V3.49

- 分页基准从明细行改为单号：21 项单号不再被拆到 3 页

- 步骤 1a 构造 GROUP BY borrow_no 的 subquery（sort_key + status 聚合）

- 步骤 2 主查询 SELECT order_subq.c.borrow_no 一列，避免触发 PG GROUP BY 严格模式 (f405)

- 步骤 3 用 page_borrow_nos 拉明细，保留前端 groupMap 期望的 items 形态

- pagination.items 用 isinstance + hasattr(_mapping) 兜底提取纯字符串（修 psycopg2 can't adapt type 'Row'）

- service 加 try-except，路由层识别 500 透传 traceback

- status 过滤改为单号聚合（borrowed=至少一条未还，returned=全部归还）

.qwen/settings.json

@@ -1,12 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(git add *)",
-      "Bash(git commit *)",
-      "Bash(git *)",
-      "Bash(del *)",
-      "Bash(rm *)"
-    ]
-  },
-  "$version": 3
-}

.qwen/settings.json.orig

@@ -1,8 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(git add *)",
-      "Bash(git commit *)"
-    ]
-  }
-}

deploy_code.sh

@@ -8,53 +8,81 @@ REMOTE_BACKUP_BASE="$REMOTE_DIR/data_copy"
 REMOTE_BACKUP_DIR="$REMOTE_BACKUP_BASE/$TIMESTAMP"
 
 echo "==================================================="
-echo "🚀 开始增量部署 (仅代码，不影响数据库和图片)"
+echo "🚀 开始自动化增量部署 (含自我修复与依赖瘦身)"
 echo "==================================================="
 
-# 1. 远端备份 (使用 sudo 提权)
-echo "[1/4] 正在服务器上备份旧代码并清理多余备份 (可能需要输入服务器密码)..."
+# 1. 远端备份与环境急救
+echo "[1/4] 正在服务器上急救环境并备份旧代码 (可能需要输入密码)..."
 ssh -t $SERVER "sudo mkdir -p $REMOTE_BACKUP_DIR && \
     cd $REMOTE_DIR && \
+    echo '>> 检查并修复缺失目录 (防止 tar 崩溃)...' && \
+    sudo mkdir -p inventory-backend inventory-web && \
+    echo '>> 执行代码备份...' && \
     sudo tar -czf $REMOTE_BACKUP_DIR/code_backup.tar.gz inventory-backend inventory-web docker-compose.prod.yml && \
     echo '>> 执行清理：仅保留 data_copy 下最新的 2 个备份...' && \
     cd $REMOTE_BACKUP_BASE && \
-    sudo sh -c 'ls -dt */ | tail -n +3 | xargs -I {} rm -rf {}'"
+    sudo sh -c 'ls -dt */ 2>/dev/null | tail -n +3 | xargs -I {} rm -rf {} || true'"
 
 if [ $? -ne 0 ]; then echo "❌ 服务器备份或清理失败，终止部署！"; exit 1; fi
 
-# 2. 本地打包 (新增了精准拦截本地图片和本地数据库)
-echo "[2/4] 正在本地打包新代码 (自动剔除本地图片、数据库和缓存)..."
+# 2. 本地精准打包 (绝对屏蔽垃圾文件)
+echo "[2/4] 正在本地打包新代码 (执行终极瘦身)..."
+
 tar -czf deploy.tar.gz \
-    --exclude='node_modules' \
-    --exclude='.venv' \
-    --exclude='venv' \
-    --exclude='__pycache__' \
-    --exclude='*.pyc' \
-    --exclude='.git' \
-    --exclude='.idea' \
-    --exclude='.vscode' \
-    --exclude='pgdata_*' \
-    --exclude='uploads_*' \
-    --exclude='data_copy' \
-    --exclude='inventory-backend/uploads' \
-    --exclude='inventory-backend/pgdata' \
+    --exclude="*/node_modules" \
+    --exclude="*/venv" \
+    --exclude="*/.venv" \
+    --exclude="*/__pycache__" \
+    --exclude="*.pyc" \
+    --exclude="*/.git" \
+    --exclude="*/.idea" \
+    --exclude="*/.vscode" \
+    --exclude="inventory-backend/uploads" \
+    --exclude="inventory-backend/models" \
+    --exclude="inventory-backend/pgdata" \
+    --exclude="inventory-backend/pgdata_docker" \
+    --exclude="data_copy" \
     inventory-backend inventory-web docker-compose.prod.yml
 
-# 3. 传输到生产环境的 /tmp 目录 (避开权限拦截)
+# 检查压缩包大小是否正常 (如果超过 50MB 则发出警告)
+FILESIZE=$(stat -c%s "deploy.tar.gz" 2>/dev/null || stat -f%z "deploy.tar.gz")
+MB_SIZE=$((FILESIZE / 1024 / 1024))
+echo ">> 打包完成，当前传输包大小: ${MB_SIZE} MB"
+if [ "$MB_SIZE" -gt 50 ]; then
+    echo "⚠️ 警告：包体积仍大于 50MB，可能存在未排除的大文件，但继续执行..."
+fi
+
+# 3. 传输到生产环境的 /tmp 目录
 echo "[3/4] 正在传输代码到服务器的临时目录..."
 scp deploy.tar.gz $SERVER:/tmp/deploy.tar.gz
+if [ $? -ne 0 ]; then
+    echo "❌ 传输失败！可能是网络中断，终止部署！"
+    rm -f deploy.tar.gz
+    exit 1
+fi
 
-# 4. 服务器执行替换与重启 (修复了 docker-compose 找不到命令的问题)
-echo "[4/4] 正在生产环境执行热更新 (可能需要输入服务器密码)..."
+# 4. 服务器执行替换与重启
+echo "[4/4] 正在生产环境执行热更新 (可能需要输入密码)..."
 ssh -t $SERVER "cd $REMOTE_DIR && \
+    echo '>> 移除历史旧目录...' && \
     sudo rm -rf inventory-backend_old inventory-web_old && \
+    echo '>> 备份当前目录为 old...' && \
     (sudo mv inventory-backend inventory-backend_old 2>/dev/null || true) && \
     (sudo mv inventory-web inventory-web_old 2>/dev/null || true) && \
+    echo '>> 部署新代码...' && \
     sudo mv /tmp/deploy.tar.gz . && \
     sudo tar -xzf deploy.tar.gz && \
+    echo '>> 重启 Docker 容器...' && \
     sudo docker compose -f docker-compose.prod.yml up -d --build backend frontend && \
     sudo rm deploy.tar.gz"
 
-echo "==================================================="
-echo "✅ 部署完成！请刷新网页查看效果。"
-echo "==================================================="
+if [ $? -ne 0 ]; then
+    echo "❌ 远端启动失败，请检查 Docker 日志！"
+else
+    echo "==================================================="
+    echo "✅ 部署完美完成！请刷新网页查看效果。"
+    echo "==================================================="
+fi
+
+# 扫尾清理本地文件
+rm -f deploy.tar.gz

docker-compose.prod.yml

@@ -1,9 +1,9 @@
 version: '3.8'
 
 services:
-  # --- 数据库 (保持不变) ---
+  # --- 数据库 (已修改为自带 pgvector 的镜像) ---
   db:
-    image: postgres:15-alpine
+    image: pgvector/pgvector:pg15
     container_name: inventory_db_prod
     restart: always
     environment:
@@ -11,8 +11,10 @@ services:
       POSTGRES_PASSWORD: StrongPassword123!
       POSTGRES_DB: inventory_system
     volumes:
+      # 数据卷保持不变，你的历史数据不会丢失！
       - ./pgdata_prod:/var/lib/postgresql/data
-
+    ports:
+      - "5432:5432"
   # --- 后端 (Flask) (保持不变) ---
   backend:
     build:
@@ -29,7 +31,7 @@ services:
     depends_on:
       - db
 
-  # --- 前端 (Nginx + Vue) (这是需要修改的部分) ---
+  # --- 前端 (Nginx + Vue) (包含 HTTPS 配置) ---
   frontend:
     build:
       context: ./inventory-web

docker-compose.yml

@@ -1,8 +1,7 @@
-version: '3.8'
 
 services:
   db:
-    image: postgres:15-alpine
+    image: pgvector/pgvector:pg15  # 换成这个
     container_name: inventory_db
     restart: always
     environment:
@@ -10,7 +9,7 @@ services:
       POSTGRES_PASSWORD: 1234
       POSTGRES_DB: inventory_system
     volumes:
-      - ./pgdata_docker:/var/lib/postgresql/data
+      - ./pgdata_docker:/var/lib/postgresql/data # 这里保持不变，Docker会自动创建这个新文件夹
     ports:
       - "5435:5432"
 
@@ -41,4 +40,4 @@ services:
     ports:
       - "5175:5173"
     depends_on:
-      - backend
+      - backend

inventory-backend/.dockerignore

@@ -1,6 +1,12 @@
-venv/
-__pycache__/
+.git
+.idea
+__pycache__
 *.pyc
-.git/
+*.pyo
+venv
+.venv
+env
+uploads
+pgdata
 .env
-pgdata/
+simhei.ttf

inventory-backend/app/__init__.py

@@ -90,6 +90,17 @@ def create_app():
     except ImportError as e:
         print(f"❌ 错误: Upload 模块导入失败: {e}")
 
+    # -----------------------------------------------------
+    # 2.4 注册以图搜图模块 (Image Search)
+    # -----------------------------------------------------
+    try:
+        from app.api.v1.common.image_search import image_search_bp
+        app.register_blueprint(image_search_bp, url_prefix='/api/v1/common')
+        app.register_blueprint(image_search_bp, url_prefix='/api/common', name='image_search_legacy')
+        print("✅ Image Search 模块注册成功")
+    except ImportError as e:
+        print(f"❌ 错误: Image Search 模块导入失败: {e}")
+
     # -----------------------------------------------------
     # 2.4 注册业务操作模块 (Transactions - 借还/维修/报废)
     # -----------------------------------------------------
@@ -234,6 +245,17 @@ def create_app():
     except Exception as e:
         print(f"❌ 错误: Scan 模块注册失败: {e}")
 
+    # -----------------------------------------------------
+    # 2.x 注册异步导出模块 (Export)
+    # -----------------------------------------------------
+    try:
+        from app.api.v1.export import export_bp
+        app.register_blueprint(export_bp, url_prefix='/api/v1/export')
+        app.register_blueprint(export_bp, url_prefix='/api/export', name='export_legacy')
+        print("✅ Export 模块注册成功")
+    except Exception as e:
+        print(f"❌ 错误: Export 模块注册失败: {e}")
+
     # =========================================================
     # 3. 预加载数据模型
     # =========================================================

inventory-backend/app/api/v1/bom.py

@@ -1,6 +1,7 @@
 from flask import Blueprint, request, jsonify, current_app
 from sqlalchemy import or_
-from app.services.bom_service import BomService
+from app.services.bom_service import BomService, _cache_delete
+from app.services.bom_draft_service import BomDraftService
 from app.models.base import MaterialBase
 from app.models.bom import BomTable
 from app.extensions import db
@@ -225,6 +226,11 @@ def delete_bom(bom_no):
             db.session.delete(rec)
 
         db.session.commit()
+
+        # ===== 删除成功后立刻清除缓存（Cache Invalidation） =====
+        _cache_delete(bom_no, version)
+        current_app.logger.info(f"[BOM Cache] delete_bom → 缓存已失效 bom_no={bom_no} version={version}")
+
         return jsonify({
             'code': 200,
             'msg': '删除成功',
@@ -377,3 +383,99 @@ def get_bom_parents():
     except Exception as e:
         current_app.logger.error(f'获取BOM父件列表失败: {str(e)}')
         return jsonify({'code': 500, 'msg': '内部服务器错误'}), 500
+
+
+@bom_bp.route('/cascade-inventory', methods=['GET'])
+@jwt_required()
+@permission_required('bom_manage')
+def get_cascade_inventory():
+    """
+    根据 BOM 编号和订单数量，计算所有子件的级联库存缺口（供 AI 调用）
+    Query参数:
+      - bom_no: BOM编号（必填）
+      - order_qty: 订单需求量（必填，数值）
+    """
+    try:
+        bom_no = request.args.get('bom_no', '').strip()
+        order_qty_str = request.args.get('order_qty', '').strip()
+
+        if not bom_no:
+            return jsonify({'code': 400, 'msg': 'bom_no 不能为空'}), 400
+        if not order_qty_str:
+            return jsonify({'code': 400, 'msg': 'order_qty 不能为空'}), 400
+
+        try:
+            order_qty = float(order_qty_str)
+        except ValueError:
+            return jsonify({'code': 400, 'msg': 'order_qty 必须为有效数字'}), 400
+
+        data = BomService.calculate_cascade_inventory(bom_no, order_qty)
+        if data is None:
+            return jsonify({'code': 404, 'msg': 'BOM 不存在'}), 404
+
+        return jsonify({
+            'code': 200,
+            'msg': 'success',
+            'data': data
+        })
+    except Exception as e:
+        current_app.logger.error(f'级联库存计算失败: {str(e)}')
+        return jsonify({'code': 500, 'msg': '内部服务器错误'}), 500
+
+
+# ==================== BOM 草稿接口 ====================
+
+@bom_bp.route('/draft/save', methods=['POST'])
+@jwt_required()
+def save_draft():
+    """暂存草稿"""
+    data = request.get_json()
+    bom_no = data.get('bom_no')
+    version = data.get('version', 'V1.0')
+    parent_id = data.get('parent_id')
+    children = data.get('children', [])
+
+    if not bom_no:
+        return jsonify({'code': 400, 'msg': 'bom_no 不能为空'}), 400
+    if not parent_id:
+        return jsonify({'code': 400, 'msg': 'parent_id 不能为空'}), 400
+
+    bom_draft_no = BomDraftService.save_draft(bom_no, version, parent_id, children)
+    return jsonify({'code': 200, 'msg': '草稿暂存成功', 'data': {'bom_no': bom_draft_no}})
+
+
+@bom_bp.route('/draft/detail', methods=['GET'])
+@jwt_required()
+def get_draft_detail():
+    """读取草稿详情"""
+    bom_no = request.args.get('bom_no')
+    version = request.args.get('version', 'V1.0')
+
+    if not bom_no:
+        return jsonify({'code': 400, 'msg': 'bom_no 不能为空'}), 400
+
+    draft = BomDraftService.get_draft_detail(bom_no, version)
+
+    # 【核心修改】：查不到草稿是正常现象，返回 HTTP 200 即可
+    if draft is None:
+        return jsonify({'code': 200, 'msg': '无草稿', 'data': None}), 200
+
+    return jsonify({'code': 200, 'msg': '查询成功', 'data': draft})
+
+
+@bom_bp.route('/draft/publish', methods=['POST'])
+@jwt_required()
+def publish_draft():
+    """发布草稿为正式 BOM"""
+    data = request.get_json()
+    bom_no = data.get('bom_no')
+    version = data.get('version', 'V1.0')
+
+    if not bom_no:
+        return jsonify({'code': 400, 'msg': 'bom_no 不能为空'}), 400
+
+    try:
+        bom_draft_no = BomDraftService.publish_draft(bom_no, version)
+        return jsonify({'code': 200, 'msg': 'BOM 发布成功', 'data': {'bom_no': bom_draft_no}})
+    except ValueError as e:
+        return jsonify({'code': 400, 'msg': str(e)}), 400

inventory-backend/app/api/v1/common/image_search.py

@@ -0,0 +1,299 @@
+# -*- coding: utf-8 -*-
+"""
+以图搜图 API - CLIP Vision Embedding + pgvector 余弦距离检索
+数据源：image_embeddings 表（统一向量存储）
+"""
+
+import os
+import uuid
+import json
+from flask import Blueprint, request, jsonify
+from sqlalchemy import text
+from app.extensions import db
+from app.utils.ai_vision import load_clip_model, get_image_embedding
+from app.models.inbound.buy import StockBuy
+from app.models.inbound.semi import StockSemi
+from app.models.inbound.product import StockProduct
+from app.models.base import MaterialBase
+
+# 注册蓝图
+image_search_bp = Blueprint('image_search', __name__)
+
+# ============================================================================
+# 可配置参数
+# ============================================================================
+# 以图搜图相似度阈值：余弦距离必须小于此值（距离越小越相似）
+# 即余弦相似度 = 1 - 距离，必须 > (1 - SIMILARITY_THRESHOLD)
+# 默认 0.25 对应余弦相似度 > 0.75
+SIMILARITY_DISTANCE_THRESHOLD = 0.40
+
+
+# ============================================================================
+# POST /api/v1/common/image-search
+# 以图搜图：上传图片 → CLIP embedding → pgvector 余弦相似度检索
+# ============================================================================
+
+@image_search_bp.route('/image-search', methods=['POST'])
+def image_search():
+    # ---------------------------------------------------------
+    # 1. 检查文件
+    # ---------------------------------------------------------
+    if 'file' not in request.files:
+        return jsonify({"code": 400, "msg": "未找到图片文件"}), 400
+
+    file = request.files['file']
+    if file.filename == '':
+        return jsonify({"code": 400, "msg": "未选择文件"}), 400
+
+    # ---------------------------------------------------------
+    # 2. 安全保存临时文件
+    # ---------------------------------------------------------
+    ext = file.filename.rsplit('.', 1)[-1].lower()
+    if ext not in {'png', 'jpg', 'jpeg', 'gif', 'bmp', 'webp'}:
+        return jsonify({"code": 400, "msg": "不支持的图片格式"}), 400
+
+    tmp_filename = f"{uuid.uuid4().hex}.{ext}"
+    tmp_dir = os.path.join(os.path.dirname(__file__), '..', '..', '..', 'uploads')
+    os.makedirs(tmp_dir, exist_ok=True)
+    tmp_path = os.path.join(tmp_dir, tmp_filename)
+
+    try:
+        file.save(tmp_path)
+        print(f"💾 [ImageSearch] 临时文件已保存: {tmp_path}")
+
+        # ---------------------------------------------------------
+        # 3. 提取 CLIP embedding
+        # ---------------------------------------------------------
+        load_clip_model()
+        embedding = get_image_embedding(tmp_path)
+        print(f"✅ [ImageSearch] Embedding 提取成功，维度: {len(embedding)}")
+
+    except Exception as e:
+        print(f"❌ [ImageSearch] 图像处理失败: {e}")
+        return jsonify({"code": 500, "msg": f"图像处理失败: {str(e)}"}), 500
+
+    finally:
+        # ---------------------------------------------------------
+        # 4. 无论成功与否，都删除临时文件
+        # ---------------------------------------------------------
+        if os.path.exists(tmp_path):
+            try:
+                os.remove(tmp_path)
+                print(f"🗑️ [ImageSearch] 临时文件已清理: {tmp_path}")
+            except Exception as e:
+                print(f"⚠️ [ImageSearch] 临时文件删除失败: {e}")
+
+    # ---------------------------------------------------------
+    # 5. pgvector 余弦相似度检索（统一查 image_embeddings 表）
+    # ---------------------------------------------------------
+    try:
+        query_vector_str = '[' + ','.join(str(v) for v in embedding) + ']'
+
+        sql = text("""
+    SELECT
+        ie.id         AS embedding_id,
+        ie.module_name,
+        ie.target_id,
+        ie.image_url,
+        (1 - (ie.embedding <=> :query_vector)) AS similarity,
+        (ie.embedding <=> :query_vector)        AS distance
+    FROM image_embeddings ie
+    WHERE ie.embedding IS NOT NULL
+      AND (ie.embedding <=> :query_vector) < :distance_threshold
+    ORDER BY ie.embedding <=> :query_vector
+    LIMIT 200
+""")
+
+        raw_records = db.session.execute(sql, {
+            "query_vector": query_vector_str,
+            "distance_threshold": SIMILARITY_DISTANCE_THRESHOLD
+        }).fetchall()
+        if not raw_records:
+            return jsonify({"code": 200, "data": [], "msg": "未找到相似图片（阈值过滤后）"})
+
+        # ---------------------------------------------------------
+        # Step 1: 初步去重（同入库单只保留最相似的图片）
+        # ---------------------------------------------------------
+        first_img_seen = {}
+        unique_records = []
+        for row in raw_records:
+            key = (row.module_name, row.target_id)
+            if key not in first_img_seen:
+                first_img_seen[key] = True
+                unique_records.append(row)
+
+        # ---------------------------------------------------------
+        # Step 2: 按物料维度去重（相同物料只保留第一条 = 相似度最高的那条）
+        # ---------------------------------------------------------
+        target_ids_by_module = {}
+        for row in unique_records:
+            target_ids_by_module.setdefault(row.module_name, []).append(row.target_id)
+
+        # 查询每条记录的 base_id（跨 stock_buy/semi/product/material_base）
+        base_id_map = {}
+
+        for module in ('stock_buy', 'stock_semi', 'stock_product'):
+            if module not in target_ids_by_module:
+                continue
+            ids = target_ids_by_module[module]
+            ModelCls = StockBuy if module == 'stock_buy' else (StockSemi if module == 'stock_semi' else StockProduct)
+            id_col = getattr(ModelCls, 'id')
+            base_col = getattr(ModelCls, 'base_id')
+
+            rows = (
+                db.session.query(id_col, base_col)
+                .outerjoin(MaterialBase, base_col == MaterialBase.id)
+                .filter(id_col.in_(ids))
+                .all()
+            )
+            for rec_id, base_id in rows:
+                base_id_map[(module, rec_id)] = base_id
+
+        if 'material_base' in target_ids_by_module:
+            for rec_id in target_ids_by_module['material_base']:
+                base_id_map[('material_base', rec_id)] = rec_id
+
+        # 按 base_id 去重：相同物料只保留第一张图
+        material_seen = {}
+        final_records = []
+        for row in unique_records:
+            base_id = base_id_map.get((row.module_name, row.target_id))
+            if base_id is not None and base_id in material_seen:
+                continue
+            if base_id is not None:
+                material_seen[base_id] = True
+            final_records.append(row)
+
+        # ---------------------------------------------------------
+        # Step 3: 批量回填业务数据（基于去重后的 final_records）
+        # ---------------------------------------------------------
+        target_ids_by_module = {}
+        for row in final_records:
+            target_ids_by_module.setdefault(row.module_name, []).append(row.target_id)
+
+        business_map = {}
+
+        # 回填 StockBuy
+        if 'stock_buy' in target_ids_by_module:
+            ids = target_ids_by_module['stock_buy']
+            records = (
+                db.session.query(StockBuy)
+                .filter(StockBuy.id.in_(ids))
+                .outerjoin(MaterialBase, StockBuy.base_id == MaterialBase.id)
+                .all()
+            )
+            for r in records:
+                business_map[('stock_buy', r.id)] = {
+                    'record_id': r.id,
+                    'name': r.base.name if r.base else None,
+                    'spec_model': r.base.spec_model if r.base else None,
+                    'sku': r.sku,
+                    'barcode': r.barcode,
+                    'serial_number': r.serial_number,
+                    'batch_number': r.batch_number,
+                    'status': r.status,
+                    'warehouse_location': r.warehouse_location,
+                    'stock_quantity': r.stock_quantity,
+                    'module_name': 'stock_buy',
+                    'url': '/inventory/buy',
+                }
+
+        # 回填 StockSemi
+        if 'stock_semi' in target_ids_by_module:
+            ids = target_ids_by_module['stock_semi']
+            records = (
+                db.session.query(StockSemi)
+                .filter(StockSemi.id.in_(ids))
+                .outerjoin(MaterialBase, StockSemi.base_id == MaterialBase.id)
+                .all()
+            )
+            for r in records:
+                business_map[('stock_semi', r.id)] = {
+                    'record_id': r.id,
+                    'name': r.base.name if r.base else None,
+                    'spec_model': r.base.spec_model if r.base else None,
+                    'sku': r.sku,
+                    'barcode': r.barcode,
+                    'serial_number': r.serial_number,
+                    'batch_number': r.batch_number,
+                    'status': r.status,
+                    'warehouse_location': r.warehouse_location,
+                    'stock_quantity': r.stock_quantity,
+                    'module_name': 'stock_semi',
+                    'url': '/inventory/semi',
+                }
+
+        # 回填 StockProduct
+        if 'stock_product' in target_ids_by_module:
+            ids = target_ids_by_module['stock_product']
+            records = (
+                db.session.query(StockProduct)
+                .filter(StockProduct.id.in_(ids))
+                .outerjoin(MaterialBase, StockProduct.base_id == MaterialBase.id)
+                .all()
+            )
+            for r in records:
+                business_map[('stock_product', r.id)] = {
+                    'record_id': r.id,
+                    'name': r.base.name if r.base else None,
+                    'spec_model': r.base.spec_model if r.base else None,
+                    'sku': r.sku,
+                    'barcode': r.barcode,
+                    'serial_number': r.serial_number,
+                    'batch_number': r.batch_number,
+                    'status': r.status,
+                    'warehouse_location': r.warehouse_location,
+                    'stock_quantity': r.stock_quantity,
+                    'sale_price': r.sale_price,
+                    'module_name': 'stock_product',
+                    'url': '/inventory/product',
+                }
+
+        # 回填 MaterialBase
+        if 'material_base' in target_ids_by_module:
+            ids = target_ids_by_module['material_base']
+            records = MaterialBase.query.filter(MaterialBase.id.in_(ids)).all()
+            for r in records:
+                business_map[('material_base', r.id)] = {
+                    'record_id': r.id,
+                    'name': r.name,
+                    'spec_model': r.spec_model,
+                    'common_name': r.common_name,
+                    'category': r.category,
+                    'material_type': r.material_type,
+                    'unit': r.unit,
+                    'module_name': 'material_base',
+                    'url': '/material/index',
+                }
+
+        # 组装最终返回（基于 final_records，按相似度从高到低）
+        results = []
+        for row in final_records:
+            key = (row.module_name, row.target_id)
+            biz = business_map.get(key, {})
+            raw_url = row.image_url or ''
+            clean_url = raw_url
+            if raw_url.startswith('['):
+                try:
+                    url_list = json.loads(raw_url)
+                    clean_url = url_list[0] if url_list else ''
+                except:
+                    pass
+            results.append({
+                "module_name": row.module_name,
+                "target_id": row.target_id,
+                "image_url": clean_url,
+                "similarity": round(float(row.similarity), 4),
+                "product_name": biz.get('name') or biz.get('material_name') or '未命名物料',
+                "product_id": row.target_id,
+                "spec_model": biz.get('spec_model') or '',
+                "business_data": biz,
+            })
+            if len(results) >= 10:
+                break
+
+        return jsonify({"code": 200, "data": results})
+
+    except Exception as e:
+        print(f"❌ [ImageSearch] 数据库检索失败: {e}")
+        return jsonify({"code": 500, "msg": f"检索失败: {str(e)}"}), 500

inventory-backend/app/api/v1/export/__init__.py

@@ -0,0 +1,10 @@
+"""
+app/api/v1/export/__init__.py
+导出模块 Blueprint 注册文件
+"""
+
+from flask import Blueprint
+
+export_bp = Blueprint('export', __name__, url_prefix='/api/v1/export')
+
+from app.api.v1.export import inventory_export

inventory-backend/app/api/v1/export/inventory_export.py

@@ -0,0 +1,144 @@
+"""
+app/api/v1/export/inventory_export.py
+异步导出核心接口
+
+提供三个端点：
+  POST /api/v1/export/inventory      → 提交导出任务，返回 task_id
+  GET  /api/v1/export/status/<task_id>  → 查询任务状态（轮询）
+  GET  /api/v1/export/download/<task_id>  → 下载已生成的 Excel 文件
+"""
+
+import os
+from flask import Blueprint, request, jsonify, send_file, current_app
+from flask_jwt_extended import jwt_required, get_jwt
+from app.services.export_service.excel_task import (
+    submit_export_task,
+    get_task_status,
+    get_export_filepath,
+)
+from app.utils.decorators import permission_required
+
+export_bp = Blueprint('export', __name__, url_prefix='/api/v1/export')
+
+
+# =============================================================================
+# 任务提交接口
+# =============================================================================
+
+@export_bp.route('/inventory', methods=['POST'])
+@jwt_required()
+@permission_required('inventory_manage')
+def submit_export():
+    """
+    接收前端导出请求，生成 task_id，立即返回。
+
+    请求体（JSON）:
+      {
+        "keyword": "螺丝",
+        "category": "原材料",
+        "status": "在库"
+      }
+
+    响应:
+      { "code": 200, "msg": "success", "data": { "task_id": "xxx" } }
+    """
+    try:
+        filters = request.get_json() or {}
+
+        # 生成 task_id 并启动后台任务（同步返回，不阻塞）
+        task_id = submit_export_task(filters)
+
+        current_app.logger.info(
+            f"[Export] 用户 {get_jwt().get('username')} 提交导出任务 task_id={task_id}"
+        )
+
+        return jsonify({
+            'code': 200,
+            'msg': '导出任务已创建',
+            'data': {
+                'task_id': task_id,   # 前端用此 ID 轮询 /export/status/<task_id>
+            }
+        })
+
+    except Exception as e:
+        current_app.logger.error(f"[Export] 提交导出任务失败: {e}")
+        return jsonify({'code': 500, 'msg': '内部服务器错误'}), 500
+
+
+# =============================================================================
+# 进度查询接口（前端轮询）
+# =============================================================================
+
+@export_bp.route('/status/<task_id>', methods=['GET'])
+@jwt_required()
+def get_export_status(task_id: str):
+    """
+    从 Redis 读取任务状态，供前端轮询。
+
+    响应示例（处理中）:
+      {
+        "code": 200,
+        "data": { "status": "processing", "progress": 45, "url": "", "error": "" }
+      }
+
+    响应示例（已完成）:
+      {
+        "code": 200,
+        "data": { "status": "completed", "progress": 100, "url": "/api/v1/export/download/xxx", "error": "" }
+      }
+    """
+    try:
+        status = get_task_status(task_id)
+
+        if status.get('status') == 'not_found':
+            return jsonify({'code': 404, 'msg': '任务不存在或已过期'}), 404
+
+        return jsonify({
+            'code': 200,
+            'msg': 'success',
+            'data': status
+        })
+
+    except Exception as e:
+        current_app.logger.error(f"[Export] 查询任务状态失败: task_id={task_id}, err={e}")
+        return jsonify({'code': 500, 'msg': '内部服务器错误'}), 500
+
+
+# =============================================================================
+# 文件下载接口
+# =============================================================================
+
+@export_bp.route('/download/<task_id>', methods=['GET'])
+@jwt_required()
+def download_export_file(task_id: str):
+    """
+    下载已生成的 Excel 文件。
+
+    前端轮询发现 status=completed 后，
+    取 data.url 拼接完整下载地址，发起下载请求。
+
+    安全：只允许下载已完成且未过期的文件（TTL=1h）。
+    """
+    try:
+        # 再次确认任务状态，防止下载不存在的文件
+        status = get_task_status(task_id)
+        if status.get('status') != 'completed':
+            return jsonify({'code': 400, 'msg': '文件未就绪，请稍后'}), 400
+
+        filepath = get_export_filepath(task_id)
+        if not filepath:
+            return jsonify({'code': 404, 'msg': '文件不存在或已过期'}), 404
+
+        current_app.logger.info(f"[Export] 用户 {get_jwt().get('username')} 下载 task_id={task_id}")
+
+        # send_file 自动设置 Content-Disposition: attachment（触发浏览器下载）
+        return send_file(
+            filepath,
+            as_attachment=True,
+            download_name=f"库存导出_{task_id[:8]}.xlsx",
+            mimetype='application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'
+        )
+
+    except Exception as e:
+        current_app.logger.error(f"[Export] 下载失败: task_id={task_id}, err={e}")
+        return jsonify({'code': 500, 'msg': '下载失败，请重试'}), 500

inventory-backend/app/api/v1/inbound/base.py

@@ -98,6 +98,24 @@ def search_base():
         return jsonify({"code": 500, "msg": str(e)}), 500
 
 
+# ==============================================================================
+# 1.1 计量单位字典接口 (GET /api/v1/inbound/base/units)
+# ==============================================================================
+@inbound_base_bp.route('/units', methods=['GET'])
+@permission_required('material_list')
+def get_unit_dict():
+    """
+    获取所有已存在的非空计量单位（去重 + 排序），用于前端
+    新增/编辑弹窗中"计量单位"下拉框的历史记录。
+    """
+    try:
+        units = MaterialBaseService.get_distinct_units()
+        return jsonify({"code": 200, "msg": "success", "data": units})
+    except Exception as e:
+        traceback.print_exc()
+        return jsonify({"code": 500, "msg": str(e)}), 500
+
+
 # ==============================================================================
 # 2. 列表接口 (GET /api/v1/inbound/base/list)
 # ==============================================================================

inventory-backend/app/api/v1/inbound/product.py

@@ -60,7 +60,8 @@ def search_base():
 def search_bom():
     try:
         keyword = request.args.get('keyword', '')
-        data = ProductInboundService.search_bom_options(keyword)
+        parent_spec = request.args.get('parent_spec', None)
+        data = ProductInboundService.search_bom_options(keyword, parent_spec=parent_spec)
         return jsonify({"code": 200, "msg": "success", "data": data})
     except Exception as e:
         traceback.print_exc()

inventory-backend/app/api/v1/inbound/semi.py

@@ -60,7 +60,8 @@ def search_base():
 def search_bom():
     try:
         keyword = request.args.get('keyword', '')
-        data = SemiInboundService.search_bom_options(keyword)
+        parent_spec = request.args.get('parent_spec', None)
+        data = SemiInboundService.search_bom_options(keyword, parent_spec=parent_spec)
         return jsonify({"code": 200, "msg": "success", "data": data})
     except Exception as e:
         traceback.print_exc()

inventory-backend/app/api/v1/inbound/stock.py

@@ -137,34 +137,70 @@ def get_stock_info(uuid_or_barcode):
 def get_all_stock():
     """
     获取所有库存 > 0 的物品
+    支持 AI 极简模式: ?ai_mode=true
+      - 只返回 name / spec / availableQuantity 三个字段
+      - 键名压缩为 n / s / c
     """
+    ai_mode = request.args.get('ai_mode', '').lower() == 'true'
+
     try:
+        all_items = []
+
         # 1. 采购件
-        materials = []
         if StockBuy:
-            materials = StockBuy.query.filter(StockBuy.stock_quantity > 0).all()
+            rows = StockBuy.query.filter(
+                StockBuy.stock_quantity > 0
+            ).options(joinedload(StockBuy.base)).all()
+            for item in rows:
+                if ai_mode:
+                    b = item.base
+                    all_items.append({
+                        'n': b.name if b else '',
+                        's': b.spec_model if b else '',
+                        'c': float(item.available_quantity or 0)
+                    })
+                else:
+                    all_items.append(item.to_dict())
 
         # 2. 半成品
-        semis = []
         if StockSemi:
             try:
-                semis = StockSemi.query.filter(StockSemi.stock_quantity > 0).all()
+                rows = StockSemi.query.filter(
+                    StockSemi.stock_quantity > 0
+                ).options(joinedload(StockSemi.base)).all()
+                for item in rows:
+                    if ai_mode:
+                        b = item.base
+                        all_items.append({
+                            'n': b.name if b else '',
+                            's': b.spec_model if b else '',
+                            'c': float(item.available_quantity or 0)
+                        })
+                    else:
+                        all_items.append(item.to_dict())
             except Exception:
-                semis = []
+                pass
 
         # 3. 成品
-        products = []
         if StockProduct:
             try:
-                products = StockProduct.query.filter(StockProduct.stock_quantity > 0).all()
+                rows = StockProduct.query.filter(
+                    StockProduct.stock_quantity > 0
+                ).options(joinedload(StockProduct.base)).all()
+                for item in rows:
+                    if ai_mode:
+                        b = item.base
+                        all_items.append({
+                            'n': b.name if b else '',
+                            's': b.spec_model if b else '',
+                            'c': float(item.available_quantity or 0)
+                        })
+                    else:
+                        all_items.append(item.to_dict())
             except Exception:
-                products = []
+                pass
 
-        return jsonify({
-            "materials": [item.to_dict() for item in materials],
-            "semis": [item.to_dict() for item in semis],
-            "products": [item.to_dict() for item in products]
-        }), 200
+        return jsonify(all_items), 200
     except Exception as e:
         print(f"Error: {e}")
         return jsonify({"message": f"查询库存失败: {str(e)}"}), 500

inventory-backend/app/api/v1/transactions.py

@@ -3,6 +3,7 @@ from flask_jwt_extended import jwt_required, get_jwt_identity, get_jwt
 from app.utils.decorators import permission_required, audit_log
 from app.services.auth_service import AuthService
 from app.services.trans_service import TransService
+from app.services.borrow_service import BorrowApprovalService
 import traceback
 
 trans_bp = Blueprint('transactions', __name__, url_prefix='/transactions')
@@ -29,6 +30,16 @@ def get_current_user_permissions():
     return perms
 
 
+def get_current_user_info():
+    """获取当前用户信息和角色"""
+    from app.models.system import SysUser
+    identity = get_jwt_identity()
+    if not identity:
+        return None, None
+    user = SysUser.query.get(identity)
+    return user.id if user else None, user.role if user else None
+
+
 def filter_item_by_permissions(item_dict, user_permissions, prefix='op_records'):
     """
     根据用户权限过滤 item 字典，无权限的字段值置为 None
@@ -120,8 +131,201 @@ def get_records():
     search_type = request.args.get('search_type', 'all')
 
     res = TransService.get_records(page=page, limit=10, status=status, keyword=keyword, search_type=search_type)
+
+    # ★ service 层异常时：code==500 的字典（带 traceback），需要直通到前端，便于排查
+    if isinstance(res, dict) and res.get('code') == 500:
+        return jsonify({
+            'code': 500,
+            'msg': res.get('msg', '服务内部错误'),
+            'trace': res.get('trace', '')
+        }), 500
+
     # 字段级脱敏
     user_permissions = get_current_user_permissions()
     if res.get('items'):
         res['items'] = [filter_item_by_permissions(item, user_permissions, 'op_records') for item in res['items']]
     return jsonify({'code': 200, 'data': res})
+
+
+# ==============================================================================
+# 借库审批流 API（与出库审批流平行）
+# ==============================================================================
+
+# --- 提交借库申请 ---
+@trans_bp.route('/borrow/request', methods=['POST'])
+@jwt_required()
+def submit_borrow_request():
+    """
+    提交借库申请（仅存储意向，不扣库存）
+    请求体: { items: [...], allowed_approvers: [...], remark: '', approver_id: int }
+    """
+    try:
+        user_id, user_role = get_current_user_info()
+        if not user_id:
+            return jsonify({'code': 401, 'msg': '用户未登录'}), 401
+
+        from app.models.system import SysUser
+        current_user = SysUser.query.get(user_id)
+        current_username = current_user.username if current_user else None
+
+        data = request.get_json() or {}
+        items = data.get('items', [])
+        if not items:
+            return jsonify({'code': 400, 'msg': '借库物品列表不能为空'}), 400
+
+        required_fields = ['name', 'spec_model', 'quantity']
+        for idx, item in enumerate(items):
+            missing = [f for f in required_fields if f not in item or str(item.get(f) or '').strip() == '']
+            if missing:
+                return jsonify({
+                    'code': 400,
+                    'msg': f'第{idx + 1}条物品缺少必填字段: {", ".join(missing)}'
+                }), 400
+            try:
+                qty = float(item.get('quantity', 0))
+                if qty <= 0:
+                    return jsonify({'code': 400, 'msg': f'第{idx + 1}条物品的借库数量必须大于0'}), 400
+            except (TypeError, ValueError):
+                return jsonify({'code': 400, 'msg': f'第{idx + 1}条物品的 quantity 格式无效'}), 400
+
+        approver_id = data.get('approver_id')
+        _default_approvers = [
+            {"type": "role", "value": "SUPERVISOR"},
+            {"type": "role", "value": "SUPER_ADMIN"}
+        ]
+        allowed_approvers = data.get('allowed_approvers') or _default_approvers
+
+        approval = BorrowApprovalService.submit_approval(
+            applicant_id=user_id,
+            items=items,
+            allowed_approvers=allowed_approvers,
+            remark=data.get('remark'),
+            approver_id=approver_id,
+            borrower_name=current_username
+        )
+
+        return jsonify({'code': 200, 'msg': '借库申请已提交', 'data': approval.to_dict()}), 200
+
+    except ValueError as e:
+        return jsonify({'code': 400, 'msg': str(e)}), 400
+    except Exception as e:
+        return jsonify({'code': 500, 'msg': f"接口内部报错: {str(e)}", 'trace': traceback.format_exc()}), 500
+
+
+# --- 审批借库申请 ---
+@trans_bp.route('/borrow/request/<int:request_id>/approve', methods=['PATCH'])
+@jwt_required()
+def approve_borrow_request(request_id):
+    """
+    审批借库申请
+    请求体: {"action": "approve" | "reject", "reject_reason": "驳回原因"}
+    """
+    try:
+        user_id, user_role = get_current_user_info()
+        if not user_id:
+            return jsonify({'code': 401, 'msg': '用户未登录'}), 401
+
+        data = request.get_json() or {}
+        action = data.get('action', 'approve')
+        reject_reason = data.get('reject_reason')
+
+        if action not in ('approve', 'reject'):
+            return jsonify({'code': 400, 'msg': '无效的审批操作，仅支持 approve 或 reject'}), 400
+
+        if action == 'reject' and not reject_reason:
+            return jsonify({'code': 400, 'msg': '驳回时必须提供原因'}), 400
+
+        success, message, approval = BorrowApprovalService.approve(
+            request_id=request_id,
+            user_id=user_id,
+            user_role=user_role,
+            action=action,
+            reject_reason=reject_reason
+        )
+
+        if not success:
+            return jsonify({'code': 400, 'msg': message}), 400
+
+        return jsonify({'code': 200, 'msg': message, 'data': approval.to_dict() if approval else None}), 200
+
+    except Exception as e:
+        traceback.print_exc()
+        return jsonify({'code': 500, 'msg': f'服务器内部错误: {str(e)}'}), 500
+
+
+# --- 获取借库审批单列表 ---
+@trans_bp.route('/borrow/request', methods=['GET'])
+@jwt_required()
+def get_borrow_request_list():
+    """
+    获取借库审批单列表
+    Query参数: page, limit, applicant_id, status
+    """
+    try:
+        page = int(request.args.get('page', 1))
+        limit = int(request.args.get('limit', 10))
+        applicant_id = request.args.get('applicant_id')
+        if applicant_id:
+            applicant_id = int(applicant_id)
+        status = request.args.get('status')
+        if status is not None:
+            status = int(status)
+
+        result = BorrowApprovalService.get_request_list(
+            page=page, per_page=limit, applicant_id=applicant_id, status=status
+        )
+
+        return jsonify({'code': 200, 'msg': '获取成功', 'data': result}), 200
+
+    except Exception as e:
+        return jsonify({'code': 500, 'msg': str(e)}), 500
+
+
+# --- 执行借库扣减（审批通过后调用）---
+@trans_bp.route('/borrow/dispatch', methods=['POST'])
+@jwt_required()
+@permission_required('op_borrow:operation')
+def dispatch_borrow():
+    """
+    执行借库扣减
+    请求体: {
+        approval_id: int,   // 关联的审批单ID
+        items: [            // 扫码选中的库存物品
+            {
+                id: int,              // 库存主键（按 source_table 路由到 StockBuy/StockSemi/StockProduct）
+                source_table: str,    // 'stock_buy' | 'stock_semi' | 'stock_product'
+                sku: str,             // 可选；不参与审批上限校验
+                out_quantity: float
+            }
+        ],
+        // ★ 审批上限校验在 service 层完成：以 (name, spec_model) 为物料维度聚合
+        //   锁定 stock 行后从 material_base 表取真实 (name, spec_model) 与审批单比对
+        borrower_name: str,
+        signature_path: str,
+        remark: str,
+        expected_return_time: str
+    }
+    """
+    try:
+        data = request.get_json() or {}
+        approval_id = data.get('approval_id')
+        if not approval_id:
+            return jsonify({'code': 400, 'msg': '缺少 approval_id'}), 400
+
+        borrow_no = TransService.execute_dispatch(
+            approval_id=approval_id,
+            items=data.get('items', []),
+            operator_name=get_jwt_identity(),
+            borrower_name=data.get('borrower_name'),
+            signature=data.get('signature_path'),
+            remark=data.get('remark'),
+            expected_return_time=data.get('expected_return_time')
+        )
+
+        return jsonify({'code': 200, 'msg': '借库成功', 'data': {'borrow_no': borrow_no}}), 200
+
+    except ValueError as e:
+        return jsonify({'code': 400, 'msg': str(e)}), 400
+    except Exception as e:
+        traceback.print_exc()
+        return jsonify({'code': 500, 'msg': f'服务器内部错误: {str(e)}'}), 500

inventory-backend/app/core/audit_listener.py

@@ -41,7 +41,8 @@ def _is_audit_model(mapper):
         'StockBuy', 'StockSemi', 'StockProduct', 'StockService',
         'RepairRecord', 'TransOutbound', 'TransBorrow', 'TransReturn',
         'BomTable', 'StockTake', 'StockAdjust',
-        'TransScrap', 'SysUser'
+        'TransScrap',
+        'SysUser', 'SysMenu', 'SysElement', 'SysRolePermission',  # ★ 新增：系统管理三表纳入审计
     }
     return mapper.class_.__name__ in AUDIT_WHITELIST
 
@@ -129,11 +130,19 @@ def _create_audit_log(session, mapper, target, action, details):
 def before_update_listener(mapper, connection, target):
     """UPDATE 事件：抓取字段变更明细"""
     if not _is_audit_model(mapper): return
+
+    # ★★★ 关键修复：系统初始化（PermissionService.init_all_menus 等）时，
+    #         username='system' 且 has_request_context()=False，
+    #         这类非用户发起的变更不应产生审计日志，直接跳过。
+    if not has_request_context():
+        return
+
     try:
         state = inspect(target)
         changes = {}
         for attr in state.attrs:
             if attr.key in IGNORE_FIELDS: continue
+            if 'embedding' in attr.key: continue
             if attr.history.has_changes():
                 old_val = attr.history.deleted[0] if attr.history.deleted else None
                 new_val = attr.history.added[0] if attr.history.added else None
@@ -150,10 +159,14 @@ def before_update_listener(mapper, connection, target):
 def before_delete_listener(mapper, connection, target):
     """DELETE 事件：抓取被删除对象的完整快照"""
     if not _is_audit_model(mapper): return
+    # ★★★ 关键修复：非 HTTP 请求上下文下的初始化操作（如 PermissionService）
+    if not has_request_context(): return
     try:
         state = inspect(target)
         snap = {}
         for attr in state.attrs:
+            if attr.key in IGNORE_FIELDS: continue
+            if 'embedding' in attr.key: continue
             val = getattr(target, attr.key, None)
             snap[attr.key] = _serialize_value(val)
         _create_audit_log(connection, mapper, target, 'delete', {'deleted_snapshot': snap})
@@ -164,10 +177,14 @@ def before_delete_listener(mapper, connection, target):
 def after_insert_listener(mapper, connection, target):
     """INSERT 事件：抓取新增对象的完整快照"""
     if not _is_audit_model(mapper): return
+    # ★★★ 关键修复：非 HTTP 请求上下文下的初始化操作（如 PermissionService）
+    if not has_request_context(): return
     try:
         state = inspect(target)
         snap = {}
         for attr in state.attrs:
+            if attr.key in IGNORE_FIELDS: continue
+            if 'embedding' in attr.key: continue
             val = getattr(target, attr.key, None)
             snap[attr.key] = _serialize_value(val)
         _create_audit_log(connection, mapper, target, 'insert', {'created': snap})

inventory-backend/app/extensions.py

@@ -2,6 +2,7 @@ from flask_sqlalchemy import SQLAlchemy
 from flask_migrate import Migrate
 from flask_cors import CORS
 from flask_jwt_extended import JWTManager  # 确保引入了 JWTManager
+from flask import current_app
 from datetime import datetime, timezone, timedelta
 import redis
 
@@ -11,15 +12,78 @@ migrate = Migrate()
 cors = CORS()
 jwt = JWTManager()  # 必须实例化
 
-# Redis 客户端 (单设备登录互踢用)
+# Redis 客户端 (单设备登录互踢 + JWT Token 黑名单用)
 redis_client = None
 
+# Redis Key 前缀
+_JWT_BLOCKED_USER_PREFIX = "jwt_blocked_user:"  # 存储被删除/禁用的 user_id
+
 
 def beijing_time():
     """获取北京时间 (UTC+8)，剥离时区信息以兼容数据库 naive DateTime 字段"""
     return datetime.now(timezone(timedelta(hours=8))).replace(tzinfo=None)
 
 
+# =============================================================================
+# 全局 JWT Token 黑名单拦截器
+# 原理：Flask-JWT-Extended 在每次 @jwt_required() 验证时，
+# 会自动触发 token_in_blocklist_loader 回调。
+# 若该回调返回 True（命中黑名单），请求直接被 401 拒绝，后续代码不会执行。
+# =============================================================================
+@jwt.token_in_blocklist_loader
+def check_if_token_is_revoked(jwt_header, jwt_payload):
+    """
+    全局 JWT 黑名单检查：每次 @jwt_required() 调用时自动触发。
+    无论 AI（Dify）还是人类用户调用的接口，均受此拦截。
+
+    检查逻辑：
+    1. 通过 jwt_payload['sub']（user_id）查询 Redis 黑名单
+    2. 若 user_id 存在于黑名单 → 返回 True → 请求被 401 拒绝
+    3. 若 Redis 不可用（fail-open）→ 放行（不影响正常业务）
+    """
+    user_id = jwt_payload.get('sub')
+    if user_id is None:
+        return False
+
+    global redis_client
+    if redis_client is None:
+        return False
+
+    try:
+        blocked_key = f"{_JWT_BLOCKED_USER_PREFIX}{user_id}"
+        is_blocked = redis_client.exists(blocked_key)
+        if is_blocked:
+            current_app.logger.warning(
+                f"🚫 JWT revoked for deleted/disabled user: user_id={user_id}"
+            )
+        return bool(is_blocked)
+    except Exception as e:
+        current_app.logger.error(f"JWT blocklist check error: {e}")
+        return False  # Redis 出错时 fail-open，不阻断正常业务
+
+
+def revoke_all_tokens_for_user(user_id):
+    """
+    将指定用户的 ID 加入 JWT 黑名单（14 天）。
+    效果：该用户的所有已发放 Token（无论是否过期）瞬间失效。
+    由 delete_user() / update_user(status!='active') 时调用。
+    """
+    global redis_client
+    if redis_client is None:
+        current_app.logger.warning(
+            f"Redis unavailable, cannot revoke tokens for user_id={user_id}"
+        )
+        return
+
+    try:
+        blocked_key = f"{_JWT_BLOCKED_USER_PREFIX}{user_id}"
+        ttl_seconds = 14 * 24 * 3600  # 14 天，与 Refresh Token 有效期对齐
+        redis_client.setex(blocked_key, ttl_seconds, "1")
+        current_app.logger.info(f"✅ User {user_id} added to JWT blocklist (TTL={ttl_seconds}s)")
+    except Exception as e:
+        current_app.logger.error(f"Failed to revoke tokens for user_id={user_id}: {e}")
+
+
 # 2. 定义初始化函数 (供工厂函数 create_app 调用)
 def init_extensions(app):
     """

inventory-backend/app/models/base.py

@@ -1,5 +1,6 @@
 # app/models/base.py
 from app.extensions import db
+from pgvector.sqlalchemy import Vector
 import json
 
 
@@ -14,11 +15,11 @@ class MaterialBase(db.Model):
     id = db.Column(db.Integer, primary_key=True)
     company_name = db.Column(db.String(255), comment='所属公司')
 
-    name = db.Column(db.String(255), nullable=False, comment='名称')
+    name = db.Column(db.String(255), nullable=False, index=True, comment='名称')    # ★ 模糊搜索/精确定位高频列
     common_name = db.Column(db.String(255), comment='俗名')
-    category = db.Column(db.String(100), comment='类别')
-    material_type = db.Column(db.String(100), comment='类型')
-    spec_model = db.Column(db.String(255), comment='规格型号')
+    category = db.Column(db.String(100), index=True, comment='类别')              # ★ 分类统计/过滤高频列
+    material_type = db.Column(db.String(100), index=True, comment='类型')          # ★ 类型分组/过滤高频列
+    spec_model = db.Column(db.String(255), index=True, comment='规格型号')          # ★ 模糊搜索/精确匹配高频列
     unit = db.Column(db.String(50), comment='计量单位')
 
     # 可见等级
@@ -34,6 +35,9 @@ class MaterialBase(db.Model):
     # 强制质检标记（采购入库时必须上传检测报告）
     is_inspection_required = db.Column(db.Boolean, default=False, comment='是否强制要求质检')
 
+    # CLIP 视觉向量（用于以图搜图）
+    img_embedding = db.Column(Vector(512), nullable=True)
+
     # ============================================================
     # 关联关系区域
     # ============================================================

inventory-backend/app/models/bom.py

@@ -5,11 +5,21 @@ class BomTable(db.Model):
     __tablename__ = 'bom_table'
 
     id = db.Column(db.Integer, primary_key=True)
-    parent_id = db.Column(db.Integer, db.ForeignKey('material_base.id'), nullable=False)
-    child_id = db.Column(db.Integer, db.ForeignKey('material_base.id'), nullable=False)
+    parent_id = db.Column(
+        db.Integer,
+        db.ForeignKey('material_base.id', ondelete='SET NULL'),
+        nullable=False,
+        index=True
+    )
+    child_id = db.Column(
+        db.Integer,
+        db.ForeignKey('material_base.id', ondelete='SET NULL'),
+        nullable=False,
+        index=True
+    )
 
-    bom_no = db.Column(db.String(100), nullable=False, comment='BOM编号')
-    version = db.Column(db.String(50), nullable=False, default='V1.0', comment='版本')
+    bom_no = db.Column(db.String(100), nullable=False, index=True, comment='BOM编号')  # ★ Redis 缓存 Key + 列表查询核心列
+    version = db.Column(db.String(50), nullable=False, default='V1.0', index=True, comment='版本')  # ★ 配合 bom_no 做唯一性约束
 
     dosage = db.Column(db.Numeric(19, 4), comment='个数')
     loss_rate = db.Column(db.Numeric(5, 2), comment='损耗率%', default=0, nullable=True)
@@ -24,5 +34,15 @@ class BomTable(db.Model):
     )
 
     # relationships
-    parent = db.relationship('MaterialBase', foreign_keys=[parent_id], backref='bom_parents')
-    child = db.relationship('MaterialBase', foreign_keys=[child_id], backref='bom_children')
+    parent = db.relationship(
+        'MaterialBase',
+        foreign_keys=[parent_id],
+        backref='bom_parents',
+        passive_deletes=True
+    )
+    child = db.relationship(
+        'MaterialBase',
+        foreign_keys=[child_id],
+        backref='bom_children',
+        passive_deletes=True
+    )

inventory-backend/app/models/bom_draft.py

@@ -0,0 +1,38 @@
+from app.extensions import db
+
+
+class BomDraftTable(db.Model):
+    __tablename__ = 'bom_draft_table'
+
+    id = db.Column(db.Integer, primary_key=True)
+    bom_no = db.Column(db.String(100), nullable=False, index=True, comment='BOM编号')
+    version = db.Column(db.String(50), nullable=False, default='V1.0', index=True, comment='版本')
+    parent_id = db.Column(
+        db.Integer,
+        db.ForeignKey('material_base.id', ondelete='SET NULL'),
+        nullable=True,
+        comment='父件物料ID'
+    )
+    child_id = db.Column(
+        db.Integer,
+        db.ForeignKey('material_base.id', ondelete='SET NULL'),
+        nullable=True,
+        comment='子件物料ID'
+    )
+    dosage = db.Column(db.Numeric(19, 4), comment='个数')
+    loss_rate = db.Column(db.Numeric(5, 2), default=0, nullable=True, comment='损耗率%')
+    remark = db.Column(db.Text, comment='备注')
+    updated_at = db.Column(db.DateTime, default=db.func.now(), onupdate=db.func.now(), comment='更新时间')
+
+    parent = db.relationship(
+        'MaterialBase',
+        foreign_keys=[parent_id],
+        backref='bom_draft_parents',
+        passive_deletes=True
+    )
+    child = db.relationship(
+        'MaterialBase',
+        foreign_keys=[child_id],
+        backref='bom_draft_children',
+        passive_deletes=True
+    )

inventory-backend/app/models/borrow.py

@@ -0,0 +1,96 @@
+from app.extensions import db, beijing_time
+from app.models.system import SysUser
+from datetime import datetime
+import json
+
+
+class BorrowApproval(db.Model):
+    """
+    借库审批单模型
+    用于管理借库申请的多级审批流程
+    """
+    __tablename__ = 'borrow_approval'
+
+    id = db.Column(db.Integer, primary_key=True)
+    # 审批单号
+    request_no = db.Column(db.String(100), unique=True, nullable=False, index=True)
+    # 申请人ID
+    applicant_id = db.Column(db.Integer, nullable=False, index=True)
+    # 申请说明
+    remark = db.Column(db.Text)
+    # 状态: 0-待审批, 1-已通过, 2-已驳回, 3-已完成(已借出)
+    status = db.Column(db.Integer, default=0, nullable=False)
+    # 允许审批的人员列表 (JSON格式)
+    allowed_approvers = db.Column(db.Text)
+    # 实际审批人ID
+    actual_approver_id = db.Column(db.Integer, index=True)
+    # 审批时间
+    approved_at = db.Column(db.DateTime)
+    # 驳回原因
+    reject_reason = db.Column(db.Text)
+    # 借库人姓名（申请时填写，审批通过后流转至 TransBorrow）
+    borrower_name = db.Column(db.String(100))
+
+    # 明细快照 (存储借库物品的名称、规格、库位、数量等信息)
+    items_json = db.Column(db.Text, nullable=False)
+
+    # 创建时间和更新时间
+    created_at = db.Column(db.DateTime, default=beijing_time, nullable=False)
+    updated_at = db.Column(db.DateTime, default=beijing_time, onupdate=beijing_time, nullable=False)
+
+    def _safe_parse_json(self, value):
+        if value is None:
+            return []
+        if isinstance(value, (list, dict)):
+            return value
+        if isinstance(value, str):
+            val = value.strip()
+            if not val:
+                return []
+            try:
+                parsed = json.loads(val)
+                return parsed if isinstance(parsed, list) else []
+            except (json.JSONDecodeError, TypeError, ValueError):
+                return []
+        return []
+
+    def get_items(self):
+        return self._safe_parse_json(self.items_json)
+
+    def set_items(self, items):
+        self.items_json = json.dumps(items, ensure_ascii=False) if items else '[]'
+
+    def get_allowed_approvers(self):
+        return self._safe_parse_json(self.allowed_approvers)
+
+    def set_allowed_approvers(self, approvers):
+        self.allowed_approvers = json.dumps(approvers, ensure_ascii=False) if approvers else '[]'
+
+    def to_dict(self):
+        return {
+            'id': self.id,
+            'request_no': self.request_no,
+            'applicant_id': self.applicant_id,
+            'applicant_name': self._get_user_name(self.applicant_id),
+            'remark': self.remark,
+            'status': self.status,
+            'status_text': ['待审批', '已通过', '已驳回', '已完成'][self.status] if self.status in [0, 1, 2, 3] else '未知',
+            'allowed_approvers': self.get_allowed_approvers(),
+            'actual_approver_id': self.actual_approver_id,
+            'approver_name': self._get_user_name(self.actual_approver_id) if self.actual_approver_id else None,
+            'approved_at': self.approved_at.strftime('%Y-%m-%d %H:%M:%S') if self.approved_at else None,
+            'reject_reason': self.reject_reason,
+            'borrower_name': self.borrower_name,
+            'items': self.get_items(),
+            'created_at': self.created_at.strftime('%Y-%m-%d %H:%M:%S') if self.created_at else None,
+            'updated_at': self.updated_at.strftime('%Y-%m-%d %H:%M:%S') if self.updated_at else None,
+        }
+
+    def _get_user_name(self, user_id):
+        if not user_id:
+            return ""
+        try:
+            user = SysUser.query.get(user_id)
+            return user.username if user else f"未知用户({user_id})"
+        except Exception:
+            return f"用户({user_id})"

inventory-backend/app/models/inbound/buy.py

@@ -1,5 +1,6 @@
 # inventory-backend/app/models/inbound/buy.py
 from app.extensions import db
+from pgvector.sqlalchemy import Vector
 import json
 # 显式导入 MaterialBase 以防 relationship 找不到引用
 from app.models.base import MaterialBase
@@ -13,19 +14,19 @@ class StockBuy(db.Model):
     __tablename__ = 'stock_buy'
 
     id = db.Column(db.Integer, primary_key=True)
-    base_id = db.Column(db.Integer, db.ForeignKey('material_base.id'), nullable=False)
+    base_id = db.Column(db.Integer, db.ForeignKey('material_base.id'), nullable=False, index=True)  # ★ 批量 IN 查询高频列
 
     # 身份标识
-    sku = db.Column(db.String(100))
+    sku = db.Column(db.String(100), index=True)      # ★ 条码/SKU 快速定位
     in_date = db.Column(db.DateTime)
-    barcode = db.Column(db.String(100))
+    barcode = db.Column(db.String(100), index=True)  # ★ 条码扫码查询高频列
     serial_number = db.Column(db.String(100))
     batch_number = db.Column(db.String(100))
 
     # 状态
-    status = db.Column(db.String(50), default='在库')
+    status = db.Column(db.String(50), index=True)    # ★ 在库/锁定 过滤条件
     inspection_status = db.Column(db.String(50))
-    warehouse_location = db.Column(db.String(100))
+    warehouse_location = db.Column(db.String(100), index=True)  # ★ 按库位分组/过滤
 
     # 数量
     in_quantity = db.Column(db.Numeric(19, 4), default=0)
@@ -55,6 +56,9 @@ class StockBuy(db.Model):
     # 全局打印流水号
     global_print_id = db.Column(db.Integer)
 
+    # CLIP 视觉向量（用于以图搜图）
+    arrival_image_embedding = db.Column(Vector(512), nullable=True)
+
     # 关系定义
     base = db.relationship('MaterialBase', back_populates='stock_buys')
 

inventory-backend/app/models/inbound/product.py

@@ -1,5 +1,6 @@
 # app/models/inbound/product.py
 from app.extensions import db
+from pgvector.sqlalchemy import Vector
 import json
 from app.models.base import MaterialBase
 
@@ -12,12 +13,12 @@ class StockProduct(db.Model):
     __tablename__ = 'stock_product'
 
     id = db.Column(db.Integer, primary_key=True)
-    base_id = db.Column(db.Integer, db.ForeignKey('material_base.id'), nullable=False)
+    base_id = db.Column(db.Integer, db.ForeignKey('material_base.id'), nullable=False, index=True)  # ★ 批量 IN 查询高频列
 
     # 身份标识
-    sku = db.Column(db.String(100))
+    sku = db.Column(db.String(100), index=True)       # ★ SKU 快速定位
     production_date = db.Column(db.DateTime)
-    barcode = db.Column(db.String(100))
+    barcode = db.Column(db.String(100), index=True)   # ★ 条码扫码查询高频列
     serial_number = db.Column(db.String(100))
 
     # 数量
@@ -26,8 +27,8 @@ class StockProduct(db.Model):
     available_quantity = db.Column(db.Numeric(19, 4), default=0)
 
     # 状态与位置
-    status = db.Column(db.String(50))
-    warehouse_location = db.Column(db.String(100))
+    status = db.Column(db.String(50), index=True)     # ★ 在库/锁定 过滤条件
+    warehouse_location = db.Column(db.String(100), index=True)  # ★ 按库位分组/过滤
 
     # 生产与成本
     bom_code = db.Column('bom_id', db.String(100))
@@ -58,6 +59,9 @@ class StockProduct(db.Model):
     # 全局打印流水号
     global_print_id = db.Column(db.Integer)
 
+    # CLIP 视觉向量（用于以图搜图）
+    arrival_image_embedding = db.Column(Vector(512), nullable=True)
+
     # 关系定义
     base = db.relationship('MaterialBase', back_populates='stock_products')
 

inventory-backend/app/models/inbound/semi.py

@@ -1,5 +1,6 @@
 # app/models/inbound/semi.py
 from app.extensions import db
+from pgvector.sqlalchemy import Vector
 import json
 from app.models.base import MaterialBase
 
@@ -11,11 +12,11 @@ class StockSemi(db.Model):
     __tablename__ = 'stock_semi'
 
     id = db.Column(db.Integer, primary_key=True)
-    base_id = db.Column(db.Integer, db.ForeignKey('material_base.id'), nullable=False)
+    base_id = db.Column(db.Integer, db.ForeignKey('material_base.id'), nullable=False, index=True)  # ★ 批量 IN 查询高频列
 
-    sku = db.Column(db.String(100))
+    sku = db.Column(db.String(100), index=True)       # ★ SKU 快速定位
     production_date = db.Column(db.DateTime)
-    barcode = db.Column(db.String(100))
+    barcode = db.Column(db.String(100), index=True)    # ★ 条码扫码查询高频列
     serial_number = db.Column(db.String(100))
     batch_number = db.Column(db.String(100))
 
@@ -25,8 +26,8 @@ class StockSemi(db.Model):
     available_quantity = db.Column(db.Numeric(19, 4), default=0)
 
     # 状态与位置
-    status = db.Column(db.String(50))
-    warehouse_location = db.Column(db.String(100))
+    status = db.Column(db.String(50), index=True)      # ★ 在库/锁定 过滤条件
+    warehouse_location = db.Column(db.String(100), index=True)  # ★ 按库位分组/过滤
 
     # 半成品特有字段
     bom_code = db.Column('bom_id', db.String(100))
@@ -56,6 +57,9 @@ class StockSemi(db.Model):
     # 全局打印流水号
     global_print_id = db.Column(db.Integer)
 
+    # CLIP 视觉向量（用于以图搜图）
+    arrival_image_embedding = db.Column(Vector(512), nullable=True)
+
     # 关系定义
     base = db.relationship('MaterialBase', back_populates='stock_semis')
 

inventory-backend/app/services/auth_service.py

@@ -1,6 +1,6 @@
 # app/services/auth_service.py
 from app.models.system import SysUser, SysRolePermission # <== 引入 SysRolePermission
-from app.extensions import db, redis_client
+from app.extensions import db, redis_client, revoke_all_tokens_for_user
 from sqlalchemy import func
 from flask_jwt_extended import create_access_token, create_refresh_token, get_jwt_identity
 from flask import current_app
@@ -334,7 +334,11 @@ class AuthService:
             user.email = email
 
         if 'status' in data:
-            user.status = data['status']
+            new_status = data['status']
+            # ★ 幽灵令牌漏洞修复：用户被禁用时，立即吊销其所有 Token
+            if new_status != 'active' and user.status == 'active':
+                revoke_all_tokens_for_user(user_id)
+            user.status = new_status
 
         new_password = data.get('password')
         if new_password and str(new_password).strip():
@@ -353,7 +357,7 @@ class AuthService:
 
     @staticmethod
     def delete_user(user_id, operator_role):
-        """删除用户"""
+        """删除用户：删除前自动吊销该用户所有 JWT Token"""
         # 标准化操作者角色为全大写
         operator_role_upper = operator_role.upper() if operator_role else None
         if operator_role_upper != UserRole.SUPER_ADMIN:
@@ -365,6 +369,18 @@ class AuthService:
 
         # 提前获取用户名用于审计日志
         username = user.username
+
+        # ★ 幽灵令牌漏洞修复：删除用户前，先将 user_id 加入 JWT 黑名单
+        # 效果：该用户持有的所有 Token 瞬间失效，无论是否已过期
+        revoke_all_tokens_for_user(user_id)
+
+        # 清除 Redis 中的单设备登录 Token（防止残留）
+        if redis_client is not None:
+            try:
+                redis_client.delete(f"user_token_{user_id}")
+            except Exception as e:
+                current_app.logger.warning(f"Failed to delete user token from Redis: {e}")
+
         db.session.delete(user)
         db.session.commit()
         return username

inventory-backend/app/services/bom_draft_service.py

@@ -0,0 +1,145 @@
+from app.extensions import db
+from app.models.bom_draft import BomDraftTable
+from app.models.base import MaterialBase
+from app.services.bom_service import BomService
+import logging
+
+logger = logging.getLogger(__name__)
+
+
+class BomDraftService:
+
+    @staticmethod
+    def save_draft(bom_no, version, parent_id, children):
+        try:
+            # 1. 删除旧草稿
+            old = BomDraftTable.query.filter_by(bom_no=bom_no, version=version).all()
+            for rec in old:
+                db.session.delete(rec)
+            db.session.flush()
+
+            # 2. 如果没有任何子件，必须插入一条只包含 parent_id 的占位头数据
+            if not children:
+                dummy_draft = BomDraftTable(
+                    bom_no=bom_no, version=version, parent_id=parent_id,
+                    child_id=None, dosage=0, loss_rate=0, remark=''
+                )
+                db.session.add(dummy_draft)
+            else:
+                # 正常批量插入新草稿行
+                for child in children:
+                    draft = BomDraftTable(
+                        bom_no=bom_no, version=version, parent_id=parent_id,
+                        child_id=child.get('child_id'),
+                        dosage=child.get('dosage', 0),
+                        loss_rate=child.get('loss_rate', 0),
+                        remark=child.get('remark', '')
+                    )
+                    db.session.add(draft)
+
+            db.session.commit()
+        except Exception as e:
+            db.session.rollback()
+            logger.error(f"[BomDraft] save_draft 失败 bom_no={bom_no}: {e}")
+            raise
+        return bom_no
+
+    @staticmethod
+    def get_draft_detail(bom_no, version):
+        rows = db.session.query(
+            BomDraftTable,
+            MaterialBase.name.label('child_name'),
+            MaterialBase.spec_model.label('child_spec')
+        ).outerjoin(
+            MaterialBase, BomDraftTable.child_id == MaterialBase.id
+        ).filter(
+            BomDraftTable.bom_no == bom_no,
+            BomDraftTable.version == version
+        ).all()
+
+        if not rows:
+            return None
+
+        first = rows[0].BomDraftTable
+        parent_id = first.parent_id
+        parent_material = MaterialBase.query.get(parent_id) if parent_id else None
+
+        children = []
+        for draft, child_name, child_spec in rows:
+            # 过滤掉保存 BOM 头时插入的占位空行
+            if draft.child_id is not None:
+                children.append({
+                    'child_id': draft.child_id,
+                    'child_name': child_name or '',
+                    'child_spec': child_spec or '',
+                    'dosage': float(draft.dosage) if draft.dosage else 0.0,
+                    'loss_rate': float(draft.loss_rate) if draft.loss_rate else 0.0,
+                    'remark': draft.remark or '',
+                })
+
+        return {
+            'bom_no': bom_no,
+            'version': first.version,
+            'parent_id': parent_id,
+            'parent_name': parent_material.name if parent_material else '',
+            'parent_spec': parent_material.spec_model if parent_material else '',
+            'children': children,
+        }
+
+    @staticmethod
+    def publish_draft(bom_no, version):
+        """
+        发布草稿为正式 BOM：
+          1. 获取草稿数据
+          2. 强校验（父件不为空、子件列表非空、所有子件 ID>0、用量>0）
+          3. 调用 BomService.save_bom 写入正式 bom_table
+          4. 清空草稿数据
+        """
+        try:
+            # 步骤 1
+            draft = BomDraftService.get_draft_detail(bom_no, version)
+            if not draft:
+                raise ValueError('草稿不存在')
+
+            # 步骤 2：强校验
+            if not draft.get('parent_id'):
+                raise ValueError('发布失败：父件不能为空')
+
+            children = draft.get('children', [])
+            if not children:
+                raise ValueError('发布失败：子件列表不能为空')
+
+            for child in children:
+                if not child.get('child_id') or child['child_id'] <= 0:
+                    raise ValueError('发布失败：子件ID必须大于0')
+                dosage = child.get('dosage')
+                if not dosage or dosage <= 0:
+                    raise ValueError('发布失败：子件用量必须大于0')
+
+            # 步骤 3：复用正式 BOM 的写入逻辑（跨版本查重 + 缓存清理均在 save_bom 内完成）
+            publish_data = {
+                'bom_no': bom_no,
+                'version': version,
+                'parent_id': draft['parent_id'],
+                'children': [
+                    {
+                        'child_id': child['child_id'],
+                        'dosage': child['dosage'],
+                        'remark': child.get('remark', ''),
+                    }
+                    for child in children
+                ],
+            }
+            BomService.save_bom(publish_data)
+
+            # 步骤 4：清空草稿数据
+            old_rows = BomDraftTable.query.filter_by(bom_no=bom_no, version=version).all()
+            for rec in old_rows:
+                db.session.delete(rec)
+            db.session.commit()
+            logger.info(f"[BomDraft] publish_draft bom_no={bom_no} version={version} -> 已发布并清空草稿")
+        except Exception as e:
+            db.session.rollback()
+            logger.error(f"[BomDraft] publish_draft 失败 bom_no={bom_no}: {e}")
+            raise
+        return bom_no

inventory-backend/app/services/bom_service.py

@@ -2,11 +2,101 @@ from app.extensions import db
 from app.models.bom import BomTable
 from app.models.base import MaterialBase
 from app.models.inbound.buy import StockBuy
+from app.models.inbound.semi import StockSemi
+from app.models.inbound.product import StockProduct
 from sqlalchemy import func, distinct, or_, case
 from collections import defaultdict
 import uuid
+import json
+import logging
 from datetime import datetime
 
+logger = logging.getLogger(__name__)
+
+# Redis 缓存键前缀 + TTL（秒）
+BOM_CACHE_PREFIX = 'bom:tree'
+BOM_CACHE_TTL = 43200  # 12小时
+
+
+def _get_redis():
+    """
+    获取 Redis 客户端实例，带容错保护。
+    若 extensions 中没有 redis_client 或连接失败，返回 None。
+    绝不抛出异常，确保业务不因此中断。
+    """
+    try:
+        from app.extensions import redis_client
+        return redis_client
+    except Exception:
+        return None
+
+
+def _cache_get(bom_no, version=None):
+    """
+    从 Redis 读取 BOM 缓存。
+    键 = bom:tree:{bom_no} 或 bom:tree:{bom_no}:{version}
+    返回：反序列化后的 dict 或 None
+    """
+    client = _get_redis()
+    if not client:
+        return None
+
+    key = f"{BOM_CACHE_PREFIX}:{bom_no}" + (f":{version}" if version else "")
+    try:
+        raw = client.get(key)
+        if raw:
+            logger.debug(f"[BOM Cache] HIT  key={key}")
+            return json.loads(raw)
+        logger.debug(f"[BOM Cache] MISS key={key}")
+        return None
+    except Exception as e:
+        logger.warning(f"[BOM Cache] GET 失败，降级查库. key={key}, err={e}")
+        return None
+
+
+def _cache_set(bom_no, version, data):
+    """
+    将 BOM 数据写入 Redis，设置 12 小时 TTL。
+    即使写入失败也只是打日志，不阻断业务流程。
+    """
+    client = _get_redis()
+    if not client:
+        return
+
+    key = f"{BOM_CACHE_PREFIX}:{bom_no}" + (f":{version}" if version else "")
+    try:
+        client.setex(key, BOM_CACHE_TTL, json.dumps(data, ensure_ascii=False))
+        logger.debug(f"[BOM Cache] SET  key={key} ttl={BOM_CACHE_TTL}s")
+    except Exception as e:
+        logger.warning(f"[BOM Cache] SET  失败，已忽略. key={key}, err={e}")
+
+
+def _cache_delete(bom_no, version=None):
+    """
+    删除 Redis 中指定 BOM 的缓存条目。
+    在写操作（增/改/删）成功后调用，确保后续读请求拿到最新数据。
+    """
+    client = _get_redis()
+    if not client:
+        return
+
+    # 删除版本级缓存
+    if version:
+        key = f"{BOM_CACHE_PREFIX}:{bom_no}:{version}"
+        try:
+            client.delete(key)
+            logger.debug(f"[BOM Cache] DEL  key={key}")
+        except Exception as e:
+            logger.warning(f"[BOM Cache] DEL  失败，已忽略. key={key}, err={e}")
+
+    # 同时删除"最新版"缓存（不带版本后缀），避免缓存不一致
+    key_latest = f"{BOM_CACHE_PREFIX}:{bom_no}"
+    try:
+        client.delete(key_latest)
+        logger.debug(f"[BOM Cache] DEL  key={key_latest}")
+    except Exception as e:
+        logger.warning(f"[BOM Cache] DEL  失败，已忽略. key={key_latest}, err={e}")
+
 
 class BomService:
     # ====================== 新版 BOM 逻辑（基于 bom_no） ======================
@@ -52,24 +142,35 @@ class BomService:
                 )
             )
 
+        # ★ 调试：打印 SQL 语句
+        logger.info(f"[BOM List] keyword={keyword!r} → SQL:\n{str(query_base.statement.compile(compile_kwargs={'literal_binds': True}))}")
+
         # 获取符合条件的唯一组合
         target_pairs = query_base.distinct().all()
 
         if not target_pairs:
             return []
 
-        # 2. 聚合查询详情
+        # 2. 聚合查询详情（★ 修复：使用 string_agg 聚合子件名称，解决步骤3过滤遗漏问题）
         results = []
         for bom_no, version in target_pairs:
+            # ★ 使用子件的别名查询子件信息，聚合所有子件的名称和规格
+            child_alias = db.aliased(MaterialBase)
             summary = db.session.query(
                 BomTable.parent_id,
                 MaterialBase.name.label('parent_name'),
                 MaterialBase.spec_model.label('parent_spec'),
                 MaterialBase.category.label('parent_category'),
                 BomTable.is_enabled,
-                func.count(BomTable.child_id).label('child_count')
+                func.count(BomTable.child_id).label('child_count'),
+                # ★ 聚合子件名称为逗号分隔字符串（用于步骤3关键词过滤）
+                func.string_agg(child_alias.name, ', ').label('child_names'),
+                # ★ 同时聚合子件规格（备用）
+                func.string_agg(child_alias.spec_model, ', ').label('child_specs')
             ).join(
                 MaterialBase, BomTable.parent_id == MaterialBase.id
+            ).outerjoin(
+                child_alias, BomTable.child_id == child_alias.id
             ).filter(
                 BomTable.bom_no == bom_no,
                 BomTable.version == version
@@ -86,7 +187,9 @@ class BomService:
                     'parent_spec': summary.parent_spec or '',
                     'parent_category': summary.parent_category or '',
                     'is_enabled': summary.is_enabled,
-                    'child_count': summary.child_count
+                    'child_count': summary.child_count,
+                    'child_names': summary.child_names or '',   # ★ 新增：子件名称聚合
+                    'child_specs': summary.child_specs or ''    # ★ 新增：子件规格聚合
                 })
 
         results.sort(key=lambda x: (x['bom_no'], x['version']), reverse=True)
@@ -100,6 +203,8 @@ class BomService:
                    or kw in (r.get('parent_spec') or '').lower()
                    or kw in (r.get('bom_no') or '').lower()
                    or kw in (r.get('parent_category') or '').lower()
+                   or kw in (r.get('child_names') or '').lower()      # ★ 修复：加入子件名称过滤
+                   or kw in (r.get('child_specs') or '').lower()      # ★ 同步加入子件规格过滤
             ]
 
         # 按 parent_category 分组
@@ -121,8 +226,25 @@ class BomService:
     @staticmethod
     def get_bom_detail(bom_no, version=None):
         """
-        根据 bom_no (和 version) 获取配方详情
+        根据 bom_no (和 version) 获取配方详情。
+
+        Cache-Aside 模式（三步走）:
+        1. 先查 Redis，有值直接返回（Cache Hit）
+        2. 无值或 Redis 报错，查数据库（Cache Miss → Fallback）
+        3. 数据库查好后写入 Redis，TTL=12h，供下次命中
+
+        注意：查询"最新版"时（version=None），缓存键不带版本后缀；
+              写入时也写入不带版本的键，这样无需指定 version 就能命中。
         """
+        # ===== 第一步：尝试从 Redis 读取缓存 =====
+        cached = _cache_get(bom_no, version if version else None)
+        if cached is not None:
+            # Cache Hit：直接返回缓存数据，不再查库
+            logger.debug(f"[BOM] get_bom_detail bom_no={bom_no} version={version} → 命中缓存")
+            return cached
+
+        # ===== 第二步：Cache Miss → 查数据库 =====
+        logger.debug(f"[BOM] get_bom_detail bom_no={bom_no} version={version} → 查询数据库")
         query = db.session.query(
             BomTable,
             MaterialBase.name.label('child_name'),
@@ -141,6 +263,8 @@ class BomService:
             if not latest_ver:
                 return None
             query = query.filter(BomTable.version == latest_ver)
+            # 记录本次实际查的版本，用于缓存键
+            version = latest_ver
 
         rows = query.all()
         if not rows:
@@ -160,7 +284,7 @@ class BomService:
                 'remark': bom.remark or ''
             })
 
-        return {
+        result = {
             'bom_no': bom_no,
             'version': first.BomTable.version,
             'parent_id': parent_id,
@@ -170,6 +294,11 @@ class BomService:
             'children': children
         }
 
+        # ===== 第三步：写入 Redis 缓存（TTL=12h），失败只打日志不阻断 =====
+        _cache_set(bom_no, version, result)
+
+        return result
+
     @staticmethod
     def save_bom(data):
         """保存 BOM (支持多版本)，新增跨版本内容查重"""
@@ -239,45 +368,57 @@ class BomService:
             db.session.add(bom)
 
         db.session.commit()
+
+        # ===== 写入后立刻清除缓存（Cache Invalidation） =====
+        # 确保后续 get_bom_detail 读取到最新数据，而不是 stale cache
+        _cache_delete(bom_no, version)
+        logger.info(f"[BOM Cache] save_bom → 缓存已失效 bom_no={bom_no} version={version}")
+
         return bom_no
 
     @staticmethod
     def get_bom_with_stock_by_bom_no(bom_no):
         """
-        根据 bom_no 获取配方详情，并计算：
-        1. 总可用库存
-        2. 最大可生产套数
-        3. ★ 聚合库位信息 (warehouse_locations)
+        根据 bom_no 获取配方详情，并计算（已修复 N+1 性能问题）
         """
         detail = BomService.get_bom_detail(bom_no)
-        if not detail:
-            return None
+        if not detail or not detail.get('children'):
+            return detail
 
+        # 1. 提取所有子件的 ID 列表
+        child_ids = [child['child_id'] for child in detail['children']]
+
+        # 2. 用一条 IN 语句批量查出所有相关子件的库存和库位
+        stock_stats = db.session.query(
+            StockBuy.base_id,
+            func.coalesce(func.sum(StockBuy.available_quantity), 0).label('total_qty'),
+            func.string_agg(distinct(StockBuy.warehouse_location), ', ').label('locations')
+        ).filter(
+            StockBuy.base_id.in_(child_ids),
+            StockBuy.available_quantity > 0
+        ).group_by(
+            StockBuy.base_id
+        ).all()
+
+        # 3. 将查询结果转换为字典 (Map)，方便后续 O(1) 极速匹配
+        stock_map = {
+            stat.base_id: {
+                'qty': stat.total_qty,
+                'loc': stat.locations if stat.locations else ''
+            }
+            for stat in stock_stats
+        }
+
+        # 4. 遍历组装数据（纯内存操作，极快）
         for child in detail['children']:
-            # 1. 查询该子件的总库存
-            stock_qty = db.session.query(
-                func.coalesce(func.sum(StockBuy.available_quantity), 0)
-            ).filter(
-                StockBuy.base_id == child['child_id']
-            ).scalar() or 0
+            base_id = child['child_id']
+            stat = stock_map.get(base_id, {'qty': 0, 'loc': ''})
 
-            # 2. ★ 查询该子件涉及的所有库位，并去重拼接 (PostgreSQL 使用 string_agg)
-            # 注意：这里假设主要是 stock_buy 表，如果是成品或半成品也需要做类似 Union 查询
-            # 为简化，这里演示只查 stock_buy 的库位
-            locations = db.session.query(
-                # 去除空值和重复值
-                func.string_agg(distinct(StockBuy.warehouse_location), ', ')
-            ).filter(
-                StockBuy.base_id == child['child_id'],
-                StockBuy.available_quantity > 0,  # 只看有货的库位
-                StockBuy.warehouse_location != None,
-                StockBuy.warehouse_location != ''
-            ).scalar()
+            stock_qty = float(stat['qty'])
+            dosage = float(child['dosage']) if child.get('dosage') else 0
 
-            child['current_stock'] = float(stock_qty)
-            child['warehouse_location'] = locations or ''  # 返回给前端
-
-            dosage = child['dosage']
+            child['current_stock'] = stock_qty
+            child['warehouse_location'] = stat['loc']
             child['max_producible'] = int(stock_qty // dosage) if dosage > 0 else 0
 
         return detail
@@ -290,22 +431,31 @@ class BomService:
 
     @staticmethod
     def create_or_update_bom(parent_id, child_list, bom_no=None, version='V1.0'):
-        if not bom_no:
-            existing = BomTable.query.filter_by(parent_id=parent_id).first()
-            bom_no = existing.bom_no if existing else BomService.generate_bom_no()
+        try:
+            if not bom_no:
+                existing = BomTable.query.filter_by(parent_id=parent_id).first()
+                bom_no = existing.bom_no if existing else BomService.generate_bom_no()
 
-        # 改为对象级删除以触发审计事件
-        old_records = BomTable.query.filter_by(bom_no=bom_no, version=version).all()
-        for rec in old_records:
-            db.session.delete(rec)
+            # 改为对象级删除以触发审计事件
+            old_records = BomTable.query.filter_by(bom_no=bom_no, version=version).all()
+            for rec in old_records:
+                db.session.delete(rec)
 
-        for item in child_list:
-            bom = BomTable(
-                bom_no=bom_no, version=version, parent_id=parent_id,
-                child_id=item['child_id'], dosage=item.get('dosage', 0), remark=item.get('remark', '')
-            )
-            db.session.add(bom)
-        db.session.commit()
+            for item in child_list:
+                bom = BomTable(
+                    bom_no=bom_no, version=version, parent_id=parent_id,
+                    child_id=item['child_id'], dosage=item.get('dosage', 0), remark=item.get('remark', '')
+                )
+                db.session.add(bom)
+            db.session.commit()
+
+            # ===== 写入后立刻清除缓存（Cache Invalidation） =====
+            _cache_delete(bom_no, version)
+            logger.info(f"[BOM Cache] create_or_update_bom → 缓存已失效 bom_no={bom_no} version={version}")
+        except Exception as e:
+            db.session.rollback()
+            logger.error(f"[BOM] create_or_update_bom 失败 bom_no={bom_no}: {e}")
+            raise
         return True
 
     @staticmethod
@@ -313,4 +463,69 @@ class BomService:
         bom_no = BomService.get_bom_no_by_parent(parent_id)
         if not bom_no: return []
         detail = BomService.get_bom_with_stock_by_bom_no(bom_no)
-        return detail['children'] if detail else []
+        return detail['children'] if detail else []
+
+    @staticmethod
+    def calculate_cascade_inventory(bom_no, order_qty):
+        """
+        根据 bom_no 和订单数量，计算所有子件的级联库存缺口。
+        返回结构供 AI 消费，每个子件包含：parent_name / spec / name / level_type /
+        need_qty / available_stock / suggested_qty / gap
+        若 BOM 不存在返回 None。
+        """
+        # 1. 获取 BOM 明细
+        detail = BomService.get_bom_detail(bom_no)
+        if not detail or not detail.get('children'):
+            return None
+
+        parent_name = detail.get('parent_name', '')
+
+        # 2. 提取所有子件 ID，查询采购库存（stock_buy）
+        child_ids = [child['child_id'] for child in detail['children']]
+
+        buy_stats = db.session.query(
+            StockBuy.base_id,
+            func.coalesce(func.sum(StockBuy.available_quantity), 0).label('total_qty')
+        ).filter(
+            StockBuy.base_id.in_(child_ids)
+        ).group_by(StockBuy.base_id).all()
+
+        buy_map = {stat.base_id: float(stat.total_qty) for stat in buy_stats}
+
+        # 3. 提取所有子件的基础物料信息（名称/规格/类型）
+        materials = db.session.query(
+            MaterialBase.id,
+            MaterialBase.name,
+            MaterialBase.spec_model
+        ).filter(MaterialBase.id.in_(child_ids)).all()
+
+        mat_map = {
+            m.id: {'name': m.name or '', 'spec': m.spec_model or ''}
+            for m in materials
+        }
+
+        # 4. 遍历子件，计算每个子件的缺口数据
+        results = []
+        for child in detail['children']:
+            child_id = child['child_id']
+            dosage = float(child.get('dosage') or 0)
+            need_qty = dosage * order_qty
+
+            available_stock = buy_map.get(child_id, 0)
+            suggested_qty = max(0.0, min(need_qty, available_stock))
+            gap = available_stock - need_qty
+
+            mat_info = mat_map.get(child_id, {'name': '', 'spec': ''})
+
+            results.append({
+                'parent_name':   parent_name,
+                'spec':          mat_info['spec'],
+                'name':          mat_info['name'],
+                'level_type':    'child',
+                'need_qty':      round(need_qty, 4),
+                'available_stock': round(available_stock, 4),
+                'suggested_qty':   round(suggested_qty, 4),
+                'gap':             round(gap, 4),
+            })
+
+        return results

inventory-backend/app/services/borrow_service.py

@@ -0,0 +1,401 @@
+from datetime import datetime
+import pytz
+from app.extensions import db
+from app.models.borrow import BorrowApproval
+from app.models.system import SysUser
+
+
+class BorrowApprovalService:
+    """借库审批服务"""
+
+    @staticmethod
+    def generate_request_no():
+        """
+        生成审批单号: APR-BOR-yyyyMMdd-HHmm-当日流水(4位)
+        """
+        beijing_tz = pytz.timezone('Asia/Shanghai')
+        now = datetime.now(beijing_tz)
+
+        date_str = now.strftime('%Y%m%d')
+        time_str = now.strftime('%H%M')
+
+        prefix = f"APR-BOR-{date_str}-"
+
+        latest = db.session.query(BorrowApproval.request_no).filter(
+            BorrowApproval.request_no.like(f"{prefix}%")
+        ).order_by(BorrowApproval.id.desc()).first()
+
+        if latest:
+            last_seq = int(latest[0].split('-')[-1])
+            sequence = last_seq + 1
+        else:
+            sequence = 1
+
+        return f"APR-BOR-{date_str}-{time_str}-{sequence:04d}"
+
+    @staticmethod
+    def submit_approval(applicant_id, items, allowed_approvers, remark=None, approver_id=None,
+                         borrower_name=None):
+        """
+        提交借库申请（仅存储意向，不扣库存）
+
+        Args:
+            applicant_id: 申请人ID
+            items: 借库物品明细列表，每个物品应包含:
+                - name: 物料名称 (必填)
+                - spec_model: 规格型号 (必填)
+                - quantity: 计划借库数量 (必填)
+                - warehouse_location: 库位 (可选)
+                - remark: 物品备注 (可选)
+            allowed_approvers: 允许审批的人员/角色列表
+            approver_id: 指定审批人ID（可选）
+            remark: 申请说明
+            borrower_name: 借库人姓名（必填）
+
+        Returns:
+            BorrowApproval 实例
+
+        Raises:
+            ValueError: 当 items 为空或缺少必填字段时抛出
+        """
+        if not items:
+            raise ValueError("借库物品列表不能为空")
+
+        required_fields = ['name', 'spec_model', 'quantity']
+        for idx, item in enumerate(items):
+            missing_fields = [f for f in required_fields if f not in item or str(item.get(f) or '').strip() == '']
+            if missing_fields:
+                raise ValueError(
+                    f"第 {idx + 1} 条物品缺少必填字段: {', '.join(missing_fields)}。"
+                    f"必须包含: name, spec_model, quantity"
+                )
+            try:
+                qty = float(item.get('quantity', 0))
+                if qty <= 0:
+                    raise ValueError(f"第 {idx + 1} 条物品的借库数量必须大于0")
+            except (TypeError, ValueError) as e:
+                raise ValueError(f"第 {idx + 1} 条物品的 quantity 格式无效: {str(e)}")
+
+        if not allowed_approvers:
+            raise ValueError("必须指定至少一位审批人")
+
+        if approver_id:
+            allowed_approvers = [{"type": "user", "value": int(approver_id)}]
+
+        request_no = BorrowApprovalService.generate_request_no()
+
+        approval = BorrowApproval(
+            request_no=request_no,
+            applicant_id=applicant_id,
+            remark=remark,
+            borrower_name=borrower_name,
+            status=0,  # 待审批
+        )
+
+        approval.set_items(items)
+        approval.set_allowed_approvers(allowed_approvers)
+
+        db.session.add(approval)
+        db.session.commit()
+
+        # ★ 创建成功后，发送邮件通知审批人（静默处理，不阻断主流程）
+        BorrowApprovalService._notify_new_request(approval, applicant_id, approver_id=approver_id)
+
+        return approval
+
+    @staticmethod
+    def _get_emails_by_identifiers(applicant_id=None, role_codes=None):
+        """
+        根据用户ID或角色列表查询邮箱地址
+
+        Args:
+            applicant_id: 用户ID (按 SysUser.id 查找)
+            role_codes:    角色代码列表，如 ['SUPERVISOR', 'SUPER_ADMIN']
+
+        Returns:
+            去重后的邮箱地址列表
+        """
+        emails = []
+
+        if applicant_id:
+            user = SysUser.query.get(int(applicant_id))
+            if user and user.email:
+                emails.append(user.email)
+
+        if role_codes:
+            for code in role_codes:
+                users = SysUser.query.filter_by(role=code).all()
+                for u in users:
+                    if u.email:
+                        emails.append(u.email)
+
+        return list(set(emails))
+
+    @staticmethod
+    def _notify_new_request(approval, applicant_id, approver_id=None):
+        """发送新借库申请通知邮件给审批人和申请人（静默处理，不阻断主流程）"""
+        try:
+            from flask import current_app
+            from app.utils.email_service import send_borrow_new_request_notify
+            from app.models.system import SysUser
+
+            applicant_name = ''
+            applicant_emails = []
+
+            # 1. 收集申请人信息
+            if applicant_id:
+                user = SysUser.query.get(int(applicant_id))
+                if user and user.email:
+                    applicant_emails.append(user.email)
+                    applicant_name = str(user.username).split('/')[0] if '/' in (user.username or '') else (user.username or str(applicant_id))
+
+            # 2. 收集审批人信息
+            approver_emails = []
+            if approver_id:
+                user = SysUser.query.get(int(approver_id))
+                if user and user.email:
+                    approver_emails.append(user.email)
+            else:
+                # 兜底：按角色查询
+                approvers = approval.get_allowed_approvers()
+                role_codes = []
+                for a in approvers:
+                    if a.get('type') == 'role':
+                        role_codes.append(a.get('value', ''))
+                approver_emails = BorrowApprovalService._get_emails_by_identifiers(role_codes=role_codes)
+
+            # 去重
+            all_emails = list(set(applicant_emails + approver_emails))
+            if not all_emails:
+                current_app.logger.info(f"[Email] 借库审批单 {approval.request_no} 无收件人邮箱，跳过通知")
+                return
+
+            # 3. 获取物料明细
+            items = approval.get_items()
+
+            # 4. 分别发送邮件
+            if applicant_emails:
+                try:
+                    send_borrow_new_request_notify(
+                        to_emails=applicant_emails,
+                        request_no=approval.request_no,
+                        applicant_name=applicant_name,
+                        remark=f"您的借库申请已提交，等待审批。{approval.remark or ''}",
+                        items=items,
+                        is_applicant_notify=True
+                    )
+                except Exception as e:
+                    current_app.logger.error(f"[Email] 通知申请人失败: {e}")
+
+            if approver_emails:
+                try:
+                    send_borrow_new_request_notify(
+                        to_emails=approver_emails,
+                        request_no=approval.request_no,
+                        applicant_name=applicant_name,
+                        remark=approval.remark or '',
+                        items=items,
+                        is_applicant_notify=False
+                    )
+                except Exception as e:
+                    current_app.logger.error(f"[Email] 通知审批人失败: {e}")
+
+        except Exception as e:
+            try:
+                from flask import current_app
+                current_app.logger.error(f"[Email] 发送新借库申请通知邮件失败: {e}")
+            except RuntimeError:
+                import traceback
+                traceback.print_exc()
+
+    @staticmethod
+    def _notify_approval_result(approval, approver_id, action):
+        """发送借库审批结果通知邮件（静默处理，不阻断主流程）"""
+        import logging
+        logger = logging.getLogger(__name__)
+
+        try:
+            from app.utils.email_service import send_borrow_approval_result_notify, send_borrow_dispatch_notify
+            from app.models.system import SysUser as SU
+
+            # 1. 提取申请人信息
+            applicant_name = ''
+            applicant_emails = []
+            if approval.applicant_id:
+                user = SU.query.get(approval.applicant_id)
+                if user:
+                    applicant_name = str(user.username).split('/')[0] if '/' in (user.username or '') else (user.username or '')
+                    if user.email:
+                        applicant_emails.append(user.email)
+
+            # 2. 提取物料明细
+            items = approval.get_items() if approval else []
+
+            # 3. 分支逻辑
+            if action == 'approve':
+                # 3.1 通知申请人（审批已通过，明确告知结果）
+                if applicant_emails:
+                    try:
+                        send_borrow_approval_result_notify(
+                            to_emails=applicant_emails,
+                            request_no=approval.request_no,
+                            is_passed=True,
+                            reject_reason='',
+                            applicant_name=applicant_name
+                        )
+                    except Exception as e:
+                        logger.error(f"[Email] 通知申请人（通过）失败: {e}")
+                else:
+                    logger.warning("[Email] 申请人无邮箱，无法发送审批通过通知")
+
+                # 3.2 通知库管（请备货）
+                warehouse_role_codes = ['WAREHOUSE_MGR', 'OUTBOUND']
+                warehouse_emails = BorrowApprovalService._get_emails_by_identifiers(role_codes=warehouse_role_codes)
+
+                if warehouse_emails:
+                    try:
+                        send_borrow_dispatch_notify(
+                            to_emails=warehouse_emails,
+                            request_no=approval.request_no,
+                            applicant_name=applicant_name,
+                            items=items
+                        )
+                    except Exception as e:
+                        logger.error(f"[Email] 通知库管失败: {e}")
+                else:
+                    logger.warning("[Email] 无库管角色邮箱，无法发送备货通知")
+
+            elif action == 'reject':
+                # 3.3 通知申请人（已驳回）
+                if applicant_emails:
+                    try:
+                        send_borrow_approval_result_notify(
+                            to_emails=applicant_emails,
+                            request_no=approval.request_no,
+                            is_passed=False,
+                            reject_reason=approval.reject_reason or '未说明原因',
+                            applicant_name=applicant_name
+                        )
+                    except Exception as e:
+                        logger.error(f"[Email] 通知申请人驳回失败: {e}")
+                else:
+                    logger.warning("[Email] 申请人无邮箱，无法发送驳回通知")
+
+        except Exception as e:
+            import traceback
+            traceback.print_exc()
+            logger.error(f"[Email] 外层发送异常: {e}")
+
+    @staticmethod
+    def can_approve(approval, user_id, user_role):
+        """
+        检查用户是否有权限审批
+        """
+        approvers = approval.get_allowed_approvers()
+
+        if user_role and user_role.upper() == 'SUPER_ADMIN':
+            return True
+
+        for approver in approvers:
+            approver_type = approver.get('type', '')
+            approver_value = approver.get('value', '')
+
+            if approver_type == 'user' and str(approver_value) == str(user_id):
+                return True
+
+            if approver_type == 'role' and approver_value == user_role:
+                return True
+
+        return False
+
+    @staticmethod
+    def approve(request_id, user_id, user_role, action='approve', reject_reason=None):
+        """
+        执行审批操作
+
+        Returns:
+            (success: bool, message: str, approval: BorrowApproval or None)
+        """
+        beijing_tz = pytz.timezone('Asia/Shanghai')
+        current_time = datetime.now(beijing_tz).replace(tzinfo=None)
+
+        approval = BorrowApproval.query.get(request_id)
+        if not approval:
+            return False, "审批单不存在", None
+
+        if approval.status != 0:
+            return False, f"审批单状态已更新，无法重复审批 (当前状态: {approval.status})", None
+
+        if not BorrowApprovalService.can_approve(approval, user_id, user_role):
+            return False, "您没有审批此单的权限", None
+
+        try:
+            if action == 'approve':
+                approval.status = 1  # 已通过
+                approval.actual_approver_id = user_id
+                approval.approved_at = current_time
+            elif action == 'reject':
+                approval.status = 2  # 已驳回
+                approval.reject_reason = reject_reason
+            else:
+                return False, "无效的审批操作", None
+
+            db.session.commit()
+
+            # ★ 审批后，发送邮件通知（静默处理，不阻断主流程）
+            BorrowApprovalService._notify_approval_result(approval, user_id, action)
+
+            return True, "审批成功", approval
+
+        except Exception as e:
+            db.session.rollback()
+            return False, f"审批失败: {str(e)}", None
+
+    @staticmethod
+    def get_request_list(page=1, per_page=10, applicant_id=None, status=None):
+        """
+        获取审批单列表
+        """
+        from sqlalchemy import desc
+
+        query = BorrowApproval.query
+
+        if applicant_id:
+            query = query.filter(BorrowApproval.applicant_id == applicant_id)
+
+        if status is not None:
+            query = query.filter(BorrowApproval.status == status)
+
+        query = query.order_by(desc(BorrowApproval.created_at))
+
+        pagination = query.paginate(page=page, per_page=per_page, error_out=False)
+
+        return {
+            'items': [item.to_dict() for item in pagination.items],
+            'total': pagination.total,
+            'pages': pagination.pages,
+            'current_page': page
+        }
+
+    @staticmethod
+    def get_request_by_id(request_id):
+        """根据ID获取审批单"""
+        return BorrowApproval.query.get(request_id)
+
+    @staticmethod
+    def mark_completed(request_id):
+        """标记审批单为已完成（借库执行完成后调用）"""
+        approval = BorrowApproval.query.get(request_id)
+        if not approval:
+            return False, "审批单不存在", None
+
+        if approval.status != 1:
+            return False, f"只有已通过的审批单才能标记为完成 (当前状态: {approval.status})", None
+
+        try:
+            approval.status = 3  # 已完成
+            db.session.commit()
+            return True, "审批单已完成", approval
+        except Exception as e:
+            db.session.rollback()
+            return False, f"操作失败: {str(e)}", None

inventory-backend/app/services/dify_permission_service.py

@@ -0,0 +1,286 @@
+# app/services/dify_permission_service.py
+"""
+Dify 智能客服权限服务层
+
+职责：
+1. 从 JWT Token / g.dify_user_role 解析用户角色
+2. 根据角色查询 sys_role_permission 表，获取用户拥有的 target_code
+3. AI 专属的动态脱敏策略：
+   - SUPER_ADMIN：无条件放行所有数据
+   - SALES / INBOUND：剔除 price, cost, supplier 等敏感字段
+   - 跨模块越权查询：直接阻断，返回角色专属的错误信息给大模型
+"""
+
+from typing import Optional
+
+from flask import g, current_app
+from flask_jwt_extended import decode_token
+from app.models.system import SysRolePermission
+from app.services.auth_service import AuthService
+from app.utils.constants import UserRole
+from sqlalchemy import func
+
+
+# ==============================================================================
+# 角色敏感字段定义（按角色黑名单）
+# ==============================================================================
+# 每个角色在 AI 对话场景下，禁止查看的字段集合
+ROLE_SENSITIVE_FIELDS = {
+    # 入库员：禁止查看采购相关金额
+    'INBOUND': frozenset([
+        'purchase_price',
+        'cost',
+        'price',
+        'supplier',
+        'supplier_id',
+        'unit_price',
+        'total_price',
+        'order_price',
+        'last_purchase_price',
+        'avg_purchase_price',
+        'supplier_name',
+    ]),
+    # 销售员：禁止查看成本/采购相关数据
+    'SALES': frozenset([
+        'purchase_price',
+        'cost',
+        'unit_cost',
+        'supplier',
+        'supplier_id',
+        'unit_price',
+        'last_purchase_price',
+        'avg_purchase_price',
+        'supplier_name',
+        'stock_cost',
+        'total_cost',
+        'supply_price',
+    ]),
+    # 采购员：禁止查看销售毛利相关数据
+    'PURCHASER': frozenset([
+        'sale_price',
+        'retail_price',
+        'suggested_price',
+        'margin',
+        'profit',
+        'profit_rate',
+    ]),
+}
+
+# 跨模块越权查询拦截配置
+# key: 角色, value: { 尝试查询的字段: 给 AI 的回复 }
+ROLE_FORBIDDEN_QUERIES = {
+    'INBOUND': {
+        'purchase_price': '抱歉，您当前的角色（入库员）无权查看采购金额数据。',
+        'cost': '抱歉，您当前的角色（入库员）无权查看采购成本数据。',
+        'supplier': '抱歉，您当前的角色（入库员）无权查看供应商数据。',
+        'unit_price': '抱歉，您当前的角色（入库员）无权查看采购单价数据。',
+        'last_purchase_price': '抱歉，您当前的角色（入库员）无权查看历史采购价数据。',
+    },
+    'SALES': {
+        'purchase_price': '抱歉，您当前的角色（销售员）无权查看采购成本数据。',
+        'cost': '抱歉，您当前的角色（销售员）无权查看成本数据。',
+        'supplier': '抱歉，您当前的角色（销售员）无权查看供应商信息。',
+        'unit_cost': '抱歉，您当前的角色（销售员）无权查看单位成本数据。',
+        'last_purchase_price': '抱歉，您当前的角色（销售员）无权查看历史采购价数据。',
+    },
+    'PURCHASER': {
+        'sale_price': '抱歉，您当前的角色（采购员）无权查看销售价格数据。',
+        'retail_price': '抱歉，您当前的角色（采购员）无权查看零售价数据。',
+        'margin': '抱歉，您当前的角色（采购员）无权查看毛利数据。',
+        'profit': '抱歉，您当前的角色（采购员）无权查看利润数据。',
+    },
+}
+
+
+class DifyPermissionService:
+    """Dify AI 专属权限服务"""
+
+    @staticmethod
+    def get_user_role(token: str = None) -> str:
+        """
+        从 JWT Token 或 g.dify_user_role 解析用户角色
+        返回标准化的大写角色码（如 'INBOUND', 'SALES', 'SUPER_ADMIN'）
+        """
+        user_role = None
+
+        # 优先从 g 对象获取（由 dify_auth_required 存入）
+        if hasattr(g, 'dify_user_role') and g.dify_user_role:
+            return g.dify_user_role
+
+        # 从传入的 token 解码
+        if token:
+            try:
+                claims = decode_token(token)
+                user_role = claims.get('role')
+            except Exception as e:
+                current_app.logger.warning(f"[DifyPermission] token 解码失败: {e}")
+                return ''
+
+        return (user_role or '').upper()
+
+    @staticmethod
+    def is_super_admin(role: str = None) -> bool:
+        """判断是否为超级管理员"""
+        if not role:
+            role = DifyPermissionService.get_user_role()
+        return role.upper() == UserRole.SUPER_ADMIN if role else False
+
+    @staticmethod
+    def get_role_permissions(role: str = None) -> dict:
+        """
+        获取指定角色的所有权限代码列表
+        内部调用 AuthService.get_user_permissions()
+        """
+        if not role:
+            role = DifyPermissionService.get_user_role()
+        return AuthService.get_user_permissions(role)
+
+    @staticmethod
+    def get_target_codes(role: str = None) -> list:
+        """
+        获取用户角色在 sys_role_permission 表中的所有 target_code
+        包括 menu 和 element 两种类型
+        """
+        if not role:
+            role = DifyPermissionService.get_user_role()
+
+        if not role:
+            return []
+
+        # 超级管理员拥有所有权限
+        if DifyPermissionService.is_super_admin(role):
+            return ['*']
+
+        # 从数据库查询
+        try:
+            perms = SysRolePermission.query.filter(
+                func.upper(SysRolePermission.role_code) == role.upper()
+            ).all()
+            return [p.target_code for p in perms]
+        except Exception as e:
+            current_app.logger.error(f"[DifyPermission] 查询 target_code 失败: {e}")
+            return []
+
+    @staticmethod
+    def has_permission(permission_code: str, role: str = None) -> bool:
+        """
+        检查用户是否拥有指定权限码
+        超级管理员永远返回 True
+        """
+        if DifyPermissionService.is_super_admin(role):
+            return True
+        if not role:
+            role = DifyPermissionService.get_user_role()
+        perms = DifyPermissionService.get_role_permissions(role)
+        all_perms = perms.get('menus', []) + perms.get('elements', [])
+        return permission_code in all_perms
+
+    @staticmethod
+    def check_forbidden_query(query_fields: list, role: str = None) -> dict:
+        """
+        检查用户尝试查询的字段是否越权。
+
+        参数:
+            query_fields: 用户查询涉及的字段名列表（可能包含敏感字段）
+            role: 用户角色（可选，默认从 token/g 解析）
+
+        返回:
+            {
+                'blocked': bool,           # 是否被拦截
+                'message': Optional[str],     # AI 应返回给用户的错误信息（如果有）
+            }
+        """
+        if DifyPermissionService.is_super_admin(role):
+            return {'blocked': False, 'message': None}
+
+        if not role:
+            role = DifyPermissionService.get_user_role()
+
+        if not role:
+            return {
+                'blocked': True,
+                'message': '无法识别您的身份，请重新登录后再试。'
+            }
+
+        # 获取该角色的越权拦截配置
+        forbidden_map = ROLE_FORBIDDEN_QUERIES.get(role.upper(), {})
+        if not forbidden_map:
+            return {'blocked': False, 'message': None}
+
+        # 规范化字段名（小写比较）
+        query_fields_lower = {f.lower() for f in query_fields}
+
+        # 检查是否命中越权字段
+        for forbidden_field, msg in forbidden_map.items():
+            if forbidden_field.lower() in query_fields_lower:
+                current_app.logger.warning(
+                    f"[DifyPermission] 越权查询拦截: role={role}, field={forbidden_field}"
+                )
+                return {'blocked': True, 'message': msg}
+
+        return {'blocked': False, 'message': None}
+
+    @staticmethod
+    def filter_sensitive_fields(data: dict, role: str = None) -> dict:
+        """
+        根据用户角色对字典数据进行敏感字段脱敏。
+
+        - SUPER_ADMIN：不过滤，返回原数据
+        - SALES / INBOUND / PURCHASER：按角色黑名单剔除敏感字段
+
+        参数:
+            data: 原始数据字典
+            role: 用户角色
+
+        返回:
+            脱敏后的数据字典（敏感字段被置为 None）
+        """
+        if DifyPermissionService.is_super_admin(role):
+            return data
+
+        if not role:
+            role = DifyPermissionService.get_user_role()
+
+        if not role:
+            return data
+
+        # 获取该角色的敏感字段黑名单
+        sensitive = ROLE_SENSITIVE_FIELDS.get(role.upper(), frozenset())
+
+        # 如果没有敏感字段定义，不过滤
+        if not sensitive:
+            return data
+
+        # 深拷贝，避免修改原数据
+        import copy
+        result = copy.deepcopy(data)
+
+        # 将敏感字段置为 None
+        for field in sensitive:
+            if field in result:
+                result[field] = None
+
+        # 如果有 children 数组（子件列表），递归脱敏
+        if isinstance(result.get('children'), list):
+            result['children'] = [
+                DifyPermissionService.filter_sensitive_fields(child, role)
+                for child in result['children']
+            ]
+
+        return result
+
+    @staticmethod
+    def filter_sensitive_fields_in_list(data_list: list, role: str = None) -> list:
+        """
+        对列表数据批量应用敏感字段脱敏
+        """
+        if DifyPermissionService.is_super_admin(role):
+            return data_list
+
+        if not role:
+            role = DifyPermissionService.get_user_role()
+
+        return [
+            DifyPermissionService.filter_sensitive_fields(item, role)
+            for item in data_list
+        ]

inventory-backend/app/services/export_service/excel_task.py

@@ -0,0 +1,360 @@
+"""
+app/services/export_service/excel_task.py
+异步导出核心任务逻辑
+
+Redis 中的任务状态键格式：export:task:{task_id}
+TTL = 1 小时（3600 秒），超时自动清理
+
+状态流转：
+  提交任务  →  status=processing, progress=0
+  写入中    →  status=processing, progress=N  (10~90)
+  完成      →  status=completed,  progress=100, url=下载路径
+  失败      →  status=failed,     error=具体原因
+"""
+
+import os
+import uuid
+import json
+import time
+import logging
+from threading import Thread
+from datetime import datetime
+
+from typing import Optional
+
+from openpyxl import Workbook
+from openpyxl.styles import Font, PatternFill, Alignment, Border, Side
+
+logger = logging.getLogger(__name__)
+
+# 导出文件存放根目录（相对于项目根目录）
+EXPORT_DIR = os.path.join(
+    os.path.dirname(os.path.dirname(os.path.dirname(os.path.abspath(__file__)))),
+    'uploads', 'exports'
+)
+
+# Redis 键前缀 + TTL
+TASK_KEY_PREFIX = 'export:task:'
+TASK_TTL = 3600  # 1小时
+
+
+def _redis():
+    """获取 Redis 客户端，带容错保护。"""
+    try:
+        from app.extensions import redis_client
+        return redis_client
+    except Exception:
+        return None
+
+
+def _update_task(task_id: str, **kwargs):
+    """
+    原子更新 Redis 中的任务状态。
+
+    使用 setex 分两步：
+      1. 保存最新状态 JSON
+      2. 重置 TTL 为 1 小时
+
+    即使 Redis 写入失败也不阻断业务流程。
+    """
+    client = _redis()
+    if not client:
+        return
+    key = f"{TASK_KEY_PREFIX}{task_id}"
+    try:
+        client.setex(key, TASK_TTL, json.dumps(kwargs, ensure_ascii=False))
+        logger.debug(f"[Export] 更新任务状态 task_id={task_id} → {kwargs}")
+    except Exception as e:
+        logger.warning(f"[Export] Redis 更新任务状态失败: task_id={task_id}, err={e}")
+
+
+# =============================================================================
+# 对外入口：提交导出任务（启动后台线程）
+# =============================================================================
+
+def submit_export_task(filters: dict) -> str:
+    """
+    接收前端过滤参数，生成 task_id，写入 Redis 初始状态，
+    然后启动后台线程执行 Excel 生成。
+
+    参数:
+        filters: dict，任意查询参数（category, keyword, status 等）
+
+    返回:
+        str: task_id（UUID），前端用此 ID 轮询进度
+    """
+    task_id = str(uuid.uuid4())
+
+    # 写入 Redis：初始状态
+    _update_task(task_id, status='processing', progress=0, url='', error='')
+
+    # 立即启动后台线程执行（daemon=True 使主进程退出时自动终止）
+    t = Thread(
+        target=generate_excel_task,
+        args=(task_id, filters),
+        daemon=True
+    )
+    t.start()
+    logger.info(f"[Export] 任务已提交 task_id={task_id}, filters={filters}")
+
+    return task_id
+
+
+# =============================================================================
+# 后台任务：生成 Excel 文件
+# =============================================================================
+
+def generate_excel_task(task_id: str, filters: dict):
+    """
+    在后台线程中执行 Excel 生成。
+
+    流程:
+      1. 更新进度 10% → 开始查询
+      2. 根据 filters 查询数据库（可复用现有 Service）
+      3. 用 openpyxl 构建 Workbook，写入数据
+      4. 保存到 uploads/exports/{task_id}.xlsx
+      5. 更新进度 100% + status=completed + url
+
+    任何异常被捕获，不会导致主进程崩溃。
+    """
+    logger.info(f"[Export] 任务开始 task_id={task_id}")
+    try:
+        # ===== 阶段1：查询数据（模拟 + 实际） =====
+        _update_task(task_id, status='processing', progress=10)
+
+        # 延迟导入：在子线程中加载 App Context，避免主线程时序问题
+        from flask import current_app
+        from app.extensions import db
+        from app.models.inbound.buy import StockBuy
+        from app.models.inbound.semi import StockSemi
+        from app.models.inbound.product import StockProduct
+
+        records = _query_inventory(filters)
+
+        # ===== 阶段2：写入 Excel =====
+        _update_task(task_id, status='processing', progress=40)
+
+        filename = f"{task_id}.xlsx"
+        filepath = os.path.join(EXPORT_DIR, filename)
+        _write_excel(filepath, records, task_id)
+
+        # ===== 阶段3：完成 =====
+        _update_task(
+            task_id,
+            status='completed',
+            progress=100,
+            url=f"/api/v1/export/download/{task_id}",
+            error=''
+        )
+        logger.info(f"[Export] 任务完成 task_id={task_id}, file={filename}")
+
+    except Exception as e:
+        logger.error(f"[Export] 任务失败 task_id={task_id}, err={e}")
+        _update_task(task_id, status='failed', error=str(e))
+
+
+# =============================================================================
+# 查询层：根据 filters 聚合库存数据
+# =============================================================================
+
+def _query_inventory(filters: dict) -> list:
+    """
+    根据过滤条件查询三张库存表，返回标准化记录列表。
+    进度更新策略：在主线程（后台线程）内，每处理 1000 条回调一次 Redis。
+    """
+    from app.extensions import db
+    from app.models.inbound.buy import StockBuy
+    from app.models.inbound.semi import StockSemi
+    from app.models.inbound.product import StockProduct
+    from app.models.base import MaterialBase
+
+    results = []
+
+    # ---------- 采购件 ----------
+    query = db.session.query(
+        MaterialBase.name.label('material_name'),
+        MaterialBase.spec_model.label('spec_model'),
+        StockBuy.barcode,
+        StockBuy.sku,
+        StockBuy.status,
+        StockBuy.warehouse_location,
+        StockBuy.available_quantity,
+        StockBuy.supplier_name,
+        StockBuy.in_date,
+    ).join(MaterialBase, StockBuy.base_id == MaterialBase.id)
+
+    if filters.get('keyword'):
+        kw = f"%{filters['keyword']}%"
+        query = query.filter(
+            (MaterialBase.name.ilike(kw)) |
+            (MaterialBase.spec_model.ilike(kw)) |
+            (StockBuy.barcode.ilike(kw)) |
+            (StockBuy.sku.ilike(kw))
+        )
+    if filters.get('status'):
+        query = query.filter(StockBuy.status == filters['status'])
+
+    all_rows = query.order_by(StockBuy.id.desc()).limit(10000).all()
+    total = len(all_rows)
+
+    for idx, row in enumerate(all_rows):
+        results.append({
+            'type': '采购件',
+            'material_name': row.material_name or '',
+            'spec_model': row.spec_model or '',
+            'barcode': row.barcode or '',
+            'sku': row.sku or '',
+            'status': row.status or '',
+            'warehouse_location': row.warehouse_location or '',
+            'available_quantity': float(row.available_quantity or 0),
+            'supplier_name': row.supplier_name or '',
+            'in_date': row.in_date.strftime('%Y-%m-%d') if row.in_date else '',
+        })
+
+        # 每 1000 条更新一次 Redis 进度（40%~80% 之间）
+        if idx > 0 and idx % 1000 == 0:
+            pct = 40 + int(40 * idx / total) if total else 80
+            # 注意：这里的 task_id 由外层 generate_excel_task 持有，
+            # 进度更新在 _write_excel 中进行，此处仅做占位说明
+            logger.debug(f"[Export] 采购件已处理 {idx}/{total} 条, 估算进度 {pct}%")
+
+    # ---------- 半成品 + 成品（可同理扩展） ----------
+
+    return results
+
+
+# =============================================================================
+# Excel 写入层：使用 openpyxl 构建 .xlsx 文件
+# =============================================================================
+
+def _write_excel(filepath: str, records: list, task_id: str):
+    """
+    使用 openpyxl 将记录列表写入 Excel 文件。
+    包含表头样式（加粗、背景色）、自适应列宽、边框。
+
+    参数:
+        filepath: 完整保存路径（含 .xlsx 后缀）
+        records: 标准化后的数据列表（dict）
+        task_id: 用于增量进度更新
+    """
+    os.makedirs(os.path.dirname(filepath), exist_ok=True)
+
+    wb = Workbook()
+    ws = wb.active
+    ws.title = "库存导出"
+
+    if not records:
+        ws.append(['暂无数据'])
+        wb.save(filepath)
+        return
+
+    # ---------- 表头 ----------
+    headers = [
+        '类型', '物料名称', '规格型号', '条码', 'SKU',
+        '状态', '库位', '可用数量', '供应商', '入库日期'
+    ]
+    ws.append(headers)
+
+    # 表头样式：深蓝色背景 + 白色加粗字体
+    header_fill = PatternFill("solid", fgColor="1F4E79")
+    header_font = Font(bold=True, color="FFFFFF", size=11)
+    header_align = Alignment(horizontal='center', vertical='center', wrap_text=True)
+    thin = Side(style='thin', color='BFBFBF')
+    border = Border(left=thin, right=thin, top=thin, bottom=thin)
+
+    for col_idx, _ in enumerate(headers, start=1):
+        cell = ws.cell(row=1, column=col_idx)
+        cell.fill = header_fill
+        cell.font = header_font
+        cell.alignment = header_align
+        cell.border = border
+
+    # ---------- 数据行 ----------
+    even_fill = PatternFill("solid", fgColor="DEEAF1")  # 浅蓝隔行底色
+    data_align = Alignment(horizontal='left', vertical='center')
+    data_font = Font(size=10)
+
+    total = len(records)
+    for idx, rec in enumerate(records):
+        ws.append([
+            rec.get('type', ''),
+            rec.get('material_name', ''),
+            rec.get('spec_model', ''),
+            rec.get('barcode', ''),
+            rec.get('sku', ''),
+            rec.get('status', ''),
+            rec.get('warehouse_location', ''),
+            rec.get('available_quantity', 0),
+            rec.get('supplier_name', ''),
+            rec.get('in_date', ''),
+        ])
+
+        # 每 1000 行更新一次 Redis 进度（80%~95%）
+        row_num = idx + 2
+        for col_idx in range(1, len(headers) + 1):
+            cell = ws.cell(row=row_num, column=col_idx)
+            cell.alignment = data_align
+            cell.font = data_font
+            cell.border = border
+            if idx % 2 == 1:
+                cell.fill = even_fill
+
+        if idx > 0 and idx % 1000 == 0:
+            pct = 80 + int(15 * idx / total)
+            _update_task(task_id, status='processing', progress=min(pct, 95))
+
+    # ---------- 自适应列宽 ----------
+    for col in ws.columns:
+        max_len = 0
+        col_letter = col[0].column_letter
+        for cell in col:
+            if cell.value:
+                max_len = max(max_len, len(str(cell.value)))
+        ws.column_dimensions[col_letter].width = min(max_len + 4, 40)
+
+    # ---------- 冻结首行 ----------
+    ws.freeze_panes = 'A2'
+
+    # ---------- 保存 ----------
+    wb.save(filepath)
+    logger.info(f"[Export] Excel 已保存: {filepath}, 共 {total} 行")
+
+
+# =============================================================================
+# 查询任务状态（供 API 层调用）
+# =============================================================================
+
+def get_task_status(task_id: str) -> dict:
+    """
+    从 Redis 读取任务状态字典。
+    若任务不存在或 Redis 不可用，返回默认 pending 状态。
+    """
+    client = _redis()
+    if not client:
+        return {'status': 'unknown', 'progress': 0, 'url': '', 'error': ''}
+
+    key = f"{TASK_KEY_PREFIX}{task_id}"
+    try:
+        raw = client.get(key)
+        if raw:
+            return json.loads(raw)
+        return {'status': 'not_found', 'progress': 0, 'url': '', 'error': ''}
+    except Exception as e:
+        logger.warning(f"[Export] 读取任务状态失败: task_id={task_id}, err={e}")
+        return {'status': 'unknown', 'progress': 0, 'url': '', 'error': ''}
+
+
+# =============================================================================
+# 获取导出文件路径（供下载接口调用）
+# =============================================================================
+
+def get_export_filepath(task_id: str) -> Optional[str]:
+    """
+    根据 task_id 返回已生成文件的完整路径。
+    未完成或不存在返回 None。
+    """
+    filename = f"{task_id}.xlsx"
+    filepath = os.path.join(EXPORT_DIR, filename)
+    if os.path.exists(filepath):
+        return filepath
+    return None

inventory-backend/app/services/inbound/base_service.py

@@ -12,6 +12,9 @@ import traceback
 import json
 import io
 import datetime
+import numpy as np
+from app.utils.ai_vision import extract_and_embed
+from app.services.image_embedding_service import ImageEmbeddingService
 # 需要 pip install openpyxl
 from openpyxl import Workbook
 from openpyxl.styles import Font, Alignment, Border, Side, PatternFill
@@ -249,7 +252,8 @@ class MaterialBaseService:
 
                 category = filters.get('category')
                 if category is not None and category != '':
-                    query = query.filter(MaterialBase.category.ilike(category.strip()))
+                    # 在末尾拼接 '%' 实现前缀模糊匹配
+                    query = query.filter(MaterialBase.category.ilike(f"{category.strip()}%"))
 
                 type_val = filters.get('type')
                 if type_val is not None and type_val != '':
@@ -524,6 +528,29 @@ class MaterialBaseService:
             traceback.print_exc()
             return {"categories": [], "types": [], "companies": []}
 
+    @staticmethod
+    def get_distinct_units():
+        """
+        获取所有已存在且非空的计量单位（去重 + 排序）。
+        用于前端"基础信息"新增/编辑弹窗的"计量单位"下拉历史记录。
+
+        SQL 语义:
+            SELECT DISTINCT unit FROM material_base
+            WHERE unit IS NOT NULL AND unit != ''
+            ORDER BY unit ASC
+        """
+        try:
+            rows = db.session.query(MaterialBase.unit) \
+                .filter(MaterialBase.unit.isnot(None), MaterialBase.unit != '') \
+                .distinct() \
+                .all()
+            sorted_units = sorted([u[0] for u in rows if u[0]])
+            return sorted_units
+        except Exception as e:
+            traceback.print_exc()
+            print(f"查询计量单位字典失败: {e}")
+            return []
+
     @staticmethod
     def create_material(data):
         """新增基础信息"""
@@ -555,9 +582,23 @@ class MaterialBaseService:
                 product_image=json.dumps(data.get('generalImage', [])),
                 is_enabled=is_enabled_val
             )
-
             db.session.add(new_material)
+            db.session.flush()  # 获取 new_material.id
+
+            # 先提交主事务，图片向量异步后台提取
             db.session.commit()
+
+            image_list = data.get('generalImage', [])
+            if isinstance(image_list, list) and image_list:
+                from flask import current_app
+                from app.utils.executor import run_embedding_task
+                run_embedding_task(
+                    ImageEmbeddingService.save_embeddings_background,
+                    current_app._get_current_object(),
+                    ImageEmbeddingService.MODULE_MATERIAL_BASE,
+                    new_material.id,
+                    image_list
+                )
             return new_material
 
         except Exception as e:
@@ -585,7 +626,24 @@ class MaterialBaseService:
             if 'generalManual' in data:
                 material.manual_link = json.dumps(data['generalManual'])
             if 'generalImage' in data:
-                material.product_image = json.dumps(data['generalImage'])
+                new_photo_list = data['generalImage']
+                material.product_image = json.dumps(new_photo_list)
+                # 立即触发异步向量提取，不阻塞主事务提交
+                if isinstance(new_photo_list, list) and new_photo_list:
+                    from flask import current_app
+                    from app.utils.executor import run_embedding_task
+                    run_embedding_task(
+                        ImageEmbeddingService.save_embeddings_background,
+                        current_app._get_current_object(),
+                        ImageEmbeddingService.MODULE_MATERIAL_BASE,
+                        material.id,
+                        new_photo_list
+                    )
+            else:
+                material.product_image = None
+                ImageEmbeddingService.delete_embeddings(
+                    ImageEmbeddingService.MODULE_MATERIAL_BASE, material.id
+                )
 
             # 【核心修改】：兼容前端传来的布尔值
             if 'isEnabled' in data:
@@ -593,6 +651,31 @@ class MaterialBaseService:
                 material.is_enabled = str(raw_enabled).lower() in ['1', 'true', 'yes', 't']
 
             db.session.commit()
+
+            # ★★★ 级联缓存失效：物料信息变更后，清除所有涉及该物料的 BOM 树缓存
+            try:
+                from app.models.bom import BomTable
+                from app.extensions import redis_client
+
+                # 查出所有以该物料为父件或子件的 bom_no（去重）
+                affected = db.session.query(BomTable.bom_no).filter(
+                    or_(BomTable.parent_id == m_id, BomTable.child_id == m_id)
+                ).distinct().all()
+                affected_bom_nos = [r[0] for r in affected]
+
+                if affected_bom_nos:
+                    for bom_no in affected_bom_nos:
+                        # 清除最新版缓存
+                        redis_client.delete(f'bom:tree:{bom_no}')
+                        # 清除所有版本缓存（通配符）
+                        for key in redis_client.scan_iter(f'bom:tree:{bom_no}:*'):
+                            redis_client.delete(key)
+                    print(f"🔁 物料 {m_id} 变更，已级联清除 {len(affected_bom_nos)} 个 BOM 缓存: {affected_bom_nos}")
+
+            except Exception as cache_err:
+                # Redis 报错不阻断业务返回
+                print(f"⚠️ BOM 缓存级联清除失败（不阻断业务）: {cache_err}")
+
             return material
 
         except Exception as e:
@@ -627,6 +710,10 @@ class MaterialBaseService:
                     f"请先清理相关库存或仅‘禁用’此条目。"
                 )
 
+            # 删除时同步清理向量记录
+            ImageEmbeddingService.delete_embeddings(
+                ImageEmbeddingService.MODULE_MATERIAL_BASE, material.id
+            )
             db.session.delete(material)
             db.session.commit()
             return material_name
@@ -687,7 +774,8 @@ class MaterialBaseService:
 
                 category = filters.get('category')
                 if category is not None and category != '':
-                    filter_conditions.append(MaterialBase.category.ilike(category.strip()))
+                    # 同样在末尾拼接 '%'
+                    filter_conditions.append(MaterialBase.category.ilike(f"{category.strip()}%"))
                 type_val = filters.get('type')
                 if type_val is not None and type_val != '':
                     filter_conditions.append(MaterialBase.material_type.ilike(type_val.strip()))
@@ -1023,14 +1111,15 @@ class MaterialBaseService:
     @staticmethod
     def get_latest_specs():
         """
-        获取所有规格型号的最大连号，按连续区间分组返回
+        获取所有规格型号的分组统计，按规则聚合后返回
         - 前缀统一大写处理
-        - 只有数字完全连续（N, N+1, N+2...）才认定为同一组
-        - 数字不连续时断开，形成新组
-        - 按每组数量降序排列
-        - 返回每个连续区间的最大值
+        - 匹配模式：(前缀)(单数字二级分类位)(纯数字部分)，如 OPT12046 -> OPT, 1, 2046
+        - OPT 系列：使用 前缀+二级分类位 作为分组 Key，如 OPT1, OPT2
+        - 其他前缀：直接使用前缀作为分组 Key
+        - 返回每个分组的数量、最大号、完整规格名
         """
         import re
+        from collections import defaultdict
 
         # 1. 查询所有不为空的规格型号
         specs = MaterialBase.query.filter(
@@ -1038,8 +1127,8 @@ class MaterialBaseService:
             MaterialBase.spec_model != ''
         ).all()
 
-        # 2. 解析并收集所有有效的 (prefix, num, original_spec)
-        parsed = []
+        # 2. 按分组收集所有数字
+        groups = defaultdict(list)
 
         for material in specs:
             spec = material.spec_model
@@ -1047,72 +1136,31 @@ class MaterialBaseService:
                 continue
 
             base_spec = spec.split('/')[0]
-
-            match = re.match(r'^([A-Za-z]+)(\d+)$', base_spec)
+            match = re.match(r'^([A-Za-z]+)(\d)(\d+)$', base_spec)
             if not match:
                 continue
 
-            prefix, num_str = match.groups()
+            prefix, sub_cat, num_str = match.groups()
             prefix = prefix.upper()
             num = int(num_str)
 
-            parsed.append((prefix, num, spec))
+            # OPT 系列使用 前缀+单数字二级分类 作为 Key
+            key = f"{prefix}{sub_cat}" if prefix == 'OPT' else prefix
+            groups[key].append((num, spec))
 
-        # 3. 先按 prefix 升序，再按 num 升序排序
-        parsed.sort(key=lambda x: (x[0], x[1]))
-
-        # 4. 遍历切分连续区间
-        # 核心逻辑：当 current_num != prev_num + 1 时，断开形成新组
-        intervals = []
-        current_prefix = None
-        current_start = None
-        current_end = None
-        current_last_spec = None
-
-        for prefix, num, spec in parsed:
-            if current_prefix is None:
-                current_prefix = prefix
-                current_start = num
-                current_end = num
-                current_last_spec = spec
-            elif prefix == current_prefix and num == current_end + 1:
-                current_end = num
-                current_last_spec = spec
-            else:
-                intervals.append({
-                    'prefix': current_prefix,
-                    'start': current_start,
-                    'end': current_end,
-                    'count': current_end - current_start + 1,
-                    'latest': current_last_spec
-                })
-                current_prefix = prefix
-                current_start = num
-                current_end = num
-                current_last_spec = spec
-
-        if current_prefix is not None:
-            intervals.append({
-                'prefix': current_prefix,
-                'start': current_start,
-                'end': current_end,
-                'count': current_end - current_start + 1,
-                'latest': current_last_spec
-            })
-
-        # 5. 按每组数量降序排列，再按前缀升序
-        intervals.sort(key=lambda x: (-x['count'], x['prefix']))
-
-        # 6. 构建返回结果
+        # 3. 生成展示用的统计数据
         result = []
-        for item in intervals:
-            prefix = item['prefix']
-            start = item['start']
-            end = item['end']
+        for key, items in groups.items():
+            sorted_items = sorted(items, key=lambda x: x[0])
+            max_num, max_spec = sorted_items[-1]
             result.append({
-                "group": f"{prefix}({start}-{end})",
-                "count": item['count'],
-                "latest": item['latest']
+                'group': key,
+                'count': len(sorted_items),
+                'latest': max_spec,
+                'max_num': max_num
             })
 
+        # 4. 按数量降序，再按分组名升序排列
+        result.sort(key=lambda x: (-x['count'], x['group']))
+
         return result

inventory-backend/app/services/inbound/buy_service.py

@@ -9,6 +9,9 @@ from sqlalchemy import or_, func, text, and_
 from sqlalchemy.exc import IntegrityError
 import traceback
 import json
+import numpy as np
+from app.utils.ai_vision import extract_and_embed
+from app.services.image_embedding_service import ImageEmbeddingService
 
 
 class BuyInboundService:
@@ -97,6 +100,12 @@ class BuyInboundService:
             if not material: raise ValueError("所选物料不存在")
             if not material.is_enabled: raise ValueError(f"物料【{material.name}】已停用")
 
+            # ============================================================
+            # 物料类别隔离校验：采购入库禁止【半成品】和【成品】（黑名单拦截制）
+            # ============================================================
+            if material.category and ('/半成品' in material.category or '/成品' in material.category):
+                raise ValueError(f"物料【{material.name}】属于【{material.category}】，【半成品】和【成品】不允许直接采购入库！")
+
             # ============================================================
             # 强制质检校验：如果物料标记为强制质检，则必须提供到检状态和检测报告
             # ============================================================
@@ -178,7 +187,22 @@ class BuyInboundService:
                 inspection_report=json.dumps(data.get('inspection_report', []))
             )
             db.session.add(new_stock)
+            db.session.flush()  # 获取 new_stock.id
+
+            # 先提交主事务（入库单必须落盘），图片向量异步后台提取
             db.session.commit()
+
+            photo_list = data.get('arrival_photo', [])
+            if isinstance(photo_list, list) and photo_list:
+                from flask import current_app
+                from app.utils.executor import run_embedding_task
+                run_embedding_task(
+                    ImageEmbeddingService.save_embeddings_background,
+                    current_app._get_current_object(),
+                    ImageEmbeddingService.MODULE_STOCK_BUY,
+                    new_stock.id,
+                    photo_list
+                )
             return new_stock
         except Exception as e:
             db.session.rollback()
@@ -240,7 +264,26 @@ class BuyInboundService:
             for k, v in field_mapping.items():
                 if k in data: setattr(stock, v, data[k])
 
-            if 'arrival_photo' in data: stock.arrival_photo = json.dumps(data['arrival_photo'])
+            if 'arrival_photo' in data:
+                new_photo_list = data['arrival_photo']
+                stock.arrival_photo = json.dumps(new_photo_list)
+                # 立即触发异步向量提取，不阻塞主事务提交
+                if isinstance(new_photo_list, list) and new_photo_list:
+                    from flask import current_app
+                    from app.utils.executor import run_embedding_task
+                    run_embedding_task(
+                        ImageEmbeddingService.save_embeddings_background,
+                        current_app._get_current_object(),
+                        ImageEmbeddingService.MODULE_STOCK_BUY,
+                        stock.id,
+                        new_photo_list
+                    )
+            else:
+                stock.arrival_photo = None
+                ImageEmbeddingService.delete_embeddings(
+                    ImageEmbeddingService.MODULE_STOCK_BUY, stock.id
+                )
+
             if 'inspection_report' in data: stock.inspection_report = json.dumps(data['inspection_report'])
 
             # 更新税率
@@ -283,8 +326,11 @@ class BuyInboundService:
         try:
             stock = StockBuy.query.get(stock_id)
             if not stock: raise ValueError("记录不存在")
-            # 提前获取物料名称用于审计日志（通过外键关系 base.name 获取）
             material_name = stock.base.name if stock.base else '未知物料'
+            # 删除时同步清理向量记录
+            ImageEmbeddingService.delete_embeddings(
+                ImageEmbeddingService.MODULE_STOCK_BUY, stock.id
+            )
             db.session.delete(stock)
             db.session.commit()
             return material_name
@@ -342,7 +388,8 @@ class BuyInboundService:
 
             # 2. 类别独立搜索
             if category and category.strip():
-                query = query.filter(MaterialBase.category == category.strip())
+                # 级联选择器：中间节点用前缀匹配，与 base_service.get_list 行为一致
+                query = query.filter(MaterialBase.category.ilike(f"{category.strip()}%"))
 
             # 3. 类型独立搜索
             if material_type and material_type.strip():

inventory-backend/app/services/inbound/product_service.py

@@ -9,6 +9,9 @@ from sqlalchemy import or_, func, text, and_
 from sqlalchemy.exc import IntegrityError
 import traceback
 import json
+import numpy as np
+from app.utils.ai_vision import extract_and_embed
+from app.services.image_embedding_service import ImageEmbeddingService
 
 
 class ProductInboundService:
@@ -63,7 +66,7 @@ class ProductInboundService:
             return {"items": [], "total": 0, "page": 1, "has_next": False}
 
     @staticmethod
-    def search_bom_options(keyword):
+    def search_bom_options(keyword, parent_spec=None):
         from app.models.bom import BomTable
         try:
             query = db.session.query(
@@ -76,6 +79,9 @@ class ProductInboundService:
             if hasattr(BomTable, 'is_enabled'):
                 query = query.filter(BomTable.is_enabled == True)
 
+            if parent_spec:
+                query = query.filter(MaterialBase.spec_model == parent_spec)
+
             if keyword:
                 kw = f'%{keyword}%'
                 query = query.filter(
@@ -109,6 +115,12 @@ class ProductInboundService:
             if not material.is_enabled:
                 raise ValueError(f"物料【{material.name}】已停用，无法办理新入库。")
 
+            # ============================================================
+            # 物料类别隔离校验：成品入库必须为【成品】类目（精确白名单准入制）
+            # ============================================================
+            if not material.category or '/成品' not in material.category:
+                raise ValueError(f"物料【{material.name}】属于【{material.category or '未分类'}】，只有【成品】才允许进行成品入库！")
+
             ProductInboundService._check_unique(
                 serial_number=data.get('serial_number')
             )
@@ -184,7 +196,21 @@ class ProductInboundService:
                 order_id=data.get('order_id')
             )
             db.session.add(new_stock)
+            db.session.flush()  # 获取 new_stock.id
+
+            # 先提交主事务，图片向量异步后台提取
             db.session.commit()
+
+            if isinstance(photo_list, list) and photo_list:
+                from flask import current_app
+                from app.utils.executor import run_embedding_task
+                run_embedding_task(
+                    ImageEmbeddingService.save_embeddings_background,
+                    current_app._get_current_object(),
+                    ImageEmbeddingService.MODULE_STOCK_PRODUCT,
+                    new_stock.id,
+                    photo_list
+                )
             return new_stock
         except Exception as e:
             db.session.rollback()
@@ -213,8 +239,24 @@ class ProductInboundService:
                 if f in data: setattr(stock, f, data[f])
 
             if 'product_photo' in data:
-                imgs = data['product_photo']
-                if isinstance(imgs, list): stock.product_photo = json.dumps(imgs)
+                new_photo_list = data['product_photo']
+                stock.product_photo = json.dumps(new_photo_list)
+                # 立即触发异步向量提取，不阻塞主事务提交
+                if isinstance(new_photo_list, list) and new_photo_list:
+                    from flask import current_app
+                    from app.utils.executor import run_embedding_task
+                    run_embedding_task(
+                        ImageEmbeddingService.save_embeddings_background,
+                        current_app._get_current_object(),
+                        ImageEmbeddingService.MODULE_STOCK_PRODUCT,
+                        stock.id,
+                        new_photo_list
+                    )
+            else:
+                stock.product_photo = None
+                ImageEmbeddingService.delete_embeddings(
+                    ImageEmbeddingService.MODULE_STOCK_PRODUCT, stock.id
+                )
             if 'quality_report_link' in data:
                 imgs = data['quality_report_link']
                 if isinstance(imgs, list): stock.quality_report_link = json.dumps(imgs)
@@ -255,8 +297,11 @@ class ProductInboundService:
         try:
             stock = StockProduct.query.get(stock_id)
             if stock:
-                # 提前获取物料名称用于审计日志（通过外键关系 base.name 获取）
                 material_name = stock.base.name if stock.base else '未知物料'
+                # 删除时同步清理向量记录
+                ImageEmbeddingService.delete_embeddings(
+                    ImageEmbeddingService.MODULE_STOCK_PRODUCT, stock.id
+                )
                 db.session.delete(stock)
                 db.session.commit()
                 return material_name
@@ -313,7 +358,8 @@ class ProductInboundService:
                 sku_str = f'%{sku.strip()}%'
                 query = query.filter(StockProduct.sku.ilike(sku_str))
             if category and category.strip():
-                query = query.filter(MaterialBase.category == category.strip())
+                # 级联选择器：中间节点用前缀匹配，与 base_service.get_list 行为一致
+                query = query.filter(MaterialBase.category.ilike(f"{category.strip()}%"))
             if material_type and material_type.strip():
                 query = query.filter(MaterialBase.material_type == material_type.strip())
 

inventory-backend/app/services/inbound/semi_service.py

@@ -9,6 +9,9 @@ from sqlalchemy import or_, func, text, and_
 from sqlalchemy.exc import IntegrityError
 import traceback
 import json
+import numpy as np
+from app.utils.ai_vision import extract_and_embed
+from app.services.image_embedding_service import ImageEmbeddingService
 
 
 class SemiInboundService:
@@ -68,7 +71,7 @@ class SemiInboundService:
             return {"items": [], "total": 0, "page": 1, "has_next": False}
 
     @staticmethod
-    def search_bom_options(keyword):
+    def search_bom_options(keyword, parent_spec=None):
         from app.models.bom import BomTable
         try:
             query = db.session.query(
@@ -81,6 +84,9 @@ class SemiInboundService:
             if hasattr(BomTable, 'is_enabled'):
                 query = query.filter(BomTable.is_enabled == True)
 
+            if parent_spec:
+                query = query.filter(MaterialBase.spec_model == parent_spec)
+
             if keyword:
                 kw = f'%{keyword}%'
                 query = query.filter(
@@ -116,6 +122,12 @@ class SemiInboundService:
             if not material.is_enabled:
                 raise ValueError(f"物料【{material.name}】已停用，无法办理新入库。")
 
+            # ============================================================
+            # 物料类别隔离校验：半成品入库必须为【半成品】类目（精确白名单准入制）
+            # ============================================================
+            if not material.category or '/半成品' not in material.category:
+                raise ValueError(f"物料【{material.name}】属于【{material.category or '未分类'}】，只有【半成品】才允许进行半成品入库！")
+
             SemiInboundService._check_unique(
                 base_id=base_id,
                 serial_number=data.get('serial_number'),
@@ -221,7 +233,21 @@ class SemiInboundService:
                 remark=data.get('remark')
             )
             db.session.add(new_stock)
+            db.session.flush()  # 获取 new_stock.id
+
+            # 先提交主事务，图片向量异步后台提取
             db.session.commit()
+
+            if isinstance(arrival_list, list) and arrival_list:
+                from flask import current_app
+                from app.utils.executor import run_embedding_task
+                run_embedding_task(
+                    ImageEmbeddingService.save_embeddings_background,
+                    current_app._get_current_object(),
+                    ImageEmbeddingService.MODULE_STOCK_SEMI,
+                    new_stock.id,
+                    arrival_list
+                )
             return new_stock
         except Exception as e:
             db.session.rollback()
@@ -268,9 +294,24 @@ class SemiInboundService:
                     setattr(stock, db_attr, data[frontend_key])
 
             if 'arrival_photo' in data:
-                imgs = data['arrival_photo']
-                if isinstance(imgs, list):
-                    stock.arrival_photo = json.dumps(imgs)
+                new_photo_list = data['arrival_photo']
+                stock.arrival_photo = json.dumps(new_photo_list)
+                # 立即触发异步向量提取，不阻塞主事务提交
+                if isinstance(new_photo_list, list) and new_photo_list:
+                    from flask import current_app
+                    from app.utils.executor import run_embedding_task
+                    run_embedding_task(
+                        ImageEmbeddingService.save_embeddings_background,
+                        current_app._get_current_object(),
+                        ImageEmbeddingService.MODULE_STOCK_SEMI,
+                        stock.id,
+                        new_photo_list
+                    )
+            else:
+                stock.arrival_photo = None
+                ImageEmbeddingService.delete_embeddings(
+                    ImageEmbeddingService.MODULE_STOCK_SEMI, stock.id
+                )
             if 'quality_report_link' in data:
                 imgs = data['quality_report_link']
                 if isinstance(imgs, list):
@@ -344,8 +385,11 @@ class SemiInboundService:
             stock = StockSemi.query.get(stock_id)
             if not stock:
                 raise ValueError("记录不存在")
-            # 提前获取物料名称用于审计日志（通过外键关系 base.name 获取）
             material_name = stock.base.name if stock.base else '未知物料'
+            # 删除时同步清理向量记录
+            ImageEmbeddingService.delete_embeddings(
+                ImageEmbeddingService.MODULE_STOCK_SEMI, stock.id
+            )
             db.session.delete(stock)
             db.session.commit()
             return material_name
@@ -404,7 +448,8 @@ class SemiInboundService:
                 sku_str = f'%{sku.strip()}%'
                 query = query.filter(StockSemi.sku.ilike(sku_str))
             if category and category.strip():
-                query = query.filter(MaterialBase.category == category.strip())
+                # 级联选择器：中间节点用前缀匹配，与 base_service.get_list 行为一致
+                query = query.filter(MaterialBase.category.ilike(f"{category.strip()}%"))
             if material_type and material_type.strip():
                 query = query.filter(MaterialBase.material_type == material_type.strip())
 

inventory-backend/app/services/outbound_service.py

@@ -1,6 +1,7 @@
 import uuid  # .material -> .base refactor checked
 from datetime import datetime, timezone, timedelta
 from sqlalchemy import or_, func, desc, and_
+from sqlalchemy.orm import joinedload
 from app.extensions import db
 from app.models.outbound import TransOutbound, OutboundApproval
 
@@ -475,6 +476,37 @@ class OutboundService:
             'stock_product': StockProduct
         }
 
+        # ==========================================
+        # ★ 优化步骤 1：第一遍循环，单纯收集所有的 stock_id
+        # ==========================================
+        stock_ids_by_table = {'stock_buy': set(), 'stock_semi': set(), 'stock_product': set()}
+
+        for d in details:
+            if d.source_table in stock_ids_by_table and d.stock_id:
+                stock_ids_by_table[d.source_table].add(d.stock_id)
+
+        # ==========================================
+        # ★ 优化步骤 2：发起批量查询，并强制 JOIN 基础物料表
+        # ==========================================
+        # 格式: { ('stock_buy', 101): stock_obj, ... }
+        preloaded_stocks = {}
+
+        for table_name, ids in stock_ids_by_table.items():
+            if not ids:
+                continue
+
+            ModelClass = model_map[table_name]
+            # 魔法在这里：in_() 一次性查出所有库存，joinedload 顺便把 base 表的数据一起拉回来
+            items = ModelClass.query.options(
+                joinedload(ModelClass.base)
+            ).filter(ModelClass.id.in_(ids)).all()
+
+            for item in items:
+                preloaded_stocks[(table_name, item.id)] = item
+
+        # ==========================================
+        # ★ 优化步骤 3：第二遍循环，纯内存拼装（极速）
+        # ==========================================
         for d in details:
             ono = d.outbound_no
             if ono not in grouped_map:
@@ -490,34 +522,20 @@ class OutboundService:
                     'items': []
                 }
 
-            # --- 查询物品详细信息 (名称, 规格, 类型, 类别, 批号/SN) ---
-            item_name = "未知物品"
-            item_spec = ""
-            item_cat = ""
-            item_type = ""
-            batch_sn = "-"
+            # --- 直接从内存字典中获取，O(1) 复杂度，绝对不触发 SQL ---
+            item_name, item_spec, item_cat, item_type, batch_sn = "未知物品", "", "", "", "-"
 
-            ModelClass = model_map.get(d.source_table)
-            if ModelClass and d.stock_id:
-                try:
-                    stock_item = ModelClass.query.get(d.stock_id)
-                    if stock_item:
-                        # 获取批号/序列号用于追溯
-                        batch_sn = getattr(stock_item, 'batch_number', None) or getattr(stock_item, 'serial_number', None) or '-'
-                        if stock_item.base:
-                            item_name = stock_item.base.name
-                            item_spec = stock_item.base.spec_model
-                            item_cat = stock_item.base.category
-                            item_type = stock_item.base.material_type
-                        elif stock_item and hasattr(stock_item, 'base_id') and stock_item.base_id:
-                            base_info = MaterialBase.query.get(stock_item.base_id)
-                            if base_info:
-                                item_name = base_info.name
-                                item_spec = base_info.spec_model
-                                item_cat = base_info.category
-                                item_type = base_info.material_type
-                except Exception as e:
-                    print(f"Error fetching detail for stock_id {d.stock_id}: {e}")
+            stock_item = preloaded_stocks.get((d.source_table, d.stock_id))
+
+            if stock_item:
+                batch_sn = getattr(stock_item, 'batch_number', None) or getattr(stock_item, 'serial_number', None) or '-'
+
+                # 因为前面用了 joinedload，这里调用 .base 瞬间返回，不会去查数据库
+                if stock_item.base:
+                    item_name = stock_item.base.name
+                    item_spec = stock_item.base.spec_model
+                    item_cat = stock_item.base.category
+                    item_type = stock_item.base.material_type
 
             # 计算金额
             price = float(d.unit_price) if d.unit_price else 0
@@ -691,7 +709,7 @@ class OutboundApprovalService:
         """发送新申请通知邮件给审批人和申请人（静默处理，不阻断主流程）"""
         try:
             from flask import current_app
-            from app.utils.email_service import send_new_request_notify
+            from app.utils.email_service import send_outbound_new_request_notify
             from app.models.system import SysUser
 
             applicant_name = ''
@@ -731,7 +749,7 @@ class OutboundApprovalService:
             # 4. 分别发送邮件
             if applicant_emails:
                 try:
-                    send_new_request_notify(
+                    send_outbound_new_request_notify(
                         to_emails=applicant_emails,
                         request_no=approval.request_no,
                         applicant_name=applicant_name,
@@ -744,7 +762,7 @@ class OutboundApprovalService:
 
             if approver_emails:
                 try:
-                    send_new_request_notify(
+                    send_outbound_new_request_notify(
                         to_emails=approver_emails,
                         request_no=approval.request_no,
                         applicant_name=applicant_name,
@@ -853,7 +871,7 @@ class OutboundApprovalService:
         logger = logging.getLogger(__name__)
 
         try:
-            from app.utils.email_service import send_approval_result_notify, send_warehouse_dispatch_notify
+            from app.utils.email_service import send_outbound_approval_result_notify, send_outbound_dispatch_notify
             from app.models.system import SysUser as SU
 
             # 1. 提取申请人信息（供两个分支使用）
@@ -867,7 +885,7 @@ class OutboundApprovalService:
                         applicant_emails.append(user.email)
 
             # 2. 提取物料明细（供通过分支使用）
-            items = approval.items_json if approval.items_json else []
+            items = approval.get_items() if approval else []
 
             # 3. 分支逻辑
             if action == 'approve':
@@ -877,7 +895,7 @@ class OutboundApprovalService:
                 
                 if warehouse_emails:
                     try:
-                        send_warehouse_dispatch_notify(
+                        send_outbound_dispatch_notify(
                             to_emails=warehouse_emails,
                             request_no=approval.request_no,
                             applicant_name=applicant_name,
@@ -889,7 +907,7 @@ class OutboundApprovalService:
                 # 3.2 通知申请人（审批通过，带完整物料清单）
                 if applicant_emails:
                     try:
-                        send_warehouse_dispatch_notify(
+                        send_outbound_dispatch_notify(
                             to_emails=applicant_emails,
                             request_no=approval.request_no,
                             applicant_name=applicant_name,
@@ -902,7 +920,7 @@ class OutboundApprovalService:
                 # 3.3 通知申请人（已驳回）
                 if applicant_emails:
                     try:
-                        send_approval_result_notify(
+                        send_outbound_approval_result_notify(
                             to_emails=applicant_emails,
                             request_no=approval.request_no,
                             is_passed=False,

inventory-backend/app/services/permission_service.py

@@ -176,7 +176,28 @@ class PermissionService:
                 db.session.flush()  # 获取新插入的 ID
                 print(f"✅ 审计日志菜单已创建 (code: {menu_code})")
             else:
-                print(f"ℹ️ 审计日志菜单已存在 (code: {menu_code})")
+                # ★★★ Dirty Check：仅当字段真正变化时才 add，避免触发 UPDATE 事件
+                is_dirty = False
+                if existing_menu.parent_id != 0:
+                    existing_menu.parent_id = 0
+                    is_dirty = True
+                if existing_menu.name != '审计日志':
+                    existing_menu.name = '审计日志'
+                    is_dirty = True
+                if existing_menu.path != '/system/audit':
+                    existing_menu.path = '/system/audit'
+                    is_dirty = True
+                if existing_menu.sort_order != 110:
+                    existing_menu.sort_order = 110
+                    is_dirty = True
+                if existing_menu.is_visible != True:
+                    existing_menu.is_visible = True
+                    is_dirty = True
+                if is_dirty:
+                    db.session.add(existing_menu)
+                    print(f"🔄 审计日志菜单已更新 (code: {menu_code})")
+                else:
+                    print(f"ℹ️ 审计日志菜单已存在，无需更新 (code: {menu_code})")
 
             # 2. 为超级管理员赋予审计日志菜单权限
             role_code = 'SUPER_ADMIN'
@@ -230,7 +251,14 @@ class PermissionService:
                 db.session.flush()
                 print(f"✅ 盘点管理顶级菜单已创建")
             else:
-                print(f"ℹ️ 盘点管理顶级菜单已存在")
+                is_dirty = False
+                if stocktake_menu.parent_id != 0: stocktake_menu.parent_id = 0; is_dirty = True
+                if stocktake_menu.name != '盘点管理': stocktake_menu.name = '盘点管理'; is_dirty = True
+                if stocktake_menu.path != '/stocktake': stocktake_menu.path = '/stocktake'; is_dirty = True
+                if stocktake_menu.sort_order != 30: stocktake_menu.sort_order = 30; is_dirty = True
+                if stocktake_menu.is_visible != True: stocktake_menu.is_visible = True; is_dirty = True
+                if is_dirty: db.session.add(stocktake_menu); print(f"🔄 盘点管理顶级菜单已更新")
+                else: print(f"ℹ️ 盘点管理顶级菜单已存在")
 
             # 2. 创建子菜单：盲盘作业
             stocktake_op_code = 'inventory_stocktake'
@@ -248,7 +276,13 @@ class PermissionService:
                 db.session.flush()
                 print(f"✅ 盲盘作业菜单已创建")
             else:
-                print(f"ℹ️ 盲盘作业菜单已存在")
+                is_dirty = False
+                if stocktake_op_menu.name != '盲盘作业': stocktake_op_menu.name = '盲盘作业'; is_dirty = True
+                if stocktake_op_menu.path != '/stocktake/operation': stocktake_op_menu.path = '/stocktake/operation'; is_dirty = True
+                if stocktake_op_menu.sort_order != 1: stocktake_op_menu.sort_order = 1; is_dirty = True
+                if stocktake_op_menu.is_visible != True: stocktake_op_menu.is_visible = True; is_dirty = True
+                if is_dirty: db.session.add(stocktake_op_menu); print(f"🔄 盲盘作业菜单已更新")
+                else: print(f"ℹ️ 盲盘作业菜单已存在")
 
             # 3. 为盲盘作业添加操作权限元素
             stocktake_op_element = SysElement.query.filter_by(
@@ -265,7 +299,11 @@ class PermissionService:
                 db.session.add(stocktake_op_element)
                 print(f"✅ 盲盘作业操作权限已创建")
             else:
-                print(f"ℹ️ 盲盘作业操作权限已存在")
+                is_dirty = False
+                if stocktake_op_element.name != '盲盘操作': stocktake_op_element.name = '盲盘操作'; is_dirty = True
+                if stocktake_op_element.element_type != 'operation': stocktake_op_element.element_type = 'operation'; is_dirty = True
+                if is_dirty: db.session.add(stocktake_op_element); print(f"🔄 盲盘作业操作权限已更新")
+                else: print(f"ℹ️ 盲盘作业操作权限已存在")
 
             # 4. 创建子菜单：盈亏调整
             adjustment_code = 'stock_adjustment'
@@ -283,7 +321,13 @@ class PermissionService:
                 db.session.flush()
                 print(f"✅ 盈亏调整菜单已创建")
             else:
-                print(f"ℹ️ 盈亏调整菜单已存在")
+                is_dirty = False
+                if adjustment_menu.name != '盈亏调整': adjustment_menu.name = '盈亏调整'; is_dirty = True
+                if adjustment_menu.path != '/stocktake/adjustment': adjustment_menu.path = '/stocktake/adjustment'; is_dirty = True
+                if adjustment_menu.sort_order != 2: adjustment_menu.sort_order = 2; is_dirty = True
+                if adjustment_menu.is_visible != True: adjustment_menu.is_visible = True; is_dirty = True
+                if is_dirty: db.session.add(adjustment_menu); print(f"🔄 盈亏调整菜单已更新")
+                else: print(f"ℹ️ 盈亏调整菜单已存在")
 
             # 5. 为盈亏调整添加列表权限元素 (stock_adjustment:list)
             adjustment_list_element = SysElement.query.filter_by(
@@ -300,7 +344,11 @@ class PermissionService:
                 db.session.add(adjustment_list_element)
                 print(f"✅ 盈亏调整列表权限已创建")
             else:
-                print(f"ℹ️ 盈亏调整列表权限已存在")
+                is_dirty = False
+                if adjustment_list_element.name != '盈亏列表': adjustment_list_element.name = '盈亏列表'; is_dirty = True
+                if adjustment_list_element.element_type != 'element': adjustment_list_element.element_type = 'element'; is_dirty = True
+                if is_dirty: db.session.add(adjustment_list_element); print(f"🔄 盈亏调整列表权限已更新")
+                else: print(f"ℹ️ 盈亏调整列表权限已存在")
 
             # 6. 为盈亏调整添加操作权限元素 (stock_adjustment:operation)
             adjustment_op_element = SysElement.query.filter_by(
@@ -317,7 +365,11 @@ class PermissionService:
                 db.session.add(adjustment_op_element)
                 print(f"✅ 盈亏调整操作权限已创建")
             else:
-                print(f"ℹ️ 盈亏调整操作权限已存在")
+                is_dirty = False
+                if adjustment_op_element.name != '盈亏操作': adjustment_op_element.name = '盈亏操作'; is_dirty = True
+                if adjustment_op_element.element_type != 'operation': adjustment_op_element.element_type = 'operation'; is_dirty = True
+                if is_dirty: db.session.add(adjustment_op_element); print(f"🔄 盈亏调整操作权限已更新")
+                else: print(f"ℹ️ 盈亏调整操作权限已存在")
 
             # 7. 为超级管理员分配所有盘点相关权限
             menu_codes = [stocktake_mgmt_code, stocktake_op_code, adjustment_code]
@@ -491,13 +543,19 @@ class PermissionService:
                         db.session.delete(e)
                     db.session.delete(dup)
 
-            # 第三步：强制重新设置所有子菜单的 parent_id，确保没有遗漏
-            # 改为对象级更新以触发审计事件
+            # 第三步：仅当子菜单 parent_id 有误时才更新（Dirty Check）
+            # 遍历所有子菜单，只在 parent_id 需要修正时才触碰对象
+            child_codes = [m[0] for m in menu_defs if m[3] is not None]
             child_menus = SysMenu.query.filter(SysMenu.code.in_(child_codes)).all()
             for m in child_menus:
-                m.parent_id = None
+                # 只有 parent_id 为 0 或 None（即没有正确挂载父菜单）时才更新
+                if m.parent_id == 0 or m.parent_id is None:
+                    m.parent_id = None  # SQLAlchemy 设为 None 表示挂载到根（parent_id=None）
+                    db.session.add(m)
+                    print(f"🔧 修正子菜单 parent_id: {m.code} (parent_id → None)")
 
-            # 创建或更新菜单
+            # 第四步：创建或更新菜单（带字段级 Dirty Check）
+            # 只有至少有一个字段真正变化了才 add，避免 SQLAlchemy 产生 UPDATE 事件
             menu_map = {}  # code -> menu obj
 
             for code, name, path, parent_code, sort_order in menu_defs:
@@ -508,21 +566,38 @@ class PermissionService:
                     db.session.flush()
                     print(f"✅ 菜单已创建: {name} ({code})")
                 else:
-                    # 更新已有菜单的属性
-                    menu.name = name
-                    menu.path = path
-                    menu.sort_order = sort_order
+                    # ★★★ 字段级 Dirty Check：逐字段比较，仅在值真正变化时赋值
+                    is_dirty = False
+
+                    if menu.name != name:
+                        menu.name = name
+                        is_dirty = True
+                    if menu.path != path:
+                        menu.path = path
+                        is_dirty = True
+                    if menu.sort_order != sort_order:
+                        menu.sort_order = sort_order
+                        is_dirty = True
+
+                    # 只有至少一个字段变化了才 add（触发 UPDATE）
+                    if is_dirty:
+                        db.session.add(menu)
+                        print(f"🔄 菜单已更新: {name} ({code})")
 
                 menu_map[code] = menu
 
-            # 设置 parent_id
+            # 第五步：设置 parent_id（带 Dirty Check，只在值真正变化时更新）
             for code, name, path, parent_code, sort_order in menu_defs:
                 if parent_code and parent_code in menu_map:
                     menu = menu_map[code]
                     parent = menu_map[parent_code]
-                    menu.parent_id = parent.id
+                    # 只有 parent_id 实际变化了才赋值，避免重复触发 UPDATE
+                    if menu.parent_id != parent.id:
+                        menu.parent_id = parent.id
+                        db.session.add(menu)
+                        print(f"🔗 菜单 {code} 已挂载到父菜单 {parent_code} (id={parent.id})")
 
-            # 为超级管理员分配所有菜单权限
+            # 第六步：为超级管理员分配顶级菜单权限（只做 INSERT，不触碰已存在的记录）
             for code, name, path, parent_code, sort_order in menu_defs:
                 if parent_code is None:  # 只分配顶级菜单
                     existing_perm = SysRolePermission.query.filter_by(

inventory-backend/app/services/trans_service.py

@@ -6,7 +6,8 @@ from app.models.inbound.buy import StockBuy
 from app.models.inbound.semi import StockSemi
 from app.models.inbound.product import StockProduct
 from app.models.base import MaterialBase
-from sqlalchemy import desc, func, nullslast, asc, or_, and_
+from sqlalchemy import desc, func, nullslast, asc, or_, and_, case
+from sqlalchemy.orm import joinedload
 
 
 class TransService:
@@ -29,18 +30,57 @@ class TransService:
         return f"{prefix}{sequence:04d}"
 
     @staticmethod
-    def create_borrow(data, operator_name='System'):
+    def execute_dispatch(approval_id, items, operator_name='System', borrower_name=None,
+                         signature=None, remark=None, expected_return_time=None):
         """
-        借库逻辑：减少可用库存，不减总库存
+        执行借库扣减（审批通过后调用）
+        流程：锁审批单 → 构建审批上限字典 → 锁库存行 → 名称规格校验 → 扣减库存 → 生成 TransBorrow 记录 → 标记审批单完成
+
+        ★ 关键设计：审批维度是 (name, spec_model) 而非 SKU
+          借库申请是按【名称 + 规格型号】发起的（borrow_service 强制要求 name/spec_model/quantity 三字段），
+          申请时尚未绑定具体库存行；扫码出库时通过锁定 stock 行回查 material_base 表，
+          用 (name, spec_model) 与审批单做物料维度聚合比对，避免 sku 维度坍塌或绕过。
         """
-        items = data.get('items', [])
-        borrower_name = data.get('borrower_name')
-        signature = data.get('signature_path')  # 借用人签字
+        from app.models.borrow import BorrowApproval
 
         if not items: raise ValueError("物品列表为空")
-        if not borrower_name: raise ValueError("请输入借用人")
         if not signature: raise ValueError("借用人必须签字")
 
+        # ==============================================
+        # ★ 防线1：并发防重复执行 - 用 SELECT FOR UPDATE 锁住审批单
+        # ==============================================
+        approval = BorrowApproval.query.with_for_update().get(approval_id)
+        if not approval:
+            raise ValueError("审批单不存在")
+        if approval.status != 1:
+            status_map = {0: '待审批', 1: '已通过', 2: '已驳回', 3: '已完成'}
+            raise ValueError(f"审批单状态为【{status_map.get(approval.status, approval.status)}】，无法执行借库")
+
+        # ★ borrower_name 兜底：优先用前端传参，其次从审批单读取（申请时填写的姓名）
+        if not borrower_name:
+            borrower_name = approval.borrower_name
+        if not borrower_name:
+            raise ValueError("审批单中未记录借库人姓名，请联系管理员补录")
+
+        # ==============================================
+        # ★ 防线2：构建审批上限字典（按 名称+规格 聚合，strip 防止匹配失败）
+        #  Key = (name, spec_model)，Value = 该物料累计允许借出数量
+        # ==============================================
+        approved_items = approval.get_items()
+        if not approved_items:
+            raise ValueError("审批单中无物料明细，请联系管理员检查")
+
+        approval_limits = {}
+        for ai in approved_items:
+            key = (
+                (ai.get('name') or '').strip(),
+                (ai.get('spec_model') or '').strip()
+            )
+            approval_limits[key] = approval_limits.get(key, 0) + float(ai.get('quantity', 0))
+
+        # 累计本次扫码出库量（key 与 approval_limits 完全一致）
+        dispatch_acc = {}
+
         borrow_no = TransService.generate_borrow_no()
         model_map = {'stock_buy': StockBuy, 'stock_semi': StockSemi, 'stock_product': StockProduct}
 
@@ -53,16 +93,50 @@ class TransService:
                 ModelClass = model_map.get(source_table)
                 if not ModelClass: continue
 
+                # ==============================================
+                # ★ 防线3：并发超卖与负库存 - 锁行后再查可用库存
+                #   ⚠️ 不要在此加 joinedload(ModelClass.base)！PG 禁止 FOR UPDATE
+                #      应用到 outer join 的 nullable 侧，会报 FeatureNotSupported
+                #      并有死锁风险。stock.base 走单条 lazy 加载是已知取舍。
+                # ==============================================
                 stock = ModelClass.query.with_for_update().get(stock_id)
                 if not stock: raise ValueError(f"库存不存在 ID:{stock_id}")
 
+                # ==============================================
+                # ★ 防线4：名称+规格 超额校验（动态累加、即时拦截）
+                #   库存表本身没有 name/spec_model 字段，通过 base 关联到 material_base
+                # ==============================================
+                if stock.base:
+                    stock_name = (stock.base.name or '').strip()
+                    stock_spec = (stock.base.spec_model or '').strip()
+                else:
+                    stock_name = ''
+                    stock_spec = ''
+                key = (stock_name, stock_spec)
+
+                limit = approval_limits.get(key)
+                if limit is None:
+                    raise ValueError(
+                        f"扫码物料【{stock_name} / {stock_spec}】不在审批单允许范围内，"
+                        f"请检查审批单明细或重新发起申请"
+                    )
+
+                dispatch_acc[key] = dispatch_acc.get(key, 0) + qty
+                current_total = dispatch_acc[key]
+                if current_total > limit:
+                    raise ValueError(
+                        f"实际出库数量超出了审批单允许的上限: "
+                        f"物料={stock_name}({stock_spec}) "
+                        f"审批上限={limit}, 实际扫码={current_total}"
+                    )
+
                 if float(stock.available_quantity) < qty:
-                    raise ValueError(f"SKU {stock.sku} 可用库存不足")
+                    raise ValueError(f"物料【{stock_name} / {stock_spec}】可用库存不足")
 
                 # 1. 冻结库存 (只减可用)
                 stock.available_quantity = float(stock.available_quantity) - qty
 
-                # 2. 创建借用单
+                # 2. 创建借用记录
                 record = TransBorrow(
                     borrow_no=borrow_no,
                     sku=stock.sku,
@@ -72,19 +146,39 @@ class TransService:
                     quantity=qty,
                     borrower_name=borrower_name,
                     borrow_signature=signature,
-                    remark=data.get('remark'),
-                    expected_return_time=data.get('expected_return_time'),
+                    remark=remark,
+                    expected_return_time=expected_return_time,
                     status='borrowed',
                     is_returned=False
                 )
                 db.session.add(record)
 
+            # ★ 3. 标记审批单为已完成
+            approval.status = 3
+
             db.session.commit()
             return borrow_no
         except Exception as e:
             db.session.rollback()
             raise e
 
+    # ★ 兼容旧入口（不走审批流的直接借库，保留以便平滑过渡）
+    @staticmethod
+    def create_borrow(data, operator_name='System'):
+        """
+        借库逻辑（兼容旧模式）：减少可用库存，不减总库存
+        @deprecated 请优先使用 execute_dispatch 走审批流
+        """
+        return TransService.execute_dispatch(
+            approval_id=0,
+            items=data.get('items', []),
+            operator_name=operator_name,
+            borrower_name=data.get('borrower_name'),
+            signature=data.get('signature_path'),
+            remark=data.get('remark'),
+            expected_return_time=data.get('expected_return_time')
+        )
+
     @staticmethod
     def scan_for_return(barcode):
         """
@@ -114,12 +208,12 @@ class TransService:
     @staticmethod
     def process_return(data, operator_name):
         """
-        还库逻辑（支持部分归还）：
-        1. 校验本次归还数量不能大于待还数量
-        2. 恢复可用库存（按本次归还数量）
-        3. 更新库位 (如果有变动)
-        4. 记录库管签字
-        5. 更新归还数量和状态（部分归还/全部归还）
+        还库逻辑（支持部分归还）- 已优化，消除 N+1 和长事务死锁风险
+        四步走策略：
+        1. 收集所有 borrow_id
+        2. 批量锁定借用记录
+        3. 收集库存ID并批量锁定库存
+        4. 内存中完成业务逻辑
         """
         items = data.get('items', [])
         signature = data.get('signature_path')  # 库管签字
@@ -130,15 +224,60 @@ class TransService:
         model_map = {'stock_buy': StockBuy, 'stock_semi': StockSemi, 'stock_product': StockProduct}
 
         try:
+            # ==========================================
+            # ★ 优化步骤 1：收集所有 borrow_id
+            # ==========================================
+            borrow_ids = []
+            item_map = {}  # 存储原始 item 数据，key=borrow_id
             for item in items:
                 borrow_id = item.get('id')
-                # 前端传入的本次归还数量
-                return_qty = float(item.get('return_qty', 0))
-                # 前端如果没有填 return_location，应该在提交前处理好，或者这里做 fallback
-                # 这里假设前端传来的 return_location 就是最终要保存的库位
-                final_location = item.get('return_location')
+                if borrow_id:
+                    borrow_ids.append(borrow_id)
+                    item_map[borrow_id] = {
+                        'return_qty': float(item.get('return_qty', 0)),
+                        'final_location': item.get('return_location')
+                    }
 
-                record = TransBorrow.query.with_for_update().get(borrow_id)
+            if not borrow_ids:
+                raise ValueError("没有有效的归还记录")
+
+            # ==========================================
+            # ★ 优化步骤 2：批量锁定借用记录
+            # ==========================================
+            borrow_records = TransBorrow.query.with_for_update().filter(
+                TransBorrow.id.in_(borrow_ids)
+            ).all()
+
+            borrow_map = {r.id: r for r in borrow_records}
+
+            # ==========================================
+            # ★ 优化步骤 3：收集库存ID并批量锁定库存
+            # ==========================================
+            stock_ids_by_table = {'stock_buy': set(), 'stock_semi': set(), 'stock_product': set()}
+
+            for borrow_id, record in borrow_map.items():
+                if record.source_table in stock_ids_by_table and record.stock_id:
+                    stock_ids_by_table[record.source_table].add(record.stock_id)
+
+            stock_map = {}  # 格式: { ('stock_buy', 101): stock_obj }
+            for table_name, ids in stock_ids_by_table.items():
+                if not ids:
+                    continue
+                ModelClass = model_map[table_name]
+                stocks = ModelClass.query.with_for_update().filter(
+                    ModelClass.id.in_(ids)
+                ).all()
+                for stock in stocks:
+                    stock_map[(table_name, stock.id)] = stock
+
+            # ==========================================
+            # ★ 优化步骤 4：内存中完成业务逻辑
+            # ==========================================
+            for borrow_id, item_data in item_map.items():
+                return_qty = item_data['return_qty']
+                final_location = item_data['final_location']
+
+                record = borrow_map.get(borrow_id)
                 if not record:
                     continue
 
@@ -153,22 +292,19 @@ class TransService:
                 if return_qty > pending_qty:
                     raise ValueError(f"本次归还数量({return_qty})不能大于待还数量({pending_qty})")
 
-                ModelClass = model_map.get(record.source_table)
-                if ModelClass:
-                    stock = ModelClass.query.with_for_update().get(record.stock_id)
-                    if stock:
-                        # 1. 恢复可用库存（按本次归还数量）
-                        stock.available_quantity = float(stock.available_quantity) + return_qty
+                # 更新库存
+                stock = stock_map.get((record.source_table, record.stock_id))
+                if stock:
+                    # 恢复可用库存
+                    stock.available_quantity = float(stock.available_quantity) + return_qty
+                    # 更新库位
+                    if final_location:
+                        stock.warehouse_location = final_location
 
-                        # 2. 更新库位 (如果提供了有效值)
-                        if final_location:
-                            stock.warehouse_location = final_location
-
-                # 3. 更新归还数量
+                # 更新归还数量和状态
                 new_returned_qty = returned_qty + return_qty
                 record.returned_quantity = new_returned_qty
 
-                # 4. 更新状态
                 if new_returned_qty >= total_qty:
                     record.is_returned = True
                     record.status = 'returned'
@@ -189,174 +325,343 @@ class TransService:
 
     @staticmethod
     def get_records(page=1, limit=10, status='all', keyword=None, search_type='all'):
-        q = TransBorrow.query
+        """
+        获取借还记录列表（按单号 borrow_no 维度分页，避免明细撑爆 pageSize）
 
-        # 如果有关键词，需要联表搜索物料名称和规格型号
-        if keyword:
-            # 根据 search_type 构建不同的搜索条件
-            if search_type == 'all':
-                # 原有逻辑：or_ 联表全局模糊搜索
-                # 查询 stock_buy 路径匹配的名称/规格
-                buy_match = db.session.query(TransBorrow.id).join(
-                    StockBuy, and_(
-                        TransBorrow.stock_id == StockBuy.id,
-                        TransBorrow.source_table == 'stock_buy'
-                    )
-                ).join(
-                    MaterialBase, StockBuy.base_id == MaterialBase.id
-                ).filter(
-                    or_(
-                        MaterialBase.name.ilike(f'%{keyword}%'),
-                        MaterialBase.spec_model.ilike(f'%{keyword}%')
-                    )
-                ).subquery()
+        实现思路（三步走）：
+          步骤 1: 构造 GROUP BY borrow_no 的"单号维度视图" subquery
+                  （包含 borrow_no + sort_key + 状态聚合，全部聚合都在这里完成）
+          步骤 2: 用一个【纯净的列查询】从 subquery 中分页得到 page_borrow_nos
+                  → SELECT 只有 borrow_no 一列，【主查询无 GROUP BY】
+                  → 避免触发 PG "column must appear in GROUP BY" 严格模式
+          步骤 3: 用 page_borrow_nos 拉明细 + 预加载 material_name
 
-                # 查询 stock_semi 路径匹配的名称/规格
-                semi_match = db.session.query(TransBorrow.id).join(
-                    StockSemi, and_(
-                        TransBorrow.stock_id == StockSemi.id,
-                        TransBorrow.source_table == 'stock_semi'
-                    )
-                ).join(
-                    MaterialBase, StockSemi.base_id == MaterialBase.id
-                ).filter(
-                    or_(
-                        MaterialBase.name.ilike(f'%{keyword}%'),
-                        MaterialBase.spec_model.ilike(f'%{keyword}%')
-                    )
-                ).subquery()
+        状态过滤按"单号聚合"判定：
+          - borrowed: 单号下至少有一条 is_returned=False
+          - returned: 单号下所有明细 is_returned=True
+        """
+        try:
+            # ====================================================================
+            # 步骤 1a：构造"单号维度"基础子查询（GROUP BY borrow_no 在这里完成）
+            # ====================================================================
+            # 单号 + 排序键（最早 expected_return_time）—— 这一层只含 2 列 + GROUP BY
+            order_subq = (
+                db.session.query(
+                    TransBorrow.borrow_no.label('borrow_no'),
+                    func.min(TransBorrow.expected_return_time).label('sort_key')
+                )
+                .group_by(TransBorrow.borrow_no)
+                .subquery()
+            )
 
-                # 查询 stock_product 路径匹配的名称/规格
-                product_match = db.session.query(TransBorrow.id).join(
-                    StockProduct, and_(
-                        TransBorrow.stock_id == StockProduct.id,
-                        TransBorrow.source_table == 'stock_product'
-                    )
-                ).join(
-                    MaterialBase, StockProduct.base_id == MaterialBase.id
-                ).filter(
-                    or_(
-                        MaterialBase.name.ilike(f'%{keyword}%'),
-                        MaterialBase.spec_model.ilike(f'%{keyword}%')
-                    )
-                ).subquery()
+            # 状态聚合子查询（也是 GROUP BY borrow_no）
+            status_subq = (
+                db.session.query(
+                    TransBorrow.borrow_no.label('borrow_no'),
+                    func.sum(
+                        case((TransBorrow.is_returned == False, 1), else_=0)
+                    ).label('unreturned_count')
+                )
+                .group_by(TransBorrow.borrow_no)
+                .subquery()
+            )
 
-                # 合并三种来源的匹配 ID
-                all_matches = db.session.query(buy_match.c.id).union(
-                    db.session.query(semi_match.c.id),
-                    db.session.query(product_match.c.id)
-                ).subquery()
+            # ====================================================================
+            # 步骤 1b：构造关键词命中单号子查询（保留原全部 search_type 逻辑）
+            # ====================================================================
+            keyword_conditions = None
+            if keyword:
+                # 根据 search_type 构建不同的搜索条件
+                if search_type == 'all':
+                    # 原有逻辑：or_ 联表全局模糊搜索
+                    # 查询 stock_buy 路径匹配的名称/规格
+                    buy_match = db.session.query(TransBorrow.id).join(
+                        StockBuy, and_(
+                            TransBorrow.stock_id == StockBuy.id,
+                            TransBorrow.source_table == 'stock_buy'
+                        )
+                    ).join(
+                        MaterialBase, StockBuy.base_id == MaterialBase.id
+                    ).filter(
+                        or_(
+                            MaterialBase.name.ilike(f'%{keyword}%'),
+                            MaterialBase.spec_model.ilike(f'%{keyword}%')
+                        )
+                    ).subquery()
 
-                keyword_conditions = or_(
-                    TransBorrow.borrower_name.ilike(f'%{keyword}%'),
-                    TransBorrow.sku.ilike(f'%{keyword}%'),
-                    TransBorrow.borrow_no.ilike(f'%{keyword}%'),
-                    TransBorrow.id.in_(all_matches)
+                    # 查询 stock_semi 路径匹配的名称/规格
+                    semi_match = db.session.query(TransBorrow.id).join(
+                        StockSemi, and_(
+                            TransBorrow.stock_id == StockSemi.id,
+                            TransBorrow.source_table == 'stock_semi'
+                        )
+                    ).join(
+                        MaterialBase, StockSemi.base_id == MaterialBase.id
+                    ).filter(
+                        or_(
+                            MaterialBase.name.ilike(f'%{keyword}%'),
+                            MaterialBase.spec_model.ilike(f'%{keyword}%')
+                        )
+                    ).subquery()
+
+                    # 查询 stock_product 路径匹配的名称/规格
+                    product_match = db.session.query(TransBorrow.id).join(
+                        StockProduct, and_(
+                            TransBorrow.stock_id == StockProduct.id,
+                            TransBorrow.source_table == 'stock_product'
+                        )
+                    ).join(
+                        MaterialBase, StockProduct.base_id == MaterialBase.id
+                    ).filter(
+                        or_(
+                            MaterialBase.name.ilike(f'%{keyword}%'),
+                            MaterialBase.spec_model.ilike(f'%{keyword}%')
+                        )
+                    ).subquery()
+
+                    # 合并三种来源的匹配 ID
+                    all_matches = db.session.query(buy_match.c.id).union(
+                        db.session.query(semi_match.c.id),
+                        db.session.query(product_match.c.id)
+                    ).subquery()
+
+                    keyword_conditions = or_(
+                        TransBorrow.borrower_name.ilike(f'%{keyword}%'),
+                        TransBorrow.sku.ilike(f'%{keyword}%'),
+                        TransBorrow.borrow_no.ilike(f'%{keyword}%'),
+                        TransBorrow.id.in_(all_matches)
+                    )
+
+                elif search_type == 'no':
+                    keyword_conditions = TransBorrow.borrow_no.ilike(f'%{keyword}%')
+
+                elif search_type == 'name':
+                    keyword_conditions = TransBorrow.borrower_name.ilike(f'%{keyword}%')
+
+                elif search_type == 'sku':
+                    keyword_conditions = TransBorrow.sku.ilike(f'%{keyword}%')
+
+                elif search_type == 'material_name':
+                    # 联表查询物料名称
+                    buy_match = db.session.query(TransBorrow.id).join(
+                        StockBuy, and_(
+                            TransBorrow.stock_id == StockBuy.id,
+                            TransBorrow.source_table == 'stock_buy'
+                        )
+                    ).join(
+                        MaterialBase, StockBuy.base_id == MaterialBase.id
+                    ).filter(MaterialBase.name.ilike(f'%{keyword}%')).subquery()
+
+                    semi_match = db.session.query(TransBorrow.id).join(
+                        StockSemi, and_(
+                            TransBorrow.stock_id == StockSemi.id,
+                            TransBorrow.source_table == 'stock_semi'
+                        )
+                    ).join(
+                        MaterialBase, StockSemi.base_id == MaterialBase.id
+                    ).filter(MaterialBase.name.ilike(f'%{keyword}%')).subquery()
+
+                    product_match = db.session.query(TransBorrow.id).join(
+                        StockProduct, and_(
+                            TransBorrow.stock_id == StockProduct.id,
+                            TransBorrow.source_table == 'stock_product'
+                        )
+                    ).join(
+                        MaterialBase, StockProduct.base_id == MaterialBase.id
+                    ).filter(MaterialBase.name.ilike(f'%{keyword}%')).subquery()
+
+                    all_matches = db.session.query(buy_match.c.id).union(
+                        db.session.query(semi_match.c.id),
+                        db.session.query(product_match.c.id)
+                    ).subquery()
+
+                    keyword_conditions = TransBorrow.id.in_(all_matches)
+
+                elif search_type == 'spec_model':
+                    # 联表查询规格型号
+                    buy_match = db.session.query(TransBorrow.id).join(
+                        StockBuy, and_(
+                            TransBorrow.stock_id == StockBuy.id,
+                            TransBorrow.source_table == 'stock_buy'
+                        )
+                    ).join(
+                        MaterialBase, StockBuy.base_id == MaterialBase.id
+                    ).filter(MaterialBase.spec_model.ilike(f'%{keyword}%')).subquery()
+
+                    semi_match = db.session.query(TransBorrow.id).join(
+                        StockSemi, and_(
+                            TransBorrow.stock_id == StockSemi.id,
+                            TransBorrow.source_table == 'stock_semi'
+                        )
+                    ).join(
+                        MaterialBase, StockSemi.base_id == MaterialBase.id
+                    ).filter(MaterialBase.spec_model.ilike(f'%{keyword}%')).subquery()
+
+                    product_match = db.session.query(TransBorrow.id).join(
+                        StockProduct, and_(
+                            TransBorrow.stock_id == StockProduct.id,
+                            TransBorrow.source_table == 'stock_product'
+                        )
+                    ).join(
+                        MaterialBase, StockProduct.base_id == MaterialBase.id
+                    ).filter(MaterialBase.spec_model.ilike(f'%{keyword}%')).subquery()
+
+                    all_matches = db.session.query(buy_match.c.id).union(
+                        db.session.query(semi_match.c.id),
+                        db.session.query(product_match.c.id)
+                    ).subquery()
+
+                    keyword_conditions = TransBorrow.id.in_(all_matches)
+
+            # 把"命中的单号"独立成 subquery，供主查询做 IN 过滤
+            keyword_borrow_nos_subq = None
+            if keyword_conditions is not None:
+                keyword_borrow_nos_subq = (
+                    db.session.query(TransBorrow.borrow_no)
+                    .filter(keyword_conditions)
+                    .distinct()
+                    .subquery()
                 )
 
-            elif search_type == 'no':
-                keyword_conditions = TransBorrow.borrow_no.ilike(f'%{keyword}%')
+            # ====================================================================
+            # 步骤 2：纯净列查询分页（SELECT 只有 order_subq.c.borrow_no 一列）
+            # ====================================================================
+            borrow_no_q = db.session.query(order_subq.c.borrow_no)
 
-            elif search_type == 'name':
-                keyword_conditions = TransBorrow.borrower_name.ilike(f'%{keyword}%')
+            # 关键词过滤
+            if keyword_borrow_nos_subq is not None:
+                borrow_no_q = borrow_no_q.filter(
+                    order_subq.c.borrow_no.in_(keyword_borrow_nos_subq)
+                )
 
-            elif search_type == 'sku':
-                keyword_conditions = TransBorrow.sku.ilike(f'%{keyword}%')
-
-            elif search_type == 'material_name':
-                # 联表查询物料名称
-                buy_match = db.session.query(TransBorrow.id).join(
-                    StockBuy, and_(
-                        TransBorrow.stock_id == StockBuy.id,
-                        TransBorrow.source_table == 'stock_buy'
+            # 状态过滤（按"单号聚合"判定）
+            if status == 'borrowed':
+                # 单号下至少一条未还
+                borrow_no_q = borrow_no_q.filter(
+                    order_subq.c.borrow_no.in_(
+                        db.session.query(status_subq.c.borrow_no)
+                        .filter(status_subq.c.unreturned_count > 0)
                     )
-                ).join(
-                    MaterialBase, StockBuy.base_id == MaterialBase.id
-                ).filter(MaterialBase.name.ilike(f'%{keyword}%')).subquery()
-
-                semi_match = db.session.query(TransBorrow.id).join(
-                    StockSemi, and_(
-                        TransBorrow.stock_id == StockSemi.id,
-                        TransBorrow.source_table == 'stock_semi'
+                )
+            elif status == 'returned':
+                # 单号下所有明细都已归还
+                borrow_no_q = borrow_no_q.filter(
+                    order_subq.c.borrow_no.in_(
+                        db.session.query(status_subq.c.borrow_no)
+                        .filter(status_subq.c.unreturned_count == 0)
                     )
-                ).join(
-                    MaterialBase, StockSemi.base_id == MaterialBase.id
-                ).filter(MaterialBase.name.ilike(f'%{keyword}%')).subquery()
+                )
 
-                product_match = db.session.query(TransBorrow.id).join(
-                    StockProduct, and_(
-                        TransBorrow.stock_id == StockProduct.id,
-                        TransBorrow.source_table == 'stock_product'
-                    )
-                ).join(
-                    MaterialBase, StockProduct.base_id == MaterialBase.id
-                ).filter(MaterialBase.name.ilike(f'%{keyword}%')).subquery()
+            # 排序（单号维度的 sort_key ASC）
+            borrow_no_q = borrow_no_q.order_by(nullslast(asc(order_subq.c.sort_key)))
 
-                all_matches = db.session.query(buy_match.c.id).union(
-                    db.session.query(semi_match.c.id),
-                    db.session.query(product_match.c.id)
-                ).subquery()
+            # 分页（基准 = borrow_no 单号数）
+            pagination = borrow_no_q.paginate(page=page, per_page=limit, error_out=False)
+            # ★ pagination.items 是 SQLAlchemy Row 对象，psycopg2 无法直接 adapt Row
+            #    用 isinstance(row, tuple) 不够（2.x 的 Row 不一定继承 tuple）
+            #    用 hasattr(row, '_mapping') 兜底，强制提取 row[0] 拿到纯字符串
+            page_borrow_nos = [
+                row[0] if isinstance(row, tuple) or hasattr(row, '_mapping') else row
+                for row in pagination.items
+            ]
+            total_orders = pagination.total  # ★ 单号总数（修复前是明细数，分页错乱根因）
 
-                keyword_conditions = TransBorrow.id.in_(all_matches)
+            if not page_borrow_nos:
+                return {
+                    'items': [],
+                    'total': total_orders,
+                    'page': page,
+                    'limit': limit
+                }
 
-            elif search_type == 'spec_model':
-                # 联表查询规格型号
-                buy_match = db.session.query(TransBorrow.id).join(
-                    StockBuy, and_(
-                        TransBorrow.stock_id == StockBuy.id,
-                        TransBorrow.source_table == 'stock_buy'
-                    )
-                ).join(
-                    MaterialBase, StockBuy.base_id == MaterialBase.id
-                ).filter(MaterialBase.spec_model.ilike(f'%{keyword}%')).subquery()
+            # ====================================================================
+            # 步骤 3：按当前页 borrow_no 集合一次性拉出所有明细
+            # ====================================================================
+            detail_records = (
+                TransBorrow.query
+                .filter(TransBorrow.borrow_no.in_(page_borrow_nos))
+                .order_by(TransBorrow.borrow_no.asc(), TransBorrow.id.asc())
+                .all()
+            )
 
-                semi_match = db.session.query(TransBorrow.id).join(
-                    StockSemi, and_(
-                        TransBorrow.stock_id == StockSemi.id,
-                        TransBorrow.source_table == 'stock_semi'
-                    )
-                ).join(
-                    MaterialBase, StockSemi.base_id == MaterialBase.id
-                ).filter(MaterialBase.spec_model.ilike(f'%{keyword}%')).subquery()
+            # ============================================================
+            # ★ 批量预加载物料名称（三步：收集ID → 批量JOIN → SKU兜底）
+            # ============================================================
+            items_with_names = []
+            items = detail_records
+            if items:
+                # 步骤 1：收集所有 (source_table, stock_id) 对
+                stock_ids_by_table = {'stock_buy': set(), 'stock_semi': set(), 'stock_product': set()}
+                for item in items:
+                    if item.source_table in stock_ids_by_table and item.stock_id:
+                        stock_ids_by_table[item.source_table].add(item.stock_id)
 
-                product_match = db.session.query(TransBorrow.id).join(
-                    StockProduct, and_(
-                        TransBorrow.stock_id == StockProduct.id,
-                        TransBorrow.source_table == 'stock_product'
-                    )
-                ).join(
-                    MaterialBase, StockProduct.base_id == MaterialBase.id
-                ).filter(MaterialBase.spec_model.ilike(f'%{keyword}%')).subquery()
+                # 步骤 2：批量查询库存表并 JOIN MaterialBase
+                stock_map = {}  # { ('stock_buy', 101): '物料名称', ... }
+                model_map = {
+                    'stock_buy': StockBuy,
+                    'stock_semi': StockSemi,
+                    'stock_product': StockProduct
+                }
+                for table_name, ids in stock_ids_by_table.items():
+                    if not ids:
+                        continue
+                    ModelClass = model_map.get(table_name)
+                    if not ModelClass:
+                        continue
+                    stocks = ModelClass.query.options(
+                        joinedload(ModelClass.base)
+                    ).filter(ModelClass.id.in_(ids)).all()
+                    for stock in stocks:
+                        name = stock.base.name if stock.base else ''
+                        stock_map[(table_name, stock.id)] = name
 
-                all_matches = db.session.query(buy_match.c.id).union(
-                    db.session.query(semi_match.c.id),
-                    db.session.query(product_match.c.id)
-                ).subquery()
+                # 步骤 3（前置）：收集 SKU 兜底候选集
+                empty_sku_set = set()
+                for item in items:
+                    name = stock_map.get((item.source_table, item.stock_id), '')
+                    if not name and item.sku:
+                        empty_sku_set.add(item.sku)
 
-                keyword_conditions = TransBorrow.id.in_(all_matches)
+                # 步骤 3（前置）：SKU 兜底批量查询
+                # 场景：库存记录被跨表转移（删旧建新）时，trans_borrow.stock_id 指向孤立记录
+                #       通过 sku 在三张库存表中查找任意匹配，再通过 base_id 获取 MaterialBase.name
+                sku_name_map = {}
+                if empty_sku_set:
+                    for ModelClass in [StockProduct, StockSemi, StockBuy]:
+                        stocks = ModelClass.query.options(
+                            joinedload(ModelClass.base)
+                        ).filter(
+                            ModelClass.sku.in_(empty_sku_set)
+                        ).all()
+                        for stock in stocks:
+                            if stock.sku not in sku_name_map and stock.base:
+                                sku_name_map[stock.sku] = stock.base.name
 
-            else:
-                keyword_conditions = None
-        else:
-            keyword_conditions = None
+                # 步骤 3：为每条记录注入 material_name（含 SKU 兜底）
+                for item in items:
+                    item_dict = item.to_dict()
+                    material_name = stock_map.get((item.source_table, item.stock_id), '')
+                    if not material_name and item.sku:
+                        material_name = sku_name_map.get(item.sku, '')
+                    item_dict['material_name'] = material_name
+                    items_with_names.append(item_dict)
 
-        if keyword_conditions is not None:
-            q = q.filter(keyword_conditions)
-
-        if status == 'borrowed':
-            q = q.filter(TransBorrow.is_returned == False)
-        elif status == 'returned':
-            q = q.filter(TransBorrow.is_returned == True)
-
-        # 使用 distinct 防止跨表查询产生重复记录
-        q = q.distinct()
-
-        q = q.order_by(nullslast(asc(TransBorrow.expected_return_time)))
-        pagination = q.paginate(page=page, per_page=limit, error_out=False)
-
-        return {
-            'items': [r.to_dict() for r in pagination.items],
-            'total': pagination.total,
-            'page': page,
-            'limit': limit
-        }
+            return {
+                'items': items_with_names,
+                'total': total_orders,
+                'page': page,
+                'limit': limit
+            }
+        except Exception as e:
+            # ★ 捕鼠器：把任何 SQL/运行时错误以 500 + traceback 返回，避免静默吞噬
+            import traceback
+            return {
+                'code': 500,
+                'msg': str(e),
+                'trace': traceback.format_exc(),
+                'items': [],
+                'total': 0,
+                'page': page,
+                'limit': limit
+            }

inventory-backend/app/utils/ai_vision.py

@@ -0,0 +1,279 @@
+# -*- coding: utf-8 -*-
+"""
+AI Vision 模块 - CLIP Vision Encoder ONNX 推理
+"""
+
+import os
+import json
+import time
+import numpy as np
+from PIL import Image
+import onnxruntime as ort
+import cv2
+
+# ============================================================================
+# 全局模型单例（项目启动时加载一次）
+# ============================================================================
+
+MODEL_PATH = os.path.join(os.path.dirname(__file__), '..', '..', 'models', 'clip_vision.onnx')
+
+# 加载选项：CPU 推理，禁用依赖库的启动开销
+_session_options = ort.SessionOptions()
+_session_options.graph_optimization_level = ort.GraphOptimizationLevel.ORT_ENABLE_ALL
+
+ort_session: ort.InferenceSession = None
+
+
+def load_clip_model():
+    """启动时调用：全局加载 CLIP Vision 模型"""
+    global ort_session
+    if ort_session is not None:
+        return ort_session
+
+    if not os.path.exists(MODEL_PATH):
+        raise FileNotFoundError(f"CLIP Vision 模型未找到: {MODEL_PATH}")
+
+    ort_session = ort.InferenceSession(MODEL_PATH, sess_options=_session_options, providers=['CPUExecutionProvider'])
+    print(f"✅ [AI Vision] CLIP 模型加载成功: {MODEL_PATH}")
+    return ort_session
+
+
+# ============================================================================
+# CLIP 预处理常量
+# ============================================================================
+
+# ImageNet 标准归一化（CLIP 官方）
+IMAGENET_MEAN = [0.485, 0.456, 0.406]
+IMAGENET_STD = [0.229, 0.224, 0.225]
+
+# 模型输入尺寸
+INPUT_SIZE = 224
+
+# ============================================================================
+# 背景去除配置：HSV 色彩空间阈值
+# ============================================================================
+# OpenCV HSV: H∈[0,180], S∈[0,255], V∈[0,255]
+# 注意：OpenCV 中 H 通道范围是 0-180（是 OpenCV 自己的标准，和美术的 0-360 对应）
+
+# 绿色背景阈值（工业绿幕常用色）
+# H: 35~85 对应绿色谱（浅绿到深绿）
+# S: 低饱和度（35）到高饱和度（255）
+# V: 明暗均可（30~255）
+BG_GREEN_LOWER = np.array([35, 35, 30])
+BG_GREEN_UPPER = np.array([90, 255, 255])
+
+# 白色/浅色背景阈值（高明度、低饱和度区域）
+# H: 不限制（0~180），只看 S 和 V
+# S: 很低的饱和度（0~35）→ 接近纯灰/白色
+# V: 高明度（180~255）
+BG_WHITE_LOWER = np.array([0, 0, 180])
+BG_WHITE_UPPER = np.array([180, 40, 255])
+
+# 中性灰填充色（BGR → 转换后 RGB 也是 128,128,128）
+NEUTRAL_GRAY_BGR = (128, 128, 128)
+
+
+def _remove_background(image: Image.Image) -> Image.Image:
+    """
+    利用 OpenCV HSV 色彩空间识别并替换背景为中性灰
+
+    支持两种背景类型：
+    1. 工业绿幕/绿色背景（H: 35~90）
+    2. 白色/浅色背景（高亮度、低饱和度）
+
+    逻辑：
+    - 将 PIL Image 转为 OpenCV 格式 (RGB → BGR)
+    - 转 HSV，分别生成绿色掩码和白色掩码
+    - 合并掩码后，按掩码将背景区域替换为中性灰
+    - 还原为 PIL Image (BGR → RGB) 返回
+
+    参数:
+        image: PIL Image (RGB, uint8)
+
+    返回:
+        处理后的 PIL Image (RGB, uint8)
+    """
+    # PIL (RGB) → OpenCV (BGR)
+    img_bgr = cv2.cvtColor(np.array(image), cv2.COLOR_RGB2BGR)
+
+    # 转入 HSV 色彩空间
+    hsv = cv2.cvtColor(img_bgr, cv2.COLOR_BGR2HSV)
+
+    # 生成掩码 1：绿色背景
+    mask_green = cv2.inRange(hsv, BG_GREEN_LOWER, BG_GREEN_UPPER)
+
+    # 生成掩码 2：白色/浅色背景
+    mask_white = cv2.inRange(hsv, BG_WHITE_LOWER, BG_WHITE_UPPER)
+
+    # 合并掩码（任意一种背景都替换）
+    mask_combined = cv2.bitwise_or(mask_green, mask_white)
+
+    # 形态学处理：消除噪点（小面积背景噪点填平）
+    kernel = cv2.getStructuringElement(cv2.MORPH_ELLIPSE, (5, 5))
+    mask_combined = cv2.morphologyEx(mask_combined, cv2.MORPH_CLOSE, kernel)
+    mask_combined = cv2.morphologyEx(mask_combined, cv2.MORPH_OPEN, kernel)
+
+    # 背景替换：将掩码区域填充为中性灰
+    # 其中 mask_combined=255 的区域为背景，替换为 NEUTRAL_GRAY_BGR
+    img_bgr_no_bg = img_bgr.copy()
+    img_bgr_no_bg[mask_combined > 0] = NEUTRAL_GRAY_BGR
+
+    # OpenCV (BGR) → PIL (RGB)
+    result = Image.fromarray(cv2.cvtColor(img_bgr_no_bg, cv2.COLOR_BGR2RGB))
+
+    return result
+
+
+def _letterbox_image(image: Image.Image, size: int = 224) -> Image.Image:
+    """
+    Letterbox 预处理：等比例缩放 + 灰色填充，保持内容不变形
+
+    - 将原图最长边缩放到 224
+    - 短边按相同比例缩放
+    - 不足部分用 RGB(128,128,128) 灰色填充至 224x224
+
+    参数:
+        image: PIL Image 对象
+        size: 目标尺寸，默认 224
+
+    返回:
+        224x224 PIL Image
+    """
+    w, h = image.size
+
+    # 计算缩放比例，使最长边等于 size
+    scale = size / max(w, h)
+    new_w = int(w * scale)
+    new_h = int(h * scale)
+
+    # 等比例缩放
+    resized = image.resize((new_w, new_h), Image.LANCZOS)
+
+    # 创建灰色画布
+    canvas = Image.new('RGB', (size, size), (128, 128, 128))
+
+    # 将缩放后的图片粘贴到画布正中央
+    paste_x = (size - new_w) // 2
+    paste_y = (size - new_h) // 2
+    canvas.paste(resized, (paste_x, paste_y))
+
+    return canvas
+
+
+def _normalize(image_np: np.ndarray) -> np.ndarray:
+    """
+    对 224x224x3 图像进行 CLIP 标准归一化
+    image_np: shape (H, W, C), dtype uint8, 值域 [0, 255]
+    返回: shape (C, H, W), dtype float32, 值域 [0, 1]
+    """
+    # HWC -> CHW
+    image_np = image_np.transpose(2, 0, 1).astype(np.float32) / 255.0
+
+    # 归一化
+    for i, (mean, std) in enumerate(zip(IMAGENET_MEAN, IMAGENET_STD)):
+        image_np[i] = (image_np[i] - mean) / std
+
+    return image_np
+
+
+# ============================================================================
+# 主函数：提取图像 embedding
+# ============================================================================
+
+def get_image_embedding(image_path: str) -> list:
+    """
+    提取图像的 512 维 CLIP embedding 向量
+
+    参数:
+        image_path: 图像文件路径
+
+    返回:
+        list: 512 维浮点向量
+    """
+    if ort_session is None:
+        load_clip_model()
+
+    # 1. 图片预处理
+    #    Step 1: 背景去除（HSV 色彩空间，绿色/白色背景 → 中性灰替换）
+    image = Image.open(image_path).convert('RGB')
+    image = _remove_background(image)
+
+    #    Step 2: Letterbox 等比例缩放（保持内容不变形）
+    image = _letterbox_image(image, INPUT_SIZE)
+    input_data = _normalize(np.array(image))
+    input_data = np.expand_dims(input_data, axis=0)  # [1, 3, 224, 224]
+
+    # 2. 构造占位符输入 (关键修复)
+    dummy_ids = np.zeros((1, 77), dtype=np.int64)
+    dummy_mask = np.zeros((1, 77), dtype=np.int64)
+
+    # 3. 传入模型进行推理
+    # 注意: 模型输入名在你的模型里必须叫 'pixel_values', 'input_ids', 'attention_mask'
+    # 如果报错找不到输入名，请打印 ort_session.get_inputs()[0].name 确认
+    outputs = ort_session.run(
+        ['image_embeds'],
+        {
+            'input_ids': dummy_ids,
+            'pixel_values': input_data.astype(np.float32),
+            'attention_mask': dummy_mask
+        }
+    )
+    return outputs[0][0].tolist()
+
+
+# ============================================================================
+# 通用向量提取工具：防呆、防错
+# ============================================================================
+
+def extract_and_embed(photo_source):
+    if not photo_source:
+        return None
+    try:
+        # 1. 提取基础字符串
+        photo_source_str = str(photo_source).strip()
+        raw_path = ""
+
+        # 尝试剥掉 JSON 外壳
+        try:
+            parsed = json.loads(photo_source_str)
+            if isinstance(parsed, list):
+                raw_path = parsed[0] if parsed else ""
+            elif isinstance(parsed, str):
+                raw_path = parsed
+            else:
+                raw_path = str(parsed)
+        except:
+            raw_path = photo_source_str
+
+        if not raw_path:
+            return None
+
+        # 2. 剥离出最纯净的文件名 (只取最后一段)
+        pure_filename = raw_path.split('/')[-1]
+
+        # 3. 【终极物理净化】强行抠掉所有多余的标点符号！
+        # 哪怕传进来的是 123.jpg"] 或者是 "123.jpg"，全部洗干净
+        pure_filename = pure_filename.replace('"', '').replace("'", "").replace('[', '').replace(']', '')
+
+        # 4. 拼接真实的 Docker 物理路径
+        file_path = os.path.join('/app/uploads', pure_filename)
+
+        # 5. 加入重试机制 (最多等 3 秒)
+        max_retries = 6
+        for i in range(max_retries):
+            if os.path.exists(file_path):
+                # 文件找到了，开始提取向量
+                vec = get_image_embedding(file_path)
+                if isinstance(vec, np.ndarray):
+                    return vec.tolist()
+                return vec
+            else:
+                print(f"[AI 识图等待] 第 {i+1} 次尝试，未找到文件 {file_path}，等待 0.5s...")
+                time.sleep(0.5)
+
+        print(f"[AI 识图警告] 彻底失败！经过等待依然未找到图片: {file_path}")
+
+    except Exception as e:
+        print(f"[AI 识图错误] 实时提取向量失败: {str(e)}")
+
+    return None

inventory-backend/app/utils/decorators.py

@@ -5,6 +5,43 @@ from flask import jsonify, g, request, current_app, has_request_context
 import logging
 import json
 
+def _verify_user_active():
+    """
+    JWT「幽灵令牌」安全漏洞修复：
+    在 Token 签名验证通过之后，进一步检查用户在数据库中是否仍然存在且未被禁用。
+
+    调用时机：login_required / permission_required 装饰器中，
+    在 verify_jwt_in_request() 成功之后立即调用。
+
+    返回 True  → 用户正常，放行
+    返回 False → 用户已从数据库删除或被禁用，阻断请求
+    """
+    try:
+        claims = get_jwt()
+        user_id = claims.get('sub')
+        if user_id is None:
+            return True
+
+        from app.models.system import SysUser
+        user = SysUser.query.get(user_id)
+        if user is None:
+            current_app.logger.warning(
+                f"🚫 [Ghost Token Blocked] user_id={user_id} not found in database (deleted account)"
+            )
+            return False
+
+        if user.status != 'active':
+            current_app.logger.warning(
+                f"🚫 [Token Blocked] user_id={user_id} status={user.status} (disabled account)"
+            )
+            return False
+
+        return True
+    except Exception as e:
+        current_app.logger.error(f"User active check error: {e}")
+        return True  # 出错时 fail-open，避免数据库故障导致全站不可用
+
+
 def _verify_token_in_redis():
     """
     验证当前 Token 是否与 Redis 中存储的 Token 一致（单设备登录互踢）
@@ -67,7 +104,10 @@ def role_required(*roles):
     return wrapper
 
 def login_required(fn):
-    """验证 JWT 令牌是否存在且有效"""
+    """
+    验证 JWT 令牌是否存在且有效，并检查用户是否仍在数据库中且未被禁用。
+    双重防护：1) Token 签名验证  2) 数据库用户存在性  3) Redis 单设备互踢
+    """
     @wraps(fn)
     def decorator(*args, **kwargs):
         try:
@@ -76,6 +116,10 @@ def login_required(fn):
             logging.warning(f"JWT verification failed: {e}")
             return jsonify(msg='登录已过期，请重新登录'), 401
 
+        # ★ 幽灵令牌漏洞修复：检查用户是否已从数据库删除或被禁用
+        if not _verify_user_active():
+            return jsonify(msg='账号已失效（已删除或已禁用），请重新登录'), 401
+
         if not _verify_token_in_redis():
             return _raise_token_mismatch_error()
 
@@ -83,7 +127,7 @@ def login_required(fn):
     return decorator
 
 def permission_required(permission_code):
-    """检查当前用户是否拥有指定权限码"""
+    """检查当前用户是否拥有指定权限码，同时检查用户是否仍然有效"""
     def wrapper(fn):
         @wraps(fn)
         def decorator(*args, **kwargs):
@@ -93,6 +137,10 @@ def permission_required(permission_code):
                 logging.warning(f"JWT verification failed: {e}")
                 return jsonify(msg='登录已过期，请重新登录'), 401
 
+            # ★ 幽灵令牌漏洞修复：检查用户是否已从数据库删除或被禁用
+            if not _verify_user_active():
+                return jsonify(msg='账号已失效（已删除或已禁用），请重新登录'), 401
+
             if not _verify_token_in_redis():
                 return _raise_token_mismatch_error()
 

inventory-backend/app/utils/email_service.py

@@ -118,24 +118,13 @@ def send_email(to_email: Union[str, List[str]], subject: str, content: str):
         logger.error(f"[Email] 发送邮件时发生未知异常: {e}")
 
 
-def send_new_request_notify(to_emails: List[str], request_no: str,
+def send_outbound_new_request_notify(to_emails: List[str], request_no: str,
                              applicant_name: str = '', remark: str = '',
                              items: list = None, is_applicant_notify: bool = False):
     """
     通知审批人有新的出库申请单待审批（可附带物料清单）
     或通知申请人其申请已提交（is_applicant_notify=True 时）
-
-    Args:
-        to_emails:      审批人邮箱列表
-        request_no:     审批单号
-        applicant_name: 申请人姓名
-        remark:         申请备注
-        items:          物料明细列表（可选）
-        is_applicant_notify: True=通知申请人（标题：您的出库申请已提交），False=通知审批人（标题：您有一笔新的出库审批待处理）
     """
-    print(f"[DEBUG send_new_request_notify] 入参 items={items}, is_applicant_notify={is_applicant_notify}")
-
-    # 拼装物料表格
     rows = []
     rows.append("名称 | 规格 | 计划数量")
     rows.append("-" * 40)
@@ -194,21 +183,78 @@ https://172.16.0.198/outbound/approval
     send_email(to_emails, subject, content)
 
 
-def send_approval_result_notify(to_emails: List[str], request_no: str,
+def send_borrow_new_request_notify(to_emails: List[str], request_no: str,
+                             applicant_name: str = '', remark: str = '',
+                             items: list = None, is_applicant_notify: bool = False):
+    """
+    通知审批人有新的借库申请单待审批（可附带物料清单）
+    或通知申请人其申请已提交（is_applicant_notify=True 时）
+    """
+    rows = []
+    rows.append("名称 | 规格 | 计划数量")
+    rows.append("-" * 40)
+    if items:
+        for item in items:
+            name = item.get('name', '-') or '-'
+            spec = item.get('spec_model', '-') or '-'
+            qty  = item.get('quantity', '-') or '-'
+            rows.append(f"{name} | {spec} | {qty}")
+    else:
+        rows.append("(无物料明细)")
+
+    if is_applicant_notify:
+        subject = f"【已提交】您的借库申请单 {request_no} 已提交"
+        content = f"""您好，
+
+您的借库申请单 {request_no} 已成功提交，等待审批。
+
+  申请单号：{request_no}
+  申请人：{applicant_name or '未知'}
+  备注说明：{remark or '无'}
+
+物料清单如下：
+{chr(10).join(rows)}
+
+---
+您可以点击下方链接查看申请状态：
+https://172.16.0.198/operation/borrow_apply
+---
+
+此邮件由系统自动发送，请勿回复。
+"""
+    else:
+        subject = f"【待审批】借库申请单 {request_no}"
+        content = f"""您好，
+
+您有一笔新的借库审批申请待处理：
+
+  申请单号：{request_no}
+  申请人：{applicant_name or '未知'}
+  备注说明：{remark or '无'}
+
+物料清单如下：
+{chr(10).join(rows)}
+
+---
+⚡ 快速通道：
+请点击下方链接直接进入系统审批：
+https://172.16.0.198/operation/borrow_approval
+---
+
+请登录仓库管理系统进行审批。
+
+此邮件由系统自动发送，请勿回复。
+"""
+    send_email(to_emails, subject, content)
+
+
+def send_outbound_approval_result_notify(to_emails: List[str], request_no: str,
                                  is_passed: bool, reject_reason: str = '',
                                  applicant_name: str = ''):
     """
-    通知审批结果
-
-    Args:
-        to_emails:     收件人邮箱列表
-        request_no:    审批单号
-        is_passed:     是否通过（通过时发给库管，驳回时发给申请人）
-        reject_reason: 驳回原因（仅 is_passed=False 时使用）
-        applicant_name: 申请人姓名（仅驳回通知时使用）
+    通知出库审批结果
     """
     if is_passed:
-        # ★ 发给申请人：告知已通过，去领料
         subject = f"【已通过】出库申请单 {request_no}"
         content = f"""{"尊敬的 " + applicant_name + "，您好" if applicant_name else "您好"}，
 
@@ -219,7 +265,6 @@ def send_approval_result_notify(to_emails: List[str], request_no: str,
 此邮件由系统自动发送，请勿回复。
 """
     else:
-        # ★ 发给申请人：告知被驳回
         subject = f"【已驳回】出库申请单 {request_no}"
         content = f"""{"尊敬的 " + applicant_name + "，您好" if applicant_name else "您好"}，
 
@@ -234,19 +279,43 @@ def send_approval_result_notify(to_emails: List[str], request_no: str,
     send_email(to_emails, subject, content)
 
 
-def send_warehouse_dispatch_notify(to_emails: List[str], request_no: str,
+def send_borrow_approval_result_notify(to_emails: List[str], request_no: str,
+                                 is_passed: bool, reject_reason: str = '',
+                                 applicant_name: str = ''):
+    """
+    通知借库审批结果
+    """
+    if is_passed:
+        subject = f"【已通过】借库申请单 {request_no}"
+        content = f"""{"尊敬的 " + applicant_name + "，您好" if applicant_name else "您好"}，
+
+您的借库申请单 {request_no} 已审批通过，请前往仓库扫码借出。
+
+请登录仓库管理系统查看详情。
+
+此邮件由系统自动发送，请勿回复。
+"""
+    else:
+        subject = f"【已驳回】借库申请单 {request_no}"
+        content = f"""{"尊敬的 " + applicant_name + "，您好" if applicant_name else "您好"}，
+
+借库申请单 {request_no} 已被审批驳回。
+
+驳回原因：{reject_reason or '未填写'}
+
+请登录仓库管理系统查看详情，并根据驳回原因调整后重新提交申请。
+
+此邮件由系统自动发送，请勿回复。
+"""
+    send_email(to_emails, subject, content)
+
+
+def send_outbound_dispatch_notify(to_emails: List[str], request_no: str,
                                    applicant_name: str = '', items: list = None):
     """
     通知库管备货出库（包含完整物料清单）
-
-    Args:
-        to_emails:      库管邮箱列表
-        request_no:     审批单号
-        applicant_name: 申请人姓名
-        items:          物料明细列表，每个元素包含 name/spec_model/warehouse_location/quantity
     """
-    print(f"[DEBUG send_warehouse_dispatch_notify] 入参 items={items}")
-    print(f"[DEBUG send_warehouse_dispatch_notify] items 类型={type(items)}, 长度={len(items) if items else 0}")
+    print(f"[DEBUG send_outbound_dispatch_notify] 入参 items={items}")
 
     rows = []
     rows.append("名称 | 规格 | 库位 | 计划数量")
@@ -275,4 +344,39 @@ def send_warehouse_dispatch_notify(to_emails: List[str], request_no: str,
 此邮件由系统自动发送，请勿回复。
 """
     send_email(to_emails, subject, content)
-    print(f"DEBUG: 准备向服务器提交发信请求，收件人: {to_emails}")
+
+
+def send_borrow_dispatch_notify(to_emails: List[str], request_no: str,
+                                   applicant_name: str = '', items: list = None):
+    """
+    通知库管备货借库（包含完整物料清单）
+    """
+    print(f"[DEBUG send_borrow_dispatch_notify] 入参 items={items}")
+
+    rows = []
+    rows.append("名称 | 规格 | 库位 | 计划数量")
+    rows.append("-" * 50)
+    if items:
+        for item in items:
+            name = item.get('name', '-') or '-'
+            spec = item.get('spec_model', '-') or '-'
+            loc  = item.get('warehouse_location', '-') or '-'
+            qty  = item.get('quantity', '-') or '-'
+            rows.append(f"{name} | {spec} | {loc} | {qty}")
+    else:
+        rows.append("(无物料明细)")
+
+    subject = f"【待借库】借库申请单 {request_no} 已审批通过"
+    content = f"""您好，
+
+借库申请单 {request_no} 已审批通过，请按以下清单准备备货：
+
+{chr(10).join(rows)}
+
+申请人：{applicant_name or '未知'}
+
+请登录仓库管理系统执行"扫码借库"操作。
+
+此邮件由系统自动发送，请勿回复。
+"""
+    send_email(to_emails, subject, content)

inventory-backend/app/utils/executor.py

@@ -0,0 +1,25 @@
+import atexit
+import logging
+from concurrent.futures import ThreadPoolExecutor
+
+logger = logging.getLogger(__name__)
+
+# 全局初始化线程池
+_executor = ThreadPoolExecutor(max_workers=4, thread_name_prefix='image_embedding_')
+
+def run_embedding_task(fn, *args, **kwargs):
+    """
+    提交后台任务到线程池
+    """
+    logger.info("Submitting embedding task to background thread...")
+    return _executor.submit(fn, *args, **kwargs)
+
+def _shutdown_executor():
+    """
+    优雅关闭线程池，在 Gunicorn worker 退出时触发
+    """
+    logger.info("Shutting down background thread pool...")
+    _executor.shutdown(wait=False)
+
+# 注册到系统退出事件，这样就不会报 _shutdown not defined 了
+atexit.register(_shutdown_executor)

inventory-backend/requirements.txt

@@ -10,6 +10,12 @@ flask-cors==4.0.0
 redis==5.0.1
 # 图片处理核心库
 Pillow>=10.0.0
+# OpenCV（背景去除、HSV色彩空间抠图）
+opencv-python-headless>=4.8.0
+# ONNX 模型本地 CPU 推理
+onnxruntime>=1.16.0
+# 数值计算（ONNX 推理依赖）
+numpy>=1.24.0
 # [旧] 条形码生成库 (建议保留，防止旧代码报错)
 python-barcode>=0.14.0
 # [新增] 二维码生成库 (标签打印必需，包含PIL支持)
@@ -21,4 +27,8 @@ openpyxl>=3.1.2
 # [新增] 定时任务调度器 (库存预警每日邮件)
 APScheduler==3.10.4
 # [新增] 时区处理 (APScheduler 需要)
-pytz
+pytz
+# [新增] 进度条库 (脚本和任务所需)
+tqdm>=4.66.0
+# [新增] pgvector 向量数据库支持（以图搜图 / 实时向量提取）
+pgvector>=0.2.0

inventory-backend/scripts/init_all_vectors.py

@@ -0,0 +1,231 @@
+# -*- coding: utf-8 -*-
+from __future__ import annotations
+
+"""
+全量历史图片向量初始化脚本
+
+功能：遍历配置表中所有历史图片字段，批量提取 CLIP 512 维向量并存回数据库。
+用法：python scripts/init_all_vectors.py
+"""
+
+import os
+import json
+import sys
+from datetime import datetime
+from typing import List, Optional
+
+# 将项目根目录加入 Python 路径
+sys.path.insert(0, os.path.join(os.path.dirname(__file__), '..'))
+
+from tqdm import tqdm
+from sqlalchemy import text
+
+# Flask 应用环境
+from app import create_app
+from app.extensions import db
+from app.utils.ai_vision import get_image_embedding, load_clip_model
+
+# ============================================================================
+# 业务配置：表 → 图片字段 → 向量字段 映射 (已全面修复)
+# ============================================================================
+TARGET_TABLES = [
+    # 1. 基础物料
+    {"table": "material_base", "img_col": "product_image", "vec_col": "img_embedding"},
+
+    # 2. 采购入库
+    {"table": "stock_buy", "img_col": "arrival_photo", "vec_col": "arrival_image_embedding"},
+    {"table": "stock_buy", "img_col": "inspection_report", "vec_col": "qc_report_image_embedding"}, # 已修复: qc_report -> inspection_report
+
+    # 3. 半成品入库 (新增)
+    {"table": "stock_semi", "img_col": "arrival_photo", "vec_col": "arrival_image_embedding"},
+    {"table": "stock_semi", "img_col": "quality_report_link", "vec_col": "qc_report_image_embedding"},
+
+    # 4. 成品入库 (新增)
+    {"table": "stock_product", "img_col": "product_photo", "vec_col": "arrival_image_embedding"},
+    {"table": "stock_product", "img_col": "quality_report_link", "vec_col": "qc_report_image_embedding"}
+
+    # 注意：成品入库表还有一个 inspection_report_link，但由于数据库中成品表目前只加了两个向量字段，
+    # 暂不将该字段加入遍历，以免覆盖 quality_report_link 的特征。
+]
+
+# 物理图片根目录（相对于 app 目录的相对路径 ../uploads/）
+APP_DIR = os.path.join(os.path.dirname(__file__), '..', 'app')
+UPLOADS_ROOT = os.path.abspath(os.path.join(APP_DIR, '..', 'uploads'))
+
+
+# ============================================================================
+# 核心工具函数
+# ============================================================================
+
+def parse_img_field(raw_value: str) -> List[str]:
+    """
+    健壮解析图片字段，支持以下格式：
+      - JSON 数组字符串: ["a.jpg", "b.jpg"]
+      - 纯字符串单图片: "a.jpg"
+      - 带 /api/v1/files/ 前缀: ["/api/v1/files/a.jpg"]
+    返回: 提取出的文件名列表
+    """
+    if not raw_value or (isinstance(raw_value, str) and not raw_value.strip()):
+        return []
+
+    try:
+        # 先尝试按 JSON 解析（处理 JSON 数组字符串）
+        parsed = json.loads(raw_value)
+        if isinstance(parsed, list):
+            items = parsed
+        else:
+            items = [parsed]
+    except (json.JSONDecodeError, TypeError):
+        # JSON 解析失败，说明是纯字符串，直接按单图片处理
+        items = [raw_value.strip()]
+
+    filenames = []
+    for item in items:
+        if not item or not isinstance(item, str):
+            continue
+        item = item.strip()
+        if not item:
+            continue
+        # 去掉可能的 /api/v1/files/ 前缀
+        filename = os.path.basename(item)
+        filenames.append(filename)
+
+    return filenames
+
+
+def build_local_path(filename: str) -> str:
+    """
+    将文件名拼装成本地绝对路径
+    """
+    return os.path.join(UPLOADS_ROOT, filename)
+
+
+def extract_first_valid_vector(raw_img_field: str, table_name: str, img_col: str) -> Optional[str]:
+    """
+    读取图片字段，从第一条有效图片提取向量，返回写入 DB 的 JSON 字符串。
+    如果所有图片均失败，返回 None。
+    """
+    filenames = parse_img_field(raw_img_field)
+    if not filenames:
+        return None
+
+    for filename in filenames:
+        local_path = build_local_path(filename)
+
+        if not os.path.exists(local_path):
+            print(f"\033[91m[WARN] {table_name}.{img_col} | 文件不存在: {local_path}\033[0m")
+            continue
+
+        try:
+            vec = get_image_embedding(local_path)
+            if vec is not None:
+                return json.dumps(vec)
+        except Exception as e:
+            print(f"\033[91m[WARN] {table_name}.{img_col} | 推理异常 [{filename}]: {type(e).__name__}: {e}\033[0m")
+            continue
+
+    return None
+
+
+# ============================================================================
+# 主入口
+# ============================================================================
+
+def main():
+    start = datetime.now()
+    total_success = 0
+    total_skip = 0
+
+    print("=" * 60)
+    print("📦  全量历史图片向量初始化")
+    print("=" * 60)
+    print(f"图片目录: {UPLOADS_ROOT}")
+    print(f"待处理表数: {len(TARGET_TABLES)}")
+    print()
+
+    # 1. 初始化 Flask 应用上下文（加载 CLIP 模型）
+    app = create_app()
+    with app.app_context():
+        load_clip_model()
+        print("✅ CLIP 模型加载完成")
+        print()
+
+        # 2. 遍历目标表
+        for config in TARGET_TABLES:
+            table_name = config["table"]
+            img_col = config["img_col"]
+            vec_col = config["vec_col"]
+
+            print(f"正在处理表: {table_name}, 字段: {img_col}")
+
+            # 3. 查询待清洗记录（只选未处理过的）
+            sql = text(f"""
+                SELECT id, {img_col}
+                FROM {table_name}
+                WHERE {img_col} IS NOT NULL 
+                  AND {img_col} != '[]' 
+                  AND ({vec_col} IS NULL)
+            """)
+            rows = db.session.execute(sql).fetchall()
+
+            if not rows:
+                print(f"[{table_name}/{img_col}] ⏭  无待处理记录")
+                continue
+
+            print(f"\n[{table_name}/{img_col}] 📋  待处理: {len(rows)} 条")
+
+            # 4. 逐条处理
+            processed = 0
+            success_count = 0
+
+            for row in tqdm(rows, desc=f"{table_name}/{img_col}", unit="条"):
+                record_id = row[0]
+                raw_img = row[1]
+
+                try:
+                    vec_json = extract_first_valid_vector(raw_img, table_name, img_col)
+                    if vec_json is None:
+                        total_skip += 1
+                        continue
+
+                    # 更新向量字段
+                    update_sql = text(f"""
+                        UPDATE {table_name} SET {vec_col} = :vec_str WHERE id = :id
+                    """)
+                    db.session.execute(update_sql, {"vec_str": vec_json, "id": record_id})
+                    success_count += 1
+
+                    # 每 50 条提交一次
+                    if processed > 0 and processed % 50 == 0:
+                        db.session.commit()
+                        print(f"\n  ✅ 已提交 {processed} 条")
+
+                except Exception as e:
+                    print(f"\n\033[91m[WARN] {table_name}/{img_col} | ID={record_id} 处理异常: {type(e).__name__}: {e}\033[0m")
+                    # 关键：任何异常都不中断，只 continue 下一条
+                    db.session.rollback()
+                    continue
+                finally:
+                    processed += 1
+
+            # 循环结束后补一次 commit（处理未凑满50条的剩余数据）
+            try:
+                db.session.commit()
+            except Exception:
+                db.session.rollback()
+
+            total_success += success_count
+            print(f"[{table_name}/{img_col}] ✅  完成，成功 {success_count} 条 / 跳过 {len(rows) - success_count} 条")
+
+    # 5. 汇总报告
+    elapsed = (datetime.now() - start).total_seconds()
+    print()
+    print("=" * 60)
+    print(f"🏁  全部完成！总计耗时 {elapsed:.1f} 秒")
+    print(f"    ✅ 成功写入向量: {total_success} 条")
+    print(f"    ⏭  无有效图片（跳过）: {total_skip} 条")
+    print("=" * 60)
+
+
+if __name__ == "__main__":
+    main()

inventory-web/.env.development

@@ -1,3 +1,6 @@
 # .env.development
-# 注意：这里必须写你电脑的局域网 IP
-VITE_API_BASE_URL=http://172.16.0.95:8000/api/v1
+# 1. 本地局域网测试用（比如让平板连 192.168.9.33）
+#VITE_API_BASE_URL=http://192.168.9.33:8000/api/v1
+
+# 2. 服务器环境用（推送到服务器前，把上面那行注释掉，这行解开）
+ VITE_API_BASE_URL=http://172.16.0.95:8000/api/v1

inventory-web/index.html

@@ -9,5 +9,125 @@
   <body>
     <div id="app"></div>
     <script type="module" src="/src/main.ts"></script>
+    <script>
+  window.initDifyChatbot = function() {
+    // 【关键】增加保护检查：确保 DOM 已经就绪
+    if (document.readyState === 'loading') {
+      document.addEventListener('DOMContentLoaded', performInit);
+    } else {
+      performInit();
+    }
+  };
+
+  function performInit() {
+    var currentToken = localStorage.getItem('access_token') || localStorage.getItem('token') || '';
+    var username = localStorage.getItem("username") || '';
+
+    if (!currentToken) {
+      console.log('未检测到 Token，暂不加载 Dify');
+      return;
+    }
+
+    // 彻底清理浏览器内存中残留的 Dify 全局对象
+    window.difyChatbot = undefined;
+    delete window.difyChatbot;
+
+    // 清理旧的 DOM 节点
+    var oldScript = document.getElementById('6T0eTgukUEqzK0iW');
+    if (oldScript) oldScript.remove();
+    document.querySelectorAll('[id^="dify-chatbot-"]').forEach(function(el) { el.remove(); });
+
+    // 动态化 user_id，打破 Dify 会话锁定机制
+    var dynamicUserId = username + '_' + currentToken.slice(-8);
+
+    window.difyChatbotConfig = {
+      token: '6T0eTgukUEqzK0iW',
+      baseUrl: 'http://172.16.0.198:8080',
+      inputs: {
+        "user_token": currentToken
+      },
+      systemVariables: {
+        "user_id": dynamicUserId
+      },
+      userVariables: {},
+    };
+
+    // 重新挂载
+    var script = document.createElement('script');
+    script.src = 'http://172.16.0.198:8080/embed.min.js?t=' + new Date().getTime();
+    script.id = '6T0eTgukUEqzK0iW';
+    script.defer = true;
+    document.head.appendChild(script);
+
+    console.log('✅ Dify chatbot 已挂载新会话，当前绑定 ID:', dynamicUserId);
+  }
+</script>
+
+<!--<script-->
+<!--  src="http://172.16.0.198:8080/embed.min.js"-->
+<!--  id="6T0eTgukUEqzK0iW"-->
+<!--  defer>-->
+<!--</script>-->
+
+<style>
+  #dify-chatbot-bubble-button {
+    background-color: #409EFF !important;
+    box-shadow: 0 4px 12px rgba(64, 158, 255, 0.4) !important;
+  }
+
+  /* 变成"独立悬浮窗口" */
+  #dify-chatbot-bubble-window {
+    /* 解除原本锁定在右下角的限制，将其定位在屏幕中间偏左上 */
+    top: 15vh !important;
+    left: 20vw !important;
+    bottom: auto !important;
+    right: auto !important;
+
+    /* 设置初始宽高为半个屏幕左右 */
+    width: 60vw !important;
+    height: 70vh !important;
+
+    border-radius: 12px !important;
+    box-shadow: 0 12px 48px rgba(0, 0, 0, 0.2) !important;
+
+    /* 开启右下角拖拽，并强制留出 16px 的白边给拖拽手柄 */
+    resize: both !important;
+    overflow: hidden !important;
+    padding-bottom: 16px !important;
+    padding-right: 16px !important;
+    background-color: #ffffff !important;
+
+    /* 极限尺寸防崩 */
+    min-width: 300px !important;
+    min-height: 400px !important;
+    max-width: 95vw !important;
+    max-height: 90vh !important;
+  }
+
+  /* 内层 iframe 填满剩余空间，加上圆角更好看 */
+  #dify-chatbot-bubble-window iframe {
+    width: 100% !important;
+    height: 100% !important;
+    border: none !important;
+    border-radius: 8px !important;
+  }
+</style>
+
+<script>
+  document.addEventListener('DOMContentLoaded', function() {
+    document.addEventListener('click', function(event) {
+      var bubbleWindow = document.getElementById('dify-chatbot-bubble-window');
+      var bubbleButton = document.getElementById('dify-chatbot-bubble-button');
+
+      if (bubbleWindow && bubbleButton) {
+        var isWindowOpen = window.getComputedStyle(bubbleWindow).display !== 'none';
+
+        if (isWindowOpen && !bubbleWindow.contains(event.target) && !bubbleButton.contains(event.target)) {
+          bubbleButton.click();
+        }
+      }
+    });
+  });
+</script>
   </body>
-</html>
+</html>

inventory-web/src/App.vue

@@ -20,6 +20,10 @@ onMounted(() => {
   if (userStore.token) {
     userStore.refreshUserPermissions()
   }
+  // 当 Vue 根组件挂载完毕，确保 Dify 图标一定会被加载
+  if (typeof (window as any).initDifyChatbot === 'function') {
+    (window as any).initDifyChatbot()
+  }
 })
 
 // ================================================================
@@ -189,7 +193,8 @@ const handleLogout = () => {
       .then(async () => {
         userStore.logout()
         ElMessage({ type: 'success', message: '已安全退出' })
-        await router.replace('/login')
+        // 直接原生跳转，重置一切
+        window.location.href = '/login'
       })
       .catch(() => {})
 }
@@ -234,7 +239,7 @@ const handleLogout = () => {
     <footer v-if="!isLoginPage" class="app-footer">
       <span class="version-tag">
         <el-icon style="vertical-align: middle; margin-right: 4px"><InfoFilled /></el-icon>
-        当前版本:V3.22
+        当前版本:V3.49
       </span>
     </footer>
 
@@ -246,7 +251,7 @@ const handleLogout = () => {
         v-model="profileDialogVisible"
         title="个人中心"
         width="480px"
-        :close-on-click-modal="!passwordLoading"
+        :close-on-click-modal="false"
         destroy-on-close
         class="profile-dialog"
     >
@@ -326,7 +331,7 @@ const handleLogout = () => {
     </el-dialog>
 
     <!-- 绑定/修改邮箱弹窗 -->
-    <el-dialog v-model="emailDialogVisible" title="绑定/修改邮箱" width="400px" @close="resetEmailForm">
+    <el-dialog v-model="emailDialogVisible" title="绑定/修改邮箱" width="400px" :close-on-click-modal="false" @close="resetEmailForm">
       <el-form :model="emailForm" :rules="emailRules" ref="emailFormRef" label-width="80px">
         <el-form-item label="新邮箱" prop="email">
           <el-input v-model="emailForm.email" placeholder="请输入有效邮箱地址" />

inventory-web/src/api/bom.ts

@@ -42,3 +42,22 @@ export function deleteBom(bomNo: string, version: string) {
         method: 'delete'
     })
 }
+
+// ==========================================
+// BOM 草稿相关接口
+// ==========================================
+
+// 1. 暂存草稿
+export function saveDraft(data: any) {
+  return request({ url: '/v1/bom/draft/save', method: 'post', data })
+}
+
+// 2. 读取草稿详情
+export function getDraftDetail(params: { bom_no: string; version?: string }) {
+  return request({ url: '/v1/bom/draft/detail', method: 'get', params })
+}
+
+// 3. 发布草稿
+export function publishDraft(data: { bom_no: string; version: string }) {
+  return request({ url: '/v1/bom/draft/publish', method: 'post', data })
+}

inventory-web/src/api/common/upload.ts

@@ -3,7 +3,6 @@ import request from '@/utils/request'
 /**
  * 上传文件通用接口
  * @param data File 对象 或 FormData 对象
- * 适配说明：list.vue 中 customUpload 已经封装了 FormData，所以这里支持直接传 FormData
  */
 export function uploadFile(data: File | FormData) {
     let formData: FormData
@@ -11,14 +10,12 @@ export function uploadFile(data: File | FormData) {
     if (data instanceof FormData) {
         formData = data
     } else {
-        // 如果传入的是原始 File 对象，则手动封装
         formData = new FormData()
         // @ts-ignore
         formData.append('file', data)
     }
 
     return request({
-        // 注意：这里 /v1/common/upload 需要与后端 BluePrint 注册的 url_prefix 对应
         url: '/v1/common/upload',
         method: 'post',
         data: formData,
@@ -29,13 +26,71 @@ export function uploadFile(data: File | FormData) {
 }
 
 /**
- * 删除文件通用接口 (新增)
+ * 删除文件通用接口
  * @param filename 文件名 (例如: a1b2c3d4.jpg)
  */
 export function deleteFile(filename: string) {
     return request({
-        // 对应后端路由: @upload_bp.route('/files/<filename>', methods=['DELETE'])
         url: `/v1/common/files/${filename}`,
         method: 'delete'
     })
+}
+
+// ============================================================================
+// 以图搜图 API
+// ============================================================================
+
+/** 以图搜图返回的物料项 */
+export interface ImageSearchItem {
+    product_id: number
+    product_name: string
+    spec_model: string
+    image_url: string
+    similarity: number
+    module_name: string
+    target_id: number
+    business_data: {
+        record_id: number
+        name?: string
+        spec_model?: string
+        sku?: string
+        barcode?: string
+        serial_number?: string
+        batch_number?: string
+        status?: string
+        warehouse_location?: string
+        stock_quantity?: number
+        sale_price?: number
+        common_name?: string
+        category?: string
+        material_type?: string
+        unit?: string
+        module_name: string
+        url: string
+    }
+}
+
+/** 以图搜图响应结构 */
+export interface ImageSearchResponse {
+    code: number
+    msg: string
+    data: ImageSearchItem[]
+}
+
+/**
+ * 以图搜图
+ * @param file 图片文件 (File 对象或 Blob)
+ */
+export function imageSearch(file: File | Blob) {
+    const formData = new FormData()
+    formData.append('file', file)
+
+    return request<ImageSearchResponse>({
+        url: '/v1/common/image-search',
+        method: 'post',
+        data: formData,
+        headers: {
+            'Content-Type': 'multipart/form-data'
+        }
+    })
 }

inventory-web/src/api/inbound/inbound_summary.ts

@@ -17,11 +17,43 @@ export function getInboundSummaryList(params: InboundSummaryQuery) {
     })
 }
 
-export function exportInboundSummary(params: any) {
+// ============================================================
+// 旧版：前端直接处理 Excel blob（已废弃，保留用于参考）
+// ============================================================
+// export function exportInboundSummary(params: any) {
+//     return request({
+//         url: '/v1/inbound/summary/export',
+//         method: 'get',
+//         params,
+//         responseType: 'blob'
+//     })
+// }
+
+// ============================================================
+// 新版：异步导出 API（后端生成 + 轮询任务状态）
+// ============================================================
+
+/**
+ * 提交异步导出任务
+ * POST /api/v1/export/inventory
+ * 返回 { task_id: string }
+ */
+export function submitExportTask(filters: Record<string, any>) {
     return request({
-        url: '/v1/inbound/summary/export',
-        method: 'get',
-        params,
-        responseType: 'blob'
+        url: '/v1/export/inventory',
+        method: 'post',
+        data: filters
+    })
+}
+
+/**
+ * 轮询导出任务状态
+ * GET /api/v1/export/status/<taskId>
+ * 返回 { status: 'processing'|'completed'|'failed', progress: number, url: string, error: string }
+ */
+export function checkExportStatus(taskId: string) {
+    return request({
+        url: `/v1/export/status/${taskId}`,
+        method: 'get'
     })
 }

inventory-web/src/api/inbound/product.ts

@@ -43,11 +43,11 @@ export function searchMaterialBase(keyword: string, page: number = 1) {
 }
 
 // 搜索BOM
-export function searchBom(keyword: string) {
+export function searchBom(keyword: string, parent_spec?: string) {
     return request({
         url: '/inbound/product/search-bom',
         method: 'get',
-        params: { keyword }
+        params: { keyword, parent_spec }
     })
 }
 

inventory-web/src/api/inbound/semi.ts

@@ -45,11 +45,11 @@ export function searchMaterialBase(keyword: string, page: number = 1) {
 }
 
 // 5.5 搜索BOM (新增)
-export function searchBom(keyword: string) {
+export function searchBom(keyword: string, parent_spec?: string) {
     return request({
         url: '/inbound/semi/search-bom',
         method: 'get',
-        params: { keyword }
+        params: { keyword, parent_spec }
     })
 }
 

inventory-web/src/api/material_base.ts

@@ -86,4 +86,12 @@ export function markWarningOrdered(data: { baseId: number; isOrdered: boolean })
         method: 'post',
         data
     })
+}
+
+// 9. 获取计量单位字典 (新增/编辑弹窗下拉历史)
+export function getMaterialUnitsAPI() {
+    return request({
+        url: '/inbound/base/units',
+        method: 'get'
+    })
 }

inventory-web/src/api/transaction.ts

@@ -0,0 +1,194 @@
+import request from '@/utils/request'
+
+// 购物车商品项接口
+export interface CartItem {
+    id: number
+    sku: string
+    name: string
+    spec_model: string
+    source_table: string
+    stock_quantity: number
+    available_quantity: number
+    barcode: string
+    price: number      // 单价
+    out_quantity: number // 本次出库数量
+}
+
+// 提交出库单的数据结构
+export interface OutboundSubmitData {
+    items: Array<{
+        sku: string
+        source_table: string
+        stock_id: number
+        barcode: string
+        quantity: number
+        price: number
+    }>
+    outbound_type: string
+    consumer_name: string
+    operator_name: string
+    signature_path: string // 上传后返回的图片路径
+    remark?: string
+}
+
+export interface ScanResult {
+    id: number
+    sku: string
+    name: string
+    spec_model: string
+    source_table: string // 'stock_buy' | 'stock_product' ...
+    stock_quantity: number
+    available_quantity: number
+    batch_number?: string
+    warehouse_location?: string
+    barcode?: string
+    price?: number // 扫描返回的价格
+}
+
+/**
+ * 根据条码获取库存物品详情
+ * @param barcode 扫描到的条码
+ */
+export function getStockByBarcode(barcode: string) {
+    return request<any, ScanResult>({
+        url: '/v1/outbound/scan',
+        method: 'get',
+        params: { barcode }
+    })
+}
+
+/**
+ * 提交出库单 (批量)
+ */
+export function submitOutbound(data: OutboundSubmitData) {
+    return request({
+        url: '/v1/outbound',
+        method: 'post',
+        data
+    })
+}
+
+/**
+ * 获取出库记录列表
+ */
+export function getOutboundList(params: any) {
+    return request({
+        url: '/v1/outbound',
+        method: 'get',
+        params
+    })
+}
+
+/**
+ * 提交出库申请单（申请人 → 审批流）
+ */
+export function submitOutboundRequest(data: {
+    items: Array<{
+        material_type?: string
+        name: string
+        spec_model: string
+        warehouse_location?: string
+        quantity: number
+    }>
+    remark: string
+}) {
+    return request({
+        url: '/v1/outbound/request',
+        method: 'post',
+        data
+    })
+}
+
+/**
+ * 获取出库审批申请单列表
+ * @param params 支持 status, page, limit
+ */
+export function getApprovalRequestList(params: { status?: number | ''; page?: number; limit?: number }) {
+    return request({
+        url: '/v1/outbound/request',
+        method: 'get',
+        params
+    })
+}
+
+/**
+ * 审批（通过 / 驳回）出库申请单
+ * @param id 审批单ID
+ * @param data action: 'approve' | 'reject'，reject 时需传 reject_reason
+ */
+export function approveRequest(id: number, data: { action: 'approve' | 'reject'; reject_reason?: string }) {
+    return request({
+        url: `/v1/outbound/request/${id}/approve`,
+        method: 'patch',
+        data
+    })
+}
+
+// ==============================================================================
+// 借库审批流 API
+// ==============================================================================
+
+/**
+ * 提交借库申请单（申请人 → 审批流）
+ */
+export function submitBorrowRequest(data: {
+    items: Array<{
+        name: string
+        spec_model: string
+        warehouse_location?: string
+        quantity: number
+    }>
+    remark?: string
+    allowed_approvers?: Array<{ type: string; value: string }>
+    approver_id?: number
+}) {
+    return request({
+        url: '/v1/transactions/borrow/request',
+        method: 'post',
+        data
+    })
+}
+
+/**
+ * 获取借库审批申请单列表
+ * @param params 支持 status, page, limit
+ */
+export function getBorrowApprovalList(params: { status?: number | ''; page?: number; limit?: number }) {
+    return request({
+        url: '/v1/transactions/borrow/request',
+        method: 'get',
+        params
+    })
+}
+
+/**
+ * 审批（通过 / 驳回）借库申请单
+ * @param id 审批单ID
+ * @param data action: 'approve' | 'reject'，reject 时需传 reject_reason
+ */
+export function approveBorrowRequest(id: number, data: { action: 'approve' | 'reject'; reject_reason?: string }) {
+    return request({
+        url: `/v1/transactions/borrow/request/${id}/approve`,
+        method: 'patch',
+        data
+    })
+}
+
+/**
+ * 执行借库扣减（审批通过后调用）
+ * @param data approval_id + 扫码选中的物品 + 借用人信息 + 签名
+ */
+export function dispatchBorrow(data: {
+    approval_id: number
+    items: Array<any>
+    borrower_name: string
+    signature_path: string
+    remark?: string
+    expected_return_time?: string | null
+}) {
+    return request({
+        url: '/v1/transactions/borrow/dispatch',
+        method: 'post',
+        data
+    })
+}

inventory-web/src/components/ImageSearchDialog.vue

@@ -0,0 +1,555 @@
+<template>
+  <el-dialog
+      v-model="visible"
+      title="以图搜图"
+      width="95%"
+      style="max-width: 680px;"
+      destroy-on-close
+      :close-on-click-modal="false"
+      @close="handleClose"
+  >
+    <div class="image-search-body">
+      <!-- 左侧：图片上传 -->
+      <div class="upload-section">
+        <el-upload
+            ref="uploadRef"
+            class="image-uploader"
+            :auto-upload="false"
+            :show-file-list="false"
+            accept="image/*"
+            capture="environment"
+            :on-change="handleFileChange"
+        >
+          <div v-if="!previewUrl" class="upload-placeholder">
+            <el-icon class="upload-icon" :size="48"><Camera /></el-icon>
+            <div class="upload-text">点击拍照或选择图片</div>
+            <div class="upload-hint">支持 jpg/png 格式</div>
+          </div>
+          <div v-else class="preview-wrapper">
+            <img :src="previewUrl" class="preview-image" />
+            <div class="preview-overlay">
+              <el-button size="small" @click.stop="clearImage">重新拍照</el-button>
+            </div>
+          </div>
+        </el-upload>
+
+        <!-- 拍照按钮 -->
+        <el-button
+            v-if="!previewUrl"
+            type="primary"
+            class="camera-btn"
+            @click="openCamera"
+        >
+          <el-icon><VideoCamera /></el-icon>
+          调起摄像头拍照
+        </el-button>
+
+        <div v-if="searching" class="loading-tip">
+          <el-icon class="is-loading"><Loading /></el-icon>
+          <span>正在识别图片并检索...</span>
+        </div>
+      </div>
+
+      <!-- 右侧：搜索结果 -->
+      <div class="result-section">
+        <div v-if="!searched && !searching" class="result-empty">
+          <el-icon :size="40" color="#c0c4cc"><Picture /></el-icon>
+          <p>上传图片后自动检索</p>
+        </div>
+
+        <div v-else-if="searched && results.length === 0" class="result-empty">
+          <el-icon :size="40" color="#c0c4cc"><WarningFilled /></el-icon>
+          <p>未找到相似物料</p>
+          <p class="result-hint">请尝试更换图片</p>
+        </div>
+
+        <div v-else class="result-list">
+          <div
+              v-for="(item, index) in results"
+              :key="item.product_id"
+              class="result-item"
+          >
+            <div class="item-rank">{{ index + 1 }}</div>
+            <div class="item-image">
+              <img
+                  v-if="item.image_url"
+                  :src="fullImageUrl(item.image_url)"
+                  @error="handleImgError($event)"
+              />
+              <div v-else class="image-placeholder">
+                <el-icon :size="24" color="#c0c4cc"><Picture /></el-icon>
+              </div>
+            </div>
+            <div class="item-info">
+              <div class="item-name">{{ item.product_name || '未命名物料' }}</div>
+              <div class="item-spec">{{ item.spec_model || '无规格' }}</div>
+              <div class="item-similarity">
+                <span class="similarity-label">相似度</span>
+                <span class="similarity-value">{{ (item.similarity * 100).toFixed(2) }}%</span>
+              </div>
+            </div>
+            <div class="item-actions">
+              <el-button
+                  type="primary"
+                  size="small"
+                  @click="handleView(item)"
+              >
+                查看详情
+              </el-button>
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <template #footer>
+      <el-button @click="handleClose">关闭</el-button>
+    </template>
+
+    <!-- 拍照弹窗 -->
+    <el-dialog
+        v-model="cameraVisible"
+        title="拍照"
+        width="95%"
+        style="max-width: 480px; height: 80vh; padding: 0;"
+        append-to-body
+        destroy-on-close
+        :close-on-click-modal="false"
+        @close="closeCamera"
+    >
+      <WebRtcCamera
+          @cancel="closeCamera"
+          @photo-submit="handleCameraSubmit"
+      />
+    </el-dialog>
+  </el-dialog>
+</template>
+
+<script setup lang="ts">
+import { ref, watch } from 'vue'
+import { useRouter } from 'vue-router'
+import { Camera, Loading, Picture, WarningFilled, VideoCamera } from '@element-plus/icons-vue'
+import { ElMessage } from 'element-plus'
+import { imageSearch, type ImageSearchItem } from '@/api/common/upload'
+import WebRtcCamera from '@/components/Camera/WebRtcCamera.vue'
+
+const router = useRouter()
+
+interface Props {
+  modelValue: boolean
+}
+
+const props = defineProps<Props>()
+
+const emit = defineEmits<{
+  (e: 'update:modelValue', val: boolean): void
+  (e: 'use', item: ImageSearchItem): void
+  (e: 'view', item: ImageSearchItem): void
+}>()
+
+const visible = ref(props.modelValue)
+const uploadRef = ref()
+const previewUrl = ref('')
+const currentFile = ref<File | null>(null)
+const searching = ref(false)
+const searched = ref(false)
+const results = ref<ImageSearchItem[]>([])
+
+// 拍照相关
+const cameraVisible = ref(false)
+
+watch(() => props.modelValue, (val) => {
+  visible.value = val
+  if (!val) {
+    resetState()
+  }
+})
+
+watch(visible, (val) => {
+  emit('update:modelValue', val)
+})
+
+// 拍照相关方法
+const openCamera = () => {
+  cameraVisible.value = true
+}
+
+const closeCamera = () => {
+  cameraVisible.value = false
+}
+
+const handleCameraSubmit = (file: File) => {
+  // 关闭拍照弹窗
+  closeCamera()
+
+  // 生成预览
+  currentFile.value = file
+  previewUrl.value = URL.createObjectURL(file)
+
+  // 立即触发搜图
+  doSearch(file)
+}
+
+const handleFileChange = (uploadFile: any) => {
+  const file = uploadFile.raw
+  if (!file) return
+
+  // 校验格式
+  const allowedTypes = ['image/jpeg', 'image/png', 'image/gif', 'image/webp', 'image/bmp']
+  if (!allowedTypes.includes(file.type)) {
+    ElMessage.warning('仅支持 jpg/png/gif/webp/bmp 格式')
+    return
+  }
+
+  currentFile.value = file
+  previewUrl.value = URL.createObjectURL(file)
+
+  // 自动触发搜索
+  doSearch(file)
+}
+
+const doSearch = async (file: File) => {
+  if (searching.value) return
+
+  searching.value = true
+  searched.value = false
+  results.value = []
+
+  try {
+    const res = await imageSearch(file)
+    if (res.code === 200) {
+      results.value = res.data || []
+    } else {
+      ElMessage.error(res.msg || '检索失败')
+    }
+  } catch (err: any) {
+    console.error('image search error:', err)
+    ElMessage.error(err.message || '网络错误，请重试')
+  } finally {
+    searching.value = false
+    searched.value = true
+  }
+}
+
+const clearImage = () => {
+  if (previewUrl.value) {
+    URL.revokeObjectURL(previewUrl.value)
+  }
+  previewUrl.value = ''
+  currentFile.value = null
+  results.value = []
+  searched.value = false
+  uploadRef.value?.clearFiles()
+}
+
+const fullImageUrl = (path: string) => {
+  if (!path) return '';
+  return path.startsWith('http') ? path : path;
+}
+
+const handleImgError = (e: Event) => {
+  const img = e.target as HTMLImageElement
+  img.style.display = 'none'
+}
+
+const handleUse = (item: ImageSearchItem) => {
+  emit('use', item)
+  handleClose()
+}
+
+const handleView = (item: ImageSearchItem) => {
+  const biz = item.business_data
+  if (biz?.spec_model) {
+    router.push({ path: '/material/index', query: { keyword: biz.spec_model } })
+  } else if (biz?.url) {
+    router.push(biz.url)
+  } else {
+    ElMessage.warning('无法定位目标页面')
+  }
+  handleClose()
+}
+
+const handleClose = () => {
+  visible.value = false
+}
+
+const resetState = () => {
+  if (previewUrl.value) {
+    URL.revokeObjectURL(previewUrl.value)
+  }
+  previewUrl.value = ''
+  currentFile.value = null
+  searching.value = false
+  searched.value = false
+  results.value = []
+}
+</script>
+
+<style scoped>
+.image-search-body {
+  display: flex;
+  gap: 24px;
+  min-height: 380px;
+}
+
+/* 拍照按钮 */
+.camera-btn {
+  width: 100%;
+  margin-top: 8px;
+}
+
+/* ── 左侧上传区 ── */
+.upload-section {
+  flex: 0 0 220px;
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+}
+
+.image-uploader {
+  width: 100%;
+}
+
+:deep(.el-upload) {
+  width: 100%;
+}
+
+:deep(.el-upload-dragger) {
+  width: 100%;
+  height: 280px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: #fafafa;
+  border: 2px dashed #dcdfe6;
+  border-radius: 8px;
+  transition: border-color 0.2s;
+}
+
+:deep(.el-upload-dragger:hover) {
+  border-color: #409eff;
+}
+
+.upload-placeholder {
+  text-align: center;
+  color: #909399;
+}
+
+.upload-icon {
+  color: #c0c4cc;
+  margin-bottom: 12px;
+}
+
+.upload-text {
+  font-size: 14px;
+  font-weight: 500;
+  margin-bottom: 6px;
+}
+
+.upload-hint {
+  font-size: 12px;
+  color: #c0c4cc;
+}
+
+.preview-wrapper {
+  position: relative;
+  width: 100%;
+  height: 280px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  border-radius: 8px;
+  overflow: hidden;
+}
+
+.preview-image {
+  max-width: 100%;
+  max-height: 100%;
+  object-fit: contain;
+}
+
+.preview-overlay {
+  position: absolute;
+  bottom: 0;
+  left: 0;
+  right: 0;
+  padding: 10px;
+  background: rgba(0, 0, 0, 0.5);
+  text-align: center;
+}
+
+.preview-overlay .el-button {
+  color: #fff;
+  border-color: rgba(255, 255, 255, 0.6);
+}
+
+.loading-tip {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  color: #409eff;
+  font-size: 13px;
+}
+
+/* ── 右侧结果区 ── */
+.result-section {
+  flex: 1;
+  overflow-y: auto;
+}
+
+.result-empty {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  height: 280px;
+  color: #909399;
+  text-align: center;
+}
+
+.result-empty p {
+  margin: 8px 0 0;
+  font-size: 14px;
+}
+
+.result-hint {
+  font-size: 12px !important;
+  color: #c0c4cc;
+}
+
+.result-list {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+}
+
+.result-item {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 10px 12px;
+  background: #f5f7fa;
+  border-radius: 8px;
+  transition: background 0.2s;
+}
+
+.result-item:hover {
+  background: #ecf5ff;
+}
+
+.item-rank {
+  flex: 0 0 24px;
+  width: 24px;
+  height: 24px;
+  background: #409eff;
+  color: #fff;
+  border-radius: 50%;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-size: 12px;
+  font-weight: 700;
+}
+
+.item-image {
+  flex: 0 0 60px;
+  width: 60px;
+  height: 60px;
+  border-radius: 6px;
+  overflow: hidden;
+  background: #fff;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  border: 1px solid #ebeef5;
+}
+
+.item-image img {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+}
+
+.image-placeholder {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.item-info {
+  flex: 1;
+  min-width: 0;
+}
+
+.item-name {
+  font-size: 14px;
+  font-weight: 600;
+  color: #303133;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.item-spec {
+  font-size: 12px;
+  color: #909399;
+  margin-top: 4px;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.item-similarity {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  margin-top: 6px;
+}
+
+.similarity-label {
+  font-size: 12px;
+  color: #909399;
+}
+
+.similarity-value {
+  font-size: 14px;
+  font-weight: 700;
+  color: #67c23a;
+}
+
+.item-actions {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  flex: 0 0 auto;
+}
+
+/* ---- 新增：移动端适配样式 ---- */
+@media screen and (max-width: 768px) {
+  .image-search-body {
+    flex-direction: column;
+    gap: 16px;
+    min-height: auto;
+  }
+
+  .upload-section {
+    flex: none;
+    width: 100%;
+  }
+
+  :deep(.el-upload), :deep(.el-upload-dragger) {
+    height: 160px;
+  }
+
+  .preview-image {
+    max-height: 140px;
+    width: auto;
+    object-fit: contain;
+  }
+
+  .result-section {
+    width: 100%;
+    max-height: 50vh;
+  }
+}
+</style>

inventory-web/src/router/index.ts

@@ -39,17 +39,24 @@ const routes: Array<RouteRecordRaw> = [
         ]
     },
 
-    // 3. 基础信息
+    // 3. 物料管理
     {
         path: '/material',
         component: Layout,
         redirect: '/material/index',
+        meta: { title: '物料管理', icon: 'Box' },
         children: [
             {
                 path: 'index',
                 name: 'MaterialBase',
                 component: () => import('@/views/material/list.vue'),
                 meta: { title: '基础信息', icon: 'Box' }
+            },
+            {
+                path: 'buyOdoo',
+                name: 'BuyOdoo',
+                component: () => import('@/views/material/buyOdoo.vue'),
+                meta: { title: '基础信息(Odoo)', icon: 'Grid' }
             }
         ]
     },
@@ -202,11 +209,17 @@ const routes: Array<RouteRecordRaw> = [
         meta: { title: '借库管理', icon: 'Operation' },
         redirect: '/operation/borrow',
         children: [
+            {
+                path: 'borrow_apply',
+                name: 'BorrowApply',
+                component: () => import('@/views/borrow/apply/index.vue'),
+                meta: { title: '借库选单' }
+            },
             {
                 path: 'borrow',
                 name: 'OpBorrow',
                 component: () => import('@/views/transaction/borrow.vue'),
-                meta: { title: '借库' }
+                meta: { title: '扫码借库' }
             },
             {
                 path: 'repair',
@@ -219,6 +232,16 @@ const routes: Array<RouteRecordRaw> = [
                 name: 'OpRecords',
                 component: () => import('@/views/transaction/records.vue'),
                 meta: { title: '借还记录' }
+            },
+            {
+                path: 'borrow_approval',
+                name: 'BorrowApproval',
+                component: () => import('@/views/borrow/approval/index.vue'),
+                meta: {
+                    title: '借库审批',
+                    icon: 'Stamp',
+                    roles: ['SUPER_ADMIN', 'SUPERVISOR']
+                }
             }
         ]
     },

inventory-web/src/stores/user.ts

@@ -84,6 +84,11 @@ export const useUserStore = defineStore('user', () => {
             localStorage.setItem('refresh_token', data.refresh_token)
         }
 
+        // [Dify] 登录成功，重新初始化 Dify（Token 变化时 Dify 会开辟新会话，解决会话串号问题）
+        if (typeof window.initDifyChatbot === 'function') {
+            window.initDifyChatbot()
+        }
+
         // 登录成功后，根据角色获取权限
         if (role.value) {
             try {
@@ -110,6 +115,11 @@ export const useUserStore = defineStore('user', () => {
     const setToken = (newToken: string) => {
         token.value = newToken
         localStorage.setItem('access_token', newToken)
+
+        // [Dify] Token 刷新后，重新初始化 Dify 以更新用户会话
+        if (typeof window.initDifyChatbot === 'function') {
+            window.initDifyChatbot()
+        }
     }
 
     // 退出逻辑
@@ -123,6 +133,11 @@ export const useUserStore = defineStore('user', () => {
 
         // 2. 清空 LocalStorage (硬盘)
         localStorage.removeItem('access_token')
+
+        // [Dify] 退出登录时，彻底销毁桌面上的 Dify 聊天窗口，防止信息泄露或报错
+        document.querySelectorAll('[id^="dify-chatbot-"]').forEach(el => el.remove())
+
+        // 清空其他本地存储
         localStorage.removeItem('refresh_token')
         localStorage.removeItem('token')
         localStorage.removeItem('role')

inventory-web/src/views/borrow/approval/index.vue

@@ -0,0 +1,365 @@
+<template>
+  <div class="app-container">
+
+    <!-- 顶部工具栏 -->
+    <div class="filter-container">
+      <span style="font-weight: bold; font-size: 15px; margin-right: 8px;">审批状态:</span>
+      <el-radio-group v-model="filterStatus" size="default" @change="handleStatusChange">
+        <el-radio-button label="">全部</el-radio-button>
+        <el-radio-button :label="0">待审批</el-radio-button>
+        <el-radio-button :label="1">已通过</el-radio-button>
+        <el-radio-button :label="2">已驳回</el-radio-button>
+        <el-radio-button :label="3">已完成</el-radio-button>
+      </el-radio-group>
+      <el-button type="primary" :icon="Refresh" @click="fetchData">刷新</el-button>
+    </div>
+
+    <!-- 数据表格 -->
+    <el-table
+        v-loading="loading"
+        :data="list"
+        border
+        stripe
+        style="margin-top: 16px;"
+        row-key="id"
+        :expand-row-keys="expandedRows"
+        @expand-change="handleExpandChange"
+    >
+      <!-- 展开行 -->
+      <el-table-column type="expand" width="60" align="center">
+        <template #default="{ row }">
+          <div style="padding: 12px 24px; background: #f5f7fa;">
+            <p style="margin: 0 0 10px 0; font-weight: bold; font-size: 13px; color: #606266;">
+              物料明细（共 {{ row.items?.length || 0 }} 项）
+            </p>
+            <el-table
+                v-if="row.items?.length"
+                :data="row.items"
+                border
+                size="small"
+                style="width: 100%;"
+            >
+              <el-table-column type="index" label="序号" width="60" align="center" />
+              <el-table-column prop="name" label="名称" min-width="140" show-overflow-tooltip />
+              <el-table-column prop="spec_model" label="规格型号" min-width="120" show-overflow-tooltip />
+              <el-table-column prop="warehouse_location" label="库位" width="120" show-overflow-tooltip />
+              <el-table-column prop="quantity" label="计划数量" width="100" align="center">
+                <template #default="{ row: item }">
+                  <span style="color: #F56C6C; font-weight: bold;">{{ item.quantity ?? '-' }}</span>
+                </template>
+              </el-table-column>
+            </el-table>
+            <el-empty v-else description="暂无物料明细" :image-size="60" />
+          </div>
+        </template>
+      </el-table-column>
+
+      <el-table-column prop="request_no" label="申请单号" width="180">
+        <template #default="{ row }">
+          <el-link type="primary" :underline="false" @click="toggleExpand(row)">
+            {{ row.request_no }}
+          </el-link>
+        </template>
+      </el-table-column>
+
+      <el-table-column label="申请人" width="140">
+        <template #default="{ row }">
+          {{ getApplicantName(row.applicant_id) }}
+        </template>
+      </el-table-column>
+
+      <el-table-column prop="remark" label="申请原因" min-width="180" show-overflow-tooltip />
+
+      <el-table-column label="物料种类" width="100" align="center">
+        <template #default="{ row }">
+          <el-tag size="small" type="info">{{ row.items?.length || 0 }} 种</el-tag>
+        </template>
+      </el-table-column>
+
+      <el-table-column prop="created_at" label="申请时间" width="170" />
+
+      <el-table-column label="状态" width="100" align="center">
+        <template #default="{ row }">
+          <el-tag :type="statusTagType(row.status)" size="small">
+            {{ statusText(row.status) }}
+          </el-tag>
+        </template>
+      </el-table-column>
+
+      <el-table-column label="审批信息" width="180">
+        <template #default="{ row }">
+          <template v-if="row.status === 1">
+            <span style="color: #67C23A;">{{ getApproverName(row.actual_approver_id) }}</span>
+            <br />
+            <span style="font-size: 12px; color: #909399;">{{ row.approved_at || '' }}</span>
+          </template>
+          <template v-else-if="row.status === 2">
+            <span style="color: #F56C6C;">已驳回</span>
+            <el-tooltip v-if="row.reject_reason" :content="row.reject_reason" placement="top">
+              <el-icon style="margin-left: 4px; cursor: pointer;"><Warning /></el-icon>
+            </el-tooltip>
+          </template>
+          <template v-else-if="row.status === 3">
+            <span style="color: #909399;">{{ getApproverName(row.actual_approver_id) }}</span>
+          </template>
+          <span v-else style="color: #c0c4cc;">-</span>
+        </template>
+      </el-table-column>
+
+      <el-table-column label="操作" width="180" fixed="right" align="center">
+        <template #default="{ row }">
+          <template v-if="row.status === 0">
+            <el-button
+                v-if="userStore.hasPermission('borrow_approval:operation')"
+                type="success"
+                size="small"
+                :loading="row._approving"
+                @click="handleApprove(row)"
+            >
+              通过
+            </el-button>
+            <el-button
+                v-if="userStore.hasPermission('borrow_approval:operation')"
+                type="danger"
+                size="small"
+                :loading="row._approving"
+                @click="openRejectDialog(row)"
+            >
+              驳回
+            </el-button>
+          </template>
+          <span v-else style="color: #c0c4cc;">-</span>
+        </template>
+      </el-table-column>
+    </el-table>
+
+    <!-- 分页 -->
+    <el-pagination
+        background
+        style="margin-top: 16px; justify-content: flex-end; display: flex;"
+        v-model:current-page="page"
+        v-model:page-size="pageSize"
+        :total="total"
+        :page-sizes="[10, 20, 50, 100]"
+        layout="total, prev, pager, next, sizes"
+        @size-change="handleSizeChange"
+        @current-change="handlePageChange"
+    />
+
+    <!-- 驳回原因 Dialog -->
+    <el-dialog v-model="rejectDialogVisible" title="驳回申请" width="480px" destroy-on-close>
+      <el-form label-width="80px">
+        <el-form-item label="申请单号">
+          <span style="font-weight: bold; color: #409EFF;">{{ currentRejectRow?.request_no }}</span>
+        </el-form-item>
+        <el-form-item label="驳回原因" required>
+          <el-input
+              v-model="rejectReason"
+              type="textarea"
+              :rows="4"
+              placeholder="请填写驳回原因（必填）"
+              maxlength="200"
+              show-word-limit
+          />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="rejectDialogVisible = false">取消</el-button>
+        <el-button type="danger" :loading="rejectLoading" @click="confirmReject">确认驳回</el-button>
+      </template>
+    </el-dialog>
+
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, onMounted } from 'vue'
+import { Refresh, Warning } from '@element-plus/icons-vue'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import { getBorrowApprovalList, approveBorrowRequest } from '@/api/transaction'
+import { useUserStore } from '@/stores/user'
+
+const userStore = useUserStore()
+
+// --- 状态 ---
+const list = ref<any[]>([])
+const loading = ref(false)
+const total = ref(0)
+const page = ref(1)
+const pageSize = ref(20)
+const filterStatus = ref<number | ''>(0)  // 默认筛选待审批
+const expandedRows = ref<string[]>([])
+
+// 驳回 Dialog
+const rejectDialogVisible = ref(false)
+const currentRejectRow = ref<any>(null)
+const rejectReason = ref('')
+const rejectLoading = ref(false)
+
+// 申请人 / 审批人名称缓存
+const userNameCache = ref<Record<number, string>>({})
+
+// --- 工具函数 ---
+const statusText = (status: number) => {
+  const map: Record<number, string> = {
+    0: '待审批', 1: '已通过', 2: '已驳回', 3: '已完成'
+  }
+  return map[status] ?? '-'
+}
+
+const statusTagType = (status: number) => {
+  const map: Record<number, string> = {
+    0: 'warning', 1: 'success', 2: 'danger', 3: 'info'
+  }
+  return map[status] ?? 'info'
+}
+
+const getApplicantName = (id: number | null) => {
+  if (!id) return '-'
+  return userNameCache.value[id] ?? `用户 #${id}`
+}
+
+const getApproverName = (id: number | null) => {
+  if (!id) return '-'
+  return userNameCache.value[id] ?? `用户 #${id}`
+}
+
+// --- 展开行 ---
+const toggleExpand = (row: any) => {
+  const idx = expandedRows.value.indexOf(row.id)
+  if (idx > -1) {
+    expandedRows.value.splice(idx, 1)
+  } else {
+    expandedRows.value.push(row.id)
+  }
+}
+
+const handleExpandChange = () => {}
+
+// --- 数据获取 ---
+const fetchData = async () => {
+  loading.value = true
+  try {
+    const params: any = {
+      page: page.value,
+      limit: pageSize.value
+    }
+    if (filterStatus.value !== '') {
+      params.status = filterStatus.value
+    }
+
+    const res: any = await getBorrowApprovalList(params)
+
+    const records = res.data?.items || []
+    records.forEach((r: any) => {
+      if (r.applicant_id && !userNameCache.value[r.applicant_id]) {
+        if (r.applicant_name) {
+          userNameCache.value[r.applicant_id] = r.applicant_name
+        }
+      }
+      if (r.actual_approver_id && !userNameCache.value[r.actual_approver_id]) {
+        if (r.approver_name) {
+          userNameCache.value[r.actual_approver_id] = r.approver_name
+        }
+      }
+      r._approving = false
+    })
+
+    list.value = records
+    total.value = res.data?.total || records.length || 0
+  } catch (err: any) {
+    ElMessage.error(err?.msg || '加载审批列表失败')
+  } finally {
+    loading.value = false
+  }
+}
+
+// --- 筛选 ---
+const handleStatusChange = () => {
+  page.value = 1
+  expandedRows.value = []
+  fetchData()
+}
+
+// --- 分页 ---
+const handlePageChange = (p: number) => {
+  page.value = p
+  fetchData()
+}
+
+const handleSizeChange = (s: number) => {
+  pageSize.value = s
+  page.value = 1
+  fetchData()
+}
+
+// --- 审批操作 ---
+const handleApprove = async (row: any) => {
+  try {
+    await ElMessageBox.confirm(
+        `确定要通过借库申请单 【${row.request_no}】 吗？`,
+        '审批确认',
+        { confirmButtonText: '确定通过', cancelButtonText: '取消', type: 'info' }
+    )
+  } catch {
+    return
+  }
+
+  row._approving = true
+  try {
+    await approveBorrowRequest(row.id, { action: 'approve' })
+    ElMessage.success(`申请单 ${row.request_no} 已通过`)
+    await fetchData()
+  } catch (err: any) {
+    ElMessage.error(err?.msg || '审批操作失败')
+  } finally {
+    row._approving = false
+  }
+}
+
+const openRejectDialog = (row: any) => {
+  currentRejectRow.value = row
+  rejectReason.value = ''
+  rejectDialogVisible.value = true
+}
+
+const confirmReject = async () => {
+  const reason = rejectReason.value.trim()
+  if (!reason) {
+    ElMessage.warning('请填写驳回原因')
+    return
+  }
+
+  rejectLoading.value = true
+  try {
+    await approveBorrowRequest(currentRejectRow.value.id, {
+      action: 'reject',
+      reject_reason: reason
+    })
+    ElMessage.success(`申请单 ${currentRejectRow.value.request_no} 已驳回`)
+    rejectDialogVisible.value = false
+    await fetchData()
+  } catch (err: any) {
+    ElMessage.error(err?.msg || '驳回操作失败')
+  } finally {
+    rejectLoading.value = false
+  }
+}
+
+// --- 初始化 ---
+onMounted(() => {
+  fetchData()
+})
+</script>
+
+<style scoped>
+.app-container {
+  padding: 20px;
+}
+.filter-container {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  flex-wrap: wrap;
+}
+</style>

inventory-web/src/views/login/index.vue

@@ -80,12 +80,9 @@ const onLogin = async () => {
         const success = await userStore.handleLogin(loginForm)
 
         if (success) {
-          // [新增] 2. 登录成功后，立即拉取当前用户的权限字典
-          // 这样进入 Dashboard 时，所有按钮/列的显示状态就已经确定了
           await permissionStore.loadPermissions()
-
-          // 3. 跳转
-          router.push('/dashboard')
+          // 直接跳转并触发完整页面重载，干净重置 Dify Embed Token
+          window.location.href = '/dashboard'
         } else {
           // 失败（业务逻辑拒绝）：弹出模态框
           showLoginFailAlert('用户名或密码错误')

inventory-web/src/views/material/list.vue

@@ -14,7 +14,7 @@
               <el-select v-model="queryParams.searchField" style="width: 90px" @change="handleQuery">
                 <el-option label="全部" value="all" />
                 <el-option label="名称" value="name" />
-                <el-option label="俗名" value="common_name" />
+                <el-option label="专业名称" value="common_name" />
                 <el-option label="规格" value="spec" />
               </el-select>
             </template>
@@ -32,19 +32,16 @@
             <el-option v-for="item in companyOptions" :key="item" :label="item" :value="item" />
           </el-select>
 
-          <el-select
-              v-model="queryParams.category"
+          <el-cascader
+              v-model="searchCategoryPath"
+              :options="categoryTreeOptions"
+              :props="{ checkStrictly: true }"
               placeholder="类别"
               clearable
               filterable
-              allow-create
-              default-first-option
               style="width: 240px; margin-right: 10px;"
               @change="handleQuery"
-              popper-class="long-dropdown"
-          >
-            <el-option v-for="item in categoryOptions" :key="item" :label="item" :value="item" />
-          </el-select>
+          />
 
           <el-select
               v-model="queryParams.type"
@@ -84,6 +81,9 @@
 
           <el-button type="primary" plain @click="handleQuery">搜索</el-button>
           <el-button plain @click="resetQuery">重置</el-button>
+          <el-button type="primary" plain @click="imageSearchVisible = true">
+            <el-icon style="margin-right: 5px"><Picture /></el-icon>拍照识图
+          </el-button>
           <el-popover
               v-model:visible="advancedFilterVisible"
               placement="bottom"
@@ -168,21 +168,31 @@
               <el-button circle :icon="Setting" style="margin-left: 8px" title="列设置" />
             </template>
             <div class="column-setting-list">
-              <div style="font-weight: bold; margin-bottom: 5px; border-bottom: 1px solid #eee; padding-bottom: 5px">
-                列展示设置
+              <div style="display: flex; justify-content: space-between; align-items: center; font-weight: bold; margin-bottom: 5px; border-bottom: 1px solid #eee; padding-bottom: 5px">
+                <span>列展示设置</span>
+                <el-checkbox
+                  :model-value="isAllSelected"
+                  :indeterminate="isIndeterminate"
+                  @change="handleCheckAllChange"
+                >
+                  全选
+                </el-checkbox>
               </div>
-              <el-checkbox v-model="columns.id.visible" label="ID" />
-              <el-checkbox v-model="columns.companyName.visible" label="所属公司" />
-              <el-checkbox v-model="columns.name.visible" label="名称" />
-              <el-checkbox v-model="columns.commonName.visible" label="俗名" />
-              <el-checkbox v-model="columns.category.visible" label="类别" />
-              <el-checkbox v-model="columns.type.visible" label="类型" />
-              <el-checkbox v-model="columns.spec.visible" label="规格型号" />
-              <el-checkbox v-model="columns.unit.visible" label="单位" />
-              <el-checkbox v-model="columns.inventory.visible" label="库存数" />
-              <el-checkbox v-model="columns.available.visible" label="可用数" />
-              <el-checkbox v-model="columns.files.visible" label="资料" />
-              <el-checkbox v-model="columns.isEnabled.visible" label="状态" />
+
+              <el-checkbox v-if="hasColPermission('id')" v-model="columns.id.visible" label="ID" />
+              <el-checkbox v-if="hasColPermission('companyName')" v-model="columns.companyName.visible" label="所属公司" />
+              <el-checkbox v-if="hasColPermission('name')" v-model="columns.name.visible" label="名称" />
+              <el-checkbox v-if="hasColPermission('commonName')" v-model="columns.commonName.visible" label="专业名称" />
+              <el-checkbox v-if="hasColPermission('category')" v-model="columns.category.visible" label="类别" />
+              <el-checkbox v-if="hasColPermission('type')" v-model="columns.type.visible" label="类型" />
+              <el-checkbox v-if="hasColPermission('spec')" v-model="columns.spec.visible" label="规格型号" />
+              <el-checkbox v-if="hasColPermission('unit')" v-model="columns.unit.visible" label="单位" />
+              <el-checkbox v-if="hasColPermission('inventory')" v-model="columns.inventory.visible" label="库存数" />
+              <el-checkbox v-if="hasColPermission('available')" v-model="columns.available.visible" label="可用数" />
+              <el-checkbox v-if="hasColPermission('files')" v-model="columns.files.visible" label="资料" />
+              <el-checkbox v-if="hasColPermission('isEnabled')" v-model="columns.isEnabled.visible" label="状态" />
+              <el-checkbox v-if="hasColPermission('isInspectionRequired')" v-model="columns.isInspectionRequired.visible" label="强制质检" />
+              <el-checkbox v-if="hasColPermission('warningStatus')" v-model="columns.warningStatus.visible" label="预警状态" />
             </div>
           </el-popover>
         </div>
@@ -212,7 +222,7 @@
 
         <el-table-column v-if="columns.name.visible" prop="name" label="名称" min-width="160" show-overflow-tooltip sortable="custom" />
 
-        <el-table-column v-if="columns.commonName.visible" prop="commonName" label="俗名" min-width="140" show-overflow-tooltip sortable="custom">
+        <el-table-column v-if="columns.commonName.visible" prop="commonName" label="专业名称" min-width="140" show-overflow-tooltip sortable="custom">
           <template #default="scope">
             <span v-if="scope.row.commonName">{{ scope.row.commonName }}</span>
             <span v-else style="color: #ccc;">-</span>
@@ -249,6 +259,7 @@
                     :src="getImageUrl(getImagesOnly(row.generalImage)[0])"
                     :preview-src-list="getImagesOnly(row.generalImage).map(u => getImageUrl(u))"
                     preview-teleported
+                    hide-on-click-modal
                     fit="cover"
                 />
                 <span v-if="getImagesOnly(row.generalImage).length > 1" class="more-badge">+{{getImagesOnly(row.generalImage).length}}</span>
@@ -267,6 +278,7 @@
                         :preview-src-list="row.generalManual.filter(l => !isExternalLink(l) && isImageFile(l)).map(u => getImageUrl(u))"
                         fit="cover"
                         preview-teleported
+                        hide-on-click-modal
                     />
                     <span style="font-size: 12px; color: #999;">图片 {{idx+1}}</span>
                   </div>
@@ -303,7 +315,7 @@
             </el-tag>
           </template>
         </el-table-column>
-        <el-table-column v-if="userStore.hasPermission('material_list:view_warning')" label="预警状态" width="120" align="center">
+        <el-table-column v-if="columns.warningStatus.visible" label="预警状态" width="120" align="center">
           <template #default="{ row }">
             <template v-if="row.warningStatus === 2">
               <el-tag type="danger" size="small">红色预警</el-tag>
@@ -336,7 +348,7 @@
         <el-pagination
             v-model:current-page="queryParams.pageNum"
             v-model:page-size="queryParams.pageSize"
-            :page-sizes="[10, 20, 50, 100]"
+            :page-sizes="[50, 100, 200, 500]"
             :background="true"
             layout="total, sizes, prev, pager, next, jumper"
             :total="total"
@@ -351,22 +363,33 @@
           append-to-body
           destroy-on-close
           @close="cancel"
-          :close-on-click-modal="!isUploading"
+          :close-on-click-modal="false"
           :close-on-press-escape="!isUploading"
           :show-close="!isUploading"
       >
         <template #header>
           <div style="display: flex; align-items: center; justify-content: space-between; padding-right: 20px;">
             <span style="font-size: 18px; font-weight: 500;">{{ dialog.title }}</span>
-            <el-link
-                v-if="form.id"
-                type="success"
-                :underline="false"
-                style="font-size: 14px;"
-                @click="createBomForMaterial"
-            >
-              <el-icon style="margin-right: 4px"><Plus /></el-icon>加入或查看BOM
-            </el-link>
+            <div style="display: flex; align-items: center; gap: 16px;">
+              <el-link
+                  v-if="form.id"
+                  type="primary"
+                  :underline="false"
+                  style="font-size: 14px;"
+                  @click="handleSaveAs"
+              >
+                <el-icon style="margin-right: 4px"><DocumentCopy /></el-icon>另存为新项
+              </el-link>
+              <el-link
+                  v-if="form.id"
+                  type="success"
+                  :underline="false"
+                  style="font-size: 14px;"
+                  @click="createBomForMaterial"
+              >
+                <el-icon style="margin-right: 4px"><Plus /></el-icon>加入或查看BOM
+              </el-link>
+            </div>
           </div>
         </template>
         <el-form ref="formRef" :model="form" :rules="rules" label-width="110px">
@@ -378,7 +401,7 @@
               </el-form-item>
             </el-col>
             <el-col :span="12">
-              <el-form-item label="俗名" prop="commonName" v-if="hasFieldPermission('commonName')">
+              <el-form-item label="专业名称" prop="commonName" v-if="hasFieldPermission('commonName')">
                 <el-input v-model="form.commonName" placeholder="标准名称" />
               </el-form-item>
             </el-col>
@@ -397,6 +420,20 @@
               </el-form-item>
             </el-col>
             <el-col :span="12">
+              <el-form-item label="类型" prop="type" v-if="hasFieldPermission('type')">
+                <el-autocomplete
+                    v-model="form.type"
+                    :fetch-suggestions="querySearchType"
+                    placeholder="可输入或选择"
+                    clearable
+                    style="width: 100%"
+                />
+              </el-form-item>
+            </el-col>
+          </el-row>
+
+          <el-row>
+            <el-col :span="24">
               <el-form-item label="类别" prop="category" v-if="hasFieldPermission('category')">
                 <div style="display: flex; width: 100%; align-items: center;">
                   <el-cascader
@@ -418,26 +455,6 @@
                       style="width: 50%;"
                   />
                 </div>
-
-              </el-form-item>
-            </el-col>
-          </el-row>
-
-          <el-row>
-            <el-col :span="12">
-              <el-form-item label="类型" prop="type" v-if="hasFieldPermission('type')">
-                <el-autocomplete
-                    v-model="form.type"
-                    :fetch-suggestions="querySearchType"
-                    placeholder="可输入或选择"
-                    clearable
-                    style="width: 100%"
-                />
-              </el-form-item>
-            </el-col>
-            <el-col :span="12">
-              <el-form-item label="规格型号" prop="spec" v-if="hasFieldPermission('spec')">
-                <el-input v-model="form.spec" placeholder="请输入规格型号" />
               </el-form-item>
             </el-col>
           </el-row>
@@ -445,13 +462,26 @@
           <el-row>
             <el-col :span="12">
               <el-form-item label="计量单位" prop="unit" v-if="hasFieldPermission('unit')">
-                <el-input v-model="form.unit" placeholder="如: 个, 台, 米" />
+                <el-select
+                    v-model="form.unit"
+                    filterable
+                    allow-create
+                    default-first-option
+                    placeholder="请选择或输入计量单位"
+                    style="width: 100%"
+                >
+                  <el-option
+                      v-for="item in unitOptions"
+                      :key="item"
+                      :label="item"
+                      :value="item"
+                  />
+                </el-select>
               </el-form-item>
             </el-col>
             <el-col :span="12">
-              <el-form-item label="可见等级" prop="visibilityLevel">
-                <el-input-number v-model="form.visibilityLevel" :min="0" :max="9" label="等级" />
-                <span style="margin-left: 10px; color: #999; font-size: 12px;">(0低-9高)</span>
+              <el-form-item label="规格型号" prop="spec" v-if="hasFieldPermission('spec')">
+                <el-input v-model="form.spec" placeholder="请输入规格型号" />
               </el-form-item>
             </el-col>
           </el-row>
@@ -482,6 +512,7 @@
             >
               <template #prefix><el-icon><Link /></el-icon></template>
             </el-input>
+            <div style="color: #409EFF; font-size: 12px; margin-top: 4px;">支持将鼠标悬停于虚线框内通过 Ctrl+V 粘贴图片快速上传</div>
           </el-form-item>
 
           <el-form-item label="说明书" prop="generalManual" v-if="hasFieldPermission('files')">
@@ -535,6 +566,7 @@
             >
               <template #prefix><el-icon><Link /></el-icon></template>
             </el-input>
+            <div style="color: #409EFF; font-size: 12px; margin-top: 4px;">支持将鼠标悬停于虚线框内通过 Ctrl+V 粘贴图片快速上传</div>
           </el-form-item>
 
           <el-form-item label="状态" prop="isEnabled" v-if="hasFieldPermission('isEnabled')">
@@ -553,10 +585,10 @@
         </template>
       </el-dialog>
 
-      <el-dialog v-model="dialogVisibleImage" append-to-body width="50%">
+      <el-dialog v-model="dialogVisibleImage" append-to-body width="50%" :close-on-click-modal="false" :close-on-press-escape="false">
         <img style="width: 100%" :src="dialogImageUrl" alt="Preview Image" />
       </el-dialog>
-      <el-dialog v-model="cameraDialogVisible" title="拍照上传" width="500px" append-to-body destroy-on-close :close-on-click-modal="false">
+      <el-dialog v-model="cameraDialogVisible" title="拍照上传" width="500px" append-to-body destroy-on-close :close-on-click-modal="false" :close-on-press-escape="false">
         <WebRtcCamera
             ref="cameraRef"
             @photo-submit="handleCameraConfirm"
@@ -564,8 +596,15 @@
         />
       </el-dialog>
 
+      <!-- 拍照识图弹窗 -->
+      <ImageSearchDialog
+          v-model="imageSearchVisible"
+          @use="handleImageSearchUse"
+          @view="handleImageSearchView"
+      />
+
       <!-- 预警设置弹窗 -->
-      <el-dialog v-model="warningDialog.visible" :title="warningDialog.title" width="500px" append-to-body destroy-on-close>
+      <el-dialog v-model="warningDialog.visible" :title="warningDialog.title" width="500px" append-to-body destroy-on-close :close-on-click-modal="false" :close-on-press-escape="false">
         <el-form ref="warningFormRef" :model="warningForm" :rules="warningRules" label-width="100px">
           <el-alert
               v-if="warningDialog.selectedCount > 1"
@@ -601,7 +640,7 @@
       </el-dialog>
 
       <!-- 批量质检设置弹窗 -->
-      <el-dialog v-model="inspectionDialog.visible" title="批量质检设置" width="500px" append-to-body destroy-on-close>
+      <el-dialog v-model="inspectionDialog.visible" title="批量质检设置" width="500px" append-to-body destroy-on-close :close-on-click-modal="false" :close-on-press-escape="false">
         <el-alert
             :title="`已选择 ${inspectionDialog.selectedCount} 条物料进行批量质检设置`"
             type="info"
@@ -632,8 +671,8 @@
 </template>
 
 <script setup lang="ts">
-import { ref, reactive, onMounted, nextTick, computed } from 'vue';
-import { Plus, Document, Refresh, Setting, Rank, Camera, Link, Download, Bell, CircleCheck, Files, ZoomIn, Delete } from '@element-plus/icons-vue';
+import { ref, reactive, onMounted, nextTick, computed, watch } from 'vue';
+import { Plus, Document, DocumentCopy, Refresh, Setting, Rank, Camera, Link, Download, Bell, CircleCheck, Files, ZoomIn, Delete, Picture } from '@element-plus/icons-vue';
 import { ElMessage, ElMessageBox, ElLoading } from 'element-plus';
 import type { FormInstance, FormRules } from 'element-plus';
 import { useUserStore } from '@/stores/user';
@@ -650,11 +689,14 @@ import {
   exportAssetStatistics,
   batchSetWarning,
   batchSetInspection,
-  markWarningOrdered
+  markWarningOrdered,
+  getMaterialUnitsAPI
 } from '@/api/material_base';
 import { uploadFile, deleteFile } from '@/api/common/upload';
 import { usePasteUpload } from '@/hooks/usePasteUpload';
 import WebRtcCamera from '@/components/Camera/WebRtcCamera.vue';
+import ImageSearchDialog from '@/components/ImageSearchDialog.vue';
+import { imageSearch as imageSearchApi, type ImageSearchItem } from '@/api/common/upload';
 
 const userStore = useUserStore();
 
@@ -716,12 +758,13 @@ const isUploading = ref(false);
 
 const tableSize = ref<'large' | 'default' | 'small'>('large');
 const advancedFilterVisible = ref(false);
+const imageSearchVisible = ref(false);
 const advancedConditions = ref([{ field: '', operator: '', value: '' }]);
 const fieldOptions = computed(() => {
   const allFields = [
     { value: 'companyName', label: '所属公司', perm: 'material_list:companyName' },
     { value: 'name', label: '名称', perm: 'material_list:name' },
-    { value: 'commonName', label: '俗名', perm: 'material_list:commonName' },
+    { value: 'commonName', label: '专业名称', perm: 'material_list:commonName' },
     { value: 'category', label: '类别', perm: 'material_list:category' },
     { value: 'type', label: '类型', perm: 'material_list:type' },
     { value: 'spec', label: '规格型号', perm: 'material_list:spec' },
@@ -871,7 +914,8 @@ const columns = reactive({
   available: { visible: true },
   files: { visible: true },
   isEnabled: { visible: true },
-  isInspectionRequired: { visible: true }
+  isInspectionRequired: { visible: true },
+  warningStatus: { visible: true }
 });
 
 // 列与权限Code的映射关系（数据库中的code）
@@ -888,22 +932,78 @@ const permissionMap: Record<string, string> = {
   available: 'material_list:availableCount',
   files: 'material_list:files',
   isEnabled: 'material_list:isEnabled',
-  isInspectionRequired: 'material_list:operation'
+  isInspectionRequired: 'material_list:operation',
+  warningStatus: 'material_list:view_warning'
 };
 
-// 根据用户权限初始化列显示状态
+// ================= 全选与本地缓存逻辑 =================
+
+// 获取唯一缓存 Key (加上用户名，防止同一个浏览器切换账号时设置错乱)
+const getStorageKey = () => `MOM_BASIC_INFO_COLS_${userStore.username || 'DEFAULT'}`;
+
+// 辅助方法：判断当前用户是否有某列的权限
+const hasColPermission = (key: string) => {
+  if (userStore.role === 'SUPER_ADMIN' || userStore.username === 'IRIS') return true;
+  const code = permissionMap[key];
+  return code ? !!userStore.hasPermission(code) : true;
+};
+
+// 计算属性：判断是否"全选"了所有【有权限】的列
+const isAllSelected = computed(() => {
+  const allowedKeys = Object.keys(columns).filter(k => hasColPermission(k));
+  return allowedKeys.length > 0 && allowedKeys.every(k => columns[k as keyof typeof columns].visible);
+});
+
+// 计算属性：判断是否"半选" (Element UI 中 checkbox 的 indeterminate 状态)
+const isIndeterminate = computed(() => {
+  const allowedKeys = Object.keys(columns).filter(k => hasColPermission(k));
+  const checkedCount = allowedKeys.filter(k => columns[k as keyof typeof columns].visible).length;
+  return checkedCount > 0 && checkedCount < allowedKeys.length;
+});
+
+// 事件：点击"全选"复选框时触发
+const handleCheckAllChange = (val: boolean) => {
+  Object.keys(columns).forEach(key => {
+    // 只有用户有权限的列，才会被全选/全不选操作控制
+    if (hasColPermission(key)) {
+      columns[key as keyof typeof columns].visible = val;
+    }
+  });
+};
+
+// 监听：只要列展示状态发生变化，就自动保存到浏览器本地
+watch(columns, (newVal) => {
+  localStorage.setItem(getStorageKey(), JSON.stringify(newVal));
+}, { deep: true });
+
+// ================= 修改：权限初始化与读取缓存 =================
+
+// 修改你原有的 initColumnPermissions 函数
 const initColumnPermissions = () => {
-  // 超级管理员跳过权限检查，显示所有列
-  if (userStore.role === 'SUPER_ADMIN' || userStore.username === 'IRIS') {
-    return;
+  // 1. 尝试从本地缓存读取用户上次的设置
+  const cachedData = localStorage.getItem(getStorageKey());
+  let parsedCache: Record<string, any> | null = null;
+  if (cachedData) {
+    try {
+      parsedCache = JSON.parse(cachedData);
+    } catch (e) {
+      console.error('解析列缓存失败', e);
+    }
   }
 
-  // 普通用户：严格执行列级权限控制，没有权限的列必须隐藏
+  // 2. 遍历列进行权限判断与缓存赋值
   Object.keys(columns).forEach(key => {
-    const code = permissionMap[key];
-    if (code) {
-      // 如果不具备该权限，必须设为 false
-      columns[key].visible = !!userStore.hasPermission(code);
+    const colKey = key as keyof typeof columns;
+    const hasPerm = hasColPermission(colKey);
+
+    if (!hasPerm) {
+      // 【权限最高】如果没有权限，强制隐藏，无视任何缓存
+      columns[colKey].visible = false;
+    } else {
+      // 如果有权限，且存在本地缓存，则使用本地缓存的值
+      if (parsedCache && parsedCache[colKey] !== undefined) {
+        columns[colKey].visible = parsedCache[colKey].visible;
+      }
     }
   });
 };
@@ -924,15 +1024,42 @@ const hasFieldPermission = (field: string) => {
 const companyOptions = ref<string[]>([]);
 const categoryOptions = ref<string[]>([]);
 const typeOptions = ref<string[]>([]);
+const unitOptions = ref<string[]>([]);
 const categoryTreeOptions = ref<CascaderOption[]>([]);
 
+// 用于搜索栏级联选择器的数据绑定中转
+const searchCategoryPath = computed({
+  get() {
+    return queryParams.category ? queryParams.category.split('/') : [];
+  },
+  set(val: string[] | null) {
+    queryParams.category = val && val.length > 0 ? val.join('/') : '';
+  }
+});
+
 // 类别级联选择器的 ref
 const categoryCascaderRef = ref<any>(null);
 
-// 选中类别后自动收起下拉面板
+// 选中类别后：1) 收起下拉面板；2) 自动提取末级 Label 末尾的英文字母填入规格型号
 const onCategoryChange = () => {
-  if (categoryCascaderRef.value) {
-    categoryCascaderRef.value.togglePopperVisible(false);
+  if (!categoryCascaderRef.value) return;
+
+  // 1) 收起下拉
+  categoryCascaderRef.value.togglePopperVisible(false);
+
+  // 2) 从末级节点 Label 末尾提取连续的英文字母/数字 (例如 "电子半成品HH" -> "HH",
+  //    "ASD定标实验室Opt9" -> "Opt9")，写入规格型号。
+  //    仅在 @change 触发时赋一次值，用户可继续手动修改；未匹配到则保持原值
+  try {
+    const nodes = categoryCascaderRef.value.getCheckedNodes?.() || [];
+    const node = nodes[0];
+    const label: string = (node && node.label) || '';
+    const match = label.match(/[a-zA-Z0-9]+$/);
+    if (match) {
+      form.value.spec = match[0];
+    }
+  } catch (e) {
+    console.error('提取类别编码后缀失败', e);
   }
 };
 
@@ -941,7 +1068,7 @@ const tempCategorySuffix = ref<string>('');
 
 const queryParams = reactive<QueryParams>({
   pageNum: 1,
-  pageSize: 10,
+  pageSize: 100,
   keyword: '',
   searchField: 'all',
   category: '',
@@ -1038,6 +1165,17 @@ const getOptionsList = () => {
   });
 };
 
+// 获取计量单位字典（新增/编辑弹窗下拉历史）
+const fetchUnitList = () => {
+  getMaterialUnitsAPI().then((res: any) => {
+    if (res.code === 200) {
+      unitOptions.value = res.data || [];
+    }
+  }).catch(err => {
+    console.error("获取计量单位字典失败", err);
+  });
+};
+
 const querySearchCompany = (queryString: string, cb: any) => {
   const results = queryString
       ? companyOptions.value.filter(item => item.toLowerCase().includes(queryString.toLowerCase()))
@@ -1232,6 +1370,23 @@ const handleEdit = (row: MaterialBaseVO) => {
   });
 };
 
+// 另存为新项：把当前编辑项的数据复制一份，转为"新增"模式提交
+const handleSaveAs = () => {
+  if (!form.value.id) return; // 防御：新增模式下不该看到此按钮
+
+  // 1. 清除主键：submitForm 用 form.value.id 判空决定走 add / update 接口
+  delete form.value.id;
+
+  // 2. 切换弹窗标题（项目沿用 dialog.title 命名，无 dialogType / isEdit 变量）
+  dialog.title = '新增基础信息';
+
+  // 3. 清空脏检查基准：让 submitForm 走"完整 payload"分支（新增模式）
+  originalForm.value = null;
+
+  // 4. 提示用户
+  ElMessage.success('已成功复制当前数据，已切换至【新增】模式。请修改特定信息（如规格型号）后点击确定保存。');
+};
+
 const checkDuplicate = async (name: string, spec: string): Promise<boolean> => {
   try {
     const nameRes: any = await listMaterialBase({ pageNum: 1, pageSize: 100, keyword: name, category: '', type: '', company: '' });
@@ -1585,7 +1740,14 @@ const customUpload = async (options: any, targetField: 'generalImage' | 'general
     if (res.code === 200) {
       const newUrl = res.data.url
       form.value[targetField].push(newUrl)
-      // 同步更新 fileList，触发 el-upload UI 刷新
+
+      // 清理 el-upload 内部 push 的"待上传"占位条目（带 raw 属性的那条 blob URL 占位），
+      // 否则会与下方手动 push 的新条目重复显示
+      const targetList = targetField === 'generalImage' ? fileListImage : fileListManual
+      const staleIndex = targetList.value.findIndex(f => f.raw === file)
+      if (staleIndex !== -1) targetList.value.splice(staleIndex, 1)
+
+      // 手动构造带服务端 URL 的条目并 push，picture-card 即可正常渲染
       const fileObj = { name: newUrl.split('/').pop(), url: getImageUrl(newUrl) }
       if (targetField === 'generalImage') {
         fileListImage.value.push(fileObj)
@@ -1593,7 +1755,6 @@ const customUpload = async (options: any, targetField: 'generalImage' | 'general
         fileListManual.value.push(fileObj)
       }
       ElMessage.success('上传成功')
-      onSuccess(res)
     } else {
       ElMessage.error(res.msg || '上传失败');
       onError(new Error(res.msg))
@@ -1693,6 +1854,21 @@ const handleCameraConfirm = async (file: File) => {
   }
 };
 
+// 点击"查看详情"：直接在当前页面应用规格型号并搜索
+const handleImageSearchView = (item: any) => {
+  // 1. 关闭以图搜图弹窗
+  imageSearchVisible.value = false;
+
+  // 2. 将选中的规格型号填入搜索表单的 keyword 中
+  queryParams.keyword = item.spec_model;
+
+  // 3. 触发列表的查询函数，刷新表格数据
+  handleQuery();
+
+  // 4. 给出友好提示
+  ElMessage.success(`已应用物料规格: ${item.spec_model} 进行搜索`);
+};
+
 const addCondition = () => {
   advancedConditions.value.push({ field: '', operator: '', value: '' });
 };
@@ -1715,18 +1891,29 @@ const resetAdvancedFilter = () => {
   getList();
 };
 
-onMounted(() => {
-  // 1. 修复背景联动：直接对 reactive 对象赋值
-  if (route.query.keyword) {
-    queryParams.keyword = route.query.keyword as string;
-    queryParams.searchField = 'all';
-  }
+// 以图搜图跳转：监听路由 keyword 参数，自动搜索并清理 URL
+watch(
+  () => route.query.keyword,
+  (newKeyword) => {
+    if (newKeyword) {
+      queryParams.keyword = newKeyword as string;
+      queryParams.searchField = 'all';
+      getList();
+      // 清理 URL 参数，防止刷新后重复触发搜索
+      router.replace({ path: route.path, query: {} });
+    }
+  },
+  { immediate: true }
+);
 
-  // 先根据权限初始化列显示状态
+onMounted(() => {
   initColumnPermissions();
-  // 此时 getList 会带着正确的 keyword 向后端请求过滤后的数据
-  getList();
+  // 无外部 keyword 参数时执行默认查询；有 keyword 则由上方的 watch 接管
+  if (!route.query.keyword) {
+    getList();
+  }
   getOptionsList();
+  fetchUnitList();
 
   // 2. 修复弹窗锁定逻辑
   console.log('--- 准备检测外部跳转参数 ---', route.query);

inventory-web/src/views/outbound/Selection.vue

@@ -432,7 +432,7 @@
 import { ref, computed, watch } from 'vue'
 import { Printer, Search, Plus, Download, List } from '@element-plus/icons-vue'
 import { ElMessage, ElTable, ElMessageBox } from 'element-plus'
-import { getAllStock, getStockList, printSelectionList } from '@/api/inbound/stock'
+import { getStockList, printSelectionList } from '@/api/inbound/stock'
 import { getBomList, getBomDetail } from '@/api/bom'
 import { useUserStore } from '@/stores/user'
 import { submitOutboundRequest } from '@/api/outbound'
@@ -467,7 +467,6 @@ const requestApproverId = ref<number | null>(null)
 const approvers = ref<any[]>([])
 const requestSubmitting = ref(false)
 
-const allStockData = ref<any[]>([])
 const stockList = ref<any[]>([])     // 服务端分页数据
 const stockTotal = ref(0)
 const stockPage = ref(1)
@@ -525,43 +524,37 @@ const totalExportCount = computed(() => {
   return validSelectedItems.value.reduce((sum, item) => sum + (item.export_quantity || 0), 0)
 })
 
-// --- BOM 齐套性分析计算属性 ---
+// --- BOM 齐套性分析计算属性（使用后端已计算的 current_stock，O(N)，无嵌套循环）---
 const maxBuildableSets = computed(() => {
-  if (currentBomDetail.value.length === 0 || allStockData.value.length === 0) return 0
-  let minSets = Infinity
-  currentBomDetail.value.forEach((bomItem: any) => {
-    const dosage = parseFloat(bomItem.dosage) || 0  // 单套需求量
-    if (dosage <= 0) return
-    // 匹配库存中的可用数量
-    const stockItem = allStockData.value.find((s: any) => s.base_id && s.base_id == bomItem.child_id)
-    const available = stockItem ? (stockItem.availableCount || 0) : 0
-    const buildable = Math.floor(available / dosage)
-    if (buildable < minSets) minSets = buildable
-  })
-  return minSets === Infinity ? 0 : minSets
+  if (!currentBomDetail.value?.length) return 0
+  const result = currentBomDetail.value.reduce((minSets, bomItem: any) => {
+    const dosage = parseFloat(bomItem.dosage) || 0
+    if (dosage <= 0) return minSets
+    const stock = parseFloat(bomItem.current_stock) || 0
+    return Math.min(minSets, Math.floor(stock / dosage))
+  }, Infinity)
+
+  return result === Infinity ? 0 : result
 })
 
 const shortageList = computed(() => {
-  if (currentBomDetail.value.length === 0 || allStockData.value.length === 0 || bomSets.value <= 0) return []
-  const target = bomSets.value
-  const shortages: any[] = []
-  currentBomDetail.value.forEach((bomItem: any) => {
-    const dosage = parseFloat(bomItem.dosage) || 0  // 单套需求量
-    const totalNeed = dosage * target
-    const stockItem = allStockData.value.find((s: any) => s.base_id && s.base_id == bomItem.child_id)
-    const available = stockItem ? (stockItem.availableCount || 0) : 0
-    const shortage = totalNeed - available
-    if (shortage > 0) {
-      shortages.push({
-        name: bomItem.child_name || bomItem.name || '未知物料',
-        sku: bomItem.child_sku || bomItem.sku || '-',
-        need: totalNeed,
-        available: available,
-        shortage: shortage
+  if (!currentBomDetail.value?.length || bomSets.value <= 0) return []
+  return currentBomDetail.value
+      .map((bomItem: any) => {
+        const dosage = parseFloat(bomItem.dosage) || 0
+        const totalNeed = dosage * bomSets.value
+        const stock = parseFloat(bomItem.current_stock) || 0
+        const shortage = Math.max(0, totalNeed - stock)
+        return { ...bomItem, shortage, available: stock }
       })
-    }
-  })
-  return shortages
+      .filter((item: any) => item.shortage > 0)
+      .map((item: any) => ({
+        name: item.child_name || item.name || '未知物料',
+        sku: item.child_sku || item.sku || '-',
+        need: item.dosage * bomSets.value,
+        available: item.available,
+        shortage: item.shortage
+      }))
 })
 
 const hasShortage = computed(() => shortageList.value.length > 0 && bomSets.value > maxBuildableSets.value)
@@ -576,31 +569,6 @@ const getTypeTag = (type: string) => {
   }
 }
 
-// --- 核心逻辑 0：加载全量库存数据（BOM 齐套计算依赖此数据） ---
-const ensureAllStockLoaded = async () => {
-  if (allStockData.value.length === 0) {
-    try {
-      const res: any = await getAllStock()
-      const rawMaterials = (res.materials || []).map((i: any) => ({ ...i, type: 'material', typeLabel: '采购件' }))
-      const rawSemis = (res.semis || []).map((i: any) => ({ ...i, type: 'semi', typeLabel: '半成品' }))
-      const rawProducts = (res.products || []).map((i: any) => ({ ...i, type: 'product', typeLabel: '成品' }))
-      const list = [...rawMaterials, ...rawSemis, ...rawProducts]
-      allStockData.value = list.map((i: any) => ({
-        ...i,
-        name: i.name || i.material_name || i.product_name || '未知名称',
-        standard: i.standard || i.spec_model || '',
-        warehouse_location: i.warehouse_location || i.warehouse_loc || i.full_path || '',
-        uniqueKey: `${i.type}_${i.id}`,
-        available_quantity: parseFloat(i.available_quantity) || 0,
-        availableCount: parseFloat(i.available_quantity) || 0,
-        export_quantity: 1
-      }))
-    } catch (e) {
-      ElMessage.error('加载全量库存数据失败（BOM 功能可能受影响）')
-    }
-  }
-}
-
 // --- 核心逻辑 1：手动添加库存 ---
 
 // 服务端加载库存列表
@@ -633,8 +601,6 @@ const openManualSelect = async () => {
   stockPage.value = 1
   searchKeyword.value = ''
   await loadStockList()
-  await ensureAllStockLoaded()
-  allStockData.value.forEach(item => item.export_quantity = 0)
 }
 
 // 搜索框防抖触发服务端过滤
@@ -739,7 +705,6 @@ const openBomSelect = async () => {
   } catch (e) {
     ElMessage.error('加载 BOM 列表失败')
   }
-  await ensureAllStockLoaded()
 }
 
 // 监听 BOM 选择变化，自动加载明细并计算齐套性
@@ -760,8 +725,8 @@ watch(selectedBomNo, async (newBomNo) => {
 const confirmBomAdd = async () => {
   if (!selectedBomNo.value) return ElMessage.warning('请选择 BOM')
 
-  if (allStockData.value.length === 0) {
-    await ensureAllStockLoaded()
+  if (stockList.value.length === 0) {
+    await loadStockList()
   }
 
   if (currentBomDetail.value.length === 0) {
@@ -782,7 +747,7 @@ const confirmBomAdd = async () => {
     const dosage = parseFloat(bomItem.dosage) || 0
     const needQty = dosage * bomSets.value
 
-    const stockCandidate = allStockData.value.find(s =>
+    const stockCandidate = stockList.value.find(s =>
       (s.base_id && s.base_id == bomItem.child_id)
     )
 

inventory-web/src/views/purchase/index.vue

@@ -64,7 +64,7 @@
     />
 
     <!-- ========== 新建/编辑弹窗 ========== -->
-    <el-dialog v-model="formDialogVisible" :title="dialogTitle" width="700px" destroy-on-close :close-on-click-modal="false">
+    <el-dialog v-model="formDialogVisible" :title="dialogTitle" width="700px" destroy-on-close :close-on-click-modal="false" :close-on-press-escape="false">
       <el-form ref="formRef" :model="form" label-width="110px">
 
         <el-row :gutter="20">
@@ -74,14 +74,14 @@
                   v-model="materialBaseId"
                   filterable
                   remote
-                  reserve-keyword
+                  reserve-keyword="true"
                   clearable
                   placeholder="输入名称或规格搜索..."
                   :remote-method="handleSearchMaterialDebounced"
                   :loading="searchLoading"
                   style="width: 100%"
                   @change="onMaterialSelected"
-                  default-first-option
+                  default-first-option="true"
                   popper-class="long-dropdown"
                   v-loadmore="handleLoadMoreMaterials"
                   @visible-change="onMaterialDropdownVisibleChange"
@@ -171,7 +171,7 @@
     </el-dialog>
 
     <!-- ========== 详情弹窗 ========== -->
-    <el-dialog v-model="detailDialogVisible" title="采购申请详情" width="700px" destroy-on-close>
+    <el-dialog v-model="detailDialogVisible" title="采购申请详情" width="700px" destroy-on-close :close-on-click-modal="false" :close-on-press-escape="false">
       <el-descriptions :column="2" border>
         <el-descriptions-item label="申请单号">{{ detail.request_no }}</el-descriptions-item>
         <el-descriptions-item label="状态">
@@ -215,7 +215,7 @@
     </el-dialog>
 
     <!-- ========== 驳回原因弹窗 ========== -->
-    <el-dialog v-model="rejectDialogVisible" title="驳回申请" width="480px" destroy-on-close>
+    <el-dialog v-model="rejectDialogVisible" title="驳回申请" width="480px" destroy-on-close :close-on-click-modal="false" :close-on-press-escape="false">
       <el-form label-width="80px">
         <el-form-item label="申请单号">
           <span style="font-weight: bold; color: #409EFF;">{{ currentRejectRow?.request_no }}</span>
@@ -396,14 +396,17 @@ const handleSearchMaterialDebounced = (query: string) => {
 }
 
 const handleSearchMaterial = async (query: string) => {
+  // 防御性处理：粘贴场景常混入零宽字符 / 控制字符 / 不可见 Unicode
+  const rawQuery = String(query || '')
+  const safeQuery = rawQuery.replace(/[\x00-\x1F\x7F-\x9F\u200B-\u200D\uFEFF]/g, '').trim()
   searchLoading.value = true
-  searchKeyword.value = query
+  searchKeyword.value = safeQuery
   searchPage.value = 1
   materialOptions.value = []
   hasNextPage.value = true
 
   try {
-    const res: any = await searchMaterialPurchase(query, 1)
+    const res: any = await searchMaterialPurchase(safeQuery, 1)
     materialOptions.value = res.data || []
     hasNextPage.value = res.has_next !== false
   } finally {
@@ -431,9 +434,14 @@ const handleLoadMoreMaterials = async () => {
 }
 
 const onMaterialDropdownVisibleChange = (visible: boolean) => {
-  if (visible && materialOptions.value.length === 0) {
-    handleSearchMaterial('')
-  }
+  if (!visible) return
+  // 防御性拦截：竞态条件守卫
+  // 如果当前已经有搜索关键字（例如用户刚刚粘贴了内容、remote-method 已经设置了 searchKeyword），
+  // 绝对不要去请求默认列表，否则会清空 searchKeyword、覆盖正确结果。
+  if (searchKeyword.value || materialOptions.value.length > 0) return
+  // 打断正在排队的 debounce 定时器，避免与默认请求相互打架
+  if (searchTimer) { clearTimeout(searchTimer); searchTimer = null }
+  handleSearchMaterial('')
 }
 
 const onMaterialSelected = (id: number | null) => {

inventory-web/src/views/stock/inbound/buy.vue

@@ -48,17 +48,17 @@
           <template #prefix><el-icon><Search /></el-icon></template>
         </el-input>
 
-        <el-select
-            v-model="queryParams.category"
+        <el-cascader
+            v-model="searchCategoryPath"
+            :options="categoryTreeOptions"
+            :props="{ checkStrictly: true }"
             placeholder="类别"
             class="filter-item-select"
             clearable
             filterable
+            style="width: 220px;"
             @change="fetchData"
-            style="width: 160px;"
-        >
-          <el-option v-for="item in categoryOptions" :key="item" :label="item" :value="item" />
-        </el-select>
+        />
 
         <el-select
             v-model="queryParams.material_type"
@@ -111,18 +111,32 @@
           <template #reference>
             <el-button :icon="Setting" circle class="circle-btn" />
           </template>
+          <div style="display: flex; justify-content: space-between; align-items: center; border-bottom: 1px solid #eee; margin-bottom: 10px; padding-bottom: 10px;">
+            <span style="font-weight: bold;">列展示设置</span>
+            <el-checkbox
+              :model-value="isAllSelected"
+              :indeterminate="isIndeterminate"
+              @change="handleCheckAllChange"
+            >
+              全选
+            </el-checkbox>
+          </div>
           <el-checkbox-group v-model="visibleColumnProps" class="column-selector">
             <div class="col-group-title">基础信息</div>
             <el-row :gutter="10">
-              <el-col :span="12" v-for="c in baseColumns" :key="c.prop">
-                <el-checkbox :label="c.prop">{{ c.label }}</el-checkbox>
-              </el-col>
+              <template v-for="c in baseColumns" :key="c.prop">
+                <el-col :span="12" v-if="hasColumnPermission(c.prop)">
+                  <el-checkbox :label="c.prop">{{ c.label }}</el-checkbox>
+                </el-col>
+              </template>
             </el-row>
             <div class="col-group-title" style="margin-top:10px">库存与商务</div>
             <el-row :gutter="10">
-              <el-col :span="12" v-for="c in stockColumns" :key="c.prop">
-                <el-checkbox :label="c.prop">{{ c.label }}</el-checkbox>
-              </el-col>
+              <template v-for="c in stockColumns" :key="c.prop">
+                <el-col :span="12" v-if="hasColumnPermission(c.prop)">
+                  <el-checkbox :label="c.prop">{{ c.label }}</el-checkbox>
+                </el-col>
+              </template>
             </el-row>
           </el-checkbox-group>
         </el-popover>
@@ -193,6 +207,7 @@
                   :src="getImageUrl(getImagesOnly(scope.row[col.prop])[0])"
                   :preview-src-list="getImagesOnly(scope.row[col.prop]).map(u => getImageUrl(u))"
                   preview-teleported
+                  hide-on-click-modal
                   fit="cover"
                   lazy
               >
@@ -226,11 +241,7 @@
             <el-icon><Printer/></el-icon> 打印
           </el-button>
           <el-button link type="primary" size="default" @click="handleUpdate(row)">编辑</el-button>
-          <el-popconfirm title="确定删除该条记录吗？不可恢复。" @confirm="handleDelete(row)" width="220">
-            <template #reference>
-              <el-button link type="danger" size="default" v-permission="'inbound_buy:delete'">删除</el-button>
-            </template>
-          </el-popconfirm>
+          <el-button link type="danger" size="default" @click="handleDelete(row)">删除</el-button>
         </template>
       </el-table-column>
     </el-table>
@@ -253,7 +264,7 @@
         :width="'min(1000px, 95vw)'"
         top="4vh"
         destroy-on-close
-        :close-on-click-modal="!isUploading"
+        :close-on-click-modal="false"
         :close-on-press-escape="!isUploading"
         :show-close="!isUploading"
         class="stylish-dialog compact-layout"
@@ -283,31 +294,21 @@
               <el-row :gutter="24" v-if="dialogStatus === 'create'" style="margin-bottom: 20px;">
                 <el-col :span="12">
                   <el-form-item label="物料搜索" prop="base_id" class="highlight-label">
-                    <el-select
-                        v-model="form.base_id"
-                        filterable
-                        remote
-                        reserve-keyword
-                        clearable
+                    <el-autocomplete
+                        v-model="materialNameInput"
+                        :fetch-suggestions="fetchMaterialSuggestions"
+                        :value-key="'name'"
                         placeholder="请输入名称或规格进行检索..."
-                        :remote-method="handleSearchMaterialDebounced"
-                        @visible-change="handleMaterialDropdownVisible"
-                        :loading="searchLoading"
+                        :trigger-on-focus="true"
+                        clearable
                         style="width: 100%"
-                        @change="onMaterialSelected"
-                        default-first-option
-                        v-loadmore="loadMoreMaterials"
-                        popper-class="long-dropdown"
+                        @select="onMaterialSelected"
+                        @clear="onMaterialClear"
                     >
                       <template #prefix>
                         <el-icon><Search /></el-icon>
                       </template>
-                      <el-option
-                          v-for="item in materialOptions"
-                          :key="item.id"
-                          :label="item.name"
-                          :value="item.id"
-                      >
+                      <template #default="{ item }">
                         <div class="option-item">
                           <div class="opt-main">
                             <span class="opt-name" :title="item.name">{{ item.name }}</span>
@@ -321,11 +322,8 @@
                             <el-tag v-else size="small" type="success" effect="plain">系统</el-tag>
                           </div>
                         </div>
-                      </el-option>
-                      <div v-if="loadingMore" style="text-align: center; color: #999; font-size: 12px; padding: 8px; background: #f9f9f9;">
-                        <el-icon class="is-loading"><Refresh /></el-icon> 加载更多中...
-                      </div>
-                    </el-select>
+                      </template>
+                    </el-autocomplete>
                   </el-form-item>
                 </el-col>
                 <el-col :span="12" style="display: flex; align-items: center;">
@@ -456,7 +454,8 @@
                           :http-request="(opts) => customUpload(opts, 'arrival_photo')"
                           :on-preview="handlePreviewPicture"
                           :on-remove="(file) => handleRemoveImage(file, 'arrival_photo')"
-                          :before-upload="beforeAvatarUpload">
+                          :before-upload="beforeAvatarUpload"
+                          :before-remove="handleBeforeRemove">
                         <el-icon><Plus /></el-icon>
                       </el-upload>
                       <div class="camera-card" @click="triggerCamera('arrival_photo')"><el-icon><Camera /></el-icon><span class="text">拍照</span></div>
@@ -475,7 +474,8 @@
                           :http-request="(opts) => customUpload(opts, 'inspection_report')"
                           :on-preview="handlePreviewPicture"
                           :on-remove="(file) => handleRemoveImage(file, 'inspection_report')"
-                          :before-upload="beforeAvatarUpload">
+                          :before-upload="beforeAvatarUpload"
+                          :before-remove="handleBeforeRemove">
                         <el-icon><Plus /></el-icon>
                       </el-upload>
                       <div class="camera-card" @click="triggerCamera('inspection_report')"><el-icon><Camera /></el-icon><span class="text">拍照</span></div>
@@ -638,8 +638,8 @@
       </template>
     </el-dialog>
 
-    <el-dialog v-model="dialogVisibleImage" append-to-body width="50%"><img style="width: 100%" :src="dialogImageUrl" alt="Preview Image" /></el-dialog>
-    <el-dialog v-model="cameraDialogVisible" title="拍照上传" width="500px" append-to-body destroy-on-close :close-on-click-modal="false">
+    <el-dialog v-model="dialogVisibleImage" append-to-body width="50%" :close-on-click-modal="false" :close-on-press-escape="false"><img style="width: 100%" :src="dialogImageUrl" alt="Preview Image" /></el-dialog>
+    <el-dialog v-model="cameraDialogVisible" title="拍照上传" width="500px" append-to-body destroy-on-close :close-on-click-modal="false" :close-on-press-escape="false">
       <WebRtcCamera
           ref="cameraRef"
           @photo-submit="handleCameraConfirm"
@@ -647,7 +647,7 @@
       />
     </el-dialog>
 
-    <el-dialog v-model="printVisible" title="标签打印预览" width="400px" destroy-on-close append-to-body>
+    <el-dialog v-model="printVisible" title="标签打印预览" width="400px" destroy-on-close append-to-body :close-on-click-modal="false" :close-on-press-escape="false">
       <div style="text-align: center;">
         <div v-loading="printLoading" class="preview-box">
           <img v-if="previewUrl" :src="previewUrl" alt="Label Preview" style="width: 100%; border: 1px solid #ccc;"/>
@@ -806,6 +806,17 @@ const isUploading = ref(false)
 const categoryOptions = ref<string[]>([])
 const typeOptions = ref<string[]>([])
 const companyOptions = ref<string[]>([])
+const categoryTreeOptions = ref<{ value: string; label: string; children?: any[] }[]>([])
+
+// 用于搜索栏级联选择器的数据绑定中转：数组 <-> 以 "/" 拼接的字符串
+const searchCategoryPath = computed({
+  get() {
+    return queryParams.category ? queryParams.category.split('/') : [];
+  },
+  set(val: string[] | null) {
+    queryParams.category = val && val.length > 0 ? val.join('/') : '';
+  }
+});
 
 const queryParams = reactive({
   page: 1,
@@ -822,11 +833,8 @@ const queryParams = reactive({
   advancedFilters: [] as any[]
 })
 
+const materialNameInput = ref('')
 const materialOptions = ref<any[]>([])
-const searchPage = ref(1)
-const searchKeyword = ref('')
-const hasNextPage = ref(true)
-let searchTimer: any = null
 
 const printVisible = ref(false)
 const printLoading = ref(false)
@@ -899,6 +907,8 @@ const operatorOptions = ref([
   { value: 'le', label: '小于等于' }
 ])
 
+// ================= 第一步：声明基础数据 =================
+
 // 基础列
 const baseColumns = [
   {prop: 'company_name', label: '所属公司'},
@@ -939,6 +949,8 @@ const stockColumns = [
   {prop: 'inspection_report', label: '检测报告', minWidth: '100'}
 ]
 
+const allColumns = [...baseColumns, ...stockColumns]
+
 // 列与权限Code的映射关系（数据库中的code）
 const permissionMap: Record<string, string> = {
   id: 'inbound_buy:id',
@@ -973,14 +985,15 @@ const permissionMap: Record<string, string> = {
   inspection_report: 'inbound_buy:inspection_report'
 }
 
-// 初始化列显示状态（纯权限驱动，废除本地缓存）
-const initColumnPermissions = () => {
-  visibleColumnProps.value = allColumns
-    .filter(col => hasColumnPermission(col.prop))
-    .map(col => col.prop)
-}
+// ================= 第二步：声明响应式变量 =================
+const visibleColumnProps = ref<string[]>([])
 
-// 检查列权限
+// ================= 第三步：按依赖顺序放置方法和监听 =================
+
+// 1. 获取唯一缓存 Key
+const getStorageKey = () => `MOM_INBOUND_BUY_COLS_${userStore.username || 'DEFAULT'}`;
+
+// 2. 检查列权限（依赖 permissionMap）
 const hasColumnPermission = (prop: string) => {
   if (userStore.role === 'SUPER_ADMIN' || userStore.username === 'IRIS') {
     return true
@@ -989,9 +1002,49 @@ const hasColumnPermission = (prop: string) => {
   return code ? userStore.hasPermission(code) : false
 }
 
-const allColumns = [...baseColumns, ...stockColumns]
+// 3. 初始化列权限（依赖 allColumns / hasColumnPermission / getStorageKey）
+const initColumnPermissions = () => {
+  const allowedProps = allColumns
+    .filter(col => hasColumnPermission(col.prop))
+    .map(col => col.prop);
 
-const visibleColumnProps = ref<string[]>([])
+  const cachedData = localStorage.getItem(getStorageKey());
+  if (cachedData) {
+    try {
+      const parsedCache = JSON.parse(cachedData);
+      visibleColumnProps.value = parsedCache.filter((prop: string) => allowedProps.includes(prop));
+      return;
+    } catch (e) {
+      console.error('解析列缓存失败', e);
+    }
+  }
+
+  visibleColumnProps.value = allowedProps;
+};
+
+// 4. 监听：只要用户勾选了列，就存入本地缓存
+watch(visibleColumnProps, (newVal) => {
+  localStorage.setItem(getStorageKey(), JSON.stringify(newVal));
+}, { deep: true });
+
+// 5. 全选功能的计算属性和事件
+const isAllSelected = computed(() => {
+  const allowedLength = allColumns.filter(c => hasColumnPermission(c.prop)).length;
+  return visibleColumnProps.value.length > 0 && visibleColumnProps.value.length === allowedLength;
+});
+
+const isIndeterminate = computed(() => {
+  const allowedLength = allColumns.filter(c => hasColumnPermission(c.prop)).length;
+  return visibleColumnProps.value.length > 0 && visibleColumnProps.value.length < allowedLength;
+});
+
+const handleCheckAllChange = (val: boolean) => {
+  if (val) {
+    visibleColumnProps.value = allColumns.filter(c => hasColumnPermission(c.prop)).map(c => c.prop);
+  } else {
+    visibleColumnProps.value = [];
+  }
+};
 
 const form = reactive({
   id: undefined, base_id: undefined as number | undefined,
@@ -1067,76 +1120,56 @@ const querySearchCurrency = (queryString: string, cb: any) => {
   cb(filtered)
 }
 
-const handleMaterialDropdownVisible = (visible: boolean) => { if (visible && materialOptions.value.length === 0) handleSearchMaterialDebounced('') }
-
-const handleSearchMaterialDebounced = (query: string) => {
-  if (searchTimer) clearTimeout(searchTimer)
-  searchTimer = setTimeout(() => {
-    handleSearchMaterial(query)
-  }, 300)
-}
-
-const handleSearchMaterial = async (query: string) => {
+const fetchMaterialSuggestions = async (query: string, cb: (results: any[]) => void) => {
+  const safeQuery = String(query || '').replace(/[\x00-\x1F\x7F-\x9F\u200B-\u200D\uFEFF]/g, '').trim()
   searchLoading.value = true
-  searchKeyword.value = query
-  searchPage.value = 1
-  materialOptions.value = []
-
   try {
-    const res: any = await searchMaterialBase(query, 1)
-    if (res.data) {
-      const apiResults = (res.data || []).map((i: any) => ({...i, isHistory: false}))
-      materialOptions.value = apiResults
-      hasNextPage.value = res.has_next
-    }
-  } finally { searchLoading.value = false }
-}
-
-const loadMoreMaterials = async () => {
-  if (searchLoading.value || loadingMore.value || !hasNextPage.value) return
-  loadingMore.value = true
-  searchPage.value += 1
-  try {
-    const res: any = await searchMaterialBase(searchKeyword.value, searchPage.value)
-    if (res.data && res.data.length > 0) {
-      const newItems = res.data.map((i: any) => ({...i, isHistory: false}))
-      materialOptions.value.push(...newItems)
-      hasNextPage.value = res.has_next
+    const res: any = await searchMaterialBase(safeQuery)
+    if (res.code === 200 && res.data) {
+      cb((res.data || []).map((i: any) => ({ ...i, isHistory: false })))
     } else {
-      hasNextPage.value = false
+      cb([])
     }
   } catch (e) {
-    searchPage.value -= 1
+    cb([])
   } finally {
-    loadingMore.value = false
+    searchLoading.value = false
   }
 }
 
-const onMaterialSelected = async (val: number) => {
-  const item = materialOptions.value.find(i => i.id === val)
-  if (item) {
-    form.company_name = item.company_name
-    form.material_name = item.name
-    form.spec_model = item.spec
-    form.category = item.category
-    form.unit = item.unit
-    form.material_type = item.type
-    // 保存强制质检标记
-    isCurrentMaterialInspectionRequired.value = item.isInspectionRequired || false
-    // 更新表单校验规则
-    updateInspectionRules()
-    checkHistoryAndSetMode(item.id)
+const onMaterialClear = () => {
+  form.base_id = undefined
+  form.company_name = ''
+  form.material_name = ''
+  form.spec_model = ''
+  form.category = ''
+  form.unit = ''
+  form.material_type = ''
+  isCurrentMaterialInspectionRequired.value = false
+  updateInspectionRules()
+}
 
-    // 获取该物料历史入库库位（新增独立接口）
-    try {
-      const res = await request.get('/v1/inbound/buy/last-location', { params: { base_id: val } })
-      if (res.code === 200 && res.data.location) {
-        form.warehouse_location = res.data.location
-        ElMessage.info(`已自动带入该物料历史库位：【${res.data.location}】，请核对。`)
-      }
-    } catch (e) {
-      console.error('获取历史库位失败', e)
+const onMaterialSelected = async (item: any) => {
+  form.base_id = item.id
+  form.company_name = item.company_name
+  form.material_name = item.name
+  form.spec_model = item.spec
+  form.category = item.category
+  form.unit = item.unit
+  form.material_type = item.type
+  materialNameInput.value = item.name
+  isCurrentMaterialInspectionRequired.value = item.isInspectionRequired || false
+  updateInspectionRules()
+  checkHistoryAndSetMode(item.id)
+
+  try {
+    const res = await request.get('/v1/inbound/buy/last-location', { params: { base_id: item.id } })
+    if (res.code === 200 && res.data.location) {
+      form.warehouse_location = res.data.location
+      ElMessage.info(`已自动带入该物料历史库位：【${res.data.location}】，请核对。`)
     }
+  } catch (e) {
+    console.error('获取历史库位失败', e)
   }
 }
 
@@ -1325,6 +1358,7 @@ const fetchOptions = async () => {
     const res: any = await getFilterOptions()
     if (res.code === 200) {
       categoryOptions.value = res.data.categories
+      categoryTreeOptions.value = buildCategoryTree(res.data.categories || [])
       typeOptions.value = res.data.types
       companyOptions.value = res.data.companies
     }
@@ -1333,6 +1367,30 @@ const fetchOptions = async () => {
   }
 }
 
+// 将 "IRIS/半成品/无人机" 之类的字符串数组构建为级联树
+const buildCategoryTree = (categories: string[]) => {
+  const root: { value: string; label: string; children?: any[] }[] = [];
+  categories.forEach((cat: string) => {
+    if (!cat) return;
+    const parts = cat.split('/');
+    let currentLevel = root;
+    parts.forEach((part, index) => {
+      let existingNode = currentLevel.find(n => n.value === part);
+      if (!existingNode) {
+        existingNode = { value: part, label: part };
+        currentLevel.push(existingNode);
+      }
+      if (index < parts.length - 1) {
+        if (!existingNode.children) {
+          existingNode.children = [];
+        }
+        currentLevel = existingNode.children as any[];
+      }
+    });
+  });
+  return root;
+};
+
 // 加载库位树数据
 const loadWarehouseTree = async () => {
   try {
@@ -1401,6 +1459,7 @@ const handleUpdate = (row: any) => {
   if (row.serial_number) { entryMode.value = 'serial'; form.serial_number = row.serial_number; form.batch_number = '' }
   else { entryMode.value = 'batch'; form.batch_number = row.batch_number; form.serial_number = '' }
   materialOptions.value = [{ id: row.base_id, name: row.material_name, spec: row.spec_model, category: row.category, company_name: row.company_name, isInspectionRequired: row.isInspectionRequired }]
+  materialNameInput.value = row.material_name
   // 设置强制质检标记
   isCurrentMaterialInspectionRequired.value = row.isInspectionRequired || false
   updateInspectionRules()
@@ -1457,8 +1516,10 @@ const submitForm = async () => {
 
         await fetchData()
         visible.value = false
-      } catch (e: any) {
-        ElMessage.error(e.msg || '操作失败')
+      } catch (error: any) {
+        // 后端返回 HTTP 500 时（如物料类别隔离校验），从 axios 错误的 response.data.msg 提取具体报错
+        const errorMsg = error.response?.data?.msg || error.message || '系统内部错误，入库失败'
+        ElMessage.error(errorMsg)
       } finally { submitting.value = false }
     } else {
       ElMessage.warning('入库校验未通过，请检查必填项（如：库位）是否已填写完整！')
@@ -1631,7 +1692,39 @@ const handleSortChange = ({ column, prop, order }: any) => {
   fetchData()
 }
 
-const handleDelete = async (row: any) => { try { await deleteBuyInbound(row.id); ElMessage.success('删除成功'); fetchData() } catch (e) { ElMessage.error('删除失败') } }
+const handleDelete = (row: any) => {
+  const recordName = row.sku || row.barcode || '此项';
+  ElMessageBox.confirm(
+    `是否确认删除采购入库记录 "${recordName}" ?`,
+    "警告",
+    { confirmButtonText: "确定", cancelButtonText: "取消", type: "warning" }
+  ).then(async () => {
+    try {
+      await deleteBuyInbound(row.id);
+      ElMessage.success('删除成功');
+      fetchData();
+    } catch (e) {
+      ElMessage.error('删除失败');
+    }
+  }).catch(() => {});
+};
+
+// ==========================================
+// 拦截图片/文件删除：弹出确认框
+// ==========================================
+const handleBeforeRemove = (uploadFile, uploadFiles) => {
+  return new Promise((resolve, reject) => {
+    ElMessageBox.confirm(
+      `确定要移除文件 "${uploadFile.name}" 吗？`,
+      '提示',
+      { confirmButtonText: '确定', cancelButtonText: '取消', type: 'warning' }
+    ).then(() => {
+      resolve(true);
+    }).catch(() => {
+      reject(false);
+    });
+  });
+};
 
 // ------------------------------------
 // 打印逻辑
@@ -1661,8 +1754,7 @@ const confirmPrint = async () => {
 }
 
 const resetForm = () => {
-  materialOptions.value = []; arrivalFileList.value = []; reportFileList.value = []; inspection_report_url.value = ''
-  searchPage.value = 1; hasNextPage.value = true; searchKeyword.value = '';
+  materialOptions.value = []; materialNameInput.value = ''; arrivalFileList.value = []; reportFileList.value = []; inspection_report_url.value = ''
   // 重置强制质检标记
   isCurrentMaterialInspectionRequired.value = false
   Object.assign(form, {

inventory-web/src/views/stock/inbound/inbound_summary.vue

@@ -103,10 +103,10 @@
 </template>
 
 <script setup lang="ts">
-import { ref, reactive, onMounted } from 'vue'
-import { getInboundSummaryList, exportInboundSummary } from '@/api/inbound/inbound_summary'
+import { ref, reactive, onMounted, onBeforeUnmount } from 'vue'
+import { getInboundSummaryList, submitExportTask, checkExportStatus } from '@/api/inbound/inbound_summary'
 import { useUserStore } from '@/stores/user'
-import { ElMessage } from 'element-plus'
+import { ElMessage, ElLoading } from 'element-plus'
 
 const userStore = useUserStore()
 
@@ -153,45 +153,97 @@ const handleFilter = () => {
   fetchData()
 }
 
-// 导出 Excel
+// ============================================================
+// 异步导出定时器（组件级别，需在组件销毁时强制清理）
+// ============================================================
+let exportTimer: ReturnType<typeof setInterval> | null = null
+
+// 组件销毁前，强制清理"幽灵定时器"（防止用户切换路由后定时器仍在跑）
+onBeforeUnmount(() => {
+  if (exportTimer) clearInterval(exportTimer)
+})
+
+// ============================================================
+// 导出 Excel（后端异步轮询模式）
+// ============================================================
 const handleExport = () => {
+  // 防抖：已有任务在执行中直接跳过
+  if (exportLoading.value) return
   exportLoading.value = true
-  const params = {
+
+  const filters = {
     keyword: listQuery.keyword,
     source_type: listQuery.source_type,
     start_date: listQuery.dateRange ? listQuery.dateRange[0] : null,
     end_date: listQuery.dateRange ? listQuery.dateRange[1] : null
   }
 
-  exportInboundSummary(params)
-    .then((response: any) => {
-      const blob = new Blob([response], { type: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet' })
-      const url = window.URL.createObjectURL(blob)
-      const link = document.createElement('a')
-      link.href = url
+  const loadingInstance = ElLoading.service({
+    text: '正在后台生成报表，请稍候...',
+    background: 'rgba(0, 0, 0, 0.6)'
+  })
 
-      const now = new Date()
-      const year = now.getFullYear()
-      const month = String(now.getMonth() + 1).padStart(2, '0')
-      const day = String(now.getDate()).padStart(2, '0')
-      const hour = String(now.getHours()).padStart(2, '0')
-      const minute = String(now.getMinutes()).padStart(2, '0')
-      const second = String(now.getSeconds()).padStart(2, '0')
-      const filename = `入库记录_${year}${month}${day}_${hour}${minute}${second}.xlsx`
+  submitExportTask(filters)
+    .then((res: any) => {
+      const taskId: string = res.data?.task_id
+      if (!taskId) {
+        loadingInstance.close()
+        exportLoading.value = false
+        ElMessage.error('任务提交失败，未获取到 task_id')
+        return
+      }
 
-      link.setAttribute('download', filename)
-      document.body.appendChild(link)
-      link.click()
-      document.body.removeChild(link)
-      window.URL.revokeObjectURL(url)
-      ElMessage.success('导出成功')
+      // 赋值给外部变量，供 onBeforeUnmount 清理
+      exportTimer = setInterval(() => {
+        checkExportStatus(taskId)
+          .then((statusRes: any) => {
+            const { status, progress, url, error } = statusRes.data || {}
+
+            // 实时更新 Loading 提示文字（显示后端返回的进度百分比）
+            if (progress != null) {
+              loadingInstance.setText(`正在生成报表... ${progress}%`)
+            }
+
+            if (status === 'completed') {
+              clearInterval(exportTimer!)
+              loadingInstance.close()
+              exportLoading.value = false
+
+              // 触发浏览器下载（注意：/download/<taskId> 接口在 Flask 侧不过滤 JWT，
+              // 若需要 Token 验证下载，请改用 window.open 或 iframe 下载方式）
+              const baseUrl = import.meta.env.VITE_API_BASE_URL || window.location.origin
+              const downloadUrl = url.startsWith('http') ? url : `${baseUrl}${url}`
+              const link = document.createElement('a')
+              link.href = downloadUrl
+              link.setAttribute('download', '')
+              link.style.display = 'none'
+              document.body.appendChild(link)
+              link.click()
+              document.body.removeChild(link)
+
+              ElMessage.success('报表已生成，正在下载')
+            } else if (status === 'failed') {
+              clearInterval(exportTimer!)
+              loadingInstance.close()
+              exportLoading.value = false
+              ElMessage.error(`生成失败：${error || '未知错误'}`)
+            }
+            // 'processing' → 继续轮询
+          })
+          .catch(() => {
+            // 轮询请求本身失败（网络中断），停止轮询，提示用户
+            clearInterval(exportTimer!)
+            loadingInstance.close()
+            exportLoading.value = false
+            ElMessage.error('查询进度失败，请检查网络或稍后重试')
+          })
+      }, 1500)
     })
     .catch((err: any) => {
-      console.error('导出失败', err)
-      ElMessage.error('导出失败')
-    })
-    .finally(() => {
+      console.error('提交导出任务失败', err)
+      loadingInstance.close()
       exportLoading.value = false
+      ElMessage.error('提交导出任务失败')
     })
 }
 

inventory-web/src/views/stock/inbound/product.vue

@@ -47,17 +47,17 @@
           <template #prefix><el-icon><Search /></el-icon></template>
         </el-input>
 
-        <el-select
-            v-model="queryParams.category"
+        <el-cascader
+            v-model="searchCategoryPath"
+            :options="categoryTreeOptions"
+            :props="{ checkStrictly: true }"
             placeholder="类别"
             class="filter-item-select"
             clearable
             filterable
+            style="width: 220px;"
             @change="fetchData"
-            style="width: 160px;"
-        >
-          <el-option v-for="item in categoryOptions" :key="item" :label="item" :value="item" />
-        </el-select>
+        />
 
         <el-select
             v-model="queryParams.material_type"
@@ -123,9 +123,23 @@
         <el-button :icon="Refresh" @click="fetchData" class="action-btn">刷新</el-button>
         <el-popover placement="bottom-end" title="列配置" :width="500" trigger="click">
           <template #reference><el-button :icon="Setting" class="action-btn">表头</el-button></template>
+          <div style="display: flex; justify-content: space-between; align-items: center; border-bottom: 1px solid #eee; margin-bottom: 10px; padding-bottom: 10px;">
+            <span style="font-weight: bold;">列展示设置</span>
+            <el-checkbox
+              :model-value="isAllSelected"
+              :indeterminate="isIndeterminate"
+              @change="handleCheckAllChange"
+            >
+              全选
+            </el-checkbox>
+          </div>
           <el-checkbox-group v-model="visibleColumnProps" class="column-selector">
             <el-row :gutter="10">
-              <el-col :span="8" v-for="c in allColumns" :key="c.prop"><el-checkbox :label="c.prop">{{ c.label }}</el-checkbox></el-col>
+              <template v-for="c in allColumns" :key="c.prop">
+                <el-col :span="8" v-if="hasColumnPermission(c.prop)">
+                  <el-checkbox :label="c.prop">{{ c.label }}</el-checkbox>
+                </el-col>
+              </template>
             </el-row>
           </el-checkbox-group>
         </el-popover>
@@ -193,6 +207,7 @@
                   :src="getImageUrl(getImagesOnly(scope.row[col.prop])[0])"
                   :preview-src-list="getImagesOnly(scope.row[col.prop]).map(u => getImageUrl(u))"
                   preview-teleported
+                  hide-on-click-modal
                   fit="cover"
                   lazy
               >
@@ -227,7 +242,7 @@
             <el-icon><Printer/></el-icon>
           </el-button>
           <el-button link type="primary" @click="handleUpdate(row)">编辑</el-button>
-          <el-popconfirm title="确定删除？" @confirm="handleDelete(row)"><template #reference><el-button link type="danger">删除</el-button></template></el-popconfirm>
+          <el-button link type="danger" @click="handleDelete(row)">删除</el-button>
         </template>
       </el-table-column>
     </el-table>
@@ -244,7 +259,7 @@
         @current-change="fetchData"
     />
 
-    <el-dialog v-model="visible" :title="dialogStatus === 'create' ? '成品入库' : '编辑成品'" width="min(1000px, 95vw)" top="5vh" :close-on-click-modal="!isUploading" :close-on-press-escape="!isUploading" :show-close="!isUploading" class="stylish-dialog compact-layout">
+    <el-dialog v-model="visible" :title="dialogStatus === 'create' ? '成品入库' : '编辑成品'" width="min(1000px, 95vw)" top="5vh" :close-on-click-modal="false" :close-on-press-escape="!isUploading" :show-close="!isUploading" class="stylish-dialog compact-layout">
       <div class="dialog-scroll-container">
         <el-form :model="form" label-width="110px" ref="formRef" :rules="rules" size="default" class="stylish-form">
 
@@ -268,24 +283,21 @@
               <el-row :gutter="24" v-if="dialogStatus === 'create'" style="margin-bottom: 20px;">
                 <el-col :span="12">
                   <el-form-item label="物料搜索" prop="base_id" class="highlight-label">
-                    <el-select
-                        v-model="form.base_id"
-                        filterable
-                        remote
-                        reserve-keyword
+                    <el-autocomplete
+                        v-model="materialNameInput"
+                        :fetch-suggestions="fetchMaterialSuggestions"
+                        :value-key="'name'"
                         clearable
                         placeholder="请输入名称或规格进行检索..."
-                        :remote-method="handleSearchMaterial"
-                        @visible-change="handleMaterialDropdownVisible"
                         :loading="searchLoading"
+                        :trigger-on-focus="true"
                         style="width: 100%"
-                        @change="onMaterialSelected"
-                        default-first-option
-                        v-loadmore="loadMoreMaterials"
+                        @select="onMaterialSelected"
+                        @clear="onMaterialClear"
                         popper-class="product-dropdown"
                     >
                       <template #prefix><el-icon><Search /></el-icon></template>
-                      <el-option v-for="item in materialOptions" :key="item.id" :label="item.name" :value="item.id">
+                      <template #default="{ item }">
                         <div class="option-item">
                           <div class="opt-main">
                             <span class="opt-name" :title="item.name">{{ item.name }}</span>
@@ -299,11 +311,8 @@
                             <el-tag v-else size="small" type="success" effect="plain">系统</el-tag>
                           </div>
                         </div>
-                      </el-option>
-                      <div v-if="loadingMore" style="text-align: center; color: #999; font-size: 12px; padding: 8px; background: #f9f9f9;">
-                        <el-icon class="is-loading"><Refresh /></el-icon> 加载更多中...
-                      </div>
-                    </el-select>
+                      </template>
+                    </el-autocomplete>
                   </el-form-item>
                 </el-col>
                 <el-col :span="12" style="display: flex; align-items: center;">
@@ -389,7 +398,7 @@
                 <el-col :span="dialogStatus === 'update' ? 12 : 18">
                   <el-form-item label="成品实拍" prop="product_photo">
                     <div class="upload-container" id="upload-product_photo">
-                      <el-upload v-model:file-list="productPhotoList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'product_photo')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'product_photo')" :before-upload="beforeAvatarUpload">
+                      <el-upload v-model:file-list="productPhotoList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'product_photo')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'product_photo')" :before-upload="beforeAvatarUpload" :before-remove="handleBeforeRemove">
                         <el-icon><Plus /></el-icon>
                       </el-upload>
                       <div class="camera-card" @click="triggerCamera('product_photo')"><el-icon><Camera /></el-icon><span class="text">拍照</span></div>
@@ -403,7 +412,7 @@
                 <el-col :span="12">
                   <el-form-item label="质量报告" prop="quality_report_link">
                     <div class="upload-container" id="upload-quality_report_link">
-                      <el-upload v-model:file-list="qualityFileList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'quality_report_link')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'quality_report_link')" :before-upload="beforeAvatarUpload">
+                      <el-upload v-model:file-list="qualityFileList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'quality_report_link')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'quality_report_link')" :before-upload="beforeAvatarUpload" :before-remove="handleBeforeRemove">
                         <el-icon><Plus /></el-icon>
                       </el-upload>
                       <div class="camera-card" @click="triggerCamera('quality_report_link')"><el-icon><Camera /></el-icon><span class="text">拍照</span></div>
@@ -416,7 +425,7 @@
                 <el-col :span="12">
                   <el-form-item label="检测报告" prop="inspection_report_link">
                     <div class="upload-container" id="upload-inspection_report_link">
-                      <el-upload v-model:file-list="inspectionFileList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'inspection_report_link')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'inspection_report_link')" :before-upload="beforeAvatarUpload">
+                      <el-upload v-model:file-list="inspectionFileList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'inspection_report_link')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'inspection_report_link')" :before-upload="beforeAvatarUpload" :before-remove="handleBeforeRemove">
                         <el-icon><Plus /></el-icon>
                       </el-upload>
                       <div class="camera-card" @click="triggerCamera('inspection_report_link')"><el-icon><Camera /></el-icon><span class="text">拍照</span></div>
@@ -445,11 +454,14 @@
                         v-model="form.bom_code"
                         filterable
                         remote
+                        reserve-keyword="true"
                         clearable
-                        placeholder="搜规格/编号"
+                        :disabled="!form.spec_model"
+                        :placeholder="!form.spec_model ? '请先在上方选择入库物料' : '搜规格/编号'"
                         :remote-method="handleSearchBom"
                         :loading="bomSearchLoading"
                         @change="handleBomSelect"
+                        default-first-option="true"
                         style="width: 100%"
                     >
                       <el-option
@@ -529,10 +541,10 @@
     </el-dialog>
 
 
-    <el-dialog v-model="dialogVisibleImage" append-to-body width="50%">
+    <el-dialog v-model="dialogVisibleImage" append-to-body width="50%" :close-on-click-modal="false" :close-on-press-escape="false">
       <img style="width: 100%" :src="dialogImageUrl" alt="Preview Image" />
     </el-dialog>
-    <el-dialog v-model="cameraDialogVisible" title="拍照上传" width="500px" append-to-body destroy-on-close :close-on-click-modal="false">
+    <el-dialog v-model="cameraDialogVisible" title="拍照上传" width="500px" append-to-body destroy-on-close :close-on-click-modal="false" :close-on-press-escape="false">
       <WebRtcCamera
           ref="cameraRef"
           @photo-submit="handleCameraConfirm"
@@ -540,7 +552,7 @@
       />
     </el-dialog>
 
-    <el-dialog v-model="printVisible" title="标签打印预览" width="400px" destroy-on-close append-to-body>
+    <el-dialog v-model="printVisible" title="标签打印预览" width="400px" destroy-on-close append-to-body :close-on-click-modal="false" :close-on-press-escape="false">
       <div style="text-align: center;">
         <div v-loading="printLoading" class="preview-box">
           <img v-if="previewUrl" :src="previewUrl" alt="Label Preview" style="width: 100%; border: 1px solid #ccc;"/>
@@ -572,7 +584,7 @@
 import { ref, reactive, onMounted, watch, computed } from 'vue'
 import { Plus, Setting, Refresh, Search, Box, House, Link, InfoFilled, Printer, Camera, Picture, EditPen } from '@element-plus/icons-vue'
 import { useRouter } from 'vue-router'
-import { ElMessage, ElLoading } from 'element-plus'
+import { ElMessage, ElMessageBox, ElLoading } from 'element-plus'
 import dayjs from 'dayjs'
 import request from '@/utils/request'
 import {
@@ -607,28 +619,6 @@ const debounce = (fn: Function, delay: number = 500) => {
 }
 
 // ------------------------------------
-// v-loadmore
-// ------------------------------------
-const vLoadmore = {
-  mounted(el: any, binding: any) {
-    const checkAndBind = () => {
-      // 这里的 .product-dropdown 是唯一标识，防止和采购/半成品页面冲突
-      const dropDownWrap = document.querySelector('.product-dropdown .el-select-dropdown__wrap')
-      if (dropDownWrap && !dropDownWrap.getAttribute('data-loadmore-bound')) {
-        dropDownWrap.setAttribute('data-loadmore-bound', 'true')
-        dropDownWrap.addEventListener('scroll', function (this: any) {
-          const condition = this.scrollHeight - this.scrollTop <= this.clientHeight + 1
-          if (condition) {
-            binding.value()
-          }
-        })
-      }
-    }
-    setTimeout(checkAndBind, 500)
-    el.addEventListener('click', () => setTimeout(checkAndBind, 300))
-  }
-}
-
 const userStore = useUserStore()
 const router = useRouter()
 
@@ -649,7 +639,6 @@ const loading = ref(false)
 const submitting = ref(false)
 const visible = ref(false)
 const searchLoading = ref(false)
-const loadingMore = ref(false)
 const dialogStatus = ref<'create' | 'update'>('create')
 const tableData = ref([])
 const total = ref(0)
@@ -660,6 +649,18 @@ const isUploading = ref(false)
 
 const queryParams = reactive({ page: 1, pageSize: 20, keyword: '', searchField: 'all', sku: '', category: '', material_type: '', statuses: ['在库', '借库'], company: '', orderByColumn: '', isAsc: '', advancedFilters: [] })
 const categoryOptions = ref<string[]>([])
+const categoryTreeOptions = ref<{ value: string; label: string; children?: any[] }[]>([])
+
+// 用于搜索栏级联选择器的数据绑定中转：数组 <-> 以 "/" 拼接的字符串
+const searchCategoryPath = computed({
+  get() {
+    return queryParams.category ? queryParams.category.split('/') : [];
+  },
+  set(val: string[] | null) {
+    queryParams.category = val && val.length > 0 ? val.join('/') : '';
+  }
+});
+
 const typeOptions = ref<string[]>([])
 const companyOptions = ref<string[]>([]) // [新增]
 const advancedFilterVisible = ref(false)
@@ -708,11 +709,7 @@ const operatorOptions = ref([
   { label: '大于等于', value: '>=' },
   { label: '小于等于', value: '<=' },
 ])
-const materialOptions = ref<any[]>([])
-const searchPage = ref(1)
-const searchKeyword = ref('')
-const hasNextPage = ref(true)
-let searchTimer: any = null
+const materialNameInput = ref('')
 
 // BOM 搜索相关
 const bomSearchLoading = ref(false)
@@ -745,11 +742,14 @@ const scannerDialogVisible = ref(false)
 // 库位级联选择器数据
 const warehouseOptions = ref<any[]>([])
 
+// ================= 第一步：声明基础数据 =================
+
 // [核心优化] 所有列定义
 const allColumns = [
   { prop: 'company_name', label: '所属公司', minWidth: '100', sortable: true }, // [新增]
   { prop: 'material_name', label: '名称', minWidth: '140', sortable: true },
   { prop: 'sku', label: 'SKU', minWidth: '110', sortable: true },
+  { prop: 'warehouse_loc', label: '库位', minWidth: '120', sortable: true },
   { prop: 'serial_number', label: '序列号', minWidth: '130', sortable: true },
   { prop: 'qty_stock', label: '库存', minWidth: '90', sortable: true },
   { prop: 'status', label: '状态', minWidth: '90', sortable: true },
@@ -810,15 +810,15 @@ const permissionMap: Record<string, string> = {
   detail_link: 'inbound_product:detail_link',
 }
 
-// 根据用户权限初始化列显示状态
-// 初始化列显示状态（纯权限驱动，废除本地缓存）
-const initColumnPermissions = () => {
-  visibleColumnProps.value = allColumns
-    .filter(col => hasColumnPermission(col.prop))
-    .map(col => col.prop)
-}
+// ================= 第二步：声明响应式变量 =================
+const visibleColumnProps = ref<string[]>([])
 
-// 检查列权限
+// ================= 第三步：按依赖顺序放置方法和监听 =================
+
+// 1. 获取唯一缓存 Key
+const getStorageKey = () => `MOM_INBOUND_PROD_COLS_${userStore.username || 'DEFAULT'}`;
+
+// 2. 检查列权限（依赖 permissionMap）
 const hasColumnPermission = (prop: string) => {
   if (userStore.role === 'SUPER_ADMIN' || userStore.username === 'IRIS') {
     return true
@@ -827,6 +827,50 @@ const hasColumnPermission = (prop: string) => {
   return code ? userStore.hasPermission(code) : false
 }
 
+// 3. 初始化列权限（依赖 allColumns / hasColumnPermission / getStorageKey）
+const initColumnPermissions = () => {
+  const allowedProps = allColumns
+    .filter(col => hasColumnPermission(col.prop))
+    .map(col => col.prop);
+
+  const cachedData = localStorage.getItem(getStorageKey());
+  if (cachedData) {
+    try {
+      const parsedCache = JSON.parse(cachedData);
+      visibleColumnProps.value = parsedCache.filter((prop: string) => allowedProps.includes(prop));
+      return;
+    } catch (e) {
+      console.error('解析列缓存失败', e);
+    }
+  }
+
+  visibleColumnProps.value = allowedProps;
+};
+
+// 4. 监听：只要用户勾选了列，就存入本地缓存
+watch(visibleColumnProps, (newVal) => {
+  localStorage.setItem(getStorageKey(), JSON.stringify(newVal));
+}, { deep: true });
+
+// 5. 全选功能的计算属性和事件
+const isAllSelected = computed(() => {
+  const allowedLength = allColumns.filter(c => hasColumnPermission(c.prop)).length;
+  return visibleColumnProps.value.length > 0 && visibleColumnProps.value.length === allowedLength;
+});
+
+const isIndeterminate = computed(() => {
+  const allowedLength = allColumns.filter(c => hasColumnPermission(c.prop)).length;
+  return visibleColumnProps.value.length > 0 && visibleColumnProps.value.length < allowedLength;
+});
+
+const handleCheckAllChange = (val: boolean) => {
+  if (val) {
+    visibleColumnProps.value = allColumns.filter(c => hasColumnPermission(c.prop)).map(c => c.prop);
+  } else {
+    visibleColumnProps.value = [];
+  }
+};
+
 // ★ 智能聚合：当无序列号权限时，按 SKU 聚合库存
 const displayData = computed(() => {
   // 检查是否有序列号权限
@@ -861,7 +905,6 @@ const displayData = computed(() => {
 })
 
 const defaultVisibleCols = ['company_name', 'material_name', 'sku', 'serial_number', 'qty_stock', 'status', 'quality_status', 'product_photo', 'sale_price', 'order_id']
-const visibleColumnProps = ref<string[]>([])
 
 const form = reactive({
   id: undefined, base_id: undefined as number | undefined,
@@ -883,9 +926,15 @@ const form = reactive({
 // BOM Search Logic
 // ------------------------------------
 const handleSearchBom = async (query: string) => {
+  // 防御性处理：粘贴场景常混入零宽字符 / 控制字符 / 不可见 Unicode
+  // 1) 强制转字符串，防 ClipboardEvent 对象
+  // 2) 深度净化：剔除所有控制字符、零宽字符、BOM
+  // 3) 常规 trim
+  const rawQuery = String(query || '')
+  const safeQuery = rawQuery.replace(/[\x00-\x1F\x7F-\x9F\u200B-\u200D\uFEFF]/g, '').trim()
   bomSearchLoading.value = true
   try {
-    const res: any = await searchBom(query)
+    const res: any = await searchBom(safeQuery, form.spec_model)
     bomOptions.value = res.data || []
   } finally { bomSearchLoading.value = false }
 }
@@ -981,73 +1030,52 @@ const rules = {
 }
 
 
+// Material Search & Population Logic
 // ------------------------------------
-// Material Search & Population Logic (已修改)
-// ------------------------------------
-const handleMaterialDropdownVisible = (visible: boolean) => { if (visible && materialOptions.value.length === 0) handleSearchMaterialDebounced('') }
-
-const handleSearchMaterialDebounced = (query: string) => {
-  if (searchTimer) clearTimeout(searchTimer)
-  searchTimer = setTimeout(() => {
-    handleSearchMaterial(query)
-  }, 300)
-}
-
-const handleSearchMaterial = async (query: string) => {
+const fetchMaterialSuggestions = (query: string, cb: (results: any[]) => void) => {
+  const rawQuery = String(query || '')
+  const safeQuery = rawQuery.replace(/[\x00-\x1F\x7F-\x9F\u200B-\u200D\uFEFF]/g, '').trim()
   searchLoading.value = true
-  searchKeyword.value = query
-  searchPage.value = 1
-  materialOptions.value = []
-
-  try {
-    const res: any = await searchMaterialBase(query, 1)
-    const apiResults = (res.data?.items || []).map((i: any) => ({ ...i, isHistory: false }))
-    materialOptions.value = apiResults
-    hasNextPage.value = res.data?.has_next ?? false
-  } finally { searchLoading.value = false }
+  searchMaterialBase(safeQuery).then((res: any) => {
+    const items = res.data?.items || res.data || []
+    const formatted = items.map((i: any) => ({ ...i, name: i.name || i.material_name, isHistory: false }))
+    cb(formatted)
+  }).catch(() => cb([])).finally(() => { searchLoading.value = false })
 }
 
-const loadMoreMaterials = async () => {
-  if (searchLoading.value || loadingMore.value || !hasNextPage.value) return
-  loadingMore.value = true
-  searchPage.value += 1
-  try {
-    const res: any = await searchMaterialBase(searchKeyword.value, searchPage.value)
-    if (res.data && res.data.items && res.data.items.length > 0) {
-      const newItems = res.data.items.map((i: any) => ({...i, isHistory: false}))
-      materialOptions.value.push(...newItems)
-      hasNextPage.value = res.data.has_next
-    } else {
-      hasNextPage.value = false
-    }
-  } catch (e) {
-    searchPage.value -= 1
-  } finally {
-    loadingMore.value = false
-  }
+const onMaterialClear = () => {
+  form.base_id = undefined
+  form.company_name = ''
+  form.material_name = ''
+  form.spec_model = ''
+  form.material_type = ''
+  form.category = ''
+  form.unit = ''
+  form.bom_code = ''
+  form.bom_version = ''
+  bomOptions.value = []
 }
 
-const onMaterialSelected = async (val: number) => {
-  const item = materialOptions.value.find(i => i.id === val)
-  if (item) {
-    form.company_name = item.company_name // [新增]
-    form.material_name = item.name
-    form.spec_model = item.spec
-    form.material_type = item.type
-    form.category = item.category
-    form.unit = item.unit
-
-    // 获取该物料历史入库库位（新增独立接口）
-    try {
-      const res = await request.get('/v1/inbound/product/last-location', { params: { base_id: val } })
-      if (res.code === 200 && res.data.location) {
-        form.warehouse_location = res.data.location
-        ElMessage.info(`已自动带入该物料历史库位：【${res.data.location}】，请核对。`)
-      }
-    } catch (e) {
-      console.error('获取历史库位失败', e)
+const onMaterialSelected = (item: any) => {
+  form.base_id = item.id
+  form.company_name = item.company_name
+  form.material_name = item.name
+  form.spec_model = item.spec
+  form.material_type = item.type
+  form.category = item.category
+  form.unit = item.unit
+  materialNameInput.value = item.name
+  // 切换物料时清空已选 BOM，防止脏数据
+  form.bom_code = ''
+  form.bom_version = ''
+  bomOptions.value = []
+  // 获取该物料历史入库库位
+  request.get('/v1/inbound/product/last-location', { params: { base_id: item.id } }).then((res: any) => {
+    if (res.code === 200 && res.data?.location) {
+      form.warehouse_location = res.data.location
+      ElMessage.info(`已自动带入该物料历史库位：【${res.data.location}】，请核对。`)
     }
-  }
+  }).catch(() => {})
 }
 
 // ------------------------------------
@@ -1097,6 +1125,7 @@ const fetchOptions = async () => {
     const res: any = await getFilterOptions()
     if (res.code === 200) {
       categoryOptions.value = res.data.categories
+      categoryTreeOptions.value = buildCategoryTree(res.data.categories || [])
       typeOptions.value = res.data.types
       companyOptions.value = res.data.companies // [新增]
     }
@@ -1105,6 +1134,30 @@ const fetchOptions = async () => {
   }
 }
 
+// 将 "IRIS/半成品/无人机" 之类的字符串数组构建为级联树
+const buildCategoryTree = (categories: string[]) => {
+  const root: { value: string; label: string; children?: any[] }[] = [];
+  categories.forEach((cat: string) => {
+    if (!cat) return;
+    const parts = cat.split('/');
+    let currentLevel = root;
+    parts.forEach((part, index) => {
+      let existingNode = currentLevel.find(n => n.value === part);
+      if (!existingNode) {
+        existingNode = { value: part, label: part };
+        currentLevel.push(existingNode);
+      }
+      if (index < parts.length - 1) {
+        if (!existingNode.children) {
+          existingNode.children = [];
+        }
+        currentLevel = existingNode.children as any[];
+      }
+    });
+  });
+  return root;
+};
+
 // 加载库位树数据
 const loadWarehouseTree = async () => {
   try {
@@ -1172,7 +1225,6 @@ const handleCreate = () => {
   resetForm()
   form.in_date = dayjs().format('YYYY-MM-DD')
   visible.value = true
-  materialOptions.value = []
 }
 
 const handleUpdate = (row: any) => {
@@ -1201,7 +1253,7 @@ const handleUpdate = (row: any) => {
   inspectionFileList.value = iReports.filter(r => !isExternalLink(r)).map(url => ({ name: url.split('/').pop(), url: getImageUrl(url) }))
   const iLinks = iReports.filter(r => isExternalLink(r))
   inspection_url.value = iLinks.length > 0 ? iLinks[0] : ''
-  materialOptions.value = [{ id: row.base_id, name: row.material_name, spec: row.spec_model, category: row.category, company_name: row.company_name, isHistory: false }]
+  materialNameInput.value = row.material_name
   // 回显BOM
   if (form.bom_code) {
     bomOptions.value = [{ bom_no: form.bom_code, version: form.bom_version }]
@@ -1346,11 +1398,13 @@ const submitForm = async () => {
           const res: any = await createProductInbound(payload)
           ElMessage.success('入库成功')
           const newItem = res.data
-          if (newItem) { ElMessage.info('发送打印...'); try { await executePrint({ ...newItem, copies: form.print_copies }); ElMessage.success(`指令已发送 (x${form.print_copies})`) } catch (e: any) { ElMessage.warning('打印失败') } }
+          if (newItem) { ElMessage.info('发送打印...'); try { const printPayload = { ...newItem, warehouse_loc: form.warehouse_location || newItem.warehouse_location || newItem.warehouse_loc || '未分配', copies: form.print_copies }; await executePrint(printPayload); ElMessage.success(`指令已发送 (x${form.print_copies})`) } catch (e: any) { ElMessage.warning('打印失败') } }
         } else { await updateProductInbound(form.id!, payload); ElMessage.success('更新成功') }
         visible.value = false; fetchData()
-      } catch(e:any) {
-        ElMessage.error(e.msg || '操作失败')
+      } catch(error:any) {
+        // 后端返回 HTTP 500 时（如物料类别隔离校验），从 axios 错误的 response.data.msg 提取具体报错
+        const errorMsg = error.response?.data?.msg || error.message || '系统内部错误，入库失败'
+        ElMessage.error(errorMsg)
       } finally { submitting.value = false }
     } else {
       ElMessage.warning('入库校验未通过，请检查必填项（如：库位）是否已填写完整！')
@@ -1358,15 +1412,48 @@ const submitForm = async () => {
   })
 }
 
-const handleDelete = async (row: any) => { try { await deleteProductInbound(row.id); ElMessage.success('删除成功'); fetchData() } catch(e) { ElMessage.error('删除失败') } }
+const handleDelete = (row: any) => {
+  const recordName = row.sku || row.barcode || '此项';
+  ElMessageBox.confirm(
+    `是否确认删除成品入库记录 "${recordName}" ?`,
+    "警告",
+    { confirmButtonText: "确定", cancelButtonText: "取消", type: "warning" }
+  ).then(async () => {
+    try {
+      await deleteProductInbound(row.id);
+      ElMessage.success('删除成功');
+      fetchData();
+    } catch (e) {
+      ElMessage.error('删除失败');
+    }
+  }).catch(() => {});
+};
+
+// ==========================================
+// 拦截图片/文件删除：弹出确认框
+// ==========================================
+const handleBeforeRemove = (uploadFile, uploadFiles) => {
+  return new Promise((resolve, reject) => {
+    ElMessageBox.confirm(
+      `确定要移除文件 "${uploadFile.name}" 吗？`,
+      '提示',
+      { confirmButtonText: '确定', cancelButtonText: '取消', type: 'warning' }
+    ).then(() => {
+      resolve(true);
+    }).catch(() => {
+      reject(false);
+    });
+  });
+};
+
 const handlePrint = async (row: any) => {
   printVisible.value = true; printLoading.value = true; previewUrl.value = ''
-  currentPrintData.value = { global_print_id: row.global_print_id, material_name: row.material_name, spec_model: row.spec_model, category: row.category, material_type: row.material_type, warehouse_loc: row.warehouse_loc, serial_number: row.serial_number, sku: row.sku }
+  currentPrintData.value = { global_print_id: row.global_print_id, material_name: row.material_name, spec_model: row.spec_model, category: row.category, material_type: row.material_type, warehouse_loc: row.warehouse_location || row.warehouse_loc || '未分配', serial_number: row.serial_number, sku: row.sku }
   try { const res: any = await getLabelPreview(currentPrintData.value); previewUrl.value = res.data } catch (e) { ElMessage.error('预览失败') } finally { printLoading.value = false }
 }
 const confirmPrint = async () => { printing.value = true; try { await executePrint({ ...currentPrintData.value, copies: printCopies.value }); ElMessage.success(`已发送 (x${printCopies.value})`); printVisible.value = false } catch (e: any) { ElMessage.error('打印失败') } finally { printing.value = false } }
 const resetForm = () => {
-  materialOptions.value = []; bomOptions.value = []; productPhotoList.value = []; qualityFileList.value = []; inspectionFileList.value = []; quality_url.value = ''; inspection_url.value = ''
+  materialNameInput.value = ''; bomOptions.value = []; productPhotoList.value = []; qualityFileList.value = []; inspectionFileList.value = []; quality_url.value = ''; inspection_url.value = ''
   Object.assign(form, { id: undefined, base_id: undefined, material_name: '', spec_model: '', material_type: '', category: '', unit: '', sku: '', barcode: '', serial_number: '', in_date: '', in_quantity: 1, stock_quantity: 1, available_quantity: 1, print_copies: 1, warehouse_location: '', status: '在库', quality_status: '合格', bom_code: '', bom_version: '', work_order_code: '', order_id: '', production_manager: '', production_time_range: [], raw_material_cost: undefined, unit_total_cost: undefined, total_price: undefined, sale_price: undefined, quality_report_link: [], inspection_report_link: [], product_photo: [], detail_link: '' })
 }
 const getStatusType = (s:string) => ({'在库':'success','出库':'info','借库':'warning','损耗':'danger'}[s]||'warning')

inventory-web/src/views/stock/inbound/semi.vue

@@ -48,17 +48,17 @@
           <template #prefix><el-icon><Search /></el-icon></template>
         </el-input>
 
-        <el-select
-            v-model="queryParams.category"
+        <el-cascader
+            v-model="searchCategoryPath"
+            :options="categoryTreeOptions"
+            :props="{ checkStrictly: true }"
             placeholder="类别"
             class="filter-item-select"
             clearable
             filterable
+            style="width: 220px;"
             @change="fetchData"
-            style="width: 160px;"
-        >
-          <el-option v-for="item in categoryOptions" :key="item" :label="item" :value="item" />
-        </el-select>
+        />
 
         <el-select
             v-model="queryParams.material_type"
@@ -127,18 +127,32 @@
           <template #reference>
             <el-button :icon="Setting" circle class="circle-btn" />
           </template>
+          <div style="display: flex; justify-content: space-between; align-items: center; border-bottom: 1px solid #eee; margin-bottom: 10px; padding-bottom: 10px;">
+            <span style="font-weight: bold;">列展示设置</span>
+            <el-checkbox
+              :model-value="isAllSelected"
+              :indeterminate="isIndeterminate"
+              @change="handleCheckAllChange"
+            >
+              全选
+            </el-checkbox>
+          </div>
           <el-checkbox-group v-model="visibleColumnProps" class="column-selector">
             <div class="col-group-title">基础信息</div>
             <el-row :gutter="10">
-              <el-col :span="12" v-for="c in baseColumns" :key="c.prop">
-                <el-checkbox :label="c.prop">{{ c.label }}</el-checkbox>
-              </el-col>
+              <template v-for="c in baseColumns" :key="c.prop">
+                <el-col :span="12" v-if="hasColumnPermission(c.prop)">
+                  <el-checkbox :label="c.prop">{{ c.label }}</el-checkbox>
+                </el-col>
+              </template>
             </el-row>
             <div class="col-group-title" style="margin-top:10px">生产与库存</div>
             <el-row :gutter="10">
-              <el-col :span="12" v-for="c in stockColumns" :key="c.prop">
-                <el-checkbox :label="c.prop">{{ c.label }}</el-checkbox>
-              </el-col>
+              <template v-for="c in stockColumns" :key="c.prop">
+                <el-col :span="12" v-if="hasColumnPermission(c.prop)">
+                  <el-checkbox :label="c.prop">{{ c.label }}</el-checkbox>
+                </el-col>
+              </template>
             </el-row>
           </el-checkbox-group>
         </el-popover>
@@ -216,6 +230,7 @@
                   :src="getImageUrl(getImagesOnly(scope.row[col.prop])[0])"
                   :preview-src-list="getImagesOnly(scope.row[col.prop]).map(u => getImageUrl(u))"
                   preview-teleported
+                  hide-on-click-modal
                   fit="cover"
                   lazy
               >
@@ -250,11 +265,7 @@
             <el-icon><Printer/></el-icon> 打印
           </el-button>
           <el-button link type="primary" size="default" @click="handleUpdate(row)">编辑</el-button>
-          <el-popconfirm title="确定删除该条记录吗？不可恢复。" @confirm="handleDelete(row)" width="220">
-            <template #reference>
-              <el-button link type="danger" size="default">删除</el-button>
-            </template>
-          </el-popconfirm>
+          <el-button link type="danger" size="default" @click="handleDelete(row)">删除</el-button>
         </template>
       </el-table-column>
     </el-table>
@@ -277,7 +288,7 @@
         width="min(1000px, 95vw)"
         top="5vh"
         destroy-on-close
-        :close-on-click-modal="!isUploading"
+        :close-on-click-modal="false"
         :close-on-press-escape="!isUploading"
         :show-close="!isUploading"
         class="stylish-dialog compact-layout"
@@ -307,29 +318,19 @@
               <el-row :gutter="24" v-if="dialogStatus === 'create'" style="margin-bottom: 20px;">
                 <el-col :span="12">
                   <el-form-item label="物料搜索" prop="base_id" class="highlight-label">
-                    <el-select
-                        v-model="form.base_id"
-                        filterable
-                        remote
-                        reserve-keyword
-                        clearable
+                    <el-autocomplete
+                        v-model="materialNameInput"
+                        :fetch-suggestions="fetchMaterialSuggestions"
+                        :value-key="'name'"
                         placeholder="请输入名称或规格进行检索..."
-                        :remote-method="handleSearchMaterial"
-                        @visible-change="handleMaterialDropdownVisible"
-                        :loading="searchLoading"
+                        :trigger-on-focus="true"
+                        clearable
                         style="width: 100%"
-                        @change="onMaterialSelected"
-                        default-first-option
-                        v-loadmore="loadMoreMaterials"
-                        popper-class="long-dropdown"
+                        @select="onMaterialSelected"
+                        @clear="onMaterialClear"
                     >
                       <template #prefix><el-icon><Search /></el-icon></template>
-                      <el-option
-                          v-for="item in materialOptions"
-                          :key="item.id"
-                          :label="item.name"
-                          :value="item.id"
-                      >
+                      <template #default="{ item }">
                         <div class="option-item">
                           <div class="opt-main">
                             <span class="opt-name" :title="item.name">{{ item.name }}</span>
@@ -343,11 +344,8 @@
                             <el-tag v-else size="small" type="success" effect="plain">系统</el-tag>
                           </div>
                         </div>
-                      </el-option>
-                      <div v-if="loadingMore" style="text-align: center; color: #999; font-size: 12px; padding: 8px; background: #f9f9f9;">
-                        <el-icon class="is-loading"><Refresh /></el-icon> 加载更多中...
-                      </div>
-                    </el-select>
+                      </template>
+                    </el-autocomplete>
                   </el-form-item>
                 </el-col>
                 <el-col :span="12" style="display: flex; align-items: center;">
@@ -468,7 +466,7 @@
                 <el-col :span="24">
                   <el-form-item label="到货图片" prop="arrival_photo">
                     <div class="upload-container" id="upload-arrival_photo">
-                      <el-upload v-model:file-list="arrivalFileList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'arrival_photo')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'arrival_photo')" :before-upload="beforeAvatarUpload">
+                      <el-upload v-model:file-list="arrivalFileList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'arrival_photo')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'arrival_photo')" :before-upload="beforeAvatarUpload" :before-remove="handleBeforeRemove">
                         <el-icon><Plus /></el-icon>
                       </el-upload>
                       <div class="camera-card" @click="triggerCamera('arrival_photo')"><el-icon><Camera /></el-icon><span class="text">拍照</span></div>
@@ -480,7 +478,7 @@
                 <el-col :span="24">
                   <el-form-item label="质量报告" prop="quality_report_link">
                     <div class="upload-container" id="upload-quality_report_link">
-                      <el-upload v-model:file-list="reportFileList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'quality_report_link')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'quality_report_link')" :before-upload="beforeAvatarUpload">
+                      <el-upload v-model:file-list="reportFileList" action="#" list-type="picture-card" multiple :http-request="(opts) => customUpload(opts, 'quality_report_link')" :on-preview="handlePreviewPicture" :on-remove="(file) => handleRemoveImage(file, 'quality_report_link')" :before-upload="beforeAvatarUpload" :before-remove="handleBeforeRemove">
                         <el-icon><Plus /></el-icon>
                       </el-upload>
                       <div class="camera-card" @click="triggerCamera('quality_report_link')"><el-icon><Camera /></el-icon><span class="text">拍照</span></div>
@@ -514,11 +512,14 @@
                         v-model="form.bom_code"
                         filterable
                         remote
+                        reserve-keyword="true"
                         clearable
-                        placeholder="搜规格/编号"
+                        :disabled="!form.spec_model"
+                        :placeholder="!form.spec_model ? '请先在上方选择入库物料' : '搜规格/编号'"
                         :remote-method="handleSearchBom"
                         :loading="bomSearchLoading"
                         @change="handleBomSelect"
+                        default-first-option="true"
                         style="width: 100%"
                     >
                       <el-option
@@ -592,15 +593,15 @@
       </template>
     </el-dialog>
 
-    <el-dialog v-model="dialogVisibleImage" append-to-body width="50%"><img style="width: 100%" :src="dialogImageUrl" alt="Preview Image" /></el-dialog>
-    <el-dialog v-model="cameraDialogVisible" title="拍照上传" width="500px" append-to-body destroy-on-close :close-on-click-modal="false">
+    <el-dialog v-model="dialogVisibleImage" append-to-body width="50%" :close-on-click-modal="false" :close-on-press-escape="false"><img style="width: 100%" :src="dialogImageUrl" alt="Preview Image" /></el-dialog>
+    <el-dialog v-model="cameraDialogVisible" title="拍照上传" width="500px" append-to-body destroy-on-close :close-on-click-modal="false" :close-on-press-escape="false">
       <WebRtcCamera
           ref="cameraRef"
           @photo-submit="handleCameraConfirm"
           @cancel="cameraDialogVisible = false"
       />
     </el-dialog>
-    <el-dialog v-model="printVisible" title="标签打印预览" width="400px" destroy-on-close append-to-body>
+    <el-dialog v-model="printVisible" title="标签打印预览" width="400px" destroy-on-close append-to-body :close-on-click-modal="false" :close-on-press-escape="false">
       <div style="text-align: center;">
         <div v-loading="printLoading" class="preview-box">
           <img v-if="previewUrl" :src="previewUrl" alt="Label Preview" style="width: 100%; border: 1px solid #ccc;"/>
@@ -627,7 +628,7 @@
 import {ref, reactive, onMounted, watch, computed} from 'vue'
 import {Plus, Setting, Refresh, Search, Lock, Box, House, InfoFilled, Link, Printer, Camera, Picture, EditPen} from '@element-plus/icons-vue'
 import { useRouter } from 'vue-router'
-import {ElMessage, ElLoading} from 'element-plus'
+import {ElMessage, ElMessageBox, ElLoading} from 'element-plus'
 import dayjs from 'dayjs'
 import request from '@/utils/request'
 import {
@@ -717,6 +718,18 @@ const isUploading = ref(false)
 
 const queryParams = reactive({ page: 1, pageSize: 20, keyword: '', searchField: 'all', sku: '', category: '', material_type: '', statuses: ['在库', '借库'], company: '', orderByColumn: '', isAsc: '', advancedFilters: [] })
 const categoryOptions = ref<string[]>([])
+const categoryTreeOptions = ref<{ value: string; label: string; children?: any[] }[]>([])
+
+// 用于搜索栏级联选择器的数据绑定中转：数组 <-> 以 "/" 拼接的字符串
+const searchCategoryPath = computed({
+  get() {
+    return queryParams.category ? queryParams.category.split('/') : [];
+  },
+  set(val: string[] | null) {
+    queryParams.category = val && val.length > 0 ? val.join('/') : '';
+  }
+});
+
 const typeOptions = ref<string[]>([])
 const companyOptions = ref<string[]>([]) // [新增]
 const advancedFilterVisible = ref(false)
@@ -765,11 +778,8 @@ const operatorOptions = ref([
   { label: '大于等于', value: '>=' },
   { label: '小于等于', value: '<=' },
 ])
+const materialNameInput = ref('')
 const materialOptions = ref<any[]>([])
-const searchPage = ref(1)
-const searchKeyword = ref('')
-const hasNextPage = ref(true)
-let searchTimer: any = null
 
 // BOM 搜索相关
 const bomSearchLoading = ref(false)
@@ -802,6 +812,8 @@ const warehouseOptions = ref<any[]>([])
 const entryMode = ref('batch')
 const modeLocked = ref(false)
 
+// ================= 第一步：声明基础数据 =================
+
 // 列定义
 const baseColumns = [
   {prop: 'company_name', label: '所属公司', sortable: true}, // [新增]
@@ -838,14 +850,8 @@ const stockColumns = [
   {prop: 'quality_report_link', label: '质量报告', minWidth: '100', sortable: false},
   {prop: 'detail_link', label: '详情链接', minWidth: '100', sortable: false},
 ]
-const allColumns = [...baseColumns, ...stockColumns]
 
-// 初始化列显示状态（纯权限驱动，废除本地缓存）
-const initColumnPermissions = () => {
-  visibleColumnProps.value = allColumns
-    .filter(col => hasColumnPermission(col.prop))
-    .map(col => col.prop)
-}
+const allColumns = [...baseColumns, ...stockColumns]
 
 // 列与权限Code的映射关系（数据库中的code）
 const permissionMap: Record<string, string> = {
@@ -886,7 +892,15 @@ const permissionMap: Record<string, string> = {
   detail_link: 'inbound_semi:detail_link',
 }
 
-// 检查列权限
+// ================= 第二步：声明响应式变量 =================
+const visibleColumnProps = ref<string[]>([])
+
+// ================= 第三步：按依赖顺序放置方法和监听 =================
+
+// 1. 获取唯一缓存 Key
+const getStorageKey = () => `MOM_INBOUND_SEMI_COLS_${userStore.username || 'DEFAULT'}`;
+
+// 2. 检查列权限（依赖 permissionMap）
 const hasColumnPermission = (prop: string) => {
   if (userStore.role === 'SUPER_ADMIN' || userStore.username === 'IRIS') {
     return true
@@ -895,8 +909,51 @@ const hasColumnPermission = (prop: string) => {
   return code ? userStore.hasPermission(code) : false
 }
 
+// 3. 初始化列权限（依赖 allColumns / hasColumnPermission / getStorageKey）
+const initColumnPermissions = () => {
+  const allowedProps = allColumns
+    .filter(col => hasColumnPermission(col.prop))
+    .map(col => col.prop);
+
+  const cachedData = localStorage.getItem(getStorageKey());
+  if (cachedData) {
+    try {
+      const parsedCache = JSON.parse(cachedData);
+      visibleColumnProps.value = parsedCache.filter((prop: string) => allowedProps.includes(prop));
+      return;
+    } catch (e) {
+      console.error('解析列缓存失败', e);
+    }
+  }
+
+  visibleColumnProps.value = allowedProps;
+};
+
+// 4. 监听：只要用户勾选了列，就存入本地缓存
+watch(visibleColumnProps, (newVal) => {
+  localStorage.setItem(getStorageKey(), JSON.stringify(newVal));
+}, { deep: true });
+
+// 5. 全选功能的计算属性和事件
+const isAllSelected = computed(() => {
+  const allowedLength = allColumns.filter(c => hasColumnPermission(c.prop)).length;
+  return visibleColumnProps.value.length > 0 && visibleColumnProps.value.length === allowedLength;
+});
+
+const isIndeterminate = computed(() => {
+  const allowedLength = allColumns.filter(c => hasColumnPermission(c.prop)).length;
+  return visibleColumnProps.value.length > 0 && visibleColumnProps.value.length < allowedLength;
+});
+
+const handleCheckAllChange = (val: boolean) => {
+  if (val) {
+    visibleColumnProps.value = allColumns.filter(c => hasColumnPermission(c.prop)).map(c => c.prop);
+  } else {
+    visibleColumnProps.value = [];
+  }
+};
+
 const defaultColumns = ['company_name', 'material_name', 'spec_model', 'unit', 'inbound_date', 'sn_bn', 'status', 'quality_status', 'bom_code', 'work_order_code', 'qty_stock', 'qty_available', 'unit_total_cost', 'arrival_photo', 'quality_report_link']
-const visibleColumnProps = ref<string[]>([])
 
 const form = reactive({
   id: undefined, base_id: undefined as number | undefined,
@@ -932,9 +989,15 @@ watch(
 // BOM Search Logic
 // ------------------------------------
 const handleSearchBom = async (query: string) => {
+  // 防御性处理：粘贴场景常混入零宽字符 / 控制字符 / 不可见 Unicode
+  // 1) 强制转字符串，防 ClipboardEvent 对象
+  // 2) 深度净化：剔除所有控制字符、零宽字符、BOM
+  // 3) 常规 trim
+  const rawQuery = String(query || '')
+  const safeQuery = rawQuery.replace(/[\x00-\x1F\x7F-\x9F\u200B-\u200D\uFEFF]/g, '').trim()
   bomSearchLoading.value = true
   try {
-    const res: any = await searchBom(query)
+    const res: any = await searchBom(safeQuery, form.spec_model)
     bomOptions.value = res.data || []
   } finally { bomSearchLoading.value = false }
 }
@@ -980,70 +1043,58 @@ const handleManagerSelect = (item: any) => {
 // ------------------------------------
 // Material Search (Matches Buy.vue)
 // ------------------------------------
-const handleMaterialDropdownVisible = (visible: boolean) => { if (visible && materialOptions.value.length === 0) handleSearchMaterialDebounced('') }
-
-const handleSearchMaterialDebounced = (query: string) => {
-  if (searchTimer) clearTimeout(searchTimer)
-  searchTimer = setTimeout(() => {
-    handleSearchMaterial(query)
-  }, 300)
-}
-
-const handleSearchMaterial = async (query: string) => {
+const fetchMaterialSuggestions = async (query: string, cb: (results: any[]) => void) => {
+  const safeQuery = String(query || '').replace(/[\x00-\x1F\x7F-\x9F\u200B-\u200D\uFEFF]/g, '').trim()
   searchLoading.value = true
-  searchKeyword.value = query
-  searchPage.value = 1
-  materialOptions.value = []
-
   try {
-    const res: any = await searchMaterialBase(query, 1)
-    const apiResults = (res.data?.items || []).map((i: any) => ({...i, isHistory: false}))
-    materialOptions.value = apiResults
-    hasNextPage.value = res.data?.has_next ?? false
-  } finally { searchLoading.value = false }
-}
-
-const loadMoreMaterials = async () => {
-  if (searchLoading.value || loadingMore.value || !hasNextPage.value) return
-  loadingMore.value = true
-  searchPage.value += 1
-  try {
-    const res: any = await searchMaterialBase(searchKeyword.value, searchPage.value)
-    if (res.data && res.data.items && res.data.items.length > 0) {
-      const newItems = res.data.items.map((i: any) => ({...i, isHistory: false}))
-      materialOptions.value.push(...newItems)
-      hasNextPage.value = res.data.has_next
+    const res: any = await searchMaterialBase(safeQuery)
+    if (res.code === 200 && res.data) {
+      cb((res.data?.items || res.data || []).map((i: any) => ({ ...i, isHistory: false })))
     } else {
-      hasNextPage.value = false
+      cb([])
     }
   } catch (e) {
-    searchPage.value -= 1
+    cb([])
   } finally {
-    loadingMore.value = false
+    searchLoading.value = false
   }
 }
 
-const onMaterialSelected = async (val: number) => {
-  const item = materialOptions.value.find(i => i.id === val)
-  if (item) {
-    form.company_name = item.company_name // [新增]
-    form.material_name = item.name
-    form.spec_model = item.spec
-    form.category = item.category
-    form.unit = item.unit
-    form.material_type = item.type
-    checkHistoryAndSetMode(item.id)
+const onMaterialClear = () => {
+  form.base_id = undefined
+  form.company_name = ''
+  form.material_name = ''
+  form.spec_model = ''
+  form.category = ''
+  form.unit = ''
+  form.material_type = ''
+  form.bom_code = ''
+  form.bom_version = ''
+  bomOptions.value = []
+}
 
-    // 获取该物料历史入库库位（新增独立接口）
-    try {
-      const res = await request.get('/v1/inbound/semi/last-location', { params: { base_id: val } })
-      if (res.code === 200 && res.data.location) {
-        form.warehouse_location = res.data.location
-        ElMessage.info(`已自动带入该物料历史库位：【${res.data.location}】，请核对。`)
-      }
-    } catch (e) {
-      console.error('获取历史库位失败', e)
+const onMaterialSelected = async (item: any) => {
+  form.base_id = item.id
+  form.company_name = item.company_name
+  form.material_name = item.name
+  form.spec_model = item.spec
+  form.category = item.category
+  form.unit = item.unit
+  form.material_type = item.type
+  materialNameInput.value = item.name
+  form.bom_code = ''
+  form.bom_version = ''
+  bomOptions.value = []
+  checkHistoryAndSetMode(item.id)
+
+  try {
+    const res = await request.get('/v1/inbound/semi/last-location', { params: { base_id: item.id } })
+    if (res.code === 200 && res.data.location) {
+      form.warehouse_location = res.data.location
+      ElMessage.info(`已自动带入该物料历史库位：【${res.data.location}】，请核对。`)
     }
+  } catch (e) {
+    console.error('获取历史库位失败', e)
   }
 }
 
@@ -1190,6 +1241,7 @@ const fetchOptions = async () => {
     const res: any = await getFilterOptions()
     if (res.code === 200) {
       categoryOptions.value = res.data.categories
+      categoryTreeOptions.value = buildCategoryTree(res.data.categories || [])
       typeOptions.value = res.data.types
       companyOptions.value = res.data.companies // [新增]
     }
@@ -1198,6 +1250,30 @@ const fetchOptions = async () => {
   }
 }
 
+// 将 "IRIS/半成品/无人机" 之类的字符串数组构建为级联树
+const buildCategoryTree = (categories: string[]) => {
+  const root: { value: string; label: string; children?: any[] }[] = [];
+  categories.forEach((cat: string) => {
+    if (!cat) return;
+    const parts = cat.split('/');
+    let currentLevel = root;
+    parts.forEach((part, index) => {
+      let existingNode = currentLevel.find(n => n.value === part);
+      if (!existingNode) {
+        existingNode = { value: part, label: part };
+        currentLevel.push(existingNode);
+      }
+      if (index < parts.length - 1) {
+        if (!existingNode.children) {
+          existingNode.children = [];
+        }
+        currentLevel = existingNode.children as any[];
+      }
+    });
+  });
+  return root;
+};
+
 // 加载库位树数据
 const loadWarehouseTree = async () => {
   try {
@@ -1288,6 +1364,7 @@ const handleUpdate = (row: any) => {
   if (row.serial_number) { entryMode.value = 'serial'; form.serial_number = row.serial_number; form.batch_number = '' }
   else { entryMode.value = 'batch'; form.batch_number = row.batch_number; form.serial_number = '' }
   materialOptions.value = [{ id: row.base_id, name: row.material_name, spec: row.spec_model, category: row.category, company_name: row.company_name, isHistory: false }]
+  materialNameInput.value = row.material_name
   // 回显BOM，如果存在
   if (form.bom_code) {
     bomOptions.value = [{ bom_no: form.bom_code, version: form.bom_version }]
@@ -1429,8 +1506,10 @@ const submitForm = async () => {
           }
         } else { await updateSemiInbound(form.id!, payload); ElMessage.success('更新成功') }
         await fetchData(); visible.value = false
-      } catch (e: any) {
-        ElMessage.error(e.msg || '操作失败')
+      } catch (error: any) {
+        // 后端返回 HTTP 500 时（如物料类别隔离校验），从 axios 错误的 response.data.msg 提取具体报错
+        const errorMsg = error.response?.data?.msg || error.message || '系统内部错误，入库失败'
+        ElMessage.error(errorMsg)
       } finally { submitting.value = false }
     } else {
       ElMessage.warning('入库校验未通过，请检查必填项（如：库位）是否已填写完整！')
@@ -1438,7 +1517,40 @@ const submitForm = async () => {
   })
 }
 
-const handleDelete = async (row: any) => { try { await deleteSemiInbound(row.id); ElMessage.success('删除成功'); fetchData() } catch (e) { ElMessage.error('删除失败') } }
+const handleDelete = (row: any) => {
+  const recordName = row.sku || row.barcode || '此项';
+  ElMessageBox.confirm(
+    `是否确认删除半成品入库记录 "${recordName}" ?`,
+    "警告",
+    { confirmButtonText: "确定", cancelButtonText: "取消", type: "warning" }
+  ).then(async () => {
+    try {
+      await deleteSemiInbound(row.id);
+      ElMessage.success('删除成功');
+      fetchData();
+    } catch (e) {
+      ElMessage.error('删除失败');
+    }
+  }).catch(() => {});
+};
+
+// ==========================================
+// 拦截图片/文件删除：弹出确认框
+// ==========================================
+const handleBeforeRemove = (uploadFile, uploadFiles) => {
+  return new Promise((resolve, reject) => {
+    ElMessageBox.confirm(
+      `确定要移除文件 "${uploadFile.name}" 吗？`,
+      '提示',
+      { confirmButtonText: '确定', cancelButtonText: '取消', type: 'warning' }
+    ).then(() => {
+      resolve(true);
+    }).catch(() => {
+      reject(false);
+    });
+  });
+};
+
 const handlePrint = async (row: any) => {
   printVisible.value = true; printLoading.value = true; previewUrl.value = ''
   currentPrintData.value = { global_print_id: row.global_print_id, material_name: row.material_name, spec_model: row.spec_model, category: row.category, material_type: row.material_type, warehouse_loc: row.warehouse_loc, serial_number: row.serial_number, batch_number: row.batch_number, sku: row.sku }
@@ -1446,7 +1558,7 @@ const handlePrint = async (row: any) => {
 }
 const confirmPrint = async () => { printing.value = true; try { await executePrint({ ...currentPrintData.value, copies: printCopies.value }); ElMessage.success(`指令已发送 (x${printCopies.value})`); printVisible.value = false } catch (e: any) { ElMessage.error(e.msg || '打印失败') } finally { printing.value = false } }
 const resetForm = () => {
-  materialOptions.value = []; bomOptions.value = []; arrivalFileList.value = []; reportFileList.value = []; quality_report_url.value = ''
+  materialOptions.value = []; materialNameInput.value = ''; bomOptions.value = []; arrivalFileList.value = []; reportFileList.value = []; quality_report_url.value = ''
   Object.assign(form, {
     id: undefined, base_id: undefined,
     company_name: '', // [新增]

inventory-web/src/views/stock/inbound/service.vue

@@ -85,6 +85,8 @@
       :title="dialogTitle"
       width="700px"
       destroy-on-close
+      :close-on-click-modal="false"
+      :close-on-press-escape="false"
       @close="resetDialog"
     >
       <el-form ref="formRef" :model="form" :rules="rules" label-width="100px">
@@ -103,14 +105,14 @@
                         v-model="form.base_id"
                         filterable
                         remote
-                        reserve-keyword
+                        reserve-keyword="true"
                         placeholder="输入名称或规格..."
                         :remote-method="handleSearchMaterial"
                         @visible-change="handleMaterialDropdownVisible"
                         :loading="searchLoading"
                         style="width: 100%"
                         @change="onMaterialSelected"
-                        default-first-option
+                        default-first-option="true"
                     >
                       <el-option
                           v-for="item in materialOptions"
@@ -269,6 +271,7 @@ const perPage = ref(20)
 const total = ref(0)
 
 const materialOptions = ref<any[]>([])
+const searchKeyword = ref('')
 const searchLoading = ref(false)
 
 const searchForm = reactive({
@@ -329,15 +332,31 @@ const handlePageChange = (val: number) => {
 }
 
 const handleMaterialDropdownVisible = (visible: boolean) => {
-  if (visible && materialOptions.value.length === 0) {
-    handleSearchMaterial('')
-  }
+  if (!visible) return
+  // 防御性拦截 1：用户已选过物料（form.base_id 有值）
+  // 此时下拉打开只是 el-select 切换到"输入模式"，绝不能去请求默认列表。
+  // 否则会清空 searchKeyword 和 materialOptions，破坏用户正在编辑的搜索结果。
+  if (form.base_id) return
+  // 防御性拦截 2：已经有搜索关键字或已经有下拉数据
+  // 同样不要重置、不要再请求默认列表
+  if (searchKeyword.value || materialOptions.value.length > 0) return
+  handleSearchMaterial('')
 }
 
 const handleSearchMaterial = async (query: string) => {
+  // 防御性处理：粘贴场景常混入零宽字符 / 控制字符 / 不可见 Unicode
+  const rawQuery = String(query || '')
+  const safeQuery = rawQuery.replace(/[\x00-\x1F\x7F-\x9F\u200B-\u200D\uFEFF]/g, '').trim()
+  // 防御性拦截：el-select 在 filterable + remote 模式下，用户点击已聚焦的 input 时
+  // 会内部 emit query='' 触发 remote-method。这种"清空式 emit"是 el-select 切换到输入模式
+  // 的固有行为，绝不能破坏已选物料对应的搜索结果（清空 searchKeyword + materialOptions）。
+  // 只有当 form.base_id 已有值、当前查询为空、且下拉列表非空时，才拦截。
+  // 真正"清空"的场景（用户点 X 按钮）会通过 clearable 把 form.base_id 置空，本拦截放行。
+  if (!safeQuery && form.base_id && materialOptions.value.length > 0) return
+  searchKeyword.value = safeQuery
   searchLoading.value = true
   try {
-    const res = await searchMaterialBase(query)
+    const res = await searchMaterialBase(safeQuery)
     if (res.code === 200) {
       const apiResults = (res.data || []).map((i: any) => ({ ...i, isHistory: false }))
       materialOptions.value = apiResults

inventory-web/src/views/transaction/borrow.vue

@@ -12,6 +12,57 @@
         </div>
       </template>
 
+      <!-- ★ 审批单选择下拉框 -->
+      <div class="approval-request-select">
+        <el-select
+            v-model="selectedApprovalId"
+            placeholder="请选择已通过审批的借库申请单"
+            filterable
+            clearable
+            style="width: 100%"
+            :loading="requestsLoading"
+            @change="handleApprovalChange"
+        >
+          <el-option
+              v-for="req in approvalRequests"
+              :key="req.id"
+              :value="req.id"
+              :label="req.request_no"
+          >
+            <span>{{ req.request_no }}</span>
+            <el-divider direction="vertical" />
+            <span>{{ req.borrower_name || '未知借库人' }}</span>
+            <el-divider direction="vertical" />
+            <span style="color: #909399; font-size: 13px">{{ req.remark || '无备注' }}</span>
+          </el-option>
+        </el-select>
+        <p class="select-tip">仅显示已通过（status=1）的审批单</p>
+      </div>
+
+      <!-- ★ 审批计划清单预览 -->
+      <div v-if="selectedApproval" class="planned-items-section">
+        <div class="planned-header">
+          <span class="planned-title">审批计划清单</span>
+          <el-tag type="success" size="small">{{ plannedItems.length }} 种</el-tag>
+        </div>
+        <el-table :data="plannedItems" border size="small" style="width: 100%;">
+          <el-table-column type="index" label="序号" width="60" align="center" />
+          <el-table-column label="类型" width="80" align="center">
+            <template #default="{ row }">
+              <el-tag size="small" type="info">{{ row.material_type || '-' }}</el-tag>
+            </template>
+          </el-table-column>
+          <el-table-column prop="name" label="名称" min-width="120" show-overflow-tooltip />
+          <el-table-column prop="spec_model" label="规格" min-width="100" show-overflow-tooltip />
+          <el-table-column prop="warehouse_location" label="库位" width="100" show-overflow-tooltip />
+          <el-table-column label="审批数量" width="90" align="center">
+            <template #default="{ row }">
+              <span style="color: #E6A23C; font-weight: bold;">{{ row.quantity ?? '-' }}</span>
+            </template>
+          </el-table-column>
+        </el-table>
+      </div>
+
       <div class="scan-section">
         <div v-if="userStore.hasPermission('op_borrow:operation')" class="camera-placeholder" @click="showCamera = true">
           <el-icon :size="40" color="#409EFF"><CameraFilled /></el-icon>
@@ -204,26 +255,22 @@ import { ElMessage, ElMessageBox } from 'element-plus'
 import { Scissor, EditPen, Delete, CameraFilled, Close, Refresh, Select } from '@element-plus/icons-vue'
 import QrScanner from '@/components/QrScanner/index.vue'
 import { getStockByBarcode } from '@/api/outbound'
-import request from '@/utils/request'
+import { dispatchBorrow, getBorrowApprovalList } from '@/api/transaction'
 import { uploadFile } from '@/api/common/upload'
 import { useUserStore } from '@/stores/user'
 
 const userStore = useUserStore()
 
-// 列与权限Code的映射关系（数据库中的code）
+// 列与权限Code的映射关系
 const permissionMap: Record<string, string> = {
   borrower_name: 'op_borrow:borrower_name',
   sku: 'op_borrow:sku',
   available_quantity: 'op_borrow:available_quantity',
   out_quantity: 'op_borrow:out_quantity',
-  // 其他字段可根据需要添加
 }
 
-// 检查列权限
 const hasColumnPermission = (prop: string) => {
-  if (userStore.role === 'SUPER_ADMIN' || userStore.username === 'IRIS') {
-    return true
-  }
+  if (userStore.role === 'SUPER_ADMIN' || userStore.username === 'IRIS') return true
   const code = permissionMap[prop]
   return code ? userStore.hasPermission(code) : false
 }
@@ -236,6 +283,76 @@ const showCamera = ref(false)
 const barcodeRef = ref()
 const formRef = ref()
 
+// ★ 审批单选择
+const approvalRequests = ref<any[]>([])
+const selectedApprovalId = ref<number | null>(null)
+const requestsLoading = ref(false)
+
+const selectedApproval = computed(() =>
+  selectedApprovalId.value
+    ? approvalRequests.value.find(r => r.id === selectedApprovalId.value) ?? null
+    : null
+)
+
+const plannedItems = computed(() => selectedApproval.value?.items ?? [])
+
+// ★ 加载已通过审批的借库申请单列表
+const loadApprovalRequests = async () => {
+  requestsLoading.value = true
+  try {
+    const res: any = await getBorrowApprovalList({ status: 1, page: 1, limit: 100 })
+    approvalRequests.value = res.data?.items || []
+  } catch (e) {
+    console.error('加载借库审批单列表失败', e)
+  } finally {
+    requestsLoading.value = false
+  }
+}
+
+// ★ 切换审批单时：清空购物车和签名，防止跨单据污染
+const handleApprovalChange = (val: number | null) => {
+  if (!val) {
+    selectedApprovalId.value = null
+  }
+  cartItems.value = []
+  signatureFile.value = null
+  signaturePreviewUrl.value = ''
+  barcodeInput.value = ''
+}
+
+// ★ 扫码校验：比对扫描物料是否在审批计划清单内，且累计数量不超过审批上限
+const validateAgainstPlan = (scannedName: string, scannedSpec: string, scannedQty: number): string | null => {
+  const normalizedName = scannedName.trim()
+  const normalizedSpec = (scannedSpec || '').trim()
+
+  const matchedPlan = plannedItems.value.find(plan => {
+    const planName = (plan.name || '').trim()
+    const planSpec = (plan.spec_model || '').trim()
+    return planName === normalizedName && planSpec === normalizedSpec
+  })
+
+  if (!matchedPlan) {
+    return `该物料【${normalizedName} × ${normalizedSpec}】不在审批计划清单中，请检查`
+  }
+
+  const planQty = matchedPlan.quantity ?? 0
+
+  // 购物车中已扫的同名同规格物料累计数量
+  const alreadyScanned = cartItems.value
+    .filter(ci => {
+      const ciName = (ci.name || '').trim()
+      const ciSpec = (ci.spec_model || '').trim()
+      return ciName === normalizedName && ciSpec === normalizedSpec
+    })
+    .reduce((sum, ci) => sum + (ci.out_quantity || 0), 0)
+
+  if (alreadyScanned + scannedQty > planQty) {
+    return `【${normalizedName} × ${normalizedSpec}】超出审批数量（审批: ${planQty}，已扫: ${alreadyScanned}，本次: ${scannedQty}）`
+  }
+
+  return null
+}
+
 // 签名相关
 const showSignatureDialog = ref(false)
 const signaturePreviewUrl = ref('')
@@ -254,9 +371,7 @@ const form = reactive({
 })
 
 const rules = computed(() => ({
-  borrower_name: [
-    { required: true, message: '请输入借用人姓名', trigger: 'blur' }
-  ],
+  borrower_name: [{ required: true, message: '请输入借用人姓名', trigger: 'blur' }],
   expected_return_time: [
     { required: !isIndefinite.value, message: '请选择预计归还日期', trigger: 'change' }
   ]
@@ -265,9 +380,7 @@ const rules = computed(() => ({
 const isIndefinite = ref(false)
 
 const handleIndefiniteChange = (val: boolean) => {
-  if (val) {
-    form.expected_return_time = ''
-  }
+  if (val) form.expected_return_time = ''
 }
 
 const disabledDate = (time: Date) => {
@@ -278,35 +391,51 @@ const disabledDate = (time: Date) => {
 const onScanSuccess = (code: string) => {
   if (!code) return
   const trimCode = code.trim()
-
   const validPattern = /^[A-Za-z0-9\-\.]+$/
   if (!validPattern.test(trimCode)) {
     ElMessage.warning(`识别到异常符号，已忽略：${trimCode}`)
     return
   }
-
   if (trimCode.length < 3) {
     ElMessage.warning('扫描结果过短，请对准重试')
     return
   }
-
   if (loading.value) return
-
   barcodeInput.value = trimCode
   handleManualInput()
 }
 
 const handleManualInput = async () => {
+  if (!userStore.hasPermission('op_borrow:operation')) {
+    ElMessage.warning('无操作权限')
+    return
+  }
   const code = barcodeInput.value.trim()
   if (!code) return
 
+  // ★ 必须先选择审批单
+  if (!selectedApproval.value) {
+    ElMessage.warning('请先选择要执行借库的审批申请单')
+    return
+  }
+
   try {
     loading.value = true
 
-    // 查重
+    // 查重：条码或 SKU 匹配已扫记录
     const existIndex = cartItems.value.findIndex(item => item.barcode === code || item.sku === code)
     if (existIndex > -1) {
       const item = cartItems.value[existIndex]
+
+      // ★ 追加前仍需校验审批数量上限
+      const err = validateAgainstPlan(item.name, item.spec_model, 1)
+      if (err) {
+        ElMessage.error(err)
+        if (navigator.vibrate) navigator.vibrate([200, 100, 200])
+        barcodeInput.value = ''
+        return
+      }
+
       const maxQty = parseFloat(item.available_quantity)
       if (item.out_quantity < maxQty) {
         item.out_quantity++
@@ -314,6 +443,7 @@ const handleManualInput = async () => {
         if (navigator.vibrate) navigator.vibrate(50)
       } else {
         ElMessage.warning(`库存不足 (余: ${maxQty})`)
+        if (navigator.vibrate) navigator.vibrate([100, 50, 100])
       }
       barcodeInput.value = ''
       return
@@ -326,16 +456,28 @@ const handleManualInput = async () => {
       const availQty = parseFloat(item.available_quantity || 0)
 
       if (availQty <= 0) {
-        ElMessage.warning(`库存不足 (余: ${availQty})`)
-      } else {
-        cartItems.value.push({
-          ...item,
-          out_quantity: 1,
-          price: 0
-        })
-        ElMessage.success(`添加成功: ${item.name}`)
-        if (navigator.vibrate) navigator.vibrate(100)
+        ElMessage.warning(`库存不足或已借出 (余: ${availQty})`)
+        if (navigator.vibrate) navigator.vibrate([100, 50, 100])
+        barcodeInput.value = ''
+        return
       }
+
+      // ★ 扫码加入前强校验：不在清单内或超量直接阻断
+      const err = validateAgainstPlan(item.name, item.spec_model, 1)
+      if (err) {
+        ElMessage.error(err)
+        if (navigator.vibrate) navigator.vibrate([200, 100, 200])
+        barcodeInput.value = ''
+        return
+      }
+
+      cartItems.value.push({
+        ...item,
+        out_quantity: 1,
+        price: 0
+      })
+      ElMessage.success(`添加成功: ${item.name}`)
+      if (navigator.vibrate) navigator.vibrate(100)
       barcodeInput.value = ''
     }
   } catch (error: any) {
@@ -344,9 +486,9 @@ const handleManualInput = async () => {
     } else {
       ElMessage.error('查询出错')
     }
+    if (navigator.vibrate) navigator.vibrate([200, 100, 200])
   } finally {
     loading.value = false
-    // ★ 核心修改：只有当非全屏模式时，才自动聚焦输入框
     if (!showCamera.value) {
       nextTick(() => { barcodeRef.value?.focus() })
     }
@@ -354,10 +496,18 @@ const handleManualInput = async () => {
 }
 
 const removeFromCart = (index: number) => {
+  if (!userStore.hasPermission('op_borrow:operation')) {
+    ElMessage.warning('无操作权限')
+    return
+  }
   cartItems.value.splice(index, 1)
 }
 
 const clearAll = () => {
+  if (!userStore.hasPermission('op_borrow:operation')) {
+    ElMessage.warning('无操作权限')
+    return
+  }
   ElMessageBox.confirm('确定清空所有已选物品吗?', '提示', { type: 'warning' })
       .then(() => {
         cartItems.value = []
@@ -368,13 +518,19 @@ const clearAll = () => {
         signaturePreviewUrl.value = ''
         barcodeInput.value = ''
         isIndefinite.value = false
+        // 仅清空购物车，保留审批单选择
       })
 }
 
 // --- 提交逻辑 ---
 const submitForm = async () => {
+  if (!userStore.hasPermission('op_borrow:operation')) {
+    ElMessage.warning('无操作权限')
+    return
+  }
   if (!formRef.value) return
   if (cartItems.value.length === 0) return ElMessage.warning('请先添加物品')
+  if (!selectedApprovalId.value) return ElMessage.warning('请选择关联的审批申请单')
 
   await formRef.value.validate(async (valid: boolean) => {
     if (!valid) {
@@ -382,7 +538,6 @@ const submitForm = async () => {
       ElMessage.error(requiredMsg)
       return
     }
-
     if (!signatureFile.value) {
       ElMessage.error('请领用人进行电子签名')
       return
@@ -395,20 +550,32 @@ const submitForm = async () => {
       const uploadRes = await uploadFile(signatureFile.value)
       const signatureUrl = uploadRes.data.url
 
-      // 处理无限期借用：如果选择了无限期，将预计归还时间置为空
-      const submitData = {
-        ...form,
-        expected_return_time: isIndefinite.value ? null : form.expected_return_time
+      // ★ 规范 Payload：只包含后端需要的最小字段
+      const itemsPayload = cartItems.value.map(item => {
+        let safeQty = Number(item.out_quantity)
+        if (isNaN(safeQty) || safeQty <= 0) safeQty = 1
+
+        return {
+          id: item.id || 0,
+          source_table: item.source_table || '',
+          sku: item.sku ? String(item.sku) : (item.barcode ? String(item.barcode) : 'NO_SKU'),
+          barcode: item.barcode ? String(item.barcode) : '',
+          out_quantity: safeQty
+        }
+      })
+
+      if (itemsPayload.length === 0) {
+        ElMessage.warning('请至少扫描一件物料后再提交')
+        return
       }
 
-      await request({
-        url: '/v1/transactions/borrow',
-        method: 'post',
-        data: {
-          items: cartItems.value,
-          ...submitData,
-          signature_path: signatureUrl
-        }
+      await dispatchBorrow({
+        approval_id: selectedApprovalId.value,
+        items: itemsPayload,
+        borrower_name: form.borrower_name,
+        signature_path: signatureUrl,
+        remark: form.remark,
+        expected_return_time: isIndefinite.value ? null : form.expected_return_time
       })
 
       ElMessage.success('借用成功')
@@ -431,13 +598,18 @@ const submitForm = async () => {
 }
 
 // --- 签名逻辑 ---
-const openSignatureDialog = () => { showSignatureDialog.value = true }
+const openSignatureDialog = () => {
+  if (!userStore.hasPermission('op_borrow:operation')) {
+    ElMessage.warning('无签名权限')
+    return
+  }
+  showSignatureDialog.value = true
+}
 
 const initCanvas = async () => {
   await nextTick()
   const canvas = nativeCanvasRef.value
   const container = canvasContainerRef.value
-
   if (canvas && container) {
     canvas.width = container.clientWidth
     canvas.height = container.clientHeight
@@ -500,6 +672,12 @@ const handleSignConfirm = () => {
 
 const handleSignCancel = () => { showSignatureDialog.value = false }
 
+// --- 初始化 ---
+import { onMounted } from 'vue'
+onMounted(() => {
+  loadApprovalRequests()
+})
+
 onUnmounted(() => {
   if (signaturePreviewUrl.value) URL.revokeObjectURL(signaturePreviewUrl.value)
 })
@@ -514,7 +692,16 @@ onUnmounted(() => {
 .card-header { display: flex; justify-content: space-between; align-items: center; }
 .title-box { font-size: 16px; font-weight: bold; display: flex; align-items: center; gap: 8px; }
 
-/* 扫码区（卡片内触发器） */
+/* 审批单选择 */
+.approval-request-select { margin-bottom: 16px; }
+.select-tip { color: #909399; font-size: 12px; margin: 4px 0 0 0; }
+
+/* 计划清单 */
+.planned-items-section { margin-bottom: 16px; background: #f5f7fa; border-radius: 6px; padding: 12px; }
+.planned-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 8px; }
+.planned-title { font-size: 13px; font-weight: bold; color: #606266; }
+
+/* 扫码区 */
 .scan-section { margin-bottom: 20px; }
 .camera-placeholder {
   height: 120px; background: #f5f7fa; border: 1px dashed #dcdfe6; border-radius: 8px;
@@ -525,59 +712,26 @@ onUnmounted(() => {
 .camera-placeholder:active { background: #e6e8eb; }
 .camera-placeholder .text { margin-top: 5px; font-size: 13px; }
 
-/* ★ 全屏扫码层样式 */
+/* 全屏扫码层 */
 .fullscreen-scanner-overlay {
-  position: fixed;
-  top: 0;
-  left: 0;
-  width: 100vw;
-  height: 100vh;
-  background: #000;
-  z-index: 9999;
-  display: flex;
-  flex-direction: column;
+  position: fixed; top: 0; left: 0; width: 100vw; height: 100vh;
+  background: #000; z-index: 9999; display: flex; flex-direction: column;
 }
-
 .scanner-header {
-  height: 60px;
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  padding: 0 15px;
-  background: rgba(0,0,0,0.6);
-  color: #fff;
-  position: absolute;
-  top: 0;
-  width: 100%;
-  z-index: 10;
+  height: 60px; display: flex; align-items: center; justify-content: space-between;
+  padding: 0 15px; background: rgba(0,0,0,0.6); color: #fff;
+  position: absolute; top: 0; width: 100%; z-index: 10;
 }
 .scanner-title { font-size: 16px; font-weight: bold; }
 .close-btn { background: rgba(255,255,255,0.2); border: none; color: #fff; }
-
 .scanner-body {
-  flex: 1;
-  width: 100%;
-  position: relative;
-  display: flex;
-  align-items: center;
-  justify-content: center;
+  flex: 1; width: 100%; position: relative; display: flex;
+  align-items: center; justify-content: center;
 }
-/* 强制子组件（QrScanner）填满容器 */
-:deep(.qr-scanner-container) {
-  width: 100% !important;
-  height: 100% !important;
-  border-radius: 0 !important;
-}
-
+:deep(.qr-scanner-container) { width: 100% !important; height: 100% !important; border-radius: 0 !important; }
 .scanner-footer {
-  position: absolute;
-  bottom: 0;
-  width: 100%;
-  padding: 20px;
-  background: rgba(0,0,0,0.6);
-  color: #fff;
-  text-align: center;
-  z-index: 10;
+  position: absolute; bottom: 0; width: 100%; padding: 20px;
+  background: rgba(0,0,0,0.6); color: #fff; text-align: center; z-index: 10;
 }
 .current-count { color: #67c23a; font-weight: bold; margin-top: 5px; font-size: 16px; }
 
@@ -591,7 +745,6 @@ onUnmounted(() => {
 .unsigned-placeholder { display: flex; flex-direction: column; align-items: center; color: #909399; font-size: 13px; }
 .signed-img img { max-height: 90px; }
 .re-sign-tip { display: block; text-align: center; font-size: 12px; color: #409EFF; margin-top: 2px; }
-
 .bottom-actions { display: flex; justify-content: space-between; margin-top: 30px; }
 .bottom-actions .el-button { width: 48%; }
 
@@ -621,4 +774,4 @@ onUnmounted(() => {
   .sidebar-actions { flex-direction: row; width: 100%; gap: 10px; }
   .sidebar-actions .el-button { flex: 1; height: 40px; }
 }
-</style>
+</style>

inventory-web/src/views/transaction/records.vue

@@ -35,27 +35,50 @@
         stripe
         style="margin-top:20px"
         v-loading="loading"
+        type="expand"
     >
+      <el-table-column type="expand">
+        <template #default="props">
+          <div style="padding: 10px 40px;">
+            <h4 style="margin: 0 0 10px; font-size: 14px; color: #606266;">借出明细</h4>
+            <el-table :data="props.row.children" border size="small">
+              <el-table-column prop="material_name" label="物料名称" min-width="140" show-overflow-tooltip />
+              <el-table-column prop="sku" label="SKU" width="120" show-overflow-tooltip />
+              <el-table-column label="借出数量" width="80" align="center">
+                <template #default="{row}">
+                  <el-tag type="info">{{ row.quantity }}</el-tag>
+                </template>
+              </el-table-column>
+              <el-table-column label="已还数量" width="80" align="center">
+                <template #default="{row}">
+                  <el-tag type="success">{{ row.returned_quantity || 0 }}</el-tag>
+                </template>
+              </el-table-column>
+              <el-table-column label="待还数量" width="80" align="center">
+                <template #default="{row}">
+                  <el-tag v-if="row.pending_quantity > 0" type="warning">{{ row.pending_quantity }}</el-tag>
+                  <el-tag v-else type="success">0</el-tag>
+                </template>
+              </el-table-column>
+              <el-table-column prop="return_location" label="归还库位" min-width="120">
+                <template #default="{row}">
+                  <span v-if="row.return_location">{{ row.return_location }}</span>
+                  <span v-else style="color:#ccc">-</span>
+                </template>
+              </el-table-column>
+            </el-table>
+          </div>
+        </template>
+      </el-table-column>
+
       <el-table-column v-if="hasColumnPermission('borrow_no')" prop="borrow_no" label="单号" width="180" show-overflow-tooltip />
       <el-table-column v-if="hasColumnPermission('borrower_name')" prop="borrower_name" label="借用人" width="100" />
-      <el-table-column v-if="hasColumnPermission('sku')" prop="sku" label="SKU" width="120" show-overflow-tooltip />
-      <el-table-column label="借出数量" width="90" align="center">
-        <template #default="{row}">
-          <el-tag type="info">{{ row.quantity }}</el-tag>
-        </template>
-      </el-table-column>
-      <el-table-column label="已还数量" width="90" align="center">
-        <template #default="{row}">
-          <el-tag type="success">{{ row.returned_quantity || 0 }}</el-tag>
-        </template>
-      </el-table-column>
-      <el-table-column label="待还数量" width="90" align="center">
-        <template #default="{row}">
-          <el-tag v-if="row.pending_quantity > 0" type="warning">{{ row.pending_quantity }}</el-tag>
-          <el-tag v-else type="success">0</el-tag>
-        </template>
-      </el-table-column>
       <el-table-column v-if="hasColumnPermission('borrow_time')" prop="borrow_time" label="借出时间" width="160" sortable />
+      <el-table-column label="借出物品" width="90" align="center">
+        <template #default="{row}">
+          <el-tag type="info">{{ row.children ? row.children.length : 0 }} 项</el-tag>
+        </template>
+      </el-table-column>
       <el-table-column v-if="hasColumnPermission('return_operator')" prop="return_operator" label="归还人" width="100" />
 
       <el-table-column v-if="hasColumnPermission('expected_return_time') || hasColumnPermission('return_time')" label="归还时间 / 预计" min-width="200">
@@ -88,13 +111,6 @@
         </template>
       </el-table-column>
 
-      <el-table-column v-if="hasColumnPermission('return_location')" label="归还库位" min-width="120">
-        <template #default="{row}">
-          <span v-if="row.return_location">{{ row.return_location }}</span>
-          <span v-else style="color:#ccc">-</span>
-        </template>
-      </el-table-column>
-
       <el-table-column v-if="hasColumnPermission('borrow_signature') || hasColumnPermission('return_signature')" label="电子签名" width="140" align="center">
         <template #default="{row}">
           <div style="display:flex; justify-content: center; gap:10px">
@@ -205,7 +221,20 @@ const fetchData = async () => {
         search_type: searchType.value
       }
     })
-    list.value = res.data.items
+
+    // ★ 按 borrow_no 分组聚合为主子表结构
+    const groupMap = new Map()
+    ;(res.data.items || []).forEach(item => {
+      if (!groupMap.has(item.borrow_no)) {
+        groupMap.set(item.borrow_no, {
+          ...item,
+          children: []
+        })
+      }
+      groupMap.get(item.borrow_no).children.push(item)
+    })
+    list.value = Array.from(groupMap.values())
+
     total.value = res.data.total
   } finally { loading.value = false }
 }

msg.txt

@@ -1 +0,0 @@
-fix: send correct numeric user_id to stocktake draft api to prevent 500 error