@xbrowser/cli 1.20.0 → 1.22.0

package/dist/{chunk-NODRQGOK.js → chunk-IR6C24P7.js}

@@ -478,6 +478,55 @@ var ACTION_SIGNAL_SCRIPT = `
       } catch(e) { /* skip */ }
     }
 
+    // Ordinal address (r6): ancestor form's ordinal among sibling forms + element's
+    // ordinal among same-tag direct children of that form. Direct children only \u2014
+    // nested elements have no stable single-level address.
+    var ordinal = null;
+    try {
+      var ordForm = el.closest ? el.closest('form') : null;
+      if (ordForm && el.parentElement === ordForm) {
+        var ordParent = ordForm.parentElement;
+        var formSibs = ordParent
+          ? Array.prototype.filter.call(ordParent.children, function(c) { return c.tagName === 'FORM'; })
+          : [ordForm];
+        var tagSibs = Array.prototype.filter.call(ordForm.children, function(c) { return c.tagName === el.tagName; });
+        ordinal = {
+          formNth: formSibs.indexOf(ordForm) + 1,
+          tagNth: tagSibs.indexOf(el) + 1,
+        };
+      }
+    } catch(e) { /* skip */ }
+
+    // Label text (r16): the <label> associated with the element (for= association or ancestor wrapper). In virtual list /
+    // form-row reordering scenarios, structural ordinals fail, but the label text moves in the same line as the
+    // control\u2014content moves, and the anchor follows the content.
+    var labelText = '';
+    try {
+      var lbl = null;
+      if (el.id) lbl = el.ownerDocument.querySelector('label[for="' + el.id + '"]');
+      if (!lbl && el.closest) lbl = el.closest('label');
+      if (lbl) labelText = (lbl.textContent || '').trim().substring(0, 40);
+    } catch(e) { /* skip */ }
+
+    // Element size (r25): rounded rect at record time \u2014 scoring signal for
+    // fingerprint disambiguation between same-fingerprint decoys.
+    var size = null;
+    try {
+      var szR = el.getBoundingClientRect();
+      if (szR.width > 0 || szR.height > 0) {
+        size = { w: Math.round(szR.width), h: Math.round(szR.height) };
+      }
+    } catch(e) { /* skip */ }
+
+    // Row text (r27): textContent of the closest table/list row. In virtual
+    // lists and sortable tables the row re-indexes \u2014 the row TEXT travels
+    // with the content, giving inputs a content anchor that survives reorder.
+    var rowText = '';
+    try {
+      var row = el.closest ? el.closest('tr,li') : null;
+      if (row) rowText = (row.textContent || '').trim().replace(/s+/g, ' ').substring(0, 40);
+    } catch(e) { /* skip */ }
+
     return {
       tag: tag,
       selector: selector,
@@ -491,6 +540,10 @@ var ACTION_SIGNAL_SCRIPT = `
       placeholder: el.getAttribute('placeholder') || undefined,
       ariaLabel: el.getAttribute('aria-label') || undefined,
       href: el.getAttribute('href') ? el.getAttribute('href').substring(0, 80) : undefined,
+      ordinal: ordinal || undefined,
+      labelText: labelText || undefined,
+      size: size || undefined,
+      rowText: rowText || undefined,
     };
   }
 
@@ -1128,6 +1181,50 @@ var ACTION_SIGNAL_SCRIPT = `
     __xb_drag_start_pos = { x: e.clientX, y: e.clientY };
   }, true);
   document.addEventListener('drop', function(e) {
+    // sup-s5: OS \u6587\u4EF6\u62D6\u5165\u6355\u83B7\u2014\u2014Dropzone/Uppy \u7C7B\u4E0A\u4F20\u533A\u65E0 input[type=file]\uFF0C
+    // change \u6355\u83B7\u591F\u4E0D\u7740\uFF1BdataTransfer.files \u7ECF FileReader \u5185\u8054\uFF08\u4E0E
+    // filechooser \u540C\u6784\uFF09\uFF0C\u56DE\u653E\u7AEF 'drop' \u52A8\u4F5C\u7ECF dropFiles \u91CD\u653E\u3002
+    try {
+      var dropped = (e.dataTransfer && e.dataTransfer.files && e.dataTransfer.files.length > 0)
+        ? Array.prototype.slice.call(e.dataTransfer.files)
+        : [];
+      if (dropped.length > 0) {
+        var zone = describe(resolveMeaningful(e));
+        var names = dropped.map(function(f) { return f.name; });
+        var readers = [];
+        for (var i = 0; i < dropped.length; i++) {
+          readers.push(new Promise(function(resolve) {
+            var reader = new FileReader();
+            reader.onload = function() { resolve(reader.result); };
+            reader.onerror = function() { resolve(null); };
+            reader.readAsDataURL(dropped[i]);
+          }));
+        }
+        Promise.all(readers).then(function(contents) {
+          var fileData = [];
+          for (var j = 0; j < dropped.length; j++) {
+            fileData.push({
+              name: dropped[j].name,
+              type: dropped[j].type,
+              size: dropped[j].size,
+              dataUrl: contents[j],
+            });
+          }
+          pushAction('drop', {
+            x: e.clientX,
+            y: e.clientY,
+            element: zone,
+            value: names.join(', '),
+            files: {
+              names: names,
+              count: dropped.length,
+              isMultiple: dropped.length > 1,
+              fileData: fileData,
+            },
+          });
+        });
+      }
+    } catch(_) { /* capture must not break the drag path */ }
     if (__xb_drag_source && __xb_drag_start_pos) {
       pushAction('drag', {
         x: e.clientX,

package/dist/{chunk-3KZ34AUC.js → chunk-MYH6FIBZ.js}

@@ -93,10 +93,11 @@ async function launchChrome(options = {}) {
     "--no-sandbox",
     "--no-first-run",
     "--no-default-browser-check",
+    "--disable-session-crashed-bubble",
     "--disable-background-timer-throttling",
     "--disable-backgrounding-occluded-windows",
     "--disable-renderer-backgrounding",
-    "--disable-features=Translate",
+    "--disable-features=Translate,PasswordLeakDetection",
     "--disable-popup-blocking"
   ];
   if (headless) {

package/dist/{chunk-75TLPVVZ.js → chunk-T4WTKBWI.js}

@@ -1,7 +1,7 @@
 import {
   createRuleEngine,
   launch
-} from "./chunk-UYEJ66VX.js";
+} from "./chunk-4OU37CXP.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
@@ -1227,7 +1227,7 @@ async function closeSessionByName(name) {
       } catch {
       }
       try {
-        const { SessionRecorder } = await import("./session-recorder-3BEVWHOK.js");
+        const { SessionRecorder } = await import("./session-recorder-GEZVQBKW.js");
         SessionRecorder.cleanup(session.name);
       } catch {
       }

package/dist/{chunk-HBHOKZPN.js → chunk-V6KGBU5J.js}

@@ -875,6 +875,55 @@ var ACTION_SIGNAL_SCRIPT = `
       } catch(e) { /* skip */ }
     }
 
+    // Ordinal address (r6): ancestor form's ordinal among sibling forms + element's
+    // ordinal among same-tag direct children of that form. Direct children only \u2014
+    // nested elements have no stable single-level address.
+    var ordinal = null;
+    try {
+      var ordForm = el.closest ? el.closest('form') : null;
+      if (ordForm && el.parentElement === ordForm) {
+        var ordParent = ordForm.parentElement;
+        var formSibs = ordParent
+          ? Array.prototype.filter.call(ordParent.children, function(c) { return c.tagName === 'FORM'; })
+          : [ordForm];
+        var tagSibs = Array.prototype.filter.call(ordForm.children, function(c) { return c.tagName === el.tagName; });
+        ordinal = {
+          formNth: formSibs.indexOf(ordForm) + 1,
+          tagNth: tagSibs.indexOf(el) + 1,
+        };
+      }
+    } catch(e) { /* skip */ }
+
+    // Label text (r16): the <label> associated with the element (for= association or ancestor wrapper). In virtual list /
+    // form-row reordering scenarios, structural ordinals fail, but the label text moves in the same line as the
+    // control\u2014content moves, and the anchor follows the content.
+    var labelText = '';
+    try {
+      var lbl = null;
+      if (el.id) lbl = el.ownerDocument.querySelector('label[for="' + el.id + '"]');
+      if (!lbl && el.closest) lbl = el.closest('label');
+      if (lbl) labelText = (lbl.textContent || '').trim().substring(0, 40);
+    } catch(e) { /* skip */ }
+
+    // Element size (r25): rounded rect at record time \u2014 scoring signal for
+    // fingerprint disambiguation between same-fingerprint decoys.
+    var size = null;
+    try {
+      var szR = el.getBoundingClientRect();
+      if (szR.width > 0 || szR.height > 0) {
+        size = { w: Math.round(szR.width), h: Math.round(szR.height) };
+      }
+    } catch(e) { /* skip */ }
+
+    // Row text (r27): textContent of the closest table/list row. In virtual
+    // lists and sortable tables the row re-indexes \u2014 the row TEXT travels
+    // with the content, giving inputs a content anchor that survives reorder.
+    var rowText = '';
+    try {
+      var row = el.closest ? el.closest('tr,li') : null;
+      if (row) rowText = (row.textContent || '').trim().replace(/s+/g, ' ').substring(0, 40);
+    } catch(e) { /* skip */ }
+
     return {
       tag: tag,
       selector: selector,
@@ -888,6 +937,10 @@ var ACTION_SIGNAL_SCRIPT = `
       placeholder: el.getAttribute('placeholder') || undefined,
       ariaLabel: el.getAttribute('aria-label') || undefined,
       href: el.getAttribute('href') ? el.getAttribute('href').substring(0, 80) : undefined,
+      ordinal: ordinal || undefined,
+      labelText: labelText || undefined,
+      size: size || undefined,
+      rowText: rowText || undefined,
     };
   }
 
@@ -1525,6 +1578,50 @@ var ACTION_SIGNAL_SCRIPT = `
     __xb_drag_start_pos = { x: e.clientX, y: e.clientY };
   }, true);
   document.addEventListener('drop', function(e) {
+    // sup-s5: OS \u6587\u4EF6\u62D6\u5165\u6355\u83B7\u2014\u2014Dropzone/Uppy \u7C7B\u4E0A\u4F20\u533A\u65E0 input[type=file]\uFF0C
+    // change \u6355\u83B7\u591F\u4E0D\u7740\uFF1BdataTransfer.files \u7ECF FileReader \u5185\u8054\uFF08\u4E0E
+    // filechooser \u540C\u6784\uFF09\uFF0C\u56DE\u653E\u7AEF 'drop' \u52A8\u4F5C\u7ECF dropFiles \u91CD\u653E\u3002
+    try {
+      var dropped = (e.dataTransfer && e.dataTransfer.files && e.dataTransfer.files.length > 0)
+        ? Array.prototype.slice.call(e.dataTransfer.files)
+        : [];
+      if (dropped.length > 0) {
+        var zone = describe(resolveMeaningful(e));
+        var names = dropped.map(function(f) { return f.name; });
+        var readers = [];
+        for (var i = 0; i < dropped.length; i++) {
+          readers.push(new Promise(function(resolve) {
+            var reader = new FileReader();
+            reader.onload = function() { resolve(reader.result); };
+            reader.onerror = function() { resolve(null); };
+            reader.readAsDataURL(dropped[i]);
+          }));
+        }
+        Promise.all(readers).then(function(contents) {
+          var fileData = [];
+          for (var j = 0; j < dropped.length; j++) {
+            fileData.push({
+              name: dropped[j].name,
+              type: dropped[j].type,
+              size: dropped[j].size,
+              dataUrl: contents[j],
+            });
+          }
+          pushAction('drop', {
+            x: e.clientX,
+            y: e.clientY,
+            element: zone,
+            value: names.join(', '),
+            files: {
+              names: names,
+              count: dropped.length,
+              isMultiple: dropped.length > 1,
+              fileData: fileData,
+            },
+          });
+        });
+      }
+    } catch(_) { /* capture must not break the drag path */ }
     if (__xb_drag_source && __xb_drag_start_pos) {
       pushAction('drag', {
         x: e.clientX,

package/dist/{chunk-IWVG4XYZ.js → chunk-VCVDILH6.js}

@@ -97,10 +97,11 @@ async function launchChrome(options = {}) {
     "--no-sandbox",
     "--no-first-run",
     "--no-default-browser-check",
+    "--disable-session-crashed-bubble",
     "--disable-background-timer-throttling",
     "--disable-backgrounding-occluded-windows",
     "--disable-renderer-backgrounding",
-    "--disable-features=Translate",
+    "--disable-features=Translate,PasswordLeakDetection",
     "--disable-popup-blocking"
   ];
   if (headless) {

package/dist/{chunk-A6LPGFAL.js → chunk-WYETQ5C7.js}

@@ -1,6 +1,6 @@
 import {
   createRuleEngine
-} from "./chunk-H2A5JUK5.js";
+} from "./chunk-75DNUI6M.js";
 
 // src/cdp-interceptor/proxy.ts
 import { WebSocketServer, WebSocket } from "ws";

package/dist/cli.js

@@ -1,4 +1,8 @@
 #!/usr/bin/env node
+import {
+  detectAntiBot,
+  formatDetectionMessage
+} from "./chunk-JKVUFP3G.js";
 import {
   forwardCommandLog,
   forwardNetworkAnalyze,
@@ -45,7 +49,7 @@ import {
 } from "./chunk-Q2DFJQGS.js";
 import {
   SessionRecorder
-} from "./chunk-NODRQGOK.js";
+} from "./chunk-IR6C24P7.js";
 import {
   addKnownIssue,
   getKnowledgePath,
@@ -66,21 +70,19 @@ import {
   getAllSessions,
   getBrowser,
   getSessionById,
-  rand,
   resolveLaunchOpts,
   saveSessionDiskMeta,
-  setActivePage,
+  setActivePage
+} from "./chunk-IFKJO2UR.js";
+import {
+  rand,
   sleep,
   wheelDelta
-} from "./chunk-T2KUVO4H.js";
-import "./chunk-3KZ34AUC.js";
+} from "./chunk-GYB5BOSP.js";
+import "./chunk-MYH6FIBZ.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
-import {
-  detectAntiBot,
-  formatDetectionMessage
-} from "./chunk-JKVUFP3G.js";
 import "./chunk-KFQGP6VL.js";
 
 // src/router.ts
@@ -8248,7 +8250,7 @@ async function executeCommand(commandName, params, sessionName = "default", extr
   }
   let targetPageOverride = null;
   if (_target && extraOpts?.cdpEndpoint) {
-    const { findTargetPage } = await import("./browser-Y6B3NS4Q.js");
+    const { findTargetPage } = await import("./browser-BVRFSUXU.js");
     targetPageOverride = await findTargetPage(extraOpts.cdpEndpoint, _target);
     if (!targetPageOverride) {
       return errorResult(`Target "${_target}" not found. Use 'xbrowser targets --cdp ${extraOpts.cdpEndpoint}' to list available pages.`);
@@ -12292,6 +12294,16 @@ async function handleReplay(args, options, mode) {
     }
     return;
   }
+  if (result.ok && mode !== "json" && mode !== "yaml") {
+    const healed = typeof result.healed === "number" ? result.healed : 0;
+    if (healed > 0) {
+      console.log(`
+Self-healed ${healed} action(s):`);
+      for (const d of result.healedDetails ?? []) {
+        console.log(`  - step ${d.index + 1}: ${d.strategy}`);
+      }
+    }
+  }
   outputResult(result, mode);
 }
 async function handleConvert(args, _mode) {
@@ -12393,7 +12405,7 @@ async function handleFilter(args, _mode, options) {
   }
 }
 async function handleGeneratePlugin(sessionName, pluginName, outputDir) {
-  const { SessionRecorder: SessionRecorder2 } = await import("./session-recorder-SLDBENVF.js");
+  const { SessionRecorder: SessionRecorder2 } = await import("./session-recorder-563ISSJK.js");
   const { readSiteKnowledge: readSiteKnowledge2, toMarkdown } = await import("./site-knowledge-SYC6VCDB.js");
   const { mkdirSync: mkdirSync10, writeFileSync: writeFileSync12 } = await import("fs");
   const { join: join15 } = await import("path");
@@ -14433,7 +14445,7 @@ Run "xbrowser ${command} ${subCommand} --help" to see available parameters.`
               const targetPage = pages[cmdTabIndex];
               await targetPage.bringToFront().catch(() => {
               });
-              const { setActivePage: setActivePage2 } = await import("./browser-Y6B3NS4Q.js");
+              const { setActivePage: setActivePage2 } = await import("./browser-BVRFSUXU.js");
               setActivePage2(session, targetPage);
             }
           }
@@ -14709,7 +14721,7 @@ async function main() {
     const command = process.argv[2];
     const isLongRunning = command === "preview" || command === "serve";
     if (!isLongRunning) {
-      const { ensureProcessCanExit } = await import("./browser-Y6B3NS4Q.js");
+      const { ensureProcessCanExit } = await import("./browser-BVRFSUXU.js");
       await ensureProcessCanExit().catch(() => {
       });
       process.exit(process.exitCode || exitCode);

package/dist/daemon-main.js

@@ -1,3 +1,7 @@
+import {
+  detectAntiBot,
+  formatDetectionMessage
+} from "./chunk-JKVUFP3G.js";
 import {
   getPluginLoader
 } from "./chunk-PIWNMC36.js";
@@ -19,7 +23,7 @@ import {
 } from "./chunk-VEDJ5XSQ.js";
 import {
   SessionRecorder
-} from "./chunk-HBHOKZPN.js";
+} from "./chunk-V6KGBU5J.js";
 import {
   closeEphemeralContext,
   closeSessionByName,
@@ -34,24 +38,22 @@ import {
   resolveLaunchOpts,
   saveSessionDiskMeta,
   setActivePage
-} from "./chunk-75TLPVVZ.js";
+} from "./chunk-T4WTKBWI.js";
+import {
+  createRuleEngine
+} from "./chunk-4OU37CXP.js";
+import {
+  queryJS
+} from "./chunk-A7NEA4PA.js";
 import {
-  createRuleEngine,
   rand,
   sleep,
   wheelDelta
-} from "./chunk-UYEJ66VX.js";
-import {
-  queryJS
-} from "./chunk-3FWLW7FS.js";
-import "./chunk-3KZ34AUC.js";
+} from "./chunk-GYB5BOSP.js";
+import "./chunk-MYH6FIBZ.js";
 import {
   errMsg
 } from "./chunk-GDKLH7ZY.js";
-import {
-  detectAntiBot,
-  formatDetectionMessage
-} from "./chunk-JKVUFP3G.js";
 import "./chunk-KFQGP6VL.js";
 
 // src/daemon/daemon-main.ts
@@ -7766,7 +7768,7 @@ async function executeCommand(commandName, params, sessionName = "default", extr
   }
   let targetPageOverride = null;
   if (_target && extraOpts?.cdpEndpoint) {
-    const { findTargetPage } = await import("./browser-PBBC7RAV.js");
+    const { findTargetPage } = await import("./browser-DSYUAE7H.js");
     targetPageOverride = await findTargetPage(extraOpts.cdpEndpoint, _target);
     if (!targetPageOverride) {
       return errorResult(`Target "${_target}" not found. Use 'xbrowser targets --cdp ${extraOpts.cdpEndpoint}' to list available pages.`);
@@ -9588,7 +9590,7 @@ function createRPCHandler() {
     if (isNewFormat) {
       try {
         const replayErrors = [];
-        const { SessionReplayer } = await import("./session-replayer-SBYJXQZZ.js");
+        const { SessionReplayer } = await import("./session-replayer-XM5L7LFD.js");
         const replayer = new SessionReplayer({
           page: session.page,
           stepDelay: slowMo * 500,
@@ -9613,6 +9615,8 @@ function createRPCHandler() {
           duration,
           eventsPlayed: result2.success,
           totalEvents: result2.success + result2.failed + result2.skipped,
+          healed: result2.healed,
+          healedDetails: result2.healedDetails,
           errors: replayErrors
         });
       } catch (e) {
@@ -9645,6 +9649,8 @@ function createRPCHandler() {
       duration: typeof input.duration === "number" ? input.duration : 0,
       eventsPlayed,
       totalEvents,
+      healed: typeof input.healed === "number" ? input.healed : 0,
+      healedDetails: Array.isArray(input.healedDetails) ? input.healedDetails : [],
       errors
     };
   }

package/dist/index.d.ts

@@ -6,6 +6,103 @@ import { ZodType, ZodTypeDef, z } from 'zod';
 
 declare const version: any;
 
+/**
+ * stealth.ts — Behavioral stealth layer for CDP driver
+ *
+ * Enhances mouse/keyboard with human-like patterns:
+ *   • Bezier trajectory with cosine easing + noise + overshoot correction
+ *   • Landing offset from element center (no dead-center clicks)
+ *   • Press/release drift (finger micro-movement)
+ *   • Three-tier typing rhythm with random pauses
+ *   • Typo + backspace correction
+ *   • Wheel exponential decay (momentum)
+ *
+ * Also provides init script for page-level stealth hooks:
+ *
+ * ── 维护红线（S183 站点观测实证）────────────────────────────
+ *   1. 永不覆写 navigator.webdriver —— 原生 false 即最佳伪装。
+ *      掘金等站点以 ~5s/次轮询 Navigator.prototype.webdriver 的
+ *      descriptor（getter native + 实例无覆写 = 正常），任何覆写
+ *      都会在 descriptor 检测下露馅。
+ *   2. 实例覆写必须原型层同步（S172）—— 实例 defineProperty 可被
+ *      X.prototype.p.call(target) 一行逃逸，见 stealth-audit.test.ts。
+ *   3. 覆写函数必须进 toString native 伪装名单（S172b 审计规则 R2）。
+ *   ────────────────────────────────────────────────────────
+ * Also provides init script for page-level stealth hooks:
+ *   • AEL event proxy (sourceCapabilities / isTrusted / coordinate floatification)
+ *   • onclick prototype hijack (dual-stream consistency)
+ *   • Screen/hasFocus override + toString disguise
+ *
+ * 124 rounds of attack-defense validated (output/cdp-duel-s5/)
+ */
+
+interface UaChProfile {
+    /** GREASE brands 形状，例：Not=A?Brand:99（从真实环境采样） */
+    brands: Array<{
+        brand: string;
+        version: string;
+    }>;
+    /** 平台（macOS / Windows / Linux） */
+    platform: string;
+    /** 平台版本（高熵） */
+    platformVersion: string;
+    /** 架构（arm / x86） */
+    architecture: string;
+    /** 位宽（64 / 32） */
+    bitness: string;
+    /** 设备型号（桌面端通常空） */
+    model: string;
+    /** 完整版本号（uaFullVersion，例：151.0.7922.175） */
+    uaFullVersion: string;
+    /** 完整版本列表（fullVersionList，与 brands 同形状+全版本） */
+    fullVersionList: Array<{
+        brand: string;
+        version: string;
+    }>;
+}
+interface StealthConfig {
+    /**
+     * S191: UA-CH 真实档案——垫片在 navigator.userAgentData 缺失时
+     * 以此生成 API 表面（值来自真实有头 Chrome 采样，形状一致）。
+     * 未提供时从 UA 字符串派生兜底值。
+     */
+    uaChProfile?: UaChProfile;
+    /** Bezier curvature range [min, max] as fraction of distance */
+    bezierCurvature: [number, number];
+    /** Trajectory noise amplitude ±px */
+    noiseAmplitude: number;
+    /** Overshoot distance range [min, max] px */
+    overshootRange: [number, number];
+    /** Aim pause before click [min, max] ms */
+    aimPause: [number, number];
+    /** Press duration [min, max] ms */
+    pressDuration: [number, number];
+    /** Release coordinate drift [min, max] px */
+    releaseDrift: [number, number];
+    /** Landing offset for small elements [min, max] px */
+    landingOffsetSmall: [number, number];
+    /** Landing offset for large elements [min, max] px */
+    landingOffsetLarge: [number, number];
+    /** Elements smaller than this (px) use small offset */
+    smallElementThreshold: number;
+    /** Typing rhythm probabilities */
+    typingRhythm: {
+        fastProb: number;
+        fastRange: [number, number];
+        normalRange: [number, number];
+        pauseProb: number;
+        pauseRange: [number, number];
+    };
+    /** Key press duration [min, max] ms */
+    keyPressDuration: [number, number];
+    /** Typo probability per field (0-1) */
+    typoProbability: number;
+    /** Wheel peak delta */
+    wheelPeak: number;
+    /** Wheel decay rate */
+    wheelDecayRate: number;
+}
+
 /**
  * XBrowser CDP Driver — Abstract Interface Types
  *
@@ -38,6 +135,14 @@ interface XBContextOptions {
     userAgent?: string;
     extraHTTPHeaders?: Record<string, string>;
     ignoreHTTPSErrors?: boolean;
+    /** S194: stealth 伪装配置（UA-CH 档案等）——经 context 传至 page 的注入层 */
+    stealthConfig?: Partial<StealthConfig>;
+    /** sup-s9: HTTP Basic/Digest 凭证——Fetch.authRequired 自动 ProvideCredentials；
+     * 缺省 CancelAuth（快速失败，不弹认证框不挂起） */
+    httpCredentials?: {
+        username: string;
+        password: string;
+    };
 }
 interface XBContext {
     newPage(): Promise<XBPage>;
@@ -171,6 +276,8 @@ interface XBPage {
         width: number;
         height: number;
     }): Promise<void>;
+    /** env-E2: 缩放变异——deviceScaleFactor 切换（CSS 视口尺寸不变） */
+    setDeviceScaleFactor(dsf: number): Promise<void>;
     addInitScript(script: string): Promise<void>;
     /** 覆盖当前页会话的 User-Agent（Network.setUserAgentOverride，会话级持久） */
     setUserAgent(userAgent: string): Promise<void>;
@@ -187,6 +294,10 @@ interface XBPage {
     route(url: string | RegExp, handler: (route: XBRoute) => Promise<void> | void): Promise<void>;
     unroute(url: string | RegExp, handler?: (route: XBRoute) => Promise<void> | void): Promise<void>;
     setInputFiles(selector: string, files: XBFilePayload | XBFilePayload[]): Promise<void>;
+    /** sup-s4: Dropzone 拖拽上传模拟——DataTransfer+File 派发 dragenter/dragover/drop */
+    dropFiles(selector: string, payload: XBFilePayload): Promise<void>;
+    /** sup-s11: beforeunload 自动应答语义（accept=离开默认 / dismiss=留守） */
+    setBeforeUnloadBehavior(mode: 'accept' | 'dismiss'): void;
     dragAndDrop(source: string, target: string): Promise<void>;
     on(event: string, handler: Function): void;
     off(event: string, handler: Function): void;
@@ -1754,7 +1865,7 @@ interface HoverContext {
 }
 interface UserAction {
     id: number;
-    type: 'click' | 'input' | 'change' | 'keydown' | 'submit' | 'scroll' | 'navigation' | 'goto' | 'cdp-fill' | 'cdp-click' | 'cdp-eval' | 'filechooser' | 'dblclick' | 'contextmenu' | 'hover' | 'drag' | 'resize' | 'clipboard' | 'touch' | 'focus' | 'visibility' | 'popup_appear' | 'discovered_filters';
+    type: 'click' | 'input' | 'change' | 'keydown' | 'submit' | 'scroll' | 'navigation' | 'goto' | 'cdp-fill' | 'cdp-click' | 'cdp-eval' | 'filechooser' | 'dblclick' | 'contextmenu' | 'hover' | 'drag' | 'resize' | 'clipboard' | 'touch' | 'focus' | 'visibility' | 'drop' | 'popup_appear' | 'discovered_filters';
     timestamp: number;
     url: string;
     pageTitle: string;
@@ -1778,6 +1889,24 @@ interface UserAction {
         placeholder?: string;
         ariaLabel?: string;
         href?: string;
+        /** 结构地址（r6）：祖先 form 在同级 form 中的序 + 元素在 form 内同 tag
+         * 兄弟中的序（仅 form 直接子元素捕获）。布局位移后坐标失效时仍可定位。 */
+        ordinal?: {
+            formNth: number;
+            tagNth: number;
+        };
+        /** 关联 label 的文本（r16）：for= 关联或祖先 label 包裹。行重排/虚拟
+         * 列表重建后结构序失效时的内容锚。 */
+        labelText?: string;
+        /** 元素尺寸（r25）：录制时 rounded rect。同指纹诱饵消歧的评分信号
+         * （仅加分不否决——响应式布局合法改变尺寸）。 */
+        size?: {
+            w: number;
+            h: number;
+        };
+        /** 所在行文本（r27）：closest('tr,li') 的 textContent 前 40 字符。
+         * 表格/列表行重排后结构序失效时的内容锚（label 锚的行推广）。 */
+        rowText?: string;
     };
     value?: string;
     key?: string;
@@ -2178,6 +2307,12 @@ interface PlaybackResult {
         event?: RecordedEvent;
         error: string;
     }>;
+    /** r13: 自愈步数与明细（SessionReplayer 路径填充） */
+    healed?: number;
+    healedDetails?: Array<{
+        index: number;
+        strategy: string;
+    }>;
 }
 /**
  * Engine for playing back a recorded browser session.