fix: validate platform keys at the gate and stop auto-register

Co-authored-by: Cursor <cursoragent@cursor.com>

tests/test_custom_platforms.py

@@ -56,7 +56,7 @@ class TestDynamicPlatformResolution:
 
         result = resolve_platform_key_dynamic("江厂 空格", conn=clean_db)
         assert not result.ok
-        assert result.error_code == "INVALID_PLATFORM_KEY"
+        assert result.error_code == "INVALID_PLATFORM"
 
     def test_empty_platform(self, clean_db):
         from util.platforms import resolve_platform_key_dynamic
@@ -97,6 +97,43 @@ class TestPlatformEnsure:
         assert payload["platform_key"] == "jiangchang"
         assert payload["action"] in ("created", "updated")
 
+    def test_ensure_requires_display_name(self, clean_db, capsys):
+        from service.account_service import cmd_platform_ensure
+
+        rc = cmd_platform_ensure(key="hao_kan", display_name="")
+        assert rc == 1
+        payload = json.loads(capsys.readouterr().out.strip())
+        assert payload["error"]["code"] == "ERROR:INVALID_PLATFORM_DISPLAY_NAME"
+        count = clean_db.execute(
+            "SELECT COUNT(*) FROM platforms WHERE platform_key = 'hao_kan'"
+        ).fetchone()[0]
+        assert count == 0
+
+    def test_ensure_rejects_mixed_case_key(self, clean_db, capsys):
+        from service.account_service import cmd_platform_ensure
+
+        rc = cmd_platform_ensure(key="HaoKan", display_name="好看")
+        assert rc == 1
+        payload = json.loads(capsys.readouterr().out.strip())
+        assert payload["error"]["code"] == "ERROR:INVALID_PLATFORM_KEY"
+        count = clean_db.execute(
+            "SELECT COUNT(*) FROM platforms WHERE lower(platform_key) = 'haokan'"
+        ).fetchone()[0]
+        assert count == 0
+
+    def test_ensure_rejects_alias_owned_by_another_platform(self, clean_db, capsys):
+        from service.account_service import cmd_platform_ensure
+
+        rc = cmd_platform_ensure(key="hao_kan", display_name="抖音")
+        assert rc == 1
+        payload = json.loads(capsys.readouterr().out.strip())
+        assert payload["error"]["code"] == "ERROR:PLATFORM_ALIAS_CONFLICT"
+        assert "douyin" in payload["error"]["message"]
+        count = clean_db.execute(
+            "SELECT COUNT(*) FROM platforms WHERE platform_key = 'hao_kan'"
+        ).fetchone()[0]
+        assert count == 0
+
 
 class TestCustomPlatformAccounts:
     def test_add_web_after_ensure(self, clean_db):
@@ -161,7 +198,8 @@ class TestCustomPlatformAccounts:
         payload = json.loads(out)
         assert payload["success"] is False
         assert payload["error"]["code"] == "ERROR:PLATFORM_NOT_REGISTERED"
-        assert "--platform-display-name" in payload["error"]["message"]
+        assert "platform ensure" in payload["error"]["message"]
+        assert "--platform-display-name" not in payload["error"]["message"]
 
     def test_add_web_unregistered_returns_structured_error(self, clean_db, capsys):
         from service.account_service import cmd_account_add_web
@@ -255,7 +293,7 @@ JIANGCHANG_META_KWARGS = dict(
 )
 
 
-class TestAutoRegisterFromCallerMeta:
+class TestCallerMetaDoesNotAutoRegister:
     def _meta(self):
         from service.account_service import PlatformCallerMeta
 
@@ -293,9 +331,10 @@ class TestAutoRegisterFromCallerMeta:
         payload = json.loads(out)
         assert payload["success"] is False
         assert payload["error"]["code"] == "ERROR:PLATFORM_NOT_REGISTERED"
-        assert "--platform-display-name" in payload["error"]["message"]
+        assert "platform ensure" in payload["error"]["message"]
+        assert "--platform-display-name" not in payload["error"]["message"]
 
-    def test_pick_web_unregistered_with_meta_auto_registers(self, clean_db, capsys):
+    def test_pick_web_unregistered_with_meta_does_not_insert(self, clean_db, capsys):
         from service.account_service import cmd_account_pick_web, PlatformCallerMeta
         from util.platforms import resolve_platform_key_dynamic
 
@@ -310,28 +349,33 @@ class TestAutoRegisterFromCallerMeta:
         out = capsys.readouterr().out.strip()
         payload = json.loads(out)
         assert payload["success"] is False
-        assert payload["error"]["code"] == "ERROR:NO_ACCOUNT"
+        assert payload["error"]["code"] == "ERROR:PLATFORM_NOT_REGISTERED"
+        assert "已拒绝写入" in payload["error"]["message"]
 
         result = resolve_platform_key_dynamic("auto_reg_plat", conn=clean_db)
-        assert result.ok
-        assert result.platform_key == "auto_reg_plat"
+        assert not result.ok
+        assert result.error_code == "PLATFORM_NOT_REGISTERED"
+        count = clean_db.execute(
+            "SELECT COUNT(*) FROM platforms WHERE platform_key = 'auto_reg_plat'"
+        ).fetchone()[0]
+        assert count == 0
 
-    def test_add_web_unregistered_with_meta_auto_registers(self, clean_db):
+    def test_add_web_unregistered_with_meta_does_not_insert(self, clean_db, capsys):
         from service.account_service import cmd_account_add_web, PlatformCallerMeta
         from db.accounts_repo import find_accounts
 
         meta = PlatformCallerMeta(
-            display_name="匠厂后台",
+            display_name="未登记测试",
             url=JIANGCHANG_URL,
-            domain="jc2009.com",
+            domain="example.com",
             auth_strategy="qr_code_manual",
-            aliases=["jiangchang"],
+            aliases=["unreg_meta_plat"],
         )
         cmd_account_add_web(
-            platform_input="jiangchang",
+            platform_input="unreg_meta_plat",
             login_id="manual",
             login_id_type="manual",
-            label="匠厂后台",
+            label="未登记",
             tenant_id=None,
             environment="production",
             role="admin",
@@ -341,9 +385,15 @@ class TestAutoRegisterFromCallerMeta:
             profile_dir_override=None,
             platform_meta=meta,
         )
-        accs = find_accounts(platform_key="jiangchang")
-        assert len(accs) == 1
-        assert accs[0]["url"] == JIANGCHANG_URL
+        out = capsys.readouterr().out.strip()
+        payload = json.loads(out.splitlines()[0])
+        assert payload["success"] is False
+        assert payload["error"]["code"] == "ERROR:PLATFORM_NOT_REGISTERED"
+        assert find_accounts(platform_key="unreg_meta_plat") == []
+        count = clean_db.execute(
+            "SELECT COUNT(*) FROM platforms WHERE platform_key = 'unreg_meta_plat'"
+        ).fetchone()[0]
+        assert count == 0
 
     def test_invalid_platform_key_no_register(self, clean_db, capsys):
         from service.account_service import cmd_account_pick_web, PlatformCallerMeta
@@ -382,7 +432,7 @@ class TestAutoRegisterFromCallerMeta:
         ).fetchone()[0]
         assert enabled == 0
 
-    def test_auto_register_idempotent(self, clean_db):
+    def test_caller_meta_does_not_insert_idempotent(self, clean_db, capsys):
         from service.account_service import cmd_account_pick_web, PlatformCallerMeta
 
         meta = PlatformCallerMeta(
@@ -395,4 +445,7 @@ class TestAutoRegisterFromCallerMeta:
         count = clean_db.execute(
             "SELECT COUNT(*) FROM platforms WHERE platform_key = 'idem_plat'"
         ).fetchone()[0]
-        assert count == 1
+        assert count == 0
+        out = capsys.readouterr().out.strip().splitlines()[-1]
+        payload = json.loads(out)
+        assert payload["error"]["code"] == "ERROR:PLATFORM_NOT_REGISTERED"