@btraut/browser-bridge 0.13.2 → 0.15.0

package/extension/dist/options-ui.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/site-permissions.ts", "../src/options-ui.ts"],
-  "sourcesContent": ["export const SITE_ALLOWLIST_KEY = 'siteAllowlist';\nexport const PERMISSION_PROMPT_WAIT_MS_KEY = 'permissionPromptWaitMs';\nexport const DEFAULT_PERMISSION_PROMPT_WAIT_MS = 30_000;\nexport const SITE_PERMISSIONS_MODE_KEY = 'sitePermissionsMode';\nexport const DEBUGGER_CAPABILITY_ENABLED_KEY = 'debuggerCapabilityEnabled';\n\nexport type SitePermissionsMode = 'granular' | 'bypass';\nexport const DEFAULT_SITE_PERMISSIONS_MODE: SitePermissionsMode = 'granular';\nexport const DEFAULT_DEBUGGER_CAPABILITY_ENABLED = false;\n\nexport type SiteAllowlistEntry = {\n  createdAt: string; // ISO\n  lastUsedAt: string; // ISO\n};\n\nexport type SiteAllowlist = Record<string, SiteAllowlistEntry>;\n\nexport const siteKeyFromUrl = (rawUrl: string): string | null => {\n  if (!rawUrl || typeof rawUrl !== 'string') {\n    return null;\n  }\n\n  try {\n    const parsed = new URL(rawUrl);\n    // Only gate \"real web\" pages for now.\n    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n      return null;\n    }\n\n    // URL.hostname is lowercased by the platform.\n    if (!parsed.hostname) {\n      return null;\n    }\n\n    return parsed.port ? `${parsed.hostname}:${parsed.port}` : parsed.hostname;\n  } catch {\n    return null;\n  }\n};\n\nconst isAllowlistEntry = (value: unknown): value is SiteAllowlistEntry => {\n  if (!value || typeof value !== 'object') {\n    return false;\n  }\n  const v = value as Record<string, unknown>;\n  return typeof v.createdAt === 'string' && typeof v.lastUsedAt === 'string';\n};\n\nconst normalizeSiteKey = (siteKey: string): string => siteKey.toLowerCase();\n\nconst readAllowlistRaw = async (): Promise<SiteAllowlist> => {\n  return await new Promise<SiteAllowlist>((resolve) => {\n    chrome.storage.local.get(\n      [SITE_ALLOWLIST_KEY],\n      (result: Record<string, unknown>) => {\n        const raw = result?.[SITE_ALLOWLIST_KEY];\n        if (!raw || typeof raw !== 'object') {\n          resolve({});\n          return;\n        }\n\n        const out: SiteAllowlist = {};\n        for (const [k, v] of Object.entries(raw as Record<string, unknown>)) {\n          if (typeof k !== 'string') {\n            continue;\n          }\n          if (!isAllowlistEntry(v)) {\n            continue;\n          }\n          out[normalizeSiteKey(k)] = v;\n        }\n\n        resolve(out);\n      }\n    );\n  });\n};\n\nconst writeAllowlistRaw = async (allowlist: SiteAllowlist): Promise<void> => {\n  return await new Promise<void>((resolve) => {\n    chrome.storage.local.set({ [SITE_ALLOWLIST_KEY]: allowlist }, () =>\n      resolve()\n    );\n  });\n};\n\nexport const readSitePermissionsMode =\n  async (): Promise<SitePermissionsMode> => {\n    return await new Promise<SitePermissionsMode>((resolve) => {\n      chrome.storage.local.get(\n        [SITE_PERMISSIONS_MODE_KEY],\n        (result: Record<string, unknown>) => {\n          const raw = result?.[SITE_PERMISSIONS_MODE_KEY];\n          if (raw === 'granular' || raw === 'bypass') {\n            resolve(raw);\n            return;\n          }\n\n          // Self-heal legacy/invalid storage to a safe default, so UIs never\n          // render with \"no mode selected\" and other callers don't have to\n          // special-case missing values.\n          try {\n            chrome.storage.local.set({\n              [SITE_PERMISSIONS_MODE_KEY]: DEFAULT_SITE_PERMISSIONS_MODE,\n            });\n          } catch {\n            // ignore\n          }\n          resolve(DEFAULT_SITE_PERMISSIONS_MODE);\n        }\n      );\n    });\n  };\n\nexport const writeSitePermissionsMode = async (\n  mode: SitePermissionsMode\n): Promise<void> => {\n  return await new Promise<void>((resolve) => {\n    chrome.storage.local.set({ [SITE_PERMISSIONS_MODE_KEY]: mode }, () =>\n      resolve()\n    );\n  });\n};\n\nexport const readPermissionPromptWaitMs = async (): Promise<number> => {\n  return await new Promise<number>((resolve) => {\n    chrome.storage.local.get(\n      [PERMISSION_PROMPT_WAIT_MS_KEY],\n      (result: Record<string, unknown>) => {\n        const raw = result?.[PERMISSION_PROMPT_WAIT_MS_KEY];\n        if (typeof raw === 'number' && Number.isFinite(raw) && raw > 0) {\n          resolve(raw);\n          return;\n        }\n        if (typeof raw === 'string') {\n          const parsed = Number(raw);\n          if (Number.isFinite(parsed) && parsed > 0) {\n            resolve(parsed);\n            return;\n          }\n        }\n\n        resolve(DEFAULT_PERMISSION_PROMPT_WAIT_MS);\n      }\n    );\n  });\n};\n\nexport const readDebuggerCapabilityEnabled = async (): Promise<boolean> => {\n  return await new Promise<boolean>((resolve) => {\n    chrome.storage.local.get(\n      [DEBUGGER_CAPABILITY_ENABLED_KEY],\n      (result: Record<string, unknown>) => {\n        const raw = result?.[DEBUGGER_CAPABILITY_ENABLED_KEY];\n        if (typeof raw === 'boolean') {\n          resolve(raw);\n          return;\n        }\n\n        // Keep storage canonical so UI/background can rely on deterministic\n        // booleans after first read.\n        try {\n          chrome.storage.local.set({\n            [DEBUGGER_CAPABILITY_ENABLED_KEY]:\n              DEFAULT_DEBUGGER_CAPABILITY_ENABLED,\n          });\n        } catch {\n          // ignore\n        }\n        resolve(DEFAULT_DEBUGGER_CAPABILITY_ENABLED);\n      }\n    );\n  });\n};\n\nexport const writeDebuggerCapabilityEnabled = async (\n  enabled: boolean\n): Promise<void> => {\n  return await new Promise<void>((resolve) => {\n    chrome.storage.local.set(\n      { [DEBUGGER_CAPABILITY_ENABLED_KEY]: Boolean(enabled) },\n      () => resolve()\n    );\n  });\n};\n\nexport const getAllowlistedSites = async (): Promise<SiteAllowlist> => {\n  return await readAllowlistRaw();\n};\n\nexport const isSiteAllowed = async (siteKey: string): Promise<boolean> => {\n  const key = normalizeSiteKey(siteKey);\n  const allowlist = await readAllowlistRaw();\n  return Boolean(allowlist[key]);\n};\n\nexport const allowSiteAlways = async (\n  siteKey: string,\n  now: Date = new Date()\n): Promise<void> => {\n  const key = normalizeSiteKey(siteKey);\n  const allowlist = await readAllowlistRaw();\n  const nowIso = now.toISOString();\n\n  const existing = allowlist[key];\n  allowlist[key] = {\n    createdAt: existing?.createdAt ?? nowIso,\n    lastUsedAt: nowIso,\n  };\n\n  await writeAllowlistRaw(allowlist);\n};\n\nexport const upsertAllowlistedSites = async (\n  entries: SiteAllowlist\n): Promise<void> => {\n  const allowlist = await readAllowlistRaw();\n  let changed = false;\n\n  for (const [k, v] of Object.entries(entries ?? {})) {\n    if (typeof k !== 'string') {\n      continue;\n    }\n    if (!isAllowlistEntry(v)) {\n      continue;\n    }\n    allowlist[normalizeSiteKey(k)] = v;\n    changed = true;\n  }\n\n  if (!changed) {\n    return;\n  }\n\n  await writeAllowlistRaw(allowlist);\n};\n\nexport const touchSiteLastUsed = async (\n  siteKey: string,\n  now: Date = new Date()\n): Promise<void> => {\n  const key = normalizeSiteKey(siteKey);\n  const allowlist = await readAllowlistRaw();\n  const existing = allowlist[key];\n  if (!existing) {\n    return;\n  }\n\n  allowlist[key] = { ...existing, lastUsedAt: now.toISOString() };\n  await writeAllowlistRaw(allowlist);\n};\n\nexport const revokeSite = async (siteKey: string): Promise<void> => {\n  const key = normalizeSiteKey(siteKey);\n  const allowlist = await readAllowlistRaw();\n  if (!allowlist[key]) {\n    return;\n  }\n  delete allowlist[key];\n  await writeAllowlistRaw(allowlist);\n};\n", "import {\n  allowSiteAlways,\n  DEFAULT_DEBUGGER_CAPABILITY_ENABLED,\n  getAllowlistedSites,\n  readDebuggerCapabilityEnabled,\n  readSitePermissionsMode,\n  revokeSite,\n  type SitePermissionsMode,\n  upsertAllowlistedSites,\n  writeDebuggerCapabilityEnabled,\n  writeSitePermissionsMode,\n} from './site-permissions.js';\n\ntype Row = {\n  site: string;\n  createdAt: string;\n  lastUsedAt: string;\n};\n\ntype ModeEls = {\n  granular: HTMLInputElement;\n  bypass: HTMLInputElement;\n  sitesDetails: HTMLDetailsElement;\n  sitesSummary: HTMLElement;\n};\n\ntype DebuggerEls = {\n  enabled: HTMLInputElement;\n  status: HTMLElement;\n};\n\nconst ACTIVATION_FLAG_PARAM = 'bb_activate';\nconst ACTIVATION_PORT_PARAM = 'corePort';\n\nconst byId = (id: string): HTMLElement => {\n  const el = document.getElementById(id);\n  if (!el) {\n    throw new Error(`Missing element: ${id}`);\n  }\n  return el;\n};\n\nconst elFromHtml = (html: string): HTMLElement => {\n  const tpl = document.createElement('template');\n  tpl.innerHTML = html.trim();\n  const node = tpl.content.firstElementChild;\n  if (!node) {\n    throw new Error('Expected element from template.');\n  }\n  return node as HTMLElement;\n};\n\nconst formatTime = (iso: string): string => {\n  const d = new Date(iso);\n  if (!Number.isFinite(d.getTime())) {\n    return iso;\n  }\n  try {\n    return new Intl.DateTimeFormat(undefined, {\n      year: 'numeric',\n      month: 'numeric',\n      day: 'numeric',\n      hour: 'numeric',\n      minute: '2-digit',\n    }).format(d);\n  } catch {\n    return iso;\n  }\n};\n\nconst parseActivationPort = (value: string | null): number | null => {\n  if (!value) {\n    return null;\n  }\n  const parsed = Number.parseInt(value, 10);\n  if (!Number.isFinite(parsed) || parsed <= 0) {\n    return null;\n  }\n  return Math.floor(parsed);\n};\n\nconst clearActivationQueryParams = (): void => {\n  const url = new URL(window.location.href);\n  if (!url.search) {\n    return;\n  }\n  url.search = '';\n  window.history.replaceState(\n    null,\n    document.title,\n    `${url.pathname}${url.hash}`\n  );\n};\n\nconst writeCorePort = async (corePort: number): Promise<void> => {\n  await new Promise<void>((resolve, reject) => {\n    chrome.storage.local.set({ corePort }, () => {\n      const error = chrome.runtime.lastError;\n      if (error) {\n        reject(new Error(error.message));\n        return;\n      }\n      resolve();\n    });\n  });\n};\n\nconst applyActivationQueryParams = async (): Promise<void> => {\n  const url = new URL(window.location.href);\n  const params = url.searchParams;\n  if (params.get(ACTIVATION_FLAG_PARAM) !== '1') {\n    return;\n  }\n\n  const corePort = parseActivationPort(params.get(ACTIVATION_PORT_PARAM));\n  try {\n    if (corePort !== null) {\n      await writeCorePort(corePort);\n    } else {\n      console.warn('Ignoring dev activation request with invalid corePort.');\n    }\n  } catch (error) {\n    console.warn('Failed to apply dev activation corePort.', error);\n  } finally {\n    clearActivationQueryParams();\n  }\n};\n\nconst createToast = (): {\n  showUndo: (opts: { message: string; onUndo: () => Promise<void> }) => void;\n} => {\n  const wrap = document.createElement('div');\n  wrap.className = 'bb-toast-wrap';\n  document.body.appendChild(wrap);\n\n  let activeTimer: ReturnType<typeof globalThis.setTimeout> | null = null;\n\n  const clear = (): void => {\n    if (activeTimer !== null) {\n      globalThis.clearTimeout(activeTimer);\n      activeTimer = null;\n    }\n    wrap.innerHTML = '';\n  };\n\n  return {\n    showUndo: ({ message, onUndo }): void => {\n      clear();\n\n      const toast = elFromHtml(`\n        <div class=\"bb-toast\" role=\"status\" aria-live=\"polite\">\n          <div class=\"bb-toast-msg\"></div>\n          <button class=\"bb-link-button\" type=\"button\">Undo</button>\n        </div>\n      `);\n      const msgEl = toast.querySelector('.bb-toast-msg') as HTMLElement | null;\n      const undoBtn = toast.querySelector('button') as HTMLButtonElement | null;\n      if (!msgEl || !undoBtn) {\n        throw new Error('Toast missing required elements.');\n      }\n\n      msgEl.textContent = message;\n      undoBtn.addEventListener('click', () => {\n        undoBtn.disabled = true;\n        void (async () => {\n          try {\n            await onUndo();\n          } finally {\n            clear();\n          }\n        })();\n      });\n\n      wrap.appendChild(toast);\n      activeTimer = globalThis.setTimeout(() => clear(), 6000);\n    },\n  };\n};\n\nconst toast = createToast();\n\nconst getModeEls = (): ModeEls => {\n  const granular = byId('bb-mode-granular') as HTMLInputElement;\n  const bypass = byId('bb-mode-bypass') as HTMLInputElement;\n  const sitesDetails = byId('bb-sites-details') as HTMLDetailsElement;\n  const sitesSummary = byId('bb-sites-summary');\n\n  if (granular.type !== 'radio' || bypass.type !== 'radio') {\n    throw new Error('Expected radio inputs for permissions mode.');\n  }\n  if (sitesDetails.tagName.toLowerCase() !== 'details') {\n    throw new Error('Expected a <details> for the sites disclosure.');\n  }\n\n  return {\n    granular,\n    bypass,\n    sitesDetails,\n    sitesSummary,\n  };\n};\n\nconst getDebuggerEls = (): DebuggerEls => {\n  const enabled = byId('bb-debugger-enabled') as HTMLInputElement;\n  const status = byId('bb-debugger-status');\n  if (enabled.type !== 'checkbox') {\n    throw new Error('Expected checkbox input for debugger capability.');\n  }\n  return { enabled, status };\n};\n\nlet lastMode: SitePermissionsMode | null = null;\nlet modeWriteInProgress = false;\nlet debuggerWriteInProgress = false;\nlet pendingDebuggerCapability: boolean | null = null;\n\nconst applyMode = (mode: SitePermissionsMode): void => {\n  const els = getModeEls();\n  els.granular.checked = mode === 'granular';\n  els.bypass.checked = mode === 'bypass';\n\n  // Always show the disclosure + allowlist UI in both modes.\n  els.sitesSummary.textContent = 'Approved sites';\n  if (mode === 'bypass') {\n    if (lastMode !== 'bypass') {\n      els.sitesDetails.open = false;\n    }\n  } else if (lastMode !== 'granular') {\n    els.sitesDetails.open = true;\n  }\n\n  lastMode = mode;\n};\n\nconst refreshMode = async (): Promise<void> => {\n  applyMode(await readSitePermissionsMode());\n};\n\nconst applyDebuggerCapability = (enabled: boolean): void => {\n  const els = getDebuggerEls();\n  els.enabled.checked = enabled;\n  els.status.textContent = enabled\n    ? 'Enabled. inspect tools can attach through the debugger bridge.'\n    : 'Disabled by default. Enable only when you need inspect tools.';\n};\n\nconst refreshDebuggerCapability = async (): Promise<void> => {\n  applyDebuggerCapability(await readDebuggerCapabilityEnabled());\n};\n\nconst focusSiteRow = (site: string): void => {\n  const container = byId('bb-sites');\n  const rows = Array.from(container.querySelectorAll('.bb-site-row'));\n  for (const rowEl of rows) {\n    const el = rowEl as HTMLElement;\n    if (el.dataset.site !== site) {\n      continue;\n    }\n\n    try {\n      el.scrollIntoView({ block: 'nearest' });\n    } catch {\n      // ignore\n    }\n\n    const btn = el.querySelector('button') as HTMLButtonElement | null;\n    btn?.focus();\n    return;\n  }\n};\n\nconst render = (rows: Row[]): void => {\n  const container = byId('bb-sites');\n  container.innerHTML = '';\n  container.hidden = false;\n\n  if (rows.length === 0) {\n    const empty = document.createElement('div');\n    empty.className = 'bb-site-empty';\n\n    const line1 = document.createElement('div');\n    const title = document.createElement('strong');\n    title.textContent = 'No approved sites yet.';\n    line1.appendChild(title);\n    empty.appendChild(line1);\n\n    const line2 = document.createElement('div');\n    line2.textContent =\n      'Sites show up here after you approve them in a permission prompt.';\n    empty.appendChild(line2);\n    container.appendChild(empty);\n    return;\n  }\n\n  for (const row of rows) {\n    const item = elFromHtml(`\n      <div class=\"bb-site-row\" role=\"listitem\">\n        <div class=\"bb-site-main\">\n            <div class=\"bb-site-key\"></div>\n            <div class=\"bb-site-meta\"></div>\n        </div>\n        <button class=\"bb-link-button bb-link-button-danger\" type=\"button\">\n          Revoke\n        </button>\n      </div>\n    `);\n    (item as HTMLElement).dataset.site = row.site;\n\n    const key = item.querySelector('.bb-site-key') as HTMLElement | null;\n    const meta = item.querySelector('.bb-site-meta') as HTMLElement | null;\n    const revokeBtn = item.querySelector('button') as HTMLButtonElement | null;\n    if (!key || !meta || !revokeBtn) {\n      throw new Error('List row missing required elements.');\n    }\n\n    key.textContent = row.site;\n    meta.textContent = `Last used: ${formatTime(row.lastUsedAt)}`;\n    meta.title = `Approved: ${formatTime(\n      row.createdAt\n    )}\\nLast used: ${formatTime(row.lastUsedAt)}`;\n\n    revokeBtn.addEventListener('click', () => {\n      revokeBtn.disabled = true;\n      void (async () => {\n        const before = await getAllowlistedSites();\n        const entry = before[row.site] ?? before[row.site.toLowerCase()];\n\n        try {\n          await revokeSite(row.site);\n        } finally {\n          await refresh();\n          revokeBtn.disabled = false;\n        }\n\n        if (entry) {\n          toast.showUndo({\n            message: `Revoked ${row.site}.`,\n            onUndo: async () => {\n              try {\n                await upsertAllowlistedSites({ [row.site]: entry });\n                const after = await getAllowlistedSites();\n                if (!after[row.site] && !after[row.site.toLowerCase()]) {\n                  await allowSiteAlways(row.site);\n                }\n              } catch (err) {\n                // If restore fails for any reason, fall back to re-adding the site.\n                // This preserves the intended user outcome even if timestamps change.\n                console.warn(\n                  'Undo revoke failed; falling back to allowSiteAlways.',\n                  err\n                );\n                await allowSiteAlways(row.site);\n              }\n              await refresh();\n              focusSiteRow(row.site);\n            },\n          });\n        }\n      })();\n    });\n\n    container.appendChild(item);\n  }\n};\n\nconst refresh = async (): Promise<void> => {\n  const allowlist = await getAllowlistedSites();\n  const rows: Row[] = Object.entries(allowlist).map(([site, entry]) => ({\n    site,\n    createdAt: entry.createdAt,\n    lastUsedAt: entry.lastUsedAt,\n  }));\n\n  rows.sort((a, b) => b.lastUsedAt.localeCompare(a.lastUsedAt));\n  render(rows);\n};\n\nconst setMode = async (mode: SitePermissionsMode): Promise<void> => {\n  if (modeWriteInProgress) {\n    return;\n  }\n\n  modeWriteInProgress = true;\n  try {\n    await writeSitePermissionsMode(mode);\n    applyMode(mode);\n    await refresh();\n  } finally {\n    modeWriteInProgress = false;\n  }\n};\n\nconst setDebuggerCapability = async (enabled: boolean): Promise<void> => {\n  pendingDebuggerCapability = enabled;\n  applyDebuggerCapability(enabled);\n  if (debuggerWriteInProgress) {\n    return;\n  }\n  debuggerWriteInProgress = true;\n  try {\n    while (pendingDebuggerCapability !== null) {\n      const next = pendingDebuggerCapability;\n      pendingDebuggerCapability = null;\n      await writeDebuggerCapabilityEnabled(next);\n      await new Promise<void>((resolve) => {\n        chrome.runtime.sendMessage(\n          { action: 'drive.refresh_capabilities' },\n          () => resolve()\n        );\n      });\n    }\n  } catch {\n    applyDebuggerCapability(DEFAULT_DEBUGGER_CAPABILITY_ENABLED);\n  } finally {\n    debuggerWriteInProgress = false;\n    await refreshDebuggerCapability();\n  }\n};\n\nconst refreshAll = async (): Promise<void> => {\n  // Mode impacts how we want to render the empty state, so apply it first.\n  await refreshMode();\n  await refreshDebuggerCapability();\n  await refresh();\n};\n\nconst main = (): void => {\n  void (async () => {\n    await applyActivationQueryParams();\n    await refreshAll();\n  })();\n\n  const { granular, bypass } = getModeEls();\n  const { enabled } = getDebuggerEls();\n  granular.addEventListener('change', () => {\n    if (!granular.checked) {\n      return;\n    }\n    void setMode('granular');\n  });\n  bypass.addEventListener('change', () => {\n    if (!bypass.checked) {\n      return;\n    }\n    void setMode('bypass');\n  });\n  enabled.addEventListener('change', () => {\n    void setDebuggerCapability(enabled.checked);\n  });\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (chrome as any).storage?.onChanged?.addListener?.(() => {\n    void refreshAll();\n  });\n};\n\nmain();\n"],
-  "mappings": ";;;AAAO,MAAM,qBAAqB;AAG3B,MAAM,4BAA4B;AAClC,MAAM,kCAAkC;AAGxC,MAAM,gCAAqD;AAC3D,MAAM,sCAAsC;AAgCnD,MAAM,mBAAmB,CAAC,UAAgD;AACxE,QAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,aAAO;AAAA,IACT;AACA,UAAM,IAAI;AACV,WAAO,OAAO,EAAE,cAAc,YAAY,OAAO,EAAE,eAAe;AAAA,EACpE;AAEA,MAAM,mBAAmB,CAAC,YAA4B,QAAQ,YAAY;AAE1E,MAAM,mBAAmB,YAAoC;AAC3D,WAAO,MAAM,IAAI,QAAuB,CAAC,YAAY;AACnD,aAAO,QAAQ,MAAM;AAAA,QACnB,CAAC,kBAAkB;AAAA,QACnB,CAAC,WAAoC;AACnC,gBAAM,MAAM,SAAS,kBAAkB;AACvC,cAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,oBAAQ,CAAC,CAAC;AACV;AAAA,UACF;AAEA,gBAAM,MAAqB,CAAC;AAC5B,qBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAA8B,GAAG;AACnE,gBAAI,OAAO,MAAM,UAAU;AACzB;AAAA,YACF;AACA,gBAAI,CAAC,iBAAiB,CAAC,GAAG;AACxB;AAAA,YACF;AACA,gBAAI,iBAAiB,CAAC,CAAC,IAAI;AAAA,UAC7B;AAEA,kBAAQ,GAAG;AAAA,QACb;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAM,oBAAoB,OAAO,cAA4C;AAC3E,WAAO,MAAM,IAAI,QAAc,CAAC,YAAY;AAC1C,aAAO,QAAQ,MAAM;AAAA,QAAI,EAAE,CAAC,kBAAkB,GAAG,UAAU;AAAA,QAAG,MAC5D,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAEO,MAAM,0BACX,YAA0C;AACxC,WAAO,MAAM,IAAI,QAA6B,CAAC,YAAY;AACzD,aAAO,QAAQ,MAAM;AAAA,QACnB,CAAC,yBAAyB;AAAA,QAC1B,CAAC,WAAoC;AACnC,gBAAM,MAAM,SAAS,yBAAyB;AAC9C,cAAI,QAAQ,cAAc,QAAQ,UAAU;AAC1C,oBAAQ,GAAG;AACX;AAAA,UACF;AAKA,cAAI;AACF,mBAAO,QAAQ,MAAM,IAAI;AAAA,cACvB,CAAC,yBAAyB,GAAG;AAAA,YAC/B,CAAC;AAAA,UACH,QAAQ;AAAA,UAER;AACA,kBAAQ,6BAA6B;AAAA,QACvC;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEK,MAAM,2BAA2B,OACtC,SACkB;AAClB,WAAO,MAAM,IAAI,QAAc,CAAC,YAAY;AAC1C,aAAO,QAAQ,MAAM;AAAA,QAAI,EAAE,CAAC,yBAAyB,GAAG,KAAK;AAAA,QAAG,MAC9D,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AA0BO,MAAM,gCAAgC,YAA8B;AACzE,WAAO,MAAM,IAAI,QAAiB,CAAC,YAAY;AAC7C,aAAO,QAAQ,MAAM;AAAA,QACnB,CAAC,+BAA+B;AAAA,QAChC,CAAC,WAAoC;AACnC,gBAAM,MAAM,SAAS,+BAA+B;AACpD,cAAI,OAAO,QAAQ,WAAW;AAC5B,oBAAQ,GAAG;AACX;AAAA,UACF;AAIA,cAAI;AACF,mBAAO,QAAQ,MAAM,IAAI;AAAA,cACvB,CAAC,+BAA+B,GAC9B;AAAA,YACJ,CAAC;AAAA,UACH,QAAQ;AAAA,UAER;AACA,kBAAQ,mCAAmC;AAAA,QAC7C;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEO,MAAM,iCAAiC,OAC5C,YACkB;AAClB,WAAO,MAAM,IAAI,QAAc,CAAC,YAAY;AAC1C,aAAO,QAAQ,MAAM;AAAA,QACnB,EAAE,CAAC,+BAA+B,GAAG,QAAQ,OAAO,EAAE;AAAA,QACtD,MAAM,QAAQ;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH;AAEO,MAAM,sBAAsB,YAAoC;AACrE,WAAO,MAAM,iBAAiB;AAAA,EAChC;AAQO,MAAM,kBAAkB,OAC7B,SACA,MAAY,oBAAI,KAAK,MACH;AAClB,UAAM,MAAM,iBAAiB,OAAO;AACpC,UAAM,YAAY,MAAM,iBAAiB;AACzC,UAAM,SAAS,IAAI,YAAY;AAE/B,UAAM,WAAW,UAAU,GAAG;AAC9B,cAAU,GAAG,IAAI;AAAA,MACf,WAAW,UAAU,aAAa;AAAA,MAClC,YAAY;AAAA,IACd;AAEA,UAAM,kBAAkB,SAAS;AAAA,EACnC;AAEO,MAAM,yBAAyB,OACpC,YACkB;AAClB,UAAM,YAAY,MAAM,iBAAiB;AACzC,QAAI,UAAU;AAEd,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,WAAW,CAAC,CAAC,GAAG;AAClD,UAAI,OAAO,MAAM,UAAU;AACzB;AAAA,MACF;AACA,UAAI,CAAC,iBAAiB,CAAC,GAAG;AACxB;AAAA,MACF;AACA,gBAAU,iBAAiB,CAAC,CAAC,IAAI;AACjC,gBAAU;AAAA,IACZ;AAEA,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AAEA,UAAM,kBAAkB,SAAS;AAAA,EACnC;AAiBO,MAAM,aAAa,OAAO,YAAmC;AAClE,UAAM,MAAM,iBAAiB,OAAO;AACpC,UAAM,YAAY,MAAM,iBAAiB;AACzC,QAAI,CAAC,UAAU,GAAG,GAAG;AACnB;AAAA,IACF;AACA,WAAO,UAAU,GAAG;AACpB,UAAM,kBAAkB,SAAS;AAAA,EACnC;;;ACrOA,MAAM,wBAAwB;AAC9B,MAAM,wBAAwB;AAE9B,MAAM,OAAO,CAAC,OAA4B;AACxC,UAAM,KAAK,SAAS,eAAe,EAAE;AACrC,QAAI,CAAC,IAAI;AACP,YAAM,IAAI,MAAM,oBAAoB,EAAE,EAAE;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AAEA,MAAM,aAAa,CAAC,SAA8B;AAChD,UAAM,MAAM,SAAS,cAAc,UAAU;AAC7C,QAAI,YAAY,KAAK,KAAK;AAC1B,UAAM,OAAO,IAAI,QAAQ;AACzB,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AAEA,MAAM,aAAa,CAAC,QAAwB;AAC1C,UAAM,IAAI,IAAI,KAAK,GAAG;AACtB,QAAI,CAAC,OAAO,SAAS,EAAE,QAAQ,CAAC,GAAG;AACjC,aAAO;AAAA,IACT;AACA,QAAI;AACF,aAAO,IAAI,KAAK,eAAe,QAAW;AAAA,QACxC,MAAM;AAAA,QACN,OAAO;AAAA,QACP,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,MACV,CAAC,EAAE,OAAO,CAAC;AAAA,IACb,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,MAAM,sBAAsB,CAAC,UAAwC;AACnE,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AACA,UAAM,SAAS,OAAO,SAAS,OAAO,EAAE;AACxC,QAAI,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,GAAG;AAC3C,aAAO;AAAA,IACT;AACA,WAAO,KAAK,MAAM,MAAM;AAAA,EAC1B;AAEA,MAAM,6BAA6B,MAAY;AAC7C,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,QAAI,CAAC,IAAI,QAAQ;AACf;AAAA,IACF;AACA,QAAI,SAAS;AACb,WAAO,QAAQ;AAAA,MACb;AAAA,MACA,SAAS;AAAA,MACT,GAAG,IAAI,QAAQ,GAAG,IAAI,IAAI;AAAA,IAC5B;AAAA,EACF;AAEA,MAAM,gBAAgB,OAAO,aAAoC;AAC/D,UAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,aAAO,QAAQ,MAAM,IAAI,EAAE,SAAS,GAAG,MAAM;AAC3C,cAAM,QAAQ,OAAO,QAAQ;AAC7B,YAAI,OAAO;AACT,iBAAO,IAAI,MAAM,MAAM,OAAO,CAAC;AAC/B;AAAA,QACF;AACA,gBAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAEA,MAAM,6BAA6B,YAA2B;AAC5D,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,UAAM,SAAS,IAAI;AACnB,QAAI,OAAO,IAAI,qBAAqB,MAAM,KAAK;AAC7C;AAAA,IACF;AAEA,UAAM,WAAW,oBAAoB,OAAO,IAAI,qBAAqB,CAAC;AACtE,QAAI;AACF,UAAI,aAAa,MAAM;AACrB,cAAM,cAAc,QAAQ;AAAA,MAC9B,OAAO;AACL,gBAAQ,KAAK,wDAAwD;AAAA,MACvE;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,4CAA4C,KAAK;AAAA,IAChE,UAAE;AACA,iCAA2B;AAAA,IAC7B;AAAA,EACF;AAEA,MAAM,cAAc,MAEf;AACH,UAAM,OAAO,SAAS,cAAc,KAAK;AACzC,SAAK,YAAY;AACjB,aAAS,KAAK,YAAY,IAAI;AAE9B,QAAI,cAA+D;AAEnE,UAAM,QAAQ,MAAY;AACxB,UAAI,gBAAgB,MAAM;AACxB,mBAAW,aAAa,WAAW;AACnC,sBAAc;AAAA,MAChB;AACA,WAAK,YAAY;AAAA,IACnB;AAEA,WAAO;AAAA,MACL,UAAU,CAAC,EAAE,SAAS,OAAO,MAAY;AACvC,cAAM;AAEN,cAAMA,SAAQ,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,OAKxB;AACD,cAAM,QAAQA,OAAM,cAAc,eAAe;AACjD,cAAM,UAAUA,OAAM,cAAc,QAAQ;AAC5C,YAAI,CAAC,SAAS,CAAC,SAAS;AACtB,gBAAM,IAAI,MAAM,kCAAkC;AAAA,QACpD;AAEA,cAAM,cAAc;AACpB,gBAAQ,iBAAiB,SAAS,MAAM;AACtC,kBAAQ,WAAW;AACnB,gBAAM,YAAY;AAChB,gBAAI;AACF,oBAAM,OAAO;AAAA,YACf,UAAE;AACA,oBAAM;AAAA,YACR;AAAA,UACF,GAAG;AAAA,QACL,CAAC;AAED,aAAK,YAAYA,MAAK;AACtB,sBAAc,WAAW,WAAW,MAAM,MAAM,GAAG,GAAI;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AAEA,MAAM,QAAQ,YAAY;AAE1B,MAAM,aAAa,MAAe;AAChC,UAAM,WAAW,KAAK,kBAAkB;AACxC,UAAM,SAAS,KAAK,gBAAgB;AACpC,UAAM,eAAe,KAAK,kBAAkB;AAC5C,UAAM,eAAe,KAAK,kBAAkB;AAE5C,QAAI,SAAS,SAAS,WAAW,OAAO,SAAS,SAAS;AACxD,YAAM,IAAI,MAAM,6CAA6C;AAAA,IAC/D;AACA,QAAI,aAAa,QAAQ,YAAY,MAAM,WAAW;AACpD,YAAM,IAAI,MAAM,gDAAgD;AAAA,IAClE;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAM,iBAAiB,MAAmB;AACxC,UAAM,UAAU,KAAK,qBAAqB;AAC1C,UAAM,SAAS,KAAK,oBAAoB;AACxC,QAAI,QAAQ,SAAS,YAAY;AAC/B,YAAM,IAAI,MAAM,kDAAkD;AAAA,IACpE;AACA,WAAO,EAAE,SAAS,OAAO;AAAA,EAC3B;AAEA,MAAI,WAAuC;AAC3C,MAAI,sBAAsB;AAC1B,MAAI,0BAA0B;AAC9B,MAAI,4BAA4C;AAEhD,MAAM,YAAY,CAAC,SAAoC;AACrD,UAAM,MAAM,WAAW;AACvB,QAAI,SAAS,UAAU,SAAS;AAChC,QAAI,OAAO,UAAU,SAAS;AAG9B,QAAI,aAAa,cAAc;AAC/B,QAAI,SAAS,UAAU;AACrB,UAAI,aAAa,UAAU;AACzB,YAAI,aAAa,OAAO;AAAA,MAC1B;AAAA,IACF,WAAW,aAAa,YAAY;AAClC,UAAI,aAAa,OAAO;AAAA,IAC1B;AAEA,eAAW;AAAA,EACb;AAEA,MAAM,cAAc,YAA2B;AAC7C,cAAU,MAAM,wBAAwB,CAAC;AAAA,EAC3C;AAEA,MAAM,0BAA0B,CAAC,YAA2B;AAC1D,UAAM,MAAM,eAAe;AAC3B,QAAI,QAAQ,UAAU;AACtB,QAAI,OAAO,cAAc,UACrB,mEACA;AAAA,EACN;AAEA,MAAM,4BAA4B,YAA2B;AAC3D,4BAAwB,MAAM,8BAA8B,CAAC;AAAA,EAC/D;AAEA,MAAM,eAAe,CAAC,SAAuB;AAC3C,UAAM,YAAY,KAAK,UAAU;AACjC,UAAM,OAAO,MAAM,KAAK,UAAU,iBAAiB,cAAc,CAAC;AAClE,eAAW,SAAS,MAAM;AACxB,YAAM,KAAK;AACX,UAAI,GAAG,QAAQ,SAAS,MAAM;AAC5B;AAAA,MACF;AAEA,UAAI;AACF,WAAG,eAAe,EAAE,OAAO,UAAU,CAAC;AAAA,MACxC,QAAQ;AAAA,MAER;AAEA,YAAM,MAAM,GAAG,cAAc,QAAQ;AACrC,WAAK,MAAM;AACX;AAAA,IACF;AAAA,EACF;AAEA,MAAM,SAAS,CAAC,SAAsB;AACpC,UAAM,YAAY,KAAK,UAAU;AACjC,cAAU,YAAY;AACtB,cAAU,SAAS;AAEnB,QAAI,KAAK,WAAW,GAAG;AACrB,YAAM,QAAQ,SAAS,cAAc,KAAK;AAC1C,YAAM,YAAY;AAElB,YAAM,QAAQ,SAAS,cAAc,KAAK;AAC1C,YAAM,QAAQ,SAAS,cAAc,QAAQ;AAC7C,YAAM,cAAc;AACpB,YAAM,YAAY,KAAK;AACvB,YAAM,YAAY,KAAK;AAEvB,YAAM,QAAQ,SAAS,cAAc,KAAK;AAC1C,YAAM,cACJ;AACF,YAAM,YAAY,KAAK;AACvB,gBAAU,YAAY,KAAK;AAC3B;AAAA,IACF;AAEA,eAAW,OAAO,MAAM;AACtB,YAAM,OAAO,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAUvB;AACD,MAAC,KAAqB,QAAQ,OAAO,IAAI;AAEzC,YAAM,MAAM,KAAK,cAAc,cAAc;AAC7C,YAAM,OAAO,KAAK,cAAc,eAAe;AAC/C,YAAM,YAAY,KAAK,cAAc,QAAQ;AAC7C,UAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW;AAC/B,cAAM,IAAI,MAAM,qCAAqC;AAAA,MACvD;AAEA,UAAI,cAAc,IAAI;AACtB,WAAK,cAAc,cAAc,WAAW,IAAI,UAAU,CAAC;AAC3D,WAAK,QAAQ,aAAa;AAAA,QACxB,IAAI;AAAA,MACN,CAAC;AAAA,aAAgB,WAAW,IAAI,UAAU,CAAC;AAE3C,gBAAU,iBAAiB,SAAS,MAAM;AACxC,kBAAU,WAAW;AACrB,cAAM,YAAY;AAChB,gBAAM,SAAS,MAAM,oBAAoB;AACzC,gBAAM,QAAQ,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,YAAY,CAAC;AAE/D,cAAI;AACF,kBAAM,WAAW,IAAI,IAAI;AAAA,UAC3B,UAAE;AACA,kBAAM,QAAQ;AACd,sBAAU,WAAW;AAAA,UACvB;AAEA,cAAI,OAAO;AACT,kBAAM,SAAS;AAAA,cACb,SAAS,WAAW,IAAI,IAAI;AAAA,cAC5B,QAAQ,YAAY;AAClB,oBAAI;AACF,wBAAM,uBAAuB,EAAE,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC;AAClD,wBAAM,QAAQ,MAAM,oBAAoB;AACxC,sBAAI,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,YAAY,CAAC,GAAG;AACtD,0BAAM,gBAAgB,IAAI,IAAI;AAAA,kBAChC;AAAA,gBACF,SAAS,KAAK;AAGZ,0BAAQ;AAAA,oBACN;AAAA,oBACA;AAAA,kBACF;AACA,wBAAM,gBAAgB,IAAI,IAAI;AAAA,gBAChC;AACA,sBAAM,QAAQ;AACd,6BAAa,IAAI,IAAI;AAAA,cACvB;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,GAAG;AAAA,MACL,CAAC;AAED,gBAAU,YAAY,IAAI;AAAA,IAC5B;AAAA,EACF;AAEA,MAAM,UAAU,YAA2B;AACzC,UAAM,YAAY,MAAM,oBAAoB;AAC5C,UAAM,OAAc,OAAO,QAAQ,SAAS,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;AAAA,MACpE;AAAA,MACA,WAAW,MAAM;AAAA,MACjB,YAAY,MAAM;AAAA,IACpB,EAAE;AAEF,SAAK,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,cAAc,EAAE,UAAU,CAAC;AAC5D,WAAO,IAAI;AAAA,EACb;AAEA,MAAM,UAAU,OAAO,SAA6C;AAClE,QAAI,qBAAqB;AACvB;AAAA,IACF;AAEA,0BAAsB;AACtB,QAAI;AACF,YAAM,yBAAyB,IAAI;AACnC,gBAAU,IAAI;AACd,YAAM,QAAQ;AAAA,IAChB,UAAE;AACA,4BAAsB;AAAA,IACxB;AAAA,EACF;AAEA,MAAM,wBAAwB,OAAO,YAAoC;AACvE,gCAA4B;AAC5B,4BAAwB,OAAO;AAC/B,QAAI,yBAAyB;AAC3B;AAAA,IACF;AACA,8BAA0B;AAC1B,QAAI;AACF,aAAO,8BAA8B,MAAM;AACzC,cAAM,OAAO;AACb,oCAA4B;AAC5B,cAAM,+BAA+B,IAAI;AACzC,cAAM,IAAI,QAAc,CAAC,YAAY;AACnC,iBAAO,QAAQ;AAAA,YACb,EAAE,QAAQ,6BAA6B;AAAA,YACvC,MAAM,QAAQ;AAAA,UAChB;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AACN,8BAAwB,mCAAmC;AAAA,IAC7D,UAAE;AACA,gCAA0B;AAC1B,YAAM,0BAA0B;AAAA,IAClC;AAAA,EACF;AAEA,MAAM,aAAa,YAA2B;AAE5C,UAAM,YAAY;AAClB,UAAM,0BAA0B;AAChC,UAAM,QAAQ;AAAA,EAChB;AAEA,MAAM,OAAO,MAAY;AACvB,UAAM,YAAY;AAChB,YAAM,2BAA2B;AACjC,YAAM,WAAW;AAAA,IACnB,GAAG;AAEH,UAAM,EAAE,UAAU,OAAO,IAAI,WAAW;AACxC,UAAM,EAAE,QAAQ,IAAI,eAAe;AACnC,aAAS,iBAAiB,UAAU,MAAM;AACxC,UAAI,CAAC,SAAS,SAAS;AACrB;AAAA,MACF;AACA,WAAK,QAAQ,UAAU;AAAA,IACzB,CAAC;AACD,WAAO,iBAAiB,UAAU,MAAM;AACtC,UAAI,CAAC,OAAO,SAAS;AACnB;AAAA,MACF;AACA,WAAK,QAAQ,QAAQ;AAAA,IACvB,CAAC;AACD,YAAQ,iBAAiB,UAAU,MAAM;AACvC,WAAK,sBAAsB,QAAQ,OAAO;AAAA,IAC5C,CAAC;AAGD,IAAC,OAAe,SAAS,WAAW,cAAc,MAAM;AACtD,WAAK,WAAW;AAAA,IAClB,CAAC;AAAA,EACH;AAEA,OAAK;",
+  "sourcesContent": ["export const SITE_ALLOWLIST_KEY = 'siteAllowlist';\nexport const PERMISSION_PROMPT_WAIT_MS_KEY = 'permissionPromptWaitMs';\nexport const DEFAULT_PERMISSION_PROMPT_WAIT_MS = 30_000;\nexport const SITE_PERMISSIONS_MODE_KEY = 'sitePermissionsMode';\nexport const DEBUGGER_CAPABILITY_ENABLED_KEY = 'debuggerCapabilityEnabled';\n\nexport type SitePermissionsMode = 'granular' | 'bypass';\nexport const DEFAULT_SITE_PERMISSIONS_MODE: SitePermissionsMode = 'granular';\nexport const DEFAULT_DEBUGGER_CAPABILITY_ENABLED = true;\n\nexport type SiteAllowlistEntry = {\n  createdAt: string; // ISO\n  lastUsedAt: string; // ISO\n};\n\nexport type SiteAllowlist = Record<string, SiteAllowlistEntry>;\n\nexport const siteKeyFromUrl = (rawUrl: string): string | null => {\n  if (!rawUrl || typeof rawUrl !== 'string') {\n    return null;\n  }\n\n  try {\n    const parsed = new URL(rawUrl);\n    // Only gate \"real web\" pages for now.\n    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n      return null;\n    }\n\n    // URL.hostname is lowercased by the platform.\n    if (!parsed.hostname) {\n      return null;\n    }\n\n    return parsed.port ? `${parsed.hostname}:${parsed.port}` : parsed.hostname;\n  } catch {\n    return null;\n  }\n};\n\nconst isAllowlistEntry = (value: unknown): value is SiteAllowlistEntry => {\n  if (!value || typeof value !== 'object') {\n    return false;\n  }\n  const v = value as Record<string, unknown>;\n  return typeof v.createdAt === 'string' && typeof v.lastUsedAt === 'string';\n};\n\nconst normalizeSiteKey = (siteKey: string): string => siteKey.toLowerCase();\n\nconst readAllowlistRaw = async (): Promise<SiteAllowlist> => {\n  return await new Promise<SiteAllowlist>((resolve) => {\n    chrome.storage.local.get(\n      [SITE_ALLOWLIST_KEY],\n      (result: Record<string, unknown>) => {\n        const raw = result?.[SITE_ALLOWLIST_KEY];\n        if (!raw || typeof raw !== 'object') {\n          resolve({});\n          return;\n        }\n\n        const out: SiteAllowlist = {};\n        for (const [k, v] of Object.entries(raw as Record<string, unknown>)) {\n          if (typeof k !== 'string') {\n            continue;\n          }\n          if (!isAllowlistEntry(v)) {\n            continue;\n          }\n          out[normalizeSiteKey(k)] = v;\n        }\n\n        resolve(out);\n      }\n    );\n  });\n};\n\nconst writeAllowlistRaw = async (allowlist: SiteAllowlist): Promise<void> => {\n  return await new Promise<void>((resolve) => {\n    chrome.storage.local.set({ [SITE_ALLOWLIST_KEY]: allowlist }, () =>\n      resolve()\n    );\n  });\n};\n\nexport const readSitePermissionsMode =\n  async (): Promise<SitePermissionsMode> => {\n    return await new Promise<SitePermissionsMode>((resolve) => {\n      chrome.storage.local.get(\n        [SITE_PERMISSIONS_MODE_KEY],\n        (result: Record<string, unknown>) => {\n          const raw = result?.[SITE_PERMISSIONS_MODE_KEY];\n          if (raw === 'granular' || raw === 'bypass') {\n            resolve(raw);\n            return;\n          }\n\n          // Self-heal legacy/invalid storage to a safe default, so UIs never\n          // render with \"no mode selected\" and other callers don't have to\n          // special-case missing values.\n          try {\n            chrome.storage.local.set({\n              [SITE_PERMISSIONS_MODE_KEY]: DEFAULT_SITE_PERMISSIONS_MODE,\n            });\n          } catch {\n            // ignore\n          }\n          resolve(DEFAULT_SITE_PERMISSIONS_MODE);\n        }\n      );\n    });\n  };\n\nexport const writeSitePermissionsMode = async (\n  mode: SitePermissionsMode\n): Promise<void> => {\n  return await new Promise<void>((resolve) => {\n    chrome.storage.local.set({ [SITE_PERMISSIONS_MODE_KEY]: mode }, () =>\n      resolve()\n    );\n  });\n};\n\nexport const readPermissionPromptWaitMs = async (): Promise<number> => {\n  return await new Promise<number>((resolve) => {\n    chrome.storage.local.get(\n      [PERMISSION_PROMPT_WAIT_MS_KEY],\n      (result: Record<string, unknown>) => {\n        const raw = result?.[PERMISSION_PROMPT_WAIT_MS_KEY];\n        if (typeof raw === 'number' && Number.isFinite(raw) && raw > 0) {\n          resolve(raw);\n          return;\n        }\n        if (typeof raw === 'string') {\n          const parsed = Number(raw);\n          if (Number.isFinite(parsed) && parsed > 0) {\n            resolve(parsed);\n            return;\n          }\n        }\n\n        resolve(DEFAULT_PERMISSION_PROMPT_WAIT_MS);\n      }\n    );\n  });\n};\n\nexport const readDebuggerCapabilityEnabled = async (): Promise<boolean> => {\n  return await new Promise<boolean>((resolve) => {\n    chrome.storage.local.get(\n      [DEBUGGER_CAPABILITY_ENABLED_KEY],\n      (result: Record<string, unknown>) => {\n        const raw = result?.[DEBUGGER_CAPABILITY_ENABLED_KEY];\n        if (raw === true) {\n          resolve(true);\n          return;\n        }\n\n        // Inspect is always enabled now; self-heal any legacy false/missing\n        // values so older installs stop carrying the dead toggle around.\n        try {\n          chrome.storage.local.set({\n            [DEBUGGER_CAPABILITY_ENABLED_KEY]:\n              DEFAULT_DEBUGGER_CAPABILITY_ENABLED,\n          });\n        } catch {\n          // ignore\n        }\n        resolve(DEFAULT_DEBUGGER_CAPABILITY_ENABLED);\n      }\n    );\n  });\n};\n\nexport const writeDebuggerCapabilityEnabled = async (\n  enabled: boolean\n): Promise<void> => {\n  void enabled;\n  return await new Promise<void>((resolve) => {\n    chrome.storage.local.set({ [DEBUGGER_CAPABILITY_ENABLED_KEY]: true }, () =>\n      resolve()\n    );\n  });\n};\n\nexport const getAllowlistedSites = async (): Promise<SiteAllowlist> => {\n  return await readAllowlistRaw();\n};\n\nexport const isSiteAllowed = async (siteKey: string): Promise<boolean> => {\n  const key = normalizeSiteKey(siteKey);\n  const allowlist = await readAllowlistRaw();\n  return Boolean(allowlist[key]);\n};\n\nexport const allowSiteAlways = async (\n  siteKey: string,\n  now: Date = new Date()\n): Promise<void> => {\n  const key = normalizeSiteKey(siteKey);\n  const allowlist = await readAllowlistRaw();\n  const nowIso = now.toISOString();\n\n  const existing = allowlist[key];\n  allowlist[key] = {\n    createdAt: existing?.createdAt ?? nowIso,\n    lastUsedAt: nowIso,\n  };\n\n  await writeAllowlistRaw(allowlist);\n};\n\nexport const upsertAllowlistedSites = async (\n  entries: SiteAllowlist\n): Promise<void> => {\n  const allowlist = await readAllowlistRaw();\n  let changed = false;\n\n  for (const [k, v] of Object.entries(entries ?? {})) {\n    if (typeof k !== 'string') {\n      continue;\n    }\n    if (!isAllowlistEntry(v)) {\n      continue;\n    }\n    allowlist[normalizeSiteKey(k)] = v;\n    changed = true;\n  }\n\n  if (!changed) {\n    return;\n  }\n\n  await writeAllowlistRaw(allowlist);\n};\n\nexport const touchSiteLastUsed = async (\n  siteKey: string,\n  now: Date = new Date()\n): Promise<void> => {\n  const key = normalizeSiteKey(siteKey);\n  const allowlist = await readAllowlistRaw();\n  const existing = allowlist[key];\n  if (!existing) {\n    return;\n  }\n\n  allowlist[key] = { ...existing, lastUsedAt: now.toISOString() };\n  await writeAllowlistRaw(allowlist);\n};\n\nexport const revokeSite = async (siteKey: string): Promise<void> => {\n  const key = normalizeSiteKey(siteKey);\n  const allowlist = await readAllowlistRaw();\n  if (!allowlist[key]) {\n    return;\n  }\n  delete allowlist[key];\n  await writeAllowlistRaw(allowlist);\n};\n", "import {\n  allowSiteAlways,\n  getAllowlistedSites,\n  readSitePermissionsMode,\n  revokeSite,\n  type SitePermissionsMode,\n  upsertAllowlistedSites,\n  writeSitePermissionsMode,\n} from './site-permissions.js';\n\ntype Row = {\n  site: string;\n  createdAt: string;\n  lastUsedAt: string;\n};\n\ntype ModeEls = {\n  granular: HTMLInputElement;\n  bypass: HTMLInputElement;\n  sitesDetails: HTMLDetailsElement;\n  sitesSummary: HTMLElement;\n};\n\nconst ENABLE_INSPECT_FLAG_PARAM = 'bb_enable_inspect';\n\nconst byId = (id: string): HTMLElement => {\n  const el = document.getElementById(id);\n  if (!el) {\n    throw new Error(`Missing element: ${id}`);\n  }\n  return el;\n};\n\nconst elFromHtml = (html: string): HTMLElement => {\n  const tpl = document.createElement('template');\n  tpl.innerHTML = html.trim();\n  const node = tpl.content.firstElementChild;\n  if (!node) {\n    throw new Error('Expected element from template.');\n  }\n  return node as HTMLElement;\n};\n\nconst formatTime = (iso: string): string => {\n  const d = new Date(iso);\n  if (!Number.isFinite(d.getTime())) {\n    return iso;\n  }\n  try {\n    return new Intl.DateTimeFormat(undefined, {\n      year: 'numeric',\n      month: 'numeric',\n      day: 'numeric',\n      hour: 'numeric',\n      minute: '2-digit',\n    }).format(d);\n  } catch {\n    return iso;\n  }\n};\n\nconst clearActivationQueryParams = (): void => {\n  const url = new URL(window.location.href);\n  if (!url.search) {\n    return;\n  }\n  url.search = '';\n  window.history.replaceState(\n    null,\n    document.title,\n    `${url.pathname}${url.hash}`\n  );\n};\n\nconst applyActivationQueryParams = async (): Promise<void> => {\n  const url = new URL(window.location.href);\n  const params = url.searchParams;\n  if (params.get(ENABLE_INSPECT_FLAG_PARAM) !== '1') {\n    return;\n  }\n\n  try {\n    // Compatibility only. Older callers may still open this URL with the\n    // legacy inspect-enablement param even though inspect is always enabled.\n  } finally {\n    clearActivationQueryParams();\n  }\n};\n\nconst createToast = (): {\n  showUndo: (opts: { message: string; onUndo: () => Promise<void> }) => void;\n} => {\n  const wrap = document.createElement('div');\n  wrap.className = 'bb-toast-wrap';\n  document.body.appendChild(wrap);\n\n  let activeTimer: ReturnType<typeof globalThis.setTimeout> | null = null;\n\n  const clear = (): void => {\n    if (activeTimer !== null) {\n      globalThis.clearTimeout(activeTimer);\n      activeTimer = null;\n    }\n    wrap.innerHTML = '';\n  };\n\n  return {\n    showUndo: ({ message, onUndo }): void => {\n      clear();\n\n      const toast = elFromHtml(`\n        <div class=\"bb-toast\" role=\"status\" aria-live=\"polite\">\n          <div class=\"bb-toast-msg\"></div>\n          <button class=\"bb-link-button\" type=\"button\">Undo</button>\n        </div>\n      `);\n      const msgEl = toast.querySelector('.bb-toast-msg') as HTMLElement | null;\n      const undoBtn = toast.querySelector('button') as HTMLButtonElement | null;\n      if (!msgEl || !undoBtn) {\n        throw new Error('Toast missing required elements.');\n      }\n\n      msgEl.textContent = message;\n      undoBtn.addEventListener('click', () => {\n        undoBtn.disabled = true;\n        void (async () => {\n          try {\n            await onUndo();\n          } finally {\n            clear();\n          }\n        })();\n      });\n\n      wrap.appendChild(toast);\n      activeTimer = globalThis.setTimeout(() => clear(), 6000);\n    },\n  };\n};\n\nconst toast = createToast();\n\nconst getModeEls = (): ModeEls => {\n  const granular = byId('bb-mode-granular') as HTMLInputElement;\n  const bypass = byId('bb-mode-bypass') as HTMLInputElement;\n  const sitesDetails = byId('bb-sites-details') as HTMLDetailsElement;\n  const sitesSummary = byId('bb-sites-summary');\n\n  if (granular.type !== 'radio' || bypass.type !== 'radio') {\n    throw new Error('Expected radio inputs for permissions mode.');\n  }\n  if (sitesDetails.tagName.toLowerCase() !== 'details') {\n    throw new Error('Expected a <details> for the sites disclosure.');\n  }\n\n  return {\n    granular,\n    bypass,\n    sitesDetails,\n    sitesSummary,\n  };\n};\n\nlet lastMode: SitePermissionsMode | null = null;\nlet modeWriteInProgress = false;\n\nconst applyMode = (mode: SitePermissionsMode): void => {\n  const els = getModeEls();\n  els.granular.checked = mode === 'granular';\n  els.bypass.checked = mode === 'bypass';\n\n  // Always show the disclosure + allowlist UI in both modes.\n  els.sitesSummary.textContent = 'Approved sites';\n  if (mode === 'bypass') {\n    if (lastMode !== 'bypass') {\n      els.sitesDetails.open = false;\n    }\n  } else if (lastMode !== 'granular') {\n    els.sitesDetails.open = true;\n  }\n\n  lastMode = mode;\n};\n\nconst refreshMode = async (): Promise<void> => {\n  applyMode(await readSitePermissionsMode());\n};\n\nconst focusSiteRow = (site: string): void => {\n  const container = byId('bb-sites');\n  const rows = Array.from(container.querySelectorAll('.bb-site-row'));\n  for (const rowEl of rows) {\n    const el = rowEl as HTMLElement;\n    if (el.dataset.site !== site) {\n      continue;\n    }\n\n    try {\n      el.scrollIntoView({ block: 'nearest' });\n    } catch {\n      // ignore\n    }\n\n    const btn = el.querySelector('button') as HTMLButtonElement | null;\n    btn?.focus();\n    return;\n  }\n};\n\nconst render = (rows: Row[]): void => {\n  const container = byId('bb-sites');\n  container.innerHTML = '';\n  container.hidden = false;\n\n  if (rows.length === 0) {\n    const empty = document.createElement('div');\n    empty.className = 'bb-site-empty';\n\n    const line1 = document.createElement('div');\n    const title = document.createElement('strong');\n    title.textContent = 'No approved sites yet.';\n    line1.appendChild(title);\n    empty.appendChild(line1);\n\n    const line2 = document.createElement('div');\n    line2.textContent =\n      'Sites show up here after you approve them in a permission prompt.';\n    empty.appendChild(line2);\n    container.appendChild(empty);\n    return;\n  }\n\n  for (const row of rows) {\n    const item = elFromHtml(`\n      <div class=\"bb-site-row\" role=\"listitem\">\n        <div class=\"bb-site-main\">\n            <div class=\"bb-site-key\"></div>\n            <div class=\"bb-site-meta\"></div>\n        </div>\n        <button class=\"bb-link-button bb-link-button-danger\" type=\"button\">\n          Revoke\n        </button>\n      </div>\n    `);\n    (item as HTMLElement).dataset.site = row.site;\n\n    const key = item.querySelector('.bb-site-key') as HTMLElement | null;\n    const meta = item.querySelector('.bb-site-meta') as HTMLElement | null;\n    const revokeBtn = item.querySelector('button') as HTMLButtonElement | null;\n    if (!key || !meta || !revokeBtn) {\n      throw new Error('List row missing required elements.');\n    }\n\n    key.textContent = row.site;\n    meta.textContent = `Last used: ${formatTime(row.lastUsedAt)}`;\n    meta.title = `Approved: ${formatTime(\n      row.createdAt\n    )}\\nLast used: ${formatTime(row.lastUsedAt)}`;\n\n    revokeBtn.addEventListener('click', () => {\n      revokeBtn.disabled = true;\n      void (async () => {\n        const before = await getAllowlistedSites();\n        const entry = before[row.site] ?? before[row.site.toLowerCase()];\n\n        try {\n          await revokeSite(row.site);\n        } finally {\n          await refresh();\n          revokeBtn.disabled = false;\n        }\n\n        if (entry) {\n          toast.showUndo({\n            message: `Revoked ${row.site}.`,\n            onUndo: async () => {\n              try {\n                await upsertAllowlistedSites({ [row.site]: entry });\n                const after = await getAllowlistedSites();\n                if (!after[row.site] && !after[row.site.toLowerCase()]) {\n                  await allowSiteAlways(row.site);\n                }\n              } catch (err) {\n                // If restore fails for any reason, fall back to re-adding the site.\n                // This preserves the intended user outcome even if timestamps change.\n                console.warn(\n                  'Undo revoke failed; falling back to allowSiteAlways.',\n                  err\n                );\n                await allowSiteAlways(row.site);\n              }\n              await refresh();\n              focusSiteRow(row.site);\n            },\n          });\n        }\n      })();\n    });\n\n    container.appendChild(item);\n  }\n};\n\nconst refresh = async (): Promise<void> => {\n  const allowlist = await getAllowlistedSites();\n  const rows: Row[] = Object.entries(allowlist).map(([site, entry]) => ({\n    site,\n    createdAt: entry.createdAt,\n    lastUsedAt: entry.lastUsedAt,\n  }));\n\n  rows.sort((a, b) => b.lastUsedAt.localeCompare(a.lastUsedAt));\n  render(rows);\n};\n\nconst setMode = async (mode: SitePermissionsMode): Promise<void> => {\n  if (modeWriteInProgress) {\n    return;\n  }\n\n  modeWriteInProgress = true;\n  try {\n    await writeSitePermissionsMode(mode);\n    applyMode(mode);\n    await refresh();\n  } finally {\n    modeWriteInProgress = false;\n  }\n};\n\nconst refreshAll = async (): Promise<void> => {\n  // Mode impacts how we want to render the empty state, so apply it first.\n  await refreshMode();\n  await refresh();\n};\n\nconst main = (): void => {\n  void (async () => {\n    await applyActivationQueryParams();\n    await refreshAll();\n  })();\n\n  const { granular, bypass } = getModeEls();\n  granular.addEventListener('change', () => {\n    if (!granular.checked) {\n      return;\n    }\n    void setMode('granular');\n  });\n  bypass.addEventListener('change', () => {\n    if (!bypass.checked) {\n      return;\n    }\n    void setMode('bypass');\n  });\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (chrome as any).storage?.onChanged?.addListener?.(() => {\n    void refreshAll();\n  });\n};\n\nmain();\n"],
+  "mappings": ";;;AAAO,MAAM,qBAAqB;AAG3B,MAAM,4BAA4B;AAIlC,MAAM,gCAAqD;AAiClE,MAAM,mBAAmB,CAAC,UAAgD;AACxE,QAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,aAAO;AAAA,IACT;AACA,UAAM,IAAI;AACV,WAAO,OAAO,EAAE,cAAc,YAAY,OAAO,EAAE,eAAe;AAAA,EACpE;AAEA,MAAM,mBAAmB,CAAC,YAA4B,QAAQ,YAAY;AAE1E,MAAM,mBAAmB,YAAoC;AAC3D,WAAO,MAAM,IAAI,QAAuB,CAAC,YAAY;AACnD,aAAO,QAAQ,MAAM;AAAA,QACnB,CAAC,kBAAkB;AAAA,QACnB,CAAC,WAAoC;AACnC,gBAAM,MAAM,SAAS,kBAAkB;AACvC,cAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AACnC,oBAAQ,CAAC,CAAC;AACV;AAAA,UACF;AAEA,gBAAM,MAAqB,CAAC;AAC5B,qBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAA8B,GAAG;AACnE,gBAAI,OAAO,MAAM,UAAU;AACzB;AAAA,YACF;AACA,gBAAI,CAAC,iBAAiB,CAAC,GAAG;AACxB;AAAA,YACF;AACA,gBAAI,iBAAiB,CAAC,CAAC,IAAI;AAAA,UAC7B;AAEA,kBAAQ,GAAG;AAAA,QACb;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAM,oBAAoB,OAAO,cAA4C;AAC3E,WAAO,MAAM,IAAI,QAAc,CAAC,YAAY;AAC1C,aAAO,QAAQ,MAAM;AAAA,QAAI,EAAE,CAAC,kBAAkB,GAAG,UAAU;AAAA,QAAG,MAC5D,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAEO,MAAM,0BACX,YAA0C;AACxC,WAAO,MAAM,IAAI,QAA6B,CAAC,YAAY;AACzD,aAAO,QAAQ,MAAM;AAAA,QACnB,CAAC,yBAAyB;AAAA,QAC1B,CAAC,WAAoC;AACnC,gBAAM,MAAM,SAAS,yBAAyB;AAC9C,cAAI,QAAQ,cAAc,QAAQ,UAAU;AAC1C,oBAAQ,GAAG;AACX;AAAA,UACF;AAKA,cAAI;AACF,mBAAO,QAAQ,MAAM,IAAI;AAAA,cACvB,CAAC,yBAAyB,GAAG;AAAA,YAC/B,CAAC;AAAA,UACH,QAAQ;AAAA,UAER;AACA,kBAAQ,6BAA6B;AAAA,QACvC;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEK,MAAM,2BAA2B,OACtC,SACkB;AAClB,WAAO,MAAM,IAAI,QAAc,CAAC,YAAY;AAC1C,aAAO,QAAQ,MAAM;AAAA,QAAI,EAAE,CAAC,yBAAyB,GAAG,KAAK;AAAA,QAAG,MAC9D,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAgEO,MAAM,sBAAsB,YAAoC;AACrE,WAAO,MAAM,iBAAiB;AAAA,EAChC;AAQO,MAAM,kBAAkB,OAC7B,SACA,MAAY,oBAAI,KAAK,MACH;AAClB,UAAM,MAAM,iBAAiB,OAAO;AACpC,UAAM,YAAY,MAAM,iBAAiB;AACzC,UAAM,SAAS,IAAI,YAAY;AAE/B,UAAM,WAAW,UAAU,GAAG;AAC9B,cAAU,GAAG,IAAI;AAAA,MACf,WAAW,UAAU,aAAa;AAAA,MAClC,YAAY;AAAA,IACd;AAEA,UAAM,kBAAkB,SAAS;AAAA,EACnC;AAEO,MAAM,yBAAyB,OACpC,YACkB;AAClB,UAAM,YAAY,MAAM,iBAAiB;AACzC,QAAI,UAAU;AAEd,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,WAAW,CAAC,CAAC,GAAG;AAClD,UAAI,OAAO,MAAM,UAAU;AACzB;AAAA,MACF;AACA,UAAI,CAAC,iBAAiB,CAAC,GAAG;AACxB;AAAA,MACF;AACA,gBAAU,iBAAiB,CAAC,CAAC,IAAI;AACjC,gBAAU;AAAA,IACZ;AAEA,QAAI,CAAC,SAAS;AACZ;AAAA,IACF;AAEA,UAAM,kBAAkB,SAAS;AAAA,EACnC;AAiBO,MAAM,aAAa,OAAO,YAAmC;AAClE,UAAM,MAAM,iBAAiB,OAAO;AACpC,UAAM,YAAY,MAAM,iBAAiB;AACzC,QAAI,CAAC,UAAU,GAAG,GAAG;AACnB;AAAA,IACF;AACA,WAAO,UAAU,GAAG;AACpB,UAAM,kBAAkB,SAAS;AAAA,EACnC;;;AC7OA,MAAM,4BAA4B;AAElC,MAAM,OAAO,CAAC,OAA4B;AACxC,UAAM,KAAK,SAAS,eAAe,EAAE;AACrC,QAAI,CAAC,IAAI;AACP,YAAM,IAAI,MAAM,oBAAoB,EAAE,EAAE;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AAEA,MAAM,aAAa,CAAC,SAA8B;AAChD,UAAM,MAAM,SAAS,cAAc,UAAU;AAC7C,QAAI,YAAY,KAAK,KAAK;AAC1B,UAAM,OAAO,IAAI,QAAQ;AACzB,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AAEA,MAAM,aAAa,CAAC,QAAwB;AAC1C,UAAM,IAAI,IAAI,KAAK,GAAG;AACtB,QAAI,CAAC,OAAO,SAAS,EAAE,QAAQ,CAAC,GAAG;AACjC,aAAO;AAAA,IACT;AACA,QAAI;AACF,aAAO,IAAI,KAAK,eAAe,QAAW;AAAA,QACxC,MAAM;AAAA,QACN,OAAO;AAAA,QACP,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,MACV,CAAC,EAAE,OAAO,CAAC;AAAA,IACb,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,MAAM,6BAA6B,MAAY;AAC7C,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,QAAI,CAAC,IAAI,QAAQ;AACf;AAAA,IACF;AACA,QAAI,SAAS;AACb,WAAO,QAAQ;AAAA,MACb;AAAA,MACA,SAAS;AAAA,MACT,GAAG,IAAI,QAAQ,GAAG,IAAI,IAAI;AAAA,IAC5B;AAAA,EACF;AAEA,MAAM,6BAA6B,YAA2B;AAC5D,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,UAAM,SAAS,IAAI;AACnB,QAAI,OAAO,IAAI,yBAAyB,MAAM,KAAK;AACjD;AAAA,IACF;AAEA,QAAI;AAAA,IAGJ,UAAE;AACA,iCAA2B;AAAA,IAC7B;AAAA,EACF;AAEA,MAAM,cAAc,MAEf;AACH,UAAM,OAAO,SAAS,cAAc,KAAK;AACzC,SAAK,YAAY;AACjB,aAAS,KAAK,YAAY,IAAI;AAE9B,QAAI,cAA+D;AAEnE,UAAM,QAAQ,MAAY;AACxB,UAAI,gBAAgB,MAAM;AACxB,mBAAW,aAAa,WAAW;AACnC,sBAAc;AAAA,MAChB;AACA,WAAK,YAAY;AAAA,IACnB;AAEA,WAAO;AAAA,MACL,UAAU,CAAC,EAAE,SAAS,OAAO,MAAY;AACvC,cAAM;AAEN,cAAMA,SAAQ,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,OAKxB;AACD,cAAM,QAAQA,OAAM,cAAc,eAAe;AACjD,cAAM,UAAUA,OAAM,cAAc,QAAQ;AAC5C,YAAI,CAAC,SAAS,CAAC,SAAS;AACtB,gBAAM,IAAI,MAAM,kCAAkC;AAAA,QACpD;AAEA,cAAM,cAAc;AACpB,gBAAQ,iBAAiB,SAAS,MAAM;AACtC,kBAAQ,WAAW;AACnB,gBAAM,YAAY;AAChB,gBAAI;AACF,oBAAM,OAAO;AAAA,YACf,UAAE;AACA,oBAAM;AAAA,YACR;AAAA,UACF,GAAG;AAAA,QACL,CAAC;AAED,aAAK,YAAYA,MAAK;AACtB,sBAAc,WAAW,WAAW,MAAM,MAAM,GAAG,GAAI;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AAEA,MAAM,QAAQ,YAAY;AAE1B,MAAM,aAAa,MAAe;AAChC,UAAM,WAAW,KAAK,kBAAkB;AACxC,UAAM,SAAS,KAAK,gBAAgB;AACpC,UAAM,eAAe,KAAK,kBAAkB;AAC5C,UAAM,eAAe,KAAK,kBAAkB;AAE5C,QAAI,SAAS,SAAS,WAAW,OAAO,SAAS,SAAS;AACxD,YAAM,IAAI,MAAM,6CAA6C;AAAA,IAC/D;AACA,QAAI,aAAa,QAAQ,YAAY,MAAM,WAAW;AACpD,YAAM,IAAI,MAAM,gDAAgD;AAAA,IAClE;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,WAAuC;AAC3C,MAAI,sBAAsB;AAE1B,MAAM,YAAY,CAAC,SAAoC;AACrD,UAAM,MAAM,WAAW;AACvB,QAAI,SAAS,UAAU,SAAS;AAChC,QAAI,OAAO,UAAU,SAAS;AAG9B,QAAI,aAAa,cAAc;AAC/B,QAAI,SAAS,UAAU;AACrB,UAAI,aAAa,UAAU;AACzB,YAAI,aAAa,OAAO;AAAA,MAC1B;AAAA,IACF,WAAW,aAAa,YAAY;AAClC,UAAI,aAAa,OAAO;AAAA,IAC1B;AAEA,eAAW;AAAA,EACb;AAEA,MAAM,cAAc,YAA2B;AAC7C,cAAU,MAAM,wBAAwB,CAAC;AAAA,EAC3C;AAEA,MAAM,eAAe,CAAC,SAAuB;AAC3C,UAAM,YAAY,KAAK,UAAU;AACjC,UAAM,OAAO,MAAM,KAAK,UAAU,iBAAiB,cAAc,CAAC;AAClE,eAAW,SAAS,MAAM;AACxB,YAAM,KAAK;AACX,UAAI,GAAG,QAAQ,SAAS,MAAM;AAC5B;AAAA,MACF;AAEA,UAAI;AACF,WAAG,eAAe,EAAE,OAAO,UAAU,CAAC;AAAA,MACxC,QAAQ;AAAA,MAER;AAEA,YAAM,MAAM,GAAG,cAAc,QAAQ;AACrC,WAAK,MAAM;AACX;AAAA,IACF;AAAA,EACF;AAEA,MAAM,SAAS,CAAC,SAAsB;AACpC,UAAM,YAAY,KAAK,UAAU;AACjC,cAAU,YAAY;AACtB,cAAU,SAAS;AAEnB,QAAI,KAAK,WAAW,GAAG;AACrB,YAAM,QAAQ,SAAS,cAAc,KAAK;AAC1C,YAAM,YAAY;AAElB,YAAM,QAAQ,SAAS,cAAc,KAAK;AAC1C,YAAM,QAAQ,SAAS,cAAc,QAAQ;AAC7C,YAAM,cAAc;AACpB,YAAM,YAAY,KAAK;AACvB,YAAM,YAAY,KAAK;AAEvB,YAAM,QAAQ,SAAS,cAAc,KAAK;AAC1C,YAAM,cACJ;AACF,YAAM,YAAY,KAAK;AACvB,gBAAU,YAAY,KAAK;AAC3B;AAAA,IACF;AAEA,eAAW,OAAO,MAAM;AACtB,YAAM,OAAO,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAUvB;AACD,MAAC,KAAqB,QAAQ,OAAO,IAAI;AAEzC,YAAM,MAAM,KAAK,cAAc,cAAc;AAC7C,YAAM,OAAO,KAAK,cAAc,eAAe;AAC/C,YAAM,YAAY,KAAK,cAAc,QAAQ;AAC7C,UAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW;AAC/B,cAAM,IAAI,MAAM,qCAAqC;AAAA,MACvD;AAEA,UAAI,cAAc,IAAI;AACtB,WAAK,cAAc,cAAc,WAAW,IAAI,UAAU,CAAC;AAC3D,WAAK,QAAQ,aAAa;AAAA,QACxB,IAAI;AAAA,MACN,CAAC;AAAA,aAAgB,WAAW,IAAI,UAAU,CAAC;AAE3C,gBAAU,iBAAiB,SAAS,MAAM;AACxC,kBAAU,WAAW;AACrB,cAAM,YAAY;AAChB,gBAAM,SAAS,MAAM,oBAAoB;AACzC,gBAAM,QAAQ,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,YAAY,CAAC;AAE/D,cAAI;AACF,kBAAM,WAAW,IAAI,IAAI;AAAA,UAC3B,UAAE;AACA,kBAAM,QAAQ;AACd,sBAAU,WAAW;AAAA,UACvB;AAEA,cAAI,OAAO;AACT,kBAAM,SAAS;AAAA,cACb,SAAS,WAAW,IAAI,IAAI;AAAA,cAC5B,QAAQ,YAAY;AAClB,oBAAI;AACF,wBAAM,uBAAuB,EAAE,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC;AAClD,wBAAM,QAAQ,MAAM,oBAAoB;AACxC,sBAAI,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,YAAY,CAAC,GAAG;AACtD,0BAAM,gBAAgB,IAAI,IAAI;AAAA,kBAChC;AAAA,gBACF,SAAS,KAAK;AAGZ,0BAAQ;AAAA,oBACN;AAAA,oBACA;AAAA,kBACF;AACA,wBAAM,gBAAgB,IAAI,IAAI;AAAA,gBAChC;AACA,sBAAM,QAAQ;AACd,6BAAa,IAAI,IAAI;AAAA,cACvB;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,GAAG;AAAA,MACL,CAAC;AAED,gBAAU,YAAY,IAAI;AAAA,IAC5B;AAAA,EACF;AAEA,MAAM,UAAU,YAA2B;AACzC,UAAM,YAAY,MAAM,oBAAoB;AAC5C,UAAM,OAAc,OAAO,QAAQ,SAAS,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;AAAA,MACpE;AAAA,MACA,WAAW,MAAM;AAAA,MACjB,YAAY,MAAM;AAAA,IACpB,EAAE;AAEF,SAAK,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,cAAc,EAAE,UAAU,CAAC;AAC5D,WAAO,IAAI;AAAA,EACb;AAEA,MAAM,UAAU,OAAO,SAA6C;AAClE,QAAI,qBAAqB;AACvB;AAAA,IACF;AAEA,0BAAsB;AACtB,QAAI;AACF,YAAM,yBAAyB,IAAI;AACnC,gBAAU,IAAI;AACd,YAAM,QAAQ;AAAA,IAChB,UAAE;AACA,4BAAsB;AAAA,IACxB;AAAA,EACF;AAEA,MAAM,aAAa,YAA2B;AAE5C,UAAM,YAAY;AAClB,UAAM,QAAQ;AAAA,EAChB;AAEA,MAAM,OAAO,MAAY;AACvB,UAAM,YAAY;AAChB,YAAM,2BAA2B;AACjC,YAAM,WAAW;AAAA,IACnB,GAAG;AAEH,UAAM,EAAE,UAAU,OAAO,IAAI,WAAW;AACxC,aAAS,iBAAiB,UAAU,MAAM;AACxC,UAAI,CAAC,SAAS,SAAS;AACrB;AAAA,MACF;AACA,WAAK,QAAQ,UAAU;AAAA,IACzB,CAAC;AACD,WAAO,iBAAiB,UAAU,MAAM;AACtC,UAAI,CAAC,OAAO,SAAS;AACnB;AAAA,MACF;AACA,WAAK,QAAQ,QAAQ;AAAA,IACvB,CAAC;AAGD,IAAC,OAAe,SAAS,WAAW,cAAc,MAAM;AACtD,WAAK,WAAW;AAAA,IAClB,CAAC;AAAA,EACH;AAEA,OAAK;",
   "names": ["toast"]
 }

package/extension/dist/permissions-request-ui.js

@@ -0,0 +1,111 @@
+"use strict";
+(() => {
+  // packages/extension/src/permissions-request-ui.ts
+  var PORT_NAME = "permissions_request_prompt";
+  var byId = (id) => {
+    const el = document.getElementById(id);
+    if (!el) {
+      throw new Error(`Missing element: ${id}`);
+    }
+    return el;
+  };
+  var escapeHtml = (raw) => raw.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  var setApproveDisabled = (disabled) => {
+    byId("bb-approve").disabled = disabled;
+  };
+  var setAllDisabled = (disabled) => {
+    byId("bb-approve").disabled = disabled;
+    byId("bb-deny").disabled = disabled;
+    const acknowledge = byId("bb-acknowledge");
+    if (acknowledge) {
+      acknowledge.disabled = disabled;
+    }
+  };
+  var describeRequest = (kind, site, mode, source) => {
+    const sourceLabel = source ? `${source.toUpperCase()} requested:` : "Request:";
+    switch (kind) {
+      case "allow_site":
+        return {
+          title: "Approve site access",
+          summary: `${sourceLabel} allow Browser Bridge actions on <span class="bb-inline-code">${escapeHtml(
+            site
+          )}</span>.`
+        };
+      case "revoke_site":
+        return {
+          title: "Approve site revoke",
+          summary: `${sourceLabel} revoke Browser Bridge actions on <span class="bb-inline-code">${escapeHtml(
+            site
+          )}</span>.`
+        };
+      case "set_mode":
+        return {
+          title: mode === "bypass" ? "Approve bypass mode" : "Approve granular mode",
+          summary: `${sourceLabel} switch Browser Bridge to <span class="bb-inline-code">${escapeHtml(
+            mode
+          )}</span> mode.`
+        };
+      default:
+        return {
+          title: "Approve permissions change",
+          summary: `${sourceLabel} update Browser Bridge permissions.`
+        };
+    }
+  };
+  var main = () => {
+    const qs = new URLSearchParams(window.location.search);
+    const requestId = qs.get("requestId") ?? "";
+    const kind = qs.get("kind") ?? "";
+    const site = qs.get("site") ?? "";
+    const mode = qs.get("mode") ?? "";
+    const source = qs.get("source") ?? "";
+    const warning = qs.get("warning") ?? "";
+    const requireAcknowledge = qs.get("requireAcknowledge") === "1";
+    const title = byId("bb-title");
+    const summary = byId("bb-summary");
+    const details = byId("bb-details");
+    const warningSection = byId("bb-warning");
+    const warningText = byId("bb-warning-text");
+    const acknowledgeWrap = byId("bb-acknowledge-wrap");
+    const acknowledge = byId("bb-acknowledge");
+    if (!requestId || !kind) {
+      title.textContent = "Invalid request";
+      summary.textContent = "Close this window and retry.";
+      details.textContent = "";
+      setAllDisabled(true);
+      return;
+    }
+    const copy = describeRequest(kind, site, mode, source);
+    title.textContent = copy.title;
+    summary.innerHTML = copy.summary;
+    details.textContent = site || mode || "";
+    if (warning) {
+      warningSection.hidden = false;
+      warningText.textContent = warning;
+    }
+    if (requireAcknowledge) {
+      acknowledgeWrap.hidden = false;
+      setApproveDisabled(true);
+      acknowledge.addEventListener("change", () => {
+        setApproveDisabled(!acknowledge.checked);
+      });
+    }
+    const port = chrome.runtime.connect({ name: PORT_NAME });
+    const sendDecision = (decision) => {
+      setAllDisabled(true);
+      try {
+        port.postMessage({
+          type: "decision",
+          requestId,
+          decision
+        });
+      } finally {
+        window.setTimeout(() => window.close(), 50);
+      }
+    };
+    byId("bb-approve").addEventListener("click", () => sendDecision("approve"));
+    byId("bb-deny").addEventListener("click", () => sendDecision("deny"));
+  };
+  main();
+})();
+//# sourceMappingURL=permissions-request-ui.js.map

package/extension/dist/permissions-request-ui.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/permissions-request-ui.ts"],
+  "sourcesContent": ["type Decision = 'approve' | 'deny';\n\nconst PORT_NAME = 'permissions_request_prompt';\n\nconst byId = (id: string): HTMLElement => {\n  const el = document.getElementById(id);\n  if (!el) {\n    throw new Error(`Missing element: ${id}`);\n  }\n  return el;\n};\n\nconst escapeHtml = (raw: string): string =>\n  raw.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');\n\nconst setApproveDisabled = (disabled: boolean): void => {\n  (byId('bb-approve') as HTMLButtonElement).disabled = disabled;\n};\n\nconst setAllDisabled = (disabled: boolean): void => {\n  (byId('bb-approve') as HTMLButtonElement).disabled = disabled;\n  (byId('bb-deny') as HTMLButtonElement).disabled = disabled;\n  const acknowledge = byId('bb-acknowledge') as HTMLInputElement | null;\n  if (acknowledge) {\n    acknowledge.disabled = disabled;\n  }\n};\n\nconst describeRequest = (\n  kind: string,\n  site: string,\n  mode: string,\n  source: string\n): { title: string; summary: string } => {\n  const sourceLabel = source\n    ? `${source.toUpperCase()} requested:`\n    : 'Request:';\n  switch (kind) {\n    case 'allow_site':\n      return {\n        title: 'Approve site access',\n        summary: `${sourceLabel} allow Browser Bridge actions on <span class=\"bb-inline-code\">${escapeHtml(\n          site\n        )}</span>.`,\n      };\n    case 'revoke_site':\n      return {\n        title: 'Approve site revoke',\n        summary: `${sourceLabel} revoke Browser Bridge actions on <span class=\"bb-inline-code\">${escapeHtml(\n          site\n        )}</span>.`,\n      };\n    case 'set_mode':\n      return {\n        title:\n          mode === 'bypass' ? 'Approve bypass mode' : 'Approve granular mode',\n        summary: `${sourceLabel} switch Browser Bridge to <span class=\"bb-inline-code\">${escapeHtml(\n          mode\n        )}</span> mode.`,\n      };\n    default:\n      return {\n        title: 'Approve permissions change',\n        summary: `${sourceLabel} update Browser Bridge permissions.`,\n      };\n  }\n};\n\nconst main = (): void => {\n  const qs = new URLSearchParams(window.location.search);\n  const requestId = qs.get('requestId') ?? '';\n  const kind = qs.get('kind') ?? '';\n  const site = qs.get('site') ?? '';\n  const mode = qs.get('mode') ?? '';\n  const source = qs.get('source') ?? '';\n  const warning = qs.get('warning') ?? '';\n  const requireAcknowledge = qs.get('requireAcknowledge') === '1';\n\n  const title = byId('bb-title');\n  const summary = byId('bb-summary');\n  const details = byId('bb-details');\n  const warningSection = byId('bb-warning');\n  const warningText = byId('bb-warning-text');\n  const acknowledgeWrap = byId('bb-acknowledge-wrap');\n  const acknowledge = byId('bb-acknowledge') as HTMLInputElement;\n\n  if (!requestId || !kind) {\n    title.textContent = 'Invalid request';\n    summary.textContent = 'Close this window and retry.';\n    details.textContent = '';\n    setAllDisabled(true);\n    return;\n  }\n\n  const copy = describeRequest(kind, site, mode, source);\n  title.textContent = copy.title;\n  summary.innerHTML = copy.summary;\n  details.textContent = site || mode || '';\n\n  if (warning) {\n    warningSection.hidden = false;\n    warningText.textContent = warning;\n  }\n\n  if (requireAcknowledge) {\n    acknowledgeWrap.hidden = false;\n    setApproveDisabled(true);\n    acknowledge.addEventListener('change', () => {\n      setApproveDisabled(!acknowledge.checked);\n    });\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  const port = (chrome as any).runtime.connect({ name: PORT_NAME });\n\n  const sendDecision = (decision: Decision): void => {\n    setAllDisabled(true);\n    try {\n      port.postMessage({\n        type: 'decision',\n        requestId,\n        decision,\n      });\n    } finally {\n      window.setTimeout(() => window.close(), 50);\n    }\n  };\n\n  byId('bb-approve').addEventListener('click', () => sendDecision('approve'));\n  byId('bb-deny').addEventListener('click', () => sendDecision('deny'));\n};\n\nmain();\n\nexport {};\n"],
+  "mappings": ";;;AAEA,MAAM,YAAY;AAElB,MAAM,OAAO,CAAC,OAA4B;AACxC,UAAM,KAAK,SAAS,eAAe,EAAE;AACrC,QAAI,CAAC,IAAI;AACP,YAAM,IAAI,MAAM,oBAAoB,EAAE,EAAE;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AAEA,MAAM,aAAa,CAAC,QAClB,IAAI,QAAQ,MAAM,OAAO,EAAE,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,MAAM;AAEvE,MAAM,qBAAqB,CAAC,aAA4B;AACtD,IAAC,KAAK,YAAY,EAAwB,WAAW;AAAA,EACvD;AAEA,MAAM,iBAAiB,CAAC,aAA4B;AAClD,IAAC,KAAK,YAAY,EAAwB,WAAW;AACrD,IAAC,KAAK,SAAS,EAAwB,WAAW;AAClD,UAAM,cAAc,KAAK,gBAAgB;AACzC,QAAI,aAAa;AACf,kBAAY,WAAW;AAAA,IACzB;AAAA,EACF;AAEA,MAAM,kBAAkB,CACtB,MACA,MACA,MACA,WACuC;AACvC,UAAM,cAAc,SAChB,GAAG,OAAO,YAAY,CAAC,gBACvB;AACJ,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,eAAO;AAAA,UACL,OAAO;AAAA,UACP,SAAS,GAAG,WAAW,iEAAiE;AAAA,YACtF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,OAAO;AAAA,UACP,SAAS,GAAG,WAAW,kEAAkE;AAAA,YACvF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,OACE,SAAS,WAAW,wBAAwB;AAAA,UAC9C,SAAS,GAAG,WAAW,0DAA0D;AAAA,YAC/E;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACE,eAAO;AAAA,UACL,OAAO;AAAA,UACP,SAAS,GAAG,WAAW;AAAA,QACzB;AAAA,IACJ;AAAA,EACF;AAEA,MAAM,OAAO,MAAY;AACvB,UAAM,KAAK,IAAI,gBAAgB,OAAO,SAAS,MAAM;AACrD,UAAM,YAAY,GAAG,IAAI,WAAW,KAAK;AACzC,UAAM,OAAO,GAAG,IAAI,MAAM,KAAK;AAC/B,UAAM,OAAO,GAAG,IAAI,MAAM,KAAK;AAC/B,UAAM,OAAO,GAAG,IAAI,MAAM,KAAK;AAC/B,UAAM,SAAS,GAAG,IAAI,QAAQ,KAAK;AACnC,UAAM,UAAU,GAAG,IAAI,SAAS,KAAK;AACrC,UAAM,qBAAqB,GAAG,IAAI,oBAAoB,MAAM;AAE5D,UAAM,QAAQ,KAAK,UAAU;AAC7B,UAAM,UAAU,KAAK,YAAY;AACjC,UAAM,UAAU,KAAK,YAAY;AACjC,UAAM,iBAAiB,KAAK,YAAY;AACxC,UAAM,cAAc,KAAK,iBAAiB;AAC1C,UAAM,kBAAkB,KAAK,qBAAqB;AAClD,UAAM,cAAc,KAAK,gBAAgB;AAEzC,QAAI,CAAC,aAAa,CAAC,MAAM;AACvB,YAAM,cAAc;AACpB,cAAQ,cAAc;AACtB,cAAQ,cAAc;AACtB,qBAAe,IAAI;AACnB;AAAA,IACF;AAEA,UAAM,OAAO,gBAAgB,MAAM,MAAM,MAAM,MAAM;AACrD,UAAM,cAAc,KAAK;AACzB,YAAQ,YAAY,KAAK;AACzB,YAAQ,cAAc,QAAQ,QAAQ;AAEtC,QAAI,SAAS;AACX,qBAAe,SAAS;AACxB,kBAAY,cAAc;AAAA,IAC5B;AAEA,QAAI,oBAAoB;AACtB,sBAAgB,SAAS;AACzB,yBAAmB,IAAI;AACvB,kBAAY,iBAAiB,UAAU,MAAM;AAC3C,2BAAmB,CAAC,YAAY,OAAO;AAAA,MACzC,CAAC;AAAA,IACH;AAGA,UAAM,OAAQ,OAAe,QAAQ,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEhE,UAAM,eAAe,CAAC,aAA6B;AACjD,qBAAe,IAAI;AACnB,UAAI;AACF,aAAK,YAAY;AAAA,UACf,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,UAAE;AACA,eAAO,WAAW,MAAM,OAAO,MAAM,GAAG,EAAE;AAAA,MAC5C;AAAA,IACF;AAEA,SAAK,YAAY,EAAE,iBAAiB,SAAS,MAAM,aAAa,SAAS,CAAC;AAC1E,SAAK,SAAS,EAAE,iBAAiB,SAAS,MAAM,aAAa,MAAM,CAAC;AAAA,EACtE;AAEA,OAAK;",
+  "names": []
+}

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Browser Bridge",
-  "version": "0.13.2",
+  "version": "0.15.0",
   "description": "Control Chrome for Browser Bridge: drive tabs and inspect pages for coding agents.",
   "icons": {
     "16": "assets/icons/icon-16.png",
@@ -25,8 +25,8 @@
     "page": "options.html",
     "open_in_tab": true
   },
-  "permissions": ["tabs", "storage", "webNavigation", "debugger"],
-  "host_permissions": ["http://*/*", "https://*/*"],
+  "permissions": ["tabs", "storage", "webNavigation", "debugger", "scripting"],
+  "host_permissions": ["http://*/*", "https://*/*", "<all_urls>"],
   "web_accessible_resources": [
     {
       "resources": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@btraut/browser-bridge",
-  "version": "0.13.2",
+  "version": "0.15.0",
   "license": "MIT",
   "engines": {
     "node": ">=20"

package/skills/browser-bridge/SKILL.md

@@ -41,6 +41,10 @@ Global option (works on every command):
 Quickstart:
 
 ```bash
+browser-bridge dev info
+# Optional diagnostics probe if you want to sanity-check inspect capability:
+browser-bridge dev enable-inspect
+
 browser-bridge drive navigate --url https://example.com --json
 # Use result.session_id from the navigate output for subsequent session-scoped commands.
 
@@ -59,6 +63,8 @@ Notes:
 
 - `--max-nodes` only applies to `--format ax` snapshots. For `--format html`, the snapshot succeeds and the flag is ignored with a warning.
 - When `tab_id` is omitted, drive commands target a dedicated agent window/tab that Browser Bridge creates and reuses automatically.
+- `inspect.*` is always enabled in current builds. `dev enable-inspect` is a diagnostics-backed compatibility probe now; it does not toggle inspect through Core.
+- If diagnostics says inspect capability is unavailable, treat that as stale runtime drift. Restart the core daemon and reload or update the extension before retrying inspect commands.
 
 Element targeting:
 
@@ -71,6 +77,8 @@ Element targeting:
   - `--locator-css <selector>`
   - `--locator-text <text>`
   - `--locator-role <role>` + `--locator-role-value <value>`
+- For repeated actions in the same menu (for example `Edit cards` vs `Edit details`), prefer exact `--locator-text` or role/name targeting over broad CSS. Broad selectors are how you click the wrong damn thing.
+- If a CSS or testid locator matches multiple nodes, Browser Bridge prefers the visible candidate, but exact text/role targeting is still the cleanest path.
 
 Wait conditions (`drive wait-for`):
 
@@ -93,6 +101,7 @@ Note: MCP still requires `browser-bridge` to be on PATH, since the client invoke
 ## Tool Groups (MCP)
 
 - `session.*` - Session lifecycle
+- `permissions.*` - Allowlist/mode inspection plus approval-gated permission-change requests
 - `drive.*` - Navigation and input
 - `inspect.*` - DOM snapshots and evaluation
 - `artifacts.*` - Screenshots
@@ -112,6 +121,7 @@ Note: MCP still requires `browser-bridge` to be on PATH, since the client invoke
 - If drive/inspect fails, run diagnostics and include the output:
   - MCP: `diagnostics.doctor`
   - CLI: `browser-bridge diagnostics doctor`
+- For worktree-aware debugging, start with `browser-bridge dev info` so you know which runtime metadata and log directory the current checkout is using.
 
 ### Site Permissions (Drive Actions)
 
@@ -130,6 +140,14 @@ Manage approvals (and bypass mode):
 - Review/revoke sites under **Approved sites**.
 - Switch **Permission mode** to **Bypass (dangerous)** to skip prompts/allowlist entirely.
   - Restricted URLs (for example `chrome://` and `file://`) are still blocked.
+- CLI and MCP can also inspect or request permission changes:
+  - CLI reads: `browser-bridge permissions list`, `browser-bridge permissions mode`, `browser-bridge permissions pending`
+  - CLI requests: `browser-bridge permissions allow-site --site example.com`, `revoke-site --site example.com`, `set-mode --mode granular|bypass`
+  - MCP equivalents: `permissions.list`, `permissions.get_mode`, `permissions.list_pending_requests`, and `permissions.request_*`
+- External permission-change requests are still human-gated:
+  - Request tools/commands open a dedicated Chrome approval prompt.
+  - A request timeout returns `status: "timed_out"`; if the prompt stays open, a later human approval still applies the change.
+  - Nothing is silently mutated from CLI or MCP.
 
 ### Error Handling (Structured Envelopes)
 

package/skills/browser-bridge/skill.json

@@ -1,4 +1,4 @@
 {
   "name": "browser-bridge",
-  "version": "0.13.2"
+  "version": "0.15.0"
 }