@ximatai/muyun-web-app 0.26.14 → 0.26.16

package/dist/workspaceViews-BIYGPUAO.js

@@ -0,0 +1,3437 @@
+import { n as e } from "./rolldown-runtime-BAC7EHh5.js";
+import { A as t, b as n, lt as r, p as i, u as a, ut as o, v as s, w as c } from "./platform-workbench-CAHoriIf.js";
+import { $i as l, Bn as u, C as d, Ci as f, Cn as p, Ei as m, F as h, Gi as g, Gn as _, Hn as v, Ii as y, In as b, J as x, N as S, On as ee, Ot as C, Qi as w, R as T, Sn as E, Ti as te, Tn as D, Ui as O, Un as k, Vi as A, Vn as ne, Wi as re, Xn as ie, Y as ae, _n as oe, dr as se, fr as j, gn as M, hn as ce, in as N, na as P, nn as F, qn as I, ta as le, tn as ue, vn as de, wi as fe, wn as pe, x as me, zi as he } from "./platform-components-Cl5ZZiuU.js";
+import { a as ge, c as L, l as _e, n as ve, o as ye, r as be, s as xe, u as Se } from "./moduleGovernanceWorkspaceView-DGEV3ZyT.js";
+import { Fragment as R, computed as z, createBlock as B, createCommentVNode as V, createElementBlock as H, createElementVNode as U, createSlots as Ce, createTextVNode as W, createVNode as G, defineAsyncComponent as we, defineComponent as K, guardReactiveProps as Te, mergeProps as Ee, nextTick as De, normalizeClass as Oe, normalizeProps as ke, onBeforeUnmount as Ae, onMounted as je, onScopeDispose as Me, onUnmounted as Ne, openBlock as q, ref as J, renderList as Pe, renderSlot as Fe, resolveDynamicComponent as Ie, shallowRef as Le, toDisplayString as Y, toValue as Re, unref as X, watch as Z, withCtx as Q, withKeys as ze, withModifiers as Be } from "vue";
+//#region src/views/roleDetailWorkspaceView.ts
+var Ve = /* @__PURE__ */ new Set([
+	"platform",
+	"tenant",
+	"organization"
+]), He = Se({
+	type: "iam.role.detail",
+	route: "/iam/role",
+	moduleAlias: "iam.role",
+	component: we(() => import("./RoleDetailWorkspaceView-BpOoGUwS.js")),
+	layout: "workspace",
+	routeTitle: "角色管理",
+	routeTitleKey: "platform.workspace-view.roles.route-title",
+	presentations: ["drawer", "tab"],
+	titleKey: "platform.workspace-view.role-detail.title",
+	titleOf: () => "角色详情",
+	parentRouteQueryOf(e) {
+		return e.scopeKind === "platform" ? { scopeKind: e.scopeKind } : {
+			scopeKind: e.scopeKind,
+			scopeId: e.scopeId
+		};
+	},
+	parse(e) {
+		let t = e.recordId, n = e.scopeKind, r = e.scopeId;
+		if (!(typeof t != "string" || !t || typeof n != "string" || !Ve.has(n) || (n === "platform" ? r !== void 0 : typeof r != "string" || !r))) return {
+			recordId: t,
+			scopeKind: n,
+			...typeof r == "string" ? { scopeId: r } : {}
+		};
+	}
+}), Ue = Se({
+	type: "iam.role.authorization",
+	route: "/iam/role/authorization",
+	moduleAlias: "iam.role",
+	component: we(() => Promise.resolve().then(() => Jn)),
+	layout: "workspace",
+	routeTitle: "角色授权",
+	routeTitleKey: "platform.workspace-view.role-authorization.route-title",
+	drawerProfile: "wide-work",
+	presentations: ["drawer", "tab"],
+	titleKey: "platform.workspace-view.role-authorization.title",
+	titleOf: () => "角色授权",
+	parse(e) {
+		let t = e.roleId;
+		return typeof t == "string" && t ? { roleId: t } : void 0;
+	}
+}), We = [He, Ue], Ge = Se({
+	type: "platform.module.actions",
+	route: "/_platform/workspace/platform.module.actions",
+	moduleAlias: "platform.module",
+	component: we(() => import("./ModuleActionManagementView-CJRNShGg.js").then((e) => e.n)),
+	layout: "workspace",
+	routeTitle: "模块管理",
+	routeTitleKey: "platform.workspace-view.modules.route-title",
+	presentations: ["tab"],
+	titleArgsOf: (e) => ({ module: e.moduleTitle ?? e.moduleAlias }),
+	titleKey: "platform.workspace-view.actions.title",
+	titleOf: (e) => `动作：${e.moduleTitle ?? e.moduleAlias}`,
+	parentRouteQueryOf: () => ({}),
+	parse(e) {
+		let t = e.moduleAlias, n = e.moduleTitle;
+		if (typeof t == "string" && t) return {
+			moduleAlias: t,
+			...typeof n == "string" && n ? { moduleTitle: n } : {},
+			...e.moduleKind === "static" || e.moduleKind === "dynamic" ? { moduleKind: e.moduleKind } : {}
+		};
+	}
+}), $ = Se({
+	type: "platform.module.workflows",
+	route: "/_platform/workspace/platform.module.workflows",
+	moduleAlias: "platform.module",
+	component: we(() => import("./WorkflowConfigurationView-pghDbWEh.js")),
+	layout: "workspace",
+	routeTitle: "模块管理",
+	routeTitleKey: "platform.workspace-view.modules.route-title",
+	presentations: ["tab"],
+	titleArgsOf: (e) => ({ module: e.moduleTitle ?? e.moduleAlias }),
+	titleKey: "platform.workspace-view.workflow.title",
+	titleOf: (e) => `审批流程：${e.moduleTitle ?? e.moduleAlias}`,
+	parentRouteQueryOf: () => ({}),
+	parse(e) {
+		if (typeof e.moduleAlias == "string" && e.moduleAlias) return {
+			moduleAlias: e.moduleAlias,
+			...typeof e.moduleTitle == "string" ? { moduleTitle: e.moduleTitle } : {}
+		};
+	}
+}), Ke = /* @__PURE__ */ K({
+	__name: "ModuleMenuDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = P(), n = e, r = String(n.context.record?.alias ?? n.context.record?.id ?? ""), a = i(), o = be(), c = o?.language ?? t, l = s(), u = () => JSON.stringify([
+			l?.value?.userId,
+			l?.value?.tenantId,
+			l?.value?.organizationId,
+			l?.value?.system
+		]), d = u(), f = !0, p = o?.session(r) ?? ge(L(n.context.module.http), r, {
+			valid: () => f && !!l?.value?.userId && u() === d,
+			active: () => f
+		}, ye(d, r, () => !!l?.value?.userId && u() === d, void 0, void 0, c), a?.refreshMenus, c), m = J();
+		return o?.focus(p), o?.showEditor(p), p.ready.value || p.load(), Z([
+			p.canSave,
+			p.saving,
+			p.saved,
+			p.resultUnknown,
+			c.revision
+		], () => {
+			n.context.setCloseBlocked(p.saving.value), n.context.setTitleActions(p.saved.value || p.resultUnknown.value ? [] : [{
+				key: "add-menu",
+				label: c.t("platform.screen.ModuleMenuDrawer.add", "添加"),
+				emphasis: "primary",
+				disabled: !p.canSave.value,
+				loading: p.saving.value,
+				run: () => m.value?.save()
+			}]);
+		}, { immediate: !0 }), Z(p.saved, (e) => {
+			e && n.context.refreshDetailExtensions();
+		}), Ae(() => {
+			f = !1, o?.hideEditor(p), o || p.dispose();
+		}), (t, n) => (q(), B(xe, {
+			ref_key: "editor",
+			ref: m,
+			session: X(p),
+			onOpened: n[0] ||= (t) => e.context.close()
+		}, null, 8, ["session"]));
+	}
+}), qe = { class: "module-menu-entries" }, Je = { key: 0 }, Ye = {
+	key: 1,
+	role: "status"
+}, Xe = { key: 2 }, Ze = { key: 0 }, Qe = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	__name: "ModuleMenuEntriesSection",
+	props: { context: {} },
+	setup(e) {
+		let t = P(), n = e, r = i(), a = J([]), o = z(() => a.value.flatMap(({ scheme: e, tree: r }) => _e(r, re(e, "title", t) ?? e.alias ?? e.id, t).filter(({ menu: e }) => e.moduleAlias === String(n.context.record.alias ?? n.context.record.id ?? "")))), s = J(/* @__PURE__ */ new Map()), c = J(!1), l = J(!1), u = z(() => l.value ? t.t("platform.screen.ModuleMenuEntriesSection.cannot-load-menu-entries-right-now-check-that-you-have", "暂时无法读取菜单入口，请确认有菜单管理权限后重试。") : ""), d = 0;
+		Ae(() => d++), Z(() => [n.context.record.id, n.context.refreshKey], () => void f(), { immediate: !0 });
+		async function f() {
+			let e = ++d, t = L(n.context.module.http);
+			c.value = !0, l.value = !1, a.value = [], s.value = /* @__PURE__ */ new Map();
+			try {
+				let [n, r] = await Promise.all([t.schemes(), t.visible()]), i = await Promise.all(n.map(async (e) => ({
+					scheme: e,
+					tree: await t.tree(e.id)
+				})));
+				if (e !== d) return;
+				a.value = i, s.value = new Map(_e(r).map(({ menu: e }) => [e.id, e]));
+			} catch {
+				e === d && (l.value = !0);
+			} finally {
+				e === d && (c.value = !1);
+			}
+		}
+		return (e, n) => (q(), H("div", qe, [c.value ? (q(), H("span", Je, Y(X(t).t("platform.screen.WorkflowAdministrationView.loading", "正在加载…")), 1)) : u.value ? (q(), H("div", Ye, [W(Y(u.value) + " ", 1), G(X(_), {
+			type: "link",
+			onClick: f
+		}, {
+			default: Q(() => [W(Y(X(t).t("platform.screen.WorkflowWorkbenchView.retry", "重试")), 1)]),
+			_: 1
+		})])) : o.value.length ? V("v-if", !0) : (q(), H("span", Xe, Y(X(t).t("platform.screen.ModuleMenuEntriesSection.no-menu-entry-yet-use-add-to-menu-above-to", "尚未添加到菜单，可通过上方“添加到菜单”设置入口。")), 1)), (q(!0), H(R, null, Pe(o.value, (e) => (q(), H("div", {
+			key: e.menu.id,
+			class: "menu-entry"
+		}, [U("span", null, [W(Y(e.path), 1), e.menu.enabled === !1 ? (q(), H("small", Ze, Y(X(t).t("platform.screen.ModuleMenuEntriesSection.disabled", "· 已停用")), 1)) : V("v-if", !0)]), s.value.has(e.menu.id) && X(r)?.openMenu ? (q(), B(X(_), {
+			key: 0,
+			type: "link",
+			onClick: (t) => X(r).openMenu(s.value.get(e.menu.id))
+		}, {
+			default: Q(() => [U("span", null, Y(X(t).t("platform.screen.ModuleMenuEntriesSection.open", "打开")), 1)]),
+			_: 1
+		}, 8, ["onClick"])) : V("v-if", !0)]))), 128))]));
+	}
+}), [["__scopeId", "data-v-d5fd13ca"]]), $e = $, et = Ge, tt = ve, nt = {
+	id: "platform-module-workspace-actions",
+	target: { moduleAlias: "platform.module" },
+	workspaceViews: [
+		tt,
+		et,
+		$e
+	],
+	detail: {
+		sections: [{
+			key: "module-menu-entries",
+			title: "菜单入口",
+			titleKey: "platform.screen.moduleMenuWorkspace.menu-entry",
+			component: Qe
+		}],
+		actions: [
+			{
+				key: "module-workflow-workspace",
+				title: "审批流程",
+				titleKey: "platform.screen.WorkflowConfigurationView.approval-workflow",
+				state: (e) => ({ visible: at(e) !== void 0 }),
+				run({ record: e, openWorkspaceTab: t }) {
+					let n = at(e);
+					n && t($e, {
+						moduleAlias: n,
+						moduleTitle: ot(e)
+					});
+				}
+			},
+			{
+				key: "module-add-to-menu",
+				title: "添加到菜单",
+				titleKey: "platform.entry.add-to-menu",
+				state: (e) => ({ visible: at(e) !== void 0 }),
+				run({ openDrawer: e }) {
+					e({
+						title: "添加到菜单",
+						titleKey: "platform.entry.add-to-menu",
+						width: "narrow",
+						component: Ke
+					});
+				}
+			},
+			{
+				key: "module-actions-workspace",
+				title: "动作",
+				titleKey: "platform.governance.tab.actions",
+				state: (e) => ({ visible: at(e) !== void 0 }),
+				run({ record: e, openWorkspaceTab: t }) {
+					let n = at(e);
+					n && t(et, {
+						moduleAlias: n,
+						moduleTitle: ot(e),
+						moduleKind: st(e)
+					});
+				}
+			},
+			{
+				key: "module-ui-orchestration-workspace",
+				title: "低代码",
+				titleKey: "platform.entry.low-code",
+				state: (e) => ({ visible: at(e) !== void 0 && st(e) === "dynamic" }),
+				run({ record: e, openWorkspaceTab: t }) {
+					let n = at(e);
+					n && st(e) === "dynamic" && t(tt, {
+						moduleAlias: n,
+						moduleTitle: ot(e),
+						governanceTab: "overview"
+					});
+				}
+			}
+		]
+	}
+}, rt = {
+	id: "dictionary-category-tree-parent-policy",
+	target: { moduleAlias: "platform.dictionary_category" },
+	navigator: { treeParentPolicy: {
+		canUseAsParent: (e) => e.categoryKind === "folder",
+		rejectionMessage: "字典类目只能挂在目录下",
+		rejectionMessageKey: "platform.entry.dictionary-categories-must-belong-to-a-folder"
+	} }
+}, it = {
+	id: "platform-module-action-entry-scope",
+	target: { moduleAlias: "platform.module_action" },
+	navigator: {
+		hidden: !0,
+		lockedEntry: {
+			navigatorKey: "module",
+			unavailableDescription: "模块上下文不可用",
+			unavailableDescriptionKey: "platform.entry.module-context-unavailable"
+		}
+	},
+	standardActions: { disabled: ["create"] }
+};
+function at(e) {
+	return ct(e, "alias") ?? ct(e, "id");
+}
+function ot(e) {
+	return ct(e, "title");
+}
+function st(e) {
+	let t = ct(e, "moduleKind");
+	return t === "static" || t === "dynamic" ? t : void 0;
+}
+function ct(e, t) {
+	let n = e[t];
+	return typeof n == "string" && n.trim() ? n : void 0;
+}
+//#endregion
+//#region src/views/PasswordPolicyPreview.vue?vue&type=script&setup=true&lang.ts
+var lt = { class: "password-policy-preview" }, ut = {
+	key: 0,
+	class: "preview-results"
+}, dt = {
+	id: "iam-password-policy-preview",
+	target: { moduleAlias: "iam.password_policy_rule" },
+	card: { assistant: {
+		component: /* @__PURE__ */ I(/* @__PURE__ */ K({
+			name: "PasswordPolicyPreview",
+			__name: "PasswordPolicyPreview",
+			props: { context: {} },
+			setup(e) {
+				let t = P(), n = e, r = J("CURRENT"), i = J(""), a = J(), o = J(!1), s = J(!1), c = 0, l = z(() => x(n.context.record)), d = z(() => n.context.mode !== "view" || T(l.value?.id) !== void 0), f = z(() => [{
+					value: "CURRENT",
+					label: t.t("platform.screen.PasswordPolicyPreview.current-rule", "本规则"),
+					disabled: !d.value
+				}, {
+					value: "ALL",
+					label: t.t("platform.screen.PasswordPolicyPreview.all-rules", "全规则")
+				}]);
+				Z(d, (e) => {
+					!e && r.value === "CURRENT" && (r.value = "ALL");
+				}, { immediate: !0 });
+				function p(e) {
+					(e !== "CURRENT" || d.value) && (e === "CURRENT" || e === "ALL") && (r.value = e);
+				}
+				Z([r, () => n.context.formSessionKey], ([e]) => {
+					e === "ALL" && m();
+				}, { immediate: !0 });
+				async function m() {
+					let e = ++c;
+					s.value = !0, o.value = !1, a.value = void 0;
+					try {
+						let t = await n.context.module.http.request({ path: "/iam.password_policy_rule/active-global-rules" });
+						if (e !== c) return;
+						a.value = Object.freeze(t.map((e) => Object.freeze({ ...e })));
+					} catch {
+						if (e !== c) return;
+						o.value = !0;
+					} finally {
+						e === c && (s.value = !1);
+					}
+				}
+				let h = z(() => {
+					let e = d.value ? l.value : void 0;
+					if (r.value === "CURRENT") return e ? [e] : [];
+					if (!a.value) return [];
+					let t = a.value.filter(te), n = T(e?.id);
+					if (n) {
+						let e = t.findIndex((e) => T(e.id) === n);
+						e >= 0 && t.splice(e, 1);
+					}
+					return e && te(e) && t.push(e), t.length > 0 ? t.sort(ee) : [];
+				}), _ = z(() => i.value ? h.value.map((e, t) => S(e, i.value, t)) : []), v = z(() => _.value.map((e) => ({
+					...e,
+					title: e.titleSource ? t.t(e.titleSource.sourceId, e.title) : O(e.title, e.titleText, t),
+					message: e.messageSource ? t.t(e.messageSource.sourceId, e.message) : O(e.message, e.messageText, t),
+					diagnostic: e.diagnostic ? t.t(e.diagnostic.sourceId, e.diagnostic.originalText) : void 0
+				}))), y = z(() => {
+					if (!d.value && r.value === "CURRENT") return t.t("platform.screen.PasswordPolicyPreview.select-or-create-a-rule", "请选择或新建一条规则");
+					if (r.value === "ALL" && s.value) return t.t("platform.screen.PasswordPolicyPreview.loading-the-authoritative-rules", "正在加载权威规则集");
+					if (r.value === "ALL" && o.value) return t.t("platform.screen.PasswordPolicyPreview.unable-to-load-the-authoritative-rules", "无法加载权威规则集");
+					if (!i.value) return t.t("platform.screen.PasswordPolicyPreview.enter-a-test-password-for-immediate-feedback", "输入测试密码后即时反馈");
+					if (_.value.length === 0) return t.t("platform.screen.PasswordPolicyPreview.no-enabled-rules-participate-in-this-preview", "当前没有参与试算的启用规则");
+					let e = _.value.filter((e) => !e.passed).length;
+					return e === 0 ? t.t("platform.screen.PasswordPolicyPreview.all-passed-value-value", "全部通过（{value1}/{value2}）", {
+						value1: _.value.length,
+						value2: _.value.length
+					}) : t.t("platform.screen.PasswordPolicyPreview.value-rules-failed", "{value1} 条规则未通过", { value1: e });
+				});
+				function x(e) {
+					if (e) return e;
+				}
+				function S(e, t, n) {
+					let r = e.title?.trim() ? void 0 : w("platform.screen.PasswordPolicyPreview.unnamed-rule"), i = e.message?.trim() ? void 0 : w("platform.screen.PasswordPolicyPreview.no-failure-message-configured"), a = E(e.title, r?.originalText ?? ""), o = E(e.message, i?.originalText ?? ""), s = {
+						titleText: g(e, "title"),
+						messageText: g(e, "message")
+					}, c = e.pattern;
+					if (!c?.trim()) return {
+						...s,
+						key: C(e, n),
+						title: a,
+						message: o,
+						titleSource: r,
+						messageSource: i,
+						passed: !1,
+						diagnostic: w("platform.screen.PasswordPolicyPreview.regular-expression-required")
+					};
+					try {
+						let l = RegExp(`^(?:${c})$`).test(t);
+						return {
+							...s,
+							key: C(e, n),
+							title: a,
+							message: o,
+							titleSource: r,
+							messageSource: i,
+							passed: l
+						};
+					} catch {
+						return {
+							...s,
+							key: C(e, n),
+							title: a,
+							message: o,
+							titleSource: r,
+							messageSource: i,
+							passed: !1,
+							diagnostic: w("platform.screen.PasswordPolicyPreview.browser-regex-unsupported")
+						};
+					}
+				}
+				function ee(e, t) {
+					return (e.sortOrder ?? 2 ** 53 - 1) - (t.sortOrder ?? 2 ** 53 - 1) || E(e.title, "").localeCompare(E(t.title, ""));
+				}
+				function C(e, t) {
+					return T(e.id) ?? `draft:${t}`;
+				}
+				function T(e) {
+					return e?.trim() || void 0;
+				}
+				function E(e, t) {
+					return e?.trim() || t;
+				}
+				function te(e) {
+					return e.enabled !== !1 && (e.scopeType == null || e.scopeType.toLowerCase() === "global");
+				}
+				return (e, n) => (q(), H("section", lt, [
+					U("header", null, [U("h3", null, Y(X(t).t("platform.screen.PasswordPolicyPreview.password-preview", "密码试算")), 1), U("span", { class: Oe({ failed: _.value.some((e) => !e.passed) }) }, Y(y.value), 3)]),
+					G(X(b), {
+						class: "preview-scope",
+						value: r.value,
+						options: f.value,
+						size: "small",
+						"onUpdate:value": p
+					}, null, 8, ["value", "options"]),
+					G(X(u), {
+						value: i.value,
+						"onUpdate:value": n[0] ||= (e) => i.value = e,
+						type: "text",
+						autocomplete: "off",
+						placeholder: X(t).t("platform.screen.PasswordPolicyPreview.enter-a-test-password", "输入测试密码"),
+						"aria-label": X(t).t("platform.screen.PasswordPolicyPreview.test-password", "测试密码")
+					}, null, 8, [
+						"value",
+						"placeholder",
+						"aria-label"
+					]),
+					_.value.length ? (q(), H("ul", ut, [(q(!0), H(R, null, Pe(v.value, (e) => (q(), H("li", {
+						key: e.key,
+						class: Oe({
+							passed: e.passed,
+							failed: !e.passed
+						})
+					}, [U("strong", null, Y(e.title), 1), U("span", null, Y(e.diagnostic ?? (e.passed ? X(t).t("platform.workflow-record.check-passed", "通过") : e.message)), 1)], 2))), 128))])) : V("v-if", !0)
+				]));
+			}
+		}), [["__scopeId", "data-v-235173d0"]]),
+		placement: {
+			boundary: "outside",
+			position: "bottom"
+		}
+	} }
+}, ft = { class: "tenant-applications-detail" }, pt = { class: "tenant-applications-summary" }, mt = {
+	key: 0,
+	class: "tenant-applications-status"
+}, ht = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	name: "TenantApplicationsDetailSection",
+	__name: "TenantApplicationsDetailSection",
+	props: { context: {} },
+	setup(e) {
+		let t = P(), n = e, r = J([]), i = J(!1), a = 0, o = J(/* @__PURE__ */ new Map()), s = z(() => r.value.map((e) => e.applicationAlias).filter((e) => typeof e == "string" && e.length > 0).map((e) => ({
+			key: e,
+			label: o.value.get(e) ? `${o.value.get(e)} · ${e}` : e
+		})));
+		Z(() => [n.context.record.id, n.context.refreshKey], () => void c(), { immediate: !0 });
+		async function c() {
+			let e = String(n.context.record.id ?? ""), s = ++a;
+			if (!e) {
+				r.value = [], o.value = /* @__PURE__ */ new Map(), i.value = !1;
+				return;
+			}
+			i.value = !0, r.value = [], o.value = /* @__PURE__ */ new Map();
+			try {
+				let [t, i] = await Promise.all([n.context.module.http.request({
+					method: "POST",
+					path: "/platform.application/query",
+					body: { page: {
+						pageNum: 1,
+						pageSize: 200
+					} }
+				}), n.context.module.http.request({
+					method: "POST",
+					path: l(e, "query"),
+					body: { page: {
+						pageNum: 1,
+						pageSize: 200
+					} }
+				})]);
+				s === a && (o.value = new Map(t.records.filter((e) => e.alias && e.title).map((e) => [e.alias, e.title])), r.value = i.records);
+			} catch (e) {
+				s === a && F(e, {
+					language: t,
+					source: "tenant-applications-detail",
+					phase: "load"
+				});
+			} finally {
+				s === a && (i.value = !1);
+			}
+		}
+		function l(e, t) {
+			return `/iam.tenant/${encodeURIComponent(e)}/applications/${t}`;
+		}
+		return (e, n) => (q(), H("section", ft, [U("div", pt, [i.value ? (q(), H("span", mt, Y(X(t).t("platform.screen.WorkflowAdministrationView.loading", "正在加载…")), 1)) : (q(), B(X(k), {
+			key: 1,
+			items: s.value,
+			"max-visible": 8,
+			"empty-text": X(t).t("platform.screen.CrudRecordListExplorer.emptyDescription", "暂无记录")
+		}, null, 8, ["items", "empty-text"]))])]));
+	}
+}), [["__scopeId", "data-v-49a973de"]]), gt = { class: "tenant-application-configuration" }, _t = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	name: "TenantApplicationConfigurationDrawer",
+	__name: "TenantApplicationConfigurationDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = P(), n = e, r = J([]), i = J(/* @__PURE__ */ new Set()), a = J(!1), o = J(!1), s = z(() => [{
+			key: "title",
+			title: t.t("platform.screen.TenantApplicationConfigurationDrawer.application-name", "应用名称"),
+			width: 260
+		}, {
+			key: "alias",
+			title: t.t("platform.screen.TenantApplicationConfigurationDrawer.application-alias", "应用 alias"),
+			width: 220
+		}]), c = z(() => r.value), l = z(() => ({
+			selectedRowKeys: [...i.value],
+			preserveSelectedRowKeys: !0,
+			disabledOf: (e) => o.value || e.alias === "iam",
+			onChange: (e) => {
+				i.value = new Set(e.map(String));
+			}
+		}));
+		function u() {
+			n.context.setCloseBlocked(o.value), n.context.setTitleActions([{
+				key: "cancel",
+				label: t.t("platform.action.cancel", "取消"),
+				disabled: o.value,
+				run: () => {
+					o.value || n.context.close();
+				}
+			}, {
+				key: "confirm",
+				label: t.t("platform.screen.UiModal.confirmText", "确认"),
+				emphasis: "primary",
+				disabled: o.value,
+				loading: o.value,
+				run: f
+			}]);
+		}
+		je(() => {
+			u(), d();
+		}), Z([o, t.revision], u);
+		async function d() {
+			let e = String(n.context.record?.id ?? "");
+			if (e) {
+				a.value = !0;
+				try {
+					let [t, a] = await Promise.all([n.context.module.http.request({
+						method: "POST",
+						path: "/platform.application/query",
+						body: { page: {
+							pageNum: 1,
+							pageSize: 200
+						} }
+					}), n.context.module.http.request({
+						method: "POST",
+						path: p(e, "query"),
+						body: { page: {
+							pageNum: 1,
+							pageSize: 200
+						} }
+					})]);
+					r.value = t.records.filter((e) => e.enabled !== !1);
+					let o = new Set(r.value.map((e) => e.alias).filter(Boolean));
+					i.value = /* @__PURE__ */ new Set(["iam", ...a.records.map((e) => e.applicationAlias).filter((e) => typeof e == "string" && o.has(e))]);
+				} catch (e) {
+					F(e, {
+						language: t,
+						source: "tenant-application-configuration",
+						phase: "load"
+					});
+				} finally {
+					a.value = !1;
+				}
+			}
+		}
+		async function f() {
+			let e = String(n.context.record?.id ?? "");
+			if (e && !o.value) {
+				o.value = !0;
+				try {
+					await n.context.module.http.request({
+						method: "POST",
+						path: p(e, "configure"),
+						body: { applicationAliases: [...i.value] }
+					}), n.context.refreshDetailExtensions(), n.context.refreshList(), n.context.close();
+				} catch (e) {
+					F(e, {
+						language: t,
+						source: "tenant-application-configuration",
+						phase: "action"
+					});
+				} finally {
+					o.value = !1;
+				}
+			}
+		}
+		function p(e, t) {
+			return `/iam.tenant/${encodeURIComponent(e)}/applications/${t}`;
+		}
+		return (e, n) => (q(), H("section", gt, [U("p", null, Y(X(t).t("platform.screen.TenantApplicationConfigurationDrawer.select-applications-to-provision-for-this-tenant-deselecting-an-application", "勾选表示向当前租户开通应用；取消勾选将移除该租户的应用开通记录。")), 1), G(X(E), {
+			columns: s.value,
+			rows: c.value,
+			loading: a.value,
+			pagination: !1,
+			selection: l.value,
+			"row-key": (e) => String(e.alias ?? e.id ?? ""),
+			"empty-description": X(t).t("platform.screen.TenantApplicationConfigurationDrawer.no-applications-available-for-configuration", "暂无可配置应用")
+		}, null, 8, [
+			"columns",
+			"rows",
+			"loading",
+			"selection",
+			"row-key",
+			"empty-description"
+		])]));
+	}
+}), [["__scopeId", "data-v-12c39b69"]]), vt = {
+	id: "iam-tenant-standard-page-enhancement",
+	target: { moduleAlias: "iam.tenant" },
+	form: {
+		contributions: [],
+		fieldPolicies: [
+			{
+				fieldName: "workbenchTitle",
+				visible: ({ draft: e }) => e.workbenchBrandMode !== "logoOnly"
+			},
+			{
+				fieldName: "workbenchSubtitle",
+				visible: ({ draft: e }) => e.workbenchBrandMode !== "logoOnly"
+			},
+			...["lightLogoAssetId", "darkLogoAssetId"].map((e) => ({
+				fieldName: e,
+				imageUploadHint: ({ draft: e }, t = l) => e.workbenchBrandMode === "logoOnly" ? t.t("platform.entry.logo-only-mode-supports-landscape-or-square-images-up-to-512-kb", "纯 Logo 模式支持横向或正方形图片（最大 512 KB）") : t.t("platform.entry.logo-and-title-mode-requires-square-images-recommended-128-128-px-up-to-512-kb", "Logo + 标题模式仅支持正方形图片（建议 128 × 128 px，最大 512 KB）"),
+				imageUploadAdvisory: ({ draft: e }, t = l) => e.workbenchBrandMode === "logoOnly" ? void 0 : (e) => yt(e, t)
+			}))
+		]
+	},
+	detail: {
+		actions: [{
+			key: "tenant-configure-applications",
+			title: "配置应用",
+			titleKey: "platform.entry.configure-applications",
+			state: () => ({ visible: !0 }),
+			run({ openDrawer: e }) {
+				e({
+					title: "配置应用",
+					titleKey: "platform.entry.configure-applications",
+					width: "wide",
+					component: _t
+				});
+			}
+		}],
+		sections: [{
+			key: "tenant-applications",
+			title: "已开通应用",
+			titleKey: "platform.entry.provisioned-applications",
+			component: ht
+		}]
+	}
+};
+async function yt(e, t) {
+	if (!e.type.startsWith("image/") || typeof Image > "u") return t.t("platform.entry.logo-and-title-mode-requires-a-readable-square-image", "Logo + 标题模式需要可读取的正方形图片。");
+	try {
+		let { width: n, height: r } = await bt(e), i = n / r;
+		return i >= .9 && i <= 1.1 ? void 0 : t.t("platform.entry.value-is-value-value-px-logo-and-title-mode-only-supports-square-logos", "“{value1}”为 {value2} × {value3} px；Logo + 标题模式仅允许上传正方形 Logo。", {
+			value1: e.name,
+			value2: n,
+			value3: r
+		});
+	} catch {
+		return t.t("platform.entry.unable-to-read-image-dimensions-select-a-square-png-jpg-or-gif-image", "无法读取图片尺寸，请选择正方形 PNG、JPG 或 GIF 图片。");
+	}
+}
+function bt(e) {
+	let t = URL.createObjectURL(e);
+	return new Promise((e, n) => {
+		let r = new Image();
+		r.onload = () => {
+			URL.revokeObjectURL(t), e({
+				width: r.naturalWidth,
+				height: r.naturalHeight
+			});
+		}, r.onerror = () => {
+			URL.revokeObjectURL(t), n(/* @__PURE__ */ Error("无法读取图片尺寸"));
+		}, r.src = t;
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/employee/EmployeeAccountDrawer.vue?vue&type=script&setup=true&lang.ts
+var xt = {
+	key: 1,
+	class: "employee-account-drawer"
+}, St = { class: "employee-account-existing-picker" }, Ct = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	name: "EmployeeAccountDrawer",
+	__name: "EmployeeAccountDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = P(), n = e, r = J(), i = J(), a = J(""), o = J(""), s = J(!1), c = J(!1);
+		je(() => void l());
+		async function l() {
+			let e = x();
+			if (e) {
+				s.value = !0;
+				try {
+					r.value = await n.context.module.http.request({ path: `/iam.employee/${encodeURIComponent(e)}/account` });
+				} catch (e) {
+					F(e, {
+						language: t,
+						source: "employee-account",
+						phase: "load"
+					});
+				} finally {
+					s.value = !1;
+				}
+			}
+		}
+		async function f() {
+			let e = x();
+			if (!e || c.value) return;
+			let i = a.value.trim();
+			if (!i || !o.value) {
+				N(t.t("platform.screen.EmployeeAccountDrawer.enter-an-account-and-initial-password", "请输入账号和初始密码。"), {
+					language: t,
+					source: "employee-account",
+					phase: "validation"
+				});
+				return;
+			}
+			c.value = !0;
+			try {
+				let t = await n.context.module.http.request({
+					method: "POST",
+					path: `/iam.employee/${encodeURIComponent(e)}/account/provision`,
+					body: {
+						username: i,
+						password: o.value
+					}
+				});
+				r.value = m(t).binding, o.value = "", n.context.refreshList();
+			} catch (e) {
+				F(e, {
+					language: t,
+					source: "employee-account",
+					phase: "action"
+				});
+			} finally {
+				c.value = !1;
+			}
+		}
+		async function p(e) {
+			let t = e[0];
+			t && await h(t.id);
+		}
+		async function h(e) {
+			let a = x();
+			if (a && e && !c.value) {
+				c.value = !0;
+				try {
+					r.value = await n.context.module.http.request({
+						method: "POST",
+						path: `/iam.employee/${encodeURIComponent(a)}/account`,
+						body: { userId: e }
+					}), i.value = void 0, n.context.refreshList(), N(t.t("platform.screen.EmployeeAccountDrawer.the-account-is-bound-to-this-employee", "账号已绑定到当前职员。"), {
+						language: t,
+						source: "employee-account",
+						phase: "action"
+					});
+				} catch (e) {
+					F(e, {
+						language: t,
+						source: "employee-account",
+						phase: "action"
+					});
+				} finally {
+					c.value = !1;
+				}
+			}
+		}
+		async function g(e) {
+			let t = x();
+			if (!t) return {
+				records: [],
+				total: 0
+			};
+			let r = await n.context.module.http.request({
+				method: "POST",
+				path: `/iam.employee/${encodeURIComponent(t)}/account-candidates/query`,
+				body: {
+					keyword: e.keyword,
+					page: {
+						pageNum: e.pageNum,
+						pageSize: e.pageSize
+					}
+				}
+			});
+			return {
+				records: r.records.map(y),
+				total: r.total
+			};
+		}
+		async function v(e) {
+			let t = x();
+			return !t || e.length === 0 ? [] : (await n.context.module.http.request({
+				method: "POST",
+				path: `/iam.employee/${encodeURIComponent(t)}/account-candidates/query`,
+				body: {
+					ids: e,
+					page: {
+						pageNum: 1,
+						pageSize: e.length
+					}
+				}
+			})).records.map(y);
+		}
+		function y(e) {
+			return {
+				id: e.id,
+				title: e.username ?? e.id,
+				account: e.username ?? e.id,
+				employeeName: e.employeeTitle,
+				organizationId: e.organizationId,
+				organizationName: e.organizationTitle,
+				departmentId: e.departmentId,
+				departmentName: e.departmentTitle
+			};
+		}
+		async function b() {
+			let e = x();
+			if (e && r.value && !c.value && await ce({
+				title: t.t("platform.screen.EmployeeAccountDrawer.remove-account", "移除账户"),
+				content: t.t("platform.screen.EmployeeAccountDrawer.remove-this-employee-s-account-the-user-account-will-also", "确认移除该职员的账户？该用户账号会同步删除。"),
+				okText: t.t("platform.screen.RecordPermissionDialog.remove", "移除"),
+				danger: !0
+			}, t)) {
+				c.value = !0;
+				try {
+					await n.context.module.http.request({
+						method: "POST",
+						path: `/iam.employee/${encodeURIComponent(e)}/account/delete`
+					}), r.value = void 0, n.context.refreshList();
+				} catch (e) {
+					F(e, {
+						language: t,
+						source: "employee-account",
+						phase: "action"
+					});
+				} finally {
+					c.value = !1;
+				}
+			}
+		}
+		function x() {
+			let e = n.context.record?.id;
+			return e == null ? void 0 : String(e);
+		}
+		return (e, n) => s.value ? (q(), B(X(de), {
+			key: 0,
+			tip: X(t).t("platform.screen.EmployeeAccountDrawer.loading-account-binding", "加载账号绑定")
+		}, null, 8, ["tip"])) : (q(), H("section", xt, [x() ? r.value ? (q(), H(R, { key: 1 }, [U("p", null, Y(X(t).t("platform.screen.EmployeeAccountDrawer.currently-bound-user", "当前已绑定用户：")) + Y(r.value.userId ?? "-"), 1), G(X(_), {
+			danger: "",
+			"icon-name": "delete",
+			loading: c.value,
+			onClick: b
+		}, {
+			default: Q(() => [W(Y(X(t).t("platform.screen.EmployeeAccountDrawer.remove-account", "移除账户")), 1)]),
+			_: 1
+		}, 8, ["loading"])], 64)) : (q(), H(R, { key: 2 }, [U("section", St, [U("p", null, Y(X(t).t("platform.screen.EmployeeAccountDrawer.bind-an-existing-user-account-only-enabled-accounts-in-this", "绑定已有用户账号；仅显示当前租户内启用且尚未绑定其他职员的账号。")), 1), G(X(d), {
+			value: i.value,
+			disabled: c.value,
+			placeholder: X(t).t("platform.screen.EmployeeAccountDrawer.search-and-select-an-existing-login-account", "搜索并选择已有登录账号"),
+			title: X(t).t("platform.screen.EmployeeAccountDrawer.select-an-existing-login-account", "选择已有登录账号"),
+			"search-page": g,
+			"resolve-users": v,
+			"onUpdate:value": n[0] ||= (e) => i.value = typeof e == "string" ? e : void 0,
+			onSelect: p
+		}, null, 8, [
+			"value",
+			"disabled",
+			"placeholder",
+			"title"
+		])]), U("form", { onSubmit: Be(f, ["prevent"]) }, [
+			U("p", null, Y(X(t).t("platform.screen.EmployeeAccountDrawer.you-can-also-create-a-login-account-and-bind-it", "也可直接创建登录账号并自动绑定到当前职员。")), 1),
+			U("label", null, [U("span", null, Y(X(t).t("platform.screen.EmployeeAccountDrawer.account", "账号")), 1), G(X(u), {
+				value: a.value,
+				"onUpdate:value": n[1] ||= (e) => a.value = e,
+				disabled: c.value,
+				placeholder: X(t).t("platform.screen.EmployeeAccountDrawer.enter-a-login-account", "请输入登录账号")
+			}, null, 8, [
+				"value",
+				"disabled",
+				"placeholder"
+			])]),
+			U("label", null, [U("span", null, Y(X(t).t("platform.screen.EmployeeAccountDrawer.initial-password", "初始密码")), 1), G(X(u), {
+				value: o.value,
+				"onUpdate:value": n[2] ||= (e) => o.value = e,
+				type: "password",
+				disabled: c.value,
+				placeholder: X(t).t("platform.screen.EmployeeAccountDrawer.enter-an-initial-password", "请输入初始密码")
+			}, null, 8, [
+				"value",
+				"disabled",
+				"placeholder"
+			])]),
+			G(X(_), {
+				type: "primary",
+				"html-type": "submit",
+				"icon-name": "plus",
+				loading: c.value
+			}, {
+				default: Q(() => [W(Y(X(t).t("platform.screen.EmployeeAccountDrawer.create-and-bind-account", "创建账号并绑定")), 1)]),
+				_: 1
+			}, 8, ["loading"])
+		], 32)], 64)) : (q(), B(X(oe), {
+			key: 0,
+			title: X(t).t("platform.screen.EmployeeAccountDrawer.employee-not-found", "职员不存在"),
+			message: X(t).t("platform.screen.EmployeeAccountDrawer.reopen-the-employee-record-to-set-up-an-account", "请重新打开职员档案后再设置账号。")
+		}, null, 8, ["title", "message"]))]));
+	}
+}), [["__scopeId", "data-v-e343e658"]]), wt = {
+	id: "iam-employee-account-drawer",
+	target: { moduleAlias: "iam.employee" },
+	detail: { actions: [{
+		key: "employee-account",
+		title: "设置账号",
+		titleKey: "platform.entry.set-up-account",
+		state: () => ({ visible: !0 }),
+		run({ module: e, record: t, openDrawer: n }) {
+			let r = t.id == null ? void 0 : String(t.id);
+			r && e.can("employeeAccounts", r) !== !1 && n({
+				title: "设置账号",
+				titleKey: "platform.entry.set-up-account",
+				width: "standard",
+				component: Ct
+			});
+		}
+	}] }
+}, Tt = "iam.user.session.collectionChanged", Et = /* @__PURE__ */ new WeakMap();
+function Dt() {
+	let e = j(), t = Et.get(e);
+	t || (t = Ot(e), Et.set(e, t));
+	let n = t;
+	return n.users += 1, Me(() => {
+		--n.users === 0 && (n.dispose(), Et.delete(e));
+	}), {
+		observe: n.observe,
+		statusOf: n.statusOf,
+		refresh: n.refresh
+	};
+}
+function Ot(e) {
+	let n = J({}), r = /* @__PURE__ */ new Set(), i = /* @__PURE__ */ new Set(), a = !1, o = !1, s = t((e) => {
+		kt(e) && r.has(e.recordId) && u(e.recordId);
+	});
+	function c(e) {
+		e && !o && (r.add(e), n.value[e] || u(e));
+	}
+	function l(e) {
+		return e ? n.value[e] : void 0;
+	}
+	function u(e) {
+		e && !o && (i.add(e), !a && (a = !0, queueMicrotask(() => {
+			a = !1, o || d();
+		})));
+	}
+	async function d() {
+		let t = Array.from(i);
+		if (i.clear(), t.length !== 0) try {
+			let r = await e.request({
+				method: "POST",
+				path: "/iam.user/sessions/status",
+				body: { userIds: t }
+			});
+			if (o) return;
+			n.value = {
+				...n.value,
+				...Object.fromEntries(r.map((e) => [e.userId, e]))
+			};
+		} catch (e) {
+			o || F(e, {
+				source: "iam-user-online-status",
+				phase: "load"
+			});
+		}
+	}
+	return {
+		users: 0,
+		observe: c,
+		statusOf: l,
+		refresh: u,
+		dispose() {
+			o = !0, r.clear(), i.clear(), s.unsubscribe();
+		}
+	};
+}
+function kt(e) {
+	return e.type === Tt && e.moduleAlias === "iam.user" && !!e.recordId;
+}
+//#endregion
+//#region src/platform-admin-runtime/user/UserOnlineStatusCell.vue
+var At = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	name: "UserOnlineStatusCell",
+	__name: "UserOnlineStatusCell",
+	props: {
+		record: {},
+		column: {}
+	},
+	setup(e) {
+		let t = P(), n = e, r = Dt(), i = z(() => n.record.id == null ? void 0 : String(n.record.id)), a = z(() => r.statusOf(i.value)), o = z(() => {
+			let e = a.value;
+			if (!e) return "-";
+			if (e.present) {
+				let n = e.presentSessionCount ?? 0, r = e.idleSessionCount ?? 0;
+				return r >= n ? t.t("platform.screen.UserOnlineStatusCell.idle-value-value", "闲置 ({value1}/{value2})", {
+					value1: n,
+					value2: e.activeSessionCount
+				}) : t.t("platform.screen.UserOnlineStatusCell.active-value-value", "使用中 ({value1}/{value2})", {
+					value1: Math.max(0, n - r),
+					value2: e.activeSessionCount
+				});
+			}
+			return e.online ? t.t("platform.screen.UserOnlineStatusCell.online-value", "在线 ({value1})", { value1: e.activeSessionCount }) : t.t("platform.sessions.presence.offline", "离线");
+		});
+		function s() {
+			r.observe(i.value);
+		}
+		return je(s), Z(i, s), (e, t) => (q(), H("span", { class: Oe({
+			"user-online-status--present": a.value?.present,
+			"user-online-status--offline": a.value && !a.value.online
+		}) }, Y(o.value), 3));
+	}
+}), [["__scopeId", "data-v-56345a12"]]), jt = {
+	key: 1,
+	class: "user-password-drawer"
+}, Mt = { key: 0 }, Nt = {
+	key: 1,
+	class: "user-password-reset"
+}, Pt = { key: 0 }, Ft = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	name: "UserPasswordDrawer",
+	__name: "UserPasswordDrawer",
+	props: { context: {} },
+	setup(e) {
+		let t = P(), n = e, r = J(""), i = J(), a = J(!1), o = z(() => n.context.record?.id == null ? void 0 : String(n.context.record.id));
+		async function s() {
+			let e = o.value;
+			if (e && !a.value && n.context.module.can("changePassword", e) === !0) {
+				if (!r.value) {
+					N(t.t("platform.screen.UserPasswordDrawer.enter-a-new-password", "请输入新密码。"), {
+						language: t,
+						source: "iam-user-password",
+						phase: "validation"
+					});
+					return;
+				}
+				a.value = !0, n.context.setCloseBlocked(!0);
+				try {
+					await n.context.module.http.request({
+						method: "POST",
+						path: `/iam.user/changePassword/${encodeURIComponent(e)}`,
+						body: { password: r.value }
+					}), r.value = "", N(t.t("platform.screen.UserPasswordDrawer.password-changed", "密码已修改。"), {
+						language: t,
+						source: "iam-user-password",
+						phase: "action"
+					}), n.context.refreshList(), n.context.refreshDetailExtensions();
+				} catch (e) {
+					F(e, {
+						language: t,
+						source: "iam-user-password",
+						phase: "action"
+					});
+				} finally {
+					n.context.setCloseBlocked(!1), a.value = !1;
+				}
+			}
+		}
+		async function c() {
+			let e = o.value;
+			if (e && !a.value && n.context.module.can("resetPassword", e) === !0) {
+				a.value = !0, n.context.setCloseBlocked(!0);
+				try {
+					i.value = await n.context.module.http.request({
+						method: "POST",
+						path: `/iam.user/resetPassword/${encodeURIComponent(e)}`
+					}), n.context.refreshList(), n.context.refreshDetailExtensions();
+				} catch (e) {
+					F(e, {
+						language: t,
+						source: "iam-user-password",
+						phase: "action"
+					});
+				} finally {
+					n.context.setCloseBlocked(!1), a.value = !1;
+				}
+			}
+		}
+		return (n, l) => o.value ? (q(), H("section", jt, [e.context.module.can("changePassword", o.value) === !0 ? (q(), H("label", Mt, [
+			U("span", null, Y(X(t).t("platform.screen.LoginView.new-password", "新密码")), 1),
+			G(X(u), {
+				value: r.value,
+				"onUpdate:value": l[0] ||= (e) => r.value = e,
+				type: "password",
+				disabled: a.value,
+				placeholder: X(t).t("platform.screen.App.enter-your-new-password", "请输入新密码")
+			}, null, 8, [
+				"value",
+				"disabled",
+				"placeholder"
+			]),
+			G(X(_), {
+				type: "primary",
+				loading: a.value,
+				onClick: s
+			}, {
+				default: Q(() => [W(Y(X(t).t("platform.screen.LoginView.change-password", "修改密码")), 1)]),
+				_: 1
+			}, 8, ["loading"])
+		])) : V("v-if", !0), e.context.module.can("resetPassword", o.value) === !0 ? (q(), H("section", Nt, [
+			U("p", null, Y(X(t).t("platform.screen.UserPasswordDrawer.generate-a-temporary-password-deliver-it-to-the-user-through", "由系统生成临时密码。请在安全渠道交付给用户，并提醒其尽快修改。")), 1),
+			G(X(_), {
+				loading: a.value,
+				onClick: c
+			}, {
+				default: Q(() => [W(Y(X(t).t("platform.screen.UserPasswordDrawer.generate-temporary-password", "生成临时密码")), 1)]),
+				_: 1
+			}, 8, ["loading"]),
+			i.value ? (q(), H("dl", Pt, [U("div", null, [U("dt", null, Y(X(t).t("platform.screen.UserPasswordDrawer.temporary-password", "临时密码")), 1), U("dd", null, Y(i.value.temporaryPassword), 1)]), U("div", null, [U("dt", null, Y(X(t).t("platform.screen.UserPasswordDrawer.expires-at", "失效时间")), 1), U("dd", null, Y(i.value.expiresAt ?? "-"), 1)])])) : V("v-if", !0)
+		])) : V("v-if", !0)])) : (q(), B(X(oe), {
+			key: 0,
+			title: X(t).t("platform.screen.UserPasswordDrawer.user-not-found", "用户不存在"),
+			message: X(t).t("platform.screen.UserPasswordDrawer.reopen-the-user-details-to-manage-the-password", "请重新打开用户详情后再管理密码。")
+		}, null, 8, ["title", "message"]));
+	}
+}), [["__scopeId", "data-v-891512e0"]]);
+//#endregion
+//#region src/platform-admin-runtime/user/useUserSessionRows.ts
+function It(e) {
+	let t = e.language ?? l, n = J([]), r = J({}), i = c({ load: async (e) => {
+		await Promise.all(e.keys.map((t) => o(t, e.isLatest)));
+	} });
+	function a(e) {
+		i.enqueue(e);
+	}
+	async function o(n, r) {
+		if (e.context.can("sessions", n) !== !1) {
+			p(n, {
+				...d(n),
+				loading: !0,
+				error: void 0,
+				failure: void 0
+			});
+			try {
+				await e.context.recordActions(n);
+				let t = await e.context.http.request({
+					method: "GET",
+					path: `/iam.user/${encodeURIComponent(n)}/sessions`
+				});
+				r(n) && p(n, {
+					records: t,
+					loading: !1
+				});
+			} catch (i) {
+				if (!r(n)) return;
+				let a = y(i);
+				F(a, {
+					language: t,
+					source: `${e.source}-sessions`,
+					phase: "load"
+				}), p(n, {
+					...d(n),
+					loading: !1,
+					failure: a
+				});
+			}
+		}
+	}
+	function s(e, t) {
+		let r = String(e.id ?? "");
+		r && (n.value = t ? Array.from(/* @__PURE__ */ new Set([...n.value, r])) : n.value.filter((e) => e !== r), t && d(r).records.length === 0 && a(r));
+	}
+	function u(e) {
+		if (e.type !== "iam.user.session.collectionChanged" || e.moduleAlias !== "iam.user") return;
+		let t = String(e.recordId ?? "");
+		t && n.value.includes(t) && a(t);
+	}
+	function d(e) {
+		let n = e ? r.value[e] : void 0;
+		return n ? n.failure ? {
+			...n,
+			error: he(n.failure, t)
+		} : n : {
+			records: [],
+			loading: !1
+		};
+	}
+	function f() {
+		i.reset(), n.value = [], r.value = {};
+	}
+	function p(e, t) {
+		r.value = {
+			...r.value,
+			[e]: t
+		};
+	}
+	return {
+		handleUserRowExpand: s,
+		handleUserSessionBusinessEvent: u,
+		loadUserSessions: a,
+		reset: f,
+		userSessionState: d
+	};
+}
+//#endregion
+//#region src/platform-admin-runtime/userModulePageEnhancement.ts
+var Lt = {
+	id: "iam-user-standard-page-enhancement",
+	target: { moduleAlias: "iam.user" },
+	navigator: { emptyListScope: ({ currentUser: e, selectedNavigatorRecords: t }) => {
+		if (!(e?.system !== !0 || Object.values(t).some(Boolean))) return [{
+			fieldName: "tenantId",
+			operator: "NULL",
+			values: []
+		}];
+	} },
+	list: {
+		rowExpansion: {
+			key: "iam-user-sessions",
+			component: /* @__PURE__ */ K({
+				name: "UserSessionListExpansion",
+				__name: "UserSessionListExpansion",
+				props: { context: {} },
+				setup(e) {
+					let n = P(), r = e, i = z(() => r.context.record.id == null ? void 0 : String(r.context.record.id)), a = It({
+						context: r.context.module,
+						source: "iam-user-list-expansion",
+						language: n
+					}), o = z(() => a.userSessionState(i.value)), s = z(() => o.value.records.filter((e) => !e.current && r.context.module.can("revokeSession", i.value) === !0)), c = z(() => s.value.length > 1 && r.context.module.can("revokeSessions", i.value) === !0);
+					Z([i, () => r.context.expanded], ([e, t]) => {
+						e && a.handleUserRowExpand({ id: e }, t);
+					}, { immediate: !0 });
+					let l = t((e) => a.handleUserSessionBusinessEvent(e));
+					Ne(() => {
+						l.unsubscribe(), a.reset();
+					});
+					async function u(e) {
+						let t = i.value;
+						t && !e.current && r.context.module.can("revokeSession", t) === !0 && await ce({
+							title: n.t("platform.screen.UserSessionListExpansion.sign-out-session", "下线登录会话"),
+							content: n.t("platform.screen.UserSessionListExpansion.sign-out-this-login-session", "确认下线该登录会话？"),
+							okText: n.t("platform.screen.UserSessionExpandedSubtable.sign-out-session", "下线"),
+							danger: !0
+						}, n) && (await r.context.module.http.request({
+							method: "POST",
+							path: `/iam.user/${encodeURIComponent(t)}/sessions/${encodeURIComponent(e.id)}/revoke`
+						}), a.loadUserSessions(t));
+					}
+					async function d() {
+						let e = i.value, t = s.value.map((e) => e.id);
+						e && t.length !== 0 && r.context.module.can("revokeSessions", e) === !0 && await ce({
+							title: n.t("platform.screen.UserSessionExpandedSubtable.sign-out-all-sessions", "全部下线"),
+							content: n.t("platform.screen.UserSessionListExpansion.sign-out-this-user-s-value-login-sessions", "确认下线该用户的 {value1} 个登录会话？", { value1: t.length }),
+							okText: n.t("platform.screen.UserSessionExpandedSubtable.sign-out-all-sessions", "全部下线"),
+							danger: !0
+						}, n) && (await r.context.module.http.request({
+							method: "POST",
+							path: `/iam.user/${encodeURIComponent(e)}/sessions/revoke`,
+							body: { sessionIds: t }
+						}), a.loadUserSessions(e));
+					}
+					return (t, n) => (q(), B(X(S), {
+						embedded: "",
+						sessions: o.value.records,
+						loading: o.value.loading,
+						error: o.value.error,
+						"can-revoke": (t) => !t.current && e.context.module.can("revokeSession", i.value) === !0,
+						"can-revoke-all": c.value,
+						onRefresh: n[0] ||= (e) => X(a).loadUserSessions(i.value),
+						onRevoke: u,
+						onRevokeAll: d
+					}, null, 8, [
+						"sessions",
+						"loading",
+						"error",
+						"can-revoke",
+						"can-revoke-all"
+					]));
+				}
+			})
+		},
+		columns: [{
+			key: "onlineStatus",
+			title: "在线状态",
+			titleKey: "platform.entry.online-status",
+			width: "112px",
+			align: "center",
+			before: "enabled",
+			cell: At
+		}]
+	},
+	detail: { actions: [{
+		key: "iam-user-password",
+		actionCode: "changePassword",
+		title: "密码管理",
+		titleKey: "platform.entry.password-management",
+		iconName: "lock",
+		state: (e) => ({ visible: e.id != null }),
+		run({ openDrawer: e }) {
+			e({
+				title: "密码管理",
+				titleKey: "platform.entry.password-management",
+				width: "narrow",
+				component: Ft
+			});
+		}
+	}] }
+}, Rt = "/iam.role/scope-selection/descriptor", zt = "/iam.role/scope-selection/candidates";
+function Bt(e) {
+	return {
+		async descriptor() {
+			return Vt(await e.request({ path: Rt }));
+		},
+		async candidates(t) {
+			let n = tn(t.pageNum) ?? 1, r = tn(t.pageSize) ?? 100;
+			return Ht(await e.request({
+				method: "POST",
+				path: zt,
+				body: {
+					navigationKey: Qt(t.navigationKey, "navigationKey"),
+					level: t.level,
+					keyword: Zt(t.keyword),
+					parentId: Zt(t.parentId),
+					page: {
+						pageNum: n,
+						pageSize: r
+					}
+				}
+			}), n);
+		}
+	};
+}
+function Vt(e) {
+	let t = Jt(e);
+	return {
+		directSelections: Yt(t.directSelections).flatMap(Ut),
+		navigations: Yt(t.navigations).flatMap(Wt)
+	};
+}
+function Ht(e, t) {
+	let n = Jt(e), r = Yt(n.records).flatMap(Gt), i = en(n.pageNum) ?? t, a = en(n.pages), o = $t(n.totalKnown, !0) && a != null ? i < a : r.length > 0;
+	return {
+		records: r,
+		hasMore: o,
+		...o ? { nextPage: i + 1 } : {}
+	};
+}
+function Ut(e) {
+	let t = Jt(e), n = Xt(t.selectionKey);
+	if (!n) return [];
+	let r = Xt(t.title ?? t.label) ?? n, i = Kt(t.titleText, r);
+	return [{
+		selectionKey: n,
+		label: r,
+		...i ? { labelText: i } : {}
+	}];
+}
+function Wt(e) {
+	let t = Jt(e), n = Xt(t.navigationKey), r = qt(t.level);
+	if (!n || !r) return [];
+	let i = Xt(t.title ?? t.label) ?? n, a = Kt(t.titleText, i);
+	return [{
+		navigationKey: n,
+		level: r,
+		label: i,
+		...a ? { labelText: a } : {}
+	}];
+}
+function Gt(e) {
+	let t = Jt(e), n = Xt(t.id), r = Xt(t.selectionKey);
+	return !n || !r ? [] : [{
+		id: n,
+		selectionKey: r,
+		label: Xt(t.title ?? t.label) ?? r,
+		...Xt(t.subtitle ?? t.secondaryLabel) ? { secondaryLabel: Xt(t.subtitle ?? t.secondaryLabel) } : {},
+		expandable: $t(t.expandable, !1)
+	}];
+}
+function Kt(e, t) {
+	let n = Jt(e), r = n.source;
+	if (!A(r) || r.sourceKind !== "CODE" || !r.sourceId.startsWith("iam.role.scope.") || !le(r, t)) return;
+	let i = {};
+	for (let [e, t] of Object.entries(Jt(n.languages))) {
+		let n = Jt(t);
+		typeof n.text == "string" && n.requestedTag === e && typeof n.missing == "boolean" && typeof n.fallback == "boolean" && (i[e] = {
+			text: n.text,
+			requestedTag: e,
+			...typeof n.resourceTag == "string" ? { resourceTag: n.resourceTag } : {},
+			missing: n.missing,
+			fallback: n.fallback
+		});
+	}
+	return Object.keys(i).length ? {
+		source: { ...r },
+		languages: i
+	} : void 0;
+}
+function qt(e) {
+	return e === "TENANT" || e === "ORGANIZATION" ? e : void 0;
+}
+function Jt(e) {
+	return e && typeof e == "object" && !Array.isArray(e) ? e : {};
+}
+function Yt(e) {
+	return Array.isArray(e) ? e : [];
+}
+function Xt(e) {
+	return typeof e == "string" ? Zt(e) : void 0;
+}
+function Zt(e) {
+	return e?.trim() || void 0;
+}
+function Qt(e, t) {
+	let n = Zt(e);
+	if (!n) throw Error(`角色归属范围${t}不能为空`);
+	return n;
+}
+function $t(e, t) {
+	return typeof e == "boolean" ? e : t;
+}
+function en(e) {
+	return typeof e == "number" && Number.isInteger(e) && e > 0 ? e : void 0;
+}
+function tn(e) {
+	return typeof e == "number" && Number.isInteger(e) && e > 0 ? e : void 0;
+}
+//#endregion
+//#region src/platform-admin-runtime/role/RoleScopeTree.vue
+var nn = /* @__PURE__ */ K({
+	name: "RoleScopeTree",
+	__name: "RoleScopeTree",
+	props: { context: {} },
+	setup(e) {
+		let t = P(), n = e, r = Bt(j()), i = J(), a = J(""), o = J(!1), s = J([]), c = J([]), l = J(0), u = J(/* @__PURE__ */ new Map()), d = z(() => n.context.selectionKey), f = z(() => i.value?.navigations.some((e) => e.level === "TENANT") === !0), p = z(() => i.value?.navigations.length !== 0), m = z(() => f.value ? t.t("platform.screen.ModulePageHostRuntime.tenant", "租户") : t.t("platform.user-picker.axis.organization", "机构")), h = D({
+			nodes: () => s.value,
+			loader: () => k,
+			version: () => l.value
+		}), g = z(() => _(h.nodes.value));
+		function _(e) {
+			return e.map((e) => ({
+				...e,
+				title: O(e.title, u.value.get(e.key)?.labelText, t),
+				...e.children ? { children: _(e.children) } : {}
+			}));
+		}
+		let v = h.states, y = 0, b;
+		je(() => void S()), Ae(() => {
+			y += 1, b && clearTimeout(b);
+		}), Z(a, () => {
+			p.value && (b && clearTimeout(b), b = setTimeout(() => void C(), 240));
+		});
+		async function S() {
+			o.value = !0;
+			try {
+				i.value = await r.descriptor();
+				let e = i.value.directSelections[0], t = i.value.directSelections.find((e) => e.selectionKey === n.context.selectionKey);
+				t?.labelText && re({
+					key: t.selectionKey,
+					label: t.label,
+					labelText: t.labelText
+				}), !n.context.selectionKey && e && re({
+					key: e.selectionKey,
+					label: e.label,
+					labelText: e.labelText
+				}), await ee();
+			} catch (e) {
+				F(e, {
+					language: t,
+					source: "role-scope-tree",
+					phase: "load"
+				});
+			} finally {
+				o.value = !1;
+			}
+		}
+		async function ee(e = {}) {
+			let n = i.value;
+			if (!n) return;
+			let r = ++y;
+			if (!e.append) {
+				c.value = [], l.value += 1, o.value = !0;
+				try {
+					let e = w(n);
+					if (r !== y) return;
+					u.value = /* @__PURE__ */ new Map(), A(e), s.value = e.map((e) => e.ui);
+				} catch (e) {
+					if (r !== y) return;
+					s.value = [], F(e, {
+						language: t,
+						source: "role-scope-tree",
+						phase: "load"
+					});
+				} finally {
+					r === y && (o.value = !1);
+				}
+			}
+		}
+		async function C() {
+			if (await ee(), !a.value.trim()) return;
+			let e = (i.value?.navigations ?? []).map((e) => `navigation:${e.navigationKey}`);
+			c.value = e, await De(), await Promise.all(e.map((e) => h.request(e, "refresh")));
+		}
+		function w(e) {
+			return [
+				...e.directSelections.map((e) => ({
+					ui: {
+						key: e.selectionKey,
+						title: e.label,
+						isLeaf: !0
+					},
+					labelText: e.labelText,
+					selection: {
+						key: e.selectionKey,
+						label: e.label,
+						labelText: e.labelText
+					}
+				})),
+				...e.navigations.filter((e) => e.level === "ORGANIZATION").map((e) => T(e)),
+				...e.navigations.filter((e) => e.level === "TENANT").map((e) => T(e))
+			];
+		}
+		function T(e) {
+			return {
+				ui: {
+					key: `navigation:${e.navigationKey}`,
+					title: e.label,
+					isLeaf: !1
+				},
+				labelText: e.labelText,
+				children: {
+					navigationKey: e.navigationKey,
+					level: e.level
+				}
+			};
+		}
+		function E(e, t, n) {
+			let r = te(e, t, n);
+			return {
+				ui: {
+					key: e.selectionKey,
+					title: e.label,
+					secondary: e.secondaryLabel,
+					isLeaf: !r
+				},
+				selection: {
+					key: e.selectionKey,
+					label: e.label,
+					secondaryLabel: e.secondaryLabel
+				},
+				children: r
+			};
+		}
+		function te(e, t, n) {
+			return t === "TENANT" ? {
+				navigationKey: e.selectionKey,
+				level: "ORGANIZATION"
+			} : e.expandable ? {
+				navigationKey: n,
+				level: "ORGANIZATION",
+				parentId: e.id
+			} : void 0;
+		}
+		async function k(e, n) {
+			let i = u.value.get(e.key);
+			if (!i?.children) throw Error(t.t("platform.screen.RoleScopeTree.the-role-ownership-scope-is-no-longer-available", "角色归属范围已失效"));
+			try {
+				let e = await r.candidates({
+					...i.children,
+					keyword: a.value.trim() || void 0,
+					pageNum: n.reason === "load-more" ? Number(n.cursor) : 1
+				});
+				n.signal.throwIfAborted();
+				let t = e.records.map((e) => E(e, i.children.level, i.children.navigationKey));
+				return A(t), {
+					mode: n.reason === "load-more" ? "append" : "replace",
+					nodes: t.map((e) => e.ui),
+					hasMore: e.hasMore,
+					nextCursor: e.nextPage == null ? void 0 : String(e.nextPage)
+				};
+			} catch (e) {
+				throw n.signal.aborted || F(e, {
+					language: t,
+					source: "role-scope-tree",
+					phase: "load"
+				}), e;
+			}
+		}
+		function A(e) {
+			let t = new Map(u.value);
+			e.forEach((e) => t.set(e.ui.key, e)), u.value = t;
+		}
+		function ne(e) {
+			let t = u.value.get(e.key)?.selection;
+			t && re(t);
+		}
+		function re(e) {
+			n.context.selectSelectionKey(e.key, {
+				label: e.label,
+				...e.labelText ? { labelText: e.labelText } : {},
+				secondaryLabel: e.secondaryLabel
+			});
+		}
+		function ie() {
+			let e = i.value?.directSelections[0];
+			e && re({
+				key: e.selectionKey,
+				label: e.label,
+				labelText: e.labelText
+			});
+		}
+		return (e, n) => (q(), B(X(x), {
+			class: "role-scope-tree",
+			title: m.value,
+			"refresh-title": X(t).t("platform.screen.RoleScopeTree.refresh-role-ownership-scopes", "刷新角色归属范围"),
+			"search-keyword": a.value,
+			"search-placeholder": X(t).t("platform.screen.RoleScopeTree.search-names-codes-or-ids", "搜索名称、编码或标识"),
+			searchable: p.value,
+			onRefresh: ee,
+			"onUpdate:searchKeyword": n[3] ||= (e) => a.value = e
+		}, {
+			default: Q(() => [o.value ? (q(), B(X(de), {
+				key: 0,
+				tip: X(t).t("platform.screen.RoleScopeTree.loading-role-ownership-scopes", "加载角色归属范围")
+			}, null, 8, ["tip"])) : (q(), B(X(pe), {
+				key: 1,
+				"expanded-keys": c.value,
+				"onUpdate:expandedKeys": n[0] ||= (e) => c.value = e,
+				nodes: g.value,
+				"selected-key": d.value,
+				"reload-key": l.value,
+				"load-strategy": "controlled",
+				"reload-on-reexpand": "",
+				"branch-states": X(v),
+				onLoadRequest: n[1] ||= (e) => X(h).request(e.node.key, e.reason, X(h).stateOf(e.node.key).status === "error"),
+				onSelect: ne,
+				onDeselect: ie,
+				onUnloadChildren: n[2] ||= (e) => X(h).release(e.key)
+			}, null, 8, [
+				"expanded-keys",
+				"nodes",
+				"selected-key",
+				"reload-key",
+				"branch-states"
+			]))]),
+			_: 1
+		}, 8, [
+			"title",
+			"refresh-title",
+			"search-keyword",
+			"search-placeholder",
+			"searchable"
+		]));
+	}
+}), rn = /* @__PURE__ */ K({
+	name: "RoleEnumTitleCell",
+	__name: "RoleEnumTitleCell",
+	props: {
+		record: {},
+		column: {}
+	},
+	setup(e) {
+		let t = P(), n = e, r = z(() => {
+			let e = String(n.record[n.column?.key ?? ""] ?? "");
+			return {
+				account: t.t("platform.screen.RoleManagementView.account-role", "账号角色"),
+				employment: t.t("platform.screen.RoleManagementView.position-role", "任职角色"),
+				standard: t.t("platform.screen.RoleManagementView.standard-role", "标准角色"),
+				group: t.t("platform.screen.RoleManagementView.role-group", "角色组"),
+				dataGrant: t.t("platform.screen.RoleManagementView.data-authorization-role", "数据授权角色"),
+				system: t.t("platform.screen.RoleManagementView.system-role", "系统角色"),
+				private: t.t("platform.screen.RoleManagementView.private", "私有"),
+				ownerAndChildren: t.t("platform.screen.RoleManagementView.current-scope-and-descendants", "本级及下级"),
+				tenant: t.t("platform.screen.RoleManagementView.visible-within-tenant", "租户公开"),
+				platform: t.t("platform.screen.RoleManagementView.globally-visible", "全局公开")
+			}[e] ?? (e || "-");
+		});
+		return (e, t) => (q(), H("span", null, Y(r.value), 1));
+	}
+});
+//#endregion
+//#region src/views/roleGrantClient.ts
+function an(e) {
+	return {
+		accountRoleGrants(t, n) {
+			return e.request({
+				path: `/iam.role/${encodeURIComponent(t)}/account-grants`,
+				query: n ? { targetTenantId: n } : void 0
+			});
+		},
+		grantAccountRole(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/account-grants`,
+				body: n
+			});
+		},
+		deleteAccountRoleGrant(t, n, r) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/account-grants/${encodeURIComponent(n)}/delete`,
+				query: r ? { targetTenantId: r } : void 0
+			});
+		},
+		accountRoleCandidates(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/account-role-candidates/query`,
+				body: n
+			});
+		},
+		employmentRoleGrants(t) {
+			return e.request({ path: `/iam.role/${encodeURIComponent(t)}/employment-grants` });
+		},
+		grantEmploymentRole(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/employment-grants`,
+				body: { employeePositionId: n }
+			});
+		},
+		deleteEmploymentRoleGrant(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/employment-grants/${encodeURIComponent(n)}/delete`
+			});
+		},
+		employmentSelector(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/${encodeURIComponent(t)}/employment-selector/query`,
+				body: n
+			});
+		},
+		authorizationModules(t) {
+			return e.request({ path: `/iam.role/authorizationModules/${encodeURIComponent(t)}` });
+		},
+		permissionMatrix(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/permissionMatrix/${encodeURIComponent(t)}`,
+				body: { moduleAliases: n }
+			});
+		},
+		grantAction(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/grant/${encodeURIComponent(t)}`,
+				body: n
+			});
+		},
+		revokeAction(t, n, r) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/revoke/${encodeURIComponent(t)}`,
+				body: {
+					moduleAlias: n,
+					actionCode: r
+				}
+			});
+		},
+		replacePermissionMatrix(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/permissionMatrix/${encodeURIComponent(t)}/replace`,
+				body: { actions: n }
+			});
+		},
+		dataGrantActionMatrix(t) {
+			return e.request({ path: `/iam.role/dataGrantActionMatrix/${encodeURIComponent(t)}` });
+		},
+		dataScopePolicyCatalog(t, n) {
+			return e.request({
+				path: `/iam.role/dataScopePolicyCatalog/${encodeURIComponent(t)}`,
+				query: n ? { moduleAlias: n } : void 0
+			});
+		},
+		replaceDataGrantActions(t, n) {
+			return e.request({
+				method: "POST",
+				path: `/iam.role/dataGrantActions/${encodeURIComponent(t)}`,
+				body: { actions: n }
+			});
+		}
+	};
+}
+//#endregion
+//#region src/views/RoleAccountGrantDrawer.vue?vue&type=script&setup=true&lang.ts
+var on = {
+	key: 1,
+	class: "role-account-grant-drawer-state"
+}, sn = {
+	key: 0,
+	class: "role-account-grant-target-tenant"
+}, cn = {
+	key: 1,
+	class: "role-account-grant-target-hint"
+}, ln = { class: "role-account-grant-search" }, un = {
+	key: 0,
+	class: "role-account-grant-selected"
+}, dn = { class: "role-account-grant-selected-title" }, fn = { class: "role-account-grant-selected-list" }, pn = ["disabled", "onClick"], mn = 20, hn = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	name: "RoleAccountGrantDrawer",
+	__name: "RoleAccountGrantDrawer",
+	props: {
+		open: { type: Boolean },
+		container: {},
+		embedded: { type: Boolean },
+		drawerContext: {},
+		context: {},
+		role: {}
+	},
+	emits: ["close", "saved"],
+	setup(e, { emit: t }) {
+		let n = P(), r = e, i = t, a = J([]), o = J({}), s = J([]), c = J(/* @__PURE__ */ new Set()), l = J(/* @__PURE__ */ new Set()), d = J(""), f = J(""), p = J(1), m = J(0), h = J(!1), g = J(!1), v = J(!1), y = J(!1), b = J(), x = z(() => an(r.context.http)), S = se({ moduleAlias: "iam.tenant" }), ee = z(() => r.role?.id), w = z(() => r.role ? n.t("platform.screen.RoleAccountGrantDrawer.assign-users-value", "绑定用户 - {value1}", { value1: je(r.role) }) : n.t("platform.screen.RoleManagementView.assign-to-users", "绑定用户")), T = z(() => r.embedded ? "section" : C), E = z(() => r.embedded ? {} : {
+			open: r.open,
+			title: w.value,
+			renderMode: r.container ? "inline" : "portal",
+			closeTitle: n.t("platform.screen.workspaceViewDiscardGuard.close", "关闭"),
+			onClose: ye
+		}), te = z(() => r.role?.ownerScopeType === "platform"), D = z(() => b.value?.id), O = z(() => !te.value || !!D.value), k = z(() => S), A = z(() => {
+			let e = /* @__PURE__ */ new Map();
+			for (let t of a.value) t.userId && e.set(t.userId, t);
+			return e;
+		}), ne = z(() => s.value.filter((e) => e.id).map((e) => ({
+			id: e.id,
+			username: De(e),
+			employeeNo: e.employeeNo ?? "",
+			employeeTitle: e.employeeTitle ?? "",
+			organizationTitle: e.organizationTitle ?? e.organizationId ?? "",
+			departmentTitle: e.departmentTitle ?? e.departmentId ?? "",
+			boundTitle: l.value.has(e.id) ? n.t("platform.screen.RoleAccountGrantDrawer.assigned", "已绑定") : n.t("platform.screen.MetadataGovernanceSurface.unbound", "未绑定")
+		}))), ie = z(() => [...c.value].map((e) => o.value[e] ?? Te(e))), j = z(() => [...c.value].filter((e) => !l.value.has(e))), ce = z(() => [...l.value].filter((e) => !c.value.has(e))), N = z(() => j.value.length > 0 || ce.value.length > 0), I = {
+			rowKey: "id",
+			columns: [
+				{
+					title: n.t("platform.user-picker.column.account", "用户账号"),
+					key: "username",
+					width: 140
+				},
+				{
+					title: n.t("platform.user-picker.column.employee-name", "职员姓名"),
+					key: "employeeTitle",
+					width: 120
+				},
+				{
+					title: n.t("platform.screen.RoleAccountGrantDrawer.employee-number", "职员工号"),
+					key: "employeeNo",
+					width: 120
+				},
+				{
+					title: n.t("platform.user-picker.column.organization-name", "所属机构"),
+					key: "organizationTitle",
+					width: 140
+				},
+				{
+					title: n.t("platform.user-picker.column.department-name", "所属部门"),
+					key: "departmentTitle",
+					width: 140
+				},
+				{
+					title: n.t("platform.screen.WorkflowWorkbenchView.status", "状态"),
+					key: "boundTitle",
+					width: 90
+				}
+			]
+		}, le = z(() => ({
+			selectedRowKeys: [...c.value],
+			preserveSelectedRowKeys: !0,
+			disabledOf: () => v.value,
+			onChange: (e) => {
+				c.value = new Set(e.map((e) => String(e)));
+			}
+		})), fe = z(() => ({
+			current: p.value,
+			total: m.value,
+			pageSize: mn,
+			showSizeChanger: !1,
+			showQuickJumper: !1,
+			onChange: (e) => void ge(e)
+		}));
+		Z(() => [r.open, r.role?.id], ([e]) => {
+			e ? he() : be();
+		}, { immediate: !0 }), Z([
+			() => r.embedded,
+			() => r.drawerContext,
+			c,
+			N,
+			O,
+			j,
+			ce,
+			v,
+			h
+		], pe, { immediate: !0 }), Ae(() => r.drawerContext?.setOperation(void 0));
+		function pe() {
+			let e = r.drawerContext;
+			r.embedded && e && (e.setSubtitle(n.t("platform.screen.RoleAccountGrantDrawer.role-value-value", "角色：{value1} · {value2}", {
+				value1: je(r.role ?? {}),
+				value2: Me(r.role)
+			})), e.setOperation({
+				summary: me(),
+				actions: [{
+					key: "cancel-account-role-grants",
+					label: n.t("platform.action.cancel", "取消"),
+					disabled: v.value || h.value,
+					run: ye
+				}, {
+					key: "save-account-role-grants",
+					label: n.t("platform.screen.RoleAccountGrantDrawer.confirm", "确定"),
+					emphasis: "primary",
+					disabled: h.value || !O.value || !N.value,
+					loading: v.value,
+					run: () => void ve()
+				}]
+			}));
+		}
+		function me() {
+			return O.value ? N.value ? n.t("platform.screen.RoleAccountGrantDrawer.value-users-selected-value-added-value-removed", "已选 {value1} 个用户 · 新增 {value2} · 移除 {value3}", {
+				value1: c.value.size,
+				value2: j.value.length,
+				value3: ce.value.length
+			}) : n.t("platform.screen.RoleAccountGrantDrawer.value-users-selected", "已选 {value1} 个用户", { value1: c.value.size }) : n.t("platform.screen.RoleAccountGrantDrawer.select-a-target-tenant", "请选择目标租户");
+		}
+		async function he() {
+			let e = ee.value;
+			if (!e) {
+				be();
+				return;
+			}
+			if (!O.value) {
+				xe();
+				return;
+			}
+			h.value = !0, y.value = !1;
+			try {
+				let t = await x.value.accountRoleGrants(e, D.value);
+				a.value = t;
+				let n = new Set(t.map((e) => e.userId).filter((e) => !!e));
+				l.value = n, c.value = new Set(n), o.value = K([...t.map((e) => Te(e.userId)).filter((e) => !!e)]), await ge(1);
+			} catch (e) {
+				y.value = !0, F(e, {
+					language: n,
+					source: "role-account-grants",
+					phase: "load"
+				});
+			} finally {
+				h.value = !1;
+			}
+		}
+		async function ge(e) {
+			let t = ee.value;
+			if (t && O.value) {
+				g.value = !0;
+				try {
+					let n = await x.value.accountRoleCandidates(t, {
+						targetTenantId: D.value,
+						keyword: f.value,
+						enabledOnly: !0,
+						page: {
+							pageNum: Math.max(0, e),
+							pageSize: mn
+						}
+					});
+					s.value = n.records, o.value = {
+						...o.value,
+						...K(n.records)
+					}, p.value = n.pageNum, m.value = n.total;
+				} catch (e) {
+					F(e, {
+						language: n,
+						source: "role-account-grants",
+						phase: "load"
+					});
+				} finally {
+					g.value = !1;
+				}
+			}
+		}
+		function L() {
+			f.value = d.value.trim(), ge(0);
+		}
+		function _e(e, t) {
+			let n = new Set(c.value);
+			t ? n.add(e) : n.delete(e), c.value = n;
+		}
+		async function ve() {
+			let e = ee.value;
+			if (e && O.value) {
+				if (!N.value) {
+					i("close");
+					return;
+				}
+				v.value = !0;
+				try {
+					for (let t of j.value) await x.value.grantAccountRole(e, {
+						userId: t,
+						targetTenantId: D.value
+					});
+					for (let t of ce.value) {
+						let n = A.value.get(t)?.id;
+						n && await x.value.deleteAccountRoleGrant(e, n, D.value);
+					}
+					await ue({
+						success: !0,
+						message: n.t("platform.screen.RoleAccountGrantDrawer.user-assignments-saved", "用户绑定已保存")
+					}, {
+						language: n,
+						source: "role-account-grants",
+						phase: "action",
+						fallbackMessage: n.t("platform.screen.RoleAccountGrantDrawer.user-assignments-saved", "用户绑定已保存")
+					}), i("saved"), i("close");
+				} catch (e) {
+					F(e, {
+						language: n,
+						source: "role-account-grants",
+						phase: "action"
+					});
+				} finally {
+					v.value = !1;
+				}
+			}
+		}
+		function ye() {
+			v.value || i("close");
+		}
+		function be() {
+			b.value = void 0, xe();
+		}
+		function xe() {
+			a.value = [], o.value = {}, s.value = [], c.value = /* @__PURE__ */ new Set(), l.value = /* @__PURE__ */ new Set(), d.value = "", f.value = "", p.value = 1, m.value = 0, h.value = !1, g.value = !1, v.value = !1, y.value = !1;
+		}
+		async function Se(e) {
+			if (!e) {
+				b.value = void 0, xe();
+				return;
+			}
+			let t = await S.crud.view(e);
+			b.value = t ?? {
+				id: e,
+				title: e
+			}, await he();
+		}
+		function we(e) {
+			_e(e, !1);
+		}
+		function K(e) {
+			let t = {};
+			for (let n of e) n.id && (t[n.id] = n);
+			return t;
+		}
+		function Te(e) {
+			return e ? {
+				id: e,
+				username: e
+			} : void 0;
+		}
+		function De(e) {
+			return String(e?.username ?? e?.id ?? n.t("platform.screen.RoleAccountGrantDrawer.unknown-user", "未知用户"));
+		}
+		function ke(e) {
+			return e.employeeTitle && e.employeeNo ? `${e.employeeTitle} / ${e.employeeNo}` : e.employeeTitle ?? e.employeeNo ?? e.employeeId ?? e.id;
+		}
+		function je(e) {
+			return String(re(e, "title", n) ?? e.id ?? n.t("platform.screen.RoleManagementView.role", "角色"));
+		}
+		function Me(e) {
+			return e?.ownerScopeType === "platform" ? n.t("platform.screen.RoleAuthorizationView.platform-scope", "平台范围") : e?.ownerScopeType === "organization" ? n.t("platform.screen.RoleAuthorizationView.organization-scope", "机构范围") : n.t("platform.screen.RoleAuthorizationView.tenant-scope", "租户范围");
+		}
+		return (t, r) => (q(), B(Ie(T.value), Ee(E.value, { class: { "role-account-grant-drawer-surface": e.embedded } }), Ce({
+			default: Q(() => [h.value ? (q(), B(X(de), {
+				key: 0,
+				class: "role-account-grant-drawer-state",
+				tip: X(n).t("platform.screen.RoleAccountGrantDrawer.loading-users", "加载用户")
+			}, null, 8, ["tip"])) : y.value ? (q(), H("div", on, [G(X(oe), {
+				title: X(n).t("platform.screen.RoleAccountGrantDrawer.failed-to-load-users", "用户加载失败"),
+				message: X(n).t("platform.screen.RoleAccountGrantDrawer.failed-to-load-user-assignments-for-this-role", "无法加载当前角色的用户绑定")
+			}, null, 8, ["title", "message"]), G(X(_), {
+				type: "primary",
+				"icon-name": "reload",
+				onClick: he
+			}, {
+				default: Q(() => [W(Y(X(n).t("platform.screen.WorkflowWorkbenchView.retry", "重试")), 1)]),
+				_: 1
+			})])) : (q(), H("section", {
+				key: 2,
+				class: Oe(["role-account-grant-drawer-body", { "role-account-grant-drawer-body--target-tenant": te.value }])
+			}, [te.value ? (q(), H("label", sn, [U("span", null, Y(X(n).t("platform.screen.RoleAccountGrantDrawer.target-tenant", "目标租户")), 1), G(X(ae), {
+				context: k.value,
+				value: D.value,
+				mode: "list",
+				placeholder: X(n).t("platform.screen.RoleAccountGrantDrawer.select-the-target-tenant-for-this-role-assignment", "请选择角色下发的目标租户"),
+				disabled: v.value || h.value,
+				"onUpdate:value": Se
+			}, null, 8, [
+				"context",
+				"value",
+				"placeholder",
+				"disabled"
+			])])) : V("v-if", !0), O.value ? (q(), H(R, { key: 2 }, [
+				U("div", ln, [G(X(u), {
+					value: d.value,
+					"allow-clear": "",
+					disabled: v.value,
+					placeholder: X(n).t("platform.screen.RoleAccountGrantDrawer.search-user-accounts", "搜索用户账号"),
+					"onUpdate:value": r[0] ||= (e) => d.value = e,
+					onKeydown: ze(L, ["enter"])
+				}, null, 8, [
+					"value",
+					"disabled",
+					"placeholder"
+				]), G(X(_), {
+					"icon-name": "search",
+					disabled: v.value,
+					onClick: L
+				}, {
+					default: Q(() => [W(Y(X(n).t("platform.screen.WorkflowWorkbenchView.search", "查询")), 1)]),
+					_: 1
+				}, 8, ["disabled"])]),
+				G(X(M), {
+					class: "role-account-grant-table",
+					size: "middle",
+					contract: I,
+					rows: ne.value,
+					loading: g.value,
+					pagination: fe.value,
+					selection: le.value,
+					"fill-height": ""
+				}, null, 8, [
+					"rows",
+					"loading",
+					"pagination",
+					"selection"
+				]),
+				ie.value.length > 0 ? (q(), H("section", un, [U("div", dn, [U("strong", null, Y(X(n).t("platform.screen.RoleAccountGrantDrawer.selected-users", "已选用户")), 1), U("span", null, Y(ie.value.length), 1)]), U("div", fn, [(q(!0), H(R, null, Pe(ie.value, (e) => (q(), H("button", {
+					key: e.id,
+					type: "button",
+					disabled: v.value,
+					onClick: (t) => we(e.id)
+				}, [U("span", null, Y(De(e)), 1), U("small", null, Y(ke(e)), 1)], 8, pn))), 128))])])) : V("v-if", !0)
+			], 64)) : (q(), H("div", cn, Y(X(n).t("platform.screen.RoleAccountGrantDrawer.select-a-target-tenant-for-a-platform-shared-role-before", "平台共享角色需要先选择目标租户，再加载可绑定账号。")), 1))], 2))]),
+			_: 2
+		}, [e.embedded ? void 0 : {
+			name: "operation",
+			fn: Q(() => [G(X(_), {
+				disabled: v.value || h.value,
+				onClick: ye
+			}, {
+				default: Q(() => [W(Y(X(n).t("platform.action.cancel", "取消")), 1)]),
+				_: 1
+			}, 8, ["disabled"]), G(X(_), {
+				type: "primary",
+				loading: v.value,
+				disabled: h.value || !N.value,
+				onClick: ve
+			}, {
+				default: Q(() => [W(Y(X(n).t("platform.screen.RoleAccountGrantDrawer.confirm", "确定")), 1)]),
+				_: 1
+			}, 8, ["loading", "disabled"])]),
+			key: "0"
+		}]), 1040, ["class"]));
+	}
+}), [["__scopeId", "data-v-e7dae9bb"]]), gn = /* @__PURE__ */ K({
+	name: "RoleAccountGrantDrawerSurface",
+	__name: "RoleAccountGrantDrawerSurface",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = z(() => t.context.module), r = z(() => t.context.record);
+		return (e, i) => (q(), B(hn, {
+			open: "",
+			embedded: "",
+			"drawer-context": t.context,
+			context: n.value,
+			role: r.value,
+			onClose: t.context.close,
+			onSaved: t.context.refreshList
+		}, null, 8, [
+			"drawer-context",
+			"context",
+			"role",
+			"onClose",
+			"onSaved"
+		]));
+	}
+}), _n = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	name: "EmployeeEmploymentTable",
+	__name: "EmployeeEmploymentTable",
+	props: {
+		rows: {},
+		selectedIds: { default: () => /* @__PURE__ */ new Set() },
+		selectable: {
+			type: Boolean,
+			default: !1
+		},
+		disabled: {
+			type: Boolean,
+			default: !1
+		},
+		pagination: {
+			type: [Boolean, Object],
+			default: !1
+		},
+		fillHeight: {
+			type: Boolean,
+			default: !1
+		}
+	},
+	emits: ["update:selectedIds"],
+	setup(e, { emit: t }) {
+		let n = P(), r = e, i = t, a = J([]), o = z(() => [
+			{
+				key: "title",
+				title: n.t("platform.screen.EmployeePicker.employee", "职员"),
+				width: 160
+			},
+			{
+				key: "employeeNo",
+				title: n.t("platform.screen.EmployeeEmploymentTable.employee-number", "工号"),
+				width: 140
+			},
+			{
+				key: "organizationTitle",
+				title: n.t("platform.user-picker.column.organization-name", "所属机构"),
+				width: 180
+			},
+			{
+				key: "employmentCount",
+				title: n.t("platform.screen.EmployeeEmploymentTable.position-assignments", "任职"),
+				width: 88,
+				align: "right"
+			},
+			{
+				key: "selectedCount",
+				title: n.t("platform.screen.EmployeeEmploymentTable.selected", "已选"),
+				width: 88,
+				align: "right"
+			}
+		]), s = z(() => [
+			{
+				key: "position",
+				title: n.t("platform.screen.CurrentUserProfileDialog.position", "岗位"),
+				width: 160
+			},
+			{
+				key: "organization",
+				title: n.t("platform.user-picker.axis.organization", "机构"),
+				width: 160
+			},
+			{
+				key: "department",
+				title: n.t("platform.user-picker.axis.department", "部门"),
+				width: 160
+			},
+			{
+				key: "primaryPosition",
+				title: n.t("platform.screen.EmployeeEmploymentTable.primary-position", "主岗位"),
+				width: 88
+			}
+		]), c = z(() => {
+			let e = /* @__PURE__ */ new Map();
+			for (let t of r.rows) {
+				let n = t.employeeId ?? t.id, r = e.get(n) ?? {
+					employeeId: n,
+					title: t.employeeTitle ?? n,
+					employeeNo: t.employeeNo,
+					organizationTitle: t.organizationTitle,
+					positions: []
+				};
+				r.positions.push(t), e.set(n, r);
+			}
+			return [...e.values()];
+		}), l = z(() => c.value);
+		function u(e, t) {
+			let r = t;
+			return e.key === "title" ? r.title : e.key === "employeeNo" ? r.employeeNo ?? r.employeeId : e.key === "organizationTitle" ? r.organizationTitle ?? "-" : e.key === "employmentCount" ? n.t("platform.screen.EmployeeEmploymentTable.value-items", "{value1} 项", { value1: r.positions.length }) : e.key === "selectedCount" ? n.t("platform.screen.EmployeeEmploymentTable.value-items", "{value1} 项", { value1: f(r) }) : "";
+		}
+		function d(e, t) {
+			let r = t;
+			return e.key === "position" ? r.positionTitle ?? r.positionId : e.key === "organization" ? r.organizationTitle ?? r.organizationId : e.key === "department" ? r.departmentTitle ?? r.departmentId : e.key === "primaryPosition" ? r.primaryPosition ? n.t("platform.screen.ManagedDetailRelationInlineSurface.yes", "是") : n.t("platform.screen.ManagedDetailRelationInlineSurface.no", "否") : "";
+		}
+		function f(e) {
+			return e.positions.filter((e) => r.selectedIds.has(e.id)).length;
+		}
+		function p(e) {
+			if (r.selectable) return {
+				selectedRowKeys: e.positions.filter((e) => r.selectedIds.has(e.id)).map((e) => e.id),
+				preserveSelectedRowKeys: !0,
+				disabledOf: () => r.disabled,
+				onChange: (t) => m(e, t)
+			};
+		}
+		function m(e, t) {
+			let n = new Set(r.selectedIds);
+			for (let t of e.positions) n.delete(t.id);
+			for (let e of t) n.add(String(e));
+			i("update:selectedIds", n);
+		}
+		function g(e, t) {
+			let n = e.employeeId;
+			a.value = t ? Array.from(/* @__PURE__ */ new Set([...a.value, n])) : a.value.filter((e) => e !== n);
+		}
+		function _(e) {
+			let t = e.employeeId;
+			g(e, !a.value.includes(t));
+		}
+		return (t, r) => (q(), B(X(E), {
+			class: "employee-employment-table",
+			columns: o.value,
+			rows: l.value,
+			"row-key": "employeeId",
+			pagination: e.pagination,
+			"expanded-row-keys": a.value,
+			"clickable-rows": "",
+			"horizontal-scroll": "",
+			"fill-height": e.fillHeight,
+			onRowExpand: g,
+			onRowDblclick: _
+		}, {
+			cell: Q(({ column: e, record: t }) => [W(Y(u(e, t)), 1)]),
+			expandedRow: Q(({ record: e }) => [G(X(h), { title: X(n).t("platform.screen.CurrentUserProfileDialog.employment-details", "任职信息") }, {
+				default: Q(() => [G(X(E), {
+					columns: s.value,
+					rows: e.positions,
+					"row-key": "id",
+					pagination: !1,
+					selection: p(e),
+					"horizontal-scroll": "",
+					"row-muted": (e) => e.enabled === !1
+				}, {
+					cell: Q(({ column: e, record: t }) => [W(Y(d(e, t)), 1)]),
+					_: 1
+				}, 8, [
+					"columns",
+					"rows",
+					"selection",
+					"row-muted"
+				])]),
+				_: 2
+			}, 1032, ["title"])]),
+			_: 1
+		}, 8, [
+			"columns",
+			"rows",
+			"pagination",
+			"expanded-row-keys",
+			"fill-height"
+		]));
+	}
+}), [["__scopeId", "data-v-7020a020"]]), vn = { key: 1 }, yn = {
+	key: 2,
+	class: "role-employment-grant-body"
+}, bn = {
+	key: 0,
+	class: "role-employment-grant-selected"
+}, xn = { class: "role-employment-grant-selected-title" }, Sn = { class: "role-employment-grant-selected-list" }, Cn = ["disabled", "onClick"], wn = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	name: "RoleEmploymentGrantDrawer",
+	__name: "RoleEmploymentGrantDrawer",
+	props: {
+		open: { type: Boolean },
+		container: {},
+		embedded: { type: Boolean },
+		drawerContext: {},
+		context: {},
+		role: {}
+	},
+	emits: ["close", "saved"],
+	setup(e, { emit: t }) {
+		let n = P(), r = e, i = t, a = J([]), o = J([]), s = J({}), c = J(/* @__PURE__ */ new Set()), l = J(/* @__PURE__ */ new Set()), d = J(!1), f = J(!1), p = J(!1), m = J(!1), h = J(1), g = J(0), v = J(""), y = z(() => r.role?.id), b = z(() => an(r.context.http)), x = z(() => n.t("platform.screen.RoleEmploymentGrantDrawer.assign-positions-value", "绑定任职 - {value1}", { value1: r.role?.title ?? r.role?.id ?? "" })), S = z(() => r.embedded ? "section" : C), ee = z(() => r.embedded ? {} : {
+			open: r.open,
+			title: x.value,
+			renderMode: r.container ? "inline" : "portal",
+			closeTitle: n.t("platform.screen.workspaceViewDiscardGuard.close", "关闭"),
+			onClose: () => !p.value && i("close")
+		}), w = z(() => [...c.value].filter((e) => !l.value.has(e))), T = z(() => [...l.value].filter((e) => !c.value.has(e))), E = z(() => new Map(a.value.map((e) => [e.employeePositionId, e]))), te = z(() => o.value.filter((e) => !v.value.trim() || ie(e).includes(v.value.trim()))), D = z(() => [...c.value].map((e) => s.value[e] ?? j(e))), O = z(() => ({
+			current: h.value,
+			total: g.value,
+			pageSize: 50,
+			showSizeChanger: !1,
+			showQuickJumper: !1,
+			onChange: (e) => void A(e)
+		}));
+		Z(() => [r.open, r.role?.id], ([e]) => {
+			e ? A() : re();
+		}, { immediate: !0 }), Z([
+			() => r.embedded,
+			() => r.drawerContext,
+			c,
+			w,
+			T,
+			p,
+			f
+		], k, { immediate: !0 }), Ae(() => r.drawerContext?.setOperation(void 0));
+		function k() {
+			let e = r.drawerContext;
+			r.embedded && e && (e.setSubtitle(n.t("platform.screen.RoleAccountGrantDrawer.role-value-value", "角色：{value1} · {value2}", {
+				value1: r.role?.title ?? r.role?.id ?? n.t("platform.screen.RoleManagementView.role", "角色"),
+				value2: N(r.role)
+			})), e.setOperation({
+				summary: n.t("platform.screen.RoleEmploymentGrantDrawer.value-positions-selectedvalue", "已选 {value1} 个任职{value2}", {
+					value1: c.value.size,
+					value2: w.value.length || T.value.length ? n.t("platform.screen.RoleEmploymentGrantDrawer.value-added-value-removed", " · 新增 {value1} · 移除 {value2}", {
+						value1: w.value.length,
+						value2: T.value.length
+					}) : ""
+				}),
+				actions: [{
+					key: "cancel-employment-role-grants",
+					label: n.t("platform.action.cancel", "取消"),
+					disabled: p.value,
+					run: () => i("close")
+				}, {
+					key: "save-employment-role-grants",
+					label: n.t("platform.screen.RoleAccountGrantDrawer.confirm", "确定"),
+					emphasis: "primary",
+					disabled: f.value || w.value.length === 0 && T.value.length === 0,
+					loading: p.value,
+					run: () => void ne()
+				}]
+			}));
+		}
+		async function A(e = 1) {
+			let t = y.value;
+			if (t) {
+				f.value = !0, m.value = !1;
+				try {
+					let [n, r] = await Promise.all([b.value.employmentRoleGrants(t), b.value.employmentSelector(t, {
+						enabledOnly: !0,
+						page: {
+							pageNum: e,
+							pageSize: 50
+						}
+					})]);
+					a.value = n, l.value = new Set(n.map((e) => e.employeePositionId).filter((e) => !!e)), s.value = {
+						...s.value,
+						...se(r.records)
+					}, d.value ||= (c.value = new Set(l.value), !0), o.value = r.records, h.value = r.pageNum, g.value = r.total;
+				} catch (e) {
+					m.value = !0, F(e, {
+						language: n,
+						source: "role-employment-grants",
+						phase: "load"
+					});
+				} finally {
+					f.value = !1;
+				}
+			}
+		}
+		async function ne() {
+			let e = y.value;
+			if (e) {
+				p.value = !0;
+				try {
+					for (let t of w.value) await b.value.grantEmploymentRole(e, t);
+					for (let t of T.value) {
+						let n = E.value.get(t)?.id;
+						n && await b.value.deleteEmploymentRoleGrant(e, n);
+					}
+					await ue({
+						success: !0,
+						message: n.t("platform.screen.RoleEmploymentGrantDrawer.position-role-assignments-saved", "任职角色授权已保存")
+					}, {
+						language: n,
+						source: "role-employment-grants",
+						phase: "action"
+					}), i("saved"), i("close");
+				} catch (e) {
+					F(e, {
+						language: n,
+						source: "role-employment-grants",
+						phase: "action"
+					});
+				} finally {
+					p.value = !1;
+				}
+			}
+		}
+		function re() {
+			a.value = [], o.value = [], s.value = {}, c.value = /* @__PURE__ */ new Set(), l.value = /* @__PURE__ */ new Set(), d.value = !1, v.value = "", h.value = 1, g.value = 0, m.value = !1;
+		}
+		function ie(e) {
+			return [
+				e.employeeTitle,
+				e.employeeNo,
+				e.organizationTitle,
+				e.departmentTitle,
+				e.positionTitle
+			].filter(Boolean).join(" ");
+		}
+		function ae(e) {
+			let t = new Set(c.value);
+			t.delete(e), c.value = t;
+		}
+		function se(e) {
+			let t = {};
+			for (let n of e) n.id && (t[n.id] = n);
+			return t;
+		}
+		function j(e) {
+			return {
+				id: e,
+				positionId: e
+			};
+		}
+		function M(e) {
+			let t = e.positionTitle ?? e.positionId ?? e.id;
+			return e.employeeTitle ? `${e.employeeTitle} · ${t}` : t;
+		}
+		function ce(e) {
+			return [
+				e.employeeNo,
+				e.organizationTitle ?? e.organizationId,
+				e.departmentTitle ?? e.departmentId
+			].filter(Boolean).join(" / ") || e.id;
+		}
+		function N(e) {
+			return e?.ownerScopeType === "platform" ? n.t("platform.screen.RoleAuthorizationView.platform-scope", "平台范围") : e?.ownerScopeType === "organization" ? n.t("platform.screen.RoleAuthorizationView.organization-scope", "机构范围") : n.t("platform.screen.RoleAuthorizationView.tenant-scope", "租户范围");
+		}
+		return (t, r) => (q(), B(Ie(S.value), Ee(ee.value, { class: { "role-employment-grant-drawer-surface": e.embedded } }), Ce({
+			default: Q(() => [f.value ? (q(), B(X(de), {
+				key: 0,
+				tip: X(n).t("platform.screen.RoleEmploymentGrantDrawer.loading-positions", "加载任职")
+			}, null, 8, ["tip"])) : m.value ? (q(), H("div", vn, [G(X(oe), {
+				title: X(n).t("platform.screen.RoleEmploymentGrantDrawer.failed-to-load-positions", "任职加载失败"),
+				message: X(n).t("platform.screen.RoleEmploymentGrantDrawer.failed-to-load-position-assignments", "无法加载任职授权")
+			}, null, 8, ["title", "message"]), G(X(_), { onClick: r[1] ||= (e) => A() }, {
+				default: Q(() => [W(Y(X(n).t("platform.screen.WorkflowWorkbenchView.retry", "重试")), 1)]),
+				_: 1
+			})])) : (q(), H("section", yn, [
+				G(X(u), {
+					value: v.value,
+					"onUpdate:value": r[2] ||= (e) => v.value = e,
+					"allow-clear": "",
+					placeholder: X(n).t("platform.screen.RoleEmploymentGrantDrawer.filter-by-employee-employee-number-organization-department-or-position", "筛选职员、工号、机构、部门或岗位")
+				}, null, 8, ["value", "placeholder"]),
+				G(_n, {
+					"selected-ids": c.value,
+					"onUpdate:selectedIds": r[3] ||= (e) => c.value = e,
+					rows: te.value,
+					selectable: "",
+					disabled: p.value,
+					pagination: O.value,
+					"fill-height": ""
+				}, null, 8, [
+					"selected-ids",
+					"rows",
+					"disabled",
+					"pagination"
+				]),
+				D.value.length > 0 ? (q(), H("section", bn, [U("div", xn, [U("strong", null, Y(X(n).t("platform.screen.RoleEmploymentGrantDrawer.selected-positions", "已选任职")), 1), U("span", null, Y(D.value.length), 1)]), U("div", Sn, [(q(!0), H(R, null, Pe(D.value, (e) => (q(), H("button", {
+					key: e.id,
+					type: "button",
+					disabled: p.value,
+					onClick: (t) => ae(e.id)
+				}, [U("span", null, Y(M(e)), 1), U("small", null, Y(ce(e)), 1)], 8, Cn))), 128))])])) : V("v-if", !0)
+			]))]),
+			_: 2
+		}, [e.embedded ? void 0 : {
+			name: "operation",
+			fn: Q(() => [G(X(_), {
+				disabled: p.value,
+				onClick: r[0] ||= (e) => i("close")
+			}, {
+				default: Q(() => [W(Y(X(n).t("platform.action.cancel", "取消")), 1)]),
+				_: 1
+			}, 8, ["disabled"]), G(X(_), {
+				type: "primary",
+				loading: p.value,
+				disabled: f.value || w.value.length === 0 && T.value.length === 0,
+				onClick: ne
+			}, {
+				default: Q(() => [W(Y(X(n).t("platform.screen.RoleAccountGrantDrawer.confirm", "确定")), 1)]),
+				_: 1
+			}, 8, ["loading", "disabled"])]),
+			key: "0"
+		}]), 1040, ["class"]));
+	}
+}), [["__scopeId", "data-v-4736da9f"]]), Tn = /* @__PURE__ */ K({
+	name: "RoleEmploymentGrantDrawerSurface",
+	__name: "RoleEmploymentGrantDrawerSurface",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = z(() => t.context.module), r = z(() => t.context.record);
+		return (e, i) => (q(), B(wn, {
+			open: "",
+			embedded: "",
+			"drawer-context": t.context,
+			context: n.value,
+			role: r.value,
+			onClose: t.context.close,
+			onSaved: t.context.refreshList
+		}, null, 8, [
+			"drawer-context",
+			"context",
+			"role",
+			"onClose",
+			"onSaved"
+		]));
+	}
+}), En = /* @__PURE__ */ K({
+	name: "WorkspaceViewDrawer",
+	__name: "WorkspaceViewDrawer",
+	props: {
+		open: { type: Boolean },
+		title: {},
+		container: {},
+		subtitle: { default: void 0 },
+		profile: { default: "detail" },
+		promotion: { default: void 0 },
+		dismissal: { default: void 0 },
+		beforeClose: {
+			type: Function,
+			default: void 0
+		}
+	},
+	emits: ["close"],
+	setup(e, { emit: t }) {
+		let n = e, r = t, i = z(() => n.profile === "wide-work" ? "wide" : "standard");
+		return (t, n) => (q(), B(X(C), {
+			open: e.open,
+			title: e.title,
+			"render-mode": e.container ? "inline" : "portal",
+			subtitle: e.subtitle,
+			width: i.value,
+			promotion: e.promotion,
+			dismissal: e.dismissal,
+			"before-close": e.beforeClose,
+			onClose: n[0] ||= (e) => r("close")
+		}, Ce({
+			default: Q(() => [Fe(t.$slots, "default")]),
+			_: 2
+		}, [t.$slots.operation ? {
+			name: "operation",
+			fn: Q(() => [Fe(t.$slots, "operation")]),
+			key: "0"
+		} : void 0]), 1032, [
+			"open",
+			"title",
+			"render-mode",
+			"subtitle",
+			"width",
+			"promotion",
+			"dismissal",
+			"before-close"
+		]));
+	}
+});
+//#endregion
+//#region src/platform-admin-runtime/useWorkspaceViewPromotion.ts
+function Dn(e) {
+	return e.hasStableIdentity && e.busy !== !0 && e.canChangeHost !== !1;
+}
+function On(e) {
+	let t = i(), n = P();
+	return z(() => {
+		let r = Re(e.input);
+		if (r && Dn(Re(e.eligibility)) && t) return {
+			title: n.t("platform.workspace-view.pin-as-tab", "固定为页签"),
+			promote: async () => {
+				if (await e.beforePromote?.(r) === !1) {
+					e.onPromotionRejected?.();
+					return;
+				}
+				let i = t.openPage(o(e.view, r, "tab", Re(e.title), n));
+				e.onPromoted?.(i);
+			}
+		};
+	});
+}
+//#endregion
+//#region src/platform-admin-runtime/workspaceViewSessions.ts
+var kn = /* @__PURE__ */ new Map(), An = /* @__PURE__ */ new Map();
+function jn(e, t) {
+	return `${e.type}:${Fn(t)}`;
+}
+async function Mn(e, t, n) {
+	let r = jn(e, t), i = An.get(r), a = i && [...i].at(-1);
+	return a ? await a(In(n)) ? "accepted" : "rejected" : (kn.set(r, In(n)), "accepted");
+}
+function Nn(e, t, n) {
+	let r = jn(e, t), i = An.get(r) ?? /* @__PURE__ */ new Set();
+	return i.add(n), An.set(r, i), () => {
+		i.delete(n), i.size === 0 && An.delete(r);
+	};
+}
+function Pn(e, t) {
+	let n = jn(e, t), r = kn.get(n);
+	return kn.delete(n), r;
+}
+function Fn(e) {
+	return Array.isArray(e) ? `[${e.map(Fn).join(",")}]` : e && typeof e == "object" ? `{${Object.entries(e).sort(([e], [t]) => e.localeCompare(t)).map(([e, t]) => `${JSON.stringify(e)}:${Fn(t)}`).join(",")}}` : JSON.stringify(e);
+}
+function In(e) {
+	return JSON.parse(JSON.stringify(e));
+}
+//#endregion
+//#region src/views/roleAuthorizationWorkspaceSession.ts
+function Ln(e, t) {
+	return Mn(Ue, e, t);
+}
+function Rn(e, t) {
+	return Nn(Ue, e, t);
+}
+function zn(e) {
+	return Pn(Ue, e);
+}
+//#endregion
+//#region src/views/RoleAuthorizationView.vue?vue&type=script&setup=true&lang.ts
+var Bn = { class: "panel-title" }, Vn = {
+	key: 0,
+	class: "authorization-column-header"
+}, Hn = {
+	key: 2,
+	class: "data-scope-editor"
+}, Un = { key: 0 }, Wn = { key: 1 }, Gn = { key: 3 }, Kn = {
+	key: 4,
+	class: "not-applicable"
+}, qn = /*@__PURE__*/ K({
+	name: "RoleAuthorizationView",
+	__name: "RoleAuthorizationView",
+	props: {
+		roleId: {},
+		moduleContext: {},
+		container: {},
+		drawer: { type: Boolean },
+		drawerContext: {}
+	},
+	emits: ["close"],
+	setup(e, { emit: t }) {
+		let n = P(), r = e, i = t, o = se({ moduleAlias: "iam.role" }), s = r.moduleContext ?? o, c = an(s.http), l = r.roleId ?? new URLSearchParams(window.location.search).get("roleId") ?? "", u = a(), d = r.roleId ? { roleId: r.roleId } : void 0, m = d ? zn(d) : void 0, h = J(), g = J([]), y = J(), b = J(""), S = J([]), C = J(), w = J(), D = J(!1), O = J(!1), k = J(!1), A = Le(), ae = z(() => A.value ? te(A.value, n) : void 0), j = J(), M = /* @__PURE__ */ new Map(), I = /* @__PURE__ */ new Map(), le = J(0), pe, he = z(() => h.value?.roleKind === "group"), ge = z(() => h.value?.roleKind === "dataGrant"), L = z(() => h.value?.assignmentType === "employment"), _e = z(() => !!r.drawerContext), ve = z(() => (h.value && re(h.value, "title", n)) ?? l ?? n.t("platform.screen.RoleManagementView.role", "角色")), ye = z(() => n.t("platform.screen.RoleAuthorizationView.permissions-value", "授权：{value1}", { value1: ve.value })), be = z(() => xe.value ? n.t("platform.screen.RoleAuthorizationView.action-permissions-value", "动作授权 - {value1}", { value1: xe.value.title }) : n.t("platform.screen.RoleAuthorizationView.action-permissions-value", "动作授权 - {value1}", { value1: ve.value })), xe = z(() => g.value.find((e) => e.moduleAlias === y.value)), Se = z(() => {
+			let e = b.value.trim().toLocaleLowerCase(), t = new Set(e ? g.value.filter((t) => [
+				t.title,
+				t.moduleAlias,
+				t.applicationAlias
+			].filter((e) => !!e).some((t) => t.toLocaleLowerCase().includes(e))).map((e) => e.moduleAlias) : g.value.map((e) => e.moduleAlias)), n = new Map(g.value.map((e) => [e.moduleAlias, e]));
+			for (let e of [...t]) {
+				let r = n.get(e)?.parentId;
+				for (; r && n.has(r) && !t.has(r);) t.add(r), r = n.get(r)?.parentId;
+			}
+			return g.value.filter((e) => t.has(e.moduleAlias)).map((e) => ({
+				id: e.moduleAlias,
+				parentId: e.parentId,
+				title: e.title,
+				secondary: e.applicationAlias
+			}));
+		}), we = z(() => (w.value?.options ?? []).map((e) => ({
+			value: e.code,
+			label: e.title
+		}))), K = z(() => (w.value?.referenceDependencies ?? []).map((e) => ({
+			value: e.referenceFieldId,
+			label: `${e.title} → ${e.targetModuleTitle}`
+		}))), Ee = z(() => new Map((w.value?.referenceDependencies ?? []).map((e) => [e.referenceFieldId, e]))), De = z(() => L.value && S.value.some((e) => !!e.dataAuth)), Me = z(() => [
+			{
+				key: "title",
+				title: n.t("platform.governance.tab.actions", "动作"),
+				width: 160
+			},
+			{
+				key: "granted",
+				title: n.t("platform.page-action.MANAGE_PERMISSIONS.title", "授权"),
+				width: 104,
+				align: "center"
+			},
+			...De.value ? [{
+				key: "dataScopePolicy",
+				title: n.t("platform.screen.RoleAuthorizationView.data-scope", "数据范围"),
+				width: 200
+			}] : []
+		]), Ne = z(() => [
+			{
+				key: "title",
+				title: n.t("platform.screen.RoleAuthorizationView.standard-action", "标准动作"),
+				width: 130
+			},
+			{
+				key: "configured",
+				title: n.t("platform.screen.RoleAuthorizationView.enable-template", "启用模板"),
+				width: 104,
+				align: "center"
+			},
+			{
+				key: "dataScopePolicy",
+				title: n.t("platform.screen.RoleAuthorizationView.data-scope", "数据范围"),
+				width: 160
+			}
+		]), Pe = z(() => S.value), Fe = z(() => C.value?.actions ?? []), Re = z(() => r.drawer === !0 || !!d && u?.presentation === "drawer"), ze = z(() => !!d), Be = z(() => ze.value && !_e.value), Ve = z(() => _e.value ? "div" : Re.value ? En : ze.value ? T : "div"), He = z(() => Re.value ? {
+			open: !0,
+			title: ye.value,
+			container: r.container ?? null,
+			profile: Ue.drawerProfile,
+			promotion: Ye.value,
+			dismissal: "guarded",
+			beforeClose: ft,
+			onClose: pt
+		} : Be.value ? { title: ye.value } : {}), We = z(() => {
+			let e = C.value;
+			return !e || j.value === void 0 ? !1 : JSON.stringify(e.actions) !== j.value;
+		}), Ge = z(() => le.value >= 0 && [...M.entries()].some(([e, t]) => I.get(e) !== JSON.stringify(t))), $ = z(() => We.value || Ge.value);
+		ie(() => n.t("platform.unsaved-source.RoleAuthorizationView", "角色授权"), () => $.value, () => k.value);
+		let Ke = z(() => S.value.length > 0 && S.value.every((e) => e.granted)), qe = z(() => S.value.some((e) => e.granted) && !Ke.value), Je = z(() => {
+			let e = xe.value?.title ?? n.t("platform.screen.RoleAuthorizationView.no-module-selected", "未选择模块"), t = S.value.filter((e) => e.granted).length, r = $.value ? n.t("platform.screen.ConstructionPlanCard.unconfirmed-changes", "有未确认修改") : n.t("platform.screen.RoleAuthorizationView.unchanged", "未修改");
+			return n.t("platform.screen.RoleAuthorizationView.current-module-value-value-value-actions-granted-value", "当前模块：{value1} · 已授权 {value2}/{value3} 项 · {value4}", {
+				value1: e,
+				value2: t,
+				value3: S.value.length,
+				value4: r
+			});
+		}), Ye = On({
+			view: Ue,
+			input: () => d,
+			title: ye,
+			eligibility: () => ({
+				hasStableIdentity: !!(l && h.value),
+				busy: k.value
+			}),
+			beforePromote: (e) => Ln(e, {
+				selectedModuleAlias: y.value,
+				dataGrantMatrix: C.value,
+				actionDrafts: [...M.entries()].map(([e, t]) => ({
+					moduleAlias: e,
+					actions: t
+				})),
+				actionSnapshots: [...I.entries()].map(([e, t]) => ({
+					moduleAlias: e,
+					snapshot: t
+				}))
+			}).then((e) => e === "accepted"),
+			onPromoted: mt,
+			onPromotionRejected: () => N(n.t("platform.screen.RoleAuthorizationView.the-target-tab-has-unconfirmed-permission-changes-confirm-or-close", "目标页签存在未确认的授权配置；请先确认或关闭该页签后再固定当前抽屉。"), {
+				language: n,
+				source: "role-authorization",
+				phase: "validation"
+			})
+		});
+		je(() => {
+			d && !Re.value && (pe = Rn(d, ht)), Ze();
+		}), Z(ye, (e) => {
+			ze.value && u?.setTitle(e);
+		}, { immediate: !0 }), Z(y, () => void Qe()), Z([
+			ve,
+			Je,
+			$,
+			k,
+			he,
+			ge
+		], Xe, { immediate: !0 }), je(() => window.addEventListener("beforeunload", _t)), Ae(() => {
+			pe?.(), r.drawerContext?.setOperation(void 0), r.drawerContext?.setSubtitle(void 0), window.removeEventListener("beforeunload", _t);
+		});
+		function Xe() {
+			let e = r.drawerContext;
+			if (e) {
+				if (e.setSubtitle(`${ve.value} · ${vt(h.value)}`), he.value) {
+					e.setOperation(void 0);
+					return;
+				}
+				e.setOperation({
+					summary: ge.value ? $.value ? n.t("platform.screen.ConstructionPlanCard.unconfirmed-changes", "有未确认修改") : n.t("platform.screen.RoleAuthorizationView.unchanged", "未修改") : Je.value,
+					actions: [{
+						key: "confirm-role-authorization",
+						label: n.t("platform.screen.UiModal.confirmText", "确认"),
+						emphasis: "primary",
+						disabled: k.value || !$.value,
+						loading: k.value,
+						run: () => void dt()
+					}]
+				});
+			}
+		}
+		async function Ze() {
+			if (!l) {
+				A.value = new f(fe(n, "platform.screen.RoleAuthorizationView.the-role-id-is-missing-cannot-open-the-permissions-page", "缺少角色标识，无法打开授权页。"));
+				return;
+			}
+			D.value = !0, A.value = void 0;
+			try {
+				if (h.value = await s.crud.view(l), h.value.roleKind === "group") return;
+				if (h.value.roleKind === "dataGrant") {
+					let [e, t] = await Promise.all([c.dataGrantActionMatrix(l), c.dataScopePolicyCatalog(l)]);
+					C.value = m?.dataGrantMatrix ?? e, w.value = t, j.value = JSON.stringify(e.actions);
+					return;
+				}
+				g.value = (await c.authorizationModules(l)).records, y.value = m?.selectedModuleAlias ?? g.value[0]?.moduleAlias;
+			} catch (e) {
+				A.value = new f(fe(n, "platform.screen.RoleAuthorizationView.failed-to-load-permission-information-try-again", "授权信息加载失败，请重试。")), F(e, {
+					language: n,
+					source: "role-authorization",
+					phase: "load"
+				});
+			} finally {
+				D.value = !1;
+			}
+		}
+		async function Qe() {
+			let e = y.value;
+			if (!(!e || ge.value || he.value)) {
+				O.value = !0;
+				try {
+					let [t, n] = await Promise.all([c.permissionMatrix(l, [e]), c.dataScopePolicyCatalog(l, e)]), r = (t.modules[0]?.actions ?? []).map(ct), i = m?.actionDrafts?.find((t) => t.moduleAlias === e)?.actions, a = M.get(e) ?? i;
+					S.value = a ?? r, M.has(e) || (M.set(e, S.value), I.set(e, m?.actionSnapshots?.find((t) => t.moduleAlias === e)?.snapshot ?? JSON.stringify(r))), le.value += 1, w.value = n;
+				} catch (e) {
+					F(e, {
+						language: n,
+						source: "role-authorization",
+						phase: "load"
+					});
+				} finally {
+					O.value = !1;
+				}
+			}
+		}
+		function $e(e, t) {
+			t && e.dataAuth && L.value && !e.dataScopePolicy && (e.dataScopePolicy = "inheritDataGrant"), t && e.dataScopePolicy === "referenceDependency" && !e.referenceFieldId && (e.dataScopePolicy = "inheritDataGrant"), e.granted = t, le.value += 1;
+		}
+		function et(e) {
+			S.value.forEach((t) => $e(t, e));
+		}
+		function tt(e, t) {
+			if (e.dataScopePolicy = String(t || "none"), e.dataScopePolicy === "referenceDependency") {
+				e.referenceFieldId = void 0, e.referenceActionCode = void 0, le.value += 1;
+				return;
+			}
+			e.referenceFieldId = void 0, e.referenceActionCode = void 0, le.value += 1;
+		}
+		function nt(e, t) {
+			let n = Ee.value.get(String(t || ""));
+			e.referenceFieldId = n?.referenceFieldId, e.referenceActionCode = n?.referenceActionCode, le.value += 1;
+		}
+		function rt(e) {
+			return Ee.value.get(String(e || ""));
+		}
+		function it(e) {
+			return typeof e == "string" || typeof e == "number" ? e : void 0;
+		}
+		function at(e) {
+			return e.dataScopePolicy ?? "inheritDataGrant";
+		}
+		function ot(e) {
+			return !!e.dataAuth && L.value;
+		}
+		function st(e, t) {
+			return e.key === "dataScopePolicy" && ot(t);
+		}
+		function ct(e) {
+			return L.value && e.dataAuth && e.dataScopePolicy === "none" ? {
+				...e,
+				dataScopePolicy: "inheritDataGrant"
+			} : e;
+		}
+		async function lt() {
+			if (C.value) {
+				k.value = !0;
+				try {
+					let e = await c.replaceDataGrantActions(l, C.value.actions.map((e) => ({
+						actionCode: e.actionCode,
+						dataScopePolicy: e.dataScopePolicy,
+						enabled: e.configured
+					})));
+					await ue(e, {
+						language: n,
+						source: "role-authorization",
+						phase: "action",
+						fallbackMessage: n.t("platform.screen.RoleAuthorizationView.data-permission-template-saved", "数据权限模板已保存")
+					}), j.value = JSON.stringify(C.value.actions);
+				} catch (e) {
+					F(e, {
+						language: n,
+						source: "role-authorization",
+						phase: "action"
+					});
+				} finally {
+					k.value = !1;
+				}
+			}
+		}
+		async function ut() {
+			let e = [...M.entries()].filter(([e, t]) => I.get(e) !== JSON.stringify(t));
+			if (e.length) {
+				k.value = !0;
+				try {
+					let t = await c.replacePermissionMatrix(l, e.flatMap(([e, t]) => t.map((t) => ({
+						moduleAlias: e,
+						actionCode: t.actionCode,
+						granted: !!t.granted,
+						dataScopePolicy: t.granted && t.dataAuth && L.value ? t.dataScopePolicy ?? "inheritDataGrant" : void 0,
+						referenceFieldId: t.granted && t.dataScopePolicy === "referenceDependency" ? t.referenceFieldId : void 0,
+						referenceActionCode: t.granted && t.dataScopePolicy === "referenceDependency" ? t.referenceActionCode : void 0
+					}))));
+					await ue(t, {
+						language: n,
+						source: "role-authorization",
+						phase: "action",
+						fallbackMessage: n.t("platform.screen.RoleAuthorizationView.role-permissions-saved", "角色授权已保存")
+					}), e.forEach(([e, t]) => I.set(e, JSON.stringify(t))), le.value += 1;
+				} catch (e) {
+					F(e, {
+						language: n,
+						source: "role-authorization",
+						phase: "action"
+					});
+				} finally {
+					k.value = !1;
+				}
+			}
+		}
+		async function dt() {
+			if (ge.value) {
+				await lt();
+				return;
+			}
+			await ut();
+		}
+		async function ft() {
+			return !$.value || ce({
+				title: n.t("platform.screen.RoleAuthorizationView.discard-unconfirmed-permission-changes", "放弃未确认的授权配置"),
+				content: n.t("platform.screen.RoleAuthorizationView.these-changes-have-not-been-confirmed-and-will-be-lost", "当前修改尚未确认，关闭后将丢失这些修改。"),
+				okText: n.t("platform.screen.WorkflowWorkbenchView.discard-changes", "放弃修改"),
+				danger: !0
+			}, n);
+		}
+		function pt() {
+			gt();
+		}
+		function mt() {
+			gt();
+		}
+		function ht(e) {
+			return !$.value && (y.value = e.selectedModuleAlias, C.value = e.dataGrantMatrix, M.clear(), I.clear(), e.actionDrafts?.forEach(({ moduleAlias: e, actions: t }) => M.set(e, t)), e.actionSnapshots?.forEach(({ moduleAlias: e, snapshot: t }) => I.set(e, t)), le.value += 1, !0);
+		}
+		function gt() {
+			if (r.drawer === !0) {
+				i("close");
+				return;
+			}
+			u?.dismiss();
+		}
+		function _t(e) {
+			$.value && (e.preventDefault(), e.returnValue = "");
+		}
+		function vt(e) {
+			return e?.ownerScopeType === "platform" ? n.t("platform.screen.RoleAuthorizationView.platform-scope", "平台范围") : e?.ownerScopeType === "organization" ? n.t("platform.screen.RoleAuthorizationView.organization-scope", "机构范围") : n.t("platform.screen.RoleAuthorizationView.tenant-scope", "租户范围");
+		}
+		return (e, t) => (q(), B(Ie(Ve.value), ke(Te(He.value)), Ce({
+			default: Q(() => [U("section", { class: Oe(["role-authorization-page", { "role-authorization-page--drawer": Re.value || _e.value }]) }, [D.value ? (q(), B(X(de), {
+				key: 0,
+				tip: X(n).t("platform.screen.RoleAuthorizationView.loading-permissions", "加载授权信息")
+			}, null, 8, ["tip"])) : ae.value ? (q(), B(X(oe), {
+				key: 1,
+				title: X(n).t("platform.screen.RoleAuthorizationView.failed-to-load-the-permissions-page", "授权页加载失败"),
+				message: ae.value
+			}, null, 8, ["title", "message"])) : he.value ? (q(), B(X(p), {
+				key: 2,
+				title: X(n).t("platform.screen.RoleAuthorizationView.role-groups-do-not-have-separate-permissions", "角色组不独立授权"),
+				description: X(n).t("platform.screen.RoleAuthorizationView.role-groups-combine-their-member-roles-configure-action-and-data", "角色组只组合成员角色；请到成员角色分别配置动作和数据权限。")
+			}, null, 8, ["title", "description"])) : ge.value && C.value ? (q(), B(X(x), {
+				key: 3,
+				class: "data-grant-content",
+				title: Be.value ? X(n).t("platform.screen.RoleAuthorizationView.data-permission-template", "数据权限模板") : X(n).t("platform.screen.RoleAuthorizationView.data-permission-template-value", "数据权限模板 - {value1}", { value1: ve.value }),
+				searchable: !1,
+				onRefresh: Ze
+			}, {
+				default: Q(() => [U("header", Bn, [U("div", null, [U("h3", null, Y(X(n).t("platform.screen.RoleAuthorizationView.data-scope-templates-for-standard-actions", "标准动作的数据范围模板")), 1), U("p", null, Y(X(n).t("platform.screen.RoleAuthorizationView.a-template-takes-effect-only-when-a-standard-role-action", "模板只会在具体任职的普通角色动作选择“继承数据授权角色”时生效。")), 1)]), ze.value ? V("v-if", !0) : (q(), B(X(_), {
+					key: 0,
+					type: "primary",
+					disabled: !$.value,
+					loading: k.value,
+					onClick: dt
+				}, {
+					default: Q(() => [W(Y(X(n).t("platform.screen.UiModal.confirmText", "确认")), 1)]),
+					_: 1
+				}, 8, ["disabled", "loading"]))]), G(X(E), {
+					columns: Ne.value,
+					rows: Fe.value,
+					"row-key": "actionCode",
+					"horizontal-scroll": ""
+				}, {
+					cell: Q(({ column: e, record: t }) => [e.key === "title" ? (q(), H(R, { key: 0 }, [U("strong", null, Y(t.title || t.actionCode), 1), U("small", null, Y(t.actionCode), 1)], 64)) : e.key === "configured" ? (q(), B(X(ee), {
+						key: 1,
+						checked: !!t.configured,
+						disabled: k.value,
+						onChange: (e) => t.configured = e
+					}, null, 8, [
+						"checked",
+						"disabled",
+						"onChange"
+					])) : (q(), B(X(ne), {
+						key: 2,
+						value: t.dataScopePolicy,
+						options: we.value,
+						disabled: !t.configured || k.value,
+						placeholder: X(n).t("platform.screen.RoleAuthorizationView.select-a-data-scope", "请选择数据范围"),
+						"allow-clear": !1,
+						"onUpdate:value": (e) => t.dataScopePolicy = String(e || "")
+					}, null, 8, [
+						"value",
+						"options",
+						"disabled",
+						"placeholder",
+						"onUpdate:value"
+					]))]),
+					_: 1
+				}, 8, ["columns", "rows"])]),
+				_: 1
+			}, 8, ["title"])) : (q(), H("section", {
+				key: 4,
+				class: Oe(["authorization-layout", { "authorization-layout--compact-actions": !De.value }])
+			}, [G(X(x), {
+				"search-keyword": b.value,
+				"onUpdate:searchKeyword": t[1] ||= (e) => b.value = e,
+				class: "module-panel",
+				title: X(n).t("platform.screen.RoleAuthorizationView.module-tree", "模块树"),
+				"refresh-title": X(n).t("platform.screen.RoleAuthorizationView.refresh-module-directory", "刷新模块目录"),
+				"search-placeholder": X(n).t("platform.screen.RoleAuthorizationView.search-module-names-or-aliases", "搜索模块名称或别名"),
+				onRefresh: Ze
+			}, {
+				default: Q(() => [G(X(me), {
+					records: Se.value,
+					"selected-id": y.value,
+					onSelect: t[0] ||= (e) => y.value = e.id
+				}, null, 8, ["records", "selected-id"])]),
+				_: 1
+			}, 8, [
+				"search-keyword",
+				"title",
+				"refresh-title",
+				"search-placeholder"
+			]), G(X(x), {
+				class: "action-panel",
+				title: be.value,
+				searchable: !1
+			}, Ce({
+				default: Q(() => [O.value ? (q(), B(X(de), {
+					key: 0,
+					tip: X(n).t("platform.screen.RoleAuthorizationView.loading-module-actions", "加载模块动作")
+				}, null, 8, ["tip"])) : y.value ? (q(), B(X(E), {
+					key: 2,
+					columns: Me.value,
+					rows: Pe.value,
+					"row-key": "actionCode",
+					"fill-height": "",
+					"horizontal-scroll": ""
+				}, {
+					header: Q(({ column: e }) => [e.key === "granted" ? (q(), H("span", Vn, [G(X(v), {
+						checked: Ke.value,
+						indeterminate: qe.value,
+						disabled: k.value || !S.value.length,
+						"aria-label": X(n).t("platform.screen.RoleAuthorizationView.grant-all-actions-in-the-current-module", "全选当前模块动作授权"),
+						onChange: et
+					}, null, 8, [
+						"checked",
+						"indeterminate",
+						"disabled",
+						"aria-label"
+					]), W(" " + Y(X(n).t("platform.page-action.MANAGE_PERMISSIONS.title", "授权")), 1)])) : (q(), H(R, { key: 1 }, [W(Y(e.title), 1)], 64))]),
+					cell: Q(({ column: e, record: t }) => [e.key === "title" ? (q(), H(R, { key: 0 }, [U("strong", null, Y(t.title || t.actionCode), 1), U("small", null, Y(t.permissionActionCode || t.actionCode), 1)], 64)) : e.key === "granted" ? (q(), B(X(v), {
+						key: 1,
+						checked: !!t.granted,
+						disabled: k.value,
+						onChange: (e) => $e(t, e)
+					}, null, 8, [
+						"checked",
+						"disabled",
+						"onChange"
+					])) : t.dataAuth && L.value && t.granted ? (q(), H("div", Hn, [G(X(ne), {
+						value: at(t),
+						options: we.value,
+						disabled: k.value,
+						"allow-clear": !1,
+						"onUpdate:value": (e) => tt(t, e)
+					}, null, 8, [
+						"value",
+						"options",
+						"disabled",
+						"onUpdate:value"
+					]), t.dataScopePolicy === "referenceDependency" ? (q(), H(R, { key: 0 }, [G(X(ne), {
+						value: it(t.referenceFieldId),
+						options: K.value,
+						disabled: k.value,
+						placeholder: X(n).t("platform.screen.RoleAuthorizationView.select-a-reference-field", "请选择引用字段"),
+						"allow-clear": !1,
+						"onUpdate:value": (e) => nt(t, e)
+					}, null, 8, [
+						"value",
+						"options",
+						"disabled",
+						"placeholder",
+						"onUpdate:value"
+					]), t.referenceFieldId ? (q(), H("small", Un, Y(X(n).t("platform.screen.RoleAuthorizationView.dependency-target", "依赖目标：")) + Y(rt(t.referenceFieldId)?.targetModuleTitle) + " · " + Y(rt(t.referenceFieldId)?.referenceActionTitle), 1)) : (q(), H("small", Wn, Y(X(n).t("platform.screen.RoleAuthorizationView.select-a-reference-field-before-granting-this-action", "请先选择引用字段，再开启该动作授权。")), 1))], 64)) : V("v-if", !0)])) : st(e, t) ? (q(), H("span", Gn, "—")) : (q(), H("span", Kn, Y(X(n).t("platform.screen.RoleAuthorizationView.not-applicable", "不适用")), 1))]),
+					_: 1
+				}, 8, ["columns", "rows"])) : (q(), B(X(p), {
+					key: 1,
+					title: X(n).t("platform.screen.useModulePageSession.select-a-module", "请选择模块")
+				}, null, 8, ["title"]))]),
+				_: 2
+			}, [ze.value ? void 0 : {
+				name: "actions",
+				fn: Q(() => [G(X(_), {
+					type: "primary",
+					disabled: !$.value,
+					loading: k.value,
+					onClick: dt
+				}, {
+					default: Q(() => [W(Y(X(n).t("platform.screen.UiModal.confirmText", "确认")), 1)]),
+					_: 1
+				}, 8, ["disabled", "loading"])]),
+				key: "0"
+			}]), 1032, ["title"])], 2))], 2)]),
+			_: 2
+		}, [Be.value && !he.value ? {
+			name: "operation",
+			fn: Q(() => [G(X(_), {
+				type: "primary",
+				disabled: !$.value,
+				loading: k.value,
+				onClick: dt
+			}, {
+				default: Q(() => [W(Y(X(n).t("platform.screen.UiModal.confirmText", "确认")), 1)]),
+				_: 1
+			}, 8, ["disabled", "loading"])]),
+			key: "0"
+		} : void 0]), 1040));
+	}
+}), Jn = /* @__PURE__ */ e({ default: () => Yn }), Yn = /*#__PURE__*/ I(qn, [["__scopeId", "data-v-817d8433"]]), Xn = { class: "role-authorization-drawer-surface" }, Zn = /*#__PURE__*/ I(/* @__PURE__ */ K({
+	name: "RoleAuthorizationDrawerSurface",
+	__name: "RoleAuthorizationDrawerSurface",
+	props: { context: {} },
+	setup(e) {
+		let t = e, n = t.context.module;
+		return (e, r) => (q(), H("section", Xn, [t.context.record?.id == null ? V("v-if", !0) : (q(), B(Yn, {
+			key: 0,
+			"role-id": String(t.context.record.id),
+			"module-context": X(n),
+			"drawer-context": t.context
+		}, null, 8, [
+			"role-id",
+			"module-context",
+			"drawer-context"
+		]))]));
+	}
+}), [["__scopeId", "data-v-04d29709"]]), Qn = {
+	key: 0,
+	class: "role-group-member-form-field"
+}, $n = {
+	id: "iam-role-scope-and-actions",
+	target: { moduleAlias: "iam.role" },
+	navigator: {
+		bypassListScope: !0,
+		extension: {
+			key: "iam-role-scope-tree",
+			component: nn,
+			selection: { kind: "roleScope" }
+		}
+	},
+	list: { cellComponents: [
+		{
+			key: "assignmentType",
+			cell: rn
+		},
+		{
+			key: "roleKind",
+			cell: rn
+		},
+		{
+			key: "sharePolicy",
+			cell: rn
+		}
+	] },
+	form: {
+		contributions: [{
+			key: "role-group-members",
+			component: /* @__PURE__ */ I(/* @__PURE__ */ K({
+				name: "RoleGroupMemberFormField",
+				__name: "RoleGroupMemberFormField",
+				props: { context: {} },
+				setup(e) {
+					let t = P(), n = e, r = J([]), i = J(!1), a = z(() => n.context.draft.roleKind === "group"), o = z(() => f(n.context.draft.memberRoleIds)), s = z(() => String(n.context.draft.id ?? "") || void 0), c = z(() => new Set(r.value.filter((e) => e.roleKind === "dataGrant" && e.id && o.value.includes(e.id)).map((e) => e.id))), l = z(() => r.value.filter((e) => e.id && e.id !== s.value).map((e) => ({
+						label: `${e.title ?? e.id} / ${e.roleKind === "dataGrant" ? t.t("platform.screen.RoleManagementView.data-authorization-role", "数据授权角色") : t.t("platform.screen.RoleManagementView.standard-role", "标准角色")}`,
+						value: e.id,
+						disabled: e.roleKind === "dataGrant" && c.value.size > 0 && !o.value.includes(e.id)
+					})));
+					Z([a, () => n.context.formSessionKey], () => void u(), { immediate: !0 });
+					async function u() {
+						if (!a.value) {
+							r.value = [];
+							return;
+						}
+						i.value = !0;
+						try {
+							let e = await n.context.queryRecords({
+								page: {
+									pageNum: 1,
+									pageSize: 500
+								},
+								conditions: [
+									{
+										fieldName: "assignmentType",
+										operator: "EQ",
+										values: ["employment"]
+									},
+									{
+										fieldName: "roleKind",
+										operator: "IN",
+										values: ["standard", "dataGrant"]
+									},
+									{
+										fieldName: "enabled",
+										operator: "EQ",
+										values: [!0]
+									},
+									{
+										fieldName: "ownerScopeType",
+										operator: "EQ",
+										values: [n.context.draft.ownerScopeType]
+									},
+									...n.context.draft.ownerScopeId ? [{
+										fieldName: "ownerScopeId",
+										operator: "EQ",
+										values: [n.context.draft.ownerScopeId]
+									}] : []
+								],
+								sorts: [{ field: "sortOrder" }, { field: "title" }]
+							});
+							r.value = e.records;
+						} finally {
+							i.value = !1;
+						}
+					}
+					function d(e) {
+						let t = Array.isArray(e) ? e.map((e) => String(e).trim()).filter(Boolean) : [];
+						n.context.setField("memberRoleIds", t.length > 0 ? t.join(",") : void 0);
+					}
+					function f(e) {
+						return typeof e == "string" ? e.split(",").map((e) => e.trim()).filter(Boolean) : [];
+					}
+					return (n, r) => a.value ? (q(), H("label", Qn, [U("span", null, Y(X(t).t("platform.screen.RoleManagementView.member-roles", "成员角色")), 1), G(X(ne), {
+						mode: "multiple",
+						value: o.value,
+						options: l.value,
+						loading: i.value,
+						placeholder: X(t).t("platform.screen.RoleGroupMemberSelector.select-member-roles", "请选择成员角色"),
+						disabled: e.context.mode === "view",
+						"allow-clear": "",
+						"onUpdate:value": d
+					}, null, 8, [
+						"value",
+						"options",
+						"loading",
+						"placeholder",
+						"disabled"
+					])])) : V("v-if", !0);
+				}
+			}), [["__scopeId", "data-v-5dd40ab2"]]),
+			location: {
+				surface: "record-card",
+				fieldName: "memberRoleIds",
+				placement: "after"
+			}
+		}],
+		fieldPolicies: [{
+			fieldName: "memberRoleIds",
+			visible: () => !1
+		}]
+	},
+	recordActions: [
+		{
+			key: "role-bind-account",
+			actionCode: "accountRoleGrants",
+			title: "绑定",
+			titleKey: "platform.screen.RoleManagementView.assign",
+			state: (e) => ({
+				visible: e.assignmentType === "account",
+				disabled: e.systemManaged === !0
+			}),
+			run({ openDrawer: e }) {
+				e({
+					title: "绑定用户",
+					titleKey: "platform.screen.RoleManagementView.assign-to-users",
+					width: "extraWide",
+					component: gn
+				});
+			}
+		},
+		{
+			key: "role-bind-employment",
+			actionCode: "employmentRoleGrants",
+			title: "绑定",
+			titleKey: "platform.screen.RoleManagementView.assign",
+			state: (e) => ({
+				visible: e.assignmentType !== "account",
+				disabled: e.systemManaged === !0
+			}),
+			run({ openDrawer: e }) {
+				e({
+					title: "绑定任职",
+					titleKey: "platform.screen.RoleManagementView.assign-to-positions",
+					width: "extraWide",
+					component: Tn
+				});
+			}
+		},
+		{
+			key: "role-authorize",
+			actionCode: "rolePermissions",
+			title: "授权",
+			titleKey: "platform.page-action.MANAGE_PERMISSIONS.title",
+			state: (e) => ({
+				visible: e.roleKind !== "group",
+				disabled: e.systemManaged === !0
+			}),
+			run({ openDrawer: e }) {
+				e({
+					title: "角色授权",
+					titleKey: "platform.unsaved-source.RoleAuthorizationView",
+					width: "wide",
+					component: Zn
+				});
+			}
+		}
+	]
+};
+r("platform-admin-runtime", We), n("platform-admin-runtime", [
+	nt,
+	rt,
+	it,
+	dt,
+	vt,
+	wt,
+	Lt,
+	$n
+]);
+//#endregion
+export { Pn as a, hn as c, Nn as i, He as l, Jn as n, On as o, Mn as r, wn as s, Yn as t };