@ait-co/devtools 0.1.100 → 0.1.102

package/dist/mcp/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { i as generateTotp, n as assertRelayAuthConfigured, r as buildRelayVerifyAuth } from "../totp-Xq3ACwkm.js";
-import { t as loadRelaySecretReadOnly } from "../relay-secret-store-J0SUUXjH.js";
+import { t as loadRelaySecretReadOnly } from "../relay-secret-store-B0DH-8Qb.js";
 import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { argv } from "node:process";
@@ -1933,7 +1933,7 @@ function findFreePort() {
 				else resolve(port);
 			});
 		});
-		server.once("error", reject);
+		server.on("error", reject);
 	});
 }
 /**
@@ -3003,7 +3003,7 @@ function buildLangSwitcher(path, existingParams, locale, s) {
 *   - tunnel wssUrl은 "터널 연결됨" 상태 표시에서 UP/DOWN만 노출.
 *     wssUrl 값 자체는 dashboard HTML에 넣지 않는다.
 */
-function buildDashboardHtml(state, qrDataUrl, locale, path = "/", params = new URLSearchParams()) {
+function buildDashboardHtml(state, qrDataUrl, locale, path = "/", params = new URLSearchParams(), devtoolsEntryUrl = null) {
 	const s = resolveLocaleStrings(locale);
 	const now = (/* @__PURE__ */ new Date()).toISOString();
 	const tunnelStatus = state.tunnel.up ? s("dashboard.tunnel.up") : s("dashboard.tunnel.down");
@@ -3016,7 +3016,7 @@ function buildDashboardHtml(state, qrDataUrl, locale, path = "/", params = new U
 	} else attachSection = `<p class="hint">${escapeHtml(s("dashboard.attach.hint"))}</p>`;
 	const pagesAttached = Array.isArray(state.pages) && state.pages.length > 0;
 	let inspectorSection;
-	if (pagesAttached && state.inspectorUrl) inspectorSection = `<a class="inspector-link" id="inspector-link" href="${escapeHtml(state.inspectorUrl)}" target="_blank" rel="noopener noreferrer">${escapeHtml(s("dashboard.inspector.open"))}</a>`;
+	if (pagesAttached && devtoolsEntryUrl) inspectorSection = `<a class="inspector-link" id="inspector-link" href="${escapeHtml(devtoolsEntryUrl)}" target="_blank" rel="noopener noreferrer">${escapeHtml(s("dashboard.inspector.open"))}</a>`;
 	else inspectorSection = `<span class="inspector-hint" id="inspector-link">${escapeHtml(s("dashboard.inspector.waiting"))}</span>`;
 	const pagesSection = state.pages === null ? "" : `<hr /><section id="pages-section"><h2>${escapeHtml(s("dashboard.pages.section"))}</h2><ul id="pages-list">${state.pages.length > 0 ? state.pages.map((p) => {
 		return `<li><span class="page-id">${escapeHtml(p.id)}</span> <span class="page-url">${escapeHtml(p.url.slice(0, 120))}</span></li>`;
@@ -3301,7 +3301,13 @@ async function startQrHttpServer(getDashboardState, options) {
 					errorCorrectionLevel: "M"
 				});
 			} catch {}
-			const html = buildDashboardHtml(state, qrDataUrl, locale, path, params);
+			const devtoolsEntryUrl = (() => {
+				if (!options?.getDirectInspectorUrl) return null;
+				const addr = server.address();
+				if (!addr || typeof addr === "string") return null;
+				return `http://127.0.0.1:${addr.port}/devtools/`;
+			})();
+			const html = buildDashboardHtml(state, qrDataUrl, locale, path, params, devtoolsEntryUrl);
 			res.writeHead(200, {
 				"Content-Type": "text/html; charset=utf-8",
 				"Cache-Control": "no-store"
@@ -3369,11 +3375,12 @@ async function startQrHttpServer(getDashboardState, options) {
 			});
 			return;
 		}
-		if (path === "/inspector") {
+		if (path === "/inspector" || path === "/devtools" || path === "/devtools/") {
 			const getDirectInspectorUrl = options?.getDirectInspectorUrl;
 			if (!getDirectInspectorUrl) {
+				const body = path === "/inspector" ? "Inspector endpoint is not available in this server mode." : "relay 연결 세션에서만 DevTools UI를 열 수 있습니다.";
 				res.writeHead(503, { "Content-Type": "text/plain; charset=utf-8" });
-				res.end("Inspector endpoint is not available in this server mode.");
+				res.end(body);
 				return;
 			}
 			const result = getDirectInspectorUrl();
@@ -4858,7 +4865,7 @@ async function readMcpSdkVersion() {
 * some test environments that skip the build step).
 */
 function readDevtoolsVersion() {
-	return "0.1.100";
+	return "0.1.102";
 }
 /**
 * Derives the next recommended action from a completed diagnostics snapshot.
@@ -5313,6 +5320,52 @@ function makeTunnelStatus(up, wssUrl, droppedAt = null, reissueAttempts = 0) {
 * Node-only.
 */
 /**
+* Maximum age (ms) of a page's `lastSeenAt` before it is treated as a ghost
+* and excluded from the `wait_for_attach` short-circuit in `build_attach_url`
+* (issue #610).
+*
+* Rationale: the env-2 relay is owned by the dev server (unplugin), so every
+* `dev:phone:cdp` restart produces a new quick-tunnel. The old relay goes
+* offline immediately, but the daemon's warm `ChiiCdpConnection` still lists
+* the last-seen target — its `lastSeenAt` freezes at the moment the old relay
+* died. A 5-minute threshold is large enough to be invisible in normal usage
+* (active CDP sessions see a message every few seconds) while being small
+* enough to catch a relay that went down before the daemon was re-entered.
+*
+* Injectable for tests via {@link DebugServerDeps.stalePageThresholdMs}.
+*/
+const RELAY_SANDBOX_STALE_PAGE_MS = 300 * 1e3;
+/**
+* Predicate used by `build_attach_url`'s `wait_for_attach` loop to decide
+* whether the relay-sandbox connection has a genuinely fresh page attached.
+*
+* Stale-ghost gating (issue #610): when the dev server restarts with a new
+* quick-tunnel, the warm `ChiiCdpConnection` still lists the last-seen target
+* but its `lastSeenAt` is frozen. A page whose `lastSeenAt` exceeds
+* `stalePageThresholdMs` is a ghost from the dead relay — it must NOT
+* short-circuit `wait_for_attach`.
+*
+* Rules:
+* - `pages.length === 0` → false (nothing attached).
+* - Connection has no `getLastSeenAt` (test fakes, local-browser) → falls back
+*   to `pages.length > 0` (regression-safe).
+* - `seenMs === null` → treat as fresh (no CDP message received yet, first
+*   message pending — the connection is alive).
+* - Otherwise: at least one page must satisfy `nowMs - seenMs <=
+*   stalePageThresholdMs`.
+*
+* Exported for unit testing.
+*/
+function isSandboxPageFresh(pages, getLastSeenAt, nowMs, stalePageThresholdMs) {
+	if (pages.length === 0) return false;
+	if (getLastSeenAt === null) return true;
+	return pages.some((p) => {
+		const seenMs = getLastSeenAt(p.id);
+		if (seenMs === null) return true;
+		return nowMs - seenMs <= stalePageThresholdMs;
+	});
+}
+/**
 * Parses `_deploymentId` from the query string of a scheme URL.
 *
 * Returns `null` when the param is absent or empty — callers treat that as
@@ -5395,7 +5448,7 @@ function waitForAttachWithEvents(connection, filterFn, timeoutMs, pollIntervalMs
 * naturally via `enableDomains`). The tier only controls visibility.
 */
 function createDebugServer(deps) {
-	const { connection, router: routerDep, aitSource, getTunnelStatus, waitForAttachTimeoutMs = 6e4, qrHttpServer, getEnvironment: getEnvDep, getEnvironmentReason: getEnvReasonDep, diagnosticsCollector: collectorDep, totpSecret, onAttachUrlBuilt, getTunnelChildPid, readLock: readLockDep } = deps;
+	const { connection, router: routerDep, aitSource, getTunnelStatus, waitForAttachTimeoutMs = 6e4, qrHttpServer, getEnvironment: getEnvDep, getEnvironmentReason: getEnvReasonDep, diagnosticsCollector: collectorDep, totpSecret, onAttachUrlBuilt, getTunnelChildPid, readLock: readLockDep, stalePageThresholdMs = RELAY_SANDBOX_STALE_PAGE_MS, nowMs = () => Date.now() } = deps;
 	const getTotpSecret = deps.getTotpSecret ?? (() => totpSecret);
 	const readLockFn = readLockDep ?? readServerLock;
 	const router = routerDep ?? makeSingleConnectionRouter(connection);
@@ -5404,7 +5457,7 @@ function createDebugServer(deps) {
 	const collector = collectorDep ?? new InMemoryDiagnosticsCollector();
 	const server = new Server({
 		name: "ait-debug",
-		version: "0.1.100"
+		version: "0.1.102"
 	}, { capabilities: { tools: { listChanged: true } } });
 	server.setRequestHandler(ListToolsRequestSchema, () => {
 		const conn = router.active;
@@ -5492,7 +5545,7 @@ function createDebugServer(deps) {
 				const buildProjectRoot = typeof rawBuildProjectRoot === "string" ? rawBuildProjectRoot : void 0;
 				let tunnelHttpUrl = process.env.AIT_TUNNEL_BASE_URL?.trim() ?? "";
 				if (tunnelHttpUrl === "" && buildProjectRoot !== void 0) {
-					const { readRelayUrls } = await import("../relay-url-store-RKcao_yG.js");
+					const { readRelayUrls } = await import("../relay-url-store-BPeUZsiY.js");
 					tunnelHttpUrl = (await readRelayUrls({ projectRoot: buildProjectRoot }))?.tunnelBaseUrl ?? "";
 				}
 				if (tunnelHttpUrl === "") return mcpError("build_attach_url(mobile): AIT_TUNNEL_BASE_URL이 설정되지 않았습니다. dev 서버가 tunnel:{cdp:true}로 기동 중이면 .ait_urls 파일이 자동 생성돼 있어야 합니다. 자동 발견이 되지 않을 경우 앱 HTTP 터널 URL을 AIT_TUNNEL_BASE_URL 환경변수로 직접 전달하세요.");
@@ -5533,7 +5586,10 @@ function createDebugServer(deps) {
 				});
 				const relayUrl = tunnelStatus.wssUrl;
 				const totp = totpMeta;
-				const isMatchingPage = (pages) => pages.length > 0;
+				const connAsAny = conn;
+				const getLastSeenAt = typeof connAsAny.getTargetLastSeenAt === "function" ? (id) => connAsAny.getTargetLastSeenAt(id) : null;
+				const callNow = nowMs();
+				const isMatchingPage = (pages) => isSandboxPageFresh(pages, getLastSeenAt, callNow, stalePageThresholdMs);
 				const buildTimeoutError = (baseText, timeoutSec, observed) => {
 					const observedUrls = observed.slice(0, 3).map((p) => p.url.slice(0, 80)).join(", ");
 					return `${baseText}\n\nNo page attached within ${timeoutSec}s${observed.length > 0 ? ` — previously attached pages: [${observedUrls}]` : ""} — launcher QR을 폰 카메라로 스캔한 뒤 call list_pages를 다시 호출하세요.`;
@@ -6242,7 +6298,7 @@ async function readRelayLocalUrl(env = process.env, projectRoot) {
 	const envValue = (env.AIT_RELAY_LOCAL_URL ?? "").trim();
 	if (envValue !== "") return envValue;
 	if (projectRoot !== void 0) try {
-		const { readRelayUrls } = await import("../relay-url-store-RKcao_yG.js");
+		const { readRelayUrls } = await import("../relay-url-store-BPeUZsiY.js");
 		const stored = await readRelayUrls({ projectRoot });
 		if (stored?.relayLocalUrl) return stored.relayLocalUrl;
 	} catch {}
@@ -6296,7 +6352,7 @@ async function readMobileRelayBaseUrl(env = process.env, projectRoot) {
 	const envValue = typeof raw === "string" ? raw.trim() : "";
 	if (envValue !== "") return envValue;
 	if (projectRoot !== void 0) {
-		const { readRelayUrls } = await import("../relay-url-store-RKcao_yG.js");
+		const { readRelayUrls } = await import("../relay-url-store-BPeUZsiY.js");
 		const stored = await readRelayUrls({ projectRoot });
 		if (stored?.relayBaseUrl !== void 0) return stored.relayBaseUrl;
 	}
@@ -6459,10 +6515,39 @@ var DualConnectionRouter = class {
 	* `projectRoot` is forwarded to `bootLazyFor` so `relay-sandbox` boot can
 	* fall back to `.ait_urls` file discovery (#424) when `AIT_RELAY_BASE_URL` is
 	* not set in the environment.
+	*
+	* **Relay-sandbox stale-URL rebuild (issue #610):** when the `relay-sandbox`
+	* family is already warm, reads the current relay URL via
+	* `deps.readSandboxRelayUrl` and compares it against the cached
+	* `relayHttpUrl`. If they differ (dev server was restarted → new tunnel),
+	* the stale family is torn down, evicted from the map, and a fresh one is
+	* booted. If they match, or if the URL cannot be read, the warm family is
+	* reused (fail-open — no unnecessary teardown on transient read errors).
+	*
+	* SECRET-HANDLING: fresh and cached relay URLs carry the tunnel host. The
+	* comparison result (same/different) is the only thing surfaced — URLs are
+	* never logged.
 	*/
 	async familyFor(key, projectRoot) {
 		const warm = this.lazyFamilies.get(key);
-		if (warm) return warm;
+		if (warm) {
+			if (key === "relay-sandbox" && this.deps.readSandboxRelayUrl !== void 0) {
+				let freshUrl = null;
+				try {
+					freshUrl = await this.deps.readSandboxRelayUrl(projectRoot);
+				} catch {
+					freshUrl = null;
+				}
+				if (freshUrl !== null && freshUrl !== warm.relayHttpUrl) {
+					warm.stop();
+					this.lazyFamilies.delete(key);
+					const booted = await this.deps.bootLazyFor(key, projectRoot);
+					this.lazyFamilies.set(key, booted);
+					return booted;
+				}
+			}
+			return warm;
+		}
 		const booted = await this.deps.bootLazyFor(key, projectRoot);
 		this.lazyFamilies.set(key, booted);
 		return booted;
@@ -6522,7 +6607,8 @@ async function runDebugServer(options = {}) {
 		diagnosticsCollector,
 		devtoolsOpener,
 		onPageAttach: () => qrServer?.notifyStateChange(),
-		getInspectorStableUrl: () => qrServer?.inspectorStableUrl ?? null
+		getInspectorStableUrl: () => qrServer?.inspectorStableUrl ?? null,
+		readSandboxRelayUrl: (pr) => readMobileRelayBaseUrl(process.env, pr).catch(() => null)
 	});
 	const aitSource = new RoutingAitSource(() => {
 		return router.active;
@@ -6734,7 +6820,8 @@ async function runLocalDebugServer(options = {}) {
 		diagnosticsCollector,
 		devtoolsOpener,
 		onPageAttach: () => qrServer?.notifyStateChange(),
-		getInspectorStableUrl: () => qrServer?.inspectorStableUrl ?? null
+		getInspectorStableUrl: () => qrServer?.inspectorStableUrl ?? null,
+		readSandboxRelayUrl: (pr) => readMobileRelayBaseUrl(process.env, pr).catch(() => null)
 	});
 	const aitSource = new RoutingAitSource(() => {
 		return router.active;
@@ -6929,7 +7016,8 @@ async function runMobileDebugServer(options = {}) {
 		diagnosticsCollector,
 		devtoolsOpener,
 		onPageAttach: () => qrServer?.notifyStateChange(),
-		getInspectorStableUrl: () => qrServer?.inspectorStableUrl ?? null
+		getInspectorStableUrl: () => qrServer?.inspectorStableUrl ?? null,
+		readSandboxRelayUrl: (pr) => readMobileRelayBaseUrl(process.env, pr ?? options.projectRoot ?? process.cwd()).catch(() => null)
 	});
 	const aitSource = new RoutingAitSource(() => {
 		return router.active;
@@ -7503,7 +7591,7 @@ function createDevServer(deps = {}) {
 	const aitSource = deps.aitSource ?? new HttpAitSource({ stateEndpoint });
 	const server = new Server({
 		name: "ait-devtools",
-		version: "0.1.100"
+		version: "0.1.102"
 	}, { capabilities: { tools: {} } });
 	server.setRequestHandler(ListToolsRequestSchema, () => ({ tools: DEV_TOOL_DEFINITIONS.map((tool) => ({ ...tool })) }));
 	server.setRequestHandler(CallToolRequestSchema, async (request) => {