@mobilenext/mobile-mcp 0.0.44 → 0.0.45

package/lib/android.js

@@ -42,6 +42,7 @@ const node_child_process_1 = require("node:child_process");
 const node_fs_1 = require("node:fs");
 const xml = __importStar(require("fast-xml-parser"));
 const robot_1 = require("./robot");
+const utils_1 = require("./utils");
 const getAdbPath = () => {
     const exeName = process.env.platform === "win32" ? "adb.exe" : "adb";
     if (process.env.ANDROID_HOME) {
@@ -137,6 +138,7 @@ class AndroidRobot {
             .map(line => line.substring("package:".length));
     }
     async launchApp(packageName) {
+        (0, utils_1.validatePackageName)(packageName);
         try {
             this.silentAdb("shell", "monkey", "-p", packageName, "-c", "android.intent.category.LAUNCHER", "1");
         }
@@ -326,6 +328,7 @@ class AndroidRobot {
         return elements;
     }
     async terminateApp(packageName) {
+        (0, utils_1.validatePackageName)(packageName);
         this.adb("shell", "am", "force-stop", packageName);
     }
     async installApp(path) {
@@ -351,7 +354,7 @@ class AndroidRobot {
         }
     }
     async openUrl(url) {
-        this.adb("shell", "am", "start", "-a", "android.intent.action.VIEW", "-d", url);
+        this.adb("shell", "am", "start", "-a", "android.intent.action.VIEW", "-d", this.escapeShellText(url));
     }
     isAscii(text) {
         return /^[\x00-\x7F]*$/.test(text);

package/lib/ios.js

@@ -5,6 +5,7 @@ const node_net_1 = require("node:net");
 const node_child_process_1 = require("node:child_process");
 const webdriver_agent_1 = require("./webdriver-agent");
 const robot_1 = require("./robot");
+const utils_1 = require("./utils");
 const WDA_PORT = 8100;
 const IOS_TUNNEL_PORT = 60105;
 const getGoIosPath = () => {
@@ -94,10 +95,12 @@ class IosRobot {
         });
     }
     async launchApp(packageName) {
+        (0, utils_1.validatePackageName)(packageName);
         await this.assertTunnelRunning();
         await this.ios("launch", packageName);
     }
     async terminateApp(packageName) {
+        (0, utils_1.validatePackageName)(packageName);
         await this.assertTunnelRunning();
         await this.ios("kill", packageName);
     }

package/lib/iphone-simulator.js

@@ -8,6 +8,7 @@ const node_path_1 = require("node:path");
 const logger_1 = require("./logger");
 const webdriver_agent_1 = require("./webdriver-agent");
 const robot_1 = require("./robot");
+const utils_1 = require("./utils");
 const TIMEOUT = 30000;
 const WDA_PORT = 8100;
 const MAX_BUFFER_SIZE = 1024 * 1024 * 8;
@@ -71,9 +72,11 @@ class Simctl {
         // alternative: this.simctl("openurl", this.simulatorUuid, url);
     }
     async launchApp(packageName) {
+        (0, utils_1.validatePackageName)(packageName);
         this.simctl("launch", this.simulatorUuid, packageName);
     }
     async terminateApp(packageName) {
+        (0, utils_1.validatePackageName)(packageName);
         this.simctl("terminate", this.simulatorUuid, packageName);
     }
     findAppBundle(dir) {

package/lib/server.js

@@ -27,8 +27,6 @@ const createMcpServer = () => {
         name: "mobile-mcp",
         version: (0, exports.getAgentVersion)(),
     });
-    // an empty object to satisfy windsurf
-    const noParams = zod_1.z.object({});
     const getClientName = () => {
         try {
             const clientInfo = server.server.getClientVersion();
@@ -156,9 +154,7 @@ const createMcpServer = () => {
         }
         throw new robot_1.ActionableError(`Device "${deviceId}" not found. Use the mobile_list_available_devices tool to see available devices.`);
     };
-    tool("mobile_list_available_devices", "List Devices", "List all available devices. This includes both physical devices and simulators. If there is more than one device returned, you need to let the user select one of them.", {
-        noParams
-    }, { readOnlyHint: true }, async ({}) => {
+    tool("mobile_list_available_devices", "List Devices", "List all available devices. This includes both physical devices and simulators. If there is more than one device returned, you need to let the user select one of them.", {}, { readOnlyHint: true }, async ({}) => {
         // from today onward, we must have mobilecli working
         ensureMobilecliAvailable();
         const iosManager = new ios_1.IosManager();
@@ -215,9 +211,7 @@ const createMcpServer = () => {
         return JSON.stringify(out);
     });
     if (process.env.MOBILEFLEET_ENABLE === "1") {
-        tool("mobile_list_fleet_devices", "List Fleet Devices", "List devices available in the remote fleet", {
-            noParams
-        }, { readOnlyHint: true }, async ({}) => {
+        tool("mobile_list_fleet_devices", "List Fleet Devices", "List devices available in the remote fleet", {}, { readOnlyHint: true }, async ({}) => {
             ensureMobilecliAvailable();
             const result = mobilecli.fleetListDevices();
             return result;

package/lib/utils.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePackageName = validatePackageName;
+const robot_1 = require("./robot");
+function validatePackageName(packageName) {
+    if (!/^[a-zA-Z0-9._]+$/.test(packageName)) {
+        throw new robot_1.ActionableError(`Invalid package name: "${packageName}"`);
+    }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mobilenext/mobile-mcp",
   "mcpName": "io.github.mobile-next/mobile-mcp",
-  "version": "0.0.44",
+  "version": "0.0.45",
   "description": "Mobile MCP",
   "repository": {
     "type": "git",
@@ -28,7 +28,7 @@
     "ajv": "^8.18.0",
     "commander": "14.0.0",
     "express": "5.1.0",
-    "fast-xml-parser": "5.3.7",
+    "fast-xml-parser": "5.3.8",
     "qs": "^6.15.0",
     "zod": "^4.1.13",
     "zod-to-json-schema": "3.25.0"