specific-ai-cli 0.0.0-stage → 0.1.1

package/dist/platforms/xianyu/web/commands.js

@@ -0,0 +1,305 @@
+import { GUEST } from '../../../core/auth-store.js';
+import { SpecificAIError } from '../../../core/errors.js';
+import { readMedia } from '../../../core/files.js';
+import { cookieCredential, finishLogin, freshCredential, loginContext, poll, showQrcode } from '../../../core/login.js';
+import * as n from '../../../core/normalize.js';
+import * as rand from '../../../core/rand.js';
+import { history, listen, pushedPayloads } from '../../_shared/impaas.js';
+import * as api from './api.js';
+import { unsignedMtop, Xianyu, xianyu } from './client.js';
+import { createChatFrame, createdCid, FIRST_CURSOR, openIm, sendMsgFrame } from './im.js';
+import * as norm from './normalize.js';
+import { COOKIE_DOMAIN, itemUrl } from './profile.js';
+import { resolveConversation, resolveItem, resolveUser } from './resolve.js';
+import { decrypt } from './sign.js';
+const isAuthError = (err) => err instanceof SpecificAIError && (err.code === 'AUTH_REQUIRED' || err.code === 'AUTH_EXPIRED');
+/** 常驻进程续期 cookie 的间隔（上游 user_alive 为 600 秒）。 */
+const KEEPALIVE_MS = 600_000;
+// ================================================================ auth
+async function completeLogin(ctx, x) {
+    if (!x.myId)
+        throw new SpecificAIError('AUTH_REQUIRED', '登录没有成功：cookie 里没有 unb', { hint: `specific-ai xianyu auth login` });
+    return finishLogin(ctx, x.ctx.credential, x.me());
+}
+/** 扫码登录（上游 qrcode_login）。 */
+async function qrcodeLogin(ctx) {
+    const x = new Xianyu({ ...ctx, account: GUEST, credential: freshCredential(ctx, 'qrcode') });
+    await x.buildInitialCookies();
+    const cna = x.jar.get('cna', COOKIE_DOMAIN) ?? x.jar.get('cna', '.mmstat.com') ?? '';
+    const cookie2 = x.jar.get('cookie2', COOKIE_DOMAIN) ?? '';
+    await api.miniLogin(x);
+    const csrf = x.jar.get('XSRF-TOKEN', 'passport.goofish.com') ?? '';
+    const qr = await api.qrGenerate(x, csrf, cookie2);
+    await showQrcode(ctx, qr.codeContent, '请用闲鱼 App 扫码（左上角 → 扫一扫）并确认');
+    let last = '';
+    const token = await poll(async () => {
+        const d = await api.qrQuery(x, csrf, cookie2, cna, qr);
+        const status = String(d.qrCodeStatus ?? '');
+        if (status !== last)
+            ctx.log.debug(`扫码状态：${status || '（空）'}`, { keys: Object.keys(d), titleMsg: d.titleMsg ?? null });
+        if (status !== last && status === 'SCANNED')
+            ctx.log.info('已扫码，请在手机上确认');
+        last = status;
+        if (status === 'CONFIRMED')
+            return String(d.token ?? d.lgToken ?? '');
+        if (status === 'EXPIRED')
+            throw new SpecificAIError('AUTH_REQUIRED', '二维码已过期', { hint: '重新执行 specific-ai xianyu auth login' });
+        return undefined;
+    }, { interval: 3000, timeout: 120_000, what: '扫码' });
+    // CONFIRMED 响应的 Set-Cookie 里一般已经有 unb 等登录态；有 token 时再走一次 login.do
+    if (token)
+        await api.loginByToken(x, token, cna);
+    else if (!x.myId)
+        throw new SpecificAIError('AUTH_REQUIRED', '扫码超时，未完成登录', { hint: '重新执行 specific-ai xianyu auth login' });
+    // 登录后 _m_h5_tk 会变，空签名调一次 mtop 刷新
+    await x.http.request(unsignedMtop('mtop.idle.web.user.page.nav'));
+    return completeLogin(ctx, x);
+}
+export async function authLogin(ctx) {
+    if (ctx.options.method === 'cookie') {
+        const credential = cookieCredential(ctx, COOKIE_DOMAIN);
+        const x = new Xianyu(loginContext(ctx, credential));
+        const hint = '复制浏览器里登录后的闲鱼 cookie（需要包含 unb、_m_h5_tk、cookie2）';
+        if (!x.myId)
+            throw new SpecificAIError('USAGE', 'cookie 里没有 unb，不是登录后的闲鱼 cookie', { hint });
+        try {
+            await api.refreshToken(x);
+        }
+        catch (err) {
+            if (isAuthError(err))
+                throw new SpecificAIError('AUTH_REQUIRED', '登录没有成功：cookie 无效或已过期', { hint });
+            throw err;
+        }
+        return completeLogin(ctx, x);
+    }
+    return qrcodeLogin(ctx);
+}
+export async function authStatus(ctx) {
+    const off = { logged_in: false, user: null, method: null, expires_at: null };
+    const x = new Xianyu(ctx);
+    // 没登录时是一份空凭证，没有 unb
+    if (!x.myId)
+        return off;
+    try {
+        await api.refreshToken(x);
+    }
+    catch (err) {
+        if (isAuthError(err))
+            return off;
+        throw err;
+    }
+    const expires = ['cookie2', 'sgcookie', 'unb'].map((name) => x.jar.cookies.find((c) => c.name === name)?.expires).find((e) => e != null);
+    return { logged_in: true, user: x.me(), method: ctx.credential.method, expires_at: n.time(expires) };
+}
+// ================================================================ user
+export async function userGet(ctx) {
+    if (ctx.args.user !== 'me') {
+        throw new SpecificAIError('NOT_IMPLEMENTED', 'xianyu 的 user get 只支持 me，查询他人尚未实现', { detail: { upstream: 'none' } });
+    }
+    const x = xianyu(ctx);
+    x.requireLogin();
+    return norm.me((await api.refreshToken(x)).data, x.me());
+}
+// ================================================================ item
+export async function itemGet(ctx) {
+    const x = xianyu(ctx);
+    const id = await resolveItem(x, ctx.args.item);
+    return norm.item((await api.itemInfo(x, id)).data, x.myId);
+}
+export async function itemPublish(ctx) {
+    const x = xianyu(ctx);
+    x.requireLogin();
+    const o = ctx.options;
+    const desc = (o.text ?? o.title);
+    if (!desc)
+        throw new SpecificAIError('USAGE', '闲鱼发布需要 --text（商品描述，同时用作标题）', { hint: 'specific-ai xianyu item publish --text <描述> --image <图片> --price <元>' });
+    if (o.shipping === 'fixed' && o.postage == null)
+        throw new SpecificAIError('USAGE', '--shipping fixed 需要 --postage（运费，元）');
+    // 上游不填价格时（price=None）不看原价
+    if (o.originalPrice != null && o.price == null)
+        throw new SpecificAIError('USAGE', '--original-price 要和 --price 一起用');
+    const images = [];
+    for (const input of o.image ?? []) {
+        const file = await readMedia(x.http, input);
+        if (!file.contentType.startsWith('image/'))
+            throw new SpecificAIError('UNSUPPORTED', `闲鱼只支持上传图片：${input}`);
+        images.push(file);
+    }
+    const price = o.price != null ? { current: Number(o.price), original: Number(o.originalPrice ?? 0) } : null;
+    const res = await api.publish(x, {
+        images,
+        desc,
+        price,
+        shipping: o.shipping ?? 'free',
+        postage: Number(o.postage ?? 0),
+        pickup: Boolean(o.pickup),
+    });
+    const id = n.id(res.data?.itemId ?? res.data?.item?.itemId);
+    return n.item({
+        id,
+        kind: 'goods',
+        url: id ? itemUrl(id) : null,
+        title: desc,
+        text: desc,
+        author: x.me(),
+        price: price ? n.price(price.current) : null,
+        status: 'on_sale',
+    }, res);
+}
+// ================================================================ msg
+/** 消息记录：在一条连接上往更早翻，输出从旧到新；游标见 _shared/impaas.ts 的 history。 */
+export async function msgHistory(ctx) {
+    const x = xianyu(ctx);
+    x.requireLogin();
+    const cid = resolveConversation(ctx.args.conversation);
+    return history(ctx, () => openIm(x), cid, (m) => norm.historyMessage(m, cid));
+}
+/** 上传一张图，返回发图片消息要用的字段（上游 make_image 的参数）。 */
+async function uploadImage(x, input) {
+    const file = await readMedia(x.http, input);
+    if (!file.contentType.startsWith('image/'))
+        throw new SpecificAIError('UNSUPPORTED', `闲鱼私信只支持图片：${input}`);
+    const media = norm.uploaded((await api.uploadMedia(x, file)).object);
+    if (!media.url)
+        throw new SpecificAIError('UPSTREAM', '图片上传没有返回地址');
+    return { media, message: { type: 'image', image_url: media.url, width: media.width ?? 0, height: media.height ?? 0 } };
+}
+/** 找对方时最多往前翻几页（每页 20 条）。 */
+const PEER_PAGES = 10;
+/**
+ * 已有会话的对方：照上游 list_all_conversations 在同一条连接上往更早翻，找不是自己发的消息的发送者；
+ * 找不到（对方从没回过）就报错，让用户改用 --to。
+ */
+async function peerOf(im, x, cid) {
+    let pages = 0;
+    let more = false;
+    for await (const page of im.historyPages(cid, FIRST_CURSOR)) {
+        for (const model of page.models) {
+            const sender = norm.historyMessage(model, cid).from?.id;
+            if (sender && sender !== x.myId)
+                return sender;
+        }
+        more = page.hasMore;
+        if (++pages >= PEER_PAGES)
+            break;
+    }
+    const where = more ? `最近 ${pages} 页消息` : '全部消息记录';
+    throw new SpecificAIError('USAGE', `会话 ${cid} 的${where}里只有你自己发的消息，确定不了收信人`, {
+        hint: '用 --to <对方用户>（可加 --item <商品>）发送',
+    });
+}
+/** 要新建（或取回已有）会话的对方与商品；null 表示发到 --conversation 指定的会话。 */
+async function chatTarget(x, o) {
+    if (o.to != null) {
+        // 主动发给指定用户（上游 create_chat 不给 item_id 时用写死的默认商品）；带 --item 时就这件商品联系，卖家可以借此联系买家
+        const peer = await resolveUser(x, o.to);
+        if (peer === x.myId)
+            throw new SpecificAIError('USAGE', '不能给自己发私信');
+        return { peer, ...(o.item != null ? { item: await resolveItem(x, o.item) } : {}) };
+    }
+    if (o.item == null)
+        return null;
+    // 只给商品：取商品详情拿卖家
+    const id = await resolveItem(x, o.item);
+    const seller = norm.item((await api.itemInfo(x, id)).data).author?.id;
+    if (!seller)
+        throw new SpecificAIError('UPSTREAM', '商品详情里没有卖家 ID');
+    if (seller === x.myId)
+        throw new SpecificAIError('USAGE', '这是你自己的商品，不能给自己发私信', { hint: '联系买家用 --to <买家> --item <商品>' });
+    return { peer: seller, item: id };
+}
+/**
+ * 发私信：
+ * - `--to <user>`：建会话（create_chat，默认商品）再发（send_msg）；加 `--item` 时按这件商品建会话；
+ * - `--item`：取商品详情拿卖家，建会话，再发；
+ * - `--conversation`：发到已有会话，对方从消息记录里找。
+ * 文字和图片都有时依次发送，返回最后一条。
+ */
+export async function msgSend(ctx) {
+    const x = xianyu(ctx);
+    x.requireLogin();
+    const o = ctx.options;
+    if (o.video != null)
+        throw new SpecificAIError('UNSUPPORTED', '闲鱼私信不支持发视频');
+    const chat = await chatTarget(x, o);
+    const outgoing = [];
+    if (ctx.args.text != null)
+        outgoing.push({ media: [], message: { type: 'text', text: ctx.args.text } });
+    for (const input of o.image ?? []) {
+        const img = await uploadImage(x, input);
+        outgoing.push({ media: [img.media], message: img.message });
+    }
+    const im = await openIm(x);
+    try {
+        await im.ready();
+        let cid;
+        let peer;
+        if (chat) {
+            const created = createdCid(await im.request(createChatFrame(x.myId, chat.peer, chat.item)));
+            if (!created)
+                throw new SpecificAIError('UPSTREAM', '建立会话失败：响应里没有会话 ID');
+            cid = created;
+            peer = chat.peer;
+        }
+        else {
+            cid = resolveConversation(o.conversation);
+            peer = await peerOf(im, x, cid);
+        }
+        let last;
+        for (const { media, message } of outgoing) {
+            const frame = sendMsgFrame(x.myId, cid, peer, message);
+            const res = await im.request(frame);
+            const b = res.body ?? {};
+            last = n.message({
+                id: n.id(b.messageId ?? frame.body[0].uuid),
+                conversation_id: cid,
+                from: x.me(),
+                type: message.type,
+                text: message.type === 'text' ? message.text : null,
+                media,
+                created_at: n.time(b.createAt ?? rand.now()),
+            }, res);
+        }
+        return last;
+    }
+    finally {
+        im.close();
+    }
+}
+/** 推送帧里别人发来的聊天消息。 */
+function pushedMessages(x, frame) {
+    const out = [];
+    for (const decoded of pushedPayloads(frame, decrypt, x.ctx)) {
+        const message = norm.pushMessage(decoded);
+        // 自己发出的消息不输出
+        if (message && message.from?.id !== x.myId)
+            out.push(message);
+    }
+    return out;
+}
+export function msgListen(ctx) {
+    return (async function* () {
+        const x = xianyu(ctx);
+        x.requireLogin();
+        // 上游 user_alive：常驻时每 10 分钟调一次 refresh_token 续期 cookie
+        const keepalive = setInterval(() => {
+            api.refreshToken(x).catch((err) => ctx.log.warn(`续期失败：${err.message}`));
+        }, KEEPALIVE_MS);
+        keepalive.unref();
+        try {
+            yield* listen(ctx, () => openIm(x, { heartbeat: true }), (frame) => pushedMessages(x, frame));
+        }
+        finally {
+            clearInterval(keepalive);
+        }
+    })();
+}
+// ================================================================ media
+export async function mediaUpload(ctx) {
+    const x = xianyu(ctx);
+    x.requireLogin();
+    const file = await readMedia(x.http, ctx.args.file);
+    if (!file.contentType.startsWith('image/'))
+        throw new SpecificAIError('UNSUPPORTED', `闲鱼只支持上传图片：${ctx.args.file}`);
+    return norm.uploaded((await api.uploadMedia(x, file)).object);
+}

package/dist/platforms/xianyu/web/im.js

@@ -0,0 +1,73 @@
+import { SpecificAIError } from '../../../core/errors.js';
+import { jsonDumps } from '../../../core/py.js';
+import { impaas } from '../../_shared/impaas.js';
+import { getToken } from './api.js';
+import { IM_APP_KEY, IM_DOMAIN, IM_UA, WSS_URL, wsHeaders } from './profile.js';
+import { generateMid, generateUuid } from './sign.js';
+/**
+ * 私信：钉钉 IMPaaS 的 wss 长连（上游 goofish_live.py 的 XianyuLive）。
+ * 连接、注册、ack、心跳、翻页与淘宝共用 _shared/impaas.ts；这里是闲鱼的参数和建会话、发消息的帧。
+ */
+export { FIRST_CURSOR, mockConnect } from '../../_shared/impaas.js';
+/** 私信的 accessToken（上游 init 里取不到就退出）。 */
+async function accessToken(x) {
+    const res = await getToken(x);
+    const token = res.data?.accessToken;
+    if (!token)
+        throw new SpecificAIError('UPSTREAM', '获取私信 token 失败', { detail: { ret: res.ret ?? null } });
+    return token;
+}
+const im = impaas({
+    url: WSS_URL,
+    headers: wsHeaders,
+    appKey: IM_APP_KEY,
+    ua: IM_UA,
+    domain: IM_DOMAIN,
+    mid: generateMid,
+    token: accessToken,
+});
+/** plainId 去掉 `@goofish` 后缀。 */
+export const { plainId, regFrame, ackDiffFrame, heartbeatFrame, listFrame, createdCid, open: openIm } = im;
+const { imId } = im;
+/** create_chat 的 item_id 默认值（上游写死）：只给对方用户、不指定商品时用它建会话。 */
+export const DEFAULT_ITEM_ID = '891198795482';
+/** create_chat：按商品和对方建单聊会话（已有时返回原会话）。 */
+export function createChatFrame(myId, toId, itemId = DEFAULT_ITEM_ID) {
+    return {
+        lwp: '/r/SingleChatConversation/create',
+        headers: { mid: generateMid() },
+        body: [
+            {
+                pairFirst: imId(toId),
+                pairSecond: imId(myId),
+                bizType: '1',
+                extension: { itemId },
+                ctx: { appVersion: '1.0', platform: 'web' },
+            },
+        ],
+    };
+}
+/** send_msg：内容是 base64 的 JSON，放在 custom 里（文字 type 1，图片 type 2）。 */
+export function sendMsgFrame(myId, cid, toId, message) {
+    const payload = message.type === 'text'
+        ? { contentType: 1, text: { text: message.text } }
+        : { contentType: 2, image: { pics: [{ type: 0, url: message.image_url, width: message.width, height: message.height }] } };
+    return {
+        lwp: '/r/MessageSend/sendByReceiverScope',
+        headers: { mid: generateMid() },
+        body: [
+            {
+                uuid: generateUuid(),
+                cid: imId(cid),
+                conversationType: 1,
+                content: { contentType: 101, custom: { type: payload.contentType, data: Buffer.from(jsonDumps(payload)).toString('base64') } },
+                redPointPolicy: 0,
+                extension: { extJson: '{}' },
+                ctx: { appVersion: '1.0', platform: 'web' },
+                mtags: {},
+                msgReadStatusSetting: 1,
+            },
+            { actualReceivers: [imId(toId), imId(myId)] },
+        ],
+    };
+}

package/dist/platforms/xianyu/web/normalize.js

@@ -0,0 +1,123 @@
+import * as n from '../../../core/normalize.js';
+import { jsonLoads } from '../../../core/py.js';
+import { plainId } from './im.js';
+import { itemUrl, userUrl } from './profile.js';
+/** 闲鱼原始对象 → 归一化类型（AGENTS 6.2）。 */
+function ref(id, name) {
+    const s = plainId(id);
+    return n.userRef({ id: s || null, name, url: s ? userUrl(s) : null });
+}
+/** 商品状态：itemStatus 0 在售，1 已售出，其余下架。 */
+function status(v) {
+    const s = v?.itemStatus;
+    if (s == null)
+        return null;
+    return Number(s) === 0 ? 'on_sale' : Number(s) === 1 ? 'sold' : 'off_shelf';
+}
+/** 商品详情（mtop.taobao.idle.pc.detail 的 data：itemDO + sellerDO）。 */
+export function item(d, myId = '') {
+    const it = d?.itemDO ?? {};
+    const seller = d?.sellerDO ?? {};
+    const id = n.id(it.itemId ?? it.id);
+    const media = (it.imageInfos ?? []).map((img) => n.media({ type: 'image', url: n.url(img.url) ?? '', width: n.count(img.widthSize), height: n.count(img.heightSize) }, img));
+    const title = n.str(it.title);
+    const text = n.str(it.desc);
+    const video = it.videoPlayInfo?.videoUrl ?? it.videoUrl;
+    if (video)
+        media.unshift(n.media({ type: 'video', url: n.url(video) }));
+    return n.item({
+        id,
+        kind: 'goods',
+        url: itemUrl(id),
+        title: title ?? text,
+        text,
+        author: ref(seller.sellerId ?? it.sellerId, seller.nick ?? seller.uniqueName),
+        created_at: n.time(it.gmtCreate),
+        cover: media.find((m) => m.type === 'image')?.url ?? null,
+        media,
+        stats: { views: n.count(it.browseCnt), collects: n.count(it.wantCnt ?? it.collectCnt), comments: null },
+        price: n.price(it.soldPrice ?? it.defaultPrice),
+        // 只有自己的商品才带状态
+        status: myId && String(seller.sellerId ?? it.sellerId) === myId ? status(it) : null,
+    }, d);
+}
+/** 当前登录用户（loginuser.get 的 data，缺的字段用 cookie 补）。 */
+export function me(d, fallback) {
+    const id = n.id(d?.userId ?? d?.userID ?? d?.uid ?? fallback.id);
+    return n.user({
+        id,
+        name: n.str(d?.nick ?? d?.displayName ?? d?.userNick) ?? fallback.name,
+        avatar: n.url(d?.avatar ?? d?.portraitUrl ?? d?.headPic),
+        url: userUrl(id),
+    }, d);
+}
+/** custom.data：上游发送时是 base64 的 JSON；推送里是 JSON 字符串。 */
+function customData(data) {
+    if (data == null || typeof data === 'object')
+        return data ?? null;
+    const s = String(data);
+    for (const text of [s, Buffer.from(s, 'base64').toString('utf8')]) {
+        try {
+            return jsonLoads(text);
+        }
+        catch { }
+    }
+    return null;
+}
+/** 消息内容：contentType 1 文字、2 图片，其余（交易卡片等）按卡片处理，文字取摘要。 */
+function body(payload, summary) {
+    const type = Number(payload?.contentType);
+    if (type === 1)
+        return { type: 'text', text: n.str(payload.text?.text) ?? n.str(summary), media: [] };
+    if (type === 2) {
+        const pics = payload.image?.pics ?? [];
+        return {
+            type: 'image',
+            text: null,
+            media: pics.map((p) => n.media({ type: 'image', url: n.url(p.url) ?? '', width: n.count(p.width), height: n.count(p.height) })),
+        };
+    }
+    if (payload == null)
+        return { type: 'other', text: n.str(summary), media: [] };
+    return { type: 'card', text: n.str(summary) ?? n.str(payload?.dxCard?.item?.main?.exContent?.title), media: [] };
+}
+/** listUserMessages 返回的一条（userMessageModels[]）。 */
+export function historyMessage(model, cid) {
+    const m = model?.message ?? {};
+    const ext = m.extension ?? {};
+    const payload = customData(m.content?.custom?.data);
+    return n.message({
+        id: n.id(m.messageId ?? m.uuid),
+        conversation_id: plainId(m.cid) || cid,
+        from: ref(ext.senderUserId ?? m.sender?.uid, ext.reminderTitle),
+        ...body(payload, ext.reminderContent ?? m.content?.custom?.summary),
+        created_at: n.time(m.createAt),
+    }, model);
+}
+/**
+ * 推送里解码后的消息（上游 handle_message）：字段是编号，
+ * 1.2 会话、1.3 消息 ID、1.5 时间、1.6.3.5 内容（JSON）、1.10 扩展（reminderTitle 昵称、senderUserId、reminderContent 摘要）。
+ * 不是聊天消息的推送（会话状态、已读、正在输入等）返回 null。
+ */
+export function pushMessage(decoded) {
+    const m = decoded?.['1'];
+    if (!m || typeof m !== 'object' || Array.isArray(m))
+        return null;
+    const ext = m['10'];
+    const cid = m['2'];
+    if (!ext || typeof ext !== 'object' || ext.senderUserId == null || typeof cid !== 'string')
+        return null;
+    const custom = m['6']?.['3'];
+    return n.message({
+        id: n.id(m['3']),
+        conversation_id: plainId(cid),
+        from: ref(ext.senderUserId, ext.reminderTitle),
+        ...body(customData(custom?.['5']), ext.reminderContent ?? custom?.['2']),
+        created_at: n.time(m['5']),
+    }, decoded);
+}
+/** upload_media 返回的 object：pix 为 `宽x高`。 */
+export function uploaded(obj) {
+    const [w, h] = String(obj?.pix ?? '').split('x');
+    return n.media({ id: n.idOrNull(obj?.fileId), type: 'image', url: n.url(obj?.url) ?? '', width: n.count(w), height: n.count(h) }, obj);
+}

package/dist/platforms/xianyu/web/profile.js

@@ -0,0 +1,146 @@
+/**
+ * 闲鱼 web 端的常量与请求头（上游 goofish_apis.py、goofish_live.py）。
+ * 请求头的名字、大小写和顺序照抄上游，对拍测试逐字节比较。
+ */
+/** build_initial_cookies / qrcode_login 用的 UA（Chrome 147）。 */
+export const UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36';
+/** XianyuApis 各方法用的 UA（Chrome 146）。 */
+const API_UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36';
+/** 私信长连握手用的 UA（Chrome 133，goofish_live.py），照抄。 */
+const WS_UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36';
+const SEC_CH_UA_147 = '"Google Chrome";v="147", "Not.A/Brand";v="8", "Chromium";v="147"';
+const SEC_CH_UA_146 = '"Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"';
+const ACCEPT_LANGUAGE = 'en,zh-CN;q=0.9,zh;q=0.8,zh-TW;q=0.7,ja;q=0.6';
+export const BROWSER = 'chrome_146';
+export const COOKIE_DOMAIN = '.goofish.com';
+export const H5API = 'https://h5api.m.goofish.com/h5';
+export const PASSPORT = 'https://passport.goofish.com';
+/** mtop 的 appKey，也参与签名（写死在上游 JS 的 generate_sign 里）。 */
+export const APP_KEY = '34839810';
+/** 钉钉 IMPaaS 的 app-key。 */
+export const IM_APP_KEY = '444e9908a51d1cb236a27862abc769c9';
+/** 私信里用户 ID、会话 ID 的后缀。 */
+export const IM_DOMAIN = 'goofish';
+export const WSS_URL = 'wss://wss-goofish.dingtalk.com/';
+export const UPLOAD_URL = 'https://stream-upload.goofish.com/api/upload.api';
+/** /reg 帧里的 ua。 */
+export const IM_UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 DingTalk(2.1.5) OS(Windows/10) Browser(Chrome/133.0.0.0) DingWeb/2.1.5 IMPaaS DingWeb/2.1.5';
+/** Python 的 `{**base, **extra}`：已有的键原位改值，新键追加到末尾。 */
+export function merge(base, extra) {
+    const out = base.map(([k, v]) => [k, v]);
+    for (const [k, v] of extra) {
+        const i = out.findIndex(([x]) => x === k);
+        if (i >= 0)
+            out[i] = [k, v];
+        else
+            out.push([k, v]);
+    }
+    return out;
+}
+/** 真浏览器抓出来的 mtop XHR 请求头（_MTOP_HEADERS）。 */
+export const MTOP_HEADERS = [
+    ['User-Agent', UA],
+    ['Accept', 'application/json'],
+    ['Accept-Language', ACCEPT_LANGUAGE],
+    ['Accept-Encoding', 'gzip, deflate, br, zstd'],
+    ['sec-ch-ua', SEC_CH_UA_147],
+    ['sec-ch-ua-mobile', '?0'],
+    ['sec-ch-ua-platform', '"Windows"'],
+    ['Origin', 'https://www.goofish.com'],
+    ['Referer', 'https://www.goofish.com/'],
+    ['sec-fetch-dest', 'empty'],
+    ['sec-fetch-mode', 'cors'],
+    ['sec-fetch-site', 'same-site'],
+    ['priority', 'u=1, i'],
+    ['Content-Type', 'application/x-www-form-urlencoded'],
+];
+/** passport 域的请求头（_PASSPORT_HEADERS）。 */
+export const PASSPORT_HEADERS = [
+    ['User-Agent', UA],
+    ['Accept', 'application/json, text/plain, */*'],
+    ['Accept-Language', ACCEPT_LANGUAGE],
+    ['Accept-Encoding', 'gzip, deflate, br, zstd'],
+    ['sec-ch-ua', SEC_CH_UA_147],
+    ['sec-ch-ua-mobile', '?0'],
+    ['sec-ch-ua-platform', '"Windows"'],
+    ['sec-fetch-dest', 'empty'],
+    ['sec-fetch-mode', 'cors'],
+    ['sec-fetch-site', 'same-origin'],
+    ['priority', 'u=1, i'],
+];
+/** build_initial_cookies 的 session 头：只设了 User-Agent。 */
+export const SESSION_HEADERS = [['User-Agent', UA]];
+/** get_token 的请求头。 */
+export const TOKEN_HEADERS = [
+    ['Host', 'h5api.m.goofish.com'],
+    ['sec-ch-ua-platform', '"Windows"'],
+    ['user-agent', API_UA],
+    ['accept', 'application/json'],
+    ['sec-ch-ua', SEC_CH_UA_146],
+    ['content-type', 'application/x-www-form-urlencoded'],
+    ['sec-ch-ua-mobile', '?0'],
+    ['origin', 'https://www.goofish.com'],
+    ['sec-fetch-site', 'same-site'],
+    ['sec-fetch-mode', 'cors'],
+    ['sec-fetch-dest', 'empty'],
+    ['referer', 'https://www.goofish.com/'],
+    ['accept-language', ACCEPT_LANGUAGE],
+    ['priority', 'u=1, i'],
+];
+/** refresh_token、get_public_channel、public 共用的请求头。 */
+export const API_HEADERS = [
+    ['accept', 'application/json'],
+    ['accept-language', ACCEPT_LANGUAGE],
+    ['cache-control', 'no-cache'],
+    ['content-type', 'application/x-www-form-urlencoded'],
+    ['origin', 'https://www.goofish.com'],
+    ['pragma', 'no-cache'],
+    ['priority', 'u=1, i'],
+    ['referer', 'https://www.goofish.com/'],
+    ['sec-ch-ua', SEC_CH_UA_146],
+    ['sec-ch-ua-mobile', '?0'],
+    ['sec-ch-ua-platform', '"Windows"'],
+    ['sec-fetch-dest', 'empty'],
+    ['sec-fetch-mode', 'cors'],
+    ['sec-fetch-site', 'same-site'],
+    ['user-agent', API_UA],
+];
+/** get_default_location 的请求头：多一个 eagleeye-userdata。 */
+export const LOCATION_HEADERS = [
+    ...API_HEADERS.slice(0, 4),
+    ['eagleeye-userdata', 'spm-cnt=a21ybx'],
+    ...API_HEADERS.slice(4),
+];
+/** upload_media 的请求头（multipart，content-type 由请求库生成）。 */
+export const UPLOAD_HEADERS = [
+    ['accept', '*/*'],
+    ['accept-language', ACCEPT_LANGUAGE],
+    ['cache-control', 'no-cache'],
+    ['origin', 'https://www.goofish.com'],
+    ['pragma', 'no-cache'],
+    ['priority', 'u=1, i'],
+    ['referer', 'https://www.goofish.com/'],
+    ['sec-ch-ua', SEC_CH_UA_146],
+    ['sec-ch-ua-mobile', '?0'],
+    ['sec-ch-ua-platform', '"Windows"'],
+    ['sec-fetch-dest', 'empty'],
+    ['sec-fetch-mode', 'cors'],
+    ['sec-fetch-site', 'same-site'],
+    ['user-agent', API_UA],
+];
+/** 私信长连的握手头（goofish_live.py main / list_all_conversations）。 */
+export function wsHeaders(cookie) {
+    return [
+        ['Cookie', cookie],
+        ['Host', 'wss-goofish.dingtalk.com'],
+        ['Connection', 'Upgrade'],
+        ['Pragma', 'no-cache'],
+        ['Cache-Control', 'no-cache'],
+        ['User-Agent', WS_UA],
+        ['Origin', 'https://www.goofish.com'],
+        ['Accept-Encoding', 'gzip, deflate, br, zstd'],
+        ['Accept-Language', 'zh-CN,zh;q=0.9'],
+    ];
+}
+export const itemUrl = (id) => `https://www.goofish.com/item?id=${id}`;
+export const userUrl = (id) => `https://www.goofish.com/personal?userId=${id}`;