feat(nav): 新增前台公开导航页与后台导航管理

新增模块
- Nav 模型（applications/models/admin_nav.py）：公开导航表，与 admin_power 解耦
- NavOutSchema / NavManageSchema（applications/schemas/admin_nav.py）
- 前台公开视图 applications/view/public/nav.py：/site/、/site/category/<name>、/site/api/navs，无需登录
- 后台管理视图 applications/view/system/nav.py：CRUD + 启用/禁用，挂入 system_bp
- 前台模板 templates/public/{base,index,category}.html（独立配色，无需登录即可访问）
- 后台模板 templates/system/nav/{main,add,edit}.html（Layui table + form）

调整
- applications/view/__init__.py：注册前台蓝图到根
- applications/view/system/__init__.py：注册后台 nav 子蓝图
- applications/common/script/admin.py：admin init/export 支持 navs 数组
- applications/common/script/app_data/init.json：新增 10 条导航种子 + 4 条 system:nav 权限

数据库
- 新增 public_nav 表（含 category 索引）
- migration: 38751d88d42c_add_public_nav_table.py

applications/view/__init__.py

@@ -1,8 +1,13 @@
 from applications.view.system import register_system_bps
+from applications.view.public import bp as public_bp  # public 包的入口就是 nav_bp
 from applications.extensions.init_plugins import broadcast_execute
 
 
 def init_bps(app):
+    # 前台公开蓝图（无需登录）
+    app.register_blueprint(public_bp)
+
+    # 后台系统蓝图（需要登录 + 权限码）
     register_system_bps(app)
 
     # 插件初始化函数

applications/view/public/__init__.py

@@ -0,0 +1,13 @@
+"""
+前台公开蓝图：导航聚合页 / 分类详情页
+
+URL 前缀：/site（避免与后台 / 路由冲突）
+鉴权要求：无（任何用户都可访问，含未登录匿名用户）
+
+注意：不要给这些视图加 @authorize 装饰器，否则会强制登录_required。
+"""
+from applications.view.public.nav import bp as nav_bp
+
+
+# 把 nav 蓝图作为 public 包的对外入口
+bp = nav_bp

applications/view/public/nav.py

@@ -0,0 +1,80 @@
+"""
+前台导航页视图（无需登录）。
+
+URL 路径（挂在根路径下，便于匿名访问）：
+- GET /site                  公开导航聚合首页（按分类展示所有启用的导航）
+- GET /site/category/<name>   分类详情：展示指定分类下所有启用的导航
+- GET /site/api/navs          JSON 接口（供前端动态加载）
+
+注意：
+- 这些视图**不加** @authorize，避免 login_required 强制登录。
+- 使用 url_prefix='/site' 避免与后台 / 路由冲突（后台 / 是登录后的工作台）。
+"""
+from collections import OrderedDict
+
+from flask import Blueprint, render_template, request, jsonify
+
+from applications.models import Nav
+
+bp = Blueprint('public_nav', __name__, url_prefix='/site')
+
+
+@bp.get('/')
+def index():
+    """
+    公开首页：按 category 分组聚合，渲染模板
+    """
+    groups = _grouped_navs()
+    total = sum(len(items) for items in groups.values())
+    return render_template(
+        'public/index.html',
+        groups=groups,
+        total=total,
+        site_name='BWStudio · 导航',
+    )
+
+
+@bp.get('/category/<string:name>')
+def category_detail(name: str):
+    """
+    分类详情页：列出指定分类下所有启用的导航
+    """
+    items = (
+        Nav.query
+        .filter(Nav.category == name, Nav.status == 1)
+        .order_by(Nav.sort.asc(), Nav.id.asc())
+        .all()
+    )
+    return render_template(
+        'public/category.html',
+        category=name,
+        items=items,
+        site_name='BWStudio · 导航',
+    )
+
+
+@bp.get('/api/navs')
+def api_navs():
+    """
+    JSON 接口：返回按分类聚合的导航数据
+    可用于首页卡片动态加载、第三方嵌入等
+    """
+    return jsonify({
+        'success': True,
+        'msg': '请求成功',
+        'data': _grouped_navs(),
+    })
+
+
+def _grouped_navs() -> "OrderedDict[str, list]":
+    """按 category 分组，组内按 sort asc 排序"""
+    items = (
+        Nav.query
+        .filter(Nav.status == 1)
+        .order_by(Nav.category.asc(), Nav.sort.asc(), Nav.id.asc())
+        .all()
+    )
+    groups = OrderedDict()
+    for item in items:
+        groups.setdefault(item.category, []).append(item.to_dict())
+    return groups

applications/view/system/__init__.py

@@ -6,6 +6,7 @@ from applications.view.system.index import bp as index_bp
 from applications.view.system.log import bp as log_bp
 from applications.view.system.mail import bp as mail_bp
 from applications.view.system.monitor import bp as monitor_bp
+from applications.view.system.nav import bp as nav_bp
 from applications.view.system.passport import bp as passport_bp
 from applications.view.system.power import bp as power_bp
 from applications.view.system.rights import bp as right_bp
@@ -30,5 +31,6 @@ def register_system_bps(app: Flask):
     system_bp.register_blueprint(passport_bp)
     system_bp.register_blueprint(right_bp)
     system_bp.register_blueprint(dept_bp)
+    system_bp.register_blueprint(nav_bp)
     app.register_blueprint(index_bp)
     app.register_blueprint(system_bp)

applications/view/system/nav.py

@@ -0,0 +1,142 @@
+"""
+后台导航管理视图（需要登录 + 权限码 system:nav:*）
+
+提供 Nav 模型的 CRUD 接口，供后台管理员维护前台公开导航。
+"""
+from flask import Blueprint, render_template, request
+from flask_login import current_user
+
+from applications.common.utils.http import table_api, fail_api, success_api
+from applications.common.utils.rights import authorize
+from applications.common.utils.validate import str_escape
+from applications.extensions import db
+from applications.extensions.init_limit import limiter
+from applications.models import Nav
+from applications.schemas import NavManageSchema
+
+bp = Blueprint('nav', __name__, url_prefix='/nav')
+
+
+@bp.get('/')
+@authorize("system:nav:main")
+def main():
+    """导航管理主页"""
+    return render_template('system/nav/main.html')
+
+
+@bp.get('/data')
+@limiter.limit("60 per minute")
+@authorize("system:nav:main")
+def data():
+    """表格数据接口"""
+    keyword = str_escape(request.args.get('keyword', type=str))
+    category = str_escape(request.args.get('category', type=str))
+
+    query = Nav.query
+    if keyword:
+        query = query.filter(
+            db.or_(
+                Nav.title.contains(keyword),
+                Nav.url.contains(keyword),
+                Nav.description.contains(keyword),
+            )
+        )
+    if category:
+        query = query.filter(Nav.category == category)
+
+    items = query.order_by(Nav.category.asc(), Nav.sort.asc(), Nav.id.asc()).all()
+    data = NavManageSchema(many=True).dump(items)
+    return table_api(msg="请求成功", data=data, count=len(data))
+
+
+@bp.get('/add')
+@authorize("system:nav:add", log=True)
+def add():
+    return render_template('system/nav/add.html')
+
+
+@bp.post('/save')
+@authorize("system:nav:add", log=True)
+def save():
+    req = request.get_json(force=True)
+    try:
+        nav = Nav(
+            category=str_escape(req.get('category')),
+            title=str_escape(req.get('title')),
+            url=str_escape(req.get('url')),
+            description=str_escape(req.get('description')),
+            icon=str_escape(req.get('icon')) or 'layui-icon-link',
+            sort=int(req.get('sort') or 0),
+            status=int(req.get('status') or 1),
+            is_external=int(req.get('isExternal') or 1),
+            create_by=current_user.username if current_user.is_authenticated else 'admin',
+        )
+        db.session.add(nav)
+        db.session.commit()
+    except Exception as e:
+        db.session.rollback()
+        return fail_api(msg=f"新增失败：{e}")
+    return success_api(msg="新增成功")
+
+
+@bp.get('/edit')
+@authorize("system:nav:edit", log=True)
+def edit():
+    nav_id = request.args.get("navId", type=int)
+    nav = Nav.query.get(nav_id)
+    if not nav:
+        return fail_api(msg="导航不存在")
+    return render_template('system/nav/edit.html', nav=nav)
+
+
+@bp.put('/update')
+@authorize("system:nav:edit", log=True)
+def update():
+    req = request.get_json(force=True)
+    nav_id = req.get('id')
+    nav = Nav.query.get(nav_id)
+    if not nav:
+        return fail_api(msg="导航不存在")
+    try:
+        nav.category = str_escape(req.get('category')) or nav.category
+        nav.title = str_escape(req.get('title')) or nav.title
+        nav.url = str_escape(req.get('url')) or nav.url
+        nav.description = str_escape(req.get('description'))
+        nav.icon = str_escape(req.get('icon')) or 'layui-icon-link'
+        nav.sort = int(req.get('sort') or 0)
+        nav.status = int(req.get('status') or 1)
+        nav.is_external = int(req.get('isExternal') or 1)
+        db.session.commit()
+    except Exception as e:
+        db.session.rollback()
+        return fail_api(msg=f"更新失败：{e}")
+    return success_api(msg="更新成功")
+
+
+@bp.delete('/remove/<int:_id>')
+@authorize("system:nav:remove", log=True)
+def remove(_id):
+    nav = Nav.query.get(_id)
+    if not nav:
+        return fail_api(msg="导航不存在")
+    db.session.delete(nav)
+    db.session.commit()
+    return success_api(msg="删除成功")
+
+
+@bp.put('/enable')
+@authorize("system:nav:edit", log=True)
+def enable():
+    nav_id = request.get_json(force=True).get('navId')
+    Nav.query.filter_by(id=nav_id).update({"status": 1})
+    db.session.commit()
+    return success_api(msg="已启用")
+
+
+@bp.put('/disable')
+@authorize("system:nav:edit", log=True)
+def disable():
+    nav_id = request.get_json(force=True).get('navId')
+    Nav.query.filter_by(id=nav_id).update({"status": 0})
+    db.session.commit()
+    return success_api(msg="已禁用")