DRAFT: feat: webview commands for listing and evaluating js

Makefile

@@ -1,12 +1,15 @@
-.PHONY: all build test test-cover lint fmt clean
+.PHONY: all build agents test test-cover lint fmt clean
 
 all: build
 
-build:
+agents:
+	$(MAKE) -C agents/android all
+
+build: agents
 	go mod tidy
 	CGO_ENABLED=0 go build -ldflags="-s -w"
 
-build-cover:
+build-cover: agents
 	go mod tidy
 	CGO_ENABLED=0 go build -ldflags="-s -w" -cover
 
@@ -31,4 +34,5 @@ fmt:
 	$(shell go env GOPATH)/bin/goimports -w .
 
 clean:
+	$(MAKE) -C agents/android clean
 	rm -f mobilecli coverage.out coverage.html

README.md

@@ -37,6 +37,7 @@ A universal command-line tool for managing iOS and Android devices, simulators,
 - **Device Control**: Reboot devices, tap screen coordinates, press hardware buttons
 - **App Management**: Launch, terminate, install, uninstall, list, and get foreground apps
 - **Crash Reports**: List and fetch crash reports from iOS and Android devices
+- **Webview Inspection**: List, navigate, query DOM, and evaluate JavaScript in embedded webviews
 
 ### 🎯 Platform Support
 
@@ -255,6 +256,66 @@ Example output for `agent status`:
 }
 ```
 
+### Webview Inspection 🌐
+
+Inspect and interact with embedded webviews (`WKWebView` on iOS, `android.webkit.WebView` on Android) running inside native apps.
+
+```bash
+# List embedded webviews in the foreground app
+mobilecli webview list --device <device-id>
+
+# Navigate a webview to a URL
+mobilecli webview goto <id> https://example.com --device <device-id>
+
+# Reload, go back or forward
+mobilecli webview reload <id> --device <device-id>
+mobilecli webview back <id> --device <device-id>
+mobilecli webview forward <id> --device <device-id>
+
+# Get current URL and page title
+mobilecli webview url <id> --device <device-id>
+mobilecli webview title <id> --device <device-id>
+
+# Dump the full HTML content of the page
+mobilecli webview content <id> --device <device-id>
+
+# Query DOM elements by CSS selector
+mobilecli webview query <id> "button" --device <device-id>
+mobilecli webview query <id> "[data-testid='submit']" --device <device-id>
+
+# Evaluate arbitrary JavaScript
+mobilecli webview eval <id> "document.querySelectorAll('a').length" --device <device-id>
+
+# Wait for the page to finish loading
+mobilecli webview wait <id> --state load --device <device-id>
+mobilecli webview wait <id> --state domcontentloaded --timeout 5000 --device <device-id>
+```
+
+Example output for `webview list`:
+```json
+{
+  "status": "ok",
+  "data": [
+    {
+      "id": "1",
+      "url": "https://example.com",
+      "title": "Example Domain"
+    }
+  ]
+}
+```
+
+Example output for `webview query <id> "button"`:
+```json
+{
+  "status": "ok",
+  "data": [
+    { "tag": "button", "text": "Sign In", "id": "login-btn", "class": "btn-primary", "value": null, "href": null },
+    { "tag": "button", "text": "Cancel", "id": null, "class": "btn-secondary", "value": null, "href": null }
+  ]
+}
+```
+
 ### Crash Reports 💥
 
 ```bash

agents/agents.go

@@ -0,0 +1,9 @@
+package agents
+
+import _ "embed"
+
+//go:embed android/devicekit.so
+var AndroidDevicekitSO []byte
+
+//go:embed android/devicekit.dex
+var AndroidDevicekitDEX []byte

agents/android/Makefile

@@ -0,0 +1,28 @@
+NDK         := $(HOME)/Library/Android/sdk/ndk/29.0.13113456
+TOOLCHAIN   := $(NDK)/toolchains/llvm/prebuilt/darwin-x86_64/bin
+CC_ANDROID  := $(TOOLCHAIN)/aarch64-linux-android26-clang
+JDK_INC     := $(shell brew --prefix openjdk@21)/include
+SYSROOT     := $(NDK)/toolchains/llvm/prebuilt/darwin-x86_64/sysroot/usr/include
+JAVAC       := $(shell brew --prefix openjdk@21)/bin/javac
+D8          := $(HOME)/Library/Android/sdk/build-tools/36.0.0/d8
+ANDROID_JAR := $(HOME)/Library/Android/sdk/platforms/android-35/android.jar
+
+JAVA_SRCS := $(wildcard java/*.java)
+
+all: devicekit.so devicekit.dex
+
+devicekit.so: jvmti_agent.c
+	$(CC_ANDROID) -shared -fPIC -O2 \
+		-I$(SYSROOT) -I$(JDK_INC) -I$(JDK_INC)/darwin \
+		-o $@ $< -llog
+
+devicekit.dex: $(JAVA_SRCS)
+	mkdir -p .dex_build
+	$(JAVAC) --release 8 -cp $(ANDROID_JAR) -d .dex_build $(JAVA_SRCS)
+	$(D8) --min-api 26 --output .dex_build $$(find .dex_build -name "*.class")
+	mv .dex_build/classes.dex devicekit.dex
+	rm -rf .dex_build
+
+clean:
+	rm -f devicekit.so devicekit.dex
+	rm -rf .dex_build

agents/android/java/AndroidBridge.java

@@ -0,0 +1,107 @@
+package com.mobilenext.mobilecli;
+
+import android.os.Handler;
+import android.os.Looper;
+import android.view.View;
+import android.view.ViewGroup;
+import android.webkit.WebView;
+
+import java.lang.reflect.Field;
+import java.util.List;
+import java.util.concurrent.Callable;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+import java.util.stream.IntStream;
+import java.util.stream.Stream;
+
+class AndroidBridge {
+
+	static Handler sMainHandler;
+
+	private static String sPackageName;
+	private static Field sMViewsField;
+	private static Object sWmgInstance;
+
+	static void init() {
+		sMainHandler = new Handler(Looper.getMainLooper());
+	}
+
+	@SuppressWarnings("unchecked")
+	static List<View> getRootViews() throws Exception {
+		if (sMViewsField == null) {
+			Class<?> wmgClass = Class.forName("android.view.WindowManagerGlobal");
+			sMViewsField = wmgClass.getDeclaredField("mViews");
+			sMViewsField.setAccessible(true);
+			sWmgInstance = wmgClass.getMethod("getInstance").invoke(null);
+		}
+		return (List<View>) sMViewsField.get(sWmgInstance);
+	}
+
+	static String getPackageName() {
+		if (sPackageName != null) {
+			return sPackageName;
+		}
+		try {
+			byte[] buf = new byte[256];
+			java.io.FileInputStream fis = new java.io.FileInputStream("/proc/self/cmdline");
+			int len = fis.read(buf);
+			fis.close();
+			int end = 0;
+			while (end < len && buf[end] != 0 && buf[end] != ':') {
+				end++;
+			}
+			sPackageName = new String(buf, 0, end).trim();
+			return sPackageName;
+		} catch (Exception e) {
+			return "unknown";
+		}
+	}
+
+	static Stream<WebView> streamWebViews(View view) {
+		if (view instanceof WebView) {
+			return Stream.of((WebView) view);
+		} else if (view instanceof ViewGroup) {
+			ViewGroup vg = (ViewGroup) view;
+			return IntStream.range(0, vg.getChildCount())
+				.mapToObj(vg::getChildAt)
+				.flatMap(AndroidBridge::streamWebViews);
+		}
+		return Stream.empty();
+	}
+
+	@SuppressWarnings("unchecked")
+	static <T> T runOnMainThread(Callable<T> task) throws Exception {
+		Object[] result = {null};
+		Exception[] err = {null};
+		CountDownLatch latch = new CountDownLatch(1);
+		sMainHandler.post(() -> {
+			try {
+				result[0] = task.call();
+			} catch (Exception e) {
+				err[0] = e;
+			} finally {
+				latch.countDown();
+			}
+		});
+		if (!latch.await(5, TimeUnit.SECONDS)) {
+			throw new Exception("timed out");
+		}
+		if (err[0] != null) {
+			throw err[0];
+		}
+		return (T) result[0];
+	}
+
+	static String evalJs(WebView wv, String script) throws Exception {
+		String[] result = {null};
+		CountDownLatch latch = new CountDownLatch(1);
+		sMainHandler.post(() -> wv.evaluateJavascript(script, value -> {
+			result[0] = value;
+			latch.countDown();
+		}));
+		if (!latch.await(10, TimeUnit.SECONDS)) {
+			throw new Exception("evaluateJavascript timed out");
+		}
+		return result[0];
+	}
+}

agents/android/java/HttpRpcServer.java

@@ -0,0 +1,67 @@
+package com.mobilenext.mobilecli;
+
+import android.net.LocalServerSocket;
+import android.net.LocalSocket;
+
+import java.io.BufferedReader;
+import java.io.InputStreamReader;
+import java.io.PrintWriter;
+
+class HttpRpcServer {
+
+	static void start() {
+		String name = "mobilecli." + AndroidBridge.getPackageName();
+		new Thread(() -> {
+			try {
+				LocalServerSocket server = new LocalServerSocket(name);
+				android.util.Log.d("MobileCliAgent", "listening on localabstract:" + name);
+				while (true) {
+					handleClient(server.accept());
+				}
+			} catch (Exception e) {
+				android.util.Log.e("MobileCliAgent", "server error: " + e.getMessage());
+			}
+		}, "vta-server").start();
+	}
+
+	private static void handleClient(LocalSocket client) {
+		new Thread(() -> {
+			try (
+				BufferedReader in = new BufferedReader(new InputStreamReader(client.getInputStream()));
+				PrintWriter out = new PrintWriter(client.getOutputStream(), false)
+			) {
+				String requestLine = in.readLine();
+				if (requestLine == null) {
+					return;
+				}
+
+				int contentLength = 0;
+				String header;
+				while ((header = in.readLine()) != null && !header.isEmpty()) {
+					if (header.toLowerCase().startsWith("content-length:")) {
+						contentLength = Integer.parseInt(header.substring(15).trim());
+					}
+				}
+
+				char[] body = new char[contentLength];
+				if (contentLength > 0) {
+					in.read(body, 0, contentLength);
+				}
+				String bodyStr = new String(body).trim();
+
+				String response = JsonRpcDispatcher.dispatch(bodyStr.isEmpty() ? "{}" : bodyStr);
+
+				byte[] bytes = response.getBytes("UTF-8");
+				out.print("HTTP/1.1 200 OK\r\n");
+				out.print("Content-Type: application/json\r\n");
+				out.print("Content-Length: " + bytes.length + "\r\n");
+				out.print("Connection: close\r\n");
+				out.print("\r\n");
+				out.print(response);
+				out.flush();
+			} catch (Exception e) {
+				android.util.Log.e("MobileCliAgent", "client error: " + e.getMessage());
+			}
+		}, "vta-client").start();
+	}
+}