@hover-dev/core 0.6.0 → 0.7.2

package/dist/agents/claude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/agents/claude.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA2C,MAAM,YAAY,CAAC;AAsF3F,eAAO,MAAM,WAAW,EAAE,eAyHzB,CAAC"}
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/agents/claude.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA2C,MAAM,YAAY,CAAC;AA6G3F,eAAO,MAAM,WAAW,EAAE,eA0HzB,CAAC"}

package/dist/agents/claude.js

@@ -39,12 +39,35 @@ function claudeState(state) {
     }
     return state;
 }
+/** Every built-in claude-code tool that has nothing to do with driving a
+ *  browser. Combined with `--strict-mcp-config` + an allow-list of mcp__*
+ *  ids, this leaves Claude with only the Playwright MCP (plus any
+ *  plugin-contributed MCPs) as a usable tool surface. */
+const CLAUDE_DEFAULT_DISALLOWED_TOOLS = [
+    // file / shell / data access — never appropriate for browser driving
+    'Bash', 'BashOutput', 'KillBash',
+    'Edit', 'MultiEdit', 'Write', 'Read', 'NotebookEdit',
+    'Grep', 'Glob', 'Task', 'TodoWrite',
+    'WebFetch', 'WebSearch',
+    // plan / worktree / cron / notification — irrelevant in -p mode
+    'EnterPlanMode', 'ExitPlanMode',
+    'EnterWorktree', 'ExitWorktree',
+    'CronCreate', 'CronDelete', 'CronList',
+    'PushNotification', 'RemoteTrigger',
+    // task & tool introspection added in claude 2.1.x — let through and
+    // the agent will burn turns exploring instead of executing
+    'ToolSearch',
+    'Monitor', 'TaskOutput', 'TaskStop',
+    'AskUserQuestion',
+    'ShareOnboardingGuide',
+];
 export const claudeAgent = {
     id: 'claude',
     binName: 'claude',
     protocol: 'argv',
     streamFormat: 'stream-json',
     sandboxStrength: 'hard',
+    defaultDisallowedTools: CLAUDE_DEFAULT_DISALLOWED_TOOLS,
     display: {
         label: 'Claude Code',
         tagline: 'Anthropic — best-in-class browser driving, hard tool sandbox',

package/dist/agents/types.d.ts

@@ -146,6 +146,11 @@ export interface AgentDescriptor {
     streamFormat: StreamFormat;
     sandboxStrength: SandboxStrength;
     display: AgentDisplay;
+    /** Hard-sandbox agents pass this list to `disallowedTools` when the
+     *  service-level allow/deny config isn't explicitly overridden. Lets the
+     *  per-CLI deny list live alongside its descriptor instead of as a magic
+     *  array in the service. Soft-sandbox agents leave this undefined. */
+    defaultDisallowedTools?: readonly string[];
     buildArgs(opts: InvokeOptions): string[];
     /**
      * Parse a single line of agent stdout into normalised InvokeEvents.

package/dist/agents/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,OAAO,GACP,KAAK,GACL,QAAQ,CAAC;AAEb,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,KAAK,GACL,YAAY,GACZ,YAAY,CAAC;AAEjB,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;aACnB,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CAI5C;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;yCAGqC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;6EACyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChC;;;qEAGqE;GACnE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACrD;;;;;;;;GAQG;GACD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACnH;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9C;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;4DACwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;mEAC+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,YAAY,CAAC;IAC3B,eAAe,EAAE,eAAe,CAAC;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,EAAE,CAAC;IACzC;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IAC7D;;;;;;;;;OASG;IACH,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC;CAChF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,OAAO,GACP,KAAK,GACL,QAAQ,CAAC;AAEb,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,KAAK,GACL,YAAY,GACZ,YAAY,CAAC;AAEjB,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;aACnB,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CAI5C;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;yCAGqC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;6EACyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChC;;;qEAGqE;GACnE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACrD;;;;;;;;GAQG;GACD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACnH;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9C;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;4DACwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;mEAC+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,YAAY,CAAC;IAC3B,eAAe,EAAE,eAAe,CAAC;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB;;;0EAGsE;IACtE,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,EAAE,CAAC;IACzC;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IAC7D;;;;;;;;;OASG;IACH,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC;CAChF"}

package/dist/playwright/launchChrome.d.ts

@@ -9,6 +9,18 @@ export interface LaunchOptions {
     readyTimeoutMs?: number;
     /** Poll interval while waiting (default 300ms). */
     pollMs?: number;
+    /** Security-mode proxy config. When provided, Chrome is launched with
+     *  `--proxy-server=127.0.0.1:<proxyPort>` and the given SPKI pinned via
+     *  `--ignore-certificate-errors-spki-list` so HTTPS certs from the
+     *  Hover MITM CA validate without polluting the OS trust store. The
+     *  caller is expected to pick a different `userDataDir` and `port` from
+     *  the normal-mode launch so the two profiles don't share state. */
+    proxy?: {
+        /** Local mockttp port the proxy is listening on. */
+        port: number;
+        /** Base64 SHA-256 of the MITM CA's SubjectPublicKeyInfo. */
+        spki: string;
+    };
 }
 export type LaunchResult = {
     ok: true;

package/dist/playwright/launchChrome.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launchChrome.d.ts","sourceRoot":"","sources":["../../src/playwright/launchChrome.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACxE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAMlC,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CA0ChD;AAiCD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAwDvF"}
+{"version":3,"file":"launchChrome.d.ts","sourceRoot":"","sources":["../../src/playwright/launchChrome.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;wEAKoE;IACpE,KAAK,CAAC,EAAE;QACN,oDAAoD;QACpD,IAAI,EAAE,MAAM,CAAC;QACb,4DAA4D;QAC5D,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACxE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAMlC,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CA0ChD;AAiCD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CA8DvF"}

package/dist/playwright/launchChrome.js

@@ -111,8 +111,11 @@ export async function launchDebugChrome(opts = {}) {
         `--user-data-dir=${userDataDir}`,
         '--no-first-run',
         '--no-default-browser-check',
-        url,
     ];
+    if (opts.proxy) {
+        args.push(`--proxy-server=127.0.0.1:${opts.proxy.port}`, `--ignore-certificate-errors-spki-list=${opts.proxy.spki}`);
+    }
+    args.push(url);
     const child = spawn(chrome, args, {
         detached: true,
         stdio: 'ignore',

package/dist/playwright/raiseWindow.js

@@ -103,22 +103,37 @@ export async function raiseChromeWindow(pid) {
 function runCapture(cmd, args) {
     return new Promise(resolve => {
         let out = '';
+        let settled = false;
+        const finish = (v) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(v);
+        };
         const child = spawn(cmd, args, { stdio: ['ignore', 'pipe', 'ignore'] });
         child.stdout.on('data', chunk => {
             out += chunk.toString();
         });
-        child.on('error', () => resolve(null));
-        child.on('close', code => resolve(code === 0 ? out : null));
+        child.on('error', () => finish(null));
+        child.on('close', code => finish(code === 0 ? out : null));
     });
 }
 function runDetached(cmd, args) {
     return new Promise((resolve, reject) => {
+        let settled = false;
         const child = spawn(cmd, args, { stdio: 'ignore' });
-        child.on('error', reject);
-        child.on('close', code => {
+        child.on('error', err => {
+            if (settled)
+                return;
+            settled = true;
+            reject(err);
+        });
+        child.on('close', () => {
+            if (settled)
+                return;
+            settled = true;
             // Don't treat non-zero as fatal — caller already wraps in try/catch.
             resolve();
-            void code;
         });
     });
 }

package/dist/playwright/resolveMcpConfig.d.ts

@@ -18,10 +18,27 @@
  * which lets multiple Hover services (one per example app) coexist
  * without stepping on each other's CDP endpoint.
  */
+export interface ExtraMcpServer {
+    /** Stable id of the server. Becomes the JSON key under mcpServers; also
+     *  the prefix Claude exposes its tools under (`mcp__<id>__<tool>`). */
+    id: string;
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+}
 export declare function resolveMcpConfig(opts: {
     /** CDP URL passed to the MCP server's `--cdp-endpoint` flag. */
     cdpUrl: string;
     /** Service port — used to namespace the temp config file. */
     port: number;
+    /** Additional MCP servers contributed by active plugins. Each becomes
+     *  a key under the mcpServers object. The id is also used to name the
+     *  tool prefix Claude exposes (e.g. `mcp__hover_security__list_flows`),
+     *  but Claude sanitises non-alphanumeric chars to underscores, so the
+     *  caller does NOT need to do that. */
+    extra?: ExtraMcpServer[];
+    /** Suffix for the output filename so multiple parallel configs from
+     *  the same service (e.g. mode toggle round-trips) don't share state. */
+    suffix?: string;
 }): string;
 //# sourceMappingURL=resolveMcpConfig.d.ts.map

package/dist/playwright/resolveMcpConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveMcpConfig.d.ts","sourceRoot":"","sources":["../../src/playwright/resolveMcpConfig.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,MAAM,CAsCT"}
+{"version":3,"file":"resolveMcpConfig.d.ts","sourceRoot":"","sources":["../../src/playwright/resolveMcpConfig.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,cAAc;IAC7B;2EACuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb;;;;2CAIuC;IACvC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;IACzB;6EACyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAgDT"}

package/dist/playwright/resolveMcpConfig.js

@@ -3,26 +3,6 @@ import { mkdirSync, writeFileSync } from 'node:fs';
 import { dirname, resolve } from 'node:path';
 import { tmpdir } from 'node:os';
 import process from 'node:process';
-/**
- * Resolve a ready-to-use MCP config file path that points at the local
- * `@playwright/mcp` package via an absolute Node-resolved path.
- *
- * Why this exists: Hover originally shipped a static `mcp.config.json`
- * with `"command": "npx", "args": ["-y", "@playwright/mcp@latest", …]`.
- * That meant every `claude -p` invocation kicked off a registry lookup
- * for `@latest` plus a tarball metadata round-trip before the MCP server
- * even started — adding 300 ms - 2 s of dead air to first-token latency
- * on every command (verified via `time npx -y @playwright/mcp@latest`).
- *
- * The fix is to (a) declare `@playwright/mcp` as a real dependency of
- * `@hover-dev/core` so npm resolves it locally at install time, and
- * (b) write a synthetic config file pointing `node <abs-path>/cli.js`
- * at the resolved location. No registry hit on the hot path.
- *
- * The config file is written to `<tmpdir>/hover/mcp-config-<port>.json`,
- * which lets multiple Hover services (one per example app) coexist
- * without stepping on each other's CDP endpoint.
- */
 export function resolveMcpConfig(opts) {
     // Resolve the package's main file, then walk back to its package root.
     // Using `package.json` as the resolution target is the documented
@@ -46,17 +26,27 @@ export function resolveMcpConfig(opts) {
     // pin to that file directly via Node so the user doesn't need the
     // bin shim on PATH and we skip yet another resolution layer.
     const cliPath = resolve(pkgRoot, 'cli.js');
-    const config = {
-        mcpServers: {
-            playwright: {
-                command: process.execPath, // current Node binary
-                args: [cliPath, '--cdp-endpoint', opts.cdpUrl],
-            },
+    const mcpServers = {
+        playwright: {
+            command: process.execPath, // current Node binary
+            args: [cliPath, '--cdp-endpoint', opts.cdpUrl],
         },
     };
+    for (const extra of opts.extra ?? []) {
+        // Claude sanitises the key for tool naming; we keep the raw id here
+        // because mcp-config consumers (claude / codex) accept arbitrary
+        // strings and do their own normalisation.
+        mcpServers[extra.id] = {
+            command: extra.command,
+            args: extra.args,
+            env: extra.env,
+        };
+    }
+    const config = { mcpServers };
     const outDir = resolve(tmpdir(), 'hover');
     mkdirSync(outDir, { recursive: true });
-    const outPath = resolve(outDir, `mcp-config-${opts.port}.json`);
+    const suffix = opts.suffix ? `-${opts.suffix}` : '';
+    const outPath = resolve(outDir, `mcp-config-${opts.port}${suffix}.json`);
     writeFileSync(outPath, JSON.stringify(config, null, 2), 'utf-8');
     return outPath;
 }

package/dist/plugin-api.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Hover plugin API — the public contract third-party packages target.
+ *
+ * Plugins are *mostly declarative*: they ship a manifest describing what
+ * resources they contribute (a mode, MCP servers, Chrome flags, agent
+ * prompt fragments, widget event schemas). For genuinely time-bound work
+ * — booting a sidecar like mockttp when a mode activates, tearing it down
+ * when the mode deactivates or the service shuts down — they register
+ * namespaced lifecycle hooks.
+ *
+ * Patterned after Astro Integrations (declarative manifest + namespaced
+ * hooks: `astro:config:setup` etc). The `apiVersion` literal lets us
+ * evolve the manifest and reject mismatched plugins at load time with a
+ * clear error rather than silent breakage.
+ *
+ * Stability:
+ *   - `apiVersion: 1` is what this file declares; breaking changes bump.
+ *   - Adding new optional fields or new hook names is non-breaking.
+ *   - Plugin authors should import only from this module; deep imports
+ *     into `@hover-dev/core` internals are not part of the contract.
+ */
+/**
+ * The Hover plugin API version this build of @hover-dev/core understands.
+ * Plugins declare which version they target via their manifest; mismatches
+ * are rejected at load time.
+ */
+export type HoverApiVersion = 1;
+export declare const CURRENT_API_VERSION: HoverApiVersion;
+export interface HoverPluginMode {
+    /** Globally unique id (across all loaded plugins). Lowercase kebab. */
+    id: string;
+    /** Human-readable label shown in the widget mode-picker. */
+    label: string;
+    /** One-liner help text shown in the dropdown. */
+    description?: string;
+    /** Mode ids this mode cannot be active alongside. Two plugins both
+     *  needing an exclusive proxy would set each other here. */
+    conflictsWith?: string[];
+}
+export interface HoverPluginMcpServer {
+    /** Stable, namespaced id (`@hover-dev/security:flows`). Host enforces
+     *  uniqueness across all loaded plugins. */
+    id: string;
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+    /** Modes in which this MCP is exposed to the agent. Default: only the
+     *  plugin's own mode. Use `['*']` to mean "always on". */
+    activeInModes?: string[];
+}
+export interface HoverPluginChromeFlags {
+    /** Extra args appended to the Chrome launch argv. */
+    args?: string[];
+    /** Custom user-data-dir for this mode. Strongly recommended when proxy
+     *  is set, so the secured profile doesn't share cookies with normal mode. */
+    userDataDir?: string;
+    /** Custom CDP port for this mode. Strongly recommended for the same
+     *  reason — keeps the two modes' Chromes addressable independently. */
+    cdpPort?: number;
+    /** When present, Chrome is launched with --proxy-server + the
+     *  --ignore-certificate-errors-spki-list pin so the proxy's MITM CA is
+     *  accepted without polluting the OS trust store. */
+    proxy?: {
+        port: number;
+        spki: string;
+    };
+    /** Modes in which these flags apply. Default: only the plugin's own mode. */
+    activeInModes?: string[];
+}
+export interface HoverPluginSystemPromptAddition {
+    text: string;
+    /** Modes in which this paragraph is included in the agent's system
+     *  prompt. Default: only the plugin's own mode. */
+    activeInModes?: string[];
+}
+export interface HoverBroadcast {
+    /** Push a JSON event to every WebSocket-connected widget. Event `type`
+     *  should be namespaced by the plugin (`security:flow:added`). */
+    (event: {
+        type: string;
+        payload?: unknown;
+    }): void;
+}
+export interface HoverHookCtxBase {
+    /** Absolute path of the user's project root (Vite's `server.config.root`,
+     *  Astro's project dir, etc.). Use this for persisting CA material, not
+     *  process.cwd(). */
+    devRoot: string;
+    /** Push a custom event to every connected widget. */
+    broadcast: HoverBroadcast;
+}
+/** Fired when this plugin's mode becomes active. The plugin may boot
+ *  sidecars (mockttp, profilers, …) here and return any settings that
+ *  affect downstream subsystems (Chrome relaunch, MCP server env vars). */
+export interface ModeActivateCtx extends HoverHookCtxBase {
+    modeId: string;
+    /** Tell the host "Chrome should be relaunched with these proxy settings"
+     *  for the duration of this mode. Pass null to clear. */
+    setChromeProxy(proxy: {
+        port: number;
+        spki: string;
+    } | null): void;
+    /** Set additional env vars on one of this plugin's declared MCP servers.
+     *  The MCP server isn't actually spawned until the agent runs a command,
+     *  so plugins use this in activate() to pass runtime data (port numbers,
+     *  auth tokens) that didn't exist at manifest-construction time.
+     *  Merged on top of any env declared in the manifest; subsequent calls
+     *  for the same id replace previous overrides. */
+    setMcpServerEnv(id: string, env: Record<string, string>): void;
+}
+/** Fired when this plugin's mode is being deactivated. The plugin
+ *  MUST stop any sidecar it started in activate. */
+export interface ModeDeactivateCtx extends HoverHookCtxBase {
+    modeId: string;
+}
+/** Fired exactly once when the host service is shutting down for any
+ *  reason. Hooks must release subprocesses and file handles. */
+export type ShutdownCtx = HoverHookCtxBase;
+export interface HoverHooks {
+    'hover:mode:activate'?: (ctx: ModeActivateCtx) => void | Promise<void>;
+    'hover:mode:deactivate'?: (ctx: ModeDeactivateCtx) => void | Promise<void>;
+    'hover:service:shutdown'?: (ctx: ShutdownCtx) => void | Promise<void>;
+}
+export interface HoverPluginManifest {
+    /** Always 1 in this build. Future versions may add 2, 3, … */
+    apiVersion: HoverApiVersion;
+    /** Globally unique plugin name. Use the npm package name. */
+    name: string;
+    /** Optional widget mode contributed by this plugin. */
+    mode?: HoverPluginMode;
+    /** Extra MCP servers exposed to the agent in the indicated modes. */
+    mcpServers?: HoverPluginMcpServer[];
+    /** Chrome launch overrides for the indicated modes. */
+    chromeFlags?: HoverPluginChromeFlags;
+    /** System-prompt paragraphs concatenated into the agent's prompt in
+     *  the indicated modes. */
+    systemPromptAdditions?: HoverPluginSystemPromptAddition[];
+    /** Names of custom event types this plugin broadcasts. Documented
+     *  here so the widget side can be tree-shaken to skip handlers for
+     *  events that no loaded plugin will ever produce. */
+    widgetEventTypes?: string[];
+    hooks?: HoverHooks;
+}
+/**
+ * Branded factory that wraps a plugin manifest factory. The wrapper
+ * - asserts `apiVersion` matches this core's version at construction time
+ *   (catches authors who copy-pasted from a tutorial for a different core),
+ * - returns a `(opts) => manifest` so call sites read `securityMode()` /
+ *   `perfMode({ sampleHz: 100 })` uniformly.
+ *
+ * Use:
+ *
+ *   export default defineHoverPlugin<MyOpts>((opts) => ({
+ *     apiVersion: 1,
+ *     name: '@hover-dev/security',
+ *     mode: { id: 'security', label: 'Security testing' },
+ *     ...
+ *   }));
+ */
+export declare function defineHoverPlugin<TOpts = void>(factory: (opts: TOpts) => HoverPluginManifest): (opts: TOpts) => HoverPluginManifest;
+//# sourceMappingURL=plugin-api.d.ts.map

package/dist/plugin-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-api.d.ts","sourceRoot":"","sources":["../src/plugin-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC;AAChC,eAAO,MAAM,mBAAmB,EAAE,eAAmB,CAAC;AAMtD,MAAM,WAAW,eAAe;IAC9B,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;gEAC4D;IAC5D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC;gDAC4C;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;8DAC0D;IAC1D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;iFAC6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;2EACuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;yDAEqD;IACrD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb;uDACmD;IACnD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAMD,MAAM,WAAW,cAAc;IAC7B;sEACkE;IAClE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,gBAAgB;IAC/B;;yBAEqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,SAAS,EAAE,cAAc,CAAC;CAC3B;AAED;;2EAE2E;AAC3E,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,MAAM,EAAE,MAAM,CAAC;IACf;6DACyD;IACzD,cAAc,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACnE;;;;;sDAKkD;IAClD,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAChE;AAED;oDACoD;AACpD,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACzD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;gEACgE;AAChE,MAAM,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAE3C,MAAM,WAAW,UAAU;IACzB,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,uBAAuB,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,wBAAwB,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE;AAMD,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,UAAU,EAAE,eAAe,CAAC;IAE5B,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IAEb,uDAAuD;IACvD,IAAI,CAAC,EAAE,eAAe,CAAC;IAEvB,qEAAqE;IACrE,UAAU,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAEpC,uDAAuD;IACvD,WAAW,CAAC,EAAE,sBAAsB,CAAC;IAErC;+BAC2B;IAC3B,qBAAqB,CAAC,EAAE,+BAA+B,EAAE,CAAC;IAE1D;;0DAEsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,GAAG,IAAI,EAC5C,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,mBAAmB,GAC5C,CAAC,IAAI,EAAE,KAAK,KAAK,mBAAmB,CAYtC"}

package/dist/plugin-api.js

@@ -0,0 +1,52 @@
+/**
+ * Hover plugin API — the public contract third-party packages target.
+ *
+ * Plugins are *mostly declarative*: they ship a manifest describing what
+ * resources they contribute (a mode, MCP servers, Chrome flags, agent
+ * prompt fragments, widget event schemas). For genuinely time-bound work
+ * — booting a sidecar like mockttp when a mode activates, tearing it down
+ * when the mode deactivates or the service shuts down — they register
+ * namespaced lifecycle hooks.
+ *
+ * Patterned after Astro Integrations (declarative manifest + namespaced
+ * hooks: `astro:config:setup` etc). The `apiVersion` literal lets us
+ * evolve the manifest and reject mismatched plugins at load time with a
+ * clear error rather than silent breakage.
+ *
+ * Stability:
+ *   - `apiVersion: 1` is what this file declares; breaking changes bump.
+ *   - Adding new optional fields or new hook names is non-breaking.
+ *   - Plugin authors should import only from this module; deep imports
+ *     into `@hover-dev/core` internals are not part of the contract.
+ */
+export const CURRENT_API_VERSION = 1;
+// ──────────────────────────────────────────────────────────────────────
+// Author helper
+// ──────────────────────────────────────────────────────────────────────
+/**
+ * Branded factory that wraps a plugin manifest factory. The wrapper
+ * - asserts `apiVersion` matches this core's version at construction time
+ *   (catches authors who copy-pasted from a tutorial for a different core),
+ * - returns a `(opts) => manifest` so call sites read `securityMode()` /
+ *   `perfMode({ sampleHz: 100 })` uniformly.
+ *
+ * Use:
+ *
+ *   export default defineHoverPlugin<MyOpts>((opts) => ({
+ *     apiVersion: 1,
+ *     name: '@hover-dev/security',
+ *     mode: { id: 'security', label: 'Security testing' },
+ *     ...
+ *   }));
+ */
+export function defineHoverPlugin(factory) {
+    return (opts) => {
+        const manifest = factory(opts);
+        if (manifest.apiVersion !== CURRENT_API_VERSION) {
+            throw new Error(`[hover] plugin "${manifest.name}" targets apiVersion ` +
+                `${String(manifest.apiVersion)} but this Hover supports ` +
+                `${CURRENT_API_VERSION}. Update either the plugin or @hover-dev/core.`);
+        }
+        return manifest;
+    };
+}

package/dist/service/cdpHandlers.d.ts

@@ -11,7 +11,16 @@
  * file can be a thin orchestrator.
  */
 import type { WebSocket } from 'ws';
+import { type LaunchOptions } from '../playwright/launchChrome.js';
 import { type ClientMessage } from './types.js';
+/** Extra launch options surfaced from the active mode (security plugin
+ *  needs proxy + spki + separate profile + non-default CDP port). When
+ *  none are set, behaviour is identical to pre-v0.7 normal-mode launch. */
+export type LaunchExtras = Pick<LaunchOptions, 'userDataDir' | 'proxy'> & {
+    /** Override CDP port (mode-specific, e.g. 9333 for security). When set,
+     *  this also wins over the `port` parsed from cdpUrl. */
+    cdpPort?: number;
+};
 /**
  * "Is this widget running inside the debug Chrome?" The widget asks this on
  * connect (and after every status-changing event) so it can render itself as
@@ -20,14 +29,14 @@ import { type ClientMessage } from './types.js';
  *   - wrong-window → disabled, with a "use the other window" notice
  *   - no-cdp       → enabled but click triggers launch-chrome instead
  */
-export declare function handleCheckCdp(ws: WebSocket, msg: ClientMessage, cdpUrl: string): Promise<void>;
+export declare function handleCheckCdp(ws: WebSocket, msg: ClientMessage, cdpUrl: string, extras?: LaunchExtras): Promise<void>;
 /**
  * Launch a debug Chrome navigated to `pageUrl`, then re-check status. The
  * re-check usually returns 'wrong-window' (because the widget asking is in
  * the user's regular Chrome, not the freshly-launched one) — the widget then
  * displays the "use the other window" state.
  */
-export declare function handleLaunchChrome(ws: WebSocket, msg: ClientMessage, cdpUrl: string): Promise<void>;
+export declare function handleLaunchChrome(ws: WebSocket, msg: ClientMessage, cdpUrl: string, extras?: LaunchExtras): Promise<void>;
 /**
  * bringToFront the debug-Chrome tab matching `pageUrl`'s origin (or open one
  * if none exists). Used by the wrong-window UI's "switch to debug Chrome"
@@ -35,5 +44,5 @@ export declare function handleLaunchChrome(ws: WebSocket, msg: ClientMessage, cd
  * the widget cares about, and the widget the user is about to focus is a
  * different page (and will run its own check-cdp on its own ws connection).
  */
-export declare function handleFocusDebug(ws: WebSocket, msg: ClientMessage, cdpUrl: string): Promise<void>;
+export declare function handleFocusDebug(ws: WebSocket, msg: ClientMessage, cdpUrl: string, extras?: LaunchExtras): Promise<void>;
 //# sourceMappingURL=cdpHandlers.d.ts.map

package/dist/service/cdpHandlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cdpHandlers.d.ts","sourceRoot":"","sources":["../../src/service/cdpHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAGpC,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAUf"}
+{"version":3,"file":"cdpHandlers.d.ts","sourceRoot":"","sources":["../../src/service/cdpHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD;;2EAE2E;AAC3E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,GAAG,OAAO,CAAC,GAAG;IACxE;6DACyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAkCf;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/service/cdpHandlers.js

@@ -21,13 +21,16 @@ import { send } from './types.js';
  *   - wrong-window → disabled, with a "use the other window" notice
  *   - no-cdp       → enabled but click triggers launch-chrome instead
  */
-export async function handleCheckCdp(ws, msg, cdpUrl) {
+export async function handleCheckCdp(ws, msg, cdpUrl, extras) {
     const pageUrl = msg.payload?.pageUrl;
     if (typeof pageUrl !== 'string' || !pageUrl) {
         send(ws, { type: 'error', payload: { message: 'check-cdp: pageUrl is required' } });
         return;
     }
-    const status = await checkCdpStatus(cdpUrl, pageUrl);
+    const effectiveCdpUrl = extras?.cdpPort
+        ? `http://localhost:${extras.cdpPort}`
+        : cdpUrl;
+    const status = await checkCdpStatus(effectiveCdpUrl, pageUrl);
     send(ws, { type: 'cdp-status', payload: status });
 }
 /**
@@ -36,7 +39,7 @@ export async function handleCheckCdp(ws, msg, cdpUrl) {
  * the user's regular Chrome, not the freshly-launched one) — the widget then
  * displays the "use the other window" state.
  */
-export async function handleLaunchChrome(ws, msg, cdpUrl) {
+export async function handleLaunchChrome(ws, msg, cdpUrl, extras) {
     const pageUrl = msg.payload?.pageUrl;
     if (typeof pageUrl !== 'string' || !pageUrl) {
         send(ws, { type: 'error', payload: { message: 'launch-chrome: pageUrl is required' } });
@@ -45,7 +48,7 @@ export async function handleLaunchChrome(ws, msg, cdpUrl) {
     // Tell the widget we're launching so it can render a spinner immediately —
     // findChromeBinary + spawn + ready-poll can take a few seconds.
     send(ws, { type: 'cdp-status', payload: { state: 'no-cdp', launching: true } });
-    const port = (() => {
+    const port = extras?.cdpPort ?? (() => {
         try {
             return Number(new URL(cdpUrl).port) || 9222;
         }
@@ -53,13 +56,22 @@ export async function handleLaunchChrome(ws, msg, cdpUrl) {
             return 9222;
         }
     })();
-    const result = await launchDebugChrome({ url: pageUrl, port });
+    const result = await launchDebugChrome({
+        url: pageUrl,
+        port,
+        userDataDir: extras?.userDataDir,
+        proxy: extras?.proxy,
+    });
     if (!result.ok) {
         send(ws, { type: 'cdp-status', payload: { state: 'no-cdp', reason: result.reason } });
         return;
     }
-    // Re-check after launch so the widget gets the real status.
-    const status = await checkCdpStatus(cdpUrl, pageUrl);
+    // Re-check status against the port we actually launched on, so a mode-
+    // specific port (9333 for security) doesn't get probed at 9222.
+    const effectiveCdpUrl = extras?.cdpPort
+        ? `http://localhost:${extras.cdpPort}`
+        : cdpUrl;
+    const status = await checkCdpStatus(effectiveCdpUrl, pageUrl);
     send(ws, { type: 'cdp-status', payload: status });
 }
 /**
@@ -69,13 +81,16 @@ export async function handleLaunchChrome(ws, msg, cdpUrl) {
  * the widget cares about, and the widget the user is about to focus is a
  * different page (and will run its own check-cdp on its own ws connection).
  */
-export async function handleFocusDebug(ws, msg, cdpUrl) {
+export async function handleFocusDebug(ws, msg, cdpUrl, extras) {
     const pageUrl = msg.payload?.pageUrl;
     if (typeof pageUrl !== 'string' || !pageUrl) {
         send(ws, { type: 'error', payload: { message: 'focus-debug: pageUrl is required' } });
         return;
     }
-    const result = await focusDebugTab(cdpUrl, pageUrl);
+    const effectiveCdpUrl = extras?.cdpPort
+        ? `http://localhost:${extras.cdpPort}`
+        : cdpUrl;
+    const result = await focusDebugTab(effectiveCdpUrl, pageUrl);
     if (!result.ok) {
         send(ws, { type: 'error', payload: { message: `focus-debug: ${result.reason}` } });
     }

package/dist/service/saveHandlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"saveHandlers.d.ts","sourceRoot":"","sources":["../../src/service/saveHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,UAAU,EAAgC,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EAAE,SAAS,EAAmB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,YAAY,EAAsB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD,UAAU,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IAC9E,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB;wDACoD;IACpD,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,0EAA0E;IAC1E,WAAW,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IAC9E,wEAAwE;IACxE,KAAK,EAAE,CAAC,IAAI,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,SAAS,EAAE,CAAC;QACnB,UAAU,EAAE,aAAa,EAAE,CAAC;QAC5B,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,SAAS,EAAE,OAAO,CAAC;KACpB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7B;AAED,wBAAsB,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1F,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,eAAO,MAAM,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAanF,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAOjF,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAYxF,CAAC"}
+{"version":3,"file":"saveHandlers.d.ts","sourceRoot":"","sources":["../../src/service/saveHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,UAAU,EAAgC,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EAAE,SAAS,EAAmB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,YAAY,EAAsB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD,UAAU,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IAC9E,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB;wDACoD;IACpD,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,0EAA0E;IAC1E,WAAW,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IAC9E,wEAAwE;IACxE,KAAK,EAAE,CAAC,IAAI,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,SAAS,EAAE,CAAC;QACnB,UAAU,EAAE,aAAa,EAAE,CAAC;QAC5B,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,SAAS,EAAE,OAAO,CAAC;KACpB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7B;AAED,wBAAsB,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1F,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,eAAO,MAAM,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAanF,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAOjF,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAYxF,CAAC"}