优化

scripts/admin-test-env-modules/customer-system-contract.test.mjs

@@ -30,6 +30,16 @@ test('系统验收覆盖后端四种权限资源类型并清理测试资源', ()
   assert.match(system, /DELETE.*permissions\/\$\{additionalPermissionId\}/s)
 })
 
+test('system后刷新双Token且受限海外权限只接受403语义', () => {
+  assert.match(acceptance, /module === 'system' && laterOverseasModule/)
+  assert.match(acceptance, /refreshSession\('system模块权限与角色变更完成'\)/)
+  assert.match(acceptance, /system后新admin海外Token只读探针可用/)
+  assert.match(acceptance, /Date\.now\(\) \+ 120_000 >= this\.overseasExpiresAt/)
+  assert.match(system, /缺少canonical海外订单权限必须403/)
+  assert.match(system, /denied\.http === 403 \|\| \['403', 'A0403'\]\.includes/)
+  assert.doesNotMatch(system, /A0401[^\r\n]{0,120}(必须403|includes)/)
+})
+
 test('客户验收覆盖客户维度操作日志列表和详情快照', () => {
   assert.match(acceptance, /audit\/logs\?accountId=\$\{tenantId\}&eventType=PLATFORM_TENANT_UPDATE&resourceType=TENANT&resourceId=\$\{tenantId\}/)
   assert.match(acceptance, /PLATFORM_TENANT_UPDATE/)