Skip to content

agent: add Taobao shop hosts and name the in-shop search toggle - #2646

Merged
esokullu merged 1 commit into
mainfrom
agent/taobao-shop-hosts
Aug 2, 2026
Merged

agent: add Taobao shop hosts and name the in-shop search toggle#2646
esokullu merged 1 commit into
mainfrom
agent/taobao-shop-hosts

Conversation

@esokullu

@esokullu esokullu commented Aug 2, 2026

Copy link
Copy Markdown
Collaborator

Follow-up to #2639.

Host coverage

A live anonymous pass over taobao.com turned up two real hosts the matcher missed:

  • store.taobao.com — shop browse. A non-existent shop id redirects here (store.taobao.com/shop/noshop.htm, "没有找到相应的店铺信息") and the page renders without login, so part of the shop surface is anonymously reachable.
  • shopsearch.taobao.com — shop search.

Both are surfaces the in-shop search bullet was written for, which is exactly the defect CONTRIBUTING.md now warns about. Also adds passport.taobao.com next to login., and lists the Tmall cart/trade/my siblings that the alternation already reached but the notes did not mention.

In-shop search label

#2639 shipped a structural description ("carry their own in-shop search box scoped to that seller") because the literal could not be verified. This names it as "搜本店" / "搜全站" and keeps a fallback clause for when the labels are absent.

Provenance, so the next person can weigh it: the labels are second-hand, not observed. Taobao walls anonymous traffic at login.taobao.com/havanaone/login/login.htm for both product search and shop search, and I did not log in. The bullet therefore degrades gracefully rather than betting everything on the string.

Verified live (anonymous)

  • www.taobao.com main search button is 搜索 — matches the existing note.
  • Login wall shows 密码登录, 手机扫码登录, 短信登录 — the note's 扫码登录 holds as a substring.
  • login.taobao.com/havanaone/login/login.htm is the real redirect target, as the adapter already says.

Deliberately not changed

The JD adapter's 搜全站/搜本店 pair. There is a second-hand claim that JD actually labels these 本店/全部, but the current wording came from a contributor who browsed the site, and first-hand observation outranks recall. It needs a live check before anyone edits it — flagging rather than churning it.

Validation

  • node test/run.js: 1398/1399. The one failure is the pre-existing CHANGELOG.md (26.0.0) vs package.json (26.0.3) check that also fails on main.
  • node test/security/injection-corpus.mjs: 60/60.
  • Chrome/Firefox taobao blocks byte-identical; git diff --check clean.
  • Matcher re-probed: store.taobao.com.phishing.example, item.taobao.com@evil.com, shopabc.taobao.com, and rule.taobao.com all still rejected.

Live anonymous check on taobao.com turned up two hosts the matcher missed:
store.taobao.com (shop browse; a bad shop id redirects there and the page
renders without login) and shopsearch.taobao.com (shop search). Both are
surfaces the in-shop search bullet is written for. Also add passport.taobao.com
alongside login., and cover the Tmall cart/trade/my siblings the alternation
already reached but the notes did not list.

Name the in-shop search toggle as "搜本店" / "搜全站" instead of describing it,
per the CONTRIBUTING rule that notes should carry the visible string. The
labels are second-hand rather than observed — Taobao's search and shop-search
both wall anonymous traffic at login.taobao.com — so the bullet keeps a
structural fallback for the case where the labels are absent or renamed.

Verified live on www.taobao.com: the main search button is "搜索", and the
login wall shows "密码登录" and "手机扫码登录", so the existing "扫码登录"
substring holds.

Leaves the JD adapter's "搜全站"/"搜本店" alone. It came from a contributor
who browsed the site, which outranks second-hand recall; it needs a live check
before anyone changes it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@vercel

vercel Bot commented Aug 2, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
webbrain Ready Ready Preview Aug 2, 2026 7:06am

@esokullu
esokullu merged commit a8fd05b into main Aug 2, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant