feat: ship enterprise control and desktop governance

apps/boss-admin-web/src/api/bossAdmin.ts

@@ -0,0 +1,83 @@
+export interface BossAdminMenuItem {
+  key: string;
+  label: string;
+  children?: BossAdminMenuItem[];
+}
+
+export interface BossAdminBackofficePayload {
+  ok: boolean;
+  menuTree: BossAdminMenuItem[];
+  workbench: {
+    summary: Record<string, number>;
+    companies: Array<Record<string, unknown>>;
+    devices: Array<Record<string, unknown>>;
+    risks: Array<Record<string, unknown>>;
+    notifications: Array<Record<string, unknown>>;
+    grantsSummary: Record<string, number>;
+  };
+  tenants: Array<Record<string, unknown>>;
+  users: Array<Record<string, unknown>>;
+  roles: {
+    builtInRoles: Array<Record<string, unknown>>;
+    permissionTemplates: Array<Record<string, unknown>>;
+  };
+  resourceGroups: {
+    devices: Array<Record<string, unknown>>;
+    projects: Array<Record<string, unknown>>;
+    skills: Array<Record<string, unknown>>;
+    grants: Record<string, Array<Record<string, unknown>>>;
+  };
+  audit: {
+    risks: Array<Record<string, unknown>>;
+    notifications: Array<Record<string, unknown>>;
+    riskTimeline: Array<Record<string, unknown>>;
+    permissionLogs: Array<Record<string, unknown>>;
+  };
+  yudaoMapping: Record<string, string>;
+}
+
+async function requestJson<T>(url: string, init: RequestInit = {}): Promise<T> {
+  const response = await fetch(url, {
+    credentials: "include",
+    ...init,
+    headers: {
+      Accept: "application/json",
+      ...(init.body ? { "Content-Type": "application/json" } : {}),
+      ...(init.headers ?? {}),
+    },
+  });
+  if (response.status === 401) {
+    window.location.href = "/auth/login";
+    throw new Error("UNAUTHORIZED");
+  }
+  if (!response.ok) {
+    const payload = await response.json().catch(() => null);
+    throw new Error(payload?.message ?? `HTTP_${response.status}`);
+  }
+  return response.json();
+}
+
+export async function fetchBossAdminBackoffice(): Promise<BossAdminBackofficePayload> {
+  return requestJson<BossAdminBackofficePayload>("/api/v1/admin/backoffice");
+}
+
+export async function postAdminAccess(payload: Record<string, unknown>) {
+  return requestJson<Record<string, unknown>>("/api/v1/admin/access", {
+    method: "POST",
+    body: JSON.stringify(payload),
+  });
+}
+
+export async function postRiskAction(payload: Record<string, unknown>) {
+  return requestJson<Record<string, unknown>>("/api/v1/admin/risks/actions", {
+    method: "POST",
+    body: JSON.stringify(payload),
+  });
+}
+
+export async function postSkillLifecycleRequest(payload: Record<string, unknown>) {
+  return requestJson<Record<string, unknown>>("/api/v1/admin/skills/requests", {
+    method: "POST",
+    body: JSON.stringify(payload),
+  });
+}