側邊欄選單分組 — 設計說明書（design.md）

-- 7 個分組節點（pid=NULL，無 url，僅作為展開父節點）
INSERT INTO public.ui_routes (uid, pid, name, url, icon, enable, description, sort)
SELECT gen_random_uuid(), NULL, 'group-project-task',     NULL, 'pi pi-briefcase',  1, '專案與任務分組',   10
WHERE NOT EXISTS (SELECT 1 FROM public.ui_routes WHERE name = 'group-project-task');

INSERT INTO public.ui_routes (uid, pid, name, url, icon, enable, description, sort)
SELECT gen_random_uuid(), NULL, 'group-compliance-audit', NULL, 'pi pi-shield',     1, '合規與稽核分組',   20
WHERE NOT EXISTS (SELECT 1 FROM public.ui_routes WHERE name = 'group-compliance-audit');

INSERT INTO public.ui_routes (uid, pid, name, url, icon, enable, description, sort)
SELECT gen_random_uuid(), NULL, 'group-communication',    NULL, 'pi pi-comments',   1, '溝通與互動分組',   30
WHERE NOT EXISTS (SELECT 1 FROM public.ui_routes WHERE name = 'group-communication');

INSERT INTO public.ui_routes (uid, pid, name, url, icon, enable, description, sort)
SELECT gen_random_uuid(), NULL, 'group-tenant-org',       NULL, 'pi pi-building',   1, '租戶與組織分組',   40
WHERE NOT EXISTS (SELECT 1 FROM public.ui_routes WHERE name = 'group-tenant-org');

INSERT INTO public.ui_routes (uid, pid, name, url, icon, enable, description, sort)
SELECT gen_random_uuid(), NULL, 'group-system-admin',     NULL, 'pi pi-cog',        1, '系統管理分組',     50
WHERE NOT EXISTS (SELECT 1 FROM public.ui_routes WHERE name = 'group-system-admin');

INSERT INTO public.ui_routes (uid, pid, name, url, icon, enable, description, sort)
SELECT gen_random_uuid(), NULL, 'group-system-config',    NULL, 'pi pi-sliders-h',  1, '系統設定分組',     60
WHERE NOT EXISTS (SELECT 1 FROM public.ui_routes WHERE name = 'group-system-config');

INSERT INTO public.ui_routes (uid, pid, name, url, icon, enable, description, sort)
SELECT gen_random_uuid(), NULL, 'group-ai-analytics',     NULL, 'pi pi-chart-line', 1, 'AI 與分析分組',    70
WHERE NOT EXISTS (SELECT 1 FROM public.ui_routes WHERE name = 'group-ai-analytics');

-- 2 個寫死搬遷項（pid 指向 group-project-task）
WITH g AS (SELECT id FROM public.ui_routes WHERE name = 'group-project-task')
INSERT INTO public.ui_routes (uid, pid, name, url, icon, enable, description, sort)
SELECT gen_random_uuid(), g.id, 'project-dashboard', '/project/dashboard',  'pi pi-home',         1, '專案儀表板', 10 FROM g
WHERE NOT EXISTS (SELECT 1 FROM public.ui_routes WHERE name = 'project-dashboard');

WITH g AS (SELECT id FROM public.ui_routes WHERE name = 'group-project-task')
INSERT INTO public.ui_routes (uid, pid, name, url, icon, enable, description, sort)
SELECT gen_random_uuid(), g.id, 'my-tasks',          '/project/task-manage','pi pi-check-square', 1, '待辦任務',   20 FROM g
WHERE NOT EXISTS (SELECT 1 FROM public.ui_routes WHERE name = 'my-tasks');

-- Group 1 (project-task)：sort 30/40/50（前面 10/20 給 project-dashboard / my-tasks 用了）
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-project-task'),     sort = 30 WHERE name = 'project-list';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-project-task'),     sort = 40 WHERE name = 'audit-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-project-task'),     sort = 50 WHERE name = 'report-manage';

-- Group 2 (compliance-audit)：sort 10/20/30/40
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-compliance-audit'), sort = 10 WHERE name = 'module-frame';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-compliance-audit'), sort = 20 WHERE name = 'compliance-framework-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-compliance-audit'), sort = 30 WHERE name = 'tool-plugin-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-compliance-audit'), sort = 40 WHERE name = 'flow-template-manage';

-- Group 3 (communication)：sort 10/20/30/40/50/60
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-communication'),    sort = 10 WHERE name = 'bulletin-list';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-communication'),    sort = 20 WHERE name = 'bulletin-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-communication'),    sort = 30 WHERE name = 'survey-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-communication'),    sort = 40 WHERE name = 'system-feedback-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-communication'),    sort = 50 WHERE name = 'system-feedback-view';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-communication'),    sort = 60 WHERE name = 'issue-integrate-config';

-- Group 4 (tenant-org)：sort 10/20/30/40
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-tenant-org'),       sort = 10 WHERE name = 'tenant-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-tenant-org'),       sort = 20 WHERE name = 'department-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-tenant-org'),       sort = 30 WHERE name = 'user-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-tenant-org'),       sort = 40 WHERE name = 'role-manage';

-- Group 5 (system-admin)：sort 10/20/30/40/50
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-system-admin'),     sort = 10 WHERE name = 'system-menu-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-system-admin'),     sort = 20 WHERE name = 'information-system-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-system-admin'),     sort = 30 WHERE name = 'device-manage';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-system-admin'),     sort = 40 WHERE name = 'storage-config';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-system-admin'),     sort = 50 WHERE name = 'cloud-integrations';

-- Group 6 (system-config)：sort 10/20/30/40
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-system-config'),    sort = 10 WHERE name = 'smtp-config';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-system-config'),    sort = 20 WHERE name = 'ldap-config';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-system-config'),    sort = 30 WHERE name = 'notify-config';
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-system-config'),    sort = 40 WHERE name = 'user-log';

-- Group 7 (ai-analytics)：sort 10
UPDATE public.ui_routes SET pid = (SELECT id FROM public.ui_routes WHERE name = 'group-ai-analytics'),     sort = 10 WHERE name = 'ai-dashboard';

@transaction
def get_user_web_ui_routes(self, user_uid: str, tenant_id: int | None) -> list[dict]:
    """
    取得使用者可檢視的前端路由選單（RBAC，多租戶版）
    ... (既有 docstring 保留)
    """
    # ... (既有邏輯不動：取使用者 capability、build node_map、組樹、sort) ...
    sort_nodes(roots)

    # 新增：剪枝空分組節點（無 url 且 items 為空的純分組節點）
    return self._prune_empty_groups(roots)

def _prune_empty_groups(self, nodes: list[dict]) -> list[dict]:
    """
    遞迴剪枝：移除「無 url 且 items 為空」的分組節點。
    葉節點（有 url）永遠保留；分組節點若還有可見子項也保留。

    使用情境：
    - 某 user 對「租戶與組織」分組下所有功能都無 capability → 該分組整個從選單消失
    - 葉節點 url 為 None（理論上不應發生）也會被當分組處理：實務上葉節點都應有 url
    """
    pruned = []
    for n in nodes:
        if n.get("items"):
            n["items"] = self._prune_empty_groups(n["items"])
        is_group = not n.get("url")
        if is_group and not n.get("items"):
            continue
        pruned.append(n)
    return pruned

 onMounted(()=> {
-    // GRC / Project module (static — no permission gate needed for demo)
-    const grcItems = [
-        { label: 'project-dashboard',  icon: 'pi pi-home',         to: '/project/dashboard' },
-        // { label: 'project-manage',     icon: 'pi pi-folder-open',  to: '/project/projects' },
-        { label: 'my-tasks',           icon: 'pi pi-check-square', to: '/project/task-manage' },
-    ]
-
-    menu.value = [...grcItems, ...genMenuNode(permissions.value)]
+    menu.value = genMenuNode(permissions.value)
 })

{
    "menu": {
        ...
        "group-project-task":     "專案與任務",
        "group-compliance-audit": "合規與稽核",
        "group-communication":    "溝通與互動",
        "group-tenant-org":       "租戶與組織",
        "group-system-admin":     "系統管理",
        "group-system-config":    "系統設定",
        "group-ai-analytics":     "AI 與分析"
    }
}

-- 跑完 migration 後驗證
SELECT name, pid, sort FROM public.ui_routes WHERE name LIKE 'group-%' ORDER BY sort;
-- 預期 7 row

SELECT name, pid, sort FROM public.ui_routes WHERE pid IS NOT NULL ORDER BY pid, sort;
-- 預期 29 row（27 既有 + 2 新增搬遷項）

PGPASSWORD='<password>' psql -h 192.168.50.188 -p 25432 -U cmmgr -d guidant_ai_dev \
  -At -F',' \
  -c "SELECT id, name, pid, sort FROM public.ui_routes ORDER BY id;" \
  > scripts/sql/backup/2026-XX-XX-ui_routes-pre-menu-group.csv

BEGIN;

-- 1. 還原既有 27 筆的 pid / sort（依附錄 B CSV 還原；以下為示意）
-- 實作時用 psql \copy 或寫 generator 從 CSV 產 UPDATE 語句

-- 2. 移除本期新增 9 筆
DELETE FROM public.ui_routes WHERE name IN (
    'group-project-task', 'group-compliance-audit', 'group-communication',
    'group-tenant-org', 'group-system-admin', 'group-system-config', 'group-ai-analytics',
    'project-dashboard', 'my-tasks'
);

COMMIT;