test: strengthen customs and fulfillment acceptance boundaries

2026-09-30 12:58:15 +08:00
parent 125ca34ba4
commit 80632ba409
13 changed files with 1616 additions and 40 deletions
@@ -1,6 +1,7 @@
 import assert from 'node:assert/strict'
 import { readFileSync } from 'node:fs'
 import test from 'node:test'
+import { verifyFormalDeclarationAndExceptions, verifyMixedReceiptIsolation } from './phase3-container-customs.mjs'

 import {
  CONTAINER_CUSTOMS_FIXTURE_KINDS,
@@ -92,3 +93,129 @@ test('database evidence list covers atomicity, history, dispatch and outbox with
    'fl_outbound_dispatch', 'fl_event_outbox']) assert.ok(READ_ONLY_DB_EVIDENCE.includes(table), table)
  assert.doesNotMatch(source, /\b(?:INSERT|UPDATE|DELETE)\s+(?:INTO|FROM|[a-z_])/i)
 })
+
+function runtimeContext() {
+  return { marker: 'OFFLINE-CUSTOMS', asserted: [],
+    assert(_module, name, _response, passed) { assert.ok(passed, name); this.asserted.push(name) },
+    addCoverageGap() {}, addStep() {},
+  }
+}
+const response = (data, code = '200') => ({ http: 200, body: { code, data: structuredClone(data) } })
+
+function formalAdapter({ prematurelyClose = false, invalidOtherWrites = false } = {}) {
+  const container = { loadingPlanId: '1', containerBookingId: '2', containerNo: 'TESTU1234567',
+    status: 'DECLARING', version: 8, brokerSubmittedAt: '2026-09-30T10:00:00',
+    documents: [{ documentId: '10', source: { fileId: '11' }, receiptStatus: 'CONFIRMED' }], inbounds: [] }
+  let batch = null
+  return {
+    platformDetail: async () => response(container),
+    platformCreateDeclaration: async () => { batch = { id: '100', status: 'READY', version: 0, results: [] }; return response(batch) },
+    platformDeclarationBatches: async () => response([batch]),
+    platformSubmitDeclaration: async (_ctx, _fixture, _id, request) => {
+      assert.equal(request.expectedVersion, batch.version)
+      batch.status = 'SUBMITTED'; batch.version += 1; batch.customsEntryNo = request.customsEntryNo
+      return response(batch)
+    },
+    platformRecordClearance: async (_ctx, _fixture, _id, request) => {
+      assert.equal(request.expectedVersion, batch.version)
+      if (request.resultType === 'OTHER' && !request.resolution) {
+        if (invalidOtherWrites) batch.results.push({ id: 'invalid', resultStatus: 'OPEN' })
+        return response(null, 'A0400')
+      }
+      const result = { id: String(200 + batch.results.length), resultType: request.resultType,
+        resultStatus: request.resolved ? 'RESOLVED' : 'OPEN' }
+      batch.results.push(result)
+      batch.status = prematurelyClose && request.resolved ? 'CLOSED'
+        : batch.results.some((item) => item.resultStatus === 'OPEN') ? 'RESULT_PENDING' : 'CLOSED'
+      batch.version += 1
+      return response(result)
+    },
+    platformResolveClearance: async (_ctx, _fixture, resultId, request) => {
+      assert.equal(request.expectedVersion, batch.version)
+      const result = batch.results.find((item) => item.id === resultId)
+      result.resultStatus = 'RESOLVED'; batch.version += 1
+      batch.status = batch.results.some((item) => item.resultStatus === 'OPEN') ? 'RESULT_PENDING' : 'CLOSED'
+      return response(result)
+    },
+    platformClearanceResults: async () => response(batch.results),
+  }
+}
+
+test('formal declaration runs every manual exception, retains OPEN gates and keeps customs document facts', async () => {
+  const ctx = runtimeContext(); const fixture = {}
+  await verifyFormalDeclarationAndExceptions(ctx, formalAdapter(), fixture)
+  assert.equal(fixture.declarationBatchId, '100')
+  assert.equal(fixture.clearanceResultIds.length, 5)
+  for (const type of ['INSPECTION', 'SUPPLEMENT_REQUIRED', 'DETAINED', 'OTHER']) {
+    assert.ok(ctx.asserted.includes(`平台人工标记海关异常${type}`))
+  }
+  assert.ok(ctx.asserted.includes('海关人工处理保留客户资料回执确认原柜与报关四态'))
+})
+
+test('formal probe fails when a resolved result closes a batch with unresolved exceptions', async () => {
+  await assert.rejects(verifyFormalDeclarationAndExceptions(runtimeContext(),
+    formalAdapter({ prematurelyClose: true }), {}), /不能提前关闭申报批次/)
+})
+
+test('OTHER missing remark probe rejects hidden writes even when API returns expected error', async () => {
+  await assert.rejects(verifyFormalDeclarationAndExceptions(runtimeContext(),
+    formalAdapter({ invalidOtherWrites: true }), {}), /必须填写备注且批次结果零漂移/)
+})
+
+function mixedAdapter({ contaminateForeignConfirmation = false } = {}) {
+  const docs = [{ documentId: 'A', receipt: { version: 1, fileId: 'RA' }, receiptStatus: 'PENDING' },
+    { documentId: 'B', receipt: null, receiptStatus: null }]
+  const container = { version: 2, status: 'DECLARING', documents: docs, brokerSubmittedAt: null }
+  const confirmations = new Set()
+  return {
+    platformDetail: async () => response(container),
+    platformUploadReceipt: async (_ctx, _fixture, request) => {
+      const doc = docs.find((item) => item.documentId === request.documentId)
+      assert.equal(request.expectedVersion, doc.receipt?.version || 0)
+      doc.receipt = { version: (doc.receipt?.version || 0) + 1, fileId: `R${doc.documentId}` }
+      doc.receiptStatus = 'PENDING'
+      return response(doc)
+    },
+    merchantConfirmReceipt: async (_ctx, _fixture, customer, request, commandKey) => {
+      if (customer.documentId !== request.documentId) {
+        if (contaminateForeignConfirmation) docs[0].receiptStatus = 'PENDING'
+        return response(null, 'A0404')
+      }
+      const doc = docs.find((item) => item.documentId === request.documentId)
+      assert.equal(request.expectedVersion, doc.receipt.version)
+      if (!confirmations.has(commandKey)) {
+        doc.receiptStatus = request.confirm ? 'CONFIRMED' : 'REJECTED'
+        confirmations.add(commandKey)
+      }
+      return response(container)
+    },
+    platformSubmitToBroker: async () => response(null, 'A0409'),
+    platformCreateDeclaration: async () => response(null, 'A0409'),
+  }
+}
+const mixedFixture = () => ({ customers: [{ documentId: 'A', customerId: '1' },
+  { documentId: 'B', customerId: '2' }] })
+
+test('multi-customer receipt flow rejects, replaces and confirms only the affected customer', async () => {
+  const ctx = runtimeContext()
+  const result = await verifyMixedReceiptIsolation(ctx, mixedAdapter(), mixedFixture(),
+    response({ receipt: { version: 1 } }))
+  assert.ok(result.body.data.documents.every((item) => item.receiptStatus === 'CONFIRMED'))
+  assert.ok(ctx.asserted.includes('未全部客户确认禁止发送报关行执行'))
+  assert.ok(ctx.asserted.includes('未全部确认禁止创建正式申报批次'))
+})
+
+test('cross-customer receipt denial also requires prior confirmation remain unchanged', async () => {
+  await assert.rejects(verifyMixedReceiptIsolation(runtimeContext(),
+    mixedAdapter({ contaminateForeignConfirmation: true }), mixedFixture(),
+    response({ receipt: { version: 1 } })), /第二客户不能确认其他客户回执且原确认保持/)
+})
+
+test('second customer credentials stay in adapter memory and are not exported with report resources', () => {
+  assert.match(fixtureSource, /publishEnvironment: false/)
+  assert.match(fixtureSource, /customerTokens\.get/)
+  assert.match(fixtureSource, /customers\.length < 2/)
+  const customerData = fixtureSource.slice(fixtureSource.indexOf('const customers ='), fixtureSource.indexOf('const buyInboundIds ='))
+  assert.doesNotMatch(customerData, /(?:sessionToken|accessToken|customerToken|password)/)
+  assert.doesNotMatch(fixtureSource, /\b(?:INSERT\s+INTO|DELETE\s+FROM|UPDATE\s+(?:fl_|ll_|wh_|ord_))/i)
+})