test: harden admin acceptance fixtures and transport retries

scripts/phase4-overseas-acceptance-entry-contract.test.mjs

@@ -131,10 +131,26 @@ test('entry has no built-in environment address or password and requires explici
   const options = parseArguments([
     '--gateway', 'http://localhost:9000', '--overseas-gateway', 'http://localhost:9300',
     '--username', 'contract-user', '--password', 'contract-password', '--modules', 'phase4-overseas-pda',
+    '--pda-username', 'contract-picker', '--pda-password', 'contract-picker-password',
   ])
   assert.equal(validateExecutionOptions(options), options)
 })
 
+test('loading dependency chains require PDA credentials before making any HTTP requests', () => {
+  for (const module of ['phase3-loading', 'phase3-container-loading', 'phase5-overseas-fulfillment']) {
+    const options = parseArguments(['--gateway', 'http://localhost:9000',
+      '--overseas-gateway', 'http://localhost:9300', '--username', 'admin', '--password', 'fixture',
+      '--modules', module])
+    options.pdaUsername = ''
+    options.pdaPassword = ''
+    assert.throws(() => validateExecutionOptions(options), /PDA 作业员凭据/)
+    options.pdaUsername = 'picker'
+    assert.throws(() => validateExecutionOptions(options), /PDA 作业员凭据/)
+    options.pdaPassword = 'fixture'
+    assert.equal(validateExecutionOptions(options), options)
+  }
+})
+
 test('core coverage gaps fail closed while device and external-provider gaps remain report-only', () => {
   const run = new AcceptanceRun({ gateway: 'http://localhost:9000', overseasGateway: 'http://localhost:9300',
     username: 'contract-user', password: 'contract-password', modules: [], output: '' })