@weavetab/mcp 2.5.0-beta.1 → 2.5.0-beta.2

package/dist/cdp/omni_broker.js

@@ -20,13 +20,16 @@ export async function initOmniBroker(parentSession, parentTargetId, port) {
     }
     parentSession.Target.on("attachedToTarget", async (event) => {
         const { targetInfo } = event;
-        if (targetInfo.type === 'iframe') {
+        if (targetInfo && targetInfo.targetId !== parentTargetId && (targetInfo.type === 'iframe' || targetInfo.type === 'webview' || targetInfo.type === 'page' || targetInfo.type === 'app')) {
             try {
-                // Connect a flat session to the iframe target
-                const iframeSession = await CDP({ host: "127.0.0.1", port, target: targetInfo.targetId });
-                await iframeSession.Runtime.enable();
-                await iframeSession.DOM.enable();
-                omniSessions.get(parentTargetId).set(targetInfo.targetId, iframeSession);
+                // Connect a flat session to the child iframe/webview target
+                const childSession = await CDP({ host: "127.0.0.1", port, target: targetInfo.targetId });
+                await Promise.all([
+                    childSession.Runtime.enable().catch(() => { }),
+                    childSession.DOM.enable().catch(() => { }),
+                    childSession.Page.enable().catch(() => { })
+                ]);
+                omniSessions.get(parentTargetId).set(targetInfo.targetId, childSession);
             }
             catch (e) {
                 // Fallback or ignore
@@ -105,6 +108,9 @@ function parseJSON(str) {
         return str;
     }
 }
+export function getOmniSessions(parentTargetId) {
+    return omniSessions.get(parentTargetId);
+}
 export function cleanupOmniBroker(parentTargetId) {
     const iframeMap = omniSessions.get(parentTargetId);
     if (iframeMap) {

package/dist/cdp/profiles.d.ts

@@ -1 +1,11 @@
 export declare function getSessionProfile(cookies: boolean, customProfileDir?: string, syncDataAcrossBrowsers?: boolean, browserPath?: string): string;
+export declare function sanitizeAppName(appName: string): string;
+/**
+ * Asserts that the given profile directory is NOT a real desktop app's native user data directory.
+ * Throws a security block error if it matches root or subdirectory of standard app data paths.
+ */
+export declare function assertNotRealElectronProfile(profileDir: string, appName: string): void;
+/**
+ * Resolves the isolated profile directory for a specific Electron application.
+ */
+export declare function getElectronProfile(appName: string, customProfileDir?: string): string;

package/dist/cdp/profiles.js

@@ -85,3 +85,68 @@ export function getSessionProfile(cookies, customProfileDir, syncDataAcrossBrows
     }
     return sessionProfile;
 }
+// ─── Electron App Profile Resolver & Safety Guard ─────────────────────────────
+export function sanitizeAppName(appName) {
+    const cleaned = appName.trim().replace(/[^a-zA-Z0-9_-]/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "").toLowerCase();
+    return cleaned || "app";
+}
+// Real application data directories that should NEVER be used directly
+const REAL_DESKTOP_APP_ROOTS = [];
+if (PLATFORM === 'win32') {
+    REAL_DESKTOP_APP_ROOTS.push(path.join(HOME, "AppData", "Roaming"), path.join(HOME, "AppData", "Local"), path.join(HOME, "AppData", "LocalLow"));
+}
+else if (PLATFORM === 'darwin') {
+    REAL_DESKTOP_APP_ROOTS.push(path.join(HOME, "Library", "Application Support"), path.join(HOME, "Library", "Saved Application State"), path.join(HOME, "Library", "Caches"));
+}
+else {
+    REAL_DESKTOP_APP_ROOTS.push(path.join(HOME, ".config"), path.join(HOME, ".local", "share"), path.join(HOME, ".cache"));
+}
+/**
+ * Asserts that the given profile directory is NOT a real desktop app's native user data directory.
+ * Throws a security block error if it matches root or subdirectory of standard app data paths.
+ */
+export function assertNotRealElectronProfile(profileDir, appName) {
+    const resolved = path.resolve(profileDir).toLowerCase();
+    // First check against browser profiles
+    assertNotRealBrowserProfile(resolved);
+    // Check against native desktop app data roots
+    for (const rootPath of REAL_DESKTOP_APP_ROOTS) {
+        const rootResolved = path.resolve(rootPath).toLowerCase();
+        // Direct matches or direct children in %APPDATA%/<appName>
+        const appSpecificRealDir = path.join(rootResolved, sanitizeAppName(appName)).toLowerCase();
+        if (resolved === appSpecificRealDir || resolved.startsWith(appSpecificRealDir + path.sep)) {
+            throw new Error(`[Weavetab] ✗ SECURITY BLOCK: The profileDir "${profileDir}" points to your real ${appName} desktop app data.\n` +
+                `  Weavetab will never read from or write to your personal desktop app data.\n` +
+                `  Please use an isolated directory or let Weavetab manage ~/.weavetab-system/apps/${appName}/.\n` +
+                `  Real app data path detected: ${appSpecificRealDir}`);
+        }
+    }
+}
+/**
+ * Resolves the isolated profile directory for a specific Electron application.
+ */
+export function getElectronProfile(appName, customProfileDir) {
+    const sanitized = sanitizeAppName(appName);
+    if (customProfileDir && customProfileDir.trim()) {
+        const resolved = path.resolve(customProfileDir.trim());
+        assertNotRealElectronProfile(resolved, appName);
+        if (!fs.existsSync(resolved)) {
+            fs.mkdirSync(resolved, { recursive: true });
+            logDebug(`[Weavetab] ✓ Created custom Electron profile directory for ${appName}: ${resolved}`);
+        }
+        else {
+            logDebug(`[Weavetab] ✓ Using custom Electron profile directory for ${appName}: ${resolved}`);
+        }
+        return resolved;
+    }
+    const appProfileDir = path.join(HOME, ".weavetab-system", "apps", sanitized);
+    assertNotRealElectronProfile(appProfileDir, appName);
+    if (!fs.existsSync(appProfileDir)) {
+        fs.mkdirSync(appProfileDir, { recursive: true });
+        logDebug(`[Weavetab] ✓ Created isolated Electron profile directory for ${appName}: ${appProfileDir}`);
+    }
+    else {
+        logDebug(`[Weavetab] ✓ Using isolated Electron profile directory for ${appName}: ${appProfileDir}`);
+    }
+    return appProfileDir;
+}

package/dist/cdp/walker.js

@@ -387,6 +387,56 @@ export async function buildActionMap(session, options = {}, targetId = "default"
             }
         }
     }
+    // Merge elements from child webviews and iframes managed by OmniBroker
+    try {
+        const { getOmniSessions } = await import("./omni_broker.js");
+        const childSessions = getOmniSessions(targetId);
+        if (childSessions && childSessions.size > 0) {
+            for (const [, childSession] of childSessions.entries()) {
+                try {
+                    const { result: childResult } = await childSession.Runtime.evaluate({
+                        expression: `(function() {
+              var INTERACTIVE_SEL = 'a, button, input, textarea, select, [role="button"], [role="link"], [role="textbox"], [role="checkbox"], [role="radio"], [role="combobox"], [role="searchbox"], [role="menuitem"], [role="tab"], [contenteditable="true"], [tabindex]:not([tabindex="-1"])';
+              var els = document.querySelectorAll(INTERACTIVE_SEL);
+              var results = [];
+              for (var i = 0; i < els.length; i++) {
+                var el = els[i];
+                var rect = el.getBoundingClientRect();
+                if (rect.width === 0 || rect.height === 0 || rect.bottom < 0 || rect.top > window.innerHeight) continue;
+                var id = el.getAttribute('data-wt-id');
+                if (!id) {
+                  id = 'wv_' + Math.random().toString(36).slice(2, 9);
+                  el.setAttribute('data-wt-id', id);
+                }
+                results.push({
+                  id: id,
+                  role: el.getAttribute('role') || el.tagName.toLowerCase(),
+                  label: el.getAttribute('aria-label') || el.innerText || el.value || el.placeholder || '',
+                  value: el.value,
+                  x: Math.round(rect.left + rect.width / 2),
+                  y: Math.round(rect.top + rect.height / 2),
+                  selector: '[data-wt-id="' + id + '"]',
+                  frameUrl: window.location.href,
+                });
+              }
+              return JSON.stringify(results);
+            })()`,
+                        returnByValue: true,
+                    });
+                    if (childResult && childResult.value) {
+                        const childEls = JSON.parse(childResult.value);
+                        if (Array.isArray(childEls) && childEls.length > 0) {
+                            if (!Array.isArray(extensionMap))
+                                extensionMap = [];
+                            extensionMap = extensionMap.concat(childEls);
+                        }
+                    }
+                }
+                catch { }
+            }
+        }
+    }
+    catch { }
     if (!extensionMap || !Array.isArray(extensionMap)) {
         return { url, title, elements: [], targetId };
     }

package/dist/cli/plugin.d.ts

@@ -4,6 +4,4 @@ export declare function runPluginSearch(query?: string): Promise<void>;
 export declare function runPluginBrowse(): Promise<void>;
 export declare function runPluginRemove(pkgName: string, args?: string[]): Promise<void>;
 export declare function runPluginVerify(pkgName: string): Promise<void>;
-export declare function runPluginInit(args?: string[]): Promise<void>;
-export declare function runPluginBuild(args?: string[]): Promise<void>;
 export declare function runPluginCli(args: string[]): Promise<void>;