@danceiny/gotry 0.0.1-rc.11 → 0.0.1-rc.13

package/dist/scripts/session-benchmark.js

@@ -0,0 +1,261 @@
+import assert from 'node:assert/strict';
+import { evaluateDoubleSource, scoreSessionFixture } from '../capabilities/session/benchmark.js';
+import { parseFlyaiItemList } from '../capabilities/flyai.js';
+import { classifyTransportFailure } from '../capabilities/session-search.js';
+let passed = 0;
+function check(label, assertion) {
+    assertion();
+    passed += 1;
+    console.log(`  ok - ${label}`);
+}
+const sessionFixture = {
+    query_id: 'sf-01',
+    route_segments: [
+        {
+            from: '上海虹桥',
+            to: '丽江三义',
+            departure_at: '2026-10-01T07:35:00+08:00',
+            arrival_at: '2026-10-01T10:55:00+08:00',
+            transport_number: 'HO5577'
+        }
+    ],
+    journey_type: 'direct',
+    currency: 'CNY',
+    price: 1611,
+    source: 'ctrip-flight',
+    fetched_at: '2026-08-28T16:00:00Z',
+    verdict: 'hit',
+    latency_ms: 4200,
+    read_guard_blocked: 0
+};
+const officialFixture = {
+    ...structuredClone(sessionFixture),
+    price: 230,
+    source: 'flyai',
+    fetched_at: '2026-08-28T15:59:00Z'
+};
+console.log('SESSION DOUBLE-SOURCE CONTRACT');
+check('完整单段 fixture 为 13/13', ()=>{
+    const score = scoreSessionFixture(sessionFixture, structuredClone(sessionFixture));
+    assert.equal(score.pass, true);
+    assert.equal(score.accuracy, 1);
+    assert.equal(score.total, 13);
+});
+check('缺失 required 字段与错误价格都进入准确率分母', ()=>{
+    const actual = structuredClone(sessionFixture);
+    actual.currency = '';
+    actual.price = 999;
+    const score = scoreSessionFixture(sessionFixture, actual);
+    assert.equal(score.pass, false);
+    assert.deepEqual(score.missing, [
+        'currency'
+    ]);
+    assert.deepEqual(score.incorrect, [
+        'price'
+    ]);
+    assert.equal(score.accuracy, 11 / 13);
+});
+check('字段类型不一致不能靠字符串化蒙混过关', ()=>{
+    const actual = {
+        ...structuredClone(sessionFixture),
+        price: '1611'
+    };
+    const score = scoreSessionFixture(sessionFixture, actual);
+    assert.equal(score.accuracy, 12 / 13);
+    assert.deepEqual(score.incorrect, [
+        'price'
+    ]);
+});
+check('非法 golden fixture 自身 fail-closed', ()=>{
+    const expected = {
+        ...structuredClone(sessionFixture),
+        price: 0
+    };
+    const score = scoreSessionFixture(expected, structuredClone(expected));
+    assert.equal(score.pass, false);
+    assert.deepEqual(score.fixture_errors, [
+        'price'
+    ]);
+});
+check('中转 fixture 逐段计分', ()=>{
+    const transfer = {
+        ...structuredClone(sessionFixture),
+        query_id: 'sf-02',
+        journey_type: 'transfer',
+        route_segments: [
+            structuredClone(sessionFixture.route_segments[0]),
+            {
+                from: '丽江三义',
+                to: '西双版纳嘎洒',
+                departure_at: '2026-10-02T08:20:00+08:00',
+                arrival_at: '2026-10-02T09:35:00+08:00',
+                transport_number: '8L9608'
+            }
+        ]
+    };
+    const score = scoreSessionFixture(transfer, structuredClone(transfer));
+    assert.equal(score.pass, true);
+    assert.equal(score.total, 18);
+});
+check('同路线班次可比，价格差只记录不判错', ()=>{
+    const result = evaluateDoubleSource({
+        official: officialFixture,
+        session: sessionFixture
+    });
+    assert.equal(result.state, 'comparable');
+    assert.deepEqual(result.mismatches, []);
+    assert.equal(result.price_delta, 1381);
+    assert.equal(result.quota_disposition, 'evidence_ready');
+});
+check('时刻不一致投影 divergent', ()=>{
+    const session = structuredClone(sessionFixture);
+    session.route_segments[0].arrival_at = '2026-10-01T11:15:00+08:00';
+    const result = evaluateDoubleSource({
+        official: officialFixture,
+        session
+    });
+    assert.equal(result.state, 'divergent');
+    assert.deepEqual(result.mismatches, [
+        'route_segments[0].arrival_at'
+    ]);
+});
+check('等价时区时刻保持 comparable', ()=>{
+    const session = structuredClone(sessionFixture);
+    session.route_segments[0].departure_at = '2026-09-30T23:35:00Z';
+    session.route_segments[0].arrival_at = '2026-10-01T02:55:00Z';
+    const result = evaluateDoubleSource({
+        official: officialFixture,
+        session
+    });
+    assert.equal(result.state, 'comparable');
+});
+check('needs-attach 为 waiting-user no-spend', ()=>{
+    const session = {
+        ...structuredClone(sessionFixture),
+        verdict: 'needs-attach'
+    };
+    const result = evaluateDoubleSource({
+        official: officialFixture,
+        session
+    });
+    assert.equal(result.state, 'waiting_attach');
+    assert.equal(result.retry_allowed, false);
+    assert.equal(result.quota_disposition, 'no_spend_waiting_user');
+});
+check('CDP 缺席与握手失败稳定投影 needs-attach', ()=>{
+    assert.equal(classifyTransportFailure('日常 Chrome 未开调试端口', true), 'needs-attach');
+    assert.equal(classifyTransportFailure('cdp attach 失败:socket closed', true), 'needs-attach');
+    assert.equal(classifyTransportFailure('chrome launch failed', false), 'error');
+});
+check('needs-login 为 waiting-user no-spend', ()=>{
+    const session = {
+        ...structuredClone(sessionFixture),
+        verdict: 'needs-login'
+    };
+    const result = evaluateDoubleSource({
+        official: officialFixture,
+        session
+    });
+    assert.equal(result.state, 'waiting_login');
+    assert.equal(result.retry_allowed, false);
+    assert.equal(result.quota_disposition, 'no_spend_waiting_user');
+});
+check('缺失 session 证据不擅自投影用户 gate', ()=>{
+    const result = evaluateDoubleSource({
+        official: officialFixture
+    });
+    assert.equal(result.state, 'source_unavailable');
+    assert.equal(result.quota_disposition, 'no_spend_stop');
+});
+check('challenge 立即停止', ()=>{
+    const session = {
+        ...structuredClone(sessionFixture),
+        verdict: 'challenged'
+    };
+    const result = evaluateDoubleSource({
+        official: officialFixture,
+        session
+    });
+    assert.equal(result.state, 'challenge_stop');
+    assert.equal(result.quota_disposition, 'no_spend_stop');
+});
+check('challenge 与 ReadGuard 优先于 waiting-user', ()=>{
+    const challengedOfficial = {
+        ...structuredClone(officialFixture),
+        verdict: 'challenged'
+    };
+    const waitingSession = {
+        ...structuredClone(sessionFixture),
+        verdict: 'needs-attach'
+    };
+    assert.equal(evaluateDoubleSource({
+        official: challengedOfficial,
+        session: waitingSession
+    }).state, 'challenge_stop');
+    waitingSession.read_guard_blocked = 1;
+    assert.equal(evaluateDoubleSource({
+        official: officialFixture,
+        session: waitingSession
+    }).state, 'guard_violation');
+});
+check('ReadGuard 非零 fail-closed', ()=>{
+    const session = {
+        ...structuredClone(sessionFixture),
+        read_guard_blocked: 1
+    };
+    const result = evaluateDoubleSource({
+        official: officialFixture,
+        session
+    });
+    assert.equal(result.state, 'guard_violation');
+    assert.equal(result.quota_disposition, 'no_spend_stop');
+});
+check('缺 required 合同字段时 fail-closed', ()=>{
+    const session = {
+        ...structuredClone(sessionFixture),
+        currency: ''
+    };
+    const result = evaluateDoubleSource({
+        official: officialFixture,
+        session
+    });
+    assert.equal(result.state, 'invalid_contract');
+    assert.deepEqual(result.missing, [
+        'session.currency'
+    ]);
+    assert.equal(result.quota_disposition, 'no_spend_stop');
+});
+check('FlyAI stdout 前后噪声不污染完整业务 JSON', ()=>{
+    const payload = {
+        data: {
+            itemList: [
+                {
+                    journeys: [],
+                    systemMessage: '提示含花括号 {limited} 与引号 "quoted" 仍属于 JSON 字符串'
+                }
+            ]
+        }
+    };
+    const noisy = `npm notice {not-json}\n${JSON.stringify(payload)}\npostflight log {done}`;
+    assert.deepEqual(parseFlyaiItemList(noisy), payload.data.itemList);
+});
+check('FlyAI stdout 可跳过前置诊断 JSON', ()=>{
+    const payload = {
+        data: {
+            itemList: [
+                {
+                    ticketPrice: '230.00'
+                }
+            ]
+        }
+    };
+    assert.deepEqual(parseFlyaiItemList(`{"level":"info","message":"warmup"}\n${JSON.stringify(payload)}\n`), payload.data.itemList);
+});
+check('FlyAI 无完整 itemList 对象时保持 fail-closed', ()=>{
+    assert.throws(()=>parseFlyaiItemList('{"data":{"itemList":['), /incomplete FlyAI JSON object/);
+    assert.throws(()=>parseFlyaiItemList('{"message":"SentinelBlockException"}'), /no complete FlyAI itemList JSON object/);
+});
+console.log(`SESSION DOUBLE-SOURCE CONTRACT: ${passed} pass`);
+
+
+//# sourceURL=/Users/bytedance/work/gotry/ts/scripts/session-benchmark.ts

package/dist/scripts/session-login.js

@@ -0,0 +1,28 @@
+import { sessionLogin } from '../capabilities/session-login.js';
+async function main() {
+    const site = process.argv.find((a)=>a === 'ctrip-flight' || a === 'meituan-hotel') ?? 'ctrip-flight';
+    const waitArg = process.argv.find((a)=>a.startsWith('--timeout') || a.startsWith('--wait'));
+    const waitMs = Number(waitArg?.split('=')[1] ?? 180) * 1000;
+    const r = await sessionLogin({
+        site,
+        waitMs
+    });
+    if (r.verdict === 'logged-in') {
+        console.log(`[login] OK——${r.site} 登录票据已检出 [${(r.tickets ?? []).join(', ')}](只读名字)。`);
+        console.log('[login] 说明:登录是在携程官网、用你自己的浏览器完成的;gotry 永不经手密码/验证码/cookie 值');
+        return;
+    }
+    if (r.verdict === 'pending') {
+        console.log(`[login] 登录入口已在你的 Chrome 打开(${site});在标签页里完成登录即可,无需再跑本脚本——工具面按 cookie 名自动感知`);
+        return;
+    }
+    console.error(`[login] ${r.verdict}:${r.error ?? ''}\n${r.evidence}`);
+    process.exit(2);
+}
+main().catch((e)=>{
+    console.error(e);
+    process.exit(1);
+});
+
+
+//# sourceURL=/Users/bytedance/work/gotry/ts/scripts/session-login.ts

package/dist/scripts/session-tests.js

@@ -1,10 +1,12 @@
-import { mkdtempSync, readFileSync, existsSync, rmSync } from 'node:fs';
+import { mkdtempSync, readFileSync, existsSync, rmSync, writeFileSync, chmodSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { classifyRequest, isSubmitText } from '../capabilities/session/read-guard.js';
 import { buildEntryUrl, parseBatchSearch } from '../capabilities/session/adapters/ctrip-flight.js';
-import { sessionFlightSearch, __resetRateLimiterForTest } from '../capabilities/session-search.js';
+import { sessionFlightSearch, __resetRateLimiterForTest, classifyTransportFailure } from '../capabilities/session-search.js';
 import { flyaiSearch } from '../capabilities/flyai.js';
+import { createConsentGate } from '../capabilities/session-consent.js';
+import { sessionLogin, pollTicketNames, LOGIN_TARGETS } from '../capabilities/session-login.js';
 let pass = 0;
 let fail = 0;
 function assert(cond, label, detail) {
@@ -92,25 +94,52 @@ const r2 = await sessionFlightSearch({
 assert(r1.verdict === 'error' && /unresolved/.test(r1.error ?? ''), '首次调用:词表外 → error(unresolved)');
 assert(r2.verdict === 'cooldown', '30s 内二次调用 → cooldown,不发起导航');
 __resetRateLimiterForTest();
-console.log('F. flyaiSearch(live,飞猪官方,无 key)');
-const fr = await flyaiSearch({
-    kind: 'flight',
-    origin: '上海',
-    destination: '丽江',
-    depDate: '2026-10-01'
-});
-const sentinelBlocked = fr.verdict === 'error' && /sentinel|block/i.test(fr.error ?? '');
-if (sentinelBlocked) {
-    console.log('  WARN - 飞猪 Sentinel 限流(2026-08-28 实测,配额未文档化)——降级合同验证通过,跳过 hit 断言');
-    assert(fr.ok === false && /\[实时API:flyai@error@/.test(fr.evidence), '限流降级:结构化 error + 证据链错误形');
+console.log('F. transport verdict + flyaiSearch(live,飞猪官方,无 key;GOTRY_SESSION_LIVE=0 跳过)');
+assert(classifyTransportFailure('日常 Chrome 未开调试端口', true) === 'needs-attach', '调试端口未开稳定投影 needs-attach');
+assert(classifyTransportFailure('cdp attach 失败:socket closed', true) === 'needs-attach', 'CDP 握手失败稳定投影 needs-attach');
+assert(classifyTransportFailure('chrome launch failed', false) === 'error', '隔离 profile 启动失败不误投影用户门禁');
+let fr = null;
+if (process.env.GOTRY_SESSION_LIVE === '0') {
+    console.log('  SKIP - GOTRY_SESSION_LIVE=0(离线门禁不调用 FlyAI 外部实时端点)');
 } else {
-    assert(fr.ok === true && fr.verdict === 'hit', '上海→丽江 hit', fr);
-    assert((fr.options?.length ?? 0) >= 1 && (fr.options?.every((o)=>o.price > 0 && /^\d+[A-Z]\d+|^[A-Z]{2}\d+/.test(o.no)) ?? false), '结构化字段齐(price>0,航班号形)', fr.options?.[0]);
+    fr = await flyaiSearch({
+        kind: 'flight',
+        origin: '上海',
+        destination: '丽江',
+        depDate: '2026-10-01'
+    });
+    const sentinelBlocked = fr.verdict === 'error' && /sentinel|block/i.test(fr.error ?? '');
+    if (sentinelBlocked) {
+        console.log('  WARN - 飞猪 Sentinel 限流(2026-08-28 实测,配额未文档化)——降级合同验证通过,跳过 hit 断言');
+        assert(fr.ok === false && /\[实时API:flyai@error@/.test(fr.evidence), '限流降级:结构化 error + 证据链错误形');
+    } else {
+        assert(fr.ok === true && fr.verdict === 'hit', '上海→丽江 hit', fr);
+        assert((fr.options?.length ?? 0) >= 1 && (fr.options?.every((o)=>o.price > 0 && /^\d+[A-Z]\d+|^[A-Z]{2}\d+/.test(o.no)) ?? false), '结构化字段齐(price>0,航班号形)', fr.options?.[0]);
+    }
+    assert(/\[实时API:flyai/.test(fr.evidence), '证据链 [实时API:flyai@*]');
 }
-assert(/\[实时API:flyai/.test(fr.evidence), '证据链 [实时API:flyai@*]');
-console.log('G. sessionFlightSearch(live,隔离 profile + ReadGuard)');
-if (process.env.GOTRY_SESSION_LIVE === '0') {
-    console.log('  SKIP - GOTRY_SESSION_LIVE=0');
+{
+    const fakeDir = mkdtempSync(join(tmpdir(), 'flyai-fake-'));
+    const fakeCli = join(fakeDir, 'flyai-cli-fake');
+    writeFileSync(fakeCli, '#!/bin/sh\necho \'{"data":null,"message":"出发日期非法","status":1,"systemMessage":null}\'\nexit 0\n', {
+        mode: 0o755
+    });
+    const fr2 = await flyaiSearch({
+        kind: 'flight',
+        origin: '深圳',
+        destination: '普吉',
+        depDate: '2026-07-18',
+        cliBin: fakeCli
+    });
+    assert(fr2.ok === false && fr2.verdict === 'error', 'data:null 语义失败 → error 终态(非 miss)', fr2);
+    assert(/出发日期非法/.test(fr2.error ?? '') && /flyai@error@/.test(fr2.evidence), '上游原话透传 + 证据链错误形', fr2);
+    rmSync(fakeDir, {
+        recursive: true,
+        force: true
+    });
+}console.log('G. sessionFlightSearch(live,Chrome+携程;默认跳过,GOTRY_SESSION_LIVE=1 显式开启)');
+if (process.env.GOTRY_SESSION_LIVE !== '1') {
+    console.log('  SKIP - 会话 live 探针默认关(测试不再自动开浏览器窗口;GOTRY_SESSION_LIVE=1 显式开启)');
 } else {
     __resetRateLimiterForTest();
     const iso = mkdtempSync(join(tmpdir(), 'gotry-session-test-'));
@@ -137,16 +166,19 @@ if (process.env.GOTRY_SESSION_LIVE === '0') {
         assert(sr.ok === false && sr.verdict === 'challenged', 'challenged = degraded 语义正确(不重试不绕过)');
     } else if (sr.verdict === 'error' && /chrome launch failed/.test(sr.error ?? '')) {
         console.log('  SKIP - 本机无 Chrome(channel:chrome 不可用)');
-    } else if (sr.verdict === 'error' && /chrome launch failed/.test(sr.error ?? '')) {
+    } else if (sr.verdict === 'error' && /chrome launch failed/i.test(sr.error ?? '')) {
         console.log('  SKIP - 本机无 Chrome(channel:chrome 不可用)');
     } else if ((sr.verdict === 'miss' || sr.verdict === 'error') && /blocked=0/.test(sr.evidence)) {
         console.log(`  SKIP - 会话数据面 miss(外部方差,合同降级语义):${sr.evidence.slice(0, 90)}`);
+    } else if (sr.verdict === 'error' && /timeout/i.test(sr.error ?? '')) {
+        console.log(`  SKIP - 携程页面加载超时(外部方差,合同降级语义):${String(sr.error).slice(0, 80)}`);
+        assert(sr.ok === false && /\[会话:ctrip-flight@error@/.test(sr.evidence), '超时降级仍带证据链错误形');
     } else {
         assert(sr.ok === true && sr.verdict === 'hit' && (sr.options?.length ?? 0) >= 1, '上海→丽江 会话嗅探 hit', sr);
         assert(sr.options?.every((o)=>o.price > 0 && o.depDateTime.includes('2026-10-01')) ?? false, '班期=查询日,价格>0', sr.options?.[0]);
         assert(/\[会话:ctrip-flight@/.test(sr.evidence) && /blocked=0/.test(sr.evidence), '证据链 [会话:*] + ReadGuard 零拦截(纯只读)');
         assert(!existsSync(join(iso, 'audit', 'session-incidents.jsonl')), '审计文件不出现(零写请求)');
-        const flyaiMin = Math.min(...fr.options?.map((o)=>o.price).filter((p)=>p > 0) ?? [
+        const flyaiMin = Math.min(...fr?.options?.map((o)=>o.price).filter((p)=>p > 0) ?? [
             0
         ]);
         const sessionMin = Math.min(...sr.options?.map((o)=>o.price).filter((p)=>p > 0) ?? [
@@ -159,8 +191,215 @@ if (process.env.GOTRY_SESSION_LIVE === '0') {
         force: true
     });
 }
-console.log(`\nSESSION P1: ${pass} pass, ${fail} fail`);
-process.exit(fail > 0 ? 1 : 0);
+console.log('H. flyaiSearch hotel(飞猪官方 search-hotel)');
+{
+    const hr = await flyaiSearch({
+        kind: 'hotel',
+        destName: '大理',
+        checkInDate: '2026-10-01',
+        checkOutDate: '2026-10-03'
+    });
+    const hSentinel = hr.verdict === 'error' && /sentinel|block/i.test(hr.error ?? '');
+    if (hSentinel) {
+        console.log('  WARN - 飞猪 Sentinel 限流——降级合同验证通过,跳过 hit 断言');
+        assert(hr.ok === false && /\[实时API:flyai@error@/.test(hr.evidence), '酒店限流降级:结构化 error + 证据链错误形');
+    } else if (hr.ok === false) {
+        console.log(`  WARN - flyai hotel 端点降级(${String(hr.error).slice(0, 60)})——证据链合同通过,hit 断言跳过`);
+        assert(/\[实时API:flyai@error@/.test(hr.evidence), '端点降级仍带证据链错误形');
+    } else {
+        assert(hr.verdict === 'hit' && (hr.hotels?.length ?? 0) >= 1, '大理酒店 hit', hr.hotels?.[0]);
+        assert(hr.hotels?.every((h)=>!!h.name && !!h.jumpUrl) ?? false, '条目结构化(name + jumpUrl 透传)', hr.hotels?.[0]);
+    }
+    assert(/\[实时API:flyai/.test(hr.evidence), '证据链 [实时API:flyai@*]');
+    const fakeDir = mkdtempSync(join(tmpdir(), 'flyai-hotel-fake-'));
+    const fakeCliH = join(fakeDir, 'flyai-hotel-fake');
+    writeFileSync(fakeCliH, '#!/bin/sh\necho \'{"data":{"itemList":[{"name":"大理A 酒店","shId":"1","star":"高档型","rate":null,"price":"\\u00a57xx","address":"addr","interestsPoi":"近洱海","detailUrl":"https://router.feizhu.com/x"},{"star":"舒适型"}]}}\'\nexit 0\n', {
+        mode: 0o755
+    });
+    const h2 = await flyaiSearch({
+        kind: 'hotel',
+        destName: '大理',
+        cliBin: fakeCliH
+    });
+    assert(h2.verdict === 'hit' && h2.hotels?.length === 1, '酒店解析:缺名条目跳过,1 条有效', h2);
+    const h0 = h2.hotels?.[0];
+    assert(h0?.name === '大理A 酒店' && h0?.priceRaw === '¥7xx' && h0?.price === 0, '打码价保 priceRaw 原值(数字价 0)', h0);
+    assert(h0?.star === '高档型' && h0?.hotelId === '1' && h0?.jumpUrl === 'https://router.feizhu.com/x', 'star/jumpUrl(shId/detailUrl)透传', h0);
+    const hb1 = await flyaiSearch({
+        kind: 'hotel'
+    });
+    assert(hb1.verdict === 'error' && /destName|目的地/.test(hb1.error ?? ''), '缺目的地 → bad args error', hb1);
+    const hb2 = await flyaiSearch({
+        kind: 'hotel',
+        destName: '大理',
+        checkInDate: '2026-10-01'
+    });
+    assert(hb2.verdict === 'error' && /成对/.test(hb2.error ?? ''), '入住/退房不成对 → error(不静默)', hb2);
+    assert((await flyaiSearch({
+        kind: 'hotel',
+        destName: '大理',
+        checkInDate: '10月1号',
+        checkOutDate: '2026-10-03'
+    })).verdict === 'error', '非法日期格式 → error');
+    rmSync(fakeDir, {
+        recursive: true,
+        force: true
+    });
+}console.log('I. createConsentGate(账号会话授权:每会话一次/拒绝吊销/allow/off/无通道)');
+{
+    const next = async ()=>({
+            kind: 'allow'
+        });
+    const agentA = {
+        id: 'agent-A'
+    };
+    const agentB = {
+        id: 'agent-B'
+    };
+    const sess = (a = agentA)=>({
+            name: 'gotry_session_search',
+            agent: a,
+            callId: 'c1'
+        });
+    const other = ()=>({
+            name: 'gotry_anything_search',
+            agent: agentA
+        });
+    const mkStore = ()=>new WeakMap();
+    const mkGate = (access, seam)=>createConsentGate({
+            access: ()=>access,
+            approval: seam ? ()=>seam : undefined,
+            store: mkStore()
+        });
+    const gateBare = createConsentGate({
+        access: ()=>'ask'
+    });
+    const d1 = await gateBare({
+        name: 'gotry_session_search',
+        agent: undefined
+    }, next);
+    assert(d1.kind === 'ask', '无审批通道 → ask(交运行时 fail-closed;denies 责任在 registry)', d1);
+    assert((await gateBare({
+        name: 'gotry_anything_search',
+        agent: undefined
+    }, next)).kind === 'allow', '非账号工具不过闸,原样放行');
+    {
+        let requests = 0;
+        const seam = {
+            request: async ()=>{
+                requests += 1;
+                return 'allowed-once';
+            }
+        };
+        const gate = createConsentGate({
+            access: ()=>'ask',
+            approval: ()=>seam
+        });
+        const r1 = await gate(sess(), next);
+        assert(r1.kind === 'allow' && requests === 1, '首次调用:弹卡一次,批准后放行', {
+            r1,
+            requests
+        });
+        const r2 = await gate(sess(), next);
+        assert(r2.kind === 'allow' && requests === 1, '会话内第二次调用免弹卡直接放行(不重复骚扰)', {
+            r2: r1,
+            requests
+        });
+    }
+    {
+        let requests = 0;
+        const seam = {
+            request: async ()=>{
+                requests += 1;
+                return 'rejected';
+            }
+        };
+        const store = mkStore();
+        const gate = createConsentGate({
+            access: ()=>'ask',
+            approval: ()=>seam,
+            store
+        });
+        const d1 = await gate(sess(), next);
+        assert(d1.kind === 'deny' && /拒绝/.test(String(d1.kind === 'deny' ? d1.reason : '')), '拒绝 → deny + 明示「本会话内生效」', d1);
+        const d2 = await gate(sess(), next);
+        assert(d2.kind === 'deny' && requests === 1, '拒绝后再次调用 → 直接 deny,不再弹卡(拒绝=吊销)', {
+            d2
+        });
+        const dB = await gate({
+            name: 'gotry_session_search',
+            agent: agentB
+        }, next);
+        assert(dB.kind === 'deny' && requests === 2, '另一会话不受此前拒绝影响——会重新发起一次审批请求(seam 本例仍拒)', {
+            dB,
+            requests
+        });
+    }
+    {
+        const gate = mkGate('off');
+        const d = await gate(sess(), next);
+        assert(d.kind === 'deny' && /sessionAccess=off/.test(String(d.kind === 'deny' ? d.reason : '')), 'off → 不弹卡直接 deny', d);
+        assert((await gate(other(), next)).kind === 'allow', 'off 只关账号面工具,其余放行');
+    }
+    {
+        const gate = mkGate('allow');
+        assert((await gate(sess(), next)).kind === 'allow', 'sessionAccess=allow → 配置明示预授权,直接放行');
+    }
+}console.log('J. sessionLogin(登录引导:无凭证语义/表格完备/pending 语义)');
+{
+    for (const [site, t] of Object.entries(LOGIN_TARGETS)){
+        assert(!!t.domain && t.names.length > 0 && !!t.label && t.entryUrl.startsWith('https://'), `${site} 登录目标表完备`, t);
+    }
+    const unknownSite = await sessionLogin({
+        site: 'not-a-site',
+        waitMs: 0
+    });
+    assert(unknownSite.ok === false && unknownSite.verdict === 'error' && /未知站点/.test(unknownSite.error ?? ''), '未知站点 → 结构化 error(降级不抛)', unknownSite);
+    {
+        const fakeBrowser = {
+            cookies: async ()=>[
+                    {
+                        domain: '.ctrip.com',
+                        name: 'cticket',
+                        value: 'SECRET-TICKET'
+                    },
+                    {
+                        domain: 'ctrip.com',
+                        name: 'uid',
+                        value: 'SECRET-UID'
+                    },
+                    {
+                        domain: 'ctrip.com',
+                        name: 'irrelevant',
+                        value: 'x'
+                    }
+                ]
+        };
+        const names = await pollTicketNames(fakeBrowser, LOGIN_TARGETS['ctrip-flight']);
+        assert(JSON.stringify(names) === '["cticket","uid"]', '票据名级检查:只回名字;值(SOCRET)永不进入结果', names);
+        const joined = JSON.stringify(names);
+        assert(!joined.includes('SECRET'), '存在性检查零值过手(fixture 值不泄露)', joined);
+    }
+    if (process.env.GOTRY_SESSION_LIVE === '1') {
+        const lr = await sessionLogin({
+            waitMs: 2500,
+            pollMs: 500
+        });
+        if (lr.verdict === 'needs-attach') {
+            assert(lr.ok === false && /chrome:\/\/inspect/.test(lr.error ?? ''), 'live:Chrome 未开调试 → needs-attach + 一次性指引', lr);
+        } else if (lr.verdict === 'logged-in') {
+            assert(lr.ok === true && (lr.tickets?.length ?? 0) > 0, 'live:已登录自动检测 → logged-in(零弹窗,票据名级)', lr);
+        } else {
+            assert(lr.ok === true && lr.verdict === 'pending', 'live:attach 成功不交互 → pending(入口已开,等人登录)', lr);
+            const evidenceTagRe = /\[会话:ctrip-flight-login@/;
+            if (!evidenceTagRe.test(lr.evidence ?? '')) throw new Error(`FAIL: 登录证据链缺失,实际 ${lr.evidence}`);
+            pass += 1;
+            console.log('  ok - 登录证据链 [会话:ctrip-flight-login@*] 形态');
+        }
+    } else {
+        console.log('  SKIP - 登录 live 探针默认关(GOTRY_SESSION_LIVE=1 opt-in;工具面/桌面入口才真调)');
+    }
+}console.log(`\nSESSION P1: ${pass} pass, ${fail} fail`);
 
 
 //# sourceURL=/Users/bytedance/work/gotry/ts/scripts/session-tests.ts