@opentiny/webmcp-cli 0.1.0 → 0.1.1

package/dist/webmcp-tools/juejin.cn.js

@@ -3104,9 +3104,9 @@
     }
   });
 
-  // ../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js
+  // ../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/utils.js
   var require_utils = __commonJS({
-    "../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js"(exports, module) {
+    "../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/utils.js"(exports, module) {
       "use strict";
       var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
       var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
@@ -3338,6 +3338,37 @@
         }
         return output.join("");
       }
+      function removeDotSegmentsRelative(path) {
+        if (path === "" || path[0] === "/") {
+          return removeDotSegments(path);
+        }
+        const segments = path.split("/");
+        const last = segments.length - 1;
+        const output = [];
+        let trailingDirectory = false;
+        for (let i = 0; i <= last; i++) {
+          const segment = segments[i];
+          if (segment === "." || segment === "..") {
+            if (segment === "..") {
+              if (output.length !== 0 && output[output.length - 1] !== "..") {
+                output.pop();
+              } else {
+                output.push("..");
+              }
+            }
+            trailingDirectory = i === last;
+          } else {
+            output.push(segment);
+          }
+        }
+        if (trailingDirectory && output[output.length - 1] !== "..") {
+          output.push("");
+        }
+        if (output.length === 0 || output[0] === "" || output[0].includes(":")) {
+          output.unshift(".");
+        }
+        return output.join("/");
+      }
       var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
       var HOST_DELIM_RE = /[@/?#:]/g;
       var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
@@ -3598,6 +3629,7 @@
         encodeFragment,
         escapePreservingEscapes,
         removeDotSegments,
+        removeDotSegmentsRelative,
         isIPv4,
         isUUID,
         normalizeIPv6,
@@ -3606,9 +3638,9 @@
     }
   });
 
-  // ../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js
+  // ../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/schemes.js
   var require_schemes = __commonJS({
-    "../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js"(exports, module) {
+    "../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/schemes.js"(exports, module) {
       "use strict";
       var { isUUID } = require_utils();
       var URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
@@ -3817,20 +3849,22 @@
     }
   });
 
-  // ../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/index.js
+  // ../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/index.js
   var require_fast_uri = __commonJS({
-    "../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/index.js"(exports, module) {
+    "../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/index.js"(exports, module) {
       "use strict";
-      var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
+      var { normalizeIPv6, removeDotSegments, removeDotSegmentsRelative, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
       var { SCHEMES, getSchemeHandler } = require_schemes();
       var VALID_SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*$/u;
       var MALFORMED_SCHEME_ERROR = "URI scheme is malformed.";
-      function decodeValidScheme(scheme) {
-        const decodedScheme = unescape(String(scheme));
-        if (!VALID_SCHEME.test(decodedScheme)) {
+      var MALFORMED_HOST_ERROR = "URI host is malformed.";
+      var FORBIDDEN_DOMAIN_HOST_CHARACTER = /[\0-\x20"#/:<>?@[\\\]^`{|}\x7F]/u;
+      function validateScheme(scheme) {
+        const stringScheme = String(scheme);
+        if (!VALID_SCHEME.test(stringScheme)) {
           throw new TypeError(MALFORMED_SCHEME_ERROR);
         }
-        return decodedScheme;
+        return stringScheme;
       }
       function normalize(uri, options) {
         if (typeof uri === "string") {
@@ -3867,6 +3901,9 @@
         const resolvedSchemeHandler = getSchemeHandler(options && options.scheme || resolved.scheme);
         const resolvedHost = resolved.host;
         const resolvedHostIsIP = resolvedHost !== void 0 && resolvedHost !== "" && (isIPv4(resolvedHost) || normalizeIPv6(resolvedHost).isIPV6);
+        if (hasForbiddenDomainHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP)) {
+          throw new Error(MALFORMED_HOST_ERROR);
+        }
         canonicalizeHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP);
         const encodedASCIIHost = resolvedHost && resolvedHost.indexOf("%") !== -1 && !new RegExp("\\P{ASCII}", "u").test(resolvedHost);
         if (resolved.error && !encodedASCIIHost) {
@@ -3908,14 +3945,15 @@
               if (relative.path[0] === "/") {
                 target.path = removeDotSegments(relative.path);
               } else {
-                if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) {
+                const baseHasAuthority = base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0;
+                if (baseHasAuthority && !base.path) {
                   target.path = "/" + relative.path;
                 } else if (!base.path) {
                   target.path = relative.path;
                 } else {
                   target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative.path;
                 }
-                target.path = removeDotSegments(target.path);
+                target.path = base.scheme === void 0 && !baseHasAuthority && target.path[0] !== "/" ? removeDotSegmentsRelative(target.path) : removeDotSegments(target.path);
               }
               target.query = relative.query;
             }
@@ -3953,12 +3991,13 @@
         const options = Object.assign({}, opts);
         const uriTokens = [];
         if (component.scheme) {
-          component.scheme = decodeValidScheme(component.scheme);
+          component.scheme = validateScheme(component.scheme);
         }
         const schemeHandler = getSchemeHandler(options.scheme || component.scheme);
         if (schemeHandler && schemeHandler.serialize) schemeHandler.serialize(component, options);
         const hasAuthority = component.userinfo !== void 0 || component.host !== void 0 || component.port !== void 0;
-        const pathNoScheme = !options.skipEscape && component.scheme === void 0 && !hasAuthority;
+        const schemelessReference = (component.scheme === void 0 || options.reference === "suffix") && !hasAuthority;
+        const pathNoScheme = !options.skipEscape && schemelessReference;
         if (component.path !== void 0) {
           if (!options.skipEscape) {
             component.path = serializePathEncoding(component.path, pathNoScheme);
@@ -3967,7 +4006,7 @@
           }
         }
         if (options.reference !== "suffix" && component.scheme) {
-          component.scheme = decodeValidScheme(component.scheme);
+          component.scheme = validateScheme(component.scheme);
           uriTokens.push(component.scheme, ":");
         }
         const authority = recomposeAuthority(component);
@@ -3983,9 +4022,9 @@
         if (component.path !== void 0) {
           let s = component.path;
           if (!options.absolutePath && (!schemeHandler || !schemeHandler.absolutePath)) {
-            s = removeDotSegments(s);
+            s = schemelessReference && s[0] !== "/" ? removeDotSegmentsRelative(s) : removeDotSegments(s);
           }
-          if (pathNoScheme) {
+          if (schemelessReference) {
             s = serializePathEncoding(s, true);
           }
           if (authority === void 0 && s[0] === "/" && s[1] === "/") {
@@ -4032,16 +4071,34 @@
         return hasMalformedPercentEncoding(matches[3]) || host !== void 0 && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
       }
       function canonicalizeHost(parsed, options, schemeHandler, isIP) {
+        if (hasForbiddenDomainHost(parsed, options, schemeHandler, isIP)) {
+          parsed.error = parsed.error || MALFORMED_HOST_ERROR;
+          return true;
+        }
         if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
+          let url2;
           try {
-            parsed.host = new URL("http://" + parsed.host).hostname;
+            url2 = new URL("http://" + parsed.host);
           } catch (e) {
             parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
             return true;
           }
+          if (!isHostOnlyURL(url2)) {
+            parsed.error = parsed.error || MALFORMED_HOST_ERROR;
+            return true;
+          }
+          parsed.host = url2.hostname;
         }
         return false;
       }
+      function hasForbiddenDomainHost(parsed, options, schemeHandler, isIP) {
+        return Boolean(
+          parsed.host && isIP === false && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && FORBIDDEN_DOMAIN_HOST_CHARACTER.test(parsed.host)
+        );
+      }
+      function isHostOnlyURL(url2) {
+        return url2.username === "" && url2.password === "" && url2.port === "" && url2.pathname === "/" && url2.search === "" && url2.hash === "" && url2.hostname !== "";
+      }
       function parseWithStatus(uri, opts) {
         const options = Object.assign({}, opts);
         const parsed = {
@@ -4096,9 +4153,8 @@
           parsed.query = matches[7];
           parsed.fragment = matches[8];
           if (parsed.scheme !== void 0) {
-            const decodedScheme = unescape(parsed.scheme);
-            if (VALID_SCHEME.test(decodedScheme)) {
-              parsed.scheme = decodedScheme.toLowerCase();
+            if (VALID_SCHEME.test(parsed.scheme)) {
+              parsed.scheme = parsed.scheme.toLowerCase();
             } else {
               parsed.error = parsed.error || MALFORMED_SCHEME_ERROR;
               malformedScheme = true;
@@ -4126,7 +4182,7 @@
               malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
               parsed.host = isIP ? ipv6result.host : ipv6result.host.toLowerCase();
               if (malformedIPLiteral) {
-                parsed.error = parsed.error || "URI host is malformed.";
+                parsed.error = parsed.error || MALFORMED_HOST_ERROR;
                 malformedAuthorityOrPort = true;
               }
             } else {
@@ -4154,7 +4210,7 @@
             if (!isIP) {
               host = normalizePercentEncoding(host.toLowerCase());
             }
-            parsed.host = reescapeHostDelimiters(host, isIP);
+            parsed.host = isIP || options.scheme !== "null" ? reescapeHostDelimiters(host, isIP) : host;
           }
           if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
             if (parsed.path) {
@@ -18193,7 +18249,7 @@ gl_Position = vec4(aPosition, 0.0, 1.0);
   // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v4/classic/external.js
   config(en_default2());
 
-  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.1_hono@4.13.13_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.6_hono@4.13.17_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
   var RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
   var JSONRPC_VERSION = "2.0";
   var AssertObjectSchema = custom2((v) => v !== null && (typeof v === "object" || typeof v === "function"));
@@ -19668,14 +19724,14 @@ gl_Position = vec4(aPosition, 0.0, 1.0);
   // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@3.25.76/node_modules/zod-to-json-schema/dist/esm/parsers/string.js
   var ALPHA_NUMERIC = new Set("ABCDEFGHIJKLMNOPQRSTUVXYZabcdefghijklmnopqrstuvxyz0123456789");
 
-  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.1_hono@4.13.13_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
+  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.6_hono@4.13.17_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/validation/ajv-provider.js
   var import_ajv_formats = __toESM(require_dist(), 1);
 
   // ../../node_modules/.pnpm/pkce-challenge@5.0.1/node_modules/pkce-challenge/dist/index.browser.js
   var crypto2;
   crypto2 = globalThis.crypto;
 
-  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.1_hono@4.13.13_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
+  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.6_hono@4.13.17_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/auth.js
   var SafeUrlSchema = url().superRefine((val, ctx) => {
     if (!URL.canParse(val)) {
       ctx.addIssue({
@@ -19819,7 +19875,7 @@ gl_Position = vec4(aPosition, 0.0, 1.0);
     token_type_hint: string2().optional()
   }).strip();
 
-  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.1_hono@4.13.13_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/server/auth/errors.js
+  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.6_hono@4.13.17_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/server/auth/errors.js
   var OAuthError = class extends Error {
     constructor(message, errorUri) {
       super(message);
@@ -19914,7 +19970,7 @@ gl_Position = vec4(aPosition, 0.0, 1.0);
     [InvalidTargetError.errorCode]: InvalidTargetError
   };
 
-  // ../../node_modules/.pnpm/@opentiny+next@0.3.2_@cfworker+json-schema@4.1.1_hono@4.13.13_zod@3.25.76/node_modules/@opentiny/next/index.js
+  // ../../node_modules/.pnpm/@opentiny+next@0.3.2_@cfworker+json-schema@4.1.6_hono@4.13.17_zod@3.25.76/node_modules/@opentiny/next/index.js
   var _0x4f2826 = _0xad7a;
   (function(_0x5153c5, _0x3abbea) {
     const _0x5f186f = _0xad7a, _0x3f8155 = _0xad7a, _0x5ad68c = _0x5153c5();
@@ -20238,7 +20294,7 @@ gl_Position = vec4(aPosition, 0.0, 1.0);
     }, _0x275e(_0x25fced, _0x3ae797);
   }
 
-  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.1_hono@4.13.13_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/server/completable.js
+  // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.25.3_@cfworker+json-schema@4.1.6_hono@4.13.17_zod@3.25.76/node_modules/@modelcontextprotocol/sdk/dist/esm/server/completable.js
   var COMPLETABLE_SYMBOL = Symbol.for("mcp.completable");
   var McpZodTypeKind;
   (function(McpZodTypeKind2) {

package/package.json

@@ -1,8 +1,16 @@
 {
   "name": "@opentiny/webmcp-cli",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "type": "module",
   "description": "WebMCP CLI for AI Agents to interact with browser via Puppeteer",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/opentiny/webmcp-sdk.git",
+    "directory": "packages/webmcp-cli"
+  },
+  "bugs": {
+    "url": "https://github.com/opentiny/webmcp-sdk/issues"
+  },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
@@ -10,7 +18,8 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "scripts/ensure-pty-helper.mjs"
   ],
   "keywords": [
     "chrome",
@@ -20,7 +29,7 @@
   "license": "MIT",
   "author": "OpenTiny Team",
   "engines": {
-    "node": ">=16"
+    "node": ">=18.19.0"
   },
   "publishConfig": {
     "access": "public"
@@ -31,6 +40,7 @@
     "@page-agent/page-controller": "^1.10.0",
     "clipboardy": "^5.3.1",
     "commander": "^11.1.0",
+    "execa": "^9.6.1",
     "json5": "^2.2.3",
     "marked": "^15.0.7",
     "picocolors": "^1.0.0",
@@ -39,6 +49,9 @@
     "zod": "^3.23.0",
     "@opentiny/next-sdk": "^0.4.11"
   },
+  "optionalDependencies": {
+    "node-pty": "^1.1.0"
+  },
   "devDependencies": {
     "@types/node": "^20.0.0",
     "@types/ws": "^8.5.10",
@@ -54,6 +67,7 @@
     "build": "tsup && pnpm run build:inject",
     "link:global": "npm install -g .",
     "start": "node dist/bin.js",
+    "postinstall": "node scripts/ensure-pty-helper.mjs",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:browser": "vitest run --config vitest.e2e.config.ts"

package/scripts/ensure-pty-helper.mjs

@@ -0,0 +1,24 @@
+import { chmodSync, existsSync, readdirSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import path from 'node:path'
+
+// node-pty 预编译包里的 spawn-helper 可能是 0644。安装时改成可执行，
+// 避免之后用非 root 用户运行时无法 chmod。
+try {
+  const pkgJson = createRequire(import.meta.url).resolve('node-pty/package.json')
+  const prebuilds = path.join(path.dirname(pkgJson), 'prebuilds')
+  if (!existsSync(prebuilds)) process.exit(0)
+  for (const entry of readdirSync(prebuilds, { withFileTypes: true })) {
+    if (!entry.isDirectory()) continue
+    const helper = path.join(prebuilds, entry.name, 'spawn-helper')
+    if (!existsSync(helper)) continue
+    chmodSync(helper, 0o755)
+  }
+} catch (err) {
+  const code = err && typeof err === 'object' && 'code' in err ? String(err.code) : ''
+  if (code === 'EPERM' || code === 'EACCES') {
+    console.warn(
+      '[webmcp-cli] 无法把 node-pty spawn-helper 设为可执行。交互终端可能启动失败，system/bash 不受影响。'
+    )
+  }
+}