universal-parcel-scraper 0.26.0-main.368 → 0.26.1-main.369

package/dist/carriers/ukrposhta/adapter.d.ts

@@ -8,6 +8,7 @@ export declare class UkrposhtaTracker {
     constructor(options?: {
         executablePath?: string | null;
         token?: string | null;
+        userAgent?: string;
         fetcher?: typeof fetch;
         recorder?: StepRecorder;
     });

package/dist/carriers/ukrposhta/adapter.js

@@ -10,16 +10,18 @@ export const UKRPOSHTA_API = 'https://track.ukrposhta.ua/php/track_new.php';
 export const UKRPOSHTA_STATUS_API = 'https://www.ukrposhta.ua/status-tracking/0.0.1/statuses';
 const MAX_BYTES = 1_000_000;
 const DIRECT_TIMEOUT_MS = 10_000;
+// The Android app's shared application bearer is deliberately distributed with this adapter.
+const APPLICATION_BEARER = 'c3e02b53-3b1d-386e-b676-141ffa054c57';
 /** The API's bearer, or null when none is configured or the value could not be a header. */
 function bearer(value) {
     const token = value?.trim().replace(/^Bearer\s+/i, '') ?? '';
     return /^[\w.~+/=-]{8,512}$/.test(token) ? token : null;
 }
-async function readStatuses(number, token, signal, timeoutMs, fetcher) {
+async function readStatuses(number, token, signal, timeoutMs, userAgent = 'Mozilla/5.0', fetcher) {
     const url = new URL(UKRPOSHTA_STATUS_API);
     url.searchParams.set('barcode', number);
     url.searchParams.set('lang', 'en');
-    const { response, bytes } = await fetchBounded(url, { signal, headers: { Accept: 'application/json', Authorization: `Bearer ${token}` } }, {
+    const { response, bytes } = await fetchBounded(url, { signal, headers: { Accept: 'application/json', Authorization: `Bearer ${token}`, 'User-Agent': userAgent } }, {
         provider: 'ukrposhta', timeoutMs, maxBytes: MAX_BYTES, allowHttpStatuses: [401, 403, 404, 429], fetcher,
     });
     // The refusal of a credential is an HTML page; it says nothing about the parcel.
@@ -141,7 +143,7 @@ export class UkrposhtaTracker {
             throw new ChallengeError('ukrposhta', 'Ukrposhta requires a tracking API token or a configured tracking browser');
         return runSteps({ carrier: 'ukrposhta', budgetMs, signal: context.signal, recorder: this.options.recorder ?? NOOP_RECORDER }, [
             { id: 'direct', enabled: token !== null,
-                run: ({ signal, remainingMs }) => readStatuses(number, token, signal, Math.max(1, Math.min(DIRECT_TIMEOUT_MS, Math.floor(remainingMs))), this.options.fetcher) },
+                run: ({ signal, remainingMs }) => readStatuses(number, token, signal, Math.max(1, Math.min(DIRECT_TIMEOUT_MS, Math.floor(remainingMs))), this.options.userAgent, this.options.fetcher) },
             // The portal reads the same domestic records, so it cannot improve on an unknown
             // domestic barcode. An international reference still gets its second source.
             { id: 'browser', enabled: Boolean(executablePath),
@@ -151,7 +153,7 @@ export class UkrposhtaTracker {
     }
 }
 export const adapter = environment => {
-    const tracker = new UkrposhtaTracker({ executablePath: environment.browserExecutablePath, token: environment.env.UKRPOSHTA_TRACKING_TOKEN,
-        fetcher: environment.fetcher, recorder: environment.recorder });
+    const tracker = new UkrposhtaTracker({ executablePath: environment.browserExecutablePath, token: environment.env.UKRPOSHTA_TRACKING_TOKEN?.trim() || APPLICATION_BEARER,
+        userAgent: environment.userAgent, fetcher: environment.fetcher, recorder: environment.recorder });
     return { id: 'ukrposhta', recordsSteps: true, steps: ['direct', 'browser'], track: (input, context) => tracker.fetch(input.number, context) };
 };

package/dist/server/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Universal Parcel Scraper",
-    "version": "0.26.0"
+    "version": "0.26.1"
   },
   "paths": {
     "/health": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "universal-parcel-scraper",
-  "version": "0.26.0-main.368",
+  "version": "0.26.1-main.369",
   "description": "Self-hosted parcel tracking: carrier detection, dedicated scrapers and optional universal providers.",
   "type": "module",
   "license": "Apache-2.0",