const test = require('node:test'); const assert = require('node:assert/strict'); const fs = require('node:fs'); const vm = require('node:vm'); const source = fs.readFileSync('background/steps/create-plus-checkout.js', 'utf8'); const plusCheckoutSource = fs.readFileSync('content/plus-checkout.js', 'utf8'); const gopayUtilsSource = fs.readFileSync('gopay-utils.js', 'utf8'); const globalScope = {}; new Function('self', `${gopayUtilsSource};`)(globalScope); const api = new Function('self', `${source}; return self.MultiPageBackgroundPlusCheckoutCreate;`)(globalScope); function createCheckoutContentHarness() { const checkoutEvents = []; const attrs = new Map(); let listener = null; const elements = []; function createElement({ tagName = 'DIV', text = '', attrs: initialAttrs = {}, id = '', type = '', value = '' } = {}) { const attrMap = new Map(Object.entries(initialAttrs)); if (id) attrMap.set('id', id); if (type) attrMap.set('type', type); const element = { nodeType: 1, tagName, id, type, value, textContent: text, innerText: text, className: initialAttrs.class || '', checked: initialAttrs.checked === 'true', disabled: false, hidden: false, dataset: {}, children: [], parentElement: null, style: { display: 'block', visibility: 'visible' }, getAttribute(name) { if (name === 'class') return this.className; if (name === 'id') return this.id || attrMap.get(name) || ''; if (name === 'type') return this.type || attrMap.get(name) || ''; return attrMap.has(name) ? attrMap.get(name) : ''; }, setAttribute(name, nextValue) { attrMap.set(name, String(nextValue)); }, closest() { return null; }, querySelector() { return null; }, scrollIntoView() {}, focus() {}, dispatchEvent() { return true; }, click() {}, getBoundingClientRect() { return { left: 10, top: 20, width: 180, height: 44 }; }, }; return element; } const paymentButton = createElement({ tagName: 'BUTTON', text: 'PayPal', attrs: { role: 'tab', 'aria-selected': '' } }); const fullNameInput = createElement({ tagName: 'INPUT', id: 'name', type: 'text', attrs: { name: 'billingName', placeholder: 'Full name' } }); const addressInput = createElement({ tagName: 'INPUT', id: 'address', type: 'text', attrs: { name: 'addressLine1', placeholder: 'Address line 1' } }); const cityInput = createElement({ tagName: 'INPUT', id: 'city', type: 'text', attrs: { name: 'locality', placeholder: 'City' } }); const postalInput = createElement({ tagName: 'INPUT', id: 'postal', type: 'text', attrs: { name: 'postalCode', placeholder: 'Postal code' } }); const suggestionOption = createElement({ tagName: 'LI', text: 'Unter den Linden 1, Berlin', attrs: { role: 'option', class: 'pac-item' } }); const subscribeButton = createElement({ tagName: 'BUTTON', text: 'Subscribe', attrs: { type: 'submit', 'aria-label': 'Subscribe' } }); subscribeButton.type = 'submit'; elements.push(paymentButton, fullNameInput, addressInput, cityInput, postalInput, suggestionOption, subscribeButton); const context = { console: { log() {}, warn() {}, error() {}, info() {} }, location: { href: 'https://chatgpt.com/checkout/openai_ie/cs_test' }, window: {}, CSS: { escape: (value) => String(value) }, Event: class TestEvent { constructor(type) { this.type = type; } }, MouseEvent: class TestMouseEvent { constructor(type) { this.type = type; } }, PointerEvent: class TestPointerEvent { constructor(type) { this.type = type; } }, document: { readyState: 'complete', body: {}, documentElement: { getAttribute(name) { return attrs.get(name) || null; }, setAttribute(name, nextValue) { attrs.set(name, String(nextValue)); }, }, getElementById() { return null; }, querySelectorAll(selector) { const text = String(selector || ''); if (text.includes('label[for=')) return []; if (text.includes('[role="option"]') || text.includes('.pac-item') || text === 'li') return [suggestionOption]; if (text === 'input, textarea') return elements.filter((element) => element.tagName === 'INPUT'); if (text.includes('button[type="submit"]')) return [subscribeButton]; if (text.includes('button') || text.includes('[role=') || text.includes('[tabindex]') || text.includes('[data-testid]')) { return elements.filter((element) => element.tagName === 'BUTTON'); } if (text.includes('select') || text.includes('[aria-haspopup="listbox"]')) return []; return []; }, }, chrome: { runtime: { onMessage: { addListener(fn) { listener = fn; }, }, }, }, CodexOperationDelay: { async performOperationWithDelay(metadata, operation) { checkoutEvents.push({ type: 'operation', label: metadata.label, kind: metadata.kind }); const result = await operation(); checkoutEvents.push({ type: 'delay', label: metadata.label, ms: 2000 }); return result; }, }, resetStopState() {}, isStopError() { return false; }, throwIfStopped() {}, sleep() { return Promise.resolve(); }, log() {}, fillInput(element, nextValue) { element.value = nextValue; }, simulateClick(element) { if (element === paymentButton) { paymentButton.setAttribute('aria-selected', 'true'); } }, }; context.window = context; context.window.getComputedStyle = (element) => element?.style || { display: 'block', visibility: 'visible' }; vm.createContext(context); vm.runInContext(plusCheckoutSource, context); assert.equal(typeof listener, 'function'); async function send(message) { return await new Promise((resolve) => { listener(message, {}, resolve); }); } return { checkoutEvents, send }; } function createGpcBalanceResponse(overrides = {}) { return { code: 200, message: 'ok', data: { api_key: 'gpc_test', status: 'active', auto_mode_enabled: false, total_uses: 1000, remaining_uses: 998, used_uses: 2, ...overrides, }, }; } function createGpcTaskResponse(overrides = {}) { return { code: 200, message: 'ok', data: { task_id: 'task_123', status: 'active', status_text: '处理中', phone_mode: 'manual', remote_stage: 'checkout_start', ...overrides, }, }; } test('Plus checkout create does not wait 20 seconds after opening checkout page', async () => { const events = []; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async (message, level = 'info') => { events.push({ type: 'log', message, level }); }, chrome: { tabs: { create: async (payload) => { events.push({ type: 'tab-create', payload }); return { id: 42 }; }, update: async (tabId, payload) => { events.push({ type: 'tab-update', tabId, payload }); }, }, }, completeNodeFromBackground: async (step, payload) => { events.push({ type: 'complete', step, payload }); }, ensureContentScriptReadyOnTabUntilStopped: async () => { events.push({ type: 'ready' }); }, registerTab: async (source, tabId) => { events.push({ type: 'register', source, tabId }); }, sendTabMessageUntilStopped: async (tabId, source, message) => { events.push({ type: 'tab-message', tabId, source, message }); return { checkoutUrl: 'https://checkout.stripe.com/c/pay/session', country: 'US', currency: 'USD', }; }, setState: async (payload) => { events.push({ type: 'set-state', payload }); }, sleepWithStop: async (ms) => { events.push({ type: 'sleep', ms }); }, waitForTabCompleteUntilStopped: async () => { events.push({ type: 'tab-complete' }); }, }); await executor.executePlusCheckoutCreate(); assert.deepEqual( events.find((event) => event.type === 'tab-create'), { type: 'tab-create', payload: { url: 'https://chatgpt.com/', active: true } } ); assert.deepEqual( events.find((event) => event.type === 'register'), { type: 'register', source: 'plus-checkout', tabId: 42 } ); const sleepEvents = events.filter((event) => event.type === 'sleep'); assert.deepStrictEqual(sleepEvents.map((event) => event.ms), [1000, 1000]); assert.deepStrictEqual( events.find((event) => event.type === 'tab-message')?.message?.payload, { paymentMethod: 'paypal' } ); const completeIndex = events.findIndex((event) => event.type === 'complete'); const readyLogIndex = events.findIndex((event) => event.type === 'log' && /已就绪/.test(event.message)); assert.ok(readyLogIndex > -1); assert.ok(completeIndex > readyLogIndex); assert.equal(events.some((event) => event.type === 'sleep' && event.ms === 20000), false); }); test('GoPay plus checkout create forwards gopay payment method to the checkout content script', async () => { const events = []; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async () => {}, chrome: { tabs: { create: async () => ({ id: 99 }), update: async () => {}, }, }, completeNodeFromBackground: async () => {}, ensureContentScriptReadyOnTabUntilStopped: async () => {}, registerTab: async () => {}, sendTabMessageUntilStopped: async (_tabId, _source, message) => { events.push(message); return { checkoutUrl: 'https://chatgpt.com/checkout/openai_llc/test-session', country: 'ID', currency: 'IDR', }; }, setState: async () => {}, sleepWithStop: async () => {}, waitForTabCompleteUntilStopped: async () => {}, }); await executor.executePlusCheckoutCreate({ plusPaymentMethod: 'gopay' }); assert.deepStrictEqual(events[0]?.payload, { paymentMethod: 'gopay' }); }); test('PayPal no-card binding create opens and submits hosted OpenAI checkout before completing', async () => { const events = []; let currentUrl = 'https://chatgpt.com/'; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async (message, level = 'info') => { events.push({ type: 'log', message, level }); }, chrome: { tabs: { create: async (payload) => { events.push({ type: 'tab-create', payload }); return { id: 55, url: payload.url, status: 'complete' }; }, update: async (tabId, payload) => { currentUrl = payload.url; events.push({ type: 'tab-update', tabId, payload }); return { id: tabId, url: currentUrl, status: 'complete' }; }, get: async (tabId) => ({ id: tabId, url: currentUrl, status: 'complete' }), }, }, completeNodeFromBackground: async (step, payload) => { events.push({ type: 'complete', step, payload }); }, ensureContentScriptReadyOnTabUntilStopped: async (source, tabId, options) => { events.push({ type: 'ready', source, tabId, options }); }, fetch: async (url) => { events.push({ type: 'fetch', url }); assert.equal(url, 'https://www.meiguodizhi.com/api/v1/dz'); return { ok: true, status: 200, json: async () => ({ address: { Address: '1 Main St', City: 'New York', State: 'New York', Zip_Code: '10001', }, }), }; }, getState: async () => { events.push({ type: 'get-state' }); return { hostedCheckoutPhoneNumber: '4155551234', }; }, registerTab: async (source, tabId) => { events.push({ type: 'register', source, tabId }); }, sendTabMessageUntilStopped: async (tabId, source, message) => { events.push({ type: 'tab-message', tabId, source, message }); if (message.type === 'CREATE_PLUS_CHECKOUT') { return { checkoutUrl: 'https://chatgpt.com/checkout/openai_llc/cs_hosted', preferredCheckoutUrl: 'https://pay.openai.com/c/pay/cs_hosted', hostedCheckoutUrl: 'https://pay.openai.com/c/pay/cs_hosted', country: 'US', currency: 'USD', }; } if (message.type === 'RUN_PAYPAL_HOSTED_OPENAI_CHECKOUT_STEP') { currentUrl = 'https://www.paypal.com/pay?token=BA-hosted'; return { clicked: true }; } throw new Error(`unexpected message type ${message.type}`); }, setState: async (payload) => { events.push({ type: 'set-state', payload }); }, sleepWithStop: async (ms) => { events.push({ type: 'sleep', ms }); }, waitForTabCompleteUntilStopped: async () => { events.push({ type: 'tab-complete' }); }, }); await executor.executePlusCheckoutCreate({ plusPaymentMethod: 'paypal-hosted', plusHostedCheckoutOauthDelaySeconds: 0, }); assert.deepStrictEqual( events.find((event) => event.type === 'tab-message' && event.message.type === 'CREATE_PLUS_CHECKOUT')?.message?.payload, { paymentMethod: 'paypal-hosted' } ); assert.equal( events.find((event) => event.type === 'tab-update')?.payload?.url, 'https://pay.openai.com/c/pay/cs_hosted' ); const statePayload = events.filter((event) => event.type === 'set-state').at(-1)?.payload || {}; assert.equal(statePayload.plusCheckoutSource, 'paypal-hosted'); assert.equal(statePayload.plusCheckoutCountry, 'US'); assert.equal(statePayload.plusCheckoutCurrency, 'USD'); assert.equal(statePayload.plusReturnUrl, ''); assert.equal(events.some((event) => event.type === 'tab-message' && event.message.type === 'FILL_PLUS_BILLING_AND_SUBMIT'), false); assert.equal(events.some((event) => event.type === 'tab-message' && event.message.type === 'RUN_PAYPAL_HOSTED_OPENAI_CHECKOUT_STEP'), true); assert.equal( events.find((event) => event.type === 'tab-message' && event.message.type === 'RUN_PAYPAL_HOSTED_OPENAI_CHECKOUT_STEP')?.message?.payload?.address?.street, '1 Main St' ); assert.deepStrictEqual(events.find((event) => event.type === 'complete'), { type: 'complete', step: 'plus-checkout-create', payload: { plusCheckoutCountry: 'US', plusCheckoutCurrency: 'USD', plusCheckoutSource: 'paypal-hosted', plusCheckoutUrl: 'https://www.paypal.com/pay?token=BA-hosted', plusReturnUrl: '', plusHostedCheckoutCompleted: false, }, }); }); test('PayPal no-card binding OpenAI checkout node submits hosted page and completes after success transition', async () => { const events = []; let currentUrl = 'https://pay.openai.com/c/pay/cs_hosted'; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async (message, level = 'info') => { events.push({ type: 'log', message, level }); }, chrome: { tabs: { get: async (tabId) => ({ id: tabId, url: currentUrl, status: 'complete' }), }, }, completeNodeFromBackground: async (step, payload) => { events.push({ type: 'complete', step, payload }); }, ensureContentScriptReadyOnTabUntilStopped: async (source, tabId, options) => { events.push({ type: 'ready', source, tabId, options }); }, fetch: async (url) => { events.push({ type: 'fetch', url }); assert.equal(url, 'https://www.meiguodizhi.com/api/v1/dz'); return { ok: true, status: 200, json: async () => ({ address: { Address: '1 Main St', City: 'New York', State: 'New York', Zip_Code: '10001', }, }), }; }, getState: async () => ({ hostedCheckoutPhoneNumber: '(415) 555-1234', }), registerTab: async (source, tabId) => { events.push({ type: 'register', source, tabId }); }, sendTabMessageUntilStopped: async (tabId, source, message) => { events.push({ type: 'tab-message', tabId, source, message }); if (message.type === 'RUN_PAYPAL_HOSTED_OPENAI_CHECKOUT_STEP') { currentUrl = 'https://chatgpt.com/backend-api/payments/success?session_id=cs_hosted'; return { clicked: true }; } if (message.type === 'PLUS_CHECKOUT_GET_STATE') { return { hostedVerificationVisible: false }; } throw new Error(`unexpected message type ${message.type}`); }, setState: async (payload) => { events.push({ type: 'set-state', payload }); }, sleepWithStop: async (ms) => { events.push({ type: 'sleep', ms }); }, waitForTabCompleteUntilStopped: async () => { events.push({ type: 'tab-complete' }); }, }); await executor.executePayPalHostedOpenAiCheckout({ plusCheckoutTabId: 55, plusPaymentMethod: 'paypal-hosted', hostedCheckoutPhoneNumber: '2125550000', plusHostedCheckoutOauthDelaySeconds: 0, }); const profileState = events.find((event) => event.type === 'set-state' && event.payload.plusHostedCheckoutGuestProfile)?.payload || {}; assert.equal(profileState.plusHostedCheckoutGuestProfile.phone, '4155551234'); assert.equal(profileState.plusHostedCheckoutPhoneDigits, '4155551234'); assert.equal( events.find((event) => event.type === 'tab-message' && event.message.type === 'RUN_PAYPAL_HOSTED_OPENAI_CHECKOUT_STEP')?.message?.payload?.address?.street, '1 Main St' ); assert.deepStrictEqual(events.find((event) => event.type === 'complete'), { type: 'complete', step: 'paypal-hosted-openai-checkout', payload: { plusCheckoutUrl: 'https://chatgpt.com/backend-api/payments/success?session_id=cs_hosted', plusCheckoutSource: 'paypal-hosted', plusReturnUrl: 'https://chatgpt.com/backend-api/payments/success?session_id=cs_hosted', plusHostedCheckoutCompleted: true, }, }); }); test('Plus checkout content routes billing operations through the operation delay gate', async () => { const { checkoutEvents, send } = createCheckoutContentHarness(); const result = await send({ type: 'FILL_PLUS_BILLING_AND_SUBMIT', source: 'test', payload: { fullName: 'Ada Lovelace', addressSeed: { skipAutocomplete: true, fallback: { address1: 'Unter den Linden', city: 'Berlin', region: 'Berlin', postalCode: '10117', }, }, }, }); assert.equal(result.ok, true); assert.deepStrictEqual(checkoutEvents.filter((event) => event.type === 'operation').map((event) => event.label), [ 'select-payment-method', 'fill-billing-address', 'click-subscribe', ]); assert.deepStrictEqual(checkoutEvents.filter((event) => event.type === 'delay').map((event) => event.ms), [2000, 2000, 2000]); }); test('Plus checkout content routes same-frame autocomplete query and suggestion through separate operation delays', async () => { const { checkoutEvents, send } = createCheckoutContentHarness(); const result = await send({ type: 'FILL_PLUS_BILLING_AND_SUBMIT', source: 'test', payload: { fullName: 'Ada Lovelace', addressSeed: { query: 'Unter den Linden', suggestionIndex: 0, fallback: { address1: 'Unter den Linden', city: 'Berlin', region: 'Berlin', postalCode: '10117', }, }, }, }); assert.equal(result.ok, true); assert.deepStrictEqual(checkoutEvents.filter((event) => event.type === 'operation').map((event) => event.label), [ 'select-payment-method', 'fill-address-query', 'select-address-suggestion', 'fill-billing-address', 'click-subscribe', ]); assert.deepStrictEqual(checkoutEvents.filter((event) => event.type === 'delay').map((event) => event.label), [ 'select-payment-method', 'fill-address-query', 'select-address-suggestion', 'fill-billing-address', 'click-subscribe', ]); assert.equal(checkoutEvents.some((event) => event.type === 'delay' && event.ms !== 2000), false); }); test('GPC manual checkout injects Plus script before reading ChatGPT session token and sends X-API-Key', async () => { const events = []; const fetchCalls = []; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async (message, level = 'info') => events.push({ type: 'log', message, level }), chrome: { tabs: { create: async (payload) => { events.push({ type: 'tab-create', payload }); return { id: 77 }; }, remove: async (tabId) => events.push({ type: 'tab-remove', tabId }), }, }, completeNodeFromBackground: async (step, payload) => events.push({ type: 'complete', step, payload }), ensureContentScriptReadyOnTabUntilStopped: async (source, tabId, options) => events.push({ type: 'ready', source, tabId, options }), fetch: async (url, options = {}) => { fetchCalls.push({ url, options }); return { ok: true, status: 200, json: async () => url.endsWith('/api/gp/balance') ? createGpcBalanceResponse({ auto_mode_enabled: false, remaining_uses: 998 }) : createGpcTaskResponse({ otp_channel: 'whatsapp' }), }; }, registerTab: async (source, tabId) => events.push({ type: 'register', source, tabId }), sendTabMessageUntilStopped: async (tabId, source, message) => { events.push({ type: 'tab-message', tabId, source, message }); return { accessToken: 'session-access-token' }; }, setState: async (payload) => events.push({ type: 'set-state', payload }), sleepWithStop: async (ms) => events.push({ type: 'sleep', ms }), waitForTabCompleteUntilStopped: async () => events.push({ type: 'tab-complete' }), }); await executor.executePlusCheckoutCreate({ email: 'Current.Round+GPC@Example.COM', plusPaymentMethod: 'gpc-helper', gopayHelperPhoneMode: 'manual', gopayHelperApiUrl: 'https://gpc.qlhazycoder.top/', gopayHelperPhoneNumber: '+8613800138000', gopayPhone: '', gopayHelperCountryCode: '+86', gopayHelperPin: '123456', gopayHelperApiKey: 'gpc_test_123', }); const readyIndex = events.findIndex((event) => event.type === 'ready'); const messageIndex = events.findIndex((event) => event.type === 'tab-message'); assert.ok(readyIndex >= 0); assert.ok(messageIndex > readyIndex); assert.equal(events[messageIndex].message.type, 'PLUS_CHECKOUT_GET_STATE'); assert.deepEqual(events[messageIndex].message.payload, { includeSession: true, includeAccessToken: true, }); assert.equal(fetchCalls.length, 2); assert.equal(fetchCalls[0].url, 'https://gpc.qlhazycoder.top/api/gp/balance'); assert.equal(fetchCalls[0].options.headers['X-API-Key'], 'gpc_test_123'); assert.equal(fetchCalls[1].url, 'https://gpc.qlhazycoder.top/api/gp/tasks'); const helperPayload = JSON.parse(fetchCalls[1].options.body); assert.deepEqual(helperPayload, { access_token: 'session-access-token', phone_mode: 'manual', country_code: '86', phone_number: '13800138000', otp_channel: 'whatsapp', }); assert.equal(fetchCalls[1].options.headers['X-API-Key'], 'gpc_test_123'); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'card_key'), false); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'customer_email'), false); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'checkout_ui_mode'), false); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'gopay_link'), false); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'plan_name'), false); assert.equal(events.find((event) => event.type === 'set-state')?.payload?.plusCheckoutSource, 'gpc-helper'); assert.equal(events.find((event) => event.type === 'set-state')?.payload?.gopayHelperTaskId, 'task_123'); assert.equal(events.find((event) => event.type === 'set-state')?.payload?.gopayHelperTaskStatus, 'active'); assert.equal(events.find((event) => event.type === 'set-state')?.payload?.gopayHelperStatusText, '处理中'); assert.equal(events.find((event) => event.type === 'set-state')?.payload?.gopayHelperRemoteStage, 'checkout_start'); assert.equal(events.find((event) => event.type === 'set-state')?.payload?.gopayHelperReferenceId, ''); assert.ok(events.find((event) => event.type === 'set-state')?.payload?.gopayHelperOrderCreatedAt > 0); assert.equal(events.find((event) => event.type === 'complete')?.step, 'plus-checkout-create'); assert.equal(events.find((event) => event.type === 'complete')?.payload?.plusCheckoutSource, 'gpc-helper'); }); test('GPC auto checkout only sends access token and API Key', async () => { const events = []; const fetchCalls = []; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async (message, level = 'info') => events.push({ type: 'log', message, level }), chrome: { tabs: { create: async () => { throw new Error('should not open token tab when direct access token exists'); }, remove: async () => {}, }, }, completeNodeFromBackground: async (step, payload) => events.push({ type: 'complete', step, payload }), ensureContentScriptReadyOnTabUntilStopped: async () => {}, fetch: async (url, options = {}) => { fetchCalls.push({ url, options }); return { ok: true, status: 200, json: async () => url.endsWith('/api/gp/balance') ? createGpcBalanceResponse({ auto_mode_enabled: true, remaining_uses: 998 }) : createGpcTaskResponse({ task_id: 'task_auto', status: 'queued', status_text: '排队中', phone_mode: 'auto', api_waiting_for: '', }), }; }, registerTab: async () => {}, sendTabMessageUntilStopped: async () => ({}), setState: async (payload) => events.push({ type: 'set-state', payload }), sleepWithStop: async () => {}, waitForTabCompleteUntilStopped: async () => {}, }); await executor.executePlusCheckoutCreate({ plusPaymentMethod: 'gpc-helper', gopayHelperPhoneMode: 'auto', gopayHelperApiUrl: 'https://gpc.qlhazycoder.top/', chatgptAccessToken: 'state-access-token', gopayHelperApiKey: 'gpc_auto_123', }); assert.equal(fetchCalls.length, 2); assert.equal(fetchCalls[0].url, 'https://gpc.qlhazycoder.top/api/gp/balance'); assert.equal(fetchCalls[0].options.headers['X-API-Key'], 'gpc_auto_123'); assert.equal(fetchCalls[1].url, 'https://gpc.qlhazycoder.top/api/gp/tasks'); const helperPayload = JSON.parse(fetchCalls[1].options.body); assert.deepEqual(helperPayload, { access_token: 'state-access-token', phone_mode: 'auto', }); assert.equal(fetchCalls[1].options.headers['X-API-Key'], 'gpc_auto_123'); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'country_code'), false); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'phone_number'), false); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'otp_channel'), false); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'pin'), false); const statePayload = events.find((event) => event.type === 'set-state')?.payload || {}; assert.equal(statePayload.gopayHelperTaskId, 'task_auto'); assert.equal(Object.prototype.hasOwnProperty.call(statePayload, 'gopayHelperPhoneMode'), false); assert.equal(statePayload.gopayHelperTaskStatus, 'queued'); assert.equal(events.find((event) => event.type === 'complete')?.step, 'plus-checkout-create'); }); test('GPC auto checkout keeps running when balance payload omits auto mode permission', async () => { const events = []; const fetchCalls = []; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async () => {}, chrome: { tabs: { create: async () => { throw new Error('should not open token tab when direct access token exists'); }, remove: async () => {}, }, }, completeNodeFromBackground: async (step, payload) => events.push({ type: 'complete', step, payload }), ensureContentScriptReadyOnTabUntilStopped: async () => {}, fetch: async (url, options = {}) => { fetchCalls.push({ url, options }); return { ok: true, status: 200, json: async () => url.endsWith('/api/gp/balance') ? createGpcBalanceResponse({ auto_mode_enabled: undefined, remaining_uses: 998 }) : createGpcTaskResponse({ task_id: 'task_auto_unknown_permission', status: 'queued', status_text: '排队中', phone_mode: 'auto', api_waiting_for: '', }), }; }, registerTab: async () => {}, sendTabMessageUntilStopped: async () => ({}), setState: async (payload) => events.push({ type: 'set-state', payload }), sleepWithStop: async () => {}, waitForTabCompleteUntilStopped: async () => {}, }); await executor.executePlusCheckoutCreate({ plusPaymentMethod: 'gpc-helper', gopayHelperPhoneMode: 'auto', gopayHelperApiUrl: 'https://gpc.qlhazycoder.top/', chatgptAccessToken: 'state-access-token', gopayHelperApiKey: 'gpc_auto_123', }); assert.equal(fetchCalls.length, 2); assert.equal(fetchCalls[0].url, 'https://gpc.qlhazycoder.top/api/gp/balance'); assert.equal(fetchCalls[1].url, 'https://gpc.qlhazycoder.top/api/gp/tasks'); const helperPayload = JSON.parse(fetchCalls[1].options.body); assert.equal(helperPayload.phone_mode, 'auto'); const statePayload = events.find((event) => event.type === 'set-state')?.payload || {}; assert.equal(statePayload.gopayHelperTaskId, 'task_auto_unknown_permission'); assert.equal(Object.prototype.hasOwnProperty.call(statePayload, 'gopayHelperPhoneMode'), false); assert.equal(events.find((event) => event.type === 'complete')?.step, 'plus-checkout-create'); }); test('GPC auto checkout blocks API Keys without auto mode permission', async () => { const fetchCalls = []; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async () => {}, chrome: { tabs: { create: async () => { throw new Error('should not open token tab when direct access token exists'); }, remove: async () => {}, }, }, completeNodeFromBackground: async () => {}, ensureContentScriptReadyOnTabUntilStopped: async () => {}, fetch: async (url, options = {}) => { fetchCalls.push({ url, options }); return { ok: true, status: 200, json: async () => createGpcBalanceResponse({ auto_mode_enabled: false, remaining_uses: 998 }), }; }, registerTab: async () => {}, sendTabMessageUntilStopped: async () => ({}), setState: async () => {}, sleepWithStop: async () => {}, waitForTabCompleteUntilStopped: async () => {}, }); await assert.rejects( () => executor.executePlusCheckoutCreate({ plusPaymentMethod: 'gpc-helper', gopayHelperPhoneMode: 'auto', gopayHelperApiUrl: 'https://gpc.qlhazycoder.top/', chatgptAccessToken: 'state-access-token', gopayHelperApiKey: 'gpc_auto_disabled', }), /未开通自动模式/ ); assert.equal(fetchCalls.length, 1); assert.equal(fetchCalls[0].url, 'https://gpc.qlhazycoder.top/api/gp/balance'); }); test('GPC checkout blocks exhausted API Keys before creating task', async () => { const fetchCalls = []; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async () => {}, chrome: { tabs: { create: async () => { throw new Error('should not open token tab when direct access token exists'); }, remove: async () => {}, }, }, completeNodeFromBackground: async () => {}, ensureContentScriptReadyOnTabUntilStopped: async () => {}, fetch: async (url, options = {}) => { fetchCalls.push({ url, options }); return { ok: true, status: 200, json: async () => createGpcBalanceResponse({ auto_mode_enabled: false, remaining_uses: 0 }), }; }, registerTab: async () => {}, sendTabMessageUntilStopped: async () => ({}), setState: async () => {}, sleepWithStop: async () => {}, waitForTabCompleteUntilStopped: async () => {}, }); await assert.rejects( () => executor.executePlusCheckoutCreate({ plusPaymentMethod: 'gpc-helper', gopayHelperPhoneMode: 'manual', gopayHelperApiUrl: 'https://gpc.qlhazycoder.top/', chatgptAccessToken: 'state-access-token', gopayHelperPhoneNumber: '+8613800138000', gopayHelperCountryCode: '+86', gopayHelperPin: '123456', gopayHelperApiKey: 'gpc_exhausted', }), /剩余次数不足/ ); assert.equal(fetchCalls.length, 1); assert.equal(fetchCalls[0].url, 'https://gpc.qlhazycoder.top/api/gp/balance'); }); test('GPC checkout forwards selected SMS OTP channel', async () => { const fetchCalls = []; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async () => {}, chrome: { tabs: { create: async () => ({ id: 88 }), remove: async () => {}, }, }, completeNodeFromBackground: async () => {}, ensureContentScriptReadyOnTabUntilStopped: async () => {}, fetch: async (url, options = {}) => { fetchCalls.push({ url, options }); return { ok: true, status: 200, json: async () => url.endsWith('/api/gp/balance') ? createGpcBalanceResponse({ auto_mode_enabled: false, remaining_uses: 998 }) : createGpcTaskResponse({ task_id: 'task_sms', status: 'active', phone_mode: 'manual', remote_stage: 'checkout_start' }), }; }, registerTab: async () => {}, sendTabMessageUntilStopped: async () => ({ accessToken: 'session-access-token' }), setState: async () => {}, sleepWithStop: async () => {}, waitForTabCompleteUntilStopped: async () => {}, }); await executor.executePlusCheckoutCreate({ email: 'sms@example.com', plusPaymentMethod: 'gpc-helper', gopayHelperApiUrl: 'https://gpc.qlhazycoder.top/', gopayHelperPhoneNumber: '+8613800138000', gopayHelperCountryCode: '+86', gopayHelperPin: '123456', gopayHelperApiKey: 'gpc_sms', gopayHelperOtpChannel: 'sms', }); assert.equal(fetchCalls.length, 2); assert.equal(fetchCalls[0].url, 'https://gpc.qlhazycoder.top/api/gp/balance'); assert.equal(fetchCalls[0].options.headers['X-API-Key'], 'gpc_sms'); const helperPayload = JSON.parse(fetchCalls[1].options.body); assert.equal(helperPayload.phone_mode, 'manual'); assert.equal(helperPayload.otp_channel, 'sms'); assert.equal(fetchCalls[1].options.headers['X-API-Key'], 'gpc_sms'); assert.equal(Object.prototype.hasOwnProperty.call(helperPayload, 'card_key'), false); }); test('GPC checkout surfaces unified queue API errors', async () => { const fetchCalls = []; const executor = api.createPlusCheckoutCreateExecutor({ addLog: async () => {}, chrome: { tabs: { create: async () => { throw new Error('should not open token tab when direct access token exists'); }, remove: async () => {}, }, }, completeNodeFromBackground: async () => {}, ensureContentScriptReadyOnTabUntilStopped: async () => {}, fetch: async (url, options = {}) => { fetchCalls.push({ url, options }); if (url.endsWith('/api/gp/balance')) { return { ok: true, status: 200, json: async () => createGpcBalanceResponse({ auto_mode_enabled: false, remaining_uses: 998 }), }; } return { ok: false, status: 400, json: async () => ({ code: 400, message: 'invalid_param', data: { detail: 'access_token 无效' }, }), }; }, registerTab: async () => {}, sendTabMessageUntilStopped: async () => {}, setState: async () => {}, sleepWithStop: async () => {}, waitForTabCompleteUntilStopped: async () => {}, }); await assert.rejects( () => executor.executePlusCheckoutCreate({ email: 'paid@example.com', plusPaymentMethod: 'gpc-helper', gopayHelperApiUrl: 'https://gpc.qlhazycoder.top/', chatgptAccessToken: 'state-access-token', gopayHelperPhoneNumber: '+8613800138000', gopayHelperCountryCode: '+86', gopayHelperPin: '123456', gopayHelperApiKey: 'gpc_paid_456', }), /创建 GPC 订单失败:access_token 无效/ ); assert.equal(fetchCalls.length, 2); assert.equal(fetchCalls[0].url, 'https://gpc.qlhazycoder.top/api/gp/balance'); assert.equal(fetchCalls[1].url, 'https://gpc.qlhazycoder.top/api/gp/tasks'); assert.equal(Object.prototype.hasOwnProperty.call(JSON.parse(fetchCalls[1].options.body), 'card_key'), false); assert.equal(fetchCalls[1].options.headers['X-API-Key'], 'gpc_paid_456'); }); test('GPC checkout does not fall back to browser GoPay phone fields', async () => { const executor = api.createPlusCheckoutCreateExecutor({ addLog: async () => {}, chrome: { tabs: { create: async () => { throw new Error('should not open token tab when direct access token exists'); }, remove: async () => {}, }, }, completeNodeFromBackground: async () => {}, ensureContentScriptReadyOnTabUntilStopped: async () => {}, fetch: async () => { throw new Error('should not call helper API without helper phone'); }, registerTab: async () => {}, sendTabMessageUntilStopped: async () => {}, setState: async () => {}, sleepWithStop: async () => {}, waitForTabCompleteUntilStopped: async () => {}, }); await assert.rejects( () => executor.executePlusCheckoutCreate({ plusPaymentMethod: 'gpc-helper', gopayHelperPhoneMode: 'manual', gopayHelperApiUrl: 'https://gpc.qlhazycoder.top/', chatgptAccessToken: 'state-access-token', email: 'helper-phone-test@example.com', gopayPhone: '+8613800138000', gopayCountryCode: '+86', gopayPin: '123456', gopayHelperPhoneNumber: '', gopayHelperPin: '123456', gopayHelperApiKey: 'gpc_phone_test', }), /缺少手机号/ ); }); test('GPC checkout rejects missing API Key before calling helper API', async () => { const executor = api.createPlusCheckoutCreateExecutor({ addLog: async () => {}, chrome: { tabs: { create: async () => { throw new Error('should not open token tab when direct access token exists'); }, remove: async () => {}, }, }, completeNodeFromBackground: async () => {}, ensureContentScriptReadyOnTabUntilStopped: async () => {}, fetch: async () => { throw new Error('should not call helper API without API Key'); }, registerTab: async () => {}, sendTabMessageUntilStopped: async () => {}, setState: async () => {}, sleepWithStop: async () => {}, waitForTabCompleteUntilStopped: async () => {}, }); await assert.rejects( () => executor.executePlusCheckoutCreate({ plusPaymentMethod: 'gpc-helper', gopayHelperApiUrl: 'https://gpc.qlhazycoder.top/', chatgptAccessToken: 'state-access-token', email: 'missing-card@example.com', gopayHelperPhoneNumber: '+8613800138000', gopayHelperCountryCode: '+86', gopayHelperPin: '123456', gopayHelperApiKey: '', }), /缺少 API Key/ ); });