cicy-desktop 2.1.280 → 2.1.285

package/src/tabbrowser/telegram-matrix.html

@@ -35,14 +35,36 @@
     .name { font-weight: 650; font-size: 14px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; min-width: 0; }
     .chip { flex: none; padding: 1px 6px; border-radius: 999px; background: var(--head); color: #b4b4bb; font: 11px ui-monospace, monospace; }
     .st { flex: none; color: var(--muted); font-size: 11px; white-space: nowrap; margin-left: auto; }
-    .line2 { display: flex; align-items: center; gap: 6px; margin-top: 5px; padding-left: 16px; font-size: 11px; color: var(--muted); min-width: 0; }
-    .line2 .val { min-width: 0; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; font: 11px ui-monospace, monospace; color: #b4b4bb; }
-    .line2 .val:hover { color: #fff; text-decoration: underline dotted; }
-    .line2 .pen { padding: 1px 5px; font-size: 12px; }
-    .line2 .edit { display: none; flex: 1; gap: 4px; min-width: 0; }
-    .line2.editing .edit { display: flex; }
-    .line2.editing .val, .line2.editing .pen, .line2.editing .lbl { display: none; }
-    input[data-role="proxy"] { flex: 1; min-width: 0; height: 26px; border: 1px solid var(--accent); border-radius: 6px; padding: 0 8px; background: #111113; color: var(--fg); font: 11.5px ui-monospace, monospace; outline: 0; }
+    .line2 { display: flex; align-items: center; gap: 8px; margin-top: 4px; padding-left: 16px; font-size: 11.5px; color: var(--muted); min-width: 0; }
+    .line2 .tg { flex: none; max-width: 55%; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; color: #b4b4bb; }
+    .line2 .tg b { color: var(--fg); font-weight: 600; }
+    .line2 .tg.none { color: #6b6b72; }
+    .line2 .note { flex: 1; min-width: 0; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; color: #9a9aa2; cursor: text; outline: 0; border-radius: 4px; padding: 0 4px; margin: 0 -4px; }
+    .line2 .note.empty { color: #55555c; font-style: italic; }
+    .line2 .note:hover { color: #fff; }
+    /* 编辑态就地变成可输入,尺寸/位置与只读态完全一致,不发生位移 */
+    .line2 .note.editing { color: var(--fg); font-style: normal; background: #111113; box-shadow: 0 0 0 1px var(--accent); text-overflow: clip; }
+    .line2 .ip { flex: none; max-width: 45%; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; padding: 0 6px; border-radius: 999px; background: var(--head); color: #b4b4bb; font: 11px ui-monospace, monospace; line-height: 16px; cursor: pointer; }
+    .line2 .ip.none { color: #6b6b72; font-family: inherit; }
+    .line2 .ip.busy { color: #f0b429; }
+    .line2 .ip.bad { color: #ff8a8a; }
+    .line2 .ip:hover { color: #fff; }
+    .cfg { display: none; margin: 8px 0 2px 16px; padding: 8px 10px; border: 1px solid var(--line); border-radius: 8px; background: var(--head); }
+    .row.cfg-open .cfg { display: block; }
+    .row.cfg-open .gear { color: var(--accent); }
+    .cfg .f { display: flex; align-items: center; gap: 6px; }
+    .cfg .f + .f { margin-top: 6px; }
+    .cfg label { flex: none; width: 34px; font-size: 11px; color: var(--muted); }
+    .cfg input { flex: 1; min-width: 0; height: 26px; border: 1px solid var(--line); border-radius: 6px; padding: 0 8px; background: #111113; color: var(--fg); font: 11.5px ui-monospace, monospace; outline: 0; }
+    .cfg input:focus { border-color: var(--accent); }
+    .cfg .hint { font-size: 11px; color: var(--muted); padding-left: 40px; }
+    .cfg .hint b { color: #b4b4bb; font-weight: 500; }
+    .cfg .danger { display: flex; align-items: center; gap: 6px; margin-top: 8px; padding-top: 8px; border-top: 1px solid var(--line); font-size: 11px; color: var(--muted); }
+    .cfg .danger .sp { flex: 1; }
+    .cfg .confirm { display: none; align-items: center; gap: 6px; margin-top: 8px; padding: 6px 8px; border-radius: 6px; background: rgba(255,92,92,.12); color: #ffb3b3; font-size: 11.5px; }
+    .cfg .confirm.on { display: flex; }
+    .cfg .confirm .sp { flex: 1; }
+    button.del { background: #b3261e; }
     .row-err { padding: 4px 0 0 16px; color: #ff8a8a; font-size: 11px; display: none; }
     .row-err.on { display: block; }
     #empty { display: none; padding: 40px 24px; color: var(--muted); text-align: center; line-height: 1.8; }
@@ -92,7 +114,7 @@
         <div>
           <h2>无法连接 Telegram</h2>
           <p id="err-detail"></p>
-          <div class="btns"><button id="err-retry">重试</button><button class="ghost" id="err-direct">改为直连并重试</button><button class="ghost" id="err-edit">改代理</button></div>
+          <div class="btns"><button id="err-retry">重试</button><button class="ghost" id="err-cfg">代理设置</button></div>
         </div>
       </div>
     </div>
@@ -120,6 +142,43 @@
     const stateOf = (idx) => cellState.get(Number(idx)) || {};
     const dotClass = (st) => st.loading ? 'loading' : st.failed ? 'failed' : (st.url ? 'ok' : '');
     const stateText = (st, opened) => st.loading ? '加载中…' : st.failed ? '连接失败' : st.url ? '已加载' : (opened ? '' : '未打开');
+    const fmtAgo = (iso) => { const t = Date.parse(iso || ''); if (!t) return ''; const m = Math.round((Date.now() - t) / 60000); return m < 1 ? '刚刚' : m < 60 ? `${m} 分钟前` : m < 1440 ? `${Math.round(m / 60)} 小时前` : `${Math.round(m / 1440)} 天前`; };
+    function renderIp(p, mode) {
+      const row = rows.get(p.accountIdx); if (!row) return;
+      const el = row.querySelector('.ip');
+      el.className = 'ip';
+      if (mode === 'busy') { el.classList.add('busy'); el.textContent = '测 IP…'; el.title = ''; return; }
+      if (mode && mode.error) { el.classList.add('bad'); el.textContent = 'IP 探测失败'; el.title = mode.error + '（点击重试）'; return; }
+      const info = p.ipInfo;
+      if (info && info.ip) {
+        el.textContent = info.area ? `${info.area} · ${info.ip}` : info.ip;
+        el.title = `出口 IP ${info.ip}${info.area ? '，' + info.area : ''}，${fmtAgo(info.probedAt) || '未知时间'}探测（点击重测）`;
+      } else { el.classList.add('none'); el.textContent = '测 IP'; el.title = '经该 Profile 的代理探测出口 IP / 地区'; }
+    }
+    async function probeIp(p) {
+      renderIp(p, 'busy');
+      try {
+        const r = await window.panelAPI.probeIp(p.accountIdx);
+        if (r && r.ipInfo) { p.ipInfo = r.ipInfo; renderIp(p); }
+        else renderIp(p, { error: (r && r.error) || '探测失败' });
+      } catch (e) { renderIp(p, { error: e.message || String(e) }); }
+    }
+    // 身份:优先用本次会话探到的(cellState.identity),否则用 profile 里存的(上次登录)。
+    const identityOf = (p) => stateOf(p.accountIdx).identity || p.telegram || null;
+    function renderIdentity(p) {
+      const row = rows.get(p.accountIdx); if (!row) return;
+      const el = row.querySelector('.tg');
+      const it = identityOf(p);
+      if (it && (it.username || it.displayName || it.phone)) {
+        el.classList.remove('none');
+        el.innerHTML = (it.username ? `<b>@${esc(it.username)}</b>` : '') + (it.displayName ? `${it.username ? ' · ' : ''}${esc(it.displayName)}` : '') + (!it.username && !it.displayName && it.phone ? `+${esc(it.phone)}` : '');
+        el.title = [it.username && `@${it.username}`, it.displayName, it.phone && `+${it.phone}`].filter(Boolean).join('  ');
+      } else {
+        el.classList.add('none');
+        el.textContent = openedProfiles.has(p.accountIdx) && stateOf(p.accountIdx).url ? '未登录' : '—';
+        el.title = '';
+      }
+    }
 
     function flash(text, ms = 2500) {
       statusEl.textContent = text; statusEl.dataset.sticky = '1';
@@ -143,8 +202,8 @@
     function describeError(p, st) {
       const e = st.error || {};
       const desc = e.description ? `<code>${esc(e.description)}</code>` : '';
-      if (p.proxy) return `代理 <code>${esc(p.proxy)}</code> 不可用或无法访问 Telegram。${desc}<br>请确认代理已启动，或改为直连 / 换一个代理。`;
-      return `当前为直连，网络无法访问 Telegram。${desc}<br>建议设置一个可用的代理。`;
+      if (p.proxy) return `代理 <code>${esc(p.proxy)}</code> 不可用或无法访问 Telegram。${desc}<br>点 ⚙ 检查或更换该 Profile 的代理，可用「测 IP」验证。`;
+      return `当前为直连，网络无法访问 Telegram。${desc}<br>点 ⚙ 为该 Profile 设置代理。`;
     }
 
     function renderPreviewState() {
@@ -169,43 +228,77 @@
       const row = document.createElement('div');
       row.className = 'row'; row.dataset.id = String(p.accountIdx); row.title = `persist:sandbox-${p.accountIdx}`;
       row.innerHTML = `
-        <div class="line1"><span class="dot"></span><span class="name">${esc(p.name)}</span><span class="chip">#${p.accountIdx}</span><span class="st"></span><button class="icon reload" title="重新加载">⟳</button></div>
-        <div class="line2"><span class="lbl">代理</span><span class="val" title="点击修改"></span><button class="icon pen" title="修改代理">✎</button>
-          <div class="edit"><input data-role="proxy" placeholder="留空 = 直连，例如 http://127.0.0.1:20001" spellcheck="false"><button class="sm save">保存</button><button class="sm ghost cancel">取消</button></div></div>
+        <div class="line1"><span class="dot"></span><span class="name">${esc(p.name)}</span><span class="chip">#${p.accountIdx}</span><span class="st"></span><button class="icon gear" title="代理设置">⚙</button><button class="icon reload" title="重新加载">⟳</button></div>
+        <div class="line2"><span class="tg none">—</span><span class="note" data-role="note" title="点击编辑备注，Enter 保存 / Esc 取消" spellcheck="false"></span><span class="ip none" title="经该 Profile 的代理探测出口 IP / 地区">测 IP</span></div>
+        <div class="cfg">
+          <div class="f"><label>代理</label><input data-role="proxy" placeholder="留空 = 直连，例如 http://127.0.0.1:20001" spellcheck="false"><button class="sm save">保存</button><button class="sm ghost test">测 IP</button></div>
+          <div class="hint">保存后已打开的会话会重新加载；<b>测 IP</b> 经该代理访问 IP 服务，结果显示在上方。</div>
+          <div class="danger"><span>删除此 Profile 会一并清除它的 Telegram 登录态和缓存。</span><span class="sp"></span><button class="sm ghost rm">删除</button></div>
+          <div class="confirm"><span>确认删除 <b>${esc(p.name)} #${p.accountIdx}</b>？不可恢复。</span><span class="sp"></span><button class="sm del rm-yes">确认删除</button><button class="sm ghost rm-no">取消</button></div>
+        </div>
         <div class="row-err"></div>`;
-      const line2 = row.querySelector('.line2');
-      const val = line2.querySelector('.val');
-      const input = line2.querySelector('[data-role="proxy"]');
       const errEl = row.querySelector('.row-err');
-      const showProxy = () => { val.textContent = p.proxy || '直连'; };
-      showProxy();
-      const startEdit = (e) => { e && e.stopPropagation(); line2.classList.add('editing'); input.value = p.proxy; input.focus(); input.select(); };
-      const stopEdit = (e) => { e && e.stopPropagation(); line2.classList.remove('editing'); errEl.classList.remove('on'); };
-      const save = async (value) => {
-        const btn = line2.querySelector('.save'); btn.disabled = true; errEl.classList.remove('on');
+      const noteEl = row.querySelector('.note');
+      const showNote = () => { noteEl.textContent = p.note || '添加备注'; noteEl.classList.toggle('empty', !p.note); };
+      showNote();
+      let editing = false;
+      const startEdit = (e) => {
+        e && e.stopPropagation();
+        if (editing) return;
+        editing = true;
+        noteEl.classList.add('editing'); noteEl.classList.remove('empty');
+        noteEl.textContent = p.note || '';
+        noteEl.contentEditable = 'plaintext-only';
+        noteEl.focus();
+        const range = document.createRange(); range.selectNodeContents(noteEl);
+        const sel = getSelection(); sel.removeAllRanges(); sel.addRange(range);
+      };
+      const stopEdit = () => { editing = false; noteEl.contentEditable = 'false'; noteEl.classList.remove('editing'); showNote(); };
+      const saveNote = async () => {
+        if (!editing) return;
+        const value = noteEl.textContent.replace(/\s+/g, ' ').trim().slice(0, 500);
+        stopEdit();
+        if (value === (p.note || '')) return;
         try {
-          const updated = await window.panelAPI.setProfileProxy(p.accountIdx, value);
-          p.proxy = updated.proxy; showProxy(); stopEdit();
-          // 代理只在会话加载时生效,所以已打开的必须重载。**没打开过的不要**在这里置
-          // loading:主进程没有对应的 cell,既不会创建视图也不会有 panelcells:state 回来,
-          // 行会永远卡在「加载中…」(实测 bug)。保持「未打开」,下次打开自然用新代理。
-          if (openedProfiles.has(p.accountIdx)) {
-            reloadProfile(p.accountIdx);
-            flash(updated.proxy ? `#${p.accountIdx} 代理已应用，重新加载中` : `#${p.accountIdx} 已切换直连，重新加载中`);
-          } else {
-            flash(updated.proxy ? `#${p.accountIdx} 代理已保存，打开时生效` : `#${p.accountIdx} 已保存为直连，打开时生效`);
-          }
+          const updated = await window.panelAPI.setProfileNote(p.accountIdx, value);
+          p.note = updated.note; showNote();
         } catch (e) { errEl.textContent = e.message || String(e); errEl.classList.add('on'); }
-        finally { btn.disabled = false; }
       };
+      noteEl.onclick = (e) => { e.stopPropagation(); startEdit(e); };
+      noteEl.onkeydown = (e) => { e.stopPropagation(); if (e.key === 'Enter') { e.preventDefault(); saveNote(); } if (e.key === 'Escape') { e.preventDefault(); stopEdit(); } };
+      noteEl.onblur = () => saveNote();
+      // 代理设置抽屉(⚙):不常用,默认收起,列表保持干净。
+      const proxyInput = row.querySelector('[data-role="proxy"]');
+      const saveBtn = row.querySelector('.cfg .save');
+      const toggleCfg = (e) => { e.stopPropagation(); const open = !row.classList.contains('cfg-open'); row.classList.toggle('cfg-open', open); if (open) { proxyInput.value = p.proxy || ''; proxyInput.focus(); } };
+      const saveProxy = async () => {
+        saveBtn.disabled = true; errEl.classList.remove('on');
+        try {
+          const updated = await window.panelAPI.setProfileProxy(p.accountIdx, proxyInput.value.trim());
+          p.proxy = updated.proxy; p.ipInfo = null; renderIp(p);
+          if (openedProfiles.has(p.accountIdx)) { reloadProfile(p.accountIdx); flash(`#${p.accountIdx} 代理已应用，重新加载中`); }
+          else flash(`#${p.accountIdx} 代理已保存，打开时生效`);
+          row.classList.remove('cfg-open');
+        } catch (e) { errEl.textContent = e.message || String(e); errEl.classList.add('on'); }
+        finally { saveBtn.disabled = false; }
+      };
+      row.querySelector('.gear').onclick = toggleCfg;
+      row.querySelector('.cfg').onclick = (e) => e.stopPropagation();
+      saveBtn.onclick = saveProxy;
+      proxyInput.onkeydown = (e) => { e.stopPropagation(); if (e.key === 'Enter') saveProxy(); if (e.key === 'Escape') row.classList.remove('cfg-open'); };
+      row.querySelector('.cfg .test').onclick = () => probeIp(p);
+      row.querySelector('.ip').onclick = (e) => { e.stopPropagation(); probeIp(p); };
+      const confirmEl = row.querySelector('.cfg .confirm');
+      row.querySelector('.rm').onclick = () => { confirmEl.classList.add('on'); row.querySelector('.rm-yes').focus(); };
+      row.querySelector('.rm-no').onclick = () => confirmEl.classList.remove('on');
+      row.querySelector('.rm-yes').onclick = async () => {
+        const btn = row.querySelector('.rm-yes'); btn.disabled = true;
+        try { await removeProfile(p); }
+        catch (e) { errEl.textContent = e.message || String(e); errEl.classList.add('on'); btn.disabled = false; }
+      };
+      row._openCfg = () => { if (!row.classList.contains('cfg-open')) toggleCfg(new Event('click')); row.scrollIntoView({ block: 'nearest' }); };
       row.onclick = () => selectProfile(p.accountIdx);
-      val.onclick = startEdit; line2.querySelector('.pen').onclick = startEdit;
-      line2.querySelector('.cancel').onclick = stopEdit;
-      line2.querySelector('.save').onclick = (e) => { e.stopPropagation(); save(input.value); };
-      input.onclick = (e) => e.stopPropagation();
-      input.onkeydown = (e) => { e.stopPropagation(); if (e.key === 'Enter') save(input.value); if (e.key === 'Escape') stopEdit(); };
       row.querySelector('.reload').onclick = (e) => { e.stopPropagation(); reloadProfile(p.accountIdx); };
-      row._save = save; row._startEdit = startEdit;
       return row;
     }
 
@@ -226,6 +319,8 @@
         if (!rows.has(p.accountIdx)) { const row = buildRow(p); rows.set(p.accountIdx, row); rowsEl.appendChild(row); }
         rows.get(p.accountIdx).classList.toggle('active', !!selected && selected.accountIdx === p.accountIdx);
         renderRowState(p.accountIdx);
+        renderIdentity(p);
+        renderIp(p);
       }
     }
 
@@ -250,8 +345,10 @@
       const next = { ...prev, loading: !!state.loading };
       if (state.url !== undefined) { next.url = failed ? '' : state.url; next.title = state.title || ''; }
       if (!state.loading) { next.failed = failed; next.error = state.error || (failed ? prev.error : null); }
+      if (state.identity) next.identity = state.identity;
       cellState.set(idx, next);
       renderRowState(idx);
+      { const p = profiles.find((x) => x.accountIdx === idx); if (p) renderIdentity(p); }
       if (selected && selected.accountIdx === idx) renderPreviewState();
     }
     async function pullStates({ adopt = false } = {}) {
@@ -277,6 +374,19 @@
       selectProfile(target);
     }
 
+    async function removeProfile(p) {
+      const idx = p.accountIdx;
+      await window.panelAPI.removeProfile(idx);
+      openedProfiles.delete(idx); cellState.delete(idx);
+      const row = rows.get(idx); if (row) row.remove(); rows.delete(idx);
+      profiles = profiles.filter((x) => x.accountIdx !== idx);
+      if (selected && selected.accountIdx === idx) {
+        const next = profiles[0] ? profiles[0].accountIdx : 0;
+        if (next) selectProfile(next); else { selected = null; localStorage.removeItem('telegram-matrix-profile'); selectedName.textContent = '未选择 Profile'; render(); renderPreviewState(); syncPreview(); }
+      } else render();
+      flash(`Profile #${idx} 已删除`);
+    }
+
     addButton.onclick = async () => {
       addButton.disabled = true; flash('正在创建…', 60000);
       try {
@@ -289,8 +399,7 @@
     };
     document.getElementById('reload').onclick = () => { if (selected) reloadProfile(selected.accountIdx); };
     document.getElementById('err-retry').onclick = () => { if (selected) reloadProfile(selected.accountIdx); };
-    document.getElementById('err-direct').onclick = () => { const row = selected && rows.get(selected.accountIdx); if (row) row._save(''); };
-    document.getElementById('err-edit').onclick = () => { const row = selected && rows.get(selected.accountIdx); if (row) { row.scrollIntoView({ block: 'nearest' }); row._startEdit(); } };
+    document.getElementById('err-cfg').onclick = () => { const row = selected && rows.get(selected.accountIdx); if (row) row._openCfg(); };
 
     new ResizeObserver(() => requestAnimationFrame(syncPreview)).observe(preview);
     window.addEventListener('resize', syncPreview);

package/src/utils/global-json.js

@@ -9,6 +9,10 @@ function sleep(ms) {
 }
 
 function withFileLock(lockPath, fn, { timeoutMs = 5000, retryDelayMs = 50 } = {}) {
+  // The lock is a directory next to the target file; on a fresh machine the
+  // parent (~/cicy-ai) does not exist yet and mkdir(lock) fails with ENOENT,
+  // which used to make every first-run write (api_token, terms, deviceInfo) fail.
+  try { fs.mkdirSync(path.dirname(lockPath), { recursive: true }); } catch (_) {}
   const startedAt = Date.now();
   while (true) {
     try {

package/src/utils/rpc-guard.js

@@ -58,6 +58,10 @@ async function ensureRpcGrant(event, toolName, args) {
   if (!wc || wc.isDestroyed()) return false;
   const origin = originOf(wc);
   if (_grants.get(wc.id) === origin) return true; // already allowed for this page
+  let host = ""; try { host = new URL(wc.getURL()).hostname; } catch {}
+  let store = null; try { store = require("../profiles/trusted-origins-store"); } catch {}
+  if (store && host && store.isDangerousAllowed(host)) return true; // 白名单站点 + 用户选过「始终允许」
+  const canAlways = !!(store && host && store.listAll().includes(host));
 
   const win = BrowserWindow.fromWebContents(wc) || BrowserWindow.getFocusedWindow() || null;
   const detail = [`来源: ${origin}`, `操作: ${toolName}`];
@@ -70,7 +74,7 @@ async function ensureRpcGrant(event, toolName, args) {
     choice = await dialog.showMessageBox(win, {
       type: "warning",
       noLink: true,
-      buttons: ["拒绝", "允许一次", "本页面内允许"],
+      buttons: canAlways ? ["拒绝", "允许一次", "本页面内允许", "此站点始终允许（不再询问）"] : ["拒绝", "允许一次", "本页面内允许"],
       defaultId: 0,
       cancelId: 0,
       title: "敏感操作请求",
@@ -80,6 +84,12 @@ async function ensureRpcGrant(event, toolName, args) {
   } catch { return false; }
 
   const response = choice && choice.response;
+  if (response === 3 && canAlways) { // persistent: allowlisted site, never ask again for dangerous tools
+    try { store.allowDangerous(host); } catch {}
+    _grants.set(wc.id, origin);
+    audit({ kind: "auth", gate: "dangerous-tool", origin, tool: toolName, decision: "always-allow", temporary: false, args: pv });
+    return true;
+  }
   if (response === 2) { // remember for this page
     _grants.set(wc.id, origin);
     if (!wc.__rpcGuardWired) {
@@ -104,7 +114,12 @@ async function ensureRpcGrant(event, toolName, args) {
 // trusted-origins allowlist (so it's never asked again). This replaces the old
 // "no bridge unless pre-trusted" behaviour with explicit, on-demand consent.
 const _sessionOrigins = new Set(); // origin -> "本次允许" for this process lifetime
-const _deniedOrigins = new Set();  // origin -> "拒绝" — sticky so a page can't spam modals
+// origin -> deny timestamp. A deny is sticky only for DENY_COOLDOWN_MS so a page
+// can't spam modals, but a mistaken "拒绝" (or a modal that timed out unattended)
+// no longer locks the origin out for the whole process lifetime — the user gets
+// asked again after the cooldown instead of having to find the settings page.
+const DENY_COOLDOWN_MS = 60 * 1000;
+const _deniedOrigins = new Map();
 const _pendingByOrigin = new Map(); // origin -> in-flight modal promise (dedup races)
 
 // Synchronous verdict for an origin WITHOUT prompting: "allow" | "deny" | "unknown".
@@ -119,7 +134,9 @@ function originDecision(event) {
   if (isTrustedUrl && isTrustedUrl(url)) return "allow"; // on the allowlist
   const origin = originOf(wc);
   if (_sessionOrigins.has(origin)) return "allow"; // "本次允许" earlier
-  if (_deniedOrigins.has(origin)) return "deny";   // blocked — settings = escape hatch
+  const deniedAt = _deniedOrigins.get(origin);
+  if (deniedAt && Date.now() - deniedAt < DENY_COOLDOWN_MS) return "deny"; // recently refused
+  if (deniedAt) _deniedOrigins.delete(origin);       // cooldown over → ask again
   return "unknown";
 }
 
@@ -165,15 +182,29 @@ function startOriginModal(event) {
       return true;
     }
     if (r === 2 && host) { // 加入白名单（持久）— trusted-origins-store.add() logs the allowlist change
-      try {
-        const res = require("../profiles/trusted-origins-store").add(host);
-        if (!res || res.ok === false) return false;
+      let res = null, err = "";
+      try { res = require("../profiles/trusted-origins-store").add(host); } catch (e) { err = e && e.message; }
+      if (res && res.ok !== false) {
         if (refreshTrustedOrigins) refreshTrustedOrigins();
         _sessionOrigins.add(origin);
         return true;
-      } catch { return false; }
+      }
+      // The user explicitly chose to trust the site; if persisting the allowlist
+      // failed, honour the intent for this run and SAY why — silently returning
+      // false here made the modal reappear on every call with no explanation.
+      _sessionOrigins.add(origin);
+      audit({ kind: "auth", gate: "origin", origin, decision: "session-allow", temporary: true, error: `allowlist-add-failed: ${(res && res.error) || err || "unknown"}` });
+      try {
+        dialog.showMessageBox(win, {
+          type: "error", noLink: true, buttons: ["知道了"],
+          title: "加入白名单失败",
+          message: `无法把 ${host} 加入受信任站点`,
+          detail: `${(res && res.error) || err || "未知错误"}\n\n本次已允许该站点；下次启动会再次询问。你也可以在 头像 → 受信任站点 里手动添加。`,
+        }).catch(() => {});
+      } catch {}
+      return true;
     }
-    _deniedOrigins.add(origin); // 拒绝 / 关闭 — sticky for the session
+    _deniedOrigins.set(origin, Date.now()); // 拒绝 / 关闭 — sticky for DENY_COOLDOWN_MS
     audit({ kind: "auth", gate: "origin", origin, decision: "deny", temporary: true });
     return false;
   })();
@@ -190,4 +221,4 @@ async function ensureOriginAuthorized(event) {
   return await startOriginModal(event);
 }
 
-module.exports = { DANGEROUS_TOOLS, isDangerousTool, ensureRpcGrant, ensureOriginAuthorized, originDecision, startOriginModal };
+module.exports = { DENY_COOLDOWN_MS, DANGEROUS_TOOLS, isDangerousTool, ensureRpcGrant, ensureOriginAuthorized, originDecision, startOriginModal };

package/test/docker-preflight-and-always-allow.test.js

@@ -0,0 +1,53 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+
+const read = (p) => fs.readFileSync(path.join(__dirname, "..", p), "utf8");
+
+test("ensureWsl explains a disabled-virtualization host in the log and the card", () => {
+  const src = read("src/sidecar/docker.js");
+  assert.match(src, /async function virtualizationStatus\(\)/);
+  const ensure = src.slice(src.indexOf("async function ensureWsl"), src.indexOf("async function bootstrap"));
+  assert.match(ensure, /const virt = await virtualizationStatus\(\);/);
+  assert.match(ensure, /reason: "virtualization_disabled"/);
+  assert.match(ensure, /log\.error\(`\[bootstrap\] ✗ ensure-wsl reason=virtualization_disabled/);
+  assert.match(ensure, /BIOS/);
+  assert.match(ensure, /reason: "wsl_enable_failed", message/);
+  assert.match(read("src/sidecar/wsl-docker.js"), /const reason = w\.reason \|\| "wsl_enable_failed"; fail\(reason, w\.message\)/);
+  const ipc = read("src/backends/sidecar-ipc.js");
+  assert.match(ipc, /lastError: \(!s\.running && _lastBootstrapError\)/);
+  assert.match(ipc, /_lastBootstrapError = \{ reason: result\.reason \|\| result\.error/);
+});
+
+test("trusted-origins: persistent dangerous-ops allow only for allowlisted hosts", () => {
+  const home = fs.mkdtempSync(path.join(os.tmpdir(), "cicy-trust-"));
+  const prevHome = process.env.HOME, prevUp = process.env.USERPROFILE;
+  process.env.HOME = home; process.env.USERPROFILE = home;
+  delete require.cache[require.resolve("../src/profiles/trusted-origins-store")];
+  try {
+    const store = require("../src/profiles/trusted-origins-store");
+    assert.equal(store.allowDangerous("xs_master.cicy-ai.com").ok, false); // not allowlisted yet
+    assert.equal(store.allowDangerous("127.0.0.1").ok, true);               // built-in host works too
+    assert.equal(store.isDangerousAllowed("127.0.0.1"), true);
+    assert.equal(store.add("xs_master.cicy-ai.com").ok, true);
+    assert.equal(store.allowDangerous("https://xs_master.cicy-ai.com").ok, true);
+    assert.equal(store.isDangerousAllowed("xs_master.cicy-ai.com"), true);
+    assert.equal(store.add("other.example.com").ok, true);              // adding another host keeps the flag
+    assert.equal(store.isDangerousAllowed("xs_master.cicy-ai.com"), true);
+    store.remove("xs_master.cicy-ai.com");                                // removal revokes it
+    assert.equal(store.isDangerousAllowed("xs_master.cicy-ai.com"), false);
+  } finally {
+    process.env.HOME = prevHome; if (prevUp === undefined) delete process.env.USERPROFILE; else process.env.USERPROFILE = prevUp;
+    delete require.cache[require.resolve("../src/profiles/trusted-origins-store")];
+    fs.rmSync(home, { recursive: true, force: true });
+  }
+});
+
+test("rpc-guard offers a persistent 'always allow' only for allowlisted origins", () => {
+  const src = read("src/utils/rpc-guard.js");
+  assert.match(src, /store\.isDangerousAllowed\(host\)\) return true/);
+  assert.match(src, /canAlways \? \["拒绝", "允许一次", "本页面内允许", "此站点始终允许（不再询问）"\]/);
+  assert.match(src, /response === 3 && canAlways/);
+});

package/test/global-json-fresh-dir.test.js

@@ -0,0 +1,17 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+const { updateGlobalConfig, readGlobalConfig } = require("../src/utils/global-json");
+
+test("updateGlobalConfig works when ~/cicy-ai does not exist yet (fresh machine)", () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "cicy-fresh-"));
+  const file = path.join(root, "cicy-ai", "global.json"); // parent dir missing on purpose
+  try {
+    const next = updateGlobalConfig(file, (c) => ({ ...c, api_token: "cicy_test" }));
+    assert.equal(next.api_token, "cicy_test");
+    assert.equal(readGlobalConfig(file).api_token, "cicy_test");
+    assert.equal(fs.existsSync(`${file}.lock`), false);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});

package/test/local-teams-docker-token.test.js

@@ -0,0 +1,18 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const path = require("node:path");
+
+// Static guard: openTeam must NOT use the host global.json token for the
+// Windows Docker :8008 team — that token belongs to the container's own volume.
+test("openTeam reads the container token for the Windows Docker :8008 team, never the host global.json", () => {
+  const src = fs.readFileSync(path.join(__dirname, "..", "src", "backends", "local-teams.js"), "utf8");
+  const open = src.slice(src.indexOf("async function openTeam"), src.indexOf("async function openTeam") + 2000);
+  // win32 + local + (is_docker | docker port) → container token
+  assert.match(open, /const isWinDockerTeam = process\.platform === "win32" && isLocalUrl/);
+  assert.match(open, /readContainerToken\(localPort\)/);
+  // when it's the win docker team, the host global.json fallback must be gated OUT
+  assert.match(open, /if \(isWinDockerTeam\)[^]*?\} else if \(isLocalUrl\) \{\s*token = readGlobal\(\)\?\.api_token/);
+  // and a missing container token refuses to open (no silent host-token page)
+  assert.match(open, /container_token_unavailable/);
+});

package/test/profile-store-note.test.js

@@ -0,0 +1,27 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const path = require("node:path");
+const os = require("node:os");
+
+test("setNote persists a trimmed note on electron profiles", () => {
+  const home = fs.mkdtempSync(path.join(os.tmpdir(), "cicy-note-"));
+  const prevHome = process.env.HOME, prevUp = process.env.USERPROFILE;
+  process.env.HOME = home; process.env.USERPROFILE = home;
+  delete require.cache[require.resolve("../src/profiles/profile-store")];
+  try {
+    const store = require("../src/profiles/profile-store");
+    fs.mkdirSync(store.ELECTRON_DIR, { recursive: true });
+    const view = store.setNote("electron", 3, "  主号，别乱动  ");
+    assert.equal(view.note, "主号，别乱动");
+    assert.equal(store.getProfile("electron", 3).note, "主号，别乱动");
+    assert.equal(store.setNote("electron", 3, "").note, "");
+    assert.equal(store.removeProfile("electron", 3), true);
+    assert.equal(store.getProfile("electron", 3), null);
+    assert.equal(store.removeProfile("electron", 3), false);
+  } finally {
+    process.env.HOME = prevHome; if (prevUp === undefined) delete process.env.USERPROFILE; else process.env.USERPROFILE = prevUp;
+    delete require.cache[require.resolve("../src/profiles/profile-store")];
+    fs.rmSync(home, { recursive: true, force: true });
+  }
+});

package/test/rpc-guard-deny-cooldown.test.js

@@ -0,0 +1,18 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const path = require("node:path");
+
+// Static checks: a deny must expire (cooldown) and a failed allowlist add must
+// still honour the user's "trust" choice for the session and explain the error.
+test("origin deny is a cooldown, not process-lifetime; failed allowlist add is explained", () => {
+  const src = fs.readFileSync(path.join(__dirname, "..", "src", "utils", "rpc-guard.js"), "utf8");
+  assert.match(src, /const DENY_COOLDOWN_MS = \d+ \* 1000;/);
+  assert.match(src, /const _deniedOrigins = new Map\(\)/);
+  assert.match(src, /Date\.now\(\) - deniedAt < DENY_COOLDOWN_MS\) return "deny"/);
+  assert.match(src, /_deniedOrigins\.set\(origin, Date\.now\(\)\)/);
+  assert.match(src, /加入白名单失败/);
+  const trustBranch = src.slice(src.indexOf("if (r === 2 && host)"), src.indexOf("_deniedOrigins.set(origin"));
+  assert.match(trustBranch, /_sessionOrigins\.add\(origin\);[^]*return true;[^]*_sessionOrigins\.add\(origin\);[^]*return true;/);
+  assert.doesNotMatch(trustBranch, /return false/);
+});

package/test/telegram-identity.test.js

@@ -0,0 +1,41 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const vm = require("node:vm");
+const {
+  isTelegramUrl,
+  TELEGRAM_IDENTITY_SCRIPT,
+  normalizeTelegramIdentity,
+  telegramLoginRecord,
+  telegramIdentityFromProfile,
+} = require("../src/tabbrowser/telegram-identity");
+
+test("recognizes telegram web urls only", () => {
+  assert.equal(isTelegramUrl("https://web.telegram.org/k/"), true);
+  assert.equal(isTelegramUrl("https://web.telegram.org/a/#123"), true);
+  assert.equal(isTelegramUrl("https://example.com/web.telegram.org"), false);
+  assert.equal(isTelegramUrl("chrome-error://chromewebdata/"), false);
+});
+
+test("identity script is valid JS and returns null without storage", async () => {
+  new vm.Script(TELEGRAM_IDENTITY_SCRIPT); // syntax
+  const ctx = vm.createContext({ localStorage: { getItem: () => null }, indexedDB: {} });
+  assert.equal(await vm.runInContext(TELEGRAM_IDENTITY_SCRIPT, ctx), null);
+});
+
+test("identity script never leaks auth material", () => {
+  assert.doesNotMatch(TELEGRAM_IDENTITY_SCRIPT, /auth_key|server_salt|account\d/);
+});
+
+test("normalizes identity and maps to a profile login record", () => {
+  const it = normalizeTelegramIdentity({ id: 42, username: "@alice", firstName: " Alice ", lastName: "L", phone: "1234" });
+  assert.deepEqual(it, { id: "42", username: "alice", displayName: "Alice L", phone: "1234" });
+  assert.deepEqual(telegramLoginRecord(it), { url: "https://web.telegram.org", name: "telegram", username: "alice", mobile: "1234", note: "Alice L" });
+  assert.equal(normalizeTelegramIdentity(null), null);
+  assert.equal(normalizeTelegramIdentity({ username: "x" }), null);
+});
+
+test("reads identity back from a stored profile", () => {
+  const p = { logins: [{ name: "gmail", username: "a@b" }, { name: "Telegram", username: "alice", mobile: "1", note: "Alice" }] };
+  assert.deepEqual(telegramIdentityFromProfile(p), { username: "alice", displayName: "Alice", phone: "1" });
+  assert.equal(telegramIdentityFromProfile({ logins: [] }), null);
+});

package/test/telegram-matrix.test.js

@@ -58,7 +58,7 @@ test("a cached-but-offline cell is reported as failed, not loaded", () => {
   // service worker 会让断网的 Telegram 也「加载成功」,只能从 session 层探。
   assert.match(src, /net\.fetch\(target, \{[^]*session: session\.fromPartition\(partitionFor\(profileIdx\)\)/);
   assert.match(src, /ERR_NO_NETWORK/);
-  assert.match(src, /did-stop-loading", \(\) => \{ push\(\); probeReachable\(\); \}/);
+  assert.match(src, /did-stop-loading", \(\) => \{ push\(\); probeReachable\(\);/);
   assert.match(src, /if \(seq !== probeSeq\) return;/);
   // 一次失败不判定,避免代理抖动误报
   const probe = src.slice(src.indexOf("const probeReachable"), src.indexOf("wc.on(\"did-start-loading\""));
@@ -73,25 +73,31 @@ test("panel reload adopts existing session views instead of destroying them", ()
   assert.match(pull, /if \(adopt\)[^]*openedProfiles\.add\(Number\(m\[1\]\)\)/);
 });
 
-test("saving a proxy never leaves an unopened profile stuck at loading", () => {
+test("reloading an unopened profile creates its cell instead of a bare reload", () => {
   const html = fs.readFileSync(path.join(__dirname, "..", "src", "tabbrowser", "telegram-matrix.html"), "utf8");
-  const save = html.slice(html.indexOf("const save = async"), html.indexOf("row.onclick ="));
-  // 只有已打开的会话才置 loading / 重载;未打开的没有 cell,置了就永远回不来。
-  assert.match(save, /openedProfiles\.has\(p\.accountIdx\)/);
-  assert.doesNotMatch(save, /cellState\.set\(p\.accountIdx, \{ loading: true \}\)/);
   const reload = html.slice(html.indexOf("function reloadProfile"), html.indexOf("function render()"));
   assert.match(reload, /const fresh = !openedProfiles\.has\(idx\)/);
   assert.match(reload, /if \(!fresh\)[^]*panelAPI\.reload/);
 });
 
-test("matrix page exposes profile table, proxy editor, and phone preview", () => {
+test("matrix page exposes profile table, phone preview, note, proxy drawer and ip probe", () => {
   const html = fs.readFileSync(path.join(__dirname, "..", "src", "tabbrowser", "telegram-matrix.html"), "utf8");
   assert.match(html, /id="rows"/);
   assert.match(html, /id="ov-error"/);
   assert.match(html, /panelAPI\.states/);
   assert.match(html, /panelAPI\.setProfileProxy/);
+  assert.match(html, /panelAPI\.probeIp/);
+  assert.match(html, /panelAPI\.removeProfile/);
+  // 删除必须二次确认:确认块默认隐藏,只有 rm-yes 才真正调用删除
+  assert.match(html, /\.cfg \.confirm \{ display: none;/);
+  assert.match(html, /querySelector\('\.rm-yes'\)\.onclick = async[^]*await removeProfile\(p\)/);
+  assert.doesNotMatch(html.slice(html.indexOf("querySelector('.rm').onclick"), html.indexOf("querySelector('.rm-no')")), /removeProfile\(/);
   assert.match(html, /id="add-profile"/);
-  assert.match(html, /data-role="proxy"/);
+  assert.match(html, /class="cfg"[^]*data-role="proxy"/);
+  assert.match(html, /\.row\.cfg-open \.cfg \{ display: block; \}/);
+  assert.match(html, /panelAPI\.setProfileNote/);
+  assert.match(html, /data-role="note"/);
+  assert.match(html, /class="tg none"/);
   assert.match(html, /id="phone-preview"/);
   assert.match(html, /https:\/\/web\.telegram\.org\/k\//);
   assert.match(html, /panelAPI\.sync/);

package/test/trusted-origins-underscore.test.js

@@ -0,0 +1,11 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const { normalizeHost } = require("../src/profiles/trusted-origins-store");
+
+test("trusted-origins accepts hostnames with underscores, bare or as URL", () => {
+  assert.equal(normalizeHost("xs_master.cicy-ai.com"), "xs_master.cicy-ai.com");
+  assert.equal(normalizeHost("https://XS_master.cicy-ai.com/path?q=1"), "xs_master.cicy-ai.com");
+  assert.equal(normalizeHost("xs_master.cicy-ai.com:8008"), "xs_master.cicy-ai.com");
+  assert.equal(normalizeHost("bad host"), "");
+  assert.equal(normalizeHost(".x.com"), "");
+});