@opentabs-dev/browser-extension 0.0.34

package/dist/sanitize-svg.js

@@ -0,0 +1,296 @@
+/**
+ * SVG sanitizer for plugin icons rendered via dangerouslySetInnerHTML.
+ *
+ * Uses an element/attribute allowlist approach — only known-safe SVG elements
+ * and attributes are preserved. Everything else is stripped. This prevents XSS
+ * vectors including <script>, <foreignObject>, event handler attributes,
+ * javascript: URIs, and CSS-based attacks.
+ *
+ * Runs in the side panel context (browser DOM available) and is also testable
+ * in Bun's test runner (no DOM dependency — pure string processing).
+ */
+// Elements allowed in plugin SVG icons (covers common icon shapes and styling)
+const ALLOWED_ELEMENTS = new Set([
+    'svg',
+    'path',
+    'circle',
+    'ellipse',
+    'rect',
+    'line',
+    'polyline',
+    'polygon',
+    'g',
+    'defs',
+    'clippath',
+    'mask',
+    'lineargradient',
+    'radialgradient',
+    'stop',
+    'text',
+    'tspan',
+    'use',
+    'symbol',
+    'title',
+    'desc',
+]);
+// Attributes allowed on SVG elements (covers geometry, styling, transforms)
+const ALLOWED_ATTRIBUTES = new Set([
+    // Core SVG attributes
+    'viewbox',
+    'xmlns',
+    'xmlns:xlink',
+    'version',
+    'id',
+    'class',
+    // Geometry
+    'd',
+    'cx',
+    'cy',
+    'r',
+    'rx',
+    'ry',
+    'x',
+    'x1',
+    'x2',
+    'y',
+    'y1',
+    'y2',
+    'width',
+    'height',
+    'points',
+    // Presentation
+    'fill',
+    'fill-opacity',
+    'fill-rule',
+    'stroke',
+    'stroke-dasharray',
+    'stroke-dashoffset',
+    'stroke-linecap',
+    'stroke-linejoin',
+    'stroke-miterlimit',
+    'stroke-opacity',
+    'stroke-width',
+    'opacity',
+    'color',
+    'display',
+    'visibility',
+    // Text
+    'font-family',
+    'font-size',
+    'font-style',
+    'font-variant',
+    'font-weight',
+    'text-anchor',
+    'text-decoration',
+    'dominant-baseline',
+    'alignment-baseline',
+    'letter-spacing',
+    'word-spacing',
+    'dx',
+    'dy',
+    'rotate',
+    'textlength',
+    'lengthadjust',
+    // Transform and clipping
+    'transform',
+    'clip-path',
+    'clip-rule',
+    'mask',
+    // Gradient-specific
+    'offset',
+    'stop-color',
+    'stop-opacity',
+    'gradientunits',
+    'gradienttransform',
+    'spreadmethod',
+    // Use/href (validated separately for safe values)
+    'href',
+    'xlink:href',
+    // Overflow/aspect
+    'overflow',
+    'preserveaspectratio',
+    // Marker
+    'marker-start',
+    'marker-mid',
+    'marker-end',
+    // Filter (references only)
+    'filter',
+    'flood-color',
+    'flood-opacity',
+    // Style (validated separately for safe values)
+    'style',
+]);
+/** Returns true if a URI value is a safe internal reference (e.g., #id, url(#id)). */
+const isSafeUri = (value) => {
+    const trimmed = value.trim();
+    // Internal fragment references are safe
+    if (trimmed.startsWith('#'))
+        return true;
+    // Empty string is safe
+    if (trimmed === '')
+        return true;
+    // Block javascript:, data:, and any other protocol URIs
+    return false;
+};
+/** Returns true if a style attribute value contains only safe CSS properties. */
+const isSafeStyle = (value) => {
+    // Block any url() references except #fragment
+    const urlPattern = /url\s*\(\s*(?:["']?\s*)(.*?)(?:\s*["']?\s*)\)/gi;
+    let urlMatch;
+    while ((urlMatch = urlPattern.exec(value)) !== null) {
+        const url = (urlMatch[1] ?? '').trim();
+        if (!url.startsWith('#'))
+            return false;
+    }
+    // Block expression(), -moz-binding, and behavior CSS properties
+    if (/expression\s*\(/i.test(value))
+        return false;
+    if (/-moz-binding/i.test(value))
+        return false;
+    if (/behavior\s*:/i.test(value))
+        return false;
+    // Block javascript: in any property value
+    if (/javascript\s*:/i.test(value))
+        return false;
+    return true;
+};
+/** Parse an attribute string like `key="value"` or `key='value'` or `key` */
+const parseAttributes = (attrString) => {
+    const attrs = [];
+    // Match: name="value", name='value', or standalone name
+    const attrRegex = /([a-z][a-z0-9:_-]*)\s*(?:=\s*(?:"([^"]*)"|'([^']*)'))?/gi;
+    let match;
+    while ((match = attrRegex.exec(attrString)) !== null) {
+        const name = match[1] ?? '';
+        const value = match[2] ?? match[3] ?? '';
+        attrs.push({ name, value, raw: match[0] });
+    }
+    return attrs;
+};
+/** Tokenize SVG markup into tags and text */
+const tokenize = (svg) => {
+    const tokens = [];
+    // Match opening/closing/self-closing tags and comments
+    const tagRegex = /<!--[\s\S]*?-->|<\/?([a-z][a-z0-9]*)((?:\s+[a-z][a-z0-9:_-]*(?:\s*=\s*(?:"[^"]*"|'[^']*'))?)*)\s*(\/?)>/gi;
+    let lastIndex = 0;
+    let tagMatch;
+    while ((tagMatch = tagRegex.exec(svg)) !== null) {
+        // Text content before this tag
+        if (tagMatch.index > lastIndex) {
+            tokens.push({ type: 'text', content: svg.slice(lastIndex, tagMatch.index) });
+        }
+        const raw = tagMatch[0];
+        // Skip comments entirely
+        if (raw.startsWith('<!--')) {
+            lastIndex = tagRegex.lastIndex;
+            continue;
+        }
+        const tagName = tagMatch[1] ?? '';
+        const attrString = tagMatch[2] ?? '';
+        const selfClosing = tagMatch[3] === '/';
+        const isClosing = raw.startsWith('</');
+        if (isClosing) {
+            tokens.push({ type: 'close', raw, tagName, attributes: [] });
+        }
+        else if (selfClosing) {
+            tokens.push({ type: 'self-closing', raw, tagName, attributes: parseAttributes(attrString) });
+        }
+        else {
+            tokens.push({ type: 'open', raw, tagName, attributes: parseAttributes(attrString) });
+        }
+        lastIndex = tagRegex.lastIndex;
+    }
+    // Trailing text
+    if (lastIndex < svg.length) {
+        tokens.push({ type: 'text', content: svg.slice(lastIndex) });
+    }
+    return tokens;
+};
+/**
+ * Reconstruct an SVG tag from allowed attributes only.
+ * Returns the sanitized tag string.
+ */
+const buildTag = (tagName, attributes, selfClosing) => {
+    const parts = [tagName];
+    for (const attr of attributes) {
+        // Double-quote the value, escaping any embedded quotes
+        const escapedValue = attr.value.replace(/&/g, '&amp;').replace(/"/g, '&quot;');
+        parts.push(`${attr.name}="${escapedValue}"`);
+    }
+    const inner = parts.join(' ');
+    return selfClosing ? `<${inner}/>` : `<${inner}>`;
+};
+/**
+ * Sanitize an SVG string by stripping all elements and attributes not on the allowlist.
+ *
+ * Returns the sanitized SVG string safe for use with dangerouslySetInnerHTML.
+ * Returns an empty string for non-string or empty input.
+ */
+const sanitizeSvg = (svg) => {
+    if (!svg || typeof svg !== 'string')
+        return '';
+    const tokens = tokenize(svg);
+    const result = [];
+    // Track which elements are currently stripped (to strip their children too)
+    let strippedDepth = 0;
+    for (const token of tokens) {
+        if (token.type === 'text') {
+            if (strippedDepth === 0) {
+                result.push(token.content);
+            }
+            continue;
+        }
+        const tagNameLower = token.tagName.toLowerCase();
+        if (token.type === 'close') {
+            if (strippedDepth > 0) {
+                strippedDepth--;
+                continue;
+            }
+            if (ALLOWED_ELEMENTS.has(tagNameLower)) {
+                result.push(`</${token.tagName}>`);
+            }
+            continue;
+        }
+        // Open or self-closing tag
+        if (!ALLOWED_ELEMENTS.has(tagNameLower)) {
+            if (token.type === 'open') {
+                strippedDepth++;
+            }
+            // Self-closing disallowed tags are just dropped
+            continue;
+        }
+        if (strippedDepth > 0) {
+            // Inside a stripped subtree — skip this element and its children
+            if (token.type === 'open') {
+                strippedDepth++;
+            }
+            continue;
+        }
+        // Filter attributes
+        const safeAttrs = [];
+        for (const attr of token.attributes) {
+            const attrNameLower = attr.name.toLowerCase();
+            // Skip any event handler attributes (on*)
+            if (attrNameLower.startsWith('on'))
+                continue;
+            // Skip attributes not on the allowlist
+            if (!ALLOWED_ATTRIBUTES.has(attrNameLower))
+                continue;
+            // Validate href/xlink:href — only allow internal fragment references
+            if (attrNameLower === 'href' || attrNameLower === 'xlink:href') {
+                if (!isSafeUri(attr.value))
+                    continue;
+            }
+            // Validate style attribute content
+            if (attrNameLower === 'style') {
+                if (!isSafeStyle(attr.value))
+                    continue;
+            }
+            safeAttrs.push({ name: attr.name, value: attr.value });
+        }
+        result.push(buildTag(token.tagName, safeAttrs, token.type === 'self-closing'));
+    }
+    return result.join('');
+};
+export { sanitizeSvg };
+//# sourceMappingURL=sanitize-svg.js.map

package/dist/sanitize-svg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-svg.js","sourceRoot":"","sources":["../src/sanitize-svg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,KAAK;IACL,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,UAAU;IACV,SAAS;IACT,GAAG;IACH,MAAM;IACN,UAAU;IACV,MAAM;IACN,gBAAgB;IAChB,gBAAgB;IAChB,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;IACR,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,sBAAsB;IACtB,SAAS;IACT,OAAO;IACP,aAAa;IACb,SAAS;IACT,IAAI;IACJ,OAAO;IACP,WAAW;IACX,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,MAAM;IACN,cAAc;IACd,WAAW;IACX,QAAQ;IACR,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,cAAc;IACd,SAAS;IACT,OAAO;IACP,SAAS;IACT,YAAY;IACZ,OAAO;IACP,aAAa;IACb,WAAW;IACX,YAAY;IACZ,cAAc;IACd,aAAa;IACb,aAAa;IACb,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,gBAAgB;IAChB,cAAc;IACd,IAAI;IACJ,IAAI;IACJ,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,yBAAyB;IACzB,WAAW;IACX,WAAW;IACX,WAAW;IACX,MAAM;IACN,oBAAoB;IACpB,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,eAAe;IACf,mBAAmB;IACnB,cAAc;IACd,kDAAkD;IAClD,MAAM;IACN,YAAY;IACZ,kBAAkB;IAClB,UAAU;IACV,qBAAqB;IACrB,SAAS;IACT,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,2BAA2B;IAC3B,QAAQ;IACR,aAAa;IACb,eAAe;IACf,+CAA+C;IAC/C,OAAO;CACR,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAW,EAAE;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,wCAAwC;IACxC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,uBAAuB;IACvB,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,wDAAwD;IACxD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,WAAW,GAAG,CAAC,KAAa,EAAW,EAAE;IAC7C,8CAA8C;IAC9C,MAAM,UAAU,GAAG,iDAAiD,CAAC;IACrE,IAAI,QAAQ,CAAC;IACb,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACzC,CAAC;IACD,gEAAgE;IAChE,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,0CAA0C;IAC1C,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAoBF,6EAA6E;AAC7E,MAAM,eAAe,GAAG,CAAC,UAAkB,EAAuD,EAAE;IAClG,MAAM,KAAK,GAAwD,EAAE,CAAC;IACtE,wDAAwD;IACxD,MAAM,SAAS,GAAG,0DAA0D,CAAC;IAC7E,IAAI,KAAK,CAAC;IACV,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,6CAA6C;AAC7C,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAW,EAAE;IACxC,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,uDAAuD;IACvD,MAAM,QAAQ,GACZ,2GAA2G,CAAC;IAC9G,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,IAAI,QAAQ,CAAC;IACb,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,+BAA+B;QAC/B,IAAI,QAAQ,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,yBAAyB;QACzB,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QACxC,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACjC,CAAC;IAED,gBAAgB;IAChB,IAAI,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,QAAQ,GAAG,CACf,OAAe,EACf,UAAkD,EAClD,WAAoB,EACZ,EAAE;IACV,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,uDAAuD;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,YAAY,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC;AACpD,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,GAAG,CAAC,GAAW,EAAU,EAAE;IAC1C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAE/C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,4EAA4E;IAC5E,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAEjD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,aAAa,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;YACrC,CAAC;YACD,SAAS;QACX,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC1B,aAAa,EAAE,CAAC;YAClB,CAAC;YACD,gDAAgD;YAChD,SAAS;QACX,CAAC;QAED,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,iEAAiE;YACjE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC1B,aAAa,EAAE,CAAC;YAClB,CAAC;YACD,SAAS;QACX,CAAC;QAED,oBAAoB;QACpB,MAAM,SAAS,GAA2C,EAAE,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAE9C,0CAA0C;YAC1C,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAE7C,uCAAuC;YACvC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC;gBAAE,SAAS;YAErD,qEAAqE;YACrE,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,YAAY,EAAE,CAAC;gBAC/D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,SAAS;YACvC,CAAC;YAED,mCAAmC;YACnC,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,SAAS;YACzC,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC,CAAC;AAEF,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/side-panel/App.d.ts

@@ -0,0 +1,3 @@
+declare const App: () => import("react/jsx-runtime").JSX.Element;
+export { App };
+//# sourceMappingURL=App.d.ts.map

package/dist/side-panel/App.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../src/side-panel/App.tsx"],"names":[],"mappings":"AAqBA,QAAA,MAAM,GAAG,+CAqNR,CAAC;AAEF,OAAO,EAAE,GAAG,EAAE,CAAC"}

package/dist/side-panel/App.js

@@ -0,0 +1,147 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { getConnectionState, fetchConfigState, handleServerResponse, rejectAllPending, sendConfirmationResponse, } from './bridge.js';
+import { ConfirmationDialog } from './components/ConfirmationDialog.js';
+import { DisconnectedState, NoPluginsState, LoadingState } from './components/EmptyStates.js';
+import { Footer } from './components/Footer.js';
+import { PluginList } from './components/PluginList.js';
+import { Input } from './components/retro/Input.js';
+import { Tooltip } from './components/retro/Tooltip.js';
+import { useServerNotifications } from './hooks/useServerNotifications.js';
+import { Search, X } from 'lucide-react';
+import { useState, useEffect, useCallback, useRef } from 'react';
+const App = () => {
+    const [connected, setConnected] = useState(false);
+    const [disconnectReason, setDisconnectReason] = useState();
+    const [plugins, setPlugins] = useState([]);
+    const [failedPlugins, setFailedPlugins] = useState([]);
+    const [loading, setLoading] = useState(true);
+    const [activeTools, setActiveTools] = useState(new Set());
+    const [toolFilter, setToolFilter] = useState('');
+    const [pendingConfirmations, setPendingConfirmations] = useState([]);
+    const lastFetchRef = useRef(0);
+    const pendingTabStates = useRef(new Map());
+    const connectedRef = useRef(connected);
+    const loadingRef = useRef(loading);
+    const pluginsRef = useRef(plugins);
+    useEffect(() => {
+        connectedRef.current = connected;
+        loadingRef.current = loading;
+        pluginsRef.current = plugins;
+    }, [connected, loading, plugins]);
+    const loadPlugins = useCallback(() => {
+        const now = Date.now();
+        if (now - lastFetchRef.current < 200)
+            return;
+        lastFetchRef.current = now;
+        fetchConfigState()
+            .then(result => {
+            let updatedPlugins = result.plugins;
+            if (pendingTabStates.current.size > 0) {
+                updatedPlugins = updatedPlugins.map(p => {
+                    const buffered = pendingTabStates.current.get(p.name);
+                    return buffered ? { ...p, tabState: buffered } : p;
+                });
+                pendingTabStates.current.clear();
+            }
+            setPlugins(updatedPlugins);
+            setFailedPlugins(result.failedPlugins);
+        })
+            .catch(() => {
+            // Server may not be ready yet
+        });
+    }, []);
+    const { handleNotification, clearConfirmationTimeout } = useServerNotifications({
+        setPlugins,
+        setActiveTools,
+        setPendingConfirmations,
+        pendingTabStates,
+    });
+    useEffect(() => {
+        void getConnectionState().then(result => {
+            setConnected(result.connected);
+            setDisconnectReason(result.disconnectReason);
+            if (result.connected) {
+                loadPlugins();
+            }
+            setLoading(false);
+        });
+        const listener = (message, _sender, sendResponse) => {
+            if (message.type === 'sp:getState') {
+                const rootEl = document.getElementById('root');
+                const html = rootEl ? rootEl.innerHTML.slice(0, 50000) : '';
+                const currentPlugins = pluginsRef.current;
+                sendResponse({
+                    state: {
+                        connected: connectedRef.current,
+                        loading: loadingRef.current,
+                        pluginCount: currentPlugins.length,
+                        plugins: currentPlugins.map(p => ({ name: p.name, tabState: p.tabState })),
+                    },
+                    html,
+                });
+                return true;
+            }
+            if (message.type === 'sp:connectionState') {
+                const isConnected = message.data.connected;
+                setConnected(isConnected);
+                setDisconnectReason(isConnected ? undefined : message.data.disconnectReason);
+                if (isConnected) {
+                    loadPlugins();
+                }
+                else {
+                    setPlugins([]);
+                    setFailedPlugins([]);
+                    setActiveTools(new Set());
+                    setPendingConfirmations([]);
+                    rejectAllPending();
+                }
+                sendResponse({ ok: true });
+                return true;
+            }
+            if (message.type === 'sp:serverMessage') {
+                const data = message.data;
+                if (handleServerResponse(data)) {
+                    sendResponse({ ok: true });
+                    return true;
+                }
+                if (data.method === 'plugins.changed') {
+                    loadPlugins();
+                    sendResponse({ ok: true });
+                    return true;
+                }
+                handleNotification(data);
+                sendResponse({ ok: true });
+                return true;
+            }
+            if (message.type === 'ws:message') {
+                const wsData = message.data;
+                if (wsData?.method === 'sync.full') {
+                    loadPlugins();
+                }
+                return false;
+            }
+            return false;
+        };
+        chrome.runtime.onMessage.addListener(listener);
+        return () => chrome.runtime.onMessage.removeListener(listener);
+    }, [loadPlugins, handleNotification]);
+    const handleConfirmationRespond = useCallback((id, decision, scope) => {
+        clearConfirmationTimeout(id);
+        sendConfirmationResponse(id, decision, scope);
+        setPendingConfirmations(prev => prev.filter(c => c.id !== id));
+    }, [clearConfirmationTimeout]);
+    const handleDenyAll = useCallback(() => {
+        for (const c of pendingConfirmations) {
+            clearConfirmationTimeout(c.id);
+            sendConfirmationResponse(c.id, 'deny');
+        }
+        setPendingConfirmations([]);
+    }, [pendingConfirmations, clearConfirmationTimeout]);
+    const totalTools = plugins.reduce((sum, p) => sum + p.tools.length, 0);
+    const hasContent = plugins.length > 0 || failedPlugins.length > 0;
+    const showPlugins = !loading && connected && hasContent;
+    const showSearchBar = connected && !loading && totalTools > 5;
+    return (_jsx(Tooltip.Provider, { children: _jsxs("div", { className: "text-foreground flex min-h-screen flex-col", children: [connected && pendingConfirmations.length > 0 && (_jsx(ConfirmationDialog, { confirmations: pendingConfirmations, onRespond: handleConfirmationRespond, onDenyAll: handleDenyAll })), showSearchBar && (_jsx("div", { className: "pt-4 pr-5 pb-2 pl-4", children: _jsxs("div", { className: "relative", children: [_jsx(Search, { className: "text-muted-foreground pointer-events-none absolute top-1/2 left-2 h-4 w-4 -translate-y-1/2" }), _jsx(Input, { value: toolFilter, onChange: e => setToolFilter(e.target.value), placeholder: "Filter tools...", className: "pr-8 pl-9" }), toolFilter && (_jsx("button", { type: "button", onClick: () => setToolFilter(''), className: "text-muted-foreground hover:text-foreground absolute top-1/2 right-2 -translate-y-1/2 cursor-pointer", children: _jsx(X, { className: "h-4 w-4" }) }))] }) })), _jsx("main", { className: `flex-1 pr-5 pb-2 pl-4 ${showSearchBar ? 'pt-2' : 'pt-4'} ${showPlugins ? '' : 'flex items-center justify-center'}`, children: loading ? (_jsx(LoadingState, {})) : !connected ? (_jsx(DisconnectedState, { reason: disconnectReason })) : !hasContent ? (_jsx(NoPluginsState, {})) : (_jsx(PluginList, { plugins: plugins, failedPlugins: failedPlugins, activeTools: activeTools, setPlugins: setPlugins, toolFilter: toolFilter })) }), _jsx(Footer, {})] }) }));
+};
+export { App };
+//# sourceMappingURL=App.js.map

package/dist/side-panel/App.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"App.js","sourceRoot":"","sources":["../../src/side-panel/App.tsx"],"names":[],"mappings":";AAAA,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC9F,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAMjE,MAAM,GAAG,GAAG,GAAG,EAAE;IACf,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,QAAQ,EAAgC,CAAC;IACzF,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAgB,EAAE,CAAC,CAAC;IAC1D,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAsB,EAAE,CAAC,CAAC;IAC5E,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAc,IAAI,GAAG,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,GAAG,QAAQ,CAAqB,EAAE,CAAC,CAAC;IAEzF,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,gBAAgB,GAAG,MAAM,CAAwB,IAAI,GAAG,EAAE,CAAC,CAAC;IAElE,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnC,SAAS,CAAC,GAAG,EAAE;QACb,YAAY,CAAC,OAAO,GAAG,SAAS,CAAC;QACjC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;QAC7B,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAC/B,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAElC,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,YAAY,CAAC,OAAO,GAAG,GAAG;YAAE,OAAO;QAC7C,YAAY,CAAC,OAAO,GAAG,GAAG,CAAC;QAC3B,gBAAgB,EAAE;aACf,IAAI,CAAC,MAAM,CAAC,EAAE;YACb,IAAI,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC;YACpC,IAAI,gBAAgB,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACtC,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;oBACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACtD,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,CAAC,CAAC,CAAC;gBACH,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnC,CAAC;YACD,UAAU,CAAC,cAAc,CAAC,CAAC;YAC3B,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,8BAA8B;QAChC,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,GAAG,sBAAsB,CAAC;QAC9E,UAAU;QACV,cAAc;QACd,uBAAuB;QACvB,gBAAgB;KACjB,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,kBAAkB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YACtC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,WAAW,EAAE,CAAC;YAChB,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,CACf,OAAwB,EACxB,OAAqC,EACrC,YAA0C,EACrB,EAAE;YACvB,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC;gBAC1C,YAAY,CAAC;oBACX,KAAK,EAAE;wBACL,SAAS,EAAE,YAAY,CAAC,OAAO;wBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;wBAC3B,WAAW,EAAE,cAAc,CAAC,MAAM;wBAClC,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;qBAC3E;oBACD,IAAI;iBACL,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC1B,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC7E,IAAI,WAAW,EAAE,CAAC;oBAChB,WAAW,EAAE,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,EAAE,CAAC,CAAC;oBACf,gBAAgB,CAAC,EAAE,CAAC,CAAC;oBACrB,cAAc,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;oBAC1B,uBAAuB,CAAC,EAAE,CAAC,CAAC;oBAC5B,gBAAgB,EAAE,CAAC;gBACrB,CAAC;gBACD,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;gBAE1B,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3B,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;oBACtC,WAAW,EAAE,CAAC;oBACd,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3B,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACzB,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,IAA2C,CAAC;gBACnE,IAAI,MAAM,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;oBACnC,WAAW,EAAE,CAAC;gBAChB,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEtC,MAAM,yBAAyB,GAAG,WAAW,CAC3C,CACE,EAAU,EACV,QAAgD,EAChD,KAAiD,EACjD,EAAE;QACF,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAC7B,wBAAwB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9C,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC,EACD,CAAC,wBAAwB,CAAC,CAC3B,CAAC;IAEF,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;QACrC,KAAK,MAAM,CAAC,IAAI,oBAAoB,EAAE,CAAC;YACrC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/B,wBAAwB,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,EAAE,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAErD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,CAAC,OAAO,IAAI,SAAS,IAAI,UAAU,CAAC;IACxD,MAAM,aAAa,GAAG,SAAS,IAAI,CAAC,OAAO,IAAI,UAAU,GAAG,CAAC,CAAC;IAE9D,OAAO,CACL,KAAC,OAAO,CAAC,QAAQ,cACf,eAAK,SAAS,EAAC,4CAA4C,aACxD,SAAS,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,IAAI,CAC/C,KAAC,kBAAkB,IACjB,aAAa,EAAE,oBAAoB,EACnC,SAAS,EAAE,yBAAyB,EACpC,SAAS,EAAE,aAAa,GACxB,CACH,EACA,aAAa,IAAI,CAChB,cAAK,SAAS,EAAC,qBAAqB,YAClC,eAAK,SAAS,EAAC,UAAU,aACvB,KAAC,MAAM,IAAC,SAAS,EAAC,4FAA4F,GAAG,EACjH,KAAC,KAAK,IACJ,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5C,WAAW,EAAC,iBAAiB,EAC7B,SAAS,EAAC,WAAW,GACrB,EACD,UAAU,IAAI,CACb,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,EAChC,SAAS,EAAC,sGAAsG,YAChH,KAAC,CAAC,IAAC,SAAS,EAAC,SAAS,GAAG,GAClB,CACV,IACG,GACF,CACP,EACD,eACE,SAAS,EAAE,yBAAyB,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC,EAAE,YAC7H,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,YAAY,KAAG,CACjB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CACf,KAAC,iBAAiB,IAAC,MAAM,EAAE,gBAAgB,GAAI,CAChD,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAChB,KAAC,cAAc,KAAG,CACnB,CAAC,CAAC,CAAC,CACF,KAAC,UAAU,IACT,OAAO,EAAE,OAAO,EAChB,aAAa,EAAE,aAAa,EAC5B,WAAW,EAAE,WAAW,EACxB,UAAU,EAAE,UAAU,EACtB,UAAU,EAAE,UAAU,GACtB,CACH,GACI,EACP,KAAC,MAAM,KAAG,IACN,GACW,CACpB,CAAC;AACJ,CAAC,CAAC;AAEF,OAAO,EAAE,GAAG,EAAE,CAAC"}

package/dist/side-panel/bridge.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Bridge for side panel ↔ background script ↔ MCP server communication.
+ *
+ * Uses chrome.runtime.sendMessage with bg:* message types to relay JSON-RPC
+ * requests to the MCP server. Responses return asynchronously via sp:serverMessage
+ * and are correlated by request ID using a pending-request map.
+ *
+ * Each pending request has a 30-second timeout to prevent hanging promises when
+ * the server disconnects between send and response. All pending requests are
+ * also rejected on WebSocket disconnect (sp:connectionState connected=false).
+ */
+import type { DisconnectReason } from '../extension-messages.js';
+import type { ConfigStateFailedPlugin, ConfigStatePlugin, ConfigStateResult } from '@opentabs-dev/shared';
+/** Plugin state as displayed in the side panel (matches config.getState response) */
+type PluginState = ConfigStatePlugin;
+/** Failed plugin state as displayed in the side panel */
+type FailedPluginState = ConfigStateFailedPlugin;
+/** Returns true if a tool's displayName, name, or description matches the filter string */
+declare const matchesTool: (tool: PluginState["tools"][number], filterLower: string) => boolean;
+/**
+ * Reject all pending requests immediately.
+ * Called on WebSocket disconnect (sp:connectionState connected=false) so the
+ * side panel gets fast errors instead of waiting for individual 30s timeouts.
+ */
+declare const rejectAllPending: () => void;
+/**
+ * Handle a server message forwarded by the background script.
+ * If the message is a response (has id, no method), resolve the matching
+ * pending request and return true. Otherwise return false so the caller
+ * can handle it as a notification.
+ */
+declare const handleServerResponse: (data: Record<string, unknown>) => boolean;
+/** Result from querying the background script for WebSocket connection state */
+interface ConnectionStateResult {
+    connected: boolean;
+    disconnectReason?: DisconnectReason;
+}
+/** Query the background script for WebSocket connection state */
+declare const getConnectionState: () => Promise<ConnectionStateResult>;
+/** Request full state from MCP server via config.getState */
+declare const fetchConfigState: () => Promise<ConfigStateResult>;
+/** Toggle a single tool's enabled state */
+declare const setToolEnabled: (plugin: string, tool: string, enabled: boolean) => Promise<unknown>;
+/** Toggle all tools for a plugin */
+declare const setAllToolsEnabled: (plugin: string, enabled: boolean) => Promise<unknown>;
+/** Send a confirmation response to the MCP server via the background script (fire-and-forget) */
+declare const sendConfirmationResponse: (id: string, decision: "allow_once" | "allow_always" | "deny", scope?: "tool_domain" | "tool_all" | "domain_all") => void;
+export type { FailedPluginState, PluginState };
+export { getConnectionState, fetchConfigState, matchesTool, setToolEnabled, setAllToolsEnabled, handleServerResponse, rejectAllPending, sendConfirmationResponse, };
+//# sourceMappingURL=bridge.d.ts.map

package/dist/side-panel/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/side-panel/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE1G,qFAAqF;AACrF,KAAK,WAAW,GAAG,iBAAiB,CAAC;AAErC,yDAAyD;AACzD,KAAK,iBAAiB,GAAG,uBAAuB,CAAC;AAEjD,2FAA2F;AAC3F,QAAA,MAAM,WAAW,GAAI,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,MAAM,KAAG,OAGzB,CAAC;AAevD;;;;GAIG;AACH,QAAA,MAAM,gBAAgB,QAAO,IAM5B,CAAC;AA8BF;;;;;GAKG;AACH,QAAA,MAAM,oBAAoB,GAAI,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAmB7D,CAAC;AAEF,gFAAgF;AAChF,UAAU,qBAAqB;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED,iEAAiE;AACjE,QAAA,MAAM,kBAAkB,QAAO,OAAO,CAAC,qBAAqB,CAexD,CAAC;AAEL,6DAA6D;AAC7D,QAAA,MAAM,gBAAgB,QAA2C,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE5F,2CAA2C;AAC3C,QAAA,MAAM,cAAc,GAAI,QAAQ,MAAM,EAAE,MAAM,MAAM,EAAE,SAAS,OAAO,KAAG,OAAO,CAAC,OAAO,CACvB,CAAC;AAElE,oCAAoC;AACpC,QAAA,MAAM,kBAAkB,GAAI,QAAQ,MAAM,EAAE,SAAS,OAAO,KAAG,OAAO,CAAC,OAAO,CACf,CAAC;AAEhE,iGAAiG;AACjG,QAAA,MAAM,wBAAwB,GAC5B,IAAI,MAAM,EACV,UAAU,YAAY,GAAG,cAAc,GAAG,MAAM,EAChD,QAAQ,aAAa,GAAG,UAAU,GAAG,YAAY,KAChD,IASF,CAAC;AAEF,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;AAC/C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,GACzB,CAAC"}

package/dist/side-panel/bridge.js

@@ -0,0 +1,113 @@
+/**
+ * Bridge for side panel ↔ background script ↔ MCP server communication.
+ *
+ * Uses chrome.runtime.sendMessage with bg:* message types to relay JSON-RPC
+ * requests to the MCP server. Responses return asynchronously via sp:serverMessage
+ * and are correlated by request ID using a pending-request map.
+ *
+ * Each pending request has a 30-second timeout to prevent hanging promises when
+ * the server disconnects between send and response. All pending requests are
+ * also rejected on WebSocket disconnect (sp:connectionState connected=false).
+ */
+/** Returns true if a tool's displayName, name, or description matches the filter string */
+const matchesTool = (tool, filterLower) => tool.displayName.toLowerCase().includes(filterLower) ||
+    tool.name.toLowerCase().includes(filterLower) ||
+    tool.description.toLowerCase().includes(filterLower);
+/** Timeout for pending JSON-RPC requests relayed through the background script (ms) */
+const REQUEST_TIMEOUT_MS = 30_000;
+/** Map of request ID → pending request. Responses are matched by ID. */
+const pendingRequests = new Map();
+/**
+ * Reject all pending requests immediately.
+ * Called on WebSocket disconnect (sp:connectionState connected=false) so the
+ * side panel gets fast errors instead of waiting for individual 30s timeouts.
+ */
+const rejectAllPending = () => {
+    for (const [id, pending] of pendingRequests) {
+        pendingRequests.delete(id);
+        clearTimeout(pending.timerId);
+        pending.reject(new Error('Server disconnected'));
+    }
+};
+/**
+ * Send a JSON-RPC request to the MCP server via the background script.
+ * Returns a promise that resolves with the MCP server's response (not the
+ * background script's ack). Call handleServerResponse() when sp:serverMessage
+ * arrives to resolve pending requests.
+ */
+const sendRequest = (method, params = {}) => {
+    const id = crypto.randomUUID();
+    const data = { jsonrpc: '2.0', method, params, id };
+    return new Promise((resolve, reject) => {
+        const timerId = setTimeout(() => {
+            if (pendingRequests.has(id)) {
+                pendingRequests.delete(id);
+                reject(new Error(`Request ${method} timed out after ${REQUEST_TIMEOUT_MS}ms`));
+            }
+        }, REQUEST_TIMEOUT_MS);
+        pendingRequests.set(id, { resolve, reject, timerId });
+        chrome.runtime.sendMessage({ type: 'bg:send', data }).catch((err) => {
+            clearTimeout(timerId);
+            pendingRequests.delete(id);
+            reject(err instanceof Error ? err : new Error(String(err)));
+        });
+    });
+};
+/**
+ * Handle a server message forwarded by the background script.
+ * If the message is a response (has id, no method), resolve the matching
+ * pending request and return true. Otherwise return false so the caller
+ * can handle it as a notification.
+ */
+const handleServerResponse = (data) => {
+    const rawId = data.id;
+    if (rawId === undefined || rawId === null || data.method)
+        return false;
+    const id = String(rawId);
+    const pending = pendingRequests.get(id);
+    if (!pending)
+        return false;
+    pendingRequests.delete(id);
+    clearTimeout(pending.timerId);
+    if ('error' in data) {
+        const err = data.error;
+        pending.reject(new Error(err.message ?? 'Unknown server error'));
+    }
+    else {
+        pending.resolve(data.result);
+    }
+    return true;
+};
+/** Query the background script for WebSocket connection state */
+const getConnectionState = () => new Promise(resolve => {
+    chrome.runtime.sendMessage({ type: 'bg:getConnectionState' }, (response) => {
+        if (chrome.runtime.lastError) {
+            resolve({ connected: false });
+        }
+        else {
+            resolve({
+                connected: response?.connected === true,
+                disconnectReason: response?.disconnectReason,
+            });
+        }
+    });
+});
+/** Request full state from MCP server via config.getState */
+const fetchConfigState = () => sendRequest('config.getState');
+/** Toggle a single tool's enabled state */
+const setToolEnabled = (plugin, tool, enabled) => sendRequest('config.setToolEnabled', { plugin, tool, enabled });
+/** Toggle all tools for a plugin */
+const setAllToolsEnabled = (plugin, enabled) => sendRequest('config.setAllToolsEnabled', { plugin, enabled });
+/** Send a confirmation response to the MCP server via the background script (fire-and-forget) */
+const sendConfirmationResponse = (id, decision, scope) => {
+    chrome.runtime
+        .sendMessage({
+        type: 'sp:confirmationResponse',
+        data: { id, decision, ...(scope ? { scope } : {}) },
+    })
+        .catch((err) => {
+        console.warn('[opentabs:side-panel] Failed to send confirmation response:', err);
+    });
+};
+export { getConnectionState, fetchConfigState, matchesTool, setToolEnabled, setAllToolsEnabled, handleServerResponse, rejectAllPending, sendConfirmationResponse, };
+//# sourceMappingURL=bridge.js.map

package/dist/side-panel/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/side-panel/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,2FAA2F;AAC3F,MAAM,WAAW,GAAG,CAAC,IAAkC,EAAE,WAAmB,EAAW,EAAE,CACvF,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC7C,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAEvD,uFAAuF;AACvF,MAAM,kBAAkB,GAAG,MAAM,CAAC;AASlC,wEAAwE;AACxE,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;AAE1D;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,GAAS,EAAE;IAClC,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,eAAe,EAAE,CAAC;QAC5C,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,SAAkC,EAAE,EAAoB,EAAE;IAC7F,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAEpD,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5B,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,MAAM,oBAAoB,kBAAkB,IAAI,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC3E,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAAC,IAA6B,EAAW,EAAE;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,EAAwC,CAAC;IAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAEzB,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9B,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,KAA6B,CAAC;QAC/C,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,sBAAsB,CAAC,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAQF,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,GAAmC,EAAE,CAC9D,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;IACpB,MAAM,CAAC,OAAO,CAAC,WAAW,CACxB,EAAE,IAAI,EAAE,uBAAuB,EAAE,EACjC,CAAC,QAAkF,EAAE,EAAE;QACrF,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC;gBACN,SAAS,EAAE,QAAQ,EAAE,SAAS,KAAK,IAAI;gBACvC,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB;aAC7C,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,6DAA6D;AAC7D,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,iBAAiB,CAA+B,CAAC;AAE5F,2CAA2C;AAC3C,MAAM,cAAc,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,OAAgB,EAAoB,EAAE,CAC1F,WAAW,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAElE,oCAAoC;AACpC,MAAM,kBAAkB,GAAG,CAAC,MAAc,EAAE,OAAgB,EAAoB,EAAE,CAChF,WAAW,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAEhE,iGAAiG;AACjG,MAAM,wBAAwB,GAAG,CAC/B,EAAU,EACV,QAAgD,EAChD,KAAiD,EAC3C,EAAE;IACR,MAAM,CAAC,OAAO;SACX,WAAW,CAAC;QACX,IAAI,EAAE,yBAAkC;QACxC,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KACpD,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,OAAO,CAAC,IAAI,CAAC,6DAA6D,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAGF,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,GACzB,CAAC"}