dsh-browser-playwright-codex 0.7.0 → 0.7.1

package/CHANGELOG.md

@@ -3,6 +3,24 @@
 Bilingual by intent: the version headings and the summary of each release are given in both
 languages, the individual entries follow the language the surrounding code and docs use.
 
+## 0.7.1 — 2026-10-19
+
+一句话摘要：**只修文档与一处口径** —— 外部评分（8.9/10）点名的问题：CHANGELOG 的数字手写写错、对比表把五个闸门写成三个、有头模式的 viewport 仍然不生效却没标注。行为零变化。
+
+### Added
+
+- **设置卡新增第三个工具开关：诊断工具**（`browser_console_messages` / `browser_network_requests`）。与 `evaluate` / `cdp` 同一套机制：`POST /api/browser-playwright/gates` 现在接受 `diagnostics`，home 补丁块的整行 config 一并写入，`tool.ts` 把**实际生效值**（而不是猜的）发布给卡片；卡片上显示"当前：N 个开着"也把这一项算进去。
+- **「已登录的站点」默认折叠**：标题行直接给出「N 个域 · M 个 cookie · 点击展开」，点开才渲染说明与名单（分组仍各自折叠）。设置页不再被这份名单占掉大半屏。
+
+### Fixed
+
+- **CHANGELOG 0.7.0 的数字按实测改正**：常驻是 **16 工具 / 11,179 字符**（此前手写成 11,005 字符，token 数也跟着漂），对比基线 18 工具 / 12,755 字符保持不变，字符降幅 **−1,576（−12.4%）**。这是连续第三个版本出现"主文档被守卫钉住、CHANGELOG 叙事手写漂移"——本轮起新增加一条守卫：**最新一节 CHANGELOG 不许出现手写的 `≈ N token/轮` 数字**，要写就写实测命令与结果表。
+- **对比与优势.md 的闸门清单**："五个闸门"此前只列了 `evaluate` / `cdp` / `extract` 三个名字，补上 `console_messages` / `network_requests`，并把它与全量注册的字符差从旧的 2,853 更正为实测 4,603 字符（token 换算见 README 成本表）。
+
+### Changed
+
+- **有头模式的 `viewport` 标注**：`browser-lifecycle.ts:44` 用 `viewport: null` 跟随真实窗口，所以 `launch.viewport` 只在 `headless: true` 时生效；README 配置示例与 Known Limitations 现在明写这一点（此前"配了也不生效"没有任何提示，被外部评分连续四次点出）。
+
 ## 0.7.0 — 2026-10-19
 
 一句话摘要：**两个插件合成一个** —— 设置卡片并入本包；加载行从三行收成一行（这是 `dsh-client-modules` 允许本包带 client 模块的前提），独立的 `dsh-browser-toggle` 退役。
@@ -19,7 +37,7 @@ languages, the individual entries follow the language the surrounding code and d
 
 ### Changed
 
-- **两个诊断工具改为门控**：`browser_console_messages` / `browser_network_requests` 不再常驻 —— 新增 `tool.diagnostics: false`（默认关），开启后才注册。常驻成本 **18 工具 12,755 字符 ≈ 3,543 token/轮 → 16 工具 11,005 字符 ≈ 3,057 token/轮（−486，−13.7%）**；全量注册仍是 21 工具 ≈ 4,384。
+- **两个诊断工具改为门控**：`browser_console_messages` / `browser_network_requests` 不再常驻 —— 新增 `tool.diagnostics: false`（默认关），开启后才注册。常驻成本 **18 工具 12,755 字符 ≈ 3,543 token/轮 → 16 工具 11,179 字符 ≈ 3,105 token/轮（−438，−12.4%）**；全量注册仍是 21 工具 15,782 字符 ≈ 4,384。
 - **快照瘦身（运行时大头）**：无名无状态的 `generic` 包装层不再逐层输出（真实页面常把一个链接包在 7~8 层 div 里），显示用 `href` 去掉追踪参数（`utm_*` / `gclid` / `rsv_*` / `sa` 等）并截到 160 字符。百度结果页形状的样本：**6,169 → 2,557 字符（−58.6%）**，行数 108 → 24。refs 与点击行为不变 —— 省的是模型读到的东西。
 - 闸门写入块改为**整行 config**（新标记 `# >>> dsh-browser:`），并兼容旧的 `dsh-browser-toggle` 标记就地替换 —— 避免同一个 id 被两段 patch 争抢。
 - `scripts/shipped-gates.mjs` 按新行名读取出厂闸门；`scripts/build-client.mjs` 把 `client/client.js` 复制进 `lib/`。

package/README.md

@@ -227,7 +227,7 @@ All tunables are patchable through the profile's `cordis.patch.yml` (later layer
         headless: false                   # visible window you can watch and rescue
         persistent: true                  # profile-backed window, login survives close
         # profileDir: ~/.dsh/browser-profiles/playwright by default
-        viewport: { width: 1280, height: 800 }
+        viewport: { width: 1280, height: 800 }   # headful: IGNORED (the window tracks the desktop; only headless: true pins it)
         navigationTimeoutMs: 30000
         ignoreHTTPSErrors: false
       allowedDomains: []                  # e.g. ['github.com'] restricts navigation
@@ -431,6 +431,7 @@ links below go to GitHub rather than to files inside the package:
         registerDisabledTools: false
         maxWaitMs: 60000
   ```
+- **`launch.viewport` only applies headless** — the visible window is a real window: it tracks the desktop size (`browser-lifecycle.ts` passes `viewport: null` in headful), so setting 1280×800 there changes nothing. Pin the size by running `headless: true`, or resize the window itself.
 - **Chromium family only** — Firefox/WebKit channels are not probed; providers are swappable if another engine is needed.
 - **Extract needs a dedicated model route** — it does not reuse the main request's route; misconfiguration fails loudly at call time.
 - **JS-driven navigations are not statically checkable** — `allowedDomains` covers `browser_navigate`, `browser_open_tab`, every navigating click (`browser_click`: `ref`, `text`, `precise` and raw-coordinate modes) and `browser_switch_tab`; `mode: "hover"` reveals content without activating anything, so it is not checked against the URL policy. A button whose handler runs `location.href = …` can still leave the allowed hosts, and so can a `<form>` whose `action` points at another host (pressing its submit button is a navigation this check does not statically see), and a tab that is already sitting on a disallowed host stays open (the agent simply refuses to drive it); deploy an external network guard for hard isolation.

package/lib/client.js

@@ -176,6 +176,11 @@ window.__ModuleLoader__.load({
                 label: '允许在页面里执行任意 JavaScript',
                 hint: '打开后 AI 能在任意网页里运行脚本：能读走页面上的任何内容，也能用你的登录状态去点、去填、去提交。真正需要时才打开。',
             },
+            {
+                key: 'diagnostics',
+                label: '诊断工具：控制台消息与网络请求',
+                hint: '给排障用：能读出页面控制台的报错和最近的网络请求（URL、状态、失败原因）。平时用不到；遇到"点了没反应"或"背后的请求失败了"再打开。',
+            },
             {
                 key: 'allowCdp',
                 label: '允许原始 CDP 调试协议',
@@ -224,13 +229,14 @@ window.__ModuleLoader__.load({
             const [enabled, setEnabled] = useState(null);
             const [engine, setEngine] = useState(null);
             const [engineUserChosen, setEngineUserChosen] = useState(false);
-            const [gates, setGates] = useState({ allowEvaluate: null, allowCdp: null });
+            const [gates, setGates] = useState({ allowEvaluate: null, allowCdp: null, diagnostics: null });
             const [busy, setBusy] = useState(false);
             const [msg, setMsg] = useState('');
             const [logins, setLogins] = useState(null);
             const [showAll, setShowAll] = useState(false);
             const [openGroups, setOpenGroups] = useState([]);
             const [hiddenDomains, setHiddenDomains] = useState(readHiddenDomains());
+            const [loginsOpen, setLoginsOpen] = useState(false);
             const mountedRef = useRef(true);
 
             const refresh = async () => {
@@ -245,6 +251,7 @@ window.__ModuleLoader__.load({
                     setGates({
                         allowEvaluate: typeof s.allowEvaluate === 'boolean' ? s.allowEvaluate : null,
                         allowCdp: typeof s.allowCdp === 'boolean' ? s.allowCdp : null,
+                        diagnostics: typeof s.diagnostics === 'boolean' ? s.diagnostics : null,
                     });
                 }
                 catch (error) {
@@ -333,16 +340,21 @@ window.__ModuleLoader__.load({
                 const payload = {
                     allowEvaluate: gates.allowEvaluate === true,
                     allowCdp: gates.allowCdp === true,
+                    diagnostics: gates.diagnostics === true,
                 };
                 payload[key] = next;
                 try {
                     const r = await api('/gates', 'POST', payload);
                     if (r && r.error)
                         throw new Error(r.error.message || r.error.code || 'unknown');
-                    setGates({ allowEvaluate: r.allowEvaluate === true, allowCdp: r.allowCdp === true });
+                    setGates({
+                        allowEvaluate: r.allowEvaluate === true,
+                        allowCdp: r.allowCdp === true,
+                        diagnostics: r.diagnostics === true,
+                    });
                     setMsg(r.changed
                         ? (next
-                            ? '已打开：' + (key === 'allowEvaluate' ? '页面任意 JS' : '原始 CDP') + '。工具会在热重载后出现（约 1-2 秒）；若一直没出现，重启一次 DSH。'
+                            ? '已打开：' + ((GATE_ROWS.find((row) => row.key === key) || {}).label || key) + '。工具会在热重载后出现（约 1-2 秒）；若一直没出现，重启一次 DSH。'
                             : '已关闭。工具会在热重载后消失；若还在，重启一次 DSH。')
                         : '状态未变化');
                 }
@@ -425,15 +437,25 @@ window.__ModuleLoader__.load({
                     gates.allowEvaluate === null && gates.allowCdp === null
                         ? h('span', { key: 'unknown', style: S.tip }, '当前：读取不到（这个 profile 里的插件版本还没上报闸门状态）')
                         : h('span', { key: 'sum', style: S.tip }, '当前：' + (gatesOn === 0 ? '都关着' : gatesOn + ' 个开着'))),
-                h('div', { key: 'loginsGroup', style: S.group }, '已登录的站点（只给你自己看）'),
-                h(Notes, { key: 'loginsNotes', title: '说明' },
+                h('div', {
+                    key: 'loginsGroup',
+                    style: { ...S.group, cursor: 'pointer', userSelect: 'none' },
+                    onClick: () => setLoginsOpen((open) => !open),
+                }, '已登录的站点（只给你自己看）'
+                    + (logins === null || logins.sites === undefined
+                        ? ''
+                        : '　· ' + logins.sites.length + ' 个域 · ' + logins.sites.reduce((acc, site) => acc + site.cookies, 0) + ' 个 cookie')
+                    + (loginsOpen ? '　▾ 点击收起' : '　▸ 点击展开')),
+                loginsOpen ? h(Notes, { key: 'loginsNotes', title: '说明' },
                     h('p', { style: S.note },
                         '只列**这台浏览器真的访问过**的域（你在 DSH 里打开过的页面），第三方统计/广告域已排除 ——'
                         + '别人的 cookie 属于你当时浏览的那个站，不代表你登录了它。判据是 OWASP 的会话特征：'
                         + 'httpOnly 且（会话级 或 值像令牌），名字不作为依据。'
                         + '每一行的说明来自网页自己的标题，或一份离线对照表（认不出的就直接显示域名，不编）。'
-                        + '这里不显示 cookie 的名字和值；名单只存在于本机内存、不写磁盘；也没有任何工具能让 AI 看到它。')),
-                logins === null
+                        + '这里不显示 cookie 的名字和值；名单只存在于本机内存、不写磁盘；也没有任何工具能让 AI 看到它。')) : null,
+                loginsOpen === false
+                    ? null
+                    : logins === null
                     ? h('div', { key: 'loginsUnknown', style: S.tip },
                         '读取不到：这个 profile 里的插件版本还没上报，或还没打开过浏览器。')
                     : (() => {

package/lib/gates-patch.d.ts

@@ -16,15 +16,17 @@ export declare function homePatchPath(env?: NodeJS.ProcessEnv): string;
  *
  * @param allowEvaluate - register browser_evaluate
  * @param allowCdp - register browser_cdp
+ * @param diagnostics - register the two diagnostics tools
  * @returns the YAML block, markers included
  */
-export declare function renderBrowserBlock(allowEvaluate: boolean, allowCdp: boolean): string;
+export declare function renderBrowserBlock(allowEvaluate: boolean, allowCdp: boolean, diagnostics: boolean): string;
 /** Merge the managed block into `original`, replacing an existing one in place. */
-export declare function mergeBrowserBlock(original: string, allowEvaluate: boolean, allowCdp: boolean): string;
+export declare function mergeBrowserBlock(original: string, allowEvaluate: boolean, allowCdp: boolean, diagnostics: boolean): string;
 /** Read the current managed block, or undefined when there is none. */
 export declare function parseBrowserBlock(text: string): {
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 } | undefined;
 /** Back-compat aliases used by the absorbed settings-card host half. */
 export declare const parseGatesBlock: typeof parseBrowserBlock;
@@ -39,8 +41,9 @@ export declare const mergeGatesBlock: typeof mergeBrowserBlock;
  * @param env - environment (DSH_HOME override for tests)
  * @returns the file written and the values it now carries
  */
-export declare function writeGates(allowEvaluate: boolean, allowCdp: boolean, env?: NodeJS.ProcessEnv): Promise<{
+export declare function writeGates(allowEvaluate: boolean, allowCdp: boolean, diagnostics: boolean, env?: NodeJS.ProcessEnv): Promise<{
     patch: string;
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 }>;

package/lib/gates-patch.js

@@ -41,9 +41,10 @@ export function homePatchPath(env = process.env) {
  *
  * @param allowEvaluate - register browser_evaluate
  * @param allowCdp - register browser_cdp
+ * @param diagnostics - register the two diagnostics tools
  * @returns the YAML block, markers included
  */
-export function renderBrowserBlock(allowEvaluate, allowCdp) {
+export function renderBrowserBlock(allowEvaluate, allowCdp, diagnostics) {
     return [
         BEGIN,
         '# allowEvaluate: 注册 browser_evaluate（页面任意 JS，能用你的登录态操作网站）',
@@ -72,6 +73,7 @@ export function renderBrowserBlock(allowEvaluate, allowCdp) {
         '      toolPrefix: "browser_"',
         '      allowEvaluate: ' + (allowEvaluate ? 'true' : 'false'),
         '      allowCdp: ' + (allowCdp ? 'true' : 'false'),
+        '      diagnostics: ' + (diagnostics ? 'true' : 'false'),
         '      registerDisabledTools: false',
         '      diagnostics: false',
         '      maxWaitMs: 60000',
@@ -98,8 +100,8 @@ function findBlock(original) {
     return undefined;
 }
 /** Merge the managed block into `original`, replacing an existing one in place. */
-export function mergeBrowserBlock(original, allowEvaluate, allowCdp) {
-    const block = renderBrowserBlock(allowEvaluate, allowCdp);
+export function mergeBrowserBlock(original, allowEvaluate, allowCdp, diagnostics) {
+    const block = renderBrowserBlock(allowEvaluate, allowCdp, diagnostics);
     const found = findBlock(original);
     if (found !== undefined)
         return original.slice(0, found.start) + block + original.slice(found.after);
@@ -115,7 +117,12 @@ export function parseBrowserBlock(text) {
     const cdp = /allowCdp:\s*(true|false)/.exec(body);
     if (evaluate === null || cdp === null)
         return undefined;
-    return { allowEvaluate: evaluate[1] === 'true', allowCdp: cdp[1] === 'true' };
+    const diag = /diagnostics:\s*(true|false)/.exec(body);
+    return {
+        allowEvaluate: evaluate[1] === 'true',
+        allowCdp: cdp[1] === 'true',
+        diagnostics: diag === null ? false : diag[1] === 'true',
+    };
 }
 /** Back-compat aliases used by the absorbed settings-card host half. */
 export const parseGatesBlock = parseBrowserBlock;
@@ -130,7 +137,7 @@ export const mergeGatesBlock = mergeBrowserBlock;
  * @param env - environment (DSH_HOME override for tests)
  * @returns the file written and the values it now carries
  */
-export async function writeGates(allowEvaluate, allowCdp, env = process.env) {
+export async function writeGates(allowEvaluate, allowCdp, diagnostics, env = process.env) {
     const file = homePatchPath(env);
     let original = '';
     try {
@@ -139,7 +146,7 @@ export async function writeGates(allowEvaluate, allowCdp, env = process.env) {
     catch {
         original = '';
     }
-    const next = mergeBrowserBlock(original, allowEvaluate, allowCdp);
+    const next = mergeBrowserBlock(original, allowEvaluate, allowCdp, diagnostics);
     if (original !== '')
         await copyFile(file, file + '.bak-browser-toggle').catch(() => { });
     const tmp = file + '.tmp-browser-toggle';
@@ -147,12 +154,15 @@ export async function writeGates(allowEvaluate, allowCdp, env = process.env) {
     await rename(tmp, file);
     const check = await readFile(file, 'utf8');
     const parsed = parseBrowserBlock(check);
-    if (parsed === undefined || parsed.allowEvaluate !== allowEvaluate || parsed.allowCdp !== allowCdp) {
+    if (parsed === undefined ||
+        parsed.allowEvaluate !== allowEvaluate ||
+        parsed.allowCdp !== allowCdp ||
+        parsed.diagnostics !== diagnostics) {
         if (original !== '') {
             await writeFile(file, original, 'utf8');
             throw new Error('patch self-check failed after write; previous content restored');
         }
         throw new Error('patch self-check failed after write');
     }
-    return { patch: file, allowEvaluate, allowCdp };
+    return { patch: file, allowEvaluate, allowCdp, diagnostics };
 }

package/lib/runtime-state.d.ts

@@ -64,11 +64,13 @@ export declare function isEngineUserChosen(): boolean;
 export declare function publishGates(gates: {
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 }): void;
 /** The published gates, or undefined while the tool family has not been applied. */
 export declare function getGates(): {
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 } | undefined;
 /**
  * The last computed "which sites look logged in" summary, or undefined before anything

package/lib/runtime-state.js

@@ -149,7 +149,11 @@ export function isEngineUserChosen() {
  * @param gates - whether browser_evaluate / browser_cdp are registered.
  */
 export function publishGates(gates) {
-    _gates = { allowEvaluate: gates.allowEvaluate === true, allowCdp: gates.allowCdp === true };
+    _gates = {
+        allowEvaluate: gates.allowEvaluate === true,
+        allowCdp: gates.allowCdp === true,
+        diagnostics: gates.diagnostics === true,
+    };
 }
 /** The published gates, or undefined while the tool family has not been applied. */
 export function getGates() {

package/lib/settings-card.js

@@ -135,6 +135,7 @@ export function apply(ctx) {
                 // provider build in this profile is too old to report them.
                 allowEvaluate: gates ? gates.allowEvaluate : null,
                 allowCdp: gates ? gates.allowCdp : null,
+                diagnostics: gates ? gates.diagnostics : null,
                 // What the user's own layer says right now. Differs from the above
                 // between a write and the live reload that applies it.
                 patchGates: managedBlockGates() ?? null,
@@ -209,6 +210,8 @@ export function apply(ctx) {
             catch {
                 return sendJson(res, 400, { error: { code: 'INVALID_JSON', message: 'body must be JSON' } });
             }
+            if (typeof payload.diagnostics !== 'boolean')
+                payload.diagnostics = false;
             if (typeof payload.allowEvaluate !== 'boolean' || typeof payload.allowCdp !== 'boolean')
                 return sendJson(res, 400, {
                     error: {
@@ -217,16 +220,20 @@ export function apply(ctx) {
                     },
                 });
             const before = readGates();
-            if (before && before.allowEvaluate === payload.allowEvaluate && before.allowCdp === payload.allowCdp)
+            if (before &&
+                before.allowEvaluate === payload.allowEvaluate &&
+                before.allowCdp === payload.allowCdp &&
+                before.diagnostics === payload.diagnostics)
                 return sendJson(res, 200, { ...before, changed: false, patch: null });
             try {
-                const written = await writeGates(payload.allowEvaluate, payload.allowCdp);
+                const written = await writeGates(payload.allowEvaluate, payload.allowCdp, payload.diagnostics);
                 // The effective values only move once the loader re-applies the tree
                 // (profile patchReload: live); report what was written, and let the
                 // panel's next /state poll show whether it took effect.
                 sendJson(res, 200, {
                     allowEvaluate: written.allowEvaluate,
                     allowCdp: written.allowCdp,
+                    diagnostics: written.diagnostics,
                     changed: true,
                     patch: written.patch,
                 });

package/lib/tool.js

@@ -60,7 +60,11 @@ export function apply(ctx, config) {
     // home-level patch), so the tool family publishes it at registration and the
     // switch shows the truth instead of a guess. Driven by the same values that
     // decided which tools register, so the two can never disagree.
-    publishGates({ allowEvaluate: registered.has('evaluate'), allowCdp: registered.has('cdp') });
+    publishGates({
+        allowEvaluate: registered.has('evaluate'),
+        allowCdp: registered.has('cdp'),
+        diagnostics: registered.has('console_messages'),
+    });
     /** Register one gated tool only when this configuration keeps it live. */
     const registerMaybe = (suffix, definition) => {
         if (registered.has(suffix))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-browser-playwright-codex",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Browser automation for DeepSeek Harness, one plugin: fill in forms, scrape lists and work across tabs in real pages, using the logins you already have. Runs in a visible window that stays quiet when minimised; native dialogs are parked instead of confirmed, CAPTCHA pages are flagged with a note that says stop and hand the page back, password / one-time-code / card fields are refused by browser_fill, and the Settings card (enable/disable, page-reading mode, capability gates) now lives inside this package.",
   "license": "MIT",
   "type": "module",