shadow-claw 1.32.0 → 1.33.0

package/dist/server.js

@@ -1,4 +1,4 @@
-import e,{createRequire as t}from"node:module";import n from"process";import{env as r,exit as i}from"node:process";import a from"node:http";import o from"node:https";import s,{basename as c}from"node:path";import l,{constants as u,createReadStream as d,promises as f,statSync as p}from"node:fs";import m,{tmpdir as h}from"node:os";import g,{URL as _,fileURLToPath as v,format as y}from"node:url";import b from"tcp-port-used";import x from"compression";import S from"express";import C from"web-push";import{DatabaseSync as w}from"node:sqlite";import{createHash as T,randomBytes as E,randomUUID as D}from"node:crypto";import O from"cors";import{Buffer as k}from"buffer";import A from"express-urlrewrite";import{BedrockClient as j,ListFoundationModelsCommand as M,ListInferenceProfilesCommand as N}from"@aws-sdk/client-bedrock";import{BedrockRuntimeClient as P,ConverseCommand as F,ConverseStreamCommand as I}from"@aws-sdk/client-bedrock-runtime";import{fromNodeProviderChain as L,fromSSO as ee}from"@aws-sdk/credential-providers";import*as te from"fs";import{createWriteStream as ne}from"fs";import*as R from"stream";import re from"node:zlib";import ie,{PassThrough as ae,Readable as oe,pipeline as se}from"node:stream";import{Buffer as z}from"node:buffer";import{deprecate as ce,promisify as le,types as ue}from"node:util";import{isIP as de}from"node:net";import*as fe from"path";import*as pe from"fs/promises";import{writeFile as me}from"fs/promises";import{finished as he}from"node:stream/promises";import{access as ge,mkdir as _e,readFile as ve,readdir as ye,stat as be,unlink as xe,writeFile as Se}from"node:fs/promises";import{execFileSync as Ce,spawn as we}from"node:child_process";import{EventEmitter as Te}from"node:events";var Ee=Object.create,De=Object.defineProperty,Oe=Object.getOwnPropertyDescriptor,ke=Object.getOwnPropertyNames,Ae=Object.getPrototypeOf,je=Object.prototype.hasOwnProperty,B=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(e){throw n=[e],e}},V=(e,t)=>()=>(t||(e((t={exports:{}}).exports,t),e=null),t.exports),Me=(e,t)=>{let n={};for(var r in e)De(n,r,{get:e[r],enumerable:!0});return t||De(n,Symbol.toStringTag,{value:`Module`}),n},Ne=(e,t,n,r)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var i=ke(t),a=0,o=i.length,s;a<o;a++)s=i[a],!je.call(e,s)&&s!==n&&De(e,s,{get:(e=>t[e]).bind(null,s),enumerable:!(r=Oe(t,s))||r.enumerable});return e},Pe=(e,t,n)=>(n=e==null?{}:Ee(Ae(e)),Ne(t||!e||!e.__esModule?De(n,`default`,{value:e,enumerable:!0}):n,e)),H=t(import.meta.url);const Fe=new class{loading=!1;models=new Map;getModelInfo(e){return this.models.get(e.toLowerCase())??null}registerModelInfo(e,t){this.models.set(e.toLowerCase(),t)}clear(){this.models.clear()}async fetchModelInfo(e,t,n){if(e.modelsUrl){this.loading=!0;try{let r=new Headers;if(r.set(`Content-Type`,`application/json`),e.headers)for(let[t,n]of Object.entries(e.headers))r.set(t,n);if(n)for(let[e,t]of Object.entries(n))r.set(e,t);if(t&&e.apiKeyHeader){let n=e.apiKeyHeaderFormat;r.set(e.apiKeyHeader,n?n.replace(`{key}`,t):t)}let i=await fetch(e.modelsUrl,{headers:r});if(!i.ok)throw Error(`HTTP ${i.status} ${i.statusText}`);let a=await i.json(),o=Array.isArray(a.data)?a.data:Array.isArray(a.models)?a.models:[];for(let e of o){if(!e.id)continue;let t=e.context_length??e.context_window??0,n=e.max_completion_tokens||e.per_request_limits?.completion_tokens||e.top_provider?.max_completion_tokens||null,r=typeof e.supports_tools==`boolean`?e.supports_tools:typeof e.supportsTools==`boolean`?e.supportsTools:void 0,i=this.extractModalities(e,`input`),a=this.extractModalities(e,`output`),o=this.modalitiesInclude(i,`image`,`vision`),s=this.modalitiesInclude(i,`audio`,`voice`,`hearing`),c=this.modalitiesInclude(i,`video`),l=e.id===`openrouter/free`||this.supportedParametersInclude(e,`image`,`vision`,`audio`,`tool`,`structured`),u=this.extractReasoning(e);!t&&Array.isArray(e.providers)&&e.providers.length>0&&(t=e.providers[0]?.context_length||0),this.registerModelInfo(e.id,{contextWindow:t,maxOutput:n,...r!==void 0&&{supportsTools:r},...i.length>0&&{inputModalities:i},...a.length>0&&{outputModalities:a},...o!==void 0&&{supportsImageInput:o},...s!==void 0&&{supportsAudioInput:s},...c!==void 0&&{supportsVideoInput:c},...u&&{reasoning:u},...l&&{routesByRequestFeatures:l}})}o.length>0&&console.log(`[ModelRegistry] Registered ${o.length} models for provider "${e.id}"`)}catch(t){console.error(`[ModelRegistry] Error fetching models for ${e.id}:`,t)}finally{this.loading=!1}}}extractModalities(e,t){let n=t===`input`?e.input_modalities||e.inputModalities:e.output_modalities||e.outputModalities,r=e.architecture||{},i=t===`input`?r.input_modalities||r.inputModalities:r.output_modalities||r.outputModalities,a=typeof r.modality==`string`?r.modality:``,o=this.parseArchitectureModality(a,t),s=[...this.normalizeStringArray(n),...this.normalizeStringArray(i),...o];return Array.from(new Set(s))}extractReasoning(e){let t=e?.reasoning;if(!t||typeof t!=`object`)return;let n=this.normalizeStringArray(t.supported_efforts),r=typeof t.default_effort==`string`?t.default_effort.toLowerCase():void 0,i=typeof t.default_enabled==`boolean`?t.default_enabled:void 0,a=typeof t.supports_max_tokens==`boolean`?t.supports_max_tokens:void 0,o=typeof t.mandatory==`boolean`?t.mandatory:void 0;if(!(n.length===0&&r===void 0&&i===void 0&&a===void 0&&o===void 0))return{...n.length>0&&{supportedEfforts:n},...r!==void 0&&{defaultEffort:r},...i!==void 0&&{defaultEnabled:i},...a!==void 0&&{supportsMaxTokens:a},...o!==void 0&&{mandatory:o}}}modalitiesInclude(e,...t){if(e.length!==0)return t.some(t=>e.some(e=>e.includes(t)))}normalizeStringArray(e){return Array.isArray(e)?e.filter(e=>typeof e==`string`).map(e=>e.toLowerCase()):[]}parseArchitectureModality(e,t){if(!e)return[];let[n=``,r=``]=e.toLowerCase().split(`->`).map(e=>e.trim());return(t===`input`?n:r).split(/[+,/\s]+/).map(e=>e.trim()).filter(Boolean)}supportedParametersInclude(e,...t){let n=this.normalizeStringArray(e.supported_parameters||e.supportedParameters);return t.some(e=>n.some(t=>t.includes(e)))}};function Ie(e){return e.replace(/^\/+|\/+$/g,``)}function Le(e){let t=Ie(e);return t.endsWith(`/index.html`)?t=t.slice(0,-11):t.endsWith(`index.html`)&&(t=t.slice(0,-10)),Ie(t)}function Re(e){let t=Ie(e),n=t.split(`/`).filter(Boolean);if(n.length===0)return null;let r=n[0].toLowerCase();if(r===`pages`){if(n.length>=3){let e=n[1];return{page:`pages`,groupId:e===`main`?`br:main`:e.startsWith(`br-`)?`br:${e.slice(3)}`:e,path:n.slice(2).join(`/`)}}return{page:`pages`,groupId:`br:main`,path:n.slice(1).join(`/`)}}if(r===`files`){let e=n[1]||`main`;return{page:`files`,groupId:e===`main`?`br:main`:e.startsWith(`br-`)?`br:${e.slice(3)}`:e,path:n.slice(2).join(`/`)||void 0}}if(r===`chat`){let e=n[1]||`main`;return{page:`chat`,groupId:e===`main`?`br:main`:e.startsWith(`br-`)?`br:${e.slice(3)}`:e}}if(r===`tasks`){let e=n[1]||`main`;return{page:`tasks`,groupId:e===`main`?`br:main`:e.startsWith(`br-`)?`br:${e.slice(3)}`:e}}return r===`main`?{page:`pages`,groupId:`br:main`,path:n.slice(1).join(`/`)}:{page:`pages`,groupId:`br:main`,path:t}}function ze(){if(typeof document<`u`){let e=document.getElementById(`shadow-claw-static-routing`);if(e&&e.textContent)try{let t=JSON.parse(e.textContent);if(t&&typeof t==`object`&&t.routes)return t}catch(e){console.warn(`Failed to parse embedded static routing manifest:`,e)}}return null}function Be(e,t){let n=t||ze();if(!n||!n.routes)return null;let r=Le(e);if(!r)return null;for(let[e,t]of Object.entries(n.routes))if(!(!t||!t.prettyPath)&&Le(t.prettyPath)===r)return Re(e);return null}let Ve=null;const He=new Set([`chat`,`files`,`tasks`,`pages`,`settings`,`tools`,`channels`]);function Ue(){Ve=null}typeof globalThis<`u`&&(globalThis.__applyBasePathCacheReset=Ue);function We(){let e=typeof window<`u`?window:typeof self<`u`?self:globalThis;if(e&&e.__SHADOWCLAW_DEPLOY_ID__){let t=String(e.__SHADOWCLAW_DEPLOY_ID__).trim();if(t)return t.replace(/[^a-zA-Z0-9_-]/g,`-`)}let t=globalThis.process;if(t&&t.env&&t.env.SHADOWCLAW_DEPLOY_ID){let e=String(t.env.SHADOWCLAW_DEPLOY_ID).trim();if(e)return e.replace(/[^a-zA-Z0-9_-]/g,`-`)}let n=Ge();return!n||n===`/`?``:n.replace(/^\/+|\/+$/g,``).replace(/[^a-zA-Z0-9_-]/g,`-`)}function Ge(){if(Ve!==null)return Ve;if((typeof window>`u`||globalThis.WorkerGlobalScope!==void 0&&typeof self<`u`&&self instanceof globalThis.WorkerGlobalScope)&&typeof self<`u`&&self.location){let e=(self.location.pathname||`/`).split(`/`).filter(Boolean);if(e.length<=1)return Ve=`/`,Ve;let t=e[0].toLowerCase(),n=t===`service-worker.js`||t===`sw.js`||t===`manifest.json`||t===`sitemap.xml`||t===`favicon.ico`||t===`index.html`||t===`service-worker`||t===`assets`||t===`dist`||t===`public`;if(n&&e.length===2)return Ve=`/`,Ve;if(!n)return Ve=`/`+e[0]+`/`,Ve}let e=typeof window<`u`&&window.location?window.location:typeof self<`u`&&self.location?self.location:null;if(!e)return`/`;if(typeof document<`u`&&typeof document.querySelector==`function`){let t=document.querySelector(`base[href]`);if(t){let n=t.getAttribute(`href`);if(n)try{let t=new URL(n,e.origin).pathname;return t.endsWith(`/`)||(t+=`/`),Ve=t,Ve}catch{}}}let t=e.pathname||`/`;if(t===`/`)return Ve=`/`,Ve;let n=t.split(`/`).filter(Boolean),r=n.findIndex(e=>He.has(e.toLowerCase()));return r>=0?r===0?(Ve=`/`,Ve):(Ve=`/`+n.slice(0,r).join(`/`)+`/`,Ve):Be(t)?(Ve=`/`,Ve):n.length===1&&!t.includes(`.`)?(Ve=`/`+n[0]+`/`,Ve):(Ve=`/`,Ve)}function Ke(e){let t=e.replace(/[.*+?^${}()|[\]\\]/g,`\\$&`);return RegExp(`(^|\\s)@${t}\\b`,`i`)}Ke(`ShadowClaw`);function qe(){let e=We();return e?`shadowclaw-${e}`:`shadowclaw`}qe();const Je={github:{providerId:`github`,name:`GitHub`,aliases:[`github`,`api.github.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`,`git_remote`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`token `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://github.com/login/oauth/authorize`,tokenUrl:`https://github.com/login/oauth/access_token`,defaultScopes:[`repo`,`read:user`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},gitlab:{providerId:`gitlab`,name:`GitLab`,aliases:[`gitlab`,`gitlab.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`,`git_remote`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`PRIVATE-TOKEN`,headerPrefix:``},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},tokenAuthByServiceType:{git_remote:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}}},oauth:{authorizeUrl:`https://gitlab.com/oauth/authorize`,tokenUrl:`https://gitlab.com/oauth/token`,defaultScopes:[`read_api`,`read_user`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},figma:{providerId:`figma`,name:`Figma`,aliases:[`figma`,`api.figma.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`X-Figma-Token`,headerPrefix:``},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://www.figma.com/oauth`,tokenUrl:`https://api.figma.com/v1/oauth/token`,refreshUrl:`https://api.figma.com/v1/oauth/refresh`,defaultScopes:[],usePkce:!0,clientAuthMethod:`basic_header`,scopeSeparator:`space`}},notion:{providerId:`notion`,name:`Notion`,aliases:[`notion`,`api.notion.com`,`notion.so`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://api.notion.com/v1/oauth/authorize`,tokenUrl:`https://api.notion.com/v1/oauth/token`,defaultScopes:[],usePkce:!0,clientAuthMethod:`basic_header`,scopeSeparator:`space`}},microsoft_graph:{providerId:`microsoft_graph`,name:`Microsoft Graph`,aliases:[`microsoft`,`graph.microsoft.com`,`microsoft_graph`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://login.microsoftonline.com/common/oauth2/v2.0/authorize`,tokenUrl:`https://login.microsoftonline.com/common/oauth2/v2.0/token`,defaultScopes:[`openid`,`profile`,`offline_access`,`User.Read`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},yahoo_mail:{providerId:`yahoo_mail`,name:`Yahoo Mail`,aliases:[`yahoo`,`yahoo_mail`,`mail.yahoo.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://api.login.yahoo.com/oauth2/request_auth`,tokenUrl:`https://api.login.yahoo.com/oauth2/get_token`,defaultScopes:[`mail-r`,`mail-w`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},google:{providerId:`google`,name:`Google`,aliases:[`google`,`googleapis.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://accounts.google.com/o/oauth2/v2/auth`,tokenUrl:`https://oauth2.googleapis.com/token`,defaultScopes:[`openid`,`profile`,`email`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},atlassian:{providerId:`atlassian`,name:`Atlassian`,aliases:[`atlassian`,`api.atlassian.com`],modes:[`oauth`,`token`,`basic`],defaultMode:`basic`,serviceTypes:[`http_api`,`git_remote`],authTypes:[`token`,`oauth`,`basic_userpass`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `},basic:{headerName:`Authorization`,headerPrefix:`Basic `}},oauth:{authorizeUrl:`https://auth.atlassian.com/authorize`,tokenUrl:`https://auth.atlassian.com/oauth/token`,defaultScopes:[],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},slack:{providerId:`slack`,name:`Slack`,aliases:[`slack`,`slack.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://slack.com/oauth/v2/authorize`,tokenUrl:`https://slack.com/api/oauth.v2.access`,defaultScopes:[],usePkce:!1,clientAuthMethod:`request_body`,scopeSeparator:`comma`}},linear:{providerId:`linear`,name:`Linear`,aliases:[`linear`,`api.linear.app`,`linear.app`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://linear.app/oauth/authorize`,tokenUrl:`https://api.linear.app/oauth/token`,defaultScopes:[],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},azure_devops:{providerId:`azure_devops`,name:`Azure DevOps`,aliases:[`azure_devops`,`dev.azure.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`,`git_remote`],authTypes:[`token`,`oauth`,`basic_userpass`,`ssh_key`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},tokenAuthByServiceType:{git_remote:{token:{headerName:`Authorization`,headerPrefix:`Basic `},oauth:{headerName:`Authorization`,headerPrefix:`Basic `}}},oauth:{authorizeUrl:`https://app.vssps.visualstudio.com/oauth2/authorize`,tokenUrl:`https://app.vssps.visualstudio.com/oauth2/token`,defaultScopes:[`vso.code`,`vso.profile`,`offline_access`],usePkce:!1,clientAuthMethod:`request_body`,scopeSeparator:`space`}},custom_mcp:{providerId:`custom_mcp`,name:`Custom MCP`,aliases:[`custom_mcp`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`mcp_remote`,`webmcp_local`],authTypes:[`none`,`token`,`oauth`,`custom_header`,`ssh_key`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://example.com/oauth/authorize`,tokenUrl:`https://example.com/oauth/token`,defaultScopes:[],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}}},Ye=Object.fromEntries(Object.values(Je).filter(e=>!!e.oauth).map(e=>{let t=e.oauth;return[e.providerId,{id:e.providerId,name:e.name,authorizeUrl:t.authorizeUrl,tokenUrl:t.tokenUrl,redirectUri:t.redirectUri,defaultScopes:t.defaultScopes,usePkce:t.usePkce,clientAuthMethod:t.clientAuthMethod,scopeSeparator:t.scopeSeparator}]}));Object.fromEntries(Object.values(Je).map(e=>[e.providerId,{providerId:e.providerId,modes:e.modes,defaultMode:e.defaultMode}]));function Xe(e){return Ye[e]||null}let Ze=null;function Qe(e=`database/push-subscriptions.db`){if(Ze)return Ze;Ze=new w(e),Ze.exec(`
+import e,{createRequire as t}from"node:module";import n from"process";import{env as r,exit as i}from"node:process";import a from"node:http";import o from"node:https";import s,{basename as c}from"node:path";import l,{constants as u,createReadStream as d,promises as f,statSync as p}from"node:fs";import m,{tmpdir as h}from"node:os";import g,{URL as _,fileURLToPath as v,format as y}from"node:url";import b from"tcp-port-used";import x from"compression";import S from"express";import C from"web-push";import{DatabaseSync as w}from"node:sqlite";import{createHash as T,randomBytes as E,randomUUID as D}from"node:crypto";import O from"cors";import{Buffer as k}from"buffer";import A from"express-urlrewrite";import{BedrockClient as j,ListFoundationModelsCommand as M,ListInferenceProfilesCommand as N}from"@aws-sdk/client-bedrock";import{BedrockRuntimeClient as P,ConverseCommand as F,ConverseStreamCommand as I}from"@aws-sdk/client-bedrock-runtime";import{fromNodeProviderChain as L,fromSSO as ee}from"@aws-sdk/credential-providers";import*as te from"fs";import{createWriteStream as ne}from"fs";import*as R from"stream";import re from"node:zlib";import ie,{PassThrough as ae,Readable as oe,pipeline as se}from"node:stream";import{Buffer as z}from"node:buffer";import{deprecate as ce,promisify as le,types as ue}from"node:util";import{isIP as de}from"node:net";import*as fe from"path";import*as pe from"fs/promises";import{writeFile as me}from"fs/promises";import{finished as he}from"node:stream/promises";import{access as ge,mkdir as _e,readFile as ve,readdir as ye,stat as be,unlink as xe,writeFile as Se}from"node:fs/promises";import{execFileSync as Ce,spawn as we}from"node:child_process";import{EventEmitter as Te}from"node:events";var Ee=Object.create,De=Object.defineProperty,Oe=Object.getOwnPropertyDescriptor,ke=Object.getOwnPropertyNames,Ae=Object.getPrototypeOf,je=Object.prototype.hasOwnProperty,B=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(e){throw n=[e],e}},V=(e,t)=>()=>(t||(e((t={exports:{}}).exports,t),e=null),t.exports),Me=(e,t)=>{let n={};for(var r in e)De(n,r,{get:e[r],enumerable:!0});return t||De(n,Symbol.toStringTag,{value:`Module`}),n},Ne=(e,t,n,r)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var i=ke(t),a=0,o=i.length,s;a<o;a++)s=i[a],!je.call(e,s)&&s!==n&&De(e,s,{get:(e=>t[e]).bind(null,s),enumerable:!(r=Oe(t,s))||r.enumerable});return e},Pe=(e,t,n)=>(n=e==null?{}:Ee(Ae(e)),Ne(t||!e||!e.__esModule?De(n,`default`,{value:e,enumerable:!0}):n,e)),H=t(import.meta.url);const Fe=new class{loading=!1;models=new Map;getModelInfo(e){if(!e||typeof e!=`string`)return null;let t=e.toLowerCase().trim(),n=this.models.get(t);if(n)return n;if(t.includes(`/`)){let e=t.split(`/`).pop();if(e&&this.models.has(e))return this.models.get(e)}else for(let[e,n]of this.models.entries())if(e.endsWith(`/${t}`))return n;if(t.includes(`:`)){let e=t.split(`:`)[0],n=this.getModelInfo(e);if(n)return n}return null}registerModelInfo(e,t){this.models.set(e.toLowerCase(),t)}clear(){this.models.clear()}async fetchModelInfo(e,t,n){if(e.modelsUrl){this.loading=!0;try{let r=new Headers;if(r.set(`Content-Type`,`application/json`),e.headers)for(let[t,n]of Object.entries(e.headers))r.set(t,n);if(n)for(let[e,t]of Object.entries(n))r.set(e,t);if(t&&e.apiKeyHeader){let n=e.apiKeyHeaderFormat;r.set(e.apiKeyHeader,n?n.replace(`{key}`,t):t)}let i=await fetch(e.modelsUrl,{headers:r});if(!i.ok)throw Error(`HTTP ${i.status} ${i.statusText}`);let a=await i.json(),o=Array.isArray(a.data)?a.data:Array.isArray(a.models)?a.models:[];for(let e of o){if(!e.id)continue;let t=e.context_length??e.context_window??0,n=e.max_completion_tokens||e.per_request_limits?.completion_tokens||e.top_provider?.max_completion_tokens||null,r=typeof e.supports_tools==`boolean`?e.supports_tools:typeof e.supportsTools==`boolean`?e.supportsTools:void 0,i=this.extractModalities(e,`input`),a=this.extractModalities(e,`output`),o=this.modalitiesInclude(i,`image`,`vision`),s=this.modalitiesInclude(i,`audio`,`voice`,`hearing`),c=this.modalitiesInclude(i,`video`),l=e.id===`openrouter/free`||this.supportedParametersInclude(e,`image`,`vision`,`audio`,`tool`,`structured`),u=this.extractReasoning(e),d=typeof e.supports_prompt_caching==`boolean`?e.supports_prompt_caching:typeof e.supportsPromptCaching==`boolean`?e.supportsPromptCaching:this.supportedParametersInclude(e,`cache_control`,`prompt_caching`)?!0:void 0;!t&&Array.isArray(e.providers)&&e.providers.length>0&&(t=e.providers[0]?.context_length||0),this.registerModelInfo(e.id,{contextWindow:t,maxOutput:n,...r!==void 0&&{supportsTools:r},...i.length>0&&{inputModalities:i},...a.length>0&&{outputModalities:a},...o!==void 0&&{supportsImageInput:o},...s!==void 0&&{supportsAudioInput:s},...c!==void 0&&{supportsVideoInput:c},...u&&{reasoning:u},...l&&{routesByRequestFeatures:l},...d!==void 0&&{supportsPromptCaching:d}})}o.length>0&&console.log(`[ModelRegistry] Registered ${o.length} models for provider "${e.id}"`)}catch(t){console.error(`[ModelRegistry] Error fetching models for ${e.id}:`,t)}finally{this.loading=!1}}}extractModalities(e,t){let n=t===`input`?e.input_modalities||e.inputModalities:e.output_modalities||e.outputModalities,r=e.architecture||{},i=t===`input`?r.input_modalities||r.inputModalities:r.output_modalities||r.outputModalities,a=typeof r.modality==`string`?r.modality:``,o=this.parseArchitectureModality(a,t),s=[...this.normalizeStringArray(n),...this.normalizeStringArray(i),...o];return Array.from(new Set(s))}extractReasoning(e){let t=e?.reasoning;if(!t||typeof t!=`object`)return;let n=this.normalizeStringArray(t.supported_efforts),r=typeof t.default_effort==`string`?t.default_effort.toLowerCase():void 0,i=typeof t.default_enabled==`boolean`?t.default_enabled:void 0,a=typeof t.supports_max_tokens==`boolean`?t.supports_max_tokens:void 0,o=typeof t.mandatory==`boolean`?t.mandatory:void 0;if(!(n.length===0&&r===void 0&&i===void 0&&a===void 0&&o===void 0))return{...n.length>0&&{supportedEfforts:n},...r!==void 0&&{defaultEffort:r},...i!==void 0&&{defaultEnabled:i},...a!==void 0&&{supportsMaxTokens:a},...o!==void 0&&{mandatory:o}}}modalitiesInclude(e,...t){if(e.length!==0)return t.some(t=>e.some(e=>e.includes(t)))}normalizeStringArray(e){return Array.isArray(e)?e.filter(e=>typeof e==`string`).map(e=>e.toLowerCase()):[]}parseArchitectureModality(e,t){if(!e)return[];let[n=``,r=``]=e.toLowerCase().split(`->`).map(e=>e.trim());return(t===`input`?n:r).split(/[+,/\s]+/).map(e=>e.trim()).filter(Boolean)}supportedParametersInclude(e,...t){let n=this.normalizeStringArray(e.supported_parameters||e.supportedParameters);return t.some(e=>n.some(t=>t.includes(e)))}};function Ie(e){return e.replace(/^\/+|\/+$/g,``)}function Le(e){let t=Ie(e);return t.endsWith(`/index.html`)?t=t.slice(0,-11):t.endsWith(`index.html`)&&(t=t.slice(0,-10)),Ie(t)}function Re(e){let t=Ie(e),n=t.split(`/`).filter(Boolean);if(n.length===0)return null;let r=n[0].toLowerCase();if(r===`pages`){if(n.length>=3){let e=n[1];return{page:`pages`,groupId:e===`main`?`br:main`:e.startsWith(`br-`)?`br:${e.slice(3)}`:e,path:n.slice(2).join(`/`)}}return{page:`pages`,groupId:`br:main`,path:n.slice(1).join(`/`)}}if(r===`files`){let e=n[1]||`main`;return{page:`files`,groupId:e===`main`?`br:main`:e.startsWith(`br-`)?`br:${e.slice(3)}`:e,path:n.slice(2).join(`/`)||void 0}}if(r===`chat`){let e=n[1]||`main`;return{page:`chat`,groupId:e===`main`?`br:main`:e.startsWith(`br-`)?`br:${e.slice(3)}`:e}}if(r===`tasks`){let e=n[1]||`main`;return{page:`tasks`,groupId:e===`main`?`br:main`:e.startsWith(`br-`)?`br:${e.slice(3)}`:e}}return r===`main`?{page:`pages`,groupId:`br:main`,path:n.slice(1).join(`/`)}:{page:`pages`,groupId:`br:main`,path:t}}function ze(){if(typeof document<`u`){let e=document.getElementById(`shadow-claw-static-routing`);if(e&&e.textContent)try{let t=JSON.parse(e.textContent);if(t&&typeof t==`object`&&t.routes)return t}catch(e){console.warn(`Failed to parse embedded static routing manifest:`,e)}}return null}function Be(e,t){let n=t||ze();if(!n||!n.routes)return null;let r=Le(e);if(!r)return null;for(let[e,t]of Object.entries(n.routes))if(!(!t||!t.prettyPath)&&Le(t.prettyPath)===r)return Re(e);return null}let Ve=null;const He=new Set([`chat`,`files`,`tasks`,`pages`,`settings`,`tools`,`channels`]);function Ue(){Ve=null}typeof globalThis<`u`&&(globalThis.__applyBasePathCacheReset=Ue);function We(){let e=typeof window<`u`?window:typeof self<`u`?self:globalThis;if(e&&e.__SHADOWCLAW_DEPLOY_ID__){let t=String(e.__SHADOWCLAW_DEPLOY_ID__).trim();if(t)return t.replace(/[^a-zA-Z0-9_-]/g,`-`)}let t=globalThis.process;if(t&&t.env&&t.env.SHADOWCLAW_DEPLOY_ID){let e=String(t.env.SHADOWCLAW_DEPLOY_ID).trim();if(e)return e.replace(/[^a-zA-Z0-9_-]/g,`-`)}let n=Ge();return!n||n===`/`?``:n.replace(/^\/+|\/+$/g,``).replace(/[^a-zA-Z0-9_-]/g,`-`)}function Ge(){if(Ve!==null)return Ve;if((typeof window>`u`||globalThis.WorkerGlobalScope!==void 0&&typeof self<`u`&&self instanceof globalThis.WorkerGlobalScope)&&typeof self<`u`&&self.location){let e=(self.location.pathname||`/`).split(`/`).filter(Boolean);if(e.length<=1)return Ve=`/`,Ve;let t=e[0].toLowerCase(),n=t===`service-worker.js`||t===`sw.js`||t===`manifest.json`||t===`sitemap.xml`||t===`favicon.ico`||t===`index.html`||t===`service-worker`||t===`assets`||t===`dist`||t===`public`;if(n&&e.length===2)return Ve=`/`,Ve;if(!n)return Ve=`/`+e[0]+`/`,Ve}let e=typeof window<`u`&&window.location?window.location:typeof self<`u`&&self.location?self.location:null;if(!e)return`/`;if(typeof document<`u`&&typeof document.querySelector==`function`){let t=document.querySelector(`base[href]`);if(t){let n=t.getAttribute(`href`);if(n)try{let t=new URL(n,e.origin).pathname;return t.endsWith(`/`)||(t+=`/`),Ve=t,Ve}catch{}}}let t=e.pathname||`/`;if(t===`/`)return Ve=`/`,Ve;let n=t.split(`/`).filter(Boolean),r=n.findIndex(e=>He.has(e.toLowerCase()));return r>=0?r===0?(Ve=`/`,Ve):(Ve=`/`+n.slice(0,r).join(`/`)+`/`,Ve):Be(t)?(Ve=`/`,Ve):n.length===1&&!t.includes(`.`)?(Ve=`/`+n[0]+`/`,Ve):(Ve=`/`,Ve)}function Ke(e){let t=e.replace(/[.*+?^${}()|[\]\\]/g,`\\$&`);return RegExp(`(^|\\s)@${t}\\b`,`i`)}Ke(`ShadowClaw`);function qe(){let e=We();return e?`shadowclaw-${e}`:`shadowclaw`}qe();const Je={github:{providerId:`github`,name:`GitHub`,aliases:[`github`,`api.github.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`,`git_remote`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`token `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://github.com/login/oauth/authorize`,tokenUrl:`https://github.com/login/oauth/access_token`,defaultScopes:[`repo`,`read:user`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},gitlab:{providerId:`gitlab`,name:`GitLab`,aliases:[`gitlab`,`gitlab.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`,`git_remote`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`PRIVATE-TOKEN`,headerPrefix:``},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},tokenAuthByServiceType:{git_remote:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}}},oauth:{authorizeUrl:`https://gitlab.com/oauth/authorize`,tokenUrl:`https://gitlab.com/oauth/token`,defaultScopes:[`read_api`,`read_user`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},figma:{providerId:`figma`,name:`Figma`,aliases:[`figma`,`api.figma.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`X-Figma-Token`,headerPrefix:``},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://www.figma.com/oauth`,tokenUrl:`https://api.figma.com/v1/oauth/token`,refreshUrl:`https://api.figma.com/v1/oauth/refresh`,defaultScopes:[],usePkce:!0,clientAuthMethod:`basic_header`,scopeSeparator:`space`}},notion:{providerId:`notion`,name:`Notion`,aliases:[`notion`,`api.notion.com`,`notion.so`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://api.notion.com/v1/oauth/authorize`,tokenUrl:`https://api.notion.com/v1/oauth/token`,defaultScopes:[],usePkce:!0,clientAuthMethod:`basic_header`,scopeSeparator:`space`}},microsoft_graph:{providerId:`microsoft_graph`,name:`Microsoft Graph`,aliases:[`microsoft`,`graph.microsoft.com`,`microsoft_graph`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://login.microsoftonline.com/common/oauth2/v2.0/authorize`,tokenUrl:`https://login.microsoftonline.com/common/oauth2/v2.0/token`,defaultScopes:[`openid`,`profile`,`offline_access`,`User.Read`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},yahoo_mail:{providerId:`yahoo_mail`,name:`Yahoo Mail`,aliases:[`yahoo`,`yahoo_mail`,`mail.yahoo.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://api.login.yahoo.com/oauth2/request_auth`,tokenUrl:`https://api.login.yahoo.com/oauth2/get_token`,defaultScopes:[`mail-r`,`mail-w`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},google:{providerId:`google`,name:`Google`,aliases:[`google`,`googleapis.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://accounts.google.com/o/oauth2/v2/auth`,tokenUrl:`https://oauth2.googleapis.com/token`,defaultScopes:[`openid`,`profile`,`email`],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},atlassian:{providerId:`atlassian`,name:`Atlassian`,aliases:[`atlassian`,`api.atlassian.com`],modes:[`oauth`,`token`,`basic`],defaultMode:`basic`,serviceTypes:[`http_api`,`git_remote`],authTypes:[`token`,`oauth`,`basic_userpass`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `},basic:{headerName:`Authorization`,headerPrefix:`Basic `}},oauth:{authorizeUrl:`https://auth.atlassian.com/authorize`,tokenUrl:`https://auth.atlassian.com/oauth/token`,defaultScopes:[],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},slack:{providerId:`slack`,name:`Slack`,aliases:[`slack`,`slack.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://slack.com/oauth/v2/authorize`,tokenUrl:`https://slack.com/api/oauth.v2.access`,defaultScopes:[],usePkce:!1,clientAuthMethod:`request_body`,scopeSeparator:`comma`}},linear:{providerId:`linear`,name:`Linear`,aliases:[`linear`,`api.linear.app`,`linear.app`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`],authTypes:[`token`,`oauth`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://linear.app/oauth/authorize`,tokenUrl:`https://api.linear.app/oauth/token`,defaultScopes:[],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}},azure_devops:{providerId:`azure_devops`,name:`Azure DevOps`,aliases:[`azure_devops`,`dev.azure.com`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`http_api`,`git_remote`],authTypes:[`token`,`oauth`,`basic_userpass`,`ssh_key`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},tokenAuthByServiceType:{git_remote:{token:{headerName:`Authorization`,headerPrefix:`Basic `},oauth:{headerName:`Authorization`,headerPrefix:`Basic `}}},oauth:{authorizeUrl:`https://app.vssps.visualstudio.com/oauth2/authorize`,tokenUrl:`https://app.vssps.visualstudio.com/oauth2/token`,defaultScopes:[`vso.code`,`vso.profile`,`offline_access`],usePkce:!1,clientAuthMethod:`request_body`,scopeSeparator:`space`}},custom_mcp:{providerId:`custom_mcp`,name:`Custom MCP`,aliases:[`custom_mcp`],modes:[`oauth`,`token`],defaultMode:`oauth`,serviceTypes:[`mcp_remote`,`webmcp_local`],authTypes:[`none`,`token`,`oauth`,`custom_header`,`ssh_key`],tokenAuth:{token:{headerName:`Authorization`,headerPrefix:`Bearer `},oauth:{headerName:`Authorization`,headerPrefix:`Bearer `}},oauth:{authorizeUrl:`https://example.com/oauth/authorize`,tokenUrl:`https://example.com/oauth/token`,defaultScopes:[],usePkce:!0,clientAuthMethod:`request_body`,scopeSeparator:`space`}}},Ye=Object.fromEntries(Object.values(Je).filter(e=>!!e.oauth).map(e=>{let t=e.oauth;return[e.providerId,{id:e.providerId,name:e.name,authorizeUrl:t.authorizeUrl,tokenUrl:t.tokenUrl,redirectUri:t.redirectUri,defaultScopes:t.defaultScopes,usePkce:t.usePkce,clientAuthMethod:t.clientAuthMethod,scopeSeparator:t.scopeSeparator}]}));Object.fromEntries(Object.values(Je).map(e=>[e.providerId,{providerId:e.providerId,modes:e.modes,defaultMode:e.defaultMode}]));function Xe(e){return Ye[e]||null}let Ze=null;function Qe(e=`database/push-subscriptions.db`){if(Ze)return Ze;Ze=new w(e),Ze.exec(`
     CREATE TABLE IF NOT EXISTS vapid_keys (
       id INTEGER PRIMARY KEY CHECK (id = 1),
       public_key TEXT NOT NULL,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shadow-claw",
-  "version": "1.32.0",
+  "version": "1.33.0",
   "type": "module",
   "license": "AGPL-3.0",
   "description": "Browser-native personal AI assistant.",
@@ -132,8 +132,8 @@
     "web-push": "^3.6.7"
   },
   "devDependencies": {
-    "@mcp-b/webmcp-polyfill": "^3.0.0",
-    "@mcp-b/webmcp-types": "^3.0.0",
+    "@mcp-b/webmcp-polyfill": "^5.1.0",
+    "@mcp-b/webmcp-types": "^5.1.0",
     "@playwright/test": "^1.59.2",
     "@storybook/addon-docs": "^10.6.0",
     "@storybook/web-components-vite": "^10.6.0",

package/src/core/utils/initControlPlane.test.ts

@@ -703,7 +703,8 @@ describe("initControlPlane", () => {
         });
         expect(mockExecuteTool).toHaveBeenCalledWith(
           nativeModelContextTool,
-          "{}",
+          {},
+          undefined,
         );
       } finally {
         if (origDocMC)
@@ -713,6 +714,126 @@ describe("initControlPlane", () => {
       }
     });
 
+    it("handles Chrome 155+ WebMCP invoke-tool passing JavaScript object directly to executeTool", async () => {
+      const origDocMC = Object.getOwnPropertyDescriptor(
+        document,
+        "modelContext",
+      );
+      const origNavMC = Object.getOwnPropertyDescriptor(
+        navigator,
+        "modelContext",
+      );
+      delete (navigator as any).modelContext;
+
+      const nativeModelContextTool = {
+        name: "list_files",
+        description: "List files and directories",
+        inputSchema: { type: "object" },
+        title: "list_files",
+        origin: "http://localhost:8888",
+        window: globalThis.window,
+      };
+
+      const mockExecuteTool = jest.fn(async (tool: any, input: any) => {
+        if (tool !== nativeModelContextTool) {
+          throw new TypeError("parameter 1 is not of type 'ModelContextTool'");
+        }
+        if (typeof input !== "object" || input === null) {
+          throw new TypeError("parameter 2 is not of type 'Object'");
+        }
+        return "chrome-155-object-result";
+      });
+
+      Object.defineProperty(document, "modelContext", {
+        value: {
+          getTools: jest.fn(async () => [nativeModelContextTool]),
+          executeTool: mockExecuteTool,
+        },
+        configurable: true,
+      });
+
+      try {
+        const res = await executeClientControlCommand(
+          "invoke-tool",
+          { toolName: "list_files", input: { recursive: true } },
+          {},
+        );
+
+        expect(res).toEqual({ result: "chrome-155-object-result" });
+        expect(mockExecuteTool).toHaveBeenCalledTimes(1);
+        expect(mockExecuteTool).toHaveBeenCalledWith(
+          nativeModelContextTool,
+          {
+            recursive: true,
+          },
+          undefined,
+        );
+      } finally {
+        if (origDocMC)
+          Object.defineProperty(document, "modelContext", origDocMC);
+        if (origNavMC)
+          Object.defineProperty(navigator, "modelContext", origNavMC);
+      }
+    });
+
+    it("gracefully falls back to stringified input in invoke-tool when executeTool throws 'Failed to parse input'", async () => {
+      const origDocMC = Object.getOwnPropertyDescriptor(
+        document,
+        "modelContext",
+      );
+      const origNavMC = Object.getOwnPropertyDescriptor(
+        navigator,
+        "modelContext",
+      );
+      delete (navigator as any).modelContext;
+
+      const nativeModelContextTool = {
+        name: "list_files",
+        description: "List files and directories",
+        inputSchema: '{"type":"object"}',
+        title: "list_files",
+        origin: "http://localhost:8888",
+        window: globalThis.window,
+      };
+
+      const calls: any[] = [];
+      const mockExecuteTool = jest.fn(async (_tool: any, input: any) => {
+        calls.push(input);
+        if (typeof input !== "string") {
+          throw new Error(
+            "Failed to parse input arguments: expected DOMString",
+          );
+        }
+        return "legacy-chrome-string-result";
+      });
+
+      Object.defineProperty(document, "modelContext", {
+        value: {
+          getTools: jest.fn(async () => [nativeModelContextTool]),
+          executeTool: mockExecuteTool,
+        },
+        configurable: true,
+      });
+
+      try {
+        const res = await executeClientControlCommand(
+          "invoke-tool",
+          { toolName: "list_files", input: { path: "src" } },
+          {},
+        );
+
+        expect(res).toEqual({ result: "legacy-chrome-string-result" });
+        expect(calls).toHaveLength(2);
+        expect(calls[0]).toEqual({ path: "src" });
+        expect(calls[1]).toBe(JSON.stringify({ path: "src" }));
+      } finally {
+        if (origDocMC)
+          Object.defineProperty(document, "modelContext", origDocMC);
+        if (origNavMC)
+          Object.defineProperty(navigator, "modelContext", origNavMC);
+      }
+    });
+
     it("refuses to execute tool when tool is not registered on client or not enabled in active conversation", async () => {
       const origDocMC = Object.getOwnPropertyDescriptor(
         document,

package/src/core/utils/initControlPlane.ts

@@ -466,36 +466,40 @@ export async function executeClientControlCommand(
           }
         }
 
-        const inputStr =
-          typeof args.input === "string"
-            ? args.input
-            : JSON.stringify(args.input || {});
+        const { executeWebMcpTool } =
+          await import("../../subsystems/mcp/webmcp.js");
 
         if (typeof ctx.executeTool === "function") {
           // 1. Pass the actual ModelContextTool object from getTools() if available (required by native Chromium)
           if (matchedTool) {
             try {
-              const res = await ctx.executeTool(matchedTool, inputStr);
+              const res = await executeWebMcpTool(ctx, matchedTool, args.input);
               return { result: res };
             } catch (_) {}
           }
 
           // 2. Pass { name: toolName } object (accepted by polyfill / mocks)
           try {
-            const res = await ctx.executeTool(
+            const res = await executeWebMcpTool(
+              ctx,
               { name: args.toolName },
-              inputStr,
+              args.input,
             );
             return { result: res };
           } catch (_) {}
 
           // 3. Pass toolName string directly (accepted by some preview shims)
           try {
-            const res = await ctx.executeTool(args.toolName, inputStr);
+            const res = await executeWebMcpTool(ctx, args.toolName, args.input);
             return { result: res };
           } catch (_) {}
         }
 
+        const inputStr =
+          typeof args.input === "string"
+            ? args.input
+            : JSON.stringify(args.input || {});
+
         // 4. Check navigator.modelContextTesting if present
         if (
           typeof navigator !== "undefined" &&

package/src/subsystems/mcp/webmcp.test.ts

@@ -330,10 +330,33 @@ describe("webmcp integration", () => {
 
     expect(listTasksRegistration).toBeDefined();
     expect(listTasksRegistration.annotations).toEqual({
-      readOnlyHint: false,
+      readOnlyHint: true,
+      consequentialHint: false,
       untrustedContentHint: true,
     });
 
+    // Verify consequential tools receive consequentialHint: true
+    const consequentialToolNames = [
+      "bash",
+      "delete_file",
+      "delete_task",
+      "git_delete_repo",
+      "git_delete_branch",
+      "git_reset",
+      "git_push",
+      "email_send_message",
+      "clear_chat",
+    ];
+
+    for (const toolName of consequentialToolNames) {
+      const reg = mockRegisterTool.mock.calls
+        .map((args: any[]) => args[0])
+        .find((r: any) => r.name === toolName);
+      expect(reg).toBeDefined();
+      expect(reg.annotations.consequentialHint).toBe(true);
+      expect(reg.annotations.readOnlyHint).toBe(false);
+    }
+
     // Test that execute sends a postMessage
     const executePromise = listTasksRegistration.execute({ foo: "bar" });
 
@@ -486,4 +509,233 @@ describe("webmcp integration", () => {
     await registerWebMcpTools(null, jest.fn(), "group-webmcp");
     expect(mockRegisterTool.mock.calls.length).toBe(firstCount * 2);
   });
+
+  describe("executeWebMcpTool", () => {
+    it("executes tool passing JavaScript object directly on Chrome 155+ (PR #246/#251)", async () => {
+      const { executeWebMcpTool } = await import("./webmcp.js");
+
+      const mockTool = { name: "my_tool" };
+      const mockModelContext = {
+        executeTool: jest.fn(async (tool: any, input: any) => {
+          expect(tool).toBe(mockTool);
+          expect(typeof input).toBe("object");
+          expect(input).toEqual({ answer: 42 });
+          return "result-ok";
+        }),
+      };
+
+      const res = await executeWebMcpTool(mockModelContext, mockTool, {
+        answer: 42,
+      });
+      expect(res).toBe("result-ok");
+      expect(mockModelContext.executeTool).toHaveBeenCalledTimes(1);
+      expect(mockModelContext.executeTool).toHaveBeenCalledWith(
+        mockTool,
+        { answer: 42 },
+        undefined,
+      );
+    });
+
+    it("falls back to stringified JSON when executeTool throws 'Failed to parse input' (Chrome < 155 / polyfill)", async () => {
+      const { executeWebMcpTool } = await import("./webmcp.js");
+
+      const mockTool = { name: "my_tool" };
+      const calls: any[] = [];
+      const mockModelContext = {
+        executeTool: jest.fn(async (tool: any, input: any) => {
+          calls.push({ tool, input });
+          if (typeof input !== "string") {
+            throw new Error(
+              "Failed to parse input arguments: expected DOMString",
+            );
+          }
+          return "legacy-result";
+        }),
+      };
+
+      const res = await executeWebMcpTool(mockModelContext, mockTool, {
+        answer: 42,
+      });
+
+      expect(res).toBe("legacy-result");
+      expect(calls).toHaveLength(2);
+      expect(calls[0].input).toEqual({ answer: 42 });
+      expect(calls[1].input).toBe(JSON.stringify({ answer: 42 }));
+    });
+
+    it("falls back to stringified JSON when executeTool throws TypeError (WebIDL parameter rejection)", async () => {
+      const { executeWebMcpTool } = await import("./webmcp.js");
+
+      const mockTool = { name: "my_tool" };
+      const calls: any[] = [];
+      const mockModelContext = {
+        executeTool: jest.fn(async (_tool: any, input: any) => {
+          calls.push(input);
+          if (typeof input !== "string") {
+            throw new TypeError(
+              "Failed to execute 'executeTool' on 'ModelContext': parameter 2 is not of type 'DOMString'",
+            );
+          }
+          return "typeerror-fallback-result";
+        }),
+      };
+
+      const res = await executeWebMcpTool(mockModelContext, mockTool, {
+        param: "value",
+      });
+
+      expect(res).toBe("typeerror-fallback-result");
+      expect(calls).toHaveLength(2);
+      expect(calls[0]).toEqual({ param: "value" });
+      expect(calls[1]).toBe(JSON.stringify({ param: "value" }));
+    });
+
+    it("normalizes string input and executes with parsed object first then string fallback", async () => {
+      const { executeWebMcpTool } = await import("./webmcp.js");
+
+      const mockTool = { name: "my_tool" };
+      const calls: any[] = [];
+      const mockModelContext = {
+        executeTool: jest.fn(async (_tool: any, input: any) => {
+          calls.push(input);
+          if (typeof input !== "string") {
+            throw new Error("Failed to parse input");
+          }
+          return "string-input-result";
+        }),
+      };
+
+      const res = await executeWebMcpTool(
+        mockModelContext,
+        mockTool,
+        '{"foo":"bar"}',
+      );
+
+      expect(res).toBe("string-input-result");
+      expect(calls).toHaveLength(2);
+      expect(calls[0]).toEqual({ foo: "bar" });
+      expect(calls[1]).toBe('{"foo":"bar"}');
+    });
+
+    it("handles undefined/null input by passing empty object then empty JSON string on fallback", async () => {
+      const { executeWebMcpTool } = await import("./webmcp.js");
+
+      const mockTool = { name: "my_tool" };
+      const calls: any[] = [];
+      const mockModelContext = {
+        executeTool: jest.fn(async (_tool: any, input: any) => {
+          calls.push(input);
+          if (typeof input !== "string") {
+            throw new Error("Failed to parse input");
+          }
+          return "empty-result";
+        }),
+      };
+
+      const res = await executeWebMcpTool(mockModelContext, mockTool);
+
+      expect(res).toBe("empty-result");
+      expect(calls).toHaveLength(2);
+      expect(calls[0]).toEqual({});
+      expect(calls[1]).toBe("{}");
+    });
+
+    it("propagates other errors without attempting string fallback", async () => {
+      const { executeWebMcpTool } = await import("./webmcp.js");
+
+      const mockTool = { name: "my_tool" };
+      const mockModelContext = {
+        executeTool: jest.fn(async () => {
+          throw new Error("Tool internal execution failed");
+        }),
+      };
+
+      await expect(
+        executeWebMcpTool(mockModelContext, mockTool, { foo: "bar" }),
+      ).rejects.toThrow("Tool internal execution failed");
+
+      expect(mockModelContext.executeTool).toHaveBeenCalledTimes(1);
+    });
+
+    it("passes execution options or signal context to executeTool", async () => {
+      const { executeWebMcpTool } = await import("./webmcp.js");
+
+      const mockTool = { name: "my_tool" };
+      const controller = new AbortController();
+      const mockModelContext = {
+        executeTool: jest.fn(async (_tool: any, _input: any, options: any) => {
+          expect(options).toEqual({ signal: controller.signal });
+          return "with-signal";
+        }),
+      };
+
+      const res = await executeWebMcpTool(
+        mockModelContext,
+        mockTool,
+        { foo: "bar" },
+        { signal: controller.signal },
+      );
+
+      expect(res).toBe("with-signal");
+    });
+  });
+
+  describe("resolveWebMcpToolAnnotations", () => {
+    it("marks destructive and high-stakes tools with consequentialHint: true", async () => {
+      const { resolveWebMcpToolAnnotations, CONSEQUENTIAL_TOOL_NAMES } =
+        await import("./webmcp.js");
+
+      for (const toolName of CONSEQUENTIAL_TOOL_NAMES) {
+        const annotations = resolveWebMcpToolAnnotations(toolName);
+        expect(annotations.consequentialHint).toBe(true);
+        expect(annotations.readOnlyHint).toBe(false);
+        expect(annotations.untrustedContentHint).toBe(true);
+      }
+    });
+
+    it("marks read-only query tools with readOnlyHint: true and consequentialHint: false", async () => {
+      const { resolveWebMcpToolAnnotations, READ_ONLY_TOOL_NAMES } =
+        await import("./webmcp.js");
+
+      for (const toolName of READ_ONLY_TOOL_NAMES) {
+        const annotations = resolveWebMcpToolAnnotations(toolName);
+        expect(annotations.readOnlyHint).toBe(true);
+        expect(annotations.consequentialHint).toBe(false);
+        expect(annotations.untrustedContentHint).toBe(true);
+      }
+    });
+
+    it("marks regular state-mutating tools with readOnlyHint: false and consequentialHint: false", async () => {
+      const { resolveWebMcpToolAnnotations } = await import("./webmcp.js");
+
+      const mutatingTools = [
+        "write_file",
+        "patch_file",
+        "create_task",
+        "update_task",
+        "show_toast",
+        "send_notification",
+      ];
+
+      for (const toolName of mutatingTools) {
+        const annotations = resolveWebMcpToolAnnotations(toolName);
+        expect(annotations.readOnlyHint).toBe(false);
+        expect(annotations.consequentialHint).toBe(false);
+        expect(annotations.untrustedContentHint).toBe(true);
+      }
+    });
+
+    it("allows custom annotations to override defaults", async () => {
+      const { resolveWebMcpToolAnnotations } = await import("./webmcp.js");
+
+      const custom = resolveWebMcpToolAnnotations("read_file", {
+        consequentialHint: true,
+        customMeta: "important",
+      });
+
+      expect(custom.consequentialHint).toBe(true);
+      expect(custom.readOnlyHint).toBe(true);
+      expect(custom.customMeta).toBe("important");
+    });
+  });
 });