进行了一些小优化

src/Identity/TransitionService.php

@@ -76,6 +76,11 @@ final class TransitionService {
 		return $updated;
     }
 
+	/** @return array<int,string> */
+	public static function allowed_targets(string $status): array {
+		return self::ALLOWED[sanitize_key($status)] ?? [];
+	}
+
 	/**
 	 * Apply an identity transition inside an already-owned database transaction.
 	 * The caller must lock the application row before invoking this method.