cx-chat 0.0.1

package/src/views/page-system/role/modal/role-permission-assign-shared.ts

@@ -0,0 +1,1047 @@
+import type { MenuTreeItem } from '@/types/menu'
+import { getMenuDisplayName } from '@/utils/menuI18n'
+import type { DataNode } from 'antd/es/tree'
+import type { TFunction } from 'i18next'
+
+import {
+  PERMISSION_ASSIGN_CODE_BY_FIRST_SEGMENT,
+  type PermissionAssignFirstSegmentConfig,
+} from './permission-assign-group-rules'
+
+export type PermissionRow = {
+  id: string
+  code: string
+  description?: string
+  name?: string
+  menuId?: string
+  /** 0=系统内置（界面不展示，提交时强制并入）1=基础（勾选菜单后不可取消）2=扩展 */
+  apiType?: number
+  sortOrder?: number
+  httpMethod?: string
+}
+
+export type ResourceGroup = {
+  resource: string
+  resourceTitle?: string
+  permissions: PermissionRow[]
+}
+
+export type MenuPermissionSection = {
+  sectionKey: string
+  sectionTitle: string
+  anchorMenuId: string
+  resourceGroups: ResourceGroup[]
+}
+
+export function unwrapMenuTreeResponse(res: unknown): any[] {
+  const r = res as { data?: unknown } | unknown
+  const d =
+    r && typeof r === 'object' && 'data' in r ? (r as { data: unknown }).data : r
+  return Array.isArray(d) ? d : []
+}
+
+export function flattenPermissionsFromMenuTree(
+  nodes: any[],
+  idKey: string,
+): PermissionRow[] {
+  const out: PermissionRow[] = []
+  const visit = (list: any[]) => {
+    for (const n of list) {
+      const menuId = String(n?.[idKey] ?? '')
+      const perms =
+        n?.permissions ?? n?.permissionList ?? n?.permissionDTOList ?? []
+      if (Array.isArray(perms)) {
+        for (const p of perms) {
+          if (p == null || typeof p !== 'object') continue
+          const code = String((p as { code?: string }).code ?? '').trim()
+          if (!code) continue
+          const mid = String(
+            (p as { menuId?: string }).menuId ?? menuId,
+          ).trim()
+          const rec = p as Record<string, unknown>
+          const apiT = parseRecordApiType(rec)
+          out.push({
+            id: String((p as { id?: string | number }).id ?? `${mid}-${code}`),
+            code,
+            description: (p as { description?: string }).description,
+            name: (p as { name?: string }).name,
+            menuId: mid || menuId,
+            apiType: apiT,
+            sortOrder: parseRecordSortOrder(rec),
+            httpMethod: parseRecordHttpMethod(rec),
+          })
+        }
+      }
+      const ch = n?.children
+      if (Array.isArray(ch) && ch.length) visit(ch)
+    }
+  }
+  visit(nodes)
+  return out
+}
+
+function parseRecordApiType(p: Record<string, unknown>): number | undefined {
+  const raw = p.apiType ?? p.api_type
+  if (raw === '' || raw == null) return undefined
+  const n = Number(raw)
+  return Number.isFinite(n) ? n : undefined
+}
+
+function parseRecordSortOrder(p: Record<string, unknown>): number | undefined {
+  const raw = p.sortOrder ?? p.sort_order
+  if (raw === '' || raw == null) return undefined
+  const n = Number(raw)
+  return Number.isFinite(n) ? n : undefined
+}
+
+function parseRecordHttpMethod(p: Record<string, unknown>): string | undefined {
+  const raw = p.httpMethod ?? p.http_method
+  if (raw == null) return undefined
+  const s = String(raw).trim()
+  return s ? s.toUpperCase() : undefined
+}
+
+/** 组内：apiType 0→1→2→其它；同类型按 sortOrder 升序；再按 code */
+export function comparePermissionRowsForAssign(
+  a: PermissionRow,
+  b: PermissionRow,
+): number {
+  const rank = (t: number | undefined) =>
+    t === 0 || t === 1 || t === 2 ? t : 3
+  const ra = rank(a.apiType)
+  const rb = rank(b.apiType)
+  if (ra !== rb) return ra - rb
+  const sa = a.sortOrder
+  const sb = b.sortOrder
+  const na = sa !== undefined && Number.isFinite(sa) ? sa : 0
+  const nb = sb !== undefined && Number.isFinite(sb) ? sb : 0
+  if (na !== nb) return na - nb
+  return a.code.localeCompare(b.code)
+}
+
+/** Swagger UI 风格 HTTP 方法徽章（浅/深色） */
+export function swaggerHttpMethodBadgeClass(method: string | undefined): string {
+  const m = String(method ?? '')
+    .trim()
+    .toUpperCase()
+  const map: Record<string, string> = {
+    GET:
+      'border border-[#61affe]/55 bg-[#61affe]/18 text-[#0b5ed7] dark:border-[#61affe]/35 dark:bg-[#61affe]/14 dark:text-[#9bd0f7]',
+    POST:
+      'border border-[#49cc90]/55 bg-[#49cc90]/18 text-[#0d6e45] dark:border-[#49cc90]/35 dark:bg-[#49cc90]/12 dark:text-[#7ae3b5]',
+    PUT:
+      'border border-[#fca130]/55 bg-[#fca130]/20 text-[#9a5b08] dark:border-[#fca130]/40 dark:bg-[#fca130]/14 dark:text-[#fcd9a8]',
+    DELETE:
+      'border border-[#f93e3e]/50 bg-[#f93e3e]/16 text-[#b91c1c] dark:border-[#f93e3e]/35 dark:bg-[#f93e3e]/12 dark:text-[#fecaca]',
+    PATCH:
+      'border border-[#50e3c2]/50 bg-[#50e3c2]/16 text-[#047857] dark:border-[#50e3c2]/35 dark:bg-[#50e3c2]/12 dark:text-[#99f6e4]',
+    OPTIONS:
+      'border border-[#0d5aa7]/45 bg-[#0d5aa7]/12 text-[#0d5aa7] dark:border-[#7eb4d8]/35 dark:bg-[#0d5aa7]/22 dark:text-[#b8daf5]',
+    HEAD:
+      'border border-[#9012fe]/45 bg-[#9012fe]/12 text-[#5b16a6] dark:border-[#9012fe]/35 dark:bg-[#9012fe]/12 dark:text-[#d8b4fe]',
+  }
+  return (
+    map[m] ??
+    'border border-gray-300 bg-gray-100 text-gray-700 dark:border-gray-600 dark:bg-gray-800 dark:text-gray-300'
+  )
+}
+
+/** 卡片左侧色条（Swagger 色系），不展示 method 文字时用；内置(apiType=0)不加 */
+export function swaggerHttpMethodLeftAccentClass(
+  method: string | undefined,
+  apiType: number | undefined,
+): string {
+  if (apiType === 0) return ''
+  const m = String(method ?? '')
+    .trim()
+    .toUpperCase()
+  const map: Record<string, string> = {
+    GET: 'border-l-[3px] border-l-[#61affe]',
+    POST: 'border-l-[3px] border-l-[#49cc90]',
+    PUT: 'border-l-[3px] border-l-[#fca130]',
+    DELETE: 'border-l-[3px] border-l-[#f93e3e]',
+    PATCH: 'border-l-[3px] border-l-[#50e3c2]',
+    OPTIONS: 'border-l-[3px] border-l-[#0d5aa7]',
+    HEAD: 'border-l-[3px] border-l-[#9012fe]',
+  }
+  return map[m] ?? ''
+}
+
+export function dedupePermissionRows(rows: PermissionRow[]): PermissionRow[] {
+  const seen = new Set<string>()
+  const next: PermissionRow[] = []
+  for (const r of rows) {
+    const k = `${r.menuId || ''}::${r.code}`
+    if (seen.has(k)) continue
+    seen.add(k)
+    next.push(r)
+  }
+  return next
+}
+
+/**
+ * 将 `getPermissionListAPI` / 分页列表类响应中的条目转为分配面板用的 `PermissionRow[]`。
+ */
+export function mapPermissionListResponseToRows(res: unknown): PermissionRow[] {
+  const pickArray = (raw: unknown): unknown[] => {
+    if (raw == null) return []
+    if (Array.isArray(raw)) return raw
+    if (typeof raw !== 'object') return []
+    const o = raw as Record<string, unknown>
+    if (Array.isArray(o.content)) return o.content
+    if (Array.isArray(o.items)) return o.items
+    if (Array.isArray(o.records)) return o.records
+    if (o.data != null && typeof o.data === 'object') {
+      const d = o.data as Record<string, unknown>
+      if (Array.isArray(d.content)) return d.content
+      if (Array.isArray(d.data)) return d.data
+      if (Array.isArray(d.records)) return d.records
+    }
+    return []
+  }
+
+  const top =
+    res && typeof res === 'object' && 'data' in (res as object)
+      ? (res as { data: unknown }).data
+      : res
+  const items = pickArray(top)
+  const out: PermissionRow[] = []
+  for (const item of items) {
+    if (item == null || typeof item !== 'object') continue
+    const p = item as Record<string, unknown>
+    const code = String(p.code ?? '').trim()
+    if (!code) continue
+    const menuId = String(p.menuId ?? p.menu_id ?? '').trim()
+    const title = p.title ?? p.name
+    const apiType = parseRecordApiType(p)
+    out.push({
+      id: String(p.id ?? `${menuId || 'p'}-${code}`),
+      code,
+      description: p.description != null ? String(p.description) : undefined,
+      name: title != null ? String(title) : undefined,
+      menuId,
+      apiType,
+      sortOrder: parseRecordSortOrder(p),
+      httpMethod: parseRecordHttpMethod(p),
+    })
+  }
+  return out
+}
+
+/** 解析角色已选菜单：支持 `getRoleMenuAPI` 及 `getRoleDetailAPI` 的 `data.menuIdList` 等字段。 */
+export function normalizeRoleMenuSnapshot(res: unknown): {
+  menuIds: string[]
+  halfCheckedMenuIds: string[]
+  permissionCodes: string[]
+  extraPermissionRows: PermissionRow[]
+} {
+  const root =
+    res && typeof res === 'object' && 'data' in (res as object)
+      ? (res as { data: unknown }).data
+      : res
+  if (!root || typeof root !== 'object') {
+    return {
+      menuIds: [],
+      halfCheckedMenuIds: [],
+      permissionCodes: [],
+      extraPermissionRows: [],
+    }
+  }
+  const d = root as Record<string, unknown>
+
+  const menuIdsFromRolePermissionDto = (): string[] => {
+    const nested = d.rolePermissionCreateDTO
+    if (!nested || typeof nested !== 'object') return []
+    const n = nested as Record<string, unknown>
+    if (Array.isArray(n.menuId)) return (n.menuId as unknown[]).map(String)
+    if (Array.isArray(n.menuIds)) return (n.menuIds as unknown[]).map(String)
+    return []
+  }
+
+  const menuIdsFromScalarMenuId = (): string[] => {
+    const v = d.menuId
+    if (typeof v === 'string' && v.trim()) {
+      return v
+        .split(/[,，\s]+/)
+        .map((s) => s.trim())
+        .filter(Boolean)
+    }
+    return []
+  }
+
+  let menuIds = Array.isArray(d.menuIdList)
+    ? (d.menuIdList as unknown[]).map(String)
+    : Array.isArray(d.menuIds)
+      ? (d.menuIds as unknown[]).map(String)
+      : Array.isArray(d.menuId)
+        ? (d.menuId as unknown[]).map(String)
+        : Array.isArray(d.checkedMenuKeys)
+          ? (d.checkedMenuKeys as unknown[]).map(String)
+          : menuIdsFromScalarMenuId()
+
+  const fromDto = menuIdsFromRolePermissionDto()
+  if (!menuIds.length && fromDto.length) {
+    menuIds = fromDto
+  } else if (fromDto.length) {
+    menuIds = [...new Set([...menuIds.map(String), ...fromDto.map(String)])]
+  }
+
+  const halfCheckedMenuIds = Array.isArray(d.halfCheckedMenuIds)
+    ? (d.halfCheckedMenuIds as unknown[]).map(String)
+    : Array.isArray(d.halfCheckedKeys)
+      ? (d.halfCheckedKeys as unknown[]).map(String)
+      : []
+
+  let permissionCodes: string[] = []
+  let extraPermissionRows: PermissionRow[] = []
+
+  if (Array.isArray(d.permissionCodes)) {
+    permissionCodes = (d.permissionCodes as unknown[]).map(String)
+  }
+
+  const permArr = d.permissionRows ?? d.permissions
+  if (Array.isArray(permArr) && permArr.length) {
+    const first = permArr[0]
+    if (typeof first === 'string') {
+      permissionCodes = (permArr as string[]).map(String)
+    } else if (first && typeof first === 'object') {
+      extraPermissionRows = (permArr as Record<string, unknown>[]).map(
+        (p, idx) => {
+          const code = String(p.code ?? '').trim()
+          const menuId = String(p.menuId ?? '').trim()
+          return {
+            id: String(p.id ?? `${menuId || 'p'}-${code || idx}`),
+            code,
+            description: p.description as string | undefined,
+            name: p.name as string | undefined,
+            menuId,
+            apiType: parseRecordApiType(p),
+            sortOrder: parseRecordSortOrder(p),
+            httpMethod: parseRecordHttpMethod(p),
+          }
+        },
+      )
+      if (!permissionCodes.length && extraPermissionRows.length) {
+        permissionCodes = extraPermissionRows.map((x) => x.code)
+      }
+    }
+  }
+
+  return {
+    menuIds,
+    halfCheckedMenuIds,
+    permissionCodes,
+    extraPermissionRows,
+  }
+}
+
+/**
+ * 解析接口权限快照：支持 `getRoleApiListAPI` 返回体，以及 `getRoleDetailAPI` 的 `data.apiIdList`。
+ */
+export function normalizeRoleApiListSnapshot(res: unknown): {
+  permissionCodes: string[]
+  extraPermissionRows: PermissionRow[]
+  apiIds: string[]
+} {
+  const empty = (): {
+    permissionCodes: string[]
+    extraPermissionRows: PermissionRow[]
+    apiIds: string[]
+  } => ({
+    permissionCodes: [],
+    extraPermissionRows: [],
+    apiIds: [],
+  })
+
+  const root =
+    res && typeof res === 'object' && 'data' in (res as object)
+      ? (res as { data: unknown }).data
+      : res
+
+  if (root == null) return empty()
+
+  const asListRows = mapPermissionListResponseToRows(res)
+  if (asListRows.length) {
+    return {
+      permissionCodes: asListRows.map((r) => r.code).filter(Boolean),
+      extraPermissionRows: asListRows,
+      apiIds: [],
+    }
+  }
+
+  if (Array.isArray(root)) {
+    const extra = mapPermissionListResponseToRows({ data: root })
+    return {
+      permissionCodes: extra.map((r) => r.code).filter(Boolean),
+      extraPermissionRows: extra,
+      apiIds: [],
+    }
+  }
+
+  if (typeof root !== 'object') return empty()
+
+  const d = root as Record<string, unknown>
+  const apiIds: string[] = []
+
+  const pushIdArray = (v: unknown) => {
+    if (!Array.isArray(v)) return
+    for (const x of v) {
+      const s = String(x ?? '').trim()
+      if (s) apiIds.push(s)
+    }
+  }
+
+  pushIdArray(d.apiIdList)
+  pushIdArray(d.apiId)
+  if (!apiIds.length) pushIdArray(d.apiIds)
+
+  const nested = d.rolePermissionCreateDTO
+  if (nested && typeof nested === 'object') {
+    const n = nested as Record<string, unknown>
+    if (!apiIds.length) pushIdArray(n.apiId)
+    if (!apiIds.length) pushIdArray(n.apiIds)
+  }
+
+  let permissionCodes: string[] = []
+  if (Array.isArray(d.permissionCodes)) {
+    permissionCodes = (d.permissionCodes as unknown[]).map(String).filter(Boolean)
+  }
+
+  const pickList = (o: Record<string, unknown>): unknown[] => {
+    for (const k of [
+      'list',
+      'records',
+      'content',
+      'rows',
+      'apis',
+      'items',
+      'apiList',
+      'data',
+    ]) {
+      const v = o[k]
+      if (Array.isArray(v)) return v
+    }
+    return []
+  }
+
+  const arr = pickList(d)
+  let extraPermissionRows: PermissionRow[] = []
+  if (arr.length && arr[0] != null && typeof arr[0] === 'object') {
+    extraPermissionRows = mapPermissionListResponseToRows({ data: arr })
+    if (!permissionCodes.length && extraPermissionRows.length) {
+      permissionCodes = extraPermissionRows.map((r) => r.code).filter(Boolean)
+    }
+  }
+
+  return {
+    permissionCodes,
+    extraPermissionRows,
+    apiIds: [...new Set(apiIds)],
+  }
+}
+
+export function mapMenusToTreeData(
+  nodes: any[],
+  t: TFunction,
+  lang: string,
+  idKey: string,
+  childrenKey: string,
+): DataNode[] {
+  return nodes.map((n) => {
+    const children = n[childrenKey] as any[] | undefined
+    const hasChildren = Array.isArray(children) && children.length > 0
+    return {
+      key: String(n[idKey]),
+      title: getMenuDisplayName(n as MenuTreeItem, t, lang),
+      children: hasChildren
+        ? mapMenusToTreeData(children!, t, lang, idKey, childrenKey)
+        : undefined,
+    }
+  })
+}
+
+type MenuCheckInferState = 'off' | 'full' | 'half'
+
+/**
+ * `checkStrictly` 下回显：后端常把「全选 + 半选」合并进 `menuIdList` 且不返回 half 字段，
+ * 若整表当作 checked 会导致父级误显示为全选。在 `mergedMenuIds` 为合并集合时拆出严格 checked / halfChecked。
+ */
+export function inferStrictMenuCheckFromMergedMenuIds(
+  treeNodes: DataNode[],
+  mergedMenuIds: string[],
+): { checkedKeys: string[]; halfCheckedKeys: string[] } {
+  const S = new Set(mergedMenuIds.map((x) => String(x).trim()).filter(Boolean))
+  const checkedKeys: string[] = []
+  const halfCheckedKeys: string[] = []
+
+  const walk = (node: DataNode): MenuCheckInferState => {
+    const key = String(node.key)
+    const children = (node.children ?? []) as DataNode[]
+    const childStates = children.map((c) => walk(c))
+
+    if (!S.has(key)) {
+      return 'off'
+    }
+    if (!children.length) {
+      checkedKeys.push(key)
+      return 'full'
+    }
+    const anyChildOn = childStates.some((s) => s !== 'off')
+    if (!anyChildOn) {
+      checkedKeys.push(key)
+      return 'full'
+    }
+    const allChildrenFull = childStates.every((s) => s === 'full')
+    if (allChildrenFull) {
+      checkedKeys.push(key)
+      return 'full'
+    }
+    halfCheckedKeys.push(key)
+    return 'half'
+  }
+
+  for (const root of treeNodes) {
+    walk(root)
+  }
+
+  return { checkedKeys, halfCheckedKeys }
+}
+
+export function findFirstLeafId(
+  nodes: any[],
+  idKey: string,
+  childrenKey: string,
+): string | number | null {
+  for (const n of nodes) {
+    const ch = n?.[childrenKey]
+    if (!Array.isArray(ch) || !ch.length) {
+      return n[idKey]
+    }
+    const deeper = findFirstLeafId(ch, idKey, childrenKey)
+    if (deeper != null) return deeper
+  }
+  return null
+}
+
+export function getMenuPathFromRoot(
+  roots: any[],
+  targetId: string,
+  idKey: string,
+  childrenKey: string,
+): any[] | null {
+  const dfs = (nodes: any[], stack: any[]): any[] | null => {
+    for (const n of nodes) {
+      const next = [...stack, n]
+      if (String(n[idKey]) === targetId) return next
+      const ch = n[childrenKey]
+      if (Array.isArray(ch) && ch.length) {
+        const hit = dfs(ch, next)
+        if (hit) return hit
+      }
+    }
+    return null
+  }
+  return dfs(roots, [])
+}
+
+export function menuPreorderIndexMap(
+  nodes: any[],
+  idKey: string,
+  childrenKey: string,
+): Map<string, number> {
+  const m = new Map<string, number>()
+  let i = 0
+  const walk = (list: any[]) => {
+    for (const n of list) {
+      m.set(String(n[idKey]), i++)
+      const ch = n[childrenKey]
+      if (Array.isArray(ch) && ch.length) walk(ch)
+    }
+  }
+  walk(nodes)
+  return m
+}
+
+function permAssignI18n(key: string): string {
+  return `system.permission.${key}`
+}
+
+/**
+ * 与分配面板分组一致：**仅按 `:` 分段**（trim、去 BOM）；不把 `-` 当成层级，避免 `system-logs:page`
+ * 被误解析成 `system` + `logs` 从而命中 `system` 配置。
+ */
+export function splitPermissionCodeParts(code: string): string[] {
+  const raw = String(code ?? '')
+    .replace(/\ufeff/g, '')
+    .trim()
+  return raw
+    .split(':')
+    .map((s) => s.trim())
+    .filter((s) => s !== '')
+}
+
+/**
+ * 仅由菜单树决定的基础分组标题（不含 code 分支后缀）：
+ * - 顶级挂载（路径单节点，或 level=0）：`assign_panel.top_level_group_title`（默认「系统」，替代原「公共」）
+ * - 二级挂载（level=2）：同级仅 1 个 → 只显示二级菜单名；多个 →「一级 > 二级」
+ * - 其它：从路径第二层起拼接菜单名
+ */
+export function buildMenuBaseTitleForAssign(
+  path: any[] | null,
+  t: TFunction,
+  lang: string,
+  idKey: string,
+  childrenKey: string,
+): string {
+  /** 无菜单路径（如接口清单未挂 menuId）：与「仅挂顶级」一致用配置标题，避免整段 `-` */
+  if (!path?.length) {
+    return String(t(permAssignI18n('assign_panel.top_level_group_title')))
+  }
+  const anchor = path[path.length - 1]
+  const anchorLv = Number(anchor?.level)
+  const sep = String(
+    t(permAssignI18n('menu_level_sep'), { defaultValue: '>' }),
+  )
+
+  /** 树路径仅挂载节点一个：顶级菜单下的权限，标题用「系统」等配置（替代原「公共」） */
+  if (path.length === 1) {
+    return String(t(permAssignI18n('assign_panel.top_level_group_title')))
+  }
+
+  if (Number.isFinite(anchorLv) && anchorLv === 2 && path.length >= 2) {
+    const parent = path[path.length - 2]
+    const siblings = parent?.[childrenKey]
+    const n = Array.isArray(siblings) ? siblings.length : 0
+    const anchorName = String(
+      getMenuDisplayName(anchor as MenuTreeItem, t, lang),
+    )
+    if (n <= 1) return anchorName
+    const parentName = String(
+      getMenuDisplayName(parent as MenuTreeItem, t, lang),
+    )
+    return `${parentName} ${sep} ${anchorName}`
+  }
+
+  if (
+    (!Number.isFinite(anchorLv) || anchor?.level === undefined) &&
+    path.length >= 3
+  ) {
+    const parent = path[path.length - 2]
+    const siblings = parent?.[childrenKey]
+    const n = Array.isArray(siblings) ? siblings.length : 0
+    const anchorName = String(
+      getMenuDisplayName(anchor as MenuTreeItem, t, lang),
+    )
+    if (n <= 1) return anchorName
+    const parentName = String(
+      getMenuDisplayName(parent as MenuTreeItem, t, lang),
+    )
+    return `${parentName} ${sep} ${anchorName}`
+  }
+
+  const belowRoot = path.slice(1)
+  const titles = belowRoot.map((n) =>
+    String(getMenuDisplayName(n as MenuTreeItem, t, lang)),
+  )
+  return titles.join(` ${sep} `)
+}
+
+function matchConfiguredCodeBranch(
+  parts: string[],
+  cfg: PermissionAssignFirstSegmentConfig,
+): { branchKey: string; suffixI18nKey: string | null } {
+  const lower = parts.map((p) => p.toLowerCase())
+  const sorted = [...cfg.branches].sort(
+    (a, b) => b.prefix.length - a.prefix.length,
+  )
+  for (const br of sorted) {
+    const ok = br.prefix.every((seg, i) => lower[i] === seg.toLowerCase())
+    if (ok) {
+      // 使用 sortOrder 作为 branchKey 前缀，控制分组显示顺序
+      const orderPrefix = br.sortOrder !== undefined ? String(br.sortOrder).padStart(3, '0') : '999'
+      return { branchKey: `${orderPrefix}_${br.prefix.join('_')}`, suffixI18nKey: br.suffixI18nKey }
+    }
+  }
+  /** dict：第二段为 cate 或以 cate- 开头（如 dict:cate-add）与 dict:cate:x 同属「分类」组 */
+  if (lower[0] === 'dict' && parts.length >= 2) {
+    const s2 = lower[1]
+    const cateBr = cfg.branches.find(
+      (b) =>
+        b.prefix.length === 2 &&
+        b.prefix[0].toLowerCase() === 'dict' &&
+        b.prefix[1].toLowerCase() === 'cate',
+    )
+    if (cateBr && (s2 === 'cate' || s2.startsWith('cate-'))) {
+      const orderPrefix = cateBr.sortOrder !== undefined ? String(cateBr.sortOrder).padStart(3, '0') : '999'
+      return {
+        branchKey: `${orderPrefix}_${cateBr.prefix.join('_')}`,
+        suffixI18nKey: cateBr.suffixI18nKey,
+      }
+    }
+  }
+  /** system：第二段不是 file / chat 的均归「公共」（含两段及以上未命中上面分支） */
+  if (
+    cfg.defaultSuffixI18nKey &&
+    lower[0] === 'system' &&
+    parts.length >= 2
+  ) {
+    const seg2 = lower[1]
+    if (seg2 !== 'file' && seg2 !== 'chat' && seg2 !== 'auth') {
+      const orderPrefix = String(cfg.defaultSortOrder ?? 500).padStart(3, '0')
+      return { branchKey: `${orderPrefix}_default`, suffixI18nKey: cfg.defaultSuffixI18nKey }
+    }
+  }
+  if (cfg.defaultSuffixI18nKey && parts.length >= 2) {
+    const orderPrefix = String(cfg.defaultSortOrder ?? 500).padStart(3, '0')
+    return { branchKey: `${orderPrefix}_default`, suffixI18nKey: cfg.defaultSuffixI18nKey }
+  }
+  return { branchKey: 'none', suffixI18nKey: null }
+}
+
+function resolveMenuPartForCodeBranch(
+  path: any[],
+  cfg: PermissionAssignFirstSegmentConfig,
+  t: TFunction,
+  lang: string,
+  idKey: string,
+  childrenKey: string,
+): string {
+  if (cfg.menuBaseOverrideI18nKey) {
+    return String(t(permAssignI18n(cfg.menuBaseOverrideI18nKey)))
+  }
+  if (cfg.menuBaseUseParentOfAnchor && path.length >= 2) {
+    return String(
+      getMenuDisplayName(
+        path[path.length - 2] as MenuTreeItem,
+        t,
+        lang,
+      ),
+    )
+  }
+  return buildMenuBaseTitleForAssign(path, t, lang, idKey, childrenKey)
+}
+
+/** 未绑定菜单的权限在右栏锚点、与树联动占位（不对应真实菜单节点） */
+export const PERMISSION_ASSIGN_UNBOUND_ANCHOR_ID = '__unbound__'
+
+/**
+ * 单条权限在分配面板中的分组：标题 = 菜单规则 ± code 配置分支；未配置首段时仅菜单标题。
+ * `path` 可为 `null`：接口等未挂 `menuId` 时仍按 code 首段配置归类（如 system → 公共）。
+ */
+export function computePermissionAssignSection(
+  path: any[] | null,
+  code: string,
+  idKey: string,
+  childrenKey: string,
+  t: TFunction,
+  lang: string,
+): { sectionKey: string; sectionTitle: string; anchorMenuId: string } | null {
+  const hasPath = Boolean(path?.length)
+  const anchorMenuId = hasPath
+    ? String(path![path!.length - 1][idKey])
+    : PERMISSION_ASSIGN_UNBOUND_ANCHOR_ID
+  const pathKey = hasPath
+    ? path!.slice(1).map((n) => String(n[idKey])).join('__') || anchorMenuId
+    : PERMISSION_ASSIGN_UNBOUND_ANCHOR_ID
+  const parts = splitPermissionCodeParts(code)
+  const first = (parts[0] || '').toLowerCase()
+  const sep = String(
+    t(permAssignI18n('menu_level_sep'), { defaultValue: '>' }),
+  )
+
+  const cfg = PERMISSION_ASSIGN_CODE_BY_FIRST_SEGMENT[first]
+  if (!cfg) {
+    const base = buildMenuBaseTitleForAssign(
+      path,
+      t,
+      lang,
+      idKey,
+      childrenKey,
+    )
+    return {
+      sectionKey: `${pathKey}::plain`,
+      sectionTitle: base,
+      anchorMenuId,
+    }
+  }
+
+  const { branchKey, suffixI18nKey } = matchConfiguredCodeBranch(parts, cfg)
+  const menuPart = resolveMenuPartForCodeBranch(
+    path,
+    cfg,
+    t,
+    lang,
+    idKey,
+    childrenKey,
+  )
+  let sectionTitle = menuPart
+  if (
+    first === 'dict' &&
+    branchKey === 'default' &&
+    hasPath &&
+    path!.length >= 2
+  ) {
+    /** 数据字典数据类：「一级父级 > 二级挂载菜单名」（不用 i18n 末段，与菜单树一致） */
+    const parent = path![path!.length - 2] as MenuTreeItem
+    const anchor = path![path!.length - 1] as MenuTreeItem
+    sectionTitle = `${String(getMenuDisplayName(parent, t, lang))} ${sep} ${String(getMenuDisplayName(anchor, t, lang))}`
+  } else if (suffixI18nKey) {
+    sectionTitle = `${menuPart} ${sep} ${String(t(permAssignI18n(suffixI18nKey)))}`
+  }
+  return {
+    sectionKey: `${pathKey}::${first}::${branchKey}`,
+    sectionTitle,
+    anchorMenuId,
+  }
+}
+
+export function collectSubtreeMenuIds(
+  roots: any[],
+  rootMenuId: string,
+  idKey: string,
+  childrenKey: string,
+): Set<string> {
+  const path = getMenuPathFromRoot(roots, rootMenuId, idKey, childrenKey)
+  const target = path?.length ? path[path.length - 1] : null
+  const out = new Set<string>()
+  if (!target) {
+    out.add(rootMenuId)
+    return out
+  }
+  const walk = (n: any) => {
+    out.add(String(n[idKey]))
+    const ch = n[childrenKey]
+    if (Array.isArray(ch) && ch.length) for (const c of ch) walk(c)
+  }
+  walk(target)
+  return out
+}
+
+export function preorderSubtreeMenuIds(
+  roots: any[],
+  rootMenuId: string,
+  idKey: string,
+  childrenKey: string,
+): string[] {
+  const path = getMenuPathFromRoot(roots, rootMenuId, idKey, childrenKey)
+  const target = path?.length ? path[path.length - 1] : null
+  const order: string[] = []
+  if (!target) return order
+  const walk = (n: any) => {
+    order.push(String(n[idKey]))
+    const ch = n[childrenKey]
+    if (Array.isArray(ch) && ch.length) for (const c of ch) walk(c)
+  }
+  walk(target)
+  return order
+}
+
+export function menuHasBoundPermissions(
+  menuId: string,
+  rows: PermissionRow[],
+): boolean {
+  for (const r of rows) {
+    if (String(r.menuId || '').trim() === menuId) return true
+  }
+  return false
+}
+
+export function resolveScrollAnchorForMenuClick(
+  roots: any[],
+  menuId: string,
+  rows: PermissionRow[],
+  idKey: string,
+  childrenKey: string,
+): string | null {
+  if (!rows.length) return null
+  if (menuHasBoundPermissions(menuId, rows)) return menuId
+
+  const path = getMenuPathFromRoot(roots, menuId, idKey, childrenKey)
+  if (!path?.length) return null
+
+  const isFirstLevelUnderRoot = path.length === 2
+  if (isFirstLevelUnderRoot) {
+    const l1 = path[path.length - 1]
+    const children = l1[childrenKey]
+    if (Array.isArray(children) && children.length) {
+      for (const ch of children) {
+        const cid = String(ch[idKey])
+        if (menuHasBoundPermissions(cid, rows)) return cid
+      }
+    }
+  }
+
+  const ordered = preorderSubtreeMenuIds(roots, menuId, idKey, childrenKey)
+  return (
+    ordered.find(
+      (id) => id !== menuId && menuHasBoundPermissions(id, rows),
+    ) ?? null
+  )
+}
+
+export function isPermissionRowBuiltin(row: PermissionRow): boolean {
+  return row.apiType === 0
+}
+
+/** apiType=1 且所属菜单在勾选/半选集合中：随菜单必选，不可在右栏取消 */
+export function isPermissionRowMenuLockedBase(
+  row: PermissionRow,
+  menuCheckedOrHalfIds: Set<string>,
+): boolean {
+  if (row.apiType !== 1) return false
+  const mid = String(row.menuId || '').trim()
+  return Boolean(mid && menuCheckedOrHalfIds.has(mid))
+}
+
+export function isAssignPermissionChecked(
+  codes: string[],
+  row: PermissionRow,
+  menuCheckedOrHalfIds: Set<string>,
+): boolean {
+  if (isPermissionRowBuiltin(row)) return true
+  if (codes.includes('*')) return true
+  if (codes.includes(row.code)) return true
+  if (isPermissionRowMenuLockedBase(row, menuCheckedOrHalfIds)) return true
+  return false
+}
+
+/**
+ * 提交用：并入全部系统内置(0)；对已勾选菜单下的基础权限(1)保证在码列表中。
+ */
+export function mergeRolePermissionAssignPayloadCodes(
+  selectedCodes: string[],
+  allRows: PermissionRow[],
+  menuIdsMerged: string[],
+): string[] {
+  if (selectedCodes.includes('*')) return selectedCodes
+  const menuSet = new Set(
+    menuIdsMerged.map((x) => String(x).trim()).filter(Boolean),
+  )
+  const out = new Set(selectedCodes.filter(Boolean))
+  for (const r of allRows) {
+    if (r.apiType === 0) {
+      out.add(r.code)
+      continue
+    }
+    if (r.apiType === 1) {
+      const mid = String(r.menuId || '').trim()
+      if (mid && menuSet.has(mid)) out.add(r.code)
+    }
+  }
+  return Array.from(out)
+}
+
+/** 初始化勾选态：在已有快照码基础上补上「已选菜单」下的基础权限(1)，避免详情回显缺勾 */
+export function augmentInitialMenuBasePermissionCodes(
+  codes: string[],
+  allRows: PermissionRow[],
+  menuIdsCheckedOrHalf: string[],
+): string[] {
+  if (codes.includes('*')) return codes
+  const menuSet = new Set(
+    menuIdsCheckedOrHalf.map((x) => String(x).trim()).filter(Boolean),
+  )
+  const out = new Set(codes.filter(Boolean))
+  for (const r of allRows) {
+    if (r.apiType !== 1) continue
+    const mid = String(r.menuId || '').trim()
+    if (mid && menuSet.has(mid)) out.add(r.code)
+  }
+  return Array.from(out)
+}
+
+export function codesForRowsInMenuSubtree(
+  rows: PermissionRow[],
+  subtreeMenuIds: Set<string>,
+): Set<string> {
+  const codes = new Set<string>()
+  for (const r of rows) {
+    if (isPermissionRowBuiltin(r)) continue
+    const mid = String(r.menuId || '').trim()
+    if (mid && subtreeMenuIds.has(mid)) codes.add(r.code)
+  }
+  return codes
+}
+
+export function nextPermissionCodesForMenuSubtree(
+  prev: string[],
+  rows: PermissionRow[],
+  subtreeCodes: Set<string>,
+  grant: boolean,
+): string[] {
+  if (subtreeCodes.size === 0) return prev
+
+  if (grant) {
+    if (prev.includes('*')) return prev
+    const s = new Set(prev)
+    for (const c of subtreeCodes) s.add(c)
+    return Array.from(s)
+  }
+
+  if (prev.includes('*')) {
+    const all = new Set(rows.map((r) => r.code))
+    for (const c of subtreeCodes) all.delete(c)
+    return Array.from(all)
+  }
+  return prev.filter((c) => !subtreeCodes.has(c))
+}
+
+export function isPermissionChecked(codes: string[], code: string): boolean {
+  if (codes.includes('*')) return true
+  return codes.includes(code)
+}
+
+/** 与后端 `/role` POST、PUT 体中 `rolePermissionCreateDTO` 字段对齐 */
+export type RolePermissionCreateDTO = {
+  menuId: string[]
+  apiId: string[]
+}
+
+/** 未勾选菜单/接口权限时仍须传该对象，数组为空即可 */
+export const EMPTY_ROLE_PERMISSION_CREATE_DTO: RolePermissionCreateDTO = {
+  menuId: [],
+  apiId: [],
+}
+
+/** menuIds 为全选 + 半选菜单 id 合并去重（半选仅树展示用，提交不再单独字段） */
+export type RolePermissionAssignPayload = {
+  menuIds: string[]
+  permissionCodes: string[]
+  rolePermissionCreateDTO: RolePermissionCreateDTO
+}
+
+/** 由已合并的菜单 id + 权限码解析为接口所需的 menuId / apiId */
+export function buildRolePermissionCreateDTO(
+  menuIds: string[],
+  permissionCodes: string[],
+  allPermissionRows: PermissionRow[],
+): RolePermissionCreateDTO {
+  const menuId = [
+    ...new Set(menuIds.map((x) => String(x).trim()).filter(Boolean)),
+  ]
+
+  let apiId: string[] = []
+  if (permissionCodes.includes('*')) {
+    apiId = [
+      ...new Set(
+        allPermissionRows.map((r) => String(r.id).trim()).filter(Boolean),
+      ),
+    ]
+  } else {
+    const seen = new Set<string>()
+    for (const code of permissionCodes) {
+      for (const r of allPermissionRows) {
+        if (r.code === code && !seen.has(r.id)) {
+          seen.add(r.id)
+          apiId.push(String(r.id))
+        }
+      }
+    }
+  }
+
+  return { menuId, apiId }
+}
+
+export function isRolePermissionPayloadEmpty(p: RolePermissionAssignPayload): boolean {
+  return p.menuIds.length === 0 && p.permissionCodes.length === 0
+}