@danceiny/gotry 0.0.1-rc.9 → 0.2.0-rc.28

package/dist/scripts/companion-tests.js

@@ -1,3 +1,8 @@
+/**
+ * 同行人档案单测(memory-design P2,companion_profile.v1):
+ * 负面清单守卫(证件/电话零入库)/upsert 合并(追加不删史/幂等)/brief 摘要形状。
+ * 运行:cd ts && npx tsx scripts/companion-tests.ts
+ */
 import assert from 'node:assert/strict';
 import { companionId, sensitiveViolation, upsertCompanion } from '../src/companions.js';
 let n = 0;
@@ -5,108 +10,58 @@ function pass(name, body) {
     body();
     console.log(`  ${++n}. ${name} OK`);
 }
-pass('负面清单守卫:证件号/手机号拒收入库(红线 6 工程形态)', ()=>{
+pass('负面清单守卫:证件号/手机号拒收入库(红线 6 工程形态)', () => {
     assert.ok(sensitiveViolation('护照号 E12345678')?.includes('负面清单'), '证件拒');
     assert.ok(sensitiveViolation('我电话 13812345678')?.includes('负面清单'), '手机号拒');
     assert.equal(sensitiveViolation('爸爸65,轻度高血压,走不动山路'), null, '行为约束正常');
     const r = upsertCompanion([], {
         label: '爸爸',
-        constraints: {
-            health: [
-                '轻度高血压'
-            ]
-        },
-        evidence: '身份证号 110101199001011234,轻度高血压'
+        constraints: { health: ['轻度高血压'] },
+        evidence: '身份证号 110101199001011234,轻度高血压',
     });
     assert.equal(r.appended, false);
     assert.ok(r.reason?.includes('负面清单'));
 });
-pass('新建:约束+证据落库,companion_id 语义派生', ()=>{
+pass('新建:约束+证据落库,companion_id 语义派生', () => {
     const r = upsertCompanion([], {
         label: '爸 爸',
-        constraints: {
-            health: [
-                '轻度高血压'
-            ],
-            mobility: '步行≤4h'
-        },
-        evidence: '爸爸65有轻度高血压,别太累'
+        constraints: { health: ['轻度高血压'], mobility: '步行≤4h' },
+        evidence: '爸爸65有轻度高血压,别太累',
     });
     assert.equal(r.appended, true);
     assert.equal(r.companionId, '爸爸');
     const p = r.profiles[0];
-    assert.deepEqual(p.constraints.health, [
-        '轻度高血压'
-    ]);
-    assert.deepEqual(p.evidence, [
-        '爸爸65有轻度高血压,别太累'
-    ]);
+    assert.deepEqual(p.constraints.health, ['轻度高血压']);
+    assert.deepEqual(p.evidence, ['爸爸65有轻度高血压,别太累']);
 });
-pass('upsert 合并:数组追加不删史/覆盖取新/幂等', ()=>{
+pass('upsert 合并:数组追加不删史/覆盖取新/幂等', () => {
     let ps = [];
     ps = upsertCompanion(ps, {
         label: '爸爸',
-        constraints: {
-            health: [
-                '轻度高血压'
-            ],
-            mobility: '步行≤4h'
-        },
-        evidence: '原话一'
+        constraints: { health: ['轻度高血压'], mobility: '步行≤4h' },
+        evidence: '原话一',
     }).profiles;
     ps = upsertCompanion(ps, {
         label: '爸爸',
-        constraints: {
-            health: [
-                '晕车'
-            ],
-            mobility: '步行≤3h'
-        },
-        evidence: '原话二:晕车'
+        constraints: { health: ['晕车'], mobility: '步行≤3h' },
+        evidence: '原话二:晕车',
     }).profiles;
-    const p = ps.find((x)=>x.companion_id === '爸爸');
-    assert.deepEqual(p.constraints.health, [
-        '轻度高血压',
-        '晕车'
-    ], '数组追加不删史');
+    const p = ps.find(x => x.companion_id === '爸爸');
+    assert.deepEqual(p.constraints.health, ['轻度高血压', '晕车'], '数组追加不删史');
     assert.equal(p.constraints.mobility, '步行≤3h', '标量取新值');
     assert.equal(p.evidence.length, 2, '证据两条');
     const r3 = upsertCompanion(ps, {
         label: '爸爸',
-        constraints: {
-            health: [
-                '晕车'
-            ],
-            mobility: '步行≤3h'
-        },
-        evidence: '原话二:晕车'
+        constraints: { health: ['晕车'], mobility: '步行≤3h' },
+        evidence: '原话二:晕车',
     });
     assert.equal(r3.appended, false, '全量相同幂等 no-op');
 });
-pass('多人并存与 id 稳定性', ()=>{
+pass('多人并存与 id 稳定性', () => {
     let ps = [];
-    ps = upsertCompanion(ps, {
-        label: '爸爸',
-        constraints: {
-            health: [
-                '高血压'
-            ]
-        },
-        evidence: 'a'
-    }).profiles;
-    ps = upsertCompanion(ps, {
-        label: '女朋友',
-        constraints: {
-            prefs: [
-                '怕吵'
-            ]
-        },
-        evidence: 'b'
-    }).profiles;
+    ps = upsertCompanion(ps, { label: '爸爸', constraints: { health: ['高血压'] }, evidence: 'a' }).profiles;
+    ps = upsertCompanion(ps, { label: '女朋友', constraints: { prefs: ['怕吵'] }, evidence: 'b' }).profiles;
     assert.equal(ps.length, 2);
     assert.equal(companionId('女 朋友'), '女朋友');
 });
 console.log(`\nCOMPANION TESTS: ${n}/4 OK(memory-design P2 守门面)`);
-
-
-//# sourceURL=/Users/bytedance/work/gotry/ts/scripts/companion-tests.ts

package/dist/scripts/dida-cookie-probe.js

@@ -0,0 +1,87 @@
+/**
+ * Dida 会话 cookie 形态探针(只打印 name/domain,永不打印值——红线)。
+ * 复用 live E2E 的启动与登录流程,登录后枚举 dida 相关 cookie 的名字与域。
+ */
+import { spawn } from 'node:child_process';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { chromium } from 'playwright-core';
+const EXT_DIR = new URL('../../extension/', import.meta.url).pathname;
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function main() {
+    const user = process.env.DIDA_USERNAME ?? '';
+    const pass = process.env.DIDA_PASSWORD ?? '';
+    if (!user || !pass) {
+        console.error('DIDA_USERNAME/DIDA_PASSWORD 必填');
+        process.exit(1);
+    }
+    const profileDir = mkdtempSync(join(tmpdir(), 'gotry-dida-probe-'));
+    const chrome = spawn('/Applications/Google Chrome.app/Contents/MacOS/Google Chrome', [
+        '--remote-debugging-port=9234', `--user-data-dir=${profileDir}`, '--no-first-run',
+        `--disable-extensions-except=${EXT_DIR}`, `--load-extension=${EXT_DIR}`, 'about:blank',
+    ], { stdio: 'ignore' });
+    const cleanup = () => { try {
+        chrome.kill();
+    }
+    catch { } try {
+        rmSync(profileDir, { recursive: true, force: true });
+    }
+    catch { } };
+    process.on('exit', cleanup);
+    await sleep(10_000);
+    const browser = await chromium.connectOverCDP('http://127.0.0.1:9234');
+    const context = browser.contexts()[0];
+    const page = await context.newPage();
+    await page.goto('https://portal.dida.com/login', { waitUntil: 'networkidle', timeout: 45_000 });
+    await page.evaluate(`(() => {
+    document.querySelectorAll('#onetrust-consent-sdk, .nd-cookie-consent, .cdk-overlay-backdrop, .cdk-overlay-container').forEach(el => el.remove())
+  })()`).catch(() => { });
+    await page.waitForSelector('input[name="username"]', { timeout: 20_000 });
+    await page.evaluate(`(() => {
+    const u = document.querySelector('input[name="username"]')
+    const p = document.querySelector('input[name="password"]')
+    const setVal = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, 'value').set
+    setVal.call(u, ${JSON.stringify(user)}); u.dispatchEvent(new Event('input', { bubbles: true }))
+    setVal.call(p, ${JSON.stringify(pass)}); p.dispatchEvent(new Event('input', { bubbles: true }))
+    document.querySelectorAll('.ant-checkbox-wrapper, label[class*="checkbox"]').forEach(w => w.click())
+  })()`);
+    await sleep(500);
+    await page.evaluate(`(() => {
+    Array.from(document.querySelectorAll('button')).find(b => b.textContent.trim().toLowerCase() === 'login')?.click()
+  })()`);
+    try {
+        await page.waitForURL('**/hotel/**', { timeout: 60_000 });
+    }
+    catch {
+        console.log('⚠️ 未跳转——等待人工完成验证码 60s');
+        try {
+            await page.waitForURL('**/hotel/**', { timeout: 60_000 });
+        }
+        catch { }
+    }
+    await sleep(4_000);
+    console.log('final url:', page.url());
+    // 全上下文 cookie(只 name+domain+httpOnly/partitioned 元数据;值不落任何输出)
+    const cookies = await context.cookies();
+    const dida = cookies.filter((c) => c.domain.includes('dida'));
+    console.log(`全上下文 cookie ${cookies.length} 条;dida 相关 ${dida.length} 条:`);
+    for (const c of dida) {
+        console.log(`  - ${c.name}  domain=${c.domain}  httpOnly=${c.httpOnly} partitioned=${c.partitioned ?? false} expires=${c.expires > 0 ? new Date(c.expires * 1000).toISOString() : 'session'}`);
+    }
+    // 页面内非 HttpOnly 视角
+    const jsNames = await page.evaluate(`(() => document.cookie.split(';').map(s => s.trim().split('=')[0]).filter(Boolean))()`);
+    console.log('document.cookie 可见名(非 HttpOnly):', JSON.stringify(jsNames));
+    // 认证态校验
+    const authed = await page.evaluate(`(async () => {
+    try {
+      const r = await fetch('https://portal-webapi.dida.com/ApplicationContextApi/GetContext?init=true', { credentials: 'include' })
+      const j = await r.json()
+      return { success: j?.Success, code: j?.MessageCode, authed: j?.Data?.userIdentityInfo?.isAuthenticated }
+    } catch (e) { return { err: String(e) } }
+  })()`);
+    console.log('GetContext:', JSON.stringify(authed));
+    await browser.close();
+    process.exit(0);
+}
+main().catch((e) => { console.error('Fatal:', e); process.exit(1); });

package/dist/scripts/dida-runner-stop-tests.js

@@ -0,0 +1,311 @@
+/**
+ * Dida runner command E2E for #502/#504.
+ *
+ * The child is the real session-dida-live-e2e.ts entry. Only the temporary
+ * overlay's browser and session modules are synthetic; no supplier or browser
+ * login is reachable from this test.
+ */
+import { execFileSync, spawnSync } from 'node:child_process';
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+const REAL_TS = join(import.meta.dirname, '..');
+const TSX = process.env.GOTRY_TEST_TSX ?? join(REAL_TS, 'node_modules', 'tsx', 'dist', 'cli.mjs');
+const testNodeModules = join(TSX, '..', '..', '..');
+const TMP_ROOT = realpathSync(tmpdir());
+const baselineRef = process.env.DIDA502_BASELINE_REF ?? '20d728e3668d302821bad0f8687ca8ef55d29ed5';
+const failures = [];
+const canonicalPlaywrightFiles = [
+    join(testNodeModules, 'playwright-core', 'package.json'),
+    join(testNodeModules, 'playwright-core', 'index.js'),
+];
+const canonicalPlaywrightHashes = new Map(canonicalPlaywrightFiles.map((path) => [path, sha256(path)]));
+function expect(condition, label) {
+    if (!condition) {
+        console.log(`FAIL ${label}`);
+        failures.push(label);
+    }
+}
+function lines(path) {
+    try {
+        return readFileSync(path, 'utf8').split('\n').filter(Boolean).map((line) => JSON.parse(line));
+    }
+    catch {
+        return [];
+    }
+}
+function buildOverlay(tag) {
+    const base = mkdtempSync(join(TMP_ROOT, `gotry-dida502-${tag}-`));
+    const ts = join(base, 'ts');
+    mkdirSync(join(ts, 'scripts'), { recursive: true });
+    mkdirSync(join(ts, 'capabilities'), { recursive: true });
+    const calls = join(base, 'calls.jsonl');
+    const resets = join(base, 'resets.jsonl');
+    const clicks = join(base, 'clicks.jsonl');
+    const results = join(base, 'results.jsonl');
+    const browserStarted = join(base, 'browser-started');
+    const browserClosed = join(base, 'browser-closed');
+    const browserCloseSettled = join(base, 'browser-close-settled');
+    const fakeBrowser = join(base, 'fake-browser');
+    const net = join(base, 'network.jsonl');
+    const runnerSource = process.env.DIDA502_RUN_BASELINE === '1'
+        ? execFileSync('git', ['show', `${baselineRef}:ts/scripts/session-dida-live-e2e.ts`], { cwd: join(REAL_TS, '..'), encoding: 'utf8' })
+        : readFileSync(join(REAL_TS, 'scripts', 'session-dida-live-e2e.ts'), 'utf8');
+    writeFileSync(join(ts, 'scripts', 'session-dida-live-e2e.ts'), runnerSource);
+    mkdirSync(join(ts, 'node_modules'), { recursive: true });
+    mkdirSync(join(ts, 'node_modules', 'playwright-core'), { recursive: true });
+    writeFileSync(join(ts, 'node_modules', 'playwright-core', 'package.json'), '{"type":"module","main":"index.js"}\n');
+    writeFileSync(join(ts, 'node_modules', 'playwright-core', 'index.js'), `
+import { appendFileSync } from 'node:fs'
+import { runInNewContext } from 'node:vm'
+const event = (path, value) => { if (path) appendFileSync(path, JSON.stringify({ at: Date.now(), ...value }) + '\\n') }
+const files = { browserStarted: ${JSON.stringify(browserStarted)}, clicks: ${JSON.stringify(clicks)}, browserClosed: ${JSON.stringify(browserClosed)}, browserCloseSettled: ${JSON.stringify(browserCloseSettled)} }
+const evaluateMode = process.env.DIDA502_EVALUATE_MODE ?? 'missing'
+const buttonPresent = process.env.DIDA502_BUTTON_PRESENT === '1'
+let pendingHandle
+let releasePendingEvaluate
+const holdProcessOpen = () => { pendingHandle = setInterval(() => {}, 1000) }
+const releaseProcessHold = () => { if (pendingHandle) { clearInterval(pendingHandle); pendingHandle = undefined } }
+const button = {
+  textContent: '预订',
+  scrollIntoView() { event(files.clicks, { kind: 'scroll' }) },
+  click() { event(files.clicks, { kind: 'click' }) },
+}
+const document = {
+  querySelector(selector) {
+    return selector === '.hotel-index-recommends-card__book-btn' && buttonPresent ? button : null
+  },
+  querySelectorAll(selector) {
+    return selector === 'button' && buttonPresent ? [button] : []
+  },
+}
+const jobPage = {
+  current: 'https://portal.dida.com/hotel/job',
+  url() { return this.current },
+  async evaluate(source) {
+    event(files.clicks, { kind: 'evaluate_attempt' })
+    if (evaluateMode === 'pending-until-close') {
+      holdProcessOpen()
+      return new Promise((resolve) => {
+        releasePendingEvaluate = () => {
+          releaseProcessHold()
+          event(files.browserClosed, { kind: 'pending-evaluate-released' })
+          resolve(false)
+        }
+      })
+    }
+    if (evaluateMode === 'never') { holdProcessOpen(); return new Promise(() => {}) }
+    return runInNewContext(String(source), { document })
+  },
+}
+const loginPage = {
+  current: 'about:blank',
+  url() { return this.current },
+  async goto(url) { this.current = url },
+  async waitForSelector() {},
+  async waitForURL() { this.current = 'https://portal.dida.com/hotel/home' },
+  async evaluate() {},
+}
+const context = {
+  serviceWorkers() { return [{}] },
+  async newPage() { return loginPage },
+  pages() { return [loginPage, jobPage] },
+}
+const browser = {
+  contexts() { return [context] },
+  async close() {
+    event(files.browserClosed, { kind: 'close-start' })
+    releasePendingEvaluate?.()
+    if (process.env.DIDA502_BROWSER_CLOSE_MODE === 'hang') { holdProcessOpen(); return new Promise(() => {}) }
+    event(files.browserCloseSettled, { kind: 'close-settled' })
+  },
+}
+export const chromium = { async connectOverCDP() { appendFileSync(files.browserStarted, ''); return browser } }
+`);
+    writeFileSync(join(ts, 'capabilities', 'session-search.ts'), `
+import { appendFileSync } from 'node:fs'
+const log = (path, value) => { if (path) appendFileSync(path, JSON.stringify({ at: Date.now(), ...value }) + '\\n') }
+const result = (verdict) => verdict === 'hit'
+  ? { ok: true, via: 'session-dida-portal', evidence: '[synthetic:hit]', latencyMs: 1, verdict, rates: [{ hotelId: 'synthetic', hotelName: 'Synthetic Hotel', price: 100 }] }
+  : { ok: false, via: 'session-dida-portal-error', evidence: '[synthetic:' + verdict + ']', latencyMs: 1, verdict, error: 'synthetic ' + verdict }
+export async function sessionDidaSearch() {
+  const calls = Number(process.env.DIDA502_CALLS ?? '0') + 1
+  process.env.DIDA502_CALLS = String(calls)
+  log(process.env.DIDA502_CALL_LOG, { call: calls })
+  await new Promise((resolve) => setTimeout(resolve, 250))
+  const verdict = process.env.DIDA502_VERDICT ?? 'challenged'
+  log(process.env.DIDA502_RESULT_LOG, { call: calls, verdict, terminal: true })
+  if (process.env.DIDA502_THROW === '1') throw new Error('synthetic session failure')
+  return result(verdict)
+}
+export function __resetRateLimiterForTest() { log(process.env.DIDA502_RESET_LOG, { reset: true }) }
+`);
+    writeFileSync(join(ts, 'net-trap.mjs'), `import { appendFileSync } from 'node:fs'\nglobalThis.fetch = async (...args) => { appendFileSync(${JSON.stringify(net)}, JSON.stringify({ at: Date.now(), url: String(args[0]) }) + '\\n'); throw new Error('network blocked in dida502 E2E') }\n`);
+    writeFileSync(join(ts, 'timer-preload.mjs'), `const native = globalThis.setTimeout\nglobalThis.setTimeout = (callback, delay, ...args) => native(callback, delay === 10000 || delay === 8000 ? 0 : delay === 5000 ? 200 : delay === 3000 ? 100 : delay === 2000 ? 100 : delay, ...args)\n`);
+    writeFileSync(fakeBrowser, `#!/bin/sh\ntouch ${shellQuote(browserStarted)}\nexit 0\n`, { mode: 0o755 });
+    chmodSync(fakeBrowser, 0o755);
+    return { base, ts, calls, resets, clicks, results, browserStarted, browserClosed, browserCloseSettled, fakeBrowser, net };
+}
+function run(overlay, verdict, options = {}) {
+    const child = spawnSync(process.execPath, [TSX, join(overlay.ts, 'scripts', 'session-dida-live-e2e.ts')], {
+        cwd: overlay.ts,
+        encoding: 'utf8',
+        timeout: 15_000,
+        env: {
+            ...process.env,
+            CHROME_BIN: overlay.fakeBrowser,
+            DIDA_USERNAME: 'synthetic-user',
+            DIDA_PASSWORD: 'synthetic-pass',
+            GOTRY_SESSION_LIVE: '1',
+            DIDA502_CALL_LOG: overlay.calls,
+            DIDA502_RESET_LOG: overlay.resets,
+            DIDA502_RESULT_LOG: overlay.results,
+            DIDA502_VERDICT: verdict,
+            DIDA502_THROW: verdict === 'throw' ? '1' : '0',
+            DIDA502_EVALUATE_MODE: options.evaluateMode ?? 'missing',
+            DIDA502_BUTTON_PRESENT: options.buttonPresent === true ? '1' : '0',
+            DIDA502_BROWSER_CLOSE_MODE: options.browserCloseMode ?? 'normal',
+            NODE_OPTIONS: `--import=${join(overlay.ts, 'net-trap.mjs')} --import=${join(overlay.ts, 'timer-preload.mjs')}`,
+        },
+    });
+    return { status: child.status, stdout: child.stdout ?? '', stderr: child.stderr ?? '', error: child.error };
+}
+const onlyCleanupCases = process.env.DIDA502_ONLY_CLEANUP_CASES === '1';
+if (!onlyCleanupCases)
+    for (const verdict of ['challenged', 'cooldown', 'needs-login', 'needs-extension', 'error', 'hit', 'throw']) {
+        const overlay = buildOverlay(verdict);
+        try {
+            const failuresBefore = failures.length;
+            const runResult = run(overlay, verdict, { buttonPresent: verdict === 'hit' });
+            const expectedExit = verdict === 'hit' ? 0 : verdict === 'throw' ? 1 : 2;
+            expect(runResult.status === expectedExit, `${verdict} exit=${runResult.status}: ${runResult.stderr}`);
+            console.log(`observed ${verdict}: calls=${lines(overlay.calls).length} resets=${lines(overlay.resets).length} evaluate_attempts=${lines(overlay.clicks).filter((event) => event.kind === 'evaluate_attempt').length} clicks=${lines(overlay.clicks).filter((event) => event.kind === 'click').length} results=${lines(overlay.results).length}`);
+            expect(lines(overlay.calls).length === 1, `${verdict} must call sessionDidaSearch once`);
+            expect(lines(overlay.resets).length === 0, `${verdict} must not reset rate limiter`);
+            const actions = lines(overlay.clicks);
+            const evaluateAttempts = actions.filter((event) => event.kind === 'evaluate_attempt');
+            const clickEvents = actions.filter((event) => event.kind === 'click');
+            const resultEvents = lines(overlay.results);
+            expect(evaluateAttempts.length >= 1, `${verdict} clickAssist must attempt DOM evaluation`);
+            expect(clickEvents.length === (verdict === 'hit' ? 1 : 0), `${verdict} mock DOM click count=${clickEvents.length}`);
+            expect(resultEvents.length === 1, `${verdict} must emit one final result`);
+            expect(resultEvents.length === 1 && actions.every((event) => Number(event.at) <= Number(resultEvents[0].at)), `${verdict} has assistant DOM activity after result`);
+            expect(existsSync(overlay.browserStarted), `${verdict} browser started`);
+            expect(existsSync(overlay.browserClosed), `${verdict} browser cleanup`);
+            expect(lines(overlay.net).length === 0, `${verdict} attempted network`);
+            if (failures.length === failuresBefore)
+                console.log(`ok ${verdict}: exit=${runResult.status} search=1 reset=0 evaluate_attempts=${evaluateAttempts.length} clicks=${clickEvents.length} cleanup=true`);
+        }
+        finally {
+            // 合成浏览器的 straggler 写与递归删除存在竞速(ENOTEMPTY,实测 macOS 偶发);
+            // maxRetries+retryDelay 让清理有界重试,清理竞速不判测试失败。
+            if (process.env.DIDA502_KEEP_OVERLAY !== '1')
+                rmSync(overlay.base, { recursive: true, force: true, maxRetries: 20, retryDelay: 100 });
+        }
+    }
+if (!onlyCleanupCases) {
+    const gate = buildOverlay('gate');
+    try {
+        for (const liveFlag of [undefined, '', '0', 'false', 'random']) {
+            const failuresBefore = failures.length;
+            for (const path of [gate.browserStarted, gate.browserClosed, gate.browserCloseSettled, gate.calls, gate.net])
+                rmSync(path, { force: true });
+            const env = { ...process.env, CHROME_BIN: gate.fakeBrowser, DIDA_USERNAME: 'synthetic-user', DIDA_PASSWORD: 'synthetic-pass', DIDA502_CALL_LOG: gate.calls, NODE_OPTIONS: `--import=${join(gate.ts, 'net-trap.mjs')}` };
+            if (liveFlag === undefined)
+                delete env.GOTRY_SESSION_LIVE;
+            else
+                env.GOTRY_SESSION_LIVE = liveFlag;
+            const child = spawnSync(process.execPath, [TSX, join(gate.ts, 'scripts', 'session-dida-live-e2e.ts')], { cwd: gate.ts, encoding: 'utf8', timeout: 3_000, env });
+            if (existsSync(gate.browserStarted) || child.status !== 1)
+                console.log(`gate diagnostic ${liveFlag === '' ? 'empty' : liveFlag ?? 'unset'}: status=${child.status} stderr=${child.stderr}`);
+            expect(child.status === 1, `live gate ${liveFlag === '' ? 'empty' : liveFlag ?? 'unset'} must reject before browser`);
+            expect(!existsSync(gate.browserStarted), `live gate ${liveFlag === '' ? 'empty' : liveFlag ?? 'unset'} launched browser`);
+            expect(!existsSync(gate.browserClosed), `live gate ${liveFlag === '' ? 'empty' : liveFlag ?? 'unset'} closed browser`);
+            expect(lines(gate.calls).length === 0, `live gate ${liveFlag === '' ? 'empty' : liveFlag ?? 'unset'} called search`);
+            expect(lines(gate.net).length === 0, `live gate ${liveFlag === '' ? 'empty' : liveFlag ?? 'unset'} attempted network`);
+            if (failures.length === failuresBefore)
+                console.log(`ok live gate ${liveFlag === '' ? 'empty' : liveFlag ?? 'unset'}: browser/network not started`);
+        }
+        const failuresBefore = failures.length;
+        for (const path of [gate.browserStarted, gate.browserClosed, gate.browserCloseSettled, gate.calls, gate.net])
+            rmSync(path, { force: true });
+        const missing = spawnSync(process.execPath, [TSX, join(gate.ts, 'scripts', 'session-dida-live-e2e.ts')], { cwd: gate.ts, encoding: 'utf8', timeout: 3_000, env: { ...process.env, GOTRY_SESSION_LIVE: '1', DIDA_USERNAME: '', DIDA_PASSWORD: '', CHROME_BIN: gate.fakeBrowser, DIDA502_CALL_LOG: gate.calls, NODE_OPTIONS: `--import=${join(gate.ts, 'net-trap.mjs')}` } });
+        expect(missing.status === 1, 'missing credentials must reject before browser');
+        expect(!existsSync(gate.browserStarted), 'missing credentials launched browser');
+        expect(!existsSync(gate.browserClosed), 'missing credentials closed browser');
+        expect(lines(gate.calls).length === 0, 'missing credentials called search');
+        expect(lines(gate.net).length === 0, 'missing credentials attempted network');
+        if (failures.length === failuresBefore)
+            console.log('ok live gate missing credentials: browser/network not started');
+    }
+    finally {
+        if (process.env.DIDA502_KEEP_OVERLAY !== '1')
+            rmSync(gate.base, { recursive: true, force: true });
+    }
+}
+const cleanupCases = [
+    {
+        tag: 'pending-evaluate-released-by-close',
+        evaluateMode: 'pending-until-close',
+        buttonPresent: false,
+        browserCloseMode: 'normal',
+        expectedExit: 2,
+    },
+    {
+        tag: 'never-settling-evaluate',
+        evaluateMode: 'never',
+        buttonPresent: false,
+        browserCloseMode: 'normal',
+        expectedExit: 1,
+        timeoutLabel: 'click assistance',
+    },
+    {
+        tag: 'browser-close-hangs',
+        evaluateMode: 'missing',
+        buttonPresent: true,
+        browserCloseMode: 'hang',
+        expectedExit: 1,
+        timeoutLabel: 'browser close',
+    },
+];
+const selectedCleanupCase = process.env.DIDA502_CLEANUP_CASE;
+for (const cleanupCase of cleanupCases.filter(({ tag }) => !selectedCleanupCase || tag === selectedCleanupCase)) {
+    const overlay = buildOverlay(cleanupCase.tag);
+    try {
+        const failuresBefore = failures.length;
+        const runResult = run(overlay, 'challenged', cleanupCase);
+        const combinedOutput = `${runResult.stdout}\n${runResult.stderr}\n${runResult.error?.message ?? ''}`;
+        const closeEvents = lines(overlay.browserClosed);
+        console.log(`observed ${cleanupCase.tag}: exit=${runResult.status} browser_started=${existsSync(overlay.browserStarted)} close_events=${closeEvents.map((event) => event.kind).join(',') || 'none'} close_settled=${existsSync(overlay.browserCloseSettled)} timeout_label=${cleanupCase.timeoutLabel ?? 'none'}`);
+        expect(runResult.status === cleanupCase.expectedExit, `${cleanupCase.tag} exit=${runResult.status}: ${combinedOutput}`);
+        expect(existsSync(overlay.browserStarted), `${cleanupCase.tag} browser started`);
+        expect(existsSync(overlay.browserClosed), `${cleanupCase.tag} browser close invoked`);
+        expect(lines(overlay.net).length === 0, `${cleanupCase.tag} attempted network`);
+        if (cleanupCase.expectedExit === 2) {
+            expect(lines(overlay.results).length === 1, `${cleanupCase.tag} must emit one final result`);
+            expect(closeEvents.some((event) => event.kind === 'pending-evaluate-released'), `${cleanupCase.tag} pending evaluate released by close`);
+            expect(existsSync(overlay.browserCloseSettled), `${cleanupCase.tag} browser close settled`);
+        }
+        else {
+            expect(cleanupCase.timeoutLabel !== undefined && combinedOutput.includes(`cleanup timeout: ${cleanupCase.timeoutLabel}`), `${cleanupCase.tag} explicit timeout label=${cleanupCase.timeoutLabel}`);
+        }
+        if (failures.length === failuresBefore)
+            console.log(`ok ${cleanupCase.tag}: exit=${runResult.status} browser_started=true close_invoked=true`);
+    }
+    finally {
+        if (process.env.DIDA502_KEEP_OVERLAY !== '1')
+            rmSync(overlay.base, { recursive: true, force: true });
+    }
+}
+for (const path of canonicalPlaywrightFiles)
+    expect(sha256(path) === canonicalPlaywrightHashes.get(path), `canonical dependency changed: ${path}`);
+if (failures.length > 0)
+    throw new Error(`DIDA RUNNER STOP E2E failed: ${failures.join('; ')}`);
+console.log(`DIDA RUNNER STOP E2E: ${onlyCleanupCases ? '3 cleanup cases' : '7 verdicts (including thrown error) + strict live gate + 3 cleanup cases'} passed with synthetic browser/session overlay`);
+function shellQuote(value) {
+    return "'" + value.replaceAll("'", "'\\''") + "'";
+}
+function sha256(path) {
+    return createHash('sha256').update(readFileSync(path)).digest('hex');
+}

package/dist/scripts/dida-sw-probe.js

@@ -0,0 +1,114 @@
+/**
+ * Extension SW 内部探针 v2:/json 列 targets + 原生 WebSocket 附着 SW,
+ * Runtime.evaluate 现场验证 manifest 与 chrome.cookies 行为(只输出 cookie 名)。
+ */
+import { spawn } from 'node:child_process';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { chromium } from 'playwright-core';
+const EXT_DIR = new URL('../../extension/', import.meta.url).pathname;
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function cdpEval(wsUrl, expression) {
+    return new Promise((resolve, reject) => {
+        const ws = new WebSocket(wsUrl);
+        const timer = setTimeout(() => { ws.close(); reject(new Error('ws timeout')); }, 15_000);
+        ws.onopen = () => {
+            ws.send(JSON.stringify({ id: 1, method: 'Runtime.evaluate', params: { expression, awaitPromise: true, returnByValue: true } }));
+        };
+        ws.onmessage = (ev) => {
+            const msg = JSON.parse(String(ev.data));
+            if (msg.id === 1) {
+                clearTimeout(timer);
+                ws.close();
+                resolve(msg.result?.result?.value ?? msg.result);
+            }
+        };
+        ws.onerror = () => { clearTimeout(timer); reject(new Error('ws error')); };
+    });
+}
+async function main() {
+    const user = process.env.DIDA_USERNAME ?? '';
+    const pass = process.env.DIDA_PASSWORD ?? '';
+    if (!user || !pass) {
+        console.error('env 必填');
+        process.exit(1);
+    }
+    const profileDir = mkdtempSync(join(tmpdir(), 'gotry-dida-swprobe-'));
+    const chromeBin = process.env.CHROME_BIN
+        ?? `${process.env.HOME}/Library/Caches/ms-playwright/chromium-1228/chrome-mac-arm64/Google Chrome for Testing.app/Contents/MacOS/Google Chrome for Testing`;
+    const chrome = spawn(chromeBin, [
+        '--remote-debugging-port=9235', `--user-data-dir=${profileDir}`, '--no-first-run',
+        `--disable-extensions-except=${EXT_DIR}`, `--load-extension=${EXT_DIR}`, 'about:blank',
+    ], { stdio: 'ignore' });
+    const cleanup = () => { try {
+        chrome.kill();
+    }
+    catch { } try {
+        rmSync(profileDir, { recursive: true, force: true });
+    }
+    catch { } };
+    process.on('exit', cleanup);
+    await sleep(10_000);
+    const browser = await chromium.connectOverCDP('http://127.0.0.1:9235');
+    const context = browser.contexts()[0];
+    // 登录 dida
+    const page = await context.newPage();
+    await page.goto('https://portal.dida.com/login', { waitUntil: 'networkidle', timeout: 45_000 });
+    await page.evaluate(`(() => {
+    document.querySelectorAll('#onetrust-consent-sdk, .nd-cookie-consent, .cdk-overlay-backdrop, .cdk-overlay-container').forEach(el => el.remove())
+  })()`).catch(() => { });
+    await page.waitForSelector('input[name="username"]', { timeout: 20_000 });
+    await page.evaluate(`(() => {
+    const u = document.querySelector('input[name="username"]')
+    const p = document.querySelector('input[name="password"]')
+    const setVal = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, 'value').set
+    setVal.call(u, ${JSON.stringify(user)}); u.dispatchEvent(new Event('input', { bubbles: true }))
+    setVal.call(p, ${JSON.stringify(pass)}); p.dispatchEvent(new Event('input', { bubbles: true }))
+    document.querySelectorAll('.ant-checkbox-wrapper, label[class*="checkbox"]').forEach(w => w.click())
+  })()`);
+    await sleep(500);
+    await page.evaluate(`(() => {
+    Array.from(document.querySelectorAll('button')).find(b => b.textContent.trim().toLowerCase() === 'login')?.click()
+  })()`);
+    try {
+        await page.waitForURL('**/hotel/**', { timeout: 60_000 });
+    }
+    catch {
+        console.log('等待人工验证码 60s…');
+        try {
+            await page.waitForURL('**/hotel/**', { timeout: 60_000 });
+        }
+        catch { }
+    }
+    await sleep(4_000);
+    console.log('final url:', page.url());
+    // 列 targets,找扩展 SW
+    const list = await (await fetch('http://127.0.0.1:9235/json')).json();
+    console.log('targets:', list.map((t) => `${t.type}:${t.url.slice(0, 70)}`).join('\n  '));
+    const sw = list.find((t) => t.type === 'service_worker' && t.url.endsWith('/background.js'));
+    if (!sw) {
+        console.log('未找到扩展 SW target');
+        process.exit(2);
+    }
+    const diag = await cdpEval(sw.webSocketDebuggerUrl, `(async () => {
+    const names = (cs) => cs.map(c => c.name + '@' + c.domain)
+    const m = chrome.runtime.getManifest()
+    const out = { id: chrome.runtime.id, version: m.version, hostPerms: m.host_permissions || [] }
+    try { const all = await chrome.cookies.getAll({}); out.allCount = all.length; out.allSample = names(all.slice(0, 15)) } catch (e) { out.allErr = String(e) }
+    for (const d of ['dida.com', '.dida.com']) {
+      try { out['q_' + d] = names(await chrome.cookies.getAll({ domain: d })) } catch (e) { out['qErr_' + d] = String(e) }
+    }
+    try { out.q_url = names(await chrome.cookies.getAll({ url: 'https://portal.dida.com/' })) } catch (e) { out.qErr_url = String(e) }
+    try { out.q_url_webapi = names(await chrome.cookies.getAll({ url: 'https://portal-webapi.dida.com/' })) } catch (e) { out.qErr_webapi = String(e) }
+    try {
+      const pk = await chrome.cookies.getAll({ domain: 'dida.com', partitionKey: {} })
+      out.q_pk_empty = names(pk)
+    } catch (e) { out.qErr_pk = String(e) }
+    return out
+  })()`);
+    console.log(JSON.stringify(diag, null, 2));
+    await browser.close();
+    process.exit(0);
+}
+main().catch((e) => { console.error('Fatal:', e); process.exit(1); });