@jshookmcp/jshook 0.2.1 → 0.2.2

package/dist/src/server/domains/workflow/handlers.impl.workflow-account-bundle.js

@@ -5,7 +5,7 @@ import { lookup } from 'node:dns/promises';
 import { isIP } from 'node:net';
 import { WorkflowHandlersBase } from '../../domains/workflow/handlers.impl.workflow-base.js';
 import { WorkflowHandlersApi } from '../../domains/workflow/handlers.impl.workflow-api.js';
-import { argString, argStringRequired, argBool, argNumber, argObject } from '../../domains/shared/parse-args.js';
+import { argString, argStringRequired, argBool, argNumber, argObject, } from '../../domains/shared/parse-args.js';
 const LOOPBACK_HTTP_URL_RE = /^http:\/\/(localhost|127\.0\.0\.1|\[::1\])(?::\d+)?(\/|$)/i;
 export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
     async handleRegisterAccountFlow(args) {
@@ -18,12 +18,14 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
         const checkboxSelectors = Array.isArray(rawCheckboxSelectors)
             ? rawCheckboxSelectors
             : typeof rawCheckboxSelectors === 'string'
-                ? (() => { try {
-                    return JSON.parse(rawCheckboxSelectors);
-                }
-                catch {
-                    return [];
-                } })()
+                ? (() => {
+                    try {
+                        return JSON.parse(rawCheckboxSelectors);
+                    }
+                    catch {
+                        return [];
+                    }
+                })()
                 : [];
         const timeoutMs = argNumber(args, 'timeoutMs', 60000);
         const steps = [];
@@ -70,7 +72,9 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
             await this.deps.browserHandlers.handlePageClick({ selector: submitSelector });
             await new Promise((r) => setTimeout(r, 2000));
             steps.push('network_extract_auth');
-            const authResult = await this.deps.advancedHandlers.handleNetworkExtractAuth({ minConfidence: 0.3 });
+            const authResult = await this.deps.advancedHandlers.handleNetworkExtractAuth({
+                minConfidence: 0.3,
+            });
             const authText = authResult.content[0]?.text;
             if (typeof authText !== 'string') {
                 throw new Error('Failed to extract auth result text');
@@ -78,7 +82,11 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
             const authData = JSON.parse(authText);
             if (emailProviderUrl) {
                 steps.push(`tab_workflow:alias_open(emailTab, ${emailProviderUrl})`);
-                await this.deps.browserHandlers.handleTabWorkflow({ action: 'alias_bind', alias: 'register', index: 0 });
+                await this.deps.browserHandlers.handleTabWorkflow({
+                    action: 'alias_bind',
+                    alias: 'register',
+                    index: 0,
+                });
                 const openResult = await this.deps.browserHandlers.handleTabWorkflow({
                     action: 'alias_open',
                     alias: 'emailTab',
@@ -114,7 +122,8 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
                                 break;
                             }
                         }
-                        catch { }
+                        catch {
+                        }
                         await new Promise((r) => setTimeout(r, 2000));
                     }
                     if (verificationUrl) {
@@ -130,7 +139,8 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
                 }
             }
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
                         text: JSON.stringify({
                             success: true,
@@ -143,13 +153,15 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
                                 authFindings: authData.findings ?? [],
                             },
                         }, null, 2),
-                    }],
+                    },
+                ],
             };
         }
         catch (error) {
             logger.error('[register_account_flow] Error:', error);
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
                         text: JSON.stringify({
                             success: false,
@@ -157,7 +169,8 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
                             warnings,
                             error: error instanceof Error ? error.message : String(error),
                         }, null, 2),
-                    }],
+                    },
+                ],
             };
         }
     }
@@ -167,30 +180,39 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
         const patterns = Array.isArray(rawPatterns)
             ? rawPatterns
             : typeof rawPatterns === 'string'
-                ? (() => { try {
-                    return JSON.parse(rawPatterns);
-                }
-                catch {
-                    return [];
-                } })()
+                ? (() => {
+                    try {
+                        return JSON.parse(rawPatterns);
+                    }
+                    catch {
+                        return [];
+                    }
+                })()
                 : [];
         const cacheBundle = argBool(args, 'cacheBundle', true);
         const stripNoise = argBool(args, 'stripNoise', true);
         const maxMatches = argNumber(args, 'maxMatches', 10);
         if (!url || !patterns || patterns.length === 0) {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
                         text: JSON.stringify({ success: false, error: 'url and patterns are required' }),
-                    }],
+                    },
+                ],
             };
         }
         if (await isSsrfTarget(url)) {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
-                        text: JSON.stringify({ success: false, error: `Blocked: target URL "${url}" resolves to a private/reserved address` }),
-                    }],
+                        text: JSON.stringify({
+                            success: false,
+                            error: `Blocked: target URL "${url}" resolves to a private/reserved address`,
+                        }),
+                    },
+                ],
             };
         }
         const MAX_BUNDLE_SIZE = WORKFLOW_JS_BUNDLE_MAX_SIZE_BYTES;
@@ -248,7 +270,7 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
         try {
             if (cacheBundle) {
                 const cached = this.bundleCache.get(url);
-                if (cached && (Date.now() - cached.cachedAt) < WorkflowHandlersBase.BUNDLE_CACHE_TTL_MS) {
+                if (cached && Date.now() - cached.cachedAt < WorkflowHandlersBase.BUNDLE_CACHE_TTL_MS) {
                     bundleText = cached.text;
                     fromCache = true;
                 }
@@ -259,19 +281,31 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
                         const resp = await safeFetch(url, controller.signal);
                         if (!resp.ok) {
                             return {
-                                content: [{
+                                content: [
+                                    {
                                         type: 'text',
-                                        text: JSON.stringify({ success: false, error: `Fetch failed: ${resp.status} ${resp.statusText}`, url }),
-                                    }],
+                                        text: JSON.stringify({
+                                            success: false,
+                                            error: `Fetch failed: ${resp.status} ${resp.statusText}`,
+                                            url,
+                                        }),
+                                    },
+                                ],
                             };
                         }
                         bundleText = await resp.text();
                         if (bundleText.length > MAX_BUNDLE_SIZE) {
                             return {
-                                content: [{
+                                content: [
+                                    {
                                         type: 'text',
-                                        text: JSON.stringify({ success: false, error: `Response too large: ${bundleText.length} bytes exceeds ${MAX_BUNDLE_SIZE} limit`, url }),
-                                    }],
+                                        text: JSON.stringify({
+                                            success: false,
+                                            error: `Response too large: ${bundleText.length} bytes exceeds ${MAX_BUNDLE_SIZE} limit`,
+                                            url,
+                                        }),
+                                    },
+                                ],
                             };
                         }
                         this.evictBundleCache();
@@ -290,19 +324,31 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
                     const resp = await safeFetch(url, controller.signal);
                     if (!resp.ok) {
                         return {
-                            content: [{
+                            content: [
+                                {
                                     type: 'text',
-                                    text: JSON.stringify({ success: false, error: `Fetch failed: ${resp.status} ${resp.statusText}`, url }),
-                                }],
+                                    text: JSON.stringify({
+                                        success: false,
+                                        error: `Fetch failed: ${resp.status} ${resp.statusText}`,
+                                        url,
+                                    }),
+                                },
+                            ],
                         };
                     }
                     bundleText = await resp.text();
                     if (bundleText.length > MAX_BUNDLE_SIZE) {
                         return {
-                            content: [{
+                            content: [
+                                {
                                     type: 'text',
-                                    text: JSON.stringify({ success: false, error: `Response too large: ${bundleText.length} bytes exceeds ${MAX_BUNDLE_SIZE} limit`, url }),
-                                }],
+                                    text: JSON.stringify({
+                                        success: false,
+                                        error: `Response too large: ${bundleText.length} bytes exceeds ${MAX_BUNDLE_SIZE} limit`,
+                                        url,
+                                    }),
+                                },
+                            ],
                         };
                     }
                 }
@@ -313,14 +359,16 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
         }
         catch (fetchError) {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
                         text: JSON.stringify({
                             success: false,
                             error: `Fetch error: ${fetchError instanceof Error ? fetchError.message : String(fetchError)}`,
                             url,
                         }),
-                    }],
+                    },
+                ],
             };
         }
         const results = {};
@@ -332,7 +380,13 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
                 re = new RegExp(pattern.regex, 'g');
             }
             catch (e) {
-                results[pattern.name] = [{ match: '', index: -1, context: `Invalid regex: ${e instanceof Error ? e.message : String(e)}` }];
+                results[pattern.name] = [
+                    {
+                        match: '',
+                        index: -1,
+                        context: `Invalid regex: ${e instanceof Error ? e.message : String(e)}`,
+                    },
+                ];
                 continue;
             }
             const matches = [];
@@ -356,7 +410,8 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
             results[pattern.name] = matches;
         }
         return {
-            content: [{
+            content: [
+                {
                     type: 'text',
                     text: JSON.stringify({
                         success: true,
@@ -366,7 +421,8 @@ export class WorkflowHandlersAccountBundle extends WorkflowHandlersApi {
                         patternsSearched: patterns.length,
                         results,
                     }, null, 2),
-                }],
+                },
+            ],
         };
     }
 }

package/dist/src/server/domains/workflow/handlers.impl.workflow-api.js

@@ -1,7 +1,7 @@
 import { logger } from '../../../utils/logger.js';
 import { isSsrfTarget } from '../../domains/network/replay.js';
 import { WorkflowHandlersBase } from '../../domains/workflow/handlers.impl.workflow-base.js';
-import { argString, argStringRequired, argBool, argNumber, argObject } from '../../domains/shared/parse-args.js';
+import { argString, argStringRequired, argBool, argNumber, argObject, } from '../../domains/shared/parse-args.js';
 function isReportAuthFinding(value) {
     if (!value || typeof value !== 'object') {
         return false;
@@ -12,12 +12,14 @@ function parseCaptureActions(rawActions) {
     const parsed = Array.isArray(rawActions)
         ? rawActions
         : typeof rawActions === 'string'
-            ? (() => { try {
-                return JSON.parse(rawActions);
-            }
-            catch {
-                return [];
-            } })()
+            ? (() => {
+                try {
+                    return JSON.parse(rawActions);
+                }
+                catch {
+                    return [];
+                }
+            })()
             : [];
     if (!Array.isArray(parsed)) {
         return [];
@@ -35,10 +37,15 @@ export class WorkflowHandlersApi extends WorkflowHandlersBase {
         const rawBaseUrl = typeof args.baseUrl === 'string' ? args.baseUrl.trim() : '';
         if (rawBaseUrl.length === 0) {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
-                        text: JSON.stringify({ success: false, error: 'baseUrl is required and must be a non-empty string' }),
-                    }],
+                        text: JSON.stringify({
+                            success: false,
+                            error: 'baseUrl is required and must be a non-empty string',
+                        }),
+                    },
+                ],
             };
         }
         let parsedUrl;
@@ -47,30 +54,39 @@ export class WorkflowHandlersApi extends WorkflowHandlersBase {
         }
         catch {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
                         text: JSON.stringify({ success: false, error: `Invalid baseUrl: ${rawBaseUrl}` }),
-                    }],
+                    },
+                ],
             };
         }
         if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
-                        text: JSON.stringify({ success: false, error: `Unsupported protocol: ${parsedUrl.protocol} — only http/https allowed` }),
-                    }],
+                        text: JSON.stringify({
+                            success: false,
+                            error: `Unsupported protocol: ${parsedUrl.protocol} — only http/https allowed`,
+                        }),
+                    },
+                ],
             };
         }
         const normalizedBaseUrl = parsedUrl.toString().replace(/\/$/, '');
         if (await isSsrfTarget(normalizedBaseUrl)) {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
                         text: JSON.stringify({
                             success: false,
                             error: `Blocked: baseUrl "${rawBaseUrl}" resolves to a private/reserved address`,
                         }),
-                    }],
+                    },
+                ],
             };
         }
         const baseUrl = normalizedBaseUrl;
@@ -78,12 +94,14 @@ export class WorkflowHandlersApi extends WorkflowHandlersBase {
         const paths = Array.isArray(rawPaths)
             ? rawPaths
             : typeof rawPaths === 'string'
-                ? (() => { try {
-                    return JSON.parse(rawPaths);
-                }
-                catch {
-                    return [];
-                } })()
+                ? (() => {
+                    try {
+                        return JSON.parse(rawPaths);
+                    }
+                    catch {
+                        return [];
+                    }
+                })()
                 : [];
         const method = (argString(args, 'method') ?? 'GET').toUpperCase();
         const extraHeaders = (argObject(args, 'headers') ?? {});
@@ -95,63 +113,68 @@ export class WorkflowHandlersApi extends WorkflowHandlersBase {
         const autoInjectAuth = argBool(args, 'autoInjectAuth', true);
         if (!paths || paths.length === 0) {
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
-                        text: JSON.stringify({ success: false, error: 'paths array is required and must not be empty' }),
-                    }],
+                        text: JSON.stringify({
+                            success: false,
+                            error: 'paths array is required and must not be empty',
+                        }),
+                    },
+                ],
             };
         }
-        const probeCode = `(async function() {
-  var baseUrl = ${JSON.stringify(baseUrl)};
-  var paths = ${JSON.stringify(paths)};
-  var method = ${JSON.stringify(method)};
-  var extraHeaders = ${JSON.stringify(extraHeaders)};
-  var includeBodyStatuses = ${JSON.stringify(includeBodyStatuses)};
-  var maxSnippetLen = ${JSON.stringify(maxBodySnippetLength)};
-  var autoInjectAuth = ${JSON.stringify(autoInjectAuth)};
-  var bodyTemplate = ${JSON.stringify(bodyTemplate)};
-
-  var headers = Object.assign({'Content-Type':'application/json'}, extraHeaders);
-  if (autoInjectAuth) {
-    var token = localStorage.getItem('token') || localStorage.getItem('active_token') || localStorage.getItem('access_token');
-    if (token) headers['Authorization'] = 'Bearer ' + token;
-  }
-
-  var results = {};
-  async function probePath(path) {
-    try {
-      var opts = {method: method, headers: headers};
-      if (bodyTemplate && (method === 'POST' || method === 'PUT' || method === 'PATCH')) {
-        opts.body = bodyTemplate;
-      }
-      var resp = await fetch(baseUrl + path, opts);
-      var ct = resp.headers.get('content-type') || '';
-      var snippet = null;
-      if (includeBodyStatuses.indexOf(resp.status) !== -1) {
-        var text = await resp.text();
-        if (!ct.includes('text/html') && !ct.includes('application/xml')) {
-          snippet = text.length > maxSnippetLen ? text.slice(0, maxSnippetLen) + '...[truncated]' : text;
-        } else {
-          snippet = '[HTML/XML response suppressed]';
-        }
-      }
-      return [path, {status: resp.status, contentType: ct.split(';')[0].trim(), snippet: snippet}];
-    } catch(e) {
-      return [path, {status: -1, error: e instanceof Error ? e.message : String(e)}];
-    }
-  }
-
-  var nextIndex = 0;
-  var maxConcurrency = Math.min(paths.length, 6);
-  await Promise.all(Array.from({ length: maxConcurrency }, async function() {
-    while (nextIndex < paths.length) {
-      var currentIndex = nextIndex++;
-      var currentPath = paths[currentIndex];
-      var entry = await probePath(currentPath);
-      results[entry[0]] = entry[1];
-    }
-  }));
-  return {probed: paths.length, method: method, baseUrl: baseUrl, results: results};
+        const probeCode = `(async function() {
+  var baseUrl = ${JSON.stringify(baseUrl)};
+  var paths = ${JSON.stringify(paths)};
+  var method = ${JSON.stringify(method)};
+  var extraHeaders = ${JSON.stringify(extraHeaders)};
+  var includeBodyStatuses = ${JSON.stringify(includeBodyStatuses)};
+  var maxSnippetLen = ${JSON.stringify(maxBodySnippetLength)};
+  var autoInjectAuth = ${JSON.stringify(autoInjectAuth)};
+  var bodyTemplate = ${JSON.stringify(bodyTemplate)};
+
+  var headers = Object.assign({'Content-Type':'application/json'}, extraHeaders);
+  if (autoInjectAuth) {
+    var token = localStorage.getItem('token') || localStorage.getItem('active_token') || localStorage.getItem('access_token');
+    if (token) headers['Authorization'] = 'Bearer ' + token;
+  }
+
+  var results = {};
+  async function probePath(path) {
+    try {
+      var opts = {method: method, headers: headers};
+      if (bodyTemplate && (method === 'POST' || method === 'PUT' || method === 'PATCH')) {
+        opts.body = bodyTemplate;
+      }
+      var resp = await fetch(baseUrl + path, opts);
+      var ct = resp.headers.get('content-type') || '';
+      var snippet = null;
+      if (includeBodyStatuses.indexOf(resp.status) !== -1) {
+        var text = await resp.text();
+        if (!ct.includes('text/html') && !ct.includes('application/xml')) {
+          snippet = text.length > maxSnippetLen ? text.slice(0, maxSnippetLen) + '...[truncated]' : text;
+        } else {
+          snippet = '[HTML/XML response suppressed]';
+        }
+      }
+      return [path, {status: resp.status, contentType: ct.split(';')[0].trim(), snippet: snippet}];
+    } catch(e) {
+      return [path, {status: -1, error: e instanceof Error ? e.message : String(e)}];
+    }
+  }
+
+  var nextIndex = 0;
+  var maxConcurrency = Math.min(paths.length, 6);
+  await Promise.all(Array.from({ length: maxConcurrency }, async function() {
+    while (nextIndex < paths.length) {
+      var currentIndex = nextIndex++;
+      var currentPath = paths[currentIndex];
+      var entry = await probePath(currentPath);
+      results[entry[0]] = entry[1];
+    }
+  }));
+  return {probed: paths.length, method: method, baseUrl: baseUrl, results: results};
 })()`;
         try {
             const result = await this.deps.browserHandlers.handlePageEvaluate({ code: probeCode });
@@ -160,13 +183,15 @@ export class WorkflowHandlersApi extends WorkflowHandlersBase {
         catch (error) {
             logger.error('[api_probe_batch] Error:', error);
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
                         text: JSON.stringify({
                             success: false,
                             error: error instanceof Error ? error.message : String(error),
                         }),
-                    }],
+                    },
+                ],
             };
         }
     }
@@ -190,9 +215,9 @@ export class WorkflowHandlersApi extends WorkflowHandlersBase {
             steps.push('network_enable');
             await this.deps.advancedHandlers.handleNetworkEnable({ enableExceptions: true });
             steps.push('console_inject_fetch_interceptor');
-            await this.deps.advancedHandlers.handleConsoleInjectFetchInterceptor({});
+            await this.deps.advancedHandlers.handleConsoleInjectFetchInterceptor({ persistent: true });
             steps.push('console_inject_xhr_interceptor');
-            await this.deps.advancedHandlers.handleConsoleInjectXhrInterceptor({});
+            await this.deps.advancedHandlers.handleConsoleInjectXhrInterceptor({ persistent: true });
             steps.push(`page_navigate(${url})`);
             await this.deps.browserHandlers.handlePageNavigate({
                 url,
@@ -251,7 +276,9 @@ export class WorkflowHandlersApi extends WorkflowHandlersBase {
             }
             const requestsData = JSON.parse(requestsText);
             steps.push('network_extract_auth');
-            const authResult = await this.deps.advancedHandlers.handleNetworkExtractAuth({ minConfidence: 0.4 });
+            const authResult = await this.deps.advancedHandlers.handleNetworkExtractAuth({
+                minConfidence: 0.4,
+            });
             const authText = authResult.content[0]?.text;
             if (typeof authText !== 'string') {
                 throw new Error('network_extract_auth returned invalid payload');
@@ -299,7 +326,8 @@ export class WorkflowHandlersApi extends WorkflowHandlersBase {
                 }
             }
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
                         text: JSON.stringify({
                             success: true,
@@ -315,25 +343,32 @@ export class WorkflowHandlersApi extends WorkflowHandlersBase {
                             },
                             authFindings,
                             requestStats: requestsData.detailId
-                                ? { totalCaptured, detailId: requestsData.detailId, hint: 'Use get_detailed_data to retrieve full request list' }
+                                ? {
+                                    totalCaptured,
+                                    detailId: requestsData.detailId,
+                                    hint: 'Use get_detailed_data to retrieve full request list',
+                                }
                                 : requestsData.stats,
                             har: exportHar && !harOutputPath ? harResult : undefined,
                             report: reportResult,
                         }, null, 2),
-                    }],
+                    },
+                ],
             };
         }
         catch (error) {
             logger.error('[web_api_capture_session] Error:', error);
             return {
-                content: [{
+                content: [
+                    {
                         type: 'text',
                         text: JSON.stringify({
                             success: false,
                             steps,
                             error: error instanceof Error ? error.message : String(error),
                         }, null, 2),
-                    }],
+                    },
+                ],
             };
         }
     }