@sfmc-bds/cli 0.3.1 → 0.3.2

package/scripts/module-install/lib/module-update.mjs

@@ -1,6 +1,7 @@
 // @ts-check
 /**
  * 模块更新编排：根据 pin、索引和本机 SDK 决定升级候选，并按依赖顺序换包。
+ * 安装目录若是 symlink / junction，只记 local-source 跳过，不换包。
  * 下载与落盘由调用方注入的 install，本文件不复制第二套安装逻辑。
  */
 import fs from "node:fs";
@@ -13,6 +14,7 @@ import { readJson } from "./io.mjs";
 import { loadModuleUpdateConfig } from "./module-update-config.mjs";
 import {
   findPinKey,
+  isLinkedPackageDir,
   markPinError,
   normalizeModuleId,
   packageDirOf,
@@ -141,12 +143,41 @@ export function decideModuleUpdate(input) {
   if (isMajorBump(input.installedVersion, input.targetVersion) && !input.allowMajor) {
     return { action: "skip", reason: "major", detail: "" };
   }
+  /* 范围明确但本机 SDK 读不到时不要升级。空范围和 * 仍走下面的原判断。 */
+  if (sdkRangeConstrainsHost(input.sdkRange) && !input.hostSdk) {
+    return { action: "skip", reason: "sdk", detail: "本机 SDK 版本未知" };
+  }
   if (input.sdkRange && input.hostSdk && !satisfiesSdk(input.hostSdk, input.sdkRange)) {
     return { action: "skip", reason: "sdk", detail: `${input.hostSdk} / ${input.sdkRange}` };
   }
   return { action: "upgrade", reason: "newer", detail: "" };
 }
 
+/**
+ * 这个 SDK 范围是否要求对照本机版本。
+ * 使用场景：decideModuleUpdate 在 hostSdk 为空时，只有非空且不是 * 的范围才跳过。
+ * @param {string | null | undefined} sdkRange
+ */
+function sdkRangeConstrainsHost(sdkRange) {
+  if (typeof sdkRange !== "string") return false;
+  const text = sdkRange.trim();
+  return text.length > 0 && text !== "*";
+}
+
+/**
+ * 安装目录是 symlink 或 Windows junction 时返回 local-source 跳过项，否则返回 null。
+ * 使用场景：规划阶段不把开发链接放进 upgrades；apply 阶段即使候选被强行传入，也不调用 install 覆盖链接。
+ * @param {string} id
+ * @param {string} dir
+ * @param {string | null} fromVersion
+ * @param {string | null} toVersion
+ * @returns {ModuleSkip | null}
+ */
+function skipWhenDevLink(id, dir, fromVersion, toVersion) {
+  if (!isLinkedPackageDir(dir)) return null;
+  return { id, reason: "local-source", fromVersion, toVersion, detail: "" };
+}
+
 /**
  * 被依赖的模块排在前面。环路保持原顺序附在末尾。
  * @param {ModuleUpgrade[]} items
@@ -214,6 +245,24 @@ function npmNameFromPin(spec, packageName) {
   return name || null;
 }
 
+/**
+ * 索引已经在手里时，只记下目标版本供跳过记录展示，不生成安装 spec。
+ * 使用场景：自动更新关闭，以及本地链接 / local / autoLocked，都不能为此去打 npm dist-tag。
+ * @param {{ npm?: string, version?: string, sdk?: string } | null | undefined} indexEntry
+ */
+function desiredVersionFromHeldIndex(indexEntry) {
+  if (indexEntry?.version) {
+    return {
+      version: indexEntry.version,
+      spec: null,
+      sdk: indexEntry.sdk || null,
+      offline: false,
+      reason: null,
+    };
+  }
+  return { version: null, spec: null, sdk: indexEntry?.sdk || null, offline: false, reason: null };
+}
+
 /**
  * @param {import("./pins.mjs").ModulePin} pin
  * @param {{ npm?: string, version?: string, sdk?: string } | null | undefined} indexEntry
@@ -223,8 +272,9 @@ function npmNameFromPin(spec, packageName) {
  * @param {string | null} packageName
  */
 async function resolveDesired(pin, indexEntry, fetchDistTag, distTag, indexOffline, packageName) {
-  if (!pin.auto || pin.autoLocked || pin.source === "link" || pin.source === "local") {
-    return { version: null, spec: null, sdk: null, offline: false, reason: null };
+  /* 本地链接、目录和锁定来源不查 dist-tag；索引已在手里时仍把目标版本交给跳过记录。 */
+  if (pin.autoLocked || pin.source === "link" || pin.source === "local") {
+    return desiredVersionFromHeldIndex(indexEntry);
   }
   if (pin.source === "github") {
     return { version: null, spec: null, sdk: null, offline: false, reason: "github-manual" };
@@ -232,12 +282,15 @@ async function resolveDesired(pin, indexEntry, fetchDistTag, distTag, indexOffli
   if (pin.source === "npm" && indexEntry?.npm && indexEntry.version) {
     return {
       version: indexEntry.version,
-      spec: `npm:${indexEntry.npm}@${indexEntry.version}`,
+      /* auto 关闭只展示版本，不给出可安装 spec，避免被当成升级。 */
+      spec: pin.auto ? `npm:${indexEntry.npm}@${indexEntry.version}` : null,
       sdk: indexEntry.sdk || null,
       offline: false,
       reason: null,
     };
   }
+  /* 自动更新关闭且索引里没有目标版本时，不要改去打 dist-tag。 */
+  if (!pin.auto) return desiredVersionFromHeldIndex(indexEntry);
   /* 默认跟随索引的包在索引不可用时不改去拉 npm latest。服主显式打开的包仍走 dist-tag。 */
   const expectsIndex = pin.channel === "index" && pin.autoSetBy !== "user";
   if (expectsIndex && (indexOffline || !indexEntry?.version)) {
@@ -336,9 +389,20 @@ export async function planModuleUpdates(options = {}) {
     const keys = [normalizeModuleId(folder), normalizeModuleId(manifestId)];
     if (wanted.size > 0 && !keys.some((key) => wanted.has(key))) continue;
     const dir = packageDirOf(root, folder);
-    if (!fs.existsSync(dir)) continue;
     const installedVersion = readPackageVersion(dir) ?? pin.installedVersion;
     const indexEntry = index ? index[folder] || index[normalizeModuleId(manifestId || "")] || null : null;
+    /* 目录本身是开发链接时先跳过，避免 pin 写成 npm 后仍去查 dist-tag 并换包。 */
+    const linkSkip = skipWhenDevLink(
+      folder,
+      dir,
+      installedVersion,
+      desiredVersionFromHeldIndex(indexEntry).version,
+    );
+    if (linkSkip) {
+      skipped.push(linkSkip);
+      continue;
+    }
+    if (!fs.existsSync(dir)) continue;
     const packageName = readPackageName(dir);
     const desired = await resolveDesired(pin, indexEntry, fetchDistTag, cfg.distTag, indexOffline, packageName);
     const requires = readRequires(root, folder);
@@ -427,6 +491,20 @@ export async function restorePackageDir(root, id, backup) {
   await fsp.rename(backup, dest);
 }
 
+/**
+ * 删掉 backupPackageDir 这次留下的备份目录。
+ * 使用场景：applyModuleUpgrades 在 install 成功后调用；删除失败必须忽略，不能把成功升级记成失败。
+ * @param {string | null} backup
+ */
+async function discardUpgradeBackup(backup) {
+  if (!backup) return;
+  try {
+    await fsp.rm(backup, { recursive: true, force: true });
+  } catch {
+    /* 回收站删不掉时保留目录，不回滚已经装好的包 */
+  }
+}
+
 /**
  * 还原后按磁盘上的 manifest 重写 catalog 里这一条。
  * @param {string} folder
@@ -441,6 +519,7 @@ export function resyncInstalledCatalog(folder) {
 
 /**
  * 按计划换包。单个失败时还原该模块，并根据 failMode 决定是否继续。
+ * 安装目录若是 symlink / junction，记 local-source 并跳过，不调用 install。
  * @param {ModuleUpgrade[]} upgrades
  * @param {{
  *   root: string,
@@ -459,6 +538,11 @@ export async function applyModuleUpgrades(upgrades, deps) {
   /** @type {{ id: string, message: string }[]} */
   const failed = [];
   for (const item of upgrades) {
+    const linkSkip = skipWhenDevLink(item.id, packageDirOf(deps.root, item.id), item.fromVersion, item.toVersion);
+    if (linkSkip) {
+      skipped.push(linkSkip);
+      continue;
+    }
     const blocked = (item.requires || []).some((req) => failedNorm.has(req));
     if (blocked) {
       skipped.push({
@@ -478,13 +562,17 @@ export async function applyModuleUpgrades(upgrades, deps) {
       backup = await backupPackageDir(deps.root, item.id);
       await deps.install(item.id, item.spec);
       applied.push(item);
+      /* 这次升级已经落盘，删掉刚才移进 _trash 的那一份备份。 */
+      await discardUpgradeBackup(backup);
     } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
+      const installError = error instanceof Error ? error.message : String(error);
+      /** 失败说明。还原失败时在安装错误后面附上备份绝对路径。 */
+      let message = installError;
       if (backup) {
         try {
           await restorePackageDir(deps.root, item.id, backup);
         } catch {
-          /* 还原失败时保留回收站里的备份路径在错误信息中 */
+          message = `${installError}；还原失败，备份仍在 ${path.resolve(backup)}`;
         }
       }
       if (deps.resync) {

package/scripts/module-install/lib/pins.mjs

@@ -79,12 +79,21 @@ export function writePins(root, file) {
 }
 
 /**
- * 目录是 junction / symlink 时视为本地开发链接。
+ * 目录是 symlink 或 Windows junction 时视为本地开发链接。
+ * 使用场景：回填 pin，以及更新器在规划和应用前拒绝覆盖开发链接。
  * @param {string} dir
  */
 export function isLinkedPackageDir(dir) {
   try {
-    return fs.lstatSync(dir).isSymbolicLink();
+    if (fs.lstatSync(dir).isSymbolicLink()) return true;
+  } catch {
+    return false;
+  }
+  /* 个别 Windows junction 的 lstat 不标成 symlink，能读到链接目标也算链接。 */
+  if (process.platform !== "win32") return false;
+  try {
+    fs.readlinkSync(dir);
+    return true;
   } catch {
     return false;
   }
@@ -415,7 +424,9 @@ export function markPinError(root, id, message) {
 }
 
 /**
- * 打开或关闭某个模块的自动更新。链接和本地目录不能打开。
+ * 打开或关闭某个模块的自动更新。
+ * 链接、本地目录（autoLocked）以及 GitHub 来源不能打开；关闭仍然允许。
+ * GitHub 的 autoLocked 保持 false，计划更新仍走 github-manual。
  * @param {string} root
  * @param {string} id
  * @param {boolean} auto
@@ -427,7 +438,7 @@ export function setModulePinAuto(root, id, auto) {
   const key = findPinKey(file, id);
   if (!key || !file.modules[key]) return { ok: false, code: "missing" };
   const pin = file.modules[key];
-  if (pin.autoLocked && auto) return { ok: false, code: "locked", id: key };
+  if (auto && (pin.autoLocked || pin.source === "github")) return { ok: false, code: "locked", id: key };
   pin.auto = !!auto;
   pin.autoSetBy = "user";
   pin.lastError = null;

package/scripts/module-install/lib/registry-cache.mjs

@@ -45,7 +45,11 @@ function writeCache(cache) {
 }
 
 async function fetchRegistryIndexFresh() {
-  const res = await fetch(DEFAULT_REGISTRY_INDEX_URL, { headers: { "User-Agent": "sfmc-fetch-module" } });
+  // BDS beforeStart 会等这次索引请求。8 秒超时与 dist-tag 同量级，超时或失败后仍由 resolveRegistryIndex 的 catch 回退缓存。
+  const res = await fetch(DEFAULT_REGISTRY_INDEX_URL, {
+    headers: { "User-Agent": "sfmc-fetch-module" },
+    signal: AbortSignal.timeout(8000),
+  });
   if (!res.ok) throw new Error(`HTTP ${res.status} for ${DEFAULT_REGISTRY_INDEX_URL}`);
   return parseRegistryIndex(await res.json());
 }

package/scripts/module-install/test/module-update.test.mjs

@@ -8,6 +8,7 @@ import os from "node:os";
 import path from "node:path";
 import test from "node:test";
 import { compareSemver, isMajorBump, satisfiesSdk } from "../lib/semver.mjs";
+import { DEFAULT_MODULE_UPDATE_CONFIG } from "../lib/module-update-config.mjs";
 import { decideModuleUpdate, orderUpgrades, applyModuleUpgrades, planModuleUpdates } from "../lib/module-update.mjs";
 import {
   inferPinDraft,
@@ -53,6 +54,13 @@ test("decideModuleUpdate 按来源和版本取舍", () => {
     decideModuleUpdate({ ...base, sdkRange: ">=0.3.0", hostSdk: "0.2.5" }).reason,
     "sdk"
   );
+  const unknownHost = decideModuleUpdate({ ...base, sdkRange: ">=0.3.0", hostSdk: null });
+  assert.equal(unknownHost.action, "skip");
+  assert.equal(unknownHost.reason, "sdk");
+  assert.match(unknownHost.detail, /未知/);
+  assert.equal(decideModuleUpdate({ ...base, sdkRange: null, hostSdk: null }).action, "upgrade");
+  assert.equal(decideModuleUpdate({ ...base, sdkRange: "", hostSdk: null }).action, "upgrade");
+  assert.equal(decideModuleUpdate({ ...base, sdkRange: "*", hostSdk: null }).action, "upgrade");
 });
 
 test("升级顺序让被依赖的模块先走", () => {
@@ -180,3 +188,344 @@ test("本地 pin 不能打开自动更新", () => {
   const off = setModulePinAuto(root, "demo", false);
   assert.equal(off.ok, true);
 });
+
+/** 写一份已安装的 chat 目录，版本固定为 1.0.0。使用场景：计划测试需要磁盘上的包和 manifest。 */
+function writeInstalledChat(root) {
+  const pkg = path.join(root, "modules", "packages", "chat");
+  fs.mkdirSync(path.join(pkg, "sapi"), { recursive: true });
+  fs.writeFileSync(path.join(pkg, "package.json"), JSON.stringify({ name: "@sfmc-bds/module-chat", version: "1.0.0" }));
+  fs.writeFileSync(
+    path.join(pkg, "sapi", "manifest.json"),
+    JSON.stringify({ id: "chat", configKey: "chat", requires: [] })
+  );
+}
+
+test("auto 关闭时不升级，但跳过记录带上索引版本", async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "sfmc-mod-auto-off-"));
+  writeInstalledChat(root);
+  writePins(root, {
+    version: 1,
+    modules: {
+      chat: {
+        source: "npm",
+        channel: "index",
+        spec: "npm:@sfmc-bds/module-chat@1.0.0",
+        installedVersion: "1.0.0",
+        manifestId: "chat",
+        auto: false,
+        autoLocked: false,
+        autoSetBy: "user",
+        lastCheckedAt: null,
+        lastAppliedAt: null,
+        lastError: null,
+      },
+    },
+  });
+  let distTagCalls = 0;
+  const plan = await planModuleUpdates({
+    root,
+    hostSdk: "0.2.5",
+    ids: ["chat"],
+    fetchIndex: async () => ({
+      index: { chat: { npm: "@sfmc-bds/module-chat", version: "1.2.0", sdk: ">=0.2.2" } },
+      offline: false,
+    }),
+    fetchDistTag: async () => {
+      distTagCalls += 1;
+      return "9.9.9";
+    },
+  });
+  assert.equal(plan.upgrades.length, 0);
+  const skipped = plan.skipped.find((item) => item.id === "chat");
+  assert.ok(skipped);
+  assert.equal(skipped.reason, "auto-off");
+  assert.equal(skipped.toVersion, "1.2.0");
+  assert.equal(skipped.fromVersion, "1.0.0");
+  assert.equal(distTagCalls, 0);
+});
+
+test("本地链接不为查版本请求 dist-tag", async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "sfmc-mod-local-"));
+  writeInstalledChat(root);
+  writePins(root, {
+    version: 1,
+    modules: {
+      chat: {
+        source: "link",
+        channel: "none",
+        spec: "",
+        installedVersion: "1.0.0",
+        manifestId: "chat",
+        auto: false,
+        autoLocked: true,
+        autoSetBy: "default",
+        lastCheckedAt: null,
+        lastAppliedAt: null,
+        lastError: null,
+      },
+    },
+  });
+  let distTagCalls = 0;
+  const plan = await planModuleUpdates({
+    root,
+    hostSdk: "0.2.5",
+    fetchIndex: async () => ({
+      index: { chat: { npm: "@sfmc-bds/module-chat", version: "1.2.0", sdk: ">=0.2.2" } },
+      offline: false,
+    }),
+    fetchDistTag: async () => {
+      distTagCalls += 1;
+      return "9.9.9";
+    },
+  });
+  assert.equal(plan.upgrades.length, 0);
+  assert.equal(distTagCalls, 0);
+  const skipped = plan.skipped.find((item) => item.id === "chat");
+  assert.equal(skipped?.reason, "local-source");
+});
+
+test("升级成功后删除这次备份", async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "sfmc-mod-backup-ok-"));
+  const pkg = path.join(root, "modules", "packages", "demo");
+  fs.mkdirSync(pkg, { recursive: true });
+  fs.writeFileSync(path.join(pkg, "marker.txt"), "old");
+  const result = await applyModuleUpgrades(
+    [{ id: "demo", fromVersion: "1.0.0", toVersion: "1.1.0", spec: "npm:x@1.1.0", requires: [] }],
+    {
+      root,
+      failMode: "continue",
+      install: async (id) => {
+        const dir = path.join(root, "modules", "packages", id);
+        fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(path.join(dir, "marker.txt"), "new");
+      },
+    }
+  );
+  assert.equal(result.failed.length, 0);
+  assert.equal(result.applied.length, 1);
+  assert.equal(fs.readFileSync(path.join(pkg, "marker.txt"), "utf8"), "new");
+  const trash = path.join(root, "modules", "_trash");
+  const leftovers = fs.existsSync(trash) ? fs.readdirSync(trash) : [];
+  assert.deepEqual(leftovers, []);
+});
+
+test("还原失败时错误信息带上备份路径", async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "sfmc-mod-restore-fail-"));
+  const pkg = path.join(root, "modules", "packages", "demo");
+  fs.mkdirSync(pkg, { recursive: true });
+  fs.writeFileSync(path.join(pkg, "marker.txt"), "old");
+  const result = await applyModuleUpgrades(
+    [{ id: "demo", fromVersion: "1.0.0", toVersion: "1.1.0", spec: "npm:x@1.1.0", requires: [] }],
+    {
+      root,
+      failMode: "continue",
+      install: async () => {
+        fs.rmSync(path.join(root, "modules", "_trash"), { recursive: true, force: true });
+        throw new Error("boom");
+      },
+    }
+  );
+  assert.equal(result.failed.length, 1);
+  assert.match(result.failed[0].message, /boom/);
+  assert.ok(result.failed[0].message.includes(path.join(root, "modules", "_trash")));
+});
+
+test("GitHub pin 不能打开自动更新，关闭仍然允许", () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "sfmc-mod-pin-gh-"));
+  fs.mkdirSync(path.join(root, "modules", "packages", "demo"), { recursive: true });
+  writePins(root, {
+    version: 1,
+    modules: {
+      demo: {
+        source: "github",
+        channel: "none",
+        spec: "github:owner/repo",
+        installedVersion: "1.0.0",
+        manifestId: "demo",
+        auto: false,
+        autoLocked: false,
+        autoSetBy: "default",
+        lastCheckedAt: null,
+        lastAppliedAt: null,
+        lastError: null,
+      },
+    },
+  });
+  const locked = setModulePinAuto(root, "demo", true);
+  assert.equal(locked.ok, false);
+  assert.equal(locked.code, "locked");
+  assert.equal(locked.id, "demo");
+  const off = setModulePinAuto(root, "demo", false);
+  assert.equal(off.ok, true);
+  if (off.ok) assert.equal(off.auto, false);
+});
+
+/**
+ * 允许自动更新的 npm pin。
+ * 使用场景：目录实际是开发链接时，pin 仍写成可升级，确认计划以目录类型为准。
+ * @param {string} pkgName
+ * @param {string} version
+ * @param {string} manifestId
+ * @param {"index" | "dist-tag"} channel
+ */
+function openNpmPin(pkgName, version, manifestId, channel) {
+  return {
+    source: "npm",
+    channel,
+    spec: channel === "index" ? `npm:${pkgName}@${version}` : `npm:${pkgName}`,
+    installedVersion: version,
+    manifestId,
+    auto: true,
+    autoLocked: false,
+    autoSetBy: "user",
+    lastCheckedAt: null,
+    lastAppliedAt: null,
+    lastError: null,
+  };
+}
+
+/**
+ * 把独立源目录链到 packages/<id>。
+ * 使用场景：在临时目录里造 junction / symlink，避免动仓库外的服务器。
+ * @param {string} root
+ * @param {string} id
+ * @param {"junction" | "dir"} type
+ */
+function linkModulePackage(root, id, type) {
+  const source = fs.mkdtempSync(path.join(os.tmpdir(), `sfmc-mod-src-${id}-`));
+  fs.mkdirSync(path.join(source, "sapi"), { recursive: true });
+  fs.writeFileSync(
+    path.join(source, "package.json"),
+    JSON.stringify({ name: `@sfmc-bds/module-${id}`, version: "1.0.0" })
+  );
+  fs.writeFileSync(
+    path.join(source, "sapi", "manifest.json"),
+    JSON.stringify({ id, configKey: id, requires: [] })
+  );
+  fs.writeFileSync(path.join(source, "marker.txt"), "source");
+  const dest = path.join(root, "modules", "packages", id);
+  fs.symlinkSync(source, dest, type);
+  return dest;
+}
+
+test("开发链接跳过且 apply 不调用 install，普通目录仍可升级", async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "sfmc-mod-devlink-"));
+  writeInstalledChat(root);
+  /** @type {{ id: string, channel: "index" | "dist-tag" }[]} */
+  const links = [{ id: "via-symlink", channel: "dist-tag" }];
+  if (process.platform === "win32") links.unshift({ id: "via-junction", channel: "index" });
+  for (const link of links) {
+    const type = link.id === "via-junction" ? "junction" : "dir";
+    linkModulePackage(root, link.id, type);
+  }
+  writePins(root, {
+    version: 1,
+    modules: {
+      chat: openNpmPin("@sfmc-bds/module-chat", "1.0.0", "chat", "index"),
+      ...Object.fromEntries(
+        links.map((link) => [
+          link.id,
+          openNpmPin(`@sfmc-bds/module-${link.id}`, "1.0.0", link.id, link.channel),
+        ])
+      ),
+    },
+  });
+  let distTagCalls = 0;
+  const plan = await planModuleUpdates({
+    root,
+    hostSdk: "0.2.5",
+    fetchIndex: async () => ({
+      index: {
+        chat: { npm: "@sfmc-bds/module-chat", version: "1.1.0", sdk: ">=0.2.2" },
+        "via-junction": { npm: "@sfmc-bds/module-via-junction", version: "1.1.0", sdk: ">=0.2.2" },
+      },
+      offline: false,
+    }),
+    fetchDistTag: async () => {
+      distTagCalls += 1;
+      return "9.9.9";
+    },
+  });
+  assert.equal(plan.upgrades.some((item) => item.id === "chat"), true);
+  assert.equal(plan.upgrades.some((item) => item.spec.startsWith("npm:@sfmc-bds/module-chat@")), true);
+  assert.equal(distTagCalls, 0);
+  for (const link of links) {
+    assert.equal(plan.upgrades.some((item) => item.id === link.id), false);
+    const skipped = plan.skipped.find((item) => item.id === link.id);
+    assert.equal(skipped?.reason, "local-source");
+  }
+
+  let installCalls = 0;
+  const applied = await applyModuleUpgrades(
+    links.map((link) => ({
+      id: link.id,
+      fromVersion: "1.0.0",
+      toVersion: "1.1.0",
+      spec: `npm:@sfmc-bds/module-${link.id}@1.1.0`,
+      requires: [],
+    })),
+    {
+      root,
+      failMode: "abort",
+      install: async () => {
+        installCalls += 1;
+        throw new Error("must not install over a dev link");
+      },
+    }
+  );
+  assert.equal(installCalls, 0);
+  assert.equal(applied.applied.length, 0);
+  assert.equal(applied.failed.length, 0);
+  const trash = path.join(root, "modules", "_trash");
+  assert.equal(fs.existsSync(trash) ? fs.readdirSync(trash).length : 0, 0);
+  for (const link of links) {
+    assert.equal(applied.skipped.find((item) => item.id === link.id)?.reason, "local-source");
+    const dest = path.join(root, "modules", "packages", link.id);
+    assert.equal(fs.lstatSync(dest).isSymbolicLink(), true);
+    assert.equal(fs.readFileSync(path.join(dest, "marker.txt"), "utf8"), "source");
+  }
+});
+
+test("新播种的更新配置在开服时不自动应用，已有文件保持原值", async () => {
+  assert.equal(DEFAULT_MODULE_UPDATE_CONFIG.applyOnBdsStart, false);
+  const fresh = fs.mkdtempSync(path.join(os.tmpdir(), "sfmc-mod-seed-"));
+  writeInstalledChat(fresh);
+  const seeded = await planModuleUpdates({
+    root: fresh,
+    startup: true,
+    hostSdk: "0.2.5",
+    fetchIndex: async () => ({ index: null, offline: true }),
+    fetchDistTag: async () => {
+      throw new Error("seeded plan should not query dist-tag");
+    },
+  });
+  assert.equal(seeded.applyOnStart, false);
+  const seededFile = path.join(fresh, "configs", "module-update.json");
+  const seededBody = JSON.parse(fs.readFileSync(seededFile, "utf8"));
+  assert.equal(seededBody.applyOnBdsStart, false);
+
+  const kept = fs.mkdtempSync(path.join(os.tmpdir(), "sfmc-mod-keep-"));
+  const keptFile = path.join(kept, "configs", "module-update.json");
+  fs.mkdirSync(path.dirname(keptFile), { recursive: true });
+  const existing = {
+    enabled: true,
+    checkOnBdsStart: true,
+    applyOnBdsStart: true,
+    allowMajor: false,
+    failMode: "continue",
+    distTag: "latest",
+  };
+  fs.writeFileSync(keptFile, `${JSON.stringify(existing, null, 2)}\n`);
+  const before = fs.readFileSync(keptFile, "utf8");
+  const keptPlan = await planModuleUpdates({
+    root: kept,
+    startup: true,
+    hostSdk: "0.2.5",
+    fetchIndex: async () => ({ index: null, offline: true }),
+    fetchDistTag: async () => {
+      throw new Error("existing config plan should not query dist-tag");
+    },
+  });
+  assert.equal(keptPlan.applyOnStart, true);
+  assert.equal(fs.readFileSync(keptFile, "utf8"), before);
+});