@livx.cc/appwrap 0.43.0 → 0.46.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livx.cc/appwrap",
-  "version": "0.43.0",
+  "version": "0.46.2",
   "description": "Wrap any PWA into a native app with native capabilities (appwrap runtime + @livx.cc/native-kit).",
   "license": "MIT",
   "author": "Elya Livshitz",

package/runtime/App_Resources/Android/src/main/AndroidManifest.xml

@@ -53,6 +53,7 @@
 			<category android:name="android.intent.category.DEFAULT" />
 			<category android:name="android.intent.category.BROWSABLE" />
 			<data android:scheme="appwrap" />
+			<!-- appwrap:oauth-redirect-schemes --><!-- /appwrap:oauth-redirect-schemes -->
 		</intent-filter>
 	</activity>
 		<activity android:name="com.tns.ErrorReportActivity"/>

package/runtime-desktop/bridge-shim/build.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+# Build the injectable content bundle. Must run with the bod-browser repo as cwd so its
+# tsconfig `paths` (shared/*) resolve — the bundle reuses extension/src/content/* unmodified.
+set -e
+HERE="$(cd "$(dirname "$0")" && pwd)"
+BOD_BROWSER="${BOD_BROWSER:-$HERE/../../../bod-browser}"
+cd "$BOD_BROWSER"
+bun build "$HERE/content-entry.ts" --outfile "$HERE/dist/content.js"
+echo "built $HERE/dist/content.js"

package/runtime-desktop/bridge-shim/content-entry.ts

@@ -0,0 +1,87 @@
+// SPIKE: browser-bridge content layer for the appwrap desktop (Tauri/WKWebView) shell.
+// Reuses bod-browser's extension/src/content/* modules UNMODIFIED; only the transport differs:
+// instead of chrome.runtime messaging, each page dials a local WS to the shim (bridge-shim/shim.ts)
+// and answers ContentAction messages. Injected per-window via Tauri initialization_script.
+//
+// Build (from the bod-browser repo root so its tsconfig `paths` resolve shared/*):
+//   cd ../bod-browser && bun build <this file> --outfile <appwrap>/runtime-desktop/bridge-shim/dist/content.js
+import type { ContentAction } from 'shared/protocol';
+import { advanceScroll } from '../../../bod-browser/extension/src/content/advance-scroll';
+import {
+  clickElement, typeInElement, fillElement, doScroll, scrollElementIntoView, evalScript,
+  waitForElement, hoverElement, scrollElementBy, hoverNear, sendKey,
+} from '../../../bod-browser/extension/src/content/actions';
+import {
+  queryElements, getLinks, findButtons, clickText, queryByText, getElementValue, setElementAttribute,
+} from '../../../bod-browser/extension/src/content/query';
+import { getA11ySnapshot, queryA11y } from '../../../bod-browser/extension/src/content/a11y';
+import { probePage } from '../../../bod-browser/extension/src/content/probe';
+import { diagnosePage } from '../../../bod-browser/extension/src/content/diagnose';
+
+declare global {
+  interface Window { __BRIDGE_LABEL?: string; __BRIDGE_PORT?: number; __BRIDGE_LOADED?: boolean }
+}
+
+async function handleMessage(msg: ContentAction): Promise<unknown> {
+  switch (msg.action) {
+    case 'getContent':
+      return { url: location.href, title: document.title, html: document.documentElement.outerHTML, text: document.body?.innerText ?? '' };
+    case 'getTextContent':
+      return { url: location.href, title: document.title, text: document.body?.innerText?.slice(0, 20000) || '' };
+    case 'query': return queryElements(msg.selector, msg.multiple);
+    case 'click': return clickElement(msg.selector);
+    case 'type': return typeInElement(msg.selector, msg.value, msg.mode, msg.clear);
+    case 'fill': return fillElement(msg.selector, msg.value, msg.timeout, msg.mode, msg.clear);
+    case 'getValue': return getElementValue(msg.selector);
+    case 'setAttribute': return setElementAttribute(msg.selector, msg.attr, msg.value);
+    case 'scroll': return doScroll(msg.x || 0, msg.y || 0, msg.behavior);
+    case 'scrollIntoView': return scrollElementIntoView(msg.selector, msg.behavior);
+    case 'eval': return evalScript(msg.script);
+    case 'waitFor': return waitForElement(msg.selector, msg.timeout || 5000);
+    case 'hover': return hoverElement(msg.selector);
+    case 'scrollEl': return scrollElementBy(msg.selector, msg.deltaX || 0, msg.deltaY || 0, msg.behavior);
+    case 'advanceScroll':
+      return advanceScroll({ deltaY: msg.deltaY, itemSelector: msg.itemSelector, loadMoreSelector: msg.loadMoreSelector, behavior: msg.behavior });
+    case 'getA11ySnapshot': return getA11ySnapshot(msg.root || null, msg.maxDepth || 10, msg.mode || 'full');
+    case 'probe': return probePage(msg.goal || null);
+    case 'diagnose': return diagnosePage();
+    case 'queryA11y': return queryA11y(msg.role, msg.name, msg.multiple);
+    case 'getLinks': return getLinks(msg.pattern || null, msg.scope || null);
+    case 'clickText': return clickText(msg.text, msg.scope || null);
+    case 'queryByText': return queryByText(msg.text, msg.scope || null);
+    case 'findButtons': return findButtons(msg.scope || null);
+    case 'sendKey': return sendKey(msg.selector || null, msg.key, msg.modifiers);
+    case '_ping': return { pong: true };
+    default:
+      throw new Error(`Unknown action: ${(msg as ContentAction).action}`);
+  }
+}
+
+(() => {
+  // initialization_script can fire more than once per document lifecycle; guard.
+  if (window.__BRIDGE_LOADED) return;
+  window.__BRIDGE_LOADED = true;
+  const label = window.__BRIDGE_LABEL || 'unknown';
+
+  // Transport: WebKit blocks ws://127.0.0.1 (and plain-http beacons) from https pages as mixed
+  // content — no loopback exemption like Chrome. So results go out via the native
+  // WKScriptMessageHandler the shell installs (webkit.messageHandlers.bridgeShim), and commands
+  // come in via window.__bridgeDispatch(...) evaluated by the shell (evalJs op).
+  type WebkitHandlers = { webkit?: { messageHandlers?: { bridgeShim?: { postMessage: (s: string) => void } } } };
+  const post = (o: Record<string, unknown>) => {
+    try { (window as WebkitHandlers).webkit?.messageHandlers?.bridgeShim?.postMessage(JSON.stringify({ label, ...o })); } catch { /* ignore */ }
+  };
+
+  (window as unknown as { __bridgeDispatch: (m: ContentAction & { id: string }) => void }).__bridgeDispatch = (m) => {
+    Promise.resolve()
+      .then(() => handleMessage(m))
+      .then(result => post({ id: m.id, result }))
+      .catch((e: Error) => post({ id: m.id, error: e.message }));
+  };
+
+  const register = () => post({ type: 'register', url: location.href, title: document.title });
+  register();
+  addEventListener('DOMContentLoaded', register);
+  addEventListener('load', register);
+  console.log(`[BridgeDesktop:cs ${label}] loaded on ${location.href.slice(0, 80)}`);
+})();

package/runtime-desktop/bridge-shim/shim.ts

@@ -0,0 +1,132 @@
+#!/usr/bin/env bun
+// SPIKE: browser-bridge "extension instance" shim for the appwrap desktop (Tauri) shell.
+// Speaks the UNMODIFIED bod-browser extension protocol to the bridge server (ws://localhost:9230),
+// backed by Tauri windows instead of Chrome tabs:
+//   - WS client -> bridge server: hello { instanceId: 'appwrap-desktop' }, answers WsCommand.
+//   - WS server :9236 (/page)   : each Tauri window's injected content bundle dials in and
+//                                 executes ContentAction messages (the DOM layer).
+//   - TCP :9237 (line-JSON)     : the Rust shell connects as 'control'; the shim asks it for
+//                                 window ops (createWindow/closeWindow/navigate/screenshot).
+// Run: bun runtime-desktop/bridge-shim/shim.ts
+
+const SERVER_URL = process.env.BRIDGE_SERVER_URL || 'ws://localhost:9230';
+const INSTANCE_ID = process.env.BRIDGE_INSTANCE_ID || 'appwrap-desktop';
+const PAGE_PORT = Number(process.env.APPWRAP_BRIDGE_PAGE_PORT || 9236);
+const RUST_PORT = Number(process.env.APPWRAP_BRIDGE_RUST_PORT || 9237);
+
+const log = (m: string, ...a: unknown[]) => console.log(`[shim] ${m}`, ...a);
+
+// The transport-agnostic browser-automation PRODUCT (tab registry + bod-browser routing +
+// handleCommand) was lifted into the `browser-driver` package inside mcp-desktop-browser (Phase 1b).
+// This file is now a thin TRANSPORT shell: WS client + TCP control channel + page WS, delegating all
+// command handling and page-beacon parsing to the driver below. Consumed as a proper package
+// (`mcp-desktop-browser/browser-driver`, a file: dep in the root package.json → resolves by name,
+// not a fragile cross-repo relative path — the TS analogue of the crate-consumption decision).
+import { createBrowserDriver } from 'mcp-desktop-browser/browser-driver';
+
+// ---------------------------------------------------------------------------
+// Rust control channel (TCP, newline-delimited JSON)
+// ---------------------------------------------------------------------------
+type Pending = { resolve: (v: unknown) => void; reject: (e: Error) => void; timer: ReturnType<typeof setTimeout> };
+let rustSock: { write: (s: string) => void } | null = null;
+const rustPending = new Map<string, Pending>();
+let reqCounter = 0;
+
+function rustRequest(op: string, params: Record<string, unknown> = {}, timeoutMs = 15000): Promise<unknown> {
+  if (!rustSock) return Promise.reject(new Error('Desktop shell not connected to shim (is the app running with APPWRAP_BRIDGE_JS?)'));
+  const id = `r${++reqCounter}`;
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => { rustPending.delete(id); reject(new Error(`rust op ${op} timed out`)); }, timeoutMs);
+    rustPending.set(id, { resolve, reject, timer });
+    rustSock!.write(JSON.stringify({ id, op, ...params }) + '\n');
+  });
+}
+
+// The product layer — driven through our transport (rustRequest) + fed page beacons via onPageMsg.
+const driver = createBrowserDriver({ rustRequest, log });
+
+Bun.listen({
+  hostname: '127.0.0.1',
+  port: RUST_PORT,
+  socket: {
+    open(socket) {
+      log('rust control connected');
+      rustSock = { write: (s) => socket.write(s) };
+      (socket as unknown as { __buf: string }).__buf = '';
+    },
+    data(socket, data) {
+      const s = socket as unknown as { __buf: string };
+      s.__buf += data.toString();
+      let idx: number;
+      while ((idx = s.__buf.indexOf('\n')) >= 0) {
+        const line = s.__buf.slice(0, idx).trim();
+        s.__buf = s.__buf.slice(idx + 1);
+        if (!line) continue;
+        try {
+          const msg = JSON.parse(line);
+          if (msg.type === 'pageMsg') { driver.onPageMsg(String(msg.payload)); continue; }
+          const p = rustPending.get(msg.id);
+          if (p) {
+            rustPending.delete(msg.id);
+            clearTimeout(p.timer);
+            if (msg.error) p.reject(new Error(String(msg.error)));
+            else p.resolve(msg.result);
+          }
+        } catch (e) { log('bad rust line:', line.slice(0, 200), (e as Error).message); }
+      }
+    },
+    close() { log('rust control disconnected'); rustSock = null; },
+    error(_s, e) { log('rust control error:', e.message); },
+  },
+});
+
+// Debug HTTP endpoint (curl a raw rust op / read page beacons)
+Bun.serve({
+  hostname: '127.0.0.1',
+  port: PAGE_PORT,
+  async fetch(req) {
+    const path = new URL(req.url).pathname;
+    if (path === '/log' && req.method === 'POST') { log('page:', await req.text()); return new Response('ok'); }
+    if (path === '/rust' && req.method === 'POST') {
+      const body = await req.json() as Record<string, unknown>;
+      try { return Response.json({ result: await rustRequest(String(body.op), body) }); }
+      catch (e) { return Response.json({ error: (e as Error).message }); }
+    }
+    return new Response('bridge-shim debug endpoint', { status: 200 });
+  },
+});
+
+// ---------------------------------------------------------------------------
+// Bridge server WS client (the extension background's ws.ts analogue)
+// ---------------------------------------------------------------------------
+let serverWs: WebSocket | null = null;
+function connectServer() {
+  serverWs = new WebSocket(SERVER_URL);
+  serverWs.onopen = () => {
+    log(`connected to bridge server ${SERVER_URL} as ${INSTANCE_ID}`);
+    serverWs!.send(JSON.stringify({ type: 'hello', userAgent: `appwrap-desktop-shell (Tauri/WKWebView; ${process.platform})`, instanceId: INSTANCE_ID, buildHash: 'appwrap-desktop-spike' }));
+    serverWs!.send(JSON.stringify({ type: 'ping', t: Date.now() }));
+  };
+  serverWs.onmessage = async (ev) => {
+    let msg: { id: string; cmd: string; params?: Record<string, unknown>; type?: string } | undefined;
+    try {
+      const parsed = JSON.parse(String(ev.data));
+      if (parsed.type === 'pong' || parsed.type === 'reload' || parsed.type === 'recording_saved') return;
+      msg = parsed;
+      const result = await driver.handleCommand(msg!);
+      log(`cmd=${msg!.cmd} ok`);
+      serverWs!.send(JSON.stringify({ id: msg!.id, result }));
+    } catch (e) {
+      log(`cmd=${msg?.cmd} error: ${(e as Error).message}`);
+      try { serverWs!.send(JSON.stringify({ id: msg?.id, error: (e as Error).message })); } catch { /* ignore */ }
+    }
+  };
+  serverWs.onclose = () => { log('server disconnected, retrying in 3s'); setTimeout(connectServer, 3000); };
+  serverWs.onerror = () => { /* onclose follows */ };
+}
+connectServer();
+setInterval(() => {
+  if (serverWs?.readyState === WebSocket.OPEN) serverWs.send(JSON.stringify({ type: 'ping', t: Date.now() }));
+}, 15000);
+
+log(`page WS :${PAGE_PORT}  rust control :${RUST_PORT}`);

package/runtime-desktop/crates/webview-control/Cargo.lock

@@ -0,0 +1,330 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "bitflags"
+version = "2.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8"
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2",
+]
+
+[[package]]
+name = "dispatch2"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
+dependencies = [
+ "bitflags",
+ "objc2",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "libc"
+version = "0.2.186"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "objc2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a12a8ed07aefc768292f076dc3ac8c48f3781c8f2d5851dd3d98950e8c5a89f"
+dependencies = [
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
+dependencies = [
+ "bitflags",
+ "block2",
+ "libc",
+ "objc2",
+ "objc2-cloud-kit",
+ "objc2-core-data",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-core-image",
+ "objc2-core-text",
+ "objc2-core-video",
+ "objc2-foundation",
+ "objc2-quartz-core",
+]
+
+[[package]]
+name = "objc2-cloud-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73ad74d880bb43877038da939b7427bba67e9dd42004a18b809ba7d87cee241c"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b402a653efbb5e82ce4df10683b6b28027616a2715e90009947d50b8dd298fa"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags",
+ "dispatch2",
+ "objc2",
+]
+
+[[package]]
+name = "objc2-core-graphics"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
+dependencies = [
+ "bitflags",
+ "dispatch2",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-core-image"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5d563b38d2b97209f8e861173de434bd0214cf020e3423a52624cd1d989f006"
+dependencies = [
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-text"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cde0dfb48d25d2b4862161a4d5fcc0e3c24367869ad306b0c9ec0073bfed92d"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+]
+
+[[package]]
+name = "objc2-core-video"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d425caf1df73233f29fd8a5c3e5edbc30d2d4307870f802d18f00d83dc5141a6"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "objc2-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
+dependencies = [
+ "bitflags",
+ "block2",
+ "libc",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-io-surface"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-javascript-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a1e6550c4caed348956ce3370c9ffeca70bb1dbed4fa96112e7c6170e074586"
+dependencies = [
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-security"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe137109bd1e8b5a99390f77a7d8b2961dafc1a1c5db8f2e60329ad6d895a"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-web-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2e5aaab980c433cf470df9d7af96a7b46a9d892d521a2cbbb2f8a4c16751e7f"
+dependencies = [
+ "bitflags",
+ "block2",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "objc2-javascript-core",
+ "objc2-security",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dfbc457d0c7a0759a614551b11a6409e5951f6c7537be1f1b7682b9ae9230368"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.150"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8014e44b4736ed0538adeecded0fce2a272f22dc9578a7eb6b2d9993c74cfb9"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.118"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b9ae57f904213ebb649ce6895b8a66c66f0203b9319718f69a5612a065b1422"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "webview-control"
+version = "0.1.0"
+dependencies = [
+ "block2",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "objc2-web-kit",
+ "serde_json",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"

package/runtime-desktop/crates/webview-control/Cargo.toml

@@ -0,0 +1,28 @@
+# webview-control — appwrap's generalized, automation-agnostic native webview primitive.
+# Carved out of src-tauri/src/bridge_mac.rs (Phase 1). Owns per-profile persistent+isolated
+# WKWebsiteDataStore windows, CSP-immune eval, snapshot, the bridgeShim WKScriptMessageHandler,
+# and the SSO-popup delegate (popup module). It emits RAW script-message payloads + RAW eval
+# results via callbacks — it holds NO bod-browser protocol / transport knowledge (that stays in
+# the control-channel adapter, bridge_mac.rs).
+#
+# objc2* versions MUST match src-tauri/Cargo.toml exactly — the same WKWebView pointer crosses the
+# crate boundary (pw.inner() as *mut WKWebView), so a version mismatch would make that cast UB.
+[package]
+name = "webview-control"
+version = "0.1.0"
+edition = "2021"
+
+[lib]
+# macOS-only today; a WebKitGtkBackend is a future slot behind the same seam (see ARCHITECTURE.md).
+name = "webview_control"
+path = "src/lib.rs"
+
+[dependencies]
+
+[target.'cfg(target_os = "macos")'.dependencies]
+serde_json = "1"
+objc2 = "0.6"
+objc2-foundation = "0.3"
+objc2-app-kit = "0.3"
+objc2-web-kit = "0.3"
+block2 = "0.6"