fix: update API URLs and improve error handling for SUB2API configuration

tests/background-navigation-utils-module.test.js

@@ -71,6 +71,20 @@ test('navigation utils support codex2api mode and url normalization', () => {
   assert.equal(utils.getPanelModeLabel('codex2api'), 'Codex2API');
 });
 
+test('navigation utils leaves SUB2API url empty when no default is configured', () => {
+  const source = fs.readFileSync('background/navigation-utils.js', 'utf8');
+  const globalScope = {};
+
+  const api = new Function('self', `${source}; return self.MultiPageBackgroundNavigationUtils;`)(globalScope);
+  const utils = api.createNavigationUtils({
+    DEFAULT_CODEX2API_URL: 'http://localhost:8080/admin/accounts',
+    DEFAULT_SUB2API_URL: '',
+    normalizeLocalCpaStep9Mode: (value) => value,
+  });
+
+  assert.equal(utils.normalizeSub2ApiUrl(''), '');
+});
+
 test('navigation utils recognize the iCloud mail tab family on both supported hosts', () => {
   const source = fs.readFileSync('background/navigation-utils.js', 'utf8');
   const globalScope = {};

tests/gopay-utils.test.js

@@ -28,6 +28,7 @@ test('GoPay utils builds GPC queue task and balance URLs from helper endpoints',
   const api = loadGoPayUtils();
   assert.equal(api.DEFAULT_GPC_HELPER_API_URL, 'https://gpc.qlhazycoder.top');
   assert.equal(api.normalizeGpcHelperBaseUrl(''), 'https://gpc.qlhazycoder.top');
+  assert.equal(api.normalizeGpcHelperBaseUrl('https://example.com/api/gp/tasks'), 'https://gpc.qlhazycoder.top');
   assert.equal(
     api.buildGpcHelperApiUrl('', '/api/checkout/start'),
     'https://gpc.qlhazycoder.top/api/checkout/start'

tests/hotmail-utils.test.js

@@ -358,13 +358,14 @@ test('pickVerificationMessageWithTimeFallback can ignore afterTimestamp while ke
 
 test('buildHotmailMailApiLatestUrl includes email, client id, refresh token, and mailbox', () => {
   const url = new URL(buildHotmailMailApiLatestUrl({
+    apiUrl: 'https://example.com/api/mail-new',
     clientId: 'client-123',
     email: 'user@hotmail.com',
     refreshToken: 'refresh-token-xyz',
     mailbox: 'Junk',
   }));
 
-  assert.equal(url.origin + url.pathname, 'https://apple.882263.xyz/api/mail-new');
+  assert.equal(url.origin + url.pathname, 'https://example.com/api/mail-new');
   assert.equal(url.searchParams.get('client_id'), 'client-123');
   assert.equal(url.searchParams.get('email'), 'user@hotmail.com');
   assert.equal(url.searchParams.get('refresh_token'), 'refresh-token-xyz');
@@ -372,6 +373,13 @@ test('buildHotmailMailApiLatestUrl includes email, client id, refresh token, and
   assert.equal(url.searchParams.get('response_type'), 'json');
 });
 
+test('buildHotmailMailApiLatestUrl requires an explicit api url', () => {
+  assert.throws(
+    () => buildHotmailMailApiLatestUrl({ email: 'user@hotmail.com' }),
+    /Hotmail mail API URL is required/
+  );
+});
+
 test('buildHotmailMailApiLatestUrl supports custom api url and can omit response_type', () => {
   const url = new URL(buildHotmailMailApiLatestUrl({
     apiUrl: 'https://example.com/custom-mail-api',