@danceiny/gotry 0.0.1-rc.10

package/ts/capabilities/session/adapters/meituan-local.ts

@@ -0,0 +1,70 @@
+/**
+ * 美团本地适配器骨架(民宿/门票——官方通道盲区,RFC §3.1)。
+ *
+ * 实测边界(2026-08-28 tick):匿名实例 hotel.meituan.com 直接 403——三站中最强反爬,
+ * **登录态是硬前置**(founder 纠偏「不能匿名实例」在美团侧是 403 级事实,非策略偏好)。
+ * 本骨架:entry 城市拼音表 + 登录票据名单 + networkHint 占位;live 接口形状待用户登录态
+ * (profile 内用户自登美团)后由心跳轮实测回填——在此之前 parse 返回空、verdict=miss。
+ */
+
+/** 城市拼音表(美团 URL 路径段;与 ctrip-flight 城市码表同界:词表外 unresolved 不猜) */
+const CITY_SLUGS: Record<string, string> = {
+  上海: 'shanghai', 北京: 'beijing', 广州: 'guangzhou', 深圳: 'shenzhen', 成都: 'chengdu',
+  昆明: 'kunming', 大理: 'dali', 丽江: 'lijiang', 西安: 'xian', 杭州: 'hangzhou',
+  三亚: 'sanya', 厦门: 'xiamen', 重庆: 'chongqing', 青岛: 'qingdao', 长沙: 'changsha',
+  武汉: 'wuhan', 南京: 'nanjing', 郑州: 'zhengzhou', 贵阳: 'guiyang', 桂林: 'guilin',
+}
+
+export const SITE_DOMAIN = 'meituan.com'
+/** 登录票据 cookie 名单(公开常识:lt=login ticket/u=uid/token;登录后校准,同 ctrip 侧做法) */
+export const LOGIN_COOKIE_NAMES = ['lt', 'u', 'token', 'n']
+
+export type MeituanVertical = 'hotel' | 'minsu'
+
+export interface MeituanEntry {
+  ok: boolean
+  url?: string
+  unresolved?: string[]
+}
+
+export function buildMeituanEntry(city: string, vertical: MeituanVertical, keyword?: string): MeituanEntry {
+  const slug = CITY_SLUGS[city]
+  if (!slug) return { ok: false, unresolved: [city] }
+  const base = vertical === 'hotel' ? `https://hotel.meituan.com/${slug}/` : `https://minsu.meituan.com/${slug}/`
+  return { ok: true, url: keyword ? base + `?q=${encodeURIComponent(keyword)}` : base }
+}
+
+/** networkHint 占位:登录态实测后回填真实搜索接口 pattern(当前为空=嗅探层不命中,a11y 兜底接管) */
+export const NETWORK_HINTS: RegExp[] = []
+
+export interface MeituanListingOption {
+  name: string
+  price: number
+  /** 元数据行(位置/评分/房型,来自 a11y 条目) */
+  meta?: string
+}
+
+/** XHR JSON 解析占位:接口形状实测回填前恒返空(调用方走 a11y 兜底) */
+export function parseMeituanSearch(_body: string): MeituanListingOption[] {
+  void _body
+  return []
+}
+
+/**
+ * a11y 兜底:从快照条目抽「名称+价格」候选(纯函数;供 extract.ts 条目流消费)。
+ * 形状规则:名称=非空 heading/listitem/link;价格=条目名内 ¥\d+(宽松元级);不做语义猜测。
+ */
+export function extractListings(entries: Array<{ role: string; name: string }>, opts: { max?: number } = {}): MeituanListingOption[] {
+  const out: MeituanListingOption[] = []
+  const roles = new Set(['heading', 'listitem', 'link', 'article'])
+  for (const e of entries) {
+    if (out.length >= (opts.max ?? 30)) break
+    if (!roles.has(e.role) || !e.name) continue
+    const pm = /¥\s*(\d+)/.exec(e.name)
+    if (!pm) continue
+    const name = e.name.replace(/¥\s*\d+.*$/, '').trim().slice(0, 80)
+    if (!name) continue
+    out.push({ name, price: Number(pm[1]) })
+  }
+  return out
+}

package/ts/capabilities/session/extract.ts

@@ -0,0 +1,54 @@
+/**
+ * a11y 快照兜底抽取器(RFC §2.3 第②层:站点无干净 XHR JSON 时,从可访问性树快照抽结构化条目)。
+ * 纯函数:输入 Playwright ariaSnapshot/domSnapshot 文本,输出归一化条目(role/name/ref),
+ * 供确定性规则或 LLM 按 schema 消费;不做任何页面交互。
+ *
+ * 辑律(ADR-12 同款边界):抽取只认结构(行首 role 与缩进),不做开放式语义猜测;
+ * 页面文本是不可信输入(RFC §3.5)——本层只归形状,语义判定在上游 schema 处。
+ */
+
+export interface A11yEntry {
+  /** 行首 role,如 button / textbox / link / heading / listitem */
+  role: string
+  /** 括号内 accessible name(去引号,截断 200) */
+  name: string
+  /** 快照行号(0 基,回指原快照) */
+  line: number
+}
+
+/**
+ * Playwright aria snapshot 行形如:
+ *   `- button "搜索" [ref=s1e5]`
+ *   `- heading "上海到丽江" [level=1]`
+ * 提取 role/name;无 name 的行(name='')保留占位(计数/结构比对仍可用)。
+ */
+export function extractA11yEntries(snapshotText: string, opts: { maxEntries?: number } = {}): A11yEntry[] {
+  const cap = opts.maxEntries ?? 500
+  const out: A11yEntry[] = []
+  const lines = snapshotText.split('\n')
+  for (let i = 0; i < lines.length && out.length < cap; i++) {
+    const m = /^[\s*-]*\s*([a-zA-Z][\w-]*)(?:\s+"((?:[^"\\]|\\.)*)")?/.exec(lines[i] ?? '')
+    if (!m) continue
+    const name = (m[2] ?? '').replace(/\\"/g, '"').slice(0, 200)
+    out.push({ role: m[1]!.toLowerCase(), name, line: i })
+  }
+  return out
+}
+
+/** DOM 提交件过滤入口(RFC §3.3-②):从条目集中剔除命中提交黑名单的可交互件,返回保留集 */
+export function filterSubmitEntries<T extends { role: string; name: string }>(entries: T[], isSubmit: (name: string) => boolean): T[] {
+  const interactive = new Set(['button', 'link', 'menuitem', 'option'])
+  return entries.filter((e) => !(interactive.has(e.role) && isSubmit(e.name)))
+}
+
+/** 名称相似度粗筛(自愈定位的候选排序底座;0=不同串,1=包含) */
+export function nameAffinity(a: string, b: string): number {
+  const x = a.trim(); const y = b.trim()
+  if (!x || !y) return 0
+  if (x === y) return 1
+  if (x.includes(y) || y.includes(x)) return 0.8
+  const sa = new Set(x); const sb = new Set(y)
+  let common = 0
+  for (const ch of sa) if (sb.has(ch)) common += 1
+  return common / Math.max(sa.size, sb.size)
+}

package/ts/capabilities/session/read-guard.ts

@@ -0,0 +1,141 @@
+/**
+ * ReadGuard:会话检索面的只读物理隔离(RFC user-session-data-rfc.md §3.3)。
+ *
+ * 写不是「被禁止的行为」,是「不存在的原语」——WriteGate(L0-L4)的检索态前置:
+ *   ① 网络层:route 拦截——命中硬支付模式(任意方法)或写方法+写URL模式 → abort + 审计落盘;
+ *   ② DOM 层:提交类按钮文本黑名单,从快照/断言文本中剔除(模型看不到可点的提交件);
+ *   ③ fail-closed:guard 未装上,session transport 不允许导航(openSession 装不上即整会话失败)。
+ *
+ * 审计:append-only JSONL(session-incidents.jsonl,对齐 incident-log 惯例),隔离 stateRoot。
+ * 注意:搜索接口多为 POST(如携程 batchSearch),因此写判定必须「方法 × URL 模式」双因子,
+ * 不能一刀切禁 POST——batchSearch 不含写词,放行。
+ */
+
+import { mkdirSync, appendFileSync } from 'node:fs'
+import { dirname } from 'node:path'
+
+/** 硬支付模式:任意方法(含 GET)都视为写——进支付/收银面本身就是风险 */
+const HARD_PAY_RE = /\/(pay|payment|cashier)(\/|\?|$)/i
+/** 驼峰复合写词(OTA 常见 /submitOrder、/createOrder):段式正则漏接,单列 */
+const WRITE_COMPOUND_RE = /(submitorder|createorder|placeorder|cancelorder|refundorder|orderconfirm|orderpay|confirmpay)/i
+/** 写词 URL 模式:仅在写方法(POST/PUT/DELETE/PATCH)下触发 */
+const WRITE_URL_RE = /\/(order|orders|submit|trade|booking|book|purchase|buy|create|cancel|refund)(\/|\?|$)/i
+const WRITE_METHODS = new Set(['POST', 'PUT', 'DELETE', 'PATCH'])
+/** DOM 提交件文本黑名单(§3.3-②):命中即从可交互面剔除 */
+export const SUBMIT_TEXT_RE = /下单|去支付|支付|预订|订票|购买|提交订单|确认订单/
+
+/** 网络层写判定(纯函数,测试锚点) */
+export function classifyRequest(method: string, url: string): 'allow' | 'block' {
+  if (HARD_PAY_RE.test(url) || WRITE_COMPOUND_RE.test(url)) return 'block'
+  if (WRITE_METHODS.has(method.toUpperCase()) && WRITE_URL_RE.test(url)) return 'block'
+  return 'allow'
+}
+
+/** DOM 层提交件过滤(纯函数,测试锚点):true=剔除 */
+export function isSubmitText(text: string): boolean {
+  return SUBMIT_TEXT_RE.test(text ?? '')
+}
+
+export interface GuardAuditEntry {
+  ts: string
+  kind: 'blocked-write-request'
+  method: string
+  url: string
+}
+
+export interface ReadGuardHandle {
+  /** 被拦截的写请求数(测试断言锚点) */
+  blockedCount(): number
+  /** 经手的请求总数 */
+  requestCount(): number
+}
+
+export interface RoutableContext {
+  route(glob: string, handler: (route: { request(): { method(): string; url(): string }; abort(code?: string): Promise<void>; continue(): Promise<void> }) => Promise<void>): Promise<void>
+}
+
+/**
+ * 装上网络层守卫(fail-closed 的「closed」在调用方:openSession 装不上 guard 即失败,不给无 guard 的会话)。
+ * 审计落 auditPath(JSONL append);auditPath 缺省不落盘(仅内存计数)。
+ */
+export async function attachReadGuard(ctx: RoutableContext, auditPath?: string): Promise<ReadGuardHandle> {
+  let blocked = 0
+  let total = 0
+  await ctx.route('**/*', async (route) => {
+    const req = route.request()
+    total += 1
+    const verdict = classifyRequest(req.method(), req.url())
+    if (verdict === 'block') {
+      blocked += 1
+      if (auditPath) {
+        const entry: GuardAuditEntry = { ts: new Date().toISOString(), kind: 'blocked-write-request', method: req.method(), url: req.url().slice(0, 400) }
+        try {
+          mkdirSync(dirname(auditPath), { recursive: true })
+          appendFileSync(auditPath, JSON.stringify(entry) + '\n')
+        } catch { /* 审计失败不阻塞拦截本身 */ }
+      }
+      await route.abort('blockedbyclient')
+      return
+    }
+    await route.continue()
+  })
+  return {
+    blockedCount: () => blocked,
+    requestCount: () => total,
+  }
+}
+
+/* ============ puppeteer-core 适配(2026-08-28 传输层定案:Chrome 144+ 调试服务与 playwright 不兼容) ============ */
+
+interface PpRequest {
+  method(): string
+  url(): string
+  continue(): Promise<void>
+  abort(code?: string): Promise<void>
+}
+interface PpPage {
+  setRequestInterception(on: boolean): Promise<void>
+  on(event: 'request', handler: (req: PpRequest) => void): void
+}
+interface PpBrowser {
+  pages(): Promise<PpPage[]>
+  on(event: string, handler: (target: { type(): string; page(): Promise<PpPage> }) => void): unknown
+}
+
+/**
+ * puppeteer 版守卫:对既有页面与新建页面全部开启请求拦截,写请求 abort + 审计。
+ * 与 playwright 版共用 classifyRequest 判定与审计条目(单一事实源)。
+ */
+export async function attachReadGuardPuppeteer(browser: PpBrowser, auditPath?: string): Promise<ReadGuardHandle> {
+  let blocked = 0
+  let total = 0
+  const wire = (page: PpPage): void => {
+    void (async () => {
+      try {
+        await page.setRequestInterception(true)
+        page.on('request', async (req) => {
+          total += 1
+          const verdict = classifyRequest(req.method(), req.url())
+          if (verdict === 'block') {
+            blocked += 1
+            if (auditPath) {
+              const entry: GuardAuditEntry = { ts: new Date().toISOString(), kind: 'blocked-write-request', method: req.method(), url: req.url().slice(0, 400) }
+              try {
+                mkdirSync(dirname(auditPath), { recursive: true })
+                appendFileSync(auditPath, JSON.stringify(entry) + '\n')
+              } catch { /* 审计失败不阻塞拦截本身 */ }
+            }
+            await req.abort('blockedbyclient').catch(() => { /* 目标已销毁等竞态 */ })
+            return
+          }
+          await req.continue().catch(() => { /* 竞态容忍 */ })
+        })
+      } catch { /* 已关闭的 target 容忍 */ }
+    })()
+  }
+  for (const p of await browser.pages()) wire(p)
+  browser.on('targetcreated', (t) => {
+    if (t.type() === 'page') void t.page().then(wire).catch(() => { /* ignore */ })
+  })
+  return { blockedCount: () => blocked, requestCount: () => total }
+}

package/ts/capabilities/session/transport.ts

@@ -0,0 +1,114 @@
+/**
+ * SessionTransport(会话检索传输层,RFC §3.2;2026-08-28 定案 puppeteer-core):
+ * - mode=cdp(默认):attach 用户日常 Chrome——Chrome 144+ 调试服务(chrome://inspect 开关)
+ *   与 playwright 不兼容(握手后 CDP 初始化悬挂,实测三轮),与 puppeteer 完全兼容(实测 2256 cookies)。
+ *   发现走 user-data-dir 的 DevToolsActivePort 文件(HTTP 发现面已硬化 404;Origin 头=403,安全设计)。
+ *   close() 只 disconnect,绝不关用户浏览器。
+ * - mode=persistent(测试/后备):puppeteer.launch 专用 profile(测试用 mktemp 隔离匿名态)。
+ * fail-closed(RFC §3.3-④):guard 装不上 = 整个会话打不开——不存在「无守卫的会话」这一形态。
+ * 永不抛错:任何启动失败降级为 TransportFailure,由 session-search 编排层消费。
+ */
+
+import { readFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { attachReadGuardPuppeteer, type ReadGuardHandle } from './read-guard.ts'
+import type { Browser, Page } from 'puppeteer-core'
+
+/**
+ * puppeteer-core 为可选依赖(D-14:产品运行时零硬依赖,缺则优雅降级)。
+ * 顶层动态 import——npm 形态若未装 puppeteer-core,openSession 返回 TransportFailure
+ * 而非在模块加载期炸掉整个插件(2026-08-28 发布面实测:静态 import 会拖垮 index.ts 加载链)。
+ */
+async function loadPuppeteer(): Promise<typeof import('puppeteer-core') | { missing: true }> {
+  try {
+    return await import('puppeteer-core')
+  } catch {
+    return { missing: true }
+  }
+}
+
+export interface TransportFailure {
+  ok: false
+  summary: string
+}
+
+export interface SessionTransport {
+  ok: true
+  browser: Browser
+  page: Page
+  guard: ReadGuardHandle
+  close(): Promise<void>
+}
+
+export interface TransportOptions {
+  /** 传输模式:cdp=attach 用户日常 Chrome(默认,登录态=用户本人,founder 2026-08-28 定案);persistent=专用 profile(测试/后备) */
+  mode?: 'cdp' | 'persistent'
+  /** persistent 模式专用 profile 目录(测试用 mktemp 隔离匿名态;缺省 tmpdir) */
+  profileDir?: string
+  /** persistent 模式 headless(默认 true);cdp 模式恒为用户可见窗口 */
+  headless?: boolean
+  /** ReadGuard 审计落盘路径(缺省仅内存计数) */
+  auditPath?: string
+}
+
+function devtoolsWsEndpoint(): { ws: string } | { err: string } {
+  try {
+    const udd = process.env.CHROME_USER_DATA_DIR ?? `${homedir()}/Library/Application Support/Google/Chrome`
+    const [port, wsPath] = readFileSync(`${udd}/DevToolsActivePort`, 'utf8').trim().split('\n')
+    if (!port || !wsPath?.startsWith('/devtools/browser/')) {
+      return { err: `DevToolsActivePort 内容异常: ${String(port)}/${String(wsPath)}` }
+    }
+    return { ws: `ws://127.0.0.1:${port.trim()}${wsPath.trim()}` }
+  } catch {
+    return { err: '日常 Chrome 未开调试端口。开启方法:Chrome 打开 chrome://inspect/#remote-debugging → 打开开关(Chrome 144+)' }
+  }
+}
+
+export async function openSession(opts: TransportOptions = {}): Promise<SessionTransport | TransportFailure> {
+  const pp = await loadPuppeteer()
+  if ('missing' in pp) {
+    return { ok: false, summary: 'puppeteer-core 未安装(可选依赖):会话检索不可用,官方通道 gotry_flyai_search 仍可用。安装:npm i -D puppeteer-core' }
+  }
+  const puppeteer = pp.default
+  const useCdp = opts.mode === 'cdp' || (opts.mode !== 'persistent' && !opts.profileDir)
+  let browser: Browser
+  let isCdp = false
+  if (useCdp) {
+    const d = devtoolsWsEndpoint()
+    if ('err' in d) return { ok: false, summary: d.err }
+    try {
+      browser = await puppeteer.connect({ browserWSEndpoint: d.ws, defaultViewport: null })
+      isCdp = true
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : (e as { message?: string })?.message ?? JSON.stringify(e).slice(0, 200)
+      return { ok: false, summary: `cdp attach 失败:${String(msg).split('\n')[0]}` }
+    }
+  } else {
+    const { tmpdir } = await import('node:os')
+    const profileDir = opts.profileDir ?? `${tmpdir()}/gotry-session-profile`
+    try {
+      browser = await puppeteer.launch({ channel: 'chrome', headless: opts.headless ?? true, userDataDir: profileDir })
+    } catch (e) {
+      return { ok: false, summary: `chrome launch failed: ${e instanceof Error ? e.message.split('\n')[0] : String(e)}` }
+    }
+  }
+  // fail-closed:guard 装不上即断开返回失败——不给无守卫的导航面
+  let guard: ReadGuardHandle
+  try {
+    guard = await attachReadGuardPuppeteer(browser as unknown as Parameters<typeof attachReadGuardPuppeteer>[0], opts.auditPath)
+  } catch (e) {
+    await (isCdp ? browser.disconnect() : browser.close()).catch(() => { /* ignore */ })
+    return { ok: false, summary: `read-guard attach failed: ${e instanceof Error ? e.message.split('\n')[0] : String(e)}` }
+  }
+  const page = (await browser.pages())[0] ?? (await browser.newPage())
+  return {
+    ok: true,
+    browser,
+    page,
+    guard,
+    close: async () => {
+      // cdp:只断开连接,绝不关用户浏览器;persistent:关自己拉起的实例
+      await (isCdp ? browser.disconnect() : browser.close()).catch(() => { /* ignore */ })
+    },
+  }
+}

package/ts/capabilities/session-search.ts

@@ -0,0 +1,129 @@
+/**
+ * 会话检索编排层(RFC §3.2):transport → adapter entry → networkHint 嗅探 → 解析 → ReadGuard → 证据链。
+ *
+ * 证据链(L4 增补):[会话:ctrip-flight@ts] = 用户本人会话内实时检索,非官方 API;
+ * 风控命中(verdict='challenged')= degraded,绝不重试、绝不绕过(合规支柱②)。
+ * 节律(§3.4):同站点 ≥30s 间隔 + 单调冷却;超间隔返回 verdict='cooldown'。
+ * 永不抛错;transport 必带 ReadGuard(fail-closed);测试/巡检用隔离 profile 与 stateRoot。
+ */
+
+import { openSession } from './session/transport.ts'
+import { buildEntryUrl, NETWORK_HINTS, parseBatchSearch, LOGIN_COOKIE_NAMES, SITE_DOMAIN, type SessionFlightOption } from './session/adapters/ctrip-flight.ts'
+
+export type SessionVerdict = 'hit' | 'miss' | 'error' | 'challenged' | 'cooldown' | 'needs-login' | 'needs-attach'
+
+export interface SessionSearchResult {
+  ok: boolean
+  via: 'session-ctrip-flight' | 'session-ctrip-flight-error'
+  evidence: string
+  latencyMs: number
+  verdict: SessionVerdict
+  options?: SessionFlightOption[]
+  error?: string
+}
+
+export interface SessionFlightQuery {
+  from: string
+  to: string
+  /** YYYY-MM-DD */
+  date: string
+  /** 隔离 profile 目录(测试必传;默认 /tmp 专用目录) */
+  profileDir?: string
+  headless?: boolean
+  /** ReadGuard 审计路径(测试传隔离 stateRoot 下) */
+  auditPath?: string
+  /** 等 networkHint 回包的上限,默认 25_000 */
+  timeoutMs?: number
+  /** 允许匿名实例(默认 false——用户自己的账号是本面的存在前提);true 仅用于适配器链路自检,证据链会标 anonymous */
+  allowAnonymous?: boolean
+}
+
+/** 节律闸(§3.4):同站点最小间隔;导出仅测试用 */
+const MIN_INTERVAL_MS = 30_000
+const lastCallAt = new Map<string, number>()
+export function __resetRateLimiterForTest(): void {
+  lastCallAt.clear()
+}
+
+const CHALLENGE_RE = /验证|滑块|captcha|verify/i
+
+export async function sessionFlightSearch(q: SessionFlightQuery): Promise<SessionSearchResult> {
+  const started = Date.now()
+  const ts = new Date().toISOString()
+  const site = 'ctrip-flight'
+  const err = (verdict: SessionVerdict, error: string): SessionSearchResult => ({
+    ok: false, via: 'session-ctrip-flight-error', evidence: `[会话:${site}@error@${ts}] ${error}`, latencyMs: Date.now() - started, verdict, error,
+  })
+
+  // 节律闸:超间隔即拒,不发起导航
+  const last = lastCallAt.get(site) ?? 0
+  if (Date.now() - last < MIN_INTERVAL_MS) {
+    return err('cooldown', `rate limit: last call ${Date.now() - last}ms ago, min ${MIN_INTERVAL_MS}ms`)
+  }
+  lastCallAt.set(site, Date.now())
+
+  const entry = buildEntryUrl(q.from, q.to, q.date)
+  if (!entry.ok || !entry.url) {
+    return err('error', `unresolved entry: ${(entry.unresolved ?? []).join('/')} 不在城市码表`)
+  }
+
+  const t = await openSession({ profileDir: q.profileDir, headless: q.headless, auditPath: q.auditPath, mode: q.profileDir ? 'persistent' : 'cdp' })
+  if (!t.ok) {
+    // cdp 未开端口 → needs-attach(一次性用户动作);persistent 启动失败仍走 error
+    if (q.profileDir === undefined && /cdp attach 失败/.test(t.summary)) return err('needs-attach', t.summary)
+    return err('error', t.summary)
+  }
+
+  try {
+    // 登录态闸:用户自己的账号,不是匿名实例——匿名态按 onAnonymous 处置(默认 fail)
+    const loggedIn = async (): Promise<boolean> => {
+      const cookies = await t.browser.cookies().catch(() => [])
+      return cookies.some((c) => c.domain.includes(SITE_DOMAIN.replace(/^\./, '')) && LOGIN_COOKIE_NAMES.includes(c.name))
+    }
+    if (!(await loggedIn()) && !q.allowAnonymous) {
+      return err('needs-login', '匿名实例——先跑 scripts/session-login.ts 用用户自己的账号建立登录态(allowAnonymous 仅限链路自检)')
+    }
+    // 先挂监听再导航(Playwright network 模式):命中 networkHint 的第一个响应即搜索回包
+    let settled = false
+    let body = ''
+    const heard = new Promise<void>((resolve) => {
+      t.page.on('response', async (res) => {
+        if (settled) return
+        const u = res.url()
+        if (!NETWORK_HINTS.some((re) => re.test(u))) return
+        try {
+          body = await res.text()
+        } catch { /* 流式/竞态不可读则继续等下一个 */ }
+        if (body) {
+          settled = true
+          resolve()
+        }
+      })
+      // 超时也结算:miss/error 由后续判定
+      setTimeout(() => resolve(), q.timeoutMs ?? 25_000)
+    })
+
+    await t.page.goto(entry.url, { waitUntil: 'domcontentloaded', timeout: 30_000 })
+    await heard
+
+    const title = await t.page.title().catch(() => '')
+    const headHtml = (await t.page.content().catch(() => '')).slice(0, 5000)
+    if (CHALLENGE_RE.test(title + headHtml)) {
+      return err('challenged', `风控/验证码命中(title=${title.slice(0, 60)});按红线不重试不绕过,交还用户`)
+    }
+    const options = parseBatchSearch(body)
+    const verdict: SessionVerdict = options.length > 0 ? 'hit' : 'miss'
+    return {
+      ok: true,
+      via: 'session-ctrip-flight',
+      evidence: `[会话:${site}@${ts}] ${options.length} options;guard blocked=${t.guard.blockedCount()}/${t.guard.requestCount()}${q.allowAnonymous ? ';anonymous=自检态' : ''}`,
+      latencyMs: Date.now() - started,
+      verdict,
+      options,
+    }
+  } catch (e) {
+    return err('error', e instanceof Error ? e.message.slice(0, 200) : String(e))
+  } finally {
+    await t.close()
+  }
+}