@houwert/conductor 0.24.1 → 0.25.0

package/dist/drivers/eval-compiler.js

@@ -0,0 +1,131 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileEval = compileEval;
+/**
+ * Compiles user Swift into a fresh dylib exporting `conductor_eval`, then drops
+ * it into the target app's container so the injected library can dlopen it.
+ *
+ * `expr` mode wraps an expression; `full` mode takes the whole function body.
+ * Each build is a uniquely-named dylib to avoid dlopen caching.
+ */
+const child_process_1 = require("child_process");
+const util_1 = require("util");
+const crypto_1 = __importDefault(require("crypto"));
+const promises_1 = __importDefault(require("fs/promises"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const run = (0, util_1.promisify)(child_process_1.execFile);
+const EXPR_TEMPLATE = (code) => `import Foundation
+import UIKit
+import SwiftUI
+
+@_cdecl("conductor_eval")
+public func conductor_eval() -> UnsafePointer<CChar> {
+    let __result: Any = {
+${code}
+    }()
+    return UnsafePointer(strdup(String(describing: __result))!)
+}
+`;
+const FULL_TEMPLATE = (code) => `import Foundation
+import UIKit
+import SwiftUI
+
+@_cdecl("conductor_eval")
+public func conductor_eval() -> UnsafePointer<CChar> {
+${code}
+}
+`;
+async function detectTarget(platform) {
+    const sdkName = platform === 'tvos' ? 'appletvsimulator' : 'iphonesimulator';
+    const sdkPlatform = platform === 'tvos' ? 'tvos' : 'ios';
+    const [{ stdout: sdkPath }, { stdout: sdkVer }] = await Promise.all([
+        run('xcrun', ['--sdk', sdkName, '--show-sdk-path']),
+        run('xcrun', ['--sdk', sdkName, '--show-sdk-version']),
+    ]);
+    const major = sdkVer.trim().split('.')[0];
+    const arch = os_1.default.arch() === 'arm64' ? 'arm64' : 'x86_64';
+    return {
+        sdkName,
+        sdkPath: sdkPath.trim(),
+        target: `${arch}-apple-${sdkPlatform}${major}.0-simulator`,
+    };
+}
+/**
+ * Compile `code` and place the dylib inside the app container's tmp so the
+ * sandboxed app can dlopen it. Returns the container-relative host path (which,
+ * on the simulator, is the same path the app opens).
+ */
+async function compileEval(code, mode, platform, deviceId, bundleId) {
+    const start = Date.now();
+    const { sdkName, sdkPath, target } = await detectTarget(platform);
+    const source = (mode === 'full' ? FULL_TEMPLATE : EXPR_TEMPLATE)(code);
+    const hash = crypto_1.default.createHash('md5').update(source).digest('hex').slice(0, 10);
+    const workDir = path_1.default.join(os_1.default.tmpdir(), 'conductor-eval');
+    await promises_1.default.mkdir(workDir, { recursive: true });
+    const swiftFile = path_1.default.join(workDir, `eval_${hash}.swift`);
+    const dylibName = `eval_${hash}_${Date.now()}.dylib`;
+    const dylibPath = path_1.default.join(workDir, dylibName);
+    await promises_1.default.writeFile(swiftFile, source, 'utf-8');
+    try {
+        await run('xcrun', [
+            '-sdk',
+            sdkName,
+            'swiftc',
+            '-target',
+            target,
+            '-sdk',
+            sdkPath,
+            '-emit-library',
+            '-Onone',
+            '-enable-testing',
+            '-o',
+            dylibPath,
+            // Unresolved symbols (app/system) resolve at dlopen time in the host process.
+            '-Xlinker',
+            '-undefined',
+            '-Xlinker',
+            'dynamic_lookup',
+            swiftFile,
+        ]);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            error: `compile failed:\n${err.stderr ?? String(err)}`,
+        };
+    }
+    // Ad-hoc sign (sim rejects unsigned dylibs for dlopen on newer runtimes).
+    await run('codesign', ['--force', '--sign', '-', dylibPath]).catch(() => { });
+    // Copy into the app's data container tmp so the sandboxed app can read it.
+    try {
+        const { stdout } = await run('xcrun', [
+            'simctl',
+            'get_app_container',
+            deviceId,
+            bundleId,
+            'data',
+        ]);
+        const container = stdout.trim();
+        // System apps (and any without a data container) print "(null)"; use the raw
+        // path there — simulator apps are host processes and can dlopen it directly.
+        if (!container.startsWith('/'))
+            throw new Error('no data container');
+        const containerTmp = path_1.default.join(container, 'tmp');
+        await promises_1.default.mkdir(containerTmp, { recursive: true });
+        const dest = path_1.default.join(containerTmp, dylibName);
+        await promises_1.default.copyFile(dylibPath, dest);
+        return { ok: true, dylibPath: dest, info: `compiled in ${Date.now() - start}ms` };
+    }
+    catch {
+        // Fall back to the raw temp path — simulator apps can usually open it directly.
+        return {
+            ok: true,
+            dylibPath,
+            info: `compiled in ${Date.now() - start}ms (container copy skipped)`,
+        };
+    }
+}

package/dist/drivers/ios-hid.js

@@ -0,0 +1,95 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IOSHidClient = void 0;
+/**
+ * Node client for the host-side CoreSimulator HID injector
+ * (`packages/ios-hid`, built to `drivers/ios-hid/conductor-hid`).
+ *
+ * This is the streaming pointer backend: unlike XCUITest's atomic
+ * `_XCT_synthesizeEvent`, it holds a touch DOWN and streams moves, so a live
+ * drag animates on-device as the finger moves. Opt-in (CONDUCTOR_IOS_HID=1) and
+ * single-touch — multitouch/discrete gestures stay on the XCUITest path.
+ *
+ * Talks newline-delimited JSON over the binary's stdio, one request in flight
+ * at a time (FIFO correlation, mirroring the XCTest driver's simplicity).
+ */
+const child_process_1 = require("child_process");
+const readline_1 = __importDefault(require("readline"));
+const PHASE_TO_TYPE = {
+    down: 0,
+    move: 1,
+    up: 2,
+    cancel: 2, // release the held touch
+};
+class IOSHidClient {
+    constructor(binaryPath, udid) {
+        this.binaryPath = binaryPath;
+        this.udid = udid;
+        this.proc = null;
+        this.rl = null;
+        this.pending = [];
+    }
+    start() {
+        if (this.proc)
+            return;
+        this.proc = (0, child_process_1.spawn)(this.binaryPath, [], { stdio: ['pipe', 'pipe', 'inherit'] });
+        this.rl = readline_1.default.createInterface({ input: this.proc.stdout });
+        this.rl.on('line', (line) => {
+            const resolve = this.pending.shift();
+            if (!resolve)
+                return;
+            try {
+                resolve(JSON.parse(line));
+            }
+            catch {
+                resolve({ ok: false, error: `bad response: ${line}` });
+            }
+        });
+        this.proc.on('exit', () => {
+            this.proc = null;
+            this.rl = null;
+            // Fail any in-flight requests so callers don't hang.
+            while (this.pending.length)
+                this.pending.shift()({ ok: false, error: 'hid process exited' });
+        });
+    }
+    stop() {
+        this.proc?.kill();
+        this.proc = null;
+        this.rl = null;
+    }
+    send(req) {
+        if (!this.proc)
+            this.start();
+        return new Promise((resolve) => {
+            this.pending.push(resolve);
+            this.proc.stdin.write(JSON.stringify(req) + '\n');
+        });
+    }
+    async ping() {
+        const r = await this.send({ cmd: 'ping' });
+        return r.ok;
+    }
+    /** Inject a touch phase at normalized coords. */
+    async touch(nx, ny, phase) {
+        const r = await this.send({
+            cmd: 'touch',
+            udid: this.udid,
+            x: nx,
+            y: ny,
+            type: PHASE_TO_TYPE[phase],
+        });
+        if (!r.ok)
+            throw new Error(`hid touch failed (rc=${r.rc ?? '?'}) ${r.error ?? ''}`.trim());
+    }
+    /** Adapter for the router's live-pointer path (single finger; id ignored). */
+    asLivePointer() {
+        return {
+            pointer: (_id, phase, nx, ny) => this.touch(nx, ny, phase),
+        };
+    }
+}
+exports.IOSHidClient = IOSHidClient;

package/dist/drivers/ios-inproc.js

@@ -0,0 +1,198 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InprocClient = void 0;
+exports.getInprocPort = getInprocPort;
+/**
+ * Client + port allocation for the injected in-process control library
+ * (`packages/ios-inproc`). This is a second inspection plane that runs *inside*
+ * the target app — distinct from the external XCUITest driver in `ios.ts`.
+ *
+ * The dylib is injected at launch (see IOSDriver.launchApp `inject` option). The
+ * CLI allocates a loopback port per device, hands it to the app via
+ * SIMCTL_CHILD_CONDUCTOR_INPROC_PORT, and connects here. Simulator apps share
+ * the host loopback, so 127.0.0.1:<port> reaches the in-process server — the same
+ * mechanism the XCUITest driver uses on :1075.
+ */
+const http_1 = __importDefault(require("http"));
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const INPROC_BASE_PORT = 6075;
+const PORT_FILE = path_1.default.join(os_1.default.homedir(), '.conductor', 'inproc-ports.json');
+function readState() {
+    try {
+        return JSON.parse(fs_1.default.readFileSync(PORT_FILE, 'utf-8'));
+    }
+    catch {
+        return { assignments: {}, nextPort: INPROC_BASE_PORT };
+    }
+}
+/**
+ * Deterministic in-process control port for a device. Stable across calls so
+ * the launcher and any later `native-*` command agree without a discovery file.
+ */
+function getInprocPort(deviceId) {
+    const state = readState();
+    const existing = state.assignments[deviceId];
+    if (existing !== undefined)
+        return existing;
+    const port = state.nextPort;
+    state.assignments[deviceId] = port;
+    state.nextPort = port + 1;
+    fs_1.default.mkdirSync(path_1.default.dirname(PORT_FILE), { recursive: true });
+    fs_1.default.writeFileSync(PORT_FILE, JSON.stringify(state, null, 2));
+    return port;
+}
+/** HTTP/JSON client for the in-process control server. */
+class InprocClient {
+    constructor(port, host = '127.0.0.1') {
+        this.port = port;
+        this.host = host;
+    }
+    get(reqPath, timeoutMs = 5000) {
+        return new Promise((resolve, reject) => {
+            const req = http_1.default.request({ hostname: this.host, port: this.port, path: reqPath, method: 'GET' }, (res) => {
+                const chunks = [];
+                res.on('data', (c) => chunks.push(c));
+                res.on('end', () => {
+                    try {
+                        resolve(JSON.parse(Buffer.concat(chunks).toString('utf-8')));
+                    }
+                    catch (err) {
+                        reject(err);
+                    }
+                });
+                res.on('error', reject);
+            });
+            req.setTimeout(timeoutMs, () => req.destroy(new Error('in-proc request timed out')));
+            req.on('error', reject);
+            req.end();
+        });
+    }
+    ping(timeoutMs = 5000) {
+        return this.get('/ping', timeoutMs);
+    }
+    /** Full native view hierarchy with colors, fonts, text, and layer visuals. */
+    inspect(timeoutMs = 15000) {
+        return this.get('/inspect', timeoutMs);
+    }
+    /** Navigation / view-controller hierarchy (stacks, tabs, presented, titles). */
+    nav(timeoutMs = 15000) {
+        return this.get('/nav', timeoutMs);
+    }
+    /** Full property detail for one view (by id from inspect). */
+    view(id, timeoutMs = 8000) {
+        return this.get(`/view?id=${encodeURIComponent(id)}`, timeoutMs);
+    }
+    /** Live-set a whitelisted property on a view (alpha, backgroundColor, text, frame, …). */
+    set(id, key, value, timeoutMs = 8000) {
+        const q = `id=${encodeURIComponent(id)}&key=${encodeURIComponent(key)}&value=${encodeURIComponent(value)}`;
+        return this.get(`/set?${q}`, timeoutMs);
+    }
+    /** React Native Fabric props: typed ViewProps + the raw JS prop bag. */
+    props(id, timeoutMs = 8000) {
+        return this.get(`/props?id=${encodeURIComponent(id)}`, timeoutMs);
+    }
+    /** Auto Layout constraints affecting a view + ambiguity flag. */
+    constraints(id, timeoutMs = 8000) {
+        return this.get(`/constraints?id=${encodeURIComponent(id)}`, timeoutMs);
+    }
+    /** Topmost view at a window point, plus its ancestor chain. */
+    hittest(x, y, timeoutMs = 8000) {
+        return this.get(`/hittest?x=${x}&y=${y}`, timeoutMs);
+    }
+    /** Flash a highlight overlay over a view on the device. */
+    highlight(id, timeoutMs = 8000) {
+        return this.get(`/highlight?id=${encodeURIComponent(id)}`, timeoutMs);
+    }
+    /** Search views by class-name substring and/or text substring. */
+    find(q, timeoutMs = 10000) {
+        const parts = [];
+        if (q.className)
+            parts.push(`class=${encodeURIComponent(q.className)}`);
+        if (q.text)
+            parts.push(`text=${encodeURIComponent(q.text)}`);
+        return this.get(`/find?${parts.join('&')}`, timeoutMs);
+    }
+    /** PNG of the whole key window. */
+    screenshot(timeoutMs = 20000) {
+        return this.getBuffer('/screenshot', timeoutMs);
+    }
+    /**
+     * PNG of a single view in isolation — the texture for a 3D exploded-layer
+     * viewer. Default (`includeSubviews=false`) captures only this view's own
+     * content, so each node is a distinct transparent layer plane.
+     */
+    snapshot(id, includeSubviews = false, timeoutMs = 15000) {
+        const q = `id=${encodeURIComponent(id)}&subviews=${includeSubviews ? 'true' : 'false'}`;
+        return this.getBuffer(`/snapshot?${q}`, timeoutMs);
+    }
+    /**
+     * PNG crop of a window-absolute rect (use a node's `absFrame` from inspect).
+     * Composites whatever is drawn there — works for UIImageView, RN Fabric, etc.
+     */
+    image(frame, timeoutMs = 15000) {
+        return this.getBuffer(`/image?frame=${frame.x},${frame.y},${frame.w},${frame.h}`, timeoutMs);
+    }
+    /** Raw GET to any endpoint, parsed as JSON. */
+    rawJson(reqPath, timeoutMs = 15000) {
+        const path = reqPath.startsWith('/') ? reqPath : `/${reqPath}`;
+        return this.get(path, timeoutMs);
+    }
+    /** Raw GET to any endpoint — returns the content-type and bytes (json or image). */
+    rawRequest(reqPath, timeoutMs = 20000) {
+        const path = reqPath.startsWith('/') ? reqPath : `/${reqPath}`;
+        return new Promise((resolve, reject) => {
+            const req = http_1.default.request({ hostname: this.host, port: this.port, path, method: 'GET' }, (res) => {
+                const chunks = [];
+                res.on('data', (c) => chunks.push(c));
+                res.on('end', () => resolve({ contentType: res.headers['content-type'] ?? '', body: Buffer.concat(chunks) }));
+                res.on('error', reject);
+            });
+            req.setTimeout(timeoutMs, () => req.destroy(new Error('in-proc request timed out')));
+            req.on('error', reject);
+            req.end();
+        });
+    }
+    getBuffer(reqPath, timeoutMs) {
+        return new Promise((resolve, reject) => {
+            const req = http_1.default.request({ hostname: this.host, port: this.port, path: reqPath, method: 'GET' }, (res) => {
+                const chunks = [];
+                res.on('data', (c) => chunks.push(c));
+                res.on('end', () => {
+                    const buf = Buffer.concat(chunks);
+                    const type = res.headers['content-type'] ?? '';
+                    if (!type.startsWith('image/')) {
+                        reject(new Error(`expected an image, got: ${buf.toString('utf-8').slice(0, 200)}`));
+                        return;
+                    }
+                    resolve(buf);
+                });
+                res.on('error', reject);
+            });
+            req.setTimeout(timeoutMs, () => req.destroy(new Error('in-proc image request timed out')));
+            req.on('error', reject);
+            req.end();
+        });
+    }
+    /** True once the in-process server answers a ping (poll after an injected launch). */
+    async waitUntilReady(timeoutMs = 10000) {
+        const deadline = Date.now() + timeoutMs;
+        while (Date.now() < deadline) {
+            try {
+                const res = await this.ping(1500);
+                if (res.status === 'ok')
+                    return true;
+            }
+            catch {
+                /* not up yet */
+            }
+            await new Promise((r) => setTimeout(r, 300));
+        }
+        return false;
+    }
+}
+exports.InprocClient = InprocClient;

package/dist/drivers/ios.js

@@ -89,14 +89,35 @@ class IOSDriver {
     invalidateHierarchyCache() {
         this.hierarchyCache = null;
     }
-    simctl(args) {
+    simctl(args, childEnv) {
         const _id = this.requireDeviceId();
         return new Promise((resolve, reject) => {
-            const proc = (0, child_process_1.spawn)('xcrun', ['simctl', ...args], { stdio: 'ignore' });
+            const proc = (0, child_process_1.spawn)('xcrun', ['simctl', ...args], {
+                stdio: 'ignore',
+                env: childEnv ? this.launchEnv(childEnv) : undefined,
+            });
             proc.on('close', (code) => code === 0 ? resolve() : reject(new Error(`xcrun simctl ${args[0]} failed (exit ${code})`)));
             proc.on('error', reject);
         });
     }
+    /**
+     * Build the env for a `simctl launch` that must forward vars into the target
+     * app. `simctl` copies `SIMCTL_CHILD_*` vars into the app's real environment at
+     * exec() — the only path dyld honours for restricted vars like
+     * DYLD_INSERT_LIBRARIES. Inherited SIMCTL_CHILD_* are stripped first so stale
+     * values (from a parent shell) can't override ours and silently break injection.
+     */
+    launchEnv(childEnv) {
+        const env = { ...process.env };
+        for (const key of Object.keys(env)) {
+            if (key.startsWith('SIMCTL_CHILD_'))
+                delete env[key];
+        }
+        for (const [key, value] of Object.entries(childEnv)) {
+            env[`SIMCTL_CHILD_${key}`] = value;
+        }
+        return env;
+    }
     simctlCapture(args) {
         this.requireDeviceId();
         return new Promise((resolve, reject) => {
@@ -167,15 +188,25 @@ class IOSDriver {
         });
         this.invalidateHierarchyCache();
     }
-    async launchApp(bundleId, args) {
-        if (args && Object.keys(args).length > 0) {
+    async launchApp(bundleId, args, inject) {
+        const argPairs = [];
+        for (const [key, value] of Object.entries(args ?? {})) {
+            argPairs.push(`-${key}`, value);
+        }
+        if (inject) {
+            // Injection requires simctl launch with SIMCTL_CHILD_ env — the XCTest
+            // /launchApp path only activates and can't set environment.
+            const deviceId = this.requireDeviceId();
+            await this.simctl(['terminate', deviceId, bundleId]).catch(() => { });
+            await this.simctl(['launch', '--terminate-running-process', deviceId, bundleId, ...argPairs], {
+                DYLD_INSERT_LIBRARIES: inject.dylibPath,
+                CONDUCTOR_INPROC_PORT: String(inject.inprocPort),
+            });
+        }
+        else if (argPairs.length > 0) {
             const deviceId = this.requireDeviceId();
             // xctest /launchApp doesn't support launch args — use simctl
             await this.simctl(['terminate', deviceId, bundleId]).catch(() => { });
-            const argPairs = [];
-            for (const [key, value] of Object.entries(args)) {
-                argPairs.push(`-${key}`, value);
-            }
             await this.simctl(['launch', '--terminate-running-process', deviceId, bundleId, ...argPairs]);
         }
         else {

package/dist/drivers/metro-scripts.js

@@ -16,6 +16,8 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.makeComponentTreeScript = makeComponentTreeScript;
+exports.makeOverridePropsScript = makeOverridePropsScript;
+exports.makeRnPropsScript = makeRnPropsScript;
 exports.makeInspectElementScript = makeInspectElementScript;
 /** RN internals + navigation/safe-area wrappers we always strip from the tree. */
 const SKIP_NAMES = [
@@ -289,6 +291,178 @@ function makeComponentTreeScript(requestId) {
     }
   })();`;
 }
+/**
+ * Shared JS: locate a host fiber by its native reactTag, across every registered
+ * renderer and both RN architectures (Paper `_nativeTag`/`canonical.nativeTag`,
+ * Fabric bridgeless `__nativeTag` on the state node / public instance). Defines
+ * `findByTag(hook, TAG)` returning `{ fiber, renderer }` or null.
+ */
+const FIBER_BY_TAG_HELPERS = `
+    function nativeTagOf(f) {
+      if (typeof f.type !== 'string' || !f.stateNode) return null;
+      var sn = f.stateNode;
+      if (typeof sn._nativeTag === 'number') return sn._nativeTag;
+      if (typeof sn.__nativeTag === 'number') return sn.__nativeTag;
+      if (sn.canonical) {
+        if (typeof sn.canonical.nativeTag === 'number') return sn.canonical.nativeTag;
+        var pi = sn.canonical.publicInstance;
+        if (pi && typeof pi.__nativeTag === 'number') return pi.__nativeTag;
+      }
+      if (sn.node && typeof sn.node.__nativeTag === 'number') return sn.node.__nativeTag;
+      return null;
+    }
+    function findHostByTag(root, TAG) {
+      var stack = [root.current || root], seen = 0;
+      while (stack.length && seen < 40000) {
+        var f = stack.pop(); seen++;
+        if (!f) continue;
+        if (nativeTagOf(f) === TAG) return f;
+        if (f.sibling) stack.push(f.sibling);
+        if (f.child) stack.push(f.child);
+      }
+      return null;
+    }
+    function findByTag(hook, TAG) {
+      var entries = [];
+      hook.renderers.forEach(function(r, id) { entries.push([id, r]); });
+      for (var i = 0; i < entries.length; i++) {
+        var id = entries[i][0], r = entries[i][1], roots = null;
+        try { roots = hook.getFiberRoots(id); } catch (e) {}
+        if (!roots) continue;
+        var arr = Array.from(roots);
+        for (var j = 0; j < arr.length; j++) {
+          var hf = findHostByTag(arr[j], TAG);
+          if (hf) return { fiber: hf, renderer: r };
+        }
+      }
+      return null;
+    }`;
+/**
+ * Live-edit props via React DevTools' `overrideProps(fiber, path, value)` — the
+ * same call the DevTools "edit prop" UI makes. Maps `reactTag` → host fiber, then
+ * picks the fiber that owns the top-level path key (for `children`, prefers the
+ * composite `<Text>` ancestor, so the visible string changes). Returns a JSON
+ * string: `{status:'ok',applied:true}` or `{status:'error',message}`.
+ */
+function makeOverridePropsScript(reactTag, path, valueJson) {
+    return `(function() {
+    try {
+      var hook = globalThis.__REACT_DEVTOOLS_GLOBAL_HOOK__;
+      if (!hook || !hook.renderers || !hook.getFiberRoots) {
+        return JSON.stringify({ status: 'error', message: 'No React DevTools hook — not a dev/debug build?' });
+      }
+      var TAG = ${JSON.stringify(reactTag)};
+      var PATH = ${JSON.stringify(path)};
+      var VALUE = ${valueJson};
+      ${FIBER_BY_TAG_HELPERS}
+      var hit = findByTag(hook, TAG);
+      if (!hit) return JSON.stringify({ status: 'error', message: 'no fiber for reactTag ' + TAG });
+      var renderer = hit.renderer;
+      if (!renderer || typeof renderer.overrideProps !== 'function') {
+        return JSON.stringify({ status: 'error', message: 'renderer has no overrideProps — is this a dev build?' });
+      }
+      // Pick the fiber that owns the top path key. For 'children' prefer the
+      // nearest fiber whose children is a string (the renderable <Text>/RCTText),
+      // so overriding actually swaps the visible glyphs.
+      var key = PATH[0];
+      var cur = hit.fiber, hops = 0, fallback = null;
+      while (cur && hops < 10) {
+        var p = cur.memoizedProps;
+        if (p && typeof p === 'object' && Object.prototype.hasOwnProperty.call(p, key)) {
+          if (fallback === null) fallback = cur;
+          if (key !== 'children') { fallback = cur; break; }
+          if (typeof p.children === 'string') { fallback = cur; break; }
+        }
+        cur = cur.return; hops++;
+      }
+      var target = fallback || hit.fiber;
+      // RN styles are often arrays (StyleSheet composition). overrideProps' setIn
+      // can't create missing intermediates, and a key set on the array object is
+      // ignored by flattening — so for a 'style.<key>' path we flatten the current
+      // style to a plain object (what RN does anyway), apply the override, and set
+      // the whole 'style'. Works whether style started as an object or an array.
+      if (PATH[0] === 'style' && PATH.length >= 2) {
+        function flattenStyle(s) {
+          var acc = {};
+          (function merge(x) {
+            if (!x) return;
+            if (Array.isArray(x)) { for (var i = 0; i < x.length; i++) merge(x[i]); return; }
+            if (typeof x === 'object') { for (var k in x) if (Object.prototype.hasOwnProperty.call(x, k)) acc[k] = x[k]; }
+          })(s);
+          return acc;
+        }
+        var flat = flattenStyle(target.memoizedProps && target.memoizedProps.style);
+        var keys = PATH.slice(1), o = flat;
+        for (var i = 0; i < keys.length - 1; i++) {
+          if (typeof o[keys[i]] !== 'object' || o[keys[i]] === null) o[keys[i]] = {};
+          o = o[keys[i]];
+        }
+        o[keys[keys.length - 1]] = VALUE;
+        renderer.overrideProps(target, ['style'], flat);
+        return JSON.stringify({ status: 'ok', applied: true, note: 'style flattened to object; override applied' });
+      }
+      renderer.overrideProps(target, PATH, VALUE);
+      return JSON.stringify({ status: 'ok', applied: true });
+    } catch (e) {
+      return JSON.stringify({ status: 'error', message: String((e && e.message) || e) });
+    }
+  })();`;
+}
+/**
+ * Dump a host fiber's `memoizedProps` (the real JSX props RN passed to the native
+ * view — the JS-side analog of the native `/props` rawProps that Fabric drops).
+ * Functions become `"[Function: name]"`; cycles/over-depth become markers.
+ * Returns a JSON string `{status:'ok',props:{...}}` or `{status:'error',message}`.
+ */
+function makeRnPropsScript(reactTag) {
+    return `(function() {
+    try {
+      var hook = globalThis.__REACT_DEVTOOLS_GLOBAL_HOOK__;
+      if (!hook || !hook.renderers || !hook.getFiberRoots) {
+        return JSON.stringify({ status: 'error', message: 'No React DevTools hook — not a dev/debug build?' });
+      }
+      var TAG = ${JSON.stringify(reactTag)};
+      ${FIBER_BY_TAG_HELPERS}
+      var hit = findByTag(hook, TAG);
+      if (!hit) return JSON.stringify({ status: 'error', message: 'no fiber for reactTag ' + TAG });
+      var seen = [];
+      function ser(v, depth) {
+        if (v === null || v === undefined) return v === undefined ? undefined : null;
+        var t = typeof v;
+        if (t === 'string' || t === 'boolean') return v;
+        if (t === 'number') return isFinite(v) ? v : String(v);
+        if (t === 'function') return '[Function: ' + (v.name || 'anonymous') + ']';
+        if (t === 'symbol') return v.toString();
+        if (t === 'bigint') return String(v) + 'n';
+        if (t === 'object') {
+          if (depth > 6) return '[Object: max depth]';
+          if (seen.indexOf(v) !== -1) return '[Circular]';
+          if (v && v.$$typeof) return '[ReactElement]';
+          seen.push(v);
+          var out;
+          if (Array.isArray(v)) {
+            out = [];
+            for (var i = 0; i < v.length && i < 200; i++) out.push(ser(v[i], depth + 1));
+          } else {
+            out = {};
+            var keys = Object.keys(v);
+            for (var k = 0; k < keys.length; k++) {
+              var val = ser(v[keys[k]], depth + 1);
+              if (val !== undefined) out[keys[k]] = val;
+            }
+          }
+          seen.pop();
+          return out;
+        }
+        return String(v);
+      }
+      var props = ser(hit.fiber.memoizedProps || {}, 0);
+      return JSON.stringify({ status: 'ok', props: props });
+    } catch (e) {
+      return JSON.stringify({ status: 'error', message: String((e && e.message) || e) });
+    }
+  })();`;
+}
 /**
  * Inspect-at-point script. Uses React DevTools's own
  * `renderer.rendererConfig.getInspectorDataForViewAtPoint(inspectRef, x, y, cb)`,