fix(partner): grant store staff open/close and media permissions by default

Default new sub-accounts to store:create+store:manage, backfill empty permissions on /partner/me, and treat legacy store staff as allowed to mutate.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/h5-partner/src/lib/partnerAccess.ts

@@ -41,14 +41,23 @@ export function canAccessPartnerStores(account: PartnerMe | null | undefined): b
   return hasAnyPartnerPermission(account, ['store:create', 'store:manage']);
 }
 
-/** 编辑资料 / 开闭店 / 重新上传：主账号或 store:manage / store:create */
+/** 编辑资料 / 开闭店 / 重新上传：主账号、门店权限，或历史未配权限的门店类子账号 */
 export function canManagePartnerStore(account: PartnerMe | null | undefined): boolean {
-  return hasAnyPartnerPermission(account, ['store:manage', 'store:create']);
+  if (!account) return false;
+  if (isPrimaryAccount(account)) return true;
+  if (isWarehouseStaff(account)) return false;
+  if (hasAnyPartnerPermission(account, ['store:manage', 'store:create'])) return true;
+  // 合伙人端早期创建的子账号可能 permissions 为空，按门店员工放开
+  return !Array.isArray(account.permissions) || account.permissions.length === 0;
 }
 
 /** 录入新店 */
 export function canCreatePartnerStore(account: PartnerMe | null | undefined): boolean {
-  return hasPartnerPermission(account, 'store:create');
+  if (!account) return false;
+  if (isPrimaryAccount(account)) return true;
+  if (isWarehouseStaff(account)) return false;
+  if (hasPartnerPermission(account, 'store:create')) return true;
+  return !Array.isArray(account.permissions) || account.permissions.length === 0;
 }
 
 /** 与后端 GET /partner/orders 权限点一致 */