@danceiny/gotry 0.0.1-rc.21 → 0.0.1-rc.24

package/dist/capabilities/session/read-guard.js

@@ -1,45 +1,58 @@
+/**
+ * ReadGuard:会话检索面的只读物理隔离(RFC docs/rfc/user-session-data-rfc.md §3.3)。
+ *
+ * 写不是「被禁止的行为」,是「不存在的原语」——WriteGate(L0-L4)的检索态前置:
+ *   ① 网络层:route 拦截——命中硬支付模式(任意方法)或写方法+写URL模式 → abort + 审计落盘;
+ *   ② DOM 层:提交类按钮文本黑名单,从快照/断言文本中剔除(模型看不到可点的提交件);
+ *   ③ fail-closed:guard 未装上,session transport 不允许导航(openSession 装不上即整会话失败)。
+ *
+ * 审计:append-only JSONL(session-incidents.jsonl,对齐 incident-log 惯例),隔离 stateRoot。
+ * 注意:搜索接口多为 POST(如携程 batchSearch),因此写判定必须「方法 × URL 模式」双因子,
+ * 不能一刀切禁 POST——batchSearch 不含写词,放行。
+ */
 import { mkdirSync, appendFileSync } from 'node:fs';
 import { dirname } from 'node:path';
+/** 硬支付模式:任意方法(含 GET)都视为写——进支付/收银面本身就是风险 */
 const HARD_PAY_RE = /\/(pay|payment|cashier)(\/|\?|$)/i;
+/** 驼峰复合写词(OTA 常见 /submitOrder、/createOrder):段式正则漏接,单列 */
 const WRITE_COMPOUND_RE = /(submitorder|createorder|placeorder|cancelorder|refundorder|orderconfirm|orderpay|confirmpay)/i;
+/** 写词 URL 模式:仅在写方法(POST/PUT/DELETE/PATCH)下触发 */
 const WRITE_URL_RE = /\/(order|orders|submit|trade|booking|book|purchase|buy|create|cancel|refund)(\/|\?|$)/i;
-const WRITE_METHODS = new Set([
-    'POST',
-    'PUT',
-    'DELETE',
-    'PATCH'
-]);
+const WRITE_METHODS = new Set(['POST', 'PUT', 'DELETE', 'PATCH']);
+/** DOM 提交件文本黑名单(§3.3-②):命中即从可交互面剔除 */
 export const SUBMIT_TEXT_RE = /下单|去支付|支付|预订|订票|购买|提交订单|确认订单/;
+/** 网络层写判定(纯函数,测试锚点) */
 export function classifyRequest(method, url) {
-    if (HARD_PAY_RE.test(url) || WRITE_COMPOUND_RE.test(url)) return 'block';
-    if (WRITE_METHODS.has(method.toUpperCase()) && WRITE_URL_RE.test(url)) return 'block';
+    if (HARD_PAY_RE.test(url) || WRITE_COMPOUND_RE.test(url))
+        return 'block';
+    if (WRITE_METHODS.has(method.toUpperCase()) && WRITE_URL_RE.test(url))
+        return 'block';
     return 'allow';
 }
+/** DOM 层提交件过滤(纯函数,测试锚点):true=剔除 */
 export function isSubmitText(text) {
     return SUBMIT_TEXT_RE.test(text ?? '');
 }
+/**
+ * 装上网络层守卫(fail-closed 的「closed」在调用方:openSession 装不上 guard 即失败,不给无 guard 的会话)。
+ * 审计落 auditPath(JSONL append);auditPath 缺省不落盘(仅内存计数)。
+ */
 export async function attachReadGuard(ctx, auditPath) {
     let blocked = 0;
     let total = 0;
-    await ctx.route('**/*', async (route)=>{
+    await ctx.route('**/*', async (route) => {
         const req = route.request();
         total += 1;
         const verdict = classifyRequest(req.method(), req.url());
         if (verdict === 'block') {
             blocked += 1;
             if (auditPath) {
-                const entry = {
-                    ts: new Date().toISOString(),
-                    kind: 'blocked-write-request',
-                    method: req.method(),
-                    url: req.url().slice(0, 400)
-                };
+                const entry = { ts: new Date().toISOString(), kind: 'blocked-write-request', method: req.method(), url: req.url().slice(0, 400) };
                 try {
-                    mkdirSync(dirname(auditPath), {
-                        recursive: true
-                    });
+                    mkdirSync(dirname(auditPath), { recursive: true });
                     appendFileSync(auditPath, JSON.stringify(entry) + '\n');
-                } catch  {}
+                }
+                catch { /* 审计失败不阻塞拦截本身 */ }
             }
             await route.abort('blockedbyclient');
             return;
@@ -47,53 +60,48 @@ export async function attachReadGuard(ctx, auditPath) {
         await route.continue();
     });
     return {
-        blockedCount: ()=>blocked,
-        requestCount: ()=>total
+        blockedCount: () => blocked,
+        requestCount: () => total,
     };
 }
+/**
+ * puppeteer 版守卫:对既有页面与新建页面全部开启请求拦截,写请求 abort + 审计。
+ * 与 playwright 版共用 classifyRequest 判定与审计条目(单一事实源)。
+ */
 export async function attachReadGuardPuppeteer(browser, auditPath) {
     let blocked = 0;
     let total = 0;
-    const wire = (page)=>{
-        void (async ()=>{
+    const wire = (page) => {
+        void (async () => {
             try {
                 await page.setRequestInterception(true);
-                page.on('request', async (req)=>{
+                page.on('request', async (req) => {
                     total += 1;
                     const verdict = classifyRequest(req.method(), req.url());
                     if (verdict === 'block') {
                         blocked += 1;
                         if (auditPath) {
-                            const entry = {
-                                ts: new Date().toISOString(),
-                                kind: 'blocked-write-request',
-                                method: req.method(),
-                                url: req.url().slice(0, 400)
-                            };
+                            const entry = { ts: new Date().toISOString(), kind: 'blocked-write-request', method: req.method(), url: req.url().slice(0, 400) };
                             try {
-                                mkdirSync(dirname(auditPath), {
-                                    recursive: true
-                                });
+                                mkdirSync(dirname(auditPath), { recursive: true });
                                 appendFileSync(auditPath, JSON.stringify(entry) + '\n');
-                            } catch  {}
+                            }
+                            catch { /* 审计失败不阻塞拦截本身 */ }
                         }
-                        await req.abort('blockedbyclient').catch(()=>{});
+                        await req.abort('blockedbyclient').catch(() => { });
                         return;
                     }
-                    await req.continue().catch(()=>{});
+                    await req.continue().catch(() => { });
                 });
-            } catch  {}
+            }
+            catch { /* 已关闭的 target 容忍 */ }
         })();
     };
-    for (const p of (await browser.pages()))wire(p);
-    browser.on('targetcreated', (t)=>{
-        if (t.type() === 'page') void t.page().then(wire).catch(()=>{});
+    for (const p of await browser.pages())
+        wire(p);
+    browser.on('targetcreated', (t) => {
+        if (t.type() === 'page')
+            void t.page().then(wire).catch(() => { });
     });
-    return {
-        blockedCount: ()=>blocked,
-        requestCount: ()=>total
-    };
+    return { blockedCount: () => blocked, requestCount: () => total };
 }
-
-
-//# sourceURL=ts/capabilities/session/read-guard.ts

package/dist/capabilities/session/static-flight-golden.js

@@ -1,8 +1,9 @@
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 export function parseGoldenSource(args) {
-    const raw = args.find((arg)=>arg.startsWith('--golden='))?.slice('--golden='.length) ?? 'manual';
-    if (raw === 'manual' || raw === 'flyai' || raw === 'static') return raw;
+    const raw = args.find((arg) => arg.startsWith('--golden='))?.slice('--golden='.length) ?? 'manual';
+    if (raw === 'manual' || raw === 'flyai' || raw === 'static')
+        return raw;
     throw new Error(`不支持的 golden vendor: ${raw}`);
 }
 export function loadStaticFlightSnapshot(path = join(import.meta.dirname, '..', '..', 'data', 'sf-static-routes.json')) {
@@ -11,13 +12,10 @@ export function loadStaticFlightSnapshot(path = join(import.meta.dirname, '..',
         throw new Error(`invalid static snapshot schema_version: ${String(isRecord(parsed) ? parsed.schema_version : undefined)}`);
     }
     const source = parsed.source;
-    if (!isRecord(source) || ![
-        'name',
-        'url',
-        'revision',
-        'license',
-        'retrieved_at'
-    ].every((key)=>typeof source[key] === 'string') || !Array.isArray(source.limitations) || !source.limitations.every((item)=>typeof item === 'string')) {
+    if (!isRecord(source)
+        || !['name', 'url', 'revision', 'license', 'retrieved_at'].every((key) => typeof source[key] === 'string')
+        || !Array.isArray(source.limitations)
+        || !source.limitations.every((item) => typeof item === 'string')) {
         throw new Error('invalid static snapshot source');
     }
     if (!Array.isArray(parsed.routes) || !parsed.routes.every(isStaticFlightRoute)) {
@@ -29,15 +27,26 @@ function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 function isStaticFlightRoute(value) {
-    if (!isRecord(value) || typeof value.query_id !== 'string' || typeof value.from_city !== 'string' || typeof value.to_city !== 'string' || value.route_kind !== 'direct' && value.route_kind !== 'transfer' || !Array.isArray(value.legs) || value.legs.length === 0) return false;
-    return value.legs.every((leg)=>isRecord(leg) && typeof leg.from_iata === 'string' && typeof leg.to_iata === 'string' && Array.isArray(leg.carrier_codes) && leg.carrier_codes.every((carrier)=>typeof carrier === 'string'));
+    if (!isRecord(value)
+        || typeof value.query_id !== 'string'
+        || typeof value.from_city !== 'string'
+        || typeof value.to_city !== 'string'
+        || (value.route_kind !== 'direct' && value.route_kind !== 'transfer')
+        || !Array.isArray(value.legs)
+        || value.legs.length === 0)
+        return false;
+    return value.legs.every((leg) => isRecord(leg)
+        && typeof leg.from_iata === 'string'
+        && typeof leg.to_iata === 'string'
+        && Array.isArray(leg.carrier_codes)
+        && leg.carrier_codes.every((carrier) => typeof carrier === 'string'));
 }
 function provenance(snapshot) {
     return {
         route_source: snapshot?.source.url ?? '',
         route_revision: snapshot?.source.revision ?? '',
         route_license: snapshot?.source.license ?? '',
-        band_source: 'sf-golden-manifest.json'
+        band_source: 'sf-golden-manifest.json',
     };
 }
 function formatWithOffset(timestampMs, offset) {
@@ -49,23 +58,24 @@ function formatWithOffset(timestampMs, offset) {
 }
 function buildSegments(query, route, manualSegment) {
     if (route.route_kind === 'direct' && route.legs.length === 1) {
-        return [
-            {
+        return [{
                 from: query.from,
                 to: query.to,
                 departure_at: manualSegment.departure_at,
                 arrival_at: manualSegment.arrival_at,
-                transport_number: `${route.legs[0].carrier_codes[0]}-STATIC`
-            }
-        ];
+                transport_number: `${route.legs[0].carrier_codes[0]}-STATIC`,
+            }];
     }
-    if (route.route_kind !== 'transfer' || route.legs.length !== 2) return null;
+    if (route.route_kind !== 'transfer' || route.legs.length !== 2)
+        return null;
     const departureMs = Date.parse(manualSegment.departure_at);
     const arrivalMs = Date.parse(manualSegment.arrival_at);
-    if (!Number.isFinite(departureMs) || !Number.isFinite(arrivalMs) || arrivalMs <= departureMs) return null;
+    if (!Number.isFinite(departureMs) || !Number.isFinite(arrivalMs) || arrivalMs <= departureMs)
+        return null;
     const offset = manualSegment.departure_at.match(/([+-]\d{2}:\d{2})$/)?.[1] ?? '+08:00';
     const totalMinutes = Math.floor((arrivalMs - departureMs) / 60_000);
-    if (totalMinutes < 90) return null;
+    if (totalMinutes < 90)
+        return null;
     const layoverMinutes = Math.min(60, Math.floor(totalMinutes / 3));
     const travelMinutes = totalMinutes - layoverMinutes;
     const firstTravelMinutes = Math.floor(travelMinutes / 2);
@@ -77,32 +87,38 @@ function buildSegments(query, route, manualSegment) {
             to: middle,
             departure_at: manualSegment.departure_at,
             arrival_at: formatWithOffset(departureMs + firstTravelMinutes * 60_000, offset),
-            transport_number: `${route.legs[0].carrier_codes[0]}-STATIC`
+            transport_number: `${route.legs[0].carrier_codes[0]}-STATIC`,
         },
         {
             from: middle,
             to: query.to,
             departure_at: formatWithOffset(secondDepartureMs, offset),
             arrival_at: manualSegment.arrival_at,
-            transport_number: `${route.legs[1].carrier_codes[0]}-STATIC`
-        }
+            transport_number: `${route.legs[1].carrier_codes[0]}-STATIC`,
+        },
     ];
 }
 export function resolveStaticGolden(input) {
-    const route = input.snapshot?.routes.find((candidate)=>candidate.query_id === input.query.id);
+    const route = input.snapshot?.routes.find((candidate) => candidate.query_id === input.query.id);
     let fallbackReason;
     if (input.snapshotError) {
         fallbackReason = `static snapshot unavailable: ${input.snapshotError}`;
-    } else if (!route) {
+    }
+    else if (!route) {
         fallbackReason = `static route missing for ${input.query.id}`;
-    } else if (route.from_city !== input.query.from || route.to_city !== input.query.to) {
+    }
+    else if (route.from_city !== input.query.from || route.to_city !== input.query.to) {
         fallbackReason = `static route mismatch for ${input.query.id}`;
-    } else if (route.legs.some((leg)=>leg.carrier_codes.length === 0)) {
+    }
+    else if (route.legs.some((leg) => leg.carrier_codes.length === 0)) {
         fallbackReason = `static carrier coverage missing for ${input.query.id}`;
     }
     const manualSegment = input.manualRecord.route_segments[0];
-    const segments = !fallbackReason && route && manualSegment ? buildSegments(input.query, route, manualSegment) : null;
-    if (!fallbackReason && !segments) fallbackReason = `static route cannot form comparable record for ${input.query.id}`;
+    const segments = !fallbackReason && route && manualSegment
+        ? buildSegments(input.query, route, manualSegment)
+        : null;
+    if (!fallbackReason && !segments)
+        fallbackReason = `static route cannot form comparable record for ${input.query.id}`;
     if (fallbackReason) {
         input.warn?.(`[sf-live-benchmark] static vendor failed for ${input.query.id}: ${fallbackReason}; fallback=manual-golden`);
         return {
@@ -111,7 +127,7 @@ export function resolveStaticGolden(input) {
             record: input.manualRecord,
             fallback_reason: fallbackReason,
             estimated_fields: [],
-            provenance: provenance(input.snapshot)
+            provenance: provenance(input.snapshot),
         };
     }
     return {
@@ -121,17 +137,14 @@ export function resolveStaticGolden(input) {
             ...input.manualRecord,
             route_segments: segments,
             journey_type: route.route_kind,
-            source: 'static-openflights+manual-band'
+            source: 'static-openflights+manual-band',
         },
         estimated_fields: [
             'route_segments[].departure_at',
             'route_segments[].arrival_at',
             'route_segments[].transport_number',
-            'price'
+            'price',
         ],
-        provenance: provenance(input.snapshot)
+        provenance: provenance(input.snapshot),
     };
 }
-
-
-//# sourceURL=ts/capabilities/session/static-flight-golden.ts

package/dist/capabilities/session/transport.js

@@ -1,13 +1,27 @@
+/**
+ * SessionTransport(会话检索传输层,RFC §3.2;2026-08-28 定案 puppeteer-core):
+ * - mode=cdp(默认):attach 用户日常 Chrome——Chrome 144+ 调试服务(chrome://inspect 开关)
+ *   与 playwright 不兼容(握手后 CDP 初始化悬挂,实测三轮),与 puppeteer 完全兼容(实测 2256 cookies)。
+ *   发现走 user-data-dir 的 DevToolsActivePort 文件(HTTP 发现面已硬化 404;Origin 头=403,安全设计)。
+ *   close() 只 disconnect,绝不关用户浏览器。
+ * - mode=persistent(测试/后备):puppeteer.launch 专用 profile(测试用 mktemp 隔离匿名态)。
+ * fail-closed(RFC §3.3-④):guard 装不上 = 整个会话打不开——不存在「无守卫的会话」这一形态。
+ * 永不抛错:任何启动失败降级为 TransportFailure,由 session-search 编排层消费。
+ */
 import { readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { attachReadGuardPuppeteer } from './read-guard.js';
+/**
+ * puppeteer-core 为可选依赖(D-14:产品运行时零硬依赖,缺则优雅降级)。
+ * 顶层动态 import——npm 形态若未装 puppeteer-core,openSession 返回 TransportFailure
+ * 而非在模块加载期炸掉整个插件(2026-08-28 发布面实测:静态 import 会拖垮 index.ts 加载链)。
+ */
 async function loadPuppeteer() {
     try {
         return await import('puppeteer-core');
-    } catch  {
-        return {
-            missing: true
-        };
+    }
+    catch {
+        return { missing: true };
     }
 }
 function devtoolsWsEndpoint() {
@@ -15,102 +29,81 @@ function devtoolsWsEndpoint() {
         const udd = process.env.CHROME_USER_DATA_DIR ?? `${homedir()}/Library/Application Support/Google/Chrome`;
         const [port, wsPath] = readFileSync(`${udd}/DevToolsActivePort`, 'utf8').trim().split('\n');
         if (!port || !wsPath?.startsWith('/devtools/browser/')) {
-            return {
-                err: `DevToolsActivePort 内容异常: ${String(port)}/${String(wsPath)}`
-            };
+            return { err: `DevToolsActivePort 内容异常: ${String(port)}/${String(wsPath)}` };
         }
-        return {
-            ws: `ws://127.0.0.1:${port.trim()}${wsPath.trim()}`
-        };
-    } catch  {
-        return {
-            err: '日常 Chrome 未开调试端口。开启方法:Chrome 打开 chrome://inspect/#remote-debugging → 打开开关(Chrome 144+)'
-        };
+        return { ws: `ws://127.0.0.1:${port.trim()}${wsPath.trim()}` };
+    }
+    catch {
+        return { err: '日常 Chrome 未开调试端口。开启方法:Chrome 打开 chrome://inspect/#remote-debugging → 打开开关(Chrome 144+)' };
     }
 }
 export async function openSession(opts = {}) {
     const pp = await loadPuppeteer();
     if ('missing' in pp) {
-        return {
-            ok: false,
-            summary: 'puppeteer-core 未安装(可选依赖):会话检索不可用,官方通道 gotry_flyai_search 仍可用。安装:npm i -D puppeteer-core'
-        };
+        return { ok: false, summary: 'puppeteer-core 未安装(可选依赖):会话检索不可用,官方通道 gotry_flyai_search 仍可用。安装:npm i -D puppeteer-core' };
     }
     const puppeteer = pp.default;
-    const useCdp = opts.mode === 'cdp' || opts.mode !== 'persistent' && !opts.profileDir;
+    const useCdp = opts.mode === 'cdp' || (opts.mode !== 'persistent' && !opts.profileDir);
     let browser;
     let isCdp = false;
     if (useCdp) {
         const d = devtoolsWsEndpoint();
-        if ('err' in d) return {
-            ok: false,
-            summary: d.err
-        };
+        if ('err' in d)
+            return { ok: false, summary: d.err };
         try {
-            browser = await puppeteer.connect({
-                browserWSEndpoint: d.ws,
-                defaultViewport: null
-            });
+            browser = await puppeteer.connect({ browserWSEndpoint: d.ws, defaultViewport: null });
             isCdp = true;
-        } catch (e) {
+        }
+        catch (e) {
             const msg = e instanceof Error ? e.message : e?.message ?? JSON.stringify(e).slice(0, 200);
-            return {
-                ok: false,
-                summary: `cdp attach 失败:${String(msg).split('\n')[0]}`
-            };
+            return { ok: false, summary: `cdp attach 失败:${String(msg).split('\n')[0]}` };
         }
-    } else {
+    }
+    else {
         const { tmpdir } = await import('node:os');
         const profileDir = opts.profileDir ?? `${tmpdir()}/gotry-session-profile`;
         try {
-            browser = await puppeteer.launch({
-                channel: 'chrome',
-                headless: opts.headless ?? true,
-                userDataDir: profileDir
-            });
-        } catch (e) {
-            return {
-                ok: false,
-                summary: `chrome launch failed: ${e instanceof Error ? e.message.split('\n')[0] : String(e)}`
-            };
+            browser = await puppeteer.launch({ channel: 'chrome', headless: opts.headless ?? true, userDataDir: profileDir });
+        }
+        catch (e) {
+            return { ok: false, summary: `chrome launch failed: ${e instanceof Error ? e.message.split('\n')[0] : String(e)}` };
         }
     }
+    // fail-closed:guard 装不上即断开返回失败——不给无守卫的检索会话形态
+    // (唯一豁免:登录 bootstrap 显式 guard:false,见 TransportOptions 注释)
     let guard;
     if (opts.guard !== false) {
         try {
             guard = await attachReadGuardPuppeteer(browser, opts.auditPath);
-        } catch (e) {
-            await (isCdp ? browser.disconnect() : browser.close()).catch(()=>{});
-            return {
-                ok: false,
-                summary: `read-guard attach failed: ${e instanceof Error ? e.message.split('\n')[0] : String(e)}`
-            };
+        }
+        catch (e) {
+            await (isCdp ? browser.disconnect() : browser.close()).catch(() => { });
+            return { ok: false, summary: `read-guard attach failed: ${e instanceof Error ? e.message.split('\n')[0] : String(e)}` };
         }
     }
+    // 标签页纪律:ownPage=自己开的新页(newPage:true)——用它,收尾按 closeOwnPage 关;
+    // 否则沿用既有首页(仅 persistent 兼容形态;cdp 检索/登录一律 newPage)
     let ownPage = false;
     let page;
     if (opts.newPage) {
         page = await browser.newPage();
         ownPage = true;
-    } else {
+    }
+    else {
         page = (await browser.pages())[0] ?? await browser.newPage();
     }
     return {
         ok: true,
         browser,
         page,
-        guard: guard ?? {
-            blockedCount: ()=>0,
-            requestCount: ()=>0
-        },
-        close: async ()=>{
+        guard: guard ?? { blockedCount: () => 0, requestCount: () => 0 },
+        close: async () => {
+            // 自己开的标签页按 closeOwnPage 收尾(登录引导保持 false——登录页留给用户);
+            // cdp:只断开连接,绝不关用户浏览器;persistent:关自己拉起的实例
             if (ownPage && (opts.closeOwnPage ?? true)) {
-                await page.close().catch(()=>{});
+                await page.close().catch(() => { });
             }
-            await (isCdp ? browser.disconnect() : browser.close()).catch(()=>{});
-        }
+            await (isCdp ? browser.disconnect() : browser.close()).catch(() => { });
+        },
     };
 }
-
-
-//# sourceURL=ts/capabilities/session/transport.ts