vcorp-chrome 2.0.0 → 2.2.1

package/extension/panel.html

@@ -17,11 +17,12 @@
   [hidden] { display: none !important; }
   body { margin: 0; background: var(--bg); color: var(--ink);
          font: 13px/1.6 -apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei", sans-serif; }
-  header { display: flex; align-items: center; gap: 10px; padding: 14px 16px 10px; }
-  header img { width: 30px; height: 30px; border-radius: 50%; }
-  header .t { font-weight: 600; font-size: 14px; }
-  header .v { color: var(--mute); font-size: 11px; margin-left: 4px; font-weight: 400; }
-  .pill { margin-left: auto; display: flex; align-items: center; gap: 6px; font-size: 11.5px; color: var(--mute);
+  header { position: sticky; top: 0; z-index: 1; display: flex; align-items: center; gap: 8px;
+           padding: 10px 12px 8px; background: var(--bg); }
+  header .jump { font-size: 12px; text-decoration: none; }
+  header .jump:hover { text-decoration: underline; }
+  header .jump.bad { color: var(--bad); font-weight: 500; }
+  .pill { display: flex; align-items: center; gap: 6px; font-size: 11.5px; color: var(--mute);
           padding: 3px 9px; border-radius: 999px; background: var(--soft); }
   .dot { width: 8px; height: 8px; border-radius: 50%; background: #a8a29e; flex: none; }
   .dot.ok { background: var(--ok); } .dot.warn { background: var(--warn); } .dot.bad { background: var(--bad); }
@@ -101,15 +102,52 @@
   a.guide { display: flex; text-decoration: none; color: inherit; cursor: pointer; border-radius: 8px; margin: 0 -6px; padding-left: 6px; padding-right: 6px; }
   a.guide:hover { background: var(--soft); }
   a.guide .go { color: var(--accent); font-size: 12px; flex: none; }
+  /* 需要你处理：置顶、闪烁，处理完就收起 */
+  .need { margin-left: auto; all: unset; cursor: pointer; font-size: 11.5px; font-weight: 600; color: #fff; background: var(--warn);
+          padding: 3px 9px; border-radius: 999px; animation: blink 1.2s ease-in-out infinite; }
+  .alert { border: 1.5px solid var(--warn); background: color-mix(in srgb, var(--warn) 8%, var(--card));
+           animation: flash 1.2s ease-in-out infinite; }
+  .alert h2 { color: var(--warn); font-weight: 600; display: flex; align-items: center; gap: 6px; }
+  .alert .pulse { background: var(--warn); }
+  .alert .task:first-child, .alert #cloudClaim:not([hidden]) + #asks .task:first-child { margin-top: 0; }
+  .alert .confirm { margin-top: 0; }
+  @keyframes flash { 0%, 100% { box-shadow: 0 0 0 0 color-mix(in srgb, var(--warn) 50%, transparent); }
+                     50% { box-shadow: 0 0 0 4px color-mix(in srgb, var(--warn) 22%, transparent); } }
+  @keyframes blink { 0%, 100% { opacity: 1; } 50% { opacity: .55; } }
+  @media (prefers-reduced-motion: reduce) { .alert, .need, .pulse { animation: none; } }
+  .top-err { margin: 0; padding: 8px 12px; border-radius: 10px; background: color-mix(in srgb, var(--bad) 10%, var(--card)); }
+  /* 帮助：全部折叠在最下面 */
+  .help details { border-top: 1px solid var(--line); padding: 2px 0 4px; }
+  .help details:first-of-type { border-top: 0; }
+  .help details summary { color: var(--ink); font-size: 12.5px; margin: 4px 0; }
+  .help details > div { color: var(--mute); font-size: 12px; margin: 2px 0 6px; }
+  .help code { flex: none; }
 </style>
 
+<!-- 侧栏自带标题栏已经写了名字，这里只留状态 -->
 <header>
-  <img src="icons/icon128.png" alt="" />
-  <div class="t">vcorp-chrome<span class="v" id="ver"></span></div>
   <div class="pill"><span class="dot" id="pilldot"></span><span id="pilltxt">检查中…</span></div>
+  <a class="jump" id="connJump" href="#conn">连接详情</a>
+  <button class="need" id="needPill" type="button" hidden></button>
 </header>
 
 <main>
+  <div class="msg bad top-err" id="cloudErr" hidden></div>
+
+  <!-- 1. 要你马上点头的：配对确认、任务批准、追加的网站/文件夹/应用/桌面动作 -->
+  <section id="alert" class="alert" hidden>
+    <h2><span class="pulse"></span>需要你处理</h2>
+    <div id="cloudClaim" hidden>
+      <div class="confirm">
+        <div>要把这个浏览器交给 <b id="claimOrigin"></b> 上的账号 <b id="claimAccount"></b> 吗？</div>
+        <div class="muted" style="margin-top:4px">配对码如果是别人发给你的，点取消。</div>
+        <div class="row"><button class="btn" id="claimYes">确认连接</button><button class="btn ghost" id="claimNo">取消</button></div>
+      </div>
+    </div>
+    <div id="asks"></div>
+  </section>
+
+  <!-- 2. 正在发生的 -->
   <section>
     <h2>这一页</h2>
     <div id="page"><div class="empty">读取中…</div></div>
@@ -120,56 +158,39 @@
     <div class="sess" id="sess"></div>
   </section>
 
-  <section>
-    <h2>连接</h2>
-    <div id="lights"></div>
-    <div class="cmd" id="reconnRow" hidden><button class="btn" id="reconn">重连</button>
-      <span class="sub" style="color:var(--mute);font-size:12px">插件没消失，断的只是到终端的连接</span></div>
-  </section>
-
+  <!-- 3. 云端 -->
   <section id="cloud">
     <h2>云端发布</h2>
     <!-- 没配对 -->
     <div id="cloudPair" hidden>
-      <div class="muted">让 maker.vcorp.ai 在这个浏览器里替你发布作品、查资料、办事——用的是你已经登录好的账号，
-        网站的 cookie 不会离开这台电脑。到网页上「浏览器扩展」里拿一个配对码填在这里。</div>
+      <div class="muted">到 maker.vcorp.ai「浏览器扩展」里拿一个配对码填在这里。</div>
       <div class="field">
         <input type="text" class="code" id="pairCode" maxlength="9" placeholder="ABCD-EFGH" autocomplete="off" spellcheck="false" />
       </div>
       <details>
-        <summary>服务器地址</summary>
+        <summary>服务器地址（自建服务才需要改）</summary>
         <div class="field"><input type="text" id="pairOrigin" spellcheck="false" /></div>
-        <div class="muted">只有自建了服务才需要改。</div>
       </details>
       <div class="row"><button class="btn" id="pairGo">下一步</button></div>
     </div>
-    <!-- 配对第一步完成，等用户确认账号 -->
-    <div id="cloudClaim" hidden>
-      <div class="confirm">
-        <div>要把这个浏览器交给 <b id="claimOrigin"></b> 上的账号 <b id="claimAccount"></b> 吗？</div>
-        <div class="muted" style="margin-top:4px">确认后，这个账号可以申请在你允许的网站上替你操作，每个任务都要你点头。配对码如果是别人发给你的，点取消。</div>
-        <div class="row"><button class="btn" id="claimYes">确认连接</button><button class="btn ghost" id="claimNo">取消</button></div>
-      </div>
-    </div>
     <!-- 已配对 -->
     <div id="cloudOn" hidden>
       <div class="light"><span class="dot" id="cloudDot"></span>
         <div><div class="name" id="cloudName"></div><div class="sub" id="cloudSub"></div></div></div>
-      <div class="lab" style="margin-top:6px">允许它使用的网站</div>
-      <div class="sites" id="cloudSites"></div>
-      <div class="muted" style="margin-top:4px">任务申请网站、你点了允许，就记在这里（含子域）。不在这里、也没在任务里批准的网站，它连页面都打不开。</div>
       <div id="cloudTasks"></div>
+      <div class="lab" style="margin-top:10px">允许它使用的网站</div>
+      <div class="sites" id="cloudSites"></div>
       <label class="sw-row">
-        <span class="txt">自动允许新任务<div class="sub">不再逐个弹窗确认。只在你信任这个账号时打开：新任务，以及它一开始就要去的网站，会直接放行。任务开始之后再加的网站，还有本地文件夹，仍然要你逐个点头</div></span>
-        <input type="checkbox" class="toggle" id="cloudAuto" />
+        <span class="txt">暂停<div class="sub">云端的命令一条都不接，直到你再打开</div></span>
+        <input type="checkbox" class="toggle" id="cloudPause" />
       </label>
       <label class="sw-row">
-        <span class="txt">对外动作不再逐条确认<div class="sub">发消息、投递、发帖之前不再问你。扫码、验证码仍然要你本人来。付款一律不做</div></span>
-        <input type="checkbox" class="toggle" id="cloudAutoConfirm" />
+        <span class="txt">自动允许新任务<div class="sub">只在你信任这个账号时打开</div></span>
+        <input type="checkbox" class="toggle" id="cloudAuto" />
       </label>
       <label class="sw-row">
-        <span class="txt">暂停<div class="sub">立刻断开，云端的命令一条都不接，直到你再打开</div></span>
-        <input type="checkbox" class="toggle" id="cloudPause" />
+        <span class="txt">对外动作不再逐条确认<div class="sub">发消息、发帖前不再问你；付款一律不做</div></span>
+        <input type="checkbox" class="toggle" id="cloudAutoConfirm" />
       </label>
       <details>
         <summary>操作记录</summary>
@@ -177,19 +198,17 @@
       </details>
       <div class="row"><button class="btn ghost" id="cloudReconn">重连</button><button class="btn ghost" id="cloudUnpair">断开并忘记这个服务器</button></div>
     </div>
-    <div class="msg bad" id="cloudErr" hidden></div>
   </section>
 
+  <!-- 4. 设置 -->
   <section>
     <h2>本地文件夹</h2>
-    <div class="muted">挂载之后，配对的网站可以申请读取里面的文档（Markdown、文本、PDF、Word、CSV、JSON、HTML）。只读，不会改你的文件。每次真正读取之前还会再问你一次。浏览器重启后如果这里显示需要恢复，点「恢复访问」。</div>
     <div id="folderList"></div>
     <div class="row"><button class="btn" id="folderAdd" type="button">添加文件夹</button></div>
   </section>
 
   <section>
     <h2>桌面应用</h2>
-    <div class="muted">启用后，配对的网站可以申请操作这台电脑上的某个应用（比如微信、Excel）。每个任务要用的应用都会先问你。浏览器窗口、密码管理器、终端一律不碰；付款不做，发送和删除之前会问你。需要先在终端运行一次 <code>npx vcorp-chrome desktop install</code>。</div>
     <div id="deskState" class="sub"></div>
     <div class="row">
       <button class="btn" id="deskOn" type="button">启用桌面能力</button>
@@ -199,22 +218,62 @@
 
   <section>
     <h2>设置</h2>
-    <a class="sw-row guide" id="guide" href="welcome.html">
-      <span class="txt">开始使用<div class="sub">配对码、接上本机 agent、第一句怎么说</div></span>
-      <span class="go">打开</span>
-    </a>
     <label class="sw-row">
-      <span class="txt">高保真模式<div class="sub">需要时用浏览器级真实输入，应付严格的站点和富文本编辑器；用完自动断开</div></span>
+      <span class="txt">高保真模式<div class="sub">需要时用浏览器级真实输入；用完自动断开</div></span>
       <input type="checkbox" class="toggle" id="l2" />
     </label>
     <label class="sw-row">
-      <span class="txt">页面标记<div class="sub">被操作的页面带彩色描边、光标和小头像；录屏演示时可以关掉</div></span>
+      <span class="txt">页面标记<div class="sub">被操作的页面带彩色描边和小头像；录屏时可以关掉</div></span>
       <input type="checkbox" class="toggle" id="mark" />
     </label>
   </section>
-</main>
 
-<footer>连不上时在终端跑 <code style="padding:1px 5px">npx vcorp-chrome doctor</code>，它会告诉你卡在哪一步。</footer>
+  <!-- 5. 帮助：连接诊断 + 折叠说明，都在最下面；顶上状态旁的「连接详情」跳到这里 -->
+  <section id="conn">
+    <h2>连接</h2>
+    <div id="lights"></div>
+    <div class="cmd" id="reconnRow" hidden><button class="btn" id="reconn">重连</button>
+      <span class="sub" style="color:var(--mute);font-size:12px">插件没消失，断的只是到终端的连接</span></div>
+  </section>
+
+  <section class="help">
+    <h2>帮助</h2>
+    <a class="sw-row guide" id="guide" href="welcome.html">
+      <span class="txt">开始使用<div class="sub">配对码、接上本机 agent、第一句怎么说</div></span>
+      <span class="go">打开</span>
+    </a>
+    <details>
+      <summary>连不上怎么办</summary>
+      <div>在终端跑 <code>npx vcorp-chrome doctor</code>，它会告诉你卡在哪一步。</div>
+    </details>
+    <details>
+      <summary>云端发布是什么</summary>
+      <div>让 maker.vcorp.ai 在这个浏览器里替你发布作品、查资料、办事——用的是你已经登录好的账号，网站的 cookie 不会离开这台电脑。
+        配对后，这个账号可以申请在你允许的网站上替你操作，每个任务都要你点头。</div>
+    </details>
+    <details>
+      <summary>允许的网站</summary>
+      <div>任务申请网站、你点了允许，就记在名单里（含子域）。不在名单里、也没在任务里批准的网站，它连页面都打不开。没有预设的平台。</div>
+    </details>
+    <details>
+      <summary>自动允许和免确认</summary>
+      <div>「自动允许新任务」：新任务，以及它一开始就要去的网站，会直接放行。任务开始之后再加的网站，还有本地文件夹，仍然要你逐个点头。</div>
+      <div>「对外动作不再逐条确认」：发消息、投递、发帖之前不再问你。扫码、验证码仍然要你本人来。付款一律不做。</div>
+    </details>
+    <details>
+      <summary>本地文件夹</summary>
+      <div>挂载之后，配对的网站可以申请读取里面的文档（Markdown、文本、PDF、Word、CSV、JSON、HTML）。只读，不会改你的文件。每次真正读取之前还会再问你一次。浏览器重启后如果显示需要恢复，点「恢复访问」。</div>
+    </details>
+    <details>
+      <summary>桌面应用</summary>
+      <div>启用后，配对的网站可以申请操作这台电脑上的某个应用（比如微信、Excel）。每个任务要用的应用都会先问你。浏览器窗口、密码管理器、终端一律不碰；付款不做，发送和删除之前会问你。需要先在终端运行一次 <code>npx vcorp-chrome desktop install</code>。</div>
+    </details>
+    <details>
+      <summary>高保真模式</summary>
+      <div>需要时用浏览器级真实输入，应付严格的站点和富文本编辑器；用完自动断开。</div>
+    </details>
+  </section>
+</main>
 
 <script type="module" src="panel.js"></script>
 </html>

package/extension/panel.js

@@ -21,7 +21,10 @@ const send = (msg) => chrome.runtime.sendMessage(msg).catch(() => null);
 const MINE = chrome.runtime.getManifest().version;
 const ACT_MS = 5000;   // 「正在做」只亮 5 秒——停手了还亮着就是在骗人
 
-$('ver').textContent = `v${MINE}`;
+$('connJump').onclick = (e) => {
+  e.preventDefault();
+  $('conn').scrollIntoView({ behavior: 'smooth', block: 'start' });
+};
 
 const relTime = (t) => {
   const s = Math.max(0, Math.round((Date.now() - t) / 1000));
@@ -189,6 +192,9 @@ async function renderConn(sessionCount) {
 
   $('pilldot').className = `dot ${pill[0]}`;
   $('pilltxt').textContent = pill[1];
+  // 断了或有更新时，跳转链接改成「去修复」，修法在下面的连接区
+  $('connJump').textContent = pill[0] === 'ok' ? '连接详情' : '去修复';
+  $('connJump').className = `jump${pill[0] === 'bad' ? ' bad' : ''}`;
 }
 
 async function refreshAll() {
@@ -302,9 +308,35 @@ function renderDesktop(s) {
     : d.error || '未启用';
 }
 
+// 一条待批准的申请，放进顶上的「需要你处理」
+function askBox(title, lines, yesText, noText, op, jobId) {
+  const box = el('div', 'task pending');
+  box.appendChild(el('div', 't', title));
+  for (const line of lines) box.appendChild(el('div', 'sub', line));
+  const row = el('div', 'row');
+  const yes = el('button', 'btn', yesText);
+  const no = el('button', 'btn ghost', noText);
+  yes.onclick = () => cloudCall(op, { jobId, allow: true });
+  no.onclick = () => cloudCall(op, { jobId, allow: false });
+  row.append(yes, no);
+  box.appendChild(row);
+  $('asks').appendChild(box);
+}
+
+// 有事要处理：顶上区块和标题栏的闪烁徽标一起亮，处理完一起收
+function syncAlert() {
+  const n = $('asks').childElementCount + ($('cloudClaim').hidden ? 0 : 1);
+  $('alert').hidden = !n;
+  $('needPill').hidden = !n;
+  $('needPill').textContent = `${n} 项待处理`;
+  document.title = n ? `(${n}) vcorp-chrome` : 'vcorp-chrome';
+}
+$('needPill').onclick = () => $('alert').scrollIntoView({ behavior: 'smooth', block: 'start' });
+
 function renderCloud(s) {
   renderFolders(s);
   renderDesktop(s);
+  $('asks').textContent = '';
   const on = !!s.cfg;
   $('cloudPair').hidden = on || !!s.claim;
   $('cloudClaim').hidden = on || !s.claim;
@@ -314,7 +346,7 @@ function renderCloud(s) {
     $('claimOrigin').textContent = new URL(s.claim.origin).host;
     $('claimAccount').textContent = `「${s.claim.account || '（未命名）'}」`;
   }
-  if (!on) return;
+  if (!on) { syncAlert(); return; }
 
   const [cls, word] = CLOUD_STATE[s.status?.state] || CLOUD_STATE.off;
   $('cloudDot').className = `dot ${cls}`;
@@ -338,77 +370,38 @@ function renderCloud(s) {
     sites.appendChild(row);
   }
 
+  // 要用户点头的一律进顶上的「需要你处理」，这里只留进行中任务的状态
   const tasks = $('cloudTasks');
   tasks.textContent = '';
   for (const t of s.tasks.filter((x) => x.state !== 'denied')) {
-    const box = el('div', `task ${t.state}`);
-    box.appendChild(el('div', 't', t.title || `任务 ${t.jobId}`));
+    const title = t.title || `任务 ${t.jobId}`;
     if (t.state === 'pending') {
       const lines = [];
       if (t.ask?.length) lines.push(`请求访问这些网站：${t.ask.join('、')}（允许后加入允许名单）`);
       if (t.use?.length) lines.push(`要用允许名单里的：${t.use.join('、')}`);
       if (t.purpose) lines.push(`用途：${t.purpose}`);
-      for (const line of lines) box.appendChild(el('div', 'sub', line));
-      const row = el('div', 'row');
-      const yes = el('button', 'btn', '允许');
-      const no = el('button', 'btn ghost', '拒绝');
-      yes.onclick = () => cloudCall('decide', { jobId: t.jobId, allow: true });
-      no.onclick = () => cloudCall('decide', { jobId: t.jobId, allow: false });
-      row.append(yes, no);
-      box.appendChild(row);
-    } else {
-      const where = [...new Set([...(t.use || []), ...(t.sites || [])])].join('、') || '（还没有网站）';
-      box.appendChild(el('div', 'sub', `进行中 · ${where} · ${t.count} 条命令 · ${relTime(t.lastAt)}`));
-      if (t.ask?.length) {
-        box.appendChild(el('div', 'sub', `还想访问：${t.ask.join('、')}${t.askWhy ? `。用途：${t.askWhy}` : ''}`));
-        const ask = el('div', 'row');
-        const yes = el('button', 'btn', '允许这些网站');
-        const no = el('button', 'btn ghost', '不允许');
-        yes.onclick = () => cloudCall('decideSites', { jobId: t.jobId, allow: true });
-        no.onclick = () => cloudCall('decideSites', { jobId: t.jobId, allow: false });
-        ask.append(yes, no);
-        box.appendChild(ask);
-      }
-      if (t.folders?.length) box.appendChild(el('div', 'sub', `可读本地文件夹：${t.folders.join('、')}`));
-      if (t.folderAsk?.length) {
-        box.appendChild(el('div', 'sub', `还想读取本地文件夹：${t.folderAsk.join('、')}${t.folderAskWhy ? `。用途：${t.folderAskWhy}` : ''}`));
-        const ask = el('div', 'row');
-        const yes = el('button', 'btn', '允许这些文件夹');
-        const no = el('button', 'btn ghost', '不允许');
-        yes.onclick = () => cloudCall('decideFolders', { jobId: t.jobId, allow: true });
-        no.onclick = () => cloudCall('decideFolders', { jobId: t.jobId, allow: false });
-        ask.append(yes, no);
-        box.appendChild(ask);
-      }
-      if (t.apps?.length) box.appendChild(el('div', 'sub', `可操作桌面应用：${t.apps.join('、')}`));
-      if (t.appAsk?.length) {
-        box.appendChild(el('div', 'sub', `还想操作桌面应用：${t.appAsk.join('、')}${t.appAskWhy ? `。用途：${t.appAskWhy}` : ''}`));
-        const ask = el('div', 'row');
-        const yes = el('button', 'btn', '允许这些应用');
-        const no = el('button', 'btn ghost', '不允许');
-        yes.onclick = () => cloudCall('decideApps', { jobId: t.jobId, allow: true });
-        no.onclick = () => cloudCall('decideApps', { jobId: t.jobId, allow: false });
-        ask.append(yes, no);
-        box.appendChild(ask);
-      }
-      if (t.deskAsk) {
-        box.appendChild(el('div', 'sub', `要在桌面上：${t.deskAsk}`));
-        const ask = el('div', 'row');
-        const yes = el('button', 'btn', '同意');
-        const no = el('button', 'btn ghost', '不同意');
-        yes.onclick = () => cloudCall('decideDesk', { jobId: t.jobId, allow: true });
-        no.onclick = () => cloudCall('decideDesk', { jobId: t.jobId, allow: false });
-        ask.append(yes, no);
-        box.appendChild(ask);
-      }
-      const row = el('div', 'row');
-      const stop = el('button', 'btn ghost', '收回（关掉它的标签页）');
-      stop.onclick = () => cloudCall('endTask', { jobId: t.jobId });
-      row.appendChild(stop);
-      box.appendChild(row);
+      askBox(`新任务：${title}`, lines, '允许', '拒绝', 'decide', t.jobId);
+      continue;
     }
+    if (t.ask?.length) askBox(title, [`还想访问网站：${t.ask.join('、')}${t.askWhy ? `。用途：${t.askWhy}` : ''}`], '允许这些网站', '不允许', 'decideSites', t.jobId);
+    if (t.folderAsk?.length) askBox(title, [`还想读取本地文件夹：${t.folderAsk.join('、')}${t.folderAskWhy ? `。用途：${t.folderAskWhy}` : ''}`], '允许这些文件夹', '不允许', 'decideFolders', t.jobId);
+    if (t.appAsk?.length) askBox(title, [`还想操作桌面应用：${t.appAsk.join('、')}${t.appAskWhy ? `。用途：${t.appAskWhy}` : ''}`], '允许这些应用', '不允许', 'decideApps', t.jobId);
+    if (t.deskAsk) askBox(title, [`要在桌面上：${t.deskAsk}`], '同意', '不同意', 'decideDesk', t.jobId);
+
+    const box = el('div', 'task');
+    box.appendChild(el('div', 't', title));
+    const where = [...new Set([...(t.use || []), ...(t.sites || [])])].join('、') || '（还没有网站）';
+    box.appendChild(el('div', 'sub', `进行中 · ${where} · ${t.count} 条命令 · ${relTime(t.lastAt)}`));
+    if (t.folders?.length) box.appendChild(el('div', 'sub', `可读本地文件夹：${t.folders.join('、')}`));
+    if (t.apps?.length) box.appendChild(el('div', 'sub', `可操作桌面应用：${t.apps.join('、')}`));
+    const row = el('div', 'row');
+    const stop = el('button', 'btn ghost', '收回（关掉它的标签页）');
+    stop.onclick = () => cloudCall('endTask', { jobId: t.jobId });
+    row.appendChild(stop);
+    box.appendChild(row);
     tasks.appendChild(box);
   }
+  syncAlert();
 
   const log = $('cloudLog');
   log.textContent = '';
@@ -449,7 +442,9 @@ $('deskOn').onclick = async () => {
   const granted = await chrome.permissions.request({ permissions: ['nativeMessaging'] }).catch(() => false);
   if (!granted) { $('deskState').textContent = '没有拿到权限，桌面能力保持关闭'; return; }
   $('deskState').textContent = '启用中…第一次启用要重载扩展，侧栏若关掉了，重新打开即可';
-  await cloudCall('desktopEnable');
+  const r = await cloudCall('desktopEnable');
+  // 失败原因写在桌面这一栏，不要留着「启用中…」，也不用在顶上再报一遍
+  if (r && !r.ok && r.error) { $('deskState').textContent = r.error; $('cloudErr').hidden = true; }
 };
 $('deskOff').onclick = async () => {
   await cloudCall('desktopDisable');
@@ -460,7 +455,7 @@ $('deskOff').onclick = async () => {
 
 chrome.storage.onChanged.addListener((changes, area) => {
   const keys0 = Object.keys(changes);
-  if (keys0.some((k) => ['cloud', 'cloudTasks', 'cloudLog', 'cloudStatus', 'cloudClaim', 'folderTick', 'cloudDesktop'].includes(k))) void cloudCall('state');
+  if (keys0.some((k) => ['cloud', 'cloudTasks', 'cloudLog', 'cloudStatus', 'cloudClaim', 'folderTick', 'cloudDesktop', 'cloudDesktopError'].includes(k))) void cloudCall('state');
   if (area !== 'session') return;
   const keys = Object.keys(changes);
   if (keys.includes(`panel:${tabId}`) || keys.includes('liveSids')) renderPage();

package/native-host/full.js

@@ -0,0 +1,217 @@
+// 桌面完全模式 —— 云端任务在这台电脑上拿到和本机 agent（goose 一类）一样的能力：
+// 跑命令、读写任意文件、agent-desktop 的全部命令。
+//
+// 只有用户在本机运行过 `vcorp-chrome desktop full on` 才开（见 paths.js 的 fullMode），
+// 原生宿主每条命令都现读开关。这一层不做「哪个能碰」的判断——那是第二阶段安全方案的事。
+//
+// 原生消息回包上限 1MB：大结果先落到临时文件，扩展再用 page 一段一段取回（见 pageOut / pageRead）。
+import { spawn } from 'node:child_process';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import crypto from 'node:crypto';
+
+const OUT_MAX = 4 * 1024 * 1024;          // shell 的 stdout / stderr 各留这么多
+const SHELL_TIMEOUT_MAX = 7 * 60 * 1000;  // 服务器那边一条命令等 8 分钟
+export const FILE_READ_MAX = 16 * 1024 * 1024;
+const LIST_MAX = 2000;
+
+const fail = (code, message) => ({ ok: false, error: { code, message, disposition: { delivery: 'not_delivered', retry: 'safe' } } });
+
+// ~ 和相对路径都从用户主目录算起
+export function resolvePath(p) {
+  const s = String(p ?? '').trim();
+  if (!s || s.includes('\0')) return '';
+  if (s === '~') return os.homedir();
+  if (s.startsWith('~/') || s.startsWith('~\\')) return path.join(os.homedir(), s.slice(2));
+  return path.resolve(os.homedir(), s);
+}
+
+// 用哪个壳。Windows 默认 PowerShell，并把输出编码钉成 UTF-8，中文不乱码。
+export function shellArgv(command, which = '') {
+  const win = process.platform === 'win32';
+  const sh = String(which || (win ? 'powershell' : 'sh')).toLowerCase();
+  if (sh === 'powershell' || sh === 'pwsh') {
+    const exe = sh === 'pwsh' ? 'pwsh' : win ? 'powershell.exe' : 'pwsh';
+    const pre = '[Console]::OutputEncoding=[Text.Encoding]::UTF8;$OutputEncoding=[Text.Encoding]::UTF8;$ProgressPreference="SilentlyContinue";';
+    return [exe, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', pre + command]];
+  }
+  if (sh === 'cmd') return ['cmd.exe', ['/d', '/s', '/c', `chcp 65001 >nul & ${command}`]];
+  if (sh === 'bash') return ['bash', ['-lc', command]];
+  if (sh === 'sh') return ['/bin/sh', ['-c', command]];
+  return null;
+}
+
+export function runShell(p = {}) {
+  const command = String(p.command ?? '');
+  if (!command.trim()) return Promise.resolve(fail('BAD_PARAMS', 'shell 要给 command'));
+  const argv = shellArgv(command, p.shell);
+  if (!argv) return Promise.resolve(fail('BAD_PARAMS', 'shell 只认 powershell / pwsh / cmd / bash / sh'));
+  const cwd = p.cwd ? resolvePath(p.cwd) : os.homedir();
+  if (!cwd || !fs.existsSync(cwd)) return Promise.resolve(fail('NOT_FOUND', `没有这个目录：${String(p.cwd).slice(0, 200)}`));
+  const timeoutMs = Math.min(Math.max(Number(p.timeout) || 60000, 1000), SHELL_TIMEOUT_MAX);
+  const env = { ...process.env, ...(p.env && typeof p.env === 'object' ? Object.fromEntries(Object.entries(p.env).map(([k, v]) => [k, String(v)])) : {}) };
+
+  return new Promise((resolve) => {
+    const started = Date.now();
+    const out = { stdout: [], stderr: [], n: { stdout: 0, stderr: 0 }, cut: false };
+    let timedOut = false;
+    let child;
+    try {
+      child = spawn(argv[0], argv[1], { cwd, env, windowsHide: true, stdio: [p.stdin !== undefined ? 'pipe' : 'ignore', 'pipe', 'pipe'] });
+    } catch (e) {
+      resolve(fail('SPAWN_FAILED', e.message));
+      return;
+    }
+    const keep = (which) => (b) => {
+      if (out.n[which] >= OUT_MAX) { out.cut = true; return; }
+      const room = OUT_MAX - out.n[which];
+      const part = b.length > room ? b.subarray(0, room) : b;
+      if (part.length < b.length) out.cut = true;
+      out[which].push(part);
+      out.n[which] += part.length;
+    };
+    child.stdout.on('data', keep('stdout'));
+    child.stderr.on('data', keep('stderr'));
+    if (p.stdin !== undefined) { child.stdin.on('error', () => {}); child.stdin.end(String(p.stdin)); }
+    const timer = setTimeout(() => {
+      timedOut = true;
+      // Windows 上 kill 只杀壳本身，它起的子进程还在；taskkill /t 连树一起收
+      if (process.platform === 'win32') spawn('taskkill', ['/pid', String(child.pid), '/t', '/f'], { windowsHide: true, stdio: 'ignore' }).on('error', () => {});
+      else child.kill('SIGKILL');
+    }, timeoutMs);
+    child.on('error', (e) => { clearTimeout(timer); resolve(fail(e.code === 'ENOENT' ? 'NOT_FOUND' : 'SPAWN_FAILED', `${argv[0]}：${e.message}`)); });
+    child.on('close', (code, signal) => {
+      clearTimeout(timer);
+      resolve({
+        ok: true,
+        data: {
+          exitCode: code, signal: signal || null, timedOut, truncated: out.cut, ms: Date.now() - started, cwd,
+          stdout: Buffer.concat(out.stdout).toString('utf8'),
+          stderr: Buffer.concat(out.stderr).toString('utf8'),
+        },
+      });
+    });
+  });
+}
+
+function statOf(abs, st) {
+  return {
+    path: abs,
+    type: st.isDirectory() ? 'dir' : st.isSymbolicLink() ? 'link' : st.isFile() ? 'file' : 'other',
+    size: st.size,
+    mtime: st.mtime.toISOString(),
+  };
+}
+
+export async function fileOp(p = {}) {
+  const action = String(p.action || '');
+  const abs = resolvePath(p.path);
+  if (!abs) return fail('BAD_PARAMS', 'file 要给 path');
+  const fsp = fs.promises;
+  try {
+    switch (action) {
+      case 'stat':
+        return { ok: true, data: statOf(abs, await fsp.lstat(abs)) };
+      case 'list': {
+        const depth = Math.min(Math.max(Math.floor(Number(p.depth) || 1), 1), 6);
+        const items = [];
+        let more = false;
+        const walk = async (dir, d) => {
+          let ents;
+          try { ents = await fsp.readdir(dir, { withFileTypes: true }); } catch (e) { if (dir === abs) throw e; return; }
+          for (const e of ents) {
+            if (items.length >= LIST_MAX) { more = true; return; }
+            const full = path.join(dir, e.name);
+            let st = null;
+            try { st = await fsp.lstat(full); } catch { /* 刚被删、没权限 */ }
+            items.push(st ? statOf(full, st) : { path: full, type: 'unknown' });
+            if (e.isDirectory() && d < depth) await walk(full, d + 1);
+          }
+        };
+        await walk(abs, 1);
+        return { ok: true, data: { path: abs, items, more } };
+      }
+      case 'read': {
+        const st = await fsp.stat(abs);
+        if (st.isDirectory()) return fail('IS_DIR', `${abs} 是目录：用 action:"list"`);
+        const offset = Math.max(Math.floor(Number(p.offset) || 0), 0);
+        const length = Math.min(Math.max(Math.floor(Number(p.length) || FILE_READ_MAX), 0), FILE_READ_MAX);
+        const fh = await fsp.open(abs, 'r');
+        try {
+          const buf = Buffer.alloc(Math.min(length, Math.max(st.size - offset, 0)));
+          const { bytesRead } = await fh.read(buf, 0, buf.length, offset);
+          const body = buf.subarray(0, bytesRead);
+          const enc = p.encoding === 'base64' ? 'base64' : 'utf8';
+          return { ok: true, data: { path: abs, size: st.size, offset, bytes: bytesRead, more: offset + bytesRead < st.size, encoding: enc, content: body.toString(enc) } };
+        } finally { await fh.close(); }
+      }
+      case 'write': {
+        if (p.content === undefined) return fail('BAD_PARAMS', 'write 要给 content');
+        const buf = Buffer.from(String(p.content), p.encoding === 'base64' ? 'base64' : 'utf8');
+        await fsp.mkdir(path.dirname(abs), { recursive: true });
+        if (p.append) await fsp.appendFile(abs, buf); else await fsp.writeFile(abs, buf);
+        return { ok: true, data: { path: abs, bytes: buf.length, appended: !!p.append } };
+      }
+      case 'mkdir':
+        await fsp.mkdir(abs, { recursive: true });
+        return { ok: true, data: { path: abs } };
+      case 'delete':
+        await fsp.rm(abs, { recursive: !!p.recursive, force: false });
+        return { ok: true, data: { path: abs, deleted: true } };
+      case 'move':
+      case 'copy': {
+        const to = resolvePath(p.to);
+        if (!to) return fail('BAD_PARAMS', `${action} 要给 to`);
+        await fsp.mkdir(path.dirname(to), { recursive: true });
+        if (action === 'move') await fsp.rename(abs, to);
+        else await fsp.cp(abs, to, { recursive: true, force: !!p.overwrite, errorOnExist: !p.overwrite });
+        return { ok: true, data: { from: abs, to } };
+      }
+      default:
+        return fail('BAD_PARAMS', 'file 的 action 只认 stat / list / read / write / mkdir / delete / move / copy');
+    }
+  } catch (e) {
+    const code = { ENOENT: 'NOT_FOUND', EACCES: 'PERM_DENIED', EPERM: 'PERM_DENIED', EEXIST: 'EXISTS', ENOTEMPTY: 'NOT_EMPTY', EISDIR: 'IS_DIR' }[e.code] || 'FS_ERROR';
+    return fail(code, `${e.code || ''} ${e.message}`.trim());
+  }
+}
+
+// ---------- 分页 ----------
+//
+// 宿主 → Chrome 一条最多 1MB。超出的回包整份写进临时目录，先回 { paged }，
+// 扩展再一段一段 page 取回、拼好再解析。最后一段取走时删文件；没取完的十分钟后清掉。
+
+const PAGE_DIR = path.join(os.tmpdir(), 'vcorp-desktop-pages');
+const PAGE_RAW = 600 * 1024;   // 每段原始字节，base64 后约 800KB
+const PAGE_TTL_MS = 10 * 60 * 1000;
+const PAGE_ID_RE = /^[a-f0-9]{24}$/;
+
+export function pageOut(body) {
+  fs.mkdirSync(PAGE_DIR, { recursive: true });
+  const now = Date.now();
+  for (const f of fs.readdirSync(PAGE_DIR)) {
+    try { if (now - fs.statSync(path.join(PAGE_DIR, f)).mtimeMs > PAGE_TTL_MS) fs.rmSync(path.join(PAGE_DIR, f), { force: true }); } catch { /* 别的进程在删 */ }
+  }
+  const id = crypto.randomBytes(12).toString('hex');
+  fs.writeFileSync(path.join(PAGE_DIR, `${id}.json`), body, { mode: 0o600 });
+  return { ok: true, paged: { id, size: body.length, chunk: PAGE_RAW } };
+}
+
+export function pageRead(id, offset) {
+  if (!PAGE_ID_RE.test(String(id))) return fail('BAD_PARAMS', 'page id 不合法');
+  const file = path.join(PAGE_DIR, `${id}.json`);
+  let fd;
+  try { fd = fs.openSync(file, 'r'); } catch { return fail('NOT_FOUND', '这一页已经过期或取完了'); }
+  try {
+    const size = fs.fstatSync(fd).size;
+    const at = Math.max(Math.floor(Number(offset) || 0), 0);
+    const buf = Buffer.alloc(Math.max(Math.min(PAGE_RAW, size - at), 0));
+    const n = fs.readSync(fd, buf, 0, buf.length, at);
+    const done = at + n >= size;
+    fs.closeSync(fd);
+    fd = null;
+    if (done) fs.rmSync(file, { force: true });
+    return { ok: true, page: { offset: at, data: buf.subarray(0, n).toString('base64'), done } };
+  } finally { if (fd !== null && fd !== undefined) fs.closeSync(fd); }
+}