feat: harden data access and simplify user management

admin-web/tests/navigationSurface.test.ts

@@ -37,20 +37,31 @@ test("retired plaza pages are absent while the core plaza remains", () => {
 });
 
 test("retired system pages and the notification bell are absent", () => {
-  for (const page of ["areas", "notifications", "settings"]) {
+  for (const page of ["areas", "notifications", "settings", "agents", "logs", "permissions"]) {
     assert.doesNotMatch(appSource, new RegExp(`/admin/system/${page}`));
     assert.doesNotMatch(appSource, new RegExp(`key: "/system/${page}`));
   }
 
-  for (const component of ["AreaManagement", "Notifications", "AgentSettings", "NotificationBell"]) {
+  for (const component of [
+    "AreaManagement",
+    "Notifications",
+    "AgentSettings",
+    "AgentTasksPanel",
+    "LogsPanel",
+    "PermissionsAudit",
+    "NotificationBell",
+  ]) {
     assert.doesNotMatch(appSource, new RegExp(component));
   }
+
+  assert.match(appSource, /key: "\/system\/users"[\s\S]*label: "用户管理"/);
+  assert.match(appSource, /path="\/admin\/system\/users"/);
 });
 
 test("the data center uses its own full-width workbench surface", () => {
   assert.match(appSource, /const showDataCenterWorkbench = location\.pathname === "\/admin\/data"/);
   assert.match(appSource, /\{!showDataCenterWorkbench && \(\s*<Sider/);
-  assert.match(appSource, /path="\/admin\/data" element=\{<DataCenterPanel \/>\}/);
+  assert.match(appSource, /path="\/admin\/data" element=\{<DataCenterPanel canManage=\{isDataManager\} \/>\}/);
 });
 
 test("the data center entry opens the standalone URL in a new browser tab", () => {