@danceiny/gotry 0.0.1-rc.9 → 0.2.0-rc.28

package/dist/scripts/gotry-backend-kernel-tests.js

@@ -0,0 +1,206 @@
+/**
+ * gotry-backend 内核离线合同测试(路由精确分发/冲突拒装/404/异常隔离/模块鉴权;
+ * 不发真实会话检索——session-search 模块以注入 fake 驱动)。
+ */
+import assert from 'node:assert/strict';
+import { closeBackend, createBackendServer } from '../src/backend/kernel.js';
+import { startSessionSearchModule } from '../src/backend/modules/session-search.js';
+import { resolveGotryBackendPort } from '../src/gotry-backend.js';
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+let pass = 0;
+let fail = 0;
+const check = (cond, label) => {
+    if (cond) {
+        pass += 1;
+        console.log(`  ok - ${label}`);
+    }
+    else {
+        fail += 1;
+        console.log(`  FAIL - ${label}`);
+    }
+};
+async function jfetch(url, init) {
+    const r = await fetch(url, init);
+    let body = null;
+    try {
+        body = await r.json();
+    }
+    catch { /* 空体 */ }
+    return { status: r.status, body };
+}
+async function main() {
+    check(resolveGotryBackendPort({}) === 3082, '统一入口未配置端口时默认 3082');
+    check(resolveGotryBackendPort({ GOTRY_BACKEND_PORT: '0' }) === 0, '统一入口显式端口 0 保留为临时监听');
+    check(resolveGotryBackendPort({ GOTRY_BACKEND_PORT: '3083', GOTRY_BOOKING_COPILOT_PORT: '3999' }) === 3083, '统一入口端口优先级稳定');
+    for (const invalid of ['-1', '1.5', '65536', 'not-a-port']) {
+        assert.throws(() => resolveGotryBackendPort({ GOTRY_BACKEND_PORT: invalid }), /gotry_backend_invalid_port/);
+        pass += 1;
+    }
+    // M1 内核:路由精确分发 + 未知 404 + 异常隔离 500(进程不倒)
+    const okModule = {
+        name: 'fake-ok',
+        routes: [{ method: 'GET', path: '/m1/ping', handle: (_req, res) => { res.setHeader('content-type', 'application/json'); res.end(JSON.stringify({ pong: true })); } }],
+    };
+    const boomModule = {
+        name: 'fake-boom',
+        routes: [{ method: 'GET', path: '/m2/boom', handle: async () => { throw new Error('boom'); } }],
+    };
+    const session = startSessionSearchModule({
+        apiKey: () => 'test-key',
+        search: async () => ({
+            ok: true, via: 'session-dida-portal', evidence: '[会话:dida-portal@test]', latencyMs: 1, verdict: 'hit',
+            rates: [{ hotelName: 'T', roomName: 'R', ratePlanId: 'RP', price: 100, currency: 'CNY', referenceNo: 'REF' }],
+        }),
+    });
+    const handle = await createBackendServer({ modules: [okModule, boomModule, session], port: 0 });
+    const base = `http://127.0.0.1:${handle.port}`;
+    try {
+        const ping = await jfetch(`${base}/m1/ping`);
+        check(ping.status === 200 && ping.body.pong === true, '模块路由精确分发');
+        const nf = await jfetch(`${base}/nope`);
+        check(nf.status === 404 && nf.body.error?.code === 'not_found', '未知路由 404');
+        const boom = await jfetch(`${base}/m2/boom`);
+        check(boom.status === 500 && boom.body.error?.code === 'gotry_backend_module_error', '模块异常隔离 500(服务面不倒)');
+        const afterBoom = await jfetch(`${base}/m1/ping`);
+        check(afterBoom.status === 200, '异常后服务面存活');
+        check(handle.moduleNames.includes('session-search') && handle.moduleNames.includes('fake-ok'), '模块注册表名单');
+        // M2 session-search 模块:鉴权 fail-closed + 注入 fake 检索合同
+        const noAuth = await jfetch(`${base}/v1/session/search`, { method: 'POST', body: '{"supplier":"dida-portal"}' });
+        check(noAuth.status === 403, '无 token 403');
+        const badSupplier = await jfetch(`${base}/v1/session/search`, {
+            method: 'POST',
+            headers: { authorization: 'Bearer test-key', 'content-type': 'application/json' },
+            body: '{"supplier":"ctrip-flight"}',
+        });
+        check(badSupplier.status === 400, '未知供应商通道 400');
+        const hit = await jfetch(`${base}/v1/session/search`, {
+            method: 'POST',
+            headers: { authorization: 'Bearer test-key', 'content-type': 'application/json' },
+            body: '{"supplier":"dida-portal"}',
+        });
+        const hitBody = hit.body;
+        check(hit.status === 200 && hitBody.verdict === 'hit' && hitBody.rates?.[0]?.ratePlanId === 'RP', '注入 fake 检索:结果合同透传');
+        // M2b needs-extension:安装入口是该 verdict 唯一的行动项,hotel-fe#3611
+        const STORE_URL = 'https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd';
+        const extModule = startSessionSearchModule({
+            apiKey: () => 'test-key',
+            search: async () => ({
+                ok: false,
+                via: 'session-dida-portal-error',
+                evidence: '[会话:dida-portal-needs-extension@test]',
+                latencyMs: 1,
+                verdict: 'needs-extension',
+                error: 'GoTry Session Bridge 扩展未连接',
+                installUrl: STORE_URL,
+                installAction: 'add-to-chrome',
+            }),
+        });
+        const extHandle = await createBackendServer({ modules: [extModule], port: 0 });
+        try {
+            const ext = await jfetch(`http://127.0.0.1:${extHandle.port}/v1/session/search`, {
+                method: 'POST',
+                headers: { authorization: 'Bearer test-key', 'content-type': 'application/json' },
+                body: '{"supplier":"dida-portal"}',
+            });
+            const extBody = ext.body;
+            check(ext.status === 200 && extBody.verdict === 'needs-extension', 'needs-extension verdict 透传');
+            check(extBody.installUrl === STORE_URL, '安装链接随 verdict 透出');
+            check(extBody.installAction === 'add-to-chrome', '安装动作随 verdict 透出');
+        }
+        finally {
+            await closeBackend(extHandle, [extModule]).catch(() => { });
+        }
+        // M3 #483:POST search/login 输入守卫。submit / search 注入计数证明
+        // 被拦截请求到达底层 = 0;/m1/ping 作 liveness 探针验证内核未被
+        // unhandledRejection 拖垮。
+        const submitCalls = { count: 0 };
+        const fakeQueue = {
+            extensionConnected: () => true,
+            port: 0,
+            close: async () => undefined,
+            handleMountedRequest: () => undefined,
+            submit: async (job) => {
+                submitCalls.count += 1;
+                submitCalls.lastJob = job;
+                return { ok: true, result: { ok: true, opened: true } };
+            },
+        };
+        let searchCalls = 0;
+        const guardSession = startSessionSearchModule({
+            apiKey: () => 'test-key',
+            search: async () => {
+                searchCalls += 1;
+                return {
+                    ok: true, via: 'session-dida-portal', evidence: '[会话:dida-portal@test]', latencyMs: 1, verdict: 'hit',
+                    rates: [{ hotelName: 'T', roomName: 'R', ratePlanId: 'RP', price: 100, currency: 'CNY', referenceNo: 'REF' }],
+                };
+            },
+            jobQueue: fakeQueue,
+        });
+        const guardHandle = await createBackendServer({ modules: [okModule, guardSession], port: 0 });
+        const guardBase = `http://127.0.0.1:${guardHandle.port}`;
+        const authHeader = { authorization: 'Bearer test-key', 'content-type': 'application/json' };
+        try {
+            const rejectionCases = [
+                { label: 'search body=null', path: '/v1/session/search', body: 'null', expectError: 'body 必须是 JSON 对象' },
+                { label: 'search body=[]', path: '/v1/session/search', body: '[]', expectError: 'body 必须是 JSON 对象' },
+                { label: 'search body=number', path: '/v1/session/search', body: '42', expectError: 'body 必须是 JSON 对象' },
+                { label: 'search body=string', path: '/v1/session/search', body: '"x"', expectError: 'body 必须是 JSON 对象' },
+                { label: 'search body=bool', path: '/v1/session/search', body: 'true', expectError: 'body 必须是 JSON 对象' },
+                { label: 'search supplier=number', path: '/v1/session/search', body: '{"supplier":123}', expectError: 'supplier 必须是字符串' },
+                { label: 'search supplier=null', path: '/v1/session/search', body: '{"supplier":null}', expectError: 'supplier 必须是字符串' },
+                { label: 'search query=string', path: '/v1/session/search', body: '{"supplier":"dida-portal","query":"foo"}', expectError: 'body 必须是 JSON 对象' },
+                { label: 'search query.timeoutMs=string', path: '/v1/session/search', body: '{"supplier":"dida-portal","query":{"timeoutMs":"30"}}', expectError: 'body 必须是 JSON 对象' },
+                { label: 'search query.timeoutMs=Infinity', path: '/v1/session/search', body: '{"supplier":"dida-portal","query":{"timeoutMs":1e309}}', expectError: 'body 必须是 JSON 对象' },
+                { label: 'login body=null', path: '/v1/session/login/open', body: 'null', expectError: 'body 必须是 JSON 对象' },
+                { label: 'login url=number', path: '/v1/session/login/open', body: '{"supplier":"dida-portal","url":123}', expectError: 'url 必须是字符串' },
+                { label: 'login supplier=bool', path: '/v1/session/login/open', body: '{"supplier":true}', expectError: 'supplier 必须是字符串' },
+                { label: 'search 非法 JSON', path: '/v1/session/search', body: '{not-json', expectError: 'body 不是 JSON' },
+                { label: 'login 非法 JSON', path: '/v1/session/login/open', body: '{not-json', expectError: 'body 不是 JSON' },
+            ];
+            for (const c of rejectionCases) {
+                const r = await jfetch(`${guardBase}${c.path}`, { method: 'POST', headers: authHeader, body: c.body });
+                const err = r.body?.error ?? '';
+                check(r.status === 400, `${c.label}:HTTP 400`);
+                check(err === c.expectError, `${c.label}:error 稳定(${c.expectError})`);
+                const live = await jfetch(`${guardBase}/m1/ping`);
+                check(live.status === 200, `${c.label}:拒后 server 存活`);
+            }
+            // 超 64KB 触发 readBody 拒绝;确保不抛错 / 进程不倒。
+            const oversize = 'x'.repeat(64 * 1024 + 16);
+            const rOversize = await jfetch(`${guardBase}/v1/session/search`, { method: 'POST', headers: authHeader, body: oversize });
+            check(rOversize.status === 400 && (rOversize.body?.error ?? '') === 'body 读取失败', 'search 超 64KB:HTTP 400 body 读取失败');
+            const liveOversize = await jfetch(`${guardBase}/m1/ping`);
+            check(liveOversize.status === 200, 'search 超 64KB:拒后 server 存活');
+            check(searchCalls === 0, '所有被拒 search:search 注入 0 次调用');
+            check(submitCalls.count === 0, '所有被拒 login:bridge.submit 0 次调用');
+            // 合法路径需真正穿过守卫、调用底层
+            const validSearch = await jfetch(`${guardBase}/v1/session/search`, {
+                method: 'POST', headers: authHeader, body: '{"supplier":"dida-portal","query":{"entryUrl":"https://portal.dida.com/find","timeoutMs":5000}}',
+            });
+            check(validSearch.status === 200, '合法 search(query 对象含 entryUrl/timeoutMs):200');
+            check(searchCalls === 1, '合法 search:search 注入 +1 次');
+            const validLogin = await jfetch(`${guardBase}/v1/session/login/open`, {
+                method: 'POST', headers: authHeader, body: '{"supplier":"dida-portal","url":"https://portal.dida.com/login"}',
+            });
+            check(validLogin.status === 200, '合法 login/open:200');
+            check(submitCalls.count === 1 && submitCalls.lastJob?.kind === 'open-login', '合法 login:bridge.submit +1 次且 kind=open-login');
+            const offDomain = await jfetch(`${guardBase}/v1/session/login/open`, {
+                method: 'POST', headers: authHeader, body: '{"supplier":"dida-portal","url":"https://evil.example.com/login"}',
+            });
+            check(offDomain.status === 400 && (offDomain.body?.error ?? '').includes('portal.dida.com'), 'login url 域外 400(fail-closed)');
+            check(submitCalls.count === 1, 'login url 域外:bridge.submit 未增');
+        }
+        finally {
+            await closeBackend(guardHandle, [okModule, guardSession]);
+        }
+    }
+    finally {
+        await closeBackend(handle, [okModule, boomModule, session]).catch(() => { });
+    }
+    await sleep(50);
+    console.log(`\nGOTRY BACKEND KERNEL: ${pass} pass, ${fail} fail`);
+    if (fail > 0)
+        process.exitCode = 1;
+}
+void main();

package/dist/scripts/gotry-try-demo-tests.js

@@ -0,0 +1,79 @@
+/**
+ * gotry try 离线 deck demo 注册工具/CLI 验收(issue #571,Phase A):
+ *
+ * 验证 `npx tsx scripts/gotry-try-demo.ts` 一行跑通——输出文件存在 + 内容是有效 deck HTML。
+ * 真实执行 demo 脚本(以子进程形式,模拟用户调用),断言:
+ *   1. 退出码 0
+ *   2. stdout 末行可解析(path / bytes / slides 三段)
+ *   3. 落盘 deck HTML 含双面文案(scroll-snap / 证据边界 / 至少一张幻灯页)
+ *
+ * 全合成 fixture,无用户真实行程。
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { spawnSync } from 'node:child_process';
+let pass = 0;
+let fail = 0;
+const failures = [];
+function ok(cond, msg) {
+    if (cond) {
+        pass++;
+        return;
+    }
+    fail++;
+    failures.push(msg);
+}
+// 从 ts/ 跑子进程,确保 tsx 能解析 tsconfig 的 paths/imports
+const tsRoot = new URL('..', import.meta.url).pathname;
+const tsxBin = new URL('../node_modules/.bin/tsx', import.meta.url).pathname;
+const result = spawnSync(tsxBin, ['scripts/gotry-try-demo.ts'], {
+    cwd: tsRoot,
+    encoding: 'utf-8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+});
+ok(result.status === 0, `§1 demo 退出码 0(实测 ${result.status}; stderr=${result.stderr?.trim() ?? ''})`);
+const stdout = (result.stdout ?? '').trim();
+ok(stdout.length > 0, '§2 demo stdout 非空');
+// stdout 末行格式:`<path>\t<bytes>B\t<slides>slides`
+const lastLine = stdout.split('\n').pop() ?? '';
+const parts = lastLine.split('\t');
+ok(parts.length === 3, `§3 stdout 末行三段 tab 分隔(实测 ${parts.length} 段: ${lastLine.slice(0, 120)})`);
+const [pathPart, bytesPart, slidesPart] = parts;
+ok(typeof pathPart === 'string' && pathPart.length > 0 && pathPart.endsWith('.html'), `§4 path 段是 .html 文件路径(${pathPart?.slice(0, 60)})`);
+ok(typeof bytesPart === 'string' && /^(\d+)B$/.test(bytesPart), `§5 bytes 段是 <n>B 格式(${bytesPart})`);
+ok(typeof slidesPart === 'string' && /^(\d+)slides$/.test(slidesPart), `§6 slides 段是 <n>slides 格式(${slidesPart})`);
+if (pathPart) {
+    ok(existsSync(pathPart), `§7 落盘文件存在(${pathPart})`);
+    const bytes = Number(bytesPart.replace('B', ''));
+    const slides = Number(slidesPart.replace('slides', ''));
+    const disk = readFileSync(pathPart, 'utf-8');
+    const diskBytes = Buffer.byteLength(disk, 'utf8');
+    ok(diskBytes === bytes, `§8 落盘字节 == stdout 报告(${bytes} B,磁盘 ${diskBytes} B)`);
+    ok(disk.length > 0, '§9 落盘文件非空');
+    // deck 形态契约
+    ok(disk.includes('html{scroll-snap-type:y proximity}'), '§10 含纯 CSS scroll-snap(零脚本翻页)');
+    ok(disk.includes('scroll-snap-align:start'), '§11 scroll-snap align 命中');
+    ok(disk.includes('本文档只投影调用方给出的显式行程与已注册事实'), '§12 共享 evidence 边界声明');
+    ok(disk.includes('计划面(明示日期与段落)与证据面(已注册事实)分开陈述'), '§13 双面声明');
+    // 计数:stdout 报告的幻灯数 == 磁盘里 section.slide 的实际数
+    const actualSlides = (disk.match(/<section class="slide/g) ?? []).length;
+    ok(actualSlides === slides, `§14 stdout 报告 ${slides} 张 = 磁盘实际 ${actualSlides} 张`);
+    // 固定 fixture 的内容指纹(确定性)
+    ok(disk.includes('合成示例:深圳 → 普吉(Phase A gotry try fixture)'), '§15 含 fixture title');
+    ok(disk.includes('SZX') && disk.includes('HKT') && disk.includes('PVG'), '§16 三个机场代码出现在计划段');
+    // 空事实列表 = 明确未核验
+    ok(disk.includes('共 0 条事实'), '§17 空事实列表显式陈述 0');
+    ok(disk.includes('该段没有匹配的已注册事实'), '§18 计划段显式标注未核验');
+    ok(!disk.includes('class="badge ok"'), '§19 空事实文档没有任何 ok 徽章');
+    // 零脚本 + 无远端依赖
+    ok(!disk.includes('<script'), '§20 产物无 script');
+    ok(!disk.includes('http://') && !disk.includes('https://'), '§21 产物无远端依赖');
+    // 摘要(便于人类阅读)
+    console.log(`\nGOTRY TRY DEMO TESTS: 落地路径=${pathPart}`);
+}
+console.log(`\nGOTRY TRY DEMO TESTS: ${pass} pass, ${fail} fail`);
+if (fail > 0) {
+    console.log('\nFAILURES:');
+    for (const f of failures)
+        console.log('  - ' + f);
+    process.exit(1);
+}

package/dist/scripts/gotry-try-demo.js

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+/**
+ * gotry try 离线 deck demo(issue #571,Phase A):免安装、免 LLM key、免 dsh 主机,
+ * 直接 `npx tsx scripts/gotry-try-demo.ts` 就能渲染一个 deck HTML 到 tmpdir 并打印路径。
+ *
+ * 设计目标(研究文档 §3 决策点 P5):给 M3 种子用户漏斗一个「零配置即可看 deck」的入口。
+ * 不动内核、不注册 dsh 工具、不激活运行时——纯 renderer 调用 + 一次落盘。
+ *
+ * 夹具内联、合成数据、无供应商证据;产物是「用户排期意图 + 0 条事实」的明确未核验计划样例。
+ *
+ * 运行(在 ts/ 下):
+ *   npx tsx scripts/gotry-try-demo.ts
+ * 退出码 0 + stdout 一行:deck 路径 + 字节数 + 幻灯页数。
+ */
+import { mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { renderItineraryDeck } from '../src/itinerary-deck.js';
+const FIXTURE = {
+    title: '合成示例:深圳 → 普吉(Phase A gotry try fixture)',
+    itinerary: {
+        trip_start: '2027-07-16',
+        trip_end: '2027-07-21',
+        stays: [{ place: '普吉岛', check_in: '2027-07-17', check_out: '2027-07-20' }],
+        od_segments: [
+            { from: '广州南', to: '深圳北', date: '2027-07-16', mode: 'rail', legs: 1 },
+            { from: 'SZX', to: 'HKT', date: '2027-07-17', mode: 'flight', legs: 1 },
+            { from: 'HKT', to: 'PVG', date: '2027-07-20', mode: 'flight', legs: 1 },
+        ],
+    },
+    facts: [],
+};
+function main() {
+    const result = renderItineraryDeck(FIXTURE);
+    if (!result.ok) {
+        console.error('FAIL: 渲染器拒绝 fixture(这是合成数据,不应该失败):');
+        for (const e of result.errors)
+            console.error('  - ' + e);
+        process.exit(1);
+    }
+    const home = mkdtempSync(join(tmpdir(), 'gotry-try-'));
+    const path = join(home, 'gotry-try-deck.html');
+    writeFileSync(path, result.html, 'utf-8');
+    const bytes = Buffer.byteLength(result.html, 'utf8');
+    const slideCount = (result.html.match(/<section class="slide/g) ?? []).length;
+    // 单行输出便于机器消费(human 友好:stdout 末尾换行)
+    console.log(`${path}\t${bytes}B\t${slideCount}slides`);
+}
+main();