feat: refine admin forms, attendance and finance workflows

Squash merge PR #23.

Included changes:
- complete occupancy check-in required fields/default payload
- improve responsive admin management pages
- fix attendance edge cases and attendance period config
- refine wallet/finance-related workflow handling

Checks:
- npm run typecheck -w apps/admin
- npm run typecheck -w apps/server

apps/admin/src/auth/menu-policy.integration.test.ts

@@ -45,9 +45,7 @@ describe('role-aware menu policy', () => {
       '/attendance',
       '/notifications',
     ]);
-    expect(findRoleAwareLandingPath(['任课老师'], teacherPermissions)).toBe(
-      '/teacher-workspace',
-    );
+    expect(findRoleAwareLandingPath(['任课老师'], teacherPermissions)).toBe('/teacher-workspace');
   });
 
   it('places schedules and attendance only once in academic management', () => {

apps/admin/src/auth/menu-policy.ts

@@ -43,7 +43,12 @@ const SECTIONS: MenuSection[] = [
     icon: 'calendar',
     roles: ['teacher'],
     children: [
-      { key: '/teacher-workspace', label: '今日教学', icon: 'workspace', permission: 'teacher-workspace:view' },
+      {
+        key: '/teacher-workspace',
+        label: '今日教学',
+        icon: 'workspace',
+        permission: 'teacher-workspace:view',
+      },
       { key: '/schedules', label: '我的排课', icon: 'calendar', permission: 'schedule:view' },
       { key: '/attendance', label: '课程考勤', icon: 'attendance', permission: 'attendance:view' },
     ],
@@ -83,11 +88,26 @@ const SECTIONS: MenuSection[] = [
     icon: 'classroom',
     roles: ['classroom', 'super'],
     children: [
-      { key: '/classroom-schedule', label: '教室排期', icon: 'calendar', permission: 'rental:view' },
+      {
+        key: '/classroom-schedule',
+        label: '教室排期',
+        icon: 'calendar',
+        permission: 'rental:view',
+      },
       { key: '/classrooms', label: '教室管理', icon: 'classroom', permission: 'classroom:view' },
-      { key: '/attendance-devices', label: '考勤机绑定', icon: 'attendance', permission: 'classroom:view' },
+      {
+        key: '/attendance-devices',
+        label: '考勤机绑定',
+        icon: 'attendance',
+        permission: 'classroom:view',
+      },
       { key: '/classroom-rentals', label: '租赁订单', icon: 'rental', permission: 'rental:view' },
-      { key: '/organizations', label: '机构管理', icon: 'organization', permission: 'organization:view' },
+      {
+        key: '/organizations',
+        label: '机构管理',
+        icon: 'organization',
+        permission: 'organization:view',
+      },
     ],
   },
   {
@@ -100,13 +120,21 @@ const SECTIONS: MenuSection[] = [
       { key: '/roles', label: '角色管理', icon: 'role', permission: 'role:view' },
       { key: '/permissions', label: '权限一览', icon: 'permission', permission: 'role:view' },
       { key: '/operation-logs', label: '操作日志', icon: 'log', permission: 'log:view' },
-      { key: '/integration-config', label: '钉钉集成', icon: 'integration', permission: 'integration:read' },
+      {
+        key: '/integration-config',
+        label: '钉钉集成',
+        icon: 'integration',
+        permission: 'integration:read',
+      },
       { key: '/ai-config', label: 'AI 配置', icon: 'ai', permission: 'ai:config:read' },
     ],
   },
 ];
 
-export function getRoleDomains(roles: readonly string[], permissions: readonly string[]): Set<string> {
+export function getRoleDomains(
+  roles: readonly string[],
+  permissions: readonly string[],
+): Set<string> {
   const normalized = new Set(roles.map((role) => ROLE_ALIASES[role]).filter(Boolean));
   // 权限可以来自多个叠加角色，因此业务域按能力累加，而不是只选择一个。
   if (permissions.includes('student:view') || permissions.includes('class:view')) {
@@ -167,7 +195,8 @@ export function buildMenu(roles: readonly string[], permissions: readonly string
     const children = section.children
       .filter((child) => permissionSet.has(child.permission))
       .map(({ permission: _, ...child }) => child);
-    if (children.length > 0) sections.push({ ...section, children, roles: undefined } as AppMenuItem);
+    if (children.length > 0)
+      sections.push({ ...section, children, roles: undefined } as AppMenuItem);
   }
 
   if (permissionSet.has('notification:view')) {

apps/admin/src/auth/permission-navigation.integration.test.ts

@@ -13,11 +13,7 @@ describe('permission navigation', () => {
 
   it('lands teachers on the teacher workspace without global student or class access', () => {
     expect(
-      findFirstAccessiblePath([
-        'teacher-workspace:view',
-        'schedule:view',
-        'attendance:view',
-      ]),
+      findFirstAccessiblePath(['teacher-workspace:view', 'schedule:view', 'attendance:view']),
     ).toBe('/teacher-workspace');
     expect(canAccessPath('/students', ['teacher-workspace:view'])).toBe(false);
     expect(canAccessPath('/classes', ['teacher-workspace:view'])).toBe(false);

apps/admin/src/auth/permission-navigation.ts

@@ -14,8 +14,16 @@ export const PERMISSION_PAGES: readonly PermissionPage[] = [
   { path: '/rooms', permission: 'room:view' },
   { path: '/occupancies', permission: 'occupancy:view' },
   { path: '/teacher-workspace', permission: 'teacher-workspace:view' },
-  { path: '/students', permission: 'student:view', matches: (p) => p === '/students' || /^\/students\/\d+\/profile$/.test(p) },
-  { path: '/classes', permission: 'class:view', matches: (p) => p === '/classes' || /^\/classes\/\d+$/.test(p) },
+  {
+    path: '/students',
+    permission: 'student:view',
+    matches: (p) => p === '/students' || /^\/students\/\d+\/profile$/.test(p),
+  },
+  {
+    path: '/classes',
+    permission: 'class:view',
+    matches: (p) => p === '/classes' || /^\/classes\/\d+$/.test(p),
+  },
   { path: '/attendance', permission: 'attendance:view' },
   { path: '/schedules', permission: 'schedule:view' },
   { path: '/classroom-schedule', permission: 'rental:view' },

apps/admin/src/auth/permission-store.ts

@@ -3,7 +3,9 @@ export const PERMISSIONS_UPDATED_EVENT = 'permissions-updated';
 export function readPermissions(): string[] {
   try {
     const value = JSON.parse(localStorage.getItem('permissions') || '[]');
-    return Array.isArray(value) ? value.filter((item): item is string => typeof item === 'string') : [];
+    return Array.isArray(value)
+      ? value.filter((item): item is string => typeof item === 'string')
+      : [];
   } catch {
     return [];
   }