AI 生成的 Deep Link 为什么不能由 App 直接执行

from pathlib import Path
from urllib.parse import parse_qs, unquote, urlsplit
import json
import re
import sys

if len(sys.argv) != 3:
    raise SystemExit(2)
policy_path = Path(sys.argv[1])
candidate = sys.argv[2]
if not policy_path.is_file() or len(candidate) > 2048:
    raise SystemExit(2)
policy = json.loads(policy_path.read_text(encoding="utf-8"))
try:
    parsed = urlsplit(candidate)
    port = parsed.port
except ValueError:
    raise SystemExit(3)
if parsed.scheme.lower() != "https":
    raise SystemExit(3)
if parsed.username or parsed.password or port or parsed.fragment:
    raise SystemExit(3)
host = (parsed.hostname or "").rstrip(".").lower()
if host not in set(policy.get("allowedHosts", [])):
    raise SystemExit(3)
path = unquote(parsed.path)
if "//" in path or ".." in path:
    raise SystemExit(3)
route = next((item for item in policy.get("routes", []) if item.get("path") == path), None)
if route is None:
    raise SystemExit(3)
query = parse_qs(parsed.query, keep_blank_values=True)
if any(len(values) != 1 for values in query.values()):
    raise SystemExit(3)
parameter_rules = route.get("parameters", {})
if set(query) - set(parameter_rules):
    raise SystemExit(3)
normalized = {}
for name, rule in parameter_rules.items():
    values = query.get(name)
    if rule.get("required") and not values:
        raise SystemExit(3)
    if not values:
        continue
    value = values[0]
    kind = rule.get("type")
    if kind == "uuid" and not re.fullmatch(r"[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}", value):
        raise SystemExit(3)
    if kind == "enum" and value not in set(rule.get("values", [])):
        raise SystemExit(3)
    if kind == "integer":
        if not value.isdecimal():
            raise SystemExit(3)
        number = int(value)
        minimum = rule.get("minimum")
        maximum = rule.get("maximum")
        if not isinstance(minimum, int) or not isinstance(maximum, int) or minimum > maximum:
            raise SystemExit(3)
        if number < minimum or number > maximum:
            raise SystemExit(3)
        value = number
    normalized[name] = value
result = {"routeId": route.get("id"), "parameters": normalized, "requiresConfirmation": bool(route.get("requiresConfirmation")), "requiredPermission": route.get("requiredPermission")}
if not result["routeId"] or not result["requiredPermission"]:
    raise SystemExit(3)
print(json.dumps(result, ensure_ascii=False, sort_keys=True))