借款对账 S4–S8：人工未提交、晚到补记、追回与界面收口（09-17-company-loan-principal-repayment）

新增三类证据与双人复核的人工未提交、逐原因冻结、晚到付款逐借款补记和实际退款追回；补齐对账与补证恢复界面，保护已消费依据、最终归属重验及全局交易唯一性。

验证：81 迁移、HTTP 95 组、浏览器 13 组、数据库约束 9 组；13 项有效变异被捕获，部分由下游或数据库保护检出。构建、类型、合同和治理检查通过；修复后同模型只读静态复核通过。

真实回单待验、整体业务验收未通过；S0 存量、人员、银行材料与业务独立验收未完成。3 个新增迁移须纳入获批发布清单。本次仅本地提交，不推送、不部署。

server/src/services/loanBankTerminalFacts.js

@@ -59,7 +59,7 @@ async function assertTerminalFactHolds(tx, config, batch, fact, submission) {
   if (!submission || submission.payment_batch_id !== batch.id || submission.status !== "active") throw buildBusinessValidationError("loan.terminal_fact_invalid", {}, 409);
   if (fact.kind === "termination_evidence") {
     const evidence = await tx.loanBankTerminalEvidence.findUnique({ where: { id: fact.evidence_id } });
-    if (!evidence || evidence.payment_batch_id !== batch.id || evidence.voided_at) throw buildBusinessValidationError("loan.terminal_fact_invalid", {}, 409);
+    if (!evidence || evidence.payment_batch_id !== batch.id || evidence.voided_at || evidence.evidence_kind !== "bank_terminal") throw buildBusinessValidationError("loan.terminal_fact_invalid", {}, 409);
   } else {
     let slip;
     try { slip = await failureSlip(tx, config, batch, fact.receipt_attachment_id); }
@@ -178,12 +178,12 @@ function releaseWaitDays(config) {
 
 // The full "not paid" release condition, evaluated under the batch lock both
 // when confirming and again in the final cancel transaction.
-async function assertNotPaidReleasable(tx, config, batch) {
+async function assertNotPaidReleasable(tx, config, batch, { manualExportIds = [] } = {}) {
   const { submissionFacts, attestationMatches, voidedAttachmentResolved } = submissions();
   const facts = await submissionFacts(tx, batch);
   if (facts.legacy) throw buildBusinessValidationError("loan.submission_history_unverified", {}, 409);
   const approvedList = await tx.loanBankSubmissionAttestation.findFirst({ where: { payment_batch_id: batch.id, status: "approved" } });
-  if (!facts.active.length || !attestationMatches(approvedList, facts)) throw buildBusinessValidationError("loan.submission_list_unverified", {}, 409);
+  if ((!facts.active.length && !manualExportIds.length) || !attestationMatches(approvedList, facts)) throw buildBusinessValidationError("loan.submission_list_unverified", {}, 409);
   const terminal = await tx.loanBankTerminalFact.findMany({ where: { payment_batch_id: batch.id, status: "approved" } });
   const covered = new Set();
   const usedFacts = [];
@@ -196,7 +196,7 @@ async function assertNotPaidReleasable(tx, config, batch) {
     usedFacts.push(fact.id);
   }
   // Every export must be accounted for by a submission that reached a terminal state.
-  const linkedExports = new Set(facts.active.map((item) => item.export_id).filter(Boolean));
+  const linkedExports = new Set([...facts.active.map((item) => item.export_id).filter(Boolean), ...manualExportIds]);
   if (facts.exports.some((item) => !linkedExports.has(item.id))) throw buildBusinessValidationError("loan.export_unlinked", {}, 409);
   // No payment receipt may stay unexplained: covered by a terminal fact, or a
   // voided slip that is provably a failure or a clearly different payment.
@@ -240,22 +240,23 @@ async function terminalState(tx, batch) {
     tx.loanBankTerminalFact.findMany({ where: { payment_batch_id: batch.id }, orderBy: [{ proposed_at: "asc" }, { id: "asc" }] }),
   ]);
   return {
-    evidences: evidences.map((item) => ({ id: item.id, originalName: item.original_name, uploadedAt: item.uploaded_at, voided: Boolean(item.voided_at) })),
+    evidences: evidences.map((item) => ({ id: item.id, originalName: item.original_name, evidenceKind: item.evidence_kind, uploadedAt: item.uploaded_at, voided: Boolean(item.voided_at) })),
     facts: terminal.map((item) => ({ id: item.id, submissionId: item.submission_id, kind: item.kind, terminalStatus: item.terminal_status,
       evidenceId: item.evidence_id, receiptAttachmentId: item.receipt_attachment_id, resolvesAttachmentIds: item.resolves_attachment_ids,
-      status: item.status, proposedBy: item.proposed_by, reviewedBy: item.reviewed_by })),
+      status: item.status, note: item.note, proposedBy: item.proposed_by, reviewedBy: item.reviewed_by })),
   };
 }
 
 async function uploadTerminalEvidence(tx, batch, request, file) {
   const { readLoanRepayment } = loanPayments();
-  assertTerminalBatch(batch, await readLoanRepayment(tx, batch));
+  if (batch.status === "cancelled") await require("./loanBankResults").source(tx, batch);
+  else assertTerminalBatch(batch, await readLoanRepayment(tx, batch));
   // The same bank letter cannot back terminal facts of two batches.
   if (await tx.loanBankTerminalEvidence.count({ where: { file_sha256: file.fileSha256, payment_batch_id: { not: batch.id } } })) {
     throw buildBusinessValidationError("loan.terminal_evidence_invalid", {}, 409);
   }
   const evidence = await tx.loanBankTerminalEvidence.create({ data: {
-    payment_batch_id: batch.id, storage_path: file.storagePath, original_name: file.originalName, mime_type: file.mimeType,
+    payment_batch_id: batch.id, evidence_kind: file.evidenceKind ?? "bank_terminal", storage_path: file.storagePath, original_name: file.originalName, mime_type: file.mimeType,
     file_size: file.fileSize, file_sha256: file.fileSha256, uploaded_by: request.employee.id } });
   await auditLoan(tx, request, "LOAN_TERMINAL_EVIDENCE_UPLOADED", batch.loan_repayment_id, { paymentBatchId: batch.id, evidenceId: evidence.id });
   return evidence;
@@ -268,6 +269,7 @@ async function voidTerminalEvidence(tx, config, batch, request, evidenceId, reas
   assertTerminalBatch(batch, await loanPayments().readLoanRepayment(tx, batch));
   const evidence = await tx.loanBankTerminalEvidence.findUnique({ where: { id: evidenceId } });
   if (!evidence || evidence.payment_batch_id !== batch.id || evidence.voided_at) throw buildBusinessValidationError("loan.terminal_evidence_invalid", {}, 409);
+  if (await tx.loanBankResultEvent.count({ where: { OR: [{ evidence_id: evidence.id, status: { in: ["approved", "booked"] } }, { correction_evidence_id: evidence.id, status: "dismissed" }] } })) throw buildBusinessValidationError("loan.bank_result_reconcile_required", {}, 409);
   const voided = await tx.loanBankTerminalEvidence.update({ where: { id: evidence.id }, data: {
     voided_at: new Date(), voided_by: request.employee.id, void_reason: reason } });
   await auditLoan(tx, request, "LOAN_TERMINAL_EVIDENCE_VOIDED", batch.loan_repayment_id, { paymentBatchId: batch.id, evidenceId: evidence.id });