feat: 同步管理端、用户端与后端业务，并接通线上 Web 接口

补齐平台订阅、外部登录、CRM 同步与用户端页面；Nginx 转发用户端接口，登录页使用 Google 与 Apple 标志。

Co-authored-by: Cursor <cursoragent@cursor.com>

admin/tests/nfc-batch.test.ts

@@ -80,3 +80,76 @@ test('4. nfc/batch locale 必须包含 menu.nfc.batch', () => {
     'locale 禁止 Mock.js'
   );
 });
+
+test('5. 无可用 zip 打包下载时不得假成功 / 假 zip；须禁用打包按钮并提示暂不可打包', () => {
+  const pageContent = fs.readFileSync(batchPagePath, 'utf-8');
+  const localeContent = fs.readFileSync(batchLocalePath, 'utf-8');
+
+  assert.ok(
+    localeContent.includes("'nfcBatch.pack.unavailable'"),
+    'locale 必须包含 nfcBatch.pack.unavailable'
+  );
+  assert.ok(
+    localeContent.includes("'nfcBatch.form.packDownload'"),
+    'locale 必须包含打包下载按钮文案'
+  );
+  assert.ok(
+    /暂不可打包/.test(localeContent),
+    '中文须说明暂不可打包'
+  );
+  assert.ok(
+    pageContent.includes("t['nfcBatch.pack.unavailable']") ||
+      pageContent.includes('nfcBatch.pack.unavailable'),
+    '页面必须引用 pack.unavailable 文案'
+  );
+  assert.ok(
+    pageContent.includes("t['nfcBatch.form.packDownload']") ||
+      pageContent.includes('nfcBatch.form.packDownload'),
+    '页面必须展示打包下载按钮文案'
+  );
+
+  // 禁止客户端造假 zip / 把复制短链当成打包成功
+  assert.ok(
+    !/JSZip|new Blob\s*\(|application\/zip|createObjectURL/.test(pageContent),
+    '禁止前端生成假 zip'
+  );
+  assert.ok(
+    !/Message\.success\s*\(\s*t\[['"]nfcBatch\.pack\.(success|download)/.test(
+      pageContent
+    ),
+    '禁止 Message.success 假装打包成功'
+  );
+  const copySuccessAsPack =
+    /handlePack[\s\S]{0,240}Message\.success\s*\(\s*t\[['"]nfcBatch\.copy\.success['"]\]/.test(
+      pageContent
+    ) ||
+    /packDownload[\s\S]{0,240}Message\.success\s*\(\s*t\[['"]nfcBatch\.copy\.success['"]\]/.test(
+      pageContent
+    );
+  assert.ok(!copySuccessAsPack, '禁止把复制短链成功当成打包成功');
+
+  const packDisabled =
+    /packDownload[\s\S]{0,200}disabled|disabled[\s\S]{0,200}packDownload|handlePackUnavailable[\s\S]{0,200}disabled|disabled[\s\S]{0,120}handlePackUnavailable/i.test(
+      pageContent
+    ) ||
+    /Button[\s\S]{0,320}nfcBatch\.form\.packDownload[\s\S]{0,120}disabled|disabled[\s\S]{0,200}nfcBatch\.form\.packDownload/i.test(
+      pageContent
+    );
+  const packUnavailableHint =
+    pageContent.includes("t['nfcBatch.pack.unavailable']") ||
+    pageContent.includes('nfcBatch.pack.unavailable');
+  assert.ok(
+    packDisabled && packUnavailableHint,
+    '无可用打包接口时必须禁用打包下载按钮且点击/悬停提示暂不可打包'
+  );
+
+  // 真实入库成功仍须 code===1000 才 Message.success
+  assert.ok(
+    /code\s*===\s*1000[\s\S]{0,400}Message\.success\s*\(\s*t\[['"]nfcBatch\.request\.success['"]\]/.test(
+      pageContent
+    ) ||
+      (pageContent.includes('code === 1000') &&
+        pageContent.includes("t['nfcBatch.request.success']")),
+    '真实制卡写入仍只在 code===1000 时提示入库成功'
+  );
+});