@opentabs-dev/browser-extension 0.0.61 → 0.0.62

package/dist/background.js

@@ -1,3 +1,70 @@
+/**
+ * Dev reload client for the background service worker.
+ *
+ * Connects to the dev reload WebSocket relay server and triggers a full
+ * extension reload (chrome.runtime.reload()) when a DO_UPDATE signal with
+ * id 'extension' is received. Ignores 'side-panel' updates — the side
+ * panel has its own reload client that handles those.
+ *
+ * Before reloading, clears the 'wsConnected' session storage key to prevent
+ * the restarted background script from reading stale connection state.
+ *
+ * This file is plain JS (not TypeScript) because it is read at build time
+ * and prepended to the background bundle via esbuild's banner option. The
+ * 18515 placeholder is replaced by string substitution in
+ * the build script with the actual port number.
+ */
+(() => {
+  const port = 18515;
+  const url = `ws://localhost:${port}`;
+  const prefix = '[dev-reload:bg]';
+  let backoff = 500;
+  const maxBackoff = 10000;
+
+  const connect = () => {
+    const ws = new WebSocket(url);
+
+    ws.addEventListener('open', () => {
+      console.log(prefix, 'Connected to', url);
+      backoff = 500;
+    });
+
+    ws.addEventListener('message', event => {
+      try {
+        const msg = JSON.parse(event.data);
+        if (msg.type === 'do_update' && msg.id === 'extension') {
+          console.log(prefix, 'Reloading extension (full)');
+          // Clear wsConnected from session storage before reload to prevent
+          // the restarted background script from reading stale state.
+          chrome.storage.session
+            .set({ wsConnected: false })
+            .catch(() => {})
+            .then(() => {
+              setTimeout(() => {
+                chrome.runtime.reload();
+              }, 100);
+            });
+        }
+      } catch (_) {
+        // Ignore malformed messages
+      }
+    });
+
+    ws.addEventListener('close', () => {
+      console.log(prefix, 'Disconnected — reconnecting in', `${backoff}ms`);
+      setTimeout(connect, backoff);
+      backoff = Math.min(backoff * 2, maxBackoff);
+    });
+
+    ws.addEventListener('error', () => {
+      // onclose fires after onerror, so reconnect logic is handled there
+    });
+  };
+
+  connect();
+})();
+
+
 // dist/constants.js
 var KEEPALIVE_ALARM = "opentabs-keepalive";
 var KEEPALIVE_INTERVAL_MINUTES = 0.5;
@@ -94,10 +161,6 @@ var initSidePanelToggle = () => {
 var pendingConfirmationCount = 0;
 var NOTIFICATION_ID = "opentabs-confirmation";
 var pendingConfirmations = /* @__PURE__ */ new Map();
-var confirmationTimeouts = /* @__PURE__ */ new Map();
-var clearedConfirmationIds = /* @__PURE__ */ new Set();
-var CONFIRMATION_BACKGROUND_TIMEOUT_BUFFER_MS = 2e3;
-var CONFIRMATION_FALLBACK_TIMEOUT_MS = 3e4;
 var updateConfirmationBadge = () => {
   if (pendingConfirmationCount > 0) {
     chrome.action.setBadgeText({ text: String(pendingConfirmationCount) }).catch(() => {
@@ -118,7 +181,7 @@ var syncConfirmationNotification = () => {
   let message;
   if (pendingConfirmationCount === 1 && pendingConfirmations.size === 1) {
     const info = pendingConfirmations.values().next().value;
-    message = info.domain ? `${info.tool} on ${info.domain}` : info.tool;
+    message = `${info.plugin}: ${info.tool}`;
   } else if (pendingConfirmationCount > 1) {
     message = `${pendingConfirmationCount} tools awaiting approval`;
   } else {
@@ -136,59 +199,32 @@ var syncConfirmationNotification = () => {
 };
 var notifyConfirmationRequest = (params) => {
   const tool = typeof params.tool === "string" ? params.tool : "unknown tool";
-  const domain = typeof params.domain === "string" ? params.domain : null;
+  const plugin = typeof params.plugin === "string" ? params.plugin : "unknown";
   const id = typeof params.id === "string" ? params.id : String(Date.now());
-  const tabId = typeof params.tabId === "number" ? params.tabId : void 0;
-  const paramsPreview = typeof params.paramsPreview === "string" ? params.paramsPreview : "";
-  const timeoutMs = typeof params.timeoutMs === "number" ? params.timeoutMs : 0;
+  const rawParams = typeof params.params === "object" && params.params !== null ? params.params : {};
   const receivedAt = Date.now();
-  const existingTimeoutId = confirmationTimeouts.get(id);
-  if (existingTimeoutId !== void 0) {
-    clearTimeout(existingTimeoutId);
-  } else {
-    clearedConfirmationIds.delete(id);
-    pendingConfirmationCount++;
-    updateConfirmationBadge();
-  }
-  pendingConfirmations.set(id, { id, tool, domain, tabId, paramsPreview, timeoutMs, receivedAt });
-  const effectiveTimeoutMs = timeoutMs > 0 ? timeoutMs : CONFIRMATION_FALLBACK_TIMEOUT_MS;
-  const bgTimeoutId = setTimeout(() => {
-    confirmationTimeouts.delete(id);
-    clearConfirmationBadge(id);
-    clearedConfirmationIds.delete(id);
-  }, effectiveTimeoutMs + CONFIRMATION_BACKGROUND_TIMEOUT_BUFFER_MS);
-  confirmationTimeouts.set(id, bgTimeoutId);
+  if (pendingConfirmations.has(id)) {
+    pendingConfirmations.set(id, { id, tool, plugin, params: rawParams, receivedAt });
+    syncConfirmationNotification();
+    return;
+  }
+  pendingConfirmationCount++;
+  updateConfirmationBadge();
+  pendingConfirmations.set(id, { id, tool, plugin, params: rawParams, receivedAt });
   syncConfirmationNotification();
 };
 var clearConfirmationBadge = (id) => {
   if (id !== void 0) {
-    if (clearedConfirmationIds.has(id)) {
+    if (!pendingConfirmations.has(id)) {
       return;
     }
-    clearedConfirmationIds.add(id);
     pendingConfirmations.delete(id);
   }
   pendingConfirmationCount = Math.max(0, pendingConfirmationCount - 1);
   updateConfirmationBadge();
   syncConfirmationNotification();
-  if (id !== void 0 && !confirmationTimeouts.has(id)) {
-    clearedConfirmationIds.delete(id);
-  }
-};
-var clearConfirmationBackgroundTimeout = (id) => {
-  const timeoutId = confirmationTimeouts.get(id);
-  if (timeoutId !== void 0) {
-    clearTimeout(timeoutId);
-    confirmationTimeouts.delete(id);
-    clearedConfirmationIds.delete(id);
-  }
 };
 var clearAllConfirmationBadges = () => {
-  for (const [, timeoutId] of confirmationTimeouts.entries()) {
-    clearTimeout(timeoutId);
-  }
-  confirmationTimeouts.clear();
-  clearedConfirmationIds.clear();
   pendingConfirmations.clear();
   pendingConfirmationCount = 0;
   updateConfirmationBadge();
@@ -1151,12 +1187,12 @@ var removePluginsBatch = (pluginNames) => serialize(async () => {
   await chrome.storage.local.set({ [PLUGINS_META_KEY]: filtered });
   metaCache = filtered;
 });
-var VALID_TRUST_TIERS = /* @__PURE__ */ new Set(["official", "community", "local"]);
+var VALID_PERMISSIONS = /* @__PURE__ */ new Set(["off", "ask", "auto"]);
 var isValidPluginMeta = (value) => {
   if (typeof value !== "object" || value === null)
     return false;
   const obj = value;
-  return typeof obj.name === "string" && typeof obj.version === "string" && Array.isArray(obj.urlPatterns) && typeof obj.trustTier === "string" && VALID_TRUST_TIERS.has(obj.trustTier) && Array.isArray(obj.tools);
+  return typeof obj.name === "string" && typeof obj.version === "string" && Array.isArray(obj.urlPatterns) && typeof obj.permission === "string" && VALID_PERMISSIONS.has(obj.permission) && Array.isArray(obj.tools);
 };
 var getAllPluginMeta = async () => {
   if (metaCache !== null) {
@@ -3246,46 +3282,67 @@ var EMPTY_CACHE = {
   plugins: [],
   failedPlugins: [],
   browserTools: [],
-  serverVersion: void 0
+  browserPermission: void 0,
+  serverVersion: void 0,
+  skipPermissions: void 0
 };
 var cache = { ...EMPTY_CACHE };
 var pendingPluginToolUpdates = /* @__PURE__ */ new Map();
+var pendingPluginPermissionUpdates = /* @__PURE__ */ new Map();
 var pendingBrowserToolUpdates = /* @__PURE__ */ new Map();
 var reapplyPendingOptimisticUpdates = () => {
-  if (pendingPluginToolUpdates.size > 0) {
+  if (pendingPluginToolUpdates.size > 0 || pendingPluginPermissionUpdates.size > 0) {
     cache = {
       ...cache,
       plugins: cache.plugins.map((plugin) => {
+        const permOverride = pendingPluginPermissionUpdates.get(plugin.name);
         const toolOverrides = pendingPluginToolUpdates.get(plugin.name);
-        if (!toolOverrides)
+        if (permOverride === void 0 && !toolOverrides)
           return plugin;
-        return {
-          ...plugin,
-          tools: plugin.tools.map((tool) => {
-            const override = toolOverrides.get(tool.name);
-            return override !== void 0 ? { ...tool, enabled: override } : tool;
-          })
-        };
+        let updated = plugin;
+        if (permOverride !== void 0) {
+          updated = { ...updated, permission: permOverride };
+        }
+        if (toolOverrides) {
+          updated = {
+            ...updated,
+            tools: updated.tools.map((tool) => {
+              const override = toolOverrides.get(tool.name);
+              return override !== void 0 ? { ...tool, permission: override } : tool;
+            })
+          };
+        }
+        return updated;
       })
     };
   }
+  const browserPermOverride = pendingPluginPermissionUpdates.get("browser");
+  if (browserPermOverride !== void 0) {
+    cache = { ...cache, browserPermission: browserPermOverride };
+  }
   if (pendingBrowserToolUpdates.size > 0) {
     cache = {
       ...cache,
       browserTools: cache.browserTools.map((bt) => {
         const override = pendingBrowserToolUpdates.get(bt.name);
-        return override !== void 0 ? { ...bt, enabled: override } : bt;
+        return override !== void 0 ? { ...bt, permission: override } : bt;
       })
     };
   }
 };
-var addPendingPluginToolUpdate = (plugin, tool, enabled) => {
+var addPendingPluginPermissionUpdate = (plugin, permission) => {
+  pendingPluginPermissionUpdates.set(plugin, permission);
+};
+var removePendingPluginPermissionUpdate = (plugin) => {
+  pendingPluginPermissionUpdates.delete(plugin);
+};
+var addPendingPluginToolUpdate = (plugin, tool, permission) => {
   let toolMap = pendingPluginToolUpdates.get(plugin);
   if (!toolMap) {
     toolMap = /* @__PURE__ */ new Map();
     pendingPluginToolUpdates.set(plugin, toolMap);
   }
-  toolMap.set(tool, enabled);
+  toolMap.set(tool, permission);
 };
 var removePendingPluginToolUpdate = (plugin, tool) => {
   const toolMap = pendingPluginToolUpdates.get(plugin);
@@ -3295,14 +3352,14 @@ var removePendingPluginToolUpdate = (plugin, tool) => {
   if (toolMap.size === 0)
     pendingPluginToolUpdates.delete(plugin);
 };
-var addPendingPluginAllToolsUpdate = (plugin, toolNames, enabled) => {
+var addPendingPluginAllToolsUpdate = (plugin, toolNames, permission) => {
   let toolMap = pendingPluginToolUpdates.get(plugin);
   if (!toolMap) {
     toolMap = /* @__PURE__ */ new Map();
     pendingPluginToolUpdates.set(plugin, toolMap);
   }
   for (const name of toolNames) {
-    toolMap.set(name, enabled);
+    toolMap.set(name, permission);
   }
 };
 var removePendingPluginAllToolsUpdate = (plugin, toolNames) => {
@@ -3315,22 +3372,6 @@ var removePendingPluginAllToolsUpdate = (plugin, toolNames) => {
   if (toolMap.size === 0)
     pendingPluginToolUpdates.delete(plugin);
 };
-var addPendingBrowserToolUpdate = (tool, enabled) => {
-  pendingBrowserToolUpdates.set(tool, enabled);
-};
-var removePendingBrowserToolUpdate = (tool) => {
-  pendingBrowserToolUpdates.delete(tool);
-};
-var addPendingAllBrowserToolsUpdate = (toolNames, enabled) => {
-  for (const name of toolNames) {
-    pendingBrowserToolUpdates.set(name, enabled);
-  }
-};
-var removePendingAllBrowserToolsUpdate = (toolNames) => {
-  for (const name of toolNames) {
-    pendingBrowserToolUpdates.delete(name);
-  }
-};
 var cachesInitialized = false;
 var persistTimer;
 var persistToSession = () => {
@@ -3362,6 +3403,7 @@ var clearServerStateCache = () => {
   cache = { ...EMPTY_CACHE };
   cachesInitialized = false;
   pendingPluginToolUpdates.clear();
+  pendingPluginPermissionUpdates.clear();
   pendingBrowserToolUpdates.clear();
   if (persistTimer !== void 0) {
     clearTimeout(persistTimer);
@@ -3379,7 +3421,9 @@ var loadServerStateCacheFromSession = async () => {
         plugins: Array.isArray(stored.plugins) ? stored.plugins : [],
         failedPlugins: Array.isArray(stored.failedPlugins) ? stored.failedPlugins : [],
         browserTools: Array.isArray(stored.browserTools) ? stored.browserTools : [],
-        serverVersion: typeof stored.serverVersion === "string" ? stored.serverVersion : void 0
+        browserPermission: stored.browserPermission === "off" || stored.browserPermission === "ask" || stored.browserPermission === "auto" ? stored.browserPermission : void 0,
+        serverVersion: typeof stored.serverVersion === "string" ? stored.serverVersion : void 0,
+        skipPermissions: typeof stored.skipPermissions === "boolean" ? stored.skipPermissions : void 0
       };
     }
     if (typeof data[CACHES_INITIALIZED_KEY] === "boolean") {
@@ -3540,13 +3584,10 @@ var notifyDispatchProgress = (dispatchId) => {
     cb();
 };
 var getPluginLink = (plugin) => {
-  if (plugin.trustTier === "local" && plugin.sourcePath) {
+  if (plugin.sourcePath) {
     return plugin.sourcePath;
   }
-  if (plugin.trustTier === "official") {
-    return `https://npmjs.com/package/@opentabs-dev/plugin-${plugin.name}`;
-  }
-  return `https://npmjs.com/package/opentabs-plugin-${plugin.name}`;
+  return `https://npmjs.com/package/${plugin.name}`;
 };
 var injectToolInvocationLog = async (tabId, pluginName, toolName, link) => {
   try {
@@ -3834,7 +3875,7 @@ var toPluginMeta = (p) => ({
   version: p.version,
   displayName: p.displayName,
   urlPatterns: p.urlPatterns,
-  trustTier: p.trustTier,
+  permission: p.permission,
   sourcePath: p.sourcePath,
   adapterHash: p.adapterHash,
   adapterFile: p.adapterFile,
@@ -3860,16 +3901,17 @@ var validatePluginPayload = (raw) => {
   }
   const urlPatterns = Array.isArray(obj.urlPatterns) ? obj.urlPatterns.filter((p) => typeof p === "string") : [];
   const tools = Array.isArray(obj.tools) ? obj.tools.filter((t) => typeof t === "object" && t !== null && typeof t.name === "string" && typeof t.description === "string").map((t) => {
-    if (typeof t.enabled !== "boolean") {
-      console.warn(`[opentabs] Tool "${t.name}" in plugin "${obj.name}" is missing the "enabled" field \u2014 defaulting to enabled=true. This is a server-side bug.`);
+    if (t.permission !== "off" && t.permission !== "ask" && t.permission !== "auto") {
+      console.warn(`[opentabs] Tool "${t.name}" in plugin "${obj.name}" has invalid "permission" field \u2014 defaulting to permission='off'. This is a server-side bug.`);
     }
     return {
       name: t.name,
       displayName: typeof t.displayName === "string" ? t.displayName : t.name,
       description: t.description,
+      ...typeof t.summary === "string" ? { summary: t.summary } : {},
       icon: typeof t.icon === "string" ? t.icon : "wrench",
       ...typeof t.group === "string" ? { group: t.group } : {},
-      enabled: typeof t.enabled === "boolean" ? t.enabled : true
+      permission: t.permission === "off" || t.permission === "ask" || t.permission === "auto" ? t.permission : "off"
     };
   }) : [];
   return {
@@ -3877,7 +3919,7 @@ var validatePluginPayload = (raw) => {
     version: typeof obj.version === "string" ? obj.version : "0.0.0",
     displayName: typeof obj.displayName === "string" ? obj.displayName : obj.name,
     urlPatterns,
-    trustTier: obj.trustTier === "official" || obj.trustTier === "community" || obj.trustTier === "local" ? obj.trustTier : "local",
+    permission: obj.permission === "off" || obj.permission === "ask" || obj.permission === "auto" ? obj.permission : "off",
     sourcePath: typeof obj.sourcePath === "string" ? obj.sourcePath : void 0,
     adapterHash: typeof obj.adapterHash === "string" ? obj.adapterHash : void 0,
     adapterFile: typeof obj.adapterFile === "string" ? obj.adapterFile : void 0,
@@ -3951,7 +3993,7 @@ var handleSyncFull = async (params) => {
       name: p.name,
       displayName: p.displayName,
       version: p.version,
-      trustTier: p.trustTier,
+      permission: p.permission,
       source: raw?.source === "npm" || raw?.source === "local" ? raw.source : "local",
       tabState: "closed",
       urlPatterns: p.urlPatterns,
@@ -3969,11 +4011,16 @@ var handleSyncFull = async (params) => {
   const rawFailedPlugins = Array.isArray(params.failedPlugins) ? params.failedPlugins : void 0;
   const rawBrowserTools = Array.isArray(params.browserTools) ? params.browserTools : void 0;
   const rawServerVersion = typeof params.serverVersion === "string" ? params.serverVersion : void 0;
+  const rawBrowserPermission = params.browserPermission;
+  const browserPermission = rawBrowserPermission === "off" || rawBrowserPermission === "ask" || rawBrowserPermission === "auto" ? rawBrowserPermission : void 0;
+  const rawSkipPermissions = typeof params.skipPermissions === "boolean" ? params.skipPermissions : void 0;
   updateServerStateCache({
     plugins: cachePlugins,
     ...rawFailedPlugins ? { failedPlugins: rawFailedPlugins } : {},
     ...rawBrowserTools ? { browserTools: rawBrowserTools } : {},
-    ...rawServerVersion !== void 0 ? { serverVersion: rawServerVersion } : {}
+    ...browserPermission !== void 0 ? { browserPermission } : {},
+    ...rawServerVersion !== void 0 ? { serverVersion: rawServerVersion } : {},
+    ...rawSkipPermissions !== void 0 ? { skipPermissions: rawSkipPermissions } : {}
   });
   setCachesInitialized(true);
   flushServerStateCacheToSession();
@@ -4001,7 +4048,7 @@ var handlePluginUpdate = async (params) => {
     name: validated.name,
     displayName: validated.displayName,
     version: validated.version,
-    trustTier: validated.trustTier,
+    permission: validated.permission,
     source: params.source === "npm" || params.source === "local" ? params.source : "local",
     tabState: newState.state,
     urlPatterns: validated.urlPatterns,
@@ -4144,7 +4191,9 @@ var handleServerMessage = (message) => {
       ...payload.plugins ? { plugins: payload.plugins } : {},
       ...payload.failedPlugins ? { failedPlugins: payload.failedPlugins } : {},
       ...payload.browserTools ? { browserTools: payload.browserTools } : {},
-      ...payload.serverVersion !== void 0 ? { serverVersion: payload.serverVersion } : {}
+      ...payload.browserPermission !== void 0 ? { browserPermission: payload.browserPermission } : {},
+      ...payload.serverVersion !== void 0 ? { serverVersion: payload.serverVersion } : {},
+      ...payload.skipPermissions !== void 0 ? { skipPermissions: payload.skipPermissions } : {}
     });
   }
   if (method && SIDE_PANEL_METHODS.has(method)) {
@@ -4278,12 +4327,13 @@ var handleBgGetFullState = (_message, sendResponse) => {
         const serverTool = serverPlugin?.tools.find((st) => st.name === metaTool.name);
         return {
           ...metaTool,
-          enabled: serverTool?.enabled ?? true
+          permission: serverTool?.permission ?? metaTool.permission
         };
       });
       const { tools: _metaTools, sourcePath: _sourcePath, adapterHash: _adapterHash, adapterFile: _adapterFile, ...metaFields } = meta;
       return {
         ...metaFields,
+        permission: serverPlugin?.permission ?? meta.permission,
         tools,
         tabState,
         source: serverPlugin?.source ?? "local",
@@ -4297,7 +4347,9 @@ var handleBgGetFullState = (_message, sendResponse) => {
       plugins,
       failedPlugins: serverCache.failedPlugins,
       browserTools: serverCache.browserTools,
+      browserPermission: serverCache.browserPermission,
       serverVersion: serverCache.serverVersion,
+      skipPermissions: serverCache.skipPermissions,
       pendingConfirmations: getPendingConfirmations()
     });
   })().catch(() => {
@@ -4366,38 +4418,27 @@ var handleSpConfirmationResponse = (message, sendResponse) => {
   }
   const data = message.data;
   const id = typeof data?.id === "string" ? data.id : void 0;
-  if (id !== void 0) {
-    clearConfirmationBackgroundTimeout(id);
-  }
   clearConfirmationBadge(id);
   sendResponse({ ok: true });
 };
-var handleSpConfirmationTimeout = (message, sendResponse) => {
-  const id = typeof message.id === "string" ? message.id : void 0;
-  if (id !== void 0) {
-    clearConfirmationBackgroundTimeout(id);
-  }
-  clearConfirmationBadge(id);
-  sendResponse({ ok: true });
-};
-var handleBgSetToolEnabled = (message, sendResponse) => {
+var handleBgSetToolPermission = (message, sendResponse) => {
   const plugin = message.plugin;
   const tool = message.tool;
-  const enabled = message.enabled;
+  const permission = message.permission;
   const cache2 = getServerStateCache();
   const pluginEntry = cache2.plugins.find((p) => p.name === plugin);
-  const originalEnabled = pluginEntry?.tools.find((t) => t.name === tool)?.enabled ?? !enabled;
+  const originalPermission = pluginEntry?.tools.find((t) => t.name === tool)?.permission ?? "auto";
   const updatedPlugins = cache2.plugins.map((p) => {
     if (p.name !== plugin)
       return p;
     return {
       ...p,
-      tools: p.tools.map((t) => t.name === tool ? { ...t, enabled } : t)
+      tools: p.tools.map((t) => t.name === tool ? { ...t, permission } : t)
     };
   });
-  addPendingPluginToolUpdate(plugin, tool, enabled);
+  addPendingPluginToolUpdate(plugin, tool, permission);
   updateServerStateCache({ plugins: updatedPlugins });
-  sendServerRequest("config.setToolEnabled", { plugin, tool, enabled }).then((result) => {
+  sendServerRequest("config.setToolPermission", { plugin, tool, permission }).then((result) => {
     removePendingPluginToolUpdate(plugin, tool);
     sendResponse(result);
   }).catch((err2) => {
@@ -4408,23 +4449,23 @@ var handleBgSetToolEnabled = (message, sendResponse) => {
         return p;
       return {
         ...p,
-        tools: p.tools.map((t) => t.name === tool ? { ...t, enabled: originalEnabled } : t)
+        tools: p.tools.map((t) => t.name === tool ? { ...t, permission: originalPermission } : t)
       };
     });
     updateServerStateCache({ plugins: revertedPlugins });
     sendResponse({ error: err2 instanceof Error ? err2.message : String(err2) });
   });
 };
-var handleBgSetAllToolsEnabled = (message, sendResponse) => {
+var handleBgSetAllToolsPermission = (message, sendResponse) => {
   const plugin = message.plugin;
-  const enabled = message.enabled;
+  const permission = message.permission;
   const cache2 = getServerStateCache();
   const pluginEntry = cache2.plugins.find((p) => p.name === plugin);
   const toolNames = pluginEntry ? pluginEntry.tools.map((t) => t.name) : [];
   const originalToolStates = /* @__PURE__ */ new Map();
   if (pluginEntry) {
     for (const t of pluginEntry.tools) {
-      originalToolStates.set(t.name, t.enabled);
+      originalToolStates.set(t.name, t.permission);
     }
   }
   const updatedPlugins = cache2.plugins.map((p) => {
@@ -4432,12 +4473,12 @@ var handleBgSetAllToolsEnabled = (message, sendResponse) => {
       return p;
     return {
       ...p,
-      tools: p.tools.map((t) => ({ ...t, enabled }))
+      tools: p.tools.map((t) => ({ ...t, permission }))
     };
   });
-  addPendingPluginAllToolsUpdate(plugin, toolNames, enabled);
+  addPendingPluginAllToolsUpdate(plugin, toolNames, permission);
   updateServerStateCache({ plugins: updatedPlugins });
-  sendServerRequest("config.setAllToolsEnabled", { plugin, enabled }).then((result) => {
+  sendServerRequest("config.setAllToolsPermission", { plugin, permission }).then((result) => {
     removePendingPluginAllToolsUpdate(plugin, toolNames);
     sendResponse(result);
   }).catch((err2) => {
@@ -4450,7 +4491,7 @@ var handleBgSetAllToolsEnabled = (message, sendResponse) => {
         ...p,
         tools: p.tools.map((t) => ({
           ...t,
-          enabled: originalToolStates.get(t.name) ?? t.enabled
+          permission: originalToolStates.get(t.name) ?? t.permission
         }))
       };
     });
@@ -4458,104 +4499,26 @@ var handleBgSetAllToolsEnabled = (message, sendResponse) => {
     sendResponse({ error: err2 instanceof Error ? err2.message : String(err2) });
   });
 };
-var handleBgSetToolsEnabled = (message, sendResponse) => {
+var handleBgSetPluginPermission = (message, sendResponse) => {
   const plugin = message.plugin;
-  const toolNames = message.tools;
-  const enabled = message.enabled;
+  const permission = message.permission;
   const cache2 = getServerStateCache();
   const pluginEntry = cache2.plugins.find((p) => p.name === plugin);
-  const originalToolStates = /* @__PURE__ */ new Map();
-  if (pluginEntry) {
-    const toolNameSet2 = new Set(toolNames);
-    for (const t of pluginEntry.tools) {
-      if (toolNameSet2.has(t.name)) {
-        originalToolStates.set(t.name, t.enabled);
-      }
-    }
-  }
-  const toolNameSet = new Set(toolNames);
-  const updatedPlugins = cache2.plugins.map((p) => {
-    if (p.name !== plugin)
-      return p;
-    return {
-      ...p,
-      tools: p.tools.map((t) => toolNameSet.has(t.name) ? { ...t, enabled } : t)
-    };
-  });
-  addPendingPluginAllToolsUpdate(plugin, toolNames, enabled);
+  const originalPermission = pluginEntry?.permission ?? "off";
+  const updatedPlugins = cache2.plugins.map((p) => p.name === plugin ? { ...p, permission } : p);
+  addPendingPluginPermissionUpdate(plugin, permission);
   updateServerStateCache({ plugins: updatedPlugins });
-  sendServerRequest("config.setToolsEnabled", {
-    plugin,
-    tools: toolNames,
-    enabled
-  }).then((result) => {
-    removePendingPluginAllToolsUpdate(plugin, toolNames);
+  sendServerRequest("config.setPluginPermission", { plugin, permission }).then((result) => {
+    removePendingPluginPermissionUpdate(plugin);
     sendResponse(result);
   }).catch((err2) => {
-    removePendingPluginAllToolsUpdate(plugin, toolNames);
+    removePendingPluginPermissionUpdate(plugin);
     const currentCache = getServerStateCache();
-    const revertedPlugins = currentCache.plugins.map((p) => {
-      if (p.name !== plugin)
-        return p;
-      return {
-        ...p,
-        tools: p.tools.map((t) => ({
-          ...t,
-          enabled: originalToolStates.get(t.name) ?? t.enabled
-        }))
-      };
-    });
+    const revertedPlugins = currentCache.plugins.map((p) => p.name === plugin ? { ...p, permission: originalPermission } : p);
     updateServerStateCache({ plugins: revertedPlugins });
     sendResponse({ error: err2 instanceof Error ? err2.message : String(err2) });
   });
 };
-var handleBgSetBrowserToolEnabled = (message, sendResponse) => {
-  const tool = message.tool;
-  const enabled = message.enabled;
-  const cache2 = getServerStateCache();
-  const originalEnabled = cache2.browserTools.find((bt) => bt.name === tool)?.enabled ?? !enabled;
-  const updatedBrowserTools = cache2.browserTools.map((bt) => bt.name === tool ? { ...bt, enabled } : bt);
-  addPendingBrowserToolUpdate(tool, enabled);
-  updateServerStateCache({ browserTools: updatedBrowserTools });
-  sendServerRequest("config.setBrowserToolEnabled", { tool, enabled }).then((result) => {
-    removePendingBrowserToolUpdate(tool);
-    sendResponse(result);
-  }).catch((err2) => {
-    removePendingBrowserToolUpdate(tool);
-    const currentCache = getServerStateCache();
-    const revertedBrowserTools = currentCache.browserTools.map((bt) => bt.name === tool ? { ...bt, enabled: originalEnabled } : bt);
-    updateServerStateCache({ browserTools: revertedBrowserTools });
-    sendResponse({ error: err2 instanceof Error ? err2.message : String(err2) });
-  });
-};
-var handleBgSetAllBrowserToolsEnabled = (message, sendResponse) => {
-  const enabled = message.enabled;
-  const cache2 = getServerStateCache();
-  const toolNames = cache2.browserTools.map((bt) => bt.name);
-  const originalToolStates = /* @__PURE__ */ new Map();
-  for (const bt of cache2.browserTools) {
-    originalToolStates.set(bt.name, bt.enabled);
-  }
-  const updatedBrowserTools = cache2.browserTools.map((bt) => ({
-    ...bt,
-    enabled
-  }));
-  addPendingAllBrowserToolsUpdate(toolNames, enabled);
-  updateServerStateCache({ browserTools: updatedBrowserTools });
-  sendServerRequest("config.setAllBrowserToolsEnabled", { enabled }).then((result) => {
-    removePendingAllBrowserToolsUpdate(toolNames);
-    sendResponse(result);
-  }).catch((err2) => {
-    removePendingAllBrowserToolsUpdate(toolNames);
-    const currentCache = getServerStateCache();
-    const revertedBrowserTools = currentCache.browserTools.map((bt) => ({
-      ...bt,
-      enabled: originalToolStates.get(bt.name) ?? bt.enabled
-    }));
-    updateServerStateCache({ browserTools: revertedBrowserTools });
-    sendResponse({ error: err2 instanceof Error ? err2.message : String(err2) });
-  });
-};
 var handleBgSearchPlugins = (message, sendResponse) => {
   const query = message.query;
   sendServerRequest("plugin.search", { query }).then((result) => {
@@ -4598,11 +4561,9 @@ var backgroundHandlers = /* @__PURE__ */ new Map([
   ["ws:state", handleWsState],
   ["ws:message", handleWsMessage],
   ["bg:getFullState", handleBgGetFullState],
-  ["bg:setToolEnabled", handleBgSetToolEnabled],
-  ["bg:setAllToolsEnabled", handleBgSetAllToolsEnabled],
-  ["bg:setToolsEnabled", handleBgSetToolsEnabled],
-  ["bg:setBrowserToolEnabled", handleBgSetBrowserToolEnabled],
-  ["bg:setAllBrowserToolsEnabled", handleBgSetAllBrowserToolsEnabled],
+  ["bg:setToolPermission", handleBgSetToolPermission],
+  ["bg:setAllToolsPermission", handleBgSetAllToolsPermission],
+  ["bg:setPluginPermission", handleBgSetPluginPermission],
   ["bg:searchPlugins", handleBgSearchPlugins],
   ["bg:installPlugin", handleBgInstallPlugin],
   ["bg:removePlugin", handleBgRemovePlugin],
@@ -4610,7 +4571,6 @@ var backgroundHandlers = /* @__PURE__ */ new Map([
   ["plugin:logs", handlePluginLogs],
   ["tool:progress", handleToolProgress],
   ["sp:confirmationResponse", handleSpConfirmationResponse],
-  ["sp:confirmationTimeout", handleSpConfirmationTimeout],
   ["port-changed", handlePortChanged]
 ]);
 var EXTENSION_ONLY_TYPES = /* @__PURE__ */ new Set([
@@ -4618,18 +4578,15 @@ var EXTENSION_ONLY_TYPES = /* @__PURE__ */ new Set([
   "ws:state",
   "ws:message",
   "bg:getFullState",
-  "bg:setToolEnabled",
-  "bg:setAllToolsEnabled",
-  "bg:setToolsEnabled",
-  "bg:setBrowserToolEnabled",
-  "bg:setAllBrowserToolsEnabled",
+  "bg:setToolPermission",
+  "bg:setAllToolsPermission",
+  "bg:setPluginPermission",
   "bg:searchPlugins",
   "bg:installPlugin",
   "bg:removePlugin",
   "bg:updatePlugin",
   "offscreen:getLogs",
   "sp:confirmationResponse",
-  "sp:confirmationTimeout",
   "port-changed"
 ]);
 var initBackgroundMessageHandlers = () => {