feat: continue OAuth flow through HeroSMS phone verification

- 合并 dev 最新主线改动：同步当前认证页恢复、来源配置和侧栏能力的现有基线

- 本地补充修复：补齐 HeroSMS 手机验证与 sidepanel 初始化冲突，修正 Step 9 等待逻辑里的未声明变量，并同步结构/链路文档与回归测试

- 影响范围：OAuth 步骤 8/9、HeroSMS 配置、认证页内容脚本、侧栏初始化、项目文档与测试

tests/step8-retry-page-recovery.test.js

@@ -51,10 +51,8 @@ function extractFunction(name) {
   return source.slice(start, end);
 }
 
-test('step 8 click effect returns restart_current_step when retry page is recovered', async () => {
+test('step 8 click effect throws when retry page appears after clicking continue', async () => {
   const api = new Function(`
-let recoverCalls = 0;
-
 const chrome = {
   tabs: {
     async get() {
@@ -69,10 +67,6 @@ const chrome = {
 function throwIfStopped() {}
 async function sleepWithStop() {}
 async function ensureStep8SignupPageReady() {}
-async function recoverAuthRetryPageOnTab() {
-  recoverCalls += 1;
-  return { recovered: true };
-}
 async function getStep8PageState() {
   return {
     url: 'https://auth.openai.com/authorize',
@@ -89,20 +83,120 @@ return {
   async run() {
     return waitForStep8ClickEffect(88, 'https://auth.openai.com/authorize', 1000);
   },
-  snapshot() {
-    return { recoverCalls };
+};
+`)();
+
+  await assert.rejects(
+    () => api.run(),
+    /点击“继续”后页面进入认证页重试页/
+  );
+});
+
+test('step 8 ready check throws when consent page is already a retry page before clicking', async () => {
+  const api = new Function(`
+const chrome = {
+  tabs: {
+    async get() {
+      return {
+        id: 88,
+        url: 'https://auth.openai.com/authorize',
+      };
+    },
+  },
+};
+
+function throwIfStopped() {}
+async function sleepWithStop() {}
+async function ensureStep8SignupPageReady() {}
+async function getStep8PageState() {
+  return {
+    url: 'https://auth.openai.com/authorize',
+    retryPage: true,
+    addPhonePage: false,
+    consentReady: false,
+  };
+}
+
+${extractFunction('waitForStep8Ready')}
+
+return {
+  async run() {
+    return waitForStep8Ready(88, 1000);
   },
 };
 `)();
 
-  const result = await api.run();
-  const snapshot = api.snapshot();
-
-  assert.deepStrictEqual(result, {
-    progressed: false,
-    reason: 'retry_page_recovered',
-    restartCurrentStep: true,
-    url: 'https://auth.openai.com/authorize',
-  });
-  assert.equal(snapshot.recoverCalls, 1);
+  await assert.rejects(
+    () => api.run(),
+    /当前认证页已进入重试页/
+  );
+});
+
+test('step 8 ready check completes phone verification flow before waiting for OAuth consent', async () => {
+  const api = new Function(`
+let pollCount = 0;
+const phoneVerificationCalls = [];
+
+function throwIfStopped() {}
+async function sleepWithStop() {}
+async function ensureStep8SignupPageReady() {}
+const phoneVerificationHelpers = {
+  async completePhoneVerificationFlow(tabId, pageState) {
+    phoneVerificationCalls.push({ tabId, pageState });
+    return {
+      success: true,
+      consentReady: true,
+      url: 'https://auth.openai.com/authorize',
+    };
+  },
+};
+async function getStep8PageState() {
+  pollCount += 1;
+  if (pollCount === 1) {
+    return {
+      url: 'https://auth.openai.com/add-phone',
+      addPhonePage: true,
+      phoneVerificationPage: false,
+      consentReady: false,
+    };
+  }
+  return {
+    url: 'https://auth.openai.com/authorize',
+    addPhonePage: false,
+    phoneVerificationPage: false,
+    consentReady: true,
+  };
+}
+
+${extractFunction('waitForStep8Ready')}
+
+return {
+  async run() {
+    return {
+      result: await waitForStep8Ready(88, 1000),
+      phoneVerificationCalls,
+    };
+  },
+};
+`)();
+
+  const { result, phoneVerificationCalls } = await api.run();
+
+  assert.deepStrictEqual(phoneVerificationCalls, [
+    {
+      tabId: 88,
+      pageState: {
+        url: 'https://auth.openai.com/add-phone',
+        addPhonePage: true,
+        phoneVerificationPage: false,
+        consentReady: false,
+      },
+    },
+  ]);
+  assert.deepStrictEqual(result, {
+    url: 'https://auth.openai.com/authorize',
+    addPhonePage: false,
+    phoneVerificationPage: false,
+    consentReady: true,
+  });
 });