@ximatai/muyun-web-app 0.26.11 → 0.26.13

package/dist/workspaceViews-CCg6V0pr.js

@@ -0,0 +1,3623 @@
+import { n as e } from "./rolldown-runtime-DPVXH0ON.js";
+import { Bn as t, C as n, Cn as r, Gt as i, Ht as a, I as o, It as s, Jt as c, L as l, Lt as u, O as d, Ot as f, Rn as p, Rt as m, T as h, Un as g, Ut as _, Vn as v, Wt as y, bn as b, cn as x, dn as S, f as C, jt as w, kt as T, ln as E, lr as D, nn as O, nr as k, on as A, pn as j, qn as ee, rt as M, sn as N, tn as P, u as te, zn as ne, zt as re } from "./platform-components-1cvOeHmo.js";
+import { r as ie, t as F } from "./http-B0TC0pJB.js";
+import { K as I, _ as ae, it as L, q as oe, s as se, t as ce, u as le } from "./platform-workbench-Cu14Xd9d.js";
+import { n as ue, r as de } from "./moduleGovernanceWorkspaceView-4V_UW-Bt.js";
+import { Fragment as R, computed as z, createBlock as B, createCommentVNode as V, createElementBlock as H, createElementVNode as U, createSlots as fe, createTextVNode as W, createVNode as G, defineAsyncComponent as pe, defineComponent as K, guardReactiveProps as me, mergeProps as he, nextTick as ge, normalizeClass as _e, normalizeProps as ve, onBeforeUnmount as ye, onMounted as be, onUnmounted as xe, openBlock as q, ref as J, renderList as Se, renderSlot as Ce, resolveDynamicComponent as we, toDisplayString as Y, toValue as Te, unref as X, watch as Z, withCtx as Q, withKeys as Ee, withModifiers as De } from "vue";
+//#region src/web-core/dataChanges.ts
+function Oe(e = {}) {
+	let t = Math.max(1, e.maxHandledChangeSetIds ?? 1e3), n = /* @__PURE__ */ new Set(), r = /* @__PURE__ */ new Set();
+	return {
+		async dispatch(e) {
+			let t = ke(e);
+			return !t || n.has(t.changeSetId) ? !1 : (i(t.changeSetId), await Promise.allSettled([...r].map((e) => Promise.resolve().then(() => e(t)))), !0);
+		},
+		subscribe(e) {
+			return r.add(e), { unsubscribe() {
+				r.delete(e);
+			} };
+		},
+		markHandled(e) {
+			let t = Ae(e);
+			t && i(t);
+		}
+	};
+	function i(e) {
+		for (n.delete(e), n.add(e); n.size > t;) {
+			let e = n.values().next().value;
+			if (!e) return;
+			n.delete(e);
+		}
+	}
+}
+function ke(e) {
+	let t = Ae(e?.changeSetId);
+	if (t && Array.isArray(e?.changes)) return {
+		changeSetId: t,
+		changes: e.changes.filter(je)
+	};
+}
+function Ae(e) {
+	return e?.trim() || void 0;
+}
+function je(e) {
+	if (!e || typeof e != "object") return !1;
+	let t = e.type, n = e.moduleAlias;
+	return typeof t == "string" && t.trim() !== "" && typeof n == "string" && n.trim() !== "";
+}
+//#endregion
+//#region src/views/roleDetailWorkspaceView.ts
+var Me = /* @__PURE__ */ new Set([
+	"platform",
+	"tenant",
+	"organization"
+]), Ne = de({
+	type: "iam.role.detail",
+	route: "/iam/role",
+	moduleAlias: "iam.role",
+	component: pe(() => import("./RoleDetailWorkspaceView-DPDb_QOn.js")),
+	layout: "workspace",
+	routeTitle: "角色管理",
+	presentations: ["drawer", "tab"],
+	titleOf: () => "角色详情",
+	parentRouteQueryOf(e) {
+		return e.scopeKind === "platform" ? { scopeKind: e.scopeKind } : {
+			scopeKind: e.scopeKind,
+			scopeId: e.scopeId
+		};
+	},
+	parse(e) {
+		let t = e.recordId, n = e.scopeKind, r = e.scopeId;
+		if (!(typeof t != "string" || !t || typeof n != "string" || !Me.has(n) || (n === "platform" ? r !== void 0 : typeof r != "string" || !r))) return {
+			recordId: t,
+			scopeKind: n,
+			...typeof r == "string" ? { scopeId: r } : {}
+		};
+	}
+}), Pe = de({
+	type: "iam.role.authorization",
+	route: "/iam/role/authorization",
+	moduleAlias: "iam.role",
+	component: pe(() => Promise.resolve().then(() => Tr)),
+	layout: "workspace",
+	routeTitle: "角色授权",
+	drawerProfile: "wide-work",
+	presentations: ["drawer", "tab"],
+	titleOf: () => "角色授权",
+	parse(e) {
+		let t = e.roleId;
+		return typeof t == "string" && t ? { roleId: t } : void 0;
+	}
+}), Fe = [Ne, Pe], Ie = de({
+	type: "platform.module.actions",
+	route: "/_platform/workspace/platform.module.actions",
+	moduleAlias: "platform.module",
+	component: pe(() => import("./ModuleActionManagementView-Dkb35QXc.js").then((e) => e.n)),
+	layout: "workspace",
+	routeTitle: "模块管理",
+	presentations: ["tab"],
+	titleOf: (e) => `动作：${e.moduleTitle ?? e.moduleAlias}`,
+	parentRouteQueryOf: () => ({}),
+	parse(e) {
+		let t = e.moduleAlias, n = e.moduleTitle;
+		if (typeof t == "string" && t) return {
+			moduleAlias: t,
+			...typeof n == "string" && n ? { moduleTitle: n } : {},
+			...e.moduleKind === "static" || e.moduleKind === "dynamic" ? { moduleKind: e.moduleKind } : {}
+		};
+	}
+});
+//#endregion
+//#region src/platform-admin-runtime/module-menu/moduleMenuClient.ts
+function Le(e) {
+	let t = r(e, { moduleAlias: "platform.menu_scheme" });
+	return {
+		async schemes() {
+			let e = [];
+			for (let n = 1;; n++) {
+				let r = await t.query({ page: {
+					pageNum: n,
+					pageSize: 100
+				} });
+				if (e.push(...r.records), e.length >= r.total || r.records.length === 0) return e;
+			}
+		},
+		async tree(t) {
+			return (await e.request({
+				method: "POST",
+				path: "/platform.menu/tree/query",
+				headers: { "X-MuYun-Page-Context": JSON.stringify({ scheme: t }) },
+				body: { externalQueryValues: { schemeId: t } }
+			})).records;
+		},
+		insert(t, n) {
+			return r(ie(e, { "X-MuYun-Page-Context": JSON.stringify({ scheme: t }) }), { moduleAlias: "platform.menu" }).insert(n);
+		},
+		visible: () => L(e).mine().then((e) => e.records)
+	};
+}
+function $(e, t = "") {
+	return e.flatMap(({ record: e, children: n }) => {
+		let r = t ? `${t} / ${e.title}` : e.title;
+		return [{
+			menu: e,
+			path: r
+		}, ...$(n, r)];
+	});
+}
+function Re(e, t = !1) {
+	return e.map(({ record: e, children: n }) => {
+		let r = t || e.enabled === !1;
+		return {
+			value: e.id,
+			title: e.title,
+			disabled: r || !!e.moduleAlias,
+			children: Re(n, r)
+		};
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/module-menu/ModuleMenuDrawer.vue?vue&type=script&setup=true&lang.ts
+var ze = { class: "module-menu-form" }, Be = { key: 0 }, Ve = {
+	key: 1,
+	class: "hint"
+}, He = {
+	key: 1,
+	class: "hint"
+}, Ue = {
+	key: 2,
+	role: "status"
+}, We = {
+	key: 4,
+	role: "alert"
+}, Ge = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	__name: "ModuleMenuDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = le(), r = Le(t.context.module.http), i = String(t.context.record?.alias ?? t.context.record?.id ?? ""), a = b({ moduleAlias: i }), o = J(""), s = J(!1), c = J(String(t.context.record?.title ?? i)), l = J([]), u = J(""), d = J("root"), f = J("tab"), p = J([]), m = J(!0), h = J(!1), g = J(!1), _ = J(""), v = J(), y = J(""), x = J(), C = J(!1), w = 0;
+		ye(() => w++);
+		let T = z(() => [{
+			value: "root",
+			title: "顶层",
+			children: Re(p.value)
+		}]), E = z(() => l.value.filter((e) => e.enabled !== !1).map((e) => {
+			let t = e.title ?? e.alias ?? e.id, n = l.value.some((t) => t.id !== e.id && t.title === e.title), r = e.organizationId ?? e.tenantId ?? "系统";
+			return {
+				value: e.id,
+				label: n ? `${t} · ${r}` : t
+			};
+		})), D = z(() => $(p.value).find(({ menu: e }) => e.moduleAlias === i && e.parentId === d.value)), O = z(() => !m.value && !g.value && !v.value && !!(i && u.value && c.value.trim()) && h.value && s.value);
+		Z([
+			O,
+			g,
+			v
+		], () => {
+			t.context.setCloseBlocked(g.value), t.context.setTitleActions(v.value ? [] : [{
+				key: "add-menu",
+				label: "添加",
+				emphasis: "primary",
+				disabled: !O.value,
+				loading: g.value,
+				run: M
+			}]);
+		}, { immediate: !0 }), Z(u, () => void j()), k();
+		async function k() {
+			s.value = !1, h.value = !1, m.value = !0, _.value = "";
+			let e = ++w;
+			try {
+				let [t, n] = await Promise.all([r.schemes(), a.runtime.load()]);
+				if (e !== w) return;
+				if (f.value = n.entryType === "link" ? "window" : "tab", o.value = te(n), s.value = !o.value, l.value = t, !E.value.length) {
+					_.value = "暂无可用菜单方案，请先在菜单管理中配置方案。", m.value = !1;
+					return;
+				}
+				let i = await r.visible();
+				if (e !== w) return;
+				let c = i[0]?.record.schemeId, d = E.value.some((e) => e.value === c) ? c : String(E.value[0].value);
+				u.value === d ? await j() : u.value = d;
+			} catch (t) {
+				e === w && (_.value = ne(t), m.value = !1);
+			}
+		}
+		async function j() {
+			let e = ++w;
+			d.value = "root", p.value = [], h.value = !1, _.value = "", m.value = !0;
+			try {
+				let t = await r.tree(u.value);
+				e === w && (p.value = t, h.value = !0);
+			} catch (t) {
+				e === w && (_.value = ne(t));
+			} finally {
+				e === w && (m.value = !1);
+			}
+		}
+		async function ee() {
+			C.value = !1, _.value = "";
+			try {
+				let e = await (n?.refreshMenus?.() ?? r.visible());
+				x.value = $(e).find(({ menu: e }) => e.id === v.value?.id)?.menu, C.value = !0;
+			} catch {
+				_.value = "菜单已添加，导航刷新失败。请重试刷新，无需重复添加。";
+			}
+		}
+		async function M() {
+			if (O.value) {
+				g.value = !0, _.value = "";
+				try {
+					let e = await r.insert(u.value, {
+						title: c.value.trim(),
+						moduleAlias: i,
+						schemeId: u.value,
+						parentId: d.value,
+						openMode: f.value,
+						enabled: !0
+					});
+					v.value = e.record;
+					let n = $(p.value).find(({ menu: e }) => e.id === d.value)?.path, a = l.value.find((e) => e.id === u.value);
+					y.value = [
+						a?.title,
+						n,
+						c.value.trim()
+					].filter(Boolean).join(" / "), t.context.refreshDetailExtensions(), await ee();
+				} catch (e) {
+					_.value = ne(e);
+				} finally {
+					g.value = !1;
+				}
+			}
+		}
+		function te(e) {
+			return e.entryType === "route" ? e.entryRoute ? "" : "该模块尚未配置页面地址，请返回模块补充。" : e.entryType === "link" ? e.entryExternalUrl ? "" : "该模块尚未配置链接地址，请返回模块补充。" : e.uiDescriptor?.page ? "" : "该模块尚无可用业务页面，请返回模块完成页面配置；使用草稿配置的页面需先发布。";
+		}
+		function ne(e) {
+			return e instanceof Error ? e.message : "加载失败，请重试。";
+		}
+		function re() {
+			x.value && n?.openMenu && (n.openMenu(x.value), t.context.close());
+		}
+		return (t, r) => (q(), H("div", ze, [
+			v.value ? (q(), H(R, { key: 1 }, [
+				r[12] ||= U("strong", null, "已添加到菜单", -1),
+				U("p", null, Y(y.value), 1),
+				x.value && X(n)?.openMenu ? (q(), B(X(S), {
+					key: 0,
+					type: "primary",
+					onClick: re
+				}, {
+					default: Q(() => [...r[10] ||= [W("打开", -1)]]),
+					_: 1
+				})) : C.value ? (q(), H("p", He, " 当前用户的导航中暂不可见，请检查菜单方案适用范围、上级菜单状态及模块访问权限。 ")) : V("v-if", !0),
+				_.value ? (q(), B(X(S), {
+					key: 2,
+					disabled: g.value,
+					onClick: ee
+				}, {
+					default: Q(() => [...r[11] ||= [W("刷新导航", -1)]]),
+					_: 1
+				}, 8, ["disabled"])) : V("v-if", !0)
+			], 64)) : (q(), H(R, { key: 0 }, [
+				U("label", null, [r[5] ||= W("菜单名称", -1), G(X(A), {
+					value: c.value,
+					"onUpdate:value": r[0] ||= (e) => c.value = e,
+					disabled: g.value,
+					"aria-label": "菜单名称"
+				}, null, 8, ["value", "disabled"])]),
+				E.value.length > 1 ? (q(), H("label", Be, [r[6] ||= W("菜单方案 ", -1), G(X(N), {
+					value: u.value,
+					options: E.value,
+					"allow-clear": !1,
+					disabled: g.value,
+					"onUpdate:value": r[1] ||= (e) => u.value = String(e ?? "")
+				}, null, 8, [
+					"value",
+					"options",
+					"disabled"
+				])])) : V("v-if", !0),
+				U("label", null, [r[7] ||= W("放置位置 ", -1), G(X(P), {
+					value: d.value,
+					"tree-data": T.value,
+					"allow-clear": !1,
+					disabled: m.value || g.value,
+					loading: m.value,
+					"onUpdate:value": r[2] ||= (e) => d.value = String(e ?? "root")
+				}, null, 8, [
+					"value",
+					"tree-data",
+					"disabled",
+					"loading"
+				])]),
+				U("details", null, [r[9] ||= U("summary", null, "更多设置", -1), U("label", null, [r[8] ||= W("打开方式 ", -1), G(X(N), {
+					value: f.value,
+					"allow-clear": !1,
+					disabled: g.value,
+					options: [{
+						value: "tab",
+						label: "页签内打开"
+					}, {
+						value: "window",
+						label: "新窗口打开"
+					}],
+					"onUpdate:value": r[3] ||= (e) => f.value = e === "window" ? "window" : "tab"
+				}, null, 8, ["value", "disabled"])])]),
+				D.value ? (q(), H("p", Ve, "此位置已有「" + Y(D.value.menu.title) + "」，仍可添加另一个入口。", 1)) : V("v-if", !0)
+			], 64)),
+			o.value ? (q(), H("p", Ue, Y(o.value), 1)) : V("v-if", !0),
+			o.value ? (q(), B(X(S), {
+				key: 3,
+				onClick: r[4] ||= (t) => e.context.close()
+			}, {
+				default: Q(() => [...r[13] ||= [W("返回模块", -1)]]),
+				_: 1
+			})) : V("v-if", !0),
+			_.value ? (q(), H("p", We, Y(_.value), 1)) : V("v-if", !0),
+			_.value && !v.value && !h.value ? (q(), B(X(S), {
+				key: 5,
+				disabled: g.value,
+				onClick: k
+			}, {
+				default: Q(() => [...r[14] ||= [W("重试", -1)]]),
+				_: 1
+			}, 8, ["disabled"])) : V("v-if", !0)
+		]));
+	}
+}), [["__scopeId", "data-v-38eeb884"]]), Ke = { class: "module-menu-entries" }, qe = { key: 0 }, Je = {
+	key: 1,
+	role: "status"
+}, Ye = { key: 2 }, Xe = { key: 0 }, Ze = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	__name: "ModuleMenuEntriesSection",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = le(), r = J([]), i = J(/* @__PURE__ */ new Map()), a = J(!1), o = J(""), s = 0;
+		ye(() => s++), Z(() => [t.context.record.id, t.context.refreshKey], () => void c(), { immediate: !0 });
+		async function c() {
+			let e = ++s, n = String(t.context.record.alias ?? t.context.record.id ?? ""), c = Le(t.context.module.http);
+			a.value = !0, o.value = "", r.value = [], i.value = /* @__PURE__ */ new Map();
+			try {
+				let [t, a] = await Promise.all([c.schemes(), c.visible()]), o = await Promise.all(t.map(async (e) => $(await c.tree(e.id), e.title ?? e.alias ?? e.id).filter(({ menu: e }) => e.moduleAlias === n)));
+				if (e !== s) return;
+				r.value = o.flat(), i.value = new Map($(a).map(({ menu: e }) => [e.id, e]));
+			} catch {
+				e === s && (o.value = "暂时无法读取菜单入口，请确认有菜单管理权限后重试。");
+			} finally {
+				e === s && (a.value = !1);
+			}
+		}
+		return (e, t) => (q(), H("div", Ke, [a.value ? (q(), H("span", qe, "正在加载…")) : o.value ? (q(), H("div", Je, [W(Y(o.value) + " ", 1), G(X(S), {
+			type: "link",
+			onClick: c
+		}, {
+			default: Q(() => [...t[0] ||= [W("重试", -1)]]),
+			_: 1
+		})])) : r.value.length ? V("v-if", !0) : (q(), H("span", Ye, "尚未添加到菜单，可通过上方“添加到菜单”设置入口。")), (q(!0), H(R, null, Se(r.value, (e) => (q(), H("div", {
+			key: e.menu.id,
+			class: "menu-entry"
+		}, [U("span", null, [W(Y(e.path), 1), e.menu.enabled === !1 ? (q(), H("small", Xe, " · 已停用")) : V("v-if", !0)]), i.value.has(e.menu.id) && X(n)?.openMenu ? (q(), B(X(S), {
+			key: 0,
+			type: "link",
+			onClick: (t) => X(n).openMenu(i.value.get(e.menu.id))
+		}, {
+			default: Q(() => [...t[1] ||= [U("span", null, "打开", -1)]]),
+			_: 1
+		}, 8, ["onClick"])) : V("v-if", !0)]))), 128))]));
+	}
+}), [["__scopeId", "data-v-ff7756d2"]]), Qe = Ie, $e = ue, et = {
+	id: "platform-module-workspace-actions",
+	target: { moduleAlias: "platform.module" },
+	workspaceViews: [$e, Qe],
+	detail: {
+		sections: [{
+			key: "module-menu-entries",
+			title: "菜单入口",
+			component: Ze
+		}],
+		actions: [
+			{
+				key: "module-add-to-menu",
+				title: "添加到菜单",
+				state: (e) => ({ visible: rt(e) !== void 0 }),
+				run({ openDrawer: e }) {
+					e({
+						title: "添加到菜单",
+						width: "narrow",
+						component: Ge
+					});
+				}
+			},
+			{
+				key: "module-actions-workspace",
+				title: "动作",
+				state: (e) => ({ visible: rt(e) !== void 0 }),
+				run({ record: e, openWorkspaceTab: t }) {
+					let n = rt(e);
+					n && t(Qe, {
+						moduleAlias: n,
+						moduleTitle: it(e),
+						moduleKind: at(e)
+					});
+				}
+			},
+			{
+				key: "module-ui-orchestration-workspace",
+				title: "低代码",
+				state: (e) => ({ visible: rt(e) !== void 0 && at(e) === "dynamic" }),
+				run({ record: e, openWorkspaceTab: t }) {
+					let n = rt(e);
+					n && at(e) === "dynamic" && t($e, {
+						moduleAlias: n,
+						moduleTitle: it(e),
+						governanceTab: "overview"
+					});
+				}
+			}
+		]
+	}
+}, tt = {
+	id: "dictionary-category-tree-parent-policy",
+	target: { moduleAlias: "platform.dictionary_category" },
+	navigator: { treeParentPolicy: {
+		canUseAsParent: (e) => e.categoryKind === "folder",
+		rejectionMessage: "字典类目只能挂在目录下"
+	} }
+}, nt = {
+	id: "platform-module-action-entry-scope",
+	target: { moduleAlias: "platform.module_action" },
+	navigator: {
+		hidden: !0,
+		lockedEntry: {
+			navigatorKey: "module",
+			unavailableDescription: "模块上下文不可用"
+		}
+	},
+	standardActions: { disabled: ["create"] }
+};
+function rt(e) {
+	return ot(e, "alias") ?? ot(e, "id");
+}
+function it(e) {
+	return ot(e, "title");
+}
+function at(e) {
+	let t = ot(e, "moduleKind");
+	return t === "static" || t === "dynamic" ? t : void 0;
+}
+function ot(e, t) {
+	let n = e[t];
+	return typeof n == "string" && n.trim() ? n : void 0;
+}
+//#endregion
+//#region src/views/PasswordPolicyPreview.vue?vue&type=script&setup=true&lang.ts
+var st = { class: "password-policy-preview" }, ct = {
+	key: 0,
+	class: "preview-results"
+}, lt = {
+	id: "iam-password-policy-preview",
+	target: { moduleAlias: "iam.password_policy_rule" },
+	card: { assistant: {
+		component: /* @__PURE__ */ j(/* @__PURE__ */ K({
+			name: "PasswordPolicyPreview",
+			__name: "PasswordPolicyPreview",
+			props: { context: {} },
+			setup(e) {
+				let t = e, n = J("CURRENT"), r = J(""), i = J(), a = J(!1), o = J(!1), s = 0, c = z(() => g(t.context.record)), l = z(() => t.context.mode !== "view" || b(c.value?.id) !== void 0), u = z(() => [{
+					value: "CURRENT",
+					label: "本规则",
+					disabled: !l.value
+				}, {
+					value: "ALL",
+					label: "全规则"
+				}]);
+				Z(l, (e) => {
+					!e && n.value === "CURRENT" && (n.value = "ALL");
+				}, { immediate: !0 });
+				function d(e) {
+					(e !== "CURRENT" || l.value) && (e === "CURRENT" || e === "ALL") && (n.value = e);
+				}
+				Z([n, () => t.context.formSessionKey], ([e]) => {
+					e === "ALL" && f();
+				}, { immediate: !0 });
+				async function f() {
+					let e = ++s;
+					o.value = !0, a.value = !1, i.value = void 0;
+					try {
+						let n = await t.context.module.http.request({ path: "/iam.password_policy_rule/active-global-rules" });
+						if (e !== s) return;
+						i.value = Object.freeze(n.map((e) => Object.freeze({ ...e })));
+					} catch {
+						if (e !== s) return;
+						a.value = !0;
+					} finally {
+						e === s && (o.value = !1);
+					}
+				}
+				let p = z(() => {
+					let e = l.value ? c.value : void 0;
+					if (n.value === "CURRENT") return e ? [e] : [];
+					if (!i.value) return [];
+					let t = i.value.filter(S), r = b(e?.id);
+					if (r) {
+						let e = t.findIndex((e) => b(e.id) === r);
+						e >= 0 && t.splice(e, 1);
+					}
+					return e && S(e) && t.push(e), t.length > 0 ? t.sort(v) : [];
+				}), m = z(() => r.value ? p.value.map((e, t) => _(e, r.value, t)) : []), h = z(() => {
+					if (!l.value && n.value === "CURRENT") return "请选择或新建一条规则";
+					if (n.value === "ALL" && o.value) return "正在加载权威规则集";
+					if (n.value === "ALL" && a.value) return "无法加载权威规则集";
+					if (!r.value) return "输入测试密码后即时反馈";
+					if (m.value.length === 0) return "当前没有参与试算的启用规则";
+					let e = m.value.filter((e) => !e.passed).length;
+					return e === 0 ? `全部通过（${m.value.length}/${m.value.length}）` : `${e} 条规则未通过`;
+				});
+				function g(e) {
+					if (e) return e;
+				}
+				function _(e, t, n) {
+					let r = x(e.title, "未命名规则"), i = x(e.message, "未配置失败提示"), a = e.pattern;
+					if (!a?.trim()) return {
+						key: y(e, n),
+						title: r,
+						message: i,
+						passed: !1,
+						diagnostic: "正则表达式不能为空"
+					};
+					try {
+						let o = RegExp(`^(?:${a})$`).test(t);
+						return {
+							key: y(e, n),
+							title: r,
+							message: i,
+							passed: o
+						};
+					} catch {
+						return {
+							key: y(e, n),
+							title: r,
+							message: i,
+							passed: !1,
+							diagnostic: "当前浏览器不支持该正则语法；保存时仍由服务端 Java 正则校验"
+						};
+					}
+				}
+				function v(e, t) {
+					return (e.sortOrder ?? 2 ** 53 - 1) - (t.sortOrder ?? 2 ** 53 - 1) || x(e.title, "").localeCompare(x(t.title, ""));
+				}
+				function y(e, t) {
+					return b(e.id) ?? `draft:${t}`;
+				}
+				function b(e) {
+					return e?.trim() || void 0;
+				}
+				function x(e, t) {
+					return e?.trim() || t;
+				}
+				function S(e) {
+					return e.enabled !== !1 && (e.scopeType == null || e.scopeType.toLowerCase() === "global");
+				}
+				return (e, t) => (q(), H("section", st, [
+					U("header", null, [t[1] ||= U("h3", null, "密码试算", -1), U("span", { class: _e({ failed: m.value.some((e) => !e.passed) }) }, Y(h.value), 3)]),
+					G(X(O), {
+						class: "preview-scope",
+						value: n.value,
+						options: u.value,
+						size: "small",
+						"onUpdate:value": d
+					}, null, 8, ["value", "options"]),
+					G(X(A), {
+						value: r.value,
+						"onUpdate:value": t[0] ||= (e) => r.value = e,
+						type: "text",
+						autocomplete: "off",
+						placeholder: "输入测试密码",
+						"aria-label": "测试密码"
+					}, null, 8, ["value"]),
+					m.value.length ? (q(), H("ul", ct, [(q(!0), H(R, null, Se(m.value, (e) => (q(), H("li", {
+						key: e.key,
+						class: _e({
+							passed: e.passed,
+							failed: !e.passed
+						})
+					}, [U("strong", null, Y(e.title), 1), U("span", null, Y(e.diagnostic ?? (e.passed ? "通过" : e.message)), 1)], 2))), 128))])) : V("v-if", !0)
+				]));
+			}
+		}), [["__scopeId", "data-v-1ebdeb6e"]]),
+		placement: {
+			boundary: "outside",
+			position: "bottom"
+		}
+	} }
+}, ut = { class: "tenant-applications-detail" }, dt = { class: "tenant-applications-summary" }, ft = {
+	key: 0,
+	class: "tenant-applications-status"
+}, pt = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	name: "TenantApplicationsDetailSection",
+	__name: "TenantApplicationsDetailSection",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = J([]), r = J(!1), i = 0, a = J(/* @__PURE__ */ new Map()), o = z(() => n.value.map((e) => e.applicationAlias).filter((e) => typeof e == "string" && e.length > 0).map((e) => ({
+			key: e,
+			label: a.value.get(e) ? `${a.value.get(e)} · ${e}` : e
+		})));
+		Z(() => [t.context.record.id, t.context.refreshKey], () => void s(), { immediate: !0 });
+		async function s() {
+			let e = String(t.context.record.id ?? ""), o = ++i;
+			if (!e) {
+				n.value = [], a.value = /* @__PURE__ */ new Map(), r.value = !1;
+				return;
+			}
+			r.value = !0, n.value = [], a.value = /* @__PURE__ */ new Map();
+			try {
+				let [r, s] = await Promise.all([t.context.module.http.request({
+					method: "POST",
+					path: "/platform.application/query",
+					body: { page: {
+						pageNum: 1,
+						pageSize: 200
+					} }
+				}), t.context.module.http.request({
+					method: "POST",
+					path: c(e, "query"),
+					body: { page: {
+						pageNum: 1,
+						pageSize: 200
+					} }
+				})]);
+				o === i && (a.value = new Map(r.records.filter((e) => e.alias && e.title).map((e) => [e.alias, e.title])), n.value = s.records);
+			} catch (e) {
+				o === i && T(e, {
+					source: "tenant-applications-detail",
+					phase: "load"
+				});
+			} finally {
+				o === i && (r.value = !1);
+			}
+		}
+		function c(e, t) {
+			return `/iam.tenant/${encodeURIComponent(e)}/applications/${t}`;
+		}
+		return (e, t) => (q(), H("section", ut, [U("div", dt, [r.value ? (q(), H("span", ft, "正在加载…")) : (q(), B(X(E), {
+			key: 1,
+			items: o.value,
+			"max-visible": 8,
+			"empty-text": "暂无记录"
+		}, null, 8, ["items"]))])]));
+	}
+}), [["__scopeId", "data-v-2f879564"]]), mt = { class: "tenant-application-configuration" }, ht = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	name: "TenantApplicationConfigurationDrawer",
+	__name: "TenantApplicationConfigurationDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = J([]), r = J(/* @__PURE__ */ new Set()), i = J(!1), o = J(!1), s = [{
+			key: "title",
+			title: "应用名称",
+			width: 260
+		}, {
+			key: "alias",
+			title: "应用 alias",
+			width: 220
+		}], c = z(() => n.value), l = z(() => ({
+			selectedRowKeys: [...r.value],
+			preserveSelectedRowKeys: !0,
+			disabledOf: (e) => o.value || e.alias === "iam",
+			onChange: (e) => {
+				r.value = new Set(e.map(String));
+			}
+		}));
+		function u() {
+			t.context.setCloseBlocked(o.value), t.context.setTitleActions([{
+				key: "cancel",
+				label: "取消",
+				disabled: o.value,
+				run: () => {
+					o.value || t.context.close();
+				}
+			}, {
+				key: "confirm",
+				label: "确认",
+				emphasis: "primary",
+				disabled: o.value,
+				loading: o.value,
+				run: f
+			}]);
+		}
+		be(() => {
+			u(), d();
+		}), Z(o, u);
+		async function d() {
+			let e = String(t.context.record?.id ?? "");
+			if (e) {
+				i.value = !0;
+				try {
+					let [i, a] = await Promise.all([t.context.module.http.request({
+						method: "POST",
+						path: "/platform.application/query",
+						body: { page: {
+							pageNum: 1,
+							pageSize: 200
+						} }
+					}), t.context.module.http.request({
+						method: "POST",
+						path: p(e, "query"),
+						body: { page: {
+							pageNum: 1,
+							pageSize: 200
+						} }
+					})]);
+					n.value = i.records.filter((e) => e.enabled !== !1);
+					let o = new Set(n.value.map((e) => e.alias).filter(Boolean));
+					r.value = /* @__PURE__ */ new Set(["iam", ...a.records.map((e) => e.applicationAlias).filter((e) => typeof e == "string" && o.has(e))]);
+				} catch (e) {
+					T(e, {
+						source: "tenant-application-configuration",
+						phase: "load"
+					});
+				} finally {
+					i.value = !1;
+				}
+			}
+		}
+		async function f() {
+			let e = String(t.context.record?.id ?? "");
+			if (e && !o.value) {
+				o.value = !0;
+				try {
+					await t.context.module.http.request({
+						method: "POST",
+						path: p(e, "configure"),
+						body: { applicationAliases: [...r.value] }
+					}), t.context.refreshDetailExtensions(), t.context.refreshList(), t.context.close();
+				} catch (e) {
+					T(e, {
+						source: "tenant-application-configuration",
+						phase: "action"
+					});
+				} finally {
+					o.value = !1;
+				}
+			}
+		}
+		function p(e, t) {
+			return `/iam.tenant/${encodeURIComponent(e)}/applications/${t}`;
+		}
+		return (e, t) => (q(), H("section", mt, [t[0] ||= U("p", null, "勾选表示向当前租户开通应用；取消勾选将移除该租户的应用开通记录。", -1), G(X(a), {
+			columns: s,
+			rows: c.value,
+			loading: i.value,
+			pagination: !1,
+			selection: l.value,
+			"row-key": (e) => String(e.alias ?? e.id ?? ""),
+			"empty-description": "暂无可配置应用"
+		}, null, 8, [
+			"rows",
+			"loading",
+			"selection",
+			"row-key"
+		])]));
+	}
+}), [["__scopeId", "data-v-2e68af88"]]), gt = {
+	id: "iam-tenant-standard-page-enhancement",
+	target: { moduleAlias: "iam.tenant" },
+	form: {
+		contributions: [],
+		fieldPolicies: [
+			{
+				fieldName: "workbenchTitle",
+				visible: ({ draft: e }) => e.workbenchBrandMode !== "logoOnly"
+			},
+			{
+				fieldName: "workbenchSubtitle",
+				visible: ({ draft: e }) => e.workbenchBrandMode !== "logoOnly"
+			},
+			...["lightLogoAssetId", "darkLogoAssetId"].map((e) => ({
+				fieldName: e,
+				imageUploadHint: ({ draft: e }) => e.workbenchBrandMode === "logoOnly" ? "纯 Logo 模式支持横向或正方形图片（最大 512 KB）" : "Logo + 标题模式仅支持正方形图片（建议 128 × 128 px，最大 512 KB）",
+				imageUploadAdvisory: ({ draft: e }) => e.workbenchBrandMode === "logoOnly" ? void 0 : _t
+			}))
+		]
+	},
+	detail: {
+		actions: [{
+			key: "tenant-configure-applications",
+			title: "配置应用",
+			state: () => ({ visible: !0 }),
+			run({ openDrawer: e }) {
+				e({
+					title: "配置应用",
+					width: "wide",
+					component: ht
+				});
+			}
+		}],
+		sections: [{
+			key: "tenant-applications",
+			title: "已开通应用",
+			component: pt
+		}]
+	}
+};
+async function _t(e) {
+	if (!e.type.startsWith("image/") || typeof Image > "u") return "Logo + 标题模式需要可读取的正方形图片。";
+	try {
+		let { width: t, height: n } = await vt(e), r = t / n;
+		return r >= .9 && r <= 1.1 ? void 0 : `“${e.name}”为 ${t} × ${n} px；Logo + 标题模式仅允许上传正方形 Logo。`;
+	} catch {
+		return "无法读取图片尺寸，请选择正方形 PNG、JPG 或 GIF 图片。";
+	}
+}
+function vt(e) {
+	let t = URL.createObjectURL(e);
+	return new Promise((e, n) => {
+		let r = new Image();
+		r.onload = () => {
+			URL.revokeObjectURL(t), e({
+				width: r.naturalWidth,
+				height: r.naturalHeight
+			});
+		}, r.onerror = () => {
+			URL.revokeObjectURL(t), n(/* @__PURE__ */ Error("无法读取图片尺寸"));
+		}, r.src = t;
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/employee/EmployeeAccountDrawer.vue?vue&type=script&setup=true&lang.ts
+var yt = {
+	key: 1,
+	class: "employee-account-drawer"
+}, bt = { class: "employee-account-existing-picker" }, xt = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	name: "EmployeeAccountDrawer",
+	__name: "EmployeeAccountDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = J(), r = J(), i = J(""), a = J(""), o = J(!1), c = J(!1);
+		be(() => void l());
+		async function l() {
+			let e = v();
+			if (e) {
+				o.value = !0;
+				try {
+					n.value = await t.context.module.http.request({ path: `/iam.employee/${encodeURIComponent(e)}/account` });
+				} catch (e) {
+					T(e, {
+						source: "employee-account",
+						phase: "load"
+					});
+				} finally {
+					o.value = !1;
+				}
+			}
+		}
+		async function u() {
+			let e = v();
+			if (!e || c.value) return;
+			let r = i.value.trim();
+			if (!r || !a.value) {
+				w("请输入账号和初始密码。", {
+					source: "employee-account",
+					phase: "validation"
+				});
+				return;
+			}
+			c.value = !0;
+			try {
+				let i = await t.context.module.http.request({
+					method: "POST",
+					path: `/iam.employee/${encodeURIComponent(e)}/account/provision`,
+					body: {
+						username: r,
+						password: a.value
+					}
+				});
+				n.value = D(i).binding, a.value = "", t.context.refreshList();
+			} catch (e) {
+				T(e, {
+					source: "employee-account",
+					phase: "action"
+				});
+			} finally {
+				c.value = !1;
+			}
+		}
+		async function d(e) {
+			let t = e[0];
+			t && await f(t.id);
+		}
+		async function f(e) {
+			let i = v();
+			if (i && e && !c.value) {
+				c.value = !0;
+				try {
+					n.value = await t.context.module.http.request({
+						method: "POST",
+						path: `/iam.employee/${encodeURIComponent(i)}/account`,
+						body: { userId: e }
+					}), r.value = void 0, t.context.refreshList(), w("账号已绑定到当前职员。", {
+						source: "employee-account",
+						phase: "action"
+					});
+				} catch (e) {
+					T(e, {
+						source: "employee-account",
+						phase: "action"
+					});
+				} finally {
+					c.value = !1;
+				}
+			}
+		}
+		async function p(e) {
+			let n = v();
+			if (!n) return {
+				records: [],
+				total: 0
+			};
+			let r = await t.context.module.http.request({
+				method: "POST",
+				path: `/iam.employee/${encodeURIComponent(n)}/account-candidates/query`,
+				body: {
+					keyword: e.keyword,
+					page: {
+						pageNum: e.pageNum,
+						pageSize: e.pageSize
+					}
+				}
+			});
+			return {
+				records: r.records.map(g),
+				total: r.total
+			};
+		}
+		async function h(e) {
+			let n = v();
+			return !n || e.length === 0 ? [] : (await t.context.module.http.request({
+				method: "POST",
+				path: `/iam.employee/${encodeURIComponent(n)}/account-candidates/query`,
+				body: {
+					ids: e,
+					page: {
+						pageNum: 1,
+						pageSize: e.length
+					}
+				}
+			})).records.map(g);
+		}
+		function g(e) {
+			return {
+				id: e.id,
+				title: e.username ?? e.id,
+				account: e.username ?? e.id,
+				employeeName: e.employeeTitle,
+				organizationId: e.organizationId,
+				organizationName: e.organizationTitle,
+				departmentId: e.departmentId,
+				departmentName: e.departmentTitle
+			};
+		}
+		async function _() {
+			let e = v();
+			if (e && n.value && !c.value && await s({
+				title: "移除账户",
+				content: "确认移除该职员的账户？该用户账号会同步删除。",
+				okText: "移除",
+				danger: !0
+			})) {
+				c.value = !0;
+				try {
+					await t.context.module.http.request({
+						method: "POST",
+						path: `/iam.employee/${encodeURIComponent(e)}/account/delete`
+					}), n.value = void 0, t.context.refreshList();
+				} catch (e) {
+					T(e, {
+						source: "employee-account",
+						phase: "action"
+					});
+				} finally {
+					c.value = !1;
+				}
+			}
+		}
+		function v() {
+			let e = t.context.record?.id;
+			return e == null ? void 0 : String(e);
+		}
+		return (e, t) => o.value ? (q(), B(X(re), {
+			key: 0,
+			tip: "加载账号绑定"
+		})) : (q(), H("section", yt, [v() ? n.value ? (q(), H(R, { key: 1 }, [U("p", null, "当前已绑定用户：" + Y(n.value.userId ?? "-"), 1), G(X(S), {
+			danger: "",
+			"icon-name": "delete",
+			loading: c.value,
+			onClick: _
+		}, {
+			default: Q(() => [...t[3] ||= [W("移除账户", -1)]]),
+			_: 1
+		}, 8, ["loading"])], 64)) : (q(), H(R, { key: 2 }, [U("section", bt, [t[4] ||= U("p", null, "绑定已有用户账号；仅显示当前租户内启用且尚未绑定其他职员的账号。", -1), G(X(C), {
+			value: r.value,
+			disabled: c.value,
+			placeholder: "搜索并选择已有登录账号",
+			title: "选择已有登录账号",
+			"search-page": p,
+			"resolve-users": h,
+			"onUpdate:value": t[0] ||= (e) => r.value = typeof e == "string" ? e : void 0,
+			onSelect: d
+		}, null, 8, ["value", "disabled"])]), U("form", { onSubmit: De(u, ["prevent"]) }, [
+			t[8] ||= U("p", null, "也可直接创建登录账号并自动绑定到当前职员。", -1),
+			U("label", null, [t[5] ||= U("span", null, "账号", -1), G(X(A), {
+				value: i.value,
+				"onUpdate:value": t[1] ||= (e) => i.value = e,
+				disabled: c.value,
+				placeholder: "请输入登录账号"
+			}, null, 8, ["value", "disabled"])]),
+			U("label", null, [t[6] ||= U("span", null, "初始密码", -1), G(X(A), {
+				value: a.value,
+				"onUpdate:value": t[2] ||= (e) => a.value = e,
+				type: "password",
+				disabled: c.value,
+				placeholder: "请输入初始密码"
+			}, null, 8, ["value", "disabled"])]),
+			G(X(S), {
+				type: "primary",
+				"html-type": "submit",
+				"icon-name": "plus",
+				loading: c.value
+			}, {
+				default: Q(() => [...t[7] ||= [W(" 创建账号并绑定 ", -1)]]),
+				_: 1
+			}, 8, ["loading"])
+		], 32)], 64)) : (q(), B(X(m), {
+			key: 0,
+			title: "职员不存在",
+			message: "请重新打开职员档案后再设置账号。"
+		}))]));
+	}
+}), [["__scopeId", "data-v-aa8474e1"]]), St = {
+	id: "iam-employee-account-drawer",
+	target: { moduleAlias: "iam.employee" },
+	detail: { actions: [{
+		key: "employee-account",
+		title: "设置账号",
+		state: () => ({ visible: !0 }),
+		run({ module: e, record: t, openDrawer: n }) {
+			let r = t.id == null ? void 0 : String(t.id);
+			r && e.can("employeeAccounts", r) !== !1 && n({
+				title: "设置账号",
+				width: "standard",
+				component: xt
+			});
+		}
+	}] }
+}, Ct = "muyun.auth.token", wt = "muyun.auth.sessionId";
+function Tt(e) {
+	return Et() ?? jt(e);
+}
+function Et() {
+	if (!(typeof window > "u")) return jt(window.localStorage.getItem(Ct));
+}
+function Dt() {
+	if (!(typeof window > "u")) return jt(window.localStorage.getItem(wt));
+}
+function Ot(e) {
+	typeof window > "u" || window.localStorage.setItem(Ct, e);
+}
+function kt(e) {
+	if (typeof window > "u") return;
+	let t = jt(e);
+	if (t) {
+		window.localStorage.setItem(wt, t);
+		return;
+	}
+	window.localStorage.removeItem(wt);
+}
+function At() {
+	typeof window > "u" || (window.localStorage.removeItem(Ct), window.localStorage.removeItem(wt));
+}
+function jt(e) {
+	return e?.trim() || void 0;
+}
+function Mt(e, t) {
+	return !1;
+}
+//#endregion
+//#region src/platform-admin-runtime/backendHttp.ts
+function Nt(e = {}) {
+	return F({
+		baseUrl: void 0,
+		token: e.withAuth === !1 ? void 0 : Tt(void 0),
+		credentials: Pt(void 0),
+		onAuthenticationRequired: e.withAuth === !1 ? void 0 : (e, t) => Mt(e, t)
+	});
+}
+function Pt(e) {
+	return e === "include" || e === "omit" || e === "same-origin" ? e : void 0;
+}
+//#endregion
+//#region src/platform-admin-runtime/realtime.ts
+var Ft = Oe(), It = /* @__PURE__ */ new Map(), Lt = /* @__PURE__ */ new Set(), Rt, zt, Bt = 3e4;
+function Vt(e = {}) {
+	return g({
+		baseUrl: e.baseUrl ?? void 0,
+		token: e.token ?? Tt(void 0),
+		onStateChange: (t) => {
+			e.onStateChange?.(t), t === "unauthorized" && e.onUnauthorized?.();
+		}
+	});
+}
+function Ht(e = {}) {
+	if (zt) throw Error("App realtime is already connected. Disconnect the active connection before reconnecting.");
+	let n = Vt(e);
+	Rt = n;
+	let r = t(n, Ft), i = v(n, (t) => {
+		e.onUserNotification?.(t);
+	}), a = ne(n, (t) => {
+		e.onBusinessNotification?.(t);
+	}), o = p(n, (e) => {
+		for (let t of Lt) t(e);
+	}), s = Wt(n);
+	s.start(), Jt(n), n.connect();
+	let c = !1, l = { async disconnect() {
+		c || (c = !0, r.unsubscribe(), i.unsubscribe(), a.unsubscribe(), o.unsubscribe(), s.stop(), Yt(), zt === l && (zt = void 0), Rt === n && (Rt = void 0), await n.disconnect());
+	} };
+	return zt = l, l;
+}
+async function Ut() {
+	await zt?.disconnect();
+}
+function Wt(e) {
+	let t = 0, n = [
+		"pointermove",
+		"pointerdown",
+		"keydown",
+		"scroll"
+	], r = () => a(!1), i = () => {
+		document.visibilityState === "visible" && a(!0);
+	};
+	return {
+		start() {
+			if (!(typeof window > "u" || typeof document > "u")) {
+				for (let e of n) window.addEventListener(e, r, { passive: !0 });
+				document.addEventListener("visibilitychange", i);
+			}
+		},
+		stop() {
+			if (!(typeof window > "u" || typeof document > "u")) {
+				for (let e of n) window.removeEventListener(e, r);
+				document.removeEventListener("visibilitychange", i);
+			}
+		}
+	};
+	function a(n) {
+		if (e.state() !== "connected") return;
+		let r = Date.now();
+		if (!(!n && r - t < Bt)) {
+			t = r;
+			try {
+				e.publish(k, { timestamp: new Date(r).toISOString() });
+			} catch {}
+		}
+	}
+}
+function Gt(e) {
+	let t = e.trim();
+	if (!t) throw Error("Module data change subscription requires a moduleAlias");
+	let n = It.get(t) ?? {
+		moduleAlias: t,
+		references: 0
+	};
+	return n.references += 1, It.set(t, n), !n.active && Rt && (n.active = Xt(Rt, t)), { unsubscribe() {
+		--n.references, !(n.references > 0) && (n.active?.unsubscribe(), n.active = void 0, It.delete(t));
+	} };
+}
+function Kt(e) {
+	return Ft.subscribe(e);
+}
+function qt(e) {
+	return Lt.add(e), { unsubscribe() {
+		Lt.delete(e);
+	} };
+}
+function Jt(e) {
+	for (let t of It.values()) t.active?.unsubscribe(), t.active = Xt(e, t.moduleAlias);
+}
+function Yt() {
+	for (let e of It.values()) e.active?.unsubscribe(), e.active = void 0;
+}
+function Xt(e, t) {
+	return e.subscribe(ee(t), (e) => {
+		Ft.dispatch(e);
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/user/userOnlineStatusStore.ts
+var Zt = "iam.user.session.collectionChanged", Qt = J({}), $t = /* @__PURE__ */ new Set(), en = !1, tn = !1;
+function nn() {
+	rn();
+	function e(e) {
+		e && !Qt.value[e] && ($t.add(e), an());
+	}
+	function t(e) {
+		return e ? Qt.value[e] : void 0;
+	}
+	function n(e) {
+		e && ($t.add(e), an());
+	}
+	return {
+		observe: e,
+		statusOf: t,
+		refresh: n
+	};
+}
+function rn() {
+	tn || (tn = !0, qt((e) => {
+		sn(e) && ($t.add(e.recordId), an());
+	}));
+}
+function an() {
+	en || (en = !0, queueMicrotask(() => {
+		en = !1, on();
+	}));
+}
+async function on() {
+	let e = Array.from($t);
+	if ($t.clear(), e.length !== 0) try {
+		let t = await Nt().request({
+			method: "POST",
+			path: "/iam.user/sessions/status",
+			body: { userIds: e }
+		});
+		Qt.value = {
+			...Qt.value,
+			...Object.fromEntries(t.map((e) => [e.userId, e]))
+		};
+	} catch (e) {
+		T(e, {
+			source: "iam-user-online-status",
+			phase: "load"
+		});
+	}
+}
+function sn(e) {
+	return e.type === Zt && e.moduleAlias === "iam.user" && !!e.recordId;
+}
+//#endregion
+//#region src/platform-admin-runtime/user/UserOnlineStatusCell.vue
+var cn = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	name: "UserOnlineStatusCell",
+	__name: "UserOnlineStatusCell",
+	props: {
+		record: {},
+		column: {}
+	},
+	setup(e) {
+		let t = e, n = nn(), r = z(() => t.record.id == null ? void 0 : String(t.record.id)), i = z(() => n.statusOf(r.value)), a = z(() => {
+			let e = i.value;
+			if (!e) return "-";
+			if (e.present) {
+				let t = e.presentSessionCount ?? 0, n = e.idleSessionCount ?? 0;
+				return n >= t ? `闲置 (${t}/${e.activeSessionCount})` : `使用中 (${Math.max(0, t - n)}/${e.activeSessionCount})`;
+			}
+			return e.online ? `在线 (${e.activeSessionCount})` : "离线";
+		});
+		function o() {
+			n.observe(r.value);
+		}
+		return be(o), Z(r, o), (e, t) => (q(), H("span", { class: _e({
+			"user-online-status--present": i.value?.present,
+			"user-online-status--offline": i.value && !i.value.online
+		}) }, Y(a.value), 3));
+	}
+}), [["__scopeId", "data-v-789ddd4a"]]), ln = {
+	key: 1,
+	class: "user-password-drawer"
+}, un = { key: 0 }, dn = {
+	key: 1,
+	class: "user-password-reset"
+}, fn = { key: 0 }, pn = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	name: "UserPasswordDrawer",
+	__name: "UserPasswordDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = J(""), r = J(), i = J(!1), a = z(() => t.context.record?.id == null ? void 0 : String(t.context.record.id));
+		async function o() {
+			let e = a.value;
+			if (e && !i.value && t.context.module.can("changePassword", e) === !0) {
+				if (!n.value) {
+					w("请输入新密码。", {
+						source: "iam-user-password",
+						phase: "validation"
+					});
+					return;
+				}
+				i.value = !0, t.context.setCloseBlocked(!0);
+				try {
+					await t.context.module.http.request({
+						method: "POST",
+						path: `/iam.user/changePassword/${encodeURIComponent(e)}`,
+						body: { password: n.value }
+					}), n.value = "", w("密码已修改。", {
+						source: "iam-user-password",
+						phase: "action"
+					}), t.context.refreshList(), t.context.refreshDetailExtensions();
+				} catch (e) {
+					T(e, {
+						source: "iam-user-password",
+						phase: "action"
+					});
+				} finally {
+					t.context.setCloseBlocked(!1), i.value = !1;
+				}
+			}
+		}
+		async function s() {
+			let e = a.value;
+			if (e && !i.value && t.context.module.can("resetPassword", e) === !0) {
+				i.value = !0, t.context.setCloseBlocked(!0);
+				try {
+					r.value = await t.context.module.http.request({
+						method: "POST",
+						path: `/iam.user/resetPassword/${encodeURIComponent(e)}`
+					}), t.context.refreshList(), t.context.refreshDetailExtensions();
+				} catch (e) {
+					T(e, {
+						source: "iam-user-password",
+						phase: "action"
+					});
+				} finally {
+					t.context.setCloseBlocked(!1), i.value = !1;
+				}
+			}
+		}
+		return (t, c) => a.value ? (q(), H("section", ln, [e.context.module.can("changePassword", a.value) === !0 ? (q(), H("label", un, [
+			c[2] ||= U("span", null, "新密码", -1),
+			G(X(A), {
+				value: n.value,
+				"onUpdate:value": c[0] ||= (e) => n.value = e,
+				type: "password",
+				disabled: i.value,
+				placeholder: "请输入新密码"
+			}, null, 8, ["value", "disabled"]),
+			G(X(S), {
+				type: "primary",
+				loading: i.value,
+				onClick: o
+			}, {
+				default: Q(() => [...c[1] ||= [W("修改密码", -1)]]),
+				_: 1
+			}, 8, ["loading"])
+		])) : V("v-if", !0), e.context.module.can("resetPassword", a.value) === !0 ? (q(), H("section", dn, [
+			c[6] ||= U("p", null, "由系统生成临时密码。请在安全渠道交付给用户，并提醒其尽快修改。", -1),
+			G(X(S), {
+				loading: i.value,
+				onClick: s
+			}, {
+				default: Q(() => [...c[3] ||= [W("生成临时密码", -1)]]),
+				_: 1
+			}, 8, ["loading"]),
+			r.value ? (q(), H("dl", fn, [U("div", null, [c[4] ||= U("dt", null, "临时密码", -1), U("dd", null, Y(r.value.temporaryPassword), 1)]), U("div", null, [c[5] ||= U("dt", null, "失效时间", -1), U("dd", null, Y(r.value.expiresAt ?? "-"), 1)])])) : V("v-if", !0)
+		])) : V("v-if", !0)])) : (q(), B(X(m), {
+			key: 0,
+			title: "用户不存在",
+			message: "请重新打开用户详情后再管理密码。"
+		}));
+	}
+}), [["__scopeId", "data-v-f6125048"]]);
+//#endregion
+//#region src/platform-admin-runtime/pageRealtime.ts
+function mn(e) {
+	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Map(), r, i = 0, a = !0;
+	function o(n) {
+		if (!a) return;
+		let i = Array.isArray(n) ? n : [n];
+		for (let e of i) e && t.add(e);
+		t.size === 0 || r || (r = setTimeout(s, e.delay ?? 0));
+	}
+	function s() {
+		if (r = void 0, !a || t.size === 0) return;
+		let o = Array.from(t);
+		t.clear(), i += 1;
+		let s = i;
+		o.forEach((e) => n.set(e, s)), e.load({
+			keys: o,
+			isLatest: (e) => a && n.get(e) === s,
+			active: () => a
+		});
+	}
+	function c() {
+		a = !1, l();
+	}
+	function l() {
+		r &&= (clearTimeout(r), void 0), t.clear(), n.clear();
+	}
+	return {
+		enqueue: o,
+		reset: l,
+		dispose: c
+	};
+}
+//#endregion
+//#region src/platform-admin-runtime/user/useUserSessionRows.ts
+function hn(e) {
+	let t = J([]), n = J({}), r = mn({ load: async (e) => {
+		await Promise.all(e.keys.map((t) => a(t, e.isLatest)));
+	} });
+	function i(e) {
+		r.enqueue(e);
+	}
+	async function a(t, n) {
+		if (e.context.can("sessions", t) !== !1) {
+			u(t, {
+				...c(t),
+				loading: !0,
+				error: void 0
+			});
+			try {
+				await e.context.recordActions(t);
+				let r = await e.context.http.request({
+					method: "GET",
+					path: `/iam.user/${encodeURIComponent(t)}/sessions`
+				});
+				n(t) && u(t, {
+					records: r,
+					loading: !1
+				});
+			} catch (r) {
+				if (!n(t)) return;
+				let i = T(r, {
+					source: `${e.source}-sessions`,
+					phase: "load"
+				});
+				u(t, {
+					...c(t),
+					loading: !1,
+					error: i.message
+				});
+			}
+		}
+	}
+	function o(e, n) {
+		let r = String(e.id ?? "");
+		r && (t.value = n ? Array.from(/* @__PURE__ */ new Set([...t.value, r])) : t.value.filter((e) => e !== r), n && c(r).records.length === 0 && i(r));
+	}
+	function s(e) {
+		if (e.type !== "iam.user.session.collectionChanged" || e.moduleAlias !== "iam.user") return;
+		let n = String(e.recordId ?? "");
+		n && t.value.includes(n) && i(n);
+	}
+	function c(e) {
+		return e ? n.value[e] ?? {
+			records: [],
+			loading: !1
+		} : {
+			records: [],
+			loading: !1
+		};
+	}
+	function l() {
+		r.reset(), t.value = [], n.value = {};
+	}
+	function u(e, t) {
+		n.value = {
+			...n.value,
+			[e]: t
+		};
+	}
+	return {
+		handleUserRowExpand: o,
+		handleUserSessionBusinessEvent: s,
+		loadUserSessions: i,
+		reset: l,
+		userSessionState: c
+	};
+}
+//#endregion
+//#region src/platform-admin-runtime/userModulePageEnhancement.ts
+var gn = {
+	id: "iam-user-standard-page-enhancement",
+	target: { moduleAlias: "iam.user" },
+	navigator: { emptyListScope: ({ currentUser: e, selectedNavigatorRecords: t }) => {
+		if (!(e?.system !== !0 || Object.values(t).some(Boolean))) return [{
+			fieldName: "tenantId",
+			operator: "NULL",
+			values: []
+		}];
+	} },
+	list: {
+		rowExpansion: {
+			key: "iam-user-sessions",
+			component: /* @__PURE__ */ K({
+				name: "UserSessionListExpansion",
+				__name: "UserSessionListExpansion",
+				props: { context: {} },
+				setup(e) {
+					let t = e, r = z(() => t.context.record.id == null ? void 0 : String(t.context.record.id)), i = hn({
+						context: t.context.module,
+						source: "iam-user-list-expansion"
+					}), a = z(() => i.userSessionState(r.value)), o = z(() => a.value.records.filter((e) => !e.current && t.context.module.can("revokeSession", r.value) === !0)), c = z(() => o.value.length > 1 && t.context.module.can("revokeSessions", r.value) === !0);
+					Z([r, () => t.context.expanded], ([e, t]) => {
+						e && i.handleUserRowExpand({ id: e }, t);
+					}, { immediate: !0 });
+					let l = qt((e) => i.handleUserSessionBusinessEvent(e));
+					xe(() => {
+						l.unsubscribe(), i.reset();
+					});
+					async function u(e) {
+						let n = r.value;
+						n && !e.current && t.context.module.can("revokeSession", n) === !0 && await s({
+							title: "下线登录会话",
+							content: "确认下线该登录会话？",
+							okText: "下线",
+							danger: !0
+						}) && (await t.context.module.http.request({
+							method: "POST",
+							path: `/iam.user/${encodeURIComponent(n)}/sessions/${encodeURIComponent(e.id)}/revoke`
+						}), i.loadUserSessions(n));
+					}
+					async function d() {
+						let e = r.value, n = o.value.map((e) => e.id);
+						e && n.length !== 0 && t.context.module.can("revokeSessions", e) === !0 && await s({
+							title: "全部下线",
+							content: `确认下线该用户的 ${n.length} 个登录会话？`,
+							okText: "全部下线",
+							danger: !0
+						}) && (await t.context.module.http.request({
+							method: "POST",
+							path: `/iam.user/${encodeURIComponent(e)}/sessions/revoke`,
+							body: { sessionIds: n }
+						}), i.loadUserSessions(e));
+					}
+					return (t, o) => (q(), B(X(n), {
+						embedded: "",
+						sessions: a.value.records,
+						loading: a.value.loading,
+						error: a.value.error,
+						"can-revoke": (t) => !t.current && e.context.module.can("revokeSession", r.value) === !0,
+						"can-revoke-all": c.value,
+						onRefresh: o[0] ||= (e) => X(i).loadUserSessions(r.value),
+						onRevoke: u,
+						onRevokeAll: d
+					}, null, 8, [
+						"sessions",
+						"loading",
+						"error",
+						"can-revoke",
+						"can-revoke-all"
+					]));
+				}
+			})
+		},
+		columns: [{
+			key: "onlineStatus",
+			title: "在线状态",
+			width: "112px",
+			align: "center",
+			before: "enabled",
+			cell: cn
+		}]
+	},
+	detail: { actions: [{
+		key: "iam-user-password",
+		actionCode: "changePassword",
+		title: "密码管理",
+		iconName: "lock",
+		state: (e) => ({ visible: e.id != null }),
+		run({ openDrawer: e }) {
+			e({
+				title: "密码管理",
+				width: "narrow",
+				component: pn
+			});
+		}
+	}] }
+}, _n = "/iam.role/scope-selection/descriptor", vn = "/iam.role/scope-selection/candidates";
+function yn(e) {
+	return {
+		async descriptor() {
+			return bn(await e.request({ path: _n }));
+		},
+		async candidates(t) {
+			let n = Nn(t.pageNum) ?? 1, r = Nn(t.pageSize) ?? 100;
+			return xn(await e.request({
+				method: "POST",
+				path: vn,
+				body: {
+					navigationKey: An(t.navigationKey, "navigationKey"),
+					level: t.level,
+					keyword: kn(t.keyword),
+					parentId: kn(t.parentId),
+					page: {
+						pageNum: n,
+						pageSize: r
+					}
+				}
+			}), n);
+		}
+	};
+}
+function bn(e) {
+	let t = En(e);
+	return {
+		directSelections: Dn(t.directSelections).flatMap(Sn),
+		navigations: Dn(t.navigations).flatMap(Cn)
+	};
+}
+function xn(e, t) {
+	let n = En(e), r = Dn(n.records).flatMap(wn), i = Mn(n.pageNum) ?? t, a = Mn(n.pages), o = jn(n.totalKnown, !0) && a != null ? i < a : r.length > 0;
+	return {
+		records: r,
+		hasMore: o,
+		...o ? { nextPage: i + 1 } : {}
+	};
+}
+function Sn(e) {
+	let t = En(e), n = On(t.selectionKey);
+	return n ? [{
+		selectionKey: n,
+		label: On(t.title ?? t.label) ?? n
+	}] : [];
+}
+function Cn(e) {
+	let t = En(e), n = On(t.navigationKey), r = Tn(t.level);
+	return !n || !r ? [] : [{
+		navigationKey: n,
+		level: r,
+		label: On(t.title ?? t.label) ?? n
+	}];
+}
+function wn(e) {
+	let t = En(e), n = On(t.id), r = On(t.selectionKey);
+	return !n || !r ? [] : [{
+		id: n,
+		selectionKey: r,
+		label: On(t.title ?? t.label) ?? r,
+		...On(t.subtitle ?? t.secondaryLabel) ? { secondaryLabel: On(t.subtitle ?? t.secondaryLabel) } : {},
+		expandable: jn(t.expandable, !1)
+	}];
+}
+function Tn(e) {
+	return e === "TENANT" || e === "ORGANIZATION" ? e : void 0;
+}
+function En(e) {
+	return e && typeof e == "object" && !Array.isArray(e) ? e : {};
+}
+function Dn(e) {
+	return Array.isArray(e) ? e : [];
+}
+function On(e) {
+	return typeof e == "string" ? kn(e) : void 0;
+}
+function kn(e) {
+	return e?.trim() || void 0;
+}
+function An(e, t) {
+	let n = kn(e);
+	if (!n) throw Error(`角色归属范围${t}不能为空`);
+	return n;
+}
+function jn(e, t) {
+	return typeof e == "boolean" ? e : t;
+}
+function Mn(e) {
+	return typeof e == "number" && Number.isInteger(e) && e > 0 ? e : void 0;
+}
+function Nn(e) {
+	return typeof e == "number" && Number.isInteger(e) && e > 0 ? e : void 0;
+}
+//#endregion
+//#region src/platform-admin-runtime/role/RoleScopeTree.vue
+var Pn = /* @__PURE__ */ K({
+	name: "RoleScopeTree",
+	__name: "RoleScopeTree",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = yn(Nt()), r = J(), a = J(""), s = J(!1), c = J([]), l = J([]), u = J(0), d = J(/* @__PURE__ */ new Map()), f = z(() => t.context.selectionKey), p = z(() => r.value?.navigations.some((e) => e.level === "TENANT") === !0), m = z(() => r.value?.navigations.length !== 0), h = z(() => p.value ? "租户" : "机构"), g = i({
+			nodes: () => c.value,
+			loader: () => A,
+			version: () => u.value
+		}), _ = g.nodes, v = g.states, b = 0, x;
+		be(() => void S()), ye(() => {
+			b += 1, x && clearTimeout(x);
+		}), Z(a, () => {
+			m.value && (x && clearTimeout(x), x = setTimeout(() => void w(), 240));
+		});
+		async function S() {
+			s.value = !0;
+			try {
+				r.value = await n.descriptor();
+				let e = r.value.directSelections[0];
+				!t.context.selectionKey && e && M({
+					key: e.selectionKey,
+					label: e.label
+				}), await C();
+			} catch (e) {
+				T(e, {
+					source: "role-scope-tree",
+					phase: "load"
+				});
+			} finally {
+				s.value = !1;
+			}
+		}
+		async function C(e = {}) {
+			let t = r.value;
+			if (!t) return;
+			let n = ++b;
+			if (!e.append) {
+				l.value = [], u.value += 1, s.value = !0;
+				try {
+					let e = E(t);
+					if (n !== b) return;
+					d.value = /* @__PURE__ */ new Map(), j(e), c.value = e.map((e) => e.ui);
+				} catch (e) {
+					if (n !== b) return;
+					c.value = [], T(e, {
+						source: "role-scope-tree",
+						phase: "load"
+					});
+				} finally {
+					n === b && (s.value = !1);
+				}
+			}
+		}
+		async function w() {
+			if (await C(), !a.value.trim()) return;
+			let e = (r.value?.navigations ?? []).map((e) => `navigation:${e.navigationKey}`);
+			l.value = e, await ge(), await Promise.all(e.map((e) => g.request(e, "refresh")));
+		}
+		function E(e) {
+			return [
+				...e.directSelections.map((e) => ({
+					ui: {
+						key: e.selectionKey,
+						title: e.label,
+						isLeaf: !0
+					},
+					selection: {
+						key: e.selectionKey,
+						label: e.label
+					}
+				})),
+				...e.navigations.filter((e) => e.level === "ORGANIZATION").map((e) => D(e)),
+				...e.navigations.filter((e) => e.level === "TENANT").map((e) => D(e))
+			];
+		}
+		function D(e) {
+			return {
+				ui: {
+					key: `navigation:${e.navigationKey}`,
+					title: e.label,
+					isLeaf: !1
+				},
+				children: {
+					navigationKey: e.navigationKey,
+					level: e.level
+				}
+			};
+		}
+		function O(e, t, n) {
+			let r = k(e, t, n);
+			return {
+				ui: {
+					key: e.selectionKey,
+					title: e.label,
+					secondary: e.secondaryLabel,
+					isLeaf: !r
+				},
+				selection: {
+					key: e.selectionKey,
+					label: e.label,
+					secondaryLabel: e.secondaryLabel
+				},
+				children: r
+			};
+		}
+		function k(e, t, n) {
+			return t === "TENANT" ? {
+				navigationKey: e.selectionKey,
+				level: "ORGANIZATION"
+			} : e.expandable ? {
+				navigationKey: n,
+				level: "ORGANIZATION",
+				parentId: e.id
+			} : void 0;
+		}
+		async function A(e, t) {
+			let r = d.value.get(e.key);
+			if (!r?.children) throw Error("角色归属范围已失效");
+			try {
+				let e = await n.candidates({
+					...r.children,
+					keyword: a.value.trim() || void 0,
+					pageNum: t.reason === "load-more" ? Number(t.cursor) : 1
+				});
+				t.signal.throwIfAborted();
+				let i = e.records.map((e) => O(e, r.children.level, r.children.navigationKey));
+				return j(i), {
+					mode: t.reason === "load-more" ? "append" : "replace",
+					nodes: i.map((e) => e.ui),
+					hasMore: e.hasMore,
+					nextCursor: e.nextPage == null ? void 0 : String(e.nextPage)
+				};
+			} catch (e) {
+				throw t.signal.aborted || T(e, {
+					source: "role-scope-tree",
+					phase: "load"
+				}), e;
+			}
+		}
+		function j(e) {
+			let t = new Map(d.value);
+			e.forEach((e) => t.set(e.ui.key, e)), d.value = t;
+		}
+		function ee(e) {
+			let t = d.value.get(e.key)?.selection;
+			t && M(t);
+		}
+		function M(e) {
+			t.context.selectSelectionKey(e.key, {
+				label: e.label,
+				secondaryLabel: e.secondaryLabel
+			});
+		}
+		function N() {
+			let e = r.value?.directSelections[0];
+			e && M({
+				key: e.selectionKey,
+				label: e.label
+			});
+		}
+		return (e, t) => (q(), B(X(o), {
+			class: "role-scope-tree",
+			title: h.value,
+			"refresh-title": "刷新角色归属范围",
+			"search-keyword": a.value,
+			"search-placeholder": "搜索名称、编码或标识",
+			searchable: m.value,
+			onRefresh: C,
+			"onUpdate:searchKeyword": t[3] ||= (e) => a.value = e
+		}, {
+			default: Q(() => [s.value ? (q(), B(X(re), {
+				key: 0,
+				tip: "加载角色归属范围"
+			})) : (q(), B(X(y), {
+				key: 1,
+				"expanded-keys": l.value,
+				"onUpdate:expandedKeys": t[0] ||= (e) => l.value = e,
+				nodes: X(_),
+				"selected-key": f.value,
+				"reload-key": u.value,
+				"load-strategy": "controlled",
+				"reload-on-reexpand": "",
+				"branch-states": X(v),
+				onLoadRequest: t[1] ||= (e) => X(g).request(e.node.key, e.reason, X(g).stateOf(e.node.key).status === "error"),
+				onSelect: ee,
+				onDeselect: N,
+				onUnloadChildren: t[2] ||= (e) => X(g).release(e.key)
+			}, null, 8, [
+				"expanded-keys",
+				"nodes",
+				"selected-key",
+				"reload-key",
+				"branch-states"
+			]))]),
+			_: 1
+		}, 8, [
+			"title",
+			"search-keyword",
+			"searchable"
+		]));
+	}
+}), Fn = /* @__PURE__ */ K({
+	name: "RoleEnumTitleCell",
+	__name: "RoleEnumTitleCell",
+	props: {
+		record: {},
+		column: {}
+	},
+	setup(e) {
+		let t = e, n = z(() => {
+			let e = String(t.record[t.column?.key ?? ""] ?? "");
+			return {
+				account: "账号角色",
+				employment: "任职角色",
+				standard: "标准角色",
+				group: "角色组",
+				dataGrant: "数据授权角色",
+				system: "系统角色",
+				private: "私有",
+				ownerAndChildren: "本级及下级",
+				tenant: "租户公开",
+				platform: "全局公开"
+			}[e] ?? (e || "-");
+		});
+		return (e, t) => (q(), H("span", null, Y(n.value), 1));
+	}
+});
+//#endregion
+//#region src/views/roleGrantClient.ts
+function In(e) {
+	return {
+		accountRoleGrants(t, n) {
+			return e.request({
+				path: `/iam.role/${encodeURIComponent(t)}/account-grants`,
+				query: n ? { targetTenantId: n } : void 0
+			});
+		},
+		grantAccountRole(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/account-grants`,
+				body: n
+			});
+		},
+		deleteAccountRoleGrant(t, n, r) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/account-grants/${encodeURIComponent(n)}/delete`,
+				query: r ? { targetTenantId: r } : void 0
+			});
+		},
+		accountRoleCandidates(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/account-role-candidates/query`,
+				body: n
+			});
+		},
+		employmentRoleGrants(t) {
+			return e.request({ path: `/iam.role/${encodeURIComponent(t)}/employment-grants` });
+		},
+		grantEmploymentRole(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/employment-grants`,
+				body: { employeePositionId: n }
+			});
+		},
+		deleteEmploymentRoleGrant(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/employment-grants/${encodeURIComponent(n)}/delete`
+			});
+		},
+		employmentSelector(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/employment-selector/query`,
+				body: n
+			});
+		},
+		authorizationModules(t) {
+			return e.request({ path: `/iam.role/authorizationModules/${encodeURIComponent(t)}` });
+		},
+		permissionMatrix(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/permissionMatrix/${encodeURIComponent(t)}`,
+				body: { moduleAliases: n }
+			});
+		},
+		grantAction(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/grant/${encodeURIComponent(t)}`,
+				body: n
+			});
+		},
+		revokeAction(t, n, r) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/revoke/${encodeURIComponent(t)}`,
+				body: {
+					moduleAlias: n,
+					actionCode: r
+				}
+			});
+		},
+		replacePermissionMatrix(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/permissionMatrix/${encodeURIComponent(t)}/replace`,
+				body: { actions: n }
+			});
+		},
+		dataGrantActionMatrix(t) {
+			return e.request({ path: `/iam.role/dataGrantActionMatrix/${encodeURIComponent(t)}` });
+		},
+		dataScopePolicyCatalog(t, n) {
+			return e.request({
+				path: `/iam.role/dataScopePolicyCatalog/${encodeURIComponent(t)}`,
+				query: n ? { moduleAlias: n } : void 0
+			});
+		},
+		replaceDataGrantActions(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/dataGrantActions/${encodeURIComponent(t)}`,
+				body: { actions: n }
+			});
+		}
+	};
+}
+//#endregion
+//#region src/views/RoleAccountGrantDrawer.vue?vue&type=script&setup=true&lang.ts
+var Ln = {
+	key: 1,
+	class: "role-account-grant-drawer-state"
+}, Rn = {
+	key: 0,
+	class: "role-account-grant-target-tenant"
+}, zn = {
+	key: 1,
+	class: "role-account-grant-target-hint"
+}, Bn = { class: "role-account-grant-search" }, Vn = {
+	key: 0,
+	class: "role-account-grant-selected"
+}, Hn = { class: "role-account-grant-selected-title" }, Un = { class: "role-account-grant-selected-list" }, Wn = ["disabled", "onClick"], Gn = 20, Kn = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	name: "RoleAccountGrantDrawer",
+	__name: "RoleAccountGrantDrawer",
+	props: {
+		open: { type: Boolean },
+		container: {},
+		embedded: { type: Boolean },
+		drawerContext: {},
+		context: {},
+		role: {}
+	},
+	emits: ["close", "saved"],
+	setup(e, { emit: t }) {
+		let n = e, r = t, i = J([]), a = J({}), o = J([]), s = J(/* @__PURE__ */ new Set()), c = J(/* @__PURE__ */ new Set()), d = J(""), p = J(""), h = J(1), g = J(0), _ = J(!1), v = J(!1), y = J(!1), x = J(!1), C = J(), w = z(() => In(n.context.http)), E = b({ moduleAlias: "iam.tenant" }), D = z(() => n.role?.id), O = z(() => n.role ? `绑定用户 - ${je(n.role)}` : "绑定用户"), k = z(() => n.embedded ? "section" : M), j = z(() => n.embedded ? {} : {
+			open: n.open,
+			title: O.value,
+			renderMode: n.container ? "inline" : "portal",
+			closeTitle: "关闭",
+			onClose: ve
+		}), ee = z(() => n.role?.ownerScopeType === "platform"), N = z(() => C.value?.id), P = z(() => !ee.value || !!N.value), te = z(() => E), ne = z(() => {
+			let e = /* @__PURE__ */ new Map();
+			for (let t of i.value) t.userId && e.set(t.userId, t);
+			return e;
+		}), ie = z(() => o.value.filter((e) => e.id).map((e) => ({
+			id: e.id,
+			username: ke(e),
+			employeeNo: e.employeeNo ?? "",
+			employeeTitle: e.employeeTitle ?? "",
+			organizationTitle: e.organizationTitle ?? e.organizationId ?? "",
+			departmentTitle: e.departmentTitle ?? e.departmentId ?? "",
+			boundTitle: c.value.has(e.id) ? "已绑定" : "未绑定"
+		}))), F = z(() => [...s.value].map((e) => a.value[e] ?? Oe(e))), I = z(() => [...s.value].filter((e) => !c.value.has(e))), ae = z(() => [...c.value].filter((e) => !s.value.has(e))), L = z(() => I.value.length > 0 || ae.value.length > 0), oe = {
+			rowKey: "id",
+			columns: [
+				{
+					title: "用户账号",
+					key: "username",
+					width: 140
+				},
+				{
+					title: "职员姓名",
+					key: "employeeTitle",
+					width: 120
+				},
+				{
+					title: "职员工号",
+					key: "employeeNo",
+					width: 120
+				},
+				{
+					title: "所属机构",
+					key: "organizationTitle",
+					width: 140
+				},
+				{
+					title: "所属部门",
+					key: "departmentTitle",
+					width: 140
+				},
+				{
+					title: "状态",
+					key: "boundTitle",
+					width: 90
+				}
+			]
+		}, se = z(() => ({
+			selectedRowKeys: [...s.value],
+			preserveSelectedRowKeys: !0,
+			disabledOf: () => y.value,
+			onChange: (e) => {
+				s.value = new Set(e.map((e) => String(e)));
+			}
+		})), ce = z(() => ({
+			current: h.value,
+			total: g.value,
+			pageSize: Gn,
+			showSizeChanger: !1,
+			showQuickJumper: !1,
+			onChange: (e) => void pe(e)
+		}));
+		Z(() => [n.open, n.role?.id], ([e]) => {
+			e ? de() : be();
+		}, { immediate: !0 }), Z([
+			() => n.embedded,
+			() => n.drawerContext,
+			s,
+			L,
+			P,
+			I,
+			ae,
+			y,
+			_
+		], le, { immediate: !0 }), ye(() => n.drawerContext?.setOperation(void 0));
+		function le() {
+			let e = n.drawerContext;
+			n.embedded && e && (e.setSubtitle(`角色：${je(n.role ?? {})} · ${Me(n.role)}`), e.setOperation({
+				summary: ue(),
+				actions: [{
+					key: "cancel-account-role-grants",
+					label: "取消",
+					disabled: y.value || _.value,
+					run: ve
+				}, {
+					key: "save-account-role-grants",
+					label: "确定",
+					emphasis: "primary",
+					disabled: _.value || !P.value || !L.value,
+					loading: y.value,
+					run: () => void ge()
+				}]
+			}));
+		}
+		function ue() {
+			return P.value ? L.value ? `已选 ${s.value.size} 个用户 · 新增 ${I.value.length} · 移除 ${ae.value.length}` : `已选 ${s.value.size} 个用户` : "请选择目标租户";
+		}
+		async function de() {
+			let e = D.value;
+			if (!e) {
+				be();
+				return;
+			}
+			if (!P.value) {
+				xe();
+				return;
+			}
+			_.value = !0, x.value = !1;
+			try {
+				let t = await w.value.accountRoleGrants(e, N.value);
+				i.value = t;
+				let n = new Set(t.map((e) => e.userId).filter((e) => !!e));
+				c.value = n, s.value = new Set(n), a.value = De([...t.map((e) => Oe(e.userId)).filter((e) => !!e)]), await pe(1);
+			} catch (e) {
+				x.value = !0, T(e, {
+					source: "role-account-grants",
+					phase: "load"
+				});
+			} finally {
+				_.value = !1;
+			}
+		}
+		async function pe(e) {
+			let t = D.value;
+			if (t && P.value) {
+				v.value = !0;
+				try {
+					let n = await w.value.accountRoleCandidates(t, {
+						targetTenantId: N.value,
+						keyword: p.value,
+						enabledOnly: !0,
+						page: {
+							pageNum: Math.max(0, e),
+							pageSize: Gn
+						}
+					});
+					o.value = n.records, a.value = {
+						...a.value,
+						...De(n.records)
+					}, h.value = n.pageNum, g.value = n.total;
+				} catch (e) {
+					T(e, {
+						source: "role-account-grants",
+						phase: "load"
+					});
+				} finally {
+					v.value = !1;
+				}
+			}
+		}
+		function K() {
+			p.value = d.value.trim(), pe(0);
+		}
+		function me(e, t) {
+			let n = new Set(s.value);
+			t ? n.add(e) : n.delete(e), s.value = n;
+		}
+		async function ge() {
+			let e = D.value;
+			if (e && P.value) {
+				if (!L.value) {
+					r("close");
+					return;
+				}
+				y.value = !0;
+				try {
+					for (let t of I.value) await w.value.grantAccountRole(e, {
+						userId: t,
+						targetTenantId: N.value
+					});
+					for (let t of ae.value) {
+						let n = ne.value.get(t)?.id;
+						n && await w.value.deleteAccountRoleGrant(e, n, N.value);
+					}
+					await f({
+						success: !0,
+						message: "用户绑定已保存"
+					}, {
+						source: "role-account-grants",
+						phase: "action",
+						fallbackMessage: "用户绑定已保存"
+					}), r("saved"), r("close");
+				} catch (e) {
+					T(e, {
+						source: "role-account-grants",
+						phase: "action"
+					});
+				} finally {
+					y.value = !1;
+				}
+			}
+		}
+		function ve() {
+			y.value || r("close");
+		}
+		function be() {
+			C.value = void 0, xe();
+		}
+		function xe() {
+			i.value = [], a.value = {}, o.value = [], s.value = /* @__PURE__ */ new Set(), c.value = /* @__PURE__ */ new Set(), d.value = "", p.value = "", h.value = 1, g.value = 0, _.value = !1, v.value = !1, y.value = !1, x.value = !1;
+		}
+		async function Ce(e) {
+			if (!e) {
+				C.value = void 0, xe();
+				return;
+			}
+			let t = await E.crud.view(e);
+			C.value = t ?? {
+				id: e,
+				title: e
+			}, await de();
+		}
+		function Te(e) {
+			me(e, !1);
+		}
+		function De(e) {
+			let t = {};
+			for (let n of e) n.id && (t[n.id] = n);
+			return t;
+		}
+		function Oe(e) {
+			return e ? {
+				id: e,
+				username: e
+			} : void 0;
+		}
+		function ke(e) {
+			return String(e?.username ?? e?.id ?? "未知用户");
+		}
+		function Ae(e) {
+			return e.employeeTitle && e.employeeNo ? `${e.employeeTitle} / ${e.employeeNo}` : e.employeeTitle ?? e.employeeNo ?? e.employeeId ?? e.id;
+		}
+		function je(e) {
+			return String(e.title ?? e.id ?? "角色");
+		}
+		function Me(e) {
+			return e?.ownerScopeType === "platform" ? "平台范围" : e?.ownerScopeType === "organization" ? "机构范围" : "租户范围";
+		}
+		return (t, n) => (q(), B(we(k.value), he(j.value, { class: { "role-account-grant-drawer-surface": e.embedded } }), fe({
+			default: Q(() => [_.value ? (q(), B(X(re), {
+				key: 0,
+				class: "role-account-grant-drawer-state",
+				tip: "加载用户"
+			})) : x.value ? (q(), H("div", Ln, [G(X(m), {
+				title: "用户加载失败",
+				message: "无法加载当前角色的用户绑定"
+			}), G(X(S), {
+				type: "primary",
+				"icon-name": "reload",
+				onClick: de
+			}, {
+				default: Q(() => [...n[3] ||= [W("重试", -1)]]),
+				_: 1
+			})])) : (q(), H("section", {
+				key: 2,
+				class: _e(["role-account-grant-drawer-body", { "role-account-grant-drawer-body--target-tenant": ee.value }])
+			}, [ee.value ? (q(), H("label", Rn, [n[4] ||= U("span", null, "目标租户", -1), G(X(l), {
+				context: te.value,
+				value: N.value,
+				mode: "list",
+				placeholder: "请选择角色下发的目标租户",
+				disabled: y.value || _.value,
+				"onUpdate:value": Ce
+			}, null, 8, [
+				"context",
+				"value",
+				"disabled"
+			])])) : V("v-if", !0), P.value ? (q(), H(R, { key: 2 }, [
+				U("div", Bn, [G(X(A), {
+					value: d.value,
+					"allow-clear": "",
+					disabled: y.value,
+					placeholder: "搜索用户账号",
+					"onUpdate:value": n[0] ||= (e) => d.value = e,
+					onKeydown: Ee(K, ["enter"])
+				}, null, 8, ["value", "disabled"]), G(X(S), {
+					"icon-name": "search",
+					disabled: y.value,
+					onClick: K
+				}, {
+					default: Q(() => [...n[5] ||= [W("查询", -1)]]),
+					_: 1
+				}, 8, ["disabled"])]),
+				G(X(u), {
+					class: "role-account-grant-table",
+					size: "middle",
+					contract: oe,
+					rows: ie.value,
+					loading: v.value,
+					pagination: ce.value,
+					selection: se.value,
+					"fill-height": ""
+				}, null, 8, [
+					"rows",
+					"loading",
+					"pagination",
+					"selection"
+				]),
+				F.value.length > 0 ? (q(), H("section", Vn, [U("div", Hn, [n[6] ||= U("strong", null, "已选用户", -1), U("span", null, Y(F.value.length) + " 个", 1)]), U("div", Un, [(q(!0), H(R, null, Se(F.value, (e) => (q(), H("button", {
+					key: e.id,
+					type: "button",
+					disabled: y.value,
+					onClick: (t) => Te(e.id)
+				}, [U("span", null, Y(ke(e)), 1), U("small", null, Y(Ae(e)), 1)], 8, Wn))), 128))])])) : V("v-if", !0)
+			], 64)) : (q(), H("div", zn, " 平台共享角色需要先选择目标租户，再加载可绑定账号。 "))], 2))]),
+			_: 2
+		}, [e.embedded ? void 0 : {
+			name: "operation",
+			fn: Q(() => [G(X(S), {
+				disabled: y.value || _.value,
+				onClick: ve
+			}, {
+				default: Q(() => [...n[1] ||= [W("取消", -1)]]),
+				_: 1
+			}, 8, ["disabled"]), G(X(S), {
+				type: "primary",
+				loading: y.value,
+				disabled: _.value || !L.value,
+				onClick: ge
+			}, {
+				default: Q(() => [...n[2] ||= [W(" 确定 ", -1)]]),
+				_: 1
+			}, 8, ["loading", "disabled"])]),
+			key: "0"
+		}]), 1040, ["class"]));
+	}
+}), [["__scopeId", "data-v-fc27c9ca"]]), qn = /* @__PURE__ */ K({
+	name: "RoleAccountGrantDrawerSurface",
+	__name: "RoleAccountGrantDrawerSurface",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = z(() => t.context.module), r = z(() => t.context.record);
+		return (e, i) => (q(), B(Kn, {
+			open: "",
+			embedded: "",
+			"drawer-context": t.context,
+			context: n.value,
+			role: r.value,
+			onClose: t.context.close,
+			onSaved: t.context.refreshList
+		}, null, 8, [
+			"drawer-context",
+			"context",
+			"role",
+			"onClose",
+			"onSaved"
+		]));
+	}
+}), Jn = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	name: "EmployeeEmploymentTable",
+	__name: "EmployeeEmploymentTable",
+	props: {
+		rows: {},
+		selectedIds: { default: () => /* @__PURE__ */ new Set() },
+		selectable: {
+			type: Boolean,
+			default: !1
+		},
+		disabled: {
+			type: Boolean,
+			default: !1
+		},
+		pagination: {
+			type: [Boolean, Object],
+			default: !1
+		},
+		fillHeight: {
+			type: Boolean,
+			default: !1
+		}
+	},
+	emits: ["update:selectedIds"],
+	setup(e, { emit: t }) {
+		let n = e, r = t, i = J([]), o = [
+			{
+				key: "title",
+				title: "职员",
+				width: 160
+			},
+			{
+				key: "employeeNo",
+				title: "工号",
+				width: 140
+			},
+			{
+				key: "organizationTitle",
+				title: "所属机构",
+				width: 180
+			},
+			{
+				key: "employmentCount",
+				title: "任职",
+				width: 88,
+				align: "right"
+			},
+			{
+				key: "selectedCount",
+				title: "已选",
+				width: 88,
+				align: "right"
+			}
+		], s = [
+			{
+				key: "position",
+				title: "岗位",
+				width: 160
+			},
+			{
+				key: "organization",
+				title: "机构",
+				width: 160
+			},
+			{
+				key: "department",
+				title: "部门",
+				width: 160
+			},
+			{
+				key: "primaryPosition",
+				title: "主岗位",
+				width: 88
+			}
+		], c = z(() => {
+			let e = /* @__PURE__ */ new Map();
+			for (let t of n.rows) {
+				let n = t.employeeId ?? t.id, r = e.get(n) ?? {
+					employeeId: n,
+					title: t.employeeTitle ?? n,
+					employeeNo: t.employeeNo,
+					organizationTitle: t.organizationTitle,
+					positions: []
+				};
+				r.positions.push(t), e.set(n, r);
+			}
+			return [...e.values()];
+		}), l = z(() => c.value);
+		function u(e, t) {
+			let n = t;
+			return e.key === "title" ? n.title : e.key === "employeeNo" ? n.employeeNo ?? n.employeeId : e.key === "organizationTitle" ? n.organizationTitle ?? "-" : e.key === "employmentCount" ? `${n.positions.length} 项` : e.key === "selectedCount" ? `${f(n)} 项` : "";
+		}
+		function d(e, t) {
+			let n = t;
+			return e.key === "position" ? n.positionTitle ?? n.positionId : e.key === "organization" ? n.organizationTitle ?? n.organizationId : e.key === "department" ? n.departmentTitle ?? n.departmentId : e.key === "primaryPosition" ? n.primaryPosition ? "是" : "否" : "";
+		}
+		function f(e) {
+			return e.positions.filter((e) => n.selectedIds.has(e.id)).length;
+		}
+		function p(e) {
+			if (n.selectable) return {
+				selectedRowKeys: e.positions.filter((e) => n.selectedIds.has(e.id)).map((e) => e.id),
+				preserveSelectedRowKeys: !0,
+				disabledOf: () => n.disabled,
+				onChange: (t) => m(e, t)
+			};
+		}
+		function m(e, t) {
+			let i = new Set(n.selectedIds);
+			for (let t of e.positions) i.delete(t.id);
+			for (let e of t) i.add(String(e));
+			r("update:selectedIds", i);
+		}
+		function g(e, t) {
+			let n = e.employeeId;
+			i.value = t ? Array.from(/* @__PURE__ */ new Set([...i.value, n])) : i.value.filter((e) => e !== n);
+		}
+		function _(e) {
+			let t = e.employeeId;
+			g(e, !i.value.includes(t));
+		}
+		return (t, n) => (q(), B(X(a), {
+			class: "employee-employment-table",
+			columns: o,
+			rows: l.value,
+			"row-key": "employeeId",
+			pagination: e.pagination,
+			"expanded-row-keys": i.value,
+			"clickable-rows": "",
+			"horizontal-scroll": "",
+			"fill-height": e.fillHeight,
+			onRowExpand: g,
+			onRowDblclick: _
+		}, {
+			cell: Q(({ column: e, record: t }) => [W(Y(u(e, t)), 1)]),
+			expandedRow: Q(({ record: e }) => [G(X(h), { title: "任职信息" }, {
+				default: Q(() => [G(X(a), {
+					columns: s,
+					rows: e.positions,
+					"row-key": "id",
+					pagination: !1,
+					selection: p(e),
+					"horizontal-scroll": "",
+					"row-muted": (e) => e.enabled === !1
+				}, {
+					cell: Q(({ column: e, record: t }) => [W(Y(d(e, t)), 1)]),
+					_: 1
+				}, 8, [
+					"rows",
+					"selection",
+					"row-muted"
+				])]),
+				_: 2
+			}, 1024)]),
+			_: 1
+		}, 8, [
+			"rows",
+			"pagination",
+			"expanded-row-keys",
+			"fill-height"
+		]));
+	}
+}), [["__scopeId", "data-v-21f1027e"]]), Yn = { key: 1 }, Xn = {
+	key: 2,
+	class: "role-employment-grant-body"
+}, Zn = {
+	key: 0,
+	class: "role-employment-grant-selected"
+}, Qn = { class: "role-employment-grant-selected-title" }, $n = { class: "role-employment-grant-selected-list" }, er = ["disabled", "onClick"], tr = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	name: "RoleEmploymentGrantDrawer",
+	__name: "RoleEmploymentGrantDrawer",
+	props: {
+		open: { type: Boolean },
+		container: {},
+		embedded: { type: Boolean },
+		drawerContext: {},
+		context: {},
+		role: {}
+	},
+	emits: ["close", "saved"],
+	setup(e, { emit: t }) {
+		let n = e, r = t, i = J([]), a = J([]), o = J({}), s = J(/* @__PURE__ */ new Set()), c = J(/* @__PURE__ */ new Set()), l = J(!1), u = J(!1), d = J(!1), p = J(!1), h = J(1), g = J(0), _ = J(""), v = z(() => n.role?.id), y = z(() => In(n.context.http)), b = z(() => `绑定任职 - ${n.role?.title ?? n.role?.id ?? ""}`), x = z(() => n.embedded ? "section" : M), C = z(() => n.embedded ? {} : {
+			open: n.open,
+			title: b.value,
+			renderMode: n.container ? "inline" : "portal",
+			closeTitle: "关闭",
+			onClose: () => !d.value && r("close")
+		}), w = z(() => [...s.value].filter((e) => !c.value.has(e))), E = z(() => [...c.value].filter((e) => !s.value.has(e))), D = z(() => new Map(i.value.map((e) => [e.employeePositionId, e]))), O = z(() => a.value.filter((e) => !_.value.trim() || ne(e).includes(_.value.trim()))), k = z(() => [...s.value].map((e) => o.value[e] ?? I(e))), j = z(() => ({
+			current: h.value,
+			total: g.value,
+			pageSize: 50,
+			showSizeChanger: !1,
+			showQuickJumper: !1,
+			onChange: (e) => void N(e)
+		}));
+		Z(() => [n.open, n.role?.id], ([e]) => {
+			e ? N() : te();
+		}, { immediate: !0 }), Z([
+			() => n.embedded,
+			() => n.drawerContext,
+			s,
+			w,
+			E,
+			d,
+			u
+		], ee, { immediate: !0 }), ye(() => n.drawerContext?.setOperation(void 0));
+		function ee() {
+			let e = n.drawerContext;
+			n.embedded && e && (e.setSubtitle(`角色：${n.role?.title ?? n.role?.id ?? "角色"} · ${oe(n.role)}`), e.setOperation({
+				summary: `已选 ${s.value.size} 个任职${w.value.length || E.value.length ? ` · 新增 ${w.value.length} · 移除 ${E.value.length}` : ""}`,
+				actions: [{
+					key: "cancel-employment-role-grants",
+					label: "取消",
+					disabled: d.value,
+					run: () => r("close")
+				}, {
+					key: "save-employment-role-grants",
+					label: "确定",
+					emphasis: "primary",
+					disabled: u.value || w.value.length === 0 && E.value.length === 0,
+					loading: d.value,
+					run: () => void P()
+				}]
+			}));
+		}
+		async function N(e = 1) {
+			let t = v.value;
+			if (t) {
+				u.value = !0, p.value = !1;
+				try {
+					let [n, r] = await Promise.all([y.value.employmentRoleGrants(t), y.value.employmentSelector(t, {
+						enabledOnly: !0,
+						page: {
+							pageNum: e,
+							pageSize: 50
+						}
+					})]);
+					i.value = n, c.value = new Set(n.map((e) => e.employeePositionId).filter((e) => !!e)), o.value = {
+						...o.value,
+						...F(r.records)
+					}, l.value ||= (s.value = new Set(c.value), !0), a.value = r.records, h.value = r.pageNum, g.value = r.total;
+				} catch (e) {
+					p.value = !0, T(e, {
+						source: "role-employment-grants",
+						phase: "load"
+					});
+				} finally {
+					u.value = !1;
+				}
+			}
+		}
+		async function P() {
+			let e = v.value;
+			if (e) {
+				d.value = !0;
+				try {
+					for (let t of w.value) await y.value.grantEmploymentRole(e, t);
+					for (let t of E.value) {
+						let n = D.value.get(t)?.id;
+						n && await y.value.deleteEmploymentRoleGrant(e, n);
+					}
+					await f({
+						success: !0,
+						message: "任职角色授权已保存"
+					}, {
+						source: "role-employment-grants",
+						phase: "action"
+					}), r("saved"), r("close");
+				} catch (e) {
+					T(e, {
+						source: "role-employment-grants",
+						phase: "action"
+					});
+				} finally {
+					d.value = !1;
+				}
+			}
+		}
+		function te() {
+			i.value = [], a.value = [], o.value = {}, s.value = /* @__PURE__ */ new Set(), c.value = /* @__PURE__ */ new Set(), l.value = !1, _.value = "", h.value = 1, g.value = 0, p.value = !1;
+		}
+		function ne(e) {
+			return [
+				e.employeeTitle,
+				e.employeeNo,
+				e.organizationTitle,
+				e.departmentTitle,
+				e.positionTitle
+			].filter(Boolean).join(" ");
+		}
+		function ie(e) {
+			let t = new Set(s.value);
+			t.delete(e), s.value = t;
+		}
+		function F(e) {
+			let t = {};
+			for (let n of e) n.id && (t[n.id] = n);
+			return t;
+		}
+		function I(e) {
+			return {
+				id: e,
+				positionId: e
+			};
+		}
+		function ae(e) {
+			let t = e.positionTitle ?? e.positionId ?? e.id;
+			return e.employeeTitle ? `${e.employeeTitle} · ${t}` : t;
+		}
+		function L(e) {
+			return [
+				e.employeeNo,
+				e.organizationTitle ?? e.organizationId,
+				e.departmentTitle ?? e.departmentId
+			].filter(Boolean).join(" / ") || e.id;
+		}
+		function oe(e) {
+			return e?.ownerScopeType === "platform" ? "平台范围" : e?.ownerScopeType === "organization" ? "机构范围" : "租户范围";
+		}
+		return (t, n) => (q(), B(we(x.value), he(C.value, { class: { "role-employment-grant-drawer-surface": e.embedded } }), fe({
+			default: Q(() => [u.value ? (q(), B(X(re), {
+				key: 0,
+				tip: "加载任职"
+			})) : p.value ? (q(), H("div", Yn, [G(X(m), {
+				title: "任职加载失败",
+				message: "无法加载任职授权"
+			}), G(X(S), { onClick: n[1] ||= (e) => N() }, {
+				default: Q(() => [...n[6] ||= [W("重试", -1)]]),
+				_: 1
+			})])) : (q(), H("section", Xn, [
+				G(X(A), {
+					value: _.value,
+					"onUpdate:value": n[2] ||= (e) => _.value = e,
+					"allow-clear": "",
+					placeholder: "筛选职员、工号、机构、部门或岗位"
+				}, null, 8, ["value"]),
+				G(Jn, {
+					"selected-ids": s.value,
+					"onUpdate:selectedIds": n[3] ||= (e) => s.value = e,
+					rows: O.value,
+					selectable: "",
+					disabled: d.value,
+					pagination: j.value,
+					"fill-height": ""
+				}, null, 8, [
+					"selected-ids",
+					"rows",
+					"disabled",
+					"pagination"
+				]),
+				k.value.length > 0 ? (q(), H("section", Zn, [U("div", Qn, [n[7] ||= U("strong", null, "已选任职", -1), U("span", null, Y(k.value.length) + " 个", 1)]), U("div", $n, [(q(!0), H(R, null, Se(k.value, (e) => (q(), H("button", {
+					key: e.id,
+					type: "button",
+					disabled: d.value,
+					onClick: (t) => ie(e.id)
+				}, [U("span", null, Y(ae(e)), 1), U("small", null, Y(L(e)), 1)], 8, er))), 128))])])) : V("v-if", !0)
+			]))]),
+			_: 2
+		}, [e.embedded ? void 0 : {
+			name: "operation",
+			fn: Q(() => [G(X(S), {
+				disabled: d.value,
+				onClick: n[0] ||= (e) => r("close")
+			}, {
+				default: Q(() => [...n[4] ||= [W("取消", -1)]]),
+				_: 1
+			}, 8, ["disabled"]), G(X(S), {
+				type: "primary",
+				loading: d.value,
+				disabled: u.value || w.value.length === 0 && E.value.length === 0,
+				onClick: P
+			}, {
+				default: Q(() => [...n[5] ||= [W(" 确定 ", -1)]]),
+				_: 1
+			}, 8, ["loading", "disabled"])]),
+			key: "0"
+		}]), 1040, ["class"]));
+	}
+}), [["__scopeId", "data-v-06db3659"]]), nr = /* @__PURE__ */ K({
+	name: "RoleEmploymentGrantDrawerSurface",
+	__name: "RoleEmploymentGrantDrawerSurface",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = z(() => t.context.module), r = z(() => t.context.record);
+		return (e, i) => (q(), B(tr, {
+			open: "",
+			embedded: "",
+			"drawer-context": t.context,
+			context: n.value,
+			role: r.value,
+			onClose: t.context.close,
+			onSaved: t.context.refreshList
+		}, null, 8, [
+			"drawer-context",
+			"context",
+			"role",
+			"onClose",
+			"onSaved"
+		]));
+	}
+}), rr = /* @__PURE__ */ K({
+	name: "WorkspaceViewDrawer",
+	__name: "WorkspaceViewDrawer",
+	props: {
+		open: { type: Boolean },
+		title: {},
+		container: {},
+		subtitle: { default: void 0 },
+		profile: { default: "detail" },
+		promotion: { default: void 0 },
+		dismissal: { default: void 0 },
+		beforeClose: {
+			type: Function,
+			default: void 0
+		}
+	},
+	emits: ["close"],
+	setup(e, { emit: t }) {
+		let n = e, r = t, i = z(() => n.profile === "wide-work" ? "wide" : "standard");
+		return (t, n) => (q(), B(X(M), {
+			open: e.open,
+			title: e.title,
+			"render-mode": e.container ? "inline" : "portal",
+			subtitle: e.subtitle,
+			width: i.value,
+			promotion: e.promotion,
+			dismissal: e.dismissal,
+			"before-close": e.beforeClose,
+			onClose: n[0] ||= (e) => r("close")
+		}, fe({
+			default: Q(() => [Ce(t.$slots, "default")]),
+			_: 2
+		}, [t.$slots.operation ? {
+			name: "operation",
+			fn: Q(() => [Ce(t.$slots, "operation")]),
+			key: "0"
+		} : void 0]), 1032, [
+			"open",
+			"title",
+			"render-mode",
+			"subtitle",
+			"width",
+			"promotion",
+			"dismissal",
+			"before-close"
+		]));
+	}
+});
+//#endregion
+//#region src/platform-admin-runtime/useWorkspaceViewPromotion.ts
+function ir(e) {
+	return e.hasStableIdentity && e.busy !== !0 && e.canChangeHost !== !1;
+}
+function ar(e) {
+	let t = le();
+	return z(() => {
+		let n = Te(e.input);
+		if (n && ir(Te(e.eligibility)) && t) return {
+			title: "固定为页签",
+			promote: async () => {
+				if (await e.beforePromote?.(n) === !1) {
+					e.onPromotionRejected?.();
+					return;
+				}
+				let r = t.openPage(oe(e.view, n, "tab", Te(e.title)));
+				e.onPromoted?.(r);
+			}
+		};
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/workspaceViewSessions.ts
+var or = /* @__PURE__ */ new Map(), sr = /* @__PURE__ */ new Map();
+function cr(e, t) {
+	return `${e.type}:${fr(t)}`;
+}
+async function lr(e, t, n) {
+	let r = cr(e, t), i = sr.get(r), a = i && [...i].at(-1);
+	return a ? await a(pr(n)) ? "accepted" : "rejected" : (or.set(r, pr(n)), "accepted");
+}
+function ur(e, t, n) {
+	let r = cr(e, t), i = sr.get(r) ?? /* @__PURE__ */ new Set();
+	return i.add(n), sr.set(r, i), () => {
+		i.delete(n), i.size === 0 && sr.delete(r);
+	};
+}
+function dr(e, t) {
+	let n = cr(e, t), r = or.get(n);
+	return or.delete(n), r;
+}
+function fr(e) {
+	return Array.isArray(e) ? `[${e.map(fr).join(",")}]` : e && typeof e == "object" ? `{${Object.entries(e).sort(([e], [t]) => e.localeCompare(t)).map(([e, t]) => `${JSON.stringify(e)}:${fr(t)}`).join(",")}}` : JSON.stringify(e);
+}
+function pr(e) {
+	return JSON.parse(JSON.stringify(e));
+}
+//#endregion
+//#region src/views/roleAuthorizationWorkspaceSession.ts
+function mr(e, t) {
+	return lr(Pe, e, t);
+}
+function hr(e, t) {
+	return ur(Pe, e, t);
+}
+function gr(e) {
+	return dr(Pe, e);
+}
+//#endregion
+//#region src/views/RoleAuthorizationView.vue?vue&type=script&setup=true&lang.ts
+var _r = { class: "panel-title" }, vr = {
+	key: 0,
+	class: "authorization-column-header"
+}, yr = {
+	key: 2,
+	class: "data-scope-editor"
+}, br = { key: 0 }, xr = { key: 1 }, Sr = { key: 3 }, Cr = {
+	key: 4,
+	class: "not-applicable"
+}, wr = /*@__PURE__*/ K({
+	name: "RoleAuthorizationView",
+	__name: "RoleAuthorizationView",
+	props: {
+		roleId: {},
+		moduleContext: {},
+		container: {},
+		drawer: { type: Boolean },
+		drawerContext: {}
+	},
+	emits: ["close"],
+	setup(e, { emit: t }) {
+		let n = e, r = t, i = b({ moduleAlias: "iam.role" }), l = n.moduleContext ?? i, u = In(l.http), p = n.roleId ?? new URLSearchParams(window.location.search).get("roleId") ?? "", h = se(), g = n.roleId ? { roleId: n.roleId } : void 0, v = g ? gr(g) : void 0, y = J(), C = J([]), E = J(), D = J(""), O = J([]), k = J(), A = J(), j = J(!1), ee = J(!1), M = J(!1), P = J(), ne = J(), ie = /* @__PURE__ */ new Map(), F = /* @__PURE__ */ new Map(), I = J(0), ae, L = z(() => y.value?.roleKind === "group"), oe = z(() => y.value?.roleKind === "dataGrant"), le = z(() => y.value?.assignmentType === "employment"), ue = z(() => !!n.drawerContext), de = z(() => y.value?.title ?? p ?? "角色"), pe = z(() => `授权：${de.value}`), K = z(() => he.value ? `动作授权 - ${he.value.title}` : `动作授权 - ${de.value}`), he = z(() => C.value.find((e) => e.moduleAlias === E.value)), ge = z(() => {
+			let e = D.value.trim().toLocaleLowerCase(), t = new Set(e ? C.value.filter((t) => [
+				t.title,
+				t.moduleAlias,
+				t.applicationAlias
+			].filter((e) => !!e).some((t) => t.toLocaleLowerCase().includes(e))).map((e) => e.moduleAlias) : C.value.map((e) => e.moduleAlias)), n = new Map(C.value.map((e) => [e.moduleAlias, e]));
+			for (let e of [...t]) {
+				let r = n.get(e)?.parentId;
+				for (; r && n.has(r) && !t.has(r);) t.add(r), r = n.get(r)?.parentId;
+			}
+			return C.value.filter((e) => t.has(e.moduleAlias)).map((e) => ({
+				id: e.moduleAlias,
+				parentId: e.parentId,
+				title: e.title,
+				secondary: e.applicationAlias
+			}));
+		}), xe = z(() => (A.value?.options ?? []).map((e) => ({
+			value: e.code,
+			label: e.title
+		}))), Se = z(() => (A.value?.referenceDependencies ?? []).map((e) => ({
+			value: e.referenceFieldId,
+			label: `${e.title} → ${e.targetModuleTitle}`
+		}))), Ce = z(() => new Map((A.value?.referenceDependencies ?? []).map((e) => [e.referenceFieldId, e]))), Te = z(() => le.value && O.value.some((e) => !!e.dataAuth)), Ee = z(() => [
+			{
+				key: "title",
+				title: "动作",
+				width: 160
+			},
+			{
+				key: "granted",
+				title: "授权",
+				width: 104,
+				align: "center"
+			},
+			...Te.value ? [{
+				key: "dataScopePolicy",
+				title: "数据范围",
+				width: 200
+			}] : []
+		]), De = [
+			{
+				key: "title",
+				title: "标准动作",
+				width: 130
+			},
+			{
+				key: "configured",
+				title: "启用模板",
+				width: 104,
+				align: "center"
+			},
+			{
+				key: "dataScopePolicy",
+				title: "数据范围",
+				width: 160
+			}
+		], Oe = z(() => O.value), ke = z(() => k.value?.actions ?? []), Ae = z(() => n.drawer === !0 || !!g && h?.presentation === "drawer"), je = z(() => !!g), Me = z(() => je.value && !ue.value), Ne = z(() => ue.value ? "div" : Ae.value ? rr : je.value ? d : "div"), Fe = z(() => Ae.value ? {
+			open: !0,
+			title: pe.value,
+			container: n.container ?? null,
+			profile: Pe.drawerProfile,
+			promotion: Ve.value,
+			dismissal: "guarded",
+			beforeClose: it,
+			onClose: at
+		} : Me.value ? { title: pe.value } : {}), Ie = z(() => {
+			let e = k.value;
+			return !e || ne.value === void 0 ? !1 : JSON.stringify(e.actions) !== ne.value;
+		}), Le = z(() => I.value >= 0 && [...ie.entries()].some(([e, t]) => F.get(e) !== JSON.stringify(t))), $ = z(() => Ie.value || Le.value);
+		ce("角色授权", () => $.value, () => M.value);
+		let Re = z(() => O.value.length > 0 && O.value.every((e) => e.granted)), ze = z(() => O.value.some((e) => e.granted) && !Re.value), Be = z(() => {
+			let e = he.value?.title ?? "未选择模块", t = O.value.filter((e) => e.granted).length, n = $.value ? "有未确认修改" : "未修改";
+			return `当前模块：${e} · 已授权 ${t}/${O.value.length} 项 · ${n}`;
+		}), Ve = ar({
+			view: Pe,
+			input: () => g,
+			title: pe,
+			eligibility: () => ({
+				hasStableIdentity: !!(p && y.value),
+				busy: M.value
+			}),
+			beforePromote: (e) => mr(e, {
+				selectedModuleAlias: E.value,
+				dataGrantMatrix: k.value,
+				actionDrafts: [...ie.entries()].map(([e, t]) => ({
+					moduleAlias: e,
+					actions: t
+				})),
+				actionSnapshots: [...F.entries()].map(([e, t]) => ({
+					moduleAlias: e,
+					snapshot: t
+				}))
+			}).then((e) => e === "accepted"),
+			onPromoted: ot,
+			onPromotionRejected: () => w("目标页签存在未确认的授权配置；请先确认或关闭该页签后再固定当前抽屉。", {
+				source: "role-authorization",
+				phase: "validation"
+			})
+		});
+		be(() => {
+			g && !Ae.value && (ae = hr(g, st)), Ue();
+		}), Z(pe, (e) => {
+			je.value && h?.setTitle(e);
+		}, { immediate: !0 }), Z(E, () => void We()), Z([
+			de,
+			Be,
+			$,
+			M,
+			L,
+			oe
+		], He, { immediate: !0 }), be(() => window.addEventListener("beforeunload", lt)), ye(() => {
+			ae?.(), n.drawerContext?.setOperation(void 0), n.drawerContext?.setSubtitle(void 0), window.removeEventListener("beforeunload", lt);
+		});
+		function He() {
+			let e = n.drawerContext;
+			if (e) {
+				if (e.setSubtitle(`${de.value} · ${ut(y.value)}`), L.value) {
+					e.setOperation(void 0);
+					return;
+				}
+				e.setOperation({
+					summary: oe.value ? $.value ? "有未确认修改" : "未修改" : Be.value,
+					actions: [{
+						key: "confirm-role-authorization",
+						label: "确认",
+						emphasis: "primary",
+						disabled: M.value || !$.value,
+						loading: M.value,
+						run: () => void rt()
+					}]
+				});
+			}
+		}
+		async function Ue() {
+			if (!p) {
+				P.value = "缺少角色标识，无法打开授权页。";
+				return;
+			}
+			j.value = !0, P.value = void 0;
+			try {
+				if (y.value = await l.crud.view(p), y.value.roleKind === "group") return;
+				if (y.value.roleKind === "dataGrant") {
+					let [e, t] = await Promise.all([u.dataGrantActionMatrix(p), u.dataScopePolicyCatalog(p)]);
+					k.value = v?.dataGrantMatrix ?? e, A.value = t, ne.value = JSON.stringify(e.actions);
+					return;
+				}
+				C.value = (await u.authorizationModules(p)).records, E.value = v?.selectedModuleAlias ?? C.value[0]?.moduleAlias;
+			} catch (e) {
+				P.value = "授权信息加载失败，请重试。", T(e, {
+					source: "role-authorization",
+					phase: "load"
+				});
+			} finally {
+				j.value = !1;
+			}
+		}
+		async function We() {
+			let e = E.value;
+			if (!(!e || oe.value || L.value)) {
+				ee.value = !0;
+				try {
+					let [t, n] = await Promise.all([u.permissionMatrix(p, [e]), u.dataScopePolicyCatalog(p, e)]), r = (t.modules[0]?.actions ?? []).map(et), i = v?.actionDrafts?.find((t) => t.moduleAlias === e)?.actions, a = ie.get(e) ?? i;
+					O.value = a ?? r, ie.has(e) || (ie.set(e, O.value), F.set(e, v?.actionSnapshots?.find((t) => t.moduleAlias === e)?.snapshot ?? JSON.stringify(r))), I.value += 1, A.value = n;
+				} catch (e) {
+					T(e, {
+						source: "role-authorization",
+						phase: "load"
+					});
+				} finally {
+					ee.value = !1;
+				}
+			}
+		}
+		function Ge(e, t) {
+			t && e.dataAuth && le.value && !e.dataScopePolicy && (e.dataScopePolicy = "inheritDataGrant"), t && e.dataScopePolicy === "referenceDependency" && !e.referenceFieldId && (e.dataScopePolicy = "inheritDataGrant"), e.granted = t, I.value += 1;
+		}
+		function Ke(e) {
+			O.value.forEach((t) => Ge(t, e));
+		}
+		function qe(e, t) {
+			if (e.dataScopePolicy = String(t || "none"), e.dataScopePolicy === "referenceDependency") {
+				e.referenceFieldId = void 0, e.referenceActionCode = void 0, I.value += 1;
+				return;
+			}
+			e.referenceFieldId = void 0, e.referenceActionCode = void 0, I.value += 1;
+		}
+		function Je(e, t) {
+			let n = Ce.value.get(String(t || ""));
+			e.referenceFieldId = n?.referenceFieldId, e.referenceActionCode = n?.referenceActionCode, I.value += 1;
+		}
+		function Ye(e) {
+			return Ce.value.get(String(e || ""));
+		}
+		function Xe(e) {
+			return typeof e == "string" || typeof e == "number" ? e : void 0;
+		}
+		function Ze(e) {
+			return e.dataScopePolicy ?? "inheritDataGrant";
+		}
+		function Qe(e) {
+			return !!e.dataAuth && le.value;
+		}
+		function $e(e, t) {
+			return e.key === "dataScopePolicy" && Qe(t);
+		}
+		function et(e) {
+			return le.value && e.dataAuth && e.dataScopePolicy === "none" ? {
+				...e,
+				dataScopePolicy: "inheritDataGrant"
+			} : e;
+		}
+		async function tt() {
+			if (k.value) {
+				M.value = !0;
+				try {
+					let e = await u.replaceDataGrantActions(p, k.value.actions.map((e) => ({
+						actionCode: e.actionCode,
+						dataScopePolicy: e.dataScopePolicy,
+						enabled: e.configured
+					})));
+					await f(e, {
+						source: "role-authorization",
+						phase: "action",
+						fallbackMessage: "数据权限模板已保存"
+					}), ne.value = JSON.stringify(k.value.actions);
+				} catch (e) {
+					T(e, {
+						source: "role-authorization",
+						phase: "action"
+					});
+				} finally {
+					M.value = !1;
+				}
+			}
+		}
+		async function nt() {
+			let e = [...ie.entries()].filter(([e, t]) => F.get(e) !== JSON.stringify(t));
+			if (e.length) {
+				M.value = !0;
+				try {
+					let t = await u.replacePermissionMatrix(p, e.flatMap(([e, t]) => t.map((t) => ({
+						moduleAlias: e,
+						actionCode: t.actionCode,
+						granted: !!t.granted,
+						dataScopePolicy: t.granted && t.dataAuth && le.value ? t.dataScopePolicy ?? "inheritDataGrant" : void 0,
+						referenceFieldId: t.granted && t.dataScopePolicy === "referenceDependency" ? t.referenceFieldId : void 0,
+						referenceActionCode: t.granted && t.dataScopePolicy === "referenceDependency" ? t.referenceActionCode : void 0
+					}))));
+					await f(t, {
+						source: "role-authorization",
+						phase: "action",
+						fallbackMessage: "角色授权已保存"
+					}), e.forEach(([e, t]) => F.set(e, JSON.stringify(t))), I.value += 1;
+				} catch (e) {
+					T(e, {
+						source: "role-authorization",
+						phase: "action"
+					});
+				} finally {
+					M.value = !1;
+				}
+			}
+		}
+		async function rt() {
+			if (oe.value) {
+				await tt();
+				return;
+			}
+			await nt();
+		}
+		async function it() {
+			return !$.value || s({
+				title: "放弃未确认的授权配置",
+				content: "当前修改尚未确认，关闭后将丢失这些修改。",
+				okText: "放弃修改",
+				danger: !0
+			});
+		}
+		function at() {
+			ct();
+		}
+		function ot() {
+			ct();
+		}
+		function st(e) {
+			return !$.value && (E.value = e.selectedModuleAlias, k.value = e.dataGrantMatrix, ie.clear(), F.clear(), e.actionDrafts?.forEach(({ moduleAlias: e, actions: t }) => ie.set(e, t)), e.actionSnapshots?.forEach(({ moduleAlias: e, snapshot: t }) => F.set(e, t)), I.value += 1, !0);
+		}
+		function ct() {
+			if (n.drawer === !0) {
+				r("close");
+				return;
+			}
+			h?.dismiss();
+		}
+		function lt(e) {
+			$.value && (e.preventDefault(), e.returnValue = "");
+		}
+		function ut(e) {
+			return e?.ownerScopeType === "platform" ? "平台范围" : e?.ownerScopeType === "organization" ? "机构范围" : "租户范围";
+		}
+		return (e, t) => (q(), B(we(Ne.value), ve(me(Fe.value)), fe({
+			default: Q(() => [U("section", { class: _e(["role-authorization-page", { "role-authorization-page--drawer": Ae.value || ue.value }]) }, [j.value ? (q(), B(X(re), {
+				key: 0,
+				tip: "加载授权信息"
+			})) : P.value ? (q(), B(X(m), {
+				key: 1,
+				title: "授权页加载失败",
+				message: P.value
+			}, null, 8, ["message"])) : L.value ? (q(), B(X(_), {
+				key: 2,
+				title: "角色组不独立授权",
+				description: "角色组只组合成员角色；请到成员角色分别配置动作和数据权限。"
+			})) : oe.value && k.value ? (q(), B(X(o), {
+				key: 3,
+				class: "data-grant-content",
+				title: Me.value ? "数据权限模板" : `数据权限模板 - ${de.value}`,
+				searchable: !1,
+				onRefresh: Ue
+			}, {
+				default: Q(() => [U("header", _r, [t[4] ||= U("div", null, [U("h3", null, "标准动作的数据范围模板"), U("p", null, "模板只会在具体任职的普通角色动作选择“继承数据授权角色”时生效。")], -1), je.value ? V("v-if", !0) : (q(), B(X(S), {
+					key: 0,
+					type: "primary",
+					disabled: !$.value,
+					loading: M.value,
+					onClick: rt
+				}, {
+					default: Q(() => [...t[3] ||= [W(" 确认 ", -1)]]),
+					_: 1
+				}, 8, ["disabled", "loading"]))]), G(X(a), {
+					columns: De,
+					rows: ke.value,
+					"row-key": "actionCode",
+					"horizontal-scroll": ""
+				}, {
+					cell: Q(({ column: e, record: t }) => [e.key === "title" ? (q(), H(R, { key: 0 }, [U("strong", null, Y(t.title || t.actionCode), 1), U("small", null, Y(t.actionCode), 1)], 64)) : e.key === "configured" ? (q(), B(X(c), {
+						key: 1,
+						checked: !!t.configured,
+						disabled: M.value,
+						onChange: (e) => t.configured = e
+					}, null, 8, [
+						"checked",
+						"disabled",
+						"onChange"
+					])) : (q(), B(X(N), {
+						key: 2,
+						value: t.dataScopePolicy,
+						options: xe.value,
+						disabled: !t.configured || M.value,
+						placeholder: "请选择数据范围",
+						"allow-clear": !1,
+						"onUpdate:value": (e) => t.dataScopePolicy = String(e || "")
+					}, null, 8, [
+						"value",
+						"options",
+						"disabled",
+						"onUpdate:value"
+					]))]),
+					_: 1
+				}, 8, ["rows"])]),
+				_: 1
+			}, 8, ["title"])) : (q(), H("section", {
+				key: 4,
+				class: _e(["authorization-layout", { "authorization-layout--compact-actions": !Te.value }])
+			}, [G(X(o), {
+				"search-keyword": D.value,
+				"onUpdate:searchKeyword": t[1] ||= (e) => D.value = e,
+				class: "module-panel",
+				title: "模块树",
+				"refresh-title": "刷新模块目录",
+				"search-placeholder": "搜索模块名称或别名",
+				onRefresh: Ue
+			}, {
+				default: Q(() => [G(X(te), {
+					records: ge.value,
+					"selected-id": E.value,
+					onSelect: t[0] ||= (e) => E.value = e.id
+				}, null, 8, ["records", "selected-id"])]),
+				_: 1
+			}, 8, ["search-keyword"]), G(X(o), {
+				class: "action-panel",
+				title: K.value,
+				searchable: !1
+			}, fe({
+				default: Q(() => [ee.value ? (q(), B(X(re), {
+					key: 0,
+					tip: "加载模块动作"
+				})) : E.value ? (q(), B(X(a), {
+					key: 2,
+					columns: Ee.value,
+					rows: Oe.value,
+					"row-key": "actionCode",
+					"fill-height": "",
+					"horizontal-scroll": ""
+				}, {
+					header: Q(({ column: e }) => [e.key === "granted" ? (q(), H("span", vr, [G(X(x), {
+						checked: Re.value,
+						indeterminate: ze.value,
+						disabled: M.value || !O.value.length,
+						"aria-label": "全选当前模块动作授权",
+						onChange: Ke
+					}, null, 8, [
+						"checked",
+						"indeterminate",
+						"disabled"
+					]), t[6] ||= W(" 授权 ", -1)])) : (q(), H(R, { key: 1 }, [W(Y(e.title), 1)], 64))]),
+					cell: Q(({ column: e, record: t }) => [e.key === "title" ? (q(), H(R, { key: 0 }, [U("strong", null, Y(t.title || t.actionCode), 1), U("small", null, Y(t.permissionActionCode || t.actionCode), 1)], 64)) : e.key === "granted" ? (q(), B(X(x), {
+						key: 1,
+						checked: !!t.granted,
+						disabled: M.value,
+						onChange: (e) => Ge(t, e)
+					}, null, 8, [
+						"checked",
+						"disabled",
+						"onChange"
+					])) : t.dataAuth && le.value && t.granted ? (q(), H("div", yr, [G(X(N), {
+						value: Ze(t),
+						options: xe.value,
+						disabled: M.value,
+						"allow-clear": !1,
+						"onUpdate:value": (e) => qe(t, e)
+					}, null, 8, [
+						"value",
+						"options",
+						"disabled",
+						"onUpdate:value"
+					]), t.dataScopePolicy === "referenceDependency" ? (q(), H(R, { key: 0 }, [G(X(N), {
+						value: Xe(t.referenceFieldId),
+						options: Se.value,
+						disabled: M.value,
+						placeholder: "请选择引用字段",
+						"allow-clear": !1,
+						"onUpdate:value": (e) => Je(t, e)
+					}, null, 8, [
+						"value",
+						"options",
+						"disabled",
+						"onUpdate:value"
+					]), t.referenceFieldId ? (q(), H("small", br, " 依赖目标：" + Y(Ye(t.referenceFieldId)?.targetModuleTitle) + " · " + Y(Ye(t.referenceFieldId)?.referenceActionTitle), 1)) : (q(), H("small", xr, "请先选择引用字段，再开启该动作授权。"))], 64)) : V("v-if", !0)])) : $e(e, t) ? (q(), H("span", Sr, "—")) : (q(), H("span", Cr, "不适用"))]),
+					_: 1
+				}, 8, ["columns", "rows"])) : (q(), B(X(_), {
+					key: 1,
+					title: "请选择模块"
+				}))]),
+				_: 2
+			}, [je.value ? void 0 : {
+				name: "actions",
+				fn: Q(() => [G(X(S), {
+					type: "primary",
+					disabled: !$.value,
+					loading: M.value,
+					onClick: rt
+				}, {
+					default: Q(() => [...t[5] ||= [W(" 确认 ", -1)]]),
+					_: 1
+				}, 8, ["disabled", "loading"])]),
+				key: "0"
+			}]), 1032, ["title"])], 2))], 2)]),
+			_: 2
+		}, [Me.value && !L.value ? {
+			name: "operation",
+			fn: Q(() => [G(X(S), {
+				type: "primary",
+				disabled: !$.value,
+				loading: M.value,
+				onClick: rt
+			}, {
+				default: Q(() => [...t[2] ||= [W(" 确认 ", -1)]]),
+				_: 1
+			}, 8, ["disabled", "loading"])]),
+			key: "0"
+		} : void 0]), 1040));
+	}
+}), Tr = /* @__PURE__ */ e({ default: () => Er }), Er = /*#__PURE__*/ j(wr, [["__scopeId", "data-v-ee79d1ea"]]), Dr = { class: "role-authorization-drawer-surface" }, Or = /*#__PURE__*/ j(/* @__PURE__ */ K({
+	name: "RoleAuthorizationDrawerSurface",
+	__name: "RoleAuthorizationDrawerSurface",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = t.context.module;
+		return (e, r) => (q(), H("section", Dr, [t.context.record?.id == null ? V("v-if", !0) : (q(), B(Er, {
+			key: 0,
+			"role-id": String(t.context.record.id),
+			"module-context": X(n),
+			"drawer-context": t.context
+		}, null, 8, [
+			"role-id",
+			"module-context",
+			"drawer-context"
+		]))]));
+	}
+}), [["__scopeId", "data-v-04d29709"]]), kr = {
+	key: 0,
+	class: "role-group-member-form-field"
+}, Ar = {
+	id: "iam-role-scope-and-actions",
+	target: { moduleAlias: "iam.role" },
+	navigator: {
+		bypassListScope: !0,
+		extension: {
+			key: "iam-role-scope-tree",
+			component: Pn,
+			selection: { kind: "roleScope" }
+		}
+	},
+	list: { cellComponents: [
+		{
+			key: "assignmentType",
+			cell: Fn
+		},
+		{
+			key: "roleKind",
+			cell: Fn
+		},
+		{
+			key: "sharePolicy",
+			cell: Fn
+		}
+	] },
+	form: {
+		contributions: [{
+			key: "role-group-members",
+			component: /* @__PURE__ */ j(/* @__PURE__ */ K({
+				name: "RoleGroupMemberFormField",
+				__name: "RoleGroupMemberFormField",
+				props: { context: {} },
+				setup(e) {
+					let t = e, n = J([]), r = J(!1), i = z(() => t.context.draft.roleKind === "group"), a = z(() => d(t.context.draft.memberRoleIds)), o = z(() => String(t.context.draft.id ?? "") || void 0), s = z(() => new Set(n.value.filter((e) => e.roleKind === "dataGrant" && e.id && a.value.includes(e.id)).map((e) => e.id))), c = z(() => n.value.filter((e) => e.id && e.id !== o.value).map((e) => ({
+						label: `${e.title ?? e.id} / ${e.roleKind === "dataGrant" ? "数据授权角色" : "标准角色"}`,
+						value: e.id,
+						disabled: e.roleKind === "dataGrant" && s.value.size > 0 && !a.value.includes(e.id)
+					})));
+					Z([i, () => t.context.formSessionKey], () => void l(), { immediate: !0 });
+					async function l() {
+						if (!i.value) {
+							n.value = [];
+							return;
+						}
+						r.value = !0;
+						try {
+							let e = await t.context.queryRecords({
+								page: {
+									pageNum: 1,
+									pageSize: 500
+								},
+								conditions: [
+									{
+										fieldName: "assignmentType",
+										operator: "EQ",
+										values: ["employment"]
+									},
+									{
+										fieldName: "roleKind",
+										operator: "IN",
+										values: ["standard", "dataGrant"]
+									},
+									{
+										fieldName: "enabled",
+										operator: "EQ",
+										values: [!0]
+									},
+									{
+										fieldName: "ownerScopeType",
+										operator: "EQ",
+										values: [t.context.draft.ownerScopeType]
+									},
+									...t.context.draft.ownerScopeId ? [{
+										fieldName: "ownerScopeId",
+										operator: "EQ",
+										values: [t.context.draft.ownerScopeId]
+									}] : []
+								],
+								sorts: [{ field: "sortOrder" }, { field: "title" }]
+							});
+							n.value = e.records;
+						} finally {
+							r.value = !1;
+						}
+					}
+					function u(e) {
+						let n = Array.isArray(e) ? e.map((e) => String(e).trim()).filter(Boolean) : [];
+						t.context.setField("memberRoleIds", n.length > 0 ? n.join(",") : void 0);
+					}
+					function d(e) {
+						return typeof e == "string" ? e.split(",").map((e) => e.trim()).filter(Boolean) : [];
+					}
+					return (t, n) => i.value ? (q(), H("label", kr, [n[0] ||= U("span", null, "成员角色", -1), G(X(N), {
+						mode: "multiple",
+						value: a.value,
+						options: c.value,
+						loading: r.value,
+						placeholder: "请选择成员角色",
+						disabled: e.context.mode === "view",
+						"allow-clear": "",
+						"onUpdate:value": u
+					}, null, 8, [
+						"value",
+						"options",
+						"loading",
+						"disabled"
+					])])) : V("v-if", !0);
+				}
+			}), [["__scopeId", "data-v-665f4381"]]),
+			location: {
+				surface: "record-card",
+				fieldName: "memberRoleIds",
+				placement: "after"
+			}
+		}],
+		fieldPolicies: [{
+			fieldName: "memberRoleIds",
+			visible: () => !1
+		}]
+	},
+	recordActions: [
+		{
+			key: "role-bind-account",
+			actionCode: "accountRoleGrants",
+			title: "绑定",
+			state: (e) => ({
+				visible: e.assignmentType === "account",
+				disabled: e.systemManaged === !0
+			}),
+			run({ openDrawer: e }) {
+				e({
+					title: "绑定用户",
+					width: "extraWide",
+					component: qn
+				});
+			}
+		},
+		{
+			key: "role-bind-employment",
+			actionCode: "employmentRoleGrants",
+			title: "绑定",
+			state: (e) => ({
+				visible: e.assignmentType !== "account",
+				disabled: e.systemManaged === !0
+			}),
+			run({ openDrawer: e }) {
+				e({
+					title: "绑定任职",
+					width: "extraWide",
+					component: nr
+				});
+			}
+		},
+		{
+			key: "role-authorize",
+			actionCode: "rolePermissions",
+			title: "授权",
+			state: (e) => ({
+				visible: e.roleKind !== "group",
+				disabled: e.systemManaged === !0
+			}),
+			run({ openDrawer: e }) {
+				e({
+					title: "角色授权",
+					width: "wide",
+					component: Or
+				});
+			}
+		}
+	]
+};
+I("platform-admin-runtime", Fe), ae("platform-admin-runtime", [
+	et,
+	tt,
+	nt,
+	lt,
+	gt,
+	St,
+	gn,
+	Ar
+]);
+//#endregion
+export { ke as C, Oe as S, kt as _, dr as a, Et as b, Kn as c, qt as d, Kt as f, Tt as g, At as h, ur as i, Ht as l, Nt as m, Tr as n, ar as o, Gt as p, lr as r, tr as s, Er as t, Ut as u, Ot as v, Ne as x, Dt as y };