feat: AIHR 智能人力资源管理系统初始提交

- 员工花名册管理（加密存储、导入导出） - 薪酬管理（发薪批次、薪酬模版、加班费计算、工资条） - 社保公积金（多城市配置、版本管理、基数调整） - 解聘管理（6步流程、证据链、工作交接） - AI 助手（合同审查、风险预测、RAG 知识库） - Dashboard 仪表盘 - 设置与通知
2026-07-24 13:53:11 +08:00
commit 0df8aa77d9
109 changed files with 38190 additions and 0 deletions
@@ -0,0 +1,103 @@
+import bcrypt from 'bcryptjs'
+import prisma from '../lib/prisma'
+import { signAccessToken, signRefreshToken, verifyRefreshToken } from '../lib/jwt'
+
+export async function register(orgName: string, phone: string, password: string) {
+  const existing = await prisma.user.findUnique({ where: { phone } })
+  if (existing) {
+    throw { code: 'DUPLICATE', message: '该手机号已注册' }
+  }
+
+  const org = await prisma.organization.create({
+    data: {
+      name: orgName,
+      plan: 'FREE',
+      maxEmployees: 20,
+    },
+  })
+
+  const passwordHash = await bcrypt.hash(password, 10)
+  const user = await prisma.user.create({
+    data: {
+      orgId: org.id,
+      phone,
+      name: '管理员',
+      passwordHash,
+      role: 'ADMIN',
+    },
+  })
+
+  await prisma.user.update({
+    where: { id: user.id },
+    data: { lastLoginAt: new Date() },
+  })
+
+  const accessToken = signAccessToken({ id: user.id, orgId: user.orgId, role: user.role })
+  const refreshToken = signRefreshToken({ id: user.id, orgId: user.orgId, role: user.role })
+
+  return {
+    user: { id: user.id, orgId: user.orgId, name: user.name, phone: user.phone, role: user.role },
+    accessToken,
+    refreshToken,
+  }
+}
+
+export async function login(phone: string, password: string) {
+  const user = await prisma.user.findUnique({ where: { phone } })
+  if (!user) {
+    throw { code: 'NOT_FOUND', message: '手机号或密码错误' }
+  }
+
+  const valid = await bcrypt.compare(password, user.passwordHash)
+  if (!valid) {
+    throw { code: 'AUTH_FAILED', message: '手机号或密码错误' }
+  }
+
+  if (user.disabled) {
+    throw { code: 'ACCOUNT_DISABLED', message: '该账号已被禁用，请联系管理员' }
+  }
+
+  await prisma.user.update({
+    where: { id: user.id },
+    data: { lastLoginAt: new Date() },
+  })
+
+  const accessToken = signAccessToken({ id: user.id, orgId: user.orgId, role: user.role })
+  const refreshToken = signRefreshToken({ id: user.id, orgId: user.orgId, role: user.role })
+
+  return {
+    user: { id: user.id, orgId: user.orgId, name: user.name, phone: user.phone, role: user.role },
+    accessToken,
+    refreshToken,
+  }
+}
+
+export async function refresh(refreshToken: string) {
+  const payload = verifyRefreshToken(refreshToken)
+  if (!payload) {
+    throw { code: 'TOKEN_INVALID', message: 'Refresh Token 无效或已过期' }
+  }
+
+  const user = await prisma.user.findUnique({ where: { id: payload.id } })
+  if (!user) {
+    throw { code: 'NOT_FOUND', message: '用户不存在' }
+  }
+
+  const accessToken = signAccessToken({ id: user.id, orgId: user.orgId, role: user.role })
+  return { accessToken }
+}
+
+export async function resetPassword(phone: string, newPassword: string) {
+  const user = await prisma.user.findUnique({ where: { phone } })
+  if (!user) {
+    throw { code: 'NOT_FOUND', message: '手机号未注册' }
+  }
+
+  const passwordHash = await bcrypt.hash(newPassword, 10)
+  await prisma.user.update({
+    where: { id: user.id },
+    data: { passwordHash },
+  })
+
+  return { success: true }
+}