修复：限定幂等键精确业务域

shierfeng-fastapi-backend/module_business/service/usage_service.py

@@ -179,7 +179,7 @@ class UsageService:
             recovered = await OperationDao.get_usage_by_idempotency_key(
                 query_db,
                 page_object.idempotency_key,
-                site_ids=site_ids,
+                site_ids=[expected_site_id],
             )
             if recovered is None:
                 raise ServiceException(message='使用失败，数据冲突')
@@ -351,11 +351,18 @@ class UsageService:
             request_hash = cls._build_request_hash(page_object)
             user_id, user_name = cls._current_identity(current_user)
             preflight_site_ids = await cls._site_scope(query_db, current_user)
-            existing = await OperationDao.get_usage_by_idempotency_key(
-                query_db,
-                page_object.idempotency_key,
-                site_ids=preflight_site_ids,
-            )
+            # 产线归属是请求内稳定路由；锁事务仍以库存中的实际现场复核。
+            preflight_line = await MasterDao.get_line(query_db, page_object.line_id)
+            preflight_site_id = preflight_line.site_id if preflight_line is not None else None
+            existing = None
+            if preflight_site_id is not None and (
+                preflight_site_ids is None or preflight_site_id in preflight_site_ids
+            ):
+                existing = await OperationDao.get_usage_by_idempotency_key(
+                    query_db,
+                    page_object.idempotency_key,
+                    site_ids=[preflight_site_id],
+                )
             if existing is not None:
                 if not cls._is_exact_idempotent_result(existing, page_object, request_hash):
                     raise ServiceException(message='使用失败，幂等键已被其他请求使用')
@@ -390,6 +397,8 @@ class UsageService:
             expected_site_id = inventory.site_id
             await cls._assert_pallet_site_access(query_db, current_user, inventory.site_id)
             locked_site_ids = await cls._site_scope(query_db, current_user)
+            if locked_site_ids is not None and inventory.site_id not in locked_site_ids:
+                cls._raise_pallet_not_accessible(current_user)
 
             locked_pallets = await InventoryDao.get_pallets_by_ids(
                 query_db,
@@ -410,7 +419,7 @@ class UsageService:
             locked_existing = await OperationDao.get_usage_by_idempotency_key(
                 query_db,
                 page_object.idempotency_key,
-                site_ids=locked_site_ids,
+                site_ids=[inventory.site_id],
             )
             if locked_existing is not None:
                 if locked_existing.site_id != inventory.site_id or not cls._is_exact_idempotent_result(