Fix unbookable award prices rendering on cash rows

.gitignore

@@ -37,6 +37,7 @@ htmlcov/
 # `research/*` not `research/` so git can still see inside the dir.
 research/*
 !research/extract_help_docs.py
+!research/capture_matrix_spa.py
 
 # Claude Code per-session agent state. Project-shared `.claude/settings.json`
 # and `.claude/skills/` ARE checked in; per-machine override stays local.

docs/memories/matrix_spa_url_state.md

@@ -0,0 +1,55 @@
+# Matrix SPA URL state vs the /batch API
+
+Captured 2026-08-01 by driving the real Matrix UI (patchright + real Chrome,
+Advanced controls, one-way JFK→LHR with `Routing=BA+`, `Extension=MAXSTOPS 0`).
+
+## The trap
+
+The SPA's URL state and the `/batch` API use **different names for the same
+values**. Guessing from the API side gets you a link the app ignores.
+
+| Concept | `/batch` API (`wire.py`) | SPA URL state (`links.py`) |
+|---|---|---|
+| Routing language | `routeLanguage` | `routing` |
+| Extension codes | `commandLine` | `ext` |
+| Return-leg routing | (own slice) | `routingRet` |
+| Return-leg extension | (own slice) | `extRet` |
+| Arrival-date intent | `isArrivalDate: bool` | `departureDateType: "depart"｜"arrive"` |
+
+Round trip folds into ONE slice, which is why the inbound leg needs the
+separate `*Ret` keys rather than a second slice.
+
+## Presence is conditional
+
+With no routing codes set the SPA **omits all four keys**; with any set it
+emits all four (blank string for the unused ones). `_spa_routing_fields`
+mirrors that, so our links stay byte-identical to the app's own in both cases
+— the tracked fixtures in `tests/fixtures/matrix_url/` cover both shapes.
+
+## Capture recipe
+
+`research/capture_matrix_spa.py` does this **unattended** — re-run it whenever
+the SPA changes:
+
+    uv run --with patchright python research/capture_matrix_spa.py
+
+Headless is blocked by `waa-pa` bot attestation, so it drives real Chrome via
+patchright, but needs no human. It records both surfaces at once: `page.url`
+(decode the `search=` base64) and `page.on("request")` filtered to
+`alkali`/`batch` (the API body).
+
+Four form-driving traps, each of which silently leaves Search **disabled**:
+
+1. Airports are an autocomplete — type, then **click the `mat-option`**.
+   `fill()` leaves the underlying model empty.
+2. The date input has **no placeholder**; select it by
+   `input.mat-datepicker-input`.
+3. The date must be typed with **`press_sequentially`**. `fill()` sets the
+   visible value but does not fire the events Angular's form model listens
+   for, so Search stays disabled with a date plainly showing — the most
+   misleading of the four.
+4. `mat-input-*` ids are regenerated per render. Never select on them;
+   `input[placeholder="Routing"]` / `"Extension"` are stable.
+
+Order matters too: pick airports **before** switching to One way, or the date
+control isn't rendered yet.

pyproject.toml

@@ -26,6 +26,7 @@ dependencies = [
     "flights>=0.9",         # fli — drives Google Flights for booking handoff
     "fast-flights>=2.2",    # tfs= URL encoder (Google Flights deep-link)
     "rookiepy>=0.5",        # reads Chrome cookies for `auth pp login --from-chrome`
+    "diskcache>=5.6",       # HTTP response cache: per-entry TTL, LRU, SQLite/WAL
 ]
 
 [project.optional-dependencies]

research/capture_matrix_spa.py

@@ -0,0 +1,138 @@
+#!/usr/bin/env python
+"""Capture the Matrix SPA's URL state + /batch request body, unattended.
+
+Why this exists: the SPA names things differently from the /batch API
+(`routing`/`ext` vs `routeLanguage`/`commandLine`), so `links.py` cannot be
+written from the API side — the field names have to be observed. See
+docs/memories/matrix_spa_url_state.md.
+
+Run:  uv run --with patchright python research/capture_matrix_spa.py
+
+Headless is blocked by Google's waa-pa bot attestation, so this drives real
+Chrome via patchright. It still runs without supervision.
+
+Form-driving notes, each learned the hard way:
+  * Airports are an autocomplete: type, then CLICK the mat-option. `fill()`
+    leaves the model empty and Search stays disabled.
+  * The date input has NO placeholder — select it by `input.mat-datepicker-input`.
+  * The date must be typed with `press_sequentially`; `fill()` sets the value
+    but doesn't fire the events Angular's form model listens for, so Search
+    stays disabled with a date visibly present.
+  * `mat-input-*` ids are regenerated per render — never select on them.
+"""
+
+from __future__ import annotations
+
+import base64
+import json
+import pathlib
+import sys
+import urllib.parse
+
+from patchright.sync_api import Page, sync_playwright
+
+PROFILE = "/tmp/mx-capture-profile"
+URL_OUT = pathlib.Path("/tmp/matrix_spa_state.json")
+REQ_OUT = pathlib.Path("/tmp/matrix_batch_body.json")
+
+
+def _decode_state(url: str) -> dict | None:
+    if "search=" not in url:
+        return None
+    q = urllib.parse.unquote(url.split("search=", 1)[1].split("&")[0])
+    q += "=" * (-len(q) % 4)
+    try:
+        return json.loads(base64.b64decode(q))
+    except Exception:
+        return None
+
+
+def _pick_airport(pg: Page, index: int, code: str) -> None:
+    box = pg.locator('input[placeholder="Add airport"]').nth(index)
+    box.click()
+    box.type(code, delay=120)
+    pg.wait_for_timeout(1800)
+    option = pg.locator("mat-option, [role=option]").first
+    option.wait_for(state="visible", timeout=10_000)
+    option.click()
+    pg.wait_for_timeout(700)
+
+
+def capture(origin: str, dest: str, date_mmddyyyy: str, routing: str, extension: str) -> int:
+    bodies: list[dict] = []
+
+    with sync_playwright() as p:
+        ctx = p.chromium.launch_persistent_context(
+            PROFILE, channel="chrome", headless=False,
+            viewport={"width": 1500, "height": 1000},
+        )
+        pg = ctx.pages[0] if ctx.pages else ctx.new_page()
+
+        def on_request(req):
+            if "alkali" not in req.url and "batch" not in req.url:
+                return
+            body = req.post_data
+            if body and ("routeLanguage" in body or "commandLine" in body):
+                bodies.append({"url": req.url.split("?")[0], "body": body})
+
+        pg.on("request", on_request)
+        pg.goto("https://matrix.itasoftware.com/", wait_until="domcontentloaded")
+        pg.wait_for_timeout(5000)
+
+        _pick_airport(pg, 0, origin)
+        _pick_airport(pg, 1, dest)
+
+        pg.locator("text=One way").first.click()
+        pg.wait_for_timeout(1500)
+
+        date_in = pg.locator("input.mat-datepicker-input").first
+        date_in.click()
+        pg.wait_for_timeout(600)
+        date_in.press_sequentially(date_mmddyyyy, delay=90)
+        pg.wait_for_timeout(800)
+        pg.keyboard.press("Tab")
+        pg.wait_for_timeout(1200)
+
+        pg.locator("text=Advanced controls").first.click()
+        pg.wait_for_timeout(1500)
+        pg.locator('input[placeholder="Routing"]').first.fill(routing)
+        pg.locator('input[placeholder="Extension"]').first.fill(extension)
+        pg.wait_for_timeout(600)
+
+        search = pg.locator('button:has-text("Search")').first
+        if search.get_attribute("disabled"):
+            print("Search still disabled — the form shape changed", file=sys.stderr)
+            ctx.close()
+            return 1
+        search.click()
+
+        state = None
+        for _ in range(90):
+            pg.wait_for_timeout(1000)
+            found = _decode_state(pg.url)
+            if found and (found.get("slices") or [{}])[0].get("routing"):
+                state = found
+                break
+            if found:
+                state = found
+            if bodies:
+                break
+
+        if state:
+            URL_OUT.write_text(json.dumps(state, indent=1))
+            print(f"URL state    -> {URL_OUT}")
+            print(json.dumps(state["slices"][0], indent=1))
+        if bodies:
+            REQ_OUT.write_text(json.dumps(bodies, indent=1))
+            print(f"batch bodies -> {REQ_OUT} ({len(bodies)})")
+        ctx.close()
+        return 0 if state else 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(
+        capture(
+            origin="JFK", dest="LHR", date_mmddyyyy="09/01/2026",
+            routing="BA+", extension="MAXSTOPS 0",
+        )
+    )

src/flight_cli/_gflight_ids.py

@@ -434,8 +434,9 @@ def _seed_cookies_once(client: Any) -> None:
         log.debug("gflight cookie cache past TTL; re-warming")
         return
     try:
+        jar = _cookie_jar(client)
         for c in saved:
-            client._client.cookies.set(
+            jar.set(
                 c["name"],
                 c["value"],
                 domain=c.get("domain", ".google.com"),
@@ -445,6 +446,27 @@ def _seed_cookies_once(client: Any) -> None:
         log.debug("could not seed gflight cookies: %s", e)
 
 
+def _cookie_jar(client: Any) -> Any:
+    """The session cookie jar, across fli client shapes.
+
+    fli <=0.8 exposed `Client._client`; 0.9 replaced it with a per-thread
+    `Client._session()`. Both hand back an object with the same `.set()` /
+    `.jar` interface. Reaching for the old attribute silently raised
+    AttributeError into this module's best-effort `except`, which turned NID
+    seeding AND persistence into no-ops — so every process started cold, and
+    the comments above put the cold-start empty rate at ~40% versus ~0% warm.
+
+    Raises AttributeError when neither shape is present, so a future upstream
+    rename fails loudly at the callers' `except` + debug log rather than
+    degrading silently forever.
+    """
+    session = getattr(client, "_client", None)
+    if session is None:
+        # fli 0.9: per-thread session accessor replaced the old `_client` attr.
+        session = client._session()  # pyright: ignore[reportAny]
+    return session.cookies  # pyright: ignore[reportAny]
+
+
 def _persist_cookies(client: Any) -> None:
     """Write the session's allowlisted Google cookies (NID) to disk after a warm
     call, once per process, so the next invocation starts warm. Best-effort."""
@@ -458,7 +480,7 @@ def _persist_cookies(client: Any) -> None:
                 "domain": str(ck.domain or ".google.com"),
                 "path": str(ck.path or "/"),
             }
-            for ck in client._client.cookies.jar  # pyright: ignore[reportAny]  # fli/curl_cffi untyped
+            for ck in _cookie_jar(client).jar  # pyright: ignore[reportAny]  # fli/curl_cffi untyped
             if str(ck.name) in _PERSIST_COOKIE_NAMES
             and _GOOGLE_DOMAIN_SUFFIX in str(ck.domain or "")
         ]