@viyzhu/boss-cli-fork 0.6.8

package/dist/common/boss_page_guards.js

@@ -0,0 +1,596 @@
+import { BOSS_CHAT_INDEX_URL } from './auth.js';
+const SHOULD_ALLOW_CONSOLE_CLEAR = process.env.BOSS_BROWSER_ALLOW_CONSOLE_CLEAR === 'true' ||
+    process.env.BOSS_BROWSER_ALLOW_CONSOLE_CLEAR === '1';
+/**
+ * 主包用 `console.log` / `console.table` 重复打印大对象，比对耗时差判断 DevTools 是否打开。
+ * 默认开启对抗：把传入对象参数全部归一化为 `[object Type]` 字符串再交给原生方法，
+ * V8 inspector 序列化路径只看到短字符串，耗时不再随 DevTools 状态变化。
+ *
+ * 设为 `true` 可恢复完整 console 形态（保留对象树展开 UX，但会重新被时间差检测命中）。
+ */
+const SHOULD_ALLOW_VERBOSE_CONSOLE = process.env.BOSS_BROWSER_ALLOW_VERBOSE_CONSOLE === 'true' ||
+    process.env.BOSS_BROWSER_ALLOW_VERBOSE_CONSOLE === '1';
+const BLOCKED_SECURITY_SCRIPT_PATTERNS = [
+    { urlPattern: '*zhipin-security/web/boss/*', requestStage: 'Request' },
+    { urlPattern: '*zhipin-boss*risk-detection*', requestStage: 'Request' },
+    { urlPattern: '*bosszhipin.com/static/zhipin/geek/sdk/*', requestStage: 'Request' },
+];
+const REPORT_REQUEST_PATTERNS = [
+    { urlPattern: '*logapi.zhipin.com/dap/api/json*', requestStage: 'Request' },
+    { urlPattern: '*logapi-dev.weizhipin.com/dap/api/json*', requestStage: 'Request' },
+    { urlPattern: '*apm-fe.zhipin.com/wapi/zpApm/*', requestStage: 'Request' },
+    { urlPattern: '*apm-fe-qa.weizhipin.com/wapi/zpApm/*', requestStage: 'Request' },
+    { urlPattern: '*warlock.zhipin.com/wapi/warlock/*', requestStage: 'Request' },
+    { urlPattern: '*shink.zhipin.com/wapi/dapCommon/json*', requestStage: 'Request' },
+];
+/**
+ * 设为 `true` / `1` 时完全不拦截风险页导航（403 / verify / security-check）：
+ * Boss 真的要求人工验证时，让验证页正常渲染，用户手动完成后再跑命令。
+ */
+const SHOULD_ALLOW_RISK_NAV = process.env.BOSS_BROWSER_ALLOW_RISK_NAV === 'true' ||
+    process.env.BOSS_BROWSER_ALLOW_RISK_NAV === '1';
+/**
+ * `about:blank` 是浏览器内置 URL，不会进入 CDP 网络拦截，因此不放在 Fetch.enable 模式里；
+ * 该路径只能靠页面内 Location 守卫与 framenavigated 兜底处理。
+ */
+const RISK_NAVIGATION_PATTERNS = [
+    { urlPattern: '*/web/common/403.html*', requestStage: 'Request' },
+    { urlPattern: '*/web/common/nonsupport.html*', requestStage: 'Request' },
+    { urlPattern: '*/web/user/safe/verify*', requestStage: 'Request' },
+    { urlPattern: '*/web/passport/zp/403.html*', requestStage: 'Request' },
+    { urlPattern: '*/web/passport/zp/verify.html*', requestStage: 'Request' },
+    { urlPattern: '*/web/passport/zp/security.html*', requestStage: 'Request' },
+    { urlPattern: '*/web/passport/cm/403.html*', requestStage: 'Request' },
+    { urlPattern: '*/web/passport/cm/verify.html*', requestStage: 'Request' },
+    { urlPattern: '*/web/passport/cm/security-check.html*', requestStage: 'Request' },
+];
+const REPORT_REQUEST_RE = /(?:logapi(?:-dev)?\.(?:zhipin|weizhipin)\.com\/dap\/api\/json|apm-fe(?:-qa)?\.(?:zhipin|weizhipin)\.com\/wapi\/zpApm\/|warlock\.zhipin\.com\/wapi\/warlock\/|shink\.zhipin\.com\/wapi\/dapCommon\/json)/i;
+const RISK_NAVIGATION_RE = /about:blank|\/web\/common\/(?:403|nonsupport)\.html|\/web\/user\/safe\/verify|\/web\/passport\/(?:zp\/(?:403|verify|security)\.html|cm\/(?:403|verify|security-check)\.html)/i;
+const PAUSED_LABEL = {
+    report: 'report:204',
+    security_script: 'block:script',
+    risk_navigation: 'block:nav',
+};
+const POST_DATA_PREVIEW_LIMIT = 200;
+function isReportRequestUrl(url) {
+    return REPORT_REQUEST_RE.test(url);
+}
+function isRiskNavigationUrl(url) {
+    return RISK_NAVIGATION_RE.test(url);
+}
+function classifyPausedRequest(url) {
+    if (REPORT_REQUEST_RE.test(url))
+        return 'report';
+    if (RISK_NAVIGATION_RE.test(url))
+        return 'risk_navigation';
+    // 落到这里的都是命中 BLOCKED_SECURITY_SCRIPT_PATTERNS 的请求；不再做 fallback 判定，
+    // 一旦后续新增 patterns 但忘记同步分类正则，调用方能立刻发现而不是被静默归错类。
+    return 'security_script';
+}
+function previewPostData(raw) {
+    if (!raw)
+        return '';
+    const compact = raw.replace(/\s+/g, ' ').trim();
+    if (!compact)
+        return '';
+    return compact.length > POST_DATA_PREVIEW_LIMIT
+        ? `${compact.slice(0, POST_DATA_PREVIEW_LIMIT)}…`
+        : compact;
+}
+/**
+ * 把一行诊断信息打到 **页面 DevTools Console**（不进 Node stderr / stdout）。
+ *
+ * 走 CDP `Runtime.evaluate` 直接在页面默认执行上下文调 `console.info`：
+ * - 终端输出完全保持干净，对非交互命令（list / recommend / chat 管道）无副作用。
+ * - 只有用户主动打开 DevTools Console 才能看到，匹配 "排查时才需要" 的语义。
+ * - 极早期请求（Runtime 上下文尚未创建）会失败，silently 忽略——拦截动作本身不依赖此日志。
+ *
+ * 注意：本函数会经过页面里 §5 的 `console.info` 包装（字符串参数原样通过），
+ * 不会触发 V8 inspector 的对象序列化慢路径，对 DevTools 时间差检测无影响。
+ */
+function logToPageConsole(cdp, message) {
+    void cdp
+        .send('Runtime.evaluate', {
+        expression: `console.info(${JSON.stringify(message)})`,
+        awaitPromise: false,
+        returnByValue: true,
+    })
+        .catch(() => {
+        /* 页面无可用执行上下文（极早期 / 卸载中）时丢弃此条日志即可 */
+    });
+}
+function readRequestHeader(headers, name) {
+    const lowerName = name.toLowerCase();
+    const entry = Object.entries(headers).find(([key]) => key.toLowerCase() === lowerName);
+    return entry?.[1];
+}
+function buildNoContentResponseHeaders(headers) {
+    const origin = readRequestHeader(headers, 'origin') ?? 'https://www.zhipin.com';
+    const requestedHeaders = readRequestHeader(headers, 'access-control-request-headers') ??
+        'content-type,x-requested-with,traceid,zp_token,__zp_stoken__';
+    return [
+        { name: 'access-control-allow-origin', value: origin },
+        { name: 'access-control-allow-credentials', value: 'true' },
+        { name: 'access-control-allow-methods', value: 'GET,POST,PUT,PATCH,DELETE,OPTIONS' },
+        { name: 'access-control-allow-headers', value: requestedHeaders },
+        { name: 'cache-control', value: 'no-store' },
+    ];
+}
+/**
+ * 守卫脚本设计要点：
+ * - 不在 `window` 上挂任何 Symbol/字符串自描述属性，避免成为指纹。
+ * - 替换的方法保留 `name`，并通过包装后的 `Function.prototype.toString` 让 `fn.toString()` 返回原生形态。
+ * - 改写的 accessor / 方法尽量落在 prototype 上，descriptor 形态对齐原生（`configurable: true`）。
+ * - 对 `Location.prototype.href` 的 setter 也加拦截，覆盖 `location.href = ...` 直接赋值场景。
+ * - 不再伪造 `navigator.plugins` 与 `window.chrome.*`：现代 Chrome 默认值已经合理，伪造反而会被
+ *   `instanceof PluginArray`、对象形态比对等检测一眼分辨。
+ * - 不再覆盖 `window.closed`：`close()` 已经被改写为 noop，`closed` 自然保持原生默认值。
+ */
+const BOSS_PAGE_GUARD_SCRIPT_TEMPLATE = `(function() {
+  'use strict';
+
+  var _Object = Object;
+  var _defineProperty = _Object.defineProperty;
+  var _getOwnPropertyDescriptor = _Object.getOwnPropertyDescriptor;
+  var _Function = Function;
+  var _origFunctionToString = _Function.prototype.toString;
+  var _String = String;
+  var _Map = Map;
+
+  /** 让我们包装的函数对 fn.toString() 返回 "function NAME() { [native code] }"。 */
+  var nativeSourceMap = new _Map();
+  var fakeToString = function toString() {
+    if (this != null) {
+      var mapped = nativeSourceMap.get(this);
+      if (typeof mapped === 'string') return mapped;
+    }
+    return _origFunctionToString.call(this);
+  };
+  nativeSourceMap.set(fakeToString, 'function toString() { [native code] }');
+  try {
+    _defineProperty(_Function.prototype, 'toString', {
+      value: fakeToString,
+      writable: true,
+      configurable: true,
+      enumerable: false,
+    });
+  } catch (e) {}
+
+  /** 包装替身函数：把它伪装成 "function NAME() { [native code] }"。 */
+  var asNative = function(replacement, nativeName) {
+    var src = 'function ' + nativeName + '() { [native code] }';
+    nativeSourceMap.set(replacement, src);
+    try {
+      _defineProperty(replacement, 'name', {
+        value: nativeName,
+        writable: false,
+        configurable: true,
+        enumerable: false,
+      });
+    } catch (e) {}
+    return replacement;
+  };
+
+  /** 替换 prototype 上的方法（保持原 descriptor 形态：默认 configurable+writable）。 */
+  var replaceProtoMethod = function(proto, key, replacement) {
+    try {
+      var desc = _getOwnPropertyDescriptor(proto, key);
+      if (!desc) return null;
+      if (!desc.configurable) return null;
+      _defineProperty(proto, key, {
+        value: replacement,
+        writable: 'writable' in desc ? !!desc.writable : true,
+        configurable: true,
+        enumerable: !!desc.enumerable,
+      });
+      return desc.value;
+    } catch (e) {
+      return null;
+    }
+  };
+
+  /** 改写 prototype 上的 accessor：仅替换 getter/setter，保留 configurable/enumerable 形态。 */
+  var replaceProtoAccessor = function(proto, key, options) {
+    try {
+      var desc = _getOwnPropertyDescriptor(proto, key);
+      if (!desc || !desc.configurable) return null;
+      var nextDesc = {
+        configurable: true,
+        enumerable: !!desc.enumerable,
+      };
+      if (options.get || desc.get) nextDesc.get = options.get || desc.get;
+      if (options.set || desc.set) nextDesc.set = options.set || desc.set;
+      _defineProperty(proto, key, nextDesc);
+      return desc;
+    } catch (e) {
+      return null;
+    }
+  };
+
+  // ===== navigator.webdriver：在 Navigator.prototype 上覆盖 getter，保持 accessor 形态 =====
+  try {
+    var navProto = Object.getPrototypeOf(navigator);
+    if (navProto) {
+      replaceProtoAccessor(navProto, 'webdriver', {
+        get: asNative(function() { return false; }, 'get webdriver'),
+      });
+    }
+  } catch (e) {}
+
+  // ===== navigator.languages：仅在为空时回填，使用 prototype getter =====
+  try {
+    if (!navigator.languages || navigator.languages.length === 0) {
+      var navProto2 = Object.getPrototypeOf(navigator);
+      if (navProto2) {
+        var langs = ['zh-CN', 'zh', 'en'];
+        replaceProtoAccessor(navProto2, 'languages', {
+          get: asNative(function() { return langs; }, 'get languages'),
+        });
+      }
+    }
+  } catch (e) {}
+
+  // ===== window.close：改为空函数（保留 native 形态）=====
+  try {
+    var winProto = Object.getPrototypeOf(window);
+    if (winProto) {
+      replaceProtoMethod(winProto, 'close', asNative(function close() {}, 'close'));
+    }
+  } catch (e) {}
+
+  // ===== history.back / forward / go =====
+  try {
+    var historyProto = Object.getPrototypeOf(history);
+    if (historyProto) {
+      var origGo = historyProto.go;
+      replaceProtoMethod(historyProto, 'back', asNative(function back() {}, 'back'));
+      replaceProtoMethod(historyProto, 'forward', asNative(function forward() {}, 'forward'));
+      replaceProtoMethod(historyProto, 'go', asNative(function go(n) {
+        if (typeof n === 'number' && n < 0) return undefined;
+        return origGo.call(this, n);
+      }, 'go'));
+    }
+  } catch (e) {}
+
+  // ===== Location.assign / replace / href setter =====
+  var BLOCK_PATH = /\\/web\\/common\\/(?:403|nonsupport)\\.html|\\/web\\/user\\/safe\\/verify|\\/web\\/passport\\/(?:zp\\/(?:403|verify|security)\\.html|cm\\/(?:403|verify|security-check)\\.html)/i;
+  var isBlockedTarget = function(value) {
+    var s = _String(value);
+    if (s === 'about:blank') return true;
+    return BLOCK_PATH.test(s);
+  };
+  try {
+    var locProto = Location.prototype;
+    var origAssign = locProto.assign;
+    var origReplace = locProto.replace;
+    replaceProtoMethod(locProto, 'assign', asNative(function assign(url) {
+      if (isBlockedTarget(url)) return undefined;
+      return origAssign.call(this, url);
+    }, 'assign'));
+    replaceProtoMethod(locProto, 'replace', asNative(function replace(url) {
+      if (isBlockedTarget(url)) return undefined;
+      return origReplace.call(this, url);
+    }, 'replace'));
+
+    var hrefDesc = _getOwnPropertyDescriptor(locProto, 'href');
+    if (hrefDesc && hrefDesc.configurable && hrefDesc.set) {
+      var origHrefSet = hrefDesc.set;
+      _defineProperty(locProto, 'href', {
+        get: hrefDesc.get,
+        set: asNative(function(value) {
+          if (isBlockedTarget(value)) return undefined;
+          return origHrefSet.call(this, value);
+        }, 'set href'),
+        configurable: true,
+        enumerable: !!hrefDesc.enumerable,
+      });
+    }
+  } catch (e) {}
+
+  // ===== console.clear：可选替身，原生形态空函数 =====
+  if (!__SHOULD_ALLOW_CONSOLE_CLEAR__) {
+    try {
+      var consoleProtoForClear = Object.getPrototypeOf(console);
+      var ownClearDesc = Object.getOwnPropertyDescriptor(console, 'clear');
+      var protoClearDesc = consoleProtoForClear
+        ? _getOwnPropertyDescriptor(consoleProtoForClear, 'clear')
+        : null;
+      var clearSrcDesc = ownClearDesc || protoClearDesc;
+      if (clearSrcDesc && typeof clearSrcDesc.value === 'function') {
+        try {
+          _defineProperty(console, 'clear', {
+            value: asNative(function clear() {}, 'clear'),
+            writable: 'writable' in clearSrcDesc ? clearSrcDesc.writable !== false : true,
+            configurable: true,
+            enumerable: !!clearSrcDesc.enumerable,
+          });
+        } catch (_) {}
+      }
+    } catch (e) {}
+  }
+
+  // ===== console 时间差探测对抗 =====
+  // 主包用 \`console.log\` / \`console.table\` 重复打印大对象（典型：50 次 × 0..500 数组），
+  // 比较前后 \`performance.now()\`，DevTools 打开时 V8 inspector 会把对象逐一序列化送去，
+  // 耗时显著上升即判定 DevTools 打开。对抗手段：把所有对象参数在我们这层先归一化为
+  // \`[object Type]\` 这种 O(1) 字符串再交给原生方法，inspector 序列化路径只看到短字符串，
+  // 耗时不再随 DevTools 状态变化。代价：DevTools 控制台中对象会显示成 \`[object Type]\`，
+  // 失去对象树展开 UX；断点 / Watch / Sources / 调用栈不受影响。
+  if (!__SHOULD_ALLOW_VERBOSE_CONSOLE__) {
+    try {
+      var _objToString = Object.prototype.toString;
+      var sanitizeArgs = function(rawArgs) {
+        var len = rawArgs.length;
+        var out = new Array(len);
+        for (var i = 0; i < len; i++) {
+          var a = rawArgs[i];
+          if (a !== null && typeof a === 'object') {
+            try {
+              out[i] = _objToString.call(a);
+            } catch (_) {
+              out[i] = '[object Object]';
+            }
+          } else if (typeof a === 'function') {
+            // 函数也别交给 inspector，避免 toString 串走慢路径
+            out[i] = '[Function: ' + (a.name || 'anonymous') + ']';
+          } else {
+            out[i] = a;
+          }
+        }
+        return out;
+      };
+      var consoleProtoForLog = Object.getPrototypeOf(console);
+      var consoleMethodNames = [
+        'log', 'info', 'debug', 'warn', 'error',
+        'table', 'dir', 'dirxml', 'trace',
+        'group', 'groupCollapsed',
+      ];
+      for (var ci = 0; ci < consoleMethodNames.length; ci++) {
+        (function(method) {
+          // Chrome 把这些方法挂在 console 实例的 own property 上；
+          // 部分浏览器（含历史 Firefox）会挂在 Console.prototype 上。
+          // 优先取 own，否则退回 prototype；patch 一律 define 到实例上，
+          // 这样既能覆盖 own 写法，又能在 prototype 形态下 shadow 掉原方法。
+          var ownDesc = Object.getOwnPropertyDescriptor(console, method);
+          var protoDesc = consoleProtoForLog
+            ? _getOwnPropertyDescriptor(consoleProtoForLog, method)
+            : null;
+          var srcDesc = ownDesc || protoDesc;
+          if (!srcDesc || typeof srcDesc.value !== 'function') return;
+          var orig = srcDesc.value;
+          var wrapped = asNative(function() {
+            return orig.apply(this, sanitizeArgs(arguments));
+          }, method);
+          try {
+            _defineProperty(console, method, {
+              value: wrapped,
+              writable: 'writable' in srcDesc ? srcDesc.writable !== false : true,
+              configurable: true,
+              enumerable: !!srcDesc.enumerable,
+            });
+          } catch (_) {}
+        })(consoleMethodNames[ci]);
+      }
+    } catch (e) {}
+  }
+})();`;
+function buildPageGuardScript() {
+    return BOSS_PAGE_GUARD_SCRIPT_TEMPLATE
+        .replace('__SHOULD_ALLOW_CONSOLE_CLEAR__', SHOULD_ALLOW_CONSOLE_CLEAR ? 'true' : 'false')
+        .replace('__SHOULD_ALLOW_VERBOSE_CONSOLE__', SHOULD_ALLOW_VERBOSE_CONSOLE ? 'true' : 'false');
+}
+const browsersWithTargetGuard = new WeakSet();
+const pagesWithInitGuard = new WeakSet();
+const pagesWithNavigationGuard = new WeakSet();
+const pagesWithRequestGuard = new WeakSet();
+/**
+ * 风控页反弹熔断：Boss 判定风控后会反复把主 frame 推向 verify / 403 页，
+ * 而拦截 + 跳回沟通页会把「一次风控」放大成「无限刷新」。
+ * 窗口期内反弹超过阈值即熔断：停止反弹、放行验证页、由命令层报错停下来。
+ */
+const RISK_BOUNCE_WINDOW_MS = 60_000;
+const RISK_BOUNCE_LIMIT = 3;
+/** 同一 URL 在窗口期内反复 commit（Boss 自身 reload 循环，常见于安全脚本被拦后 SPA 自救）。 */
+const RELOAD_LOOP_WINDOW_MS = 15_000;
+const RELOAD_LOOP_LIMIT = 5;
+const riskStateByPage = new WeakMap();
+const cdpSessionByPage = new WeakMap();
+/** 当前页是否已熔断（风控页反弹 / 刷新循环）；命令层据此明确报错而不是继续空转。 */
+export function getBossPageRiskState(page) {
+    return riskStateByPage.get(page) ?? null;
+}
+/** 用户手动处理完验证后，可清掉熔断状态继续跑。 */
+export function clearBossPageRiskState(page) {
+    riskStateByPage.delete(page);
+}
+/** 熔断后放开风险页拦截，让 verify / security-check 正常渲染，用户才能手动过验证。 */
+async function relaxRiskNavigationBlocking(page) {
+    const cdp = cdpSessionByPage.get(page);
+    if (!cdp)
+        return;
+    await cdp
+        .send('Fetch.enable', {
+        patterns: [...BLOCKED_SECURITY_SCRIPT_PATTERNS, ...REPORT_REQUEST_PATTERNS],
+    })
+        .catch(() => {
+        /* 页面/会话已销毁时忽略：熔断状态本身已足够让命令层停下 */
+    });
+}
+function tripPageRisk(page, state) {
+    if (riskStateByPage.has(page))
+        return;
+    riskStateByPage.set(page, state);
+    console.error(`[boss-cli] ${state.message}`);
+}
+async function ensurePageInitGuard(page) {
+    if (pagesWithInitGuard.has(page))
+        return;
+    const script = buildPageGuardScript();
+    // 走 puppeteer 的 evaluateOnNewDocument：内部会把脚本同步注册到主 frame CDP session，
+    // 并在 OOPIF/iframe target 通过 `onAttachedToTarget` attach 时再次 addScript，
+    // 因此可以覆盖隐藏 iframe 反检测对照场景。
+    await page.evaluateOnNewDocument(script);
+    // 当前文档已在加载中或已加载完成时，evaluateOnNewDocument 不会回溯执行；
+    // 这里对当前主 frame 直接注入一次，让幂等的 try/catch 守卫立即生效。
+    await page.evaluate(script).catch(() => {
+        /* 当前文档可能还没创建执行上下文，由后续 navigation 触发 evaluateOnNewDocument 即可 */
+    });
+    pagesWithInitGuard.add(page);
+}
+function ensurePageNavigationGuard(page) {
+    if (pagesWithNavigationGuard.has(page))
+        return;
+    const bounceAt = [];
+    const commitAt = new Map();
+    const withinWindow = (stamps, now, windowMs) => {
+        const kept = stamps.filter((t) => now - t <= windowMs);
+        stamps.length = 0;
+        stamps.push(...kept);
+        return stamps;
+    };
+    page.on('framenavigated', (frame) => {
+        if (frame !== page.mainFrame())
+            return;
+        const url = frame.url();
+        const now = Date.now();
+        if (!isRiskNavigationUrl(url)) {
+            // 非风险页也可能陷入循环：安全脚本被拦后 Boss SPA 会自己反复 reload。
+            const stamps = commitAt.get(url) ?? [];
+            stamps.push(now);
+            commitAt.set(url, withinWindow(stamps, now, RELOAD_LOOP_WINDOW_MS));
+            if (stamps.length >= RELOAD_LOOP_LIMIT) {
+                tripPageRisk(page, {
+                    kind: 'reload_loop',
+                    url,
+                    message: `页面在 ${RELOAD_LOOP_WINDOW_MS / 1000}s 内重复加载 ${stamps.length} 次（${url}），疑似 Boss 侧风控或安全脚本被拦导致自刷新。已停止自动干预，请在浏览器中确认页面状态。`,
+                });
+            }
+            return;
+        }
+        if (riskStateByPage.has(page) || SHOULD_ALLOW_RISK_NAV)
+            return;
+        bounceAt.push(now);
+        withinWindow(bounceAt, now, RISK_BOUNCE_WINDOW_MS);
+        if (bounceAt.length > RISK_BOUNCE_LIMIT) {
+            tripPageRisk(page, {
+                kind: 'risk_navigation',
+                url,
+                message: `检测到 Boss 反复跳转风控/验证页（${url}），${RISK_BOUNCE_WINDOW_MS / 1000}s 内已 ${bounceAt.length} 次。已停止跳回沟通页并放行该页面：请在浏览器中完成验证/登录后重试；继续自动操作可能触发封号。`,
+            });
+            void relaxRiskNavigationBlocking(page)
+                .then(() => page.goto(url, { waitUntil: 'load', timeout: 60_000 }))
+                .catch(() => {
+                /* 验证页本身加载失败不再重试，熔断状态已让命令层停下 */
+            });
+            return;
+        }
+        void page.goto(BOSS_CHAT_INDEX_URL, { waitUntil: 'load', timeout: 60_000 }).catch(() => {
+            console.error(`[boss-cli] 风险页导航恢复失败：${url}`);
+        });
+    });
+    pagesWithNavigationGuard.add(page);
+}
+async function ensurePageRequestGuard(page) {
+    if (pagesWithRequestGuard.has(page))
+        return;
+    const cdp = await page.createCDPSession();
+    cdpSessionByPage.set(page, cdp);
+    await cdp.send('Network.setCacheDisabled', { cacheDisabled: true });
+    await cdp.send('Fetch.enable', {
+        patterns: [
+            ...BLOCKED_SECURITY_SCRIPT_PATTERNS,
+            ...REPORT_REQUEST_PATTERNS,
+            ...(SHOULD_ALLOW_RISK_NAV ? [] : RISK_NAVIGATION_PATTERNS),
+        ],
+    });
+    cdp.on('Fetch.requestPaused', (params) => {
+        const url = params.request.url;
+        const method = params.request.method;
+        const kind = classifyPausedRequest(url);
+        const label = PAUSED_LABEL[kind];
+        // 命中即记录到 **页面 DevTools Console**（不污染终端输出）。
+        if (kind === 'report') {
+            const body = previewPostData(params.request.postData);
+            logToPageConsole(cdp, body
+                ? `[boss-cli][${label}] ${method} ${url} body=${body}`
+                : `[boss-cli][${label}] ${method} ${url}`);
+            void cdp
+                .send('Fetch.fulfillRequest', {
+                requestId: params.requestId,
+                responseCode: 204,
+                responsePhrase: 'No Content',
+                responseHeaders: buildNoContentResponseHeaders(params.request.headers),
+            })
+                .catch(() => {
+                // CDP send 本身失败属于真实 ops 异常，仍然报到 Node stderr，方便外层定位。
+                console.error(`[boss-cli] 日志上报请求拦截响应失败：${url}`);
+            });
+            return;
+        }
+        logToPageConsole(cdp, `[boss-cli][${label}] ${method} ${url}`);
+        void cdp
+            .send('Fetch.failRequest', {
+            requestId: params.requestId,
+            errorReason: 'BlockedByClient',
+        })
+            .catch(() => {
+            console.error(`[boss-cli] 风险请求阻断失败：${url}`);
+        });
+    });
+    pagesWithRequestGuard.add(page);
+}
+/**
+ * 上一条命令（另一个进程）已经把页面留在验证/风控页时，直接熔断：
+ * 这种状态下再跳回沟通页只会重复被弹走，不如立刻让调用方报错。
+ * `about:blank` 属于新标签的正常初始态，不计入。
+ */
+function tripIfAlreadyOnRiskPage(page) {
+    if (SHOULD_ALLOW_RISK_NAV)
+        return;
+    let url = '';
+    try {
+        url = page.url();
+    }
+    catch {
+        return;
+    }
+    if (!url || url === 'about:blank' || !isRiskNavigationUrl(url))
+        return;
+    tripPageRisk(page, {
+        kind: 'risk_navigation',
+        url,
+        message: `当前页面停留在 Boss 验证/风控页（${url}）。已停止自动操作：请在浏览器中完成验证或重新登录后重试。`,
+    });
+}
+export async function installBossPageGuards(page) {
+    if (page.isClosed())
+        return;
+    await ensurePageInitGuard(page);
+    ensurePageNavigationGuard(page);
+    await ensurePageRequestGuard(page);
+    tripIfAlreadyOnRiskPage(page);
+}
+async function installTargetPageGuards(target) {
+    if (target.type() !== 'page')
+        return;
+    const page = await target.page();
+    if (!page || page.isClosed())
+        return;
+    await installBossPageGuards(page);
+}
+export async function installBossBrowserPageGuards(browser) {
+    if (!browsersWithTargetGuard.has(browser)) {
+        browser.on('targetcreated', (target) => {
+            void installTargetPageGuards(target).catch((e) => {
+                const msg = e instanceof Error ? e.message : String(e);
+                console.error(`[boss-cli] 新页面防护安装失败：${msg}`);
+            });
+        });
+        browsersWithTargetGuard.add(browser);
+    }
+    const pages = (await browser.pages()).filter((p) => !p.isClosed());
+    for (const page of pages) {
+        await installBossPageGuards(page);
+    }
+}
+//# sourceMappingURL=boss_page_guards.js.map

package/dist/common/boss_page_guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boss_page_guards.js","sourceRoot":"","sources":["../../src/common/boss_page_guards.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,MAAM,0BAA0B,GAC9B,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAK,MAAM;IACvD,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAK,GAAG,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,4BAA4B,GAChC,OAAO,CAAC,GAAG,CAAC,kCAAkC,KAAK,MAAM;IACzD,OAAO,CAAC,GAAG,CAAC,kCAAkC,KAAK,GAAG,CAAC;AAEzD,MAAM,gCAAgC,GAAG;IACvC,EAAE,UAAU,EAAE,6BAA6B,EAAE,YAAY,EAAE,SAAS,EAAE;IACtE,EAAE,UAAU,EAAE,8BAA8B,EAAE,YAAY,EAAE,SAAS,EAAE;IACvE,EAAE,UAAU,EAAE,0CAA0C,EAAE,YAAY,EAAE,SAAS,EAAE;CAC3E,CAAC;AAEX,MAAM,uBAAuB,GAAG;IAC9B,EAAE,UAAU,EAAE,kCAAkC,EAAE,YAAY,EAAE,SAAS,EAAE;IAC3E,EAAE,UAAU,EAAE,yCAAyC,EAAE,YAAY,EAAE,SAAS,EAAE;IAClF,EAAE,UAAU,EAAE,iCAAiC,EAAE,YAAY,EAAE,SAAS,EAAE;IAC1E,EAAE,UAAU,EAAE,uCAAuC,EAAE,YAAY,EAAE,SAAS,EAAE;IAChF,EAAE,UAAU,EAAE,oCAAoC,EAAE,YAAY,EAAE,SAAS,EAAE;IAC7E,EAAE,UAAU,EAAE,wCAAwC,EAAE,YAAY,EAAE,SAAS,EAAE;CACzE,CAAC;AAEX;;;GAGG;AACH,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,MAAM;IAClD,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,CAAC;AAElD;;;GAGG;AACH,MAAM,wBAAwB,GAAG;IAC/B,EAAE,UAAU,EAAE,wBAAwB,EAAE,YAAY,EAAE,SAAS,EAAE;IACjE,EAAE,UAAU,EAAE,+BAA+B,EAAE,YAAY,EAAE,SAAS,EAAE;IACxE,EAAE,UAAU,EAAE,yBAAyB,EAAE,YAAY,EAAE,SAAS,EAAE;IAClE,EAAE,UAAU,EAAE,6BAA6B,EAAE,YAAY,EAAE,SAAS,EAAE;IACtE,EAAE,UAAU,EAAE,gCAAgC,EAAE,YAAY,EAAE,SAAS,EAAE;IACzE,EAAE,UAAU,EAAE,kCAAkC,EAAE,YAAY,EAAE,SAAS,EAAE;IAC3E,EAAE,UAAU,EAAE,6BAA6B,EAAE,YAAY,EAAE,SAAS,EAAE;IACtE,EAAE,UAAU,EAAE,gCAAgC,EAAE,YAAY,EAAE,SAAS,EAAE;IACzE,EAAE,UAAU,EAAE,wCAAwC,EAAE,YAAY,EAAE,SAAS,EAAE;CACzE,CAAC;AAEX,MAAM,iBAAiB,GACrB,0MAA0M,CAAC;AAE7M,MAAM,kBAAkB,GACtB,+KAA+K,CAAC;AAMlL,MAAM,YAAY,GAA+B;IAC/C,MAAM,EAAE,YAAY;IACpB,eAAe,EAAE,cAAc;IAC/B,eAAe,EAAE,WAAW;CAC7B,CAAC;AAEF,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC3D,kEAAkE;IAClE,+CAA+C;IAC/C,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,OAAO,CAAC,MAAM,GAAG,uBAAuB;QAC7C,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,GAAG;QACjD,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB,CAAC,GAAe,EAAE,OAAe;IACxD,KAAK,GAAG;SACL,IAAI,CAAC,kBAAkB,EAAE;QACxB,UAAU,EAAE,gBAAgB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;QACtD,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,IAAI;KACpB,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,oCAAoC;IACtC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAuB,EAAE,IAAY;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,CAAC;IACvF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAuB;IAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,wBAAwB,CAAC;IAChF,MAAM,gBAAgB,GACpB,iBAAiB,CAAC,OAAO,EAAE,gCAAgC,CAAC;QAC5D,8DAA8D,CAAC;IACjE,OAAO;QACL,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,MAAM,EAAE;QACtD,EAAE,IAAI,EAAE,kCAAkC,EAAE,KAAK,EAAE,MAAM,EAAE;QAC3D,EAAE,IAAI,EAAE,8BAA8B,EAAE,KAAK,EAAE,mCAAmC,EAAE;QACpF,EAAE,IAAI,EAAE,8BAA8B,EAAE,KAAK,EAAE,gBAAgB,EAAE;QACjE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE;KAC7C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,+BAA+B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAuPlC,CAAC;AAEP,SAAS,oBAAoB;IAC3B,OAAO,+BAA+B;SACnC,OAAO,CAAC,gCAAgC,EAAE,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;SACxF,OAAO,CAAC,kCAAkC,EAAE,4BAA4B,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAAW,CAAC;AACvD,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAQ,CAAC;AAC/C,MAAM,wBAAwB,GAAG,IAAI,OAAO,EAAQ,CAAC;AACrD,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAAQ,CAAC;AAElD;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,kEAAkE;AAClE,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAU5B,MAAM,eAAe,GAAG,IAAI,OAAO,EAA2B,CAAC;AAC/D,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAoB,CAAC;AAEzD,+CAA+C;AAC/C,MAAM,UAAU,oBAAoB,CAAC,IAAU;IAC7C,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,sBAAsB,CAAC,IAAU;IAC/C,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,2DAA2D;AAC3D,KAAK,UAAU,2BAA2B,CAAC,IAAU;IACnD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,MAAM,GAAG;SACN,IAAI,CAAC,cAAc,EAAE;QACpB,QAAQ,EAAE,CAAC,GAAG,gCAAgC,EAAE,GAAG,uBAAuB,CAAC;KAC5E,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,iCAAiC;IACnC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,YAAY,CAAC,IAAU,EAAE,KAAwB;IACxD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IACtC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAU;IAC3C,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IACzC,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,sEAAsE;IACtE,uEAAuE;IACvE,2BAA2B;IAC3B,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACzC,iDAAiD;IACjD,6CAA6C;IAC7C,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACrC,gEAAgE;IAClE,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAU;IAC3C,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAE/C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE7C,MAAM,YAAY,GAAG,CAAC,MAAgB,EAAE,GAAW,EAAE,QAAgB,EAAY,EAAE;QACjF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE;QAClC,IAAI,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,6CAA6C;YAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACvC,YAAY,CAAC,IAAI,EAAE;oBACjB,IAAI,EAAE,aAAa;oBACnB,GAAG;oBACH,OAAO,EAAE,OAAO,qBAAqB,GAAG,IAAI,WAAW,MAAM,CAAC,MAAM,MAAM,GAAG,iDAAiD;iBAC/H,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,qBAAqB;YAAE,OAAO;QAE/D,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACxC,YAAY,CAAC,IAAI,EAAE;gBACjB,IAAI,EAAE,iBAAiB;gBACvB,GAAG;gBACH,OAAO,EAAE,uBAAuB,GAAG,KAAK,qBAAqB,GAAG,IAAI,QAAQ,QAAQ,CAAC,MAAM,kDAAkD;aAC9I,CAAC,CAAC;YACH,KAAK,2BAA2B,CAAC,IAAI,CAAC;iBACnC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;iBAClE,KAAK,CAAC,GAAG,EAAE;gBACV,+BAA+B;YACjC,CAAC,CAAC,CAAC;YACL,OAAO;QACT,CAAC;QAED,KAAK,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACrF,OAAO,CAAC,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAU;IAC9C,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1C,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE;QAC7B,QAAQ,EAAE;YACR,GAAG,gCAAgC;YACnC,GAAG,uBAAuB;YAC1B,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC;SAC3D;KACF,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACrC,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAEjC,2CAA2C;QAC3C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACtD,gBAAgB,CACd,GAAG,EACH,IAAI;gBACF,CAAC,CAAC,cAAc,KAAK,KAAK,MAAM,IAAI,GAAG,SAAS,IAAI,EAAE;gBACtD,CAAC,CAAC,cAAc,KAAK,KAAK,MAAM,IAAI,GAAG,EAAE,CAC5C,CAAC;YACF,KAAK,GAAG;iBACL,IAAI,CAAC,sBAAsB,EAAE;gBAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,YAAY,EAAE,GAAG;gBACjB,cAAc,EAAE,YAAY;gBAC5B,eAAe,EAAE,6BAA6B,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACvE,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE;gBACV,oDAAoD;gBACpD,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YACL,OAAO;QACT,CAAC;QAED,gBAAgB,CAAC,GAAG,EAAE,cAAc,KAAK,KAAK,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAC/D,KAAK,GAAG;aACL,IAAI,CAAC,mBAAmB,EAAE;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,iBAAiB;SAC/B,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,IAAU;IACzC,IAAI,qBAAqB;QAAE,OAAO;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,aAAa,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO;IACvE,YAAY,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,iBAAiB;QACvB,GAAG;QACH,OAAO,EAAE,uBAAuB,GAAG,+BAA+B;KACnE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAU;IACpD,IAAI,IAAI,CAAC,QAAQ,EAAE;QAAE,OAAO;IAC5B,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAChC,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACnC,uBAAuB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,MAAc;IACnD,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO;IACrC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE;QAAE,OAAO;IACrC,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAAgB;IACjE,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE;YACrC,KAAK,uBAAuB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC/C,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvD,OAAO,CAAC,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist/common/boss_paywall_popup.d.ts

@@ -0,0 +1,28 @@
+import type { Page } from 'puppeteer-core';
+/**
+ * 轮询直到出现 c-resume iframe、或出现付费墙、或超时。
+ * c-resume 可能在主文档，也可能在 `recommendFrame` 等子 frame 内（推荐预览），故遍历 {@link Page.frames}。
+ */
+export declare function waitForCResumeIframeOrPaywall(page: Page, timeoutMs?: number): Promise<'iframe' | 'paywall' | 'neither'>;
+/**
+ * 单次探测：主文档是否当前正显示付费弹层（与 {@link describeBossPaywallPopupIfPresent} 判定一致）。
+ * 供合并轮询（同一循环内同时检测多类弹层）使用，避免重复编写检测脚本。
+ */
+export declare function detectBossPaywallPopup(page: Page): Promise<boolean>;
+/**
+ * 打招呼等操作后，轮询主文档是否出现付费弹层（与 {@link describeBossPaywallPopupIfPresent} 判定一致）。
+ * 命中则返回 true；超时未出现则返回 false。
+ */
+export declare function waitForBossPaywallPopup(page: Page, timeoutMs?: number): Promise<boolean>;
+/**
+ * 若当前存在 VIP/付费类弹层（判定规则与 {@link describeBossPaywallPopupIfPresent} 一致），
+ * 则点击关闭按钮以恢复页面可操作状态。返回是否执行了关闭。
+ */
+export declare function closeBossPaywallPopupIfPresent(page: Page): Promise<boolean>;
+/**
+ * 检测 Boss 页面上是否出现 VIP/付费购买类弹层（如点击「在线简历」、推荐预览或打招呼后拦截权益时）。
+ * 命中则返回简短中文说明，供与「未出现 c-resume iframe」类错误拼接。
+ * @param purpose `greet` 时将「查看在线简历」类措辞改为适合打招呼的说明。
+ */
+export declare function describeBossPaywallPopupIfPresent(page: Page, purpose?: 'resume' | 'greet'): Promise<string | null>;
+//# sourceMappingURL=boss_paywall_popup.d.ts.map

package/dist/common/boss_paywall_popup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boss_paywall_popup.d.ts","sourceRoot":"","sources":["../../src/common/boss_paywall_popup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAgC3C;;;GAGG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,IAAI,EACV,SAAS,GAAE,MAAyC,GACnD,OAAO,CAAC,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC,CAkB3C;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAEzE;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,SAAS,GAAE,MAAkC,GAC5C,OAAO,CAAC,OAAO,CAAC,CASlB;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAoCjF;AAED;;;;GAIG;AACH,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,IAAI,EACV,OAAO,GAAE,QAAQ,GAAG,OAAkB,GACrC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuCxB"}