@jshookmcp/jshook 0.2.5 → 0.2.7

package/dist/src/server/domains/evidence/manifest.d.ts

@@ -1,63 +0,0 @@
-import type { MCPServerContext } from '../../domains/shared/registry.js';
-import { EvidenceHandlers } from '../../domains/evidence/handlers.js';
-type H = EvidenceHandlers;
-declare function ensure(ctx: MCPServerContext): H;
-declare const manifest: {
-    kind: "domain-manifest";
-    version: 1;
-    domain: "evidence";
-    depKey: "evidenceHandlers";
-    profiles: ("workflow" | "full")[];
-    ensure: typeof ensure;
-    workflowRule: {
-        patterns: RegExp[];
-        priority: number;
-        tools: string[];
-        hint: string;
-    };
-    registrations: {
-        tool: {
-            inputSchema: {
-                [x: string]: unknown;
-                type: "object";
-                properties?: {
-                    [x: string]: object;
-                } | undefined;
-                required?: string[] | undefined;
-            };
-            name: string;
-            description?: string | undefined;
-            outputSchema?: {
-                [x: string]: unknown;
-                type: "object";
-                properties?: {
-                    [x: string]: object;
-                } | undefined;
-                required?: string[] | undefined;
-            } | undefined;
-            annotations?: {
-                title?: string | undefined;
-                readOnlyHint?: boolean | undefined;
-                destructiveHint?: boolean | undefined;
-                idempotentHint?: boolean | undefined;
-                openWorldHint?: boolean | undefined;
-            } | undefined;
-            execution?: {
-                taskSupport?: "optional" | "required" | "forbidden" | undefined;
-            } | undefined;
-            _meta?: {
-                [x: string]: unknown;
-            } | undefined;
-            icons?: {
-                src: string;
-                mimeType?: string | undefined;
-                sizes?: string[] | undefined;
-                theme?: "light" | "dark" | undefined;
-            }[] | undefined;
-            title?: string | undefined;
-        };
-        domain: "evidence";
-        bind: (deps: import("../../domains/shared/registry.js").ToolHandlerDeps) => (args: import("../../types.js").ToolArgs) => Promise<unknown>;
-    }[];
-};
-export default manifest;

package/dist/src/server/domains/evidence/manifest.js

@@ -1,78 +0,0 @@
-import { bindByDepKey, toolLookup } from '../../domains/shared/registry.js';
-import { evidenceTools } from '../../domains/evidence/definitions.js';
-import { EvidenceHandlers } from '../../domains/evidence/handlers.js';
-import { ReverseEvidenceGraph } from '../../evidence/ReverseEvidenceGraph.js';
-import { InstrumentationSessionManager } from '../../instrumentation/InstrumentationSession.js';
-import { EvidenceGraphBridge } from '../../instrumentation/EvidenceGraphBridge.js';
-const DOMAIN = 'evidence';
-const DEP_KEY = 'evidenceHandlers';
-const t = toolLookup(evidenceTools);
-const b = (invoke) => bindByDepKey(DEP_KEY, invoke);
-function ensure(ctx) {
-    let graph = ctx.getDomainInstance('evidenceGraph');
-    if (!graph) {
-        graph = new ReverseEvidenceGraph();
-        ctx.setDomainInstance('evidenceGraph', graph);
-    }
-    let bridge = ctx.getDomainInstance('evidenceGraphBridge');
-    if (!bridge) {
-        bridge = new EvidenceGraphBridge(graph);
-        ctx.setDomainInstance('evidenceGraphBridge', bridge);
-    }
-    const sessionManager = ctx.getDomainInstance('instrumentationSessionManager');
-    sessionManager?.setEvidenceBridge(bridge);
-    if (!ctx.evidenceHandlers) {
-        ctx.evidenceHandlers = new EvidenceHandlers(graph);
-    }
-    return ctx.evidenceHandlers;
-}
-const manifest = {
-    kind: 'domain-manifest',
-    version: 1,
-    domain: DOMAIN,
-    depKey: DEP_KEY,
-    profiles: ['workflow', 'full'],
-    ensure,
-    workflowRule: {
-        patterns: [
-            /(evidence|provenance|chain).*(graph|query|export|report)/i,
-            /(证据|溯源|链).*(图|查询|导出|报告)/i,
-        ],
-        priority: 90,
-        tools: ['evidence_query_url', 'evidence_export_markdown'],
-        hint: 'Evidence graph: query by URL/function/scriptId → get provenance chain → export as JSON or Markdown report',
-    },
-    registrations: [
-        {
-            tool: t('evidence_query_url'),
-            domain: DOMAIN,
-            bind: b(async (h, a) => h.handleQueryUrl(a)),
-        },
-        {
-            tool: t('evidence_query_function'),
-            domain: DOMAIN,
-            bind: b(async (h, a) => h.handleQueryFunction(a)),
-        },
-        {
-            tool: t('evidence_query_script'),
-            domain: DOMAIN,
-            bind: b(async (h, a) => h.handleQueryScript(a)),
-        },
-        {
-            tool: t('evidence_export_json'),
-            domain: DOMAIN,
-            bind: b(async (h) => h.handleExportJson()),
-        },
-        {
-            tool: t('evidence_export_markdown'),
-            domain: DOMAIN,
-            bind: b(async (h) => h.handleExportMarkdown()),
-        },
-        {
-            tool: t('evidence_chain'),
-            domain: DOMAIN,
-            bind: b(async (h, a) => h.handleChain(a)),
-        },
-    ],
-};
-export default manifest;

package/dist/src/server/domains/graphql/definitions.d.ts

@@ -1,2 +0,0 @@
-import type { Tool } from '@modelcontextprotocol/sdk/types.js';
-export declare const graphqlTools: Tool[];

package/dist/src/server/domains/graphql/definitions.js

@@ -1,55 +0,0 @@
-import { tool } from '../../registry/tool-builder.js';
-export const graphqlTools = [
-    tool('call_graph_analyze')
-        .desc('Analyze runtime function call graph from in-page traces')
-        .number('maxDepth', 'Maximum stack-derived edge depth', { default: 5 })
-        .string('filterPattern', 'Regex filter for function names')
-        .readOnly()
-        .idempotent()
-        .build(),
-    tool('script_replace_persist')
-        .desc('Persistently replace matching script responses via request interception')
-        .string('url', 'Script URL match pattern')
-        .string('replacement', 'Replacement JavaScript source')
-        .enum('matchType', ['exact', 'contains', 'regex'], 'URL matching strategy', {
-        default: 'contains',
-    })
-        .required('url', 'replacement')
-        .openWorld()
-        .build(),
-    tool('graphql_introspect')
-        .desc('Run GraphQL introspection query against a target endpoint')
-        .string('endpoint', 'GraphQL endpoint URL')
-        .prop('headers', {
-        type: 'object',
-        description: 'Custom request headers',
-        additionalProperties: { type: 'string' },
-    })
-        .required('endpoint')
-        .openWorld()
-        .build(),
-    tool('graphql_extract_queries')
-        .desc('Extract GraphQL queries/mutations from captured network traces')
-        .number('limit', 'Maximum extracted operations', { default: 50 })
-        .readOnly()
-        .idempotent()
-        .build(),
-    tool('graphql_replay')
-        .desc('Replay a GraphQL operation with optional variables via in-page fetch')
-        .string('endpoint', 'GraphQL endpoint URL')
-        .string('query', 'GraphQL query/mutation string')
-        .prop('variables', {
-        type: 'object',
-        description: 'GraphQL variables',
-        additionalProperties: true,
-    })
-        .string('operationName', 'GraphQL operationName')
-        .prop('headers', {
-        type: 'object',
-        description: 'Custom request headers',
-        additionalProperties: { type: 'string' },
-    })
-        .required('endpoint', 'query')
-        .openWorld()
-        .build(),
-];

package/dist/src/server/domains/graphql/handlers.base.d.ts

@@ -1,39 +0,0 @@
-import type { Page } from 'rebrowser-puppeteer-core';
-import type { CodeCollector } from '../../domains/shared/modules.js';
-import type { InterceptRequest, PreviewPayload, ScriptMatchType, ScriptReplaceRule } from '../../domains/graphql/handlers.impl.core.runtime.shared.js';
-export { GraphQLHandlersBase as GraphQLToolHandlersBase };
-export declare class GraphQLHandlersBase {
-    protected readonly collector: CodeCollector;
-    protected readonly scriptReplaceRules: ScriptReplaceRule[];
-    protected readonly interceptionInstalledPages: WeakSet<Page>;
-    constructor(collector: CodeCollector);
-    protected toResponse(payload: unknown): {
-        content: {
-            type: "text";
-            text: string;
-        }[];
-    };
-    protected toError(error: unknown, context?: Record<string, unknown>): {
-        content: {
-            type: "text";
-            text: string;
-        }[];
-        isError: boolean;
-    };
-    protected getErrorMessage(error: unknown): string;
-    protected getStringArg(args: Record<string, unknown>, key: string): string | null;
-    protected getNumberArg(args: Record<string, unknown>, key: string, defaultValue: number, min: number, max: number): number;
-    protected getObjectArg(args: Record<string, unknown>, key: string): Record<string, unknown> | null;
-    protected normalizeHeaders(value: unknown): Record<string, string>;
-    protected validateExternalEndpoint(endpoint: string): Promise<string | null>;
-    protected createPreview(text: string, maxChars: number): PreviewPayload;
-    protected serializeForPreview(value: unknown, maxChars: number): PreviewPayload;
-    protected parseMatchType(value: unknown): ScriptMatchType;
-    protected generateRuleId(): string;
-    protected isRequestInterceptHandled(request: InterceptRequest): boolean;
-    protected continueRequest(request: InterceptRequest): Promise<void>;
-    protected ruleMatchesUrl(rule: ScriptReplaceRule, targetUrl: string): boolean;
-    protected findMatchingRule(url: string): ScriptReplaceRule | null;
-    protected handleInterceptedRequest(request: InterceptRequest): Promise<void>;
-    protected ensureScriptInterception(page: Page): Promise<void>;
-}

package/dist/src/server/domains/graphql/handlers.base.js

@@ -1,240 +0,0 @@
-import { isSsrfTarget } from '../../domains/network/replay.js';
-export { GraphQLHandlersBase as GraphQLToolHandlersBase };
-export class GraphQLHandlersBase {
-    collector;
-    scriptReplaceRules = [];
-    interceptionInstalledPages = new WeakSet();
-    constructor(collector) {
-        this.collector = collector;
-    }
-    toResponse(payload) {
-        return {
-            content: [
-                {
-                    type: 'text',
-                    text: JSON.stringify(payload, null, 2),
-                },
-            ],
-        };
-    }
-    toError(error, context) {
-        const payload = {
-            success: false,
-            error: this.getErrorMessage(error),
-        };
-        if (context) {
-            payload.context = context;
-        }
-        return {
-            content: [
-                {
-                    type: 'text',
-                    text: JSON.stringify(payload, null, 2),
-                },
-            ],
-            isError: true,
-        };
-    }
-    getErrorMessage(error) {
-        if (error instanceof Error) {
-            return error.message;
-        }
-        return String(error);
-    }
-    getStringArg(args, key) {
-        const value = args[key];
-        return typeof value === 'string' ? value : null;
-    }
-    getNumberArg(args, key, defaultValue, min, max) {
-        const value = args[key];
-        let parsed = defaultValue;
-        if (typeof value === 'number' && Number.isFinite(value)) {
-            parsed = value;
-        }
-        else if (typeof value === 'string') {
-            const fromString = Number(value);
-            if (Number.isFinite(fromString)) {
-                parsed = fromString;
-            }
-        }
-        if (parsed < min) {
-            return min;
-        }
-        if (parsed > max) {
-            return max;
-        }
-        return Math.trunc(parsed);
-    }
-    getObjectArg(args, key) {
-        const value = args[key];
-        if (value && typeof value === 'object' && !Array.isArray(value)) {
-            return value;
-        }
-        return null;
-    }
-    normalizeHeaders(value) {
-        if (!value || typeof value !== 'object' || Array.isArray(value)) {
-            return {};
-        }
-        const dangerousKeys = new Set(['__proto__', 'constructor', 'prototype']);
-        const headers = Object.create(null);
-        for (const [header, rawValue] of Object.entries(value)) {
-            if (dangerousKeys.has(header))
-                continue;
-            if (typeof rawValue === 'string') {
-                headers[header] = rawValue;
-            }
-            else if (typeof rawValue === 'number' || typeof rawValue === 'boolean') {
-                headers[header] = String(rawValue);
-            }
-        }
-        return headers;
-    }
-    async validateExternalEndpoint(endpoint) {
-        let parsedEndpoint;
-        try {
-            parsedEndpoint = new URL(endpoint);
-        }
-        catch {
-            return `Invalid endpoint URL: ${endpoint}`;
-        }
-        if (parsedEndpoint.protocol !== 'http:' && parsedEndpoint.protocol !== 'https:') {
-            return `Unsupported endpoint protocol: ${parsedEndpoint.protocol} — only http/https allowed`;
-        }
-        if (await isSsrfTarget(parsedEndpoint.toString())) {
-            return `Blocked: endpoint "${endpoint}" resolves to a private/reserved address`;
-        }
-        return null;
-    }
-    createPreview(text, maxChars) {
-        if (text.length <= maxChars) {
-            return {
-                preview: text,
-                truncated: false,
-                totalLength: text.length,
-            };
-        }
-        return {
-            preview: `${text.slice(0, maxChars)}\n... (truncated)`,
-            truncated: true,
-            totalLength: text.length,
-        };
-    }
-    serializeForPreview(value, maxChars) {
-        let serialized;
-        if (typeof value === 'string') {
-            serialized = value;
-        }
-        else {
-            try {
-                serialized = JSON.stringify(value, null, 2);
-            }
-            catch {
-                serialized = String(value);
-            }
-        }
-        return this.createPreview(serialized, maxChars);
-    }
-    parseMatchType(value) {
-        if (value === 'exact' || value === 'contains' || value === 'regex') {
-            return value;
-        }
-        return 'contains';
-    }
-    generateRuleId() {
-        return `script_rule_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
-    }
-    isRequestInterceptHandled(request) {
-        if (typeof request.isInterceptResolutionHandled !== 'function') {
-            return false;
-        }
-        try {
-            return request.isInterceptResolutionHandled();
-        }
-        catch {
-            return false;
-        }
-    }
-    async continueRequest(request) {
-        if (this.isRequestInterceptHandled(request)) {
-            return;
-        }
-        try {
-            await request.continue();
-        }
-        catch {
-        }
-    }
-    ruleMatchesUrl(rule, targetUrl) {
-        if (rule.matchType === 'exact') {
-            return targetUrl === rule.url;
-        }
-        if (rule.matchType === 'contains') {
-            return targetUrl.includes(rule.url);
-        }
-        try {
-            const regex = new RegExp(rule.url);
-            return regex.test(targetUrl);
-        }
-        catch {
-            return false;
-        }
-    }
-    findMatchingRule(url) {
-        for (let index = this.scriptReplaceRules.length - 1; index >= 0; index -= 1) {
-            const rule = this.scriptReplaceRules[index];
-            if (rule && this.ruleMatchesUrl(rule, url)) {
-                return rule;
-            }
-        }
-        return null;
-    }
-    async handleInterceptedRequest(request) {
-        if (this.isRequestInterceptHandled(request)) {
-            return;
-        }
-        const resourceType = request.resourceType();
-        if (resourceType !== 'script') {
-            await this.continueRequest(request);
-            return;
-        }
-        const requestUrl = request.url();
-        const matchedRule = this.findMatchingRule(requestUrl);
-        if (!matchedRule) {
-            await this.continueRequest(request);
-            return;
-        }
-        matchedRule.hits += 1;
-        try {
-            await request.respond({
-                status: 200,
-                contentType: 'application/javascript; charset=utf-8',
-                headers: {
-                    'cache-control': 'no-store',
-                    'x-script-replaced-by': 'script_replace_persist',
-                },
-                body: matchedRule.replacement,
-            });
-        }
-        catch {
-            await this.continueRequest(request);
-        }
-    }
-    async ensureScriptInterception(page) {
-        if (this.interceptionInstalledPages.has(page)) {
-            return;
-        }
-        await page.setRequestInterception(true);
-        const listener = (request) => {
-            void this.handleInterceptedRequest(request);
-        };
-        const eventHost = page;
-        if (typeof eventHost.prependListener === 'function') {
-            eventHost.prependListener('request', listener);
-        }
-        else {
-            eventHost.on('request', listener);
-        }
-        this.interceptionInstalledPages.add(page);
-    }
-}

package/dist/src/server/domains/graphql/handlers.d.ts

@@ -1 +0,0 @@
-export { GraphQLToolHandlers } from '../../domains/graphql/handlers.impl.js';

package/dist/src/server/domains/graphql/handlers.impl.core.d.ts

@@ -1 +0,0 @@
-export { GraphQLToolHandlers } from '../../domains/graphql/handlers.impl.core.runtime.js';

package/dist/src/server/domains/graphql/handlers.impl.core.js

@@ -1 +0,0 @@
-export { GraphQLToolHandlers } from '../../domains/graphql/handlers.impl.core.runtime.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.base.d.ts

@@ -1 +0,0 @@
-export { GraphQLHandlersBase as GraphQLToolHandlersBase } from '../../domains/graphql/handlers.base.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.base.js

@@ -1 +0,0 @@
-export { GraphQLHandlersBase as GraphQLToolHandlersBase } from '../../domains/graphql/handlers.base.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.callgraph.d.ts

@@ -1 +0,0 @@
-export { GraphQLToolHandlersRuntime as GraphQLToolHandlersCallGraph } from '../../domains/graphql/handlers.impl.core.runtime.replay.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.callgraph.js

@@ -1 +0,0 @@
-export { GraphQLToolHandlersRuntime as GraphQLToolHandlersCallGraph } from '../../domains/graphql/handlers.impl.core.runtime.replay.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.d.ts

@@ -1 +0,0 @@
-export { GraphQLToolHandlersRuntime as GraphQLToolHandlers } from '../../domains/graphql/handlers.impl.core.runtime.replay.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.extract.d.ts

@@ -1 +0,0 @@
-export { GraphQLToolHandlersRuntime as GraphQLToolHandlersExtract } from '../../domains/graphql/handlers.impl.core.runtime.replay.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.extract.js

@@ -1 +0,0 @@
-export { GraphQLToolHandlersRuntime as GraphQLToolHandlersExtract } from '../../domains/graphql/handlers.impl.core.runtime.replay.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.introspection.d.ts

@@ -1 +0,0 @@
-export { GraphQLToolHandlersRuntime as GraphQLToolHandlersIntrospection } from '../../domains/graphql/handlers.impl.core.runtime.replay.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.introspection.js

@@ -1 +0,0 @@
-export { GraphQLToolHandlersRuntime as GraphQLToolHandlersIntrospection } from '../../domains/graphql/handlers.impl.core.runtime.replay.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.js

@@ -1 +0,0 @@
-export { GraphQLToolHandlersRuntime as GraphQLToolHandlers } from '../../domains/graphql/handlers.impl.core.runtime.replay.js';

package/dist/src/server/domains/graphql/handlers.impl.core.runtime.replay.d.ts

@@ -1,34 +0,0 @@
-import { GraphQLHandlersBase } from '../../domains/graphql/handlers.base.js';
-export declare class GraphQLToolHandlersRuntime extends GraphQLHandlersBase {
-    handleCallGraphAnalyze(args: Record<string, unknown>): Promise<{
-        content: {
-            type: "text";
-            text: string;
-        }[];
-    }>;
-    handleScriptReplacePersist(args: Record<string, unknown>): Promise<{
-        content: {
-            type: "text";
-            text: string;
-        }[];
-    }>;
-    handleGraphqlIntrospect(args: Record<string, unknown>): Promise<{
-        content: {
-            type: "text";
-            text: string;
-        }[];
-    }>;
-    handleGraphqlExtractQueries(args: Record<string, unknown>): Promise<{
-        content: {
-            type: "text";
-            text: string;
-        }[];
-    }>;
-    handleGraphqlReplay(args: Record<string, unknown>): Promise<{
-        content: {
-            type: "text";
-            text: string;
-        }[];
-    }>;
-}
-export { GraphQLToolHandlersRuntime as GraphQLToolHandlersCallGraph, GraphQLToolHandlersRuntime as GraphQLToolHandlersScriptReplace, GraphQLToolHandlersRuntime as GraphQLToolHandlersIntrospection, GraphQLToolHandlersRuntime as GraphQLToolHandlersExtract, };