@taole/dd-playwright 0.1.12 → 0.1.14

package/README.md

@@ -74,7 +74,7 @@ dd-pw update
 dd-pw serve [--port 12309]
 ```
 
-1. 启动后在浏览器打开 `http://127.0.0.1:12309`。
+1. 启动后在浏览器打开 `http://127.0.0.1:12309`。在「全局运行配置」的「软件更新」中可检查 npm 最新版本；发现新版本时，可在终端执行 `dd-pw update`，更新后在 Agent 或 IDE 中重载 MCP。源码或项目依赖运行时请按对应安装方式手动更新。
 2. 点击右上角 **「+ 添加绑定账号」**，后台会以独立的 Playwright 实例拉起扫码页并渲染二维码。
 3. 使用微信或点点 App 扫码登录，完成后会自动捕获 Cookie 与 `storageState`，提取点点账号 UID、昵称与头像，并落库至 `$BROWSER_MCP_DATA_DIR/runtime.db`。
 4. 支持多账号管理、一键设为当前激活账号或解绑账号。

package/bin/mcp-server.mjs

@@ -11,7 +11,7 @@ import { resolveConfig } from "../src/config.mjs";
 import { PlaywrightBrowserManager } from "../src/browser-manager.mjs";
 import { pathToFileURL } from "node:url";
 
-export const MCP_VERSION = "0.1.12";
+export const MCP_VERSION = "0.1.14";
 
 function textResult(payload) {
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taole/dd-playwright",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "Standalone stdio MCP & CLI: Playwright browser automation + isolated whistle proxy + diandian account storageState injection",
   "type": "module",
   "license": "ISC",

package/src/server/web-server.mjs

@@ -4,6 +4,7 @@ import { fileURLToPath } from "node:url";
 import { AccountStore } from "../account-store.mjs";
 import { DiandianAuthManager } from "../auth/diandian-auth.mjs";
 import { getChromiumMetadata } from "../browser-check.mjs";
+import { createWebUpdater } from "./web-update.mjs";
 
 function sendJson(res, statusCode, payload) {
   res.writeHead(statusCode, {
@@ -336,18 +337,7 @@ const DASHBOARD_HTML = `<!DOCTYPE html>
           </button>
         </div>
         
-        <!-- 动态运行环境提示卡片 -->
-        <div id="envBanner" style="padding: 12px 16px; border-radius: 6px; margin-bottom: 20px; font-size: 13px; line-height: 1.5; {{BANNER_STYLE}}">
-          {{BANNER_CONTENT}}
-        </div>
-        <!-- 配置建议区块 -->
         {{CONFIG_SECTIONS}}
-
-        <div style="font-size: 12px; color: var(--muted); line-height: 1.6; background: #0f172a; padding: 12px; border-radius: 6px; border: 1px solid var(--border); margin-top: 20px;">
-          💡 <b>配置生效小提示：</b><br>
-          1. 挂载后启动 AI 客户端，AI 会自动识别 <code>browser_navigate</code>、<code>browser_screenshot</code> 等 13 个完整 Playwright 工具。<br>
-          2. 在本页面扫码绑定的账号，MCP 会自动读取同一个 SQLite 账号库免登运行。
-        </div>
       </div>
     </div>
 
@@ -478,6 +468,12 @@ browser_navigate({ url: "https://xdd-test.tuwan.com/", device: "desktop", userAg
           本服务所有数据与账号库已默认固化在用户主目录下的 <code>~/.dd-browser-mcp/runtime.db</code>，无需配置任何复杂环境变量，开箱即用。
         </div>
 
+        <div style="margin-top: 20px; padding: 16px; background: #0f172a; border-radius: 8px; border: 1px solid var(--border);">
+          <div style="font-size: 14px; font-weight: 600; margin-bottom: 8px;">软件更新</div>
+          <div id="updateInfo" style="font-size: 12px; color: var(--muted); line-height: 1.8; margin-bottom: 12px;" aria-live="polite">点击检查更新，查看是否有新版本。</div>
+          <button id="checkUpdateBtn" class="btn btn-primary" onclick="checkUpdates()">检查更新</button>
+        </div>
+
         <!-- Chromium 浏览器内核状态展示卡片 -->
         <div style="margin-top: 20px; padding: 16px; background: #0f172a; border-radius: 8px; border: 1px solid var(--border);">
           <div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 12px;">
@@ -774,6 +770,25 @@ browser_navigate({ url: "https://xdd-test.tuwan.com/", device: "desktop", userAg
     }
 
     // 初次加载账号、配置与内核状态
+    async function checkUpdates() {
+      const info = document.getElementById('updateInfo');
+      const check = document.getElementById('checkUpdateBtn');
+      check.disabled = true;
+      info.textContent = '正在查询 npm 最新版本…';
+      try {
+        const response = await fetch('/api/update/check', { cache: 'no-store' });
+        const data = await response.json();
+        if (!data.ok) throw new Error(data.error || data.message || '检查失败');
+        if (!data.updateAvailable) {
+          info.textContent = '当前已是最新版本（v' + data.currentVersion + '）。';
+        } else {
+          info.textContent = '发现新版本：v' + data.currentVersion + ' → v' + data.latestVersion + '。请在终端执行 dd-pw update，更新后在 Agent 或 IDE 中重载 MCP。';
+        }
+      } catch (err) {
+        info.textContent = '检查更新失败：' + err.message;
+      } finally { check.disabled = false; }
+    }
+
     loadAccounts();
     loadSettings();
     loadChromiumMeta();
@@ -781,8 +796,34 @@ browser_navigate({ url: "https://xdd-test.tuwan.com/", device: "desktop", userAg
 </body>
 </html>`;
 
-export function createWebServer({ accountStore, authManager }) {
+export function createWebServer({ accountStore, authManager, updater, port = 12309 }) {
+  updater ??= createWebUpdater({ port });
   const server = createServer(async (req, res) => {
+    // Update endpoints are privileged even when the listener binds 0.0.0.0.
+    if (req.url?.split("?")[0].startsWith("/api/update")) {
+      const address = req.socket.remoteAddress || "";
+      const local = address === "::1" || /^127(?:\.\d{1,3}){3}$/.test(address) || /^::ffff:127(?:\.\d{1,3}){3}$/i.test(address);
+      const host = req.headers.host;
+      let originOk = false;
+      try {
+        const origin = new URL(req.headers.origin);
+        const target = new URL(`http://${host}`);
+        originOk = origin.origin === target.origin && origin.username === "" && origin.password === "" && req.headers.origin === origin.origin &&
+          (target.hostname === "localhost" || target.hostname === "[::1]" || /^127(?:\.\d{1,3}){3}$/.test(target.hostname));
+      } catch {}
+      if (!local || (req.headers.origin && !originOk) || (req.method === "POST" && !originOk)) {
+        res.writeHead(403, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+        res.end(JSON.stringify({ ok: false, error: "仅允许本机同源请求" }));
+        return;
+      }
+      const sendUpdate = (code, body) => { res.writeHead(code, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store" }); res.end(JSON.stringify(body)); };
+      const path = req.url.split("?")[0];
+      if (req.method === "GET" && path === "/api/update/check") {
+        try { sendUpdate(200, { ok: true, ...await updater.check() }); }
+        catch (err) { sendUpdate(502, { ok: false, error: err.message }); }
+      } else { sendUpdate(404, { ok: false, error: "Not Found" }); }
+      return;
+    }
     const urlObj = new URL(req.url, `http://${req.headers.host || "127.0.0.1"}`);
     const pathname = urlObj.pathname;
     // CORS preflight
@@ -798,8 +839,6 @@ export function createWebServer({ accountStore, authManager }) {
 
     // 1. 首页控制台
     if (pathname === "/" || pathname === "/index.html") {
-      const currentFilePath = fileURLToPath(import.meta.url).replaceAll("\\", "/");
-      const isInstalledViaNpm = /\/node_modules\/(@taole\/)?dd-playwright\//i.test(currentFilePath);
       const serverScriptPath = fileURLToPath(
         new URL("../../bin/mcp-server.mjs", import.meta.url),
       ).replaceAll("\\", "/");
@@ -817,12 +856,9 @@ export function createWebServer({ accountStore, authManager }) {
         2,
       );
 
-      let bannerStyle = "background: rgba(59, 130, 246, 0.12); border: 1px solid rgba(59, 130, 246, 0.3); color: #60a5fa;";
-      let bannerContent = `💻 <b>当前代码位置：</b><code style="background: rgba(0,0,0,0.3); padding: 2px 6px; border-radius: 4px; color: #93c5fd;">${serverScriptPath}</code><br><span style="color:#cbd5e1; font-size:12px; margin-top: 4px; display: inline-block;">使用 Node 绝对路径方式挂载 MCP，不受系统 PATH 或环境切换影响，100% 稳定运行。</span>`;
-
       let configSections = `
         <div class="code-title">
-          <span>本地绝对路径配置（推荐，开箱即用）</span>
+          <span>MCP 配置</span>
           <button class="copy-btn" onclick="copyCode('code-mcp-local')">复制代码</button>
         </div>
         <div id="code-mcp-local" class="code-block">${localConfigStr}</div>
@@ -837,8 +873,6 @@ export function createWebServer({ accountStore, authManager }) {
 
       const renderedHtml = DASHBOARD_HTML
         .replace("{{VERSION}}", pkgVersion)
-        .replace("{{BANNER_STYLE}}", bannerStyle)
-        .replace("{{BANNER_CONTENT}}", bannerContent)
         .replace("{{CONFIG_SECTIONS}}", configSections);
       sendHtml(res, renderedHtml);
       return;
@@ -1021,7 +1055,7 @@ export async function startWebServer({
 } = {}) {
   const store = accountStore || new AccountStore(dbPath);
   const authManager = new DiandianAuthManager({ accountStore: store });
-  const server = createWebServer({ accountStore: store, authManager });
+  const server = createWebServer({ accountStore: store, authManager, port });
 
   return new Promise((resolve, reject) => {
     server.listen(port, "0.0.0.0", () => {

package/src/server/web-update.mjs

@@ -0,0 +1,13 @@
+import { compareSemver, getLocalVersion, getRemoteLatestVersion } from "../updater.mjs";
+
+/** 仅检查版本，不执行安装或重启。 */
+export function createWebUpdater({ getVersion = getLocalVersion, getLatest = getRemoteLatestVersion } = {}) {
+  return {
+    async check() {
+      const currentVersion = getVersion();
+      const latestVersion = await getLatest();
+      if (!latestVersion) throw new Error("无法查询 npm 最新版本，请检查网络");
+      return { currentVersion, latestVersion, updateAvailable: compareSemver(latestVersion, currentVersion) > 0 };
+    },
+  };
+}