chore: 初始开源发布

iotlcm-app：小程序端 + 用户端服务。 - app/：uni-app 小程序前端（基于 unibest，MIT） - 微信 AppID → YOUR_WX_APPID，uni-app AppID → __UNI__YOURAPPID - 内网后端地址 → admin.iotlcm.example.com - 应用标题与 unibest 模板 README 重写（保留上游致谢与 MIT 声明） - server/：GoFrame 用户端服务（基于 XiuAdmin，Apache-2.0） - module xiuadmin → git.5iot.com/iotlcm-public/iotlcm-app（360 文件） - 支付回调地址 → app.iotlcm.example.com，商户名与应用名泛化 - 真实手机号 → 合法 11 位编造号（保留号段前 3 位 + 后 4 位） - 依赖号码尾部的断言同步更新 - 补 server/LICENSE（Apache-2.0） - 移除内部资产：CI 触发器 - 补根 README，LF 行尾 + .gitattributes 已知：TestSysDept_RefreshDeptAncestors 在源仓同一提交上同样失败，属既有缺陷。
2026-10-26 14:01:25 +08:00
commit 2ed5dfa6a1
1013 changed files with 138466 additions and 0 deletions
@@ -0,0 +1,111 @@
+package app
+
+import "testing"
+
+func TestAppAccessCodesMatchExpression(t *testing.T) {
+	accessCodes := []string{
+		"cpm:iot:tSimCardInfo:edit",
+		"cpm:agent:dept:list",
+	}
+
+	if !appAccessCodesMatchExpression(accessCodes, "cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list") {
+		t.Fatal("expected AND expression to match when all permissions are granted")
+	}
+
+	if appAccessCodesMatchExpression(accessCodes, "cpm:iot:tSimCardInfo:edit&cpm:agent:tAgentEnterprise:list") {
+		t.Fatal("expected AND expression to fail when one permission is missing")
+	}
+}
+
+func TestNormalizeFeatureDoesNotGrantLegacyAppPermission(t *testing.T) {
+	if got := appNormalizeFeatureKey("cpm:app:*"); got == "*" {
+		t.Fatal("legacy cpm:app:* must not be normalized to wildcard access")
+	}
+	if got := appNormalizeFeatureKey("app:card:list"); got == "card:list" {
+		t.Fatal("legacy app: feature prefix must not be stripped")
+	}
+}
+
+func TestRestartFeatureUsesDedicatedConsolePermission(t *testing.T) {
+	if appAccessCodesMatchExpression(
+		[]string{"cpm:iot:tSimCardInfo:edit"},
+		appFeaturePermissionCandidates("card:restart")[0],
+	) {
+		t.Fatal("card edit permission must not grant restart feature")
+	}
+
+	if !appAccessCodesMatchExpression(
+		[]string{"cpm:iot:tSimCardRestart:input:submit"},
+		appFeaturePermissionCandidates("card:restart")[0],
+	) {
+		t.Fatal("restart submit permission should grant restart feature")
+	}
+}
+
+func TestRenewAndChangeFeaturesUseSubmitPermissions(t *testing.T) {
+	if appAccessCodesMatchExpression(
+		[]string{"cpm:iot:tSimCardRenew:input:prepare"},
+		appFeaturePermissionCandidates("card:renew")[0],
+	) {
+		t.Fatal("renew prepare permission must not grant mini app renew entry")
+	}
+	if !appAccessCodesMatchExpression(
+		[]string{"cpm:iot:tSimCardRenew:batch:confirm"},
+		appFeaturePermissionCandidates("card:renew")[0],
+	) {
+		t.Fatal("renew batch confirm permission should grant renew entry")
+	}
+	if appAccessCodesMatchExpression(
+		[]string{"cpm:iot:tSimCardChange:input:prepare", "cpm:iot:tSimCardBindPkg:getChangePkg"},
+		appFeaturePermissionCandidates("card:change")[0],
+	) {
+		t.Fatal("change prepare permission must not grant mini app change entry")
+	}
+	if !appAccessCodesMatchExpression(
+		[]string{"cpm:iot:tSimCardChange:batch:submit"},
+		appFeaturePermissionCandidates("card:change")[0],
+	) {
+		t.Fatal("change batch submit permission should grant change entry")
+	}
+}
+
+func TestAllocateFeatureUsesDedicatedConsolePermissions(t *testing.T) {
+	if appAccessCodesMatchExpression(
+		[]string{"cpm:iot:tSimCardInfo:edit", "cpm:agent:dept:list"},
+		appFeaturePermissionCandidates("card:allocate")[0],
+	) {
+		t.Fatal("card edit and customer list permissions must not grant mini app allocate entry")
+	}
+	if !appAccessCodesMatchExpression(
+		[]string{
+			"cpm:iot:tSimCardAllocate:targets",
+			"cpm:iot:tSimCardAllocate:input:prepare",
+			"cpm:iot:tSimCardAllocate:batch:submit",
+		},
+		appFeaturePermissionCandidates("card:allocate")[0],
+	) {
+		t.Fatal("complete allocate permissions should grant allocate entry")
+	}
+	if appAccessCodesMatchExpression(
+		[]string{"cpm:iot:tSimCardAllocate:batch:submit"},
+		appFeaturePermissionCandidates("card:allocate")[0],
+	) {
+		t.Fatal("single allocate submit permission must not grant full allocate entry")
+	}
+}
+
+func TestDataServiceFeaturesUseConsolePermissions(t *testing.T) {
+	tests := []struct {
+		feature    string
+		permission string
+	}{
+		{feature: "card:dataStart", permission: "cpm:iot:tSimCardDataStart:input:submit"},
+		{feature: "card:dataStop", permission: "cpm:iot:tSimCardDataStop:input:submit"},
+	}
+	for _, tt := range tests {
+		candidates := appFeaturePermissionCandidates(tt.feature)
+		if len(candidates) != 1 || !appAccessCodesMatchExpression([]string{tt.permission}, candidates[0]) {
+			t.Fatalf("%s should use %s", tt.feature, tt.permission)
+		}
+	}
+}