tempmail_sdk 1.3.3 → 1.3.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4c42b7ddf14c615d07554a2d6aa7efb1954cadad4ecef1f052bb6af5fb22f2a8
-  data.tar.gz: 46ab91c0e8946782a83c60c020feeebf840e625be330839d62c69b1c8f1ab5bc
+  metadata.gz: d9633959dc0f47ae3b8b30e6cb69db5e16976773039a186303e47701efd37a6b
+  data.tar.gz: 50eed70cbb31235fef5d96ea9d2288cc8d099568bd35946e752875d2c945291d
 SHA512:
-  metadata.gz: 175bf0d04d31f7db48739b559af1eba64bdc0c09b51bd18e90124fbf0f05727e4f2586157f714e6c76ee693d3b29725756c89f002fe9a484c4fc7bf969d26ba4
-  data.tar.gz: 4052cdcfa7f88faf5eff0461a40e427eea368a86ca976fdd7dc25de4900d638f1479401ae98240936ffa489af05cd17446fcec7e4354c9b8debd896c79f2de1c
+  metadata.gz: b54a192368aa851e240a34c91c7e8f2b6fc5b0d5587f6091fabd79f54b89bf7f29dc51c13c57987f499c65b570084aa0754838fbe263d7fbc8d564b5ce2e1bc2
+  data.tar.gz: f630396b6757e1dd049a931141f946a99c92bcf28a28b3aeb8c78d69767f1b5c383a580cfefdc1ade984cbbaec051173ec82f904dff11ee9b5a8983dec03d7ea

data/lib/tempmail_sdk/providers/altmails.rb

@@ -0,0 +1,99 @@
+# frozen_string_literal: true
+
+require "uri"
+
+module TempmailSdk
+  module Providers
+    # altmails.com 渠道实现
+    #
+    # 流程：
+    #   1. GET / 建立 session，从 HTML inline script 提取 CSRF token（'_token': 'xxx'）
+    #   2. GET /random-email-address 获取随机邮箱地址（纯文本响应）
+    #   3. 收信：重新建立 session 获取新 CSRF，POST /fetch-emails/{email} 获取邮件列表
+    #   4. GET /view/{id} 获取每封邮件正文 HTML
+    module Altmails
+      CHANNEL = "altmails"
+      BASE_URL = "https://tempmail.altmails.com"
+
+      BROWSER_HEADERS = {
+        "Accept" => "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8",
+        "Accept-Language" => "en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7",
+        "User-Agent" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
+      }.freeze
+
+      CSRF_RE = /'_token'\s*:\s*'([^']+)'/.freeze
+
+      module_function
+
+      # 访问首页提取 CSRF token
+      # @return [String]
+      def fetch_csrf
+        resp = Http.get("#{BASE_URL}/", headers: BROWSER_HEADERS)
+        resp.raise_for_status
+        m = resp.body.match(CSRF_RE)
+        raise "altmails: 未能从首页提取 CSRF token" unless m
+
+        m[1]
+      end
+
+      # 创建临时邮箱
+      # @return [EmailInfo]
+      def generate_email
+        csrf = fetch_csrf
+        resp = Http.get("#{BASE_URL}/random-email-address",
+                        headers: BROWSER_HEADERS.merge("Referer" => "#{BASE_URL}/"))
+        resp.raise_for_status
+        email = resp.body.strip
+        raise "altmails: 邮箱地址无效: #{email.inspect}" if email.empty? || !email.include?("@")
+
+        EmailInfo.new(channel: CHANNEL, email: email, token: csrf)
+      end
+
+      # 获取邮件列表
+      # @param email [String]
+      # @param token [String] CSRF token（收信时重新获取新 session）
+      # @return [Array<Email>]
+      def get_emails(email, token)
+        _ = token
+        csrf = fetch_csrf
+        fetch_url = "#{BASE_URL}/fetch-emails/#{URI.encode_www_form_component(email)}"
+        form = "_token=#{URI.encode_www_form_component(csrf)}"
+        resp = Http.post(fetch_url,
+                         headers: {
+                           "Accept" => "application/json, text/plain, */*",
+                           "Accept-Language" => "en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7",
+                           "Content-Type" => "application/x-www-form-urlencoded",
+                           "Origin" => BASE_URL,
+                           "Referer" => "#{BASE_URL}/",
+                           "User-Agent" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36",
+                           "X-Requested-With" => "XMLHttpRequest"
+                         },
+                         body: form)
+        resp.raise_for_status
+        items = begin
+          resp.json
+        rescue StandardError
+          []
+        end
+        return [] unless items.is_a?(Array)
+
+        items.filter_map do |item|
+          next unless item.is_a?(Hash)
+
+          item["to"] = email
+          mail_id = item["id"].to_s
+          unless mail_id.empty?
+            begin
+              vr = Http.get("#{BASE_URL}/view/#{URI.encode_www_form_component(mail_id)}",
+                            headers: BROWSER_HEADERS.merge("Referer" => "#{BASE_URL}/"))
+              item["html_body"] = vr.body if vr.ok?
+            rescue StandardError
+              # 忽略正文获取失败
+            end
+          end
+          Normalize.normalize_email(item, email)
+        end
+      end
+    end
+  end
+end

data/lib/tempmail_sdk/providers/apihz.rb

@@ -0,0 +1,138 @@
+# frozen_string_literal: true
+
+require "base64"
+require "json"
+require "uri"
+
+module TempmailSdk
+  module Providers
+    # apihz（接口盒子）渠道实现
+    #
+    # 需 id/key 凭据，邮箱有效期 10 分钟。读信须携带创建时的 pwd，
+    # 故 token 用 base64(JSON{mail,pwd}) 编码保存。
+    module Apihz
+      CHANNEL = "apihz"
+      BASE_URL = "https://cn.apihz.cn"
+      TOK_PREFIX = "apihz1:"
+      # 官方公共账号（共享频次），未配置自有 id/key 时使用
+      PUBLIC_ID = "88888888"
+      PUBLIC_KEY = "88888888"
+      DOMAINS = %w[apimail.email apimail.vip].freeze
+
+      HEADERS = {
+        "Accept" => "application/json",
+        "User-Agent" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 " \
+                       "(KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
+      }.freeze
+
+      module_function
+
+      # 读取 id/key：优先环境变量 APIHZ_ID/APIHZ_KEY，回退官方公共账号
+      def credentials
+        id = ENV["APIHZ_ID"].to_s.strip
+        key = ENV["APIHZ_KEY"].to_s.strip
+        id = PUBLIC_ID if id.empty?
+        key = PUBLIC_KEY if key.empty?
+        [id, key]
+      end
+
+      # 生成随机本地部分
+      def random_local(length = 10)
+        chars = ("a".."z").to_a + ("0".."9").to_a
+        Array.new(length) { chars.sample }.join
+      end
+
+      # 生成 12 位随机密码
+      def random_password
+        chars = ("A".."Z").to_a + ("a".."z").to_a + ("0".."9").to_a
+        Array.new(12) { chars.sample }.join
+      end
+
+      # token 编码：前缀 + base64(JSON{mail,pwd})
+      def encode_token(mail, pwd)
+        raw = JSON.generate("mail" => mail, "pwd" => pwd)
+        TOK_PREFIX + Base64.strict_encode64(raw)
+      end
+
+      # token 解码
+      def decode_token(token)
+        raise "apihz: 无效 token" unless token.to_s.start_with?(TOK_PREFIX)
+
+        raw = Base64.strict_decode64(token[TOK_PREFIX.length..])
+        o = JSON.parse(raw)
+        mail = o["mail"].to_s.strip
+        pwd = o["pwd"].to_s.strip
+        raise "apihz: 无效 token" if mail.empty? || pwd.empty?
+
+        [mail, pwd]
+      rescue ArgumentError, JSON::ParserError
+        raise "apihz: 无效 token"
+      end
+
+      # 创建临时邮箱
+      # GET /api/mail/mailcache.php?id=&key=&domain=&name=&pwd=&buytype=0
+      # @return [EmailInfo]
+      def generate_email
+        id, key = credentials
+        domain = DOMAINS.sample
+        name = random_local
+        pwd = random_password
+
+        url = "#{BASE_URL}/api/mail/mailcache.php?" \
+              "id=#{URI.encode_www_form_component(id)}&key=#{URI.encode_www_form_component(key)}" \
+              "&domain=#{URI.encode_www_form_component(domain)}" \
+              "&name=#{URI.encode_www_form_component(name)}" \
+              "&pwd=#{URI.encode_www_form_component(pwd)}&buytype=0"
+
+        resp = Http.get(url, headers: HEADERS)
+        resp.raise_for_status
+        data = resp.json
+        raise "apihz: 创建邮箱失败 #{data['msg']}" if data["code"] != 200 || data["mail"].to_s.empty?
+
+        final_pwd = data["pwd"].to_s
+        final_pwd = pwd if final_pwd.empty?
+
+        EmailInfo.new(channel: CHANNEL, email: data["mail"], token: encode_token(data["mail"], final_pwd))
+      end
+
+      # 获取邮件列表
+      # GET /api/mail/mailgetlist.php?id=&key=&mail=&pwd=&page=1
+      # @param token [String]
+      # @return [Array<Email>]
+      def get_emails(token)
+        mail, pwd = decode_token(token)
+        id, key = credentials
+
+        url = "#{BASE_URL}/api/mail/mailgetlist.php?" \
+              "id=#{URI.encode_www_form_component(id)}&key=#{URI.encode_www_form_component(key)}" \
+              "&mail=#{URI.encode_www_form_component(mail)}" \
+              "&pwd=#{URI.encode_www_form_component(pwd)}&page=1"
+
+        resp = Http.get(url, headers: HEADERS)
+        resp.raise_for_status
+        data = resp.json
+        return [] if data["code"] != 200
+
+        list = data["data"]
+        return [] unless list.is_a?(Array) && !list.empty?
+
+        list.map do |msg|
+          from_addr = msg["frommail"].to_s
+          from_addr = msg["fromname"].to_s if from_addr.empty?
+          date_val = msg["time2"].to_s
+          date_val = msg["time1"].to_s if date_val.empty?
+          Normalize.normalize_email({
+            "id" => msg["time1"].to_s,
+            "from" => from_addr,
+            "to" => mail,
+            "subject" => msg["subject"].to_s,
+            "text" => msg["content"].to_s,
+            "html" => msg["content"].to_s,
+            "date" => date_val,
+            "isRead" => false
+          }, mail)
+        end
+      end
+    end
+  end
+end

data/lib/tempmail_sdk/providers/awamail.rb

@@ -0,0 +1,95 @@
+# frozen_string_literal: true
+
+require "json"
+
+module TempmailSdk
+  module Providers
+    # awamail.com 渠道实现
+    #
+    # 流程：
+    #   1. POST /welcome/change_mailbox（空 body）不跟随重定向，从 Set-Cookie 提取 awamail_session
+    #   2. GET /welcome/get_emails 携带 Cookie 获取邮件列表
+    module Awamail
+      CHANNEL = "awamail"
+      BASE_URL = "https://awamail.com/welcome"
+
+      HEADERS = {
+        "Accept" => "application/json, text/javascript, */*; q=0.01",
+        "Accept-Language" => "zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6",
+        "Cache-Control" => "no-cache",
+        "DNT" => "1",
+        "Origin" => "https://awamail.com",
+        "Pragma" => "no-cache",
+        "Referer" => "https://awamail.com/?lang=zh",
+        "User-Agent" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 " \
+                       "(KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0",
+        "X-Requested-With" => "XMLHttpRequest"
+      }.freeze
+
+      module_function
+
+      # 创建临时邮箱
+      # POST /welcome/change_mailbox，从 Set-Cookie 提取 awamail_session
+      # @return [EmailInfo]
+      def generate_email
+        resp = Http.post("#{BASE_URL}/change_mailbox",
+                         headers: HEADERS.merge("Content-Length" => "0"))
+        # 不跟随重定向，直接从响应提取 cookie
+        session_cookie = resp.cookie_value("awamail_session")
+        raise "awamail: 未能提取 awamail_session cookie" if session_cookie.to_s.empty?
+
+        cookie_str = "awamail_session=#{session_cookie}"
+
+        data = begin
+          resp.json
+        rescue StandardError
+          {}
+        end
+
+        email_addr = data.is_a?(Hash) ? data.dig("data", "email_address").to_s : ""
+        if email_addr.empty?
+          # 若 POST 响应无邮箱，尝试 GET get_emails 获取
+          gr = Http.get("#{BASE_URL}/get_emails",
+                        headers: HEADERS.merge("Cookie" => cookie_str))
+          gr.raise_for_status
+          gd = gr.json
+          email_addr = gd.is_a?(Hash) ? gd.dig("data", "email_address").to_s : ""
+        end
+
+        raise "awamail: 未能获取邮箱地址" if email_addr.empty?
+
+        info = EmailInfo.new(channel: CHANNEL, email: email_addr, token: cookie_str)
+        if data.is_a?(Hash)
+          info.expires_at = data.dig("data", "expired_at").to_s
+          info.created_at = data.dig("data", "created_at").to_s
+        end
+        info
+      end
+
+      # 获取邮件列表
+      # GET /welcome/get_emails，携带 Cookie
+      # @param token [String] awamail_session cookie 字符串
+      # @param email [String]
+      # @return [Array<Email>]
+      def get_emails(token, email)
+        resp = Http.get("#{BASE_URL}/get_emails",
+                        headers: HEADERS.merge(
+                          "Cookie" => token,
+                          "X-Requested-With" => "XMLHttpRequest"
+                        ))
+        resp.raise_for_status
+        data = resp.json
+        return [] unless data.is_a?(Hash) && data["success"]
+
+        emails_raw = data.dig("data", "emails")
+        return [] unless emails_raw.is_a?(Array)
+
+        emails_raw.filter_map do |raw|
+          next unless raw.is_a?(Hash)
+
+          Normalize.normalize_email(raw, email)
+        end
+      end
+    end
+  end
+end

data/lib/tempmail_sdk/providers/best_temp_mail.rb

@@ -0,0 +1,77 @@
+# frozen_string_literal: true
+
+require "json"
+require "securerandom"
+
+module TempmailSdk
+  module Providers
+    # best-temp-mail.com 渠道实现
+    #
+    # 纯 JSON REST API，无需认证，无需 Session。
+    # 创建邮箱: POST /api/v3/createEmail  body: {"intToken":"<uuid>"}
+    # 获取邮件: POST /api/v3/getEmailList  body: {"address":"...","id":"...","intToken":"...","update_tag":"..."}
+    module BestTempMail
+      CHANNEL = "best-temp-mail"
+      API_BASE = "https://best-temp-mail.com/api/v3"
+
+      HEADERS = {
+        "Accept" => "application/json, text/plain, */*",
+        "Accept-Language" => "zh-CN,zh;q=0.9,en;q=0.8",
+        "Content-Type" => "application/json",
+        "Origin" => "https://best-temp-mail.com",
+        "Referer" => "https://best-temp-mail.com/",
+        "User-Agent" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 " \
+                       "(KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
+      }.freeze
+
+      module_function
+
+      # 创建临时邮箱
+      # @return [EmailInfo]
+      def generate_email
+        int_token = SecureRandom.uuid
+        resp = Http.post("#{API_BASE}/createEmail",
+                         headers: HEADERS,
+                         json: { "intToken" => int_token })
+        resp.raise_for_status
+        data = resp.json
+        raise "best-temp-mail: 创建邮箱失败 status=#{data['status']}" \
+          if data["status"] != "success" || data.dig("data", "address").to_s.empty?
+
+        d = data["data"]
+        token = JSON.generate("intToken" => int_token, "id" => d["id"].to_s, "update_tag" => d["update_tag"].to_s)
+        EmailInfo.new(channel: CHANNEL, email: d["address"], token: token)
+      end
+
+      # 获取邮件列表
+      # @param email [String]
+      # @param token [String] JSON 编码的 intToken/id/update_tag
+      # @return [Array<Email>]
+      def get_emails(email, token)
+        tkn = JSON.parse(token)
+        resp = Http.post("#{API_BASE}/getEmailList",
+                         headers: HEADERS,
+                         json: {
+                           "address" => email,
+                           "id" => tkn["id"].to_s,
+                           "intToken" => tkn["intToken"].to_s,
+                           "update_tag" => tkn["update_tag"].to_s
+                         })
+        resp.raise_for_status
+        data = resp.json
+        return [] unless data.dig("data", "hasNewEmail")
+
+        emails_raw = data.dig("data", "emails")
+        return [] unless emails_raw.is_a?(Array)
+
+        emails_raw.filter_map do |raw|
+          next unless raw.is_a?(Hash)
+
+          Normalize.normalize_email(raw, email)
+        end
+      rescue JSON::ParserError
+        raise "best-temp-mail: 无效的 token 格式"
+      end
+    end
+  end
+end

data/lib/tempmail_sdk/providers/chatgpt_org_uk.rb

@@ -0,0 +1,129 @@
+# frozen_string_literal: true
+
+require "json"
+require "uri"
+
+module TempmailSdk
+  module Providers
+    # chatgpt.org.uk 渠道实现
+    #
+    # 流程：
+    #   1. GET /api/domains/public 获取可用域名列表（过滤 is_active=1）
+    #   2. 本地生成随机用户名，拼接邮箱地址
+    #   3. POST /api/inbox-token {"email":"..."} 创建收件箱，返回 inbox JWT 和 gm_sid cookie
+    #   4. GET /api/emails?email=... 携带 x-inbox-token 和 gm_sid cookie 获取邮件
+    # token 格式: JSON {"gmSid":"...","inbox":"..."}
+    module ChatgptOrgUk
+      CHANNEL = "chatgpt-org-uk"
+      API_BASE = "https://mail.chatgpt.org.uk/api"
+      USERNAME_CHARS = ("a".."z").to_a + ("0".."9").to_a
+
+      HEADERS = {
+        "Accept" => "*/*",
+        "DNT" => "1",
+        "Origin" => "https://mail.chatgpt.org.uk",
+        "Referer" => "https://mail.chatgpt.org.uk/zh/",
+        "sec-fetch-dest" => "empty",
+        "sec-fetch-mode" => "cors",
+        "sec-fetch-site" => "same-origin",
+        "User-Agent" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 " \
+                       "(KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
+      }.freeze
+
+      module_function
+
+      # 生成随机用户名
+      def random_username(length = 10)
+        Array.new(length) { USERNAME_CHARS.sample }.join
+      end
+
+      # 获取可用域名列表
+      def fetch_domains
+        resp = Http.get("#{API_BASE}/domains/public", headers: HEADERS)
+        resp.raise_for_status
+        data = resp.json
+        raise "chatgpt-org-uk: 获取域名失败" unless data["success"]
+
+        domains = data.dig("data", "domains") || []
+        active = domains.select { |d| d["is_active"] == 1 && !d["domain_name"].to_s.empty? }
+                        .map { |d| d["domain_name"] }
+        raise "chatgpt-org-uk: 无可用域名" if active.empty?
+
+        active
+      end
+
+      # 创建收件箱，返回 [inbox_token, gm_sid]
+      def create_inbox(email)
+        resp = Http.post("#{API_BASE}/inbox-token",
+                         headers: HEADERS.merge("Content-Type" => "application/json"),
+                         json: { "email" => email })
+        resp.raise_for_status
+        gm_sid = resp.cookie_value("gm_sid").to_s
+        data = resp.json
+        raise "chatgpt-org-uk: inbox-token 响应缺少 token" \
+          unless data["success"] && !data.dig("auth", "token").to_s.empty?
+
+        [data.dig("auth", "token"), gm_sid]
+      end
+
+      # 创建临时邮箱
+      # @return [EmailInfo]
+      def generate_email
+        domains = fetch_domains
+        domain = domains.sample
+        email = "#{random_username}@#{domain}"
+        inbox, gm_sid = create_inbox(email)
+        packed = JSON.generate("gmSid" => gm_sid, "inbox" => inbox)
+        EmailInfo.new(channel: CHANNEL, email: email, token: packed)
+      end
+
+      # 获取邮件列表
+      # @param email [String]
+      # @param token [String] JSON {"gmSid":"...","inbox":"..."}
+      # @return [Array<Email>]
+      def get_emails(email, token)
+        parsed = JSON.parse(token)
+        gm_sid = parsed["gmSid"].to_s
+        inbox = parsed["inbox"].to_s
+        raise "chatgpt-org-uk: inbox token 缺失" if inbox.empty?
+
+        # gm_sid 丢失时重新创建 session
+        if gm_sid.empty?
+          inbox, gm_sid = create_inbox(email)
+        end
+
+        fetch_emails_with(email, inbox, gm_sid)
+      rescue JSON::ParserError
+        raise "chatgpt-org-uk: 无效的 token 格式"
+      end
+
+      # 实际拉取邮件，401/403 时重建 session 重试一次
+      def fetch_emails_with(email, inbox, gm_sid)
+        encoded = URI.encode_www_form_component(email)
+        resp = Http.get("#{API_BASE}/emails?email=#{encoded}",
+                        headers: HEADERS.merge(
+                          "Cookie" => "gm_sid=#{gm_sid}",
+                          "x-inbox-token" => inbox
+                        ))
+        if [401, 403].include?(resp.status_code)
+          new_inbox, new_sid = create_inbox(email)
+          resp = Http.get("#{API_BASE}/emails?email=#{encoded}",
+                          headers: HEADERS.merge(
+                            "Cookie" => "gm_sid=#{new_sid}",
+                            "x-inbox-token" => new_inbox
+                          ))
+        end
+        resp.raise_for_status
+        data = resp.json
+        raise "chatgpt-org-uk: 获取邮件失败" unless data["success"]
+
+        emails_raw = data.dig("data", "emails") || []
+        emails_raw.filter_map do |raw|
+          next unless raw.is_a?(Hash)
+
+          Normalize.normalize_email(raw, email)
+        end
+      end
+    end
+  end
+end

data/lib/tempmail_sdk/providers/disposablemail.rb

@@ -0,0 +1,125 @@
+# frozen_string_literal: true
+
+require "json"
+
+module TempmailSdk
+  module Providers
+    # disposablemail.com 渠道实现
+    #
+    # 流程：
+    #   1. GET / 获取 PHPSESSID cookie + HTML 中的 CSRF token（CSRF="xxx"）
+    #   2. GET /index/index?csrf_token={csrf} 创建邮箱，返回 {"email":"user@domain.com"}
+    #   3. GET /index/refresh 携带 session cookie 获取邮件列表（捷克语字段: predmet/od/kdy/precteno）
+    #   4. GET /email/id/{id} 获取邮件正文 HTML
+    # token 存储 "PHPSESSID=xxx" cookie 字符串。
+    module Disposablemail
+      CHANNEL = "disposablemail"
+      BASE_URL = "https://www.disposablemail.com"
+
+      CSRF_RE = /CSRF="([^"]+)"/.freeze
+
+      BROWSER_HEADERS = {
+        "Accept" => "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8",
+        "Accept-Language" => "en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7",
+        "User-Agent" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 " \
+                       "(KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
+      }.freeze
+
+      AJAX_HEADERS = {
+        "Accept" => "application/json, text/javascript, */*; q=0.01",
+        "Accept-Language" => "en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7",
+        "Referer" => "#{BASE_URL}/",
+        "User-Agent" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 " \
+                       "(KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36",
+        "X-Requested-With" => "XMLHttpRequest"
+      }.freeze
+
+      module_function
+
+      # 提取 Set-Cookie 中的 PHPSESSID
+      def extract_session(resp)
+        resp.set_cookies.each do |line|
+          first = line.split(";", 2).first.to_s.strip
+          k, v = first.split("=", 2)
+          return "#{k}=#{v}" if k == "PHPSESSID"
+        end
+        ""
+      end
+
+      # 创建临时邮箱
+      # @return [EmailInfo]
+      def generate_email
+        r1 = Http.get("#{BASE_URL}/", headers: BROWSER_HEADERS)
+        r1.raise_for_status
+        m = r1.body.match(CSRF_RE)
+        raise "disposablemail: 未能从首页提取 CSRF token" unless m
+
+        csrf = m[1]
+        session_cookie = extract_session(r1)
+
+        r2 = Http.get("#{BASE_URL}/index/index?csrf_token=#{csrf}",
+                      headers: AJAX_HEADERS.merge(session_cookie.empty? ? {} : { "Cookie" => session_cookie }))
+        r2.raise_for_status
+
+        # 若 index 阶段刷新了 PHPSESSID，改用新的
+        new_sess = extract_session(r2)
+        session_cookie = new_sess unless new_sess.empty?
+
+        data = JSON.parse(r2.body)
+        email = data["email"].to_s.strip
+        raise "disposablemail: 邮箱地址无效: #{email.inspect}" if email.empty? || !email.include?("@")
+
+        EmailInfo.new(channel: CHANNEL, email: email, token: session_cookie)
+      end
+
+      # 获取邮件列表
+      # @param email [String]
+      # @param token [String] PHPSESSID cookie 字符串
+      # @return [Array<Email>]
+      def get_emails(email, token)
+        raise "disposablemail: 邮箱地址为空" if email.to_s.strip.empty?
+
+        headers = AJAX_HEADERS.dup
+        headers = headers.merge("Cookie" => token) unless token.to_s.empty?
+
+        resp = Http.get("#{BASE_URL}/index/refresh", headers: headers)
+        resp.raise_for_status
+        trimmed = resp.body.strip
+        return [] if trimmed == "0" || trimmed.empty? || trimmed == "[]"
+
+        list = begin
+          JSON.parse(trimmed)
+        rescue JSON::ParserError
+          []
+        end
+        return [] unless list.is_a?(Array) && !list.empty?
+
+        list.map do |item|
+          mail_id = item["id"].to_s
+          html_body = fetch_body(mail_id, token)
+          Normalize.normalize_email({
+            "id" => mail_id,
+            "from" => item["od"].to_s,
+            "to" => email,
+            "subject" => item["predmet"].to_s,
+            "html" => html_body,
+            "date" => item["kdy"].to_s,
+            "isRead" => item["precteno"] == "precteno"
+          }, email)
+        end
+      end
+
+      # 获取单封邮件 HTML 正文
+      def fetch_body(mail_id, token)
+        return "" if mail_id.empty?
+
+        headers = AJAX_HEADERS.dup
+        headers = headers.merge("Cookie" => token) unless token.to_s.empty?
+        resp = Http.get("#{BASE_URL}/email/id/#{mail_id}", headers: headers)
+        resp.ok? ? resp.body : ""
+      rescue StandardError
+        ""
+      end
+    end
+  end
+end