@clawcard/cli 2.1.2 → 2.1.3

package/extension/background.js

@@ -15,7 +15,7 @@ async function poll() {
       }
     }
   } catch {
-    // Server not running — that's fine, CLI hasn't started a pay command
+    // Server not running — CLI hasn't started a pay command
   }
   setTimeout(poll, POLL_INTERVAL);
 }
@@ -32,26 +32,30 @@ async function fillActiveTab(message) {
       return;
     }
 
-    // Try main frame first
-    try {
-      const response = await chrome.tabs.sendMessage(tab.id, message);
-      if (response && response.filled && response.filled.length > 0) {
-        await sendResult(response);
-        return;
-      }
-    } catch {
-      // Main frame didn't have fields — try subframes
-    }
-
-    // Try all subframes (where Stripe iframes live)
+    // Get all frames in the tab
     const frames = await chrome.webNavigation.getAllFrames({ tabId: tab.id });
     if (!frames || frames.length === 0) {
       await sendResult({ success: false, error: "No frames found" });
       return;
     }
 
+    // Inject content script into ALL frames first (handles dynamically added iframes)
+    for (const frame of frames) {
+      try {
+        await chrome.scripting.executeScript({
+          target: { tabId: tab.id, frameIds: [frame.frameId] },
+          files: ["content.js"],
+        });
+      } catch {
+        // Can't inject into this frame — that's fine
+      }
+    }
+
+    // Small delay to let injected scripts initialize
+    await new Promise((r) => setTimeout(r, 100));
+
+    // Now try sending the fill command to each frame
     for (const frame of frames) {
-      if (frame.frameId === 0) continue;
       try {
         const response = await chrome.tabs.sendMessage(tab.id, message, {
           frameId: frame.frameId,
@@ -61,7 +65,7 @@ async function fillActiveTab(message) {
           return;
         }
       } catch {
-        // This frame doesn't have our content script — continue
+        // No content script in this frame or no fields — continue
       }
     }
 

package/extension/content.js

@@ -92,6 +92,13 @@ function fillField(el, value) {
   el.dispatchEvent(new Event("blur", { bubbles: true }));
 }
 
+// Guard against duplicate injection
+if (window.__clawcardPayInjected) {
+  // Already injected — just re-register listener
+} else {
+  window.__clawcardPayInjected = true;
+}
+
 // Listen for fill commands from background script
 chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
   if (message.action !== "fill") return;

package/extension/manifest.json

@@ -3,7 +3,7 @@
   "name": "ClawCard Pay",
   "version": "1.0.1",
   "description": "Fills payment form fields for ClawCard agents",
-  "permissions": ["webNavigation"],
+  "permissions": ["webNavigation", "scripting", "activeTab"],
   "host_permissions": ["<all_urls>"],
   "background": {
     "service_worker": "background.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawcard/cli",
-  "version": "2.1.2",
+  "version": "2.1.3",
   "description": "The ClawCard CLI — manage your agent keys, billing, and setup from the terminal",
   "bin": {
     "clawcard": "./bin/clawcard.mjs"