@jshookmcp/jshook 0.2.1 → 0.2.2

package/dist/src/server/domains/native-bridge/definitions.js

@@ -23,6 +23,12 @@ export const nativeBridgeTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
     },
     {
         name: 'ghidra_bridge',
@@ -41,7 +47,15 @@ export const nativeBridgeTools = [
             properties: {
                 action: {
                     type: 'string',
-                    enum: ['status', 'open_project', 'list_functions', 'decompile_function', 'run_script', 'get_xrefs', 'search_strings'],
+                    enum: [
+                        'status',
+                        'open_project',
+                        'list_functions',
+                        'decompile_function',
+                        'run_script',
+                        'get_xrefs',
+                        'search_strings',
+                    ],
                     description: 'Action to perform',
                 },
                 binaryPath: {
@@ -72,6 +86,12 @@ export const nativeBridgeTools = [
             },
             required: ['action'],
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'ida_bridge',
@@ -90,7 +110,15 @@ export const nativeBridgeTools = [
             properties: {
                 action: {
                     type: 'string',
-                    enum: ['status', 'open_binary', 'list_functions', 'decompile_function', 'run_script', 'get_xrefs', 'get_strings'],
+                    enum: [
+                        'status',
+                        'open_binary',
+                        'list_functions',
+                        'decompile_function',
+                        'run_script',
+                        'get_xrefs',
+                        'get_strings',
+                    ],
                     description: 'Action to perform',
                 },
                 binaryPath: {
@@ -117,6 +145,12 @@ export const nativeBridgeTools = [
             },
             required: ['action'],
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'native_symbol_sync',
@@ -150,5 +184,11 @@ export const nativeBridgeTools = [
             },
             required: ['source'],
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
 ];

package/dist/src/server/domains/native-bridge/index.js

@@ -109,7 +109,12 @@ export class NativeBridgeHandlers {
                     if (!name)
                         throw new Error('functionName is required for decompile_function');
                     const { status, data } = await bridgeFetch(endpoint, `/functions/${encodeURIComponent(name)}/decompile`);
-                    return toTextResponse({ success: status < 300, action, functionName: name, decompiled: data });
+                    return toTextResponse({
+                        success: status < 300,
+                        action,
+                        functionName: name,
+                        decompiled: data,
+                    });
                 }
                 case 'run_script': {
                     const scriptPath = args.scriptPath;
@@ -135,7 +140,15 @@ export class NativeBridgeHandlers {
                         success: true,
                         guide: {
                             what: 'Ghidra is an open-source SRE framework by NSA.',
-                            actions: ['status', 'open_project', 'list_functions', 'decompile_function', 'run_script', 'get_xrefs', 'search_strings'],
+                            actions: [
+                                'status',
+                                'open_project',
+                                'list_functions',
+                                'decompile_function',
+                                'run_script',
+                                'get_xrefs',
+                                'search_strings',
+                            ],
                             bridgeSetup: [
                                 'pip install ghidra_bridge',
                                 'In Ghidra: File → Run Script → ghidra_bridge_server.py',
@@ -176,7 +189,12 @@ export class NativeBridgeHandlers {
                     if (!name)
                         throw new Error('functionName is required for decompile_function');
                     const { status, data } = await bridgeFetch(endpoint, `/functions/${encodeURIComponent(name)}/decompile`);
-                    return toTextResponse({ success: status < 300, action, functionName: name, decompiled: data });
+                    return toTextResponse({
+                        success: status < 300,
+                        action,
+                        functionName: name,
+                        decompiled: data,
+                    });
                 }
                 case 'run_script': {
                     const scriptPath = args.scriptPath;
@@ -201,13 +219,24 @@ export class NativeBridgeHandlers {
                         success: true,
                         guide: {
                             what: 'IDA Pro is a commercial disassembler/decompiler by Hex-Rays.',
-                            actions: ['status', 'open_binary', 'list_functions', 'decompile_function', 'run_script', 'get_xrefs', 'get_strings'],
+                            actions: [
+                                'status',
+                                'open_binary',
+                                'list_functions',
+                                'decompile_function',
+                                'run_script',
+                                'get_xrefs',
+                                'get_strings',
+                            ],
                             bridgeSetup: [
                                 'pip install ida_bridge  // or use idalink',
                                 'In IDA: File → Script file → ida_bridge_server.py',
                                 'Default endpoint: http://127.0.0.1:18081',
                             ],
-                            links: ['https://hex-rays.com/ida-pro/', 'https://github.com/williballenthin/ida-bridge'],
+                            links: [
+                                'https://hex-rays.com/ida-pro/',
+                                'https://github.com/williballenthin/ida-bridge',
+                            ],
                         },
                     });
             }
@@ -221,9 +250,7 @@ export class NativeBridgeHandlers {
         if (!source || !['ghidra', 'ida'].includes(source)) {
             return toErrorResponse('native_symbol_sync', new Error('source must be "ghidra" or "ida"'));
         }
-        const endpoint = source === 'ghidra'
-            ? this.getGhidraEndpoint(args)
-            : this.getIdaEndpoint(args);
+        const endpoint = source === 'ghidra' ? this.getGhidraEndpoint(args) : this.getIdaEndpoint(args);
         try {
             const { status, data } = await bridgeFetch(endpoint, '/symbols/export', 'POST', JSON.stringify({
                 filter: args.filter ?? '',

package/dist/src/server/domains/network/definitions.js

@@ -12,6 +12,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'network_disable',
@@ -20,6 +26,12 @@ export const advancedTools = [
             type: 'object',
             properties: {},
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'network_get_status',
@@ -28,6 +40,12 @@ export const advancedTools = [
             type: 'object',
             properties: {},
         },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
     },
     {
         name: 'network_get_requests',
@@ -81,6 +99,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'network_get_response_body',
@@ -125,6 +149,12 @@ export const advancedTools = [
             },
             required: ['requestId'],
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'network_get_stats',
@@ -133,6 +163,12 @@ export const advancedTools = [
             type: 'object',
             properties: {},
         },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
     },
     {
         name: 'performance_get_metrics',
@@ -147,6 +183,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
     },
     {
         name: 'performance_start_coverage',
@@ -155,6 +197,12 @@ export const advancedTools = [
             type: 'object',
             properties: {},
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'performance_stop_coverage',
@@ -163,6 +211,12 @@ export const advancedTools = [
             type: 'object',
             properties: {},
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'performance_take_heap_snapshot',
@@ -171,6 +225,12 @@ export const advancedTools = [
             type: 'object',
             properties: {},
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'performance_trace_start',
@@ -190,6 +250,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'performance_trace_stop',
@@ -203,6 +269,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'profiler_cpu_start',
@@ -211,6 +283,12 @@ export const advancedTools = [
             type: 'object',
             properties: {},
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'profiler_cpu_stop',
@@ -224,6 +302,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'profiler_heap_sampling_start',
@@ -238,6 +322,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'profiler_heap_sampling_stop',
@@ -256,6 +346,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'console_get_exceptions',
@@ -274,29 +370,68 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'console_inject_script_monitor',
-        description: 'Inject a monitor that tracks dynamically created script elements',
+        description: 'Inject a monitor that tracks dynamically created script elements. Use persistent: true to survive page navigations.',
         inputSchema: {
             type: 'object',
-            properties: {},
+            properties: {
+                persistent: {
+                    type: 'boolean',
+                    description: 'When true, monitor survives page navigations (uses evaluateOnNewDocument). Default: false.',
+                },
+            },
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
         },
     },
     {
         name: 'console_inject_xhr_interceptor',
-        description: 'Inject an XHR interceptor to capture AJAX request/response data',
+        description: 'Inject an XHR interceptor to capture AJAX request/response data. Use persistent: true for the interceptor to survive page navigations.',
         inputSchema: {
             type: 'object',
-            properties: {},
+            properties: {
+                persistent: {
+                    type: 'boolean',
+                    description: 'When true, interceptor survives page navigations (uses evaluateOnNewDocument). Default: false.',
+                },
+            },
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
         },
     },
     {
         name: 'console_inject_fetch_interceptor',
-        description: 'Inject a Fetch API interceptor to capture fetch request/response data including headers, body, and timing.\n\nUSE THIS when:\n- network_get_requests returns 0 results after page_navigate\n- The target page wraps fetch() internally (SPA, React, Vue apps)\n- You need to capture request signatures, tokens, or custom headers added by frontend JS\n- CDP network monitoring misses dynamically-constructed requests\n\nAfter injection, re-navigate or trigger the action to capture all fetch calls.',
+        description: 'Inject a Fetch API interceptor to capture fetch request/response data including headers, body, and timing.\n\nUSE THIS when:\n- network_get_requests returns 0 results after page_navigate\n- The target page wraps fetch() internally (SPA, React, Vue apps)\n- You need to capture request signatures, tokens, or custom headers added by frontend JS\n- CDP network monitoring misses dynamically-constructed requests\n\nUse persistent: true to make the interceptor survive page navigations — no need to inject before page_navigate.',
         inputSchema: {
             type: 'object',
-            properties: {},
+            properties: {
+                persistent: {
+                    type: 'boolean',
+                    description: 'When true, interceptor survives page navigations (uses evaluateOnNewDocument). Default: false.',
+                },
+            },
+        },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
         },
     },
     {
@@ -306,6 +441,12 @@ export const advancedTools = [
             type: 'object',
             properties: {},
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'console_reset_injected_interceptors',
@@ -314,10 +455,16 @@ export const advancedTools = [
             type: 'object',
             properties: {},
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'console_inject_function_tracer',
-        description: 'Inject a Proxy-based function tracer to log all calls to a named function',
+        description: 'Inject a Proxy-based function tracer to log all calls to a named function. Use persistent: true to survive page navigations.',
         inputSchema: {
             type: 'object',
             properties: {
@@ -325,9 +472,19 @@ export const advancedTools = [
                     type: 'string',
                     description: 'Global function path to trace (e.g., "window.someFunction")',
                 },
+                persistent: {
+                    type: 'boolean',
+                    description: 'When true, tracer survives page navigations (uses evaluateOnNewDocument). Default: false.',
+                },
             },
             required: ['functionName'],
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
     },
     {
         name: 'network_extract_auth',
@@ -342,6 +499,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
     },
     {
         name: 'network_export_har',
@@ -360,6 +523,12 @@ export const advancedTools = [
                 },
             },
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
     },
     {
         name: 'network_replay_request',
@@ -401,5 +570,11 @@ export const advancedTools = [
             },
             required: ['requestId'],
         },
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
     },
 ];

package/dist/src/server/domains/network/handlers.base.d.ts

@@ -127,19 +127,19 @@ export declare class AdvancedHandlersBase {
             text: string;
         }[];
     }>;
-    handleConsoleInjectScriptMonitor(_args: Record<string, unknown>): Promise<{
+    handleConsoleInjectScriptMonitor(args: Record<string, unknown>): Promise<{
         content: {
             type: string;
             text: string;
         }[];
     }>;
-    handleConsoleInjectXhrInterceptor(_args: Record<string, unknown>): Promise<{
+    handleConsoleInjectXhrInterceptor(args: Record<string, unknown>): Promise<{
         content: {
             type: string;
             text: string;
         }[];
     }>;
-    handleConsoleInjectFetchInterceptor(_args: Record<string, unknown>): Promise<{
+    handleConsoleInjectFetchInterceptor(args: Record<string, unknown>): Promise<{
         content: {
             type: string;
             text: string;

package/dist/src/server/domains/network/handlers.base.js

@@ -1,6 +1,7 @@
 import { logger } from '../../../utils/logger.js';
 import { PerformanceMonitor } from '../../domains/shared/modules.js';
 import { DetailedDataManager } from '../../../utils/DetailedDataManager.js';
+import { argBool } from '../../domains/shared/parse-args.js';
 const isObjectRecord = (value) => typeof value === 'object' && value !== null;
 const isNetworkRequestPayload = (value) => {
     if (!isObjectRecord(value)) {
@@ -42,7 +43,8 @@ const isCpuProfileNodePayload = (value) => {
         if (value.callFrame.url !== undefined && typeof value.callFrame.url !== 'string') {
             return false;
         }
-        if (value.callFrame.lineNumber !== undefined && typeof value.callFrame.lineNumber !== 'number') {
+        if (value.callFrame.lineNumber !== undefined &&
+            typeof value.callFrame.lineNumber !== 'number') {
             return false;
         }
     }
@@ -404,8 +406,12 @@ export class AdvancedHandlersBase {
         const beforeLimit = requests.length;
         requests = requests.slice(offset, offset + limit);
         const hasMore = offset + requests.length < beforeLimit;
-        const filterMiss = beforeLimit === 0 && originalCount > 0 && !!(url || (method && method.toUpperCase() !== 'ALL'));
-        const urlSamples = filterMiss ? allUrls.slice(0, 10).map((u) => u.substring(0, 120)) : undefined;
+        const filterMiss = beforeLimit === 0 &&
+            originalCount > 0 &&
+            !!(url || (method && method.toUpperCase() !== 'ALL'));
+        const urlSamples = filterMiss
+            ? allUrls.slice(0, 10).map((u) => u.substring(0, 120))
+            : undefined;
         result = {
             success: true,
             message: ` Retrieved ${requests.length} network request(s)`,
@@ -425,7 +431,12 @@ export class AdvancedHandlersBase {
                 returned: requests.length,
                 truncated: beforeLimit > offset + limit,
             },
-            filtered: !!(url || urlRegex || (method && method.toUpperCase() !== 'ALL') || sinceTimestamp || sinceRequestId || tail),
+            filtered: !!(url ||
+                urlRegex ||
+                (method && method.toUpperCase() !== 'ALL') ||
+                sinceTimestamp ||
+                sinceRequestId ||
+                tail),
             filters: { url, urlRegex, method, sinceTimestamp, sinceRequestId, tail, limit, offset },
             monitoring: {
                 autoEnabled: networkState.autoEnabled,
@@ -621,7 +632,9 @@ export class AdvancedHandlersBase {
             const type = req.type || 'unknown';
             byType[type] = (byType[type] || 0) + 1;
         });
-        const timestamps = requests.map((r) => r.timestamp).filter((t) => isFiniteNumber(t));
+        const timestamps = requests
+            .map((r) => r.timestamp)
+            .filter((t) => isFiniteNumber(t));
         const timeStats = timestamps.length > 0
             ? {
                 earliest: Math.min(...timestamps),
@@ -883,43 +896,52 @@ export class AdvancedHandlersBase {
             ],
         };
     }
-    async handleConsoleInjectScriptMonitor(_args) {
-        await this.consoleMonitor.enableDynamicScriptMonitoring();
+    async handleConsoleInjectScriptMonitor(args) {
+        const persistent = argBool(args, 'persistent', false);
+        await this.consoleMonitor.enableDynamicScriptMonitoring({ persistent });
         return {
             content: [
                 {
                     type: 'text',
                     text: JSON.stringify({
                         success: true,
-                        message: 'Dynamic script monitoring enabled',
+                        message: persistent
+                            ? 'Dynamic script monitoring enabled (persistent — survives navigations)'
+                            : 'Dynamic script monitoring enabled',
                     }, null, 2),
                 },
             ],
         };
     }
-    async handleConsoleInjectXhrInterceptor(_args) {
-        await this.consoleMonitor.injectXHRInterceptor();
+    async handleConsoleInjectXhrInterceptor(args) {
+        const persistent = argBool(args, 'persistent', false);
+        await this.consoleMonitor.injectXHRInterceptor({ persistent });
         return {
             content: [
                 {
                     type: 'text',
                     text: JSON.stringify({
                         success: true,
-                        message: 'XHR interceptor injected',
+                        message: persistent
+                            ? 'XHR interceptor injected (persistent)'
+                            : 'XHR interceptor injected',
                     }, null, 2),
                 },
             ],
         };
     }
-    async handleConsoleInjectFetchInterceptor(_args) {
-        await this.consoleMonitor.injectFetchInterceptor();
+    async handleConsoleInjectFetchInterceptor(args) {
+        const persistent = argBool(args, 'persistent', false);
+        await this.consoleMonitor.injectFetchInterceptor({ persistent });
         return {
             content: [
                 {
                     type: 'text',
                     text: JSON.stringify({
                         success: true,
-                        message: 'Fetch interceptor injected',
+                        message: persistent
+                            ? 'Fetch interceptor injected (persistent)'
+                            : 'Fetch interceptor injected',
                     }, null, 2),
                 },
             ],
@@ -960,14 +982,17 @@ export class AdvancedHandlersBase {
         if (!functionName) {
             throw new Error('functionName is required');
         }
-        await this.consoleMonitor.injectFunctionTracer(functionName);
+        const persistent = argBool(args, 'persistent', false);
+        await this.consoleMonitor.injectFunctionTracer(functionName, { persistent });
         return {
             content: [
                 {
                     type: 'text',
                     text: JSON.stringify({
                         success: true,
-                        message: `Function tracer injected for: ${functionName}`,
+                        message: persistent
+                            ? `Function tracer injected for: ${functionName} (persistent — survives navigations)`
+                            : `Function tracer injected for: ${functionName}`,
                     }, null, 2),
                 },
             ],