@kubohiroya/turbowarp-extension-security-dialog 0.1.0 → 0.2.0

package/NOTICE.md

@@ -30,3 +30,5 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ## Public Editor screenshots
 
 `assets/screenshots/required-modes-{en,ja}-20261025.png` are unmodified browser captures of the public Editor on 25 October 2026, showing Camera Source 0.19.3, Asset Cache 0.3.1 and Bubble 0.13.4. Their origin, Editor revisions and hashes are recorded in `assets/screenshots/capture-20261025.json`. The captured UI, icons and banners retain their respective rights holders and applicable licenses; this package does not relicense those elements.
+
+`assets/screenshots/localized-descriptions-{en,ja}-20261025.png` are unmodified captures of the updated public Editor on 25 October 2026, showing localized descriptions for Camera Source 0.19.4, Asset Cache 0.3.2 and Bubble 0.13.5. Their origin, revisions and hashes are recorded in `assets/screenshots/localized-descriptions-20261025.json`. The captured UI, icons and banners retain their respective rights holders and applicable licenses.

package/README.ja.md

@@ -1,17 +1,17 @@
 # turbowarp-extension-security-dialog
 
-[English](./README.md) | **日本語**
+[English](README.md) | 日本語
 
 TurboWarpの複数の機能拡張を、1つの一覧で確認するための共通パッケージです。
 関連タスクと受け入れ基準は [scratch-gui #33](https://github.com/kubohiroya/scratch-gui/issues/33) に記録しています。
 
 ## 公開Editorのスクリーンショット
 
-[英語版](./README.md)と日本語版は、同じダイアログの表示言語を切り替えています。
+[英語版](./README.md)と日本語版は、同じダイアログの表示言語を切り替え、ラベルと拡張の説明文を各言語で表示しています。
 2026年10月25日の[公開Editor](https://kubohiroya.github.io/turbowarp-extension-data-editor/editor.html?lang=ja)で、
-Camera Source 0.19.3・Asset Cache 0.3.1・Bubble 0.13.4を開いた実画面です。
+Camera Source 0.19.4・Asset Cache 0.3.2・Bubble 0.13.5を開いた実画面です。
 
-![3拡張の日本語確認画面。サンドボックスありは非対応で無効、サンドボックスなしは動作に必要。サンドボックス内では動作しない理由を表示](https://raw.githubusercontent.com/kubohiroya/turbowarp-extension-security-dialog/main/assets/screenshots/required-modes-ja-20261025.png)
+![Camera Source・Asset Cache・Bubbleの説明が日本語で表示された確認画面。サンドボックスありは非対応で無効、サンドボックスなしは動作に必要。サンドボックス内では動作しない理由を表示](https://raw.githubusercontent.com/kubohiroya/turbowarp-extension-security-dialog/main/assets/screenshots/localized-descriptions-ja-20261025.png)
 
 3拡張とも`Unsandboxed: required`を宣言しています。「サンドボックスあり」は無効化され、
 「この拡張はサンドボックス内では動作しません。」と理由が表示されます。
@@ -25,7 +25,7 @@ Camera Source 0.19.3・Asset Cache 0.3.1・Bubble 0.13.4を開いた実画面で
 | Bubble | ホストの実行環境と描画機能へ直接アクセスして、ステージ上に重ねた吹き出しや立ち絵を描画・更新します。 |
 
 画像はダイアログ部分をブラウザーで直接撮影したもので、加工していません。
-取得元の版・Editor build・画像hashは[撮影台帳](./assets/screenshots/capture-20261025.json)に記録しています。
+取得元の版・Editor build・画像hashは[撮影台帳](./assets/screenshots/localized-descriptions-20261025.json)に記録しています。
 
 ## 連動するパッケージ
 
@@ -186,6 +186,22 @@ HTTP/HTTPSの出所URLは完全なURLを表示し、別タブで開きます。
 プレビュー枠内をスクロールして確認できます。ポインターを外すかEscapeで閉じ、選択や詳細状態を保持します。
 メタデータの非同期取得中も実行方法を選べます。ソースの一覧内表示は引き続き「詳細」を押したときだけです。
 
+### 機能拡張の説明文の言語
+
+拡張コードを実行せず、任意の言語別ヘッダーコメントを読み取ります。
+
+```js
+// Description: Share one camera stream between extensions.
+// Description[ja]: 1つのカメラ映像を複数の機能拡張で共有します。
+// Description[ja-JP]: 日本語の説明（日本向け）。
+```
+
+言語タグの大文字・小文字は区別しません。Editorの言語の完全一致、基底言語、従来の`Description`の順で説明文を選びます。表示中に言語を変えると、ソースを再取得せず説明が切り替わり、許可の選択状態は保たれます。翻訳がない既存の拡張も従来どおり表示できます。
+
+同梱メンバーのnoticeにある説明は親バンドルへ混ぜません。HTMLに見える説明も文字列として表示します。独自の`loadInfo`を使う場合は、任意の`ExtensionMetadata.descriptions`へ小文字の言語タグをキーとした説明を渡せます。`getExtensionDescription(metadata, locale)`でも同じ選択処理を利用できます。
+
+上の画像は、日本語説明へ対応した公開Editorと公開済みの3拡張を使用しています。英語版では各拡張の従来の`Description`、日本語版では`Description[ja]`を表示します。対応する翻訳がない拡張は元の説明を表示します。説明の言語が変わっても、必要な実行モードや許可の選択は変わりません。パッケージを更新しても、既存SB3に埋め込まれたコードは自動で差し替わりません。
+
 ## 実行モードの選択
 
 個別選択・一括選択・一覧の見出しは、禁止アイコンの「拒否」、盾の「サンドボックスあり」、
@@ -238,8 +254,8 @@ scratch-guiは既定OFFの起動時フラグで導入し、ホスト独自のセ
 ## 開発と検証
 
 ```sh
-npm install
-npm test
+pnpm install
+pnpm test
 ```
 
 GUIとの統合では、実VMでの拒否後の表示・保存、エディター初期画面への遷移、

package/README.md

@@ -1,6 +1,6 @@
 # turbowarp-extension-security-dialog
 
-**English** | [日本語](./README.ja.md)
+English | [日本語](README.ja.md)
 
 A shared package that reviews every custom extension a TurboWarp project is about to load
 in **one single list**, instead of one prompt per extension.
@@ -9,12 +9,12 @@ Related tasks and acceptance criteria are tracked in
 
 ## Screenshots from the public Editor
 
-[English](./README.md) and [Japanese](./README.ja.md) use the same dialog with localized labels.
-This capture shows Camera Source 0.19.3, Asset Cache 0.3.1 and Bubble 0.13.4 in the
+[English](./README.md) and [Japanese](./README.ja.md) use the same dialog with localized labels and extension descriptions.
+This capture shows Camera Source 0.19.4, Asset Cache 0.3.2 and Bubble 0.13.5 in the
 [public Editor](https://kubohiroya.github.io/turbowarp-extension-data-editor/editor.html?lang=en)
 on 25 October 2026.
 
-![English extension review: With sandbox is disabled as Unsupported for all three extensions; Without sandbox is marked Required to run, with the reason This extension cannot run inside the sandbox.](https://raw.githubusercontent.com/kubohiroya/turbowarp-extension-security-dialog/main/assets/screenshots/required-modes-en-20261025.png)
+![English descriptions for Camera Source, Asset Cache and Bubble: With sandbox is disabled as Unsupported for all three extensions; Without sandbox is marked Required to run, with the reason This extension cannot run inside the sandbox.](https://raw.githubusercontent.com/kubohiroya/turbowarp-extension-security-dialog/main/assets/screenshots/localized-descriptions-en-20261025.png)
 
 All three extensions declare `Unsandboxed: required`. **With sandbox** is disabled, with
 **This extension cannot run inside the sandbox.** shown as the reason. **Without sandbox**
@@ -28,7 +28,7 @@ choice and OK. These labels describe execution requirements, not a safety certif
 | Bubble | Accesses the host runtime and renderer directly to draw and update layered speech bubbles and portraits on the stage. |
 
 The PNG is an unmodified, modal-only browser capture. Source versions, Editor build and image
-hashes are recorded in [the capture manifest](./assets/screenshots/capture-20261025.json).
+hashes are recorded in [the capture manifest](./assets/screenshots/localized-descriptions-20261025.json).
 
 ## How it fits together
 
@@ -193,6 +193,29 @@ or a file timestamp.
 
 Run modes remain selectable while metadata is still loading.
 
+### Localized extension descriptions
+
+The dialog reads optional language-tagged header comments, without evaluating extension code:
+
+```js
+// Description: Share one camera stream between extensions.
+// Description[ja]: 1つのカメラ映像を複数の機能拡張で共有します。
+// Description[ja-JP]: 日本語の説明（日本向け）。
+```
+
+Tags are case-insensitive. Display selection uses the exact Editor locale, then its base
+language, then the original `Description`. A locale change updates the text without refetching
+source or changing permission choices. Missing translations keep existing extensions compatible.
+Only the enclosing header is used; bundled member notices cannot supply its translation.
+HTML-looking text is rendered as text. The optional `ExtensionMetadata.descriptions` record uses
+lowercase keys, and `getExtensionDescription(metadata, locale)` exposes the same lookup.
+
+The public Editor and the three published bundles shown above support localized descriptions.
+The English capture uses each original `Description`; the Japanese capture uses `Description[ja]`.
+Extensions without a matching translation retain their original description. The selected language
+does not change required modes or permission choices. Updating a package does not replace code
+already embedded in an existing SB3.
+
 ## Choosing a run mode
 
 Per-row choices, the bulk choices and the list heading are ordered: **Deny** (prohibition
@@ -252,8 +275,8 @@ own security policy take precedence.
 ## Development and verification
 
 ```sh
-npm install
-npm test
+pnpm install
+pnpm test
 ```
 
 GUI integration additionally verifies display and storage after a real-VM denial, the

package/dist/index.cjs

@@ -47,6 +47,7 @@ __export(index_exports, {
   encodeChoices: () => encodeChoices,
   fingerprint: () => fingerprint,
   formatMessage: () => formatMessage,
+  getExtensionDescription: () => getExtensionDescription,
   getGitHubRepository: () => getGitHubRepository,
   getPreviewCandidates: () => getPreviewCandidates,
   loadExtensionInfo: () => loadExtensionInfo,
@@ -125,6 +126,19 @@ var parseExtensionMetadata = (source) => {
   };
   const header = source.slice(0, 16384).match(/^\s*(?:(?:\/\/[^\n]*(?:\n|$))|(?:\/\*[\s\S]*?\*\/)\s*)*/)[0];
   for (const line of header.split("\n")) {
+    if (/^\s*(?:\/\/|\/\*|\*)\s*Bundled extensions:\s*$/i.test(line)) break;
+    const localized = /^\s*(?:\/\/|\/\*|\*) ?Description\[([a-z]{2,8}(?:-[a-z0-9]{1,8})*)\]:\s*(.*?)\s*(?:\*\/)?$/i.exec(line);
+    if (localized) {
+      const locale = localized[1].toLowerCase();
+      const description = localized[2].slice(0, 1e3);
+      if (description.trim() && !/[\r\n\u2028\u2029]/.test(description)) {
+        if (!metadata.descriptions) metadata.descriptions = {};
+        if (!Object.prototype.hasOwnProperty.call(metadata.descriptions, locale)) {
+          metadata.descriptions[locale] = description;
+        }
+      }
+      continue;
+    }
     const match = /^\s*(?:\/\/|\/\*|\*)\s*([\w -]+):\s*(.*?)\s*(?:\*\/)?$/.exec(line);
     const field = match && Object.prototype.hasOwnProperty.call(fields, match[1].toLowerCase()) && fields[match[1].toLowerCase()];
     if (field && !Object.prototype.hasOwnProperty.call(metadata, field)) {
@@ -133,6 +147,18 @@ var parseExtensionMetadata = (source) => {
   }
   return metadata;
 };
+var getExtensionDescription = (metadata, locale) => {
+  const normalized = typeof locale === "string" ? locale.trim().toLowerCase() : "";
+  const descriptions = metadata.descriptions || {};
+  if (/^[a-z]{2,8}(?:-[a-z0-9]{1,8})*$/.test(normalized)) {
+    for (const candidate of [normalized, normalized.split("-")[0]]) {
+      if (Object.prototype.hasOwnProperty.call(descriptions, candidate) && typeof descriptions[candidate] === "string" && descriptions[candidate].trim()) {
+        return descriptions[candidate];
+      }
+    }
+  }
+  return metadata.description || "";
+};
 var decodeExtensionDataURL = (url) => {
   const comma = url.indexOf(",");
   if (comma < 0) throw new Error("Invalid extension data URL");

package/dist/index.d.ts

@@ -3,9 +3,11 @@ export interface ExtensionEntry { url: string; ids: string[]; banner?: string; }
 export interface ExtensionMetadata {
     name?: string; id?: string; description?: string; author?: string; version?: string; updatedAt?: string;
     license?: string; repository?: string; banner?: string; unsandboxed?: string;
+    descriptions?: Record<string, string>;
 }
 export interface ExtensionInfo { source: string; metadata: ExtensionMetadata; }
 export function parseExtensionMetadata(source: string): ExtensionMetadata;
+export function getExtensionDescription(metadata: ExtensionMetadata, locale?: string): string;
 export function decodeExtensionDataURL(url: string): string;
 export function loadExtensionInfo(url: string, signal: AbortSignal): Promise<ExtensionInfo>;
 export function getGitHubRepository(value?: string): string | null;

package/dist/index.mjs

@@ -80,6 +80,19 @@ var parseExtensionMetadata = (source) => {
   };
   const header = source.slice(0, 16384).match(/^\s*(?:(?:\/\/[^\n]*(?:\n|$))|(?:\/\*[\s\S]*?\*\/)\s*)*/)[0];
   for (const line of header.split("\n")) {
+    if (/^\s*(?:\/\/|\/\*|\*)\s*Bundled extensions:\s*$/i.test(line)) break;
+    const localized = /^\s*(?:\/\/|\/\*|\*) ?Description\[([a-z]{2,8}(?:-[a-z0-9]{1,8})*)\]:\s*(.*?)\s*(?:\*\/)?$/i.exec(line);
+    if (localized) {
+      const locale = localized[1].toLowerCase();
+      const description = localized[2].slice(0, 1e3);
+      if (description.trim() && !/[\r\n\u2028\u2029]/.test(description)) {
+        if (!metadata.descriptions) metadata.descriptions = {};
+        if (!Object.prototype.hasOwnProperty.call(metadata.descriptions, locale)) {
+          metadata.descriptions[locale] = description;
+        }
+      }
+      continue;
+    }
     const match = /^\s*(?:\/\/|\/\*|\*)\s*([\w -]+):\s*(.*?)\s*(?:\*\/)?$/.exec(line);
     const field = match && Object.prototype.hasOwnProperty.call(fields, match[1].toLowerCase()) && fields[match[1].toLowerCase()];
     if (field && !Object.prototype.hasOwnProperty.call(metadata, field)) {
@@ -88,6 +101,18 @@ var parseExtensionMetadata = (source) => {
   }
   return metadata;
 };
+var getExtensionDescription = (metadata, locale) => {
+  const normalized = typeof locale === "string" ? locale.trim().toLowerCase() : "";
+  const descriptions = metadata.descriptions || {};
+  if (/^[a-z]{2,8}(?:-[a-z0-9]{1,8})*$/.test(normalized)) {
+    for (const candidate of [normalized, normalized.split("-")[0]]) {
+      if (Object.prototype.hasOwnProperty.call(descriptions, candidate) && typeof descriptions[candidate] === "string" && descriptions[candidate].trim()) {
+        return descriptions[candidate];
+      }
+    }
+  }
+  return metadata.description || "";
+};
 var decodeExtensionDataURL = (url) => {
   const comma = url.indexOf(",");
   if (comma < 0) throw new Error("Invalid extension data URL");
@@ -347,6 +372,7 @@ export {
   encodeChoices,
   fingerprint,
   formatMessage,
+  getExtensionDescription,
   getGitHubRepository,
   getPreviewCandidates,
   loadExtensionInfo,

package/dist/react.cjs

@@ -286,6 +286,19 @@ var parseExtensionMetadata = (source) => {
   };
   const header = source.slice(0, 16384).match(/^\s*(?:(?:\/\/[^\n]*(?:\n|$))|(?:\/\*[\s\S]*?\*\/)\s*)*/)[0];
   for (const line of header.split("\n")) {
+    if (/^\s*(?:\/\/|\/\*|\*)\s*Bundled extensions:\s*$/i.test(line)) break;
+    const localized = /^\s*(?:\/\/|\/\*|\*) ?Description\[([a-z]{2,8}(?:-[a-z0-9]{1,8})*)\]:\s*(.*?)\s*(?:\*\/)?$/i.exec(line);
+    if (localized) {
+      const locale = localized[1].toLowerCase();
+      const description = localized[2].slice(0, 1e3);
+      if (description.trim() && !/[\r\n\u2028\u2029]/.test(description)) {
+        if (!metadata.descriptions) metadata.descriptions = {};
+        if (!Object.prototype.hasOwnProperty.call(metadata.descriptions, locale)) {
+          metadata.descriptions[locale] = description;
+        }
+      }
+      continue;
+    }
     const match = /^\s*(?:\/\/|\/\*|\*)\s*([\w -]+):\s*(.*?)\s*(?:\*\/)?$/.exec(line);
     const field = match && Object.prototype.hasOwnProperty.call(fields, match[1].toLowerCase()) && fields[match[1].toLowerCase()];
     if (field && !Object.prototype.hasOwnProperty.call(metadata, field)) {
@@ -294,6 +307,18 @@ var parseExtensionMetadata = (source) => {
   }
   return metadata;
 };
+var getExtensionDescription = (metadata, locale) => {
+  const normalized = typeof locale === "string" ? locale.trim().toLowerCase() : "";
+  const descriptions = metadata.descriptions || {};
+  if (/^[a-z]{2,8}(?:-[a-z0-9]{1,8})*$/.test(normalized)) {
+    for (const candidate of [normalized, normalized.split("-")[0]]) {
+      if (Object.prototype.hasOwnProperty.call(descriptions, candidate) && typeof descriptions[candidate] === "string" && descriptions[candidate].trim()) {
+        return descriptions[candidate];
+      }
+    }
+  }
+  return metadata.description || "";
+};
 var decodeExtensionDataURL = (url) => {
   const comma = url.indexOf(",");
   if (comma < 0) throw new Error("Invalid extension data URL");
@@ -637,6 +662,7 @@ var ExtensionSecurityDialog = class extends import_react2.default.Component {
   renderRow(entry, index) {
     const row = this.state.rows[entry.url] || {};
     const metadata = row.metadata || {};
+    const description = getExtensionDescription(metadata, this.props.locale);
     const required = requiresUnsandboxed(metadata);
     const reasonId = `extension-mode-reason-${index}`;
     const requiredId = `extension-mode-required-${index}`;
@@ -679,7 +705,7 @@ var ExtensionSecurityDialog = class extends import_react2.default.Component {
           "data-index": index,
           onError: this.handleImageError
         }
-      ), /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.info }, /* @__PURE__ */ import_react2.default.createElement("strong", null, name), /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("id", { id: metadata.id || entry.ids.join(", ") })), metadata.version && /* @__PURE__ */ import_react2.default.createElement("span", { className: style_names_default.version }, `v${metadata.version}`), metadata.author && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("author", { author: metadata.author })), metadata.updatedAt && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("updated", { updated: metadata.updatedAt })), metadata.description && /* @__PURE__ */ import_react2.default.createElement("div", null, metadata.description), metadata.license && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("license", { license: metadata.license })), /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, sourceLink), !row.status && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("pending")), row.status === "failed" && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.error }, this.t("failed")), required && /* @__PURE__ */ import_react2.default.createElement("div", { id: reasonId, className: style_names_default.warningText }, this.t("required")), row.invalidated && !this.state.choices[entry.url] && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.warningText, role: "status" }, this.t("choiceReset")))), MODES.map((mode) => /* @__PURE__ */ import_react2.default.createElement(
+      ), /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.info }, /* @__PURE__ */ import_react2.default.createElement("strong", null, name), /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("id", { id: metadata.id || entry.ids.join(", ") })), metadata.version && /* @__PURE__ */ import_react2.default.createElement("span", { className: style_names_default.version }, `v${metadata.version}`), metadata.author && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("author", { author: metadata.author })), metadata.updatedAt && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("updated", { updated: metadata.updatedAt })), description && /* @__PURE__ */ import_react2.default.createElement("div", null, description), metadata.license && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("license", { license: metadata.license })), /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, sourceLink), !row.status && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.secondary }, this.t("pending")), row.status === "failed" && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.error }, this.t("failed")), required && /* @__PURE__ */ import_react2.default.createElement("div", { id: reasonId, className: style_names_default.warningText }, this.t("required")), row.invalidated && !this.state.choices[entry.url] && /* @__PURE__ */ import_react2.default.createElement("div", { className: style_names_default.warningText, role: "status" }, this.t("choiceReset")))), MODES.map((mode) => /* @__PURE__ */ import_react2.default.createElement(
         "label",
         {
           className: style_names_default.choice,

package/dist/react.mjs

@@ -255,6 +255,19 @@ var parseExtensionMetadata = (source) => {
   };
   const header = source.slice(0, 16384).match(/^\s*(?:(?:\/\/[^\n]*(?:\n|$))|(?:\/\*[\s\S]*?\*\/)\s*)*/)[0];
   for (const line of header.split("\n")) {
+    if (/^\s*(?:\/\/|\/\*|\*)\s*Bundled extensions:\s*$/i.test(line)) break;
+    const localized = /^\s*(?:\/\/|\/\*|\*) ?Description\[([a-z]{2,8}(?:-[a-z0-9]{1,8})*)\]:\s*(.*?)\s*(?:\*\/)?$/i.exec(line);
+    if (localized) {
+      const locale = localized[1].toLowerCase();
+      const description = localized[2].slice(0, 1e3);
+      if (description.trim() && !/[\r\n\u2028\u2029]/.test(description)) {
+        if (!metadata.descriptions) metadata.descriptions = {};
+        if (!Object.prototype.hasOwnProperty.call(metadata.descriptions, locale)) {
+          metadata.descriptions[locale] = description;
+        }
+      }
+      continue;
+    }
     const match = /^\s*(?:\/\/|\/\*|\*)\s*([\w -]+):\s*(.*?)\s*(?:\*\/)?$/.exec(line);
     const field = match && Object.prototype.hasOwnProperty.call(fields, match[1].toLowerCase()) && fields[match[1].toLowerCase()];
     if (field && !Object.prototype.hasOwnProperty.call(metadata, field)) {
@@ -263,6 +276,18 @@ var parseExtensionMetadata = (source) => {
   }
   return metadata;
 };
+var getExtensionDescription = (metadata, locale) => {
+  const normalized = typeof locale === "string" ? locale.trim().toLowerCase() : "";
+  const descriptions = metadata.descriptions || {};
+  if (/^[a-z]{2,8}(?:-[a-z0-9]{1,8})*$/.test(normalized)) {
+    for (const candidate of [normalized, normalized.split("-")[0]]) {
+      if (Object.prototype.hasOwnProperty.call(descriptions, candidate) && typeof descriptions[candidate] === "string" && descriptions[candidate].trim()) {
+        return descriptions[candidate];
+      }
+    }
+  }
+  return metadata.description || "";
+};
 var decodeExtensionDataURL = (url) => {
   const comma = url.indexOf(",");
   if (comma < 0) throw new Error("Invalid extension data URL");
@@ -606,6 +631,7 @@ var ExtensionSecurityDialog = class extends React2.Component {
   renderRow(entry, index) {
     const row = this.state.rows[entry.url] || {};
     const metadata = row.metadata || {};
+    const description = getExtensionDescription(metadata, this.props.locale);
     const required = requiresUnsandboxed(metadata);
     const reasonId = `extension-mode-reason-${index}`;
     const requiredId = `extension-mode-required-${index}`;
@@ -648,7 +674,7 @@ var ExtensionSecurityDialog = class extends React2.Component {
           "data-index": index,
           onError: this.handleImageError
         }
-      ), /* @__PURE__ */ React2.createElement("div", { className: style_names_default.info }, /* @__PURE__ */ React2.createElement("strong", null, name), /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("id", { id: metadata.id || entry.ids.join(", ") })), metadata.version && /* @__PURE__ */ React2.createElement("span", { className: style_names_default.version }, `v${metadata.version}`), metadata.author && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("author", { author: metadata.author })), metadata.updatedAt && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("updated", { updated: metadata.updatedAt })), metadata.description && /* @__PURE__ */ React2.createElement("div", null, metadata.description), metadata.license && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("license", { license: metadata.license })), /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, sourceLink), !row.status && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("pending")), row.status === "failed" && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.error }, this.t("failed")), required && /* @__PURE__ */ React2.createElement("div", { id: reasonId, className: style_names_default.warningText }, this.t("required")), row.invalidated && !this.state.choices[entry.url] && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.warningText, role: "status" }, this.t("choiceReset")))), MODES.map((mode) => /* @__PURE__ */ React2.createElement(
+      ), /* @__PURE__ */ React2.createElement("div", { className: style_names_default.info }, /* @__PURE__ */ React2.createElement("strong", null, name), /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("id", { id: metadata.id || entry.ids.join(", ") })), metadata.version && /* @__PURE__ */ React2.createElement("span", { className: style_names_default.version }, `v${metadata.version}`), metadata.author && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("author", { author: metadata.author })), metadata.updatedAt && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("updated", { updated: metadata.updatedAt })), description && /* @__PURE__ */ React2.createElement("div", null, description), metadata.license && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("license", { license: metadata.license })), /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, sourceLink), !row.status && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.secondary }, this.t("pending")), row.status === "failed" && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.error }, this.t("failed")), required && /* @__PURE__ */ React2.createElement("div", { id: reasonId, className: style_names_default.warningText }, this.t("required")), row.invalidated && !this.state.choices[entry.url] && /* @__PURE__ */ React2.createElement("div", { className: style_names_default.warningText, role: "status" }, this.t("choiceReset")))), MODES.map((mode) => /* @__PURE__ */ React2.createElement(
         "label",
         {
           className: style_names_default.choice,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubohiroya/turbowarp-extension-security-dialog",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Batch extension security review, previews and per-project defaults for TurboWarp hosts",
   "type": "module",
   "license": "GPL-3.0-only",
@@ -20,9 +20,10 @@
   "files": ["dist", "react.js", "turbowarp.js", "styles.css", "webpack4.css", "README.md", "README.ja.md", "NOTICE.md", "LICENSE"],
   "scripts": {
     "build": "node scripts/build.mjs",
-    "test": "npm run build && node --test test/*.test.cjs",
-    "prepack": "npm run build",
-    "prepare": "npm run build"
+    "test": "pnpm run build && node --test test/*.test.cjs",
+    "check": "pnpm run test && npm pack --dry-run --ignore-scripts",
+    "prepack": "pnpm run build",
+    "prepare": "pnpm run build"
   },
   "dependencies": {"@turbowarp/jszip": "3.11.1"},
   "peerDependencies": {"react": "^16.14.0 || ^17 || ^18 || ^19", "react-dom": "^16.14.0 || ^17 || ^18 || ^19"},
@@ -33,6 +34,7 @@
     "react": "16.14.0",
     "react-dom": "16.14.0"
   },
-  "engines": {"node": ">=22"},
+  "packageManager": "pnpm@11.28.8",
+  "engines": {"node": ">=24"},
   "publishConfig": {"access": "public"}
 }