完成五人团队正式内用最小收口（07-18-small-team-internal-readiness）

client/src/components/navigation/NavLinks.tsx

@@ -33,8 +33,8 @@ export const NAV_ITEMS: NavItem[] = [
   { to: "/purchase-requests", label: "采购", icon: "shopping_cart", anyOf: ["procurement.create", "procurement.view_own", "procurement.view_all", "procurement.manage"] },
   { to: "/travel-requests", label: "差旅申请", icon: "flight", anyOf: ["travel.view_all", "travel.manage", "travel.payment.manage"] },
   { to: "/budgets", label: "预算管理", icon: "account_balance", anyOf: ["budget.view", "budget.manage"] },
-  { to: "/payment-batches", label: "付款", icon: "payments", anyOf: ["payment.batch.manage", "risk.review.manage"] },
-  { to: "/ap-operations", label: "应付账款", icon: "account_balance_wallet", anyOf: ["payment.batch.manage", "risk.review.manage"] },
+  { to: "/payment-batches", label: "付款", icon: "payments", anyOf: ["payment.batch.manage", "risk.review.manage", "payment.batch.review"] },
+  { to: "/ap-operations", label: "应付账款", icon: "account_balance_wallet", anyOf: ["payment.batch.manage", "risk.review.manage", "payment.batch.review"] },
   { to: "/invoice-pool", label: "票据", icon: "receipt_long", anyOf: ["invoice.manage"] },
   { to: "/inventory-checks", label: "资产盘点", icon: "inventory", anyOf: ["asset.inventory"] },
   { to: "/dashboard", label: "数据看板", icon: "dashboard", anyOf: ["report.dashboard.view"] },
@@ -65,6 +65,12 @@ const MANAGEMENT_ACTIVE_PATHS = [
   "/audit-logs",
 ];
 const TEAM_NAVIGATION_ROLE_CODES = ["manager", "ceo", "finance_mgr", "hr", "admin"];
+const PAYMENT_REVIEWER_ROLE_CODES = ["manager", "ceo"];
+
+function hasPaymentReviewRole(roleCodes: string[], permissions: string[]) {
+  return roleCodes.some((roleCode) => PAYMENT_REVIEWER_ROLE_CODES.includes(roleCode)) &&
+    hasAnyPermission(permissions, ["payment.batch.review"]);
+}
 
 type ResolvedNavItem = {
   key?: string;
@@ -142,13 +148,15 @@ function renderBackupSection(items: ResolvedNavItem[], pathname: string, onNavig
 }
 
 function buildFallbackItems(permissions: string[], roleCodes: string[]) {
-  const financeOnlyPaths = new Set(["/payment-batches", "/ap-operations", "/invoice-pool"]);
+  const paymentPaths = new Set(["/payment-batches", "/ap-operations"]);
+  const financeOnlyPaths = new Set(["/invoice-pool"]);
   const backupOnlyPaths = new Set(BACKUP_NAV_ORDER);
   const mapItems = (paths: string[]) =>
     NAV_ITEMS.filter((item) => paths.includes(item.to))
       .filter((item) => item.to !== "/workflow/tasks" || hasBusinessApproverRole(roleCodes, permissions))
       .filter((item) => item.to !== "/team" || roleCodes.some((roleCode) => TEAM_NAVIGATION_ROLE_CODES.includes(roleCode)))
-      .filter((item) => !financeOnlyPaths.has(item.to) || hasFinanceRole(roleCodes, permissions) || roleCodes.includes("admin"))
+      .filter((item) => !paymentPaths.has(item.to) || hasFinanceRole(roleCodes, permissions) || hasPaymentReviewRole(roleCodes, permissions))
+      .filter((item) => !financeOnlyPaths.has(item.to) || hasFinanceRole(roleCodes, permissions))
       .filter((item) => !item.anyOf || hasAnyPermission(permissions, item.anyOf))
       .filter((item) => paths === BACKUP_NAV_ORDER || !backupOnlyPaths.has(item.to))
       .map((item) => ({ key: item.to, href: item.to, label: item.label, icon: item.icon }));