优化

src/modules/tenant-management/api/merchantIam.test.mjs

@@ -20,6 +20,10 @@ test('declares the documented merchant role and member endpoints', () => {
   assert.match(source, /url: `\/merchant\/v1\/iam\/members\/\$\{membershipId\}\/status`/)
   assert.match(source, /url: `\/merchant\/v1\/iam\/members\/\$\{membershipId\}\/password`/)
   assert.match(source, /url: '\/merchant\/v1\/iam\/profile'/)
+  assert.match(source, /url: '\/merchant\/v1\/iam\/authorization\/permissions'/)
+  assert.match(authSource, /getCurrentMerchantPermissionCodes\(\)/)
+  assert.doesNotMatch(authSource, /payload\.permissions/)
+  assert.doesNotMatch(authSource, /payload\.roles/)
 })
 
 test('supports tenant profile updates and authenticated qualification downloads', () => {

src/modules/tenant-management/api/merchantIam.ts

@@ -145,6 +145,10 @@ export function getMerchantPermissionResources() {
   return apiRequest<MerchantPermissionResource[]>({ method: 'GET', url: '/merchant/v1/iam/permissions' })
 }
 
+export function getCurrentMerchantPermissionCodes() {
+  return apiRequest<string[]>({ method: 'GET', url: '/merchant/v1/iam/authorization/permissions' })
+}
+
 export function getMerchantPersonalProfile() {
   return apiRequest<MerchantPersonalProfile>({ method: 'GET', url: '/merchant/v1/iam/profile' })
 }