@xbrowser/cli 1.16.0 → 1.18.0

package/dist/{browser-3KTEVTMU.js → browser-SYE57VHU.js}

@@ -20,9 +20,9 @@ import {
   saveSessionDiskMeta,
   setActivePage,
   touchSession
-} from "./chunk-7V3B7VPX.js";
-import "./chunk-A5HJ6IRE.js";
-import "./chunk-TNEN6VQ2.js";
+} from "./chunk-EI2XZIDF.js";
+import "./chunk-LL37GYPP.js";
+import "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";
 import "./chunk-A6LPGFAL.js";
 import "./chunk-H2A5JUK5.js";

package/dist/{browser-AOVQTGJ7.js → browser-UPKOT3V6.js}

@@ -20,10 +20,10 @@ import {
   saveSessionDiskMeta,
   setActivePage,
   touchSession
-} from "./chunk-GWQ5NTVE.js";
-import "./chunk-LTBNQERK.js";
+} from "./chunk-MMZCBUD3.js";
+import "./chunk-DVKIL7H6.js";
 import "./chunk-3FWLW7FS.js";
-import "./chunk-TNEN6VQ2.js";
+import "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/dist/{browser-KT4FOWBO.js → browser-W3Z4HPJN.js}

@@ -20,8 +20,8 @@ import {
   saveSessionDiskMeta,
   setActivePage,
   touchSession
-} from "./chunk-5EYOEB4R.js";
-import "./chunk-TNEN6VQ2.js";
+} from "./chunk-OU335JBI.js";
+import "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/dist/{cdp-driver-DKNLIA6B.js → cdp-driver-4UAV56SQ.js}

@@ -14,7 +14,7 @@ import {
   scrollIntoView,
   waitForActionable,
   waitForNetworkIdle
-} from "./chunk-LTBNQERK.js";
+} from "./chunk-DVKIL7H6.js";
 import "./chunk-3FWLW7FS.js";
 import {
   connectToCDP,
@@ -22,7 +22,7 @@ import {
   getCDPTargets,
   killChrome,
   launchChrome
-} from "./chunk-TNEN6VQ2.js";
+} from "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/dist/{cdp-driver-OC37OT4B.js → cdp-driver-KT6HL33W.js}

@@ -14,14 +14,14 @@ import {
   scrollIntoView,
   waitForActionable,
   waitForNetworkIdle
-} from "./chunk-A5HJ6IRE.js";
+} from "./chunk-LL37GYPP.js";
 import {
   connectToCDP,
   findChrome,
   getCDPTargets,
   killChrome,
   launchChrome
-} from "./chunk-TNEN6VQ2.js";
+} from "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";
 import "./chunk-H2A5JUK5.js";
 import "./chunk-KFQGP6VL.js";

package/dist/{cdp-driver-ALDP2CZT.js → cdp-driver-NNBPNFF2.js}

@@ -5,7 +5,7 @@ import {
   getCDPTargets,
   killChrome,
   launchChrome
-} from "./chunk-AMI64BSD.js";
+} from "./chunk-IWVG4XYZ.js";
 import {
   __require
 } from "./chunk-3RG5ZIWI.js";
@@ -370,6 +370,19 @@ function buildStealthInitScript() {
     "        document.fonts.add(ff);ff.load();}catch(e2){}",
     "    });",
     "  }catch(e){}",
+    // 3g. Notification.requestPermission 延迟（d62）：headless 无原生横幅，
+    //     request 瞬回 denied —— 真机 request 会 pending 在横幅上数秒到分钟。
+    //     延迟 2-6s 再 resolve，模拟横幅期（用户"看了下然后拒绝"）。
+    "  try{",
+    "    if(window.Notification&&Notification.requestPermission){",
+    "      var _nrp=Notification.requestPermission.bind(Notification);",
+    "      Notification.requestPermission=function(cb){",
+    "        return new Promise(function(res){",
+    "          setTimeout(function(){_nrp().then(function(r){if(cb)try{cb(r)}catch(e){}res(r);});},2000+Math.random()*4000);",
+    "        });",
+    "      };",
+    "    }",
+    "  }catch(e){}",
     // 3. toString disguise (name-list based)
     "  var _ts=Function.prototype.toString;",
     "  var _hf=document.hasFocus;",
@@ -515,6 +528,49 @@ var XBMouseImpl = class {
     this._x = x;
     this._y = y;
   }
+  /**
+   * Drag from the CURRENT cursor position to (x, y): press, traverse a
+   * bezier trajectory with the button held, release. Drives the REAL
+   * HTML5 DnD pipeline — field-verified (d59): this sequence fires
+   * dragstart → dragover… → drop → dragend, all isTrusted=true. No
+   * Input.dispatchDragEvent needed.
+   */
+  async drag(x, y, opts = {}) {
+    const stealth = process.env.XBROWSER_STEALTH !== "off";
+    await this.send("Input.dispatchMouseEvent", {
+      type: "mousePressed",
+      x: this._x,
+      y: this._y,
+      button: "left",
+      clickCount: 1
+    });
+    this._button = "left";
+    const steps = opts.steps ?? Math.max(10, Math.min(24, Math.round(Math.hypot(x - this._x, y - this._y) / 20)));
+    const fx = this._x, fy = this._y;
+    for (let i = 1; i <= steps; i++) {
+      if (stealth) await sleep(rand(16, 28));
+      const t = i / steps;
+      this._x = fx + (x - fx) * t;
+      this._y = fy + (y - fy) * t;
+      await this.send("Input.dispatchMouseEvent", {
+        type: "mouseMoved",
+        x: this._x,
+        y: this._y,
+        button: this._button
+      });
+    }
+    this._x = x;
+    this._y = y;
+    await sleep(rand(60, 140));
+    await this.send("Input.dispatchMouseEvent", {
+      type: "mouseReleased",
+      x,
+      y,
+      button: "left",
+      clickCount: 1
+    });
+    this._button = "none";
+  }
   async wheel(deltaX, deltaY) {
     await this.send("Input.dispatchMouseEvent", {
       type: "mouseWheel",
@@ -1255,6 +1311,21 @@ var XBLocatorImpl = class _XBLocatorImpl {
     `);
     return selected;
   }
+  async dragAndDrop(source, target) {
+    const boxes = await this.page.evaluate(`
+      (function() {
+        const s = ${this._q(source)}, t = ${this._q(target)};
+        if (!s || !t) return null;
+        const c = (el) => { const r = el.getBoundingClientRect(); return { x: r.x + r.width / 2, y: r.y + r.height / 2 }; };
+        return [c(s), c(t)];
+      })()
+    `);
+    if (!boxes || !boxes[0] || !boxes[1]) {
+      throw new Error(`dragAndDrop: element not found (${source} / ${target})`);
+    }
+    await this.page.mouse.move(boxes[0].x, boxes[0].y);
+    await this.page.mouse.drag(boxes[1].x, boxes[1].y);
+  }
   async screenshot(opts = {}) {
     await waitForActionable(this.page, this.selector);
     const box = await this.page.evaluate(`
@@ -3359,7 +3430,7 @@ var XBBrowserImpl = class {
       this._exitHandler = null;
     }
     if (this.childProcess) {
-      const { killChrome: killChrome2 } = await import("./launcher-OZXJQPNG.js");
+      const { killChrome: killChrome2 } = await import("./launcher-EXJHHAUL.js");
       await killChrome2(this.childProcess, this.tmpDir);
     }
     await this.conn.close();
@@ -3494,7 +3565,7 @@ var XBBrowserImpl = class {
     if (pageTargets.length === 0 && httpFallbackUrl) {
       console.log(`[discoverContexts] Target.getTargets returned ${targetInfos.length} targets (0 page type). Falling back to HTTP /json/list at ${httpFallbackUrl}`);
       try {
-        const { getCDPTargets: getCDPTargets2 } = await import("./launcher-OZXJQPNG.js");
+        const { getCDPTargets: getCDPTargets2 } = await import("./launcher-EXJHHAUL.js");
         const httpPages = await getCDPTargets2(httpFallbackUrl);
         console.log(`[discoverContexts] HTTP /json/list returned ${httpPages.length} pages`);
         for (const p of httpPages) {

package/dist/{chunk-TNEN6VQ2.js → chunk-3KZ34AUC.js}

@@ -101,6 +101,7 @@ async function launchChrome(options = {}) {
   ];
   if (headless) {
     allArgs.push("--headless", "--hide-scrollbars", "--mute-audio");
+    allArgs.push("--autoplay-policy=no-user-gesture-required");
   }
   let tmpDir;
   if (userDataDir) {
@@ -160,6 +161,15 @@ async function connectToCDP(rawEndpoint) {
   }
   return resolveEndpointFromHTTP(rawEndpoint);
 }
+function joinCdpHttpUrl(baseURL, path) {
+  try {
+    const u = new URL(baseURL);
+    u.pathname = (u.pathname.replace(/\/+$/, "") || "") + path;
+    return u.toString();
+  } catch {
+    return `${baseURL}${path}`;
+  }
+}
 async function findFreePort() {
   const { createServer } = await import("net");
   return new Promise((resolve, reject) => {
@@ -193,7 +203,7 @@ async function waitForCDPReady(port, timeoutMs, child) {
   throw new Error(`Chrome CDP not ready after ${timeoutMs}ms (port ${port})`);
 }
 async function resolveEndpointFromHTTP(baseURL) {
-  const url = `${baseURL}/json/version`;
+  const url = joinCdpHttpUrl(baseURL, "/json/version");
   const resp = await fetch(url, { signal: AbortSignal.timeout(3e3) });
   if (!resp.ok) {
     throw new Error(`CDP HTTP ${resp.status}: ${url}`);
@@ -205,7 +215,7 @@ async function resolveEndpointFromHTTP(baseURL) {
   return data.webSocketDebuggerUrl;
 }
 async function getCDPTargets(baseURL) {
-  const url = `${baseURL}/json/list`;
+  const url = joinCdpHttpUrl(baseURL, "/json/list");
   const resp = await fetch(url, { signal: AbortSignal.timeout(5e3) });
   if (!resp.ok) {
     throw new Error(`CDP list HTTP ${resp.status}: ${url}`);
@@ -258,6 +268,7 @@ export {
   findChrome,
   launchChrome,
   connectToCDP,
+  joinCdpHttpUrl,
   getCDPTargets,
   killChrome
 };

package/dist/{chunk-LTBNQERK.js → chunk-DVKIL7H6.js}

@@ -5,7 +5,7 @@ import {
 import {
   connectToCDP,
   launchChrome
-} from "./chunk-TNEN6VQ2.js";
+} from "./chunk-3KZ34AUC.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
@@ -381,6 +381,19 @@ function buildStealthInitScript() {
     "        document.fonts.add(ff);ff.load();}catch(e2){}",
     "    });",
     "  }catch(e){}",
+    // 3g. Notification.requestPermission 延迟（d62）：headless 无原生横幅，
+    //     request 瞬回 denied —— 真机 request 会 pending 在横幅上数秒到分钟。
+    //     延迟 2-6s 再 resolve，模拟横幅期（用户"看了下然后拒绝"）。
+    "  try{",
+    "    if(window.Notification&&Notification.requestPermission){",
+    "      var _nrp=Notification.requestPermission.bind(Notification);",
+    "      Notification.requestPermission=function(cb){",
+    "        return new Promise(function(res){",
+    "          setTimeout(function(){_nrp().then(function(r){if(cb)try{cb(r)}catch(e){}res(r);});},2000+Math.random()*4000);",
+    "        });",
+    "      };",
+    "    }",
+    "  }catch(e){}",
     // 3. toString disguise (name-list based)
     "  var _ts=Function.prototype.toString;",
     "  var _hf=document.hasFocus;",
@@ -526,6 +539,49 @@ var XBMouseImpl = class {
     this._x = x;
     this._y = y;
   }
+  /**
+   * Drag from the CURRENT cursor position to (x, y): press, traverse a
+   * bezier trajectory with the button held, release. Drives the REAL
+   * HTML5 DnD pipeline — field-verified (d59): this sequence fires
+   * dragstart → dragover… → drop → dragend, all isTrusted=true. No
+   * Input.dispatchDragEvent needed.
+   */
+  async drag(x, y, opts = {}) {
+    const stealth = process.env.XBROWSER_STEALTH !== "off";
+    await this.send("Input.dispatchMouseEvent", {
+      type: "mousePressed",
+      x: this._x,
+      y: this._y,
+      button: "left",
+      clickCount: 1
+    });
+    this._button = "left";
+    const steps = opts.steps ?? Math.max(10, Math.min(24, Math.round(Math.hypot(x - this._x, y - this._y) / 20)));
+    const fx = this._x, fy = this._y;
+    for (let i = 1; i <= steps; i++) {
+      if (stealth) await sleep2(rand(16, 28));
+      const t = i / steps;
+      this._x = fx + (x - fx) * t;
+      this._y = fy + (y - fy) * t;
+      await this.send("Input.dispatchMouseEvent", {
+        type: "mouseMoved",
+        x: this._x,
+        y: this._y,
+        button: this._button
+      });
+    }
+    this._x = x;
+    this._y = y;
+    await sleep2(rand(60, 140));
+    await this.send("Input.dispatchMouseEvent", {
+      type: "mouseReleased",
+      x,
+      y,
+      button: "left",
+      clickCount: 1
+    });
+    this._button = "none";
+  }
   async wheel(deltaX, deltaY) {
     await this.send("Input.dispatchMouseEvent", {
       type: "mouseWheel",
@@ -1164,6 +1220,21 @@ var XBLocatorImpl = class _XBLocatorImpl {
     `);
     return selected;
   }
+  async dragAndDrop(source, target) {
+    const boxes = await this.page.evaluate(`
+      (function() {
+        const s = ${this._q(source)}, t = ${this._q(target)};
+        if (!s || !t) return null;
+        const c = (el) => { const r = el.getBoundingClientRect(); return { x: r.x + r.width / 2, y: r.y + r.height / 2 }; };
+        return [c(s), c(t)];
+      })()
+    `);
+    if (!boxes || !boxes[0] || !boxes[1]) {
+      throw new Error(`dragAndDrop: element not found (${source} / ${target})`);
+    }
+    await this.page.mouse.move(boxes[0].x, boxes[0].y);
+    await this.page.mouse.drag(boxes[1].x, boxes[1].y);
+  }
   async screenshot(opts = {}) {
     await waitForActionable(this.page, this.selector);
     const box = await this.page.evaluate(`
@@ -3268,7 +3339,7 @@ var XBBrowserImpl = class {
       this._exitHandler = null;
     }
     if (this.childProcess) {
-      const { killChrome: killChrome2 } = await import("./launcher-L2JNDB2H.js");
+      const { killChrome: killChrome2 } = await import("./launcher-44STYRJC.js");
       await killChrome2(this.childProcess, this.tmpDir);
     }
     await this.conn.close();
@@ -3403,7 +3474,7 @@ var XBBrowserImpl = class {
     if (pageTargets.length === 0 && httpFallbackUrl) {
       console.log(`[discoverContexts] Target.getTargets returned ${targetInfos.length} targets (0 page type). Falling back to HTTP /json/list at ${httpFallbackUrl}`);
       try {
-        const { getCDPTargets: getCDPTargets2 } = await import("./launcher-L2JNDB2H.js");
+        const { getCDPTargets: getCDPTargets2 } = await import("./launcher-44STYRJC.js");
         const httpPages = await getCDPTargets2(httpFallbackUrl);
         console.log(`[discoverContexts] HTTP /json/list returned ${httpPages.length} pages`);
         for (const p of httpPages) {

package/dist/{chunk-7V3B7VPX.js → chunk-EI2XZIDF.js}

@@ -1,6 +1,6 @@
 import {
   launch
-} from "./chunk-A5HJ6IRE.js";
+} from "./chunk-LL37GYPP.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
@@ -639,16 +639,40 @@ async function createSession(name, url, options) {
         (t) => t.url && t.url !== "about:blank" && !t.url.startsWith("chrome://") && !t.url.startsWith("chrome-untrusted://") && !t.url.startsWith("chrome-error://") && (url ? t.url.includes(new URL(url).hostname) : true)
       );
       if (matchTarget && matchTarget.url) {
-        targetPage = await context.newPage();
-        await targetPage.goto(matchTarget.url, { waitUntil: "domcontentloaded", timeout: 15e3 }).catch(() => {
+        const existing2 = context.pages().find((p) => {
+          try {
+            return p.url() === matchTarget.url;
+          } catch {
+            return false;
+          }
         });
+        if (existing2) {
+          targetPage = existing2;
+        } else {
+          targetPage = await context.newPage();
+          await targetPage.goto(matchTarget.url, { waitUntil: "domcontentloaded", timeout: 15e3 }).catch(() => {
+          });
+        }
       }
     }
     if (!targetPage) {
       const pages = context.pages();
-      if (pages.length > 0) {
+      if (pages.length > 1) {
+        try {
+          for (const p of pages) {
+            const vis = await p.evaluate("document.visibilityState").catch(() => "hidden");
+            if (vis === "visible") {
+              targetPage = p;
+              break;
+            }
+          }
+        } catch {
+        }
+      }
+      if (!targetPage && pages.length > 0) {
         targetPage = pages[0];
-      } else {
+      }
+      if (!targetPage) {
         targetPage = await context.newPage();
       }
     }

package/dist/{chunk-AMI64BSD.js → chunk-IWVG4XYZ.js}

@@ -105,6 +105,7 @@ async function launchChrome(options = {}) {
   ];
   if (headless) {
     allArgs.push("--headless", "--hide-scrollbars", "--mute-audio");
+    allArgs.push("--autoplay-policy=no-user-gesture-required");
   }
   let tmpDir;
   if (userDataDir) {
@@ -164,6 +165,15 @@ async function connectToCDP(rawEndpoint) {
   }
   return resolveEndpointFromHTTP(rawEndpoint);
 }
+function joinCdpHttpUrl(baseURL, path) {
+  try {
+    const u = new URL(baseURL);
+    u.pathname = (u.pathname.replace(/\/+$/, "") || "") + path;
+    return u.toString();
+  } catch {
+    return `${baseURL}${path}`;
+  }
+}
 async function findFreePort() {
   const { createServer } = await import("net");
   return new Promise((resolve, reject) => {
@@ -197,7 +207,7 @@ async function waitForCDPReady(port, timeoutMs, child) {
   throw new Error(`Chrome CDP not ready after ${timeoutMs}ms (port ${port})`);
 }
 async function resolveEndpointFromHTTP(baseURL) {
-  const url = `${baseURL}/json/version`;
+  const url = joinCdpHttpUrl(baseURL, "/json/version");
   const resp = await fetch(url, { signal: AbortSignal.timeout(3e3) });
   if (!resp.ok) {
     throw new Error(`CDP HTTP ${resp.status}: ${url}`);
@@ -209,7 +219,7 @@ async function resolveEndpointFromHTTP(baseURL) {
   return data.webSocketDebuggerUrl;
 }
 async function getCDPTargets(baseURL) {
-  const url = `${baseURL}/json/list`;
+  const url = joinCdpHttpUrl(baseURL, "/json/list");
   const resp = await fetch(url, { signal: AbortSignal.timeout(5e3) });
   if (!resp.ok) {
     throw new Error(`CDP list HTTP ${resp.status}: ${url}`);
@@ -263,6 +273,7 @@ export {
   findChrome,
   launchChrome,
   connectToCDP,
+  joinCdpHttpUrl,
   getCDPTargets,
   killChrome
 };

package/dist/{chunk-A5HJ6IRE.js → chunk-LL37GYPP.js}

@@ -1,7 +1,7 @@
 import {
   connectToCDP,
   launchChrome
-} from "./chunk-TNEN6VQ2.js";
+} from "./chunk-3KZ34AUC.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
@@ -380,6 +380,19 @@ function buildStealthInitScript() {
     "        document.fonts.add(ff);ff.load();}catch(e2){}",
     "    });",
     "  }catch(e){}",
+    // 3g. Notification.requestPermission 延迟（d62）：headless 无原生横幅，
+    //     request 瞬回 denied —— 真机 request 会 pending 在横幅上数秒到分钟。
+    //     延迟 2-6s 再 resolve，模拟横幅期（用户"看了下然后拒绝"）。
+    "  try{",
+    "    if(window.Notification&&Notification.requestPermission){",
+    "      var _nrp=Notification.requestPermission.bind(Notification);",
+    "      Notification.requestPermission=function(cb){",
+    "        return new Promise(function(res){",
+    "          setTimeout(function(){_nrp().then(function(r){if(cb)try{cb(r)}catch(e){}res(r);});},2000+Math.random()*4000);",
+    "        });",
+    "      };",
+    "    }",
+    "  }catch(e){}",
     // 3. toString disguise (name-list based)
     "  var _ts=Function.prototype.toString;",
     "  var _hf=document.hasFocus;",
@@ -525,6 +538,49 @@ var XBMouseImpl = class {
     this._x = x;
     this._y = y;
   }
+  /**
+   * Drag from the CURRENT cursor position to (x, y): press, traverse a
+   * bezier trajectory with the button held, release. Drives the REAL
+   * HTML5 DnD pipeline — field-verified (d59): this sequence fires
+   * dragstart → dragover… → drop → dragend, all isTrusted=true. No
+   * Input.dispatchDragEvent needed.
+   */
+  async drag(x, y, opts = {}) {
+    const stealth = process.env.XBROWSER_STEALTH !== "off";
+    await this.send("Input.dispatchMouseEvent", {
+      type: "mousePressed",
+      x: this._x,
+      y: this._y,
+      button: "left",
+      clickCount: 1
+    });
+    this._button = "left";
+    const steps = opts.steps ?? Math.max(10, Math.min(24, Math.round(Math.hypot(x - this._x, y - this._y) / 20)));
+    const fx = this._x, fy = this._y;
+    for (let i = 1; i <= steps; i++) {
+      if (stealth) await sleep2(rand(16, 28));
+      const t = i / steps;
+      this._x = fx + (x - fx) * t;
+      this._y = fy + (y - fy) * t;
+      await this.send("Input.dispatchMouseEvent", {
+        type: "mouseMoved",
+        x: this._x,
+        y: this._y,
+        button: this._button
+      });
+    }
+    this._x = x;
+    this._y = y;
+    await sleep2(rand(60, 140));
+    await this.send("Input.dispatchMouseEvent", {
+      type: "mouseReleased",
+      x,
+      y,
+      button: "left",
+      clickCount: 1
+    });
+    this._button = "none";
+  }
   async wheel(deltaX, deltaY) {
     await this.send("Input.dispatchMouseEvent", {
       type: "mouseWheel",
@@ -1265,6 +1321,21 @@ var XBLocatorImpl = class _XBLocatorImpl {
     `);
     return selected;
   }
+  async dragAndDrop(source, target) {
+    const boxes = await this.page.evaluate(`
+      (function() {
+        const s = ${this._q(source)}, t = ${this._q(target)};
+        if (!s || !t) return null;
+        const c = (el) => { const r = el.getBoundingClientRect(); return { x: r.x + r.width / 2, y: r.y + r.height / 2 }; };
+        return [c(s), c(t)];
+      })()
+    `);
+    if (!boxes || !boxes[0] || !boxes[1]) {
+      throw new Error(`dragAndDrop: element not found (${source} / ${target})`);
+    }
+    await this.page.mouse.move(boxes[0].x, boxes[0].y);
+    await this.page.mouse.drag(boxes[1].x, boxes[1].y);
+  }
   async screenshot(opts = {}) {
     await waitForActionable(this.page, this.selector);
     const box = await this.page.evaluate(`
@@ -3369,7 +3440,7 @@ var XBBrowserImpl = class {
       this._exitHandler = null;
     }
     if (this.childProcess) {
-      const { killChrome: killChrome2 } = await import("./launcher-L2JNDB2H.js");
+      const { killChrome: killChrome2 } = await import("./launcher-44STYRJC.js");
       await killChrome2(this.childProcess, this.tmpDir);
     }
     await this.conn.close();
@@ -3504,7 +3575,7 @@ var XBBrowserImpl = class {
     if (pageTargets.length === 0 && httpFallbackUrl) {
       console.log(`[discoverContexts] Target.getTargets returned ${targetInfos.length} targets (0 page type). Falling back to HTTP /json/list at ${httpFallbackUrl}`);
       try {
-        const { getCDPTargets: getCDPTargets2 } = await import("./launcher-L2JNDB2H.js");
+        const { getCDPTargets: getCDPTargets2 } = await import("./launcher-44STYRJC.js");
         const httpPages = await getCDPTargets2(httpFallbackUrl);
         console.log(`[discoverContexts] HTTP /json/list returned ${httpPages.length} pages`);
         for (const p of httpPages) {

package/dist/{chunk-GWQ5NTVE.js → chunk-MMZCBUD3.js}

@@ -1,7 +1,7 @@
 import {
   createRuleEngine,
   launch
-} from "./chunk-LTBNQERK.js";
+} from "./chunk-DVKIL7H6.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
@@ -1066,16 +1066,40 @@ async function createSession(name, url, options) {
         (t) => t.url && t.url !== "about:blank" && !t.url.startsWith("chrome://") && !t.url.startsWith("chrome-untrusted://") && !t.url.startsWith("chrome-error://") && (url ? t.url.includes(new URL(url).hostname) : true)
       );
       if (matchTarget && matchTarget.url) {
-        targetPage = await context.newPage();
-        await targetPage.goto(matchTarget.url, { waitUntil: "domcontentloaded", timeout: 15e3 }).catch(() => {
+        const existing2 = context.pages().find((p) => {
+          try {
+            return p.url() === matchTarget.url;
+          } catch {
+            return false;
+          }
         });
+        if (existing2) {
+          targetPage = existing2;
+        } else {
+          targetPage = await context.newPage();
+          await targetPage.goto(matchTarget.url, { waitUntil: "domcontentloaded", timeout: 15e3 }).catch(() => {
+          });
+        }
       }
     }
     if (!targetPage) {
       const pages = context.pages();
-      if (pages.length > 0) {
+      if (pages.length > 1) {
+        try {
+          for (const p of pages) {
+            const vis = await p.evaluate("document.visibilityState").catch(() => "hidden");
+            if (vis === "visible") {
+              targetPage = p;
+              break;
+            }
+          }
+        } catch {
+        }
+      }
+      if (!targetPage && pages.length > 0) {
         targetPage = pages[0];
-      } else {
+      }
+      if (!targetPage) {
         targetPage = await context.newPage();
       }
     }

package/dist/{chunk-5EYOEB4R.js → chunk-OU335JBI.js}

@@ -1,7 +1,7 @@
 import {
   connectToCDP,
   launchChrome
-} from "./chunk-TNEN6VQ2.js";
+} from "./chunk-3KZ34AUC.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
@@ -383,6 +383,19 @@ function buildStealthInitScript() {
     "        document.fonts.add(ff);ff.load();}catch(e2){}",
     "    });",
     "  }catch(e){}",
+    // 3g. Notification.requestPermission 延迟（d62）：headless 无原生横幅，
+    //     request 瞬回 denied —— 真机 request 会 pending 在横幅上数秒到分钟。
+    //     延迟 2-6s 再 resolve，模拟横幅期（用户"看了下然后拒绝"）。
+    "  try{",
+    "    if(window.Notification&&Notification.requestPermission){",
+    "      var _nrp=Notification.requestPermission.bind(Notification);",
+    "      Notification.requestPermission=function(cb){",
+    "        return new Promise(function(res){",
+    "          setTimeout(function(){_nrp().then(function(r){if(cb)try{cb(r)}catch(e){}res(r);});},2000+Math.random()*4000);",
+    "        });",
+    "      };",
+    "    }",
+    "  }catch(e){}",
     // 3. toString disguise (name-list based)
     "  var _ts=Function.prototype.toString;",
     "  var _hf=document.hasFocus;",
@@ -528,6 +541,49 @@ var XBMouseImpl = class {
     this._x = x;
     this._y = y;
   }
+  /**
+   * Drag from the CURRENT cursor position to (x, y): press, traverse a
+   * bezier trajectory with the button held, release. Drives the REAL
+   * HTML5 DnD pipeline — field-verified (d59): this sequence fires
+   * dragstart → dragover… → drop → dragend, all isTrusted=true. No
+   * Input.dispatchDragEvent needed.
+   */
+  async drag(x, y, opts = {}) {
+    const stealth = process.env.XBROWSER_STEALTH !== "off";
+    await this.send("Input.dispatchMouseEvent", {
+      type: "mousePressed",
+      x: this._x,
+      y: this._y,
+      button: "left",
+      clickCount: 1
+    });
+    this._button = "left";
+    const steps = opts.steps ?? Math.max(10, Math.min(24, Math.round(Math.hypot(x - this._x, y - this._y) / 20)));
+    const fx = this._x, fy = this._y;
+    for (let i = 1; i <= steps; i++) {
+      if (stealth) await sleep2(rand(16, 28));
+      const t = i / steps;
+      this._x = fx + (x - fx) * t;
+      this._y = fy + (y - fy) * t;
+      await this.send("Input.dispatchMouseEvent", {
+        type: "mouseMoved",
+        x: this._x,
+        y: this._y,
+        button: this._button
+      });
+    }
+    this._x = x;
+    this._y = y;
+    await sleep2(rand(60, 140));
+    await this.send("Input.dispatchMouseEvent", {
+      type: "mouseReleased",
+      x,
+      y,
+      button: "left",
+      clickCount: 1
+    });
+    this._button = "none";
+  }
   async wheel(deltaX, deltaY) {
     await this.send("Input.dispatchMouseEvent", {
       type: "mouseWheel",
@@ -1268,6 +1324,21 @@ var XBLocatorImpl = class _XBLocatorImpl {
     `);
     return selected;
   }
+  async dragAndDrop(source, target) {
+    const boxes = await this.page.evaluate(`
+      (function() {
+        const s = ${this._q(source)}, t = ${this._q(target)};
+        if (!s || !t) return null;
+        const c = (el) => { const r = el.getBoundingClientRect(); return { x: r.x + r.width / 2, y: r.y + r.height / 2 }; };
+        return [c(s), c(t)];
+      })()
+    `);
+    if (!boxes || !boxes[0] || !boxes[1]) {
+      throw new Error(`dragAndDrop: element not found (${source} / ${target})`);
+    }
+    await this.page.mouse.move(boxes[0].x, boxes[0].y);
+    await this.page.mouse.drag(boxes[1].x, boxes[1].y);
+  }
   async screenshot(opts = {}) {
     await waitForActionable(this.page, this.selector);
     const box = await this.page.evaluate(`
@@ -3372,7 +3443,7 @@ var XBBrowserImpl = class {
       this._exitHandler = null;
     }
     if (this.childProcess) {
-      const { killChrome: killChrome2 } = await import("./launcher-L2JNDB2H.js");
+      const { killChrome: killChrome2 } = await import("./launcher-44STYRJC.js");
       await killChrome2(this.childProcess, this.tmpDir);
     }
     await this.conn.close();
@@ -3507,7 +3578,7 @@ var XBBrowserImpl = class {
     if (pageTargets.length === 0 && httpFallbackUrl) {
       console.log(`[discoverContexts] Target.getTargets returned ${targetInfos.length} targets (0 page type). Falling back to HTTP /json/list at ${httpFallbackUrl}`);
       try {
-        const { getCDPTargets: getCDPTargets3 } = await import("./launcher-L2JNDB2H.js");
+        const { getCDPTargets: getCDPTargets3 } = await import("./launcher-44STYRJC.js");
         const httpPages = await getCDPTargets3(httpFallbackUrl);
         console.log(`[discoverContexts] HTTP /json/list returned ${httpPages.length} pages`);
         for (const p of httpPages) {
@@ -5873,16 +5944,40 @@ async function createSession(name, url, options) {
         (t) => t.url && t.url !== "about:blank" && !t.url.startsWith("chrome://") && !t.url.startsWith("chrome-untrusted://") && !t.url.startsWith("chrome-error://") && (url ? t.url.includes(new URL(url).hostname) : true)
       );
       if (matchTarget && matchTarget.url) {
-        targetPage = await context.newPage();
-        await targetPage.goto(matchTarget.url, { waitUntil: "domcontentloaded", timeout: 15e3 }).catch(() => {
+        const existing2 = context.pages().find((p) => {
+          try {
+            return p.url() === matchTarget.url;
+          } catch {
+            return false;
+          }
         });
+        if (existing2) {
+          targetPage = existing2;
+        } else {
+          targetPage = await context.newPage();
+          await targetPage.goto(matchTarget.url, { waitUntil: "domcontentloaded", timeout: 15e3 }).catch(() => {
+          });
+        }
       }
     }
     if (!targetPage) {
       const pages = context.pages();
-      if (pages.length > 0) {
+      if (pages.length > 1) {
+        try {
+          for (const p of pages) {
+            const vis = await p.evaluate("document.visibilityState").catch(() => "hidden");
+            if (vis === "visible") {
+              targetPage = p;
+              break;
+            }
+          }
+        } catch {
+        }
+      }
+      if (!targetPage && pages.length > 0) {
         targetPage = pages[0];
-      } else {
+      }
+      if (!targetPage) {
         targetPage = await context.newPage();
       }
     }

package/dist/cli.js

@@ -72,8 +72,8 @@ import {
   setActivePage,
   sleep,
   wheelDelta
-} from "./chunk-5EYOEB4R.js";
-import "./chunk-TNEN6VQ2.js";
+} from "./chunk-OU335JBI.js";
+import "./chunk-3KZ34AUC.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
@@ -947,14 +947,14 @@ var mouseCommand = registerCommand({
   description: "Control the mouse (move, click, etc.)",
   scope: "page",
   parameters: z6.object({
-    action: z6.enum(["move", "down", "up", "click", "dblclick"]),
+    action: z6.enum(["move", "down", "up", "click", "dblclick", "drag"]),
     x: z6.coerce.number(),
     y: z6.coerce.number(),
     button: z6.enum(["left", "right", "middle"]).optional(),
     steps: z6.coerce.number().optional()
   }),
   result: z6.object({
-    action: z6.enum(["move", "down", "up", "click", "dblclick"]),
+    action: z6.enum(["move", "down", "up", "click", "dblclick", "drag"]),
     x: z6.number(),
     y: z6.number()
   }),
@@ -978,6 +978,9 @@ var mouseCommand = registerCommand({
       case "dblclick":
         await ctx.page.mouse.dblclick(p.x, p.y, { button });
         break;
+      case "drag":
+        await ctx.page.mouse.drag(p.x, p.y, p.steps ? { steps: p.steps } : {});
+        break;
     }
     return ok6({ action: p.action, x: p.x, y: p.y });
   }
@@ -7542,7 +7545,7 @@ async function executeCommand(commandName, params, sessionName = "default", extr
   }
   let targetPageOverride = null;
   if (_target && extraOpts?.cdpEndpoint) {
-    const { findTargetPage } = await import("./browser-KT4FOWBO.js");
+    const { findTargetPage } = await import("./browser-W3Z4HPJN.js");
     targetPageOverride = await findTargetPage(extraOpts.cdpEndpoint, _target);
     if (!targetPageOverride) {
       return errorResult(`Target "${_target}" not found. Use 'xbrowser targets --cdp ${extraOpts.cdpEndpoint}' to list available pages.`);
@@ -13717,7 +13720,7 @@ Run "xbrowser ${command} ${subCommand} --help" to see available parameters.`
               const targetPage = pages[cmdTabIndex];
               await targetPage.bringToFront().catch(() => {
               });
-              const { setActivePage: setActivePage2 } = await import("./browser-KT4FOWBO.js");
+              const { setActivePage: setActivePage2 } = await import("./browser-W3Z4HPJN.js");
               setActivePage2(session, targetPage);
             }
           }
@@ -13993,7 +13996,7 @@ async function main() {
     const command = process.argv[2];
     const isLongRunning = command === "preview" || command === "serve";
     if (!isLongRunning) {
-      const { ensureProcessCanExit } = await import("./browser-KT4FOWBO.js");
+      const { ensureProcessCanExit } = await import("./browser-W3Z4HPJN.js");
       await ensureProcessCanExit().catch(() => {
       });
       process.exit(process.exitCode || exitCode);

package/dist/daemon-main.js

@@ -34,17 +34,17 @@ import {
   resolveLaunchOpts,
   saveSessionDiskMeta,
   setActivePage
-} from "./chunk-GWQ5NTVE.js";
+} from "./chunk-MMZCBUD3.js";
 import {
   createRuleEngine,
   rand,
   sleep,
   wheelDelta
-} from "./chunk-LTBNQERK.js";
+} from "./chunk-DVKIL7H6.js";
 import {
   queryJS
 } from "./chunk-3FWLW7FS.js";
-import "./chunk-TNEN6VQ2.js";
+import "./chunk-3KZ34AUC.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
@@ -907,14 +907,14 @@ var mouseCommand = registerCommand({
   description: "Control the mouse (move, click, etc.)",
   scope: "page",
   parameters: z6.object({
-    action: z6.enum(["move", "down", "up", "click", "dblclick"]),
+    action: z6.enum(["move", "down", "up", "click", "dblclick", "drag"]),
     x: z6.coerce.number(),
     y: z6.coerce.number(),
     button: z6.enum(["left", "right", "middle"]).optional(),
     steps: z6.coerce.number().optional()
   }),
   result: z6.object({
-    action: z6.enum(["move", "down", "up", "click", "dblclick"]),
+    action: z6.enum(["move", "down", "up", "click", "dblclick", "drag"]),
     x: z6.number(),
     y: z6.number()
   }),
@@ -938,6 +938,9 @@ var mouseCommand = registerCommand({
       case "dblclick":
         await ctx.page.mouse.dblclick(p.x, p.y, { button });
         break;
+      case "drag":
+        await ctx.page.mouse.drag(p.x, p.y, p.steps ? { steps: p.steps } : {});
+        break;
     }
     return ok6({ action: p.action, x: p.x, y: p.y });
   }
@@ -7060,7 +7063,7 @@ async function executeCommand(commandName, params, sessionName = "default", extr
   }
   let targetPageOverride = null;
   if (_target && extraOpts?.cdpEndpoint) {
-    const { findTargetPage } = await import("./browser-AOVQTGJ7.js");
+    const { findTargetPage } = await import("./browser-UPKOT3V6.js");
     targetPageOverride = await findTargetPage(extraOpts.cdpEndpoint, _target);
     if (!targetPageOverride) {
       return errorResult(`Target "${_target}" not found. Use 'xbrowser targets --cdp ${extraOpts.cdpEndpoint}' to list available pages.`);
@@ -8879,7 +8882,7 @@ function createRPCHandler() {
     if (isNewFormat) {
       try {
         const replayErrors = [];
-        const { SessionReplayer } = await import("./session-replayer-MJH5W7BB.js");
+        const { SessionReplayer } = await import("./session-replayer-J4GXUULG.js");
         const replayer = new SessionReplayer({
           page: session.page,
           stepDelay: slowMo * 500,

package/dist/index.d.ts

@@ -311,6 +311,10 @@ interface XBMouse {
         steps?: number;
     }): Promise<void>;
     wheel(deltaX: number, deltaY: number): Promise<void>;
+    /** Drag from current position to (x,y) — drives the real HTML5 DnD pipeline */
+    drag(x: number, y: number, opts?: {
+        steps?: number;
+    }): Promise<void>;
 }
 interface XBKeyboard {
     press(key: string, opts?: {

package/dist/index.js

@@ -18,7 +18,7 @@ import {
   resolveLaunchOpts,
   saveSessionDiskMeta,
   setActivePage
-} from "./chunk-7V3B7VPX.js";
+} from "./chunk-EI2XZIDF.js";
 import {
   detectAntiBot,
   formatDetectionMessage
@@ -86,8 +86,8 @@ import {
   rand,
   sleep,
   wheelDelta
-} from "./chunk-A5HJ6IRE.js";
-import "./chunk-TNEN6VQ2.js";
+} from "./chunk-LL37GYPP.js";
+import "./chunk-3KZ34AUC.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
@@ -981,14 +981,14 @@ var mouseCommand = registerCommand({
   description: "Control the mouse (move, click, etc.)",
   scope: "page",
   parameters: z6.object({
-    action: z6.enum(["move", "down", "up", "click", "dblclick"]),
+    action: z6.enum(["move", "down", "up", "click", "dblclick", "drag"]),
     x: z6.coerce.number(),
     y: z6.coerce.number(),
     button: z6.enum(["left", "right", "middle"]).optional(),
     steps: z6.coerce.number().optional()
   }),
   result: z6.object({
-    action: z6.enum(["move", "down", "up", "click", "dblclick"]),
+    action: z6.enum(["move", "down", "up", "click", "dblclick", "drag"]),
     x: z6.number(),
     y: z6.number()
   }),
@@ -1012,6 +1012,9 @@ var mouseCommand = registerCommand({
       case "dblclick":
         await ctx.page.mouse.dblclick(p.x, p.y, { button });
         break;
+      case "drag":
+        await ctx.page.mouse.drag(p.x, p.y, p.steps ? { steps: p.steps } : {});
+        break;
     }
     return ok6({ action: p.action, x: p.x, y: p.y });
   }
@@ -7893,7 +7896,7 @@ async function executeCommand(commandName, params, sessionName = "default", extr
   }
   let targetPageOverride = null;
   if (_target && extraOpts?.cdpEndpoint) {
-    const { findTargetPage } = await import("./browser-3KTEVTMU.js");
+    const { findTargetPage } = await import("./browser-SYE57VHU.js");
     targetPageOverride = await findTargetPage(extraOpts.cdpEndpoint, _target);
     if (!targetPageOverride) {
       return errorResult(`Target "${_target}" not found. Use 'xbrowser targets --cdp ${extraOpts.cdpEndpoint}' to list available pages.`);
@@ -14106,7 +14109,7 @@ Run "xbrowser ${command} ${subCommand} --help" to see available parameters.`
               const targetPage = pages[cmdTabIndex];
               await targetPage.bringToFront().catch(() => {
               });
-              const { setActivePage: setActivePage2 } = await import("./browser-3KTEVTMU.js");
+              const { setActivePage: setActivePage2 } = await import("./browser-SYE57VHU.js");
               setActivePage2(session, targetPage);
             }
           }
@@ -17279,7 +17282,7 @@ var DataCollector = class {
     return results;
   }
   async createBrowserContext() {
-    const { launch } = await import("./cdp-driver-OC37OT4B.js");
+    const { launch } = await import("./cdp-driver-KT6HL33W.js");
     const { browser } = await launch({
       headless: true,
       args: ["--no-sandbox", "--disable-setuid-sandbox"]

package/dist/{launcher-L2JNDB2H.js → launcher-44STYRJC.js}

@@ -4,9 +4,10 @@ import {
   connectToCDP,
   findChrome,
   getCDPTargets,
+  joinCdpHttpUrl,
   killChrome,
   launchChrome
-} from "./chunk-TNEN6VQ2.js";
+} from "./chunk-3KZ34AUC.js";
 import "./chunk-GDKLH7ZY.js";
 import "./chunk-KFQGP6VL.js";
 export {
@@ -15,6 +16,7 @@ export {
   connectToCDP,
   findChrome,
   getCDPTargets,
+  joinCdpHttpUrl,
   killChrome,
   launchChrome
 };

package/dist/{launcher-OZXJQPNG.js → launcher-EXJHHAUL.js}

@@ -4,9 +4,10 @@ import {
   connectToCDP,
   findChrome,
   getCDPTargets,
+  joinCdpHttpUrl,
   killChrome,
   launchChrome
-} from "./chunk-AMI64BSD.js";
+} from "./chunk-IWVG4XYZ.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   ANTI_DETECT_ARGS,
@@ -14,6 +15,7 @@ export {
   connectToCDP,
   findChrome,
   getCDPTargets,
+  joinCdpHttpUrl,
   killChrome,
   launchChrome
 };

package/dist/{session-replayer-MJH5W7BB.js → session-replayer-J4GXUULG.js}

@@ -34,7 +34,7 @@ var SessionReplayer = class {
     if (this.opts.page) {
       this.page = this.opts.page;
     } else if (this.opts.cdpUrl) {
-      const { launch } = await import("./cdp-driver-DKNLIA6B.js");
+      const { launch } = await import("./cdp-driver-4UAV56SQ.js");
       const { browser } = await launch({ cdpEndpoint: this.opts.cdpUrl });
       let contexts = browser.contexts();
       for (let i = 0; i < 10 && contexts.length === 0; i++) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xbrowser/cli",
-  "version": "1.16.0",
+  "version": "1.18.0",
   "description": "Browser automation CLI for web scraping, headless browsing, SEO analysis, and AI agent workflows. A command-line alternative to Playwright, Puppeteer, and Selenium.",
   "type": "module",
   "bin": {