lasso-mcp 1.4.0 → 1.8.1

package/README.en.md

@@ -49,7 +49,8 @@ Twin star of [media-gen-mcp](https://github.com/wangdong233/media-gen-mcp) (the
 | "List everything I can control right now" | One unified list (web pages and desktop windows all in it) |
 | "Turn off dark mode" | Auto click / type / hotkey (with result verification — it confirms it actually happened) |
 | "Just fetch this JSON endpoint" | Raw bytes (fastest, cheapest) |
-| "This site has Cloudflare, I can't scrape it" | Cloud Chrome anti-bot bypass (off by default; you explicitly opt in) |
+| "This site seems to have some anti-bot, let's try" | `browse_headless` has built-in anti-detection (passes basic bot checks) — many sites scrape directly, no config needed |
+| "This site has Cloudflare, I can't scrape it" | Cloud Chrome anti-bot — **Steel self-hosted (free)** or browserbase/stagehand (paid, off by default) |
 | "Is Lasso set up correctly?" | A health-check report (tells you what's missing) |
 
 > You don't need to memorize any capability names. Just say what you want — Claude picks the right way to get it done.
@@ -67,9 +68,11 @@ Lasso itself is **completely free + MIT open source**. Here's what each capabili
 | Scrape public pages / screenshots / PDF / network audit / raw bytes | ✅ Free | Runs locally, no key, no payment |
 | Scrape logged-in pages (reuse local Chrome) | ✅ Free | Runs locally, no key, no payment |
 | Drive desktop (macOS / Windows / Linux) | ✅ Free | Built and run locally, only OS authorization needed; **optional** Apple Developer account \$99/yr for signed persistent authorization (works without signing too — just re-authorize each time) |
-| Cloud browser (browserbase / stagehand) | ⚠️ Paid, off by default | Paid after trial; **costs nothing if you don't configure it** — Lasso's only paid item |
+| Cloud browser · self-hosted Steel (v1.6 new) | ✅ Free | Run Steel (Apache-2.0 open source) in local Docker — **zero per-session cost + cookies never leave your machine**; needs `LASSO_ALLOW_CLOUD_BROWSER=true` + `STEEL_ENDPOINT=http://localhost:3000` |
+| Cloud browser · hosted (browserbase / stagehand) | ⚠️ Paid, off by default | Pay-as-you-go after trial; **costs nothing if you don't configure it** |
+| `browse_headless` anti-detection (v1.5 new) | ✅ Free | Injects 16 anti-detection layers by default (UA / webdriver / webgl, etc.) — passes many basic bot checks out of the box |
 
-> In one sentence: **as long as you don't turn on the cloud browser, Lasso costs zero** — search has free tiers enough for daily use, and everything else is completely free.
+> In one sentence: **as long as you don't turn on the hosted cloud browser (browserbase/stagehand), Lasso costs zero** — search has free tiers enough for daily use, and the self-hosted Steel cloud browser is free too.
 
 ---
 
@@ -93,6 +96,8 @@ No keys needed right after install (this is **Tier 1: zero config**):
 - Fetch raw bytes from a JSON API or file directly
 - Control native macOS apps (Finder / Mail / System Settings, etc. — requires a one-time tick in System Settings)
 
+> 💡 **Search may be zero-config too**: if your machine's `~/.claude.json` already has the Zhipu `web-search-prime` MCP configured, Lasso auto-detects and reuses it at startup — no need to set a separate `ZHIPU_API_KEY`, search just works. Run `lasso doctor` and check whether `#36 machine_search_mcp` is `pass`.
+
 Your first output — just say to Claude:
 
 > "Grab the text of example.com and turn it into markdown"
@@ -123,6 +128,8 @@ Defaults to Zhipu (strong for Chinese); you can add Brave and Bing for multi-sou
 
 Auto-strips nav bars, ads, sidebars and other clutter — **saves 30–70% on tokens** (and money). Need citation markers (great for research, feeding RAG)? One sentence switches modes.
 
+> **As of v1.5, `browse_headless` has anti-detection on by default** (spoofed UA / `navigator.webdriver` removed / faked webgl, plugins, codecs, and a dozen more layers). **Zero config — automatic.** Many "detect headless" sites now scrape directly. Only Cloudflare-grade heavy anti-bot needs the cloud browser (see "Anti-Bot Bypass" below). Want to verify the anti-detection effect? Run `lasso doctor --stealth-check` for a creepjs detection comparison.
+
 ### Scrape Logged-in Pages (even with 2FA)
 
 > You: "Show me my Jira to-dos" → snapshot of the logged-in page
@@ -173,7 +180,10 @@ Goes to the Internet Archive (Wayback Machine) to find the last archived copy of
 
 > You: "This site has Cloudflare, I can't scrape it" → cloud Chrome anti-bot
 
-**Completely off by default.** Only activates when you explicitly turn it on AND have configured a cloud-browser key. You don't need it for normal pages.
+**Completely off by default.** Only activates when you explicitly turn it on AND have configured a cloud browser (self-hosted Steel or hosted browserbase/stagehand). Light anti-bot is already handled by `browse_headless`'s built-in anti-detection — **only Cloudflare-grade heavy protection needs the cloud browser**.
+
+- **Steel self-hosted (recommended · free)**: run an open-source cloud browser in local Docker — zero per-session cost, cookies never leave your machine. One command to set up, see [Key Guide · Steel](./doc/KEY-GUIDE.md#steel_endpoint--自托管云浏览器v16-新推荐免费).
+- **browserbase / stagehand (hosted · paid)**: pay-as-you-go after trial; the fallback when you don't want to run Docker yourself.
 
 ---
 
@@ -205,7 +215,7 @@ Restart Claude Code → `/mcp` → `lasso ✓ Connected`. **That's it — no key
 | Near-zero search failures (multi-source) | Add Brave / Bing keys (both have free tiers) | Auto-fails-over if one is down — you don't feel a thing |
 | Scrape logged-in pages | Run `lasso launch-chrome` once | Reuses your local Chrome session |
 | Drive the macOS desktop | Run `lasso doctor` once | Drive native apps |
-| Scrape Cloudflare-protected sites | Double confirmation + a cloud key | Off by default; needs your explicit opt-in |
+| Scrape Cloudflare-protected sites | Double confirmation + a cloud browser channel (self-hosted Steel free / hosted paid) | Off by default; needs your explicit opt-in |
 
 Below, each of the four modules is broken out with the shortest path to "it just works".
 
@@ -281,18 +291,33 @@ After that, say "open my logged-in Jira" to Claude and it'll connect automatical
 
 **Details** → [Key Configuration Guide · Desktop Control](./doc/KEY-GUIDE.md#c-桌面控制系统授权无-key).
 
-### 4. Cloud Anti-Bot (⚠️ Paid, off by default · needs double confirmation)
+### 4. Cloud Browser: Self-Hosted or Hosted (self-hosted free / hosted paid, off by default · needs double confirmation)
 
-**What it does**: Scrapes sites guarded by Cloudflare or heavy anti-bot protection.
+**What it does**: Scrapes sites guarded by Cloudflare or heavy anti-bot protection (light anti-bot is already handled by `browse_headless`'s built-in anti-detection — this section is only for the heavy stuff).
 
-**Does it need a key**: Yes — and it only activates when **you explicitly turn it on**.
+**Does it need a key**: Depends on which path you take. Pick one of three cloud channels — **only the hosted path needs a key**:
+
+- **(a) Steel self-hosted (recommended · free)**: run an open-source cloud browser in local Docker — **zero per-session cost + cookies never leave your machine**. No key to apply for; just run Docker yourself.
+- **(b) browserbase hosted (paid)**: 100-minute trial, then pay-as-you-go.
+- **(c) stagehand hosted (paid)**: AI-friendly page observation; trial-oriented.
 
 **How to configure**: Both conditions must be met at the same time:
 
 1. Master switch: set `LASSO_ALLOW_CLOUD_BROWSER` to `true`
-2. At least one cloud key (browserbase or stagehand — pick one)
+2. At least one cloud channel — Steel (set `STEEL_ENDPOINT`) or browserbase/stagehand (set the corresponding key)
+
+**Shortest config · Steel self-hosted (free, recommended)**:
+
+```json
+{
+  "LASSO_ALLOW_CLOUD_BROWSER": true,
+  "STEEL_ENDPOINT": "http://localhost:3000"
+}
+```
+
+Start Steel with one Docker command: `docker run -p 3000:3000 -p 9223:9223 ghcr.io/steel-dev/steel-browser`. Full setup steps in [Key Guide · Steel](./doc/KEY-GUIDE.md#steel_endpoint--自托管云浏览器v16-新推荐免费).
 
-Write it into `~/.lasso/config.json`:
+**Shortest config · browserbase hosted (paid)**:
 
 ```json
 {
@@ -301,9 +326,9 @@ Write it into `~/.lasso/config.json`:
 }
 ```
 
-> Off by default — no config means no such capability. You don't need it for normal pages, **and it only activates when you explicitly opt in**.
+> Off by default — no config means no such capability. You don't need it for normal pages, **and it only activates when you explicitly opt in**. Light anti-bot doesn't need the cloud browser at all — `browse_headless`'s built-in anti-detection handles it.
 
-**How to apply for cloud keys, trial quotas** → see the [Key Configuration Guide · Cloud Browser](./doc/KEY-GUIDE.md#d-云浏览器反爬默认关双重解锁).
+**How to apply for hosted keys, how to set up Steel Docker** → see the [Key Configuration Guide · Cloud Browser](./doc/KEY-GUIDE.md#d-云浏览器反爬默认关双重解锁).
 
 <details>
 <summary><b>Advanced tuning (optional — ordinary users can skip)</b></summary>
@@ -316,6 +341,7 @@ You can **completely ignore** the below for daily use. These are only for specia
 - Allow company intranet / special proxy ranges
 - Set your own passphrase to encrypt login cookies (if unset, macOS Keychain is used)
 - Save search-result snapshots to disk (for regression testing)
+- Set the Steel self-hosted cloud browser endpoint (`STEEL_ENDPOINT`, e.g. `http://localhost:3000`; needs `LASSO_ALLOW_CLOUD_BROWSER=true` too in order to activate)
 
 Full variable list and defaults: [Key Configuration Guide · Advanced Tuning](./doc/KEY-GUIDE.md#e-高级调优可选全不配). **Surge / Clash TUN proxy networks (fake-ip) are already allowed out of the box.**
 
@@ -350,6 +376,7 @@ Your data is yours.
 | Search keeps returning nothing | Check whether the key expired / quota is exhausted; adding multiple providers (Zhipu + Brave + Bing) dramatically lowers the failure rate |
 | A link won't open | Say "this link is dead, find an archive" to check the Internet Archive |
 | Prompted that internal-network access was blocked | Double-check the URL; TUN proxy networks are allowed by default, other internal networks need explicit permission |
+| Want to verify the anti-detection effect | Run `lasso doctor --stealth-check` — it drives the creepjs detection page and compares against a baseline (optional, doesn't affect daily use) |
 
 Full FAQ and debugging tips in [`doc/TROUBLESHOOTING.md`](./doc/TROUBLESHOOTING.md).
 

package/README.md

@@ -49,7 +49,8 @@
 | 「列一下我现在能控的所有窗口和网页」 | 一个统一清单（网页和桌面窗口都在里面） |
 | 「把系统深色模式关掉」 | 自动点按 / 输入 / 快捷键（带结果验证，做完了会确认） |
 | 「直接取这个 JSON 接口的返回值」 | 原始字节（最快最省） |
-| 「这个站有 Cloudflare 我抓不动」 | 云端 Chrome 反爬（默认关，你明确要开才开） |
+| 「这个站好像有点反爬，试试看」 | `browse_headless` 自带反检测（过基础 bot 检测），很多站点直接能抓，无需配置 |
+| 「这个站有 Cloudflare 我抓不动」 | 云端 Chrome 反爬——**Steel 自托管（免费）** 或 browserbase/stagehand（付费，默认关） |
 | 「Lasso 现在配好了吗？」 | 一份健康自检报告（告诉你哪里没配好） |
 
 > 你不用记任何能力名，直接说你想干什么，Claude 自己挑最合适的方式完成。
@@ -67,9 +68,11 @@ Lasso 本体**完全免费 + MIT 开源**。每一项能力到底要不要花钱
 | 抓公开页 / 截图 / PDF / 网络审计 / 抓原始字节 | ✅ 免费 | 本地运行，无 key 无付费 |
 | 抓登录态页面（复用本机 Chrome） | ✅ 免费 | 本地运行，无 key 无付费 |
 | 控桌面（macOS / Windows / Linux） | ✅ 免费 | 本地构建运行，仅需系统授权；**可选** Apple 开发者账号 \$99/年做签名持久授权（不签名也能用，只是每次重授权） |
-| 云浏览器（browserbase / stagehand） | ⚠️ 付费，默认关 | 试用后付费；**不配不花钱**，是 Lasso 唯一付费项 |
+| 云浏览器 · 自托管 Steel（v1.6 新） | ✅ 免费 | 本地 Docker 跑 Steel（Apache-2.0 开源），**零 per-session 费 + cookie 不出本地**；需 `LASSO_ALLOW_CLOUD_BROWSER=true` + `STEEL_ENDPOINT=http://localhost:3000` |
+| 云浏览器 · 托管型（browserbase / stagehand） | ⚠️ 付费，默认关 | browserbase 试用后按量付费；stagehand 是程序化实验通道（无 MCP 工具入口）；**不配不花钱** |
+| `browse_headless` 反检测（v1.5 新） | ✅ 免费 | 默认注入 16 路反检测（UA / webdriver / webgl 等），很多基础 bot 检测直接过 |
 
-> 一句话总结：**只要不开云浏览器，Lasso 全程 0 成本**——搜索有免费额度够日常用，其余能力完全免费。
+> 一句话总结：**只要不开托管型云浏览器（browserbase/stagehand），Lasso 全程 0 成本**——搜索有免费额度够日常用，Steel 自托管也是免费的。
 
 ---
 
@@ -93,6 +96,8 @@ claude mcp add lasso -- npx -y lasso-mcp
 - 直接取 JSON 接口或文件的**原始返回**
 - 控制 macOS 原生 app（Finder / Mail / 系统设置等，需在系统设置里勾一下授权）
 
+> 💡 **搜索也可能零配置可用**：如果你机器的 `~/.claude.json` 已经配过智谱 `web-search-prime` MCP，Lasso 启动时自动检测复用，连 `ZHIPU_API_KEY` 都不用单独配——搜索直接能用。跑 `lasso doctor` 看 `#36 machine_search_mcp` 是不是 `pass` 就知道。
+
 第一份产出——直接对 Claude 说：
 
 > 「抓一下 example.com 的文字，转成 markdown」
@@ -123,6 +128,8 @@ claude mcp add lasso -- npx -y lasso-mcp
 
 自动剥掉导航条、广告、侧边栏等冗余，**省 30–70% 字数**（也更省钱）。要带引用角标（适合做调研、喂给 RAG）也能一句话切换。
 
+> **v1.5 起，`browse_headless` 默认开启反检测**（伪装 UA / 抹除 `navigator.webdriver` / 伪造 webgl、plugins、codecs 等共十几路）。**无需配置，自动生效**——很多「检测 headless」的站点现在能直接抓（v1.8 修复了一个注入静默失效的缺陷，现在是真的生效，且注入失败会在日志里如实报错）。只有 Cloudflare 级重度反爬才需要走云浏览器（见下方「反爬强攻」）。想验证反检测效果？跑 `lasso doctor --stealth-check` 看 creepjs 检测对比。
+
 ### 抓登录态页（有 2FA 的也行）
 
 > 你：「看看我 Jira 的待办」 → 登录态页面快照
@@ -141,7 +148,7 @@ claude mcp add lasso -- npx -y lasso-mcp
 
 > 你：「截个整页长图」「存成 PDF」 → 落盘文件路径
 
-所有图片和 PDF 都**存到本地、返回路径**，不会把一大坨图片数据塞进对话浪费上下文。
+所有图片和 PDF 都**存到本地、返回路径**，不会把一大坨图片数据塞进对话浪费上下文。超大文本输出（fetch_url / network 等）超过 48 KiB 也会自动落盘，返回预览 + `@oN` 续页句柄——用 `read_text` 工具按页续读（v1.8 起经 MCP 可直接调用）。
 
 ### 看一个页面加载了什么
 
@@ -173,12 +180,18 @@ macOS 上能控 Finder / Mail / Safari / Notes / 系统设置等任何原生 app
 
 > 你：「这个站有 Cloudflare，抓不动」 → 云端 Chrome 反爬
 
-默认**完全关闭**。只有你明确要开、并且配了云端浏览器的 key，才会启用。普通页面用不上。
+默认**完全关闭**。只有你明确要开、并且配了云浏览器（自托管 Steel 或托管型 browserbase/stagehand），才会启用。轻度反爬 `browse_headless` 自带反检测就能过，**只有 Cloudflare 级重度反爬才需要走云浏览器**。
+
+- **Steel 自托管（推荐 · 免费）**：本地 Docker 跑一个开源云浏览器，零 per-session 费、cookie 不出本地。一行命令开通，见 [Key 配置指南 · Steel](./doc/KEY-GUIDE.md#steel_endpoint--自托管云浏览器v16-新推荐免费)。
+- **browserbase（托管型 · 付费）**：试用后按量付费，不想自己跑 Docker 时的备选。
+- **stagehand（托管型 · 付费）**：⚠️ 程序化实验通道——配 key 只装配内部 channel，**没有 MCP 工具入口**（REST 契约未经验证；`lasso doctor` #39 `stagehand_rest_contract_probe` 专测此项）。
 
 ---
 
 ## 安装
 
+**当前版本 v1.8.0**（本版修复了 wave1 全量实测暴露的 24 条缺陷：上游 chrome-devtools-mcp@0.3.0 契约适配、截图真实落盘、launch-chrome 探活、caller-tier 配额接线、`read_text` 续页工具等——完整清单见 [doc/17-功能测试清单.md](doc/17-功能测试清单.md) 的「v1.8 修复记录」）。
+
 **前提**：Node.js ≥ 20；Claude Code（或任何支持 MCP 的客户端）。
 
 ```bash
@@ -205,7 +218,7 @@ claude mcp add lasso -- npx -y lasso-mcp
 | 搜索几乎不挂 | 再加 Brave / Bing key（都有免费额度） | 任一家挂了自动切，你无感 |
 | 抓登录态页面 | 跑一次 `lasso launch-chrome` | 复用本机 Chrome 登录态 |
 | 控 macOS 桌面 | 跑一次 `lasso doctor` | 控原生 app |
-| 抓有 Cloudflare 的站 | 双重确认 + 云端 key | 默认关，要你明确要开才开 |
+| 抓有 Cloudflare 的站 | 双重确认 + 云浏览器通道（自托管 Steel 免费 / 托管型付费） | 默认关，要你明确要开才开 |
 
 下面按四个模块拆开讲，每个都给「最短能跑通」的配法。
 
@@ -221,8 +234,12 @@ claude mcp add lasso -- npx -y lasso-mcp
 
 ```bash
 lasso config init        # 创建 ~/.lasso/config.json 模板
+lasso --version          # 查看版本号（v1.8 起）
+lasso --help             # 查看全部子命令用法
 ```
 
+> v1.8 起命令行符合常规惯例：未知子命令 / 未知参数会打印用法并以非零码退出，不再静默落入 MCP server 模式挂起等输入。
+
 打开 `~/.lasso/config.json`，照着填：
 
 ```json
@@ -253,12 +270,14 @@ key 名和上面表格里写的一样，照着填即可，存盘后下次启动
 
 **要不要 key**：不用。
 
-**怎么配**：跑一次下面的命令，它会自动找你本机的 Chrome，复用你已经登录好的全部会话（2FA 你自己解过的也算）：
+**怎么配**：跑一次下面的命令，它会自动找你本机的 Chrome 并带调试端口启动。v1.8 起默认用 Lasso 自己的**独立 profile**（Chrome 136+ 不允许对默认 profile 开调试端口，老办法会秒退）；第一次在这个窗口里登录你的账号（2FA 自己解），之后**这个 profile 的登录态会被一直复用**：
 
 ```bash
 lasso launch-chrome
 ```
 
+启动后 Lasso 会自动探活调试端口（`curl /json/version` 级验证）：Chrome 没起来 / 端口被占会**明确报错**，不再「返回成功但其实连不上」。想复用某个已有 profile 目录可以 `lasso launch-chrome --profile <目录>`。
+
 之后对 Claude 说「打开我已登录的 Jira」就会自动连上。
 
 > 🔴 **红线**：2FA / 短信验证码 / CAPTCHA / 邮件魔法链接——Lasso 不替你解，必须你在本机 Chrome 里手动过一次。
@@ -281,18 +300,33 @@ lasso launch-chrome
 
 **详见** → [Key 配置指南 · 桌面控制](./doc/KEY-GUIDE.md#c-桌面控制系统授权无-key)。
 
-### 四、云端反爬（⚠️ 付费，默认关 · 双重确认才开）
+### 四、云浏览器：自托管或托管（自托管免费 / 托管付费，默认关 · 双重确认才开）
 
-**能干什么**：抓被 Cloudflare、重度反爬挡住的站。
+**能干什么**：抓被 Cloudflare、重度反爬挡住的站（轻度反爬 `browse_headless` 自带反检测就能过，这里只针对重度）。
 
-**要不要 key**：要，并且**必须你明确要开**才会启用。
+**要不要 key**：取决于走哪条路。三种云通道任选其一，**只有走托管型才要 key**：
+
+- **(a) Steel 自托管（推荐 · 免费）**：本地 Docker 跑一个开源云浏览器，**零 per-session 费 + cookie 不出本地**。无需申请 key，自己跑 Docker 即可。
+- **(b) browserbase 托管（付费）**：100 分钟试用，之后按量付费。
+- **(c) stagehand 托管（付费）**：AI 友好的页面观察，试用为主。⚠️ **程序化实验通道**——配了 key 也**没有 MCP 工具入口**（REST 契约未经运行时验证，`lasso doctor` #39 专测此项）；要实际过反爬请选 Steel 或 browserbase。
 
 **怎么配**：需要两个条件同时满足——
 
 1. 总开关：`LASSO_ALLOW_CLOUD_BROWSER` 设为 `true`
-2. 至少一个云端 key（browserbase 或 stagehand，二选一）
+2. 至少一个云通道——Steel（设 `STEEL_ENDPOINT`）或 browserbase（设对应 key）；stagehand key 只装配内部实验通道，不暴露工具
+
+**最短配置 · Steel 自托管（免费推荐）**：
+
+```json
+{
+  "LASSO_ALLOW_CLOUD_BROWSER": true,
+  "STEEL_ENDPOINT": "http://localhost:3000"
+}
+```
+
+Steel 用 Docker 一行启动：`docker run -p 3000:3000 -p 9223:9223 ghcr.io/steel-dev/steel-browser`。完整开通步骤见 [Key 配置指南 · Steel](./doc/KEY-GUIDE.md#steel_endpoint--自托管云浏览器v16-新推荐免费)。
 
-写进 `~/.lasso/config.json`：
+**最短配置 · browserbase 托管（付费）**：
 
 ```json
 {
@@ -301,9 +335,9 @@ lasso launch-chrome
 }
 ```
 
-> 默认完全关闭——没配就等于没这个能力。普通页面用不上，**只有你明确要开才会启用**。
+> 默认完全关闭——没配就等于没这个能力。普通页面用不上，**只有你明确要开才会启用**。轻度反爬根本不需要云浏览器，`browse_headless` 自带反检测就能过。
 
-**怎么申请云端 key、有哪些试用额度** → 见 [Key 配置指南 · 云浏览器](./doc/KEY-GUIDE.md#d-云浏览器反爬默认关双重解锁)。
+**怎么申请托管 key、Steel Docker 怎么开通** → 见 [Key 配置指南 · 云浏览器](./doc/KEY-GUIDE.md#d-云浏览器反爬默认关双重解锁)。
 
 <details>
 <summary><b>高级调优（可选，普通用户不用展开）</b></summary>
@@ -316,8 +350,9 @@ lasso launch-chrome
 - 放行公司内网 / 特殊代理网段
 - 给登录 cookie 加一个自己的加密口令（不设则走 macOS 钥匙串）
 - 落盘搜索结果快照（做回归测试用）
+- 设 Steel 自托管云浏览器端点（`STEEL_ENDPOINT`，如 `http://localhost:3000`；需同时开 `LASSO_ALLOW_CLOUD_BROWSER=true` 才启用）
 
-完整变量清单和默认值见 [Key 配置指南 · 高级调优](./doc/KEY-GUIDE.md#e-高级调优可选全不配)。**Surge / Clash 等 TUN 代理网络（fake-ip）已内置放行，无需额外配置。**
+完整变量清单和默认值见 [Key 配置指南 · 高级调优](./doc/KEY-GUIDE.md#e-高级调优可选全不配)。**Surge / Clash 等 TUN 代理网络（fake-ip，`198.18.0.0/15`）与 `127.0.0.1`（本机 Chrome CDP 调试端口用）都已内置放行**，无需额外配置——这是设计行为，不是漏配。
 
 > **向后兼容**：如果你以前用 `claude mcp add -e KEY=VAL` 装过，那些环境变量**仍然生效**，且会**覆盖**配置文件。配置文件只是新增的一条更友好的途径，不废除老办法。
 
@@ -350,6 +385,7 @@ lasso launch-chrome
 | 搜索一直没结果 | 检查 key 是否过期 / 额度用完；配多家（智谱 + Brave + Bing）可大幅降低失败率 |
 | 链接打不开 | 改说「这个链接找不到了，找找存档」，去查互联网档案馆 |
 | 提示要内网访问被拒 | 确认 URL 没写错；TUN 代理网络已默认放行，其他内网需手动允许 |
+| 想验证反检测效果 | 跑 `lasso doctor --stealth-check`，会驱动 creepjs 检测页对比基线（可选，不影响日常使用） |
 
 完整 FAQ 与调试技巧见 [`doc/TROUBLESHOOTING.md`](./doc/TROUBLESHOOTING.md)。
 

package/dist/browse/ExpectPoll.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExpectPoll.d.ts","sourceRoot":"","sources":["../../src/browse/ExpectPoll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAK5D,sCAAsC;AACtC,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,aAAa,GAAG,QAAQ,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gCAAgC;AAChC,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAWD;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,eAAe,EACrB,WAAW,CAAC,EAAE,iBAAiB,EAC/B,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,aAAa,CAAC,CAmBxB;AAKD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAM7D;AAKD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAWT;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,eAAe,GACpB,OAAO,CAST;AA4BD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CAiBhE"}
+{"version":3,"file":"ExpectPoll.d.ts","sourceRoot":"","sources":["../../src/browse/ExpectPoll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAM5D,sCAAsC;AACtC,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,aAAa,GAAG,QAAQ,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gCAAgC;AAChC,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAWD;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,eAAe,EACrB,WAAW,CAAC,EAAE,iBAAiB,EAC/B,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,aAAa,CAAC,CAmBxB;AAKD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAM7D;AAKD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAWT;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,eAAe,GACpB,OAAO,CAST;AA6BD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CAmBhE"}

package/dist/browse/ExpectPoll.js

@@ -1,3 +1,4 @@
+import { evalTextValue } from "./upstream-response.js";
 // ============================================================
 // 常量
 // ============================================================
@@ -102,8 +103,9 @@ async function snapshotCondition(client, cond) {
         const r = (await client.callTool("evaluate_script", {
             function: expr,
         }));
-        const text = firstText(r);
-        return { holds: text === "true" };
+        // W1-DEF-1b（v1.8）：上游返回 markdown 围栏包裹（实测契约见 upstream-response.ts）
+        const text = evalTextValue(r) ?? firstText(r);
+        return { holds: text?.trim() === "true" };
     }
     catch {
         return { holds: false };
@@ -126,7 +128,9 @@ export function buildConditionExpr(cond) {
         clauses.push(`((document.body && document.body.innerText || "").indexOf(${JSON.stringify(cond.text)}) !== -1)`);
     }
     const expr = clauses.length > 0 ? clauses.join(" || ") : "false";
-    return `(function(){ return (${expr}).toString(); })()`;
+    // W1-DEF-1（v1.8）：函数表达式（上游 0.3.0 evaluate_script 契约），上游调用后
+    // 取 "true"/"false" 返回——不再传 IIFE 语句串。
+    return `() => ((${expr})).toString()`;
 }
 // ============================================================
 // 内部 helper

package/dist/browse/ExpectPoll.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExpectPoll.js","sourceRoot":"","sources":["../../src/browse/ExpectPoll.ts"],"names":[],"mappings":"AAiEA,+DAA+D;AAC/D,KAAK;AACL,+DAA+D;AAC/D,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,+DAA+D;AAC/D,SAAS;AACT,+DAA+D;AAC/D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAiB,EACjB,IAAqB,EACrB,WAA+B,EAC/B,IAAwB;IAExB,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAExB,+CAA+C;IAC/C,IAAI,WAAW,IAAI,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,mBAAmB;IACnB,MAAM,QAAQ,GAAG,IAAI,EAAE,cAAc,IAAI,wBAAwB,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,gBAAgB,IAAI,kBAAkB,CAAC;IAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,IAAI,SAAS;YAAE,OAAO,UAAU,CAAC;IACnC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,sDAAsD;AACtD,+DAA+D;AAC/D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,sDAAsD;AACtD,+DAA+D;AAC/D;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,IAAqB;IAErB,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAsB,EACtB,IAAqB;IAErB,4CAA4C;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAEjD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACxC,CAAC;AAED,+DAA+D;AAC/D,qDAAqD;AACrD,+DAA+D;AAC/D;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAC9B,MAAiB,EACjB,IAAqB;IAErB,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE;YAClD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAkB,CAAC;QACrB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CACV,iCAAiC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CACV,6DAA6D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,OAAO,wBAAwB,IAAI,oBAAoB,CAAC;AAC1D,CAAC;AAED,+DAA+D;AAC/D,YAAY;AACZ,+DAA+D;AAC/D,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAMD,SAAS,SAAS,CAAC,CAA4B;IAC7C,IAAI,CAAC,CAAC,EAAE,OAAO;QAAE,OAAO,SAAS,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"ExpectPoll.js","sourceRoot":"","sources":["../../src/browse/ExpectPoll.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AA+BvD,+DAA+D;AAC/D,KAAK;AACL,+DAA+D;AAC/D,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,+DAA+D;AAC/D,SAAS;AACT,+DAA+D;AAC/D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAiB,EACjB,IAAqB,EACrB,WAA+B,EAC/B,IAAwB;IAExB,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAExB,+CAA+C;IAC/C,IAAI,WAAW,IAAI,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,mBAAmB;IACnB,MAAM,QAAQ,GAAG,IAAI,EAAE,cAAc,IAAI,wBAAwB,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,gBAAgB,IAAI,kBAAkB,CAAC;IAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,IAAI,SAAS;YAAE,OAAO,UAAU,CAAC;IACnC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,sDAAsD;AACtD,+DAA+D;AAC/D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,sDAAsD;AACtD,+DAA+D;AAC/D;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,IAAqB;IAErB,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAsB,EACtB,IAAqB;IAErB,4CAA4C;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAEjD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACxC,CAAC;AAED,+DAA+D;AAC/D,qDAAqD;AACrD,+DAA+D;AAC/D;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAC9B,MAAiB,EACjB,IAAqB;IAErB,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE;YAClD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAkB,CAAC;QACrB,iEAAiE;QACjE,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CACV,iCAAiC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CACV,6DAA6D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,0DAA0D;IAC1D,qCAAqC;IACrC,OAAO,WAAW,IAAI,eAAe,CAAC;AACxC,CAAC;AAED,+DAA+D;AAC/D,YAAY;AACZ,+DAA+D;AAC/D,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAMD,SAAS,SAAS,CAAC,CAA4B;IAC7C,IAAI,CAAC,CAAC,EAAE,OAAO;QAAE,OAAO,SAAS,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/browse/HighRiskGate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HighRiskGate.d.ts","sourceRoot":"","sources":["../../src/browse/HighRiskGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAM7C,gEAAgE;AAChE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,kBAAkB,EAAE,aAAa,CAAC;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB,CAMC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAO/C,CAAC;AAKH;;;;;;;GAOG;AACH,qBAAa,YAAY;IAKrB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAJjC;;OAEG;gBAEgB,cAAc,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC;IAG3D;;;;;;;;;;;;;;;;OAgBG;IACG,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAqE1D;AAKD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAwCtD"}
+{"version":3,"file":"HighRiskGate.d.ts","sourceRoot":"","sources":["../../src/browse/HighRiskGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAM7C,gEAAgE;AAChE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,kBAAkB,EAAE,aAAa,CAAC;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB,CAMC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAO/C,CAAC;AAKH;;;;;;;GAOG;AACH,qBAAa,YAAY;IAKrB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAJjC;;OAEG;gBAEgB,cAAc,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC;IAG3D;;;;;;;;;;;;;;;;OAgBG;IACG,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAqE1D;AAKD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAyCtD"}

package/dist/browse/HighRiskGate.js

@@ -167,7 +167,8 @@ export function buildAssessExpr(target) {
         kind: p.kind,
         selector: p.selector,
     }));
-    return `(function(){
+    // W1-DEF-1（v1.8）：函数表达式（上游 0.3.0 evaluate_script 契约），不再传 IIFE 语句串。
+    return `() => {
     try {
       var target = ${JSON.stringify(target)};
       var pairs = ${JSON.stringify(pairs)};
@@ -200,7 +201,7 @@ export function buildAssessExpr(target) {
     } catch (e) {
       return JSON.stringify({ ok: false, reason: "eval_error:" + String(e) });
     }
-  })()`;
+  }`;
 }
 function firstText(r) {
     if (!r?.content)

package/dist/browse/HighRiskGate.js.map

@@ -1 +1 @@
-{"version":3,"file":"HighRiskGate.js","sourceRoot":"","sources":["../../src/browse/HighRiskGate.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAc3C,+DAA+D;AAC/D,uDAAuD;AACvD,+DAA+D;AAC/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAG1B,MAAM,CAAC,MAAM,CAAC;IACjB,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,gEAAgE,EAAE;IAC3F,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,kCAAkC,EAAE;IACnE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE;IAChD,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,oBAAoB,EAAE;IACrD,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE;CAC9C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IAC3D,UAAU;IACV,UAAU;IACV,YAAY;IACZ,SAAS;IACT,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AAEH,+DAA+D;AAC/D,eAAe;AACf,+DAA+D;AAC/D;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IAKJ;IAJnB;;OAEG;IACH,YACmB,cAAwC;QAAxC,mBAAc,GAAd,cAAc,CAA0B;IACxD,CAAC;IAEJ;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,UAAU,CAAC,IAAU;QACzB,wBAAwB;QACxB,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,oBAAoB;QACpB,IAAI,MAA0B,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;QACjC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClC,oEAAoE;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,iDAAiD;YACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,qDAAqD;YACrD,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,mCAAmC;gBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;aACjB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE;gBAClD,QAAQ,EAAE,IAAI;aACf,CAAC,CAAkB,CAAC;YACrB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;YAC7D,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAK9B,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,qBAAqB,OAAO,CAAC,IAAI,EAAE;oBAC3C,QAAQ,EAAE,OAAO,CAAC,IAAI;iBACvB,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,mDAAmD;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,4BAA4B;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;aACjB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;CACF;AAED,+DAA+D;AAC/D,yCAAyC;AACzC,+DAA+D;AAC/D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,0DAA0D;IAC1D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CAAC;IACJ,OAAO;;qBAEY,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BlC,CAAC;AACR,CAAC;AAQD,SAAS,SAAS,CAAC,CAA4B;IAC7C,IAAI,CAAC,CAAC,EAAE,OAAO;QAAE,OAAO,SAAS,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"HighRiskGate.js","sourceRoot":"","sources":["../../src/browse/HighRiskGate.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAc3C,+DAA+D;AAC/D,uDAAuD;AACvD,+DAA+D;AAC/D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAG1B,MAAM,CAAC,MAAM,CAAC;IACjB,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,gEAAgE,EAAE;IAC3F,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,kCAAkC,EAAE;IACnE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE;IAChD,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,oBAAoB,EAAE;IACrD,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE;CAC9C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IAC3D,UAAU;IACV,UAAU;IACV,YAAY;IACZ,SAAS;IACT,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AAEH,+DAA+D;AAC/D,eAAe;AACf,+DAA+D;AAC/D;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IAKJ;IAJnB;;OAEG;IACH,YACmB,cAAwC;QAAxC,mBAAc,GAAd,cAAc,CAA0B;IACxD,CAAC;IAEJ;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,UAAU,CAAC,IAAU;QACzB,wBAAwB;QACxB,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,oBAAoB;QACpB,IAAI,MAA0B,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;QACjC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClC,oEAAoE;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,iDAAiD;YACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,qDAAqD;YACrD,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,mCAAmC;gBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;aACjB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE;gBAClD,QAAQ,EAAE,IAAI;aACf,CAAC,CAAkB,CAAC;YACrB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;YAC7D,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAK9B,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,qBAAqB,OAAO,CAAC,IAAI,EAAE;oBAC3C,QAAQ,EAAE,OAAO,CAAC,IAAI;iBACvB,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,mDAAmD;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,4BAA4B;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;aACjB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;CACF;AAED,+DAA+D;AAC/D,yCAAyC;AACzC,+DAA+D;AAC/D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,0DAA0D;IAC1D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CAAC;IACJ,kEAAkE;IAClE,OAAO;;qBAEY,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA8BrC,CAAC;AACL,CAAC;AAQD,SAAS,SAAS,CAAC,CAA4B;IAC7C,IAAI,CAAC,CAAC,EAAE,OAAO;QAAE,OAAO,SAAS,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/browse/StealthEngine.d.ts

@@ -28,13 +28,20 @@ export declare class StealthEngine {
     /**
      * 在 navigate 前注入 stealth profile（CDP methods 直调 + evaluate_script）。
      *
-     * 流程（parse5 §3.3.1）：
+     * v1.5 流程（parse13 §3.1 + §4.5）：
      *  1. profile 校验（未知 profile 名 → throw；caller catch 走 didnt）
-     *  2. evaluate_script(STEALTH_INJECTION_SCRIPT) → navigator.webdriver / languages /
-     *     window.chrome / permissions 抹除
-     *  3. evaluate_script(userAgentOverride) → navigator.userAgent 改写（CDP
-     *     Network.setUserAgentOverride 在 chrome-devtools-mcp 暂未暴露独立工具，
-     *     evaluate 是 fallback；browserbase 自带 stealth 时本步幂等）
+     *  2. evaluate_script(buildUserAgentOverrideScript) → navigator.userAgent / platform /
+     *     language 改写（**先执行**，使后续 UA client hints 能读到正确 Chrome 版本）
+     *  3. evaluate_script(STEALTH_INJECTION_SCRIPT 16 路) → webdriver / languages / permissions /
+     *     chrome.runtime/app/csi/loadTimes / plugins / vendor / hardwareConcurrency / media.codecs /
+     *     webgl.vendor / iframe.contentWindow / outerdimensions / userAgentData（brands 版本与
+     *     UA 一致；Safari/Firefox profile 跳过）
+     *
+     * HTTP header 侧 sec-ch-ua / sec-fetch-* 注入（parse13 §4.5）：依赖 chrome-devtools-mcp
+     * 暴露 setExtraHTTPHeaders（spike 未解），v1.5 MVP 暂只走 JS 侧 navigator.userAgentData
+     * （ua-client-hints.ts 是 sec-ch-ua 的 JS API 投影）。profile 的 header 字段
+     * （secChUa / secFetch* / accept*）已定义在 StealthProfile 顶级 const（INV-30），供后续
+     * chrome-devtools-mcp 暴露 header 注入工具时直用。
      *
      * 注：viewport / timezone 由 chrome-devtools-mcp 启动 flag 控制
      *    （subprocess spec 加 --window-size / --timezone）；StealthEngine 不在这里设。
@@ -75,7 +82,19 @@ export declare class StealthEngine {
     /**
      * evaluate_script 包装：失败时不抛（stealth 是 best-effort，注入失败不阻断 browse）。
      * 调用方（injectProfile）希望 stealth 失败可恢复时用此 helper。
+     *
+     * W1-DEF-1（v1.8）：校验上游返回 isError——SDK 标准 { content, isError } 形态下
+     * callTool 不 reject 也会失败（上游脚本错误 / 契约拒绝），必须显式检查。
+     *
+     * @returns true=注入成功（上游非 isError）；false=失败（throw 或 isError）
      */
     private evaluate;
 }
+/**
+ * 把「语句串脚本」（如 STEALTH_INJECTION_SCRIPT 的 13 段 IIFE join）包成
+ * chrome-devtools-mcp@0.3.0 evaluate_script 要求的单个函数表达式。
+ * 上游调用该函数时各语句依次执行。输入必须已是函数表达式的场景不要走此包装
+ * （会产生 `() => { () => ... }` 的非法语句）。
+ */
+export declare function toFnExpression(script: string): string;
 //# sourceMappingURL=StealthEngine.d.ts.map

package/dist/browse/StealthEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StealthEngine.d.ts","sourceRoot":"","sources":["../../src/browse/StealthEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAKL,KAAK,kBAAkB,EAExB,MAAM,uBAAuB,CAAC;AAK/B,qBAAa,aAAa;IACxB;;;;;;;;;;;;;;;;;OAiBG;IACG,aAAa,CACjB,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,kBAAkB,GAC9B,OAAO,CAAC,IAAI,CAAC;IA0BhB;;;;;;;;;OASG;IACG,yBAAyB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAsBpE;;;;;;;;;;;OAWG;IACH,oBAAoB,CAAC,MAAM,EAAE,qBAAqB,GAAG,uBAAuB,GAAG;QAC7E,OAAO,EAAE,OAAO,CAAC;QACjB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,MAAM,CAAC;KACf;IAoBD;;;OAGG;YACW,QAAQ;CAgBvB"}
+{"version":3,"file":"StealthEngine.d.ts","sourceRoot":"","sources":["../../src/browse/StealthEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAG5D,OAAO,EAKL,KAAK,kBAAkB,EAExB,MAAM,uBAAuB,CAAC;AAK/B,qBAAa,aAAa;IACxB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,aAAa,CACjB,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,kBAAkB,GAC9B,OAAO,CAAC,IAAI,CAAC;IA4ChB;;;;;;;;;OASG;IACG,yBAAyB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAwBpE;;;;;;;;;;;OAWG;IACH,oBAAoB,CAAC,MAAM,EAAE,qBAAqB,GAAG,uBAAuB,GAAG;QAC7E,OAAO,EAAE,OAAO,CAAC;QACjB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,MAAM,CAAC;KACf;IAoBD;;;;;;;;OAQG;YACW,QAAQ;CA6BvB;AAKD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAErD"}