@btraut/browser-bridge 0.14.0 → 0.15.0

package/extension/dist/permissions-request-ui.js

@@ -0,0 +1,111 @@
+"use strict";
+(() => {
+  // packages/extension/src/permissions-request-ui.ts
+  var PORT_NAME = "permissions_request_prompt";
+  var byId = (id) => {
+    const el = document.getElementById(id);
+    if (!el) {
+      throw new Error(`Missing element: ${id}`);
+    }
+    return el;
+  };
+  var escapeHtml = (raw) => raw.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  var setApproveDisabled = (disabled) => {
+    byId("bb-approve").disabled = disabled;
+  };
+  var setAllDisabled = (disabled) => {
+    byId("bb-approve").disabled = disabled;
+    byId("bb-deny").disabled = disabled;
+    const acknowledge = byId("bb-acknowledge");
+    if (acknowledge) {
+      acknowledge.disabled = disabled;
+    }
+  };
+  var describeRequest = (kind, site, mode, source) => {
+    const sourceLabel = source ? `${source.toUpperCase()} requested:` : "Request:";
+    switch (kind) {
+      case "allow_site":
+        return {
+          title: "Approve site access",
+          summary: `${sourceLabel} allow Browser Bridge actions on <span class="bb-inline-code">${escapeHtml(
+            site
+          )}</span>.`
+        };
+      case "revoke_site":
+        return {
+          title: "Approve site revoke",
+          summary: `${sourceLabel} revoke Browser Bridge actions on <span class="bb-inline-code">${escapeHtml(
+            site
+          )}</span>.`
+        };
+      case "set_mode":
+        return {
+          title: mode === "bypass" ? "Approve bypass mode" : "Approve granular mode",
+          summary: `${sourceLabel} switch Browser Bridge to <span class="bb-inline-code">${escapeHtml(
+            mode
+          )}</span> mode.`
+        };
+      default:
+        return {
+          title: "Approve permissions change",
+          summary: `${sourceLabel} update Browser Bridge permissions.`
+        };
+    }
+  };
+  var main = () => {
+    const qs = new URLSearchParams(window.location.search);
+    const requestId = qs.get("requestId") ?? "";
+    const kind = qs.get("kind") ?? "";
+    const site = qs.get("site") ?? "";
+    const mode = qs.get("mode") ?? "";
+    const source = qs.get("source") ?? "";
+    const warning = qs.get("warning") ?? "";
+    const requireAcknowledge = qs.get("requireAcknowledge") === "1";
+    const title = byId("bb-title");
+    const summary = byId("bb-summary");
+    const details = byId("bb-details");
+    const warningSection = byId("bb-warning");
+    const warningText = byId("bb-warning-text");
+    const acknowledgeWrap = byId("bb-acknowledge-wrap");
+    const acknowledge = byId("bb-acknowledge");
+    if (!requestId || !kind) {
+      title.textContent = "Invalid request";
+      summary.textContent = "Close this window and retry.";
+      details.textContent = "";
+      setAllDisabled(true);
+      return;
+    }
+    const copy = describeRequest(kind, site, mode, source);
+    title.textContent = copy.title;
+    summary.innerHTML = copy.summary;
+    details.textContent = site || mode || "";
+    if (warning) {
+      warningSection.hidden = false;
+      warningText.textContent = warning;
+    }
+    if (requireAcknowledge) {
+      acknowledgeWrap.hidden = false;
+      setApproveDisabled(true);
+      acknowledge.addEventListener("change", () => {
+        setApproveDisabled(!acknowledge.checked);
+      });
+    }
+    const port = chrome.runtime.connect({ name: PORT_NAME });
+    const sendDecision = (decision) => {
+      setAllDisabled(true);
+      try {
+        port.postMessage({
+          type: "decision",
+          requestId,
+          decision
+        });
+      } finally {
+        window.setTimeout(() => window.close(), 50);
+      }
+    };
+    byId("bb-approve").addEventListener("click", () => sendDecision("approve"));
+    byId("bb-deny").addEventListener("click", () => sendDecision("deny"));
+  };
+  main();
+})();
+//# sourceMappingURL=permissions-request-ui.js.map

package/extension/dist/permissions-request-ui.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/permissions-request-ui.ts"],
+  "sourcesContent": ["type Decision = 'approve' | 'deny';\n\nconst PORT_NAME = 'permissions_request_prompt';\n\nconst byId = (id: string): HTMLElement => {\n  const el = document.getElementById(id);\n  if (!el) {\n    throw new Error(`Missing element: ${id}`);\n  }\n  return el;\n};\n\nconst escapeHtml = (raw: string): string =>\n  raw.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');\n\nconst setApproveDisabled = (disabled: boolean): void => {\n  (byId('bb-approve') as HTMLButtonElement).disabled = disabled;\n};\n\nconst setAllDisabled = (disabled: boolean): void => {\n  (byId('bb-approve') as HTMLButtonElement).disabled = disabled;\n  (byId('bb-deny') as HTMLButtonElement).disabled = disabled;\n  const acknowledge = byId('bb-acknowledge') as HTMLInputElement | null;\n  if (acknowledge) {\n    acknowledge.disabled = disabled;\n  }\n};\n\nconst describeRequest = (\n  kind: string,\n  site: string,\n  mode: string,\n  source: string\n): { title: string; summary: string } => {\n  const sourceLabel = source\n    ? `${source.toUpperCase()} requested:`\n    : 'Request:';\n  switch (kind) {\n    case 'allow_site':\n      return {\n        title: 'Approve site access',\n        summary: `${sourceLabel} allow Browser Bridge actions on <span class=\"bb-inline-code\">${escapeHtml(\n          site\n        )}</span>.`,\n      };\n    case 'revoke_site':\n      return {\n        title: 'Approve site revoke',\n        summary: `${sourceLabel} revoke Browser Bridge actions on <span class=\"bb-inline-code\">${escapeHtml(\n          site\n        )}</span>.`,\n      };\n    case 'set_mode':\n      return {\n        title:\n          mode === 'bypass' ? 'Approve bypass mode' : 'Approve granular mode',\n        summary: `${sourceLabel} switch Browser Bridge to <span class=\"bb-inline-code\">${escapeHtml(\n          mode\n        )}</span> mode.`,\n      };\n    default:\n      return {\n        title: 'Approve permissions change',\n        summary: `${sourceLabel} update Browser Bridge permissions.`,\n      };\n  }\n};\n\nconst main = (): void => {\n  const qs = new URLSearchParams(window.location.search);\n  const requestId = qs.get('requestId') ?? '';\n  const kind = qs.get('kind') ?? '';\n  const site = qs.get('site') ?? '';\n  const mode = qs.get('mode') ?? '';\n  const source = qs.get('source') ?? '';\n  const warning = qs.get('warning') ?? '';\n  const requireAcknowledge = qs.get('requireAcknowledge') === '1';\n\n  const title = byId('bb-title');\n  const summary = byId('bb-summary');\n  const details = byId('bb-details');\n  const warningSection = byId('bb-warning');\n  const warningText = byId('bb-warning-text');\n  const acknowledgeWrap = byId('bb-acknowledge-wrap');\n  const acknowledge = byId('bb-acknowledge') as HTMLInputElement;\n\n  if (!requestId || !kind) {\n    title.textContent = 'Invalid request';\n    summary.textContent = 'Close this window and retry.';\n    details.textContent = '';\n    setAllDisabled(true);\n    return;\n  }\n\n  const copy = describeRequest(kind, site, mode, source);\n  title.textContent = copy.title;\n  summary.innerHTML = copy.summary;\n  details.textContent = site || mode || '';\n\n  if (warning) {\n    warningSection.hidden = false;\n    warningText.textContent = warning;\n  }\n\n  if (requireAcknowledge) {\n    acknowledgeWrap.hidden = false;\n    setApproveDisabled(true);\n    acknowledge.addEventListener('change', () => {\n      setApproveDisabled(!acknowledge.checked);\n    });\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  const port = (chrome as any).runtime.connect({ name: PORT_NAME });\n\n  const sendDecision = (decision: Decision): void => {\n    setAllDisabled(true);\n    try {\n      port.postMessage({\n        type: 'decision',\n        requestId,\n        decision,\n      });\n    } finally {\n      window.setTimeout(() => window.close(), 50);\n    }\n  };\n\n  byId('bb-approve').addEventListener('click', () => sendDecision('approve'));\n  byId('bb-deny').addEventListener('click', () => sendDecision('deny'));\n};\n\nmain();\n\nexport {};\n"],
+  "mappings": ";;;AAEA,MAAM,YAAY;AAElB,MAAM,OAAO,CAAC,OAA4B;AACxC,UAAM,KAAK,SAAS,eAAe,EAAE;AACrC,QAAI,CAAC,IAAI;AACP,YAAM,IAAI,MAAM,oBAAoB,EAAE,EAAE;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AAEA,MAAM,aAAa,CAAC,QAClB,IAAI,QAAQ,MAAM,OAAO,EAAE,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,MAAM;AAEvE,MAAM,qBAAqB,CAAC,aAA4B;AACtD,IAAC,KAAK,YAAY,EAAwB,WAAW;AAAA,EACvD;AAEA,MAAM,iBAAiB,CAAC,aAA4B;AAClD,IAAC,KAAK,YAAY,EAAwB,WAAW;AACrD,IAAC,KAAK,SAAS,EAAwB,WAAW;AAClD,UAAM,cAAc,KAAK,gBAAgB;AACzC,QAAI,aAAa;AACf,kBAAY,WAAW;AAAA,IACzB;AAAA,EACF;AAEA,MAAM,kBAAkB,CACtB,MACA,MACA,MACA,WACuC;AACvC,UAAM,cAAc,SAChB,GAAG,OAAO,YAAY,CAAC,gBACvB;AACJ,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,eAAO;AAAA,UACL,OAAO;AAAA,UACP,SAAS,GAAG,WAAW,iEAAiE;AAAA,YACtF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,OAAO;AAAA,UACP,SAAS,GAAG,WAAW,kEAAkE;AAAA,YACvF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,OACE,SAAS,WAAW,wBAAwB;AAAA,UAC9C,SAAS,GAAG,WAAW,0DAA0D;AAAA,YAC/E;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACE,eAAO;AAAA,UACL,OAAO;AAAA,UACP,SAAS,GAAG,WAAW;AAAA,QACzB;AAAA,IACJ;AAAA,EACF;AAEA,MAAM,OAAO,MAAY;AACvB,UAAM,KAAK,IAAI,gBAAgB,OAAO,SAAS,MAAM;AACrD,UAAM,YAAY,GAAG,IAAI,WAAW,KAAK;AACzC,UAAM,OAAO,GAAG,IAAI,MAAM,KAAK;AAC/B,UAAM,OAAO,GAAG,IAAI,MAAM,KAAK;AAC/B,UAAM,OAAO,GAAG,IAAI,MAAM,KAAK;AAC/B,UAAM,SAAS,GAAG,IAAI,QAAQ,KAAK;AACnC,UAAM,UAAU,GAAG,IAAI,SAAS,KAAK;AACrC,UAAM,qBAAqB,GAAG,IAAI,oBAAoB,MAAM;AAE5D,UAAM,QAAQ,KAAK,UAAU;AAC7B,UAAM,UAAU,KAAK,YAAY;AACjC,UAAM,UAAU,KAAK,YAAY;AACjC,UAAM,iBAAiB,KAAK,YAAY;AACxC,UAAM,cAAc,KAAK,iBAAiB;AAC1C,UAAM,kBAAkB,KAAK,qBAAqB;AAClD,UAAM,cAAc,KAAK,gBAAgB;AAEzC,QAAI,CAAC,aAAa,CAAC,MAAM;AACvB,YAAM,cAAc;AACpB,cAAQ,cAAc;AACtB,cAAQ,cAAc;AACtB,qBAAe,IAAI;AACnB;AAAA,IACF;AAEA,UAAM,OAAO,gBAAgB,MAAM,MAAM,MAAM,MAAM;AACrD,UAAM,cAAc,KAAK;AACzB,YAAQ,YAAY,KAAK;AACzB,YAAQ,cAAc,QAAQ,QAAQ;AAEtC,QAAI,SAAS;AACX,qBAAe,SAAS;AACxB,kBAAY,cAAc;AAAA,IAC5B;AAEA,QAAI,oBAAoB;AACtB,sBAAgB,SAAS;AACzB,yBAAmB,IAAI;AACvB,kBAAY,iBAAiB,UAAU,MAAM;AAC3C,2BAAmB,CAAC,YAAY,OAAO;AAAA,MACzC,CAAC;AAAA,IACH;AAGA,UAAM,OAAQ,OAAe,QAAQ,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEhE,UAAM,eAAe,CAAC,aAA6B;AACjD,qBAAe,IAAI;AACnB,UAAI;AACF,aAAK,YAAY;AAAA,UACf,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,UAAE;AACA,eAAO,WAAW,MAAM,OAAO,MAAM,GAAG,EAAE;AAAA,MAC5C;AAAA,IACF;AAEA,SAAK,YAAY,EAAE,iBAAiB,SAAS,MAAM,aAAa,SAAS,CAAC;AAC1E,SAAK,SAAS,EAAE,iBAAiB,SAAS,MAAM,aAAa,MAAM,CAAC;AAAA,EACtE;AAEA,OAAK;",
+  "names": []
+}

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Browser Bridge",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Control Chrome for Browser Bridge: drive tabs and inspect pages for coding agents.",
   "icons": {
     "16": "assets/icons/icon-16.png",
@@ -25,7 +25,7 @@
     "page": "options.html",
     "open_in_tab": true
   },
-  "permissions": ["tabs", "storage", "webNavigation", "debugger"],
+  "permissions": ["tabs", "storage", "webNavigation", "debugger", "scripting"],
   "host_permissions": ["http://*/*", "https://*/*", "<all_urls>"],
   "web_accessible_resources": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@btraut/browser-bridge",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "license": "MIT",
   "engines": {
     "node": ">=20"

package/skills/browser-bridge/SKILL.md

@@ -101,6 +101,7 @@ Note: MCP still requires `browser-bridge` to be on PATH, since the client invoke
 ## Tool Groups (MCP)
 
 - `session.*` - Session lifecycle
+- `permissions.*` - Allowlist/mode inspection plus approval-gated permission-change requests
 - `drive.*` - Navigation and input
 - `inspect.*` - DOM snapshots and evaluation
 - `artifacts.*` - Screenshots
@@ -139,6 +140,14 @@ Manage approvals (and bypass mode):
 - Review/revoke sites under **Approved sites**.
 - Switch **Permission mode** to **Bypass (dangerous)** to skip prompts/allowlist entirely.
   - Restricted URLs (for example `chrome://` and `file://`) are still blocked.
+- CLI and MCP can also inspect or request permission changes:
+  - CLI reads: `browser-bridge permissions list`, `browser-bridge permissions mode`, `browser-bridge permissions pending`
+  - CLI requests: `browser-bridge permissions allow-site --site example.com`, `revoke-site --site example.com`, `set-mode --mode granular|bypass`
+  - MCP equivalents: `permissions.list`, `permissions.get_mode`, `permissions.list_pending_requests`, and `permissions.request_*`
+- External permission-change requests are still human-gated:
+  - Request tools/commands open a dedicated Chrome approval prompt.
+  - A request timeout returns `status: "timed_out"`; if the prompt stays open, a later human approval still applies the change.
+  - Nothing is silently mutated from CLI or MCP.
 
 ### Error Handling (Structured Envelopes)
 

package/skills/browser-bridge/skill.json

@@ -1,4 +1,4 @@
 {
   "name": "browser-bridge",
-  "version": "0.14.0"
+  "version": "0.15.0"
 }