@livx.cc/appwrap 0.46.1 → 0.46.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livx.cc/appwrap",
-  "version": "0.46.1",
+  "version": "0.46.2",
   "description": "Wrap any PWA into a native app with native capabilities (appwrap runtime + @livx.cc/native-kit).",
   "license": "MIT",
   "author": "Elya Livshitz",

package/runtime/App_Resources/Android/src/main/AndroidManifest.xml

@@ -53,6 +53,7 @@
 			<category android:name="android.intent.category.DEFAULT" />
 			<category android:name="android.intent.category.BROWSABLE" />
 			<data android:scheme="appwrap" />
+			<!-- appwrap:oauth-redirect-schemes --><!-- /appwrap:oauth-redirect-schemes -->
 		</intent-filter>
 	</activity>
 		<activity android:name="com.tns.ErrorReportActivity"/>

package/runtime-desktop/bridge-shim/shim.ts

@@ -16,27 +16,13 @@ const RUST_PORT = Number(process.env.APPWRAP_BRIDGE_RUST_PORT || 9237);
 
 const log = (m: string, ...a: unknown[]) => console.log(`[shim] ${m}`, ...a);
 
-// ---------------------------------------------------------------------------
-// Tab registry: Tauri window label <-> numeric tabId (chrome.tabs.Tab-ish shape)
-// ---------------------------------------------------------------------------
-interface TabEntry { tabId: number; label: string; url: string; title: string; registered: boolean; profileId?: string }
-const tabs = new Map<string, TabEntry>(); // by label
-let tabCounter = 0;
-let activeLabel: string | null = null;
-
-function tabShape(t: TabEntry, active = t.label === activeLabel) {
-  return { id: t.tabId, url: t.url, title: t.title, active, windowId: 1, status: t.registered ? 'complete' : 'loading', label: t.label, profileId: t.profileId };
-}
-function byTabId(tabId?: number): TabEntry {
-  if (tabId != null) {
-    const t = [...tabs.values()].find(t => t.tabId === Number(tabId));
-    if (!t) throw new Error(`No such tab: ${tabId}`);
-    return t;
-  }
-  const t = (activeLabel && tabs.get(activeLabel)) || [...tabs.values()].pop();
-  if (!t) throw new Error('No windows open (use newTab first)');
-  return t;
-}
+// The transport-agnostic browser-automation PRODUCT (tab registry + bod-browser routing +
+// handleCommand) was lifted into the `browser-driver` package inside mcp-desktop-browser (Phase 1b).
+// This file is now a thin TRANSPORT shell: WS client + TCP control channel + page WS, delegating all
+// command handling and page-beacon parsing to the driver below. Consumed as a proper package
+// (`mcp-desktop-browser/browser-driver`, a file: dep in the root package.json → resolves by name,
+// not a fragile cross-repo relative path — the TS analogue of the crate-consumption decision).
+import { createBrowserDriver } from 'mcp-desktop-browser/browser-driver';
 
 // ---------------------------------------------------------------------------
 // Rust control channel (TCP, newline-delimited JSON)
@@ -56,6 +42,9 @@ function rustRequest(op: string, params: Record<string, unknown> = {}, timeoutMs
   });
 }
 
+// The product layer — driven through our transport (rustRequest) + fed page beacons via onPageMsg.
+const driver = createBrowserDriver({ rustRequest, log });
+
 Bun.listen({
   hostname: '127.0.0.1',
   port: RUST_PORT,
@@ -75,7 +64,7 @@ Bun.listen({
         if (!line) continue;
         try {
           const msg = JSON.parse(line);
-          if (msg.type === 'pageMsg') { onPageMsg(String(msg.payload)); continue; }
+          if (msg.type === 'pageMsg') { driver.onPageMsg(String(msg.payload)); continue; }
           const p = rustPending.get(msg.id);
           if (p) {
             rustPending.delete(msg.id);
@@ -91,34 +80,6 @@ Bun.listen({
   },
 });
 
-// ---------------------------------------------------------------------------
-// Page messages (via the shell's WKScriptMessageHandler -> pageMsg lines) and
-// command dispatch (via evalJs -> window.__bridgeDispatch)
-// ---------------------------------------------------------------------------
-const pagePending = new Map<string, Pending>();
-
-function onPageMsg(payload: string) {
-  let msg: Record<string, unknown>;
-  try { msg = JSON.parse(payload); } catch { log('bad pageMsg:', payload.slice(0, 200)); return; }
-  const label = String(msg.label || '');
-  if (msg.type === 'register') {
-    let t = tabs.get(label);
-    if (!t) { t = { tabId: ++tabCounter, label, url: '', title: '', registered: false }; tabs.set(label, t); }
-    t.registered = true;
-    t.url = String(msg.url || t.url);
-    t.title = String(msg.title || t.title);
-    log(`page registered: ${label} tabId=${t.tabId} ${t.url.slice(0, 80)}`);
-    return;
-  }
-  const p = pagePending.get(String(msg.id));
-  if (p) {
-    pagePending.delete(String(msg.id));
-    clearTimeout(p.timer);
-    if (msg.error) p.reject(new Error(String(msg.error)));
-    else p.resolve(msg.result);
-  }
-}
-
 // Debug HTTP endpoint (curl a raw rust op / read page beacons)
 Bun.serve({
   hostname: '127.0.0.1',
@@ -135,152 +96,6 @@ Bun.serve({
   },
 });
 
-function pageExec(t: TabEntry, action: Record<string, unknown>, timeoutMs = 30000): Promise<unknown> {
-  const id = `p${++reqCounter}`;
-  const dispatch = `window.__bridgeDispatch && window.__bridgeDispatch(${JSON.stringify({ id, ...action })})`;
-  return new Promise((resolve, reject) => {
-    const timer = setTimeout(() => { pagePending.delete(id); reject(new Error(`exec ${action.action} timed out on tab ${t.tabId} (page not bridged?)`)); }, timeoutMs);
-    pagePending.set(id, { resolve, reject, timer });
-    rustRequest('evalJs', { label: t.label, js: dispatch }).catch(e => {
-      if (pagePending.delete(id)) { clearTimeout(timer); reject(e as Error); }
-    });
-  });
-}
-
-/** Wait until the tab's page socket is (re)connected — used after newTab/navigate. */
-async function waitForPage(label: string, timeoutMs = 15000): Promise<TabEntry> {
-  const start = Date.now();
-  for (;;) {
-    const t = tabs.get(label);
-    if (t?.registered) return t;
-    if (Date.now() - start > timeoutMs) throw new Error(`page for ${label} did not connect within ${timeoutMs}ms`);
-    await new Promise(r => setTimeout(r, 100));
-  }
-}
-
-// ---------------------------------------------------------------------------
-// Command handling (the extension-background analogue)
-// ---------------------------------------------------------------------------
-async function handleCommand(msg: { id: string; cmd: string; params?: Record<string, unknown> }): Promise<unknown> {
-  const params = (msg.params || {}) as Record<string, unknown> & { tabId?: number; url?: string };
-  switch (msg.cmd) {
-    case 'ping': return { pong: true };
-    case 'getTabs': return [...tabs.values()].map(t => tabShape(t));
-    case 'getActiveTab': return tabShape(byTabId(undefined));
-    case 'newTab': {
-      const url = params.url || 'https://example.com';
-      // Optional profileId → the shell creates a manual window bound to that profile's persistent,
-      // isolated WKWebsiteDataStore (see bridge_mac.rs). Absent → a plain tauri window.
-      const profileId = (params as { profileId?: string }).profileId;
-      // Unique across shim restarts — the app may still hold windows from a previous shim run.
-      const label = `bridge-${Date.now().toString(36)}-${++tabCounter}`;
-      const t: TabEntry = { tabId: tabCounter, label, url: String(url), title: '', registered: false, profileId };
-      tabs.set(label, t);
-      activeLabel = label;
-      await rustRequest('createWindow', { label, url, ...(profileId ? { profileId } : {}) });
-      await waitForPage(label).catch(e => log(`newTab: ${e.message}`)); // tab exists even if slow to load
-      return tabShape(t);
-    }
-    case 'closeTab': {
-      const t = byTabId(params.tabId);
-      await rustRequest('closeWindow', { label: t.label });
-      tabs.delete(t.label);
-      if (activeLabel === t.label) activeLabel = [...tabs.keys()].pop() ?? null;
-      return { success: true };
-    }
-    case 'navigate': {
-      const t = byTabId(params.tabId);
-      t.registered = false; // old document is going away
-      t.url = String(params.url);
-      activeLabel = t.label;
-      await rustRequest('navigate', { label: t.label, url: params.url });
-      await waitForPage(t.label).catch(e => log(`navigate: ${e.message}`));
-      return tabShape(t);
-    }
-    case 'screenshot': {
-      const t = byTabId(params.tabId);
-      const r = await rustRequest('screenshot', { label: t.label }, 20000) as { png: string };
-      return { dataUrl: `data:image/png;base64,${r.png}` };
-    }
-    case 'exec': {
-      const { tabId, frameId: _f, ...action } = params as Record<string, unknown> & { tabId?: number };
-      const t = byTabId(tabId);
-      const timeout = action.action === 'waitFor' ? Number(action.timeout || 5000) + 5000 : 30000;
-      return pageExec(t, action, timeout);
-    }
-    case 'setInput': {
-      // Extension does this via chrome.scripting in MAIN world; our bundle already runs in the
-      // page world, so route through the content eval with a native-setter script.
-      const t = byTabId(params.tabId);
-      const script = `(() => { const el = document.querySelector(${JSON.stringify(params.selector)});
-        if (!el) return { error: 'not found: ' + ${JSON.stringify(params.selector)} };
-        const proto = el instanceof HTMLTextAreaElement ? HTMLTextAreaElement.prototype : HTMLInputElement.prototype;
-        const setter = Object.getOwnPropertyDescriptor(proto, 'value')?.set;
-        if (setter) setter.call(el, ${JSON.stringify(params.value)}); else el.value = ${JSON.stringify(params.value)};
-        el.dispatchEvent(new Event('input', { bubbles: true }));
-        el.dispatchEvent(new Event('change', { bubbles: true }));
-        return { ok: true, value: el.value }; })()`;
-      const r = await rustRequest('evalAsync', { label: t.label, js: `return JSON.stringify(${script});` }) as { json: string };
-      const inner = JSON.parse(r.json || 'null') as { error?: string; ok?: boolean } | null;
-      if (inner?.error) throw new Error(inner.error);
-      return inner;
-    }
-    case 'cdpEval': {
-      // CSP-immune eval — WKWebView callAsyncJavaScript (native compilation, awaits promises).
-      // The bridge server falls back to this when a page's CSP blocks the content-layer eval().
-      const t = byTabId(params.tabId);
-      const expression = String(params.expression || '');
-      const body = `const __r = await (${expression}); return JSON.stringify(__r === undefined ? null : __r);`;
-      const timeoutMs = Number((params as { timeoutMs?: number }).timeoutMs || 30000);
-      try {
-        const r = await rustRequest('evalAsync', { label: t.label, js: body }, timeoutMs) as { json: string };
-        return { result: JSON.parse(r.json || 'null') };
-      } catch (e) {
-        return { result: null, error: (e as Error).message };
-      }
-    }
-    case 'cdpInsertText': {
-      // Controlled text insertion into a contenteditable / input WITHOUT ever submitting.
-      // The extension's real path is CDP Input.insertText (we have no CDP); this replicates it
-      // via focus + beforeinput/insertText/input events. It deliberately dispatches NO Enter/
-      // keydown and never clicks a submit control — a spike delegation auto-submitted a comment
-      // because the earlier execCommand workaround let a stray Enter through; this closes that.
-      const t = byTabId(params.tabId);
-      const selector = (params as { selector?: string }).selector;
-      const text = String((params as { text?: string }).text ?? '');
-      const clear = !!(params as { clear?: boolean }).clear;
-      const body = `
-        const el = ${selector ? `document.querySelector(${JSON.stringify(selector)})` : 'document.activeElement'};
-        if (!el) return JSON.stringify({ error: 'insert target not found' });
-        el.focus();
-        const editable = el.isContentEditable;
-        if (${clear}) {
-          if (editable) { const r = document.createRange(); r.selectNodeContents(el); const s = getSelection(); s.removeAllRanges(); s.addRange(r); document.execCommand('delete'); }
-          else { const proto = el instanceof HTMLTextAreaElement ? HTMLTextAreaElement.prototype : HTMLInputElement.prototype; const set = Object.getOwnPropertyDescriptor(proto,'value')?.set; set ? set.call(el,'') : (el.value=''); }
-        }
-        el.dispatchEvent(new InputEvent('beforeinput', { bubbles: true, cancelable: true, inputType: 'insertText', data: ${JSON.stringify(text)} }));
-        if (editable) {
-          if (!document.execCommand('insertText', false, ${JSON.stringify(text)})) el.textContent += ${JSON.stringify(text)};
-        } else {
-          const proto = el instanceof HTMLTextAreaElement ? HTMLTextAreaElement.prototype : HTMLInputElement.prototype;
-          const set = Object.getOwnPropertyDescriptor(proto,'value')?.set; const nv = (el.value||'') + ${JSON.stringify(text)};
-          set ? set.call(el, nv) : (el.value = nv);
-        }
-        el.dispatchEvent(new InputEvent('input', { bubbles: true, inputType: 'insertText', data: ${JSON.stringify(text)} }));
-        return JSON.stringify({ ok: true, value: editable ? el.innerText : el.value, submitted: false });`;
-      const r = await rustRequest('evalAsync', { label: t.label, js: body }) as { json: string };
-      const out = JSON.parse(r.json || 'null') as { error?: string };
-      if (out?.error) throw new Error(out.error);
-      return out;
-    }
-    case 'getGroup': return { groupId: null };
-    case 'closeGroup': return { success: true };
-    case 'listExtensions': return [];
-    default:
-      throw new Error(`unsupported on appwrap-desktop: ${msg.cmd}`);
-  }
-}
-
 // ---------------------------------------------------------------------------
 // Bridge server WS client (the extension background's ws.ts analogue)
 // ---------------------------------------------------------------------------
@@ -298,7 +113,7 @@ function connectServer() {
       const parsed = JSON.parse(String(ev.data));
       if (parsed.type === 'pong' || parsed.type === 'reload' || parsed.type === 'recording_saved') return;
       msg = parsed;
-      const result = await handleCommand(msg!);
+      const result = await driver.handleCommand(msg!);
       log(`cmd=${msg!.cmd} ok`);
       serverWs!.send(JSON.stringify({ id: msg!.id, result }));
     } catch (e) {

package/runtime-desktop/crates/webview-control/Cargo.lock

@@ -0,0 +1,330 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "bitflags"
+version = "2.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8"
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2",
+]
+
+[[package]]
+name = "dispatch2"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
+dependencies = [
+ "bitflags",
+ "objc2",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "libc"
+version = "0.2.186"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "objc2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a12a8ed07aefc768292f076dc3ac8c48f3781c8f2d5851dd3d98950e8c5a89f"
+dependencies = [
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
+dependencies = [
+ "bitflags",
+ "block2",
+ "libc",
+ "objc2",
+ "objc2-cloud-kit",
+ "objc2-core-data",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-core-image",
+ "objc2-core-text",
+ "objc2-core-video",
+ "objc2-foundation",
+ "objc2-quartz-core",
+]
+
+[[package]]
+name = "objc2-cloud-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73ad74d880bb43877038da939b7427bba67e9dd42004a18b809ba7d87cee241c"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b402a653efbb5e82ce4df10683b6b28027616a2715e90009947d50b8dd298fa"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags",
+ "dispatch2",
+ "objc2",
+]
+
+[[package]]
+name = "objc2-core-graphics"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
+dependencies = [
+ "bitflags",
+ "dispatch2",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-core-image"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5d563b38d2b97209f8e861173de434bd0214cf020e3423a52624cd1d989f006"
+dependencies = [
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-text"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cde0dfb48d25d2b4862161a4d5fcc0e3c24367869ad306b0c9ec0073bfed92d"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+]
+
+[[package]]
+name = "objc2-core-video"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d425caf1df73233f29fd8a5c3e5edbc30d2d4307870f802d18f00d83dc5141a6"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "objc2-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
+dependencies = [
+ "bitflags",
+ "block2",
+ "libc",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-io-surface"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-javascript-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a1e6550c4caed348956ce3370c9ffeca70bb1dbed4fa96112e7c6170e074586"
+dependencies = [
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-security"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe137109bd1e8b5a99390f77a7d8b2961dafc1a1c5db8f2e60329ad6d895a"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-web-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2e5aaab980c433cf470df9d7af96a7b46a9d892d521a2cbbb2f8a4c16751e7f"
+dependencies = [
+ "bitflags",
+ "block2",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "objc2-javascript-core",
+ "objc2-security",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dfbc457d0c7a0759a614551b11a6409e5951f6c7537be1f1b7682b9ae9230368"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.150"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8014e44b4736ed0538adeecded0fce2a272f22dc9578a7eb6b2d9993c74cfb9"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.118"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b9ae57f904213ebb649ce6895b8a66c66f0203b9319718f69a5612a065b1422"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "webview-control"
+version = "0.1.0"
+dependencies = [
+ "block2",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "objc2-web-kit",
+ "serde_json",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"

package/runtime-desktop/crates/webview-control/Cargo.toml

@@ -0,0 +1,28 @@
+# webview-control — appwrap's generalized, automation-agnostic native webview primitive.
+# Carved out of src-tauri/src/bridge_mac.rs (Phase 1). Owns per-profile persistent+isolated
+# WKWebsiteDataStore windows, CSP-immune eval, snapshot, the bridgeShim WKScriptMessageHandler,
+# and the SSO-popup delegate (popup module). It emits RAW script-message payloads + RAW eval
+# results via callbacks — it holds NO bod-browser protocol / transport knowledge (that stays in
+# the control-channel adapter, bridge_mac.rs).
+#
+# objc2* versions MUST match src-tauri/Cargo.toml exactly — the same WKWebView pointer crosses the
+# crate boundary (pw.inner() as *mut WKWebView), so a version mismatch would make that cast UB.
+[package]
+name = "webview-control"
+version = "0.1.0"
+edition = "2021"
+
+[lib]
+# macOS-only today; a WebKitGtkBackend is a future slot behind the same seam (see ARCHITECTURE.md).
+name = "webview_control"
+path = "src/lib.rs"
+
+[dependencies]
+
+[target.'cfg(target_os = "macos")'.dependencies]
+serde_json = "1"
+objc2 = "0.6"
+objc2-foundation = "0.3"
+objc2-app-kit = "0.3"
+objc2-web-kit = "0.3"
+block2 = "0.6"