feat(shared-proto): ai/core_edu/iam proto v2 扩展

ai.proto: 新增 GenerateReport RPC + GenerateReportRequest/GeneratedReport message

core_edu.proto: 新增 ExtendExam/ForceSubmitExam/ReorderExamQuestions 3 RPC + message

iam.proto: 新增 CreateUser/UpdateUser/DeleteUser 3 RPC + 4 message

packages/shared-proto/proto/iam.proto

@@ -15,9 +15,24 @@ service IamService {
 
   // 用户信息类
   rpc GetUserInfo(GetUserInfoRequest) returns (UserInfo);
+  rpc BatchGetUsers(BatchGetUsersRequest) returns (BatchGetUsersResponse);
   // GetEffectiveDataScope 解析用户可见数据范围（DataScope 6 级）.
   // data-ana gRPC 调用此 RPC 解析查询过滤范围（coord-cross-review §2 #3 裁决 P4 补全）.
   rpc GetEffectiveDataScope(GetEffectiveDataScopeRequest) returns (EffectiveDataScope);
+
+  // 权限与视口类
+  rpc GetEffectivePermissions(GetEffectivePermissionsRequest) returns (EffectivePermissionsResponse);
+  rpc GetEffectiveAccess(GetEffectiveAccessRequest) returns (EffectiveAccessResponse);
+  rpc GetViewports(GetViewportsRequest) returns (ViewportsResponse);
+
+  // 密钥与关系类
+  rpc GetPublicKey(GetPublicKeyRequest) returns (PublicKeyResponse);
+  rpc GetChildrenByParent(GetChildrenByParentRequest) returns (ChildrenResponse);
+
+  // 管理员用户管理类（admin-portal §2.3 P1 阻塞项补齐）
+  rpc CreateUser(CreateUserRequest) returns (UserInfo);
+  rpc UpdateUser(UpdateUserRequest) returns (UserInfo);
+  rpc DeleteUser(DeleteUserRequest) returns (DeleteUserResponse);
 }
 
 // ========== 认证类 ==========
@@ -159,3 +174,29 @@ message EffectiveDataScope {
   repeated string scope_ids = 3; // class_id 列表（CLASS 级）/ grade_id 列表（GRADE 级）
   string school_id = 4; // SCHOOL 级时的学校 ID
 }
+
+// ========== 管理员用户管理类 ==========
+
+message CreateUserRequest {
+  string email = 1;
+  string password = 2;
+  string name = 3;
+  string role_id = 4; // 可选：指定角色 ID（不传则使用默认 teacher 角色）
+  string data_scope = 5; // 可选：self / subject / class / grade / school / all
+}
+
+message UpdateUserRequest {
+  string user_id = 1;
+  string name = 2; // 可选
+  string email = 3; // 可选
+  string status = 4; // 可选：active / inactive / locked
+  string data_scope = 5; // 可选：self / subject / class / grade / school / all
+}
+
+message DeleteUserRequest {
+  string user_id = 1;
+}
+
+message DeleteUserResponse {
+  bool success = 1;
+}