完善delivery端状态bug

docs/sql/20_rls/delivery/ak_delivery_rls_v2.sql

@@ -11,6 +11,7 @@ ALTER TABLE public.ml_delivery_stations ENABLE ROW LEVEL SECURITY;
 
 -- 清理旧策略
 DROP POLICY IF EXISTS delivery_staff_self_select ON public.ml_delivery_staff;
+DROP POLICY IF EXISTS delivery_staff_assignable_select ON public.ml_delivery_staff;
 DROP POLICY IF EXISTS delivery_staff_self_update ON public.ml_delivery_staff;
 DROP POLICY IF EXISTS delivery_stations_select_active ON public.ml_delivery_stations;
 
@@ -29,7 +30,20 @@ CREATE POLICY delivery_staff_self_select
     )
   );
 
--- 2. 执行人员本人可更新自己的在线状态等自有档案字段
+-- 2. 已登录用户仅可读取可派单的在线服务人员，用于自动派单
+CREATE POLICY delivery_staff_assignable_select
+  ON public.ml_delivery_staff
+  FOR SELECT
+  TO authenticated
+  USING (
+    deleted_at IS NULL
+    AND status = 1
+    AND COALESCE(is_active, true) = true
+    AND online_status = 'online'
+    AND uid IS NOT NULL
+  );
+
+-- 3. 执行人员本人可更新自己的在线状态等自有档案字段
 CREATE POLICY delivery_staff_self_update
   ON public.ml_delivery_staff
   FOR UPDATE
@@ -53,11 +67,11 @@ CREATE POLICY delivery_staff_self_update
     )
   );
 
--- 3. 提货点/机构对前台保持只读，仅返回启用且未删除数据
+-- 4. 提货点/机构对前台保持只读，仅返回启用且未删除数据
 CREATE POLICY delivery_stations_select_active
   ON public.ml_delivery_stations
   FOR SELECT
   TO anon, authenticated
   USING (status = 1 AND deleted_at IS NULL);
 
--- 4. 其余直连写操作默认不开放，管理端统一走 SECURITY DEFINER RPC
+-- 5. 其余直连写操作默认不开放，管理端统一走 SECURITY DEFINER RPC