@dimina-kit/devtools 0.3.2-dev.20260524104239 → 0.3.2-dev.20260525152421

package/dist/main/app/app.js

@@ -1,5 +1,5 @@
-import { setupCdpPort } from './bootstrap.js';
-import { app, BrowserWindow, nativeImage } from 'electron';
+import { setupCdpPort, registerDifileScheme } from './bootstrap.js';
+import { app, BrowserWindow, nativeImage, session } from 'electron';
 import fs from 'fs';
 import path from 'path';
 import { rendererDir as defaultRendererDir, defaultPreloadPath } from '../utils/paths.js';
@@ -13,6 +13,7 @@ import { registerAppIpc, popoverModule, projectsModule, sessionModule, settingsM
 import { startAutomationServer } from '../services/automation/index.js';
 import { startMcpServer } from '../services/mcp/index.js';
 import { setupSimulatorStorage } from '../services/simulator-storage/index.js';
+import { setupSimulatorTempFiles } from '../services/simulator-temp-files/index.js';
 import { UpdateManager } from '../services/update/index.js';
 import { toDisposable } from '../utils/disposable.js';
 import { IpcRegistry } from '../utils/ipc-registry.js';
@@ -259,6 +260,9 @@ export function createWorkbenchApp(config = {}) {
     let setupPromise = null;
     let appEventsRegistered = false;
     setupCdpPort();
+    // Privileged scheme registration must run before `app.whenReady` —
+    // registering it later throws.
+    registerDifileScheme();
     async function setup() {
         if (setupPromise)
             return setupPromise;
@@ -273,6 +277,13 @@ export function createWorkbenchApp(config = {}) {
             // creation-time color (see installThemeBackgroundSync).
             context.registry.add(installThemeBackgroundSync());
             registerBuiltinModules(config, context);
+            // Wire the simulator-side difile:// protocol handler + temp-file IPC
+            // before host onSetup so any host-driven simulator boot sees the
+            // protocol live. The module installs its own narrow sender-policy
+            // (simulator-session-only) — see file header — because the default
+            // workbench policy intentionally rejects the simulator <webview>.
+            const simSession = session.fromPartition('persist:simulator');
+            context.registry.add(setupSimulatorTempFiles(simSession));
             installMenu(config, mainWindow, context);
             // Gated custom-IPC surface for the host. Bound to ctx.senderPolicy so
             // host channels go through the same gateway as built-in IPC, and

package/dist/main/app/bootstrap.d.ts

@@ -1,3 +1,12 @@
+/**
+ * Register `difile://` as a privileged scheme so `simSession.protocol.handle`
+ * can serve `difile://devtools/{uuid}` URLs from the simulator webview without
+ * tripping CSP / fetch-API restrictions. Must be called before `app.whenReady`.
+ *
+ * Idempotent — subsequent calls are no-ops because Electron throws if the same
+ * scheme is registered twice.
+ */
+export declare function registerDifileScheme(): void;
 /**
  * Suppress EPIPE errors on stdout/stderr.
  * Call at the very top of your entry file, before any imports that may write.

package/dist/main/app/bootstrap.js

@@ -1,6 +1,33 @@
-import { app } from 'electron';
+import { app, protocol } from 'electron';
 import { DEFAULT_CDP_PORT } from '../../shared/constants.js';
 import { loadWorkbenchSettings } from '../services/settings/index.js';
+let difileSchemeRegistered = false;
+/**
+ * Register `difile://` as a privileged scheme so `simSession.protocol.handle`
+ * can serve `difile://devtools/{uuid}` URLs from the simulator webview without
+ * tripping CSP / fetch-API restrictions. Must be called before `app.whenReady`.
+ *
+ * Idempotent — subsequent calls are no-ops because Electron throws if the same
+ * scheme is registered twice.
+ */
+export function registerDifileScheme() {
+    if (difileSchemeRegistered)
+        return;
+    difileSchemeRegistered = true;
+    protocol.registerSchemesAsPrivileged([
+        {
+            scheme: 'difile',
+            privileges: {
+                standard: true,
+                secure: true,
+                supportFetchAPI: true,
+                stream: true,
+                bypassCSP: true,
+                corsEnabled: true,
+            },
+        },
+    ]);
+}
 /**
  * Suppress EPIPE errors on stdout/stderr.
  * Call at the very top of your entry file, before any imports that may write.