create-bubbles 0.1.26 → 0.1.28

package/template-vp-monorepo-react-nestjs/packages/shared/src/types/access-maintenance.ts

@@ -0,0 +1,68 @@
+import type { AccessScope, PageQuery, UserSummary } from './access'
+
+export interface CleanupPreviewItem {
+  permissionKey: string
+  title: string
+  menuIds: string[]
+  roleCount: number
+  blockedReasons: string[]
+}
+
+export interface CleanupPreview {
+  catalogVersion: string
+  deploymentId: string | null
+  proofDigest: string | null
+  eligible: boolean
+  blockedReasons: string[]
+  items: CleanupPreviewItem[]
+  totals: {
+    permissions: number
+    menus: number
+    roleAssignments: number
+  }
+}
+
+export interface CleanupRequest {
+  permissionKeys: string[]
+  proofDigest: string
+}
+
+export interface CleanupResult {
+  removedPermissionKeys: string[]
+  alreadyCleanedPermissionKeys: string[]
+  removedMenuCount: number
+  removedRoleAssignmentCount: number
+}
+
+export interface DeploymentServiceVersion {
+  version: string
+  instanceIds: string[]
+  requiredPermissionKeys: string[]
+}
+
+export interface DeploymentProof {
+  deploymentId: string
+  completed: true
+  verifiedAt: string
+  expiresAt: string
+  serviceVersions: DeploymentServiceVersion[]
+}
+
+export interface AuditRecord {
+  id: string
+  actor: UserSummary
+  scope: AccessScope
+  action: string
+  objectType: string
+  objectId: string
+  summary: Record<string, string | number | boolean | null | string[]>
+  requestId: string
+  createdAt: string
+}
+
+export interface AuditQuery extends PageQuery {
+  action?: string
+  actorId?: string
+  from?: string
+  to?: string
+}

package/template-vp-monorepo-react-nestjs/packages/shared/src/types/access-menus.ts

@@ -0,0 +1,94 @@
+import type { AccessScope, EntityStatus, ScopeType, UserSummary, VersionRequest } from './access'
+
+export type MenuNodeType = 'directory' | 'page' | 'operation'
+
+export interface MenuNode {
+  id: string
+  scopeType: ScopeType
+  parentId: string | null
+  type: MenuNodeType
+  name: string
+  icon: string
+  sort: number
+  hidden: boolean
+  status: EntityStatus
+  routeKey: string | null
+  permissionKey: string | null
+  protected: boolean
+  children: MenuNode[]
+}
+
+export interface AccessContext {
+  user: UserSummary
+  scope: AccessScope
+  administrator: ScopeType | null
+  permissionKeys: string[]
+  menus: MenuNode[]
+  menuVersion: number
+  catalogVersion: string
+}
+
+export interface MenuTreeResult {
+  scopeType: ScopeType
+  version: number
+  items: MenuNode[]
+}
+
+export interface PermissionDefinition {
+  key: string
+  scopeType: ScopeType
+  kind: 'page' | 'operation'
+  title: string
+  routeKey: string
+  pagePermissionKey: string | null
+  adminOnly: boolean
+  deprecated: boolean
+}
+
+export interface PermissionTreeResult {
+  catalogVersion: string
+  items: MenuNode[]
+  permissions: PermissionDefinition[]
+  grantablePermissionKeys: string[]
+}
+
+export interface AccessPageDefinition {
+  scopeType: ScopeType
+  routeKey: string
+  path: string
+  title: string
+  permissionKey: string
+  icon: string
+  operationKeys: string[]
+}
+
+export interface CreateMenuRequest extends VersionRequest {
+  parentId: string | null
+  type: MenuNodeType
+  name: string
+  icon?: string
+  sort?: number
+  hidden?: boolean
+  status?: EntityStatus
+  routeKey?: string
+  permissionKey?: string
+}
+
+export interface UpdateMenuRequest extends VersionRequest {
+  parentId?: string | null
+  name?: string
+  icon?: string
+  sort?: number
+  hidden?: boolean
+  status?: EntityStatus
+}
+
+export interface FunctionCatalogResult {
+  catalogVersion: string
+  items: PermissionDefinition[]
+}
+
+export interface FilterSupportedAccessMenusInput {
+  menus: readonly MenuNode[]
+  supportedRouteKeys: Iterable<string>
+}

package/template-vp-monorepo-react-nestjs/packages/shared/src/types/access-resources.ts

@@ -0,0 +1,168 @@
+import type {
+  AccessScope,
+  AccountStatus,
+  BuiltinRole,
+  EntityStatus,
+  PageQuery,
+  UserSummary,
+  VersionRequest,
+} from './access'
+
+export interface AccountRecord extends UserSummary {
+  status: AccountStatus
+  createdAt: string
+  updatedAt: string
+  platformRoleIds: string[]
+}
+
+export interface CompanyRecord {
+  id: string
+  name: string
+  code: string
+  description: string
+  status: EntityStatus
+  version: number
+  createdAt: string
+  updatedAt: string
+}
+
+export interface ProjectRecord extends CompanyRecord {
+  companyId: string
+}
+
+export interface AdministratorSummary extends UserSummary {
+  accountStatus: AccountStatus
+  memberStatus: EntityStatus
+  effective: boolean
+}
+
+export interface CompanyDetail extends CompanyRecord {
+  administrators: AdministratorSummary[]
+}
+
+export interface ProjectDetail extends ProjectRecord {
+  administrators: AdministratorSummary[]
+}
+
+export type ProjectAdministratorsResult = AdministratorSummary[]
+
+export interface MemberRecord {
+  id: string
+  userId: string
+  account: string
+  name: string
+  status: EntityStatus
+  accountStatus: AccountStatus
+  roleIds: string[]
+  roleNames: string[]
+  version: number
+  createdAt: string
+  updatedAt: string
+}
+
+export interface RoleRecord {
+  id: string
+  scope: AccessScope
+  name: string
+  description: string
+  builtin: BuiltinRole
+  permissionKeys: string[]
+  version: number
+  memberCount: number
+  assignable: boolean
+  createdAt: string
+  updatedAt: string
+}
+
+export interface UpdateProfileRequest extends VersionRequest {
+  name?: string
+  code?: string
+  description?: string
+}
+
+export interface SetAdministratorResult {
+  administrator: AdministratorSummary
+  replacedUserId: string | null
+}
+
+export interface AccountStatusRequest {
+  status: EntityStatus
+}
+
+export interface AssignPlatformRolesRequest {
+  roleIds: string[]
+}
+
+export interface RegisterCompanyMemberRequest {
+  name: string
+  account: string
+  password: string
+}
+
+export type CompanyMemberInvitationStatus = 'pending' | 'expired' | 'accepted' | 'revoked'
+
+/** 企业成员邀请的可持久化公开信息；任何查询响应都不会包含 token 或 token 摘要。 */
+export interface CompanyMemberInvitationRecord {
+  id: string
+  companyId: string
+  status: CompanyMemberInvitationStatus
+  createdByUserId: string
+  acceptedByUserId: string | null
+  expiresAt: string
+  acceptedAt: string | null
+  revokedAt: string | null
+  version: number
+  createdAt: string
+  updatedAt: string
+}
+
+export interface CompanyMemberInvitationQuery extends PageQuery {
+  status?: CompanyMemberInvitationStatus
+}
+
+/** 创建不绑定具体账号的一次性企业邀请链接。 */
+export type CreateCompanyMemberInvitationRequest = Record<string, never>
+
+export type RevokeCompanyMemberInvitationRequest = VersionRequest
+
+export type ResendCompanyMemberInvitationRequest = VersionRequest
+
+/** 创建或重发时仅返回一次的原始 token，调用方负责组装并安全传递邀请链接。 */
+export interface CompanyMemberInvitationIssueResult {
+  invitation: CompanyMemberInvitationRecord
+  token: string
+}
+
+export interface AcceptCompanyMemberInvitationRequest {
+  token: string
+}
+
+export interface AcceptCompanyMemberInvitationResult {
+  invitationId: string
+  companyId: string
+  companyName: string
+  member: MemberRecord
+}
+
+export interface AddProjectMemberRequest {
+  userId: string
+}
+
+export interface AssignMemberRolesRequest extends VersionRequest {
+  roleIds: string[]
+}
+
+export interface CreateRoleRequest {
+  name: string
+  description?: string
+  permissionKeys?: string[]
+}
+
+export interface UpdateRoleRequest extends VersionRequest {
+  name?: string
+  description?: string
+}
+
+export interface SetRolePermissionsRequest extends VersionRequest {
+  permissionKeys: string[]
+}

package/template-vp-monorepo-react-nestjs/packages/shared/src/types/access.ts

@@ -0,0 +1,71 @@
+export type ScopeType = 'platform' | 'company' | 'project'
+
+export type AccessScope =
+  | { type: 'platform' }
+  | { type: 'company'; companyId: string }
+  | { type: 'project'; companyId: string; projectId: string }
+
+export type EntityStatus = 'active' | 'disabled'
+export type AccountStatus = 'active' | 'locked' | 'disabled'
+export type BuiltinRole = 'administrator' | 'member' | null
+
+export interface PageQuery {
+  page?: number
+  pageSize?: number
+  query?: string
+}
+
+export interface PageResult<T> {
+  items: T[]
+  total: number
+  page: number
+  pageSize: number
+}
+
+export interface VersionRequest {
+  expectedVersion: number
+}
+
+export interface StatusRequest extends VersionRequest {
+  status: EntityStatus
+}
+
+export interface DeleteResult {
+  deleted: true
+}
+
+export interface UserSummary {
+  id: string
+  account: string
+  name: string
+}
+
+export interface WorkspaceEntry {
+  scope: AccessScope
+  name: string
+  companyName?: string
+  administrator: ScopeType | null
+}
+
+export interface WorkspacesResult {
+  user: UserSummary
+  workspaces: WorkspaceEntry[]
+}
+
+export interface EntityPageQuery extends PageQuery {
+  status?: EntityStatus
+}
+
+export interface AccountPageQuery extends PageQuery {
+  status?: AccountStatus
+}
+
+export interface AccessRoutePathInput {
+  scope: AccessScope
+  routeKey: string
+}
+
+export interface BuiltinPermissionKeysInput {
+  scopeType: ScopeType
+  builtin: Exclude<BuiltinRole, null>
+}

package/template-vp-monorepo-react-nestjs/packages/shared/src/types/auth.ts

@@ -33,3 +33,26 @@ export interface CurrentUser extends AuthUser {
 export interface LogoutResult {
   loggedOut: true
 }
+
+/** 当前用户验证旧密码后修改自己的全局账号密码。 */
+export interface ChangePasswordRequest {
+  oldPassword: string
+  newPassword: string
+  confirmPassword: string
+}
+
+/** 改密成功时仅返回操作结果，不回显密码或账号资料。 */
+export interface ChangePasswordResult {
+  passwordChanged: true
+}
+
+/** 平台管理员为其他全局账号设定新密码。 */
+export interface ResetAccountPasswordRequest {
+  newPassword: string
+  confirmPassword: string
+}
+
+/** 重置成功时仅返回操作结果，不回显密码或账号资料。 */
+export interface ResetAccountPasswordResult {
+  passwordReset: true
+}

package/template-vp-monorepo-react-nestjs/packages/shared/src/types/index.ts

@@ -1,11 +1,20 @@
 export type {
   AuthUser,
+  ChangePasswordRequest,
+  ChangePasswordResult,
   CurrentUser,
   LoginRequest,
   LoginResult,
   LogoutResult,
   RegisterRequest,
   RegisterResult,
+  ResetAccountPasswordRequest,
+  ResetAccountPasswordResult,
   SessionTerminalType,
 } from './auth'
 export type { ApiErrorDetail, ApiFailure } from './common'
+export type * from './access'
+export type * from './access-resources'
+export type * from './access-menus'
+export type * from './access-maintenance'
+export type * from './organization/models'