优化审核入口权限刷新逻辑

src/components/assistant/AssistantComposer.vue

@@ -15,7 +15,12 @@ import { ref } from "vue";
 
 import { featureFlags } from "@/config/features";
 
-defineProps<{ modelValue: string; loading: boolean; canUpload: boolean }>();
+const props = defineProps<{
+  modelValue: string;
+  loading: boolean;
+  canUpload: boolean;
+  canReview: boolean;
+}>();
 
 const emit = defineEmits<{
   "update:modelValue": [value: string];
@@ -153,9 +158,9 @@ const functions: Array<{
     </form>
 
     <div class="function-grid">
+      <template v-for="item in functions" :key="item.title">
         <button
-        v-for="item in functions"
+          v-if="item.tool !== 'review' || props.canReview"
-        :key="item.title"
           class="function-card"
           type="button"
           @click="emit('tool', item.tool)"
@@ -168,6 +173,7 @@ const functions: Array<{
             ><small>{{ item.description }}</small></span
           >
         </button>
+      </template>
     </div>
   </div>
 </template>

src/pages/RiskAssistantPage.vue

@@ -681,6 +681,7 @@ async function scrollToBottom(behavior: "smooth" | "auto" = "smooth") {
       v-model="prompt"
       :loading="loading"
       :can-upload="auth.hasPermission('risk_item.submit')"
+      :can-review="auth.hasPermission('risk_item.review')"
       @submit="submit"
       @select="usePrompt"
       @tool="openTool"

src/router/index.ts

@@ -24,6 +24,10 @@ router.beforeEach(async (to) => {
     return { name: "login", query: { redirect: to.fullPath } };
   }
   const permission = to.meta.permission;
+  // Refresh the permission snapshot before protected navigation. A role or
+  // permission changed directly in the database must take effect without
+  // requiring the user to clear the old browser session first.
+  if (typeof permission === "string" && auth.token) await auth.restore();
   if (typeof permission === "string" && !auth.hasPermission(permission))
     return { name: "assessment" };
   return true;