release(android): close 0.1.17 device candidate

2026-07-30 21:02:56 +08:00
parent c16a3e83d7
commit adedcb4200
14 changed files with 149 additions and 52 deletions
@@ -241,3 +241,21 @@ test('8 月 1 日 RC 脚本默认拒绝脏工作区且记录完整构建证据',
  assert.match(script, /releaseEligible = \$releaseEligible/);
  assert.match(script, /APK metadata, login legal links, no native privacy prompt, signature, content match and sensitive-value scan/);
 });
+
+test('认证态 UI 审计不持久化手机号或验证码', async () => {
+  const script = await readFile(
+    new URL('../scripts/ui-rendered-audit.mjs', import.meta.url),
+    'utf8'
+  );
+  const authRoutesStart = script.indexOf('const AUTH_DEFAULT_ROUTES');
+  const authRoutesEnd = script.indexOf('];', authRoutesStart);
+  const authRoutes = script.slice(authRoutesStart, authRoutesEnd);
+
+  assert.ok(authRoutesStart >= 0 && authRoutesEnd > authRoutesStart);
+  assert.match(script, /AIHR_UI_AUDIT_PHONE/);
+  assert.match(script, /AIHR_UI_AUDIT_CODE/);
+  assert.doesNotMatch(script, /argValue\('--code'\)\s*\|\|\s*['"]\d+/);
+  assert.doesNotMatch(script, /session\.masked|loginPhone\.slice/);
+  assert.doesNotMatch(authRoutes, /pages\/user\/profile\/index/);
+  assert.match(script, /已认证（凭据不入报告）/);
+});