vg-coder-cli 2.0.65 → 2.0.66

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vg-coder-cli",
-  "version": "2.0.65",
+  "version": "2.0.66",
   "description": "🚀 CLI tool to analyze projects, concatenate source files, count tokens, and export HTML with syntax highlighting and copy functionality",
   "main": "src/index.js",
   "bin": {

package/src/server/api-server.js

@@ -799,16 +799,21 @@ class ApiServer {
         } catch (e) { res.status(launcherErr(e)).json({ error: e.message }); }
     });
 
-    // Run JS inside the launcher SW. Body: { chromeId? | workerLabel?, code, timeoutMs? }
-    // Code is wrapped in `async () => { ${code} }` — use `return` to surface
-    // a value. Result must JSON-serialize. Debug-only.
-    this.app.post('/api/launcher/eval', async (req, res) => {
+    // Run a predefined chrome.* command inside the launcher SW. Manifest V3
+    // CSP forbids new Function() in service workers, so eval was replaced by
+    // a fixed command map. Body:
+    //   { chromeId? | workerLabel?, cmd, args?, timeoutMs? }
+    // Available cmds (see launcher.ts execCommands):
+    //   tabs.query | tabs.get | tabs.update | tabs.reload
+    //   storage.sync.get | storage.sync.set | storage.local.get
+    //   runtime.reload | windows.list | cookies.get
+    this.app.post('/api/launcher/exec', async (req, res) => {
         try {
             const body = req.body || {};
-            if (!body.code) return res.status(400).json({ error: 'code required' });
+            if (!body.cmd) return res.status(400).json({ error: 'cmd required' });
             const opts = launcherOpts(body) || (body.all ? { all: true } : {});
             const timeoutMs = Math.min(Math.max(parseInt(body.timeoutMs, 10) || 10_000, 1_000), 30_000);
-            const result = await taskQueue.requestLauncher('launcher:eval', { code: body.code }, opts, timeoutMs);
+            const result = await taskQueue.requestLauncher('launcher:exec', { cmd: body.cmd, args: body.args }, opts, timeoutMs);
             res.json(result);
         } catch (e) { res.status(launcherErr(e)).json({ error: e.message }); }
     });