@chance722/dsh-inbox 0.2.4 → 0.2.6

package/README.md

@@ -19,9 +19,9 @@ It works for you alone: everything lands on your machine, and the model only see
 | Feature | What it does |
 |---|---|
 | **Two ways in** | `/inbox <text or link>` in the composer (attach images to carry them along), or paste / drop / pick a file in the panel |
-| **Automatic classification** | Links are filed by platform and media type (a Bilibili video, a WeChat article…), text by credential shape, images get a 疑似证件 tag when they have card proportions; what the rules cannot decide goes to the model, with a daily cap |
+| **Automatic classification** | Links are filed by platform and media type (Bilibili/YouTube videos, WeChat/掘金/Zhihu articles — 60-odd sites), text by credential shape, images get a 疑似证件 tag when they have card proportions; what the rules cannot decide goes to the model, with a daily cap |
 | **Panel** | Filter by watch-later / category / tag, search across title, text, link and note, switch between two list densities; the detail pane edits name, category, note and tags, flags watch-later, deletes and restores; it follows dsh's dark and light themes **and its language** (switch dsh to English under 设置 → 常规 and the whole panel, dock, cards and manual come with you) |
-| **Everything has a name** | A link is named by the headline of the page it points at (no model tokens spent), a photo or file by the name it arrived with, and the name you type always wins. The row shows the name; the glyph on the left says what kind of thing it is (a key for a credential) |
+| **Everything has a name** | A link is named by the headline of the page it points at (no model tokens spent), a photo or file by the name it arrived with, and the name you type always wins. A page that will not be read — an anti-bot page, a dead link — leaves the address itself as the name rather than a guess. The row shows the name; the glyph on the left says what kind of thing it is (a key for a credential) |
 | **Who judged the category** | A coloured badge next to the category: 规则判定 (grey, the local rules) / 模型判定 (violet, the capped model pass) / 手动判定 (blue, your own choice — nothing overwrites it later) |
 | **Ask in conversation** | Ask for 收件箱 / 仓库 / inbox and the assistant searches by words, category, tag, watch-later flag or kind (ten at a time plus a count of the rest, with thumbnails right in the results), then opens one by id (text up to 1000 characters, link, note, tags, attachment facts). To look at one yourself: expand 「N 次工具调用」 above the answer and press 打开 ↗ — the 仓库 tab opens on that record |
 | **Looking at a picture** | Image bytes stay out of the conversation by default; when you ask "look at this picture and tell me what it is", the assistant sends that one image to itself — explicitly, per call |
@@ -161,6 +161,7 @@ With a remote configured and `/inbox` as the directory:
 - **Pictures**: classification does send an image to the model (a phone photo of an ID card has the same proportions as any other photo); the conversation gets an `[attachment:id]` marker by default. **The one exception**: when you explicitly ask the assistant to look at a picture, that single image is sent to it — per call, never by default.
 - **The model cannot see your vault** unless you ask it to look, and classification requests are redacted first.
 - **Your remote needs access control**: only credential bodies are ciphertext up there — text, links, notes and attachment bytes are in the clear, and the master password and key never sync.
+- **What the install changes outside the panel**: reading a pasted link's headline is this plugin's only outbound request — one GET, only for links captured on this machine, never for links that arrived through sync. The profile makes it with a browser-shaped identity (`… AppleWebKit/537.36 (KHTML, like Gecko) dsh-inbox Safari/537.36`), shipped in this package's `cordis.patch.yml` as an override of `web-fetch-http.userAgent`, because sites gate on the shape of that string. That identity is the whole profile's, the model's own web tools included; **your own `cordis.patch.yml` overrides it**. Measurements and reasoning: [docs/help/link-title-fetch.md](docs/help/link-title-fetch.md).
 
 ## Development
 
@@ -173,6 +174,14 @@ pnpm test         # vitest
 
 Client-side changes need `pnpm build` and a page reload (dsh's client-hmr reloads it for you); host-side changes need a restart. Details in [docs/help/dev-setup.md](docs/help/dev-setup.md); milestones and acceptance records in the [development bus](docs/feature/dev-bus.md).
 
+To switch the profile you actually run between the **published package** and **this checkout** (default profile `web`; set `DSH_PROFILE` for another):
+
+```powershell
+pnpm dev:status    # which one is in use right now
+pnpm dev:npm       # point it at the published version
+pnpm dev:local     # point it back here (builds first, then links)
+```
+
 ## License
 
 MIT

package/README.zh.md

@@ -19,9 +19,9 @@
 | 功能 | 说明 |
 |---|---|
 | **两个入口** | 输入框里 `/inbox <文字或链接>`（图片附在输入框上一起收），或面板里粘贴 / 拖拽 / 选择文件 |
-| **自动分类** | 链接按平台与类型分（B 站视频、公众号文章…）、文本按密钥形状分、图片按比例加「疑似证件」标签；规则判不出的交给模型兜底，有每日上限 |
+| **自动分类** | 链接按平台与类型分（B 站/YouTube 视频，公众号/掘金/知乎文章…共 60 多个站点）、文本按密钥形状分、图片按比例加「疑似证件」标签；规则判不出的交给模型兜底，有每日上限 |
 | **面板** | 待看 / 类目 / 标签筛选 + 跨标题正文链接备注的搜索；两种列表密度；详情里能改名称、类目、备注、标签，能标待看，能删除与恢复；**跟着 dsh 的深色/浅色主题走，也跟着它的语言走**（在「设置 → 常规」里把 dsh 切成 English，面板、右侧 dock、对话卡片与使用手册一起变） |
-| **每条都有名字** | 链接自动抓页面标题（不花模型 token）、图片文件用原文件名；你自己起的名字永远优先。列表里显示名字本身，类型交给左侧图标（密钥就是一把钥匙） |
+| **每条都有名字** | 链接自动抓页面标题（不花模型 token）、图片文件用原文件名；你自己起的名字永远优先。读不到的页面——对方是反爬页、或者链接已经死了——名字位就留链接本身，不猜一个。列表里显示名字本身，类型交给左侧图标（密钥就是一把钥匙） |
 | **类目是谁判的** | 类目旁带颜色标签：规则判定（灰）/ 模型判定（紫）/ 手动判定（蓝）。你改过的类目，后续任何流程都不会覆盖 |
 | **对话里取回** | 直接问「我的收件箱 / 仓库 / inbox 里有哪些还没看的链接」就行，助手按关键词/类目/标签/待看/类型查（最多 10 条 + 还剩几条，带图的结果直接显示缩略图），按 id 打开一条（正文最多 1000 字、链接、备注、标签、附件信息）。想直接看某一条：展开回答上方的「N 次工具调用」，记录后面的「打开 ↗」会在右侧「仓库」里停到那一条 |
 | **看图** | 默认图片字节不进对话；你说「帮我看这张图是什么」时，助手才会把那张图发给自己看（一次性、显式要） |
@@ -160,6 +160,7 @@ rm -r ~/.dsh/profiles/<你装的 profile>
 - **图片**：分类时会把图片发给模型判断（手机拍的证件照比例与普通照片无异）；对话里默认只回 `[attachment:id]` 标记，字节不进对话。**唯一的例外**：你明确让助手「看这张图」时，它会把那一张发给自己看——每次都要显式要求，默认永不发。
 - **模型看不到你的仓库**，除非你让它查（它调工具时才读得到），且分类请求先过脱敏。
 - **云端要有访问控制**：同步上去的内容里只有账密正文是密文，其余（文本、链接、备注、附件字节）是明文；主密码与密钥从不同步。
+- **装它会改到面板之外的一处**：抓链接标题是本插件唯一的对外请求——一次 GET，只在本机捕获的链接上发，同步拉进来的链接不抓。抓取身份是**浏览器形状**（`… AppleWebKit/537.36 (KHTML, like Gecko) dsh-inbox Safari/537.36`），由本包的 `cordis.patch.yml` 覆盖 `web-fetch-http.userAgent` 写成，因为站点按这个字符串的**形状**认客户端。这层身份是整个 profile 的，模型的 web 工具也一起用；**你自己的 `cordis.patch.yml` 覆盖得掉**。实测与理由见 [docs/help/link-title-fetch.md](docs/help/link-title-fetch.md)。
 
 ## 开发
 
@@ -172,6 +173,14 @@ pnpm test         # vitest
 
 改客户端代码：`pnpm build` 后刷新页面即可（dsh 的 client-hmr 会自己重载）；改宿主代码要重启服务。细节见 [docs/help/dev-setup.md](docs/help/dev-setup.md)，阶段与验收记录在[开发总线](docs/feature/dev-bus.md)。
 
+日常想在**线上发布版**和**本地改动**之间切换（默认 profile 是 `web`，换 profile 加 `DSH_PROFILE`）：
+
+```powershell
+pnpm dev:status    # 现在用的是哪一个：本仓库 / 线上包
+pnpm dev:npm       # 切到 npm 上发布的版本（体验发布版）
+pnpm dev:local     # 切回当前仓库（会先 pnpm build 再链接）
+```
+
 ## 许可
 
 MIT

package/cordis.patch.yml

@@ -9,3 +9,24 @@
 - insert:
     - id: dsh-inbox
       name: '@chance722/dsh-inbox'
+
+# The identity this profile fetches pages with, restated here because our own
+# link-title fetch needs a browser-shaped one: sites gate on the *shape* of this
+# string, and bilibili answers the `Mozilla/5.0 (compatible; ...)` form with an
+# anti-bot page that carries a real-looking `<title>` (measured 2026-09-21:
+# 20/29 refused for the compatible form, 0/15 for the one below). Details,
+# measurements and the refusal heuristics live in docs/help/link-title-fetch.md.
+#
+# It still says who is asking — `dsh-inbox` sits where a browser puts
+# `Chrome/140.0.0.0` — with no version token, because one that goes stale on every
+# release is worse than none. A parenthetical `(+url)` or a suffix after a browser
+# token lands in the refused bucket exactly like `(compatible; ...)` does, so
+# there is none of either.
+#
+# Scope: this is the profile's fetch identity, so the model's own web tools use it
+# too. The user's own cordis.patch.yml is applied after this layer and wins,
+# which is how anyone picks a different identity without touching the package.
+- id: web-fetch-http
+  name: '@deepseek-ai/dsh-web-fetch-http'
+  config:
+    userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) dsh-inbox Safari/537.36'

package/lib/client.js

@@ -715,12 +715,6 @@ window.__ModuleLoader__.load({
 		  "source.rule.hint": "\u672C\u5730\u89C4\u5219\u6309\u94FE\u63A5\u3001\u6587\u672C\u3001\u56FE\u7247\u7684\u5F62\u72B6\u5224\u7684\uFF0C\u6CA1\u6709\u8054\u7F51",
 		  "source.model.hint": "\u89C4\u5219\u5224\u4E0D\u51FA\u6765\u624D\u4EA4\u7ED9\u6A21\u578B\u5224\u7684\uFF1B\u4F60\u8BF4\u7684\u8BDD\u6C38\u8FDC\u4F18\u5148\uFF0C\u968F\u65F6\u53EF\u4EE5\u6539",
 		  "source.user.hint": "\u4F60\u81EA\u5DF1\u9009\u7684\u7C7B\u76EE\uFF0C\u89C4\u5219\u548C\u6A21\u578B\u90FD\u4E0D\u4F1A\u8986\u76D6\u5B83",
-		  // Why a link has no fetched title (these reach the panel as `linkTitleError`).
-		  "link.noTitle": "\u90A3\u4E2A\u9875\u9762\u91CC\u6CA1\u6709\u6807\u9898\uFF08\u6709\u4E9B\u7AD9\u70B9\u5BF9\u975E\u6D4F\u89C8\u5668\u7684\u8BF7\u6C42\u53EA\u56DE\u7A7A\u58F3\u9875\uFF0C\u6BD4\u5982\u5FAE\u4FE1\uFF09",
-		  "link.http": "\u5BF9\u65B9\u8FD4\u56DE HTTP {status}",
-		  "link.notHtml": "\u90A3\u4E2A\u5730\u5740\u4E0D\u662F\u7F51\u9875",
-		  "link.unreachable": "\u8BF7\u6C42\u6CA1\u6210\u529F\uFF08\u7F51\u7EDC\u4E0D\u901A\u6216\u5BF9\u65B9\u62D2\u7EDD\uFF09",
-		  "link.unknown": "\u539F\u56E0\u4E0D\u660E",
 		  // Chrome above the list.
 		  "app.settings": "\u8BBE\u7F6E",
 		  "app.manual": "\u4F7F\u7528\u624B\u518C",
@@ -777,7 +771,6 @@ window.__ModuleLoader__.load({
 		  "detail.removeTag": "\u4ECE\u8FD9\u6761\u8BB0\u5F55\u4E0A\u79FB\u9664\u300C{tag}\u300D",
 		  "detail.updated": " \xB7 \u66F4\u65B0 {when}",
 		  "detail.sealedNote": "\u8FD9\u6761\u8D26\u5BC6\u7684\u6B63\u6587\u662F\u5BC6\u6587\uFF0C\u73B0\u5728\u89E3\u4E0D\u5F00\u3002\u5230\u300C\u8BBE\u7F6E \u2192 \u8D26\u5BC6\u52A0\u5BC6\u300D\u89E3\u9501\uFF08\u6216\u5148\u8BBE\u4E00\u4E2A\u4E3B\u5BC6\u7801\uFF09\u5C31\u80FD\u770B\u5230\u3002",
-		  "detail.titleMissed": "\u6CA1\u6293\u5230\u9875\u9762\u6807\u9898\uFF1A{reason}\u3002\u53EF\u4EE5\u81EA\u5DF1\u8D77\u4E2A\u540D\u5B57\u3002",
 		  "detail.play": "\u64AD\u653E",
 		  "detail.zoom": "\u653E\u5927\u67E5\u770B",
 		  "detail.playInBrowser": "\u5728\u6D4F\u89C8\u5668\u91CC\u64AD\u653E",
@@ -868,11 +861,14 @@ window.__ModuleLoader__.load({
 		  "sync.pullFailed": "\u62C9\u53D6\u5931\u8D25\uFF1A{reason}",
 		  // The refresh button's tooltip: counts first, reasons only when something was
 		  // skipped. The toast carries the two numbers alone.
-		  "sync.detailPushedIdle": "\u63A8\u9001 0 \u6761\uFF08{count} \u6761\u5DF2\u662F\u6700\u65B0\uFF09",
+		  // No number here on purpose: the push considers every row it has, tombstones
+		  // included, so "26 条已是最新" next to a header saying "共 13 条" is a
+		  // mismatch the reader has to resolve for themselves (2026-09-21).
+		  "sync.detailPushedIdle": "\u63A8\u9001 0 \u6761\uFF08\u6CA1\u6709\u65B0\u6539\u52A8\uFF09",
 		  "sync.detailPushed": "\u63A8\u9001 {records} \u6761 / {attachments} \u4E2A\u9644\u4EF6",
 		  "sync.detailPulled": "\u62C9\u53D6 {count} \u6761 \xB7 \u4E91\u7AEF {records} \u6761\u8BB0\u5F55 / {files} \u4E2A\u9644\u4EF6",
 		  "sync.detailAdded": "\uFF08\u5176\u4E2D {count} \u6761\u662F\u65B0\u8BB0\u5F55\uFF09",
-		  "sync.detailSkip": "\uFF08\u8DF3\u8FC7 {skipped}\uFF1A\u81EA\u5DF1\u7684 {sync}\u3001\u66F4\u65E7 {older}\uFF09",
+		  "sync.detailDeleted": "\uFF08\u5176\u4E2D {count} \u6761\u662F\u5220\u9664\uFF0C\u4F1A\u8FDB\u56DE\u6536\u7AD9\uFF09",
 		  "sync.pullForeignSync": " \xB7 \u26A0\uFE0F \u53E6\u6709 {records} \u6761\u8BB0\u5F55\u5728\u522B\u7684\u540C\u6B65\u76EE\u5F55\uFF1A{roots}",
 		  "sync.detailForeign": " \xB7 \u26A0\uFE0F \u522B\u7684\u540C\u6B65\u76EE\u5F55\uFF1A{roots}\uFF08{records} \u6761\u8BB0\u5F55\uFF1B\u672C\u673A {ours}\uFF09",
 		  // The toast: two numbers, nothing else. Everything else about a sync is
@@ -996,11 +992,6 @@ window.__ModuleLoader__.load({
 		  "source.rule.hint": "the local rules judged this from the shape of the link, text or image \u2014 no network was used",
 		  "source.model.hint": "the rules could not decide, so the model did; what you say always wins and can be changed any time",
 		  "source.user.hint": "the category you chose yourself \u2014 neither the rules nor the model will overwrite it",
-		  "link.noTitle": "that page has no title (some sites answer non-browser requests with an empty shell \u2014 WeChat does)",
-		  "link.http": "the other side answered HTTP {status}",
-		  "link.notHtml": "that address is not a web page",
-		  "link.unreachable": "the request did not go through (no network, or refused)",
-		  "link.unknown": "no clear reason",
 		  "app.settings": "Settings",
 		  "app.manual": "Manual",
 		  "app.counts": " \xB7 {total} total \xB7 {watch} to read \xB7 {deleted} in the bin",
@@ -1053,7 +1044,6 @@ window.__ModuleLoader__.load({
 		  "detail.removeTag": "Remove \u201C{tag}\u201D from this record",
 		  "detail.updated": " \xB7 updated {when}",
 		  "detail.sealedNote": "This credential\u2019s body is ciphertext and cannot be read right now. Unlock it under Settings \u2192 Credential encryption (or set a master password first).",
-		  "detail.titleMissed": "No page title was fetched: {reason}. You can give it a name yourself.",
 		  "detail.play": "Play",
 		  "detail.zoom": "Zoom in",
 		  "detail.playInBrowser": "Play in the browser",
@@ -1137,11 +1127,11 @@ window.__ModuleLoader__.load({
 		  "sync.pushPartial": "{head} \xB7 partly failed: {reason}",
 		  "sync.pullNoAddress": "No address configured yet",
 		  "sync.pullFailed": "Pull failed: {reason}",
-		  "sync.detailPushedIdle": "pushed 0 ({count} already up to date)",
+		  "sync.detailPushedIdle": "pushed 0 (nothing new)",
 		  "sync.detailPushed": "pushed {records} / {attachments} attachments",
 		  "sync.detailPulled": "pulled {count} \xB7 the cloud holds {records} records / {files} attachments",
 		  "sync.detailAdded": " ({count} of them new)",
-		  "sync.detailSkip": " ({skipped} skipped: {sync} ours, {older} older)",
+		  "sync.detailDeleted": " ({count} of them deletions \u2014 they land in the recycle bin)",
 		  "sync.pullForeignSync": " \xB7 \u26A0\uFE0F {records} records live in another sync directory: {roots}",
 		  "sync.detailForeign": " \xB7 \u26A0\uFE0F another sync directory: {roots} ({records} records; ours is {ours})",
 		  "sync.shortPushed": "pushed {count}",
@@ -2022,15 +2012,6 @@ window.__ModuleLoader__.load({
 		var ACCENT_COLOR = "#6e9ef7";
 		var MODEL_COLOR = "#a78bfa";
 		var CONTROL_HEIGHT = "calc(1.6em + 12px)";
-		function titleFailureText(code) {
-		  if (code === "no-title") {
-		    return t("link.noTitle");
-		  }
-		  if (code.startsWith("http:")) return t("link.http", { status: code.slice("http:".length) });
-		  if (code.startsWith("not-html:")) return t("link.notHtml");
-		  if (code.startsWith("network:")) return t("link.unreachable");
-		  return t("link.unknown");
-		}
 		var paneRowStyle = { flex: "none" };
 		var selectStyle = {
 		  ...actionStyle,
@@ -3316,12 +3297,8 @@ window.__ModuleLoader__.load({
 		    files: result.remoteAttachments ?? 0
 		  });
 		  const gained = (result.added ?? 0) === 0 ? "" : t("sync.detailAdded", { count: result.added ?? 0 });
-		  const skipped = result.skipped === 0 ? "" : t("sync.detailSkip", {
-		    skipped: result.skipped,
-		    sync: result.skippedSync ?? 0,
-		    older: result.skippedOlder ?? 0
-		  });
-		  return `${head}${gained}${skipped}${warningsOf(result, true)}`;
+		  const deleted = (result.deletions ?? 0) === 0 ? "" : t("sync.detailDeleted", { count: result.deletions ?? 0 });
+		  return `${head}${gained}${deleted}${warningsOf(result, true)}`;
 		}
 		function EncryptionSettings({ call }) {
 		  const [status, setStatus] = import_react8.default.useState();
@@ -4324,7 +4301,6 @@ window.__ModuleLoader__.load({
 		                style: { ...paneRowStyle, ...inputStyle, width: "100%", boxSizing: "border-box" }
 		              }
 		            ),
-		            detail.title === void 0 && detail.linkTitle === void 0 && detail.linkTitleError !== void 0 && detail.kind === "link" && /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("p", { style: { ...paneRowStyle, margin: 0, fontSize: 12, opacity: 0.6 }, children: t("detail.titleMissed", { reason: titleFailureText(detail.linkTitleError) }) }),
 		            /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
 		              SelectBox,
 		              {

package/lib/index.js

@@ -3,7 +3,7 @@ import { defineTool as defineTool2 } from "@deepseek-ai/dsh-tools";
 
 // src/shared/constants.ts
 var PACKAGE_NAME = "@chance722/dsh-inbox";
-var VERSION = true ? "0.2.4" : "0.0.0-dev";
+var VERSION = true ? "0.2.6" : "0.0.0-dev";
 var DEFAULT_USER_AGENT = "dsh-inbox";
 
 // src/shared/vocabulary.ts
@@ -208,6 +208,16 @@ var ENTITIES = {
   apos: "'",
   nbsp: " "
 };
+var REFUSAL_MARKER = /(risk-captcha|_BiliGreyResult|cf-chl|challenge-platform|geetest)/i;
+var REFUSAL_TITLE = /(验证码|人机验证|安全验证|环境异常|访问异常|请完成验证|正在验证|captcha|just a moment|attention required|access denied|forbidden)/i;
+var REFUSAL_TEXT_FLOOR = 200;
+function visibleTextLength(html) {
+  return html.replace(/<script[\s\S]*?<\/script>/gi, "").replace(/<style[\s\S]*?<\/style>/gi, "").replace(/<!--[\s\S]*?-->/g, "").replace(/<[^>]+>/g, "").replace(/\s+/g, "").length;
+}
+function looksLikeRefusal(html, title) {
+  if (visibleTextLength(html) >= REFUSAL_TEXT_FLOOR) return false;
+  return REFUSAL_MARKER.test(html) || REFUSAL_TITLE.test(title);
+}
 function decodeEntities(text) {
   return text.replace(/&(#[xX]?[0-9a-fA-F]+|[a-zA-Z]+);/g, (whole, body) => {
     if (body.startsWith("#")) {
@@ -277,6 +287,11 @@ async function fetchLinkTitle(vault, id, web, log = () => {
     log(`${host}\uFF1A\u9875\u9762\u91CC\u6CA1\u6709 <title>\uFF08${String(result.body.content.length)} \u5B57\u7B26\uFF09`);
     return void 0;
   }
+  if (looksLikeRefusal(result.body.content, title)) {
+    await miss(vault, id, "refused-page");
+    log(`${host}\uFF1A\u6293\u5230\u7684\u662F\u62D2\u7EDD\u9875\uFF0C\u4E0D\u5F53\u540D\u5B57`);
+    return void 0;
+  }
   const current = vault.get(id);
   if (current === void 0 || current.title !== void 0 || current.linkTitle !== void 0) {
     log(`${host}\uFF1A\u6293\u5230\u4E86\u6807\u9898\uFF0C\u4F46\u8BB0\u5F55\u5DF2\u7ECF\u6709\u540D\u5B57\u4E86`);
@@ -295,19 +310,71 @@ async function miss(vault, id, reason) {
 
 // src/host/classify/rules.ts
 var PLATFORMS = [
-  ["bilibili.com", "bilibili"],
-  ["b23.tv", "bilibili"],
-  ["mp.weixin.qq.com", "wechat"],
-  ["weixin.qq.com", "wechat"],
-  ["zhihu.com", "zhihu"],
-  ["xiaohongshu.com", "xiaohongshu"],
-  ["xhslink.com", "xiaohongshu"],
-  ["maimai.cn", "maimai"],
+  // 视频 / 音频
+  ["bilibili.com", "bilibili", "media"],
+  ["b23.tv", "bilibili", "media"],
+  ["youtube.com", "youtube", "media"],
+  ["youtu.be", "youtube", "media"],
+  ["vimeo.com", "vimeo", "media"],
+  ["youku.com", "youku", "media"],
+  ["v.qq.com", "tencentvideo", "media"],
+  ["iqiyi.com", "iqiyi", "media"],
+  ["mgtv.com", "mgtv", "media"],
+  ["douyin.com", "douyin", "media"],
+  ["iesdouyin.com", "douyin", "media"],
+  ["kuaishou.com", "kuaishou", "media"],
+  ["ixigua.com", "xigua", "media"],
+  ["tiktok.com", "tiktok", "media"],
+  ["twitch.tv", "twitch", "media"],
+  ["dailymotion.com", "dailymotion", "media"],
+  ["music.163.com", "netease-music", "media"],
+  ["y.qq.com", "qq-music", "media"],
+  ["spotify.com", "spotify", "media"],
+  ["soundcloud.com", "soundcloud", "media"],
+  ["ximalaya.com", "ximalaya", "media"],
+  // 文章 / 帖子
+  ["mp.weixin.qq.com", "wechat", "article"],
+  ["weixin.qq.com", "wechat", "article"],
+  ["zhihu.com", "zhihu", "article"],
+  ["juejin.cn", "juejin", "article"],
+  ["csdn.net", "csdn", "article"],
+  ["cnblogs.com", "cnblogs", "article"],
+  ["jianshu.com", "jianshu", "article"],
+  ["segmentfault.com", "segmentfault", "article"],
+  ["v2ex.com", "v2ex", "article"],
+  ["sspai.com", "sspai", "article"],
+  ["36kr.com", "36kr", "article"],
+  ["infoq.cn", "infoq", "article"],
+  ["toutiao.com", "toutiao", "article"],
+  ["weibo.com", "weibo", "article"],
+  ["weibo.cn", "weibo", "article"],
+  ["douban.com", "douban", "article"],
+  ["xiaohongshu.com", "xiaohongshu", "article"],
+  ["xhslink.com", "xiaohongshu", "article"],
+  ["maimai.cn", "maimai", "article"],
+  ["yuque.com", "yuque", "article"],
+  ["medium.com", "medium", "article"],
+  ["substack.com", "substack", "article"],
+  ["dev.to", "devto", "article"],
+  ["news.ycombinator.com", "hackernews", "article"],
+  ["reddit.com", "reddit", "article"],
+  ["stackoverflow.com", "stackoverflow", "article"],
+  ["arxiv.org", "arxiv", "article"],
+  ["developer.mozilla.org", "mdn", "article"],
+  ["x.com", "twitter", "article"],
+  ["twitter.com", "twitter", "article"],
+  ["instagram.com", "instagram", "article"],
+  ["threads.net", "threads", "article"],
+  ["bsky.app", "bluesky", "article"],
+  ["t.me", "telegram", "article"],
+  ["linkedin.com", "linkedin", "article"],
+  // 代码 / 包：认得出站点，说不准"文章还是视频"，交给模型
   ["github.com", "github"],
-  ["youtube.com", "youtube"],
-  ["youtu.be", "youtube"],
-  ["x.com", "twitter"],
-  ["twitter.com", "twitter"]
+  ["gitlab.com", "gitlab"],
+  ["gitee.com", "gitee"],
+  ["npmjs.com", "npm"],
+  ["pypi.org", "pypi"],
+  ["huggingface.co", "huggingface"]
 ];
 var SECRET_PATTERNS = [
   [/\b(secret|access)[-_]?(id|key)\b\s*[:=]/i, "\u51FA\u73B0 secretId / secretKey \u8D4B\u503C"],
@@ -333,28 +400,28 @@ function hostOf(url) {
     return void 0;
   }
 }
-function platformOf(url) {
+function ruleFor(url) {
   const host = hostOf(url);
   if (host === void 0) return void 0;
-  for (const [suffix, platform] of PLATFORMS) {
-    if (host === suffix || host.endsWith(`.${suffix}`)) return platform;
+  for (const rule of PLATFORMS) {
+    const [suffix] = rule;
+    if (host === suffix || host.endsWith(`.${suffix}`)) return rule;
   }
   return void 0;
 }
-function isMedia(host, path) {
-  if (/bilibili\.com$|b23\.tv$|youtube\.com$|youtu\.be$/.test(host)) {
-    return !path.startsWith("/read/");
-  }
-  return /\/video\/|\/watch\b|\/audio\/|\/podcast/.test(path);
+function platformOf(url) {
+  return ruleFor(url)?.[1];
 }
-function isArticle(host, path) {
-  if (/mp\.weixin\.qq\.com$|weixin\.qq\.com$/.test(host)) return true;
-  if (/zhihu\.com$/.test(host)) return true;
-  if (/xiaohongshu\.com$|xhslink\.com$/.test(host)) return true;
-  return /\/article\/|\/post\/|\/blog\/|\/read\//.test(path);
+function pathSaysMedia(path) {
+  return /\/video\/|\/watch\b|\/audio\/|\/podcast|\/shorts\/|\/v_show\/|\/playlist\b/.test(path);
+}
+function pathSaysArticle(path) {
+  return /\/article\/|\/articles\/|\/post\/|\/posts\/|\/blog\/|\/read\/|\/story\/|\/item\b/.test(path);
 }
 function classifyLink(url) {
-  const platform = platformOf(url);
+  const rule = ruleFor(url);
+  const platform = rule?.[1];
+  const habit = rule?.[2];
   const parsed = (() => {
     try {
       return new URL(url);
@@ -365,15 +432,22 @@ function classifyLink(url) {
   if (parsed === void 0) {
     return { category: "other", confidence: "unsure", reason: "\u94FE\u63A5\u89E3\u6790\u4E0D\u4E86" };
   }
-  const host = parsed.hostname.toLowerCase().replace(/^www\./, "");
   const path = parsed.pathname;
   const base = platform === void 0 ? {} : { platform };
-  if (isMedia(host, path)) {
+  if (pathSaysMedia(path)) {
     return { ...base, category: "media", confidence: "decided", reason: "\u94FE\u63A5\u6307\u5411\u89C6\u9891/\u97F3\u9891\u9875" };
   }
-  if (isArticle(host, path)) {
+  if (pathSaysArticle(path)) {
     return { ...base, category: "article", confidence: "decided", reason: "\u94FE\u63A5\u6307\u5411\u6587\u7AE0\u9875" };
   }
+  if (habit !== void 0) {
+    return {
+      ...base,
+      category: habit,
+      confidence: "decided",
+      reason: habit === "media" ? `${String(platform)} \u4E0A\u7684\u89C6\u9891/\u97F3\u9891\u9875` : `${String(platform)} \u4E0A\u7684\u6587\u7AE0\u9875`
+    };
+  }
   if (platform !== void 0) {
     return { ...base, category: "other", confidence: "unsure", reason: `\u8BA4\u5F97\u51FA\u5E73\u53F0\u662F ${platform}\uFF0C\u4F46\u8BF4\u4E0D\u51C6\u662F\u6587\u7AE0\u8FD8\u662F\u89C6\u9891` };
   }
@@ -459,7 +533,17 @@ function mergedNote(current, incoming) {
 async function absorb(vault, existing, incoming) {
   const patched = await vault.patch(existing.id, {
     note: mergedNote(existing, incoming.note),
-    ...existing.title === void 0 && incoming.title !== void 0 ? { title: incoming.title } : {}
+    ...existing.title === void 0 && incoming.title !== void 0 ? { title: incoming.title } : {},
+    /*
+          A repeat is the cheap chance to fill in what the rules learned since.
+    
+          `platform` is derived from the host, and the table grows (掘金 was added
+          after a record for it already existed), so an old record can sit there
+          with no platform while a fresh paste of the same URL knows it. This only
+          ever *fills*: a record that already names a platform keeps it, because
+          that value may be what the user corrected by hand.
+        */
+    ...existing.platform === void 0 && incoming.platform !== void 0 ? { platform: incoming.platform } : {}
   });
   const restored = existing.deletedAt !== void 0;
   const item = restored ? await vault.restore(existing.id) : patched;
@@ -493,7 +577,12 @@ async function captureText(vault, raw, source, note) {
   const existing = vault.list({ includeDeleted: true, kinds: [sniffed.kind] }).find(
     (item) => sniffed.kind === "link" ? item.url !== void 0 && normalizeLink(item.url) === normalizeLink(raw) : sealed === void 0 ? item.text === raw : item.secretDigest === sealed.secretDigest
   );
-  if (existing !== void 0) return absorb(vault, existing, { note });
+  if (existing !== void 0) {
+    return absorb(vault, existing, {
+      note,
+      ...platform === void 0 ? {} : { platform }
+    });
+  }
   return { item: await vault.create(candidate), merged: false, restored: false, verdict };
 }
 async function captureImage(vault, attachment, source, note) {
@@ -1404,13 +1493,14 @@ async function mergeOnce(vault, tree, prefix, admit) {
   const failures = [];
   let merged = 0;
   let added = 0;
+  let deletions = 0;
   let kept = 0;
   let attachments = 0;
   let objects;
   try {
     objects = await tree.list(`${prefix}/items/`);
   } catch (error) {
-    return { merged: 0, added: 0, kept: 0, attachments: 0, failures: [`\u5217\u8FDC\u7AEF\u540C\u6B65\u76EE\u5F55\u5931\u8D25\uFF1A${reasonOf(error)}`] };
+    return { merged: 0, added: 0, deletions: 0, kept: 0, attachments: 0, failures: [`\u5217\u8FDC\u7AEF\u540C\u6B65\u76EE\u5F55\u5931\u8D25\uFF1A${reasonOf(error)}`] };
   }
   const wanted = /* @__PURE__ */ new Map();
   const bytesAt = /* @__PURE__ */ new Map();
@@ -1441,6 +1531,7 @@ async function mergeOnce(vault, tree, prefix, admit) {
       await vault.import(remote);
       merged += 1;
       if (local === void 0) added += 1;
+      if (remote.deletedAt !== void 0) deletions += 1;
       for (const attachmentId of remote.attachmentIds) {
         if (vault.getAttachment(attachmentId) === void 0) {
           wanted.set(attachmentId, remote.id);
@@ -1475,7 +1566,7 @@ async function mergeOnce(vault, tree, prefix, admit) {
       failures.push(`\u9644\u4EF6 ${attachmentId}\uFF1A${reasonOf(error)}`);
     }
   }
-  return { merged, added, kept, attachments, failures };
+  return { merged, added, deletions, kept, attachments, failures };
 }
 function extensionOfName(path) {
   return /\.([A-Za-z0-9]{1,8})$/.exec(nameOf2(path))?.[1]?.toLowerCase() ?? "bin";
@@ -1488,7 +1579,7 @@ async function mergeRemote(ctx, vault, attachments, extraRoots = []) {
   const prefix = syncRoot(settings);
   try {
     const tree = settings.protocol === "s3" ? await s3Tree(ctx, settings) : await webdavTree(ctx, settings);
-    if (tree === void 0) return { merged: 0, added: 0, kept: 0, attachments: 0, failures: [] };
+    if (tree === void 0) return { merged: 0, added: 0, deletions: 0, kept: 0, attachments: 0, failures: [] };
     const admit = admitWith(attachments);
     const outcome = await mergeOnce(vault, tree, prefix, admit);
     for (const root of extraRoots) {
@@ -1496,13 +1587,14 @@ async function mergeRemote(ctx, vault, attachments, extraRoots = []) {
       const extra = await mergeOnce(vault, tree, root, admit);
       outcome.merged += extra.merged;
       outcome.added += extra.added;
+      outcome.deletions += extra.deletions;
       outcome.kept += extra.kept;
       outcome.attachments += extra.attachments;
       outcome.failures.push(...extra.failures);
     }
     return outcome;
   } catch (error) {
-    return { merged: 0, added: 0, kept: 0, attachments: 0, failures: [reasonOf(error)] };
+    return { merged: 0, added: 0, deletions: 0, kept: 0, attachments: 0, failures: [reasonOf(error)] };
   }
 }
 function admitWith(store) {
@@ -1609,6 +1701,7 @@ async function withMerge(ctx, vault, attachments, pulled) {
     ...pulled,
     merged: outcome.merged,
     added: outcome.added,
+    deletions: outcome.deletions,
     kept: outcome.kept,
     attachments: outcome.attachments,
     failed: pulled.failed + outcome.failures.length,

package/lib/types/client/i18n.d.ts

@@ -86,17 +86,6 @@ export declare function categoryLabel(category: Category): string;
 export declare function sourceLabel(source: CategorySource): string;
 /** One sentence explaining what that badge implies. */
 export declare function sourceHint(source: CategorySource): string;
-/**
- * Why a link never got a name.
- *
- * The host stores a machine-readable code (`http:403`, `no-title`, …) — never a
- * sentence, and deliberately not in the host's language — so the panel can say
- * it in the reader's.
- *
- * @param code - the stored `linkTitleError`, or undefined when there is none.
- * @returns a sentence, or undefined when there is nothing to explain.
- */
-export declare function titleMissReason(code: string | undefined): string | undefined;
 /**
  * Hook the panel's copy up to dsh's language.
  *

package/lib/types/client/messages.d.ts

@@ -41,11 +41,6 @@ export declare const zh: {
     'source.rule.hint': string;
     'source.model.hint': string;
     'source.user.hint': string;
-    'link.noTitle': string;
-    'link.http': string;
-    'link.notHtml': string;
-    'link.unreachable': string;
-    'link.unknown': string;
     'app.settings': string;
     'app.manual': string;
     'app.counts': string;
@@ -98,7 +93,6 @@ export declare const zh: {
     'detail.removeTag': string;
     'detail.updated': string;
     'detail.sealedNote': string;
-    'detail.titleMissed': string;
     'detail.play': string;
     'detail.zoom': string;
     'detail.playInBrowser': string;
@@ -186,7 +180,7 @@ export declare const zh: {
     'sync.detailPushed': string;
     'sync.detailPulled': string;
     'sync.detailAdded': string;
-    'sync.detailSkip': string;
+    'sync.detailDeleted': string;
     'sync.pullForeignSync': string;
     'sync.detailForeign': string;
     'sync.shortPushed': string;
@@ -310,11 +304,6 @@ export declare const MESSAGES: {
         'source.rule.hint': string;
         'source.model.hint': string;
         'source.user.hint': string;
-        'link.noTitle': string;
-        'link.http': string;
-        'link.notHtml': string;
-        'link.unreachable': string;
-        'link.unknown': string;
         'app.settings': string;
         'app.manual': string;
         'app.counts': string;
@@ -367,7 +356,6 @@ export declare const MESSAGES: {
         'detail.removeTag': string;
         'detail.updated': string;
         'detail.sealedNote': string;
-        'detail.titleMissed': string;
         'detail.play': string;
         'detail.zoom': string;
         'detail.playInBrowser': string;
@@ -455,7 +443,7 @@ export declare const MESSAGES: {
         'sync.detailPushed': string;
         'sync.detailPulled': string;
         'sync.detailAdded': string;
-        'sync.detailSkip': string;
+        'sync.detailDeleted': string;
         'sync.pullForeignSync': string;
         'sync.detailForeign': string;
         'sync.shortPushed': string;

package/lib/types/host/link-title.d.ts

@@ -8,12 +8,15 @@
  * private ones, follows only same-origin redirects, and caps both time and size.
  * It runs after the record is stored, never in front of the paste.
  *
- * Three rules keep it honest:
+ * Four rules keep it honest:
  * - it never writes `title`. That field is the user's own word, and the
  *   credentials rule depends on it staying that way (`AGENTS.md` 3); the fetched
  *   headline lives in `linkTitle` instead;
  * - it writes nothing when the record already has a name, and nothing when the
  *   user renamed it while the fetch was in flight;
+ * - it does not take a name from a page that is not the page: a site can answer
+ *   with an anti-bot page that carries a *real-looking* `<title>` (bilibili's is
+ *   「验证码_哔哩哔哩」), and that string names the refusal, not the link;
  * - it never turns a failure into a problem: a dead link, a slow host or a page
  *   that is not HTML simply leaves the URL as the name, which is where this
  *   started.
@@ -34,6 +37,27 @@ export interface WebFetchSeam {
         readonly url: string;
     }, signal?: AbortSignal): Promise<WebFetchResult>;
 }
+/**
+ * True when this document is a refusal wearing a page's clothes.
+ *
+ * The checks before this one — a 2xx status, an HTML body, a non-empty
+ * `<title>` — all pass on bilibili's anti-bot page, which is what made a record
+ * show 「验证码」 as its name (2026-09-21). What separates that page from a real
+ * one is that it carries **no text at all**: the challenge shell is 1360 bytes
+ * of scripts and empty containers, while the page it stands in for has
+ * thousands of characters. Only then do the markers and the shape of the title
+ * decide, because the markers alone are not evidence — real bilibili pages
+ * carry the same strings.
+ *
+ * Both halves are deliberately biased towards refusing: a link whose name we
+ * skip shows its own address, which is honest and one keystroke away from being
+ * named by hand, while a refusal kept as a name is a wrong name that stays.
+ *
+ * @param html - the decoded document.
+ * @param title - the headline pulled out of it.
+ * @returns true when the page refuses to be read.
+ */
+export declare function looksLikeRefusal(html: string, title: string): boolean;
 /**
  * Pull the `<title>` out of an HTML document.
  *

package/lib/types/host/remote/merge.d.ts

@@ -42,6 +42,15 @@ export interface SyncTree {
 export interface MergeOutcome {
     /** Records that were new here, or overwritten because the remote was newer. */
     merged: number;
+    /**
+     * How many of {@link merged} arrived as deletions.
+     *
+     * A deleted record travels as an ordinary record with deletedAt set, so a
+     * merge that brings deletions looks exactly like one that brings updates until
+     * somebody opens the recycle bin (measured 2026-09-21: 19 merged — 6 new
+     * records and 13 tombstones, and the bin went from empty to thirteen).
+     */
+    deletions: number;
     /**
      * How many of {@link merged} were ids this vault did not have at all.
      *

package/lib/types/shared/panel-wire.d.ts

@@ -175,6 +175,8 @@ export interface PullResult {
     merged?: number;
     /** How many of {@link merged} were ids this vault did not have at all. */
     added?: number;
+    /** How many of {@link merged} were deletions (they land in the recycle bin). */
+    deletions?: number;
     /** Attachment objects the merge had to fetch and admit locally. */
     attachments?: number;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chance722/dsh-inbox",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "private": false,
   "description": "Personal paste inbox for DeepSeek Harness (dsh): capture, classify, browse and retrieve.",
   "keywords": [
@@ -64,7 +64,10 @@
     "build": "node scripts/build.mjs && tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "dev:status": "node scripts/dev.mjs status",
+    "dev:local": "node scripts/dev.mjs local",
+    "dev:npm": "node scripts/dev.mjs npm"
   },
   "dependencies": {
     "lucide-react": "^1.47.0",