@kubohiroya/turbowarp-extension-security-dialog 0.3.1 → 0.3.2

package/README.ja.md

@@ -64,8 +64,8 @@ JSONのメタデータを直ちに表示し、選択一覧には「詳細」やJ
 共通化した画像・サービスリンク・実行条件には `entry.metadata` と取得したソースのメタデータを使用します。
 どちらか一方でも `unsandboxed: required` なら必要条件を維持し、バッジ・選択可能なモード・非対応選択の解除・
 一括初期選択で同じ判断をします。セキュリティ確認のOKは、従来どおりソースのメタデータ取得の成功／失敗が確定するまで待ちます。
-それ以外の表示は今回変更せず、セキュリティ確認はソースヘッダーのバージョン・リンクのない製作者名・出所URLを維持し、
-選択一覧はカタログのバージョン・明示された製作者リンク・ドキュメントURLを維持します。
+セキュリティ確認はソースヘッダーのバージョン・明示された製作者リンクとドキュメントリンク・出所URLを使用します。
+URLがない製作者名は通常の文字で表示し、選択一覧はカタログのバージョンとリンクを使用します。
 `entry.category` があれば両画面で同じ順序・日英見出しにし、カテゴリのないプロジェクトでは取得や推測をせず平坦な一覧を維持します。
 
 
@@ -255,7 +255,11 @@ coreとVMアダプターの利用にReact/React DOMは必要ありません。
 ## メタデータとプレビュー
 
 セキュリティ確認ではHTTP/HTTPSの出所URLを別行に完全なURLで表示し、別タブで開きます。
-埋め込み拡張や他のスキームはリンクにしません。選択一覧は従来どおりドキュメントURLを表示し、JS配布URLは表示しません。
+埋め込みソースのURLや他のスキームは出所リンクにしません。選択一覧は従来どおりドキュメントURLを表示し、JS配布URLは表示しません。
+埋め込みバンドルは先頭ヘッダーへ `// Author URL: https://example.org/creator`、
+`// Docs URL: https://example.org/docs/`、`// Package: @example/bundle` を宣言できます。
+セキュリティ確認にも、`By` / `Author` と組にした製作者リンク、HTTPSのドキュメントリンク、npmアイコンを表示します。
+`Repository`・`Banner`・`Version`・日英説明も共通の表示部品を使用し、内包メンバーのnoticeからバンドル自身の情報を補いません。
 ソース先頭の宣言コメントに `// Updated: 2026-10-19T10:30:00+09:00` などの更新日時がある場合、
 記載値をそのまま表示します。`Updated at` / `Updated-at` / `UpdatedAt` / `Last updated` / `Last-updated` /
 `Last modified` / `Last-modified` も同じ項目です。カスタム `loadInfo` は `metadata.updatedAt` を返せます。

package/README.md

@@ -167,9 +167,15 @@ Spacing tightens on short viewports.
 ## Metadata and previews
 
 The security dialog retains its HTTP/HTTPS source-origin URL as a separate provenance line,
-opening in a new tab. Embedded extensions and other schemes are not linked. The selection
+opening in a new tab. Embedded source URLs and other schemes are not linked. The selection
 list keeps its documentation URL instead; it never displays the JavaScript distribution URL.
 
+Embedded bundles can declare `// Author URL: https://example.org/creator`,
+`// Docs URL: https://example.org/docs/` and `// Package: @example/bundle` in the leading
+header. Security review displays the declared creator link (with `By`/`Author`), HTTPS
+documentation link and npm icon. `Repository`, `Banner`, `Version` and localized descriptions
+use the same package renderer. Bundle member notices do not supply the bundle's own fields.
+
 If the leading declaration comment in the source carries an update timestamp such as
 `// Updated: 2026-10-19T10:30:00+09:00`, the written value is displayed verbatim.
 `Updated at` / `Updated-at` / `UpdatedAt` / `Last updated` / `Last-updated` / `Last modified` /
@@ -306,10 +312,9 @@ For shared images, service links and execution requirements, optional `entry.met
 complements the fetched source metadata. If either declares `unsandboxed: required`, the
 shared badge, allowed choices, invalidation and batch defaults all honor that requirement.
 Security still waits for source metadata to settle (success or failure) before accepting OK;
-fetching declarations never executes the code. Its source-header version, plain creator
-label and source provenance stay as before. Selection keeps catalog versions, explicit
-creator links and documentation links. Those unrequested presentation differences are not
-changed by the shared renderer. Supplied `entry.category` is rendered in either view;
+fetching declarations never executes the code. Security uses the source-header version,
+explicit creator/documentation links and source provenance; a creator without a URL stays
+plain text. Selection keeps catalog versions and links. Supplied `entry.category` is rendered in either view;
 category-free project entries stay flat without any catalog lookup or inferred category.
 
 

package/dist/index.cjs

@@ -110,6 +110,9 @@ var parseExtensionMetadata = (source) => {
     description: "description",
     author: "author",
     by: "author",
+    authorurl: "authorURL",
+    "author url": "authorURL",
+    "author-url": "authorURL",
     version: "version",
     updated: "updatedAt",
     updatedat: "updatedAt",
@@ -122,6 +125,10 @@ var parseExtensionMetadata = (source) => {
     license: "license",
     repository: "repository",
     source: "repository",
+    docsurl: "docsURL",
+    "docs url": "docsURL",
+    "docs-url": "docsURL",
+    package: "package",
     banner: "banner",
     thumbnail: "banner",
     image: "banner",

package/dist/index.mjs

@@ -61,6 +61,9 @@ var parseExtensionMetadata = (source) => {
     description: "description",
     author: "author",
     by: "author",
+    authorurl: "authorURL",
+    "author url": "authorURL",
+    "author-url": "authorURL",
     version: "version",
     updated: "updatedAt",
     updatedat: "updatedAt",
@@ -73,6 +76,10 @@ var parseExtensionMetadata = (source) => {
     license: "license",
     repository: "repository",
     source: "repository",
+    docsurl: "docsURL",
+    "docs url": "docsURL",
+    "docs-url": "docsURL",
+    package: "package",
     banner: "banner",
     thumbnail: "banner",
     image: "banner",

package/dist/react.cjs

@@ -93,6 +93,9 @@ var parseExtensionMetadata = (source) => {
     description: "description",
     author: "author",
     by: "author",
+    authorurl: "authorURL",
+    "author url": "authorURL",
+    "author-url": "authorURL",
     version: "version",
     updated: "updatedAt",
     updatedat: "updatedAt",
@@ -105,6 +108,10 @@ var parseExtensionMetadata = (source) => {
     license: "license",
     repository: "repository",
     source: "repository",
+    docsurl: "docsURL",
+    "docs url": "docsURL",
+    "docs-url": "docsURL",
+    package: "package",
     banner: "banner",
     thumbnail: "banner",
     image: "banner",
@@ -982,9 +989,9 @@ var ExtensionSecurityDialog = class extends import_react4.default.Component {
           previewIndex: row.previewIndex,
           status: row.status,
           onImageError: this.handleImageError,
-          linkCreator: Boolean(selection),
+          linkCreator: Boolean(selection || metadata.author && metadata.authorURL),
           showMissingMetadata: Boolean(selection),
-          documentation: Boolean(selection),
+          documentation: Boolean(selection || metadata.docsURL),
           provenance: !selection && /* @__PURE__ */ import_react4.default.createElement("div", { className: style_names_default.secondary }, sourceLink)
         },
         selection && /* @__PURE__ */ import_react4.default.createElement("div", { className: style_names_default.selectionStatus }, /* @__PURE__ */ import_react4.default.createElement("span", { className: style_names_default.selectionBadge, id: `${idPrefix}-state-${index}` }, /* @__PURE__ */ import_react4.default.createElement(SelectionIcon, { state: selection.state }), this.t(`${selection.state}State`)), selection.dependencyReason && /* @__PURE__ */ import_react4.default.createElement(

package/dist/react.mjs

@@ -61,6 +61,9 @@ var parseExtensionMetadata = (source) => {
     description: "description",
     author: "author",
     by: "author",
+    authorurl: "authorURL",
+    "author url": "authorURL",
+    "author-url": "authorURL",
     version: "version",
     updated: "updatedAt",
     updatedat: "updatedAt",
@@ -73,6 +76,10 @@ var parseExtensionMetadata = (source) => {
     license: "license",
     repository: "repository",
     source: "repository",
+    docsurl: "docsURL",
+    "docs url": "docsURL",
+    "docs-url": "docsURL",
+    package: "package",
     banner: "banner",
     thumbnail: "banner",
     image: "banner",
@@ -950,9 +957,9 @@ var ExtensionSecurityDialog = class extends React4.Component {
           previewIndex: row.previewIndex,
           status: row.status,
           onImageError: this.handleImageError,
-          linkCreator: Boolean(selection),
+          linkCreator: Boolean(selection || metadata.author && metadata.authorURL),
           showMissingMetadata: Boolean(selection),
-          documentation: Boolean(selection),
+          documentation: Boolean(selection || metadata.docsURL),
           provenance: !selection && /* @__PURE__ */ React4.createElement("div", { className: style_names_default.secondary }, sourceLink)
         },
         selection && /* @__PURE__ */ React4.createElement("div", { className: style_names_default.selectionStatus }, /* @__PURE__ */ React4.createElement("span", { className: style_names_default.selectionBadge, id: `${idPrefix}-state-${index}` }, /* @__PURE__ */ React4.createElement(SelectionIcon, { state: selection.state }), this.t(`${selection.state}State`)), selection.dependencyReason && /* @__PURE__ */ React4.createElement(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubohiroya/turbowarp-extension-security-dialog",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Batch extension security review, previews and per-project defaults for TurboWarp hosts",
   "type": "module",
   "author": {