feat: add AI knowledge analysis MVP

modules/core/server/permissions.ts

@@ -45,6 +45,10 @@ export const PERMISSION_DEFINITIONS: PermissionDefinition[] = [
   { id: "elder:create", label: "新增老人档案", category: "老人", description: "创建老人档案。" },
   { id: "elder:update", label: "更新老人档案", category: "老人", description: "更新老人档案和照护信息。" },
   { id: "elder:delete", label: "删除老人档案", category: "老人", description: "删除老人档案。" },
+  { id: "ai:read", label: "查看 AI 分析", category: "AI", description: "查看并生成授权数据范围内的 AI 分析。" },
+  { id: "ai:manage", label: "管理 AI 能力", category: "AI", description: "管理 AI 能力配置和分析治理。" },
+  { id: "knowledge:read", label: "查看知识库", category: "AI", description: "查看并检索平台和机构知识库内容。" },
+  { id: "knowledge:manage", label: "管理知识库", category: "AI", description: "维护平台或机构知识库条目。" },
 ];
 
 type SeedRole = {
@@ -121,6 +125,10 @@ export const SYSTEM_ROLE_DEFINITIONS: SeedRole[] = [
       "elder:create",
       "elder:update",
       "elder:delete",
+      "ai:read",
+      "ai:manage",
+      "knowledge:read",
+      "knowledge:manage",
     ],
   },
   {
@@ -151,6 +159,10 @@ export const SYSTEM_ROLE_DEFINITIONS: SeedRole[] = [
       "elder:create",
       "elder:update",
       "elder:delete",
+      "ai:read",
+      "ai:manage",
+      "knowledge:read",
+      "knowledge:manage",
     ],
   },
   {
@@ -169,6 +181,8 @@ export const SYSTEM_ROLE_DEFINITIONS: SeedRole[] = [
       "admission:read",
       "elder:read",
       "elder:update",
+      "ai:read",
+      "knowledge:read",
     ],
   },
   {