fix: close phase4 overseas acceptance gaps

iam/src/test/java/com/baiyue/iam/repository/OverseasPhase4PermissionSqlContractTest.java

@@ -40,6 +40,7 @@ class OverseasPhase4PermissionSqlContractTest {
         Set<String> catalog = codes(sql);
         assertThat(sql).contains(REQUIRED.toArray(String[]::new));
         assertThat(sql).contains("'lastleg:pda:operate'");
+        assertPdaPickerGrant(sql);
         assertThat(catalog).hasSize(53).noneMatch(code -> code.endsWith(":view"));
         assertThat(sql).contains("permission_code LIKE 'platform:lastleg:%'", "status='INACTIVE'", "deleted=1");
         assertThat(sql).doesNotContain(":carton:", ":product:", ":outbound:", ":delivery:");
@@ -55,6 +56,7 @@ class OverseasPhase4PermissionSqlContractTest {
             .getContentAsString(StandardCharsets.UTF_8));
         assertThat(codes(sql)).containsAll(moduleCatalog);
         assertThat(sql).contains("baiyue_iam.iam_permission", "baiyue_iam.iam_role_permission", "'lastleg:pda:operate'");
+        assertPdaPickerGrant(sql);
         assertCustomAdminGrant(sql);
     }
 
@@ -89,6 +91,24 @@ class OverseasPhase4PermissionSqlContractTest {
             .containsExactlyInAnyOrderElementsOf(CUSTOM_ADMIN_PERMISSIONS);
     }
 
+    private static void assertPdaPickerGrant(String sql) {
+        assertThat(sql).contains(
+            "permission.permission_code<>'lastleg:pda:operate'",
+            "role.id=4000005",
+            "assert_overseas_pda_picker_permission",
+            "存在非仓库拣货员授权",
+            "role.role_code='WAREHOUSE_PICKER'",
+            "permission.permission_code='lastleg:pda:operate'",
+            "role.role_code='PLATFORM_ADMIN'",
+            "DELETE role_permission FROM");
+        int picker = sql.indexOf("role.role_code='WAREHOUSE_PICKER'");
+        int grantStart = sql.lastIndexOf("INSERT IGNORE INTO", picker);
+        int grantEnd = sql.indexOf(';', picker);
+        assertThat(grantStart).isGreaterThanOrEqualTo(0);
+        assertThat(grantEnd).isGreaterThan(picker);
+        assertThat(sql.substring(grantStart, grantEnd)).contains("lastleg:pda:operate");
+    }
+
     private static String repositoryFile(String relativePath) throws Exception {
         Path path = Path.of(relativePath);
         if (!Files.exists(path)) path = Path.of("..").resolve(relativePath);

iam/src/test/java/com/baiyue/iam/repository/WarehouseRoleSqlContractTest.java

@@ -45,6 +45,7 @@ class WarehouseRoleSqlContractTest {
             .contains("依赖的三期平台权限尚未完整部署")
             .contains("DELETE role_permission")
             .contains("expected.permission_code IS NULL")
+            .contains("role.role_code = 'WAREHOUSE_PICKER' AND permission.permission_code = 'lastleg:pda:operate'")
             .contains("最小权限授权未完整写入")
             .contains("grant_row.tenant_id = 0) <> 19")
             .contains("(6000004, 4000004, 0, 'TENANT', NULL)")