fix(pda): bind loading evidence to cabinet tasks

tests/pda-loading-api.test.mjs

@@ -6,23 +6,20 @@ const source = await readFile(new URL('../api/pda-loading.js', import.meta.url),
 const http = await readFile(new URL('../api/http.js', import.meta.url), 'utf8')
 const page = await readFile(new URL('../pages/picking/picking.vue', import.meta.url), 'utf8')
 
-test('PDA loading adapter keeps C04 read and write paths', () => {
+test('PDA loading adapter uses only task-scoped cabinet evidence paths', () => {
   for (const path of [
-    '/first-leg/pda-loading/tasks/pending',
-    '/loading/picking?tenantId=',
-    '/loading/picking/start?tenantId=',
-    '/loading/picking/complete?tenantId=',
-    '/loading/evidence/pda?tenantId=',
-    '/loading/complete?tenantId='
+	'/first-leg/pda-loading/tasks/pending'
   ]) assert.match(source, new RegExp(path.replace(/[?]/g, '\\?')))
+	assert.match(source, /first-leg\/pda-loading\/tasks\/\$\{encodeURIComponent\(taskId\)\}\/evidence/)
   assert.match(source, /'Idempotency-Key'/)
   assert.match(source, /PHOTO_STEP_1[\s\S]*PHOTO_STEP_4[\s\S]*SEAL/)
   for (const label of ['空仓照片', '半仓照片', '满仓照片', '锁仓照片', '带锁码照']) assert.match(source, new RegExp(label))
   assert.match(source, /apiUpload\(/)
   assert.match(http, /uni\.uploadFile/)
-  assert.match(source, /\/files\/loading-evidence\//)
-  assert.match(source, /loading\/evidence\/pda\?tenantId=/)
-  assert.match(source, /loading\/evidence\/\$\{encodeURIComponent\(evidenceId\)\}\/void\/pda\?tenantId=/)
+	assert.match(source, /tasks\/\$\{encodeURIComponent\(taskId\)\}\/evidence\?\$\{query\.join\('&'\)\}/)
+	assert.match(source, /tasks\/\$\{encodeURIComponent\(taskId\)\}\/evidence\/\$\{encodeURIComponent\(evidenceId\)\}\/void/)
+	assert.doesNotMatch(source, /inbounds\/\$\{encodeURIComponent\(inboundId\)\}\/loading\/evidence/)
+	assert.doesNotMatch(source, /loading\/evidence\/pda\?tenantId=/)
   assert.match(source, /export function completeContainerPickingTask\(taskId, payload = \{\}\)/)
   assert.match(source, /first-leg\/pda-loading\/tasks\/\$\{encodeURIComponent\(taskId\)\}\/complete/)
   assert.match(source, /expectedTaskVersion/)
@@ -31,7 +28,7 @@ test('PDA loading adapter keeps C04 read and write paths', () => {
 test('PDA adapter does not treat non-200 response bodies or network failures as success', () => {
   assert.match(http, /if \(code !== '200'\)/)
   assert.match(http, /next\.network = true/)
-  assert.match(source, /throw new Error\('缺少客户隔离标识 tenantId/) 
+	assert.match(source, /throw new Error\('缺少装柜任务标识，无法上传装柜照片/)
 })
 
 test('C02 identifiers and separate picking/inbound versions are normalized explicitly', () => {
@@ -39,14 +36,14 @@ test('C02 identifiers and separate picking/inbound versions are normalized expli
   assert.match(source, /inboundVersion: row\.inboundVersion/)
   assert.match(source, /pickingVersion: row\.pickingVersion \?\? row\.loading\?\.pickingVersion/)
   assert.match(source, /pickingVersion: task\.pickingVersion \?\? task\.version/)
-	assert.match(page, /expectedVersion: Number\(this\.pickingVersion\)/)
+	assert.match(page, /version: Number\(this\.pickingVersion\)/)
 	assert.match(page, /ITEM_STATUS, classifyScan, createItemStates, getPickSummary, submitStates/)
 	assert.match(page, /taskItemId: item\.id \?\? item\.itemId/)
 	assert.match(page, /submit\.batch/)
 	assert.match(page, /item\.itemStatus === 'PICKED'/)
 	assert.match(page, /item\.itemStatus === 'PARTIAL'/)
 	assert.match(page, /!pickingCompleted && !summary\.canSubmit/)
-  assert.match(page, /this\.loadingVersion = this\.remotePick\.inboundVersion \?\? this\.remotePick\.loadingVersion/)
+	assert.doesNotMatch(page, /loadingVersion/)
   assert.match(page, /状态尚未同步，请刷新重试/)
 })
 
@@ -58,14 +55,14 @@ test('PDA normalizes the frozen active and merged container identity fields', ()
 })
 
 test('picking page exposes five evidence slots, retry and remote completion states', () => {
-  for (const text of ['PHOTO_STEP_1', 'PHOTO_STEP_4', 'SEAL', '网络失败', '确认装柜完成', 'loadingVersion']) {
+	for (const text of ['PHOTO_STEP_1', 'PHOTO_STEP_4', 'SEAL', '网络失败', '确认装柜完成']) {
     assert.match(`${source}\n${page}`, new RegExp(text))
   }
   assert.match(page, /createEvidenceUploadQueue/)
   assert.match(page, /retryEvidence/)
   assert.match(page, /uploadEvidenceFile/)
   assert.match(page, /submitting \|\| \(!pickingCompleted && !summary\.canSubmit\)/)
-  assert.match(page, /completePicking\(/)
+	assert.doesNotMatch(page, /completePicking\(/)
   assert.match(page, /sourceType: \['camera'\]/)
   assert.doesNotMatch(page, /sourceType: \['camera', 'album'\]/)
   assert.match(page, /evidenceEntries\(slot\.type\)/)
@@ -73,15 +70,16 @@ test('picking page exposes five evidence slots, retry and remote completion stat
   assert.match(page, /evidenceComplete/)
 })
 
-test('PDA evidence binding unwraps the nested loading action response before rendering saved files', () => {
-	assert.match(page, /evidenceItems\(result\)[\s\S]*?Array\.isArray\(result\?\.evidences\?\.evidences\)[\s\S]*?result\.evidences\.evidences/)
-	assert.match(page, /this\.evidenceFiles = this\.evidenceItems\(result\)[\s\S]*?\.reduce/)
-	assert.match(page, /cacheEvidencePreview\(current\.fileId, current\.localPath/)
+test('PDA evidence binding normalizes string ids from the task-scoped DTO', () => {
+	assert.match(page, /evidenceItems\(result\)[\s\S]*?id: String\(item\.evidenceId \?\? item\.id/)
+	assert.match(page, /fileId: String\(item\.fileId/)
+	assert.match(page, /applyEvidenceResponse\(result, type, localPath, identity\)[\s\S]*?this\.evidenceFiles = remoteItems[\s\S]*?\.reduce/)
+	assert.match(page, /cacheEvidencePreview\(saved\.fileId, localPath/)
 })
 
-test('PDA downloads authenticated evidence previews returned by the backend', () => {
-	assert.match(source, /export function getEvidencePreviewUrl\(inboundId, evidenceId, tenantId\)/)
-	assert.match(source, /loading\/evidence\/\$\{encodeURIComponent\(evidenceId\)\}\/content\/pda\?tenantId=/)
+test('PDA downloads authenticated task-scoped evidence previews', () => {
+	assert.match(source, /export function getEvidencePreviewUrl\(taskId, evidenceId, warehouseId\)/)
+	assert.match(source, /tasks\/\$\{encodeURIComponent\(taskId\)\}\/evidence\/\$\{encodeURIComponent\(evidenceId\)\}\/content\?warehouseId=/)
 	assert.match(source, /export function downloadEvidencePreview\(previewUrl\)/)
 	assert.match(source, /apiDownload\(\{ url \}\)/)
 	assert.match(http, /uni\.downloadFile\(/)
@@ -93,6 +91,17 @@ test('PDA downloads authenticated evidence previews returned by the backend', ()
 	assert.match(source, /const url = resolveEvidencePreviewUrl\(previewUrl, session\.apiBase/)
 })
 
+test('cabinet evidence never selects an inbound owner or builds a container route in the PDA', () => {
+	const evidenceAdapter = source.match(/export function getEvidence\(taskId, warehouseId\)[\s\S]*?export function completeContainerPickingTask/)?.[0] || ''
+	for (const field of ['inboundId', 'tenantId', 'containerBookingId']) assert.doesNotMatch(evidenceAdapter, new RegExp(field))
+	assert.match(page, /captureEvidenceIdentity\(\) \{[\s\S]*?taskId:/)
+	assert.match(page, /uploadEvidenceFile\(item\.taskId, item\.warehouseId, item, item\.localPath/)
+	assert.match(page, /queue\.add\(\{ taskId: identity\.taskId, warehouseId: identity\.warehouseId, evidenceType: type, expectedVersion/)
+	assert.doesNotMatch(page, /evidenceIdentity\?\.inboundId|identity\.inboundId/)
+	assert.doesNotMatch(page, /currentBox\.warehouseId \|\| session\.currentUser/)
+	assert.match(source, /warehouseId=\$\{encodeURIComponent\(warehouseId\)\}/)
+})
+
 test('PDA cabinet picking adapter claims online and submits one atomic batch', () => {
 	assert.match(source, /\/first-leg\/pda-loading\/tasks\/pending/)
 	assert.doesNotMatch(source, /query\.push\(`cabinetNo=/)
@@ -125,7 +134,7 @@ test('PDA cabinet picking adapter claims online and submits one atomic batch', (
 	assert.match(page, /库存快照未同步，请刷新任务后重试/)
 	assert.match(page, /拣货完成未提交，请查看错误提示/)
 	assert.match(page, /if \(remoteTask\.workflowStatus === 'UNASSIGNED'\)[\s\S]*claimContainerPickingTask/)
-	assert.match(page, /this\.loadingVersion = this\.remotePick\.inboundVersion \?\? this\.remotePick\.loadingVersion/)
+	assert.doesNotMatch(page, /loadingVersion/)
 	assert.match(page, /taskRequestId/)
 	assert.match(page, /resetEvidenceState/)
 	assert.match(page, /availablePickQuantity/)