收口V4业务卡展示字段白名单

server/src/test/java/cn/nianxx/thhotel/workflows/reservation/control/SuperAgentTaskResultControllerTest.java

@@ -1081,6 +1081,14 @@ class SuperAgentTaskResultControllerTest {
                 .contains("att-pay-1")
                 .contains("payment-slip.jpg")
                 .doesNotContain("https://oss.example.test");
+        List<String> displayPayloads = jdbcTemplate.queryForList("""
+                SELECT display_payload_json
+                FROM workflow_reservation_v4_task_card
+                WHERE source_message_id = ?
+                """, String.class, source.inboxId());
+        assertThat(displayPayloads).allSatisfy(displayPayload -> assertThat(displayPayload)
+                .doesNotContain("https://oss.example.test")
+                .doesNotContain("raw-event-attachment.jpg"));
 
         mockMvc.perform(signedPost(body, "nonce-v4-business-root-replay-001"))
                 .andExpect(status().isOk())
@@ -3756,6 +3764,13 @@ class SuperAgentTaskResultControllerTest {
                         "locator_value": "GRP-V4-001"
                       },
                       "attachment_ids": ["att-pay-1"],
+                      "evidence_url": "https://oss.example.test/raw-event-attachment.jpg",
+                      "attachments": [
+                        {
+                          "name": "raw-event-attachment.jpg",
+                          "url": "https://oss.example.test/raw-event-attachment.jpg"
+                        }
+                      ],
                       "manual_review": null
                     }
                   ]