dsh-browser-playwright-codex 0.6.6 → 0.7.1

package/lib/contract.js

@@ -52,8 +52,6 @@ export const ALWAYS_ON_SUFFIXES = [
     'open_tab',
     'close_tab',
     'screenshot',
-    'console_messages',
-    'network_requests',
     'close',
 ];
 /**
@@ -61,7 +59,13 @@ export const ALWAYS_ON_SUFFIXES = [
  * a tool the deployment disabled can only error, so shipping its schema would
  * spend prompt tokens on a capability that cannot run.
  */
-export const GATED_SUFFIXES = ['extract', 'evaluate', 'cdp'];
+export const GATED_SUFFIXES = [
+    'extract',
+    'evaluate',
+    'cdp',
+    'console_messages',
+    'network_requests',
+];
 /** Full wire names for every tool, in registration order. */
 export function toolNames(prefix) {
     return TOOL_SUFFIXES.map((suffix) => prefix + suffix);
@@ -75,6 +79,10 @@ export function registeredSuffixes(config) {
         live.add('cdp');
     if (config.extractConfigured || config.registerDisabledTools)
         live.add('extract');
+    if (config.diagnostics || config.registerDisabledTools) {
+        live.add('console_messages');
+        live.add('network_requests');
+    }
     return TOOL_SUFFIXES.filter((suffix) => live.has(suffix));
 }
 /** Full wire names this configuration registers, in registration order. */
@@ -103,6 +111,7 @@ export const ERROR_CODES = {
     PARAM_MISSING: 'PARAM_MISSING',
     ELEMENT_NOT_ACTIONABLE: 'ELEMENT_NOT_ACTIONABLE',
     VALUE_NOT_SET: 'VALUE_NOT_SET',
+    CREDENTIAL_FIELD: 'CREDENTIAL_FIELD',
     CLICK_TARGET_NOT_FOUND: 'CLICK_TARGET_NOT_FOUND',
     HOVER_TARGET_NOT_FOUND: 'HOVER_TARGET_NOT_FOUND',
     DIALOG_PENDING: 'DIALOG_PENDING',

package/lib/gates-patch.d.ts

@@ -0,0 +1,49 @@
+/** Managed block markers: everything between them belongs to this plugin. */
+export declare const BEGIN = "# >>> dsh-browser: \u6D4F\u89C8\u5668\u63D2\u4EF6\u914D\u7F6E\uFF08\u672C\u5757\u7531\u8BBE\u7F6E\u9875\u7EF4\u62A4\uFF0C\u4E5F\u53EF\u624B\u5DE5\u7F16\u8F91\uFF09>>>";
+export declare const END = "# <<< dsh-browser <<<";
+/**
+ * The pre-merge markers, written by dsh-browser-toggle 0.3.0. Accepted so an
+ * existing block is replaced in place instead of accumulating a second row that
+ * would patch the same entry twice.
+ */
+export declare const LEGACY_BEGIN = "# >>> dsh-browser-toggle: \u5F3A\u529B\u5DE5\u5177\u95F8\u95E8\uFF08\u672C\u5757\u7531\u8BBE\u7F6E\u9875\u7EF4\u62A4\uFF0C\u4E5F\u53EF\u624B\u5DE5\u7F16\u8F91\uFF09>>>";
+export declare const LEGACY_END = "# <<< dsh-browser-toggle <<<";
+/** Path of the home-level patch layer (highest priority among patch files). */
+export declare function homePatchPath(env?: NodeJS.ProcessEnv): string;
+/**
+ * The managed block: one loader row for the whole plugin, with the shipped
+ * launch/provider/snapshot values repeated and the two gates filled in.
+ *
+ * @param allowEvaluate - register browser_evaluate
+ * @param allowCdp - register browser_cdp
+ * @param diagnostics - register the two diagnostics tools
+ * @returns the YAML block, markers included
+ */
+export declare function renderBrowserBlock(allowEvaluate: boolean, allowCdp: boolean, diagnostics: boolean): string;
+/** Merge the managed block into `original`, replacing an existing one in place. */
+export declare function mergeBrowserBlock(original: string, allowEvaluate: boolean, allowCdp: boolean, diagnostics: boolean): string;
+/** Read the current managed block, or undefined when there is none. */
+export declare function parseBrowserBlock(text: string): {
+    allowEvaluate: boolean;
+    allowCdp: boolean;
+    diagnostics: boolean;
+} | undefined;
+/** Back-compat aliases used by the absorbed settings-card host half. */
+export declare const parseGatesBlock: typeof parseBrowserBlock;
+/** Back-compat alias (see {@link mergeBrowserBlock}). */
+export declare const mergeGatesBlock: typeof mergeBrowserBlock;
+/**
+ * Write both gates into the home-level patch. Backup first, atomic rename, then
+ * read back and check; on a failed check the previous bytes are restored.
+ *
+ * @param allowEvaluate - register browser_evaluate
+ * @param allowCdp - register browser_cdp
+ * @param env - environment (DSH_HOME override for tests)
+ * @returns the file written and the values it now carries
+ */
+export declare function writeGates(allowEvaluate: boolean, allowCdp: boolean, diagnostics: boolean, env?: NodeJS.ProcessEnv): Promise<{
+    patch: string;
+    allowEvaluate: boolean;
+    allowCdp: boolean;
+    diagnostics: boolean;
+}>;

package/lib/gates-patch.js

@@ -0,0 +1,168 @@
+/**
+ * Home-level patch writer for the merged single-row plugin (2026-10-19).
+ *
+ * Reads and rewrites ONE managed block inside the home-level cordis.patch.yml
+ * (the patch layer with the highest priority, so the user's own choice wins over
+ * any profile layer and over the package default). Everything outside the block
+ * is preserved byte for byte.
+ *
+ * Why the block carries the WHOLE row: the loader replaces an entry's `config`
+ * wholesale, so a block that lists only the two gates would silently reset the
+ * launch options, the idle timeout and the snapshot engine to their defaults.
+ * The template below therefore mirrors cordis.patch.yml's shipped values and
+ * differs only in the two gate booleans.
+ *
+ * Dependency-free on purpose: a half-written patch layer breaks every plugin
+ * load in the profile, so this file only uses node builtins and stays testable
+ * on its own.
+ *
+ * @module dsh-browser-playwright-codex/gates-patch
+ */
+import { readFile, writeFile, rename, copyFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/** Managed block markers: everything between them belongs to this plugin. */
+export const BEGIN = '# >>> dsh-browser: 浏览器插件配置（本块由设置页维护，也可手工编辑）>>>';
+export const END = '# <<< dsh-browser <<<';
+/**
+ * The pre-merge markers, written by dsh-browser-toggle 0.3.0. Accepted so an
+ * existing block is replaced in place instead of accumulating a second row that
+ * would patch the same entry twice.
+ */
+export const LEGACY_BEGIN = '# >>> dsh-browser-toggle: 强力工具闸门（本块由设置页维护，也可手工编辑）>>>';
+export const LEGACY_END = '# <<< dsh-browser-toggle <<<';
+/** Path of the home-level patch layer (highest priority among patch files). */
+export function homePatchPath(env = process.env) {
+    return join(env.DSH_HOME || join(homedir(), '.dsh'), 'cordis.patch.yml');
+}
+/**
+ * The managed block: one loader row for the whole plugin, with the shipped
+ * launch/provider/snapshot values repeated and the two gates filled in.
+ *
+ * @param allowEvaluate - register browser_evaluate
+ * @param allowCdp - register browser_cdp
+ * @param diagnostics - register the two diagnostics tools
+ * @returns the YAML block, markers included
+ */
+export function renderBrowserBlock(allowEvaluate, allowCdp, diagnostics) {
+    return [
+        BEGIN,
+        '# allowEvaluate: 注册 browser_evaluate（页面任意 JS，能用你的登录态操作网站）',
+        '# allowCdp:      注册 browser_cdp（原始 CDP，仅放行检查与输入模拟）',
+        '# 包内默认关闭；这里的值就是用户自己的选择。改完由热重载生效。',
+        '# 整行 config 会被整体替换，所以这里写全 —— 只写两个闸门会把其它设置重置成默认值。',
+        '- id: browser',
+        "  name: 'dsh-browser-playwright-codex'",
+        '  config:',
+        '    service:',
+        '      provider: playwright',
+        '    playwright:',
+        '      launch:',
+        '        headless: false',
+        '        persistent: true',
+        '        viewport:',
+        '          width: 1280',
+        '          height: 800',
+        '        navigationTimeoutMs: 30000',
+        '        ignoreHTTPSErrors: false',
+        '      idleTimeoutMs: 0',
+        '      maxSessions: 8',
+        '      snapshot:',
+        '        diff: false',
+        '    tool:',
+        '      toolPrefix: "browser_"',
+        '      allowEvaluate: ' + (allowEvaluate ? 'true' : 'false'),
+        '      allowCdp: ' + (allowCdp ? 'true' : 'false'),
+        '      diagnostics: ' + (diagnostics ? 'true' : 'false'),
+        '      registerDisabledTools: false',
+        '      diagnostics: false',
+        '      maxWaitMs: 60000',
+        END,
+        '',
+    ].join('\n');
+}
+/** Locate the managed block, preferring the current markers over the legacy ones. */
+function findBlock(original) {
+    const markers = [
+        [BEGIN, END],
+        [LEGACY_BEGIN, LEGACY_END],
+    ];
+    for (const [begin, end] of markers) {
+        const beginIdx = original.indexOf(begin);
+        const endIdx = original.indexOf(end);
+        if (beginIdx !== -1 && endIdx !== -1 && endIdx > beginIdx) {
+            let after = endIdx + end.length;
+            if (original[after] === '\n')
+                after += 1;
+            return { start: beginIdx, after };
+        }
+    }
+    return undefined;
+}
+/** Merge the managed block into `original`, replacing an existing one in place. */
+export function mergeBrowserBlock(original, allowEvaluate, allowCdp, diagnostics) {
+    const block = renderBrowserBlock(allowEvaluate, allowCdp, diagnostics);
+    const found = findBlock(original);
+    if (found !== undefined)
+        return original.slice(0, found.start) + block + original.slice(found.after);
+    return (original === '' || original.endsWith('\n') ? original : original + '\n') + '\n' + block;
+}
+/** Read the current managed block, or undefined when there is none. */
+export function parseBrowserBlock(text) {
+    const found = findBlock(text);
+    if (found === undefined)
+        return undefined;
+    const body = text.slice(found.start, found.after);
+    const evaluate = /allowEvaluate:\s*(true|false)/.exec(body);
+    const cdp = /allowCdp:\s*(true|false)/.exec(body);
+    if (evaluate === null || cdp === null)
+        return undefined;
+    const diag = /diagnostics:\s*(true|false)/.exec(body);
+    return {
+        allowEvaluate: evaluate[1] === 'true',
+        allowCdp: cdp[1] === 'true',
+        diagnostics: diag === null ? false : diag[1] === 'true',
+    };
+}
+/** Back-compat aliases used by the absorbed settings-card host half. */
+export const parseGatesBlock = parseBrowserBlock;
+/** Back-compat alias (see {@link mergeBrowserBlock}). */
+export const mergeGatesBlock = mergeBrowserBlock;
+/**
+ * Write both gates into the home-level patch. Backup first, atomic rename, then
+ * read back and check; on a failed check the previous bytes are restored.
+ *
+ * @param allowEvaluate - register browser_evaluate
+ * @param allowCdp - register browser_cdp
+ * @param env - environment (DSH_HOME override for tests)
+ * @returns the file written and the values it now carries
+ */
+export async function writeGates(allowEvaluate, allowCdp, diagnostics, env = process.env) {
+    const file = homePatchPath(env);
+    let original = '';
+    try {
+        original = await readFile(file, 'utf8');
+    }
+    catch {
+        original = '';
+    }
+    const next = mergeBrowserBlock(original, allowEvaluate, allowCdp, diagnostics);
+    if (original !== '')
+        await copyFile(file, file + '.bak-browser-toggle').catch(() => { });
+    const tmp = file + '.tmp-browser-toggle';
+    await writeFile(tmp, next, 'utf8');
+    await rename(tmp, file);
+    const check = await readFile(file, 'utf8');
+    const parsed = parseBrowserBlock(check);
+    if (parsed === undefined ||
+        parsed.allowEvaluate !== allowEvaluate ||
+        parsed.allowCdp !== allowCdp ||
+        parsed.diagnostics !== diagnostics) {
+        if (original !== '') {
+            await writeFile(file, original, 'utf8');
+            throw new Error('patch self-check failed after write; previous content restored');
+        }
+        throw new Error('patch self-check failed after write');
+    }
+    return { patch: file, allowEvaluate, allowCdp, diagnostics };
+}

package/lib/index.d.ts

@@ -20,3 +20,8 @@ export { Config as PlaywrightConfigSchema } from './config.ts';
 export type { PlaywrightConfig, PageData } from './config.ts';
 export type { BrowserNode, BrowserProvider, BrowserSession, BrowserSnapshot, LoadState, ScreenshotCapture, TabInfo, } from './types.ts';
 export type { ToolConfig } from './tool.ts';
+export { Config as BrowserPluginConfigSchema, apply, name } from './plugin.ts';
+export type { BrowserPluginConfig } from './plugin.ts';
+export { apply as applyPlaywright, name as playwrightEntry, Config as PlaywrightEntryConfig } from './playwright.ts';
+export { apply as applyTools, name as toolEntry, Config as ToolEntryConfig } from './tool.ts';
+export { Config } from './plugin.ts';

package/lib/index.js

@@ -12,3 +12,9 @@ export { default as BrowserRuntime } from "./service.js";
 export { PlaywrightProvider } from "./provider.js";
 export { assertAllowedUrl } from "./url-policy.js";
 export { Config as PlaywrightConfigSchema } from "./config.js";
+// Single loader row (2026-10-19): the package root is the plugin. The three
+// sub-entries below stay importable, but the loader mounts this one.
+export { Config as BrowserPluginConfigSchema, apply, name } from "./plugin.js";
+export { apply as applyPlaywright, name as playwrightEntry, Config as PlaywrightEntryConfig } from "./playwright.js";
+export { apply as applyTools, name as toolEntry, Config as ToolEntryConfig } from "./tool.js";
+export { Config } from "./plugin.js";

package/lib/page-actions.d.ts

@@ -68,6 +68,22 @@ export declare function clickTargetHref(locator: Locator): Promise<string | null
 export declare function clickLocator(session: PlaywrightSession, locator: Locator, signal: AbortSignal | undefined, label: string, shared: number): Promise<import("./types.ts").BrowserSnapshot>;
 export declare function clickAt(session: PlaywrightSession, x: number, y: number, signal: AbortSignal | undefined): Promise<import("./types.ts").BrowserSnapshot>;
 export declare function clickAtRef(session: PlaywrightSession, ref: string, signal: AbortSignal | undefined): Promise<import("./types.ts").BrowserSnapshot>;
+/**
+ * Does this field hold a secret (password, one-time code, card number)?
+ *
+ * Mechanism-level counterpart to the old promise "it never types your
+ * passwords": `browser_fill` refuses these fields so the promise is true by
+ * construction, not by the model remembering to behave. The visible window is
+ * where the human types them.
+ *
+ * @param spec - tag / type / autocomplete read from the live element
+ * @returns true when the field must be filled by the human
+ */
+export declare function isCredentialField(spec: {
+    tag: string;
+    type?: string;
+    autocomplete?: string;
+}): boolean;
 export declare function fill(session: PlaywrightSession, ref: string, text: string, signal: AbortSignal | undefined): Promise<import("./types.ts").BrowserSnapshot>;
 /**
  * Normalize a field value before comparing. Two levels of forgiveness, both of them

package/lib/page-actions.js

@@ -480,13 +480,55 @@ export async function clickAtRef(session, ref, signal) {
         }
     });
 }
+/** Autocomplete tokens whose value is a secret the human should type in the window. */
+const CREDENTIAL_AUTOCOMPLETE = new Set([
+    'current-password',
+    'new-password',
+    'one-time-code',
+    'cc-number',
+    'cc-csc',
+    'cc-exp',
+    'cc-exp-month',
+    'cc-exp-year',
+]);
+/**
+ * Does this field hold a secret (password, one-time code, card number)?
+ *
+ * Mechanism-level counterpart to the old promise "it never types your
+ * passwords": `browser_fill` refuses these fields so the promise is true by
+ * construction, not by the model remembering to behave. The visible window is
+ * where the human types them.
+ *
+ * @param spec - tag / type / autocomplete read from the live element
+ * @returns true when the field must be filled by the human
+ */
+export function isCredentialField(spec) {
+    const tag = spec.tag.toLowerCase();
+    if (tag !== 'input' && tag !== 'textarea')
+        return false;
+    if ((spec.type ?? '').toLowerCase() === 'password')
+        return true;
+    const tokens = (spec.autocomplete ?? '').toLowerCase().trim().split(/\s+/);
+    const token = tokens[tokens.length - 1] ?? '';
+    return CREDENTIAL_AUTOCOMPLETE.has(token);
+}
 export async function fill(session, ref, text, signal) {
     return session.run(async () => {
         const locator = await session.refLocator(ref);
         const page = session.currentPageSync();
         await session.waitForElementStable(locator);
         await session.assertActionable(locator, { editable: true });
-        const tag = await locator.evaluate((el) => el.tagName.toLowerCase()).catch(() => 'input');
+        const spec = await locator
+            .evaluate((el) => {
+            const tag = el.tagName.toLowerCase();
+            const type = tag === 'input' ? String(el.type || '').toLowerCase() : '';
+            return { tag, type, autocomplete: el.getAttribute('autocomplete') ?? '' };
+        })
+            .catch(() => ({ tag: 'input', type: '', autocomplete: '' }));
+        if (isCredentialField(spec)) {
+            throw new BrowserError('CREDENTIAL_FIELD', 'browser_fill refuses credential fields (password, one-time code, card number): a human types those in the visible window. Ask the user to type it there, then take a fresh snapshot and continue with the rest.');
+        }
+        const tag = spec.tag;
         let lastError;
         let written = false;
         for (let attempt = 0; attempt < 2; attempt += 1) {

package/lib/plugin.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The single loader entry: one package = one plugin (2026-10-19).
+ *
+ * Why this file exists: `dsh-client-modules` rejects distinct active Loader
+ * sources that resolve to the same package name, and a Settings card needs a
+ * client module. The browser capability used to be mounted as three rows
+ * (`/service`, `/playwright`, `/tool`) because it has three configurable
+ * concerns, which forced the card into a second package (dsh-browser-toggle).
+ * One row per package makes the card legal inside this package, so the whole
+ * product is now one plugin: this entry mounts the three concerns as child
+ * plugins and keeps their own config schemas untouched.
+ *
+ * Config shape (see cordis.patch.yml):
+ *
+ *     service:    { provider }                     browser seam
+ *     playwright: { launch, idleTimeoutMs, ... }   provider / window / snapshot
+ *     tool:       { toolPrefix, allowEvaluate, ... } the model-facing tools
+ *
+ * Each child still exports its original schema and apply(), so the subpath
+ * entries (`./service`, `./playwright`, `./tool`) keep working for tests, the
+ * verify script and anyone importing the package directly.
+ *
+ * @module dsh-browser-playwright-codex/plugin
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import { type BrowserRuntimeConfig } from './service.ts';
+import { type PlaywrightConfig } from './config.ts';
+import { type ToolConfig } from './tool.ts';
+/** Config accepted by the single loader row. */
+export interface BrowserPluginConfig {
+    /** Browser seam: which registered provider to use. */
+    service?: BrowserRuntimeConfig;
+    /** Provider: window, launch and snapshot settings. */
+    playwright?: PlaywrightConfig;
+    /** Model-facing tools: prefix, capability gates, wait caps. */
+    tool?: ToolConfig;
+}
+/** Schemastery validation for {@link BrowserPluginConfig}. */
+export declare const Config: z<BrowserPluginConfig>;
+/** Cordis plugin name used by loader diagnostics (this is the row id in patches). */
+export declare const name = "browser";
+/**
+ * Mount the whole capability: the seam, the Playwright provider, the tool family,
+ * and — when the deployment has a web server — the Settings card.
+ *
+ * @param ctx - plugin context
+ * @param config - nested config for each concern; the loader fills defaults
+ */
+export declare function apply(ctx: Context, config: BrowserPluginConfig): void;
+declare const _default: {
+    name: string;
+    Config: z<BrowserPluginConfig>;
+    apply: typeof apply;
+};
+export default _default;

package/lib/plugin.js

@@ -0,0 +1,31 @@
+import z from '@deepseek-ai/schemastery';
+import BrowserRuntime, { Config as ServiceConfig } from "./service.js";
+import * as playwright from "./playwright.js";
+import * as tool from "./tool.js";
+import * as settingsCard from "./settings-card.js";
+import { Config as PlaywrightConfigSchema } from "./config.js";
+import { Config as ToolConfigSchema } from "./tool.js";
+/** Schemastery validation for {@link BrowserPluginConfig}. */
+export const Config = z.object({
+    service: ServiceConfig,
+    playwright: PlaywrightConfigSchema,
+    tool: ToolConfigSchema,
+});
+/** Cordis plugin name used by loader diagnostics (this is the row id in patches). */
+export const name = 'browser';
+/**
+ * Mount the whole capability: the seam, the Playwright provider, the tool family,
+ * and — when the deployment has a web server — the Settings card.
+ *
+ * @param ctx - plugin context
+ * @param config - nested config for each concern; the loader fills defaults
+ */
+export function apply(ctx, config) {
+    ctx.plugin(BrowserRuntime, config.service ?? {});
+    ctx.plugin(playwright, config.playwright);
+    ctx.plugin(tool, config.tool);
+    // The card's host half injects `webServer`, so in a CLI deployment this child
+    // simply stays pending instead of failing the whole plugin.
+    ctx.plugin(settingsCard);
+}
+export default { name, Config, apply };

package/lib/runtime-state.d.ts

@@ -64,11 +64,13 @@ export declare function isEngineUserChosen(): boolean;
 export declare function publishGates(gates: {
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 }): void;
 /** The published gates, or undefined while the tool family has not been applied. */
 export declare function getGates(): {
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 } | undefined;
 /**
  * The last computed "which sites look logged in" summary, or undefined before anything

package/lib/runtime-state.js

@@ -149,7 +149,11 @@ export function isEngineUserChosen() {
  * @param gates - whether browser_evaluate / browser_cdp are registered.
  */
 export function publishGates(gates) {
-    _gates = { allowEvaluate: gates.allowEvaluate === true, allowCdp: gates.allowCdp === true };
+    _gates = {
+        allowEvaluate: gates.allowEvaluate === true,
+        allowCdp: gates.allowCdp === true,
+        diagnostics: gates.diagnostics === true,
+    };
 }
 /** The published gates, or undefined while the tool family has not been applied. */
 export function getGates() {

package/lib/settings-card.d.ts

@@ -0,0 +1,9 @@
+export declare const name = "browser-toggle";
+export declare const inject: string[];
+export declare function apply(ctx: any): void;
+declare const _default: {
+    name: string;
+    inject: string[];
+    apply: typeof apply;
+};
+export default _default;