chore: 初始开源发布

iotlcm-app：小程序端 + 用户端服务。 - app/：uni-app 小程序前端（基于 unibest，MIT） - 微信 AppID → YOUR_WX_APPID，uni-app AppID → __UNI__YOURAPPID - 内网后端地址 → admin.iotlcm.example.com - 应用标题与 unibest 模板 README 重写（保留上游致谢与 MIT 声明） - server/：GoFrame 用户端服务（基于 XiuAdmin，Apache-2.0） - module xiuadmin → git.5iot.com/iotlcm-public/iotlcm-app（360 文件） - 支付回调地址 → app.iotlcm.example.com，商户名与应用名泛化 - 真实手机号 → 合法 11 位编造号（保留号段前 3 位 + 后 4 位） - 依赖号码尾部的断言同步更新 - 补 server/LICENSE（Apache-2.0） - 移除内部资产：CI 触发器 - 补根 README，LF 行尾 + .gitattributes 已知：TestSysDept_RefreshDeptAncestors 在源仓同一提交上同样失败，属既有缺陷。
2026-10-26 14:01:25 +08:00
commit 2ed5dfa6a1
1013 changed files with 138466 additions and 0 deletions
@@ -0,0 +1,68 @@
+package middleware
+
+import "testing"
+
+func TestHasAccessCodeExpressionRequiresEveryPart(t *testing.T) {
+	userAccessCodeList := []string{
+		"cpm:iot:tSimCardInfo:edit",
+		"cpm:agent:dept:list",
+	}
+
+	if !hasAccessCodeExpression(userAccessCodeList, splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list")) {
+		t.Fatal("expected AND expression to match when every permission is granted")
+	}
+
+	if hasAccessCodeExpression(userAccessCodeList, splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:tAgentEnterprise:list")) {
+		t.Fatal("expected AND expression to fail when any permission is missing")
+	}
+}
+
+func TestMatchedPermissionDataScopeUsesFirstExpressionPermission(t *testing.T) {
+	menuRoleDataAccessCodeList := []string{
+		"cpm:iot:tSimCardInfo:edit|10|4",
+		"cpm:agent:dept:list|20|7",
+	}
+
+	roleId, roleDataScope, ok := matchedPermissionDataScope(
+		menuRoleDataAccessCodeList,
+		splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list"),
+	)
+	if !ok {
+		t.Fatal("expected data scope to be found")
+	}
+	if roleId != "10" || roleDataScope != "4" {
+		t.Fatalf("expected first permission data scope role=10 scope=4, got role=%s scope=%s", roleId, roleDataScope)
+	}
+}
+
+func TestMatchedPermissionDataScopeFallsBackToFirstMenuBoundPermission(t *testing.T) {
+	menuRoleDataAccessCodeList := []string{
+		"cpm:system:sysNoticeUser:list|30|5",
+	}
+
+	roleId, roleDataScope, ok := matchedPermissionDataScope(
+		menuRoleDataAccessCodeList,
+		splitAccessCodeExpression("cpc:current:user&cpm:system:sysNoticeUser:list"),
+	)
+	if !ok {
+		t.Fatal("expected data scope to be found")
+	}
+	if roleId != "30" || roleDataScope != "5" {
+		t.Fatalf("expected first menu-bound permission data scope role=30 scope=5, got role=%s scope=%s", roleId, roleDataScope)
+	}
+}
+
+func TestMissingAccessCodeExpressionItem(t *testing.T) {
+	userAccessCodeList := []string{"cpm:iot:tSimCardInfo:edit"}
+
+	missingItem, ok := missingAccessCodeExpressionItem(
+		userAccessCodeList,
+		splitAccessCodeExpression("cpm:iot:tSimCardInfo:edit&cpm:agent:dept:list"),
+	)
+	if !ok {
+		t.Fatal("expected a missing permission")
+	}
+	if missingItem != "cpm:agent:dept:list" {
+		t.Fatalf("expected missing agent list permission, got %s", missingItem)
+	}
+}