moonlighting 0.1.0__tar.gz

moonlighting-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 junjunni
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

moonlighting-0.1.0/PKG-INFO

@@ -0,0 +1,240 @@
+Metadata-Version: 2.4
+Name: moonlighting
+Version: 0.1.0
+Summary: Invisible hands for your AI agent: a real Chrome on a hidden desktop, ref-based control, credentials that never reach the model.
+Author: junjunni
+License: MIT
+Project-URL: Homepage, https://github.com/xinyuzjj/moonlighting
+Project-URL: Issues, https://github.com/xinyuzjj/moonlighting/issues
+Keywords: mcp,browser-automation,ai-agents,playwright,credentials,windows
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Topic :: Software Development :: Testing
+Classifier: Topic :: Internet :: WWW/HTTP :: Browsers
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: websockets>=12
+Requires-Dist: pillow>=10
+Dynamic: license-file
+
+# Moonlighting
+
+**Invisible hands for your AI agent.** A real Chrome, on its own hidden Windows desktop,
+driven by element references instead of coordinates — with credentials that never reach
+the model.
+
+**English** · [中文](README.zh-CN.md)
+
+```
+┌─ your desktop ─────────────────────────────┐
+│  Hermes / Claude / Codex / any MCP client   │
+└───────────────┬────────────────────────────┘
+                │ MCP (stdio)  or  local HTTP
+┌───────────────▼────────────────────────────┐
+│  hidden desktop "HermesDesk"                │
+│  ┌──────────────────────────────────────┐   │
+│  │ real Chrome + persistent profile     │   │
+│  │ (logins, wallet, extensions)         │   │
+│  └──────────────────────────────────────┘   │
+│  credential broker (DPAPI, origin-bound)    │
+└─────────────────────────────────────────────┘
+```
+
+You never see a window flash. The agent never sees a password.
+
+## Why
+
+Driving a browser as an agent usually goes wrong in three places:
+
+| Problem | What most setups do | What this does |
+|---|---|---|
+| **Finding elements** | screenshot + guess coordinates | one accessibility snapshot, act on `[ref=e42]` |
+| **Losing state** | fresh profile every run | persistent profile on a private desktop; reopen and the session is still there |
+| **Handling passwords** | paste into the prompt | user types into a masked popup → DPAPI-encrypted locally → injected by the broker, never returned to the model |
+
+## Install
+
+Requires Windows 10/11, Python 3.10+, Node 18+ (for the Playwright MCP child), Chrome.
+
+### Option A — pip (no paths to edit)
+
+```bash
+pip install moonlighting
+moonlighting-setup --options          # where should browser data live?
+moonlighting-setup --home "D:\moonlighting"
+moonlighting                          # starts stream + broker + driver
+```
+
+Then wire it into your MCP client with **no absolute paths at all**:
+
+```json
+{ "mcpServers": { "browser": { "command": "moonlighting-mcp" } } }
+```
+
+`moonlighting-mcp`, `moonlighting-setup`, `moonlighting-session` and `moonlighting`
+are console scripts installed by the package.
+
+### Option B — clone
+
+```bash
+git clone https://github.com/xinyuzjj/moonlighting.git
+cd moonlighting
+pip install -r requirements.txt
+
+python scripts/setup.py --options          # where should browser data live?
+python scripts/setup.py --home "D:\moonlighting"
+python scripts/svc.py                      # starts stream + broker + driver
+```
+
+Either way, `install_mcp.py` writes the right config for you — it detects whether
+`moonlighting-mcp` is installed and falls back to absolute script paths if not:
+
+```bash
+python scripts/install_mcp.py                 # print configs with real paths
+python scripts/install_mcp.py --write claude  # write it (backs up the original)
+python scripts/install_mcp.py --write codex
+python scripts/install_mcp.py --write all
+```
+
+`svc.py` / `moonlighting` prints a preview URL. Open it in the Hermes preview pane (or any
+browser) to watch and even click into the hidden desktop:
+
+```
+preview: http://127.0.0.1:8765/ctl
+```
+
+First run creates `<home>/token.txt` — every state-changing endpoint requires it.
+
+## Use it from an agent
+
+### Any MCP client (Claude Desktop, Claude Code, Codex CLI, Hermes)
+
+`scripts/mcp_server.py` is a standard MCP stdio server exposing **27 tools**
+(25 `browser_*` plus `cred_list` / `cred_fill`).
+
+If you installed with pip, the whole config is one line — no paths:
+
+```json
+{ "mcpServers": { "browser": { "command": "moonlighting-mcp" } } }
+```
+
+Cloned instead? Let `install_mcp.py` fill in the real paths:
+
+```bash
+python scripts/install_mcp.py --write all
+```
+
+Or write it by hand (Claude Desktop / Claude Code, `mcpServers`):
+
+```json
+{
+  "mcpServers": {
+    "browser": {
+      "command": "python",
+      "args": ["C:\\path\\to\\moonlighting\\scripts\\mcp_server.py",
+               "--cdp-endpoint", "http://127.0.0.1:18763"]
+    }
+  }
+}
+```
+
+Codex CLI (`~/.codex/config.toml` — TOML, snake_case, and give it more startup time):
+
+```toml
+[mcp_servers.browser]
+command = "python"
+args = ["C:\\path\\to\\moonlighting\\scripts\\mcp_server.py", "--cdp-endpoint", "http://127.0.0.1:18763"]
+startup_timeout_sec = 60
+tool_timeout_sec = 120
+```
+
+### Plain HTTP
+
+```bash
+TOKEN=$(python scripts/auth.py --print | sed 's/^token: //')
+
+curl -H "X-Hermes-Token: $TOKEN" http://127.0.0.1:8897/snap        # whole page + refs
+curl -H "X-Hermes-Token: $TOKEN" "http://127.0.0.1:8897/click?target=e42&element=Sign%20in"
+curl -H "X-Hermes-Token: $TOKEN" "http://127.0.0.1:8899/list"      # saved credentials (no secrets)
+```
+
+## Multiple agents, no interference
+
+Each session gets its own desktop, profile, and ports — two agents cannot fight over tabs
+or invalidate each other's element refs.
+
+```bash
+python scripts/session.py new --name a1 --url https://example.com
+python scripts/session.py list
+python scripts/session.py stop --name a1
+```
+
+```
+a1   cdp=18764  stream=8766  driver=8898  UP  http://127.0.0.1:8766/ctl
+```
+
+## Security model
+
+- **Passwords never enter the model context.** The user types into a masked popup; the
+  broker encrypts with Windows DPAPI, binds the secret to the page origin, and injects it.
+  Tool results only contain `{ok, verified, submitted, id_len, pwd_len}`.
+- **Origin-bound.** A credential saved for `https://github.com` is refused on any other origin.
+- **Token-gated.** `token.txt` is generated on first run (mode 600). Read-only probes
+  (`/health`, `/status`, `/snapshot`) stay open so the preview keeps working.
+- **Audited.** Every injection appends one line to `<home>/audit.jsonl`: timestamp, action,
+  origin, handle, result code. No plaintext, ever.
+- **No CAPTCHA evasion.** This drives a real browser; it does not spoof fingerprints,
+  solve puzzles, or defeat anti-bot systems.
+
+## Layout
+
+```
+scripts/
+  mcp_server.py      standard MCP stdio server (browser_* + cred_*)
+  browser_daemon.py  persistent driver: snapshot / click / type / tabs / eval
+  desk_stream.py     live view of the hidden desktop (CDP screencast) + click/type back-channel
+  vault_broker.py    credential broker: DPAPI, origin check, selector fill with read-back verify
+  cred_dialog.py     masked popup the user types into
+  login_flow.py      full login loop: popup → fill → verify → submit → retry on failure
+  desk_chrome.py     launch / close Chrome on a named private desktop
+  private_desktop.py Win32 desktop primitives (CreateDesktopW, WM_SETTEXT, PrintWindow)
+  session.py         per-agent isolation (desktop + profile + ports)
+  svc.py             start/stop the three services silently (no console windows)
+  ports.py           port allocation: if the default is taken, pick a free one
+  auth.py            token file + header helper
+templates/           preview pages (/ctl interactive, /view read-only)
+docs/SKILL.md        the long-form playbook: every pitfall we hit, with measurements
+```
+
+## Platform
+
+Windows only, by design: private desktops (`CreateDesktopW`), DPAPI, and silent process
+launch are Win32 primitives. The browser-control layer itself is portable — porting means
+replacing `private_desktop.py` and the DPAPI calls.
+
+## Acknowledgements
+
+Standing on these projects:
+
+| Project | How it is used |
+|---|---|
+| [microsoft/playwright-mcp](https://github.com/microsoft/playwright-mcp) | The accessibility-snapshot engine. `mcp_server.py` proxies `browser_*` tools to it; its `[ref=...]` model is what makes coordinate-free clicking possible. (Apache-2.0) |
+| [microsoft/playwright](https://github.com/microsoft/playwright) | The browser driver underneath playwright-mcp. (Apache-2.0) |
+| [python-websockets/websockets](https://github.com/python-websockets/websockets) | CDP transport for the driver, the stream and the broker. |
+| [python-pillow/Pillow](https://github.com/python-pillow/Pillow) | JPEG handling for the live preview and the drawn cursor. |
+
+Design ideas borrowed, no code vendored:
+
+- [browserbase/stagehand](https://github.com/browserbase/stagehand) — `observe()` returning real
+  selectors instead of pixels; that is why this project resolves elements by selector or ref
+  and never by coordinates.
+- [browser-use/browser-use](https://github.com/browser-use/browser-use) — the agent loop shape:
+  snapshot, act, verify.
+- [web-infra-dev/midscene](https://github.com/web-infra-dev/midscene) — the vision-based fallback
+  idea for canvas-only UIs (deliberately not enabled by default; it is slower).
+
+## License
+
+MIT. The Apache-2.0 licenses of playwright-mcp and Playwright apply to those components.

moonlighting-0.1.0/README.md

@@ -0,0 +1,219 @@
+# Moonlighting
+
+**Invisible hands for your AI agent.** A real Chrome, on its own hidden Windows desktop,
+driven by element references instead of coordinates — with credentials that never reach
+the model.
+
+**English** · [中文](README.zh-CN.md)
+
+```
+┌─ your desktop ─────────────────────────────┐
+│  Hermes / Claude / Codex / any MCP client   │
+└───────────────┬────────────────────────────┘
+                │ MCP (stdio)  or  local HTTP
+┌───────────────▼────────────────────────────┐
+│  hidden desktop "HermesDesk"                │
+│  ┌──────────────────────────────────────┐   │
+│  │ real Chrome + persistent profile     │   │
+│  │ (logins, wallet, extensions)         │   │
+│  └──────────────────────────────────────┘   │
+│  credential broker (DPAPI, origin-bound)    │
+└─────────────────────────────────────────────┘
+```
+
+You never see a window flash. The agent never sees a password.
+
+## Why
+
+Driving a browser as an agent usually goes wrong in three places:
+
+| Problem | What most setups do | What this does |
+|---|---|---|
+| **Finding elements** | screenshot + guess coordinates | one accessibility snapshot, act on `[ref=e42]` |
+| **Losing state** | fresh profile every run | persistent profile on a private desktop; reopen and the session is still there |
+| **Handling passwords** | paste into the prompt | user types into a masked popup → DPAPI-encrypted locally → injected by the broker, never returned to the model |
+
+## Install
+
+Requires Windows 10/11, Python 3.10+, Node 18+ (for the Playwright MCP child), Chrome.
+
+### Option A — pip (no paths to edit)
+
+```bash
+pip install moonlighting
+moonlighting-setup --options          # where should browser data live?
+moonlighting-setup --home "D:\moonlighting"
+moonlighting                          # starts stream + broker + driver
+```
+
+Then wire it into your MCP client with **no absolute paths at all**:
+
+```json
+{ "mcpServers": { "browser": { "command": "moonlighting-mcp" } } }
+```
+
+`moonlighting-mcp`, `moonlighting-setup`, `moonlighting-session` and `moonlighting`
+are console scripts installed by the package.
+
+### Option B — clone
+
+```bash
+git clone https://github.com/xinyuzjj/moonlighting.git
+cd moonlighting
+pip install -r requirements.txt
+
+python scripts/setup.py --options          # where should browser data live?
+python scripts/setup.py --home "D:\moonlighting"
+python scripts/svc.py                      # starts stream + broker + driver
+```
+
+Either way, `install_mcp.py` writes the right config for you — it detects whether
+`moonlighting-mcp` is installed and falls back to absolute script paths if not:
+
+```bash
+python scripts/install_mcp.py                 # print configs with real paths
+python scripts/install_mcp.py --write claude  # write it (backs up the original)
+python scripts/install_mcp.py --write codex
+python scripts/install_mcp.py --write all
+```
+
+`svc.py` / `moonlighting` prints a preview URL. Open it in the Hermes preview pane (or any
+browser) to watch and even click into the hidden desktop:
+
+```
+preview: http://127.0.0.1:8765/ctl
+```
+
+First run creates `<home>/token.txt` — every state-changing endpoint requires it.
+
+## Use it from an agent
+
+### Any MCP client (Claude Desktop, Claude Code, Codex CLI, Hermes)
+
+`scripts/mcp_server.py` is a standard MCP stdio server exposing **27 tools**
+(25 `browser_*` plus `cred_list` / `cred_fill`).
+
+If you installed with pip, the whole config is one line — no paths:
+
+```json
+{ "mcpServers": { "browser": { "command": "moonlighting-mcp" } } }
+```
+
+Cloned instead? Let `install_mcp.py` fill in the real paths:
+
+```bash
+python scripts/install_mcp.py --write all
+```
+
+Or write it by hand (Claude Desktop / Claude Code, `mcpServers`):
+
+```json
+{
+  "mcpServers": {
+    "browser": {
+      "command": "python",
+      "args": ["C:\\path\\to\\moonlighting\\scripts\\mcp_server.py",
+               "--cdp-endpoint", "http://127.0.0.1:18763"]
+    }
+  }
+}
+```
+
+Codex CLI (`~/.codex/config.toml` — TOML, snake_case, and give it more startup time):
+
+```toml
+[mcp_servers.browser]
+command = "python"
+args = ["C:\\path\\to\\moonlighting\\scripts\\mcp_server.py", "--cdp-endpoint", "http://127.0.0.1:18763"]
+startup_timeout_sec = 60
+tool_timeout_sec = 120
+```
+
+### Plain HTTP
+
+```bash
+TOKEN=$(python scripts/auth.py --print | sed 's/^token: //')
+
+curl -H "X-Hermes-Token: $TOKEN" http://127.0.0.1:8897/snap        # whole page + refs
+curl -H "X-Hermes-Token: $TOKEN" "http://127.0.0.1:8897/click?target=e42&element=Sign%20in"
+curl -H "X-Hermes-Token: $TOKEN" "http://127.0.0.1:8899/list"      # saved credentials (no secrets)
+```
+
+## Multiple agents, no interference
+
+Each session gets its own desktop, profile, and ports — two agents cannot fight over tabs
+or invalidate each other's element refs.
+
+```bash
+python scripts/session.py new --name a1 --url https://example.com
+python scripts/session.py list
+python scripts/session.py stop --name a1
+```
+
+```
+a1   cdp=18764  stream=8766  driver=8898  UP  http://127.0.0.1:8766/ctl
+```
+
+## Security model
+
+- **Passwords never enter the model context.** The user types into a masked popup; the
+  broker encrypts with Windows DPAPI, binds the secret to the page origin, and injects it.
+  Tool results only contain `{ok, verified, submitted, id_len, pwd_len}`.
+- **Origin-bound.** A credential saved for `https://github.com` is refused on any other origin.
+- **Token-gated.** `token.txt` is generated on first run (mode 600). Read-only probes
+  (`/health`, `/status`, `/snapshot`) stay open so the preview keeps working.
+- **Audited.** Every injection appends one line to `<home>/audit.jsonl`: timestamp, action,
+  origin, handle, result code. No plaintext, ever.
+- **No CAPTCHA evasion.** This drives a real browser; it does not spoof fingerprints,
+  solve puzzles, or defeat anti-bot systems.
+
+## Layout
+
+```
+scripts/
+  mcp_server.py      standard MCP stdio server (browser_* + cred_*)
+  browser_daemon.py  persistent driver: snapshot / click / type / tabs / eval
+  desk_stream.py     live view of the hidden desktop (CDP screencast) + click/type back-channel
+  vault_broker.py    credential broker: DPAPI, origin check, selector fill with read-back verify
+  cred_dialog.py     masked popup the user types into
+  login_flow.py      full login loop: popup → fill → verify → submit → retry on failure
+  desk_chrome.py     launch / close Chrome on a named private desktop
+  private_desktop.py Win32 desktop primitives (CreateDesktopW, WM_SETTEXT, PrintWindow)
+  session.py         per-agent isolation (desktop + profile + ports)
+  svc.py             start/stop the three services silently (no console windows)
+  ports.py           port allocation: if the default is taken, pick a free one
+  auth.py            token file + header helper
+templates/           preview pages (/ctl interactive, /view read-only)
+docs/SKILL.md        the long-form playbook: every pitfall we hit, with measurements
+```
+
+## Platform
+
+Windows only, by design: private desktops (`CreateDesktopW`), DPAPI, and silent process
+launch are Win32 primitives. The browser-control layer itself is portable — porting means
+replacing `private_desktop.py` and the DPAPI calls.
+
+## Acknowledgements
+
+Standing on these projects:
+
+| Project | How it is used |
+|---|---|
+| [microsoft/playwright-mcp](https://github.com/microsoft/playwright-mcp) | The accessibility-snapshot engine. `mcp_server.py` proxies `browser_*` tools to it; its `[ref=...]` model is what makes coordinate-free clicking possible. (Apache-2.0) |
+| [microsoft/playwright](https://github.com/microsoft/playwright) | The browser driver underneath playwright-mcp. (Apache-2.0) |
+| [python-websockets/websockets](https://github.com/python-websockets/websockets) | CDP transport for the driver, the stream and the broker. |
+| [python-pillow/Pillow](https://github.com/python-pillow/Pillow) | JPEG handling for the live preview and the drawn cursor. |
+
+Design ideas borrowed, no code vendored:
+
+- [browserbase/stagehand](https://github.com/browserbase/stagehand) — `observe()` returning real
+  selectors instead of pixels; that is why this project resolves elements by selector or ref
+  and never by coordinates.
+- [browser-use/browser-use](https://github.com/browser-use/browser-use) — the agent loop shape:
+  snapshot, act, verify.
+- [web-infra-dev/midscene](https://github.com/web-infra-dev/midscene) — the vision-based fallback
+  idea for canvas-only UIs (deliberately not enabled by default; it is slower).
+
+## License
+
+MIT. The Apache-2.0 licenses of playwright-mcp and Playwright apply to those components.

moonlighting-0.1.0/pyproject.toml

@@ -0,0 +1,62 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "moonlighting"
+version = "0.1.0"
+description = "Invisible hands for your AI agent: a real Chrome on a hidden desktop, ref-based control, credentials that never reach the model."
+readme = "README.md"
+requires-python = ">=3.10"
+license = { text = "MIT" }
+authors = [{ name = "junjunni" }]
+keywords = ["mcp", "browser-automation", "ai-agents", "playwright", "credentials", "windows"]
+dependencies = ["websockets>=12", "pillow>=10"]
+classifiers = [
+    "Operating System :: Microsoft :: Windows",
+    "Programming Language :: Python :: 3",
+    "License :: OSI Approved :: MIT License",
+    "Topic :: Software Development :: Testing",
+    "Topic :: Internet :: WWW/HTTP :: Browsers",
+]
+
+[project.urls]
+Homepage = "https://github.com/xinyuzjj/moonlighting"
+Issues = "https://github.com/xinyuzjj/moonlighting/issues"
+
+[project.scripts]
+moonlighting = "svc:cli"
+moonlighting-mcp = "mcp_server:cli"
+moonlighting-setup = "setup:cli"
+moonlighting-session = "session:cli"
+
+[tool.setuptools]
+package-dir = { "" = "scripts" }
+py-modules = [
+    "auth",
+    "browser_daemon",
+    "cdp_click",
+    "cred_dialog",
+    "desk_browser",
+    "desk_chrome",
+    "desk_restore",
+    "desk_stream",
+    "ext_click",
+    "login_flow",
+    "mcp_server",
+    "ports",
+    "private_desktop",
+    "qclick",
+    "session",
+    "setup",
+    "svc",
+    "vault_broker",
+    "wclick",
+]
+
+[tool.setuptools.data-files]
+"share/moonlighting" = ["scripts/cred_form.html"]
+"share/moonlighting/templates" = [
+    "scripts/templates/desk_ctl.html",
+    "scripts/templates/desk_view.html",
+]

moonlighting-0.1.0/scripts/auth.py

@@ -0,0 +1,65 @@
+"""本地服务的访问令牌：挡住同机其他进程乱调。
+
+问题：8899 上跑着凭据代理，任何本机进程都能 `GET /inject_sel?handle=...` 让浏览器
+把密码填进一个 origin 相同的页面（同源伪造），8897/8765 同理能驱动浏览器和注入按键。
+
+做法：
+  * 首次启动生成 32 字节随机 token，写到 `<home>/token.txt`
+  * 所有**会改变状态**的接口要求 `X-Hermes-Token` 头（或 `?token=`）
+  * 只读接口（/snapshot、/status、/list 的元信息）不强制，方便看画面
+  * 客户端（cred_dialog、login_flow）自己从同一个文件读，用户无感
+
+环境变量 `HERMES_TOKEN` 优先，便于 CI/临时覆盖。
+"""
+import os
+import secrets
+
+HOME = os.environ.get("HERMES_BROWSER_HOME") or os.path.join(
+    os.environ.get("LOCALAPPDATA") or os.path.expanduser("~"), "hermes-browser")
+try:                                    # 装了 setup.py 就跟着它走
+    import ports as _ports
+    HOME = _ports.home()
+except Exception:  # noqa: BLE001
+    pass
+TOKEN_FILE = os.environ.get("HERMES_TOKEN_FILE") or os.path.join(HOME, "token.txt")
+
+
+def token():
+    env = os.environ.get("HERMES_TOKEN")
+    if env:
+        return env
+    try:
+        with open(TOKEN_FILE, encoding="utf-8") as f:
+            t = f.read().strip()
+        if t:
+            return t
+    except OSError:
+        pass
+    os.makedirs(os.path.dirname(TOKEN_FILE), exist_ok=True)
+    t = secrets.token_urlsafe(24)
+    with open(TOKEN_FILE, "w", encoding="utf-8") as f:
+        f.write(t)
+    try:
+        os.chmod(TOKEN_FILE, 0o600)
+    except OSError:
+        pass
+    return t
+
+
+def check(headers, query):
+    """headers: email.Message；query: dict[str, list[str]] 或 dict[str,str]"""
+    want = token()
+    got = headers.get("X-Hermes-Token") if headers is not None else None
+    if not got and query:
+        v = query.get("token")
+        got = (v[0] if isinstance(v, list) else v) if v else None
+    return bool(got) and secrets.compare_digest(str(got), want)
+
+
+def headers_for_client():
+    return {"X-Hermes-Token": token()}
+
+
+if __name__ == "__main__":
+    print("token 文件:", TOKEN_FILE)
+    print("token:", token()[:8] + "…（已写入文件，不完整打印）")