@opentabs-dev/mcp-server 0.0.19

package/dist/browser-tools/analyze-site/detect-globals.js

@@ -0,0 +1,42 @@
+/**
+ * Window globals detection module for the site analyzer.
+ *
+ * Pure analysis function: takes the result of scanning window.* in the
+ * page context and returns structured information about non-standard
+ * globals. Does not call browser tools directly — the orchestrator
+ * collects data and passes it here.
+ */
+// ---------------------------------------------------------------------------
+// Auth-related key detection
+// ---------------------------------------------------------------------------
+const AUTH_KEY_PATTERN = /session|token|auth|jwt|csrf|user|login|credential|account|profile/i;
+/**
+ * Returns true if any of the given keys match auth-related patterns.
+ */
+const containsAuthKeys = (keys) => {
+    if (!keys)
+        return false;
+    return keys.some(key => AUTH_KEY_PATTERN.test(key));
+};
+// ---------------------------------------------------------------------------
+// Detection logic
+// ---------------------------------------------------------------------------
+/**
+ * Analyze collected window globals and flag auth-related data.
+ *
+ * This is a pure function: takes data in, returns structured results.
+ * The heavy lifting (enumerating window properties, filtering browser
+ * builtins, extracting top-level keys) happens in a page script run by
+ * the orchestrator. This module classifies the results.
+ */
+const detectGlobals = (input) => {
+    const globals = input.globals.map(g => ({
+        path: g.path,
+        type: g.type,
+        hasAuthData: containsAuthKeys(g.topLevelKeys),
+        topLevelKeys: g.topLevelKeys,
+    }));
+    return { globals };
+};
+export { detectGlobals };
+//# sourceMappingURL=detect-globals.js.map

package/dist/browser-tools/analyze-site/detect-globals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-globals.js","sourceRoot":"","sources":["../../../src/browser-tools/analyze-site/detect-globals.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmCH,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,oEAAoE,CAAC;AAE9F;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,IAA0B,EAAW,EAAE;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,CAAC,KAA4B,EAAmB,EAAE;IACtE,MAAM,OAAO,GAAiB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;QAC7C,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC,CAAC;AAEF,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/browser-tools/analyze-site/detect-storage.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Storage analysis module for the site analyzer.
+ *
+ * Pure analysis function: takes pre-collected storage key names from page
+ * scripts and returns structured information about cookies, localStorage,
+ * and sessionStorage usage. Does not read storage values (security) —
+ * only reports key names with an auth-related flag.
+ */
+/** Data collected by the orchestrator and passed to detectStorage. */
+interface StorageDetectionInput {
+    /** Cookie names parsed from document.cookie. */
+    cookieNames: string[];
+    /** Keys from Object.keys(localStorage). */
+    localStorageKeys: string[];
+    /** Keys from Object.keys(sessionStorage). */
+    sessionStorageKeys: string[];
+}
+/** A storage key name with an auth-relevance flag based on pattern matching. */
+interface StorageKeyInfo {
+    name: string;
+    isAuth: boolean;
+}
+/** Result of storage analysis: cookie, localStorage, and sessionStorage keys with auth flags. */
+interface StorageAnalysis {
+    cookies: StorageKeyInfo[];
+    localStorage: StorageKeyInfo[];
+    sessionStorage: StorageKeyInfo[];
+}
+/**
+ * Analyze collected storage key names and flag auth-related entries.
+ *
+ * This is a pure function: takes key names in, returns structured results.
+ * Storage values are never read — only key names are analyzed for
+ * auth-related patterns.
+ */
+declare const detectStorage: (input: StorageDetectionInput) => StorageAnalysis;
+export { detectStorage };
+export type { StorageDetectionInput, StorageAnalysis, StorageKeyInfo };
+//# sourceMappingURL=detect-storage.d.ts.map

package/dist/browser-tools/analyze-site/detect-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-storage.d.ts","sourceRoot":"","sources":["../../../src/browser-tools/analyze-site/detect-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,sEAAsE;AACtE,UAAU,qBAAqB;IAC7B,gDAAgD;IAChD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,2CAA2C;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,6CAA6C;IAC7C,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B;AAMD,gFAAgF;AAChF,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,iGAAiG;AACjG,UAAU,eAAe;IACvB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,cAAc,EAAE,cAAc,EAAE,CAAC;CAClC;AAkBD;;;;;;GAMG;AACH,QAAA,MAAM,aAAa,GAAI,OAAO,qBAAqB,KAAG,eAIpD,CAAC;AAEH,OAAO,EAAE,aAAa,EAAE,CAAC;AACzB,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC"}

package/dist/browser-tools/analyze-site/detect-storage.js

@@ -0,0 +1,34 @@
+/**
+ * Storage analysis module for the site analyzer.
+ *
+ * Pure analysis function: takes pre-collected storage key names from page
+ * scripts and returns structured information about cookies, localStorage,
+ * and sessionStorage usage. Does not read storage values (security) —
+ * only reports key names with an auth-related flag.
+ */
+// ---------------------------------------------------------------------------
+// Auth-related key pattern
+// ---------------------------------------------------------------------------
+const AUTH_KEY_PATTERN = /session|token|auth|jwt|csrf|user|login|credential|sid|key|secret/i;
+// ---------------------------------------------------------------------------
+// Detection logic
+// ---------------------------------------------------------------------------
+/** Classify a storage key name with an isAuth flag. */
+const classifyKey = (name) => ({
+    name,
+    isAuth: AUTH_KEY_PATTERN.test(name),
+});
+/**
+ * Analyze collected storage key names and flag auth-related entries.
+ *
+ * This is a pure function: takes key names in, returns structured results.
+ * Storage values are never read — only key names are analyzed for
+ * auth-related patterns.
+ */
+const detectStorage = (input) => ({
+    cookies: input.cookieNames.map(classifyKey),
+    localStorage: input.localStorageKeys.map(classifyKey),
+    sessionStorage: input.sessionStorageKeys.map(classifyKey),
+});
+export { detectStorage };
+//# sourceMappingURL=detect-storage.js.map

package/dist/browser-tools/analyze-site/detect-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-storage.js","sourceRoot":"","sources":["../../../src/browser-tools/analyze-site/detect-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiCH,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,mEAAmE,CAAC;AAE7F,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,uDAAuD;AACvD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAkB,EAAE,CAAC,CAAC;IACrD,IAAI;IACJ,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;CACpC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,CAAC,KAA4B,EAAmB,EAAE,CAAC,CAAC;IACxE,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC;IAC3C,YAAY,EAAE,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC;IACrD,cAAc,EAAE,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC;CAC1D,CAAC,CAAC;AAEH,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/browser-tools/analyze-site/index.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Site analyzer orchestrator.
+ *
+ * Collects data from the page using browser tool handlers (open tab, network
+ * capture, execute script, get cookies, get storage, get network requests),
+ * then passes the collected data through each detection module to produce a
+ * comprehensive site analysis report.
+ */
+import type { ApiAnalysis } from './detect-apis.js';
+import type { AuthAnalysis } from './detect-auth.js';
+import type { DomAnalysis } from './detect-dom.js';
+import type { FrameworkAnalysis } from './detect-framework.js';
+import type { GlobalsAnalysis } from './detect-globals.js';
+import type { StorageAnalysis } from './detect-storage.js';
+import type { ServerState } from '../../state.js';
+/** A concrete plugin tool idea derived from detected APIs, forms, or endpoints. */
+interface ToolSuggestion {
+    toolName: string;
+    description: string;
+    approach: string;
+    complexity: 'low' | 'medium' | 'high';
+}
+/** Comprehensive site analysis report combining all detection module results and tool suggestions. */
+interface SiteAnalysis {
+    url: string;
+    title: string;
+    auth: AuthAnalysis;
+    apis: ApiAnalysis;
+    framework: FrameworkAnalysis;
+    globals: GlobalsAnalysis;
+    dom: DomAnalysis;
+    storage: StorageAnalysis;
+    suggestions: ToolSuggestion[];
+}
+/**
+ * Orchestrate a comprehensive site analysis.
+ *
+ * Flow:
+ * 1. Open tab (or reuse) and navigate to URL
+ * 2. Enable network capture
+ * 3. Wait for API calls (configurable wait time)
+ * 4. Run detection scripts in page context (parallel where possible)
+ * 5. Get captured network requests
+ * 6. Disable network capture
+ * 7. Pass collected data through detection modules
+ * 8. Generate tool suggestions
+ * 9. Return structured result
+ */
+declare const analyzeSite: (state: ServerState, url: string, waitSeconds?: number) => Promise<SiteAnalysis>;
+export { analyzeSite };
+export type { SiteAnalysis, ToolSuggestion };
+//# sourceMappingURL=index.d.ts.map

package/dist/browser-tools/analyze-site/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/browser-tools/analyze-site/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,OAAO,KAAK,EAAE,WAAW,EAAe,MAAM,kBAAkB,CAAC;AACjE,OAAO,KAAK,EACV,YAAY,EAMb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,WAAW,EAAsC,MAAM,iBAAiB,CAAC;AACvF,OAAO,KAAK,EAAE,iBAAiB,EAAkB,MAAM,uBAAuB,CAAC;AAC/E,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAMlD,mFAAmF;AACnF,UAAU,cAAc;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACvC;AAED,sGAAsG;AACtG,UAAU,YAAY;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,EAAE,eAAe,CAAC;IACzB,GAAG,EAAE,WAAW,CAAC;IACjB,OAAO,EAAE,eAAe,CAAC;IACzB,WAAW,EAAE,cAAc,EAAE,CAAC;CAC/B;AAkuBD;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,WAAW,GACf,OAAO,WAAW,EAClB,KAAK,MAAM,EACX,cAAa,MAA6B,KACzC,OAAO,CAAC,YAAY,CAuHtB,CAAC;AAEF,OAAO,EAAE,WAAW,EAAE,CAAC;AACvB,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC"}