@danceiny/gotry 0.0.1-rc.8 → 0.2.0-rc.27

package/dist/capabilities/session/wizard.js

@@ -0,0 +1,117 @@
+/**
+ * 会话扩展 onboarding wizard(RFC docs/rfc/user-session-data-rfc.md §3.3,ADR-21 上架后重设)。
+ *
+ * 单一职责(2026-09-02 重设):**只做 Node 端两件事**——
+ *   ① 扩展文件从源落位到 `~/.gotry/extension`(幂等)
+ *   ② source/dest 静态预检 + manifest.key 校验(给 health-watch 前的快照)
+ *
+ * 浏览器商店安装是浏览器的事,dsh 渲染 verdict.installUrl 是 dsh UI 的事;
+ * gotry **不再**弹 GUI 面板(pbcopy/osascript/zenity/msg)、不再 open 浏览器、
+ * 不再写一墙文字 CLI 指引。任何"装到能用"的 UX 都由浏览器商店 + dsh UI 分担。
+ *
+ * 历史形态回顾:
+ * - 2026-08-30 初版:5 步编排 + 剪贴板 + GUI 面板 + 健康探活(全栈闭环初衷好,但越界管了浏览器)
+ * - 2026-09-02 上架后:缩为 2 步(ensure + watch precheck),纯 Node 职责
+ *
+ * 接口契约:
+ * - `runOnboardingWizard({ dryRun, extensionDir?, sourceDir? })` 返回 2 步 OnboardingResult
+ * - `defaultExtensionDir()` / `describeExtensionDir()` 留作公开工具
+ */
+import { copyFileSync, existsSync, mkdirSync, readdirSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+const DEFAULT_SOURCE_DIR_CANDIDATES = [
+    join(process.cwd(), 'extension'),
+    join(process.cwd(), 'dist', 'extension'),
+    join(process.cwd(), 'ts', '..', 'extension'),
+];
+function resolveExtensionSourceDir() {
+    for (const candidate of DEFAULT_SOURCE_DIR_CANDIDATES) {
+        if (existsSync(join(candidate, 'manifest.json')))
+            return candidate;
+    }
+    return DEFAULT_SOURCE_DIR_CANDIDATES[0];
+}
+export function defaultExtensionDir() {
+    return join(homedir(), '.gotry', 'extension');
+}
+/** 落位扩展文件(幂等);缺源/源不全会 fail-soft,提示用户重跑 `gotry setup` */
+function ensureExtensionFiles(source, target, dryRun) {
+    if (dryRun)
+        return { step: 'ensure-extension-files', status: 'skip', summary: '[dry-run] skip 扩展落位' };
+    try {
+        if (!existsSync(source) || !existsSync(join(source, 'manifest.json'))) {
+            return { step: 'ensure-extension-files', status: 'fail', summary: `源扩展目录缺失 manifest.json: ${source}(先跑 npx @danceiny/gotry setup 落位)` };
+        }
+        mkdirSync(target, { recursive: true });
+        const required = ['manifest.json', 'background.js', 'content-main.js', 'content-bridge.js'];
+        for (const f of required) {
+            const src = join(source, f);
+            if (!existsSync(src))
+                return { step: 'ensure-extension-files', status: 'fail', summary: `源扩展缺 ${f}(重新 npm install 或 gotry setup)` };
+            copyFileSync(src, join(target, f));
+        }
+        return { step: 'ensure-extension-files', status: 'ok', summary: `扩展已落位 ${target}(manifest+3 文件)` };
+    }
+    catch (e) {
+        return { step: 'ensure-extension-files', status: 'fail', summary: `扩展落位失败: ${e instanceof Error ? e.message.slice(0, 120) : String(e)}` };
+    }
+}
+/** 静态预检:落位目录可见 + manifest.key 存在(扩展 ID 稳定)+ 源未新于 dest */
+async function watchExtensionReady(dryRun, sourceDir, extensionDir) {
+    if (dryRun)
+        return { step: 'watch-extension-ready', status: 'skip', summary: '[dry-run] skip health-watch precheck' };
+    if (!existsSync(extensionDir) || !existsSync(join(extensionDir, 'manifest.json'))) {
+        return { step: 'watch-extension-ready', status: 'fail', summary: `落位缺失 manifest.json:${extensionDir}` };
+    }
+    try {
+        const srcStat = statSync(sourceDir);
+        const dstStat = statSync(extensionDir);
+        if (srcStat.mtimeMs > dstStat.mtimeMs) {
+            return { step: 'watch-extension-ready', status: 'fail', summary: `扩展文件可能过期(源比落位新);重跑 npx @danceiny/gotry setup` };
+        }
+        const manifest = JSON.parse(await (await import('node:fs/promises')).readFile(join(extensionDir, 'manifest.json'), 'utf8'));
+        if (typeof manifest.key !== 'string' || manifest.key.length < 100) {
+            return { step: 'watch-extension-ready', status: 'fail', summary: 'manifest.key 缺失或过短,扩展 ID 不能稳定' };
+        }
+    }
+    catch (e) {
+        return { step: 'watch-extension-ready', status: 'fail', summary: `静态预检失败: ${e instanceof Error ? e.message.slice(0, 120) : String(e)}` };
+    }
+    return { step: 'watch-extension-ready', status: 'ok', summary: '扩展文件就绪(manifest.key 校验通过,后台轮询就绪态由 health-watch 接管)' };
+}
+/**
+ * 主入口(2 步):①扩展落位 ②watch precheck 静态预检。
+ * 真 health-watch 由 health-watch.ts 单独负责,不并入 wizard。
+ */
+export async function runOnboardingWizard(opts = {}) {
+    const dryRun = opts.dryRun ?? false;
+    const extensionDir = opts.extensionDir ?? defaultExtensionDir();
+    const sourceDir = opts.sourceDir ?? resolveExtensionSourceDir();
+    const steps = [];
+    steps.push(ensureExtensionFiles(sourceDir, extensionDir, dryRun));
+    steps.push(await watchExtensionReady(dryRun, sourceDir, extensionDir));
+    const ok = steps.every((s) => s.status !== 'fail');
+    return { ok, steps, extensionDir };
+}
+/** stdout 人话化打印(给 bootstrap 子进程单行 JSON 输出之外的兜底形态) */
+export function printWizardResult(result, destination = process.stdout) {
+    const tag = (s) => {
+        if (s.status === 'ok')
+            return '✅';
+        if (s.status === 'skip')
+            return '⏭ ';
+        return '❌';
+    };
+    for (const s of result.steps) {
+        destination.write(`${tag(s)} ${s.step}: ${s.summary}\n`);
+    }
+    destination.write(`extensionDir=${result.extensionDir}; overall=${result.ok ? 'ok' : 'has-failures'}\n`);
+}
+/** 公开诊断探针(bootstrap 报告用) */
+export function describeExtensionDir(extensionDir) {
+    if (!existsSync(extensionDir))
+        return { exists: false, fileCount: 0, hasManifest: false };
+    const files = readdirSync(extensionDir);
+    return { exists: true, fileCount: files.length, hasManifest: files.includes('manifest.json') };
+}

package/dist/capabilities/session-consent.js

@@ -0,0 +1,178 @@
+/**
+ * SessionConsent——账号会话授权闸(RFC 合规支柱④「用户明示授权 + 站点白名单 + 随时可关」进代码)。
+ *
+ * founder 口径(2026-08-29):「OTA 这些都是工具,不要区分什么主路径/降级路径;
+ * 这要用到用户的账号,所以必须跟用户确认(请求授权)。」
+ * 运行时原生审批卡语义是 allowed-once(逐调用批准)——首日落地后 founder 实测纠偏:
+ * 「每次都要弹,经常无法点击」→ 逐次弹卡把授权变成了骚扰。授权模型 v2:
+ *
+ *   - 每会话每站点**首次调用**弹审批卡;allowed-once 记入该 agent 的 granted 集,
+ *     会话内同站点后续调用直接放行(不再弹);
+ *   - rejected/cancelled 视为**会话内吊销**(denied 集):本会话不再弹卡、不再执行,
+ *     返回值明确告诉模型「改走其他工具,不要反复尝试」——防止反复开页骚扰用户;
+ *   - 审批通道缺席(unavailable,如 headless 一问一答)→ deny 且**不**记 denied
+ *     (通道回来后还能问一次);
+ *   - sessionAccess = 'ask'(默认)| 'allow'(用户已明示预授权,放行)| 'off'(随时可关);
+ *   - 授权状态存 Weak<agent>——会话结束即遗忘,绝不跨会话持久化(明示授权不默认延续)。
+ * 审计:批准/拒绝事件由 dsh ApprovalService 落 session log(approval/asked + decided),
+ * 本模块不重复建账。站点白名单 = ACCOUNT_TOOLS 注册表(新会话适配器接入时登记)。
+ *
+ * site 绑定(2026-09-10 #308):同一工具多个 kind(例如 gotry_session_search → flight/hotel/dida/train)
+ * 必须按与 execute 同源的 interpretArgs 选 site(包装 query 优先);授权与拒绝均按 site
+ * 分桶。缺省 kind 保持工具合同的 flight 默认值;unknown/malformed kind 失败关闭(deny,
+ * 不扩权),防止新站点未登记就放行。train 虽是 12306 公开查询面,仍经过本闸的 off/ask/allow。
+ */
+import { interpretArgs } from '../src/tool-packet.js';
+/**
+ * 工具级 site 表(无 kind 维度时使用):key=工具名,value=站点。
+ * 复合工具(同一名字下多 kind)在 SITE_FOR_KIND 中显式登记。
+ */
+export const ACCOUNT_TOOLS = {
+    gotry_session_search: 'ctrip-flight',
+};
+const SITE_LABEL = {
+    'ctrip-flight': '携程机票',
+    'ctrip-hotel': '携程酒店',
+    'dida-portal': 'Dida 供应商门户',
+    'train-12306': '12306 余票(公开查询面)',
+};
+/**
+ * 复合工具 × kind → site(#308:site 绑定)。
+ * 仅对显式登记的 kind 放行,未知 kind → 失败关闭(防止未登记站点扩权)。
+ * 12306 公开查询面(kind=train)仍受本工具的会话授权总闸约束,不因公开查询而绕过 off/ask/allow。
+ */
+export const SITE_FOR_KIND = {
+    gotry_session_search: {
+        flight: 'ctrip-flight',
+        hotel: 'ctrip-hotel',
+        dida: 'dida-portal',
+        train: 'train-12306',
+    },
+};
+/** 会话检索工具支持的 kind;gate 与 execute 共用此选择结果。 */
+export const SESSION_SEARCH_KINDS = ['flight', 'hotel', 'train', 'dida'];
+/**
+ * Select the kind exactly as the session tool execute path does.
+ * `interpretArgs` is intentionally the only query-wrapper normalizer: a
+ * wrapped query wins over conflicting flat fields, and omitted kind keeps the
+ * documented flight default. Explicit malformed/unknown kinds fail closed.
+ */
+export function resolveSessionSearchKind(args) {
+    if (args === undefined)
+        return { ok: true, kind: 'flight' };
+    if (!args || typeof args !== 'object' || Array.isArray(args)) {
+        return { ok: false, reason: 'gotry_session_search 参数必须是对象;无法安全选择 kind,已失败关闭' };
+    }
+    const selected = interpretArgs(args);
+    if (!selected || typeof selected !== 'object' || Array.isArray(selected)) {
+        return { ok: false, reason: 'gotry_session_search 参数包装形态无效;无法安全选择 kind,已失败关闭' };
+    }
+    if (!Object.prototype.hasOwnProperty.call(selected, 'kind'))
+        return { ok: true, kind: 'flight' };
+    const kind = selected.kind;
+    if (typeof kind !== 'string' || kind.length === 0) {
+        return { ok: false, reason: 'gotry_session_search 收到 malformed kind;无法安全选择站点,已失败关闭' };
+    }
+    if (!SESSION_SEARCH_KINDS.includes(kind)) {
+        return { ok: false, reason: `gotry_session_search 收到未知 kind=${kind};只支持 ${SESSION_SEARCH_KINDS.join('/')},未知 kind 失败关闭` };
+    }
+    return { ok: true, kind: kind };
+}
+/**
+ * 解析 site(#308):对复合工具(缺省 kind=flight,未知/malformed kind → fail-closed);对未在
+ * SITE_FOR_KIND 登记的工具走原 ACCOUNT_TOOLS 表保持兼容。无 site → 放行(非账号面工具)。
+ */
+export function resolveSiteForExec(exec) {
+    const name = exec.name;
+    if (!name)
+        return null;
+    const map = SITE_FOR_KIND[name];
+    if (map) {
+        const selected = resolveSessionSearchKind(exec.arguments);
+        if (!selected.ok)
+            return { failClosed: true, reason: selected.reason };
+        const site = map[selected.kind];
+        if (!site)
+            return { failClosed: true, reason: `工具 ${name} 的 kind=${selected.kind} 未登记站点;失败关闭` };
+        return { site };
+    }
+    const site = ACCOUNT_TOOLS[name];
+    if (!site)
+        return null;
+    return { site };
+}
+function reasonFor(toolName, site) {
+    return `工具 ${toolName} 将使用你本人已登录的浏览器会话，在「${SITE_LABEL[site] ?? site}」进行只读检索`
+        + '（ReadGuard 物理只读：写请求在网络层即中止，agent 永不接触凭证与验证码）；'
+        + '本次批准仅在本会话内有效，会话结束即失效，不会跨会话延续。';
+}
+/**
+ * 账号会话授权闸:挂 dsh `tools/pre-execute` waterfall。
+ * 契约:
+ *   - 非账号面工具 → next() 放行(零开销);
+ *   - off → 拒绝(随时可关);
+ *   - 会话内已拒绝 → 拒绝且不弹卡(拒绝=本会话吊销;按 site 分桶,跨站不互授);
+ *   - 会话内已批准 / allow 预授权 → 放行;
+ *   - 复合工具未知/malformed kind → fail-closed deny(不扩权),缺省 kind=flight;
+ *   - 其余 → ApprovalService.request();allowed-once 按 site 入会话 granted;
+ *     rejected/cancelled 按 site 入会话 denied(本会话不在请求);
+ *     无审批通道 → deny(fail-closed,headless 无用户 = 无授权)。
+ */
+export function createConsentGate(opts) {
+    const store = opts.store ?? new WeakMap();
+    const approvalOf = opts.approval ?? (() => undefined);
+    return async (exec, next) => {
+        const resolved = resolveSiteForExec(exec);
+        if (!resolved)
+            return next();
+        if ('failClosed' in resolved)
+            return { kind: 'deny', reason: resolved.reason };
+        const { site } = resolved;
+        if ((opts.access() ?? 'ask') === 'off') {
+            return { kind: 'deny', reason: `工具 ${exec.name} 已被配置关闭（sessionAccess=off）。如需重新启用账号会话检索，请到配置中重新开启 sessionAccess。` };
+        }
+        const state = (exec.agent && store.get(exec.agent)) || undefined;
+        if (state?.denied.has(site)) {
+            return { kind: 'deny', reason: `你已在本会话拒绝过「${SITE_LABEL[site] ?? site}」的账号会话检索。为避免反复打扰，本会话不再请求授权，请改用其他工具继续推进。` };
+        }
+        if (state?.granted.has(site) || (opts.access() === 'allow' && exec.agent))
+            return next();
+        const approval = opts.approval?.();
+        if (!approval || !exec.agent)
+            return { kind: 'ask', reason: reasonFor(exec.name ?? '', site) };
+        let outcome;
+        try {
+            outcome = await approval.request({ agent: exec.agent, toolName: exec.name ?? '', callId: exec.callId, reason: reasonFor(exec.name ?? '', site) });
+        }
+        catch {
+            outcome = 'unavailable';
+        }
+        if (outcome === 'allowed-once') {
+            remember(store, exec.agent, site, 'grant');
+            return next();
+        }
+        if (outcome === 'rejected' || outcome === 'cancelled') {
+            remember(store, exec.agent, site, 'deny');
+            return { kind: 'deny', reason: `你刚刚拒绝了工具 ${exec.name} 的账号会话授权（本次拒绝仅在本会话内生效）。为避免反复打扰，本会话不再重复请求授权，请改用其他工具继续推进。` };
+        }
+        return { kind: 'deny', reason: `工具 ${exec.name} 需要你授权，但当前没有可用的审批通道。在 headless 一问一答场景下没有审批界面，请改用 web 会话来使用账号会话检索。` };
+    };
+}
+function remember(store, agent, site, mode) {
+    const prev = store.get(agent) ?? { granted: new Set(), denied: new Set() };
+    if (mode === 'grant')
+        prev.granted.add(site);
+    else
+        prev.denied.add(site);
+    store.set(agent, prev);
+}
+/** 从运行时上下文懒解析审批缝(与 dsh-tools serviceAsk 的 ctx.get('approval') 同一协议) */
+export function approvalFromContext(ctx) {
+    return () => {
+        const get = ctx.get;
+        if (typeof get !== 'function')
+            return undefined;
+        const approval = get.call(ctx, 'approval');
+        return approval && typeof approval.request === 'function' ? approval : undefined;
+    };
+}

package/dist/capabilities/session-login.js

@@ -0,0 +1,170 @@
+/**
+ * 账号会话登录引导(产品化工具面:gotry_session_login 的能力层,founder 2026-08-29「请产品化」)。
+ *
+ * **语义边界(防误解,founder 红线「我们是不会要求用户上传密钥给 gotry 的」)**:
+ *   - 登录发生在外部网站(携程官网),用用户自己的浏览器会话完成;
+ *   - gotry 不提供、不代填、不接触任何密码/短信验证码/cookie 值;
+ *   - 本模块唯一事实:**只读 cookie 的名字**,判断「是否已登录」这个布尔——
+ *     名称级存在性检查 = 数据最小化的极端形态(0 个值过手);
+ *   - 登录入口页不挂 ReadGuard(见 transport.ts guard:false 注释):那是用户自己的
+ *     凭证流,我们的拦截绝不能站在用户与网站中间(检索面守卫不变量不受影响)。
+ *
+ * flow:attach 用户日常 Chrome → 打开登录入口标签 → 用户在携程官网自行登录 →
+ * 本模块只读轮询票据 cookie **名字**(cticket/uid/uname/passport)→ 到齐即报「已登录」。
+ */
+import { openSession } from './session/transport.js';
+import { extensionCookieNames, extensionOpenLogin, classifyBridgeFailure } from './session/extension-channel.js';
+import { EXTENSION_STORE_URL } from './session/extension-bridge.js';
+import { resolveTransportMode } from './session-search.js';
+/** 站点白名单 = 适配器注册表;新站点适配器落地时在此登记 */
+export const LOGIN_TARGETS = {
+    'ctrip-flight': { domain: 'ctrip.com', names: ['cticket', 'uid', 'uname', 'passport'], label: '携程机票', entryUrl: 'https://flights.ctrip.com/' },
+    'meituan-hotel': { domain: 'meituan.com', names: ['lt', 'u', 'token', 'n'], label: '美团酒店', entryUrl: 'https://hotel.meituan.com/' },
+    'dida-portal': { domain: 'dida.com', names: ['CN_M_DidaTravel'], label: 'Dida 供应商门户', entryUrl: 'https://portal.dida.com/login' },
+};
+function err(site, verdict, error, started, ts) {
+    return {
+        ok: false, via: 'session-login-error', evidence: `[会话:login-error@${ts}] ${error.slice(0, 200)}`,
+        latencyMs: Date.now() - started, verdict, site, error: error.slice(0, 200),
+    };
+}
+/** 只读轮询:目标域上已存在的登录票据 cookie 名单(只要名字,永不读值) */
+export async function pollTicketNames(browser, target) {
+    const cookies = await browser.cookies().catch(() => []);
+    if (!Array.isArray(cookies))
+        return [];
+    return cookies
+        .filter((c) => (c.domain ?? '').includes(target.domain) && c.name != null && target.names.includes(c.name))
+        .map((c) => c.name);
+}
+/**
+ * 产品化登录引导(永不抛错;登录由用户在携程官网完成,gotry 只做名称级存在性检查)。
+ * verdict:logged-in=已检出票据;pending=登录入口已打开、用户尚未完成(不阻塞,可稍后再查);
+ * needs-extension=扩展桥未连接(一次性安装指引,默认车道);needs-attach=cdp 车道下用户 Chrome 未开调试端口;error=其余降级。
+ */
+export async function sessionLogin(q = {}) {
+    const started = Date.now();
+    const ts = new Date().toISOString();
+    const site = q.site ?? 'ctrip-flight';
+    const target = LOGIN_TARGETS[site];
+    if (!target) {
+        return err(site, 'error', `未知站点 ${site}(可选 ${Object.keys(LOGIN_TARGETS).join('/')})`, started, ts);
+    }
+    // 扩展车道(默认):零 CDP、零系统弹窗——cookie 名快查 + 登录入口 job
+    if (resolveTransportMode() === 'extension') {
+        return sessionLoginViaExtension(site, target, q, started, ts);
+    }
+    // 人机共治纪律:开自己的新标签页并置前台——用户必须看见登录页(2026-08-29 founder:
+    // 「我根本就看不到登录页面」,此前误劫持用户既有标签页);closeOwnPage=false 把登录页留给用户
+    const t = await openSession({ mode: 'cdp', guard: false });
+    if (!t.ok) {
+        const needsAttach = /chrome:\/\/inspect|DevToolsActivePort|cdp attach 失败/.test(t.summary);
+        return err(site, needsAttach ? 'needs-attach' : 'error', needsAttach
+            ? `${t.summary};开启方法:你的 Chrome 打开 chrome://inspect/#remote-debugging → 打开开关(Chrome 144+,一次性),开启后直接再说一声即可`
+            : t.summary, started, ts);
+    }
+    const evidenceTag = `[会话:${site}-login@${ts}]`;
+    try {
+        // 自动检测优先(2026-08-29 founder「UI 里有自动检测吗」):先只读票据名——
+        // 已登录则**零弹窗**直接确认,不打开任何页面;登录状态由用户在携程官网自然留存
+        const pre = await pollTicketNames(t.browser, target);
+        if (pre.length > 0) {
+            await t.close();
+            return {
+                ok: true, via: 'session-login', latencyMs: Date.now() - started, verdict: 'logged-in', site, tickets: pre,
+                evidence: `${evidenceTag} 自动检测:票据 cookie 已在(先前登录已生效)——[${pre.join(', ')}](只读名字,0 网页交互)`,
+            };
+        }
+        // 未检出 → 开自己的新标签页并置前台(绝不劫持用户既有页面),等待用户在官网完成登录
+        const page = await t.browser.newPage();
+        await page.bringToFront().catch(() => { });
+        try {
+            await page.goto(target.entryUrl, { waitUntil: 'domcontentloaded', timeout: 30_000 });
+        }
+        catch {
+            // 站点慢不致命:入口标签已打开,用户手动登录即可
+        }
+        console.log(`[session-login] ${target.label} 登录入口已在新标签页置前打开`);
+        const waitMs = Math.min(Math.max(q.waitMs ?? 90_000, 0), 300_000);
+        const pollMs = Math.min(Math.max(q.pollMs ?? 3_000, 500), 10_000);
+        const deadline = Date.now() + waitMs;
+        let tickets = [];
+        while (Date.now() < deadline) {
+            await new Promise((resolve) => setTimeout(resolve, pollMs));
+            tickets = await pollTicketNames(t.browser, target);
+            if (tickets.length > 0)
+                break;
+        }
+        await t.close();
+        if (tickets.length > 0) {
+            return {
+                ok: true, via: 'session-login', latencyMs: Date.now() - started, verdict: 'logged-in', site, tickets,
+                evidence: `${evidenceTag} 票据 cookie 已检出 [${tickets.join(', ')}](只读名字;登录在你自己的浏览器里完成,gotry 全程未接触任何密码/验证码/cookie 值)`,
+            };
+        }
+        return {
+            ok: true, via: 'session-login', latencyMs: Date.now() - started, verdict: 'pending', site, tickets: [],
+            evidence: `${evidenceTag} 登录入口已在你的 Chrome 打开(${target.label});在标签页里正常登录完成后再说一声「继续查」即可——gotry 只检查"是否已登录",永不收集你的账号信息`,
+        };
+    }
+    catch (e) {
+        await t.close().catch(() => { });
+        return err(site, 'error', e instanceof Error ? e.message : String(e), started, ts);
+    }
+}
+/**
+ * 扩展车道登录引导(2026-08-29 传输层方案 C):语义与 cdp 车道一致——
+ * 自动检测优先(票据名在 = 零弹窗直接确认);未检出才开登录入口 job(置前台,标签留给用户);
+ * 只读轮询票据名,永不接触 cookie 值。verdict:logged-in | pending | needs-extension | error。
+ */
+async function sessionLoginViaExtension(site, target, q, started, ts) {
+    const evidenceTag = `[会话:${site}-login@${ts}]`;
+    const quick = (verdict, error) => {
+        const base = {
+            ok: false, via: 'session-login-error', evidence: `[会话:login-error@${ts}] ${error.slice(0, 200)}`,
+            latencyMs: Date.now() - started, verdict, site, error: error.slice(0, 400),
+        };
+        // needs-extension:浏览器自己当安装器,gotry 不弹面板不开剪贴板——只把商店 URL 给 dsh UI
+        if (verdict === 'needs-extension')
+            base.installUrl = EXTENSION_STORE_URL;
+        if (verdict === 'needs-extension')
+            base.installAction = 'add-to-chrome';
+        return base;
+    };
+    // 自动检测优先:先只读票据名——已登录则零交互直接确认(与 cdp 车道同一语义,founder「UI 里有自动检测吗」)
+    const pre = await extensionCookieNames({ site, domain: target.domain, ticketNames: target.names, timeoutMs: 8_000 });
+    if (!pre.ok)
+        return quick(classifyBridgeFailure(pre.kind) === 'needs-extension' ? 'needs-extension' : 'error', pre.summary);
+    if (pre.tickets.length > 0) {
+        return {
+            ok: true, via: 'session-login', latencyMs: Date.now() - started, verdict: 'logged-in', site, tickets: pre.tickets,
+            evidence: `${evidenceTag} 自动检测:票据 cookie 已在(先前登录已生效)——[${pre.tickets.join(', ')}](只读名字,0 网页交互,零弹窗)`,
+        };
+    }
+    // 未检出 → 开登录入口标签(置前台,绝不劫持用户已有页面;登录在携程官网完成)
+    const opened = await extensionOpenLogin({ site, url: target.entryUrl, timeoutMs: 15_000 });
+    if (!opened.ok)
+        return quick(classifyBridgeFailure(opened.kind) === 'needs-extension' ? 'needs-extension' : 'error', opened.summary);
+    const waitMs = Math.min(Math.max(q.waitMs ?? 90_000, 0), 300_000);
+    const pollMs = Math.min(Math.max(q.pollMs ?? 3_000, 500), 10_000);
+    const deadline = Date.now() + waitMs;
+    let tickets = [];
+    while (Date.now() < deadline) {
+        await new Promise((resolve) => setTimeout(resolve, pollMs));
+        const poll = await extensionCookieNames({ site, domain: target.domain, ticketNames: target.names, timeoutMs: 8_000 });
+        if (poll.ok)
+            tickets = poll.tickets;
+        if (tickets.length > 0)
+            break;
+    }
+    if (tickets.length > 0) {
+        return {
+            ok: true, via: 'session-login', latencyMs: Date.now() - started, verdict: 'logged-in', site, tickets,
+            evidence: `${evidenceTag} 票据 cookie 已检出 [${tickets.join(', ')}](只读名字;登录在你自己的浏览器里完成,gotry 全程未接触任何密码/验证码/cookie 值)`,
+        };
+    }
+    return {
+        ok: true, via: 'session-login', latencyMs: Date.now() - started, verdict: 'pending', site, tickets: [],
+        evidence: `${evidenceTag} 登录入口已在你的 Chrome 置前打开(${target.label});在标签页里正常登录完成后再说一声「继续查」即可——gotry 只检查"是否已登录",永不收集你的账号信息`,
+    };
+}