From 67ad2ed82580cc379e056a169390ff15117c0e9d Mon Sep 17 00:00:00 2001
From: ouyangxq <775153912@qq.com>
Date: Tue, 25 Aug 2026 19:56:47 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BC=98=E5=8C=96?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .env.example                    | 3 +++
 README.md                       | 2 ++
 src/config/runtime.js           | 5 +++++
 src/pages/login/login.vue       | 3 ++-
 tests/project-contract.test.mjs | 8 +++++---
 5 files changed, 17 insertions(+), 4 deletions(-)

diff --git a/.env.example b/.env.example
index ea4b441..8f10117 100644
--- a/.env.example
+++ b/.env.example
@@ -1,2 +1,5 @@
 VITE_AUTH_API_BASE_URL=/api
 VITE_OVERSEAS_API_BASE_URL=/api/overseas
+# 仅开发服务器自动预填；请在不提交的 .env.local 中填写真实开发账号。
+VITE_PDA_DEV_USERNAME=
+VITE_PDA_DEV_PASSWORD=
diff --git a/README.md b/README.md
index 3be9296..374a660 100644
--- a/README.md
+++ b/README.md
@@ -14,6 +14,8 @@ npm test
 npm run dev:h5
 ```
 
+开发环境可在不提交的 `.env.local` 中配置 `VITE_PDA_DEV_USERNAME`、`VITE_PDA_DEV_PASSWORD`，登录页会自动预填；生产 App 构建始终忽略这两个值，账号必须具备 `WAREHOUSE_PICKER`、`lastleg:pda:operate` 和有效海外仓绑定。
+
 生产编译：
 
 ```powershell
diff --git a/src/config/runtime.js b/src/config/runtime.js
index 5d4ca4b..5831692 100644
--- a/src/config/runtime.js
+++ b/src/config/runtime.js
@@ -1,6 +1,11 @@
 const runtimeEnvironment = import.meta.env || {}
 const configuredAuthApiRoot = runtimeEnvironment.VITE_AUTH_API_BASE_URL || ''
 const configuredOverseasApiRoot = runtimeEnvironment.VITE_OVERSEAS_API_BASE_URL || ''
+const development = Boolean(runtimeEnvironment.DEV)
 
 export const API_ROOT = String(configuredAuthApiRoot || '/api').replace(/\/$/, '')
 export const OVERSEAS_API_ROOT = String(configuredOverseasApiRoot || '/api/overseas').replace(/\/$/, '')
+export const DEV_LOGIN = Object.freeze({
+	username: development ? String(runtimeEnvironment.VITE_PDA_DEV_USERNAME || '') : '',
+	password: development ? String(runtimeEnvironment.VITE_PDA_DEV_PASSWORD || '') : ''
+})
diff --git a/src/pages/login/login.vue b/src/pages/login/login.vue
index 4a8107d..d42105e 100644
--- a/src/pages/login/login.vue
+++ b/src/pages/login/login.vue
@@ -15,10 +15,11 @@
 
 <script>
 	import { login as loginRequest } from '@/api/auth.js'
+	import { DEV_LOGIN } from '@/config/runtime.js'
 	import { session, restoreSession, signInWithTokens } from '@/stores/session.js'
 	import { requireOnline } from '@/utils/network.js'
 	export default {
-		data() { return { form: { userId: '', password: '' }, error: '', submitting: false } },
+		data() { return { form: { userId: DEV_LOGIN.username, password: DEV_LOGIN.password }, error: '', submitting: false } },
 		onLoad() { if (session.currentUser || restoreSession()) uni.reLaunch({ url: '/pages/home/home' }) },
 		methods: {
 			async login() {
diff --git a/tests/project-contract.test.mjs b/tests/project-contract.test.mjs
index 2f59026..7fcde96 100644
--- a/tests/project-contract.test.mjs
+++ b/tests/project-contract.test.mjs
@@ -26,12 +26,14 @@ test('overseas workbench contains only confirmed inbound and in-warehouse domain
 })
 
 test('login has no committed demo credentials and inbound operation implements the locked container flow', async () => {
-	const [login, operation, inbound, adapter, overseas] = await Promise.all([
-		read('../src/pages/login/login.vue'), read('../src/pages/operation/operation.vue'),
-		read('../src/api/inbound.js'), read('../src/api/receiving-adapter.js'), read('../src/api/overseas.js')
+	const [login, runtime, operation, inbound, adapter, overseas] = await Promise.all([
+		read('../src/pages/login/login.vue'), read('../src/config/runtime.js'),
+		read('../src/pages/operation/operation.vue'), read('../src/api/inbound.js'), read('../src/api/receiving-adapter.js'), read('../src/api/overseas.js')
 	])
 	assert.match(login, /柏悦物流海外版/)
 	assert.doesNotMatch(login, /ChangeMe|platform_admin/)
+	assert.match(login, /DEV_LOGIN\.username|DEV_LOGIN\.password/)
+	assert.match(runtime, /runtimeEnvironment\.DEV|VITE_PDA_DEV_USERNAME|VITE_PDA_DEV_PASSWORD/)
 	assert.match(operation, /startScanBroadcast/)
 	for (const action of ['prepareReceivingContainer', 'getCurrentReceiving', 'resolveCurrentSku', 'resolveCurrentCarton', 'resolveCurrentPallet', 'receiveCurrentBulk', 'receiveCurrentCarton', 'completeCurrentReceiving']) assert.match(operation, new RegExp(action))
 	for (const path of ['/candidates', '/prepare', '/unload-photos/files', '/sign', '/skus/resolve', '/cartons/resolve', '/pallets/resolve', '/receipts/bulk', '/receipts/carton', '/complete']) assert.match(inbound, new RegExp(path.replaceAll('/', '\\/')))