@apmantza/greedysearch-pi 1.8.10 → 1.9.1

package/bin/cdp.mjs

@@ -365,10 +365,23 @@ async function captureMainContext(cdp, sid) {
 	// Always disable Runtime after capturing
 	await cdp.send("Runtime.disable", {}, sid).catch(() => {});
 
-	// Find the main world context
-	const main = contexts.find(
+	// Get the root frame ID so we can prefer its context when multiple
+	// isDefault contexts exist (e.g. Gemini embeds _/bscframe as a child
+	// frame whose context fires first and would otherwise be picked instead).
+	let rootFrameId = null;
+	try {
+		const ft = await cdp.send("Page.getFrameTree", {}, sid);
+		rootFrameId = ft?.frameTree?.frame?.id ?? null;
+	} catch {}
+
+	const defaults = contexts.filter(
 		(ctx) => ctx.auxData?.isDefault && ctx.auxData?.type === "default",
 	);
+	// Prefer the context whose frameId matches the root frame
+	const main =
+		(rootFrameId && defaults.find((ctx) => ctx.auxData?.frameId === rootFrameId)) ||
+		defaults[0] ||
+		null;
 	return main?.id ?? null;
 }
 

package/bin/launch-visible.mjs

@@ -106,6 +106,69 @@ function httpGet(url, timeoutMs = 1000) {
 	});
 }
 
+async function minimizeViaCDP(port) {
+	try {
+		const version = await httpGet(`http://localhost:${port}/json/version`).then(
+			(r) => JSON.parse(r.body),
+		);
+		const targets = await httpGet(`http://localhost:${port}/json/list`).then(
+			(r) => JSON.parse(r.body),
+		);
+		const targetId = targets.find((t) => t.type === "page")?.id;
+		if (!targetId) return;
+
+		// Validate browser WebSocket URL to prevent SSRF (SonarCloud javasecurity:S5335)
+		const wsUrlStr = version.webSocketDebuggerUrl;
+		if (typeof wsUrlStr !== "string") return;
+		const wsUrl = new URL(wsUrlStr);
+		if (wsUrl.hostname !== "localhost" && wsUrl.hostname !== "127.0.0.1")
+			return;
+		if (!/^ws:\/\/localhost:\d+/.test(`ws://${wsUrl.host}`)) return;
+		const wsPath = wsUrl.pathname;
+		const ws = new WebSocket(`ws://localhost:${port}${wsPath}`);
+		await new Promise((resolve) => {
+			ws.onopen = () =>
+				ws.send(
+					JSON.stringify({
+						id: 1,
+						method: "Browser.getWindowForTarget",
+						params: { targetId },
+					}),
+				);
+			ws.onmessage = (ev) => {
+				const msg = JSON.parse(ev.data);
+				if (msg.id === 1 && msg.result?.windowId) {
+					ws.send(
+						JSON.stringify({
+							id: 2,
+							method: "Browser.setWindowBounds",
+							params: {
+								windowId: msg.result.windowId,
+								bounds: { windowState: "minimized" },
+							},
+						}),
+					);
+				} else if (msg.id === 2) {
+					ws.close();
+					resolve();
+				}
+			};
+			ws.onerror = () => {
+				ws.close();
+				resolve();
+			};
+			setTimeout(() => {
+				try {
+					ws.close();
+				} catch {}
+				resolve();
+			}, 5000);
+		});
+	} catch {
+		// best-effort — Chrome is still usable if minimize fails
+	}
+}
+
 async function waitForPort(timeoutMs = 15000) {
 	const deadline = Date.now() + timeoutMs;
 	while (Date.now() < deadline) {
@@ -226,6 +289,8 @@ async function main() {
 		process.exit(1);
 	}
 
+	await minimizeViaCDP(PORT);
+
 	console.log("Visible Chrome ready on port 9222.");
 	console.log("Keep this terminal open to keep Chrome alive.");
 }