => "角色授权",
+	parse(e) {
+		let t = e.roleId;
+		return typeof t == "string" && t ? { roleId: t } : void 0;
+	}
+}), Pe = [Me, Ne], Fe = de({
+	type: "platform.module.actions",
+	route: "/_platform/workspace/platform.module.actions",
+	moduleAlias: "platform.module",
+	component: pe(() => import("./ModuleActionManagementView-BHEooZ5L.js").then((e) => e.n)),
+	layout: "workspace",
+	routeTitle: "模块管理",
+	presentations: ["tab"],
+	titleOf: (e) => `动作：${e.moduleTitle ?? e.moduleAlias}`,
+	parentRouteQueryOf: () => ({}),
+	parse(e) {
+		let t = e.moduleAlias, n = e.moduleTitle;
+		if (typeof t == "string" && t) return {
+			moduleAlias: t,
+			...typeof n == "string" && n ? { moduleTitle: n } : {},
+			...e.moduleKind === "static" || e.moduleKind === "dynamic" ? { moduleKind: e.moduleKind } : {}
+		};
+	}
+});
+//#endregion
+//#region src/platform-admin-runtime/module-menu/moduleMenuClient.ts
+function Ie(e) {
+	let t = v(e, { moduleAlias: "platform.menu_scheme" });
+	return {
+		async schemes() {
+			let e = [];
+			for (let n = 1;; n++) {
+				let r = await t.query({ page: {
+					pageNum: n,
+					pageSize: 100
+				} });
+				if (e.push(...r.records), e.length >= r.total || r.records.length === 0) return e;
+			}
+		},
+		async tree(t) {
+			return (await e.request({
+				method: "POST",
+				path: "/platform.menu/tree/query",
+				headers: { "X-MuYun-Page-Context": JSON.stringify({ scheme: t }) },
+				body: { externalQueryValues: { schemeId: t } }
+			})).records;
+		},
+		insert(t, n) {
+			return v(c(e, { "X-MuYun-Page-Context": JSON.stringify({ scheme: t }) }), { moduleAlias: "platform.menu" }).insert(n);
+		},
+		visible: () => C(e).mine().then((e) => e.records)
+	};
+}
+function $(e, t = "") {
+	return e.flatMap(({ record: e, children: n }) => {
+		let r = t ? `${t} / ${e.title}` : e.title;
+		return [{
+			menu: e,
+			path: r
+		}, ...$(n, r)];
+	});
+}
+function Le(e, t = !1) {
+	return e.map(({ record: e, children: n }) => {
+		let r = t || e.enabled === !1;
+		return {
+			value: e.id,
+			title: e.title,
+			disabled: r || !!e.moduleAlias,
+			children: Le(n, r)
+		};
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/module-menu/ModuleMenuDrawer.vue?vue&type=script&setup=true&lang.ts
+var Re = { class: "module-menu-form" }, ze = { key: 0 }, Be = {
+	key: 1,
+	class: "hint"
+}, Ve = {
+	key: 1,
+	class: "hint"
+}, He = {
+	key: 2,
+	role: "status"
+}, Ue = {
+	key: 4,
+	role: "alert"
+}, We = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	__name: "ModuleMenuDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = k(), r = Ie(t.context.module.http), i = String(t.context.record?.alias ?? t.context.record?.id ?? ""), a = ee({ moduleAlias: i }), o = J(""), s = J(!1), c = J(String(t.context.record?.title ?? i)), l = J([]), u = J(""), d = J("root"), f = J("tab"), p = J([]), m = J(!0), h = J(!1), g = J(!1), v = J(""), y = J(), b = J(""), x = J(), S = J(!1), C = 0;
+		ve(() => C++);
+		let T = z(() => [{
+			value: "root",
+			title: "顶层",
+			children: Le(p.value)
+		}]), E = z(() => l.value.filter((e) => e.enabled !== !1).map((e) => {
+			let t = e.title ?? e.alias ?? e.id, n = l.value.some((t) => t.id !== e.id && t.title === e.title), r = e.organizationId ?? e.tenantId ?? "系统";
+			return {
+				value: e.id,
+				label: n ? `${t} · ${r}` : t
+			};
+		})), te = z(() => $(p.value).find(({ menu: e }) => e.moduleAlias === i && e.parentId === d.value)), ne = z(() => !m.value && !g.value && !y.value && !!(i && u.value && c.value.trim()) && h.value && s.value);
+		Z([
+			ne,
+			g,
+			y
+		], () => {
+			t.context.setCloseBlocked(g.value), t.context.setTitleActions(y.value ? [] : [{
+				key: "add-menu",
+				label: "添加",
+				emphasis: "primary",
+				disabled: !ne.value,
+				loading: g.value,
+				run: j
+			}]);
+		}, { immediate: !0 }), Z(u, () => void D()), re();
+		async function re() {
+			s.value = !1, h.value = !1, m.value = !0, v.value = "";
+			let e = ++C;
+			try {
+				let [t, n] = await Promise.all([r.schemes(), a.runtime.load()]);
+				if (e !== C) return;
+				if (f.value = n.entryType === "link" ? "window" : "tab", o.value = M(n), s.value = !o.value, l.value = t, !E.value.length) {
+					v.value = "暂无可用菜单方案，请先在菜单管理中配置方案。", m.value = !1;
+					return;
+				}
+				let i = await r.visible();
+				if (e !== C) return;
+				let c = i[0]?.record.schemeId, d = E.value.some((e) => e.value === c) ? c : String(E.value[0].value);
+				u.value === d ? await D() : u.value = d;
+			} catch (t) {
+				e === C && (v.value = N(t), m.value = !1);
+			}
+		}
+		async function D() {
+			let e = ++C;
+			d.value = "root", p.value = [], h.value = !1, v.value = "", m.value = !0;
+			try {
+				let t = await r.tree(u.value);
+				e === C && (p.value = t, h.value = !0);
+			} catch (t) {
+				e === C && (v.value = N(t));
+			} finally {
+				e === C && (m.value = !1);
+			}
+		}
+		async function O() {
+			S.value = !1, v.value = "";
+			try {
+				let e = await (n?.refreshMenus?.() ?? r.visible());
+				x.value = $(e).find(({ menu: e }) => e.id === y.value?.id)?.menu, S.value = !0;
+			} catch {
+				v.value = "菜单已添加，导航刷新失败。请重试刷新，无需重复添加。";
+			}
+		}
+		async function j() {
+			if (ne.value) {
+				g.value = !0, v.value = "";
+				try {
+					let e = await r.insert(u.value, {
+						title: c.value.trim(),
+						moduleAlias: i,
+						schemeId: u.value,
+						parentId: d.value,
+						openMode: f.value,
+						enabled: !0
+					});
+					y.value = e.record;
+					let n = $(p.value).find(({ menu: e }) => e.id === d.value)?.path, a = l.value.find((e) => e.id === u.value);
+					b.value = [
+						a?.title,
+						n,
+						c.value.trim()
+					].filter(Boolean).join(" / "), t.context.refreshDetailExtensions(), await O();
+				} catch (e) {
+					v.value = N(e);
+				} finally {
+					g.value = !1;
+				}
+			}
+		}
+		function M(e) {
+			return e.entryType === "route" ? e.entryRoute ? "" : "该模块尚未配置页面地址，请返回模块补充。" : e.entryType === "link" ? e.entryExternalUrl ? "" : "该模块尚未配置链接地址，请返回模块补充。" : e.uiDescriptor?.page ? "" : "该模块尚无可用业务页面，请返回模块完成页面配置；使用草稿配置的页面需先发布。";
+		}
+		function N(e) {
+			return e instanceof Error ? e.message : "加载失败，请重试。";
+		}
+		function P() {
+			x.value && n?.openMenu && (n.openMenu(x.value), t.context.close());
+		}
+		return (t, r) => (q(), H("div", Re, [
+			y.value ? (q(), H(R, { key: 1 }, [
+				r[12] ||= U("strong", null, "已添加到菜单", -1),
+				U("p", null, Y(b.value), 1),
+				x.value && X(n)?.openMenu ? (q(), B(X(_), {
+					key: 0,
+					type: "primary",
+					onClick: P
+				}, {
+					default: Q(() => [...r[10] ||= [W("打开", -1)]]),
+					_: 1
+				})) : S.value ? (q(), H("p", Ve, " 当前用户的导航中暂不可见，请检查菜单方案适用范围、上级菜单状态及模块访问权限。 ")) : V("v-if", !0),
+				v.value ? (q(), B(X(_), {
+					key: 2,
+					disabled: g.value,
+					onClick: O
+				}, {
+					default: Q(() => [...r[11] ||= [W("刷新导航", -1)]]),
+					_: 1
+				}, 8, ["disabled"])) : V("v-if", !0)
+			], 64)) : (q(), H(R, { key: 0 }, [
+				U("label", null, [r[5] ||= W("菜单名称", -1), G(X(w), {
+					value: c.value,
+					"onUpdate:value": r[0] ||= (e) => c.value = e,
+					disabled: g.value,
+					"aria-label": "菜单名称"
+				}, null, 8, ["value", "disabled"])]),
+				E.value.length > 1 ? (q(), H("label", ze, [r[6] ||= W("菜单方案 ", -1), G(X(se), {
+					value: u.value,
+					options: E.value,
+					"allow-clear": !1,
+					disabled: g.value,
+					"onUpdate:value": r[1] ||= (e) => u.value = String(e ?? "")
+				}, null, 8, [
+					"value",
+					"options",
+					"disabled"
+				])])) : V("v-if", !0),
+				U("label", null, [r[7] ||= W("放置位置 ", -1), G(X(A), {
+					value: d.value,
+					"tree-data": T.value,
+					"allow-clear": !1,
+					disabled: m.value || g.value,
+					loading: m.value,
+					"onUpdate:value": r[2] ||= (e) => d.value = String(e ?? "root")
+				}, null, 8, [
+					"value",
+					"tree-data",
+					"disabled",
+					"loading"
+				])]),
+				U("details", null, [r[9] ||= U("summary", null, "更多设置", -1), U("label", null, [r[8] ||= W("打开方式 ", -1), G(X(se), {
+					value: f.value,
+					"allow-clear": !1,
+					disabled: g.value,
+					options: [{
+						value: "tab",
+						label: "页签内打开"
+					}, {
+						value: "window",
+						label: "新窗口打开"
+					}],
+					"onUpdate:value": r[3] ||= (e) => f.value = e === "window" ? "window" : "tab"
+				}, null, 8, ["value", "disabled"])])]),
+				te.value ? (q(), H("p", Be, "此位置已有「" + Y(te.value.menu.title) + "」，仍可添加另一个入口。", 1)) : V("v-if", !0)
+			], 64)),
+			o.value ? (q(), H("p", He, Y(o.value), 1)) : V("v-if", !0),
+			o.value ? (q(), B(X(_), {
+				key: 3,
+				onClick: r[4] ||= (t) => e.context.close()
+			}, {
+				default: Q(() => [...r[13] ||= [W("返回模块", -1)]]),
+				_: 1
+			})) : V("v-if", !0),
+			v.value ? (q(), H("p", Ue, Y(v.value), 1)) : V("v-if", !0),
+			v.value && !y.value && !h.value ? (q(), B(X(_), {
+				key: 5,
+				disabled: g.value,
+				onClick: re
+			}, {
+				default: Q(() => [...r[14] ||= [W("重试", -1)]]),
+				_: 1
+			}, 8, ["disabled"])) : V("v-if", !0)
+		]));
+	}
+}), [["__scopeId", "data-v-38eeb884"]]), Ge = { class: "module-menu-entries" }, Ke = { key: 0 }, qe = {
+	key: 1,
+	role: "status"
+}, Je = { key: 2 }, Ye = { key: 0 }, Xe = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	__name: "ModuleMenuEntriesSection",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = k(), r = J([]), i = J(/* @__PURE__ */ new Map()), a = J(!1), o = J(""), s = 0;
+		ve(() => s++), Z(() => [t.context.record.id, t.context.refreshKey], () => void c(), { immediate: !0 });
+		async function c() {
+			let e = ++s, n = String(t.context.record.alias ?? t.context.record.id ?? ""), c = Ie(t.context.module.http);
+			a.value = !0, o.value = "", r.value = [], i.value = /* @__PURE__ */ new Map();
+			try {
+				let [t, a] = await Promise.all([c.schemes(), c.visible()]), o = await Promise.all(t.map(async (e) => $(await c.tree(e.id), e.title ?? e.alias ?? e.id).filter(({ menu: e }) => e.moduleAlias === n)));
+				if (e !== s) return;
+				r.value = o.flat(), i.value = new Map($(a).map(({ menu: e }) => [e.id, e]));
+			} catch {
+				e === s && (o.value = "暂时无法读取菜单入口，请确认有菜单管理权限后重试。");
+			} finally {
+				e === s && (a.value = !1);
+			}
+		}
+		return (e, t) => (q(), H("div", Ge, [a.value ? (q(), H("span", Ke, "正在加载…")) : o.value ? (q(), H("div", qe, [W(Y(o.value) + " ", 1), G(X(_), {
+			type: "link",
+			onClick: c
+		}, {
+			default: Q(() => [...t[0] ||= [W("重试", -1)]]),
+			_: 1
+		})])) : r.value.length ? V("v-if", !0) : (q(), H("span", Je, "尚未添加到菜单，可通过上方“添加到菜单”设置入口。")), (q(!0), H(R, null, xe(r.value, (e) => (q(), H("div", {
+			key: e.menu.id,
+			class: "menu-entry"
+		}, [U("span", null, [W(Y(e.path), 1), e.menu.enabled === !1 ? (q(), H("small", Ye, " · 已停用")) : V("v-if", !0)]), i.value.has(e.menu.id) && X(n)?.openMenu ? (q(), B(X(_), {
+			key: 0,
+			type: "link",
+			onClick: (t) => X(n).openMenu(i.value.get(e.menu.id))
+		}, {
+			default: Q(() => [...t[1] ||= [U("span", null, "打开", -1)]]),
+			_: 1
+		}, 8, ["onClick"])) : V("v-if", !0)]))), 128))]));
+	}
+}), [["__scopeId", "data-v-ff7756d2"]]), Ze = Fe, Qe = ue, $e = {
+	id: "platform-module-workspace-actions",
+	target: { moduleAlias: "platform.module" },
+	workspaceViews: [Qe, Ze],
+	detail: {
+		sections: [{
+			key: "module-menu-entries",
+			title: "菜单入口",
+			component: Xe
+		}],
+		actions: [
+			{
+				key: "module-add-to-menu",
+				title: "添加到菜单",
+				state: (e) => ({ visible: nt(e) !== void 0 }),
+				run({ openDrawer: e }) {
+					e({
+						title: "添加到菜单",
+						width: 480,
+						component: We
+					});
+				}
+			},
+			{
+				key: "module-actions-workspace",
+				title: "动作",
+				state: (e) => ({ visible: nt(e) !== void 0 }),
+				run({ record: e, openWorkspaceTab: t }) {
+					let n = nt(e);
+					n && t(Ze, {
+						moduleAlias: n,
+						moduleTitle: rt(e),
+						moduleKind: it(e)
+					});
+				}
+			},
+			{
+				key: "module-ui-orchestration-workspace",
+				title: "低代码",
+				state: (e) => ({ visible: nt(e) !== void 0 && it(e) === "dynamic" }),
+				run({ record: e, openWorkspaceTab: t }) {
+					let n = nt(e);
+					n && it(e) === "dynamic" && t(Qe, {
+						moduleAlias: n,
+						moduleTitle: rt(e),
+						governanceTab: "overview"
+					});
+				}
+			}
+		]
+	}
+}, et = {
+	id: "dictionary-category-tree-parent-policy",
+	target: { moduleAlias: "platform.dictionary_category" },
+	navigator: { treeParentPolicy: {
+		canUseAsParent: (e) => e.categoryKind === "folder",
+		rejectionMessage: "字典类目只能挂在目录下"
+	} }
+}, tt = {
+	id: "platform-module-action-entry-scope",
+	target: { moduleAlias: "platform.module_action" },
+	navigator: {
+		hidden: !0,
+		lockedEntry: {
+			navigatorKey: "module",
+			unavailableDescription: "模块上下文不可用"
+		}
+	},
+	standardActions: { disabled: ["create"] }
+};
+function nt(e) {
+	return at(e, "alias") ?? at(e, "id");
+}
+function rt(e) {
+	return at(e, "title");
+}
+function it(e) {
+	let t = at(e, "moduleKind");
+	return t === "static" || t === "dynamic" ? t : void 0;
+}
+function at(e, t) {
+	let n = e[t];
+	return typeof n == "string" && n.trim() ? n : void 0;
+}
+//#endregion
+//#region src/views/PasswordPolicyPreview.vue?vue&type=script&setup=true&lang.ts
+var ot = { class: "password-policy-preview" }, st = {
+	key: 0,
+	class: "preview-results"
+}, ct = {
+	id: "iam-password-policy-preview",
+	target: { moduleAlias: "iam.password_policy_rule" },
+	card: { assistant: {
+		component: /* @__PURE__ */ a(/* @__PURE__ */ K({
+			name: "PasswordPolicyPreview",
+			__name: "PasswordPolicyPreview",
+			props: { context: {} },
+			setup(e) {
+				let t = e, n = J("CURRENT"), r = J(""), i = J(), a = J(!1), o = J(!1), s = 0, c = z(() => ee(t.context.record)), l = z(() => t.context.mode !== "view" || y(c.value?.id) !== void 0), u = z(() => [{
+					value: "CURRENT",
+					label: "本规则",
+					disabled: !l.value
+				}, {
+					value: "ALL",
+					label: "全规则"
+				}]);
+				Z(l, (e) => {
+					!e && n.value === "CURRENT" && (n.value = "ALL");
+				}, { immediate: !0 });
+				function d(e) {
+					(e !== "CURRENT" || l.value) && (e === "CURRENT" || e === "ALL") && (n.value = e);
+				}
+				Z([n, () => t.context.formSessionKey], ([e]) => {
+					e === "ALL" && f();
+				}, { immediate: !0 });
+				async function f() {
+					let e = ++s;
+					o.value = !0, a.value = !1, i.value = void 0;
+					try {
+						let n = await t.context.module.http.request({ path: "/iam.password_policy_rule/active-global-rules" });
+						if (e !== s) return;
+						i.value = Object.freeze(n.map((e) => Object.freeze({ ...e })));
+					} catch {
+						if (e !== s) return;
+						a.value = !0;
+					} finally {
+						e === s && (o.value = !1);
+					}
+				}
+				let p = z(() => {
+					let e = l.value ? c.value : void 0;
+					if (n.value === "CURRENT") return e ? [e] : [];
+					if (!i.value) return [];
+					let t = i.value.filter(x), r = y(e?.id);
+					if (r) {
+						let e = t.findIndex((e) => y(e.id) === r);
+						e >= 0 && t.splice(e, 1);
+					}
+					return e && x(e) && t.push(e), t.length > 0 ? t.sort(_) : [];
+				}), m = z(() => r.value ? p.value.map((e, t) => g(e, r.value, t)) : []), h = z(() => {
+					if (!l.value && n.value === "CURRENT") return "请选择或新建一条规则";
+					if (n.value === "ALL" && o.value) return "正在加载权威规则集";
+					if (n.value === "ALL" && a.value) return "无法加载权威规则集";
+					if (!r.value) return "输入测试密码后即时反馈";
+					if (m.value.length === 0) return "当前没有参与试算的启用规则";
+					let e = m.value.filter((e) => !e.passed).length;
+					return e === 0 ? `全部通过（${m.value.length}/${m.value.length}）` : `${e} 条规则未通过`;
+				});
+				function ee(e) {
+					if (e) return e;
+				}
+				function g(e, t, n) {
+					let r = b(e.title, "未命名规则"), i = b(e.message, "未配置失败提示"), a = e.pattern;
+					if (!a?.trim()) return {
+						key: v(e, n),
+						title: r,
+						message: i,
+						passed: !1,
+						diagnostic: "正则表达式不能为空"
+					};
+					try {
+						let o = RegExp(`^(?:${a})$`).test(t);
+						return {
+							key: v(e, n),
+							title: r,
+							message: i,
+							passed: o
+						};
+					} catch {
+						return {
+							key: v(e, n),
+							title: r,
+							message: i,
+							passed: !1,
+							diagnostic: "当前浏览器不支持该正则语法；保存时仍由服务端 Java 正则校验"
+						};
+					}
+				}
+				function _(e, t) {
+					return (e.sortOrder ?? 2 ** 53 - 1) - (t.sortOrder ?? 2 ** 53 - 1) || b(e.title, "").localeCompare(b(t.title, ""));
+				}
+				function v(e, t) {
+					return y(e.id) ?? `draft:${t}`;
+				}
+				function y(e) {
+					return e?.trim() || void 0;
+				}
+				function b(e, t) {
+					return e?.trim() || t;
+				}
+				function x(e) {
+					return e.enabled !== !1 && (e.scopeType == null || e.scopeType.toLowerCase() === "global");
+				}
+				return (e, t) => (q(), H("section", ot, [
+					U("header", null, [t[1] ||= U("h3", null, "密码试算", -1), U("span", { class: ge({ failed: m.value.some((e) => !e.passed) }) }, Y(h.value), 3)]),
+					G(X(O), {
+						class: "preview-scope",
+						value: n.value,
+						options: u.value,
+						size: "small",
+						"onUpdate:value": d
+					}, null, 8, ["value", "options"]),
+					G(X(w), {
+						value: r.value,
+						"onUpdate:value": t[0] ||= (e) => r.value = e,
+						type: "text",
+						autocomplete: "off",
+						placeholder: "输入测试密码",
+						"aria-label": "测试密码"
+					}, null, 8, ["value"]),
+					m.value.length ? (q(), H("ul", st, [(q(!0), H(R, null, xe(m.value, (e) => (q(), H("li", {
+						key: e.key,
+						class: ge({
+							passed: e.passed,
+							failed: !e.passed
+						})
+					}, [U("strong", null, Y(e.title), 1), U("span", null, Y(e.diagnostic ?? (e.passed ? "通过" : e.message)), 1)], 2))), 128))])) : V("v-if", !0)
+				]));
+			}
+		}), [["__scopeId", "data-v-1ebdeb6e"]]),
+		placement: {
+			boundary: "outside",
+			position: "bottom"
+		}
+	} }
+}, lt = { class: "tenant-applications-detail" }, ut = { class: "tenant-applications-summary" }, dt = {
+	key: 0,
+	class: "tenant-applications-status"
+}, ft = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	name: "TenantApplicationsDetailSection",
+	__name: "TenantApplicationsDetailSection",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = J([]), r = J(!1), a = 0, o = J(/* @__PURE__ */ new Map()), s = z(() => n.value.map((e) => e.applicationAlias).filter((e) => typeof e == "string" && e.length > 0).map((e) => ({
+			key: e,
+			label: o.value.get(e) ? `${o.value.get(e)} · ${e}` : e
+		})));
+		Z(() => [t.context.record.id, t.context.refreshKey], () => void c(), { immediate: !0 });
+		async function c() {
+			let e = String(t.context.record.id ?? ""), i = ++a;
+			if (!e) {
+				n.value = [], o.value = /* @__PURE__ */ new Map(), r.value = !1;
+				return;
+			}
+			r.value = !0, n.value = [], o.value = /* @__PURE__ */ new Map();
+			try {
+				let [r, s] = await Promise.all([t.context.module.http.request({
+					method: "POST",
+					path: "/platform.application/query",
+					body: { page: {
+						pageNum: 1,
+						pageSize: 200
+					} }
+				}), t.context.module.http.request({
+					method: "POST",
+					path: l(e, "query"),
+					body: { page: {
+						pageNum: 1,
+						pageSize: 200
+					} }
+				})]);
+				i === a && (o.value = new Map(r.records.filter((e) => e.alias && e.title).map((e) => [e.alias, e.title])), n.value = s.records);
+			} catch (e) {
+				i === a && L(e, {
+					source: "tenant-applications-detail",
+					phase: "load"
+				});
+			} finally {
+				i === a && (r.value = !1);
+			}
+		}
+		function l(e, t) {
+			return `/iam.tenant/${encodeURIComponent(e)}/applications/${t}`;
+		}
+		return (e, t) => (q(), H("section", lt, [U("div", ut, [r.value ? (q(), H("span", dt, "正在加载…")) : (q(), B(X(i), {
+			key: 1,
+			items: s.value,
+			"max-visible": 8,
+			"empty-text": "暂无记录"
+		}, null, 8, ["items"]))])]));
+	}
+}), [["__scopeId", "data-v-2f879564"]]), pt = { class: "tenant-application-configuration" }, mt = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	name: "TenantApplicationConfigurationDrawer",
+	__name: "TenantApplicationConfigurationDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = J([]), r = J(/* @__PURE__ */ new Set()), i = J(!1), a = J(!1), o = [{
+			key: "title",
+			title: "应用名称",
+			width: 260
+		}, {
+			key: "alias",
+			title: "应用 alias",
+			width: 220
+		}], s = z(() => n.value), c = z(() => ({
+			selectedRowKeys: [...r.value],
+			preserveSelectedRowKeys: !0,
+			disabledOf: (e) => a.value || e.alias === "iam",
+			onChange: (e) => {
+				r.value = new Set(e.map(String));
+			}
+		}));
+		function l() {
+			t.context.setCloseBlocked(a.value), t.context.setTitleActions([{
+				key: "cancel",
+				label: "取消",
+				disabled: a.value,
+				run: () => {
+					a.value || t.context.close();
+				}
+			}, {
+				key: "confirm",
+				label: "确认",
+				emphasis: "primary",
+				disabled: a.value,
+				loading: a.value,
+				run: d
+			}]);
+		}
+		ye(() => {
+			l(), u();
+		}), Z(a, l);
+		async function u() {
+			let e = String(t.context.record?.id ?? "");
+			if (e) {
+				i.value = !0;
+				try {
+					let [i, a] = await Promise.all([t.context.module.http.request({
+						method: "POST",
+						path: "/platform.application/query",
+						body: { page: {
+							pageNum: 1,
+							pageSize: 200
+						} }
+					}), t.context.module.http.request({
+						method: "POST",
+						path: f(e, "query"),
+						body: { page: {
+							pageNum: 1,
+							pageSize: 200
+						} }
+					})]);
+					n.value = i.records.filter((e) => e.enabled !== !1);
+					let o = new Set(n.value.map((e) => e.alias).filter(Boolean));
+					r.value = /* @__PURE__ */ new Set(["iam", ...a.records.map((e) => e.applicationAlias).filter((e) => typeof e == "string" && o.has(e))]);
+				} catch (e) {
+					L(e, {
+						source: "tenant-application-configuration",
+						phase: "load"
+					});
+				} finally {
+					i.value = !1;
+				}
+			}
+		}
+		async function d() {
+			let e = String(t.context.record?.id ?? "");
+			if (e && !a.value) {
+				a.value = !0;
+				try {
+					await t.context.module.http.request({
+						method: "POST",
+						path: f(e, "configure"),
+						body: { applicationAliases: [...r.value] }
+					}), t.context.refreshDetailExtensions(), t.context.refreshList(), t.context.close();
+				} catch (e) {
+					L(e, {
+						source: "tenant-application-configuration",
+						phase: "action"
+					});
+				} finally {
+					a.value = !1;
+				}
+			}
+		}
+		function f(e, t) {
+			return `/iam.tenant/${encodeURIComponent(e)}/applications/${t}`;
+		}
+		return (e, t) => (q(), H("section", pt, [t[0] ||= U("p", null, "勾选表示向当前租户开通应用；取消勾选将移除该租户的应用开通记录。", -1), G(X(ae), {
+			columns: o,
+			rows: s.value,
+			loading: i.value,
+			pagination: !1,
+			selection: c.value,
+			"row-key": (e) => String(e.alias ?? e.id ?? ""),
+			"empty-description": "暂无可配置应用"
+		}, null, 8, [
+			"rows",
+			"loading",
+			"selection",
+			"row-key"
+		])]));
+	}
+}), [["__scopeId", "data-v-2e68af88"]]), ht = {
+	id: "iam-tenant-standard-page-enhancement",
+	target: { moduleAlias: "iam.tenant" },
+	form: {
+		contributions: [],
+		fieldPolicies: [
+			{
+				fieldName: "workbenchTitle",
+				visible: ({ draft: e }) => e.workbenchBrandMode !== "logoOnly"
+			},
+			{
+				fieldName: "workbenchSubtitle",
+				visible: ({ draft: e }) => e.workbenchBrandMode !== "logoOnly"
+			},
+			...["lightLogoAssetId", "darkLogoAssetId"].map((e) => ({
+				fieldName: e,
+				imageUploadHint: ({ draft: e }) => e.workbenchBrandMode === "logoOnly" ? "纯 Logo 模式支持横向或正方形图片（最大 512 KB）" : "Logo + 标题模式仅支持正方形图片（建议 128 × 128 px，最大 512 KB）",
+				imageUploadAdvisory: ({ draft: e }) => e.workbenchBrandMode === "logoOnly" ? void 0 : gt
+			}))
+		]
+	},
+	detail: {
+		actions: [{
+			key: "tenant-configure-applications",
+			title: "配置应用",
+			state: () => ({ visible: !0 }),
+			run({ openDrawer: e }) {
+				e({
+					title: "配置应用",
+					width: 760,
+					component: mt
+				});
+			}
+		}],
+		sections: [{
+			key: "tenant-applications",
+			title: "已开通应用",
+			component: ft
+		}]
+	}
+};
+async function gt(e) {
+	if (!e.type.startsWith("image/") || typeof Image > "u") return "Logo + 标题模式需要可读取的正方形图片。";
+	try {
+		let { width: t, height: n } = await _t(e), r = t / n;
+		return r >= .9 && r <= 1.1 ? void 0 : `“${e.name}”为 ${t} × ${n} px；Logo + 标题模式仅允许上传正方形 Logo。`;
+	} catch {
+		return "无法读取图片尺寸，请选择正方形 PNG、JPG 或 GIF 图片。";
+	}
+}
+function _t(e) {
+	let t = URL.createObjectURL(e);
+	return new Promise((e, n) => {
+		let r = new Image();
+		r.onload = () => {
+			URL.revokeObjectURL(t), e({
+				width: r.naturalWidth,
+				height: r.naturalHeight
+			});
+		}, r.onerror = () => {
+			URL.revokeObjectURL(t), n(/* @__PURE__ */ Error("无法读取图片尺寸"));
+		}, r.src = t;
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/employee/EmployeeAccountDrawer.vue?vue&type=script&setup=true&lang.ts
+var vt = {
+	key: 1,
+	class: "employee-account-drawer"
+}, yt = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	name: "EmployeeAccountDrawer",
+	__name: "EmployeeAccountDrawer",
+	props: { context: {} },
+	setup(e) {
+		let n = e, r = J(), i = J(""), a = J(""), o = J(""), s = J(!1), c = J(!1);
+		ye(() => void l());
+		async function l() {
+			let e = m();
+			if (e) {
+				s.value = !0;
+				try {
+					r.value = await n.context.module.http.request({ path: `/iam.employee/${encodeURIComponent(e)}/account` });
+				} catch (e) {
+					L(e, {
+						source: "employee-account",
+						phase: "load"
+					});
+				} finally {
+					s.value = !1;
+				}
+			}
+		}
+		async function u() {
+			let e = m();
+			if (!e || c.value) return;
+			let t = a.value.trim();
+			if (!t || !o.value) {
+				T("请输入账号和初始密码。", {
+					source: "employee-account",
+					phase: "validation"
+				});
+				return;
+			}
+			c.value = !0;
+			try {
+				let i = await n.context.module.http.request({
+					method: "POST",
+					path: `/iam.employee/${encodeURIComponent(e)}/account/provision`,
+					body: {
+						username: t,
+						password: o.value
+					}
+				});
+				r.value = p(i).binding, o.value = "", n.context.refreshList();
+			} catch (e) {
+				L(e, {
+					source: "employee-account",
+					phase: "action"
+				});
+			} finally {
+				c.value = !1;
+			}
+		}
+		async function d() {
+			let e = m(), t = i.value.trim();
+			if (!e || !t || c.value) {
+				t || T("请输入要绑定的已有账号。", {
+					source: "employee-account",
+					phase: "validation"
+				});
+				return;
+			}
+			c.value = !0;
+			try {
+				let a = (await n.context.module.http.request({
+					method: "POST",
+					path: "/iam.user/selector/query",
+					body: {
+						keyword: t,
+						enabledOnly: !0,
+						page: {
+							pageNum: 1,
+							pageSize: 20
+						}
+					}
+				})).records.find((e) => e.username === t);
+				if (!a?.id) {
+					T("未找到启用中的同名用户账号。", {
+						source: "employee-account",
+						phase: "action"
+					});
+					return;
+				}
+				if (a.employeeId) {
+					T("该用户已绑定其他职员，不能重复绑定。", {
+						source: "employee-account",
+						phase: "action"
+					});
+					return;
+				}
+				r.value = await n.context.module.http.request({
+					method: "POST",
+					path: `/iam.employee/${encodeURIComponent(e)}/account`,
+					body: { userId: a.id }
+				}), i.value = "", n.context.refreshList(), T("账号已绑定到当前职员。", {
+					source: "employee-account",
+					phase: "action"
+				});
+			} catch (e) {
+				L(e, {
+					source: "employee-account",
+					phase: "action"
+				});
+			} finally {
+				c.value = !1;
+			}
+		}
+		async function f() {
+			let e = m();
+			if (e && r.value && !c.value && await b({
+				title: "移除账户",
+				content: "确认移除该职员的账户？该用户账号会同步删除。",
+				okText: "移除",
+				danger: !0
+			})) {
+				c.value = !0;
+				try {
+					await n.context.module.http.request({
+						method: "POST",
+						path: `/iam.employee/${encodeURIComponent(e)}/account/delete`
+					}), r.value = void 0, n.context.refreshList();
+				} catch (e) {
+					L(e, {
+						source: "employee-account",
+						phase: "action"
+					});
+				} finally {
+					c.value = !1;
+				}
+			}
+		}
+		function m() {
+			let e = n.context.record?.id;
+			return e == null ? void 0 : String(e);
+		}
+		return (e, n) => s.value ? (q(), B(X(ne), {
+			key: 0,
+			tip: "加载账号绑定"
+		})) : (q(), H("section", vt, [m() ? r.value ? (q(), H(R, { key: 1 }, [U("p", null, "当前已绑定用户：" + Y(r.value.userId ?? "-"), 1), G(X(_), {
+			danger: "",
+			"icon-name": "delete",
+			loading: c.value,
+			onClick: f
+		}, {
+			default: Q(() => [...n[3] ||= [W("移除账户", -1)]]),
+			_: 1
+		}, 8, ["loading"])], 64)) : (q(), H(R, { key: 2 }, [U("form", { onSubmit: Ee(d, ["prevent"]) }, [
+			n[6] ||= U("p", null, "绑定已有用户账号；账号必须启用且尚未绑定其他职员。", -1),
+			U("label", null, [n[4] ||= U("span", null, "已有账号", -1), G(X(w), {
+				value: i.value,
+				"onUpdate:value": n[0] ||= (e) => i.value = e,
+				disabled: c.value,
+				placeholder: "请输入已有登录账号"
+			}, null, 8, ["value", "disabled"])]),
+			G(X(_), {
+				"html-type": "submit",
+				loading: c.value
+			}, {
+				default: Q(() => [...n[5] ||= [W(" 绑定已有账号 ", -1)]]),
+				_: 1
+			}, 8, ["loading"])
+		], 32), U("form", { onSubmit: Ee(u, ["prevent"]) }, [
+			n[10] ||= U("p", null, "也可直接创建登录账号并自动绑定到当前职员。", -1),
+			U("label", null, [n[7] ||= U("span", null, "账号", -1), G(X(w), {
+				value: a.value,
+				"onUpdate:value": n[1] ||= (e) => a.value = e,
+				disabled: c.value,
+				placeholder: "请输入登录账号"
+			}, null, 8, ["value", "disabled"])]),
+			U("label", null, [n[8] ||= U("span", null, "初始密码", -1), G(X(w), {
+				value: o.value,
+				"onUpdate:value": n[2] ||= (e) => o.value = e,
+				type: "password",
+				disabled: c.value,
+				placeholder: "请输入初始密码"
+			}, null, 8, ["value", "disabled"])]),
+			G(X(_), {
+				type: "primary",
+				"html-type": "submit",
+				"icon-name": "plus",
+				loading: c.value
+			}, {
+				default: Q(() => [...n[9] ||= [W(" 创建账号并绑定 ", -1)]]),
+				_: 1
+			}, 8, ["loading"])
+		], 32)], 64)) : (q(), B(X(t), {
+			key: 0,
+			title: "职员不存在",
+			message: "请重新打开职员档案后再设置账号。"
+		}))]));
+	}
+}), [["__scopeId", "data-v-74851c8c"]]), bt = {
+	id: "iam-employee-account-drawer",
+	target: { moduleAlias: "iam.employee" },
+	detail: { actions: [{
+		key: "employee-account",
+		title: "设置账号",
+		state: () => ({ visible: !0 }),
+		run({ module: e, record: t, openDrawer: n }) {
+			let r = t.id == null ? void 0 : String(t.id);
+			r && e.can("employeeAccounts", r) !== !1 && n({
+				title: "设置账号",
+				width: 520,
+				component: yt
+			});
+		}
+	}] }
+}, xt = "muyun.auth.token", St = "muyun.auth.sessionId";
+function Ct(e) {
+	return wt() ?? kt(e);
+}
+function wt() {
+	if (!(typeof window > "u")) return kt(window.localStorage.getItem(xt));
+}
+function Tt() {
+	if (!(typeof window > "u")) return kt(window.localStorage.getItem(St));
+}
+function Et(e) {
+	typeof window > "u" || window.localStorage.setItem(xt, e);
+}
+function Dt(e) {
+	if (typeof window > "u") return;
+	let t = kt(e);
+	if (t) {
+		window.localStorage.setItem(St, t);
+		return;
+	}
+	window.localStorage.removeItem(St);
+}
+function Ot() {
+	typeof window > "u" || (window.localStorage.removeItem(xt), window.localStorage.removeItem(St));
+}
+function kt(e) {
+	return e?.trim() || void 0;
+}
+function At(e, t) {
+	return !1;
+}
+//#endregion
+//#region src/platform-admin-runtime/backendHttp.ts
+function jt(e = {}) {
+	return r({
+		baseUrl: void 0,
+		token: e.withAuth === !1 ? void 0 : Ct(void 0),
+		credentials: Mt(void 0),
+		onAuthenticationRequired: e.withAuth === !1 ? void 0 : (e, t) => At(e, t)
+	});
+}
+function Mt(e) {
+	return e === "include" || e === "omit" || e === "same-origin" ? e : void 0;
+}
+//#endregion
+//#region src/platform-admin-runtime/realtime.ts
+var Nt = De(), Pt = /* @__PURE__ */ new Map(), Ft = /* @__PURE__ */ new Set(), It, Lt, Rt = 3e4;
+function zt(e = {}) {
+	return N({
+		baseUrl: e.baseUrl ?? void 0,
+		token: e.token ?? Ct(void 0),
+		onStateChange: (t) => {
+			e.onStateChange?.(t), t === "unauthorized" && e.onUnauthorized?.();
+		}
+	});
+}
+function Bt(e = {}) {
+	if (Lt) throw Error("App realtime is already connected. Disconnect the active connection before reconnecting.");
+	let t = zt(e);
+	It = t;
+	let n = te(t, Nt), r = D(t, (t) => {
+		e.onUserNotification?.(t);
+	}), i = I(t, (t) => {
+		e.onBusinessNotification?.(t);
+	}), a = M(t, (e) => {
+		for (let t of Ft) t(e);
+	}), o = Ht(t);
+	o.start(), Kt(t), t.connect();
+	let s = !1, c = { async disconnect() {
+		s || (s = !0, n.unsubscribe(), r.unsubscribe(), i.unsubscribe(), a.unsubscribe(), o.stop(), qt(), Lt === c && (Lt = void 0), It === t && (It = void 0), await t.disconnect());
+	} };
+	return Lt = c, c;
+}
+async function Vt() {
+	await Lt?.disconnect();
+}
+function Ht(e) {
+	let t = 0, n = [
+		"pointermove",
+		"pointerdown",
+		"keydown",
+		"scroll"
+	], r = () => a(!1), i = () => {
+		document.visibilityState === "visible" && a(!0);
+	};
+	return {
+		start() {
+			if (!(typeof window > "u" || typeof document > "u")) {
+				for (let e of n) window.addEventListener(e, r, { passive: !0 });
+				document.addEventListener("visibilitychange", i);
+			}
+		},
+		stop() {
+			if (!(typeof window > "u" || typeof document > "u")) {
+				for (let e of n) window.removeEventListener(e, r);
+				document.removeEventListener("visibilitychange", i);
+			}
+		}
+	};
+	function a(n) {
+		if (e.state() !== "connected") return;
+		let r = Date.now();
+		if (!(!n && r - t < Rt)) {
+			t = r;
+			try {
+				e.publish(o, { timestamp: new Date(r).toISOString() });
+			} catch {}
+		}
+	}
+}
+function Ut(e) {
+	let t = e.trim();
+	if (!t) throw Error("Module data change subscription requires a moduleAlias");
+	let n = Pt.get(t) ?? {
+		moduleAlias: t,
+		references: 0
+	};
+	return n.references += 1, Pt.set(t, n), !n.active && It && (n.active = Jt(It, t)), { unsubscribe() {
+		--n.references, !(n.references > 0) && (n.active?.unsubscribe(), n.active = void 0, Pt.delete(t));
+	} };
+}
+function Wt(e) {
+	return Nt.subscribe(e);
+}
+function Gt(e) {
+	return Ft.add(e), { unsubscribe() {
+		Ft.delete(e);
+	} };
+}
+function Kt(e) {
+	for (let t of Pt.values()) t.active?.unsubscribe(), t.active = Jt(e, t.moduleAlias);
+}
+function qt() {
+	for (let e of Pt.values()) e.active?.unsubscribe(), e.active = void 0;
+}
+function Jt(e, t) {
+	return e.subscribe(oe(t), (e) => {
+		Nt.dispatch(e);
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/user/userOnlineStatusStore.ts
+var Yt = "iam.user.session.collectionChanged", Xt = J({}), Zt = /* @__PURE__ */ new Set(), Qt = !1, $t = !1;
+function en() {
+	tn();
+	function e(e) {
+		e && !Xt.value[e] && (Zt.add(e), nn());
+	}
+	function t(e) {
+		return e ? Xt.value[e] : void 0;
+	}
+	function n(e) {
+		e && (Zt.add(e), nn());
+	}
+	return {
+		observe: e,
+		statusOf: t,
+		refresh: n
+	};
+}
+function tn() {
+	$t || ($t = !0, Gt((e) => {
+		an(e) && (Zt.add(e.recordId), nn());
+	}));
+}
+function nn() {
+	Qt || (Qt = !0, queueMicrotask(() => {
+		Qt = !1, rn();
+	}));
+}
+async function rn() {
+	let e = Array.from(Zt);
+	if (Zt.clear(), e.length !== 0) try {
+		let t = await jt().request({
+			method: "POST",
+			path: "/iam.user/sessions/status",
+			body: { userIds: e }
+		});
+		Xt.value = {
+			...Xt.value,
+			...Object.fromEntries(t.map((e) => [e.userId, e]))
+		};
+	} catch (e) {
+		L(e, {
+			source: "iam-user-online-status",
+			phase: "load"
+		});
+	}
+}
+function an(e) {
+	return e.type === Yt && e.moduleAlias === "iam.user" && !!e.recordId;
+}
+//#endregion
+//#region src/platform-admin-runtime/user/UserOnlineStatusCell.vue
+var on = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	name: "UserOnlineStatusCell",
+	__name: "UserOnlineStatusCell",
+	props: {
+		record: {},
+		column: {}
+	},
+	setup(e) {
+		let t = e, n = en(), r = z(() => t.record.id == null ? void 0 : String(t.record.id)), i = z(() => n.statusOf(r.value)), a = z(() => {
+			let e = i.value;
+			if (!e) return "-";
+			if (e.present) {
+				let t = e.presentSessionCount ?? 0, n = e.idleSessionCount ?? 0;
+				return n >= t ? `闲置 (${t}/${e.activeSessionCount})` : `使用中 (${Math.max(0, t - n)}/${e.activeSessionCount})`;
+			}
+			return e.online ? `在线 (${e.activeSessionCount})` : "离线";
+		});
+		function o() {
+			n.observe(r.value);
+		}
+		return ye(o), Z(r, o), (e, t) => (q(), H("span", { class: ge({
+			"user-online-status--present": i.value?.present,
+			"user-online-status--offline": i.value && !i.value.online
+		}) }, Y(a.value), 3));
+	}
+}), [["__scopeId", "data-v-789ddd4a"]]), sn = {
+	key: 1,
+	class: "user-password-drawer"
+}, cn = { key: 0 }, ln = {
+	key: 1,
+	class: "user-password-reset"
+}, un = { key: 0 }, dn = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	name: "UserPasswordDrawer",
+	__name: "UserPasswordDrawer",
+	props: { context: {} },
+	setup(e) {
+		let n = e, r = J(""), i = J(), a = J(!1), o = z(() => n.context.record?.id == null ? void 0 : String(n.context.record.id));
+		async function s() {
+			let e = o.value;
+			if (e && !a.value && n.context.module.can("changePassword", e) === !0) {
+				if (!r.value) {
+					T("请输入新密码。", {
+						source: "iam-user-password",
+						phase: "validation"
+					});
+					return;
+				}
+				a.value = !0, n.context.setCloseBlocked(!0);
+				try {
+					await n.context.module.http.request({
+						method: "POST",
+						path: `/iam.user/changePassword/${encodeURIComponent(e)}`,
+						body: { password: r.value }
+					}), r.value = "", T("密码已修改。", {
+						source: "iam-user-password",
+						phase: "action"
+					}), n.context.refreshList(), n.context.refreshDetailExtensions();
+				} catch (e) {
+					L(e, {
+						source: "iam-user-password",
+						phase: "action"
+					});
+				} finally {
+					n.context.setCloseBlocked(!1), a.value = !1;
+				}
+			}
+		}
+		async function c() {
+			let e = o.value;
+			if (e && !a.value && n.context.module.can("resetPassword", e) === !0) {
+				a.value = !0, n.context.setCloseBlocked(!0);
+				try {
+					i.value = await n.context.module.http.request({
+						method: "POST",
+						path: `/iam.user/resetPassword/${encodeURIComponent(e)}`
+					}), n.context.refreshList(), n.context.refreshDetailExtensions();
+				} catch (e) {
+					L(e, {
+						source: "iam-user-password",
+						phase: "action"
+					});
+				} finally {
+					n.context.setCloseBlocked(!1), a.value = !1;
+				}
+			}
+		}
+		return (n, l) => o.value ? (q(), H("section", sn, [e.context.module.can("changePassword", o.value) === !0 ? (q(), H("label", cn, [
+			l[2] ||= U("span", null, "新密码", -1),
+			G(X(w), {
+				value: r.value,
+				"onUpdate:value": l[0] ||= (e) => r.value = e,
+				type: "password",
+				disabled: a.value,
+				placeholder: "请输入新密码"
+			}, null, 8, ["value", "disabled"]),
+			G(X(_), {
+				type: "primary",
+				loading: a.value,
+				onClick: s
+			}, {
+				default: Q(() => [...l[1] ||= [W("修改密码", -1)]]),
+				_: 1
+			}, 8, ["loading"])
+		])) : V("v-if", !0), e.context.module.can("resetPassword", o.value) === !0 ? (q(), H("section", ln, [
+			l[6] ||= U("p", null, "由系统生成临时密码。请在安全渠道交付给用户，并提醒其尽快修改。", -1),
+			G(X(_), {
+				loading: a.value,
+				onClick: c
+			}, {
+				default: Q(() => [...l[3] ||= [W("生成临时密码", -1)]]),
+				_: 1
+			}, 8, ["loading"]),
+			i.value ? (q(), H("dl", un, [U("div", null, [l[4] ||= U("dt", null, "临时密码", -1), U("dd", null, Y(i.value.temporaryPassword), 1)]), U("div", null, [l[5] ||= U("dt", null, "失效时间", -1), U("dd", null, Y(i.value.expiresAt ?? "-"), 1)])])) : V("v-if", !0)
+		])) : V("v-if", !0)])) : (q(), B(X(t), {
+			key: 0,
+			title: "用户不存在",
+			message: "请重新打开用户详情后再管理密码。"
+		}));
+	}
+}), [["__scopeId", "data-v-f6125048"]]);
+//#endregion
+//#region src/platform-admin-runtime/pageRealtime.ts
+function fn(e) {
+	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Map(), r, i = 0, a = !0;
+	function o(n) {
+		if (!a) return;
+		let i = Array.isArray(n) ? n : [n];
+		for (let e of i) e && t.add(e);
+		t.size === 0 || r || (r = setTimeout(s, e.delay ?? 0));
+	}
+	function s() {
+		if (r = void 0, !a || t.size === 0) return;
+		let o = Array.from(t);
+		t.clear(), i += 1;
+		let s = i;
+		o.forEach((e) => n.set(e, s)), e.load({
+			keys: o,
+			isLatest: (e) => a && n.get(e) === s,
+			active: () => a
+		});
+	}
+	function c() {
+		a = !1, l();
+	}
+	function l() {
+		r &&= (clearTimeout(r), void 0), t.clear(), n.clear();
+	}
+	return {
+		enqueue: o,
+		reset: l,
+		dispose: c
+	};
+}
+//#endregion
+//#region src/platform-admin-runtime/user/useUserSessionRows.ts
+function pn(e) {
+	let t = J([]), n = J({}), r = fn({ load: async (e) => {
+		await Promise.all(e.keys.map((t) => a(t, e.isLatest)));
+	} });
+	function i(e) {
+		r.enqueue(e);
+	}
+	async function a(t, n) {
+		if (e.context.can("sessions", t) !== !1) {
+			u(t, {
+				...c(t),
+				loading: !0,
+				error: void 0
+			});
+			try {
+				await e.context.recordActions(t);
+				let r = await e.context.http.request({
+					method: "GET",
+					path: `/iam.user/${encodeURIComponent(t)}/sessions`
+				});
+				n(t) && u(t, {
+					records: r,
+					loading: !1
+				});
+			} catch (r) {
+				if (!n(t)) return;
+				let i = L(r, {
+					source: `${e.source}-sessions`,
+					phase: "load"
+				});
+				u(t, {
+					...c(t),
+					loading: !1,
+					error: i.message
+				});
+			}
+		}
+	}
+	function o(e, n) {
+		let r = String(e.id ?? "");
+		r && (t.value = n ? Array.from(/* @__PURE__ */ new Set([...t.value, r])) : t.value.filter((e) => e !== r), n && c(r).records.length === 0 && i(r));
+	}
+	function s(e) {
+		if (e.type !== "iam.user.session.collectionChanged" || e.moduleAlias !== "iam.user") return;
+		let n = String(e.recordId ?? "");
+		n && t.value.includes(n) && i(n);
+	}
+	function c(e) {
+		return e ? n.value[e] ?? {
+			records: [],
+			loading: !1
+		} : {
+			records: [],
+			loading: !1
+		};
+	}
+	function l() {
+		r.reset(), t.value = [], n.value = {};
+	}
+	function u(e, t) {
+		n.value = {
+			...n.value,
+			[e]: t
+		};
+	}
+	return {
+		handleUserRowExpand: o,
+		handleUserSessionBusinessEvent: s,
+		loadUserSessions: i,
+		reset: l,
+		userSessionState: c
+	};
+}
+//#endregion
+//#region src/platform-admin-runtime/userModulePageEnhancement.ts
+var mn = {
+	id: "iam-user-standard-page-enhancement",
+	target: { moduleAlias: "iam.user" },
+	navigator: { emptyListScope: ({ currentUser: e, selectedNavigatorRecords: t }) => {
+		if (!(e?.system !== !0 || Object.values(t).some(Boolean))) return [{
+			fieldName: "tenantId",
+			operator: "NULL",
+			values: []
+		}];
+	} },
+	list: {
+		rowExpansion: {
+			key: "iam-user-sessions",
+			component: /* @__PURE__ */ K({
+				name: "UserSessionListExpansion",
+				__name: "UserSessionListExpansion",
+				props: { context: {} },
+				setup(e) {
+					let t = e, n = z(() => t.context.record.id == null ? void 0 : String(t.context.record.id)), r = pn({
+						context: t.context.module,
+						source: "iam-user-list-expansion"
+					}), i = z(() => r.userSessionState(n.value)), a = z(() => i.value.records.filter((e) => !e.current && t.context.module.can("revokeSession", n.value) === !0)), o = z(() => a.value.length > 1 && t.context.module.can("revokeSessions", n.value) === !0);
+					Z([n, () => t.context.expanded], ([e, t]) => {
+						e && r.handleUserRowExpand({ id: e }, t);
+					}, { immediate: !0 });
+					let s = Gt((e) => r.handleUserSessionBusinessEvent(e));
+					be(() => {
+						s.unsubscribe(), r.reset();
+					});
+					async function c(e) {
+						let i = n.value;
+						i && !e.current && t.context.module.can("revokeSession", i) === !0 && await b({
+							title: "下线登录会话",
+							content: "确认下线该登录会话？",
+							okText: "下线",
+							danger: !0
+						}) && (await t.context.module.http.request({
+							method: "POST",
+							path: `/iam.user/${encodeURIComponent(i)}/sessions/${encodeURIComponent(e.id)}/revoke`
+						}), r.loadUserSessions(i));
+					}
+					async function l() {
+						let e = n.value, i = a.value.map((e) => e.id);
+						e && i.length !== 0 && t.context.module.can("revokeSessions", e) === !0 && await b({
+							title: "全部下线",
+							content: `确认下线该用户的 ${i.length} 个登录会话？`,
+							okText: "全部下线",
+							danger: !0
+						}) && (await t.context.module.http.request({
+							method: "POST",
+							path: `/iam.user/${encodeURIComponent(e)}/sessions/revoke`,
+							body: { sessionIds: i }
+						}), r.loadUserSessions(e));
+					}
+					return (t, a) => (q(), B(X(u), {
+						embedded: "",
+						sessions: i.value.records,
+						loading: i.value.loading,
+						error: i.value.error,
+						"can-revoke": (t) => !t.current && e.context.module.can("revokeSession", n.value) === !0,
+						"can-revoke-all": o.value,
+						onRefresh: a[0] ||= (e) => X(r).loadUserSessions(n.value),
+						onRevoke: c,
+						onRevokeAll: l
+					}, null, 8, [
+						"sessions",
+						"loading",
+						"error",
+						"can-revoke",
+						"can-revoke-all"
+					]));
+				}
+			})
+		},
+		columns: [{
+			key: "onlineStatus",
+			title: "在线状态",
+			width: "112px",
+			align: "center",
+			before: "enabled",
+			cell: on
+		}]
+	},
+	form: {
+		contributions: [],
+		fieldPolicies: [{
+			fieldName: "password",
+			visible: ({ mode: e }) => e === "create"
+		}]
+	},
+	detail: { actions: [{
+		key: "iam-user-password",
+		actionCode: "changePassword",
+		title: "密码管理",
+		iconName: "lock",
+		state: (e) => ({ visible: e.id != null }),
+		run({ openDrawer: e }) {
+			e({
+				title: "密码管理",
+				width: 460,
+				component: dn
+			});
+		}
+	}] }
+}, hn = 100, gn = /* @__PURE__ */ K({
+	name: "RoleScopeTree",
+	__name: "RoleScopeTree",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = ee({ moduleAlias: "iam.tenant" }), r = ee({ moduleAlias: "iam.organization" }), i = s(), a = J(""), o = J(!1), c = J(!1), u = J(!1), f = J(0), p = J([]), m = J([]), h = J(0), g = /* @__PURE__ */ new Map(), v = /* @__PURE__ */ new Map(), y = /* @__PURE__ */ new Map(), b = 0, x, C = z(() => i?.value?.system === !0), w = z(() => {
+			let e = i?.value?.tenantId;
+			if (i?.value?.system !== !0 && e) return {
+				id: e,
+				title: e,
+				alias: e,
+				enabled: !0
+			};
+		}), T = ie({
+			nodes: () => p.value,
+			loader: () => k,
+			version: () => h.value
+		}), E = T.nodes, te = T.states, re = z(() => t.context.selectionKey);
+		Z(w, (e) => {
+			e?.id && !C.value && !t.context.selectionKey && t.context.selectSelectionKey(`tenant:${e.id}`);
+		}, { immediate: !0 }), ye(() => void D()), ve(() => {
+			x && clearTimeout(x);
+		}), Z([C, w], () => void D()), Z(a, () => {
+			C.value && (x && clearTimeout(x), x = setTimeout(() => void D(), 240));
+		});
+		async function D(e = {}) {
+			let t = e.append === !0, r = ++b;
+			if (t || (m.value = [], h.value += 1, f.value = 0, u.value = !1), !C.value) {
+				let e = w.value;
+				if (!e?.id) {
+					p.value = [];
+					return;
+				}
+				g.clear(), g.set(e.id, e), p.value = [O(e)];
+				return;
+			}
+			o.value = !t, c.value = t;
+			try {
+				await n.runtime.ready;
+				let e = t ? f.value + 1 : 1, i = await n.abilities.crud().query({
+					page: {
+						pageNum: e,
+						pageSize: hn
+					},
+					quickSearch: a.value.trim() || void 0
+				});
+				if (r !== b) return;
+				t || g.clear();
+				let o = new Set(t ? p.value.map((e) => e.key) : []);
+				i.records.forEach((e) => {
+					e.id && g.set(e.id, e);
+				});
+				let s = i.records.map(O).filter((e) => !o.has(e.key));
+				p.value = t ? [...p.value, ...s] : s, f.value = e, u.value = i.totalKnown ? e < i.pages : i.records.length === hn;
+			} catch (e) {
+				if (r !== b) return;
+				p.value = [], u.value = !1, L(e, {
+					source: "role-scope-tree",
+					phase: "load"
+				});
+			} finally {
+				r === b && (o.value = !1, c.value = !1);
+			}
+		}
+		function O(e) {
+			return {
+				key: `tenant:${e.id ?? ""}`,
+				title: F(e),
+				secondary: e.alias ?? e.id,
+				muted: e.enabled === !1,
+				isLeaf: !1
+			};
+		}
+		async function k(e, t) {
+			let n = P(e.key);
+			if (!n || !g.has(n)) throw Error("租户已失效");
+			try {
+				let e = d(r, {
+					scopeFieldName: "tenantId",
+					scopeValue: n,
+					treePath: "/iam.organization/tree"
+				});
+				await e.runtime.ready;
+				let i = await e.abilities.tree().tree();
+				return t.signal.throwIfAborted(), {
+					mode: "replace",
+					nodes: A(i.records, n),
+					hasMore: !1
+				};
+			} catch (e) {
+				throw t.signal.aborted || L(e, {
+					source: "role-scope-tree",
+					phase: "load"
+				}), e;
+			}
+		}
+		function A(e, t) {
+			let n = /* @__PURE__ */ new Set();
+			return e.flatMap((e) => {
+				let r = j(e, t);
+				return n.has(r.key) ? [] : (n.add(r.key), [r]);
+			});
+		}
+		function j(e, t) {
+			let n = e.record;
+			return n.id && (v.set(n.id, n), y.set(n.id, t)), {
+				key: `organization:${n.id ?? ""}`,
+				title: I(n),
+				secondary: n.code ?? n.id,
+				muted: n.enabled === !1,
+				isLeaf: e.children.length === 0,
+				children: e.children.map((e) => j(e, t))
+			};
+		}
+		function M(e) {
+			let n = P(e.key);
+			if (n) {
+				let e = g.get(n);
+				t.context.selectSelectionKey(`tenant:${n}`, {
+					label: F(e),
+					secondaryLabel: e?.alias ?? n
+				});
+				return;
+			}
+			let r = ae(e.key);
+			if (r && v.has(r) && y.has(r)) {
+				let e = v.get(r);
+				t.context.selectSelectionKey(`organization:${r}`, {
+					label: I(e),
+					secondaryLabel: e?.code ?? r
+				});
+			}
+		}
+		function N() {
+			if (i?.value?.system === !0) {
+				t.context.selectSelectionKey("platform", { label: "平台角色" });
+				return;
+			}
+			let e = w.value?.id;
+			if (e) {
+				let n = g.get(e);
+				t.context.selectSelectionKey(`tenant:${e}`, {
+					label: F(n),
+					secondaryLabel: n?.alias ?? e
+				});
+			}
+		}
+		function P(e) {
+			return e.startsWith("tenant:") ? e.slice(7) : void 0;
+		}
+		function ae(e) {
+			return e.startsWith("organization:") ? e.slice(13) : void 0;
+		}
+		function F(e) {
+			return String(e?.title ?? e?.alias ?? e?.id ?? "未命名租户");
+		}
+		function I(e) {
+			return String(e?.title ?? e?.code ?? e?.id ?? "未命名机构");
+		}
+		return (e, t) => (q(), B(X(l), {
+			class: "role-scope-tree",
+			title: "租户",
+			"refresh-title": "刷新租户列表",
+			"search-keyword": a.value,
+			"search-placeholder": "搜索租户名称、alias 或 ID",
+			searchable: C.value,
+			onRefresh: D,
+			"onUpdate:searchKeyword": t[4] ||= (e) => a.value = e
+		}, fe({
+			default: Q(() => [o.value ? (q(), B(X(ne), {
+				key: 0,
+				tip: "加载租户"
+			})) : (q(), B(X(S), {
+				key: 1,
+				"expanded-keys": m.value,
+				"onUpdate:expandedKeys": t[0] ||= (e) => m.value = e,
+				nodes: X(E),
+				"selected-key": re.value,
+				"reload-key": h.value,
+				"load-strategy": "controlled",
+				"reload-on-reexpand": "",
+				"branch-states": X(te),
+				onLoadRequest: t[1] ||= (e) => X(T).request(e.node.key, e.reason, X(T).stateOf(e.node.key).status === "error"),
+				onSelect: M,
+				onDeselect: N,
+				onUnloadChildren: t[2] ||= (e) => X(T).release(e.key)
+			}, null, 8, [
+				"expanded-keys",
+				"nodes",
+				"selected-key",
+				"reload-key",
+				"branch-states"
+			]))]),
+			_: 2
+		}, [C.value && u.value ? {
+			name: "footer",
+			fn: Q(() => [G(X(_), {
+				type: "text",
+				"icon-name": "reload",
+				loading: c.value,
+				onClick: t[3] ||= (e) => D({ append: !0 })
+			}, {
+				default: Q(() => [...t[5] ||= [W(" 加载更多租户 ", -1)]]),
+				_: 1
+			}, 8, ["loading"])]),
+			key: "0"
+		} : void 0]), 1032, ["search-keyword", "searchable"]));
+	}
+}), _n = /* @__PURE__ */ K({
+	name: "RoleEnumTitleCell",
+	__name: "RoleEnumTitleCell",
+	props: {
+		record: {},
+		column: {}
+	},
+	setup(e) {
+		let t = e, n = z(() => {
+			let e = String(t.record[t.column?.key ?? ""] ?? "");
+			return {
+				account: "账号角色",
+				employment: "任职角色",
+				standard: "标准角色",
+				group: "角色组",
+				dataGrant: "数据授权角色",
+				system: "系统角色",
+				private: "私有",
+				ownerAndChildren: "本级及下级",
+				tenant: "租户公开",
+				platform: "全局公开"
+			}[e] ?? (e || "-");
+		});
+		return (e, t) => (q(), H("span", null, Y(n.value), 1));
+	}
+});
+//#endregion
+//#region src/views/roleGrantClient.ts
+function vn(e) {
+	return {
+		accountRoleGrants(t, n) {
+			return e.request({
+				path: `/iam.role/${encodeURIComponent(t)}/account-grants`,
+				query: n ? { targetTenantId: n } : void 0
+			});
+		},
+		grantAccountRole(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/account-grants`,
+				body: n
+			});
+		},
+		deleteAccountRoleGrant(t, n, r) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/account-grants/${encodeURIComponent(n)}/delete`,
+				query: r ? { targetTenantId: r } : void 0
+			});
+		},
+		userSelector(t) {
+			return e.request({
+				method: "POST",
+				path: "/iam.user/selector/query",
+				body: t
+			});
+		},
+		accountRoleCandidates(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/account-role-candidates/query`,
+				body: n
+			});
+		},
+		employmentRoleGrants(t) {
+			return e.request({ path: `/iam.role/${encodeURIComponent(t)}/employment-grants` });
+		},
+		grantEmploymentRole(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/employment-grants`,
+				body: { employeePositionId: n }
+			});
+		},
+		deleteEmploymentRoleGrant(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/employment-grants/${encodeURIComponent(n)}/delete`
+			});
+		},
+		employmentSelector(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/employment-selector/query`,
+				body: n
+			});
+		},
+		authorizationModules(t) {
+			return e.request({ path: `/iam.role/authorizationModules/${encodeURIComponent(t)}` });
+		},
+		permissionMatrix(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/permissionMatrix/${encodeURIComponent(t)}`,
+				body: { moduleAliases: n }
+			});
+		},
+		grantAction(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/grant/${encodeURIComponent(t)}`,
+				body: n
+			});
+		},
+		revokeAction(t, n, r) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/revoke/${encodeURIComponent(t)}`,
+				body: {
+					moduleAlias: n,
+					actionCode: r
+				}
+			});
+		},
+		replacePermissionMatrix(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/permissionMatrix/${encodeURIComponent(t)}/replace`,
+				body: { actions: n }
+			});
+		},
+		dataGrantActionMatrix(t) {
+			return e.request({ path: `/iam.role/dataGrantActionMatrix/${encodeURIComponent(t)}` });
+		},
+		dataScopePolicyCatalog(t, n) {
+			return e.request({
+				path: `/iam.role/dataScopePolicyCatalog/${encodeURIComponent(t)}`,
+				query: n ? { moduleAlias: n } : void 0
+			});
+		},
+		replaceDataGrantActions(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/dataGrantActions/${encodeURIComponent(t)}`,
+				body: { actions: n }
+			});
+		}
+	};
+}
+//#endregion
+//#region src/views/RoleAccountGrantDrawer.vue?vue&type=script&setup=true&lang.ts
+var yn = {
+	key: 1,
+	class: "role-account-grant-drawer-state"
+}, bn = {
+	key: 0,
+	class: "role-account-grant-target-tenant"
+}, xn = {
+	key: 1,
+	class: "role-account-grant-target-hint"
+}, Sn = { class: "role-account-grant-search" }, Cn = {
+	key: 0,
+	class: "role-account-grant-selected"
+}, wn = { class: "role-account-grant-selected-title" }, Tn = { class: "role-account-grant-selected-list" }, En = ["disabled", "onClick"], Dn = 20, On = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	name: "RoleAccountGrantDrawer",
+	__name: "RoleAccountGrantDrawer",
+	props: {
+		open: { type: Boolean },
+		container: {},
+		embedded: { type: Boolean },
+		drawerContext: {},
+		context: {},
+		role: {}
+	},
+	emits: ["close", "saved"],
+	setup(e, { emit: n }) {
+		let r = e, i = n, a = J([]), o = J({}), s = J([]), c = J(/* @__PURE__ */ new Set()), l = J(/* @__PURE__ */ new Set()), u = J(""), d = J(""), p = J(1), h = J(0), g = J(!1), v = J(!1), b = J(!1), S = J(!1), C = J(), T = z(() => vn(r.context.http)), E = ee({ moduleAlias: "iam.tenant" }), te = z(() => r.role?.id), re = z(() => r.role ? `绑定用户 - ${je(r.role)}` : "绑定用户"), D = z(() => r.embedded ? "section" : y), O = z(() => r.embedded ? {} : {
+			open: r.open,
+			title: re.value,
+			renderMode: r.container ? "inline" : "portal",
+			closeTitle: "关闭",
+			onClose: ye
+		}), k = z(() => r.role?.ownerScopeType === "platform"), A = z(() => C.value?.id), j = z(() => !k.value || !!A.value), M = z(() => E), N = z(() => {
+			let e = /* @__PURE__ */ new Map();
+			for (let t of a.value) t.userId && e.set(t.userId, t);
+			return e;
+		}), P = z(() => s.value.filter((e) => e.id).map((e) => ({
+			id: e.id,
+			username: ke(e),
+			employeeNo: e.employeeNo ?? "",
+			employeeTitle: e.employeeTitle ?? "",
+			organizationTitle: e.organizationTitle ?? e.organizationId ?? "",
+			departmentTitle: e.departmentTitle ?? e.departmentId ?? "",
+			boundTitle: l.value.has(e.id) ? "已绑定" : "未绑定"
+		}))), ie = z(() => [...c.value].map((e) => o.value[e] ?? Oe(e))), ae = z(() => [...c.value].filter((e) => !l.value.has(e))), F = z(() => [...l.value].filter((e) => !c.value.has(e))), I = z(() => ae.value.length > 0 || F.value.length > 0), oe = {
+			rowKey: "id",
+			columns: [
+				{
+					title: "用户账号",
+					key: "username",
+					width: 140
+				},
+				{
+					title: "职员姓名",
+					key: "employeeTitle",
+					width: 120
+				},
+				{
+					title: "职员工号",
+					key: "employeeNo",
+					width: 120
+				},
+				{
+					title: "所属机构",
+					key: "organizationTitle",
+					width: 140
+				},
+				{
+					title: "所属部门",
+					key: "departmentTitle",
+					width: 140
+				},
+				{
+					title: "状态",
+					key: "boundTitle",
+					width: 90
+				}
+			]
+		}, se = z(() => ({
+			selectedRowKeys: [...c.value],
+			preserveSelectedRowKeys: !0,
+			disabledOf: () => b.value,
+			onChange: (e) => {
+				c.value = new Set(e.map((e) => String(e)));
+			}
+		})), ce = z(() => ({
+			current: p.value,
+			total: h.value,
+			pageSize: Dn,
+			showSizeChanger: !1,
+			showQuickJumper: !1,
+			onChange: (e) => void pe(e)
+		}));
+		Z(() => [r.open, r.role?.id], ([e]) => {
+			e ? de() : be();
+		}, { immediate: !0 }), Z([
+			() => r.embedded,
+			() => r.drawerContext,
+			c,
+			I,
+			j,
+			ae,
+			F,
+			b,
+			g
+		], le, { immediate: !0 }), ve(() => r.drawerContext?.setOperation(void 0));
+		function le() {
+			let e = r.drawerContext;
+			r.embedded && e && (e.setSubtitle(`角色：${je(r.role ?? {})} · ${Me(r.role)}`), e.setOperation({
+				summary: ue(),
+				actions: [{
+					key: "cancel-account-role-grants",
+					label: "取消",
+					disabled: b.value || g.value,
+					run: ye
+				}, {
+					key: "save-account-role-grants",
+					label: "确定",
+					emphasis: "primary",
+					disabled: g.value || !j.value || !I.value,
+					loading: b.value,
+					run: () => void _e()
+				}]
+			}));
+		}
+		function ue() {
+			return j.value ? I.value ? `已选 ${c.value.size} 个用户 · 新增 ${ae.value.length} · 移除 ${F.value.length}` : `已选 ${c.value.size} 个用户` : "请选择目标租户";
+		}
+		async function de() {
+			let e = te.value;
+			if (!e) {
+				be();
+				return;
+			}
+			if (!j.value) {
+				Se();
+				return;
+			}
+			g.value = !0, S.value = !1;
+			try {
+				let t = await T.value.accountRoleGrants(e, A.value);
+				a.value = t;
+				let n = new Set(t.map((e) => e.userId).filter((e) => !!e));
+				l.value = n, c.value = new Set(n), o.value = De([...t.map((e) => Oe(e.userId)).filter((e) => !!e)]), await pe(1);
+			} catch (e) {
+				S.value = !0, L(e, {
+					source: "role-account-grants",
+					phase: "load"
+				});
+			} finally {
+				g.value = !1;
+			}
+		}
+		async function pe(e) {
+			let t = te.value;
+			if (t && j.value) {
+				v.value = !0;
+				try {
+					let n = await T.value.accountRoleCandidates(t, {
+						targetTenantId: A.value,
+						keyword: d.value,
+						enabledOnly: !0,
+						page: {
+							pageNum: Math.max(0, e),
+							pageSize: Dn
+						}
+					});
+					s.value = n.records, o.value = {
+						...o.value,
+						...De(n.records)
+					}, p.value = n.pageNum, h.value = n.total;
+				} catch (e) {
+					L(e, {
+						source: "role-account-grants",
+						phase: "load"
+					});
+				} finally {
+					v.value = !1;
+				}
+			}
+		}
+		function K() {
+			d.value = u.value.trim(), pe(0);
+		}
+		function me(e, t) {
+			let n = new Set(c.value);
+			t ? n.add(e) : n.delete(e), c.value = n;
+		}
+		async function _e() {
+			let e = te.value;
+			if (e && j.value) {
+				if (!I.value) {
+					i("close");
+					return;
+				}
+				b.value = !0;
+				try {
+					for (let t of ae.value) await T.value.grantAccountRole(e, {
+						userId: t,
+						targetTenantId: A.value
+					});
+					for (let t of F.value) {
+						let n = N.value.get(t)?.id;
+						n && await T.value.deleteAccountRoleGrant(e, n, A.value);
+					}
+					await x({
+						success: !0,
+						message: "用户绑定已保存"
+					}, {
+						source: "role-account-grants",
+						phase: "action",
+						fallbackMessage: "用户绑定已保存"
+					}), i("saved"), i("close");
+				} catch (e) {
+					L(e, {
+						source: "role-account-grants",
+						phase: "action"
+					});
+				} finally {
+					b.value = !1;
+				}
+			}
+		}
+		function ye() {
+			b.value || i("close");
+		}
+		function be() {
+			C.value = void 0, Se();
+		}
+		function Se() {
+			a.value = [], o.value = {}, s.value = [], c.value = /* @__PURE__ */ new Set(), l.value = /* @__PURE__ */ new Set(), u.value = "", d.value = "", p.value = 1, h.value = 0, g.value = !1, v.value = !1, b.value = !1, S.value = !1;
+		}
+		async function we(e) {
+			if (!e) {
+				C.value = void 0, Se();
+				return;
+			}
+			let t = await E.crud.view(e);
+			C.value = t ?? {
+				id: e,
+				title: e
+			}, await de();
+		}
+		function Ee(e) {
+			me(e, !1);
+		}
+		function De(e) {
+			let t = {};
+			for (let n of e) n.id && (t[n.id] = n);
+			return t;
+		}
+		function Oe(e) {
+			return e ? {
+				id: e,
+				username: e
+			} : void 0;
+		}
+		function ke(e) {
+			return String(e?.username ?? e?.id ?? "未知用户");
+		}
+		function Ae(e) {
+			return e.employeeTitle && e.employeeNo ? `${e.employeeTitle} / ${e.employeeNo}` : e.employeeTitle ?? e.employeeNo ?? e.employeeId ?? e.id;
+		}
+		function je(e) {
+			return String(e.title ?? e.id ?? "角色");
+		}
+		function Me(e) {
+			return e?.ownerScopeType === "platform" ? "平台范围" : e?.ownerScopeType === "organization" ? "机构范围" : "租户范围";
+		}
+		return (n, r) => (q(), B(Ce(D.value), he(O.value, { class: { "role-account-grant-drawer-surface": e.embedded } }), fe({
+			default: Q(() => [g.value ? (q(), B(X(ne), {
+				key: 0,
+				class: "role-account-grant-drawer-state",
+				tip: "加载用户"
+			})) : S.value ? (q(), H("div", yn, [G(X(t), {
+				title: "用户加载失败",
+				message: "无法加载当前角色的用户绑定"
+			}), G(X(_), {
+				type: "primary",
+				"icon-name": "reload",
+				onClick: de
+			}, {
+				default: Q(() => [...r[3] ||= [W("重试", -1)]]),
+				_: 1
+			})])) : (q(), H("section", {
+				key: 2,
+				class: ge(["role-account-grant-drawer-body", { "role-account-grant-drawer-body--target-tenant": k.value }])
+			}, [k.value ? (q(), H("label", bn, [r[4] ||= U("span", null, "目标租户", -1), G(X(f), {
+				context: M.value,
+				value: A.value,
+				mode: "list",
+				placeholder: "请选择角色下发的目标租户",
+				disabled: b.value || g.value,
+				"onUpdate:value": we
+			}, null, 8, [
+				"context",
+				"value",
+				"disabled"
+			])])) : V("v-if", !0), j.value ? (q(), H(R, { key: 2 }, [
+				U("div", Sn, [G(X(w), {
+					value: u.value,
+					"allow-clear": "",
+					disabled: b.value,
+					placeholder: "搜索用户账号",
+					"onUpdate:value": r[0] ||= (e) => u.value = e,
+					onKeydown: Te(K, ["enter"])
+				}, null, 8, ["value", "disabled"]), G(X(_), {
+					"icon-name": "search",
+					disabled: b.value,
+					onClick: K
+				}, {
+					default: Q(() => [...r[5] ||= [W("查询", -1)]]),
+					_: 1
+				}, 8, ["disabled"])]),
+				G(X(m), {
+					class: "role-account-grant-table",
+					size: "middle",
+					contract: oe,
+					rows: P.value,
+					loading: v.value,
+					pagination: ce.value,
+					selection: se.value,
+					"fill-height": ""
+				}, null, 8, [
+					"rows",
+					"loading",
+					"pagination",
+					"selection"
+				]),
+				ie.value.length > 0 ? (q(), H("section", Cn, [U("div", wn, [r[6] ||= U("strong", null, "已选用户", -1), U("span", null, Y(ie.value.length) + " 个", 1)]), U("div", Tn, [(q(!0), H(R, null, xe(ie.value, (e) => (q(), H("button", {
+					key: e.id,
+					type: "button",
+					disabled: b.value,
+					onClick: (t) => Ee(e.id)
+				}, [U("span", null, Y(ke(e)), 1), U("small", null, Y(Ae(e)), 1)], 8, En))), 128))])])) : V("v-if", !0)
+			], 64)) : (q(), H("div", xn, " 平台共享角色需要先选择目标租户，再加载可绑定账号。 "))], 2))]),
+			_: 2
+		}, [e.embedded ? void 0 : {
+			name: "operation",
+			fn: Q(() => [G(X(_), {
+				disabled: b.value || g.value,
+				onClick: ye
+			}, {
+				default: Q(() => [...r[1] ||= [W("取消", -1)]]),
+				_: 1
+			}, 8, ["disabled"]), G(X(_), {
+				type: "primary",
+				loading: b.value,
+				disabled: g.value || !I.value,
+				onClick: _e
+			}, {
+				default: Q(() => [...r[2] ||= [W(" 确定 ", -1)]]),
+				_: 1
+			}, 8, ["loading", "disabled"])]),
+			key: "0"
+		}]), 1040, ["class"]));
+	}
+}), [["__scopeId", "data-v-fc27c9ca"]]), kn = /* @__PURE__ */ K({
+	name: "RoleAccountGrantDrawerSurface",
+	__name: "RoleAccountGrantDrawerSurface",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = z(() => t.context.module), r = z(() => t.context.record);
+		return (e, i) => (q(), B(On, {
+			open: "",
+			embedded: "",
+			"drawer-context": t.context,
+			context: n.value,
+			role: r.value,
+			onClose: t.context.close,
+			onSaved: t.context.refreshList
+		}, null, 8, [
+			"drawer-context",
+			"context",
+			"role",
+			"onClose",
+			"onSaved"
+		]));
+	}
+}), An = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	name: "EmployeeEmploymentTable",
+	__name: "EmployeeEmploymentTable",
+	props: {
+		rows: {},
+		selectedIds: { default: () => /* @__PURE__ */ new Set() },
+		selectable: {
+			type: Boolean,
+			default: !1
+		},
+		disabled: {
+			type: Boolean,
+			default: !1
+		},
+		pagination: {
+			type: [Boolean, Object],
+			default: !1
+		},
+		fillHeight: {
+			type: Boolean,
+			default: !1
+		}
+	},
+	emits: ["update:selectedIds"],
+	setup(e, { emit: t }) {
+		let n = e, r = t, i = J([]), a = [
+			{
+				key: "title",
+				title: "职员",
+				width: 160
+			},
+			{
+				key: "employeeNo",
+				title: "工号",
+				width: 140
+			},
+			{
+				key: "organizationTitle",
+				title: "所属机构",
+				width: 180
+			},
+			{
+				key: "employmentCount",
+				title: "任职",
+				width: 88,
+				align: "right"
+			},
+			{
+				key: "selectedCount",
+				title: "已选",
+				width: 88,
+				align: "right"
+			}
+		], o = [
+			{
+				key: "position",
+				title: "岗位",
+				width: 160
+			},
+			{
+				key: "organization",
+				title: "机构",
+				width: 160
+			},
+			{
+				key: "department",
+				title: "部门",
+				width: 160
+			},
+			{
+				key: "primaryPosition",
+				title: "主岗位",
+				width: 88
+			}
+		], s = z(() => {
+			let e = /* @__PURE__ */ new Map();
+			for (let t of n.rows) {
+				let n = t.employeeId ?? t.id, r = e.get(n) ?? {
+					employeeId: n,
+					title: t.employeeTitle ?? n,
+					employeeNo: t.employeeNo,
+					organizationTitle: t.organizationTitle,
+					positions: []
+				};
+				r.positions.push(t), e.set(n, r);
+			}
+			return [...e.values()];
+		}), c = z(() => s.value);
+		function l(e, t) {
+			let n = t;
+			return e.key === "title" ? n.title : e.key === "employeeNo" ? n.employeeNo ?? n.employeeId : e.key === "organizationTitle" ? n.organizationTitle ?? "-" : e.key === "employmentCount" ? `${n.positions.length} 项` : e.key === "selectedCount" ? `${d(n)} 项` : "";
+		}
+		function u(e, t) {
+			let n = t;
+			return e.key === "position" ? n.positionTitle ?? n.positionId : e.key === "organization" ? n.organizationTitle ?? n.organizationId : e.key === "department" ? n.departmentTitle ?? n.departmentId : e.key === "primaryPosition" ? n.primaryPosition ? "是" : "否" : "";
+		}
+		function d(e) {
+			return e.positions.filter((e) => n.selectedIds.has(e.id)).length;
+		}
+		function f(e) {
+			if (n.selectable) return {
+				selectedRowKeys: e.positions.filter((e) => n.selectedIds.has(e.id)).map((e) => e.id),
+				preserveSelectedRowKeys: !0,
+				disabledOf: () => n.disabled,
+				onChange: (t) => p(e, t)
+			};
+		}
+		function p(e, t) {
+			let i = new Set(n.selectedIds);
+			for (let t of e.positions) i.delete(t.id);
+			for (let e of t) i.add(String(e));
+			r("update:selectedIds", i);
+		}
+		function m(e, t) {
+			let n = e.employeeId;
+			i.value = t ? Array.from(/* @__PURE__ */ new Set([...i.value, n])) : i.value.filter((e) => e !== n);
+		}
+		function ee(e) {
+			let t = e.employeeId;
+			m(e, !i.value.includes(t));
+		}
+		return (t, n) => (q(), B(X(ae), {
+			class: "employee-employment-table",
+			columns: a,
+			rows: c.value,
+			"row-key": "employeeId",
+			pagination: e.pagination,
+			"expanded-row-keys": i.value,
+			"clickable-rows": "",
+			"horizontal-scroll": "",
+			"fill-height": e.fillHeight,
+			onRowExpand: m,
+			onRowDblclick: ee
+		}, {
+			cell: Q(({ column: e, record: t }) => [W(Y(l(e, t)), 1)]),
+			expandedRow: Q(({ record: e }) => [G(X(h), { title: "任职信息" }, {
+				default: Q(() => [G(X(ae), {
+					columns: o,
+					rows: e.positions,
+					"row-key": "id",
+					pagination: !1,
+					selection: f(e),
+					"horizontal-scroll": "",
+					"row-muted": (e) => e.enabled === !1
+				}, {
+					cell: Q(({ column: e, record: t }) => [W(Y(u(e, t)), 1)]),
+					_: 1
+				}, 8, [
+					"rows",
+					"selection",
+					"row-muted"
+				])]),
+				_: 2
+			}, 1024)]),
+			_: 1
+		}, 8, [
+			"rows",
+			"pagination",
+			"expanded-row-keys",
+			"fill-height"
+		]));
+	}
+}), [["__scopeId", "data-v-21f1027e"]]), jn = { key: 1 }, Mn = {
+	key: 2,
+	class: "role-employment-grant-body"
+}, Nn = {
+	key: 0,
+	class: "role-employment-grant-selected"
+}, Pn = { class: "role-employment-grant-selected-title" }, Fn = { class: "role-employment-grant-selected-list" }, In = ["disabled", "onClick"], Ln = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	name: "RoleEmploymentGrantDrawer",
+	__name: "RoleEmploymentGrantDrawer",
+	props: {
+		open: { type: Boolean },
+		container: {},
+		embedded: { type: Boolean },
+		drawerContext: {},
+		context: {},
+		role: {}
+	},
+	emits: ["close", "saved"],
+	setup(e, { emit: n }) {
+		let r = e, i = n, a = J([]), o = J([]), s = J({}), c = J(/* @__PURE__ */ new Set()), l = J(/* @__PURE__ */ new Set()), u = J(!1), d = J(!1), f = J(!1), p = J(!1), m = J(1), h = J(0), ee = J(""), g = z(() => r.role?.id), v = z(() => vn(r.context.http)), b = z(() => `绑定任职 - ${r.role?.title ?? r.role?.id ?? ""}`), S = z(() => r.embedded ? "section" : y), C = z(() => r.embedded ? {} : {
+			open: r.open,
+			title: b.value,
+			renderMode: r.container ? "inline" : "portal",
+			closeTitle: "关闭",
+			onClose: () => !f.value && i("close")
+		}), T = z(() => [...c.value].filter((e) => !l.value.has(e))), E = z(() => [...l.value].filter((e) => !c.value.has(e))), te = z(() => new Map(a.value.map((e) => [e.employeePositionId, e]))), re = z(() => o.value.filter((e) => !ee.value.trim() || N(e).includes(ee.value.trim()))), D = z(() => [...c.value].map((e) => s.value[e] ?? ae(e))), O = z(() => ({
+			current: m.value,
+			total: h.value,
+			pageSize: 50,
+			showSizeChanger: !1,
+			showQuickJumper: !1,
+			onChange: (e) => void A(e)
+		}));
+		Z(() => [r.open, r.role?.id], ([e]) => {
+			e ? A() : M();
+		}, { immediate: !0 }), Z([
+			() => r.embedded,
+			() => r.drawerContext,
+			c,
+			T,
+			E,
+			f,
+			d
+		], k, { immediate: !0 }), ve(() => r.drawerContext?.setOperation(void 0));
+		function k() {
+			let e = r.drawerContext;
+			r.embedded && e && (e.setSubtitle(`角色：${r.role?.title ?? r.role?.id ?? "角色"} · ${oe(r.role)}`), e.setOperation({
+				summary: `已选 ${c.value.size} 个任职${T.value.length || E.value.length ? ` · 新增 ${T.value.length} · 移除 ${E.value.length}` : ""}`,
+				actions: [{
+					key: "cancel-employment-role-grants",
+					label: "取消",
+					disabled: f.value,
+					run: () => i("close")
+				}, {
+					key: "save-employment-role-grants",
+					label: "确定",
+					emphasis: "primary",
+					disabled: d.value || T.value.length === 0 && E.value.length === 0,
+					loading: f.value,
+					run: () => void j()
+				}]
+			}));
+		}
+		async function A(e = 1) {
+			let t = g.value;
+			if (t) {
+				d.value = !0, p.value = !1;
+				try {
+					let [n, r] = await Promise.all([v.value.employmentRoleGrants(t), v.value.employmentSelector(t, {
+						enabledOnly: !0,
+						page: {
+							pageNum: e,
+							pageSize: 50
+						}
+					})]);
+					a.value = n, l.value = new Set(n.map((e) => e.employeePositionId).filter((e) => !!e)), s.value = {
+						...s.value,
+						...ie(r.records)
+					}, u.value ||= (c.value = new Set(l.value), !0), o.value = r.records, m.value = r.pageNum, h.value = r.total;
+				} catch (e) {
+					p.value = !0, L(e, {
+						source: "role-employment-grants",
+						phase: "load"
+					});
+				} finally {
+					d.value = !1;
+				}
+			}
+		}
+		async function j() {
+			let e = g.value;
+			if (e) {
+				f.value = !0;
+				try {
+					for (let t of T.value) await v.value.grantEmploymentRole(e, t);
+					for (let t of E.value) {
+						let n = te.value.get(t)?.id;
+						n && await v.value.deleteEmploymentRoleGrant(e, n);
+					}
+					await x({
+						success: !0,
+						message: "任职角色授权已保存"
+					}, {
+						source: "role-employment-grants",
+						phase: "action"
+					}), i("saved"), i("close");
+				} catch (e) {
+					L(e, {
+						source: "role-employment-grants",
+						phase: "action"
+					});
+				} finally {
+					f.value = !1;
+				}
+			}
+		}
+		function M() {
+			a.value = [], o.value = [], s.value = {}, c.value = /* @__PURE__ */ new Set(), l.value = /* @__PURE__ */ new Set(), u.value = !1, ee.value = "", m.value = 1, h.value = 0, p.value = !1;
+		}
+		function N(e) {
+			return [
+				e.employeeTitle,
+				e.employeeNo,
+				e.organizationTitle,
+				e.departmentTitle,
+				e.positionTitle
+			].filter(Boolean).join(" ");
+		}
+		function P(e) {
+			let t = new Set(c.value);
+			t.delete(e), c.value = t;
+		}
+		function ie(e) {
+			let t = {};
+			for (let n of e) n.id && (t[n.id] = n);
+			return t;
+		}
+		function ae(e) {
+			return {
+				id: e,
+				positionId: e
+			};
+		}
+		function F(e) {
+			let t = e.positionTitle ?? e.positionId ?? e.id;
+			return e.employeeTitle ? `${e.employeeTitle} · ${t}` : t;
+		}
+		function I(e) {
+			return [
+				e.employeeNo,
+				e.organizationTitle ?? e.organizationId,
+				e.departmentTitle ?? e.departmentId
+			].filter(Boolean).join(" / ") || e.id;
+		}
+		function oe(e) {
+			return e?.ownerScopeType === "platform" ? "平台范围" : e?.ownerScopeType === "organization" ? "机构范围" : "租户范围";
+		}
+		return (n, r) => (q(), B(Ce(S.value), he(C.value, { class: { "role-employment-grant-drawer-surface": e.embedded } }), fe({
+			default: Q(() => [d.value ? (q(), B(X(ne), {
+				key: 0,
+				tip: "加载任职"
+			})) : p.value ? (q(), H("div", jn, [G(X(t), {
+				title: "任职加载失败",
+				message: "无法加载任职授权"
+			}), G(X(_), { onClick: r[1] ||= (e) => A() }, {
+				default: Q(() => [...r[6] ||= [W("重试", -1)]]),
+				_: 1
+			})])) : (q(), H("section", Mn, [
+				G(X(w), {
+					value: ee.value,
+					"onUpdate:value": r[2] ||= (e) => ee.value = e,
+					"allow-clear": "",
+					placeholder: "筛选职员、工号、机构、部门或岗位"
+				}, null, 8, ["value"]),
+				G(An, {
+					"selected-ids": c.value,
+					"onUpdate:selectedIds": r[3] ||= (e) => c.value = e,
+					rows: re.value,
+					selectable: "",
+					disabled: f.value,
+					pagination: O.value,
+					"fill-height": ""
+				}, null, 8, [
+					"selected-ids",
+					"rows",
+					"disabled",
+					"pagination"
+				]),
+				D.value.length > 0 ? (q(), H("section", Nn, [U("div", Pn, [r[7] ||= U("strong", null, "已选任职", -1), U("span", null, Y(D.value.length) + " 个", 1)]), U("div", Fn, [(q(!0), H(R, null, xe(D.value, (e) => (q(), H("button", {
+					key: e.id,
+					type: "button",
+					disabled: f.value,
+					onClick: (t) => P(e.id)
+				}, [U("span", null, Y(F(e)), 1), U("small", null, Y(I(e)), 1)], 8, In))), 128))])])) : V("v-if", !0)
+			]))]),
+			_: 2
+		}, [e.embedded ? void 0 : {
+			name: "operation",
+			fn: Q(() => [G(X(_), {
+				disabled: f.value,
+				onClick: r[0] ||= (e) => i("close")
+			}, {
+				default: Q(() => [...r[4] ||= [W("取消", -1)]]),
+				_: 1
+			}, 8, ["disabled"]), G(X(_), {
+				type: "primary",
+				loading: f.value,
+				disabled: d.value || T.value.length === 0 && E.value.length === 0,
+				onClick: j
+			}, {
+				default: Q(() => [...r[5] ||= [W(" 确定 ", -1)]]),
+				_: 1
+			}, 8, ["loading", "disabled"])]),
+			key: "0"
+		}]), 1040, ["class"]));
+	}
+}), [["__scopeId", "data-v-06db3659"]]), Rn = /* @__PURE__ */ K({
+	name: "RoleEmploymentGrantDrawerSurface",
+	__name: "RoleEmploymentGrantDrawerSurface",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = z(() => t.context.module), r = z(() => t.context.record);
+		return (e, i) => (q(), B(Ln, {
+			open: "",
+			embedded: "",
+			"drawer-context": t.context,
+			context: n.value,
+			role: r.value,
+			onClose: t.context.close,
+			onSaved: t.context.refreshList
+		}, null, 8, [
+			"drawer-context",
+			"context",
+			"role",
+			"onClose",
+			"onSaved"
+		]));
+	}
+}), zn = /* @__PURE__ */ K({
+	name: "WorkspaceViewDrawer",
+	__name: "WorkspaceViewDrawer",
+	props: {
+		open: { type: Boolean },
+		title: {},
+		container: {},
+		subtitle: { default: void 0 },
+		profile: { default: "detail" },
+		promotion: { default: void 0 }
+	},
+	emits: ["close"],
+	setup(e, { emit: t }) {
+		let n = e, r = t, i = z(() => n.profile === "wide-work" ? "min(600px, 100vw)" : 520);
+		return (t, n) => (q(), B(X(y), {
+			open: e.open,
+			title: e.title,
+			"render-mode": e.container ? "inline" : "portal",
+			subtitle: e.subtitle,
+			width: i.value,
+			promotion: e.promotion,
+			onClose: n[0] ||= (e) => r("close")
+		}, fe({
+			default: Q(() => [Se(t.$slots, "default")]),
+			_: 2
+		}, [t.$slots.operation ? {
+			name: "operation",
+			fn: Q(() => [Se(t.$slots, "operation")]),
+			key: "0"
+		} : void 0]), 1032, [
+			"open",
+			"title",
+			"render-mode",
+			"subtitle",
+			"width",
+			"promotion"
+		]));
+	}
+});
+//#endregion
+//#region src/platform-admin-runtime/useWorkspaceViewPromotion.ts
+function Bn(e) {
+	return e.hasStableIdentity && e.busy !== !0 && e.canChangeHost !== !1;
+}
+function Vn(e) {
+	let t = k();
+	return z(() => {
+		let n = we(e.input);
+		if (n && Bn(we(e.eligibility)) && t) return {
+			title: "固定为页签",
+			promote: async () => {
+				if (await e.beforePromote?.(n) === !1) {
+					e.onPromotionRejected?.();
+					return;
+				}
+				let r = t.openPage(F(e.view, n, "tab", we(e.title)));
+				e.onPromoted?.(r);
+			}
+		};
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/workspaceViewSessions.ts
+var Hn = /* @__PURE__ */ new Map(), Un = /* @__PURE__ */ new Map();
+function Wn(e, t) {
+	return `${e.type}:${Jn(t)}`;
+}
+async function Gn(e, t, n) {
+	let r = Wn(e, t), i = Un.get(r), a = i && [...i].at(-1);
+	return a ? await a(Yn(n)) ? "accepted" : "rejected" : (Hn.set(r, Yn(n)), "accepted");
+}
+function Kn(e, t, n) {
+	let r = Wn(e, t), i = Un.get(r) ?? /* @__PURE__ */ new Set();
+	return i.add(n), Un.set(r, i), () => {
+		i.delete(n), i.size === 0 && Un.delete(r);
+	};
+}
+function qn(e, t) {
+	let n = Wn(e, t), r = Hn.get(n);
+	return Hn.delete(n), r;
+}
+function Jn(e) {
+	return Array.isArray(e) ? `[${e.map(Jn).join(",")}]` : e && typeof e == "object" ? `{${Object.entries(e).sort(([e], [t]) => e.localeCompare(t)).map(([e, t]) => `${JSON.stringify(e)}:${Jn(t)}`).join(",")}}` : JSON.stringify(e);
+}
+function Yn(e) {
+	return JSON.parse(JSON.stringify(e));
+}
+//#endregion
+//#region src/views/roleAuthorizationWorkspaceSession.ts
+function Xn(e, t) {
+	return Gn(Ne, e, t);
+}
+function Zn(e, t) {
+	return Kn(Ne, e, t);
+}
+function Qn(e) {
+	return qn(Ne, e);
+}
+//#endregion
+//#region src/views/RoleAuthorizationView.vue?vue&type=script&setup=true&lang.ts
+var $n = { class: "panel-title" }, er = {
+	key: 0,
+	class: "authorization-column-header"
+}, tr = {
+	key: 2,
+	class: "data-scope-editor"
+}, nr = { key: 0 }, rr = { key: 1 }, ir = { key: 3 }, ar = {
+	key: 4,
+	class: "not-applicable"
+}, or = /*@__PURE__*/ K({
+	name: "RoleAuthorizationView",
+	__name: "RoleAuthorizationView",
+	props: {
+		roleId: {},
+		moduleContext: {},
+		container: {},
+		drawer: { type: Boolean },
+		drawerContext: {}
+	},
+	emits: ["close"],
+	setup(e, { emit: r }) {
+		let i = e, a = r, o = ee({ moduleAlias: "iam.role" }), s = i.moduleContext ?? o, c = vn(s.http), u = i.roleId ?? new URLSearchParams(window.location.search).get("roleId") ?? "", d = re(), f = i.roleId ? { roleId: i.roleId } : void 0, p = f ? Qn(f) : void 0, m = J(), h = J([]), v = J(), y = J(""), S = J([]), C = J(), w = J(), te = J(!1), D = J(!1), O = J(!1), k = J(), A = J(), M = /* @__PURE__ */ new Map(), N = /* @__PURE__ */ new Map(), P = J(0), ie, F = z(() => m.value?.roleKind === "group"), I = z(() => m.value?.roleKind === "dataGrant"), oe = z(() => m.value?.assignmentType === "employment"), ce = z(() => !!i.drawerContext), ue = z(() => m.value?.title ?? u ?? "角色"), de = z(() => `授权：${ue.value}`), pe = z(() => K.value ? `动作授权 - ${K.value.title}` : `动作授权 - ${ue.value}`), K = z(() => h.value.find((e) => e.moduleAlias === v.value)), he = z(() => {
+			let e = y.value.trim().toLocaleLowerCase(), t = new Set(e ? h.value.filter((t) => [
+				t.title,
+				t.moduleAlias,
+				t.applicationAlias
+			].filter((e) => !!e).some((t) => t.toLocaleLowerCase().includes(e))).map((e) => e.moduleAlias) : h.value.map((e) => e.moduleAlias)), n = new Map(h.value.map((e) => [e.moduleAlias, e]));
+			for (let e of [...t]) {
+				let r = n.get(e)?.parentId;
+				for (; r && n.has(r) && !t.has(r);) t.add(r), r = n.get(r)?.parentId;
+			}
+			return h.value.filter((e) => t.has(e.moduleAlias)).map((e) => ({
+				id: e.moduleAlias,
+				parentId: e.parentId,
+				title: e.title,
+				secondary: e.applicationAlias
+			}));
+		}), be = z(() => (w.value?.options ?? []).map((e) => ({
+			value: e.code,
+			label: e.title
+		}))), xe = z(() => (w.value?.referenceDependencies ?? []).map((e) => ({
+			value: e.referenceFieldId,
+			label: `${e.title} → ${e.targetModuleTitle}`
+		}))), Se = z(() => new Map((w.value?.referenceDependencies ?? []).map((e) => [e.referenceFieldId, e]))), we = z(() => oe.value && S.value.some((e) => !!e.dataAuth)), Te = z(() => [
+			{
+				key: "title",
+				title: "动作",
+				width: 160
+			},
+			{
+				key: "granted",
+				title: "授权",
+				width: 104,
+				align: "center"
+			},
+			...we.value ? [{
+				key: "dataScopePolicy",
+				title: "数据范围",
+				width: 200
+			}] : []
+		]), Ee = [
+			{
+				key: "title",
+				title: "标准动作",
+				width: 130
+			},
+			{
+				key: "configured",
+				title: "启用模板",
+				width: 104,
+				align: "center"
+			},
+			{
+				key: "dataScopePolicy",
+				title: "数据范围",
+				width: 160
+			}
+		], De = z(() => S.value), Oe = z(() => C.value?.actions ?? []), ke = z(() => i.drawer === !0 || !!f && d?.presentation === "drawer"), Ae = z(() => !!f), je = z(() => Ae.value && !ce.value), Me = z(() => ce.value ? "div" : ke.value ? zn : Ae.value ? le : "div"), Pe = z(() => ke.value ? {
+			open: !0,
+			title: de.value,
+			container: i.container ?? null,
+			profile: Ne.drawerProfile,
+			promotion: Be.value,
+			onClose: rt
+		} : je.value ? { title: de.value } : {}), Fe = z(() => {
+			let e = C.value;
+			return !e || A.value === void 0 ? !1 : JSON.stringify(e.actions) !== A.value;
+		}), Ie = z(() => P.value >= 0 && [...M.entries()].some(([e, t]) => N.get(e) !== JSON.stringify(t))), $ = z(() => Fe.value || Ie.value), Le = z(() => S.value.length > 0 && S.value.every((e) => e.granted)), Re = z(() => S.value.some((e) => e.granted) && !Le.value), ze = z(() => {
+			let e = K.value?.title ?? "未选择模块", t = S.value.filter((e) => e.granted).length, n = $.value ? "有未确认修改" : "未修改";
+			return `当前模块：${e} · 已授权 ${t}/${S.value.length} 项 · ${n}`;
+		}), Be = Vn({
+			view: Ne,
+			input: () => f,
+			title: de,
+			eligibility: () => ({
+				hasStableIdentity: !!(u && m.value),
+				busy: O.value
+			}),
+			beforePromote: (e) => Xn(e, {
+				selectedModuleAlias: v.value,
+				dataGrantMatrix: C.value,
+				actionDrafts: [...M.entries()].map(([e, t]) => ({
+					moduleAlias: e,
+					actions: t
+				})),
+				actionSnapshots: [...N.entries()].map(([e, t]) => ({
+					moduleAlias: e,
+					snapshot: t
+				}))
+			}).then((e) => e === "accepted"),
+			onPromoted: it,
+			onPromotionRejected: () => T("目标页签存在未确认的授权配置；请先确认或关闭该页签后再固定当前抽屉。", {
+				source: "role-authorization",
+				phase: "validation"
+			})
+		});
+		ye(() => {
+			f && !ke.value && (ie = Zn(f, at)), He();
+		}), Z(de, (e) => {
+			Ae.value && d?.setTitle(e);
+		}, { immediate: !0 }), Z(v, () => void Ue()), Z([
+			ue,
+			ze,
+			$,
+			O,
+			F,
+			I
+		], Ve, { immediate: !0 }), ye(() => window.addEventListener("beforeunload", st)), ve(() => {
+			ie?.(), i.drawerContext?.setOperation(void 0), i.drawerContext?.setSubtitle(void 0), window.removeEventListener("beforeunload", st);
+		});
+		function Ve() {
+			let e = i.drawerContext;
+			if (e) {
+				if (e.setSubtitle(`${ue.value} · ${ct(m.value)}`), F.value) {
+					e.setOperation(void 0);
+					return;
+				}
+				e.setOperation({
+					summary: I.value ? $.value ? "有未确认修改" : "未修改" : ze.value,
+					actions: [{
+						key: "confirm-role-authorization",
+						label: "确认",
+						emphasis: "primary",
+						disabled: O.value || !$.value,
+						loading: O.value,
+						run: () => void nt()
+					}]
+				});
+			}
+		}
+		async function He() {
+			if (!u) {
+				k.value = "缺少角色标识，无法打开授权页。";
+				return;
+			}
+			te.value = !0, k.value = void 0;
+			try {
+				if (m.value = await s.crud.view(u), m.value.roleKind === "group") return;
+				if (m.value.roleKind === "dataGrant") {
+					let [e, t] = await Promise.all([c.dataGrantActionMatrix(u), c.dataScopePolicyCatalog(u)]);
+					C.value = p?.dataGrantMatrix ?? e, w.value = t, A.value = JSON.stringify(e.actions);
+					return;
+				}
+				h.value = (await c.authorizationModules(u)).records, v.value = p?.selectedModuleAlias ?? h.value[0]?.moduleAlias;
+			} catch (e) {
+				k.value = "授权信息加载失败，请重试。", L(e, {
+					source: "role-authorization",
+					phase: "load"
+				});
+			} finally {
+				te.value = !1;
+			}
+		}
+		async function Ue() {
+			let e = v.value;
+			if (!(!e || I.value || F.value)) {
+				D.value = !0;
+				try {
+					let [t, n] = await Promise.all([c.permissionMatrix(u, [e]), c.dataScopePolicyCatalog(u, e)]), r = (t.modules[0]?.actions ?? []).map($e), i = p?.actionDrafts?.find((t) => t.moduleAlias === e)?.actions, a = M.get(e) ?? i;
+					S.value = a ?? r, M.has(e) || (M.set(e, S.value), N.set(e, p?.actionSnapshots?.find((t) => t.moduleAlias === e)?.snapshot ?? JSON.stringify(r))), P.value += 1, w.value = n;
+				} catch (e) {
+					L(e, {
+						source: "role-authorization",
+						phase: "load"
+					});
+				} finally {
+					D.value = !1;
+				}
+			}
+		}
+		function We(e, t) {
+			t && e.dataAuth && oe.value && !e.dataScopePolicy && (e.dataScopePolicy = "inheritDataGrant"), t && e.dataScopePolicy === "referenceDependency" && !e.referenceFieldId && (e.dataScopePolicy = "inheritDataGrant"), e.granted = t, P.value += 1;
+		}
+		function Ge(e) {
+			S.value.forEach((t) => We(t, e));
+		}
+		function Ke(e, t) {
+			if (e.dataScopePolicy = String(t || "none"), e.dataScopePolicy === "referenceDependency") {
+				e.referenceFieldId = void 0, e.referenceActionCode = void 0, P.value += 1;
+				return;
+			}
+			e.referenceFieldId = void 0, e.referenceActionCode = void 0, P.value += 1;
+		}
+		function qe(e, t) {
+			let n = Se.value.get(String(t || ""));
+			e.referenceFieldId = n?.referenceFieldId, e.referenceActionCode = n?.referenceActionCode, P.value += 1;
+		}
+		function Je(e) {
+			return Se.value.get(String(e || ""));
+		}
+		function Ye(e) {
+			return typeof e == "string" || typeof e == "number" ? e : void 0;
+		}
+		function Xe(e) {
+			return e.dataScopePolicy ?? "inheritDataGrant";
+		}
+		function Ze(e) {
+			return !!e.dataAuth && oe.value;
+		}
+		function Qe(e, t) {
+			return e.key === "dataScopePolicy" && Ze(t);
+		}
+		function $e(e) {
+			return oe.value && e.dataAuth && e.dataScopePolicy === "none" ? {
+				...e,
+				dataScopePolicy: "inheritDataGrant"
+			} : e;
+		}
+		async function et() {
+			if (C.value) {
+				O.value = !0;
+				try {
+					let e = await c.replaceDataGrantActions(u, C.value.actions.map((e) => ({
+						actionCode: e.actionCode,
+						dataScopePolicy: e.dataScopePolicy,
+						enabled: e.configured
+					})));
+					await x(e, {
+						source: "role-authorization",
+						phase: "action",
+						fallbackMessage: "数据权限模板已保存"
+					}), A.value = JSON.stringify(C.value.actions);
+				} catch (e) {
+					L(e, {
+						source: "role-authorization",
+						phase: "action"
+					});
+				} finally {
+					O.value = !1;
+				}
+			}
+		}
+		async function tt() {
+			let e = [...M.entries()].filter(([e, t]) => N.get(e) !== JSON.stringify(t));
+			if (e.length) {
+				O.value = !0;
+				try {
+					let t = await c.replacePermissionMatrix(u, e.flatMap(([e, t]) => t.map((t) => ({
+						moduleAlias: e,
+						actionCode: t.actionCode,
+						granted: !!t.granted,
+						dataScopePolicy: t.granted && t.dataAuth && oe.value ? t.dataScopePolicy ?? "inheritDataGrant" : void 0,
+						referenceFieldId: t.granted && t.dataScopePolicy === "referenceDependency" ? t.referenceFieldId : void 0,
+						referenceActionCode: t.granted && t.dataScopePolicy === "referenceDependency" ? t.referenceActionCode : void 0
+					}))));
+					await x(t, {
+						source: "role-authorization",
+						phase: "action",
+						fallbackMessage: "角色授权已保存"
+					}), e.forEach(([e, t]) => N.set(e, JSON.stringify(t))), P.value += 1;
+				} catch (e) {
+					L(e, {
+						source: "role-authorization",
+						phase: "action"
+					});
+				} finally {
+					O.value = !1;
+				}
+			}
+		}
+		async function nt() {
+			if (I.value) {
+				await et();
+				return;
+			}
+			await tt();
+		}
+		async function rt() {
+			(!$.value || await b({
+				title: "放弃未确认的授权配置",
+				content: "当前修改尚未确认，关闭后将丢失这些修改。",
+				okText: "放弃修改",
+				danger: !0
+			})) && ot();
+		}
+		function it() {
+			ot();
+		}
+		function at(e) {
+			return !$.value && (v.value = e.selectedModuleAlias, C.value = e.dataGrantMatrix, M.clear(), N.clear(), e.actionDrafts?.forEach(({ moduleAlias: e, actions: t }) => M.set(e, t)), e.actionSnapshots?.forEach(({ moduleAlias: e, snapshot: t }) => N.set(e, t)), P.value += 1, !0);
+		}
+		function ot() {
+			if (i.drawer === !0) {
+				a("close");
+				return;
+			}
+			d?.dismiss();
+		}
+		function st(e) {
+			$.value && (e.preventDefault(), e.returnValue = "");
+		}
+		function ct(e) {
+			return e?.ownerScopeType === "platform" ? "平台范围" : e?.ownerScopeType === "organization" ? "机构范围" : "租户范围";
+		}
+		return (e, r) => (q(), B(Ce(Me.value), _e(me(Pe.value)), fe({
+			default: Q(() => [U("section", { class: ge(["role-authorization-page", { "role-authorization-page--drawer": ke.value || ce.value }]) }, [te.value ? (q(), B(X(ne), {
+				key: 0,
+				tip: "加载授权信息"
+			})) : k.value ? (q(), B(X(t), {
+				key: 1,
+				title: "授权页加载失败",
+				message: k.value
+			}, null, 8, ["message"])) : F.value ? (q(), B(X(j), {
+				key: 2,
+				title: "角色组不独立授权",
+				description: "角色组只组合成员角色；请到成员角色分别配置动作和数据权限。"
+			})) : I.value && C.value ? (q(), B(X(l), {
+				key: 3,
+				class: "data-grant-content",
+				title: je.value ? "数据权限模板" : `数据权限模板 - ${ue.value}`,
+				searchable: !1,
+				onRefresh: He
+			}, {
+				default: Q(() => [U("header", $n, [r[4] ||= U("div", null, [U("h3", null, "标准动作的数据范围模板"), U("p", null, "模板只会在具体任职的普通角色动作选择“继承数据授权角色”时生效。")], -1), Ae.value ? V("v-if", !0) : (q(), B(X(_), {
+					key: 0,
+					type: "primary",
+					disabled: !$.value,
+					loading: O.value,
+					onClick: nt
+				}, {
+					default: Q(() => [...r[3] ||= [W(" 确认 ", -1)]]),
+					_: 1
+				}, 8, ["disabled", "loading"]))]), G(X(ae), {
+					columns: Ee,
+					rows: Oe.value,
+					"row-key": "actionCode",
+					"horizontal-scroll": ""
+				}, {
+					cell: Q(({ column: e, record: t }) => [e.key === "title" ? (q(), H(R, { key: 0 }, [U("strong", null, Y(t.title || t.actionCode), 1), U("small", null, Y(t.actionCode), 1)], 64)) : e.key === "configured" ? (q(), B(X(E), {
+						key: 1,
+						checked: !!t.configured,
+						disabled: O.value,
+						onChange: (e) => t.configured = e
+					}, null, 8, [
+						"checked",
+						"disabled",
+						"onChange"
+					])) : (q(), B(X(se), {
+						key: 2,
+						value: t.dataScopePolicy,
+						options: be.value,
+						disabled: !t.configured || O.value,
+						placeholder: "请选择数据范围",
+						"allow-clear": !1,
+						"onUpdate:value": (e) => t.dataScopePolicy = String(e || "")
+					}, null, 8, [
+						"value",
+						"options",
+						"disabled",
+						"onUpdate:value"
+					]))]),
+					_: 1
+				}, 8, ["rows"])]),
+				_: 1
+			}, 8, ["title"])) : (q(), H("section", {
+				key: 4,
+				class: ge(["authorization-layout", { "authorization-layout--compact-actions": !we.value }])
+			}, [G(X(l), {
+				"search-keyword": y.value,
+				"onUpdate:searchKeyword": r[1] ||= (e) => y.value = e,
+				class: "module-panel",
+				title: "模块树",
+				"refresh-title": "刷新模块目录",
+				"search-placeholder": "搜索模块名称或别名",
+				onRefresh: He
+			}, {
+				default: Q(() => [G(X(n), {
+					records: he.value,
+					"selected-id": v.value,
+					onSelect: r[0] ||= (e) => v.value = e.id
+				}, null, 8, ["records", "selected-id"])]),
+				_: 1
+			}, 8, ["search-keyword"]), G(X(l), {
+				class: "action-panel",
+				title: pe.value,
+				searchable: !1
+			}, fe({
+				default: Q(() => [D.value ? (q(), B(X(ne), {
+					key: 0,
+					tip: "加载模块动作"
+				})) : v.value ? (q(), B(X(ae), {
+					key: 2,
+					columns: Te.value,
+					rows: De.value,
+					"row-key": "actionCode",
+					"fill-height": "",
+					"horizontal-scroll": ""
+				}, {
+					header: Q(({ column: e }) => [e.key === "granted" ? (q(), H("span", er, [G(X(g), {
+						checked: Le.value,
+						indeterminate: Re.value,
+						disabled: O.value || !S.value.length,
+						"aria-label": "全选当前模块动作授权",
+						onChange: Ge
+					}, null, 8, [
+						"checked",
+						"indeterminate",
+						"disabled"
+					]), r[6] ||= W(" 授权 ", -1)])) : (q(), H(R, { key: 1 }, [W(Y(e.title), 1)], 64))]),
+					cell: Q(({ column: e, record: t }) => [e.key === "title" ? (q(), H(R, { key: 0 }, [U("strong", null, Y(t.title || t.actionCode), 1), U("small", null, Y(t.permissionActionCode || t.actionCode), 1)], 64)) : e.key === "granted" ? (q(), B(X(g), {
+						key: 1,
+						checked: !!t.granted,
+						disabled: O.value,
+						onChange: (e) => We(t, e)
+					}, null, 8, [
+						"checked",
+						"disabled",
+						"onChange"
+					])) : t.dataAuth && oe.value && t.granted ? (q(), H("div", tr, [G(X(se), {
+						value: Xe(t),
+						options: be.value,
+						disabled: O.value,
+						"allow-clear": !1,
+						"onUpdate:value": (e) => Ke(t, e)
+					}, null, 8, [
+						"value",
+						"options",
+						"disabled",
+						"onUpdate:value"
+					]), t.dataScopePolicy === "referenceDependency" ? (q(), H(R, { key: 0 }, [G(X(se), {
+						value: Ye(t.referenceFieldId),
+						options: xe.value,
+						disabled: O.value,
+						placeholder: "请选择引用字段",
+						"allow-clear": !1,
+						"onUpdate:value": (e) => qe(t, e)
+					}, null, 8, [
+						"value",
+						"options",
+						"disabled",
+						"onUpdate:value"
+					]), t.referenceFieldId ? (q(), H("small", nr, " 依赖目标：" + Y(Je(t.referenceFieldId)?.targetModuleTitle) + " · " + Y(Je(t.referenceFieldId)?.referenceActionTitle), 1)) : (q(), H("small", rr, "请先选择引用字段，再开启该动作授权。"))], 64)) : V("v-if", !0)])) : Qe(e, t) ? (q(), H("span", ir, "—")) : (q(), H("span", ar, "不适用"))]),
+					_: 1
+				}, 8, ["columns", "rows"])) : (q(), B(X(j), {
+					key: 1,
+					title: "请选择模块"
+				}))]),
+				_: 2
+			}, [Ae.value ? void 0 : {
+				name: "actions",
+				fn: Q(() => [G(X(_), {
+					type: "primary",
+					disabled: !$.value,
+					loading: O.value,
+					onClick: nt
+				}, {
+					default: Q(() => [...r[5] ||= [W(" 确认 ", -1)]]),
+					_: 1
+				}, 8, ["disabled", "loading"])]),
+				key: "0"
+			}]), 1032, ["title"])], 2))], 2)]),
+			_: 2
+		}, [je.value && !F.value ? {
+			name: "operation",
+			fn: Q(() => [G(X(_), {
+				type: "primary",
+				disabled: !$.value,
+				loading: O.value,
+				onClick: nt
+			}, {
+				default: Q(() => [...r[2] ||= [W(" 确认 ", -1)]]),
+				_: 1
+			}, 8, ["disabled", "loading"])]),
+			key: "0"
+		} : void 0]), 1040));
+	}
+}), sr = /* @__PURE__ */ e({ default: () => cr }), cr = /*#__PURE__*/ a(or, [["__scopeId", "data-v-fe2bc29b"]]), lr = { class: "role-authorization-drawer-surface" }, ur = /*#__PURE__*/ a(/* @__PURE__ */ K({
+	name: "RoleAuthorizationDrawerSurface",
+	__name: "RoleAuthorizationDrawerSurface",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = t.context.module;
+		return (e, r) => (q(), H("section", lr, [t.context.record?.id == null ? V("v-if", !0) : (q(), B(cr, {
+			key: 0,
+			"role-id": String(t.context.record.id),
+			"module-context": X(n),
+			"drawer-context": t.context
+		}, null, 8, [
+			"role-id",
+			"module-context",
+			"drawer-context"
+		]))]));
+	}
+}), [["__scopeId", "data-v-04d29709"]]), dr = {
+	key: 0,
+	class: "role-group-member-form-field"
+}, fr = {
+	id: "iam-role-scope-and-actions",
+	target: { moduleAlias: "iam.role" },
+	navigator: {
+		bypassListScope: !0,
+		extension: {
+			key: "iam-role-scope-tree",
+			component: gn,
+			selection: {
+				kind: "roleScope",
+				initialKey: (e) => e?.system === !0 ? "platform" : e?.tenantId ? `tenant:${e.tenantId}` : void 0,
+				initialPresentation: (e) => e?.system === !0 ? { label: "平台角色" } : e?.tenantId ? { label: e.tenantId } : void 0
+			}
+		}
+	},
+	list: { cellComponents: [
+		{
+			key: "assignmentType",
+			cell: _n
+		},
+		{
+			key: "roleKind",
+			cell: _n
+		},
+		{
+			key: "sharePolicy",
+			cell: _n
+		}
+	] },
+	form: {
+		contributions: [{
+			key: "role-group-members",
+			component: /* @__PURE__ */ a(/* @__PURE__ */ K({
+				name: "RoleGroupMemberFormField",
+				__name: "RoleGroupMemberFormField",
+				props: { context: {} },
+				setup(e) {
+					let t = e, n = J([]), r = J(!1), i = z(() => t.context.draft.roleKind === "group"), a = z(() => d(t.context.draft.memberRoleIds)), o = z(() => String(t.context.draft.id ?? "") || void 0), s = z(() => new Set(n.value.filter((e) => e.roleKind === "dataGrant" && e.id && a.value.includes(e.id)).map((e) => e.id))), c = z(() => n.value.filter((e) => e.id && e.id !== o.value).map((e) => ({
+						label: `${e.title ?? e.id} / ${e.roleKind === "dataGrant" ? "数据授权角色" : "标准角色"}`,
+						value: e.id,
+						disabled: e.roleKind === "dataGrant" && s.value.size > 0 && !a.value.includes(e.id)
+					})));
+					Z([i, () => t.context.formSessionKey], () => void l(), { immediate: !0 });
+					async function l() {
+						if (!i.value) {
+							n.value = [];
+							return;
+						}
+						r.value = !0;
+						try {
+							let e = await t.context.queryRecords({
+								page: {
+									pageNum: 1,
+									pageSize: 500
+								},
+								conditions: [
+									{
+										fieldName: "assignmentType",
+										operator: "EQ",
+										values: ["employment"]
+									},
+									{
+										fieldName: "roleKind",
+										operator: "IN",
+										values: ["standard", "dataGrant"]
+									},
+									{
+										fieldName: "enabled",
+										operator: "EQ",
+										values: [!0]
+									},
+									{
+										fieldName: "ownerScopeType",
+										operator: "EQ",
+										values: [t.context.draft.ownerScopeType]
+									},
+									...t.context.draft.ownerScopeId ? [{
+										fieldName: "ownerScopeId",
+										operator: "EQ",
+										values: [t.context.draft.ownerScopeId]
+									}] : []
+								],
+								sorts: [{ field: "sortOrder" }, { field: "title" }]
+							});
+							n.value = e.records;
+						} finally {
+							r.value = !1;
+						}
+					}
+					function u(e) {
+						let n = Array.isArray(e) ? e.map((e) => String(e).trim()).filter(Boolean) : [];
+						t.context.setField("memberRoleIds", n.length > 0 ? n.join(",") : void 0);
+					}
+					function d(e) {
+						return typeof e == "string" ? e.split(",").map((e) => e.trim()).filter(Boolean) : [];
+					}
+					return (t, n) => i.value ? (q(), H("label", dr, [n[0] ||= U("span", null, "成员角色", -1), G(X(se), {
+						mode: "multiple",
+						value: a.value,
+						options: c.value,
+						loading: r.value,
+						placeholder: "请选择成员角色",
+						disabled: e.context.mode === "view",
+						"allow-clear": "",
+						"onUpdate:value": u
+					}, null, 8, [
+						"value",
+						"options",
+						"loading",
+						"disabled"
+					])])) : V("v-if", !0);
+				}
+			}), [["__scopeId", "data-v-665f4381"]]),
+			location: {
+				surface: "record-card",
+				fieldName: "memberRoleIds",
+				placement: "after"
+			}
+		}],
+		fieldPolicies: [{
+			fieldName: "memberRoleIds",
+			visible: () => !1
+		}]
+	},
+	recordActions: [
+		{
+			key: "role-bind-account",
+			actionCode: "accountRoleGrants",
+			title: "绑定",
+			state: (e) => ({
+				visible: e.assignmentType === "account",
+				disabled: e.systemManaged === !0
+			}),
+			run({ openDrawer: e }) {
+				e({
+					title: "绑定用户",
+					width: 960,
+					component: kn
+				});
+			}
+		},
+		{
+			key: "role-bind-employment",
+			actionCode: "employmentRoleGrants",
+			title: "绑定",
+			state: (e) => ({
+				visible: e.assignmentType !== "account",
+				disabled: e.systemManaged === !0
+			}),
+			run({ openDrawer: e }) {
+				e({
+					title: "绑定任职",
+					width: 960,
+					component: Rn
+				});
+			}
+		},
+		{
+			key: "role-authorize",
+			actionCode: "rolePermissions",
+			title: "授权",
+			state: (e) => ({
+				visible: e.roleKind !== "group",
+				disabled: e.systemManaged === !0
+			}),
+			run({ openDrawer: e }) {
+				e({
+					title: "角色授权",
+					width: 820,
+					component: ur
+				});
+			}
+		}
+	]
+};
+P("platform-admin-runtime", Pe), ce("platform-admin-runtime", [
+	$e,
+	et,
+	tt,
+	ct,
+	ht,
+	bt,
+	mn,
+	fr
+]);
+//#endregion
+export { Oe as C, De as S, Dt as _, qn as a, wt as b, On as c, Gt as d, Wt as f, Ct as g, Ot as h, Kn as i, Bt as l, jt as m, sr as n, Vn as o, Ut as p, Gn as r, Ln as s, cr as t, Vt as u, Et as v, Me as x, Tt as y };