@metamask/device-mcp 0.2.0 → 0.3.1

package/dist/tools/index.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerSelectDeviceTool = exports.registerListDevicesTool = exports.registerGetElementTextTool = exports.registerGenerateLocatorsTool = exports.registerScreenRecordingTool = exports.registerClipboardTool = exports.registerContextTool = exports.registerWindowSizeTool = exports.registerAlertTextTool = exports.registerScrollToElementTool = exports.registerLogsTool = exports.registerDismissAlertTool = exports.registerDismissKeyboardTool = exports.registerPressButtonTool = exports.registerCloseAppTool = exports.registerOpenAppTool = exports.registerDeviceInfoTool = exports.registerAppStateTool = exports.registerWaitForTool = exports.registerLongPressTool = exports.registerSwipeTool = exports.registerTypeTool = exports.registerTapCoordinatesTool = exports.registerTapElementTool = exports.registerScreenshotTool = exports.registerSnapshotTool = void 0;
+exports.registerHermesTargetsTool = exports.registerHermesCdpTool = exports.registerSelectDeviceTool = exports.registerListDevicesTool = exports.registerGetElementTextTool = exports.registerGenerateLocatorsTool = exports.registerScreenRecordingTool = exports.registerClipboardTool = exports.registerContextTool = exports.registerWindowSizeTool = exports.registerAlertTextTool = exports.registerScrollToElementTool = exports.registerLogsTool = exports.registerDismissAlertTool = exports.registerDismissKeyboardTool = exports.registerPressButtonTool = exports.registerCloseAppTool = exports.registerOpenAppTool = exports.registerDeviceInfoTool = exports.registerAppStateTool = exports.registerWaitForTool = exports.registerLongPressTool = exports.registerSwipeTool = exports.registerTypeTool = exports.registerTapCoordinatesTool = exports.registerTapElementTool = exports.registerScreenshotTool = exports.registerSnapshotTool = void 0;
 var snapshot_js_1 = require("./snapshot.cjs");
 Object.defineProperty(exports, "registerSnapshotTool", { enumerable: true, get: function () { return snapshot_js_1.registerSnapshotTool; } });
 var screenshot_js_1 = require("./screenshot.cjs");
@@ -53,4 +53,8 @@ var list_devices_js_1 = require("./list-devices.cjs");
 Object.defineProperty(exports, "registerListDevicesTool", { enumerable: true, get: function () { return list_devices_js_1.registerListDevicesTool; } });
 var select_device_js_1 = require("./select-device.cjs");
 Object.defineProperty(exports, "registerSelectDeviceTool", { enumerable: true, get: function () { return select_device_js_1.registerSelectDeviceTool; } });
+var hermes_cdp_js_1 = require("./hermes-cdp.cjs");
+Object.defineProperty(exports, "registerHermesCdpTool", { enumerable: true, get: function () { return hermes_cdp_js_1.registerHermesCdpTool; } });
+var hermes_targets_js_1 = require("./hermes-targets.cjs");
+Object.defineProperty(exports, "registerHermesTargetsTool", { enumerable: true, get: function () { return hermes_targets_js_1.registerHermesTargetsTool; } });
 //# sourceMappingURL=index.cjs.map

package/dist/tools/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":";;;AAAA,8CAAqD;AAA5C,mHAAA,oBAAoB,OAAA;AAC7B,kDAAyD;AAAhD,uHAAA,sBAAsB,OAAA;AAC/B,oDAA0D;AAAjD,wHAAA,sBAAsB,OAAA;AAC/B,4DAAkE;AAAzD,gIAAA,0BAA0B,OAAA;AACnC,gDAAkD;AAAzC,gHAAA,gBAAgB,OAAA;AACzB,wCAA+C;AAAtC,6GAAA,iBAAiB,OAAA;AAC1B,kDAAwD;AAA/C,sHAAA,qBAAqB,OAAA;AAC9B,8CAAoD;AAA3C,kHAAA,mBAAmB,OAAA;AAC5B,gDAAsD;AAA7C,oHAAA,oBAAoB,OAAA;AAC7B,oDAA0D;AAAjD,wHAAA,sBAAsB,OAAA;AAC/B,8CAAoD;AAA3C,kHAAA,mBAAmB,OAAA;AAC5B,gDAAsD;AAA7C,oHAAA,oBAAoB,OAAA;AAC7B,sDAA4D;AAAnD,0HAAA,uBAAuB,OAAA;AAChC,8DAAoE;AAA3D,kIAAA,2BAA2B,OAAA;AACpC,wDAA8D;AAArD,4HAAA,wBAAwB,OAAA;AACjC,sCAA6C;AAApC,2GAAA,gBAAgB,OAAA;AACzB,gEAAqE;AAA5D,mIAAA,2BAA2B,OAAA;AACpC,kDAAwD;AAA/C,sHAAA,qBAAqB,OAAA;AAC9B,oDAA0D;AAAjD,wHAAA,sBAAsB,OAAA;AAC/B,4CAAmD;AAA1C,iHAAA,mBAAmB,OAAA;AAC5B,gDAAuD;AAA9C,qHAAA,qBAAqB,OAAA;AAC9B,8DAAoE;AAA3D,kIAAA,2BAA2B,OAAA;AACpC,gEAAsE;AAA7D,oIAAA,4BAA4B,OAAA;AACrC,8DAAmE;AAA1D,iIAAA,0BAA0B,OAAA;AACnC,sDAA4D;AAAnD,0HAAA,uBAAuB,OAAA;AAChC,wDAA8D;AAArD,4HAAA,wBAAwB,OAAA","sourcesContent":["export { registerSnapshotTool } from './snapshot.js';\nexport { registerScreenshotTool } from './screenshot.js';\nexport { registerTapElementTool } from './tap-element.js';\nexport { registerTapCoordinatesTool } from './tap-coordinates.js';\nexport { registerTypeTool } from './type-text.js';\nexport { registerSwipeTool } from './swipe.js';\nexport { registerLongPressTool } from './long-press.js';\nexport { registerWaitForTool } from './wait-for.js';\nexport { registerAppStateTool } from './app-state.js';\nexport { registerDeviceInfoTool } from './device-info.js';\nexport { registerOpenAppTool } from './open-app.js';\nexport { registerCloseAppTool } from './close-app.js';\nexport { registerPressButtonTool } from './press-button.js';\nexport { registerDismissKeyboardTool } from './dismiss-keyboard.js';\nexport { registerDismissAlertTool } from './dismiss-alert.js';\nexport { registerLogsTool } from './logs.js';\nexport { registerScrollToElementTool } from './scroll-to-element.js';\nexport { registerAlertTextTool } from './alert-text.js';\nexport { registerWindowSizeTool } from './window-size.js';\nexport { registerContextTool } from './context.js';\nexport { registerClipboardTool } from './clipboard.js';\nexport { registerScreenRecordingTool } from './screen-recording.js';\nexport { registerGenerateLocatorsTool } from './generate-locators.js';\nexport { registerGetElementTextTool } from './get-element-text.js';\nexport { registerListDevicesTool } from './list-devices.js';\nexport { registerSelectDeviceTool } from './select-device.js';\n"]}
+{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":";;;AAAA,8CAAqD;AAA5C,mHAAA,oBAAoB,OAAA;AAC7B,kDAAyD;AAAhD,uHAAA,sBAAsB,OAAA;AAC/B,oDAA0D;AAAjD,wHAAA,sBAAsB,OAAA;AAC/B,4DAAkE;AAAzD,gIAAA,0BAA0B,OAAA;AACnC,gDAAkD;AAAzC,gHAAA,gBAAgB,OAAA;AACzB,wCAA+C;AAAtC,6GAAA,iBAAiB,OAAA;AAC1B,kDAAwD;AAA/C,sHAAA,qBAAqB,OAAA;AAC9B,8CAAoD;AAA3C,kHAAA,mBAAmB,OAAA;AAC5B,gDAAsD;AAA7C,oHAAA,oBAAoB,OAAA;AAC7B,oDAA0D;AAAjD,wHAAA,sBAAsB,OAAA;AAC/B,8CAAoD;AAA3C,kHAAA,mBAAmB,OAAA;AAC5B,gDAAsD;AAA7C,oHAAA,oBAAoB,OAAA;AAC7B,sDAA4D;AAAnD,0HAAA,uBAAuB,OAAA;AAChC,8DAAoE;AAA3D,kIAAA,2BAA2B,OAAA;AACpC,wDAA8D;AAArD,4HAAA,wBAAwB,OAAA;AACjC,sCAA6C;AAApC,2GAAA,gBAAgB,OAAA;AACzB,gEAAqE;AAA5D,mIAAA,2BAA2B,OAAA;AACpC,kDAAwD;AAA/C,sHAAA,qBAAqB,OAAA;AAC9B,oDAA0D;AAAjD,wHAAA,sBAAsB,OAAA;AAC/B,4CAAmD;AAA1C,iHAAA,mBAAmB,OAAA;AAC5B,gDAAuD;AAA9C,qHAAA,qBAAqB,OAAA;AAC9B,8DAAoE;AAA3D,kIAAA,2BAA2B,OAAA;AACpC,gEAAsE;AAA7D,oIAAA,4BAA4B,OAAA;AACrC,8DAAmE;AAA1D,iIAAA,0BAA0B,OAAA;AACnC,sDAA4D;AAAnD,0HAAA,uBAAuB,OAAA;AAChC,wDAA8D;AAArD,4HAAA,wBAAwB,OAAA;AACjC,kDAAwD;AAA/C,sHAAA,qBAAqB,OAAA;AAC9B,0DAAgE;AAAvD,8HAAA,yBAAyB,OAAA","sourcesContent":["export { registerSnapshotTool } from './snapshot.js';\nexport { registerScreenshotTool } from './screenshot.js';\nexport { registerTapElementTool } from './tap-element.js';\nexport { registerTapCoordinatesTool } from './tap-coordinates.js';\nexport { registerTypeTool } from './type-text.js';\nexport { registerSwipeTool } from './swipe.js';\nexport { registerLongPressTool } from './long-press.js';\nexport { registerWaitForTool } from './wait-for.js';\nexport { registerAppStateTool } from './app-state.js';\nexport { registerDeviceInfoTool } from './device-info.js';\nexport { registerOpenAppTool } from './open-app.js';\nexport { registerCloseAppTool } from './close-app.js';\nexport { registerPressButtonTool } from './press-button.js';\nexport { registerDismissKeyboardTool } from './dismiss-keyboard.js';\nexport { registerDismissAlertTool } from './dismiss-alert.js';\nexport { registerLogsTool } from './logs.js';\nexport { registerScrollToElementTool } from './scroll-to-element.js';\nexport { registerAlertTextTool } from './alert-text.js';\nexport { registerWindowSizeTool } from './window-size.js';\nexport { registerContextTool } from './context.js';\nexport { registerClipboardTool } from './clipboard.js';\nexport { registerScreenRecordingTool } from './screen-recording.js';\nexport { registerGenerateLocatorsTool } from './generate-locators.js';\nexport { registerGetElementTextTool } from './get-element-text.js';\nexport { registerListDevicesTool } from './list-devices.js';\nexport { registerSelectDeviceTool } from './select-device.js';\nexport { registerHermesCdpTool } from './hermes-cdp.js';\nexport { registerHermesTargetsTool } from './hermes-targets.js';\n"]}

package/dist/tools/index.d.cts

@@ -24,4 +24,6 @@ export { registerGenerateLocatorsTool } from "./generate-locators.cjs";
 export { registerGetElementTextTool } from "./get-element-text.cjs";
 export { registerListDevicesTool } from "./list-devices.cjs";
 export { registerSelectDeviceTool } from "./select-device.cjs";
+export { registerHermesCdpTool } from "./hermes-cdp.cjs";
+export { registerHermesTargetsTool } from "./hermes-targets.cjs";
 //# sourceMappingURL=index.d.cts.map

package/dist/tools/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAsB;AACrD,OAAO,EAAE,sBAAsB,EAAE,yBAAwB;AACzD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,0BAA0B,EAAE,8BAA6B;AAClE,OAAO,EAAE,gBAAgB,EAAE,wBAAuB;AAClD,OAAO,EAAE,iBAAiB,EAAE,oBAAmB;AAC/C,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,wBAAwB,EAAE,4BAA2B;AAC9D,OAAO,EAAE,gBAAgB,EAAE,mBAAkB;AAC7C,OAAO,EAAE,2BAA2B,EAAE,gCAA+B;AACrE,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,sBAAqB;AACnD,OAAO,EAAE,qBAAqB,EAAE,wBAAuB;AACvD,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,4BAA4B,EAAE,gCAA+B;AACtE,OAAO,EAAE,0BAA0B,EAAE,+BAA8B;AACnE,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,wBAAwB,EAAE,4BAA2B"}
+{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAsB;AACrD,OAAO,EAAE,sBAAsB,EAAE,yBAAwB;AACzD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,0BAA0B,EAAE,8BAA6B;AAClE,OAAO,EAAE,gBAAgB,EAAE,wBAAuB;AAClD,OAAO,EAAE,iBAAiB,EAAE,oBAAmB;AAC/C,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,wBAAwB,EAAE,4BAA2B;AAC9D,OAAO,EAAE,gBAAgB,EAAE,mBAAkB;AAC7C,OAAO,EAAE,2BAA2B,EAAE,gCAA+B;AACrE,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,sBAAqB;AACnD,OAAO,EAAE,qBAAqB,EAAE,wBAAuB;AACvD,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,4BAA4B,EAAE,gCAA+B;AACtE,OAAO,EAAE,0BAA0B,EAAE,+BAA8B;AACnE,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,wBAAwB,EAAE,4BAA2B;AAC9D,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,yBAAyB,EAAE,6BAA4B"}

package/dist/tools/index.d.mts

@@ -24,4 +24,6 @@ export { registerGenerateLocatorsTool } from "./generate-locators.mjs";
 export { registerGetElementTextTool } from "./get-element-text.mjs";
 export { registerListDevicesTool } from "./list-devices.mjs";
 export { registerSelectDeviceTool } from "./select-device.mjs";
+export { registerHermesCdpTool } from "./hermes-cdp.mjs";
+export { registerHermesTargetsTool } from "./hermes-targets.mjs";
 //# sourceMappingURL=index.d.mts.map

package/dist/tools/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAsB;AACrD,OAAO,EAAE,sBAAsB,EAAE,yBAAwB;AACzD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,0BAA0B,EAAE,8BAA6B;AAClE,OAAO,EAAE,gBAAgB,EAAE,wBAAuB;AAClD,OAAO,EAAE,iBAAiB,EAAE,oBAAmB;AAC/C,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,wBAAwB,EAAE,4BAA2B;AAC9D,OAAO,EAAE,gBAAgB,EAAE,mBAAkB;AAC7C,OAAO,EAAE,2BAA2B,EAAE,gCAA+B;AACrE,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,sBAAqB;AACnD,OAAO,EAAE,qBAAqB,EAAE,wBAAuB;AACvD,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,4BAA4B,EAAE,gCAA+B;AACtE,OAAO,EAAE,0BAA0B,EAAE,+BAA8B;AACnE,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,wBAAwB,EAAE,4BAA2B"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAsB;AACrD,OAAO,EAAE,sBAAsB,EAAE,yBAAwB;AACzD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,0BAA0B,EAAE,8BAA6B;AAClE,OAAO,EAAE,gBAAgB,EAAE,wBAAuB;AAClD,OAAO,EAAE,iBAAiB,EAAE,oBAAmB;AAC/C,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,wBAAwB,EAAE,4BAA2B;AAC9D,OAAO,EAAE,gBAAgB,EAAE,mBAAkB;AAC7C,OAAO,EAAE,2BAA2B,EAAE,gCAA+B;AACrE,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,sBAAqB;AACnD,OAAO,EAAE,qBAAqB,EAAE,wBAAuB;AACvD,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,4BAA4B,EAAE,gCAA+B;AACtE,OAAO,EAAE,0BAA0B,EAAE,+BAA8B;AACnE,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,wBAAwB,EAAE,4BAA2B;AAC9D,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,yBAAyB,EAAE,6BAA4B"}

package/dist/tools/index.mjs

@@ -24,4 +24,6 @@ export { registerGenerateLocatorsTool } from "./generate-locators.mjs";
 export { registerGetElementTextTool } from "./get-element-text.mjs";
 export { registerListDevicesTool } from "./list-devices.mjs";
 export { registerSelectDeviceTool } from "./select-device.mjs";
+export { registerHermesCdpTool } from "./hermes-cdp.mjs";
+export { registerHermesTargetsTool } from "./hermes-targets.mjs";
 //# sourceMappingURL=index.mjs.map

package/dist/tools/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAsB;AACrD,OAAO,EAAE,sBAAsB,EAAE,yBAAwB;AACzD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,0BAA0B,EAAE,8BAA6B;AAClE,OAAO,EAAE,gBAAgB,EAAE,wBAAuB;AAClD,OAAO,EAAE,iBAAiB,EAAE,oBAAmB;AAC/C,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,wBAAwB,EAAE,4BAA2B;AAC9D,OAAO,EAAE,gBAAgB,EAAE,mBAAkB;AAC7C,OAAO,EAAE,2BAA2B,EAAE,gCAA+B;AACrE,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,sBAAqB;AACnD,OAAO,EAAE,qBAAqB,EAAE,wBAAuB;AACvD,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,4BAA4B,EAAE,gCAA+B;AACtE,OAAO,EAAE,0BAA0B,EAAE,+BAA8B;AACnE,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,wBAAwB,EAAE,4BAA2B","sourcesContent":["export { registerSnapshotTool } from './snapshot.js';\nexport { registerScreenshotTool } from './screenshot.js';\nexport { registerTapElementTool } from './tap-element.js';\nexport { registerTapCoordinatesTool } from './tap-coordinates.js';\nexport { registerTypeTool } from './type-text.js';\nexport { registerSwipeTool } from './swipe.js';\nexport { registerLongPressTool } from './long-press.js';\nexport { registerWaitForTool } from './wait-for.js';\nexport { registerAppStateTool } from './app-state.js';\nexport { registerDeviceInfoTool } from './device-info.js';\nexport { registerOpenAppTool } from './open-app.js';\nexport { registerCloseAppTool } from './close-app.js';\nexport { registerPressButtonTool } from './press-button.js';\nexport { registerDismissKeyboardTool } from './dismiss-keyboard.js';\nexport { registerDismissAlertTool } from './dismiss-alert.js';\nexport { registerLogsTool } from './logs.js';\nexport { registerScrollToElementTool } from './scroll-to-element.js';\nexport { registerAlertTextTool } from './alert-text.js';\nexport { registerWindowSizeTool } from './window-size.js';\nexport { registerContextTool } from './context.js';\nexport { registerClipboardTool } from './clipboard.js';\nexport { registerScreenRecordingTool } from './screen-recording.js';\nexport { registerGenerateLocatorsTool } from './generate-locators.js';\nexport { registerGetElementTextTool } from './get-element-text.js';\nexport { registerListDevicesTool } from './list-devices.js';\nexport { registerSelectDeviceTool } from './select-device.js';\n"]}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAsB;AACrD,OAAO,EAAE,sBAAsB,EAAE,yBAAwB;AACzD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,0BAA0B,EAAE,8BAA6B;AAClE,OAAO,EAAE,gBAAgB,EAAE,wBAAuB;AAClD,OAAO,EAAE,iBAAiB,EAAE,oBAAmB;AAC/C,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,uBAAsB;AACpD,OAAO,EAAE,oBAAoB,EAAE,wBAAuB;AACtD,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,wBAAwB,EAAE,4BAA2B;AAC9D,OAAO,EAAE,gBAAgB,EAAE,mBAAkB;AAC7C,OAAO,EAAE,2BAA2B,EAAE,gCAA+B;AACrE,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,sBAAsB,EAAE,0BAAyB;AAC1D,OAAO,EAAE,mBAAmB,EAAE,sBAAqB;AACnD,OAAO,EAAE,qBAAqB,EAAE,wBAAuB;AACvD,OAAO,EAAE,2BAA2B,EAAE,+BAA8B;AACpE,OAAO,EAAE,4BAA4B,EAAE,gCAA+B;AACtE,OAAO,EAAE,0BAA0B,EAAE,+BAA8B;AACnE,OAAO,EAAE,uBAAuB,EAAE,2BAA0B;AAC5D,OAAO,EAAE,wBAAwB,EAAE,4BAA2B;AAC9D,OAAO,EAAE,qBAAqB,EAAE,yBAAwB;AACxD,OAAO,EAAE,yBAAyB,EAAE,6BAA4B","sourcesContent":["export { registerSnapshotTool } from './snapshot.js';\nexport { registerScreenshotTool } from './screenshot.js';\nexport { registerTapElementTool } from './tap-element.js';\nexport { registerTapCoordinatesTool } from './tap-coordinates.js';\nexport { registerTypeTool } from './type-text.js';\nexport { registerSwipeTool } from './swipe.js';\nexport { registerLongPressTool } from './long-press.js';\nexport { registerWaitForTool } from './wait-for.js';\nexport { registerAppStateTool } from './app-state.js';\nexport { registerDeviceInfoTool } from './device-info.js';\nexport { registerOpenAppTool } from './open-app.js';\nexport { registerCloseAppTool } from './close-app.js';\nexport { registerPressButtonTool } from './press-button.js';\nexport { registerDismissKeyboardTool } from './dismiss-keyboard.js';\nexport { registerDismissAlertTool } from './dismiss-alert.js';\nexport { registerLogsTool } from './logs.js';\nexport { registerScrollToElementTool } from './scroll-to-element.js';\nexport { registerAlertTextTool } from './alert-text.js';\nexport { registerWindowSizeTool } from './window-size.js';\nexport { registerContextTool } from './context.js';\nexport { registerClipboardTool } from './clipboard.js';\nexport { registerScreenRecordingTool } from './screen-recording.js';\nexport { registerGenerateLocatorsTool } from './generate-locators.js';\nexport { registerGetElementTextTool } from './get-element-text.js';\nexport { registerListDevicesTool } from './list-devices.js';\nexport { registerSelectDeviceTool } from './select-device.js';\nexport { registerHermesCdpTool } from './hermes-cdp.js';\nexport { registerHermesTargetsTool } from './hermes-targets.js';\n"]}

package/dist/tools/screenshot.cjs

@@ -17,14 +17,19 @@ function registerScreenshotTool(server, backend) {
         annotations: { readOnlyHint: true },
     }, async ({ outputPath }) => {
         try {
-            const result = await backend.screenshot(outputPath);
-            return {
-                content: [
+            const result = await backend.screenshot(outputPath, { encode: true });
+            const imageContent = result.data
+                ? [
                     {
                         type: 'image',
                         data: result.data,
                         mimeType: `image/${result.format}`,
                     },
+                ]
+                : [];
+            return {
+                content: [
+                    ...imageContent,
                     {
                         type: 'text',
                         text: result.path

package/dist/tools/screenshot.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"screenshot.cjs","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":";;AAMA,wDA0CC;AA/CD,6BAAwB;AAExB,4CAA0C;AAG1C,SAAgB,sBAAsB,CACpC,MAAiB,EACjB,OAAsB;IAEtB,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,YAAY;QACnB,WAAW,EACT,qDAAqD;YACrD,mEAAmE;QACrE,WAAW,EAAE;YACX,UAAU,EAAE,OAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6CAA6C,CAAC;SAC3D;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,OAAgB;wBACtB,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,QAAQ,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE;qBACnC;oBACD;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;4BACf,CAAC,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE;4BACtC,CAAC,CAAC,qBAAqB;qBAC1B;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { z } from 'zod';\n\nimport { errorResult } from './shared.js';\nimport type { DeviceBackend } from '../backends/types.js';\n\nexport function registerScreenshotTool(\n  server: McpServer,\n  backend: DeviceBackend,\n): void {\n  server.registerTool(\n    'device_screenshot',\n    {\n      title: 'Screenshot',\n      description:\n        'Capture a screenshot of the current device screen. ' +\n        'Returns base64-encoded PNG data. Optionally saves to a file path.',\n      inputSchema: {\n        outputPath: z\n          .string()\n          .optional()\n          .describe('File path to save the screenshot (optional)'),\n      },\n      annotations: { readOnlyHint: true },\n    },\n    async ({ outputPath }) => {\n      try {\n        const result = await backend.screenshot(outputPath);\n        return {\n          content: [\n            {\n              type: 'image' as const,\n              data: result.data,\n              mimeType: `image/${result.format}`,\n            },\n            {\n              type: 'text' as const,\n              text: result.path\n                ? `Screenshot saved to ${result.path}`\n                : 'Screenshot captured',\n            },\n          ],\n        };\n      } catch (error) {\n        return errorResult(error);\n      }\n    },\n  );\n}\n"]}
+{"version":3,"file":"screenshot.cjs","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":";;AAMA,wDA+CC;AApDD,6BAAwB;AAExB,4CAA0C;AAG1C,SAAgB,sBAAsB,CACpC,MAAiB,EACjB,OAAsB;IAEtB,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,YAAY;QACnB,WAAW,EACT,qDAAqD;YACrD,mEAAmE;QACrE,WAAW,EAAE;YACX,UAAU,EAAE,OAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6CAA6C,CAAC;SAC3D;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI;gBAC9B,CAAC,CAAC;oBACE;wBACE,IAAI,EAAE,OAAgB;wBACtB,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,QAAQ,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE;qBACnC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,OAAO;gBACL,OAAO,EAAE;oBACP,GAAG,YAAY;oBACf;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;4BACf,CAAC,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE;4BACtC,CAAC,CAAC,qBAAqB;qBAC1B;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { z } from 'zod';\n\nimport { errorResult } from './shared.js';\nimport type { DeviceBackend } from '../backends/types.js';\n\nexport function registerScreenshotTool(\n  server: McpServer,\n  backend: DeviceBackend,\n): void {\n  server.registerTool(\n    'device_screenshot',\n    {\n      title: 'Screenshot',\n      description:\n        'Capture a screenshot of the current device screen. ' +\n        'Returns base64-encoded PNG data. Optionally saves to a file path.',\n      inputSchema: {\n        outputPath: z\n          .string()\n          .optional()\n          .describe('File path to save the screenshot (optional)'),\n      },\n      annotations: { readOnlyHint: true },\n    },\n    async ({ outputPath }) => {\n      try {\n        const result = await backend.screenshot(outputPath, { encode: true });\n        const imageContent = result.data\n          ? [\n              {\n                type: 'image' as const,\n                data: result.data,\n                mimeType: `image/${result.format}`,\n              },\n            ]\n          : [];\n        return {\n          content: [\n            ...imageContent,\n            {\n              type: 'text' as const,\n              text: result.path\n                ? `Screenshot saved to ${result.path}`\n                : 'Screenshot captured',\n            },\n          ],\n        };\n      } catch (error) {\n        return errorResult(error);\n      }\n    },\n  );\n}\n"]}

package/dist/tools/screenshot.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"screenshot.d.cts","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,gDAAgD;AAIzE,OAAO,KAAK,EAAE,aAAa,EAAE,8BAA6B;AAE1D,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,aAAa,GACrB,IAAI,CAuCN"}
+{"version":3,"file":"screenshot.d.cts","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,gDAAgD;AAIzE,OAAO,KAAK,EAAE,aAAa,EAAE,8BAA6B;AAE1D,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,aAAa,GACrB,IAAI,CA4CN"}

package/dist/tools/screenshot.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"screenshot.d.mts","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,gDAAgD;AAIzE,OAAO,KAAK,EAAE,aAAa,EAAE,8BAA6B;AAE1D,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,aAAa,GACrB,IAAI,CAuCN"}
+{"version":3,"file":"screenshot.d.mts","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,gDAAgD;AAIzE,OAAO,KAAK,EAAE,aAAa,EAAE,8BAA6B;AAE1D,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,aAAa,GACrB,IAAI,CA4CN"}

package/dist/tools/screenshot.mjs

@@ -14,14 +14,19 @@ export function registerScreenshotTool(server, backend) {
         annotations: { readOnlyHint: true },
     }, async ({ outputPath }) => {
         try {
-            const result = await backend.screenshot(outputPath);
-            return {
-                content: [
+            const result = await backend.screenshot(outputPath, { encode: true });
+            const imageContent = result.data
+                ? [
                     {
                         type: 'image',
                         data: result.data,
                         mimeType: `image/${result.format}`,
                     },
+                ]
+                : [];
+            return {
+                content: [
+                    ...imageContent,
                     {
                         type: 'text',
                         text: result.path

package/dist/tools/screenshot.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"screenshot.mjs","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,YAAY;AAExB,OAAO,EAAE,WAAW,EAAE,qBAAoB;AAG1C,MAAM,UAAU,sBAAsB,CACpC,MAAiB,EACjB,OAAsB;IAEtB,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,YAAY;QACnB,WAAW,EACT,qDAAqD;YACrD,mEAAmE;QACrE,WAAW,EAAE;YACX,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6CAA6C,CAAC;SAC3D;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,OAAgB;wBACtB,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,QAAQ,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE;qBACnC;oBACD;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;4BACf,CAAC,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE;4BACtC,CAAC,CAAC,qBAAqB;qBAC1B;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { z } from 'zod';\n\nimport { errorResult } from './shared.js';\nimport type { DeviceBackend } from '../backends/types.js';\n\nexport function registerScreenshotTool(\n  server: McpServer,\n  backend: DeviceBackend,\n): void {\n  server.registerTool(\n    'device_screenshot',\n    {\n      title: 'Screenshot',\n      description:\n        'Capture a screenshot of the current device screen. ' +\n        'Returns base64-encoded PNG data. Optionally saves to a file path.',\n      inputSchema: {\n        outputPath: z\n          .string()\n          .optional()\n          .describe('File path to save the screenshot (optional)'),\n      },\n      annotations: { readOnlyHint: true },\n    },\n    async ({ outputPath }) => {\n      try {\n        const result = await backend.screenshot(outputPath);\n        return {\n          content: [\n            {\n              type: 'image' as const,\n              data: result.data,\n              mimeType: `image/${result.format}`,\n            },\n            {\n              type: 'text' as const,\n              text: result.path\n                ? `Screenshot saved to ${result.path}`\n                : 'Screenshot captured',\n            },\n          ],\n        };\n      } catch (error) {\n        return errorResult(error);\n      }\n    },\n  );\n}\n"]}
+{"version":3,"file":"screenshot.mjs","sourceRoot":"","sources":["../../src/tools/screenshot.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,YAAY;AAExB,OAAO,EAAE,WAAW,EAAE,qBAAoB;AAG1C,MAAM,UAAU,sBAAsB,CACpC,MAAiB,EACjB,OAAsB;IAEtB,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,YAAY;QACnB,WAAW,EACT,qDAAqD;YACrD,mEAAmE;QACrE,WAAW,EAAE;YACX,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6CAA6C,CAAC;SAC3D;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI;gBAC9B,CAAC,CAAC;oBACE;wBACE,IAAI,EAAE,OAAgB;wBACtB,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,QAAQ,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE;qBACnC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,OAAO;gBACL,OAAO,EAAE;oBACP,GAAG,YAAY;oBACf;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;4BACf,CAAC,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE;4BACtC,CAAC,CAAC,qBAAqB;qBAC1B;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { z } from 'zod';\n\nimport { errorResult } from './shared.js';\nimport type { DeviceBackend } from '../backends/types.js';\n\nexport function registerScreenshotTool(\n  server: McpServer,\n  backend: DeviceBackend,\n): void {\n  server.registerTool(\n    'device_screenshot',\n    {\n      title: 'Screenshot',\n      description:\n        'Capture a screenshot of the current device screen. ' +\n        'Returns base64-encoded PNG data. Optionally saves to a file path.',\n      inputSchema: {\n        outputPath: z\n          .string()\n          .optional()\n          .describe('File path to save the screenshot (optional)'),\n      },\n      annotations: { readOnlyHint: true },\n    },\n    async ({ outputPath }) => {\n      try {\n        const result = await backend.screenshot(outputPath, { encode: true });\n        const imageContent = result.data\n          ? [\n              {\n                type: 'image' as const,\n                data: result.data,\n                mimeType: `image/${result.format}`,\n              },\n            ]\n          : [];\n        return {\n          content: [\n            ...imageContent,\n            {\n              type: 'text' as const,\n              text: result.path\n                ? `Screenshot saved to ${result.path}`\n                : 'Screenshot captured',\n            },\n          ],\n        };\n      } catch (error) {\n        return errorResult(error);\n      }\n    },\n  );\n}\n"]}

package/dist/utils/output-path.cjs

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveArtifactPath = resolveArtifactPath;
+exports.writeArtifactFile = writeArtifactFile;
+exports.hardenArtifactFile = hardenArtifactFile;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+/** Kinds of on-disk device artifact and their file extension. */
+const ARTIFACT_EXTENSION = {
+    screenshot: 'png',
+    recording: 'mp4',
+};
+/** Owner read/write only — device artifacts may contain sensitive UI (seed phrases, keys, balances). */
+const ARTIFACT_MODE = 0o600;
+/**
+ * Open flags for writing an artifact: create/truncate, write-only, and
+ * `O_NOFOLLOW` so a pre-planted symlink at the destination is never followed
+ * (defeats `/tmp` symlink / TOCTOU attacks). `O_NOFOLLOW` is a no-op on
+ * platforms that do not define it.
+ */
+/* eslint-disable no-bitwise -- POSIX open(2) flags are combined with bitwise OR */
+const ARTIFACT_WRITE_FLAGS = node_fs_1.constants.O_WRONLY |
+    node_fs_1.constants.O_CREAT |
+    node_fs_1.constants.O_TRUNC |
+    (node_fs_1.constants.O_NOFOLLOW ?? 0);
+/* eslint-enable no-bitwise */
+let sessionTempDir = null;
+/**
+ * Lazily create (once per process) a private temporary directory with
+ * owner-only permissions (`0700`) to hold default artifacts. Because the
+ * directory itself is unreadable to other users, files placed inside it are
+ * protected even when written by an external tool (idb/adb) that we cannot
+ * pass secure open flags to.
+ *
+ * @returns The absolute path to the per-process private temp directory.
+ */
+function getSessionTempDir() {
+    if (!sessionTempDir) {
+        sessionTempDir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'device-mcp-'));
+    }
+    return sessionTempDir;
+}
+/**
+ * Resolve the optional output-directory allowlist from the environment.
+ *
+ * @returns The absolute allowed base directory, or `null` when unrestricted.
+ */
+function allowedBaseDir() {
+    const configured = process.env.DEVICE_MCP_OUTPUT_DIR?.trim();
+    return configured ? (0, node_path_1.resolve)(configured) : null;
+}
+/**
+ * Reject a caller-supplied path that escapes `DEVICE_MCP_OUTPUT_DIR` when that
+ * sandbox is configured. No-op when the env var is unset.
+ *
+ * @param target - The already-resolved absolute destination path.
+ */
+function assertWithinAllowedBase(target) {
+    const base = allowedBaseDir();
+    if (!base) {
+        return;
+    }
+    const rel = (0, node_path_1.relative)(base, target);
+    if (rel.length === 0 || rel.startsWith('..') || (0, node_path_1.isAbsolute)(rel)) {
+        throw new Error(`Refusing to write outside DEVICE_MCP_OUTPUT_DIR (${base}): ${target}`);
+    }
+}
+/**
+ * Compute a safe absolute path for a device artifact.
+ *
+ * - When no `outputPath` is given, returns an unpredictable file name inside a
+ *   private per-process temp directory. This replaces the previous predictable
+ *   `/tmp/device-mcp-*-${Date.now()}` names, which were vulnerable to symlink
+ *   and information-disclosure attacks in the shared temp directory.
+ * - When an `outputPath` is given, it is rejected if it contains a NUL byte,
+ *   resolved to an absolute path, and — when `DEVICE_MCP_OUTPUT_DIR` is set —
+ *   confined to that directory.
+ *
+ * @param outputPath - Optional caller-supplied destination path.
+ * @param kind - The artifact kind, used to pick the default file extension.
+ * @returns The resolved, validated absolute path to write to.
+ */
+function resolveArtifactPath(outputPath, kind) {
+    if (outputPath === undefined) {
+        const token = (0, node_crypto_1.randomBytes)(8).toString('hex');
+        return (0, node_path_1.join)(getSessionTempDir(), `${kind}-${token}.${ARTIFACT_EXTENSION[kind]}`);
+    }
+    if (outputPath.includes('\0')) {
+        throw new Error('Invalid output path: contains a NUL byte');
+    }
+    const target = (0, node_path_1.resolve)(outputPath);
+    assertWithinAllowedBase(target);
+    return target;
+}
+/**
+ * Write bytes to an artifact path with hardened permissions and open flags:
+ * owner-only (`0600`) and `O_NOFOLLOW`. Use for artifacts we write directly
+ * in-process (e.g. the Appium backend decoding a base64 screenshot).
+ *
+ * @param path - The destination path (should come from `resolveArtifactPath`).
+ * @param data - The bytes to write.
+ */
+async function writeArtifactFile(path, data) {
+    await (0, promises_1.writeFile)(path, data, {
+        mode: ARTIFACT_MODE,
+        flag: ARTIFACT_WRITE_FLAGS,
+    });
+}
+/**
+ * Best-effort tightening of permissions on a file written by an external tool
+ * (idb/adb create the file themselves, so we cannot pass secure open flags).
+ * Silently ignored when unsupported or when the file is absent.
+ *
+ * @param path - The path of the file to restrict to owner-only access.
+ */
+function hardenArtifactFile(path) {
+    try {
+        (0, node_fs_1.chmodSync)(path, ARTIFACT_MODE);
+    }
+    catch {
+        // Best-effort: the filesystem may not support chmod (e.g. some mounts on
+        // Windows) or the external tool may have failed to create the file.
+    }
+}
+//# sourceMappingURL=output-path.cjs.map

package/dist/utils/output-path.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-path.cjs","sourceRoot":"","sources":["../../src/utils/output-path.ts"],"names":[],"mappings":";;AA6FA,kDAmBC;AAUD,8CAQC;AASD,gDAOC;AAlJD,6CAA0C;AAC1C,qCAA2E;AAC3E,+CAA6C;AAC7C,qCAAiC;AACjC,yCAAgE;AAEhE,iEAAiE;AACjE,MAAM,kBAAkB,GAAG;IACzB,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,KAAK;CACR,CAAC;AAIX,wGAAwG;AACxG,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B;;;;;GAKG;AACH,mFAAmF;AACnF,MAAM,oBAAoB,GACxB,mBAAW,CAAC,QAAQ;IACpB,mBAAW,CAAC,OAAO;IACnB,mBAAW,CAAC,OAAO;IACnB,CAAC,mBAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAChC,8BAA8B;AAE9B,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC;;;;;;;;GAQG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc;IACrB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC7D,OAAO,UAAU,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,MAAc;IAC7C,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAA,sBAAU,EAAC,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,oDAAoD,IAAI,MAAM,MAAM,EAAE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,mBAAmB,CACjC,UAA8B,EAC9B,IAAkB;IAElB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAA,yBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,IAAA,gBAAI,EACT,iBAAiB,EAAE,EACnB,GAAG,IAAI,IAAI,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,UAAU,CAAC,CAAC;IACnC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,IAAY;IAEZ,MAAM,IAAA,oBAAS,EAAC,IAAI,EAAE,IAAI,EAAE;QAC1B,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,oBAAoB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,oEAAoE;IACtE,CAAC;AACH,CAAC","sourcesContent":["import { randomBytes } from 'node:crypto';\nimport { chmodSync, constants as fsConstants, mkdtempSync } from 'node:fs';\nimport { writeFile } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { isAbsolute, join, relative, resolve } from 'node:path';\n\n/** Kinds of on-disk device artifact and their file extension. */\nconst ARTIFACT_EXTENSION = {\n  screenshot: 'png',\n  recording: 'mp4',\n} as const;\n\nexport type ArtifactKind = keyof typeof ARTIFACT_EXTENSION;\n\n/** Owner read/write only — device artifacts may contain sensitive UI (seed phrases, keys, balances). */\nconst ARTIFACT_MODE = 0o600;\n\n/**\n * Open flags for writing an artifact: create/truncate, write-only, and\n * `O_NOFOLLOW` so a pre-planted symlink at the destination is never followed\n * (defeats `/tmp` symlink / TOCTOU attacks). `O_NOFOLLOW` is a no-op on\n * platforms that do not define it.\n */\n/* eslint-disable no-bitwise -- POSIX open(2) flags are combined with bitwise OR */\nconst ARTIFACT_WRITE_FLAGS =\n  fsConstants.O_WRONLY |\n  fsConstants.O_CREAT |\n  fsConstants.O_TRUNC |\n  (fsConstants.O_NOFOLLOW ?? 0);\n/* eslint-enable no-bitwise */\n\nlet sessionTempDir: string | null = null;\n\n/**\n * Lazily create (once per process) a private temporary directory with\n * owner-only permissions (`0700`) to hold default artifacts. Because the\n * directory itself is unreadable to other users, files placed inside it are\n * protected even when written by an external tool (idb/adb) that we cannot\n * pass secure open flags to.\n *\n * @returns The absolute path to the per-process private temp directory.\n */\nfunction getSessionTempDir(): string {\n  if (!sessionTempDir) {\n    sessionTempDir = mkdtempSync(join(tmpdir(), 'device-mcp-'));\n  }\n  return sessionTempDir;\n}\n\n/**\n * Resolve the optional output-directory allowlist from the environment.\n *\n * @returns The absolute allowed base directory, or `null` when unrestricted.\n */\nfunction allowedBaseDir(): string | null {\n  const configured = process.env.DEVICE_MCP_OUTPUT_DIR?.trim();\n  return configured ? resolve(configured) : null;\n}\n\n/**\n * Reject a caller-supplied path that escapes `DEVICE_MCP_OUTPUT_DIR` when that\n * sandbox is configured. No-op when the env var is unset.\n *\n * @param target - The already-resolved absolute destination path.\n */\nfunction assertWithinAllowedBase(target: string): void {\n  const base = allowedBaseDir();\n  if (!base) {\n    return;\n  }\n  const rel = relative(base, target);\n  if (rel.length === 0 || rel.startsWith('..') || isAbsolute(rel)) {\n    throw new Error(\n      `Refusing to write outside DEVICE_MCP_OUTPUT_DIR (${base}): ${target}`,\n    );\n  }\n}\n\n/**\n * Compute a safe absolute path for a device artifact.\n *\n * - When no `outputPath` is given, returns an unpredictable file name inside a\n *   private per-process temp directory. This replaces the previous predictable\n *   `/tmp/device-mcp-*-${Date.now()}` names, which were vulnerable to symlink\n *   and information-disclosure attacks in the shared temp directory.\n * - When an `outputPath` is given, it is rejected if it contains a NUL byte,\n *   resolved to an absolute path, and — when `DEVICE_MCP_OUTPUT_DIR` is set —\n *   confined to that directory.\n *\n * @param outputPath - Optional caller-supplied destination path.\n * @param kind - The artifact kind, used to pick the default file extension.\n * @returns The resolved, validated absolute path to write to.\n */\nexport function resolveArtifactPath(\n  outputPath: string | undefined,\n  kind: ArtifactKind,\n): string {\n  if (outputPath === undefined) {\n    const token = randomBytes(8).toString('hex');\n    return join(\n      getSessionTempDir(),\n      `${kind}-${token}.${ARTIFACT_EXTENSION[kind]}`,\n    );\n  }\n\n  if (outputPath.includes('\\0')) {\n    throw new Error('Invalid output path: contains a NUL byte');\n  }\n\n  const target = resolve(outputPath);\n  assertWithinAllowedBase(target);\n  return target;\n}\n\n/**\n * Write bytes to an artifact path with hardened permissions and open flags:\n * owner-only (`0600`) and `O_NOFOLLOW`. Use for artifacts we write directly\n * in-process (e.g. the Appium backend decoding a base64 screenshot).\n *\n * @param path - The destination path (should come from `resolveArtifactPath`).\n * @param data - The bytes to write.\n */\nexport async function writeArtifactFile(\n  path: string,\n  data: Buffer,\n): Promise<void> {\n  await writeFile(path, data, {\n    mode: ARTIFACT_MODE,\n    flag: ARTIFACT_WRITE_FLAGS,\n  });\n}\n\n/**\n * Best-effort tightening of permissions on a file written by an external tool\n * (idb/adb create the file themselves, so we cannot pass secure open flags).\n * Silently ignored when unsupported or when the file is absent.\n *\n * @param path - The path of the file to restrict to owner-only access.\n */\nexport function hardenArtifactFile(path: string): void {\n  try {\n    chmodSync(path, ARTIFACT_MODE);\n  } catch {\n    // Best-effort: the filesystem may not support chmod (e.g. some mounts on\n    // Windows) or the external tool may have failed to create the file.\n  }\n}\n"]}

package/dist/utils/output-path.d.cts

@@ -0,0 +1,41 @@
+/** Kinds of on-disk device artifact and their file extension. */
+declare const ARTIFACT_EXTENSION: {
+    readonly screenshot: "png";
+    readonly recording: "mp4";
+};
+export type ArtifactKind = keyof typeof ARTIFACT_EXTENSION;
+/**
+ * Compute a safe absolute path for a device artifact.
+ *
+ * - When no `outputPath` is given, returns an unpredictable file name inside a
+ *   private per-process temp directory. This replaces the previous predictable
+ *   `/tmp/device-mcp-*-${Date.now()}` names, which were vulnerable to symlink
+ *   and information-disclosure attacks in the shared temp directory.
+ * - When an `outputPath` is given, it is rejected if it contains a NUL byte,
+ *   resolved to an absolute path, and — when `DEVICE_MCP_OUTPUT_DIR` is set —
+ *   confined to that directory.
+ *
+ * @param outputPath - Optional caller-supplied destination path.
+ * @param kind - The artifact kind, used to pick the default file extension.
+ * @returns The resolved, validated absolute path to write to.
+ */
+export declare function resolveArtifactPath(outputPath: string | undefined, kind: ArtifactKind): string;
+/**
+ * Write bytes to an artifact path with hardened permissions and open flags:
+ * owner-only (`0600`) and `O_NOFOLLOW`. Use for artifacts we write directly
+ * in-process (e.g. the Appium backend decoding a base64 screenshot).
+ *
+ * @param path - The destination path (should come from `resolveArtifactPath`).
+ * @param data - The bytes to write.
+ */
+export declare function writeArtifactFile(path: string, data: Buffer): Promise<void>;
+/**
+ * Best-effort tightening of permissions on a file written by an external tool
+ * (idb/adb create the file themselves, so we cannot pass secure open flags).
+ * Silently ignored when unsupported or when the file is absent.
+ *
+ * @param path - The path of the file to restrict to owner-only access.
+ */
+export declare function hardenArtifactFile(path: string): void;
+export {};
+//# sourceMappingURL=output-path.d.cts.map

package/dist/utils/output-path.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-path.d.cts","sourceRoot":"","sources":["../../src/utils/output-path.ts"],"names":[],"mappings":"AAMA,iEAAiE;AACjE,QAAA,MAAM,kBAAkB;;;CAGd,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAkE3D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,IAAI,EAAE,YAAY,GACjB,MAAM,CAgBR;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOrD"}

package/dist/utils/output-path.d.mts

@@ -0,0 +1,41 @@
+/** Kinds of on-disk device artifact and their file extension. */
+declare const ARTIFACT_EXTENSION: {
+    readonly screenshot: "png";
+    readonly recording: "mp4";
+};
+export type ArtifactKind = keyof typeof ARTIFACT_EXTENSION;
+/**
+ * Compute a safe absolute path for a device artifact.
+ *
+ * - When no `outputPath` is given, returns an unpredictable file name inside a
+ *   private per-process temp directory. This replaces the previous predictable
+ *   `/tmp/device-mcp-*-${Date.now()}` names, which were vulnerable to symlink
+ *   and information-disclosure attacks in the shared temp directory.
+ * - When an `outputPath` is given, it is rejected if it contains a NUL byte,
+ *   resolved to an absolute path, and — when `DEVICE_MCP_OUTPUT_DIR` is set —
+ *   confined to that directory.
+ *
+ * @param outputPath - Optional caller-supplied destination path.
+ * @param kind - The artifact kind, used to pick the default file extension.
+ * @returns The resolved, validated absolute path to write to.
+ */
+export declare function resolveArtifactPath(outputPath: string | undefined, kind: ArtifactKind): string;
+/**
+ * Write bytes to an artifact path with hardened permissions and open flags:
+ * owner-only (`0600`) and `O_NOFOLLOW`. Use for artifacts we write directly
+ * in-process (e.g. the Appium backend decoding a base64 screenshot).
+ *
+ * @param path - The destination path (should come from `resolveArtifactPath`).
+ * @param data - The bytes to write.
+ */
+export declare function writeArtifactFile(path: string, data: Buffer): Promise<void>;
+/**
+ * Best-effort tightening of permissions on a file written by an external tool
+ * (idb/adb create the file themselves, so we cannot pass secure open flags).
+ * Silently ignored when unsupported or when the file is absent.
+ *
+ * @param path - The path of the file to restrict to owner-only access.
+ */
+export declare function hardenArtifactFile(path: string): void;
+export {};
+//# sourceMappingURL=output-path.d.mts.map

package/dist/utils/output-path.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-path.d.mts","sourceRoot":"","sources":["../../src/utils/output-path.ts"],"names":[],"mappings":"AAMA,iEAAiE;AACjE,QAAA,MAAM,kBAAkB;;;CAGd,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAkE3D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,IAAI,EAAE,YAAY,GACjB,MAAM,CAgBR;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOrD"}

package/dist/utils/output-path.mjs

@@ -0,0 +1,123 @@
+import { randomBytes } from "node:crypto";
+import { chmodSync, constants as fsConstants, mkdtempSync } from "node:fs";
+import { writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { isAbsolute, join, relative, resolve } from "node:path";
+/** Kinds of on-disk device artifact and their file extension. */
+const ARTIFACT_EXTENSION = {
+    screenshot: 'png',
+    recording: 'mp4',
+};
+/** Owner read/write only — device artifacts may contain sensitive UI (seed phrases, keys, balances). */
+const ARTIFACT_MODE = 0o600;
+/**
+ * Open flags for writing an artifact: create/truncate, write-only, and
+ * `O_NOFOLLOW` so a pre-planted symlink at the destination is never followed
+ * (defeats `/tmp` symlink / TOCTOU attacks). `O_NOFOLLOW` is a no-op on
+ * platforms that do not define it.
+ */
+/* eslint-disable no-bitwise -- POSIX open(2) flags are combined with bitwise OR */
+const ARTIFACT_WRITE_FLAGS = fsConstants.O_WRONLY |
+    fsConstants.O_CREAT |
+    fsConstants.O_TRUNC |
+    (fsConstants.O_NOFOLLOW ?? 0);
+/* eslint-enable no-bitwise */
+let sessionTempDir = null;
+/**
+ * Lazily create (once per process) a private temporary directory with
+ * owner-only permissions (`0700`) to hold default artifacts. Because the
+ * directory itself is unreadable to other users, files placed inside it are
+ * protected even when written by an external tool (idb/adb) that we cannot
+ * pass secure open flags to.
+ *
+ * @returns The absolute path to the per-process private temp directory.
+ */
+function getSessionTempDir() {
+    if (!sessionTempDir) {
+        sessionTempDir = mkdtempSync(join(tmpdir(), 'device-mcp-'));
+    }
+    return sessionTempDir;
+}
+/**
+ * Resolve the optional output-directory allowlist from the environment.
+ *
+ * @returns The absolute allowed base directory, or `null` when unrestricted.
+ */
+function allowedBaseDir() {
+    const configured = process.env.DEVICE_MCP_OUTPUT_DIR?.trim();
+    return configured ? resolve(configured) : null;
+}
+/**
+ * Reject a caller-supplied path that escapes `DEVICE_MCP_OUTPUT_DIR` when that
+ * sandbox is configured. No-op when the env var is unset.
+ *
+ * @param target - The already-resolved absolute destination path.
+ */
+function assertWithinAllowedBase(target) {
+    const base = allowedBaseDir();
+    if (!base) {
+        return;
+    }
+    const rel = relative(base, target);
+    if (rel.length === 0 || rel.startsWith('..') || isAbsolute(rel)) {
+        throw new Error(`Refusing to write outside DEVICE_MCP_OUTPUT_DIR (${base}): ${target}`);
+    }
+}
+/**
+ * Compute a safe absolute path for a device artifact.
+ *
+ * - When no `outputPath` is given, returns an unpredictable file name inside a
+ *   private per-process temp directory. This replaces the previous predictable
+ *   `/tmp/device-mcp-*-${Date.now()}` names, which were vulnerable to symlink
+ *   and information-disclosure attacks in the shared temp directory.
+ * - When an `outputPath` is given, it is rejected if it contains a NUL byte,
+ *   resolved to an absolute path, and — when `DEVICE_MCP_OUTPUT_DIR` is set —
+ *   confined to that directory.
+ *
+ * @param outputPath - Optional caller-supplied destination path.
+ * @param kind - The artifact kind, used to pick the default file extension.
+ * @returns The resolved, validated absolute path to write to.
+ */
+export function resolveArtifactPath(outputPath, kind) {
+    if (outputPath === undefined) {
+        const token = randomBytes(8).toString('hex');
+        return join(getSessionTempDir(), `${kind}-${token}.${ARTIFACT_EXTENSION[kind]}`);
+    }
+    if (outputPath.includes('\0')) {
+        throw new Error('Invalid output path: contains a NUL byte');
+    }
+    const target = resolve(outputPath);
+    assertWithinAllowedBase(target);
+    return target;
+}
+/**
+ * Write bytes to an artifact path with hardened permissions and open flags:
+ * owner-only (`0600`) and `O_NOFOLLOW`. Use for artifacts we write directly
+ * in-process (e.g. the Appium backend decoding a base64 screenshot).
+ *
+ * @param path - The destination path (should come from `resolveArtifactPath`).
+ * @param data - The bytes to write.
+ */
+export async function writeArtifactFile(path, data) {
+    await writeFile(path, data, {
+        mode: ARTIFACT_MODE,
+        flag: ARTIFACT_WRITE_FLAGS,
+    });
+}
+/**
+ * Best-effort tightening of permissions on a file written by an external tool
+ * (idb/adb create the file themselves, so we cannot pass secure open flags).
+ * Silently ignored when unsupported or when the file is absent.
+ *
+ * @param path - The path of the file to restrict to owner-only access.
+ */
+export function hardenArtifactFile(path) {
+    try {
+        chmodSync(path, ARTIFACT_MODE);
+    }
+    catch {
+        // Best-effort: the filesystem may not support chmod (e.g. some mounts on
+        // Windows) or the external tool may have failed to create the file.
+    }
+}
+//# sourceMappingURL=output-path.mjs.map

package/dist/utils/output-path.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-path.mjs","sourceRoot":"","sources":["../../src/utils/output-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,oBAAoB;AAC1C,OAAO,EAAE,SAAS,EAAE,SAAS,IAAI,WAAW,EAAE,WAAW,EAAE,gBAAgB;AAC3E,OAAO,EAAE,SAAS,EAAE,yBAAyB;AAC7C,OAAO,EAAE,MAAM,EAAE,gBAAgB;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB;AAEhE,iEAAiE;AACjE,MAAM,kBAAkB,GAAG;IACzB,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,KAAK;CACR,CAAC;AAIX,wGAAwG;AACxG,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B;;;;;GAKG;AACH,mFAAmF;AACnF,MAAM,oBAAoB,GACxB,WAAW,CAAC,QAAQ;IACpB,WAAW,CAAC,OAAO;IACnB,WAAW,CAAC,OAAO;IACnB,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAChC,8BAA8B;AAE9B,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC;;;;;;;;GAQG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc;IACrB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC7D,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,MAAc;IAC7C,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,oDAAoD,IAAI,MAAM,MAAM,EAAE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAA8B,EAC9B,IAAkB;IAElB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,IAAI,CACT,iBAAiB,EAAE,EACnB,GAAG,IAAI,IAAI,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,IAAY;IAEZ,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE;QAC1B,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,oBAAoB;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,oEAAoE;IACtE,CAAC;AACH,CAAC","sourcesContent":["import { randomBytes } from 'node:crypto';\nimport { chmodSync, constants as fsConstants, mkdtempSync } from 'node:fs';\nimport { writeFile } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { isAbsolute, join, relative, resolve } from 'node:path';\n\n/** Kinds of on-disk device artifact and their file extension. */\nconst ARTIFACT_EXTENSION = {\n  screenshot: 'png',\n  recording: 'mp4',\n} as const;\n\nexport type ArtifactKind = keyof typeof ARTIFACT_EXTENSION;\n\n/** Owner read/write only — device artifacts may contain sensitive UI (seed phrases, keys, balances). */\nconst ARTIFACT_MODE = 0o600;\n\n/**\n * Open flags for writing an artifact: create/truncate, write-only, and\n * `O_NOFOLLOW` so a pre-planted symlink at the destination is never followed\n * (defeats `/tmp` symlink / TOCTOU attacks). `O_NOFOLLOW` is a no-op on\n * platforms that do not define it.\n */\n/* eslint-disable no-bitwise -- POSIX open(2) flags are combined with bitwise OR */\nconst ARTIFACT_WRITE_FLAGS =\n  fsConstants.O_WRONLY |\n  fsConstants.O_CREAT |\n  fsConstants.O_TRUNC |\n  (fsConstants.O_NOFOLLOW ?? 0);\n/* eslint-enable no-bitwise */\n\nlet sessionTempDir: string | null = null;\n\n/**\n * Lazily create (once per process) a private temporary directory with\n * owner-only permissions (`0700`) to hold default artifacts. Because the\n * directory itself is unreadable to other users, files placed inside it are\n * protected even when written by an external tool (idb/adb) that we cannot\n * pass secure open flags to.\n *\n * @returns The absolute path to the per-process private temp directory.\n */\nfunction getSessionTempDir(): string {\n  if (!sessionTempDir) {\n    sessionTempDir = mkdtempSync(join(tmpdir(), 'device-mcp-'));\n  }\n  return sessionTempDir;\n}\n\n/**\n * Resolve the optional output-directory allowlist from the environment.\n *\n * @returns The absolute allowed base directory, or `null` when unrestricted.\n */\nfunction allowedBaseDir(): string | null {\n  const configured = process.env.DEVICE_MCP_OUTPUT_DIR?.trim();\n  return configured ? resolve(configured) : null;\n}\n\n/**\n * Reject a caller-supplied path that escapes `DEVICE_MCP_OUTPUT_DIR` when that\n * sandbox is configured. No-op when the env var is unset.\n *\n * @param target - The already-resolved absolute destination path.\n */\nfunction assertWithinAllowedBase(target: string): void {\n  const base = allowedBaseDir();\n  if (!base) {\n    return;\n  }\n  const rel = relative(base, target);\n  if (rel.length === 0 || rel.startsWith('..') || isAbsolute(rel)) {\n    throw new Error(\n      `Refusing to write outside DEVICE_MCP_OUTPUT_DIR (${base}): ${target}`,\n    );\n  }\n}\n\n/**\n * Compute a safe absolute path for a device artifact.\n *\n * - When no `outputPath` is given, returns an unpredictable file name inside a\n *   private per-process temp directory. This replaces the previous predictable\n *   `/tmp/device-mcp-*-${Date.now()}` names, which were vulnerable to symlink\n *   and information-disclosure attacks in the shared temp directory.\n * - When an `outputPath` is given, it is rejected if it contains a NUL byte,\n *   resolved to an absolute path, and — when `DEVICE_MCP_OUTPUT_DIR` is set —\n *   confined to that directory.\n *\n * @param outputPath - Optional caller-supplied destination path.\n * @param kind - The artifact kind, used to pick the default file extension.\n * @returns The resolved, validated absolute path to write to.\n */\nexport function resolveArtifactPath(\n  outputPath: string | undefined,\n  kind: ArtifactKind,\n): string {\n  if (outputPath === undefined) {\n    const token = randomBytes(8).toString('hex');\n    return join(\n      getSessionTempDir(),\n      `${kind}-${token}.${ARTIFACT_EXTENSION[kind]}`,\n    );\n  }\n\n  if (outputPath.includes('\\0')) {\n    throw new Error('Invalid output path: contains a NUL byte');\n  }\n\n  const target = resolve(outputPath);\n  assertWithinAllowedBase(target);\n  return target;\n}\n\n/**\n * Write bytes to an artifact path with hardened permissions and open flags:\n * owner-only (`0600`) and `O_NOFOLLOW`. Use for artifacts we write directly\n * in-process (e.g. the Appium backend decoding a base64 screenshot).\n *\n * @param path - The destination path (should come from `resolveArtifactPath`).\n * @param data - The bytes to write.\n */\nexport async function writeArtifactFile(\n  path: string,\n  data: Buffer,\n): Promise<void> {\n  await writeFile(path, data, {\n    mode: ARTIFACT_MODE,\n    flag: ARTIFACT_WRITE_FLAGS,\n  });\n}\n\n/**\n * Best-effort tightening of permissions on a file written by an external tool\n * (idb/adb create the file themselves, so we cannot pass secure open flags).\n * Silently ignored when unsupported or when the file is absent.\n *\n * @param path - The path of the file to restrict to owner-only access.\n */\nexport function hardenArtifactFile(path: string): void {\n  try {\n    chmodSync(path, ARTIFACT_MODE);\n  } catch {\n    // Best-effort: the filesystem may not support chmod (e.g. some mounts on\n    // Windows) or the external tool may have failed to create the file.\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask/device-mcp",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "MCP server for mobile device interaction — iOS (IDB), Android (ADB), and Appium/BrowserStack",
   "homepage": "https://github.com/MetaMask/device-mcp#readme",
   "bugs": {