@aiwg/cockpit 2026.7.24 → 2026.8.0

package/vscode/extension.js

@@ -1,7 +1,8 @@
 // AIWG Cockpit — VS Code shell (#1594).
 // Hosts the registry-bound Bridge UI inside a webview, and exposes contributed
 // actions as command-palette entries. The shell never replaces the CLI or the
-// Bridge — it reads the per-launch token the Bridge wrote and loads its UI.
+// Bridge — it resolves the native runtime credential, exchanges it for a
+// one-time webview bootstrap, and never places the credential in a URL.
 // CommonJS so it runs with no build step.
 const vscode = require('vscode');
 const os = require('os');
@@ -35,9 +36,10 @@ function activate(context) {
       try { rt = await ensureRuntime(); } catch (e) { return vscode.window.showWarningMessage(e.message); }
       const panel = vscode.window.createWebviewPanel('aiwgCockpit', 'AIWG Cockpit', vscode.ViewColumn.One, { enableScripts: true, retainContextWhenHidden: true });
       const { webviewUrl } = await shellCore();
-      const u = webviewUrl(rt);
+      const u = await webviewUrl(rt, { audience: 'vscode' });
+      const bridgeOrigin = new URL(rt.url).origin;
       panel.webview.html = `<!doctype html><html><head><meta charset="utf-8" />
-        <meta http-equiv="Content-Security-Policy" content="default-src 'none'; frame-src http://127.0.0.1:* http://localhost:*; style-src 'unsafe-inline';" />
+        <meta http-equiv="Content-Security-Policy" content="default-src 'none'; frame-src ${bridgeOrigin}; style-src 'unsafe-inline';" />
         <style>html,body,iframe{margin:0;height:100vh;width:100%;border:0}</style></head>
         <body><iframe src="${u}" title="AIWG Cockpit"></iframe></body></html>`;
     }),
@@ -45,7 +47,7 @@ function activate(context) {
       let rt;
       try { rt = await ensureRuntime(); } catch (e) { return vscode.window.showWarningMessage(e.message); }
       const { webviewUrl } = await shellCore();
-      vscode.env.openExternal(vscode.Uri.parse(`${webviewUrl(rt)}#actions`));
+      vscode.env.openExternal(vscode.Uri.parse(await webviewUrl(rt, { audience: 'browser', next: 'actions' })));
     }),
   );
 }

package/vscode/smoke.mjs

@@ -12,16 +12,24 @@ await writeFile(runtimePath, JSON.stringify({ token: 'vscode-shell-core-token-12
 const requests = [];
 globalThis.fetch = async (input, init = {}) => {
   requests.push({ url: String(input), init });
+  if (String(input).endsWith('/bootstrap/nonce')) {
+    return new Response(JSON.stringify({ nonce: 'vscode-one-time-nonce', expires_in_ms: 60000 }), {
+      status: 201,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
   return new Response(JSON.stringify({ ok: true }), { status: 200, headers: { 'Content-Type': 'application/json' } });
 };
 
 const originalLoad = Module._load;
+const commands = new Map();
+const panel = { webview: { html: '' } };
 Module._load = function patchedLoad(request, parent, isMain) {
   if (request === 'vscode') {
     return {
       workspace: { getConfiguration: () => ({ get: () => runtimePath }) },
-      window: { showWarningMessage: () => undefined, createWebviewPanel: () => ({ webview: { html: '' } }) },
-      commands: { registerCommand: () => ({ dispose: () => undefined }) },
+      window: { showWarningMessage: () => undefined, createWebviewPanel: () => panel },
+      commands: { registerCommand: (name, callback) => { commands.set(name, callback); return { dispose: () => undefined }; } },
       env: { openExternal: () => undefined },
       Uri: { parse: (value) => ({ value }) },
       ViewColumn: { One: 1 },
@@ -40,6 +48,12 @@ try {
     requests.some((r) => r.url.endsWith('/api/health') && r.init.headers?.authorization === `Bearer ${rt.token}`),
     'shell-core performs the authenticated Bridge health check',
   );
+  extension.activate({ subscriptions: [] });
+  await commands.get('aiwg-cockpit.open')();
+  assert.match(panel.webview.html, /frame-src http:\/\/127\.0\.0\.1:8159;/, 'webview CSP permits only the resolved Bridge origin');
+  assert.doesNotMatch(panel.webview.html, /localhost:\*|127\.0\.0\.1:\*/, 'webview CSP has no wildcard local port');
+  assert.match(panel.webview.html, /#bootstrap=vscode-one-time-nonce&audience=vscode|#bootstrap=vscode-one-time-nonce&audience=vscode/, 'webview uses one-time fragment bootstrap');
+  assert.ok(!panel.webview.html.includes(rt.token), 'webview HTML does not contain the reusable token');
   console.log('SMOKE OK - VS Code shell delegates runtime resolution to shell-core');
 } finally {
   Module._load = originalLoad;