koa-boot-runtime 1.0.0

package/dist/utils/wecom.js

@@ -0,0 +1,126 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getWecomAccessToken = getWecomAccessToken;
+exports.sendWecomTextCard = sendWecomTextCard;
+exports.getWecomUseridByPhone = getWecomUseridByPhone;
+// 企业微信应用消息客户端（V6.0）：自建应用推送通知
+// 官方文档: https://developer.work.weixin.qq.com/document/path/90236
+// 说明: 应用消息 API 为服务端到服务端调用，仅校验 corpId/agentId/secret 与可见范围，
+//       不校验域名——textcard 的 url 仅是用户点击跳转地址，本地开发无需配置可信域名
+//       （可信域名仅用于 JS-SDK / 网页授权 OAuth / 回调 URL 场景）
+const config_1 = __importDefault(require("../config"));
+const redisClient_1 = require("./redisClient");
+const logger_1 = require("./logger");
+const WECOM_API_BASE = 'https://qyapi.weixin.qq.com/cgi-bin';
+/** 企微应用 access_token 缓存键（有效期 2h，缓存 7000s 留缓冲提前刷新） */
+const TOKEN_CACHE_KEY = 'wecom:access_token';
+/** 手机号 → userid 解析缓存（24h） */
+const USERID_CACHE_PREFIX = 'wecom:userid:';
+/** 请求企微 API 并统一校验 errcode */
+async function request(path, options = {}) {
+    const { method = 'GET', query, body } = options;
+    const url = new URL(`${WECOM_API_BASE}${path}`);
+    if (query) {
+        Object.entries(query).forEach(([k, v]) => url.searchParams.set(k, v));
+    }
+    const res = await fetch(url.toString(), {
+        method,
+        headers: body ? { 'Content-Type': 'application/json' } : undefined,
+        body: body ? JSON.stringify(body) : undefined,
+    });
+    if (!res.ok) {
+        throw new Error(`[wecom] HTTP ${res.status} ${res.statusText} (${path})`);
+    }
+    return (await res.json());
+}
+/** 获取应用 access_token（Redis 缓存 7000s，企微有效期为 7200s） */
+async function getWecomAccessToken() {
+    const { corpId, secret } = config_1.default.wecom;
+    if (!corpId || !secret) {
+        throw new Error('[wecom] 未配置 WECOM_CORP_ID / WECOM_SECRET，无法获取 access_token');
+    }
+    const fetcher = async () => {
+        const res = await request('/gettoken', { query: { corpid: corpId, corpsecret: secret } });
+        if (res.errcode !== 0 || !res.access_token) {
+            throw new Error(`[wecom] 获取 access_token 失败: ${res.errcode} ${res.errmsg}`);
+        }
+        return res.access_token;
+    };
+    try {
+        return await redisClient_1.redis.getOrSet(TOKEN_CACHE_KEY, fetcher, 7000);
+    }
+    catch (e) {
+        // Redis 不可用时降级：跳过缓存直接请求企微（token 有效期 2h，本进程内多次调用仍可复用变量级缓存兜底）
+        logger_1.logger.warn(`[wecom] Redis 不可用，跳过 access_token 缓存：${e.message}`);
+        return fetcher();
+    }
+}
+/**
+ * 发送文本卡片应用消息（touser 为企微 userid，去重后以 | 分隔，最多 1000 人）
+ * @param userIds 企微 userid 数组
+ * @param card 文本卡片内容（title ≤128 字，description ≤512 字）
+ */
+async function sendWecomTextCard(userIds, card) {
+    if (userIds.length === 0)
+        return;
+    const { agentId } = config_1.default.wecom;
+    if (!agentId) {
+        throw new Error('[wecom] 未配置 WECOM_AGENT_ID');
+    }
+    const token = await getWecomAccessToken();
+    const res = await request('/message/send', {
+        method: 'POST',
+        query: { access_token: token },
+        body: {
+            touser: [...new Set(userIds)].join('|'),
+            msgtype: 'textcard',
+            agentid: Number(agentId),
+            textcard: {
+                title: card.title.slice(0, 128),
+                description: card.description.slice(0, 512),
+                url: card.url,
+            },
+        },
+    });
+    if (res.errcode !== 0) {
+        throw new Error(`[wecom] 消息发送失败: ${res.errcode} ${res.errmsg}`);
+    }
+}
+/**
+ * 按手机号解析企微 userid（自动绑定）。
+ * 结果 24h 缓存；仅 WECOM_AUTO_BIND=true 时启用，未命中返回 null（由调用方记录为未绑定）
+ */
+async function getWecomUseridByPhone(phone) {
+    const { corpId, secret, autoBind } = config_1.default.wecom;
+    if (!autoBind || !phone)
+        return null;
+    if (!corpId || !secret)
+        return null;
+    const cacheKey = `${USERID_CACHE_PREFIX}${phone}`;
+    const cached = await redisClient_1.redis.get(cacheKey);
+    if (cached !== null)
+        return cached === '__none__' ? null : cached;
+    try {
+        const token = await getWecomAccessToken();
+        const res = await request('/user/getuserid', {
+            method: 'POST',
+            query: { access_token: token },
+            body: { mobile: phone },
+        });
+        if (res.errcode === 0 && res.userid) {
+            await redisClient_1.redis.set(cacheKey, res.userid, 24 * 3600);
+            return res.userid;
+        }
+        // 60111 = 用户不存在；60011 = 无通讯录查看权限——均按未绑定处理并短暂缓存防抖
+        await redisClient_1.redis.set(cacheKey, '__none__', 3600);
+        return null;
+    }
+    catch (e) {
+        console.error(`[wecom] 手机号解析 userid 失败: ${phone}`, e.message);
+        return null;
+    }
+}
+//# sourceMappingURL=wecom.js.map

package/dist/utils/wecom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wecom.js","sourceRoot":"","sources":["../../src/utils/wecom.ts"],"names":[],"mappings":";;;;;AAkDA,kDAmBC;AAOD,8CAwBC;AAMD,sDA2BC;AArID,6BAA6B;AAC7B,iEAAiE;AACjE,2DAA2D;AAC3D,sDAAsD;AACtD,kDAAkD;AAClD,uDAA+B;AAC/B,+CAAsC;AACtC,qCAAkC;AAElC,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAiB7D,qDAAqD;AACrD,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,6BAA6B;AAC7B,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAE5C,6BAA6B;AAC7B,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,UAA+E,EAAE;IACpH,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,cAAc,GAAG,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM;QACN,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,SAAS;QAClE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;AAChD,CAAC;AAED,qDAAqD;AAC9C,KAAK,UAAU,mBAAmB;IACvC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAM,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1F,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,GAAG,CAAC,YAAsB,CAAC;IACpC,CAAC,CAAC;IACF,IAAI,CAAC;QACH,OAAO,MAAM,mBAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,4DAA4D;QAC5D,eAAM,CAAC,IAAI,CAAC,wCAAyC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,iBAAiB,CAAC,OAAiB,EAAE,IAAmB;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,EAAE,OAAO,EAAE,GAAG,gBAAM,CAAC,KAAK,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,eAAe,EAAE;QACzC,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;QAC9B,IAAI,EAAE;YACJ,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACvC,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;YACxB,QAAQ,EAAE;gBACR,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;aACd;SACF;KACF,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAM,CAAC,KAAK,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,QAAQ,GAAG,GAAG,mBAAmB,GAAG,KAAK,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,mBAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;YAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;SACxB,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,mBAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;YAC3D,OAAO,GAAG,CAAC,MAAgB,CAAC;QAC9B,CAAC;QACD,iDAAiD;QACjD,MAAM,mBAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,84 @@
+{
+  "name": "koa-boot-runtime",
+  "version": "1.0.0",
+  "description": "Koa-Boot framework runtime: pre-generated system routes, Prisma client factory, core auth middleware, AI tool registry",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./common": {
+      "types": "./dist/common/index.d.ts",
+      "require": "./dist/common/index.js"
+    },
+    "./common/*": {
+      "types": "./dist/common/*/index.d.ts",
+      "require": "./dist/common/*/index.js"
+    },
+    "./common/paginate": {
+      "types": "./dist/common/paginate.d.ts",
+      "require": "./dist/common/paginate.js"
+    },
+    "./common/dto": {
+      "types": "./dist/common/dto.d.ts",
+      "require": "./dist/common/dto.js"
+    },
+    "./utils/*": {
+      "types": "./dist/utils/*.d.ts",
+      "require": "./dist/utils/*.js"
+    },
+    "./config/*": {
+      "types": "./dist/config/*.d.ts",
+      "require": "./dist/config/*.js"
+    },
+    "./templates/*": "./templates/*"
+  },
+  "files": [
+    "dist",
+    "templates"
+  ],
+  "scripts": {
+    "gen:types": "prisma generate --schema templates/schema.system.prisma",
+    "doc": "tsoa spec-and-routes -c tsoa.json",
+    "fix:routes": "node scripts/fix-routes-imports.js",
+    "build": "pnpm clean && pnpm gen:types && pnpm doc && pnpm fix:routes && tsc -p tsconfig.build.json && node scripts/copy-assets.js",
+    "type-check": "tsc -p tsconfig.json --noEmit",
+    "clean": "rimraf dist src/build"
+  },
+  "engines": {
+    "node": ">=18.19.0"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@alicloud/dysmsapi20170525": "^4.6.0",
+    "@alicloud/openapi-client": "^0.4.15",
+    "@koa/router": "^15.3.0",
+    "@prisma/client": "^5.19.1",
+    "@supabase/supabase-js": "^2.91.1",
+    "@tsoa/runtime": "6.6.0",
+    "ali-oss": "^6.23.0",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.15.1",
+    "dotenv": "^17.2.3",
+    "jsonwebtoken": "^9.0.3",
+    "koa": "^3.1.1",
+    "nodemailer": "^9.0.5",
+    "redis": "^5.12.1",
+    "reflect-metadata": "^0.2.2",
+    "tsoa": "6.6.0",
+    "typedi": "^0.10.0"
+  },
+  "devDependencies": {
+    "@types/koa": "^2.15.0",
+    "@types/koa__router": "^12.0.5",
+    "@types/jsonwebtoken": "^9.0.10",
+    "@types/node": "^25.0.10",
+    "@types/nodemailer": "^8.0.1",
+    "prisma": "^5.19.1",
+    "rimraf": "^6.0.1",
+    "typescript": "^5.9.3"
+  }
+}

package/templates/schema.system.prisma

@@ -0,0 +1,283 @@
+// ============================================================
+// Koa-Boot Runtime 系统表 Schema 片段
+// 用途：
+//   1. runtime 自身类型生成：pnpm gen:types（prisma generate --schema 本文件）
+//   2. CLI 生成用户项目时，本片段合并进用户项目的 schema.prisma
+// 用户业务表定义在用户项目侧（src/business/**），与系统表共存。
+// ============================================================
+
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "mysql"
+  url      = env("DATABASE_URL")
+}
+
+model User {
+  id           String      @id @default(uuid()) @db.Char(36)
+  username     String      @unique(map: "username") @db.VarChar(50)
+  password     String      @db.VarChar(255)
+  name         String      @db.VarChar(100)
+  phone        String      @unique(map: "phone") @db.VarChar(20)
+  email        String?     @unique(map: "email") @db.VarChar(100)
+  avatar       String?     @db.VarChar(255)
+  departmentId String?     @map("department_id") @db.Char(36)
+  status       String?     @default("active") @db.VarChar(20)
+  wechatUserid String?     @map("wechat_userid") @db.VarChar(50)
+  pushCid      String?     @map("push_cid") @db.VarChar(100)
+  createdAt    DateTime    @default(now()) @map("created_at") @db.DateTime(0)
+  updatedAt    DateTime    @updatedAt @map("updated_at") @db.DateTime(0)
+  department   Department? @relation(fields: [departmentId], references: [id])
+  userRoles    UserRole[]  @relation("UserRoleUser")
+
+  @@index([departmentId], map: "idx_sys_users_department")
+  @@map("sys_users")
+}
+
+model Employee {
+  id           String      @id @default(uuid()) @db.Char(36)
+  name         String      @db.VarChar(100)
+  phone        String      @unique(map: "phone") @db.VarChar(20)
+  email        String?     @unique(map: "email") @db.VarChar(100)
+  position     String?     @db.VarChar(50)
+  salary       Decimal?    @db.Decimal(10, 2)
+  hireDate     DateTime    @map("hire_date") @db.DateTime(0)
+  departmentId String?     @map("department_id") @db.Char(36)
+  status       String?     @default("active") @db.VarChar(20)
+  createdAt    DateTime    @default(now()) @map("created_at") @db.DateTime(0)
+  updatedAt    DateTime    @updatedAt @map("updated_at") @db.DateTime(0)
+  department   Department? @relation(fields: [departmentId], references: [id])
+
+  @@index([departmentId], map: "idx_employees_department")
+  @@map("employees")
+}
+
+model Role {
+  id              String           @id @default(uuid()) @db.Char(36)
+  code            String           @unique(map: "code") @db.VarChar(50)
+  name            String           @db.VarChar(100)
+  description     String?          @db.VarChar(255)
+  sort            Int              @default(0)
+  status          String?          @default("active") @db.VarChar(20)
+  createdAt       DateTime         @default(now()) @map("created_at") @db.DateTime(0)
+  updatedAt       DateTime         @updatedAt @map("updated_at") @db.DateTime(0)
+  userRoles       UserRole[]       @relation("UserRoleRole")
+  rolePermissions RolePermission[] @relation("RolePermissionRole")
+  roleMenus       RoleMenu[]       @relation("RoleMenuRole")
+
+  @@map("sys_roles")
+}
+
+model Permission {
+  id              String           @id @default(uuid()) @db.Char(36)
+  code            String           @unique(map: "code") @db.VarChar(100)
+  name            String           @db.VarChar(100)
+  type            String           @db.VarChar(20)
+  description     String?          @db.VarChar(255)
+  parentId        String?          @map("parent_id") @db.Char(36)
+  path            String?          @db.VarChar(255)
+  method          String?          @db.VarChar(10)
+  sort            Int              @default(0)
+  status          String?          @default("active") @db.VarChar(20)
+  createdAt       DateTime         @default(now()) @map("created_at") @db.DateTime(0)
+  updatedAt       DateTime         @updatedAt @map("updated_at") @db.DateTime(0)
+  parent          Permission?      @relation("PermissionTree", fields: [parentId], references: [id])
+  children        Permission[]     @relation("PermissionTree")
+  rolePermissions RolePermission[] @relation("RolePermissionPermission")
+
+  @@index([type], map: "idx_sys_permissions_type")
+  @@index([parentId], map: "idx_sys_permissions_parent")
+  @@map("sys_permissions")
+}
+
+model Menu {
+  id           String     @id @default(uuid()) @db.Char(36)
+  name         String     @db.VarChar(100)
+  code         String     @unique(map: "code") @db.VarChar(100)
+  parentId     String?    @map("parent_id") @db.Char(36)
+  type         String     @default("menu") @db.VarChar(20)
+  path         String?    @db.VarChar(255)
+  component    String?    @db.VarChar(255)
+  icon         String?    @db.VarChar(100)
+  permissionId String?    @map("permission_id") @db.Char(36)
+  sort         Int        @default(0)
+  visible      Boolean    @default(true)
+  status       String?    @default("active") @db.VarChar(20)
+  createdAt    DateTime   @default(now()) @map("created_at") @db.DateTime(0)
+  updatedAt    DateTime   @updatedAt @map("updated_at") @db.DateTime(0)
+  parent       Menu?      @relation("MenuTree", fields: [parentId], references: [id])
+  children     Menu[]     @relation("MenuTree")
+  roleMenus    RoleMenu[] @relation("RoleMenuMenu")
+
+  @@index([parentId], map: "idx_sys_menus_parent")
+  @@index([parentId, sort], map: "idx_sys_menus_sort")
+  @@map("sys_menus")
+}
+
+model Department {
+  id        String       @id @default(uuid()) @db.Char(36)
+  name      String       @db.VarChar(100)
+  code      String       @unique(map: "code") @db.VarChar(50)
+  parentId  String?      @map("parent_id") @db.Char(36)
+  leaderId  String?      @map("leader_id") @db.Char(36)
+  phone     String?      @db.VarChar(20)
+  sort      Int          @default(0)
+  status    String?      @default("active") @db.VarChar(20)
+  createdAt DateTime     @default(now()) @map("created_at") @db.DateTime(0)
+  updatedAt DateTime     @updatedAt @map("updated_at") @db.DateTime(0)
+  parent    Department?  @relation("DepartmentTree", fields: [parentId], references: [id])
+  children  Department[] @relation("DepartmentTree")
+  users     User[]       @relation
+  employees Employee[]   @relation
+
+  @@index([parentId], map: "idx_sys_departments_parent")
+  @@index([leaderId], map: "idx_sys_departments_leader")
+  @@map("sys_departments")
+}
+
+model DictType {
+  id          String     @id @default(uuid()) @db.Char(36)
+  code        String     @unique(map: "code") @db.VarChar(100)
+  name        String     @db.VarChar(100)
+  description String?    @db.VarChar(255)
+  status      String?    @default("active") @db.VarChar(20)
+  createdAt   DateTime   @default(now()) @map("created_at") @db.DateTime(0)
+  updatedAt   DateTime   @updatedAt @map("updated_at") @db.DateTime(0)
+  items       DictItem[]
+
+  @@map("sys_dict_types")
+}
+
+model DictItem {
+  id          String   @id @default(uuid()) @db.Char(36)
+  typeId      String   @map("type_id") @db.Char(36)
+  label       String   @db.VarChar(100)
+  value       String   @db.VarChar(100)
+  cssClass    String?  @map("css_class") @db.VarChar(50)
+  sort        Int      @default(0)
+  status      String?  @default("active") @db.VarChar(20)
+  description String?  @db.VarChar(255)
+  createdAt   DateTime @default(now()) @map("created_at") @db.DateTime(0)
+  updatedAt   DateTime @updatedAt @map("updated_at") @db.DateTime(0)
+  dictType    DictType @relation(fields: [typeId], references: [id])
+
+  @@unique([typeId, value], map: "idx_sys_dict_items_type_value")
+  @@index([typeId], map: "idx_sys_dict_items_type")
+  @@map("sys_dict_items")
+}
+
+model OperationLog {
+  id            String   @id @default(uuid()) @db.Char(36)
+  userId        String?  @map("user_id") @db.Char(36)
+  username      String   @db.VarChar(50)
+  module        String   @db.VarChar(50)
+  action        String   @db.VarChar(50)
+  targetType    String?  @map("target_type") @db.VarChar(50)
+  targetId      String?  @map("target_id") @db.Char(36)
+  description   String?  @db.VarChar(500)
+  requestMethod String?  @map("request_method") @db.VarChar(10)
+  requestUrl    String?  @map("request_url") @db.VarChar(255)
+  requestIp     String?  @map("request_ip") @db.VarChar(50)
+  requestBody   String?  @map("request_body") @db.Text
+  responseCode  Int?     @map("response_code")
+  duration      Int?
+  status        String?  @default("success") @db.VarChar(20)
+  errorMsg      String?  @map("error_msg") @db.Text
+  createdAt     DateTime @default(now()) @map("created_at") @db.DateTime(0)
+
+  @@index([userId], map: "idx_sys_op_logs_user")
+  @@index([module], map: "idx_sys_op_logs_module")
+  @@index([action], map: "idx_sys_op_logs_action")
+  @@index([createdAt], map: "idx_sys_op_logs_created")
+  @@map("sys_operation_logs")
+}
+
+model LoginLog {
+  id        String   @id @default(uuid()) @db.Char(36)
+  userId    String?  @map("user_id") @db.Char(36)
+  username  String   @db.VarChar(50)
+  action    String   @db.VarChar(20)
+  ip        String?  @db.VarChar(50)
+  userAgent String?  @map("user_agent") @db.VarChar(500)
+  os        String?  @db.VarChar(100)
+  browser   String?  @db.VarChar(100)
+  status    String?  @default("success") @db.VarChar(20)
+  message   String?  @db.VarChar(255)
+  createdAt DateTime @default(now()) @map("created_at") @db.DateTime(0)
+
+  @@index([userId], map: "idx_sys_login_logs_user")
+  @@index([username], map: "idx_sys_login_logs_username")
+  @@index([createdAt], map: "idx_sys_login_logs_created")
+  @@map("sys_login_logs")
+}
+
+model FileUpload {
+  id          String   @id @default(uuid()) @db.Char(36)
+  fileNo      String   @unique(map: "fileNo") @map("file_no") @db.VarChar(100)
+  name        String   @db.VarChar(255)
+  size        Int      @default(0)
+  type        String   @db.VarChar(50)
+  url         String   @db.VarChar(500)
+  description String?  @db.VarChar(255)
+  status      String?  @default("active") @db.VarChar(20)
+  createdAt   DateTime @default(now()) @map("created_at") @db.DateTime(0)
+  updatedAt   DateTime @updatedAt @map("updated_at") @db.DateTime(0)
+
+  @@index([fileNo], map: "idx_sys_file_uploads_fileno")
+  @@index([type], map: "idx_sys_file_uploads_type")
+  @@index([createdAt], map: "idx_sys_file_uploads_created")
+  @@map("sys_file_uploads")
+}
+
+model UserRole {
+  userId    String   @map("user_id") @db.Char(36)
+  roleId    String   @map("role_id") @db.Char(36)
+  createdAt DateTime @default(now()) @map("created_at") @db.DateTime(0)
+
+  user User @relation("UserRoleUser", fields: [userId], references: [id], onDelete: Cascade)
+  role Role @relation("UserRoleRole", fields: [roleId], references: [id], onDelete: Cascade)
+
+  @@id([userId, roleId])
+  @@unique([userId, roleId], map: "uk_sys_user_roles")
+  @@index([userId], map: "idx_sys_user_roles_user")
+  @@index([roleId], map: "idx_sys_user_roles_role")
+  @@map("sys_user_roles")
+}
+
+model RolePermission {
+  roleId       String   @map("role_id") @db.Char(36)
+  permissionId String   @map("permission_id") @db.Char(36)
+  createdAt    DateTime @default(now()) @map("created_at") @db.DateTime(0)
+
+  role       Role       @relation("RolePermissionRole", fields: [roleId], references: [id], onDelete: Cascade)
+  permission Permission @relation("RolePermissionPermission", fields: [permissionId], references: [id], onDelete: Cascade)
+
+  @@id([roleId, permissionId])
+  @@index([roleId], map: "idx_sys_role_permissions_role")
+  @@index([permissionId], map: "idx_sys_role_permissions_perm")
+  @@map("sys_role_permissions")
+}
+
+model RoleMenu {
+  roleId    String   @map("role_id") @db.Char(36)
+  menuId    String   @map("menu_id") @db.Char(36)
+  createdAt DateTime @default(now()) @map("created_at") @db.DateTime(0)
+
+  role Role @relation("RoleMenuRole", fields: [roleId], references: [id], onDelete: Cascade)
+  menu Menu @relation("RoleMenuMenu", fields: [menuId], references: [id], onDelete: Cascade)
+
+  @@id([roleId, menuId])
+  @@index([roleId], map: "idx_sys_role_menus_role")
+  @@index([menuId], map: "idx_sys_role_menus_menu")
+  @@map("sys_role_menus")
+}
+
+model SysSequence {
+  seqKey       String   @id @map("seq_key") @db.VarChar(50)
+  currentValue Int      @default(0) @map("current_value")
+  updatedAt    DateTime @updatedAt @map("updated_at") @db.DateTime(0)
+
+  @@map("sys_sequences")
+}