@angelky7/dsh-browser-control 1.7.8 → 1.7.9

package/README.en.md

@@ -64,8 +64,8 @@ In one line: **for "use MY browser" tasks (logged-in Bilibili, Zhihu, admin pane
 
 | File | Purpose |
 |---|---|
-| [DSH-Browser-Control-v1.7.2.zip](https://github.com/angelky7/dsh-browser-control/releases/download/v1.7.2/DSH-Browser-Control-v1.7.2.zip) | Chrome extension (unzip and load; **the extension no longer changes with feature updates from v1.7.2 on**: v1.7.3–v1.7.8 do not touch the extension — skip this if v1.7.2 is already loaded) |
-| [dsh-browser-control-plugin-v1.7.8.zip](https://github.com/angelky7/dsh-browser-control/releases/download/v1.7.8/dsh-browser-control-plugin-v1.7.8.zip) | dsh plugin (offline fallback; online installs use Option A/B) |
+| [DSH-Browser-Control-v1.7.2.zip](https://github.com/angelky7/dsh-browser-control/releases/download/v1.7.2/DSH-Browser-Control-v1.7.2.zip) | Chrome extension (unzip and load; **the extension no longer changes with feature updates from v1.7.2 on**: v1.7.3–v1.7.9 do not touch the extension — skip this if v1.7.2 is already loaded) |
+| [dsh-browser-control-plugin-v1.7.9.zip](https://github.com/angelky7/dsh-browser-control/releases/download/v1.7.9/dsh-browser-control-plugin-v1.7.9.zip) | dsh plugin (offline fallback; online installs use Option A/B) |
 
 ## Install the Chrome extension (30 seconds)
 
@@ -104,7 +104,7 @@ npm install @angelky7/dsh-browser-control
 
 ```bash
 # Straight from GitHub
-dsh plugin --profile web add "github:angelky7/dsh-browser-control#v1.7.8"
+dsh plugin --profile web add "github:angelky7/dsh-browser-control#v1.7.9"
 
 # Local checkout for debugging (note: the explicit file: prefix is required)
 dsh plugin --profile web add "file:D:\path\to\dsh-browser-control"

package/README.md

@@ -64,8 +64,8 @@ Chrome 扩展（CDP 驱动）
 
 | 文件 | 说明 |
 |---|---|
-| [DSH-Browser-Control-v1.7.2.zip](https://github.com/angelky7/dsh-browser-control/releases/download/v1.7.2/DSH-Browser-Control-v1.7.2.zip) | Chrome 扩展（解压后加载；**扩展从 v1.7.2 起不再随功能更新**：v1.7.3–v1.7.8 都没有动扩展，装过 v1.7.2 的不用重装） |
-| [dsh-browser-control-plugin-v1.7.8.zip](https://github.com/angelky7/dsh-browser-control/releases/download/v1.7.8/dsh-browser-control-plugin-v1.7.8.zip) | dsh 插件（离线兜底，在线装直接用方式 A/B） |
+| [DSH-Browser-Control-v1.7.2.zip](https://github.com/angelky7/dsh-browser-control/releases/download/v1.7.2/DSH-Browser-Control-v1.7.2.zip) | Chrome 扩展（解压后加载；**扩展从 v1.7.2 起不再随功能更新**：v1.7.3–v1.7.9 都没有动扩展，装过 v1.7.2 的不用重装） |
+| [dsh-browser-control-plugin-v1.7.9.zip](https://github.com/angelky7/dsh-browser-control/releases/download/v1.7.9/dsh-browser-control-plugin-v1.7.9.zip) | dsh 插件（离线兜底，在线装直接用方式 A/B） |
 
 ## 安装 Chrome 扩展（30 秒）
 
@@ -104,7 +104,7 @@ npm install @angelky7/dsh-browser-control
 
 ```bash
 # 直接从 GitHub 安装
-dsh plugin --profile web add "github:angelky7/dsh-browser-control#v1.7.8"
+dsh plugin --profile web add "github:angelky7/dsh-browser-control#v1.7.9"
 
 # 本地目录调试（注意：必须显式 file: 前缀）
 dsh plugin --profile web add "file:D:\path\to\dsh-browser-control"
@@ -263,8 +263,8 @@ curl -X POST http://127.0.0.1:9777/api/command \
 | `browser_emulate` | 切设备视口（移动 / 桌面 / 自定义，v1.0.7+）；v1.7.1 起还能限速：`network` slow3g/fast3g/offline/reset + `cpuThrottlingRate`（1–20），回执写明生效数值，`device:"reset"` 一并还原 |
 | `browser_metrics` | 读性能计数器（DOM 节点数 / JS 堆 / 布局与脚本耗时，Performance.getMetrics，只读；让「这页面很重」有数字说话，v1.7.1+） |
 | `browser_drag` | 拖拽：from/to 用选择器或视口坐标；`auto` 对 `draggable="true"` 的源走 html5 事件合成（dragstart→dragover→drop，未接受就不 drop），其余走真实鼠标输入（按下→插值移动→抬起，滑杆/画布/排序组件用这个）。**纯插件实现**（经 v1.7.2 预埋的 cdp 通道），v1.7.3+ |
-| `browser_audit` | 读本次插件会话的内存审计账本：发过/被拒的每条命令（参数脱敏、`code`/`effectState`、耗时），最多 200 条、dsh 重启即清；输入的文字与 cookie 值打码、eval 表达式截断。纯本地读，只读档下照常可用（v1.7.4+） |
-| `browser_journal` | 读**跨 dsh 重启**的持久命令账本（`<stateDir>/journal.jsonl`，最多 1000 条，按运行分组）——重启后先问它「上个会话在哪个标签页干了什么」；同样的脱敏规则；纯本地磁盘读，**扩展离线也能用**（v1.7.5+） |
+| `browser_audit` | 读本次插件会话的内存审计账本：发过/被拒的每条命令（参数脱敏、`code`/`effectState`、耗时），最多 200 条、dsh 重启即清；输入的文字与 cookie 值打码、URL 查询值与敏感片段打码、错误文本里的 URL 同样打码、eval 表达式截断。回执里的 `journal` 说明本次是否在写盘（`enabled:false` + `error` = 仅内存）。纯本地读，只读档下照常可用（v1.7.4+） |
+| `browser_journal` | 读**跨 dsh 重启**的持久命令账本（`<stateDir>/journal.jsonl`，最多 1000 条，按运行分组）——重启后先问它「上个会话在哪个标签页干了什么」；同样的脱敏规则；`journal.enabled` 说明**本次**运行是否在写盘（false 时你看到的是更早的运行）。纯本地磁盘读，**扩展离线也能用**（v1.7.5+） |
 | `browser_sessions` | 多 session 隔离：列出共用这个浏览器的 dsh 会话与各自的**工作标签页**；`action:"release"` 释放自己的。省略 tabId 的调用默认落到**本会话**的工作标签页（先核验还开着），并发会话不再互相抢活动页；显式 tabId 永远有效。纯本地，v1.7.6+ |
 | `browser_windows` | 窗口控制：清单/开窗/改状态与几何/关整窗/跨窗挪标签（唯一能碰窗口几何的工具，v1.6.0+） |
 | `browser_cleanup` | 清理临时文件 |

package/lib/index.js

@@ -974,6 +974,46 @@ const AUDIT_EXPRESSION_MAX_CHARS = 120;
 /** 参数里这些键的值一律打码（大小写不敏感）。 */
 const SECRET_KEY = /^(token|authorization|password|passwd|secret|apikey|api_key|cookie)$/i;
 /**
+* URL 里的秘密不能靠「截断」处理：`?token=…&code=…` 截到 120 字符照样是明文。
+* 审计的用途是「做了什么」，所以保留 scheme/host/path 与查询键名，**查询值一律打码**；
+* 片段（#）只在看起来像参数（含 `=` 或 token/secret 字样）时整体打码——SPA 路由
+* （`#/inbox`）要留住，OAuth 隐式流的 `#access_token=…` 不能留。
+*/
+const URL_PATTERN = /https?:\/\/[^\s"'<>]+/g;
+function redactUrlMatch(match) {
+	const trailing = match.match(/[).,;:!?]+$/);
+	const core = trailing === null ? match : match.slice(0, -trailing[0].length);
+	const tail = trailing === null ? "" : trailing[0];
+	const queryAt = core.indexOf("?");
+	const hashAt = core.indexOf("#");
+	const base = queryAt >= 0 ? core.slice(0, queryAt) : hashAt >= 0 ? core.slice(0, hashAt) : core;
+	const query = queryAt >= 0 ? core.slice(queryAt + 1, hashAt >= 0 ? hashAt : void 0) : "";
+	const hash = hashAt >= 0 ? core.slice(hashAt) : "";
+	let changed = false;
+	const redactedQuery = query.length === 0 ? "" : query.split("&").map((pair) => {
+		const eq = pair.indexOf("=");
+		if (eq < 0) return pair;
+		const key = pair.slice(0, eq);
+		let value = pair.slice(eq + 1);
+		try {
+			value = decodeURIComponent(value);
+		} catch {}
+		changed = true;
+		return `${key}=[redacted:${[...value].length} chars]`;
+	}).join("&");
+	let redactedHash = hash;
+	if (hash.length > 1 && (/=/.test(hash) || /token|secret|access_token/i.test(hash))) {
+		redactedHash = "#[redacted]";
+		changed = true;
+	}
+	if (!changed) return core + tail;
+	return `${base}${redactedQuery.length > 0 ? `?${redactedQuery}` : ""}${redactedHash}${tail}`;
+}
+/** 把一段文本里所有 URL 的查询值/敏感片段打码（用于参数摘要与错误文本）。 */
+function redactAuditText(text) {
+	return text.replace(URL_PATTERN, redactUrlMatch);
+}
+/**
 * 哪个命令的 `value` 字段是敏感内容：`input` 是往页面里打的字（可能是密码），
 * `cookies.set` 直接写凭据。其余命令的 value 字段（如果有）不动。
 */
@@ -991,7 +1031,11 @@ function summarizeAuditParams(command, params) {
 		text = JSON.stringify(params, (key, value) => {
 			if (SECRET_KEY.test(key)) return "[redacted]";
 			if (key === "value" && VALUE_REDACTED_COMMANDS.has(command)) return redactValue(value);
-			if (key === "expression" && typeof value === "string" && [...value].length > AUDIT_EXPRESSION_MAX_CHARS) return `${[...value].slice(0, AUDIT_EXPRESSION_MAX_CHARS).join("")}…[+${[...value].length - AUDIT_EXPRESSION_MAX_CHARS} chars]`;
+			if (typeof value === "string") {
+				const redacted = redactAuditText(value);
+				if (key === "expression" && [...redacted].length > AUDIT_EXPRESSION_MAX_CHARS) return `${[...redacted].slice(0, AUDIT_EXPRESSION_MAX_CHARS).join("")}…[+${[...redacted].length - AUDIT_EXPRESSION_MAX_CHARS} chars]`;
+				return redacted;
+			}
 			return value;
 		}) ?? "{}";
 	} catch {
@@ -1023,7 +1067,10 @@ var AuditLog = class {
 		if (input.tabId !== void 0) entry.tabId = input.tabId;
 		if (input.code !== void 0) entry.code = input.code;
 		if (input.effectState !== void 0) entry.effectState = input.effectState;
-		if (input.error !== void 0) entry.error = [...input.error].length > AUDIT_ERROR_MAX_CHARS ? `${[...input.error].slice(0, AUDIT_ERROR_MAX_CHARS).join("")}…` : input.error;
+		if (input.error !== void 0) {
+			const redacted = redactAuditText(input.error);
+			entry.error = [...redacted].length > AUDIT_ERROR_MAX_CHARS ? `${[...redacted].slice(0, AUDIT_ERROR_MAX_CHARS).join("")}…` : redacted;
+		}
 		this.entries.push(entry);
 		if (this.entries.length > 200) this.entries.splice(0, this.entries.length - 200);
 		return entry;
@@ -1410,6 +1457,7 @@ var BridgeController = class {
 	current;
 	journal;
 	journalKey = "";
+	journalError;
 	/** 操作审计账本（内存环形缓冲，200 条；命令层记录，见 audit.ts 顶部注释）。 */
 	audit = new AuditLog();
 	/** 多 session 隔离：每个 dsh 会话的工作标签页（见 sessions.ts）。 */
@@ -1426,6 +1474,18 @@ var BridgeController = class {
 		return this.current === void 0 ? void 0 : path.resolve(this.current.stateDir);
 	}
 	/**
+	* Whether THIS run is persisting the journal, and why not. `browser_audit` /
+	* `browser_journal` surface this: a memory-only run used to be visible only in
+	* one log line, so a missing journal looked like "nothing happened".
+	*/
+	get journalStatus() {
+		if (this.journal !== void 0) return { enabled: true };
+		return this.journalError === void 0 ? { enabled: false } : {
+			enabled: false,
+			error: this.journalError
+		};
+	}
+	/**
 	* Record one audit entry in memory and, when the journal is open, on disk.
 	* Journal appends are queued and never block the command path.
 	*/
@@ -1508,8 +1568,10 @@ var BridgeController = class {
 			await previousJournal?.close();
 			try {
 				this.journal = await Journal.open(stateDir, this.log);
+				this.journalError = void 0;
 			} catch (error) {
-				this.log(`journal: disabled — ${errorMessage(error)}`);
+				this.journalError = errorMessage(error);
+				this.log(`journal: disabled — ${this.journalError}`);
 			}
 		}
 		const key = config.enabled ? `${config.port}|${config.token}|${shotsDir}` : "";
@@ -4070,10 +4132,13 @@ function registerDragTool(ctx, controller) {
 		}
 	}));
 }
+function journalWarning(status) {
+	return status.enabled ? "" : `\nJournal write: disabled${status.error === void 0 ? "" : ` — ${status.error}`} — this run is memory-only; entries are not being written to disk.`;
+}
 function registerAuditTool(ctx, controller) {
 	ctx.tools.register(defineTool$1({
 		name: "browser_audit",
-		description: "Read this plugin session's in-memory audit trail: every command sent to the browser extension (and every policy/gate refusal), with redacted params, outcome code and duration. Newest last; capped at 200 entries and wiped when dsh restarts. Values typed into pages and cookie values are redacted; eval expressions are truncated. Plugin-local read — works in read-only mode.",
+		description: "Read this plugin session's in-memory audit trail: every command sent to the browser extension (and every policy/gate refusal), with redacted params, outcome code and duration. Newest last; capped at 200 entries and wiped when dsh restarts. Values typed into pages and cookie values are redacted; URL query values and URLs inside error text are redacted; eval expressions are truncated. The `journal` field says whether this run is also being written to disk (enabled:false + error = memory-only). Plugin-local read — works in read-only mode.",
 		parameters: {
 			command: {
 				type: "string",
@@ -4105,6 +4170,17 @@ function registerAuditTool(ctx, controller) {
 						type: "number",
 						required: true
 					},
+					journal: {
+						type: "object",
+						additionalProperties: false,
+						properties: {
+							enabled: {
+								type: "boolean",
+								required: true
+							},
+							error: { type: "string" }
+						}
+					},
 					entries: {
 						type: "array",
 						required: true,
@@ -4147,9 +4223,10 @@ function registerAuditTool(ctx, controller) {
 			},
 			render: (_args, value) => {
 				const v = value;
+				const warn = v.journal === void 0 ? "" : journalWarning(v.journal);
 				if (v.entries.length === 0) return [{
 					type: "text",
-					text: `Audit: ${v.total} entries, none match — the trail starts when a command is executed.`
+					text: `Audit: ${v.total} entries, none match — the trail starts when a command is executed.${warn}`
 				}];
 				const lines = v.entries.map((e) => {
 					const tab = e.tabId === void 0 ? "" : ` tab ${e.tabId}`;
@@ -4159,7 +4236,7 @@ function registerAuditTool(ctx, controller) {
 				});
 				return [{
 					type: "text",
-					text: clampRendered(`Audit: ${v.total} entries (showing ${v.shown})\n${lines.join("\n")}`)
+					text: clampRendered(`Audit: ${v.total} entries (showing ${v.shown})\n${lines.join("\n")}${warn}`)
 				}];
 			}
 		},
@@ -4178,7 +4255,8 @@ function registerAuditTool(ctx, controller) {
 			return {
 				total: controller.audit.size(),
 				shown: entries.length,
-				entries
+				entries,
+				journal: controller.journalStatus
 			};
 		}
 	}));
@@ -4186,7 +4264,7 @@ function registerAuditTool(ctx, controller) {
 function registerJournalTool(ctx, controller) {
 	ctx.tools.register(defineTool$1({
 		name: "browser_journal",
-		description: "Read the persistent command journal across dsh restarts: every command from previous runs of this plugin (written to <stateDir>/journal.jsonl, last 1000 entries), grouped by run. Same redaction as browser_audit. Plugin-local disk read — works with the extension offline and in read-only mode, so it is the way to recover \"what was I doing\" after a restart.",
+		description: "Read the persistent command journal across dsh restarts: every command from previous runs of this plugin (written to <stateDir>/journal.jsonl, last 1000 entries), grouped by run. Same redaction as browser_audit. The `journal` field says whether the CURRENT run is writing (enabled:false + error = this run is memory-only; what you see is from earlier runs). Plugin-local disk read — works with the extension offline and in read-only mode, so it is the way to recover \"what was I doing\" after a restart.",
 		parameters: {
 			command: {
 				type: "string",
@@ -4218,6 +4296,17 @@ function registerJournalTool(ctx, controller) {
 						type: "number",
 						required: true
 					},
+					journal: {
+						type: "object",
+						additionalProperties: false,
+						properties: {
+							enabled: {
+								type: "boolean",
+								required: true
+							},
+							error: { type: "string" }
+						}
+					},
 					entries: {
 						type: "array",
 						required: true,
@@ -4264,9 +4353,10 @@ function registerJournalTool(ctx, controller) {
 			},
 			render: (_args, value) => {
 				const v = value;
+				const warn = v.journal === void 0 ? "" : journalWarning(v.journal);
 				if (v.entries.length === 0) return [{
 					type: "text",
-					text: `Journal: ${v.total} entries on disk, none match — nothing recorded across runs yet.`
+					text: `Journal: ${v.total} entries on disk, none match — nothing recorded across runs yet.${warn}`
 				}];
 				const lines = [];
 				let run = "";
@@ -4281,7 +4371,7 @@ function registerJournalTool(ctx, controller) {
 				}
 				return [{
 					type: "text",
-					text: clampRendered(`Journal: ${v.total} entries in ${v.runs} run(s) (showing ${v.shown})\n${lines.join("\n")}`)
+					text: clampRendered(`Journal: ${v.total} entries in ${v.runs} run(s) (showing ${v.shown})\n${lines.join("\n")}${warn}`)
 				}];
 			}
 		},
@@ -4302,7 +4392,8 @@ function registerJournalTool(ctx, controller) {
 				total,
 				shown: entries.length,
 				runs: new Set(entries.map((e) => e.run)).size,
-				entries
+				entries,
+				journal: controller.journalStatus
 			};
 		}
 	}));

package/lib/types/audit.d.ts

@@ -9,6 +9,7 @@
  *   - **只存内存**（环形缓冲，200 条）：跨 dsh 重启的持久化是「会话恢复」那一版的事；
  *     这一版先把账记对，别把磁盘格式写死。
  *   - **参数摘要是脱敏后的**：输入框的值、cookie 的值、令牌类字段一律打码；
+ *     URL 的查询值与敏感片段打码，错误文本里的 URL 同样打码（截断不是脱敏）；
  *     表达式截断。审计的用途是「做了什么」，不是「内容是什么」。
  */
 export interface AuditEntry {
@@ -37,6 +38,8 @@ export interface AuditFilter {
 }
 /** 环形缓冲上限。200 条足够覆盖一次排障现场，又不至于让内存跟着会话长度涨。 */
 export declare const AUDIT_MAX_ENTRIES = 200;
+/** 把一段文本里所有 URL 的查询值/敏感片段打码（用于参数摘要与错误文本）。 */
+export declare function redactAuditText(text: string): string;
 /**
  * 把一次调用的参数压成可审计的摘要：敏感键打码、特定命令的 value 打码、
  * 长表达式截断、整体限长。返回 JSON 文本——审计工具原样把它交给模型。

package/lib/types/audit.js

@@ -8,6 +8,50 @@ const AUDIT_ERROR_MAX_CHARS = 200;
 const AUDIT_EXPRESSION_MAX_CHARS = 120;
 /** 参数里这些键的值一律打码（大小写不敏感）。 */
 const SECRET_KEY = /^(token|authorization|password|passwd|secret|apikey|api_key|cookie)$/i;
+/**
+ * URL 里的秘密不能靠「截断」处理：`?token=…&code=…` 截到 120 字符照样是明文。
+ * 审计的用途是「做了什么」，所以保留 scheme/host/path 与查询键名，**查询值一律打码**；
+ * 片段（#）只在看起来像参数（含 `=` 或 token/secret 字样）时整体打码——SPA 路由
+ * （`#/inbox`）要留住，OAuth 隐式流的 `#access_token=…` 不能留。
+ */
+const URL_PATTERN = /https?:\/\/[^\s"'<>]+/g;
+function redactUrlMatch(match) {
+    // 错误文本里的 URL 常跟着标点（"...?token=x." / "...(https://…)")，先剥掉再原样接回。
+    const trailing = match.match(/[).,;:!?]+$/);
+    const core = trailing === null ? match : match.slice(0, -trailing[0].length);
+    const tail = trailing === null ? '' : trailing[0];
+    const queryAt = core.indexOf('?');
+    const hashAt = core.indexOf('#');
+    const base = queryAt >= 0 ? core.slice(0, queryAt) : (hashAt >= 0 ? core.slice(0, hashAt) : core);
+    const query = queryAt >= 0 ? core.slice(queryAt + 1, hashAt >= 0 ? hashAt : undefined) : '';
+    const hash = hashAt >= 0 ? core.slice(hashAt) : '';
+    let changed = false;
+    const redactedQuery = query.length === 0 ? '' : query.split('&').map((pair) => {
+        const eq = pair.indexOf('=');
+        if (eq < 0)
+            return pair;
+        const key = pair.slice(0, eq);
+        let value = pair.slice(eq + 1);
+        try {
+            value = decodeURIComponent(value);
+        }
+        catch { /* 解码失败就按原文字符数 */ }
+        changed = true;
+        return `${key}=[redacted:${[...value].length} chars]`;
+    }).join('&');
+    let redactedHash = hash;
+    if (hash.length > 1 && (/=/.test(hash) || /token|secret|access_token/i.test(hash))) {
+        redactedHash = '#[redacted]';
+        changed = true;
+    }
+    if (!changed)
+        return core + tail;
+    return `${base}${redactedQuery.length > 0 ? `?${redactedQuery}` : ''}${redactedHash}${tail}`;
+}
+/** 把一段文本里所有 URL 的查询值/敏感片段打码（用于参数摘要与错误文本）。 */
+export function redactAuditText(text) {
+    return text.replace(URL_PATTERN, redactUrlMatch);
+}
 /**
  * 哪个命令的 `value` 字段是敏感内容：`input` 是往页面里打的字（可能是密码），
  * `cookies.set` 直接写凭据。其余命令的 value 字段（如果有）不动。
@@ -29,8 +73,13 @@ export function summarizeAuditParams(command, params) {
                 return '[redacted]';
             if (key === 'value' && VALUE_REDACTED_COMMANDS.has(command))
                 return redactValue(value);
-            if (key === 'expression' && typeof value === 'string' && [...value].length > AUDIT_EXPRESSION_MAX_CHARS) {
-                return `${[...value].slice(0, AUDIT_EXPRESSION_MAX_CHARS).join('')}…[+${[...value].length - AUDIT_EXPRESSION_MAX_CHARS} chars]`;
+            if (typeof value === 'string') {
+                // URL query 与敏感片段先打码，再做表达式截断/整体限长：截断不是脱敏。
+                const redacted = redactAuditText(value);
+                if (key === 'expression' && [...redacted].length > AUDIT_EXPRESSION_MAX_CHARS) {
+                    return `${[...redacted].slice(0, AUDIT_EXPRESSION_MAX_CHARS).join('')}…[+${[...redacted].length - AUDIT_EXPRESSION_MAX_CHARS} chars]`;
+                }
+                return redacted;
             }
             return value;
         }) ?? '{}';
@@ -70,9 +119,10 @@ export class AuditLog {
         if (input.effectState !== undefined)
             entry.effectState = input.effectState;
         if (input.error !== undefined) {
-            entry.error = [...input.error].length > AUDIT_ERROR_MAX_CHARS
-                ? `${[...input.error].slice(0, AUDIT_ERROR_MAX_CHARS).join('')}…`
-                : input.error;
+            const redacted = redactAuditText(input.error);
+            entry.error = [...redacted].length > AUDIT_ERROR_MAX_CHARS
+                ? `${[...redacted].slice(0, AUDIT_ERROR_MAX_CHARS).join('')}…`
+                : redacted;
         }
         this.entries.push(entry);
         // 环形缓冲：超出上限从最旧的一端丢。seq 不回收——调用方拿 seq 分页时

package/lib/types/index.js

@@ -163,6 +163,7 @@ class BridgeController {
     current;
     journal;
     journalKey = '';
+    journalError;
     /** 操作审计账本（内存环形缓冲，200 条；命令层记录，见 audit.ts 顶部注释）。 */
     audit = new AuditLog();
     /** 多 session 隔离：每个 dsh 会话的工作标签页（见 sessions.ts）。 */
@@ -178,6 +179,16 @@ class BridgeController {
     get stateDir() {
         return this.current === undefined ? undefined : path.resolve(this.current.stateDir);
     }
+    /**
+     * Whether THIS run is persisting the journal, and why not. `browser_audit` /
+     * `browser_journal` surface this: a memory-only run used to be visible only in
+     * one log line, so a missing journal looked like "nothing happened".
+     */
+    get journalStatus() {
+        if (this.journal !== undefined)
+            return { enabled: true };
+        return this.journalError === undefined ? { enabled: false } : { enabled: false, error: this.journalError };
+    }
     /**
      * Record one audit entry in memory and, when the journal is open, on disk.
      * Journal appends are queued and never block the command path.
@@ -267,10 +278,13 @@ class BridgeController {
             await previousJournal?.close();
             try {
                 this.journal = await Journal.open(stateDir, this.log);
+                this.journalError = undefined;
             }
             catch (error) {
                 // 账本打不开不是让桥起不来的理由：降级为纯内存审计。
-                this.log(`journal: disabled — ${errorMessage(error)}`);
+                // 降级状态必须能被调用方看见（audit/journal 工具的回执），不能只写一行日志。
+                this.journalError = errorMessage(error);
+                this.log(`journal: disabled — ${this.journalError}`);
             }
         }
         const key = config.enabled ? `${config.port}|${config.token}|${shotsDir}` : '';
@@ -2255,10 +2269,15 @@ function registerDragTool(ctx, controller) {
         },
     }));
 }
+function journalWarning(status) {
+    return status.enabled
+        ? ''
+        : `\nJournal write: disabled${status.error === undefined ? '' : ` — ${status.error}`} — this run is memory-only; entries are not being written to disk.`;
+}
 function registerAuditTool(ctx, controller) {
     ctx.tools.register(defineTool({
         name: 'browser_audit',
-        description: 'Read this plugin session\'s in-memory audit trail: every command sent to the browser extension (and every policy/gate refusal), with redacted params, outcome code and duration. Newest last; capped at 200 entries and wiped when dsh restarts. Values typed into pages and cookie values are redacted; eval expressions are truncated. Plugin-local read — works in read-only mode.',
+        description: 'Read this plugin session\'s in-memory audit trail: every command sent to the browser extension (and every policy/gate refusal), with redacted params, outcome code and duration. Newest last; capped at 200 entries and wiped when dsh restarts. Values typed into pages and cookie values are redacted; URL query values and URLs inside error text are redacted; eval expressions are truncated. The `journal` field says whether this run is also being written to disk (enabled:false + error = memory-only). Plugin-local read — works in read-only mode.',
         parameters: {
             command: { type: 'string', description: 'Only entries whose command contains this substring (e.g. "nav", "cookies", "tabs").' },
             tabId: { type: 'number', description: 'Only entries that carried this tabId.' },
@@ -2272,6 +2291,14 @@ function registerAuditTool(ctx, controller) {
                 properties: {
                     total: { type: 'number', required: true },
                     shown: { type: 'number', required: true },
+                    journal: {
+                        type: 'object',
+                        additionalProperties: false,
+                        properties: {
+                            enabled: { type: 'boolean', required: true },
+                            error: { type: 'string' },
+                        },
+                    },
                     entries: {
                         type: 'array',
                         required: true,
@@ -2296,8 +2323,9 @@ function registerAuditTool(ctx, controller) {
             },
             render: (_args, value) => {
                 const v = value;
+                const warn = v.journal === undefined ? '' : journalWarning(v.journal);
                 if (v.entries.length === 0) {
-                    return [{ type: 'text', text: `Audit: ${v.total} entries, none match — the trail starts when a command is executed.` }];
+                    return [{ type: 'text', text: `Audit: ${v.total} entries, none match — the trail starts when a command is executed.${warn}` }];
                 }
                 const lines = v.entries.map((e) => {
                     const tab = e.tabId === undefined ? '' : ` tab ${e.tabId}`;
@@ -2305,7 +2333,7 @@ function registerAuditTool(ctx, controller) {
                     const err = e.ok || e.error === undefined ? '' : ` — ${e.error}`;
                     return `#${e.seq} ${formatClock(e.t)} ${e.command}${tab} ${outcome} ${e.durationMs}ms ${e.params}${err}`;
                 });
-                return [{ type: 'text', text: clampRendered(`Audit: ${v.total} entries (showing ${v.shown})\n${lines.join('\n')}`) }];
+                return [{ type: 'text', text: clampRendered(`Audit: ${v.total} entries (showing ${v.shown})\n${lines.join('\n')}${warn}`) }];
             },
         },
         presentCall: () => ({ card: 'generic', title: 'Browser audit', kind: 'other' }),
@@ -2316,14 +2344,14 @@ function registerAuditTool(ctx, controller) {
                 sinceSeq: args.sinceSeq,
                 limit: args.limit,
             });
-            return { total: controller.audit.size(), shown: entries.length, entries };
+            return { total: controller.audit.size(), shown: entries.length, entries, journal: controller.journalStatus };
         },
     }));
 }
 function registerJournalTool(ctx, controller) {
     ctx.tools.register(defineTool({
         name: 'browser_journal',
-        description: 'Read the persistent command journal across dsh restarts: every command from previous runs of this plugin (written to <stateDir>/journal.jsonl, last 1000 entries), grouped by run. Same redaction as browser_audit. Plugin-local disk read — works with the extension offline and in read-only mode, so it is the way to recover "what was I doing" after a restart.',
+        description: 'Read the persistent command journal across dsh restarts: every command from previous runs of this plugin (written to <stateDir>/journal.jsonl, last 1000 entries), grouped by run. Same redaction as browser_audit. The `journal` field says whether the CURRENT run is writing (enabled:false + error = this run is memory-only; what you see is from earlier runs). Plugin-local disk read — works with the extension offline and in read-only mode, so it is the way to recover "what was I doing" after a restart.',
         parameters: {
             command: { type: 'string', description: 'Only entries whose command contains this substring.' },
             tabId: { type: 'number', description: 'Only entries that carried this tabId.' },
@@ -2337,6 +2365,14 @@ function registerJournalTool(ctx, controller) {
                     total: { type: 'number', required: true },
                     shown: { type: 'number', required: true },
                     runs: { type: 'number', required: true },
+                    journal: {
+                        type: 'object',
+                        additionalProperties: false,
+                        properties: {
+                            enabled: { type: 'boolean', required: true },
+                            error: { type: 'string' },
+                        },
+                    },
                     entries: {
                         type: 'array',
                         required: true,
@@ -2362,8 +2398,9 @@ function registerJournalTool(ctx, controller) {
             },
             render: (_args, value) => {
                 const v = value;
+                const warn = v.journal === undefined ? '' : journalWarning(v.journal);
                 if (v.entries.length === 0) {
-                    return [{ type: 'text', text: `Journal: ${v.total} entries on disk, none match — nothing recorded across runs yet.` }];
+                    return [{ type: 'text', text: `Journal: ${v.total} entries on disk, none match — nothing recorded across runs yet.${warn}` }];
                 }
                 const lines = [];
                 let run = '';
@@ -2376,7 +2413,7 @@ function registerJournalTool(ctx, controller) {
                     const outcome = e.ok ? 'ok' : `FAIL ${e.code ?? 'error'}`;
                     lines.push(`#${e.seq} ${formatClock(e.t)} ${e.command}${tab} ${outcome} ${e.durationMs}ms ${e.params}`);
                 }
-                return [{ type: 'text', text: clampRendered(`Journal: ${v.total} entries in ${v.runs} run(s) (showing ${v.shown})\n${lines.join('\n')}`) }];
+                return [{ type: 'text', text: clampRendered(`Journal: ${v.total} entries in ${v.runs} run(s) (showing ${v.shown})\n${lines.join('\n')}${warn}`) }];
             },
         },
         presentCall: () => ({ card: 'generic', title: 'Browser journal', kind: 'other' }),
@@ -2385,7 +2422,7 @@ function registerJournalTool(ctx, controller) {
             if (dir === undefined)
                 throw new Error('browser-bridge is not configured yet — the journal has no stateDir to read');
             const { total, entries } = await readJournal(dir, { command: args.command, tabId: args.tabId, limit: args.limit });
-            return { total, shown: entries.length, runs: new Set(entries.map((e) => e.run)).size, entries };
+            return { total, shown: entries.length, runs: new Set(entries.map((e) => e.run)).size, entries, journal: controller.journalStatus };
         },
     }));
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@angelky7/dsh-browser-control",
   "description": "Local WebSocket bridge between dsh and the DSH Browser Control browser extension, with model-facing browser_* tools and a Settings-managed on/off switch",
-  "version": "1.7.8",
+  "version": "1.7.9",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",