@mmerterden/multi-agent-toolkit-mcp 3.1.1 → 3.3.0

package/CHANGELOG.md

@@ -15,6 +15,59 @@ Releases before this file exists are recorded in the git tags and commit history
 
 ---
 
+## 3.3.0
+
+### Added
+
+- `ios_leaks` and `android_meminfo`: the server had 84 tools and not one of them
+  looked at memory.
+
+  `ios_leaks` runs `/usr/bin/leaks` against a simulator or host process, by pid
+  or by bundle id. Simulator processes are ordinary host processes, so no
+  `simctl spawn` is needed; this was checked against a live simulator rather than
+  assumed. `mode: "diff"` reports only what is new since a memory graph saved by
+  an earlier call, which is the shape a regression gate wants, where a single
+  absolute count says little.
+
+  `android_meminfo` reads `dumpsys meminfo` (KB, no root) and `mode: "diff"`
+  compares two snapshots, because growth across the same flow is the signal a
+  leak produces.
+
+  Both report `measurable: false` with a reason instead of a clean result when
+  they could not look: an iOS target without `get-task-allow`, an Android package
+  with no running process. `leaks` exits 0 in the unmeasurable case, exactly as
+  it does for a clean run, so anything keying off the exit status calls an
+  uninspected process leak-free.
+
+### Fixed
+
+- `run()` turned every non-zero exit into an `ERROR` string with the command's
+  output discarded. `leaks` exits 1 when it FINDS leaks, so the new tool would
+  have reported its most important result as "could not measure". `runCapture()`
+  returns what the command printed and lets the caller decide what the status
+  means. Existing callers are untouched.
+
+### Note
+
+`android_meminfo`'s parser was written against the documented output shape on a
+machine with no adb and no emulator. The `leaks` parser was written against live
+output captured from real runs, including the leaking and the unmeasurable case.
+The tests pin both shapes; the first real Android run is that half's measurement.
+
+## 3.2.0
+
+### Added
+
+- `ios_xcresult` gains `mode: "metrics"`: XCTMetric performance results straight
+  out of the `.xcresult` as JSON, via `xcresulttool get test-results metrics`.
+  The tool already shelled out to `xcresulttool` for `mode: "tests"`, so this is
+  a mode on an existing tool rather than a new integration, and Apple ships the
+  output's JSON Schema behind `--schema`, so the shape is documented rather than
+  inferred. Optional `test_id` scopes it to one case or suite.
+  Metrics exist only inside the bundle - there is no line in the build log to
+  fall back to - so a missing `.xcresult` returns an error instead of an empty
+  result that would read as "measured, nothing to report".
+
 ## 3.1.1
 
 ### Fixed

package/README.md

@@ -7,7 +7,7 @@
 
 🇹🇷 Türkçe: [README.tr.md](./README.tr.md)
 
-**84 tools** for iOS Simulator, Android Emulator, and headless web control. MCP server that lets your AI coding assistant see, interact with, and audit your mobile apps - plus drive browsers, run an 18-rule App Store compliance audit, and orchestrate multi-step batch flows.
+**86 tools** for iOS Simulator, Android Emulator, and headless web control. MCP server that lets your AI coding assistant see, interact with, and audit your mobile apps - plus drive browsers, run an 18-rule App Store compliance audit, and orchestrate multi-step batch flows.
 
 Distributed on the **public npm registry** - `npx @mmerterden/multi-agent-toolkit-mcp` resolves with no auth, no token, no `~/.npmrc` setup.
 
@@ -17,6 +17,7 @@ That distinction is worth keeping straight. This line once called five hosts "th
 
 **7 categories:**
 - **Device Control** (59 tools) - screenshot, tap, swipe, type, navigate, dark mode, locale, orientation, location, permissions, push notifications, real start/stop screen recording
+- **Memory** (2 tools) - `ios_leaks` runs /usr/bin/leaks against a simulator or host process, snapshot or diff against a saved memory graph; `android_meminfo` reads dumpsys meminfo, snapshot or diff. Both report `measurable:false` rather than a clean result when they could not look
 - **Crash Diagnostics** (2 tools) - `ios_list_crashes` reads the host's DiagnosticReports, `android_list_crashes` dumps the adb crash buffer, both tail-bounded
 - **Accessibility Audit** (2 tools) - auto-detect missing labels, small tap targets, missing identifiers (scope filtering supported)
 - **Store Compliance** (5 tools) - App Store / Play Store readiness; **18-rule deep `ios_app_store_audit`** cross-references Apple ITMS error codes + App Store Review Guidelines (privacy manifest, required-reason API, Info.plist, code signing, entitlements, embedded SDK, IPv6, debug-tool leak, ...)
@@ -189,7 +190,7 @@ Run a scripted login flow in one MCP call:
 
 Returns per-step status so the agent can self-correct on failure.
 
-### iOS Tools (38)
+### iOS Tools (39)
 
 | Tool | Description |
 |------|-------------|
@@ -232,7 +233,7 @@ Returns per-step status so the agent can self-correct on failure.
 | `ios_visual_diff` | Compare two PNG screenshots (pixelmatch). Returns diff_pct, pass/fail vs threshold, optional diff PNG. Useful for snapshot regressions across light/dark, locale, dynamic type |
 | `ios_list_crashes` | List recent crash reports from the host's DiagnosticReports - filter by process name, bound by age and count |
 
-### Android Tools (30)
+### Android Tools (31)
 
 | Tool | Description |
 |------|-------------|

package/README.tr.md

@@ -7,7 +7,7 @@
 
 🇬🇧 English: [README.md](./README.md)
 
-iOS Simulator, Android Emulator ve headless web kontrolü için **84 araç**. AI kodlama asistanının mobil uygulamalarını görmesini, onlarla etkileşime girmesini ve denetlemesini sağlayan bir MCP sunucusu - ayrıca tarayıcıları sürer, 18-kurallık bir App Store uyumluluk denetimi çalıştırır ve çok-adımlı batch akışlarını orkestre eder.
+iOS Simulator, Android Emulator ve headless web kontrolü için **86 araç**. AI kodlama asistanının mobil uygulamalarını görmesini, onlarla etkileşime girmesini ve denetlemesini sağlayan bir MCP sunucusu - ayrıca tarayıcıları sürer, 18-kurallık bir App Store uyumluluk denetimi çalıştırır ve çok-adımlı batch akışlarını orkestre eder.
 
 **Public npm registry** üzerinden dağıtılır - `npx @mmerterden/multi-agent-toolkit-mcp`, auth'suz, token'sız, `~/.npmrc` ayarı gerekmeden çözülür.
 
@@ -189,7 +189,7 @@ Tek bir MCP çağrısında scriptlenmiş bir login akışı çalıştır:
 
 Agent'ın hata durumunda kendini düzeltebilmesi için adım-başına durum döner.
 
-### iOS Araçları (38)
+### iOS Araçları (39)
 
 | Araç | Açıklama |
 |------|-------------|
@@ -232,7 +232,7 @@ Agent'ın hata durumunda kendini düzeltebilmesi için adım-başına durum dön
 | `ios_visual_diff` | İki PNG screenshot'ı karşılaştır (pixelmatch). diff_pct, threshold'a karşı pass/fail, opsiyonel diff PNG döner. Açık/koyu mod, locale, dynamic type genelinde snapshot regresyonları için kullanışlı |
 | `ios_list_crashes` | Host'un DiagnosticReports dizinindeki güncel crash raporlarını listele - süreç adına göre filtrele, yaş ve sayı ile sınırla |
 
-### Android Araçları (30)
+### Android Araçları (31)
 
 | Araç | Açıklama |
 |------|-------------|

package/index.js

@@ -29,6 +29,7 @@ import {
 } from "./tools/ios-testflight/index.js";
 import { DESIGN_TOOLS, handleDesign } from "./tools/design-check/index.js";
 import { parseLaunchOutput } from "./tools/launch-time/index.js";
+import { parseLeaksOutput, parseMeminfoOutput, diffMeminfo } from "./tools/memory/index.js";
 import { interactiveElements } from "./tools/ui-inspect/index.js";
 import { selectCrashReports } from "./tools/crash-logs/index.js";
 import {
@@ -78,6 +79,25 @@ function run(cmd, opts = {}) {
   }
 }
 
+/**
+ * Run a command whose non-zero exit is a RESULT, not a failure.
+ *
+ * `leaks` exits 1 when it finds leaks. Through run() that becomes an ERROR
+ * string with the report discarded, and a parser reading it sees no summary
+ * line and concludes the target could not be measured - which turns "leaks
+ * found" into "nothing measured", the exact inversion the tool exists to avoid.
+ * Here the command's own output is returned whatever the status, and the
+ * caller decides what it means.
+ */
+function runCapture(cmd, opts = {}) {
+  try {
+    return execSync(cmd, { encoding: "utf-8", timeout: 30000, ...opts }).trim();
+  } catch (e) {
+    const printed = `${e.stdout || ""}${e.stderr || ""}`.trim();
+    return printed || `${ERROR_PREFIX}${truncateError(e.message)}`;
+  }
+}
+
 // Async twin of run() for tools that hold the child for minutes: execSync would
 // block the event loop, leaving the server unable to answer any other request
 // (or a cancellation) for the whole build. Same contract: trimmed stdout on
@@ -337,8 +357,9 @@ const IOS_TOOLS = [
   { name: "ios_testflight_validate", description: "Run Apple's own pre-submission validation on an .ipa via `xcrun altool --validate-app`, then map returned ITMS error codes onto the App Store rule each one implies. This is the authoritative gate: unlike the static ios_app_store_audit it can catch an unregistered bundle ID, a profile that does not match the App Store Connect app record, a version+build pair already used, and entitlements not provisioned for the app ID. Auth is a 3-tier chain: ASC API key (api_key_id + api_issuer_id), else Apple ID + app-specific password referenced indirectly through a keychain item or env var (never passed by value), else the gate returns verdict SKIPPED with a reason. SKIPPED is not a pass - it means Apple was never asked. Set list_providers=true for a pre-flight that reports which teams the credentials can deliver for (needed when a corporate Apple ID belongs to several).", inputSchema: { type: "object", properties: { ipa_path: { type: "string", description: "Absolute path to the .ipa" }, platform: { type: "string", description: "ios (default) | appletvos | visionos | macos" }, api_key_id: { type: "string", description: "App Store Connect API key ID (tier 1)" }, api_issuer_id: { type: "string", description: "App Store Connect issuer ID (tier 1)" }, p8_path: { type: "string", description: "Explicit path to AuthKey_<id>.p8; otherwise altool's search dirs are used" }, apple_id: { type: "string", description: "Apple ID (tier 2)" }, keychain_item: { type: "string", description: "Keychain item holding the app-specific password (tier 2, preferred)" }, password_env_var: { type: "string", description: "Env var holding the app-specific password (tier 2 fallback)" }, provider_public_id: { type: "string", description: "Required when the account belongs to multiple providers" }, list_providers: { type: "boolean", description: "Pre-flight only: list deliverable providers and return" }, timeout_sec: { type: "number", description: "Default 900" } }, required: [] } },
   { name: "ios_app_store_audit", description: "Deep App Store Review compliance audit for .xcarchive bundles. 18-rule catalog covering privacy manifest, code signing, embedded SDKs, entitlements, asset hygiene, IPv6 compliance, debug-tool leak detection, Swift ABI compatibility, SDK floor (ITMS-90725), and more. Returns structured JSON with severity-ranked violations and ITMS error code mappings. Replaces ios_archive_audit (deprecated). Pass rules='core' for the 6 baseline checks (code-signing, entitlements, info-plist, privacy-manifest, binary-size, sdk-floor); 'all'|'deep' for the full 18-rule scan; CSV like 'binary-size,ipv6-compliance' for an explicit subset.", inputSchema: { type: "object", properties: { archive_path: { type: "string", description: "Absolute path to the .xcarchive bundle" }, rules: { type: "string", description: "'all' (default) | 'core' | 'deep' | comma-separated ruleIDs" } }, required: ["archive_path"] } },
   { name: "ios_xcodebuild", description: "Build / test / clean an Xcode project with progressive disclosure. Returns one-line summary plus xcresult ID; drill in via ios_xcresult. Token-efficient - full log stays out of context unless requested.", inputSchema: { type: "object", properties: { project: { type: "string", description: "Path to .xcodeproj (mutually exclusive with workspace)" }, workspace: { type: "string", description: "Path to .xcworkspace (mutually exclusive with project)" }, scheme: { type: "string" }, configuration: { type: "string", description: "Debug / Release (default: Release)" }, destination: { type: "string", description: "Xcode destination string. Default: generic iOS Simulator" }, action: { type: "string", enum: ["build", "test", "clean", "archive", "clean-build"], description: "Default: build" }, derived_data_path: { type: "string" }, extra_args: { type: "string", description: "Additional raw xcodebuild args appended verbatim" }, timeout_sec: { type: "number", description: "Build timeout in seconds (default 600)" } }, required: ["scheme"] } },
-  { name: "ios_xcresult", description: "Drill into a previous ios_xcodebuild result by xcresult ID. Modes: summary (counts), errors (file:line + message), warnings, log (last N lines), tests (failed). Use this instead of dumping the whole build log into context.", inputSchema: { type: "object", properties: { id: { type: "string", description: "xcresult ID returned by ios_xcodebuild" }, mode: { type: "string", enum: ["summary", "errors", "warnings", "log", "tests"], description: "Default: summary" }, log_lines: { type: "number", description: "Lines of raw log to return when mode=log (default 200)" } }, required: ["id"] } },
+  { name: "ios_xcresult", description: "Drill into a previous ios_xcodebuild result by xcresult ID. Modes: summary (counts), errors (file:line + message), warnings, log (last N lines), tests (failed), metrics (XCTMetric performance results as JSON). Use this instead of dumping the whole build log into context.", inputSchema: { type: "object", properties: { id: { type: "string", description: "xcresult ID returned by ios_xcodebuild" }, mode: { type: "string", enum: ["summary", "errors", "warnings", "log", "tests", "metrics"], description: "Default: summary" }, log_lines: { type: "number", description: "Lines of raw log to return when mode=log (default 200)" }, test_id: { type: "string", description: "mode=metrics only: scope to one test case or suite instead of every measured test" } }, required: ["id"] } },
   { name: "ios_visual_diff", description: "Compare two PNG screenshots. Returns JSON with diff_pct, pass/fail vs threshold, and an optional diff image. Use for snapshot regression checks across light/dark, locale, dynamic type variants.", inputSchema: { type: "object", properties: { baseline: { type: "string", description: "Path to baseline PNG" }, current: { type: "string", description: "Path to current PNG" }, threshold: { type: "number", description: "Per-pixel color threshold 0..1 (default 0.1, lower = stricter)" }, max_diff_pct: { type: "number", description: "Fail if diff exceeds this percent (default 1.0)" }, output: { type: "string", description: "Path to write diff PNG (optional)" } }, required: ["baseline", "current"] } },
+  { name: "ios_leaks", description: "Look for leaked memory in a running simulator (or host) process with /usr/bin/leaks. mode=snapshot reports the current leak count and bytes; mode=diff reports only leaks new since a saved memory graph, which is the shape a regression gate wants. Reports measurable:false when the target lacks get-task-allow rather than reporting it as clean - leaks exits 0 in that case, so an unmeasurable target and a clean one are indistinguishable by exit status. Debug builds are debuggable; Apple-signed apps are not.", inputSchema: { type: "object", properties: { pid: { type: "number", description: "Process id. Either this or bundle_id." }, bundle_id: { type: "string", description: "Bundle id of an app running on the booted simulator; its pid is resolved for you." }, device_id: { type: "string" }, mode: { type: "string", enum: ["snapshot", "diff"], description: "Default: snapshot" }, baseline_graph: { type: "string", description: "mode=diff: path to the memory graph saved by an earlier call" }, output_graph: { type: "string", description: "Save a memory graph here to use as a later baseline" } }, required: [] } },
   { name: "ios_list_crashes", description: "List recent crash reports from the host's ~/Library/Logs/DiagnosticReports - where simulator app crashes land. Filter by process name, bound by age and count.", inputSchema: { type: "object", properties: { app: { type: "string", description: "Only reports whose file name (the crashed process) contains this substring" }, since_min: { type: "number", description: "Only reports newer than this many minutes" }, limit: { type: "number", description: "Max reports returned, newest first (default 20)" } } } },
 ];
 
@@ -731,6 +752,22 @@ async function handleIOS(name, args, ctx = {}) {
         const warns = (raw.match(/^.*warning:.*$/gim) || []).map(l => l.trim());
         return JSON.stringify({ id, count: warns.length, warnings: warns }, null, 2);
       }
+      if (mode === "metrics") {
+        // Performance results live only inside the .xcresult - there is no line
+        // in the text log to fall back to - so a missing bundle is an error, not
+        // an empty measurement. XCTMetric results land here only when the tests
+        // were built with performance diagnostics enabled.
+        if (!existsSync(xcresultPath)) {
+          return `ERROR: no .xcresult bundle for ${id} at ${xcresultPath}; performance metrics exist only in the bundle, not in the build log`;
+        }
+        const scope = args.test_id ? ` --test-id ${shq(args.test_id)}` : "";
+        const out = run(
+          `xcrun xcresulttool get test-results metrics --path ${shq(xcresultPath)}${scope} --compact 2>&1`,
+          { timeout: 20000 },
+        );
+        if (!out || out.startsWith("ERROR")) return out || `ERROR: xcresulttool returned nothing for ${id}`;
+        return out;
+      }
       if (mode === "tests") {
         if (existsSync(xcresultPath)) {
           const out = run(`xcrun xcresulttool get test-results tests --path ${shq(xcresultPath)} --format json 2>/dev/null`, { timeout: 20000 });
@@ -773,6 +810,42 @@ async function handleIOS(name, args, ctx = {}) {
       const report = JSON.stringify({ passed, diff_pct: parseFloat(diffPct.toFixed(4)), diff_pixels: diffPixels, total_pixels: total, threshold, max_diff_pct: maxPct, baseline: args.baseline, current: args.current, diff_image: diffImagePath }, null, 2);
       return diffImagePath ? fileResult(report, diffImagePath) : report;
     }
+    case "ios_leaks": {
+      let pid = Number.isInteger(args.pid) ? args.pid : null;
+      if (!pid && args.bundle_id) {
+        const d = iosDevice(args.device_id);
+        const out = run(`xcrun simctl spawn ${d} launchctl list 2>/dev/null | grep ${shq(sanitizeId(args.bundle_id))}`);
+        const m = out && out.match(/^(\d+)\s/m);
+        if (!m) return `ERROR: no running process for ${args.bundle_id} on the booted simulator; launch it first`;
+        pid = parseInt(m[1], 10);
+      }
+      if (!pid) return "ERROR: pass pid or bundle_id";
+
+      const mode = args.mode || "snapshot";
+      const graphOut = args.output_graph ? ` --outputGraph=${shq(args.output_graph)}` : "";
+      if (mode === "diff") {
+        if (!args.baseline_graph) return "ERROR: mode=diff needs baseline_graph, the memory graph saved by an earlier call";
+        if (!existsSync(args.baseline_graph)) return `ERROR: baseline graph not found at ${args.baseline_graph}`;
+      }
+      const diffArg = mode === "diff" ? ` --diffFrom=${shq(args.baseline_graph)}` : "";
+      // leaks exits 1 when it FINDS leaks, so a non-zero status is a result and
+      // not a failure. Everything below is decided from the parsed output.
+      const raw = runCapture(`leaks ${pid}${diffArg}${graphOut} 2>&1`, { timeout: 120000 });
+      const parsed = parseLeaksOutput(raw);
+      return JSON.stringify({
+        pid,
+        mode,
+        measurable: parsed.measurable,
+        reason: parsed.reason,
+        leak_count: parsed.leakCount,
+        leaked_bytes: parsed.leakedBytes,
+        nodes_malloced: parsed.nodesMalloced,
+        malloced_kb: parsed.mallocedKb,
+        root_leaks: parsed.roots.slice(0, 50),
+        root_leaks_truncated: parsed.roots.length > 50 ? parsed.roots.length - 50 : 0,
+        graph_saved_to: args.output_graph || null,
+      }, null, 2);
+    }
     case "ios_list_crashes": {
       const dir = join(homedir(), "Library", "Logs", "DiagnosticReports");
       if (!existsSync(dir)) return JSON.stringify({ dir, count: 0, reports: [] }, null, 2);
@@ -832,6 +905,7 @@ const ANDROID_TOOLS = [
   { name: "android_accessibility_audit", description: "Audit Android app accessibility: missing contentDescription, small touch targets (<48dp), missing resource-id. Use scope to filter by resource-id prefix.", inputSchema: { type: "object", properties: { device_id: { type: "string" }, scope: { type: "string", description: "Filter: only audit elements whose resource-id contains this prefix (e.g. 'login_', 'com.example:id/login_'). Omit to audit all." } } } },
   { name: "android_launch_time", description: "Measure Android app launch time: force-stops the package, starts it with am start -W, and reports TotalTime/WaitTime in ms plus the platform's own LaunchState (COLD/WARM/HOT). Below Android 10 there is no LaunchState and cold_start is null rather than assumed.", inputSchema: { type: "object", properties: { package_name: { type: "string" }, activity: { type: "string" }, device_id: { type: "string" } }, required: ["package_name"] } },
   { name: "android_apk_audit", description: "Audit APK/AAB for Play Store compliance: debug flag, target SDK, permissions, signing, ProGuard", inputSchema: { type: "object", properties: { apk_path: { type: "string", description: "Path to .apk file" } }, required: ["apk_path"] } },
+  { name: "android_meminfo", description: "Read an Android app's memory via `adb shell dumpsys meminfo` (KB, no root). mode=snapshot returns the App Summary rows and totals; mode=diff compares two snapshots so growth across the same flow is visible, which is the signal a leak actually produces - a single absolute number says almost nothing. Reports measurable:false when the package has no running process rather than returning zeros.", inputSchema: { type: "object", properties: { package_name: { type: "string" }, device_id: { type: "string" }, mode: { type: "string", enum: ["snapshot", "diff"], description: "Default: snapshot" }, baseline_json: { type: "string", description: "mode=diff: the JSON returned by an earlier snapshot call" } }, required: ["package_name"] } },
   { name: "android_list_crashes", description: "Dump the Android crash log buffer (`adb logcat -b crash -d`), tail-bounded. Empty output means no crashes since the buffer was last cleared.", inputSchema: { type: "object", properties: { lines: { type: "number", description: "Max lines returned, from the end (default 200)" }, device_id: { type: "string" } } } },
   { name: "android_set_orientation", description: "Rotate the Android screen to portrait or landscape. Disables accelerometer rotation and pins user_rotation, so the device stays put until rotation is re-enabled. Accounts for the device's natural orientation (detected via wm size), so landscape-natural tablets rotate correctly too. No iOS counterpart: simctl exposes no rotation lever.", inputSchema: { type: "object", properties: { orientation: { type: "string", enum: ["portrait", "landscape"] }, device_id: { type: "string" } }, required: ["orientation"] } },
 ];
@@ -1081,6 +1155,33 @@ async function handleAndroid(name, args, ctx = {}) {
       const warnings = findings.filter(f => f.status === "warning").length;
       return JSON.stringify({ apk: p, summary: { critical, warnings, passed: findings.filter(f => f.status === "pass").length, total_checks: findings.length }, verdict: critical > 0 ? "FAIL - critical issues must be fixed" : warnings > 0 ? "WARN - review warnings" : "PASS - ready for Play Store", findings }, null, 2);
     }
+    case "android_meminfo": {
+      const pkg = sanitizeId(args.package_name);
+      const raw = runCapture(`adb ${df} shell dumpsys meminfo ${pkg} 2>&1`, { timeout: 30000 });
+      const snapshot = parseMeminfoOutput(raw);
+      const mode = args.mode || "snapshot";
+      if (mode === "diff") {
+        if (!args.baseline_json) return "ERROR: mode=diff needs baseline_json, the JSON returned by an earlier snapshot call";
+        let before;
+        try {
+          before = JSON.parse(args.baseline_json);
+        } catch {
+          return "ERROR: baseline_json is not valid JSON";
+        }
+        const d = diffMeminfo(before, snapshot);
+        return JSON.stringify({ package: args.package_name, mode, comparable: d.comparable, reason: d.reason, delta_kb: d.deltaKb, total_pss_delta_kb: d.totalPssDeltaKb, after: snapshot }, null, 2);
+      }
+      return JSON.stringify({
+        package: args.package_name,
+        mode,
+        measurable: snapshot.measurable,
+        reason: snapshot.reason,
+        pss_kb: snapshot.pss,
+        total_pss_kb: snapshot.totalPssKb,
+        total_rss_kb: snapshot.totalRssKb,
+        total_swap_kb: snapshot.totalSwapKb,
+      }, null, 2);
+    }
     case "android_list_crashes": {
       const lines = args.lines !== undefined ? num(args.lines, "lines") : 200;
       const out = run(`adb ${df} logcat -b crash -d | tail -${lines}`);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mmerterden/multi-agent-toolkit-mcp",
-  "version": "3.1.1",
-  "description": "MCP server for iOS Simulator, Android Emulator and headless web control. 84 tools: device automation (tap/swipe/type), accessibility audits, visual diff, crash logs, App Store / Play Store pre-submission compliance. Runs standalone over stdio with any MCP client.",
+  "version": "3.3.0",
+  "description": "MCP server for iOS Simulator, Android Emulator and headless web control. 86 tools: device automation (tap/swipe/type), accessibility audits, visual diff, crash logs, App Store / Play Store pre-submission compliance. Runs standalone over stdio with any MCP client.",
   "type": "module",
   "main": "index.js",
   "bin": {
@@ -10,7 +10,7 @@
   },
   "scripts": {
     "start": "node index.js",
-    "test": "node --test tools/design-check/__tests__/design-check.test.mjs tools/design-check/__tests__/plan-determinism.test.mjs tools/ios-app-store-audit/__tests__/app-store-audit.test.mjs tools/ios-testflight/__tests__/testflight.test.mjs tools/ui-inspect/__tests__/ui-inspect.test.mjs tools/crash-logs/__tests__/crash-logs.test.mjs tools/launch-time/__tests__/launch-time.test.mjs tools/offload/__tests__/offload.test.mjs __tests__/server-tools.test.mjs __tests__/injection.test.mjs",
+    "test": "node --test tools/design-check/__tests__/design-check.test.mjs tools/design-check/__tests__/plan-determinism.test.mjs tools/ios-app-store-audit/__tests__/app-store-audit.test.mjs tools/ios-testflight/__tests__/testflight.test.mjs tools/ui-inspect/__tests__/ui-inspect.test.mjs tools/crash-logs/__tests__/crash-logs.test.mjs tools/launch-time/__tests__/launch-time.test.mjs tools/memory/__tests__/memory.test.mjs tools/offload/__tests__/offload.test.mjs __tests__/server-tools.test.mjs __tests__/injection.test.mjs",
     "gates": "bash scripts/gates.sh"
   },
   "keywords": [

package/tools/memory/index.js

@@ -0,0 +1,152 @@
+/**
+ * memory - parsers for `leaks` (iOS/macOS) and `dumpsys meminfo` (Android).
+ *
+ * Lives here rather than inline in index.js because index.js connects its
+ * transport at import time and cannot be loaded by a test.
+ */
+
+/**
+ * Parse `leaks <pid>` output.
+ *
+ * The exit code alone cannot be trusted, verified against leaks on macOS:
+ *
+ *   no leaks            exit 0, summary "Process N: 0 leaks for 0 total leaked bytes."
+ *   leaks found         exit 1, summary "Process N: 198 leaks for 811008 total leaked bytes."
+ *   target not debuggable  exit 0, a "not debuggable" line, and NO summary at all
+ *
+ * So exit 1 is a finding rather than a failure, and exit 0 is either a clean
+ * run or a run that never measured anything. A wrapper that reads the exit code
+ * reports the third case as clean, which is the worst possible answer: a green
+ * result from a process nothing inspected. `measurable` is therefore derived
+ * from the presence of the summary line, never from the exit status.
+ *
+ * A process is not debuggable when it lacks the get-task-allow entitlement.
+ * Debug builds carry it; Apple's own signed apps do not.
+ *
+ * @param {string} raw - stdout+stderr of `leaks`
+ * @returns {{measurable: boolean, reason: string|null, leakCount: number|null,
+ *            leakedBytes: number|null, nodesMalloced: number|null,
+ *            mallocedKb: number|null, roots: string[]}}
+ */
+export function parseLeaksOutput(raw) {
+  const text = typeof raw === "string" ? raw : "";
+
+  const summary = text.match(/Process\s+\d+:\s+(\d+)\s+leaks?\s+for\s+(\d+)\s+total leaked bytes/);
+  const malloced = text.match(/Process\s+\d+:\s+(\d+)\s+nodes malloced for\s+(\d+)\s+KB/);
+
+  if (!summary) {
+    // Order matters: report the specific reason when leaks named one, so the
+    // caller can tell "I could not look" from "I looked and found nothing".
+    const notDebuggable = /is not debuggable/.test(text);
+    const noSuchProcess = /(No such process|Cannot examine process|does not exist)/i.test(text);
+    return {
+      measurable: false,
+      reason: notDebuggable
+        ? "target is not debuggable (no get-task-allow entitlement); build and run a Debug configuration"
+        : noSuchProcess
+          ? "no such process"
+          : "leaks produced no summary line",
+      leakCount: null,
+      leakedBytes: null,
+      nodesMalloced: malloced ? parseInt(malloced[1], 10) : null,
+      mallocedKb: malloced ? parseInt(malloced[2], 10) : null,
+      roots: [],
+    };
+  }
+
+  const roots = (text.match(/^\s*\d+\s+\([^)]*\)\s+ROOT LEAK:.*$/gm) || []).map((l) => l.trim());
+
+  return {
+    measurable: true,
+    reason: null,
+    leakCount: parseInt(summary[1], 10),
+    leakedBytes: parseInt(summary[2], 10),
+    nodesMalloced: malloced ? parseInt(malloced[1], 10) : null,
+    mallocedKb: malloced ? parseInt(malloced[2], 10) : null,
+    roots,
+  };
+}
+
+const MEMINFO_ROWS = [
+  ["Java Heap", "javaHeapKb"],
+  ["Native Heap", "nativeHeapKb"],
+  ["Code", "codeKb"],
+  ["Stack", "stackKb"],
+  ["Graphics", "graphicsKb"],
+  ["Private Other", "privateOtherKb"],
+  ["System", "systemKb"],
+];
+
+/**
+ * Parse the App Summary block of `adb shell dumpsys meminfo <package>`.
+ *
+ * Every number in meminfo is KB. The App Summary block is the part worth
+ * reading for a leak signal: growth in Java Heap or Native Heap across two
+ * snapshots of the same flow is the shape a leak takes, where a single
+ * absolute number says almost nothing.
+ *
+ * NOT VERIFIED ON A DEVICE. Written against the documented output shape on a
+ * machine with no adb and no emulator, unlike the leaks parser above, which was
+ * checked against live output. The tests below pin the shape this expects; the
+ * first real run is the measurement.
+ *
+ * @param {string} raw
+ * @returns {{measurable: boolean, reason: string|null, pss: object, totalPssKb: number|null,
+ *            totalRssKb: number|null, totalSwapKb: number|null}}
+ */
+export function parseMeminfoOutput(raw) {
+  const text = typeof raw === "string" ? raw : "";
+
+  if (/No process found for/i.test(text)) {
+    return { measurable: false, reason: "no running process for that package", pss: {}, totalPssKb: null, totalRssKb: null, totalSwapKb: null };
+  }
+
+  const pss = {};
+  let found = 0;
+  for (const [label, key] of MEMINFO_ROWS) {
+    const m = text.match(new RegExp(`^\\s*${label}:\\s+(\\d+)`, "mi"));
+    if (m) {
+      pss[key] = parseInt(m[1], 10);
+      found++;
+    }
+  }
+
+  const num = (re) => {
+    const m = text.match(re);
+    return m ? parseInt(m[1], 10) : null;
+  };
+  const totalPssKb = num(/TOTAL PSS:\s*(\d+)/i);
+  const totalRssKb = num(/TOTAL RSS:\s*(\d+)/i);
+  const totalSwapKb = num(/TOTAL SWAP \(KB\):\s*(\d+)/i);
+
+  if (found === 0 && totalPssKb === null) {
+    return { measurable: false, reason: "no App Summary block in the dumpsys output", pss: {}, totalPssKb: null, totalRssKb: null, totalSwapKb: null };
+  }
+
+  return { measurable: true, reason: null, pss, totalPssKb, totalRssKb, totalSwapKb };
+}
+
+/**
+ * Difference between two meminfo snapshots, in KB.
+ *
+ * Only keys present in both are compared; a key missing from either side is
+ * absent from the result rather than counted as zero growth.
+ *
+ * @param {object} before - parseMeminfoOutput result
+ * @param {object} after - parseMeminfoOutput result
+ * @returns {{comparable: boolean, reason: string|null, deltaKb: object, totalPssDeltaKb: number|null}}
+ */
+export function diffMeminfo(before, after) {
+  if (!before?.measurable || !after?.measurable) {
+    return { comparable: false, reason: "one of the snapshots was not measurable", deltaKb: {}, totalPssDeltaKb: null };
+  }
+  const deltaKb = {};
+  for (const key of Object.keys(after.pss)) {
+    if (typeof before.pss[key] === "number") deltaKb[key] = after.pss[key] - before.pss[key];
+  }
+  const totalPssDeltaKb =
+    typeof before.totalPssKb === "number" && typeof after.totalPssKb === "number"
+      ? after.totalPssKb - before.totalPssKb
+      : null;
+  return { comparable: true, reason: null, deltaKb, totalPssDeltaKb };
+}