feat(app): add error/loading boundaries across all dashboard routes and new routes

- Add error.tsx and loading.tsx boundaries for admin, parent, student, teacher routes

- Add admin announcements edit, audit-logs overview, curriculum-map, invitation-codes, permissions, questions, roles routes

- Add admin elective detail and components, files, course-plans, users, scheduling boundaries

- Add messages group-compose route

- Add parent course-plans, elective, grades report-card, practice routes

- Add student course-plans, elective detail, error-book dialogs, grades report-card, learning study-path, leave, schedule boundaries

- Add teacher attendance report, classes boundaries, course-plans boundaries, elective, exams analytics/edit-rich/all/create/new, grades report-card, homework boundaries, leave, lesson-plans calendar

- Add auth loading, onboarding loading, api cron

src/app/(dashboard)/teacher/course-plans/[id]/error.tsx

@@ -0,0 +1,20 @@
+"use client"
+
+import { useTranslations } from "next-intl"
+import { ClipboardList } from "lucide-react"
+import { EmptyState } from "@/shared/components/ui/empty-state"
+
+export default function TeacherCoursePlanDetailError() {
+  const t = useTranslations("coursePlans")
+  return (
+    <div className="p-8">
+      <EmptyState
+        icon={ClipboardList}
+        title={t("errors.loadFailed")}
+        description={t("errors.loadFailedDesc")}
+        action={{ label: t("errors.retry"), onClick: () => window.location.reload() }}
+        className="border-none shadow-none"
+      />
+    </div>
+  )
+}

src/app/(dashboard)/teacher/course-plans/[id]/loading.tsx

@@ -0,0 +1,27 @@
+import { Skeleton } from "@/shared/components/ui/skeleton"
+
+export default function TeacherCoursePlanDetailLoading() {
+  return (
+    <div className="flex h-full flex-col space-y-6 p-8">
+      <div className="flex items-center justify-between">
+        <Skeleton className="h-8 w-[240px]" />
+        <div className="flex gap-2">
+          <Skeleton className="h-9 w-[80px]" />
+          <Skeleton className="h-9 w-[80px]" />
+        </div>
+      </div>
+      <Skeleton className="h-4 w-full max-w-md" />
+      <div className="grid gap-4 md:grid-cols-3">
+        {Array.from({ length: 3 }).map((_, i) => (
+          <Skeleton key={i} className="h-[100px] w-full" />
+        ))}
+      </div>
+      <div className="space-y-3">
+        <Skeleton className="h-10 w-full" />
+        {Array.from({ length: 4 }).map((_, i) => (
+          <Skeleton key={i} className="h-12 w-full" />
+        ))}
+      </div>
+    </div>
+  )
+}

src/app/(dashboard)/teacher/course-plans/[id]/page.tsx

@@ -13,9 +13,13 @@ export default async function TeacherCoursePlanDetailPage({
 }: {
   params: Promise<{ id: string }>
 }): Promise<JSX.Element> {
-  await requirePermission(Permissions.COURSE_PLAN_READ)
+  const ctx = await requirePermission(Permissions.COURSE_PLAN_READ)
   const { id } = await params
-  const plan = await getCoursePlanById(id)
+  // P0-1/P0-3：教师视角仅能查看自己负责的计划，避免信息泄露
+  const plan = await getCoursePlanById(
+    id,
+    { userId: ctx.userId, isAdmin: false, teacherId: ctx.userId }
+  )
 
   if (!plan) notFound()
 
@@ -24,6 +28,9 @@ export default async function TeacherCoursePlanDetailPage({
       <CoursePlanDetail
         plan={plan}
         backHref="/teacher/course-plans"
+        successHref="/teacher/course-plans"
+        textbooksHref="/teacher/textbooks"
+        homeworkHref="/teacher/homework"
       />
     </div>
   )

src/app/(dashboard)/teacher/course-plans/error.tsx

@@ -0,0 +1,20 @@
+"use client"
+
+import { useTranslations } from "next-intl"
+import { ClipboardList } from "lucide-react"
+import { EmptyState } from "@/shared/components/ui/empty-state"
+
+export default function TeacherCoursePlansError() {
+  const t = useTranslations("coursePlans")
+  return (
+    <div className="p-8">
+      <EmptyState
+        icon={ClipboardList}
+        title={t("errors.loadFailed")}
+        description={t("errors.loadFailedDesc")}
+        action={{ label: t("errors.retry"), onClick: () => window.location.reload() }}
+        className="border-none shadow-none"
+      />
+    </div>
+  )
+}

src/app/(dashboard)/teacher/course-plans/loading.tsx

@@ -0,0 +1,21 @@
+import { Skeleton } from "@/shared/components/ui/skeleton"
+
+export default function TeacherCoursePlansLoading() {
+  return (
+    <div className="flex h-full flex-col space-y-8 p-8">
+      <div className="space-y-2">
+        <Skeleton className="h-8 w-[180px]" />
+        <Skeleton className="h-4 w-[300px]" />
+      </div>
+      <div className="flex gap-2">
+        <Skeleton className="h-9 w-[120px]" />
+        <Skeleton className="h-9 w-[120px]" />
+      </div>
+      <div className="grid grid-cols-1 gap-4 md:grid-cols-2 lg:grid-cols-3">
+        {Array.from({ length: 6 }).map((_, i) => (
+          <Skeleton key={i} className="h-[160px] w-full" />
+        ))}
+      </div>
+    </div>
+  )
+}

src/app/(dashboard)/teacher/course-plans/page.tsx

@@ -1,24 +1,15 @@
 import type { JSX } from "react"
+import { getTranslations } from "next-intl/server"
+
 import { requirePermission } from "@/shared/lib/auth-guard"
 import { Permissions } from "@/shared/types/permissions"
 import { getParam, type SearchParams } from "@/shared/lib/search-params"
 import { getCoursePlans } from "@/modules/course-plans/data-access"
 import { CoursePlanList } from "@/modules/course-plans/components/course-plan-list"
-import type { CoursePlanStatus } from "@/modules/course-plans/types"
+import { isCoursePlanStatus } from "@/modules/course-plans/types"
 
 export const dynamic = "force-dynamic"
 
-const VALID_STATUSES: ReadonlySet<string> = new Set([
-  "planning",
-  "active",
-  "completed",
-  "paused",
-])
-
-function parseStatus(v?: string): CoursePlanStatus | undefined {
-  return v && VALID_STATUSES.has(v) ? (v as CoursePlanStatus) : undefined
-}
-
 export default async function TeacherCoursePlansPage({
   searchParams,
 }: {
@@ -27,21 +18,25 @@ export default async function TeacherCoursePlansPage({
   const ctx = await requirePermission(Permissions.COURSE_PLAN_READ)
   const teacherId = ctx.userId
 
+  const t = await getTranslations("coursePlans")
   const sp = await searchParams
   const statusParam = getParam(sp, "status")
-  const status = parseStatus(statusParam)
+  // P1-4：使用类型守卫替代 as 断言
+  const status = isCoursePlanStatus(statusParam) ? statusParam : undefined
 
+  // P0-3：data-access 按教师范围过滤
   const plans = teacherId
-    ? await getCoursePlans({ teacherId, status })
+    ? await getCoursePlans(
+        { teacherId, status },
+        { userId: teacherId, isAdmin: false, teacherId }
+      )
     : []
 
   return (
     <div className="flex h-full flex-col space-y-8 p-8">
       <div className="space-y-1">
-        <h1 className="text-2xl font-bold tracking-tight">My Course Plans</h1>
-        <p className="text-muted-foreground">
-          View your course teaching plans and weekly schedules.
-        </p>
+        <h1 className="text-2xl font-bold tracking-tight">{t("teacher.title")}</h1>
+        <p className="text-muted-foreground">{t("teacher.description")}</p>
       </div>
       <CoursePlanList
         plans={plans}