feat(fleet): enforce reviewed trips and original fee coverage for dispatch

scripts/admin-test-env-modules/initialization-baseline-contract.test.mjs

@@ -9,7 +9,7 @@ const domesticSchemas = ['baiyue_auth', 'baiyue_iam', 'baiyue_order', 'baiyue_wa
 const overseasSchemas = ['baiyue_lastleg', 'baiyue_lastlag_warehouse']
 
 test('两个入口分别只操作八个主业务库与两个仓储业务库，包括限定名引用', () => {
-  for (const [sql, allowed, other, count] of [[cn, domesticSchemas, overseasSchemas, 223], [overseas, overseasSchemas, domesticSchemas, 136]]) {
+  for (const [sql, allowed, other, count] of [[cn, domesticSchemas, overseasSchemas, 223], [overseas, overseasSchemas, domesticSchemas, 145]]) {
     assert.deepEqual([...sql.matchAll(/^CREATE DATABASE IF NOT EXISTS (\w+)/gm)].map(m => m[1]), allowed)
     assert.deepEqual([...new Set([...sql.matchAll(/^USE (\w+);/gm)].map(m => m[1]))], allowed)
     const body = sql.replace(/^--.*$/gm, '')
@@ -28,7 +28,7 @@ test('纯初始化禁止迁移、数据回填、清理、重复建表和提前
     assert.doesNotMatch(body.replace(/^CREATE TRIGGER [\s\S]*?\$\$/gm, ''), /^\s*(?:UPDATE|DELETE FROM|REPLACE INTO)\b/gmi)
     assert.doesNotMatch(body, /CREATE TABLE IF NOT EXISTS/i)
     assert.equal((body.match(/AS initialization_status/g) ?? []).length, 1)
-    assert.match(body.trim(), /SELECT 'PASS' AS initialization_status, '(CN|OVERSEAS)' AS region, (223|136) AS initialized_tables;$/)
+    assert.match(body.trim(), /SELECT 'PASS' AS initialization_status, '(CN|OVERSEAS)' AS region, (223|145) AS initialized_tables;$/)
   }
 })
 
@@ -56,7 +56,7 @@ test('平台管理员由外部bcrypt引导，强制首登改密且不创建客
 })
 
 test('必要系统种子完整保留，但不写入示例资源与业务事实', () => {
-  for (const [name, count] of Object.entries({ iam_role: 8, iam_permission: 370, iam_role_permission: 551,
+  for (const [name, count] of Object.entries({ iam_role: 8, iam_permission: 392, iam_role_permission: 573,
     iam_data_scope: 7, wh_warehouse: 318, wh_warehouse_address: 318, wh_service_capability: 4,
     fl_fee_item: 112, fl_price_channel_catalog: 15, fl_price_origin_alias: 7, fl_price_warehouse_mapping: 4,
     file_export_task_guard: 1, fin_subject: 1 })) assert.equal(seedRows(cn, name).length, count, name)
@@ -81,6 +81,14 @@ test('国内IAM权限与角色授权没有丢失或悬挂，客户模板仍完
     'merchant:warehouse:delivery:list', 'merchant:warehouse:delivery:create']) assert.ok(merchant.has(code), code)
   const admin = roleAuthorities(cn, 'PLATFORM_ADMIN')
   assert.ok(admin.has('lastleg:cargo-discard:approve'), 'existing discard review endpoint must be grantable to platform administrator')
+  for (const action of ['list', 'create', 'edit', 'status', 'review', 'upload']) {
+    assert.ok(admin.has(`platform:overseas-master-data:driver:${action}`))
+  }
+  for (const action of ['list', 'create', 'edit', 'assign', 'cancel']) {
+    assert.ok(admin.has(`platform:fleet:trip:${action}`))
+  }
+  assert.ok(!permissions.some(row => row.permission_code === 'platform:order:complete'),
+    '订单完成必须由可信履约回写产生，不能恢复人工完成权限')
   for (const code of ['platform:order:declaration:edit', 'platform:firstleg:inbound:hold',
     'platform:overseas-warehouse:last-mile-order:list', 'platform:overseas-business:purchase:list',
     'platform:overseas-master-data:quote:list', 'platform:finance:fee-source:review',