react-native-ai-debugger 2.9.7 → 2.10.0

package/build/tools/requestTools.js

@@ -7,6 +7,8 @@ import { buildReplayArgs } from "../core/replay.js";
 import { resolveNetworkBuffer } from "../core/toolHelpers.js";
 import { refreshMirror } from "../core/sdkMirrorPoller.js";
 import { activeMockBanner } from "../core/mockRules.js";
+import { issueHttpRequest } from "../core/httpRequest.js";
+import { captureToVault } from "../core/vaultCapture.js";
 async function runAppRequest(expression, maxResultLength, device, toolName, extraNotes = []) {
     const result = await executeInApp(expression, true, { timeoutMs: 30000, originatingToolName: toolName }, device);
     if (!result.success) {
@@ -42,11 +44,11 @@ export function registerRequestTools(server) {
     registerToolWithTelemetry(server, "app_request", {
         description: "Issue an HTTP request from inside the running app, as the logged-in user.\n" +
             "PURPOSE: Probe your backend through the app's real network stack, TLS trust and proxy config — without pasting credentials into the conversation.\n" +
-            "WHY THIS EXISTS: hand-written fetch calls either dig the token out of redux or embed a JWT literal in the expression, which puts the credential in the transcript. auth=\"auto\" resolves it in-app instead.\n" +
             "WHEN TO USE: reproduce a 4xx, check what an endpoint returns for an edge case, clean up test records the UI can't reach.\n" +
             "WORKFLOW: app_request({ method: \"GET\", url: \"https://api.example.com/me\" }) -> inspect status + body.\n" +
             "AUTH RESOLUTION (auth=\"auto\", in order): explicit Authorization header -> redux (state.user.accessToken, state.auth.accessToken, state.auth.token) -> the Authorization header of the app's last captured request. That last step is source-agnostic, so it covers tokens kept outside redux — keychain, secure storage, an Apollo link — as long as the app has already made one authenticated call and the SDK captured it. Cookie auth needs none of this: the native cookie jar attaches cookies to any in-app request.\n" +
             "LIMITATIONS: needs a connected app. Pass an explicit Authorization only when every step above misses — it puts the credential in the transcript.\n" +
+            "GOES THROUGH THE APP: same TLS trust, proxy, cookie jar and credentials, so an active network_mock rule intercepts it too. For a clean request from your own machine — to tell a server bug from a client one — use http_request.\n" +
             "GOOD: app_request({ method: \"DELETE\", url: \"https://api.example.com/address/17\" })\n" +
             "BAD: embedding a bearer token in an execute_in_app expression — it lands in the transcript.",
         inputSchema: {
@@ -138,5 +140,51 @@ export function registerRequestTools(server) {
         }
         return runAppRequest(expression, maxResultLength, device, "network_replay", notes);
     });
+    registerToolWithTelemetry(server, "http_request", {
+        description: "Issue an HTTP request FROM THE HOST (Node), not through the app, carrying a credential you cannot read.\n" +
+            "PURPOSE: Isolate server behaviour from client behaviour. This is what curl was for, minus the part where the token and the whole response landed in the transcript.\n" +
+            "HOW IT DIFFERS FROM app_request: app_request runs inside the app, so it uses the app's TLS trust, proxy, cookie jar and credentials — and an active network_mock rule intercepts it. http_request does none of that: it is a clean request from your machine. Pick app_request when the app's real request conditions matter or the backend enforces attestation (Firebase App Check cannot be satisfied from Node, by design). Pick http_request to find out whether the server or the client is at fault.\n" +
+            "CREDENTIALS: pass auth:{secret:\"<origin or handle>\"} — names come from list_secrets. The value is substituted here and never rendered. A credential is bound to the origin it was observed on and will be refused for any other host.\n" +
+            "READING THE RESULT: a 401 here where app_request succeeds is itself an answer — the backend is enforcing attestation.\n" +
+            "GOOD: http_request({ method: \"GET\", url: \"https://api.acme.io/v1/me\", auth: { secret: \"api.acme.io\" } })\n" +
+            "BAD: pasting a token into headers.Authorization — that puts it in the transcript, which is what the vault exists to avoid.",
+        inputSchema: {
+            method: z.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]).describe("HTTP method."),
+            url: z.string().describe("Absolute http or https URL."),
+            body: z
+                .unknown()
+                .optional()
+                .describe("Request body. An object is JSON-serialised and sets Content-Type: application/json unless you override it; a string is sent verbatim."),
+            headers: z.record(z.string()).optional().describe("Extra request headers. An explicit Authorization wins over auth."),
+            auth: z
+                .object({ secret: z.string().describe("Origin (\"api.acme.io\") or handle (\"auth_api.acme.io\") from list_secrets.") })
+                .optional()
+                .describe("Credential to attach as a bearer token. Typed on purpose: the credential position is structural, never string interpolation, so it cannot be smuggled into an arbitrary field."),
+            maxResultLength: z.number().optional().describe("Target size for the response body in characters (default 25000).")
+        }
+    }, async ({ method, url, body, headers, auth, maxResultLength }) => {
+        const text = await issueHttpRequest({ method, url, body, headers, auth, maxResultLength });
+        return { content: [{ type: "text", text }] };
+    });
+    registerToolWithTelemetry(server, "vault_capture", {
+        description: "Read a credential out of the running app straight into the vault. The value is never returned to you.\n" +
+            "PURPOSE: Cover credentials no captured request revealed — a cold session before the app has made an authenticated call, a token the app refreshed in the background, or one held somewhere no heuristic finds (keychain, expo-secure-store, an Apollo link).\n" +
+            "WHEN TO USE: http_request says no credential is known for an origin, or list_secrets shows the entry as EXPIRED after a re-login.\n" +
+            "WORKFLOW: vault_capture({ expression: \"SecureStore.getItemAsync('access_token')\", origin: \"https://api.acme.io\" }) -> http_request({ ..., auth: { secret: \"api.acme.io\" } }).\n" +
+            "GOOD: vault_capture({ expression: \"store.getState().auth.token\", origin: \"https://api.acme.io\" })\n" +
+            "BAD: reading the same value with execute_in_app — that returns it into the transcript, permanently.",
+        inputSchema: {
+            expression: z
+                .string()
+                .describe("JS evaluated in the app; its result goes to the vault, not to you. An async expression is awaited."),
+            origin: z
+                .string()
+                .describe("Absolute URL of the API this credential authenticates, e.g. https://api.acme.io. Binds the credential: it can only be sent back to this host."),
+            device: z.string().optional().describe("Target device name (substring match). Omit for the default device.")
+        }
+    }, async ({ expression, origin, device }) => {
+        const text = await captureToVault(expression, origin, device);
+        return { content: [{ type: "text", text }] };
+    });
 }
 //# sourceMappingURL=requestTools.js.map

package/build/tools/requestTools.js.map

@@ -1 +1 @@
-{"version":3,"file":"requestTools.js","sourceRoot":"","sources":["../../src/tools/requestTools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAOxD,KAAK,UAAU,aAAa,CACxB,UAAkB,EAClB,eAAmC,EACnC,MAA0B,EAC1B,QAAgB,EAChB,aAAuB,EAAE;IAEzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAC7B,UAAU,EACV,IAAI,EACJ,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EACnD,MAAM,CACT,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO;YACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;YACvF,OAAO,EAAE,IAAI;SAChB,CAAC;IACN,CAAC;IAMD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACxC,IAAI,QAA4B,CAAC;IACjC,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC;YACvB,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,eAAe,IAAI,iBAAiB,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,CAAC,aAAa,OAAO,OAAO,CAAC,MAAM,CAAC,aAAa,SAAS,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;IAC1B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IAClD,yBAAyB,CACrB,MAAM,EACN,aAAa,EACb;QACI,WAAW,EACP,6EAA6E;YAC7E,qJAAqJ;YACrJ,gNAAgN;YAChN,4HAA4H;YAC5H,6GAA6G;YAC7G,igBAAigB;YACjgB,oJAAoJ;YACpJ,0FAA0F;YAC1F,6FAA6F;QACjG,WAAW,EAAE;YACT,MAAM,EAAE,CAAC;iBACJ,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;iBAC/C,QAAQ,CAAC,cAAc,CAAC;YAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YACpD,IAAI,EAAE,CAAC;iBACF,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,oLAAoL,CAAC;YACnM,OAAO,EAAE,CAAC;iBACL,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBAClB,QAAQ,EAAE;iBACV,QAAQ,CAAC,gFAAgF,CAAC;YAC/F,IAAI,EAAE,CAAC;iBACF,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;iBACtB,QAAQ,EAAE;iBACV,QAAQ,CAAC,2MAA2M,CAAC;YAC1N,eAAe,EAAE,CAAC;iBACb,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6GAA6G,CAAC;YAC5H,MAAM,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oEAAoE,CAAC;SACtF;KACJ,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE;QACpE,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,aAAa,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7E,CAAC,CACJ,CAAC;IAEF,yBAAyB,CACrB,MAAM,EACN,gBAAgB,EAChB;QACI,WAAW,EACP,qEAAqE;YACrE,mKAAmK;YACnK,gJAAgJ;YAChJ,wJAAwJ;YACxJ,kUAAkU;YAClU,8JAA8J;YAC9J,4EAA4E;YAC5E,uEAAuE;QAC3E,WAAW,EAAE;YACT,SAAS,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,CAAC,wEAAwE,CAAC;YACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YAC5E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YACjE,OAAO,EAAE,CAAC;iBACL,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBAClB,QAAQ,EAAE;iBACV,QAAQ,CAAC,qDAAqD,CAAC;YACpE,IAAI,EAAE,CAAC;iBACF,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oEAAoE,CAAC;YACnF,IAAI,EAAE,CAAC;iBACF,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;iBACtB,QAAQ,EAAE;iBACV,OAAO,CAAC,MAAM,CAAC;iBACf,QAAQ,CAAC,iIAAiI,CAAC;YAChJ,eAAe,EAAE,CAAC;iBACb,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,kEAAkE,CAAC;YACjF,MAAM,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oEAAoE,CAAC;SACtF;KACJ,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE;QAG/E,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE;YACpE,MAAM;YACN,GAAG;YACH,OAAO;YACP,IAAI;SACP,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,sBAAsB,CAAC;YACtC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YAGvB,OAAO,EAAE,MAAM,CAAC,IAAI;YACpB,IAAI,EAAE,IAAI,IAAI,MAAM;SACvB,CAAC,CAAC;QAIH,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACT,KAAK,CAAC,IAAI,CACN,wGAAwG,MAAM,EAAE,CACnH,CAAC;QACN,CAAC;QAED,OAAO,aAAa,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACvF,CAAC,CACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"requestTools.js","sourceRoot":"","sources":["../../src/tools/requestTools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAOzD,KAAK,UAAU,aAAa,CACxB,UAAkB,EAClB,eAAmC,EACnC,MAA0B,EAC1B,QAAgB,EAChB,aAAuB,EAAE;IAEzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAC7B,UAAU,EACV,IAAI,EACJ,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EACnD,MAAM,CACT,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO;YACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;YACvF,OAAO,EAAE,IAAI;SAChB,CAAC;IACN,CAAC;IAMD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACxC,IAAI,QAA4B,CAAC;IACjC,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC;YACvB,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,eAAe,IAAI,iBAAiB,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,CAAC,aAAa,OAAO,OAAO,CAAC,MAAM,CAAC,aAAa,SAAS,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;IAC1B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IAClD,yBAAyB,CACrB,MAAM,EACN,aAAa,EACb;QACI,WAAW,EACP,6EAA6E;YAC7E,qJAAqJ;YACrJ,4HAA4H;YAC5H,6GAA6G;YAC7G,igBAAigB;YACjgB,oJAAoJ;YACpJ,qOAAqO;YACrO,0FAA0F;YAC1F,6FAA6F;QACjG,WAAW,EAAE;YACT,MAAM,EAAE,CAAC;iBACJ,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;iBAC/C,QAAQ,CAAC,cAAc,CAAC;YAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YACpD,IAAI,EAAE,CAAC;iBACF,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,oLAAoL,CAAC;YACnM,OAAO,EAAE,CAAC;iBACL,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBAClB,QAAQ,EAAE;iBACV,QAAQ,CAAC,gFAAgF,CAAC;YAC/F,IAAI,EAAE,CAAC;iBACF,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;iBACtB,QAAQ,EAAE;iBACV,QAAQ,CAAC,2MAA2M,CAAC;YAC1N,eAAe,EAAE,CAAC;iBACb,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6GAA6G,CAAC;YAC5H,MAAM,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oEAAoE,CAAC;SACtF;KACJ,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE;QACpE,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,aAAa,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7E,CAAC,CACJ,CAAC;IAEF,yBAAyB,CACrB,MAAM,EACN,gBAAgB,EAChB;QACI,WAAW,EACP,qEAAqE;YACrE,mKAAmK;YACnK,gJAAgJ;YAChJ,wJAAwJ;YACxJ,kUAAkU;YAClU,8JAA8J;YAC9J,4EAA4E;YAC5E,uEAAuE;QAC3E,WAAW,EAAE;YACT,SAAS,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,CAAC,wEAAwE,CAAC;YACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YAC5E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YACjE,OAAO,EAAE,CAAC;iBACL,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBAClB,QAAQ,EAAE;iBACV,QAAQ,CAAC,qDAAqD,CAAC;YACpE,IAAI,EAAE,CAAC;iBACF,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oEAAoE,CAAC;YACnF,IAAI,EAAE,CAAC;iBACF,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;iBACtB,QAAQ,EAAE;iBACV,OAAO,CAAC,MAAM,CAAC;iBACf,QAAQ,CAAC,iIAAiI,CAAC;YAChJ,eAAe,EAAE,CAAC;iBACb,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,kEAAkE,CAAC;YACjF,MAAM,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oEAAoE,CAAC;SACtF;KACJ,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE;QAG/E,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE;YACpE,MAAM;YACN,GAAG;YACH,OAAO;YACP,IAAI;SACP,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,sBAAsB,CAAC;YACtC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YAGvB,OAAO,EAAE,MAAM,CAAC,IAAI;YACpB,IAAI,EAAE,IAAI,IAAI,MAAM;SACvB,CAAC,CAAC;QAIH,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACT,KAAK,CAAC,IAAI,CACN,wGAAwG,MAAM,EAAE,CACnH,CAAC;QACN,CAAC;QAED,OAAO,aAAa,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACvF,CAAC,CACJ,CAAC;IAEF,yBAAyB,CACrB,MAAM,EACN,cAAc,EACd;QACI,WAAW,EACP,2GAA2G;YAC3G,uKAAuK;YACvK,+eAA+e;YAC/e,2OAA2O;YAC3O,yHAAyH;YACzH,kHAAkH;YAClH,4HAA4H;QAChI,WAAW,EAAE;YACT,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YACrG,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YACvD,IAAI,EAAE,CAAC;iBACF,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,uIAAuI,CAAC;YACtJ,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;YACrH,IAAI,EAAE,CAAC;iBACF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC,EAAE,CAAC;iBACvH,QAAQ,EAAE;iBACV,QAAQ,CAAC,gLAAgL,CAAC;YAC/L,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;SACtH;KACJ,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC3F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1D,CAAC,CACJ,CAAC;IAEF,yBAAyB,CACrB,MAAM,EACN,eAAe,EACf;QACI,WAAW,EACP,yGAAyG;YACzG,gQAAgQ;YAChQ,qIAAqI;YACrI,uLAAuL;YACvL,yGAAyG;YACzG,qGAAqG;QACzG,WAAW,EAAE;YACT,UAAU,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,CAAC,oGAAoG,CAAC;YACnH,MAAM,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,+IAA+I,CAAC;YAC9J,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;SAC/G;KACJ,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1D,CAAC,CACJ,CAAC;AACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "react-native-ai-debugger",
-    "version": "2.9.7",
+    "version": "2.10.0",
     "mcpName": "com.execbro/execbro",
     "description": "React Native AI debugger: MCP server giving AI agents eyes and hands in your running app (logs, network, state inspection, tap, screenshot). Published as ExecBro.",
     "type": "module",
@@ -19,7 +19,7 @@
         "test:integration": "NODE_OPTIONS='--experimental-vm-modules' jest --testPathPatterns='__tests__/integration'",
         "test:tap": "node --experimental-vm-modules node_modules/.bin/jest --testPathPatterns='tap-strategies' --no-coverage --testTimeout=30000",
         "tools:json": "npm run build && node scripts/generate-tools-json.mjs",
-        "postbuild": "node scripts/generate-tools-json.mjs && node scripts/check-build-hygiene.mjs"
+        "postbuild": "node scripts/generate-tools-json.mjs && node scripts/check-build-hygiene.mjs && node scripts/check-injected-js.mjs"
     },
     "keywords": [
         "mcp",
@@ -47,7 +47,7 @@
         "type": "git",
         "url": "git+https://github.com/igorzheludkov/execbro.git"
     },
-    "homepage": "https://github.com/igorzheludkov/execbro#readme",
+    "homepage": "https://execbro.com/",
     "bugs": {
         "url": "https://github.com/igorzheludkov/execbro/issues"
     },

package/tools.json

@@ -1,6 +1,6 @@
 {
     "generatedFrom": "toolRegistry",
-    "count": 60,
+    "count": 63,
     "tools": [
         "activate_license",
         "android_key_event",
@@ -33,6 +33,7 @@
         "get_screen_layout",
         "get_screen_state",
         "get_usage_guide",
+        "http_request",
         "input_text",
         "inspect_at_point",
         "inspect_component",
@@ -45,6 +46,7 @@
         "ios_terminate_app",
         "list_debug_globals",
         "list_devices",
+        "list_secrets",
         "logbox",
         "measure",
         "navigate",
@@ -61,7 +63,8 @@
         "search_network",
         "send_feedback",
         "swipe",
-        "tap"
+        "tap",
+        "vault_capture"
     ],
     "params": {
         "activate_license": [
@@ -234,6 +237,14 @@
         "get_usage_guide": [
             "topic"
         ],
+        "http_request": [
+            "auth",
+            "body",
+            "headers",
+            "maxResultLength",
+            "method",
+            "url"
+        ],
         "input_text": [
             "component",
             "device",
@@ -301,6 +312,7 @@
         "list_devices": [
             "refresh"
         ],
+        "list_secrets": [],
         "logbox": [
             "action",
             "device",
@@ -439,6 +451,11 @@
             "verify",
             "x",
             "y"
+        ],
+        "vault_capture": [
+            "device",
+            "expression",
+            "origin"
         ]
     }
 }