create-windy 0.2.33 → 0.3.0

package/template/apps/web/src/pages/system/components/department/DepartmentOrganizationForm.vue

@@ -0,0 +1,210 @@
+<script setup lang="ts">
+import { computed, onMounted, shallowRef, watch } from "vue";
+import { Input } from "@/components/ui/input";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select";
+import { listSystemResource, type SystemRecord } from "@/services/system-api";
+
+const props = defineProps<{
+  item?: SystemRecord;
+  defaults: Record<string, unknown>;
+}>();
+
+const emit = defineEmits<{
+  submit: [payload: Record<string, unknown>];
+}>();
+
+const form = shallowRef<Record<string, unknown>>({});
+const departments = shallowRef<SystemRecord[]>([]);
+const loading = shallowRef(false);
+const error = shallowRef("");
+const transitionTargetId = shallowRef<string>();
+const isRoot = computed(() => Boolean(props.item && !props.item.parentId));
+const isDisabling = computed(
+  () =>
+    props.item?.status === "active" &&
+    form.value.status === "disabled" &&
+    !isRoot.value,
+);
+const parentOptions = computed(() =>
+  departments.value.filter(
+    (department) =>
+      department.id !== props.item?.id &&
+      !isDescendant(department.id, props.item?.id),
+  ),
+);
+const migrationOptions = computed(() =>
+  departments.value.filter(
+    (department) =>
+      department.id !== props.item?.id &&
+      !isDescendant(department.id, props.item?.id),
+  ),
+);
+
+watch(
+  () => [props.item, props.defaults] as const,
+  () => {
+    form.value = {
+      ...props.defaults,
+      ...(props.item || {}),
+      status: props.item?.status || props.defaults.status || "active",
+    };
+    transitionTargetId.value = undefined;
+  },
+  { immediate: true },
+);
+
+onMounted(() => void loadDepartments());
+
+async function loadDepartments() {
+  loading.value = true;
+  error.value = "";
+  try {
+    const result = await listSystemResource("departments", {
+      page: 1,
+      pageSize: 100,
+      status: "active",
+      sort: "order,name",
+    });
+    departments.value = result.items;
+  } catch (currentError) {
+    error.value =
+      currentError instanceof Error
+        ? currentError.message
+        : String(currentError);
+  } finally {
+    loading.value = false;
+  }
+}
+
+function update(key: string, value: unknown) {
+  form.value = { ...form.value, [key]: value };
+}
+
+function submit() {
+  emit("submit", {
+    ...form.value,
+    ...(isDisabling.value
+      ? { _transitionTargetDepartmentId: transitionTargetId.value }
+      : {}),
+  });
+}
+
+function isDescendant(candidateId: string, ancestorId: unknown): boolean {
+  if (typeof ancestorId !== "string") return false;
+  const byId = new Map(
+    departments.value.map((department) => [department.id, department]),
+  );
+  const visited = new Set<string>();
+  let current = byId.get(candidateId);
+  while (typeof current?.parentId === "string" && !visited.has(current.id)) {
+    visited.add(current.id);
+    if (current.parentId === ancestorId) return true;
+    current = byId.get(current.parentId);
+  }
+  return false;
+}
+
+defineExpose({ submit });
+</script>
+
+<template>
+  <div class="space-y-4">
+    <label class="grid gap-2 text-sm font-medium">
+      <span>部门编码</span>
+      <Input
+        :model-value="String(form.code || '')"
+        placeholder="例如 sales"
+        @update:model-value="update('code', String($event))"
+      />
+    </label>
+    <label class="grid gap-2 text-sm font-medium">
+      <span>部门名称</span>
+      <Input
+        :model-value="String(form.name || '')"
+        placeholder="例如 销售部"
+        @update:model-value="update('name', String($event))"
+      />
+    </label>
+    <label class="grid gap-2 text-sm font-medium">
+      <span>上级部门</span>
+      <Select
+        :model-value="typeof form.parentId === 'string' ? form.parentId : ''"
+        :disabled="loading || isRoot"
+        @update:model-value="update('parentId', String($event))"
+      >
+        <SelectTrigger class="w-full" aria-label="上级部门">
+          <SelectValue
+            :placeholder="
+              isRoot
+                ? '平台唯一根组织'
+                : loading
+                  ? '正在加载…'
+                  : '请选择上级部门'
+            "
+          />
+        </SelectTrigger>
+        <SelectContent>
+          <SelectItem
+            v-for="department in parentOptions"
+            :key="department.id"
+            :value="department.id"
+          >
+            {{ String(department.name || department.code) }}
+          </SelectItem>
+        </SelectContent>
+      </Select>
+    </label>
+    <label class="grid gap-2 text-sm font-medium">
+      <span>排序</span>
+      <Input
+        type="number"
+        min="0"
+        :model-value="String(form.order ?? 10)"
+        @update:model-value="update('order', Number($event))"
+      />
+    </label>
+    <label v-if="item" class="grid gap-2 text-sm font-medium">
+      <span>状态</span>
+      <Select
+        :model-value="String(form.status || 'active')"
+        :disabled="isRoot"
+        @update:model-value="update('status', String($event))"
+      >
+        <SelectTrigger class="w-full" aria-label="部门状态">
+          <SelectValue />
+        </SelectTrigger>
+        <SelectContent>
+          <SelectItem value="active">启用</SelectItem>
+          <SelectItem value="disabled">停用</SelectItem>
+        </SelectContent>
+      </Select>
+    </label>
+    <label v-if="isDisabling" class="grid gap-2 text-sm font-medium">
+      <span>关联数据迁移至</span>
+      <Select v-model="transitionTargetId">
+        <SelectTrigger class="w-full" aria-label="关联数据迁移目标">
+          <SelectValue placeholder="请选择启用部门" />
+        </SelectTrigger>
+        <SelectContent>
+          <SelectItem
+            v-for="department in migrationOptions"
+            :key="department.id"
+            :value="department.id"
+          >
+            {{ String(department.name || department.code) }}
+          </SelectItem>
+        </SelectContent>
+      </Select>
+      <span class="text-xs font-normal text-muted-foreground">
+        下级部门、用户归属和角色自定义部门范围会一起迁移。
+      </span>
+    </label>
+    <p v-if="error" class="text-sm text-destructive">{{ error }}</p>
+  </div>
+</template>

package/template/apps/web/src/pages/system/components/department/DepartmentTransitionDialog.vue

@@ -0,0 +1,112 @@
+<script setup lang="ts">
+import { computed, shallowRef, watch } from "vue";
+import FormDialog from "@/components/common/FormDialog.vue";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select";
+import { listSystemResource, type SystemRecord } from "@/services/system-api";
+
+const open = defineModel<boolean>("open", { default: false });
+const props = defineProps<{
+  department?: SystemRecord;
+  loading?: boolean;
+}>();
+const emit = defineEmits<{
+  confirm: [targetDepartmentId: string];
+}>();
+
+const targetDepartmentId = shallowRef<string>();
+const departments = shallowRef<SystemRecord[]>([]);
+const error = shallowRef("");
+const targets = computed(() =>
+  departments.value.filter(
+    (department) =>
+      department.id !== props.department?.id &&
+      !isDescendant(department.id, props.department?.id),
+  ),
+);
+
+watch(open, (value) => {
+  if (!value) return;
+  targetDepartmentId.value = undefined;
+  void loadDepartments();
+});
+
+async function loadDepartments() {
+  error.value = "";
+  try {
+    const result = await listSystemResource("departments", {
+      page: 1,
+      pageSize: 100,
+      status: "active",
+      sort: "order,name",
+    });
+    departments.value = result.items;
+  } catch (currentError) {
+    error.value =
+      currentError instanceof Error
+        ? currentError.message
+        : String(currentError);
+  }
+}
+
+function submit() {
+  if (targetDepartmentId.value) emit("confirm", targetDepartmentId.value);
+}
+
+function isDescendant(candidateId: string, ancestorId: unknown): boolean {
+  if (typeof ancestorId !== "string") return false;
+  const byId = new Map(
+    departments.value.map((department) => [department.id, department]),
+  );
+  const visited = new Set<string>();
+  let current = byId.get(candidateId);
+  while (typeof current?.parentId === "string" && !visited.has(current.id)) {
+    visited.add(current.id);
+    if (current.parentId === ancestorId) return true;
+    current = byId.get(current.parentId);
+  }
+  return false;
+}
+</script>
+
+<template>
+  <FormDialog
+    v-model:open="open"
+    title="删除部门"
+    description="删除前会把下级部门、用户归属和角色自定义部门范围迁移到指定部门。"
+    submit-text="迁移并删除"
+    :loading="loading"
+    :submit-disabled="!department?.parentId || !targetDepartmentId"
+    @submit="submit"
+  >
+    <p
+      v-if="department && !department.parentId"
+      class="text-sm text-destructive"
+    >
+      平台唯一根组织不能删除。
+    </p>
+    <label v-else class="grid gap-2 text-sm font-medium">
+      <span>迁移目标</span>
+      <Select v-model="targetDepartmentId">
+        <SelectTrigger class="w-full" aria-label="删除部门迁移目标">
+          <SelectValue placeholder="请选择启用部门" />
+        </SelectTrigger>
+        <SelectContent>
+          <SelectItem
+            v-for="department in targets"
+            :key="department.id"
+            :value="department.id"
+          >
+            {{ String(department.name || department.code) }}
+          </SelectItem>
+        </SelectContent>
+      </Select>
+    </label>
+    <p v-if="error" class="text-sm text-destructive">{{ error }}</p>
+  </FormDialog>
+</template>

package/template/apps/web/src/pages/system/components/user-account/UserAccountForm.vue

@@ -1,6 +1,7 @@
 <script setup lang="ts">
 import { onMounted, shallowRef, watch } from "vue";
 import { PlusIcon } from "@lucide/vue";
+import { PASSWORD_POLICY, type PasswordPolicy } from "@southwind-ai/shared";
 import { Button } from "@/components/ui/button";
 import { Input } from "@/components/ui/input";
 import {
@@ -16,6 +17,7 @@ import {
   quickCreateDepartment,
   type SystemRecord,
 } from "@/services/system-api";
+import { loadPasswordPolicy } from "@/services/auth-api";
 import UserRoleSelector from "./UserRoleSelector.vue";
 
 interface DepartmentOption {
@@ -45,6 +47,7 @@ const quickName = shallowRef("");
 const quickCode = shallowRef("");
 const quickParentId = shallowRef<string | undefined>();
 const governedTouched = shallowRef<Record<string, boolean>>({});
+const passwordPolicy = shallowRef<PasswordPolicy>(PASSWORD_POLICY);
 
 watch(
   () => [props.item, props.defaults] as const,
@@ -56,9 +59,17 @@ watch(
 );
 
 onMounted(() => {
-  void loadDepartments();
+  void Promise.all([loadDepartments(), loadRuntimePasswordPolicy()]);
 });
 
+async function loadRuntimePasswordPolicy() {
+  try {
+    passwordPolicy.value = await loadPasswordPolicy();
+  } catch {
+    // Server validation remains authoritative; keep the packaged safe default.
+  }
+}
+
 function update(key: string, value: unknown) {
   if (key === "email" || key === "phone") {
     governedTouched.value = { ...governedTouched.value, [key]: true };
@@ -244,7 +255,9 @@ defineExpose({ submit });
           type="password"
           autocomplete="new-password"
           :model-value="String(form.temporaryPassword || '')"
-          placeholder="至少 12 个字符"
+          :minlength="passwordPolicy.minLength"
+          :maxlength="passwordPolicy.maxLength"
+          :placeholder="`${passwordPolicy.minLength}-${passwordPolicy.maxLength} 个字符`"
           @update:model-value="update('temporaryPassword', String($event))"
         />
         <span class="text-xs font-normal text-muted-foreground">
@@ -281,7 +294,7 @@ defineExpose({ submit });
       </div>
       <Select v-model="quickParentId">
         <SelectTrigger class="w-full" aria-label="上级部门">
-          <SelectValue placeholder="上级部门（可选）" />
+          <SelectValue placeholder="请选择上级部门" />
         </SelectTrigger>
         <SelectContent>
           <SelectItem
@@ -296,7 +309,7 @@ defineExpose({ submit });
       <Button
         type="button"
         size="sm"
-        :disabled="creating"
+        :disabled="creating || !quickParentId"
         @click="createDepartment"
       >
         {{ creating ? "创建中…" : "创建并选中" }}

package/template/apps/web/src/pages/system/composables/useDepartmentTransitions.ts

@@ -0,0 +1,79 @@
+import { shallowRef } from "vue";
+import type { SystemRecord } from "@/services/system-api";
+import { transitionDepartment } from "@/services/system-api";
+import { useAppToast } from "@/composables/useAppToast";
+
+export function useDepartmentTransitions(options: {
+  reload: () => Promise<void>;
+  mutated: () => void;
+}) {
+  const loading = shallowRef(false);
+  const toast = useAppToast();
+
+  async function disable(
+    department: SystemRecord,
+    targetDepartmentId: string | undefined,
+  ): Promise<boolean> {
+    if (!targetDepartmentId) {
+      toast.error("请选择迁移目标");
+      return false;
+    }
+    return transition(
+      department,
+      "disable",
+      targetDepartmentId,
+      "部门已停用，关联数据已迁移",
+    );
+  }
+
+  async function remove(
+    department: SystemRecord,
+    targetDepartmentId: string | undefined,
+  ): Promise<boolean> {
+    if (!department.parentId) {
+      toast.error("平台唯一根组织不能删除");
+      return false;
+    }
+    if (!targetDepartmentId) {
+      toast.error("请选择迁移目标");
+      return false;
+    }
+    return transition(
+      department,
+      "delete",
+      targetDepartmentId,
+      "部门已删除，关联数据已迁移",
+    );
+  }
+
+  async function transition(
+    department: SystemRecord,
+    action: "disable" | "delete",
+    targetDepartmentId: string,
+    successMessage: string,
+  ): Promise<boolean> {
+    loading.value = true;
+    try {
+      await transitionDepartment(department.id, {
+        action,
+        targetDepartmentId,
+      });
+      await options.reload();
+      toast.success(successMessage);
+      options.mutated();
+      return true;
+    } catch (currentError) {
+      toast.error(action === "disable" ? "部门停用失败" : "部门删除失败", {
+        description:
+          currentError instanceof Error
+            ? currentError.message
+            : String(currentError),
+      });
+      return false;
+    } finally {
+      loading.value = false;
+    }
+  }
+
+  return { loading, disable, remove };
+}

package/template/apps/web/src/pages/system/composables/useNotificationPermissions.ts

@@ -0,0 +1,14 @@
+import { computed } from "vue";
+import { useAccessSnapshot } from "@/composables/useAccessSnapshot";
+
+export function useNotificationPermissions() {
+  const access = useAccessSnapshot();
+  const canUpdate = computed(
+    () =>
+      access.snapshot.value?.actor.permissionKeys.includes(
+        "system.notification.update",
+      ) === true,
+  );
+
+  return { canUpdate };
+}

package/template/apps/web/src/pages/system/composables/useSystemResource.ts

@@ -33,9 +33,11 @@ export function useSystemResource(options: UseSystemResourceOptions) {
   const q = shallowRef("");
   const status = shallowRef("");
   const auditFilters = shallowRef<{
+    q?: string;
     actorId?: string;
     action?: string;
     occurredAfter?: string;
+    occurredBefore?: string;
   }>({});
   const exportOptions = shallowRef<{ includeScheduler?: boolean }>({});
   const loading = shallowRef(false);

package/template/apps/web/src/pages/system/composables/useSystemResource.webtest.ts

@@ -34,9 +34,15 @@ describe("useSystemResource 审计导出", () => {
       apiResource: "audit-logs",
       readonly: true,
     });
+    resource.setAuditFilters({
+      q: "案件甲",
+      actorId: "user_1",
+      action: "case.review",
+      occurredAfter: "2026-07-20T01:15:00.000Z",
+      occurredBefore: "2026-07-20T01:20:59.999Z",
+    });
     resource.setExportOptions({ includeScheduler: true });
 
-    await resource.reload();
     await resource.exportCurrent("audit-logs.json");
 
     expect(api.list).toHaveBeenCalledWith(
@@ -45,7 +51,14 @@ describe("useSystemResource 审计导出", () => {
     );
     expect(api.exportCurrent).toHaveBeenCalledWith(
       "audit-logs",
-      expect.objectContaining({ includeScheduler: true }),
+      expect.objectContaining({
+        q: "案件甲",
+        actorId: "user_1",
+        action: "case.review",
+        occurredAfter: "2026-07-20T01:15:00.000Z",
+        occurredBefore: "2026-07-20T01:20:59.999Z",
+        includeScheduler: true,
+      }),
     );
   });
 });

package/template/apps/web/src/pages/system/resource-config.ts

@@ -15,7 +15,12 @@ export interface ResourceColumn {
   label: string;
   descriptionKey?: string;
   headerDescription?: string;
-  format?: "license-policy" | "date-time" | "audit-action" | "governed-value";
+  format?:
+    | "license-policy"
+    | "date-time"
+    | "audit-action"
+    | "audit-ip"
+    | "governed-value";
 }
 
 export interface ResourceField {
@@ -111,7 +116,8 @@ export const systemResourceConfigs: Record<
     key: "departments",
     apiResource: "departments",
     title: "部门组织",
-    description: "维护组织部门编码、名称、排序和启停状态。",
+    description:
+      "维护唯一根组织下的部门树；停用或删除前会迁移下级、用户归属和角色数据范围。",
     searchPlaceholder: "搜索部门编码或名称",
     columns: [
       { key: "code", label: "编码" },
@@ -124,7 +130,8 @@ export const systemResourceConfigs: Record<
       { key: "name", label: "名称", placeholder: "例如 销售部" },
       { key: "order", label: "排序", type: "number" },
     ],
-    createDefaults: () => ({ order: 10 }),
+    importable: false,
+    createDefaults: () => ({ order: 10, status: "active" }),
   },
   menus: {
     key: "menus",
@@ -219,11 +226,12 @@ export const systemResourceConfigs: Record<
     apiResource: "audit-logs",
     title: "审计日志",
     description: "查看 Guard、功能开关、CRUD 和业务操作产生的审计事件。",
-    searchPlaceholder: "使用操作者、动作和时间筛选",
+    searchPlaceholder: "搜索审计事实",
     columns: [
       { key: "action", label: "动作", format: "audit-action" },
       { key: "outcome", label: "结果" },
       { key: "actor", label: "操作者" },
+      { key: "ip", label: "IP", format: "audit-ip" },
       { key: "occurredAt", label: "时间", format: "date-time" },
     ],
     fields: [],

package/template/apps/web/src/router/error-navigation.ts

@@ -0,0 +1,50 @@
+import type { Router } from "vue-router";
+import type { ApiFailure } from "@/services/http";
+import { safeReturnTo } from "./auth-navigation";
+
+const errorRouteNames = {
+  internal: "internal-error",
+  maintenance: "maintenance",
+  network: "network-error",
+} as const;
+
+export function installApiFailureNavigation(router: Router) {
+  return (failure: ApiFailure): void => {
+    if (router.currentRoute.value.meta.errorPage === true) return;
+    const query: Record<string, string> = {
+      from: safeErrorReturnTo(router.currentRoute.value.fullPath),
+    };
+    if (failure.requestId) query.requestId = failure.requestId;
+    scheduleErrorNavigation(router, {
+      name: errorRouteNames[failure.kind],
+      query,
+    });
+  };
+}
+
+export function installUnexpectedErrorNavigation(router: Router) {
+  return (from?: string): void => {
+    if (router.currentRoute.value.meta.errorPage === true) return;
+    scheduleErrorNavigation(router, {
+      name: "internal-error",
+      query: {
+        from: safeErrorReturnTo(from || router.currentRoute.value.fullPath),
+      },
+    });
+  };
+}
+
+export function safeErrorReturnTo(value: string): string {
+  const target = safeReturnTo(value);
+  return target.startsWith("/error/") ? "/" : target;
+}
+
+function scheduleErrorNavigation(
+  router: Router,
+  target: Parameters<Router["replace"]>[0],
+): void {
+  setTimeout(() => {
+    if (router.currentRoute.value.meta.errorPage === true) return;
+    void router.replace(target);
+  }, 0);
+}