tt-help-cli-ycl 1.4.183 → 1.4.185

package/scripts/test-login-pool-acquire-order.mjs

@@ -1,21 +1,28 @@
 /**
- * 登录池批量改造 smoke — 取号排序 + reason 聚合 + 清空日志（2026-10-30 清单 B1/B2/B3/C1/C2 服务端）
+ * 登录池取号排序 + 换因计数 + 连败计数 + 清空日志 单测
+ * （2026-11-04 对齐 7be35e8 账号中心简化 + 1cda80f 连败计数改算法）
  *
  * 覆盖:
  *   B2 取号排序五条: 非同类优先生效 / 全同类仍发号 / 全冷却退全池 / 从未用过最前 / lastAppName 空值中性
  *   B1/B3 lastAppName 落账号本体（release 后保留）+ acquired history detail 带 appName
- *   C2 reason 聚合: 显式上报计数、未知 code 原样存、不带 reason 不计（无「未上报」桶）
- *   C1 清空日志: history 清成一条留痕 + useCount/switchStats 清零 + 不动 lastUsedAt/lastAppName
+ *   prev prevAppName 前一任程序记录
+ *   C2 换号原因: lastSwitchReason/switchStreak（同因连击 +1 / 换因重置 1 / 未知 code 原样存 / 不带 reason 不动）
+ *   E   连败计数 errStreak: 挂在被换掉的旧号（banned/captcha/network +1；scheduled 清零；中性/无因不动）
+ *   C1 清空日志: history 清成一条留痕 + useCount/switchStats/换因计数/errStreak 清零 + 不动 lastUsedAt/lastAppName
  *
- * 跑法: HOME=$(mktemp -d) node scripts/test-login-pool-acquire-order.mjs
+ * 跑法: node scripts/test-login-pool-acquire-order.mjs
+ *   （自建临时 HOME 并在 import 前覆盖环境变量——绝不读写真实 ~/.tt-help-watchdog-logins.json）
  */
 import assert from "assert";
+import { mkdtempSync } from "fs";
+import { tmpdir } from "os";
+import { join } from "path";
 
-const HOME = process.env.HOME;
-if (!HOME || HOME === "/") {
-  console.error("请用隔离 HOME 运行: HOME=$(mktemp -d) node scripts/test-login-pool-acquire-order.mjs");
-  process.exit(1);
-}
+// ── 测试基建：临时 HOME 隔离 ──
+// login-pool.js 的 POOL_FILE 在模块加载期由 os.homedir() 计算（POSIX 下 homedir() 实时读
+// process.env.HOME），故必须在动态 import 之前覆盖 HOME/USERPROFILE；生产代码零改动即可隔离。
+process.env.HOME = mkdtempSync(join(tmpdir(), "loginpool-order-test-"));
+process.env.USERPROFILE = process.env.HOME; // Windows 语义兜底
 
 const {
   getLoginPoolView,
@@ -117,7 +124,7 @@ console.log("\n[B2-4] 全冷却退全池兜底");
   acquireAccount({ userId: "O4b", appName: "explore" });
   releaseAccount({ id: findAcc("ordE1").id });
   releaseAccount({ id: findAcc("ordF1").id });
-  // 全部压进 30min 冷却窗内
+  // 全部压进 30min 休息窗内
   backdate("ordE1", 5 * 60 * 1000);
   backdate("ordF1", 8 * 60 * 1000);
   const got = acquireAccount({ userId: "O4c", appName: "explore" });
@@ -129,13 +136,16 @@ console.log("\n[B2-4] 全冷却退全池兜底");
 // ── B2-5: lastAppName 空值中性 ──
 console.log("\n[B2-5] lastAppName 空值按非同类 / 请求无 appName 时键中性化");
 {
-  // 先加 ordExploreApp（创建序在前 → 首个 acquire 取到它并盖上 explore）
+  // 两个号都先 acquire+release（都盖 lastUsedAt → K1 打平），再清空其一的 lastAppName，
+  // 隔离出纯粹的「lastAppName 空 = 按非同类」K2 分支
   add("ordExploreApp");
   add("ordEmptyApp");
-  acquireAccount({ userId: "O5", appName: "explore" });
+  acquireAccount({ userId: "O5", appName: "explore" }); // ordExploreApp（创建序在前）
+  acquireAccount({ userId: "O5a", appName: "search" }); // ordEmptyApp（唯一剩余 pool）
   releaseAccount({ id: findAcc("ordExploreApp").id });
+  releaseAccount({ id: findAcc("ordEmptyApp").id });
   for (const a of _accountsInternal()) {
-    if (a.username === "ordEmptyApp") a.lastAppName = null; // 模拟改造前的存量账号（无 lastAppName）
+    if (a.username === "ordEmptyApp") a.lastAppName = null; // 模拟存量账号（无 lastAppName）
   }
   backdate("ordEmptyApp", 32 * 60 * 1000); // eligible、lastAppName 空
   backdate("ordExploreApp", 31 * 60 * 1000); // eligible、同类 explore
@@ -180,7 +190,6 @@ console.log("\n[prev] 前一任程序记录（页面「上次使用」列数据
   const got = acquireAccount({ userId: "P2", appName: "search" });
   check("第二次取号后 lastAppName=当前程序", got.lastAppName === "search", `got ${got.lastAppName}`);
   check("prevAppName=前一任（explore→search 切换可追溯）", got.prevAppName === "explore", `got ${got.prevAppName}`);
-  const first = getLoginPoolView().accounts.find((x) => x.username === "ordBatchA");
   // 从未换过程序的账号 prevAppName 应为 null（首次取号无前一任）
   add("ordPrevFirst");
   const g2 = acquireAccount({ userId: "P3", appName: "explore" });
@@ -188,45 +197,99 @@ console.log("\n[prev] 前一任程序记录（页面「上次使用」列数据
   retireAll();
 }
 
-// ── C2: reason 聚合 ──
-console.log("\n[C2] switchStats 聚合：显式计数 / 未知 code 原样存 / 不带不计");
+// ── C2: 换号原因（lastSwitchReason/switchStreak，2026-11-03 替代 switchStats 终身累加） ──
+console.log("\n[C2] 换因计数：最近原因+连续次数（同因连击+1 / 换因重置1 / 未知code原样存 / 不带不动）");
 {
   add("ordReason1");
   let got = acquireAccount({ userId: "O7", appName: "explore", reason: "banned" });
-  check("显式上报 banned 计数 1", got.switchStats && got.switchStats.banned === 1, JSON.stringify(got.switchStats));
+  check("显式上报 banned → lastSwitchReason=banned ×1",
+    got.lastSwitchReason === "banned" && got.switchStreak === 1,
+    JSON.stringify({ r: got.lastSwitchReason, s: got.switchStreak }));
   const hist = got.history.find((h) => h.event === "acquired");
   check("acquired history detail 带原因", hist && hist.detail.includes("原因 banned"), JSON.stringify(hist && hist.detail));
 
   releaseAccount({ id: got.id });
   backdate("ordReason1", 31 * 60 * 1000);
   got = acquireAccount({ userId: "O7b", appName: "explore", reason: "banned" });
-  check("同账号再上报 banned 累计为 2", got.switchStats.banned === 2, JSON.stringify(got.switchStats));
+  check("同因连击 +1（banned ×2）", got.lastSwitchReason === "banned" && got.switchStreak === 2,
+    JSON.stringify({ r: got.lastSwitchReason, s: got.switchStreak }));
 
   releaseAccount({ id: got.id });
   backdate("ordReason1", 31 * 60 * 1000);
   got = acquireAccount({ userId: "O7c", appName: "explore", reason: "weird_reason" });
-  check("未知 code 原样存不拒绝", got.switchStats.weird_reason === 1, JSON.stringify(got.switchStats));
+  check("换因重置为 1，未知 code 原样存不拒绝",
+    got.lastSwitchReason === "weird_reason" && got.switchStreak === 1,
+    JSON.stringify({ r: got.lastSwitchReason, s: got.switchStreak }));
+
+  releaseAccount({ id: got.id });
+  backdate("ordReason1", 31 * 60 * 1000);
+  got = acquireAccount({ userId: "O7d", appName: "explore" }); // 不带 reason
+  check("不带 reason 不计（保留上次值，无「未上报」桶）",
+    got.lastSwitchReason === "weird_reason" && got.switchStreak === 1,
+    JSON.stringify({ r: got.lastSwitchReason, s: got.switchStreak }));
+  retireAll();
+}
 
-  add("ordNoReason");
-  got = acquireAccount({ userId: "O7d", appName: "explore" });
-  const noBucket = !got.switchStats || Object.keys(got.switchStats).length === 0;
-  check("不带 reason 不计数（无「未上报」桶）", noBucket, JSON.stringify(got.switchStats));
+// ── E: 连败计数 errStreak（1cda80f：挂在被换掉的旧号上，按换号原因码分类） ──
+console.log("\n[E] errStreak 连败计数：错误类+1 / scheduled 清零 / 中性与无因不动");
+{
+  add("ordErrP");
+  let g = acquireAccount({ userId: "E1", appName: "explore" });
+  check("前置：E1 持 ordErrP", g.username === "ordErrP", `取到 ${g.username}`);
+  add("ordErrA");
+  g = acquireAccount({ userId: "E1", appName: "explore", reason: "banned" }); // 唯一 pool=ordErrA
+  check("换号取到新号 ordErrA", g.username === "ordErrA", `取到 ${g.username}`);
+  check("banned 换号：旧号 ordErrP errStreak=+1", findAcc("ordErrP").errStreak === 1, `got ${findAcc("ordErrP").errStreak}`);
+  check("新号不背旧账（ordErrA errStreak=0）", (findAcc("ordErrA").errStreak || 0) === 0);
+  check("旧号释放历史附原因码", (findAcc("ordErrP").history || []).some((h) => h.event === "released" && h.detail.includes("banned")));
+
+  // 同号连败：ordErrP 回到 E1 手上再被换掉一次 → 1→2（连续非累计基数=每次释放事件各计）
+  backdate("ordErrP", 31 * 60 * 1000);
+  g = acquireAccount({ userId: "E1", appName: "explore" }); // 唯一 eligible pool=ordErrP；ordErrA 无因中性释放
+  check("E1 换回 ordErrP", g.username === "ordErrP", `取到 ${g.username}`);
+  check("无 reason 释放 ordErrA：errStreak 中性不动", (findAcc("ordErrA").errStreak || 0) === 0);
+  add("ordErrB");
+  g = acquireAccount({ userId: "E1", appName: "explore", reason: "banned" }); // 旧号=ordErrP
+  check("ordErrP 连败 +1 → 2（同因连击累加）", findAcc("ordErrP").errStreak === 2, `got ${findAcc("ordErrP").errStreak}`);
+
+  // scheduled=干满周期健康证明 → 清零
+  backdate("ordErrP", 31 * 60 * 1000);
+  g = acquireAccount({ userId: "E1", appName: "explore" }); // 再持 P；ordErrB 无因中性释放
+  add("ordErrC");
+  g = acquireAccount({ userId: "E1", appName: "explore", reason: "scheduled" }); // 旧号=ordErrP
+  check("scheduled 换号：ordErrP errStreak 清零", findAcc("ordErrP").errStreak === 0, `got ${findAcc("ordErrP").errStreak}`);
+
+  // 中性原因（inject_fail）不动
+  backdate("ordErrP", 31 * 60 * 1000);
+  g = acquireAccount({ userId: "E1", appName: "explore" }); // 再持 P；ordErrC 无因中性释放
+  add("ordErrD");
+  g = acquireAccount({ userId: "E1", appName: "explore", reason: "inject_fail" }); // 旧号=ordErrP
+  check("inject_fail 中性：errStreak 保持 0", findAcc("ordErrP").errStreak === 0, `got ${findAcc("ordErrP").errStreak}`);
   retireAll();
 }
 
 // ── C1: 清空日志 ──
-console.log("\n[C1] 清空日志：留痕一条 + useCount/switchStats 清零 + 不动休息窗/最近程序");
+console.log("\n[C1] 清空日志：留痕一条 + useCount/switchStats/换因计数/errStreak 清零 + 不动休息窗/最近程序");
 {
   add("ordClear");
   let got = acquireAccount({ userId: "O8", appName: "explore", reason: "banned" });
   assert(got.useCount === 1);
-  const lastUsedBefore = got.lastUsedAt;
+  // 注入连败基数与遗留 switchStats，验证清空归零
+  for (const a of _accountsInternal()) {
+    if (a.username === "ordClear") { a.errStreak = 3; a.switchStats = { legacy: 9 }; }
+  }
   releaseAccount({ id: got.id });
+  // 基线在 release 之后读取（release 会重盖 lastUsedAt，拿 acquire 时刻的值比较会跨毫秒必挂——
+  // 本断言语义是「清日志不改 lastUsedAt」，比较对象应是 pre-clear vs post-clear）
+  const lastUsedBefore = findAcc("ordClear").lastUsedAt;
   const cleared = clearAccountHistory({ id: got.id, by: "page" });
   check("history 清成一条留痕", cleared.history.length === 1, `len=${cleared.history.length}`);
   check("留痕含来源 page", cleared.history[0].detail.includes("page"), JSON.stringify(cleared.history[0]));
   check("useCount 归零", cleared.useCount === 0);
-  check("switchStats 清空", !cleared.switchStats || Object.keys(cleared.switchStats).length === 0);
+  check("switchStats 清空（遗留字段一并清）", !cleared.switchStats || Object.keys(cleared.switchStats).length === 0);
+  check("lastSwitchReason 清空 + switchStreak 归零", cleared.lastSwitchReason === null && cleared.switchStreak === 0,
+    JSON.stringify({ r: cleared.lastSwitchReason, s: cleared.switchStreak }));
+  check("errStreak 归零", (cleared.errStreak || 0) === 0, `got ${cleared.errStreak}`);
   check("不动 lastUsedAt（休息窗保留）", cleared.lastUsedAt === lastUsedBefore,
     `before=${lastUsedBefore} after=${cleared.lastUsedAt}`);
   check("不动 lastAppName", cleared.lastAppName === "explore");
@@ -248,6 +311,7 @@ console.log("\n[批量清空] clearAllAccountHistory 一键全清");
   const snap = {};
   for (const a of _accountsInternal()) {
     if (a.username === "ordBatchA") snap.A = { lastUsedAt: a.lastUsedAt, lastAppName: a.lastAppName };
+    if (a.username === "ordBatchB") a.errStreak = 2; // 注入连败基数，验证批量清零
   }
   const r = clearAllAccountHistory({ by: "page" });
   check("返回清空数量（含历史遗留账号）", r.cleared >= 2, `cleared=${r.cleared}`);
@@ -256,6 +320,8 @@ console.log("\n[批量清空] clearAllAccountHistory 一键全清");
     check(`${u}: history 清成一条批量留痕`, a.history.length === 1 && a.history[0].detail.includes("批量"),
       JSON.stringify(a.history));
     check(`${u}: useCount/switchStats 清零`, a.useCount === 0 && Object.keys(a.switchStats || {}).length === 0);
+    check(`${u}: 换因计数/errStreak 清零`, a.lastSwitchReason === null && a.switchStreak === 0 && (a.errStreak || 0) === 0,
+      JSON.stringify({ r: a.lastSwitchReason, s: a.switchStreak, e: a.errStreak }));
   }
   const a = findAcc("ordBatchA");
   check("批量清空不动 lastUsedAt/lastAppName", a.lastUsedAt === snap.A.lastUsedAt && a.lastAppName === snap.A.lastAppName);

package/scripts/test-login-pool-faceban-e2e.mjs

@@ -0,0 +1,131 @@
+/**
+ * faceBans HTTP E2E — 真实 watch 服务（不起浏览器；页面用 HTML 字符串断言 + 内嵌 JS 语法编译）
+ *
+ * 覆盖:
+ *   1. POST /api/login-pool/face 标挂/恢复（probe/manual source、by 落库）→ GET /api/login-pool 透出
+ *   2. 参数校验走 HTTP 400（非法 face / source / 缺 ban / 未知账号）
+ *   3. acquire HTTP 全链路：explore 取号跳过 ban 号、search 面照发、池空文案带面维度
+ *   4. /login-pool 页面（登录门禁后）含面标注列/标挂恢复按钮/faceDlg 函数；内嵌 JS 可编译
+ *   5. 服务端 FACE 日志行格式（仿 UPDATE 行风格）
+ *
+ * 跑法: node scripts/test-login-pool-faceban-e2e.mjs（自行起停服务，临时 HOME 零污染）
+ */
+import { spawn } from "child_process";
+import { mkdtempSync } from "fs";
+import { tmpdir } from "os";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+
+const root = join(dirname(fileURLToPath(import.meta.url)), "..");
+const HOME = mkdtempSync(join(tmpdir(), "faceban-e2e-"));
+const PORT = 3913;
+const BASE = `http://127.0.0.1:${PORT}`;
+
+let pass = 0, fail = 0;
+const check = (name, cond, extra = "") => {
+  cond ? (pass++, console.log(`  ✓ ${name}`)) : (fail++, console.log(`  ✗ ${name} ${extra}`));
+};
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const post = async (p, body, cookie) => {
+  const r = await fetch(BASE + p, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", ...(cookie ? { Cookie: cookie } : {}) },
+    body: JSON.stringify(body),
+  });
+  return { status: r.status, json: await r.json().catch(() => ({})), setCookie: r.headers.get("set-cookie") };
+};
+
+// ── 起 watch ──
+const srvErr = [];
+const srv = spawn("node", [join(root, "src", "main.js"), "watch", "-o", join(HOME, "t.db"), "-p", String(PORT)], {
+  cwd: root, env: { ...process.env, HOME }, stdio: ["ignore", "ignore", "pipe"],
+});
+srv.stderr.on("data", (d) => srvErr.push(String(d)));
+let ready = false;
+for (let i = 0; i < 40 && !ready; i++) {
+  try { await fetch(BASE + "/api/stats"); ready = true; } catch { await sleep(500); }
+}
+check("watch 就绪(3913)", ready);
+try {
+  const pad = (n) => String(n).padStart(2, "0");
+  const d = new Date();
+  const pwd = `tt@${d.getFullYear()}${pad(d.getMonth() + 1)}${pad(d.getDate())}`;
+  const login = await post("/api/login", { password: pwd });
+  const cookie = (login.setCookie || "").split(";")[0];
+  check("页面门禁登录", login.status === 200 && cookie.startsWith("watch_token="), JSON.stringify(login.json).slice(0, 100));
+
+  // ── 入池三号 ──
+  const mk = (sid, uid) => [
+    { name: "sessionid", value: sid, domain: ".tiktok.com", expires: Date.now() / 1000 + 86400 },
+    { name: "unique_id", value: uid, domain: ".tiktok.com" },
+  ];
+  const a1 = await post("/api/login-pool/add", { username: "e2e-good", cookies: mk("1", "e2e-good") });
+  const a2 = await post("/api/login-pool/add", { username: "e2e-expban", cookies: mk("2", "e2e-expban") });
+  const a3 = await post("/api/login-pool/add", { username: "e2e-seaban", cookies: mk("3", "e2e-seaban") });
+  check("入池 3 号", a1.json.ok && a2.json.ok && a3.json.ok);
+
+  // ── face 标注 API ──
+  const f1 = await post("/api/login-pool/face", { username: "e2e-expban", face: "explore", ban: true, source: "probe", by: "2026-11-02排查" }, cookie);
+  check("face 标挂（probe）", f1.status === 200 && f1.json.account.faceBans.explore.ban === true && f1.json.account.faceBans.explore.source === "probe");
+  const f2 = await post("/api/login-pool/face", { id: a3.json.account.id, face: "search", ban: true, source: "manual", by: "page" }, cookie);
+  check("face 标挂（manual, id 定位）", f2.status === 200 && f2.json.account.faceBans.search.ban === true);
+  const view = await (await fetch(BASE + "/api/login-pool")).json();
+  const vu = view.accounts.find((x) => x.username === "e2e-expban");
+  check("GET /api/login-pool 透出 faceBans", vu && vu.faceBans && vu.faceBans.explore && vu.faceBans.explore.ban === true && vu.faceBans.search === null);
+  check("history 落痕 faceBan", (vu.history || []).some((h) => h.event === "faceBan" && /explore=禁用/.test(h.detail)));
+
+  // ── 校验走 HTTP 400 ──
+  const bad1 = await post("/api/login-pool/face", { username: "e2e-good", face: "video", ban: true }, cookie);
+  const bad2 = await post("/api/login-pool/face", { username: "e2e-good", face: "explore", ban: true, source: "auto" }, cookie);
+  const bad3 = await post("/api/login-pool/face", { username: "nobody", face: "explore", ban: true }, cookie);
+  check("非法 face → 400", bad1.status === 400 && /非法 face/.test(bad1.json.error || ""));
+  check("非法 source → 400", bad2.status === 400 && /非法 source/.test(bad2.json.error || ""));
+  check("未知账号 → 400", bad3.status === 400 && /账号不存在/.test(bad3.json.error || ""));
+
+  // ── acquire 全链路 ──
+  const acq = async (appName) => {
+    const r = await post("/api/login-pool/acquire", { userId: "E2E-" + Math.random().toString(36).slice(2, 6), appName });
+    return r;
+  };
+  const w1 = await acq("explore");
+  check("explore 取号跳过 ban 号", w1.json.account && w1.json.account.username === "e2e-good", JSON.stringify(w1.json).slice(0, 120));
+  const rel = await post("/api/login-pool/release", { id: w1.json.account.id }, cookie);
+  check("release 还号", rel.json.ok);
+  const w2 = await acq("search");
+  check("search 取号照发 explore-ban 号（面独立）", w2.json.account && w2.json.account.username === "e2e-expban", JSON.stringify(w2.json).slice(0, 120));
+  await post("/api/login-pool/release", { id: w2.json.account.id }, cookie);
+  // 池空文案：search-ban 的 e2e-seaban 仍在池；explore-ban 的也回池了；只禁 search 面后 explore 仍可发
+  // 构造 search 面池空：把 good 与 expban 都禁 search
+  await post("/api/login-pool/face", { username: "e2e-good", face: "search", ban: true, source: "manual" }, cookie);
+  await post("/api/login-pool/face", { username: "e2e-expban", face: "search", ban: true, source: "manual" }, cookie);
+  const w3 = await acq("search");
+  check("search 池空文案带面维度", w3.status === 400 && /池中暂无 search 面可用账号（共3 个，面禁用 3 个，租约中 0 个）/.test(w3.json.error || ""), w3.json.error);
+  const w4 = await acq("explore");
+  check("explore 同池不空（面独立，K1 发从未用过的 seaban）",
+    w4.json.account && w4.json.account.username === "e2e-seaban" && !(w4.json.account.faceBans.explore && w4.json.account.faceBans.explore.ban),
+    JSON.stringify(w4.json).slice(0, 120));
+  await post("/api/login-pool/release", { id: w4.json.account.id }, cookie);
+
+  // ── 页面 ──
+  const page = await (await fetch(BASE + "/login-pool", { headers: { Cookie: cookie } })).text();
+  check("页面含 explore/search 列头", page.includes(">explore</th>") && page.includes(">search</th>"));
+  check("页面含标挂/恢复按钮 + faceDlg", page.includes("&gt;标挂&lt;") === false && page.includes(">标挂</button>") && page.includes(">恢复</button>") && page.includes("async function faceDlg("));
+  check("页面调 face API", page.includes("'/api/login-pool/face'"));
+  check("页面含面标注图例", page.includes("面标注图例"));
+  // 内嵌 JS 语法可编译（提取 <script> 块 new Function 编译，不执行）
+  const m = page.match(/<script>([\s\S]*?)<\/script>/);
+  let compiled = false;
+  try { new Function(m[1]); compiled = true; } catch (e) { console.log("    编译错误:", e.message); }
+  check("页面内嵌 JS 语法编译通过", compiled);
+  check("页面无 faceBans 明文泄漏风险（无 cookies 字段渲染）", !page.includes("acc.cookies"));
+
+  // ── FACE 日志行 ──
+  await sleep(300);
+  const logs = srvErr.join("");
+  check("服务端 FACE 日志行（仿 UPDATE 风格）", /\[登录池 .+\] FACE: e2e-expban explore=禁用 \(probe · 2026-11-02排查\)/.test(logs), logs.split("\n").filter((l) => l.includes("FACE")).join(" | ").slice(0, 200));
+} finally {
+  srv.kill("SIGTERM");
+  await sleep(500);
+}
+console.log(`\n═══ faceBans E2E: ${pass} passed, ${fail} failed ═══`);
+process.exit(fail > 0 ? 1 : 0);

package/scripts/test-login-pool-faceban.mjs

@@ -0,0 +1,235 @@
+/**
+ * faceBans（账号面标注 + 派号过滤）单元测试 — 模块级直驱（不起 HTTP）
+ *
+ * 覆盖（2026-11-02 任务卡验证要求）:
+ *   1. faceBans 写读：setAccountFace 写入 → publicView 透出 → 池文件持久化（saveNow 立即落盘）
+ *   2. 参数校验：face/source 枚举、ban 必填 boolean、id/username 定位二选一
+ *   3. acquire 按面过滤：explore 禁用号 explore 取号跳过；另一面（search）不受影响照发
+ *   4. 缺失/null = 未验证 = 默认可用；ban=false 恢复后重新可发
+ *   5. 面禁用导致池空：文案带面维度（共X 个，面禁用 Y 个，租约中 Z 个）
+ *   6. 排序回归：K1 从未用过最前 / K2 非同类优先 / K3 lastUsedAt 升序在过滤后不变；
+ *      面禁用号即使排序键最优也不得中签
+ *   7. 与 status 正交：leased 号可标注（租约不动，faceBans 落本体）
+ *
+ * 跑法: HOME=$(mktemp -d) node scripts/test-login-pool-faceban.mjs
+ */
+import assert from "assert";
+import { readFileSync } from "fs";
+import { join } from "path";
+
+const HOME = process.env.HOME;
+if (!HOME || HOME === "/") {
+  console.error("请用隔离 HOME 运行: HOME=$(mktemp -d) node scripts/test-login-pool-faceban.mjs");
+  process.exit(1);
+}
+
+const {
+  getLoginPoolView,
+  addAccount,
+  releaseAccount,
+  acquireAccount,
+  setAccountFace,
+  isFaceBanned,
+  faceOfAppName,
+  _accountsInternal,
+} = await import("../src/watch/login-pool.js");
+
+let pass = 0;
+let fail = 0;
+const check = (name, cond, extra = "") => {
+  if (cond) {
+    pass++;
+    console.log(`  ✓ ${name}`);
+  } else {
+    fail++;
+    console.log(`  ✗ ${name} ${extra}`);
+  }
+};
+const POOL_FILE = join(HOME, ".tt-help-watchdog-logins.json");
+const mkCookies = (sid, uid) => [
+  { name: "sessionid", value: sid, domain: ".tiktok.com", expires: Date.now() / 1000 + 86400 },
+  { name: "unique_id", value: uid, domain: ".tiktok.com" },
+];
+const findAcc = (username) => getLoginPoolView().accounts.find((x) => x.username === username);
+// 节间隔离：全部下架（retired 不参与取号/计数为已停用），每节干净开局
+const retireAll = () => {
+  for (const a of _accountsInternal()) {
+    a.status = "retired";
+    a.lease = null;
+  }
+};
+const backdate = (username, msAgo) => {
+  for (const a of _accountsInternal()) {
+    if (a.username === username) a.lastUsedAt = Date.now() - msAgo;
+  }
+};
+
+// ── 1. faceOfAppName 语义 ──
+console.log("\n[1] faceOfAppName：未知 appName 归 explore");
+{
+  check("search → search", faceOfAppName("search") === "search");
+  check("explore → explore", faceOfAppName("explore") === "explore");
+  check("undefined → explore", faceOfAppName(undefined) === "explore");
+  check("未知字符串 → explore", faceOfAppName("comments") === "explore");
+}
+
+// ── 2. 写读 + 持久化 + 校验 ──
+console.log("\n[2] setAccountFace 写读 + saveNow 持久化");
+{
+  retireAll();
+  const a = addAccount({ cookies: mkCookies("s1", "faceA") });
+  const b = addAccount({ cookies: mkCookies("s2", "faceB") });
+
+  const before = findAcc("faceA");
+  check("初始 faceBans 双面均 null（未验证=可用）",
+    before.faceBans && before.faceBans.explore === null && before.faceBans.search === null);
+  check("isFaceBanned 懒判空：无标注=false", isFaceBanned(_accountsInternal()[0], "explore") === false);
+
+  const r1 = setAccountFace({ username: "faceA", face: "explore", ban: true, source: "probe", by: "2026-11-02排查" });
+  check("ban=true 写入（username 定位）", r1.faceBans.explore && r1.faceBans.explore.ban === true);
+  check("source/at/by 落库", r1.faceBans.explore.source === "probe" && typeof r1.faceBans.explore.at === "number" && r1.faceBans.explore.by === "2026-11-02排查");
+  check("另一面仍 null", r1.faceBans.search === null);
+  check("isFaceBanned=true", isFaceBanned(_accountsInternal().find((x) => x.username === "faceA"), "explore") === true);
+  check("search 面不受影响", isFaceBanned(_accountsInternal().find((x) => x.username === "faceA"), "search") === false);
+  check("history 落痕 faceBan", (r1.history || []).some((h) => h.event === "faceBan" && /explore=禁用/.test(h.detail)));
+
+  const r2 = setAccountFace({ id: b.id, face: "search", ban: true, source: "manual", by: "人工" });
+  check("ban=true（id 定位）", r2.faceBans.search && r2.faceBans.search.ban === true && r2.faceBans.search.source === "manual");
+
+  // 恢复（ban=false → ✅ 验证通过记录，不再过滤）
+  const r3 = setAccountFace({ username: "faceA", face: "explore", ban: false, source: "manual", by: "page" });
+  check("ban=false 恢复（isFaceBanned=false）",
+    r3.faceBans.explore && r3.faceBans.explore.ban === false &&
+    isFaceBanned(_accountsInternal().find((x) => x.username === "faceA"), "explore") === false);
+  check("history 落痕 faceRestore", (r3.history || []).some((h) => h.event === "faceRestore" && /explore=恢复/.test(h.detail)));
+
+  // saveNow 立即落盘（不走 3s 防抖）：连续标注（同进程第二次 setAccountFace）也必须落盘
+  const disk = JSON.parse(readFileSync(POOL_FILE, "utf-8"));
+  const diskA = disk.accounts.find((x) => x.username === "faceA");
+  check("池文件持久化 faceBans（连续两次标注均落盘）", diskA && diskA.faceBans && diskA.faceBans.explore && diskA.faceBans.explore.ban === false && diskA.faceBans.search == null,
+    JSON.stringify(diskA && diskA.faceBans));
+
+  // 参数校验
+  const throws = (fn, kw) => {
+    try { fn(); return false; } catch (e) { return e.message.includes(kw); }
+  };
+  check("非法 face 拒绝", throws(() => setAccountFace({ id: "x", face: "video", ban: true }), "非法 face"));
+  check("非法 source 拒绝", throws(() => setAccountFace({ id: "x", face: "explore", ban: true, source: "auto" }), "非法 source"));
+  check("ban 缺失/非 bool 拒绝", throws(() => setAccountFace({ id: "x", face: "explore" }), "ban 必填"));
+  check("账号不存在报错", throws(() => setAccountFace({ username: "nobody", face: "explore", ban: true }), "账号不存在"));
+  check("id/username 均缺拒绝", throws(() => setAccountFace({ face: "explore", ban: true }), "账号不存在"));
+}
+
+// ── 3. acquire 按面过滤（核心） ──
+console.log("\n[3] acquire 面过滤：跳过 ban 号，另一面不受影响");
+{
+  retireAll();
+  const good = addAccount({ cookies: mkCookies("g1", "good1"), username: "good1" });
+  const expBan = addAccount({ cookies: mkCookies("e1", "expBan"), username: "expBan" });
+  const seaBan = addAccount({ cookies: mkCookies("s3", "seaBan"), username: "seaBan" });
+  setAccountFace({ id: expBan.id, face: "explore", ban: true, source: "probe" });
+  setAccountFace({ id: seaBan.id, face: "search", ban: true, source: "probe" });
+
+  // explore 取号：good1 与 expBan 都是从未用过（K1 并列），K3 createdAt 升序 → 无过滤时 expBan（先入池？）
+  // 入池顺序 good→expBan→seaBan；K1 并列时按 lastUsedAt??createdAt 升序，good1 最先 → 中签。
+  // 为证明过滤生效（而非巧合排序），把 expBan 的 createdAt 提前，使无过滤时它必中签：
+  for (const a of _accountsInternal()) if (a.username === "expBan") a.createdAt = Date.now() - 60000;
+
+  const w1 = acquireAccount({ userId: "T-1", appName: "explore" });
+  check("explore 取号跳过 explore 禁用号", w1.username === "good1", `got ${w1.username}`);
+  releaseAccount({ id: w1.id });
+  _accountsInternal().find((x) => x.id === w1.id).lastUsedAt = null; // 还原从未用过
+
+  // 另一面不受影响：search 取号可拿到 explore 禁用号（expBan createdAt 最老 → K3 最前）
+  const w2 = acquireAccount({ userId: "T-2", appName: "search" });
+  check("search 取号照发 explore 禁用号（面独立）", w2.username === "expBan", `got ${w2.username}`);
+  releaseAccount({ id: w2.id });
+  _accountsInternal().find((x) => x.id === w2.id).lastUsedAt = null;
+
+  // search 取号跳过 search 禁用号
+  const w3 = acquireAccount({ userId: "T-3", appName: "search" });
+  check("search 取号跳过 search 禁用号", w3.username === "good1", `got ${w3.username}`);
+  releaseAccount({ id: w3.id });
+  _accountsInternal().find((x) => x.id === w3.id).lastUsedAt = null;
+
+  // 未知 appName 归 explore 面
+  const w4 = acquireAccount({ userId: "T-4" });
+  check("缺省 appName 归 explore 面（跳过 explore 禁用号）", w4.username === "good1", `got ${w4.username}`);
+  releaseAccount({ id: w4.id });
+  _accountsInternal().find((x) => x.id === w4.id).lastUsedAt = null;
+}
+
+// ── 4. 面禁用导致池空：文案带面维度 ──
+console.log("\n[4] 池空文案带面维度");
+{
+  retireAll();
+  const p1 = addAccount({ cookies: mkCookies("p1", "onlyPool"), username: "onlyPool" });
+  const leased = addAccount({ cookies: mkCookies("p2", "busyOne"), username: "busyOne" });
+  setAccountFace({ id: p1.id, face: "explore", ban: true, source: "manual" });
+  const l = acquireAccount({ userId: "T-9", appName: "explore" });
+  check("租约占住 busyOne", l.username === "busyOne");
+  let err = null;
+  try { acquireAccount({ userId: "T-10", appName: "explore" }); } catch (e) { err = e.message; }
+  const total = getLoginPoolView().total;
+  check("文案含面与三类计数", err === `池中暂无 explore 面可用账号（共${total} 个，面禁用 1 个，租约中 1 个）`, `got ${err}`);
+  // search 面同池不空（onlyPool 的 search 面未禁用）——但它 lastUsedAt 刚被 acquire 盖过？
+  // 上一步 search 取号会走 30min 休息窗 eligible 空集 → 全池兑底，仍能发号（语义=有得用总比没用好）
+  const w = acquireAccount({ userId: "T-11", appName: "search" });
+  check("另一面池不空照发（兑底流水线不受面文案影响）", !!w && w.faceBans.search === null);
+}
+
+// ── 5. 排序回归（K1/K2/K3 在过滤后不变） ──
+console.log("\n[5] 排序回归：K1/K2/K3 结果不变");
+{
+  retireAll();
+  const k1a = addAccount({ cookies: mkCookies("k1", "k1never"), username: "k1never" }); // 从未用过
+  const k1b = addAccount({ cookies: mkCookies("k2", "k1used"), username: "k1used" });
+  backdate("k1used", 61 * 60 * 1000); // 用过但已出休息窗（eligible）；61min 与后续 60min 严格分离，免同毫秒 tie
+  for (const a of _accountsInternal()) if (a.username === "k1used") a.lastAppName = "search";
+  // K1: 从未用过最前
+  const w1 = acquireAccount({ userId: "T-K1", appName: "explore" });
+  check("K1 从未用过最前", w1.username === "k1never", `got ${w1.username}`);
+  releaseAccount({ id: w1.id });
+
+  // K2: 非同类优先：k1never 刚被 explore 租过（lastAppName=explore，非同类），
+  // k1used 是 search（同类）→ search 请求优先 k1never；K2 在 K3 之前分出胜负，确定性不受时间戳精度影响
+  backdate("k1never", 60 * 60 * 1000); // 出休息窗，两者都 eligible（K1 并列）
+  const w2 = acquireAccount({ userId: "T-K2", appName: "search" });
+  check("K2 非同类优先", w2.username === "k1never", `got ${w2.username}`);
+  releaseAccount({ id: w2.id });
+
+  // K3: 同类并列 → lastUsedAt 升序（两者都 lastAppName=search；k1used 严格更老 61min vs 60min）
+  for (const a of _accountsInternal()) if (a.username === "k1never") a.lastAppName = "search";
+  backdate("k1never", 60 * 60 * 1000);
+  backdate("k1used", 61 * 60 * 1000);
+  const w3 = acquireAccount({ userId: "T-K3", appName: "search" });
+  check("K3 lastUsedAt 升序", w3.username === "k1used", `got ${w3.username}`);
+  releaseAccount({ id: w3.id });
+
+  // 面禁用即使排序键最优也不中签：把 k1never 还原成从未用过（K1 最优）再 explore 标挂 → 只剩 k1used
+  for (const a of _accountsInternal()) if (a.username === "k1never") a.lastUsedAt = null;
+  setAccountFace({ id: k1a.id, face: "explore", ban: true, source: "probe" });
+  const w4 = acquireAccount({ userId: "T-K4", appName: "explore" });
+  check("面禁用号排序键最优（从未用过）也不中签", w4.username === "k1used", `got ${w4.username}`);
+  releaseAccount({ id: w4.id });
+}
+
+// ── 6. 与 status 正交：leased 号可标注 ──
+console.log("\n[6] leased 号可标注（不动租约，下次派发生效）");
+{
+  retireAll();
+  const a = addAccount({ cookies: mkCookies("L1", "leasedOne"), username: "leasedOne" });
+  const l = acquireAccount({ userId: "T-L", appName: "explore" });
+  check("先取到手", l.username === "leasedOne");
+  const r = setAccountFace({ id: l.id, face: "explore", ban: true, source: "manual", by: "测试" });
+  check("标注后仍 leased 且租约原样", r.status === "leased" && r.lease && r.lease.userId === "T-L");
+  check("faceBans 落本体", r.faceBans.explore && r.faceBans.explore.ban === true);
+  // release 后回池，explore 派号不再发它
+  releaseAccount({ id: a.id });
+  let got = null;
+  try { got = acquireAccount({ userId: "T-L2", appName: "explore" }); } catch (e) { got = e.message; }
+  check("释放后 explore 派发跳过该号", typeof got === "string" && got.includes("面禁用 1 个"), `got ${got}`);
+}
+
+console.log(`\n═══ faceBans 测试: ${pass} passed, ${fail} failed ═══`);
+process.exit(fail > 0 ? 1 : 0);

package/scripts/test-login-pool-ui.mjs

@@ -157,7 +157,8 @@ check("状态徽章=使用中", row1.includes("使用中"));
 check("使用者=机器:口", row1.includes("F-11:9222"));
 const poolSrc = await page.content();
 check("独立页无 cookie 明文", !poolSrc.includes("SECRET-SID-XYZ"));
-check("独立页检测按钮已点亮（重登录已改名）", await page.$$eval("#content button:not([disabled])", (bs) => bs.some((b) => b.textContent.trim() === "检测")));
+// d77a82c 批量改造：行内按钮改回「重登录」（与新增「检测」列解撞名）；「检测」列已由上方新列断言覆盖
+check("独立页重登录按钮已点亮（与检测列解撞名，d77a82c）", await page.$$eval("#content button:not([disabled])", (bs) => bs.some((b) => b.textContent.trim() === "重登录")));
 check("独立页含新增账号/批量检测按钮", await page.$$eval(".bar button", (bs) => {
   const t = bs.map((b) => b.textContent).join();
   return t.includes("新增账号") && t.includes("批量检测");