@mzzsfy/dsh-usage-panel 0.4.3

package/test/parsers.test.mjs

@@ -0,0 +1,286 @@
+// 用量面板解析器测试:BDD 场景 1-9(见 docs/feat-usage-panel/plan.md)
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+
+import {
+  toStrictNumber,
+  getPath,
+  extractByRule,
+  parseDeepSeek,
+  parseOpenRouter,
+  parseKimi,
+  parseZhipu,
+  parseMiniMax,
+  parseNewApi,
+  extractCustom,
+} from '../src/parsers.mjs'
+
+const HOUR_MS = 60 * 60 * 1000
+
+test('场景1 DeepSeek 余额:双币种 balance_infos 解析', () => {
+  const body = {
+    is_available: true,
+    balance_infos: [
+      { currency: 'CNY', total_balance: '110.00', granted_balance: '2.00', topped_up_balance: '108.00' },
+      { currency: 'USD', total_balance: '15.30', granted_balance: '0.00', topped_up_balance: '15.30' },
+    ],
+  }
+  const reading = parseDeepSeek(body)
+  assert.equal(reading.kind, 'balance')
+  assert.equal(reading.entries.length, 2)
+  assert.deepEqual(reading.entries[0], { currency: 'CNY', total: 110, granted: 2, toppedUp: 108, isAvailable: true })
+  assert.deepEqual(reading.entries[1], { currency: 'USD', total: 15.3, granted: 0, toppedUp: 15.3, isAvailable: true })
+})
+
+test('场景1b DeepSeek 余额:is_available=false 透传,缺省赠送/充值字段为 null', () => {
+  const body = { is_available: false, balance_infos: [{ currency: 'CNY', total_balance: '0.00' }] }
+  const reading = parseDeepSeek(body)
+  assert.equal(reading.entries[0].isAvailable, false)
+  assert.equal(reading.entries[0].granted, null)
+  assert.equal(reading.entries[0].toppedUp, null)
+})
+
+test('场景2 DeepSeek 错误体:抛出含 message 的错误', () => {
+  assert.throws(() => parseDeepSeek({ error: { message: '认证失败', type: 'invalid_request_error' } }), /认证失败/)
+  assert.throws(() => parseDeepSeek({}), /balance_infos/)
+})
+
+test('场景3 OpenRouter credits:总额/已用/剩余', () => {
+  const body = { data: { total_credits: 10, total_usage: 1.58 } }
+  const reading = parseOpenRouter(body)
+  assert.equal(reading.kind, 'balance')
+  assert.deepEqual(reading.entries[0], { currency: 'USD', total: 10, used: 1.58, remaining: 8.42 })
+  assert.throws(() => parseOpenRouter({ data: {} }), /total_credits/)
+})
+
+test('场景4 Kimi usages:5小时窗口与每周配额', () => {
+  const body = {
+    limits: [{ detail: { limit: 1500, remaining: 1000, resetTime: '2026-03-01T00:00:00Z' } }],
+    usage: { limit: 10000, remaining: 6900, resetTime: '2026-03-02T00:00:00Z' },
+    user: { membership: { level: 'LEVEL_3' } },
+  }
+  const reading = parseKimi(body)
+  assert.equal(reading.kind, 'quota')
+  assert.equal(reading.windows.length, 2)
+  assert.equal(reading.windows[0].label, '5小时')
+  assert.equal(reading.windows[0].limit, 1500)
+  assert.equal(reading.windows[0].remaining, 1000)
+  assert.equal(reading.windows[0].used, 500)
+  assert.ok(Math.abs(reading.windows[0].utilization - (500 / 1500) * 100) < 1e-9)
+  assert.equal(reading.windows[1].label, '7天')
+  assert.equal(reading.membership, 'LEVEL_3')
+  assert.throws(() => parseKimi({ limits: [] }), /usage|limits/)
+})
+
+test('场景5 智谱 quota:unit 3/6 分窗 + 未分类回填 + 失败体', () => {
+  const base = 1740000000000
+  const body = {
+    success: true,
+    data: {
+      limits: [
+        { type: 'TOKENS_LIMIT', unit: 6, percentage: 30, nextResetTime: base + 24 * HOUR_MS },
+        { type: 'TOKENS_LIMIT', unit: 3, percentage: 12.5, nextResetTime: base + 2 * HOUR_MS },
+      ],
+    },
+  }
+  const reading = parseZhipu(body)
+  assert.equal(reading.kind, 'quota')
+  assert.equal(reading.windows[0].label, '5小时')
+  assert.equal(reading.windows[0].utilization, 12.5)
+  assert.equal(reading.windows[1].label, '7天')
+  assert.equal(reading.windows[1].utilization, 30)
+
+  const heuristic = parseZhipu({
+    success: true,
+    data: { limits: [{ type: 'TOKENS_LIMIT', percentage: 5, nextResetTime: base }] },
+  })
+  assert.equal(heuristic.windows.length, 1)
+  assert.equal(heuristic.windows[0].label, '5小时')
+
+  assert.throws(() => parseZhipu({ success: false, msg: '额度查询失败' }), /额度查询失败/)
+  assert.throws(() => parseZhipu({ success: true, data: { limits: [] } }), /额度窗口/)
+})
+
+test('场景5b 智谱 Lite:CREDIT_LIMIT 窗口与 currentValue/usage 反推', () => {
+  const base = 1740000000000
+  const reading = parseZhipu({
+    success: true,
+    data: {
+      limits: [
+        { type: 'CREDIT_LIMIT', unit: 3, percentage: 8.4, nextResetTime: base + 2 * HOUR_MS },
+        { type: 'CREDIT_LIMIT', unit: 6, percentage: 21, nextResetTime: base + 24 * HOUR_MS },
+      ],
+      level: 'pro',
+    },
+  })
+  assert.equal(reading.kind, 'quota')
+  assert.equal(reading.windows.length, 2)
+  assert.equal(reading.windows[0].label, '5小时')
+  assert.equal(reading.windows[0].utilization, 8.4)
+  assert.equal(reading.windows[1].label, '7天')
+  assert.equal(reading.level, 'pro')
+
+  const inferred = parseZhipu({
+    success: true,
+    data: {
+      limits: [{ type: 'CREDIT_LIMIT', unit: 3, currentValue: 25, usage: 500, nextResetTime: base }],
+    },
+  })
+  assert.equal(inferred.windows.length, 1)
+  assert.equal(inferred.windows[0].utilization, 5)
+})
+
+test('场景5c 智谱 Max:TOKENS_LIMIT 加 TIME_LIMIT 提示数窗口', () => {
+  const base = 1740000000000
+  const reading = parseZhipu({
+    success: true,
+    data: {
+      limits: [
+        { type: 'TOKENS_LIMIT', unit: 3, percentage: 3, nextResetTime: base + 2 * HOUR_MS },
+        { type: 'TOKENS_LIMIT', unit: 6, percentage: 81, nextResetTime: base + 5 * 24 * HOUR_MS },
+        { type: 'TIME_LIMIT', unit: 5, percentage: 1, currentValue: 8, usage: 4000, remaining: 3992, nextResetTime: base + 3 * HOUR_MS,
+          usageDetails: [
+            { modelCode: 'search-prime', usage: 4 },
+            { modelCode: 'web-reader', usage: 4 },
+            { modelCode: 'zread', usage: 0 },
+          ] },
+      ],
+      level: 'max',
+    },
+  })
+  assert.equal(reading.kind, 'quota')
+  assert.equal(reading.windows.length, 3)
+  assert.equal(reading.windows[0].label, '5小时')
+  assert.equal(reading.windows[1].label, '7天')
+  assert.equal(reading.windows[2].label, '工具用量')
+  assert.equal(reading.windows[2].utilization, 1)
+  assert.equal(reading.windows[2].remaining, 3992)
+  assert.equal(reading.windows[2].limit, 4000)
+  assert.equal(Date.parse(reading.windows[2].resetsAt), base + 3 * HOUR_MS)
+  assert.deepEqual(reading.windows[2].details, [
+    { model: 'search-prime', usage: 4 },
+    { model: 'web-reader', usage: 4 },
+    { model: 'zread', usage: 0 },
+  ])
+  assert.equal(reading.level, 'max')
+})
+
+test('场景5d 智谱真实响应:zp-jzjy 账号 CREDIT_LIMIT 原样结构', () => {
+  const reading = parseZhipu({
+    code: 200,
+    msg: '操作成功',
+    success: true,
+    data: {
+      limits: [
+        { type: 'CREDIT_LIMIT', unit: 3, number: 5, usage: 12000, currentValue: 0, remaining: 12000, percentage: 0 },
+        { type: 'CREDIT_LIMIT', unit: 6, number: 1, usage: 60000, currentValue: 59881, remaining: 118, percentage: 99, nextResetTime: 1788507277997 },
+      ],
+      level: 'pro',
+    },
+  })
+  assert.equal(reading.windows.length, 2)
+  assert.equal(reading.windows[0].utilization, 0)
+  assert.equal(reading.windows[0].remaining, 12000)
+  assert.equal(reading.windows[0].limit, 12000)
+  assert.equal(reading.windows[1].utilization, 99)
+  assert.equal(reading.windows[1].remaining, 118)
+  assert.equal(reading.windows[1].resetsAt, new Date(1788507277997).toISOString())
+})
+
+test('场景5c 智谱:仅 TIME_LIMIT 等无关类型时报出见到的类型', () => {
+  assert.throws(
+    () => parseZhipu({ success: true, data: { limits: [{ type: 'TIME_LIMIT', percentage: 1 }] } }),
+    /TIME_LIMIT/,
+  )
+})
+
+test('场景6 MiniMax remains:剩余百分比反推已用,周窗口按状态开关', () => {
+  const body = {
+    base_resp: { status_code: 0 },
+    model_remains: [{
+      model_name: 'general',
+      current_interval_remaining_percent: 88,
+      end_time: 1740000000000,
+      current_weekly_status: 1,
+      current_weekly_remaining_percent: 70,
+      weekly_end_time: 1740600000000,
+    }],
+  }
+  const reading = parseMiniMax(body)
+  assert.equal(reading.kind, 'quota')
+  assert.equal(reading.windows.length, 2)
+  assert.equal(reading.windows[0].utilization, 12)
+  assert.equal(reading.windows[1].utilization, 30)
+
+  const noWeekly = parseMiniMax({
+    base_resp: { status_code: 0 },
+    model_remains: [{ model_name: 'general', current_interval_remaining_percent: 50 }],
+  })
+  assert.equal(noWeekly.windows.length, 1)
+
+  assert.throws(
+    () => parseMiniMax({ base_resp: { status_code: 1001, status_msg: 'key 无效' } }),
+    /key 无效/,
+  )
+  assert.throws(
+    () => parseMiniMax({ base_resp: { status_code: 0 }, model_remains: [] }),
+    /general/,
+  )
+})
+
+test('场景7 NewApi token:quota 换算 USD,无限额度报错', () => {
+  const QUOTA_PER_USD = 500000
+  const body = {
+    code: 200,
+    data: { total_granted: 5 * QUOTA_PER_USD, total_used: QUOTA_PER_USD, total_available: 4 * QUOTA_PER_USD, unlimited_quota: false },
+  }
+  const reading = parseNewApi(body)
+  assert.equal(reading.kind, 'balance')
+  assert.deepEqual(reading.entries[0], { currency: 'USD', total: 5, used: 1, remaining: 4 })
+
+  assert.throws(
+    () => parseNewApi({ code: 200, data: { unlimited_quota: true } }),
+    /无限额度/,
+  )
+  assert.throws(() => parseNewApi({ code: 401, message: '无权进行此操作,未登录' }), /无权/)
+})
+
+test('场景8 custom extract:点路径/add/subtract/divide/常量', () => {
+  const data = { info: { max_budget: 100, spend: 40 }, a: 1, b: 2 }
+  assert.equal(extractByRule(data, 'info.max_budget'), 100)
+  assert.equal(extractByRule(data, { op: 'subtract', paths: ['info.max_budget', 'info.spend'] }), 60)
+  assert.equal(extractByRule(data, { op: 'add', paths: ['a', 'b'] }), 3)
+  assert.equal(extractByRule(data, { op: 'divide', path: 'info.max_budget', by: 4 }), 25)
+  assert.equal(extractByRule(data, 42), 42)
+  assert.equal(extractByRule(data, 'info.missing'), null)
+  assert.equal(extractByRule(data, { op: 'subtract', paths: ['info.max_budget', 'info.missing'] }), null)
+
+  const reading = extractCustom(data, {
+    remaining: { op: 'subtract', paths: ['info.max_budget', 'info.spend'] },
+    maxBudget: 'info.max_budget',
+    spend: 'info.spend',
+    unit: 'CNY',
+  })
+  // kind+entries 形态与 balance 读数联合对齐:历史采样/通知评估/渲染三链路按 kind 判别
+  assert.deepEqual(reading, {
+    kind: 'balance',
+    entries: [{ currency: 'CNY', remaining: 60, total: 100, used: 40 }],
+  })
+  assert.throws(() => extractCustom(data, { remaining: 'info.missing' }), /remaining/)
+})
+
+test('场景8b getPath 原型链逃逸被拒绝', () => {
+  assert.equal(getPath({}, '__proto__'), undefined)
+  assert.equal(getPath({ a: 1 }, 'constructor'), undefined)
+})
+
+test('场景9 严格数值:非数值一律 NaN', () => {
+  assert.ok(Number.isNaN(toStrictNumber('1,234')))
+  assert.ok(Number.isNaN(toStrictNumber('')))
+  assert.ok(Number.isNaN(toStrictNumber(null)))
+  assert.ok(Number.isNaN(toStrictNumber(false)))
+  assert.ok(Number.isNaN(toStrictNumber('$12')))
+  assert.equal(toStrictNumber('12.5'), 12.5)
+  assert.equal(toStrictNumber(' 7 '), 7)
+  assert.equal(toStrictNumber(0), 0)
+})

package/test/poller.test.mjs

@@ -0,0 +1,88 @@
+// 轮询纯逻辑 BDD:时间驱动调度 / 失败退避 / 档位间隔。无外部依赖,定时器由调用方注入。
+// 历史:round 分频形态(shouldQueryThisRound/longWindowDivisor)已被时间驱动取代——
+// round 仅查询时递增使余额类账号死锁停摆,短窗账号每 tick 必查使用户间隔失效。
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import {
+  BACKOFF_CAP_MULTIPLE,
+  SHORT_TIER_INTERVAL_SEC,
+  LONG_TIER_INTERVAL_SEC,
+  createBackoff,
+  tierIntervalSec,
+  lastQuerySecOf,
+  isDue,
+  isShortWindowTier,
+} from '../src/poller.mjs'
+
+test('场景: 失败退避指数增长并封顶', () => {
+  const backoff = createBackoff({ baseSec: 600 })
+  assert.equal(backoff.isBlocked(0), false, '初始不退避')
+  backoff.onFailure(0)
+  assert.equal(backoff.nextRetryAt, 600)
+  backoff.onFailure(600)
+  assert.equal(backoff.nextRetryAt, 1800)
+  backoff.onFailure(1800)
+  assert.equal(backoff.nextRetryAt, 4200)
+  backoff.onFailure(4200)
+  // 封顶 = 基期 * 8
+  assert.equal(backoff.nextRetryAt, 4200 + 600 * BACKOFF_CAP_MULTIPLE)
+})
+
+test('场景: 成功即恢复退避', () => {
+  const backoff = createBackoff({ baseSec: 600 })
+  backoff.onFailure(0)
+  backoff.onSuccess()
+  assert.equal(backoff.isBlocked(1), false)
+  backoff.onFailure(1)
+  assert.equal(backoff.nextRetryAt, 1 + 600, '恢复后按基期重新退避')
+})
+
+test('场景: 退避期间被跳过,到期放行', () => {
+  const backoff = createBackoff({ baseSec: 600 })
+  backoff.onFailure(0)
+  assert.equal(backoff.isBlocked(599), true)
+  assert.equal(backoff.isBlocked(600), false)
+})
+
+test('场景: 档位间隔 = 序列快照粒度(短档 10 分钟,长档 1 小时)', () => {
+  assert.equal(SHORT_TIER_INTERVAL_SEC, 10 * 60)
+  assert.equal(LONG_TIER_INTERVAL_SEC, 60 * 60)
+  assert.equal(tierIntervalSec(true), SHORT_TIER_INTERVAL_SEC)
+  assert.equal(tierIntervalSec(false), LONG_TIER_INTERVAL_SEC)
+})
+
+test('场景: 上次尝试查询时刻换算,缺失或非法回 null 视为立即到点', () => {
+  assert.equal(lastQuerySecOf(null), null)
+  assert.equal(lastQuerySecOf(undefined), null)
+  assert.equal(lastQuerySecOf({ ok: true }), null, '旧数据无 queriedAt')
+  assert.equal(lastQuerySecOf({ queriedAt: 'bad' }), null)
+  assert.equal(lastQuerySecOf({ queriedAt: 1700000000000 }), 1700000000)
+  assert.equal(lastQuerySecOf({ queriedAt: 1700000000500 }), 1700000000, '毫秒截断到秒')
+})
+
+test('场景: 时间驱动到点判定', () => {
+  assert.equal(isDue({ lastQuerySec: null, nowSec: 1000, intervalSec: 600 }), true, '从未查询立即到点')
+  assert.equal(isDue({ lastQuerySec: 500, nowSec: 1099, intervalSec: 600 }), false, '未满间隔')
+  assert.equal(isDue({ lastQuerySec: 500, nowSec: 1100, intervalSec: 600 }), true, '恰满间隔到点')
+  assert.equal(isDue({ lastQuerySec: 0, nowSec: LONG_TIER_INTERVAL_SEC, intervalSec: LONG_TIER_INTERVAL_SEC }), true)
+})
+
+test('场景: 退避与到点独立叠加,双过才查(时序推演锁定)', () => {
+  // 短窗账号失败:退避基期 = 档间隔 600;首次失败后 600s 内到点亦被退避压住
+  const backoff = createBackoff({ baseSec: SHORT_TIER_INTERVAL_SEC })
+  backoff.onFailure(1000)
+  const dueAt = (lastQuerySec, nowSec) =>
+    !backoff.isBlocked(nowSec) && isDue({ lastQuerySec, nowSec, intervalSec: SHORT_TIER_INTERVAL_SEC })
+  assert.equal(dueAt(400, 1500), false, '退避未过(到 1600 才解),尽管 1000 已到点')
+  assert.equal(dueAt(400, 1600), true, '退避与到点双过')
+})
+
+test('场景: 短窗口档判定,从未成功(含最近失败)按短档,失败不塌缩到长档', () => {
+  const readingHasShort = true
+  assert.equal(isShortWindowTier(null, readingHasShort), true, 'last 为空视为短窗口档')
+  assert.equal(isShortWindowTier(null, false), true, 'last 为空即使无短窗口读数也首轮即查')
+  assert.equal(isShortWindowTier({ ok: true, reading: {} }, readingHasShort), true)
+  assert.equal(isShortWindowTier({ ok: true, reading: {} }, false), false, '成功且仅长窗口按长档')
+  assert.equal(isShortWindowTier({ ok: false, reading: null }, readingHasShort), true, '失败不塌缩:含短窗账号保持短档节奏')
+  assert.equal(isShortWindowTier({ ok: false, reading: null }, false), true, '失败的长窗账号也归短档:10 分钟节奏 + 退避压制重试')
+})

package/test/route.test.mjs

@@ -0,0 +1,171 @@
+// host 路由层最小测试:settings GET 的 pollArmed 形态(定时软依赖两形态)+ 写路由守卫全覆盖
+// + accounts 损坏守卫。数据目录经 env 注入临时路径,须在 import src/index.js 之前设置。
+// 通知接线路由测试在 notify.route.test.mjs(独立进程独立数据目录)。
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { EventEmitter } from 'node:events'
+import { mkdtemp, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+
+const tempDir = await mkdtemp(join(tmpdir(), 'usage-route-'))
+process.env.DSH_USAGE_PANEL_DATA_DIR = tempDir
+
+const { apply } = await import('../src/index.js')
+
+test.after(async () => {
+  delete process.env.DSH_USAGE_PANEL_DATA_DIR
+  await rm(tempDir, { recursive: true, force: true })
+})
+
+function makeCtx({ timerAvailable = true, settingsValue = {}, dshIm = undefined } = {}) {
+  let value = settingsValue
+  const routes = new Map()
+  const settingsService = {
+    register() {},
+    get: () => value,
+    update: async (_ns, patch) => {
+      value = { ...value, ...patch }
+    },
+  }
+  const ctx = {
+    get(name) {
+      if (name === 'settings') return settingsService
+      if (name === 'dshIm') return dshIm
+      return undefined
+    },
+    effect(fn) {
+      fn()
+    },
+    inject(deps, fn) {
+      // timer 服务桩:模拟宿主 timer 激活后的 interval(返回 disposer 同官方契约)
+      fn({
+        settings: settingsService,
+        interval: timerAvailable
+          ? (intervalFn) => {
+              void intervalFn
+              return () => {}
+            }
+          : undefined,
+      })
+    },
+    webServer: {
+      register(route) {
+        routes.set(route.path, route.handler)
+      },
+    },
+  }
+  return { ctx, routes }
+}
+
+function makeReq(method, { origin, contentType, body } = {}) {
+  const req = new EventEmitter()
+  req.method = method
+  req.headers = { host: 'localhost:3000' }
+  if (origin !== undefined) req.headers.origin = origin
+  if (contentType !== undefined) req.headers['content-type'] = contentType
+  if (body !== undefined) {
+    process.nextTick(() => {
+      req.emit('data', Buffer.from(typeof body === 'string' ? body : JSON.stringify(body)))
+      req.emit('end')
+    })
+  }
+  return req
+}
+
+async function call(routes, path, req) {
+  const res = { status: null, payload: null }
+  res.writeHead = (status) => { res.status = status }
+  res.end = (text) => { res.payload = JSON.parse(text) }
+  await routes.get(path)(req, res)
+  return res
+}
+
+test('settings:timer 服务激活时 pollArmed 为 true', async () => {
+  const { ctx, routes } = makeCtx({ timerAvailable: true })
+  apply(ctx)
+  const res = await call(routes, '/api/usage-panel/settings', makeReq('GET'))
+  assert.equal(res.status, 200)
+  assert.equal(res.payload.pollArmed, true)
+})
+
+test('settings:timer 服务缺失时 pollArmed 为 false(降级可见)', async () => {
+  const { ctx, routes } = makeCtx({ timerAvailable: false })
+  apply(ctx)
+  const res = await call(routes, '/api/usage-panel/settings', makeReq('GET'))
+  assert.equal(res.status, 200)
+  assert.equal(res.payload.pollArmed, false)
+})
+
+test('settings:写方法已收缩,POST 405 不再接受间隔设置', async () => {
+  const { ctx, routes } = makeCtx()
+  apply(ctx)
+  const res = await call(routes, '/api/usage-panel/settings', makeReq('POST', {
+    contentType: 'application/json',
+    origin: 'http://localhost:3000',
+    body: '{"pollIntervalSec":60}',
+  }))
+  assert.equal(res.status, 405)
+})
+
+// 写路由守卫全覆盖:POST 路由的跨源与 content-type 守卫逐路由验证,
+// 防 drive-by 简单请求改写账号配置(含注入攻击者端点账号);POST-only 路由 GET 必须 405
+// (GET 无守卫,放行即给跨站 <img src> 驱动测试通道外发的面)。
+test('守卫:全部 POST 路由拒绝跨源与非 JSON,POST-only 路由拒绝 GET', async () => {
+  const { ctx, routes } = makeCtx()
+  apply(ctx)
+  const dualPaths = [
+    '/api/usage-panel/accounts',
+    '/api/usage-panel/notify-config',
+  ]
+  const postOnlyPaths = [
+    '/api/usage-panel/query',
+    '/api/usage-panel/test-webhook',
+    '/api/usage-panel/test-im',
+  ]
+  for (const path of [...dualPaths, ...postOnlyPaths]) {
+    const cross = await call(routes, path, makeReq('POST', {
+      origin: 'http://evil.example',
+      contentType: 'application/json',
+      body: '{"accounts":[]}',
+    }))
+    assert.equal(cross.status, 403, path + ' 跨源未拒')
+    const nonJson = await call(routes, path, makeReq('POST', {
+      origin: 'http://localhost:3000',
+      contentType: 'text/plain',
+      body: '{"accounts":[]}',
+    }))
+    assert.equal(nonJson.status, 400, path + ' 非 JSON 未拒')
+    assert.match(nonJson.payload.error, /content-type/, path + ' 400 须出自守卫层而非业务校验')
+  }
+  for (const path of postOnlyPaths) {
+    const get = await call(routes, path, makeReq('GET'))
+    assert.equal(get.status, 405, path + ' POST-only 路由放行了 GET')
+  }
+  const read = await call(routes, '/api/usage-panel/accounts', makeReq('GET'))
+  assert.equal(read.status, 200, 'GET 读路由放行')
+})
+
+test('accounts:损坏配置文件拒绝写入并备份(broken 守卫)', async () => {
+  await writeFile(join(tempDir, 'accounts.json'), '{broken', 'utf8')
+  const { ctx, routes } = makeCtx()
+  apply(ctx)
+  const res = await call(routes, '/api/usage-panel/accounts', makeReq('POST', {
+    origin: 'http://localhost:3000',
+    contentType: 'application/json',
+    body: '{"accounts":[]}',
+  }))
+  assert.equal(res.status, 400)
+  assert.match(res.payload.error, /损坏/)
+  // 坏文件已备份移走;重读(解除路径)后 GET 得空配置,写入恢复
+  const get = await call(routes, '/api/usage-panel/accounts', makeReq('GET'))
+  assert.equal(get.status, 200)
+  assert.deepEqual(get.payload.accounts, [])
+  const save = await call(routes, '/api/usage-panel/accounts', makeReq('POST', {
+    origin: 'http://localhost:3000',
+    contentType: 'application/json',
+    body: '{"accounts":[{"id":"acct-r","type":"custom"}]}',
+  }))
+  assert.equal(save.status, 200, '重读解除损坏后写入恢复')
+})

package/test/switch-guard.test.mjs

@@ -0,0 +1,32 @@
+// 开关样式守卫 BDD:状态选择器回退为裸 input 会静默隐藏 label 内其他 input,
+// 属无报错的 UI 损坏,故对源文本做静态断言锁死结构(turn-notify 同款守卫)
+import { readFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import test from 'node:test'
+import assert from 'node:assert/strict'
+
+const PKG_ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
+const source = readFileSync(join(PKG_ROOT, 'src', 'client.js'), 'utf8')
+
+test('switch 隐藏规则以 input[type="checkbox"] 精确匹配', () => {
+  assert.match(source, /\.up-switch input\[type="checkbox"\] \{ position:absolute/)
+})
+
+test('switch 状态选择器禁止裸 input 锚定(防误伤 label 内其他 input)', () => {
+  const bare = source.match(/\.up-switch input:(?!\[type)[a-z-]+/g)
+  assert.equal(bare, null, `裸 input 状态选择器: ${bare}`)
+})
+
+test('checkbox 仅允许出现在 Switch 组件内,禁止裸 checkbox 直出', () => {
+  const occurrences = [...source.matchAll(/type: 'checkbox'/g)].map((match) => match.index)
+  assert.equal(occurrences.length, 1, `checkbox 字面量出现 ${occurrences.length} 次`)
+  const factoryStart = source.indexOf('function Switch(')
+  const factoryEnd = source.indexOf('__thumb', factoryStart)
+  assert.ok(occurrences[0] > factoryStart && occurrences[0] < factoryEnd, 'checkbox 字面量不在 Switch 组件内')
+})
+
+test('Switch 产出顺序为 input 在前 track 在后', () => {
+  const factory = source.slice(source.indexOf('function Switch('))
+  assert.ok(factory.indexOf("h('input'") < factory.indexOf('up-switch__track'), '组件内 input 必须先于 track')
+})