@jshookmcp/jshook 0.2.5 → 0.2.7

package/dist/src/server/domains/native-bridge/index.js

@@ -1,271 +0,0 @@
-import { GHIDRA_BRIDGE_ENDPOINT, IDA_BRIDGE_ENDPOINT } from '../../../constants.js';
-export * from './definitions.js';
-function toTextResponse(payload) {
-    return {
-        content: [{ type: 'text', text: JSON.stringify(payload, null, 2) }],
-    };
-}
-function toErrorResponse(tool, error, extra = {}) {
-    return toTextResponse({
-        success: false,
-        tool,
-        error: error instanceof Error ? error.message : String(error),
-        ...extra,
-    });
-}
-async function bridgeFetch(baseUrl, path, method = 'GET', body) {
-    const url = `${baseUrl.replace(/\/$/, '')}${path}`;
-    const res = await fetch(url, {
-        method,
-        headers: { 'Content-Type': 'application/json' },
-        ...(body === undefined ? {} : { body }),
-        signal: AbortSignal.timeout(15_000),
-    });
-    const data = await res.json().catch(() => ({}));
-    return { status: res.status, data };
-}
-async function checkBridgeHealth(endpoint, label) {
-    try {
-        const { status, data } = await bridgeFetch(endpoint, '/health');
-        return {
-            backend: label,
-            available: status === 200,
-            endpoint,
-            version: data,
-        };
-    }
-    catch (error) {
-        return {
-            backend: label,
-            available: false,
-            endpoint,
-            error: error instanceof Error ? error.message : String(error),
-        };
-    }
-}
-function validateLoopbackEndpoint(endpoint, label) {
-    const parsed = new URL(endpoint);
-    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
-        throw new Error(`${label}: only http/https protocols allowed, got ${parsed.protocol}`);
-    }
-    const host = parsed.hostname.replace(/^\[|\]$/g, '');
-    const isLoopback = host === '127.0.0.1' || host === 'localhost' || host === '::1';
-    if (!isLoopback) {
-        throw new Error(`${label}: only loopback addresses allowed (127.0.0.1/localhost/::1), got ${host}`);
-    }
-}
-export class NativeBridgeHandlers {
-    ghidraEndpoint;
-    idaEndpoint;
-    constructor(ghidraEndpoint = GHIDRA_BRIDGE_ENDPOINT, idaEndpoint = IDA_BRIDGE_ENDPOINT) {
-        validateLoopbackEndpoint(ghidraEndpoint, 'Ghidra bridge');
-        validateLoopbackEndpoint(idaEndpoint, 'IDA bridge');
-        this.ghidraEndpoint = ghidraEndpoint;
-        this.idaEndpoint = idaEndpoint;
-    }
-    getGhidraEndpoint(_args) {
-        return this.ghidraEndpoint;
-    }
-    getIdaEndpoint(_args) {
-        return this.idaEndpoint;
-    }
-    async handleNativeBridgeStatus(args) {
-        const backend = args.backend || 'all';
-        const results = [];
-        if (backend === 'ghidra' || backend === 'all') {
-            results.push(await checkBridgeHealth(this.getGhidraEndpoint(args), 'ghidra'));
-        }
-        if (backend === 'ida' || backend === 'all') {
-            results.push(await checkBridgeHealth(this.getIdaEndpoint(args), 'ida'));
-        }
-        return toTextResponse({
-            success: true,
-            backends: results,
-            hint: 'Install bridge servers: Ghidra → ghidra_bridge (pip install ghidra_bridge), IDA → ida_bridge',
-        });
-    }
-    async handleGhidraBridge(args) {
-        const action = args.action;
-        const endpoint = this.getGhidraEndpoint(args);
-        if (!action) {
-            return toErrorResponse('ghidra_bridge', new Error('action is required'));
-        }
-        try {
-            switch (action) {
-                case 'status':
-                    return toTextResponse(await checkBridgeHealth(endpoint, 'ghidra'));
-                case 'open_project': {
-                    const binaryPath = args.binaryPath;
-                    if (!binaryPath)
-                        throw new Error('binaryPath is required for open_project');
-                    const { status, data } = await bridgeFetch(endpoint, '/project/open', 'POST', JSON.stringify({ binaryPath }));
-                    return toTextResponse({ success: status < 300, action, result: data });
-                }
-                case 'list_functions': {
-                    const { status, data } = await bridgeFetch(endpoint, '/functions');
-                    return toTextResponse({ success: status < 300, action, functions: data });
-                }
-                case 'decompile_function': {
-                    const name = args.functionName;
-                    if (!name)
-                        throw new Error('functionName is required for decompile_function');
-                    const { status, data } = await bridgeFetch(endpoint, `/functions/${encodeURIComponent(name)}/decompile`);
-                    return toTextResponse({
-                        success: status < 300,
-                        action,
-                        functionName: name,
-                        decompiled: data,
-                    });
-                }
-                case 'run_script': {
-                    const scriptPath = args.scriptPath;
-                    if (!scriptPath)
-                        throw new Error('scriptPath is required for run_script');
-                    const { status, data } = await bridgeFetch(endpoint, '/script/run', 'POST', JSON.stringify({ scriptPath, args: args.scriptArgs ?? [] }));
-                    return toTextResponse({ success: status < 300, action, result: data });
-                }
-                case 'get_xrefs': {
-                    const name = args.functionName;
-                    if (!name)
-                        throw new Error('functionName is required for get_xrefs');
-                    const { status, data } = await bridgeFetch(endpoint, `/xrefs/${encodeURIComponent(name)}`);
-                    return toTextResponse({ success: status < 300, action, symbol: name, xrefs: data });
-                }
-                case 'search_strings': {
-                    const pattern = args.searchPattern;
-                    const { status, data } = await bridgeFetch(endpoint, '/strings', 'POST', JSON.stringify({ pattern: pattern ?? '' }));
-                    return toTextResponse({ success: status < 300, action, strings: data });
-                }
-                default:
-                    return toTextResponse({
-                        success: true,
-                        guide: {
-                            what: 'Ghidra is an open-source SRE framework by NSA.',
-                            actions: [
-                                'status',
-                                'open_project',
-                                'list_functions',
-                                'decompile_function',
-                                'run_script',
-                                'get_xrefs',
-                                'search_strings',
-                            ],
-                            bridgeSetup: [
-                                'pip install ghidra_bridge',
-                                'In Ghidra: File → Run Script → ghidra_bridge_server.py',
-                                'Default endpoint: http://127.0.0.1:18080',
-                            ],
-                            links: ['https://ghidra-sre.org/', 'https://github.com/justfoxing/ghidra_bridge'],
-                        },
-                    });
-            }
-        }
-        catch (error) {
-            return toErrorResponse('ghidra_bridge', error, { action, endpoint });
-        }
-    }
-    async handleIdaBridge(args) {
-        const action = args.action;
-        const endpoint = this.getIdaEndpoint(args);
-        if (!action) {
-            return toErrorResponse('ida_bridge', new Error('action is required'));
-        }
-        try {
-            switch (action) {
-                case 'status':
-                    return toTextResponse(await checkBridgeHealth(endpoint, 'ida'));
-                case 'open_binary': {
-                    const binaryPath = args.binaryPath;
-                    if (!binaryPath)
-                        throw new Error('binaryPath is required for open_binary');
-                    const { status, data } = await bridgeFetch(endpoint, '/binary/open', 'POST', JSON.stringify({ binaryPath }));
-                    return toTextResponse({ success: status < 300, action, result: data });
-                }
-                case 'list_functions': {
-                    const { status, data } = await bridgeFetch(endpoint, '/functions');
-                    return toTextResponse({ success: status < 300, action, functions: data });
-                }
-                case 'decompile_function': {
-                    const name = args.functionName;
-                    if (!name)
-                        throw new Error('functionName is required for decompile_function');
-                    const { status, data } = await bridgeFetch(endpoint, `/functions/${encodeURIComponent(name)}/decompile`);
-                    return toTextResponse({
-                        success: status < 300,
-                        action,
-                        functionName: name,
-                        decompiled: data,
-                    });
-                }
-                case 'run_script': {
-                    const scriptPath = args.scriptPath;
-                    if (!scriptPath)
-                        throw new Error('scriptPath is required for run_script');
-                    const { status, data } = await bridgeFetch(endpoint, '/script/run', 'POST', JSON.stringify({ scriptPath, args: args.scriptArgs ?? [] }));
-                    return toTextResponse({ success: status < 300, action, result: data });
-                }
-                case 'get_xrefs': {
-                    const name = args.functionName;
-                    if (!name)
-                        throw new Error('functionName is required for get_xrefs');
-                    const { status, data } = await bridgeFetch(endpoint, `/xrefs/${encodeURIComponent(name)}`);
-                    return toTextResponse({ success: status < 300, action, symbol: name, xrefs: data });
-                }
-                case 'get_strings': {
-                    const { status, data } = await bridgeFetch(endpoint, '/strings');
-                    return toTextResponse({ success: status < 300, action, strings: data });
-                }
-                default:
-                    return toTextResponse({
-                        success: true,
-                        guide: {
-                            what: 'IDA Pro is a commercial disassembler/decompiler by Hex-Rays.',
-                            actions: [
-                                'status',
-                                'open_binary',
-                                'list_functions',
-                                'decompile_function',
-                                'run_script',
-                                'get_xrefs',
-                                'get_strings',
-                            ],
-                            bridgeSetup: [
-                                'pip install ida_bridge  // or use idalink',
-                                'In IDA: File → Script file → ida_bridge_server.py',
-                                'Default endpoint: http://127.0.0.1:18081',
-                            ],
-                            links: [
-                                'https://hex-rays.com/ida-pro/',
-                                'https://github.com/williballenthin/ida-bridge',
-                            ],
-                        },
-                    });
-            }
-        }
-        catch (error) {
-            return toErrorResponse('ida_bridge', error, { action, endpoint });
-        }
-    }
-    async handleNativeSymbolSync(args) {
-        const source = args.source;
-        if (!source || !['ghidra', 'ida'].includes(source)) {
-            return toErrorResponse('native_symbol_sync', new Error('source must be "ghidra" or "ida"'));
-        }
-        const endpoint = source === 'ghidra' ? this.getGhidraEndpoint(args) : this.getIdaEndpoint(args);
-        try {
-            const { status, data } = await bridgeFetch(endpoint, '/symbols/export', 'POST', JSON.stringify({
-                filter: args.filter ?? '',
-                format: args.exportFormat ?? 'json',
-            }));
-            return toTextResponse({
-                success: status < 300,
-                source,
-                format: args.exportFormat ?? 'json',
-                symbols: data,
-            });
-        }
-        catch (error) {
-            return toErrorResponse('native_symbol_sync', error, { source, endpoint });
-        }
-    }
-}

package/dist/src/server/domains/network/auth-extractor.d.ts

@@ -1,14 +0,0 @@
-export interface AuthFinding {
-    header: string;
-    value_masked: string;
-    request_url: string;
-    confidence: number;
-    source: 'header' | 'cookie' | 'query' | 'body';
-}
-interface CapturedRequest {
-    url: string;
-    headers?: Record<string, string>;
-    postData?: string;
-}
-export declare function extractAuthFromRequests(requests: CapturedRequest[]): AuthFinding[];
-export {};

package/dist/src/server/domains/network/auth-extractor.js

@@ -1,129 +0,0 @@
-const AUTH_HEADER_KEYS = [
-    'authorization',
-    'cookie',
-    'x-token',
-    'x-auth-token',
-    'x-access-token',
-    'x-api-key',
-    'x-signature',
-    'x-sign',
-    'x-csrf-token',
-];
-const TOKEN_BODY_KEYS = /^(token|access_token|refresh_token|sign|signature|auth|jwt|api_key|apikey|key|secret)$/i;
-const JWT_RE = /^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/;
-const BEARER_RE = /^Bearer\s+\S+/i;
-function maskSecret(raw) {
-    const trimmed = raw.trim();
-    if (trimmed.length <= 12)
-        return '***';
-    return `${trimmed.slice(0, 6)}***${trimmed.slice(-4)}`;
-}
-function scoreValue(value) {
-    const v = value.trim();
-    if (BEARER_RE.test(v))
-        return 0.95;
-    if (JWT_RE.test(v))
-        return 0.9;
-    if (v.length > 20 && /^[A-Za-z0-9+/=_-]+$/.test(v))
-        return 0.7;
-    if (v.length > 10)
-        return 0.5;
-    return 0.3;
-}
-export function extractAuthFromRequests(requests) {
-    const findings = [];
-    const seen = new Set();
-    for (const req of requests) {
-        const headers = req.headers ?? {};
-        for (const [k, v] of Object.entries(headers)) {
-            const lk = k.toLowerCase();
-            if (!AUTH_HEADER_KEYS.includes(lk))
-                continue;
-            if (!v || v.length < 4)
-                continue;
-            if (lk === 'cookie') {
-                for (const part of v.split(';')) {
-                    const eqIdx = part.indexOf('=');
-                    if (eqIdx === -1)
-                        continue;
-                    const name = part.slice(0, eqIdx).trim();
-                    const val = part.slice(eqIdx + 1).trim();
-                    if (!val || val.length < 8)
-                        continue;
-                    const dedupeKey = `cookie:${name}:${val.slice(0, 8)}`;
-                    if (seen.has(dedupeKey))
-                        continue;
-                    seen.add(dedupeKey);
-                    findings.push({
-                        header: `cookie[${name}]`,
-                        value_masked: maskSecret(val),
-                        request_url: req.url,
-                        confidence: scoreValue(val),
-                        source: 'cookie',
-                    });
-                }
-                continue;
-            }
-            const dedupeKey = `header:${lk}:${v.slice(0, 8)}`;
-            if (seen.has(dedupeKey))
-                continue;
-            seen.add(dedupeKey);
-            findings.push({
-                header: k,
-                value_masked: maskSecret(v),
-                request_url: req.url,
-                confidence: scoreValue(v),
-                source: 'header',
-            });
-        }
-        try {
-            const u = new URL(req.url);
-            for (const [k, v] of u.searchParams.entries()) {
-                if (!TOKEN_BODY_KEYS.test(k))
-                    continue;
-                if (!v || v.length < 8)
-                    continue;
-                const dedupeKey = `query:${k}:${v.slice(0, 8)}`;
-                if (seen.has(dedupeKey))
-                    continue;
-                seen.add(dedupeKey);
-                findings.push({
-                    header: k,
-                    value_masked: maskSecret(v),
-                    request_url: req.url,
-                    confidence: scoreValue(v) * 0.9,
-                    source: 'query',
-                });
-            }
-        }
-        catch {
-        }
-        if (req.postData) {
-            try {
-                const body = JSON.parse(req.postData);
-                if (body && typeof body === 'object') {
-                    for (const [k, v] of Object.entries(body)) {
-                        if (!TOKEN_BODY_KEYS.test(k))
-                            continue;
-                        if (typeof v !== 'string' || v.length < 8)
-                            continue;
-                        const dedupeKey = `body:${k}:${v.slice(0, 8)}`;
-                        if (seen.has(dedupeKey))
-                            continue;
-                        seen.add(dedupeKey);
-                        findings.push({
-                            header: k,
-                            value_masked: maskSecret(v),
-                            request_url: req.url,
-                            confidence: scoreValue(v) * 0.85,
-                            source: 'body',
-                        });
-                    }
-                }
-            }
-            catch {
-            }
-        }
-    }
-    return findings.toSorted((a, b) => b.confidence - a.confidence);
-}

package/dist/src/server/domains/network/definitions.d.ts

@@ -1,2 +0,0 @@
-import type { Tool } from '@modelcontextprotocol/sdk/types.js';
-export declare const advancedTools: Tool[];

package/dist/src/server/domains/network/definitions.js

@@ -1,177 +0,0 @@
-import { tool } from '../../registry/tool-builder.js';
-export const advancedTools = [
-    tool('network_enable')
-        .desc('Enable network request monitoring. Must be called before page_navigate to capture requests.\n\nCorrect order:\n1. network_enable()\n2. page_navigate("https://example.com")\n3. network_get_requests()\n\nOr use enableNetworkMonitoring parameter on page_navigate.')
-        .boolean('enableExceptions', 'Also capture uncaught exceptions', { default: true })
-        .build(),
-    tool('network_disable').desc('Disable network request monitoring').destructive().build(),
-    tool('network_get_status')
-        .desc('Get network monitoring status (enabled, request count, response count)')
-        .readOnly()
-        .idempotent()
-        .build(),
-    tool('network_get_requests')
-        .desc('Get captured network requests. Large results (>25KB) automatically return a summary with detailId.\n\nPrerequisites:\n1. Call network_enable first\n2. Navigate to a page\n\nResponse fields:\n- requestId: unique request identifier\n- url: request URL\n- method: HTTP method (GET/POST)\n- headers: request headers\n- postData: POST body (if present)\n- timestamp: capture time\n- type: resource type (Document/Script/XHR)\n\nDefault behavior:\n- Static resources (Image/Font/Stylesheet/Media) are excluded when no filters are set\n- Results are sorted by type priority: XHR > Fetch > Document > Script > Other\n- Set any filter (url, method, etc.) to include all resource types\n\nBest practices:\n1. Use url filter to reduce result size\n2. Use offset+limit for pagination instead of multiple get_detailed_data calls\n3. Use get_detailed_data(detailId) for full data when summary is returned\n4. If 0 results returned, call console_inject_fetch_interceptor() then re-navigate to capture frontend-wrapped fetch/XHR calls')
-        .string('url', 'Filter by URL substring (e.g., "api" matches all API URLs)')
-        .string('urlRegex', 'Filter by URL regex pattern (e.g., "/api/(v[12]|auth)/"). Takes precedence over url substring.')
-        .string('method', 'Filter by HTTP method (GET, POST, PUT, DELETE)')
-        .number('sinceTimestamp', 'Only return requests after this epoch timestamp (milliseconds). Useful for incremental polling.')
-        .string('sinceRequestId', 'Only return requests after this requestId (exclusive). Useful for incremental retrieval.')
-        .number('tail', 'Return the last N requests (applied after all other filters). E.g., tail=5 returns the 5 most recent.')
-        .number('limit', 'Maximum number of results per page (default: 100, max: 1000)', {
-        default: 100,
-    })
-        .number('offset', 'Skip first N results for pagination (default: 0). Use page.nextOffset from previous response.', { default: 0 })
-        .boolean('autoEnable', 'Auto-enable network monitoring when currently disabled', {
-        default: true,
-    })
-        .boolean('enableExceptions', 'When autoEnable=true, also enable uncaught exception monitoring', { default: true })
-        .build(),
-    tool('network_get_response_body')
-        .desc('Get response body for a specific request. Auto-truncates responses >100KB. Use returnSummary=true for large files.')
-        .string('requestId', 'Request ID (from network_get_requests)')
-        .number('maxSize', 'Maximum response size in bytes', { default: 100000 })
-        .boolean('returnSummary', 'Return only size and preview instead of full body', {
-        default: false,
-    })
-        .number('retries', 'Retry count when response body is not yet available', { default: 3 })
-        .number('retryIntervalMs', 'Retry interval in milliseconds', { default: 500 })
-        .boolean('autoEnable', 'Auto-enable network monitoring when currently disabled', {
-        default: false,
-    })
-        .boolean('enableExceptions', 'When autoEnable=true, also enable uncaught exception monitoring', { default: true })
-        .required('requestId')
-        .build(),
-    tool('network_get_stats')
-        .desc('Get network statistics (total requests, response count, error rate, timing)')
-        .readOnly()
-        .idempotent()
-        .build(),
-    tool('performance_get_metrics')
-        .desc('Get page performance metrics (Web Vitals: FCP, LCP, FID, CLS)')
-        .boolean('includeTimeline', 'Include detailed timeline events', { default: false })
-        .readOnly()
-        .idempotent()
-        .build(),
-    tool('performance_start_coverage')
-        .desc('Start JavaScript and CSS code coverage recording')
-        .build(),
-    tool('performance_stop_coverage')
-        .desc('Stop coverage recording and return coverage report')
-        .build(),
-    tool('performance_take_heap_snapshot').desc('Take a V8 heap memory snapshot').build(),
-    tool('performance_trace_start')
-        .desc('Start a Chrome Performance Trace recording using the CDP Tracing domain.\n\nCaptures timeline events (JS execution, layout, paint, rendering) that can be loaded in Chrome DevTools Performance tab.\n\nUSE THIS to:\n- Profile WASM execution performance\n- Find JavaScript performance bottlenecks\n- Analyze rendering and layout thrashing\n- Record screenshots during trace (set screenshots: true)\n\nCall performance_trace_stop to end recording and save the trace file.')
-        .array('categories', { type: 'string' }, 'Trace categories to include (default: devtools.timeline, v8.execute, blink.user_timing). Pass custom categories for specific tracing needs.')
-        .boolean('screenshots', 'Capture screenshots during tracing (increases trace file size). Default: false', { default: false })
-        .build(),
-    tool('performance_trace_stop')
-        .desc('Stop a running Performance Trace and save the trace file.\n\nReturns the artifact path (loadable in Chrome DevTools Performance tab), event count, and file size.')
-        .string('artifactPath', 'Custom output file path. If omitted, auto-generates path in artifacts/traces/')
-        .build(),
-    tool('profiler_cpu_start')
-        .desc('Start CDP CPU profiling.\n\nRecords a V8 CPU profile with call tree, hit counts, and time deltas. The result can be loaded in Chrome DevTools.\n\nCall profiler_cpu_stop to end and retrieve the profile.')
-        .build(),
-    tool('profiler_cpu_stop')
-        .desc('Stop CPU profiling, save the profile, and return top hot functions.')
-        .string('artifactPath', 'Custom output file path. If omitted, auto-generates path in artifacts/profiles/')
-        .build(),
-    tool('profiler_heap_sampling_start')
-        .desc('Start V8 heap allocation sampling.\n\nTracks memory allocations over time. Useful for finding memory leaks and high-allocation code paths.\n\nCall profiler_heap_sampling_stop to end and retrieve the report.')
-        .number('samplingInterval', 'Sampling interval in bytes. Lower values = more detail but higher overhead.', { default: 32768 })
-        .build(),
-    tool('profiler_heap_sampling_stop')
-        .desc('Stop heap allocation sampling and return the top allocators.')
-        .string('artifactPath', 'Custom output file path. If omitted, auto-generates path in artifacts/profiles/')
-        .number('topN', 'Number of top allocators to return', { default: 20 })
-        .build(),
-    tool('console_get_exceptions')
-        .desc('Get captured uncaught exceptions from the page')
-        .string('url', 'Filter by URL substring')
-        .number('limit', 'Maximum number of exceptions to return', { default: 50 })
-        .readOnly()
-        .build(),
-    tool('console_inject_script_monitor')
-        .desc('Inject a monitor that tracks dynamically created script elements. Use persistent: true to survive page navigations.')
-        .boolean('persistent', 'When true, monitor survives page navigations (uses evaluateOnNewDocument). Default: false.')
-        .openWorld()
-        .build(),
-    tool('console_inject_xhr_interceptor')
-        .desc('Inject an XHR interceptor to capture AJAX request/response data. Use persistent: true for the interceptor to survive page navigations.')
-        .boolean('persistent', 'When true, interceptor survives page navigations (uses evaluateOnNewDocument). Default: false.')
-        .openWorld()
-        .build(),
-    tool('console_inject_fetch_interceptor')
-        .desc('Inject a Fetch API interceptor to capture fetch request/response data including headers, body, and timing.\n\nUSE THIS when:\n- network_get_requests returns 0 results after page_navigate\n- The target page wraps fetch() internally (SPA, React, Vue apps)\n- You need to capture request signatures, tokens, or custom headers added by frontend JS\n- CDP network monitoring misses dynamically-constructed requests\n\nUse persistent: true to make the interceptor survive page navigations — no need to inject before page_navigate.')
-        .boolean('persistent', 'When true, interceptor survives page navigations (uses evaluateOnNewDocument). Default: false.')
-        .openWorld()
-        .build(),
-    tool('console_clear_injected_buffers')
-        .desc('Clear injected in-page monitoring buffers (XHR/Fetch queues and dynamic script records) without removing interceptors')
-        .build(),
-    tool('console_reset_injected_interceptors')
-        .desc('Reset injected interceptors/monitors to recover from stale hook state and allow clean reinjection')
-        .build(),
-    tool('console_inject_function_tracer')
-        .desc('Inject a Proxy-based function tracer to log all calls to a named function. Use persistent: true to survive page navigations.')
-        .string('functionName', 'Global function path to trace (e.g., "window.someFunction")')
-        .boolean('persistent', 'When true, tracer survives page navigations (uses evaluateOnNewDocument). Default: false.')
-        .required('functionName')
-        .openWorld()
-        .build(),
-    tool('network_extract_auth')
-        .desc('Scan all captured network requests and extract authentication credentials (tokens, cookies, API keys, signatures).\n\nReturns masked values (first 6 + last 4 chars) sorted by confidence.\nSources scanned: request headers, cookies, URL query params, JSON request body.\n\nUSE THIS after capturing traffic to automatically identify:\n- Bearer tokens / JWT tokens\n- Session cookies\n- Custom auth headers (X-Token, X-Signature, X-Api-Key)\n- Signing parameters in request body or query string')
-        .number('minConfidence', 'Minimum confidence threshold 0-1', { default: 0.4 })
-        .build(),
-    tool('network_export_har')
-        .desc('Export all captured network traffic as a standard HAR 1.2 file.\n\nHAR (HTTP Archive) files can be opened in:\n- Chrome DevTools (Network tab → Import)\n- Fiddler, Charles Proxy, Wireshark\n- Online HAR viewers\n\nUSE THIS to:\n- Save a complete traffic snapshot for offline analysis\n- Share captured API calls with other tools\n- Reproduce a full session outside the browser')
-        .string('outputPath', 'File path to write the HAR file. If omitted, returns HAR as JSON.')
-        .boolean('includeBodies', 'Include response bodies in the HAR (may be slow for large captures). Default: false', { default: false })
-        .openWorld()
-        .build(),
-    tool('network_replay_request')
-        .desc('Replay a previously captured network request with optional modifications.\n\nUSE THIS to:\n- Re-send an API call with modified headers (e.g., different auth token)\n- Test how a server responds to altered request bodies\n- Verify that a captured signature is still valid\n- Reproduce a specific API call without navigating again\n\nSecurity: dryRun=true (default) previews what will be sent without actually sending.\nSet dryRun=false to execute the actual request.')
-        .string('requestId', 'Request ID from network_get_requests to replay')
-        .object('headerPatch', { additionalProperties: { type: 'string' } }, 'Headers to add or override (key-value pairs)')
-        .string('bodyPatch', 'Replace the entire request body with this string')
-        .string('methodOverride', 'Override the HTTP method (e.g., change POST to GET)')
-        .string('urlOverride', 'Override the request URL')
-        .number('timeoutMs', 'Request timeout in milliseconds', { default: 30000 })
-        .boolean('dryRun', 'If true (default), only preview the request without sending. Set false to execute.', { default: true })
-        .required('requestId')
-        .openWorld()
-        .build(),
-    tool('network_intercept_response')
-        .desc('Add response interception rules using CDP Fetch domain. Matched requests will receive a custom response instead of the real server response.\n\nUSE THIS to:\n- Override API responses (e.g., spoof subscription/paywall status)\n- Inject custom feature flags\n- Test error handling by returning specific error codes\n- Mock API endpoints during development\n\nSupports both single rule and batch mode. URL patterns support glob (* for segment, ** for any) and regex.\n\nPrerequisites: Browser must be launched and a page active.\n\nExample (single rule):\n  urlPattern: "*api/subscription*"\n  responseBody: \'{"status":"active","plan":"pro"}\'\n\nExample (batch):\n  rules: [{urlPattern: "*api/status*", responseBody: "..."}, ...]')
-        .string('urlPattern', 'URL pattern to match (single rule mode). Supports glob (* = segment, ** = any) or regex.')
-        .enum('urlPatternType', ['glob', 'regex'], 'How to interpret urlPattern', { default: 'glob' })
-        .enum('stage', ['Request', 'Response'], 'Intercept stage. Response (default) intercepts after server responds.', { default: 'Response' })
-        .number('responseCode', 'HTTP status code to return', { default: 200 })
-        .object('responseHeaders', { additionalProperties: { type: 'string' } }, 'Custom response headers as key-value pairs.')
-        .string('responseBody', 'Custom response body string.')
-        .array('rules', {
-        type: 'object',
-        properties: {
-            urlPattern: { type: 'string' },
-            urlPatternType: { type: 'string', enum: ['glob', 'regex'] },
-            stage: { type: 'string', enum: ['Request', 'Response'] },
-            responseCode: { type: 'number' },
-            responseHeaders: { type: 'object', additionalProperties: { type: 'string' } },
-            responseBody: { type: 'string' },
-        },
-        required: ['urlPattern'],
-    }, 'Batch mode: array of rule objects')
-        .openWorld()
-        .build(),
-    tool('network_intercept_list')
-        .desc("List all active response interception rules with hit statistics.\n\nShows each rule's ID, URL pattern, response code, hit count, and creation time.\nUse this to monitor which rules are being triggered.")
-        .readOnly()
-        .idempotent()
-        .build(),
-    tool('network_intercept_disable')
-        .desc('Remove interception rules. Provide ruleId to remove a single rule, or all=true to disable all interception.\n\nWhen all rules are removed, the CDP Fetch domain is automatically disabled.')
-        .string('ruleId', 'ID of the rule to remove (from network_intercept_list)')
-        .boolean('all', 'Set to true to remove all rules and disable interception', { default: false })
-        .destructive()
-        .build(),
-];

package/dist/src/server/domains/network/handlers.base.core.d.ts

@@ -1,64 +0,0 @@
-import type { CodeCollector } from '../../domains/shared/modules.js';
-import type { ConsoleMonitor } from '../../domains/shared/modules.js';
-import { PerformanceMonitor } from '../../domains/shared/modules.js';
-export declare class NetworkHandlersCore {
-    protected collector: CodeCollector;
-    protected consoleMonitor: ConsoleMonitor;
-    protected performanceMonitor: PerformanceMonitor | null;
-    protected detailedDataManager: import("../../../utils/DetailedDataManager.js").DetailedDataManager;
-    constructor(collector: CodeCollector, consoleMonitor: ConsoleMonitor);
-    protected getPerformanceMonitor(): PerformanceMonitor;
-    protected parseBooleanArg(value: unknown, defaultValue: boolean): boolean;
-    protected parseNumberArg(value: unknown, options: {
-        defaultValue: number;
-        min?: number;
-        max?: number;
-        integer?: boolean;
-    }): number;
-    protected sleep(ms: number): Promise<void>;
-    protected ensureNetworkEnabled(options: {
-        autoEnable: boolean;
-        enableExceptions: boolean;
-    }): Promise<{
-        enabled: boolean;
-        autoEnabled: boolean;
-        error?: string;
-    }>;
-    handleNetworkEnable(args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-    }>;
-    handleNetworkDisable(_args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-    }>;
-    handleNetworkGetStatus(_args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-    }>;
-    handleNetworkGetRequests(args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-    }>;
-    handleNetworkGetResponseBody(args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-    }>;
-    handleNetworkGetStats(_args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-    }>;
-    cleanup(): Promise<void>;
-}