@tbox.cn/app-module-member 0.1.0 → 0.8.6

package/tests/cards-render.test.tsx

@@ -0,0 +1,526 @@
+/**
+ * member 客户端卡片渲染测试（0.4.0 D9：happy-dom）。
+ * 重点：入会 CTA/表单/状态卡的显式动作、历史禁用、校验与防重复提交。
+ */
+// @vitest-environment happy-dom
+import { describe, expect, it, vi, beforeEach } from 'vitest';
+import { createRoot } from 'react-dom/client';
+import { act } from 'react-dom/test-utils';
+import { sendCardAction } from '@tbox.cn/app-sdk/client';
+import {
+  MemberCardSummaryCard,
+  MemberEnrollmentCtaCard,
+  MemberLoginCtaCard,
+  MemberEnrollmentFormCard,
+  MemberEnrollmentStatusCard,
+  MemberInfoCard,
+  MemberPointUsageListCard,
+} from '../src/client/cards';
+import MemberCardSummaryCardDefault from '../src/client/cards/member-card-summary';
+import MemberEnrollmentFormCardDefault from '../src/client/cards/member-enrollment-form';
+import MemberEnrollmentStatusCardDefault from '../src/client/cards/member-enrollment-status';
+
+vi.mock('@tbox.cn/app-sdk/client', async (importOriginal) => {
+  const mod = await importOriginal<typeof import('@tbox.cn/app-sdk/client')>();
+  return { ...mod, sendCardAction: vi.fn() };
+});
+
+const mockedSend = () => vi.mocked(sendCardAction);
+
+function render(ui: React.ReactElement) {
+  const host = document.createElement('div');
+  document.body.appendChild(host);
+  const root = createRoot(host);
+  act(() => {
+    root.render(ui);
+  });
+  return { host, root };
+}
+
+const formData = {
+  userId: 'u1',
+  state: 'not_enrolled',
+  formVersion: 'v1',
+  fields: [
+    { fieldId: 'mobile', label: '手机号', type: 'tel', required: true, readOnly: true, prefill: '138****8888' },
+    { fieldId: 'name', label: '姓名', type: 'text', required: true },
+    { fieldId: 'gender', label: '性别', type: 'select', required: false, options: ['男', '女'] },
+  ],
+  consents: [{ consentId: 'privacy', version: '1', title: '隐私政策', required: true }],
+  authorization: { status: 'required' },
+};
+
+describe('MemberEnrollmentFormCard 交互矩阵', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it('select 字段渲染为 <select> 且含 options', () => {
+    const { host } = render(
+      <MemberEnrollmentFormCard data={formData as never} cardId="c1" isHistory={false} actionTokens={{ 'member.enroll': 'tok', 'member.request-alipay-authorization': 'auth' }} />,
+    );
+    const select = host.querySelector('select') as HTMLSelectElement;
+    expect(select).not.toBeNull();
+    expect(select.querySelectorAll('option').length).toBe(3);
+  });
+
+  it('required 授权仅在用户显式点击后触发，且点击后防重复派发', () => {
+    const { host } = render(
+      <MemberEnrollmentFormCard data={formData as never} cardId="c1" isHistory={false} actionTokens={{ 'member.enroll': 'tok', 'member.request-alipay-authorization': 'auth' }} />,
+    );
+    expect(mockedSend()).not.toHaveBeenCalled();
+    const auth = host.querySelector('.member-enrollment-form__auth-btn') as HTMLButtonElement;
+    act(() => {
+      auth.click();
+      auth.click();
+    });
+    expect(auth.disabled).toBe(true);
+    expect(mockedSend()).toHaveBeenCalledWith(
+      'c1',
+      { type: 'moduleAction', actionId: 'member.request-alipay-authorization', contextToken: 'auth' },
+    );
+    expect(mockedSend()).toHaveBeenCalledTimes(1);
+  });
+
+  it('token 缺失 → 不自动触发，渲染手动授权按钮但禁用（无 token 点击无意义）', () => {
+    const { host } = render(
+      <MemberEnrollmentFormCard data={formData as never} cardId="c1" isHistory={false} actionTokens={{ 'member.enroll': 'tok' }} />,
+    );
+    expect(mockedSend()).not.toHaveBeenCalled();
+    const btn = host.querySelector('.member-enrollment-form__auth-btn') as HTMLButtonElement;
+    expect(btn).not.toBeNull();
+    expect(btn.disabled).toBe(true);
+  });
+
+  it('isHistory → 全禁 + 不自动触发', () => {
+    const { host } = render(
+      <MemberEnrollmentFormCard data={formData as never} cardId="c1" isHistory={true} actionTokens={{ 'member.enroll': 'tok', 'member.request-alipay-authorization': 'auth' }} />,
+    );
+    expect(mockedSend()).not.toHaveBeenCalled();
+    const controls = host.querySelectorAll('input, select');
+    controls.forEach((c) => expect((c as HTMLInputElement).disabled || (c as HTMLInputElement).readOnly).toBe(true));
+    const submit = host.querySelector('.member-ef-submit') as HTMLButtonElement;
+    expect(submit.disabled).toBe(true);
+  });
+
+  it('readOnly 字段渲染锁定图标', () => {
+    const { host } = render(
+      <MemberEnrollmentFormCard data={formData as never} cardId="c1" isHistory={false} actionTokens={{ 'member.enroll': 'tok' }} />,
+    );
+    expect(host.querySelector('.member-ef-field__lock')).not.toBeNull();
+    const mobile = host.querySelectorAll('.member-ef-field__control')[0] as HTMLInputElement;
+    expect(mobile.readOnly).toBe(true);
+  });
+
+  it('必填字段或必选协议缺失时原地提示，不发送入会动作；完整表单只提交一次', () => {
+    const { host } = render(
+      <MemberEnrollmentFormCard data={formData as never} cardId="c-submit" isHistory={false} actionTokens={{ 'member.enroll': 'tok' }} />,
+    );
+    const submit = host.querySelector('.member-ef-submit') as HTMLButtonElement;
+    act(() => submit.click());
+    expect(host.textContent).toContain('请填写姓名');
+    expect(host.textContent).toContain('请先同意：隐私政策');
+    expect(mockedSend()).not.toHaveBeenCalled();
+
+    mockedSend().mockClear();
+    const completeData = {
+      ...formData,
+      fields: formData.fields.map((field) => field.fieldId === 'name' ? { ...field, prefill: '张三' } : field),
+      consents: [],
+    };
+    const complete = render(
+      <MemberEnrollmentFormCard data={completeData as never} cardId="c-submit-complete" isHistory={false} actionTokens={{ 'member.enroll': 'tok' }} />,
+    );
+    const completeSubmit = complete.host.querySelector('.member-ef-submit') as HTMLButtonElement;
+    act(() => {
+      completeSubmit.click();
+      completeSubmit.click();
+    });
+    expect(mockedSend()).toHaveBeenCalledTimes(1);
+    expect(mockedSend()).toHaveBeenCalledWith(
+      'c-submit-complete',
+      { type: 'moduleAction', actionId: 'member.enroll', contextToken: 'tok' },
+      expect.objectContaining({ acceptedConsentIds: [], formVersion: 'v1' }),
+    );
+  });
+});
+
+describe('MemberEnrollmentCtaCard', () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it('通过 SDK openLink 打开真实地址，双击只发送一次且不展示静态权益', () => {
+    const { host } = render(
+      <MemberEnrollmentCtaCard
+        data={{ userId: 'u1', authState: 'authenticated', state: 'not_enrolled', enrollUrl: 'alipays://member/open', title: '入会后继续' }}
+        cardId="cta-1"
+        isHistory={false}
+      />,
+    );
+    const button = host.querySelector('.member-enroll-cta__btn') as HTMLButtonElement;
+    act(() => {
+      button.click();
+      button.click();
+    });
+    expect(mockedSend()).toHaveBeenCalledTimes(1);
+    expect(mockedSend()).toHaveBeenCalledWith('cta-1', { type: 'openLink', url: 'alipays://member/open' });
+    expect(button.disabled).toBe(true);
+    expect(host.textContent).not.toMatch(/1000|免费停车|专属停车|生日服务|会员专线/);
+  });
+
+  it('历史 CTA 禁用且不触发跳转', () => {
+    const { host } = render(
+      <MemberEnrollmentCtaCard data={{ userId: 'u1', authState: 'authenticated', state: 'not_enrolled', enrollUrl: 'https://example.com/enroll' }} cardId="cta-history" isHistory />,
+    );
+    const button = host.querySelector('.member-enroll-cta__btn') as HTMLButtonElement;
+    expect(button.disabled).toBe(true);
+    act(() => button.click());
+    expect(mockedSend()).not.toHaveBeenCalled();
+  });
+
+  it('无 enrollUrl（深链解耦形态）→ 按钮禁用、文案“暂不可用”且不发 openLink', () => {
+    const { host } = render(
+      <MemberEnrollmentCtaCard
+        data={{ userId: 'u1', authState: 'authenticated', state: 'not_enrolled' }}
+        cardId="cta-nourl"
+        isHistory={false}
+      />,
+    );
+    const button = host.querySelector('.member-enroll-cta__btn') as HTMLButtonElement;
+    expect(button.disabled).toBe(true);
+    expect(button.getAttribute('aria-label')).toBe('入会暂不可用（请联系商场客服）');
+    expect(host.textContent).toContain('暂不可用（请联系商场客服）');
+    act(() => button.click());
+    expect(mockedSend()).not.toHaveBeenCalled();
+  });
+});
+
+describe('MemberLoginCtaCard', () => {
+  beforeEach(() => vi.clearAllMocks());
+  const LOGIN_URL = 'alipays://platformapi/startapp?appId=demo&page=v/login/index';
+
+  it('通过 SDK openLink 跳转登录页，双击只发一次', () => {
+    const { host } = render(
+      <MemberLoginCtaCard data={{ loginUrl: LOGIN_URL }} cardId="login-1" isHistory={false} />,
+    );
+    const button = host.querySelector('.member-login-cta__btn') as HTMLButtonElement;
+    act(() => {
+      button.click();
+      button.click();
+    });
+    expect(mockedSend()).toHaveBeenCalledTimes(1);
+    expect(mockedSend()).toHaveBeenCalledWith('login-1', { type: 'openLink', url: LOGIN_URL });
+    expect(button.disabled).toBe(true);
+    expect(host.textContent).toContain('登录后可解锁全部功能');
+  });
+
+  it('不承诺登录之后有什么——权益要等厂商返回才知道', () => {
+    const { host } = render(
+      <MemberLoginCtaCard data={{ loginUrl: LOGIN_URL }} cardId="login-2" isHistory={false} />,
+    );
+    // 说明文案只讲「解锁全部功能」，不点名任何一项权益
+    expect(host.textContent).not.toMatch(/积分|折扣|免费停车|会员权益/);
+  });
+
+  it('历史卡禁用且不触发跳转', () => {
+    const { host } = render(
+      <MemberLoginCtaCard data={{ loginUrl: LOGIN_URL }} cardId="login-3" isHistory />,
+    );
+    const button = host.querySelector('.member-login-cta__btn') as HTMLButtonElement;
+    expect(button.disabled).toBe(true);
+    act(() => button.click());
+    expect(mockedSend()).not.toHaveBeenCalled();
+    expect(host.textContent).toContain('历史卡片不可重复操作');
+  });
+
+  it('无 loginUrl（深链解耦形态）→ 按钮禁用、文案“暂不可用”且不发 openLink', () => {
+    const { host } = render(
+      <MemberLoginCtaCard data={{ title: '登录后继续' }} cardId="login-nourl" isHistory={false} />,
+    );
+    const button = host.querySelector('.member-login-cta__btn') as HTMLButtonElement;
+    expect(button.disabled).toBe(true);
+    expect(button.getAttribute('aria-label')).toBe('登录暂不可用（请联系商场客服）');
+    expect(host.textContent).toContain('暂不可用（请联系商场客服）');
+    act(() => button.click());
+    expect(mockedSend()).not.toHaveBeenCalled();
+  });
+});
+
+describe('MemberPointUsageListCard', () => {
+  it('流水双色类', () => {
+    const { host } = render(
+      <MemberPointUsageListCard
+        data={{
+          userId: 'u1',
+          balance: 100,
+          membershipLabel: '悦享卡',
+          items: [
+            { usageRecordRef: 'r1', title: '消费抵扣', amount: '-120', usedAt: '2026-08-19T10:30:00+08:00' },
+            { usageRecordRef: 'r2', title: '签到奖励', amount: '+50' },
+          ],
+          total: 2,
+        } as never}
+      />,
+    );
+    const rows = host.querySelectorAll('.member-pu__row b');
+    expect(host.textContent).toContain('悦享卡');
+    expect(host.textContent).toContain('最近积分记录');
+    expect(host.textContent).toContain('2026.08.19');
+    expect(host.textContent).not.toMatch(/金卡|银卡|铂金/);
+    expect(rows[0].className).toContain('member-pu__amount--spend');
+    expect(rows[1].className).toContain('member-pu__amount--income');
+  });
+});
+
+describe('MemberInfoCard', () => {
+  it('只显示用户资料，不暴露内部 memberRef，缺头像时使用正式占位', () => {
+    const { host } = render(
+      <MemberInfoCard
+        data={{
+          userId: 'u1',
+          authState: 'authenticated',
+          state: 'active',
+          displayName: '风清',
+          contactDisplay: '181****6886',
+          memberRef: 'member:internal-ref',
+          registeredAt: '2026-08-18T08:00:00+08:00',
+          labels: [{ labelRef: 'l1', name: '悦享会员' }],
+        }}
+      />,
+    );
+    expect(host.textContent).toContain('会员资料');
+    expect(host.textContent).toContain('181****6886');
+    expect(host.textContent).toContain('2026.08.18');
+    expect(host.textContent).toContain('悦享会员');
+    expect(host.textContent).not.toContain('member:internal-ref');
+    expect(host.querySelector('.member-info__avatar--fallback')).not.toBeNull();
+    expect(host.querySelector('img')).toBeNull();
+  });
+});
+
+describe('MemberEnrollmentStatusCard', () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it('pending 使用签发 token 刷新，双击只发送一次且不展示内部会员标识', () => {
+    const { host } = render(
+      <MemberEnrollmentStatusCard
+        data={{
+          userId: 'u1',
+          attemptRef: 'attempt-1',
+          state: 'pending_confirmation',
+          memberRef: 'member:internal-ref',
+          message: '厂商确认中，可稍后再刷新',
+        }}
+        cardId="status-1"
+        isHistory={false}
+        actionTokens={{ 'member.query-enrollment-status': 'refresh-token' }}
+      />,
+    );
+    expect(host.textContent).toContain('入会申请');
+    expect(host.textContent).toContain('厂商确认中');
+    expect(host.textContent).toContain('刷新状态');
+    expect(host.textContent).not.toContain('member:internal-ref');
+    const refresh = host.querySelector('.member-es__refresh') as HTMLButtonElement;
+    act(() => {
+      refresh.click();
+      refresh.click();
+    });
+    expect(mockedSend()).toHaveBeenCalledTimes(1);
+    expect(mockedSend()).toHaveBeenCalledWith(
+      'status-1',
+      { type: 'moduleAction', actionId: 'member.query-enrollment-status', contextToken: 'refresh-token' },
+      { attemptRef: 'attempt-1' },
+    );
+    expect(refresh.disabled).toBe(true);
+  });
+
+  it('历史 pending 禁用刷新并给出当前状态查询提示', () => {
+    const { host } = render(
+      <MemberEnrollmentStatusCard
+        data={{ userId: 'u1', attemptRef: 'a1', state: 'pending_confirmation' }}
+        cardId="status-history"
+        isHistory
+        actionTokens={{ 'member.query-enrollment-status': 'refresh-token' }}
+      />,
+    );
+    expect((host.querySelector('.member-es__refresh') as HTMLButtonElement).disabled).toBe(true);
+    expect(host.textContent).toContain('历史申请不可刷新');
+  });
+});
+
+describe('MemberCardSummaryCard', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it('优先渲染 C 端 CardPhoto；无真实权益时不渲染静态权益区，且不把 levelName 当会员等级展示', () => {
+    const { host } = render(
+      <MemberCardSummaryCard
+        data={{
+          userId: 'u1',
+          cardRef: 'card-1',
+          cardDisplay: '悦享卡',
+          status: 'active',
+          levelName: '金卡',
+          availablePoints: 300,
+          cardImageUrl: 'https://img.example-mall.cn/sp_mall/member-card.png',
+        }}
+      />,
+    );
+    const image = host.querySelector('.member-card-summary__face') as HTMLImageElement;
+    expect(image.src).toBe('https://img.example-mall.cn/sp_mall/member-card.png');
+    expect(image.loading).toBe('eager');
+    expect(host.textContent).toContain('300');
+    expect(host.querySelector('.member-card-summary__benefits')).toBeNull();
+    expect(host.textContent).not.toMatch(/专属停车|积分兑换|生日服务|会员专线/);
+    expect(host.textContent).not.toContain('积分明细');
+    expect(host.textContent).not.toContain('全部优惠券');
+    expect(host.textContent).not.toContain('金卡');
+  });
+
+  it('动态卡面渲染具体积分、消费提示、进度线和接口权益', async () => {
+    const { host } = render(
+      <MemberCardSummaryCard
+        data={{
+          userId: 'u1',
+          cardRef: 'card-dynamic',
+          cardDisplay: '金卡会员',
+          status: 'active',
+          levelName: '金卡',
+          availablePoints: 987,
+          cardImageUrl: 'https://assets.example.com/member/gold-card.png',
+          pointsRuleImageUrl: 'https://assets.example.com/member/points-rule.jpg',
+          presentation: { variant: 'gold', labelsEmbedded: true },
+          progress: {
+            daySpentCents: 12_345,
+            yearSpentCents: 500_000,
+            percent: 25,
+            message: '今日已消费123.45元，年累计已消费5000.00元',
+          },
+          benefits: [
+            {
+              benefitRef: 'b1',
+              name: '免费停车',
+              iconUrl: 'https://assets.example.com/member/parking.png',
+              description: '可免2小时',
+            },
+            { benefitRef: 'b2', name: '积分换礼', action: { kind: 'miniapp', url: 'alipays://member/points-mall' } },
+          ],
+        }}
+        cardId="card-dynamic"
+      />,
+    );
+    expect(host.querySelector('.member-card-summary__face--gold')).not.toBeNull();
+    expect(host.querySelector('.member-card-summary__face--embedded')).not.toBeNull();
+    expect(host.querySelector('.member-card-summary--gold')).not.toBeNull();
+    expect(host.textContent).not.toContain('我的积分');
+    expect(host.textContent).not.toContain('金卡会员');
+    expect(host.textContent).toContain('987');
+    expect(host.textContent).toContain('今日已消费123.45元，年累计已消费5000.00元');
+    expect(host.textContent).toContain('免费停车');
+    expect(host.textContent).toContain('可免2小时');
+    expect(host.querySelector('.member-card-summary__benefit-description')).not.toBeNull();
+    expect(host.textContent).toContain('积分换礼');
+    expect(host.textContent).not.toContain('专属停车');
+    expect(host.querySelector('.member-card-summary__benefit-icon-fallback')).not.toBeNull();
+    const progress = host.querySelector('[role="progressbar"]') as HTMLElement;
+    expect(progress.getAttribute('aria-valuenow')).toBe('25');
+    expect((progress.firstElementChild as HTMLElement).style.width).toBe('25%');
+    const benefitButton = host.querySelector('.member-card-summary__benefit-button') as HTMLButtonElement;
+    expect(benefitButton).not.toBeNull();
+    act(() => benefitButton.click());
+    expect(mockedSend()).toHaveBeenCalledWith('card-dynamic', {
+      type: 'openLink',
+      url: 'alipays://member/points-mall',
+    });
+    expect(document.querySelector('.member-miniapp-dialog')).toBeNull();
+  });
+
+  it('点击卡图内置积分规则区域展示近全屏弹层，支持 Escape 关闭', () => {
+    const { host } = render(
+      <MemberCardSummaryCard
+        data={{
+          userId: 'u1',
+          cardRef: 'card-rule',
+          cardDisplay: '金卡会员',
+          status: 'active',
+          availablePoints: 987,
+          pointsRuleImageUrl: 'https://assets.example.com/member/points-rule.jpg',
+          presentation: { variant: 'gold', labelsEmbedded: true },
+        }}
+      />,
+    );
+    const trigger = host.querySelector('.member-card-summary__rule-hotspot') as HTMLButtonElement;
+    expect(trigger.getAttribute('aria-label')).toBe('积分规则');
+    expect(trigger.textContent).toBe('');
+    expect(host.querySelector('.member-card-summary__rule-trigger')).toBeNull();
+
+    act(() => { trigger.click(); });
+    const dialog = document.body.querySelector('.member-points-rule') as HTMLElement;
+    expect(trigger.className).toContain('member-card-summary__rule-hotspot');
+    expect(dialog.parentElement).toBe(document.body);
+    expect(host.contains(dialog)).toBe(false);
+    expect(dialog.getAttribute('role')).toBe('dialog');
+    expect(dialog.getAttribute('aria-modal')).toBe('true');
+    expect((dialog.querySelector('.member-points-rule__image') as HTMLImageElement).src)
+      .toBe('https://assets.example.com/member/points-rule.jpg');
+
+    act(() => { window.dispatchEvent(new KeyboardEvent('keydown', { key: 'Escape' })); });
+    expect(dialog.className).toContain('member-points-rule--closing');
+    act(() => { dialog.dispatchEvent(new Event('animationend', { bubbles: true })); });
+    expect(document.body.querySelector('.member-points-rule')).toBeNull();
+  });
+
+  it('渲染 PRD 三项偏好，点击发送新的可见 query', () => {
+    const { host } = render(
+      <MemberCardSummaryCard
+        data={{
+          userId: 'u1',
+          cardRef: 'card-preferences',
+          cardDisplay: '悦享卡',
+          status: 'active',
+          availablePoints: 300,
+        }}
+        cardId="card-1"
+        isHistory={false}
+      />,
+    );
+    const buttons = [...host.querySelectorAll('.member-card-summary__preference-list button')] as HTMLButtonElement[];
+    expect(host.textContent).toContain('说说你的偏好');
+    expect(host.querySelector('.member-card-summary__preference-hint')?.textContent).toBe('请选择你的偏好，或直接告诉我');
+    expect(buttons.map((button) => button.textContent)).toEqual(['我常来买衣服', '我常带娃来玩', '我常来吃美食']);
+
+    act(() => { buttons[0].click(); });
+    expect(mockedSend()).toHaveBeenCalledWith('card-1', {
+      type: 'sendMessage',
+      value: '我常来买衣服',
+      displayText: '我常来买衣服',
+      visible: true,
+    });
+  });
+
+  it('历史会员卡的偏好按钮不可点击', () => {
+    const { host } = render(
+      <MemberCardSummaryCard
+        data={{
+          userId: 'u1',
+          cardRef: 'card-history',
+          cardDisplay: '悦享卡',
+          status: 'active',
+          availablePoints: 300,
+        }}
+        cardId="card-history"
+        isHistory
+      />,
+    );
+    const buttons = [...host.querySelectorAll('.member-card-summary__preference-list button')] as HTMLButtonElement[];
+    expect(buttons.every((button) => button.disabled)).toBe(true);
+  });
+});
+
+describe('D10 置位守卫（三轮修复：防"声明置位、实现漏置"回归）', () => {
+  it('member 三张自持结构卡 default 导出 selfRendersActions 置位', () => {
+    expect((MemberEnrollmentFormCardDefault as { selfRendersActions?: boolean }).selfRendersActions).toBe(true);
+    expect((MemberEnrollmentStatusCardDefault as { selfRendersActions?: boolean }).selfRendersActions).toBe(true);
+    expect((MemberCardSummaryCardDefault as { selfRendersActions?: boolean }).selfRendersActions).toBe(true);
+  });
+});

package/tests/enrollment.test.ts

@@ -0,0 +1,121 @@
+/**
+ * 015 S4：入会五阶段 mock 闭环（授权 effect → complete-auth → PII 暂存 → enroll → 状态刷新）。
+ * 覆盖：授权成功预填 / 授权降级 manual / PII TTL 与用后即删（F2）/ 幂等重入 / pending 刷新收口（R4）。
+ */
+import { describe, expect, it } from 'vitest';
+import { createInMemoryStateStore } from '@tbox.cn/app-sdk/server';
+import {
+  createMemberActions,
+  MEMBER_PROFILE_NAMESPACE,
+  buildEnrollmentIdempotencyKey,
+  ENROLLMENT_FORM_VERSION,
+} from '../src/server/action';
+import { InMemoryMemberService } from '../src/server/service';
+import type { RequestContext } from '@tbox.cn/app-contracts';
+
+const member = new InMemoryMemberService();
+const state = createInMemoryStateStore();
+
+// ServerContext 最小 fake（动作只用 ctx.state）
+const ctxFake = { state } as never;
+const actions = createMemberActions(ctxFake, async () => member);
+const reqCtx = (userId = 'u_1'): RequestContext =>
+  ({ identity: { userId, source: 'dev' }, attributes: { mall: { miniAppId: 'app', mallId: 'mall-1', subjectId: 's1' } } }) as never;
+
+describe('入会链：授权 → 预填 → 提交 → 刷新', () => {
+  it('阶段 1：request-alipay-authorization 返回 authorization effect（resultActionId 指向回调动作）', async () => {
+    const result = await actions.requestAuthorization.execute!({}, reqCtx());
+    expect(result.effects).toEqual([
+      { type: 'authorization.alipay-user-profile', scopes: ['auth_user'], resultActionId: 'member.complete-alipay-authorization' },
+    ]);
+  });
+
+  it('阶段 2：complete-auth success + fake PII 暂存 → 预填表单卡（mobile readOnly）', async () => {
+    // 不打真实支付宝（env 未配置）→ 模拟授权失败路径先行验证 manual 降级
+    const manual = await actions.completeAuthorization.execute!({ status: 'cancel' }, reqCtx());
+    expect(manual.card?.cardType).toBe('member-enrollment-form');
+    expect((manual.card?.data as { manualNotice?: string }).manualNotice).toBeTruthy();
+
+    // success + authCode（ALIPAY 未配置 → 降级 manual；此处直接预置 PII 验证 enroll 消费路径）
+    const stored = { mobile: '13800001234', displayName: '张三' };
+    await state.put(MEMBER_PROFILE_NAMESPACE, 'u_2', stored, 30 * 60 * 1000);
+    const enroll = await actions.enroll.execute!(
+      { fieldValues: { mobile: '15999999999' }, acceptedConsentIds: ['privacy'] },
+      reqCtx('u_2'),
+    );
+    // 授权 mobile 强制覆盖手填（pending 卡返回 + PII 已消费）
+    expect((enroll.card?.data as { state: string }).state).toBe('pending_confirmation');
+    // F2：PII 用后即删（consume 语义）
+    expect(await state.get(MEMBER_PROFILE_NAMESPACE, 'u_2')).toBeNull();
+    // 手机号以授权值入库：手动改用授权 mobile 的记录可通过 profile 验证（pending 后刷新 active）
+    const attemptRef = (enroll.card?.data as { attemptRef?: string }).attemptRef;
+    const first = await actions.queryEnrollmentStatus.execute!({ attemptRef }, reqCtx('u_2'));
+    expect((first.update?.data as { state: string }).state).toBe('pending_confirmation');
+    const second = await actions.queryEnrollmentStatus.execute!({ attemptRef }, reqCtx('u_2'));
+    expect((second.update?.data as { state: string }).state).toBe('active');
+  });
+
+  it('阶段 3：enroll 必选 consent 未勾 → 拒绝', async () => {
+    const result = await actions.enroll.execute!({ fieldValues: { mobile: '13800001234' }, acceptedConsentIds: [] }, reqCtx('u_3'));
+    expect((result.card?.data as { state: string }).state).toBe('failed');
+    expect((result.card?.data as { message?: string }).message).toContain('隐私政策');
+  });
+
+  it('阶段 4：enroll manual 手机号非法 → 拒绝', async () => {
+    const result = await actions.enroll.execute!({ fieldValues: { mobile: '123' }, acceptedConsentIds: ['privacy'] }, reqCtx('u_4'));
+    expect((result.card?.data as { state: string }).state).toBe('failed');
+    expect((result.card?.data as { message?: string }).message).toContain('手机号');
+  });
+
+  it('阶段 5：pending → 显式刷新（两次查询后 active，R4 无自动轮询）', async () => {
+    const enroll = await actions.enroll.execute!(
+      { fieldValues: { mobile: '13800005678' }, acceptedConsentIds: ['privacy'] },
+      reqCtx('u_5'),
+    );
+    const attemptRef = (enroll.card?.data as { attemptRef?: string }).attemptRef;
+    expect(attemptRef).toBeTruthy();
+
+    const first = await actions.queryEnrollmentStatus.execute!({ attemptRef }, reqCtx('u_5'));
+    expect((first.update?.data as { state: string }).state).toBe('pending_confirmation');
+
+    const second = await actions.queryEnrollmentStatus.execute!({ attemptRef }, reqCtx('u_5'));
+    expect((second.update?.data as { state: string }).state).toBe('active');
+  });
+
+  it('幂等键：同 userId+mallId+formVersion 恒定（sha256 双 \\0 分隔）', () => {
+    const k1 = buildEnrollmentIdempotencyKey('u_1', 'mall-1', ENROLLMENT_FORM_VERSION);
+    const k2 = buildEnrollmentIdempotencyKey('u_1', 'mall-1', ENROLLMENT_FORM_VERSION);
+    const k3 = buildEnrollmentIdempotencyKey('u_1', 'mall-2', ENROLLMENT_FORM_VERSION);
+    expect(k1).toBe(k2);
+    expect(k1).not.toBe(k3);
+    expect(k1).toHaveLength(64);
+  });
+
+  it('动作声明：complete-alipay-authorization 为 hidden（不渲染按钮，补签通道专用）', () => {
+    expect(actions.completeAuthorization.hidden).toBe(true);
+    expect(actions.completeAuthorization.singleUse).toBe(true);
+    expect(actions.requestAuthorization.singleUse).toBe(true);
+  });
+
+  it('评审修复（#3）：厂商异常释放幂等占位 → 重试可成功（不固化 24h 拒绝）', async () => {
+    const flaky = new InMemoryMemberService();
+    const origEnroll = flaky.enroll.bind(flaky);
+    let failNext = true;
+    flaky.enroll = async (input: Parameters<InMemoryMemberService['enroll']>[0]) => {
+      if (failNext) throw new Error('gateway timeout');
+      return origEnroll(input);
+    };
+    const flakyActions = createMemberActions(ctxFake, async () => flaky);
+    const payload = { fieldValues: { mobile: '13800009999' }, acceptedConsentIds: ['privacy'] };
+
+    // 第一次：厂商异常 → failed + 提示重试（占位已释放）
+    const first = await flakyActions.enroll.execute!(payload, reqCtx('u_retry'));
+    expect((first.card?.data as { state: string }).state).toBe('failed');
+    expect((first.card?.data as { message?: string }).message).toContain('请稍后重试');
+
+    // 第二次：恢复 → 占位不阻塞，正常受理
+    failNext = false;
+    const second = await flakyActions.enroll.execute!(payload, reqCtx('u_retry'));
+    expect((second.card?.data as { state: string }).state).toBe('pending_confirmation');
+  });
+});