@attson/atwebpilot-mcp 0.0.65 → 0.0.67

package/dist/index.js

@@ -212,11 +212,18 @@ var ChatSessionEventSchema = z3.discriminatedUnion("type", [
 ]);
 
 // ../shared/src/protocol/messages.ts
-var StepSchema = z4.object({
-  kind: z4.literal("tool"),
-  tool: z4.string(),
-  args: z4.unknown()
-});
+var ProtocolStepSchema = z4.discriminatedUnion("kind", [
+  z4.object({
+    kind: z4.literal("tool"),
+    tool: z4.string(),
+    args: z4.unknown()
+  }),
+  z4.object({
+    kind: z4.literal("js"),
+    source: z4.string(),
+    timeoutMs: z4.number().int().positive().optional()
+  })
+]);
 var DerivedTabFields = {
   /** true when the receiving connection owns this tab */
   mine: z4.boolean().optional(),
@@ -330,7 +337,7 @@ var ExecSchema = z4.object({
   req_id: z4.string(),
   session_id: z4.string(),
   tab_id: z4.string(),
-  step: StepSchema
+  step: ProtocolStepSchema
 });
 var CloseSessionSchema = z4.object({
   ...EnvelopeFields,
@@ -687,6 +694,7 @@ function capabilityForTool(tool, opts) {
     case "searchPageIndex":
     case "readPageBlock":
     case "extractPageFields":
+    case "inspectElement":
       return "read:dom";
     case "extractImages":
       return "read:image";
@@ -998,6 +1006,25 @@ var TOOL_DEFS = [
       required: ["selector"]
     }
   },
+  {
+    name: "inspectElement",
+    description: "[FAST\xB7READ\xB7LAYOUT] \u8BFB\u53D6\u5143\u7D20\u7684\u8FD0\u884C\u65F6\u5E03\u5C40\u771F\u76F8\uFF1Acomputed style\u3001viewport/document rect\u3001\u53EF\u89C1\u6027\u3001\u7956\u5148\u94FE\u4E0E shadow root \u4FE1\u606F\u3002\n\u8C03\u8BD5 display/box-sizing/position/overflow/z-index\u3001\u5F39\u7A97\u6302\u8F7D\u70B9\u6216\u7236\u7EA7\u5E03\u5C40\u65F6\u4F18\u5148\u7528\u5B83\uFF0C\u4E0D\u8981\u4E3A\u8FD9\u4E9B\u53EA\u8BFB\u4FE1\u606F\u8C03\u7528 runJS\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string", description: "CSS selector\uFF1B\u4E0E uid \u4E8C\u9009\u4E00" },
+        uid: { type: "string", description: "takeSnapshot/findElements \u8FD4\u56DE\u7684 uid\uFF1B\u4E0E selector \u4E8C\u9009\u4E00" },
+        ancestorDepth: { type: "integer", default: 5, minimum: 0, maximum: 10 },
+        styleProperties: {
+          type: "array",
+          items: { type: "string" },
+          maxItems: 50,
+          description: "\u8981\u8BFB\u53D6\u7684 CSS \u5C5E\u6027\uFF1B\u7701\u7565\u65F6\u8FD4\u56DE\u5E38\u7528\u5E03\u5C40\u5C5E\u6027"
+        },
+        tabId: TAB_ID_FIELD
+      }
+    }
+  },
   {
     name: "extractText",
     description: "[FAST\xB7TARGETED] \u63D0\u53D6\u9009\u62E9\u5668\u547D\u4E2D\u5143\u7D20\u7684\u6587\u672C\u3002single=true \u8FD4\u56DE\u5B57\u7B26\u4E32\uFF0C\u5426\u5219\u8FD4\u56DE\u6570\u7EC4\u3002\n\u53EA\u7528\u4E8E\u660E\u786E\u7684\u5C0F\u8303\u56F4 selector\uFF1B\u666E\u901A\u7F51\u9875\u7406\u89E3/\u5B57\u6BB5\u63D0\u53D6\u4E0D\u8981\u7528 extractText({selector:'body'})\uFF0C\u5148\u7528 createPageIndex + extractPageFields/searchPageIndex\u3002\n\n\u793A\u4F8B\uFF1A\n- \u63D0\u53D6\u6807\u9898\uFF1A{ selector: 'h1', single: true }\n- \u63D0\u53D6\u6240\u6709\u6BB5\u843D\uFF1A{ selector: 'article p' }",
@@ -1290,6 +1317,7 @@ var TOOL_DEFS = [
       type: "object",
       properties: {
         source: { type: "string", description: "async function body" },
+        timeoutMs: { type: "integer", minimum: 1, maximum: 25e3, default: 25e3 },
         tabId: TAB_ID_FIELD
       },
       required: ["source"]
@@ -1856,6 +1884,114 @@ function readToolMode(env) {
   return "full";
 }
 
+// ../shared/src/static-scan.ts
+var RULES = [
+  {
+    rule: "uses-document-cookie",
+    severity: "dangerous",
+    message: "\u8BFB\u53D6/\u5199\u5165 cookie",
+    pattern: /\bdocument\s*\.\s*cookie\b/g
+  },
+  {
+    rule: "uses-eval",
+    severity: "dangerous",
+    message: "eval() \u6267\u884C\u52A8\u6001\u4EE3\u7801",
+    pattern: /\beval\s*\(/g
+  },
+  {
+    rule: "uses-new-function",
+    severity: "dangerous",
+    message: "new Function \u6267\u884C\u52A8\u6001\u4EE3\u7801",
+    pattern: /\bnew\s+Function\s*\(/g
+  },
+  {
+    rule: "uses-chrome-api",
+    severity: "dangerous",
+    message: "\u5C1D\u8BD5\u8BBF\u95EE\u6269\u5C55 API",
+    pattern: /\b(chrome|browser)\s*\.\s*[a-zA-Z_$]/g
+  },
+  {
+    rule: "uses-fetch",
+    severity: "caution",
+    message: "\u53D1\u8D77\u7F51\u7EDC\u8BF7\u6C42 (fetch)",
+    pattern: /\bfetch\s*\(/g
+  },
+  {
+    rule: "uses-xhr",
+    severity: "caution",
+    message: "\u53D1\u8D77\u7F51\u7EDC\u8BF7\u6C42 (XMLHttpRequest)",
+    pattern: /\bnew\s+XMLHttpRequest\b|\bXMLHttpRequest\s*\(/g
+  },
+  {
+    rule: "uses-send-beacon",
+    severity: "caution",
+    message: "navigator.sendBeacon",
+    pattern: /navigator\s*\.\s*sendBeacon\b/g
+  },
+  {
+    rule: "uses-storage",
+    severity: "caution",
+    message: "\u8BFB/\u5199 localStorage / sessionStorage",
+    pattern: /\b(local|session)Storage\b/g
+  },
+  {
+    rule: "uses-indexed-db",
+    severity: "caution",
+    message: "\u8BFB/\u5199 IndexedDB",
+    pattern: /\bindexedDB\b/g
+  },
+  {
+    rule: "uses-mutation-observer",
+    severity: "info",
+    message: "MutationObserver",
+    pattern: /\bMutationObserver\b/g
+  }
+];
+function runStaticScan(source) {
+  const out = [];
+  for (const r of RULES) {
+    const matches = collectMatches(source, r.pattern);
+    if (matches.length > 0) {
+      out.push({
+        rule: r.rule,
+        severity: r.severity,
+        message: r.message,
+        matches
+      });
+    }
+  }
+  return out;
+}
+function highestSeverity(findings) {
+  if (findings.some((f) => f.severity === "dangerous")) return "dangerous";
+  if (findings.some((f) => f.severity === "caution")) return "caution";
+  return "info";
+}
+function collectMatches(source, pattern) {
+  const re = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g");
+  const out = [];
+  let m;
+  while ((m = re.exec(source)) !== null) {
+    const { line, col } = locate(source, m.index);
+    out.push({ line, col, text: m[0] });
+    if (m.index === re.lastIndex) re.lastIndex++;
+  }
+  return out;
+}
+function locate(source, offset) {
+  let line = 1;
+  let col = 1;
+  for (let i = 0; i < offset; i++) {
+    if (source.charCodeAt(i) === 10) {
+      line++;
+      col = 1;
+    } else {
+      col++;
+    }
+  }
+  return { line, col };
+}
+
 // src/handlers.ts
 function singleWorkerId(c, pairUrl) {
   const workers = c.workers.list();
@@ -1902,18 +2038,25 @@ async function handleBrowserTool(deps, gen, args) {
   const session_id = String(args.session_id);
   const session = coordinator.sessions.get(session_id);
   if (!session) throw new Error(`session ${session_id} not found`);
-  const { session_id: _omit, ...toolArgs } = args;
+  const { session_id: _omit, ...suppliedToolArgs } = args;
+  const toolArgs = { ...suppliedToolArgs };
   const tool = gen.builtinTool;
   if (gen.stepKind === "js") {
     const source = String(toolArgs.source ?? "");
     if (!source) throw new Error("browser_runJS: source required");
-    const v = coordinator.validateCall({ session_id, kind: "runJS", unsafe: true });
+    const unsafe = highestSeverity(runStaticScan(source)) === "dangerous";
+    const v = coordinator.validateCall({ session_id, kind: "runJS", unsafe });
     if (!v.ok) throw new Error(`${v.error.code}: ${v.error.message}`);
     coordinator.recordCall(session_id, v.dangerous);
+    const requestedTimeout = toolArgs.timeoutMs;
     const jsResult = await hub.exec(session.worker_id, {
       session_id,
       tab_id: session.tab_id,
-      step: { kind: "js", source }
+      step: {
+        kind: "js",
+        source,
+        ...typeof requestedTimeout === "number" && Number.isInteger(requestedTimeout) && requestedTimeout > 0 ? { timeoutMs: requestedTimeout } : {}
+      }
     });
     if (!jsResult.ok) {
       throw new Error(
@@ -1922,6 +2065,13 @@ async function handleBrowserTool(deps, gen, args) {
     }
     return jsResult.return ?? null;
   }
+  if (gen.builtinTool === "switchToTab" || gen.builtinTool === "closeTab") {
+    const boundTabId = Number.parseInt(session.tab_id, 10);
+    if (!Number.isFinite(boundTabId)) {
+      throw new Error(`InvalidArgs: session tab_id "${session.tab_id}" is not numeric`);
+    }
+    toolArgs.tabId = boundTabId;
+  }
   const override = NON_BUILTIN_CAPABILITY[gen.builtinTool];
   if (override) {
     const v = coordinator.validateCall({ session_id, kind: "capability", capability: override });
@@ -2374,7 +2524,7 @@ var LoopbackWSHub = class {
         req_id,
         session_id: params.session_id,
         tab_id: params.tab_id,
-        step: { kind: "tool", tool: params.step.tool, args: params.step.args }
+        step: params.step
       });
       if (this.byWorker.get(worker_id) !== socket) {
         clearTimeout(timer);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attson/atwebpilot-mcp",
-  "version": "0.0.65",
+  "version": "0.0.67",
   "license": "Apache-2.0",
   "description": "MCP server for the atwebpilot browser extension - let Codex or Claude Code drive your browser.",
   "homepage": "https://github.com/attson/atwebpilot#readme",