feat: add sync permissions functionality and UI integration

web/app/dashboard/permissions/page.tsx

@@ -1,10 +1,14 @@
 "use client"
 
-import { KeyRoundIcon, RouteIcon, SearchIcon } from "lucide-react"
+import { useState } from "react"
+import { KeyRoundIcon, RouteIcon, SearchIcon, ShieldCheckIcon } from "lucide-react"
+import { toast } from "sonner"
 
+import { useConfirm } from "@/components/confirm-provider"
 import { DashboardListPage } from "@/components/dashboard/list"
 import { Badge } from "@/components/ui/badge"
-import { fetchPermissions, type AdminPermission } from "@/lib/api/admin"
+import { Button } from "@/components/ui/button"
+import { fetchPermissions, syncPermissions, type AdminPermission } from "@/lib/api/admin"
 import { Status } from "@/lib/generated/enums"
 import { useAppLocale, useI18n } from "@/i18n/provider"
 import { getPermissionDisplayName, getPermissionGroupName } from "@/lib/permission-i18n"
@@ -12,6 +16,8 @@ import { getPermissionDisplayName, getPermissionGroupName } from "@/lib/permissi
 export default function DashboardPermissionsPage() {
   const t = useI18n()
   const { locale } = useAppLocale()
+  const confirm = useConfirm()
+  const [syncing, setSyncing] = useState(false)
   const listStatusOptions = [
     { value: "all", label: t("status.all") },
     { value: String(Status.Ok), label: t("status.ok") },
@@ -19,6 +25,30 @@ export default function DashboardPermissionsPage() {
     { value: String(Status.Deleted), label: t("status.deleted") },
   ]
 
+  async function handleSync(reload: () => Promise<void>) {
+    const confirmed = await confirm({
+      title: t("permission.syncTitle"),
+      description: t("permission.syncDescription"),
+      confirmText: t("permission.sync"),
+    })
+    if (!confirmed || syncing) return
+
+    setSyncing(true)
+    try {
+      const result = await syncPermissions()
+      toast.success(t("permission.syncSuccess", {
+        created: result.created,
+        updated: result.updated,
+        rolePermissionsAdded: result.rolePermissionsAdded,
+      }))
+      await reload()
+    } catch (error) {
+      toast.error(error instanceof Error ? error.message : t("permission.syncFailed"))
+    } finally {
+      setSyncing(false)
+    }
+  }
+
   return (
     <DashboardListPage<AdminPermission>
       filters={[
@@ -51,6 +81,12 @@ export default function DashboardPermissionsPage() {
         },
       ]}
       fetchList={fetchPermissions}
+      renderToolbarActions={({ reload }) => (
+        <Button onClick={() => void handleSync(reload)} disabled={syncing}>
+          <ShieldCheckIcon className={syncing ? "animate-pulse" : undefined} />
+          {syncing ? t("permission.syncing") : t("permission.sync")}
+        </Button>
+      )}
       getItemId={(item) => item.id}
       columns={[
         {

web/lib/api/admin.ts

@@ -91,6 +91,12 @@ export type AdminPermission = {
   sortNo: number
 }
 
+export type PermissionSyncResult = {
+  created: number
+  updated: number
+  rolePermissionsAdded: number
+}
+
 export type ConversationTag = {
   id: number
   name: string
@@ -1240,6 +1246,12 @@ export function fetchPermissions(
   )
 }
 
+export function syncPermissions() {
+  return request<PermissionSyncResult>("/api/dashboard/permission/sync", {
+    method: "POST",
+  })
+}
+
 export function fetchConversations(
   query?: Record<string, string | number | undefined>
 ) {

web/messages/en-US.json

@@ -2196,6 +2196,12 @@
   "permission": {
     "loadFailed": "Could not load permissions.",
     "refresh": "Refresh",
+    "sync": "Sync Permissions",
+    "syncing": "Syncing...",
+    "syncTitle": "Sync Built-in Permissions",
+    "syncDescription": "Sync built-in permissions from code and add missing permissions to built-in roles. Existing role permissions will not be removed.",
+    "syncSuccess": "Permissions synced: {created} created, {updated} updated, {rolePermissionsAdded} role permissions added",
+    "syncFailed": "Could not sync permissions.",
     "filterKeyword": "Filter by permission name or code",
     "filterGroup": "Filter by group",
     "query": "Search",

web/messages/zh-CN.json

@@ -2196,6 +2196,12 @@
   "permission": {
     "loadFailed": "加载权限失败",
     "refresh": "刷新",
+    "sync": "同步权限",
+    "syncing": "同步中...",
+    "syncTitle": "同步内置权限",
+    "syncDescription": "将代码中的内置权限同步到数据库，并补齐内置角色缺失的权限。已有角色权限不会被删除。",
+    "syncSuccess": "权限同步完成：新增 {created}，更新 {updated}，补齐角色权限 {rolePermissionsAdded}",
+    "syncFailed": "权限同步失败",
     "filterKeyword": "按权限名称/编码筛选",
     "filterGroup": "按分组筛选",
     "query": "查询",