feat: 移除mock并接入真实权限控制

README.en-US.md

@@ -51,7 +51,6 @@ http://localhost:8848/
 ├── .codex/skills/           # Repository-local skill for keeping README.md in sync
 ├── .husky/                  # Git hooks for lint-staged and commitlint
 ├── build/                   # Vite plugin, CDN, compression, and build helpers
-├── mock/                    # Template mock data for login and async routes
 ├── public/                  # Static assets and runtime platform config
 ├── src/
 │   ├── api/                 # HTTP API wrappers; business APIs live in access.ts
@@ -65,7 +64,7 @@ http://localhost:8848/
 │   ├── store/               # Pinia stores
 │   ├── style/               # Global styles and themes
 │   ├── utils/               # Auth, HTTP, storage, message, progress, and tree helpers
-│   └── views/               # Pages; business pages live in employees, roles, stores
+│   └── views/               # Pages; business pages live in employees, roles, stores, permissions
 ├── types/                   # Global TypeScript declarations
 ├── AGENTS.md                # Agent entrypoint that delegates to RTK.md
 ├── RTK.md                   # Repository collaboration rules
@@ -96,7 +95,7 @@ Development mode proxies `/api` to `VITE_API_PROXY_TARGET`, defaulting to `http:
 
 Login uses `POST /api/auth/admin/login`, then the app validates the token through `GET /api/auth/me` and loads menus/actions through `GET /api/permissions/me`. The backend does not expose refresh-token; local `401` or token expiry clears auth state and redirects to `/login`.
 
-List search, reset, pagination, status changes, deletes, and save refreshes should go through the API layer. Store and role pages re-fetch their list before local narrowing because those endpoints do not define keyword filters; employee list requests send `page`, `pageSize`, `storeId`, `status`, and `keyword` as needed.
+List search, reset, pagination, status changes, deletes, and save refreshes should go through the API layer. Store, role, and employee list requests send their current filters and pagination to the backend.
 
 ## Documentation Sync Rule