fix(client): fail closed on polling configuration drift

client/tests/ui/test_settings.py

@@ -68,6 +68,20 @@ class SettingsPageTests(unittest.TestCase):
         self.assertTrue(page.device_token.hasFocus())
         self.assertIn("首次保存", page.feedback.text())
 
+    def test_first_save_rejects_65_character_token_without_silent_truncation(self) -> None:
+        store = FakeStore()
+        page = SettingsPage(store)
+        page.show()
+        QTest.qWait(10)
+        self.fill(page)
+        invalid_token = TOKEN + "b"
+        page.device_token.setText(invalid_token)
+        page.save()
+        self.assertEqual(store.calls, [])
+        self.assertEqual(page.device_token.text(), invalid_token)
+        self.assertTrue(page.device_token.hasFocus())
+        self.assertIn("64 位", page.feedback.text())
+
     def test_visual_order_focuses_invalid_device_before_missing_token_or_adb(self) -> None:
         store = FakeStore()
         page = SettingsPage(store)
@@ -99,6 +113,20 @@ class SettingsPageTests(unittest.TestCase):
         self.assertNotIn(TOKEN, page.feedback.text())
         self.assertNotIn(TOKEN, page.token_status.text())
 
+    def test_existing_token_replacement_rejects_65_characters_without_store_write(self) -> None:
+        store = FakeStore()
+        page = SettingsPage(store, settings=self.existing_settings(), has_stored_device_token=True)
+        page.show()
+        QTest.qWait(10)
+        invalid_token = TOKEN + "b"
+        page.device_token.setText(invalid_token)
+        page.save()
+        # 零写入即表示已保存的原 token 未被替换。
+        self.assertEqual(store.calls, [])
+        self.assertEqual(page.device_token.text(), invalid_token)
+        self.assertTrue(page.device_token.hasFocus())
+        self.assertEqual(page.token_status.text(), "已保存")
+
     def test_failed_save_preserves_token_and_focuses_secret_field_without_echo(self) -> None:
         store = FakeStore(RuntimeError("must-not-appear-" + TOKEN))
         page = SettingsPage(store, settings=self.existing_settings(), has_stored_device_token=True)