@weavetab/mcp 2.5.0 → 2.5.1

package/dist/cdp/extension.js

@@ -6,12 +6,12 @@
 export async function isExtensionLoaded(session) {
     try {
         const { result } = await session.Runtime.evaluate({
-            expression: `!!(
-        document.getElementById('wt-extension-marker') ||
-        document.querySelector('weavetab-host') ||
-        document.querySelector('[data-wt-internal]') ||
-        document.getElementById('__Weavetab_cursor_host') ||
-        document.getElementById('wt-ui-styles')
+            expression: `!!(
+        document.getElementById('wt-extension-marker') ||
+        document.querySelector('weavetab-host') ||
+        document.querySelector('[data-wt-internal]') ||
+        document.getElementById('__Weavetab_cursor_host') ||
+        document.getElementById('wt-ui-styles')
       )`,
             returnByValue: true,
         });
@@ -50,15 +50,15 @@ export async function extensionHealth(session) {
         // Use DOM markers + fallback JS checks via postMessage bridge
         const loaded = await isExtensionLoaded(session);
         const { result } = await session.Runtime.evaluate({
-            expression: `(function() {
-        const features = [];
-        if (document.querySelector('weavetab-host') || document.getElementById('__Weavetab_cursor_host')) features.push('cursor');
-        if (document.querySelector('[data-wt-internal]') || document.getElementById('wt-ui-styles')) features.push('styles');
-        if (document.querySelector('.wt-bubble')) features.push('bubble');
-        return JSON.stringify({
-          loaded: ${loaded},
-          features
-        });
+            expression: `(function() {
+        const features = [];
+        if (document.querySelector('weavetab-host') || document.getElementById('__Weavetab_cursor_host')) features.push('cursor');
+        if (document.querySelector('[data-wt-internal]') || document.getElementById('wt-ui-styles')) features.push('styles');
+        if (document.querySelector('.wt-bubble')) features.push('bubble');
+        return JSON.stringify({
+          loaded: ${loaded},
+          features
+        });
       })()`,
             returnByValue: true,
         });
@@ -77,17 +77,17 @@ export async function extensionHealth(session) {
 export async function suppressOverlays(session) {
     try {
         await session.Runtime.evaluate({
-            expression: `(function() {
-        // Remove any existing Weavetab overlay elements
-        document.querySelectorAll('[data-Weavetab-overlay]').forEach(el => el.remove());
-        // Hide fallback visual elements
-        var sr = document.getElementById('Weavetab-root');
-        if (sr && sr.shadowRoot) {
-          var els = sr.shadowRoot.querySelectorAll('#wt-fallback-cursor, #wt-fallback-hud, #wt-fallback-thought');
-          els.forEach(function(el){ el.style.display = 'none'; });
-        }
-        // Post a message for the content script (isolated world)
-        window.postMessage({ type: 'Weavetab_SUPPRESS_VISUALS', suppress: true }, '*');
+            expression: `(function() {
+        // Remove any existing Weavetab overlay elements
+        document.querySelectorAll('[data-Weavetab-overlay]').forEach(el => el.remove());
+        // Hide fallback visual elements
+        var sr = document.getElementById('Weavetab-root');
+        if (sr && sr.shadowRoot) {
+          var els = sr.shadowRoot.querySelectorAll('#wt-fallback-cursor, #wt-fallback-hud, #wt-fallback-thought');
+          els.forEach(function(el){ el.style.display = 'none'; });
+        }
+        // Post a message for the content script (isolated world)
+        window.postMessage({ type: 'Weavetab_SUPPRESS_VISUALS', suppress: true }, '*');
       })()`,
             returnByValue: false,
         });
@@ -101,14 +101,14 @@ export async function suppressOverlays(session) {
 export async function restoreOverlays(session) {
     try {
         await session.Runtime.evaluate({
-            expression: `(function() {
-        // Restore fallback visual elements
-        var sr = document.getElementById('Weavetab-root');
-        if (sr && sr.shadowRoot) {
-          var els = sr.shadowRoot.querySelectorAll('#wt-fallback-cursor, #wt-fallback-hud, #wt-fallback-thought');
-          els.forEach(function(el){ el.style.display = ''; });
-        }
-        window.postMessage({ type: 'Weavetab_SUPPRESS_VISUALS', suppress: false }, '*');
+            expression: `(function() {
+        // Restore fallback visual elements
+        var sr = document.getElementById('Weavetab-root');
+        if (sr && sr.shadowRoot) {
+          var els = sr.shadowRoot.querySelectorAll('#wt-fallback-cursor, #wt-fallback-hud, #wt-fallback-thought');
+          els.forEach(function(el){ el.style.display = ''; });
+        }
+        window.postMessage({ type: 'Weavetab_SUPPRESS_VISUALS', suppress: false }, '*');
       })()`,
             returnByValue: false,
         });

package/dist/cdp/helpers.js

@@ -20,10 +20,10 @@ async function drainQueue(session, targetId) {
     try {
         const msgData = JSON.stringify(messages.length === 1 ? messages[0] : messages);
         await session.Runtime.evaluate({
-            expression: `
-        try {
-          window.postMessage({ type: 'Weavetab-msg-in', data: ${msgData} }, '*');
-        } catch(e) {}
+            expression: `
+        try {
+          window.postMessage({ type: 'Weavetab-msg-in', data: ${msgData} }, '*');
+        } catch(e) {}
       `
         });
         batch.forEach(q => q.resolve(true));
@@ -107,26 +107,26 @@ export async function getFromExtension(session, message, retries = 0) {
     for (let attempt = 0; attempt <= retries; attempt++) {
         try {
             const { result } = await session.Runtime.evaluate({
-                expression: `new Promise((resolve) => {
-          try {
-            const id = Math.random().toString();
-            const listener = (e) => {
-              if (e.detail && e.detail.id === id) {
-                window.removeEventListener('Weavetab-msg-out', listener);
-                resolve(JSON.stringify(e.detail.data));
-              }
-            };
-            window.addEventListener('Weavetab-msg-out', listener);
-            window.dispatchEvent(new CustomEvent('Weavetab-msg-in', { detail: Object.assign({}, ${JSON.stringify(message)}, { id }) }));
-            
-            // Fallback timeout — 100ms fail-fast (reduced from 150ms)
-            setTimeout(() => {
-              window.removeEventListener('Weavetab-msg-out', listener);
-              resolve("null");
-            }, 100);
-          } catch (e) {
-            resolve("null");
-          }
+                expression: `new Promise((resolve) => {
+          try {
+            const id = Math.random().toString();
+            const listener = (e) => {
+              if (e.detail && e.detail.id === id) {
+                window.removeEventListener('Weavetab-msg-out', listener);
+                resolve(JSON.stringify(e.detail.data));
+              }
+            };
+            window.addEventListener('Weavetab-msg-out', listener);
+            window.dispatchEvent(new CustomEvent('Weavetab-msg-in', { detail: Object.assign({}, ${JSON.stringify(message)}, { id }) }));
+            
+            // Fallback timeout — 100ms fail-fast (reduced from 150ms)
+            setTimeout(() => {
+              window.removeEventListener('Weavetab-msg-out', listener);
+              resolve("null");
+            }, 100);
+          } catch (e) {
+            resolve("null");
+          }
         })`,
                 awaitPromise: true,
                 returnByValue: true
@@ -152,86 +152,86 @@ export async function getFromExtension(session, message, retries = 0) {
 }
 export async function hideWeaveTabOverlay(session) {
     await session.Runtime.evaluate({
-        expression: `(function(){
-      var existing = document.getElementById('__wt_hide_overlay_styles');
-      if (existing) return; // already hidden
-      var style = document.createElement('style');
-      style.id = '__wt_hide_overlay_styles';
-      // Cover ALL Weavetab overlay elements so they never appear in screenshots/PDFs/snapshots:
-      //  - [id^="Weavetab-"]    : Weavetab-root shadow host, any legacy Weavetab- elements
-      //  - [id^="__Weavetab_"]  : __Weavetab_cursor_host (ghost cursor)
-      //  - [id^="wt-"]          : wt-* legacy element IDs
-      //  - [data-wt-internal]   : HUD iframe host (closed shadow DOM mount)
-      //  - [data-wt-ignore]     : any element flagged as agent-invisible
-      //  - .wt-bubble           : thought bubble / action text popups
-      //  - #__wt_ask_bridge     : question input bridge element
-      //  - #wt-debug-overlay    : debug overlay panel
-      //  - #wt-main-container   : WeaveTab OS panel (todos + chat)
-      style.textContent = [
-        '[id^="Weavetab-"]',
-        '[id^="__Weavetab_"]',
-        '[id^="wt-"]',
-        '[data-wt-internal]',
-        '[data-wt-ignore]',
-        '.wt-bubble',
-        '#__wt_ask_bridge',
-        '#wt-debug-overlay',
-        '#wt-main-container',
-      ].join(', ') + ' { display: none !important; visibility: hidden !important; opacity: 0 !important; }';
-      document.head.appendChild(style);
+        expression: `(function(){
+      var existing = document.getElementById('__wt_hide_overlay_styles');
+      if (existing) return; // already hidden
+      var style = document.createElement('style');
+      style.id = '__wt_hide_overlay_styles';
+      // Cover ALL Weavetab overlay elements so they never appear in screenshots/PDFs/snapshots:
+      //  - [id^="Weavetab-"]    : Weavetab-root shadow host, any legacy Weavetab- elements
+      //  - [id^="__Weavetab_"]  : __Weavetab_cursor_host (ghost cursor)
+      //  - [id^="wt-"]          : wt-* legacy element IDs
+      //  - [data-wt-internal]   : HUD iframe host (closed shadow DOM mount)
+      //  - [data-wt-ignore]     : any element flagged as agent-invisible
+      //  - .wt-bubble           : thought bubble / action text popups
+      //  - #__wt_ask_bridge     : question input bridge element
+      //  - #wt-debug-overlay    : debug overlay panel
+      //  - #wt-main-container   : WeaveTab OS panel (todos + chat)
+      style.textContent = [
+        '[id^="Weavetab-"]',
+        '[id^="__Weavetab_"]',
+        '[id^="wt-"]',
+        '[data-wt-internal]',
+        '[data-wt-ignore]',
+        '.wt-bubble',
+        '#__wt_ask_bridge',
+        '#wt-debug-overlay',
+        '#wt-main-container',
+      ].join(', ') + ' { display: none !important; visibility: hidden !important; opacity: 0 !important; }';
+      document.head.appendChild(style);
     })()`,
         returnByValue: false,
     }).catch(() => { });
 }
 export async function restoreWeaveTabOverlay(session) {
     await session.Runtime.evaluate({
-        expression: `(function(){
-      var style = document.getElementById('__wt_hide_overlay_styles');
-      if (style) style.remove();
+        expression: `(function(){
+      var style = document.getElementById('__wt_hide_overlay_styles');
+      if (style) style.remove();
     })()`,
         returnByValue: false,
     }).catch(() => { });
 }
 // ─── Secret Hardening & Containment Helpers ──────────────────────────────────
 export async function applySecretHardening(session, objectId, selector) {
-    const hardeningScript = `function() {
-    try {
-      const el = this;
-      if (!el) return;
-      // Mark as secret
-      try { el.setAttribute('data-wt-secret', 'true'); } catch (_) {}
-      
-      // 1. Redact direct .value access via instance-level property override
-      const proto = Object.getPrototypeOf(el);
-      const origDesc = proto ? Object.getOwnPropertyDescriptor(proto, 'value') : null;
-      if (origDesc) {
-        Object.defineProperty(el, 'value', {
-          get: function() { return '[REDACTED]'; },
-          set: origDesc.set,
-          configurable: true,
-          enumerable: true
-        });
-      }
-      
-      // 2. Defeat array spread, iteration, and coercion
-      try {
-        Object.defineProperty(el, Symbol.iterator, {
-          value: function* () { yield '[REDACTED]'; },
-          configurable: true
-        });
-        Object.defineProperty(el, Symbol.toPrimitive, {
-          value: function() { return '[REDACTED]'; },
-          configurable: true
-        });
-        // Defeat JSON.stringify / structuredClone leaks
-        Object.defineProperty(el, 'toJSON', {
-          value: function() { return '[REDACTED]'; },
-          configurable: true
-        });
-      } catch(_) {}
-    } catch (e) {
-      // fail silently so as not to disrupt the page execution
-    }
+    const hardeningScript = `function() {
+    try {
+      const el = this;
+      if (!el) return;
+      // Mark as secret
+      try { el.setAttribute('data-wt-secret', 'true'); } catch (_) {}
+      
+      // 1. Redact direct .value access via instance-level property override
+      const proto = Object.getPrototypeOf(el);
+      const origDesc = proto ? Object.getOwnPropertyDescriptor(proto, 'value') : null;
+      if (origDesc) {
+        Object.defineProperty(el, 'value', {
+          get: function() { return '[REDACTED]'; },
+          set: origDesc.set,
+          configurable: true,
+          enumerable: true
+        });
+      }
+      
+      // 2. Defeat array spread, iteration, and coercion
+      try {
+        Object.defineProperty(el, Symbol.iterator, {
+          value: function* () { yield '[REDACTED]'; },
+          configurable: true
+        });
+        Object.defineProperty(el, Symbol.toPrimitive, {
+          value: function() { return '[REDACTED]'; },
+          configurable: true
+        });
+        // Defeat JSON.stringify / structuredClone leaks
+        Object.defineProperty(el, 'toJSON', {
+          value: function() { return '[REDACTED]'; },
+          configurable: true
+        });
+      } catch(_) {}
+    } catch (e) {
+      // fail silently so as not to disrupt the page execution
+    }
   }`;
     if (objectId) {
         await session.Runtime.callFunctionOn({
@@ -242,11 +242,11 @@ export async function applySecretHardening(session, objectId, selector) {
     }
     else if (selector) {
         await session.Runtime.evaluate({
-            expression: `(function(sel) {
-        const el = document.querySelector(sel) || (window.__Weavetab_shadowQuery ? window.__Weavetab_shadowQuery(sel) : null);
-        if (el) {
-          (${hardeningScript}).call(el);
-        }
+            expression: `(function(sel) {
+        const el = document.querySelector(sel) || (window.__Weavetab_shadowQuery ? window.__Weavetab_shadowQuery(sel) : null);
+        if (el) {
+          (${hardeningScript}).call(el);
+        }
       })(${JSON.stringify(selector)})`,
             returnByValue: false
         }).catch(() => { });
@@ -260,8 +260,8 @@ export async function registerAndHardenSecretField(session, targetId, selector,
         let resolvedObjectId = objectId;
         if (!resolvedObjectId && selector) {
             const nodeInfo = await session.Runtime.evaluate({
-                expression: `(function(sel) {
-          return document.querySelector(sel) || (window.__Weavetab_shadowQuery ? window.__Weavetab_shadowQuery(sel) : null);
+                expression: `(function(sel) {
+          return document.querySelector(sel) || (window.__Weavetab_shadowQuery ? window.__Weavetab_shadowQuery(sel) : null);
         })(${JSON.stringify(selector)})`,
                 returnByValue: false
             }).catch(() => null);
@@ -287,87 +287,87 @@ export async function registerAndHardenSecretField(session, targetId, selector,
 }
 export async function maskSecretFieldsForCapture(session) {
     await session.Runtime.evaluate({
-        expression: `(function() {
-      var secretRegex = /password|passcode|pin|passphrase|secret|token|auth.?key|access.?code|mot.?de.?passe|contrase[nñ]a|kennwort|senha/i;
-      
-      function queryAllDeep(root, matchFn) {
-        var matched = [];
-        var elements = root.querySelectorAll('*');
-        for (var i = 0; i < elements.length; i++) {
-          var el = elements[i];
-          if (matchFn(el)) matched.push(el);
-          if (el.shadowRoot) {
-            matched = matched.concat(queryAllDeep(el.shadowRoot, matchFn));
-          }
-        }
-        return matched;
-      }
-
-      function isSecretNode(el) {
-        if (!el || !el.tagName) return false;
-        if (el.hasAttribute && el.hasAttribute('data-wt-secret')) return true;
-        var tag = el.tagName.toLowerCase();
-        if (tag === 'input' || tag === 'textarea') {
-          var t = (el.getAttribute('type') || '').toLowerCase();
-          var ac = (el.getAttribute('autocomplete') || '').toLowerCase();
-          var name = (el.getAttribute('name') || '').toLowerCase();
-          var id = (el.getAttribute('id') || '').toLowerCase();
-          var aria = (el.getAttribute('aria-label') || '').toLowerCase();
-          return t === 'password' || ac.includes('password') || secretRegex.test(name) || secretRegex.test(id) || secretRegex.test(aria);
-        }
-        return false;
-      }
-
-      var els = queryAllDeep(document, isSecretNode);
-      for (var i = 0; i < els.length; i++) {
-        var el = els[i];
-        el.__wt_cap_val_backup = el.value;
-        try { el.value = ''; } catch(e) {}
-        if (el.isContentEditable) {
-          el.__wt_cap_txt_backup = el.textContent;
-          try { el.textContent = ''; } catch(e) {}
-        }
-        el.__wt_cap_sec_backup = el.style.webkitTextSecurity;
-        try { el.style.webkitTextSecurity = 'disc'; } catch(e) {}
-      }
+        expression: `(function() {
+      var secretRegex = /password|passcode|pin|passphrase|secret|token|auth.?key|access.?code|mot.?de.?passe|contrase[nñ]a|kennwort|senha/i;
+      
+      function queryAllDeep(root, matchFn) {
+        var matched = [];
+        var elements = root.querySelectorAll('*');
+        for (var i = 0; i < elements.length; i++) {
+          var el = elements[i];
+          if (matchFn(el)) matched.push(el);
+          if (el.shadowRoot) {
+            matched = matched.concat(queryAllDeep(el.shadowRoot, matchFn));
+          }
+        }
+        return matched;
+      }
+
+      function isSecretNode(el) {
+        if (!el || !el.tagName) return false;
+        if (el.hasAttribute && el.hasAttribute('data-wt-secret')) return true;
+        var tag = el.tagName.toLowerCase();
+        if (tag === 'input' || tag === 'textarea') {
+          var t = (el.getAttribute('type') || '').toLowerCase();
+          var ac = (el.getAttribute('autocomplete') || '').toLowerCase();
+          var name = (el.getAttribute('name') || '').toLowerCase();
+          var id = (el.getAttribute('id') || '').toLowerCase();
+          var aria = (el.getAttribute('aria-label') || '').toLowerCase();
+          return t === 'password' || ac.includes('password') || secretRegex.test(name) || secretRegex.test(id) || secretRegex.test(aria);
+        }
+        return false;
+      }
+
+      var els = queryAllDeep(document, isSecretNode);
+      for (var i = 0; i < els.length; i++) {
+        var el = els[i];
+        el.__wt_cap_val_backup = el.value;
+        try { el.value = ''; } catch(e) {}
+        if (el.isContentEditable) {
+          el.__wt_cap_txt_backup = el.textContent;
+          try { el.textContent = ''; } catch(e) {}
+        }
+        el.__wt_cap_sec_backup = el.style.webkitTextSecurity;
+        try { el.style.webkitTextSecurity = 'disc'; } catch(e) {}
+      }
     })()`,
         returnByValue: false,
     }).catch(() => { });
 }
 export async function restoreSecretFieldsAfterCapture(session) {
     await session.Runtime.evaluate({
-        expression: `(function() {
-      function queryAllDeep(root) {
-        var matched = [];
-        var elements = root.querySelectorAll('*');
-        for (var i = 0; i < elements.length; i++) {
-          var el = elements[i];
-          if (el.__wt_cap_val_backup !== undefined || el.__wt_cap_txt_backup !== undefined || el.__wt_cap_sec_backup !== undefined) {
-            matched.push(el);
-          }
-          if (el.shadowRoot) {
-            matched = matched.concat(queryAllDeep(el.shadowRoot));
-          }
-        }
-        return matched;
-      }
-
-      var els = queryAllDeep(document);
-      for (var i = 0; i < els.length; i++) {
-        var el = els[i];
-        if (el.__wt_cap_val_backup !== undefined) {
-          try { el.value = el.__wt_cap_val_backup; } catch(e) {}
-          delete el.__wt_cap_val_backup;
-        }
-        if (el.__wt_cap_txt_backup !== undefined) {
-          try { el.textContent = el.__wt_cap_txt_backup; } catch(e) {}
-          delete el.__wt_cap_txt_backup;
-        }
-        if (el.__wt_cap_sec_backup !== undefined) {
-          try { el.style.webkitTextSecurity = el.__wt_cap_sec_backup; } catch(e) {}
-          delete el.__wt_cap_sec_backup;
-        }
-      }
+        expression: `(function() {
+      function queryAllDeep(root) {
+        var matched = [];
+        var elements = root.querySelectorAll('*');
+        for (var i = 0; i < elements.length; i++) {
+          var el = elements[i];
+          if (el.__wt_cap_val_backup !== undefined || el.__wt_cap_txt_backup !== undefined || el.__wt_cap_sec_backup !== undefined) {
+            matched.push(el);
+          }
+          if (el.shadowRoot) {
+            matched = matched.concat(queryAllDeep(el.shadowRoot));
+          }
+        }
+        return matched;
+      }
+
+      var els = queryAllDeep(document);
+      for (var i = 0; i < els.length; i++) {
+        var el = els[i];
+        if (el.__wt_cap_val_backup !== undefined) {
+          try { el.value = el.__wt_cap_val_backup; } catch(e) {}
+          delete el.__wt_cap_val_backup;
+        }
+        if (el.__wt_cap_txt_backup !== undefined) {
+          try { el.textContent = el.__wt_cap_txt_backup; } catch(e) {}
+          delete el.__wt_cap_txt_backup;
+        }
+        if (el.__wt_cap_sec_backup !== undefined) {
+          try { el.style.webkitTextSecurity = el.__wt_cap_sec_backup; } catch(e) {}
+          delete el.__wt_cap_sec_backup;
+        }
+      }
     })()`,
         returnByValue: false,
     }).catch(() => { });