koa-boot-runtime 1.0.0

package/dist/system/roleMenu/roleMenu.service.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoleMenuService = void 0;
+const database_1 = require("../../config/database");
+/**
+ * 角色-菜单关联服务
+ *
+ * 管理角色与菜单之间的多对多关系。
+ * 核心操作为 setMenus（事务中全量替换），
+ * 匹配前端菜单树组件的「勾选 → 一次提交」交互模式。
+ */
+class RoleMenuService {
+    /**
+     * 设置角色的全部菜单（先清空再分配）
+     *
+     * 在事务中执行，保证原子性。
+     * 这是前端菜单树控件的唯一写入口：用户勾选/取消勾选后一次提交完整的菜单ID列表。
+     *
+     * @param roleId  - 角色ID
+     * @param menuIds - 新的菜单ID列表（空数组表示清空所有菜单绑定）
+     */
+    async setMenus(roleId, menuIds) {
+        await database_1.prisma.$transaction(async (tx) => {
+            // 1. 删除该角色现有的所有菜单关联
+            await tx.roleMenu.deleteMany({
+                where: { roleId },
+            });
+            // 2. 如果提供了新的菜单列表，则批量插入
+            if (menuIds.length > 0) {
+                const data = menuIds.map((menuId) => ({
+                    roleId,
+                    menuId,
+                }));
+                await tx.roleMenu.createMany({
+                    data,
+                });
+            }
+        });
+    }
+    /**
+     * 获取角色拥有的所有菜单（返回菜单详细信息）
+     *
+     * @param roleId - 角色ID
+     * @returns 菜单列表（包含菜单的完整信息）
+     */
+    async getMenusByRole(roleId) {
+        return database_1.prisma.roleMenu.findMany({
+            where: { roleId },
+            include: {
+                menu: {
+                    select: {
+                        id: true,
+                        name: true,
+                        code: true,
+                        type: true,
+                        status: true,
+                    },
+                },
+            },
+        });
+    }
+    /**
+     * 获取角色拥有的菜单ID列表（仅返回ID）
+     *
+     * @param roleId - 角色ID
+     * @returns 菜单ID数组
+     */
+    async getMenuIdsByRole(roleId) {
+        const rows = await database_1.prisma.roleMenu.findMany({
+            where: { roleId },
+            select: { menuId: true },
+        });
+        return rows.map((r) => r.menuId);
+    }
+}
+exports.RoleMenuService = RoleMenuService;
+//# sourceMappingURL=roleMenu.service.js.map

package/dist/system/roleMenu/roleMenu.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleMenu.service.js","sourceRoot":"","sources":["../../../src/system/roleMenu/roleMenu.service.ts"],"names":[],"mappings":";;;AAAA,oDAA+C;AAG/C;;;;;;GAMG;AACH,MAAa,eAAe;IAC1B;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,OAAiB;QAEjB,MAAM,iBAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,oBAAoB;YACpB,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC3B,KAAK,EAAE,EAAE,MAAM,EAAE;aAClB,CAAC,CAAC;YAEH,uBAAuB;YACvB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACpC,MAAM;oBACN,MAAM;iBACP,CAAC,CAAC,CAAC;gBAEJ,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAC3B,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,MAAc;QAEd,OAAO,iBAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC9B,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,OAAO,EAAE;gBACP,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,EAAE,EAAE,IAAI;wBACR,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE,IAAI;wBACV,MAAM,EAAE,IAAI;qBACb;iBACF;aACF;SACF,CAA0B,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,MAAM,IAAI,GAAG,MAAM,iBAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1C,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACzB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;CACF;AAxED,0CAwEC"}

package/dist/system/rolePermission/rolePermission.controller.d.ts

@@ -0,0 +1,36 @@
+import { Controller } from 'tsoa';
+import { SetPermissionsDto, RolePermission } from './rolePermission.model';
+import { ApiResponse } from '../../common';
+export declare class RolePermissionController extends Controller {
+    private rolePermissionService;
+    /**
+     * 设置角色的全部权限（先清空再分配）
+     *
+     * 这是前端权限树组件的唯一写入口。
+     * 用户在权限树中勾选/取消勾选后，提交完整的权限ID列表，
+     * 后端在事务中先清空再批量插入，保证原子性。
+     * permissionIds 为空数组时表示清空该角色的所有权限。
+     */
+    setPermissions(roleId: string, body: SetPermissionsDto): Promise<ApiResponse<null>>;
+    /**
+     * 获取角色拥有的权限（返回权限完整信息）
+     */
+    getPermissionsByRole(roleId: string): Promise<ApiResponse<RolePermission[]>>;
+    /**
+     * 获取角色拥有的权限ID列表（仅返回ID数组）
+     *
+     * 适用于前端回显角色已选中的权限。
+     */
+    getPermissionIdsByRole(roleId: string): Promise<ApiResponse<string[]>>;
+    /**
+     * 查询拥有某个权限的所有角色
+     */
+    getRolesByPermission(permissionId: string): Promise<ApiResponse<RolePermission[]>>;
+    /**
+     * 判断角色是否拥有某个权限
+     */
+    checkPermission(roleId: string, permissionId: string): Promise<ApiResponse<{
+        hasPermission: boolean;
+    }>>;
+}
+//# sourceMappingURL=rolePermission.controller.d.ts.map

package/dist/system/rolePermission/rolePermission.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolePermission.controller.d.ts","sourceRoot":"","sources":["../../../src/system/rolePermission/rolePermission.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EAOX,MAAM,MAAM,CAAC;AAEd,OAAO,EACL,iBAAiB,EACjB,cAAc,EACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAiB,WAAW,EAAW,MAAM,cAAc,CAAC;AAGnE,qBAEa,wBAAyB,SAAQ,UAAU;IACtD,OAAO,CAAC,qBAAqB,CAA+B;IAE5D;;;;;;;OAOG;IAEG,cAAc,CACV,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,iBAAiB,GAC9B,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAc7B;;OAEG;IAEG,oBAAoB,CAChB,MAAM,EAAE,MAAM,GACrB,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC;IAKzC;;;;OAIG;IAEG,sBAAsB,CAClB,MAAM,EAAE,MAAM,GACrB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAKjC;;OAEG;IAEG,oBAAoB,CAChB,YAAY,EAAE,MAAM,GAC3B,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC;IAKzC;;OAEG;IAEG,eAAe,CACX,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAC3B,OAAO,CAAC,WAAW,CAAC;QAAE,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAOpD"}

package/dist/system/rolePermission/rolePermission.controller.js

@@ -0,0 +1,115 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RolePermissionController = void 0;
+const tsoa_1 = require("tsoa");
+const rolePermission_service_1 = require("./rolePermission.service");
+const rolePermission_model_1 = require("./rolePermission.model");
+const common_1 = require("../../common");
+const permission_1 = require("../../middleware/permission");
+let RolePermissionController = class RolePermissionController extends tsoa_1.Controller {
+    rolePermissionService = new rolePermission_service_1.RolePermissionService();
+    /**
+     * 设置角色的全部权限（先清空再分配）
+     *
+     * 这是前端权限树组件的唯一写入口。
+     * 用户在权限树中勾选/取消勾选后，提交完整的权限ID列表，
+     * 后端在事务中先清空再批量插入，保证原子性。
+     * permissionIds 为空数组时表示清空该角色的所有权限。
+     */
+    async setPermissions(roleId, body) {
+        try {
+            await this.rolePermissionService.setPermissions(roleId, body.permissionIds);
+            // 权限变更后主动清空中间件缓存，确保即时生效
+            (0, permission_1.clearPermissionCache)();
+            return (0, common_1.success)(null, '权限设置成功');
+        }
+        catch (error) {
+            return (0, common_1.fail)(error.message || '设置权限失败', common_1.BizCode.FAIL, null);
+        }
+    }
+    /**
+     * 获取角色拥有的权限（返回权限完整信息）
+     */
+    async getPermissionsByRole(roleId) {
+        const permissions = await this.rolePermissionService.getPermissionsByRole(roleId);
+        return (0, common_1.success)(permissions);
+    }
+    /**
+     * 获取角色拥有的权限ID列表（仅返回ID数组）
+     *
+     * 适用于前端回显角色已选中的权限。
+     */
+    async getPermissionIdsByRole(roleId) {
+        const ids = await this.rolePermissionService.getPermissionIdsByRole(roleId);
+        return (0, common_1.success)(ids);
+    }
+    /**
+     * 查询拥有某个权限的所有角色
+     */
+    async getRolesByPermission(permissionId) {
+        const roles = await this.rolePermissionService.getRolesByPermission(permissionId);
+        return (0, common_1.success)(roles);
+    }
+    /**
+     * 判断角色是否拥有某个权限
+     */
+    async checkPermission(roleId, permissionId) {
+        const hasPermission = await this.rolePermissionService.hasPermission(roleId, permissionId);
+        return (0, common_1.success)({ hasPermission });
+    }
+};
+exports.RolePermissionController = RolePermissionController;
+__decorate([
+    (0, tsoa_1.Put)('role/{roleId}'),
+    __param(0, (0, tsoa_1.Path)()),
+    __param(1, (0, tsoa_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, rolePermission_model_1.SetPermissionsDto]),
+    __metadata("design:returntype", Promise)
+], RolePermissionController.prototype, "setPermissions", null);
+__decorate([
+    (0, tsoa_1.Get)('role/{roleId}'),
+    __param(0, (0, tsoa_1.Path)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RolePermissionController.prototype, "getPermissionsByRole", null);
+__decorate([
+    (0, tsoa_1.Get)('role/{roleId}/ids'),
+    __param(0, (0, tsoa_1.Path)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RolePermissionController.prototype, "getPermissionIdsByRole", null);
+__decorate([
+    (0, tsoa_1.Get)('permission/{permissionId}'),
+    __param(0, (0, tsoa_1.Path)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], RolePermissionController.prototype, "getRolesByPermission", null);
+__decorate([
+    (0, tsoa_1.Get)('check/{roleId}/{permissionId}'),
+    __param(0, (0, tsoa_1.Path)()),
+    __param(1, (0, tsoa_1.Path)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], RolePermissionController.prototype, "checkPermission", null);
+exports.RolePermissionController = RolePermissionController = __decorate([
+    (0, tsoa_1.Route)('system/role-permission'),
+    (0, tsoa_1.Tags)('系统管理 - 角色权限关联')
+], RolePermissionController);
+//# sourceMappingURL=rolePermission.controller.js.map

package/dist/system/rolePermission/rolePermission.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolePermission.controller.js","sourceRoot":"","sources":["../../../src/system/rolePermission/rolePermission.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,+BAQc;AACd,qEAAiE;AACjE,iEAGgC;AAChC,yCAAmE;AACnE,4DAAmE;AAI5D,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,iBAAU;IAC9C,qBAAqB,GAAG,IAAI,8CAAqB,EAAE,CAAC;IAE5D;;;;;;;OAOG;IAEG,AAAN,KAAK,CAAC,cAAc,CACV,MAAc,EACd,IAAuB;QAE/B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAC7C,MAAM,EACN,IAAI,CAAC,aAAa,CACnB,CAAC;YACF,wBAAwB;YACxB,IAAA,iCAAoB,GAAE,CAAC;YACvB,OAAO,IAAA,gBAAO,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,IAAA,aAAI,EAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,EAAE,gBAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED;;OAEG;IAEG,AAAN,KAAK,CAAC,oBAAoB,CAChB,MAAc;QAEtB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAClF,OAAO,IAAA,gBAAO,EAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IAEG,AAAN,KAAK,CAAC,sBAAsB,CAClB,MAAc;QAEtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC5E,OAAO,IAAA,gBAAO,EAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED;;OAEG;IAEG,AAAN,KAAK,CAAC,oBAAoB,CAChB,YAAoB;QAE5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAClF,OAAO,IAAA,gBAAO,EAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IAEG,AAAN,KAAK,CAAC,eAAe,CACX,MAAc,EACd,YAAoB;QAE5B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAClE,MAAM,EACN,YAAY,CACb,CAAC;QACF,OAAO,IAAA,gBAAO,EAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AA9EY,4DAAwB;AAY7B;IADL,IAAA,UAAG,EAAC,eAAe,CAAC;IAElB,WAAA,IAAA,WAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAI,GAAE,CAAA;;6CAAO,wCAAiB;;8DAahC;AAMK;IADL,IAAA,UAAG,EAAC,eAAe,CAAC;IAElB,WAAA,IAAA,WAAI,GAAE,CAAA;;;;oEAIR;AAQK;IADL,IAAA,UAAG,EAAC,mBAAmB,CAAC;IAEtB,WAAA,IAAA,WAAI,GAAE,CAAA;;;;sEAIR;AAMK;IADL,IAAA,UAAG,EAAC,2BAA2B,CAAC;IAE9B,WAAA,IAAA,WAAI,GAAE,CAAA;;;;oEAIR;AAMK;IADL,IAAA,UAAG,EAAC,+BAA+B,CAAC;IAElC,WAAA,IAAA,WAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAI,GAAE,CAAA;;;;+DAOR;mCA7EU,wBAAwB;IAFpC,IAAA,YAAK,EAAC,wBAAwB,CAAC;IAC/B,IAAA,WAAI,EAAC,eAAe,CAAC;GACT,wBAAwB,CA8EpC"}

package/dist/system/rolePermission/rolePermission.model.d.ts

@@ -0,0 +1,45 @@
+/**
+ * 角色-权限关联实体
+ *
+ * 表示一个角色与一个权限之间的分配关系，
+ * 对应数据库表 `sys_role_permissions`。
+ */
+export declare class RolePermission {
+    roleId: string;
+    permissionId: string;
+    createdAt: Date;
+    /** 关联的角色信息（可选，查询时附带） */
+    role?: {
+        id: string;
+        code: string;
+        name: string;
+    };
+    /** 关联的权限信息（可选，查询时附带） */
+    permission?: {
+        id: string;
+        code: string;
+        name: string;
+        type: string;
+    };
+}
+/**
+ * 设置角色权限请求 DTO
+ *
+ * 前端权限树组件提交的完整权限ID列表，
+ * 后端在事务中先清空再批量插入，保证原子性。
+ * permissionIds 为空数组时表示清空该角色的所有权限。
+ */
+export declare class SetPermissionsDto {
+    permissionIds: string[];
+}
+/**
+ * 权限列表项（用于角色关联查询返回）
+ */
+export declare class PermissionItem {
+    id: string;
+    code: string;
+    name: string;
+    type: string;
+    status: string;
+}
+//# sourceMappingURL=rolePermission.model.d.ts.map

package/dist/system/rolePermission/rolePermission.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolePermission.model.d.ts","sourceRoot":"","sources":["../../../src/system/rolePermission/rolePermission.model.ts"],"names":[],"mappings":"AAMA;;;;;GAKG;AACH,qBAAa,cAAc;IAGzB,MAAM,EAAG,MAAM,CAAC;IAIhB,YAAY,EAAG,MAAM,CAAC;IAEtB,SAAS,EAAG,IAAI,CAAC;IAEjB,wBAAwB;IACxB,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAElD,wBAAwB;IACxB,UAAU,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvE;AAED;;;;;;GAMG;AACH,qBAAa,iBAAiB;IAG5B,aAAa,EAAG,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,cAAc;IAEzB,EAAE,EAAG,MAAM,CAAC;IAGZ,IAAI,EAAG,MAAM,CAAC;IAGd,IAAI,EAAG,MAAM,CAAC;IAGd,IAAI,EAAG,MAAM,CAAC;IAGd,MAAM,EAAG,MAAM,CAAC;CACjB"}

package/dist/system/rolePermission/rolePermission.model.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionItem = exports.SetPermissionsDto = exports.RolePermission = void 0;
+const class_validator_1 = require("class-validator");
+/**
+ * 角色-权限关联实体
+ *
+ * 表示一个角色与一个权限之间的分配关系，
+ * 对应数据库表 `sys_role_permissions`。
+ */
+class RolePermission {
+    roleId;
+    permissionId;
+    createdAt;
+    /** 关联的角色信息（可选，查询时附带） */
+    role;
+    /** 关联的权限信息（可选，查询时附带） */
+    permission;
+}
+exports.RolePermission = RolePermission;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)({ message: '角色ID不能为空' }),
+    __metadata("design:type", String)
+], RolePermission.prototype, "roleId", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)({ message: '权限ID不能为空' }),
+    __metadata("design:type", String)
+], RolePermission.prototype, "permissionId", void 0);
+/**
+ * 设置角色权限请求 DTO
+ *
+ * 前端权限树组件提交的完整权限ID列表，
+ * 后端在事务中先清空再批量插入，保证原子性。
+ * permissionIds 为空数组时表示清空该角色的所有权限。
+ */
+class SetPermissionsDto {
+    permissionIds;
+}
+exports.SetPermissionsDto = SetPermissionsDto;
+__decorate([
+    (0, class_validator_1.IsArray)({ message: '权限ID列表必须是数组' }),
+    (0, class_validator_1.IsString)({ each: true, message: '每个权限ID必须是字符串' }),
+    __metadata("design:type", Array)
+], SetPermissionsDto.prototype, "permissionIds", void 0);
+/**
+ * 权限列表项（用于角色关联查询返回）
+ */
+class PermissionItem {
+    id;
+    code;
+    name;
+    type;
+    status;
+}
+exports.PermissionItem = PermissionItem;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], PermissionItem.prototype, "id", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], PermissionItem.prototype, "code", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], PermissionItem.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], PermissionItem.prototype, "type", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], PermissionItem.prototype, "status", void 0);
+//# sourceMappingURL=rolePermission.model.js.map

package/dist/system/rolePermission/rolePermission.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolePermission.model.js","sourceRoot":"","sources":["../../../src/system/rolePermission/rolePermission.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAIyB;AAEzB;;;;;GAKG;AACH,MAAa,cAAc;IAGzB,MAAM,CAAU;IAIhB,YAAY,CAAU;IAEtB,SAAS,CAAQ;IAEjB,wBAAwB;IACxB,IAAI,CAA8C;IAElD,wBAAwB;IACxB,UAAU,CAA4D;CACvE;AAhBD,wCAgBC;AAbC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;;8CACpB;AAIhB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;;oDACd;AAWxB;;;;;;GAMG;AACH,MAAa,iBAAiB;IAG5B,aAAa,CAAY;CAC1B;AAJD,8CAIC;AADC;IAFC,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACnC,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;;wDACzB;AAG3B;;GAEG;AACH,MAAa,cAAc;IAEzB,EAAE,CAAU;IAGZ,IAAI,CAAU;IAGd,IAAI,CAAU;IAGd,IAAI,CAAU;IAGd,MAAM,CAAU;CACjB;AAfD,wCAeC;AAbC;IADC,IAAA,0BAAQ,GAAE;;0CACC;AAGZ;IADC,IAAA,0BAAQ,GAAE;;4CACG;AAGd;IADC,IAAA,0BAAQ,GAAE;;4CACG;AAGd;IADC,IAAA,0BAAQ,GAAE;;4CACG;AAGd;IADC,IAAA,0BAAQ,GAAE;;8CACK"}

package/dist/system/rolePermission/rolePermission.service.d.ts

@@ -0,0 +1,50 @@
+import { RolePermission } from './rolePermission.model';
+/**
+ * 角色-权限关联服务
+ *
+ * 管理角色与权限之间的多对多关系。
+ * 核心操作为 setPermissions（事务中全量替换），
+ * 匹配前端权限树组件的「勾选 → 一次提交」交互模式。
+ */
+export declare class RolePermissionService {
+    /**
+     * 设置角色的全部权限（先清空再分配）
+     *
+     * 在事务中执行，保证原子性——不会出现「删了一半、插了一半」的中间态。
+     * 这是前端权限树控件的唯一写入口：用户勾选/取消勾选后一次提交完整的权限ID列表。
+     *
+     * @param roleId        - 角色ID
+     * @param permissionIds - 新的权限ID列表（空数组表示清空所有权限）
+     */
+    setPermissions(roleId: string, permissionIds: string[]): Promise<void>;
+    /**
+     * 获取角色拥有的所有权限（返回权限详细信息）
+     *
+     * @param roleId - 角色ID
+     * @returns 权限列表（包含权限的完整信息）
+     */
+    getPermissionsByRole(roleId: string): Promise<RolePermission[]>;
+    /**
+     * 获取角色拥有的权限ID列表（仅返回ID）
+     *
+     * @param roleId - 角色ID
+     * @returns 权限ID数组
+     */
+    getPermissionIdsByRole(roleId: string): Promise<string[]>;
+    /**
+     * 查询拥有某个权限的所有角色
+     *
+     * @param permissionId - 权限ID
+     * @returns 角色列表（包含角色的基本信息）
+     */
+    getRolesByPermission(permissionId: string): Promise<RolePermission[]>;
+    /**
+     * 判断角色是否拥有某个权限
+     *
+     * @param roleId       - 角色ID
+     * @param permissionId - 权限ID
+     * @returns 是否拥有该权限
+     */
+    hasPermission(roleId: string, permissionId: string): Promise<boolean>;
+}
+//# sourceMappingURL=rolePermission.service.d.ts.map

package/dist/system/rolePermission/rolePermission.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolePermission.service.d.ts","sourceRoot":"","sources":["../../../src/system/rolePermission/rolePermission.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC;;;;;;;;OAQG;IACG,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EAAE,GACtB,OAAO,CAAC,IAAI,CAAC;IAqBhB;;;;;OAKG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,EAAE,CAAC;IAiB5B;;;;;OAKG;IACG,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQ/D;;;;;OAKG;IACG,oBAAoB,CACxB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,cAAc,EAAE,CAAC;IAe5B;;;;;;OAMG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAM5E"}

package/dist/system/rolePermission/rolePermission.service.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RolePermissionService = void 0;
+const database_1 = require("../../config/database");
+/**
+ * 角色-权限关联服务
+ *
+ * 管理角色与权限之间的多对多关系。
+ * 核心操作为 setPermissions（事务中全量替换），
+ * 匹配前端权限树组件的「勾选 → 一次提交」交互模式。
+ */
+class RolePermissionService {
+    /**
+     * 设置角色的全部权限（先清空再分配）
+     *
+     * 在事务中执行，保证原子性——不会出现「删了一半、插了一半」的中间态。
+     * 这是前端权限树控件的唯一写入口：用户勾选/取消勾选后一次提交完整的权限ID列表。
+     *
+     * @param roleId        - 角色ID
+     * @param permissionIds - 新的权限ID列表（空数组表示清空所有权限）
+     */
+    async setPermissions(roleId, permissionIds) {
+        await database_1.prisma.$transaction(async (tx) => {
+            // 1. 删除该角色现有的所有权限关联
+            await tx.rolePermission.deleteMany({
+                where: { roleId },
+            });
+            // 2. 如果提供了新的权限列表，则批量插入
+            if (permissionIds.length > 0) {
+                const data = permissionIds.map((permissionId) => ({
+                    roleId,
+                    permissionId,
+                }));
+                await tx.rolePermission.createMany({
+                    data,
+                });
+            }
+        });
+    }
+    /**
+     * 获取角色拥有的所有权限（返回权限详细信息）
+     *
+     * @param roleId - 角色ID
+     * @returns 权限列表（包含权限的完整信息）
+     */
+    async getPermissionsByRole(roleId) {
+        return database_1.prisma.rolePermission.findMany({
+            where: { roleId },
+            include: {
+                permission: {
+                    select: {
+                        id: true,
+                        code: true,
+                        name: true,
+                        type: true,
+                        status: true,
+                    },
+                },
+            },
+        });
+    }
+    /**
+     * 获取角色拥有的权限ID列表（仅返回ID）
+     *
+     * @param roleId - 角色ID
+     * @returns 权限ID数组
+     */
+    async getPermissionIdsByRole(roleId) {
+        const rows = await database_1.prisma.rolePermission.findMany({
+            where: { roleId },
+            select: { permissionId: true },
+        });
+        return rows.map((r) => r.permissionId);
+    }
+    /**
+     * 查询拥有某个权限的所有角色
+     *
+     * @param permissionId - 权限ID
+     * @returns 角色列表（包含角色的基本信息）
+     */
+    async getRolesByPermission(permissionId) {
+        return database_1.prisma.rolePermission.findMany({
+            where: { permissionId },
+            include: {
+                role: {
+                    select: {
+                        id: true,
+                        code: true,
+                        name: true,
+                    },
+                },
+            },
+        });
+    }
+    /**
+     * 判断角色是否拥有某个权限
+     *
+     * @param roleId       - 角色ID
+     * @param permissionId - 权限ID
+     * @returns 是否拥有该权限
+     */
+    async hasPermission(roleId, permissionId) {
+        const count = await database_1.prisma.rolePermission.count({
+            where: { roleId, permissionId },
+        });
+        return count > 0;
+    }
+}
+exports.RolePermissionService = RolePermissionService;
+//# sourceMappingURL=rolePermission.service.js.map

package/dist/system/rolePermission/rolePermission.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolePermission.service.js","sourceRoot":"","sources":["../../../src/system/rolePermission/rolePermission.service.ts"],"names":[],"mappings":";;;AAAA,oDAA+C;AAG/C;;;;;;GAMG;AACH,MAAa,qBAAqB;IAChC;;;;;;;;OAQG;IACH,KAAK,CAAC,cAAc,CAClB,MAAc,EACd,aAAuB;QAEvB,MAAM,iBAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,oBAAoB;YACpB,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;gBACjC,KAAK,EAAE,EAAE,MAAM,EAAE;aAClB,CAAC,CAAC;YAEH,uBAAuB;YACvB,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;oBAChD,MAAM;oBACN,YAAY;iBACb,CAAC,CAAC,CAAC;gBAEJ,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;oBACjC,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CACxB,MAAc;QAEd,OAAO,iBAAM,CAAC,cAAc,CAAC,QAAQ,CAAC;YACpC,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,OAAO,EAAE;gBACP,UAAU,EAAE;oBACV,MAAM,EAAE;wBACN,EAAE,EAAE,IAAI;wBACR,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE,IAAI;wBACV,MAAM,EAAE,IAAI;qBACb;iBACF;aACF;SACF,CAAgC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAAC,MAAc;QACzC,MAAM,IAAI,GAAG,MAAM,iBAAM,CAAC,cAAc,CAAC,QAAQ,CAAC;YAChD,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;SAC/B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAA2B,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CACxB,YAAoB;QAEpB,OAAO,iBAAM,CAAC,cAAc,CAAC,QAAQ,CAAC;YACpC,KAAK,EAAE,EAAE,YAAY,EAAE;YACvB,OAAO,EAAE;gBACP,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,EAAE,EAAE,IAAI;wBACR,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE,IAAI;qBACX;iBACF;aACF;SACF,CAAgC,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,YAAoB;QACtD,MAAM,KAAK,GAAG,MAAM,iBAAM,CAAC,cAAc,CAAC,KAAK,CAAC;YAC9C,KAAK,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;SAChC,CAAC,CAAC;QACH,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;CACF;AA7GD,sDA6GC"}

package/dist/system/user/user.controller.d.ts

@@ -0,0 +1,66 @@
+import { Controller } from 'tsoa';
+import { CreateUserDto, UpdateUserDto, LoginDto, ChangePasswordDto } from './user.model';
+import { PageResult, ApiResponse } from '../../common/types';
+export declare class UserController extends Controller {
+    private userService;
+    private userRoleService;
+    private loginLogService;
+    login(body: LoginDto, req?: any): Promise<ApiResponse<{
+        user: any;
+        token: string;
+    }>>;
+    /**
+     * 退出登录
+     *
+     * JWT 为无状态认证，服务端无法真正吊销 token，此接口主要承担：
+     * 1. 记录登出日志（action=logout）；
+     * 2. 返回成功结果，供前端确认登出流程完成（本地凭据由前端清理）。
+     * 已加入 auth 中间件白名单，token 过期/无效时也能正常调用。
+     */
+    logout(req?: any): Promise<ApiResponse<null>>;
+    /**
+     * 获取当前登录用户的完整信息
+     *
+     * 返回：用户信息 + 角色列表 + 权限树 + 菜单树（按角色过滤）+ 机构数据（orgs，按角色决定）。
+     * orgs.stores：门店店长（store_manager）负责的门店；
+     * orgs.branchWarehouses：前置仓管理员（branch_warehouse_manager）负责的前置仓；
+     * orgs.centralWarehouses：总仓管理员（warehouse_manager）负责的总仓。
+     * 数据库无数据时（首次安装）返回空数组兜底。
+     */
+    getCurrentUser(req: any): Promise<ApiResponse<{
+        user: any;
+        roles: any[];
+        permissions: any[];
+        menus: any[];
+        orgs: {
+            stores: any[];
+            branchWarehouses: any[];
+            centralWarehouses: any[];
+        };
+    }>>;
+    /**
+     * 获取用户列表
+     * @param roleCode 可选，按角色编码筛选（如 store_manager 店长）
+     */
+    getAllUsers(roleCode?: string): Promise<ApiResponse<any[]>>;
+    getAllUsersByPage(page?: number, pageSize?: number, keyword?: string): Promise<ApiResponse<{
+        list: any[];
+        pagination: PageResult<any>['pagination'];
+    }>>;
+    getUserById(id: string): Promise<ApiResponse<any>>;
+    createUser(body: CreateUserDto): Promise<ApiResponse<any>>;
+    updateUser(id: string, body: UpdateUserDto): Promise<ApiResponse<any>>;
+    deleteUser(id: string): Promise<ApiResponse<boolean>>;
+    /**
+     * 上报 APP 推送设备 cid（登录用户自己的设备，用于 APP 推送独立链路）
+     * @param body cid 来自 uni.getPushClientId() 的设备标识（必填）
+     */
+    reportPushCid(req: any, body: {
+        cid: string;
+    }): Promise<ApiResponse<null>>;
+    /**
+     * 修改密码（需要验证旧密码）
+     */
+    changePassword(id: string, body: ChangePasswordDto): Promise<ApiResponse<null>>;
+}
+//# sourceMappingURL=user.controller.d.ts.map

package/dist/system/user/user.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.controller.d.ts","sourceRoot":"","sources":["../../../src/system/user/user.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA6D,MAAM,MAAM,CAAC;AAG7F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAuC,MAAM,oBAAoB,CAAC;AAuBlG,qBACa,cAAe,SAAQ,UAAU;IAC5C,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,eAAe,CAAyB;IAGnC,KAAK,CACR,IAAI,EAAE,QAAQ,EACX,GAAG,CAAC,EAAE,GAAG,GACnB,OAAO,CAAC,WAAW,CAAC;QAAE,IAAI,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAqDrD;;;;;;;OAOG;IAEU,MAAM,CAAY,GAAG,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IA6BrE;;;;;;;;OAQG;IAEU,cAAc,CAAY,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC;QACpE,IAAI,EAAE,GAAG,CAAC;QACV,KAAK,EAAE,GAAG,EAAE,CAAC;QACb,WAAW,EAAE,GAAG,EAAE,CAAC;QACnB,KAAK,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,EAAE;YACJ,MAAM,EAAE,GAAG,EAAE,CAAC;YACd,gBAAgB,EAAE,GAAG,EAAE,CAAC;YACxB,iBAAiB,EAAE,GAAG,EAAE,CAAC;SAC1B,CAAC;KACH,CAAC,CAAC;IAmBH;;;OAGG;IAEU,WAAW,CAAU,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAMpE,iBAAiB,CACnB,IAAI,CAAC,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,WAAW,CAAC;QAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAAC,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAA;KAAE,CAAC,CAAC;IAMtE,WAAW,CAAS,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAS1D,UAAU,CAAS,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAUlE,UAAU,CAAS,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAgBtF,UAAU,CAAS,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAQ1E;;;OAGG;IAEU,aAAa,CAAY,GAAG,EAAE,GAAG,EAAU,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAW1G;;OAEG;IAEU,cAAc,CACjB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,iBAAiB,GAC9B,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;CAQ9B"}