@downcity/plugins 1.0.254 → 1.0.280

package/bin/workboard/runtime/Collector.js.map

@@ -1 +1 @@
-{"version":3,"file":"Collector.js","sourceRoot":"","sources":["../../../src/workboard/runtime/Collector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAsB;IAEtB,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,EAAE,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC;QACnD,OAAO;QACP,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,mBAAmB;KACpB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACvF,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CACzC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAClC,CAAC,MAAM,CAAC;IAET,MAAM,OAAO,GAAG,QAAQ;SACrB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;SACzC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,QAAQ;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;SACzC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;SAChC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC;QACpC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEjF,OAAO;QACL,KAAK,EAAE,uBAAuB,CAAC;YAC7B,OAAO;YACP,WAAW;YACX,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,aAAa;SACd,CAAC;QACF,OAAO,EAAE,kBAAkB,CAAC;YAC1B,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,aAAa;SACd,CAAC;QACF,OAAO,EAAE,WAAW;QACpB,MAAM;QACN,OAAO,EAAE,kBAAkB,CAAC;YAC1B,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,OAAO,EAAE,cAAc;YACvB,UAAU;SACX,CAAC;KACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"Collector.js","sourceRoot":"","sources":["../../../src/workboard/runtime/Collector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAsB;IAEtB,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,EAAE,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC;QACnD,OAAO;QACP,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,mBAAmB;KACpB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CACzC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAClC,CAAC,MAAM,CAAC;IAET,MAAM,OAAO,GAAG,QAAQ;SACrB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;SACzC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,QAAQ;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;SACzC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;SAChC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC;QACpC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEjF,OAAO;QACL,KAAK,EAAE,uBAAuB,CAAC;YAC7B,OAAO;YACP,WAAW;YACX,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,aAAa;SACd,CAAC;QACF,OAAO,EAAE,kBAAkB,CAAC;YAC1B,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,aAAa;SACd,CAAC;QACF,OAAO,EAAE,WAAW;QACpB,MAAM;QACN,OAAO,EAAE,kBAAkB,CAAC;YAC1B,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,OAAO,EAAE,cAAc;YACvB,UAAU;SACX,CAAC;KACH,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@downcity/plugins",
-  "version": "1.0.254",
+  "version": "1.0.280",
   "type": "module",
   "description": "Downcity 内建 plugin 集合包",
   "main": "./bin/index.js",
@@ -26,6 +26,10 @@
       "types": "./bin/memory.d.ts",
       "import": "./bin/memory.js"
     },
+    "./renderers": {
+      "types": "./bin/renderers.d.ts",
+      "import": "./bin/renderers.js"
+    },
     "./skill": {
       "types": "./bin/skill.d.ts",
       "import": "./bin/skill.js"
@@ -47,11 +51,25 @@
       "import": "./bin/workboard.js"
     }
   },
+  "scripts": {
+    "build": "node ../../scripts/clean-package.mjs && tsc && tsc-alias -f",
+    "dev": "tsc --watch",
+    "typecheck": "tsc --noEmit",
+    "test:chat-access": "pnpm build && node --test scripts/chat-access.test.mjs",
+    "test:chat-config": "pnpm build && node --test scripts/chat-channel-config.test.mjs",
+    "test:plugin-main": "pnpm build && node --test scripts/plugin-main.test.mjs",
+    "test:chat-storage": "pnpm build && node --test scripts/chat-storage.test.mjs",
+    "test:exports": "pnpm build && node --test scripts/plugin-subpaths.test.mjs",
+    "test:memory": "pnpm build && node --test scripts/memory-plugin.test.mjs",
+    "test:skill": "pnpm build && node --test scripts/skill-plugin.test.mjs",
+    "test:sound": "pnpm build && node --test scripts/sound-plugin.test.mjs",
+    "test:web": "pnpm build && node --test scripts/web-plugin.test.mjs && node --experimental-test-module-mocks --test scripts/playwright-browser-provider.test.mjs",
+    "prepack": "npm run build && node ../../scripts/rewrite-workspace-dependencies.mjs prepare ./package.json",
+    "postpack": "node ../../scripts/rewrite-workspace-dependencies.mjs restore ./package.json"
+  },
   "dependencies": {
-    "@downcity/agent": "^1.1.338",
-    "@downcity/shell": "^0.1.172",
-    "ai": "^6.0.193",
-    "better-sqlite3": "^12.10.0",
+    "@downcity/agent": "^1.1.399",
+    "@downcity/plugin": "^0.1.2",
     "commander": "^15.0.0",
     "execa": "^9.6.1",
     "fs-extra": "^11.3.5",
@@ -61,27 +79,18 @@
     "ws": "^8.21.0",
     "zod": "^4.4.3"
   },
+  "peerDependencies": {
+    "react": "^19.0.0"
+  },
   "devDependencies": {
-    "@types/better-sqlite3": "^7.6.13",
     "@types/fs-extra": "^11.0.4",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^25.9.1",
     "@types/node-cron": "^3.0.11",
+    "@types/react": "^19.2.14",
     "@types/ws": "^8.18.1",
+    "react": "^19.2.6",
     "tsc-alias": "^1.8.17",
     "typescript": "^6.0.3"
-  },
-  "scripts": {
-    "build": "node ../../scripts/clean-package.mjs && tsc && tsc-alias -f",
-    "dev": "tsc --watch",
-    "typecheck": "tsc --noEmit",
-    "test:chat-access": "pnpm build && node --test scripts/chat-access.test.mjs",
-    "test:chat-config": "pnpm build && node --test scripts/chat-channel-config.test.mjs",
-    "test:chat-storage": "pnpm build && node --test scripts/chat-storage.test.mjs",
-    "test:exports": "pnpm build && node --test scripts/plugin-subpaths.test.mjs",
-    "test:memory": "pnpm build && node --test scripts/memory-plugin.test.mjs",
-    "test:skill": "pnpm build && node --test scripts/skill-plugin.test.mjs",
-    "test:sound": "pnpm build && node --test scripts/sound-plugin.test.mjs",
-    "test:web": "pnpm build && node --test scripts/web-plugin.test.mjs"
   }
-}
+}

package/scripts/chat-access.test.mjs

@@ -32,7 +32,7 @@ function telegram_identity(issuer, chat_type = "private") {
 test("Chat Access 按 issuer 隔离并复用 pending request", () => {
   const project_root = create_project_root();
   try {
-    const service = new ChatAccessService({ project_root });
+    const service = new ChatAccessService({ data_path: project_root });
     const first = service.evaluate(telegram_identity("telegram-main"));
     const repeated = service.evaluate(telegram_identity("telegram-main"));
     const other_issuer = service.evaluate(telegram_identity("telegram-backup"));
@@ -54,6 +54,7 @@ test("Telegram 授权命令使用代码格式并保留完整标识符", () => {
       {
         agent_id: "lucas_whitman",
         workspace_path: project_root,
+        data_path: project_root,
         logger: {
           debug() {},
           info() {},
@@ -85,7 +86,7 @@ test("Telegram 授权命令使用代码格式并保留完整标识符", () => {
 test("approve all、revoke 和 deny 保持明确状态语义", () => {
   const project_root = create_project_root();
   try {
-    const service = new ChatAccessService({ project_root });
+    const service = new ChatAccessService({ data_path: project_root });
     const pending = service.evaluate(telegram_identity("telegram-main"));
     assert.ok(pending.request_id);
 

package/scripts/chat-channel-config.test.mjs

@@ -9,7 +9,7 @@ function create_channel(name) {
   return {
     name,
     isEnabled: () => false,
-    getResourceId: () => "",
+    get_channel_id: () => "",
     getAccount: () => null,
   };
 }
@@ -32,7 +32,7 @@ test("ChatPlugin 不提供配置修改 action", () => {
   assert.equal("configure" in plugin.actions, false);
 });
 
-test("ChatPlugin 只消费宿主已经解析的 Resource 构造参数", () => {
+test("ChatPlugin 只消费宿主已经解析的 profile 渠道配置", () => {
   const plugin = new ChatPlugin({
     channels: [new TelegramChannel({
       id: "telegram-main",
@@ -41,7 +41,7 @@ test("ChatPlugin 只消费宿主已经解析的 Resource 构造参数", () => {
     })],
   });
 
-  assert.equal(plugin.getResourceId({}, "telegram"), "telegram-main");
+  assert.equal(plugin.get_channel_id({}, "telegram"), "telegram-main");
   const account = plugin.resolveChannelAccount({}, "telegram");
   assert.ok(account);
   assert.deepEqual(account, {

package/scripts/chat-storage.test.mjs

@@ -14,16 +14,13 @@ function create_project_root() {
 }
 
 test("clean_chat_storage 只清理 Chat Plugin 自有数据", async () => {
-  const root_path = create_project_root();
+  const data_path = create_project_root();
   try {
     const session_id = "session_chat";
-    const meta_path = path.join(root_path, ".downcity", "channel", "meta.json");
-    const chat_dir = path.join(root_path, ".downcity", "chat", session_id);
+    const meta_path = path.join(data_path, "channel", "meta.json");
+    const chat_dir = path.join(data_path, "chat", session_id);
     const agent_session_dir = path.join(
-      root_path,
-      ".downcity",
-      "agents",
-      "agent_test",
+      data_path,
       "sessions",
       session_id,
     );
@@ -47,7 +44,7 @@ test("clean_chat_storage 只清理 Chat Plugin 自有数据", async () => {
     }));
 
     const result = await clean_chat_storage({
-      root_path,
+      data_path,
       channel: "telegram",
       chat_id: "chat_1",
     });
@@ -59,17 +56,16 @@ test("clean_chat_storage 只清理 Chat Plugin 自有数据", async () => {
     const meta = JSON.parse(fs.readFileSync(meta_path, "utf8"));
     assert.equal(meta.routesBySessionId[session_id], undefined);
   } finally {
-    fs.rmSync(root_path, { recursive: true, force: true });
+    fs.rmSync(data_path, { recursive: true, force: true });
   }
 });
 
 test("chat.history_clear action 只清空事件历史", async () => {
-  const root_path = create_project_root();
+  const data_path = create_project_root();
   try {
     const session_id = "session_history";
     const history_path = path.join(
-      root_path,
-      ".downcity",
+      data_path,
       "chat",
       session_id,
       "history.jsonl",
@@ -78,7 +74,7 @@ test("chat.history_clear action 只清空事件历史", async () => {
     fs.writeFileSync(history_path, "{}\n");
     const plugin = new ChatPlugin({ channels: [] });
     const result = await plugin.actions.history_clear.execute({
-      context: { workspace_path: root_path },
+      context: { workspace_path: data_path, data_path },
       input: { session_id: session_id },
       plugin_name: "chat",
       action_name: "history_clear",
@@ -87,6 +83,6 @@ test("chat.history_clear action 只清空事件历史", async () => {
     assert.equal(result.data.cleared, true);
     assert.equal(fs.existsSync(history_path), false);
   } finally {
-    fs.rmSync(root_path, { recursive: true, force: true });
+    fs.rmSync(data_path, { recursive: true, force: true });
   }
 });

package/scripts/memory-plugin.test.mjs

@@ -174,31 +174,10 @@ test("Builtin Provider 在 initialize 阶段按 Agent 延迟创建 Adapter", asy
   await provider.dispose();
 });
 
-test("MemoryPlugin 将公开 Action 委托给唯一 Provider", async () => {
-  const calls = [];
-  const provider = {
-    name: "test-provider",
-    capabilities: {
-      remember: true,
-      recall: true,
-      read: true,
-      revise: true,
-      forget: true,
-      digest: true,
-      system_context: true,
-    },
-    async initialize(input) { calls.push(["initialize", input]); },
-    async status() { return { provider: this.name, state: "ready", capabilities: this.capabilities }; },
-    async recall(input) { calls.push(["recall", input]); return { provider: this.name, items: [] }; },
-    async read(input) { calls.push(["read", input]); return { memory_id: input.memory_id, memory: null }; },
-    async remember(input) { calls.push(["remember", input]); return { memory_id: "remote:1", mode: "created" }; },
-    async digest(input) { calls.push(["digest", input]); return { memory_ids: [], message_count: input.message_count, mode: "archived" }; },
-    async revise(input) { calls.push(["revise", input]); return { memory_id: input.memory_id, mode: "revised" }; },
-    async forget(input) { calls.push(["forget", input]); return { memory_id: input.memory_id, forgotten: true }; },
-    async system_context() { return { items: [] }; },
-    async dispose() { calls.push(["dispose"]); },
-  };
-  const plugin = new MemoryPlugin({ provider });
+test("MemoryPlugin 使用显式运行时目录并公开完整 Action", async (context) => {
+  const memory_root = await fs.mkdtemp(path.join(os.tmpdir(), "downcity-memory-plugin-"));
+  context.after(async () => await fs.rm(memory_root, { recursive: true, force: true }));
+  const plugin = new MemoryPlugin({ root_path: memory_root });
   const plugin_context = {
     agent_id: "memory_test_agent",
     workspace_path: "/workspace",
@@ -215,13 +194,11 @@ test("MemoryPlugin 将公开 Action 委托给唯一 Provider", async () => {
     action_name: "remember",
   });
   assert.equal(result.success, true);
-  assert.equal(result.data.memory_id, "remote:1");
-  assert.deepEqual(calls[0], ["initialize", {
-    agent_id: "memory_test_agent",
-  }]);
-  assert.equal(calls[1][0], "remember");
-  assert.equal(calls[1][1].scope.agent_id, "memory_test_agent");
+  assert.equal(result.data.memory_id, "wiki/test");
+  assert.equal(
+    await fs.access(path.join(memory_root, "wiki", "test.md")).then(() => true).catch(() => false),
+    true,
+  );
   assert.equal("files" in plugin_context, false);
   await plugin.lifecycle.stop(plugin_context);
-  assert.equal(calls.at(-1)[0], "dispose");
 });

package/scripts/playwright-browser-provider.test.mjs

@@ -0,0 +1,260 @@
+/**
+ * PlaywrightBrowserProvider 的 CDP 连接与页面所有权专项测试。
+ *
+ * 关键点（中文）
+ * - 通过 Node 模块 mock 隔离真实 CDP endpoint，只验证 provider 的连接契约。
+ * - 默认 context 和既有 page 均属于外部浏览器，测试确保 provider 不接管或关闭它们。
+ * - 每个用例使用独立 provider 和 browser，避免 session registry 在测试之间共享。
+ */
+
+import assert from "node:assert/strict";
+import test, { mock } from "node:test";
+
+const connect_calls = [];
+let current_browser;
+
+mock.module("playwright-core", {
+  namedExports: {
+    chromium: {
+      async connectOverCDP(...args) {
+        connect_calls.push(args);
+        if (current_browser instanceof Error) throw current_browser;
+        return current_browser;
+      },
+    },
+  },
+});
+
+const { PlaywrightBrowserProvider } = await import("../bin/web.js");
+
+function create_page(overrides = {}) {
+  return {
+    closed: false,
+    default_timeout: null,
+    default_navigation_timeout: null,
+    goto_calls: [],
+    setDefaultTimeout(value) { this.default_timeout = value; },
+    setDefaultNavigationTimeout(value) { this.default_navigation_timeout = value; },
+    async goto(...args) { this.goto_calls.push(args); },
+    locator() {
+      return {
+        async innerText() { return "Page body"; },
+        async allTextContents() { return ["Page body"]; },
+      };
+    },
+    url() { return "https://example.com/"; },
+    async title() { return "Example"; },
+    async close() { this.closed = true; },
+    ...overrides,
+  };
+}
+
+function create_browser(overrides = {}) {
+  const disconnected_listeners = [];
+  const existing_page = create_page();
+  const session_page = create_page();
+  const context = {
+    closed: false,
+    new_page_calls: 0,
+    pages() { return [existing_page]; },
+    async newPage() {
+      this.new_page_calls += 1;
+      return session_page;
+    },
+    async close() { this.closed = true; },
+  };
+  const browser = {
+    context,
+    existing_page,
+    session_page,
+    closed: false,
+    new_context_calls: 0,
+    connected: true,
+    contexts() { return [context]; },
+    async newContext() {
+      this.new_context_calls += 1;
+      throw new Error("newContext must not be called");
+    },
+    isConnected() { return this.connected; },
+    on(event, listener) {
+      if (event === "disconnected") disconnected_listeners.push(listener);
+    },
+    disconnect() {
+      this.connected = false;
+      for (const listener of disconnected_listeners) listener();
+    },
+    async close() { this.closed = true; },
+    ...overrides,
+  };
+  return browser;
+}
+
+test.beforeEach(() => {
+  connect_calls.length = 0;
+  current_browser = create_browser();
+});
+
+test("连接传递 timeout 和 noDefaults，并在默认 context 创建独占 page", async () => {
+  const provider = new PlaywrightBrowserProvider({
+    cdp_url: "http://127.0.0.1:9222",
+    timeout_ms: 4_000,
+  });
+
+  const result = await provider.create_session({ url: "https://example.com" });
+
+  assert.deepEqual(connect_calls, [[
+    "http://127.0.0.1:9222",
+    { timeout: 4_000, noDefaults: true },
+  ]]);
+  assert.equal(current_browser.context.new_page_calls, 1);
+  assert.equal(current_browser.new_context_calls, 0);
+  assert.equal(current_browser.existing_page.closed, false);
+  assert.equal(current_browser.session_page.default_timeout, 4_000);
+  assert.equal(current_browser.session_page.default_navigation_timeout, 4_000);
+  assert.deepEqual(current_browser.session_page.goto_calls, [[
+    "https://example.com",
+    { waitUntil: "domcontentloaded" },
+  ]]);
+  assert.equal(result.title, "Example");
+
+  await provider.close_session({ session_id: result.session_id });
+  assert.equal(current_browser.session_page.closed, true);
+  assert.equal(current_browser.existing_page.closed, false);
+  assert.equal(current_browser.context.closed, false);
+});
+
+test("默认 context 不存在时返回 resolve-context 且不创建隔离 context", async () => {
+  current_browser = create_browser({ contexts: () => [] });
+  const provider = new PlaywrightBrowserProvider({
+    cdp_url: "ws://user:password@127.0.0.1:9222/devtools/browser/id?token=secret",
+  });
+
+  await assert.rejects(
+    provider.create_session({}),
+    (error) => {
+      assert.match(error.message, /during resolve-context/);
+      assert.match(error.message, /ws:\/\/127\.0\.0\.1:9222/);
+      assert.doesNotMatch(error.message, /user|password|token|browser\/id/);
+      return true;
+    },
+  );
+  assert.equal(current_browser.new_context_calls, 0);
+});
+
+test("page 创建失败时返回 create-page 且保留默认 context", async () => {
+  current_browser = create_browser();
+  current_browser.context.newPage = async () => {
+    throw new Error(
+      "Protocol error for ws://user:pass@127.0.0.1:9222/devtools/browser/private?token=secret",
+    );
+  };
+  const provider = new PlaywrightBrowserProvider({
+    cdp_url: "ws://user:password@127.0.0.1:9222/devtools/browser/id?token=secret",
+  });
+
+  await assert.rejects(
+    provider.create_session({}),
+    (error) => {
+      assert.match(error.message, /during create-page/);
+      assert.match(error.message, /ws:\/\/127\.0\.0\.1:9222/);
+      assert.doesNotMatch(error.message, /user|pass|token|private|browser\/id/);
+      return true;
+    },
+  );
+  assert.equal(current_browser.context.closed, false);
+});
+
+test("页面初始化失败时关闭新 page 并复用 browser connection", async () => {
+  current_browser = create_browser();
+  const first_page = current_browser.session_page;
+  first_page.goto = async () => {
+    throw new Error("Navigation failed for https://example.com/private?token=secret");
+  };
+  const second_page = create_page();
+  current_browser.context.newPage = async () => {
+    current_browser.context.new_page_calls += 1;
+    return current_browser.context.new_page_calls === 1 ? first_page : second_page;
+  };
+  const provider = new PlaywrightBrowserProvider({
+    cdp_url: "http://127.0.0.1:9222",
+  });
+
+  await assert.rejects(
+    provider.create_session({ url: "https://example.com/private" }),
+    (error) => {
+      assert.match(error.message, /during initialize-page/);
+      assert.doesNotMatch(error.message, /private|token|secret/);
+      return true;
+    },
+  );
+  assert.equal(first_page.closed, true);
+
+  const result = await provider.create_session({ url: "https://example.com" });
+  assert.equal(connect_calls.length, 1);
+  assert.equal(second_page.closed, false);
+  await provider.close_session({ session_id: result.session_id });
+});
+
+test("连接失败返回脱敏 connect 错误", async () => {
+  current_browser = new Error(
+    "connect ECONNREFUSED ws://user:pass@127.0.0.1:9222/devtools/browser/id?token=secret",
+  );
+  const provider = new PlaywrightBrowserProvider({
+    cdp_url: "ws://user:password@127.0.0.1:9222/devtools/browser/id?token=secret",
+  });
+
+  await assert.rejects(
+    provider.create_session({}),
+    (error) => {
+      assert.match(error.message, /during connect/);
+      assert.match(error.message, /ws:\/\/127\.0\.0\.1:9222/);
+      assert.doesNotMatch(error.message, /user|pass|token|secret|browser\/id/);
+      return true;
+    },
+  );
+});
+
+test("browser disconnected 后清理 session registry", async () => {
+  const provider = new PlaywrightBrowserProvider({
+    cdp_url: "http://127.0.0.1:9222",
+  });
+  const result = await provider.create_session({});
+
+  current_browser.disconnect();
+
+  await assert.rejects(
+    provider.observe({ session_id: result.session_id }),
+    /Browser session not found/,
+  );
+});
+
+test("旧 browser 延迟断开不会清理新连接的 session", async () => {
+  const first_browser = current_browser;
+  const provider = new PlaywrightBrowserProvider({
+    cdp_url: "http://127.0.0.1:9222",
+  });
+  await provider.create_session({});
+
+  first_browser.connected = false;
+  current_browser = create_browser();
+  const result = await provider.create_session({});
+  first_browser.disconnect();
+
+  const observation = await provider.observe({ session_id: result.session_id });
+  assert.equal(observation.session_id, result.session_id);
+  assert.equal(connect_calls.length, 2);
+});
+
+test("dispose 关闭 provider page 和 CDP connection，不关闭默认 context", async () => {
+  const provider = new PlaywrightBrowserProvider({
+    cdp_url: "http://127.0.0.1:9222",
+  });
+  await provider.create_session({});
+
+  await provider.dispose();
+
+  assert.equal(current_browser.session_page.closed, true);
+  assert.equal(current_browser.existing_page.closed, false);
+  assert.equal(current_browser.context.closed, false);
+  assert.equal(current_browser.closed, true);
+});

package/scripts/plugin-main.test.mjs

@@ -0,0 +1,101 @@
+/** Plugin main 的 Profile action 与凭据边界测试。 */
+
+import assert from "node:assert/strict";
+import test from "node:test";
+import { CHAT_PLUGIN_MAIN } from "../bin/chat/main/ChatPluginMain.js";
+
+/** 激活 main 并返回按 ID 注册的 action。 */
+async function activate_chat_main() {
+  const actions = new Map();
+  await CHAT_PLUGIN_MAIN.activate({
+    plugin: {
+      id: "chat",
+      action(action) {
+        actions.set(action.id, action);
+      },
+    },
+    logger: {
+      debug() {},
+      info() {},
+      warn() {},
+      error() {},
+    },
+    system: {
+      async open_external() {},
+      async show_item_in_folder() {},
+      async write_clipboard_text() {},
+    },
+  });
+  return actions;
+}
+
+/** 创建可观察完整替换结果的 Profile 配置上下文。 */
+function create_config_context(initial_config) {
+  let config = structuredClone(initial_config);
+  return {
+    context: {
+      config: {
+        async get() {
+          return structuredClone(config);
+        },
+        async set(next) {
+          config = structuredClone(next);
+        },
+      },
+    },
+    read: () => structuredClone(config),
+  };
+}
+
+test("Chat main 读取 Profile 时不泄漏 Channel 凭据", async () => {
+  const actions = await activate_chat_main();
+  const store = create_config_context({
+    channels: [
+      { id: "telegram_main", type: "telegram", name: "Main", bot_token: "telegram-secret" },
+      { id: "feishu_main", type: "feishu", name: "Work", app_id: "cli_a", app_secret: "feishu-secret" },
+    ],
+  });
+
+  const profile = await actions.get("profile.read").run(undefined, store.context);
+
+  assert.equal(JSON.stringify(profile).includes("telegram-secret"), false);
+  assert.equal(JSON.stringify(profile).includes("feishu-secret"), false);
+  assert.deepEqual(profile.channels.map((channel) => channel.secret_configured), [true, true]);
+});
+
+test("Chat main 保存时为空的凭据输入会保留已有凭据", async () => {
+  const actions = await activate_chat_main();
+  const store = create_config_context({
+    channels: [
+      { id: "telegram_main", type: "telegram", name: "Old", bot_token: "kept-secret" },
+    ],
+  });
+
+  const result = await actions.get("profile.save").run({
+    queue: { max_concurrency: 4 },
+    channels: [{
+      id: "telegram_main",
+      type: "telegram",
+      name: "New",
+      bot_token: "",
+      secret_configured: true,
+    }],
+  }, store.context);
+
+  assert.equal(store.read().channels[0].bot_token, "kept-secret");
+  assert.equal(result.channels[0].secret_configured, true);
+  assert.equal("bot_token" in result.channels[0], false);
+});
+
+test("Chat main 拒绝没有凭据的新 Channel", async () => {
+  const actions = await activate_chat_main();
+  const store = create_config_context({ channels: [] });
+
+  await assert.rejects(
+    () => actions.get("profile.save").run({
+      queue: {},
+      channels: [{ id: "telegram_new", type: "telegram", name: "New" }],
+    }, store.context),
+    /Telegram Bot Token is required/u,
+  );
+});

package/scripts/plugin-subpaths.test.mjs

@@ -49,6 +49,34 @@ test("根入口不再导出默认内建集合工厂", async () => {
   assert.equal("BUILTIN_PLUGIN_CLASSES" in plugin_module, false);
 });
 
+test("Renderer 子路径统一导出 React Mainview registry", async () => {
+  const plugin_react = await import("@downcity/plugin/react");
+  const renderers = await import("@downcity/plugins/renderers");
+  assert.equal(typeof plugin_react.define_plugin_renderer, "function");
+  assert.deepEqual(Object.keys(renderers.BUILTIN_PLUGIN_RENDERERS).sort(), [
+    "chat",
+    "image",
+    "sound",
+    "web",
+  ]);
+  for (const renderer of Object.values(renderers.BUILTIN_PLUGIN_RENDERERS)) {
+    assert.equal(typeof renderer, "function");
+  }
+});
+
+test("内建 Plugin 子路径不再公开宿主通用配置 Schema", async () => {
+  const schema_exports = [
+    ["chat", "CHAT_PLUGIN_CONFIG_JSON_SCHEMA"],
+    ["image", "IMAGE_PLUGIN_CONFIG_JSON_SCHEMA"],
+    ["sound", "SOUND_PLUGIN_CONFIG_JSON_SCHEMA"],
+    ["web", "WEB_PLUGIN_CONFIG_JSON_SCHEMA"],
+  ];
+  for (const [plugin_name, export_name] of schema_exports) {
+    const plugin_module = await import(`@downcity/plugins/${plugin_name}`);
+    assert.equal(export_name in plugin_module, false, `${plugin_name} 不应导出 ${export_name}`);
+  }
+});
+
 test("memory 子路径导出 Provider 与 Storage Adapter", async () => {
   const memory_module = await import("@downcity/plugins/memory");
   assert.equal(typeof memory_module.MemoryPlugin, "function");