ugly-app 0.1.719 → 0.1.720

package/dist/cli/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.1.719";
+export declare const CLI_VERSION = "0.1.720";
 //# sourceMappingURL=version.d.ts.map

package/dist/cli/version.js

@@ -1,3 +1,3 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.719";
+export const CLI_VERSION = "0.1.720";
 //# sourceMappingURL=version.js.map

package/dist/inspect/index.d.ts

@@ -4,4 +4,5 @@ export { createInspectAgent, installInspectAgent } from './agent/install.js';
 export { InspectClient, type InspectTransport } from './client.js';
 export { buildTarget, dispatchToAgent, HOST_ONLY_CHANNELS } from './dispatch.js';
 export { createSelfInspectHost, SELF_TARGET_ID, type SelfInspectHost, type SelfInspectHostOpts, } from './selfHost.js';
+export { installInspectProxyHost, type InspectProxyHost, type InspectProxyHostOpts, } from './proxyHostBootstrap.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/inspect/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/inspect/index.ts"],"names":[],"mappings":"AAIA,cAAc,eAAe,CAAC;AAC9B,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/inspect/index.ts"],"names":[],"mappings":"AAIA,cAAc,eAAe,CAAC;AAC9B,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,yBAAyB,CAAC"}

package/dist/inspect/index.js

@@ -6,4 +6,5 @@ export { createInspectAgent, installInspectAgent } from './agent/install.js';
 export { InspectClient } from './client.js';
 export { buildTarget, dispatchToAgent, HOST_ONLY_CHANNELS } from './dispatch.js';
 export { createSelfInspectHost, SELF_TARGET_ID, } from './selfHost.js';
+export { installInspectProxyHost, } from './proxyHostBootstrap.js';
 //# sourceMappingURL=index.js.map

package/dist/inspect/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/inspect/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAE/E,cAAc,eAAe,CAAC;AAE9B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAyB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,cAAc,GAGf,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/inspect/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAE/E,cAAc,eAAe,CAAC;AAE9B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAyB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,cAAc,GAGf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,GAGxB,MAAM,yBAAyB,CAAC"}

package/dist/inspect/proxyHostBootstrap.d.ts

@@ -0,0 +1,21 @@
+import type { ProxySocket } from '../native/proxyClient.js';
+import type { ProxySigner } from '../native/proxyCrypto.js';
+import type { InspectPlatform, Screenshot, ScreenshotRequest } from './protocol.js';
+export interface InspectProxyHostOpts {
+    /** App Socket registered as a host (isHost:true in its presence getUrlParams). */
+    socket: ProxySocket;
+    /** Verify the inspector's offer + sign our answer (MSK-bound). nativeSigner on mobile. */
+    signer?: ProxySigner;
+    platform: InspectPlatform;
+    /** Native screenshot delegate (WKWebView.takeSnapshot / Android PixelCopy via capture.screenshot). */
+    screenshot?: (req: ScreenshotRequest) => Promise<Screenshot>;
+    iceServers?: RTCIceServer[];
+    rtcFactory?: (config: RTCConfiguration) => RTCPeerConnection;
+}
+export interface InspectProxyHost {
+    stop(): void;
+    /** Connected inspector count. */
+    peerCount(): number;
+}
+export declare function installInspectProxyHost(opts: InspectProxyHostOpts): InspectProxyHost;
+//# sourceMappingURL=proxyHostBootstrap.d.ts.map

package/dist/inspect/proxyHostBootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxyHostBootstrap.d.ts","sourceRoot":"","sources":["../../src/inspect/proxyHostBootstrap.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEpF,MAAM,WAAW,oBAAoB;IACnC,kFAAkF;IAClF,MAAM,EAAE,WAAW,CAAC;IACpB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,eAAe,CAAC;IAC1B,sGAAsG;IACtG,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,iBAAiB,CAAC;CAC9D;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,IAAI,CAAC;IACb,iCAAiC;IACjC,SAAS,IAAI,MAAM,CAAC;CACrB;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,oBAAoB,GAAG,gBAAgB,CAuBpF"}

package/dist/inspect/proxyHostBootstrap.js

@@ -0,0 +1,36 @@
+// One-call mobile inspect host: combines the browser proxy HOST (answerer) with
+// the single-page self inspect host, so a remote desktop inspector can connect
+// to this SPA and drive inspect.* against its own page. This is the SPA-side
+// counterpart to the desktop's electron/inspect/inspect-remote.ts client.
+//
+// The caller supplies an app Socket already registered as a host (isHost in its
+// getUrlParams presence), a signer (nativeSigner(native) — MSK in secure
+// storage), and a native screenshot delegate (capture.screenshot). Live
+// console/network/picked events fan out to subscribed inspectors via broadcast.
+import { createProxyHost } from '../native/proxyHost.js';
+import { createSelfInspectHost } from './selfHost.js';
+export function installInspectProxyHost(opts) {
+    // Holder so the self-host's onEvent closure can reach the host created after it.
+    const ref = {};
+    const self = createSelfInspectHost({
+        platform: opts.platform,
+        screenshot: opts.screenshot,
+        // Live agent events → evt frames to every subscribed inspector.
+        onEvent: (event, data) => ref.host?.broadcast(event, data),
+    });
+    ref.host = createProxyHost({
+        socket: opts.socket,
+        signer: opts.signer,
+        iceServers: opts.iceServers,
+        rtcFactory: opts.rtcFactory,
+        onInvoke: (channel, payload) => self.dispatch(channel, (payload ?? {})),
+    });
+    return {
+        stop() {
+            ref.host?.stop();
+            self.stop();
+        },
+        peerCount: () => ref.host?.peerCount() ?? 0,
+    };
+}
+//# sourceMappingURL=proxyHostBootstrap.js.map

package/dist/inspect/proxyHostBootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxyHostBootstrap.js","sourceRoot":"","sources":["../../src/inspect/proxyHostBootstrap.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,0EAA0E;AAC1E,EAAE;AACF,gFAAgF;AAChF,yEAAyE;AACzE,wEAAwE;AACxE,gFAAgF;AAEhF,OAAO,EAAE,eAAe,EAAkB,MAAM,wBAAwB,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAqBtD,MAAM,UAAU,uBAAuB,CAAC,IAA0B;IAChE,iFAAiF;IACjF,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,qBAAqB,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,gEAAgE;QAChE,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC;KAC3D,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,GAAG,eAAe,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;KACnG,CAAC,CAAC;IACH,OAAO;QACL,IAAI;YACF,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ugly-app",
-  "version": "0.1.719",
+  "version": "0.1.720",
   "type": "module",
   "comment:files": "Allowlist what ships to npm. dist = runtime; src = sourcemap targets (dist/*.js.map reference ../../src/); templates = CLI scaffold. Everything else at repo root (.pgdata local Postgres, coverage, assets/icons sources, test/, test-results/) is excluded by omission. The !negations strip the scaffold's installed deps + cruft (templates/node_modules is 200MB+ and must never ship). package.json/README/LICENSE ship automatically.",
   "files": [

package/src/cli/version.ts

@@ -1,2 +1,2 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.719";
+export const CLI_VERSION = "0.1.720";

package/src/inspect/index.ts

@@ -13,3 +13,8 @@ export {
   type SelfInspectHost,
   type SelfInspectHostOpts,
 } from './selfHost.js';
+export {
+  installInspectProxyHost,
+  type InspectProxyHost,
+  type InspectProxyHostOpts,
+} from './proxyHostBootstrap.js';

package/src/inspect/proxyHostBootstrap.test.ts

@@ -0,0 +1,91 @@
+// @vitest-environment jsdom
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { installInspectProxyHost } from './proxyHostBootstrap.js';
+import type { ProxySocket } from '../native/proxyClient.js';
+
+afterEach(() => {
+  delete (window as { __uglyInspectAgent?: unknown }).__uglyInspectAgent;
+});
+
+function fakeSocket() {
+  const handlers = new Map<string, (d: unknown) => void>();
+  const emits: { type: string; data: Record<string, unknown> }[] = [];
+  const socket: ProxySocket = {
+    emit: (type, data) => emits.push({ type, data: data as Record<string, unknown> }),
+    on: (event, handler) => {
+      handlers.set(event, handler);
+      return () => handlers.delete(event);
+    },
+  };
+  return { socket, emits, fire: (event: string, d: unknown) => handlers.get(event)?.(d) };
+}
+
+function fakeChannel() {
+  const sent: string[] = [];
+  const ch = { readyState: 'open', send: (s: string) => sent.push(s), onmessage: null as null | ((e: { data: unknown }) => void) };
+  return { ch, sent, push: (frame: object) => ch.onmessage?.({ data: JSON.stringify(frame) }) };
+}
+
+function fakeRtc() {
+  const pc: Record<string, unknown> = {
+    onicecandidate: null,
+    ondatachannel: null,
+    setRemoteDescription: vi.fn(async () => {}),
+    createAnswer: vi.fn(async () => ({ type: 'answer', sdp: 'a\na=fingerprint:sha-256 AA' })),
+    setLocalDescription: vi.fn(async () => {}),
+    localDescription: { sdp: 'a\na=fingerprint:sha-256 AA' },
+    addIceCandidate: vi.fn(async () => {}),
+    close: vi.fn(),
+  };
+  return { pc, factory: () => pc as unknown as RTCPeerConnection };
+}
+
+const signer = { sign: vi.fn(async () => 'sig'), verify: vi.fn(async () => true) };
+
+describe('installInspectProxyHost (mobile SPA inspect host)', () => {
+  it('routes a tunneled inspect.eval through the self-host to the in-page agent', async () => {
+    const { socket, fire } = fakeSocket();
+    const { pc, factory } = fakeRtc();
+    const handle = installInspectProxyHost({ socket, signer, platform: 'ios', rtcFactory: factory });
+
+    await fire('rtc:offer', { from: 'desktop', sdp: 's\na=fingerprint:sha-256 CC', fpTag: 'good', origin: 'https://studio' });
+    await new Promise((r) => setTimeout(r, 0));
+
+    const { ch, sent, push } = fakeChannel();
+    (pc.ondatachannel as (e: { channel: unknown }) => void)({ channel: ch });
+
+    // listTargets → the single self target on iOS
+    push({ t: 'req', id: '1', channel: 'inspect.listTargets', payload: {} });
+    await new Promise((r) => setTimeout(r, 0));
+    const targetsRes = JSON.parse(sent[0]);
+    expect(targetsRes).toMatchObject({ t: 'res', id: '1', ok: true });
+    expect(targetsRes.result.targets[0].platform).toBe('ios');
+
+    // eval → runs in the page agent
+    push({ t: 'req', id: '2', channel: 'inspect.eval', payload: { expression: '9 * 9' } });
+    await new Promise((r) => setTimeout(r, 0));
+    const evalRes = JSON.parse(sent[1]);
+    expect(evalRes.result.ok).toBe(true);
+    expect(evalRes.result.value.value).toBe(81);
+
+    expect(handle.peerCount()).toBe(1);
+    handle.stop();
+  });
+
+  it('delegates screenshots to the native capture callback', async () => {
+    const { socket, fire } = fakeSocket();
+    const { pc, factory } = fakeRtc();
+    const screenshot = vi.fn(async () => ({ base64: 'PNG', width: 390, height: 844, dpr: 3, format: 'png' as const }));
+    installInspectProxyHost({ socket, signer, platform: 'ios', rtcFactory: factory, screenshot });
+
+    await fire('rtc:offer', { from: 'd', sdp: 's', fpTag: 'good', origin: '' });
+    await new Promise((r) => setTimeout(r, 0));
+    const { ch, sent, push } = fakeChannel();
+    (pc.ondatachannel as (e: { channel: unknown }) => void)({ channel: ch });
+
+    push({ t: 'req', id: '5', channel: 'inspect.screenshot', payload: { fullPage: false } });
+    await new Promise((r) => setTimeout(r, 0));
+    expect(screenshot).toHaveBeenCalled();
+    expect(JSON.parse(sent[0]).result.base64).toBe('PNG');
+  });
+});

package/src/inspect/proxyHostBootstrap.ts

@@ -0,0 +1,58 @@
+// One-call mobile inspect host: combines the browser proxy HOST (answerer) with
+// the single-page self inspect host, so a remote desktop inspector can connect
+// to this SPA and drive inspect.* against its own page. This is the SPA-side
+// counterpart to the desktop's electron/inspect/inspect-remote.ts client.
+//
+// The caller supplies an app Socket already registered as a host (isHost in its
+// getUrlParams presence), a signer (nativeSigner(native) — MSK in secure
+// storage), and a native screenshot delegate (capture.screenshot). Live
+// console/network/picked events fan out to subscribed inspectors via broadcast.
+
+import { createProxyHost, type ProxyHost } from '../native/proxyHost.js';
+import type { ProxySocket } from '../native/proxyClient.js';
+import type { ProxySigner } from '../native/proxyCrypto.js';
+import { createSelfInspectHost } from './selfHost.js';
+import type { InspectPlatform, Screenshot, ScreenshotRequest } from './protocol.js';
+
+export interface InspectProxyHostOpts {
+  /** App Socket registered as a host (isHost:true in its presence getUrlParams). */
+  socket: ProxySocket;
+  /** Verify the inspector's offer + sign our answer (MSK-bound). nativeSigner on mobile. */
+  signer?: ProxySigner;
+  platform: InspectPlatform;
+  /** Native screenshot delegate (WKWebView.takeSnapshot / Android PixelCopy via capture.screenshot). */
+  screenshot?: (req: ScreenshotRequest) => Promise<Screenshot>;
+  iceServers?: RTCIceServer[];
+  rtcFactory?: (config: RTCConfiguration) => RTCPeerConnection;
+}
+
+export interface InspectProxyHost {
+  stop(): void;
+  /** Connected inspector count. */
+  peerCount(): number;
+}
+
+export function installInspectProxyHost(opts: InspectProxyHostOpts): InspectProxyHost {
+  // Holder so the self-host's onEvent closure can reach the host created after it.
+  const ref: { host?: ProxyHost } = {};
+  const self = createSelfInspectHost({
+    platform: opts.platform,
+    screenshot: opts.screenshot,
+    // Live agent events → evt frames to every subscribed inspector.
+    onEvent: (event, data) => ref.host?.broadcast(event, data),
+  });
+  ref.host = createProxyHost({
+    socket: opts.socket,
+    signer: opts.signer,
+    iceServers: opts.iceServers,
+    rtcFactory: opts.rtcFactory,
+    onInvoke: (channel, payload) => self.dispatch(channel, (payload ?? {}) as Record<string, unknown>),
+  });
+  return {
+    stop(): void {
+      ref.host?.stop();
+      self.stop();
+    },
+    peerCount: () => ref.host?.peerCount() ?? 0,
+  };
+}