fix(lastleg): unblock inbound plan handoff

lastleg-service/src/main/java/com/baiyue/lastleg/inboundplan/controller/InboundPlanController.java

@@ -49,7 +49,7 @@ public class InboundPlanController {
         + OverseasPermissions.INBOUND_ORDER_CREATE)
     public ApiResponse<InboundPlanResponse> convert(@AuthenticationPrincipal AuthenticatedUser user,
                                                     @Valid @RequestBody ConvertInboundPlanRequest request) {
-        return ApiResponse.success(service.convert(scope(user, request.customerId()), request.orderId()));
+        return ApiResponse.success(service.convert(convertScope(user, request.customerId()), request.orderId()));
     }
 
     @GetMapping("/{planNo}")
@@ -118,4 +118,12 @@ public class InboundPlanController {
         }
         return String.valueOf(user.tenantId());
     }
+
+    private String convertScope(AuthenticatedUser user, String requestedCustomer) {
+        if (user != null && "PLATFORM".equals(user.appCode()) && user.tenantId() != null && user.tenantId() == 0L
+            && (requestedCustomer == null || requestedCustomer.isBlank() || "0".equals(requestedCustomer.trim()))) {
+            throw new ResponseStatusException(HttpStatus.BAD_REQUEST, "平台生成入库计划必须指定客户");
+        }
+        return scope(user, requestedCustomer);
+    }
 }

lastleg-service/src/main/java/com/baiyue/lastleg/inboundplan/dto/ConvertInboundPlanRequest.java

@@ -1,9 +1,10 @@
 package com.baiyue.lastleg.inboundplan.dto;
 
 import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
 
 public record ConvertInboundPlanRequest(
     @NotNull Long orderId,
-    String customerId
+    @Size(max = 128) String customerId
 ) {
 }

lastleg-service/src/main/java/com/baiyue/lastleg/inboundplan/service/InboundPlanService.java

@@ -59,6 +59,9 @@ public class InboundPlanService {
 
     @Transactional
     public InboundPlanResponse convert(String customerId, Long selectedOrderId) {
+        if (customerId == null || customerId.isBlank() || "0".equals(customerId.trim())) {
+            throw new ResponseStatusException(HttpStatus.BAD_REQUEST, "平台生成入库计划必须指定客户");
+        }
         List<SourceOrderSnapshot> orders = orderMapper.lockOrder(customerId, selectedOrderId);
         if (orders == null || orders.isEmpty()) {
             throw new ResponseStatusException(HttpStatus.NOT_FOUND, "Inbound order not found");