refactor: extract strategy-switch worker into application modules

Move UX1, auth, RuntimeInstances, and shared HTTP helpers out of the worker monolith and update structural tests to match.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: Pigbibi

tests/ux1_research_worker_validation.mjs

@@ -569,8 +569,15 @@ try {
 
   assert.equal(__test.ux1CalculatorDeadlineMs, 30000);
   assert.equal(__test.ux1CalculatorMaxBytes, 65536);
-  const workerSource = await readFile(new URL("../web/strategy-switch-console/worker.js", import.meta.url), "utf8");
-  const previewFn = workerSource.slice(workerSource.indexOf("async function ux1PreviewPost"), workerSource.indexOf("async function ux1IntentPost"));
+  // Implementation lives in application/ux1/research.js; worker.js only imports and routes.
+  const ux1ResearchSource = await readFile(
+    new URL("../web/strategy-switch-console/application/ux1/research.js", import.meta.url),
+    "utf8",
+  );
+  const previewStart = ux1ResearchSource.indexOf("async function ux1PreviewPost");
+  const intentStart = ux1ResearchSource.indexOf("async function ux1IntentPost");
+  assert.equal(previewStart >= 0 && intentStart > previewStart, true);
+  const previewFn = ux1ResearchSource.slice(previewStart, intentStart);
   assert.equal(previewFn.includes("readUx1CalculatorExchange(binding, canonicalJson(calculatorRequest))"), true);
   assert.equal(previewFn.includes("deadlineMs"), false);
   assert.equal(previewFn.includes("maxBytes"), false);

web/strategy-switch-console/application/account_diagnosis/constants.js

@@ -0,0 +1,62 @@
+export const ACCOUNT_DIAGNOSIS_REQUEST_PATH = "/api/account-diagnosis";
+export const ACCOUNT_DIAGNOSIS_INTERNAL_PREFIX = "/api/internal/account-diagnosis/";
+export const ACCOUNT_DIAGNOSIS_TARGET_ID = "binance.crypto_live_pool_rotation";
+export const ACCOUNT_DIAGNOSIS_TARGETS = Object.freeze({
+  [ACCOUNT_DIAGNOSIS_TARGET_ID]: Object.freeze({
+    platform: "binance",
+    recheckRepository: "QuantStrategyLab/BinancePlatform",
+    recheckWorkflow: "runtime-target-lifecycle.yml",
+  }),
+  "longbridge.paper": Object.freeze({
+    platform: "longbridge",
+    recheckRepository: "QuantStrategyLab/LongBridgePlatform",
+    recheckWorkflow: "runtime-target-lifecycle.yml",
+  }),
+  "longbridge.hk": Object.freeze({
+    platform: "longbridge",
+    recheckRepository: "QuantStrategyLab/LongBridgePlatform",
+    recheckWorkflow: "runtime-target-lifecycle.yml",
+  }),
+  "longbridge.sg": Object.freeze({
+    platform: "longbridge",
+    recheckRepository: "QuantStrategyLab/LongBridgePlatform",
+    recheckWorkflow: "runtime-target-lifecycle.yml",
+  }),
+  "schwab.primary": Object.freeze({
+    platform: "schwab",
+    recheckRepository: "QuantStrategyLab/CharlesSchwabPlatform",
+    recheckWorkflow: "runtime-target-lifecycle.yml",
+  }),
+  "firstrade.primary": Object.freeze({
+    platform: "firstrade",
+    recheckRepository: "QuantStrategyLab/FirstradePlatform",
+    recheckWorkflow: "runtime-target-lifecycle.yml",
+  }),
+});
+export const ACCOUNT_DIAGNOSIS_TRIGGERS = ["incident", "manual_check"];
+export const ACCOUNT_DIAGNOSIS_STATUSES = ["queued", "running", "succeeded", "failed", "unknown"];
+export const ACCOUNT_DIAGNOSIS_REASON_CODES = ["diagnosis_ready", "capacity_unavailable", "codex_unavailable", "invalid_response"];
+export const ACCOUNT_DIAGNOSIS_MAX_BODY_BYTES = 16 * 1024;
+export const ACCOUNT_DIAGNOSIS_SUMMARY_MAX_CHARS = 600;
+export const ACCOUNT_DIAGNOSIS_DEDUPE_WINDOW_MS = 24 * 60 * 60 * 1000;
+export const ACCOUNT_DIAGNOSIS_AUTO_ENABLED_ENV = "ACCOUNT_DIAGNOSIS_AUTO_ENABLED";
+export const ACCOUNT_DIAGNOSIS_DO_ACTIONS = new Set([
+  "diagnosis_create", "diagnosis_latest", "diagnosis_read", "diagnosis_mark_dispatch", "diagnosis_claim", "diagnosis_result", "diagnosis_mark_recheck", "diagnosis_native_intent", "diagnosis_native_save", "diagnosis_native_cancel",
+]);
+/** Stable 409/qualification reason codes for /api/account-diagnosis (P0-08). */
+export const ACCOUNT_DIAGNOSIS_CONFLICT_REASON_TEXT = Object.freeze({
+  account_diagnosis_config_unavailable: "账户选项配置不可用，无法绑定诊断身份。",
+  account_diagnosis_account_not_found: "未找到匹配的账户选项。",
+  account_diagnosis_account_not_unique: "账户选项不唯一，无法安全绑定诊断身份。",
+  account_diagnosis_target_not_admitted: "该 target 未纳入账户诊断准入清单。",
+  account_diagnosis_identity_conflict: "target 与账户身份冲突或不唯一。",
+  account_diagnosis_lifecycle_store_unavailable: "生命周期配置存储不可用。",
+  account_diagnosis_lifecycle_match_missing: "缺少匹配的生命周期观测来源。",
+  account_diagnosis_lifecycle_match_ambiguous: "生命周期观测来源不唯一。",
+  account_diagnosis_source_unavailable: "生命周期来源不可用（非 ready/stale）。",
+  account_diagnosis_observation_missing: "缺少观测时间，无法确认诊断资格。",
+  account_diagnosis_incident_requires_attention: "incident 触发需要已确认的监测关注项。",
+  account_diagnosis_native_binding_conflict: "诊断原生任务身份或材料绑定冲突。",
+  account_diagnosis_workflow_binding_conflict: "诊断工作流运行绑定冲突。",
+  account_diagnosis_schema_incompatible: "诊断上下文 schema 不兼容。",
+});

web/strategy-switch-console/application/account_diagnosis/helpers.js

@@ -0,0 +1,40 @@
+import { HttpError } from "../http_error.js";
+import { ACCOUNT_DIAGNOSIS_CONFLICT_REASON_TEXT } from "./constants.js";
+
+export function accountDiagnosisConflict(reasonCode, status = 409) {
+  const reason = ACCOUNT_DIAGNOSIS_CONFLICT_REASON_TEXT[reasonCode] || "";
+  return new HttpError(reasonCode, status, { reason_code: reasonCode, reason });
+}
+export function accountDiagnosisErrorPayload(error) {
+  const reason_code = String(error?.reason_code || error?.message || "account_diagnosis_unavailable");
+  const payload = { ok: false, error: reason_code, reason_code };
+  const reason = String(error?.reason || ACCOUNT_DIAGNOSIS_CONFLICT_REASON_TEXT[reason_code] || "").trim();
+  if (reason) payload.reason = reason;
+  return payload;
+}
+export function accountDiagnosisTaskFromRow(row) {
+  if (!row) return null;
+  return {
+    request_id: row.request_id,
+    platform: row.platform,
+    key: row.account_key,
+    target_id: row.target_id,
+    trigger: row.trigger,
+    observed_at: row.observed_at,
+    checks: JSON.parse(row.checks_json),
+    state_fingerprint: row.state_fingerprint,
+    status: row.status,
+    native: row.native_json ? JSON.parse(row.native_json) : null,
+    backend_kind: row.native_json ? "native" : "legacy",
+    workflow_run_id: row.workflow_run_id || null,
+    workflow_run_attempt: row.workflow_run_attempt || null,
+    job_id: row.job_id || null,
+    summary: row.summary || "",
+    reason_code: row.reason_code || "",
+    dispatch_state: row.dispatch_state,
+    recheck_dispatch_state: row.recheck_dispatch_state,
+    auto_source: row.auto_source || "manual",
+    created_at: row.created_at,
+    updated_at: row.updated_at,
+  };
+}

web/strategy-switch-console/application/auth/constants.js

@@ -0,0 +1,6 @@
+export const SESSION_COOKIE = "qsl_switch_session";
+export const OAUTH_STATE_COOKIE = "qsl_switch_oauth_state";
+export const SESSION_TTL_SECONDS = 8 * 60 * 60;
+export const AUTH_CONFIG_KEY = "auth_config";
+export const GITHUB_LOGIN_REQUEST_TIMEOUT_MS = 20000;
+export const GITHUB_API_TIMEOUT_MS = 8000;

web/strategy-switch-console/application/auth/cookies.js

@@ -0,0 +1,45 @@
+export function randomToken() {
+  const bytes = new Uint8Array(24);
+  crypto.getRandomValues(bytes);
+  return base64UrlEncodeBytes(bytes);
+}
+
+export function base64UrlEncodeJson(value) {
+  return base64UrlEncodeBytes(new TextEncoder().encode(JSON.stringify(value)));
+}
+
+export function base64UrlEncodeBytes(bytes) {
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replaceAll("=", "");
+}
+
+export function base64UrlDecode(value) {
+  const base64 = value.replaceAll("-", "+").replaceAll("_", "/").padEnd(Math.ceil(value.length / 4) * 4, "=");
+  const binary = atob(base64);
+  const bytes = new Uint8Array(binary.length);
+  for (let index = 0; index < binary.length; index += 1) bytes[index] = binary.charCodeAt(index);
+  return new TextDecoder().decode(bytes);
+}
+
+export function parseCookies(header) {
+  const result = {};
+  for (const part of header.split(";")) {
+    const [name, ...rest] = part.trim().split("=");
+    if (!name) continue;
+    result[name] = decodeURIComponent(rest.join("="));
+  }
+  return result;
+}
+
+export function cookie(name, value, maxAge) {
+  return `${name}=${encodeURIComponent(value)}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=${maxAge}`;
+}
+
+export function clearCookie(name) {
+  return `${name}=; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=0`;
+}
+
+export function clearOAuthCookie() {
+  return { "Set-Cookie": clearCookie(OAUTH_STATE_COOKIE) };
+}

web/strategy-switch-console/application/auth/fetch.js

@@ -0,0 +1,14 @@
+import { GITHUB_API_TIMEOUT_MS } from "./constants.js";
+
+export async function fetchWithTimeout(resource, init = {}, timeoutMs = GITHUB_API_TIMEOUT_MS, fetchImpl = fetch) {
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    return await fetchImpl(resource, { ...init, signal: controller.signal });
+  } catch (error) {
+    if (error?.name === "AbortError") throw new Error("GitHub request timed out");
+    throw error;
+  } finally {
+    clearTimeout(timeoutId);
+  }
+}

web/strategy-switch-console/application/auth/github.js

@@ -0,0 +1,31 @@
+import { fetchWithTimeout } from "./fetch.js";
+import { GITHUB_API_TIMEOUT_MS } from "./constants.js";
+import { cleanGithubOrg, uniqueStrings } from "./identity_lists.js";
+
+export function githubHeaders(token) {
+  return {
+    Authorization: `Bearer ${token}`,
+    Accept: "application/vnd.github+json",
+    "Content-Type": "application/json",
+    "User-Agent": "QuantRuntimeSettings-StrategySwitchConsole",
+    "X-GitHub-Api-Version": "2022-11-28",
+  };
+}
+
+export async function fetchGithubOrgLogins(token, timeoutMs = GITHUB_API_TIMEOUT_MS) {
+  const orgs = [];
+  for (let page = 1; page <= 5; page += 1) {
+    const response = await fetchWithTimeout(`https://api.github.com/user/orgs?per_page=100&page=${page}`, {
+      headers: githubHeaders(token),
+    }, timeoutMs);
+    if (!response.ok) return orgs;
+    const payload = await response.json();
+    if (!Array.isArray(payload) || !payload.length) break;
+    for (const org of payload) {
+      const login = cleanGithubOrg(org?.login || "", "github org");
+      if (login) orgs.push(login);
+    }
+    if (payload.length < 100) break;
+  }
+  return uniqueStrings(orgs);
+}

web/strategy-switch-console/application/auth/identity_lists.js

@@ -0,0 +1,48 @@
+export function parseLoginList(value, fieldName) {
+  return normalizeLoginList(value, fieldName);
+}
+
+export function normalizeLoginList(value, fieldName) {
+  const items = Array.isArray(value) ? value : String(value || "").split(/[\s,]+/);
+  if (items.length > 80) throw new Error(`${fieldName} supports at most 80 logins`);
+  return uniqueStrings(items.map((item) => cleanGithubLogin(item, fieldName)).filter(Boolean));
+}
+
+export function parseOrgList(value, fieldName) {
+  return normalizeOrgList(value, fieldName);
+}
+
+export function normalizeOrgList(value, fieldName) {
+  const items = Array.isArray(value) ? value : String(value || "").split(/[\s,]+/);
+  if (items.length > 80) throw new Error(`${fieldName} supports at most 80 orgs`);
+  return uniqueStrings(items.map((item) => cleanGithubOrg(item, fieldName)).filter(Boolean));
+}
+
+export function cleanGithubLogin(value, fieldName) {
+  const login = String(value || "").trim().toLowerCase();
+  if (!login) return "";
+  if (
+    login.length > 39 ||
+    !/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/.test(login) ||
+    login.includes("--")
+  ) {
+    throw new Error(`${fieldName} contains an invalid GitHub login`);
+  }
+  return login;
+}
+
+export function cleanGithubOrg(value, fieldName) {
+  return cleanGithubLogin(value, fieldName);
+}
+
+export function uniqueStrings(items) {
+  const result = [];
+  const seen = new Set();
+  for (const item of items) {
+    const text = String(item || "").trim().toLowerCase();
+    if (!text || seen.has(text)) continue;
+    seen.add(text);
+    result.push(text);
+  }
+  return result;
+}