@ximatai/muyun-web-app 0.26.15 → 0.26.16

package/dist/workspaceViews-CHsgLFwY.js

@@ -1,3217 +0,0 @@
-import { n as e } from "./rolldown-runtime-DPVXH0ON.js";
-import { T as t, _ as n, at as r, h as i, k as a, ot as o, s, t as c, u as l, x as u } from "./platform-workbench-C-kE-Yqq.js";
-import { $t as d, Bt as f, C as p, Cn as m, Dn as h, O as g, Pn as _, Qt as v, R as y, Sn as b, T as x, Tn as S, Ut as C, Vt as w, Wr as T, Xt as E, Zt as D, an as O, bn as k, cn as ee, f as A, gn as te, ht as ne, in as j, nn as M, rn as re, u as ie, xn as ae, z as oe } from "./platform-components-Hs3DrTqE.js";
-import { n as N } from "./sse-Q1wa3p_k.js";
-import { a as P, c as F, l as I, n as se, o as ce, r as le, s as ue, u as de } from "./moduleGovernanceWorkspaceView-COjWtJMr.js";
-import { Fragment as L, computed as R, createBlock as z, createCommentVNode as B, createElementBlock as V, createElementVNode as H, createSlots as fe, createTextVNode as U, createVNode as W, defineAsyncComponent as G, defineComponent as K, guardReactiveProps as pe, mergeProps as me, nextTick as he, normalizeClass as ge, normalizeProps as _e, onBeforeUnmount as ve, onMounted as ye, onUnmounted as be, openBlock as q, ref as J, renderList as xe, renderSlot as Se, resolveDynamicComponent as Ce, toDisplayString as Y, toValue as we, unref as X, watch as Z, withCtx as Q, withKeys as Te, withModifiers as Ee } from "vue";
-//#region src/views/roleDetailWorkspaceView.ts
-var De = /* @__PURE__ */ new Set([
-	"platform",
-	"tenant",
-	"organization"
-]), Oe = de({
-	type: "iam.role.detail",
-	route: "/iam/role",
-	moduleAlias: "iam.role",
-	component: G(() => import("./RoleDetailWorkspaceView-BXA-bzFu.js")),
-	layout: "workspace",
-	routeTitle: "角色管理",
-	presentations: ["drawer", "tab"],
-	titleOf: () => "角色详情",
-	parentRouteQueryOf(e) {
-		return e.scopeKind === "platform" ? { scopeKind: e.scopeKind } : {
-			scopeKind: e.scopeKind,
-			scopeId: e.scopeId
-		};
-	},
-	parse(e) {
-		let t = e.recordId, n = e.scopeKind, r = e.scopeId;
-		if (!(typeof t != "string" || !t || typeof n != "string" || !De.has(n) || (n === "platform" ? r !== void 0 : typeof r != "string" || !r))) return {
-			recordId: t,
-			scopeKind: n,
-			...typeof r == "string" ? { scopeId: r } : {}
-		};
-	}
-}), ke = de({
-	type: "iam.role.authorization",
-	route: "/iam/role/authorization",
-	moduleAlias: "iam.role",
-	component: G(() => Promise.resolve().then(() => zn)),
-	layout: "workspace",
-	routeTitle: "角色授权",
-	drawerProfile: "wide-work",
-	presentations: ["drawer", "tab"],
-	titleOf: () => "角色授权",
-	parse(e) {
-		let t = e.roleId;
-		return typeof t == "string" && t ? { roleId: t } : void 0;
-	}
-}), Ae = [Oe, ke], je = de({
-	type: "platform.module.actions",
-	route: "/_platform/workspace/platform.module.actions",
-	moduleAlias: "platform.module",
-	component: G(() => import("./ModuleActionManagementView-D17iKVQv.js").then((e) => e.n)),
-	layout: "workspace",
-	routeTitle: "模块管理",
-	presentations: ["tab"],
-	titleOf: (e) => `动作：${e.moduleTitle ?? e.moduleAlias}`,
-	parentRouteQueryOf: () => ({}),
-	parse(e) {
-		let t = e.moduleAlias, n = e.moduleTitle;
-		if (typeof t == "string" && t) return {
-			moduleAlias: t,
-			...typeof n == "string" && n ? { moduleTitle: n } : {},
-			...e.moduleKind === "static" || e.moduleKind === "dynamic" ? { moduleKind: e.moduleKind } : {}
-		};
-	}
-}), Me = /* @__PURE__ */ K({
-	__name: "ModuleMenuDrawer",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = String(t.context.record?.alias ?? t.context.record?.id ?? ""), r = l(), a = le(), o = i(), s = () => JSON.stringify([
-			o?.value?.userId,
-			o?.value?.tenantId,
-			o?.value?.organizationId,
-			o?.value?.system
-		]), c = s(), u = !0, d = a?.session(n) ?? P(F(t.context.module.http), n, {
-			valid: () => u && !!o?.value?.userId && s() === c,
-			active: () => u
-		}, ce(c, n, () => !!o?.value?.userId && s() === c), r?.refreshMenus), f = J();
-		return a?.focus(d), a?.showEditor(d), d.ready.value || d.load(), Z([
-			d.canSave,
-			d.saving,
-			d.saved,
-			d.resultUnknown
-		], () => {
-			t.context.setCloseBlocked(d.saving.value), t.context.setTitleActions(d.saved.value || d.resultUnknown.value ? [] : [{
-				key: "add-menu",
-				label: "添加",
-				emphasis: "primary",
-				disabled: !d.canSave.value,
-				loading: d.saving.value,
-				run: () => f.value?.save()
-			}]);
-		}, { immediate: !0 }), Z(d.saved, (e) => {
-			e && t.context.refreshDetailExtensions();
-		}), ve(() => {
-			u = !1, a?.hideEditor(d), a || d.dispose();
-		}), (t, n) => (q(), z(ue, {
-			ref_key: "editor",
-			ref: f,
-			session: X(d),
-			onOpened: n[0] ||= (t) => e.context.close()
-		}, null, 8, ["session"]));
-	}
-}), Ne = { class: "module-menu-entries" }, Pe = { key: 0 }, Fe = {
-	key: 1,
-	role: "status"
-}, Ie = { key: 2 }, Le = { key: 0 }, $ = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	__name: "ModuleMenuEntriesSection",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = l(), r = J([]), i = J(/* @__PURE__ */ new Map()), a = J(!1), o = J(""), s = 0;
-		ve(() => s++), Z(() => [t.context.record.id, t.context.refreshKey], () => void c(), { immediate: !0 });
-		async function c() {
-			let e = ++s, n = String(t.context.record.alias ?? t.context.record.id ?? ""), c = F(t.context.module.http);
-			a.value = !0, o.value = "", r.value = [], i.value = /* @__PURE__ */ new Map();
-			try {
-				let [t, a] = await Promise.all([c.schemes(), c.visible()]), o = await Promise.all(t.map(async (e) => I(await c.tree(e.id), e.title ?? e.alias ?? e.id).filter(({ menu: e }) => e.moduleAlias === n)));
-				if (e !== s) return;
-				r.value = o.flat(), i.value = new Map(I(a).map(({ menu: e }) => [e.id, e]));
-			} catch {
-				e === s && (o.value = "暂时无法读取菜单入口，请确认有菜单管理权限后重试。");
-			} finally {
-				e === s && (a.value = !1);
-			}
-		}
-		return (e, t) => (q(), V("div", Ne, [a.value ? (q(), V("span", Pe, "正在加载…")) : o.value ? (q(), V("div", Fe, [U(Y(o.value) + " ", 1), W(X(S), {
-			type: "link",
-			onClick: c
-		}, {
-			default: Q(() => [...t[0] ||= [U("重试", -1)]]),
-			_: 1
-		})])) : r.value.length ? B("v-if", !0) : (q(), V("span", Ie, "尚未添加到菜单，可通过上方“添加到菜单”设置入口。")), (q(!0), V(L, null, xe(r.value, (e) => (q(), V("div", {
-			key: e.menu.id,
-			class: "menu-entry"
-		}, [H("span", null, [U(Y(e.path), 1), e.menu.enabled === !1 ? (q(), V("small", Le, " · 已停用")) : B("v-if", !0)]), i.value.has(e.menu.id) && X(n)?.openMenu ? (q(), z(X(S), {
-			key: 0,
-			type: "link",
-			onClick: (t) => X(n).openMenu(i.value.get(e.menu.id))
-		}, {
-			default: Q(() => [...t[1] ||= [H("span", null, "打开", -1)]]),
-			_: 1
-		}, 8, ["onClick"])) : B("v-if", !0)]))), 128))]));
-	}
-}), [["__scopeId", "data-v-ff7756d2"]]), Re = je, ze = se, Be = {
-	id: "platform-module-workspace-actions",
-	target: { moduleAlias: "platform.module" },
-	workspaceViews: [ze, Re],
-	detail: {
-		sections: [{
-			key: "module-menu-entries",
-			title: "菜单入口",
-			component: $
-		}],
-		actions: [
-			{
-				key: "module-add-to-menu",
-				title: "添加到菜单",
-				state: (e) => ({ visible: Ue(e) !== void 0 }),
-				run({ openDrawer: e }) {
-					e({
-						title: "添加到菜单",
-						width: "narrow",
-						component: Me
-					});
-				}
-			},
-			{
-				key: "module-actions-workspace",
-				title: "动作",
-				state: (e) => ({ visible: Ue(e) !== void 0 }),
-				run({ record: e, openWorkspaceTab: t }) {
-					let n = Ue(e);
-					n && t(Re, {
-						moduleAlias: n,
-						moduleTitle: We(e),
-						moduleKind: Ge(e)
-					});
-				}
-			},
-			{
-				key: "module-ui-orchestration-workspace",
-				title: "低代码",
-				state: (e) => ({ visible: Ue(e) !== void 0 && Ge(e) === "dynamic" }),
-				run({ record: e, openWorkspaceTab: t }) {
-					let n = Ue(e);
-					n && Ge(e) === "dynamic" && t(ze, {
-						moduleAlias: n,
-						moduleTitle: We(e),
-						governanceTab: "overview"
-					});
-				}
-			}
-		]
-	}
-}, Ve = {
-	id: "dictionary-category-tree-parent-policy",
-	target: { moduleAlias: "platform.dictionary_category" },
-	navigator: { treeParentPolicy: {
-		canUseAsParent: (e) => e.categoryKind === "folder",
-		rejectionMessage: "字典类目只能挂在目录下"
-	} }
-}, He = {
-	id: "platform-module-action-entry-scope",
-	target: { moduleAlias: "platform.module_action" },
-	navigator: {
-		hidden: !0,
-		lockedEntry: {
-			navigatorKey: "module",
-			unavailableDescription: "模块上下文不可用"
-		}
-	},
-	standardActions: { disabled: ["create"] }
-};
-function Ue(e) {
-	return Ke(e, "alias") ?? Ke(e, "id");
-}
-function We(e) {
-	return Ke(e, "title");
-}
-function Ge(e) {
-	let t = Ke(e, "moduleKind");
-	return t === "static" || t === "dynamic" ? t : void 0;
-}
-function Ke(e, t) {
-	let n = e[t];
-	return typeof n == "string" && n.trim() ? n : void 0;
-}
-//#endregion
-//#region src/views/PasswordPolicyPreview.vue?vue&type=script&setup=true&lang.ts
-var qe = { class: "password-policy-preview" }, Je = {
-	key: 0,
-	class: "preview-results"
-}, Ye = {
-	id: "iam-password-policy-preview",
-	target: { moduleAlias: "iam.password_policy_rule" },
-	card: { assistant: {
-		component: /* @__PURE__ */ h(/* @__PURE__ */ K({
-			name: "PasswordPolicyPreview",
-			__name: "PasswordPolicyPreview",
-			props: { context: {} },
-			setup(e) {
-				let t = e, n = J("CURRENT"), r = J(""), i = J(), a = J(!1), o = J(!1), s = 0, c = R(() => g(t.context.record)), l = R(() => t.context.mode !== "view" || b(c.value?.id) !== void 0), u = R(() => [{
-					value: "CURRENT",
-					label: "本规则",
-					disabled: !l.value
-				}, {
-					value: "ALL",
-					label: "全规则"
-				}]);
-				Z(l, (e) => {
-					!e && n.value === "CURRENT" && (n.value = "ALL");
-				}, { immediate: !0 });
-				function d(e) {
-					(e !== "CURRENT" || l.value) && (e === "CURRENT" || e === "ALL") && (n.value = e);
-				}
-				Z([n, () => t.context.formSessionKey], ([e]) => {
-					e === "ALL" && f();
-				}, { immediate: !0 });
-				async function f() {
-					let e = ++s;
-					o.value = !0, a.value = !1, i.value = void 0;
-					try {
-						let n = await t.context.module.http.request({ path: "/iam.password_policy_rule/active-global-rules" });
-						if (e !== s) return;
-						i.value = Object.freeze(n.map((e) => Object.freeze({ ...e })));
-					} catch {
-						if (e !== s) return;
-						a.value = !0;
-					} finally {
-						e === s && (o.value = !1);
-					}
-				}
-				let p = R(() => {
-					let e = l.value ? c.value : void 0;
-					if (n.value === "CURRENT") return e ? [e] : [];
-					if (!i.value) return [];
-					let t = i.value.filter(S), r = b(e?.id);
-					if (r) {
-						let e = t.findIndex((e) => b(e.id) === r);
-						e >= 0 && t.splice(e, 1);
-					}
-					return e && S(e) && t.push(e), t.length > 0 ? t.sort(v) : [];
-				}), m = R(() => r.value ? p.value.map((e, t) => _(e, r.value, t)) : []), h = R(() => {
-					if (!l.value && n.value === "CURRENT") return "请选择或新建一条规则";
-					if (n.value === "ALL" && o.value) return "正在加载权威规则集";
-					if (n.value === "ALL" && a.value) return "无法加载权威规则集";
-					if (!r.value) return "输入测试密码后即时反馈";
-					if (m.value.length === 0) return "当前没有参与试算的启用规则";
-					let e = m.value.filter((e) => !e.passed).length;
-					return e === 0 ? `全部通过（${m.value.length}/${m.value.length}）` : `${e} 条规则未通过`;
-				});
-				function g(e) {
-					if (e) return e;
-				}
-				function _(e, t, n) {
-					let r = x(e.title, "未命名规则"), i = x(e.message, "未配置失败提示"), a = e.pattern;
-					if (!a?.trim()) return {
-						key: y(e, n),
-						title: r,
-						message: i,
-						passed: !1,
-						diagnostic: "正则表达式不能为空"
-					};
-					try {
-						let o = RegExp(`^(?:${a})$`).test(t);
-						return {
-							key: y(e, n),
-							title: r,
-							message: i,
-							passed: o
-						};
-					} catch {
-						return {
-							key: y(e, n),
-							title: r,
-							message: i,
-							passed: !1,
-							diagnostic: "当前浏览器不支持该正则语法；保存时仍由服务端 Java 正则校验"
-						};
-					}
-				}
-				function v(e, t) {
-					return (e.sortOrder ?? 2 ** 53 - 1) - (t.sortOrder ?? 2 ** 53 - 1) || x(e.title, "").localeCompare(x(t.title, ""));
-				}
-				function y(e, t) {
-					return b(e.id) ?? `draft:${t}`;
-				}
-				function b(e) {
-					return e?.trim() || void 0;
-				}
-				function x(e, t) {
-					return e?.trim() || t;
-				}
-				function S(e) {
-					return e.enabled !== !1 && (e.scopeType == null || e.scopeType.toLowerCase() === "global");
-				}
-				return (e, t) => (q(), V("section", qe, [
-					H("header", null, [t[1] ||= H("h3", null, "密码试算", -1), H("span", { class: ge({ failed: m.value.some((e) => !e.passed) }) }, Y(h.value), 3)]),
-					W(X(te), {
-						class: "preview-scope",
-						value: n.value,
-						options: u.value,
-						size: "small",
-						"onUpdate:value": d
-					}, null, 8, ["value", "options"]),
-					W(X(k), {
-						value: r.value,
-						"onUpdate:value": t[0] ||= (e) => r.value = e,
-						type: "text",
-						autocomplete: "off",
-						placeholder: "输入测试密码",
-						"aria-label": "测试密码"
-					}, null, 8, ["value"]),
-					m.value.length ? (q(), V("ul", Je, [(q(!0), V(L, null, xe(m.value, (e) => (q(), V("li", {
-						key: e.key,
-						class: ge({
-							passed: e.passed,
-							failed: !e.passed
-						})
-					}, [H("strong", null, Y(e.title), 1), H("span", null, Y(e.diagnostic ?? (e.passed ? "通过" : e.message)), 1)], 2))), 128))])) : B("v-if", !0)
-				]));
-			}
-		}), [["__scopeId", "data-v-1ebdeb6e"]]),
-		placement: {
-			boundary: "outside",
-			position: "bottom"
-		}
-	} }
-}, Xe = { class: "tenant-applications-detail" }, Ze = { class: "tenant-applications-summary" }, Qe = {
-	key: 0,
-	class: "tenant-applications-status"
-}, $e = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	name: "TenantApplicationsDetailSection",
-	__name: "TenantApplicationsDetailSection",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = J([]), r = J(!1), i = 0, a = J(/* @__PURE__ */ new Map()), o = R(() => n.value.map((e) => e.applicationAlias).filter((e) => typeof e == "string" && e.length > 0).map((e) => ({
-			key: e,
-			label: a.value.get(e) ? `${a.value.get(e)} · ${e}` : e
-		})));
-		Z(() => [t.context.record.id, t.context.refreshKey], () => void s(), { immediate: !0 });
-		async function s() {
-			let e = String(t.context.record.id ?? ""), o = ++i;
-			if (!e) {
-				n.value = [], a.value = /* @__PURE__ */ new Map(), r.value = !1;
-				return;
-			}
-			r.value = !0, n.value = [], a.value = /* @__PURE__ */ new Map();
-			try {
-				let [r, s] = await Promise.all([t.context.module.http.request({
-					method: "POST",
-					path: "/platform.application/query",
-					body: { page: {
-						pageNum: 1,
-						pageSize: 200
-					} }
-				}), t.context.module.http.request({
-					method: "POST",
-					path: c(e, "query"),
-					body: { page: {
-						pageNum: 1,
-						pageSize: 200
-					} }
-				})]);
-				o === i && (a.value = new Map(r.records.filter((e) => e.alias && e.title).map((e) => [e.alias, e.title])), n.value = s.records);
-			} catch (e) {
-				o === i && w(e, {
-					source: "tenant-applications-detail",
-					phase: "load"
-				});
-			} finally {
-				o === i && (r.value = !1);
-			}
-		}
-		function c(e, t) {
-			return `/iam.tenant/${encodeURIComponent(e)}/applications/${t}`;
-		}
-		return (e, t) => (q(), V("section", Xe, [H("div", Ze, [r.value ? (q(), V("span", Qe, "正在加载…")) : (q(), z(X(m), {
-			key: 1,
-			items: o.value,
-			"max-visible": 8,
-			"empty-text": "暂无记录"
-		}, null, 8, ["items"]))])]));
-	}
-}), [["__scopeId", "data-v-2f879564"]]), et = { class: "tenant-application-configuration" }, tt = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	name: "TenantApplicationConfigurationDrawer",
-	__name: "TenantApplicationConfigurationDrawer",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = J([]), r = J(/* @__PURE__ */ new Set()), i = J(!1), a = J(!1), o = [{
-			key: "title",
-			title: "应用名称",
-			width: 260
-		}, {
-			key: "alias",
-			title: "应用 alias",
-			width: 220
-		}], s = R(() => n.value), c = R(() => ({
-			selectedRowKeys: [...r.value],
-			preserveSelectedRowKeys: !0,
-			disabledOf: (e) => a.value || e.alias === "iam",
-			onChange: (e) => {
-				r.value = new Set(e.map(String));
-			}
-		}));
-		function l() {
-			t.context.setCloseBlocked(a.value), t.context.setTitleActions([{
-				key: "cancel",
-				label: "取消",
-				disabled: a.value,
-				run: () => {
-					a.value || t.context.close();
-				}
-			}, {
-				key: "confirm",
-				label: "确认",
-				emphasis: "primary",
-				disabled: a.value,
-				loading: a.value,
-				run: d
-			}]);
-		}
-		ye(() => {
-			l(), u();
-		}), Z(a, l);
-		async function u() {
-			let e = String(t.context.record?.id ?? "");
-			if (e) {
-				i.value = !0;
-				try {
-					let [i, a] = await Promise.all([t.context.module.http.request({
-						method: "POST",
-						path: "/platform.application/query",
-						body: { page: {
-							pageNum: 1,
-							pageSize: 200
-						} }
-					}), t.context.module.http.request({
-						method: "POST",
-						path: f(e, "query"),
-						body: { page: {
-							pageNum: 1,
-							pageSize: 200
-						} }
-					})]);
-					n.value = i.records.filter((e) => e.enabled !== !1);
-					let o = new Set(n.value.map((e) => e.alias).filter(Boolean));
-					r.value = /* @__PURE__ */ new Set(["iam", ...a.records.map((e) => e.applicationAlias).filter((e) => typeof e == "string" && o.has(e))]);
-				} catch (e) {
-					w(e, {
-						source: "tenant-application-configuration",
-						phase: "load"
-					});
-				} finally {
-					i.value = !1;
-				}
-			}
-		}
-		async function d() {
-			let e = String(t.context.record?.id ?? "");
-			if (e && !a.value) {
-				a.value = !0;
-				try {
-					await t.context.module.http.request({
-						method: "POST",
-						path: f(e, "configure"),
-						body: { applicationAliases: [...r.value] }
-					}), t.context.refreshDetailExtensions(), t.context.refreshList(), t.context.close();
-				} catch (e) {
-					w(e, {
-						source: "tenant-application-configuration",
-						phase: "action"
-					});
-				} finally {
-					a.value = !1;
-				}
-			}
-		}
-		function f(e, t) {
-			return `/iam.tenant/${encodeURIComponent(e)}/applications/${t}`;
-		}
-		return (e, t) => (q(), V("section", et, [t[0] ||= H("p", null, "勾选表示向当前租户开通应用；取消勾选将移除该租户的应用开通记录。", -1), W(X(M), {
-			columns: o,
-			rows: s.value,
-			loading: i.value,
-			pagination: !1,
-			selection: c.value,
-			"row-key": (e) => String(e.alias ?? e.id ?? ""),
-			"empty-description": "暂无可配置应用"
-		}, null, 8, [
-			"rows",
-			"loading",
-			"selection",
-			"row-key"
-		])]));
-	}
-}), [["__scopeId", "data-v-2e68af88"]]), nt = {
-	id: "iam-tenant-standard-page-enhancement",
-	target: { moduleAlias: "iam.tenant" },
-	form: {
-		contributions: [],
-		fieldPolicies: [
-			{
-				fieldName: "workbenchTitle",
-				visible: ({ draft: e }) => e.workbenchBrandMode !== "logoOnly"
-			},
-			{
-				fieldName: "workbenchSubtitle",
-				visible: ({ draft: e }) => e.workbenchBrandMode !== "logoOnly"
-			},
-			...["lightLogoAssetId", "darkLogoAssetId"].map((e) => ({
-				fieldName: e,
-				imageUploadHint: ({ draft: e }) => e.workbenchBrandMode === "logoOnly" ? "纯 Logo 模式支持横向或正方形图片（最大 512 KB）" : "Logo + 标题模式仅支持正方形图片（建议 128 × 128 px，最大 512 KB）",
-				imageUploadAdvisory: ({ draft: e }) => e.workbenchBrandMode === "logoOnly" ? void 0 : rt
-			}))
-		]
-	},
-	detail: {
-		actions: [{
-			key: "tenant-configure-applications",
-			title: "配置应用",
-			state: () => ({ visible: !0 }),
-			run({ openDrawer: e }) {
-				e({
-					title: "配置应用",
-					width: "wide",
-					component: tt
-				});
-			}
-		}],
-		sections: [{
-			key: "tenant-applications",
-			title: "已开通应用",
-			component: $e
-		}]
-	}
-};
-async function rt(e) {
-	if (!e.type.startsWith("image/") || typeof Image > "u") return "Logo + 标题模式需要可读取的正方形图片。";
-	try {
-		let { width: t, height: n } = await it(e), r = t / n;
-		return r >= .9 && r <= 1.1 ? void 0 : `“${e.name}”为 ${t} × ${n} px；Logo + 标题模式仅允许上传正方形 Logo。`;
-	} catch {
-		return "无法读取图片尺寸，请选择正方形 PNG、JPG 或 GIF 图片。";
-	}
-}
-function it(e) {
-	let t = URL.createObjectURL(e);
-	return new Promise((e, n) => {
-		let r = new Image();
-		r.onload = () => {
-			URL.revokeObjectURL(t), e({
-				width: r.naturalWidth,
-				height: r.naturalHeight
-			});
-		}, r.onerror = () => {
-			URL.revokeObjectURL(t), n(/* @__PURE__ */ Error("无法读取图片尺寸"));
-		}, r.src = t;
-	});
-}
-//#endregion
-//#region src/platform-admin-runtime/employee/EmployeeAccountDrawer.vue?vue&type=script&setup=true&lang.ts
-var at = {
-	key: 1,
-	class: "employee-account-drawer"
-}, ot = { class: "employee-account-existing-picker" }, st = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	name: "EmployeeAccountDrawer",
-	__name: "EmployeeAccountDrawer",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = J(), r = J(), i = J(""), a = J(""), o = J(!1), s = J(!1);
-		ye(() => void c());
-		async function c() {
-			let e = _();
-			if (e) {
-				o.value = !0;
-				try {
-					n.value = await t.context.module.http.request({ path: `/iam.employee/${encodeURIComponent(e)}/account` });
-				} catch (e) {
-					w(e, {
-						source: "employee-account",
-						phase: "load"
-					});
-				} finally {
-					o.value = !1;
-				}
-			}
-		}
-		async function l() {
-			let e = _();
-			if (!e || s.value) return;
-			let r = i.value.trim();
-			if (!r || !a.value) {
-				C("请输入账号和初始密码。", {
-					source: "employee-account",
-					phase: "validation"
-				});
-				return;
-			}
-			s.value = !0;
-			try {
-				let i = await t.context.module.http.request({
-					method: "POST",
-					path: `/iam.employee/${encodeURIComponent(e)}/account/provision`,
-					body: {
-						username: r,
-						password: a.value
-					}
-				});
-				n.value = T(i).binding, a.value = "", t.context.refreshList();
-			} catch (e) {
-				w(e, {
-					source: "employee-account",
-					phase: "action"
-				});
-			} finally {
-				s.value = !1;
-			}
-		}
-		async function u(e) {
-			let t = e[0];
-			t && await f(t.id);
-		}
-		async function f(e) {
-			let i = _();
-			if (i && e && !s.value) {
-				s.value = !0;
-				try {
-					n.value = await t.context.module.http.request({
-						method: "POST",
-						path: `/iam.employee/${encodeURIComponent(i)}/account`,
-						body: { userId: e }
-					}), r.value = void 0, t.context.refreshList(), C("账号已绑定到当前职员。", {
-						source: "employee-account",
-						phase: "action"
-					});
-				} catch (e) {
-					w(e, {
-						source: "employee-account",
-						phase: "action"
-					});
-				} finally {
-					s.value = !1;
-				}
-			}
-		}
-		async function p(e) {
-			let n = _();
-			if (!n) return {
-				records: [],
-				total: 0
-			};
-			let r = await t.context.module.http.request({
-				method: "POST",
-				path: `/iam.employee/${encodeURIComponent(n)}/account-candidates/query`,
-				body: {
-					keyword: e.keyword,
-					page: {
-						pageNum: e.pageNum,
-						pageSize: e.pageSize
-					}
-				}
-			});
-			return {
-				records: r.records.map(h),
-				total: r.total
-			};
-		}
-		async function m(e) {
-			let n = _();
-			return !n || e.length === 0 ? [] : (await t.context.module.http.request({
-				method: "POST",
-				path: `/iam.employee/${encodeURIComponent(n)}/account-candidates/query`,
-				body: {
-					ids: e,
-					page: {
-						pageNum: 1,
-						pageSize: e.length
-					}
-				}
-			})).records.map(h);
-		}
-		function h(e) {
-			return {
-				id: e.id,
-				title: e.username ?? e.id,
-				account: e.username ?? e.id,
-				employeeName: e.employeeTitle,
-				organizationId: e.organizationId,
-				organizationName: e.organizationTitle,
-				departmentId: e.departmentId,
-				departmentName: e.departmentTitle
-			};
-		}
-		async function g() {
-			let e = _();
-			if (e && n.value && !s.value && await E({
-				title: "移除账户",
-				content: "确认移除该职员的账户？该用户账号会同步删除。",
-				okText: "移除",
-				danger: !0
-			})) {
-				s.value = !0;
-				try {
-					await t.context.module.http.request({
-						method: "POST",
-						path: `/iam.employee/${encodeURIComponent(e)}/account/delete`
-					}), n.value = void 0, t.context.refreshList();
-				} catch (e) {
-					w(e, {
-						source: "employee-account",
-						phase: "action"
-					});
-				} finally {
-					s.value = !1;
-				}
-			}
-		}
-		function _() {
-			let e = t.context.record?.id;
-			return e == null ? void 0 : String(e);
-		}
-		return (e, t) => o.value ? (q(), z(X(d), {
-			key: 0,
-			tip: "加载账号绑定"
-		})) : (q(), V("section", at, [_() ? n.value ? (q(), V(L, { key: 1 }, [H("p", null, "当前已绑定用户：" + Y(n.value.userId ?? "-"), 1), W(X(S), {
-			danger: "",
-			"icon-name": "delete",
-			loading: s.value,
-			onClick: g
-		}, {
-			default: Q(() => [...t[3] ||= [U("移除账户", -1)]]),
-			_: 1
-		}, 8, ["loading"])], 64)) : (q(), V(L, { key: 2 }, [H("section", ot, [t[4] ||= H("p", null, "绑定已有用户账号；仅显示当前租户内启用且尚未绑定其他职员的账号。", -1), W(X(A), {
-			value: r.value,
-			disabled: s.value,
-			placeholder: "搜索并选择已有登录账号",
-			title: "选择已有登录账号",
-			"search-page": p,
-			"resolve-users": m,
-			"onUpdate:value": t[0] ||= (e) => r.value = typeof e == "string" ? e : void 0,
-			onSelect: u
-		}, null, 8, ["value", "disabled"])]), H("form", { onSubmit: Ee(l, ["prevent"]) }, [
-			t[8] ||= H("p", null, "也可直接创建登录账号并自动绑定到当前职员。", -1),
-			H("label", null, [t[5] ||= H("span", null, "账号", -1), W(X(k), {
-				value: i.value,
-				"onUpdate:value": t[1] ||= (e) => i.value = e,
-				disabled: s.value,
-				placeholder: "请输入登录账号"
-			}, null, 8, ["value", "disabled"])]),
-			H("label", null, [t[6] ||= H("span", null, "初始密码", -1), W(X(k), {
-				value: a.value,
-				"onUpdate:value": t[2] ||= (e) => a.value = e,
-				type: "password",
-				disabled: s.value,
-				placeholder: "请输入初始密码"
-			}, null, 8, ["value", "disabled"])]),
-			W(X(S), {
-				type: "primary",
-				"html-type": "submit",
-				"icon-name": "plus",
-				loading: s.value
-			}, {
-				default: Q(() => [...t[7] ||= [U(" 创建账号并绑定 ", -1)]]),
-				_: 1
-			}, 8, ["loading"])
-		], 32)], 64)) : (q(), z(X(v), {
-			key: 0,
-			title: "职员不存在",
-			message: "请重新打开职员档案后再设置账号。"
-		}))]));
-	}
-}), [["__scopeId", "data-v-aa8474e1"]]), ct = {
-	id: "iam-employee-account-drawer",
-	target: { moduleAlias: "iam.employee" },
-	detail: { actions: [{
-		key: "employee-account",
-		title: "设置账号",
-		state: () => ({ visible: !0 }),
-		run({ module: e, record: t, openDrawer: n }) {
-			let r = t.id == null ? void 0 : String(t.id);
-			r && e.can("employeeAccounts", r) !== !1 && n({
-				title: "设置账号",
-				width: "standard",
-				component: st
-			});
-		}
-	}] }
-};
-function lt(e, t) {
-	return !1;
-}
-//#endregion
-//#region src/platform-admin-runtime/backendHttp.ts
-function ut(e = {}) {
-	let t = () => N({
-		baseUrl: void 0,
-		token: e.withAuth === !1 ? void 0 : a(void 0),
-		credentials: dt(void 0),
-		onAuthenticationRequired: e.withAuth === !1 ? void 0 : (e, t) => lt(e, t)
-	});
-	return {
-		request(e) {
-			return t().request(e);
-		},
-		stream(e) {
-			return t().stream(e);
-		}
-	};
-}
-function dt(e) {
-	return e === "include" || e === "omit" || e === "same-origin" ? e : void 0;
-}
-//#endregion
-//#region src/platform-admin-runtime/user/userOnlineStatusStore.ts
-var ft = "iam.user.session.collectionChanged", pt = J({}), mt = /* @__PURE__ */ new Set(), ht = !1, gt = !1;
-function _t() {
-	vt();
-	function e(e) {
-		e && !pt.value[e] && (mt.add(e), yt());
-	}
-	function t(e) {
-		return e ? pt.value[e] : void 0;
-	}
-	function n(e) {
-		e && (mt.add(e), yt());
-	}
-	return {
-		observe: e,
-		statusOf: t,
-		refresh: n
-	};
-}
-function vt() {
-	gt || (gt = !0, t((e) => {
-		xt(e) && (mt.add(e.recordId), yt());
-	}));
-}
-function yt() {
-	ht || (ht = !0, queueMicrotask(() => {
-		ht = !1, bt();
-	}));
-}
-async function bt() {
-	let e = Array.from(mt);
-	if (mt.clear(), e.length !== 0) try {
-		let t = await ut().request({
-			method: "POST",
-			path: "/iam.user/sessions/status",
-			body: { userIds: e }
-		});
-		pt.value = {
-			...pt.value,
-			...Object.fromEntries(t.map((e) => [e.userId, e]))
-		};
-	} catch (e) {
-		w(e, {
-			source: "iam-user-online-status",
-			phase: "load"
-		});
-	}
-}
-function xt(e) {
-	return e.type === ft && e.moduleAlias === "iam.user" && !!e.recordId;
-}
-//#endregion
-//#region src/platform-admin-runtime/user/UserOnlineStatusCell.vue
-var St = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	name: "UserOnlineStatusCell",
-	__name: "UserOnlineStatusCell",
-	props: {
-		record: {},
-		column: {}
-	},
-	setup(e) {
-		let t = e, n = _t(), r = R(() => t.record.id == null ? void 0 : String(t.record.id)), i = R(() => n.statusOf(r.value)), a = R(() => {
-			let e = i.value;
-			if (!e) return "-";
-			if (e.present) {
-				let t = e.presentSessionCount ?? 0, n = e.idleSessionCount ?? 0;
-				return n >= t ? `闲置 (${t}/${e.activeSessionCount})` : `使用中 (${Math.max(0, t - n)}/${e.activeSessionCount})`;
-			}
-			return e.online ? `在线 (${e.activeSessionCount})` : "离线";
-		});
-		function o() {
-			n.observe(r.value);
-		}
-		return ye(o), Z(r, o), (e, t) => (q(), V("span", { class: ge({
-			"user-online-status--present": i.value?.present,
-			"user-online-status--offline": i.value && !i.value.online
-		}) }, Y(a.value), 3));
-	}
-}), [["__scopeId", "data-v-789ddd4a"]]), Ct = {
-	key: 1,
-	class: "user-password-drawer"
-}, wt = { key: 0 }, Tt = {
-	key: 1,
-	class: "user-password-reset"
-}, Et = { key: 0 }, Dt = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	name: "UserPasswordDrawer",
-	__name: "UserPasswordDrawer",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = J(""), r = J(), i = J(!1), a = R(() => t.context.record?.id == null ? void 0 : String(t.context.record.id));
-		async function o() {
-			let e = a.value;
-			if (e && !i.value && t.context.module.can("changePassword", e) === !0) {
-				if (!n.value) {
-					C("请输入新密码。", {
-						source: "iam-user-password",
-						phase: "validation"
-					});
-					return;
-				}
-				i.value = !0, t.context.setCloseBlocked(!0);
-				try {
-					await t.context.module.http.request({
-						method: "POST",
-						path: `/iam.user/changePassword/${encodeURIComponent(e)}`,
-						body: { password: n.value }
-					}), n.value = "", C("密码已修改。", {
-						source: "iam-user-password",
-						phase: "action"
-					}), t.context.refreshList(), t.context.refreshDetailExtensions();
-				} catch (e) {
-					w(e, {
-						source: "iam-user-password",
-						phase: "action"
-					});
-				} finally {
-					t.context.setCloseBlocked(!1), i.value = !1;
-				}
-			}
-		}
-		async function s() {
-			let e = a.value;
-			if (e && !i.value && t.context.module.can("resetPassword", e) === !0) {
-				i.value = !0, t.context.setCloseBlocked(!0);
-				try {
-					r.value = await t.context.module.http.request({
-						method: "POST",
-						path: `/iam.user/resetPassword/${encodeURIComponent(e)}`
-					}), t.context.refreshList(), t.context.refreshDetailExtensions();
-				} catch (e) {
-					w(e, {
-						source: "iam-user-password",
-						phase: "action"
-					});
-				} finally {
-					t.context.setCloseBlocked(!1), i.value = !1;
-				}
-			}
-		}
-		return (t, c) => a.value ? (q(), V("section", Ct, [e.context.module.can("changePassword", a.value) === !0 ? (q(), V("label", wt, [
-			c[2] ||= H("span", null, "新密码", -1),
-			W(X(k), {
-				value: n.value,
-				"onUpdate:value": c[0] ||= (e) => n.value = e,
-				type: "password",
-				disabled: i.value,
-				placeholder: "请输入新密码"
-			}, null, 8, ["value", "disabled"]),
-			W(X(S), {
-				type: "primary",
-				loading: i.value,
-				onClick: o
-			}, {
-				default: Q(() => [...c[1] ||= [U("修改密码", -1)]]),
-				_: 1
-			}, 8, ["loading"])
-		])) : B("v-if", !0), e.context.module.can("resetPassword", a.value) === !0 ? (q(), V("section", Tt, [
-			c[6] ||= H("p", null, "由系统生成临时密码。请在安全渠道交付给用户，并提醒其尽快修改。", -1),
-			W(X(S), {
-				loading: i.value,
-				onClick: s
-			}, {
-				default: Q(() => [...c[3] ||= [U("生成临时密码", -1)]]),
-				_: 1
-			}, 8, ["loading"]),
-			r.value ? (q(), V("dl", Et, [H("div", null, [c[4] ||= H("dt", null, "临时密码", -1), H("dd", null, Y(r.value.temporaryPassword), 1)]), H("div", null, [c[5] ||= H("dt", null, "失效时间", -1), H("dd", null, Y(r.value.expiresAt ?? "-"), 1)])])) : B("v-if", !0)
-		])) : B("v-if", !0)])) : (q(), z(X(v), {
-			key: 0,
-			title: "用户不存在",
-			message: "请重新打开用户详情后再管理密码。"
-		}));
-	}
-}), [["__scopeId", "data-v-f6125048"]]);
-//#endregion
-//#region src/platform-admin-runtime/user/useUserSessionRows.ts
-function Ot(e) {
-	let t = J([]), n = J({}), r = u({ load: async (e) => {
-		await Promise.all(e.keys.map((t) => a(t, e.isLatest)));
-	} });
-	function i(e) {
-		r.enqueue(e);
-	}
-	async function a(t, n) {
-		if (e.context.can("sessions", t) !== !1) {
-			d(t, {
-				...c(t),
-				loading: !0,
-				error: void 0
-			});
-			try {
-				await e.context.recordActions(t);
-				let r = await e.context.http.request({
-					method: "GET",
-					path: `/iam.user/${encodeURIComponent(t)}/sessions`
-				});
-				n(t) && d(t, {
-					records: r,
-					loading: !1
-				});
-			} catch (r) {
-				if (!n(t)) return;
-				let i = w(r, {
-					source: `${e.source}-sessions`,
-					phase: "load"
-				});
-				d(t, {
-					...c(t),
-					loading: !1,
-					error: i.message
-				});
-			}
-		}
-	}
-	function o(e, n) {
-		let r = String(e.id ?? "");
-		r && (t.value = n ? Array.from(/* @__PURE__ */ new Set([...t.value, r])) : t.value.filter((e) => e !== r), n && c(r).records.length === 0 && i(r));
-	}
-	function s(e) {
-		if (e.type !== "iam.user.session.collectionChanged" || e.moduleAlias !== "iam.user") return;
-		let n = String(e.recordId ?? "");
-		n && t.value.includes(n) && i(n);
-	}
-	function c(e) {
-		return e ? n.value[e] ?? {
-			records: [],
-			loading: !1
-		} : {
-			records: [],
-			loading: !1
-		};
-	}
-	function l() {
-		r.reset(), t.value = [], n.value = {};
-	}
-	function d(e, t) {
-		n.value = {
-			...n.value,
-			[e]: t
-		};
-	}
-	return {
-		handleUserRowExpand: o,
-		handleUserSessionBusinessEvent: s,
-		loadUserSessions: i,
-		reset: l,
-		userSessionState: c
-	};
-}
-//#endregion
-//#region src/platform-admin-runtime/userModulePageEnhancement.ts
-var kt = {
-	id: "iam-user-standard-page-enhancement",
-	target: { moduleAlias: "iam.user" },
-	navigator: { emptyListScope: ({ currentUser: e, selectedNavigatorRecords: t }) => {
-		if (!(e?.system !== !0 || Object.values(t).some(Boolean))) return [{
-			fieldName: "tenantId",
-			operator: "NULL",
-			values: []
-		}];
-	} },
-	list: {
-		rowExpansion: {
-			key: "iam-user-sessions",
-			component: /* @__PURE__ */ K({
-				name: "UserSessionListExpansion",
-				__name: "UserSessionListExpansion",
-				props: { context: {} },
-				setup(e) {
-					let n = e, r = R(() => n.context.record.id == null ? void 0 : String(n.context.record.id)), i = Ot({
-						context: n.context.module,
-						source: "iam-user-list-expansion"
-					}), a = R(() => i.userSessionState(r.value)), o = R(() => a.value.records.filter((e) => !e.current && n.context.module.can("revokeSession", r.value) === !0)), s = R(() => o.value.length > 1 && n.context.module.can("revokeSessions", r.value) === !0);
-					Z([r, () => n.context.expanded], ([e, t]) => {
-						e && i.handleUserRowExpand({ id: e }, t);
-					}, { immediate: !0 });
-					let c = t((e) => i.handleUserSessionBusinessEvent(e));
-					be(() => {
-						c.unsubscribe(), i.reset();
-					});
-					async function l(e) {
-						let t = r.value;
-						t && !e.current && n.context.module.can("revokeSession", t) === !0 && await E({
-							title: "下线登录会话",
-							content: "确认下线该登录会话？",
-							okText: "下线",
-							danger: !0
-						}) && (await n.context.module.http.request({
-							method: "POST",
-							path: `/iam.user/${encodeURIComponent(t)}/sessions/${encodeURIComponent(e.id)}/revoke`
-						}), i.loadUserSessions(t));
-					}
-					async function u() {
-						let e = r.value, t = o.value.map((e) => e.id);
-						e && t.length !== 0 && n.context.module.can("revokeSessions", e) === !0 && await E({
-							title: "全部下线",
-							content: `确认下线该用户的 ${t.length} 个登录会话？`,
-							okText: "全部下线",
-							danger: !0
-						}) && (await n.context.module.http.request({
-							method: "POST",
-							path: `/iam.user/${encodeURIComponent(e)}/sessions/revoke`,
-							body: { sessionIds: t }
-						}), i.loadUserSessions(e));
-					}
-					return (t, n) => (q(), z(X(p), {
-						embedded: "",
-						sessions: a.value.records,
-						loading: a.value.loading,
-						error: a.value.error,
-						"can-revoke": (t) => !t.current && e.context.module.can("revokeSession", r.value) === !0,
-						"can-revoke-all": s.value,
-						onRefresh: n[0] ||= (e) => X(i).loadUserSessions(r.value),
-						onRevoke: l,
-						onRevokeAll: u
-					}, null, 8, [
-						"sessions",
-						"loading",
-						"error",
-						"can-revoke",
-						"can-revoke-all"
-					]));
-				}
-			})
-		},
-		columns: [{
-			key: "onlineStatus",
-			title: "在线状态",
-			width: "112px",
-			align: "center",
-			before: "enabled",
-			cell: St
-		}]
-	},
-	detail: { actions: [{
-		key: "iam-user-password",
-		actionCode: "changePassword",
-		title: "密码管理",
-		iconName: "lock",
-		state: (e) => ({ visible: e.id != null }),
-		run({ openDrawer: e }) {
-			e({
-				title: "密码管理",
-				width: "narrow",
-				component: Dt
-			});
-		}
-	}] }
-}, At = "/iam.role/scope-selection/descriptor", jt = "/iam.role/scope-selection/candidates";
-function Mt(e) {
-	return {
-		async descriptor() {
-			return Nt(await e.request({ path: At }));
-		},
-		async candidates(t) {
-			let n = Kt(t.pageNum) ?? 1, r = Kt(t.pageSize) ?? 100;
-			return Pt(await e.request({
-				method: "POST",
-				path: jt,
-				body: {
-					navigationKey: Ut(t.navigationKey, "navigationKey"),
-					level: t.level,
-					keyword: Ht(t.keyword),
-					parentId: Ht(t.parentId),
-					page: {
-						pageNum: n,
-						pageSize: r
-					}
-				}
-			}), n);
-		}
-	};
-}
-function Nt(e) {
-	let t = zt(e);
-	return {
-		directSelections: Bt(t.directSelections).flatMap(Ft),
-		navigations: Bt(t.navigations).flatMap(It)
-	};
-}
-function Pt(e, t) {
-	let n = zt(e), r = Bt(n.records).flatMap(Lt), i = Gt(n.pageNum) ?? t, a = Gt(n.pages), o = Wt(n.totalKnown, !0) && a != null ? i < a : r.length > 0;
-	return {
-		records: r,
-		hasMore: o,
-		...o ? { nextPage: i + 1 } : {}
-	};
-}
-function Ft(e) {
-	let t = zt(e), n = Vt(t.selectionKey);
-	return n ? [{
-		selectionKey: n,
-		label: Vt(t.title ?? t.label) ?? n
-	}] : [];
-}
-function It(e) {
-	let t = zt(e), n = Vt(t.navigationKey), r = Rt(t.level);
-	return !n || !r ? [] : [{
-		navigationKey: n,
-		level: r,
-		label: Vt(t.title ?? t.label) ?? n
-	}];
-}
-function Lt(e) {
-	let t = zt(e), n = Vt(t.id), r = Vt(t.selectionKey);
-	return !n || !r ? [] : [{
-		id: n,
-		selectionKey: r,
-		label: Vt(t.title ?? t.label) ?? r,
-		...Vt(t.subtitle ?? t.secondaryLabel) ? { secondaryLabel: Vt(t.subtitle ?? t.secondaryLabel) } : {},
-		expandable: Wt(t.expandable, !1)
-	}];
-}
-function Rt(e) {
-	return e === "TENANT" || e === "ORGANIZATION" ? e : void 0;
-}
-function zt(e) {
-	return e && typeof e == "object" && !Array.isArray(e) ? e : {};
-}
-function Bt(e) {
-	return Array.isArray(e) ? e : [];
-}
-function Vt(e) {
-	return typeof e == "string" ? Ht(e) : void 0;
-}
-function Ht(e) {
-	return e?.trim() || void 0;
-}
-function Ut(e, t) {
-	let n = Ht(e);
-	if (!n) throw Error(`角色归属范围${t}不能为空`);
-	return n;
-}
-function Wt(e, t) {
-	return typeof e == "boolean" ? e : t;
-}
-function Gt(e) {
-	return typeof e == "number" && Number.isInteger(e) && e > 0 ? e : void 0;
-}
-function Kt(e) {
-	return typeof e == "number" && Number.isInteger(e) && e > 0 ? e : void 0;
-}
-//#endregion
-//#region src/platform-admin-runtime/role/RoleScopeTree.vue
-var qt = /* @__PURE__ */ K({
-	name: "RoleScopeTree",
-	__name: "RoleScopeTree",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = Mt(ut()), r = J(), i = J(""), a = J(!1), o = J([]), s = J([]), c = J(0), l = J(/* @__PURE__ */ new Map()), u = R(() => t.context.selectionKey), f = R(() => r.value?.navigations.some((e) => e.level === "TENANT") === !0), p = R(() => r.value?.navigations.length !== 0), m = R(() => f.value ? "租户" : "机构"), h = O({
-			nodes: () => o.value,
-			loader: () => ee,
-			version: () => c.value
-		}), g = h.nodes, _ = h.states, v = 0, b;
-		ye(() => void x()), ve(() => {
-			v += 1, b && clearTimeout(b);
-		}), Z(i, () => {
-			p.value && (b && clearTimeout(b), b = setTimeout(() => void C(), 240));
-		});
-		async function x() {
-			a.value = !0;
-			try {
-				r.value = await n.descriptor();
-				let e = r.value.directSelections[0];
-				!t.context.selectionKey && e && ne({
-					key: e.selectionKey,
-					label: e.label
-				}), await S();
-			} catch (e) {
-				w(e, {
-					source: "role-scope-tree",
-					phase: "load"
-				});
-			} finally {
-				a.value = !1;
-			}
-		}
-		async function S(e = {}) {
-			let t = r.value;
-			if (!t) return;
-			let n = ++v;
-			if (!e.append) {
-				s.value = [], c.value += 1, a.value = !0;
-				try {
-					let e = T(t);
-					if (n !== v) return;
-					l.value = /* @__PURE__ */ new Map(), A(e), o.value = e.map((e) => e.ui);
-				} catch (e) {
-					if (n !== v) return;
-					o.value = [], w(e, {
-						source: "role-scope-tree",
-						phase: "load"
-					});
-				} finally {
-					n === v && (a.value = !1);
-				}
-			}
-		}
-		async function C() {
-			if (await S(), !i.value.trim()) return;
-			let e = (r.value?.navigations ?? []).map((e) => `navigation:${e.navigationKey}`);
-			s.value = e, await he(), await Promise.all(e.map((e) => h.request(e, "refresh")));
-		}
-		function T(e) {
-			return [
-				...e.directSelections.map((e) => ({
-					ui: {
-						key: e.selectionKey,
-						title: e.label,
-						isLeaf: !0
-					},
-					selection: {
-						key: e.selectionKey,
-						label: e.label
-					}
-				})),
-				...e.navigations.filter((e) => e.level === "ORGANIZATION").map((e) => E(e)),
-				...e.navigations.filter((e) => e.level === "TENANT").map((e) => E(e))
-			];
-		}
-		function E(e) {
-			return {
-				ui: {
-					key: `navigation:${e.navigationKey}`,
-					title: e.label,
-					isLeaf: !1
-				},
-				children: {
-					navigationKey: e.navigationKey,
-					level: e.level
-				}
-			};
-		}
-		function D(e, t, n) {
-			let r = k(e, t, n);
-			return {
-				ui: {
-					key: e.selectionKey,
-					title: e.label,
-					secondary: e.secondaryLabel,
-					isLeaf: !r
-				},
-				selection: {
-					key: e.selectionKey,
-					label: e.label,
-					secondaryLabel: e.secondaryLabel
-				},
-				children: r
-			};
-		}
-		function k(e, t, n) {
-			return t === "TENANT" ? {
-				navigationKey: e.selectionKey,
-				level: "ORGANIZATION"
-			} : e.expandable ? {
-				navigationKey: n,
-				level: "ORGANIZATION",
-				parentId: e.id
-			} : void 0;
-		}
-		async function ee(e, t) {
-			let r = l.value.get(e.key);
-			if (!r?.children) throw Error("角色归属范围已失效");
-			try {
-				let e = await n.candidates({
-					...r.children,
-					keyword: i.value.trim() || void 0,
-					pageNum: t.reason === "load-more" ? Number(t.cursor) : 1
-				});
-				t.signal.throwIfAborted();
-				let a = e.records.map((e) => D(e, r.children.level, r.children.navigationKey));
-				return A(a), {
-					mode: t.reason === "load-more" ? "append" : "replace",
-					nodes: a.map((e) => e.ui),
-					hasMore: e.hasMore,
-					nextCursor: e.nextPage == null ? void 0 : String(e.nextPage)
-				};
-			} catch (e) {
-				throw t.signal.aborted || w(e, {
-					source: "role-scope-tree",
-					phase: "load"
-				}), e;
-			}
-		}
-		function A(e) {
-			let t = new Map(l.value);
-			e.forEach((e) => t.set(e.ui.key, e)), l.value = t;
-		}
-		function te(e) {
-			let t = l.value.get(e.key)?.selection;
-			t && ne(t);
-		}
-		function ne(e) {
-			t.context.selectSelectionKey(e.key, {
-				label: e.label,
-				secondaryLabel: e.secondaryLabel
-			});
-		}
-		function M() {
-			let e = r.value?.directSelections[0];
-			e && ne({
-				key: e.selectionKey,
-				label: e.label
-			});
-		}
-		return (e, t) => (q(), z(X(y), {
-			class: "role-scope-tree",
-			title: m.value,
-			"refresh-title": "刷新角色归属范围",
-			"search-keyword": i.value,
-			"search-placeholder": "搜索名称、编码或标识",
-			searchable: p.value,
-			onRefresh: S,
-			"onUpdate:searchKeyword": t[3] ||= (e) => i.value = e
-		}, {
-			default: Q(() => [a.value ? (q(), z(X(d), {
-				key: 0,
-				tip: "加载角色归属范围"
-			})) : (q(), z(X(j), {
-				key: 1,
-				"expanded-keys": s.value,
-				"onUpdate:expandedKeys": t[0] ||= (e) => s.value = e,
-				nodes: X(g),
-				"selected-key": u.value,
-				"reload-key": c.value,
-				"load-strategy": "controlled",
-				"reload-on-reexpand": "",
-				"branch-states": X(_),
-				onLoadRequest: t[1] ||= (e) => X(h).request(e.node.key, e.reason, X(h).stateOf(e.node.key).status === "error"),
-				onSelect: te,
-				onDeselect: M,
-				onUnloadChildren: t[2] ||= (e) => X(h).release(e.key)
-			}, null, 8, [
-				"expanded-keys",
-				"nodes",
-				"selected-key",
-				"reload-key",
-				"branch-states"
-			]))]),
-			_: 1
-		}, 8, [
-			"title",
-			"search-keyword",
-			"searchable"
-		]));
-	}
-}), Jt = /* @__PURE__ */ K({
-	name: "RoleEnumTitleCell",
-	__name: "RoleEnumTitleCell",
-	props: {
-		record: {},
-		column: {}
-	},
-	setup(e) {
-		let t = e, n = R(() => {
-			let e = String(t.record[t.column?.key ?? ""] ?? "");
-			return {
-				account: "账号角色",
-				employment: "任职角色",
-				standard: "标准角色",
-				group: "角色组",
-				dataGrant: "数据授权角色",
-				system: "系统角色",
-				private: "私有",
-				ownerAndChildren: "本级及下级",
-				tenant: "租户公开",
-				platform: "全局公开"
-			}[e] ?? (e || "-");
-		});
-		return (e, t) => (q(), V("span", null, Y(n.value), 1));
-	}
-});
-//#endregion
-//#region src/views/roleGrantClient.ts
-function Yt(e) {
-	return {
-		accountRoleGrants(t, n) {
-			return e.request({
-				path: `/iam.role/${encodeURIComponent(t)}/account-grants`,
-				query: n ? { targetTenantId: n } : void 0
-			});
-		},
-		grantAccountRole(t, n) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/${encodeURIComponent(t)}/account-grants`,
-				body: n
-			});
-		},
-		deleteAccountRoleGrant(t, n, r) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/${encodeURIComponent(t)}/account-grants/${encodeURIComponent(n)}/delete`,
-				query: r ? { targetTenantId: r } : void 0
-			});
-		},
-		accountRoleCandidates(t, n) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/${encodeURIComponent(t)}/account-role-candidates/query`,
-				body: n
-			});
-		},
-		employmentRoleGrants(t) {
-			return e.request({ path: `/iam.role/${encodeURIComponent(t)}/employment-grants` });
-		},
-		grantEmploymentRole(t, n) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/${encodeURIComponent(t)}/employment-grants`,
-				body: { employeePositionId: n }
-			});
-		},
-		deleteEmploymentRoleGrant(t, n) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/${encodeURIComponent(t)}/employment-grants/${encodeURIComponent(n)}/delete`
-			});
-		},
-		employmentSelector(t, n) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/${encodeURIComponent(t)}/employment-selector/query`,
-				body: n
-			});
-		},
-		authorizationModules(t) {
-			return e.request({ path: `/iam.role/authorizationModules/${encodeURIComponent(t)}` });
-		},
-		permissionMatrix(t, n) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/permissionMatrix/${encodeURIComponent(t)}`,
-				body: { moduleAliases: n }
-			});
-		},
-		grantAction(t, n) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/grant/${encodeURIComponent(t)}`,
-				body: n
-			});
-		},
-		revokeAction(t, n, r) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/revoke/${encodeURIComponent(t)}`,
-				body: {
-					moduleAlias: n,
-					actionCode: r
-				}
-			});
-		},
-		replacePermissionMatrix(t, n) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/permissionMatrix/${encodeURIComponent(t)}/replace`,
-				body: { actions: n }
-			});
-		},
-		dataGrantActionMatrix(t) {
-			return e.request({ path: `/iam.role/dataGrantActionMatrix/${encodeURIComponent(t)}` });
-		},
-		dataScopePolicyCatalog(t, n) {
-			return e.request({
-				path: `/iam.role/dataScopePolicyCatalog/${encodeURIComponent(t)}`,
-				query: n ? { moduleAlias: n } : void 0
-			});
-		},
-		replaceDataGrantActions(t, n) {
-			return e.request({
-				method: "POST",
-				path: `/iam.role/dataGrantActions/${encodeURIComponent(t)}`,
-				body: { actions: n }
-			});
-		}
-	};
-}
-//#endregion
-//#region src/views/RoleAccountGrantDrawer.vue?vue&type=script&setup=true&lang.ts
-var Xt = {
-	key: 1,
-	class: "role-account-grant-drawer-state"
-}, Zt = {
-	key: 0,
-	class: "role-account-grant-target-tenant"
-}, Qt = {
-	key: 1,
-	class: "role-account-grant-target-hint"
-}, $t = { class: "role-account-grant-search" }, en = {
-	key: 0,
-	class: "role-account-grant-selected"
-}, tn = { class: "role-account-grant-selected-title" }, nn = { class: "role-account-grant-selected-list" }, rn = ["disabled", "onClick"], an = 20, on = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	name: "RoleAccountGrantDrawer",
-	__name: "RoleAccountGrantDrawer",
-	props: {
-		open: { type: Boolean },
-		container: {},
-		embedded: { type: Boolean },
-		drawerContext: {},
-		context: {},
-		role: {}
-	},
-	emits: ["close", "saved"],
-	setup(e, { emit: t }) {
-		let n = e, r = t, i = J([]), a = J({}), o = J([]), s = J(/* @__PURE__ */ new Set()), c = J(/* @__PURE__ */ new Set()), l = J(""), u = J(""), p = J(1), m = J(0), h = J(!1), g = J(!1), y = J(!1), b = J(!1), x = J(), C = R(() => Yt(n.context.http)), T = _({ moduleAlias: "iam.tenant" }), E = R(() => n.role?.id), O = R(() => n.role ? `绑定用户 - ${je(n.role)}` : "绑定用户"), ee = R(() => n.embedded ? "section" : ne), A = R(() => n.embedded ? {} : {
-			open: n.open,
-			title: O.value,
-			renderMode: n.container ? "inline" : "portal",
-			closeTitle: "关闭",
-			onClose: ye
-		}), te = R(() => n.role?.ownerScopeType === "platform"), j = R(() => x.value?.id), M = R(() => !te.value || !!j.value), re = R(() => T), ie = R(() => {
-			let e = /* @__PURE__ */ new Map();
-			for (let t of i.value) t.userId && e.set(t.userId, t);
-			return e;
-		}), ae = R(() => o.value.filter((e) => e.id).map((e) => ({
-			id: e.id,
-			username: ke(e),
-			employeeNo: e.employeeNo ?? "",
-			employeeTitle: e.employeeTitle ?? "",
-			organizationTitle: e.organizationTitle ?? e.organizationId ?? "",
-			departmentTitle: e.departmentTitle ?? e.departmentId ?? "",
-			boundTitle: c.value.has(e.id) ? "已绑定" : "未绑定"
-		}))), N = R(() => [...s.value].map((e) => a.value[e] ?? Oe(e))), P = R(() => [...s.value].filter((e) => !c.value.has(e))), F = R(() => [...c.value].filter((e) => !s.value.has(e))), I = R(() => P.value.length > 0 || F.value.length > 0), se = {
-			rowKey: "id",
-			columns: [
-				{
-					title: "用户账号",
-					key: "username",
-					width: 140
-				},
-				{
-					title: "职员姓名",
-					key: "employeeTitle",
-					width: 120
-				},
-				{
-					title: "职员工号",
-					key: "employeeNo",
-					width: 120
-				},
-				{
-					title: "所属机构",
-					key: "organizationTitle",
-					width: 140
-				},
-				{
-					title: "所属部门",
-					key: "departmentTitle",
-					width: 140
-				},
-				{
-					title: "状态",
-					key: "boundTitle",
-					width: 90
-				}
-			]
-		}, ce = R(() => ({
-			selectedRowKeys: [...s.value],
-			preserveSelectedRowKeys: !0,
-			disabledOf: () => y.value,
-			onChange: (e) => {
-				s.value = new Set(e.map((e) => String(e)));
-			}
-		})), le = R(() => ({
-			current: p.value,
-			total: m.value,
-			pageSize: an,
-			showSizeChanger: !1,
-			showQuickJumper: !1,
-			onChange: (e) => void K(e)
-		}));
-		Z(() => [n.open, n.role?.id], ([e]) => {
-			e ? G() : be();
-		}, { immediate: !0 }), Z([
-			() => n.embedded,
-			() => n.drawerContext,
-			s,
-			I,
-			M,
-			P,
-			F,
-			y,
-			h
-		], ue, { immediate: !0 }), ve(() => n.drawerContext?.setOperation(void 0));
-		function ue() {
-			let e = n.drawerContext;
-			n.embedded && e && (e.setSubtitle(`角色：${je(n.role ?? {})} · ${Me(n.role)}`), e.setOperation({
-				summary: de(),
-				actions: [{
-					key: "cancel-account-role-grants",
-					label: "取消",
-					disabled: y.value || h.value,
-					run: ye
-				}, {
-					key: "save-account-role-grants",
-					label: "确定",
-					emphasis: "primary",
-					disabled: h.value || !M.value || !I.value,
-					loading: y.value,
-					run: () => void _e()
-				}]
-			}));
-		}
-		function de() {
-			return M.value ? I.value ? `已选 ${s.value.size} 个用户 · 新增 ${P.value.length} · 移除 ${F.value.length}` : `已选 ${s.value.size} 个用户` : "请选择目标租户";
-		}
-		async function G() {
-			let e = E.value;
-			if (!e) {
-				be();
-				return;
-			}
-			if (!M.value) {
-				Se();
-				return;
-			}
-			h.value = !0, b.value = !1;
-			try {
-				let t = await C.value.accountRoleGrants(e, j.value);
-				i.value = t;
-				let n = new Set(t.map((e) => e.userId).filter((e) => !!e));
-				c.value = n, s.value = new Set(n), a.value = De([...t.map((e) => Oe(e.userId)).filter((e) => !!e)]), await K(1);
-			} catch (e) {
-				b.value = !0, w(e, {
-					source: "role-account-grants",
-					phase: "load"
-				});
-			} finally {
-				h.value = !1;
-			}
-		}
-		async function K(e) {
-			let t = E.value;
-			if (t && M.value) {
-				g.value = !0;
-				try {
-					let n = await C.value.accountRoleCandidates(t, {
-						targetTenantId: j.value,
-						keyword: u.value,
-						enabledOnly: !0,
-						page: {
-							pageNum: Math.max(0, e),
-							pageSize: an
-						}
-					});
-					o.value = n.records, a.value = {
-						...a.value,
-						...De(n.records)
-					}, p.value = n.pageNum, m.value = n.total;
-				} catch (e) {
-					w(e, {
-						source: "role-account-grants",
-						phase: "load"
-					});
-				} finally {
-					g.value = !1;
-				}
-			}
-		}
-		function pe() {
-			u.value = l.value.trim(), K(0);
-		}
-		function he(e, t) {
-			let n = new Set(s.value);
-			t ? n.add(e) : n.delete(e), s.value = n;
-		}
-		async function _e() {
-			let e = E.value;
-			if (e && M.value) {
-				if (!I.value) {
-					r("close");
-					return;
-				}
-				y.value = !0;
-				try {
-					for (let t of P.value) await C.value.grantAccountRole(e, {
-						userId: t,
-						targetTenantId: j.value
-					});
-					for (let t of F.value) {
-						let n = ie.value.get(t)?.id;
-						n && await C.value.deleteAccountRoleGrant(e, n, j.value);
-					}
-					await f({
-						success: !0,
-						message: "用户绑定已保存"
-					}, {
-						source: "role-account-grants",
-						phase: "action",
-						fallbackMessage: "用户绑定已保存"
-					}), r("saved"), r("close");
-				} catch (e) {
-					w(e, {
-						source: "role-account-grants",
-						phase: "action"
-					});
-				} finally {
-					y.value = !1;
-				}
-			}
-		}
-		function ye() {
-			y.value || r("close");
-		}
-		function be() {
-			x.value = void 0, Se();
-		}
-		function Se() {
-			i.value = [], a.value = {}, o.value = [], s.value = /* @__PURE__ */ new Set(), c.value = /* @__PURE__ */ new Set(), l.value = "", u.value = "", p.value = 1, m.value = 0, h.value = !1, g.value = !1, y.value = !1, b.value = !1;
-		}
-		async function we(e) {
-			if (!e) {
-				x.value = void 0, Se();
-				return;
-			}
-			let t = await T.crud.view(e);
-			x.value = t ?? {
-				id: e,
-				title: e
-			}, await G();
-		}
-		function Ee(e) {
-			he(e, !1);
-		}
-		function De(e) {
-			let t = {};
-			for (let n of e) n.id && (t[n.id] = n);
-			return t;
-		}
-		function Oe(e) {
-			return e ? {
-				id: e,
-				username: e
-			} : void 0;
-		}
-		function ke(e) {
-			return String(e?.username ?? e?.id ?? "未知用户");
-		}
-		function Ae(e) {
-			return e.employeeTitle && e.employeeNo ? `${e.employeeTitle} / ${e.employeeNo}` : e.employeeTitle ?? e.employeeNo ?? e.employeeId ?? e.id;
-		}
-		function je(e) {
-			return String(e.title ?? e.id ?? "角色");
-		}
-		function Me(e) {
-			return e?.ownerScopeType === "platform" ? "平台范围" : e?.ownerScopeType === "organization" ? "机构范围" : "租户范围";
-		}
-		return (t, n) => (q(), z(Ce(ee.value), me(A.value, { class: { "role-account-grant-drawer-surface": e.embedded } }), fe({
-			default: Q(() => [h.value ? (q(), z(X(d), {
-				key: 0,
-				class: "role-account-grant-drawer-state",
-				tip: "加载用户"
-			})) : b.value ? (q(), V("div", Xt, [W(X(v), {
-				title: "用户加载失败",
-				message: "无法加载当前角色的用户绑定"
-			}), W(X(S), {
-				type: "primary",
-				"icon-name": "reload",
-				onClick: G
-			}, {
-				default: Q(() => [...n[3] ||= [U("重试", -1)]]),
-				_: 1
-			})])) : (q(), V("section", {
-				key: 2,
-				class: ge(["role-account-grant-drawer-body", { "role-account-grant-drawer-body--target-tenant": te.value }])
-			}, [te.value ? (q(), V("label", Zt, [n[4] ||= H("span", null, "目标租户", -1), W(X(oe), {
-				context: re.value,
-				value: j.value,
-				mode: "list",
-				placeholder: "请选择角色下发的目标租户",
-				disabled: y.value || h.value,
-				"onUpdate:value": we
-			}, null, 8, [
-				"context",
-				"value",
-				"disabled"
-			])])) : B("v-if", !0), M.value ? (q(), V(L, { key: 2 }, [
-				H("div", $t, [W(X(k), {
-					value: l.value,
-					"allow-clear": "",
-					disabled: y.value,
-					placeholder: "搜索用户账号",
-					"onUpdate:value": n[0] ||= (e) => l.value = e,
-					onKeydown: Te(pe, ["enter"])
-				}, null, 8, ["value", "disabled"]), W(X(S), {
-					"icon-name": "search",
-					disabled: y.value,
-					onClick: pe
-				}, {
-					default: Q(() => [...n[5] ||= [U("查询", -1)]]),
-					_: 1
-				}, 8, ["disabled"])]),
-				W(X(D), {
-					class: "role-account-grant-table",
-					size: "middle",
-					contract: se,
-					rows: ae.value,
-					loading: g.value,
-					pagination: le.value,
-					selection: ce.value,
-					"fill-height": ""
-				}, null, 8, [
-					"rows",
-					"loading",
-					"pagination",
-					"selection"
-				]),
-				N.value.length > 0 ? (q(), V("section", en, [H("div", tn, [n[6] ||= H("strong", null, "已选用户", -1), H("span", null, Y(N.value.length) + " 个", 1)]), H("div", nn, [(q(!0), V(L, null, xe(N.value, (e) => (q(), V("button", {
-					key: e.id,
-					type: "button",
-					disabled: y.value,
-					onClick: (t) => Ee(e.id)
-				}, [H("span", null, Y(ke(e)), 1), H("small", null, Y(Ae(e)), 1)], 8, rn))), 128))])])) : B("v-if", !0)
-			], 64)) : (q(), V("div", Qt, " 平台共享角色需要先选择目标租户，再加载可绑定账号。 "))], 2))]),
-			_: 2
-		}, [e.embedded ? void 0 : {
-			name: "operation",
-			fn: Q(() => [W(X(S), {
-				disabled: y.value || h.value,
-				onClick: ye
-			}, {
-				default: Q(() => [...n[1] ||= [U("取消", -1)]]),
-				_: 1
-			}, 8, ["disabled"]), W(X(S), {
-				type: "primary",
-				loading: y.value,
-				disabled: h.value || !I.value,
-				onClick: _e
-			}, {
-				default: Q(() => [...n[2] ||= [U(" 确定 ", -1)]]),
-				_: 1
-			}, 8, ["loading", "disabled"])]),
-			key: "0"
-		}]), 1040, ["class"]));
-	}
-}), [["__scopeId", "data-v-fc27c9ca"]]), sn = /* @__PURE__ */ K({
-	name: "RoleAccountGrantDrawerSurface",
-	__name: "RoleAccountGrantDrawerSurface",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = R(() => t.context.module), r = R(() => t.context.record);
-		return (e, i) => (q(), z(on, {
-			open: "",
-			embedded: "",
-			"drawer-context": t.context,
-			context: n.value,
-			role: r.value,
-			onClose: t.context.close,
-			onSaved: t.context.refreshList
-		}, null, 8, [
-			"drawer-context",
-			"context",
-			"role",
-			"onClose",
-			"onSaved"
-		]));
-	}
-}), cn = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	name: "EmployeeEmploymentTable",
-	__name: "EmployeeEmploymentTable",
-	props: {
-		rows: {},
-		selectedIds: { default: () => /* @__PURE__ */ new Set() },
-		selectable: {
-			type: Boolean,
-			default: !1
-		},
-		disabled: {
-			type: Boolean,
-			default: !1
-		},
-		pagination: {
-			type: [Boolean, Object],
-			default: !1
-		},
-		fillHeight: {
-			type: Boolean,
-			default: !1
-		}
-	},
-	emits: ["update:selectedIds"],
-	setup(e, { emit: t }) {
-		let n = e, r = t, i = J([]), a = [
-			{
-				key: "title",
-				title: "职员",
-				width: 160
-			},
-			{
-				key: "employeeNo",
-				title: "工号",
-				width: 140
-			},
-			{
-				key: "organizationTitle",
-				title: "所属机构",
-				width: 180
-			},
-			{
-				key: "employmentCount",
-				title: "任职",
-				width: 88,
-				align: "right"
-			},
-			{
-				key: "selectedCount",
-				title: "已选",
-				width: 88,
-				align: "right"
-			}
-		], o = [
-			{
-				key: "position",
-				title: "岗位",
-				width: 160
-			},
-			{
-				key: "organization",
-				title: "机构",
-				width: 160
-			},
-			{
-				key: "department",
-				title: "部门",
-				width: 160
-			},
-			{
-				key: "primaryPosition",
-				title: "主岗位",
-				width: 88
-			}
-		], s = R(() => {
-			let e = /* @__PURE__ */ new Map();
-			for (let t of n.rows) {
-				let n = t.employeeId ?? t.id, r = e.get(n) ?? {
-					employeeId: n,
-					title: t.employeeTitle ?? n,
-					employeeNo: t.employeeNo,
-					organizationTitle: t.organizationTitle,
-					positions: []
-				};
-				r.positions.push(t), e.set(n, r);
-			}
-			return [...e.values()];
-		}), c = R(() => s.value);
-		function l(e, t) {
-			let n = t;
-			return e.key === "title" ? n.title : e.key === "employeeNo" ? n.employeeNo ?? n.employeeId : e.key === "organizationTitle" ? n.organizationTitle ?? "-" : e.key === "employmentCount" ? `${n.positions.length} 项` : e.key === "selectedCount" ? `${d(n)} 项` : "";
-		}
-		function u(e, t) {
-			let n = t;
-			return e.key === "position" ? n.positionTitle ?? n.positionId : e.key === "organization" ? n.organizationTitle ?? n.organizationId : e.key === "department" ? n.departmentTitle ?? n.departmentId : e.key === "primaryPosition" ? n.primaryPosition ? "是" : "否" : "";
-		}
-		function d(e) {
-			return e.positions.filter((e) => n.selectedIds.has(e.id)).length;
-		}
-		function f(e) {
-			if (n.selectable) return {
-				selectedRowKeys: e.positions.filter((e) => n.selectedIds.has(e.id)).map((e) => e.id),
-				preserveSelectedRowKeys: !0,
-				disabledOf: () => n.disabled,
-				onChange: (t) => p(e, t)
-			};
-		}
-		function p(e, t) {
-			let i = new Set(n.selectedIds);
-			for (let t of e.positions) i.delete(t.id);
-			for (let e of t) i.add(String(e));
-			r("update:selectedIds", i);
-		}
-		function m(e, t) {
-			let n = e.employeeId;
-			i.value = t ? Array.from(/* @__PURE__ */ new Set([...i.value, n])) : i.value.filter((e) => e !== n);
-		}
-		function h(e) {
-			let t = e.employeeId;
-			m(e, !i.value.includes(t));
-		}
-		return (t, n) => (q(), z(X(M), {
-			class: "employee-employment-table",
-			columns: a,
-			rows: c.value,
-			"row-key": "employeeId",
-			pagination: e.pagination,
-			"expanded-row-keys": i.value,
-			"clickable-rows": "",
-			"horizontal-scroll": "",
-			"fill-height": e.fillHeight,
-			onRowExpand: m,
-			onRowDblclick: h
-		}, {
-			cell: Q(({ column: e, record: t }) => [U(Y(l(e, t)), 1)]),
-			expandedRow: Q(({ record: e }) => [W(X(x), { title: "任职信息" }, {
-				default: Q(() => [W(X(M), {
-					columns: o,
-					rows: e.positions,
-					"row-key": "id",
-					pagination: !1,
-					selection: f(e),
-					"horizontal-scroll": "",
-					"row-muted": (e) => e.enabled === !1
-				}, {
-					cell: Q(({ column: e, record: t }) => [U(Y(u(e, t)), 1)]),
-					_: 1
-				}, 8, [
-					"rows",
-					"selection",
-					"row-muted"
-				])]),
-				_: 2
-			}, 1024)]),
-			_: 1
-		}, 8, [
-			"rows",
-			"pagination",
-			"expanded-row-keys",
-			"fill-height"
-		]));
-	}
-}), [["__scopeId", "data-v-21f1027e"]]), ln = { key: 1 }, un = {
-	key: 2,
-	class: "role-employment-grant-body"
-}, dn = {
-	key: 0,
-	class: "role-employment-grant-selected"
-}, fn = { class: "role-employment-grant-selected-title" }, pn = { class: "role-employment-grant-selected-list" }, mn = ["disabled", "onClick"], hn = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	name: "RoleEmploymentGrantDrawer",
-	__name: "RoleEmploymentGrantDrawer",
-	props: {
-		open: { type: Boolean },
-		container: {},
-		embedded: { type: Boolean },
-		drawerContext: {},
-		context: {},
-		role: {}
-	},
-	emits: ["close", "saved"],
-	setup(e, { emit: t }) {
-		let n = e, r = t, i = J([]), a = J([]), o = J({}), s = J(/* @__PURE__ */ new Set()), c = J(/* @__PURE__ */ new Set()), l = J(!1), u = J(!1), p = J(!1), m = J(!1), h = J(1), g = J(0), _ = J(""), y = R(() => n.role?.id), b = R(() => Yt(n.context.http)), x = R(() => `绑定任职 - ${n.role?.title ?? n.role?.id ?? ""}`), C = R(() => n.embedded ? "section" : ne), T = R(() => n.embedded ? {} : {
-			open: n.open,
-			title: x.value,
-			renderMode: n.container ? "inline" : "portal",
-			closeTitle: "关闭",
-			onClose: () => !p.value && r("close")
-		}), E = R(() => [...s.value].filter((e) => !c.value.has(e))), D = R(() => [...c.value].filter((e) => !s.value.has(e))), O = R(() => new Map(i.value.map((e) => [e.employeePositionId, e]))), ee = R(() => a.value.filter((e) => !_.value.trim() || ae(e).includes(_.value.trim()))), A = R(() => [...s.value].map((e) => o.value[e] ?? P(e))), te = R(() => ({
-			current: h.value,
-			total: g.value,
-			pageSize: 50,
-			showSizeChanger: !1,
-			showQuickJumper: !1,
-			onChange: (e) => void M(e)
-		}));
-		Z(() => [n.open, n.role?.id], ([e]) => {
-			e ? M() : ie();
-		}, { immediate: !0 }), Z([
-			() => n.embedded,
-			() => n.drawerContext,
-			s,
-			E,
-			D,
-			p,
-			u
-		], j, { immediate: !0 }), ve(() => n.drawerContext?.setOperation(void 0));
-		function j() {
-			let e = n.drawerContext;
-			n.embedded && e && (e.setSubtitle(`角色：${n.role?.title ?? n.role?.id ?? "角色"} · ${se(n.role)}`), e.setOperation({
-				summary: `已选 ${s.value.size} 个任职${E.value.length || D.value.length ? ` · 新增 ${E.value.length} · 移除 ${D.value.length}` : ""}`,
-				actions: [{
-					key: "cancel-employment-role-grants",
-					label: "取消",
-					disabled: p.value,
-					run: () => r("close")
-				}, {
-					key: "save-employment-role-grants",
-					label: "确定",
-					emphasis: "primary",
-					disabled: u.value || E.value.length === 0 && D.value.length === 0,
-					loading: p.value,
-					run: () => void re()
-				}]
-			}));
-		}
-		async function M(e = 1) {
-			let t = y.value;
-			if (t) {
-				u.value = !0, m.value = !1;
-				try {
-					let [n, r] = await Promise.all([b.value.employmentRoleGrants(t), b.value.employmentSelector(t, {
-						enabledOnly: !0,
-						page: {
-							pageNum: e,
-							pageSize: 50
-						}
-					})]);
-					i.value = n, c.value = new Set(n.map((e) => e.employeePositionId).filter((e) => !!e)), o.value = {
-						...o.value,
-						...N(r.records)
-					}, l.value ||= (s.value = new Set(c.value), !0), a.value = r.records, h.value = r.pageNum, g.value = r.total;
-				} catch (e) {
-					m.value = !0, w(e, {
-						source: "role-employment-grants",
-						phase: "load"
-					});
-				} finally {
-					u.value = !1;
-				}
-			}
-		}
-		async function re() {
-			let e = y.value;
-			if (e) {
-				p.value = !0;
-				try {
-					for (let t of E.value) await b.value.grantEmploymentRole(e, t);
-					for (let t of D.value) {
-						let n = O.value.get(t)?.id;
-						n && await b.value.deleteEmploymentRoleGrant(e, n);
-					}
-					await f({
-						success: !0,
-						message: "任职角色授权已保存"
-					}, {
-						source: "role-employment-grants",
-						phase: "action"
-					}), r("saved"), r("close");
-				} catch (e) {
-					w(e, {
-						source: "role-employment-grants",
-						phase: "action"
-					});
-				} finally {
-					p.value = !1;
-				}
-			}
-		}
-		function ie() {
-			i.value = [], a.value = [], o.value = {}, s.value = /* @__PURE__ */ new Set(), c.value = /* @__PURE__ */ new Set(), l.value = !1, _.value = "", h.value = 1, g.value = 0, m.value = !1;
-		}
-		function ae(e) {
-			return [
-				e.employeeTitle,
-				e.employeeNo,
-				e.organizationTitle,
-				e.departmentTitle,
-				e.positionTitle
-			].filter(Boolean).join(" ");
-		}
-		function oe(e) {
-			let t = new Set(s.value);
-			t.delete(e), s.value = t;
-		}
-		function N(e) {
-			let t = {};
-			for (let n of e) n.id && (t[n.id] = n);
-			return t;
-		}
-		function P(e) {
-			return {
-				id: e,
-				positionId: e
-			};
-		}
-		function F(e) {
-			let t = e.positionTitle ?? e.positionId ?? e.id;
-			return e.employeeTitle ? `${e.employeeTitle} · ${t}` : t;
-		}
-		function I(e) {
-			return [
-				e.employeeNo,
-				e.organizationTitle ?? e.organizationId,
-				e.departmentTitle ?? e.departmentId
-			].filter(Boolean).join(" / ") || e.id;
-		}
-		function se(e) {
-			return e?.ownerScopeType === "platform" ? "平台范围" : e?.ownerScopeType === "organization" ? "机构范围" : "租户范围";
-		}
-		return (t, n) => (q(), z(Ce(C.value), me(T.value, { class: { "role-employment-grant-drawer-surface": e.embedded } }), fe({
-			default: Q(() => [u.value ? (q(), z(X(d), {
-				key: 0,
-				tip: "加载任职"
-			})) : m.value ? (q(), V("div", ln, [W(X(v), {
-				title: "任职加载失败",
-				message: "无法加载任职授权"
-			}), W(X(S), { onClick: n[1] ||= (e) => M() }, {
-				default: Q(() => [...n[6] ||= [U("重试", -1)]]),
-				_: 1
-			})])) : (q(), V("section", un, [
-				W(X(k), {
-					value: _.value,
-					"onUpdate:value": n[2] ||= (e) => _.value = e,
-					"allow-clear": "",
-					placeholder: "筛选职员、工号、机构、部门或岗位"
-				}, null, 8, ["value"]),
-				W(cn, {
-					"selected-ids": s.value,
-					"onUpdate:selectedIds": n[3] ||= (e) => s.value = e,
-					rows: ee.value,
-					selectable: "",
-					disabled: p.value,
-					pagination: te.value,
-					"fill-height": ""
-				}, null, 8, [
-					"selected-ids",
-					"rows",
-					"disabled",
-					"pagination"
-				]),
-				A.value.length > 0 ? (q(), V("section", dn, [H("div", fn, [n[7] ||= H("strong", null, "已选任职", -1), H("span", null, Y(A.value.length) + " 个", 1)]), H("div", pn, [(q(!0), V(L, null, xe(A.value, (e) => (q(), V("button", {
-					key: e.id,
-					type: "button",
-					disabled: p.value,
-					onClick: (t) => oe(e.id)
-				}, [H("span", null, Y(F(e)), 1), H("small", null, Y(I(e)), 1)], 8, mn))), 128))])])) : B("v-if", !0)
-			]))]),
-			_: 2
-		}, [e.embedded ? void 0 : {
-			name: "operation",
-			fn: Q(() => [W(X(S), {
-				disabled: p.value,
-				onClick: n[0] ||= (e) => r("close")
-			}, {
-				default: Q(() => [...n[4] ||= [U("取消", -1)]]),
-				_: 1
-			}, 8, ["disabled"]), W(X(S), {
-				type: "primary",
-				loading: p.value,
-				disabled: u.value || E.value.length === 0 && D.value.length === 0,
-				onClick: re
-			}, {
-				default: Q(() => [...n[5] ||= [U(" 确定 ", -1)]]),
-				_: 1
-			}, 8, ["loading", "disabled"])]),
-			key: "0"
-		}]), 1040, ["class"]));
-	}
-}), [["__scopeId", "data-v-06db3659"]]), gn = /* @__PURE__ */ K({
-	name: "RoleEmploymentGrantDrawerSurface",
-	__name: "RoleEmploymentGrantDrawerSurface",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = R(() => t.context.module), r = R(() => t.context.record);
-		return (e, i) => (q(), z(hn, {
-			open: "",
-			embedded: "",
-			"drawer-context": t.context,
-			context: n.value,
-			role: r.value,
-			onClose: t.context.close,
-			onSaved: t.context.refreshList
-		}, null, 8, [
-			"drawer-context",
-			"context",
-			"role",
-			"onClose",
-			"onSaved"
-		]));
-	}
-}), _n = /* @__PURE__ */ K({
-	name: "WorkspaceViewDrawer",
-	__name: "WorkspaceViewDrawer",
-	props: {
-		open: { type: Boolean },
-		title: {},
-		container: {},
-		subtitle: { default: void 0 },
-		profile: { default: "detail" },
-		promotion: { default: void 0 },
-		dismissal: { default: void 0 },
-		beforeClose: {
-			type: Function,
-			default: void 0
-		}
-	},
-	emits: ["close"],
-	setup(e, { emit: t }) {
-		let n = e, r = t, i = R(() => n.profile === "wide-work" ? "wide" : "standard");
-		return (t, n) => (q(), z(X(ne), {
-			open: e.open,
-			title: e.title,
-			"render-mode": e.container ? "inline" : "portal",
-			subtitle: e.subtitle,
-			width: i.value,
-			promotion: e.promotion,
-			dismissal: e.dismissal,
-			"before-close": e.beforeClose,
-			onClose: n[0] ||= (e) => r("close")
-		}, fe({
-			default: Q(() => [Se(t.$slots, "default")]),
-			_: 2
-		}, [t.$slots.operation ? {
-			name: "operation",
-			fn: Q(() => [Se(t.$slots, "operation")]),
-			key: "0"
-		} : void 0]), 1032, [
-			"open",
-			"title",
-			"render-mode",
-			"subtitle",
-			"width",
-			"promotion",
-			"dismissal",
-			"before-close"
-		]));
-	}
-});
-//#endregion
-//#region src/platform-admin-runtime/useWorkspaceViewPromotion.ts
-function vn(e) {
-	return e.hasStableIdentity && e.busy !== !0 && e.canChangeHost !== !1;
-}
-function yn(e) {
-	let t = l();
-	return R(() => {
-		let n = we(e.input);
-		if (n && vn(we(e.eligibility)) && t) return {
-			title: "固定为页签",
-			promote: async () => {
-				if (await e.beforePromote?.(n) === !1) {
-					e.onPromotionRejected?.();
-					return;
-				}
-				let r = t.openPage(o(e.view, n, "tab", we(e.title)));
-				e.onPromoted?.(r);
-			}
-		};
-	});
-}
-//#endregion
-//#region src/platform-admin-runtime/workspaceViewSessions.ts
-var bn = /* @__PURE__ */ new Map(), xn = /* @__PURE__ */ new Map();
-function Sn(e, t) {
-	return `${e.type}:${En(t)}`;
-}
-async function Cn(e, t, n) {
-	let r = Sn(e, t), i = xn.get(r), a = i && [...i].at(-1);
-	return a ? await a(Dn(n)) ? "accepted" : "rejected" : (bn.set(r, Dn(n)), "accepted");
-}
-function wn(e, t, n) {
-	let r = Sn(e, t), i = xn.get(r) ?? /* @__PURE__ */ new Set();
-	return i.add(n), xn.set(r, i), () => {
-		i.delete(n), i.size === 0 && xn.delete(r);
-	};
-}
-function Tn(e, t) {
-	let n = Sn(e, t), r = bn.get(n);
-	return bn.delete(n), r;
-}
-function En(e) {
-	return Array.isArray(e) ? `[${e.map(En).join(",")}]` : e && typeof e == "object" ? `{${Object.entries(e).sort(([e], [t]) => e.localeCompare(t)).map(([e, t]) => `${JSON.stringify(e)}:${En(t)}`).join(",")}}` : JSON.stringify(e);
-}
-function Dn(e) {
-	return JSON.parse(JSON.stringify(e));
-}
-//#endregion
-//#region src/views/roleAuthorizationWorkspaceSession.ts
-function On(e, t) {
-	return Cn(ke, e, t);
-}
-function kn(e, t) {
-	return wn(ke, e, t);
-}
-function An(e) {
-	return Tn(ke, e);
-}
-//#endregion
-//#region src/views/RoleAuthorizationView.vue?vue&type=script&setup=true&lang.ts
-var jn = { class: "panel-title" }, Mn = {
-	key: 0,
-	class: "authorization-column-header"
-}, Nn = {
-	key: 2,
-	class: "data-scope-editor"
-}, Pn = { key: 0 }, Fn = { key: 1 }, In = { key: 3 }, Ln = {
-	key: 4,
-	class: "not-applicable"
-}, Rn = /*@__PURE__*/ K({
-	name: "RoleAuthorizationView",
-	__name: "RoleAuthorizationView",
-	props: {
-		roleId: {},
-		moduleContext: {},
-		container: {},
-		drawer: { type: Boolean },
-		drawerContext: {}
-	},
-	emits: ["close"],
-	setup(e, { emit: t }) {
-		let n = e, r = t, i = _({ moduleAlias: "iam.role" }), a = n.moduleContext ?? i, o = Yt(a.http), l = n.roleId ?? new URLSearchParams(window.location.search).get("roleId") ?? "", u = s(), p = n.roleId ? { roleId: n.roleId } : void 0, m = p ? An(p) : void 0, h = J(), x = J([]), T = J(), D = J(""), O = J([]), k = J(), A = J(), te = J(!1), ne = J(!1), j = J(!1), oe = J(), N = J(), P = /* @__PURE__ */ new Map(), F = /* @__PURE__ */ new Map(), I = J(0), se, ce = R(() => h.value?.roleKind === "group"), le = R(() => h.value?.roleKind === "dataGrant"), ue = R(() => h.value?.assignmentType === "employment"), de = R(() => !!n.drawerContext), G = R(() => h.value?.title ?? l ?? "角色"), K = R(() => `授权：${G.value}`), me = R(() => he.value ? `动作授权 - ${he.value.title}` : `动作授权 - ${G.value}`), he = R(() => x.value.find((e) => e.moduleAlias === T.value)), be = R(() => {
-			let e = D.value.trim().toLocaleLowerCase(), t = new Set(e ? x.value.filter((t) => [
-				t.title,
-				t.moduleAlias,
-				t.applicationAlias
-			].filter((e) => !!e).some((t) => t.toLocaleLowerCase().includes(e))).map((e) => e.moduleAlias) : x.value.map((e) => e.moduleAlias)), n = new Map(x.value.map((e) => [e.moduleAlias, e]));
-			for (let e of [...t]) {
-				let r = n.get(e)?.parentId;
-				for (; r && n.has(r) && !t.has(r);) t.add(r), r = n.get(r)?.parentId;
-			}
-			return x.value.filter((e) => t.has(e.moduleAlias)).map((e) => ({
-				id: e.moduleAlias,
-				parentId: e.parentId,
-				title: e.title,
-				secondary: e.applicationAlias
-			}));
-		}), xe = R(() => (A.value?.options ?? []).map((e) => ({
-			value: e.code,
-			label: e.title
-		}))), Se = R(() => (A.value?.referenceDependencies ?? []).map((e) => ({
-			value: e.referenceFieldId,
-			label: `${e.title} → ${e.targetModuleTitle}`
-		}))), we = R(() => new Map((A.value?.referenceDependencies ?? []).map((e) => [e.referenceFieldId, e]))), Te = R(() => ue.value && O.value.some((e) => !!e.dataAuth)), Ee = R(() => [
-			{
-				key: "title",
-				title: "动作",
-				width: 160
-			},
-			{
-				key: "granted",
-				title: "授权",
-				width: 104,
-				align: "center"
-			},
-			...Te.value ? [{
-				key: "dataScopePolicy",
-				title: "数据范围",
-				width: 200
-			}] : []
-		]), De = [
-			{
-				key: "title",
-				title: "标准动作",
-				width: 130
-			},
-			{
-				key: "configured",
-				title: "启用模板",
-				width: 104,
-				align: "center"
-			},
-			{
-				key: "dataScopePolicy",
-				title: "数据范围",
-				width: 160
-			}
-		], Oe = R(() => O.value), Ae = R(() => k.value?.actions ?? []), je = R(() => n.drawer === !0 || !!p && u?.presentation === "drawer"), Me = R(() => !!p), Ne = R(() => Me.value && !de.value), Pe = R(() => de.value ? "div" : je.value ? _n : Me.value ? g : "div"), Fe = R(() => je.value ? {
-			open: !0,
-			title: K.value,
-			container: n.container ?? null,
-			profile: ke.drawerProfile,
-			promotion: Ve.value,
-			dismissal: "guarded",
-			beforeClose: it,
-			onClose: at
-		} : Ne.value ? { title: K.value } : {}), Ie = R(() => {
-			let e = k.value;
-			return !e || N.value === void 0 ? !1 : JSON.stringify(e.actions) !== N.value;
-		}), Le = R(() => I.value >= 0 && [...P.entries()].some(([e, t]) => F.get(e) !== JSON.stringify(t))), $ = R(() => Ie.value || Le.value);
-		c("角色授权", () => $.value, () => j.value);
-		let Re = R(() => O.value.length > 0 && O.value.every((e) => e.granted)), ze = R(() => O.value.some((e) => e.granted) && !Re.value), Be = R(() => {
-			let e = he.value?.title ?? "未选择模块", t = O.value.filter((e) => e.granted).length, n = $.value ? "有未确认修改" : "未修改";
-			return `当前模块：${e} · 已授权 ${t}/${O.value.length} 项 · ${n}`;
-		}), Ve = yn({
-			view: ke,
-			input: () => p,
-			title: K,
-			eligibility: () => ({
-				hasStableIdentity: !!(l && h.value),
-				busy: j.value
-			}),
-			beforePromote: (e) => On(e, {
-				selectedModuleAlias: T.value,
-				dataGrantMatrix: k.value,
-				actionDrafts: [...P.entries()].map(([e, t]) => ({
-					moduleAlias: e,
-					actions: t
-				})),
-				actionSnapshots: [...F.entries()].map(([e, t]) => ({
-					moduleAlias: e,
-					snapshot: t
-				}))
-			}).then((e) => e === "accepted"),
-			onPromoted: ot,
-			onPromotionRejected: () => C("目标页签存在未确认的授权配置；请先确认或关闭该页签后再固定当前抽屉。", {
-				source: "role-authorization",
-				phase: "validation"
-			})
-		});
-		ye(() => {
-			p && !je.value && (se = kn(p, st)), Ue();
-		}), Z(K, (e) => {
-			Me.value && u?.setTitle(e);
-		}, { immediate: !0 }), Z(T, () => void We()), Z([
-			G,
-			Be,
-			$,
-			j,
-			ce,
-			le
-		], He, { immediate: !0 }), ye(() => window.addEventListener("beforeunload", lt)), ve(() => {
-			se?.(), n.drawerContext?.setOperation(void 0), n.drawerContext?.setSubtitle(void 0), window.removeEventListener("beforeunload", lt);
-		});
-		function He() {
-			let e = n.drawerContext;
-			if (e) {
-				if (e.setSubtitle(`${G.value} · ${ut(h.value)}`), ce.value) {
-					e.setOperation(void 0);
-					return;
-				}
-				e.setOperation({
-					summary: le.value ? $.value ? "有未确认修改" : "未修改" : Be.value,
-					actions: [{
-						key: "confirm-role-authorization",
-						label: "确认",
-						emphasis: "primary",
-						disabled: j.value || !$.value,
-						loading: j.value,
-						run: () => void rt()
-					}]
-				});
-			}
-		}
-		async function Ue() {
-			if (!l) {
-				oe.value = "缺少角色标识，无法打开授权页。";
-				return;
-			}
-			te.value = !0, oe.value = void 0;
-			try {
-				if (h.value = await a.crud.view(l), h.value.roleKind === "group") return;
-				if (h.value.roleKind === "dataGrant") {
-					let [e, t] = await Promise.all([o.dataGrantActionMatrix(l), o.dataScopePolicyCatalog(l)]);
-					k.value = m?.dataGrantMatrix ?? e, A.value = t, N.value = JSON.stringify(e.actions);
-					return;
-				}
-				x.value = (await o.authorizationModules(l)).records, T.value = m?.selectedModuleAlias ?? x.value[0]?.moduleAlias;
-			} catch (e) {
-				oe.value = "授权信息加载失败，请重试。", w(e, {
-					source: "role-authorization",
-					phase: "load"
-				});
-			} finally {
-				te.value = !1;
-			}
-		}
-		async function We() {
-			let e = T.value;
-			if (!(!e || le.value || ce.value)) {
-				ne.value = !0;
-				try {
-					let [t, n] = await Promise.all([o.permissionMatrix(l, [e]), o.dataScopePolicyCatalog(l, e)]), r = (t.modules[0]?.actions ?? []).map(et), i = m?.actionDrafts?.find((t) => t.moduleAlias === e)?.actions, a = P.get(e) ?? i;
-					O.value = a ?? r, P.has(e) || (P.set(e, O.value), F.set(e, m?.actionSnapshots?.find((t) => t.moduleAlias === e)?.snapshot ?? JSON.stringify(r))), I.value += 1, A.value = n;
-				} catch (e) {
-					w(e, {
-						source: "role-authorization",
-						phase: "load"
-					});
-				} finally {
-					ne.value = !1;
-				}
-			}
-		}
-		function Ge(e, t) {
-			t && e.dataAuth && ue.value && !e.dataScopePolicy && (e.dataScopePolicy = "inheritDataGrant"), t && e.dataScopePolicy === "referenceDependency" && !e.referenceFieldId && (e.dataScopePolicy = "inheritDataGrant"), e.granted = t, I.value += 1;
-		}
-		function Ke(e) {
-			O.value.forEach((t) => Ge(t, e));
-		}
-		function qe(e, t) {
-			if (e.dataScopePolicy = String(t || "none"), e.dataScopePolicy === "referenceDependency") {
-				e.referenceFieldId = void 0, e.referenceActionCode = void 0, I.value += 1;
-				return;
-			}
-			e.referenceFieldId = void 0, e.referenceActionCode = void 0, I.value += 1;
-		}
-		function Je(e, t) {
-			let n = we.value.get(String(t || ""));
-			e.referenceFieldId = n?.referenceFieldId, e.referenceActionCode = n?.referenceActionCode, I.value += 1;
-		}
-		function Ye(e) {
-			return we.value.get(String(e || ""));
-		}
-		function Xe(e) {
-			return typeof e == "string" || typeof e == "number" ? e : void 0;
-		}
-		function Ze(e) {
-			return e.dataScopePolicy ?? "inheritDataGrant";
-		}
-		function Qe(e) {
-			return !!e.dataAuth && ue.value;
-		}
-		function $e(e, t) {
-			return e.key === "dataScopePolicy" && Qe(t);
-		}
-		function et(e) {
-			return ue.value && e.dataAuth && e.dataScopePolicy === "none" ? {
-				...e,
-				dataScopePolicy: "inheritDataGrant"
-			} : e;
-		}
-		async function tt() {
-			if (k.value) {
-				j.value = !0;
-				try {
-					let e = await o.replaceDataGrantActions(l, k.value.actions.map((e) => ({
-						actionCode: e.actionCode,
-						dataScopePolicy: e.dataScopePolicy,
-						enabled: e.configured
-					})));
-					await f(e, {
-						source: "role-authorization",
-						phase: "action",
-						fallbackMessage: "数据权限模板已保存"
-					}), N.value = JSON.stringify(k.value.actions);
-				} catch (e) {
-					w(e, {
-						source: "role-authorization",
-						phase: "action"
-					});
-				} finally {
-					j.value = !1;
-				}
-			}
-		}
-		async function nt() {
-			let e = [...P.entries()].filter(([e, t]) => F.get(e) !== JSON.stringify(t));
-			if (e.length) {
-				j.value = !0;
-				try {
-					let t = await o.replacePermissionMatrix(l, e.flatMap(([e, t]) => t.map((t) => ({
-						moduleAlias: e,
-						actionCode: t.actionCode,
-						granted: !!t.granted,
-						dataScopePolicy: t.granted && t.dataAuth && ue.value ? t.dataScopePolicy ?? "inheritDataGrant" : void 0,
-						referenceFieldId: t.granted && t.dataScopePolicy === "referenceDependency" ? t.referenceFieldId : void 0,
-						referenceActionCode: t.granted && t.dataScopePolicy === "referenceDependency" ? t.referenceActionCode : void 0
-					}))));
-					await f(t, {
-						source: "role-authorization",
-						phase: "action",
-						fallbackMessage: "角色授权已保存"
-					}), e.forEach(([e, t]) => F.set(e, JSON.stringify(t))), I.value += 1;
-				} catch (e) {
-					w(e, {
-						source: "role-authorization",
-						phase: "action"
-					});
-				} finally {
-					j.value = !1;
-				}
-			}
-		}
-		async function rt() {
-			if (le.value) {
-				await tt();
-				return;
-			}
-			await nt();
-		}
-		async function it() {
-			return !$.value || E({
-				title: "放弃未确认的授权配置",
-				content: "当前修改尚未确认，关闭后将丢失这些修改。",
-				okText: "放弃修改",
-				danger: !0
-			});
-		}
-		function at() {
-			ct();
-		}
-		function ot() {
-			ct();
-		}
-		function st(e) {
-			return !$.value && (T.value = e.selectedModuleAlias, k.value = e.dataGrantMatrix, P.clear(), F.clear(), e.actionDrafts?.forEach(({ moduleAlias: e, actions: t }) => P.set(e, t)), e.actionSnapshots?.forEach(({ moduleAlias: e, snapshot: t }) => F.set(e, t)), I.value += 1, !0);
-		}
-		function ct() {
-			if (n.drawer === !0) {
-				r("close");
-				return;
-			}
-			u?.dismiss();
-		}
-		function lt(e) {
-			$.value && (e.preventDefault(), e.returnValue = "");
-		}
-		function ut(e) {
-			return e?.ownerScopeType === "platform" ? "平台范围" : e?.ownerScopeType === "organization" ? "机构范围" : "租户范围";
-		}
-		return (e, t) => (q(), z(Ce(Pe.value), _e(pe(Fe.value)), fe({
-			default: Q(() => [H("section", { class: ge(["role-authorization-page", { "role-authorization-page--drawer": je.value || de.value }]) }, [te.value ? (q(), z(X(d), {
-				key: 0,
-				tip: "加载授权信息"
-			})) : oe.value ? (q(), z(X(v), {
-				key: 1,
-				title: "授权页加载失败",
-				message: oe.value
-			}, null, 8, ["message"])) : ce.value ? (q(), z(X(re), {
-				key: 2,
-				title: "角色组不独立授权",
-				description: "角色组只组合成员角色；请到成员角色分别配置动作和数据权限。"
-			})) : le.value && k.value ? (q(), z(X(y), {
-				key: 3,
-				class: "data-grant-content",
-				title: Ne.value ? "数据权限模板" : `数据权限模板 - ${G.value}`,
-				searchable: !1,
-				onRefresh: Ue
-			}, {
-				default: Q(() => [H("header", jn, [t[4] ||= H("div", null, [H("h3", null, "标准动作的数据范围模板"), H("p", null, "模板只会在具体任职的普通角色动作选择“继承数据授权角色”时生效。")], -1), Me.value ? B("v-if", !0) : (q(), z(X(S), {
-					key: 0,
-					type: "primary",
-					disabled: !$.value,
-					loading: j.value,
-					onClick: rt
-				}, {
-					default: Q(() => [...t[3] ||= [U(" 确认 ", -1)]]),
-					_: 1
-				}, 8, ["disabled", "loading"]))]), W(X(M), {
-					columns: De,
-					rows: Ae.value,
-					"row-key": "actionCode",
-					"horizontal-scroll": ""
-				}, {
-					cell: Q(({ column: e, record: t }) => [e.key === "title" ? (q(), V(L, { key: 0 }, [H("strong", null, Y(t.title || t.actionCode), 1), H("small", null, Y(t.actionCode), 1)], 64)) : e.key === "configured" ? (q(), z(X(ee), {
-						key: 1,
-						checked: !!t.configured,
-						disabled: j.value,
-						onChange: (e) => t.configured = e
-					}, null, 8, [
-						"checked",
-						"disabled",
-						"onChange"
-					])) : (q(), z(X(ae), {
-						key: 2,
-						value: t.dataScopePolicy,
-						options: xe.value,
-						disabled: !t.configured || j.value,
-						placeholder: "请选择数据范围",
-						"allow-clear": !1,
-						"onUpdate:value": (e) => t.dataScopePolicy = String(e || "")
-					}, null, 8, [
-						"value",
-						"options",
-						"disabled",
-						"onUpdate:value"
-					]))]),
-					_: 1
-				}, 8, ["rows"])]),
-				_: 1
-			}, 8, ["title"])) : (q(), V("section", {
-				key: 4,
-				class: ge(["authorization-layout", { "authorization-layout--compact-actions": !Te.value }])
-			}, [W(X(y), {
-				"search-keyword": D.value,
-				"onUpdate:searchKeyword": t[1] ||= (e) => D.value = e,
-				class: "module-panel",
-				title: "模块树",
-				"refresh-title": "刷新模块目录",
-				"search-placeholder": "搜索模块名称或别名",
-				onRefresh: Ue
-			}, {
-				default: Q(() => [W(X(ie), {
-					records: be.value,
-					"selected-id": T.value,
-					onSelect: t[0] ||= (e) => T.value = e.id
-				}, null, 8, ["records", "selected-id"])]),
-				_: 1
-			}, 8, ["search-keyword"]), W(X(y), {
-				class: "action-panel",
-				title: me.value,
-				searchable: !1
-			}, fe({
-				default: Q(() => [ne.value ? (q(), z(X(d), {
-					key: 0,
-					tip: "加载模块动作"
-				})) : T.value ? (q(), z(X(M), {
-					key: 2,
-					columns: Ee.value,
-					rows: Oe.value,
-					"row-key": "actionCode",
-					"fill-height": "",
-					"horizontal-scroll": ""
-				}, {
-					header: Q(({ column: e }) => [e.key === "granted" ? (q(), V("span", Mn, [W(X(b), {
-						checked: Re.value,
-						indeterminate: ze.value,
-						disabled: j.value || !O.value.length,
-						"aria-label": "全选当前模块动作授权",
-						onChange: Ke
-					}, null, 8, [
-						"checked",
-						"indeterminate",
-						"disabled"
-					]), t[6] ||= U(" 授权 ", -1)])) : (q(), V(L, { key: 1 }, [U(Y(e.title), 1)], 64))]),
-					cell: Q(({ column: e, record: t }) => [e.key === "title" ? (q(), V(L, { key: 0 }, [H("strong", null, Y(t.title || t.actionCode), 1), H("small", null, Y(t.permissionActionCode || t.actionCode), 1)], 64)) : e.key === "granted" ? (q(), z(X(b), {
-						key: 1,
-						checked: !!t.granted,
-						disabled: j.value,
-						onChange: (e) => Ge(t, e)
-					}, null, 8, [
-						"checked",
-						"disabled",
-						"onChange"
-					])) : t.dataAuth && ue.value && t.granted ? (q(), V("div", Nn, [W(X(ae), {
-						value: Ze(t),
-						options: xe.value,
-						disabled: j.value,
-						"allow-clear": !1,
-						"onUpdate:value": (e) => qe(t, e)
-					}, null, 8, [
-						"value",
-						"options",
-						"disabled",
-						"onUpdate:value"
-					]), t.dataScopePolicy === "referenceDependency" ? (q(), V(L, { key: 0 }, [W(X(ae), {
-						value: Xe(t.referenceFieldId),
-						options: Se.value,
-						disabled: j.value,
-						placeholder: "请选择引用字段",
-						"allow-clear": !1,
-						"onUpdate:value": (e) => Je(t, e)
-					}, null, 8, [
-						"value",
-						"options",
-						"disabled",
-						"onUpdate:value"
-					]), t.referenceFieldId ? (q(), V("small", Pn, " 依赖目标：" + Y(Ye(t.referenceFieldId)?.targetModuleTitle) + " · " + Y(Ye(t.referenceFieldId)?.referenceActionTitle), 1)) : (q(), V("small", Fn, "请先选择引用字段，再开启该动作授权。"))], 64)) : B("v-if", !0)])) : $e(e, t) ? (q(), V("span", In, "—")) : (q(), V("span", Ln, "不适用"))]),
-					_: 1
-				}, 8, ["columns", "rows"])) : (q(), z(X(re), {
-					key: 1,
-					title: "请选择模块"
-				}))]),
-				_: 2
-			}, [Me.value ? void 0 : {
-				name: "actions",
-				fn: Q(() => [W(X(S), {
-					type: "primary",
-					disabled: !$.value,
-					loading: j.value,
-					onClick: rt
-				}, {
-					default: Q(() => [...t[5] ||= [U(" 确认 ", -1)]]),
-					_: 1
-				}, 8, ["disabled", "loading"])]),
-				key: "0"
-			}]), 1032, ["title"])], 2))], 2)]),
-			_: 2
-		}, [Ne.value && !ce.value ? {
-			name: "operation",
-			fn: Q(() => [W(X(S), {
-				type: "primary",
-				disabled: !$.value,
-				loading: j.value,
-				onClick: rt
-			}, {
-				default: Q(() => [...t[2] ||= [U(" 确认 ", -1)]]),
-				_: 1
-			}, 8, ["disabled", "loading"])]),
-			key: "0"
-		} : void 0]), 1040));
-	}
-}), zn = /* @__PURE__ */ e({ default: () => Bn }), Bn = /*#__PURE__*/ h(Rn, [["__scopeId", "data-v-ee79d1ea"]]), Vn = { class: "role-authorization-drawer-surface" }, Hn = /*#__PURE__*/ h(/* @__PURE__ */ K({
-	name: "RoleAuthorizationDrawerSurface",
-	__name: "RoleAuthorizationDrawerSurface",
-	props: { context: {} },
-	setup(e) {
-		let t = e, n = t.context.module;
-		return (e, r) => (q(), V("section", Vn, [t.context.record?.id == null ? B("v-if", !0) : (q(), z(Bn, {
-			key: 0,
-			"role-id": String(t.context.record.id),
-			"module-context": X(n),
-			"drawer-context": t.context
-		}, null, 8, [
-			"role-id",
-			"module-context",
-			"drawer-context"
-		]))]));
-	}
-}), [["__scopeId", "data-v-04d29709"]]), Un = {
-	key: 0,
-	class: "role-group-member-form-field"
-}, Wn = {
-	id: "iam-role-scope-and-actions",
-	target: { moduleAlias: "iam.role" },
-	navigator: {
-		bypassListScope: !0,
-		extension: {
-			key: "iam-role-scope-tree",
-			component: qt,
-			selection: { kind: "roleScope" }
-		}
-	},
-	list: { cellComponents: [
-		{
-			key: "assignmentType",
-			cell: Jt
-		},
-		{
-			key: "roleKind",
-			cell: Jt
-		},
-		{
-			key: "sharePolicy",
-			cell: Jt
-		}
-	] },
-	form: {
-		contributions: [{
-			key: "role-group-members",
-			component: /* @__PURE__ */ h(/* @__PURE__ */ K({
-				name: "RoleGroupMemberFormField",
-				__name: "RoleGroupMemberFormField",
-				props: { context: {} },
-				setup(e) {
-					let t = e, n = J([]), r = J(!1), i = R(() => t.context.draft.roleKind === "group"), a = R(() => d(t.context.draft.memberRoleIds)), o = R(() => String(t.context.draft.id ?? "") || void 0), s = R(() => new Set(n.value.filter((e) => e.roleKind === "dataGrant" && e.id && a.value.includes(e.id)).map((e) => e.id))), c = R(() => n.value.filter((e) => e.id && e.id !== o.value).map((e) => ({
-						label: `${e.title ?? e.id} / ${e.roleKind === "dataGrant" ? "数据授权角色" : "标准角色"}`,
-						value: e.id,
-						disabled: e.roleKind === "dataGrant" && s.value.size > 0 && !a.value.includes(e.id)
-					})));
-					Z([i, () => t.context.formSessionKey], () => void l(), { immediate: !0 });
-					async function l() {
-						if (!i.value) {
-							n.value = [];
-							return;
-						}
-						r.value = !0;
-						try {
-							let e = await t.context.queryRecords({
-								page: {
-									pageNum: 1,
-									pageSize: 500
-								},
-								conditions: [
-									{
-										fieldName: "assignmentType",
-										operator: "EQ",
-										values: ["employment"]
-									},
-									{
-										fieldName: "roleKind",
-										operator: "IN",
-										values: ["standard", "dataGrant"]
-									},
-									{
-										fieldName: "enabled",
-										operator: "EQ",
-										values: [!0]
-									},
-									{
-										fieldName: "ownerScopeType",
-										operator: "EQ",
-										values: [t.context.draft.ownerScopeType]
-									},
-									...t.context.draft.ownerScopeId ? [{
-										fieldName: "ownerScopeId",
-										operator: "EQ",
-										values: [t.context.draft.ownerScopeId]
-									}] : []
-								],
-								sorts: [{ field: "sortOrder" }, { field: "title" }]
-							});
-							n.value = e.records;
-						} finally {
-							r.value = !1;
-						}
-					}
-					function u(e) {
-						let n = Array.isArray(e) ? e.map((e) => String(e).trim()).filter(Boolean) : [];
-						t.context.setField("memberRoleIds", n.length > 0 ? n.join(",") : void 0);
-					}
-					function d(e) {
-						return typeof e == "string" ? e.split(",").map((e) => e.trim()).filter(Boolean) : [];
-					}
-					return (t, n) => i.value ? (q(), V("label", Un, [n[0] ||= H("span", null, "成员角色", -1), W(X(ae), {
-						mode: "multiple",
-						value: a.value,
-						options: c.value,
-						loading: r.value,
-						placeholder: "请选择成员角色",
-						disabled: e.context.mode === "view",
-						"allow-clear": "",
-						"onUpdate:value": u
-					}, null, 8, [
-						"value",
-						"options",
-						"loading",
-						"disabled"
-					])])) : B("v-if", !0);
-				}
-			}), [["__scopeId", "data-v-665f4381"]]),
-			location: {
-				surface: "record-card",
-				fieldName: "memberRoleIds",
-				placement: "after"
-			}
-		}],
-		fieldPolicies: [{
-			fieldName: "memberRoleIds",
-			visible: () => !1
-		}]
-	},
-	recordActions: [
-		{
-			key: "role-bind-account",
-			actionCode: "accountRoleGrants",
-			title: "绑定",
-			state: (e) => ({
-				visible: e.assignmentType === "account",
-				disabled: e.systemManaged === !0
-			}),
-			run({ openDrawer: e }) {
-				e({
-					title: "绑定用户",
-					width: "extraWide",
-					component: sn
-				});
-			}
-		},
-		{
-			key: "role-bind-employment",
-			actionCode: "employmentRoleGrants",
-			title: "绑定",
-			state: (e) => ({
-				visible: e.assignmentType !== "account",
-				disabled: e.systemManaged === !0
-			}),
-			run({ openDrawer: e }) {
-				e({
-					title: "绑定任职",
-					width: "extraWide",
-					component: gn
-				});
-			}
-		},
-		{
-			key: "role-authorize",
-			actionCode: "rolePermissions",
-			title: "授权",
-			state: (e) => ({
-				visible: e.roleKind !== "group",
-				disabled: e.systemManaged === !0
-			}),
-			run({ openDrawer: e }) {
-				e({
-					title: "角色授权",
-					width: "wide",
-					component: Hn
-				});
-			}
-		}
-	]
-};
-r("platform-admin-runtime", Ae), n("platform-admin-runtime", [
-	Be,
-	Ve,
-	He,
-	Ye,
-	nt,
-	ct,
-	kt,
-	Wn
-]);
-//#endregion
-export { Tn as a, on as c, wn as i, ut as l, zn as n, yn as o, Cn as r, hn as s, Bn as t, Oe as u };