feat: add phase five operations foundation

Tiku.Application/Backoffice/BackofficeModels.cs

@@ -0,0 +1,70 @@
+using System.Text.Json;
+using Tiku.Domain.Operations;
+
+namespace Tiku.Application.Backoffice;
+
+public sealed record BackofficeActor(Guid UserId, Guid? TenantId, bool IsPlatform);
+
+public sealed record BackofficeBootstrap(
+    IReadOnlyCollection<BackofficePermissionItem> Permissions,
+    IReadOnlyCollection<BackofficeMenuItem> Menus,
+    IReadOnlyCollection<BackofficeRoleItem> Roles);
+
+public sealed record BackofficePermissionItem(
+    Guid Id,
+    string Code,
+    string Name,
+    BackendPermissionArea Area,
+    string Module,
+    string? Description,
+    int SortOrder);
+
+public sealed record BackofficeMenuItem(
+    Guid Id,
+    string Code,
+    string? ParentCode,
+    string Title,
+    BackendPermissionArea Area,
+    string? Path,
+    string? Icon,
+    string? PermissionCode,
+    int SortOrder,
+    bool IsActive);
+
+public sealed record BackofficeRoleItem(
+    Guid Id,
+    string Code,
+    string Name,
+    BackendRoleStatus Status,
+    bool IsSystem,
+    string? Description,
+    IReadOnlyCollection<string> PermissionCodes,
+    IReadOnlyCollection<string> MenuCodes,
+    JsonElement? DataScope = null);
+
+public sealed record UpsertBackofficeRoleCommand(
+    Guid? Id,
+    string Code,
+    string Name,
+    BackendRoleStatus Status,
+    string? Description,
+    JsonElement? DataScope = null);
+
+public sealed record ReplaceRoleBindingsCommand(
+    Guid RoleId,
+    IReadOnlyCollection<string> PermissionCodes,
+    IReadOnlyCollection<string> MenuCodes);
+
+public sealed record ReplaceUserRolesCommand(
+    Guid UserId,
+    IReadOnlyCollection<Guid> RoleIds);
+
+public sealed record BackofficeOperationAuditCommand(
+    Guid? TenantId,
+    Guid? ActorUserId,
+    string Action,
+    string? TargetType,
+    string? TargetId,
+    JsonElement Details,
+    string? IpAddress = null,
+    string? UserAgent = null);

Tiku.Application/Backoffice/IBackofficeService.cs

@@ -0,0 +1,49 @@
+namespace Tiku.Application.Backoffice;
+
+public interface IBackofficeService
+{
+    Task<BackofficeBootstrap> GetTenantBootstrapAsync(
+        BackofficeActor actor,
+        CancellationToken cancellationToken = default);
+
+    Task<BackofficeBootstrap> GetPlatformBootstrapAsync(
+        BackofficeActor actor,
+        CancellationToken cancellationToken = default);
+
+    Task<BackofficeRoleItem> UpsertTenantRoleAsync(
+        BackofficeActor actor,
+        UpsertBackofficeRoleCommand command,
+        CancellationToken cancellationToken = default);
+
+    Task<BackofficeRoleItem> UpsertPlatformRoleAsync(
+        BackofficeActor actor,
+        UpsertBackofficeRoleCommand command,
+        CancellationToken cancellationToken = default);
+
+    Task<BackofficeRoleItem> ReplaceTenantRoleBindingsAsync(
+        BackofficeActor actor,
+        ReplaceRoleBindingsCommand command,
+        CancellationToken cancellationToken = default);
+
+    Task<BackofficeRoleItem> ReplacePlatformRoleBindingsAsync(
+        BackofficeActor actor,
+        ReplaceRoleBindingsCommand command,
+        CancellationToken cancellationToken = default);
+
+    Task ReplaceTenantUserRolesAsync(
+        BackofficeActor actor,
+        ReplaceUserRolesCommand command,
+        CancellationToken cancellationToken = default);
+
+    Task ReplacePlatformUserRolesAsync(
+        BackofficeActor actor,
+        ReplaceUserRolesCommand command,
+        CancellationToken cancellationToken = default);
+}
+
+public interface IOperationAuditService
+{
+    Task WriteAsync(
+        BackofficeOperationAuditCommand command,
+        CancellationToken cancellationToken = default);
+}