goofish-cli 0.1.0__py3-none-any.whl

goofish_cli/core/session.py

@@ -0,0 +1,88 @@
+"""cookie 加载 + requests.Session 管理 + token 提取。"""
+from __future__ import annotations
+
+import json
+import os
+from dataclasses import dataclass
+from pathlib import Path
+
+import requests
+
+from goofish_cli.core.errors import AuthRequiredError
+from goofish_cli.core.sign import generate_device_id
+
+DEFAULT_COOKIE_PATH = Path.home() / ".goofish-cli" / "cookies.json"
+DEVICE_CACHE_PATH = Path.home() / ".goofish-cli" / "device.json"
+USER_AGENT = (
+    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) "
+    "AppleWebKit/537.36 (KHTML, like Gecko) "
+    "Chrome/146.0.0.0 Safari/537.36"
+)
+
+
+@dataclass
+class Session:
+    http: requests.Session
+    unb: str
+    tracknick: str
+    device_id: str
+
+    @classmethod
+    def load(cls, cookie_path: Path | str | None = None) -> Session:
+        path = Path(os.path.expanduser(
+            cookie_path or os.environ.get("GOOFISH_COOKIES_PATH") or DEFAULT_COOKIE_PATH
+        ))
+        if not path.exists():
+            raise AuthRequiredError(
+                f"cookie 文件不存在：{path}。请先 `goofish auth login --from <path>` 导入。"
+            )
+        cookies = _load_cookies(path)
+        if "unb" not in cookies or "_m_h5_tk" not in cookies:
+            raise AuthRequiredError(
+                f"cookie 缺失 unb / _m_h5_tk，检查 {path} 是否完整（建议从 goofish.com 登录后再导一次）"
+            )
+        http = requests.Session()
+        http.cookies.update(cookies)
+        return cls(
+            http=http,
+            unb=cookies["unb"],
+            tracknick=cookies.get("tracknick", ""),
+            device_id=_load_or_mint_device_id(cookies["unb"]),
+        )
+
+    @property
+    def h5_token(self) -> str:
+        raw = self.http.cookies.get("_m_h5_tk", "")
+        return raw.split("_")[0] if raw else ""
+
+
+def _load_or_mint_device_id(unb: str) -> str:
+    """device_id 必须在 unb 维度稳定。
+
+    IM WebSocket 的 accessToken 会绑定 (appKey, deviceId)。若每次 Session.load 调用
+    JS 重新随机生成 device_id，token 签发时用 A，/reg 时用 B，会返回 401
+    "device id or appkey is not equal"。
+    """
+    if DEVICE_CACHE_PATH.exists():
+        try:
+            raw = json.loads(DEVICE_CACHE_PATH.read_text())
+            if raw.get("unb") == unb and raw.get("device_id"):
+                return raw["device_id"]
+        except (json.JSONDecodeError, OSError):
+            pass
+    device_id = generate_device_id(unb)
+    DEVICE_CACHE_PATH.parent.mkdir(parents=True, exist_ok=True)
+    DEVICE_CACHE_PATH.write_text(json.dumps({"unb": unb, "device_id": device_id}))
+    DEVICE_CACHE_PATH.chmod(0o600)
+    return device_id
+
+
+def _load_cookies(path: Path) -> dict[str, str]:
+    text = path.read_text()
+    raw = json.loads(text)
+    # 兼容两种格式：Chrome 扩展导出的 list[{name,value,...}] / 纯 dict
+    if isinstance(raw, list):
+        return {c["name"]: c["value"] for c in raw if "name" in c and "value" in c}
+    if isinstance(raw, dict):
+        return {str(k): str(v) for k, v in raw.items()}
+    raise AuthRequiredError(f"cookies.json 格式不识别：{path}")

goofish_cli/core/sign.py

@@ -0,0 +1,37 @@
+"""execjs 桥接 goofish_js_version_2.js。提供 sign/device_id/mid/uuid/decrypt。"""
+from __future__ import annotations
+
+import subprocess
+from functools import lru_cache, partial
+from importlib.resources import files
+
+# 静默 Windows 编码问题（跨平台无害）
+subprocess.Popen = partial(subprocess.Popen, encoding="utf-8")
+
+import execjs  # noqa: E402  必须在 subprocess 补丁之后
+
+
+@lru_cache(maxsize=1)
+def _ctx() -> execjs._abstract_runtime.AbstractRuntimeContext:
+    js_path = files("goofish_cli.static").joinpath("goofish_js_version_2.js")
+    return execjs.compile(js_path.read_text(encoding="utf-8"))
+
+
+def generate_sign(t: str, token: str, data: str) -> str:
+    return _ctx().call("generate_sign", t, token, data)
+
+
+def generate_device_id(user_id: str) -> str:
+    return _ctx().call("generate_device_id", user_id)
+
+
+def generate_mid() -> str:
+    return _ctx().call("generate_mid")
+
+
+def generate_uuid() -> str:
+    return _ctx().call("generate_uuid")
+
+
+def decrypt(data: str) -> str:
+    return _ctx().call("decrypt", data)

goofish_cli/core/strategy.py

@@ -0,0 +1,10 @@
+"""命令认证/调用策略枚举（参照 opencli Strategy）。"""
+from __future__ import annotations
+
+from enum import StrEnum
+
+
+class Strategy(StrEnum):
+    PUBLIC = "public"
+    COOKIE = "cookie"
+    WEBSOCKET = "ws"

goofish_cli/core/token.py

@@ -0,0 +1,88 @@
+"""IM accessToken 获取/刷新。对应 mtop.taobao.idlemessage.pc.login.token。
+
+用于 WebSocket 鉴权（/reg 阶段）。不同于 HTTP 的 _m_h5_tk，这个 token 是给 IM 长连用的。
+
+accessToken 会被缓存到 ~/.goofish-cli/im_token.json（TTL 由 GOOFISH_TOKEN_TTL 控制，默认 30 分钟）。
+闲鱼风控对 `mtop.taobao.idlemessage.pc.login.token` 比较敏感，高频调用会 RGV587。
+"""
+
+import json
+import os
+import time
+from pathlib import Path
+from typing import Any
+
+from goofish_cli.core.errors import AuthRequiredError
+from goofish_cli.core.mtop import call
+from goofish_cli.core.session import Session
+
+IM_APP_KEY = "444e9908a51d1cb236a27862abc769c9"
+TOKEN_CACHE = Path.home() / ".goofish-cli" / "im_token.json"
+DEFAULT_TTL = 30 * 60  # 30 分钟，远低于真实 token 过期（观察约 2h）
+
+
+def _ttl() -> int:
+    try:
+        return max(60, int(os.environ.get("GOOFISH_TOKEN_TTL", DEFAULT_TTL)))
+    except ValueError:
+        return DEFAULT_TTL
+
+
+def _load_cache(unb: str) -> str | None:
+    if not TOKEN_CACHE.exists():
+        return None
+    try:
+        raw = json.loads(TOKEN_CACHE.read_text())
+    except (json.JSONDecodeError, OSError):
+        return None
+    if raw.get("unb") != unb:
+        return None
+    if time.time() - float(raw.get("t", 0)) > _ttl():
+        return None
+    return raw.get("token") or None
+
+
+def _save_cache(unb: str, token: str) -> None:
+    TOKEN_CACHE.parent.mkdir(parents=True, exist_ok=True)
+    TOKEN_CACHE.write_text(json.dumps({"unb": unb, "token": token, "t": time.time()}))
+    TOKEN_CACHE.chmod(0o600)
+
+
+def get_access_token(session: Session, *, force_refresh: bool = False) -> str:
+    """取 WebSocket 用的 accessToken。
+
+    优先级：环境变量 GOOFISH_IM_TOKEN > 文件缓存 > 调用 mtop 接口。
+    支持注入原因：`mtop.taobao.idlemessage.pc.login.token` 风控非常敏感，
+    完成滑块后 web 端自己持有的 token 可以直接拷出来塞给 CLI 用。
+    """
+    env_token = os.environ.get("GOOFISH_IM_TOKEN", "").strip()
+    if env_token:
+        return env_token
+    if not force_refresh:
+        cached = _load_cache(session.unb)
+        if cached:
+            return cached
+    data = {"appKey": IM_APP_KEY, "deviceId": session.device_id}
+    raw = call(
+        session,
+        api="mtop.taobao.idlemessage.pc.login.token",
+        data=data,
+        version="1.0",
+        spm_cnt="a21ybx.im.0.0",
+    )
+    token = (raw.get("data") or {}).get("accessToken", "")
+    if not token:
+        raise AuthRequiredError(f"accessToken 获取失败：{raw.get('ret')}")
+    _save_cache(session.unb, token)
+    return token
+
+
+def refresh_login(session: Session) -> dict[str, Any]:
+    """刷新登录态（轻量 ping），长连常驻时 10 分钟调一次避免掉线。"""
+    return call(
+        session,
+        api="mtop.taobao.idlemessage.pc.loginuser.get",
+        data={},
+        version="1.0",
+        spm_cnt="a21ybx.im.0.0",
+    )