feat(dashboard): 仪表盘模块审计重构 — 权限校验 + i18n + 逻辑抽离

基于 dashboard-audit-report.md 审计结论，对仪表盘模块进行 P0/P1 级修复：

- 新增 4 个 dashboard 权限点（DASHBOARD_ADMIN/TEACHER/STUDENT/PARENT_READ），补充到 permissions.ts 和角色-权限映射

- 新建 actions.ts：4 个 Server Action 均调用 requirePermission() 校验权限，消除 admin 页面零鉴权、teacher/student/parent 仅 requireAuth 的安全隐患

- 根重定向页 /dashboard 改用 resolvePermissions() + 权限点判断，不再 role === xxx 硬编码

- 新建 lib/dashboard-utils.ts：抽取 toWeekday / countStudentAssignments / sortUpcomingAssignments / filterTodaySchedule / computeTeacherMetrics / getGreetingKey 纯函数，与 UI 分离，便于单测

- 新建 messages/{zh-CN,en}/dashboard.json 翻译文件，i18n request.ts 加载 dashboard 命名空间；所有视图组件接入 useTranslations / getTranslations，消除中英混杂硬编码

- 重构 4 个角色 page.tsx：通过 actions 获取数据，generateMetadata 使用 i18n

- 同步更新架构图 004 / 005 文档（dashboard exports / permissions / 文件清单）

src/shared/i18n/messages/en/dashboard.json

@@ -0,0 +1,124 @@
+{
+  "title": {
+    "admin": "Admin Console",
+    "teacher": "Teacher Workspace",
+    "student": "Student Center",
+    "parent": "Parent Center",
+    "root": "Dashboard"
+  },
+  "description": {
+    "admin": "System overview across users, learning content, and activity.",
+    "teacher": "Today's teaching overview.",
+    "student": "Today's learning overview.",
+    "parent": "An overview of your children."
+  },
+  "greeting": {
+    "morning": "Good morning",
+    "afternoon": "Good afternoon",
+    "evening": "Good evening",
+    "welcome": "Welcome back",
+    "todayIs": "Today is {date}. Here's your overview.",
+    "overview": "Here's today's overview."
+  },
+  "stats": {
+    "users": "Users",
+    "classes": "Classes",
+    "activeSessions": "Active sessions",
+    "homeworkPublished": "Homework (published)",
+    "toGrade": "To grade",
+    "enrolledClasses": "Enrolled Classes",
+    "activeEnrollments": "Active enrollments",
+    "averageScore": "Average Score",
+    "overallPerformance": "Overall performance",
+    "noGradesYet": "No grades yet",
+    "classRank": "Class Rank",
+    "currentPosition": "Current position",
+    "noRankingYet": "No ranking yet",
+    "graded": "Graded",
+    "completedAssignments": "Completed assignments",
+    "dueSoon": "Due Soon",
+    "next7Days": "Next 7 days",
+    "overdue": "Overdue",
+    "needsAttention": "Needs attention",
+    "needsGrading": "Needs Grading",
+    "submissionsPendingReview": "Submissions pending review",
+    "activeAssignments": "Active Assignments",
+    "publishedAndOngoing": "Published and ongoing",
+    "submissionRate": "Submission Rate",
+    "overallCompletionRate": "Overall completion rate",
+    "acrossRecentAssignments": "Across recent assignments"
+  },
+  "quickActions": {
+    "importUsers": "Import Users",
+    "importUsersDesc": "Batch create user accounts via Excel",
+    "newAnnouncement": "New Announcement",
+    "newAnnouncementDesc": "Publish notices to the whole school or specific grades/classes",
+    "approveSchedule": "Approve Schedule Changes",
+    "approveScheduleDesc": "Review schedule changes and substitute teacher requests",
+    "autoSchedule": "Auto Scheduling",
+    "autoScheduleDesc": "Auto-generate weekly schedules based on rules",
+    "fileManagement": "File Management",
+    "fileManagementDesc": "View and manage all uploaded files",
+    "attendanceOverview": "Attendance Overview",
+    "attendanceOverviewDesc": "View attendance records for all classes",
+    "grades": "Grades",
+    "attendance": "Attendance",
+    "announcements": "Announcements",
+    "leaveRequest": "Leave Request"
+  },
+  "todo": {
+    "title": "Today's To-Do",
+    "toGrade": "Homework to grade",
+    "todayAttendance": "Attendance to take",
+    "activeAssignments": "Active assignments",
+    "empty": "No to-do items today"
+  },
+  "sections": {
+    "userGrowthTrend": "User Growth Trend (Last 30 Days)",
+    "homeworkSubmissionTrend": "Homework Submission Trend (Last 7 Days)",
+    "userRoles": "User Roles",
+    "content": "Content",
+    "homeworkActivity": "Homework Activity",
+    "recentUsers": "Recent Users",
+    "viewAllUsers": "View all users",
+    "pendingGrading": "Pending Grading",
+    "todaySchedule": "Today's Schedule",
+    "upcomingAssignments": "Upcoming Assignments",
+    "grades": "Grades",
+    "myClasses": "My Classes",
+    "gradeTrends": "Grade Trends"
+  },
+  "table": {
+    "name": "Name",
+    "email": "Email",
+    "role": "Role",
+    "created": "Created"
+  },
+  "empty": {
+    "noUsers": "No users",
+    "noUsersDesc": "No user records found.",
+    "noUsersYet": "No users yet",
+    "seedHint": "Seed the database to see users here.",
+    "allGraded": "All graded!",
+    "allGradedDesc": "No submissions pending review.",
+    "noChildren": "No children linked",
+    "noChildrenDesc": "Your account is not linked to any student accounts yet. Please contact the school administrator to link your child.",
+    "noStudent": "No student found",
+    "noStudentDesc": "Create a student user to see dashboard.",
+    "contactSupport": "Contact support"
+  },
+  "badge": {
+    "activeSessions": "{count} active sessions",
+    "users": "{count} users",
+    "childrenLinked": "{count} children linked"
+  },
+  "error": {
+    "loadFailed": "Page load failed",
+    "loadFailedDesc": "Sorry, an unexpected error occurred while loading the page. Please try again later.",
+    "retry": "Retry"
+  },
+  "chart": {
+    "newUsers": "New users",
+    "newSubmissions": "New submissions"
+  }
+}

src/shared/i18n/messages/zh-CN/dashboard.json

@@ -0,0 +1,124 @@
+{
+  "title": {
+    "admin": "管理控制台",
+    "teacher": "教师工作台",
+    "student": "学生中心",
+    "parent": "家长中心",
+    "root": "仪表盘"
+  },
+  "description": {
+    "admin": "用户、学习内容与活动全貌",
+    "teacher": "今日教学概览",
+    "student": "今日学习概览",
+    "parent": "查看孩子的学习概况"
+  },
+  "greeting": {
+    "morning": "早上好",
+    "afternoon": "下午好",
+    "evening": "晚上好",
+    "welcome": "欢迎回来",
+    "todayIs": "今天是 {date}，以下是今日概览。",
+    "overview": "以下是今日概览。"
+  },
+  "stats": {
+    "users": "用户总数",
+    "classes": "班级数",
+    "activeSessions": "活跃会话",
+    "homeworkPublished": "已发布作业",
+    "toGrade": "待批改",
+    "enrolledClasses": "已选课程",
+    "activeEnrollments": "有效选课",
+    "averageScore": "平均分",
+    "overallPerformance": "综合表现",
+    "noGradesYet": "暂无成绩",
+    "classRank": "班级排名",
+    "currentPosition": "当前名次",
+    "noRankingYet": "暂无排名",
+    "graded": "已批改",
+    "completedAssignments": "已完成作业",
+    "dueSoon": "即将到期",
+    "next7Days": "未来 7 天",
+    "overdue": "已逾期",
+    "needsAttention": "需要关注",
+    "needsGrading": "待批改",
+    "submissionsPendingReview": "待审核提交",
+    "activeAssignments": "进行中作业",
+    "publishedAndOngoing": "已发布且进行中",
+    "submissionRate": "提交率",
+    "overallCompletionRate": "总体完成率",
+    "acrossRecentAssignments": "近期作业平均"
+  },
+  "quickActions": {
+    "importUsers": "批量导入用户",
+    "importUsersDesc": "通过 Excel 批量创建用户账号",
+    "newAnnouncement": "发布公告",
+    "newAnnouncementDesc": "向全校或指定年级/班级发布通知",
+    "approveSchedule": "审批课表变更",
+    "approveScheduleDesc": "审核教师提交的课表变更与代课申请",
+    "autoSchedule": "自动排课",
+    "autoScheduleDesc": "基于规则自动生成周课表",
+    "fileManagement": "文件管理",
+    "fileManagementDesc": "查看与管理系统中所有上传文件",
+    "attendanceOverview": "考勤总览",
+    "attendanceOverviewDesc": "查看全校所有班级的考勤记录",
+    "grades": "成绩",
+    "attendance": "考勤",
+    "announcements": "通知",
+    "leaveRequest": "请假申请"
+  },
+  "todo": {
+    "title": "今日待办",
+    "toGrade": "待批改作业",
+    "todayAttendance": "今日待考勤",
+    "activeAssignments": "进行中作业",
+    "empty": "今日无待办事项"
+  },
+  "sections": {
+    "userGrowthTrend": "用户增长趋势（近30天）",
+    "homeworkSubmissionTrend": "作业提交趋势（近7天）",
+    "userRoles": "用户角色分布",
+    "content": "内容统计",
+    "homeworkActivity": "作业活动",
+    "recentUsers": "最近注册用户",
+    "viewAllUsers": "查看全部用户",
+    "pendingGrading": "待批改",
+    "todaySchedule": "今日课表",
+    "upcomingAssignments": "即将到期的作业",
+    "grades": "成绩",
+    "myClasses": "我的班级",
+    "gradeTrends": "成绩趋势"
+  },
+  "table": {
+    "name": "姓名",
+    "email": "邮箱",
+    "role": "角色",
+    "created": "创建时间"
+  },
+  "empty": {
+    "noUsers": "暂无用户",
+    "noUsersDesc": "数据库中暂无用户记录",
+    "noUsersYet": "暂无用户",
+    "seedHint": "初始化数据库以查看用户数据",
+    "allGraded": "全部批改完成！",
+    "allGradedDesc": "暂无待批改的提交。",
+    "noChildren": "未绑定孩子",
+    "noChildrenDesc": "您的账号尚未关联任何学生账号，请联系学校管理员完成绑定。",
+    "noStudent": "未找到学生用户",
+    "noStudentDesc": "请创建学生账号以查看仪表盘。",
+    "contactSupport": "联系客服"
+  },
+  "badge": {
+    "activeSessions": "{count} 个活跃会话",
+    "users": "{count} 位用户",
+    "childrenLinked": "已关联 {count} 个孩子"
+  },
+  "error": {
+    "loadFailed": "页面加载失败",
+    "loadFailedDesc": "抱歉，页面加载时发生了意外错误。请稍后重试。",
+    "retry": "重试"
+  },
+  "chart": {
+    "newUsers": "新增用户",
+    "newSubmissions": "新增提交"
+  }
+}

src/shared/lib/permissions.ts

@@ -62,6 +62,7 @@ export const ROLE_PERMISSIONS: Record<Role, Permission[]> = {
     Permissions.FILE_UPLOAD,
     Permissions.FILE_READ,
     Permissions.FILE_DELETE,
+    Permissions.DASHBOARD_ADMIN_READ,
   ],
   teacher: [
     Permissions.EXAM_CREATE,
@@ -105,6 +106,7 @@ export const ROLE_PERMISSIONS: Record<Role, Permission[]> = {
     Permissions.LESSON_PLAN_UPDATE,
     Permissions.LESSON_PLAN_DELETE,
     Permissions.LESSON_PLAN_PUBLISH,
+    Permissions.DASHBOARD_TEACHER_READ,
   ],
   student: [
     Permissions.EXAM_READ,
@@ -125,6 +127,7 @@ export const ROLE_PERMISSIONS: Record<Role, Permission[]> = {
     Permissions.ELECTIVE_SELECT,
     Permissions.ELECTIVE_READ,
     Permissions.DIAGNOSTIC_READ,
+    Permissions.DASHBOARD_STUDENT_READ,
   ],
   parent: [
     Permissions.EXAM_READ,
@@ -137,6 +140,7 @@ export const ROLE_PERMISSIONS: Record<Role, Permission[]> = {
     Permissions.MESSAGE_SEND,
     Permissions.MESSAGE_READ,
     Permissions.MESSAGE_DELETE,
+    Permissions.DASHBOARD_PARENT_READ,
   ],
   grade_head: [
     Permissions.EXAM_CREATE,

src/shared/types/permissions.ts

@@ -117,6 +117,12 @@ export const Permissions = {
   LESSON_PLAN_UPDATE: "lesson_plan:update",
   LESSON_PLAN_DELETE: "lesson_plan:delete",
   LESSON_PLAN_PUBLISH: "lesson_plan:publish",
+
+  // Dashboard (仪表盘 — 各角色独立读权限)
+  DASHBOARD_ADMIN_READ: "dashboard:admin_read",
+  DASHBOARD_TEACHER_READ: "dashboard:teacher_read",
+  DASHBOARD_STUDENT_READ: "dashboard:student_read",
+  DASHBOARD_PARENT_READ: "dashboard:parent_read",
 } as const satisfies Record<string, string>
 
 export type Permission = (typeof Permissions)[keyof typeof Permissions]