chromex-mcp 1.8.1 → 1.8.2

package/README.md

@@ -78,7 +78,7 @@ Chromex is a direct CDP layer for coding agents. It sits between raw Chrome DevT
 
 The core runtime uses only Node.js built-in modules. Chromex does not install heavy browser automation runtimes, Selenium, browser drivers, telemetry SDKs, update checkers, or bundled browsers.
 
-The only exception is the optional `audit` command: it runs Lighthouse as a subprocess with `npx --yes lighthouse` when you explicitly run an audit. All other CLI and MCP commands run through Chromex's own CDP client.
+The only exception is the optional `audit` command: it uses `npx` to resolve Lighthouse on demand, then runs the Lighthouse JavaScript CLI directly with Node when you explicitly run an audit. All other CLI and MCP commands run through Chromex's own CDP client.
 
 Development dependencies are used only for tests and token benchmarks.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chromex-mcp",
-  "version": "1.8.1",
+  "version": "1.8.2",
   "description": "Agent-first Chrome DevTools toolkit with a token-efficient CLI, 85 typed MCP tools, modal-free pipe transport, diagnostics, memory analysis, extensions, and WebMCP.",
   "type": "module",
   "bin": {

package/plugins/chromex/skills/chromex/scripts/lib/commands/audit.mjs

@@ -1,4 +1,3 @@
-// Lighthouse audit via subprocess (zero deps -- invokes npx lighthouse externally)
 // Chrome: connects to existing browser via --port (reuses session)
 // Other browsers (Brave, Edge, etc.): Lighthouse launches its own headless Chrome
 
@@ -8,6 +7,53 @@ import { resolveArtifactPath } from '../artifacts.mjs';
 import { evalStr } from './evaluate.mjs';
 
 const VALID_CATEGORIES = ['performance', 'accessibility', 'seo', 'best-practices'];
+const LIGHTHOUSE_PACKAGE = 'lighthouse';
+const LIGHTHOUSE_RESOLVER = `
+const { existsSync, realpathSync } = require('node:fs');
+const { delimiter, join } = require('node:path');
+const executablePath = (process.env.PATH || '')
+  .split(delimiter)
+  .map(directory => join(directory, 'lighthouse'))
+  .find(existsSync);
+if (!executablePath) throw new Error('Lighthouse executable not found');
+process.stdout.write(realpathSync(executablePath));
+`;
+let cachedLighthouseCliPath;
+
+function resolveLighthouseCliPath() {
+  if (cachedLighthouseCliPath && existsSync(cachedLighthouseCliPath)) {
+    return cachedLighthouseCliPath;
+  }
+
+  try {
+    const cliPath = execFileSync('npx', [
+      '--yes',
+      `--package=${LIGHTHOUSE_PACKAGE}`,
+      '--',
+      process.execPath,
+      '-e',
+      LIGHTHOUSE_RESOLVER,
+    ], {
+      encoding: 'utf8',
+      timeout: 120000,
+      stdio: ['pipe', 'pipe', 'pipe'],
+      shell: false,
+    }).trim();
+
+    if (!cliPath || !existsSync(cliPath)) {
+      throw new Error('Lighthouse executable not found after installation');
+    }
+
+    cachedLighthouseCliPath = cliPath;
+    return cachedLighthouseCliPath;
+  } catch (error) {
+    const stderr = error.stderr?.toString().trim() || '';
+    if (error.code === 'ENOENT') {
+      throw new Error('npx not found. Install Node.js with npm.');
+    }
+    throw new Error(`Lighthouse setup failed: ${stderr || error.message}`);
+  }
+}
 
 // Find any Chromium-based browser for CHROME_PATH env var
 function findChromiumPath() {
@@ -89,7 +135,8 @@ export async function auditStr(cdp, sid, categories, device, reportPath) {
     mode = 'standalone (headless Chrome)';
   }
 
-  const lighthouseArgs = ['--yes', 'lighthouse', url, ...args];
+  const lighthouseArgs = [url, ...args];
+  const lighthouseCliPath = resolveLighthouseCliPath();
 
   // Set CHROME_PATH for standalone mode (Lighthouse uses chrome-launcher which reads it)
   const env = { ...process.env };
@@ -100,7 +147,7 @@ export async function auditStr(cdp, sid, categories, device, reportPath) {
 
   let jsonOutput;
   try {
-    jsonOutput = execFileSync('npx', lighthouseArgs, {
+    jsonOutput = execFileSync(process.execPath, [lighthouseCliPath, ...lighthouseArgs], {
       encoding: 'utf8',
       timeout: 120000,
       stdio: ['pipe', 'pipe', 'pipe'],
@@ -110,9 +157,6 @@ export async function auditStr(cdp, sid, categories, device, reportPath) {
     });
   } catch (e) {
     const stderr = e.stderr?.toString().trim() || '';
-    if (e.code === 'ENOENT' || stderr.includes('not found') || stderr.includes('ENOENT')) {
-      throw new Error('lighthouse not found. Install: npm i -g lighthouse');
-    }
     if (stderr.includes('No Chrome installations found')) {
       throw new Error('Lighthouse needs Chrome installed to run in standalone mode. Install Google Chrome or run against a Chrome instance with debug port.');
     }

package/plugins/chromex/skills/chromex/scripts/mcp-server.mjs

@@ -801,7 +801,7 @@ const TOOLS = [
       categories: { type: 'string', description: 'Comma-separated: performance,accessibility,seo,best-practices (default: all)' },
       device: { type: 'string', enum: ['mobile', 'desktop'], description: 'Device preset (default: mobile)' },
       reportPath: { type: 'string', description: 'Path to save full HTML report' },
-    }, ['target'], RW),
+    }, ['target'], DESTRUCTIVE),
 
   tool('chromex_stats',
     'Session analytics: command counts, average timing, error rates, action timeline. All data is local, never sent externally.',
@@ -1053,7 +1053,7 @@ function toolToCmd(name, p) {
       return { cmd: 'webmcp', args: a };
     }
     case 'chromex_webauthn':   return { cmd: 'webauthn', args: [p.action] };
-    case 'chromex_audit':      return { cmd: 'audit', args: [p.categories || '', p.device || '', p.reportPath || ''].filter(Boolean) };
+    case 'chromex_audit':      return { cmd: 'audit', args: [p.categories ?? '', p.device ?? '', p.reportPath ?? ''] };
     case 'chromex_stats': {
       const a = [];
       if (p.full) a.push('--full');