dsh-browser-playwright-codex 0.6.1 → 0.6.5

package/scripts/analysis/needs-human-probe.mjs

@@ -1,83 +0,0 @@
-/**
- * Headless-mode capability probe, aimed at the three "needs a human" cases:
- *
- *  1. Does the window-state CDP call used by the minimize gate even work headless?
- *     (If it throws, our gate returns "minimized" and silently disables the
- *      login-state export in headless — i.e. session cookies would never be saved.)
- *  2. Do page-level native dialogs (alert/confirm/prompt) park and answer headless?
- *  3. Does a file input accept setInputFiles headless, i.e. no OS picker needed?
- */
-import { createRequire } from 'node:module'
-import path from 'node:path'
-import fs from 'node:fs'
-import os from 'node:os'
-
-const require = createRequire(import.meta.url)
-const { chromium } = require(process.env.PW_CORE_PATH ?? 'playwright-core')
-
-const headless = (process.env.MODE ?? 'headless') === 'headless'
-const profile = fs.mkdtempSync(path.join(os.tmpdir(), 'pw-needsprobe-'))
-const context = await chromium.launchPersistentContext(profile, {
-  headless,
-  channel: process.env.CHANNEL || undefined,
-  ...(headless ? { viewport: { width: 1280, height: 800 } } : { viewport: null }),
-  ignoreDefaultArgs: ['--enable-automation'],
-  args: ['--no-first-run', '--no-default-browser-check', '--disable-blink-features=AutomationControlled'],
-})
-const page = context.pages()[0] ?? (await context.newPage())
-const out = { mode: headless ? 'headless' : 'headful' }
-
-// --- 1. the window-state probe the plugin's gate relies on -------------------
-try {
-  const s = await context.newCDPSession(page)
-  const { windowId } = await s.send('Browser.getWindowForTarget')
-  const { bounds } = await s.send('Browser.getWindowBounds', { windowId })
-  out.windowStateProbe = { ok: true, windowId, windowState: bounds.windowState, bounds }
-  out.gateWouldReturn = bounds.windowState === 'minimized'
-  await s.detach()
-} catch (e) {
-  out.windowStateProbe = { ok: false, error: String(e?.message ?? e).split('\n')[0] }
-  // The plugin's catch returns true == "treat as minimized".
-  out.gateWouldReturn = true
-}
-
-// --- 2. native dialog without a window --------------------------------------
-const dialogLog = []
-page.on('dialog', async (d) => {
-  dialogLog.push({ type: d.type(), message: d.message() })
-  await d.accept('typed-by-test').catch(async () => {
-    await d.dismiss().catch(() => {})
-  })
-})
-
-async function dialogRoundTrip() {
-  await page.setContent('<html><body><button id=b>go</button></body></html>')
-  const result = await page.evaluate(() => {
-    const answer = prompt('probe-prompt', 'default')
-    return 'prompt-returned:' + String(answer)
-  })
-  return result
-}
-try {
-  out.dialog = { evaluateResult: await dialogRoundTrip(), events: dialogLog }
-} catch (e) {
-  out.dialog = { error: String(e?.message ?? e).split('\n')[0], events: dialogLog }
-}
-
-// --- 3. file input without an OS picker ------------------------------------
-try {
-  const tmpFile = path.join(os.tmpdir(), 'pw-upload-probe.txt')
-  fs.writeFileSync(tmpFile, 'upload-probe')
-  await page.setContent('<html><body><input id=f type=file></body></html>')
-  await page.setInputFiles('#f', tmpFile)
-  out.fileInput = {
-    ok: true,
-    files: await page.evaluate(() => Array.from(document.querySelector('#f').files).map((f) => f.name)),
-  }
-} catch (e) {
-  out.fileInput = { ok: false, error: String(e?.message ?? e).split('\n')[0] }
-}
-
-console.log(JSON.stringify(out, null, 2))
-await context.close()
-fs.rmSync(profile, { recursive: true, force: true })

package/scripts/analysis/repro-minimize.mjs

@@ -1,112 +0,0 @@
-/**
- * Minimal, plugin-free reproduction of "automation raises a minimized window".
- *
- * Two modes, matching the two ways dsh-browser-playwright can own a window:
- *   PW_MODE=launch      -> chromium.launch() + browser.newContext()   (upstream 0.1.x default shape)
- *   PW_MODE=persistent  -> chromium.launchPersistentContext()         (persistent-profile forks)
- *
- * The OS window state is read back through CDP (Browser.getWindowBounds) and the
- * window is minimized through CDP too, so the verdict does not depend on anyone
- * watching the screen.
- *
- * Usage (Windows, using an installed Chrome):
- *   set PW_MODE=launch
- *   set PW_CHANNEL=chrome
- *   set PW_CORE_PATH=D:\path\to\node_modules\playwright-core
- *   node repro-minimize.mjs
- */
-import { createRequire } from 'node:module'
-import os from 'node:os'
-import path from 'node:path'
-import fs from 'node:fs'
-
-const require = createRequire(import.meta.url)
-const corePath = process.env.PW_CORE_PATH ?? 'playwright-core'
-const { chromium } = require(corePath)
-let coreVersion = 'unknown'
-try {
-  coreVersion = require(path.join(corePath, 'package.json')).version
-} catch {}
-
-const MODE = process.env.PW_MODE ?? 'launch'
-const sleep = (ms) => new Promise((r) => setTimeout(r, ms))
-const launchOptions = {
-  headless: false,
-  channel: process.env.PW_CHANNEL || undefined, // e.g. 'chrome' to use the local Chrome
-  args: ['--no-first-run', '--no-default-browser-check'],
-}
-
-let browser
-let context
-let profile
-if (MODE === 'persistent') {
-  profile = fs.mkdtempSync(path.join(os.tmpdir(), 'pw-focus-repro-'))
-  context = await chromium.launchPersistentContext(profile, { ...launchOptions, viewport: null })
-} else {
-  browser = await chromium.launch(launchOptions)
-  context = await browser.newContext({ viewport: null })
-}
-
-const anchor = context.pages()[0] ?? (await context.newPage())
-// Real content matters: an empty about:blank window can behave differently.
-await anchor.goto('https://example.com', { waitUntil: 'domcontentloaded' }).catch(() => {})
-await sleep(500)
-
-const cdp = await context.newCDPSession(anchor)
-const windowId = async () => (await cdp.send('Browser.getWindowForTarget')).windowId
-const state = async () => (await cdp.send('Browser.getWindowBounds', { windowId: await windowId() })).bounds.windowState
-const setState = async (windowState) => {
-  const id = await windowId()
-  return cdp.send('Browser.setWindowBounds', { windowId: id, bounds: { windowState } })
-}
-
-const results = []
-async function probe(name, fn) {
-  await setState('normal')
-  await sleep(400)
-  await setState('minimized')
-  await sleep(900)
-  const before = await state()
-  let err = ''
-  try {
-    await fn()
-  } catch (e) {
-    err = ' [' + (e?.message ?? e) + ']'
-  }
-  await sleep(1400)
-  const after = await state()
-  const raised = before === 'minimized' && after !== 'minimized'
-  results.push({ name, before, after, raised })
-  console.log(`${raised ? 'RAISES  ' : 'safe    '} ${name.padEnd(46)} before=${before} after=${after}${err}`)
-}
-
-console.log(`mode=${MODE}  playwright-core ${coreVersion}  node ${process.version}`)
-console.log(`channel=${process.env.PW_CHANNEL || '(bundled chromium)'}\n`)
-
-await probe('baseline: sleep only (3s)', () => sleep(3000))
-await probe('context.newPage()', async () => {
-  const p = await context.newPage()
-  await p.goto('about:blank')
-  await p.close()
-})
-await probe('CDP Target.createTarget({background:true})', async () => {
-  await cdp.send('Target.createTarget', { url: 'about:blank', background: true })
-})
-await probe('page.bringToFront()', () => anchor.bringToFront())
-await probe('context.newCDPSession(anchor)', async () => {
-  const s = await context.newCDPSession(anchor)
-  await s.detach()
-})
-await probe('context.storageState()', () => context.storageState())
-await probe('anchor.goto() (same tab)', () =>
-  anchor.goto('https://example.com/?x=1', { waitUntil: 'domcontentloaded' }),
-)
-await probe('anchor.screenshot()', () => anchor.screenshot({ path: path.join(os.tmpdir(), 'pw-repro.png') }))
-
-console.log('\n--- summary ---')
-for (const r of results) console.log(`${r.raised ? 'RAISES' : 'safe  '}  ${r.name}`)
-
-await setState('normal').catch(() => {})
-await context.close().catch(() => {})
-await browser?.close().catch(() => {})
-if (profile) fs.rmSync(profile, { recursive: true, force: true })

package/scripts/autocommit.ps1

@@ -1,23 +0,0 @@
-# autocommit.ps1 —— 每日自动存档：有改动就提交一条带时间戳的 commit。
-#
-# 用法:
-#   powershell -ExecutionPolicy Bypass -File D:\dsh-plugins\dsh-browser-playwright-codex\scripts\autocommit.ps1
-#
-# 注册成每天 23:55 的计划任务（一次即可，用户级，不需要管理员）:
-#   schtasks /create /tn "dsh-browser-playwright autocommit" /sc daily /st 23:55 ^
-#     /tr "powershell -ExecutionPolicy Bypass -File D:\dsh-plugins\dsh-browser-playwright-codex\scripts\autocommit.ps1"
-#
-# 说明：这是"存档"，不是"分支管理"。它只提交，从不 push、reset 或丢弃改动，
-# 所以最坏情况也只是历史里多一条记录。
-$ErrorActionPreference = 'Stop'
-$repo = Split-Path -Parent $PSScriptRoot
-Set-Location $repo
-
-if (-not (Test-Path (Join-Path $repo '.git'))) { Write-Output "not a git repo: $repo"; exit 0 }
-
-$changes = git status --porcelain
-if (-not $changes) { Write-Output '没有改动，跳过'; exit 0 }
-
-git add -A
-git commit -q -m ("auto: " + (Get-Date -Format 'yyyy-MM-dd HH:mm'))
-Write-Output ("已存档: " + (Get-Date -Format 'yyyy-MM-dd HH:mm'))

package/scripts/check-doc-links.py

@@ -1,112 +0,0 @@
-"""校验仓库里所有 markdown 链接：文件路径要存在，锚点要能在目标文档里找到。
-
-为什么需要：
- 1. 那几篇文档原来放在 GitHub 的 docs/ 下，链接写的是 ../xxx；搬进本仓库根目录后
-    ../ 就指到仓库外了。靠肉眼容易漏，脚本一跑就知道。
- 2. 锚点也会坏：曾经有过 `[help wanted #2](README.md#help-wanted--求助)`，
-    而 README 里根本没有那一节 —— 文件在、锚点不在，照样是死链。
-
-跑法（无需依赖，Python 3.8+）：
-    python scripts/check-doc-links.py
-退出码 0 = 全部有效；1 = 有坏链（逐条列出，标明是文件缺失还是锚点缺失）。
-"""
-import os
-import re
-import sys
-
-# 以本文件位置为准：scripts/ 的上一级就是仓库根，换机器也不用改路径
-REPO = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-LINK = re.compile(r"\]\(([^)\s]+)\)")
-HEADING = re.compile(r"^#{1,6}\s+(.*?)\s*$")
-FENCE = re.compile(r"^\s*(```|~~~)")
-
-
-def slug(heading: str) -> str:
-    """GitHub 的标题锚点规则（近似实现）：小写；去掉非字母数字/连字符/下划线；
-    空格转连字符。中文是字母数字（str.isalnum() 为真）所以保留，与 GitHub 一致。"""
-    out = []
-    for ch in heading.strip().lower():
-        if ch.isalnum() or ch in "-_":
-            out.append(ch)
-        elif ch == " ":
-            out.append("-")
-    return "".join(out)
-
-
-def anchors_of(path: str) -> set:
-    """该文档所有标题的锚点。代码块内的 # 行不算标题。"""
-    found = set()
-    in_fence = False
-    with open(path, "r", encoding="utf-8", errors="replace") as f:
-        for line in f:
-            if FENCE.match(line):
-                in_fence = not in_fence
-                continue
-            if in_fence:
-                continue
-            m = HEADING.match(line)
-            if m:
-                found.add(slug(m.group(1)))
-    return found
-
-
-def main() -> int:
-    bad = []
-    checked_files = 0
-    checked_anchors = 0
-    anchor_cache = {}
-
-    for root, dirs, files in os.walk(REPO):
-        dirs[:] = [d for d in dirs if d not in (".git", "node_modules", "lib")]
-        for name in files:
-            if not name.endswith(".md"):
-                continue
-            path = os.path.join(root, name)
-            rel = os.path.relpath(path, REPO)
-            with open(path, "r", encoding="utf-8", errors="replace") as f:
-                text = f.read()
-
-            for target in LINK.findall(text):
-                if target.startswith(("http://", "https://", "mailto:")):
-                    continue
-                file_part, _, anchor = target.partition("#")
-                file_part = file_part.split("?", 1)[0]
-
-                if file_part == "":
-                    # 同文档锚点：指向"更靠下的小节标题"是常见写法，这里只校验它存在
-                    target_path = path
-                else:
-                    target_path = os.path.normpath(
-                        os.path.join(os.path.dirname(path), file_part.replace("/", os.sep))
-                    )
-                    checked_files += 1
-                    if not os.path.exists(target_path):
-                        bad.append((rel, target, "文件不存在: " + os.path.relpath(target_path, REPO)))
-                        continue
-
-                if anchor == "":
-                    continue
-                if not target_path.endswith(".md"):
-                    continue
-                checked_anchors += 1
-                if target_path not in anchor_cache:
-                    anchor_cache[target_path] = anchors_of(target_path)
-                if anchor not in anchor_cache[target_path]:
-                    bad.append(
-                        (
-                            rel,
-                            target,
-                            "锚点不存在: #" + anchor + "  (该文档有 "
-                            + str(len(anchor_cache[target_path]))
-                            + " 个标题锚点)",
-                        )
-                    )
-
-    print(f"检查了 {checked_files} 个文件链接、{checked_anchors} 个锚点，坏链 {len(bad)} 个")
-    for src, target, why in bad:
-        print(f"  BAD  {src}  ->  {target}   ({why})")
-    return 1 if bad else 0
-
-
-if __name__ == "__main__":
-    sys.exit(main())

package/scripts/measure-prompt-cost.mjs

@@ -1,57 +0,0 @@
-#!/usr/bin/env node
-/**
- * measure-prompt-cost —— 常驻 prompt 成本体检。
- *
- * 工具 schema 是随系统提示每轮常驻的：这个脚本把它量出来，改动前后各跑一次，
- * 就知道这次改动有没有偷偷加税。和 doctor 一样，它不碰浏览器，只组装工具面。
- *
- * 用法:  node node_modules/tsx/dist/cli.mjs scripts/measure-prompt-cost.mjs
- *        （或 npm run cost）
- *
- * 三行分别对应三种"默认"，别混：
- *   ① 配置默认值（Config({})，不含任何补丁层）
- *   ② 出厂 bundle 层 —— 本包 cordis.patch.yml 里给 browser-tool 的配置，
- *      也就是 profile 挂上这个 bundle 后真正生效的那份。两个闸门默认关闭，
- *      所以这一行正常情况下应当与 ① 相同；包里的默认值一改，它自己跟着变。
- *   ③ 全量注册（再加 registerDisabledTools: true）
- *
- * 注意：唯一会抬高这个数字的动作是「注册新工具」。文档、脚本、git 都不进 prompt。
- *
- * 测量实现放在 scripts/prompt-cost.mjs：脚本与文档守卫测试（tests/docs-consistency）
- * 共用一份，免得两边各写一遍再各自漂移。
- */
-import { CONFIG_DEFAULTS, shippedConfig, everythingConfig, measureSurface, approxTokens } from './prompt-cost.mjs'
-
-function report(label, { rows, total }) {
-  console.log('')
-  console.log(label)
-  console.log('  工具数: ' + rows.length + '   wire 字符总数: ' + total + '   粗估 token: ~' + approxTokens(total))
-  console.log('  最贵的 5 个:')
-  for (const [name, wire, desc] of rows.slice(0, 5)) {
-    console.log('    ' + name.padEnd(26) + ' wire ' + String(wire).padStart(5) + '  (描述 ' + desc + ')')
-  }
-  return total
-}
-
-console.log('常驻 prompt 成本体检（工具 schema 每轮都在系统提示里）')
-const t0 = report('① 配置默认值 Config({})', await measureSurface(CONFIG_DEFAULTS))
-const shipped = shippedConfig()
-const t1 = report(
-  '② 出厂 bundle 层（cordis.patch.yml：allowEvaluate=' +
-    shipped.allowEvaluate +
-    ', allowCdp=' +
-    shipped.allowCdp +
-    '）',
-  await measureSurface(shipped),
-)
-const t2 = report('③ 全量注册（registerDisabledTools: true，再加 extract）', await measureSurface(everythingConfig()))
-
-console.log('')
-console.log(
-  '② → ③ 的差 = 被能力开关挡住、没有关掉的那些 schema：' +
-    (t2 - t1) +
-    ' 字符 ≈ ' +
-    approxTokens(t2 - t1) +
-    ' token/轮。',
-)
-console.log('想让这个数字更小，就在 cordis.patch.yml 里把用不上的能力关掉（关掉即不注册）。')

package/scripts/preflight.mjs

@@ -1,192 +0,0 @@
-/**
- * 发版前置审计（preflight）：把"文档对世界说的话"和"包里到底装了什么"一次查干净。
- *
- * 为什么有这个脚本（2026-10-11，用户第二次因此不满）：
- *   之前是"只改点不看面"—— 修了 README 的 npm 说法，却没查 SECURITY 的计数、NOTICE 的路径、
- *   发帖草稿里的数字、以及"文档引用的文件/行号在重构后是否还存在"。用户的原话是
- *   「你能不能检查清楚再发新版本啊，别给我检查出来又一堆 bug」。所以这份检查挂在 `prepublishOnly`
- *   上：**不通过就发不出去**，而不是等用户事后发现。
- *
- * 三类输出，语义严格区分：
- *   ✗ 必须修   —— 硬错误（文件读不到、清单缺项、路径/行号/链接失效、测试失败、计数与实测不符）
- *   ？ 待确认 —— 可能是历史、上游或有意为之（例如 "published since v0.5.1"、上游插件的旧包名）
- *   ✓ 已一致   —— 已经核对过的基线数字
- *
- * 规则刻意收窄避免噪声（第一版误报过：把 IP 当版本号、把上游文档的版本当我们的、把竞品的工具数
- * 当我们的、把"三个闸门合计 127 token"这个子项当成总成本）。
- *
- * 用法: node preflight.mjs [项目根]     退出码: 0 通过 / 2 有硬错误
- */
-import { execFileSync } from 'node:child_process'
-import { existsSync, readFileSync, readdirSync } from 'node:fs'
-import { dirname, join, relative, resolve } from 'node:path'
-import { fileURLToPath } from 'node:url'
-
-const root = resolve(process.argv[2] ?? join(dirname(fileURLToPath(import.meta.url)), '..'))
-const problems = []
-const confirm = []
-const ok = []
-
-const readOrThrow = (rel) => {
-  const p = join(root, rel)
-  if (!existsSync(p)) throw new Error('读不到文件（硬错误，不许当通过）：' + rel)
-  return readFileSync(p, 'utf8')
-}
-
-// ── A. 包里装了什么 ───────────────────────────────────────────────────────────
-const packed = new Set(
-  JSON.parse(
-    execFileSync('npm', ['pack', '--dry-run', '--json'], { cwd: root, encoding: 'utf8', shell: true }),
-  )[0].files.map((f) => f.path),
-)
-// 这些是"用户从 npm 装到之后必须能看到"的文件：许可证与归属声明（NOTICE）、安全说明、变更记录、
-// 以及让 Gradle 式的 loader 能挂载的 cordis.patch.yml。2026-10-11 的审计就是靠这份清单抓到
-// NOTICE.md 一直没进包（npm 只会自动带上 LICENSE，不会带 NOTICE）。
-const SHOULD_SHIP = [
-  'package.json',
-  'README.md',
-  'CHANGELOG.md',
-  'SECURITY.md',
-  'NOTICE.md',
-  'LICENSE',
-  'cordis.patch.yml',
-  'locale/en.json',
-  'locale/zh.json',
-]
-for (const f of SHOULD_SHIP) if (!packed.has(f)) problems.push('包里缺文件：' + f)
-if (![...packed].some((p) => p.startsWith('lib/'))) problems.push('包里没有 lib/（插件实际加载的就是它）')
-if ([...packed].some((p) => p.startsWith('src/') || p.startsWith('tests/'))) problems.push('包里不该有 src/ 或 tests/')
-if ([...packed].some((p) => p.endsWith('.bak'))) problems.push('包里有 .bak 残渣')
-ok.push('包内 ' + packed.size + ' 个文件；已确认含 lib/、locale/、cordis.patch.yml，且不含 src/tests/.bak')
-
-// ── B. 基线数字（来自命令本身，不是文档自述） ─────────────────────────────────
-const pkg = JSON.parse(readOrThrow('package.json'))
-const cost = execFileSync('npm', ['run', 'cost'], { cwd: root, encoding: 'utf8', shell: true })
-const toolCount = Number((cost.match(/工具数[:：]\s*(\d+)/) ?? [])[1])
-const chars = Number((cost.match(/字符总数[:：]\s*(\d+)/) ?? [])[1])
-const tokens = Number((cost.match(/粗估 token[:：]\s*~?(\d+)/) ?? [])[1])
-if (!toolCount || !chars || !tokens) problems.push('拿不到 npm run cost 的数字')
-else ok.push('成本基线：' + toolCount + ' 工具 / ' + chars + ' 字符 / ~' + tokens + ' token/轮')
-
-const suite = execFileSync('node', ['--test', 'tests/*.test.ts'], { cwd: root, encoding: 'utf8', shell: true })
-const n = (re) => Number((suite.match(re) ?? [])[1])
-if (n(/ℹ fail (\d+)/) > 0) problems.push('测试有失败：' + n(/ℹ fail (\d+)/) + ' 条')
-else
-  ok.push(
-    '测试：' + n(/ℹ tests (\d+)/) + ' / pass ' + n(/ℹ pass (\d+)/) + ' / fail 0 / skipped ' + n(/ℹ skipped (\d+)/),
-  )
-
-// ── C. 文档断言 ───────────────────────────────────────────────────────────────
-const docFiles = []
-const walk = (dir) => {
-  for (const e of readdirSync(dir, { withFileTypes: true })) {
-    if (e.name === 'node_modules' || e.name === '.git') continue
-    const p = join(dir, e.name)
-    if (e.isDirectory()) walk(p)
-    else if (e.name.endsWith('.md')) docFiles.push(relative(root, p).replace(/\\/g, '/'))
-  }
-}
-walk(root)
-const HISTORY = new Set(['CHANGELOG.md'])
-/** 上游项目（被借鉴的那个插件）自己的文档：里面出现旧包名/旧版本是对的。 */
-const UPSTREAM_DOCS = new Set([
-  'PLUGIN-README.md',
-  'codex-rules.md',
-  'patches/README.md',
-  'docs/articles/focus-stealing.md',
-])
-const current = docFiles.filter((f) => !HISTORY.has(f))
-
-const basenames = new Set()
-for (const dir of ['', 'src', 'lib', 'scripts', 'tests', 'locale', 'patches', 'docs', 'docs/articles']) {
-  const abs = dir ? join(root, dir) : root
-  if (!existsSync(abs)) continue
-  for (const e of readdirSync(abs, { withFileTypes: true })) if (e.isFile()) basenames.add(e.name)
-}
-
-for (const f of docFiles) {
-  const text = readOrThrow(f)
-  const currentDoc = current.includes(f)
-  text.split('\n').forEach((line, i) => {
-    const where = f + ':' + (i + 1)
-    const historical = /(since|since v|起|之前|以后|published|发布|历史|历史值|for the record|v0[.]4)/i.test(line)
-
-    // C1. 看起来是"本包版本"的数字
-    if (currentDoc && !historical) {
-      const notOurs =
-        /(Node|node|playwright-core|upstream|上游|Chenyu|Codex|scan of|扫描|dsh-plugin-vet|electron)/i.test(line)
-      for (const m of line.matchAll(/\bv(\d+\.\d+\.\d+)\b/g)) {
-        if (notOurs) break
-        if (m[1] !== pkg.version)
-          confirm.push(where + ' 提到版本 v' + m[1] + '（当前 ' + pkg.version + '）→ ' + line.trim().slice(0, 80))
-      }
-    }
-
-    // C2. 写死的工具数：只有当这句在说"我们"时才核对（竞品对照说的是别人）
-    const tc = line.match(/\b(\d{2})\s*(?:个)?\s*(?:browser_\*?\s*)?(?:tools|工具)/i)
-    if (currentDoc && tc && Number(tc[1]) >= 10) {
-      const aboutUs = /(我们|this package|本包|registered|注册)/i.test(line)
-      const aboutThem = /(同类|竞品|其它|其他|competitor|alternative|更轻)/i.test(line)
-      if (aboutUs && !aboutThem && Number(tc[1]) !== toolCount)
-        problems.push(where + ' 写死工具数 ' + tc[1] + '（实测 ' + toolCount + '）')
-    }
-
-    // C3. 写死的总成本：只核对"总计/常驻"这类句子，且量级要像总数（≈127 这种子项不算）
-    const tk = line.match(/\b(\d[\d,]{2,6})\s*(?:tokens?|token)/i)
-    if (currentDoc && tk) {
-      const value = Number(tk[1].replace(/,/g, ''))
-      const aboutTotal = /(常驻|总计|合计|resident|per turn|每轮)/i.test(line)
-      if (aboutTotal && value >= 500 && Math.abs(value - tokens) > 200)
-        problems.push(where + ' 写死的总 token 数 ' + tk[1] + '（实测 ~' + tokens + '）')
-    }
-
-    // C4. 旧包名：.state.json 是刻意保留的；上游文档里出现是对的
-    if (
-      /dsh-browser-playwright(?!-codex)/.test(line) &&
-      !UPSTREAM_DOCS.has(f) &&
-      !/\.state\.json/.test(line) &&
-      !/(上游|upstream|Chenyu)/i.test(line)
-    ) {
-      confirm.push(where + ' 出现旧包名（确认语境）→ ' + line.trim().slice(0, 80))
-    }
-
-    // C5. 反引号里的仓库路径
-    for (const m of line.matchAll(/`([A-Za-z0-9._/-]+\.(?:md|ts|js|mjs|cjs|json|yml|yaml))`/g)) {
-      const p = m[1]
-      if (!p.includes('/') || p.startsWith('~') || p.startsWith('http')) continue
-      const abs = p.startsWith('.') ? resolve(root, f, '..', p) : join(root, p)
-      if (existsSync(abs)) continue
-      if (basenames.has(p.slice(p.lastIndexOf('/') + 1)))
-        problems.push(where + ' 路径写错：`' + p + '`（文件在本仓库，但不在这个位置）')
-    }
-
-    // C6. 「文件:行号」引用
-    for (const m of line.matchAll(/([A-Za-z0-9_./-]+\.(?:ts|js|mjs|cjs|json|yml))[^\n]{0,12}?[:(]\s*~?:?(\d{3,5})/g)) {
-      const abs = join(root, m[1].replace(/^\.\//, ''))
-      if (!existsSync(abs)) continue
-      const lines = readFileSync(abs, 'utf8').split('\n').length
-      if (Number(m[2]) > lines)
-        problems.push(where + ' 行号越界：' + m[1] + ':' + m[2] + '（该文件现在 ' + lines + ' 行）')
-    }
-  })
-  // C7. markdown 相对链接
-  for (const m of readOrThrow(f).matchAll(/\]\(([^)#\s]+)(?:#[^)]*)?\)/g)) {
-    const target = m[1]
-    if (/^(https?:|mailto:)/.test(target) || target.startsWith('#')) continue
-    if (!existsSync(resolve(root, f, '..', target))) problems.push(f + ' markdown 链接失效：' + target)
-  }
-}
-
-// ── 输出 ─────────────────────────────────────────────────────────────────────
-console.log('=== ✗ 必须修（硬错误）===')
-console.log(problems.length ? problems.map((p) => '  ✗ ' + p).join('\n') : '  （无）')
-console.log('')
-console.log('=== ？ 待确认（历史 / 上游 / 有意为之）===')
-const uniqueConfirm = [...new Set(confirm)]
-console.log(uniqueConfirm.length ? uniqueConfirm.map((c) => '  ？ ' + c).join('\n') : '  （无）')
-console.log('')
-console.log('=== ✓ 已核对 ===')
-console.log(ok.map((o) => '  ✓ ' + o).join('\n'))
-console.log('')
-console.log('结论：' + problems.length + ' 处硬错误、' + uniqueConfirm.length + ' 处待确认。')
-process.exitCode = problems.length ? 2 : 0

package/scripts/prompt-cost.mjs

@@ -1,73 +0,0 @@
-/**
- * prompt-cost — 「工具面常驻成本」的**唯一测量实现**。
- *
- * 为什么单独成模块：这个测量既被 `measure-prompt-cost.mjs`（给人看的 CLI）用，也被文档守卫测试
- * （`tests/docs-consistency.test.ts`）用。两份实现各自漂移过一次了（cost 脚本的标签被注释骗到），
- * 所以这里只留一份。
- *
- * 它只做一件事：组装工具面、读 `ctx.tools.schemas()` 的 wire 尺寸。
- * **不 acquire 会话、不开浏览器** —— 所以测试里也能直接跑。
- */
-import { Context } from '@deepseek-ai/cordis'
-import ToolRuntime from '@deepseek-ai/dsh-tools'
-import SystemPrompt from '@deepseek-ai/dsh-system-prompt'
-import BrowserRuntime from '../src/service.ts'
-import { PlaywrightProvider } from '../src/provider.ts'
-import * as browserTool from '../src/tool.ts'
-import { bundleConfig } from './shipped-gates.mjs'
-
-/** Launch config for the throwaway context (no page is ever opened, so this is inert). */
-const PW_CONFIG = {
-  launch: {
-    channel: 'chrome',
-    headless: true,
-    viewport: { width: 1280, height: 800 },
-    navigationTimeoutMs: 5000,
-    ignoreHTTPSErrors: false,
-  },
-  idleTimeoutMs: 0,
-  maxSessions: 2,
-  snapshot: { maxNodes: 200, maxNameLength: 120, maxTextLength: 300 },
-}
-
-/** `Config({})`: the schema defaults, before any patch layer. */
-export const CONFIG_DEFAULTS = {
-  toolPrefix: 'browser_',
-  allowEvaluate: false,
-  allowCdp: false,
-  registerDisabledTools: false,
-  maxWaitMs: 60000,
-  interactiveOnlyDefault: false,
-}
-
-/** The shipped bundle layer: Config defaults plus this package's `cordis.patch.yml`. */
-export function shippedConfig() {
-  return { ...CONFIG_DEFAULTS, ...bundleConfig() }
-}
-
-/** Everything registered: gated tools stay registered while off, which also pulls in `extract`. */
-export function everythingConfig() {
-  return { ...shippedConfig(), registerDisabledTools: true }
-}
-
-/** Assemble one tool surface and return its per-schema wire sizes. */
-export async function measureSurface(config) {
-  const root = new Context()
-  await root.plugin(SystemPrompt)
-  await root.plugin(ToolRuntime)
-  await root.plugin(BrowserRuntime)
-  root.browser.registerProvider(new PlaywrightProvider(PW_CONFIG))
-  browserTool.apply(root, config)
-  const rows = root.tools
-    .schemas()
-    .map((s) => [
-      s.name,
-      JSON.stringify({ name: s.name, description: s.description, parameters: s.parameters }).length,
-      s.description.length,
-    ])
-    .sort((a, b) => b[1] - a[1])
-  return { rows, total: rows.reduce((n, r) => n + r[1], 0) }
-}
-
-/** The rough per-turn token estimate the docs quote: characters / 3.6, rounded. */
-export const approxTokens = (chars) => Math.round(chars / 3.6)