feat(core): 升级 v4.1.6，引入严苛的数据容灾校验，重构安全的 Curl 数组传参与 jq 降级链路

core/mod_google.sh

@@ -49,7 +49,13 @@ if [ ! -f "$UA_FILE" ] || [ ! -f "$KW_FILE" ]; then
 fi
 
 mapfile -t UA_POOL < <(grep -v '^$' "$UA_FILE")
-mapfile -t KEYWORDS < <(grep -v '^$' "$KW_FILE")
+mapfile -t KEYWORDS < <(grep -v '^[[:space:]]*$' "$KW_FILE")
+
+# [v4.1.5 修复] 防止关键词池为空导致 RANDOM % 0 直接语法崩溃
+if [ ${#KEYWORDS[@]} -eq 0 ]; then
+    log "$MODULE_NAME" "ERROR" "关键词池为空，终止执行。"
+    exit 1
+fi
 
 # --- [辅助运算] ---
 get_random_coord() {
@@ -82,6 +88,28 @@ else
     SESSION_UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
 fi
 
+# -----------------------------------------------------------
+# [v4.1.4 平台身份提取器 (Persona Mapper)]
+# 识别当前指纹的系统平台，杜绝跨平台的底层探针穿帮
+# -----------------------------------------------------------
+UA_PLATFORM="windows"
+if [[ "$SESSION_UA" == *"Android"* ]]; then
+    UA_PLATFORM="android"
+elif [[ "$SESSION_UA" == *"iPhone"* ]] || [[ "$SESSION_UA" == *"iPad"* ]]; then
+    UA_PLATFORM="ios"
+elif [[ "$SESSION_UA" == *"Macintosh"* ]]; then
+    UA_PLATFORM="macos"
+elif [[ "$SESSION_UA" == *"Linux"* ]]; then
+    UA_PLATFORM="linux"
+fi
+
+# [v4.1.5 防御] 坐标缺失直接终止，禁止生成错误地理画像
+if ! [[ "$BASE_LAT" =~ ^-?[0-9]+(\.[0-9]+)?$ ]] || \
+   ! [[ "$BASE_LON" =~ ^-?[0-9]+(\.[0-9]+)?$ ]]; then
+    log "$MODULE_NAME" "ERROR" "区域坐标缺失或非法，拒绝执行本轮会话。"
+    exit 1
+fi
+
 # [LBS 锚定] 在基准战区内生成固定范围内的微抖动咖啡馆坐标
 SESSION_BASE_LAT=$(get_random_coord $BASE_LAT 270)
 SESSION_BASE_LON=$(get_random_coord $BASE_LON 270)
@@ -91,6 +119,7 @@ TOTAL_ACTIONS=$((5 + RANDOM % 4))
 
 log "$MODULE_NAME" "INFO " "当前出网 IP: $CURRENT_IP"
 log "$MODULE_NAME" "INFO " "设备指纹锁定: ${SESSION_UA:0:45}..."
+log "$MODULE_NAME" "INFO " "平台推断: [$UA_PLATFORM] "
 log "$MODULE_NAME" "INFO " "虚拟驻留坐标: $SESSION_BASE_LAT, $SESSION_BASE_LON"
 
 # -----------------------------------------------------------
@@ -119,17 +148,18 @@ log "$MODULE_NAME" "INFO " "Cookie 身份库已挂载: ${COOKIE_FILE}"
 # -----------------------------------------------------------
 # [网络栈探底] 协议自适应与出站死锁
 # -----------------------------------------------------------
-CURL_BIND_OPT=""
+CURL_BIND_ARGS=()
 DYNAMIC_IP_PREF="-${IP_PREF:-4}"
 
 if [[ -n "$BIND_IP" && "$BIND_IP" =~ ^[0-9a-fA-F:\.]+$ ]]; then
     # [防线校验] 探测物理网卡存活状态，防 IP 漂移引发通信雪崩
     RAW_BIND_IP=$(echo "$BIND_IP" | tr -d '[]')
-    if ! ip addr show 2>/dev/null | grep -qw "$RAW_BIND_IP"; then
-        log "$MODULE_NAME" "WARN " "检测到配置的出口 IP ($RAW_BIND_IP) 已丢失，自动降级为系统默认路由出网！"
-        CURL_BIND_OPT=""
+    # [v4.1.5 修复] 使用 -Fq 替代 -qw，防止 IPv6 冒号被误认为单词边界导致网卡死锁失效
+    if ! ip addr show 2>/dev/null | grep -Fq "$RAW_BIND_IP"; then
+    log "$MODULE_NAME" "WARN " "检测到配置的出口 IP ($RAW_BIND_IP) 已丢失，自动降级为系统默认路由出网！"
+    CURL_BIND_ARGS=()
     else
-        CURL_BIND_OPT="--interface $BIND_IP"
+        CURL_BIND_ARGS=(--interface "$BIND_IP")
         if [[ "$BIND_IP" == *":"* ]]; then
             DYNAMIC_IP_PREF="-6"
             log "$MODULE_NAME" "INFO " "底层路由锁定: 绑定 IPv6 出口及协议 ($BIND_IP)"
@@ -140,50 +170,142 @@ if [[ -n "$BIND_IP" && "$BIND_IP" =~ ^[0-9a-fA-F:\.]+$ ]]; then
     fi
 fi
 
+# [v4.1.5 修复] 业务域 Referer 隔离池初始化
+# 防止出现从 Apple 探针直接跳转到 Google Maps 的反人类机器行为
+REF_SEARCH=""
+REF_NEWS=""
+REF_MAPS=""
+REF_ECO=""
+
 # --- [会话漫游模拟] ---
 for ((i=1; i<=TOTAL_ACTIONS; i++)); do
     # [LBS 微抖动] 模拟人类手持设备时的 GPS 细微漂移
     ACTION_LAT=$(get_random_coord $SESSION_BASE_LAT 1)
     ACTION_LON=$(get_random_coord $SESSION_BASE_LON 1)
     
-    RAND_KEY=${KEYWORDS[$RANDOM % ${#KEYWORDS[@]}]}
-    ENCODED_KEY=$(echo "$RAND_KEY" | jq -sRr @uri)
+    RAND_KEY="${KEYWORDS[$((RANDOM % ${#KEYWORDS[@]}))]}"
+        # [v4.1.6 修复] jq 缺失时自动降级为纯文本编码，防止关键词池熵塌缩
+    if command -v jq >/dev/null 2>&1; then
+        ENCODED_KEY=$(printf '%s' "$RAND_KEY" | jq -sRr @uri 2>/dev/null)
+    else
+        ENCODED_KEY=$(printf '%s' "$RAND_KEY" | sed 's/ /+/g')
+    fi
+
+    [ -z "$ENCODED_KEY" ] && ENCODED_KEY=$(printf '%s' "$RAND_KEY" | tr ' ' '+')
     
-    # [动作轮盘] 随机指派单次行为类型
-    ACTION_TYPE=$((1 + RANDOM % 4))
+    # [v4.1.4] 平台级动作轮盘：基于 UA_PLATFORM 构建专属行为矩阵
+    ACTION_DICE=$((RANDOM % 100))
+    TARGET_URL=""
+    ACTION_LOG=""
+
+    if [ "$UA_PLATFORM" == "android" ]; then
+        if [ $ACTION_DICE -lt 25 ]; then
+            TARGET_URL="https://www.google.com/search?q=${ENCODED_KEY}&${LANG_PARAMS}"
+            ACTION_LOG="Search "
+        elif [ $ACTION_DICE -lt 55 ]; then
+            TARGET_URL="https://news.google.com/home?${LANG_PARAMS}"
+            ACTION_LOG="News   "
+        elif [ $ACTION_DICE -lt 85 ]; then
+            TARGET_URL="https://www.google.com/maps/search/${ENCODED_KEY}/@${ACTION_LAT},${ACTION_LON},17z?${LANG_PARAMS}"
+            ACTION_LOG="Maps   "
+        else
+            # Android 专属底层网络探针
+            TARGET_URL="https://connectivitycheck.gstatic.com/generate_204"
+            ACTION_LOG="NetTest"
+        fi
+    elif [ "$UA_PLATFORM" == "ios" ] || [ "$UA_PLATFORM" == "macos" ]; then
+        if [ $ACTION_DICE -lt 30 ]; then
+            TARGET_URL="https://www.google.com/search?q=${ENCODED_KEY}&${LANG_PARAMS}"
+            ACTION_LOG="Search "
+        elif [ $ACTION_DICE -lt 65 ]; then
+            TARGET_URL="https://news.google.com/home?${LANG_PARAMS}"
+            ACTION_LOG="News   "
+        elif [ $ACTION_DICE -lt 90 ]; then
+            TARGET_URL="https://www.google.com/maps/search/${ENCODED_KEY}/@${ACTION_LAT},${ACTION_LON},17z?${LANG_PARAMS}"
+            ACTION_LOG="Maps   "
+        else
+            # Apple 专属的 Captive Portal 探针，杜绝跨平台穿帮
+            TARGET_URL="https://captive.apple.com/hotspot-detect.html"
+            ACTION_LOG="NetTest"
+        fi
+    else
+        # Windows / Linux 专属行为矩阵 (无移动端探针，加入隐私/支持页漫游)
+        if [ $ACTION_DICE -lt 20 ]; then
+            TARGET_URL="https://www.google.com/search?q=${ENCODED_KEY}&${LANG_PARAMS}"
+            ACTION_LOG="Search "
+        elif [ $ACTION_DICE -lt 60 ]; then
+            TARGET_URL="https://news.google.com/home?${LANG_PARAMS}"
+            ACTION_LOG="News   "
+        elif [ $ACTION_DICE -lt 80 ]; then
+            # 引入桌面端低危生态池漫游
+            LOW_RISK_ECO=("https://about.google/" "https://safety.google/" "https://support.google.com/?hl=${LANG_ACCEPT%%,*}")
+            TARGET_URL="${LOW_RISK_ECO[$((RANDOM % ${#LOW_RISK_ECO[@]}))]}"
+            ACTION_LOG="EcoRoam"
+        else
+            TARGET_URL="https://www.google.com/maps/search/${ENCODED_KEY}/@${ACTION_LAT},${ACTION_LON},17z?${LANG_PARAMS}"
+            ACTION_LOG="Maps   "
+        fi
+    fi
     
-    # [协议挂载] 注入双栈与网卡死锁参数
-    # [v4.1.2] 挂载持久化 Cookie (-b -c)，确立连续会话画像
-    case $ACTION_TYPE in
-        1) # 搜索引擎交互
-            CODE=$(curl $CURL_BIND_OPT $DYNAMIC_IP_PREF -m 15 -s -L -o /dev/null -w "%{http_code}" \
-                 -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" \
-                 "https://www.google.com/search?q=${ENCODED_KEY}&${LANG_PARAMS}")
-            ;;
-        2) # 区域新闻阅读
-            CODE=$(curl $CURL_BIND_OPT $DYNAMIC_IP_PREF -m 15 -s -L -o /dev/null -w "%{http_code}" \
-                 -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" \
-                 "https://news.google.com/home?${LANG_PARAMS}")
-            ;;
-        3) # 坐标系 LBS 查询
-            CODE=$(curl $CURL_BIND_OPT $DYNAMIC_IP_PREF -m 15 -s -o /dev/null -w "%{http_code}" \
-                 -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" \
-                 "https://www.google.com/maps/search/$${ENCODED_KEY}/@${ACTION_LAT},${ACTION_LON},17z?${LANG_PARAMS}")
-            ;;
-        4) # 底层系统级网络探测连通性握手
-            CODE=$(curl $CURL_BIND_OPT $DYNAMIC_IP_PREF -m 10 -s -o /dev/null -w "%{http_code}" \
-                 -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" \
-                 "https://connectivitycheck.gstatic.com/generate_204")
-            ;;
+    # [v4.1.5 修复] 匹配当前业务对应的 Referer 来源
+    CTX_REF=""
+    case "$ACTION_LOG" in
+        "Search "*) CTX_REF="$REF_SEARCH" ;;
+        "News   "*) CTX_REF="$REF_NEWS" ;;
+        "Maps   "*) CTX_REF="$REF_MAPS" ;;
+        "EcoRoam"*) CTX_REF="$REF_ECO" ;;
     esac
+
+    # [v4.1.3 & v4.1.5 修复] 统一执行 curl，70% 概率携带同业务域 Referer
+    if [ -n "$CTX_REF" ] && [ $((RANDOM % 100)) -lt 70 ]; then
+        CODE=$(curl "${CURL_BIND_ARGS[@]}" "$DYNAMIC_IP_PREF" -m 15 -s -L -o /dev/null -w "%{http_code}" \
+             -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" -H "Referer: $CTX_REF" "$TARGET_URL")
+    else
+        CODE=$(curl "${CURL_BIND_ARGS[@]}" "$DYNAMIC_IP_PREF" -m 15 -s -L -o /dev/null -w "%{http_code}" \
+             -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" "$TARGET_URL")
+    fi
+    CURL_EXIT=$?
     
-    log "$MODULE_NAME" "EXEC " "动作[$i/$TOTAL_ACTIONS]完成 | HTTP状态: $CODE | 抖动坐标: $ACTION_LAT, $ACTION_LON"
+    # 错误码精准映射（不破坏原有的 SCORE 送中判定，只让动作日志更清晰）
+    if [ $CURL_EXIT -ne 0 ]; then
+        case $CURL_EXIT in
+            6)  CODE="ERR_DNS" ;;
+            7)  CODE="ERR_CONN" ;;
+            28) CODE="ERR_TIMEOUT" ;;
+            35) CODE="ERR_TLS" ;;
+            56) CODE="ERR_RESET" ;;
+            *)  CODE="ERR_${CURL_EXIT}" ;;
+        esac
+        log "$MODULE_NAME" "WARN " "动作[$i/$TOTAL_ACTIONS]异常 | 底层错误: $CODE | 抖动坐标: $ACTION_LAT, $ACTION_LON"
+        
+        # [v4.1.5] 请求失败，清空当前业务链的 Referer
+        case "$ACTION_LOG" in
+            "Search "*) REF_SEARCH="" ;;
+            "News   "*) REF_NEWS="" ;;
+            "Maps   "*) REF_MAPS="" ;;
+            "EcoRoam"*) REF_ECO="" ;;
+        esac
+    else
+        log "$MODULE_NAME" "EXEC " "动作[$i/$TOTAL_ACTIONS]完成 | HTTP状态: $CODE | 抖动坐标: $ACTION_LAT, $ACTION_LON"
+        
+        # [v4.1.5] 请求成功，记录当前 URL 作为同业务下一次跳转的 Referer (2xx 或 3xx 视为有效)
+        if [[ "$CODE" =~ ^[23] ]]; then
+            case "$ACTION_LOG" in
+                "Search "*) REF_SEARCH="$TARGET_URL" ;;
+                "News   "*) REF_NEWS="$TARGET_URL" ;;
+                "Maps   "*) REF_MAPS="$TARGET_URL" ;;
+                "EcoRoam"*) REF_ECO="$TARGET_URL" ;;
+            esac
+        fi
+    fi
     
-    # [行为拉伸] 动作间隔注入泊松长尾睡眠，模拟人类真实阅读思考时间
+    # 【核心升级】行为拉伸：每次动作后强制休眠 90 - 120 秒
+    # 结合动作总数，总耗时将稳定在 10 分钟 到 20 分钟之间
     if [ $i -lt $TOTAL_ACTIONS ]; then
+        # 【时间收敛修复】休眠控制在 45-75 秒，防止跨周期重叠导致进程被强杀
         SLEEP_TIME=$((45 + RANDOM % 31))
         log "$MODULE_NAME" "WAIT " "阅读当前页面内容，模拟停留 $SLEEP_TIME 秒..."
-        sleep $SLEEP_TIME
+        sleep "$SLEEP_TIME"
     fi
 done
 
@@ -194,7 +316,7 @@ log "$MODULE_NAME" "INFO " "启动三核交叉验证 (URL跳转 + YT Premium + Y
 
 # 核心 1: 传统 URL 跳转探测 (请求 www 才能触发准确跳转)
 # [v4.1.2] 追加持久化 Cookie
-JUMP_HDR=$(curl $CURL_BIND_OPT $DYNAMIC_IP_PREF -m 10 -sI -b "$COOKIE_FILE" -c "$COOKIE_FILE" "http://www.google.com/")
+JUMP_HDR=$(curl "${CURL_BIND_ARGS[@]}" "$DYNAMIC_IP_PREF" -m 10 -sI -b "$COOKIE_FILE" -c "$COOKIE_FILE" "http://www.google.com/")
 JUMP_LOC=$(echo "$JUMP_HDR" | grep -i "^location:" | tr -d '\r\n')
 JUMP_GL=""
 
@@ -240,7 +362,7 @@ fi
 YT_PR_GL=""
 # [修复] 必须带上本轮循环的专属 UA (-A "$SESSION_UA")，防止被 Google CDN 丢进无状态爬虫兜底页
 # [v4.1.2] 追加持久化 Cookie
-YT_PR_HTML=$(curl $CURL_BIND_OPT $DYNAMIC_IP_PREF -m 10 -s -L -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" "https://www.youtube.com/premium")
+YT_PR_HTML=$(curl "${CURL_BIND_ARGS[@]}" "$DYNAMIC_IP_PREF" -m 10 -s -L -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" "https://www.youtube.com/premium")
 if [[ "$YT_PR_HTML" == *"www.google.cn"* ]]; then
     YT_PR_GL="CN"
 else
@@ -253,7 +375,7 @@ fi
 YT_MU_GL=""
 # [修复] 同样加持 UA 装甲，强行唤出完整版前端框架
 # [v4.1.2] 追加持久化 Cookie
-YT_MU_HTML=$(curl $CURL_BIND_OPT $DYNAMIC_IP_PREF -m 10 -s -L -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" "https://music.youtube.com/")
+YT_MU_HTML=$(curl "${CURL_BIND_ARGS[@]}" "$DYNAMIC_IP_PREF" -m 10 -s -L -b "$COOKIE_FILE" -c "$COOKIE_FILE" -A "$SESSION_UA" "https://music.youtube.com/")
 if [[ "$YT_MU_HTML" == *"www.google.cn"* ]]; then
     YT_MU_GL="CN"
 else

version.txt

@@ -1,2 +1,2 @@
 MASTER_VERSION=4.1.1
-AGENT_VERSION=4.1.1
+AGENT_VERSION=4.1.6