@tbox.cn/app-module-member 0.2.0 → 0.8.7

package/tests/enrollment.test.ts

@@ -0,0 +1,121 @@
+/**
+ * 015 S4：入会五阶段 mock 闭环（授权 effect → complete-auth → PII 暂存 → enroll → 状态刷新）。
+ * 覆盖：授权成功预填 / 授权降级 manual / PII TTL 与用后即删（F2）/ 幂等重入 / pending 刷新收口（R4）。
+ */
+import { describe, expect, it } from 'vitest';
+import { createInMemoryStateStore } from '@tbox.cn/app-sdk/server';
+import {
+  createMemberActions,
+  MEMBER_PROFILE_NAMESPACE,
+  buildEnrollmentIdempotencyKey,
+  ENROLLMENT_FORM_VERSION,
+} from '../src/server/action';
+import { InMemoryMemberService } from '../src/server/service';
+import type { RequestContext } from '@tbox.cn/app-contracts';
+
+const member = new InMemoryMemberService();
+const state = createInMemoryStateStore();
+
+// ServerContext 最小 fake（动作只用 ctx.state）
+const ctxFake = { state } as never;
+const actions = createMemberActions(ctxFake, async () => member);
+const reqCtx = (userId = 'u_1'): RequestContext =>
+  ({ identity: { userId, source: 'dev' }, attributes: { mall: { miniAppId: 'app', mallId: 'mall-1', subjectId: 's1' } } }) as never;
+
+describe('入会链：授权 → 预填 → 提交 → 刷新', () => {
+  it('阶段 1：request-alipay-authorization 返回 authorization effect（resultActionId 指向回调动作）', async () => {
+    const result = await actions.requestAuthorization.execute!({}, reqCtx());
+    expect(result.effects).toEqual([
+      { type: 'authorization.alipay-user-profile', scopes: ['auth_user'], resultActionId: 'member.complete-alipay-authorization' },
+    ]);
+  });
+
+  it('阶段 2：complete-auth success + fake PII 暂存 → 预填表单卡（mobile readOnly）', async () => {
+    // 不打真实支付宝（env 未配置）→ 模拟授权失败路径先行验证 manual 降级
+    const manual = await actions.completeAuthorization.execute!({ status: 'cancel' }, reqCtx());
+    expect(manual.card?.cardType).toBe('member-enrollment-form');
+    expect((manual.card?.data as { manualNotice?: string }).manualNotice).toBeTruthy();
+
+    // success + authCode（ALIPAY 未配置 → 降级 manual；此处直接预置 PII 验证 enroll 消费路径）
+    const stored = { mobile: '13800001234', displayName: '张三' };
+    await state.put(MEMBER_PROFILE_NAMESPACE, 'u_2', stored, 30 * 60 * 1000);
+    const enroll = await actions.enroll.execute!(
+      { fieldValues: { mobile: '15999999999' }, acceptedConsentIds: ['privacy'] },
+      reqCtx('u_2'),
+    );
+    // 授权 mobile 强制覆盖手填（pending 卡返回 + PII 已消费）
+    expect((enroll.card?.data as { state: string }).state).toBe('pending_confirmation');
+    // F2：PII 用后即删（consume 语义）
+    expect(await state.get(MEMBER_PROFILE_NAMESPACE, 'u_2')).toBeNull();
+    // 手机号以授权值入库：手动改用授权 mobile 的记录可通过 profile 验证（pending 后刷新 active）
+    const attemptRef = (enroll.card?.data as { attemptRef?: string }).attemptRef;
+    const first = await actions.queryEnrollmentStatus.execute!({ attemptRef }, reqCtx('u_2'));
+    expect((first.update?.data as { state: string }).state).toBe('pending_confirmation');
+    const second = await actions.queryEnrollmentStatus.execute!({ attemptRef }, reqCtx('u_2'));
+    expect((second.update?.data as { state: string }).state).toBe('active');
+  });
+
+  it('阶段 3：enroll 必选 consent 未勾 → 拒绝', async () => {
+    const result = await actions.enroll.execute!({ fieldValues: { mobile: '13800001234' }, acceptedConsentIds: [] }, reqCtx('u_3'));
+    expect((result.card?.data as { state: string }).state).toBe('failed');
+    expect((result.card?.data as { message?: string }).message).toContain('隐私政策');
+  });
+
+  it('阶段 4：enroll manual 手机号非法 → 拒绝', async () => {
+    const result = await actions.enroll.execute!({ fieldValues: { mobile: '123' }, acceptedConsentIds: ['privacy'] }, reqCtx('u_4'));
+    expect((result.card?.data as { state: string }).state).toBe('failed');
+    expect((result.card?.data as { message?: string }).message).toContain('手机号');
+  });
+
+  it('阶段 5：pending → 显式刷新（两次查询后 active，R4 无自动轮询）', async () => {
+    const enroll = await actions.enroll.execute!(
+      { fieldValues: { mobile: '13800005678' }, acceptedConsentIds: ['privacy'] },
+      reqCtx('u_5'),
+    );
+    const attemptRef = (enroll.card?.data as { attemptRef?: string }).attemptRef;
+    expect(attemptRef).toBeTruthy();
+
+    const first = await actions.queryEnrollmentStatus.execute!({ attemptRef }, reqCtx('u_5'));
+    expect((first.update?.data as { state: string }).state).toBe('pending_confirmation');
+
+    const second = await actions.queryEnrollmentStatus.execute!({ attemptRef }, reqCtx('u_5'));
+    expect((second.update?.data as { state: string }).state).toBe('active');
+  });
+
+  it('幂等键：同 userId+mallId+formVersion 恒定（sha256 双 \\0 分隔）', () => {
+    const k1 = buildEnrollmentIdempotencyKey('u_1', 'mall-1', ENROLLMENT_FORM_VERSION);
+    const k2 = buildEnrollmentIdempotencyKey('u_1', 'mall-1', ENROLLMENT_FORM_VERSION);
+    const k3 = buildEnrollmentIdempotencyKey('u_1', 'mall-2', ENROLLMENT_FORM_VERSION);
+    expect(k1).toBe(k2);
+    expect(k1).not.toBe(k3);
+    expect(k1).toHaveLength(64);
+  });
+
+  it('动作声明：complete-alipay-authorization 为 hidden（不渲染按钮，补签通道专用）', () => {
+    expect(actions.completeAuthorization.hidden).toBe(true);
+    expect(actions.completeAuthorization.singleUse).toBe(true);
+    expect(actions.requestAuthorization.singleUse).toBe(true);
+  });
+
+  it('评审修复（#3）：厂商异常释放幂等占位 → 重试可成功（不固化 24h 拒绝）', async () => {
+    const flaky = new InMemoryMemberService();
+    const origEnroll = flaky.enroll.bind(flaky);
+    let failNext = true;
+    flaky.enroll = async (input: Parameters<InMemoryMemberService['enroll']>[0]) => {
+      if (failNext) throw new Error('gateway timeout');
+      return origEnroll(input);
+    };
+    const flakyActions = createMemberActions(ctxFake, async () => flaky);
+    const payload = { fieldValues: { mobile: '13800009999' }, acceptedConsentIds: ['privacy'] };
+
+    // 第一次：厂商异常 → failed + 提示重试（占位已释放）
+    const first = await flakyActions.enroll.execute!(payload, reqCtx('u_retry'));
+    expect((first.card?.data as { state: string }).state).toBe('failed');
+    expect((first.card?.data as { message?: string }).message).toContain('请稍后重试');
+
+    // 第二次：恢复 → 占位不阻塞，正常受理
+    failNext = false;
+    const second = await flakyActions.enroll.execute!(payload, reqCtx('u_retry'));
+    expect((second.card?.data as { state: string }).state).toBe('pending_confirmation');
+  });
+});

package/tests/ports-resolve.test.ts

@@ -0,0 +1,95 @@
+/**
+ * member ports 017 槽位原子化回归锁（五槽直连上抛，无 InMemory 兜底）。
+ * - 槽位命中 → adapter 产物 + service 参数 = 槽 id；
+ * - PROVIDER_NOT_IMPLEMENTED / 任何 registry 错误 → 上抛（member 域 fail-fast，
+ *   与 parking/promotion InMemory 兜底、guide 增强面兜底语义三分）；
+ * - mallId 缺失 / registry 缺失 → 显式错误。
+ */
+import { describe, expect, it, vi } from 'vitest';
+import type { RequestContext } from '@tbox.cn/app-contracts';
+import { createServerContext } from '@tbox.cn/app-sdk/server';
+import type { ServerContext } from '@tbox.cn/app-sdk/server';
+import {
+  resolveMemberAccountPort,
+  resolveMemberBenefitsPort,
+  resolveMemberCardPort,
+  resolveMemberEnrollmentPort,
+  resolveMemberProfilePort,
+} from '../src/server/ports';
+
+function requestContext(mallId = 'mall-demo', token = 'user-token'): RequestContext {
+  return {
+    identity: { userId: 'u_1001', source: 'dev' },
+    credentials: { provider: 'dev', token },
+    attributes: { mall: { miniAppId: 'demo-app', mallId } },
+  };
+}
+
+function ctxWithIntegrations(resolveService: (input: unknown) => Promise<unknown>): ServerContext {
+  const ctx = createServerContext({});
+  (ctx as { integrations?: unknown }).integrations = { resolveService };
+  (ctx as { logger?: unknown }).logger = { warn: vi.fn(), info: vi.fn(), debug: vi.fn() };
+  return ctx;
+}
+
+const sentinel = { kind: 'slot-hit' } as unknown as never;
+
+const RESOLVERS = [
+  { name: 'member.account', resolve: resolveMemberAccountPort },
+  { name: 'member.profile', resolve: resolveMemberProfilePort },
+  { name: 'member.card', resolve: resolveMemberCardPort },
+  { name: 'member.benefits', resolve: resolveMemberBenefitsPort },
+  { name: 'member.enrollment', resolve: resolveMemberEnrollmentPort },
+] as const;
+
+describe('member ports 五槽解析（017 槽位原子化；fail-fast 无兜底）', () => {
+  for (const { name, resolve } of RESOLVERS) {
+    it(`[${name}] T1 槽位命中 → adapter 产物 + service 参数 = 槽 id`, async () => {
+      let captured: unknown;
+      const ctx = ctxWithIntegrations(async (input) => {
+        captured = input;
+        return sentinel;
+      });
+      await expect(resolve(requestContext(), ctx)).resolves.toBe(sentinel);
+      expect(captured).toMatchObject({ service: name, scope: { mallId: 'mall-demo' } });
+    });
+
+    it(`[${name}] T2 PROVIDER_NOT_IMPLEMENTED → 上抛（member 无兜底）`, async () => {
+      const ctx = ctxWithIntegrations(async () => {
+        throw Object.assign(new Error('无 adapter'), { code: 'PROVIDER_NOT_IMPLEMENTED' });
+      });
+      await expect(resolve(requestContext(), ctx)).rejects.toMatchObject({ code: 'PROVIDER_NOT_IMPLEMENTED' });
+    });
+
+    it(`[${name}] T3 预期缺席（SERVICE_NOT_CONFIGURED）→ 上抛（配置即声明；工具层转译文案）`, async () => {
+      const ctx = ctxWithIntegrations(async () => {
+        throw Object.assign(new Error('未配置'), { code: 'PROVIDER_SERVICE_NOT_CONFIGURED' });
+      });
+      await expect(resolve(requestContext(), ctx)).rejects.toMatchObject({ code: 'PROVIDER_SERVICE_NOT_CONFIGURED' });
+    });
+
+    it(`[${name}] T4 mallId 缺失 → 显式错误（不落空 scope）`, async () => {
+      const ctx = ctxWithIntegrations(async () => sentinel);
+      await expect(resolve({ ...requestContext(), attributes: {} }, ctx)).rejects.toThrow('缺少 mallId');
+    });
+  }
+
+  it('T5 ctx 无 integrations → 显式错误（registry 缺失不静默）', async () => {
+    await expect(resolveMemberAccountPort(requestContext(), createServerContext({}))).rejects.toThrow(
+      'integrations registry 缺失',
+    );
+  });
+
+  it('T6 槽级隔离：account 缺席不拖累 benefits（部分绑定显式失败粒度）', async () => {
+    const ctx = ctxWithIntegrations(async (input: unknown) => {
+      if ((input as { service: string }).service === 'member.account') {
+        throw Object.assign(new Error('未配置'), { code: 'PROVIDER_SERVICE_NOT_CONFIGURED' });
+      }
+      return sentinel;
+    });
+    await expect(resolveMemberAccountPort(requestContext(), ctx)).rejects.toMatchObject({
+      code: 'PROVIDER_SERVICE_NOT_CONFIGURED',
+    });
+    await expect(resolveMemberBenefitsPort(requestContext(), ctx)).resolves.toBe(sentinel);
+  });
+});

package/tests/preference-memory.test.ts

@@ -0,0 +1,86 @@
+import { describe, expect, it } from 'vitest';
+import { createInMemoryMemoryStore, createServerContext } from '@tbox.cn/app-sdk/server';
+import { createMemberHandler } from '../src/server/handler';
+
+/** 上下文统一化：显式缝——reqCtx 由调用方透传（handle 第四参） */
+function authenticatedContext(userId = 'user-1', mallId = 'mall-1') {
+  const memory = createInMemoryMemoryStore();
+  const ctx = createServerContext({ memory });
+  const reqCtx = {
+    identity: { userId, source: 'dev' as const },
+    attributes: { mall: { mallId, miniAppId: 'app-1', subjectId: 'subject-1' } },
+  };
+  return { ctx, memory, reqCtx };
+}
+
+describe('会员偏好长期记忆', () => {
+  it('三项声明式 intent 与 PRD 问题一致（exact 整句全等，不入 BM25 词袋）', () => {
+    const { ctx } = authenticatedContext();
+    expect(createMemberHandler(ctx).intents).toEqual([
+      { patterns: ['我常来买衣服', '我常带娃来玩', '我常来吃美食'], match: 'exact' },
+    ]);
+  });
+
+  it('登录用户点击 query 后按 userId × mallId 保存 preference', async () => {
+    const { ctx, memory, reqCtx } = authenticatedContext();
+    const result = await createMemberHandler(ctx).handle('intent', { content: '我常来买衣服' }, ctx, reqCtx);
+
+    expect(result.text).toContain('记住啦');
+    await expect(memory.list({ userId: 'user-1', scope: { mallId: 'mall-1' } })).resolves.toMatchObject([
+      { kind: 'preference', content: '会员偏好：我常来买衣服' },
+    ]);
+    await expect(memory.list({ userId: 'user-1', scope: { mallId: 'mall-2' } })).resolves.toEqual([]);
+    await expect(memory.list({ userId: 'other-user', scope: { mallId: 'mall-1' } })).resolves.toEqual([]);
+  });
+
+  it('保存后返回受控 Agent 续问，由 chat-engine 继续完整导购流程', async () => {
+    const { ctx, memory, reqCtx } = authenticatedContext();
+
+    const result = await createMemberHandler(ctx).handle('intent', { content: '我常来买衣服' }, ctx, reqCtx);
+
+    expect(result.text).toBe('记住啦，你常来买衣服。正在为你查找相关的门店和导购服务，请稍等。\n\n');
+    expect(result.continueWith).toEqual({ content: '推荐适合购买的服装门店和商品' });
+    expect(result.cards).toEqual([]);
+    await expect(memory.list({ userId: 'user-1', scope: { mallId: 'mall-1' } })).resolves.toMatchObject([
+      { kind: 'preference', content: '会员偏好：我常来买衣服' },
+    ]);
+  });
+
+  it('匿名用户与 memory-off 上下文均不写入', async () => {
+    const memory = createInMemoryMemoryStore();
+    const anonymous = createServerContext({ memory });
+    const anonymousResult = await createMemberHandler(anonymous).handle(
+      'intent',
+      { content: '我常来吃美食' },
+      anonymous,
+      { identity: { userId: 'anonymous', source: 'anonymous' as const } },
+    );
+    expect(anonymousResult.text).toContain('登录后');
+    await expect(memory.list({ userId: 'anonymous' })).resolves.toEqual([]);
+
+    const disabled = createServerContext();
+    const disabledResult = await createMemberHandler(disabled).handle(
+      'intent',
+      { content: '我常带娃来玩' },
+      disabled,
+      { identity: { userId: 'user-1', source: 'dev' as const } },
+    );
+    expect(disabledResult.text).toContain('暂不可用');
+  });
+
+  it('不把包含偏好短语的自然语言误存为按钮选择（未识别 → 放行 LLM，零写入）', async () => {
+    const { ctx, memory, reqCtx } = authenticatedContext();
+    const result = await createMemberHandler(ctx).handle(
+      'intent',
+      { content: '我还没决定是不是我常来买衣服' },
+      ctx,
+      reqCtx,
+    );
+
+    // 洋葱定律 1：未识别 = 失败 = 放行（原 12 字死文案分支改为 continueWith 续接）
+    expect(result.cards).toEqual([]);
+    expect(result.text).toBeUndefined();
+    expect(result.continueWith).toEqual({ content: '我还没决定是不是我常来买衣服' });
+    await expect(memory.list({ userId: 'user-1', scope: { mallId: 'mall-1' } })).resolves.toEqual([]);
+  });
+});

package/tests/samples.test.ts

@@ -0,0 +1,61 @@
+/**
+ * samples 双断言（迁移自 mall dev-gallery 会员卡面画廊守卫）：
+ * - 全样本 dataSchema.safeParse 通过 + findSampleShapeViolations 无越界键（样本即契约）；
+ * - 守卫转移：卡清单收口（会员域对话样本只覆盖卡面一张——开卡入会三卡随登录承接入会
+ *   退场、资料卡与积分流水卡由首页服务卡承接，再往回加卡得先改这里）；
+ * - 画廊时期 autoClick 禁用守卫由 CardSample 类型天然满足（无该字段，编译期不可能携带
+ *   主动交互——样本只描述状态，不描述动作）。
+ */
+import { describe, expect, it } from 'vitest';
+import { findSampleShapeViolations } from '@tbox.cn/app-sdk/server';
+import meta from '../src/server/cards/member-card-summary/meta';
+
+describe('member samples 双断言（样本即契约）', () => {
+  it('member-card-summary: 全样本过 schema + shape 无越界', () => {
+    expect(meta.samples?.length ?? 0).toBeGreaterThan(0);
+    expect(findSampleShapeViolations(meta).violations).toEqual([]);
+    for (const s of meta.samples ?? []) {
+      expect(
+        meta.dataSchema.safeParse(s.data).success,
+        s.label,
+      ).toBe(true);
+    }
+  });
+
+  it('卡清单收口：11 格且全部属于 member-card-summary（卡面唯一）', () => {
+    expect(meta.cardType).toBe('member-card-summary');
+    expect(meta.samples).toHaveLength(11);
+  });
+
+  it('四档 variant 全覆盖 + 高低档权益数量差异照实（14/15）', () => {
+    const variants = new Set(
+      (meta.samples ?? [])
+        .map((s) => (s.data as { presentation?: { variant?: string } }).presentation?.variant),
+    );
+    expect(variants.has('blue')).toBe(true);
+    expect(variants.has('silver')).toBe(true);
+    expect(variants.has('gold')).toBe(true);
+    expect(variants.has('black')).toBe(true);
+
+    const counts = (meta.samples ?? [])
+      .map((s) => (s.data as { benefits?: unknown[] }).benefits?.length)
+      .filter((n): n is number => n !== undefined);
+    expect(Math.max(...counts)).toBe(15);
+    expect(Math.min(...counts.filter((n) => n >= 10))).toBe(14);
+  });
+
+  it('素材中立：权益图标全部为内联 SVG 分色占位或 example.com 占位', () => {
+    const serialized = JSON.stringify(meta.samples ?? []);
+    expect(serialized).toContain('data:image/svg+xml');
+    // 结构性断言：每个 iconUrl 要么内联 SVG，要么 example.com 占位（外链失败分支）——不允许其他外域
+    for (const s of meta.samples ?? []) {
+      for (const b of (s.data as { benefits?: { name?: string; iconUrl?: string }[] }).benefits ?? []) {
+        if (!b.iconUrl) continue;
+        expect(
+          b.iconUrl.startsWith('data:image/svg+xml') || b.iconUrl.startsWith('https://assets.example.com/'),
+          `${s.label}/${b.name}`,
+        ).toBe(true);
+      }
+    }
+  });
+});