feat: build collaboration workspaces

modules/core/server/permissions.ts

@@ -29,6 +29,14 @@ export const PERMISSION_DEFINITIONS: PermissionDefinition[] = [
   { id: "care:manage", label: "处理护理任务", category: "护理", description: "启动、完成和维护护理服务执行记录。" },
   { id: "health:read", label: "查看健康数据", category: "健康", description: "查看老人健康档案、生命体征和异常复核。" },
   { id: "health:manage", label: "管理健康数据", category: "健康", description: "维护健康档案、生命体征、慢病和异常复核。" },
+  { id: "device:read", label: "查看设备运维", category: "协同", description: "查看设备台账和维修工单。" },
+  { id: "device:manage", label: "管理设备运维", category: "协同", description: "维护设备台账、维修工单和处理状态。" },
+  { id: "notice:read", label: "查看公告通知", category: "协同", description: "查看公告和阅读状态。" },
+  { id: "notice:manage", label: "管理公告通知", category: "协同", description: "创建、发布、撤回和删除公告。" },
+  { id: "alert:read", label: "查看规则预警", category: "协同", description: "查看预警规则和触发记录。" },
+  { id: "alert:manage", label: "管理规则预警", category: "协同", description: "维护预警规则并处理触发记录。" },
+  { id: "family:read", label: "查看家属服务", category: "协同", description: "查看家属联系人、探访预约和服务反馈。" },
+  { id: "family:manage", label: "管理家属服务", category: "协同", description: "维护家属联系人、探访预约和反馈处理。" },
   { id: "facility:read", label: "查看房间床位", category: "床位", description: "查看房间、床位和占用状态。" },
   { id: "facility:manage", label: "管理房间床位", category: "床位", description: "维护院区、房间、床位和床位状态。" },
   { id: "admission:read", label: "查看入住", category: "入住", description: "查看入住、换床、退住历史。" },
@@ -97,6 +105,14 @@ export const SYSTEM_ROLE_DEFINITIONS: SeedRole[] = [
       "care:manage",
       "health:read",
       "health:manage",
+      "device:read",
+      "device:manage",
+      "notice:read",
+      "notice:manage",
+      "alert:read",
+      "alert:manage",
+      "family:read",
+      "family:manage",
       "facility:read",
       "facility:manage",
       "admission:read",
@@ -119,6 +135,14 @@ export const SYSTEM_ROLE_DEFINITIONS: SeedRole[] = [
       "care:manage",
       "health:read",
       "health:manage",
+      "device:read",
+      "device:manage",
+      "notice:read",
+      "notice:manage",
+      "alert:read",
+      "alert:manage",
+      "family:read",
+      "family:manage",
       "facility:read",
       "facility:manage",
       "admission:read",
@@ -133,13 +157,35 @@ export const SYSTEM_ROLE_DEFINITIONS: SeedRole[] = [
     key: "caregiver",
     scope: "organization",
     description: "照护人员，查看床位和维护老人照护信息。",
-    permissions: ["care:read", "care:manage", "health:read", "health:manage", "facility:read", "admission:read", "elder:read", "elder:update"],
+    permissions: [
+      "care:read",
+      "care:manage",
+      "health:read",
+      "health:manage",
+      "device:read",
+      "alert:read",
+      "family:read",
+      "facility:read",
+      "admission:read",
+      "elder:read",
+      "elder:update",
+    ],
   },
   {
     key: "viewer",
     scope: "organization",
     description: "普通用户，只读查看老人、床位和入住信息。",
-    permissions: ["care:read", "health:read", "facility:read", "admission:read", "elder:read"],
+    permissions: [
+      "care:read",
+      "health:read",
+      "device:read",
+      "notice:read",
+      "alert:read",
+      "family:read",
+      "facility:read",
+      "admission:read",
+      "elder:read",
+    ],
   },
   {
     key: "family",