feat: 完成 R13/R14/R15/R16 小团队管理核心能力
这个提交包含在：
@@ -0,0 +1,248 @@
|
||||
const { FEATURE_FLAG_KEYS, evaluateFeatureFlag } = require("./featureFlags");
|
||||
|
||||
const WORKSPACE_PROFILES = Object.freeze({
|
||||
smallTeamInternal: "small_team_internal",
|
||||
});
|
||||
|
||||
const MODULE_VISIBILITY_MODES = Object.freeze(["main", "admin", "hidden"]);
|
||||
|
||||
const NAVIGATION_REGISTRY = Object.freeze({
|
||||
portal: { key: "portal", label: "Portal", icon: "home_app_logo", href: "/portal", anyOf: [] },
|
||||
team: { key: "team", label: "团队", icon: "groups", href: "/team", anyOf: [], featureFlagKey: FEATURE_FLAG_KEYS.presenceBoard },
|
||||
leaveRequests: { key: "leaveRequests", label: "请假", icon: "event_available", href: "/leave-requests", anyOf: ["leave.view_own", "leave.view_all", "leave.manage"] },
|
||||
reimbursements: { key: "reimbursements", label: "报销", icon: "request_quote", href: "/reimbursements", anyOf: ["expense.view_own", "expense.view_all"] },
|
||||
assets: { key: "assets", label: "资产", icon: "inventory_2", href: "/assets", anyOf: ["asset.view_own", "asset.view_all", "asset.manage", "asset.transfer", "asset.inventory"] },
|
||||
weeklyReports: { key: "weeklyReports", label: "周报", icon: "article", href: "/weekly-reports", anyOf: [], featureFlagKey: FEATURE_FLAG_KEYS.weeklyReport },
|
||||
todos: { key: "todos", label: "待办", icon: "check_circle", href: "/todos", anyOf: [], featureFlagKey: FEATURE_FLAG_KEYS.todoBoard },
|
||||
announcements: { key: "announcements", label: "公告", icon: "campaign", href: "/announcements", anyOf: [], featureFlagKey: FEATURE_FLAG_KEYS.announcements },
|
||||
|
||||
workspace: { key: "workspace", label: "工作区设置", icon: "tune", href: "/system/workspace", anyOf: ["system.settings"] },
|
||||
people: { key: "people", label: "人员管理", icon: "group", href: "/people", anyOf: ["system.users", "report.dashboard.view"], featureFlagKey: FEATURE_FLAG_KEYS.employeeLifecycle },
|
||||
workflowDefinitions: { key: "workflowDefinitions", label: "流程定义", icon: "schema", href: "/system/workflow-definitions", anyOf: ["system.settings"], featureFlagKey: FEATURE_FLAG_KEYS.workflowDefinitionAdmin },
|
||||
systemSettings: { key: "systemSettings", label: "系统设置", icon: "settings", href: "/system/settings", anyOf: ["system.settings", "system.users", "masterdata.view", "masterdata.manage", "notification.channel.manage", "integration.manage"] },
|
||||
featureFlags: { key: "featureFlags", label: "功能开关", icon: "toggle_on", href: "/system/feature-flags", anyOf: ["system.settings"] },
|
||||
auditLogs: { key: "auditLogs", label: "审计日志", icon: "manage_search", href: "/audit-logs", anyOf: ["system.audit.view"] },
|
||||
|
||||
approvalRules: { key: "approvalRules", label: "审批规则", icon: "rule", href: "/system/approval-rules", anyOf: ["system.settings"] },
|
||||
userManagement: { key: "userManagement", label: "用户管理", icon: "badge", href: "/system/users", anyOf: ["system.users"] },
|
||||
departments: { key: "departments", label: "部门管理", icon: "account_tree", href: "/system/departments", anyOf: ["system.users"] },
|
||||
masterData: { key: "masterData", label: "主数据", icon: "dataset", href: "/system/master-data", anyOf: ["masterdata.view", "masterdata.manage"] },
|
||||
notificationChannels: { key: "notificationChannels", label: "通知渠道", icon: "notifications_active", href: "/system/notification-channels", anyOf: ["notification.channel.manage"] },
|
||||
workflowTasks: { key: "workflowTasks", label: "审批待办", icon: "fact_check", href: "/workflow/tasks", anyOf: ["expense.approve", "leave.approve", "procurement.approve", "travel.approve"] },
|
||||
dashboard: { key: "dashboard", label: "仪表盘", icon: "dashboard", href: "/dashboard", anyOf: ["report.dashboard.view"] },
|
||||
purchaseRequests: { key: "purchaseRequests", label: "采购申请", icon: "shopping_cart", href: "/purchase-requests", anyOf: ["procurement.create", "procurement.view_own", "procurement.view_all", "procurement.manage"] },
|
||||
travelRequests: { key: "travelRequests", label: "差旅申请", icon: "flight", href: "/travel-requests", anyOf: ["travel.create", "travel.view_own", "travel.view_all", "travel.manage", "travel.payment.manage", "integration.manage"] },
|
||||
budgets: { key: "budgets", label: "预算管理", icon: "account_balance", href: "/budgets", anyOf: ["budget.view", "budget.manage"] },
|
||||
paymentBatches: { key: "paymentBatches", label: "支付批次", icon: "payments", href: "/payment-batches", anyOf: ["payment.batch.manage", "risk.review.manage"], featureFlagKey: FEATURE_FLAG_KEYS.paymentBatch },
|
||||
apOperations: { key: "apOperations", label: "AP 运营", icon: "account_balance_wallet", href: "/ap-operations", anyOf: ["payment.batch.manage", "risk.review.manage"], featureFlagKey: FEATURE_FLAG_KEYS.paymentBatch },
|
||||
invoicePool: { key: "invoicePool", label: "票据中心", icon: "receipt_long", href: "/invoice-pool", anyOf: ["invoice.upload", "invoice.view_own", "invoice.manage"] },
|
||||
inventoryChecks: { key: "inventoryChecks", label: "资产盘点", icon: "inventory", href: "/inventory-checks", anyOf: ["asset.inventory"] },
|
||||
cutover: { key: "cutover", label: "切换控制台", icon: "swap_calls", href: "/system/cutover", anyOf: ["system.settings"], featureFlagKey: FEATURE_FLAG_KEYS.cutoverConsole },
|
||||
erpIntegrations: { key: "erpIntegrations", label: "ERP 集成", icon: "hub", href: "/system/integrations/erp", anyOf: ["integration.manage"] },
|
||||
profile: { key: "profile", label: "个人设置", icon: "manage_accounts", href: "/settings/profile", anyOf: [] },
|
||||
});
|
||||
|
||||
const DEFAULT_MODULE_VISIBILITY = Object.freeze({
|
||||
portal: "main",
|
||||
team: "main",
|
||||
leaveRequests: "main",
|
||||
reimbursements: "main",
|
||||
assets: "main",
|
||||
weeklyReports: "main",
|
||||
todos: "main",
|
||||
announcements: "main",
|
||||
|
||||
workspace: "admin",
|
||||
people: "admin",
|
||||
workflowDefinitions: "admin",
|
||||
systemSettings: "admin",
|
||||
featureFlags: "admin",
|
||||
auditLogs: "admin",
|
||||
|
||||
approvalRules: "admin",
|
||||
userManagement: "admin",
|
||||
departments: "admin",
|
||||
masterData: "admin",
|
||||
notificationChannels: "admin",
|
||||
workflowTasks: "admin",
|
||||
dashboard: "hidden",
|
||||
purchaseRequests: "admin",
|
||||
travelRequests: "admin",
|
||||
budgets: "admin",
|
||||
paymentBatches: "admin",
|
||||
apOperations: "admin",
|
||||
invoicePool: "admin",
|
||||
inventoryChecks: "admin",
|
||||
cutover: "admin",
|
||||
erpIntegrations: "admin",
|
||||
profile: "hidden",
|
||||
});
|
||||
|
||||
function normalizeModuleVisibilityJson(input) {
|
||||
const result = { ...DEFAULT_MODULE_VISIBILITY };
|
||||
if (!input || typeof input !== "object" || Array.isArray(input)) {
|
||||
return result;
|
||||
}
|
||||
|
||||
for (const [key, rawValue] of Object.entries(input)) {
|
||||
if (!(key in DEFAULT_MODULE_VISIBILITY)) {
|
||||
continue;
|
||||
}
|
||||
const value = String(rawValue ?? "").trim();
|
||||
if (MODULE_VISIBILITY_MODES.includes(value)) {
|
||||
result[key] = value;
|
||||
}
|
||||
}
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
function buildDefaultWorkspaceSetting() {
|
||||
return {
|
||||
id: null,
|
||||
persisted: false,
|
||||
profile: WORKSPACE_PROFILES.smallTeamInternal,
|
||||
orgMode: "single_company",
|
||||
primaryEntryMode: "password",
|
||||
notificationStrategy: "in_app",
|
||||
devicePriority: "desktop",
|
||||
moduleVisibility: { ...DEFAULT_MODULE_VISIBILITY },
|
||||
createdAt: null,
|
||||
updatedAt: null,
|
||||
updatedBy: null,
|
||||
};
|
||||
}
|
||||
|
||||
function mapWorkspaceSetting(record) {
|
||||
if (!record) {
|
||||
return buildDefaultWorkspaceSetting();
|
||||
}
|
||||
|
||||
return {
|
||||
id: record.id,
|
||||
persisted: true,
|
||||
profile: record.profile,
|
||||
orgMode: record.org_mode,
|
||||
primaryEntryMode: record.primary_entry_mode,
|
||||
notificationStrategy: record.notification_strategy,
|
||||
devicePriority: record.device_priority,
|
||||
moduleVisibility: normalizeModuleVisibilityJson(record.module_visibility_json),
|
||||
createdAt: record.created_at?.toISOString?.() ?? null,
|
||||
updatedAt: record.updated_at?.toISOString?.() ?? null,
|
||||
updatedBy: record.updated_by ?? null,
|
||||
};
|
||||
}
|
||||
|
||||
async function getWorkspaceSettingRecord(prisma) {
|
||||
return prisma.workspaceSetting.findFirst({ orderBy: { created_at: "asc" } });
|
||||
}
|
||||
|
||||
async function getWorkspaceSetting(prisma) {
|
||||
const record = await getWorkspaceSettingRecord(prisma);
|
||||
return mapWorkspaceSetting(record);
|
||||
}
|
||||
|
||||
async function upsertWorkspaceSetting(prisma, actorId, input = {}) {
|
||||
const current = await getWorkspaceSettingRecord(prisma);
|
||||
const data = {
|
||||
profile: WORKSPACE_PROFILES.smallTeamInternal,
|
||||
org_mode: "single_company",
|
||||
primary_entry_mode: "password",
|
||||
notification_strategy: "in_app",
|
||||
device_priority: "desktop",
|
||||
module_visibility_json: normalizeModuleVisibilityJson(input.moduleVisibility ?? input.module_visibility_json ?? current?.module_visibility_json ?? null),
|
||||
updated_by: actorId ?? null,
|
||||
};
|
||||
|
||||
const record = current
|
||||
? await prisma.workspaceSetting.update({ where: { id: current.id }, data })
|
||||
: await prisma.workspaceSetting.create({ data });
|
||||
|
||||
return mapWorkspaceSetting(record);
|
||||
}
|
||||
|
||||
function hasAnyPermission(hasPermission, employee, anyOf = []) {
|
||||
if (!anyOf.length) {
|
||||
return true;
|
||||
}
|
||||
return anyOf.some((permissionCode) => hasPermission(employee, permissionCode));
|
||||
}
|
||||
|
||||
async function resolveModuleGate({ prisma, config, employee, moduleKey, registryItem }) {
|
||||
if (!registryItem?.featureFlagKey) {
|
||||
return { enabled: true, reason: "no_feature_gate" };
|
||||
}
|
||||
|
||||
return evaluateFeatureFlag({
|
||||
prisma,
|
||||
config,
|
||||
flagKey: registryItem.featureFlagKey,
|
||||
departmentId: employee?.department_id ?? null,
|
||||
strictDepartment: false,
|
||||
});
|
||||
}
|
||||
|
||||
async function getSystemNavigation({ prisma, config, employee, hasPermission }) {
|
||||
const workspace = await getWorkspaceSetting(prisma);
|
||||
const sections = { main: [], admin: [], backup: [] };
|
||||
|
||||
for (const [moduleKey, registryItem] of Object.entries(NAVIGATION_REGISTRY)) {
|
||||
const placement = workspace.moduleVisibility[moduleKey] ?? DEFAULT_MODULE_VISIBILITY[moduleKey] ?? "hidden";
|
||||
if (placement === "hidden") {
|
||||
continue;
|
||||
}
|
||||
|
||||
if (!hasAnyPermission(hasPermission, employee, registryItem.anyOf)) {
|
||||
continue;
|
||||
}
|
||||
|
||||
const gate = await resolveModuleGate({ prisma, config, employee, moduleKey, registryItem });
|
||||
if (!gate.enabled) {
|
||||
continue;
|
||||
}
|
||||
|
||||
const entry = {
|
||||
key: registryItem.key,
|
||||
label: registryItem.label,
|
||||
icon: registryItem.icon,
|
||||
href: registryItem.href,
|
||||
placement,
|
||||
permissionCodes: registryItem.anyOf,
|
||||
featureFlagKey: registryItem.featureFlagKey ?? null,
|
||||
};
|
||||
|
||||
if (["purchaseRequests", "travelRequests", "budgets", "paymentBatches", "apOperations", "invoicePool", "inventoryChecks", "cutover", "erpIntegrations", "approvalRules", "userManagement", "departments", "masterData", "notificationChannels", "workflowTasks", "dashboard"].includes(moduleKey)) {
|
||||
sections.backup.push(entry);
|
||||
continue;
|
||||
}
|
||||
|
||||
if (placement === "admin") {
|
||||
sections.admin.push(entry);
|
||||
} else {
|
||||
sections.main.push(entry);
|
||||
}
|
||||
}
|
||||
|
||||
return {
|
||||
workspace,
|
||||
sections,
|
||||
recommendedRolePresets: [
|
||||
{ key: "owner", label: "老板", roleCodes: ["ceo"], description: "查看团队状态、审批汇总与关键管理入口。" },
|
||||
{ key: "admin", label: "管理员", roleCodes: ["admin"], description: "管理工作区、人员、流程、开关与审计。" },
|
||||
{ key: "employee", label: "员工", roleCodes: ["employee"], description: "日常使用 Portal、请假、报销、周报、待办。" },
|
||||
{ key: "manager", label: "主管", roleCodes: ["manager"], description: "处理审批、查看团队周报与在岗状态。" },
|
||||
],
|
||||
};
|
||||
}
|
||||
|
||||
module.exports = {
|
||||
WORKSPACE_PROFILES,
|
||||
NAVIGATION_REGISTRY,
|
||||
DEFAULT_MODULE_VISIBILITY,
|
||||
normalizeModuleVisibilityJson,
|
||||
buildDefaultWorkspaceSetting,
|
||||
mapWorkspaceSetting,
|
||||
getWorkspaceSetting,
|
||||
upsertWorkspaceSetting,
|
||||
getSystemNavigation,
|
||||
};
|
||||
在新工单中引用
屏蔽一个用户