@hover-dev/core 0.17.0 → 0.18.0

package/dist/mcp/sourceFence.js

@@ -1,79 +0,0 @@
-/**
- * The path fence for the opt-in `read_source` capability (codeContext).
- *
- * Giving the agent the ability to read source is the ONE place Hover relaxes
- * its "the agent only touches the browser" rule, so the fence is the whole
- * security story. It must guarantee, on every call, that a caller-supplied path:
- *   1. resolves to a location INSIDE the project root (no `..` / absolute-path
- *      escape — symlink escape is caught by the server's realpath re-check), and
- *   2. is not a credential / secret / VCS / dependency file.
- * Pure + lexical so it's exhaustively unit-testable; the server layers a
- * realpath check + a size/binary guard on top.
- */
-import { resolve, relative, isAbsolute, sep } from 'node:path';
-/** Files we refuse to read even inside the root — credentials, keys, VCS,
- *  dependency trees, build caches. Matched against the POSIX-style relative
- *  path (so `\` on Windows is normalised first). */
-const SECRET_PATTERNS = [
-    /(^|\/)\.env(\.[^/]*)?$/i, //              .env, .env.local, .env.production
-    /\.env$/i, //                             any *.env dotenv file (prod.env, local.env)
-    /(^|\/)\.envrc$/i, //                      direnv (holds exported env / secrets)
-    /\.tfvars(\.json)?$/i, //                  terraform variable files (often secrets)
-    /(^|\/)\.htpasswd$/i, //                   http basic-auth credentials
-    /(^|\/)\.git(\/|$)/, //                    the git dir
-    /(^|\/)node_modules(\/|$)/, //             dependency tree
-    /(^|\/)\.(next|nuxt|svelte-kit|astro|turbo|cache|output|vercel)(\/|$)/, // build caches
-    /(^|\/)(dist|build|coverage)(\/|$)/, //    build output
-    /\.(pem|key|p12|pfx|crt|cer|der|keystore|jks)$/i, // key / cert material
-    /(^|\/)id_(rsa|dsa|ecdsa|ed25519)(\.[^/]*)?$/i, // ssh keys
-    /(^|\/)\.(npmrc|netrc|pgpass)$/i, //       token-bearing rc files
-    /(^|\/)\.(ssh|aws|gnupg|gcloud|kube|docker)(\/|$)/i, // credential dirs
-    /(^|\/)secrets?(\/|\.[^/]*$|$)/i, //       a secrets dir, or a secret(s).<ext> file
-    /(^|\/)credentials?(\/|\.[^/]*$|$)/i, //   a credentials dir, or credential(s).<ext>
-    /\.(secret|secrets)$/i,
-];
-/** A path containing a NUL or C0 control char is never a legitimate source file. */
-function hasControlChar(s) {
-    for (let i = 0; i < s.length; i++) {
-        if (s.charCodeAt(i) < 0x20)
-            return true;
-    }
-    return false;
-}
-/**
- * Resolve `input` against `root`, refusing anything outside the root or matching
- * a secret pattern. `input` is treated as relative to the root; an absolute
- * input is resolved too but will fail the containment check unless it happens to
- * live under the root (the agent should pass repo-relative paths).
- */
-export function resolveSourcePath(root, input) {
-    if (typeof input !== 'string' || !input.trim()) {
-        return { ok: false, reason: 'path is required' };
-    }
-    if (hasControlChar(input)) {
-        return { ok: false, reason: 'path contains control characters' };
-    }
-    const rootAbs = resolve(root);
-    const abs = resolve(rootAbs, input);
-    const rel = relative(rootAbs, abs);
-    // Outside the root: relative() returns '' for the root itself, a '..'-prefixed
-    // path for an ancestor/sibling, or an absolute path when on a different drive.
-    if (rel === '' || rel === '..' || rel.startsWith('..' + sep) || rel.startsWith('../') || isAbsolute(rel)) {
-        return { ok: false, reason: 'path escapes the project root' };
-    }
-    const relPosix = rel.split(sep).join('/');
-    for (const pat of SECRET_PATTERNS) {
-        if (pat.test(relPosix)) {
-            return { ok: false, reason: `refused: "${relPosix}" matches an excluded (secret / build / VCS) pattern` };
-        }
-    }
-    return { ok: true, abs, rel: relPosix };
-}
-/** True if a resolved-and-realpathed absolute path is still inside the root.
- *  The server calls this AFTER realpath to defeat symlink escape (a symlink
- *  whose lexical path passed resolveSourcePath but points outside the root). */
-export function isWithinRoot(root, realAbs) {
-    const rootAbs = resolve(root);
-    const rel = relative(rootAbs, realAbs);
-    return rel !== '' && rel !== '..' && !rel.startsWith('..' + sep) && !rel.startsWith('../') && !isAbsolute(rel);
-}

package/dist/mcp/sourceServer.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=sourceServer.d.ts.map

package/dist/mcp/sourceServer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sourceServer.d.ts","sourceRoot":"","sources":["../../src/mcp/sourceServer.ts"],"names":[],"mappings":""}

package/dist/mcp/sourceServer.js

@@ -1,191 +0,0 @@
-#!/usr/bin/env node
-/**
- * Hover source-reader MCP server — the runtime behind the opt-in `codeContext`
- * switch. Spawned by the agent (Claude Code / Codex) as a stdio subprocess when
- * codeContext is enabled, in addition to Playwright MCP. It gives the agent
- * READ-ONLY, fenced access to the project's source so it can author smarter
- * tests and do white-box security/pentest work (read the actual query / authz
- * check, not just the rendered DOM).
- *
- * This is the ONE place Hover relaxes "the agent only touches the browser", so
- * the safety is all in the fence (src/mcp/sourceFence.ts) + the guards here:
- *   - every path is resolved INSIDE the project root (no `..` / absolute escape)
- *   - a realpath re-check defeats symlink escape
- *   - secret / VCS / dependency / build files are refused (.env, keys, .git, …)
- *   - read-only: there is no write / exec / delete tool here
- *   - a size cap + a binary guard keep it to actual source
- *
- * The project root comes in via env:
- *   HOVER_PROJECT_ROOT   absolute path to the dev project root (devRoot)
- *
- * Tools exposed:
- *   read_source({ path })            → the file's text (fenced, ≤256 KB, text-only)
- *   list_source({ subdir? })         → a shallow dir listing (secrets filtered out)
- */
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { z } from 'zod';
-import { readFileSync, realpathSync, statSync, readdirSync } from 'node:fs';
-import { WebSocket } from 'ws';
-import { resolveSourcePath, isWithinRoot } from './sourceFence.js';
-const root = process.env.HOVER_PROJECT_ROOT;
-if (!root) {
-    process.stderr.write('[hover-source-mcp] HOVER_PROJECT_ROOT must be set by the host.\n');
-    process.exit(1);
-}
-const ROOT = root;
-const MAX_BYTES = 256 * 1024;
-function md(text) {
-    return { content: [{ type: 'text', text }] };
-}
-// ── Read-approval gate ──────────────────────────────────────────────────────
-// When the host runs us with HOVER_SOURCE_GATE=ask, every read/list first asks
-// the editor (over the Hover service WS at HOVER_APPROVAL_PORT) for the user's
-// one-click approval. The reader is fenced + read-only, so the gate is consent
-// UX, not a security boundary: if the editor can't be reached or doesn't answer
-// within 30s we FAIL OPEN (allow) rather than stall the agent's run.
-const GATE = process.env.HOVER_SOURCE_GATE;
-const APPROVAL_PORT = process.env.HOVER_APPROVAL_PORT;
-let approvalWs = null;
-let approvalSeq = 0;
-const pendingApprovals = new Map();
-function ensureApprovalWs() {
-    if (GATE !== 'ask' || !APPROVAL_PORT)
-        return null;
-    if (approvalWs && (approvalWs.readyState === WebSocket.OPEN || approvalWs.readyState === WebSocket.CONNECTING))
-        return approvalWs;
-    try {
-        const sock = new WebSocket(`ws://127.0.0.1:${APPROVAL_PORT}`);
-        sock.on('message', (data) => {
-            try {
-                const m = JSON.parse(data.toString());
-                if (m?.type === 'source-approval-response' && m.payload?.approvalId) {
-                    const settle = pendingApprovals.get(m.payload.approvalId);
-                    if (settle)
-                        settle(m.payload.allow === true);
-                }
-            }
-            catch { /* ignore malformed */ }
-        });
-        // Channel lost → fail OPEN for every waiting read (the reader is fenced +
-        // read-only; the gate is consent UX, not a security boundary, so never hang
-        // a run on a dead channel). The user taking their time is NOT a loss — only
-        // a closed/errored socket settles here.
-        const drain = () => { for (const s of [...pendingApprovals.values()])
-            s(true); };
-        sock.on('error', () => { drain(); });
-        sock.on('close', () => { if (approvalWs === sock)
-            approvalWs = null; drain(); });
-        approvalWs = sock;
-    }
-    catch {
-        approvalWs = null;
-    }
-    return approvalWs;
-}
-async function approve(path, kind) {
-    if (GATE !== 'ask' || !APPROVAL_PORT)
-        return true; // not gated → allow
-    const sock = ensureApprovalWs();
-    if (!sock)
-        return true; // no channel → fail open
-    const id = `a${++approvalSeq}`;
-    return new Promise((resolve) => {
-        // NO timeout: the consent prompt waits for the user (they may not see it for
-        // a while — that must never auto-allow). It settles only on their answer, or
-        // when the channel drops (drain() above → fail open), or run cancel.
-        const settle = (allow) => {
-            if (!pendingApprovals.has(id))
-                return;
-            pendingApprovals.delete(id);
-            resolve(allow);
-        };
-        pendingApprovals.set(id, settle);
-        const req = () => sock.send(JSON.stringify({ type: 'source-approval-request', payload: { approvalId: id, sourcePath: path, sourceKind: kind } }));
-        if (sock.readyState === WebSocket.OPEN)
-            req();
-        else
-            sock.once('open', req);
-    });
-}
-const server = new McpServer({ name: 'hover-source', version: '0.0.0' });
-server.registerTool('read_source', {
-    description: "Read a source file from THIS project (read-only). Pass a repo-relative path (e.g. the one in an element's data-hover-source, `src/app/login.tsx:42` → path `src/app/login.tsx`). Fenced to the project root: paths that escape it, or that name secrets / keys / .env / .git / node_modules / build output, are refused. Use this to write tests against the real selectors & routes, or — in security/pentest mode — to confirm a finding against the actual server code (the SQL query, the authz check). You cannot write, run, or delete anything.",
-    inputSchema: {
-        path: z.string().describe('Repo-relative path to a source file, e.g. "src/api/orders.ts".'),
-    },
-}, async ({ path }) => {
-    if (!(await approve(path, 'read')))
-        return md(`✗ source read declined by the user — continue from what's visible on the page.`);
-    const f = resolveSourcePath(ROOT, path);
-    if (!f.ok)
-        return md(`✗ ${f.reason}`);
-    let real;
-    try {
-        real = realpathSync(f.abs);
-    }
-    catch {
-        return md(`✗ not found: ${f.rel}`);
-    }
-    if (!isWithinRoot(ROOT, real))
-        return md(`✗ refused: "${f.rel}" resolves (via a symlink) outside the project root`);
-    let st;
-    try {
-        st = statSync(real);
-    }
-    catch {
-        return md(`✗ not found: ${f.rel}`);
-    }
-    if (st.isDirectory())
-        return md(`✗ "${f.rel}" is a directory — use list_source`);
-    if (st.size > MAX_BYTES)
-        return md(`✗ "${f.rel}" is ${Math.round(st.size / 1024)} KB — too large to read (cap ${MAX_BYTES / 1024} KB)`);
-    let buf;
-    try {
-        buf = readFileSync(real);
-    }
-    catch (e) {
-        return md(`✗ could not read ${f.rel}: ${e instanceof Error ? e.message : String(e)}`);
-    }
-    // Binary guard — a NUL byte in the first 8 KB means it isn't source text.
-    if (buf.subarray(0, 8192).includes(0))
-        return md(`✗ "${f.rel}" looks binary — refused`);
-    return md(`\`\`\`\n// ${f.rel}\n${buf.toString('utf-8')}\n\`\`\``);
-});
-server.registerTool('list_source', {
-    description: 'List the entries of a directory in THIS project (shallow, read-only). Omit `subdir` for the project root. Secret / VCS / dependency / build entries are filtered out. Use it to discover what source exists before reading a file.',
-    inputSchema: {
-        subdir: z.string().optional().describe('Repo-relative directory, e.g. "src/api". Omit for the root.'),
-    },
-}, async ({ subdir }) => {
-    if (!(await approve(subdir || '.', 'list')))
-        return md(`✗ source listing declined by the user.`);
-    let dirAbs = ROOT;
-    let base = '';
-    if (subdir && subdir.trim() && subdir.trim() !== '.') {
-        const d = resolveSourcePath(ROOT, subdir);
-        if (!d.ok)
-            return md(`✗ ${d.reason}`);
-        dirAbs = d.abs;
-        base = d.rel;
-    }
-    let entries;
-    try {
-        entries = readdirSync(dirAbs, { withFileTypes: true });
-    }
-    catch {
-        return md(`✗ not a readable directory: ${base || '.'}`);
-    }
-    const rows = [];
-    for (const e of entries.sort((a, b) => a.name.localeCompare(b.name))) {
-        const rel = base ? `${base}/${e.name}` : e.name;
-        // Filter via the same fence so secrets/build/VCS never even show up.
-        if (!resolveSourcePath(ROOT, rel).ok)
-            continue;
-        rows.push(e.isDirectory() ? `${rel}/` : rel);
-    }
-    if (rows.length === 0)
-        return md(`(empty or fully filtered) ${base || '.'}`);
-    return md(`${base || '.'} —\n${rows.join('\n')}`);
-});
-await server.connect(new StdioServerTransport());

package/dist/modes.d.ts

@@ -1,39 +0,0 @@
-/**
- * Built-in (non-plugin) mode behavior. Hover's core modes — Flow (the default,
- * modeId `null`) and the planned QA mode — are pure agent-behavior config: which
- * actuation tools the agent uses and how a run crystallizes. (Plugin modes —
- * api-test / pentest — bring runtime machinery instead: a MITM proxy, sidecars,
- * Chrome proxy flags, lifecycle hooks; they resolve to PLUGIN_MODE_BEHAVIOR.)
- *
- * `resolveModeBehavior(modeId)` is the SINGLE place that answers "how does this
- * mode drive the agent", replacing scattered `currentModeId === null` checks.
- * Adding a built-in mode (e.g. QA) = one entry in BUILTIN_MODE_BEHAVIOR, not new
- * conditionals threaded through the run-assembly path.
- */
-export interface ModeBehavior {
-    /** Deny Playwright's loose interaction tools (browser_click / type / fill_form
-     *  / select_option / file_upload) AND inject the grounded-actuation directive,
-     *  so the agent actuates via the Hover control MCP and saved selectors are
-     *  role+name (record == replay). Flow and QA want this — they crystallize
-     *  browser steps; plugin modes don't — they explore to capture traffic and
-     *  keep the Playwright tools. */
-    groundedActuation: boolean;
-}
-/** Resolve the agent-behavior config for a mode id (null = Flow). Built-in modes
- *  are table-driven; any other (plugin) id falls back to PLUGIN_MODE_BEHAVIOR. */
-export declare function resolveModeBehavior(modeId: string | null): ModeBehavior;
-/** Picker metadata for built-in non-Flow modes (Flow is the implicit null
- *  default, not listed). core's broadcastModes merges these into the mode
- *  catalogue alongside plugin-contributed modes, and switchMode/set-mode accept
- *  them without requiring a plugin. */
-export interface BuiltinMode {
-    id: string;
-    label: string;
-    description: string;
-    accent: string;
-}
-export declare const BUILTIN_MODES: BuiltinMode[];
-/** True for a built-in non-null mode id (currently just `qa`). Lets core accept
- *  it in set-mode / switchMode without a contributing plugin. */
-export declare function isBuiltinMode(modeId: string): boolean;
-//# sourceMappingURL=modes.d.ts.map

package/dist/modes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"modes.d.ts","sourceRoot":"","sources":["../src/modes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;qCAKiC;IACjC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAmBD;kFACkF;AAClF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY,CAGvE;AAED;;;uCAGuC;AACvC,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,eAAO,MAAM,aAAa,EAAE,WAAW,EAOtC,CAAC;AAEF;iEACiE;AACjE,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAErD"}

package/dist/modes.js

@@ -1,34 +0,0 @@
-/** Flow — the default mode (modeId `null`): author a Playwright spec via grounded
- *  actuation. */
-const FLOW_MODE_BEHAVIOR = { groundedActuation: true };
-/** Built-in modes other than Flow, keyed by modeId.
- *  QA = comprehensive testing umbrella; its Functional capability reuses Flow's
- *  grounded actuation (record == replay for promoted candidate flows). (Its API
- *  capability — when enabled — delegates to the api-test plugin's MITM runtime;
- *  that orchestration is a later QA stage, not a ModeBehavior field.) */
-const BUILTIN_MODE_BEHAVIOR = {
-    qa: { groundedActuation: true },
-};
-/** Plugin-contributed modes (api-test / pentest): full Playwright tool access —
- *  they explore to capture traffic, not to crystallize browser steps. */
-const PLUGIN_MODE_BEHAVIOR = { groundedActuation: false };
-/** Resolve the agent-behavior config for a mode id (null = Flow). Built-in modes
- *  are table-driven; any other (plugin) id falls back to PLUGIN_MODE_BEHAVIOR. */
-export function resolveModeBehavior(modeId) {
-    if (modeId === null)
-        return FLOW_MODE_BEHAVIOR;
-    return BUILTIN_MODE_BEHAVIOR[modeId] ?? PLUGIN_MODE_BEHAVIOR;
-}
-export const BUILTIN_MODES = [
-    {
-        id: 'qa',
-        label: 'QA Testing',
-        description: 'explore the whole app → findings report + promotable specs',
-        accent: '#22c55e',
-    },
-];
-/** True for a built-in non-null mode id (currently just `qa`). Lets core accept
- *  it in set-mode / switchMode without a contributing plugin. */
-export function isBuiltinMode(modeId) {
-    return modeId in BUILTIN_MODE_BEHAVIOR;
-}

package/dist/playwright/cdpStatus.d.ts

@@ -1,14 +0,0 @@
-export type CdpState = 'same-window' | 'wrong-window' | 'no-cdp';
-export interface CdpStatusResult {
-    state: CdpState;
-    /** Tab count when state !== 'no-cdp'. */
-    tabCount?: number;
-    /** Matching tab URL inside the debug Chrome (only set for 'wrong-window'). */
-    matchingTabUrl?: string;
-    /** Browser product string from /json/version when state !== 'no-cdp'. */
-    browser?: string;
-    /** When state === 'no-cdp', the preflight reason. */
-    reason?: string;
-}
-export declare function checkCdpStatus(cdpUrl: string, pageUrl: string): Promise<CdpStatusResult>;
-//# sourceMappingURL=cdpStatus.d.ts.map

package/dist/playwright/cdpStatus.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cdpStatus.d.ts","sourceRoot":"","sources":["../../src/playwright/cdpStatus.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,cAAc,GAAG,QAAQ,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,QAAQ,CAAC;IAChB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAeD,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CA4B1B"}

package/dist/playwright/cdpStatus.js

@@ -1,52 +0,0 @@
-/**
- * "Is the widget running in the debug Chrome?" — answered by comparing the
- * widget's page origin against the CDP tab list.
- *
- * Three states:
- *   - 'same-window'   widget IS in the debug Chrome; agent can drive this tab.
- *   - 'wrong-window'  debug Chrome is up, but on a different Chrome process.
- *                     Widget should disable itself; service can bringToFront
- *                     the corresponding tab in the debug Chrome so the user
- *                     can switch windows.
- *   - 'no-cdp'        no debug Chrome at all; the widget should let the user
- *                     trigger a launch.
- */
-import { getPreflight } from './preflightCache.js';
-/**
- * Parse a page URL down to its origin (protocol + host + port). We compare
- * by origin, not full URL — the user might be on /login while the debug
- * Chrome tab is on /, but they're the same SPA, same app, same target.
- */
-function originOf(rawUrl) {
-    try {
-        return new URL(rawUrl).origin;
-    }
-    catch {
-        return null;
-    }
-}
-export async function checkCdpStatus(cdpUrl, pageUrl) {
-    const wantOrigin = originOf(pageUrl);
-    if (!wantOrigin) {
-        // Treat unparseable page URLs as no-cdp so the UI nudges a relaunch.
-        return { state: 'no-cdp', reason: `unparseable page URL: ${pageUrl}` };
-    }
-    const cdp = await getPreflight(cdpUrl);
-    if (!cdp.ok) {
-        return { state: 'no-cdp', reason: cdp.reason };
-    }
-    const match = cdp.tabs.find(t => originOf(t.url) === wantOrigin);
-    if (match) {
-        return {
-            state: 'same-window',
-            tabCount: cdp.tabs.length,
-            browser: cdp.browser,
-            matchingTabUrl: match.url,
-        };
-    }
-    return {
-        state: 'wrong-window',
-        tabCount: cdp.tabs.length,
-        browser: cdp.browser,
-    };
-}

package/dist/playwright/preflight.d.ts

@@ -1,31 +0,0 @@
-/**
- * Connect to the user's Chrome via CDP and return the URLs of all open tabs.
- * Closes the connection before returning (does not hold a Playwright session).
- */
-export declare function connectAndListTabs(cdpUrl: string): Promise<string[]>;
-export interface CdpTabInfo {
-    url: string;
-    title?: string;
-    type?: string;
-}
-export type CdpPreflightResult = {
-    ok: true;
-    browser: string;
-    tabs: CdpTabInfo[];
-} | {
-    ok: false;
-    reason: string;
-};
-/**
- * Lightweight CDP health check via the /json endpoints.
- *
- * Critical: this MUST run before invoking the agent. If CDP isn't responsive,
- * the Playwright MCP server falls back to launching its OWN Chromium — and
- * Hover's premise is to drive the user's existing Chrome (with their dev
- * state, cookies, devtools open), never spawn a fresh one.
- *
- * Pure HTTP — no playwright-core handshake, no setDownloadBehavior nonsense
- * that can get stuck on busy CDP sessions.
- */
-export declare function preflightCDP(cdpUrl: string, timeoutMs?: number): Promise<CdpPreflightResult>;
-//# sourceMappingURL=preflight.d.ts.map

package/dist/playwright/preflight.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../src/playwright/preflight.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQ1E;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,EAAE,CAAA;CAAE,GACjD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,SAAS,SAAO,GACf,OAAO,CAAC,kBAAkB,CAAC,CAsD7B"}

package/dist/playwright/preflight.js

@@ -1,82 +0,0 @@
-import { chromium } from 'playwright-core';
-/**
- * Connect to the user's Chrome via CDP and return the URLs of all open tabs.
- * Closes the connection before returning (does not hold a Playwright session).
- */
-export async function connectAndListTabs(cdpUrl) {
-    const browser = await chromium.connectOverCDP(cdpUrl);
-    try {
-        const pages = browser.contexts().flatMap(c => c.pages());
-        return pages.map(p => p.url());
-    }
-    finally {
-        await browser.close();
-    }
-}
-/**
- * Lightweight CDP health check via the /json endpoints.
- *
- * Critical: this MUST run before invoking the agent. If CDP isn't responsive,
- * the Playwright MCP server falls back to launching its OWN Chromium — and
- * Hover's premise is to drive the user's existing Chrome (with their dev
- * state, cookies, devtools open), never spawn a fresh one.
- *
- * Pure HTTP — no playwright-core handshake, no setDownloadBehavior nonsense
- * that can get stuck on busy CDP sessions.
- */
-export async function preflightCDP(cdpUrl, timeoutMs = 2000) {
-    let versionRes;
-    try {
-        versionRes = await fetch(`${cdpUrl}/json/version`, {
-            signal: AbortSignal.timeout(timeoutMs),
-        });
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        return {
-            ok: false,
-            reason: `Chrome debug session not detected at ${cdpUrl} (${msg}). Click the ✨ launcher in the widget to start it, or run \`pnpm exec hover-chrome\` (npx hover-chrome).`,
-        };
-    }
-    if (!versionRes.ok) {
-        // Drain the keep-alive socket — we won't read the body on the error path.
-        await versionRes.body?.cancel();
-        return { ok: false, reason: `CDP returned HTTP ${versionRes.status}` };
-    }
-    let versionJson;
-    try {
-        versionJson = (await versionRes.json());
-    }
-    catch {
-        return { ok: false, reason: 'CDP /json/version returned non-JSON' };
-    }
-    let tabs = [];
-    try {
-        const listRes = await fetch(`${cdpUrl}/json/list`, {
-            signal: AbortSignal.timeout(timeoutMs),
-        });
-        if (listRes.ok) {
-            const raw = (await listRes.json());
-            tabs = raw
-                .filter(t => t.type === 'page' || !t.type)
-                .map(t => ({ url: t.url ?? '', title: t.title, type: t.type }))
-                .filter(t => t.url.length > 0);
-        }
-        else {
-            // /json/version was healthy but /json/list wasn't — surface it so the
-            // agent's system prompt isn't silently built from an empty tab list.
-            // Drain the keep-alive socket since we won't read the body here.
-            await listRes.body?.cancel();
-            console.warn(`[hover] CDP /json/list returned HTTP ${listRes.status}; agent tab hint will be empty`);
-        }
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.warn(`[hover] CDP /json/list failed: ${msg}; agent tab hint will be empty`);
-    }
-    return {
-        ok: true,
-        browser: versionJson.Browser ?? 'unknown',
-        tabs,
-    };
-}

package/dist/playwright/preflightCache.d.ts

@@ -1,27 +0,0 @@
-import { preflightCDP } from './preflight.js';
-/**
- * Per-cdpUrl preflight cache.
- *
- * Why this exists: Hover preflights the CDP endpoint (`/json/version` +
- * `/json/list`) before every agent command AND on every widget connect's
- * `check-cdp` ping. Each `/json/list` round-trip is ~30–80 ms on local
- * Chrome; doing it twice for the same request — once from the command
- * path, once from the widget's CDP banner — adds up, and the widget pings
- * frequently because Vite HMR cycles the WebSocket connection.
- *
- * The cache is shared across both paths and keyed by `cdpUrl` so multiple
- * Hover services (one per example app in this monorepo, each with its own
- * CDP endpoint someday) don't share entries. 30 s TTL — Chrome's tab list
- * doesn't drift faster than that during a dev session, and any failure
- * (Chrome killed, --remote-debugging-port closed) invalidates via
- * `invalidatePreflight()` on the next failed agent invocation.
- *
- * Successful preflights are cached; failures are not (so the user gets
- * immediate feedback the next time they fix the underlying issue —
- * starting Chrome, fixing the wrong port).
- */
-type Result = Awaited<ReturnType<typeof preflightCDP>>;
-export declare function getPreflight(cdpUrl: string): Promise<Result>;
-export declare function invalidatePreflight(cdpUrl: string): void;
-export {};
-//# sourceMappingURL=preflightCache.d.ts.map

package/dist/playwright/preflightCache.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"preflightCache.d.ts","sourceRoot":"","sources":["../../src/playwright/preflightCache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,KAAK,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC;AAMvD,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAalE;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAExD"}

package/dist/playwright/preflightCache.js

@@ -1,21 +0,0 @@
-import { preflightCDP } from './preflight.js';
-const TTL_MS = 30_000;
-const cache = new Map();
-export async function getPreflight(cdpUrl) {
-    const now = Date.now();
-    const hit = cache.get(cdpUrl);
-    if (hit && hit.result.ok && now - hit.at < TTL_MS) {
-        return hit.result;
-    }
-    const result = await preflightCDP(cdpUrl);
-    if (result.ok) {
-        cache.set(cdpUrl, { result, at: now });
-    }
-    else {
-        cache.delete(cdpUrl);
-    }
-    return result;
-}
-export function invalidatePreflight(cdpUrl) {
-    cache.delete(cdpUrl);
-}