specific-ai-cli 0.0.0-stage → 0.1.1

package/dist/platforms/taobao/web/api.js

@@ -0,0 +1,96 @@
+import { SpecificAIError } from '../../../core/errors.js';
+import { parseJson, parseJsonp } from '../../../core/http.js';
+import * as rand from '../../../core/rand.js';
+import { authError } from '../../../core/toolkit.js';
+import { APP_KEY, DOC_HEADERS, IM_APP_KEY, LOGIN_TOKEN_URL, TOKEN_HEADERS, UA, UPLOAD_HEADERS, UPLOAD_URL } from './profile.js';
+import { generateSign } from './sign.js';
+/**
+ * 上游 taobao_apis.py 的 TaobaoApis：一个函数对应一个上游方法，参数与顺序照抄（对拍测试逐字节比较）。
+ */
+/** `_m_h5_tk` 过期或缺失时，服务端在响应里下发新的，重试即可。 */
+const TOKEN_RETRY = /令牌过期|令牌为空|FAIL_SYS_TOKEN_EXOIRED|FAIL_SYS_TOKEN_EMPTY/;
+const MAX_TOKEN_RETRY = 3;
+/**
+ * get_token：`mtop.taobao.login.token.get.h5`，换取私信长连的 accessToken。
+ * 返回 JSONP 里的整个 JSON。签名用 cookie `_m_h5_tk`；没有这个 cookie（游客、导入的 cookie 不全）
+ * 时用空 token 签名，服务端会下发新的 `_m_h5_tk`，与令牌过期一样重试。
+ */
+export async function getToken(tb) {
+    for (let attempt = 1;; attempt++) {
+        const t = rand.nowSeconds() * 1000;
+        const data = `{"domain":"cntaobao","deviceId":"${tb.deviceId}","locale":"zh_CN","imAppKey":"${IM_APP_KEY}"}`;
+        const token = (tb.cookie('_m_h5_tk') ?? '').split('_')[0];
+        const query = [
+            ['jsv', '2.7.0'],
+            ['appKey', APP_KEY],
+            ['t', t],
+            ['sign', generateSign(t, token, data)],
+            ['api', 'mtop.taobao.login.token.get.h5'],
+            ['v', '2.0'],
+            ['preventFallback', 'true'],
+            ['type', 'jsonp'],
+            ['dataType', 'jsonp'],
+            ['callback', 'mtopjsonp3'],
+            ['data', data],
+        ];
+        const text = await tb.text({ url: LOGIN_TOKEN_URL, query, headers: TOKEN_HEADERS });
+        const body = parseJsonp(text);
+        if (body == null)
+            throw new SpecificAIError('UPSTREAM', '淘宝返回的不是 mtop 的 JSONP', { detail: { body: text.slice(0, 300) } });
+        if (attempt < MAX_TOKEN_RETRY && TOKEN_RETRY.test(String(body?.ret?.[0] ?? '')))
+            continue;
+        return body;
+    }
+}
+/** get_goods_uid_encrypt_uid 的第一步：打开商品页。 */
+export async function goodsPage(tb, goodsUrl) {
+    const res = await tb.request({ url: goodsUrl, headers: DOC_HEADERS });
+    return { url: res.url || goodsUrl, html: await res.text() };
+}
+/**
+ * get_goods_uid_encrypt_uid 的第二步：从商品页 HTML 里取卖家的 `uid` 与 `encrypt_uid`。
+ * 取不到时区分登录墙（游客打开商品页会被要求登录）、滑块验证和页面结构变化。
+ */
+export function parseSeller(tb, page) {
+    const uid = /"userId":"(.*?)"/.exec(page.html)?.[1];
+    const encrypt = /data-encryptuid="(.*?)"/.exec(page.html)?.[1];
+    if (uid != null && encrypt != null)
+        return { uid, encrypt_uid: encrypt };
+    if (/login_jump|login\.taobao\.com\/member\/login|login\.m\.taobao\.com/.test(page.html) || /\/\/login\.(m\.)?taobao\.com\//.test(page.url)) {
+        throw authError(tb.ctx, '淘宝要求登录后才能打开商品页');
+    }
+    if (/_____tmd_____|punish|x5sec/i.test(page.html)) {
+        throw new SpecificAIError('RISK_CONTROL', '淘宝要求滑块验证，请稍后再试或在浏览器里打开一次商品页', { detail: { kind: 'captcha' } });
+    }
+    throw new SpecificAIError('UPSTREAM', '商品页里没有找到卖家信息', { detail: { url: page.url } });
+}
+/**
+ * upload_media：上传图片，返回响应里的 `object`（fileId、url、size、pix）。
+ * 上游不管文件是什么格式，Content-Type 一律写 image/png，这里照做。
+ */
+export async function uploadMedia(tb, file) {
+    const res = await tb.request({
+        method: 'POST',
+        url: UPLOAD_URL,
+        query: [
+            ['appkey', 'ampmedia'],
+            ['folderId', '0'],
+            ['_input_charset', 'utf-8'],
+            ['useGtrSessionFilter', 'false'],
+        ],
+        headers: UPLOAD_HEADERS,
+        multipart: [
+            { name: 'name', data: file.filename },
+            { name: 'ua', data: UA },
+            { name: 'file', data: file.data, filename: file.filename, contentType: 'image/png' },
+        ],
+    });
+    const body = await parseJson(res);
+    if (body?.success && body.object)
+        return body;
+    if (/NOT_LOGIN|SESSION/i.test(String(body?.errorCode ?? '')))
+        throw authError(tb.ctx, `淘宝登录态无效：${body.message ?? body.errorCode}`);
+    throw new SpecificAIError('UPSTREAM', `上传失败：${body?.message ?? body?.errorCode ?? '未知错误'}`, {
+        detail: { code: body?.errorCode ?? null, message: body?.message ?? null },
+    });
+}

package/dist/platforms/taobao/web/client.js

@@ -0,0 +1,102 @@
+import { SpecificAIError } from '../../../core/errors.js';
+import { unquote } from '../../../core/py.js';
+import * as rand from '../../../core/rand.js';
+import { authError, httpClient } from '../../../core/toolkit.js';
+import * as api from './api.js';
+import { BROWSER } from './profile.js';
+import { generateDeviceId } from './sign.js';
+/**
+ * 淘宝 web 端的会话（上游 TaobaoApis + taobaoLive 的构造部分）：cookie、设备号、当前账号。
+ *
+ * 上游用 requests 的 Session，cookie 是从字符串导入的（没有 domain），会发给所有域名，
+ * 顺序是 `session.cookies.get_dict()` 的顺序，即写入顺序。这里照做。
+ */
+export class Taobao {
+    ctx;
+    http;
+    jar;
+    constructor(ctx) {
+        this.ctx = ctx;
+        this.http = httpClient(ctx, { browser: BROWSER, os: 'windows' });
+        this.jar = this.http.jar;
+    }
+    /** 所有未过期的 cookie，按写入顺序；同名（不同 domain）时位置取第一个、值取最后一个，与 get_dict 相同。 */
+    cookies() {
+        const now = rand.nowSeconds();
+        const map = new Map();
+        for (const c of this.jar.cookies)
+            if (c.expires == null || c.expires > now)
+                map.set(c.name, c.value);
+        return Object.fromEntries(map);
+    }
+    /** 上游 get_session_cookies_str：`k=v; k=v`。 */
+    cookieString() {
+        return Object.entries(this.cookies())
+            .map(([k, v]) => `${k}=${v}`)
+            .join('; ');
+    }
+    cookie(name) {
+        return this.cookies()[name];
+    }
+    /** 当前账号的用户 ID（cookie `unb`）。 */
+    get myId() {
+        return this.cookie('unb') ?? '';
+    }
+    /** cookie `_nk_` 的原值（没有时用 `tracknick`）：URL 编码后的 `\uXXXX` 转义。上游私信的 sender_nick 直接拼它，不解码。 */
+    get rawNick() {
+        return this.cookie('_nk_') ?? this.cookie('tracknick') ?? '';
+    }
+    /** 当前账号的昵称（解码后的 `_nk_`）。 */
+    get nick() {
+        return decodeNick(this.rawNick);
+    }
+    /** 设备号：上游每次启动随机生成；这里生成一次后存进凭证的 device，之后复用。 */
+    get deviceId() {
+        const device = this.ctx.credential.device;
+        if (typeof device.device_id !== 'string' || !device.device_id)
+            device.device_id = generateDeviceId(this.myId);
+        return device.device_id;
+    }
+    me() {
+        return { id: this.myId, name: this.nick || null, url: null };
+    }
+    /** 私信、上传等需要登录的操作：cookie 里必须有 unb。 */
+    requireLogin() {
+        if (!this.myId)
+            throw authError(this.ctx, '当前账号的 cookie 里没有 unb，请重新登录');
+    }
+    request(req) {
+        return this.http.request({ ...req, cookies: this.cookies() });
+    }
+    async text(req) {
+        return (await this.request(req)).text();
+    }
+}
+export function decodeNick(raw) {
+    return unquote(raw).replace(/\\u([0-9a-fA-F]{4})/g, (_, h) => String.fromCharCode(parseInt(h, 16)));
+}
+/** mtop 的 ret（如 `FAIL_SYS_SESSION_EXPIRED::Session过期`）映射成 specific-ai 的错误（AGENTS 6.4）。 */
+function mtopError(ctx, body) {
+    const ret = String(body?.ret?.[0] ?? '');
+    if (/SESSION_EXPIRED|FAIL_SYS_SESSION|NOT_LOGIN|ERR_SID_INVALID/i.test(ret))
+        return authError(ctx, `淘宝登录态无效：${ret}`);
+    if (/FAIL_SYS_USER_VALIDATE/.test(ret)) {
+        return new SpecificAIError('RISK_CONTROL', `淘宝要求人机验证：${ret}`, { detail: { kind: 'captcha', ret: body?.ret } });
+    }
+    if (/RGV587|FAIL_SYS_TRAFFIC_LIMIT|FAIL_SYS_ILLEGAL_ACCESS/.test(ret)) {
+        return new SpecificAIError('RISK_CONTROL', `淘宝风控拦截：${ret}`, { detail: { kind: 'blocked', ret: body?.ret } });
+    }
+    return new SpecificAIError('UPSTREAM', ret ? `淘宝返回错误：${ret}` : '淘宝返回了无法识别的结果', { detail: { ret: body?.ret ?? null } });
+}
+/** 私信长连的 accessToken（上游 init 里 get_token 的用法）。 */
+export async function accessToken(tb) {
+    const body = await api.getToken(tb);
+    const token = body?.data?.result?.accessToken;
+    if (typeof token === 'string' && token)
+        return token;
+    throw mtopError(tb.ctx, body);
+}
+/** 建立会话。 */
+export function taobao(ctx) {
+    return new Taobao(ctx);
+}

package/dist/platforms/taobao/web/commands.js

@@ -0,0 +1,172 @@
+import { SpecificAIError } from '../../../core/errors.js';
+import { readMedia } from '../../../core/files.js';
+import { cookieCredential, finishLogin, loginContext } from '../../../core/login.js';
+import * as n from '../../../core/normalize.js';
+import * as rand from '../../../core/rand.js';
+import { history, listen, pushedPayloads } from '../../_shared/impaas.js';
+import * as api from './api.js';
+import { accessToken, Taobao, taobao } from './client.js';
+import { createChatFrame, createdCid, imId, openIm, sendMsgFrame } from './im.js';
+import * as norm from './normalize.js';
+import { COOKIE_DOMAIN, IM_DOMAIN } from './profile.js';
+import { resolveConversation, resolveItem, resolveSellerItem } from './resolve.js';
+import { decrypt } from './sign.js';
+const isAuthError = (err) => err instanceof SpecificAIError && (err.code === 'AUTH_REQUIRED' || err.code === 'AUTH_EXPIRED');
+// ================================================================ auth
+/** cookie 登录：导入后换一次私信 token 作为校验（上游没有取当前用户的接口）。 */
+export async function authLogin(ctx) {
+    const credential = cookieCredential(ctx, COOKIE_DOMAIN);
+    const tb = new Taobao(loginContext(ctx, credential));
+    const hint = '复制浏览器里登录后的淘宝 cookie（需要包含 unb、_m_h5_tk、cookie2）';
+    if (!tb.myId)
+        throw new SpecificAIError('USAGE', 'cookie 里没有 unb，不是登录后的淘宝 cookie', { hint });
+    try {
+        await accessToken(tb);
+    }
+    catch (err) {
+        if (isAuthError(err))
+            throw new SpecificAIError('AUTH_REQUIRED', '登录没有成功：cookie 无效或已过期', { hint });
+        throw err;
+    }
+    return finishLogin(ctx, credential, tb.me());
+}
+export async function authStatus(ctx) {
+    const off = { logged_in: false, user: null, method: null, expires_at: null };
+    const tb = taobao(ctx);
+    // 没登录时是一份空凭证，没有 unb
+    if (!tb.myId)
+        return off;
+    try {
+        await accessToken(tb);
+    }
+    catch (err) {
+        if (isAuthError(err))
+            return off;
+        throw err;
+    }
+    const expires = ['cookie2', 'sgcookie', 'unb'].map((name) => tb.jar.cookies.find((c) => c.name === name)?.expires).find((e) => e != null);
+    return { logged_in: true, user: tb.me(), method: ctx.credential.method, expires_at: n.time(expires) };
+}
+// ================================================================ user
+/** 卖家资料：打开商品页取卖家（上游 get_goods_uid_encrypt_uid）。 */
+export async function userGet(ctx) {
+    if (ctx.args.user === 'me') {
+        throw new SpecificAIError('NOT_IMPLEMENTED', 'taobao 的 user get me 尚未实现', { hint: 'specific-ai taobao auth status', detail: { upstream: 'none' } });
+    }
+    const tb = taobao(ctx);
+    const page = await api.goodsPage(tb, await resolveSellerItem(tb, ctx.args.user));
+    return norm.seller(api.parseSeller(tb, page), page.html);
+}
+// ================================================================ msg
+/** 消息记录：在一条连接上往更早翻，输出从旧到新；游标见 _shared/impaas.ts 的 history。 */
+export async function msgHistory(ctx) {
+    const tb = taobao(ctx);
+    tb.requireLogin();
+    const { cid } = resolveConversation(ctx.args.conversation, tb.myId);
+    return history(ctx, () => openIm(tb), cid, (m) => norm.historyMessage(m, cid));
+}
+/** 上传一张图，返回发图片消息要用的字段（上游 make_image 的参数）。 */
+async function uploadImage(tb, input) {
+    const file = await readMedia(tb.http, input);
+    if (!file.contentType.startsWith('image/'))
+        throw new SpecificAIError('UNSUPPORTED', `淘宝私信只支持图片：${input}`);
+    const res = await api.uploadMedia(tb, file);
+    const media = norm.uploaded(res.object);
+    return {
+        media,
+        message: { type: 'image', file_id: res.object.fileId, image_url: res.object.url, size: res.object.size, width: media.width ?? 0, height: media.height ?? 0 },
+    };
+}
+/**
+ * 发私信。`--item`：打开商品页取卖家（get_goods_uid_encrypt_uid），建会话（create_chat），再发（send_msg）；
+ * `--conversation`：直接发。文字和图片都有时依次发送，返回最后一条。
+ */
+export async function msgSend(ctx) {
+    const tb = taobao(ctx);
+    tb.requireLogin();
+    const o = ctx.options;
+    if (o.video != null)
+        throw new SpecificAIError('UNSUPPORTED', '淘宝私信不支持发视频');
+    if (o.to != null) {
+        throw new SpecificAIError('UNSUPPORTED', '淘宝私信不能直接按用户发送，需要先有会话', {
+            hint: '联系卖家用 --item <商品链接>；回复已有会话用 --conversation <会话 ID>',
+        });
+    }
+    let target;
+    if (o.item != null) {
+        const seller = api.parseSeller(tb, await api.goodsPage(tb, await resolveItem(tb, o.item)));
+        target = { cid: null, peer: seller.uid, encryptUid: seller.encrypt_uid };
+    }
+    else
+        target = resolveConversation(o.conversation, tb.myId);
+    if (target.peer === tb.myId)
+        throw new SpecificAIError('USAGE', '不能给自己发私信');
+    const outgoing = [];
+    if (ctx.args.text != null)
+        outgoing.push({ media: [], message: { type: 'text', text: ctx.args.text } });
+    for (const input of o.image ?? []) {
+        const img = await uploadImage(tb, input);
+        outgoing.push({ media: [img.media], message: img.message });
+    }
+    const im = await openIm(tb);
+    try {
+        await im.ready();
+        let cid = target.cid;
+        if (cid == null) {
+            cid = createdCid(await im.request(createChatFrame(tb.myId, target.encryptUid)));
+            if (!cid)
+                throw new SpecificAIError('UPSTREAM', '建立会话失败：响应里没有会话 ID');
+        }
+        let last;
+        for (const { media, message } of outgoing) {
+            // 照上游（taobao_live.py 的 f"cntaobao{self.nk}"）拼 cookie `_nk_` 的原值，中文昵称也不解码
+            const frame = sendMsgFrame(tb.myId, imId(cid), target.peer, IM_DOMAIN + tb.rawNick, message);
+            const res = await im.request(frame);
+            const b = res.body ?? {};
+            last = n.message({
+                id: n.id(b.messageId ?? frame.body[0].uuid),
+                conversation_id: cid,
+                from: tb.me(),
+                type: message.type,
+                text: message.type === 'text' ? message.text : null,
+                media,
+                created_at: n.time(b.createAt ?? rand.now()),
+            }, res);
+        }
+        return last;
+    }
+    finally {
+        im.close();
+    }
+}
+/** 推送帧里别人发来的聊天消息。 */
+function pushedMessages(tb, frame) {
+    const out = [];
+    for (const decoded of pushedPayloads(frame, decrypt, tb.ctx)) {
+        const message = norm.pushMessage(decoded);
+        if (!message)
+            continue;
+        // 自己发出的消息（上游按 sender_nick 判断）不输出
+        const nick = decoded?.['1']?.['10']?.sender_nick;
+        if (message.from?.id === tb.myId || (nick != null && (nick === IM_DOMAIN + tb.rawNick || nick === IM_DOMAIN + tb.nick)))
+            continue;
+        out.push(message);
+    }
+    return out;
+}
+export function msgListen(ctx) {
+    return (async function* () {
+        const tb = taobao(ctx);
+        tb.requireLogin();
+        yield* listen(ctx, () => openIm(tb, { heartbeat: true }), (frame) => pushedMessages(tb, frame));
+    })();
+}
+// ================================================================ media
+export async function mediaUpload(ctx) {
+    const tb = taobao(ctx);
+    tb.requireLogin();
+    const file = await readMedia(tb.http, ctx.args.file);
+    if (!file.contentType.startsWith('image/'))
+        throw new SpecificAIError('UNSUPPORTED', `淘宝只支持上传图片：${ctx.args.file}`);
+    return norm.uploaded((await api.uploadMedia(tb, file)).object);
+}

package/dist/platforms/taobao/web/im.js

@@ -0,0 +1,68 @@
+import { jsonDumps } from '../../../core/py.js';
+import { impaas } from '../../_shared/impaas.js';
+import { accessToken } from './client.js';
+import { IM_APP_KEY, IM_DOMAIN, IM_UA, WSS_URL, wsHeaders } from './profile.js';
+import { generateMid, generateUuid } from './sign.js';
+/**
+ * 私信：钉钉 IMPaaS 的 wss 长连（上游 taobao_live.py）。
+ * 连接、注册、ack、心跳、翻页与闲鱼共用 _shared/impaas.ts；这里是淘宝的参数和建会话、发消息的帧。
+ */
+export { mockConnect } from '../../_shared/impaas.js';
+const im = impaas({
+    url: WSS_URL,
+    headers: wsHeaders,
+    appKey: IM_APP_KEY,
+    ua: IM_UA,
+    domain: IM_DOMAIN,
+    mid: generateMid,
+    token: accessToken,
+});
+/** `<id>@cntaobao`；plainId 去掉 `@cntaobao` 后缀。 */
+export const { imId, plainId, regFrame, ackDiffFrame, heartbeatFrame, listFrame, open: openIm } = im;
+/** create_chat：用卖家的 encrypt_uid 建单聊会话。 */
+export function createChatFrame(myId, encryptUid) {
+    return {
+        lwp: '/r/SingleChatConversation/create',
+        headers: { mid: generateMid() },
+        body: [{ pairFirst: imId(myId), bizType: '11001', ctx: { createConversationCtx: '{"encryptUid":"' + encryptUid + '"}', selfBizDomain: 'taobao' } }],
+    };
+}
+/** send_msg：cid 带 `@cntaobao` 后缀；图片是 base64 的 JSON，放在 custom 里。 */
+export function sendMsgFrame(myId, cid, toId, senderNick, message) {
+    const extension = { senderBizDomain: 'taobao', receiverBizDomain: 'taobao', sender_nick: senderNick };
+    const content = { contentType: null };
+    if (message.type === 'text') {
+        content.contentType = 1;
+        content.text = { extension: { sender_nick: senderNick }, content: message.text };
+    }
+    else {
+        delete extension.sender_nick;
+        const data = { fileId: message.file_id, size: message.size, url: message.image_url, width: message.width, height: message.height, isOriginal: 1, suffix: 'png' };
+        content.contentType = 101;
+        content.custom = { type: 7, data: Buffer.from(jsonDumps(data)).toString('base64') };
+    }
+    return {
+        lwp: '/r/MessageSend/sendByReceiverScope',
+        headers: { mid: generateMid() },
+        body: [
+            {
+                cid,
+                uuid: generateUuid(),
+                conversationType: 1,
+                redPointPolicy: 0,
+                extension,
+                content,
+                ctx: { senderBizDomain: 'taobao', receiverBizDomain: 'taobao' },
+            },
+            { actualReceivers: [imId(myId), imId(toId)] },
+        ],
+    };
+}
+/** 从 SingleChatConversation/create 的响应里取会话 ID；响应里没有 cid 字段时，在整个 body 里找形如会话 ID 的字符串。 */
+export function createdCid(res) {
+    const direct = im.createdCid(res);
+    if (direct)
+        return direct;
+    const m = /"(\d+\.\d+-\d+\.\d+#\d+)(?:@cntaobao)?"/.exec(JSON.stringify(res.body ?? null));
+    return m ? m[1] : null;
+}

package/dist/platforms/taobao/web/normalize.js

@@ -0,0 +1,103 @@
+import * as n from '../../../core/normalize.js';
+import { jsonLoads } from '../../../core/py.js';
+import { IM_DOMAIN } from './profile.js';
+import { plainId } from './im.js';
+/** 淘宝原始对象 → 归一化类型（AGENTS 6.2）。 */
+/** 私信里的 sender_nick 带 `cntaobao` 前缀。 */
+function nickOf(senderNick) {
+    const s = n.str(senderNick);
+    return s == null ? null : s.startsWith(IM_DOMAIN) ? s.slice(IM_DOMAIN.length) || null : s;
+}
+function ref(uid, senderNick) {
+    return n.userRef({ id: plainId(uid) || null, name: nickOf(senderNick), url: null });
+}
+/** 自定义消息的 data：上游发送时是 base64 的 JSON；推送里可能已经是 JSON 字符串。 */
+function customData(data) {
+    if (data == null || typeof data === 'object')
+        return data ?? null;
+    const s = String(data);
+    for (const text of [s, Buffer.from(s, 'base64').toString('utf8')]) {
+        try {
+            return jsonLoads(text);
+        }
+        catch { }
+    }
+    return null;
+}
+/** contentType 1 为文字，101 为自定义消息（type 7 是图片）。 */
+function body(contentType, text, custom) {
+    const type = Number(contentType);
+    if (type === 1)
+        return { type: 'text', text: n.str(text), media: [] };
+    if (type === 101 && custom) {
+        const data = customData(custom.data);
+        const url = n.url(data?.url);
+        if (url && (Number(custom.type) === 7 || data?.fileId != null)) {
+            return {
+                type: 'image',
+                text: null,
+                media: [n.media({ id: n.idOrNull(data.fileId), type: 'image', url, width: n.count(data.width), height: n.count(data.height) })],
+            };
+        }
+        return { type: 'card', text: n.str(custom.summary) ?? (typeof data?.title === 'string' ? data.title : null), media: [] };
+    }
+    return { type: 'other', text: n.str(text), media: [] };
+}
+/** listUserMessages 返回的一条（userMessageModels[]）。 */
+export function historyMessage(model, cid) {
+    const m = model?.message ?? {};
+    const content = m.content ?? {};
+    const text = typeof content.text === 'string' ? content.text : (content.text?.content ?? content.text?.text);
+    return n.message({
+        id: n.id(m.messageId ?? m.uuid),
+        conversation_id: plainId(m.cid) || cid,
+        from: ref(m.sender?.uid, m.extension?.sender_nick),
+        ...body(content.contentType, text, content.custom ?? null),
+        created_at: n.time(m.createAt),
+    }, model);
+}
+/**
+ * 推送里解码后的消息（上游 handle_message）：字段是编号，
+ * 1.1.1 发送者、1.2 会话、1.3 消息 ID、1.5 时间、1.6 内容（1 类型、2.1 文字、3 自定义）、1.10.sender_nick 昵称。
+ * 不是聊天消息的推送（会话状态、已读等）返回 null。
+ */
+export function pushMessage(decoded) {
+    const m = decoded?.['1'];
+    if (!m || typeof m !== 'object' || Array.isArray(m))
+        return null;
+    const sender = m['1']?.['1'];
+    const cid = m['2'];
+    const c = m['6'];
+    if (typeof sender !== 'string' || typeof cid !== 'string' || !c || typeof c !== 'object')
+        return null;
+    const custom = c['3'] && typeof c['3'] === 'object' ? { type: c['3']['4'], data: c['3']['5'], summary: c['3']['2'] } : null;
+    return n.message({
+        id: n.id(m['3']),
+        conversation_id: plainId(cid),
+        from: ref(sender, m['10']?.sender_nick),
+        ...body(c['1'], c['2']?.['1'], custom),
+        created_at: n.time(m['5']),
+    }, decoded);
+}
+/** upload_media 返回的 object：pix 为 `宽x高`。 */
+export function uploaded(obj) {
+    const [w, h] = String(obj?.pix ?? '').split('x');
+    return n.media({ id: n.idOrNull(obj?.fileId), type: 'image', url: n.url(obj?.url) ?? '', width: n.count(w), height: n.count(h) }, obj);
+}
+function jsonString(raw) {
+    if (raw == null)
+        return null;
+    try {
+        return n.str(JSON.parse(`"${raw}"`));
+    }
+    catch {
+        return n.str(raw);
+    }
+}
+/** 商品页里的卖家（上游 get_goods_uid_encrypt_uid）。昵称、店铺名、店铺链接能取到就带上。 */
+export function seller(s, html) {
+    const nick = jsonString(/"sellerNick":"(.*?)"/.exec(html)?.[1]);
+    const shop = jsonString(/"shopName":"(.*?)"/.exec(html)?.[1]);
+    const shopUrl = n.url(jsonString(/"shopUrl":"(.*?)"/.exec(html)?.[1]));
+    return n.user({ id: s.uid, name: shop ?? nick, handle: nick, url: shopUrl }, { ...s, seller_nick: nick, shop_name: shop, shop_url: shopUrl });
+}

package/dist/platforms/taobao/web/profile.js

@@ -0,0 +1,85 @@
+/**
+ * 淘宝 web 端的常量与请求头（上游 taobao_apis.py、taobao_live.py）。
+ * 请求头的名字、大小写和顺序照抄上游，对拍测试逐字节比较。
+ */
+export const UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36';
+/** 上游私信长连握手用的是 Chrome 133 的 UA（taobao_live.py），照抄。 */
+const WS_UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36';
+const SEC_CH_UA = '"Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"';
+export const BROWSER = 'chrome_146';
+export const COOKIE_DOMAIN = '.taobao.com';
+/** mtop 的 appKey，也参与签名。 */
+export const APP_KEY = '12574478';
+/** 钉钉 IMPaaS 的 app-key。 */
+export const IM_APP_KEY = '3ce2dacdc7c0c43ad7bc7f9bc7d7a1b8';
+/** 私信里用户 ID、会话 ID 的后缀。 */
+export const IM_DOMAIN = 'cntaobao';
+export const LOGIN_TOKEN_URL = 'https://h5api.m.taobao.com/h5/mtop.taobao.login.token.get.h5/2.0/';
+export const UPLOAD_URL = 'https://stream-upload.taobao.com/api/upload.api';
+export const WSS_URL = 'wss://wss-cntaobao.dingtalk.com/';
+/** /reg 帧里的 ua。 */
+export const IM_UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 DingTalk(2.1.5) OS(Windows/10) Browser(Chrome/146.0.0.0) DingWeb/2.1.5 IMPaaS DingWeb/2.1.5';
+/** get_token 的请求头。 */
+export const TOKEN_HEADERS = [
+    ['accept', '*/*'],
+    ['accept-language', 'en,zh-CN;q=0.9,zh;q=0.8,zh-TW;q=0.7,ja;q=0.6'],
+    ['cache-control', 'no-cache'],
+    ['pragma', 'no-cache'],
+    ['referer', 'https://market.m.taobao.com/'],
+    ['sec-ch-ua', SEC_CH_UA],
+    ['sec-ch-ua-mobile', '?0'],
+    ['sec-ch-ua-platform', '"Windows"'],
+    ['sec-fetch-dest', 'script'],
+    ['sec-fetch-mode', 'no-cors'],
+    ['sec-fetch-site', 'same-site'],
+    ['user-agent', UA],
+];
+/** get_goods_uid_encrypt_uid 打开商品页的请求头。 */
+export const DOC_HEADERS = [
+    ['accept', 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7'],
+    ['accept-language', 'en'],
+    ['cache-control', 'no-cache'],
+    ['pragma', 'no-cache'],
+    ['priority', 'u=0, i'],
+    ['referer', 'https://www.taobao.com/'],
+    ['sec-ch-ua', SEC_CH_UA],
+    ['sec-ch-ua-mobile', '?0'],
+    ['sec-ch-ua-platform', '"Windows"'],
+    ['sec-fetch-dest', 'document'],
+    ['sec-fetch-mode', 'navigate'],
+    ['sec-fetch-site', 'same-origin'],
+    ['sec-fetch-user', '?1'],
+    ['upgrade-insecure-requests', '1'],
+    ['user-agent', UA],
+];
+/** upload_media 的请求头。 */
+export const UPLOAD_HEADERS = [
+    ['Accept', '*/*'],
+    ['Accept-Language', 'en,zh-CN;q=0.9,zh;q=0.8,zh-TW;q=0.7,ja;q=0.6'],
+    ['Cache-Control', 'no-cache'],
+    ['Connection', 'keep-alive'],
+    ['Origin', 'https://market.m.taobao.com'],
+    ['Pragma', 'no-cache'],
+    ['Referer', 'https://market.m.taobao.com/'],
+    ['Sec-Fetch-Dest', 'empty'],
+    ['Sec-Fetch-Mode', 'cors'],
+    ['Sec-Fetch-Site', 'same-site'],
+    ['User-Agent', UA],
+    ['sec-ch-ua', SEC_CH_UA],
+    ['sec-ch-ua-mobile', '?0'],
+    ['sec-ch-ua-platform', '"Windows"'],
+];
+/** 私信长连的握手头（Cookie 由调用方填）。Host / Connection 由 WebSocket 库自己管，真正连接时去掉。 */
+export function wsHeaders(cookie) {
+    return [
+        ['Cookie', cookie],
+        ['Host', 'wss-cntaobao.dingtalk.com'],
+        ['Connection', 'Upgrade'],
+        ['Pragma', 'no-cache'],
+        ['Cache-Control', 'no-cache'],
+        ['User-Agent', WS_UA],
+        ['Origin', 'https://www.cntaobao.com'],
+        ['Accept-Encoding', 'gzip, deflate, br, zstd'],
+        ['Accept-Language', 'zh-CN,zh;q=0.9'],
+    ];
+}