dsh-browser-playwright-codex 0.7.0 → 0.7.2

package/CHANGELOG.md

@@ -1,8 +1,35 @@
+## 0.7.2 — 2026-10-19
+
+一句话摘要：**设置卡推倒重做** —— 用户要求按 DSH 设置页规范重新设计：首屏只留「主开关 + 三个分区摘要」，所有长说明收进折叠。0.7.1 因卡在 npm staged 状态作废（版本号让给这一版）。
+
+### Changed
+
+- **设置卡重做**：主开关一行；「页面读取方式」两个紧凑单选项 + 一个「两种模式到底差在哪」折叠；「工具权限」三个开关（任意 JS / 原始 CDP / 诊断工具）+ 一个「这些开关具体放行什么」折叠，标题行直接显示「N / 3 已开启」；「已登录的站点」默认收起，标题行只给「N 个域 · M 个 cookie」，展开后仍按公司分组折叠。名单每行只保留域名 + 说明 + cookie 数，逐个站点的四个 OWASP 信号不再塞在主视图里。
+- 卡片文案统一为"人话"，不再出现 evaluate / cdp / 引擎 / legacy / aria 这些词。
+
 # Changelog
 
 Bilingual by intent: the version headings and the summary of each release are given in both
 languages, the individual entries follow the language the surrounding code and docs use.
 
+## 0.7.1 — 2026-10-19
+
+一句话摘要：**只修文档与一处口径** —— 外部评分（8.9/10）点名的问题：CHANGELOG 的数字手写写错、对比表把五个闸门写成三个、有头模式的 viewport 仍然不生效却没标注。行为零变化。
+
+### Added
+
+- **设置卡新增第三个工具开关：诊断工具**（`browser_console_messages` / `browser_network_requests`）。与 `evaluate` / `cdp` 同一套机制：`POST /api/browser-playwright/gates` 现在接受 `diagnostics`，home 补丁块的整行 config 一并写入，`tool.ts` 把**实际生效值**（而不是猜的）发布给卡片；卡片上显示"当前：N 个开着"也把这一项算进去。
+- **「已登录的站点」默认折叠**：标题行直接给出「N 个域 · M 个 cookie · 点击展开」，点开才渲染说明与名单（分组仍各自折叠）。设置页不再被这份名单占掉大半屏。
+
+### Fixed
+
+- **CHANGELOG 0.7.0 的数字按实测改正**：常驻是 **16 工具 / 11,179 字符**（此前手写成 11,005 字符，token 数也跟着漂），对比基线 18 工具 / 12,755 字符保持不变，字符降幅 **−1,576（−12.4%）**。这是连续第三个版本出现"主文档被守卫钉住、CHANGELOG 叙事手写漂移"——本轮起新增加一条守卫：**最新一节 CHANGELOG 不许出现手写的 `≈ N token/轮` 数字**，要写就写实测命令与结果表。
+- **对比与优势.md 的闸门清单**："五个闸门"此前只列了 `evaluate` / `cdp` / `extract` 三个名字，补上 `console_messages` / `network_requests`，并把它与全量注册的字符差从旧的 2,853 更正为实测 4,603 字符（token 换算见 README 成本表）。
+
+### Changed
+
+- **有头模式的 `viewport` 标注**：`browser-lifecycle.ts:44` 用 `viewport: null` 跟随真实窗口，所以 `launch.viewport` 只在 `headless: true` 时生效；README 配置示例与 Known Limitations 现在明写这一点（此前"配了也不生效"没有任何提示，被外部评分连续四次点出）。
+
 ## 0.7.0 — 2026-10-19
 
 一句话摘要：**两个插件合成一个** —— 设置卡片并入本包；加载行从三行收成一行（这是 `dsh-client-modules` 允许本包带 client 模块的前提），独立的 `dsh-browser-toggle` 退役。
@@ -19,7 +46,7 @@ languages, the individual entries follow the language the surrounding code and d
 
 ### Changed
 
-- **两个诊断工具改为门控**：`browser_console_messages` / `browser_network_requests` 不再常驻 —— 新增 `tool.diagnostics: false`（默认关），开启后才注册。常驻成本 **18 工具 12,755 字符 ≈ 3,543 token/轮 → 16 工具 11,005 字符 ≈ 3,057 token/轮（−486，−13.7%）**；全量注册仍是 21 工具 ≈ 4,384。
+- **两个诊断工具改为门控**：`browser_console_messages` / `browser_network_requests` 不再常驻 —— 新增 `tool.diagnostics: false`（默认关），开启后才注册。常驻成本 **18 工具 12,755 字符 ≈ 3,543 token/轮 → 16 工具 11,179 字符 ≈ 3,105 token/轮（−438，−12.4%）**；全量注册仍是 21 工具 15,782 字符 ≈ 4,384。
 - **快照瘦身（运行时大头）**：无名无状态的 `generic` 包装层不再逐层输出（真实页面常把一个链接包在 7~8 层 div 里），显示用 `href` 去掉追踪参数（`utm_*` / `gclid` / `rsv_*` / `sa` 等）并截到 160 字符。百度结果页形状的样本：**6,169 → 2,557 字符（−58.6%）**，行数 108 → 24。refs 与点击行为不变 —— 省的是模型读到的东西。
 - 闸门写入块改为**整行 config**（新标记 `# >>> dsh-browser:`），并兼容旧的 `dsh-browser-toggle` 标记就地替换 —— 避免同一个 id 被两段 patch 争抢。
 - `scripts/shipped-gates.mjs` 按新行名读取出厂闸门；`scripts/build-client.mjs` 把 `client/client.js` 复制进 `lib/`。

package/README.md

@@ -227,7 +227,7 @@ All tunables are patchable through the profile's `cordis.patch.yml` (later layer
         headless: false                   # visible window you can watch and rescue
         persistent: true                  # profile-backed window, login survives close
         # profileDir: ~/.dsh/browser-profiles/playwright by default
-        viewport: { width: 1280, height: 800 }
+        viewport: { width: 1280, height: 800 }   # headful: IGNORED (the window tracks the desktop; only headless: true pins it)
         navigationTimeoutMs: 30000
         ignoreHTTPSErrors: false
       allowedDomains: []                  # e.g. ['github.com'] restricts navigation
@@ -431,6 +431,7 @@ links below go to GitHub rather than to files inside the package:
         registerDisabledTools: false
         maxWaitMs: 60000
   ```
+- **`launch.viewport` only applies headless** — the visible window is a real window: it tracks the desktop size (`browser-lifecycle.ts` passes `viewport: null` in headful), so setting 1280×800 there changes nothing. Pin the size by running `headless: true`, or resize the window itself.
 - **Chromium family only** — Firefox/WebKit channels are not probed; providers are swappable if another engine is needed.
 - **Extract needs a dedicated model route** — it does not reuse the main request's route; misconfiguration fails loudly at call time.
 - **JS-driven navigations are not statically checkable** — `allowedDomains` covers `browser_navigate`, `browser_open_tab`, every navigating click (`browser_click`: `ref`, `text`, `precise` and raw-coordinate modes) and `browser_switch_tab`; `mode: "hover"` reveals content without activating anything, so it is not checked against the URL policy. A button whose handler runs `location.href = …` can still leave the allowed hosts, and so can a `<form>` whose `action` points at another host (pressing its submit button is a navigation this check does not statically see), and a tab that is already sitting on a disallowed host stays open (the agent simply refuses to drive it); deploy an external network guard for hard isolation.

package/lib/client.js

@@ -176,6 +176,11 @@ window.__ModuleLoader__.load({
                 label: '允许在页面里执行任意 JavaScript',
                 hint: '打开后 AI 能在任意网页里运行脚本：能读走页面上的任何内容，也能用你的登录状态去点、去填、去提交。真正需要时才打开。',
             },
+            {
+                key: 'diagnostics',
+                label: '诊断工具：控制台消息与网络请求',
+                hint: '给排障用：能读出页面控制台的报错和最近的网络请求（URL、状态、失败原因）。平时用不到；遇到"点了没反应"或"背后的请求失败了"再打开。',
+            },
             {
                 key: 'allowCdp',
                 label: '允许原始 CDP 调试协议',
@@ -224,13 +229,14 @@ window.__ModuleLoader__.load({
             const [enabled, setEnabled] = useState(null);
             const [engine, setEngine] = useState(null);
             const [engineUserChosen, setEngineUserChosen] = useState(false);
-            const [gates, setGates] = useState({ allowEvaluate: null, allowCdp: null });
+            const [gates, setGates] = useState({ allowEvaluate: null, allowCdp: null, diagnostics: null });
             const [busy, setBusy] = useState(false);
             const [msg, setMsg] = useState('');
             const [logins, setLogins] = useState(null);
             const [showAll, setShowAll] = useState(false);
             const [openGroups, setOpenGroups] = useState([]);
             const [hiddenDomains, setHiddenDomains] = useState(readHiddenDomains());
+            const [loginsOpen, setLoginsOpen] = useState(false);
             const mountedRef = useRef(true);
 
             const refresh = async () => {
@@ -245,6 +251,7 @@ window.__ModuleLoader__.load({
                     setGates({
                         allowEvaluate: typeof s.allowEvaluate === 'boolean' ? s.allowEvaluate : null,
                         allowCdp: typeof s.allowCdp === 'boolean' ? s.allowCdp : null,
+                        diagnostics: typeof s.diagnostics === 'boolean' ? s.diagnostics : null,
                     });
                 }
                 catch (error) {
@@ -333,16 +340,21 @@ window.__ModuleLoader__.load({
                 const payload = {
                     allowEvaluate: gates.allowEvaluate === true,
                     allowCdp: gates.allowCdp === true,
+                    diagnostics: gates.diagnostics === true,
                 };
                 payload[key] = next;
                 try {
                     const r = await api('/gates', 'POST', payload);
                     if (r && r.error)
                         throw new Error(r.error.message || r.error.code || 'unknown');
-                    setGates({ allowEvaluate: r.allowEvaluate === true, allowCdp: r.allowCdp === true });
+                    setGates({
+                        allowEvaluate: r.allowEvaluate === true,
+                        allowCdp: r.allowCdp === true,
+                        diagnostics: r.diagnostics === true,
+                    });
                     setMsg(r.changed
                         ? (next
-                            ? '已打开：' + (key === 'allowEvaluate' ? '页面任意 JS' : '原始 CDP') + '。工具会在热重载后出现（约 1-2 秒）；若一直没出现，重启一次 DSH。'
+                            ? '已打开：' + ((GATE_ROWS.find((row) => row.key === key) || {}).label || key) + '。工具会在热重载后出现（约 1-2 秒）；若一直没出现，重启一次 DSH。'
                             : '已关闭。工具会在热重载后消失；若还在，重启一次 DSH。')
                         : '状态未变化');
                 }
@@ -360,18 +372,26 @@ window.__ModuleLoader__.load({
             const statusLabel = enabled === null ? '读取中…' : (enabled ? '已启用' : '已禁用');
             const current = ENGINE_OPTIONS.find((o) => o.id === engine) || null;
 
+            const GATE_SHORT = {
+                allowEvaluate: '页面里的任意 JavaScript',
+                allowCdp: '原始 CDP 调试协议',
+                diagnostics: '控制台消息 / 网络请求',
+            };
+            const ENGINE_SHORT = { legacy: '最稳，奇怪网站也不容易出错', aria: '更准，复杂页面优先' };
+
             return h('div', { style: S.page }, [
                 h('h2', { key: 'title', style: S.title }, '浏览器'),
                 h('p', { key: 'intro', style: S.intro },
-                    '让 AI 用你的登录状态替你上网办事（查后台、填表、抓列表）。这里的改动立刻生效，不需要重启。'),
+                    '让 AI 用你的登录状态替你上网办事。这里的改动立刻生效，不需要重启。'),
+
+                // ---- 主开关 ----
                 h('div', { key: 'row', style: S.row }, [
                     h(Dot, { key: 'dot', state }),
                     h('div', { key: 'text', style: { flex: 1, minWidth: 0 } }, [
                         h('div', { key: 'label', style: S.rowTitle }, '允许 AI 操作网页'),
-                        h('div', { key: 'desc', style: S.rowDesc }, [
+                        h('div', { key: 'desc', style: S.rowDesc },
                             h(Tag, { key: 'status' }, statusLabel),
-                            '　关闭后已打开的窗口会自动关闭，登录状态会保留。',
-                        ]),
+                            '关闭后窗口会关掉，登录状态保留。'),
                     ]),
                     h(Toggle, {
                         key: 'toggle',
@@ -381,37 +401,40 @@ window.__ModuleLoader__.load({
                         label: '允许 AI 操作网页',
                     }),
                 ]),
-                h('div', { key: 'group', style: S.group }, '页面识别方式'),
-                h(Notes, { key: 'groupNotes', title: '说明' },
-                    h('p', { style: S.note },
-                        '决定它怎么"看"一个网页：页面上有哪些能点的、能填的。两种都能正常用，选哪个看你常去的网站。')),
-                h('div', { key: 'engines', style: { ...S.list, marginTop: 8 } }, ENGINE_OPTIONS.map((o) =>
-                    h(RadioRow, {
+
+                // ---- 页面读取方式 ----
+                h('div', { key: 'engineGroup', style: S.group }, [
+                    '页面读取方式',
+                    h('span', { key: 'cur', style: S.groupCount },
+                        current ? '　当前：' + current.label : '　读取中…'),
+                ]),
+                h('div', { key: 'engines', style: { ...S.list, marginTop: 8 } },
+                    ENGINE_OPTIONS.map((o) => h(RadioRow, {
                         key: o.id,
-                        p: o,
+                        p: { id: o.id, label: o.label, hint: ENGINE_SHORT[o.id] || '' },
                         selected: engine === o.id,
                         disabled: engine === null || busy,
                         onPick: chooseEngine,
                     }))),
-                h('div', { key: 'footer', style: S.footer }, [
-                    h(Btn, { key: 'refresh', onClick: refresh, disabled: busy }, '刷新状态'),
-                    current
-                        ? h('span', { key: 'cur', style: S.tip },
-                            '当前：' + current.label + (engineUserChosen ? '（你选的）' : '（默认）'))
-                        : null,
+                h(Notes, {
+                    key: 'engineNotes',
+                    title: '两种模式到底差在哪',
+                    children: h('div', null, ENGINE_OPTIONS.map((o) => h('p', { key: o.id, style: S.note },
+                        o.label + '：' + o.hint))),
+                }),
+
+                // ---- 工具权限 ----
+                h('div', { key: 'gateGroup', style: S.group }, [
+                    '工具权限',
+                    h('span', { key: 'sum', style: S.groupCount },
+                        gatesOn === 0 ? '　全部关闭' : '　' + gatesOn + ' / ' + GATE_ROWS.length + ' 已开启'),
                 ]),
-                h('div', { key: 'gatesGroup', style: S.group }, '强力工具（默认关闭）'),
-                h(Notes, { key: 'gatesNotes', title: '说明' },
-                    h('p', { style: S.note },
-                        '这两个开关控制的是"能力"，不是效果微调：打开"任意 JavaScript"就等于把页面里的东西都交给 AI。'
-                        + '插件包里默认关闭 —— 因为包是发给每个安装者的，默认打开等于替所有人做了这个决定；'
-                        + '这里打开的是你自己机器上的选择，记在你自己机器的配置层里。')),
-                h('div', { key: 'gates', style: { ...S.list, marginTop: 8 } }, GATE_ROWS.map((row) =>
-                    h('div', { key: row.key, style: S.row }, [
+                h('div', { key: 'gates', style: { ...S.list, marginTop: 8 } },
+                    GATE_ROWS.map((row) => h('div', { key: row.key, style: S.row }, [
                         h(Dot, { key: 'dot', state: gateState(row.key) }),
                         h('div', { key: 'text', style: { flex: 1, minWidth: 0 } }, [
                             h('div', { key: 'label', style: S.rowTitle }, row.label),
-                            h('div', { key: 'desc', style: S.rowDesc }, row.hint),
+                            h('div', { key: 'desc', style: S.rowDesc }, GATE_SHORT[row.key] || row.hint),
                         ]),
                         h(Toggle, {
                             key: 'toggle',
@@ -421,34 +444,54 @@ window.__ModuleLoader__.load({
                             label: row.label,
                         }),
                     ]))),
-                h('div', { key: 'gatesFooter', style: S.footer },
-                    gates.allowEvaluate === null && gates.allowCdp === null
-                        ? h('span', { key: 'unknown', style: S.tip }, '当前：读取不到（这个 profile 里的插件版本还没上报闸门状态）')
-                        : h('span', { key: 'sum', style: S.tip }, '当前：' + (gatesOn === 0 ? '都关着' : gatesOn + ' 个开着'))),
-                h('div', { key: 'loginsGroup', style: S.group }, '已登录的站点（只给你自己看）'),
-                h(Notes, { key: 'loginsNotes', title: '说明' },
+                h(Notes, {
+                    key: 'gateNotes',
+                    title: '这些开关具体放行什么',
+                    children: h('div', null, [
+                        h('p', { key: 'evaluate', style: S.note },
+                            '页面里执行任意 JavaScript：能读走页面内容，也能用你的登录状态去点、去填、去提交。真正需要时才打开。'),
+                        h('p', { key: 'cdp', style: S.note },
+                            '原始 CDP 协议：只放行查看类和模拟输入类命令；读 Cookie/存储、改网络、动安全设置一律被拦。排查疑难页面用。'),
+                        h('p', { key: 'diagnostics', style: S.note },
+                            '控制台消息 + 网络请求：能读出页面报错和最近的请求（URL、状态、失败原因）。平时用不到，遇到"点了没反应"再打开。'),
+                        h('p', { key: 'effect', style: S.note },
+                            '工具在热重载后出现或消失（约 1-2 秒）；若一直没变，重启一次 DSH。'),
+                    ]),
+                }),
+
+                // ---- 已登录站点（默认收起） ----
+                h('div', {
+                    key: 'loginsGroup',
+                    style: { ...S.group, cursor: 'pointer', userSelect: 'none' },
+                    onClick: () => setLoginsOpen((open) => !open),
+                }, [
+                    '已登录的站点',
+                    h('span', { key: 'count', style: S.groupCount },
+                        logins === null || logins.sites === undefined
+                            ? '　读取中…'
+                            : '　' + logins.sites.length + ' 个域 · '
+                              + logins.sites.reduce((acc, site) => acc + site.cookies, 0) + ' 个 cookie'),
+                    h('span', { key: 'hint', style: { ...S.groupCount, marginLeft: 8 } },
+                        loginsOpen ? '点击收起' : '点击展开'),
+                ]),
+                loginsOpen ? h(Notes, { key: 'loginsNotes', title: '这份名单怎么来的' },
                     h('p', { style: S.note },
-                        '只列**这台浏览器真的访问过**的域（你在 DSH 里打开过的页面），第三方统计/广告域已排除 ——'
-                        + '别人的 cookie 属于你当时浏览的那个站，不代表你登录了它。判据是 OWASP 的会话特征：'
-                        + 'httpOnly 且（会话级 或 值像令牌），名字不作为依据。'
-                        + '每一行的说明来自网页自己的标题，或一份离线对照表（认不出的就直接显示域名，不编）。'
-                        + '这里不显示 cookie 的名字和值；名单只存在于本机内存、不写磁盘；也没有任何工具能让 AI 看到它。')),
-                logins === null
+                        '只列这台浏览器真的访问过的域；第三方统计/广告域已排除。判据是 OWASP 的会话特征，'
+                        + '名字不作为依据；不显示 cookie 的名字和值，名单只在本机内存，AI 看不到。')) : null,
+                loginsOpen === false
+                    ? null
+                    : logins === null
                     ? h('div', { key: 'loginsUnknown', style: S.tip },
                         '读取不到：这个 profile 里的插件版本还没上报，或还没打开过浏览器。')
                     : (() => {
                         const pool = showAll ? logins.sites : logins.sites.filter((s) => s.likely);
                         const visible = pool.filter((s) => hiddenDomains.indexOf(s.domain) < 0);
                         const hiddenCount = pool.length - visible.length;
-                        // 同一家公司的域折叠成一行：真实名单里京东系二十来个域各自占一行，小半屏都是它。
                         const byGroup = new Map();
                         const items = [];
                         for (const site of visible) {
                             const key = site.group ? site.group.key : null;
-                            if (key === null) {
-                                items.push({ kind: 'single', site });
-                                continue;
-                            }
+                            if (key === null) { items.push({ kind: 'single', site }); continue; }
                             let group = byGroup.get(key);
                             if (group === undefined) {
                                 group = { kind: 'group', key, label: site.group.label, sites: [] };
@@ -457,7 +500,6 @@ window.__ModuleLoader__.load({
                             }
                             group.sites.push(site);
                         }
-                        // 组里只剩一个域就没有折叠的意义，退回单行。
                         for (let i = items.length - 1; i >= 0; i -= 1) {
                             if (items[i].kind === 'group' && items[i].sites.length === 1)
                                 items[i] = { kind: 'single', site: items[i].sites[0] };
@@ -470,16 +512,12 @@ window.__ModuleLoader__.load({
                             h('div', { key: 'text', style: { flex: 1, minWidth: 0 } }, [
                                 h('div', { key: 'label', style: S.rowTitle }, [
                                     site.likely ? h(Tag, { key: 'tag' }, '推测登录') : null,
-                                    // 说明优先：光看域名认不出来是这个功能最初的痛点。
                                     site.alias || site.title || site.domain,
                                 ]),
                                 h('div', { key: 'desc', style: S.rowDesc },
                                     (site.alias ? site.domain + '　' : '')
                                     + (site.title && site.title !== site.alias ? '「' + site.title + '」　' : '')
-                                    + site.cookies + ' 个 cookie（httpOnly ' + site.httpOnly
-                                    + ' / 会话 ' + site.sessionLike
-                                    + ' / 值像令牌 ' + site.tokenLike + '）'
-                                    + (site.signals.length > 0 ? '　' + site.signals.join(' · ') : '')),
+                                    + site.cookies + ' 个 cookie'),
                             ]),
                             h(Btn, {
                                 key: 'hide',
@@ -493,74 +531,52 @@ window.__ModuleLoader__.load({
                         const renderItem = (item) => {
                             if (item.kind === 'single') return rowFor(item.site, false);
                             const open = openGroups.indexOf(item.key) >= 0;
-                            const anyLikely = item.sites.some((s) => s.likely);
                             return h('div', { key: 'group-' + item.key }, [
                                 h('div', { key: 'head', style: S.row }, [
                                     h('div', { key: 'text', style: { flex: 1, minWidth: 0 } }, [
-                                        h('div', { key: 'label', style: S.rowTitle }, [
-                                            anyLikely ? h(Tag, { key: 'tag' }, '推测登录') : null,
-                                            item.label + '（' + item.sites.length + ' 个域）',
-                                        ]),
+                                        h('div', { key: 'label', style: S.rowTitle },
+                                            item.label + '（' + item.sites.length + ' 个域）'),
                                         h('div', { key: 'desc', style: S.rowDesc },
-                                            sum(item.sites, (s) => s.cookies) + ' 个 cookie　httpOnly '
-                                            + sum(item.sites, (s) => s.httpOnly) + '　会话 '
-                                            + sum(item.sites, (s) => s.sessionLike) + '　值像令牌 '
-                                            + sum(item.sites, (s) => s.tokenLike)),
+                                            sum(item.sites, (s) => s.cookies) + ' 个 cookie'),
                                     ]),
                                     h(Btn, {
                                         key: 'toggle',
-                                        onClick: () => {
-                                            setOpenGroups(open
-                                                ? openGroups.filter((k) => k !== item.key)
-                                                : openGroups.concat([item.key]));
-                                        },
+                                        onClick: () => setOpenGroups(open
+                                            ? openGroups.filter((k) => k !== item.key)
+                                            : openGroups.concat([item.key])),
                                     }, open ? '收起' : '展开'),
                                 ]),
-                                open
-                                    ? h('div', { key: 'members' }, item.sites.map((s) => rowFor(s, true)))
-                                    : null,
+                                open ? h('div', { key: 'members' }, item.sites.map((s) => rowFor(s, true))) : null,
                             ]);
                         };
                         return h('div', { key: 'loginsBody' }, [
                             h('div', { key: 'list', style: { ...S.list, marginTop: 8 } },
                                 visible.length === 0
                                     ? h('div', { key: 'none', style: S.tip },
-                                        hiddenCount > 0
-                                            ? '这一页都被你隐藏了。'
-                                            : '还没发现登录过的站点（用这个浏览器登录过网站后，这里会出现）。')
+                                        hiddenCount > 0 ? '这一页都被你隐藏了。' : '还没发现登录过的站点。')
                                     : items.map(renderItem)),
                             h('div', { key: 'loginsFooter', style: S.footer }, [
                                 h('span', { key: 'src', style: S.tip },
-                                    (logins.source === 'live' ? '实时（浏览器开着）' : '上次快照（浏览器当前没开）')
-                                    + '　' + new Date(logins.capturedAt).toLocaleTimeString()
-                                    + '　你在 DSH 里访问过 ' + logins.total + ' 个域，其中 '
-                                    + logins.likelyTotal + ' 个像登录态'
-                                    + (logins.thirdPartyTotal > 0
-                                        ? '；另有 ' + logins.thirdPartyTotal + ' 个第三方域（统计/广告）已排除'
-                                        : '')
-                                    + (logins.attribution === 'unfiltered'
-                                        ? '（这次没拿到浏览器打开的页面列表，未做第一方过滤：下面可能有第三方域）'
-                                        : '')),
+                                    (logins.source === 'live' ? '实时' : '上次快照')
+                                    + (logins.attribution === 'unfiltered' ? '（未做第一方过滤）' : '')),
                                 h(Btn, {
                                     key: 'all',
                                     onClick: () => setShowAll(!showAll),
-                                }, showAll
-                                    ? '只看像登录态的 ' + logins.likelyTotal + ' 个'
-                                    : '显示其余 ' + (logins.total - logins.likelyTotal) + ' 个'),
-
+                                }, showAll ? '只看像登录态的' : '显示其余 ' + (logins.total - logins.likelyTotal) + ' 个'),
                                 hiddenCount > 0
                                     ? h(Btn, {
                                         key: 'reset',
-                                        onClick: () => {
-                                            setHiddenDomains([]);
-                                            writeHiddenDomains([]);
-                                        },
-                                    }, '恢复显示 ' + hiddenCount + ' 个被隐藏的')
+                                        onClick: () => { setHiddenDomains([]); writeHiddenDomains([]); },
+                                    }, '恢复 ' + hiddenCount + ' 个被隐藏的')
                                     : null,
                             ]),
                         ]);
                     })(),
+
                 msg ? h('div', { key: 'msg', style: S.msg }, msg) : null,
+                h('div', { key: 'foot', style: S.footer }, [
+                    h(Btn, { key: 'refresh', onClick: refresh, disabled: busy }, '刷新状态'),
+                ]),
             ]);
         }
 

package/lib/gates-patch.d.ts

@@ -16,15 +16,17 @@ export declare function homePatchPath(env?: NodeJS.ProcessEnv): string;
  *
  * @param allowEvaluate - register browser_evaluate
  * @param allowCdp - register browser_cdp
+ * @param diagnostics - register the two diagnostics tools
  * @returns the YAML block, markers included
  */
-export declare function renderBrowserBlock(allowEvaluate: boolean, allowCdp: boolean): string;
+export declare function renderBrowserBlock(allowEvaluate: boolean, allowCdp: boolean, diagnostics: boolean): string;
 /** Merge the managed block into `original`, replacing an existing one in place. */
-export declare function mergeBrowserBlock(original: string, allowEvaluate: boolean, allowCdp: boolean): string;
+export declare function mergeBrowserBlock(original: string, allowEvaluate: boolean, allowCdp: boolean, diagnostics: boolean): string;
 /** Read the current managed block, or undefined when there is none. */
 export declare function parseBrowserBlock(text: string): {
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 } | undefined;
 /** Back-compat aliases used by the absorbed settings-card host half. */
 export declare const parseGatesBlock: typeof parseBrowserBlock;
@@ -39,8 +41,9 @@ export declare const mergeGatesBlock: typeof mergeBrowserBlock;
  * @param env - environment (DSH_HOME override for tests)
  * @returns the file written and the values it now carries
  */
-export declare function writeGates(allowEvaluate: boolean, allowCdp: boolean, env?: NodeJS.ProcessEnv): Promise<{
+export declare function writeGates(allowEvaluate: boolean, allowCdp: boolean, diagnostics: boolean, env?: NodeJS.ProcessEnv): Promise<{
     patch: string;
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 }>;

package/lib/gates-patch.js

@@ -41,9 +41,10 @@ export function homePatchPath(env = process.env) {
  *
  * @param allowEvaluate - register browser_evaluate
  * @param allowCdp - register browser_cdp
+ * @param diagnostics - register the two diagnostics tools
  * @returns the YAML block, markers included
  */
-export function renderBrowserBlock(allowEvaluate, allowCdp) {
+export function renderBrowserBlock(allowEvaluate, allowCdp, diagnostics) {
     return [
         BEGIN,
         '# allowEvaluate: 注册 browser_evaluate（页面任意 JS，能用你的登录态操作网站）',
@@ -72,6 +73,7 @@ export function renderBrowserBlock(allowEvaluate, allowCdp) {
         '      toolPrefix: "browser_"',
         '      allowEvaluate: ' + (allowEvaluate ? 'true' : 'false'),
         '      allowCdp: ' + (allowCdp ? 'true' : 'false'),
+        '      diagnostics: ' + (diagnostics ? 'true' : 'false'),
         '      registerDisabledTools: false',
         '      diagnostics: false',
         '      maxWaitMs: 60000',
@@ -98,8 +100,8 @@ function findBlock(original) {
     return undefined;
 }
 /** Merge the managed block into `original`, replacing an existing one in place. */
-export function mergeBrowserBlock(original, allowEvaluate, allowCdp) {
-    const block = renderBrowserBlock(allowEvaluate, allowCdp);
+export function mergeBrowserBlock(original, allowEvaluate, allowCdp, diagnostics) {
+    const block = renderBrowserBlock(allowEvaluate, allowCdp, diagnostics);
     const found = findBlock(original);
     if (found !== undefined)
         return original.slice(0, found.start) + block + original.slice(found.after);
@@ -115,7 +117,12 @@ export function parseBrowserBlock(text) {
     const cdp = /allowCdp:\s*(true|false)/.exec(body);
     if (evaluate === null || cdp === null)
         return undefined;
-    return { allowEvaluate: evaluate[1] === 'true', allowCdp: cdp[1] === 'true' };
+    const diag = /diagnostics:\s*(true|false)/.exec(body);
+    return {
+        allowEvaluate: evaluate[1] === 'true',
+        allowCdp: cdp[1] === 'true',
+        diagnostics: diag === null ? false : diag[1] === 'true',
+    };
 }
 /** Back-compat aliases used by the absorbed settings-card host half. */
 export const parseGatesBlock = parseBrowserBlock;
@@ -130,7 +137,7 @@ export const mergeGatesBlock = mergeBrowserBlock;
  * @param env - environment (DSH_HOME override for tests)
  * @returns the file written and the values it now carries
  */
-export async function writeGates(allowEvaluate, allowCdp, env = process.env) {
+export async function writeGates(allowEvaluate, allowCdp, diagnostics, env = process.env) {
     const file = homePatchPath(env);
     let original = '';
     try {
@@ -139,7 +146,7 @@ export async function writeGates(allowEvaluate, allowCdp, env = process.env) {
     catch {
         original = '';
     }
-    const next = mergeBrowserBlock(original, allowEvaluate, allowCdp);
+    const next = mergeBrowserBlock(original, allowEvaluate, allowCdp, diagnostics);
     if (original !== '')
         await copyFile(file, file + '.bak-browser-toggle').catch(() => { });
     const tmp = file + '.tmp-browser-toggle';
@@ -147,12 +154,15 @@ export async function writeGates(allowEvaluate, allowCdp, env = process.env) {
     await rename(tmp, file);
     const check = await readFile(file, 'utf8');
     const parsed = parseBrowserBlock(check);
-    if (parsed === undefined || parsed.allowEvaluate !== allowEvaluate || parsed.allowCdp !== allowCdp) {
+    if (parsed === undefined ||
+        parsed.allowEvaluate !== allowEvaluate ||
+        parsed.allowCdp !== allowCdp ||
+        parsed.diagnostics !== diagnostics) {
         if (original !== '') {
             await writeFile(file, original, 'utf8');
             throw new Error('patch self-check failed after write; previous content restored');
         }
         throw new Error('patch self-check failed after write');
     }
-    return { patch: file, allowEvaluate, allowCdp };
+    return { patch: file, allowEvaluate, allowCdp, diagnostics };
 }

package/lib/runtime-state.d.ts

@@ -64,11 +64,13 @@ export declare function isEngineUserChosen(): boolean;
 export declare function publishGates(gates: {
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 }): void;
 /** The published gates, or undefined while the tool family has not been applied. */
 export declare function getGates(): {
     allowEvaluate: boolean;
     allowCdp: boolean;
+    diagnostics: boolean;
 } | undefined;
 /**
  * The last computed "which sites look logged in" summary, or undefined before anything

package/lib/runtime-state.js

@@ -149,7 +149,11 @@ export function isEngineUserChosen() {
  * @param gates - whether browser_evaluate / browser_cdp are registered.
  */
 export function publishGates(gates) {
-    _gates = { allowEvaluate: gates.allowEvaluate === true, allowCdp: gates.allowCdp === true };
+    _gates = {
+        allowEvaluate: gates.allowEvaluate === true,
+        allowCdp: gates.allowCdp === true,
+        diagnostics: gates.diagnostics === true,
+    };
 }
 /** The published gates, or undefined while the tool family has not been applied. */
 export function getGates() {

package/lib/settings-card.js

@@ -135,6 +135,7 @@ export function apply(ctx) {
                 // provider build in this profile is too old to report them.
                 allowEvaluate: gates ? gates.allowEvaluate : null,
                 allowCdp: gates ? gates.allowCdp : null,
+                diagnostics: gates ? gates.diagnostics : null,
                 // What the user's own layer says right now. Differs from the above
                 // between a write and the live reload that applies it.
                 patchGates: managedBlockGates() ?? null,
@@ -209,6 +210,8 @@ export function apply(ctx) {
             catch {
                 return sendJson(res, 400, { error: { code: 'INVALID_JSON', message: 'body must be JSON' } });
             }
+            if (typeof payload.diagnostics !== 'boolean')
+                payload.diagnostics = false;
             if (typeof payload.allowEvaluate !== 'boolean' || typeof payload.allowCdp !== 'boolean')
                 return sendJson(res, 400, {
                     error: {
@@ -217,16 +220,20 @@ export function apply(ctx) {
                     },
                 });
             const before = readGates();
-            if (before && before.allowEvaluate === payload.allowEvaluate && before.allowCdp === payload.allowCdp)
+            if (before &&
+                before.allowEvaluate === payload.allowEvaluate &&
+                before.allowCdp === payload.allowCdp &&
+                before.diagnostics === payload.diagnostics)
                 return sendJson(res, 200, { ...before, changed: false, patch: null });
             try {
-                const written = await writeGates(payload.allowEvaluate, payload.allowCdp);
+                const written = await writeGates(payload.allowEvaluate, payload.allowCdp, payload.diagnostics);
                 // The effective values only move once the loader re-applies the tree
                 // (profile patchReload: live); report what was written, and let the
                 // panel's next /state poll show whether it took effect.
                 sendJson(res, 200, {
                     allowEvaluate: written.allowEvaluate,
                     allowCdp: written.allowCdp,
+                    diagnostics: written.diagnostics,
                     changed: true,
                     patch: written.patch,
                 });

package/lib/tool.js

@@ -60,7 +60,11 @@ export function apply(ctx, config) {
     // home-level patch), so the tool family publishes it at registration and the
     // switch shows the truth instead of a guess. Driven by the same values that
     // decided which tools register, so the two can never disagree.
-    publishGates({ allowEvaluate: registered.has('evaluate'), allowCdp: registered.has('cdp') });
+    publishGates({
+        allowEvaluate: registered.has('evaluate'),
+        allowCdp: registered.has('cdp'),
+        diagnostics: registered.has('console_messages'),
+    });
     /** Register one gated tool only when this configuration keeps it live. */
     const registerMaybe = (suffix, definition) => {
         if (registered.has(suffix))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-browser-playwright-codex",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Browser automation for DeepSeek Harness, one plugin: fill in forms, scrape lists and work across tabs in real pages, using the logins you already have. Runs in a visible window that stays quiet when minimised; native dialogs are parked instead of confirmed, CAPTCHA pages are flagged with a note that says stop and hand the page back, password / one-time-code / card fields are refused by browser_fill, and the Settings card (enable/disable, page-reading mode, capability gates) now lives inside this package.",
   "license": "MIT",
   "type": "module",