🧪 补充 message 包单测：sender 兜底 + connect targetOrigin

根据 PR #1328 Copilot 评审意见，补充两个单测：
- SenderRuntime.getExtMessageSender() 在 sender 为 null/undefined/空对象时不崩溃并返回默认值
- WindowMessage.connect() 返回的连接 sendMessage 带 "*" targetOrigin

Author: CodFrm

packages/message/server.test.ts

@@ -540,6 +540,32 @@ describe("Server", () => {
       const extSender = capturedSender!.getExtMessageSender();
       expect(extSender.tabId).toBe(-1);
     });
+
+    it.concurrent("sender 为 null/undefined 时不崩溃并返回默认值", async () => {
+      // postMessage 通道（如 Offscreen→SW）传入空对象作为 sender，
+      // SenderRuntime.getExtMessageSender() 应该返回默认兜底值
+      const senderNull = new SenderRuntime(null as unknown as RuntimeMessageSender);
+      const extNull = senderNull.getExtMessageSender();
+      expect(extNull.windowId).toBe(-1);
+      expect(extNull.tabId).toBe(-1);
+      expect(extNull.frameId).toBeUndefined();
+      expect(extNull.documentId).toBeUndefined();
+
+      const senderUndefined = new SenderRuntime(undefined as unknown as RuntimeMessageSender);
+      const extUndefined = senderUndefined.getExtMessageSender();
+      expect(extUndefined.windowId).toBe(-1);
+      expect(extUndefined.tabId).toBe(-1);
+      expect(extUndefined.frameId).toBeUndefined();
+      expect(extUndefined.documentId).toBeUndefined();
+
+      // 空对象（ServiceWorkerMessageSend 实际传入的值）也应正常处理
+      const senderEmpty = new SenderRuntime({} as RuntimeMessageSender);
+      const extEmpty = senderEmpty.getExtMessageSender();
+      expect(extEmpty.windowId).toBe(-1);
+      expect(extEmpty.tabId).toBe(-1);
+      expect(extEmpty.frameId).toBeUndefined();
+      expect(extEmpty.documentId).toBeUndefined();
+    });
   });
 
   describe("Connect 功能测试", () => {

packages/message/window_message.test.ts

@@ -1,5 +1,10 @@
 import { describe, it, expect, beforeEach, vi, afterEach } from "vitest";
-import { ServiceWorkerMessageSend, ServiceWorkerClientMessage, type WindowMessageBody } from "./window_message";
+import {
+  ServiceWorkerMessageSend,
+  ServiceWorkerClientMessage,
+  WindowMessage,
+  type WindowMessageBody,
+} from "./window_message";
 import { Server } from "./server";
 import type { MessageConnect } from "./types";
 
@@ -160,6 +165,38 @@ describe("ServiceWorkerClientMessage", () => {
   });
 });
 
+describe("WindowMessage.connect", () => {
+  it("connect 返回的连接 sendMessage 应带 '*' targetOrigin", async () => {
+    // 模拟 target window，验证 postMessage 被调用时带 "*"
+    const targetPostMessage = vi.fn();
+    const sourceWindow = {
+      addEventListener: vi.fn(),
+    } as unknown as Window;
+    const targetWindow = {
+      postMessage: targetPostMessage,
+    } as unknown as Window;
+
+    const wm = new WindowMessage(sourceWindow, targetWindow);
+
+    const con = await wm.connect({ action: "test/connect", data: "init" });
+
+    // connect() 本身会调用一次 postMessage（发送 connect 消息）
+    expect(targetPostMessage).toHaveBeenCalledTimes(1);
+    expect(targetPostMessage).toHaveBeenCalledWith(expect.objectContaining({ type: "connect" }), "*");
+
+    targetPostMessage.mockClear();
+
+    // 通过返回的连接发送消息，也应该带 "*"
+    con.sendMessage({ action: "test/msg", data: "hello" });
+
+    expect(targetPostMessage).toHaveBeenCalledTimes(1);
+    expect(targetPostMessage).toHaveBeenCalledWith(
+      expect.objectContaining({ type: "connectMessage", data: { action: "test/msg", data: "hello" } }),
+      "*"
+    );
+  });
+});
+
 describe("ServiceWorkerMessageSend ↔ ServiceWorkerClientMessage 双向通信", () => {
   // 辅助函数: 将两端连接起来，模拟 postMessage 通道
   function createWiredPair() {