From 4df54912a14bd7323a3b77db44b09ed0114a29ef Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Mon, 11 May 2026 01:25:01 +0800
Subject: [PATCH 01/12] fix(extension): ignore stale daemon websocket closes

---
 extension/dist/background.js     | 20 ++++++++++-------
 extension/src/background.test.ts | 38 ++++++++++++++++++++++++++++++--
 extension/src/background.ts      | 20 ++++++++++-------
 3 files changed, 60 insertions(+), 18 deletions(-)

diff --git a/extension/dist/background.js b/extension/dist/background.js
index 8a21a8c14..790c9ab1e 100644
--- a/extension/dist/background.js
+++ b/extension/dist/background.js
@@ -698,44 +698,48 @@ async function connect() {
   } catch {
     return;
   }
+  let thisWs;
   try {
     const contextId = await getCurrentContextId();
-    ws = new WebSocket(DAEMON_WS_URL);
+    thisWs = new WebSocket(DAEMON_WS_URL);
+    ws = thisWs;
     currentContextId = contextId;
   } catch {
     scheduleReconnect();
     return;
   }
-  ws.onopen = () => {
+  thisWs.onopen = () => {
+    if (ws !== thisWs) return;
     console.log("[opencli] Connected to daemon");
     reconnectAttempts = 0;
     if (reconnectTimer) {
       clearTimeout(reconnectTimer);
       reconnectTimer = null;
     }
-    ws?.send(JSON.stringify({
+    thisWs.send(JSON.stringify({
       type: "hello",
       contextId: currentContextId,
       version: chrome.runtime.getManifest().version,
       compatRange: ">=1.7.0"
     }));
   };
-  ws.onmessage = async (event) => {
+  thisWs.onmessage = async (event) => {
     try {
       const command = JSON.parse(event.data);
       const result = await handleCommand(command);
-      ws?.send(JSON.stringify(result));
+      thisWs.send(JSON.stringify(result));
     } catch (err) {
       console.error("[opencli] Message handling error:", err);
     }
   };
-  ws.onclose = () => {
+  thisWs.onclose = () => {
+    if (ws !== thisWs) return;
     console.log("[opencli] Disconnected from daemon");
     ws = null;
     scheduleReconnect();
   };
-  ws.onerror = () => {
-    ws?.close();
+  thisWs.onerror = () => {
+    thisWs.close();
   };
 }
 const MAX_EAGER_ATTEMPTS = 6;
diff --git a/extension/src/background.test.ts b/extension/src/background.test.ts
index d859dfd11..8ca548858 100644
--- a/extension/src/background.test.ts
+++ b/extension/src/background.test.ts
@@ -26,14 +26,20 @@ type MockTabGroup = {
 class MockWebSocket {
   static OPEN = 1;
   static CONNECTING = 0;
+  static instances: MockWebSocket[] = [];
   readyState = MockWebSocket.CONNECTING;
+  sent: string[] = [];
   onopen: (() => void) | null = null;
   onmessage: ((event: { data: string }) => void) | null = null;
   onclose: (() => void) | null = null;
   onerror: (() => void) | null = null;
 
-  constructor(_url: string) {}
-  send(_data: string): void {}
+  constructor(_url: string) {
+    MockWebSocket.instances.push(this);
+  }
+  send(data: string): void {
+    this.sent.push(data);
+  }
   close(): void {
     this.onclose?.();
   }
@@ -189,6 +195,7 @@ describe('background tab isolation', () => {
   beforeEach(() => {
     vi.resetModules();
     vi.useRealTimers();
+    MockWebSocket.instances = [];
     vi.stubGlobal('WebSocket', MockWebSocket);
   });
 
@@ -590,6 +597,33 @@ describe('background tab isolation', () => {
     });
   });
 
+  it('keeps the active daemon connection when a superseded WebSocket closes later', async () => {
+    const { chrome } = createChromeMock();
+    vi.stubGlobal('chrome', chrome);
+    vi.stubGlobal('fetch', vi.fn(async () => ({ ok: true })));
+
+    await import('./background');
+    await vi.waitFor(() => {
+      expect(MockWebSocket.instances).toHaveLength(1);
+    });
+    const firstWs = MockWebSocket.instances[0];
+    firstWs.readyState = 3;
+
+    const onAlarmListener = chrome.alarms.onAlarm.addListener.mock.calls[0][0];
+    await onAlarmListener({ name: 'keepalive' });
+    await vi.waitFor(() => {
+      expect(MockWebSocket.instances).toHaveLength(2);
+    });
+    const secondWs = MockWebSocket.instances[1];
+
+    firstWs.onclose?.();
+    secondWs.onmessage?.({ data: JSON.stringify({ id: 'sessions-after-stale-close', action: 'sessions' }) });
+
+    await vi.waitFor(() => {
+      expect(secondWs.sent.some((entry) => entry.includes('sessions-after-stale-close'))).toBe(true);
+    });
+  });
+
   it('can execute concurrently on two pages in the same workspace', async () => {
     const { chrome, tabs } = createChromeMock();
     tabs.push({
diff --git a/extension/src/background.ts b/extension/src/background.ts
index a8eb76840..304156604 100644
--- a/extension/src/background.ts
+++ b/extension/src/background.ts
@@ -100,16 +100,19 @@ async function connect(): Promise<void> {
     return; // daemon not running — skip WebSocket to avoid console noise
   }
 
+  let thisWs: WebSocket;
   try {
     const contextId = await getCurrentContextId();
-    ws = new WebSocket(DAEMON_WS_URL);
+    thisWs = new WebSocket(DAEMON_WS_URL);
+    ws = thisWs;
     currentContextId = contextId;
   } catch {
     scheduleReconnect();
     return;
   }
 
-  ws.onopen = () => {
+  thisWs.onopen = () => {
+    if (ws !== thisWs) return;
     console.log('[opencli] Connected to daemon');
     reconnectAttempts = 0; // Reset on successful connection
     if (reconnectTimer) {
@@ -117,7 +120,7 @@ async function connect(): Promise<void> {
       reconnectTimer = null;
     }
     // Send version + compatibility range so the daemon can report mismatches to the CLI
-    ws?.send(JSON.stringify({
+    thisWs.send(JSON.stringify({
       type: 'hello',
       contextId: currentContextId,
       version: chrome.runtime.getManifest().version,
@@ -125,24 +128,25 @@ async function connect(): Promise<void> {
     }));
   };
 
-  ws.onmessage = async (event) => {
+  thisWs.onmessage = async (event) => {
     try {
       const command = JSON.parse(event.data as string) as Command;
       const result = await handleCommand(command);
-      ws?.send(JSON.stringify(result));
+      thisWs.send(JSON.stringify(result));
     } catch (err) {
       console.error('[opencli] Message handling error:', err);
     }
   };
 
-  ws.onclose = () => {
+  thisWs.onclose = () => {
+    if (ws !== thisWs) return;
     console.log('[opencli] Disconnected from daemon');
     ws = null;
     scheduleReconnect();
   };
 
-  ws.onerror = () => {
-    ws?.close();
+  thisWs.onerror = () => {
+    thisWs.close();
   };
 }
 

From 765967ed39a0d16e03d669a03fad657d2299fc16 Mon Sep 17 00:00:00 2001
From: "J.Chen" <nehoo@live.com>
Date: Mon, 11 May 2026 02:38:06 +0800
Subject: [PATCH 02/12] fix(facebook/feed): add fallback extraction for empty
 article nodes

Add fallback extraction for Facebook feed posts when [role=article] nodes exist but contain empty text. Includes diagnostic errors, content/author cleanup, nested-container dedupe, and an evaluate-script syntax regression test.
---
 clis/facebook/feed.js      | 159 +++++++++++++++++++++++++++++--------
 clis/facebook/feed.test.js |  25 ++++++
 2 files changed, 150 insertions(+), 34 deletions(-)
 create mode 100644 clis/facebook/feed.test.js

diff --git a/clis/facebook/feed.js b/clis/facebook/feed.js
index a2bd538e0..ccf4ece5f 100644
--- a/clis/facebook/feed.js
+++ b/clis/facebook/feed.js
@@ -13,47 +13,138 @@ cli({
         { navigate: { url: 'https://www.facebook.com/', settleMs: 4000 } },
         { evaluate: `(() => {
   const limit = \${{ args.limit }};
-  const posts = document.querySelectorAll('[role="article"]');
-  return Array.from(posts)
+
+  // ── Primary extraction via [role="article"] ──────────────────────────
+  const articleNodes = document.querySelectorAll('[role="article"]');
+  const primaryPosts = Array.from(articleNodes)
     .filter(el => {
       const text = el.textContent.trim();
-      // Filter out "People you may know" suggestions (both CN and EN)
       return text.length > 30 &&
         !text.startsWith('可能认识') &&
         !text.startsWith('People you may know') &&
         !text.startsWith('People You May Know');
-    })
-    .slice(0, limit)
-    .map((el, i) => {
-      // Author from header link
-      const headerLink = el.querySelector('h2 a, h3 a, h4 a, strong a');
-      const author = headerLink ? headerLink.textContent.trim() : '';
-
-      // Post text: grab visible spans, filter noise
-      const spans = Array.from(el.querySelectorAll('div[dir="auto"]'))
-        .map(s => s.textContent.trim())
-        .filter(t => t.length > 10 && t.length < 500);
-      const content = spans.length > 0 ? spans[0] : '';
-
-      // Engagement: find like/comment/share counts (CN + EN)
-      const allText = el.textContent;
-      const likesMatch = allText.match(/所有心情：([\\d,.\\s]*[\\d万亿KMk]+)/) ||
-                         allText.match(/All:\\s*([\\d,.KMk]+)/) ||
-                         allText.match(/([\\d,.KMk]+)\\s*(?:likes?|reactions?)/i);
-      const commentsMatch = allText.match(/([\\d,.]+\\s*[万亿]?)\\s*条评论/) ||
-                            allText.match(/([\\d,.KMk]+)\\s*comments?/i);
-      const sharesMatch = allText.match(/([\\d,.]+\\s*[万亿]?)\\s*次分享/) ||
-                          allText.match(/([\\d,.KMk]+)\\s*shares?/i);
-
-      return {
-        index: i + 1,
-        author: author.substring(0, 50),
-        content: content.replace(/\\n/g, ' ').substring(0, 120),
-        likes: likesMatch ? likesMatch[1] : '-',
-        comments: commentsMatch ? commentsMatch[1] : '-',
-        shares: sharesMatch ? sharesMatch[1] : '-',
-      };
     });
+
+  // ── Fallback extraction via action buttons ────────────────────────────
+  // Facebook periodically restructures its DOM so [role="article"] nodes
+  // exist but have empty textContent. When that happens we locate post
+  // boundaries via the Like/Comment action buttons, then walk up the DOM
+  // to the nearest ancestor that contains meaningful text.
+  function fallbackExtract() {
+    const main = document.querySelector('[role="main"]');
+    if (!main) return null;
+
+    const likeSelectors = [
+      '[aria-label="Like"]', '[aria-label="赞"]',
+      '[aria-label="Comment"]', '[aria-label="评论"]',
+    ];
+    const actionButtons = Array.from(
+      main.querySelectorAll(likeSelectors.join(','))
+    );
+
+    const seen = new WeakSet();
+    const containers = [];
+    for (const btn of actionButtons) {
+      let node = btn.parentElement;
+      let found = null;
+      for (let depth = 0; depth < 20 && node; depth++, node = node.parentElement) {
+        if (node.textContent.trim().length >= 80) { found = node; break; }
+      }
+      if (!found || seen.has(found)) continue;
+      seen.add(found);
+      containers.push(found);
+    }
+    return containers.length ? containers : null;
+  }
+
+  // ── Extract fields from a post container ─────────────────────────────
+  function extractPost(el, i) {
+    // Try progressively broader selectors: heading links → role=link → any profile link → first substantial link
+    const authorLink =
+      el.querySelector('h2 a, h3 a, h4 a, strong a') ||
+      el.querySelector('a[href*="/"][role="link"]') ||
+      el.querySelector('a[href*="facebook.com/"]') ||
+      Array.from(el.querySelectorAll('a[href]')).find(a => {
+        const t = a.textContent.trim();
+        return t.length > 2 && t.length < 60 && !/^(like|comment|share|follow|\\d)/i.test(t);
+      });
+    // Fallback for sponsored posts where the advertiser name is not in a link
+    const author = (authorLink ? authorLink.textContent.trim() : '') ||
+      (() => {
+        const short = Array.from(el.querySelectorAll('[dir="auto"]'))
+          .map(s => s.textContent.trim())
+          .find(t => t.length > 2 && t.length <= 60 && !t.startsWith('#'));
+        return short || '';
+      })();
+
+    const seen = new Set();
+    const dirAutos = Array.from(el.querySelectorAll('[dir="auto"]'))
+      .map(s => s.textContent.trim())
+      .filter(t => t.length > 10 && t.length < 600 && !seen.has(t) && seen.add(t));
+    const content = dirAutos.join(' ');
+
+    const allText = el.textContent;
+    const likesMatch = allText.match(/所有心情：([\\d,.\\s]*[\\d万亿KMk]+)/) ||
+                       allText.match(/All:\\s*([\\d,.KMk]+)/) ||
+                       allText.match(/([\\d,.KMk]+)\\s*(?:likes?|reactions?)/i);
+    const commentsMatch = allText.match(/([\\d,.]+\\s*[万亿]?)\\s*条评论/) ||
+                          allText.match(/([\\d,.KMk]+)\\s*comments?/i);
+    const sharesMatch = allText.match(/([\\d,.]+\\s*[万亿]?)\\s*次分享/) ||
+                        allText.match(/([\\d,.KMk]+)\\s*shares?/i);
+
+    return {
+      index: i + 1,
+      author: author.substring(0, 50),
+      content: content.replace(/\\n/g, ' ').substring(0, 120),
+      likes: likesMatch ? likesMatch[1] : '-',
+      comments: commentsMatch ? commentsMatch[1] : '-',
+      shares: sharesMatch ? sharesMatch[1] : '-',
+    };
+  }
+
+  // ── Route: primary alone if sufficient, else supplement with fallback ──
+  const isNotSuggestion = el => {
+    const t = el.textContent.trim();
+    return !t.startsWith('可能认识') && !t.startsWith('People you may know') && !t.startsWith('People You May Know');
+  };
+
+  if (primaryPosts.length >= limit) {
+    return primaryPosts.slice(0, limit).map((el, i) => extractPost(el, i));
+  }
+
+  const fallbackContainers = fallbackExtract();
+  const fallbackPosts = fallbackContainers ? fallbackContainers.filter(isNotSuggestion) : [];
+
+  if (primaryPosts.length > 0 || fallbackPosts.length > 0) {
+    const primarySet = new WeakSet(primaryPosts);
+    const extra = fallbackPosts.filter(el => !primarySet.has(el));
+    const combined = [...primaryPosts, ...extra];
+    // Deduplicate nested containers of the same post: same-post ancestors
+    // share all [dir="auto"] blocks, so joining them gives a stable signature.
+    // Different posts by the same author differ in body text even if they
+    // share an author-name prefix, so they won't collide here.
+    const seenContent = new Set();
+    const deduped = combined.filter(el => {
+      const key = Array.from(el.querySelectorAll('[dir="auto"]'))
+        .map(s => s.textContent.trim()).filter(t => t.length > 5)
+        .join('|').substring(0, 200);
+      if (!key || seenContent.has(key)) return false;
+      seenContent.add(key);
+      return true;
+    });
+    return deduped.slice(0, limit).map((el, i) => extractPost(el, i));
+  }
+
+  // ── Diagnostic when both paths return nothing ─────────────────────────
+  const mainEl = document.querySelector('[role="main"]');
+  const articleCount = articleNodes.length;
+  const mainLen = mainEl ? mainEl.textContent.trim().length : 0;
+  throw new Error(
+    'facebook feed: no posts found. ' +
+    'article nodes=' + articleCount + ' (all empty text), ' +
+    'main textLength=' + mainLen + '. ' +
+    'The page may not be fully loaded or Facebook DOM changed again.'
+  );
 })()
 ` },
     ],
diff --git a/clis/facebook/feed.test.js b/clis/facebook/feed.test.js
new file mode 100644
index 000000000..1ae1f475f
--- /dev/null
+++ b/clis/facebook/feed.test.js
@@ -0,0 +1,25 @@
+/**
+ * Regression test: evaluate scripts inside template literals must produce
+ * syntactically valid JavaScript after framework placeholder substitution.
+ * Catches double-escaping bugs (\d, \s, \n) that typecheck cannot see
+ * because the code lives inside a string passed to page.evaluate.
+ */
+import { describe, expect, it } from 'vitest';
+import { getRegistry } from '@jackwener/opencli/registry';
+import './feed.js';
+
+describe('facebook feed evaluate script', () => {
+  it('produces valid JS after placeholder substitution', () => {
+    const cmd = getRegistry().get('facebook/feed');
+    expect(cmd).toBeDefined();
+
+    const evaluateStep = cmd.pipeline?.find(step => 'evaluate' in step);
+    expect(evaluateStep).toBeDefined();
+
+    // Replace framework placeholders ${{ expr }} with dummy values so
+    // new Function() can parse the script without substitution support.
+    const script = evaluateStep.evaluate.replace(/\$\{\{[^}]*\}\}/g, '10');
+
+    expect(() => new Function(`return (${script})`)).not.toThrow();
+  });
+});

From 049244428121c07a55c2635bba6ea05dd14526ea Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Mon, 11 May 2026 13:28:56 +0800
Subject: [PATCH 03/12] feat(boss): add job-seeker side support for chatlist
 and chatmsg (#9)

Closes #9.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 clis/boss/chatlist.js      |  90 ++++++++++++++++++---
 clis/boss/chatlist.test.js | 151 +++++++++++++++++++++++++++++++++++
 clis/boss/chatmsg.js       | 114 ++++++++++++++++++++------
 clis/boss/chatmsg.test.js  | 159 +++++++++++++++++++++++++++++++++++++
 clis/boss/utils.js         | 120 ++++++++++++++++++++++++++--
 5 files changed, 592 insertions(+), 42 deletions(-)
 create mode 100644 clis/boss/chatlist.test.js
 create mode 100644 clis/boss/chatmsg.test.js

diff --git a/clis/boss/chatlist.js b/clis/boss/chatlist.js
index aaadec883..685d86d00 100644
--- a/clis/boss/chatlist.js
+++ b/clis/boss/chatlist.js
@@ -1,10 +1,54 @@
 import { cli, Strategy } from '@jackwener/opencli/registry';
-import { requirePage, navigateToChat, fetchFriendList } from './utils.js';
+import {
+    requirePage, navigateToChat, navigateToGeekChat,
+    fetchFriendList, fetchGeekFriendLabelList, fetchGeekFriendInfoList,
+    readEncryptSystemId, assertOk, IDENTITY_MISMATCH_CODE,
+} from './utils.js';
+
+function formatMsgTime(ms) {
+    if (!ms) return '';
+    return new Date(ms).toLocaleString('zh-CN');
+}
+
+function mapBossRow(f) {
+    return {
+        name: f.name || '',
+        company: '',
+        job: f.jobName || '',
+        title: '',
+        last_msg: f.lastMessageInfo?.text || '',
+        last_time: f.lastTime || '',
+        uid: f.encryptUid || '',
+        security_id: f.securityId || '',
+    };
+}
+
+async function buildGeekRows(page, limit) {
+    const encryptSystemId = await readEncryptSystemId(page);
+    const labelList = await fetchGeekFriendLabelList(page, { encryptSystemId });
+    const friendIds = labelList.map((f) => f.friendId).filter(Boolean);
+    const enriched = await fetchGeekFriendInfoList(page, friendIds);
+    const enrichMap = new Map(enriched.map((f) => [String(f.friendId ?? f.uid), f]));
+    return labelList.slice(0, limit).map((f) => {
+        const e = enrichMap.get(String(f.friendId)) || {};
+        return {
+            name: e.name || f.name || '',
+            company: e.brandName || f.brandName || '',
+            job: e.jobName || f.jobName || '',
+            title: e.bossTitle || f.bossTitle || '',
+            last_msg: e.lastMessageInfo?.showText || e.lastMsg || f.lastMsg || '',
+            last_time: e.lastTime || formatMsgTime(e.lastMessageInfo?.msgTime) || formatMsgTime(f.updateTime) || '',
+            uid: e.encryptUid || f.encryptFriendId || String(e.uid ?? e.friendId ?? f.friendId ?? ''),
+            security_id: e.securityId || '',
+        };
+    });
+}
+
 cli({
     site: 'boss',
     name: 'chatlist',
     access: 'read',
-    description: 'BOSS直聘查看聊天列表（招聘端）',
+    description: 'BOSS直聘查看聊天列表（招聘端/求职端）',
     domain: 'www.zhipin.com',
     strategy: Strategy.COOKIE,
     navigateBefore: false,
@@ -12,23 +56,43 @@ cli({
     args: [
         { name: 'page', type: 'int', default: 1, help: 'Page number' },
         { name: 'limit', type: 'int', default: 20, help: 'Number of results' },
-        { name: 'job-id', default: '0', help: 'Filter by job ID (0=all)' },
+        { name: 'job-id', default: '0', help: 'Filter by job ID (0=all, boss side only)' },
+        { name: 'side', default: 'auto', choices: ['auto', 'boss', 'geek'], help: 'Identity side: auto (default), boss (recruiter), or geek (job-seeker)' },
     ],
-    columns: ['name', 'job', 'last_msg', 'last_time', 'uid', 'security_id'],
+    columns: ['name', 'company', 'job', 'title', 'last_msg', 'last_time', 'uid', 'security_id'],
     func: async (page, kwargs) => {
         requirePage(page);
+        const limit = kwargs.limit || 20;
+        const side = kwargs.side || 'auto';
+
+        if (side === 'boss') {
+            await navigateToChat(page);
+            const friends = await fetchFriendList(page, {
+                pageNum: kwargs.page || 1,
+                jobId: kwargs['job-id'] || '0',
+            });
+            return friends.slice(0, limit).map(mapBossRow);
+        }
+
+        if (side === 'geek') {
+            await navigateToGeekChat(page);
+            return await buildGeekRows(page, limit);
+        }
+
+        // auto: try recruiter first, fall back to geek on identity mismatch
         await navigateToChat(page);
-        const friends = await fetchFriendList(page, {
+        const bossResult = await fetchFriendList(page, {
             pageNum: kwargs.page || 1,
             jobId: kwargs['job-id'] || '0',
+            allowNonZero: true,
         });
-        return friends.slice(0, kwargs.limit || 20).map((f) => ({
-            name: f.name || '',
-            job: f.jobName || '',
-            last_msg: f.lastMessageInfo?.text || '',
-            last_time: f.lastTime || '',
-            uid: f.encryptUid || '',
-            security_id: f.securityId || '',
-        }));
+        if (Array.isArray(bossResult)) {
+            return bossResult.slice(0, limit).map(mapBossRow);
+        }
+        if (bossResult.code === IDENTITY_MISMATCH_CODE) {
+            await navigateToGeekChat(page);
+            return await buildGeekRows(page, limit);
+        }
+        assertOk(bossResult);
     },
 });
diff --git a/clis/boss/chatlist.test.js b/clis/boss/chatlist.test.js
new file mode 100644
index 000000000..7bf25c690
--- /dev/null
+++ b/clis/boss/chatlist.test.js
@@ -0,0 +1,151 @@
+import { describe, expect, it, vi } from 'vitest';
+import { getRegistry } from '@jackwener/opencli/registry';
+import './chatlist.js';
+
+const BOSS_FRIEND = {
+    name: '张三',
+    jobName: '后端工程师',
+    lastMessageInfo: { text: '你好' },
+    lastTime: '2024-01-01 10:00',
+    encryptUid: 'enc-boss-uid',
+    securityId: 'boss-sec-id',
+};
+
+const GEEK_LABEL_FRIEND = {
+    friendId: 12345,
+    name: '李四',
+    brandName: '字节跳动',
+    jobName: '产品经理',
+    bossTitle: 'HR',
+    lastMsg: '感谢投递',
+    updateTime: 1704067200000,
+    encryptFriendId: 'enc-geek-uid',
+};
+
+const GEEK_ENRICHED = {
+    friendId: 12345,
+    uid: 99999,
+    name: '李四',
+    brandName: '字节跳动',
+    jobName: '产品经理',
+    bossTitle: 'HR总监',
+    encryptUid: 'enc-geek-uid',
+    securityId: 'geek-sec-id',
+    lastMessageInfo: { showText: '感谢投递', msgTime: 1704067200000 },
+    lastTime: '2024-01-01',
+};
+
+function createPageMock(evaluateImpl) {
+    return {
+        goto: vi.fn().mockResolvedValue(undefined),
+        wait: vi.fn().mockResolvedValue(undefined),
+        evaluate: vi.fn().mockImplementation(evaluateImpl),
+    };
+}
+
+describe('boss chatlist', () => {
+    const command = getRegistry().get('boss/chatlist');
+
+    it('--side boss preserves existing behavior with 8-column output', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('getBossFriendListV2')) {
+                return { code: 0, zpData: { friendList: [BOSS_FRIEND] } };
+            }
+            return {};
+        });
+        const rows = await command.func(page, { page: 1, limit: 20, 'job-id': '0', side: 'boss' });
+        expect(page.goto).toHaveBeenCalledWith(expect.stringContaining('/web/chat/index'));
+        expect(rows).toHaveLength(1);
+        expect(rows[0]).toMatchObject({
+            name: '张三',
+            company: '',
+            job: '后端工程师',
+            title: '',
+            last_msg: '你好',
+            uid: 'enc-boss-uid',
+            security_id: 'boss-sec-id',
+        });
+    });
+
+    it('--side geek maps enriched getGeekFriendList data into 8 columns', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('document.cookie')) return 'test-enc-sys-id';
+            if (script.includes('geekFilterByLabel')) {
+                return { code: 0, zpData: { friendList: [GEEK_LABEL_FRIEND] } };
+            }
+            if (script.includes('getGeekFriendList.json')) {
+                return { code: 0, zpData: { result: [GEEK_ENRICHED] } };
+            }
+            return {};
+        });
+        const rows = await command.func(page, { page: 1, limit: 20, 'job-id': '0', side: 'geek' });
+        expect(page.goto).toHaveBeenCalledWith(expect.stringContaining('/web/geek/chat'));
+        expect(rows).toHaveLength(1);
+        expect(rows[0]).toMatchObject({
+            name: '李四',
+            company: '字节跳动',
+            job: '产品经理',
+            title: 'HR总监',
+            uid: 'enc-geek-uid',
+            security_id: 'geek-sec-id',
+        });
+    });
+
+    it('--side geek falls back to label fields when enrichment has no match', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('document.cookie')) return 'test-enc-sys-id';
+            if (script.includes('geekFilterByLabel')) {
+                return { code: 0, zpData: { friendList: [GEEK_LABEL_FRIEND] } };
+            }
+            if (script.includes('getGeekFriendList.json')) {
+                return { code: 0, zpData: { result: [] } };
+            }
+            return {};
+        });
+        const rows = await command.func(page, { page: 1, limit: 20, 'job-id': '0', side: 'geek' });
+        expect(rows).toHaveLength(1);
+        expect(rows[0].name).toBe('李四');
+        expect(rows[0].company).toBe('字节跳动');
+        expect(rows[0].security_id).toBe('');
+    });
+
+    it('--side auto falls back to geek when recruiter returns code 24', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('getBossFriendListV2')) {
+                return { code: 24, message: '请切换身份后再试' };
+            }
+            if (script.includes('document.cookie')) return 'test-enc-sys-id';
+            if (script.includes('geekFilterByLabel')) {
+                return { code: 0, zpData: { friendList: [GEEK_LABEL_FRIEND] } };
+            }
+            if (script.includes('getGeekFriendList.json')) {
+                return { code: 0, zpData: { result: [GEEK_ENRICHED] } };
+            }
+            return {};
+        });
+        const rows = await command.func(page, { page: 1, limit: 20, 'job-id': '0', side: 'auto' });
+        expect(rows).toHaveLength(1);
+        expect(rows[0].company).toBe('字节跳动');
+        expect(page.goto).toHaveBeenCalledWith(expect.stringContaining('/web/geek/chat'));
+    });
+
+    it('--side auto uses recruiter results when code 0 and does not call geek API', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('getBossFriendListV2')) {
+                return { code: 0, zpData: { friendList: [BOSS_FRIEND] } };
+            }
+            return {};
+        });
+        const rows = await command.func(page, { page: 1, limit: 20, 'job-id': '0', side: 'auto' });
+        expect(rows).toHaveLength(1);
+        expect(rows[0].name).toBe('张三');
+        const evaluateCalls = page.evaluate.mock.calls.map((c) => c[0]);
+        expect(evaluateCalls.some((s) => s.includes('geekFilterByLabel'))).toBe(false);
+    });
+
+    it('registers --side as a choices-constrained arg defaulting to auto', () => {
+        const sideArg = command.args.find((a) => a.name === 'side');
+        expect(sideArg?.choices).toEqual(['auto', 'boss', 'geek']);
+        expect(sideArg?.default).toBe('auto');
+    });
+});
diff --git a/clis/boss/chatmsg.js b/clis/boss/chatmsg.js
index a9ae945cb..28dcdf2a4 100644
--- a/clis/boss/chatmsg.js
+++ b/clis/boss/chatmsg.js
@@ -1,10 +1,61 @@
 import { cli, Strategy } from '@jackwener/opencli/registry';
-import { requirePage, navigateToChat, bossFetch, findFriendByUid } from './utils.js';
+import {
+    requirePage, navigateToChat, navigateToGeekChat,
+    bossFetch, findFriendByUid, findGeekFriendByUid,
+    fetchGeekHistoryMsg, readEncryptSystemId,
+    assertOk, IDENTITY_MISMATCH_CODE,
+} from './utils.js';
+
+const TYPE_MAP = {
+    1: '文本', 2: '图片', 3: '招呼', 4: '简历', 5: '系统',
+    6: '名片', 7: '语音', 8: '视频', 9: '表情',
+};
+
+function mapBossMsg(m, friend) {
+    const fromObj = m.from || {};
+    const isSelf = typeof fromObj === 'object' ? fromObj.uid !== friend.uid : false;
+    return {
+        from: isSelf ? '我' : (typeof fromObj === 'object' ? fromObj.name : friend.name),
+        type: TYPE_MAP[m.type] || `其他(${m.type})`,
+        text: m.text || m.body?.text || '',
+        time: m.time ? new Date(m.time).toLocaleString('zh-CN') : '',
+    };
+}
+
+function mapGeekMsg(m) {
+    return {
+        from: m.received ? '对方' : '我',
+        type: TYPE_MAP[m.type] || `其他(${m.type})`,
+        text: m.text || m.body?.text || m.body?.content || m.body?.showText ||
+            JSON.stringify(m.body || {}).slice(0, 120),
+        time: m.time ? new Date(m.time).toLocaleString('zh-CN') : '',
+    };
+}
+
+async function bossChatMsg(page, kwargs) {
+    const friend = await findFriendByUid(page, kwargs.uid);
+    if (!friend) throw new Error('未找到该候选人');
+    const gid = friend.uid;
+    const securityId = encodeURIComponent(friend.securityId);
+    const msgUrl = `https://www.zhipin.com/wapi/zpchat/boss/historyMsg?gid=${gid}&securityId=${securityId}&page=${kwargs.page}&c=20&src=0`;
+    const msgData = await bossFetch(page, msgUrl);
+    const messages = msgData.zpData?.messages || msgData.zpData?.historyMsgList || [];
+    return messages.map((m) => mapBossMsg(m, friend));
+}
+
+async function geekChatMsg(page, kwargs, encryptSystemId) {
+    const friend = await findGeekFriendByUid(page, kwargs.uid, { encryptSystemId });
+    if (!friend) throw new Error('未找到该聊天（geek 侧）');
+    if (!friend.securityId) throw new Error('该聊天缺少 securityId，无法获取历史消息');
+    const messages = await fetchGeekHistoryMsg(page, friend, { page: kwargs.page });
+    return messages.map(mapGeekMsg);
+}
+
 cli({
     site: 'boss',
     name: 'chatmsg',
     access: 'read',
-    description: 'BOSS直聘查看与候选人的聊天消息',
+    description: 'BOSS直聘查看聊天消息历史（招聘端/求职端）',
     domain: 'www.zhipin.com',
     strategy: Strategy.COOKIE,
     navigateBefore: false,
@@ -12,32 +63,47 @@ cli({
     args: [
         { name: 'uid', required: true, positional: true, help: 'Encrypted UID (from chatlist)' },
         { name: 'page', type: 'int', default: 1, help: 'Page number' },
+        { name: 'side', default: 'auto', choices: ['auto', 'boss', 'geek'], help: 'Identity side: auto (default), boss (recruiter), or geek (job-seeker)' },
     ],
     columns: ['from', 'type', 'text', 'time'],
     func: async (page, kwargs) => {
         requirePage(page);
+        const side = kwargs.side || 'auto';
+
+        if (side === 'boss') {
+            await navigateToChat(page);
+            return await bossChatMsg(page, kwargs);
+        }
+
+        if (side === 'geek') {
+            await navigateToGeekChat(page);
+            const encryptSystemId = await readEncryptSystemId(page);
+            return await geekChatMsg(page, kwargs, encryptSystemId);
+        }
+
+        // auto: try recruiter first, fall back to geek when not found or identity mismatch
         await navigateToChat(page);
-        const friend = await findFriendByUid(page, kwargs.uid);
-        if (!friend)
-            throw new Error('未找到该候选人');
-        const gid = friend.uid;
-        const securityId = encodeURIComponent(friend.securityId);
-        const msgUrl = `https://www.zhipin.com/wapi/zpchat/boss/historyMsg?gid=${gid}&securityId=${securityId}&page=${kwargs.page}&c=20&src=0`;
-        const msgData = await bossFetch(page, msgUrl);
-        const TYPE_MAP = {
-            1: '文本', 2: '图片', 3: '招呼', 4: '简历', 5: '系统',
-            6: '名片', 7: '语音', 8: '视频', 9: '表情',
-        };
-        const messages = msgData.zpData?.messages || msgData.zpData?.historyMsgList || [];
-        return messages.map((m) => {
-            const fromObj = m.from || {};
-            const isSelf = typeof fromObj === 'object' ? fromObj.uid !== friend.uid : false;
-            return {
-                from: isSelf ? '我' : (typeof fromObj === 'object' ? fromObj.name : friend.name),
-                type: TYPE_MAP[m.type] || '其他(' + m.type + ')',
-                text: m.text || m.body?.text || '',
-                time: m.time ? new Date(m.time).toLocaleString('zh-CN') : '',
-            };
-        });
+        const bossResult = await findFriendByUid(page, kwargs.uid, { allowNonZero: true });
+        if (bossResult?.friend) {
+            const friend = bossResult.friend;
+            const gid = friend.uid;
+            const securityId = encodeURIComponent(friend.securityId);
+            const msgUrl = `https://www.zhipin.com/wapi/zpchat/boss/historyMsg?gid=${gid}&securityId=${securityId}&page=${kwargs.page}&c=20&src=0`;
+            const msgData = await bossFetch(page, msgUrl);
+            const messages = msgData.zpData?.messages || msgData.zpData?.historyMsgList || [];
+            return messages.map((m) => mapBossMsg(m, friend));
+        }
+        // Not found in recruiter list or identity mismatch — check for hard errors first
+        if (bossResult?.code && bossResult.code !== 0 && bossResult.code !== IDENTITY_MISMATCH_CODE) {
+            assertOk(bossResult);
+        }
+        // Fall back to geek side
+        await navigateToGeekChat(page);
+        const encryptSystemId = await readEncryptSystemId(page);
+        const geekFriend = await findGeekFriendByUid(page, kwargs.uid, { encryptSystemId });
+        if (!geekFriend) throw new Error('uid 在招聘端与求职端聊天列表中均未找到');
+        if (!geekFriend.securityId) throw new Error('该聊天缺少 securityId，无法获取历史消息');
+        const messages = await fetchGeekHistoryMsg(page, geekFriend, { page: kwargs.page });
+        return messages.map(mapGeekMsg);
     },
 });
diff --git a/clis/boss/chatmsg.test.js b/clis/boss/chatmsg.test.js
new file mode 100644
index 000000000..99c70bacc
--- /dev/null
+++ b/clis/boss/chatmsg.test.js
@@ -0,0 +1,159 @@
+import { describe, expect, it, vi } from 'vitest';
+import { getRegistry } from '@jackwener/opencli/registry';
+import './chatmsg.js';
+
+const BOSS_FRIEND = {
+    uid: 12345,
+    encryptUid: 'enc-boss-uid',
+    securityId: 'boss-sec-id',
+    name: '候选人甲',
+};
+const BOSS_MSGS = [
+    { type: 1, text: 'Hello', from: { uid: 99999, name: 'HR' }, time: 1704067200000 },
+    { type: 1, text: '感谢', from: { uid: 12345, name: '候选人甲' }, time: 1704067201000 },
+];
+
+const GEEK_FRIEND_LABEL = {
+    friendId: 11111,
+    encryptFriendId: 'enc-geek-uid',
+    name: 'Boss张',
+    brandName: '公司A',
+};
+const GEEK_FRIEND_ENRICHED = {
+    friendId: 11111,
+    uid: 67890,
+    encryptUid: 'enc-geek-uid',
+    securityId: 'geek-sec-id',
+    name: 'Boss张',
+};
+const GEEK_MSGS = [
+    { type: 1, text: '欢迎投递', received: true, time: 1704067200000 },
+    { type: 1, text: '谢谢', received: false, time: 1704067201000 },
+];
+
+function createPageMock(evaluateImpl) {
+    return {
+        goto: vi.fn().mockResolvedValue(undefined),
+        wait: vi.fn().mockResolvedValue(undefined),
+        evaluate: vi.fn().mockImplementation(evaluateImpl),
+    };
+}
+
+describe('boss chatmsg', () => {
+    const command = getRegistry().get('boss/chatmsg');
+
+    it('--side boss preserves existing behavior', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('getBossFriendListV2')) {
+                return { code: 0, zpData: { friendList: [BOSS_FRIEND] } };
+            }
+            if (script.includes('boss/historyMsg')) {
+                return { code: 0, zpData: { messages: BOSS_MSGS } };
+            }
+            return {};
+        });
+        const rows = await command.func(page, { uid: 'enc-boss-uid', page: 1, side: 'boss' });
+        expect(page.goto).toHaveBeenCalledWith(expect.stringContaining('/web/chat/index'));
+        expect(rows).toHaveLength(2);
+        expect(rows[0].from).toBe('我');
+        expect(rows[1].from).toBe('候选人甲');
+    });
+
+    it('--side geek calls historyMsg with bossId, securityId, page, c=20, src=0', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('document.cookie')) return 'test-enc-sys-id';
+            if (script.includes('geekFilterByLabel')) {
+                return { code: 0, zpData: { friendList: [GEEK_FRIEND_LABEL] } };
+            }
+            if (script.includes('getGeekFriendList.json')) {
+                return { code: 0, zpData: { result: [GEEK_FRIEND_ENRICHED] } };
+            }
+            if (script.includes('geek/historyMsg')) {
+                return { code: 0, zpData: { messages: GEEK_MSGS } };
+            }
+            return {};
+        });
+        await command.func(page, { uid: 'enc-geek-uid', page: 1, side: 'geek' });
+        const historyScript = page.evaluate.mock.calls.find((c) => c[0].includes('geek/historyMsg'))?.[0];
+        expect(historyScript).toBeDefined();
+        expect(historyScript).toContain('bossId=67890');
+        expect(historyScript).toContain('securityId=');
+        expect(historyScript).toContain('page=1');
+        expect(historyScript).toContain('c=20');
+        expect(historyScript).toContain('src=0');
+    });
+
+    it('--side geek maps received:true to 对方 and received:false to 我', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('document.cookie')) return 'test-enc-sys-id';
+            if (script.includes('geekFilterByLabel')) {
+                return { code: 0, zpData: { friendList: [GEEK_FRIEND_LABEL] } };
+            }
+            if (script.includes('getGeekFriendList.json')) {
+                return { code: 0, zpData: { result: [GEEK_FRIEND_ENRICHED] } };
+            }
+            if (script.includes('geek/historyMsg')) {
+                return { code: 0, zpData: { messages: GEEK_MSGS } };
+            }
+            return {};
+        });
+        const rows = await command.func(page, { uid: 'enc-geek-uid', page: 1, side: 'geek' });
+        expect(rows[0].from).toBe('对方');
+        expect(rows[1].from).toBe('我');
+    });
+
+    it('non-text message body does not crash and produces truncated JSON', async () => {
+        const nonTextMsg = { type: 99, received: true, time: 1704067200000, body: { action: 'resume_request', detail: 'X' } };
+        const page = createPageMock(async (script) => {
+            if (script.includes('document.cookie')) return 'test-enc-sys-id';
+            if (script.includes('geekFilterByLabel')) {
+                return { code: 0, zpData: { friendList: [GEEK_FRIEND_LABEL] } };
+            }
+            if (script.includes('getGeekFriendList.json')) {
+                return { code: 0, zpData: { result: [GEEK_FRIEND_ENRICHED] } };
+            }
+            if (script.includes('geek/historyMsg')) {
+                return { code: 0, zpData: { messages: [nonTextMsg] } };
+            }
+            return {};
+        });
+        const rows = await command.func(page, { uid: 'enc-geek-uid', page: 1, side: 'geek' });
+        expect(rows).toHaveLength(1);
+        expect(rows[0].text).toContain('resume_request');
+    });
+
+    it('--side auto falls back to geek when recruiter returns code 24', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('getBossFriendListV2')) {
+                return { code: 24, message: '请切换身份后再试' };
+            }
+            if (script.includes('document.cookie')) return 'test-enc-sys-id';
+            if (script.includes('geekFilterByLabel')) {
+                return { code: 0, zpData: { friendList: [GEEK_FRIEND_LABEL] } };
+            }
+            if (script.includes('getGeekFriendList.json')) {
+                return { code: 0, zpData: { result: [GEEK_FRIEND_ENRICHED] } };
+            }
+            if (script.includes('geek/historyMsg')) {
+                return { code: 0, zpData: { messages: GEEK_MSGS } };
+            }
+            return {};
+        });
+        const rows = await command.func(page, { uid: 'enc-geek-uid', page: 1, side: 'auto' });
+        expect(rows).toHaveLength(2);
+        expect(rows[0].from).toBe('对方');
+    });
+
+    it('--side geek throws when uid is not found in geek chat list', async () => {
+        const page = createPageMock(async (script) => {
+            if (script.includes('document.cookie')) return 'test-enc-sys-id';
+            if (script.includes('geekFilterByLabel')) {
+                return { code: 0, zpData: { friendList: [] } };
+            }
+            return {};
+        });
+        await expect(
+            command.func(page, { uid: 'unknown-uid', page: 1, side: 'geek' })
+        ).rejects.toThrow('未找到该聊天（geek 侧）');
+    });
+});
diff --git a/clis/boss/utils.js b/clis/boss/utils.js
index 92404ac9c..46cde06bc 100644
--- a/clis/boss/utils.js
+++ b/clis/boss/utils.js
@@ -95,7 +95,8 @@ export async function fetchFriendList(page, opts = {}) {
     const pageNum = opts.pageNum ?? 1;
     const jobId = opts.jobId ?? '0';
     const url = `https://${BOSS_DOMAIN}/wapi/zprelation/friend/getBossFriendListV2.json?page=${pageNum}&status=0&jobId=${jobId}`;
-    const data = await bossFetch(page, url);
+    const data = await bossFetch(page, url, { allowNonZero: opts.allowNonZero });
+    if (opts.allowNonZero && data.code !== 0) return data;
     return data.zpData?.friendList || [];
 }
 /**
@@ -115,10 +116,14 @@ export async function findFriendByUid(page, encryptUid, opts = {}) {
     const checkGreetList = opts.checkGreetList ?? false;
     // Search friend list pages
     for (let p = 1; p <= maxPages; p++) {
-        const friends = await fetchFriendList(page, { pageNum: p });
+        const result = await fetchFriendList(page, { pageNum: p, allowNonZero: opts.allowNonZero });
+        if (opts.allowNonZero && !Array.isArray(result)) {
+            return { friend: null, code: result.code };
+        }
+        const friends = Array.isArray(result) ? result : [];
         const found = friends.find((f) => f.encryptUid === encryptUid);
         if (found)
-            return found;
+            return opts.allowNonZero ? { friend: found, code: 0 } : found;
         if (friends.length === 0)
             break;
     }
@@ -127,9 +132,9 @@ export async function findFriendByUid(page, encryptUid, opts = {}) {
         const greetList = await fetchRecommendList(page);
         const found = greetList.find((f) => f.encryptUid === encryptUid);
         if (found)
-            return found;
+            return opts.allowNonZero ? { friend: found, code: 0 } : found;
     }
-    return null;
+    return opts.allowNonZero ? { friend: null, code: 0 } : null;
 }
 // ── UI automation helpers ───────────────────────────────────────────────────
 /**
@@ -221,3 +226,108 @@ export function verbose(msg) {
         console.error(`[opencli:boss] ${msg}`);
     }
 }
+// ── Geek-side helpers ────────────────────────────────────────────────────────
+export const IDENTITY_MISMATCH_CODE = 24;
+const GEEK_CHAT_URL = `https://${BOSS_DOMAIN}/web/geek/chat`;
+/**
+ * Navigate to the job-seeker chat page.
+ * Establishes the cookie + JS-global context needed for geek-side API calls.
+ */
+export async function navigateToGeekChat(page, waitSeconds = 2) {
+    await page.goto(GEEK_CHAT_URL);
+    await page.wait({ time: waitSeconds });
+}
+/**
+ * Read the encryptSystemId value required by the geek-side list API.
+ * Tries document.cookie, then window globals, then localStorage.
+ * Throws if nothing is found — caller must have navigated to the geek chat page first.
+ */
+export async function readEncryptSystemId(page) {
+    const result = await page.evaluate(`
+    (() => {
+      try {
+        const m = document.cookie.match(/encryptSystemId=([^;]+)/i);
+        if (m) return decodeURIComponent(m[1]);
+      } catch (_) {}
+      const sources = [window.__NUXT__, window.__INITIAL_STATE__];
+      for (const s of sources) {
+        if (!s) continue;
+        try {
+          const flat = JSON.stringify(s);
+          const m = flat.match(/"encryptSystemId":"([^"]+)"/);
+          if (m) return m[1];
+        } catch (_) {}
+      }
+      try {
+        for (let i = 0; i < localStorage.length; i++) {
+          const k = localStorage.key(i);
+          if (k && k.toLowerCase().includes('encryptsystemid')) {
+            const v = localStorage.getItem(k);
+            if (v) return v;
+          }
+        }
+      } catch (_) {}
+      return '';
+    })()
+  `);
+    if (!result) {
+        throw new Error('geek 聊天页未找到 encryptSystemId（请确认已登录求职端）');
+    }
+    return result;
+}
+/**
+ * Fetch the job-seeker chat list (brief info, no securityId).
+ * Use fetchGeekFriendInfoList to enrich with securityId before calling chatmsg.
+ */
+export async function fetchGeekFriendLabelList(page, opts = {}) {
+    const labelId = opts.labelId ?? 0;
+    const encryptSystemId = opts.encryptSystemId ?? '';
+    const url = `https://${BOSS_DOMAIN}/wapi/zprelation/friend/geekFilterByLabel?labelId=${labelId}&encryptSystemId=${encodeURIComponent(encryptSystemId)}`;
+    const data = await bossFetch(page, url, { allowNonZero: opts.allowNonZero });
+    if (opts.allowNonZero && data.code !== 0) return data;
+    return data.zpData?.friendList || [];
+}
+/**
+ * Enrich a batch of geek friends with full fields including securityId.
+ * Processes in batches of 50 to avoid oversized request bodies.
+ */
+export async function fetchGeekFriendInfoList(page, friendIds = []) {
+    if (!friendIds.length) return [];
+    const BATCH_SIZE = 50;
+    const results = [];
+    for (let i = 0; i < friendIds.length; i += BATCH_SIZE) {
+        const batch = friendIds.slice(i, i + BATCH_SIZE).map(String);
+        const body = `friendIds=${batch.join(',')}`;
+        const data = await bossFetch(page, `https://${BOSS_DOMAIN}/wapi/zprelation/friend/getGeekFriendList.json`, {
+            method: 'POST',
+            body,
+        });
+        results.push(...(data.zpData?.result || []));
+    }
+    return results;
+}
+/**
+ * Find a geek-side friend by encrypted uid.
+ * Merges label-list and enriched data; returns null if not found.
+ */
+export async function findGeekFriendByUid(page, encryptUid, opts = {}) {
+    const labelList = await fetchGeekFriendLabelList(page, { encryptSystemId: opts.encryptSystemId });
+    const candidate = labelList.find((f) => f.encryptFriendId === encryptUid ||
+        String(f.uid) === String(encryptUid) ||
+        String(f.friendId) === String(encryptUid));
+    if (!candidate) return null;
+    const enriched = await fetchGeekFriendInfoList(page, [candidate.friendId]);
+    return { ...candidate, ...(enriched[0] || {}) };
+}
+/**
+ * Fetch message history for a geek-side chat.
+ * friend must have .uid (boss's numeric id) and .securityId.
+ */
+export async function fetchGeekHistoryMsg(page, friend, opts = {}) {
+    const pageNum = opts.page ?? 1;
+    const bossId = friend.uid;
+    const securityId = encodeURIComponent(friend.securityId || '');
+    const url = `https://${BOSS_DOMAIN}/wapi/zpchat/geek/historyMsg?bossId=${bossId}&securityId=${securityId}&page=${pageNum}&c=20&src=0`;
+    const data = await bossFetch(page, url);
+    return data.zpData?.messages || [];
+}

From 14552001e93f6771b92ed49bcde23bf494cf23e0 Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Mon, 11 May 2026 13:47:10 +0800
Subject: [PATCH 04/12] =?UTF-8?q?fix(boss):=20address=20PR=20review=20?=
 =?UTF-8?q?=E2=80=94=20manifest,=20encryptSystemId,=20enrich=20slice,=20de?=
 =?UTF-8?q?dup=20auto=20path?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Regenerate cli-manifest.json so --side is recognized by the CLI
- readEncryptSystemId: expand to script tags, broader window scan, localStorage
  values; return '' instead of throwing so API can surface its own error
- chatlist: slice labelList before fetchGeekFriendInfoList to skip unnecessary batch calls
- chatmsg: refactor bossChatMsg to accept optional friend, eliminating duplication in auto path

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 cli-manifest.json     | 32 ++++++++++++++++++++---
 clis/boss/chatlist.js |  5 ++--
 clis/boss/chatmsg.js  | 14 +++-------
 clis/boss/utils.js    | 59 +++++++++++++++++++++++++++++++++++--------
 4 files changed, 84 insertions(+), 26 deletions(-)

diff --git a/cli-manifest.json b/cli-manifest.json
index b066e92c7..721ce65eb 100644
--- a/cli-manifest.json
+++ b/cli-manifest.json
@@ -3484,7 +3484,7 @@
   {
     "site": "boss",
     "name": "chatlist",
-    "description": "BOSS直聘查看聊天列表（招聘端）",
+    "description": "BOSS直聘查看聊天列表（招聘端/求职端）",
     "access": "read",
     "domain": "www.zhipin.com",
     "strategy": "cookie",
@@ -3509,12 +3509,26 @@
         "type": "str",
         "default": "0",
         "required": false,
-        "help": "Filter by job ID (0=all)"
+        "help": "Filter by job ID (0=all, boss side only)"
+      },
+      {
+        "name": "side",
+        "type": "str",
+        "default": "auto",
+        "required": false,
+        "help": "Identity side: auto (default), boss (recruiter), or geek (job-seeker)",
+        "choices": [
+          "auto",
+          "boss",
+          "geek"
+        ]
       }
     ],
     "columns": [
       "name",
+      "company",
       "job",
+      "title",
       "last_msg",
       "last_time",
       "uid",
@@ -3528,7 +3542,7 @@
   {
     "site": "boss",
     "name": "chatmsg",
-    "description": "BOSS直聘查看与候选人的聊天消息",
+    "description": "BOSS直聘查看聊天消息历史（招聘端/求职端）",
     "access": "read",
     "domain": "www.zhipin.com",
     "strategy": "cookie",
@@ -3547,6 +3561,18 @@
         "default": 1,
         "required": false,
         "help": "Page number"
+      },
+      {
+        "name": "side",
+        "type": "str",
+        "default": "auto",
+        "required": false,
+        "help": "Identity side: auto (default), boss (recruiter), or geek (job-seeker)",
+        "choices": [
+          "auto",
+          "boss",
+          "geek"
+        ]
       }
     ],
     "columns": [
diff --git a/clis/boss/chatlist.js b/clis/boss/chatlist.js
index 685d86d00..a821aadba 100644
--- a/clis/boss/chatlist.js
+++ b/clis/boss/chatlist.js
@@ -26,10 +26,11 @@ function mapBossRow(f) {
 async function buildGeekRows(page, limit) {
     const encryptSystemId = await readEncryptSystemId(page);
     const labelList = await fetchGeekFriendLabelList(page, { encryptSystemId });
-    const friendIds = labelList.map((f) => f.friendId).filter(Boolean);
+    const slicedLabels = labelList.slice(0, limit);
+    const friendIds = slicedLabels.map((f) => f.friendId).filter(Boolean);
     const enriched = await fetchGeekFriendInfoList(page, friendIds);
     const enrichMap = new Map(enriched.map((f) => [String(f.friendId ?? f.uid), f]));
-    return labelList.slice(0, limit).map((f) => {
+    return slicedLabels.map((f) => {
         const e = enrichMap.get(String(f.friendId)) || {};
         return {
             name: e.name || f.name || '',
diff --git a/clis/boss/chatmsg.js b/clis/boss/chatmsg.js
index 28dcdf2a4..e9c97cc4c 100644
--- a/clis/boss/chatmsg.js
+++ b/clis/boss/chatmsg.js
@@ -32,8 +32,8 @@ function mapGeekMsg(m) {
     };
 }
 
-async function bossChatMsg(page, kwargs) {
-    const friend = await findFriendByUid(page, kwargs.uid);
+async function bossChatMsg(page, kwargs, existingFriend) {
+    const friend = existingFriend ?? await findFriendByUid(page, kwargs.uid);
     if (!friend) throw new Error('未找到该候选人');
     const gid = friend.uid;
     const securityId = encodeURIComponent(friend.securityId);
@@ -85,15 +85,9 @@ cli({
         await navigateToChat(page);
         const bossResult = await findFriendByUid(page, kwargs.uid, { allowNonZero: true });
         if (bossResult?.friend) {
-            const friend = bossResult.friend;
-            const gid = friend.uid;
-            const securityId = encodeURIComponent(friend.securityId);
-            const msgUrl = `https://www.zhipin.com/wapi/zpchat/boss/historyMsg?gid=${gid}&securityId=${securityId}&page=${kwargs.page}&c=20&src=0`;
-            const msgData = await bossFetch(page, msgUrl);
-            const messages = msgData.zpData?.messages || msgData.zpData?.historyMsgList || [];
-            return messages.map((m) => mapBossMsg(m, friend));
+            return await bossChatMsg(page, kwargs, bossResult.friend);
         }
-        // Not found in recruiter list or identity mismatch — check for hard errors first
+        // Not found or identity mismatch — check for hard errors before falling back
         if (bossResult?.code && bossResult.code !== 0 && bossResult.code !== IDENTITY_MISMATCH_CODE) {
             assertOk(bossResult);
         }
diff --git a/clis/boss/utils.js b/clis/boss/utils.js
index 46cde06bc..1eb1ffdb5 100644
--- a/clis/boss/utils.js
+++ b/clis/boss/utils.js
@@ -239,41 +239,78 @@ export async function navigateToGeekChat(page, waitSeconds = 2) {
 }
 /**
  * Read the encryptSystemId value required by the geek-side list API.
- * Tries document.cookie, then window globals, then localStorage.
- * Throws if nothing is found — caller must have navigated to the geek chat page first.
+ * Tries cookie, inline script tags, known window globals, a full window scan,
+ * and localStorage. Returns empty string if not found — the API may still
+ * succeed without it, and any server-side error will surface a clearer message.
+ * Caller must have navigated to the geek chat page first.
  */
 export async function readEncryptSystemId(page) {
     const result = await page.evaluate(`
     (() => {
+      // 1. cookie
       try {
         const m = document.cookie.match(/encryptSystemId=([^;]+)/i);
         if (m) return decodeURIComponent(m[1]);
       } catch (_) {}
-      const sources = [window.__NUXT__, window.__INITIAL_STATE__];
-      for (const s of sources) {
-        if (!s) continue;
+      // 2. inline <script> tags (Nuxt SSR state is often embedded here)
+      try {
+        for (const s of document.querySelectorAll('script:not([src])')) {
+          const t = s.textContent || '';
+          if (!t.includes('encryptSystemId')) continue;
+          const m = t.match(/"encryptSystemId":"([^"]+)"/);
+          if (m) return m[1];
+        }
+      } catch (_) {}
+      // 3. known BOSS / Nuxt window globals
+      const KNOWN = [
+        '__NUXT__', '__INITIAL_STATE__', '__ZP_INFO__', '__BOSS_ZP__',
+        'pageGlobalVar', 'ZP_DATA', '__ZP_DATA__', '__PAGE_DATA__',
+      ];
+      for (const k of KNOWN) {
+        const obj = window[k];
+        if (!obj || typeof obj !== 'object') continue;
         try {
-          const flat = JSON.stringify(s);
+          const flat = JSON.stringify(obj);
+          if (!flat.includes('encryptSystemId')) continue;
           const m = flat.match(/"encryptSystemId":"([^"]+)"/);
           if (m) return m[1];
         } catch (_) {}
       }
+      // 4. broad window scan (catches any other global holding the value)
+      try {
+        for (const k of Object.keys(window)) {
+          if (/^on|^HTML|^CSS|^SVG|^Math|^JSON|^performance/.test(k)) continue;
+          const obj = window[k];
+          if (!obj || typeof obj !== 'object') continue;
+          try {
+            const flat = JSON.stringify(obj);
+            if (flat && flat.includes('encryptSystemId')) {
+              const m = flat.match(/"encryptSystemId":"([^"]+)"/);
+              if (m) return m[1];
+            }
+          } catch (_) {}
+        }
+      } catch (_) {}
+      // 5. localStorage — any value containing the key, or key named after it
       try {
         for (let i = 0; i < localStorage.length; i++) {
           const k = localStorage.key(i);
-          if (k && k.toLowerCase().includes('encryptsystemid')) {
+          if (!k) continue;
+          if (k.toLowerCase().includes('encryptsystemid')) {
             const v = localStorage.getItem(k);
             if (v) return v;
           }
+          const v = localStorage.getItem(k) || '';
+          if (v.includes('encryptSystemId')) {
+            const m = v.match(/"encryptSystemId":"([^"]+)"/);
+            if (m) return m[1];
+          }
         }
       } catch (_) {}
       return '';
     })()
   `);
-    if (!result) {
-        throw new Error('geek 聊天页未找到 encryptSystemId（请确认已登录求职端）');
-    }
-    return result;
+    return result || '';
 }
 /**
  * Fetch the job-seeker chat list (brief info, no securityId).

From 8cf62b61500b3bfefb1e31d2a128c39e371e4d08 Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Mon, 11 May 2026 13:53:51 +0800
Subject: [PATCH 05/12] fix(boss): improve readEncryptSystemId with Vue/Pinia
 state and performance entries

Add Option 1 (Vue app runtime state) and Option 2 (performance resource entries)
as the primary extraction paths, demoting the previous guesswork approaches to
fallbacks. The page itself issues geekFilterByLabel with encryptSystemId already
in the URL, so performance.getEntriesByType('resource') gives a deterministic
source. Pinia stores and $route.query cover the Vue runtime state path.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 clis/boss/utils.js | 69 +++++++++++++++++++++++++++++++---------------
 1 file changed, 47 insertions(+), 22 deletions(-)

diff --git a/clis/boss/utils.js b/clis/boss/utils.js
index 1eb1ffdb5..1015e4b2d 100644
--- a/clis/boss/utils.js
+++ b/clis/boss/utils.js
@@ -239,20 +239,60 @@ export async function navigateToGeekChat(page, waitSeconds = 2) {
 }
 /**
  * Read the encryptSystemId value required by the geek-side list API.
- * Tries cookie, inline script tags, known window globals, a full window scan,
- * and localStorage. Returns empty string if not found — the API may still
- * succeed without it, and any server-side error will surface a clearer message.
+ * Strategy (in order):
+ *   1. Vue app state / Pinia stores / $route.query (Option 1 — runtime source)
+ *   2. performance.getEntriesByType('resource') — parse from geekFilterByLabel URL
+ *      that the page itself already issued (Option 2 — most deterministic)
+ *   3. cookie, inline <script> SSR state, known window globals, localStorage (fallbacks)
+ * Returns empty string if nothing is found; the API may still succeed without it.
  * Caller must have navigated to the geek chat page first.
  */
 export async function readEncryptSystemId(page) {
     const result = await page.evaluate(`
     (() => {
-      // 1. cookie
+      // 1. Vue app state / Pinia / $route.query
+      // The chat component reads encryptSystemId from the app runtime to build
+      // its own geekFilterByLabel request, so the value lives in the Vue tree.
+      try {
+        const appEl = document.querySelector('#app') || document.querySelector('[data-v-app]');
+        const vueApp = appEl && (appEl.__vue_app__ || appEl._vei);
+        if (vueApp) {
+          // 1a. Pinia stores (Vue 3 standard state management on BOSS直聘)
+          const pinia = vueApp.config && vueApp.config.globalProperties.$pinia;
+          if (pinia && pinia.state && pinia.state.value) {
+            for (const store of Object.values(pinia.state.value)) {
+              try {
+                const flat = JSON.stringify(store);
+                if (flat.includes('encryptSystemId')) {
+                  const m = flat.match(/"encryptSystemId":"([^"]+)"/);
+                  if (m) return m[1];
+                }
+              } catch (_) {}
+            }
+          }
+          // 1b. Vue Router current route query
+          const router = vueApp.config && vueApp.config.globalProperties.$router;
+          const query = router && router.currentRoute && router.currentRoute.value && router.currentRoute.value.query;
+          if (query && query.encryptSystemId) return query.encryptSystemId;
+        }
+      } catch (_) {}
+      // 2. Performance resource entries — the page already issued geekFilterByLabel
+      // with encryptSystemId in the URL; read it back from the resource timing API.
+      try {
+        const entries = performance.getEntriesByType('resource');
+        for (const entry of entries) {
+          if (!entry.name.includes('geekFilterByLabel')) continue;
+          const u = new URL(entry.name);
+          const v = u.searchParams.get('encryptSystemId');
+          if (v) return v;
+        }
+      } catch (_) {}
+      // 3. cookie
       try {
         const m = document.cookie.match(/encryptSystemId=([^;]+)/i);
         if (m) return decodeURIComponent(m[1]);
       } catch (_) {}
-      // 2. inline <script> tags (Nuxt SSR state is often embedded here)
+      // 4. inline <script> SSR state (Nuxt embeds server state here)
       try {
         for (const s of document.querySelectorAll('script:not([src])')) {
           const t = s.textContent || '';
@@ -261,7 +301,7 @@ export async function readEncryptSystemId(page) {
           if (m) return m[1];
         }
       } catch (_) {}
-      // 3. known BOSS / Nuxt window globals
+      // 5. known BOSS / Nuxt window globals
       const KNOWN = [
         '__NUXT__', '__INITIAL_STATE__', '__ZP_INFO__', '__BOSS_ZP__',
         'pageGlobalVar', 'ZP_DATA', '__ZP_DATA__', '__PAGE_DATA__',
@@ -276,22 +316,7 @@ export async function readEncryptSystemId(page) {
           if (m) return m[1];
         } catch (_) {}
       }
-      // 4. broad window scan (catches any other global holding the value)
-      try {
-        for (const k of Object.keys(window)) {
-          if (/^on|^HTML|^CSS|^SVG|^Math|^JSON|^performance/.test(k)) continue;
-          const obj = window[k];
-          if (!obj || typeof obj !== 'object') continue;
-          try {
-            const flat = JSON.stringify(obj);
-            if (flat && flat.includes('encryptSystemId')) {
-              const m = flat.match(/"encryptSystemId":"([^"]+)"/);
-              if (m) return m[1];
-            }
-          } catch (_) {}
-        }
-      } catch (_) {}
-      // 5. localStorage — any value containing the key, or key named after it
+      // 6. localStorage
       try {
         for (let i = 0; i < localStorage.length; i++) {
           const k = localStorage.key(i);

From 0f48ecca0e9bd7b86c82224f499a4a9e58f5738b Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Mon, 11 May 2026 14:05:25 +0800
Subject: [PATCH 06/12] fix(boss/chatmsg): use from.uid for geek message
 direction, not received flag

The live geek historyMsg API returns received:true for all messages
including outgoing ones. Determine direction by comparing m.from.uid
against the boss numeric uid instead.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 clis/boss/chatmsg.js      | 10 ++++++----
 clis/boss/chatmsg.test.js | 16 ++++++++++++----
 2 files changed, 18 insertions(+), 8 deletions(-)

diff --git a/clis/boss/chatmsg.js b/clis/boss/chatmsg.js
index e9c97cc4c..39d4e24ea 100644
--- a/clis/boss/chatmsg.js
+++ b/clis/boss/chatmsg.js
@@ -22,9 +22,11 @@ function mapBossMsg(m, friend) {
     };
 }
 
-function mapGeekMsg(m) {
+function mapGeekMsg(m, friend) {
+    const fromUid = m.from && m.from.uid;
+    const isFromBoss = fromUid != null && String(fromUid) === String(friend.uid);
     return {
-        from: m.received ? '对方' : '我',
+        from: isFromBoss ? '对方' : '我',
         type: TYPE_MAP[m.type] || `其他(${m.type})`,
         text: m.text || m.body?.text || m.body?.content || m.body?.showText ||
             JSON.stringify(m.body || {}).slice(0, 120),
@@ -48,7 +50,7 @@ async function geekChatMsg(page, kwargs, encryptSystemId) {
     if (!friend) throw new Error('未找到该聊天（geek 侧）');
     if (!friend.securityId) throw new Error('该聊天缺少 securityId，无法获取历史消息');
     const messages = await fetchGeekHistoryMsg(page, friend, { page: kwargs.page });
-    return messages.map(mapGeekMsg);
+    return messages.map((m) => mapGeekMsg(m, friend));
 }
 
 cli({
@@ -98,6 +100,6 @@ cli({
         if (!geekFriend) throw new Error('uid 在招聘端与求职端聊天列表中均未找到');
         if (!geekFriend.securityId) throw new Error('该聊天缺少 securityId，无法获取历史消息');
         const messages = await fetchGeekHistoryMsg(page, geekFriend, { page: kwargs.page });
-        return messages.map(mapGeekMsg);
+        return messages.map((m) => mapGeekMsg(m, geekFriend));
     },
 });
diff --git a/clis/boss/chatmsg.test.js b/clis/boss/chatmsg.test.js
index 99c70bacc..2fab43ba9 100644
--- a/clis/boss/chatmsg.test.js
+++ b/clis/boss/chatmsg.test.js
@@ -27,8 +27,8 @@ const GEEK_FRIEND_ENRICHED = {
     name: 'Boss张',
 };
 const GEEK_MSGS = [
-    { type: 1, text: '欢迎投递', received: true, time: 1704067200000 },
-    { type: 1, text: '谢谢', received: false, time: 1704067201000 },
+    { type: 1, text: '欢迎投递', received: true, time: 1704067200000, from: { uid: 67890, name: 'Boss张' } },
+    { type: 1, text: '谢谢', received: true, time: 1704067201000, from: { uid: 99999, name: '我' } },
 ];
 
 function createPageMock(evaluateImpl) {
@@ -83,7 +83,13 @@ describe('boss chatmsg', () => {
         expect(historyScript).toContain('src=0');
     });
 
-    it('--side geek maps received:true to 对方 and received:false to 我', async () => {
+    it('--side geek uses from.uid to determine direction, not received flag', async () => {
+        // Both messages have received:true (mirrors real geek historyMsg API behaviour)
+        // Direction is determined by whether m.from.uid matches the boss's uid (67890)
+        const msgsAllReceived = [
+            { type: 1, text: '欢迎投递', received: true, time: 1704067200000, from: { uid: 67890, name: 'Boss张' } },
+            { type: 1, text: '谢谢', received: true, time: 1704067201000, from: { uid: 99999, name: '我' } },
+        ];
         const page = createPageMock(async (script) => {
             if (script.includes('document.cookie')) return 'test-enc-sys-id';
             if (script.includes('geekFilterByLabel')) {
@@ -93,12 +99,14 @@ describe('boss chatmsg', () => {
                 return { code: 0, zpData: { result: [GEEK_FRIEND_ENRICHED] } };
             }
             if (script.includes('geek/historyMsg')) {
-                return { code: 0, zpData: { messages: GEEK_MSGS } };
+                return { code: 0, zpData: { messages: msgsAllReceived } };
             }
             return {};
         });
         const rows = await command.func(page, { uid: 'enc-geek-uid', page: 1, side: 'geek' });
+        // from.uid=67890 matches friend.uid=67890 → boss sent it → '对方'
         expect(rows[0].from).toBe('对方');
+        // from.uid=99999 does not match → geek sent it → '我'
         expect(rows[1].from).toBe('我');
     });
 

From bf9fd44b68aeebb4245e22c9d9ec89032a54cd98 Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Mon, 11 May 2026 14:22:23 +0800
Subject: [PATCH 07/12] fix(extension): guard websocket sends during disconnect

---
 extension/dist/background.js | 20 +++++++++++++++-----
 extension/src/background.ts  | 21 ++++++++++++++++-----
 2 files changed, 31 insertions(+), 10 deletions(-)

diff --git a/extension/dist/background.js b/extension/dist/background.js
index 790c9ab1e..99b57a86d 100644
--- a/extension/dist/background.js
+++ b/extension/dist/background.js
@@ -671,13 +671,23 @@ const _origLog = console.log.bind(console);
 const _origWarn = console.warn.bind(console);
 const _origError = console.error.bind(console);
 function forwardLog(level, args) {
-  if (!ws || ws.readyState !== WebSocket.OPEN) return;
   try {
     const msg = args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ");
-    ws.send(JSON.stringify({ type: "log", level, msg, ts: Date.now() }));
+    safeSend(ws, { type: "log", level, msg, ts: Date.now() });
   } catch {
   }
 }
+function safeSend(socket, payload) {
+  if (!socket || socket.readyState === WebSocket.CLOSING || socket.readyState === WebSocket.CLOSED) {
+    return false;
+  }
+  try {
+    socket.send(JSON.stringify(payload));
+    return true;
+  } catch {
+    return false;
+  }
+}
 console.log = (...args) => {
   _origLog(...args);
   forwardLog("info", args);
@@ -716,18 +726,18 @@ async function connect() {
       clearTimeout(reconnectTimer);
       reconnectTimer = null;
     }
-    thisWs.send(JSON.stringify({
+    safeSend(thisWs, {
       type: "hello",
       contextId: currentContextId,
       version: chrome.runtime.getManifest().version,
       compatRange: ">=1.7.0"
-    }));
+    });
   };
   thisWs.onmessage = async (event) => {
     try {
       const command = JSON.parse(event.data);
       const result = await handleCommand(command);
-      thisWs.send(JSON.stringify(result));
+      safeSend(thisWs, result);
     } catch (err) {
       console.error("[opencli] Message handling error:", err);
     }
diff --git a/extension/src/background.ts b/extension/src/background.ts
index 304156604..5494c166b 100644
--- a/extension/src/background.ts
+++ b/extension/src/background.ts
@@ -70,13 +70,24 @@ const _origWarn = console.warn.bind(console);
 const _origError = console.error.bind(console);
 
 function forwardLog(level: 'info' | 'warn' | 'error', args: unknown[]): void {
-  if (!ws || ws.readyState !== WebSocket.OPEN) return;
   try {
     const msg = args.map(a => typeof a === 'string' ? a : JSON.stringify(a)).join(' ');
-    ws.send(JSON.stringify({ type: 'log', level, msg, ts: Date.now() }));
+    safeSend(ws, { type: 'log', level, msg, ts: Date.now() });
   } catch { /* don't recurse */ }
 }
 
+function safeSend(socket: WebSocket | null | undefined, payload: unknown): boolean {
+  if (!socket || socket.readyState === WebSocket.CLOSING || socket.readyState === WebSocket.CLOSED) {
+    return false;
+  }
+  try {
+    socket.send(JSON.stringify(payload));
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 console.log = (...args: unknown[]) => { _origLog(...args); forwardLog('info', args); };
 console.warn = (...args: unknown[]) => { _origWarn(...args); forwardLog('warn', args); };
 console.error = (...args: unknown[]) => { _origError(...args); forwardLog('error', args); };
@@ -120,19 +131,19 @@ async function connect(): Promise<void> {
       reconnectTimer = null;
     }
     // Send version + compatibility range so the daemon can report mismatches to the CLI
-    thisWs.send(JSON.stringify({
+    safeSend(thisWs, {
       type: 'hello',
       contextId: currentContextId,
       version: chrome.runtime.getManifest().version,
       compatRange: __OPENCLI_COMPAT_RANGE__,
-    }));
+    });
   };
 
   thisWs.onmessage = async (event) => {
     try {
       const command = JSON.parse(event.data as string) as Command;
       const result = await handleCommand(command);
-      thisWs.send(JSON.stringify(result));
+      safeSend(thisWs, result);
     } catch (err) {
       console.error('[opencli] Message handling error:', err);
     }

From 613ad171dc903dbae8bd7fa8e85d4c57c7041500 Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Tue, 12 May 2026 10:36:18 +0800
Subject: [PATCH 08/12] docs(browser): clarify workspace lifecycle

---
 docs/guide/browser-bridge.md    | 21 +++++++++++++++++++++
 docs/zh/guide/browser-bridge.md | 21 +++++++++++++++++++++
 skills/opencli-browser/SKILL.md | 27 +++++++++++++++++++--------
 src/cli.ts                      |  2 +-
 4 files changed, 62 insertions(+), 9 deletions(-)

diff --git a/docs/guide/browser-bridge.md b/docs/guide/browser-bridge.md
index 6c4297800..59d1c0be3 100644
--- a/docs/guide/browser-bridge.md
+++ b/docs/guide/browser-bridge.md
@@ -48,6 +48,27 @@ Key rules:
 - `tab select <targetId>` makes that tab the default target for later untargeted `opencli browser ...` commands.
 - `tab close <targetId>` removes the tab; if it was the current default target, the stored default is cleared.
 
+## Workspace Lifecycle
+
+Use a prefixed workspace when you want multiple `opencli browser` commands to keep operating on the same page:
+
+```bash
+opencli browser --workspace browser:my-session open https://example.com
+opencli browser --workspace browser:my-session state
+opencli browser --workspace browser:my-session extract "main"
+```
+
+Workspace prefixes determine the idle-timeout policy:
+
+| Workspace form | Lifecycle | Idle timeout | Use for |
+|----------------|-----------|--------------|---------|
+| `browser:<name>` | interactive lease | 10 minutes | Normal multi-command or human-paced browser work. |
+| `operate:<name>` | interactive lease | 10 minutes | Agent-operated workflows that should survive short pauses. |
+| `bound:<name>` | pinned bound tab | none | A real Chrome tab you already opened and bound. |
+| `<unprefixed>` | ephemeral lease | 30 seconds | Short adapter automation only. |
+
+Do not use a custom unprefixed workspace name such as `my-session` for a manual multi-step workflow. After 30 seconds of idle time, its lease can expire; the next `state` or `extract` may create a fresh `about:blank` tab instead of returning to the page you opened.
+
 ## How It Works
 
 ```
diff --git a/docs/zh/guide/browser-bridge.md b/docs/zh/guide/browser-bridge.md
index aaadbf3cb..21e6e2b86 100644
--- a/docs/zh/guide/browser-bridge.md
+++ b/docs/zh/guide/browser-bridge.md
@@ -46,6 +46,27 @@ opencli browser tab close <targetId>
 - `tab select <targetId>` 会把该 tab 设为后续未显式指定 target 的 `opencli browser ...` 命令默认目标。
 - `tab close <targetId>` 会关闭该 tab；如果它正好是当前默认目标，会一并清掉这条默认绑定。
 
+## Workspace 生命周期
+
+如果你希望多条 `opencli browser` 命令持续操作同一个页面，请使用带前缀的 workspace：
+
+```bash
+opencli browser --workspace browser:my-session open https://example.com
+opencli browser --workspace browser:my-session state
+opencli browser --workspace browser:my-session extract "main"
+```
+
+workspace 前缀决定空闲超时策略：
+
+| Workspace 形式 | 生命周期 | 空闲超时 | 适用场景 |
+|----------------|----------|----------|----------|
+| `browser:<name>` | 交互式 lease | 10 分钟 | 普通多步骤或人工节奏的 browser 操作。 |
+| `operate:<name>` | 交互式 lease | 10 分钟 | 需要承受短暂停顿的 agent 操作。 |
+| `bound:<name>` | 绑定真实 tab | 无 | 用户已经打开并绑定的真实 Chrome tab。 |
+| `<无前缀>` | ephemeral lease | 30 秒 | 只适合短生命周期 adapter 自动化。 |
+
+不要把 `my-session` 这类无前缀自定义 workspace 用在手动多步骤流程里。它空闲 30 秒后可能过期，下一次 `state` 或 `extract` 会新建一个 `about:blank` tab，而不是回到你之前打开的页面。
+
 ## Daemon 生命周期
 
 Daemon 在首次运行浏览器命令时自动启动，之后保持常驻运行。
diff --git a/skills/opencli-browser/SKILL.md b/skills/opencli-browser/SKILL.md
index 6c024a84d..ca4696abf 100644
--- a/skills/opencli-browser/SKILL.md
+++ b/skills/opencli-browser/SKILL.md
@@ -25,10 +25,20 @@ Until `doctor` is green, nothing else will work. Typical failures: Chrome not ru
 ## Lease lifecycle
 
 - `opencli browser *` commands keep an owned tab lease alive between calls. Owned leases share a dedicated automation container and are released with `opencli browser close` or when the idle timeout expires.
+- Use a `browser:<name>` workspace for any multi-command or human-paced browser workflow. Example: `opencli browser --workspace browser:fb-yaya-warmup open https://example.com`, then reuse the same `--workspace browser:fb-yaya-warmup` for `state`, `extract`, `click`, etc. A custom unprefixed workspace such as `fb-yaya-warmup` is ephemeral and can expire after 30 seconds of idle time, so the next command may silently land on a fresh `about:blank` tab.
 - `opencli browser bind` binds a `bound:*` workspace to the Chrome tab you already have open. Use this for logged-in pages, SSO flows, or pages you manually positioned before handing control to the agent.
 - `--focus` (or `OPENCLI_WINDOW_FOCUSED=1`) opens the automation container in the foreground. Use it when you want to watch the page live.
 - `--live` (or `OPENCLI_LIVE=1`) is mainly for browser-backed adapter commands such as `opencli xiaohongshu note ...`. It keeps the adapter's automation lease open after the command returns so you can inspect the final page state.
 
+Workspace prefix rules:
+
+| Workspace form | Lifecycle | Use for |
+|----------------|-----------|---------|
+| `browser:<name>` | interactive lease, 10-minute idle timeout | Normal multi-step browser work. |
+| `operate:<name>` | interactive lease, 10-minute idle timeout | Agent-operated workflows that should survive short pauses. |
+| `bound:<name>` | pinned, no OpenCLI idle timer | A real Chrome tab the user already opened and bound. |
+| `<unprefixed>` | ephemeral lease, 30-second idle timeout | Short adapter automation only; avoid for manual multi-command sessions. |
+
 ### Bind Tab
 
 ```bash
@@ -66,14 +76,15 @@ Navigation is blocked by default on bound workspaces because it can destroy the
 ## Critical rules
 
 1. **Always inspect before you act.** Run `state` or `find` first. Never hard-code a ref or selector from memory across sessions — indices are per-snapshot.
-2. **Prefer numeric ref over CSS once you have it.** Numeric refs survive mild DOM shifts because the CLI fingerprints each tagged element. A CSS selector written by hand will break the first time the site re-renders.
-3. **Read `match_level` after every write.** `exact` = all good. `stable` = the element is the same but some soft attrs drifted — your action still applied. `reidentified` = the original ref was gone and the CLI found a unique replacement; double-check you hit the right element.
-4. **Use the `compound` field for form controls.** Do not regex-guess a date format, do not `state` twice to get the full `<select>` options list. The compound envelope has the format string, full option list up to 50, `options_total` for overflow, and `accept`/`multiple` for `<input type=file>`.
-5. **Verify writes that matter.** After `type <target> <text>`, run `get value <target>`. After `select`, run `get value`. Autocomplete widgets, React controlled inputs, and masked fields all silently eat characters. The CLI cannot detect this for you.
-6. **`state` → action → `state` after a page change.** Navigations, form submits, and SPA route changes invalidate refs. Take a fresh snapshot. Do not reuse refs from before the transition.
-7. **Chain with `&&`.** A chained sequence runs in one shell so refs acquired by the first command stay live for the second. Separate shell invocations lose the session context you just set up.
-8. **`eval` is read-only.** Wrap the JS in an IIFE and return JSON. If you need to *change* the page, use the structured `click` / `type` / `select` / `keys` commands instead — they produce structured output and fingerprints, `eval` does not.
-9. **Prefer `network` to screen-scraping.** If a page you care about fetches its data from a JSON API, the API is almost always more reliable than scraping the rendered DOM. Capture once, inspect the shape, then `--detail <key>` the body you need.
+2. **Prefer site adapters before raw browser driving.** If `opencli <site> <command>` already covers the task, use that adapter command first (`opencli facebook notifications`, `opencli reddit read`, etc.). Use `opencli browser ...` only for gaps, debugging, or one-off UI flows the adapter does not expose.
+3. **Prefer numeric ref over CSS once you have it.** Numeric refs survive mild DOM shifts because the CLI fingerprints each tagged element. A CSS selector written by hand will break the first time the site re-renders.
+4. **Read `match_level` after every write.** `exact` = all good. `stable` = the element is the same but some soft attrs drifted — your action still applied. `reidentified` = the original ref was gone and the CLI found a unique replacement; double-check you hit the right element.
+5. **Use the `compound` field for form controls.** Do not regex-guess a date format, do not `state` twice to get the full `<select>` options list. The compound envelope has the format string, full option list up to 50, `options_total` for overflow, and `accept`/`multiple` for `<input type=file>`.
+6. **Verify writes that matter.** After `type <target> <text>`, run `get value <target>`. After `select`, run `get value`. Autocomplete widgets, React controlled inputs, and masked fields all silently eat characters. The CLI cannot detect this for you.
+7. **`state` → action → `state` after a page change.** Navigations, form submits, and SPA route changes invalidate refs. Take a fresh snapshot. Do not reuse refs from before the transition.
+8. **Chain with `&&`.** A chained sequence runs in one shell so refs acquired by the first command stay live for the second. Separate shell invocations lose the session context you just set up.
+9. **`eval` is read-only.** Wrap the JS in an IIFE and return JSON. If you need to *change* the page, use the structured `click` / `type` / `select` / `keys` commands instead — they produce structured output and fingerprints, `eval` does not.
+10. **Prefer `network` to screen-scraping.** If a page you care about fetches its data from a JSON API, the API is almost always more reliable than scraping the rendered DOM. Capture once, inspect the shape, then `--detail <key>` the body you need.
 
 ---
 
diff --git a/src/cli.ts b/src/cli.ts
index c7da447be..8b8d2a68e 100644
--- a/src/cli.ts
+++ b/src/cli.ts
@@ -665,7 +665,7 @@ export function createProgram(BUILTIN_CLIS: string, USER_CLIS: string): Command
 
   const browser = program
     .command('browser')
-    .option('--workspace <name>', 'Browser workspace to use (default: browser:default; bound tabs use bound:<name>)')
+    .option('--workspace <name>', 'Browser workspace. Use browser:<name> for multi-command sessions; bound:<name> for bound tabs; unprefixed names are 30s ephemeral. Default: browser:default')
     .description('Browser control — navigate, click, type, extract, wait (no LLM needed)');
   const originalBrowserDescription = browser.description();
 

From 09f82305ad22a831c68c0805d83190e251faf7ca Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Tue, 12 May 2026 10:39:55 +0800
Subject: [PATCH 09/12] ci: remove upstream website rebuild trigger

---
 .github/workflows/docs.yml | 17 -----------------
 1 file changed, 17 deletions(-)
 delete mode 100644 .github/workflows/docs.yml

diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
deleted file mode 100644
index d4fdf5f90..000000000
--- a/.github/workflows/docs.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-name: Trigger Website Rebuild (Docs Updated)
-
-on:
-  push:
-    branches: [main]
-    paths: ['docs/**']
-
-jobs:
-  dispatch:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Trigger opencli-website rebuild
-        uses: peter-evans/repository-dispatch@v4
-        with:
-          token: ${{ secrets.WEBSITE_DEPLOY_TOKEN }}
-          repository: jackwener/opencli-website
-          event-type: docs-updated

From 5d0faa71718682391d318c83701f8c27feba27bd Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Wed, 13 May 2026 23:04:58 +0800
Subject: [PATCH 10/12] fix(extension): reuse existing adapter tab group

---
 extension/dist/background.js     | 68 ++++++++++++++++++++++++-----
 extension/src/background.test.ts | 62 ++++++++++++++++++++++++++
 extension/src/background.ts      | 75 ++++++++++++++++++++++++++++----
 3 files changed, 186 insertions(+), 19 deletions(-)

diff --git a/extension/dist/background.js b/extension/dist/background.js
index 386d0c477..0cb5a250a 100644
--- a/extension/dist/background.js
+++ b/extension/dist/background.js
@@ -773,6 +773,7 @@ const CONTAINER_TAB_GROUP_TITLE = {
   interactive: "OpenCLI Browser",
   automation: "OpenCLI Adapter"
 };
+const LEGACY_AUTOMATION_TAB_GROUP_TITLE = "OpenCLI";
 const AUTOMATION_TAB_GROUP_COLOR = "orange";
 let leaseMutationQueue = Promise.resolve();
 const ownedContainers = {
@@ -1008,11 +1009,51 @@ async function getOwnedContainerGroupId(role, windowId) {
     }
     container.groupId = null;
   }
-  const groups = await chrome.tabGroups.query({ windowId, title: CONTAINER_TAB_GROUP_TITLE[role] });
-  const existing = groups[0];
-  if (!existing) return null;
-  container.groupId = existing.id;
-  return existing.id;
+  for (const title of getOwnedContainerGroupTitles(role)) {
+    const groups = await chrome.tabGroups.query({ windowId, title });
+    const existing = groups[0];
+    if (existing) {
+      container.groupId = existing.id;
+      return existing.id;
+    }
+  }
+  return null;
+}
+function getOwnedContainerGroupTitles(role) {
+  return role === "automation" ? [CONTAINER_TAB_GROUP_TITLE.automation, LEGACY_AUTOMATION_TAB_GROUP_TITLE] : [CONTAINER_TAB_GROUP_TITLE.interactive];
+}
+async function focusOwnedWindowIfRequested(windowId, mode) {
+  if (mode !== "foreground") return;
+  const updateWindow = chrome.windows.update;
+  if (typeof updateWindow === "function") await updateWindow(windowId, { focused: true }).catch(() => {
+  });
+}
+async function discoverOwnedContainerFromTabGroup(role) {
+  const container = ownedContainers[role];
+  if (container.groupId !== null) {
+    try {
+      const group = await chrome.tabGroups.get(container.groupId);
+      await chrome.windows.get(group.windowId);
+      container.windowId = group.windowId;
+      return { windowId: group.windowId, groupId: group.id };
+    } catch {
+      container.windowId = null;
+      container.groupId = null;
+    }
+  }
+  for (const title of getOwnedContainerGroupTitles(role)) {
+    const groups = await chrome.tabGroups.query({ title });
+    for (const group of groups) {
+      try {
+        await chrome.windows.get(group.windowId);
+        container.windowId = group.windowId;
+        container.groupId = group.id;
+        return { windowId: group.windowId, groupId: group.id };
+      } catch {
+      }
+    }
+  }
+  return null;
 }
 async function ensureOwnedContainerTabGroup(role, windowId, tabIds) {
   const ids = [...new Set(tabIds.filter((id) => id !== void 0))];
@@ -1052,11 +1093,7 @@ async function ensureOwnedContainerWindowUnlocked(role, initialUrl, mode = "back
   if (container.windowId !== null) {
     try {
       await chrome.windows.get(container.windowId);
-      if (mode === "foreground") {
-        const updateWindow = chrome.windows.update;
-        if (typeof updateWindow === "function") await updateWindow(container.windowId, { focused: true }).catch(() => {
-        });
-      }
+      await focusOwnedWindowIfRequested(container.windowId, mode);
       const initialTabId2 = await findReusableOwnedContainerTab(container.windowId);
       await ensureOwnedContainerTabGroup(role, container.windowId, [initialTabId2]);
       return {
@@ -1068,6 +1105,17 @@ async function ensureOwnedContainerWindowUnlocked(role, initialUrl, mode = "back
       container.groupId = null;
     }
   }
+  const discovered = await discoverOwnedContainerFromTabGroup(role);
+  if (discovered) {
+    await focusOwnedWindowIfRequested(discovered.windowId, mode);
+    const initialTabId2 = await findReusableOwnedContainerTab(discovered.windowId);
+    await ensureOwnedContainerTabGroup(role, discovered.windowId, [initialTabId2]);
+    await persistRuntimeState();
+    return {
+      windowId: discovered.windowId,
+      initialTabId: initialTabId2
+    };
+  }
   const startUrl = initialUrl && isSafeNavigationUrl(initialUrl) ? initialUrl : BLANK_PAGE;
   const win = await chrome.windows.create({
     url: startUrl,
diff --git a/extension/src/background.test.ts b/extension/src/background.test.ts
index f79df82cf..74493e33d 100644
--- a/extension/src/background.test.ts
+++ b/extension/src/background.test.ts
@@ -1093,6 +1093,68 @@ describe('background tab isolation', () => {
     expect(chrome.tabGroups.update).not.toHaveBeenCalled();
   });
 
+  it('discovers and reuses an existing OpenCLI Adapter group in another window before creating one', async () => {
+    const { chrome, tabs, groups } = createChromeMock();
+    tabs.push({
+      id: 77,
+      windowId: 7,
+      url: 'about:blank',
+      title: 'blank',
+      active: true,
+      status: 'complete',
+      groupId: -1,
+    });
+    groups.push({
+      id: 99,
+      windowId: 7,
+      title: 'OpenCLI Adapter',
+      color: 'orange',
+      collapsed: true,
+    });
+    vi.stubGlobal('chrome', chrome);
+
+    const mod = await import('./background');
+    const tabId = await mod.__test__.resolveTabId(undefined, adapterKey('twitter'));
+
+    expect(tabId).toBe(77);
+    expect(chrome.windows.create).not.toHaveBeenCalled();
+    expect(mod.__test__.getAutomationWindowId(adapterKey('twitter'))).toBe(7);
+    expect(tabs.find((tab) => tab.id === 77)?.groupId).toBe(99);
+    expect(chrome.tabs.group).toHaveBeenCalledWith({ groupId: 99, tabIds: [77] });
+    expect(chrome.tabGroups.update).not.toHaveBeenCalled();
+  });
+
+  it('discovers and reuses a legacy OpenCLI automation group before creating a duplicate', async () => {
+    const { chrome, tabs, groups } = createChromeMock();
+    tabs.push({
+      id: 78,
+      windowId: 8,
+      url: 'about:blank',
+      title: 'blank',
+      active: true,
+      status: 'complete',
+      groupId: -1,
+    });
+    groups.push({
+      id: 98,
+      windowId: 8,
+      title: 'OpenCLI',
+      color: 'orange',
+      collapsed: true,
+    });
+    vi.stubGlobal('chrome', chrome);
+
+    const mod = await import('./background');
+    const tabId = await mod.__test__.resolveTabId(undefined, adapterKey('twitter'));
+
+    expect(tabId).toBe(78);
+    expect(chrome.windows.create).not.toHaveBeenCalled();
+    expect(mod.__test__.getAutomationWindowId(adapterKey('twitter'))).toBe(8);
+    expect(tabs.find((tab) => tab.id === 78)?.groupId).toBe(98);
+    expect(chrome.tabs.group).toHaveBeenCalledWith({ groupId: 98, tabIds: [78] });
+    expect(chrome.tabGroups.update).not.toHaveBeenCalled();
+  });
+
   it('reuses a persisted automation group id after service worker restart even if the user renamed it', async () => {
     const { chrome, tabs, groups } = createChromeMock();
     groups.push({
diff --git a/extension/src/background.ts b/extension/src/background.ts
index 2d9eccfbd..1a001d603 100644
--- a/extension/src/background.ts
+++ b/extension/src/background.ts
@@ -219,6 +219,7 @@ const CONTAINER_TAB_GROUP_TITLE: Record<OwnedWindowRole, string> = {
   interactive: 'OpenCLI Browser',
   automation: 'OpenCLI Adapter',
 };
+const LEGACY_AUTOMATION_TAB_GROUP_TITLE = 'OpenCLI';
 const AUTOMATION_TAB_GROUP_COLOR: chrome.tabGroups.ColorEnum = 'orange';
 let leaseMutationQueue: Promise<void> = Promise.resolve();
 const ownedContainers: Record<OwnedWindowRole, {
@@ -506,11 +507,58 @@ async function getOwnedContainerGroupId(role: OwnedWindowRole, windowId: number)
     container.groupId = null;
   }
 
-  const groups = await chrome.tabGroups.query({ windowId, title: CONTAINER_TAB_GROUP_TITLE[role] });
-  const existing = groups[0];
-  if (!existing) return null;
-  container.groupId = existing.id;
-  return existing.id;
+  for (const title of getOwnedContainerGroupTitles(role)) {
+    const groups = await chrome.tabGroups.query({ windowId, title });
+    const existing = groups[0];
+    if (existing) {
+      container.groupId = existing.id;
+      return existing.id;
+    }
+  }
+  return null;
+}
+
+function getOwnedContainerGroupTitles(role: OwnedWindowRole): string[] {
+  return role === 'automation'
+    ? [CONTAINER_TAB_GROUP_TITLE.automation, LEGACY_AUTOMATION_TAB_GROUP_TITLE]
+    : [CONTAINER_TAB_GROUP_TITLE.interactive];
+}
+
+async function focusOwnedWindowIfRequested(windowId: number, mode: WindowMode): Promise<void> {
+  if (mode !== 'foreground') return;
+  const updateWindow = (chrome.windows as unknown as { update?: (windowId: number, updateInfo: { focused?: boolean }) => Promise<unknown> }).update;
+  if (typeof updateWindow === 'function') await updateWindow(windowId, { focused: true }).catch(() => {});
+}
+
+async function discoverOwnedContainerFromTabGroup(role: OwnedWindowRole): Promise<{ windowId: number; groupId: number } | null> {
+  const container = ownedContainers[role];
+  if (container.groupId !== null) {
+    try {
+      const group = await chrome.tabGroups.get(container.groupId);
+      await chrome.windows.get(group.windowId);
+      container.windowId = group.windowId;
+      return { windowId: group.windowId, groupId: group.id };
+    } catch {
+      container.windowId = null;
+      container.groupId = null;
+    }
+  }
+
+  for (const title of getOwnedContainerGroupTitles(role)) {
+    const groups = await chrome.tabGroups.query({ title });
+    for (const group of groups) {
+      try {
+        await chrome.windows.get(group.windowId);
+        container.windowId = group.windowId;
+        container.groupId = group.id;
+        return { windowId: group.windowId, groupId: group.id };
+      } catch {
+        // Ignore stale browser-session group/window state and keep looking.
+      }
+    }
+  }
+
+  return null;
 }
 
 async function ensureOwnedContainerTabGroup(role: OwnedWindowRole, windowId: number, tabIds: Array<number | undefined>): Promise<void> {
@@ -575,10 +623,7 @@ async function ensureOwnedContainerWindowUnlocked(
   if (container.windowId !== null) {
     try {
       await chrome.windows.get(container.windowId);
-      if (mode === 'foreground') {
-        const updateWindow = (chrome.windows as unknown as { update?: (windowId: number, updateInfo: { focused?: boolean }) => Promise<unknown> }).update;
-        if (typeof updateWindow === 'function') await updateWindow(container.windowId, { focused: true }).catch(() => {});
-      }
+      await focusOwnedWindowIfRequested(container.windowId, mode);
       const initialTabId = await findReusableOwnedContainerTab(container.windowId);
       await ensureOwnedContainerTabGroup(role, container.windowId, [initialTabId]);
       return {
@@ -591,6 +636,18 @@ async function ensureOwnedContainerWindowUnlocked(
     }
   }
 
+  const discovered = await discoverOwnedContainerFromTabGroup(role);
+  if (discovered) {
+    await focusOwnedWindowIfRequested(discovered.windowId, mode);
+    const initialTabId = await findReusableOwnedContainerTab(discovered.windowId);
+    await ensureOwnedContainerTabGroup(role, discovered.windowId, [initialTabId]);
+    await persistRuntimeState();
+    return {
+      windowId: discovered.windowId,
+      initialTabId,
+    };
+  }
+
   const startUrl = (initialUrl && isSafeNavigationUrl(initialUrl)) ? initialUrl : BLANK_PAGE;
 
   // Note: Do NOT set `state` parameter here. Chrome 146+ rejects 'normal' as an invalid

From 116bc66980f2610d3117b369caf15d1f2173e687 Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Thu, 14 May 2026 21:49:51 +0800
Subject: [PATCH 11/12] docs: add CLAUDE.md and AGENTS.md with adapter-PR
 checklist

Captures conventions the upstream maintainer enforces by amending PRs
before merging (observed across #1538-#1542): typed errors, fail-fast
arg validation, imperative func over pipeline, JSON.parse type guards,
merge-then-filter, scored Array.find replacement, stale socket guards,
error-path tests, lifecycle docs, manifest rebuild.

Claude Code auto-loads CLAUDE.md; AGENTS.md points other AI tools to it.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 AGENTS.md |  20 ++++++++
 CLAUDE.md | 139 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 159 insertions(+)
 create mode 100644 AGENTS.md
 create mode 100644 CLAUDE.md

diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 000000000..86ceedab9
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,20 @@
+# AGENTS.md
+
+Contributor guidance for AI coding tools (Cursor, Codex, Aider, etc.) and humans working in this fork.
+
+**The complete checklist lives in [`CLAUDE.md`](./CLAUDE.md)** — read it before editing `clis/*` or `extension/*` or opening a PR.
+
+The conventions were derived from observing how the upstream maintainer (`jackwener/OpenCLI`) amends PRs before merging. Following them upfront shortens review cycles.
+
+Quick summary of what's in `CLAUDE.md`:
+
+1. Use typed errors from `@jackwener/opencli/errors` — never `throw new Error()`
+2. Validate `--limit` / `--page` fail-fast with `readPositiveInteger`, before `page.goto`
+3. Prefer imperative `func:` over declarative `pipeline:`
+4. Type-check after `JSON.parse` — `"null"` and `42` are valid JSON
+5. Multi-source merge: merge first, filter last
+6. Replace `Array.find` with scored sort when multiple matches are possible
+7. Re-check socket / instance identity after every `await`
+8. Test error paths, not just happy paths
+9. Docs: name every lifecycle subtype when introducing limits
+10. Rebuild `cli-manifest.json` after adapter arg changes
diff --git a/CLAUDE.md b/CLAUDE.md
new file mode 100644
index 000000000..9cae1d2a0
--- /dev/null
+++ b/CLAUDE.md
@@ -0,0 +1,139 @@
+# Contributing to GreyC/OpenCLI
+
+This fork's PRs are eventually upstreamed to `jackwener/OpenCLI`. The checklist below captures conventions the upstream maintainer reliably enforces by amending PRs before merging (observed across PRs #1538–#1542). Front-loading them shortens review.
+
+This file is auto-loaded by Claude Code and read by most AI coding tools (Cursor, Codex, Aider, etc.). Human contributors should read it before opening a PR.
+
+## Before submitting a PR — checklist
+
+### 1. Use typed errors, never `throw new Error(...)`
+
+In `clis/*` and `src/*`, import from `@jackwener/opencli/errors`:
+
+| Error | When |
+|-------|------|
+| `ArgumentError` | Invalid CLI arg (range, format, required). Throw **before** `page.goto`. |
+| `AuthRequiredError` | Cookie expired / user not logged in (maps to exit 77). |
+| `EmptyResultError` | Valid request, empty result set. |
+| `CommandExecutionError` | Unexpected API shape, missing field, malformed payload. |
+
+Untyped `Error` collapses to a generic `COMMAND_EXEC` exit code and removes the caller's ability to differentiate "retry" vs "ask user to log in" vs "no data".
+
+### 2. Validate args fail-fast, before any navigation
+
+```js
+import { readPositiveInteger } from './utils.js'; // boss adapter; similar helpers exist per-site
+
+const limit = readPositiveInteger(kwargs.limit, 'mycmd --limit', 20, 100);
+const pageNum = readPositiveInteger(kwargs.page, 'mycmd --page', 1);
+```
+
+Reject bogus inputs before `page.goto` so they don't waste a browser context.
+
+### 3. Prefer imperative `func:` over declarative `pipeline:`
+
+Declarative `pipeline: [{navigate}, {evaluate}]` is fine for trivial scrapers but **cannot express error classification** (auth vs empty vs malformed all collapse). Use `func: async (page, kwargs) => { ... }` whenever you need to:
+
+- Distinguish error categories
+- Branch on intermediate state
+- Call multiple endpoints in sequence
+
+### 4. After `JSON.parse`, type-check the parsed value
+
+`JSON.parse` succeeding does not mean you got an object. `"null"`, `"true"`, `42`, `"[1,2]"` are all valid JSON that break `data.code` lookups.
+
+```js
+const data = JSON.parse(text);
+if (!data || typeof data !== 'object') {
+    throw new CommandExecutionError('API returned malformed response');
+}
+if (!Array.isArray(data.zpData?.messages)) {
+    throw new CommandExecutionError('Expected messages array');
+}
+```
+
+### 5. Multi-source merge — merge first, filter last
+
+When combining a "primary" source with a "fallback" source, **do not gate the fallback on primary's count**. Primary may pass the count check but fail downstream filtering, leaving you short.
+
+```js
+// Bad: skips fallback when primary has enough raw nodes
+const combined = primary.length >= limit ? primary : [...primary, ...fallback];
+
+// Good: always merge, let the row-level filter be the final gate
+const combined = dedupe([...primary, ...fallback]);
+```
+
+### 6. `Array.find` smell — explicit scored selection
+
+When you write `xs.find(x => ...)`, ask: "if multiple match, which is correct?"
+
+- If answer is "any" → `find` is fine.
+- If answer is "the focused one" / "the newest" / "the one with X" → write an explicit scored sort and pick `[0]`. Otherwise behaviour is order-dependent and surprising.
+
+### 7. Long-lived sockets + async handlers — guard stale messages after every await
+
+If a handler crosses an `await` boundary, the global state it depends on may have changed by the time it returns. Re-check identity **after every await**, not just at entry.
+
+```js
+thisWs.onmessage = async (event) => {
+    if (ws !== thisWs) return;              // entry guard
+    const result = await handleCommand(...); // long await
+    if (ws !== thisWs) return;              // re-check
+    safeSend(thisWs, result);
+};
+```
+
+Also: `safeSend` checks `readyState === OPEN`, not "not CLOSING/CLOSED" — `CONNECTING` is also not sendable.
+
+### 8. Tests cover error paths, not just happy paths
+
+Every typed error you throw should have a test:
+
+```js
+await expect(command.func(page, badInput)).rejects.toBeInstanceOf(ArgumentError);
+```
+
+Use the substring-dispatch mock pattern from `clis/boss/*.test.js`:
+
+```js
+page.evaluate.mockImplementation(async (script) => {
+    if (script.includes('myEndpoint')) return mockPayload;
+    if (script.includes('document.cookie')) return 'fake-cookie';
+    return {};
+});
+```
+
+### 9. Docs — when introducing limits, name every lifecycle subtype
+
+If a concept has multiple lifecycles (owned vs bound, persistent vs ephemeral) and you mention a timeout/quota/limit, **specify which subtype it applies to in the same sentence**. Readers default to assuming the strictest variant applies to all.
+
+- Bad: "Browser sessions use a 10-minute idle timeout."
+- Good: "**Owned** browser sessions use a 10-minute idle timeout. **Bound** sessions have no idle timer; they stay attached until …"
+
+### 10. After adapter changes, rebuild the manifest
+
+```bash
+npm run build-manifest
+git add cli-manifest.json
+```
+
+CLI option parsing reads from the **committed** `cli-manifest.json`, not from the adapter source at runtime. If you add `--side`, `--limit`, or any new option and forget to rebuild, the new flag is silently ignored when users run the CLI.
+
+## Verification before opening PR
+
+```bash
+npm run build-manifest                          # if you touched clis/<site>/*.js or args
+npx vitest run clis/<site>/                     # adapter tests
+npx vitest run --project unit                   # unit tests
+npm run typecheck -- --pretty false             # type check
+git diff --check                                # whitespace
+```
+
+## Related files
+
+- `clis/boss/utils.js` — reference for adapter helpers (`bossFetch`, `readPositiveInteger`, `assertOk`, `checkAuth`)
+- `src/cli.ts` — the single-file CLI definition. Browser commands at lines 666+.
+- `extension/src/background.ts` — Chrome extension service worker. Workspace lease policy at lines 209–261.
+- `docs/guide/browser-bridge.md` — browser session lifecycle docs (owned vs bound)
+- Memory: `~/.claude/projects/-Users-gangchen-Documents-Projects-OpenCLI/memory/feedback_opencli-pr-checklist.md` (Claude Code only — same content as this file, with owner-commit SHAs for each pattern)

From 37042fe5e55c7e81e36259aed5246bf391c3b4d5 Mon Sep 17 00:00:00 2001
From: Jeff Chen <jeff@adtiming.com>
Date: Fri, 22 May 2026 13:49:22 +0800
Subject: [PATCH 12/12] feat(boss/chatmsg): add --raw to expose full JD card
 body

Closes #13.
---
 cli-manifest.json         |  7 ++++
 clis/boss/chatmsg.js      | 28 +++++++++++-----
 clis/boss/chatmsg.test.js | 69 +++++++++++++++++++++++++++++++++++++++
 3 files changed, 96 insertions(+), 8 deletions(-)

diff --git a/cli-manifest.json b/cli-manifest.json
index 5d9285c80..9b8b066a9 100644
--- a/cli-manifest.json
+++ b/cli-manifest.json
@@ -3573,6 +3573,13 @@
           "boss",
           "geek"
         ]
+      },
+      {
+        "name": "raw",
+        "type": "boolean",
+        "default": false,
+        "required": false,
+        "help": "Return full message body including JD card payload (no 120-char truncation); extra fields appear in --fmt json/yaml"
       }
     ],
     "columns": [
diff --git a/clis/boss/chatmsg.js b/clis/boss/chatmsg.js
index d422b4f70..e62ecc220 100644
--- a/clis/boss/chatmsg.js
+++ b/clis/boss/chatmsg.js
@@ -13,27 +13,37 @@ const TYPE_MAP = {
     6: '名片', 7: '语音', 8: '视频', 9: '表情',
 };
 
-function mapBossMsg(m, friend) {
+function mapBossMsg(m, friend, { raw = false } = {}) {
     const fromObj = m.from || {};
     const isSelf = typeof fromObj === 'object' ? fromObj.uid !== friend.uid : false;
-    return {
+    const row = {
         from: isSelf ? '我' : (typeof fromObj === 'object' ? fromObj.name : friend.name),
         type: TYPE_MAP[m.type] || `其他(${m.type})`,
         text: m.text || m.body?.text || '',
         time: m.time ? new Date(m.time).toLocaleString('zh-CN') : '',
     };
+    if (raw) {
+        row.security_id = m.securityId || null;
+        row.body = m.body || null;
+    }
+    return row;
 }
 
-function mapGeekMsg(m, friend) {
+function mapGeekMsg(m, friend, { raw = false } = {}) {
     const fromUid = m.from && m.from.uid;
     const isFromBoss = fromUid != null && String(fromUid) === String(friend.uid);
-    return {
+    const row = {
         from: isFromBoss ? '对方' : '我',
         type: TYPE_MAP[m.type] || `其他(${m.type})`,
         text: m.text || m.body?.text || m.body?.content || m.body?.showText ||
             JSON.stringify(m.body || {}).slice(0, 120),
         time: m.time ? new Date(m.time).toLocaleString('zh-CN') : '',
     };
+    if (raw) {
+        row.security_id = m.securityId || null;
+        row.body = m.body || null;
+    }
+    return row;
 }
 
 async function bossChatMsg(page, kwargs, existingFriend) {
@@ -51,7 +61,7 @@ async function bossChatMsg(page, kwargs, existingFriend) {
     if (messages.length === 0) {
         throw new EmptyResultError('boss chatmsg', 'Boss returned no messages for this chat.');
     }
-    return messages.map((m) => mapBossMsg(m, friend));
+    return messages.map((m) => mapBossMsg(m, friend, { raw: !!kwargs.raw }));
 }
 
 async function geekChatMsg(page, kwargs, encryptSystemId) {
@@ -59,7 +69,7 @@ async function geekChatMsg(page, kwargs, encryptSystemId) {
     if (!friend) throw new EmptyResultError('boss chatmsg', '未找到该聊天（geek 侧）');
     if (!friend.securityId) throw new CommandExecutionError('该聊天缺少 securityId，无法获取历史消息');
     const messages = await fetchGeekHistoryMsg(page, friend, { page: kwargs.page });
-    return messages.map((m) => mapGeekMsg(m, friend));
+    return messages.map((m) => mapGeekMsg(m, friend, { raw: !!kwargs.raw }));
 }
 
 cli({
@@ -75,13 +85,15 @@ cli({
         { name: 'uid', required: true, positional: true, help: 'Encrypted UID (from chatlist)' },
         { name: 'page', type: 'int', default: 1, help: 'Page number' },
         { name: 'side', default: 'auto', choices: ['auto', 'boss', 'geek'], help: 'Identity side: auto (default), boss (recruiter), or geek (job-seeker)' },
+        { name: 'raw', type: 'boolean', default: false, help: 'Return full message body including JD card payload (no 120-char truncation); extra fields appear in --fmt json/yaml' },
     ],
     columns: ['from', 'type', 'text', 'time'],
     func: async (page, kwargs) => {
         requirePage(page);
         const uid = readRequiredString(kwargs.uid, 'chatmsg uid');
         const pageNum = readPositiveInteger(kwargs.page, 'chatmsg --page', 1);
-        const normalizedKwargs = { ...kwargs, uid, page: pageNum };
+        const raw = !!kwargs.raw;
+        const normalizedKwargs = { ...kwargs, uid, page: pageNum, raw };
         const side = kwargs.side || 'auto';
 
         if (side === 'boss') {
@@ -112,6 +124,6 @@ cli({
         if (!geekFriend) throw new EmptyResultError('boss chatmsg', 'uid 在招聘端与求职端聊天列表中均未找到');
         if (!geekFriend.securityId) throw new CommandExecutionError('该聊天缺少 securityId，无法获取历史消息');
         const messages = await fetchGeekHistoryMsg(page, geekFriend, { page: pageNum });
-        return messages.map((m) => mapGeekMsg(m, geekFriend));
+        return messages.map((m) => mapGeekMsg(m, geekFriend, { raw }));
     },
 });
diff --git a/clis/boss/chatmsg.test.js b/clis/boss/chatmsg.test.js
index bf4c0b38b..766f39561 100644
--- a/clis/boss/chatmsg.test.js
+++ b/clis/boss/chatmsg.test.js
@@ -209,6 +209,75 @@ describe('boss chatmsg', () => {
         ).rejects.toBeInstanceOf(CommandExecutionError);
     });
 
+    describe('--raw mode (JD card exposure)', () => {
+        // Long content (>200 chars) sits inside body.jobDesc, not body.content,
+        // so the compact-mode short-circuit (m.body?.content) does not catch it
+        // and the JSON.stringify(...).slice(0, 120) truncation branch is exercised.
+        const JD_CARD_URL = 'https://www.zhipin.com/job_detail/abc-xyz-jobid-123.html?lid=test';
+        const JD_CARD_CONTENT = '岗位职责：负责后端架构设计与核心服务开发，包括但不限于高并发、分布式系统、数据库优化、消息队列、缓存方案、监控告警、容灾备份等关键基础设施建设。任职要求：5年以上后端开发经验，精通 Java/Go，有大型互联网公司经验者优先，熟悉云原生技术栈（K8s/Docker/Service Mesh），具备良好的沟通协作能力，能承担技术攻坚任务，并在团队中起到技术引领作用。';
+        const JD_CARD_FIXTURE = {
+            type: 99,
+            received: true,
+            time: 1704067200000,
+            securityId: 'jd-sec-id-xyz',
+            from: { uid: 67890, name: 'Boss张' },
+            body: {
+                jobDesc: {
+                    title: '高级后端工程师',
+                    company: '某互联网公司',
+                    salary: '40-60K·15薪',
+                    city: '北京',
+                    content: JD_CARD_CONTENT,
+                    jobId: 'abc-xyz-jobid-123',
+                    url: JD_CARD_URL,
+                },
+            },
+        };
+
+        function buildJdPageMock(msg) {
+            return createPageMock(async (script) => {
+                if (script.includes('document.cookie')) return 'test-enc-sys-id';
+                if (script.includes('geekFilterByLabel')) {
+                    return { code: 0, zpData: { friendList: [GEEK_FRIEND_LABEL] } };
+                }
+                if (script.includes('getGeekFriendList.json')) {
+                    return { code: 0, zpData: { result: [GEEK_FRIEND_ENRICHED] } };
+                }
+                if (script.includes('geek/historyMsg')) {
+                    return { code: 0, zpData: { messages: [msg] } };
+                }
+                return {};
+            });
+        }
+
+        it('--raw exposes full JD card url (no truncation)', async () => {
+            const page = buildJdPageMock(JD_CARD_FIXTURE);
+            const rows = await command.func(page, { uid: 'enc-geek-uid', page: 1, side: 'geek', raw: true });
+            expect(rows).toHaveLength(1);
+            expect(rows[0].body).toBeDefined();
+            expect(rows[0].body.jobDesc.url).toBe(JD_CARD_URL);
+            expect(rows[0].security_id).toBe('jd-sec-id-xyz');
+        });
+
+        it('--raw preserves long JD content (>120 chars)', async () => {
+            const page = buildJdPageMock(JD_CARD_FIXTURE);
+            const rows = await command.func(page, { uid: 'enc-geek-uid', page: 1, side: 'geek', raw: true });
+            expect(rows[0].body.jobDesc.content).toBe(JD_CARD_CONTENT);
+            expect(rows[0].body.jobDesc.content.length).toBeGreaterThan(120);
+        });
+
+        it('compact mode (no --raw) still truncates JD card body to <=120 chars and omits body/security_id', async () => {
+            const page = buildJdPageMock(JD_CARD_FIXTURE);
+            const rows = await command.func(page, { uid: 'enc-geek-uid', page: 1, side: 'geek' });
+            expect(rows).toHaveLength(1);
+            expect(rows[0].text.length).toBeLessThanOrEqual(120);
+            expect(rows[0]).not.toHaveProperty('body');
+            expect(rows[0]).not.toHaveProperty('security_id');
+            // And the full URL is NOT present in the truncated text — this is the regression #13 documents.
+            expect(rows[0].text).not.toContain(JD_CARD_URL);
+        });
+    });
+
     it('--side geek reports an empty history as EmptyResultError', async () => {
         const page = createPageMock(async (script) => {
             if (script.includes('document.cookie')) return 'test-enc-sys-id';