feat(监控): 完善系统监控、登录状态与访问审计能力

frontend/src/runtime/appMetadata.test.ts

@@ -1,7 +1,7 @@
 import { afterEach, describe, expect, it, vi } from "vitest";
 import packageInfo from "../../package.json";
 import { clientRuntime } from "./clientRuntime";
-import { getAppMetadata } from "./appMetadata";
+import { getAppMetadata, getAppMetadataHeaders } from "./appMetadata";
 
 afterEach(() => {
   Reflect.deleteProperty(window, "__TAURI_INTERNALS__");
@@ -15,6 +15,7 @@ describe("client runtime", () => {
       commit: "local",
       channel: "local",
       clientType: "web",
+      clientSource: "ctms-web",
       platform: "web",
     });
     expect(clientRuntime.capabilities()).toEqual({
@@ -30,10 +31,26 @@ describe("client runtime", () => {
     Object.defineProperty(window, "__TAURI_INTERNALS__", { value: {}, configurable: true });
 
     expect(getAppMetadata().clientType).toBe("desktop");
+    expect(getAppMetadata().clientSource).toBe("ctms-desktop");
     expect(clientRuntime.capabilities().serverConfiguration).toBe(true);
     expect(clientRuntime.capabilities().secureSessionStorage).toBe(false);
   });
 
+  it("injects explicit CTMS client source headers for audit classification", () => {
+    expect(getAppMetadataHeaders()).toMatchObject({
+      "X-CTMS-Client-Type": "web",
+      "X-CTMS-Client-Source": "ctms-web",
+      "X-CTMS-Client-Version": packageInfo.version,
+      "X-CTMS-Client-Platform": "web",
+    });
+
+    Object.defineProperty(window, "__TAURI_INTERNALS__", { value: {}, configurable: true });
+    expect(getAppMetadataHeaders()).toMatchObject({
+      "X-CTMS-Client-Type": "desktop",
+      "X-CTMS-Client-Source": "ctms-desktop",
+    });
+  });
+
   it("accepts release build metadata only from the expected CI values", () => {
     vi.stubEnv("VITE_BUILD_CHANNEL", "release");
     vi.stubEnv("VITE_BUILD_COMMIT", "0123456789abcdef0123456789abcdef01234567");