feat: 推广 V3.5 实时氢耗并完善导出

vehicle-data-platform/apps/web/src/v2/auth/session.test.ts

@@ -1,5 +1,15 @@
 import { afterEach, expect, test, vi } from 'vitest';
-import { canAdminister, canOperate, clearAccessToken, getAccessToken, notifyUnauthorizedSession, PLATFORM_UNAUTHORIZED_EVENT, setAccessToken } from './session';
+import {
+  canAdminister,
+  canOperate,
+  clearAccessToken,
+  getAccessToken,
+  hasMenu,
+  notifyUnauthorizedSession,
+  PLATFORM_UNAUTHORIZED_EVENT,
+  setAccessToken,
+  type PlatformSession,
+} from './session';
 
 afterEach(() => {
   window.sessionStorage.clear();
@@ -21,6 +31,17 @@ test('role helpers follow the server permission hierarchy', () => {
   expect(canAdminister({ name: 'a', role: 'admin', authMode: 'enforce' })).toBe(true);
 });
 
+test('an administrator can have account management removed explicitly', () => {
+  const session = {
+    role: 'admin',
+    userType: 'admin',
+    menuKeys: ['monitor', 'operations'],
+  } as PlatformSession;
+
+  expect(hasMenu(session, 'operations')).toBe(true);
+  expect(hasMenu(session, 'users')).toBe(false);
+});
+
 test('invalidates only the currently active rejected token', () => {
   const unauthorized = vi.fn();
   window.addEventListener(PLATFORM_UNAUTHORIZED_EVENT, unauthorized);