@danceiny/gotry 0.0.1-rc.9 → 0.2.0-rc.28

package/extension/background.js

@@ -0,0 +1,463 @@
+/**
+ * GoTry Session Bridge — MV3 Service Worker(RFC docs/rfc/user-session-data-rfc.md §2.2 通道 C,2026-08-29 定案为 PRIMARY 传输)。
+ *
+ * 职责(与 Node 侧 session/extension-bridge.ts 配对,零构建纯 JS):
+ *   - 长轮询取活:POST /jobs(桥最多 hold 20s;每次响应/失败都重置 SW 30s 生命周期,任务秒级触达);
+ *     断线每 5s 重试,chrome.alarms(30s)兜底唤醒防 SW 悬挂。
+ *   - 三种 job:
+ *       search       → 后台标签打开 job.url(per-site 白名单:flights/hotels.ctrip.com),等 content hook 嗅探回包,收尾关自己的标签;
+ *       open-login   → 置前台打开登录入口页(登录页纪律 #34),标签留给用户,绝不代关;
+ *       cookie-names → chrome.cookies 只读票据 cookie **名字**(值即取即弃,永不离开扩展——红线)。
+ *   - 检索回包经页面代码发出并被动观察;本 SW 的 fetch 只发往桥,不直接发往供应商站点。
+ *     员工门户另有获准的 Dida 搜索控件操作与一次性登录表单代填/提交,详见隐私政策。
+ *
+ * 桥地址(2026-09-11,founder 定案:执行环境=浏览器客户端,服务端零 Chrome):
+ *   扩展**完全不暴露任何配置**给员工。hotel-be portal 在员工已登录的页面里通过
+ *   content-bridge.js 派发 `gotry-join` 消息({bridgeUrl, token}),SW 缓存到
+ *   `joinTicket` 模块变量;员工从未看见 URL / token / API host 等技术字眼。
+ *   SW 进程重启(约每 30s 节律)→ ticket 丢失 → 下次员工打开 portal 页面自动重发 → 静默恢复。
+ *
+ *   桌面形态(loopback 端口池)保留向后兼容:无 join ticket 时回退到 127.0.0.1 探测,
+ *   这是 gotry 桌面开发场景(gotry CLI 同机形态),与员工日常产品路径无关。
+ */
+
+'use strict'
+
+const BRIDGE_PORTS = [8791, 8792, 8793, 8794, 8795]
+const RETRY_MS = 5_000
+
+/** 站点注册表(与 Node 侧 LOGIN_TARGETS/LOGIN_COOKIE_NAMES 对账,防漂移测试守住) */
+const SITES = {
+  'ctrip-flight': {
+    domain: 'ctrip.com',
+    ticketNames: ['cticket', 'uid', 'uname', 'passport'],
+  },
+  // 酒店(2026-09-03 实装):同一携程账号体系;检索走 hotels.ctrip.com 后台标签 + 被动嗅探
+  'ctrip-hotel': {
+    domain: 'ctrip.com',
+    ticketNames: ['cticket', 'uid', 'uname', 'passport'],
+  },
+  // 火车(2026-09-03 实装):12306 余票查询是公开面(登录只关系下单),无票据名可检;
+  // search job 照常经 per-site 白名单,扩展只读被动嗅探
+  'train-12306': {
+    domain: '12306.cn',
+    ticketNames: [],
+  },
+  // Dida 供应商门户(2026-09-09 实装;hotel-be portal integration 迁移线):
+  // 员工登录态(HttpOnly 会话 cookie 只读名字,值即取即弃);检索走 portal.dida.com
+  // 后台标签 + 被动嗅探 portal-webapi 实时价
+  'dida-portal': {
+    domain: 'dida.com',
+    ticketNames: ['CN_M_DidaTravel'],
+  },
+}
+
+/** 检索 URL 白名单(per-site;search job 只允许开各自站点域,其余一律拒) */
+const SITE_SEARCH_PREFIXES = {
+  'ctrip-flight': 'https://flights.ctrip.com/',
+  'ctrip-hotel': 'https://hotels.ctrip.com/',
+  'train-12306': 'https://kyfw.12306.cn/',
+  'dida-portal': 'https://portal.dida.com/',
+}
+
+/**
+ * join ticket:由 hotel-be portal 通过 content-bridge 派发,SW 缓存;
+ * 模块级变量,SW 重启即清空(下次 portal 页派发即恢复,无需持久化)。
+ * 形态:{ bridgeUrl, token, issuedAt, expiresAt }
+ */
+let joinTicket = null
+let activePort = null
+let polling = false
+// Each Chrome profile has its own service worker. A restart rotates this ID, so an
+// in-flight search pinned to the old worker fails closed instead of switching profiles.
+const clientId = crypto.randomUUID()
+
+/**
+ * workspace 事件 buffer(批次 B,2026-10-01):content-bridge 转发的页面事件先进内存,
+ * 伴随每次 /jobs 长轮询批量上行(见 flushWorkspaceEvents)。模块变量,SW 重启即弃——
+ * 事件是活动上下文非权威事实,可接受;零 storage(扩展无该权限,红线)。
+ * 上界护栏:超出即丢最旧(页面风暴不得把 SW 内存或上行 body 顶爆 256KB 服务端限)。
+ */
+const WORKSPACE_EVENT_BUFFER_CAP = 200
+const workspaceEventBuffer = []
+
+function isJoinFresh(t) {
+  if (!t || typeof t.bridgeUrl !== 'string' || !t.bridgeUrl) return false
+  if (t.expiresAt && Number.isFinite(Date.parse(t.expiresAt)) && Date.parse(t.expiresAt) < Date.now()) return false
+  return true
+}
+
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms))
+}
+
+async function detectBridge() {
+  // 远程 join ticket 优先:portal 派发则连远程
+  if (isJoinFresh(joinTicket)) {
+    try {
+      const r = await fetch(`${joinTicket.bridgeUrl.replace(/\/+$/, '')}/health`, {
+        headers: { authorization: `Bearer ${joinTicket.token ?? ''}`, 'x-gotry-bridge': 'v1' },
+      })
+      if (r.ok) return true
+    } catch { /* 远程暂不可达;若也无可用 loopback 则继续重试 */ }
+  }
+  // 桌面形态兜底:loopback 端口池扫描
+  for (const p of BRIDGE_PORTS) {
+    try {
+      const r = await fetch(`http://127.0.0.1:${p}/health`, { headers: { 'x-gotry-bridge': 'v1' } })
+      if (r.ok) { activePort = p; return true }
+    } catch { /* 无人监听,试下一个端口 */ }
+  }
+  return false
+}
+
+function bridgeBase() {
+  if (isJoinFresh(joinTicket)) return joinTicket.bridgeUrl.replace(/\/+$/, '')
+  return activePort != null ? `http://127.0.0.1:${activePort}` : null
+}
+
+function bridgeHeaders(withJson) {
+  const h = { 'x-gotry-bridge': 'v1', 'x-gotry-client-id': clientId }
+  if (withJson) h['content-type'] = 'application/json'
+  if (isJoinFresh(joinTicket) && joinTicket.token) h['authorization'] = `Bearer ${joinTicket.token}`
+  return h
+}
+
+async function postResult(jobId, result) {
+  const base = bridgeBase()
+  if (base == null || !jobId) return
+  // 远程桥挂载在 gotry-backend 精确路由内核上,jobId 走 query;loopback 独立桥保持路径式
+  const url = isJoinFresh(joinTicket)
+    ? `${base}/results?jobId=${encodeURIComponent(jobId)}`
+    : `${base}/results/${encodeURIComponent(jobId)}`
+  try {
+    await fetch(url, {
+      method: 'POST',
+      headers: bridgeHeaders(true),
+      body: JSON.stringify(result),
+    })
+  } catch { /* 桥可能已退场;Node 侧超时兜底 */ }
+}
+
+/**
+ * workspace 事件批量上行(批次 B):伴随每次 /jobs 长轮询,把 buffer 整批 POST
+ * /v1/session/bridge/events(带 x-gotry-client-id/content-type,bearer 随 bridgeHeaders,
+ * Origin 由扩展 fetch 上下文自带 chrome-extension:// 源)。失败(网络断/403/400/503)
+ * 静默丢弃——事件是活动上下文非权威事实,重试不增值;批已出 buffer,不回灌。
+ * loopback 桌面形态无该端点(404)同样静默丢弃,零影响。
+ */
+async function flushWorkspaceEvents() {
+  if (workspaceEventBuffer.length === 0) return
+  const base = bridgeBase()
+  if (base == null) return
+  const batch = workspaceEventBuffer.splice(0, workspaceEventBuffer.length)
+  // 变量别名 url(与 postResult 同款):§38 fetch 审计只放行 bridgeBase()/joinTicket 派生或 url 别名
+  const url = `${base}/v1/session/bridge/events`
+  try {
+    await fetch(url, {
+      method: 'POST',
+      headers: bridgeHeaders(true),
+      body: JSON.stringify({ clientId, events: batch }),
+    })
+  } catch { /* 桥不可达:静默丢弃 */ }
+}
+
+/** 只读票据 cookie 名单(只上报名;chrome.cookies 的值就地丢弃,不进任何结果对象) */
+async function ticketNames(site) {
+  const conf = SITES[site]
+  if (!conf) return []
+  const cookies = await chrome.cookies.getAll({ domain: conf.domain }).catch(() => [])
+  return (Array.isArray(cookies) ? cookies : [])
+    .map((c) => c.name)
+    .filter((n) => conf.ticketNames.includes(n))
+}
+
+/** dida 推荐流多回包分类(与 Node 侧 mergeDidaRatesBodies 对账,run-all §38 防漂移断言守住) */
+function classifyDidaSniff(url) {
+  if (/SearchHomepageRecommendHotels/i.test(url)) return 'hotels'
+  if (/SearchHomepageRecommendPrices/i.test(url)) return 'recommendPrices'
+  if (/HotelPriceAPI\/SearchCache/i.test(url)) return 'searchCache'
+  if (/HotelPriceAPI\/SearchRealTime/i.test(url)) return 'realtime'
+  return null
+}
+
+/** multiCollect(dida):按城市+日期的检索以 **searchCache**(列表页价格面)结算;
+ * 旧口径(首页推荐流)仍等 hotels+recommendPrices 齐;超时带回已见分桶(诚实缺桶) */
+function waitSniffMulti(tabId, timeoutMs) {
+  return new Promise((resolve) => {
+    const bodies = {}
+    let settled = false
+    let title = ''
+    let challenge = false
+    const finish = () => {
+      if (settled) return
+      settled = true
+      clearTimeout(timer)
+      chrome.runtime.onMessage.removeListener(handler)
+      resolve({ ok: true, kind: 'search', bodies, title, challenge, timeout: !(bodies.searchCache || (bodies.hotels && bodies.recommendPrices)) })
+    }
+    const handler = (msg, sender) => {
+      if (!sender || !sender.tab || sender.tab.id !== tabId) return
+      if (msg && msg.type === 'gotry-page') {
+        title = String(msg.title ?? title)
+        if (msg.challenge === true) challenge = true
+        return
+      }
+      if (msg && msg.type === 'gotry-sniff') {
+        const cls = classifyDidaSniff(String(msg.url ?? ''))
+        if (cls && !bodies[cls]) bodies[cls] = String(msg.body ?? '')
+        // searchCache = 查询态价格面,拿到即可结算(推荐流是首页口径,不参与查询态结算)
+        if (bodies.searchCache || (bodies.hotels && bodies.recommendPrices)) finish()
+      }
+    }
+    const timer = setTimeout(finish, Math.max(Number(timeoutMs) || 30_000, 5_000))
+    chrome.runtime.onMessage.addListener(handler)
+  })
+}
+
+/**
+ * 查询态等待器(2026-09-21):驱动门户目的地搜索后,**只认 searchCache**(列表页价格面)。
+ * 为什么不能复用 waitSniffMulti:驱动流程里标签先落在 find 页,推荐流 double 会立刻满足
+ * 「hotels && recommendPrices」把等待提前结算,导致永远等不到 /hotel/list 的 SearchCache。
+ */
+function waitSniffSearchCache(tabId, timeoutMs) {
+  return new Promise((resolve) => {
+    let settled = false
+    let title = ''
+    let challenge = false
+    const finish = (timedOut) => {
+      if (settled) return
+      settled = true
+      clearTimeout(timer)
+      chrome.runtime.onMessage.removeListener(handler)
+      resolve({ ok: true, kind: 'search', bodies, title, challenge, timeout: timedOut })
+    }
+    const bodies = {}
+    const handler = (msg, sender) => {
+      if (!sender || !sender.tab || sender.tab.id !== tabId) return
+      if (msg && msg.type === 'gotry-page') {
+        title = String(msg.title ?? title)
+        if (msg.challenge === true) challenge = true
+        return
+      }
+      if (msg && msg.type === 'gotry-sniff') {
+        const cls = classifyDidaSniff(String(msg.url ?? ''))
+        if (cls && !bodies[cls]) bodies[cls] = String(msg.body ?? '')
+        if (bodies.searchCache) finish(false)
+      }
+    }
+    const timer = setTimeout(() => finish(true), Math.max(Number(timeoutMs) || 30_000, 5_000))
+    chrome.runtime.onMessage.addListener(handler)
+  })
+}
+
+/** 后台标签等嗅探回包;超时带回页标题(供 Node 侧 CHALLENGE_RE 判定),收尾关自己的标签 */
+function waitSniff(tabId, timeoutMs) {
+  return new Promise((resolve) => {
+    let settled = false
+    let title = ''
+    let challenge = false
+    const handler = (msg, sender) => {
+      if (!sender || !sender.tab || sender.tab.id !== tabId) return
+      if (msg && msg.type === 'gotry-page') {
+        title = String(msg.title ?? title)
+        if (msg.challenge === true) challenge = true
+        return
+      }
+      if (msg && msg.type === 'gotry-sniff' && !settled) {
+        settled = true
+        clearTimeout(timer)
+        chrome.runtime.onMessage.removeListener(handler)
+        resolve({ ok: true, kind: 'search', body: String(msg.body ?? ''), url: String(msg.url ?? ''), title, challenge })
+      }
+    }
+    const timer = setTimeout(() => {
+      if (settled) return
+      settled = true
+      chrome.runtime.onMessage.removeListener(handler)
+      resolve({ ok: false, kind: 'search', timeout: true, url: '', title })
+    }, Math.max(Number(timeoutMs) || 30_000, 5_000))
+    chrome.runtime.onMessage.addListener(handler)
+  })
+}
+
+/**
+ * 代填登录(2026-09-21,hotel-fe#3713 形态 A「免密进入门户」):
+ * portal 页把一次性凭据载荷交给本 SW → 前台打开站点登录页 → 回派 content-bridge
+ * 按站点配方填表提交 → 员工零输入落在门户里。
+ *
+ * 红线:账密只在本函数栈内存活——不写 storage(扩展无该权限)、不进日志、不回传;
+ * 登录页必须落在该站点的白名单前缀内(拒绝任意 URL 载荷);sw 只管开页与转发,
+ * 不读页面、不碰 cookie 值。
+ */
+async function openLoginAndFill(site, payload) {
+  const allowedPrefix = SITE_SEARCH_PREFIXES[site]
+  if (!allowedPrefix || typeof payload.loginUrl !== 'string' || !payload.loginUrl.startsWith(allowedPrefix)) {
+    return { ok: false, kind: 'open-login-fill', error: `login 只允许 ${allowedPrefix ?? '已注册站点域'}` }
+  }
+  if (typeof payload.username !== 'string' || !payload.username || typeof payload.password !== 'string' || !payload.password) {
+    return { ok: false, kind: 'open-login-fill', error: 'username/password required' }
+  }
+  const fill = {
+    username: payload.username,
+    password: payload.password,
+    usernameField: typeof payload.usernameField === 'string' ? payload.usernameField : undefined,
+    passwordField: typeof payload.passwordField === 'string' ? payload.passwordField : undefined,
+  }
+  const tab = await chrome.tabs.create({ url: payload.loginUrl, active: true })
+  // content-bridge 在 document_start 注入,但登录页多为 SPA:输入框常晚于脚本就绪。
+  // 因此「未就绪」必须继续重试——只在**填表成功**时收工(2026-09-21 E2E 实证:
+  // 首次即返回 ok:false 会让登录页一直空着)。
+  let lastError = 'login page not ready'
+  for (let i = 0; i < 30; i++) {
+    await sleep(500)
+    try {
+      const r = await chrome.tabs.sendMessage(tab.id, { type: 'gotry-fill-login', payload: fill })
+      if (r && r.ok) return { ok: true, kind: 'open-login-fill', tabId: tab.id, filled: true }
+      if (r && r.error) lastError = String(r.error).slice(0, 120)
+    } catch { /* 接收端未就绪,继续等 */ }
+  }
+  return { ok: false, kind: 'open-login-fill', tabId: tab.id, error: lastError }
+}
+
+async function handleJob(job) {
+  const jobId = job && job.jobId
+  if (typeof jobId !== 'string' || !jobId) return
+  const site = String((job && job.site) || '')
+  const conf = SITES[site]
+  try {
+    if (!conf) {
+      await postResult(jobId, { ok: false, error: `unknown site ${site}` })
+      return
+    }
+    if (job.kind === 'cookie-names') {
+      await postResult(jobId, { ok: true, kind: 'cookie-names', names: await ticketNames(site) })
+      return
+    }
+    if (job.kind === 'open-login') {
+      if (typeof job.url !== 'string' || !job.url.startsWith('https://')) {
+        await postResult(jobId, { ok: false, error: 'open-login 需要 https job.url' })
+        return
+      }
+      const tab = await chrome.tabs.create({ url: job.url, active: true })
+      await postResult(jobId, { ok: true, kind: 'open-login', opened: true, tabId: tab.id })
+      return
+    }
+    if (job.kind === 'search') {
+      const allowedPrefix = SITE_SEARCH_PREFIXES[site]
+      if (!allowedPrefix || typeof job.url !== 'string' || !job.url.startsWith(allowedPrefix)) {
+        await postResult(jobId, { ok: false, error: `search 只允许 ${allowedPrefix ?? '已注册站点域'}(收到 ${String(job.url).slice(0, 80)})` })
+        return
+      }
+      // 带 query 的 dida 检索 = 驱动门户目的地搜索(2026-09-21):门户无结果路由可直出,
+      // 必须先在城市联想里选定目的地。步骤:开 find 页 → 配方(选目的地+点查询) →
+      // 用**我们的日期**重写落地 URL(不驱动门户日期选择器) → 嗅探价格响应。
+      if (job.query && site === 'dida-portal') {
+        const tab = await chrome.tabs.create({ url: job.url, active: false })
+        try {
+          let recipe = null
+          for (let i = 0; i < 30; i++) {
+            await sleep(500)
+            try { recipe = await chrome.tabs.sendMessage(tab.id, { type: 'gotry-dida-search', params: job.query }); break } catch { /* 接收端未就绪 */ }
+          }
+          if (!recipe || !recipe.ok) {
+            await postResult(jobId, { ok: false, kind: 'search', error: `dida 目的地解析失败(${(recipe && (recipe.step || recipe.error)) || 'recipe-unavailable'})` })
+            return
+          }
+          let landing = recipe.url
+          try {
+            const u = new URL(recipe.url)
+            if (job.query.checkIn) u.searchParams.set('checkInDate', job.query.checkIn)
+            if (job.query.checkOut) u.searchParams.set('checkOutDate', job.query.checkOut)
+            landing = u.toString()
+          } catch { /* 解析失败则用门户落地 URL */ }
+          await chrome.tabs.update(tab.id, { url: landing })
+          // 查询态:等列表页的 searchCache(给足窗口——门列表页价格面到达约 10-20s)
+          const result = await waitSniffSearchCache(tab.id, Math.max(Number(job.timeoutMs) || 0, 45_000))
+          await postResult(jobId, { ok: true, kind: 'search', bodies: result.bodies, title: result.title, landingUrl: landing, picked: recipe.picked, timeout: result.timeout })
+          return
+        } finally {
+          await chrome.tabs.remove(tab.id).catch(() => { /* 用户先关了,无妨 */ })
+        }
+      }
+      const tab = await chrome.tabs.create({ url: job.url, active: false })
+      const result = job.multiCollect
+        ? await waitSniffMulti(tab.id, job.timeoutMs)
+        : await waitSniff(tab.id, job.timeoutMs)
+      await chrome.tabs.remove(tab.id).catch(() => { /* 用户先关了,无妨 */ })
+      await postResult(jobId, result)
+      return
+    }
+    await postResult(jobId, { ok: false, error: `unknown job kind ${String(job.kind)}` })
+  } catch (e) {
+    await postResult(jobId, { ok: false, error: String(e && e.message ? e.message : e).slice(0, 200) })
+  }
+}
+
+async function loop() {
+  if (polling) return
+  polling = true
+  try {
+    for (;;) {
+      if (bridgeBase() == null) {
+        const up = await detectBridge()
+        if (!up) { await sleep(RETRY_MS); continue }
+      }
+      try {
+        const r = await fetch(`${bridgeBase()}/jobs`, {
+          method: 'POST',
+          headers: bridgeHeaders(true),
+          body: JSON.stringify({
+            extensionVersion: chrome.runtime.getManifest().version,
+            capabilities: Object.keys(SITES),
+            clientId,
+          }),
+        })
+        const data = await r.json().catch(() => ({ job: null }))
+        if (data && data.job) await handleJob(data.job)
+        // 伴随每次 /jobs 长轮询的事件上行(批次 B):桥已确认可达,再发本批
+        await flushWorkspaceEvents()
+      } catch { activePort = null; await sleep(RETRY_MS) }
+    }
+  } finally {
+    polling = false
+  }
+}
+
+/**
+ * portal content-bridge 派发入口(2026-09-11):hotel-be portal 在员工已登录的
+ * 页面里通过 content-bridge.js 发 `gotry-join` 消息,SW 静默接收并缓存 ticket。
+ * 员工从未看见这些消息;任何外部源都可发,但 ticket 必须由 hotel-be 后端签发,
+ * Node 侧通过 Bearer 鉴权校验 ticket 内 token 才认账。
+ */
+chrome.runtime.onMessage.addListener((msg, sender, sendResponse) => {
+  if (msg && msg.type === 'gotry-join' && msg.ticket && typeof msg.ticket.bridgeUrl === 'string') {
+    joinTicket = msg.ticket
+    activePort = null
+    sendResponse && sendResponse({ ok: true })
+    return false
+  }
+  if (msg && msg.type === 'gotry-portal-login' && msg.payload && typeof msg.payload === 'object') {
+    // 凭据载荷只在本次调用内存活:不落 storage、不进日志、不回传账密。
+    const payload = msg.payload
+    const site = typeof payload.site === 'string' && payload.site ? payload.site : 'dida-portal'
+    openLoginAndFill(site, payload)
+      .then((result) => { sendResponse && sendResponse(result) })
+      .catch(() => { sendResponse && sendResponse({ ok: false, kind: 'open-login-fill', error: 'fill failed' }) })
+    return true // 异步响应
+  }
+  if (msg && msg.type === 'gotry-workspace-event' && msg.event && typeof msg.event === 'object') {
+    // 页面 workspace 事件进内存 buffer,随下一次 /jobs 长轮询批量上行(批次 B);
+    // 不回执(事件即发即弃),不落 storage。形状由服务端逐条校验,这里不解析内容。
+    if (workspaceEventBuffer.length >= WORKSPACE_EVENT_BUFFER_CAP) workspaceEventBuffer.shift()
+    workspaceEventBuffer.push(msg.event)
+    return false
+  }
+  return false
+})
+
+// SW 冷启动 + 闹钟兜底双保险;loop() 幂等
+if (chrome.runtime.onStartup) chrome.runtime.onStartup.addListener(() => { void loop() })
+chrome.alarms.create('gotry-bridge-poll', { periodInMinutes: 0.5 })
+chrome.alarms.onAlarm.addListener((a) => { if (a.name === 'gotry-bridge-poll') void loop() })
+void loop()