@opentabs-dev/opentabs-plugin-prescript-test 0.0.1

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+import { OpenTabsPlugin } from '@opentabs-dev/plugin-sdk';
+import type { ToolDefinition } from '@opentabs-dev/plugin-sdk';
+declare class PreScriptTestPlugin extends OpenTabsPlugin {
+    readonly name = "prescript-test";
+    readonly description = "Test plugin for the pre-script feature \u2014 captures bearer tokens at document_start before the page can overwrite window.fetch";
+    readonly displayName = "Pre-Script Test";
+    readonly urlPatterns: string[];
+    readonly tools: ToolDefinition[];
+    isReady(): Promise<boolean>;
+}
+declare const _default: PreScriptTestPlugin;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,cAAM,mBAAoB,SAAQ,cAAc;IAC9C,QAAQ,CAAC,IAAI,oBAAoB;IACjC,QAAQ,CAAC,WAAW,uIAC6G;IACjI,SAAkB,WAAW,qBAAqB;IAClD,QAAQ,CAAC,WAAW,WAAgD;IACpE,QAAQ,CAAC,KAAK,EAAE,cAAc,EAAE,CAAc;IAE/B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;CAG3C;;AAED,wBAAyC"}

package/dist/index.js

@@ -0,0 +1,14 @@
+import { OpenTabsPlugin } from '@opentabs-dev/plugin-sdk';
+import { echoAuth } from './tools/echo-auth.js';
+class PreScriptTestPlugin extends OpenTabsPlugin {
+    name = 'prescript-test';
+    description = 'Test plugin for the pre-script feature — captures bearer tokens at document_start before the page can overwrite window.fetch';
+    displayName = 'Pre-Script Test';
+    urlPatterns = ['http://localhost/*', 'http://127.0.0.1/*'];
+    tools = [echoAuth];
+    async isReady() {
+        return true;
+    }
+}
+export default new PreScriptTestPlugin();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,MAAM,mBAAoB,SAAQ,cAAc;IACrC,IAAI,GAAG,gBAAgB,CAAC;IACxB,WAAW,GAClB,8HAA8H,CAAC;IAC/G,WAAW,GAAG,iBAAiB,CAAC;IACzC,WAAW,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IAC3D,KAAK,GAAqB,CAAC,QAAQ,CAAC,CAAC;IAErC,KAAK,CAAC,OAAO;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,eAAe,IAAI,mBAAmB,EAAE,CAAC"}

package/dist/pre-script.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pre-script.d.ts.map

package/dist/pre-script.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-script.d.ts","sourceRoot":"","sources":["../src/pre-script.ts"],"names":[],"mappings":""}

package/dist/pre-script.iife.js

@@ -0,0 +1,81 @@
+"use strict";
+(() => {
+  // dist/_pre_script_setup_0360980b-b5a6-4be0-9b79-6dab63ed4392.ts
+  if (!globalThis.__openTabs) {
+    globalThis.__openTabs = {};
+  }
+  var _ot = globalThis.__openTabs;
+  if (!_ot.preScript) {
+    _ot.preScript = {};
+  }
+  _ot.preScript["prescript-test"] = {};
+  var _logPrefix = "[opentabs:prescript-test:pre-script]";
+  var _log = {
+    debug: (...args) => {
+      console.debug(_logPrefix, ...args);
+    },
+    info: (...args) => {
+      console.info(_logPrefix, ...args);
+    },
+    warn: (...args) => {
+      console.warn(_logPrefix, ...args);
+    },
+    error: (...args) => {
+      console.error(_logPrefix, ...args);
+    }
+  };
+  _ot._preScriptRunner = (fn) => {
+    delete _ot._preScriptRunner;
+    const ctx = {
+      set(key, value) {
+        _ot.preScript["prescript-test"][key] = value;
+      },
+      log: _log
+    };
+    try {
+      fn(ctx);
+    } catch (e) {
+      console.error(_logPrefix, "pre-script threw:", e);
+    }
+  };
+
+  // node_modules/@opentabs-dev/plugin-sdk/dist/pre-script.js
+  var definePreScript = (fn) => {
+    const ot = globalThis.__openTabs;
+    ot?._preScriptRunner?.(fn);
+  };
+
+  // src/pre-script.ts
+  definePreScript(({ set, log }) => {
+    const g = globalThis;
+    const origFetch = g["fetch"];
+    const patchedFetch = async (input, init) => {
+      const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+      const headers = init?.headers;
+      let bearer;
+      if (headers instanceof Headers) {
+        bearer = headers.get("Authorization") ?? headers.get("authorization") ?? void 0;
+      } else if (Array.isArray(headers)) {
+        for (const entry of headers) {
+          if (entry[0]?.toLowerCase() === "authorization") {
+            bearer = entry[1];
+            break;
+          }
+        }
+      } else if (headers && typeof headers === "object") {
+        const h = headers;
+        bearer = h["Authorization"] ?? h["authorization"];
+      }
+      if (bearer?.startsWith("Bearer ")) {
+        set("authToken", bearer.slice(7));
+        set("authUrl", url);
+        set("capturedAt", Date.now());
+        log.debug(`[prescript-test] captured bearer for ${url}`);
+      }
+      return origFetch(input, init);
+    };
+    g["fetch"] = patchedFetch;
+    log.info("[prescript-test] fetch interceptor installed");
+  });
+})();
+//# sourceMappingURL=pre-script.iife.js.map

package/dist/pre-script.iife.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["_pre_script_setup_0360980b-b5a6-4be0-9b79-6dab63ed4392.ts", "../node_modules/@opentabs-dev/plugin-sdk/src/pre-script.ts", "../src/pre-script.ts"],
+  "sourcesContent": ["declare global {\n  var __openTabs: {\n    _preScriptRunner?: (fn: (ctx: {\n      set(key: string, value: unknown): void;\n      log: {\n        debug(...args: unknown[]): void;\n        info(...args: unknown[]): void;\n        warn(...args: unknown[]): void;\n        error(...args: unknown[]): void;\n      };\n    }) => void) => void;\n    preScript?: Record<string, Record<string, unknown>>;\n  } | undefined;\n}\n\nif (!globalThis.__openTabs) {\n  (globalThis as Record<string, unknown>).__openTabs = {};\n}\nconst _ot = globalThis.__openTabs!;\nif (!_ot.preScript) {\n  _ot.preScript = {};\n}\n\n// Reset this plugin's pre-script bucket on every load. Each navigation gets\n// a clean slate so stale values from the previous page don't leak.\n_ot.preScript[\"prescript-test\"] = {};\n\n// Plugin-scoped logger. Pre-script logs go directly to console \u2014 the\n// extension's ISOLATED-world log relay hasn't loaded yet at document_start.\nconst _logPrefix = \"[opentabs:prescript-test:pre-script]\";\nconst _log = {\n  debug: (...args: unknown[]) => { console.debug(_logPrefix, ...args); },\n  info:  (...args: unknown[]) => { console.info(_logPrefix, ...args); },\n  warn:  (...args: unknown[]) => { console.warn(_logPrefix, ...args); },\n  error: (...args: unknown[]) => { console.error(_logPrefix, ...args); },\n};\n\n// Install _preScriptRunner so definePreScript() in the user module can invoke\n// the callback synchronously. Self-destructs after first call so it cannot\n// be called again after the pre-script has loaded.\n_ot._preScriptRunner = (fn) => {\n  delete _ot._preScriptRunner;\n  const ctx = {\n    set(key: string, value: unknown) {\n      _ot.preScript![\"prescript-test\"]![key] = value;\n    },\n    log: _log,\n  };\n  try {\n    fn(ctx as Parameters<typeof fn>[0]);\n  } catch (e) {\n    console.error(_logPrefix, 'pre-script threw:', e);\n  }\n};\n", null, "import { definePreScript } from '@opentabs-dev/plugin-sdk/pre-script';\n\n/**\n * Pre-script for the prescript-test plugin.\n *\n * Runs at document_start in MAIN world, strictly before any page script.\n * Wraps window.fetch to capture bearer tokens from outbound requests \u2014\n * simulating the PR #69 scenario where the page overwrites window.fetch\n * immediately after its own bootstrap fetch, which would prevent a normal\n * adapter from ever seeing the token.\n *\n * The adapter reads the captured values later via getPreScriptValue().\n */\ndefinePreScript(({ set, log }) => {\n  const g = globalThis as Record<string, unknown>;\n  const origFetch = g['fetch'] as typeof fetch;\n\n  const patchedFetch = async (input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {\n    // Resolve the URL string for storage\n    const url =\n      typeof input === 'string'\n        ? input\n        : input instanceof URL\n          ? input.href\n          : (input as Request).url;\n\n    // Extract any Authorization: Bearer header from whichever HeadersInit shape was passed\n    const headers = init?.headers;\n    let bearer: string | undefined;\n\n    if (headers instanceof Headers) {\n      bearer = headers.get('Authorization') ?? headers.get('authorization') ?? undefined;\n    } else if (Array.isArray(headers)) {\n      for (const entry of headers as string[][]) {\n        if (entry[0]?.toLowerCase() === 'authorization') {\n          bearer = entry[1];\n          break;\n        }\n      }\n    } else if (headers && typeof headers === 'object') {\n      const h = headers as Record<string, string>;\n      bearer = h['Authorization'] ?? h['authorization'];\n    }\n\n    if (bearer?.startsWith('Bearer ')) {\n      set('authToken', bearer.slice(7));\n      set('authUrl', url);\n      set('capturedAt', Date.now());\n      log.debug(`[prescript-test] captured bearer for ${url}`);\n    }\n\n    return origFetch(input, init);\n  };\n\n  g['fetch'] = patchedFetch;\n  log.info('[prescript-test] fetch interceptor installed');\n});\n"],
+  "mappings": ";;;AAeA,MAAI,CAAC,WAAW,YAAY;AAC1B,IAAC,WAAuC,aAAa,CAAC;AAAA,EACxD;AACA,MAAM,MAAM,WAAW;AACvB,MAAI,CAAC,IAAI,WAAW;AAClB,QAAI,YAAY,CAAC;AAAA,EACnB;AAIA,MAAI,UAAU,gBAAgB,IAAI,CAAC;AAInC,MAAM,aAAa;AACnB,MAAM,OAAO;AAAA,IACX,OAAO,IAAI,SAAoB;AAAE,cAAQ,MAAM,YAAY,GAAG,IAAI;AAAA,IAAG;AAAA,IACrE,MAAO,IAAI,SAAoB;AAAE,cAAQ,KAAK,YAAY,GAAG,IAAI;AAAA,IAAG;AAAA,IACpE,MAAO,IAAI,SAAoB;AAAE,cAAQ,KAAK,YAAY,GAAG,IAAI;AAAA,IAAG;AAAA,IACpE,OAAO,IAAI,SAAoB;AAAE,cAAQ,MAAM,YAAY,GAAG,IAAI;AAAA,IAAG;AAAA,EACvE;AAKA,MAAI,mBAAmB,CAAC,OAAO;AAC7B,WAAO,IAAI;AACX,UAAM,MAAM;AAAA,MACV,IAAI,KAAa,OAAgB;AAC/B,YAAI,UAAW,gBAAgB,EAAG,GAAG,IAAI;AAAA,MAC3C;AAAA,MACA,KAAK;AAAA,IACP;AACA,QAAI;AACF,SAAG,GAA+B;AAAA,IACpC,SAAS,GAAG;AACV,cAAQ,MAAM,YAAY,qBAAqB,CAAC;AAAA,IAClD;AAAA,EACF;;;ACJO,MAAM,kBAAkB,CAAC,OAA6C;AAC3E,UAAM,KAAM,WAAuC;AAGnD,QAAI,mBAAmB,EAAE;EAC3B;;;ACzCA,kBAAgB,CAAC,EAAE,KAAK,IAAI,MAAM;AAChC,UAAM,IAAI;AACV,UAAM,YAAY,EAAE,OAAO;AAE3B,UAAM,eAAe,OAAO,OAA0B,SAA0C;AAE9F,YAAM,MACJ,OAAO,UAAU,WACb,QACA,iBAAiB,MACf,MAAM,OACL,MAAkB;AAG3B,YAAM,UAAU,MAAM;AACtB,UAAI;AAEJ,UAAI,mBAAmB,SAAS;AAC9B,iBAAS,QAAQ,IAAI,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK;AAAA,MAC3E,WAAW,MAAM,QAAQ,OAAO,GAAG;AACjC,mBAAW,SAAS,SAAuB;AACzC,cAAI,MAAM,CAAC,GAAG,YAAY,MAAM,iBAAiB;AAC/C,qBAAS,MAAM,CAAC;AAChB;AAAA,UACF;AAAA,QACF;AAAA,MACF,WAAW,WAAW,OAAO,YAAY,UAAU;AACjD,cAAM,IAAI;AACV,iBAAS,EAAE,eAAe,KAAK,EAAE,eAAe;AAAA,MAClD;AAEA,UAAI,QAAQ,WAAW,SAAS,GAAG;AACjC,YAAI,aAAa,OAAO,MAAM,CAAC,CAAC;AAChC,YAAI,WAAW,GAAG;AAClB,YAAI,cAAc,KAAK,IAAI,CAAC;AAC5B,YAAI,MAAM,wCAAwC,GAAG,EAAE;AAAA,MACzD;AAEA,aAAO,UAAU,OAAO,IAAI;AAAA,IAC9B;AAEA,MAAE,OAAO,IAAI;AACb,QAAI,KAAK,8CAA8C;AAAA,EACzD,CAAC;",
+  "names": []
+}

package/dist/pre-script.js

@@ -0,0 +1,52 @@
+import { definePreScript } from '@opentabs-dev/plugin-sdk/pre-script';
+/**
+ * Pre-script for the prescript-test plugin.
+ *
+ * Runs at document_start in MAIN world, strictly before any page script.
+ * Wraps window.fetch to capture bearer tokens from outbound requests —
+ * simulating the PR #69 scenario where the page overwrites window.fetch
+ * immediately after its own bootstrap fetch, which would prevent a normal
+ * adapter from ever seeing the token.
+ *
+ * The adapter reads the captured values later via getPreScriptValue().
+ */
+definePreScript(({ set, log }) => {
+    const g = globalThis;
+    const origFetch = g['fetch'];
+    const patchedFetch = async (input, init) => {
+        // Resolve the URL string for storage
+        const url = typeof input === 'string'
+            ? input
+            : input instanceof URL
+                ? input.href
+                : input.url;
+        // Extract any Authorization: Bearer header from whichever HeadersInit shape was passed
+        const headers = init?.headers;
+        let bearer;
+        if (headers instanceof Headers) {
+            bearer = headers.get('Authorization') ?? headers.get('authorization') ?? undefined;
+        }
+        else if (Array.isArray(headers)) {
+            for (const entry of headers) {
+                if (entry[0]?.toLowerCase() === 'authorization') {
+                    bearer = entry[1];
+                    break;
+                }
+            }
+        }
+        else if (headers && typeof headers === 'object') {
+            const h = headers;
+            bearer = h['Authorization'] ?? h['authorization'];
+        }
+        if (bearer?.startsWith('Bearer ')) {
+            set('authToken', bearer.slice(7));
+            set('authUrl', url);
+            set('capturedAt', Date.now());
+            log.debug(`[prescript-test] captured bearer for ${url}`);
+        }
+        return origFetch(input, init);
+    };
+    g['fetch'] = patchedFetch;
+    log.info('[prescript-test] fetch interceptor installed');
+});
+//# sourceMappingURL=pre-script.js.map

package/dist/pre-script.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-script.js","sourceRoot":"","sources":["../src/pre-script.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;IAC/B,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAiB,CAAC;IAE7C,MAAM,YAAY,GAAG,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAqB,EAAE;QAC7F,qCAAqC;QACrC,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,KAAK,YAAY,GAAG;gBACpB,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAE,KAAiB,CAAC,GAAG,CAAC;QAE/B,uFAAuF;QACvF,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;QAC9B,IAAI,MAA0B,CAAC;QAE/B,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;YAC/B,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;QACrF,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,KAAK,MAAM,KAAK,IAAI,OAAqB,EAAE,CAAC;gBAC1C,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;oBAChD,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAClB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,OAAiC,CAAC;YAC5C,MAAM,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACpB,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9B,GAAG,CAAC,KAAK,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,CAAC,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC;IAC1B,GAAG,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC"}

package/dist/tools/echo-auth.d.ts

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+/**
+ * Returns the bearer token captured by the pre-script at document_start.
+ *
+ * The pre-script installs a fetch interceptor that captures Authorization: Bearer
+ * headers from outbound requests before the page can overwrite window.fetch.
+ * This tool reads the captured values back to verify end-to-end pre-script behavior.
+ */
+export declare const echoAuth: import("@opentabs-dev/plugin-sdk").ToolDefinition<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+    token: z.ZodNullable<z.ZodString>;
+    authUrl: z.ZodNullable<z.ZodString>;
+    capturedAt: z.ZodNullable<z.ZodNumber>;
+    source: z.ZodString;
+}, z.core.$strip>>;
+//# sourceMappingURL=echo-auth.d.ts.map

package/dist/tools/echo-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"echo-auth.d.ts","sourceRoot":"","sources":["../../src/tools/echo-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,eAAO,MAAM,QAAQ;;;;;kBAqBnB,CAAC"}

package/dist/tools/echo-auth.js

@@ -0,0 +1,32 @@
+import { defineTool, getPreScriptValue } from '@opentabs-dev/plugin-sdk';
+import { z } from 'zod';
+/**
+ * Returns the bearer token captured by the pre-script at document_start.
+ *
+ * The pre-script installs a fetch interceptor that captures Authorization: Bearer
+ * headers from outbound requests before the page can overwrite window.fetch.
+ * This tool reads the captured values back to verify end-to-end pre-script behavior.
+ */
+export const echoAuth = defineTool({
+    name: 'echo_auth',
+    displayName: 'Echo Auth',
+    description: 'Returns the bearer token captured by the pre-script at document_start',
+    summary: 'Return captured bearer token',
+    icon: 'key',
+    group: 'Pre-Script Test',
+    input: z.object({}),
+    output: z.object({
+        token: z.string().nullable().describe('Bearer token captured by the pre-script, or null if not yet captured'),
+        authUrl: z.string().nullable().describe('URL of the request that carried the bearer token'),
+        capturedAt: z.number().nullable().describe('Timestamp (ms since epoch) when the token was captured'),
+        source: z.string().describe("Source of the token: 'pre-script' when captured, 'none' when not available"),
+    }),
+    handle: async () => {
+        const token = getPreScriptValue('authToken') ?? null;
+        const authUrl = getPreScriptValue('authUrl') ?? null;
+        const capturedAt = getPreScriptValue('capturedAt') ?? null;
+        const source = token !== null ? 'pre-script' : 'none';
+        return { token, authUrl, capturedAt, source };
+    },
+});
+//# sourceMappingURL=echo-auth.js.map

package/dist/tools/echo-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"echo-auth.js","sourceRoot":"","sources":["../../src/tools/echo-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC;IACjC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,uEAAuE;IACpF,OAAO,EAAE,8BAA8B;IACvC,IAAI,EAAE,KAAK;IACX,KAAK,EAAE,iBAAiB;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sEAAsE,CAAC;QAC7G,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;QAC3F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QACpG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC;KAC1G,CAAC;IACF,MAAM,EAAE,KAAK,IAAI,EAAE;QACjB,MAAM,KAAK,GAAG,iBAAiB,CAAS,WAAW,CAAC,IAAI,IAAI,CAAC;QAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAS,SAAS,CAAC,IAAI,IAAI,CAAC;QAC7D,MAAM,UAAU,GAAG,iBAAiB,CAAS,YAAY,CAAC,IAAI,IAAI,CAAC;QACnE,MAAM,MAAM,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;CACF,CAAC,CAAC"}

package/dist/tools.json

@@ -0,0 +1,69 @@
+{
+  "sdkVersion": "0.0.104",
+  "preScriptFile": "pre-script.iife.js",
+  "preScriptHash": "67f8d4a827a99555beb064c6d1db97e1948e27179b32a616ad68284a75b44267",
+  "tools": [
+    {
+      "name": "echo_auth",
+      "displayName": "Echo Auth",
+      "description": "Returns the bearer token captured by the pre-script at document_start",
+      "summary": "Return captured bearer token",
+      "icon": "key",
+      "group": "Pre-Script Test",
+      "input_schema": {
+        "type": "object",
+        "properties": {},
+        "additionalProperties": false
+      },
+      "output_schema": {
+        "type": "object",
+        "properties": {
+          "token": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Bearer token captured by the pre-script, or null if not yet captured"
+          },
+          "authUrl": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "URL of the request that carried the bearer token"
+          },
+          "capturedAt": {
+            "anyOf": [
+              {
+                "type": "number"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Timestamp (ms since epoch) when the token was captured"
+          },
+          "source": {
+            "type": "string",
+            "description": "Source of the token: 'pre-script' when captured, 'none' when not available"
+          }
+        },
+        "required": [
+          "token",
+          "authUrl",
+          "capturedAt",
+          "source"
+        ],
+        "additionalProperties": false
+      }
+    }
+  ]
+}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@opentabs-dev/opentabs-plugin-prescript-test",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "0.0.1",
+  "type": "module",
+  "main": "dist/adapter.iife.js",
+  "keywords": [
+    "opentabs-plugin"
+  ],
+  "opentabs": {
+    "displayName": "Pre-Script Test",
+    "description": "Test plugin for the pre-script feature — captures bearer tokens at document_start before the page can overwrite window.fetch",
+    "urlPatterns": [
+      "http://localhost/*",
+      "http://127.0.0.1/*"
+    ],
+    "preScript": "src/pre-script.ts"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc && opentabs-plugin build",
+    "dev": "tsc --watch --preserveWatchOutput & opentabs-plugin build --watch",
+    "type-check": "tsc --noEmit",
+    "lint": "biome lint src/",
+    "lint:fix": "biome lint --fix src/",
+    "format:check": "biome format src/",
+    "format": "biome format --write src/",
+    "check": "npm run build && npm run type-check && npm run lint && npm run format:check"
+  },
+  "peerDependencies": {
+    "zod": "^4.0.0"
+  },
+  "dependencies": {
+    "@opentabs-dev/plugin-sdk": "^0.0.104"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "2.4.6",
+    "@opentabs-dev/plugin-tools": "^0.0.104",
+    "jiti": "^2.6.1",
+    "typescript": "^5.9.3",
+    "zod": "^4.3.6"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/opentabs-dev/opentabs.git",
+    "directory": "plugins/prescript-test"
+  }
+}