桌面加入 Playwright Chromium：背景下載、桌面圖示與啟動器

README.md

@@ -20,8 +20,9 @@ OpenCode 在啟動時安裝，並重設使用者層級設定為預設值。
 ## 檔案
 
 - `app.py` — FastAPI + xterm.js 終端機、檔案瀏覽器、`/ws` session 管理與固定 LXDE 桌面
-- `packages.txt` — 系統套件（`tmux`、`xvfb`、`x11vnc`、`lxde-core`、`xterm`、`novnc`、`x11-utils`）
-- `requirements.txt` — Python 相依套件
+- `packages.txt` — 系統套件（`tmux`、`xvfb`、`x11vnc`、`lxde-core`、`xterm`、`novnc`、
+  `x11-utils`，以及 Playwright Chromium 所需的系統函式庫與字型）
+- `requirements.txt` — Python 相依套件（含 `playwright`）
 
 ## 終端機分頁（全部共用、全部長存）
 
@@ -66,6 +67,34 @@ OpenCode 在啟動時安裝，並重設使用者層級設定為預設值。
   （預設 `1440x900x24`）、`DESKTOP_VNC_PORT`（預設 `5900`）、`DESKTOP_NOVNC_ROOT`
   （預設 `/usr/share/novnc`）。noVNC 靜態檔由 `/novnc/*` 提供，缺少時前端自動改用 CDN。
 
+## Playwright + Chromium（桌面內使用）
+
+Space 啟動後會在背景自動安裝 Playwright 的 Chromium（下載到
+`~/.cache/ms-playwright`，系統依賴已由 `packages.txt` 預裝），完成後：
+
+- 共用 LXDE 桌面會出現 **Playwright Chromium** 圖示，點兩下即可在桌面內開瀏覽器
+  （以 root 執行，已自動加上 `--no-sandbox --disable-dev-shm-usage`）。
+- 也可直接執行啟動器：`~/.local/bin/playwright-chromium`。
+- 在終端機用 Python 操作時，記得 Chromium 需要無沙箱參數：
+
+  ```python
+  from playwright.sync_api import sync_playwright
+
+  with sync_playwright() as p:
+      browser = p.chromium.launch(args=["--no-sandbox", "--disable-dev-shm-usage"])
+      page = browser.new_page()
+      page.goto("https://example.com")
+      print(page.title())
+      browser.close()
+  ```
+
+- 若要開在共用桌面（看的到視窗），把 `headless` 設為 `False` 並使用 `DISPLAY=:99`；
+  Playwright 會自動沿用 `PLAYWRIGHT_BROWSERS_PATH`。
+- 除錯端點：`GET /api/playwright/status`（是否就緒、Chromium 路徑、最後錯誤）、
+  `POST /api/playwright/install`（手動觸發重裝）。安裝 log 在
+  `/tmp/webterm-playwright.log`。
+- 手動更新 Chromium：`python3 -m playwright install chromium`。
+
 ## 記憶體守衛（memguard）
 
 每次 Space 啟動時，`app.py` 的 `install_memguard()` 會自動：

app.py

@@ -1,8 +1,10 @@
 import os
 import pty
+import shlex
 import shutil
 import socket
 import subprocess
+import sys
 import signal
 import struct
 import fcntl
@@ -1181,6 +1183,19 @@ DESKTOP_APT_PACKAGES = "xvfb x11vnc lxde-core xterm novnc x11-utils"
 DESKTOP_TERM_TITLE = "共用終端機"
 DESKTOP_WATCHDOG = None
 
+# ──────────────────────────── Playwright + Chromium（桌面用）─────────────────
+# Chromium 由 Playwright 管理，安裝在 ~/.cache/ms-playwright；完成後在共用桌面
+# 建立「Playwright Chromium」圖示，並提供一支可直接執行的啟動器。
+PW_BROWSERS = os.path.join(HOME, ".cache", "ms-playwright")
+os.environ.setdefault("PLAYWRIGHT_BROWSERS_PATH", PW_BROWSERS)
+PW_LOG = "/tmp/webterm-playwright.log"
+PW_TITLE = "Playwright Chromium"
+PW_LAUNCHER = os.path.join(HOME, ".local", "bin", "playwright-chromium")
+PW_APP_ENTRY = os.path.join(HOME, ".local", "share", "applications", "playwright-chromium.desktop")
+PW_DESKTOP_ENTRY = os.path.join(HOME, "Desktop", "Playwright Chromium.desktop")
+PW_WATCHDOG = None
+PW_TASK = None
+
 DESKTOP_PAGE = r"""<!DOCTYPE html>
 <html lang="zh-TW">
 <head>
@@ -1824,6 +1839,276 @@ class DesktopManager:
 desktop_manager = DesktopManager()
 
 
+class PlaywrightManager:
+    """背景安裝 Playwright Chromium，完成後在共用桌面建立啟動圖示。"""
+
+    def __init__(self):
+        self._lock = asyncio.Lock()
+        self._logf = None
+        self.ready = False
+        self.installing = False
+        self.chromium_path = None
+        self.version = ""
+        self.last_error = ""
+        self.installed_at = 0.0
+        self._last_attempt = 0.0
+
+    # ── 日誌 ──────────────────────────────────────────────────
+    def _log(self, message: str, level: int = logging.INFO):
+        line = f"[playwright] {message}"
+        log.log(level, "%s", line)
+        try:
+            f = self._logfd()
+            if hasattr(f, "write"):
+                f.write(time.strftime("%Y-%m-%d %H:%M:%S ") + line + "\n")
+                f.flush()
+        except OSError:
+            pass
+
+    def _logfd(self):
+        if self._logf is None:
+            try:
+                self._logf = open(PW_LOG, "a", buffering=1)
+            except OSError:
+                self._logf = subprocess.DEVNULL
+        return self._logf
+
+    # ── 執行工具 ──────────────────────────────────────────────
+    @staticmethod
+    def _env():
+        env = os.environ.copy()
+        env["PLAYWRIGHT_BROWSERS_PATH"] = PW_BROWSERS
+        env["DEBIAN_FRONTEND"] = "noninteractive"
+        return env
+
+    async def _exec(self, args, timeout=900):
+        proc = await asyncio.create_subprocess_exec(
+            *args, env=self._env(),
+            stdout=asyncio.subprocess.PIPE, stderr=asyncio.subprocess.PIPE,
+        )
+        try:
+            out, err = await asyncio.wait_for(proc.communicate(), timeout)
+        except asyncio.TimeoutError:
+            proc.kill()
+            await proc.wait()
+            return 124, "", f"逾時 {timeout}s"
+        return proc.returncode, out.decode(errors="replace"), err.decode(errors="replace")
+
+    def _probe_path(self):
+        code = (
+            "from playwright.sync_api import sync_playwright\n"
+            "with sync_playwright() as p:\n"
+            "    print(p.chromium.executable_path)\n"
+        )
+        try:
+            proc = subprocess.run(
+                [sys.executable, "-c", code], capture_output=True, text=True,
+                timeout=120, env=self._env(),
+            )
+        except Exception as exc:
+            self.last_error = f"無法取得 Chromium 路徑：{exc}"
+            return None
+        lines = [ln.strip() for ln in (proc.stdout or "").splitlines() if ln.strip()]
+        path = lines[-1] if lines else ""
+        if proc.returncode != 0 or not path or not os.path.isfile(path):
+            return None
+        return path
+
+    def _launch_check(self):
+        code = (
+            "from playwright.sync_api import sync_playwright\n"
+            "with sync_playwright() as p:\n"
+            "    b = p.chromium.launch(headless=True, args=['--no-sandbox','--disable-dev-shm-usage'])\n"
+            "    pg = b.new_page()\n"
+            "    pg.set_content('<title>webterm-playwright-ok</title>')\n"
+            "    print(pg.title())\n"
+            "    b.close()\n"
+        )
+        try:
+            proc = subprocess.run(
+                [sys.executable, "-c", code], capture_output=True, text=True,
+                timeout=180, env=self._env(),
+            )
+        except Exception as exc:
+            self.last_error = f"Chromium 啟動測試例外：{exc}"
+            return False
+        if proc.returncode != 0 or "webterm-playwright-ok" not in (proc.stdout or ""):
+            detail = ((proc.stderr or "") or (proc.stdout or "")).strip()
+            self.last_error = f"Chromium 啟動測試失敗：{detail[-500:]}"
+            return False
+        return True
+
+    def _write_launchers(self):
+        icon = ""
+        for name in ("product_logo_48.png", "product_logo_32.png"):
+            candidate = os.path.join(os.path.dirname(self.chromium_path), name)
+            if os.path.isfile(candidate):
+                icon = candidate
+                break
+        script = (
+            "#!/bin/bash\n"
+            f"export DISPLAY=\"${{DISPLAY:-{DESKTOP_DISPLAY}}}\"\n"
+            f"exec {shlex.quote(self.chromium_path)} --no-sandbox --disable-dev-shm-usage "
+            "--no-first-run --no-default-browser-check --start-maximized \"$@\"\n"
+        )
+        entry = (
+            "[Desktop Entry]\n"
+            "Type=Application\n"
+            "Version=1.0\n"
+            f"Name={PW_TITLE}\n"
+            "Comment=Chromium (Playwright) on the shared LXDE desktop\n"
+            f"Exec={PW_LAUNCHER} %U\n"
+            f"Icon={icon or 'web-browser'}\n"
+            "Terminal=false\n"
+            "Categories=Network;WebBrowser;\n"
+            "StartupNotify=true\n"
+        )
+        os.makedirs(os.path.dirname(PW_LAUNCHER), exist_ok=True)
+        with open(PW_LAUNCHER, "w") as f:
+            f.write(script)
+        os.chmod(PW_LAUNCHER, 0o755)
+        for path in (PW_APP_ENTRY, PW_DESKTOP_ENTRY):
+            os.makedirs(os.path.dirname(path), exist_ok=True)
+            with open(path, "w") as f:
+                f.write(entry)
+            os.chmod(path, 0o755)
+
+    # ── 安裝 ──────────────────────────────────────────────────
+    async def _install(self) -> bool:
+        self.ready = False
+        self.last_error = ""
+        self._log("開始安裝 Playwright Chromium…")
+        rc, _, _ = await self._exec([sys.executable, "-c", "import playwright"], timeout=60)
+        if rc != 0:
+            self._log("Python 套件 playwright 不存在，先以 pip 安裝", logging.WARNING)
+            rc, out, err = await self._exec(
+                [sys.executable, "-m", "pip", "install", "--no-cache-dir", "playwright"],
+                timeout=600,
+            )
+            if rc != 0:
+                self.last_error = f"pip install playwright 失敗：{(err or out)[-500:]}"
+                self._log(self.last_error, logging.WARNING)
+                return False
+
+        rc, out, err = await self._exec(
+            [sys.executable, "-m", "playwright", "install", "chromium"], timeout=1800)
+        if rc != 0:
+            self._log("Chromium 下載失敗，先安裝系統依賴再重試", logging.WARNING)
+            await self._exec(
+                [sys.executable, "-m", "playwright", "install-deps", "chromium"], timeout=1800)
+            rc, out, err = await self._exec(
+                [sys.executable, "-m", "playwright", "install", "chromium"], timeout=1800)
+        if rc != 0:
+            self.last_error = f"playwright install chromium 失敗：{(err or out)[-500:]}"
+            self._log(self.last_error, logging.WARNING)
+            return False
+
+        path = await asyncio.to_thread(self._probe_path)
+        if not path:
+            self.last_error = self.last_error or "找不到 Playwright 的 Chromium 執行檔"
+            self._log(self.last_error, logging.WARNING)
+            return False
+        self.chromium_path = path
+        self.version = os.path.basename(os.path.dirname(os.path.dirname(path)))
+        self._log(f"Chromium 已下載：{path}")
+
+        if not await asyncio.to_thread(self._launch_check):
+            self._log(self.last_error + "；嘗試安裝系統依賴", logging.WARNING)
+            await self._exec(
+                [sys.executable, "-m", "playwright", "install-deps", "chromium"], timeout=1800)
+            if not await asyncio.to_thread(self._launch_check):
+                self._log(self.last_error, logging.WARNING)
+                return False
+
+        try:
+            await asyncio.to_thread(self._write_launchers)
+        except Exception as exc:
+            self.last_error = f"建立桌面啟動圖示失敗：{exc!r}"
+            self._log(self.last_error, logging.WARNING)
+            return False
+
+        self.ready = True
+        self.installed_at = time.time()
+        self.last_error = ""
+        self._log(f"Playwright Chromium 就緒（{self.version}），桌面圖示：{PW_DESKTOP_ENTRY}")
+        try:
+            pcman = shutil.which("pcmanfm")
+            if pcman and _desktop_port_open():
+                subprocess.Popen(
+                    [pcman, "--reconfigure"],
+                    env={**os.environ, "DISPLAY": DESKTOP_DISPLAY},
+                    stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL,
+                )
+        except Exception:
+            pass
+        return True
+
+    async def ensure(self, force: bool = False) -> bool:
+        async with self._lock:
+            if not force and self.chromium_path and os.path.isfile(self.chromium_path):
+                self.ready = True
+                if not os.path.isfile(PW_LAUNCHER):
+                    try:
+                        await asyncio.to_thread(self._write_launchers)
+                    except Exception:
+                        pass
+                return True
+            now = time.time()
+            if not force and now - self._last_attempt < 300:
+                return False
+            self._last_attempt = now
+            self.installing = True
+            try:
+                return await self._install()
+            except Exception as exc:
+                self.last_error = f"安裝例外：{exc!r}"
+                self._log(self.last_error, logging.WARNING)
+                return False
+            finally:
+                self.installing = False
+
+    def status(self) -> dict:
+        return {
+            "ready": self.ready,
+            "installing": self.installing,
+            "chromium": self.chromium_path,
+            "version": self.version,
+            "browsers_path": PW_BROWSERS,
+            "launcher": PW_LAUNCHER if os.path.isfile(PW_LAUNCHER) else None,
+            "desktop_entry": PW_DESKTOP_ENTRY if os.path.isfile(PW_DESKTOP_ENTRY) else None,
+            "installed_at": round(self.installed_at, 3) if self.installed_at else None,
+            "last_error": self.last_error,
+        }
+
+
+playwright_manager = PlaywrightManager()
+
+
+@app.get("/api/playwright/status")
+async def api_playwright_status():
+    return playwright_manager.status()
+
+
+@app.post("/api/playwright/install")
+async def api_playwright_install():
+    global PW_TASK
+    if PW_TASK is None or PW_TASK.done():
+        PW_TASK = asyncio.create_task(playwright_manager.ensure(force=True))
+    return {"ok": True, "started": True, **playwright_manager.status()}
+
+
+async def playwright_watchdog():
+    """背景安裝 Chromium；完成後每 5 分鐘確認執行檔還在。"""
+    await asyncio.sleep(10)
+    while True:
+        ok = False
+        try:
+            ok = await playwright_manager.ensure()
+        except Exception as exc:
+            log.warning("[playwright] 背景安裝例外（終端機不受影響）：%s", exc)
+        await asyncio.sleep(300 if ok else 60)
+
+
 async def desktop_watchdog():
     """每 3 秒確認桌面還在，且永遠只有一份；不影響終端機流程。"""
     await asyncio.sleep(1)
@@ -1844,7 +2129,7 @@ def dummy_gpu():
 
 @app.on_event("startup")
 async def startup_event():
-    global DESKTOP_WATCHDOG
+    global DESKTOP_WATCHDOG, PW_WATCHDOG
     _load_tabs()
     _write_shell_launcher()
     await ensure_tmux()
@@ -1855,6 +2140,12 @@ async def startup_event():
             DESKTOP_WATCHDOG = asyncio.create_task(desktop_watchdog())
     except Exception as _desktop_err:  # pragma: no cover
         log.warning("[desktop] 無法啟動看門狗（終端機照常運作）：%r", _desktop_err)
+    # Playwright Chromium 背景下載；完成後桌面會出現啟動圖示。
+    try:
+        if PW_WATCHDOG is None or PW_WATCHDOG.done():
+            PW_WATCHDOG = asyncio.create_task(playwright_watchdog())
+    except Exception as _pw_err:  # pragma: no cover
+        log.warning("[playwright] 無法啟動背景安裝（終端機照常運作）：%r", _pw_err)
     dummy_gpu()
     if SKIP_INSTALL:
         log.info("WEBTERM_SKIP_INSTALL=1：跳過 opencode / 編輯器安裝")

packages.txt

@@ -5,3 +5,34 @@ lxde-core
 xterm
 novnc
 x11-utils
+libasound2t64
+libatk-bridge2.0-0t64
+libatk1.0-0t64
+libatspi2.0-0t64
+libcairo2
+libcups2t64
+libdbus-1-3
+libdrm2
+libgbm1
+libglib2.0-0t64
+libnspr4
+libnss3
+libpango-1.0-0
+libx11-6
+libxcb1
+libxcomposite1
+libxdamage1
+libxext6
+libxfixes3
+libxkbcommon0
+libxrandr2
+fonts-noto-color-emoji
+fonts-unifont
+libfontconfig1
+libfreetype6
+xfonts-scalable
+fonts-liberation
+fonts-ipafont-gothic
+fonts-wqy-zenhei
+fonts-tlwg-loma-otf
+fonts-freefont-ttf

requirements.txt

@@ -2,3 +2,4 @@ fastapi
 uvicorn[standard]
 websockets
 httpx
+playwright