feat: import services and standardize Go 1.26.5

apps/base/mgt/internal/models/application.go

@@ -0,0 +1,28 @@
+package models
+
+import coreTypes "git.apinb.com/bsm-sdk/core/types"
+
+// 应用模型
+type MgtApplication struct {
+	coreTypes.Std_IICUDS                 // 标准字段
+	Title                string          `gorm:"column:title;type:varchar(255);" json:"title,omitempty"`                                                                        // 应用名称
+	Workspace            string          `gorm:"column:workspace;uniqueIndex" json:"workspace,omitempty"`                                                                       // 应用编码
+	Description          string          `gorm:"column:description;type:text" json:"description,omitempty"`                                                                     // 应用描述
+	Permissions          []MgtPermission `gorm:"foreignKey:Appid;references:ID" json:"permissions,omitempty"`                                                                   // 应用的所有权限
+	UsersPmn             []MgtPermission `gorm:"many2many:mgt_link_user_pmn;foreignKey:ID;joinForeignKey:app_id;References:ID;joinReferences:pmn_id" json:"user_pmn,omitempty"` // 用户-权限中间的应用层（用于树形结构查询）
+	Users                []MgtUser       `gorm:"many2many:mgt_link_user_app;foreignKey:ID;joinForeignKey:app_id;References:ID;joinReferences:user_id" json:"user,omitempty"`    // 用户关联的角色
+	Roles                []MgtRole       `gorm:"many2many:mgt_link_role_app;foreignKey:ID;joinForeignKey:app_id;References:ID;joinReferences:role_id" json:"roles,omitempty"`
+	RolesPmn             []MgtPermission `gorm:"many2many:mgt_link_role_pmn;foreignKey:ID;joinForeignKey:app_id;References:ID;joinReferences:pmn_id" json:"role_pmn,omitempty"`       // 角色-权限按应用（树形）
+	DepartmentsPmn       []MgtPermission `gorm:"many2many:mgt_link_dpt_pmn;foreignKey:ID;joinForeignKey:app_id;References:ID;joinReferences:pmn_id" json:"departments_pmn,omitempty"` // 部门-权限按应用（树形）
+}
+
+// func init() {
+// 	database.AppendMigrate(&Application{})
+// }
+
+func (table *MgtApplication) WorkspaceToId() (uint, error) {
+	if err := DBService.Where("workspace = ?", table.Workspace).First(table).Error; err != nil {
+		return 0, err
+	}
+	return table.ID, nil
+}

apps/base/mgt/internal/models/department.go

@@ -0,0 +1,22 @@
+package models
+
+import coreTypes "git.apinb.com/bsm-sdk/core/types"
+
+// 部门模型（应用->部门->权限：每个应用拥有不同的部门）
+type MgtDepartment struct {
+	coreTypes.Std_IICUDS                  // 标准字段
+	AppID                uint             `gorm:"column:app_id;default:0" json:"app_id,omitempty"`       // 所属应用ID
+	Name                 string           `gorm:"column:name;" json:"name,omitempty"`                    // 部门名称
+	ParentID             uint             `gorm:"column:parent_id;default:0" json:"parent_id,omitempty"` // 父部门ID
+	LeaderID             uint             `gorm:"column:leader_id;" json:"leader_id,omitempty"`          // 部门负责人ID
+	Leader               MgtUser          `gorm:"foreignKey:LeaderID;references:ID" json:"leader"`       // 部门负责人
+	Users                []MgtUser        `gorm:"many2many:mgt_link_user_dpt;foreignKey:ID;joinForeignKey:dpt_id;References:ID;joinReferences:user_id" json:"users,omitempty"`
+	Roles                []MgtRole        `gorm:"many2many:mgt_link_dpt_role;foreignKey:ID;joinForeignKey:dpt_id;References:ID;joinReferences:role_id" json:"roles,omitempty"`         // 部门关联的角色（部门替代用户组）
+	Permissions          []MgtPermission  `gorm:"many2many:mgt_link_dpt_pmn;foreignKey:ID;joinForeignKey:dpt_id;References:ID;joinReferences:pmn_id" json:"permissions,omitempty"`     // 部门关联的权限
+	PmnApplication       []MgtApplication `gorm:"many2many:mgt_link_dpt_pmn;foreignKey:ID;joinForeignKey:dpt_id;References:ID;joinReferences:app_id" json:"pmn_application,omitempty"` // 部门权限按应用聚合（树形用）
+	Children             []MgtDepartment  `gorm:"foreignKey:ParentID;references:ID" json:"children,omitempty"`                                                                         // 子部门
+}
+
+// func init() {
+// 	database.AppendMigrate(&Department{})
+// }

apps/base/mgt/internal/models/impl.go

@@ -0,0 +1,163 @@
+package models
+
+import (
+	"fmt"
+	"log"
+	"strings"
+
+	"git.apinb.com/bsm-apps/mgt/internal/config"
+	"git.apinb.com/bsm-sdk/core/database/sql"
+	"git.apinb.com/bsm-sdk/core/types"
+	"git.apinb.com/bsm-sdk/core/vars"
+
+	"gorm.io/driver/mysql"
+	"gorm.io/gorm"
+)
+
+var (
+	DBService     *gorm.DB
+	migrateTables = []any{
+		&MgtUser{},
+		&MgtDepartment{},
+		&MgtRole{},
+		&MgtPermission{},
+		&MgtApplication{},
+		&MgtLinkUserDpt{},
+		&MgtLinkUserRole{},
+		&MgtLinkUserPmn{},
+		&MgtLinkUserApp{},
+		&MgtLinkRolePmn{},
+		&MgtLinkRoleApp{},
+		&MgtLinkDptRole{},
+		&MgtLinkDptPmn{},
+	}
+)
+
+func New(driver string, dsn []string, options *types.SqlOptions) (err error) {
+	driver = strings.ToLower(driver)
+
+	switch driver {
+	case "mysql":
+		DBService, err = NewMysql(dsn, options)
+	case "postgres":
+		DBService, err = NewPostgres(dsn, options)
+	default:
+		log.Fatalln("Unsupported database driver:", driver)
+		return
+	}
+
+	if err != nil {
+		log.Fatalln(err)
+		return err
+	}
+	log.Println("数据库连接成功")
+
+	// 注册自定义连接表
+	setupRegister()
+
+	log.Println("自定义连接表注册成功")
+	// 自动迁移表
+	err = DBService.AutoMigrate(migrateTables...)
+	if err != nil {
+		log.Fatalln(err)
+		return err
+	}
+	log.Println("数据表迁移成功")
+
+	// 初始化管理员数据（幂等操作，如果已存在则跳过）
+	if config.InitRootUserEnabled() {
+		InitRootUserData()
+		log.Println("管理员数据初始化完成（如已存在则跳过）")
+	} else {
+		log.Println("已跳过管理员数据初始化（InitRootUser=false）")
+	}
+
+	return
+}
+
+func NewMysql(dsn []string, options *types.SqlOptions) (gormDb *gorm.DB, err error) {
+	//set connection default val.
+	if options == nil {
+		maxIdleConns := vars.SqlOptionMaxIdleConns
+		// MaxOpenConns 应该大于 MaxIdleConns，通常设置为 MaxIdleConns * 2 或更大
+		maxOpenConns := maxIdleConns * 2
+		if maxOpenConns < 10 {
+			maxOpenConns = 10 // 确保最小值
+		}
+		options = &types.SqlOptions{
+			MaxIdleConns:    maxIdleConns,
+			MaxOpenConns:    maxOpenConns,
+			ConnMaxLifetime: vars.SqlOptionConnMaxLifetime,
+			LogStdout:       false,
+			Debug:           true,
+		}
+	} else {
+		// 如果传入了options但MaxOpenConns未设置或小于MaxIdleConns，则自动调整
+		if options.MaxOpenConns <= 0 || options.MaxOpenConns < options.MaxIdleConns {
+			maxOpenConns := options.MaxIdleConns * 2
+			if maxOpenConns < 10 {
+				maxOpenConns = 10
+			}
+			options.MaxOpenConns = maxOpenConns
+		}
+	}
+
+	gormDb, err = gorm.Open(mysql.Open(dsn[0]), &gorm.Config{
+		SkipDefaultTransaction: true,
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	if options.Debug {
+		gormDb = gormDb.Debug()
+	}
+
+	// 获取通用数据库对象 sql.DB ，然后使用其提供的功能
+	sqlDB, _ := gormDb.DB()
+	// SetMaxIdleConns 用于设置连接池中空闲连接的最大数量。
+	sqlDB.SetMaxIdleConns(options.MaxIdleConns)
+	// SetMaxOpenConns 设置打开数据库连接的最大数量。
+	sqlDB.SetMaxOpenConns(options.MaxOpenConns)
+	// SetConnMaxLifetime 设置了连接可复用的最大时间。
+	sqlDB.SetConnMaxLifetime(options.ConnMaxLifetime)
+
+	return gormDb, nil
+}
+
+func NewPostgres(dsn []string, options *types.SqlOptions) (gormDb *gorm.DB, err error) {
+	fmt.Println(dsn[0])
+
+	//set connection default val.
+	if options == nil {
+		maxIdleConns := vars.SqlOptionMaxIdleConns
+		// MaxOpenConns 应该大于 MaxIdleConns，通常设置为 MaxIdleConns * 2 或更大
+		maxOpenConns := maxIdleConns * 2
+		if maxOpenConns < 10 {
+			maxOpenConns = 10 // 确保最小值
+		}
+		options = &types.SqlOptions{
+			MaxIdleConns:    maxIdleConns,
+			MaxOpenConns:    maxOpenConns,
+			ConnMaxLifetime: vars.SqlOptionConnMaxLifetime,
+			LogStdout:       false,
+			Debug:           true,
+		}
+	} else {
+		// 如果传入了options但MaxOpenConns未设置或小于MaxIdleConns，则自动调整
+		if options.MaxOpenConns <= 0 || options.MaxOpenConns < options.MaxIdleConns {
+			maxOpenConns := options.MaxIdleConns * 2
+			if maxOpenConns < 10 {
+				maxOpenConns = 10
+			}
+			options.MaxOpenConns = maxOpenConns
+		}
+	}
+
+	db, err := sql.NewPostgreSql(dsn[0], options)
+	if err != nil {
+		return nil, err
+	}
+
+	return db, nil
+}

apps/base/mgt/internal/models/init_db.go

@@ -0,0 +1,246 @@
+package models
+
+import (
+	"log"
+
+	"git.apinb.com/bsm-sdk/core/types"
+	"git.apinb.com/bsm-sdk/core/utils"
+	"golang.org/x/crypto/bcrypt"
+	"gorm.io/gorm"
+)
+
+// 初始化超级管理员用户
+func InitRootUserData() {
+	salt := utils.UUID()
+	account := "root"
+	password := "123456"
+	hashedPassword, err := bcrypt.GenerateFromPassword([]byte(password+salt), bcrypt.DefaultCost)
+	if err != nil {
+		log.Printf("初始化root密码加密失败: %v", err)
+		return
+	}
+
+	var cnt int64
+	DBService.Model(&MgtUser{}).Where("account=?", account).Count(&cnt)
+	if cnt > 0 {
+		return
+	}
+
+	admin := MgtUser{
+		Std_IICUDS: types.Std_IICUDS{Identity: utils.UUID(), Status: 1},
+		Name:       account,
+		Account:    account,
+		Phone:      "10000000000",
+		Password:   string(hashedPassword),
+		Email:      "root@apinb.com",
+		Salt:       salt,
+	}
+
+	app := MgtApplication{
+		Std_IICUDS:  types.Std_IICUDS{Identity: utils.UUID(), Status: 1},
+		Workspace:   "DEF",
+		Title:       "管理系统",
+		Description: "管理系统",
+	}
+
+	adminRole := MgtRole{
+		Std_IICUDS:  types.Std_IICUDS{Identity: utils.UUID(), Status: 1},
+		Name:        "超级管理员",
+		Description: "系统超级管理员，拥有所有权限",
+	}
+
+	if err := DBService.Transaction(func(tx *gorm.DB) error {
+		// 1. 创建或获取应用
+		if err := tx.Model(&MgtApplication{}).Where("workspace=?", app.Workspace).FirstOrCreate(&app).Error; err != nil {
+			log.Printf("初始化应用异常: %v", err)
+			return err
+		}
+
+		// 2. 创建管理员用户
+		if err := tx.Model(&MgtUser{}).Where("account=?", admin.Account).FirstOrCreate(&admin).Error; err != nil {
+			log.Printf("初始化用户异常: %v", err)
+			return err
+		}
+
+		// 3. 创建管理员角色
+		if err := tx.Model(&MgtRole{}).Where("name=?", adminRole.Name).FirstOrCreate(&adminRole).Error; err != nil {
+			log.Printf("初始化角色异常: %v", err)
+			return err
+		}
+		// 4. 默认权限：失败则内置 6 条管理菜单
+		perms, errP := buildPermissions(tx, app.ID)
+		if errP != nil {
+			log.Printf("初始化权限异常: %v", errP)
+			return errP
+		}
+
+		for _, seed := range perms {
+			pmn := MgtPermission{
+				Std_IICUDS: types.Std_IICUDS{Identity: utils.UUID(), Status: 1},
+				Code:       seed.Code,
+				Title:      seed.Title,
+				MenuPath:   seed.MenuPath,
+				Type:       seed.Type,
+				SortKey:    seed.SortKey,
+				Appid:      app.ID,
+			}
+			if err := tx.Where("app_id = ? AND code = ?", app.ID, seed.Code).FirstOrCreate(&pmn).Error; err != nil {
+				log.Printf("初始化权限异常: %v", err)
+				return err
+			}
+		}
+
+		// 5. 关联应用-用户
+		userAppLink := MgtLinkUserApp{AppId: app.ID, UserId: admin.ID}
+		if err := tx.Where("app_id=? AND user_id=?", app.ID, admin.ID).FirstOrCreate(&userAppLink).Error; err != nil {
+			log.Printf("初始化应用-用户的关联异常: %v", err)
+			return err
+		}
+
+		// 6. 关联用户-角色
+		userRoleLink := MgtLinkUserRole{UserId: admin.ID, RoleId: adminRole.ID}
+		if err := tx.Where("user_id=? AND role_id=?", admin.ID, adminRole.ID).FirstOrCreate(&userRoleLink).Error; err != nil {
+			log.Printf("初始化用户-角色的关联异常: %v", err)
+			return err
+		}
+
+		// 7. 关联角色-应用
+		roleAppLink := MgtLinkRoleApp{AppId: app.ID, RoleId: adminRole.ID}
+		if err := tx.Where("app_id=? AND role_id=?", app.ID, adminRole.ID).FirstOrCreate(&roleAppLink).Error; err != nil {
+			log.Printf("初始化角色-应用的关联异常: %v", err)
+			return err
+		}
+
+		// 8. 关联角色-权限
+		for _, pmn := range perms {
+			rolePmnLink := MgtLinkRolePmn{
+				RoleId: adminRole.ID,
+				AppId:  app.ID,
+				PmnId:  pmn.ID,
+			}
+			if err := tx.Where("role_id=? AND app_id=? AND pmn_id=?", adminRole.ID, app.ID, pmn.ID).FirstOrCreate(&rolePmnLink).Error; err != nil {
+				log.Printf("初始化角色-权限的关联异常: %v", err)
+				return err
+			}
+
+			// 9. 关联用户-权限
+			userPmnLink := MgtLinkUserPmn{
+				UserId: admin.ID,
+				AppId:  app.ID,
+				PmnId:  pmn.ID,
+			}
+			if err := tx.Where("user_id=? AND app_id=? AND pmn_id=?", admin.ID, app.ID, pmn.ID).FirstOrCreate(&userPmnLink).Error; err != nil {
+				log.Printf("初始化用户-权限的关联异常: %v", err)
+				return err
+			}
+		}
+
+		return nil
+	}); err != nil {
+		log.Printf("初始化数据事务失败: %v", err)
+		return
+	}
+
+	log.Printf("【初始化应用成功】%v:%v", app.Title, app.Workspace)
+	log.Printf("【初始化用户成功】%v，请尽快修改默认密码", admin.Account)
+	log.Printf("【初始化角色成功】%v", adminRole.Name)
+}
+
+func setupRegister() {
+	var err error
+	err = DBService.SetupJoinTable(&MgtUser{}, "Departments", &MgtLinkUserDpt{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtDepartment{}, "Users", &MgtLinkUserDpt{})
+	if err != nil {
+		log.Println(err)
+	}
+
+	err = DBService.SetupJoinTable(&MgtUser{}, "Roles", &MgtLinkUserRole{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtRole{}, "Users", &MgtLinkUserRole{})
+	if err != nil {
+		log.Println(err)
+	}
+
+	err = DBService.SetupJoinTable(&MgtUser{}, "Permissions", &MgtLinkUserPmn{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtPermission{}, "Users", &MgtLinkUserPmn{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtUser{}, "PmnApplication", &MgtLinkUserPmn{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtApplication{}, "UsersPmn", &MgtLinkUserPmn{})
+	if err != nil {
+		log.Println(err)
+	}
+
+	err = DBService.SetupJoinTable(&MgtUser{}, "Application", &MgtLinkUserApp{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtApplication{}, "Users", &MgtLinkUserApp{})
+	if err != nil {
+		log.Println(err)
+	}
+
+	err = DBService.SetupJoinTable(&MgtRole{}, "Permissions", &MgtLinkRolePmn{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtPermission{}, "Roles", &MgtLinkRolePmn{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtRole{}, "PmnApplication", &MgtLinkRolePmn{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtApplication{}, "RolesPmn", &MgtLinkRolePmn{})
+	if err != nil {
+		log.Println(err)
+	}
+
+	err = DBService.SetupJoinTable(&MgtRole{}, "Application", &MgtLinkRoleApp{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtApplication{}, "Roles", &MgtLinkRoleApp{})
+	if err != nil {
+		log.Println(err)
+	}
+
+	err = DBService.SetupJoinTable(&MgtDepartment{}, "Roles", &MgtLinkDptRole{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtRole{}, "Departments", &MgtLinkDptRole{})
+	if err != nil {
+		log.Println(err)
+	}
+
+	err = DBService.SetupJoinTable(&MgtDepartment{}, "Permissions", &MgtLinkDptPmn{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtPermission{}, "Departments", &MgtLinkDptPmn{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtDepartment{}, "PmnApplication", &MgtLinkDptPmn{})
+	if err != nil {
+		log.Println(err)
+	}
+	err = DBService.SetupJoinTable(&MgtApplication{}, "DepartmentsPmn", &MgtLinkDptPmn{})
+	if err != nil {
+		log.Println(err)
+	}
+}

apps/base/mgt/internal/models/init_menu.go

@@ -0,0 +1,140 @@
+package models
+
+import (
+	"encoding/json"
+	"errors"
+	"log"
+	"os"
+	"strings"
+
+	"git.apinb.com/bsm-sdk/core/types"
+	"git.apinb.com/bsm-sdk/core/utils"
+	"gorm.io/gorm"
+)
+
+// DefaultFilePath 相对进程工作目录，与服务启动时读取配置方式一致
+const DefaultFilePath = "etc/menu.json"
+
+// File 与 etc/menu_structure.json 根结构一致
+type File struct {
+	Menus       []Node `json:"menus"`
+	TotalLevel1 int    `json:"total_level1"`
+	TotalLevel2 int    `json:"total_level2"`
+}
+
+// Node 菜单节点（可嵌套 children）
+type Node struct {
+	Title       string `json:"title"`
+	TitleEn     string `json:"title_en"`
+	Code        string `json:"code"`
+	Description string `json:"description"`
+	MenuPath    string `json:"menu_path"`
+	Type        int8   `json:"type"`
+	SortKey     int8   `json:"sort_key"`
+	IsWebPage   bool   `json:"is_web_page"`
+	IsNewTab    bool   `json:"is_new_tab"`
+	IsFull      bool   `json:"is_full"`
+	HideMenu    bool   `json:"hide_menu"`
+	WebURL      string `json:"web_url"`
+	Component   string `json:"component"`
+	Children    []Node `json:"children"`
+}
+
+// Load 读取并解析 path
+func Load(path string) (*File, error) {
+	raw, err := os.ReadFile(path)
+	if err != nil {
+		return nil, err
+	}
+	var f File
+	if err := json.Unmarshal(raw, &f); err != nil {
+		return nil, err
+	}
+	return &f, nil
+}
+
+func buildPermissions(tx *gorm.DB, appID uint) ([]MgtPermission, error) {
+	mf, err := Load(DefaultFilePath)
+	if err != nil {
+		return nil, err
+	}
+	if len(mf.Menus) == 0 {
+		return nil, errors.New("menu is empty")
+	}
+	var out []MgtPermission
+	if err := walkMenuTree(tx, appID, 0, mf.Menus, &out); err != nil {
+		return nil, err
+	}
+	log.Printf("已从 %s 载入 %d 条权限（含子级）", DefaultFilePath, len(out))
+	return out, nil
+}
+
+func walkMenuTree(tx *gorm.DB, appID uint, parentID uint, nodes []Node, out *[]MgtPermission) error {
+	for i := range nodes {
+		p, err := upsertMenuPermissionFromJSON(tx, appID, parentID, nodes[i])
+		if err != nil {
+			return err
+		}
+		*out = append(*out, p)
+		if len(nodes[i].Children) > 0 {
+			if err := walkMenuTree(tx, appID, p.ID, nodes[i].Children, out); err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
+func upsertMenuPermissionFromJSON(tx *gorm.DB, appID, parentID uint, n Node) (MgtPermission, error) {
+	code := strings.TrimSpace(n.Code)
+	if code == "" {
+		code = "menu_" + strings.ReplaceAll(utils.UUID(), "-", "")
+	}
+	typ := n.Type
+	if typ == 0 {
+		typ = 1
+	}
+	p := MgtPermission{
+		Std_IICUDS:  types.Std_IICUDS{Identity: utils.UUID(), Status: 1},
+		Title:       n.Title,
+		TitleEn:     n.TitleEn,
+		Code:        code,
+		Description: n.Description,
+		Appid:       appID,
+		ParentID:    parentID,
+		MenuPath:    n.MenuPath,
+		MenuIcon:    "",
+		SortKey:     n.SortKey,
+		Type:        typ,
+		Component:   n.Component,
+		IsWebPage:   n.IsWebPage,
+		IsNewTab:    n.IsNewTab,
+		IsFull:      n.IsFull,
+		HideMenu:    n.HideMenu,
+		WebUrl:      n.WebURL,
+	}
+	var existingPmn MgtPermission
+	err := tx.Model(&MgtPermission{}).Where("code = ? AND app_id = ?", p.Code, appID).First(&existingPmn).Error
+	if err == gorm.ErrRecordNotFound {
+		if err := tx.Create(&p).Error; err != nil {
+			return p, err
+		}
+		return p, nil
+	}
+	if err != nil {
+		return p, err
+	}
+	p.ID = existingPmn.ID
+	return p, nil
+}
+
+func builtinManagementMenuTemplates() []MgtPermission {
+	return []MgtPermission{
+		{Title: "系统管理", TitleEn: "System Management", Code: "system:management", Description: "系统管理菜单", MenuPath: "/system", MenuIcon: "setting", SortKey: 1, Type: 1},
+		{Title: "用户管理", TitleEn: "User Management", Code: "user:management", Description: "用户管理菜单", MenuPath: "/system/user", MenuIcon: "user", SortKey: 2, Type: 1},
+		{Title: "角色管理", TitleEn: "Role Management", Code: "role:management", Description: "角色管理菜单", MenuPath: "/system/role", MenuIcon: "team", SortKey: 3, Type: 1},
+		{Title: "权限管理", TitleEn: "Permission Management", Code: "permission:management", Description: "权限管理菜单", MenuPath: "/system/permission", MenuIcon: "safety", SortKey: 4, Type: 1},
+		{Title: "应用管理", TitleEn: "Application Management", Code: "application:management", Description: "应用管理菜单", MenuPath: "/system/application", MenuIcon: "appstore", SortKey: 5, Type: 1},
+		{Title: "部门管理", TitleEn: "Department Management", Code: "department:management", Description: "部门管理菜单", MenuPath: "/system/department", MenuIcon: "apartment", SortKey: 6, Type: 1},
+	}
+}

apps/base/mgt/internal/models/link_dpt_pmn.go

@@ -0,0 +1,17 @@
+package models
+
+import (
+	"time"
+)
+
+// 部门与权限关联表（部门替代用户组：一个部门可关联多个权限，按应用维度与 user_pmn/role_pmn 一致）
+type MgtLinkDptPmn struct {
+	DptId     uint      `gorm:"column:dpt_id;primaryKey" json:"dpt_id"`                       // 部门ID
+	AppId     uint      `gorm:"column:app_id;primaryKey" json:"app_id"`                       // 应用ID
+	PmnId     uint      `gorm:"column:pmn_id;primaryKey" json:"pmn_id"`                       // 权限ID
+	CreatedAt time.Time `gorm:"column:created_at;autoCreateTime" json:"created_at,omitempty"` // 创建时间
+}
+
+func (MgtLinkDptPmn) TableName() string {
+	return "mgt_link_dpt_pmn"
+}

apps/base/mgt/internal/models/link_dpt_role.go

@@ -0,0 +1,16 @@
+package models
+
+import (
+	"time"
+)
+
+// 部门与角色关联表（部门替代用户组：一个部门可关联多个角色）
+type MgtLinkDptRole struct {
+	DptId     uint      `gorm:"column:dpt_id;primaryKey" json:"dpt_id"`                       // 部门ID
+	RoleId    uint      `gorm:"column:role_id;primaryKey" json:"role_id"`                     // 角色ID
+	CreatedAt time.Time `gorm:"column:created_at;autoCreateTime" json:"created_at,omitempty"` // 创建时间
+}
+
+func (MgtLinkDptRole) TableName() string {
+	return "mgt_link_dpt_role"
+}

apps/base/mgt/internal/models/link_dpt_user.go

@@ -0,0 +1,20 @@
+package models
+
+import (
+	"time"
+)
+
+// 用户与部门关联表
+type MgtLinkUserDpt struct {
+	UserId    uint      `gorm:"column:user_id;primaryKey" json:"user_id"`                     // 用户ID
+	DptId     uint      `gorm:"column:dpt_id;primaryKey" json:"dpt_id"`                       // 部门ID
+	CreatedAt time.Time `gorm:"column:created_at;autoCreateTime" json:"created_at,omitempty"` // 创建时间
+}
+
+func (MgtLinkUserDpt) TableName() string {
+	return "mgt_link_user_dpt"
+}
+
+// func init() {
+// 	database.AppendMigrate(&MgtLinkUserDpt{})
+// }

apps/base/mgt/internal/models/link_role_app.go

@@ -0,0 +1,20 @@
+package models
+
+import (
+	"time"
+)
+
+// 角色与应用关联表
+type MgtLinkRoleApp struct {
+	AppId     uint      `gorm:"column:app_id;primaryKey" json:"app_id"`                       // 应用ID
+	RoleId    uint      `gorm:"column:role_id;primaryKey" json:"role_id"`                     // 角色ID
+	CreatedAt time.Time `gorm:"column:created_at;autoCreateTime" json:"created_at,omitempty"` // 创建时间
+}
+
+func (MgtLinkRoleApp) TableName() string {
+	return "mgt_link_role_app"
+}
+
+// func init() {
+// 	database.AppendMigrate(&MgtLinkRoleApp{})
+// }

apps/base/mgt/internal/models/link_role_pmn.go

@@ -0,0 +1,40 @@
+package models
+
+import (
+	"time"
+
+	"gorm.io/gorm"
+)
+
+// 角色预设权限关联表
+type MgtLinkRolePmn struct {
+	RoleId    uint      `gorm:"column:role_id;primaryKey" json:"role_id"`                     // 角色ID
+	AppId     uint      `gorm:"column:app_id;primaryKey" json:"app_id"`                       // 应用ID
+	PmnId     uint      `gorm:"column:pmn_id;primaryKey" json:"pmn_id"`                       // 权限ID
+	CreatedAt time.Time `gorm:"column:created_at;autoCreateTime" json:"created_at,omitempty"` // 创建时间
+}
+
+func (MgtLinkRolePmn) TableName() string {
+	return "mgt_link_role_pmn"
+}
+
+// func init() {
+// 	database.AppendMigrate(&MgtLinkRolePmn{})
+// }
+
+// AfterDelete钩子：仅当该角色在该应用下不再拥有任何权限时，移除角色-应用关联
+func (l *MgtLinkRolePmn) AfterDelete(tx *gorm.DB) error {
+	var count int64
+	if err := tx.Model(&MgtLinkRolePmn{}).
+		Where("app_id = ? AND role_id = ?", l.AppId, l.RoleId).
+		Count(&count).Error; err != nil {
+		return err
+	}
+	if count == 0 {
+		if err := tx.Where("app_id = ? AND role_id = ?", l.AppId, l.RoleId).
+			Delete(&MgtLinkRoleApp{}).Error; err != nil {
+			return err
+		}
+	}
+	return nil
+}

apps/base/mgt/internal/models/link_user_app.go

@@ -0,0 +1,20 @@
+package models
+
+import (
+	"time"
+)
+
+// 用户与应用关联表
+type MgtLinkUserApp struct {
+	AppId     uint      `gorm:"column:app_id;primaryKey" json:"app_id"`                       // 应用ID
+	UserId    uint      `gorm:"column:user_id;primaryKey" json:"user_id"`                     // 用户ID
+	CreatedAt time.Time `gorm:"column:created_at;autoCreateTime" json:"created_at,omitempty"` // 创建时间
+}
+
+func (MgtLinkUserApp) TableName() string {
+	return "mgt_link_user_app"
+}
+
+// func init() {
+// 	database.AppendMigrate(&MgtLinkUserApp{})
+// }

apps/base/mgt/internal/models/link_user_pmn.go

@@ -0,0 +1,40 @@
+package models
+
+import (
+	"time"
+
+	"gorm.io/gorm"
+)
+
+// 用户的自定义权限关联表
+type MgtLinkUserPmn struct {
+	UserId    uint      `gorm:"column:user_id;primaryKey" json:"user_id"`                     // 用户ID
+	AppId     uint      `gorm:"column:app_id;primaryKey" json:"app_id"`                       // 应用ID
+	PmnId     uint      `gorm:"column:pmn_id;primaryKey" json:"pmn_id"`                       // 权限ID
+	CreatedAt time.Time `gorm:"column:created_at;autoCreateTime" json:"created_at,omitempty"` // 创建时间
+}
+
+func (MgtLinkUserPmn) TableName() string {
+	return "mgt_link_user_pmn"
+}
+
+// func init() {
+// 	database.AppendMigrate(&MgtLinkUserPmn{})
+// }
+
+// AfterDelete钩子：仅当该用户在该应用下不再拥有任何权限时，移除用户-应用关联
+func (l *MgtLinkUserPmn) AfterDelete(tx *gorm.DB) error {
+	var count int64
+	if err := tx.Model(&MgtLinkUserPmn{}).
+		Where("app_id = ? AND user_id = ?", l.AppId, l.UserId).
+		Count(&count).Error; err != nil {
+		return err
+	}
+	if count == 0 {
+		if err := tx.Where("app_id = ? AND user_id = ?", l.AppId, l.UserId).
+			Delete(&MgtLinkUserApp{}).Error; err != nil {
+			return err
+		}
+	}
+	return nil
+}

apps/base/mgt/internal/models/link_user_role.go

@@ -0,0 +1,20 @@
+package models
+
+import (
+	"time"
+)
+
+// 用户与角色关联表
+type MgtLinkUserRole struct {
+	RoleId    uint      `gorm:"column:role_id;primaryKey" json:"role_id"`                     // 角色ID
+	UserId    uint      `gorm:"column:user_id;primaryKey" json:"user_id"`                     // 用户ID
+	CreatedAt time.Time `gorm:"column:created_at;autoCreateTime" json:"created_at,omitempty"` // 创建时间
+}
+
+func (MgtLinkUserRole) TableName() string {
+	return "mgt_link_user_role"
+}
+
+// func init() {
+// 	database.AppendMigrate(&MgtLinkUserRole{})
+// }

apps/base/mgt/internal/models/permission.go

@@ -0,0 +1,35 @@
+package models
+
+import coreTypes "git.apinb.com/bsm-sdk/core/types"
+
+// 权限模型
+type MgtPermission struct {
+	coreTypes.Std_IICUDS                 // 标准字段
+	Title                string          `gorm:"column:title;type:varchar(255);" json:"title"`                               // 权限名称
+	TitleEn              string          `gorm:"column:title_en;type:varchar(255);" json:"title_en"`                         // 权限名称
+	Code                 string          `gorm:"column:code;type:varchar(255);uniqueIndex:idx_mgt_pmn_app_code" json:"code"` // 权限标识，与 app_id 联合唯一
+	Description          string          `gorm:"column:description;type:text" json:"description"`                            // 权限描述
+	Appid                uint            `gorm:"column:app_id;uniqueIndex:idx_mgt_pmn_app_code" json:"app_id"`               // 应用ID
+	ParentID             uint            `gorm:"column:parent_id;default:0" json:"parent_id" `                               // 父级ID
+	MenuPath             string          `gorm:"column:menu_path;" json:"menu_path"`                                         // 菜单路径
+	MenuIcon             string          `gorm:"column:menu_icon;" json:"menu_icon"`                                         // 菜单图标
+	SortKey              int8            `gorm:"column:sort_key;default:0;" json:"sort_key"`                                 // 排序键
+	Type                 int8            `gorm:"column:type;comment:1=菜单 2=按钮" json:"type"`                                  // 类型 1=菜单 2=按钮
+	Component            string          `gorm:"column:component;type:varchar(255)" json:"component"`                        // 组件路径 非必填
+	IsWebPage            bool            `gorm:"column:is_web_page;default:0" json:"is_web_page"`
+	IsNewTab             bool            `gorm:"column:is_new_tab;default:0" json:"is_new_tab"`                                                                                   // 是否在新标签页打开 非必填
+	IsFull               bool            `gorm:"column:is_full;default:0" json:"is_full"`                                                                                         // 单独页面，不包含菜单，默认为 false
+	HideMenu             bool            `gorm:"column:hide_menu;default:0" json:"hide_menu"`                                                                                     // 隐藏菜单栏的菜单，默认为 false
+	WebUrl               string          `gorm:"column:web_url;type:varchar(500)" json:"web_url"`                                                                                 // 网页地址
+	Users                []MgtUser       `gorm:"many2many:mgt_link_user_pmn;foreignKey:ID;joinForeignKey:pmn_id;References:ID;joinReferences:user_id" json:"users,omitempty"`     // 权限关联的用户
+	Roles                []MgtRole       `gorm:"many2many:mgt_link_role_pmn;foreignKey:ID;joinForeignKey:pmn_id;References:ID;joinReferences:role_id" json:"roles,omitempty"`     // 权限关联的角色
+	Departments          []MgtDepartment `gorm:"many2many:mgt_link_dpt_pmn;foreignKey:ID;joinForeignKey:pmn_id;References:ID;joinReferences:dpt_id" json:"departments,omitempty"` // 关联的部门（部门替代用户组）
+	Applications         MgtApplication  `gorm:"foreignKey:Appid;references:ID" json:"applications,omitempty"`
+	Children             []MgtPermission `gorm:"foreignKey:ParentID;references:ID" json:"children,omitempty"` // 子集
+}
+
+func (MgtPermission) TableName() string { return "mgt_permission" }
+
+// func init() {
+// 	database.AppendMigrate(&Permission{})
+// }

apps/base/mgt/internal/models/query.go

@@ -0,0 +1 @@
+package models

apps/base/mgt/internal/models/role.go

@@ -0,0 +1,19 @@
+package models
+
+import coreTypes "git.apinb.com/bsm-sdk/core/types"
+
+// 角色模型
+type MgtRole struct {
+	coreTypes.Std_IICUDS                  // 标准字段
+	Name                 string           `gorm:"column:name;type:varchar(255);uniqueIndex" json:"name,omitempty"`                                                                       // 角色名称
+	Description          string           `gorm:"column:description;type:text" json:"description,omitempty"`                                                                             // 角色描述
+	Users                []MgtUser        `gorm:"many2many:mgt_link_user_role;foreignKey:ID;joinForeignKey:role_id;References:ID;joinReferences:user_id" json:"users,omitempty"`         // 角色关联的用户
+	Departments          []MgtDepartment  `gorm:"many2many:mgt_link_dpt_role;foreignKey:ID;joinForeignKey:role_id;References:ID;joinReferences:dpt_id" json:"departments,omitempty"`     // 关联的部门（部门替代用户组）
+	Permissions          []MgtPermission  `gorm:"many2many:mgt_link_role_pmn;foreignKey:ID;joinForeignKey:role_id;References:ID;joinReferences:pmn_id" json:"permissions,omitempty"`     // 角色关联的权限
+	PmnApplication       []MgtApplication `gorm:"many2many:mgt_link_role_pmn;foreignKey:ID;joinForeignKey:role_id;References:ID;joinReferences:app_id" json:"pmn_application,omitempty"` // 用户关联的角色
+	Application          []MgtApplication `gorm:"many2many:mgt_link_role_app;foreignKey:ID;joinForeignKey:role_id;References:ID;joinReferences:app_id" json:"application,omitempty"`     // 用户关联的角色
+}
+
+// func init() {
+// 	database.AppendMigrate(&Role{})
+// }

apps/base/mgt/internal/models/user.go

@@ -0,0 +1,38 @@
+package models
+
+import (
+	"time"
+
+	coreTypes "git.apinb.com/bsm-sdk/core/types"
+)
+
+// 用户模型
+type MgtUser struct {
+	coreTypes.Std_IICUDS                  // 标准字段
+	Name                 string           `gorm:"column:name;type:varchar(255);" json:"name,omitempty"`                  // 姓名
+	Account              string           `gorm:"column:account;type:varchar(255);uniqueIndex" json:"account,omitempty"` // 用户名
+	Phone                string           `gorm:"column:phone;type:varchar(255);" json:"phone,omitempty"`                // 手机号
+	Password             string           `gorm:"column:password;type:varchar(255);" json:"password,omitempty"`          // 密码
+	Email                string           `gorm:"column:email;type:varchar(255);" json:"email,omitempty"`                // 邮箱
+	Avatar               string           `gorm:"column:avatar;type:varchar(255);" json:"avatar,omitempty"`              // 头像
+	Salt                 string           `gorm:"column:salt;type:varchar(255);" json:"salt,omitempty"`                  // 密码盐
+	LastLoginAt          *time.Time       `gorm:"column:last_login_at;" json:"last_login_at,omitempty"`                  // 最后登录时间
+	Departments          []MgtDepartment  `gorm:"many2many:mgt_link_user_dpt;foreignKey:ID;joinForeignKey:user_id;References:ID;joinReferences:dpt_id" json:"departments,omitempty"`
+	Roles                []MgtRole        `gorm:"many2many:mgt_link_user_role;foreignKey:ID;joinForeignKey:user_id;References:ID;joinReferences:role_id" json:"roles,omitempty"`
+	Application          []MgtApplication `gorm:"many2many:mgt_link_user_app;foreignKey:ID;joinForeignKey:user_id;References:ID;joinReferences:app_id" json:"application,omitempty"`     // 用户关联的角色
+	PmnApplication       []MgtApplication `gorm:"many2many:mgt_link_user_pmn;foreignKey:ID;joinForeignKey:user_id;References:ID;joinReferences:app_id" json:"pmn_application,omitempty"` // 用户关联的角色
+	Permissions          []MgtPermission  `gorm:"many2many:mgt_link_user_pmn;foreignKey:ID;joinForeignKey:user_id;References:ID;joinReferences:pmn_id" json:"permissions,omitempty"`     // 用户关联的权限
+}
+
+//	func init() {
+//		database.AppendMigrate(&User{})
+//	}
+
+func UpdateLastLoginDate(id uint) error {
+	now := time.Now()
+	err := DBService.Model(&MgtUser{}).Where("id = ?", id).Update("last_login_at", now).Error
+	if err != nil {
+		return err
+	}
+	return nil
+}