publishport-opencli 1.0.0

package/dist/src/browser/profile.d.ts

@@ -0,0 +1,96 @@
+export declare const DEFAULT_CONTEXT_ID = "default";
+/** [pp-only] 每环境独立代理。auth（username/password）走生成的 helper 扩展注入，
+ *  不写进 --proxy-server flag（flag 不支持账密，且会明文出现在进程列表里）。 */
+export type ProxyConfig = {
+    scheme: 'http' | 'https' | 'socks5';
+    host: string;
+    port: number;
+    username?: string;
+    password?: string;
+};
+/** [pp-only] 每环境指纹。创建时用 seed 一次性解析并存盘——之后每次启动都必须一致，
+ *  指纹漂移本身就是最强的风控信号。字段缺省表示「不改写、用真实值」。 */
+export type FingerprintConfig = {
+    /** 关掉时整套指纹改写不生效（仍可有 proxy / 时区跟随） */
+    enabled: boolean;
+    /** 决定所有噪声/派生值的随机种子，保证跨启动一致 */
+    seed: number;
+    /** IANA 时区，如 America/New_York；走启动 TZ 环境变量注入 */
+    timezone?: string;
+    /** navigator.language(s) + Accept-Language，如 en-US */
+    locale?: string;
+    /** 覆盖 navigator.userAgent（谨慎用；真实 UA 通常已足够干净） */
+    userAgent?: string;
+    /** navigator.platform，如 Win32 / MacIntel */
+    platform?: string;
+    hardwareConcurrency?: number;
+    /** navigator.deviceMemory（GB） */
+    deviceMemory?: number;
+    screen?: {
+        width: number;
+        height: number;
+    };
+    /** WebGL UNMASKED_VENDOR/RENDERER 改写（跨账号去关联的关键项） */
+    webglVendor?: string;
+    webglRenderer?: string;
+    /** 给 Canvas/WebGL 读像素加确定性噪声，打散 canvas 指纹哈希 */
+    canvasNoise?: boolean;
+};
+export type ManagedProfileEntry = {
+    /** Chrome --user-data-dir 指向的目录（绝对路径） */
+    userDataDir: string;
+    /** 固定分配的 CDP 调试端口 */
+    port: number;
+    /** 显式指定浏览器可执行文件；缺省时自动发现 Chrome/Chromium */
+    browserPath?: string;
+    createdAt?: string;
+    /** [pp-only] 用户自定义显示名/备注（UI 展示，不影响 CLI 名字/隔离） */
+    label?: string;
+    /** [pp-only] 每环境独立代理 */
+    proxy?: ProxyConfig;
+    /** [pp-only] 每环境指纹 */
+    fingerprint?: FingerprintConfig;
+    /** [pp-only] WebRTC 防泄漏（禁用非代理 UDP，防真实 IP 泄露）。缺省 = 开。 */
+    webrtc?: boolean;
+    /** [pp-only] 精简启动（关后台遥测/组件更新/登录诱导等）。缺省 = 开。 */
+    clean?: boolean;
+};
+export type ProfileConfig = {
+    version: 1;
+    defaultContextId?: string;
+    aliases: Record<string, string>;
+    /** [pp-only] 托管 profile 表，键为 profile 名（与 aliases 命名空间共享，不可撞名） */
+    managed?: Record<string, ManagedProfileEntry>;
+};
+/** profile 解析结果：走扩展（daemon 按 contextId 路由）还是托管 Chrome（CDP 直连） */
+export type ResolvedProfile = {
+    kind: 'extension';
+    contextId?: string;
+} | {
+    kind: 'managed';
+    name: string;
+    entry: ManagedProfileEntry;
+};
+export declare function managedProfilesBaseDir(): string;
+export declare function normalizeContextId(value: string | undefined | null): string | undefined;
+export declare function emptyProfileConfig(): ProfileConfig;
+export declare function loadProfileConfig(): ProfileConfig;
+export declare function saveProfileConfig(config: ProfileConfig): void;
+/**
+ * [pp-only] 统一 profile 解析：flag → OPENCLI_PROFILE → 配置默认，
+ * 名字命中托管表则走托管 Chrome，否则按扩展 alias/contextId 解析。
+ */
+export declare function resolveProfile(profile?: string): ResolvedProfile;
+export declare function resolveProfileContextId(profile?: string): string | undefined;
+export declare function getManagedProfile(name: string): ManagedProfileEntry | undefined;
+export declare function listManagedProfiles(): Array<{
+    name: string;
+    entry: ManagedProfileEntry;
+}>;
+export declare function addManagedProfile(name: string, entry: ManagedProfileEntry): ProfileConfig;
+/** [pp-only] 覆盖写已存在托管 profile 的配置（label/proxy/fingerprint 等），保留其 name。 */
+export declare function updateManagedProfile(name: string, entry: ManagedProfileEntry): ProfileConfig;
+export declare function removeManagedProfileEntry(name: string): ManagedProfileEntry;
+export declare function aliasForContextId(config: ProfileConfig, contextId: string): string | undefined;
+export declare function renameProfile(contextId: string, alias: string): ProfileConfig;
+export declare function setDefaultProfile(profile: string): ProfileConfig;

package/dist/src/browser/profile.js

@@ -0,0 +1,2 @@
+import*as Q from"node:fs";import*as S from"node:os";import*as O from"node:path";export const DEFAULT_CONTEXT_ID="default";function U(){const F=process.env.OPENCLI_CONFIG_DIR||O.join(S.homedir(),".opencli");return O.join(F,"browser-profiles.json")}export function managedProfilesBaseDir(){const F=process.env.OPENCLI_CONFIG_DIR||O.join(S.homedir(),".opencli");return O.join(F,"chrome-profiles")}export function normalizeContextId(F){return F?.trim()||void 0}export function emptyProfileConfig(){return{version:1,aliases:{}}}function V(F){return typeof F==="object"&&F!==null&&typeof F.userDataDir==="string"&&F.userDataDir.trim().length>0&&typeof F.port==="number"&&Number.isInteger(F.port)}export function loadProfileConfig(){try{const F=Q.readFileSync(U(),"utf-8"),j=JSON.parse(F),B=j.aliases&&typeof j.aliases==="object"?Object.fromEntries(Object.entries(j.aliases).filter((J)=>{const[K,L]=J;return typeof K==="string"&&K.trim().length>0&&typeof L==="string"&&L.trim().length>0})):{},H=j.managed&&typeof j.managed==="object"?Object.fromEntries(Object.entries(j.managed).filter((J)=>{const[K,L]=J;return typeof K==="string"&&K.trim().length>0&&V(L)})):void 0;return{version:1,aliases:B,...typeof j.defaultContextId==="string"&&j.defaultContextId.trim()?{defaultContextId:j.defaultContextId.trim()}:{},...H&&Object.keys(H).length>0?{managed:H}:{}}}catch{return emptyProfileConfig()}}export function saveProfileConfig(F){const j=U();Q.mkdirSync(O.dirname(j),{recursive:!0});Q.writeFileSync(j,JSON.stringify(F,null,2)+`
+`,"utf-8")}function W(F){const j=loadProfileConfig();return normalizeContextId(F)??normalizeContextId(process.env.OPENCLI_PROFILE)??normalizeContextId(j.defaultContextId)}export function resolveProfile(F){const j=loadProfileConfig(),B=W(F);if(!B)return{kind:"extension"};const H=j.managed?.[B];if(H)return{kind:"managed",name:B,entry:H};return{kind:"extension",contextId:j.aliases[B]??B}}export function resolveProfileContextId(F){const j=resolveProfile(F);if(j.kind==="managed")return;return j.contextId}export function getManagedProfile(F){return loadProfileConfig().managed?.[normalizeContextId(F)??""]}export function listManagedProfiles(){const F=loadProfileConfig().managed??{};return Object.entries(F).map(([j,B])=>({name:j,entry:B})).sort((j,B)=>j.name.localeCompare(B.name))}const X=/^[A-Za-z0-9][A-Za-z0-9_-]{0,31}$/;export function addManagedProfile(F,j){const B=normalizeContextId(F);if(!B)throw Error("profile 名不能为空");if(!X.test(B))throw Error("profile 名只能包含字母/数字/下划线/连字符，且以字母或数字开头（最长 32 字符）");const H=loadProfileConfig();if(H.managed?.[B])throw Error(`托管 profile "${B}" 已存在`);if(H.aliases[B])throw Error(`"${B}" 已被扩展 profile 别名占用，换个名字`);H.managed={...H.managed,[B]:j};saveProfileConfig(H);return H}export function updateManagedProfile(F,j){const B=normalizeContextId(F);if(!B)throw Error("profile 名不能为空");const H=loadProfileConfig();if(!H.managed?.[B])throw Error(`托管 profile "${B}" 不存在`);H.managed={...H.managed,[B]:j};saveProfileConfig(H);return H}export function removeManagedProfileEntry(F){const j=normalizeContextId(F),B=loadProfileConfig(),H=j?B.managed?.[j]:void 0;if(!j||!H||!B.managed)throw Error(`托管 profile "${F}" 不存在`);delete B.managed[j];if(Object.keys(B.managed).length===0)delete B.managed;if(B.defaultContextId===j)delete B.defaultContextId;saveProfileConfig(B);return H}export function aliasForContextId(F,j){for(const[B,H]of Object.entries(F.aliases))if(H===j)return B;return}export function renameProfile(F,j){const B=normalizeContextId(F),H=normalizeContextId(j);if(!B)throw Error("profile contextId is required");if(!H)throw Error("profile alias is required");const J=loadProfileConfig();if(J.managed?.[H])throw Error(`"${H}" 已被托管 profile 占用，换个别名`);for(const[K,L]of Object.entries(J.aliases))if(K!==H&&L===B)delete J.aliases[K];J.aliases[H]=B;saveProfileConfig(J);return J}export function setDefaultProfile(F){const j=normalizeContextId(F);if(!j)throw Error("profile is required");const B=loadProfileConfig();B.defaultContextId=B.managed?.[j]?j:B.aliases[j]??j;saveProfileConfig(B);return B}

package/dist/src/browser/proxy-test.d.ts

@@ -0,0 +1,28 @@
+/**
+ * [pp-only] 代理连通性 + 出口 geo 探测。
+ *
+ * 经代理请求 http://ip-api.com/json 拿到出口 IP / 国家 / 时区，用于：
+ *  1) 让用户在对话框里确认代理确实通、出口在哪；
+ *  2) 自动把浏览器时区/语言对齐到出口 geo（一致性卫生）。
+ *
+ * 用原生 net.Socket 手写最小 HTTP/SOCKS5 隧道，避免为 SOCKS 引第三方依赖
+ * （undici 只支持 HTTP CONNECT 代理）。刻意用 http 端点，免去 TLS 握手。
+ */
+import type { ProxyConfig } from './profile.js';
+export type ProxyTestResult = {
+    ok: boolean;
+    ip?: string;
+    country?: string;
+    countryCode?: string;
+    city?: string;
+    timezone?: string;
+    /** 由 countryCode 推导的默认 locale，如 en-US */
+    locale?: string;
+    error?: string;
+};
+export declare function localeForCountry(cc?: string): string | undefined;
+export declare function testProxy(proxy: ProxyConfig): Promise<ProxyTestResult>;
+/** 把 scheme://user:pass@host:port 解析成 ProxyConfig。 */
+export declare function parseProxyUrl(url: string): ProxyConfig;
+/** ProxyConfig → Chrome --proxy-server flag 值（不含账密）。 */
+export declare function proxyServerFlag(proxy: ProxyConfig): string;

package/dist/src/browser/proxy-test.js

@@ -0,0 +1,12 @@
+import*as R from"node:net";const $="ip-api.com",A=80,I="/json/?fields=status,message,country,countryCode,region,city,timezone,query",F=12000,B={US:"en-US",GB:"en-GB",CA:"en-CA",AU:"en-AU",SG:"en-SG",HK:"zh-HK",TW:"zh-TW",CN:"zh-CN",MO:"zh-MO",JP:"ja-JP",KR:"ko-KR",DE:"de-DE",FR:"fr-FR",ES:"es-ES",IT:"it-IT",NL:"nl-NL",RU:"ru-RU",BR:"pt-BR",PT:"pt-PT",IN:"en-IN",ID:"id-ID",TH:"th-TH",VN:"vi-VN",MY:"ms-MY",PH:"en-PH",TR:"tr-TR",PL:"pl-PL",SE:"sv-SE",NO:"nb-NO",DK:"da-DK",FI:"fi-FI",UA:"uk-UA",MX:"es-MX",AR:"es-AR"};export function localeForCountry(z){if(!z)return;return B[z.toUpperCase()]??"en-US"}function L(z){const V=z.indexOf(`\r
+\r
+`);return V>=0?z.slice(V+4):z}function U(z,V){return new Promise((D)=>{let W="";const J=(K)=>{try{z.destroy()}catch{}D(K)};z.setTimeout(F,()=>J({ok:!1,error:"代理请求超时"}));z.on("data",(K)=>{W+=K.toString("utf8")});z.on("end",()=>{try{const K=L(W),Q=K.indexOf("{"),X=K.lastIndexOf("}");if(Q<0||X<0)return J({ok:!1,error:"代理返回无法解析"});const Z=JSON.parse(K.slice(Q,X+1));if(Z.status!=="success")return J({ok:!1,error:Z.message||"出口探测失败"});J({ok:!0,ip:Z.query,country:Z.country,countryCode:Z.countryCode,city:Z.city,timezone:Z.timezone,locale:localeForCountry(Z.countryCode)})}catch(K){J({ok:!1,error:K instanceof Error?K.message:"解析失败"})}});z.on("error",(K)=>J({ok:!1,error:K.message}));z.write(V)})}function b(z){return new Promise((V)=>{const D=R.connect({host:z.host,port:z.port});D.setTimeout(F,()=>{try{D.destroy()}catch{}V({ok:!1,error:"连接代理超时"})});D.on("error",(W)=>V({ok:!1,error:`连接代理失败：${W.message}`}));D.on("connect",()=>{const W=z.username?`Proxy-Authorization: Basic ${Buffer.from(`${z.username}:${z.password??""}`).toString("base64")}\r
+`:"",J=`GET http://${$}${I} HTTP/1.1\r
+Host: ${$}\r
+${W}Connection: close\r
+\r
+`;U(D,J).then(V)})})}function q(z){return new Promise((V)=>{const D=R.connect({host:z.host,port:z.port});let W="greet";const J=(Q)=>{try{D.destroy()}catch{}V({ok:!1,error:Q})};D.setTimeout(F,()=>J("SOCKS5 代理超时"));D.on("error",(Q)=>J(`连接代理失败：${Q.message}`));D.on("connect",()=>{D.write(Buffer.from([5,2,0,2]))});const K=()=>{W="connect";const Q=Buffer.from($,"ascii"),X=Buffer.concat([Buffer.from([5,1,0,3,Q.length]),Q,Buffer.from([A>>8&255,A&255])]);D.write(X)};D.on("data",(Q)=>{if(W==="greet"){if(Q[0]!==5)return J("非 SOCKS5 代理");const X=Q[1];if(X===0)return K();if(X===2){if(!z.username)return J("代理要求账密但未提供");const Z=Buffer.from(z.username,"ascii"),Y=Buffer.from(z.password??"","ascii");W="auth";D.write(Buffer.concat([Buffer.from([1,Z.length]),Z,Buffer.from([Y.length]),Y]));return}return J("代理不支持所需认证方式")}if(W==="auth"){if(Q[1]!==0)return J("代理账密认证失败");return K()}if(W==="connect"){if(Q[1]!==0)return J(`SOCKS5 连接源站失败（code ${Q[1]}）`);D.removeAllListeners("data");const X=`GET ${I} HTTP/1.1\r
+Host: ${$}\r
+Connection: close\r
+\r
+`;U(D,X).then(V)}})})}export function testProxy(z){if(z.scheme==="socks5")return q(z);return b(z)}export function parseProxyUrl(z){const V=z.trim(),D=/^(https?|socks5):\/\/(?:([^:@/]+)(?::([^@/]*))?@)?([^:/@]+):(\d+)\/?$/.exec(V);if(!D)throw Error("代理格式应为 scheme://[user:pass@]host:port（scheme = http/https/socks5）");const[,W,J,K,Q,X]=D;return{scheme:W,host:Q,port:Number(X),...J?{username:decodeURIComponent(J)}:{},...K?{password:decodeURIComponent(K)}:{}}}export function proxyServerFlag(z){return`${z.scheme==="socks5"?"socks5":z.scheme}://${z.host}:${z.port}`}

package/dist/src/browser/shape-filter.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Shape-based field filter for `browser network --filter <fields>`.
+ *
+ * Agents know what fields a target request's body should contain
+ * (e.g. "author, text, likes") but not which of the captured requests
+ * carries that body. This module lets the network command filter
+ * entries down to those whose inferred shape exposes every requested
+ * field name as some path segment.
+ *
+ * Matching is "any-segment" (not last-segment-only): a field matches
+ * if it equals any segment name of any path in the shape map. This
+ * keeps nested-container fields (e.g. `legacy`, `author` used as an
+ * object key with further nesting) findable.
+ */
+import type { Shape } from './shape.js';
+export interface ParsedFilter {
+    /** Deduped, order-preserving, trimmed non-empty field names. */
+    fields: string[];
+}
+export interface FilterParseError {
+    /** `invalid_filter` structured error reason for agents. */
+    reason: string;
+}
+/**
+ * Parse `--filter` argument value. Splits on `,`, trims, drops empties,
+ * and dedupes (first-seen wins). Returns `FilterParseError` when the
+ * result is empty after cleaning — which means the caller passed only
+ * whitespace, commas, or an empty string.
+ */
+export declare function parseFilter(raw: string): ParsedFilter | FilterParseError;
+/**
+ * Extract named segments from a shape path. Drops the leading `$`,
+ * strips `[N]` array indices, and unwraps `["key"]` bracket-quoted
+ * keys back to their raw string.
+ *
+ * Examples:
+ *   `$`                              → []
+ *   `$.data.items[0].author`         → ['data','items','author']
+ *   `$.data.user["nick name"]`       → ['data','user','nick name']
+ *   `$.rows[0][1]`                   → ['rows']
+ */
+export declare function extractSegments(path: string): string[];
+/**
+ * Collect the set of segment names used anywhere in a shape map.
+ * The returned set is what we test field membership against.
+ */
+export declare function collectShapeSegments(shape: Shape): Set<string>;
+/**
+ * True iff every field in `fields` equals some segment name in `shape`.
+ * AND semantics: all fields must be present.
+ */
+export declare function shapeMatchesFilter(shape: Shape, fields: string[]): boolean;

package/dist/src/browser/shape-filter.js

@@ -0,0 +1 @@
+export function parseFilter(k){if(typeof k!=="string")return{reason:"--filter value must be a non-empty comma-separated field list"};const C=k.split(",").map((B)=>B.trim()).filter((B)=>B.length>0);if(C.length===0)return{reason:`--filter value must be a non-empty comma-separated field list (got "${k}")`};const z=new Set,E=[];for(const B of C)if(!z.has(B)){z.add(B);E.push(B)}return{fields:E}}export function extractSegments(k){if(!k||k==="$")return[];const C=[];let z=k.startsWith("$")?1:0;while(z<k.length){const E=k[z];if(E==="."){z++;continue}if(E==="["){const G=k.indexOf("]",z);if(G===-1)break;const F=k.slice(z+1,G);z=G+1;if(F.length>=2&&F.startsWith('"')&&F.endsWith('"'))try{C.push(JSON.parse(F))}catch{C.push(F.slice(1,-1))}continue}let B=z;while(B<k.length&&k[B]!=="."&&k[B]!=="[")B++;C.push(k.slice(z,B));z=B}return C}export function collectShapeSegments(k){const C=new Set;for(const z of Object.keys(k))for(const E of extractSegments(z))C.add(E);return C}export function shapeMatchesFilter(k,C){if(C.length===0)return!0;const z=collectShapeSegments(k);for(const E of C)if(!z.has(E))return!1;return!0}

package/dist/src/browser/shape-filter.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/browser/shape.d.ts

@@ -0,0 +1,23 @@
+/**
+ * JSON shape inference for browser network response previews.
+ *
+ * Produces a flat path → type descriptor map so agents can understand
+ * response structure without paying the token cost of the full body.
+ *
+ * Descriptors:
+ *   string | number | boolean | null              primitives
+ *   string(len=N)                                 strings longer than sampleStringLen
+ *   array(0) | array(N)                           array at depth cap or summarized
+ *   object | object(empty)                        objects at depth cap or summarized
+ *   (truncated)                                   output size budget exceeded
+ */
+export interface InferShapeOptions {
+    /** Max path depth to descend into (default 6) */
+    maxDepth?: number;
+    /** Byte budget for the serialized output; truncates when exceeded (default 2048) */
+    maxBytes?: number;
+    /** Strings longer than this get summarized as `string(len=N)` (default 80) */
+    sampleStringLen?: number;
+}
+export type Shape = Record<string, string>;
+export declare function inferShape(value: unknown, opts?: InferShapeOptions): Shape;

package/dist/src/browser/shape.js

@@ -0,0 +1 @@
+const _="$";export function inferShape(J,K={}){const U=K.maxDepth??6,V=K.maxBytes??2048,Y=K.sampleStringLen??80,M={};let W=2,H=!1;const C=(A,q)=>{if(H)return!1;const F=JSON.stringify(A).length+JSON.stringify(q).length+2;if(W+F>V){M["(truncated)"]=`reached ${V}B budget`;H=!0;return!1}M[A]=q;W+=F;return!0},N=(A,q,F)=>{if(H)return;if(A===null){C(q,"null");return}const E=typeof A;if(E==="string"){const G=A;C(q,G.length>Y?`string(len=${G.length})`:"string");return}if(E==="number"||E==="boolean"){C(q,E);return}if(E==="undefined"||E==="function"||E==="symbol"||E==="bigint"){C(q,E);return}if(Array.isArray(A)){if(A.length===0){C(q,"array(0)");return}if(F>=U){C(q,`array(${A.length})`);return}if(!C(q,`array(${A.length})`))return;N(A[0],`${q}[0]`,F+1);return}const X=A,Q=Object.keys(X);if(Q.length===0){C(q,"object(empty)");return}if(F>=U){C(q,`object(keys=${Q.length})`);return}if(!C(q,"object"))return;for(const G of Q){if(H)return;const Z=$(G)?`${q}.${G}`:`${q}[${JSON.stringify(G)}]`;N(X[G],Z,F+1)}};N(J,_,0);return M}function $(J){return/^[A-Za-z_$][\w$]*$/.test(J)}

package/dist/src/browser/shape.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/browser/stealth.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Stealth anti-detection module.
+ *
+ * Generates JS code that patches browser globals to hide automation
+ * fingerprints (e.g. navigator.webdriver, missing chrome object, empty
+ * plugin list). Injected before page scripts run so that websites cannot
+ * detect CDP / extension-based control.
+ *
+ * Inspired by puppeteer-extra-plugin-stealth.
+ */
+/**
+ * [pp-only] 单独的 beforeunload 中和脚本，供 page.goto() 在 navigate **之前**
+ * 对【当前 document】跑一次——堵住 stealth 覆盖不到的「离开当前页」盲区
+ * （stealth 是导航后注入的，兜不住离开旧页那一刻弹的框）。无 stealth guard，
+ * 每次都真正执行，幂等安全。
+ */
+export declare function generateBeforeUnloadGuardJs(): string;
+export declare function generateStealthJs(): string;