@ait-co/devtools 0.1.73 → 0.1.75

package/dist/mcp/cli.js

@@ -1169,9 +1169,8 @@ function buildDeepLinkAttachUrl(schemeUrl, wssUrl, totpCode) {
 * Chii serves its own DevTools frontend at
 * `<relayHttpBaseUrl>/front_end/chii_app.html`. The `ws=` (plain HTTP relay)
 * or `wss=` (HTTPS relay) query parameter is a URL-encoded string of the form
-* `<relay-host>/client/<uuid>?target=<id>` (and optionally `&at=<totp>`) —
-* the same format used by Chii's own target list page (derived from
-* `chii/public/index.js`).
+* `<relay-host>/client/<uuid>?target=<id>&at=<totp>` — the same format used
+* by Chii's own target list page (derived from `chii/public/index.js`).
 *
 * The `at=` TOTP code is minted at call time via `mintTotp()`.  It is valid
 * for ~3 minutes (relay gate accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps =
@@ -1179,6 +1178,15 @@ function buildDeepLinkAttachUrl(schemeUrl, wssUrl, totpCode) {
 * If the window expires before the browser connects, the relay will reject the
 * WebSocket upgrade with close code 4401.
 *
+* FAIL-CLOSED (issue #509): `mintTotp` is REQUIRED.  When omitted (i.e.
+* `undefined`), this function returns `null` — the caller must treat `null` as
+* "inspector not yet available" and show a waiting hint instead of a broken
+* link. Relay sessions gate every WS upgrade with TOTP (#452), so a URL built
+* without `at=` would be rejected with WS 4401 immediately — there is no
+* non-TOTP relay path in production. Returning `null` surfaces this cleanly as
+* a "TOTP not yet configured" state rather than silently producing a URL that
+* will always fail at the WS handshake.
+*
 * SECRET-HANDLING: `mintTotp` returns a code, not a secret. The code is
 * embedded in the `wss=` parameter (inside the `at=` param) of the returned
 * URL. Callers MUST NOT log the returned URL to stdout (stderr is OK — it is
@@ -1187,11 +1195,14 @@ function buildDeepLinkAttachUrl(schemeUrl, wssUrl, totpCode) {
 * @param relayHttpBaseUrl - Local HTTP base URL of the Chii relay, e.g.
 *   `http://127.0.0.1:9100`. No trailing slash.
 * @param targetId - Chii target id (from `GET <relay>/targets`).
-* @param mintTotp - Optional function that returns a fresh 6-digit TOTP code
-*   string. Called at most once. When omitted (TOTP disabled) no `at=` param
-*   is added.
+* @param mintTotp - Function that returns a fresh 6-digit TOTP code string.
+*   Called at most once. **Required** — when `undefined`, the function returns
+*   `null` (fail-closed: no `at=` param means the relay WS gate rejects the
+*   handshake, so a null result is safer than a URL that always 404s).
 * @param panel - Initial panel. Defaults to `"console"`.
 *
+* @returns The inspector URL string, or `null` when `mintTotp` is absent.
+*
 * @example
 * buildChiiInspectorUrl(
 *   'http://127.0.0.1:9100',
@@ -1201,6 +1212,7 @@ function buildDeepLinkAttachUrl(schemeUrl, wssUrl, totpCode) {
 * // → 'http://127.0.0.1:9100/front_end/chii_app.html?ws=127.0.0.1%3A9100%2Fclient%2F<uuid>%3Ftarget%3Dabc123%26at%3D<code>'
 */
 function buildChiiInspectorUrl(relayHttpBaseUrl, targetId, mintTotp, panel = "console") {
+	if (!mintTotp) return null;
 	let relayHost;
 	let wsParamName;
 	try {
@@ -1212,11 +1224,8 @@ function buildChiiInspectorUrl(relayHttpBaseUrl, targetId, mintTotp, panel = "co
 		wsParamName = /^https:/i.test(relayHttpBaseUrl) ? "wss" : "ws";
 	}
 	const clientId = `devtools-opener-${Date.now().toString(36)}`;
-	let wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}`;
-	if (mintTotp) {
-		const code = mintTotp();
-		wsPath += `&at=${encodeURIComponent(code)}`;
-	}
+	const code = mintTotp();
+	const wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}&at=${encodeURIComponent(code)}`;
 	const params = new URLSearchParams({
 		[wsParamName]: wsPath,
 		panel
@@ -1325,6 +1334,10 @@ var AutoDevtoolsOpener = class {
 		if (!options.targetId) return;
 		this._opened = true;
 		const inspectorUrl = buildChiiInspectorUrl(options.relayHttpBaseUrl, options.targetId, options.mintTotp);
+		if (inspectorUrl === null) {
+			process.stderr.write("[ait-debug] 기기가 연결됐습니다 — TOTP secret 미설정으로 인스펙터 URL을 생성할 수 없습니다.\n[ait-debug] relay 세션은 AIT_DEBUG_TOTP_SECRET 설정이 필요합니다.\n");
+			return;
+		}
 		process.stderr.write(`[ait-debug] 기기가 연결됐습니다 — Chii DevTools를 자동으로 엽니다.
 [ait-debug] DevTools URL: ${inspectorUrl}\n[ait-debug] (AIT_AUTO_DEVTOOLS=0 으로 자동 열기를 끌 수 있습니다)
 [ait-debug] 주의: URL의 at= 코드는 ~3분 안에서만 유효합니다.
@@ -2096,6 +2109,9 @@ const en = {
 	"dashboard.pages.empty": "No attached pages",
 	"dashboard.url.copy": "Copy",
 	"dashboard.url.copied": "Copied",
+	"dashboard.inspector.section": "Inspector",
+	"dashboard.inspector.open": "Open inspector",
+	"dashboard.inspector.waiting": "Inspector URL pending — appears after a page attaches",
 	"attach.title": "AIT Debug Session — QR Scan",
 	"attach.deployment": "deployment: {label}",
 	"attach.steps.section": "How to scan",
@@ -2139,6 +2155,7 @@ const en = {
 	"launcher.diagNo": "no",
 	"launcher.letterboxDetected": "Display area is {pt}pt short — likely an iOS standalone letterbox. Removing and re-adding the launcher to the home screen may fix it.",
 	"launcher.navbar.defaultTitle": "Mini App",
+	"launcher.navbar.back": "Back",
 	"launcher.navbar.menu": "Menu",
 	"launcher.navbar.close": "Close",
 	"launcher.navbar.menuRescan": "Rescan",
@@ -2344,6 +2361,9 @@ const tables = {
 		"dashboard.pages.empty": "attach된 페이지 없음",
 		"dashboard.url.copy": "복사",
 		"dashboard.url.copied": "복사됨",
+		"dashboard.inspector.section": "인스펙터",
+		"dashboard.inspector.open": "인스펙터 열기",
+		"dashboard.inspector.waiting": "인스펙터 URL 대기 중 (페이지 attach 후 표시됩니다)",
 		"attach.title": "AIT 디버그 세션 — QR 스캔",
 		"attach.deployment": "deployment: {label}",
 		"attach.steps.section": "스캔 절차",
@@ -2387,6 +2407,7 @@ const tables = {
 		"launcher.diagNo": "아니요",
 		"launcher.letterboxDetected": "표시 영역이 {pt}pt 부족합니다 — iOS standalone letterbox로 보입니다. 런처를 홈 화면에서 제거 후 다시 설치하면 해소될 수 있어요.",
 		"launcher.navbar.defaultTitle": "미니앱",
+		"launcher.navbar.back": "뒤로가기",
 		"launcher.navbar.menu": "메뉴",
 		"launcher.navbar.close": "닫기",
 		"launcher.navbar.menuRescan": "다시 스캔",
@@ -2479,6 +2500,14 @@ img.qr {
 }
 .copy-btn:hover { background: #30363d; }
 .hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+.inspector-link {
+  display: inline-block; margin-top: 0.5rem;
+  padding: 0.45rem 1rem; border-radius: 6px;
+  background: #1f6feb; color: #fff; font-size: 0.85rem; font-weight: 600;
+  text-decoration: none; text-align: center;
+}
+.inspector-link:hover { background: #388bfd; }
+.inspector-hint { display: inline-block; margin-top: 0.5rem; font-size: 0.8rem; opacity: 0.45; }
 ul { margin: 0; padding-left: 1.25rem; }
 li { margin-bottom: 0.35rem; font-size: 0.85rem; line-height: 1.5; }
 li.empty { opacity: 0.4; list-style: none; padding-left: 0; }
@@ -2488,7 +2517,7 @@ hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0; }
 .lang-switcher { display: flex; gap: 0.5rem; font-size: 0.75rem; }
 .lang-switcher a { color: #58a6ff; text-decoration: none; opacity: 0.6; }
 .lang-switcher a.active { font-weight: 700; text-decoration: underline; opacity: 1; }
-</style></head><body><h1>AIT 디버그 Dashboard</h1>__LANG_SWITCHER__<p class="updated" id="updated">마지막 갱신: __NOW__</p><section><h2>터널 상태</h2><span class="status __TUNNEL_CLASS__" id="tunnel-status">__TUNNEL_STATUS__</span></section><hr/><section><h2>Attach QR</h2><div id="attach-section">__ATTACH_SECTION__</div></section>__PAGES_SECTION__</body></html>`;
+</style></head><body><h1>AIT 디버그 Dashboard</h1>__LANG_SWITCHER__<p class="updated" id="updated">마지막 갱신: __NOW__</p><section><h2>터널 상태</h2><span class="status __TUNNEL_CLASS__" id="tunnel-status">__TUNNEL_STATUS__</span></section><hr/><section><h2>Attach QR</h2><div id="attach-section">__ATTACH_SECTION__</div></section><hr/><section id="inspector-section"><h2>인스펙터</h2>__INSPECTOR_SECTION__</section>__PAGES_SECTION__</body></html>`;
 const attachChromeHtmlKoSandbox = `<!DOCTYPE html>
 <html lang="ko"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="__QR_DATA_URL__"/><title>AIT 디버그 세션 — QR 스캔</title><style>
 *, *::before, *::after { box-sizing: border-box; }
@@ -2631,6 +2660,14 @@ img.qr {
 }
 .copy-btn:hover { background: #30363d; }
 .hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+.inspector-link {
+  display: inline-block; margin-top: 0.5rem;
+  padding: 0.45rem 1rem; border-radius: 6px;
+  background: #1f6feb; color: #fff; font-size: 0.85rem; font-weight: 600;
+  text-decoration: none; text-align: center;
+}
+.inspector-link:hover { background: #388bfd; }
+.inspector-hint { display: inline-block; margin-top: 0.5rem; font-size: 0.8rem; opacity: 0.45; }
 ul { margin: 0; padding-left: 1.25rem; }
 li { margin-bottom: 0.35rem; font-size: 0.85rem; line-height: 1.5; }
 li.empty { opacity: 0.4; list-style: none; padding-left: 0; }
@@ -2640,7 +2677,7 @@ hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0; }
 .lang-switcher { display: flex; gap: 0.5rem; font-size: 0.75rem; }
 .lang-switcher a { color: #58a6ff; text-decoration: none; opacity: 0.6; }
 .lang-switcher a.active { font-weight: 700; text-decoration: underline; opacity: 1; }
-</style></head><body><h1>AIT Debug Dashboard</h1>__LANG_SWITCHER__<p class="updated" id="updated">Last updated: __NOW__</p><section><h2>Tunnel status</h2><span class="status __TUNNEL_CLASS__" id="tunnel-status">__TUNNEL_STATUS__</span></section><hr/><section><h2>Attach QR</h2><div id="attach-section">__ATTACH_SECTION__</div></section>__PAGES_SECTION__</body></html>`;
+</style></head><body><h1>AIT Debug Dashboard</h1>__LANG_SWITCHER__<p class="updated" id="updated">Last updated: __NOW__</p><section><h2>Tunnel status</h2><span class="status __TUNNEL_CLASS__" id="tunnel-status">__TUNNEL_STATUS__</span></section><hr/><section><h2>Attach QR</h2><div id="attach-section">__ATTACH_SECTION__</div></section><hr/><section id="inspector-section"><h2>Inspector</h2>__INSPECTOR_SECTION__</section>__PAGES_SECTION__</body></html>`;
 const attachChromeHtmlEnSandbox = `<!DOCTYPE html>
 <html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="__QR_DATA_URL__"/><title>AIT Debug Session — QR Scan</title><style>
 *, *::before, *::after { box-sizing: border-box; }
@@ -2817,13 +2854,15 @@ function buildLangSwitcher(path, existingParams, locale, s) {
 *
 * 동적 파트 분류:
 *   - "token-fill": 단일 값 교체 (__NOW__, __TUNNEL_CLASS__, __TUNNEL_STATUS__,
-*     __ATTACH_SECTION__)
+*     __ATTACH_SECTION__, __INSPECTOR_SECTION__)
 *   - "runtime builder": 가변 길이 구조 (__PAGES_SECTION__ — 조건부 렌더 + 가변 rows)
 *   - "suffix": inline SSE <script> (빌드 파이프라인 없는 클라이언트 스크립트, locale
 *     aware 문자열 포함)
 *
 * SECRET-HANDLING:
 *   - attachUrl은 url-box 안에서만 노출 (TOTP at= 코드 캡슐 그대로).
+*   - inspectorUrl은 anchor href 안에서만 노출 (TOTP at= 코드 캡슐 그대로).
+*     relay host + TOTP 코드가 담길 수 있으나 대시보드 HTML은 의도된 transport.
 *   - tunnel wssUrl은 "터널 연결됨" 상태 표시에서 UP/DOWN만 노출.
 *     wssUrl 값 자체는 dashboard HTML에 넣지 않는다.
 */
@@ -2838,6 +2877,9 @@ function buildDashboardHtml(state, qrDataUrl, locale, path = "/", params = new U
 		const copyLabel = escapeHtml(s("dashboard.url.copy"));
 		attachSection = `<img class="qr" src="${qrDataUrl}" alt="attach QR" /><div class="url-row"><p class="url-box" id="url-box">${safeAttachUrl}</p><button class="copy-btn" id="copy-btn" type="button" aria-label="${copyLabel}">${copyLabel}</button></div>`;
 	} else attachSection = `<p class="hint">${escapeHtml(s("dashboard.attach.hint"))}</p>`;
+	let inspectorSection;
+	if (state.inspectorUrl) inspectorSection = `<a class="inspector-link" id="inspector-link" href="${escapeHtml(state.inspectorUrl)}" target="_blank" rel="noopener noreferrer">${escapeHtml(s("dashboard.inspector.open"))}</a>`;
+	else inspectorSection = `<span class="inspector-hint" id="inspector-link">${escapeHtml(s("dashboard.inspector.waiting"))}</span>`;
 	const pagesSection = state.pages === null ? "" : `<hr /><section id="pages-section"><h2>${escapeHtml(s("dashboard.pages.section"))}</h2><ul id="pages-list">${state.pages.length > 0 ? state.pages.map((p) => {
 		return `<li><span class="page-id">${escapeHtml(p.id)}</span> <span class="page-url">${escapeHtml(p.url.slice(0, 120))}</span></li>`;
 	}).join("\n") : `<li class="empty">${escapeHtml(s("dashboard.pages.empty"))}</li>`}</ul></section>`;
@@ -2848,10 +2890,12 @@ function buildDashboardHtml(state, qrDataUrl, locale, path = "/", params = new U
 		attachHint: JSON.stringify(s("dashboard.attach.hint")),
 		copyLabel: JSON.stringify(s("dashboard.url.copy")),
 		copiedLabel: JSON.stringify(s("dashboard.url.copied")),
+		inspectorOpenLabel: JSON.stringify(s("dashboard.inspector.open")),
+		inspectorWaitingLabel: JSON.stringify(s("dashboard.inspector.waiting")),
 		dashboardSurface: true
 	};
 	const langSwitcher = buildLangSwitcher(path, params, locale, s);
-	const filled = dashboardChromeByLocale[locale].replaceAll("__LANG_SWITCHER__", langSwitcher).replaceAll("__NOW__", escapeHtml(now)).replaceAll("__TUNNEL_CLASS__", tunnelClass).replaceAll("__TUNNEL_STATUS__", escapeHtml(tunnelStatus)).replaceAll("__ATTACH_SECTION__", attachSection).replaceAll("__PAGES_SECTION__", pagesSection);
+	const filled = dashboardChromeByLocale[locale].replaceAll("__LANG_SWITCHER__", langSwitcher).replaceAll("__NOW__", escapeHtml(now)).replaceAll("__TUNNEL_CLASS__", tunnelClass).replaceAll("__TUNNEL_STATUS__", escapeHtml(tunnelStatus)).replaceAll("__ATTACH_SECTION__", attachSection).replaceAll("__INSPECTOR_SECTION__", inspectorSection).replaceAll("__PAGES_SECTION__", pagesSection);
 	const sseScript = buildSseScript(sseStrings);
 	return filled.replace("</body>", `${sseScript}\n</body>`);
 }
@@ -2889,6 +2933,8 @@ function buildSseScript(strings) {
       var ATTACH_HINT = ${strings.attachHint};
       var COPY_LABEL = ${strings.copyLabel};
       var COPIED_LABEL = ${strings.copiedLabel};
+      var INSPECTOR_OPEN_LABEL = ${strings.inspectorOpenLabel};
+      var INSPECTOR_WAITING_LABEL = ${strings.inspectorWaitingLabel};
 
       // ── 클립보드 복사 헬퍼 ────────────────────────────────────────────────
       function copyText(text) {
@@ -3002,6 +3048,17 @@ function buildSseScript(strings) {
               sec.innerHTML = '<p class=\\"hint\\">' + ATTACH_HINT + '</p>';`}
             }
           }
+          // 인스펙터 링크 갱신 — #inspector-link (#503).
+          // SECRET-HANDLING: inspectorUrl을 console.log 등으로 출력하지 않는다.
+          var insp = document.getElementById('inspector-link');
+          if (insp) {
+            if (s.inspectorUrl) {
+              var safeInspUrl = String(s.inspectorUrl).slice(0, 2000).replace(/[<>&"']/g, function (c) { return '&#' + c.charCodeAt(0) + ';'; });
+              insp.outerHTML = '<a class=\\"inspector-link\\" id=\\"inspector-link\\" href=\\"' + safeInspUrl + '\\" target=\\"_blank\\" rel=\\"noopener noreferrer\\">' + INSPECTOR_OPEN_LABEL + '</a>';
+            } else {
+              insp.outerHTML = '<span class=\\"inspector-hint\\" id=\\"inspector-link\\">' + INSPECTOR_WAITING_LABEL + '</span>';
+            }
+          }
           // 갱신 시각 (dashboard만 #updated 요소 있음)
           var upd = document.getElementById('updated');
           if (upd) upd.textContent = upd.textContent.replace(/[^ ]+$/, new Date().toISOString());
@@ -3046,6 +3103,8 @@ function buildAttachHtml(qrDataUrl, safeLabel, safeAttachUrl, locale, path = "/a
 		attachHint: JSON.stringify(s("dashboard.attach.hint")),
 		copyLabel: JSON.stringify(s("dashboard.url.copy")),
 		copiedLabel: JSON.stringify(s("dashboard.url.copied")),
+		inspectorOpenLabel: JSON.stringify(s("dashboard.inspector.open")),
+		inspectorWaitingLabel: JSON.stringify(s("dashboard.inspector.waiting")),
 		dashboardSurface: false
 	});
 	return filled.replace("</body>", `${sseScript}\n</body>`);
@@ -3056,8 +3115,9 @@ function buildAttachHtml(qrDataUrl, safeLabel, safeAttachUrl, locale, path = "/a
 *
 * @param getDashboardState - dashboard 상태를 반환하는 클로저. 주입 시 `GET /` dashboard와
 *   `GET /events` SSE 스트림이 활성화된다. 미주입 시 두 라우트는 204/서비스 없음으로 응답.
+* @param options - 서버 옵션. `sseRefreshIntervalMs`로 idle 탭 TOTP 만료 방지 주기를 조정.
 */
-async function startQrHttpServer(getDashboardState) {
+async function startQrHttpServer(getDashboardState, options) {
 	const { default: QRCode } = await import("qrcode");
 	/** SSE 활성 연결 목록 — `notifyStateChange()` 시 전체 push. */
 	const sseClients = [];
@@ -3069,7 +3129,8 @@ async function startQrHttpServer(getDashboardState) {
 				wssUrl: state.tunnel.wssUrl
 			},
 			pages: state.pages,
-			attachUrl: state.attachUrl
+			attachUrl: state.attachUrl,
+			inspectorUrl: state.inspectorUrl ?? null
 		});
 		res.write(`data: ${payload}\n\n`);
 	}
@@ -3189,19 +3250,28 @@ async function startQrHttpServer(getDashboardState) {
 	const address = server.address();
 	if (!address || typeof address === "string") throw new Error("qr-http-server: server.address()가 예상하지 못한 형태입니다.");
 	const port = address.port;
+	/** idle 탭 TOTP 만료 방지용 주기 SSE 갱신 interval. */
+	function notifyStateChangeInternal() {
+		if (!getDashboardState) return;
+		const state = getDashboardState();
+		for (const client of sseClients) try {
+			pushStateToClient(client, state);
+		} catch {}
+	}
+	const refreshIntervalMs = options?.sseRefreshIntervalMs ?? 9e4;
+	const refreshHandle = setInterval(() => {
+		if (sseClients.length > 0 && getDashboardState) notifyStateChangeInternal();
+	}, refreshIntervalMs).unref();
 	return {
 		port,
 		buildAttachPageUrl(attachUrl) {
 			return `http://127.0.0.1:${port}/attach?u=${encodeURIComponent(attachUrl)}`;
 		},
 		notifyStateChange() {
-			if (!getDashboardState) return;
-			const state = getDashboardState();
-			for (const client of sseClients) try {
-				pushStateToClient(client, state);
-			} catch {}
+			notifyStateChangeInternal();
 		},
 		close() {
+			clearInterval(refreshHandle);
 			return new Promise((resolve, reject) => {
 				server.close((err) => err ? reject(err) : resolve());
 			});
@@ -4590,7 +4660,7 @@ async function readMcpSdkVersion() {
 * some test environments that skip the build step).
 */
 function readDevtoolsVersion() {
-	return "0.1.73";
+	return "0.1.75";
 }
 /**
 * Derives the next recommended action from a completed diagnostics snapshot.
@@ -5094,7 +5164,7 @@ function createDebugServer(deps) {
 	const collector = collectorDep ?? new InMemoryDiagnosticsCollector();
 	const server = new Server({
 		name: "ait-debug",
-		version: "0.1.73"
+		version: "0.1.75"
 	}, { capabilities: { tools: { listChanged: true } } });
 	server.setRequestHandler(ListToolsRequestSchema, () => {
 		const conn = router.active;
@@ -5693,37 +5763,52 @@ function errorResult(err, name, isLocal = false) {
 	return classifyToolError(err, name, isLocal);
 }
 /**
-* Starts a polling watcher that detects the first 0→N target transition on
+* Starts a polling watcher that detects target-set changes on
 * `connection.listTargets()` and sends a `notifications/tools/list_changed`
 * notification on the given server.
 *
 * The watcher polls every `intervalMs` (default 1 000 ms). It fires
-* `server.sendToolListChanged()` exactly once — on the first transition — then
-* clears itself. Shutdown calls `stop()` to clear the interval.
+* `server.sendToolListChanged()` + `onAttach()` whenever the sorted target-id
+* signature changes AND the new target set is non-empty. This covers:
+*   - 0→N first attach
+*   - 1→1 target replacement (same count, different id — e.g. rescan)
+*   - N→M any change where the result is still non-empty
+*
+* Full detach (→ empty) updates the stored signature but does NOT fire the
+* callback — `onAttach` semantics are about a live target being present.
+*
+* The interval is **never cleared automatically** — it keeps running until
+* `stop()` is called during shutdown. This ensures that a target replacement
+* after the first attach is always detected.
 *
-* `onFirstAttach` is called once on the 0→N transition (or immediately when
-* already attached). Use this to trigger side-effects such as auto-opening
-* Chrome DevTools (issue #282). The callback is optional; omitting it preserves
-* the previous behaviour exactly.
+* `onAttach` is called on every non-empty signature change (or immediately when
+* already attached). Use this to trigger side-effects such as pushing a fresh
+* SSE state to open dashboard tabs (issue #509). The callback is optional;
+* omitting it preserves the previous behaviour exactly.
 *
 * SECRET-HANDLING: target `id`/`title`/`url` are not written to any log here.
 * Only an attach-detected stderr line is emitted (no target details).
 *
 * @returns `stop` — call this during shutdown to clear the interval.
 */
-function startAttachWatcher(connection, server, intervalMs = 1e3, onFirstAttach) {
-	let wasAttached = connection.listTargets().length > 0;
-	if (wasAttached) {
+function startAttachWatcher(connection, server, intervalMs = 1e3, onAttach) {
+	/** Sorted, comma-joined target-id string — '' means no targets attached. */
+	function signature() {
+		return connection.listTargets().map((t) => t.id).sort().join(",");
+	}
+	let lastSignature = signature();
+	if (lastSignature !== "") {
 		server.sendToolListChanged();
-		onFirstAttach?.();
+		onAttach?.();
 	}
 	const handle = setInterval(() => {
-		const isAttached = connection.listTargets().length > 0;
-		if (!wasAttached && isAttached) {
-			wasAttached = true;
-			server.sendToolListChanged();
-			onFirstAttach?.();
-			clearInterval(handle);
+		const current = signature();
+		if (current !== lastSignature) {
+			lastSignature = current;
+			if (current !== "") {
+				server.sendToolListChanged();
+				onAttach?.();
+			}
 		}
 	}, intervalMs);
 	return { stop() {
@@ -6020,6 +6105,15 @@ var DualConnectionRouter = class {
 	get activeRelayOrigin() {
 		return this.activeFamily?.relayOrigin;
 	}
+	/**
+	* Local HTTP base URL of the Chii relay for the currently-active family (#503).
+	* Used by `getDashboardState` to build the inspector URL via `buildChiiInspectorUrl`.
+	* Returns `undefined` when no relay family is active (local/mock mode).
+	* SECRET-HANDLING: not logged — callers must not write this to stdout/logs.
+	*/
+	get activeRelayHttpUrl() {
+		return this.activeFamily?.relayHttpUrl;
+	}
 	/** Every booted family (for unified shutdown). All families are lazy (#396). */
 	bootedFamilies() {
 		return [...this.lazyFamilies.values()];
@@ -6147,18 +6241,25 @@ async function runDebugServer(options = {}) {
 		return router.active;
 	});
 	let lastAttachParts = null;
-	const getDashboardState = () => ({
-		tunnel: {
-			up: router.relayTunnelStatus().up,
-			wssUrl: router.relayTunnelStatus().wssUrl
-		},
-		pages: router.active.listTargets().map((t) => ({
-			id: t.id,
-			url: t.url
-		})),
-		attachUrl: lastAttachParts ? rebuildAttachUrl(lastAttachParts) : null,
-		mode: deriveEnvironment(router.active.kind, getLiveIntent(), router.activeRelayOrigin)
-	});
+	const getDashboardState = () => {
+		const targets = router.active.listTargets();
+		const relayHttpUrl = router.activeRelayHttpUrl;
+		const totpSecret = process.env.AIT_DEBUG_TOTP_SECRET;
+		const inspectorUrl = relayHttpUrl && targets.length > 0 ? buildChiiInspectorUrl(relayHttpUrl, targets[0].id, totpSecret ? () => generateTotp(totpSecret, Date.now()) : void 0) : null;
+		return {
+			tunnel: {
+				up: router.relayTunnelStatus().up,
+				wssUrl: router.relayTunnelStatus().wssUrl
+			},
+			pages: targets.map((t) => ({
+				id: t.id,
+				url: t.url
+			})),
+			attachUrl: lastAttachParts ? rebuildAttachUrl(lastAttachParts) : null,
+			inspectorUrl,
+			mode: deriveEnvironment(router.active.kind, getLiveIntent(), router.activeRelayOrigin)
+		};
+	};
 	let qrServer;
 	try {
 		qrServer = await startQrHttpServer(getDashboardState);
@@ -6313,17 +6414,24 @@ async function runLocalDebugServer(options = {}) {
 		return router.active;
 	});
 	let lastAttachParts = null;
-	const getDashboardState = () => ({
-		tunnel: {
-			up: router.relayTunnelStatus().up,
-			wssUrl: router.relayTunnelStatus().wssUrl
-		},
-		pages: router.active.listTargets().map((t) => ({
-			id: t.id,
-			url: t.url
-		})),
-		attachUrl: lastAttachParts ? rebuildAttachUrl(lastAttachParts) : null
-	});
+	const getDashboardState = () => {
+		const targets = router.active.listTargets();
+		const relayHttpUrl = router.activeRelayHttpUrl;
+		const totpSecret = process.env.AIT_DEBUG_TOTP_SECRET;
+		const inspectorUrl = relayHttpUrl && targets.length > 0 ? buildChiiInspectorUrl(relayHttpUrl, targets[0].id, totpSecret ? () => generateTotp(totpSecret, Date.now()) : void 0) : null;
+		return {
+			tunnel: {
+				up: router.relayTunnelStatus().up,
+				wssUrl: router.relayTunnelStatus().wssUrl
+			},
+			pages: targets.map((t) => ({
+				id: t.id,
+				url: t.url
+			})),
+			attachUrl: lastAttachParts ? rebuildAttachUrl(lastAttachParts) : null,
+			inspectorUrl
+		};
+	};
 	let qrServer;
 	try {
 		qrServer = await startQrHttpServer(getDashboardState);
@@ -6462,17 +6570,24 @@ async function runMobileDebugServer(options = {}) {
 		return router.active;
 	});
 	let lastAttachParts = null;
-	const getDashboardState = () => ({
-		tunnel: {
-			up: router.relayTunnelStatus().up,
-			wssUrl: router.relayTunnelStatus().wssUrl
-		},
-		pages: router.active.listTargets().map((t) => ({
-			id: t.id,
-			url: t.url
-		})),
-		attachUrl: lastAttachParts ? rebuildAttachUrl(lastAttachParts) : null
-	});
+	const getDashboardState = () => {
+		const targets = router.active.listTargets();
+		const relayHttpUrl = router.activeRelayHttpUrl;
+		const totpSecret = process.env.AIT_DEBUG_TOTP_SECRET;
+		const inspectorUrl = relayHttpUrl && targets.length > 0 ? buildChiiInspectorUrl(relayHttpUrl, targets[0].id, totpSecret ? () => generateTotp(totpSecret, Date.now()) : void 0) : null;
+		return {
+			tunnel: {
+				up: router.relayTunnelStatus().up,
+				wssUrl: router.relayTunnelStatus().wssUrl
+			},
+			pages: targets.map((t) => ({
+				id: t.id,
+				url: t.url
+			})),
+			attachUrl: lastAttachParts ? rebuildAttachUrl(lastAttachParts) : null,
+			inspectorUrl
+		};
+	};
 	let qrServer;
 	try {
 		qrServer = await startQrHttpServer(getDashboardState);
@@ -6990,7 +7105,7 @@ function createDevServer(deps = {}) {
 	const aitSource = deps.aitSource ?? new HttpAitSource({ stateEndpoint });
 	const server = new Server({
 		name: "ait-devtools",
-		version: "0.1.73"
+		version: "0.1.75"
 	}, { capabilities: { tools: {} } });
 	server.setRequestHandler(ListToolsRequestSchema, () => ({ tools: DEV_TOOL_DEFINITIONS.map((tool) => ({ ...tool })) }));
 	server.setRequestHandler(CallToolRequestSchema, async (request) => {