DRAFT: feat: webview commands for listing and evaluating js

README.md

@@ -37,6 +37,7 @@ A universal command-line tool for managing iOS and Android devices, simulators,
 - **Device Control**: Reboot devices, tap screen coordinates, press hardware buttons
 - **App Management**: Launch, terminate, install, uninstall, list, and get foreground apps
 - **Crash Reports**: List and fetch crash reports from iOS and Android devices
+- **Webview Inspection**: List, navigate, query DOM, and evaluate JavaScript in embedded webviews
 
 ### 🎯 Platform Support
 
@@ -255,6 +256,66 @@ Example output for `agent status`:
 }
 ```
 
+### Webview Inspection 🌐
+
+Inspect and interact with embedded webviews (`WKWebView` on iOS, `android.webkit.WebView` on Android) running inside native apps.
+
+```bash
+# List embedded webviews in the foreground app
+mobilecli webview list --device <device-id>
+
+# Navigate a webview to a URL
+mobilecli webview goto <id> https://example.com --device <device-id>
+
+# Reload, go back or forward
+mobilecli webview reload <id> --device <device-id>
+mobilecli webview back <id> --device <device-id>
+mobilecli webview forward <id> --device <device-id>
+
+# Get current URL and page title
+mobilecli webview url <id> --device <device-id>
+mobilecli webview title <id> --device <device-id>
+
+# Dump the full HTML content of the page
+mobilecli webview content <id> --device <device-id>
+
+# Query DOM elements by CSS selector
+mobilecli webview query <id> "button" --device <device-id>
+mobilecli webview query <id> "[data-testid='submit']" --device <device-id>
+
+# Evaluate arbitrary JavaScript
+mobilecli webview eval <id> "document.querySelectorAll('a').length" --device <device-id>
+
+# Wait for the page to finish loading
+mobilecli webview wait <id> --state load --device <device-id>
+mobilecli webview wait <id> --state domcontentloaded --timeout 5000 --device <device-id>
+```
+
+Example output for `webview list`:
+```json
+{
+  "status": "ok",
+  "data": [
+    {
+      "id": "1",
+      "url": "https://example.com",
+      "title": "Example Domain"
+    }
+  ]
+}
+```
+
+Example output for `webview query <id> "button"`:
+```json
+{
+  "status": "ok",
+  "data": [
+    { "tag": "button", "text": "Sign In", "id": "login-btn", "class": "btn-primary", "value": null, "href": null },
+    { "tag": "button", "text": "Cancel", "id": null, "class": "btn-secondary", "value": null, "href": null }
+  ]
+}
+```
+
 ### Crash Reports 💥
 
 ```bash

agents/agents.go

@@ -0,0 +1,9 @@
+package agents
+
+import _ "embed"
+
+//go:embed android/devicekit.so
+var AndroidDevicekitSO []byte
+
+//go:embed android/devicekit.dex
+var AndroidDevicekitDEX []byte

agents/android/jvmti_agent.c

@@ -0,0 +1,151 @@
+#include <jvmti.h>
+#include <jni.h>
+#include <android/log.h>
+#include <string.h>
+#include <stdlib.h>
+
+#define TAG     "devicekit"
+#define LOG(...)  __android_log_print(ANDROID_LOG_DEBUG, TAG, __VA_ARGS__)
+
+/* ── load devicekit.dex into the target process ─────────────────────────── */
+
+/* dex_path  — full path to devicekit.dex on the device
+   opt_dir   — directory used by DexClassLoader for optimised odex output;
+               typically the same directory that contains the dex */
+static void bootstrap(JNIEnv *env, const char *dex_path, const char *opt_dir) {
+    jclass cls_CL = (*env)->FindClass(env, "java/lang/ClassLoader");
+    jclass cls_DCL = (*env)->FindClass(env, "dalvik/system/DexClassLoader");
+    if (!cls_CL || !cls_DCL || (*env)->ExceptionCheck(env)) {
+        (*env)->ExceptionClear(env);
+        return;
+    }
+
+    jmethodID getSys = (*env)->GetStaticMethodID(env, cls_CL, "getSystemClassLoader", "()Ljava/lang/ClassLoader;");
+    jmethodID init = (*env)->GetMethodID(env, cls_DCL, "<init>", "(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/ClassLoader;)V");
+    jmethodID load = (*env)->GetMethodID(env, cls_CL, "loadClass", "(Ljava/lang/String;)Ljava/lang/Class;");
+    if (!getSys || !init || !load) {
+        (*env)->ExceptionClear(env);
+        return;
+    }
+
+    jobject parent = (*env)->CallStaticObjectMethod(env, cls_CL, getSys);
+    jstring j_dex = (*env)->NewStringUTF(env, dex_path);
+    jstring j_opt = (*env)->NewStringUTF(env, opt_dir);
+    jobject loader = (*env)->NewObject(env, cls_DCL, init, j_dex, j_opt, NULL, parent);
+    (*env)->DeleteLocalRef(env, j_dex);
+    (*env)->DeleteLocalRef(env, j_opt);
+
+    if (!loader || (*env)->ExceptionCheck(env)) {
+        jthrowable exc = (*env)->ExceptionOccurred(env);
+        (*env)->ExceptionClear(env);
+        if (exc) {
+            jclass ecls = (*env)->GetObjectClass(env, exc);
+            jmethodID toStr = (*env)->GetMethodID(env, ecls, "toString", "()Ljava/lang/String;");
+            if (toStr) {
+                jstring msg = (jstring)(*env)->CallObjectMethod(env, exc, toStr);
+                if (msg && !(*env)->ExceptionCheck(env)) {
+                    const char *s = (*env)->GetStringUTFChars(env, msg, NULL);
+                    LOG("DexClassLoader exception: %s", s ? s : "(null)");
+                    if (s) (*env)->ReleaseStringUTFChars(env, msg, s);
+                } else (*env)->ExceptionClear(env);
+            }
+        }
+        LOG("DexClassLoader failed — push devicekit.dex to %s", dex_path);
+        return;
+    }
+
+    jstring j_cls = (*env)->NewStringUTF(env, "com.mobilenext.mobilecli.MobileCliAgent");
+    jclass agentCls = (jclass)(*env)->CallObjectMethod(env, loader, load, j_cls);
+    (*env)->DeleteLocalRef(env, j_cls);
+    if (!agentCls || (*env)->ExceptionCheck(env)) {
+        jthrowable exc = (*env)->ExceptionOccurred(env);
+        (*env)->ExceptionClear(env);
+        if (exc) {
+            jclass ecls = (*env)->GetObjectClass(env, exc);
+            jmethodID toStr = (*env)->GetMethodID(env, ecls, "toString", "()Ljava/lang/String;");
+            if (toStr) {
+                jstring msg = (jstring)(*env)->CallObjectMethod(env, exc, toStr);
+                if (msg && !(*env)->ExceptionCheck(env)) {
+                    const char *s = (*env)->GetStringUTFChars(env, msg, NULL);
+                    LOG("loadClass exception: %s", s ? s : "(null)");
+                    if (s) (*env)->ReleaseStringUTFChars(env, msg, s);
+                } else {
+                    (*env)->ExceptionClear(env);
+                }
+            }
+        }
+
+        LOG("loadClass(MobileCliAgent) failed");
+        return;
+    }
+
+    jmethodID start = (*env)->GetStaticMethodID(env, agentCls, "start", "()V");
+    if (!start || (*env)->ExceptionCheck(env)) {
+        (*env)->ExceptionClear(env);
+        return;
+    }
+
+    (*env)->CallStaticVoidMethod(env, agentCls, start);
+    if ((*env)->ExceptionCheck(env)) {
+        jthrowable exc = (*env)->ExceptionOccurred(env);
+        (*env)->ExceptionClear(env);
+        if (exc) {
+            jclass ecls = (*env)->GetObjectClass(env, exc);
+            jmethodID toStr = (*env)->GetMethodID(env, ecls, "toString", "()Ljava/lang/String;");
+            if (toStr) {
+                jstring msg = (jstring)(*env)->CallObjectMethod(env, exc, toStr);
+                if (msg && !(*env)->ExceptionCheck(env)) {
+                    const char *s = (*env)->GetStringUTFChars(env, msg, NULL);
+                    LOG("MobileCliAgent.start() threw: %s", s ? s : "(null)");
+                    if (s) (*env)->ReleaseStringUTFChars(env, msg, s);
+                } else {
+                    (*env)->ExceptionClear(env);
+                }
+            }
+        }
+    }
+
+    LOG("MobileCliAgent started");
+}
+
+/* ── agent entry points ──────────────────────────────────────────────────── */
+
+/* opts is the dex path passed via: am attach-agent <pid> agent.so=<dex_path>
+   opt_dir is derived as the directory containing the dex file. */
+static jint setup(JavaVM *vm, const char *opts) {
+    if (!opts || opts[0] == '\0') {
+        LOG("no dex path provided — pass it as agent.so=/path/to/devicekit.dex");
+        return JNI_ERR;
+    }
+
+    const char *dex_path = opts;
+
+    /* derive opt_dir as dirname(dex_path) */
+    char opt_dir[512];
+    const char *slash = strrchr(dex_path, '/');
+    if (slash && slash != dex_path) {
+        size_t len = (size_t)(slash - dex_path);
+        if (len >= sizeof(opt_dir)) { len = sizeof(opt_dir) - 1; }
+        memcpy(opt_dir, dex_path, len);
+        opt_dir[len] = '\0';
+    } else {
+        opt_dir[0] = '.';
+        opt_dir[1] = '\0';
+    }
+
+    JNIEnv *env = NULL;
+    (*vm)->AttachCurrentThread(vm, (void **) &env, NULL);
+    bootstrap(env, dex_path, opt_dir);
+    LOG("agent ready (dex=%s)", dex_path);
+    return JNI_OK;
+}
+
+JNIEXPORT jint
+JNICALL Agent_OnLoad(JavaVM *vm, char *opts, void *reserved) {
+    return setup(vm, opts);
+}
+
+JNIEXPORT jint
+JNICALL Agent_OnAttach(JavaVM *vm, char *opts, void *reserved) {
+    return setup(vm, opts);
+}

cli/flags.go

@@ -31,4 +31,8 @@ var (
 	fleetNames    []string
 	fleetWait     bool
 	fleetTimeout  int
+
+	// for webview wait command
+	webviewWaitState   string
+	webviewWaitTimeout int
 )

cli/root.go

@@ -91,6 +91,35 @@ INPUT/OUTPUT:
   # Send text input
   mobilecli io text --device <device-id> "Hello World"
 
+WEBVIEW:
+  # List embedded webviews in the foreground app
+  mobilecli webview list --device <device-id>
+
+  # Navigate a webview to a URL
+  mobilecli webview goto <id> https://example.com --device <device-id>
+
+  # Reload, go back or forward
+  mobilecli webview reload <id> --device <device-id>
+  mobilecli webview back <id> --device <device-id>
+  mobilecli webview forward <id> --device <device-id>
+
+  # Get current URL and page title
+  mobilecli webview url <id> --device <device-id>
+  mobilecli webview title <id> --device <device-id>
+
+  # Dump full HTML content
+  mobilecli webview content <id> --device <device-id>
+
+  # Query DOM elements by CSS selector
+  mobilecli webview query <id> "button" --device <device-id>
+  mobilecli webview query <id> "[data-testid='submit']" --device <device-id>
+
+  # Evaluate arbitrary JavaScript
+  mobilecli webview eval <id> "document.querySelectorAll('a').length" --device <device-id>
+
+  # Wait for page load
+  mobilecli webview wait <id> --state load --device <device-id>
+
 CRASH REPORTS:
   # List crash reports from a device
   mobilecli device crashes list --device <device-id>