账户密码
@@ -1881,6 +1899,8 @@
+
+
diff --git a/sidepanel/sidepanel.js b/sidepanel/sidepanel.js
index dd3ae4d..465a8c0 100644
--- a/sidepanel/sidepanel.js
+++ b/sidepanel/sidepanel.js
@@ -192,6 +192,15 @@ const rowKiroLoginUrl = document.getElementById('row-kiro-login-url');
const displayKiroLoginUrl = document.getElementById('display-kiro-login-url');
const rowKiroUploadStatus = document.getElementById('row-kiro-upload-status');
const displayKiroUploadStatus = document.getElementById('display-kiro-upload-status');
+const rowGrokRegisterStatus = document.getElementById('row-grok-register-status');
+const displayGrokRegisterStatus = document.getElementById('display-grok-register-status');
+const rowGrokSsoStatus = document.getElementById('row-grok-sso-status');
+const displayGrokSsoStatus = document.getElementById('display-grok-sso-status');
+const rowGrokSsoSettings = document.getElementById('row-grok-sso-settings');
+const displayGrokSsoCookie = document.getElementById('display-grok-sso-cookie');
+const btnCopyGrokSso = document.getElementById('btn-copy-grok-sso');
+const btnExportGrokSso = document.getElementById('btn-export-grok-sso');
+const btnClearGrokSso = document.getElementById('btn-clear-grok-sso');
const rowCustomPassword = document.getElementById('row-custom-password');
const rowPlusMode = document.getElementById('row-plus-mode');
const inputPlusModeEnabled = document.getElementById('input-plus-mode-enabled');
@@ -2661,6 +2670,95 @@ function getKiroRuntimeState(state = {}) {
return {};
}
+function getGrokRuntimeState(state = {}) {
+ const runtimeState = state?.runtimeState?.flowState?.grok;
+ if (runtimeState && typeof runtimeState === 'object' && !Array.isArray(runtimeState)) {
+ return runtimeState;
+ }
+ const flowState = state?.flowState?.grok;
+ if (flowState && typeof flowState === 'object' && !Array.isArray(flowState)) {
+ return flowState;
+ }
+ return {};
+}
+
+function normalizeGrokSsoCookies(state = latestState) {
+ const runtimeState = getGrokRuntimeState(state);
+ const rawCookies = Array.isArray(runtimeState?.sso?.cookies)
+ ? runtimeState.sso.cookies
+ : (Array.isArray(state?.grokSsoCookies) ? state.grokSsoCookies : []);
+ const currentCookie = String(runtimeState?.sso?.currentCookie || state?.grokSsoCookie || '').trim();
+ return Array.from(new Set([
+ currentCookie,
+ ...rawCookies,
+ ].map((entry) => String(entry || '').trim()).filter(Boolean)));
+}
+
+function getGrokRegisterStatusLabel(value = '') {
+ const normalized = String(value || '').trim().toLowerCase();
+ switch (normalized) {
+ case 'signup_page_opened':
+ return '注册页已打开';
+ case 'email_submitting':
+ return '正在提交邮箱';
+ case 'verification_requested':
+ return '等待验证码';
+ case 'verified':
+ return '验证码已提交';
+ case 'profile_submitting':
+ return '正在提交资料';
+ case 'profile_submitted':
+ return '资料已提交';
+ case 'completed':
+ return '已完成';
+ case 'error':
+ return '失败';
+ default:
+ return String(value || '').trim() || '未开始';
+ }
+}
+
+function renderGrokRuntimeState(state = latestState) {
+ const runtimeState = getGrokRuntimeState(state);
+ const registerStatus = String(
+ runtimeState?.register?.status
+ || state?.grokRegisterStatus
+ || ''
+ ).trim();
+ const cookies = normalizeGrokSsoCookies(state);
+ const currentCookie = String(
+ runtimeState?.sso?.currentCookie
+ || state?.grokSsoCookie
+ || cookies[0]
+ || ''
+ ).trim();
+ const extractedAt = Number(
+ runtimeState?.sso?.extractedAt
+ || state?.grokSsoExtractedAt
+ || 0
+ ) || 0;
+
+ if (displayGrokRegisterStatus) {
+ displayGrokRegisterStatus.textContent = getGrokRegisterStatusLabel(registerStatus);
+ }
+ if (displayGrokSsoStatus) {
+ displayGrokSsoStatus.textContent = currentCookie
+ ? `已提取 ${cookies.length || 1} 条${extractedAt ? `，${new Date(extractedAt).toLocaleString()}` : ''}`
+ : '未提取';
+ }
+ if (displayGrokSsoCookie) {
+ displayGrokSsoCookie.textContent = currentCookie
+ ? `${currentCookie.slice(0, 8)}...${currentCookie.slice(-6)}`
+ : '未提取';
+ displayGrokSsoCookie.title = currentCookie ? '已隐藏完整 SSO Cookie，可使用复制或导出' : '';
+ }
+ [btnCopyGrokSso, btnExportGrokSso, btnClearGrokSso].forEach((button) => {
+ if (button) {
+ button.disabled = cookies.length === 0;
+ }
+ });
+}
+
function setKiroRsConnectionTestStatus(message = '') {
const nextText = String(message || '').trim() || '未测试';
kiroRsConnectionTestStatusText = nextText;
@@ -11069,6 +11167,7 @@ function applySettingsState(state) {
).trim();
displayKiroUploadStatus.textContent = getKiroUploadStatusLabel(kiroUploadStatus);
}
+ renderGrokRuntimeState(state);
const normalizedIpProxyService = resolveIpProxyService(state?.ipProxyService);
const normalizedIpProxyServiceProfiles = typeof normalizeIpProxyServiceProfiles === 'function'
? normalizeIpProxyServiceProfiles(state?.ipProxyServiceProfiles || {}, state || {})
@@ -13944,6 +14043,64 @@ async function copyTextToClipboard(text) {
await navigator.clipboard.writeText(value);
}
+btnCopyGrokSso?.addEventListener('click', async () => {
+ try {
+ const cookies = normalizeGrokSsoCookies(latestState);
+ await copyTextToClipboard(cookies.join('\n'));
+ showToast('Grok SSO Cookie 已复制。', 'success');
+ } catch (error) {
+ showToast(error?.message || '复制 Grok SSO Cookie 失败。', 'error');
+ }
+});
+
+btnExportGrokSso?.addEventListener('click', () => {
+ try {
+ const cookies = normalizeGrokSsoCookies(latestState);
+ if (!cookies.length) {
+ throw new Error('没有可导出的 Grok SSO Cookie。');
+ }
+ downloadTextFile(
+ `${cookies.join('\n')}\n`,
+ `grok-sso-cookies-${new Date().toISOString().replace(/[:.]/g, '-')}.txt`,
+ 'text/plain;charset=utf-8'
+ );
+ showToast('Grok SSO Cookie 已导出。', 'success');
+ } catch (error) {
+ showToast(error?.message || '导出 Grok SSO Cookie 失败。', 'error');
+ }
+});
+
+btnClearGrokSso?.addEventListener('click', async () => {
+ try {
+ const cookies = normalizeGrokSsoCookies(latestState);
+ if (!cookies.length) {
+ showToast('当前没有 Grok SSO Cookie。', 'info');
+ return;
+ }
+ const response = await chrome.runtime.sendMessage({
+ type: 'CLEAR_GROK_SSO_COOKIES',
+ source: 'sidepanel',
+ payload: {},
+ });
+ if (response?.error) {
+ throw new Error(response.error);
+ }
+ if (response?.state) {
+ syncLatestState(response.state);
+ } else {
+ syncLatestState({
+ grokSsoCookie: '',
+ grokSsoCookies: [],
+ grokSsoExtractedAt: 0,
+ });
+ }
+ renderGrokRuntimeState(latestState);
+ showToast('Grok SSO Cookie 已清空。', 'success');
+ } catch (error) {
+ showToast(error?.message || '清空 Grok SSO Cookie 失败。', 'error');
+ }
+});
+
const hotmailManager = window.SidepanelHotmailManager?.createHotmailManager({
state: {
getLatestState: () => latestState,
@@ -14590,7 +14747,9 @@ stepsList?.addEventListener('click', async (event) => {
if (step === gpcCreateStep && !(await ensureGpcApiKeyReadyForStart())) {
return;
}
- const shouldPersistSharedPassword = nodeId === 'fill-password' || nodeId === 'kiro-submit-password';
+ const shouldPersistSharedPassword = nodeId === 'fill-password'
+ || nodeId === 'kiro-submit-password'
+ || nodeId === 'grok-submit-profile';
if (shouldPersistSharedPassword && inputPassword.value !== (latestState?.customPassword || '')) {
await chrome.runtime.sendMessage({
type: 'SAVE_SETTING',
@@ -17331,6 +17490,17 @@ chrome.runtime.onMessage.addListener((message, _sender, sendResponse) => {
) {
syncPasswordField(latestState || {});
}
+ if (
+ message.payload.grokRegisterStatus !== undefined
+ || message.payload.grokCompletedAt !== undefined
+ || message.payload.grokSsoCookie !== undefined
+ || message.payload.grokSsoCookies !== undefined
+ || message.payload.grokSsoExtractedAt !== undefined
+ || message.payload.runtimeState !== undefined
+ || message.payload.flowState !== undefined
+ ) {
+ renderGrokRuntimeState(latestState);
+ }
if (message.payload.localCpaStep9Mode !== undefined) {
setLocalCpaStep9Mode(message.payload.localCpaStep9Mode);
}
diff --git a/tests/background-flow-mail-polling-module.test.js b/tests/background-flow-mail-polling-module.test.js
new file mode 100644
index 0000000..818f2ee
--- /dev/null
+++ b/tests/background-flow-mail-polling-module.test.js
@@ -0,0 +1,148 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+
+function loadFlowMailPollingApi() {
+ const source = fs.readFileSync('background/flow-mail-polling.js', 'utf8');
+ const globalScope = {};
+ new Function('self', `${source}; return self;`)(globalScope);
+ return globalScope.MultiPageBackgroundFlowMailPolling;
+}
+
+test('flow mail polling service dispatches API mail providers through shared helper', async () => {
+ const api = loadFlowMailPollingApi();
+ const logs = [];
+ let buildCall = null;
+ let hotmailCall = null;
+ const service = api.createFlowMailPollingService({
+ addLog: async (message, level, options) => {
+ logs.push({ message, level, options });
+ },
+ buildVerificationPollPayloadForNode: (nodeId, state, overrides) => {
+ buildCall = { nodeId, state, overrides };
+ return {
+ flowId: state.activeFlowId,
+ nodeId,
+ step: 4,
+ targetEmail: 'user@example.com',
+ maxAttempts: 2,
+ intervalMs: 100,
+ ...overrides,
+ };
+ },
+ getMailConfig: () => ({ provider: 'hotmail-api', label: 'Hotmail' }),
+ pollHotmailVerificationCode: async (step, state, payload) => {
+ hotmailCall = { step, state, payload };
+ return { code: '123456', emailTimestamp: 456 };
+ },
+ });
+
+ const result = await service.pollFlowVerificationCode({
+ flowId: 'kiro',
+ nodeId: 'kiro-submit-verification-code',
+ state: { activeFlowId: 'kiro', email: 'user@example.com' },
+ step: 4,
+ filterAfterTimestamp: 123,
+ logStepKey: 'kiro-submit-verification-code',
+ });
+
+ assert.equal(result.code, '123456');
+ assert.equal(buildCall.nodeId, 'kiro-submit-verification-code');
+ assert.equal(buildCall.overrides.filterAfterTimestamp, 123);
+ assert.equal(hotmailCall.step, 4);
+ assert.equal(hotmailCall.payload.filterAfterTimestamp, 123);
+ assert.equal(logs.some((entry) => entry.message.includes('Hotmail')), true);
+});
+
+test('flow mail polling service prepares browser mail provider sessions and payload timeouts', async () => {
+ const api = loadFlowMailPollingApi();
+ let ensured2925 = null;
+ let mailMessage = null;
+ let mailOptions = null;
+ const service = api.createFlowMailPollingService({
+ addLog: async () => {},
+ buildVerificationPollPayloadForNode: () => ({
+ flowId: 'kiro',
+ nodeId: 'kiro-submit-verification-code',
+ step: 4,
+ targetEmail: 'user@example.com',
+ maxAttempts: 2,
+ intervalMs: 100,
+ }),
+ ensureMail2925MailboxSession: async (options) => {
+ ensured2925 = options;
+ },
+ getMailConfig: () => ({
+ provider: '2925',
+ source: 'mail-2925',
+ label: '2925 邮箱',
+ }),
+ sendToMailContentScriptResilient: async (_mail, message, options) => {
+ mailMessage = message;
+ mailOptions = options;
+ return { code: '654321', emailTimestamp: 789 };
+ },
+ });
+
+ const result = await service.pollFlowVerificationCode({
+ flowId: 'kiro',
+ nodeId: 'kiro-submit-verification-code',
+ state: {
+ activeFlowId: 'kiro',
+ currentMail2925AccountId: 'acct-1',
+ mail2925UseAccountPool: true,
+ mail2925Accounts: [
+ { id: 'acct-1', email: 'pool@example.com' },
+ ],
+ },
+ step: 4,
+ logStepKey: 'kiro-submit-verification-code',
+ });
+
+ assert.equal(result.code, '654321');
+ assert.equal(ensured2925.accountId, 'acct-1');
+ assert.equal(ensured2925.expectedMailboxEmail, 'pool@example.com');
+ assert.equal(mailMessage.type, 'POLL_EMAIL');
+ assert.equal(mailMessage.payload.targetEmail, 'user@example.com');
+ assert.equal(mailOptions.logStepKey, 'kiro-submit-verification-code');
+ assert.equal(mailOptions.responseTimeoutMs, 45000);
+});
+
+test('flow mail polling service lets 2925 limit errors flow through shared recovery', async () => {
+ const api = loadFlowMailPollingApi();
+ const limitError = new Error('MAIL2925_LIMIT_REACHED::子邮箱已达上限');
+ const recoveredError = new Error('switched-account');
+ const service = api.createFlowMailPollingService({
+ addLog: async () => {},
+ buildVerificationPollPayloadForNode: () => ({
+ step: 4,
+ maxAttempts: 1,
+ intervalMs: 100,
+ }),
+ getMailConfig: () => ({
+ provider: '2925',
+ source: 'mail-2925',
+ label: '2925 邮箱',
+ }),
+ ensureMail2925MailboxSession: async () => {},
+ isMail2925LimitReachedError: (error) => error === limitError,
+ handleMail2925LimitReachedError: async (step, error) => {
+ assert.equal(step, 4);
+ assert.equal(error, limitError);
+ return recoveredError;
+ },
+ sendToMailContentScriptResilient: async () => {
+ throw limitError;
+ },
+ });
+
+ await assert.rejects(
+ () => service.pollFlowVerificationCode({
+ flowId: 'kiro',
+ nodeId: 'kiro-submit-verification-code',
+ state: { activeFlowId: 'kiro' },
+ step: 4,
+ }),
+ /switched-account/
+ );
+});
diff --git a/tests/background-grok-state-module.test.js b/tests/background-grok-state-module.test.js
new file mode 100644
index 0000000..2eb3674
--- /dev/null
+++ b/tests/background-grok-state-module.test.js
@@ -0,0 +1,158 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+
+function loadGrokStateApi() {
+ const source = fs.readFileSync('flows/grok/background/state.js', 'utf8');
+ const globalScope = {};
+ return new Function('self', `${source}; return self.MultiPageBackgroundGrokState;`)(globalScope);
+}
+
+test('grok state view projects canonical runtime state into legacy flat read fields', () => {
+ const api = loadGrokStateApi();
+ const view = api.buildStateView({
+ runtimeState: {
+ flowState: {
+ openai: {
+ preserved: true,
+ },
+ grok: {
+ session: {
+ registerTabId: 42,
+ pageState: 'profile_entry',
+ pageUrl: 'https://accounts.x.ai/sign-up',
+ },
+ register: {
+ email: 'USER@EXAMPLE.COM',
+ firstName: 'Ada',
+ lastName: 'Lovelace',
+ password: 'Secret123!',
+ verificationRequestedAt: 1000,
+ verificationCode: 'ABC123',
+ status: 'verified',
+ completedAt: 2000,
+ },
+ sso: {
+ currentCookie: 'cookie-a',
+ cookies: ['cookie-a', 'cookie-b', 'cookie-a'],
+ extractedAt: 3000,
+ },
+ },
+ },
+ },
+ });
+
+ assert.equal(view.grokRegisterTabId, 42);
+ assert.equal(view.grokPageState, 'profile_entry');
+ assert.equal(view.grokEmail, 'user@example.com');
+ assert.equal(view.grokFirstName, 'Ada');
+ assert.equal(view.grokLastName, 'Lovelace');
+ assert.equal(view.grokPassword, 'Secret123!');
+ assert.equal(view.grokVerificationRequestedAt, 1000);
+ assert.equal(view.grokVerificationCode, 'ABC123');
+ assert.equal(view.grokRegisterStatus, 'verified');
+ assert.equal(view.grokCompletedAt, 2000);
+ assert.equal(view.grokSsoCookie, 'cookie-a');
+ assert.deepEqual(view.grokSsoCookies, ['cookie-a', 'cookie-b']);
+ assert.equal(view.grokSsoExtractedAt, 3000);
+ assert.equal(view.runtimeState.flowState.openai.preserved, true);
+ assert.equal(view.runtimeState.flowState.grok.register.email, 'user@example.com');
+ assert.equal(view.flowState.grok.sso.currentCookie, 'cookie-a');
+ assert.equal(view.flows.grok.sso.cookies.length, 2);
+});
+
+test('grok completion payloads update canonical runtime state and flat compatibility fields', () => {
+ const api = loadGrokStateApi();
+ const patch = api.applyNodeCompletionPayload({}, {
+ grokEmail: 'GROK@EXAMPLE.COM',
+ grokVerificationRequestedAt: 123,
+ grokSsoCookie: 'cookie-z',
+ grokSsoCookies: ['cookie-z', 'cookie-z', 'cookie-y'],
+ grokCompletedAt: 456,
+ });
+
+ assert.equal(patch.grokEmail, 'grok@example.com');
+ assert.equal(patch.grokVerificationRequestedAt, 123);
+ assert.equal(patch.grokSsoCookie, 'cookie-z');
+ assert.deepEqual(patch.grokSsoCookies, ['cookie-z', 'cookie-y']);
+ assert.equal(patch.grokCompletedAt, 456);
+ assert.equal(patch.grokSsoExtractedAt, 456);
+ assert.equal(patch.runtimeState.flowState.grok.register.email, 'grok@example.com');
+ assert.equal(patch.runtimeState.flowState.grok.sso.currentCookie, 'cookie-z');
+});
+
+test('grok fresh keep-state reset preserves SSO cookies but clears registration runtime', () => {
+ const api = loadGrokStateApi();
+ const patch = api.buildFreshKeepState({
+ runtimeState: {
+ flowState: {
+ grok: {
+ session: {
+ registerTabId: 42,
+ pageState: 'profile_entry',
+ },
+ register: {
+ email: 'grok@example.com',
+ status: 'completed',
+ completedAt: 1000,
+ },
+ sso: {
+ currentCookie: 'cookie-a',
+ cookies: ['cookie-a', 'cookie-b'],
+ extractedAt: 2000,
+ },
+ },
+ },
+ },
+ });
+
+ assert.equal(patch.grokRegisterTabId, null);
+ assert.equal(patch.grokPageState, '');
+ assert.equal(patch.grokEmail, '');
+ assert.equal(patch.grokRegisterStatus, '');
+ assert.equal(patch.grokCompletedAt, 0);
+ assert.equal(patch.grokSsoCookie, 'cookie-a');
+ assert.deepEqual(patch.grokSsoCookies, ['cookie-a', 'cookie-b']);
+ assert.equal(patch.grokSsoExtractedAt, 2000);
+ assert.equal(patch.runtimeState.flowState.grok.register.email, '');
+ assert.equal(patch.runtimeState.flowState.grok.sso.currentCookie, 'cookie-a');
+});
+
+test('grok downstream reset clears only the state owned by the restarted tail', () => {
+ const api = loadGrokStateApi();
+ const currentState = {
+ runtimeState: {
+ flowState: {
+ grok: {
+ session: {
+ registerTabId: 7,
+ pageState: 'signed_in',
+ pageUrl: 'https://grok.com/',
+ lastError: 'old-error',
+ },
+ register: {
+ email: 'grok@example.com',
+ status: 'completed',
+ completedAt: 1000,
+ },
+ sso: {
+ currentCookie: 'cookie-a',
+ cookies: ['cookie-a'],
+ extractedAt: 2000,
+ },
+ },
+ },
+ },
+ };
+
+ const profilePatch = api.buildDownstreamResetPatch('grok-submit-profile', currentState);
+ assert.equal(profilePatch.grokEmail, 'grok@example.com');
+ assert.equal(profilePatch.grokRegisterStatus, 'completed');
+ assert.equal(profilePatch.grokSsoCookie, '');
+ assert.deepEqual(profilePatch.grokSsoCookies, []);
+
+ const emailPatch = api.buildDownstreamResetPatch('grok-submit-email', currentState);
+ assert.equal(emailPatch.grokEmail, '');
+ assert.equal(emailPatch.grokRegisterStatus, '');
+ assert.equal(emailPatch.grokRegisterTabId, 7);
+});
diff --git a/tests/background-kiro-desktop-authorize-runner-module.test.js b/tests/background-kiro-desktop-authorize-runner-module.test.js
index 9e811c1..4e06d13 100644
--- a/tests/background-kiro-desktop-authorize-runner-module.test.js
+++ b/tests/background-kiro-desktop-authorize-runner-module.test.js
@@ -91,6 +91,18 @@ test('kiro desktop authorize runner uses a shared 3-minute page-load timeout bud
assert.match(source, /finalizeDesktopAuthorizeCallback/);
});
+test('kiro desktop authorize runner delegates OTP mail polling to the shared flow mail service', () => {
+ const source = fs.readFileSync('flows/kiro/background/desktop-authorize-runner.js', 'utf8');
+ assert.match(source, /pollFlowVerificationCode/);
+ assert.doesNotMatch(source, /buildDesktopOtpPollPayload/);
+ assert.doesNotMatch(source, /pollHotmailVerificationCode/);
+ assert.doesNotMatch(source, /pollLuckmailVerificationCode/);
+ assert.doesNotMatch(source, /pollCloudflareTempEmailVerificationCode/);
+ assert.doesNotMatch(source, /pollCloudMailVerificationCode/);
+ assert.doesNotMatch(source, /pollYydsMailVerificationCode/);
+ assert.doesNotMatch(source, /sendToMailContentScriptResilient/);
+});
+
test('background wires the Kiro register injector into desktop authorization runner', () => {
const source = fs.readFileSync('background.js', 'utf8');
const start = source.indexOf('const kiroDesktopAuthorizeRunner = self.MultiPageBackgroundKiroDesktopAuthorizeRunner?.createKiroDesktopAuthorizeRunner({');
diff --git a/tests/background-kiro-register-runner-module.test.js b/tests/background-kiro-register-runner-module.test.js
index a28ee9c..c764dd0 100644
--- a/tests/background-kiro-register-runner-module.test.js
+++ b/tests/background-kiro-register-runner-module.test.js
@@ -37,6 +37,18 @@ test('kiro register runner uses a shared 3-minute page-load timeout budget', ()
assert.match(source, /onRetryableError: buildKiroRetryRecovery\(tabId, \{\s*\.\.\.options,\s*timeoutBudget,/);
});
+test('kiro register runner delegates verification mail polling to the shared flow mail service', () => {
+ const source = fs.readFileSync('flows/kiro/background/register-runner.js', 'utf8');
+ assert.match(source, /pollFlowVerificationCode/);
+ assert.doesNotMatch(source, /buildKiroVerificationPollPayload/);
+ assert.doesNotMatch(source, /pollHotmailVerificationCode/);
+ assert.doesNotMatch(source, /pollLuckmailVerificationCode/);
+ assert.doesNotMatch(source, /pollCloudflareTempEmailVerificationCode/);
+ assert.doesNotMatch(source, /pollCloudMailVerificationCode/);
+ assert.doesNotMatch(source, /pollYydsMailVerificationCode/);
+ assert.doesNotMatch(source, /sendToMailContentScriptResilient/);
+});
+
test('kiro register consent step treats Kiro Web signed-in page as completion', () => {
const source = fs.readFileSync('flows/kiro/background/register-runner.js', 'utf8');
assert.match(source, /readKiroRegisterPageState\(tabId, \{/);
diff --git a/tests/background-mail-rule-registry-module.test.js b/tests/background-mail-rule-registry-module.test.js
index f63dac8..facd548 100644
--- a/tests/background-mail-rule-registry-module.test.js
+++ b/tests/background-mail-rule-registry-module.test.js
@@ -2,10 +2,13 @@ const test = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');
-test('background imports mail rule registry and OpenAI mail rules modules', () => {
+test('background imports mail rule registry and flow mail rules modules', () => {
const source = fs.readFileSync('background.js', 'utf8');
assert.match(source, /background\/mail-rule-registry\.js/);
assert.match(source, /flows\/openai\/mail-rules\.js/);
+ assert.match(source, /flows\/kiro\/mail-rules\.js/);
+ assert.match(source, /flows\/grok\/mail-rules\.js/);
+ assert.match(source, /background\/flow-mail-polling\.js/);
});
test('mail rule registry exposes canonical OpenAI verification poll payloads', () => {
@@ -133,3 +136,185 @@ test('mail rule registry rejects unknown active flow ids instead of silently usi
/未找到 flow=site-a 的邮件轮询规则构造器/
);
});
+
+test('mail rule registry exposes Kiro AWS verification poll payloads by node', () => {
+ const stateSource = fs.readFileSync('flows/kiro/background/state.js', 'utf8');
+ const registrySource = fs.readFileSync('background/mail-rule-registry.js', 'utf8');
+ const kiroSource = fs.readFileSync('flows/kiro/mail-rules.js', 'utf8');
+ const globalScope = {};
+ new Function('self', `${stateSource}; ${registrySource}; ${kiroSource}; return self;`)(globalScope);
+
+ const kiroMailRules = globalScope.MultiPageKiroMailRules.createKiroMailRules({
+ LUCKMAIL_PROVIDER: 'luckmail-api',
+ MAIL_2925_VERIFICATION_INTERVAL_MS: 16000,
+ MAIL_2925_VERIFICATION_MAX_ATTEMPTS: 17,
+ });
+ const registry = globalScope.MultiPageBackgroundMailRuleRegistry.createMailRuleRegistry({
+ defaultFlowId: 'openai',
+ flowBuilders: {
+ kiro: kiroMailRules,
+ },
+ });
+ const baseState = {
+ activeFlowId: 'kiro',
+ mailProvider: '2925',
+ mail2925Mode: 'receive',
+ runtimeState: {
+ flowState: {
+ kiro: {
+ register: {
+ email: 'kiro-user@example.com',
+ },
+ },
+ },
+ },
+ };
+
+ assert.deepEqual(
+ registry.buildVerificationPollPayloadForNode(
+ 'kiro-submit-verification-code',
+ baseState,
+ { filterAfterTimestamp: 12345 }
+ ),
+ {
+ flowId: 'kiro',
+ ruleId: 'kiro-submit-verification-code',
+ nodeId: 'kiro-submit-verification-code',
+ step: 4,
+ artifactType: 'code',
+ codePatterns: [
+ {
+ source: '(?:verification\\s*code|验证码|Your code is|code is)[：:\\s]*(\\d{6})',
+ flags: 'gi',
+ },
+ {
+ source: '^\\s*(\\d{6})\\s*$',
+ flags: 'gm',
+ },
+ {
+ source: '>\\s*(\\d{6})\\s*<',
+ flags: 'g',
+ },
+ ],
+ filterAfterTimestamp: 12345,
+ requiredKeywords: ['verification', '验证码', 'code', 'aws'],
+ senderFilters: [
+ 'no-reply@signin.aws',
+ 'no-reply@login.awsapps.com',
+ 'noreply@amazon.com',
+ 'account-update@amazon.com',
+ 'no-reply@aws.amazon.com',
+ 'noreply@aws.amazon.com',
+ 'aws',
+ ],
+ subjectFilters: ['aws builder id', 'verification', '验证码', 'code', 'aws'],
+ targetEmail: 'kiro-user@example.com',
+ targetEmailHints: ['kiro-user@example.com'],
+ mail2925MatchTargetEmail: true,
+ maxAttempts: 17,
+ intervalMs: 16000,
+ }
+ );
+
+ const desktopPayload = registry.buildVerificationPollPayloadForNode(
+ 'kiro-complete-desktop-authorize',
+ {
+ ...baseState,
+ mailProvider: 'luckmail-api',
+ mail2925Mode: 'provide',
+ }
+ );
+ assert.equal(desktopPayload.ruleId, 'kiro-complete-desktop-authorize');
+ assert.equal(desktopPayload.step, 8);
+ assert.equal(desktopPayload.mail2925MatchTargetEmail, false);
+ assert.equal(desktopPayload.maxAttempts, 3);
+ assert.equal(desktopPayload.intervalMs, 15000);
+});
+
+test('mail rule registry exposes Grok xAI verification poll payloads by node', () => {
+ const stateSource = fs.readFileSync('flows/grok/background/state.js', 'utf8');
+ const registrySource = fs.readFileSync('background/mail-rule-registry.js', 'utf8');
+ const grokSource = fs.readFileSync('flows/grok/mail-rules.js', 'utf8');
+ const globalScope = {};
+ new Function('self', `${stateSource}; ${registrySource}; ${grokSource}; return self;`)(globalScope);
+
+ const grokMailRules = globalScope.MultiPageGrokMailRules.createGrokMailRules({
+ LUCKMAIL_PROVIDER: 'luckmail-api',
+ MAIL_2925_VERIFICATION_INTERVAL_MS: 16000,
+ MAIL_2925_VERIFICATION_MAX_ATTEMPTS: 17,
+ });
+ const registry = globalScope.MultiPageBackgroundMailRuleRegistry.createMailRuleRegistry({
+ defaultFlowId: 'openai',
+ flowBuilders: {
+ grok: grokMailRules,
+ },
+ });
+
+ assert.deepEqual(
+ registry.buildVerificationPollPayloadForNode(
+ 'grok-submit-verification-code',
+ {
+ activeFlowId: 'grok',
+ mailProvider: '2925',
+ mail2925Mode: 'receive',
+ runtimeState: {
+ flowState: {
+ grok: {
+ register: {
+ email: 'grok-user@example.com',
+ },
+ },
+ },
+ },
+ },
+ { filterAfterTimestamp: 12345 }
+ ),
+ {
+ flowId: 'grok',
+ ruleId: 'grok-submit-verification-code',
+ nodeId: 'grok-submit-verification-code',
+ step: 3,
+ artifactType: 'code',
+ codePatterns: [
+ {
+ source: '\\b([A-Z0-9]{3}-[A-Z0-9]{3})\\b',
+ flags: 'gi',
+ },
+ {
+ source: '(?:verification\\s*code|confirmation\\s*code|code\\s*is)[：:\\s]*(\\d{6})',
+ flags: 'gi',
+ },
+ {
+ source: '(?:验证码|代码|确认码)[：:\\s为]+(\\d{6})',
+ flags: 'gi',
+ },
+ {
+ source: '(? {
+ const source = fs.readFileSync('background/message-router.js', 'utf8');
+ const globalScope = { console };
+ const api = new Function('self', `${source}; return self.MultiPageBackgroundMessageRouter;`)(globalScope);
+ let called = false;
+ const router = api.createMessageRouter({
+ clearGrokSsoCookies: async () => {
+ called = true;
+ return {
+ ok: true,
+ state: {
+ grokSsoCookie: '',
+ grokSsoCookies: [],
+ runtimeState: {
+ flowState: {
+ grok: {
+ sso: {
+ currentCookie: '',
+ cookies: [],
+ extractedAt: 0,
+ },
+ },
+ },
+ },
+ },
+ };
+ },
+ });
+
+ const response = await router.handleMessage({
+ type: 'CLEAR_GROK_SSO_COOKIES',
+ source: 'sidepanel',
+ payload: {},
+ });
+
+ assert.equal(called, true);
+ assert.equal(response.ok, true);
+ assert.deepStrictEqual(response.state.grokSsoCookies, []);
+ assert.equal(response.state.runtimeState.flowState.grok.sso.currentCookie, '');
+});
+
test('SAVE_SETTING syncs canonical kiro settingsState back into session state', async () => {
const source = fs.readFileSync('background/message-router.js', 'utf8');
const globalScope = { console };
diff --git a/tests/background-step-registry.test.js b/tests/background-step-registry.test.js
index aca3ac2..a3cf0c9 100644
--- a/tests/background-step-registry.test.js
+++ b/tests/background-step-registry.test.js
@@ -17,11 +17,14 @@ test('background imports node registry and wires the rebuilt Kiro executors', ()
assert.match(source, /flows\/kiro\/background\/desktop-client\.js/);
assert.match(source, /flows\/kiro\/background\/desktop-authorize-runner\.js/);
assert.match(source, /flows\/kiro\/background\/publisher-kiro-rs\.js/);
+ assert.match(source, /flows\/grok\/background\/state\.js/);
+ assert.match(source, /flows\/grok\/background\/register-runner\.js/);
assert.doesNotMatch(source, /background\/steps\/kiro-device-auth\.js/);
assert.match(source, /const kiroRegisterRunner = self\.MultiPageBackgroundKiroRegisterRunner\?\.createKiroRegisterRunner\(/);
assert.match(source, /const kiroDesktopAuthorizeRunner = self\.MultiPageBackgroundKiroDesktopAuthorizeRunner\?\.createKiroDesktopAuthorizeRunner\(/);
assert.match(source, /const kiroPublisher = self\.MultiPageBackgroundKiroPublisherKiroRs\?\.createKiroRsPublisher\(/);
+ assert.match(source, /const grokRegisterRunner = self\.MultiPageBackgroundGrokRegisterRunner\?\.createGrokRegisterRunner\(/);
assert.match(source, /'kiro-open-register-page': \(state\) => kiroRegisterRunner\.executeKiroOpenRegisterPage\(state\)/);
assert.match(source, /'kiro-submit-email': \(state\) => kiroRegisterRunner\.executeKiroSubmitEmail\(state\)/);
@@ -32,11 +35,20 @@ test('background imports node registry and wires the rebuilt Kiro executors', ()
assert.match(source, /'kiro-start-desktop-authorize': \(state\) => kiroDesktopAuthorizeRunner\.executeKiroStartDesktopAuthorize\(state\)/);
assert.match(source, /'kiro-complete-desktop-authorize': \(state\) => kiroDesktopAuthorizeRunner\.executeKiroCompleteDesktopAuthorize\(state\)/);
assert.match(source, /'kiro-upload-credential': \(state\) => kiroPublisher\.executeKiroUploadCredential\(state\)/);
+ assert.match(source, /'grok-open-signup-page': \(state\) => grokRegisterRunner\.executeGrokOpenSignupPage\(state\)/);
+ assert.match(source, /'grok-submit-email': \(state\) => grokRegisterRunner\.executeGrokSubmitEmail\(state\)/);
+ assert.match(source, /'grok-submit-verification-code': \(state\) => grokRegisterRunner\.executeGrokSubmitVerificationCode\(state\)/);
+ assert.match(source, /'grok-submit-profile': \(state\) => grokRegisterRunner\.executeGrokSubmitProfile\(state\)/);
+ assert.match(source, /'grok-extract-sso-cookie': \(state\) => grokRegisterRunner\.executeGrokExtractSsoCookie\(state\)/);
assert.match(
source,
/'kiro-open-register-page',[\s\S]*'kiro-submit-email',[\s\S]*'kiro-submit-name',[\s\S]*'kiro-submit-verification-code',[\s\S]*'kiro-submit-password',[\s\S]*'kiro-complete-register-consent',[\s\S]*'kiro-start-desktop-authorize',[\s\S]*'kiro-complete-desktop-authorize',[\s\S]*'kiro-upload-credential'/
);
+ assert.match(
+ source,
+ /'grok-open-signup-page',[\s\S]*'grok-submit-email',[\s\S]*'grok-submit-verification-code',[\s\S]*'grok-submit-profile',[\s\S]*'grok-extract-sso-cookie'/
+ );
});
test('GoPay approve executor receives debugger click and manual OTP helpers', () => {
diff --git a/tests/contribution-registry.test.js b/tests/contribution-registry.test.js
index dfed168..bbaabda 100644
--- a/tests/contribution-registry.test.js
+++ b/tests/contribution-registry.test.js
@@ -69,9 +69,23 @@ test('contribution registry resolves the combined tutorial entry per flow', () =
);
});
+test('contribution registry keeps Grok SSO export flow out of published contribution checks', () => {
+ const api = loadApi();
+
+ assert.equal(api.getContributionTutorialEntry('grok'), null);
+ assert.deepEqual(api.getContributionAdapterIds('grok'), []);
+ assert.deepEqual(api.getPublishedContributionFlowIds(['openai', 'kiro', 'grok']), ['openai', 'kiro']);
+ assert.throws(
+ () => api.assertPublishedFlowsHaveContributionAdapters(['grok']),
+ /缺少账号贡献适配器：grok/
+ );
+});
+
test('contribution registry fails fast when a published flow has no adapter', () => {
const api = loadApi();
+ assert.deepEqual(api.getPublishedContributionFlowIds(), ['openai', 'kiro']);
+ assert.equal(api.assertPublishedFlowsHaveContributionAdapters(), true);
assert.equal(api.assertPublishedFlowsHaveContributionAdapters(['openai', 'kiro']), true);
assert.throws(
() => api.assertPublishedFlowsHaveContributionAdapters(['openai', 'missing-flow']),
diff --git a/tests/flow-capabilities-module.test.js b/tests/flow-capabilities-module.test.js
index fa73b35..b6131de 100644
--- a/tests/flow-capabilities-module.test.js
+++ b/tests/flow-capabilities-module.test.js
@@ -98,6 +98,36 @@ test('flow capability registry exposes Kiro as an independent flow with its own
);
});
+test('flow capability registry exposes Grok as an independent SSO flow without OpenAI-only modes', () => {
+ const api = loadApi();
+ const registry = api.createFlowCapabilityRegistry();
+
+ const capabilityState = registry.resolveSidepanelCapabilities({
+ state: {
+ activeFlowId: 'grok',
+ targetId: 'webchat2api',
+ signupMethod: 'phone',
+ plusModeEnabled: true,
+ phoneVerificationEnabled: true,
+ accountContributionEnabled: true,
+ },
+ });
+
+ assert.equal(capabilityState.activeFlowId, 'grok');
+ assert.equal(capabilityState.canShowPhoneSettings, false);
+ assert.equal(capabilityState.canShowPlusSettings, false);
+ assert.equal(capabilityState.canShowContributionMode, false);
+ assert.equal(capabilityState.canShowLuckmail, false);
+ assert.equal(capabilityState.effectiveSignupMethod, 'email');
+ assert.equal(capabilityState.effectiveTargetId, 'webchat2api');
+ assert.deepEqual(capabilityState.supportedTargetIds, ['webchat2api']);
+ assert.deepEqual(capabilityState.flowCapabilities.contributionAdapterIds, []);
+ assert.deepEqual(
+ capabilityState.visibleGroupIds,
+ ['grok-runtime-status', 'grok-target-webchat2api', 'service-account', 'service-email', 'service-proxy']
+ );
+});
+
test('flow capability registry exposes shared auto-run validation for phone locks and target support', () => {
const api = loadApi();
const registry = api.createFlowCapabilityRegistry({
diff --git a/tests/flow-registry-settings-schema.test.js b/tests/flow-registry-settings-schema.test.js
index 0d9809f..0c9169c 100644
--- a/tests/flow-registry-settings-schema.test.js
+++ b/tests/flow-registry-settings-schema.test.js
@@ -16,12 +16,14 @@ function loadApis() {
test('flow registry exposes canonical flow and target metadata', () => {
const { flowRegistry } = loadApis();
- assert.deepEqual(flowRegistry.getRegisteredFlowIds(), ['openai', 'kiro']);
+ assert.deepEqual(flowRegistry.getRegisteredFlowIds(), ['openai', 'kiro', 'grok']);
assert.equal(flowRegistry.normalizeFlowId('kiro'), 'kiro');
+ assert.equal(flowRegistry.normalizeFlowId('grok'), 'grok');
assert.equal(flowRegistry.normalizeFlowId('unknown'), 'openai');
assert.equal(flowRegistry.getFlowLabel('openai'), 'Codex / OpenAI');
assert.equal(flowRegistry.normalizeTargetId('openai', 'sub2api'), 'sub2api');
assert.equal(flowRegistry.normalizeTargetId('kiro', 'anything-else'), 'kiro-rs');
+ assert.equal(flowRegistry.normalizeTargetId('grok', 'anything-else'), 'webchat2api');
assert.deepEqual(
flowRegistry.getVisibleGroupIds('openai', 'cpa'),
['openai-plus', 'openai-phone', 'openai-oauth', 'openai-step6', 'openai-target-cpa', 'service-account', 'service-email', 'service-proxy']
@@ -30,10 +32,18 @@ test('flow registry exposes canonical flow and target metadata', () => {
flowRegistry.getVisibleGroupIds('kiro', 'kiro-rs'),
['kiro-runtime-status', 'kiro-target-kiro-rs', 'service-account', 'service-email', 'service-proxy']
);
+ assert.deepEqual(
+ flowRegistry.getVisibleGroupIds('grok', 'webchat2api'),
+ ['grok-runtime-status', 'grok-target-webchat2api', 'service-account', 'service-email', 'service-proxy']
+ );
assert.deepEqual(
flowRegistry.getTargetOptions('openai').map((entry) => entry.id),
['cpa', 'sub2api', 'codex2api']
);
+ assert.deepEqual(
+ flowRegistry.getTargetOptions('grok').map((entry) => entry.id),
+ ['webchat2api']
+ );
assert.deepEqual(
flowRegistry.getSettingsGroupDefinition('openai-plus')?.rowIds,
['row-plus-mode', 'row-plus-account-access-strategy', 'row-plus-payment-method']
@@ -41,6 +51,8 @@ test('flow registry exposes canonical flow and target metadata', () => {
assert.equal(flowRegistry.getPublicationTargetDefinition('kiro', 'kiro-rs')?.label, 'kiro.rs');
assert.equal(flowRegistry.getFlowCapabilities('openai').supportsAccountContribution, true);
assert.equal(flowRegistry.getFlowCapabilities('kiro').supportsAccountContribution, true);
+ assert.equal(flowRegistry.getFlowCapabilities('grok').supportsAccountContribution, false);
+ assert.deepEqual(flowRegistry.getFlowCapabilities('grok').supportedTargetIds, ['webchat2api']);
assert.deepEqual(
flowRegistry.getFlowCapabilities('openai').contributionAdapterIds,
['openai-oauth', 'openai-codex-file', 'openai-sub2api-file']
@@ -49,6 +61,7 @@ test('flow registry exposes canonical flow and target metadata', () => {
flowRegistry.getFlowCapabilities('kiro').contributionAdapterIds,
['kiro-builder-id']
);
+ assert.deepEqual(flowRegistry.getFlowCapabilities('grok').contributionAdapterIds, []);
});
test('settings schema normalizes view input into canonical nested namespaces', () => {
@@ -68,6 +81,7 @@ test('settings schema normalizes view input into canonical nested namespaces', (
stepExecutionRangeByFlow: {
openai: { enabled: true, fromStep: 2, toStep: 9 },
kiro: { enabled: true, fromStep: 1, toStep: 9 },
+ grok: { enabled: true, fromStep: 2, toStep: 4 },
},
});
@@ -78,6 +92,7 @@ test('settings schema normalizes view input into canonical nested namespaces', (
assert.equal(normalized.flows.openai.selectedTargetId, 'cpa');
assert.equal(normalized.flows.openai.plus.plusAccountAccessStrategy, 'sub2api_codex_session');
assert.equal(normalized.flows.kiro.selectedTargetId, 'kiro-rs');
+ assert.equal(normalized.flows.grok.selectedTargetId, 'webchat2api');
assert.equal(normalized.flows.kiro.targets['kiro-rs'].baseUrl, 'https://kiro.example.com/admin');
assert.equal(normalized.flows.kiro.targets['kiro-rs'].apiKey, 'secret-key');
assert.deepEqual(normalized.flows.kiro.autoRun.stepExecutionRange, {
@@ -85,6 +100,11 @@ test('settings schema normalizes view input into canonical nested namespaces', (
fromStep: 1,
toStep: 9,
});
+ assert.deepEqual(normalized.flows.grok.autoRun.stepExecutionRange, {
+ enabled: true,
+ fromStep: 2,
+ toStep: 4,
+ });
});
test('settings schema lets explicit flat step range override stale canonical range', () => {
@@ -130,6 +150,11 @@ test('settings schema can project canonical state into a read view without legac
assert.equal(view.plusAccountAccessStrategy, 'sub2api_codex_session');
assert.equal(view.settingsSchemaVersion, 5);
assert.equal(view.settingsState.activeFlowId, 'kiro');
+ assert.deepEqual(view.stepExecutionRangeByFlow.grok, {
+ enabled: false,
+ fromStep: 1,
+ toStep: 5,
+ });
});
test('settings schema preserves CPA session strategy in canonical state and read view', () => {
@@ -143,3 +168,99 @@ test('settings schema preserves CPA session strategy in canonical state and read
assert.equal(normalized.flows.openai.plus.plusAccountAccessStrategy, 'cpa_codex_session');
assert.equal(view.plusAccountAccessStrategy, 'cpa_codex_session');
});
+
+test('settings schema preserves registered custom flow settings without openai/kiro hardcoding', () => {
+ const { settingsSchema } = loadApis();
+ const customFlowRegistry = {
+ DEFAULT_FLOW_ID: 'openai',
+ getRegisteredFlowIds: () => ['openai', 'kiro', 'sample'],
+ getDefaultTargetId(flowId) {
+ return flowId === 'sample' ? 'sample-target' : (flowId === 'kiro' ? 'kiro-rs' : 'cpa');
+ },
+ getFlowDefinition(flowId) {
+ if (flowId !== 'sample') {
+ return null;
+ }
+ return {
+ id: 'sample',
+ defaultTargetId: 'sample-target',
+ settingsDefaults: {
+ targets: {
+ 'sample-target': {
+ endpoint: 'https://sample.example.com',
+ },
+ },
+ autoRun: {
+ stepExecutionRange: { enabled: false, fromStep: 1, toStep: 3 },
+ },
+ },
+ };
+ },
+ getTargetDefinitions(flowId) {
+ if (flowId === 'sample') {
+ return {
+ 'sample-target': { id: 'sample-target', label: 'Sample Target' },
+ };
+ }
+ if (flowId === 'kiro') {
+ return {
+ 'kiro-rs': { id: 'kiro-rs', label: 'kiro.rs' },
+ };
+ }
+ return {
+ cpa: { id: 'cpa', label: 'CPA' },
+ sub2api: { id: 'sub2api', label: 'SUB2API' },
+ codex2api: { id: 'codex2api', label: 'Codex2API' },
+ };
+ },
+ normalizeFlowId(value = '', fallback = 'openai') {
+ const normalized = String(value || '').trim().toLowerCase();
+ return ['openai', 'kiro', 'sample'].includes(normalized)
+ ? normalized
+ : (['openai', 'kiro', 'sample'].includes(fallback) ? fallback : 'openai');
+ },
+ normalizeTargetId(flowId, targetId = '', fallback = '') {
+ const targets = Object.keys(customFlowRegistry.getTargetDefinitions(flowId));
+ const normalized = String(targetId || '').trim().toLowerCase();
+ if (targets.includes(normalized)) {
+ return normalized;
+ }
+ if (targets.includes(fallback)) {
+ return fallback;
+ }
+ return customFlowRegistry.getDefaultTargetId(flowId);
+ },
+ };
+ const schema = settingsSchema.createSettingsSchema({ flowRegistry: customFlowRegistry });
+
+ const normalized = schema.normalizeSettingsState({
+ activeFlowId: 'sample',
+ targetId: 'sample-target',
+ settingsState: {
+ flows: {
+ sample: {
+ selectedTargetId: 'sample-target',
+ targets: {
+ 'sample-target': {
+ endpoint: 'https://custom.example.com',
+ },
+ },
+ autoRun: {
+ stepExecutionRange: { enabled: true, fromStep: 2, toStep: 3 },
+ },
+ },
+ },
+ },
+ });
+ const view = schema.buildSettingsView(normalized);
+
+ assert.equal(normalized.activeFlowId, 'sample');
+ assert.equal(normalized.flows.sample.selectedTargetId, 'sample-target');
+ assert.equal(normalized.flows.sample.targets['sample-target'].endpoint, 'https://custom.example.com');
+ assert.deepEqual(view.stepExecutionRangeByFlow.sample, {
+ enabled: true,
+ fromStep: 2,
+ toStep: 3,
+ });
+ assert.equal(schema.getSelectedTargetId(normalized, 'sample'), 'sample-target');
+});
diff --git a/tests/grok-runner.test.js b/tests/grok-runner.test.js
new file mode 100644
index 0000000..1b5d652
--- /dev/null
+++ b/tests/grok-runner.test.js
@@ -0,0 +1,185 @@
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+
+function loadGrokRunnerApi() {
+ const source = fs.readFileSync('flows/grok/background/register-runner.js', 'utf8');
+ const globalScope = {};
+ return new Function('self', `${source}; return self.MultiPageBackgroundGrokRegisterRunner;`)(globalScope);
+}
+
+function getGrokRuntime(state = {}) {
+ return state?.runtimeState?.flowState?.grok || {};
+}
+
+test('grok runner delegates verification polling to the shared flow mail service', () => {
+ const source = fs.readFileSync('flows/grok/background/register-runner.js', 'utf8');
+ assert.match(source, /pollFlowVerificationCode/);
+ assert.doesNotMatch(source, /buildGrokVerificationPollPayload/);
+ assert.doesNotMatch(source, /pollHotmailVerificationCode/);
+ assert.doesNotMatch(source, /pollLuckmailVerificationCode/);
+ assert.doesNotMatch(source, /pollCloudflareTempEmailVerificationCode/);
+ assert.doesNotMatch(source, /pollCloudMailVerificationCode/);
+ assert.doesNotMatch(source, /pollYydsMailVerificationCode/);
+ assert.doesNotMatch(source, /sendToMailContentScriptResilient/);
+});
+
+test('grok content script does not patch global MouseEvent prototypes', () => {
+ const source = fs.readFileSync('flows/grok/content/register-page.js', 'utf8');
+ assert.doesNotMatch(source, /MouseEvent\.prototype/);
+ assert.doesNotMatch(source, /Object\.defineProperty\(MouseEvent/);
+ assert.match(source, /screenX:/);
+ assert.match(source, /screenY:/);
+});
+
+test('grok verification runner polls by flow node and submits normalized code', async () => {
+ const api = loadGrokRunnerApi();
+ const calls = [];
+ let completedPayload = null;
+ let currentState = {
+ activeFlowId: 'grok',
+ mailProvider: '2925',
+ grokRegisterTabId: 101,
+ grokEmail: 'grok-user@example.com',
+ grokVerificationRequestedAt: 1000000,
+ runtimeState: {
+ flowState: {
+ grok: {
+ session: {
+ registerTabId: 101,
+ },
+ register: {
+ email: 'grok-user@example.com',
+ verificationRequestedAt: 1000000,
+ },
+ },
+ },
+ },
+ };
+ const runner = api.createGrokRegisterRunner({
+ addLog: async () => {},
+ chrome: {
+ tabs: {
+ get: async (tabId) => ({ id: tabId }),
+ update: async () => {},
+ },
+ },
+ completeNodeFromBackground: async (_nodeId, payload) => {
+ completedPayload = payload;
+ },
+ ensureContentScriptReadyOnTab: async () => {},
+ getState: async () => currentState,
+ getTabId: async () => 101,
+ isTabAlive: async () => true,
+ pollFlowVerificationCode: async (options) => {
+ calls.push({ type: 'poll', options });
+ return { code: 'ABC-123', messageId: 'mail-001' };
+ },
+ registerTab: async () => {},
+ sendToContentScriptResilient: async (sourceId, message) => {
+ calls.push({ type: 'send', sourceId, message });
+ return { submitted: true, state: 'profile_entry', url: 'https://accounts.x.ai/profile' };
+ },
+ setState: async (patch) => {
+ currentState = { ...currentState, ...patch };
+ },
+ waitForTabStableComplete: async () => {},
+ });
+
+ await runner.executeGrokSubmitVerificationCode({ nodeId: 'grok-submit-verification-code', ...currentState });
+
+ const pollCall = calls.find((entry) => entry.type === 'poll');
+ assert.equal(pollCall.options.flowId, 'grok');
+ assert.equal(pollCall.options.nodeId, 'grok-submit-verification-code');
+ assert.equal(pollCall.options.step, 3);
+ assert.equal(pollCall.options.logStep, 3);
+ assert.equal(pollCall.options.filterAfterTimestamp, 400000);
+ assert.equal(pollCall.options.state.activeFlowId, 'grok');
+ assert.equal(pollCall.options.state.visibleStep, 3);
+
+ const sendCall = calls.find((entry) => entry.type === 'send');
+ assert.equal(sendCall.sourceId, 'grok-register-page');
+ assert.equal(sendCall.message.type, 'EXECUTE_NODE');
+ assert.equal(sendCall.message.nodeId, 'grok-submit-verification-code');
+ assert.deepEqual(sendCall.message.payload, { code: 'ABC123' });
+
+ assert.equal(completedPayload.grokVerificationCode, 'ABC123');
+ assert.equal(completedPayload.grokVerificationRawCode, 'ABC-123');
+ assert.equal(completedPayload.grokVerificationMessageId, 'mail-001');
+ assert.equal(getGrokRuntime(completedPayload).register.verificationCode, 'ABC123');
+ assert.equal(getGrokRuntime(completedPayload).register.status, 'verified');
+});
+
+test('grok SSO extraction accumulates unique cookies without logging the secret value', async () => {
+ const api = loadGrokRunnerApi();
+ const logs = [];
+ let completedPayload = null;
+ let markUsedPayload = null;
+ let currentState = {
+ activeFlowId: 'grok',
+ grokRegisterTabId: 202,
+ grokSsoCookies: ['existing-cookie', 'new-cookie'],
+ runtimeState: {
+ flowState: {
+ grok: {
+ session: {
+ registerTabId: 202,
+ },
+ sso: {
+ cookies: ['existing-cookie', 'new-cookie'],
+ },
+ },
+ },
+ },
+ };
+ const runner = api.createGrokRegisterRunner({
+ addLog: async (message, level) => {
+ logs.push({ message, level });
+ },
+ chrome: {
+ cookies: {
+ get: async () => ({ value: 'new-cookie' }),
+ },
+ tabs: {
+ get: async (tabId) => ({ id: tabId }),
+ update: async () => {},
+ },
+ },
+ completeNodeFromBackground: async (_nodeId, payload) => {
+ completedPayload = payload;
+ },
+ ensureContentScriptReadyOnTab: async () => {},
+ getState: async () => currentState,
+ getTabId: async () => 202,
+ isTabAlive: async () => true,
+ markCurrentRegistrationAccountUsed: async (state) => {
+ markUsedPayload = state;
+ },
+ registerTab: async () => {},
+ sendToContentScriptResilient: async () => {
+ throw new Error('content fallback should not be used when chrome.cookies finds sso');
+ },
+ setState: async (patch) => {
+ currentState = { ...currentState, ...patch };
+ },
+ sleepWithStop: async () => {},
+ waitForTabStableComplete: async () => {},
+ });
+
+ await runner.executeGrokExtractSsoCookie({ nodeId: 'grok-extract-sso-cookie', ...currentState });
+
+ assert.equal(completedPayload.grokSsoCookie, 'new-cookie');
+ assert.deepEqual(completedPayload.grokSsoCookies, ['existing-cookie', 'new-cookie']);
+ assert.equal(getGrokRuntime(completedPayload).sso.currentCookie, 'new-cookie');
+ assert.deepEqual(getGrokRuntime(completedPayload).sso.cookies, ['existing-cookie', 'new-cookie']);
+ assert.equal(markUsedPayload.grokSsoCookie, 'new-cookie');
+ assert.equal(logs.some(({ message }) => message.includes('new-cookie')), false);
+});
+
+test('grok register runner requires background node completion dependency', () => {
+ const api = loadGrokRunnerApi();
+ assert.throws(
+ () => api.createGrokRegisterRunner({}),
+ /requires completeNodeFromBackground/
+ );
+});
diff --git a/tests/helpers/script-bundles.js b/tests/helpers/script-bundles.js
index 632294e..1efc685 100644
--- a/tests/helpers/script-bundles.js
+++ b/tests/helpers/script-bundles.js
@@ -3,12 +3,14 @@ const fs = require('node:fs');
const FLOW_DEFINITION_FILES = Object.freeze([
'flows/openai/index.js',
'flows/kiro/index.js',
+ 'flows/grok/index.js',
'flows/index.js',
]);
const FLOW_WORKFLOW_FILES = Object.freeze([
'flows/openai/workflow.js',
'flows/kiro/workflow.js',
+ 'flows/grok/workflow.js',
]);
function readBundle(files = []) {
diff --git a/tests/sidepanel-flow-source-registry.test.js b/tests/sidepanel-flow-source-registry.test.js
index 67cf0e6..f248545 100644
--- a/tests/sidepanel-flow-source-registry.test.js
+++ b/tests/sidepanel-flow-source-registry.test.js
@@ -36,6 +36,7 @@ function extractFunction(source, name) {
test('sidepanel html exposes flow selector and kiro source fields', () => {
[
'id="select-flow"',
+ '',
'id="label-source-selector"',
'id="row-step6-cookie-settings"',
'id="row-kiro-rs-url"',
@@ -46,9 +47,90 @@ test('sidepanel html exposes flow selector and kiro source fields', () => {
'id="row-kiro-web-status"',
'id="row-kiro-login-url"',
'id="row-kiro-upload-status"',
+ 'id="row-grok-register-status"',
+ 'id="row-grok-sso-status"',
+ 'id="row-grok-sso-settings"',
+ 'id="btn-copy-grok-sso"',
+ 'id="btn-export-grok-sso"',
+ 'id="btn-clear-grok-sso"',
+ '',
+ '',
].forEach((snippet) => {
assert.match(sidepanelHtml, new RegExp(snippet.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')));
});
+ assert.ok(
+ sidepanelHtml.indexOf('')
+ < sidepanelHtml.indexOf('')
+ );
+ assert.ok(
+ sidepanelHtml.indexOf('')
+ < sidepanelHtml.indexOf('')
+ );
+});
+
+test('sidepanel Grok SSO clear action goes through background message instead of direct storage writes', () => {
+ const clearButtonIndex = sidepanelSource.indexOf("btnClearGrokSso?.addEventListener('click'");
+ assert.notEqual(clearButtonIndex, -1);
+ const nextManagerIndex = sidepanelSource.indexOf('const hotmailManager', clearButtonIndex);
+ assert.notEqual(nextManagerIndex, -1);
+ const block = sidepanelSource.slice(clearButtonIndex, nextManagerIndex);
+
+ assert.match(block, /type:\s*'CLEAR_GROK_SSO_COOKIES'/);
+ assert.match(block, /chrome\.runtime\.sendMessage/);
+ assert.doesNotMatch(block, /chrome\.storage/);
+ assert.doesNotMatch(block, /storage\.local\.set/);
+});
+
+test('sidepanel renders Grok SSO status from canonical runtime state', () => {
+ const bundle = [
+ extractFunction(sidepanelSource, 'getGrokRuntimeState'),
+ extractFunction(sidepanelSource, 'normalizeGrokSsoCookies'),
+ extractFunction(sidepanelSource, 'getGrokRegisterStatusLabel'),
+ extractFunction(sidepanelSource, 'renderGrokRuntimeState'),
+ ].join('\n');
+
+ const api = new Function(`
+let latestState = {};
+const displayGrokRegisterStatus = { textContent: '' };
+const displayGrokSsoStatus = { textContent: '' };
+const displayGrokSsoCookie = { textContent: '', title: '' };
+const buttons = [];
+const btnCopyGrokSso = { disabled: false };
+const btnExportGrokSso = { disabled: false };
+const btnClearGrokSso = { disabled: false };
+${bundle}
+return {
+ displayGrokRegisterStatus,
+ displayGrokSsoStatus,
+ displayGrokSsoCookie,
+ btnCopyGrokSso,
+ btnExportGrokSso,
+ btnClearGrokSso,
+ renderGrokRuntimeState,
+};
+`)();
+
+ api.renderGrokRuntimeState({
+ runtimeState: {
+ flowState: {
+ grok: {
+ register: { status: 'completed' },
+ sso: {
+ currentCookie: '1234567890abcdef',
+ cookies: ['1234567890abcdef', 'second-cookie'],
+ extractedAt: 0,
+ },
+ },
+ },
+ },
+ });
+
+ assert.equal(api.displayGrokRegisterStatus.textContent, '已完成');
+ assert.match(api.displayGrokSsoStatus.textContent, /^已提取 2 条/);
+ assert.equal(api.displayGrokSsoCookie.textContent, '12345678...abcdef');
+ assert.equal(api.btnCopyGrokSso.disabled, false);
+ assert.equal(api.btnExportGrokSso.disabled, false);
+ assert.equal(api.btnClearGrokSso.disabled, false);
});
test('sidepanel Kiro GitHub button opens the configured fork', () => {
diff --git a/tests/sidepanel-icloud-provider.test.js b/tests/sidepanel-icloud-provider.test.js
index 1d61c3c..ead2abb 100644
--- a/tests/sidepanel-icloud-provider.test.js
+++ b/tests/sidepanel-icloud-provider.test.js
@@ -525,6 +525,7 @@ function updateAccountRunHistorySettingsUI() {}
function updatePhoneVerificationSettingsUI() {}
function updatePanelModeUI() {}
function updateMailProviderUI() { calls.push({ target: selectIcloudTargetMailboxType.value, provider: selectIcloudForwardMailProvider.value }); }
+function renderGrokRuntimeState() {}
function renderSub2ApiGroupOptions() {}
function isLuckmailProvider() { return false; }
function updateButtonStates() {}
diff --git a/tests/source-registry-module.test.js b/tests/source-registry-module.test.js
index 7518426..74ea244 100644
--- a/tests/source-registry-module.test.js
+++ b/tests/source-registry-module.test.js
@@ -15,6 +15,11 @@ test('background imports shared source registry module', () => {
assert.match(source, /core\/flow-kernel\/settings-schema\.js/);
assert.match(source, /core\/flow-kernel\/source-registry\.js/);
assert.match(source, /shared\/kiro-timeouts\.js/);
+ assert.match(source, /flows\/grok\/index\.js/);
+ assert.match(source, /flows\/grok\/workflow\.js/);
+ assert.match(source, /flows\/grok\/background\/state\.js/);
+ assert.match(source, /flows\/grok\/background\/register-runner\.js/);
+ assert.match(source, /flows\/grok\/mail-rules\.js/);
});
test('manifest loads shared source registry before content utils in static bundles', () => {
@@ -41,15 +46,38 @@ test('manifest no longer ships a static Kiro content bundle', () => {
assert.equal(hasStaticKiroBundle, false);
});
+test('manifest loads Grok flow definition in static bundles but not Grok content runtime', () => {
+ const manifest = JSON.parse(fs.readFileSync('manifest.json', 'utf8'));
+ for (const entry of manifest.content_scripts || []) {
+ const scripts = Array.isArray(entry.js) ? entry.js : [];
+ if (!scripts.includes('flows/index.js')) continue;
+ assert.ok(scripts.includes('flows/kiro/index.js'));
+ assert.ok(scripts.includes('flows/grok/index.js'));
+ assert.ok(
+ scripts.indexOf('flows/kiro/index.js') < scripts.indexOf('flows/grok/index.js'),
+ 'Kiro definition should load before Grok definition'
+ );
+ assert.ok(
+ scripts.indexOf('flows/grok/index.js') < scripts.indexOf('flows/index.js'),
+ 'Grok definition must load before flows/index.js'
+ );
+ assert.equal(scripts.includes('flows/grok/content/register-page.js'), false);
+ }
+});
+
test('background injects shared Kiro timeout module before Kiro content scripts', () => {
const source = fs.readFileSync('background.js', 'utf8');
assert.match(
source,
- /const KIRO_REGISTER_INJECT_FILES = \['flows\/openai\/index\.js', 'flows\/kiro\/index\.js', 'flows\/index\.js', 'core\/flow-kernel\/flow-registry\.js', 'core\/flow-kernel\/source-registry\.js', 'shared\/kiro-timeouts\.js', 'content\/utils\.js', 'flows\/kiro\/content\/register-page\.js'\];/
+ /const KIRO_REGISTER_INJECT_FILES = \['flows\/openai\/index\.js', 'flows\/kiro\/index\.js', 'flows\/grok\/index\.js', 'flows\/index\.js', 'core\/flow-kernel\/flow-registry\.js', 'core\/flow-kernel\/source-registry\.js', 'shared\/kiro-timeouts\.js', 'content\/utils\.js', 'flows\/kiro\/content\/register-page\.js'\];/
);
assert.match(
source,
- /const KIRO_DESKTOP_AUTHORIZE_INJECT_FILES = \['flows\/openai\/index\.js', 'flows\/kiro\/index\.js', 'flows\/index\.js', 'core\/flow-kernel\/flow-registry\.js', 'core\/flow-kernel\/source-registry\.js', 'shared\/kiro-timeouts\.js', 'content\/utils\.js', 'flows\/kiro\/content\/desktop-authorize-page\.js'\];/
+ /const KIRO_DESKTOP_AUTHORIZE_INJECT_FILES = \['flows\/openai\/index\.js', 'flows\/kiro\/index\.js', 'flows\/grok\/index\.js', 'flows\/index\.js', 'core\/flow-kernel\/flow-registry\.js', 'core\/flow-kernel\/source-registry\.js', 'shared\/kiro-timeouts\.js', 'content\/utils\.js', 'flows\/kiro\/content\/desktop-authorize-page\.js'\];/
+ );
+ assert.match(
+ source,
+ /const GROK_REGISTER_INJECT_FILES = \['flows\/openai\/index\.js', 'flows\/kiro\/index\.js', 'flows\/grok\/index\.js', 'flows\/index\.js', 'core\/flow-kernel\/flow-registry\.js', 'core\/flow-kernel\/source-registry\.js', 'content\/utils\.js', 'flows\/grok\/content\/register-page\.js'\];/
);
});
@@ -83,6 +111,20 @@ test('shared source registry exposes canonical Kiro sources and drivers', () =>
}),
'kiro-desktop-authorize'
);
+ assert.equal(
+ registry.detectSourceFromLocation({
+ url: 'https://accounts.x.ai/sign-up',
+ hostname: 'accounts.x.ai',
+ }),
+ 'grok-register-page'
+ );
+ assert.equal(
+ registry.detectSourceFromLocation({
+ url: 'https://grok.com/',
+ hostname: 'grok.com',
+ }),
+ 'grok-register-page'
+ );
assert.equal(
registry.detectSourceFromLocation({
url: 'https://example.com/',
@@ -115,6 +157,22 @@ test('shared source registry exposes canonical Kiro sources and drivers', () =>
),
true
);
+ assert.equal(
+ registry.matchesSourceUrlFamily(
+ 'grok-register-page',
+ 'https://accounts.x.ai/sign-up',
+ 'https://grok.com/'
+ ),
+ true
+ );
+ assert.equal(
+ registry.matchesSourceUrlFamily(
+ 'grok-register-page',
+ 'https://grok.com/',
+ 'https://accounts.x.ai/sign-up'
+ ),
+ true
+ );
assert.equal(
registry.matchesSourceUrlFamily(
'kiro-desktop-authorize',
@@ -137,4 +195,6 @@ test('shared source registry exposes canonical Kiro sources and drivers', () =>
assert.equal(registry.driverAcceptsCommand('flows/kiro/background/register-runner', 'kiro-open-register-page'), true);
assert.equal(registry.driverAcceptsCommand('flows/kiro/background/desktop-authorize-runner', 'kiro-start-desktop-authorize'), true);
assert.equal(registry.driverAcceptsCommand('flows/kiro/background/publisher-kiro-rs', 'kiro-upload-credential'), true);
+ assert.equal(registry.driverAcceptsCommand('flows/grok/content/register-page', 'grok-submit-profile'), true);
+ assert.equal(registry.driverAcceptsCommand('flows/grok/background/register-runner', 'grok-extract-sso-cookie'), true);
});
diff --git a/tests/step-definitions-module.test.js b/tests/step-definitions-module.test.js
index 180ddf4..ee5a466 100644
--- a/tests/step-definitions-module.test.js
+++ b/tests/step-definitions-module.test.js
@@ -23,6 +23,7 @@ test('step definitions module exposes ordered normal and Plus step metadata', ()
const goPaySteps = api.getSteps({ plusModeEnabled: true, plusPaymentMethod: 'gopay' });
const gpcSteps = api.getSteps({ plusModeEnabled: true, plusPaymentMethod: 'gpc-helper' });
const kiroSteps = api.getSteps({ activeFlowId: 'kiro' });
+ const grokSteps = api.getSteps({ activeFlowId: 'grok' });
assert.equal(Array.isArray(steps), true);
assert.equal(steps.length, 11);
@@ -162,8 +163,9 @@ test('step definitions module exposes ordered normal and Plus step metadata', ()
assert.equal(api.getLastStepId({ plusModeEnabled: true, signupMethod: 'phone', phoneSignupReloginAfterBindEmailEnabled: true }), 19);
assert.equal(api.hasFlow('openai'), true);
assert.equal(api.hasFlow('kiro'), true);
+ assert.equal(api.hasFlow('grok'), true);
assert.equal(api.hasFlow('site-a'), false);
- assert.deepStrictEqual(api.getRegisteredFlowIds(), ['openai', 'kiro']);
+ assert.deepStrictEqual(api.getRegisteredFlowIds(), ['openai', 'kiro', 'grok']);
assert.deepStrictEqual(api.getSteps({ activeFlowId: 'site-a' }), []);
assert.equal(api.getStepById(2, { activeFlowId: 'site-a' }), null);
assert.deepStrictEqual(
@@ -210,6 +212,36 @@ test('step definitions module exposes ordered normal and Plus step metadata', ()
[],
]
);
+ assert.deepStrictEqual(
+ grokSteps.map((step) => step.key),
+ [
+ 'grok-open-signup-page',
+ 'grok-submit-email',
+ 'grok-submit-verification-code',
+ 'grok-submit-profile',
+ 'grok-extract-sso-cookie',
+ ]
+ );
+ assert.equal(grokSteps.every((step) => step.flowId === 'grok'), true);
+ assert.equal(grokSteps[0].driverId, 'flows/grok/background/register-runner');
+ assert.equal(grokSteps[0].sourceId, 'grok-register-page');
+ assert.equal(grokSteps[2].mailRuleId, 'grok-submit-verification-code');
+ assert.deepStrictEqual(
+ grokSteps.map((step) => step.title),
+ ['打开 Grok 注册页', '获取邮箱并继续', '获取验证码并继续', '填写资料并继续', '提取 SSO Cookie']
+ );
+ assert.deepStrictEqual(api.getStepIds({ activeFlowId: 'grok' }), [1, 2, 3, 4, 5]);
+ assert.equal(api.getLastStepId({ activeFlowId: 'grok' }), 5);
+ assert.deepStrictEqual(
+ api.getNodes({ activeFlowId: 'grok' }).map((node) => node.next),
+ [
+ ['grok-submit-email'],
+ ['grok-submit-verification-code'],
+ ['grok-submit-profile'],
+ ['grok-extract-sso-cookie'],
+ [],
+ ]
+ );
assert.equal(plusSteps[6].title, '创建 Plus Checkout');
assert.equal(plusSteps[8].title, 'PayPal 登录与授权');
diff --git a/项目完整链路说明.md b/项目完整链路说明.md
index c12025e..90bb7d0 100644
--- a/项目完整链路说明.md
+++ b/项目完整链路说明.md
@@ -10,10 +10,11 @@
## 1. 项目目标
-这是一个 Chrome 扩展，用于承载多套注册与认证自动化 flow。当前已注册两条主 flow：
+这是一个 Chrome 扩展，用于承载多套注册与认证自动化 flow。当前已注册三条主 flow：
- `openai`：OpenAI / ChatGPT OAuth 注册、登录、平台绑定与 Plus 扩展链路
- `kiro`：AWS Builder ID 注册页 + 桌面授权 + `kiro.rs` 凭据上传链路
+- `grok`：Grok / xAI 注册页自动化 + `webchat2api` SSO Cookie 本地导出链路
它的核心价值不是“打开一个页面点几个按钮”，而是把下面这些环节串成一条完整可恢复的自动化链路：
@@ -28,7 +29,7 @@
- 自动确认 OAuth 同意页
- 把 localhost 回调提交到 CPA、SUB2API 或 Codex2API
-同时，这套扩展现在不再把“来源、步骤、侧边栏显隐、运行态字段”硬编码在单一 OpenAI 链路里，而是统一挂到 `flow registry + source registry + settings schema + step definitions` 这一层。Kiro 这类新 flow 可以复用共享邮箱服务与 IP 代理服务，但不会复用 OpenAI 的接码、Plus、平台绑定和贡献模式逻辑。
+同时，这套扩展现在不再把“来源、步骤、侧边栏显隐、运行态字段”硬编码在单一 OpenAI 链路里，而是统一挂到 `flow registry + source registry + settings schema + step definitions` 这一层。Kiro / Grok 这类新 flow 可以复用共享邮箱服务与 IP 代理服务，但不会复用 OpenAI 的接码、Plus、平台绑定和贡献模式逻辑。
## 2. 核心运行参与者
@@ -43,8 +44,8 @@
- 向后台发送命令
- 接收后台广播并更新 UI
- 动态渲染步骤列表
-- 维护 `activeFlowId + targetId` 的双层选择；`openai` flow 继续把 `panelMode` 归一为 legacy integration target，`kiro` flow 则使用独立的 `flows.kiro.targetId`
-- 按当前 flow capability 决定显隐分组；Kiro flow 只显示来源下拉、`kiro.rs URL / API Key`、共享邮箱服务、共享 IP 代理与 Kiro 运行状态，不显示 OpenAI 接码 / Plus / 平台绑定配置
+- 维护 `activeFlowId + targetId` 的双层选择；`openai` flow 继续把 `panelMode` 归一为 legacy integration target，`kiro` / `grok` flow 使用各自的 `flows..targetId`
+- 按当前 flow capability 决定显隐分组；Kiro flow 只显示来源下拉、`kiro.rs URL / API Key`、共享邮箱服务、共享 IP 代理与 Kiro 运行状态；Grok flow 只显示 `webchat2api` SSO 导出状态、共享账号密码、共享邮箱服务和共享 IP 代理；二者都不显示 OpenAI 接码 / Plus / 平台绑定配置
- 管理顶部“贡献”按钮与贡献模式主面板；贡献模式本身是 sidepanel 的运行态 UI 模式，不是新的 `panelMode` 来源
- 在贡献模式下复用同一套主自动流程启动，并在面板内展示贡献链路的 `OAUTH / 回调 / 总状态` 三块实时状态
- 在顶部“贡献/使用”按钮下方展示一个非强制的内容更新轻提示；提示来源于 `flowpilot.qlhazycoder.top` 的公开公告 / 教程摘要，用户关闭后仅对当前 `promptVersion` 静默，下次内容版本变化后会重新出现
@@ -150,13 +151,13 @@
- `runtimeState`：当前运行中的 node、nodeStatuses、activeRunId 等核心执行态
- `sharedState`：automation window、tab registry、最近来源 URL 这类跨 flow 共享运行态
- `serviceState`：代理、邮箱等共享服务运行态
-- `flowState`：OpenAI / Kiro 各自的 flow 私有运行态
+- `flowState`：OpenAI / Kiro / Grok 各自的 flow 私有运行态
这两个模块的作用，是把“当前该跑哪些节点”“当前 state 应该怎么看”“前后台恢复时如何合并 patch”从 `background.js` 主入口里抽离出来，避免再次退回到旧的平铺 step 状态机。
### 3.4 步骤注册
-[data/step-definitions.js](./data/step-definitions.js) 提供共享步骤元数据，并按当前 `activeFlowId` 输出 flow-specific workflow。`openai` flow 会继续按 `plusPaymentMethod / signupMethod / plusAccountAccessStrategy` 动态解析步骤标题与节点集合：当 Plus 模式为邮箱注册且来源支持时，原本的 OAuth 尾链可以被替换成 `sub2api-session-import` 或 `cpa-session-import`；`kiro` flow 则输出固定的 9 节点注册/桌面授权/上传 workflow。
+[data/step-definitions.js](./data/step-definitions.js) 提供共享步骤元数据，并按当前 `activeFlowId` 输出 flow-specific workflow。`openai` flow 会继续按 `plusPaymentMethod / signupMethod / plusAccountAccessStrategy` 动态解析步骤标题与节点集合：当 Plus 模式为邮箱注册且来源支持时，原本的 OAuth 尾链可以被替换成 `sub2api-session-import` 或 `cpa-session-import`；`kiro` flow 输出固定的 9 节点注册/桌面授权/上传 workflow；`grok` flow 输出固定的 5 节点注册与 SSO Cookie 提取 workflow。
[core/flow-kernel/step-registry.js](./core/flow-kernel/step-registry.js) 负责把“workflow node 元数据”映射到“步骤执行器”，同时保留 `flowId / nodeId / displayOrder / executeKey` 等稳定节点元数据。
这意味着：
@@ -168,7 +169,7 @@
### 3.4.1 验证码规则注册
-[background/mail-rule-registry.js](./background/mail-rule-registry.js) 负责按当前 `activeFlowId` 选择验证码规则构造器。[flows/openai/mail-rules.js](./flows/openai/mail-rules.js) 则提供 OpenAI flow 当前使用的注册验证码 / 登录验证码规则。
+[background/mail-rule-registry.js](./background/mail-rule-registry.js) 负责按当前 `activeFlowId` 选择验证码规则构造器。[flows/openai/mail-rules.js](./flows/openai/mail-rules.js) 提供 OpenAI flow 当前使用的注册验证码 / 登录验证码规则，[flows/kiro/mail-rules.js](./flows/kiro/mail-rules.js) 提供 Kiro / AWS Builder ID 注册验证码与桌面授权验证码规则，[flows/grok/mail-rules.js](./flows/grok/mail-rules.js) 提供 xAI / Grok 注册验证码规则。
这层统一产出：
@@ -180,7 +181,8 @@
它的职责边界是：
- `background/verification-flow.js` 只消费统一规则 payload，不再在每个 provider 或内容脚本里各自硬写一套 OpenAI 验证码过滤条件。
-- “邮件从哪里读”由 provider 决定，“哪封邮件算命中验证码”优先由规则注册层决定。
+- `background/flow-mail-polling.js` 负责共享的 provider 分派、iCloud / 2925 会话准备、网页邮箱标签页打开与内容脚本轮询；flow runner 只提供 `flowId / nodeId / step / filterAfterTimestamp` 这类业务上下文。
+- “邮件从哪里读”由公共轮询调度层和 provider 决定，“哪封邮件算命中验证码”优先由规则注册层决定。
- 新 flow 如需接入邮箱验证码，应优先新增自己的 mail rules builder，而不是继续改写 OpenAI 规则。
### 3.5 日志步骤号链路
@@ -214,6 +216,7 @@
- `contributionLastPollAt`
- OAuth 链接
- Kiro 运行态：使用 `kiroRuntime.session / register / webAuth / desktopAuth / upload` 命名空间，保存 Kiro 官方登录入口、Builder ID 注册页状态、Kiro Web 登录态摘要、桌面授权 PKCE 凭据、上传状态和当前 Kiro 会话进度
+- Grok 运行态：权威状态位于 `runtimeState.flowState.grok`，包含 `session / register / sso`；顶层 `grokRegisterTabId / grokPageState / grokEmail / grokPassword / grokSsoCookie / grokSsoCookies` 只作为兼容投影，不应当再形成第二套状态机
- 当前轮冻结后的注册方式 `resolvedSignupMethod`
- 当前统一账号标识 `accountIdentifierType / accountIdentifier`
- 当前邮箱 / 密码
@@ -762,9 +765,32 @@ Kiro flow 的目标不是复用 OpenAI 注册链，而是独立完成“Kiro 官
- Kiro 只复用共享账户密码、共享邮箱服务和共享 IP 代理服务，不复用 OpenAI 接码 / Plus / 平台绑定 / 贡献模式链路
- Kiro 自动运行走通用 linear node runner，但执行器、运行态、页面驱动和上传器全部独立在 `background/kiro/*` 与 `content/kiro/*`
- Kiro 运行态统一落在 `kiroRuntime` 命名空间，不再散落为多个平铺字段
+- Kiro 注册验证码与桌面授权验证码只在 runner 内计算业务时间窗，具体 AWS 邮件匹配规则由 `flows/kiro/mail-rules.js` 提供，provider 分派统一走 `background/flow-mail-polling.js`
- `kiro.rs` 上传固定发送 BuilderId profileArn `arn:aws:codewhisperer:us-east-1:638616132270:profile/AAAACCCCXXXX`，machineId 固定按 `sha256("KotlinNativeAPI/" + refreshToken)` 生成
- Kiro 注册页覆盖 `app.kiro.dev` 与 AWS Builder ID 页面；桌面授权页只绑定 AWS authorize 页面，二者由后台按 source 动态注入，避免同域 AWS 页面被错误归到另一条 Kiro 子链路
+## 6.3 Grok Flow 链路
+
+Grok flow 的目标是完成 Grok / xAI 注册页自动化，并把 `sso` Cookie 作为 `webchat2api` 可用的本地导出产物。它不是 OpenAI 目标来源，也不是公开贡献 / 发布 flow。
+
+链路如下：
+
+1. sidepanel 把当前 flow 切到 `grok`，target 固定为 `webchat2api`
+2. 步骤 1 打开 Grok / xAI 注册入口，并清理本轮注册页运行态
+3. 步骤 2 通过共享邮箱服务生成或复用注册邮箱，并提交到 xAI 登录/注册页
+4. 步骤 3 调用 `background/flow-mail-polling.js`，由 `flows/grok/mail-rules.js` 构造 xAI / Grok 验证码规则并轮询邮箱验证码，再交给 Grok 内容脚本提交
+5. 步骤 4 填写资料和密码，推进注册完成页状态
+6. 步骤 5 先通过 `chrome.cookies.get` 从 `x.ai / grok.com / accounts.x.ai` 查找 `sso` Cookie，必要时 fallback 到 Grok 内容脚本读取 `document.cookie`；提取到的值保存到 `runtimeState.flowState.grok.sso` 并投影到 `grokSsoCookie / grokSsoCookies`
+7. sidepanel 只展示掩码后的 SSO 值，复制和导出才使用完整值；清空动作必须发 `CLEAR_GROK_SSO_COOKIES` 给后台，由 `flows/grok/background/state.js` 构造 patch，不能在 sidepanel 直接写 `chrome.storage`
+
+这条链路的关键边界是：
+
+- Grok 只复用共享账户密码、共享邮箱服务和共享 IP 代理服务，不复用 OpenAI 接码 / Plus / 平台绑定 / 贡献模式链路
+- Grok 自动运行走通用 linear node runner，执行器、运行态、页面驱动和邮件规则全部放在 `flows/grok/*`
+- Grok 内容脚本不能全局 patch 浏览器原型；点击事件需要的坐标只能在局部事件参数里补齐
+- Grok SSO Cookie 是本地导出产物，`flows/grok/index.js` 的 `publicationTargets` 保持为空，`supportsAccountContribution` 保持为 `false`
+- `shared/contribution-registry.js` 的默认发布贡献校验只覆盖声明了发布目标或支持贡献的 flow；Grok 不应被自动纳入贡献 adapter 缺失检查。如果未来要把 Grok 改成正式发布 flow，必须先新增明确的 publication target 与 contribution adapter，再打开对应能力
+
## 7. 邮箱与 provider 链路
### 7.1 共享邮箱生成补充
@@ -840,8 +866,11 @@ Kiro flow 的目标不是复用 OpenAI 注册链，而是独立完成“Kiro 官
- `background/registration-email-state.js`
统一维护当前注册邮箱、上一份比较基线邮箱、来源与更新时间，并提供 Duck 生成前解析比较基线、Step 8 清空当前邮箱但保留历史基线，以及 Step 8 `add-email` 写入邮箱时保留手机号身份的共享工具。
-- `background/mail-rule-registry.js` + `flows/openai/mail-rules.js`
- 统一构造 Step 4 / Step 8 的验证码规则 payload，区分注册验证码与登录/绑定验证码，并把 `senderFilters / subjectFilters / codePatterns / targetEmailHints / mail2925MatchTargetEmail` 收敛到同一层。
+- `background/mail-rule-registry.js` + `flows/*/mail-rules.js`
+ 统一构造各 flow 的验证码规则 payload，区分 OpenAI 注册/登录验证码、Kiro 注册/桌面授权验证码与 Grok 注册验证码，并把 `senderFilters / subjectFilters / codePatterns / targetEmailHints / mail2925MatchTargetEmail` 收敛到 flow mail rules 层。
+
+- `background/flow-mail-polling.js`
+ 统一执行 flow 邮箱验证码轮询调度：读取当前邮箱配置，调用 `mailRuleRegistry.buildVerificationPollPayloadForNode`，分派 Hotmail / LuckMail / Cloudflare Temp Email / Cloud Mail / YYDS Mail 这类 API provider，并为 iCloud、2925 和普通网页邮箱准备会话与内容脚本轮询。Kiro 与后续新 flow 不应在各自 runner 内复制 provider 分派逻辑。
- `background/generated-email-helpers.js`
在原有 Duck / Cloudflare / iCloud / Cloudflare Temp Email 生成链路之外，新增 Gmail / 2925 的共享生成接入；Duck 生成前会按“侧栏当前可见邮箱 -> `registrationEmailState.current` -> `registrationEmailState.previous`”的顺序解析比较基线。
@@ -1131,6 +1160,7 @@ Hide My Email 获取与管理链路：
- 如果当前 `Mail = 自定义邮箱` 且配置了 `customMailProviderPool`，会先按当前目标轮次把号池中的对应邮箱写回运行态
- 如果当前生成方式是 `custom-pool`，会先按当前目标轮次把邮箱池中的对应邮箱写回运行态
- fresh-attempt reset 会保留 `stepExecutionRangeByFlow`，避免重置运行态时丢失用户设置的执行窗口
+ - Grok fresh-attempt reset 会清理注册页 runtime，但保留已提取的 `grokSsoCookies`，避免用户导出前被下一轮准备动作清空
5. 执行 `runAutoSequenceFromStep`
- 如果当前 `activeFlowId !== openai`，后台会切到通用 linear node runner，按当前 flow 的 workflow node 顺序执行，并复用统一的完成状态与 idle watchdog
- 如果 `stepExecutionRangeByFlow` 已启用，自动运行只会遍历允许范围内的 workflow node；范围外节点会被跳过，`getFirstUnfinishedNodeId` 与保存进度判断也只统计允许节点
diff --git a/项目开发规范（AI协作）.md b/项目开发规范（AI协作）.md
index 1b56777..2d608d7 100644
--- a/项目开发规范（AI协作）.md
+++ b/项目开发规范（AI协作）.md
@@ -171,6 +171,7 @@
- `resolvedSignupMethod` 是当前轮冻结结果，不等同于用户此刻 UI 上选择的 `signupMethod`。
- 强制绑定邮箱后重登用邮箱身份，只能通过单次执行参数覆盖登录身份，不能持久改写 `signupMethod`。
- flow 能力不足时必须在步骤定义层或启动校验层处理，不能等执行到不存在的节点后才报错。
+- 本地导出型 flow、发布型 flow、贡献型 flow 必须显式区分：只有声明了 `publicationTargets` 或明确支持贡献能力的 flow 才能进入发布/贡献 adapter 校验；例如 Grok / `webchat2api` SSO Cookie 导出属于本地导出 flow，不能因为有 target 就默认接入贡献模式。
### 1.7 日志步骤号原则
@@ -285,6 +286,7 @@
- 贡献流程的后台公开 OAuth 状态机应优先收敛到独立模块，例如 `background/contribution-oauth.js`
- 贡献模式的侧栏按钮、状态展示和轮询调度应优先收敛到独立 manager，例如 `sidepanel/contribution-mode.js`
- 如果服务端当前返回“无需手动提交 callback”，扩展端必须把它当兼容成功态处理，不能简单按 HTTP 非 200 直接视为失败
+- 如果新增 flow 只是本地导出产物，例如 Cookie、JSON、会话文件、手动复制值，必须保持 `publicationTargets` 为空并关闭 `supportsAccountContribution`；如果后续产品决定发布到远端服务，必须先设计 publication target、贡献 adapter、敏感字段脱敏和测试，再打开能力开关。
### 3.4.1 iCloud Hide My Email 维护补充
@@ -495,6 +497,7 @@ npm test
15. 如果创建了 `docs/md/` 方案文件，我有没有确认它是否应被提交？
16. 如果改动涉及 flow、步骤、模式切换，我有没有同时检查 `getSteps / getNodes / getWorkflow`、后台 registry、sidepanel `workflowNodes` 和 node 状态？
17. 我有没有新增任何用数字步骤判断业务含义的代码？如果有，是否能改为 `key / nodeId`？
+18. 如果新增或调整 flow target，我有没有确认它到底是本地导出、正式发布还是贡献 flow，并同步检查 `publicationTargets / supportsAccountContribution / contributionAdapterIds / shared/contribution-registry.js`？
## 9. 完成标准
diff --git a/项目文件结构说明.md b/项目文件结构说明.md
index 6e32bd4..af6564e 100644
--- a/项目文件结构说明.md
+++ b/项目文件结构说明.md
@@ -21,7 +21,7 @@
- `.gitignore`：定义仓库忽略规则，当前忽略 `docs/md/`、`.github/`、`_metadata/`、`.vscode/` 等目录。
- `LICENSE`：项目许可证文件。
- `README.md`：面向使用者的精简说明文档，主要介绍项目用途、功能范围、快速开始与文档入口；不再承载过多技术实现细节。
-- `background.js`：扩展后台 Service Worker 入口壳，负责模块装配、初始化、全局常量、少量保留的领域函数与运行入口；当前已按 `activeFlowId` 装配 flow-aware 的步骤定义、执行注册表、自动运行与状态同步，`openai` flow 继续承接 `oauthFlowTimeoutEnabled` 与 `stepExecutionRangeByFlow`，`kiro` flow 则走独立的“注册页 1-6 步 -> 桌面授权 7-8 步 -> `kiro.rs` 上传 9 步”链路。
+- `background.js`：扩展后台 Service Worker 入口壳，负责模块装配、初始化、全局常量、少量保留的领域函数与运行入口；当前已按 `activeFlowId` 装配 flow-aware 的步骤定义、执行注册表、自动运行与状态同步，`openai` flow 继续承接 `oauthFlowTimeoutEnabled` 与 `stepExecutionRangeByFlow`，`kiro` flow 走独立的“注册页 1-6 步 -> 桌面授权 7-8 步 -> `kiro.rs` 上传 9 步”链路，`grok` flow 走独立的“注册页 1-4 步 -> SSO Cookie 提取 5 步”链路。
- `cloudmail-utils.js`：Cloud Mail / SkyMail 相关的纯工具函数，负责 API 地址、域名、鉴权头、邮件列表响应与邮件正文归一化。
- `cloudflare-temp-email-utils.js`：Cloudflare Temp Email 相关的纯工具函数，负责 URL、域名、邮件内容与 MIME 数据归一化。
- `gopay-utils.js`：GoPay / GPC Plus 支付相关纯工具函数，负责支付方式归一化、GoPay 手机号/OTP/PIN 归一化、GPC API 地址归一化、API Key 请求头、任务创建/查询/OTP/PIN/停止 URL 与余额响应解析。
@@ -59,11 +59,14 @@
- `flows/kiro/background/desktop-client.js`：Kiro 桌面授权协议层，负责桌面 OIDC client 注册、PKCE 参数生成、授权地址组装、callback 参数校验和授权码换 token。
- `flows/kiro/background/desktop-authorize-runner.js`：Kiro 桌面授权执行器，负责步骤 7~8 的标签页打开、授权页轮询、localhost callback 捕获，以及桌面授权完成后的凭据落库。
- `flows/kiro/background/publisher-kiro-rs.js`：Kiro 发布器，负责 `kiro.rs` 地址归一化、连通性探测、BuilderId profileArn 固定映射、machineId 计算、上传 payload 构建与最终凭据上传。
+- `flows/grok/background/state.js`：Grok 独立运行态模型与状态工具，负责 `runtimeState.flowState.grok.session / register / sso` 的默认值、归一化、兼容字段投影、节点完成回写、下游重置和 fresh-attempt keep-state 构建。
+- `flows/grok/background/register-runner.js`：Grok 注册页执行器，负责步骤 1~5 的编排、Grok/xAI 注册标签页管理、邮箱提交、验证码轮询提交、资料/密码提交、SSO Cookie 提取、去重保存与账号记录收尾。
- `background/ip-proxy-core.js`：IP 代理核心模块，负责代理条目解析、账号/接口代理池运行态、PAC 应用与清除、代理鉴权回填、出口探测、失败时的目标站点 fail-close 防漏规则，以及自动运行成功阈值后的代理切换支撑。
- `background/ip-proxy-provider-711proxy.js`：711Proxy provider 规则模块，负责从账号串中识别和写回 `region / session / sessTime` 等参数，并在固定账号模式下把侧栏配置转换为最终生效的代理账号。
- `background/logging-status.js`：后台日志、步骤状态、错误信息和若干状态判断的公共工具层；日志条目统一写入结构化 `step / stepKey`，sidepanel 只读取该元数据渲染步骤标签，不再从日志正文解析步骤号；当前额外承接 `add-phone / 手机号页` 这类认证 fatal 错误的共享判定，并会把 Step 2 的“手机号输入模式未切成功”与真正的 auth `add-phone` 页面区分开，避免自动运行误停机。
- `background/mail-2925-session.js`：2925 会话模块，负责 2925 账号池持久化、当前账号切换、cookie 清理登出、自动登录、命中“子邮箱已达上限邮箱”后的 24 小时禁用与自动切号。
- `background/mail-rule-registry.js`：flow-aware 邮件规则注册表，负责按 `activeFlowId` 选择验证码规则构造器，并统一输出注册/登录验证码轮询 payload。
+- `background/flow-mail-polling.js`：flow-aware 邮件轮询调度层，负责读取共享邮箱配置、调用当前 flow 的 mail rules、分派 Hotmail / LuckMail / Cloudflare Temp Email / Cloud Mail / YYDS Mail API provider、准备 iCloud / 2925 / 网页邮箱会话，并统一通过邮箱内容脚本轮询验证码。
- `background/message-router.js`：后台消息路由层，负责处理 `chrome.runtime.onMessage` 进入的所有业务消息；`LOG / STEP_COMPLETE / STEP_ERROR` 会把消息里的真实 `step` 继续传给结构化日志，跳过登录验证码这类派生日志也按当前步骤 key 写入；当前额外接入 PayPal 账号池的新增与切换、2925 账号池的新增、导入、切换、登录、禁用与删除消息，以及 IP 代理的同步、切换、Change 与出口检测消息；手动改邮箱、手动取邮箱等入口也统一经这里落到 `setEmailState`，同步维护注册邮箱运行态；当侧栏关闭 `oauthFlowTimeoutEnabled` 时，会立即清空已存在的 OAuth 总预算 deadline；手动 `EXECUTE_NODE` 会先按 `stepExecutionRangeByFlow` 校验当前节点是否允许执行。
- `background/registration-email-state.js`：注册邮箱运行态共享模块，负责维护 `registrationEmailState = { current, previous, source, updatedAt }`，并提供“当前邮箱清空时保留上一比较基线”“Duck 生成前解析比较基线”“Step 8 `add-email` 写入邮箱时按需保留手机号身份”的统一工具。
- `core/flow-kernel/runtime-state.js`：运行态视图与 patch 构造模块，负责把会话字段归一到 `runtimeState / sharedState / serviceState / flowState` 结构，并维护 flow-aware 的 session patch、节点状态默认值与兼容视图输出。
@@ -152,6 +155,11 @@
## `flows/`
- `flows/openai/mail-rules.js`：OpenAI flow 的验证码邮件规则定义，负责按注册/登录节点输出 code pattern、关键词、目标邮箱提示、2925 receive 弱匹配与轮询参数。
+- `flows/kiro/mail-rules.js`：Kiro flow 的 AWS Builder ID 邮件规则定义，负责按注册验证码节点与桌面授权验证码节点输出 AWS 发件人、主题、关键词、code pattern、目标邮箱提示、2925 receive 弱匹配与轮询参数。
+- `flows/grok/index.js`：Grok flow 定义，声明 `webchat2api` target、Grok 注册页 runtime source、Grok 专属设置分组、能力边界与本地 SSO 导出属性；该 flow 当前没有 publication target，也不支持贡献 adapter。
+- `flows/grok/workflow.js`：Grok workflow 定义，固定输出打开注册页、提交邮箱、提交验证码、提交资料、提取 SSO Cookie 五个节点。
+- `flows/grok/mail-rules.js`：Grok flow 的 xAI / Grok 验证码邮件规则定义，负责输出发件人、主题、关键词、`ABC-123` 与 6 位码 pattern、目标邮箱提示、2925 receive 弱匹配与轮询参数。
+- `flows/grok/content/register-page.js`：Grok 注册页内容脚本，负责五个 Grok 节点的 DOM 操作、页面状态读取与局部点击事件坐标补齐，不修改全局浏览器原型。
## `icons/`
@@ -178,9 +186,10 @@
## `shared/`
- `core/flow-kernel/flow-capabilities.js`：flow 能力矩阵归一化模块，负责根据 `activeFlowId` 与来源解析 sidepanel 的显隐能力、来源作用域、贡献模式边界、步骤范围 UI 作用域，以及 Plus 模式下 `账号接入策略` 的可选项、可编辑性与最终生效值。
-- `core/flow-kernel/flow-registry.js`：flow/source/settings group 总注册表，定义 `openai / kiro` 两套 flow、各自 target/runtime source、可见分组、driver 定义，以及默认 target 和默认 `kiro.rs` 配置。
+- `core/flow-kernel/flow-registry.js`：flow/source/settings group 总注册表，定义 `openai / kiro / grok` 三套 flow、各自 target/runtime source、可见分组、driver 定义，以及默认 target 和默认 `kiro.rs` 配置。
- `shared/kiro-timeouts.js`：Kiro 共享超时常量与归一化工具，负责注册页/桌面授权链路复用的页面加载超时配置。
-- `core/flow-kernel/settings-schema.js`：统一设置 schema 与归一化层，负责把持久配置收敛到 `settingsState.services.*` 与 `settingsState.flows.*` 结构，并维护 `activeFlowId`、OpenAI 的 integration target、Kiro 的 `flows.kiro.targetId / targets` 与 `stepExecutionRangeByFlow`。
+- `shared/contribution-registry.js`：贡献 adapter 与教程入口注册表，负责 OpenAI / Kiro 贡献 adapter、教程入口和发布贡献 flow 校验；默认发布校验只覆盖声明了 publication target 或支持贡献的 flow，Grok 这类本地 SSO 导出 flow 不自动纳入贡献 adapter 缺失检查。
+- `core/flow-kernel/settings-schema.js`：统一设置 schema 与归一化层，负责把持久配置收敛到 `settingsState.services.*` 与 `settingsState.flows.*` 结构，并维护 `activeFlowId`、OpenAI 的 integration target、Kiro/Grok 的 `flows..targetId / targets` 与 `stepExecutionRangeByFlow`。
- `core/flow-kernel/source-registry.js`：运行时来源注册表，负责合并 flow runtime source 与共享 mail source，统一 source family、driver、URL 归属和 cleanup owner 判定。
## `sidepanel/`
@@ -270,7 +279,9 @@
- `tests/background-mail2925-relogin-wait.test.js`：测试 2925 强制重登入口 URL、长登录超时与前后固定等待窗口。
- `tests/background-mail2925-session-module.test.js`：测试 2925 会话模块已接入且导出工厂，并覆盖命中上限后“禁用 24 小时 + 切下一个号 + 自动登录”的核心链路。
- `tests/background-mail2925-signup-flow.test.js`：测试注册页辅助层在 2925 provider 下，会先确保账号池里已分配可用账号，再继续生成别名邮箱。
-- `tests/background-mail-rule-registry-module.test.js`：测试邮件规则注册表与 OpenAI mail rules 模块接入，并覆盖验证码轮询 payload 构造。
+- `tests/background-flow-mail-polling-module.test.js`：测试 flow-aware 邮件轮询调度层对 API provider、网页邮箱 provider、2925 会话准备和 2925 上限恢复的共享分派行为。
+- `tests/background-mail-rule-registry-module.test.js`：测试邮件规则注册表与 OpenAI / Kiro mail rules 模块接入，并覆盖各 flow 验证码轮询 payload 构造。
+- `tests/background-grok-state-module.test.js`：测试 Grok 运行态 helper 的默认值、兼容字段投影、节点完成回写、下游重置、fresh-attempt keep-state 与 SSO Cookie 保留规则。
- `tests/background-message-router-module.test.js`：测试消息路由模块已接入且导出工厂。
- `tests/background-message-router-plus-final-step.test.js`：测试消息路由会按 Plus 当前最终节点追加成功记录，不再写死步骤 10。
- `tests/background-message-router-step2-skip.test.js`：测试步骤 2 直接落到验证码页时的跳步与状态保护逻辑，并覆盖邮箱身份写入时清理旧手机号注册运行态。
@@ -358,6 +369,7 @@
- `tests/sidepanel-contribution-button.test.js`：测试侧边栏顶部 `贡献` 按钮的 HTML 接线、更新提示气泡接线，以及相关脚本加载顺序。
- `tests/sidepanel-account-records-manager.test.js`：测试侧边栏账号记录覆盖层的 HTML 接入、helper 地址归一化与 manager 渲染逻辑。
- `tests/contribution-content-update-service.test.js`：测试贡献内容更新服务对公开摘要接口的归一化、版本提取与失败回退缓存逻辑。
+- `tests/contribution-registry.test.js`：测试贡献 adapter 注册、教程入口解析、默认发布贡献 flow 校验，以及 Grok 本地 SSO 导出 flow 不被自动纳入发布贡献检查。
- `tests/flow-capabilities-module.test.js`：测试 flow 能力矩阵模块对来源作用域、显隐能力和贡献模式边界的归一化。
- `tests/flow-registry-settings-schema.test.js`：测试 flow registry 与 settings schema 之间的默认值、来源映射和 flow-specific 配置结构保持一致。
- `tests/sidepanel-custom-email-pool.test.js`：测试侧边栏自定义邮箱池、自定义邮箱服务号池的 HTML 接线，以及邮箱池长度与自动轮数之间的联动规则。
@@ -365,6 +377,7 @@
- `tests/sidepanel-contribution-mode-flow-scope.test.js`：测试贡献模式只在 `openai` flow 内生效，不会污染 Kiro flow 的来源与面板作用域。
- `tests/sidepanel-contribution-update-hint.test.js`：测试顶部贡献更新轻提示在公告、教程和托管 auto-run 提醒并存时的文案合成。
- `tests/sidepanel-flow-source-registry.test.js`：测试 sidepanel 的 flow/source 选择器、Kiro 来源切换与显隐分组接线。
+- `tests/grok-runner.test.js`：测试 Grok 注册页执行器对邮箱提交、验证码轮询、资料提交、SSO Cookie 提取、账号记录收尾和完成状态持久化的关键链路。
- `tests/sidepanel-auto-run-content-refresh.test.js`：测试点击“自动”时会先冻结当前轮数并刷新贡献内容更新摘要，且刷新失败或启动前状态回灌不会阻塞或改写自动流程启动目标。
- `tests/sidepanel-auto-run-risk-warning.test.js`：测试自动运行在高轮数且未配置节点轮询时会弹出风险提醒。
- `tests/sidepanel-cloudflare-temp-email-random-subdomain.test.js`：测试 Cloudflare Temp Email 独立区域、随机子域名开关、域名列表恢复与提示文案联动。