@ait-co/devtools 0.1.144 → 0.2.1

package/dist/in-app/index.js

@@ -1,968 +1,91 @@
-import { setScreenAwakeMode } from "@apps-in-toss/web-framework";
-//#region src/in-app/gate.ts
+//#region src/stubs/moved.ts
+/** The package that now owns the on-device attach + eruda console. */
+const DEBUG_CONSOLE_PACKAGE = "@ait-co/debug-console";
 /**
-* The host suffix the Toss app uses to serve dogfood / private mini-apps.
+* Builds the migration sentence for a moved subpath.
 *
-* A `intoss-private://` (dogfood) entry maps to a host such as
-* `aitc-sdk-example.private-apps.tossmini.com`. A production `intoss://`
-* entry is served from `*.apps.tossmini.com` — the `.private-apps.` segment
-* is absent. Confirmed live over CDP for mini-app 31146; the exact production
-* host is to be re-confirmed once 31146 passes review (spec open question 2).
+* SECRET-HANDLING: fixed text plus the two specifiers only — no paths, hosts,
+* URLs, or environment values.
 */
-const PRIVATE_APPS_HOST_SUFFIX = ".private-apps.tossmini.com";
-/**
-* The host suffix Cloudflare quick-tunnels serve from — the env 2 (PWA) entry.
-* See {@link isTrycloudflareHost} for why this host kind bypasses Layer B1.
-*/
-const TRYCLOUDFLARE_HOST_SUFFIX = ".trycloudflare.com";
-/**
-* Returns whether `hostname` is a `*.private-apps.tossmini.com` subdomain —
-* the host the Toss app reserves for dogfood / private mini-app entries.
-*
-* The match is an exact suffix check, not a substring `.includes()`: a
-* substring test would also accept an attacker-controlled host like
-* `private-apps.tossmini.com.evil.example`, which ends in `.example`, not in
-* `.tossmini.com`. Requiring the string to END with the suffix closes that.
-* The leading `.` in the suffix also forces a real subdomain label, so a
-* bare `private-apps.tossmini.com` (no mini-app subdomain) does not match.
-*/
-function isPrivateAppsHost(hostname) {
-	return hostname.endsWith(PRIVATE_APPS_HOST_SUFFIX);
-}
-/**
-* The parent host suffix for the whole Toss mini-app serving family.
-*
-* The 3.0 runtime loader serves mini-app pages from tossmini.com hosts that
-* are NOT `*.private-apps.tossmini.com` (observed live 2026-07-08 on mini-app
-* 31146 with a 3.0-beta bundle: a 4-label host ending in `.tossmini.com`
-* whose middle label is not `private-apps`, with `_deploymentId` consumed by
-* the native loader and not propagated to the page URL — devtools#760).
-*
-* Under 3.0 the hostname therefore no longer distinguishes a dogfood
-* candidate from a production entry, so for these hosts Layer B is demoted
-* from a stage discriminator (#665) to a "Toss-owned host family" filter,
-* and the effective boundary moves to Layer C: explicit `debug=1`, a valid
-* `wss:` relay, and a MANDATORY `at=` TOTP code (see Layer C3 in
-* {@link evaluateDebugGate}). A production user's entry URL carries none of
-* those params, so an accidentally-shipped debug build stays dormant exactly
-* as #665 intended; what changes is that a deliberate operator holding the
-* TOTP secret can now attach on a 3.0-family host.
-*
-* The match is the same exact-suffix `endsWith` check as
-* {@link isPrivateAppsHost} — never a substring `.includes()`, which would
-* accept an attacker-controlled `x.tossmini.com.evil.example`. The leading
-* `.` forces at least one subdomain label, so a bare `tossmini.com` does not
-* match.
-*/
-const TOSSMINI_HOST_SUFFIX = ".tossmini.com";
-/**
-* Returns whether `hostname` is any `*.tossmini.com` subdomain — the host
-* family the Toss app serves mini-app pages from. Includes the 2.x
-* `*.private-apps.tossmini.com` dogfood hosts and the 3.0 unified serving
-* hosts (devtools#760).
-*/
-function isTossminiHost(hostname) {
-	return hostname.endsWith(TOSSMINI_HOST_SUFFIX);
-}
-/**
-* The host suffix Cloudflare quick-tunnels use — the env 2 (PWA) entry.
-*
-* Env 2 serves the local Vite dev server through a `*.trycloudflare.com` quick
-* tunnel (`src/unplugin/tunnel.ts`). It has no Toss app, no `intoss-private://`
-* scheme, and — critically — no production runtime: the SDK is the devtools
-* mock, and the page is the developer's own dev build. The Layer B1 safety net
-* (which stops a dogfood build that lands on a Toss *production* host from
-* attaching) has nothing to protect against here, because env 2 has no
-* production host. So a trycloudflare host is allowed past B1 — but ONLY past
-* B1: the remaining layers (C1 opt-in, C2 relay, C3 TOTP) still apply, so a
-* leaked tunnel URL is still blocked by TOTP exactly as on the Toss path.
-*
-* The match is the same exact-suffix `endsWith` check as
-* {@link isPrivateAppsHost} — never a substring `.includes()`, which would
-* accept an attacker-controlled `evil.trycloudflare.com.example.com`. The
-* leading `.` forces a real subdomain label, so a bare `trycloudflare.com`
-* (no tunnel subdomain) does not match.
-*/
-function isTrycloudflareHost(hostname) {
-	return hostname.endsWith(TRYCLOUDFLARE_HOST_SUFFIX);
-}
-/**
-* Returns true when the hostname is a localhost/loopback address.
-* Allowed: `localhost`, `127.x.x.x` (full RFC 5735 loopback block), `[::1]`,
-* `0.0.0.0`, `*.localhost`.
-*
-* Security note: `hostname.startsWith('127.')` is intentionally NOT used —
-* that pattern would accept `127.evil.com`, which starts with "127." but is an
-* attacker-controlled hostname, not a loopback address. Instead, the 127/8
-* loopback block is matched with a strict numeric-quad regex so only valid
-* dotted-decimal IPv4 in the 127.x.x.x range pass (#665 작업 A fix).
-*/
-function isLocalhostHost(hostname) {
-	if (hostname === "localhost" || hostname === "0.0.0.0") return true;
-	if (hostname === "[::1]") return true;
-	if (/^127\.\d+\.\d+\.\d+$/.test(hostname)) return true;
-	if (hostname.endsWith(".localhost")) return true;
-	return false;
-}
-/**
-* Positive-allowlist kill-switch (#665): returns true when the hostname is a
-* known debug-allowed host. The debug surface is ONLY active on:
-*   - localhost / loopback (env 1 desktop dev)
-*   - *.trycloudflare.com (env 2 PWA tunnel)
-*   - *.tossmini.com (env 3 dog-food — 2.x private-apps hosts AND the 3.0
-*     unified serving family, devtools#760)
-*
-* Any other host is silently blocked. This is a positive allowlist —
-* unlisted hosts never had debug surface regardless, but this function makes
-* it explicit and auditable in a single place.
-*
-* #760 note on the #665 boundary: the former env 4 LIVE host family
-* (`*.apps.tossmini.com`) now passes this coarse filter because the 3.0
-* loader serves dogfood candidates and production entries from the same
-* host family — the hostname alone can no longer separate them. The #665
-* invariant ("no naked attach on a production-family host") is preserved
-* one layer down: on tossmini hosts that are not `*.private-apps.*`, Layer
-* C3 makes the TOTP `at=` code MANDATORY, and production entry URLs carry
-* no debug/relay/at params at all.
-*
-* SECRET-HANDLING: the hostname value MUST NOT be logged or included in any
-* error reason string — only benign labels ('host not in allowlist') are safe.
-*/
-function isDebugAllowedHost(hostname) {
-	return isLocalhostHost(hostname) || isTrycloudflareHost(hostname) || isTossminiHost(hostname);
-}
-/**
-* Pure function that evaluates the runtime debug activation layers (B and C).
-*
-* Has no side effects. The input is explicit. Returns a discriminated union
-* so callers can pattern-match on `result.attach`.
-*
-* Layer A (build-time) is intentionally not evaluated here — see the file-level
-* comment. By the time this function runs, the consumer's `if (__DEBUG_BUILD__)`
-* guard has already passed; this function only decides B and C.
-*
-* @example
-* ```ts
-* const result = evaluateDebugGate({
-*   hostname: window.location.hostname,
-*   searchParams: new URLSearchParams(window.location.search),
-* });
-* if (result.attach) {
-*   // Proceed to load Chii client
-* }
-* ```
-*/
-function evaluateDebugGate(input) {
-	const isTunnel = isTrycloudflareHost(input.hostname);
-	const isLocal = isLocalhostHost(input.hostname);
-	if (!isDebugAllowedHost(input.hostname)) return {
-		attach: false,
-		reason: "host"
-	};
-	let deploymentId = "";
-	if (isPrivateAppsHost(input.hostname)) {
-		deploymentId = input.searchParams.get("_deploymentId") ?? "";
-		if (deploymentId === "") return {
-			attach: false,
-			reason: "entry"
-		};
-	} else if (!isTunnel && !isLocal) deploymentId = input.searchParams.get("_deploymentId") ?? "";
-	if (input.searchParams.get("debug") !== "1") return {
-		attach: false,
-		reason: "opt-in"
-	};
-	const relayRaw = input.searchParams.get("relay") ?? "";
-	if (relayRaw === "") return {
-		attach: false,
-		reason: "invalid-relay"
-	};
-	let relayUrl;
-	try {
-		relayUrl = new URL(relayRaw);
-	} catch {
-		return {
-			attach: false,
-			reason: "invalid-relay"
-		};
-	}
-	if (relayUrl.protocol !== "wss:") return {
-		attach: false,
-		reason: "invalid-relay"
-	};
-	const atCode = input.searchParams.get("at") ?? "";
-	if (input.verifyTotpCode !== void 0) {
-		if (!input.verifyTotpCode(atCode)) return {
-			attach: false,
-			reason: "auth"
-		};
-	} else if (isTossminiHost(input.hostname) && !isPrivateAppsHost(input.hostname) && atCode === "") return {
-		attach: false,
-		reason: "auth"
-	};
-	return {
-		attach: true,
-		relayUrl: relayUrl.href,
-		deploymentId
-	};
+function movedMessage(oldSubpath, newPackage, install) {
+	return [
+		`[@ait-co/devtools] '${oldSubpath}' 는 0.2.0에서 제거되었습니다.`,
+		`이 기능은 '${newPackage}' 로 이동했습니다.`,
+		`설치: ${install}`
+	].join(" ");
 }
 //#endregion
-//#region src/shared/relay-auth-close.ts
+//#region src/stubs/in-app.ts
 /**
-* Shared constants for the relay's named TOTP-auth rejection (issue #478).
+* TRANSITION STUB — REMOVE IN 1.0.0.
 *
-* Before #478 the relay rejected an unauthenticated WebSocket upgrade with a
-* raw `HTTP/1.1 401` + `socket.destroy()`. A handshake aborted that way is
-* indistinguishable from a network failure on the browser side — the
-* WebSocket only ever sees close code 1006, so the phone (env-2 launcher PWA)
-* could not tell "stale TOTP code" apart from "tunnel down" and stayed
-* silent. The fix is accept-then-close: complete the handshake, then close
-* with an application close code that NAMES the rejection.
+* `@ait-co/devtools/in-app` moved to `@ait-co/debug-console` (#818).
 *
-* Three parties share this contract:
-*   - `src/mcp/chii-relay.ts` (Node) sends the close frame / HTTP error body;
-*   - `src/in-app/attach.ts` (browser) observes relay-bound WebSockets and
-*     surfaces the code to the launcher shell;
-*   - `src/mcp/chii-connection.ts` (Node daemon client) recognises the code
-*     as an auth failure on its own `/client` dial (defensive — #439's fresh
-*     code mint means it should not normally hit this).
+* **This stub must never throw.** Unlike the `/mcp/*` and `/test-runner`
+* subpaths, the in-app attach surface is the one piece of the old debug
+* surface that legitimately ends up inside a shipped mini-app bundle. A
+* consumer who built and deployed against `@ait-co/devtools@0.1.x` has this
+* import (or an unplugin-injected equivalent) sitting in production code; if
+* upgrading the package turned that import into a throw, their app would die
+* on a real user's phone over a developer-tools concern. So every export here
+* is an inert no-op that says its piece through `console.error` once and
+* returns the shape the old API returned.
 *
-* This module is intentionally dependency-free (no Node, no DOM) so it is
-* safe to import from both the browser in-app bundle and the MCP daemon
-* bundle.
-*
-* SECRET-HANDLING: these are fixed enum values. The close reason / error body
-* must never grow to carry a secret, a TOTP code, or a host.
+* The surface below mirrors the pre-split `src/in-app/index.ts` exports so a
+* stale call site still type-checks and still runs; it simply does nothing.
 */
+const MESSAGE = movedMessage("@ait-co/devtools/in-app", DEBUG_CONSOLE_PACKAGE, `pnpm add ${DEBUG_CONSOLE_PACKAGE}`);
 /**
-* WebSocket close code sent by the relay when TOTP auth is rejected.
+* Emits the migration notice at most once per module instance.
 *
-* 4000–4999 is the application-reserved range (RFC 6455 §7.4.2); 4401 mirrors
-* HTTP 401 so it reads as "unauthorized" at a glance.
-*/
-const RELAY_AUTH_REJECT_CLOSE_CODE = 4401;
-/**
-* Close reason string accompanying {@link RELAY_AUTH_REJECT_CLOSE_CODE}, and
-* the `error` value of the relay's HTTP 401 JSON body. Enum string only —
-* never interpolated with request data.
-*/
-const RELAY_AUTH_REJECT_REASON = "totp-rejected";
-//#endregion
-//#region src/in-app/bridge-observer.ts
-/**
-* CustomEvent fired (no detail) on every start/settle so the indicator badge
-* re-renders promptly. SECRET-HANDLING: carries no detail payload at all — the
-* badge reads the enum-only `window.__ait_bridge` snapshot on receipt.
-*/
-const BRIDGE_CALL_EVENT = "ait:bridge-call";
-/**
-* Pending entries older than this are pruned on the next start — a safety net
-* for the fallback path where a settle signal might be missed, so the pending
-* list can never grow unbounded or show a forever-stuck row. Generous enough
-* that a genuinely slow native call (the exact signal we want to surface) still
-* shows while it is plausibly in flight.
-*/
-const MAX_PENDING_AGE_MS = 12e4;
-/** Guard so the observer wraps the bridge at most once per page lifecycle. */
-let bridgeObserverInstalled = false;
-/** Monotonic id source for the primary (3.0) path, where native gives us none. */
-let callIdCounter = 0;
-/** Undo hooks that {@link uninstallBridgeObserver} runs to restore originals. */
-let restoreHooks = [];
-/** Drops pending entries older than {@link MAX_PENDING_AGE_MS}. */
-function pruneStale(state, now) {
-	for (const id of Object.keys(state.pending)) {
-		const entry = state.pending[id];
-		if (entry !== void 0 && now - entry.startedAt > MAX_PENDING_AGE_MS) delete state.pending[id];
-	}
-}
-/** Fires the payload-less notify event so the badge re-renders. */
-function broadcast() {
-	if (typeof window === "undefined") return;
-	window.dispatchEvent(new CustomEvent(BRIDGE_CALL_EVENT));
-}
-/** Records a call start: add to pending, set last=pending, notify. */
-function startCall(state, id, method, now) {
-	pruneStale(state, now);
-	state.pending[id] = {
-		method,
-		startedAt: now
-	};
-	state.last = {
-		method,
-		at: now,
-		status: "pending"
-	};
-	broadcast();
-}
-/** Records a call settle: remove from pending, stamp last, notify. */
-function settleCall(state, id, status, now) {
-	const entry = state.pending[id];
-	delete state.pending[id];
-	state.last = {
-		method: entry?.method ?? state.last?.method ?? "unknown",
-		at: now,
-		status
-	};
-	broadcast();
-}
-/**
-* Parses an outbound `ReactNativeWebView.postMessage` JSON envelope and records
-* a START for async request/response calls only. Event subscriptions
-* (`addEventListener`/`removeEventListener`/`callEventMethod`), cleanup, and
-* constants are ignored — they are not the "spinner is a pending call" signal.
+* Once, not per call: `maybeAttach()` can sit on a hot path, and a stub whose
+* only job is to be harmless must not turn into a console flood.
 *
-* SECRET-HANDLING: reads `type`/`name`/`functionName`/`callbackId`/`eventId`
-* ONLY — never `params`/`args`.
+* SECRET-HANDLING: fixed text only — no URL, host, secret, or TOTP code.
 */
-function observeOutbound(state, message) {
-	if (typeof message !== "string") return;
-	let parsed;
-	try {
-		parsed = JSON.parse(message);
-	} catch {
-		return;
-	}
-	const now = Date.now();
-	if (parsed.type === "callAsyncMethod" && typeof parsed.name === "string" && typeof parsed.callbackId === "string") {
-		startCall(state, parsed.callbackId, parsed.name, now);
-		return;
-	}
-	if (parsed.type === "method" && typeof parsed.functionName === "string" && typeof parsed.eventId === "string") startCall(state, parsed.eventId, parsed.functionName, now);
+let warned = false;
+function warnOnce() {
+	if (warned) return;
+	warned = true;
+	console.error(MESSAGE);
 }
-/**
-* Parses a `__GRANITE_NATIVE_EMITTER.emit` event name and records a SETTLE for
-* 2.x async resolves/rejects (`<method>/resolve/<eventId>` |
-* `<method>/reject/<eventId>`). Event-bridge emits (`.../onEvent/...`) are
-* ignored. SECRET-HANDLING: reads the event NAME only — never the emitted args.
-*/
-function observeSettle(state, event) {
-	if (typeof event !== "string") return;
-	const match = /\/(resolve|reject)\/([^/]+)$/.exec(event);
-	if (match === null) return;
-	settleCall(state, match[2], match[1] === "resolve" ? "resolved" : "rejected", Date.now());
+/** No-op. The real attach lives in `@ait-co/debug-console`. */
+function maybeAttach() {
+	warnOnce();
 }
-/**
-* Installs the native-bridge call observer (#749). Idempotent per page
-* lifecycle. Called by {@link maybeAttach} after the gate passes (debug builds
-* only). Prefers the 3.0 single-dispatcher wrap; falls back to the universal
-* 2.x postMessage-start + emitter-settle pair. A context with no observable
-* bridge (env 2 mock) leaves `window.__ait_bridge` as an empty snapshot — the
-* badge then shows the heartbeat only, which is correct.
-*
-* Never throws into the host app — a wrapped hook that somehow fails is caught
-* and the original behavior is always preserved.
-*/
-function installBridgeObserver() {
-	if (bridgeObserverInstalled) return;
-	if (typeof window === "undefined") return;
-	bridgeObserverInstalled = true;
-	const state = {
-		pending: Object.create(null),
-		last: null
-	};
-	window.__ait_bridge = state;
-	const nativeBridge = window.__appsInTossNativeBridge;
-	if (nativeBridge !== void 0 && typeof nativeBridge.callAsyncMethod === "function") {
-		const original = nativeBridge.callAsyncMethod;
-		const wrapped = function(name, params) {
-			const id = `c${++callIdCounter}`;
-			startCall(state, id, String(name), Date.now());
-			let result;
-			try {
-				result = original.call(this, name, params);
-			} catch (err) {
-				settleCall(state, id, "rejected", Date.now());
-				throw err;
-			}
-			if (result !== null && typeof result.then === "function") result.then(() => settleCall(state, id, "resolved", Date.now()), () => settleCall(state, id, "rejected", Date.now()));
-			else settleCall(state, id, "resolved", Date.now());
-			return result;
-		};
-		nativeBridge.callAsyncMethod = wrapped;
-		restoreHooks.push(() => {
-			nativeBridge.callAsyncMethod = original;
-		});
-		return;
-	}
-	const webView = window.ReactNativeWebView;
-	if (webView !== void 0 && typeof webView.postMessage === "function") {
-		const originalPost = webView.postMessage;
-		webView.postMessage = function(message) {
-			try {
-				observeOutbound(state, message);
-			} catch {}
-			originalPost.call(this, message);
-		};
-		restoreHooks.push(() => {
-			webView.postMessage = originalPost;
-		});
-	}
-	const emitter = window.__GRANITE_NATIVE_EMITTER;
-	if (emitter !== void 0 && typeof emitter.emit === "function") {
-		const originalEmit = emitter.emit;
-		emitter.emit = function(event, args) {
-			try {
-				observeSettle(state, event);
-			} catch {}
-			originalEmit.call(this, event, args);
-		};
-		restoreHooks.push(() => {
-			emitter.emit = originalEmit;
-		});
-	}
+/** No-op — there is nothing attached to detach. */
+function detachDebugSurface() {
+	warnOnce();
 }
-/**
-* Restores every wrapped bridge hook and removes `window.__ait_bridge` (#749).
-* Idempotent; safe to call when nothing was installed. Wired into
-* {@link detachDebugSurface} (#748) so no bridge wrap survives a run's end.
-*/
-function uninstallBridgeObserver() {
-	if (!bridgeObserverInstalled) return;
-	bridgeObserverInstalled = false;
-	const hooks = restoreHooks;
-	restoreHooks = [];
-	for (const undo of hooks) try {
-		undo();
-	} catch {}
-	if (typeof window !== "undefined") window.__ait_bridge = void 0;
+/** No-op — the WebView type self-report moved with the attach surface. */
+function reportWebViewType() {
+	warnOnce();
 }
-//#endregion
-//#region src/in-app/eruda-overlay.ts
-/**
-* In-app eruda console overlay for the debug attach flow.
-*
-* Spec: docs/superpowers/specs/2026-05-18-in-app-debug-mcp.md
-*
-* This module mounts the eruda in-page console (https://github.com/liriliri/eruda)
-* on the phone screen when a debug session attaches. It is the mobile-only
-* counterpart to the Chii `target.js` injection in {@link attach.ts}: Chii is a
-* REMOTE CDP transport (phone → relay → PC DevTools frontend), whereas eruda is
-* a LOCAL in-page view — a floating button + console/network/DOM/storage panels
-* rendered directly on the phone, with no relay or second device. The two are
-* orthogonal and coexist (eruda opens no WebSocket, mounts into its own
-* `#eruda` shadow host — it cannot collide with the relay WS or the Chii DOM).
-*
-* Build-time absence (the security contract): this module lives in the
-* `@ait-co/devtools/in-app` graph. A consumer wraps its
-* `import('@ait-co/devtools/in-app')` call site in `if (__DEBUG_BUILD__) { … }`;
-* a release build folds that constant to `false` and dead-code-eliminates the
-* whole module — so eruda (and its dynamic `import('eruda')` chunk) is simply
-* absent from release bundles, exactly like the Chii target.js injection. The
-* `import('eruda')` here is a dynamic import precisely so the bundler emits it
-* as a separate chunk that the dead branch never pulls in.
-*
-* Runtime gate: `mountEruda()` is called only from `maybeAttach()` AFTER the
-* full Layer B/C gate has passed (`gateResult.attach === true`) — host
-* allowlist, `debug=1`, relay URL, and TOTP. So eruda inherits the same
-* four-layer defence as the Chii injection, byte-for-byte, with no eruda-
-* specific gate of its own.
-*
-* SECRET-HANDLING: this module reads no secret, TOTP code, relay URL, or host
-* value, and logs none. eruda observes only the page it is mounted on.
-*/
-/** Module-level guard against double mount across repeated `maybeAttach` calls. */
-let erudaMounted = false;
-/**
-* The loaded eruda module, captured on a successful {@link mountEruda} so
-* {@link unmountEruda} can call `.destroy()` on the same instance during
-* graceful detach (#748). `null` when eruda was never mounted.
-*/
-let erudaModule = null;
-/**
-* Mounts the eruda in-page console once.
-*
-* Idempotent: repeated calls after a successful mount are no-ops, mirroring the
-* `attached` guard in {@link attach.ts}. Fail-silent: if the dynamic import or
-* `eruda.init()` throws (eruda absent, or a runtime that rejects it), the Chii
-* debug session is unaffected — eruda is an additive convenience, not a
-* dependency of the relay path.
-*
-* `eruda.init()` mounts eruda's own floating entry button on the phone screen;
-* tapping it opens the console. We do not add a separate button.
-*/
+/** No-op — the eruda overlay moved with the attach surface. */
 async function mountEruda() {
-	if (erudaMounted || typeof document === "undefined") return;
-	erudaMounted = true;
-	try {
-		const eruda = (await import("eruda")).default;
-		eruda.init();
-		erudaModule = eruda;
-	} catch (err) {
-		erudaMounted = false;
-		console.debug("[@ait-co/devtools] eruda console mount skipped:", err);
-	}
+	warnOnce();
 }
-/**
-* Unmounts the eruda in-page console (#748 graceful detach).
-*
-* Calls `eruda.destroy()`, which removes eruda's floating entry button, any
-* open panel, and its `#eruda` shadow host — returning the phone screen to a
-* clean, non-debug state when a debug session ends. After a successful unmount
-* the guard is reset so a later {@link mountEruda} (a fresh attach) can
-* re-mount.
-*
-* Idempotent: a call when eruda was never mounted (or already unmounted) is a
-* no-op. Fail-silent: a `destroy()` throw is swallowed — teardown must never
-* throw into the host app.
-*/
+/** No-op counterpart to {@link mountEruda}. */
 function unmountEruda() {
-	if (!erudaMounted || erudaModule === null) return;
-	try {
-		erudaModule.destroy();
-	} catch (err) {
-		console.debug("[@ait-co/devtools] eruda console unmount skipped:", err);
-	} finally {
-		erudaMounted = false;
-		erudaModule = null;
-	}
-}
-//#endregion
-//#region src/in-app/attach.ts
-/**
-* In-app Chii target injection for the debug attach flow.
-*
-* Spec: docs/superpowers/specs/2026-05-18-in-app-debug-mcp.md
-* "MCP attach" topology section — Phase 1 browser-side implementation.
-*
-* This module bridges the 3-layer gate result to a Chii `target.js` script
-* injection. The Chii npm package is the relay SERVER — the in-app side is
-* a plain `<script src="…/target.js">` pointing at the relay host. No chii
-* npm dependency is needed here.
-*/
-/**
-* Converts a validated `wss:` relay URL into the Chii `target.js` script URL.
-*
-* Scheme is mapped `wss:` → `https:`. Host and port are preserved.
-* Pathname is set to `/target.js` (or `/at/<code>/target.js` when a TOTP code
-* is given) regardless of the relay path. Query params and hash from the
-* relay URL are dropped — the target script URL is a static asset path on the
-* same host.
-*
-* TOTP path-prefix transport (issue #466): chii's stock `target.js` derives
-* its WS endpoint from the script `src` (`scriptEl.src.replace('target.js',
-* '')`), so embedding the current TOTP code in the script URL *path* is the
-* only way the phone-side WS upgrade can carry it — both the script fetch and
-* the derived `wss://<host>/at/<code>/target/<id>` dial inherit the prefix,
-* and the relay verifies + strips it before chii parses the URL. The
-* `window.ChiiServerUrl` + query alternative does NOT work: chii appends
-* `target/<id>` to the serverUrl string, which would land after a `?`.
-*
-* SECRET-HANDLING: `atCode` rides only inside the returned URL (the intended
-* transport — same exposure grade as the daemon client's `at=` query). It is
-* never logged here.
-*
-* @example
-* deriveTargetScriptUrl('wss://abc.trycloudflare.com/relay')
-* // → 'https://abc.trycloudflare.com/target.js'
-*
-* deriveTargetScriptUrl('wss://h.example.com:9100/', '123456')
-* // → 'https://h.example.com:9100/at/123456/target.js'
-*
-* @param relayUrl - Validated `wss:` relay URL from the gate result.
-* @param atCode - Current TOTP code from the page URL's `at` query param, or
-*   `null`/`undefined`/`''` to keep the legacy un-prefixed URL.
-*/
-function deriveTargetScriptUrl(relayUrl, atCode) {
-	const u = new URL(relayUrl);
-	u.protocol = "https:";
-	u.pathname = atCode !== void 0 && atCode !== null && atCode !== "" ? `/at/${encodeURIComponent(atCode)}/target.js` : "/target.js";
-	u.search = "";
-	u.hash = "";
-	return u.toString();
+	warnOnce();
 }
-/** Module-level guard against double-injection within a page lifecycle. */
-let attached = false;
-/** One-shot guard for the parent notification (both observer + onerror probe). */
-let authExpiredNotified = false;
-/** Set once a relay-bound socket closed with 4401 — flips dials to fail-fast. */
-let relayAuthExpired = false;
-/** Guard against stacking multiple observer wrappers on window.WebSocket. */
-let wsObserverInstalled = false;
-/**
-* Broadcasts relay-socket lifecycle to any in-page listener (#730) — the
-* on-phone debug indicator subscribes to this instead of wrapping
-* `window.WebSocket` a second time.
-*
-* SECRET-HANDLING: the CustomEvent `detail` carries ONLY the enum
-* `'open' | 'close'` — never a close code, host, relay URL, or TOTP value.
-*/
-function broadcastRelayWsState(state) {
-	if (typeof window === "undefined") return;
-	window.dispatchEvent(new CustomEvent("ait:relay-ws-state", { detail: { state } }));
-}
-/**
-* Posts the `auth-expired` block signal to the parent launcher shell, once.
-*
-* Mirrors the existing `reason: 'auth'` postMessage in {@link maybeAttach}.
-* SECRET-HANDLING: the payload carries ONLY the reason enum — never the code,
-* secret, host, or relay URL.
-*/
-function notifyAuthExpired() {
-	if (authExpiredNotified) return;
-	if (typeof window === "undefined" || window.parent === window) return;
-	authExpiredNotified = true;
-	window.parent.postMessage({
-		type: "ait:debug-attach-blocked",
-		reason: "auth-expired"
-	}, "*");
-}
-/**
-* Normalises a URL into a comparable origin key, mapping the HTTP scheme pair
-* onto the WS pair (`https:`→`wss:`, `http:`→`ws:`) so the `wss:` relay URL
-* from the gate result matches the dials target.js derives from its
-* `https://…/target.js` script src. Returns `null` for unparsable URLs.
-*/
-function wsOriginKey(rawUrl) {
-	let parsed;
-	try {
-		parsed = new URL(rawUrl);
-	} catch {
-		return null;
-	}
-	return `${parsed.protocol === "https:" ? "wss:" : parsed.protocol === "http:" ? "ws:" : parsed.protocol}//${parsed.host}`;
-}
-/**
-* Builds a dummy WebSocket that never connects and closes immediately
-* (asynchronously, with the 4401 code) — returned for relay-bound dials after
-* auth expiry so chii's internal reconnect loop stops producing real network
-* traffic. We cannot stop the loop itself (it lives inside stock target.js);
-* we can only make each iteration free.
-*
-* Both `onclose`-style property handlers and `addEventListener` listeners are
-* fired — stock target.js uses property handlers, but we cannot know every
-* consumer. (A consumer wiring BOTH would see a double callback; acceptable
-* for a retry scheduler and irrelevant for chii.)
-*/
-function createFailFastSocket(url) {
-	const eventTarget = new EventTarget();
-	const sock = {
-		url,
-		readyState: 3,
-		bufferedAmount: 0,
-		extensions: "",
-		protocol: "",
-		binaryType: "blob",
-		onopen: null,
-		onmessage: null,
-		onerror: null,
-		onclose: null,
-		close() {},
-		send() {},
-		addEventListener: eventTarget.addEventListener.bind(eventTarget),
-		removeEventListener: eventTarget.removeEventListener.bind(eventTarget),
-		dispatchEvent: eventTarget.dispatchEvent.bind(eventTarget),
-		CONNECTING: 0,
-		OPEN: 1,
-		CLOSING: 2,
-		CLOSED: 3
-	};
-	setTimeout(() => {
-		const errorEvent = new Event("error");
-		sock.onerror?.(errorEvent);
-		eventTarget.dispatchEvent(errorEvent);
-		let closeEvent;
-		try {
-			closeEvent = new CloseEvent("close", {
-				code: RELAY_AUTH_REJECT_CLOSE_CODE,
-				reason: RELAY_AUTH_REJECT_REASON,
-				wasClean: false
-			});
-		} catch {
-			closeEvent = Object.assign(new Event("close"), {
-				code: RELAY_AUTH_REJECT_CLOSE_CODE,
-				reason: RELAY_AUTH_REJECT_REASON,
-				wasClean: false
-			});
-		}
-		sock.onclose?.(closeEvent);
-		eventTarget.dispatchEvent(closeEvent);
-	}, 0);
-	return sock;
-}
-/** Grace window before a non-terminal relay close tears the surface down. */
-const RECONNECT_GRACE_MS = 5e3;
-/** One-shot guard so the teardown runs at most once per page lifecycle. */
-let debugSurfaceDetached = false;
-/** Pending grace-window timer for a non-terminal close, or `null`. */
-let pendingDetachTimer = null;
-/** Cancels a scheduled teardown — called when a relay socket re-opens. */
-function cancelScheduledDetach() {
-	if (pendingDetachTimer !== null) {
-		clearTimeout(pendingDetachTimer);
-		pendingDetachTimer = null;
-	}
-}
-/**
-* Schedules {@link detachDebugSurface} after {@link RECONNECT_GRACE_MS} unless
-* a reconnect cancels it first. No-op if teardown already ran or is already
-* scheduled. Defensive: if `setTimeout` is somehow unavailable, tears down
-* immediately rather than never.
-*/
-function scheduleDetach() {
-	if (debugSurfaceDetached || pendingDetachTimer !== null) return;
-	if (typeof setTimeout === "undefined") {
-		detachDebugSurface();
-		return;
-	}
-	pendingDetachTimer = setTimeout(() => {
-		pendingDetachTimer = null;
-		detachDebugSurface();
-	}, RECONNECT_GRACE_MS);
-}
-/**
-* Idempotent, non-throwing teardown of the in-app debug surface (issue #748).
-*
-* Removes every debug-surface element WE injected and restores the one side
-* effect WE applied:
-*   1. The CDP-injected `#__ait_debug_indicator` badge (the persistent
-*      "Debugger Disconnected" element). Its live heartbeat/pending-call timer
-*      (#749) is stopped first via the badge controller's `stop()` so no 1 Hz
-*      interval leaks past detach; `buildIndicatorExpression` also
-*      self-dismisses the node — this is the in-app hard guarantee, idempotent,
-*      a no-op if it is already gone.
-*   2. The eruda in-page console (floating button + any open panel).
-*   3. The native-bridge call observer (#749) — its `callAsyncMethod` /
-*      `postMessage` / emitter wraps are restored and `window.__ait_bridge` is
-*      removed, so nothing we wrapped survives the run's end.
-*   4. keepAwake — forced on at attach; restored here so a run that ends
-*      WITHOUT a page unload does not leave the screen pinned awake (the
-*      existing `beforeunload` restore only covers the unload path).
-*
-* Deliberately NOT touched: the `window.WebSocket` observer proxy (kept so the
-* #478 post-4401 fail-fast survives; it is non-blocking and never absorbs
-* input), and any NATIVE overlay (out of our layer — see the block comment
-* above and issue #748 hypothesis (a)).
-*
-* Never throws into the host app — every step is individually guarded.
-* Exported for unit tests and for a consumer that wants to force a clean detach.
-*/
-function detachDebugSurface() {
-	if (debugSurfaceDetached) return;
-	debugSurfaceDetached = true;
-	cancelScheduledDetach();
-	try {
-		if (typeof window !== "undefined") window.__ait_indicator?.stop?.();
-		if (typeof document !== "undefined") document.getElementById("__ait_debug_indicator")?.remove();
-	} catch {}
-	try {
-		unmountEruda();
-	} catch {}
-	try {
-		uninstallBridgeObserver();
-	} catch {}
-	try {
-		setScreenAwakeMode({ enabled: false }).catch(() => {});
-	} catch {}
-}
-/**
-* Wraps `window.WebSocket` with a relay-origin-scoped observer (issue #478).
-*
-* - Connections whose URL origin does NOT match the relay origin pass through
-*   to the native constructor untouched — app traffic is never observed.
-* - Relay-origin connections get a `close` listener: code 4401 (the relay's
-*   named TOTP rejection) flips the module into the expired state and posts
-*   `reason: 'auth-expired'` to the parent launcher shell (once).
-* - After 4401, further relay-origin dials return a fail-fast dummy socket so
-*   target.js's autonomous reconnect loop stops hitting the network.
-*
-* Installed by {@link maybeAttach} BEFORE target.js is injected so the very
-* first dial is already observed. Idempotent per page lifecycle. Exported for
-* unit tests.
-*/
-function installRelayWsObserver(relayUrl) {
-	if (wsObserverInstalled) return;
-	if (typeof window === "undefined" || typeof window.WebSocket !== "function") return;
-	const relayKey = wsOriginKey(relayUrl);
-	if (relayKey === null) return;
-	wsObserverInstalled = true;
-	window.__ait_relay_ws_observed = true;
-	window.addEventListener("pagehide", () => detachDebugSurface(), { once: true });
-	const NativeWebSocket = window.WebSocket;
-	const observed = new Proxy(NativeWebSocket, { construct(target, args) {
-		const url = String(args[0]);
-		if (wsOriginKey(url) !== relayKey) return Reflect.construct(target, args);
-		if (relayAuthExpired) return createFailFastSocket(url);
-		const ws = Reflect.construct(target, args);
-		ws.addEventListener("open", () => {
-			broadcastRelayWsState("open");
-			cancelScheduledDetach();
-		});
-		ws.addEventListener("close", (event) => {
-			broadcastRelayWsState("close");
-			if (event.code === 4401) {
-				relayAuthExpired = true;
-				notifyAuthExpired();
-				detachDebugSurface();
-			} else scheduleDetach();
-		});
-		ws.addEventListener("error", () => {
-			scheduleDetach();
-		});
-		return ws;
-	} });
-	window.WebSocket = observed;
-}
-/**
-* The webViewType self-report postMessage type (#580).
-*
-* Canonical definition + the receive-side parser live in
-* `src/mock/safe-area-bridge.ts` (`WEB_VIEW_TYPE_MESSAGE_TYPE`,
-* `parseWebViewTypeMessage`). It is re-declared here as a local literal so the
-* in-app entry does NOT import the mock barrel (which would drag mock internals
-* — navigation/state — into the dogfood in-app graph). The two literals are
-* kept in sync by value; if one changes, change both. Same decoupling pattern
-* the launcher fixture uses for its message-type constants.
-*/
-const WEB_VIEW_TYPE_MESSAGE_TYPE = "ait:web-view-type";
-/** Guard so the webViewType self-report is posted at most once per page. */
-let webViewTypeReported = false;
-/**
-* Self-report the mini-app's webViewType to the parent launcher shell, ONCE
-* (#580).
-*
-* The mini-app's type is the build constant `__WEB_VIEW_TYPE__`, injected by
-* the devtools unplugin from `granite.config.ts`'s `webViewProps.type`. The
-* launcher (env-2 PWA) is cross-origin and cannot read it directly, so the
-* framed page posts it to `window.parent`; the launcher switches to game mode
-* automatically (no manual `?navBarType=game` URL edit).
-*
-* Defensive by construction — must NEVER break attach:
-*  - `__WEB_VIEW_TYPE__` is a CONSUMER-build define; it does not exist in
-*    devtools' own build or where the unplugin did not inject it. The `typeof`
-*    guard avoids a ReferenceError; an absent constant is a silent no-op.
-*  - Only posts when inside an iframe (`window.parent !== window`) — a
-*    top-level load has no launcher shell to receive the message.
-*  - The SDK's deprecated `'external'` alias of `partner` (web-framework 2.6.1)
-*    is mapped to `'partner'`; the launcher only emulates `partner` | `game`.
-*  - Wrapped in try/catch so any postMessage/iframe edge case is swallowed.
-*
-* SECRET-HANDLING: the payload carries ONLY the webViewType enum — no host,
-* relay URL, code, or secret.
-*/
-function reportWebViewType() {
-	if (webViewTypeReported) return;
-	try {
-		if (typeof window === "undefined" || window.parent === window) return;
-		const raw = typeof __WEB_VIEW_TYPE__ !== "undefined" ? __WEB_VIEW_TYPE__ : void 0;
-		if (raw === void 0) return;
-		const value = raw === "game" ? "game" : raw === "partner" || raw === "external" ? "partner" : null;
-		if (value === null) return;
-		webViewTypeReported = true;
-		window.parent.postMessage({
-			type: WEB_VIEW_TYPE_MESSAGE_TYPE,
-			value
-		}, "*");
-	} catch {}
+/** No-op — the bridge observer moved with the attach surface. */
+function installBridgeObserver() {
+	warnOnce();
 }
-/**
-* Evaluates the 3-layer debug gate and, if the gate passes, injects the Chii
-* `target.js` script into `document.head`.
-*
-* Idempotent — calling more than once is safe. The second call is a no-op if
-* a script with the same `src` is already present in the document, and the
-* module-level `attached` flag prevents redundant DOM queries after the first
-* successful injection.
-*
-* Safe to call even if `document` is somehow unavailable (defensive boundary
-* guard — in practice this always runs in a real WebView).
-*
-* **keepAwake side effect**: on a successful attach, `setScreenAwakeMode({
-* enabled: true })` is called so the phone screen stays awake during the debug
-* session. A `beforeunload` handler restores normal sleep on page unload.
-* Opt out by adding `noKeepAwake=1` to the page URL query string — the check
-* reads `window.location.search` directly, consistent with other guards in
-* this file.
-*
-* @param gateResult - Optional pre-evaluated gate result for testability.
-*   Defaults to `checkDebugGate()` which reads the current page URL. Passing a
-*   custom value avoids the need to manipulate `window.location` in tests.
-*/
-function maybeAttach(gateResult = checkDebugGate()) {
-	reportWebViewType();
-	if (!gateResult.attach) {
-		console.debug(`[@ait-co/devtools] debug attach skipped — gate blocked (reason: ${gateResult.reason})`);
-		if (gateResult.reason === "auth" && typeof window !== "undefined" && window.parent !== window) window.parent.postMessage({
-			type: "ait:debug-attach-blocked",
-			reason: "auth"
-		}, "*");
-		return;
-	}
-	if (attached) return;
-	if (typeof document === "undefined") return;
-	const atCode = typeof window !== "undefined" ? new URLSearchParams(window.location.search).get("at") : null;
-	const src = deriveTargetScriptUrl(gateResult.relayUrl, atCode);
-	installRelayWsObserver(gateResult.relayUrl);
-	installBridgeObserver();
-	if (document.querySelector(`script[src="${src}"]`) !== null) {
-		attached = true;
-		return;
-	}
-	const script = document.createElement("script");
-	script.src = src;
-	script.async = true;
-	script.onerror = () => {
-		fetch(src).then((res) => {
-			if (res.status === 401) notifyAuthExpired();
-		}).catch(() => {});
-	};
-	(document.head ?? document.documentElement).appendChild(script);
-	attached = true;
-	mountEruda();
-	if (typeof window !== "undefined" && new URLSearchParams(window.location.search).get("noKeepAwake") === "1") return;
-	setScreenAwakeMode({ enabled: true }).then(() => {
-		window.addEventListener("beforeunload", () => {
-			setScreenAwakeMode({ enabled: false }).catch(() => {});
-		}, { once: true });
-	}).catch((err) => {
-		console.debug("[@ait-co/devtools] setScreenAwakeMode failed:", err);
-	});
+/** No-op counterpart to {@link installBridgeObserver}. */
+function uninstallBridgeObserver() {
+	warnOnce();
 }
-//#endregion
-//#region src/in-app/index.ts
-/**
-* @ait-co/devtools/in-app entry point.
-*
-* Spec: docs/superpowers/specs/2026-05-18-in-app-debug-mcp.md
-*
-* Phase 1 — gate + browser-side Chii target injection.
-* WebSocket relay, QR/paste UI, and AI-host MCP bin are later phases that
-* require real-device validation and are not included here.
-*
-* This thin entry reads `window.location` and calls the pure
-* {@link evaluateDebugGate} function. All testable logic lives in `./gate.ts`
-* and `./attach.ts`, not here.
-*
-* Layer A of the activation gate (build-time) is NOT enforced in this module.
-* It is the consumer's responsibility: the consumer wraps its
-* `import('@ait-co/devtools/in-app')` call site in `if (__DEBUG_BUILD__) { … }`
-* (see sdk-example `src/main.tsx`), where `__DEBUG_BUILD__` is a
-* consumer-build-time constant. A release consumer build folds that constant
-* to `false` and dead-code-eliminates this whole module. This package is
-* pre-built and ships with `__DEBUG_BUILD__` already resolved at devtools'
-* publish time, so it could never re-evaluate the consumer's build channel —
-* which is exactly why Layer A lives at the consumer guard, not here.
-*/
-/**
-* Evaluates the runtime debug activation layers (B and C) against the current
-* page URL.
-*
-* Returns the gate result. Callers can check `result.attach` to decide whether
-* to proceed with debug surface attachment.
-*
-* This function reads `window.location` only — both the hostname (Layer B1
-* host allowlist) and the search params (Layers B2 and C). Layer A
-* (build-time) is enforced by the consumer's `if (__DEBUG_BUILD__)` guard
-* around the import site, not here — see the file-level comment. Consumers
-* call this with no arguments, so the Layer B1 host check is picked up with
-* no change at the call site.
-*/
+/** Always reports a closed gate — nothing can attach from this package. */
 function checkDebugGate() {
-	return evaluateDebugGate({
-		hostname: window.location.hostname,
-		searchParams: new URLSearchParams(window.location.search)
-	});
+	warnOnce();
+	return {
+		attach: false,
+		reason: "moved-to-debug-console"
+	};
 }
 //#endregion
-export { BRIDGE_CALL_EVENT, checkDebugGate, deriveTargetScriptUrl, detachDebugSurface, evaluateDebugGate, installBridgeObserver, isPrivateAppsHost, isTossminiHost, isTrycloudflareHost, maybeAttach, mountEruda, reportWebViewType, uninstallBridgeObserver, unmountEruda };
+export { checkDebugGate, detachDebugSurface, installBridgeObserver, maybeAttach, mountEruda, reportWebViewType, uninstallBridgeObserver, unmountEruda };
 
 //# sourceMappingURL=index.js.map