cicy-desktop 2.1.280 → 2.1.281

package/src/backends/homepage-react/index.html

@@ -6,7 +6,7 @@
   <link rel="icon" type="image/svg+xml" href="./favicon.svg" />
   <link rel="icon" type="image/png" sizes="256x256" href="./favicon-256.png" />
   <title>CiCy Desktop</title>
-  <script type="module" crossorigin src="./assets/index-Bok65e-y.js"></script>
+  <script type="module" crossorigin src="./assets/index-BzYBKzQW.js"></script>
   <link rel="stylesheet" crossorigin href="./assets/index-C6Zrdgc0.css">
 </head>
 <body>

package/src/main.js

@@ -168,8 +168,12 @@ if (process.platform === "win32") {
 const DEEPLINK_SCHEMES = ["cicy-desktop", "cicy"]; // primary, then legacy
 const isDeepLink = (u) =>
   typeof u === "string" && DEEPLINK_SCHEMES.some((s) => u.startsWith(`${s}://`));
+// Source/dev runs (`electron <appdir>`) must register execPath + the app dir,
+// otherwise Windows stores a bare `electron.exe "%1"` handler that launches an
+// empty Electron shell — and clobbers the installed app's registration.
+const deeplinkArgs = electronApp.isPackaged ? [] : [process.execPath, [path.resolve(process.argv[1] || electronApp.getAppPath())]];
 for (const s of DEEPLINK_SCHEMES) {
-  try { if (!electronApp.isDefaultProtocolClient(s)) electronApp.setAsDefaultProtocolClient(s); } catch {}
+  try { if (!electronApp.isDefaultProtocolClient(s, ...deeplinkArgs)) electronApp.setAsDefaultProtocolClient(s, ...deeplinkArgs); } catch {}
 }
 
 // Deep links can arrive before any BrowserWindow exists (cold start via

package/src/profiles/profile-store.js

@@ -305,6 +305,33 @@ function setProxy(backend, idx, url) {
   throw new Error(`Unknown backend: ${backend}`);
 }
 
+// removeProfile — drop the profile record. Electron: deletes account-<N>.json
+// (the caller is responsible for the session's storage). Returns true if it existed.
+function removeProfile(backend, idx) {
+  if (backend === "electron") {
+    const f = electronFile(idx);
+    if (!fs.existsSync(f)) return false;
+    fs.unlinkSync(f);
+    return true;
+  }
+  if (backend === "chrome") {
+    const cfg = readChromeConfig();
+    if (!cfg[`profile_${idx}`]) return false;
+    delete cfg[`profile_${idx}`];
+    fs.writeFileSync(CHROME_JSON, JSON.stringify(cfg, null, 2));
+    return true;
+  }
+  throw new Error(`Unknown backend: ${backend}`);
+}
+
+// setNote — free-form per-profile note (both backends).
+function setNote(backend, idx, note) {
+  const text = typeof note === "string" ? note.trim() : "";
+  if (backend === "chrome") return mutateChrome(idx, (e) => ({ ...e, note: text }));
+  if (backend === "electron") return mutateElectron(idx, (d) => ({ ...d, note: text }));
+  throw new Error(`Unknown backend: ${backend}`);
+}
+
 // setLogin — upsert a rich login record (any subset of LOGIN_FIELDS). Keyed by
 // `name` (site name). Works identically for both backends.
 function setLogin(backend, idx, login) {
@@ -345,6 +372,8 @@ module.exports = {
   listProfiles,
   getProfile,
   setProxy,
+  setNote,
+  removeProfile,
   setLogin,
   addLogin,
   removeLogin,

package/src/tabbrowser/panel-cells.js

@@ -46,6 +46,7 @@ function profileForCell(url, requested) {
   const idx = Number(requested);
   return Number.isInteger(idx) && idx > 0 ? idx : DEFAULT_PROFILE;
 }
+const telegramIdentity = require("./telegram-identity");
 const appliedProxy = new Set(); // partitions whose proxy is already configured
 function ensureCellSessionProxy(idx) {
   const part = partitionFor(idx);
@@ -117,6 +118,7 @@ class PanelCells {
       },
     });
     const wc = view.webContents;
+    const rec = { view, url: "", profile: profileIdx, visible: true, identity: null };
     try { view.setBackgroundColor("#ffffff"); } catch (e) {}
     // Chromium uses a dark canvas for transparent/un-styled documents when the
     // app theme is dark (for example a plain `Not Found` response). Keep real
@@ -178,7 +180,7 @@ class PanelCells {
       let loading = false;
       try { loading = wc.isLoading(); } catch (e) {}
       const failed = /^chrome-error:/.test(url) || !!lastError;
-      this.sendState({ id: cellId, url, title, loading, wcId: wc.id, failed, error: failed ? lastError : null });
+      this.sendState({ id: cellId, url, title, loading, wcId: wc.id, failed, error: failed ? lastError : null, identity: rec.identity || null });
     };
     // Telegram Web 是 PWA:代理挂掉时 service worker 照样从缓存吐出 app shell,主框架
     // 「加载成功」、did-fail-load 不触发,可页面其实一点网都没有(用户看到的就是一片白
@@ -219,8 +221,38 @@ class PanelCells {
       push();
     };
 
-    wc.on("did-start-loading", () => { probeSeq++; this.sendState({ id: cellId, loading: true, wcId: wc.id }); });
-    wc.on("did-stop-loading", () => { push(); probeReachable(); });
+    // Telegram 身份:登录后从页面自己的 localStorage/IndexedDB 读出 @username,写进
+    // profile 的 logins(name=telegram),并推给面板列表。登录流程刚结束时用户表可能
+    // 还没落库,所以延迟探几次;拿到就停。
+    let identSeq = 0;
+    const detectIdentity = () => {
+      if (profileIdx === 0) return;
+      let url = ""; try { url = wc.getURL(); } catch (e) {}
+      if (!telegramIdentity.isTelegramUrl(url)) return;
+      const seq = ++identSeq;
+      const delays = [2500, 8000, 20000, 45000];
+      const tick = async (i) => {
+        if (seq !== identSeq || wc.isDestroyed()) return;
+        let raw = null;
+        try { raw = await wc.executeJavaScript(telegramIdentity.TELEGRAM_IDENTITY_SCRIPT, true); } catch (e) {}
+        const it = telegramIdentity.normalizeTelegramIdentity(raw);
+        if (seq !== identSeq) return;
+        if (it && (it.username || it.displayName || it.phone)) {
+          const prev = rec.identity;
+          rec.identity = it;
+          if (!prev || prev.username !== it.username || prev.displayName !== it.displayName || prev.phone !== it.phone) {
+            try { require("../profiles/profile-store").setLogin("electron", profileIdx, telegramIdentity.telegramLoginRecord(it)); } catch (e) {}
+            this.sendState({ id: cellId, wcId: wc.id, identity: it, loading: false, url, title: (() => { try { return wc.getTitle(); } catch (e) { return ""; } })() });
+          }
+          return;
+        }
+        if (i + 1 < delays.length) setTimeout(() => tick(i + 1), delays[i + 1]);
+      };
+      setTimeout(() => tick(0), delays[0]);
+    };
+
+    wc.on("did-start-loading", () => { probeSeq++; identSeq++; this.sendState({ id: cellId, loading: true, wcId: wc.id }); });
+    wc.on("did-stop-loading", () => { push(); probeReachable(); detectIdentity(); });
     wc.on("did-fail-load", (_e, errorCode, errorDescription, validatedURL, isMainFrame) => {
       if (isMainFrame === false || errorCode === -3) return; // 子框架 / ERR_ABORTED(用户导航打断)不算失败
       lastError = { code: errorCode, description: String(errorDescription || ""), url: String(validatedURL || "") };
@@ -232,7 +264,7 @@ class PanelCells {
     wc.on("did-navigate-in-page", push);
     wc.on("page-title-updated", push);
 
-    const rec = { view, url: "", profile: profileIdx, visible: true };
+    rec.view = view;
     this.views.set(String(cellId), rec);
     return rec;
   }
@@ -281,7 +313,7 @@ class PanelCells {
       if (!wc || wc.isDestroyed()) continue;
       let url = "", title = "", loading = false;
       try { url = wc.getURL(); title = wc.getTitle(); loading = wc.isLoading(); } catch (e) {}
-      out.push({ id, url, title, loading, wcId: wc.id, failed: /^chrome-error:/.test(url), error: wc.cicyLastError || null });
+      out.push({ id, url, title, loading, wcId: wc.id, failed: /^chrome-error:/.test(url), error: wc.cicyLastError || null, identity: rec.identity || null });
     }
     return out;
   }
@@ -359,6 +391,9 @@ function installIpc(findTab) {
           accountIdx: Number(p.accountIdx),
           name: String(p.name || ""),
           proxy: p.proxy && p.proxy.enabled ? String(p.proxy.url || "") : "",
+          note: String(p.note || ""),
+          telegram: telegramIdentity.telegramIdentityFromProfile(p),
+          ipInfo: p.ipInfo && p.ipInfo.ip ? { ip: String(p.ipInfo.ip), area: String(p.ipInfo.area || ""), probedAt: String(p.ipInfo.probedAt || "") } : null,
         }));
     } catch (err) { return []; }
   });
@@ -376,6 +411,50 @@ function installIpc(findTab) {
     await applyProfileProxy(profile.accountIdx, profile.proxy);
     return { accountIdx: profile.accountIdx, name: profile.name, proxy: profile.proxy.url };
   });
+  // 出口 IP / 地区:经该 profile 的 session(=它的代理)去问 IP 服务,结果写回 profile.ipInfo。
+  ipcMain.handle("panelcells:probe-ip", async (e, { accountIdx }) => {
+    if (!ctx(e)) throw new Error("Invalid panel");
+    const id = Number(accountIdx);
+    if (!Number.isInteger(id) || id <= 0) throw new Error("Invalid Electron profile ID");
+    const profileStore = require("../profiles/profile-store");
+    const { probeIpViaSession } = require("../utils/ip-probe");
+    const part = partitionFor(id);
+    // 没打开过的 profile 其 session 还没配代理,会探成本机 IP —— 先按存储的代理配好。
+    if (!appliedProxy.has(part)) {
+      const prof = profileStore.getProfile("electron", id);
+      const rules = profileStore.proxyRules(prof && prof.proxy);
+      await session.fromPartition(part).setProxy({ proxyRules: rules || "direct://", proxyBypassRules: "127.0.0.1,localhost,[::1]" });
+      appliedProxy.add(part);
+    }
+    const info = await probeIpViaSession(session.fromPartition(part));
+    if (!info.ip) return { accountIdx: id, ipInfo: null, error: "探测失败：代理不通或 IP 服务不可达" };
+    const view = profileStore.setIpInfo("electron", id, info);
+    return { accountIdx: id, ipInfo: view.ipInfo };
+  });
+  // 删除 profile:关掉所有面板里该 profile 的视图,清空其 session 存储(登录态、cookie),
+  // 再删记录。页面侧已二次确认。
+  ipcMain.handle("panelcells:remove-profile", async (e, { accountIdx }) => {
+    if (!ctx(e)) throw new Error("Invalid panel");
+    const id = Number(accountIdx);
+    if (!Number.isInteger(id) || id <= 0) throw new Error("Invalid Electron profile ID");
+    for (const pc of registry.values()) {
+      for (const [key, rec] of [...pc.views]) { if (rec.profile === id) pc.destroyCell(key); }
+    }
+    const part = partitionFor(id);
+    try { await session.fromPartition(part).clearStorageData(); } catch (err) {}
+    try { await session.fromPartition(part).clearCache(); } catch (err) {}
+    appliedProxy.delete(part);
+    const removed = require("../profiles/profile-store").removeProfile("electron", id);
+    return { accountIdx: id, removed };
+  });
+  ipcMain.handle("panelcells:set-profile-note", async (e, { accountIdx, note }) => {
+    if (!ctx(e)) throw new Error("Invalid panel");
+    const id = Number(accountIdx);
+    if (!Number.isInteger(id) || id <= 0) throw new Error("Invalid Electron profile ID");
+    const text = String(note || "").trim().slice(0, 500);
+    const profile = require("../profiles/profile-store").setNote("electron", id, text);
+    return { accountIdx: id, note: String(profile.note || "") };
+  });
   ipcMain.handle("panelcells:snapshots", async (e) => {
     const pc = ctx(e);
     return pc ? pc.snapshots() : [];

package/src/tabbrowser/panel-preload.js

@@ -15,6 +15,9 @@ contextBridge.exposeInMainWorld("panelAPI", {
   profiles: () => ipcRenderer.invoke("panelcells:profiles"),
   addProfile: () => ipcRenderer.invoke("panelcells:add-profile"),
   setProfileProxy: (accountIdx, proxy) => ipcRenderer.invoke("panelcells:set-profile-proxy", { accountIdx, proxy }),
+  setProfileNote: (accountIdx, note) => ipcRenderer.invoke("panelcells:set-profile-note", { accountIdx, note }),
+  probeIp: (accountIdx) => ipcRenderer.invoke("panelcells:probe-ip", { accountIdx }),
+  removeProfile: (accountIdx) => ipcRenderer.invoke("panelcells:remove-profile", { accountIdx }),
   snapshots: () => ipcRenderer.invoke("panelcells:snapshots"),
   // divider drag: BrowserViews sit ABOVE the page and would swallow pointermove —
   // detach them for the duration of the drag (frame-only preview), reattach on up.

package/src/tabbrowser/telegram-identity.js

@@ -0,0 +1,77 @@
+// Copyright 2026 CiCy AI
+// SPDX-License-Identifier: Apache-2.0
+
+// telegram-identity.js — read "who is logged in" out of a Telegram Web (K)
+// session so the matrix list can show each profile's @username.
+//
+// Telegram Web K keeps the current account id in localStorage `user_auth`
+// ({id, dcID, date}) and caches user records in IndexedDB `tweb-account-<n>`
+// (store `users`, keyed by the stringified user id). The self record carries
+// username / first_name / last_name / phone. Nothing here touches auth keys.
+
+const TELEGRAM_HOST_RE = /(^|\.)web\.telegram\.org$/i;
+
+function isTelegramUrl(url) {
+  try { return TELEGRAM_HOST_RE.test(new URL(String(url || "")).hostname); } catch (e) { return false; }
+}
+
+// Runs inside the (sandboxed) Telegram page via executeJavaScript. Returns a
+// plain object or null; never throws (the caller treats any failure as "unknown").
+const TELEGRAM_IDENTITY_SCRIPT = `(async () => {
+  try {
+    const auth = JSON.parse(localStorage.getItem("user_auth") || "null");
+    const id = auth && (auth.id || auth.user_id);
+    if (!id) return null;
+    const key = String(id);
+    const names = (indexedDB.databases ? (await indexedDB.databases()).map((d) => d.name) : [])
+      .filter((n) => /^tweb-account-\\d+$/.test(String(n || "")));
+    if (!names.length) names.push("tweb-account-1");
+    for (const name of names) {
+      let db = null;
+      try {
+        db = await new Promise((res, rej) => { const r = indexedDB.open(name); r.onsuccess = () => res(r.result); r.onerror = () => rej(r.error); r.onblocked = () => rej(new Error("blocked")); });
+        if (!db.objectStoreNames.contains("users")) { db.close(); continue; }
+        const user = await new Promise((res) => { const tx = db.transaction("users", "readonly"); const r = tx.objectStore("users").get(key); r.onsuccess = () => res(r.result || null); r.onerror = () => res(null); });
+        db.close();
+        if (user && String(user.id) === key) {
+          return { id: key, username: user.username || "", firstName: user.first_name || "", lastName: user.last_name || "", phone: user.phone || "" };
+        }
+      } catch (e) { try { db && db.close(); } catch (_) {} }
+    }
+    return { id: key, username: "", firstName: "", lastName: "", phone: "" };
+  } catch (e) { return null; }
+})()`;
+
+function normalizeTelegramIdentity(raw) {
+  if (!raw || typeof raw !== "object") return null;
+  const s = (v) => (typeof v === "string" ? v.trim() : typeof v === "number" ? String(v) : "");
+  const id = s(raw.id);
+  if (!id) return null;
+  const username = s(raw.username).replace(/^@/, "");
+  // accepts the raw page shape (firstName/lastName) or an already-normalized one (displayName)
+  const displayName = s(raw.displayName) || [s(raw.firstName), s(raw.lastName)].filter(Boolean).join(" ");
+  return { id, username, displayName, phone: s(raw.phone) };
+}
+
+// Profile-store login record for this identity (keyed by name "telegram").
+function telegramLoginRecord(identity) {
+  const it = normalizeTelegramIdentity(identity);
+  if (!it) return null;
+  return {
+    url: "https://web.telegram.org",
+    name: "telegram",
+    username: it.username,
+    mobile: it.phone,
+    note: it.displayName,
+  };
+}
+
+// Reverse: identity view from a stored profile (for list rendering).
+function telegramIdentityFromProfile(profile) {
+  const logins = profile && Array.isArray(profile.logins) ? profile.logins : [];
+  const l = logins.find((x) => String((x && x.name) || "").toLowerCase() === "telegram");
+  if (!l) return null;
+  return { username: String(l.username || ""), displayName: String(l.note || ""), phone: String(l.mobile || "") };
+}
+
+module.exports = { isTelegramUrl, TELEGRAM_IDENTITY_SCRIPT, normalizeTelegramIdentity, telegramLoginRecord, telegramIdentityFromProfile };

package/src/tabbrowser/telegram-matrix.html

@@ -35,14 +35,36 @@
     .name { font-weight: 650; font-size: 14px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; min-width: 0; }
     .chip { flex: none; padding: 1px 6px; border-radius: 999px; background: var(--head); color: #b4b4bb; font: 11px ui-monospace, monospace; }
     .st { flex: none; color: var(--muted); font-size: 11px; white-space: nowrap; margin-left: auto; }
-    .line2 { display: flex; align-items: center; gap: 6px; margin-top: 5px; padding-left: 16px; font-size: 11px; color: var(--muted); min-width: 0; }
-    .line2 .val { min-width: 0; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; font: 11px ui-monospace, monospace; color: #b4b4bb; }
-    .line2 .val:hover { color: #fff; text-decoration: underline dotted; }
-    .line2 .pen { padding: 1px 5px; font-size: 12px; }
-    .line2 .edit { display: none; flex: 1; gap: 4px; min-width: 0; }
-    .line2.editing .edit { display: flex; }
-    .line2.editing .val, .line2.editing .pen, .line2.editing .lbl { display: none; }
-    input[data-role="proxy"] { flex: 1; min-width: 0; height: 26px; border: 1px solid var(--accent); border-radius: 6px; padding: 0 8px; background: #111113; color: var(--fg); font: 11.5px ui-monospace, monospace; outline: 0; }
+    .line2 { display: flex; align-items: center; gap: 8px; margin-top: 4px; padding-left: 16px; font-size: 11.5px; color: var(--muted); min-width: 0; }
+    .line2 .tg { flex: none; max-width: 55%; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; color: #b4b4bb; }
+    .line2 .tg b { color: var(--fg); font-weight: 600; }
+    .line2 .tg.none { color: #6b6b72; }
+    .line2 .note { flex: 1; min-width: 0; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; color: #9a9aa2; cursor: text; outline: 0; border-radius: 4px; padding: 0 4px; margin: 0 -4px; }
+    .line2 .note.empty { color: #55555c; font-style: italic; }
+    .line2 .note:hover { color: #fff; }
+    /* 编辑态就地变成可输入,尺寸/位置与只读态完全一致,不发生位移 */
+    .line2 .note.editing { color: var(--fg); font-style: normal; background: #111113; box-shadow: 0 0 0 1px var(--accent); text-overflow: clip; }
+    .line2 .ip { flex: none; max-width: 45%; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; padding: 0 6px; border-radius: 999px; background: var(--head); color: #b4b4bb; font: 11px ui-monospace, monospace; line-height: 16px; cursor: pointer; }
+    .line2 .ip.none { color: #6b6b72; font-family: inherit; }
+    .line2 .ip.busy { color: #f0b429; }
+    .line2 .ip.bad { color: #ff8a8a; }
+    .line2 .ip:hover { color: #fff; }
+    .cfg { display: none; margin: 8px 0 2px 16px; padding: 8px 10px; border: 1px solid var(--line); border-radius: 8px; background: var(--head); }
+    .row.cfg-open .cfg { display: block; }
+    .row.cfg-open .gear { color: var(--accent); }
+    .cfg .f { display: flex; align-items: center; gap: 6px; }
+    .cfg .f + .f { margin-top: 6px; }
+    .cfg label { flex: none; width: 34px; font-size: 11px; color: var(--muted); }
+    .cfg input { flex: 1; min-width: 0; height: 26px; border: 1px solid var(--line); border-radius: 6px; padding: 0 8px; background: #111113; color: var(--fg); font: 11.5px ui-monospace, monospace; outline: 0; }
+    .cfg input:focus { border-color: var(--accent); }
+    .cfg .hint { font-size: 11px; color: var(--muted); padding-left: 40px; }
+    .cfg .hint b { color: #b4b4bb; font-weight: 500; }
+    .cfg .danger { display: flex; align-items: center; gap: 6px; margin-top: 8px; padding-top: 8px; border-top: 1px solid var(--line); font-size: 11px; color: var(--muted); }
+    .cfg .danger .sp { flex: 1; }
+    .cfg .confirm { display: none; align-items: center; gap: 6px; margin-top: 8px; padding: 6px 8px; border-radius: 6px; background: rgba(255,92,92,.12); color: #ffb3b3; font-size: 11.5px; }
+    .cfg .confirm.on { display: flex; }
+    .cfg .confirm .sp { flex: 1; }
+    button.del { background: #b3261e; }
     .row-err { padding: 4px 0 0 16px; color: #ff8a8a; font-size: 11px; display: none; }
     .row-err.on { display: block; }
     #empty { display: none; padding: 40px 24px; color: var(--muted); text-align: center; line-height: 1.8; }
@@ -92,7 +114,7 @@
         <div>
           <h2>无法连接 Telegram</h2>
           <p id="err-detail"></p>
-          <div class="btns"><button id="err-retry">重试</button><button class="ghost" id="err-direct">改为直连并重试</button><button class="ghost" id="err-edit">改代理</button></div>
+          <div class="btns"><button id="err-retry">重试</button><button class="ghost" id="err-cfg">代理设置</button></div>
         </div>
       </div>
     </div>
@@ -120,6 +142,43 @@
     const stateOf = (idx) => cellState.get(Number(idx)) || {};
     const dotClass = (st) => st.loading ? 'loading' : st.failed ? 'failed' : (st.url ? 'ok' : '');
     const stateText = (st, opened) => st.loading ? '加载中…' : st.failed ? '连接失败' : st.url ? '已加载' : (opened ? '' : '未打开');
+    const fmtAgo = (iso) => { const t = Date.parse(iso || ''); if (!t) return ''; const m = Math.round((Date.now() - t) / 60000); return m < 1 ? '刚刚' : m < 60 ? `${m} 分钟前` : m < 1440 ? `${Math.round(m / 60)} 小时前` : `${Math.round(m / 1440)} 天前`; };
+    function renderIp(p, mode) {
+      const row = rows.get(p.accountIdx); if (!row) return;
+      const el = row.querySelector('.ip');
+      el.className = 'ip';
+      if (mode === 'busy') { el.classList.add('busy'); el.textContent = '测 IP…'; el.title = ''; return; }
+      if (mode && mode.error) { el.classList.add('bad'); el.textContent = 'IP 探测失败'; el.title = mode.error + '（点击重试）'; return; }
+      const info = p.ipInfo;
+      if (info && info.ip) {
+        el.textContent = info.area ? `${info.area} · ${info.ip}` : info.ip;
+        el.title = `出口 IP ${info.ip}${info.area ? '，' + info.area : ''}，${fmtAgo(info.probedAt) || '未知时间'}探测（点击重测）`;
+      } else { el.classList.add('none'); el.textContent = '测 IP'; el.title = '经该 Profile 的代理探测出口 IP / 地区'; }
+    }
+    async function probeIp(p) {
+      renderIp(p, 'busy');
+      try {
+        const r = await window.panelAPI.probeIp(p.accountIdx);
+        if (r && r.ipInfo) { p.ipInfo = r.ipInfo; renderIp(p); }
+        else renderIp(p, { error: (r && r.error) || '探测失败' });
+      } catch (e) { renderIp(p, { error: e.message || String(e) }); }
+    }
+    // 身份:优先用本次会话探到的(cellState.identity),否则用 profile 里存的(上次登录)。
+    const identityOf = (p) => stateOf(p.accountIdx).identity || p.telegram || null;
+    function renderIdentity(p) {
+      const row = rows.get(p.accountIdx); if (!row) return;
+      const el = row.querySelector('.tg');
+      const it = identityOf(p);
+      if (it && (it.username || it.displayName || it.phone)) {
+        el.classList.remove('none');
+        el.innerHTML = (it.username ? `<b>@${esc(it.username)}</b>` : '') + (it.displayName ? `${it.username ? ' · ' : ''}${esc(it.displayName)}` : '') + (!it.username && !it.displayName && it.phone ? `+${esc(it.phone)}` : '');
+        el.title = [it.username && `@${it.username}`, it.displayName, it.phone && `+${it.phone}`].filter(Boolean).join('  ');
+      } else {
+        el.classList.add('none');
+        el.textContent = openedProfiles.has(p.accountIdx) && stateOf(p.accountIdx).url ? '未登录' : '—';
+        el.title = '';
+      }
+    }
 
     function flash(text, ms = 2500) {
       statusEl.textContent = text; statusEl.dataset.sticky = '1';
@@ -143,8 +202,8 @@
     function describeError(p, st) {
       const e = st.error || {};
       const desc = e.description ? `<code>${esc(e.description)}</code>` : '';
-      if (p.proxy) return `代理 <code>${esc(p.proxy)}</code> 不可用或无法访问 Telegram。${desc}<br>请确认代理已启动，或改为直连 / 换一个代理。`;
-      return `当前为直连，网络无法访问 Telegram。${desc}<br>建议设置一个可用的代理。`;
+      if (p.proxy) return `代理 <code>${esc(p.proxy)}</code> 不可用或无法访问 Telegram。${desc}<br>点 ⚙ 检查或更换该 Profile 的代理，可用「测 IP」验证。`;
+      return `当前为直连，网络无法访问 Telegram。${desc}<br>点 ⚙ 为该 Profile 设置代理。`;
     }
 
     function renderPreviewState() {
@@ -169,43 +228,77 @@
       const row = document.createElement('div');
       row.className = 'row'; row.dataset.id = String(p.accountIdx); row.title = `persist:sandbox-${p.accountIdx}`;
       row.innerHTML = `
-        <div class="line1"><span class="dot"></span><span class="name">${esc(p.name)}</span><span class="chip">#${p.accountIdx}</span><span class="st"></span><button class="icon reload" title="重新加载">⟳</button></div>
-        <div class="line2"><span class="lbl">代理</span><span class="val" title="点击修改"></span><button class="icon pen" title="修改代理">✎</button>
-          <div class="edit"><input data-role="proxy" placeholder="留空 = 直连，例如 http://127.0.0.1:20001" spellcheck="false"><button class="sm save">保存</button><button class="sm ghost cancel">取消</button></div></div>
+        <div class="line1"><span class="dot"></span><span class="name">${esc(p.name)}</span><span class="chip">#${p.accountIdx}</span><span class="st"></span><button class="icon gear" title="代理设置">⚙</button><button class="icon reload" title="重新加载">⟳</button></div>
+        <div class="line2"><span class="tg none">—</span><span class="note" data-role="note" title="点击编辑备注，Enter 保存 / Esc 取消" spellcheck="false"></span><span class="ip none" title="经该 Profile 的代理探测出口 IP / 地区">测 IP</span></div>
+        <div class="cfg">
+          <div class="f"><label>代理</label><input data-role="proxy" placeholder="留空 = 直连，例如 http://127.0.0.1:20001" spellcheck="false"><button class="sm save">保存</button><button class="sm ghost test">测 IP</button></div>
+          <div class="hint">保存后已打开的会话会重新加载；<b>测 IP</b> 经该代理访问 IP 服务，结果显示在上方。</div>
+          <div class="danger"><span>删除此 Profile 会一并清除它的 Telegram 登录态和缓存。</span><span class="sp"></span><button class="sm ghost rm">删除</button></div>
+          <div class="confirm"><span>确认删除 <b>${esc(p.name)} #${p.accountIdx}</b>？不可恢复。</span><span class="sp"></span><button class="sm del rm-yes">确认删除</button><button class="sm ghost rm-no">取消</button></div>
+        </div>
         <div class="row-err"></div>`;
-      const line2 = row.querySelector('.line2');
-      const val = line2.querySelector('.val');
-      const input = line2.querySelector('[data-role="proxy"]');
       const errEl = row.querySelector('.row-err');
-      const showProxy = () => { val.textContent = p.proxy || '直连'; };
-      showProxy();
-      const startEdit = (e) => { e && e.stopPropagation(); line2.classList.add('editing'); input.value = p.proxy; input.focus(); input.select(); };
-      const stopEdit = (e) => { e && e.stopPropagation(); line2.classList.remove('editing'); errEl.classList.remove('on'); };
-      const save = async (value) => {
-        const btn = line2.querySelector('.save'); btn.disabled = true; errEl.classList.remove('on');
+      const noteEl = row.querySelector('.note');
+      const showNote = () => { noteEl.textContent = p.note || '添加备注'; noteEl.classList.toggle('empty', !p.note); };
+      showNote();
+      let editing = false;
+      const startEdit = (e) => {
+        e && e.stopPropagation();
+        if (editing) return;
+        editing = true;
+        noteEl.classList.add('editing'); noteEl.classList.remove('empty');
+        noteEl.textContent = p.note || '';
+        noteEl.contentEditable = 'plaintext-only';
+        noteEl.focus();
+        const range = document.createRange(); range.selectNodeContents(noteEl);
+        const sel = getSelection(); sel.removeAllRanges(); sel.addRange(range);
+      };
+      const stopEdit = () => { editing = false; noteEl.contentEditable = 'false'; noteEl.classList.remove('editing'); showNote(); };
+      const saveNote = async () => {
+        if (!editing) return;
+        const value = noteEl.textContent.replace(/\s+/g, ' ').trim().slice(0, 500);
+        stopEdit();
+        if (value === (p.note || '')) return;
         try {
-          const updated = await window.panelAPI.setProfileProxy(p.accountIdx, value);
-          p.proxy = updated.proxy; showProxy(); stopEdit();
-          // 代理只在会话加载时生效,所以已打开的必须重载。**没打开过的不要**在这里置
-          // loading:主进程没有对应的 cell,既不会创建视图也不会有 panelcells:state 回来,
-          // 行会永远卡在「加载中…」(实测 bug)。保持「未打开」,下次打开自然用新代理。
-          if (openedProfiles.has(p.accountIdx)) {
-            reloadProfile(p.accountIdx);
-            flash(updated.proxy ? `#${p.accountIdx} 代理已应用，重新加载中` : `#${p.accountIdx} 已切换直连，重新加载中`);
-          } else {
-            flash(updated.proxy ? `#${p.accountIdx} 代理已保存，打开时生效` : `#${p.accountIdx} 已保存为直连，打开时生效`);
-          }
+          const updated = await window.panelAPI.setProfileNote(p.accountIdx, value);
+          p.note = updated.note; showNote();
         } catch (e) { errEl.textContent = e.message || String(e); errEl.classList.add('on'); }
-        finally { btn.disabled = false; }
       };
+      noteEl.onclick = (e) => { e.stopPropagation(); startEdit(e); };
+      noteEl.onkeydown = (e) => { e.stopPropagation(); if (e.key === 'Enter') { e.preventDefault(); saveNote(); } if (e.key === 'Escape') { e.preventDefault(); stopEdit(); } };
+      noteEl.onblur = () => saveNote();
+      // 代理设置抽屉(⚙):不常用,默认收起,列表保持干净。
+      const proxyInput = row.querySelector('[data-role="proxy"]');
+      const saveBtn = row.querySelector('.cfg .save');
+      const toggleCfg = (e) => { e.stopPropagation(); const open = !row.classList.contains('cfg-open'); row.classList.toggle('cfg-open', open); if (open) { proxyInput.value = p.proxy || ''; proxyInput.focus(); } };
+      const saveProxy = async () => {
+        saveBtn.disabled = true; errEl.classList.remove('on');
+        try {
+          const updated = await window.panelAPI.setProfileProxy(p.accountIdx, proxyInput.value.trim());
+          p.proxy = updated.proxy; p.ipInfo = null; renderIp(p);
+          if (openedProfiles.has(p.accountIdx)) { reloadProfile(p.accountIdx); flash(`#${p.accountIdx} 代理已应用，重新加载中`); }
+          else flash(`#${p.accountIdx} 代理已保存，打开时生效`);
+          row.classList.remove('cfg-open');
+        } catch (e) { errEl.textContent = e.message || String(e); errEl.classList.add('on'); }
+        finally { saveBtn.disabled = false; }
+      };
+      row.querySelector('.gear').onclick = toggleCfg;
+      row.querySelector('.cfg').onclick = (e) => e.stopPropagation();
+      saveBtn.onclick = saveProxy;
+      proxyInput.onkeydown = (e) => { e.stopPropagation(); if (e.key === 'Enter') saveProxy(); if (e.key === 'Escape') row.classList.remove('cfg-open'); };
+      row.querySelector('.cfg .test').onclick = () => probeIp(p);
+      row.querySelector('.ip').onclick = (e) => { e.stopPropagation(); probeIp(p); };
+      const confirmEl = row.querySelector('.cfg .confirm');
+      row.querySelector('.rm').onclick = () => { confirmEl.classList.add('on'); row.querySelector('.rm-yes').focus(); };
+      row.querySelector('.rm-no').onclick = () => confirmEl.classList.remove('on');
+      row.querySelector('.rm-yes').onclick = async () => {
+        const btn = row.querySelector('.rm-yes'); btn.disabled = true;
+        try { await removeProfile(p); }
+        catch (e) { errEl.textContent = e.message || String(e); errEl.classList.add('on'); btn.disabled = false; }
+      };
+      row._openCfg = () => { if (!row.classList.contains('cfg-open')) toggleCfg(new Event('click')); row.scrollIntoView({ block: 'nearest' }); };
       row.onclick = () => selectProfile(p.accountIdx);
-      val.onclick = startEdit; line2.querySelector('.pen').onclick = startEdit;
-      line2.querySelector('.cancel').onclick = stopEdit;
-      line2.querySelector('.save').onclick = (e) => { e.stopPropagation(); save(input.value); };
-      input.onclick = (e) => e.stopPropagation();
-      input.onkeydown = (e) => { e.stopPropagation(); if (e.key === 'Enter') save(input.value); if (e.key === 'Escape') stopEdit(); };
       row.querySelector('.reload').onclick = (e) => { e.stopPropagation(); reloadProfile(p.accountIdx); };
-      row._save = save; row._startEdit = startEdit;
       return row;
     }
 
@@ -226,6 +319,8 @@
         if (!rows.has(p.accountIdx)) { const row = buildRow(p); rows.set(p.accountIdx, row); rowsEl.appendChild(row); }
         rows.get(p.accountIdx).classList.toggle('active', !!selected && selected.accountIdx === p.accountIdx);
         renderRowState(p.accountIdx);
+        renderIdentity(p);
+        renderIp(p);
       }
     }
 
@@ -250,8 +345,10 @@
       const next = { ...prev, loading: !!state.loading };
       if (state.url !== undefined) { next.url = failed ? '' : state.url; next.title = state.title || ''; }
       if (!state.loading) { next.failed = failed; next.error = state.error || (failed ? prev.error : null); }
+      if (state.identity) next.identity = state.identity;
       cellState.set(idx, next);
       renderRowState(idx);
+      { const p = profiles.find((x) => x.accountIdx === idx); if (p) renderIdentity(p); }
       if (selected && selected.accountIdx === idx) renderPreviewState();
     }
     async function pullStates({ adopt = false } = {}) {
@@ -277,6 +374,19 @@
       selectProfile(target);
     }
 
+    async function removeProfile(p) {
+      const idx = p.accountIdx;
+      await window.panelAPI.removeProfile(idx);
+      openedProfiles.delete(idx); cellState.delete(idx);
+      const row = rows.get(idx); if (row) row.remove(); rows.delete(idx);
+      profiles = profiles.filter((x) => x.accountIdx !== idx);
+      if (selected && selected.accountIdx === idx) {
+        const next = profiles[0] ? profiles[0].accountIdx : 0;
+        if (next) selectProfile(next); else { selected = null; localStorage.removeItem('telegram-matrix-profile'); selectedName.textContent = '未选择 Profile'; render(); renderPreviewState(); syncPreview(); }
+      } else render();
+      flash(`Profile #${idx} 已删除`);
+    }
+
     addButton.onclick = async () => {
       addButton.disabled = true; flash('正在创建…', 60000);
       try {
@@ -289,8 +399,7 @@
     };
     document.getElementById('reload').onclick = () => { if (selected) reloadProfile(selected.accountIdx); };
     document.getElementById('err-retry').onclick = () => { if (selected) reloadProfile(selected.accountIdx); };
-    document.getElementById('err-direct').onclick = () => { const row = selected && rows.get(selected.accountIdx); if (row) row._save(''); };
-    document.getElementById('err-edit').onclick = () => { const row = selected && rows.get(selected.accountIdx); if (row) { row.scrollIntoView({ block: 'nearest' }); row._startEdit(); } };
+    document.getElementById('err-cfg').onclick = () => { const row = selected && rows.get(selected.accountIdx); if (row) row._openCfg(); };
 
     new ResizeObserver(() => requestAnimationFrame(syncPreview)).observe(preview);
     window.addEventListener('resize', syncPreview);

package/test/profile-store-note.test.js

@@ -0,0 +1,27 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const path = require("node:path");
+const os = require("node:os");
+
+test("setNote persists a trimmed note on electron profiles", () => {
+  const home = fs.mkdtempSync(path.join(os.tmpdir(), "cicy-note-"));
+  const prevHome = process.env.HOME, prevUp = process.env.USERPROFILE;
+  process.env.HOME = home; process.env.USERPROFILE = home;
+  delete require.cache[require.resolve("../src/profiles/profile-store")];
+  try {
+    const store = require("../src/profiles/profile-store");
+    fs.mkdirSync(store.ELECTRON_DIR, { recursive: true });
+    const view = store.setNote("electron", 3, "  主号，别乱动  ");
+    assert.equal(view.note, "主号，别乱动");
+    assert.equal(store.getProfile("electron", 3).note, "主号，别乱动");
+    assert.equal(store.setNote("electron", 3, "").note, "");
+    assert.equal(store.removeProfile("electron", 3), true);
+    assert.equal(store.getProfile("electron", 3), null);
+    assert.equal(store.removeProfile("electron", 3), false);
+  } finally {
+    process.env.HOME = prevHome; if (prevUp === undefined) delete process.env.USERPROFILE; else process.env.USERPROFILE = prevUp;
+    delete require.cache[require.resolve("../src/profiles/profile-store")];
+    fs.rmSync(home, { recursive: true, force: true });
+  }
+});

package/test/telegram-identity.test.js

@@ -0,0 +1,41 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const vm = require("node:vm");
+const {
+  isTelegramUrl,
+  TELEGRAM_IDENTITY_SCRIPT,
+  normalizeTelegramIdentity,
+  telegramLoginRecord,
+  telegramIdentityFromProfile,
+} = require("../src/tabbrowser/telegram-identity");
+
+test("recognizes telegram web urls only", () => {
+  assert.equal(isTelegramUrl("https://web.telegram.org/k/"), true);
+  assert.equal(isTelegramUrl("https://web.telegram.org/a/#123"), true);
+  assert.equal(isTelegramUrl("https://example.com/web.telegram.org"), false);
+  assert.equal(isTelegramUrl("chrome-error://chromewebdata/"), false);
+});
+
+test("identity script is valid JS and returns null without storage", async () => {
+  new vm.Script(TELEGRAM_IDENTITY_SCRIPT); // syntax
+  const ctx = vm.createContext({ localStorage: { getItem: () => null }, indexedDB: {} });
+  assert.equal(await vm.runInContext(TELEGRAM_IDENTITY_SCRIPT, ctx), null);
+});
+
+test("identity script never leaks auth material", () => {
+  assert.doesNotMatch(TELEGRAM_IDENTITY_SCRIPT, /auth_key|server_salt|account\d/);
+});
+
+test("normalizes identity and maps to a profile login record", () => {
+  const it = normalizeTelegramIdentity({ id: 42, username: "@alice", firstName: " Alice ", lastName: "L", phone: "1234" });
+  assert.deepEqual(it, { id: "42", username: "alice", displayName: "Alice L", phone: "1234" });
+  assert.deepEqual(telegramLoginRecord(it), { url: "https://web.telegram.org", name: "telegram", username: "alice", mobile: "1234", note: "Alice L" });
+  assert.equal(normalizeTelegramIdentity(null), null);
+  assert.equal(normalizeTelegramIdentity({ username: "x" }), null);
+});
+
+test("reads identity back from a stored profile", () => {
+  const p = { logins: [{ name: "gmail", username: "a@b" }, { name: "Telegram", username: "alice", mobile: "1", note: "Alice" }] };
+  assert.deepEqual(telegramIdentityFromProfile(p), { username: "alice", displayName: "Alice", phone: "1" });
+  assert.equal(telegramIdentityFromProfile({ logins: [] }), null);
+});