create-bubbles 0.1.26 → 0.1.27

package/template-vp-monorepo-react-nestjs/apps/server/src/database/organization.schema.ts

@@ -0,0 +1,453 @@
+import { sql } from 'drizzle-orm'
+import {
+  boolean,
+  check,
+  foreignKey,
+  index,
+  integer,
+  pgEnum,
+  pgTable,
+  text,
+  timestamp,
+  unique,
+  uniqueIndex,
+  uuid,
+  varchar,
+} from 'drizzle-orm/pg-core'
+import {
+  accessStatus,
+  companies,
+  companyMembers,
+  projects,
+  projectMembers,
+  scopeType,
+} from './access.schema'
+
+export const organizationDuty = pgEnum('organization_duty', ['member', 'leader', 'deputy'])
+
+/** 为组织领域稳定资源补齐统一的创建和更新时间。 */
+const organizationTimes = () => ({
+  createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+  updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull(),
+})
+
+export const organizationTrees = pgTable(
+  'organization_trees',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    scopeType: scopeType('scope_type').notNull(),
+    companyId: uuid('company_id').notNull(),
+    projectId: uuid('project_id'),
+    backfillBatchKey: varchar('backfill_batch_key', { length: 100 }),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+  },
+  /** 每个企业或项目只能有一棵树，并用组合键承载关系表的租户完整性约束。 */
+  (t) => [
+    foreignKey({ columns: [t.companyId], foreignColumns: [companies.id] }).onDelete('restrict'),
+    foreignKey({
+      columns: [t.companyId, t.projectId],
+      foreignColumns: [projects.companyId, projects.id],
+    }).onDelete('restrict'),
+    check(
+      'organization_trees_scope_check',
+      sql`(${t.scopeType} = 'company' AND ${t.projectId} IS NULL) OR (${t.scopeType} = 'project' AND ${t.projectId} IS NOT NULL)`,
+    ),
+    unique('organization_trees_company_ref_uq').on(t.id, t.scopeType, t.companyId),
+    unique('organization_trees_project_ref_uq').on(t.id, t.scopeType, t.companyId, t.projectId),
+    uniqueIndex('organization_trees_company_scope_uq')
+      .on(t.companyId)
+      .where(sql`${t.scopeType} = 'company'`),
+    uniqueIndex('organization_trees_project_scope_uq')
+      .on(t.projectId)
+      .where(sql`${t.scopeType} = 'project'`),
+  ],
+)
+
+export const organizationUnits = pgTable(
+  'organization_units',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    treeId: uuid('tree_id')
+      .notNull()
+      .references(() => organizationTrees.id, { onDelete: 'restrict' }),
+    parentId: uuid('parent_id'),
+    name: varchar('name', { length: 100 }).notNull(),
+    nameKey: text('name_key').notNull(),
+    code: varchar('code', { length: 32 }).notNull(),
+    codeKey: varchar('code_key', { length: 32 }).notNull(),
+    description: varchar('description', { length: 500 }).notNull().default(''),
+    sort: integer('sort').notNull(),
+    status: accessStatus('status').notNull().default('active'),
+    version: integer('version').notNull().default(1),
+    sourceTemplateUnitId: uuid('source_template_unit_id'),
+    ...organizationTimes(),
+  },
+  /** 组织单元在单树内保持编码唯一、同父名称唯一，并禁止跨树父子关系。 */
+  (t) => [
+    unique('organization_units_tree_id_uq').on(t.treeId, t.id),
+    foreignKey({ columns: [t.treeId, t.parentId], foreignColumns: [t.treeId, t.id] }).onDelete(
+      'restrict',
+    ),
+    foreignKey({
+      columns: [t.sourceTemplateUnitId],
+      foreignColumns: [organizationTemplateUnits.id],
+    }).onDelete('restrict'),
+    uniqueIndex('organization_units_tree_code_key_uq').on(t.treeId, t.codeKey),
+    uniqueIndex('organization_units_root_name_key_uq')
+      .on(t.treeId, t.nameKey)
+      .where(sql`${t.parentId} IS NULL`),
+    uniqueIndex('organization_units_parent_name_key_uq')
+      .on(t.treeId, t.parentId, t.nameKey)
+      .where(sql`${t.parentId} IS NOT NULL`),
+    check('organization_units_name_length', sql`char_length(${t.name}) BETWEEN 2 AND 100`),
+    check(
+      'organization_units_name_key_normalized',
+      sql`${t.nameKey} = lower(normalize(btrim(${t.name}), NFKC))`,
+    ),
+    check(
+      'organization_units_code_check',
+      sql`char_length(${t.code}) BETWEEN 2 AND 32 AND ${t.code} ~ '^[a-z0-9_-]+$'`,
+    ),
+    check(
+      'organization_units_code_key_normalized',
+      sql`${t.codeKey} = lower(normalize(btrim(${t.code}), NFKC))`,
+    ),
+    check('organization_units_sort_range', sql`${t.sort} BETWEEN 0 AND 999999999`),
+    check('organization_units_version_positive', sql`${t.version} > 0`),
+    index('organization_units_tree_parent_sort_idx').on(t.treeId, t.parentId, t.sort, t.id),
+  ],
+)
+
+export const companyOrganizationUnitMembers = pgTable(
+  'company_organization_unit_members',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    scopeType: scopeType('scope_type').notNull().default('company'),
+    companyId: uuid('company_id').notNull(),
+    treeId: uuid('tree_id').notNull(),
+    organizationUnitId: uuid('organization_unit_id').notNull(),
+    userId: uuid('user_id').notNull(),
+    duty: organizationDuty('duty').notNull().default('member'),
+    ...organizationTimes(),
+  },
+  /** 使用复制的企业作用域键阻止组织单元与成员跨企业组合。 */
+  (t) => [
+    check('company_organization_members_scope_check', sql`${t.scopeType} = 'company'`),
+    foreignKey({
+      columns: [t.treeId, t.scopeType, t.companyId],
+      foreignColumns: [
+        organizationTrees.id,
+        organizationTrees.scopeType,
+        organizationTrees.companyId,
+      ],
+    }).onDelete('restrict'),
+    foreignKey({
+      columns: [t.treeId, t.organizationUnitId],
+      foreignColumns: [organizationUnits.treeId, organizationUnits.id],
+    }).onDelete('restrict'),
+    foreignKey({
+      columns: [t.companyId, t.userId],
+      foreignColumns: [companyMembers.companyId, companyMembers.userId],
+    }).onDelete('cascade'),
+    unique('company_organization_members_member_unit_uq').on(t.userId, t.organizationUnitId),
+    uniqueIndex('company_organization_members_leader_uq')
+      .on(t.organizationUnitId)
+      .where(sql`${t.duty} = 'leader'`),
+    index('company_organization_members_user_idx').on(t.companyId, t.userId),
+  ],
+)
+
+export const projectOrganizationUnitMembers = pgTable(
+  'project_organization_unit_members',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    scopeType: scopeType('scope_type').notNull().default('project'),
+    companyId: uuid('company_id').notNull(),
+    projectId: uuid('project_id').notNull(),
+    treeId: uuid('tree_id').notNull(),
+    organizationUnitId: uuid('organization_unit_id').notNull(),
+    userId: uuid('user_id').notNull(),
+    duty: organizationDuty('duty').notNull().default('member'),
+    ...organizationTimes(),
+  },
+  /** 使用完整项目作用域键阻止组织单元与成员跨项目组合。 */
+  (t) => [
+    check('project_organization_members_scope_check', sql`${t.scopeType} = 'project'`),
+    foreignKey({
+      columns: [t.treeId, t.scopeType, t.companyId, t.projectId],
+      foreignColumns: [
+        organizationTrees.id,
+        organizationTrees.scopeType,
+        organizationTrees.companyId,
+        organizationTrees.projectId,
+      ],
+    }).onDelete('restrict'),
+    foreignKey({
+      columns: [t.treeId, t.organizationUnitId],
+      foreignColumns: [organizationUnits.treeId, organizationUnits.id],
+    }).onDelete('restrict'),
+    foreignKey({
+      columns: [t.projectId, t.userId],
+      foreignColumns: [projectMembers.projectId, projectMembers.userId],
+    }).onDelete('cascade'),
+    unique('project_organization_members_member_unit_uq').on(t.userId, t.organizationUnitId),
+    uniqueIndex('project_organization_members_leader_uq')
+      .on(t.organizationUnitId)
+      .where(sql`${t.duty} = 'leader'`),
+    index('project_organization_members_user_idx').on(t.projectId, t.userId),
+  ],
+)
+
+export const positions = pgTable(
+  'positions',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    scopeType: scopeType('scope_type').notNull(),
+    companyId: uuid('company_id').notNull(),
+    projectId: uuid('project_id'),
+    name: varchar('name', { length: 100 }).notNull(),
+    nameKey: text('name_key').notNull(),
+    code: varchar('code', { length: 32 }).notNull(),
+    codeKey: varchar('code_key', { length: 32 }).notNull(),
+    description: varchar('description', { length: 500 }).notNull().default(''),
+    status: accessStatus('status').notNull().default('active'),
+    version: integer('version').notNull().default(1),
+    sourceTemplatePositionId: uuid('source_template_position_id'),
+    ...organizationTimes(),
+  },
+  /** 岗位保持作用域平面唯一，不携带任何组织单元关联。 */
+  (t) => [
+    foreignKey({ columns: [t.companyId], foreignColumns: [companies.id] }).onDelete('restrict'),
+    foreignKey({
+      columns: [t.companyId, t.projectId],
+      foreignColumns: [projects.companyId, projects.id],
+    }).onDelete('restrict'),
+    foreignKey({
+      columns: [t.sourceTemplatePositionId],
+      foreignColumns: [organizationTemplatePositions.id],
+    }).onDelete('restrict'),
+    check(
+      'positions_scope_check',
+      sql`(${t.scopeType} = 'company' AND ${t.projectId} IS NULL) OR (${t.scopeType} = 'project' AND ${t.projectId} IS NOT NULL)`,
+    ),
+    unique('positions_company_ref_uq').on(t.id, t.scopeType, t.companyId),
+    unique('positions_project_ref_uq').on(t.id, t.scopeType, t.companyId, t.projectId),
+    uniqueIndex('positions_company_name_key_uq')
+      .on(t.companyId, t.nameKey)
+      .where(sql`${t.scopeType} = 'company'`),
+    uniqueIndex('positions_company_code_key_uq')
+      .on(t.companyId, t.codeKey)
+      .where(sql`${t.scopeType} = 'company'`),
+    uniqueIndex('positions_project_name_key_uq')
+      .on(t.projectId, t.nameKey)
+      .where(sql`${t.scopeType} = 'project'`),
+    uniqueIndex('positions_project_code_key_uq')
+      .on(t.projectId, t.codeKey)
+      .where(sql`${t.scopeType} = 'project'`),
+    check('positions_name_length', sql`char_length(${t.name}) BETWEEN 2 AND 100`),
+    check(
+      'positions_name_key_normalized',
+      sql`${t.nameKey} = lower(normalize(btrim(${t.name}), NFKC))`,
+    ),
+    check(
+      'positions_code_check',
+      sql`char_length(${t.code}) BETWEEN 2 AND 32 AND ${t.code} ~ '^[a-z0-9_-]+$'`,
+    ),
+    check(
+      'positions_code_key_normalized',
+      sql`${t.codeKey} = lower(normalize(btrim(${t.code}), NFKC))`,
+    ),
+    check('positions_version_positive', sql`${t.version} > 0`),
+    index('positions_scope_created_idx').on(
+      t.scopeType,
+      t.companyId,
+      t.projectId,
+      t.createdAt,
+      t.id,
+    ),
+  ],
+)
+
+export const companyPositionMembers = pgTable(
+  'company_position_members',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    scopeType: scopeType('scope_type').notNull().default('company'),
+    companyId: uuid('company_id').notNull(),
+    positionId: uuid('position_id').notNull(),
+    userId: uuid('user_id').notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+  },
+  /** 组合外键保证企业岗位任职两端属于同一个企业。 */
+  (t) => [
+    check('company_position_members_scope_check', sql`${t.scopeType} = 'company'`),
+    foreignKey({
+      columns: [t.positionId, t.scopeType, t.companyId],
+      foreignColumns: [positions.id, positions.scopeType, positions.companyId],
+    }).onDelete('restrict'),
+    foreignKey({
+      columns: [t.companyId, t.userId],
+      foreignColumns: [companyMembers.companyId, companyMembers.userId],
+    }).onDelete('cascade'),
+    unique('company_position_members_user_position_uq').on(t.userId, t.positionId),
+    index('company_position_members_position_idx').on(t.positionId),
+  ],
+)
+
+export const projectPositionMembers = pgTable(
+  'project_position_members',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    scopeType: scopeType('scope_type').notNull().default('project'),
+    companyId: uuid('company_id').notNull(),
+    projectId: uuid('project_id').notNull(),
+    positionId: uuid('position_id').notNull(),
+    userId: uuid('user_id').notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+  },
+  /** 组合外键保证项目岗位任职两端属于同一个项目。 */
+  (t) => [
+    check('project_position_members_scope_check', sql`${t.scopeType} = 'project'`),
+    foreignKey({
+      columns: [t.positionId, t.scopeType, t.companyId, t.projectId],
+      foreignColumns: [positions.id, positions.scopeType, positions.companyId, positions.projectId],
+    }).onDelete('restrict'),
+    foreignKey({
+      columns: [t.projectId, t.userId],
+      foreignColumns: [projectMembers.projectId, projectMembers.userId],
+    }).onDelete('cascade'),
+    unique('project_position_members_user_position_uq').on(t.userId, t.positionId),
+    index('project_position_members_position_idx').on(t.positionId),
+  ],
+)
+
+export const organizationTemplates = pgTable(
+  'organization_templates',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    companyId: uuid('company_id')
+      .notNull()
+      .references(() => companies.id, { onDelete: 'restrict' }),
+    name: varchar('name', { length: 100 }).notNull(),
+    nameKey: text('name_key').notNull(),
+    description: varchar('description', { length: 500 }).notNull().default(''),
+    status: accessStatus('status').notNull().default('active'),
+    isDefault: boolean('is_default').notNull().default(false),
+    version: integer('version').notNull().default(1),
+    ...organizationTimes(),
+  },
+  /** 企业内模板名称唯一，并只允许一个启用中的默认模板。 */
+  (t) => [
+    uniqueIndex('organization_templates_company_name_key_uq').on(t.companyId, t.nameKey),
+    uniqueIndex('organization_templates_company_default_uq')
+      .on(t.companyId)
+      .where(sql`${t.status} = 'active' AND ${t.isDefault} = true`),
+    check('organization_templates_name_length', sql`char_length(${t.name}) BETWEEN 2 AND 100`),
+    check(
+      'organization_templates_name_key_normalized',
+      sql`${t.nameKey} = lower(normalize(btrim(${t.name}), NFKC))`,
+    ),
+    check('organization_templates_version_positive', sql`${t.version} > 0`),
+  ],
+)
+
+export const organizationTemplateUnits = pgTable(
+  'organization_template_units',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    templateId: uuid('template_id')
+      .notNull()
+      .references(() => organizationTemplates.id, { onDelete: 'restrict' }),
+    templateVersion: integer('template_version').notNull(),
+    parentId: uuid('parent_id'),
+    name: varchar('name', { length: 100 }).notNull(),
+    nameKey: text('name_key').notNull(),
+    code: varchar('code', { length: 32 }).notNull(),
+    codeKey: varchar('code_key', { length: 32 }).notNull(),
+    description: varchar('description', { length: 500 }).notNull().default(''),
+    sort: integer('sort').notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+  },
+  /** 模板组织节点在每个不可变版本内保持父子完整性和唯一规则。 */
+  (t) => [
+    unique('organization_template_units_version_id_uq').on(t.templateId, t.templateVersion, t.id),
+    foreignKey({
+      columns: [t.templateId, t.templateVersion, t.parentId],
+      foreignColumns: [t.templateId, t.templateVersion, t.id],
+    }).onDelete('restrict'),
+    uniqueIndex('organization_template_units_version_code_uq').on(
+      t.templateId,
+      t.templateVersion,
+      t.codeKey,
+    ),
+    uniqueIndex('organization_template_units_root_name_uq')
+      .on(t.templateId, t.templateVersion, t.nameKey)
+      .where(sql`${t.parentId} IS NULL`),
+    uniqueIndex('organization_template_units_parent_name_uq')
+      .on(t.templateId, t.templateVersion, t.parentId, t.nameKey)
+      .where(sql`${t.parentId} IS NOT NULL`),
+    check('organization_template_units_name_length', sql`char_length(${t.name}) BETWEEN 2 AND 100`),
+    check(
+      'organization_template_units_name_key_normalized',
+      sql`${t.nameKey} = lower(normalize(btrim(${t.name}), NFKC))`,
+    ),
+    check(
+      'organization_template_units_code_check',
+      sql`char_length(${t.code}) BETWEEN 2 AND 32 AND ${t.code} ~ '^[a-z0-9_-]+$'`,
+    ),
+    check(
+      'organization_template_units_code_key_normalized',
+      sql`${t.codeKey} = lower(normalize(btrim(${t.code}), NFKC))`,
+    ),
+    check('organization_template_units_sort_range', sql`${t.sort} BETWEEN 0 AND 999999999`),
+    check('organization_template_units_version_positive', sql`${t.templateVersion} > 0`),
+  ],
+)
+
+export const organizationTemplatePositions = pgTable(
+  'organization_template_positions',
+  {
+    id: uuid('id').defaultRandom().primaryKey(),
+    templateId: uuid('template_id')
+      .notNull()
+      .references(() => organizationTemplates.id, { onDelete: 'restrict' }),
+    templateVersion: integer('template_version').notNull(),
+    name: varchar('name', { length: 100 }).notNull(),
+    nameKey: text('name_key').notNull(),
+    code: varchar('code', { length: 32 }).notNull(),
+    codeKey: varchar('code_key', { length: 32 }).notNull(),
+    description: varchar('description', { length: 500 }).notNull().default(''),
+    status: accessStatus('status').notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+  },
+  /** 模板岗位在每个版本内按名称和编码分别唯一，不关联模板组织节点。 */
+  (t) => [
+    uniqueIndex('organization_template_positions_version_name_uq').on(
+      t.templateId,
+      t.templateVersion,
+      t.nameKey,
+    ),
+    uniqueIndex('organization_template_positions_version_code_uq').on(
+      t.templateId,
+      t.templateVersion,
+      t.codeKey,
+    ),
+    check(
+      'organization_template_positions_name_length',
+      sql`char_length(${t.name}) BETWEEN 2 AND 100`,
+    ),
+    check(
+      'organization_template_positions_name_key_normalized',
+      sql`${t.nameKey} = lower(normalize(btrim(${t.name}), NFKC))`,
+    ),
+    check(
+      'organization_template_positions_code_check',
+      sql`char_length(${t.code}) BETWEEN 2 AND 32 AND ${t.code} ~ '^[a-z0-9_-]+$'`,
+    ),
+    check(
+      'organization_template_positions_code_key_normalized',
+      sql`${t.codeKey} = lower(normalize(btrim(${t.code}), NFKC))`,
+    ),
+    check('organization_template_positions_version_positive', sql`${t.templateVersion} > 0`),
+  ],
+)

package/template-vp-monorepo-react-nestjs/apps/server/src/database/schema.ts

@@ -11,6 +11,9 @@ import {
   varchar,
 } from 'drizzle-orm/pg-core'
 
+export * from './access.schema'
+export * from './organization.schema'
+
 export const userStatusEnum = pgEnum('user_status', ['active', 'locked', 'disabled'])
 
 export const users = pgTable('users', {
@@ -55,6 +58,9 @@ export const uploadSessions = pgTable(
     updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull(),
     completedAt: timestamp('completed_at', { withTimezone: true }),
   },
+  /**
+   * 约束用户上传标识和存储对象键唯一，并为上传状态查询与过期清理建立索引。
+   */
   (table) => [
     uniqueIndex('upload_sessions_owner_client_uq').on(table.ownerId, table.clientUploadId),
     uniqueIndex('upload_sessions_bucket_key_uq').on(table.bucket, table.objectKey),

package/template-vp-monorepo-react-nestjs/apps/server/src/main.ts

@@ -7,6 +7,9 @@ import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger'
 import { cleanupOpenApiDoc } from 'nestjs-zod'
 import { createFastifyAdapter } from './common/adapters/fastify.adapter'
 
+/**
+ * 创建 Nest/Fastify 应用，配置跨域、关闭钩子和 Swagger 文档后监听端口并打印访问地址。
+ */
 async function bootstrap() {
   const app = await NestFactory.create<NestFastifyApplication>(AppModule, createFastifyAdapter(), {
     logger: new ConsoleLogger({
@@ -49,6 +52,7 @@ async function bootstrap() {
   logNetworkUrls(port)
 }
 
+/** 记录启动失败并设置进程退出码，让部署环境能够识别服务未能启动。 */
 void bootstrap().catch((cause: unknown) => {
   const logger = new Logger('Bootstrap')
   logger.error('Server boostrap failed', cause instanceof Error ? cause.stack : undefined)

package/template-vp-monorepo-react-nestjs/apps/server/src/modules/access/access-http.ts

@@ -0,0 +1,29 @@
+import type { FastifyRequest } from 'fastify'
+import type { AccessScope } from 'shared/types'
+import type { AuthenticatedRequest } from '../auth/session/session.types'
+import { idSchema, parse } from './access.validation'
+
+/**
+ * 提取已通过会话认证的操作者和请求标识，供权限校验及审计记录使用。
+ *
+ * @param request - 已由认证守卫填充 auth 的请求。
+ */
+export function actor(request: FastifyRequest) {
+  return { userId: (request as AuthenticatedRequest).auth!.userId, requestId: request.id }
+}
+/** 将全部路由参数按 UUID 校验并返回参数映射；非法标识由统一参数异常处理返回。 */
+export function ids(request: FastifyRequest) {
+  const params = request.params as Record<string, unknown>
+  return Object.fromEntries(
+    Object.entries(params).map(([key, value]) => [key, parse(idSchema, value)]),
+  ) as Record<string, string>
+}
+/** 根据路由中的公司和项目标识推导访问作用域，项目作用域优先于公司作用域。 */
+export function scopeFor(request: FastifyRequest): AccessScope {
+  const params = ids(request)
+  return params.projectId
+    ? { type: 'project', companyId: params.companyId!, projectId: params.projectId }
+    : params.companyId
+      ? { type: 'company', companyId: params.companyId }
+      : { type: 'platform' }
+}

package/template-vp-monorepo-react-nestjs/apps/server/src/modules/access/access.errors.ts

@@ -0,0 +1,130 @@
+import type { AppErrorDefinition } from '@/common/exceptions/app.exception'
+
+export const ACCESS_ERRORS = {
+  FORBIDDEN: {
+    code: 'ACCESS.FORBIDDEN',
+    publicMessage: '当前工作空间无权执行此操作或已停用',
+    status: 403,
+  },
+  NOT_FOUND: { code: 'ACCESS.NOT_FOUND', publicMessage: '资源不存在', status: 404 },
+  INVALID_PERMISSION_SET: {
+    code: 'ACCESS.INVALID_PERMISSION_SET',
+    publicMessage: '权限集合不合法',
+    status: 400,
+  },
+  INVALID_MENU_STRUCTURE: {
+    code: 'ACCESS.INVALID_MENU_STRUCTURE',
+    publicMessage: '菜单结构或功能绑定不合法',
+    status: 400,
+  },
+  VERSION_CONFLICT: {
+    code: 'ACCESS.VERSION_CONFLICT',
+    publicMessage: '数据已被修改，请刷新后重试',
+    status: 409,
+  },
+  DUPLICATE_RESOURCE: {
+    code: 'ACCESS.DUPLICATE_RESOURCE',
+    publicMessage: '编码、名称或成员已存在',
+    status: 409,
+  },
+  LAST_ADMINISTRATOR: {
+    code: 'ACCESS.LAST_ADMINISTRATOR',
+    publicMessage: '必须保留至少一名有效管理员',
+    status: 409,
+  },
+  BUILTIN_ROLE_IMMUTABLE: {
+    code: 'ACCESS.BUILTIN_ROLE_IMMUTABLE',
+    publicMessage: '内置角色由系统维护，不能修改或删除',
+    status: 409,
+  },
+  RESOURCE_IN_USE: {
+    code: 'ACCESS.RESOURCE_IN_USE',
+    publicMessage: '资源仍被引用，请先解除引用',
+    status: 409,
+  },
+  PROTECTED_MENU: {
+    code: 'ACCESS.PROTECTED_MENU',
+    publicMessage: '不能使管理恢复入口失效',
+    status: 409,
+  },
+  CLEANUP_BLOCKED: {
+    code: 'ACCESS.CLEANUP_BLOCKED',
+    publicMessage: '废弃权限或部署条件不满足清理要求',
+    status: 409,
+  },
+  ALREADY_INITIALIZED: {
+    code: 'ACCESS.ALREADY_INITIALIZED',
+    publicMessage: '平台已经初始化，不能更换初始管理员参数',
+    status: 409,
+  },
+  INVALID_MEMBER_ACCOUNT: {
+    code: 'ACCESS.INVALID_MEMBER_ACCOUNT',
+    publicMessage: '账号不可用或不满足成员条件',
+    status: 422,
+  },
+  MEMBER_INVITATION_NOT_FOUND: {
+    code: 'ACCESS.MEMBER_INVITATION_NOT_FOUND',
+    publicMessage: '邀请不存在或链接无效',
+    status: 404,
+  },
+  MEMBER_INVITATION_EXPIRED: {
+    code: 'ACCESS.MEMBER_INVITATION_EXPIRED',
+    publicMessage: '邀请已过期，请联系企业管理员重新生成',
+    status: 410,
+  },
+  MEMBER_INVITATION_REVOKED: {
+    code: 'ACCESS.MEMBER_INVITATION_REVOKED',
+    publicMessage: '邀请已被撤销',
+    status: 410,
+  },
+  MEMBER_INVITATION_ALREADY_ACCEPTED: {
+    code: 'ACCESS.MEMBER_INVITATION_ALREADY_ACCEPTED',
+    publicMessage: '邀请已被其他账号使用',
+    status: 409,
+  },
+  MEMBER_INVITATION_MEMBER_EXISTS: {
+    code: 'ACCESS.MEMBER_INVITATION_MEMBER_EXISTS',
+    publicMessage: '当前账号已经是该企业成员',
+    status: 409,
+  },
+  MEMBER_INVITATION_NOT_PENDING: {
+    code: 'ACCESS.MEMBER_INVITATION_NOT_PENDING',
+    publicMessage: '当前邀请状态不允许执行此操作',
+    status: 409,
+  },
+  ORGANIZATION_CYCLE: {
+    code: 'ACCESS.ORGANIZATION_CYCLE',
+    publicMessage: '不能把资源移动到自身或其后代节点',
+    status: 409,
+  },
+  ORGANIZATION_DEPTH_EXCEEDED: {
+    code: 'ACCESS.ORGANIZATION_DEPTH_EXCEEDED',
+    publicMessage: '组织层级不能超过 10 层',
+    status: 409,
+  },
+  ORGANIZATION_LEADER_CONFLICT: {
+    code: 'ACCESS.ORGANIZATION_LEADER_CONFLICT',
+    publicMessage: '同一组织单元最多只能有一名主要负责人',
+    status: 409,
+  },
+  ORGANIZATION_SORT_EXHAUSTED: {
+    code: 'ACCESS.ORGANIZATION_SORT_EXHAUSTED',
+    publicMessage: '同级排序值已用尽，请先调整现有顺序',
+    status: 409,
+  },
+  INVALID_MEMBER_RELATION: {
+    code: 'ACCESS.INVALID_MEMBER_RELATION',
+    publicMessage: '成员、组织或岗位状态不允许建立该关系',
+    status: 422,
+  },
+  TEMPLATE_VERSION_CONFLICT: {
+    code: 'ACCESS.TEMPLATE_VERSION_CONFLICT',
+    publicMessage: '组织模板版本已变化，请刷新后重试',
+    status: 409,
+  },
+  TEMPLATE_UNAVAILABLE: {
+    code: 'ACCESS.TEMPLATE_UNAVAILABLE',
+    publicMessage: '当前组织模板不可用于项目初始化',
+    status: 422,
+  },
+} as const satisfies Record<string, AppErrorDefinition>