@ait-co/devtools 0.1.74 → 0.1.76

package/README.en.md

@@ -82,6 +82,26 @@ devtools-mcp   # start MCP server
 
 ---
 
+## On-device debugging in one line
+
+To enable on-device CDP debugging in environments 2, 3, and 4, add **one line** to your mini-app entry (`main.tsx` or equivalent):
+
+```ts
+// main.tsx (or the top of your mini-app entry)
+import '@ait-co/devtools/in-app/auto';
+```
+
+What this single line does:
+
+- **Self-gate**: if neither `?debug=1` nor `?relay=` is in the URL, and it is not a DEV build, the entry does nothing. The chunk stays dormant and has no impact on a normal production load.
+- **Attach**: when the gate passes, calls `maybeAttach()` to inject the Chii `target.js` script (Layer B/C gate semantics are fully preserved).
+- **SDK bridge**: installs `window.__sdk` / `window.__sdkCall` so an agent can drive any SDK API directly over the CDP relay via `Runtime.evaluate`. Silently skipped if `@apps-in-toss/web-framework` is not available.
+- **Types**: provides `Window.__sdk` / `__sdkCall` global type declarations automatically — no separate `globals.d.ts` needed in your project.
+
+For environments 3 and 4 (intoss-private relay), the relay QR deep-link carries `?debug=1&relay=<wss>` query params, so this one line is all the wiring you need. Environment 2 (PWA, `tunnel: { cdp: true }`) works the same way.
+
+> For dogfood builds with TOTP authentication, inject `__DEBUG_TOTP_SECRET__` via your build define and use `@ait-co/devtools/in-app` directly with `evaluateDebugGate({ verifyTotpCode })` + `maybeAttach()`. `in-app/auto` does not inject a TOTP verifier, so Layer C3 is disabled.
+
 ## Five common problems
 
 **"QR window doesn't open"**
@@ -102,7 +122,7 @@ The page on the phone died (OOM, JS exception, or native bridge crash). Relaunch
 
 **"SDK not available" — window.__sdkCall not injected**
 
-When `call_sdk` returns `ok: false, error: "window.__sdkCall is not available"`, a non-dogfood bundle is loaded. Redeploy through the dogfood channel with the `__DEBUG_BUILD__` flag enabled and try again. This error is the expected result in environment 2 (PWA). (Related: [#285](https://github.com/apps-in-toss-community/devtools/issues/285))
+When `call_sdk` returns `ok: false, error: "window.__sdkCall is not available"`, the SDK bridge has not been installed. Check that `import '@ait-co/devtools/in-app/auto'` is present at the top of your mini-app entry — see the "On-device debugging in one line" section above. This error is the expected result in environment 2 (PWA). (Related: [#285](https://github.com/apps-in-toss-community/devtools/issues/285))
 
 **"QR scanned but auth rejected" — TOTP code expired**
 
@@ -1123,6 +1143,7 @@ Returns the full current mock state (permissions, location, auth, network, IAP,
 | `@ait-co/devtools/mcp/server` | Dev-mode MCP stdio server function (Node.js) |
 | `@ait-co/devtools/mcp/cli` | `devtools-mcp` bin entry point (debug / dev mode, Node.js) |
 | `@ait-co/devtools/in-app` | In-app debug attach — runtime gate (layers B/C) + Chii target.js injection. The consumer wraps the import in `if (__DEBUG_BUILD__)` so it is DCE'd from release builds — dogfood builds only |
+| `@ait-co/devtools/in-app/auto` | Self-gating side-effect entry — a single `import '@ait-co/devtools/in-app/auto'` line wires attach + SDK bridge. Active only when `?debug=1` / `?relay=` are in the URL or it is a DEV build; stays dormant on normal production loads. See the [section above](#on-device-debugging-in-one-line) |
 
 ## Telemetry
 

package/README.md

@@ -82,6 +82,26 @@ devtools-mcp   # MCP 서버 시작
 
 ---
 
+## on-device 디버깅 한 줄 설정
+
+환경 2·3·4에서 on-device CDP 디버깅을 활성화하려면 미니앱 entry(`main.tsx` 등)에 **한 줄**을 추가하세요:
+
+```ts
+// main.tsx (또는 미니앱 entry 최상단)
+import '@ait-co/devtools/in-app/auto';
+```
+
+이 한 줄이 하는 일:
+
+- **self-gate**: URL에 `?debug=1` 또는 `?relay=`가 없고, DEV 빌드도 아니라면 아무것도 하지 않습니다. 청크는 dormant 상태로 남아 일반 프로덕션 로드에 영향을 주지 않습니다.
+- **attach**: gate가 통과하면 `maybeAttach()`를 호출해 Chii `target.js`를 주입합니다 (Layer B·C 게이트 시맨틱스는 완전히 유지).
+- **SDK 브리지**: `window.__sdk` / `window.__sdkCall`을 설치해 에이전트가 CDP relay의 `Runtime.evaluate`로 SDK API를 직접 구동할 수 있게 합니다. `@apps-in-toss/web-framework`가 없으면 조용히 skip합니다.
+- **타입**: `Window.__sdk` / `__sdkCall` 글로벌 타입을 자동으로 제공합니다 — 별도 `globals.d.ts` 불필요.
+
+환경 3·4(intoss-private relay) 빌드는 relay QR 딥링크가 `?debug=1&relay=<wss>` 파라미터를 실어 보내므로, 이 한 줄만 있으면 별도 게이트 코드가 필요 없습니다. 환경 2(PWA, `tunnel: { cdp: true }`)도 동일하게 동작합니다.
+
+> TOTP 인증이 필요한 dogfood 빌드는 빌드 define으로 `__DEBUG_TOTP_SECRET__`을 주입하고 `@ait-co/devtools/in-app`을 직접 import해 `evaluateDebugGate({ verifyTotpCode })` + `maybeAttach()`를 사용하세요. `in-app/auto`는 TOTP verifier를 주입하지 않으므로 C3 레이어가 비활성화됩니다.
+
 ## 자주 겪는 문제 5가지
 
 **"QR 창이 안 열림"**
@@ -102,7 +122,7 @@ cloudflared quick tunnel은 수 시간 후 drop될 수 있습니다. `devtools-m
 
 **"SDK 부재" — window.__sdkCall 미주입**
 
-`call_sdk` 호출 시 `ok: false, error: "window.__sdkCall is not available"` 에러가 뜨면 dogfood 빌드가 아닌 일반 번들이 로드된 것입니다. `__DEBUG_BUILD__` 플래그가 켜진 dogfood 채널로 재배포 후 다시 시도하세요. 환경 2(PWA)에서는 이 에러가 예상 결과입니다. (관련: [#285](https://github.com/apps-in-toss-community/devtools/issues/285))
+`call_sdk` 호출 시 `ok: false, error: "window.__sdkCall is not available"` 에러가 뜨면 SDK 브리지가 아직 설치되지 않은 상태입니다. 아래 "on-device 디버깅 한 줄 설정" 섹션을 참고해 `import '@ait-co/devtools/in-app/auto'`가 미니앱 entry에 추가돼 있는지 확인하세요. 환경 2(PWA)에서는 이 에러가 예상 결과입니다. (관련: [#285](https://github.com/apps-in-toss-community/devtools/issues/285))
 
 **"QR 스캔했는데 인증 실패" — TOTP 만료**
 
@@ -1163,6 +1183,7 @@ export default {
 | `@ait-co/devtools/mcp/server` | dev-mode MCP stdio server 함수 (Node.js) |
 | `@ait-co/devtools/mcp/cli` | `devtools-mcp` bin 진입점 (debug / dev 모드, Node.js) |
 | `@ait-co/devtools/in-app` | In-app debug attach — 런타임 gate(layer B·C) + Chii target.js 주입. 소비자가 `if (__DEBUG_BUILD__)`로 import를 감싸 release 빌드에서 DCE — dogfood 빌드 전용 |
+| `@ait-co/devtools/in-app/auto` | Self-gating side-effect entry — `import '@ait-co/devtools/in-app/auto'` 한 줄로 attach + SDK 브리지 설치. URL 파라미터(`?debug=1` / `?relay=`) 또는 DEV 빌드에서만 활성화, 일반 프로덕션 로드는 dormant. [위 섹션](#on-device-디버깅-한-줄-설정) 참고 |
 
 ## 텔레메트리
 

package/dist/devtools-opener-BbUXBzgA.js.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-opener-BbUXBzgA.js","names":[],"sources":["../src/mcp/devtools-opener.ts"],"sourcesContent":["/**\n * Auto-opens Chrome DevTools when a page attaches over the Chii relay.\n *\n * When a real device attaches (env 2 / 3 / 4 in the 4-environments fidelity\n * ladder), the Chii relay exposes a standard CDP WebSocket endpoint.  Chii\n * also self-hosts its DevTools frontend at:\n *\n *   <relay-base>/front_end/chii_app.html\n *     ?ws|wss=<encodeURIComponent(\"<relay-host>/client/<uuid>?target=<targetId>&at=<totp>\")>\n *\n * The param name follows the relay base scheme — `ws=` for plain HTTP\n * (env 3/4 local relay), `wss=` for HTTPS (env 2 tunnel) — matching the\n * scheme branch in chii/public/index.js.\n *\n * This is the same URL format that Chii's own index-page inspect-links use\n * (derived from `chii/public/index.js` — the JS that powers the target list\n * page at `<relay-base>/`).  Opening this URL in the developer's local browser\n * gives a full Chrome DevTools UI connected to the phone via the relay.\n *\n * IMPORTANT — environment guard:\n *   Auto-open only fires in relay environments (env 2 / 3 / 4). In env 1\n *   (local browser + mock SDK) the developer already has F12 available; opening\n *   a DevTools window pointing at the mock relay would be confusing and useless.\n *   The caller (`startAttachWatcher` in `debug-server.ts`) passes the current\n *   environment and this module bails out when it is `mock`.\n *\n * Opt-out: set `AIT_AUTO_DEVTOOLS=0` in the environment to suppress auto-open\n *   entirely. Any other value (or absent) enables the default behaviour.\n *\n * Duplicate-open guard:\n *   `AutoDevtoolsOpener` tracks whether open was already triggered for the\n *   current session. The open fires at most once per instance — typically one\n *   per `runDebugServer` call.\n *\n * TOTP expiry caveat:\n *   The `at=` TOTP code embedded in the `wss=` parameter is minted fresh at the\n *   moment `open()` is called. The code is valid for ~3 minutes (the relay gate\n *   accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). If the developer\n *   does not open the URL within that window the WebSocket upgrade will be\n *   rejected with 4401. In practice the browser opens immediately after the OS\n *   `open` command; if needed the developer can copy the wss= param, replace\n *   `at=`, and reload. This is documented in the JSDoc below.\n *\n * PWA (WebKit) caveat:\n *   The Chii relay injects a chobitsu CDP shim into WebKit-based runtimes (env 2\n *   AITC Sandbox PWA). The DevTools frontend will connect and most panels work.\n *   However, WebKit does not expose the full CDP domain set that V8/Blink does,\n *   so some panels (Network, Layers) may appear empty or show limited data.\n *   This is a WebKit runtime constraint, not a relay or devtools-opener issue.\n *\n * Node-only: uses `child_process.spawnSync` to invoke the OS open command.\n */\n\nimport type { McpEnvironment } from './environment.js';\n\n// ---------------------------------------------------------------------------\n// Chii self-hosted DevTools frontend URL\n// ---------------------------------------------------------------------------\n\n/**\n * Assembles the Chii self-hosted DevTools inspector URL for a given relay\n * and target.\n *\n * Chii serves its own DevTools frontend at\n * `<relayHttpBaseUrl>/front_end/chii_app.html`. The `ws=` (plain HTTP relay)\n * or `wss=` (HTTPS relay) query parameter is a URL-encoded string of the form\n * `<relay-host>/client/<uuid>?target=<id>` (and optionally `&at=<totp>`) —\n * the same format used by Chii's own target list page (derived from\n * `chii/public/index.js`).\n *\n * The `at=` TOTP code is minted at call time via `mintTotp()`.  It is valid\n * for ~3 minutes (relay gate accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps =\n * 180–210 s).  The developer must open the returned URL within that window.\n * If the window expires before the browser connects, the relay will reject the\n * WebSocket upgrade with close code 4401.\n *\n * SECRET-HANDLING: `mintTotp` returns a code, not a secret. The code is\n * embedded in the `wss=` parameter (inside the `at=` param) of the returned\n * URL. Callers MUST NOT log the returned URL to stdout (stderr is OK — it is\n * the intended fallback surface for the developer to copy the URL).\n *\n * @param relayHttpBaseUrl - Local HTTP base URL of the Chii relay, e.g.\n *   `http://127.0.0.1:9100`. No trailing slash.\n * @param targetId - Chii target id (from `GET <relay>/targets`).\n * @param mintTotp - Optional function that returns a fresh 6-digit TOTP code\n *   string. Called at most once. When omitted (TOTP disabled) no `at=` param\n *   is added.\n * @param panel - Initial panel. Defaults to `\"console\"`.\n *\n * @example\n * buildChiiInspectorUrl(\n *   'http://127.0.0.1:9100',\n *   'abc123',\n *   () => generateTotp(secret),\n * )\n * // → 'http://127.0.0.1:9100/front_end/chii_app.html?ws=127.0.0.1%3A9100%2Fclient%2F<uuid>%3Ftarget%3Dabc123%26at%3D<code>'\n */\nexport function buildChiiInspectorUrl(\n  relayHttpBaseUrl: string,\n  targetId: string,\n  mintTotp?: () => string,\n  panel: 'elements' | 'console' | 'sources' | 'network' = 'console',\n): string {\n  // Extract the host (and port) from the relay HTTP base URL, and pick the\n  // query param name chii_app.html expects: `ws=` dials `ws://` (plain-HTTP\n  // relay — env 3/4 local 127.0.0.1) while `wss=` dials `wss://` (HTTPS\n  // tunnel — env 2). chii/public/index.js does the same scheme branch:\n  // `location.protocol === 'https:' ? 'wss' : 'ws'`. Always sending `wss=`\n  // would make the frontend attempt TLS against the plain-HTTP local relay.\n  let relayHost: string;\n  let wsParamName: 'ws' | 'wss';\n  try {\n    const parsed = new URL(relayHttpBaseUrl);\n    relayHost = parsed.host; // e.g. \"127.0.0.1:9100\"\n    wsParamName = parsed.protocol === 'https:' ? 'wss' : 'ws';\n  } catch {\n    // Fallback: strip the scheme prefix manually if URL parsing fails.\n    relayHost = relayHttpBaseUrl.replace(/^https?:\\/\\//i, '');\n    wsParamName = /^https:/i.test(relayHttpBaseUrl) ? 'wss' : 'ws';\n  }\n\n  // Generate a client UUID that matches the format Chii's index.js uses\n  // (6 random alphanumeric characters).\n  const clientId = `devtools-opener-${Date.now().toString(36)}`;\n\n  // Build the ws=/wss= value: \"<relay-host>/client/<uuid>?target=<id>[&at=<code>]\"\n  // This mirrors the format from chii/public/index.js:\n  //   `${domain}${basePath}client/${randomId(6)}?target=${targetId}`\n  let wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}`;\n\n  if (mintTotp) {\n    // SECRET-HANDLING: mintTotp() returns a code (not a secret). The code\n    // rides only in the URL's at= param. Callers must not log the URL.\n    const code = mintTotp();\n    wsPath += `&at=${encodeURIComponent(code)}`;\n  }\n\n  const params = new URLSearchParams({ [wsParamName]: wsPath, panel });\n  return `${relayHttpBaseUrl.replace(/\\/$/, '')}/front_end/chii_app.html?${params.toString()}`;\n}\n\n// ---------------------------------------------------------------------------\n// Opt-out check\n// ---------------------------------------------------------------------------\n\n/**\n * Returns `true` when auto-open is **disabled** via the `AIT_AUTO_DEVTOOLS`\n * env var. Only the explicit `\"0\"` value disables it; anything else (including\n * absent) leaves auto-open enabled.\n */\nexport function isAutoDevtoolsDisabled(): boolean {\n  return process.env.AIT_AUTO_DEVTOOLS === '0';\n}\n\n// ---------------------------------------------------------------------------\n// Browser open (Node-only, sync)\n// ---------------------------------------------------------------------------\n\n/**\n * Opens the given URL in the OS default browser using a platform-appropriate\n * command. Returns `true` on success.\n *\n * Failures are silent from the caller's perspective — the caller should log\n * the URL to stderr as a fallback before calling this function.\n */\nexport function openUrlInBrowser(url: string): boolean {\n  // Test hook: skip actual spawn when running in vitest / CI where the OS open\n  // command may hang or be absent. Production code never sets this.\n  if (process.env.AIT_AUTO_DEVTOOLS_TEST_SKIP_SPAWN === '1') return false;\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const { spawnSync } = require('node:child_process') as typeof import('node:child_process');\n  const platform = process.platform;\n\n  type Candidate = { cmd: string; args: string[] };\n  let candidates: Candidate[];\n  if (platform === 'darwin') {\n    candidates = [{ cmd: 'open', args: [url] }];\n  } else if (platform === 'win32') {\n    candidates = [{ cmd: 'cmd', args: ['/c', 'start', '', url] }];\n  } else {\n    // Linux + fallback\n    candidates = [\n      { cmd: 'xdg-open', args: [url] },\n      { cmd: 'sensible-browser', args: [url] },\n      { cmd: 'x-www-browser', args: [url] },\n    ];\n  }\n\n  for (const { cmd, args } of candidates) {\n    try {\n      const result = spawnSync(cmd, args, { encoding: 'utf8', timeout: 5_000 });\n      if (!result.error && result.status === 0) return true;\n    } catch {\n      // Try next candidate.\n    }\n  }\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// AutoDevtoolsOpener — stateful once-per-session open guard\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link AutoDevtoolsOpener.open}.\n *\n * The `relayHttpBaseUrl` and `targetId` fields are required to build a working\n * Chii self-hosted inspector URL. When `relayHttpBaseUrl` is absent the open\n * is skipped (no relay available yet).\n */\nexport interface DevtoolsOpenOptions {\n  /**\n   * Local HTTP base URL of the Chii relay, e.g. `http://127.0.0.1:9100`.\n   * Used to build the `<relay-base>/front_end/chii_app.html?wss=…` URL.\n   *\n   * For env 3/4 (intoss relay) this is `http://127.0.0.1:<port>`.\n   * For env 2 (external PWA relay) this is the relay's external HTTP URL\n   * (e.g. `https://<host>.trycloudflare.com`).\n   *\n   * When absent or empty, `open()` is a no-op.\n   *\n   * SECRET-HANDLING: this value contains the relay host. Callers MUST NOT\n   * log it to stdout; stderr is the intended surface.\n   */\n  relayHttpBaseUrl: string | null | undefined;\n  /**\n   * Chii target id of the attached page, from `listTargets()[0].id`.\n   * When absent or empty, `open()` is a no-op.\n   */\n  targetId: string | null | undefined;\n  /**\n   * Function that mints a fresh TOTP code when called. Called at most once per\n   * `open()` invocation, immediately before building the inspector URL.\n   *\n   * Pass `undefined` when TOTP is disabled (no `at=` param is added).\n   *\n   * SECRET-HANDLING: the function MUST return only the code (6 digits), not\n   * the secret. The code rides in the URL's `at=` param only.\n   */\n  mintTotp?: () => string;\n  /** Current MCP environment (`mock` | `relay`). `open()` no-ops on `mock`. */\n  env: McpEnvironment;\n}\n\n/**\n * Manages auto-opening Chrome DevTools exactly once per relay attach session.\n *\n * Create one instance per `runDebugServer` call and pass its `open()` method\n * as the `onFirstAttach` callback to `startAttachWatcher`.\n *\n * The open fires at most once. Subsequent `open()` calls are no-ops.\n * Opt-out and mock-environment guard are checked at call time.\n */\nexport class AutoDevtoolsOpener {\n  private _opened = false;\n\n  /**\n   * Attempts to auto-open Chii DevTools in the developer's browser.\n   *\n   * Builds a `<relay-base>/front_end/chii_app.html?wss=…` URL pointing at the\n   * attached target. A fresh TOTP `at=` code is minted at call time so the\n   * relay's WebSocket upgrade gate accepts the connection.\n   *\n   * No-op when any of the following conditions hold:\n   *   1. Already opened this session (`_opened` is true).\n   *   2. `AIT_AUTO_DEVTOOLS=0` opt-out is set.\n   *   3. `options.env` is `mock` (env 1 — F12 is already available).\n   *   4. `options.relayHttpBaseUrl` is null/undefined/empty (relay not up yet).\n   *   5. `options.targetId` is null/undefined/empty (no page attached yet).\n   *\n   * Always writes the DevTools URL to stderr so the developer can copy it\n   * if the browser open fails or the popup is blocked.\n   *\n   * TOTP expiry caveat: the `at=` code embedded in the URL is valid for ~3\n   * minutes (relay gate ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). The\n   * developer must open the URL within that window; if they miss it, reload\n   * the page or re-run `open()` (though the once-per-session guard prevents\n   * that — restart the MCP server if needed).\n   *\n   * SECRET-HANDLING: the inspector URL (written to stderr) contains the relay\n   * host and a short-lived TOTP code. Do NOT write it to stdout or any\n   * persistent log.\n   */\n  open(options: DevtoolsOpenOptions): void {\n    if (this._opened) return;\n    if (isAutoDevtoolsDisabled()) return;\n    if (options.env === 'mock') return;\n    if (!options.relayHttpBaseUrl) return;\n    if (!options.targetId) return;\n\n    this._opened = true;\n\n    const inspectorUrl = buildChiiInspectorUrl(\n      options.relayHttpBaseUrl,\n      options.targetId,\n      options.mintTotp,\n    );\n\n    process.stderr.write(\n      '[ait-debug] 기기가 연결됐습니다 — Chii DevTools를 자동으로 엽니다.\\n' +\n        `[ait-debug] DevTools URL: ${inspectorUrl}\\n` +\n        '[ait-debug] (AIT_AUTO_DEVTOOLS=0 으로 자동 열기를 끌 수 있습니다)\\n' +\n        '[ait-debug] 주의: URL의 at= 코드는 ~3분 안에서만 유효합니다.\\n',\n    );\n\n    const opened = openUrlInBrowser(inspectorUrl);\n    if (!opened) {\n      process.stderr.write(\n        '[ait-debug] 브라우저 자동 열기 실패 — 위 URL을 브라우저에서 직접 여세요.\\n',\n      );\n    }\n  }\n\n  /** Returns `true` if `open()` has passed all guards and fired once. */\n  get opened(): boolean {\n    return this._opened;\n  }\n}\n"],"mappings":";;;;;;;;;;AAsJA,SAAgB,yBAAkC;AAChD,QAAO,QAAQ,IAAI,sBAAsB;;;;;;;;;AAc3C,SAAgB,iBAAiB,KAAsB;AAGrD,KAAI,QAAQ,IAAI,sCAAsC,IAAK,QAAO;CAElE,MAAM,EAAE,cAAA,UAAsB,qBAAqB;CACnD,MAAM,WAAW,QAAQ;CAGzB,IAAI;AACJ,KAAI,aAAa,SACf,cAAa,CAAC;EAAE,KAAK;EAAQ,MAAM,CAAC,IAAI;EAAE,CAAC;UAClC,aAAa,QACtB,cAAa,CAAC;EAAE,KAAK;EAAO,MAAM;GAAC;GAAM;GAAS;GAAI;GAAI;EAAE,CAAC;KAG7D,cAAa;EACX;GAAE,KAAK;GAAY,MAAM,CAAC,IAAI;GAAE;EAChC;GAAE,KAAK;GAAoB,MAAM,CAAC,IAAI;GAAE;EACxC;GAAE,KAAK;GAAiB,MAAM,CAAC,IAAI;GAAE;EACtC;AAGH,MAAK,MAAM,EAAE,KAAK,UAAU,WAC1B,KAAI;EACF,MAAM,SAAS,UAAU,KAAK,MAAM;GAAE,UAAU;GAAQ,SAAS;GAAO,CAAC;AACzE,MAAI,CAAC,OAAO,SAAS,OAAO,WAAW,EAAG,QAAO;SAC3C;AAIV,QAAO"}
+{"version":3,"file":"devtools-opener-BbUXBzgA.js","names":[],"sources":["../src/mcp/devtools-opener.ts"],"sourcesContent":["/**\n * Auto-opens Chrome DevTools when a page attaches over the Chii relay.\n *\n * When a real device attaches (env 2 / 3 / 4 in the 4-environments fidelity\n * ladder), the Chii relay exposes a standard CDP WebSocket endpoint.  Chii\n * also self-hosts its DevTools frontend at:\n *\n *   <relay-base>/front_end/chii_app.html\n *     ?ws|wss=<encodeURIComponent(\"<relay-host>/client/<uuid>?target=<targetId>&at=<totp>\")>\n *\n * The param name follows the relay base scheme — `ws=` for plain HTTP\n * (env 3/4 local relay), `wss=` for HTTPS (env 2 tunnel) — matching the\n * scheme branch in chii/public/index.js.\n *\n * This is the same URL format that Chii's own index-page inspect-links use\n * (derived from `chii/public/index.js` — the JS that powers the target list\n * page at `<relay-base>/`).  Opening this URL in the developer's local browser\n * gives a full Chrome DevTools UI connected to the phone via the relay.\n *\n * IMPORTANT — environment guard:\n *   Auto-open only fires in relay environments (env 2 / 3 / 4). In env 1\n *   (local browser + mock SDK) the developer already has F12 available; opening\n *   a DevTools window pointing at the mock relay would be confusing and useless.\n *   The caller (`startAttachWatcher` in `debug-server.ts`) passes the current\n *   environment and this module bails out when it is `mock`.\n *\n * Opt-out: set `AIT_AUTO_DEVTOOLS=0` in the environment to suppress auto-open\n *   entirely. Any other value (or absent) enables the default behaviour.\n *\n * Duplicate-open guard:\n *   `AutoDevtoolsOpener` tracks whether open was already triggered for the\n *   current session. The open fires at most once per instance — typically one\n *   per `runDebugServer` call.\n *\n * TOTP expiry caveat:\n *   The `at=` TOTP code embedded in the `wss=` parameter is minted fresh at the\n *   moment `open()` is called. The code is valid for ~3 minutes (the relay gate\n *   accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). If the developer\n *   does not open the URL within that window the WebSocket upgrade will be\n *   rejected with 4401. In practice the browser opens immediately after the OS\n *   `open` command; if needed the developer can copy the wss= param, replace\n *   `at=`, and reload. This is documented in the JSDoc below.\n *\n * PWA (WebKit) caveat:\n *   The Chii relay injects a chobitsu CDP shim into WebKit-based runtimes (env 2\n *   AITC Sandbox PWA). The DevTools frontend will connect and most panels work.\n *   However, WebKit does not expose the full CDP domain set that V8/Blink does,\n *   so some panels (Network, Layers) may appear empty or show limited data.\n *   This is a WebKit runtime constraint, not a relay or devtools-opener issue.\n *\n * Node-only: uses `child_process.spawnSync` to invoke the OS open command.\n */\n\nimport type { McpEnvironment } from './environment.js';\n\n// ---------------------------------------------------------------------------\n// Chii self-hosted DevTools frontend URL\n// ---------------------------------------------------------------------------\n\n/**\n * Assembles the Chii self-hosted DevTools inspector URL for a given relay\n * and target.\n *\n * Chii serves its own DevTools frontend at\n * `<relayHttpBaseUrl>/front_end/chii_app.html`. The `ws=` (plain HTTP relay)\n * or `wss=` (HTTPS relay) query parameter is a URL-encoded string of the form\n * `<relay-host>/client/<uuid>?target=<id>&at=<totp>` — the same format used\n * by Chii's own target list page (derived from `chii/public/index.js`).\n *\n * The `at=` TOTP code is minted at call time via `mintTotp()`.  It is valid\n * for ~3 minutes (relay gate accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps =\n * 180–210 s).  The developer must open the returned URL within that window.\n * If the window expires before the browser connects, the relay will reject the\n * WebSocket upgrade with close code 4401.\n *\n * FAIL-CLOSED (issue #509): `mintTotp` is REQUIRED.  When omitted (i.e.\n * `undefined`), this function returns `null` — the caller must treat `null` as\n * \"inspector not yet available\" and show a waiting hint instead of a broken\n * link. Relay sessions gate every WS upgrade with TOTP (#452), so a URL built\n * without `at=` would be rejected with WS 4401 immediately — there is no\n * non-TOTP relay path in production. Returning `null` surfaces this cleanly as\n * a \"TOTP not yet configured\" state rather than silently producing a URL that\n * will always fail at the WS handshake.\n *\n * SECRET-HANDLING: `mintTotp` returns a code, not a secret. The code is\n * embedded in the `wss=` parameter (inside the `at=` param) of the returned\n * URL. Callers MUST NOT log the returned URL to stdout (stderr is OK — it is\n * the intended fallback surface for the developer to copy the URL).\n *\n * @param relayHttpBaseUrl - Local HTTP base URL of the Chii relay, e.g.\n *   `http://127.0.0.1:9100`. No trailing slash.\n * @param targetId - Chii target id (from `GET <relay>/targets`).\n * @param mintTotp - Function that returns a fresh 6-digit TOTP code string.\n *   Called at most once. **Required** — when `undefined`, the function returns\n *   `null` (fail-closed: no `at=` param means the relay WS gate rejects the\n *   handshake, so a null result is safer than a URL that always 404s).\n * @param panel - Initial panel. Defaults to `\"console\"`.\n *\n * @returns The inspector URL string, or `null` when `mintTotp` is absent.\n *\n * @example\n * buildChiiInspectorUrl(\n *   'http://127.0.0.1:9100',\n *   'abc123',\n *   () => generateTotp(secret),\n * )\n * // → 'http://127.0.0.1:9100/front_end/chii_app.html?ws=127.0.0.1%3A9100%2Fclient%2F<uuid>%3Ftarget%3Dabc123%26at%3D<code>'\n */\nexport function buildChiiInspectorUrl(\n  relayHttpBaseUrl: string,\n  targetId: string,\n  mintTotp?: () => string,\n  panel: 'elements' | 'console' | 'sources' | 'network' = 'console',\n): string | null {\n  // FAIL-CLOSED (#509): relay sessions require TOTP for every WS upgrade.\n  // Without a mintTotp function we cannot produce a valid at= code, so we\n  // return null rather than a URL that will always be rejected by the relay gate\n  // with WS 4401 / HTTP 404. Callers show a \"waiting\" hint when they get null.\n  if (!mintTotp) {\n    return null;\n  }\n\n  // Extract the host (and port) from the relay HTTP base URL, and pick the\n  // query param name chii_app.html expects: `ws=` dials `ws://` (plain-HTTP\n  // relay — env 3/4 local 127.0.0.1) while `wss=` dials `wss://` (HTTPS\n  // tunnel — env 2). chii/public/index.js does the same scheme branch:\n  // `location.protocol === 'https:' ? 'wss' : 'ws'`. Always sending `wss=`\n  // would make the frontend attempt TLS against the plain-HTTP local relay.\n  let relayHost: string;\n  let wsParamName: 'ws' | 'wss';\n  try {\n    const parsed = new URL(relayHttpBaseUrl);\n    relayHost = parsed.host; // e.g. \"127.0.0.1:9100\"\n    wsParamName = parsed.protocol === 'https:' ? 'wss' : 'ws';\n  } catch {\n    // Fallback: strip the scheme prefix manually if URL parsing fails.\n    relayHost = relayHttpBaseUrl.replace(/^https?:\\/\\//i, '');\n    wsParamName = /^https:/i.test(relayHttpBaseUrl) ? 'wss' : 'ws';\n  }\n\n  // Generate a client UUID that matches the format Chii's index.js uses\n  // (6 random alphanumeric characters).\n  const clientId = `devtools-opener-${Date.now().toString(36)}`;\n\n  // Build the ws=/wss= value: \"<relay-host>/client/<uuid>?target=<id>&at=<code>\"\n  // This mirrors the format from chii/public/index.js:\n  //   `${domain}${basePath}client/${randomId(6)}?target=${targetId}`\n  // SECRET-HANDLING: mintTotp() returns a code (not a secret). The code\n  // rides only in the URL's at= param. Callers must not log the URL.\n  const code = mintTotp();\n  const wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}&at=${encodeURIComponent(code)}`;\n\n  const params = new URLSearchParams({ [wsParamName]: wsPath, panel });\n  return `${relayHttpBaseUrl.replace(/\\/$/, '')}/front_end/chii_app.html?${params.toString()}`;\n}\n\n// ---------------------------------------------------------------------------\n// Opt-out check\n// ---------------------------------------------------------------------------\n\n/**\n * Returns `true` when auto-open is **disabled** via the `AIT_AUTO_DEVTOOLS`\n * env var. Only the explicit `\"0\"` value disables it; anything else (including\n * absent) leaves auto-open enabled.\n */\nexport function isAutoDevtoolsDisabled(): boolean {\n  return process.env.AIT_AUTO_DEVTOOLS === '0';\n}\n\n// ---------------------------------------------------------------------------\n// Browser open (Node-only, sync)\n// ---------------------------------------------------------------------------\n\n/**\n * Opens the given URL in the OS default browser using a platform-appropriate\n * command. Returns `true` on success.\n *\n * Failures are silent from the caller's perspective — the caller should log\n * the URL to stderr as a fallback before calling this function.\n */\nexport function openUrlInBrowser(url: string): boolean {\n  // Test hook: skip actual spawn when running in vitest / CI where the OS open\n  // command may hang or be absent. Production code never sets this.\n  if (process.env.AIT_AUTO_DEVTOOLS_TEST_SKIP_SPAWN === '1') return false;\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const { spawnSync } = require('node:child_process') as typeof import('node:child_process');\n  const platform = process.platform;\n\n  type Candidate = { cmd: string; args: string[] };\n  let candidates: Candidate[];\n  if (platform === 'darwin') {\n    candidates = [{ cmd: 'open', args: [url] }];\n  } else if (platform === 'win32') {\n    candidates = [{ cmd: 'cmd', args: ['/c', 'start', '', url] }];\n  } else {\n    // Linux + fallback\n    candidates = [\n      { cmd: 'xdg-open', args: [url] },\n      { cmd: 'sensible-browser', args: [url] },\n      { cmd: 'x-www-browser', args: [url] },\n    ];\n  }\n\n  for (const { cmd, args } of candidates) {\n    try {\n      const result = spawnSync(cmd, args, { encoding: 'utf8', timeout: 5_000 });\n      if (!result.error && result.status === 0) return true;\n    } catch {\n      // Try next candidate.\n    }\n  }\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// AutoDevtoolsOpener — stateful once-per-session open guard\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link AutoDevtoolsOpener.open}.\n *\n * The `relayHttpBaseUrl` and `targetId` fields are required to build a working\n * Chii self-hosted inspector URL. When `relayHttpBaseUrl` is absent the open\n * is skipped (no relay available yet).\n */\nexport interface DevtoolsOpenOptions {\n  /**\n   * Local HTTP base URL of the Chii relay, e.g. `http://127.0.0.1:9100`.\n   * Used to build the `<relay-base>/front_end/chii_app.html?wss=…` URL.\n   *\n   * For env 3/4 (intoss relay) this is `http://127.0.0.1:<port>`.\n   * For env 2 (external PWA relay) this is the relay's external HTTP URL\n   * (e.g. `https://<host>.trycloudflare.com`).\n   *\n   * When absent or empty, `open()` is a no-op.\n   *\n   * SECRET-HANDLING: this value contains the relay host. Callers MUST NOT\n   * log it to stdout; stderr is the intended surface.\n   */\n  relayHttpBaseUrl: string | null | undefined;\n  /**\n   * Chii target id of the attached page, from `listTargets()[0].id`.\n   * When absent or empty, `open()` is a no-op.\n   */\n  targetId: string | null | undefined;\n  /**\n   * Function that mints a fresh TOTP code when called. Called at most once per\n   * `open()` invocation, immediately before building the inspector URL.\n   *\n   * Pass `undefined` when TOTP is disabled (no `at=` param is added).\n   *\n   * SECRET-HANDLING: the function MUST return only the code (6 digits), not\n   * the secret. The code rides in the URL's `at=` param only.\n   */\n  mintTotp?: () => string;\n  /** Current MCP environment (`mock` | `relay`). `open()` no-ops on `mock`. */\n  env: McpEnvironment;\n}\n\n/**\n * Manages auto-opening Chrome DevTools exactly once per relay attach session.\n *\n * Create one instance per `runDebugServer` call and pass its `open()` method\n * as the `onFirstAttach` callback to `startAttachWatcher`.\n *\n * The open fires at most once. Subsequent `open()` calls are no-ops.\n * Opt-out and mock-environment guard are checked at call time.\n */\nexport class AutoDevtoolsOpener {\n  private _opened = false;\n\n  /**\n   * Attempts to auto-open Chii DevTools in the developer's browser.\n   *\n   * Builds a `<relay-base>/front_end/chii_app.html?wss=…` URL pointing at the\n   * attached target. A fresh TOTP `at=` code is minted at call time so the\n   * relay's WebSocket upgrade gate accepts the connection.\n   *\n   * No-op when any of the following conditions hold:\n   *   1. Already opened this session (`_opened` is true).\n   *   2. `AIT_AUTO_DEVTOOLS=0` opt-out is set.\n   *   3. `options.env` is `mock` (env 1 — F12 is already available).\n   *   4. `options.relayHttpBaseUrl` is null/undefined/empty (relay not up yet).\n   *   5. `options.targetId` is null/undefined/empty (no page attached yet).\n   *\n   * Always writes the DevTools URL to stderr so the developer can copy it\n   * if the browser open fails or the popup is blocked.\n   *\n   * TOTP expiry caveat: the `at=` code embedded in the URL is valid for ~3\n   * minutes (relay gate ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). The\n   * developer must open the URL within that window; if they miss it, reload\n   * the page or re-run `open()` (though the once-per-session guard prevents\n   * that — restart the MCP server if needed).\n   *\n   * SECRET-HANDLING: the inspector URL (written to stderr) contains the relay\n   * host and a short-lived TOTP code. Do NOT write it to stdout or any\n   * persistent log.\n   */\n  open(options: DevtoolsOpenOptions): void {\n    if (this._opened) return;\n    if (isAutoDevtoolsDisabled()) return;\n    if (options.env === 'mock') return;\n    if (!options.relayHttpBaseUrl) return;\n    if (!options.targetId) return;\n\n    this._opened = true;\n\n    const inspectorUrl = buildChiiInspectorUrl(\n      options.relayHttpBaseUrl,\n      options.targetId,\n      options.mintTotp,\n    );\n\n    // FAIL-CLOSED (#509): buildChiiInspectorUrl returns null when mintTotp is\n    // absent (no valid at= code → relay WS gate would reject the connection).\n    // Mark _opened so this once-per-session guard fires, but skip the browser\n    // open and stderr URL line — there is nothing useful to open.\n    if (inspectorUrl === null) {\n      process.stderr.write(\n        '[ait-debug] 기기가 연결됐습니다 — TOTP secret 미설정으로 인스펙터 URL을 생성할 수 없습니다.\\n' +\n          '[ait-debug] relay 세션은 AIT_DEBUG_TOTP_SECRET 설정이 필요합니다.\\n',\n      );\n      return;\n    }\n\n    process.stderr.write(\n      '[ait-debug] 기기가 연결됐습니다 — Chii DevTools를 자동으로 엽니다.\\n' +\n        `[ait-debug] DevTools URL: ${inspectorUrl}\\n` +\n        '[ait-debug] (AIT_AUTO_DEVTOOLS=0 으로 자동 열기를 끌 수 있습니다)\\n' +\n        '[ait-debug] 주의: URL의 at= 코드는 ~3분 안에서만 유효합니다.\\n',\n    );\n\n    const opened = openUrlInBrowser(inspectorUrl);\n    if (!opened) {\n      process.stderr.write(\n        '[ait-debug] 브라우저 자동 열기 실패 — 위 URL을 브라우저에서 직접 여세요.\\n',\n      );\n    }\n  }\n\n  /** Returns `true` if `open()` has passed all guards and fired once. */\n  get opened(): boolean {\n    return this._opened;\n  }\n}\n"],"mappings":";;;;;;;;;;AAqKA,SAAgB,yBAAkC;AAChD,QAAO,QAAQ,IAAI,sBAAsB;;;;;;;;;AAc3C,SAAgB,iBAAiB,KAAsB;AAGrD,KAAI,QAAQ,IAAI,sCAAsC,IAAK,QAAO;CAElE,MAAM,EAAE,cAAA,UAAsB,qBAAqB;CACnD,MAAM,WAAW,QAAQ;CAGzB,IAAI;AACJ,KAAI,aAAa,SACf,cAAa,CAAC;EAAE,KAAK;EAAQ,MAAM,CAAC,IAAI;EAAE,CAAC;UAClC,aAAa,QACtB,cAAa,CAAC;EAAE,KAAK;EAAO,MAAM;GAAC;GAAM;GAAS;GAAI;GAAI;EAAE,CAAC;KAG7D,cAAa;EACX;GAAE,KAAK;GAAY,MAAM,CAAC,IAAI;GAAE;EAChC;GAAE,KAAK;GAAoB,MAAM,CAAC,IAAI;GAAE;EACxC;GAAE,KAAK;GAAiB,MAAM,CAAC,IAAI;GAAE;EACtC;AAGH,MAAK,MAAM,EAAE,KAAK,UAAU,WAC1B,KAAI;EACF,MAAM,SAAS,UAAU,KAAK,MAAM;GAAE,UAAU;GAAQ,SAAS;GAAO,CAAC;AACzE,MAAI,CAAC,OAAO,SAAS,OAAO,WAAW,EAAG,QAAO;SAC3C;AAIV,QAAO"}

package/dist/devtools-opener-Bp671YXu.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-opener-Bp671YXu.cjs","names":[],"sources":["../src/mcp/devtools-opener.ts"],"sourcesContent":["/**\n * Auto-opens Chrome DevTools when a page attaches over the Chii relay.\n *\n * When a real device attaches (env 2 / 3 / 4 in the 4-environments fidelity\n * ladder), the Chii relay exposes a standard CDP WebSocket endpoint.  Chii\n * also self-hosts its DevTools frontend at:\n *\n *   <relay-base>/front_end/chii_app.html\n *     ?ws|wss=<encodeURIComponent(\"<relay-host>/client/<uuid>?target=<targetId>&at=<totp>\")>\n *\n * The param name follows the relay base scheme — `ws=` for plain HTTP\n * (env 3/4 local relay), `wss=` for HTTPS (env 2 tunnel) — matching the\n * scheme branch in chii/public/index.js.\n *\n * This is the same URL format that Chii's own index-page inspect-links use\n * (derived from `chii/public/index.js` — the JS that powers the target list\n * page at `<relay-base>/`).  Opening this URL in the developer's local browser\n * gives a full Chrome DevTools UI connected to the phone via the relay.\n *\n * IMPORTANT — environment guard:\n *   Auto-open only fires in relay environments (env 2 / 3 / 4). In env 1\n *   (local browser + mock SDK) the developer already has F12 available; opening\n *   a DevTools window pointing at the mock relay would be confusing and useless.\n *   The caller (`startAttachWatcher` in `debug-server.ts`) passes the current\n *   environment and this module bails out when it is `mock`.\n *\n * Opt-out: set `AIT_AUTO_DEVTOOLS=0` in the environment to suppress auto-open\n *   entirely. Any other value (or absent) enables the default behaviour.\n *\n * Duplicate-open guard:\n *   `AutoDevtoolsOpener` tracks whether open was already triggered for the\n *   current session. The open fires at most once per instance — typically one\n *   per `runDebugServer` call.\n *\n * TOTP expiry caveat:\n *   The `at=` TOTP code embedded in the `wss=` parameter is minted fresh at the\n *   moment `open()` is called. The code is valid for ~3 minutes (the relay gate\n *   accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). If the developer\n *   does not open the URL within that window the WebSocket upgrade will be\n *   rejected with 4401. In practice the browser opens immediately after the OS\n *   `open` command; if needed the developer can copy the wss= param, replace\n *   `at=`, and reload. This is documented in the JSDoc below.\n *\n * PWA (WebKit) caveat:\n *   The Chii relay injects a chobitsu CDP shim into WebKit-based runtimes (env 2\n *   AITC Sandbox PWA). The DevTools frontend will connect and most panels work.\n *   However, WebKit does not expose the full CDP domain set that V8/Blink does,\n *   so some panels (Network, Layers) may appear empty or show limited data.\n *   This is a WebKit runtime constraint, not a relay or devtools-opener issue.\n *\n * Node-only: uses `child_process.spawnSync` to invoke the OS open command.\n */\n\nimport type { McpEnvironment } from './environment.js';\n\n// ---------------------------------------------------------------------------\n// Chii self-hosted DevTools frontend URL\n// ---------------------------------------------------------------------------\n\n/**\n * Assembles the Chii self-hosted DevTools inspector URL for a given relay\n * and target.\n *\n * Chii serves its own DevTools frontend at\n * `<relayHttpBaseUrl>/front_end/chii_app.html`. The `ws=` (plain HTTP relay)\n * or `wss=` (HTTPS relay) query parameter is a URL-encoded string of the form\n * `<relay-host>/client/<uuid>?target=<id>` (and optionally `&at=<totp>`) —\n * the same format used by Chii's own target list page (derived from\n * `chii/public/index.js`).\n *\n * The `at=` TOTP code is minted at call time via `mintTotp()`.  It is valid\n * for ~3 minutes (relay gate accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps =\n * 180–210 s).  The developer must open the returned URL within that window.\n * If the window expires before the browser connects, the relay will reject the\n * WebSocket upgrade with close code 4401.\n *\n * SECRET-HANDLING: `mintTotp` returns a code, not a secret. The code is\n * embedded in the `wss=` parameter (inside the `at=` param) of the returned\n * URL. Callers MUST NOT log the returned URL to stdout (stderr is OK — it is\n * the intended fallback surface for the developer to copy the URL).\n *\n * @param relayHttpBaseUrl - Local HTTP base URL of the Chii relay, e.g.\n *   `http://127.0.0.1:9100`. No trailing slash.\n * @param targetId - Chii target id (from `GET <relay>/targets`).\n * @param mintTotp - Optional function that returns a fresh 6-digit TOTP code\n *   string. Called at most once. When omitted (TOTP disabled) no `at=` param\n *   is added.\n * @param panel - Initial panel. Defaults to `\"console\"`.\n *\n * @example\n * buildChiiInspectorUrl(\n *   'http://127.0.0.1:9100',\n *   'abc123',\n *   () => generateTotp(secret),\n * )\n * // → 'http://127.0.0.1:9100/front_end/chii_app.html?ws=127.0.0.1%3A9100%2Fclient%2F<uuid>%3Ftarget%3Dabc123%26at%3D<code>'\n */\nexport function buildChiiInspectorUrl(\n  relayHttpBaseUrl: string,\n  targetId: string,\n  mintTotp?: () => string,\n  panel: 'elements' | 'console' | 'sources' | 'network' = 'console',\n): string {\n  // Extract the host (and port) from the relay HTTP base URL, and pick the\n  // query param name chii_app.html expects: `ws=` dials `ws://` (plain-HTTP\n  // relay — env 3/4 local 127.0.0.1) while `wss=` dials `wss://` (HTTPS\n  // tunnel — env 2). chii/public/index.js does the same scheme branch:\n  // `location.protocol === 'https:' ? 'wss' : 'ws'`. Always sending `wss=`\n  // would make the frontend attempt TLS against the plain-HTTP local relay.\n  let relayHost: string;\n  let wsParamName: 'ws' | 'wss';\n  try {\n    const parsed = new URL(relayHttpBaseUrl);\n    relayHost = parsed.host; // e.g. \"127.0.0.1:9100\"\n    wsParamName = parsed.protocol === 'https:' ? 'wss' : 'ws';\n  } catch {\n    // Fallback: strip the scheme prefix manually if URL parsing fails.\n    relayHost = relayHttpBaseUrl.replace(/^https?:\\/\\//i, '');\n    wsParamName = /^https:/i.test(relayHttpBaseUrl) ? 'wss' : 'ws';\n  }\n\n  // Generate a client UUID that matches the format Chii's index.js uses\n  // (6 random alphanumeric characters).\n  const clientId = `devtools-opener-${Date.now().toString(36)}`;\n\n  // Build the ws=/wss= value: \"<relay-host>/client/<uuid>?target=<id>[&at=<code>]\"\n  // This mirrors the format from chii/public/index.js:\n  //   `${domain}${basePath}client/${randomId(6)}?target=${targetId}`\n  let wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}`;\n\n  if (mintTotp) {\n    // SECRET-HANDLING: mintTotp() returns a code (not a secret). The code\n    // rides only in the URL's at= param. Callers must not log the URL.\n    const code = mintTotp();\n    wsPath += `&at=${encodeURIComponent(code)}`;\n  }\n\n  const params = new URLSearchParams({ [wsParamName]: wsPath, panel });\n  return `${relayHttpBaseUrl.replace(/\\/$/, '')}/front_end/chii_app.html?${params.toString()}`;\n}\n\n// ---------------------------------------------------------------------------\n// Opt-out check\n// ---------------------------------------------------------------------------\n\n/**\n * Returns `true` when auto-open is **disabled** via the `AIT_AUTO_DEVTOOLS`\n * env var. Only the explicit `\"0\"` value disables it; anything else (including\n * absent) leaves auto-open enabled.\n */\nexport function isAutoDevtoolsDisabled(): boolean {\n  return process.env.AIT_AUTO_DEVTOOLS === '0';\n}\n\n// ---------------------------------------------------------------------------\n// Browser open (Node-only, sync)\n// ---------------------------------------------------------------------------\n\n/**\n * Opens the given URL in the OS default browser using a platform-appropriate\n * command. Returns `true` on success.\n *\n * Failures are silent from the caller's perspective — the caller should log\n * the URL to stderr as a fallback before calling this function.\n */\nexport function openUrlInBrowser(url: string): boolean {\n  // Test hook: skip actual spawn when running in vitest / CI where the OS open\n  // command may hang or be absent. Production code never sets this.\n  if (process.env.AIT_AUTO_DEVTOOLS_TEST_SKIP_SPAWN === '1') return false;\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const { spawnSync } = require('node:child_process') as typeof import('node:child_process');\n  const platform = process.platform;\n\n  type Candidate = { cmd: string; args: string[] };\n  let candidates: Candidate[];\n  if (platform === 'darwin') {\n    candidates = [{ cmd: 'open', args: [url] }];\n  } else if (platform === 'win32') {\n    candidates = [{ cmd: 'cmd', args: ['/c', 'start', '', url] }];\n  } else {\n    // Linux + fallback\n    candidates = [\n      { cmd: 'xdg-open', args: [url] },\n      { cmd: 'sensible-browser', args: [url] },\n      { cmd: 'x-www-browser', args: [url] },\n    ];\n  }\n\n  for (const { cmd, args } of candidates) {\n    try {\n      const result = spawnSync(cmd, args, { encoding: 'utf8', timeout: 5_000 });\n      if (!result.error && result.status === 0) return true;\n    } catch {\n      // Try next candidate.\n    }\n  }\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// AutoDevtoolsOpener — stateful once-per-session open guard\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link AutoDevtoolsOpener.open}.\n *\n * The `relayHttpBaseUrl` and `targetId` fields are required to build a working\n * Chii self-hosted inspector URL. When `relayHttpBaseUrl` is absent the open\n * is skipped (no relay available yet).\n */\nexport interface DevtoolsOpenOptions {\n  /**\n   * Local HTTP base URL of the Chii relay, e.g. `http://127.0.0.1:9100`.\n   * Used to build the `<relay-base>/front_end/chii_app.html?wss=…` URL.\n   *\n   * For env 3/4 (intoss relay) this is `http://127.0.0.1:<port>`.\n   * For env 2 (external PWA relay) this is the relay's external HTTP URL\n   * (e.g. `https://<host>.trycloudflare.com`).\n   *\n   * When absent or empty, `open()` is a no-op.\n   *\n   * SECRET-HANDLING: this value contains the relay host. Callers MUST NOT\n   * log it to stdout; stderr is the intended surface.\n   */\n  relayHttpBaseUrl: string | null | undefined;\n  /**\n   * Chii target id of the attached page, from `listTargets()[0].id`.\n   * When absent or empty, `open()` is a no-op.\n   */\n  targetId: string | null | undefined;\n  /**\n   * Function that mints a fresh TOTP code when called. Called at most once per\n   * `open()` invocation, immediately before building the inspector URL.\n   *\n   * Pass `undefined` when TOTP is disabled (no `at=` param is added).\n   *\n   * SECRET-HANDLING: the function MUST return only the code (6 digits), not\n   * the secret. The code rides in the URL's `at=` param only.\n   */\n  mintTotp?: () => string;\n  /** Current MCP environment (`mock` | `relay`). `open()` no-ops on `mock`. */\n  env: McpEnvironment;\n}\n\n/**\n * Manages auto-opening Chrome DevTools exactly once per relay attach session.\n *\n * Create one instance per `runDebugServer` call and pass its `open()` method\n * as the `onFirstAttach` callback to `startAttachWatcher`.\n *\n * The open fires at most once. Subsequent `open()` calls are no-ops.\n * Opt-out and mock-environment guard are checked at call time.\n */\nexport class AutoDevtoolsOpener {\n  private _opened = false;\n\n  /**\n   * Attempts to auto-open Chii DevTools in the developer's browser.\n   *\n   * Builds a `<relay-base>/front_end/chii_app.html?wss=…` URL pointing at the\n   * attached target. A fresh TOTP `at=` code is minted at call time so the\n   * relay's WebSocket upgrade gate accepts the connection.\n   *\n   * No-op when any of the following conditions hold:\n   *   1. Already opened this session (`_opened` is true).\n   *   2. `AIT_AUTO_DEVTOOLS=0` opt-out is set.\n   *   3. `options.env` is `mock` (env 1 — F12 is already available).\n   *   4. `options.relayHttpBaseUrl` is null/undefined/empty (relay not up yet).\n   *   5. `options.targetId` is null/undefined/empty (no page attached yet).\n   *\n   * Always writes the DevTools URL to stderr so the developer can copy it\n   * if the browser open fails or the popup is blocked.\n   *\n   * TOTP expiry caveat: the `at=` code embedded in the URL is valid for ~3\n   * minutes (relay gate ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). The\n   * developer must open the URL within that window; if they miss it, reload\n   * the page or re-run `open()` (though the once-per-session guard prevents\n   * that — restart the MCP server if needed).\n   *\n   * SECRET-HANDLING: the inspector URL (written to stderr) contains the relay\n   * host and a short-lived TOTP code. Do NOT write it to stdout or any\n   * persistent log.\n   */\n  open(options: DevtoolsOpenOptions): void {\n    if (this._opened) return;\n    if (isAutoDevtoolsDisabled()) return;\n    if (options.env === 'mock') return;\n    if (!options.relayHttpBaseUrl) return;\n    if (!options.targetId) return;\n\n    this._opened = true;\n\n    const inspectorUrl = buildChiiInspectorUrl(\n      options.relayHttpBaseUrl,\n      options.targetId,\n      options.mintTotp,\n    );\n\n    process.stderr.write(\n      '[ait-debug] 기기가 연결됐습니다 — Chii DevTools를 자동으로 엽니다.\\n' +\n        `[ait-debug] DevTools URL: ${inspectorUrl}\\n` +\n        '[ait-debug] (AIT_AUTO_DEVTOOLS=0 으로 자동 열기를 끌 수 있습니다)\\n' +\n        '[ait-debug] 주의: URL의 at= 코드는 ~3분 안에서만 유효합니다.\\n',\n    );\n\n    const opened = openUrlInBrowser(inspectorUrl);\n    if (!opened) {\n      process.stderr.write(\n        '[ait-debug] 브라우저 자동 열기 실패 — 위 URL을 브라우저에서 직접 여세요.\\n',\n      );\n    }\n  }\n\n  /** Returns `true` if `open()` has passed all guards and fired once. */\n  get opened(): boolean {\n    return this._opened;\n  }\n}\n"],"mappings":";;;;;;AAsJA,SAAgB,yBAAkC;AAChD,QAAO,QAAQ,IAAI,sBAAsB;;;;;;;;;AAc3C,SAAgB,iBAAiB,KAAsB;AAGrD,KAAI,QAAQ,IAAI,sCAAsC,IAAK,QAAO;CAElE,MAAM,EAAE,cAAc,QAAQ,qBAAqB;CACnD,MAAM,WAAW,QAAQ;CAGzB,IAAI;AACJ,KAAI,aAAa,SACf,cAAa,CAAC;EAAE,KAAK;EAAQ,MAAM,CAAC,IAAI;EAAE,CAAC;UAClC,aAAa,QACtB,cAAa,CAAC;EAAE,KAAK;EAAO,MAAM;GAAC;GAAM;GAAS;GAAI;GAAI;EAAE,CAAC;KAG7D,cAAa;EACX;GAAE,KAAK;GAAY,MAAM,CAAC,IAAI;GAAE;EAChC;GAAE,KAAK;GAAoB,MAAM,CAAC,IAAI;GAAE;EACxC;GAAE,KAAK;GAAiB,MAAM,CAAC,IAAI;GAAE;EACtC;AAGH,MAAK,MAAM,EAAE,KAAK,UAAU,WAC1B,KAAI;EACF,MAAM,SAAS,UAAU,KAAK,MAAM;GAAE,UAAU;GAAQ,SAAS;GAAO,CAAC;AACzE,MAAI,CAAC,OAAO,SAAS,OAAO,WAAW,EAAG,QAAO;SAC3C;AAIV,QAAO"}
+{"version":3,"file":"devtools-opener-Bp671YXu.cjs","names":[],"sources":["../src/mcp/devtools-opener.ts"],"sourcesContent":["/**\n * Auto-opens Chrome DevTools when a page attaches over the Chii relay.\n *\n * When a real device attaches (env 2 / 3 / 4 in the 4-environments fidelity\n * ladder), the Chii relay exposes a standard CDP WebSocket endpoint.  Chii\n * also self-hosts its DevTools frontend at:\n *\n *   <relay-base>/front_end/chii_app.html\n *     ?ws|wss=<encodeURIComponent(\"<relay-host>/client/<uuid>?target=<targetId>&at=<totp>\")>\n *\n * The param name follows the relay base scheme — `ws=` for plain HTTP\n * (env 3/4 local relay), `wss=` for HTTPS (env 2 tunnel) — matching the\n * scheme branch in chii/public/index.js.\n *\n * This is the same URL format that Chii's own index-page inspect-links use\n * (derived from `chii/public/index.js` — the JS that powers the target list\n * page at `<relay-base>/`).  Opening this URL in the developer's local browser\n * gives a full Chrome DevTools UI connected to the phone via the relay.\n *\n * IMPORTANT — environment guard:\n *   Auto-open only fires in relay environments (env 2 / 3 / 4). In env 1\n *   (local browser + mock SDK) the developer already has F12 available; opening\n *   a DevTools window pointing at the mock relay would be confusing and useless.\n *   The caller (`startAttachWatcher` in `debug-server.ts`) passes the current\n *   environment and this module bails out when it is `mock`.\n *\n * Opt-out: set `AIT_AUTO_DEVTOOLS=0` in the environment to suppress auto-open\n *   entirely. Any other value (or absent) enables the default behaviour.\n *\n * Duplicate-open guard:\n *   `AutoDevtoolsOpener` tracks whether open was already triggered for the\n *   current session. The open fires at most once per instance — typically one\n *   per `runDebugServer` call.\n *\n * TOTP expiry caveat:\n *   The `at=` TOTP code embedded in the `wss=` parameter is minted fresh at the\n *   moment `open()` is called. The code is valid for ~3 minutes (the relay gate\n *   accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). If the developer\n *   does not open the URL within that window the WebSocket upgrade will be\n *   rejected with 4401. In practice the browser opens immediately after the OS\n *   `open` command; if needed the developer can copy the wss= param, replace\n *   `at=`, and reload. This is documented in the JSDoc below.\n *\n * PWA (WebKit) caveat:\n *   The Chii relay injects a chobitsu CDP shim into WebKit-based runtimes (env 2\n *   AITC Sandbox PWA). The DevTools frontend will connect and most panels work.\n *   However, WebKit does not expose the full CDP domain set that V8/Blink does,\n *   so some panels (Network, Layers) may appear empty or show limited data.\n *   This is a WebKit runtime constraint, not a relay or devtools-opener issue.\n *\n * Node-only: uses `child_process.spawnSync` to invoke the OS open command.\n */\n\nimport type { McpEnvironment } from './environment.js';\n\n// ---------------------------------------------------------------------------\n// Chii self-hosted DevTools frontend URL\n// ---------------------------------------------------------------------------\n\n/**\n * Assembles the Chii self-hosted DevTools inspector URL for a given relay\n * and target.\n *\n * Chii serves its own DevTools frontend at\n * `<relayHttpBaseUrl>/front_end/chii_app.html`. The `ws=` (plain HTTP relay)\n * or `wss=` (HTTPS relay) query parameter is a URL-encoded string of the form\n * `<relay-host>/client/<uuid>?target=<id>&at=<totp>` — the same format used\n * by Chii's own target list page (derived from `chii/public/index.js`).\n *\n * The `at=` TOTP code is minted at call time via `mintTotp()`.  It is valid\n * for ~3 minutes (relay gate accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps =\n * 180–210 s).  The developer must open the returned URL within that window.\n * If the window expires before the browser connects, the relay will reject the\n * WebSocket upgrade with close code 4401.\n *\n * FAIL-CLOSED (issue #509): `mintTotp` is REQUIRED.  When omitted (i.e.\n * `undefined`), this function returns `null` — the caller must treat `null` as\n * \"inspector not yet available\" and show a waiting hint instead of a broken\n * link. Relay sessions gate every WS upgrade with TOTP (#452), so a URL built\n * without `at=` would be rejected with WS 4401 immediately — there is no\n * non-TOTP relay path in production. Returning `null` surfaces this cleanly as\n * a \"TOTP not yet configured\" state rather than silently producing a URL that\n * will always fail at the WS handshake.\n *\n * SECRET-HANDLING: `mintTotp` returns a code, not a secret. The code is\n * embedded in the `wss=` parameter (inside the `at=` param) of the returned\n * URL. Callers MUST NOT log the returned URL to stdout (stderr is OK — it is\n * the intended fallback surface for the developer to copy the URL).\n *\n * @param relayHttpBaseUrl - Local HTTP base URL of the Chii relay, e.g.\n *   `http://127.0.0.1:9100`. No trailing slash.\n * @param targetId - Chii target id (from `GET <relay>/targets`).\n * @param mintTotp - Function that returns a fresh 6-digit TOTP code string.\n *   Called at most once. **Required** — when `undefined`, the function returns\n *   `null` (fail-closed: no `at=` param means the relay WS gate rejects the\n *   handshake, so a null result is safer than a URL that always 404s).\n * @param panel - Initial panel. Defaults to `\"console\"`.\n *\n * @returns The inspector URL string, or `null` when `mintTotp` is absent.\n *\n * @example\n * buildChiiInspectorUrl(\n *   'http://127.0.0.1:9100',\n *   'abc123',\n *   () => generateTotp(secret),\n * )\n * // → 'http://127.0.0.1:9100/front_end/chii_app.html?ws=127.0.0.1%3A9100%2Fclient%2F<uuid>%3Ftarget%3Dabc123%26at%3D<code>'\n */\nexport function buildChiiInspectorUrl(\n  relayHttpBaseUrl: string,\n  targetId: string,\n  mintTotp?: () => string,\n  panel: 'elements' | 'console' | 'sources' | 'network' = 'console',\n): string | null {\n  // FAIL-CLOSED (#509): relay sessions require TOTP for every WS upgrade.\n  // Without a mintTotp function we cannot produce a valid at= code, so we\n  // return null rather than a URL that will always be rejected by the relay gate\n  // with WS 4401 / HTTP 404. Callers show a \"waiting\" hint when they get null.\n  if (!mintTotp) {\n    return null;\n  }\n\n  // Extract the host (and port) from the relay HTTP base URL, and pick the\n  // query param name chii_app.html expects: `ws=` dials `ws://` (plain-HTTP\n  // relay — env 3/4 local 127.0.0.1) while `wss=` dials `wss://` (HTTPS\n  // tunnel — env 2). chii/public/index.js does the same scheme branch:\n  // `location.protocol === 'https:' ? 'wss' : 'ws'`. Always sending `wss=`\n  // would make the frontend attempt TLS against the plain-HTTP local relay.\n  let relayHost: string;\n  let wsParamName: 'ws' | 'wss';\n  try {\n    const parsed = new URL(relayHttpBaseUrl);\n    relayHost = parsed.host; // e.g. \"127.0.0.1:9100\"\n    wsParamName = parsed.protocol === 'https:' ? 'wss' : 'ws';\n  } catch {\n    // Fallback: strip the scheme prefix manually if URL parsing fails.\n    relayHost = relayHttpBaseUrl.replace(/^https?:\\/\\//i, '');\n    wsParamName = /^https:/i.test(relayHttpBaseUrl) ? 'wss' : 'ws';\n  }\n\n  // Generate a client UUID that matches the format Chii's index.js uses\n  // (6 random alphanumeric characters).\n  const clientId = `devtools-opener-${Date.now().toString(36)}`;\n\n  // Build the ws=/wss= value: \"<relay-host>/client/<uuid>?target=<id>&at=<code>\"\n  // This mirrors the format from chii/public/index.js:\n  //   `${domain}${basePath}client/${randomId(6)}?target=${targetId}`\n  // SECRET-HANDLING: mintTotp() returns a code (not a secret). The code\n  // rides only in the URL's at= param. Callers must not log the URL.\n  const code = mintTotp();\n  const wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}&at=${encodeURIComponent(code)}`;\n\n  const params = new URLSearchParams({ [wsParamName]: wsPath, panel });\n  return `${relayHttpBaseUrl.replace(/\\/$/, '')}/front_end/chii_app.html?${params.toString()}`;\n}\n\n// ---------------------------------------------------------------------------\n// Opt-out check\n// ---------------------------------------------------------------------------\n\n/**\n * Returns `true` when auto-open is **disabled** via the `AIT_AUTO_DEVTOOLS`\n * env var. Only the explicit `\"0\"` value disables it; anything else (including\n * absent) leaves auto-open enabled.\n */\nexport function isAutoDevtoolsDisabled(): boolean {\n  return process.env.AIT_AUTO_DEVTOOLS === '0';\n}\n\n// ---------------------------------------------------------------------------\n// Browser open (Node-only, sync)\n// ---------------------------------------------------------------------------\n\n/**\n * Opens the given URL in the OS default browser using a platform-appropriate\n * command. Returns `true` on success.\n *\n * Failures are silent from the caller's perspective — the caller should log\n * the URL to stderr as a fallback before calling this function.\n */\nexport function openUrlInBrowser(url: string): boolean {\n  // Test hook: skip actual spawn when running in vitest / CI where the OS open\n  // command may hang or be absent. Production code never sets this.\n  if (process.env.AIT_AUTO_DEVTOOLS_TEST_SKIP_SPAWN === '1') return false;\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const { spawnSync } = require('node:child_process') as typeof import('node:child_process');\n  const platform = process.platform;\n\n  type Candidate = { cmd: string; args: string[] };\n  let candidates: Candidate[];\n  if (platform === 'darwin') {\n    candidates = [{ cmd: 'open', args: [url] }];\n  } else if (platform === 'win32') {\n    candidates = [{ cmd: 'cmd', args: ['/c', 'start', '', url] }];\n  } else {\n    // Linux + fallback\n    candidates = [\n      { cmd: 'xdg-open', args: [url] },\n      { cmd: 'sensible-browser', args: [url] },\n      { cmd: 'x-www-browser', args: [url] },\n    ];\n  }\n\n  for (const { cmd, args } of candidates) {\n    try {\n      const result = spawnSync(cmd, args, { encoding: 'utf8', timeout: 5_000 });\n      if (!result.error && result.status === 0) return true;\n    } catch {\n      // Try next candidate.\n    }\n  }\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// AutoDevtoolsOpener — stateful once-per-session open guard\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link AutoDevtoolsOpener.open}.\n *\n * The `relayHttpBaseUrl` and `targetId` fields are required to build a working\n * Chii self-hosted inspector URL. When `relayHttpBaseUrl` is absent the open\n * is skipped (no relay available yet).\n */\nexport interface DevtoolsOpenOptions {\n  /**\n   * Local HTTP base URL of the Chii relay, e.g. `http://127.0.0.1:9100`.\n   * Used to build the `<relay-base>/front_end/chii_app.html?wss=…` URL.\n   *\n   * For env 3/4 (intoss relay) this is `http://127.0.0.1:<port>`.\n   * For env 2 (external PWA relay) this is the relay's external HTTP URL\n   * (e.g. `https://<host>.trycloudflare.com`).\n   *\n   * When absent or empty, `open()` is a no-op.\n   *\n   * SECRET-HANDLING: this value contains the relay host. Callers MUST NOT\n   * log it to stdout; stderr is the intended surface.\n   */\n  relayHttpBaseUrl: string | null | undefined;\n  /**\n   * Chii target id of the attached page, from `listTargets()[0].id`.\n   * When absent or empty, `open()` is a no-op.\n   */\n  targetId: string | null | undefined;\n  /**\n   * Function that mints a fresh TOTP code when called. Called at most once per\n   * `open()` invocation, immediately before building the inspector URL.\n   *\n   * Pass `undefined` when TOTP is disabled (no `at=` param is added).\n   *\n   * SECRET-HANDLING: the function MUST return only the code (6 digits), not\n   * the secret. The code rides in the URL's `at=` param only.\n   */\n  mintTotp?: () => string;\n  /** Current MCP environment (`mock` | `relay`). `open()` no-ops on `mock`. */\n  env: McpEnvironment;\n}\n\n/**\n * Manages auto-opening Chrome DevTools exactly once per relay attach session.\n *\n * Create one instance per `runDebugServer` call and pass its `open()` method\n * as the `onFirstAttach` callback to `startAttachWatcher`.\n *\n * The open fires at most once. Subsequent `open()` calls are no-ops.\n * Opt-out and mock-environment guard are checked at call time.\n */\nexport class AutoDevtoolsOpener {\n  private _opened = false;\n\n  /**\n   * Attempts to auto-open Chii DevTools in the developer's browser.\n   *\n   * Builds a `<relay-base>/front_end/chii_app.html?wss=…` URL pointing at the\n   * attached target. A fresh TOTP `at=` code is minted at call time so the\n   * relay's WebSocket upgrade gate accepts the connection.\n   *\n   * No-op when any of the following conditions hold:\n   *   1. Already opened this session (`_opened` is true).\n   *   2. `AIT_AUTO_DEVTOOLS=0` opt-out is set.\n   *   3. `options.env` is `mock` (env 1 — F12 is already available).\n   *   4. `options.relayHttpBaseUrl` is null/undefined/empty (relay not up yet).\n   *   5. `options.targetId` is null/undefined/empty (no page attached yet).\n   *\n   * Always writes the DevTools URL to stderr so the developer can copy it\n   * if the browser open fails or the popup is blocked.\n   *\n   * TOTP expiry caveat: the `at=` code embedded in the URL is valid for ~3\n   * minutes (relay gate ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). The\n   * developer must open the URL within that window; if they miss it, reload\n   * the page or re-run `open()` (though the once-per-session guard prevents\n   * that — restart the MCP server if needed).\n   *\n   * SECRET-HANDLING: the inspector URL (written to stderr) contains the relay\n   * host and a short-lived TOTP code. Do NOT write it to stdout or any\n   * persistent log.\n   */\n  open(options: DevtoolsOpenOptions): void {\n    if (this._opened) return;\n    if (isAutoDevtoolsDisabled()) return;\n    if (options.env === 'mock') return;\n    if (!options.relayHttpBaseUrl) return;\n    if (!options.targetId) return;\n\n    this._opened = true;\n\n    const inspectorUrl = buildChiiInspectorUrl(\n      options.relayHttpBaseUrl,\n      options.targetId,\n      options.mintTotp,\n    );\n\n    // FAIL-CLOSED (#509): buildChiiInspectorUrl returns null when mintTotp is\n    // absent (no valid at= code → relay WS gate would reject the connection).\n    // Mark _opened so this once-per-session guard fires, but skip the browser\n    // open and stderr URL line — there is nothing useful to open.\n    if (inspectorUrl === null) {\n      process.stderr.write(\n        '[ait-debug] 기기가 연결됐습니다 — TOTP secret 미설정으로 인스펙터 URL을 생성할 수 없습니다.\\n' +\n          '[ait-debug] relay 세션은 AIT_DEBUG_TOTP_SECRET 설정이 필요합니다.\\n',\n      );\n      return;\n    }\n\n    process.stderr.write(\n      '[ait-debug] 기기가 연결됐습니다 — Chii DevTools를 자동으로 엽니다.\\n' +\n        `[ait-debug] DevTools URL: ${inspectorUrl}\\n` +\n        '[ait-debug] (AIT_AUTO_DEVTOOLS=0 으로 자동 열기를 끌 수 있습니다)\\n' +\n        '[ait-debug] 주의: URL의 at= 코드는 ~3분 안에서만 유효합니다.\\n',\n    );\n\n    const opened = openUrlInBrowser(inspectorUrl);\n    if (!opened) {\n      process.stderr.write(\n        '[ait-debug] 브라우저 자동 열기 실패 — 위 URL을 브라우저에서 직접 여세요.\\n',\n      );\n    }\n  }\n\n  /** Returns `true` if `open()` has passed all guards and fired once. */\n  get opened(): boolean {\n    return this._opened;\n  }\n}\n"],"mappings":";;;;;;AAqKA,SAAgB,yBAAkC;AAChD,QAAO,QAAQ,IAAI,sBAAsB;;;;;;;;;AAc3C,SAAgB,iBAAiB,KAAsB;AAGrD,KAAI,QAAQ,IAAI,sCAAsC,IAAK,QAAO;CAElE,MAAM,EAAE,cAAc,QAAQ,qBAAqB;CACnD,MAAM,WAAW,QAAQ;CAGzB,IAAI;AACJ,KAAI,aAAa,SACf,cAAa,CAAC;EAAE,KAAK;EAAQ,MAAM,CAAC,IAAI;EAAE,CAAC;UAClC,aAAa,QACtB,cAAa,CAAC;EAAE,KAAK;EAAO,MAAM;GAAC;GAAM;GAAS;GAAI;GAAI;EAAE,CAAC;KAG7D,cAAa;EACX;GAAE,KAAK;GAAY,MAAM,CAAC,IAAI;GAAE;EAChC;GAAE,KAAK;GAAoB,MAAM,CAAC,IAAI;GAAE;EACxC;GAAE,KAAK;GAAiB,MAAM,CAAC,IAAI;GAAE;EACtC;AAGH,MAAK,MAAM,EAAE,KAAK,UAAU,WAC1B,KAAI;EACF,MAAM,SAAS,UAAU,KAAK,MAAM;GAAE,UAAU;GAAQ,SAAS;GAAO,CAAC;AACzE,MAAI,CAAC,OAAO,SAAS,OAAO,WAAW,EAAG,QAAO;SAC3C;AAIV,QAAO"}

package/dist/devtools-opener-D84kZFtR.js.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-opener-D84kZFtR.js","names":[],"sources":["../src/mcp/devtools-opener.ts"],"sourcesContent":["/**\n * Auto-opens Chrome DevTools when a page attaches over the Chii relay.\n *\n * When a real device attaches (env 2 / 3 / 4 in the 4-environments fidelity\n * ladder), the Chii relay exposes a standard CDP WebSocket endpoint.  Chii\n * also self-hosts its DevTools frontend at:\n *\n *   <relay-base>/front_end/chii_app.html\n *     ?ws|wss=<encodeURIComponent(\"<relay-host>/client/<uuid>?target=<targetId>&at=<totp>\")>\n *\n * The param name follows the relay base scheme — `ws=` for plain HTTP\n * (env 3/4 local relay), `wss=` for HTTPS (env 2 tunnel) — matching the\n * scheme branch in chii/public/index.js.\n *\n * This is the same URL format that Chii's own index-page inspect-links use\n * (derived from `chii/public/index.js` — the JS that powers the target list\n * page at `<relay-base>/`).  Opening this URL in the developer's local browser\n * gives a full Chrome DevTools UI connected to the phone via the relay.\n *\n * IMPORTANT — environment guard:\n *   Auto-open only fires in relay environments (env 2 / 3 / 4). In env 1\n *   (local browser + mock SDK) the developer already has F12 available; opening\n *   a DevTools window pointing at the mock relay would be confusing and useless.\n *   The caller (`startAttachWatcher` in `debug-server.ts`) passes the current\n *   environment and this module bails out when it is `mock`.\n *\n * Opt-out: set `AIT_AUTO_DEVTOOLS=0` in the environment to suppress auto-open\n *   entirely. Any other value (or absent) enables the default behaviour.\n *\n * Duplicate-open guard:\n *   `AutoDevtoolsOpener` tracks whether open was already triggered for the\n *   current session. The open fires at most once per instance — typically one\n *   per `runDebugServer` call.\n *\n * TOTP expiry caveat:\n *   The `at=` TOTP code embedded in the `wss=` parameter is minted fresh at the\n *   moment `open()` is called. The code is valid for ~3 minutes (the relay gate\n *   accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). If the developer\n *   does not open the URL within that window the WebSocket upgrade will be\n *   rejected with 4401. In practice the browser opens immediately after the OS\n *   `open` command; if needed the developer can copy the wss= param, replace\n *   `at=`, and reload. This is documented in the JSDoc below.\n *\n * PWA (WebKit) caveat:\n *   The Chii relay injects a chobitsu CDP shim into WebKit-based runtimes (env 2\n *   AITC Sandbox PWA). The DevTools frontend will connect and most panels work.\n *   However, WebKit does not expose the full CDP domain set that V8/Blink does,\n *   so some panels (Network, Layers) may appear empty or show limited data.\n *   This is a WebKit runtime constraint, not a relay or devtools-opener issue.\n *\n * Node-only: uses `child_process.spawnSync` to invoke the OS open command.\n */\n\nimport type { McpEnvironment } from './environment.js';\n\n// ---------------------------------------------------------------------------\n// Chii self-hosted DevTools frontend URL\n// ---------------------------------------------------------------------------\n\n/**\n * Assembles the Chii self-hosted DevTools inspector URL for a given relay\n * and target.\n *\n * Chii serves its own DevTools frontend at\n * `<relayHttpBaseUrl>/front_end/chii_app.html`. The `ws=` (plain HTTP relay)\n * or `wss=` (HTTPS relay) query parameter is a URL-encoded string of the form\n * `<relay-host>/client/<uuid>?target=<id>` (and optionally `&at=<totp>`) —\n * the same format used by Chii's own target list page (derived from\n * `chii/public/index.js`).\n *\n * The `at=` TOTP code is minted at call time via `mintTotp()`.  It is valid\n * for ~3 minutes (relay gate accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps =\n * 180–210 s).  The developer must open the returned URL within that window.\n * If the window expires before the browser connects, the relay will reject the\n * WebSocket upgrade with close code 4401.\n *\n * SECRET-HANDLING: `mintTotp` returns a code, not a secret. The code is\n * embedded in the `wss=` parameter (inside the `at=` param) of the returned\n * URL. Callers MUST NOT log the returned URL to stdout (stderr is OK — it is\n * the intended fallback surface for the developer to copy the URL).\n *\n * @param relayHttpBaseUrl - Local HTTP base URL of the Chii relay, e.g.\n *   `http://127.0.0.1:9100`. No trailing slash.\n * @param targetId - Chii target id (from `GET <relay>/targets`).\n * @param mintTotp - Optional function that returns a fresh 6-digit TOTP code\n *   string. Called at most once. When omitted (TOTP disabled) no `at=` param\n *   is added.\n * @param panel - Initial panel. Defaults to `\"console\"`.\n *\n * @example\n * buildChiiInspectorUrl(\n *   'http://127.0.0.1:9100',\n *   'abc123',\n *   () => generateTotp(secret),\n * )\n * // → 'http://127.0.0.1:9100/front_end/chii_app.html?ws=127.0.0.1%3A9100%2Fclient%2F<uuid>%3Ftarget%3Dabc123%26at%3D<code>'\n */\nexport function buildChiiInspectorUrl(\n  relayHttpBaseUrl: string,\n  targetId: string,\n  mintTotp?: () => string,\n  panel: 'elements' | 'console' | 'sources' | 'network' = 'console',\n): string {\n  // Extract the host (and port) from the relay HTTP base URL, and pick the\n  // query param name chii_app.html expects: `ws=` dials `ws://` (plain-HTTP\n  // relay — env 3/4 local 127.0.0.1) while `wss=` dials `wss://` (HTTPS\n  // tunnel — env 2). chii/public/index.js does the same scheme branch:\n  // `location.protocol === 'https:' ? 'wss' : 'ws'`. Always sending `wss=`\n  // would make the frontend attempt TLS against the plain-HTTP local relay.\n  let relayHost: string;\n  let wsParamName: 'ws' | 'wss';\n  try {\n    const parsed = new URL(relayHttpBaseUrl);\n    relayHost = parsed.host; // e.g. \"127.0.0.1:9100\"\n    wsParamName = parsed.protocol === 'https:' ? 'wss' : 'ws';\n  } catch {\n    // Fallback: strip the scheme prefix manually if URL parsing fails.\n    relayHost = relayHttpBaseUrl.replace(/^https?:\\/\\//i, '');\n    wsParamName = /^https:/i.test(relayHttpBaseUrl) ? 'wss' : 'ws';\n  }\n\n  // Generate a client UUID that matches the format Chii's index.js uses\n  // (6 random alphanumeric characters).\n  const clientId = `devtools-opener-${Date.now().toString(36)}`;\n\n  // Build the ws=/wss= value: \"<relay-host>/client/<uuid>?target=<id>[&at=<code>]\"\n  // This mirrors the format from chii/public/index.js:\n  //   `${domain}${basePath}client/${randomId(6)}?target=${targetId}`\n  let wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}`;\n\n  if (mintTotp) {\n    // SECRET-HANDLING: mintTotp() returns a code (not a secret). The code\n    // rides only in the URL's at= param. Callers must not log the URL.\n    const code = mintTotp();\n    wsPath += `&at=${encodeURIComponent(code)}`;\n  }\n\n  const params = new URLSearchParams({ [wsParamName]: wsPath, panel });\n  return `${relayHttpBaseUrl.replace(/\\/$/, '')}/front_end/chii_app.html?${params.toString()}`;\n}\n\n// ---------------------------------------------------------------------------\n// Opt-out check\n// ---------------------------------------------------------------------------\n\n/**\n * Returns `true` when auto-open is **disabled** via the `AIT_AUTO_DEVTOOLS`\n * env var. Only the explicit `\"0\"` value disables it; anything else (including\n * absent) leaves auto-open enabled.\n */\nexport function isAutoDevtoolsDisabled(): boolean {\n  return process.env.AIT_AUTO_DEVTOOLS === '0';\n}\n\n// ---------------------------------------------------------------------------\n// Browser open (Node-only, sync)\n// ---------------------------------------------------------------------------\n\n/**\n * Opens the given URL in the OS default browser using a platform-appropriate\n * command. Returns `true` on success.\n *\n * Failures are silent from the caller's perspective — the caller should log\n * the URL to stderr as a fallback before calling this function.\n */\nexport function openUrlInBrowser(url: string): boolean {\n  // Test hook: skip actual spawn when running in vitest / CI where the OS open\n  // command may hang or be absent. Production code never sets this.\n  if (process.env.AIT_AUTO_DEVTOOLS_TEST_SKIP_SPAWN === '1') return false;\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const { spawnSync } = require('node:child_process') as typeof import('node:child_process');\n  const platform = process.platform;\n\n  type Candidate = { cmd: string; args: string[] };\n  let candidates: Candidate[];\n  if (platform === 'darwin') {\n    candidates = [{ cmd: 'open', args: [url] }];\n  } else if (platform === 'win32') {\n    candidates = [{ cmd: 'cmd', args: ['/c', 'start', '', url] }];\n  } else {\n    // Linux + fallback\n    candidates = [\n      { cmd: 'xdg-open', args: [url] },\n      { cmd: 'sensible-browser', args: [url] },\n      { cmd: 'x-www-browser', args: [url] },\n    ];\n  }\n\n  for (const { cmd, args } of candidates) {\n    try {\n      const result = spawnSync(cmd, args, { encoding: 'utf8', timeout: 5_000 });\n      if (!result.error && result.status === 0) return true;\n    } catch {\n      // Try next candidate.\n    }\n  }\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// AutoDevtoolsOpener — stateful once-per-session open guard\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link AutoDevtoolsOpener.open}.\n *\n * The `relayHttpBaseUrl` and `targetId` fields are required to build a working\n * Chii self-hosted inspector URL. When `relayHttpBaseUrl` is absent the open\n * is skipped (no relay available yet).\n */\nexport interface DevtoolsOpenOptions {\n  /**\n   * Local HTTP base URL of the Chii relay, e.g. `http://127.0.0.1:9100`.\n   * Used to build the `<relay-base>/front_end/chii_app.html?wss=…` URL.\n   *\n   * For env 3/4 (intoss relay) this is `http://127.0.0.1:<port>`.\n   * For env 2 (external PWA relay) this is the relay's external HTTP URL\n   * (e.g. `https://<host>.trycloudflare.com`).\n   *\n   * When absent or empty, `open()` is a no-op.\n   *\n   * SECRET-HANDLING: this value contains the relay host. Callers MUST NOT\n   * log it to stdout; stderr is the intended surface.\n   */\n  relayHttpBaseUrl: string | null | undefined;\n  /**\n   * Chii target id of the attached page, from `listTargets()[0].id`.\n   * When absent or empty, `open()` is a no-op.\n   */\n  targetId: string | null | undefined;\n  /**\n   * Function that mints a fresh TOTP code when called. Called at most once per\n   * `open()` invocation, immediately before building the inspector URL.\n   *\n   * Pass `undefined` when TOTP is disabled (no `at=` param is added).\n   *\n   * SECRET-HANDLING: the function MUST return only the code (6 digits), not\n   * the secret. The code rides in the URL's `at=` param only.\n   */\n  mintTotp?: () => string;\n  /** Current MCP environment (`mock` | `relay`). `open()` no-ops on `mock`. */\n  env: McpEnvironment;\n}\n\n/**\n * Manages auto-opening Chrome DevTools exactly once per relay attach session.\n *\n * Create one instance per `runDebugServer` call and pass its `open()` method\n * as the `onFirstAttach` callback to `startAttachWatcher`.\n *\n * The open fires at most once. Subsequent `open()` calls are no-ops.\n * Opt-out and mock-environment guard are checked at call time.\n */\nexport class AutoDevtoolsOpener {\n  private _opened = false;\n\n  /**\n   * Attempts to auto-open Chii DevTools in the developer's browser.\n   *\n   * Builds a `<relay-base>/front_end/chii_app.html?wss=…` URL pointing at the\n   * attached target. A fresh TOTP `at=` code is minted at call time so the\n   * relay's WebSocket upgrade gate accepts the connection.\n   *\n   * No-op when any of the following conditions hold:\n   *   1. Already opened this session (`_opened` is true).\n   *   2. `AIT_AUTO_DEVTOOLS=0` opt-out is set.\n   *   3. `options.env` is `mock` (env 1 — F12 is already available).\n   *   4. `options.relayHttpBaseUrl` is null/undefined/empty (relay not up yet).\n   *   5. `options.targetId` is null/undefined/empty (no page attached yet).\n   *\n   * Always writes the DevTools URL to stderr so the developer can copy it\n   * if the browser open fails or the popup is blocked.\n   *\n   * TOTP expiry caveat: the `at=` code embedded in the URL is valid for ~3\n   * minutes (relay gate ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). The\n   * developer must open the URL within that window; if they miss it, reload\n   * the page or re-run `open()` (though the once-per-session guard prevents\n   * that — restart the MCP server if needed).\n   *\n   * SECRET-HANDLING: the inspector URL (written to stderr) contains the relay\n   * host and a short-lived TOTP code. Do NOT write it to stdout or any\n   * persistent log.\n   */\n  open(options: DevtoolsOpenOptions): void {\n    if (this._opened) return;\n    if (isAutoDevtoolsDisabled()) return;\n    if (options.env === 'mock') return;\n    if (!options.relayHttpBaseUrl) return;\n    if (!options.targetId) return;\n\n    this._opened = true;\n\n    const inspectorUrl = buildChiiInspectorUrl(\n      options.relayHttpBaseUrl,\n      options.targetId,\n      options.mintTotp,\n    );\n\n    process.stderr.write(\n      '[ait-debug] 기기가 연결됐습니다 — Chii DevTools를 자동으로 엽니다.\\n' +\n        `[ait-debug] DevTools URL: ${inspectorUrl}\\n` +\n        '[ait-debug] (AIT_AUTO_DEVTOOLS=0 으로 자동 열기를 끌 수 있습니다)\\n' +\n        '[ait-debug] 주의: URL의 at= 코드는 ~3분 안에서만 유효합니다.\\n',\n    );\n\n    const opened = openUrlInBrowser(inspectorUrl);\n    if (!opened) {\n      process.stderr.write(\n        '[ait-debug] 브라우저 자동 열기 실패 — 위 URL을 브라우저에서 직접 여세요.\\n',\n      );\n    }\n  }\n\n  /** Returns `true` if `open()` has passed all guards and fired once. */\n  get opened(): boolean {\n    return this._opened;\n  }\n}\n"],"mappings":";;;;;;;;;;AAsJA,SAAgB,yBAAkC;AAChD,QAAO,QAAQ,IAAI,sBAAsB;;;;;;;;;AAc3C,SAAgB,iBAAiB,KAAsB;AAGrD,KAAI,QAAQ,IAAI,sCAAsC,IAAK,QAAO;CAElE,MAAM,EAAE,cAAA,UAAsB,qBAAqB;CACnD,MAAM,WAAW,QAAQ;CAGzB,IAAI;AACJ,KAAI,aAAa,SACf,cAAa,CAAC;EAAE,KAAK;EAAQ,MAAM,CAAC,IAAI;EAAE,CAAC;UAClC,aAAa,QACtB,cAAa,CAAC;EAAE,KAAK;EAAO,MAAM;GAAC;GAAM;GAAS;GAAI;GAAI;EAAE,CAAC;KAG7D,cAAa;EACX;GAAE,KAAK;GAAY,MAAM,CAAC,IAAI;GAAE;EAChC;GAAE,KAAK;GAAoB,MAAM,CAAC,IAAI;GAAE;EACxC;GAAE,KAAK;GAAiB,MAAM,CAAC,IAAI;GAAE;EACtC;AAGH,MAAK,MAAM,EAAE,KAAK,UAAU,WAC1B,KAAI;EACF,MAAM,SAAS,UAAU,KAAK,MAAM;GAAE,UAAU;GAAQ,SAAS;GAAO,CAAC;AACzE,MAAI,CAAC,OAAO,SAAS,OAAO,WAAW,EAAG,QAAO;SAC3C;AAIV,QAAO"}
+{"version":3,"file":"devtools-opener-D84kZFtR.js","names":[],"sources":["../src/mcp/devtools-opener.ts"],"sourcesContent":["/**\n * Auto-opens Chrome DevTools when a page attaches over the Chii relay.\n *\n * When a real device attaches (env 2 / 3 / 4 in the 4-environments fidelity\n * ladder), the Chii relay exposes a standard CDP WebSocket endpoint.  Chii\n * also self-hosts its DevTools frontend at:\n *\n *   <relay-base>/front_end/chii_app.html\n *     ?ws|wss=<encodeURIComponent(\"<relay-host>/client/<uuid>?target=<targetId>&at=<totp>\")>\n *\n * The param name follows the relay base scheme — `ws=` for plain HTTP\n * (env 3/4 local relay), `wss=` for HTTPS (env 2 tunnel) — matching the\n * scheme branch in chii/public/index.js.\n *\n * This is the same URL format that Chii's own index-page inspect-links use\n * (derived from `chii/public/index.js` — the JS that powers the target list\n * page at `<relay-base>/`).  Opening this URL in the developer's local browser\n * gives a full Chrome DevTools UI connected to the phone via the relay.\n *\n * IMPORTANT — environment guard:\n *   Auto-open only fires in relay environments (env 2 / 3 / 4). In env 1\n *   (local browser + mock SDK) the developer already has F12 available; opening\n *   a DevTools window pointing at the mock relay would be confusing and useless.\n *   The caller (`startAttachWatcher` in `debug-server.ts`) passes the current\n *   environment and this module bails out when it is `mock`.\n *\n * Opt-out: set `AIT_AUTO_DEVTOOLS=0` in the environment to suppress auto-open\n *   entirely. Any other value (or absent) enables the default behaviour.\n *\n * Duplicate-open guard:\n *   `AutoDevtoolsOpener` tracks whether open was already triggered for the\n *   current session. The open fires at most once per instance — typically one\n *   per `runDebugServer` call.\n *\n * TOTP expiry caveat:\n *   The `at=` TOTP code embedded in the `wss=` parameter is minted fresh at the\n *   moment `open()` is called. The code is valid for ~3 minutes (the relay gate\n *   accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). If the developer\n *   does not open the URL within that window the WebSocket upgrade will be\n *   rejected with 4401. In practice the browser opens immediately after the OS\n *   `open` command; if needed the developer can copy the wss= param, replace\n *   `at=`, and reload. This is documented in the JSDoc below.\n *\n * PWA (WebKit) caveat:\n *   The Chii relay injects a chobitsu CDP shim into WebKit-based runtimes (env 2\n *   AITC Sandbox PWA). The DevTools frontend will connect and most panels work.\n *   However, WebKit does not expose the full CDP domain set that V8/Blink does,\n *   so some panels (Network, Layers) may appear empty or show limited data.\n *   This is a WebKit runtime constraint, not a relay or devtools-opener issue.\n *\n * Node-only: uses `child_process.spawnSync` to invoke the OS open command.\n */\n\nimport type { McpEnvironment } from './environment.js';\n\n// ---------------------------------------------------------------------------\n// Chii self-hosted DevTools frontend URL\n// ---------------------------------------------------------------------------\n\n/**\n * Assembles the Chii self-hosted DevTools inspector URL for a given relay\n * and target.\n *\n * Chii serves its own DevTools frontend at\n * `<relayHttpBaseUrl>/front_end/chii_app.html`. The `ws=` (plain HTTP relay)\n * or `wss=` (HTTPS relay) query parameter is a URL-encoded string of the form\n * `<relay-host>/client/<uuid>?target=<id>&at=<totp>` — the same format used\n * by Chii's own target list page (derived from `chii/public/index.js`).\n *\n * The `at=` TOTP code is minted at call time via `mintTotp()`.  It is valid\n * for ~3 minutes (relay gate accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps =\n * 180–210 s).  The developer must open the returned URL within that window.\n * If the window expires before the browser connects, the relay will reject the\n * WebSocket upgrade with close code 4401.\n *\n * FAIL-CLOSED (issue #509): `mintTotp` is REQUIRED.  When omitted (i.e.\n * `undefined`), this function returns `null` — the caller must treat `null` as\n * \"inspector not yet available\" and show a waiting hint instead of a broken\n * link. Relay sessions gate every WS upgrade with TOTP (#452), so a URL built\n * without `at=` would be rejected with WS 4401 immediately — there is no\n * non-TOTP relay path in production. Returning `null` surfaces this cleanly as\n * a \"TOTP not yet configured\" state rather than silently producing a URL that\n * will always fail at the WS handshake.\n *\n * SECRET-HANDLING: `mintTotp` returns a code, not a secret. The code is\n * embedded in the `wss=` parameter (inside the `at=` param) of the returned\n * URL. Callers MUST NOT log the returned URL to stdout (stderr is OK — it is\n * the intended fallback surface for the developer to copy the URL).\n *\n * @param relayHttpBaseUrl - Local HTTP base URL of the Chii relay, e.g.\n *   `http://127.0.0.1:9100`. No trailing slash.\n * @param targetId - Chii target id (from `GET <relay>/targets`).\n * @param mintTotp - Function that returns a fresh 6-digit TOTP code string.\n *   Called at most once. **Required** — when `undefined`, the function returns\n *   `null` (fail-closed: no `at=` param means the relay WS gate rejects the\n *   handshake, so a null result is safer than a URL that always 404s).\n * @param panel - Initial panel. Defaults to `\"console\"`.\n *\n * @returns The inspector URL string, or `null` when `mintTotp` is absent.\n *\n * @example\n * buildChiiInspectorUrl(\n *   'http://127.0.0.1:9100',\n *   'abc123',\n *   () => generateTotp(secret),\n * )\n * // → 'http://127.0.0.1:9100/front_end/chii_app.html?ws=127.0.0.1%3A9100%2Fclient%2F<uuid>%3Ftarget%3Dabc123%26at%3D<code>'\n */\nexport function buildChiiInspectorUrl(\n  relayHttpBaseUrl: string,\n  targetId: string,\n  mintTotp?: () => string,\n  panel: 'elements' | 'console' | 'sources' | 'network' = 'console',\n): string | null {\n  // FAIL-CLOSED (#509): relay sessions require TOTP for every WS upgrade.\n  // Without a mintTotp function we cannot produce a valid at= code, so we\n  // return null rather than a URL that will always be rejected by the relay gate\n  // with WS 4401 / HTTP 404. Callers show a \"waiting\" hint when they get null.\n  if (!mintTotp) {\n    return null;\n  }\n\n  // Extract the host (and port) from the relay HTTP base URL, and pick the\n  // query param name chii_app.html expects: `ws=` dials `ws://` (plain-HTTP\n  // relay — env 3/4 local 127.0.0.1) while `wss=` dials `wss://` (HTTPS\n  // tunnel — env 2). chii/public/index.js does the same scheme branch:\n  // `location.protocol === 'https:' ? 'wss' : 'ws'`. Always sending `wss=`\n  // would make the frontend attempt TLS against the plain-HTTP local relay.\n  let relayHost: string;\n  let wsParamName: 'ws' | 'wss';\n  try {\n    const parsed = new URL(relayHttpBaseUrl);\n    relayHost = parsed.host; // e.g. \"127.0.0.1:9100\"\n    wsParamName = parsed.protocol === 'https:' ? 'wss' : 'ws';\n  } catch {\n    // Fallback: strip the scheme prefix manually if URL parsing fails.\n    relayHost = relayHttpBaseUrl.replace(/^https?:\\/\\//i, '');\n    wsParamName = /^https:/i.test(relayHttpBaseUrl) ? 'wss' : 'ws';\n  }\n\n  // Generate a client UUID that matches the format Chii's index.js uses\n  // (6 random alphanumeric characters).\n  const clientId = `devtools-opener-${Date.now().toString(36)}`;\n\n  // Build the ws=/wss= value: \"<relay-host>/client/<uuid>?target=<id>&at=<code>\"\n  // This mirrors the format from chii/public/index.js:\n  //   `${domain}${basePath}client/${randomId(6)}?target=${targetId}`\n  // SECRET-HANDLING: mintTotp() returns a code (not a secret). The code\n  // rides only in the URL's at= param. Callers must not log the URL.\n  const code = mintTotp();\n  const wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}&at=${encodeURIComponent(code)}`;\n\n  const params = new URLSearchParams({ [wsParamName]: wsPath, panel });\n  return `${relayHttpBaseUrl.replace(/\\/$/, '')}/front_end/chii_app.html?${params.toString()}`;\n}\n\n// ---------------------------------------------------------------------------\n// Opt-out check\n// ---------------------------------------------------------------------------\n\n/**\n * Returns `true` when auto-open is **disabled** via the `AIT_AUTO_DEVTOOLS`\n * env var. Only the explicit `\"0\"` value disables it; anything else (including\n * absent) leaves auto-open enabled.\n */\nexport function isAutoDevtoolsDisabled(): boolean {\n  return process.env.AIT_AUTO_DEVTOOLS === '0';\n}\n\n// ---------------------------------------------------------------------------\n// Browser open (Node-only, sync)\n// ---------------------------------------------------------------------------\n\n/**\n * Opens the given URL in the OS default browser using a platform-appropriate\n * command. Returns `true` on success.\n *\n * Failures are silent from the caller's perspective — the caller should log\n * the URL to stderr as a fallback before calling this function.\n */\nexport function openUrlInBrowser(url: string): boolean {\n  // Test hook: skip actual spawn when running in vitest / CI where the OS open\n  // command may hang or be absent. Production code never sets this.\n  if (process.env.AIT_AUTO_DEVTOOLS_TEST_SKIP_SPAWN === '1') return false;\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const { spawnSync } = require('node:child_process') as typeof import('node:child_process');\n  const platform = process.platform;\n\n  type Candidate = { cmd: string; args: string[] };\n  let candidates: Candidate[];\n  if (platform === 'darwin') {\n    candidates = [{ cmd: 'open', args: [url] }];\n  } else if (platform === 'win32') {\n    candidates = [{ cmd: 'cmd', args: ['/c', 'start', '', url] }];\n  } else {\n    // Linux + fallback\n    candidates = [\n      { cmd: 'xdg-open', args: [url] },\n      { cmd: 'sensible-browser', args: [url] },\n      { cmd: 'x-www-browser', args: [url] },\n    ];\n  }\n\n  for (const { cmd, args } of candidates) {\n    try {\n      const result = spawnSync(cmd, args, { encoding: 'utf8', timeout: 5_000 });\n      if (!result.error && result.status === 0) return true;\n    } catch {\n      // Try next candidate.\n    }\n  }\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// AutoDevtoolsOpener — stateful once-per-session open guard\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link AutoDevtoolsOpener.open}.\n *\n * The `relayHttpBaseUrl` and `targetId` fields are required to build a working\n * Chii self-hosted inspector URL. When `relayHttpBaseUrl` is absent the open\n * is skipped (no relay available yet).\n */\nexport interface DevtoolsOpenOptions {\n  /**\n   * Local HTTP base URL of the Chii relay, e.g. `http://127.0.0.1:9100`.\n   * Used to build the `<relay-base>/front_end/chii_app.html?wss=…` URL.\n   *\n   * For env 3/4 (intoss relay) this is `http://127.0.0.1:<port>`.\n   * For env 2 (external PWA relay) this is the relay's external HTTP URL\n   * (e.g. `https://<host>.trycloudflare.com`).\n   *\n   * When absent or empty, `open()` is a no-op.\n   *\n   * SECRET-HANDLING: this value contains the relay host. Callers MUST NOT\n   * log it to stdout; stderr is the intended surface.\n   */\n  relayHttpBaseUrl: string | null | undefined;\n  /**\n   * Chii target id of the attached page, from `listTargets()[0].id`.\n   * When absent or empty, `open()` is a no-op.\n   */\n  targetId: string | null | undefined;\n  /**\n   * Function that mints a fresh TOTP code when called. Called at most once per\n   * `open()` invocation, immediately before building the inspector URL.\n   *\n   * Pass `undefined` when TOTP is disabled (no `at=` param is added).\n   *\n   * SECRET-HANDLING: the function MUST return only the code (6 digits), not\n   * the secret. The code rides in the URL's `at=` param only.\n   */\n  mintTotp?: () => string;\n  /** Current MCP environment (`mock` | `relay`). `open()` no-ops on `mock`. */\n  env: McpEnvironment;\n}\n\n/**\n * Manages auto-opening Chrome DevTools exactly once per relay attach session.\n *\n * Create one instance per `runDebugServer` call and pass its `open()` method\n * as the `onFirstAttach` callback to `startAttachWatcher`.\n *\n * The open fires at most once. Subsequent `open()` calls are no-ops.\n * Opt-out and mock-environment guard are checked at call time.\n */\nexport class AutoDevtoolsOpener {\n  private _opened = false;\n\n  /**\n   * Attempts to auto-open Chii DevTools in the developer's browser.\n   *\n   * Builds a `<relay-base>/front_end/chii_app.html?wss=…` URL pointing at the\n   * attached target. A fresh TOTP `at=` code is minted at call time so the\n   * relay's WebSocket upgrade gate accepts the connection.\n   *\n   * No-op when any of the following conditions hold:\n   *   1. Already opened this session (`_opened` is true).\n   *   2. `AIT_AUTO_DEVTOOLS=0` opt-out is set.\n   *   3. `options.env` is `mock` (env 1 — F12 is already available).\n   *   4. `options.relayHttpBaseUrl` is null/undefined/empty (relay not up yet).\n   *   5. `options.targetId` is null/undefined/empty (no page attached yet).\n   *\n   * Always writes the DevTools URL to stderr so the developer can copy it\n   * if the browser open fails or the popup is blocked.\n   *\n   * TOTP expiry caveat: the `at=` code embedded in the URL is valid for ~3\n   * minutes (relay gate ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). The\n   * developer must open the URL within that window; if they miss it, reload\n   * the page or re-run `open()` (though the once-per-session guard prevents\n   * that — restart the MCP server if needed).\n   *\n   * SECRET-HANDLING: the inspector URL (written to stderr) contains the relay\n   * host and a short-lived TOTP code. Do NOT write it to stdout or any\n   * persistent log.\n   */\n  open(options: DevtoolsOpenOptions): void {\n    if (this._opened) return;\n    if (isAutoDevtoolsDisabled()) return;\n    if (options.env === 'mock') return;\n    if (!options.relayHttpBaseUrl) return;\n    if (!options.targetId) return;\n\n    this._opened = true;\n\n    const inspectorUrl = buildChiiInspectorUrl(\n      options.relayHttpBaseUrl,\n      options.targetId,\n      options.mintTotp,\n    );\n\n    // FAIL-CLOSED (#509): buildChiiInspectorUrl returns null when mintTotp is\n    // absent (no valid at= code → relay WS gate would reject the connection).\n    // Mark _opened so this once-per-session guard fires, but skip the browser\n    // open and stderr URL line — there is nothing useful to open.\n    if (inspectorUrl === null) {\n      process.stderr.write(\n        '[ait-debug] 기기가 연결됐습니다 — TOTP secret 미설정으로 인스펙터 URL을 생성할 수 없습니다.\\n' +\n          '[ait-debug] relay 세션은 AIT_DEBUG_TOTP_SECRET 설정이 필요합니다.\\n',\n      );\n      return;\n    }\n\n    process.stderr.write(\n      '[ait-debug] 기기가 연결됐습니다 — Chii DevTools를 자동으로 엽니다.\\n' +\n        `[ait-debug] DevTools URL: ${inspectorUrl}\\n` +\n        '[ait-debug] (AIT_AUTO_DEVTOOLS=0 으로 자동 열기를 끌 수 있습니다)\\n' +\n        '[ait-debug] 주의: URL의 at= 코드는 ~3분 안에서만 유효합니다.\\n',\n    );\n\n    const opened = openUrlInBrowser(inspectorUrl);\n    if (!opened) {\n      process.stderr.write(\n        '[ait-debug] 브라우저 자동 열기 실패 — 위 URL을 브라우저에서 직접 여세요.\\n',\n      );\n    }\n  }\n\n  /** Returns `true` if `open()` has passed all guards and fired once. */\n  get opened(): boolean {\n    return this._opened;\n  }\n}\n"],"mappings":";;;;;;;;;;AAqKA,SAAgB,yBAAkC;AAChD,QAAO,QAAQ,IAAI,sBAAsB;;;;;;;;;AAc3C,SAAgB,iBAAiB,KAAsB;AAGrD,KAAI,QAAQ,IAAI,sCAAsC,IAAK,QAAO;CAElE,MAAM,EAAE,cAAA,UAAsB,qBAAqB;CACnD,MAAM,WAAW,QAAQ;CAGzB,IAAI;AACJ,KAAI,aAAa,SACf,cAAa,CAAC;EAAE,KAAK;EAAQ,MAAM,CAAC,IAAI;EAAE,CAAC;UAClC,aAAa,QACtB,cAAa,CAAC;EAAE,KAAK;EAAO,MAAM;GAAC;GAAM;GAAS;GAAI;GAAI;EAAE,CAAC;KAG7D,cAAa;EACX;GAAE,KAAK;GAAY,MAAM,CAAC,IAAI;GAAE;EAChC;GAAE,KAAK;GAAoB,MAAM,CAAC,IAAI;GAAE;EACxC;GAAE,KAAK;GAAiB,MAAM,CAAC,IAAI;GAAE;EACtC;AAGH,MAAK,MAAM,EAAE,KAAK,UAAU,WAC1B,KAAI;EACF,MAAM,SAAS,UAAU,KAAK,MAAM;GAAE,UAAU;GAAQ,SAAS;GAAO,CAAC;AACzE,MAAI,CAAC,OAAO,SAAS,OAAO,WAAW,EAAG,QAAO;SAC3C;AAIV,QAAO"}

package/dist/devtools-opener-h6A-UjzC.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-opener-h6A-UjzC.cjs","names":[],"sources":["../src/mcp/devtools-opener.ts"],"sourcesContent":["/**\n * Auto-opens Chrome DevTools when a page attaches over the Chii relay.\n *\n * When a real device attaches (env 2 / 3 / 4 in the 4-environments fidelity\n * ladder), the Chii relay exposes a standard CDP WebSocket endpoint.  Chii\n * also self-hosts its DevTools frontend at:\n *\n *   <relay-base>/front_end/chii_app.html\n *     ?ws|wss=<encodeURIComponent(\"<relay-host>/client/<uuid>?target=<targetId>&at=<totp>\")>\n *\n * The param name follows the relay base scheme — `ws=` for plain HTTP\n * (env 3/4 local relay), `wss=` for HTTPS (env 2 tunnel) — matching the\n * scheme branch in chii/public/index.js.\n *\n * This is the same URL format that Chii's own index-page inspect-links use\n * (derived from `chii/public/index.js` — the JS that powers the target list\n * page at `<relay-base>/`).  Opening this URL in the developer's local browser\n * gives a full Chrome DevTools UI connected to the phone via the relay.\n *\n * IMPORTANT — environment guard:\n *   Auto-open only fires in relay environments (env 2 / 3 / 4). In env 1\n *   (local browser + mock SDK) the developer already has F12 available; opening\n *   a DevTools window pointing at the mock relay would be confusing and useless.\n *   The caller (`startAttachWatcher` in `debug-server.ts`) passes the current\n *   environment and this module bails out when it is `mock`.\n *\n * Opt-out: set `AIT_AUTO_DEVTOOLS=0` in the environment to suppress auto-open\n *   entirely. Any other value (or absent) enables the default behaviour.\n *\n * Duplicate-open guard:\n *   `AutoDevtoolsOpener` tracks whether open was already triggered for the\n *   current session. The open fires at most once per instance — typically one\n *   per `runDebugServer` call.\n *\n * TOTP expiry caveat:\n *   The `at=` TOTP code embedded in the `wss=` parameter is minted fresh at the\n *   moment `open()` is called. The code is valid for ~3 minutes (the relay gate\n *   accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). If the developer\n *   does not open the URL within that window the WebSocket upgrade will be\n *   rejected with 4401. In practice the browser opens immediately after the OS\n *   `open` command; if needed the developer can copy the wss= param, replace\n *   `at=`, and reload. This is documented in the JSDoc below.\n *\n * PWA (WebKit) caveat:\n *   The Chii relay injects a chobitsu CDP shim into WebKit-based runtimes (env 2\n *   AITC Sandbox PWA). The DevTools frontend will connect and most panels work.\n *   However, WebKit does not expose the full CDP domain set that V8/Blink does,\n *   so some panels (Network, Layers) may appear empty or show limited data.\n *   This is a WebKit runtime constraint, not a relay or devtools-opener issue.\n *\n * Node-only: uses `child_process.spawnSync` to invoke the OS open command.\n */\n\nimport type { McpEnvironment } from './environment.js';\n\n// ---------------------------------------------------------------------------\n// Chii self-hosted DevTools frontend URL\n// ---------------------------------------------------------------------------\n\n/**\n * Assembles the Chii self-hosted DevTools inspector URL for a given relay\n * and target.\n *\n * Chii serves its own DevTools frontend at\n * `<relayHttpBaseUrl>/front_end/chii_app.html`. The `ws=` (plain HTTP relay)\n * or `wss=` (HTTPS relay) query parameter is a URL-encoded string of the form\n * `<relay-host>/client/<uuid>?target=<id>` (and optionally `&at=<totp>`) —\n * the same format used by Chii's own target list page (derived from\n * `chii/public/index.js`).\n *\n * The `at=` TOTP code is minted at call time via `mintTotp()`.  It is valid\n * for ~3 minutes (relay gate accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps =\n * 180–210 s).  The developer must open the returned URL within that window.\n * If the window expires before the browser connects, the relay will reject the\n * WebSocket upgrade with close code 4401.\n *\n * SECRET-HANDLING: `mintTotp` returns a code, not a secret. The code is\n * embedded in the `wss=` parameter (inside the `at=` param) of the returned\n * URL. Callers MUST NOT log the returned URL to stdout (stderr is OK — it is\n * the intended fallback surface for the developer to copy the URL).\n *\n * @param relayHttpBaseUrl - Local HTTP base URL of the Chii relay, e.g.\n *   `http://127.0.0.1:9100`. No trailing slash.\n * @param targetId - Chii target id (from `GET <relay>/targets`).\n * @param mintTotp - Optional function that returns a fresh 6-digit TOTP code\n *   string. Called at most once. When omitted (TOTP disabled) no `at=` param\n *   is added.\n * @param panel - Initial panel. Defaults to `\"console\"`.\n *\n * @example\n * buildChiiInspectorUrl(\n *   'http://127.0.0.1:9100',\n *   'abc123',\n *   () => generateTotp(secret),\n * )\n * // → 'http://127.0.0.1:9100/front_end/chii_app.html?ws=127.0.0.1%3A9100%2Fclient%2F<uuid>%3Ftarget%3Dabc123%26at%3D<code>'\n */\nexport function buildChiiInspectorUrl(\n  relayHttpBaseUrl: string,\n  targetId: string,\n  mintTotp?: () => string,\n  panel: 'elements' | 'console' | 'sources' | 'network' = 'console',\n): string {\n  // Extract the host (and port) from the relay HTTP base URL, and pick the\n  // query param name chii_app.html expects: `ws=` dials `ws://` (plain-HTTP\n  // relay — env 3/4 local 127.0.0.1) while `wss=` dials `wss://` (HTTPS\n  // tunnel — env 2). chii/public/index.js does the same scheme branch:\n  // `location.protocol === 'https:' ? 'wss' : 'ws'`. Always sending `wss=`\n  // would make the frontend attempt TLS against the plain-HTTP local relay.\n  let relayHost: string;\n  let wsParamName: 'ws' | 'wss';\n  try {\n    const parsed = new URL(relayHttpBaseUrl);\n    relayHost = parsed.host; // e.g. \"127.0.0.1:9100\"\n    wsParamName = parsed.protocol === 'https:' ? 'wss' : 'ws';\n  } catch {\n    // Fallback: strip the scheme prefix manually if URL parsing fails.\n    relayHost = relayHttpBaseUrl.replace(/^https?:\\/\\//i, '');\n    wsParamName = /^https:/i.test(relayHttpBaseUrl) ? 'wss' : 'ws';\n  }\n\n  // Generate a client UUID that matches the format Chii's index.js uses\n  // (6 random alphanumeric characters).\n  const clientId = `devtools-opener-${Date.now().toString(36)}`;\n\n  // Build the ws=/wss= value: \"<relay-host>/client/<uuid>?target=<id>[&at=<code>]\"\n  // This mirrors the format from chii/public/index.js:\n  //   `${domain}${basePath}client/${randomId(6)}?target=${targetId}`\n  let wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}`;\n\n  if (mintTotp) {\n    // SECRET-HANDLING: mintTotp() returns a code (not a secret). The code\n    // rides only in the URL's at= param. Callers must not log the URL.\n    const code = mintTotp();\n    wsPath += `&at=${encodeURIComponent(code)}`;\n  }\n\n  const params = new URLSearchParams({ [wsParamName]: wsPath, panel });\n  return `${relayHttpBaseUrl.replace(/\\/$/, '')}/front_end/chii_app.html?${params.toString()}`;\n}\n\n// ---------------------------------------------------------------------------\n// Opt-out check\n// ---------------------------------------------------------------------------\n\n/**\n * Returns `true` when auto-open is **disabled** via the `AIT_AUTO_DEVTOOLS`\n * env var. Only the explicit `\"0\"` value disables it; anything else (including\n * absent) leaves auto-open enabled.\n */\nexport function isAutoDevtoolsDisabled(): boolean {\n  return process.env.AIT_AUTO_DEVTOOLS === '0';\n}\n\n// ---------------------------------------------------------------------------\n// Browser open (Node-only, sync)\n// ---------------------------------------------------------------------------\n\n/**\n * Opens the given URL in the OS default browser using a platform-appropriate\n * command. Returns `true` on success.\n *\n * Failures are silent from the caller's perspective — the caller should log\n * the URL to stderr as a fallback before calling this function.\n */\nexport function openUrlInBrowser(url: string): boolean {\n  // Test hook: skip actual spawn when running in vitest / CI where the OS open\n  // command may hang or be absent. Production code never sets this.\n  if (process.env.AIT_AUTO_DEVTOOLS_TEST_SKIP_SPAWN === '1') return false;\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const { spawnSync } = require('node:child_process') as typeof import('node:child_process');\n  const platform = process.platform;\n\n  type Candidate = { cmd: string; args: string[] };\n  let candidates: Candidate[];\n  if (platform === 'darwin') {\n    candidates = [{ cmd: 'open', args: [url] }];\n  } else if (platform === 'win32') {\n    candidates = [{ cmd: 'cmd', args: ['/c', 'start', '', url] }];\n  } else {\n    // Linux + fallback\n    candidates = [\n      { cmd: 'xdg-open', args: [url] },\n      { cmd: 'sensible-browser', args: [url] },\n      { cmd: 'x-www-browser', args: [url] },\n    ];\n  }\n\n  for (const { cmd, args } of candidates) {\n    try {\n      const result = spawnSync(cmd, args, { encoding: 'utf8', timeout: 5_000 });\n      if (!result.error && result.status === 0) return true;\n    } catch {\n      // Try next candidate.\n    }\n  }\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// AutoDevtoolsOpener — stateful once-per-session open guard\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link AutoDevtoolsOpener.open}.\n *\n * The `relayHttpBaseUrl` and `targetId` fields are required to build a working\n * Chii self-hosted inspector URL. When `relayHttpBaseUrl` is absent the open\n * is skipped (no relay available yet).\n */\nexport interface DevtoolsOpenOptions {\n  /**\n   * Local HTTP base URL of the Chii relay, e.g. `http://127.0.0.1:9100`.\n   * Used to build the `<relay-base>/front_end/chii_app.html?wss=…` URL.\n   *\n   * For env 3/4 (intoss relay) this is `http://127.0.0.1:<port>`.\n   * For env 2 (external PWA relay) this is the relay's external HTTP URL\n   * (e.g. `https://<host>.trycloudflare.com`).\n   *\n   * When absent or empty, `open()` is a no-op.\n   *\n   * SECRET-HANDLING: this value contains the relay host. Callers MUST NOT\n   * log it to stdout; stderr is the intended surface.\n   */\n  relayHttpBaseUrl: string | null | undefined;\n  /**\n   * Chii target id of the attached page, from `listTargets()[0].id`.\n   * When absent or empty, `open()` is a no-op.\n   */\n  targetId: string | null | undefined;\n  /**\n   * Function that mints a fresh TOTP code when called. Called at most once per\n   * `open()` invocation, immediately before building the inspector URL.\n   *\n   * Pass `undefined` when TOTP is disabled (no `at=` param is added).\n   *\n   * SECRET-HANDLING: the function MUST return only the code (6 digits), not\n   * the secret. The code rides in the URL's `at=` param only.\n   */\n  mintTotp?: () => string;\n  /** Current MCP environment (`mock` | `relay`). `open()` no-ops on `mock`. */\n  env: McpEnvironment;\n}\n\n/**\n * Manages auto-opening Chrome DevTools exactly once per relay attach session.\n *\n * Create one instance per `runDebugServer` call and pass its `open()` method\n * as the `onFirstAttach` callback to `startAttachWatcher`.\n *\n * The open fires at most once. Subsequent `open()` calls are no-ops.\n * Opt-out and mock-environment guard are checked at call time.\n */\nexport class AutoDevtoolsOpener {\n  private _opened = false;\n\n  /**\n   * Attempts to auto-open Chii DevTools in the developer's browser.\n   *\n   * Builds a `<relay-base>/front_end/chii_app.html?wss=…` URL pointing at the\n   * attached target. A fresh TOTP `at=` code is minted at call time so the\n   * relay's WebSocket upgrade gate accepts the connection.\n   *\n   * No-op when any of the following conditions hold:\n   *   1. Already opened this session (`_opened` is true).\n   *   2. `AIT_AUTO_DEVTOOLS=0` opt-out is set.\n   *   3. `options.env` is `mock` (env 1 — F12 is already available).\n   *   4. `options.relayHttpBaseUrl` is null/undefined/empty (relay not up yet).\n   *   5. `options.targetId` is null/undefined/empty (no page attached yet).\n   *\n   * Always writes the DevTools URL to stderr so the developer can copy it\n   * if the browser open fails or the popup is blocked.\n   *\n   * TOTP expiry caveat: the `at=` code embedded in the URL is valid for ~3\n   * minutes (relay gate ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). The\n   * developer must open the URL within that window; if they miss it, reload\n   * the page or re-run `open()` (though the once-per-session guard prevents\n   * that — restart the MCP server if needed).\n   *\n   * SECRET-HANDLING: the inspector URL (written to stderr) contains the relay\n   * host and a short-lived TOTP code. Do NOT write it to stdout or any\n   * persistent log.\n   */\n  open(options: DevtoolsOpenOptions): void {\n    if (this._opened) return;\n    if (isAutoDevtoolsDisabled()) return;\n    if (options.env === 'mock') return;\n    if (!options.relayHttpBaseUrl) return;\n    if (!options.targetId) return;\n\n    this._opened = true;\n\n    const inspectorUrl = buildChiiInspectorUrl(\n      options.relayHttpBaseUrl,\n      options.targetId,\n      options.mintTotp,\n    );\n\n    process.stderr.write(\n      '[ait-debug] 기기가 연결됐습니다 — Chii DevTools를 자동으로 엽니다.\\n' +\n        `[ait-debug] DevTools URL: ${inspectorUrl}\\n` +\n        '[ait-debug] (AIT_AUTO_DEVTOOLS=0 으로 자동 열기를 끌 수 있습니다)\\n' +\n        '[ait-debug] 주의: URL의 at= 코드는 ~3분 안에서만 유효합니다.\\n',\n    );\n\n    const opened = openUrlInBrowser(inspectorUrl);\n    if (!opened) {\n      process.stderr.write(\n        '[ait-debug] 브라우저 자동 열기 실패 — 위 URL을 브라우저에서 직접 여세요.\\n',\n      );\n    }\n  }\n\n  /** Returns `true` if `open()` has passed all guards and fired once. */\n  get opened(): boolean {\n    return this._opened;\n  }\n}\n"],"mappings":";;;;;;AAsJA,SAAgB,yBAAkC;AAChD,QAAO,QAAQ,IAAI,sBAAsB;;;;;;;;;AAc3C,SAAgB,iBAAiB,KAAsB;AAGrD,KAAI,QAAQ,IAAI,sCAAsC,IAAK,QAAO;CAElE,MAAM,EAAE,cAAc,QAAQ,qBAAqB;CACnD,MAAM,WAAW,QAAQ;CAGzB,IAAI;AACJ,KAAI,aAAa,SACf,cAAa,CAAC;EAAE,KAAK;EAAQ,MAAM,CAAC,IAAI;EAAE,CAAC;UAClC,aAAa,QACtB,cAAa,CAAC;EAAE,KAAK;EAAO,MAAM;GAAC;GAAM;GAAS;GAAI;GAAI;EAAE,CAAC;KAG7D,cAAa;EACX;GAAE,KAAK;GAAY,MAAM,CAAC,IAAI;GAAE;EAChC;GAAE,KAAK;GAAoB,MAAM,CAAC,IAAI;GAAE;EACxC;GAAE,KAAK;GAAiB,MAAM,CAAC,IAAI;GAAE;EACtC;AAGH,MAAK,MAAM,EAAE,KAAK,UAAU,WAC1B,KAAI;EACF,MAAM,SAAS,UAAU,KAAK,MAAM;GAAE,UAAU;GAAQ,SAAS;GAAO,CAAC;AACzE,MAAI,CAAC,OAAO,SAAS,OAAO,WAAW,EAAG,QAAO;SAC3C;AAIV,QAAO"}
+{"version":3,"file":"devtools-opener-h6A-UjzC.cjs","names":[],"sources":["../src/mcp/devtools-opener.ts"],"sourcesContent":["/**\n * Auto-opens Chrome DevTools when a page attaches over the Chii relay.\n *\n * When a real device attaches (env 2 / 3 / 4 in the 4-environments fidelity\n * ladder), the Chii relay exposes a standard CDP WebSocket endpoint.  Chii\n * also self-hosts its DevTools frontend at:\n *\n *   <relay-base>/front_end/chii_app.html\n *     ?ws|wss=<encodeURIComponent(\"<relay-host>/client/<uuid>?target=<targetId>&at=<totp>\")>\n *\n * The param name follows the relay base scheme — `ws=` for plain HTTP\n * (env 3/4 local relay), `wss=` for HTTPS (env 2 tunnel) — matching the\n * scheme branch in chii/public/index.js.\n *\n * This is the same URL format that Chii's own index-page inspect-links use\n * (derived from `chii/public/index.js` — the JS that powers the target list\n * page at `<relay-base>/`).  Opening this URL in the developer's local browser\n * gives a full Chrome DevTools UI connected to the phone via the relay.\n *\n * IMPORTANT — environment guard:\n *   Auto-open only fires in relay environments (env 2 / 3 / 4). In env 1\n *   (local browser + mock SDK) the developer already has F12 available; opening\n *   a DevTools window pointing at the mock relay would be confusing and useless.\n *   The caller (`startAttachWatcher` in `debug-server.ts`) passes the current\n *   environment and this module bails out when it is `mock`.\n *\n * Opt-out: set `AIT_AUTO_DEVTOOLS=0` in the environment to suppress auto-open\n *   entirely. Any other value (or absent) enables the default behaviour.\n *\n * Duplicate-open guard:\n *   `AutoDevtoolsOpener` tracks whether open was already triggered for the\n *   current session. The open fires at most once per instance — typically one\n *   per `runDebugServer` call.\n *\n * TOTP expiry caveat:\n *   The `at=` TOTP code embedded in the `wss=` parameter is minted fresh at the\n *   moment `open()` is called. The code is valid for ~3 minutes (the relay gate\n *   accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). If the developer\n *   does not open the URL within that window the WebSocket upgrade will be\n *   rejected with 4401. In practice the browser opens immediately after the OS\n *   `open` command; if needed the developer can copy the wss= param, replace\n *   `at=`, and reload. This is documented in the JSDoc below.\n *\n * PWA (WebKit) caveat:\n *   The Chii relay injects a chobitsu CDP shim into WebKit-based runtimes (env 2\n *   AITC Sandbox PWA). The DevTools frontend will connect and most panels work.\n *   However, WebKit does not expose the full CDP domain set that V8/Blink does,\n *   so some panels (Network, Layers) may appear empty or show limited data.\n *   This is a WebKit runtime constraint, not a relay or devtools-opener issue.\n *\n * Node-only: uses `child_process.spawnSync` to invoke the OS open command.\n */\n\nimport type { McpEnvironment } from './environment.js';\n\n// ---------------------------------------------------------------------------\n// Chii self-hosted DevTools frontend URL\n// ---------------------------------------------------------------------------\n\n/**\n * Assembles the Chii self-hosted DevTools inspector URL for a given relay\n * and target.\n *\n * Chii serves its own DevTools frontend at\n * `<relayHttpBaseUrl>/front_end/chii_app.html`. The `ws=` (plain HTTP relay)\n * or `wss=` (HTTPS relay) query parameter is a URL-encoded string of the form\n * `<relay-host>/client/<uuid>?target=<id>&at=<totp>` — the same format used\n * by Chii's own target list page (derived from `chii/public/index.js`).\n *\n * The `at=` TOTP code is minted at call time via `mintTotp()`.  It is valid\n * for ~3 minutes (relay gate accepts ±RELAY_VERIFY_SKEW_STEPS=6 steps =\n * 180–210 s).  The developer must open the returned URL within that window.\n * If the window expires before the browser connects, the relay will reject the\n * WebSocket upgrade with close code 4401.\n *\n * FAIL-CLOSED (issue #509): `mintTotp` is REQUIRED.  When omitted (i.e.\n * `undefined`), this function returns `null` — the caller must treat `null` as\n * \"inspector not yet available\" and show a waiting hint instead of a broken\n * link. Relay sessions gate every WS upgrade with TOTP (#452), so a URL built\n * without `at=` would be rejected with WS 4401 immediately — there is no\n * non-TOTP relay path in production. Returning `null` surfaces this cleanly as\n * a \"TOTP not yet configured\" state rather than silently producing a URL that\n * will always fail at the WS handshake.\n *\n * SECRET-HANDLING: `mintTotp` returns a code, not a secret. The code is\n * embedded in the `wss=` parameter (inside the `at=` param) of the returned\n * URL. Callers MUST NOT log the returned URL to stdout (stderr is OK — it is\n * the intended fallback surface for the developer to copy the URL).\n *\n * @param relayHttpBaseUrl - Local HTTP base URL of the Chii relay, e.g.\n *   `http://127.0.0.1:9100`. No trailing slash.\n * @param targetId - Chii target id (from `GET <relay>/targets`).\n * @param mintTotp - Function that returns a fresh 6-digit TOTP code string.\n *   Called at most once. **Required** — when `undefined`, the function returns\n *   `null` (fail-closed: no `at=` param means the relay WS gate rejects the\n *   handshake, so a null result is safer than a URL that always 404s).\n * @param panel - Initial panel. Defaults to `\"console\"`.\n *\n * @returns The inspector URL string, or `null` when `mintTotp` is absent.\n *\n * @example\n * buildChiiInspectorUrl(\n *   'http://127.0.0.1:9100',\n *   'abc123',\n *   () => generateTotp(secret),\n * )\n * // → 'http://127.0.0.1:9100/front_end/chii_app.html?ws=127.0.0.1%3A9100%2Fclient%2F<uuid>%3Ftarget%3Dabc123%26at%3D<code>'\n */\nexport function buildChiiInspectorUrl(\n  relayHttpBaseUrl: string,\n  targetId: string,\n  mintTotp?: () => string,\n  panel: 'elements' | 'console' | 'sources' | 'network' = 'console',\n): string | null {\n  // FAIL-CLOSED (#509): relay sessions require TOTP for every WS upgrade.\n  // Without a mintTotp function we cannot produce a valid at= code, so we\n  // return null rather than a URL that will always be rejected by the relay gate\n  // with WS 4401 / HTTP 404. Callers show a \"waiting\" hint when they get null.\n  if (!mintTotp) {\n    return null;\n  }\n\n  // Extract the host (and port) from the relay HTTP base URL, and pick the\n  // query param name chii_app.html expects: `ws=` dials `ws://` (plain-HTTP\n  // relay — env 3/4 local 127.0.0.1) while `wss=` dials `wss://` (HTTPS\n  // tunnel — env 2). chii/public/index.js does the same scheme branch:\n  // `location.protocol === 'https:' ? 'wss' : 'ws'`. Always sending `wss=`\n  // would make the frontend attempt TLS against the plain-HTTP local relay.\n  let relayHost: string;\n  let wsParamName: 'ws' | 'wss';\n  try {\n    const parsed = new URL(relayHttpBaseUrl);\n    relayHost = parsed.host; // e.g. \"127.0.0.1:9100\"\n    wsParamName = parsed.protocol === 'https:' ? 'wss' : 'ws';\n  } catch {\n    // Fallback: strip the scheme prefix manually if URL parsing fails.\n    relayHost = relayHttpBaseUrl.replace(/^https?:\\/\\//i, '');\n    wsParamName = /^https:/i.test(relayHttpBaseUrl) ? 'wss' : 'ws';\n  }\n\n  // Generate a client UUID that matches the format Chii's index.js uses\n  // (6 random alphanumeric characters).\n  const clientId = `devtools-opener-${Date.now().toString(36)}`;\n\n  // Build the ws=/wss= value: \"<relay-host>/client/<uuid>?target=<id>&at=<code>\"\n  // This mirrors the format from chii/public/index.js:\n  //   `${domain}${basePath}client/${randomId(6)}?target=${targetId}`\n  // SECRET-HANDLING: mintTotp() returns a code (not a secret). The code\n  // rides only in the URL's at= param. Callers must not log the URL.\n  const code = mintTotp();\n  const wsPath = `${relayHost}/client/${clientId}?target=${encodeURIComponent(targetId)}&at=${encodeURIComponent(code)}`;\n\n  const params = new URLSearchParams({ [wsParamName]: wsPath, panel });\n  return `${relayHttpBaseUrl.replace(/\\/$/, '')}/front_end/chii_app.html?${params.toString()}`;\n}\n\n// ---------------------------------------------------------------------------\n// Opt-out check\n// ---------------------------------------------------------------------------\n\n/**\n * Returns `true` when auto-open is **disabled** via the `AIT_AUTO_DEVTOOLS`\n * env var. Only the explicit `\"0\"` value disables it; anything else (including\n * absent) leaves auto-open enabled.\n */\nexport function isAutoDevtoolsDisabled(): boolean {\n  return process.env.AIT_AUTO_DEVTOOLS === '0';\n}\n\n// ---------------------------------------------------------------------------\n// Browser open (Node-only, sync)\n// ---------------------------------------------------------------------------\n\n/**\n * Opens the given URL in the OS default browser using a platform-appropriate\n * command. Returns `true` on success.\n *\n * Failures are silent from the caller's perspective — the caller should log\n * the URL to stderr as a fallback before calling this function.\n */\nexport function openUrlInBrowser(url: string): boolean {\n  // Test hook: skip actual spawn when running in vitest / CI where the OS open\n  // command may hang or be absent. Production code never sets this.\n  if (process.env.AIT_AUTO_DEVTOOLS_TEST_SKIP_SPAWN === '1') return false;\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const { spawnSync } = require('node:child_process') as typeof import('node:child_process');\n  const platform = process.platform;\n\n  type Candidate = { cmd: string; args: string[] };\n  let candidates: Candidate[];\n  if (platform === 'darwin') {\n    candidates = [{ cmd: 'open', args: [url] }];\n  } else if (platform === 'win32') {\n    candidates = [{ cmd: 'cmd', args: ['/c', 'start', '', url] }];\n  } else {\n    // Linux + fallback\n    candidates = [\n      { cmd: 'xdg-open', args: [url] },\n      { cmd: 'sensible-browser', args: [url] },\n      { cmd: 'x-www-browser', args: [url] },\n    ];\n  }\n\n  for (const { cmd, args } of candidates) {\n    try {\n      const result = spawnSync(cmd, args, { encoding: 'utf8', timeout: 5_000 });\n      if (!result.error && result.status === 0) return true;\n    } catch {\n      // Try next candidate.\n    }\n  }\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// AutoDevtoolsOpener — stateful once-per-session open guard\n// ---------------------------------------------------------------------------\n\n/**\n * Options for {@link AutoDevtoolsOpener.open}.\n *\n * The `relayHttpBaseUrl` and `targetId` fields are required to build a working\n * Chii self-hosted inspector URL. When `relayHttpBaseUrl` is absent the open\n * is skipped (no relay available yet).\n */\nexport interface DevtoolsOpenOptions {\n  /**\n   * Local HTTP base URL of the Chii relay, e.g. `http://127.0.0.1:9100`.\n   * Used to build the `<relay-base>/front_end/chii_app.html?wss=…` URL.\n   *\n   * For env 3/4 (intoss relay) this is `http://127.0.0.1:<port>`.\n   * For env 2 (external PWA relay) this is the relay's external HTTP URL\n   * (e.g. `https://<host>.trycloudflare.com`).\n   *\n   * When absent or empty, `open()` is a no-op.\n   *\n   * SECRET-HANDLING: this value contains the relay host. Callers MUST NOT\n   * log it to stdout; stderr is the intended surface.\n   */\n  relayHttpBaseUrl: string | null | undefined;\n  /**\n   * Chii target id of the attached page, from `listTargets()[0].id`.\n   * When absent or empty, `open()` is a no-op.\n   */\n  targetId: string | null | undefined;\n  /**\n   * Function that mints a fresh TOTP code when called. Called at most once per\n   * `open()` invocation, immediately before building the inspector URL.\n   *\n   * Pass `undefined` when TOTP is disabled (no `at=` param is added).\n   *\n   * SECRET-HANDLING: the function MUST return only the code (6 digits), not\n   * the secret. The code rides in the URL's `at=` param only.\n   */\n  mintTotp?: () => string;\n  /** Current MCP environment (`mock` | `relay`). `open()` no-ops on `mock`. */\n  env: McpEnvironment;\n}\n\n/**\n * Manages auto-opening Chrome DevTools exactly once per relay attach session.\n *\n * Create one instance per `runDebugServer` call and pass its `open()` method\n * as the `onFirstAttach` callback to `startAttachWatcher`.\n *\n * The open fires at most once. Subsequent `open()` calls are no-ops.\n * Opt-out and mock-environment guard are checked at call time.\n */\nexport class AutoDevtoolsOpener {\n  private _opened = false;\n\n  /**\n   * Attempts to auto-open Chii DevTools in the developer's browser.\n   *\n   * Builds a `<relay-base>/front_end/chii_app.html?wss=…` URL pointing at the\n   * attached target. A fresh TOTP `at=` code is minted at call time so the\n   * relay's WebSocket upgrade gate accepts the connection.\n   *\n   * No-op when any of the following conditions hold:\n   *   1. Already opened this session (`_opened` is true).\n   *   2. `AIT_AUTO_DEVTOOLS=0` opt-out is set.\n   *   3. `options.env` is `mock` (env 1 — F12 is already available).\n   *   4. `options.relayHttpBaseUrl` is null/undefined/empty (relay not up yet).\n   *   5. `options.targetId` is null/undefined/empty (no page attached yet).\n   *\n   * Always writes the DevTools URL to stderr so the developer can copy it\n   * if the browser open fails or the popup is blocked.\n   *\n   * TOTP expiry caveat: the `at=` code embedded in the URL is valid for ~3\n   * minutes (relay gate ±RELAY_VERIFY_SKEW_STEPS=6 steps = 180–210 s). The\n   * developer must open the URL within that window; if they miss it, reload\n   * the page or re-run `open()` (though the once-per-session guard prevents\n   * that — restart the MCP server if needed).\n   *\n   * SECRET-HANDLING: the inspector URL (written to stderr) contains the relay\n   * host and a short-lived TOTP code. Do NOT write it to stdout or any\n   * persistent log.\n   */\n  open(options: DevtoolsOpenOptions): void {\n    if (this._opened) return;\n    if (isAutoDevtoolsDisabled()) return;\n    if (options.env === 'mock') return;\n    if (!options.relayHttpBaseUrl) return;\n    if (!options.targetId) return;\n\n    this._opened = true;\n\n    const inspectorUrl = buildChiiInspectorUrl(\n      options.relayHttpBaseUrl,\n      options.targetId,\n      options.mintTotp,\n    );\n\n    // FAIL-CLOSED (#509): buildChiiInspectorUrl returns null when mintTotp is\n    // absent (no valid at= code → relay WS gate would reject the connection).\n    // Mark _opened so this once-per-session guard fires, but skip the browser\n    // open and stderr URL line — there is nothing useful to open.\n    if (inspectorUrl === null) {\n      process.stderr.write(\n        '[ait-debug] 기기가 연결됐습니다 — TOTP secret 미설정으로 인스펙터 URL을 생성할 수 없습니다.\\n' +\n          '[ait-debug] relay 세션은 AIT_DEBUG_TOTP_SECRET 설정이 필요합니다.\\n',\n      );\n      return;\n    }\n\n    process.stderr.write(\n      '[ait-debug] 기기가 연결됐습니다 — Chii DevTools를 자동으로 엽니다.\\n' +\n        `[ait-debug] DevTools URL: ${inspectorUrl}\\n` +\n        '[ait-debug] (AIT_AUTO_DEVTOOLS=0 으로 자동 열기를 끌 수 있습니다)\\n' +\n        '[ait-debug] 주의: URL의 at= 코드는 ~3분 안에서만 유효합니다.\\n',\n    );\n\n    const opened = openUrlInBrowser(inspectorUrl);\n    if (!opened) {\n      process.stderr.write(\n        '[ait-debug] 브라우저 자동 열기 실패 — 위 URL을 브라우저에서 직접 여세요.\\n',\n      );\n    }\n  }\n\n  /** Returns `true` if `open()` has passed all guards and fired once. */\n  get opened(): boolean {\n    return this._opened;\n  }\n}\n"],"mappings":";;;;;;AAqKA,SAAgB,yBAAkC;AAChD,QAAO,QAAQ,IAAI,sBAAsB;;;;;;;;;AAc3C,SAAgB,iBAAiB,KAAsB;AAGrD,KAAI,QAAQ,IAAI,sCAAsC,IAAK,QAAO;CAElE,MAAM,EAAE,cAAc,QAAQ,qBAAqB;CACnD,MAAM,WAAW,QAAQ;CAGzB,IAAI;AACJ,KAAI,aAAa,SACf,cAAa,CAAC;EAAE,KAAK;EAAQ,MAAM,CAAC,IAAI;EAAE,CAAC;UAClC,aAAa,QACtB,cAAa,CAAC;EAAE,KAAK;EAAO,MAAM;GAAC;GAAM;GAAS;GAAI;GAAI;EAAE,CAAC;KAG7D,cAAa;EACX;GAAE,KAAK;GAAY,MAAM,CAAC,IAAI;GAAE;EAChC;GAAE,KAAK;GAAoB,MAAM,CAAC,IAAI;GAAE;EACxC;GAAE,KAAK;GAAiB,MAAM,CAAC,IAAI;GAAE;EACtC;AAGH,MAAK,MAAM,EAAE,KAAK,UAAU,WAC1B,KAAI;EACF,MAAM,SAAS,UAAU,KAAK,MAAM;GAAE,UAAU;GAAQ,SAAS;GAAO,CAAC;AACzE,MAAI,CAAC,OAAO,SAAS,OAAO,WAAW,EAAG,QAAO;SAC3C;AAIV,QAAO"}

package/dist/in-app/auto.d.ts

@@ -0,0 +1,86 @@
+//#region src/in-app/auto.d.ts
+/**
+ * @ait-co/devtools/in-app/auto — self-gating side-effect entry.
+ *
+ * Consumers add a single line to their mini-app entry:
+ *
+ *   import '@ait-co/devtools/in-app/auto';
+ *
+ * The entry self-gates: if none of the debug activation signals are present
+ * (no `?debug=1`, no `?relay=`, and not a DEV build), it does nothing. The
+ * imported chunk stays dormant and `window.__sdk` / `window.__sdkCall` are
+ * never installed on a normal production load.
+ *
+ * When the gate passes it:
+ *  1. Calls `maybeAttach()` — runs the full Layer B/C gate (host allowlist,
+ *     opt-in params, relay URL, TOTP) and injects the Chii `target.js` script.
+ *     Gate semantics are NOT changed — this is a thin self-gate wrapper.
+ *  2. Installs the SDK bridge (`window.__sdk` / `window.__sdkCall`) so an AI
+ *     agent can drive any SDK API over the CDP relay without hand-synthesising
+ *     the Granite/ReactNative bridge envelope. SDK access uses a dynamic
+ *     import of `@apps-in-toss/web-framework` — the peer is optional, so if
+ *     the SDK is not installed the bridge install is silently skipped
+ *     (fail-silent). The namespace mirror pattern (iterate `Object.keys`) is
+ *     SDK version-neutral: 2.x and 3.x are both covered without any static
+ *     import that would couple the entry to a specific SDK line.
+ *
+ * SECRET-HANDLING: no secret, TOTP code, relay URL, or host value is ever
+ * logged or surfaced beyond the reason enum in `maybeAttach()`.
+ *
+ * Layer A (build-time DCE) is NOT enforced here — this entry IS the
+ * consumer-facing alternative to `if (__DEBUG_BUILD__) { … }`. The self-gate
+ * below performs the same dormancy guarantee via a URL param check, which is
+ * safe in a side-effect import context (the gate runs at module evaluation
+ * time, before any React tree mounts). Consumers who already manage their own
+ * `__DEBUG_BUILD__` guard can keep using `@ait-co/devtools/in-app` directly.
+ *
+ * DEV detection: `import.meta.env.DEV` is resolved by the consumer's bundler
+ * at their build time (Vite/Webpack/Rspack inject the value), not at this
+ * package's publish time — same pattern used by the polyfill's `auto` entry.
+ * When the consumer is NOT running a bundler that injects `import.meta.env`
+ * (e.g. bare Node or a test runner that leaves the raw identifiers in place),
+ * the `typeof` guard makes it safe: a missing `import.meta.env.DEV` resolves
+ * to `undefined`, which is falsy — the DEV path is simply skipped.
+ */
+declare global {
+  interface Window {
+    /**
+     * Entire `@apps-in-toss/web-framework` export namespace mirrored onto a
+     * plain writable object. Installed by the auto entry when `?debug=1` /
+     * `?relay=` is present in the URL, or in DEV builds.
+     *
+     * Lets an AI agent call any SDK API over a CDP relay without
+     * hand-synthesising the Granite/ReactNative bridge envelope:
+     *   `window.__sdk.setDeviceOrientation({ type: 'landscape' })`
+     */
+    __sdk?: Record<string, unknown>;
+    /**
+     * Safe call wrapper for `window.__sdk`. Returns a JSON-serialisable
+     * `{ ok: true, value }` or `{ ok: false, error }` tuple even for
+     * throwing/async SDK functions — ideal for `Runtime.evaluate` results.
+     *
+     * @example
+     * window.__sdkCall('setDeviceOrientation', { type: 'landscape' })
+     */
+    __sdkCall?: (name: string, ...args: unknown[]) => Promise<{
+      ok: boolean;
+      value?: unknown;
+      error?: string;
+    }>;
+  }
+}
+/**
+ * Pure predicate for the self-gate. Exported for unit tests.
+ *
+ * @param isDev - Whether the consumer's bundler folded `import.meta.env.DEV`
+ *   to `true`. Default: reads from `import.meta.env.DEV` at call time, which
+ *   is what the consumer's bundler replaces with a literal at build time.
+ *   Pass an explicit value in tests to control the DEV signal without
+ *   depending on the Vite/vitest build environment.
+ * @param searchStr - URL search string to inspect. Defaults to
+ *   `window.location.search` when called in a browser context.
+ */
+declare function shouldActivate(isDev?: boolean, searchStr?: string): boolean;
+//#endregion
+export { shouldActivate };
+//# sourceMappingURL=auto.d.ts.map

package/dist/in-app/auto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto.d.ts","names":[],"sources":["../../src/in-app/auto.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuGA;;;;;;;;;;;;;;;;;;;;;;;;QAnDQ,MAAA;EAAA,UACI,MAAA;;;;;;;;;;IAUR,KAAA,GAAQ,MAAA;;;;;;;;;IAUR,SAAA,IACE,IAAA,aACG,IAAA,gBACA,OAAA;MAAU,EAAA;MAAa,KAAA;MAAiB,KAAA;IAAA;EAAA;AAAA;;;;;;;;;;;;iBA2BjC,cAAA,CACd,KAAA,YAMA,SAAA"}