chore: 更新 Cloudflare 及浏览器自动化攻防文章并补发 blog 链接

cli/src/output.rs

@@ -874,11 +874,13 @@ Global Options:
   --session <name>     Use specific session
   --headers <json>     Set HTTP headers (scoped to this origin)
   --risk-mode <mode>   Risk handling for verify/captcha pages: off, warn, block
+  --wait-until <mode>  Navigation wait strategy: load, domcontentloaded, networkidle
   --headed             Show browser window
 
 Examples:
   agent-browser open example.com
   agent-browser --risk-mode block open example.com
+  agent-browser --wait-until domcontentloaded open example.com
   agent-browser open https://github.com
   agent-browser open localhost:3000
   agent-browser open api.example.com --headers '{"Authorization": "Bearer token"}'
@@ -2232,19 +2234,21 @@ Examples:
         }
         "doctor" => {
             r##"
-agent-browser doctor - Diagnose CDP and tab-group plugin health
+agent-browser doctor - Diagnose CDP, sourceURL sanitization, and tab-group plugin health
 
 Usage: agent-browser doctor
 
 Runs a non-destructive health check focused on:
   - CDP endpoint reachability (preferred :9333 + common ports)
   - DevToolsActivePort discovery from local Chrome profiles
+  - CDP sourceURL sanitization probe (Runtime.evaluate leakage check)
+  - Plugin handshake page context suitability (internal page vs http(s))
   - Tab-group plugin handshake status (when connected via CDP)
 
 Notes:
   - doctor does not accept positional arguments
   - If browser is not already connected, doctor will still report CDP probe results
-  - Plugin handshake requires a live CDP page and the extension to be installed
+  - Plugin handshake requires CDP mode, a normal http(s) page, and the extension installed
 
 Global Options:
   --json               Output as JSON
@@ -2483,7 +2487,7 @@ Sessions:
 Setup:
   install                    Install browser binaries
   install --with-deps        Also install system dependencies (Linux)
-  doctor                     Diagnose CDP + plugin health
+  doctor                     Diagnose CDP + sourceURL + plugin health
 
 Snapshot Options:
   -i, --interactive          Only interactive elements
@@ -2520,6 +2524,7 @@ Options:
   --tab-group <name>         Base title for agent tab groups (CDP plugin mode; silent no-op if plugin unavailable)
   --tab-group-plugin-id <id> Expected Chrome extension ID for tab-group handshake (or AGENT_BROWSER_TAB_GROUP_PLUGIN_ID)
   --risk-mode <mode>         Verify/captcha handling: off, warn, block (or AGENT_BROWSER_RISK_MODE)
+  --wait-until <mode>        Navigation wait strategy for open/navigate: load, domcontentloaded, networkidle
   --session-name <name>      Auto-save/restore session state (defaults to --session)
   --content-boundaries       Wrap page output in boundary markers (or AGENT_BROWSER_CONTENT_BOUNDARIES)
   --max-output <chars>       Truncate page output to N chars (or AGENT_BROWSER_MAX_OUTPUT)