@tokenbuddy/tb-admin 1.0.31 → 1.0.32

package/src/vendor-commands.ts

@@ -0,0 +1,65 @@
+import * as fs from "fs";
+import { RegistryVendorClient, SellerRegistryEntry } from "./vendor-client.js";
+
+/**
+ * vendor CLI helpers for the `bootstrap sellers` and
+ * `bootstrap release` subcommands. Step 5 of the registry redesign.
+ *
+ *  - `bootstrap sellers add --file <path>`: stage a single seller
+ *    for inclusion in the next release request submitted by this
+ *    vendor. The server validates the payload shape, persists it to
+ *    `seller_pending`, and returns a `pendingSeller` row.
+ *  - `bootstrap release submit --note <text> --staged <id>`: submit
+ *    a release request that includes one or more staged sellers.
+ *  - `bootstrap release list`: list the vendor's release requests.
+ *  - `bootstrap release show <id>`: show one release request.
+ *  - `bootstrap release force-publish <id>`: super-admin path; the
+ *    vendor token cannot force-publish itself (the platform owns
+ *    the scheduler loop in Step 7), but we keep the command here
+ *    so CI scripts have a single entry point.
+ */
+
+export interface StageSellerInput {
+  client: RegistryVendorClient;
+  file: string;
+}
+
+export async function stageSellerFromFile({ client, file }: StageSellerInput): Promise<{ pendingSeller: unknown }> {
+  const content = fs.readFileSync(file, "utf8");
+  const parsed = JSON.parse(content) as SellerRegistryEntry;
+  if (!parsed.id || typeof parsed.id !== "string") {
+    throw new Error(`seller id is required in ${file}`);
+  }
+  return client.stageSeller(parsed);
+}
+
+export interface SubmitReleaseInput {
+  client: RegistryVendorClient;
+  stagedSellerIds: string[];
+  note?: string;
+}
+
+export async function submitRelease({ client, stagedSellerIds, note }: SubmitReleaseInput): Promise<{ releaseRequest: unknown }> {
+  if (stagedSellerIds.length === 0) {
+    throw new Error("at least one --staged <seller-id> is required");
+  }
+  return client.submitRelease({ stagedSellerIds, note });
+}
+
+export function printReleaseRequestSummary(record: any): string {
+  if (!record) {
+    return "no release request";
+  }
+  const summary = record.payloadSummary || { count: 0, sellerIds: [] };
+  return [
+    `id:           #${record.id}`,
+    `status:       ${record.status}`,
+    `vendor:       ${record.vendorId}`,
+    `sellers:      ${summary.count} (${(summary.sellerIds || []).join(", ") || "—"})`,
+    `submittedAt:  ${record.submittedAt || "—"}`,
+    `decidedAt:    ${record.decidedAt || "—"}`,
+    `version:      ${record.publishedVersion !== null && record.publishedVersion !== undefined ? `v${record.publishedVersion}` : "—"}`,
+    record.note ? `note:         ${record.note}` : null,
+    record.errorMessage ? `error:        ${record.errorMessage}` : null
+  ].filter(Boolean).join("\n");
+}

package/tests/admin.test.ts

@@ -512,6 +512,14 @@ describe("Admin CLI Config Profile Management Tests", () => {
       const state = new AdminUiState({
         configManager: mgr,
         profile: "bootstrap",
+        // Step 13 v1.1: 双源. fixture seller tbs-sin-06 在 fly + registry
+        // 都有, dataSource=both, 走老 4-endpoint merge 路径.
+        flyApps: async () => [{
+          name: "tbs-sin-06",
+          status: "running",
+          owner: "vendor-a",
+          raw: {}
+        }],
         balanceFetch: async (url, init) => {
           expect(String(url)).toBe("https://openrouter.ai/api/v1/credits");
           expect((init?.headers as Record<string, string>)?.Authorization).toBe("Bearer fixture-live-key-27f9");
@@ -558,6 +566,14 @@ describe("Admin CLI Config Profile Management Tests", () => {
     const state = new AdminUiState({
       configManager: mgr,
       url: "https://bootstrap.example.test",
+      // Step 13 v1.1: 双源. fixture seller tbs-openrouter-ai-qecae 在 fly + registry
+      // 都有, dataSource=both, 走老 4-endpoint merge (用 Fly provider secret).
+      flyApps: async () => [{
+        name: "tbs-openrouter-ai-qecae",
+        status: "running",
+        owner: "vendor-a",
+        raw: {}
+      }],
       fetchJson: async (url, init) => {
         const pathName = new URL(url).pathname;
         if (pathName === "/registry/sellers") {
@@ -567,7 +583,10 @@ describe("Admin CLI Config Profile Management Tests", () => {
               id: "tbs-openrouter-ai-qecae",
               name: "tbs-openrouter-ai-qecae",
               app: "tbs-openrouter-ai-qecae",
-              url: "https://tbs-openrouter-ai-qecae.fly.dev",
+              // Step 13 v1.1: 双源下, 4 个老 endpoint 也用 entry.url. 测试
+              // 故意用 bootstrap URL, 这样 mock fetchJson 能 catch 全部 4 个
+              // fetch (manifest probe 仍走 entry.url, 404 时 fallback 走 4-endpoint).
+              url: "https://bootstrap.example.test",
               status: "active",
               region: "sin",
               modelsCount: 2,

package/tests/seller.test.ts

@@ -0,0 +1,307 @@
+/**
+ * Step 12 v1.1: tb-admin seller 子命令真实 CLI 测试.
+ *
+ * 原则: 不 mock. 全部跑真 `tb-admin` CLI (它内部调真 flyctl). 通过 --dry-run 模式
+ * 避免真改 fly 资源.
+ *
+ * 覆盖:
+ *   - ls/status/create/deploy/remove 5 op 都有 文本路径 + --json 路径
+ *   - --json 输出可被 JSON.parse
+ *   - 文本路径不破坏 1.0.31 行为 (跟 flyctl 原始 stdout 一致)
+ *   - dry-run 模式返回 commands 数组
+ *
+ * 依赖:
+ *   - 真 flyctl 在 PATH (本机已装 v0.4.53)
+ *   - tb-admin CLI 是 source-built 1:1 (跟 git checkout 一致), bin/tb-admin.js 可执行
+ *
+ * 失败模式:
+ *   - 没装 flyctl: 大部分 test skip (it.skip / describe.skip)
+ *   - 没 token: 1.0.31 行为不变, CLI 仍然跑 flyctl, 但 flyctl 鉴权失败的部分不影响 dry-run
+ */
+
+import { execFileSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { ConfigManager } from "../src/config.js";
+import { SellerCommandRunner, parseFlyListJson, parseFlyStatusJson } from "../src/seller.js";
+import { FlyProvider, type FlyProviderRuntime } from "../src/server-cmd.js";
+
+const TB_ADMIN_BIN = join(__dirname, "..", "bin", "tb-admin.js");
+const FLYCTL = "flyctl";
+
+function flyctlInstalled(): boolean {
+  try {
+    execFileSync(`which ${FLYCTL}`, { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function tbAdminBinInstalled(): boolean {
+  return existsSync(TB_ADMIN_BIN);
+}
+
+function runTbAdminReal(args: string[]): { ok: boolean; stdout: string; stderr: string } {
+  try {
+    const stdout = execFileSync("node", [TB_ADMIN_BIN, ...args], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"],
+      env: { ...process.env, NO_COLOR: "1" }
+    });
+    return { ok: true, stdout, stderr: "" };
+  } catch (err) {
+    const e = err as { stdout?: Buffer | string; stderr?: Buffer | string };
+    return {
+      ok: false,
+      stdout: typeof e.stdout === "string" ? e.stdout : e.stdout ? e.stdout.toString() : "",
+      stderr: typeof e.stderr === "string" ? e.stderr : e.stderr ? e.stderr.toString() : ""
+    };
+  }
+}
+
+describe("seller parser helpers (pure, no IO)", () => {
+  test("parseFlyListJson normalizes flyctl apps list --json", () => {
+    const jsonText = JSON.stringify([
+      { Name: "tbs-aaa", Status: "deployed", Owner: "personal", Version: 7, Deployed: true },
+      { Name: "tbs-bbb", Status: "suspended", Owner: "personal", Version: 7, Deployed: false }
+    ]);
+    const apps = parseFlyListJson(jsonText);
+    expect(apps).toHaveLength(2);
+    expect(apps[0].name).toBe("tbs-aaa");
+    expect(apps[0].status).toBe("deployed");
+    expect(apps[1].status).toBe("suspended");
+    expect(apps[0].raw).toMatchObject({ Name: "tbs-aaa" });
+  });
+
+  test("parseFlyListJson throws on invalid JSON", () => {
+    expect(() => parseFlyListJson("not-json")).toThrow(/invalid JSON/);
+  });
+
+  test("parseFlyListJson throws on non-array", () => {
+    expect(() => parseFlyListJson('{"foo":"bar"}')).toThrow(/did not return an array/);
+  });
+
+  test("parseFlyStatusJson parses single app status", () => {
+    const jsonText = JSON.stringify({ Name: "tbs-aaa", Status: "deployed", Deployed: true });
+    const status = parseFlyStatusJson(jsonText);
+    expect(status).toMatchObject({ Name: "tbs-aaa" });
+  });
+
+  test("parseFlyStatusJson throws on array input", () => {
+    expect(() => parseFlyStatusJson("[]")).toThrow(/did not return an object/);
+  });
+});
+
+describe("tb-admin seller CLI real spawn (no mock)", () => {
+  // 没用 beforeAll: 一些 jest sandbox 下 beforeAll 抛错会让整个 describe fail.
+  // 每个 test 进来时现场探测.
+  const itRequires = (name: string, fn: () => void | Promise<void>) => {
+    test(name, async () => {
+      const hasFlyctl = flyctlInstalled();
+      const hasBin = tbAdminBinInstalled();
+      if (!hasFlyctl || !hasBin) {
+        const reason = !hasFlyctl ? "flyctl not in PATH" : "tb-admin bin not built";
+        console.warn(`[skipped] ${name}: ${reason}`);
+        return;
+      }
+      await fn();
+    });
+  };
+
+  itRequires("ls text path returns flyctl human-readable table (1.0.31 behavior preserved)", () => {
+    const result = runTbAdminReal(["seller", "ls"]);
+    expect(result.ok).toBe(true);
+    // flyctl apps list 文本输出有 "│" 列分隔符
+    expect(result.stdout).toMatch(/│/);
+    expect(result.stdout).toMatch(/STATUS/);
+  });
+
+  itRequires("ls --json returns valid JSON object with ok, provider, action, count, apps[]", () => {
+    const result = runTbAdminReal(["seller", "ls", "--json"]);
+    expect(result.ok).toBe(true);
+    const parsed = JSON.parse(result.stdout);
+    expect(parsed).toMatchObject({ ok: true, provider: "fly", action: "list" });
+    expect(typeof parsed.count).toBe("number");
+    expect(Array.isArray(parsed.apps)).toBe(true);
+    expect(parsed.apps.length).toBe(parsed.count);
+    if (parsed.apps.length > 0) {
+      expect(parsed.apps[0]).toHaveProperty("name");
+      expect(parsed.apps[0]).toHaveProperty("status");
+      expect(parsed.apps[0]).toHaveProperty("raw");
+    }
+  });
+
+  itRequires("status --json returns valid JSON object with ok, provider, action, app, status{}", () => {
+    // 用 live 真实存在的 tbs-86d81e app (1.0.31 live)
+    const result = runTbAdminReal(["seller", "status", "tbs-86d81e", "--json"]);
+    expect(result.ok).toBe(true);
+    const parsed = JSON.parse(result.stdout);
+    expect(parsed).toMatchObject({
+      ok: true,
+      provider: "fly",
+      action: "status",
+      app: "tbs-86d81e"
+    });
+    expect(parsed.status).toBeDefined();
+    expect(typeof parsed.status).toBe("object");
+  });
+
+  itRequires("create --json --dry-run returns commands array, no real flyctl effect", () => {
+    const result = runTbAdminReal([
+      "seller", "create", "test-dry-run-app",
+      "--image", "registry.fly.io/tb-seller:1.0.31",
+      "--fly-config", "deploy/fly.io/fly.tb-seller.toml",
+      "--operator-secret", "test-secret",
+      "--region", "sin",
+      "--dry-run", "--json"
+    ]);
+    expect(result.ok).toBe(true);
+    const parsed = JSON.parse(result.stdout);
+    expect(parsed).toMatchObject({
+      ok: true,
+      provider: "fly",
+      action: "create",
+      dryRun: true
+    });
+    expect(Array.isArray(parsed.commands)).toBe(true);
+    expect(parsed.commands.length).toBeGreaterThan(0);
+    // 包含 fly deploy + fly machine update 命令
+    const allCommands = parsed.commands.join(" ");
+    expect(allCommands).toMatch(/tb-seller/);
+  });
+
+  itRequires("deploy --json --dry-run returns single machine update command", () => {
+    const result = runTbAdminReal([
+      "seller", "deploy", "tbs-86d81e",
+      "--image", "registry.fly.io/tb-seller:1.0.31",
+      "--dry-run", "--json"
+    ]);
+    expect(result.ok).toBe(true);
+    const parsed = JSON.parse(result.stdout);
+    expect(parsed).toMatchObject({
+      ok: true,
+      provider: "fly",
+      action: "deploy",
+      app: "tbs-86d81e",
+      dryRun: true
+    });
+    expect(parsed.commands[0]).toContain("machine update");
+    expect(parsed.commands[0]).toContain("tbs-86d81e");
+  });
+
+  itRequires("remove --json --dry-run returns apps destroy command", () => {
+    const result = runTbAdminReal([
+      "seller", "remove", "tbs-86d81e",
+      "--dry-run", "--json"
+    ]);
+    expect(result.ok).toBe(true);
+    const parsed = JSON.parse(result.stdout);
+    expect(parsed).toMatchObject({
+      ok: true,
+      provider: "fly",
+      action: "remove",
+      dryRun: true
+    });
+    expect(parsed.commands[0]).toContain("apps destroy tbs-86d81e");
+  });
+});
+
+describe("SellerCommandRunner integration with real ConfigManager (no mock)", () => {
+  // 验证 Runner 行为通过真 ConfigManager 拉真 config (有 token, 装好 flyctl 的环境)
+  function tryRealConfigManager(): ConfigManager | null {
+    const home = process.env.HOME || "";
+    const adminToml = join(home, ".config", "tokenbuddy", "admin.toml");
+    if (!existsSync(adminToml)) {
+      return null;
+    }
+    return new ConfigManager(adminToml);
+  }
+
+  test("ls(false) returns flyctl stdout string via real FlyProvider (no mock)", () => {
+    const mgr = tryRealConfigManager();
+    if (!mgr) {
+      // 环境无 admin profile, 用空 ConfigManager 走 fallback
+      const tmp = new ConfigManager("/tmp/tb-admin-no-config-" + Date.now() + ".toml");
+      const runner = new SellerCommandRunner(tmp);
+      // 没有 provider config -> 走 FlyProvider -> flyctl not installed (test env) -> throw
+      try {
+        runner.ls(false);
+        throw new Error("expected flyctl-not-installed error");
+      } catch (err) {
+        expect((err as Error).message).toMatch(/flyctl|not installed|seller_providers/);
+      }
+      return;
+    }
+    const runner = new SellerCommandRunner(mgr);
+    const out = runner.ls(false);
+    expect(typeof out).toBe("string");
+    expect(out).toMatch(/│/);
+  });
+});
+
+describe("FlyProvider dry-run paths (no mock, real flyctl required)", () => {
+  // 1.0.31 行为 1:1 验证: FlyProvider 已有方法的 dry-run 模式不调 flyctl 真子命令,
+  // 只输出 plan. 这是 FlyProvider 的核心契约.
+
+  function makeRealProvider(): FlyProvider | null {
+    const home = process.env.HOME || "";
+    const adminToml = join(home, ".config", "tokenbuddy", "admin.toml");
+    if (!existsSync(adminToml)) {
+      return null;
+    }
+    const mgr = new ConfigManager(adminToml);
+    const cfg = mgr.getSellerProvider("fly");
+    if (!cfg) {
+      return null;
+    }
+    // 1.0.31 FlyProvider 接口 1:1 行为验证, runtime 走真值
+    const runtime: Partial<FlyProviderRuntime> = {};
+    return new FlyProvider(cfg, runtime);
+  }
+
+  test("createSeller dry-run returns plan string without calling flyctl", () => {
+    const provider = makeRealProvider();
+    if (!provider) {
+      // 没 admin profile -> skip
+      return;
+    }
+    const plan = provider.createSeller({
+      name: "alpha",
+      region: "sin",
+      image: "registry.fly.io/tb-seller:1.0.31",
+      operatorSecret: "secret",
+      flyConfig: "deploy/fly.io/fly.tb-seller.toml",
+      volumeName: "tb_seller_data",
+      volumeSizeGb: 1,
+      dryRun: true
+    });
+    expect(plan).toMatch(/DRY-RUN/);
+    expect(plan).toContain("tb-seller-alpha");
+    expect(plan).toContain("registry.fly.io/tb-seller:1.0.31");
+  });
+
+  test("deploySeller dry-run returns plan string without calling flyctl", () => {
+    const provider = makeRealProvider();
+    if (!provider) {
+      return;
+    }
+    const plan = provider.deploySeller({
+      app: "tbs-86d81e",
+      image: "registry.fly.io/tb-seller:1.0.31",
+      dryRun: true
+    });
+    expect(plan).toMatch(/DRY-RUN/);
+    expect(plan).toContain("tbs-86d81e");
+  });
+
+  test("removeSeller dry-run returns plan string without calling flyctl", () => {
+    const provider = makeRealProvider();
+    if (!provider) {
+      return;
+    }
+    const plan = provider.removeSeller("tbs-86d81e", true);
+    expect(plan).toMatch(/DRY-RUN/);
+    expect(plan).toContain("tbs-86d81e");
+  });
+});

package/tests/ui-state-fleet.test.ts

@@ -0,0 +1,257 @@
+/**
+ * Step 13 v1.1: admin web seller list 双源 (fly + registry) 数据流测试.
+ *
+ * 原则: 不 mock flyctl. 测的是 AdminUiState 内部数据流, 用注入的
+ *   fetchJson (fake HTTP server) + flyApps (closure) 替代真 IO.
+ *
+ * 覆盖 (跟 docs/processes/seller-fleet-data-sources.md 一致):
+ *   1. fly + registry both → 行 dataSource="both", 绿点 = /manifest 200
+ *   2. fly only → 行 dataSource="fly", 灰点 (无 instance url 拉 manifest 失败),
+ *      行带 "未发布" 提示
+ *   3. registry only → 行 dataSource="registry", **整行标红 (registryAlert=true)**,
+ *      行带 "未部署" 提示 + 立即下线按钮 (我们这里只验字段, UI 验由 ui-static 验)
+ *   4. fly + registry both, 但 /manifest 失败 → 灰/红点, 仍 dataSource="both"
+ *
+ * 隔离外部依赖:
+ *   - node:http fake server 模拟 registry (/registry/sellers)
+ *   - node:http fake server 模拟 seller instance (/manifest)
+ *   - flyApps 通过 AdminUiStateOptions.flyApps 注入 closure
+ *
+ * 失败模式:
+ *   - 如果 4 个 case 任何一个 dataSource 错 / nodeStatus 错 / alert 漏, 立即 fail
+ *   - 永不调真 flyctl
+ */
+
+import { createServer, type Server } from "node:http";
+import { AddressInfo } from "node:net";
+import { mkdtempSync, writeFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { ConfigManager } from "../src/config.js";
+import { AdminUiState } from "../src/ui-state.js";
+import type { SellerAppJson } from "../src/seller.js";
+
+interface FakeManifestResponse {
+  status: number;
+  body?: unknown;
+}
+
+interface FakeServerHandle {
+  url: string;
+  setManifest: (sellerId: string, resp: FakeManifestResponse) => void;
+  setManifestPath: (path: string, resp: FakeManifestResponse) => void;
+  setRegistry: (resp: { sellers: any[]; version: number }) => void;
+  close: () => Promise<void>;
+}
+
+function startFakeRegistry(): Promise<FakeServerHandle> {
+  let registryDoc: { sellers: any[]; version: number } = { sellers: [], version: 0 };
+  const manifests = new Map<string, FakeManifestResponse>();
+
+  return new Promise((resolve) => {
+    const server = createServer((req, res) => {
+      const url = new URL(req.url || "/", "http://localhost");
+      if (url.pathname === "/registry/sellers") {
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(registryDoc));
+        return;
+      }
+      // 1) 按 path 查 (setManifestPath 注册的)
+      if (manifests.has(url.pathname)) {
+        const resp = manifests.get(url.pathname)!;
+        res.writeHead(resp.status, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(resp.body || {}));
+        return;
+      }
+      // 2) 按 /manifest/{id} 模式查 (setManifest 注册的)
+      const match = url.pathname.match(/^\/manifest\/([^/]+)$/);
+      if (match) {
+        const id = decodeURIComponent(match[1]);
+        const resp = manifests.get(id) || { status: 404, body: { error: "not found" } };
+        res.writeHead(resp.status, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(resp.body || {}));
+        return;
+      }
+      res.writeHead(404);
+      res.end("not found");
+    });
+    server.listen(0, "127.0.0.1", () => {
+      const port = (server.address() as AddressInfo).port;
+      const handle: FakeServerHandle = {
+        url: `http://127.0.0.1:${port}`,
+        setManifest: (id, resp) => {
+          manifests.set(id, resp);
+        },
+        setManifestPath: (path, resp) => {
+          manifests.set(path, resp);
+        },
+        setRegistry: (doc) => {
+          registryDoc = doc;
+        },
+        close: () => new Promise<void>((r) => server.close(() => r()))
+      };
+      resolve(handle);
+    });
+  });
+}
+
+let tmpDir: string;
+let tmpConfigPath: string;
+
+function makeState(
+  registryUrl: string,
+  flyApps: Omit<SellerAppJson, "raw">[]
+): AdminUiState {
+  if (!tmpDir) {
+    tmpDir = mkdtempSync(join(tmpdir(), "ui-fleet-test-"));
+    tmpConfigPath = join(tmpDir, "admin.toml");
+  }
+  writeFileSync(
+    tmpConfigPath,
+    `[profiles.default]
+url = "${registryUrl}"
+token = "fake-vendor-token"
+`,
+    "utf8"
+  );
+  const configManager = new ConfigManager(tmpConfigPath);
+  return new AdminUiState({
+    configManager,
+    profile: "default",
+    url: registryUrl,
+    token: "fake-vendor-token",
+    flyApps: async () => flyApps.map((a) => ({ ...a, raw: {} })),
+    fetchJson: (async (target: string, init?: RequestInit) => {
+      const res = await fetch(target, init);
+      return await res.json();
+    }) as any
+  });
+}
+
+describe("AdminUiState 双源 seller list (v1.1 spec)", () => {
+  let fake: FakeServerHandle;
+
+  beforeEach(async () => {
+    fake = await startFakeRegistry();
+  });
+
+  afterEach(async () => {
+    await fake.close();
+  });
+
+  afterAll(() => {
+    if (tmpDir) {
+      rmSync(tmpDir, { recursive: true, force: true });
+    }
+  });
+
+  test("case 1: fly + registry both → dataSource=both, 绿点 = /manifest 200", async () => {
+    fake.setRegistry({
+      version: 7,
+      sellers: [
+        {
+          id: "alpha",
+          name: "Alpha Seller",
+          app: "tb-seller-alpha",
+          // entry.url 是 instance 自己的 url; probeManifest 会拼 + "/manifest"
+          url: `${fake.url}/alpha-base`,
+          status: "active",
+          supportedProtocols: ["chat_completions"],
+          paymentMethods: ["clawtip"],
+          models: ["gpt-5.4"]
+        }
+      ]
+    });
+    // entry.url = ".../alpha-base", probe target = ".../alpha-base/manifest"
+    fake.setManifestPath("/alpha-base/manifest", { status: 200, body: { ok: true } });
+    const state = makeState(fake.url, [
+      { name: "tb-seller-alpha", status: "running", owner: "vendor-a" }
+    ]);
+
+    const rows = await state.sellers();
+    expect(rows).toHaveLength(1);
+    expect(rows[0].dataSource).toBe("both");
+    expect(rows[0].registryAlert).toBeFalsy();
+    // 绿点: /manifest 200 → nodeStatus=active (manifest ok 映射 active)
+    expect(rows[0].nodeStatus).toBe("active");
+  });
+
+  test("case 2: fly only → dataSource=fly, 灰点, registryAlert=undefined", async () => {
+    fake.setRegistry({ version: 7, sellers: [] });
+    const state = makeState(fake.url, [
+      { name: "tb-seller-flyonly", status: "running", owner: "vendor-a" }
+    ]);
+
+    const rows = await state.sellers();
+    expect(rows).toHaveLength(1);
+    expect(rows[0].dataSource).toBe("fly");
+    expect(rows[0].nodeStatus).toBe("unknown");
+    expect(rows[0].registryAlert).toBeFalsy();
+    expect(rows[0].publishHint).toContain("未发布");
+  });
+
+  test("case 3: registry only → dataSource=registry, 整行标红, 立即下线提示", async () => {
+    fake.setRegistry({
+      version: 7,
+      sellers: [
+        {
+          id: "ghost",
+          name: "Ghost Seller",
+          app: "tb-seller-ghost",
+          url: "https://tbs-ghost.fly.dev",
+          status: "active",
+          supportedProtocols: ["chat_completions"],
+          paymentMethods: ["clawtip"],
+          models: ["gpt-5.4"]
+        }
+      ]
+    });
+    const state = makeState(fake.url, [
+      // 注意: fly list 完全没有 tb-seller-ghost
+      { name: "tb-seller-other", status: "running", owner: "vendor-a" }
+    ]);
+
+    const rows = await state.sellers();
+    expect(rows).toHaveLength(2); // ghost + other
+    const ghost = rows.find((r) => r.id === "ghost");
+    expect(ghost).toBeDefined();
+    expect(ghost!.dataSource).toBe("registry");
+    expect(ghost!.registryAlert).toBe(true);
+    expect(ghost!.alertReason).toContain("registry 收录了但 fly app 失踪");
+    expect(ghost!.removeHint).toContain("立即下线 (registry-only)");
+
+    const other = rows.find((r) => r.app === "tb-seller-other");
+    expect(other).toBeDefined();
+    expect(other!.dataSource).toBe("fly");
+    expect(other!.registryAlert).toBeFalsy();
+  });
+
+  test("case 4: both, /manifest 失败 → 灰/红点, dataSource 仍 = both", async () => {
+    fake.setRegistry({
+      version: 7,
+      sellers: [
+        {
+          id: "down",
+          name: "Down Seller",
+          app: "tb-seller-down",
+          url: `${fake.url}/down-base`,
+          status: "active",
+          supportedProtocols: ["chat_completions"],
+          paymentMethods: ["clawtip"],
+          models: ["gpt-5.4"]
+        }
+      ]
+    });
+    fake.setManifestPath("/down-base/manifest", { status: 502, body: { error: "upstream down" } });
+    const state = makeState(fake.url, [
+      { name: "tb-seller-down", status: "running", owner: "vendor-a" }
+    ]);
+
+    const rows = await state.sellers();
+    expect(rows).toHaveLength(1);
+    expect(rows[0].dataSource).toBe("both");
+    expect(rows[0].registryAlert).toBeFalsy();
+    // /manifest 失败 → nodeStatus=unknown (不是 active)
+    expect(rows[0].nodeStatus).toBe("unknown");
+  });
+});