1

src/hooks/useResolvedAssetReadUrl.test.tsx

@@ -66,7 +66,50 @@ describe('useResolvedAssetReadUrl', () => {
     );
   });
 
-  test('refreshKey changes force a refreshed signed image url', async () => {
+  test('无前导斜杠的 generated 私有资源也不会裸写入 img', async () => {
+    vi.spyOn(globalThis, 'fetch').mockResolvedValue(
+      new Response(
+        JSON.stringify({
+          ok: true,
+          data: {
+            read: {
+              objectKey:
+                'generated-puzzle-assets/puzzle-session-1/candidate-1/asset-1/image.png',
+              signedUrl: 'https://signed.example.com/puzzle.png',
+              expiresAt: '2099-01-01T00:10:00Z',
+            },
+          },
+          error: null,
+          meta: {
+            apiVersion: '2026-04-08',
+            routeVersion: '2026-04-08',
+            latencyMs: 1,
+            timestamp: '2099-01-01T00:00:00Z',
+          },
+        }),
+        {
+          status: 200,
+          headers: {
+            'Content-Type': 'application/json',
+          },
+        },
+      ),
+    );
+
+    render(
+      <ResolvedAssetImage
+        src="generated-puzzle-assets/puzzle-session-1/candidate-1/asset-1/image.png"
+        alt="候选图"
+      />,
+    );
+
+    expect(screen.queryByRole('img', { name: '候选图' })).toBeNull();
+
+    const image = await screen.findByRole('img', { name: '候选图' });
+    expect(image.getAttribute('src')).toBe('https://signed.example.com/puzzle.png');
+  });
+
+  test('refreshKey changes force a fresh signed url request without mutating OSS signature query', async () => {
     vi.spyOn(globalThis, 'fetch').mockImplementation(async () =>
       new Response(
         JSON.stringify({
@@ -105,7 +148,7 @@ describe('useResolvedAssetReadUrl', () => {
     );
 
     const firstImage = await screen.findByRole('img', { name: '候选图' });
-    expect(firstImage.getAttribute('src')).toContain('_v=first-version');
+    expect(firstImage.getAttribute('src')).toBe('https://signed.example.com/puzzle.png');
 
     rerender(
       <ResolvedAssetImage
@@ -116,11 +159,11 @@ describe('useResolvedAssetReadUrl', () => {
     );
 
     await waitFor(() => {
-      expect(screen.getByRole('img', { name: '候选图' }).getAttribute('src')).toContain(
-        '_v=second-version',
-      );
+      expect(globalThis.fetch).toHaveBeenCalledTimes(2);
     });
-    expect(globalThis.fetch).toHaveBeenCalledTimes(2);
+    expect(screen.getByRole('img', { name: '候选图' }).getAttribute('src')).toBe(
+      'https://signed.example.com/puzzle.png',
+    );
   });
 
   test('generated 私有资源签名失败时保持空图像而不是回退裸路径', async () => {