清理代码
This commit is contained in:
dela
257
core/sentinel/js_executor.py
Normal file
257
core/sentinel/js_executor.py
Normal file
@@ -0,0 +1,257 @@
|
||||
"""JavaScript 执行引擎封装
|
||||
|
||||
说明：
|
||||
- OpenAI 的 `assets/sdk.js` 是浏览器脚本，包含多段 anti-debug 代码与 DOM 初始化逻辑。
|
||||
- 直接用 PyExecJS/ExecJS 在 Node 环境执行时，常见表现是「compile 成功但 call 卡死」。
|
||||
- 这里改为通过 `node -` 运行一段自包含脚本：先做轻量净化 + browser shim，再执行目标函数并强制输出结果。
|
||||
"""
|
||||
|
||||
from __future__ import annotations
|
||||
|
||||
import json
|
||||
import re
|
||||
import subprocess
|
||||
import sys
|
||||
from pathlib import Path
|
||||
from typing import Any, Dict, Optional
|
||||
|
||||
from config import load_config
|
||||
|
||||
|
||||
class JSExecutor:
|
||||
"""通过 Node.js 执行 Sentinel SDK 内部逻辑（支持 async Turnstile VM）"""
|
||||
|
||||
def __init__(self):
|
||||
# 加载配置
|
||||
config = load_config()
|
||||
self.debug = config.sentinel_debug
|
||||
|
||||
# 解析 SDK 路径
|
||||
sdk_path = Path(config.sentinel_sdk_path)
|
||||
if not sdk_path.is_absolute():
|
||||
# 相对路径：相对于项目根目录
|
||||
project_root = Path(sys.argv[0]).parent.resolve()
|
||||
sdk_path = project_root / sdk_path
|
||||
|
||||
self._sdk_path = sdk_path
|
||||
self._sdk_code: str = ""
|
||||
self._load_sdk()
|
||||
|
||||
def _load_sdk(self) -> None:
|
||||
if not self._sdk_path.exists():
|
||||
raise FileNotFoundError(f"SDK not found at {self._sdk_path}")
|
||||
|
||||
sdk_code = self._sdk_path.read_text(encoding="utf-8")
|
||||
sdk_code = self._sanitize_sdk(sdk_code)
|
||||
sdk_code = self._inject_internal_exports(sdk_code)
|
||||
|
||||
self._sdk_code = sdk_code
|
||||
|
||||
if self.debug:
|
||||
print("[JSExecutor] SDK loaded successfully (sanitized)")
|
||||
|
||||
def _sanitize_sdk(self, sdk_code: str) -> str:
|
||||
"""移除会在 Node 环境中导致卡死/超慢的 anti-debug 片段。"""
|
||||
# 1) 删除少量已知的顶层 anti-debug 直接调用（独占一行）
|
||||
sdk_code = re.sub(r"(?m)^\s*[rugkU]\(\);\s*$", "", sdk_code)
|
||||
sdk_code = re.sub(r"(?m)^\s*o\(\);\s*$", "", sdk_code)
|
||||
|
||||
# 2) 删除 `Pt(),` 这种逗号表达式里的 anti-debug 调用（避免语法破坏）
|
||||
sdk_code = re.sub(r"\bPt\(\),\s*", "", sdk_code)
|
||||
sdk_code = re.sub(r"\bPt\(\);\s*", "", sdk_code)
|
||||
|
||||
# 3) 删除 class 字段初始化里的 anti-debug 调用：`return n(), "" + Math.random();`
|
||||
sdk_code = re.sub(
|
||||
r'return\s+n\(\),\s*""\s*\+\s*Math\.random\(\)\s*;',
|
||||
'return "" + Math.random();',
|
||||
sdk_code,
|
||||
)
|
||||
|
||||
# 4) 删除类似 `if ((e(), cond))` 的逗号 anti-debug 调用（保留 cond）
|
||||
# 仅处理极短标识符，避免误伤正常逻辑；保留 Turnstile VM 的 `vt()`。
|
||||
def _strip_comma_call(match: re.Match[str]) -> str:
|
||||
fn = match.group(1)
|
||||
if fn == "vt":
|
||||
return match.group(0)
|
||||
return "("
|
||||
|
||||
sdk_code = re.sub(
|
||||
r"\(\s*([A-Za-z_$][A-Za-z0-9_$]{0,2})\(\)\s*,",
|
||||
_strip_comma_call,
|
||||
sdk_code,
|
||||
)
|
||||
return sdk_code
|
||||
|
||||
def _inject_internal_exports(self, sdk_code: str) -> str:
|
||||
"""把 SDK 内部对象导出到 `SentinelSDK` 上，便于在外部调用。"""
|
||||
# SDK 末尾一般是：
|
||||
# (t.init = un),
|
||||
# (t.token = an),
|
||||
# t
|
||||
# );
|
||||
pattern = re.compile(
|
||||
r"\(\s*t\.init\s*=\s*un\s*\)\s*,\s*\(\s*t\.token\s*=\s*an\s*\)\s*,\s*t\s*\)",
|
||||
re.MULTILINE,
|
||||
)
|
||||
|
||||
replacement = (
|
||||
"(t.init = un),"
|
||||
"(t.token = an),"
|
||||
"(t.__O = O),"
|
||||
"(t.__P = P),"
|
||||
"(t.__bt = bt),"
|
||||
"(t.__kt = kt),"
|
||||
"(t.__Kt = Kt),"
|
||||
"t)"
|
||||
)
|
||||
|
||||
new_code, n = pattern.subn(replacement, sdk_code, count=1)
|
||||
if n != 1:
|
||||
raise RuntimeError("Failed to patch SDK exports; SDK format may have changed.")
|
||||
return new_code
|
||||
|
||||
def _node_script(self, payload: Dict[str, Any], entry: str) -> str:
|
||||
payload_json = json.dumps(payload, ensure_ascii=False)
|
||||
|
||||
shim = r"""
|
||||
// --- minimal browser shims for Node ---
|
||||
if (typeof globalThis.window !== "object") globalThis.window = globalThis;
|
||||
if (!window.top) window.top = window;
|
||||
if (!window.location) window.location = { href: "https://auth.openai.com/create-account/password", search: "", pathname: "/create-account/password", origin: "https://auth.openai.com" };
|
||||
if (!window.addEventListener) window.addEventListener = function(){};
|
||||
if (!window.removeEventListener) window.removeEventListener = function(){};
|
||||
if (!window.postMessage) window.postMessage = function(){};
|
||||
if (!window.__sentinel_token_pending) window.__sentinel_token_pending = [];
|
||||
if (!window.__sentinel_init_pending) window.__sentinel_init_pending = [];
|
||||
|
||||
if (typeof globalThis.document !== "object") globalThis.document = {};
|
||||
if (!document.scripts) document.scripts = [];
|
||||
if (!document.cookie) document.cookie = "";
|
||||
if (!document.documentElement) document.documentElement = { getAttribute: () => null };
|
||||
if (!document.currentScript) document.currentScript = null;
|
||||
if (!document.body) document.body = { appendChild: function(){}, getAttribute: () => null };
|
||||
if (!document.createElement) document.createElement = function(tag){
|
||||
return {
|
||||
tagName: String(tag||"").toUpperCase(),
|
||||
style: {},
|
||||
setAttribute: function(){},
|
||||
getAttribute: function(){ return null; },
|
||||
addEventListener: function(){},
|
||||
removeEventListener: function(){},
|
||||
src: "",
|
||||
contentWindow: { postMessage: function(){}, addEventListener: function(){}, removeEventListener: function(){} },
|
||||
};
|
||||
};
|
||||
|
||||
if (typeof globalThis.navigator !== "object") globalThis.navigator = { userAgent: "ua", language: "en-US", languages: ["en-US","en"], hardwareConcurrency: 8 };
|
||||
if (typeof globalThis.screen !== "object") globalThis.screen = { width: 1920, height: 1080 };
|
||||
if (typeof globalThis.btoa !== "function") globalThis.btoa = (str) => Buffer.from(str, "binary").toString("base64");
|
||||
if (typeof globalThis.atob !== "function") globalThis.atob = (b64) => Buffer.from(b64, "base64").toString("binary");
|
||||
window.btoa = globalThis.btoa;
|
||||
window.atob = globalThis.atob;
|
||||
"""
|
||||
|
||||
wrapper = f"""
|
||||
const __payload = {payload_json};
|
||||
|
||||
function __makeSolver(configArray) {{
|
||||
const solver = new SentinelSDK.__O();
|
||||
solver.sid = configArray?.[14];
|
||||
// 强制使用 Python 传入的 configArray，避免依赖真实浏览器对象
|
||||
solver.getConfig = () => configArray;
|
||||
return solver;
|
||||
}}
|
||||
|
||||
async function __entry() {{
|
||||
{entry}
|
||||
}}
|
||||
|
||||
(async () => {{
|
||||
try {{
|
||||
const result = await __entry();
|
||||
process.stdout.write(JSON.stringify({{ ok: true, result }}), () => process.exit(0));
|
||||
}} catch (err) {{
|
||||
const msg = (err && (err.stack || err.message)) ? (err.stack || err.message) : String(err);
|
||||
process.stdout.write(JSON.stringify({{ ok: false, error: msg }}), () => process.exit(1));
|
||||
}}
|
||||
}})();
|
||||
"""
|
||||
return "\n".join([shim, self._sdk_code, wrapper])
|
||||
|
||||
def _run_node(self, payload: Dict[str, Any], entry: str, timeout_s: int = 30) -> Any:
|
||||
script = self._node_script(payload, entry)
|
||||
|
||||
if self.debug:
|
||||
print("[JSExecutor] Running Node worker...")
|
||||
|
||||
try:
|
||||
proc = subprocess.run(
|
||||
["node", "-"],
|
||||
input=script,
|
||||
text=True,
|
||||
capture_output=True,
|
||||
timeout=timeout_s,
|
||||
)
|
||||
except FileNotFoundError as e:
|
||||
raise RuntimeError("Node.js not found on PATH (required for Sentinel SDK execution).") from e
|
||||
except subprocess.TimeoutExpired as e:
|
||||
raise TimeoutError(f"Node worker timed out after {timeout_s}s") from e
|
||||
|
||||
stdout = (proc.stdout or "").strip()
|
||||
if not stdout:
|
||||
raise RuntimeError(f"Node worker produced no output (stderr={proc.stderr!r})")
|
||||
|
||||
try:
|
||||
obj = json.loads(stdout)
|
||||
except json.JSONDecodeError as e:
|
||||
raise RuntimeError(f"Node worker returned non-JSON output: {stdout[:200]!r}") from e
|
||||
|
||||
if not obj.get("ok"):
|
||||
raise RuntimeError(obj.get("error", "Unknown JS error"))
|
||||
|
||||
return obj.get("result")
|
||||
|
||||
def solve_pow(self, seed: str, difficulty: str, config_array: list) -> str:
|
||||
if self.debug:
|
||||
print(f"[JSExecutor] Solving PoW: seed={seed[:10]}..., difficulty={difficulty}")
|
||||
|
||||
result = self._run_node(
|
||||
{"seed": seed, "difficulty": difficulty, "configArray": config_array},
|
||||
entry="return __makeSolver(__payload.configArray)._generateAnswerSync(__payload.seed, __payload.difficulty);",
|
||||
timeout_s=60,
|
||||
)
|
||||
|
||||
if self.debug and isinstance(result, str):
|
||||
print(f"[JSExecutor] PoW solved: {result[:50]}...")
|
||||
|
||||
return result
|
||||
|
||||
def generate_requirements(self, seed: str, config_array: list) -> str:
|
||||
result = self._run_node(
|
||||
{"seed": seed, "configArray": config_array},
|
||||
entry=(
|
||||
"const solver = __makeSolver(__payload.configArray);\n"
|
||||
"solver.requirementsSeed = __payload.seed;\n"
|
||||
"return solver._generateRequirementsTokenAnswerBlocking();"
|
||||
),
|
||||
timeout_s=30,
|
||||
)
|
||||
return result
|
||||
|
||||
def execute_turnstile(self, dx_bytecode: str, xor_key: str) -> str:
|
||||
if self.debug:
|
||||
print("[JSExecutor] Executing Turnstile VM...")
|
||||
|
||||
result = self._run_node(
|
||||
{"dx": dx_bytecode, "xorKey": xor_key},
|
||||
entry=(
|
||||
"SentinelSDK.__kt(__payload.xorKey);\n"
|
||||
"return await SentinelSDK.__bt(__payload.dx);"
|
||||
),
|
||||
timeout_s=30,
|
||||
)
|
||||
|
||||
if self.debug and isinstance(result, str):
|
||||
print(f"[JSExecutor] Turnstile result: {result[:50]}...")
|
||||
|
||||
return result
|
||||
Reference in New Issue
Block a user