create-bubbles 0.1.26 → 0.1.27

package/template-vp-monorepo-react-nestjs/packages/shared/src/utils/access-catalog.ts

@@ -0,0 +1,304 @@
+import type { AccessPageDefinition, PermissionDefinition, ScopeType } from '../types'
+
+export const ACCESS_CATALOG_VERSION = '2026-09-19.1'
+export const ACCESS_DEFAULT_PAGE_SIZE = 20
+export const ACCESS_MAX_PAGE_SIZE = 100
+export const ACCESS_CODE_PATTERN = /^[A-Za-z0-9_-]+$/
+export const ACCESS_ICON_KEY_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*(?:\/[a-z0-9]+(?:-[a-z0-9]+)*)*$/
+
+interface OperationSpec {
+  suffix: string
+  title: string
+  icon: string
+  adminOnly?: boolean
+}
+
+interface PageSpec {
+  scopeType: ScopeType
+  routeKey: string
+  path: string
+  title: string
+  icon: string
+  operations: readonly OperationSpec[]
+}
+
+const roleOperations: readonly OperationSpec[] = [
+  { suffix: 'create', title: '创建角色', icon: 'add' },
+  { suffix: 'update', title: '修改角色', icon: 'edit' },
+  { suffix: 'delete', title: '删除角色', icon: 'delete' },
+  { suffix: 'permissions', title: '设置角色权限', icon: 'permissions' },
+]
+
+const memberOperations: readonly OperationSpec[] = [
+  { suffix: 'add', title: '添加成员', icon: 'add' },
+  { suffix: 'status', title: '启用或停用成员', icon: 'status' },
+  { suffix: 'remove', title: '移除成员', icon: 'remove' },
+  { suffix: 'roles', title: '分配成员角色', icon: 'roles' },
+]
+
+const pageSpecs: readonly PageSpec[] = [
+  {
+    scopeType: 'platform',
+    routeKey: 'platform.home',
+    path: '/platform',
+    title: '平台工作台',
+    icon: 'dashboard',
+    operations: [],
+  },
+  {
+    scopeType: 'platform',
+    routeKey: 'platform.companies',
+    path: '/platform/companies',
+    title: '企业管理',
+    icon: 'companies',
+    operations: [
+      { suffix: 'create', title: '开通企业', adminOnly: true },
+      { suffix: 'status', title: '启用或停用企业' },
+      { suffix: 'administrator', title: '设置企业管理员', adminOnly: true },
+      { suffix: 'hierarchy', title: '调整企业层级' },
+    ],
+  },
+  {
+    scopeType: 'platform',
+    routeKey: 'platform.accounts',
+    path: '/platform/accounts',
+    title: '全局账号',
+    icon: 'accounts',
+    operations: [
+      { suffix: 'status', title: '启用或停用账号' },
+      { suffix: 'roles', title: '分配平台角色' },
+      { suffix: 'reset-password', title: '重置账号密码', adminOnly: true },
+    ],
+  },
+  {
+    scopeType: 'platform',
+    routeKey: 'platform.roles',
+    path: '/platform/roles',
+    title: '平台角色',
+    icon: 'roles',
+    operations: roleOperations,
+  },
+  {
+    scopeType: 'platform',
+    routeKey: 'platform.menus',
+    path: '/platform/menus',
+    title: '菜单管理',
+    icon: 'menus',
+    operations: [
+      { suffix: 'create', title: '新增菜单节点' },
+      { suffix: 'update', title: '修改菜单节点' },
+      { suffix: 'delete', title: '删除菜单节点' },
+      { suffix: 'cleanup', title: '清理废弃权限', adminOnly: true },
+    ],
+  },
+  {
+    scopeType: 'platform',
+    routeKey: 'platform.audit',
+    path: '/platform/audit',
+    title: '平台操作日志',
+    icon: 'audit-log',
+    operations: [],
+  },
+  {
+    scopeType: 'company',
+    routeKey: 'company.home',
+    path: '/companies/:companyId',
+    title: '企业工作台',
+    icon: 'home',
+    operations: [],
+  },
+  {
+    scopeType: 'company',
+    routeKey: 'company.profile',
+    path: '/companies/:companyId/profile',
+    title: '企业资料',
+    icon: 'profile',
+    operations: [{ suffix: 'update', title: '修改企业资料' }],
+  },
+  {
+    scopeType: 'company',
+    routeKey: 'company.members',
+    path: '/companies/:companyId/members',
+    title: '企业成员',
+    icon: 'members',
+    operations: memberOperations,
+  },
+  {
+    scopeType: 'company',
+    routeKey: 'company.roles',
+    path: '/companies/:companyId/roles',
+    title: '企业角色',
+    icon: 'roles',
+    operations: roleOperations,
+  },
+  {
+    scopeType: 'company',
+    routeKey: 'company.projects',
+    path: '/companies/:companyId/projects',
+    title: '项目管理',
+    icon: 'projects',
+    operations: [
+      { suffix: 'create', title: '创建项目', adminOnly: true },
+      { suffix: 'status', title: '启用或停用项目' },
+      { suffix: 'administrator', title: '设置项目管理员', adminOnly: true },
+    ],
+  },
+  {
+    scopeType: 'company',
+    routeKey: 'company.organization',
+    path: '/companies/:companyId/organization',
+    title: '企业组织',
+    icon: 'organization',
+    operations: [
+      { suffix: 'create', title: '创建组织单元' },
+      { suffix: 'update', title: '修改组织单元' },
+      { suffix: 'move', title: '移动组织单元' },
+      { suffix: 'assign', title: '分配组织成员' },
+    ],
+  },
+  {
+    scopeType: 'company',
+    routeKey: 'company.positions',
+    path: '/companies/:companyId/positions',
+    title: '企业岗位',
+    icon: 'positions',
+    operations: [
+      { suffix: 'create', title: '创建岗位' },
+      { suffix: 'update', title: '修改岗位' },
+      { suffix: 'assign', title: '分配岗位成员' },
+    ],
+  },
+  {
+    scopeType: 'company',
+    routeKey: 'company.organization.templates',
+    path: '/companies/:companyId/organization/templates',
+    title: '项目组织模板',
+    icon: 'organization-template',
+    operations: [
+      { suffix: 'create', title: '创建组织模板' },
+      { suffix: 'update', title: '修改组织模板' },
+    ],
+  },
+  {
+    scopeType: 'company',
+    routeKey: 'company.audit',
+    path: '/companies/:companyId/audit',
+    title: '企业操作日志',
+    icon: 'audit-log',
+    operations: [],
+  },
+  {
+    scopeType: 'project',
+    routeKey: 'project.home',
+    path: '/companies/:companyId/projects/:projectId',
+    title: '项目工作台',
+    icon: 'home',
+    operations: [],
+  },
+  {
+    scopeType: 'project',
+    routeKey: 'project.profile',
+    path: '/companies/:companyId/projects/:projectId/profile',
+    title: '项目资料',
+    icon: 'profile',
+    operations: [{ suffix: 'update', title: '修改项目资料' }],
+  },
+  {
+    scopeType: 'project',
+    routeKey: 'project.members',
+    path: '/companies/:companyId/projects/:projectId/members',
+    title: '项目成员',
+    icon: 'members',
+    operations: memberOperations,
+  },
+  {
+    scopeType: 'project',
+    routeKey: 'project.roles',
+    path: '/companies/:companyId/projects/:projectId/roles',
+    title: '项目角色',
+    icon: 'roles',
+    operations: roleOperations,
+  },
+  {
+    scopeType: 'project',
+    routeKey: 'project.organization',
+    path: '/companies/:companyId/projects/:projectId/organization',
+    title: '项目组织',
+    icon: 'organization',
+    operations: [
+      { suffix: 'create', title: '创建组织单元' },
+      { suffix: 'update', title: '修改组织单元' },
+      { suffix: 'move', title: '移动组织单元' },
+      { suffix: 'assign', title: '分配组织成员' },
+    ],
+  },
+  {
+    scopeType: 'project',
+    routeKey: 'project.positions',
+    path: '/companies/:companyId/projects/:projectId/positions',
+    title: '项目岗位',
+    icon: 'positions',
+    operations: [
+      { suffix: 'create', title: '创建岗位' },
+      { suffix: 'update', title: '修改岗位' },
+      { suffix: 'assign', title: '分配岗位成员' },
+    ],
+  },
+  {
+    scopeType: 'project',
+    routeKey: 'project.audit',
+    path: '/companies/:companyId/projects/:projectId/audit',
+    title: '项目操作日志',
+    icon: 'audit-log',
+    operations: [],
+  },
+]
+
+export const ACCESS_PAGE_CATALOG: readonly AccessPageDefinition[] = pageSpecs.map((page) => ({
+  scopeType: page.scopeType,
+  routeKey: page.routeKey,
+  path: page.path,
+  title: page.title,
+  permissionKey: `${page.routeKey}.read`,
+  icon: page.icon,
+  operationKeys: page.operations.map((operation) => `${page.routeKey}.${operation.suffix}`),
+}))
+
+export const ACCESS_PERMISSION_CATALOG: readonly PermissionDefinition[] = pageSpecs.flatMap(
+  /** 从页面目录派生读取权限和操作权限，并为操作声明所属页面依赖。 */
+  (page): PermissionDefinition[] => [
+    {
+      key: `${page.routeKey}.read`,
+      scopeType: page.scopeType,
+      kind: 'page',
+      title: page.title,
+      routeKey: page.routeKey,
+      pagePermissionKey: null,
+      adminOnly: false,
+      deprecated: false,
+    },
+    ...page.operations.map((operation): PermissionDefinition => ({
+      key: `${page.routeKey}.${operation.suffix}`,
+      scopeType: page.scopeType,
+      kind: 'operation',
+      title: operation.title,
+      routeKey: page.routeKey,
+      pagePermissionKey: `${page.routeKey}.read`,
+      adminOnly: operation.adminOnly ?? false,
+      deprecated: false,
+    })),
+  ],
+)
+
+export const ACCESS_PROTECTED_ROUTE_KEYS: readonly string[] = [
+  'platform.companies',
+  'platform.accounts',
+  'platform.roles',
+  'platform.menus',
+]
+
+export const ACCESS_BUILTIN_MEMBER_PERMISSIONS: Readonly<Record<ScopeType, readonly string[]>> = {
+  platform: ['platform.home.read'],
+  company: ['company.home.read', 'company.projects.read'],
+  project: ['project.home.read'],
+}

package/template-vp-monorepo-react-nestjs/packages/shared/src/utils/access-scope.ts

@@ -0,0 +1,97 @@
+import type {
+  AccessRoutePathInput,
+  AccessScope,
+  BuiltinPermissionKeysInput,
+  FilterSupportedAccessMenusInput,
+  MenuNode,
+} from '../types'
+import {
+  ACCESS_BUILTIN_MEMBER_PERMISSIONS,
+  ACCESS_PAGE_CATALOG,
+  ACCESS_PERMISSION_CATALOG,
+} from './access-catalog'
+
+/** 标识当前作用域，不校验成员身份或访问权限。 */
+export function accessScopeKey(scope: AccessScope): string {
+  switch (scope.type) {
+    case 'platform':
+      return 'platform'
+    case 'company':
+      return `company:${scope.companyId}`
+    case 'project':
+      return `project:${scope.companyId}:${scope.projectId}`
+  }
+}
+
+/** 生成平台、企业或项目的入口路径，并对路径中的资源 ID 编码。 */
+export function accessScopeBasePath(scope: AccessScope): string {
+  switch (scope.type) {
+    case 'platform':
+      return '/platform'
+    case 'company':
+      return `/companies/${encodeURIComponent(scope.companyId)}`
+    case 'project':
+      return `/companies/${encodeURIComponent(scope.companyId)}/projects/${encodeURIComponent(scope.projectId)}`
+  }
+}
+
+/** 按路由键查找页面目录定义；未注册时返回 `undefined`。 */
+export function getAccessPage(routeKey: string) {
+  return ACCESS_PAGE_CATALOG.find((page) => page.routeKey === routeKey)
+}
+
+/** 按权限键查找权限目录定义；未注册时返回 `undefined`。 */
+export function getAccessPermission(permissionKey: string) {
+  return ACCESS_PERMISSION_CATALOG.find((permission) => permission.key === permissionKey)
+}
+
+/** 未注册页面或不匹配的作用域没有可生成的页面路径。 */
+export function accessRoutePath({ scope, routeKey }: AccessRoutePathInput): string | null {
+  const page = getAccessPage(routeKey)
+  if (!page || page.scopeType !== scope.type) return null
+
+  let path = page.path
+  if (scope.type !== 'platform') {
+    path = path.replace(':companyId', encodeURIComponent(scope.companyId))
+  }
+  if (scope.type === 'project') {
+    path = path.replace(':projectId', encodeURIComponent(scope.projectId))
+  }
+  return path
+}
+
+/** 仅返回系统角色定义；实际访问仍须校验成员、状态及菜单。 */
+export function getBuiltinPermissionKeys({
+  scopeType,
+  builtin,
+}: BuiltinPermissionKeysInput): string[] {
+  if (builtin === 'member') return [...ACCESS_BUILTIN_MEMBER_PERMISSIONS[scopeType]]
+  return ACCESS_PERMISSION_CATALOG.filter(
+    (permission) => permission.scopeType === scopeType && !permission.deprecated,
+  ).map((permission) => permission.key)
+}
+
+/** 统一企业、项目等访问编码的空白与大小写，供保存和匹配使用。 */
+export function normalizeAccessCode(value: string): string {
+  return value.trim().toLowerCase()
+}
+
+/** 旧前端的页面兼容过滤，不更改来源菜单或服务端权限。 */
+export function filterSupportedAccessMenus({
+  menus,
+  supportedRouteKeys,
+}: FilterSupportedAccessMenusInput): MenuNode[] {
+  const supported = new Set(supportedRouteKeys)
+
+  /** 递归复制受支持的菜单，并移除过滤后没有子节点的目录。 */
+  function visit(nodes: readonly MenuNode[]): MenuNode[] {
+    return nodes.flatMap((node): MenuNode[] => {
+      if (node.type !== 'directory' && (!node.routeKey || !supported.has(node.routeKey))) return []
+      const children = visit(node.children)
+      if (node.type === 'directory' && children.length === 0) return []
+      return [{ ...node, children }]
+    })
+  }
+
+  return visit(menus)
+}

package/template-vp-monorepo-react-nestjs/packages/shared/src/utils/account.ts

@@ -1,5 +1,6 @@
 export const ACCOUNT_PATTERN = /^[A-Za-z0-9_]+$/
 
+/** 去除账号两端空白并统一为小写，供注册、登录和唯一性检查使用。 */
 export function normalizeAccount(value: string) {
   return value.trim().toLowerCase()
 }

package/template-vp-monorepo-react-nestjs/packages/shared/src/utils/index.ts

@@ -1,2 +1,67 @@
 export { ACCOUNT_PATTERN, normalizeAccount } from './account'
 export { isSessionTerminal, SESSION_TERMINALS } from './session-terminal'
+export { toTimestampRecord } from './record'
+export {
+  ACCESS_BUILTIN_MEMBER_PERMISSIONS,
+  ACCESS_CATALOG_VERSION,
+  ACCESS_CODE_PATTERN,
+  ACCESS_DEFAULT_PAGE_SIZE,
+  ACCESS_ICON_KEY_PATTERN,
+  ACCESS_MAX_PAGE_SIZE,
+  ACCESS_PAGE_CATALOG,
+  ACCESS_PERMISSION_CATALOG,
+  ACCESS_PROTECTED_ROUTE_KEYS,
+} from './access-catalog'
+export {
+  accessRoutePath,
+  accessScopeBasePath,
+  accessScopeKey,
+  filterSupportedAccessMenus,
+  getAccessPage,
+  getAccessPermission,
+  getBuiltinPermissionKeys,
+  normalizeAccessCode,
+} from './access-scope'
+export type {
+  AccessRoutePathInput,
+  BuiltinPermissionKeysInput,
+  FilterSupportedAccessMenusInput,
+} from '../types'
+export {
+  ORGANIZATION_CODE_PATTERN,
+  ORGANIZATION_MAX_DEPTH,
+  ORGANIZATION_MAX_SORT,
+  candidateArraySchema,
+  codeSchema,
+  createCompanySchema,
+  createOrganizationTemplateSchema,
+  createOrganizationUnitSchema,
+  createPositionSchema,
+  createProjectSchema,
+  descriptionSchema as organizationDescriptionSchema,
+  entityStatusSchema,
+  globalAccountCandidateQuerySchema,
+  idSchema as organizationIdSchema,
+  moveOrganizationUnitSchema,
+  nameSchema as organizationNameSchema,
+  normalizeOrganizationCode,
+  normalizeOrganizationKey,
+  organizationMemberCandidateQuerySchema,
+  organizationTemplateListQuerySchema,
+  organizationTreeQuerySchema,
+  positionListQuerySchema,
+  replaceMemberOrganizationUnitsSchema,
+  replaceMemberPositionsSchema,
+  replaceOrganizationTemplateSchema,
+  replaceOrganizationUnitMembersSchema,
+  replacePositionMembersSchema,
+  resolveGlobalAccountCandidatesSchema,
+  resolveOrganizationMemberCandidatesSchema,
+  setAdministratorSchema,
+  statusRequestSchema,
+  updateCompanyHierarchySchema,
+  updateOrganizationTemplateStatusSchema,
+  updateOrganizationUnitSchema,
+  updatePositionSchema,
+  updateProfileSchema,
+} from './organization/contracts'