dsh-browser-playwright-codex 0.5.1 → 0.5.2

package/CHANGELOG.md

@@ -3,7 +3,30 @@
 Bilingual by intent: the version headings and the summary of each release are given in both
 languages, the individual entries follow the language the surrounding code and docs use.
 
-一句话摘要：**把「看着危险」变成「说得清楚」** —— 新增 `SECURITY.md`，把 dsh.so 扫描报的 **2 Critical / 5 Warning / 26 Info** 逐条对上：那 2 个 Critical 就是 `browser_evaluate` 的实现，而**包里默认关闭**（关着时工具根本不注册）。README 第一屏重写（中文一句话 + 一条命令安装 + 五条差异点 + 安全入口），并又清掉两处「出厂开启闸门」的过期说法。
+## 0.5.2
+
+一句话摘要：**查出 Windows CI 抖动的真正根因并修掉**—— 测试用的转译器 tsx/esbuild 会开启 `keepNames`，把"要送进浏览器执行"的页内函数里的**命名内部函数**改写成 `__name(fn, "名字")`，而 `__name` 只存在于模块作用域、页面里没有 → 探测每次抛 `ReferenceError`，且被 `catch` 吞成无声的 `unreachable`。后果是**几何点击路径从来没工作过**：所有点击都退化成 Playwright 兜底点击（上限 3 秒），慢速 Windows runner 一超时，就把几何路径那句**误导性**的错误抛了出来。
+
+### Fixed
+
+- **根因：页内探测函数必须自包含。** `hitTest` 里那个 `const describe = (…) => …` 被 esbuild 包成 `__name(...)`，序列化进页面后直接抛 `ReferenceError: __name is not defined`（用 `fn.toString()` 在 tsx 下实测确认）。改为内联成字符串计算 —— 函数体里不再有任何函数字面量。
+- **测试运行器换成 Node 原生类型剥离**（`node --test "tests/*.test.ts"`，CI 用 Node 24，引擎要求 `^22.19 || >=24`）。这从根上移除了整类陷阱：同一个测试在 tsx 下红、在原生下绿（已实测）。`tsx` 仍是 devDependency（`cost` 等脚本还在用），只是测试不再经过它。
+- **失败原因不再被丢弃。** 原循环的判断读的是 `lastReason === null`，而变量初值是 `undefined`，所以那个分支**从未执行过**：瞬时失败一律伪装成 "could not find an unobstructed click point"。现在按信息量排序记录原因、在错误里点名、连探测抛出的**错误文本**也带上（正是它让我看到 `__name`）。
+- **点击探测点改为取「元素 ∩ 视口」的中心**。`elementFromPoint()` 对视口外坐标返回 `null`，而原先取元素自身中心 —— 比视口高的元素、或中心落在折线以下的元素会三个对齐档全败。现在取可见交集中心；**完全不在屏幕上**给出独立的 `off-screen` 原因。
+- **截图改用独立的超时下限**（`Math.max(timeoutMs, 10s)`）：全页截图的耗时由页面大小与 CPU 编码决定，复用"导航超时"（2500ms）会让慢机器把一次成功捕获判成失败 —— 2026-10-05 的 windows runner 正是这样挂的（`page.screenshot: Timeout 2500ms exceeded`）。这个下限只约束失败路径，拍好即返回。
+- **每个对齐档允许有限重采样**（三次、间隔 60ms，稳定性等待只在第一次前做一次）。
+
+### Tests
+
+- `the click geometry pipeline itself delivers the click, not the fallback` —— **先写测试**并在旧源码上验红（红的时候它打印出的正是 `got: playwright actionability click delivered …`），在修复后转绿。它断言的是**哪条路径送出的点击**，所以能挡住这一类回归。
+- `click by visible label reaches the element through the page-side probe` —— 新覆盖：此前**整套测试从未调用过** `clickText`，而它的页内探测（`labelTargetProbe`）同样被 `__name` 破坏，只会以"找不到这个文字"的形式表现出来。这条在 tsx 下红、原生下绿。
+- `click by ref reaches an element taller than the viewport`、`an element that is never on screen is reported as off-screen` —— 夹视口与原因措辞的回归用例。
+- `stale-ref journey` 改用**不在 `#recent` 里**的商品做断言：`#recent` 异步插入 `CATALOG.slice(0,4)`，其中恰好含原先那个商品，于是"链接数 === 0"只在竞态窗口内成立 —— 慢一点的点击就会输掉这个竞态（这正是本次调查中先撞上的那条失败）。
+
+### Hardened afterwards
+
+- **三个同类页内函数（`elementStabilityProbe` / `pageStabilityProbe` / `labelTargetProbe`，含 `labelOf` 内部的 `attr`）也改成对转译器免疫的写法。** 用的是实测安全的数组解构：`const [sig, tick] = [() => …, () => …]` —— 初始值是数组字面量而不是函数字面量，所以不会被 `__name` 包，而且两个函数仍可互相调用（自递归也验过）。
+  验证方式很直接：同一批测试**在 tsx 下也变绿**。加固前 `click by visible label` 在 tsx 下红、原生下绿；加固后两种运行器全绿（本地全套 117 / 114 pass / 0 fail / 3 skipped，verify 57 项）。
 
 ## 0.5.1
 

package/lib/playwright.d.ts

@@ -409,8 +409,8 @@ declare class PlaywrightSession {
     resolveClickPoint(locator: Locator, signal: AbortSignal | undefined): Promise<{
         x: number;
         y: number;
-        hitDesc: string | undefined;
-        hitSelf: boolean | undefined;
+        hitDesc: string;
+        hitSelf: boolean;
     }>;
     click(ref: string, signal: AbortSignal | undefined): Promise<BrowserSnapshot | {
         url: string;
@@ -544,6 +544,14 @@ declare class PlaywrightSession {
     }>;
     openTab(url: string, waitUntil: LoadState, signal: AbortSignal | undefined): Promise<BrowserSnapshot>;
     closeTab(index: number, signal: AbortSignal | undefined): Promise<void>;
+    /**
+     * Screenshots get their own floor instead of reusing the navigation budget: a
+     * full-page capture is sized by the page and encoded by the CPU, so a loaded machine
+     * legitimately needs seconds (2026-10-05: the Windows runner blew through the 2500ms
+     * navigation timeout while encoding a full-page PNG — a slow runner, not a defect).
+     * The floor only bounds failures; a capture that is ready returns immediately.
+     */
+    screenshotTimeoutMs(): number;
     screenshot(opts: {
         fullPage?: boolean;
         ref?: string;

package/lib/playwright.js

@@ -1214,26 +1214,32 @@ class PlaywrightSession {
         ];
         const hitTest = (el) => {
             const r = el.getBoundingClientRect();
-            const x = Math.max(0, r.left + r.width / 2);
-            const y = Math.max(0, r.top + r.height / 2);
             const w = r.width;
             const h = r.height;
+            const geometry = 'rect ' + Math.round(r.left) + ',' + Math.round(r.top) + ' ' + Math.round(w) + 'x' + Math.round(h);
             if (w <= 0 || h <= 0)
-                return { ok: false, reason: 'zero-size', x, y };
-            const describe = (n) => {
-                if (!n)
-                    return '(nothing)';
-                const cls = typeof n.className === 'string' && n.className.trim()
-                    ? '.' + n.className.trim().split(/\s+/).filter(Boolean).join('.')
-                    : '';
-                const role = n.getAttribute && n.getAttribute('role');
-                const text = n.childElementCount === 0 && n.textContent ? ' "' + n.textContent.trim().slice(0, 24) + '"' : '';
-                return ((n.tagName ? n.tagName.toLowerCase() : n.nodeName) +
-                    (n.id ? '#' + n.id : '') +
-                    cls +
-                    (role ? '[role=' + role + ']' : '') +
-                    text);
-            };
+                return { ok: false, reason: 'zero-size', x: r.left, y: r.top, geometry };
+            // The probe must sit inside the element AND inside the viewport:
+            // elementFromPoint() answers null for coordinates outside the viewport, so
+            // sampling the element's own centre missed any target taller than the viewport
+            // (or one whose centre was below the fold) even when most of it was plainly
+            // clickable. Aim at the centre of the visible intersection instead.
+            const view = (el.ownerDocument && el.ownerDocument.defaultView) || window;
+            const left = Math.max(r.left, 0);
+            const top = Math.max(r.top, 0);
+            const right = Math.min(r.right, view.innerWidth);
+            const bottom = Math.min(r.bottom, view.innerHeight);
+            if (right - left <= 0 || bottom - top <= 0) {
+                return {
+                    ok: false,
+                    reason: 'off-screen',
+                    x: r.left,
+                    y: r.top,
+                    geometry: geometry + ' viewport ' + view.innerWidth + 'x' + view.innerHeight,
+                };
+            }
+            const x = (left + right) / 2;
+            const y = (top + bottom) / 2;
             let hit = null;
             try {
                 hit = document.elementFromPoint(x, y);
@@ -1242,7 +1248,23 @@ class PlaywrightSession {
                 hit = null;
             }
             if (!hit)
-                return { ok: false, reason: 'nothing-at-point', x, y };
+                return { ok: false, reason: 'nothing-at-point', x, y, geometry };
+            // Describe the hit inline, as a string: this function is serialized into the
+            // page, so it must be self-contained. A transpiler that keeps function names
+            // (esbuild/tsx, through its `__name` helper) rewrites a named inner binding
+            // like `const describe = (…) => …` into a call to a helper that exists only in
+            // module scope — and the page has no such helper, so the probe would throw
+            // ReferenceError and every click would silently fall back to Playwright's
+            // actionability click (3s cap). That is what made the Windows runner flaky
+            // until 2026-10-05; the test runner now strips types natively, and keeping the
+            // probe free of inner function bindings protects anyone who transpiles src/.
+            const hitDesc = (hit.tagName ? hit.tagName.toLowerCase() : hit.nodeName) +
+                (hit.id ? '#' + hit.id : '') +
+                (typeof hit.className === 'string' && hit.className.trim()
+                    ? '.' + hit.className.trim().split(/\s+/).filter(Boolean).join('.')
+                    : '') +
+                (hit.getAttribute && hit.getAttribute('role') ? '[role=' + hit.getAttribute('role') + ']' : '') +
+                (hit.childElementCount === 0 && hit.textContent ? ' "' + hit.textContent.trim().slice(0, 24) + '"' : '');
             let belongs = false;
             if (hit === el || el.contains(hit)) {
                 belongs = true;
@@ -1265,11 +1287,34 @@ class PlaywrightSession {
                 }
             }
             return belongs
-                ? { ok: true, x, y, hitDesc: describe(hit), hitSelf: hit === el }
-                : { ok: false, reason: 'intercepted', x, y, by: describe(hit) };
+                ? { ok: true, x, y, hitDesc, hitSelf: hit === el }
+                : { ok: false, reason: 'intercepted', x, y, by: hitDesc, geometry };
         };
         let lastBlockedBy;
         let lastReason;
+        let lastGeometry;
+        /** Message from the most recent probe that threw, so the failure names its cause. */
+        let probeError;
+        // 2026-10-05: the first version of this loop dropped the probe's reason on the
+        // floor — the guard below read `lastReason === null` while the variable started
+        // as `undefined`, so it never ran and every transient miss came out as "could not
+        // find an unobstructed click point" with nothing to act on. That message is what
+        // the slower Windows runner produced while ubuntu and local runs passed, and it
+        // cost a debugging session to learn what it actually meant. Record the reason and
+        // keep the most informative one.
+        const rank = {
+            intercepted: 5,
+            'zero-size': 4,
+            'off-screen': 3,
+            'nothing-at-point': 2,
+            unreachable: 1,
+        };
+        const record = (reason, geometry) => {
+            if (lastReason === undefined || (rank[reason] ?? 0) > (rank[lastReason] ?? 0)) {
+                lastReason = reason;
+                lastGeometry = geometry;
+            }
+        };
         for (const align of alignments) {
             try {
                 // Native scroll so block alignment is honoured; Playwright's
@@ -1282,17 +1327,35 @@ class PlaywrightSession {
             catch {
                 /* try the next alignment */
             }
-            // Wait out layout shifts before sampling the centre point.
-            await this.waitForElementStable(locator);
-            const probe = await withAbort(locator.evaluate(hitTest), signal).catch(() => null);
-            if (probe && probe.ok)
-                return { x: probe.x, y: probe.y, hitDesc: probe.hitDesc, hitSelf: probe.hitSelf };
-            if (probe && probe.reason === 'intercepted') {
-                lastBlockedBy = probe.by;
-                lastReason = 'intercepted';
-            }
-            else if (lastReason === null) {
-                lastReason = probe ? probe.reason : 'unreachable';
+            // Sample a few times per alignment: a page that is still laying out can move the
+            // element between the scroll and the probe, and the first sample then misses even
+            // though a later one is fine. Retries are bounded and cheap — the stability wait
+            // only runs before the first sample, and the extra samples are 60ms apart.
+            for (let attempt = 0; attempt < 3; attempt += 1) {
+                if (attempt === 0)
+                    await this.waitForElementStable(locator);
+                else
+                    await new Promise((resolve) => setTimeout(resolve, 60));
+                const probe = await withAbort(locator.evaluate(hitTest), signal).catch((error) => {
+                    // Keep the message. "unreachable" on its own told nobody anything, and
+                    // swallowing the error here is exactly what let a broken probe look like an
+                    // obstructed element for a whole debugging session.
+                    probeError = error instanceof Error ? error.message : String(error);
+                    return null;
+                });
+                if (probe !== null && probe.ok)
+                    return { x: probe.x, y: probe.y, hitDesc: probe.hitDesc, hitSelf: probe.hitSelf };
+                if (probe === null)
+                    record('unreachable', probeError);
+                else {
+                    record(probe.reason, probe.geometry);
+                    if (probe.reason === 'intercepted')
+                        lastBlockedBy = probe.by;
+                }
+                // Interception is a property of the page, not of the moment: re-sampling cannot
+                // clear it, so spend the remaining budget on the next alignment instead.
+                if (probe !== null && probe.reason === 'intercepted')
+                    break;
             }
         }
         if (lastReason === 'intercepted') {
@@ -1300,10 +1363,18 @@ class PlaywrightSession {
                 (lastBlockedBy || 'another element') +
                 ' intercepts the click (tried centre / end / start alignment)');
         }
+        if (lastReason === 'off-screen') {
+            throw new BrowserError('ELEMENT_NOT_ACTIONABLE', 'the element is outside the viewport even after scrolling it into view; nothing of it is on screen' +
+                (lastGeometry === undefined ? '' : ' (' + lastGeometry + ')') +
+                '; take a fresh browser_snapshot');
+        }
         if (lastReason === 'zero-size') {
             throw new BrowserError('ELEMENT_NOT_ACTIONABLE', 'ref has no clickable geometry (zero size); take a fresh browser_snapshot');
         }
-        throw new BrowserError('ELEMENT_NOT_ACTIONABLE', 'could not find an unobstructed click point for the ref; take a fresh browser_snapshot');
+        throw new BrowserError('ELEMENT_NOT_ACTIONABLE', 'could not find an unobstructed click point for the ref (last probe: ' +
+            (lastReason ?? 'no probe completed') +
+            (lastGeometry === undefined ? '' : ' — ' + lastGeometry) +
+            '); take a fresh browser_snapshot');
     }
     async click(ref, signal) {
         return this.run(async () => {
@@ -1896,13 +1967,23 @@ class PlaywrightSession {
             this.currentIndex = Math.min(this.currentIndex, this.context.pages().length - 1);
         });
     }
+    /**
+     * Screenshots get their own floor instead of reusing the navigation budget: a
+     * full-page capture is sized by the page and encoded by the CPU, so a loaded machine
+     * legitimately needs seconds (2026-10-05: the Windows runner blew through the 2500ms
+     * navigation timeout while encoding a full-page PNG — a slow runner, not a defect).
+     * The floor only bounds failures; a capture that is ready returns immediately.
+     */
+    screenshotTimeoutMs() {
+        return Math.max(this.timeoutMs(), 10_000);
+    }
     async screenshot(opts, signal) {
         return this.run(async () => {
             this.assertLive();
             this.provider.touch(this.owner);
             const page = await this.ensurePage();
             if (opts?.ref !== undefined) {
-                const bytes = await withAbort((await this.refLocator(opts.ref)).screenshot({ type: 'png', timeout: this.timeoutMs() }), signal);
+                const bytes = await withAbort((await this.refLocator(opts.ref)).screenshot({ type: 'png', timeout: this.screenshotTimeoutMs() }), signal);
                 return { mime: 'image/png', bytes };
             }
             const bytes = await withAbort(page.screenshot({
@@ -1910,7 +1991,7 @@ class PlaywrightSession {
                 fullPage: opts?.fullPage ?? false,
                 animations: 'disabled',
                 caret: 'hide',
-                timeout: this.timeoutMs(),
+                timeout: this.screenshotTimeoutMs(),
             }), signal);
             return { mime: 'image/png', bytes };
         });
@@ -2365,47 +2446,58 @@ const clearLabelTargets = () => {
  */
 const labelTargetProbe = (arg) => {
     const wanted = String(arg.text).replace(/\s+/g, ' ').trim();
-    const norm = (s) => (s || '').replace(/\s+/g, ' ').trim();
-    const ownText = (el) => {
-        let out = '';
-        for (const node of el.childNodes) {
-            if (node.nodeType === 3)
-                out += node.textContent;
-            else if (node.nodeType === 1 && node.tagName.toLowerCase() === 'br')
-                out += ' ';
-        }
-        return norm(out);
-    };
+    // Array destructuring, not named bindings: this function is serialized into the page,
+    // and a transpiler that keeps function names (esbuild's `__name`) would rewrite a named
+    // inner binding into a call to a module-scope helper the page does not have. An array
+    // literal is not a named binding, so it survives (same rule as the probes below).
+    const [norm, ownText] = [
+        (s) => (s || '').replace(/\s+/g, ' ').trim(),
+        (el) => {
+            let out = '';
+            for (const node of el.childNodes) {
+                if (node.nodeType === 3)
+                    out += node.textContent;
+                else if (node.nodeType === 1 && node.tagName.toLowerCase() === 'br')
+                    out += ' ';
+            }
+            return norm(out);
+        },
+    ];
     // Mirror the snapshot's name sources, so anything the page shows under a
     // name can be addressed by that name: aria-label / alt / title / placeholder
     // first, then the element's own visible text.
-    const labelOf = (el) => {
-        const attr = (name) => {
-            const v = el.getAttribute(name);
-            return v && v.trim() ? v : '';
-        };
-        return (norm(attr('aria-label')) || norm(attr('alt')) || norm(attr('title')) || norm(attr('placeholder')) || ownText(el));
-    };
-    const visible = (el) => {
-        if (!(el instanceof Element))
-            return false;
-        if (el.getAttribute('hidden') !== null || el.getAttribute('aria-hidden') === 'true')
-            return false;
-        const style = getComputedStyle(el);
-        if (style.display === 'none' || style.visibility === 'hidden')
-            return false;
-        const rect = el.getBoundingClientRect();
-        return rect.width > 0 || rect.height > 0;
-    };
-    const depthOf = (el) => {
-        let depth = 0;
-        let cur = el;
-        while (cur !== null && cur.parentElement !== null) {
-            depth += 1;
-            cur = cur.parentElement;
-        }
-        return depth;
-    };
+    const [labelOf, visible, depthOf] = [
+        (el) => 
+        // Attribute reads are inlined, not wrapped in a local `attr` helper: any named
+        // function binding inside this serialized function would be rewritten to a call to
+        // a module-scope helper the page does not have. norm() already turns null/blank
+        // into '', which is what the helper did.
+        norm(el.getAttribute('aria-label')) ||
+            norm(el.getAttribute('alt')) ||
+            norm(el.getAttribute('title')) ||
+            norm(el.getAttribute('placeholder')) ||
+            ownText(el),
+        (el) => {
+            if (!(el instanceof Element))
+                return false;
+            if (el.getAttribute('hidden') !== null || el.getAttribute('aria-hidden') === 'true')
+                return false;
+            const style = getComputedStyle(el);
+            if (style.display === 'none' || style.visibility === 'hidden')
+                return false;
+            const rect = el.getBoundingClientRect();
+            return rect.width > 0 || rect.height > 0;
+        },
+        (el) => {
+            let depth = 0;
+            let cur = el;
+            while (cur !== null && cur.parentElement !== null) {
+                depth += 1;
+                cur = cur.parentElement;
+            }
+            return depth;
+        },
+    ];
     const root = document.body !== null && document.body !== undefined ? document.body : document.documentElement;
     const all = Array.from(root.querySelectorAll('*')).slice(0, 8000).filter(visible);
     let pool = all.filter((el) => labelOf(el) === wanted);
@@ -2452,29 +2544,37 @@ const elementStabilityProbe = (el, arg) => new Promise((resolve) => {
     const deadline = performance.now() + timeoutMs;
     let prev = null;
     let stable = 0;
-    const sig = () => {
-        const r = el.getBoundingClientRect();
-        return [r.left, r.top, r.width, r.height].join(',');
-    };
-    const tick = () => {
-        const cur = sig();
-        if (prev !== null && cur === prev) {
-            stable += 1;
-            if (stable >= frames) {
-                resolve(true);
+    // Array destructuring, not `const sig = …`: these functions are serialized into
+    // the page, and a transpiler that keeps function names (esbuild's `__name`) rewrites
+    // a named inner binding into a *call* to a module-scope helper the page does not have
+    // (`ReferenceError: __name is not defined`). An array literal is not a named binding,
+    // so this shape survives — and the two can still call each other. Verified 2026-10-05
+    // with fn.toString() under tsx, and by running this suite under tsx again.
+    const [sig, tick] = [
+        () => {
+            const r = el.getBoundingClientRect();
+            return [r.left, r.top, r.width, r.height].join(',');
+        },
+        () => {
+            const cur = sig();
+            if (prev !== null && cur === prev) {
+                stable += 1;
+                if (stable >= frames) {
+                    resolve(true);
+                    return;
+                }
+            }
+            else {
+                stable = 0;
+            }
+            prev = cur;
+            if (performance.now() >= deadline) {
+                resolve(false);
                 return;
             }
-        }
-        else {
-            stable = 0;
-        }
-        prev = cur;
-        if (performance.now() >= deadline) {
-            resolve(false);
-            return;
-        }
-        requestAnimationFrame(tick);
-    };
+            requestAnimationFrame(tick);
+        },
+    ];
     requestAnimationFrame(tick);
 });
 /**
@@ -2488,28 +2588,36 @@ const pageStabilityProbe = (arg) => new Promise((resolve) => {
     const deadline = performance.now() + timeoutMs;
     let prev = null;
     let stable = 0;
-    const sig = () => {
-        const de = document.documentElement;
-        return [de.scrollWidth, de.scrollHeight, document.querySelectorAll('img:not([complete])').length].join(',');
-    };
-    const tick = () => {
-        const cur = sig();
-        if (prev !== null && cur === prev) {
-            stable += 1;
-            if (stable >= frames) {
-                resolve(true);
+    // Array destructuring, not `const sig = …`: these functions are serialized into
+    // the page, and a transpiler that keeps function names (esbuild's `__name`) rewrites
+    // a named inner binding into a *call* to a module-scope helper the page does not have
+    // (`ReferenceError: __name is not defined`). An array literal is not a named binding,
+    // so this shape survives — and the two can still call each other. Verified 2026-10-05
+    // with fn.toString() under tsx, and by running this suite under tsx again.
+    const [sig, tick] = [
+        () => {
+            const de = document.documentElement;
+            return [de.scrollWidth, de.scrollHeight, document.querySelectorAll('img:not([complete])').length].join(',');
+        },
+        () => {
+            const cur = sig();
+            if (prev !== null && cur === prev) {
+                stable += 1;
+                if (stable >= frames) {
+                    resolve(true);
+                    return;
+                }
+            }
+            else {
+                stable = 0;
+            }
+            prev = cur;
+            if (performance.now() >= deadline) {
+                resolve(false);
                 return;
             }
-        }
-        else {
-            stable = 0;
-        }
-        prev = cur;
-        if (performance.now() >= deadline) {
-            resolve(false);
-            return;
-        }
-        requestAnimationFrame(tick);
-    };
+            requestAnimationFrame(tick);
+        },
+    ];
     requestAnimationFrame(tick);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-browser-playwright-codex",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Browser automation for DeepSeek Harness: fill in forms, scrape lists and work across tabs in real pages, using the logins you already have. Runs in a visible window that stays quiet when minimised, and stops for sign-ins, CAPTCHAs and native dialogs instead of confirming for you.",
   "license": "MIT",
   "type": "module",
@@ -41,9 +41,9 @@
   ],
   "scripts": {
     "build": "node node_modules/typescript/bin/tsc -p tsconfig.json",
-    "test": "node node_modules/tsx/dist/cli.mjs --test \"tests/*.test.ts\"",
-    "test:scenarios": "node node_modules/tsx/dist/cli.mjs --test tests/scenarios.test.ts tests/tool-scenarios.test.ts",
-    "test:live": "node node_modules/tsx/dist/cli.mjs --test tests/live-smoke.test.ts",
+    "test": "node --test \"tests/*.test.ts\"",
+    "test:scenarios": "node --test tests/scenarios.test.ts tests/tool-scenarios.test.ts",
+    "test:live": "node --test tests/live-smoke.test.ts",
     "verify": "npm run build && node scripts/dsh-browser-verify.mjs",
     "verify:live": "npm run build && node scripts/dsh-browser-verify.mjs --live",
     "doctor": "node scripts/doctor.mjs",