feat: expose __kernalModeTrust in exec_js for dev/test access

Author: abose

phoenix-builder-mcp/mcp-tools.js

@@ -322,10 +322,12 @@ export function registerTools(server, processManager, wsControlServer, phoenixDe
         "Execute JavaScript in the Phoenix Code browser runtime and return the result. " +
         "Code runs async in the page context with access to: " +
         "$ (jQuery) for DOM queries/clicks, " +
-        "brackets.test.CommandManager, brackets.test.EditorManager, brackets.test.ProjectManager, " +
-        "brackets.test.DocumentManager, brackets.test.FileSystem, brackets.test.FileUtils, " +
-        "and 50+ other modules on brackets.test.* — " +
-        "supports await.",
+        "brackets.test.CommandManager, brackets.test.EditorManager, " +
+        "brackets.test.ProjectManager, brackets.test.DocumentManager, " +
+        "brackets.test.FileSystem, brackets.test.FileUtils, " +
+        "and 50+ other modules on brackets.test.* — supports await. " +
+        "__kernalModeTrust is available as a parameter " +
+        "(deleted from window after boot, preserved here for dev/test).",
         {
             code: z.string().describe("JavaScript code to execute in Phoenix"),
             instance: z.string().optional().describe("Target a specific Phoenix instance by name (e.g. 'Phoenix-a3f2'). Required when multiple instances are connected.")

src/phoenix-builder/phoenix-builder-boot.js

@@ -387,10 +387,11 @@
 
     // --- Register built-in handler for exec_js_request ---
     // Evaluates arbitrary JS in the page context and returns the result.
+    // `__kernalModeTrust` is available inside exec_js code for dev/test access.
     registerHandler("exec_js_request", function (msg) {
         const AsyncFunction = (async function () {}).constructor;
-        const fn = new AsyncFunction(msg.code);
-        fn().then(function (result) {
+        const fn = new AsyncFunction("__kernalModeTrust", msg.code);
+        fn(_kernalModeTrust).then(function (result) {
             _sendMessage({
                 type: "exec_js_response",
                 id: msg.id,