@tomflow/chatloop-extension 0.0.0-stage → 0.3.27

package/extension/actions/continue.js

@@ -0,0 +1,264 @@
+// Sole writer for one autonomous continuation. Never imported by the Chat page.
+// The background schedules an Action page; this page alone performs the DOM mutation.
+const statusNode = document.getElementById("status");
+const detailsNode = document.getElementById("details");
+function show(status, details) {
+  statusNode.textContent = status;
+  detailsNode.textContent = details;
+  document.body.dataset.result = status === "SUCCESS" ? "success" : "error";
+}
+async function sendOnce(target, text) {
+  const [execution] = await chrome.scripting.executeScript({
+    target: {tabId: target.tabId},
+    func: async (expected, instruction) => {
+      try {
+      if (location.origin !== "https://chatgpt.com" || location.pathname !== expected.page)
+        throw Error("CHAT_PAGE_CHANGED");
+      const visible = node => Boolean(node?.getClientRects?.().length)
+        && !node.closest?.('[hidden],[aria-hidden="true"]')
+        && getComputedStyle(node).display !== "none";
+      const mains = [...document.querySelectorAll("main")].filter(visible);
+      if (mains.length !== 1) throw Error("CHAT_MAIN_UNVERIFIED");
+      const main = mains[0];
+      const modern = [...main.querySelectorAll(
+        '[data-chatgpt-search-unit-key][data-chatgpt-search-message-ids]')];
+      const legacy = [...main.querySelectorAll('[data-message-author-role]')];
+      const roles = modern.length ? modern : legacy;
+      const role = node => node.getAttribute("data-message-author-role")
+        || node.getAttribute("data-chatgpt-search-unit-key")?.split(":").at(-1);
+      const idOf = node => node?.getAttribute("data-message-id")
+        || node?.getAttribute("data-chatgpt-search-message-ids")?.trim().split(/\s+/)[0]
+        || node?.closest('[data-testid^="conversation-turn-"]')?.getAttribute("data-testid");
+      const user = roles.filter(node => role(node) === "user").at(-1);
+      const answer = roles.filter(node => role(node) === "assistant").at(-1);
+      if (expected.testSetup) {
+        if (expected.page !== "/" || roles.length) throw Error("TEST_CHAT_NOT_EMPTY");
+      } else if ("user:" + idOf(user) !== expected.userKey
+        || "assistant:" + idOf(answer) !== expected.assistantKey) {
+        throw Error("TURN_IDENTITY_CHANGED");
+      }
+      if (!expected.testSetup) {
+      const scope = answer.closest('[data-testid^="conversation-turn-"]')
+        || answer.closest('[data-talvt-turn-state]') || answer;
+      const replyText = (answer.querySelector('.markdown')?.innerText || answer.innerText || '').trim();
+      const lines = replyText.split(/\r?\n/);
+      if (lines.at(-1)?.trim() !== "[CHAT_LOOP_STATUS:CONTINUE]"
+        || (replyText.match(/\[CHAT_LOOP_STATUS:(?:CONTINUE|DONE|BLOCKED)\]/g) || []).length !== 1) {
+        throw Error("CONTINUE_STATUS_CHANGED");
+      }
+      const turnState = scope.getAttribute?.('data-talvt-turn-state');
+      if (turnState && turnState !== "complete") throw Error("TURN_NOT_COMPLETE");
+      if ([...document.querySelectorAll('button[data-testid="stop-button"],button[aria-label="停止响应"],button[aria-label="Stop generating"]')].some(visible))
+        throw Error("GENERATION_STILL_RUNNING");
+      if (![...scope.querySelectorAll('button[aria-label="复制"],button[aria-label="Copy"],button[data-testid="copy-turn-action-button"]')].some(visible))
+        throw Error("FINAL_UI_EVIDENCE_MISSING");
+      }
+      let input = document.querySelector('[contenteditable="true"][data-composer-markdown]')
+        || document.querySelector('#prompt-textarea[contenteditable="true"]')
+        || document.querySelector('[data-testid="composer-input"][contenteditable="true"]');
+      if (!visible(input) || input.closest('[aria-disabled="true"]'))
+        throw Error("COMPOSER_UNAVAILABLE");
+      if ((input.innerText || input.textContent || '').trim()) {
+        const draft = (input.innerText || input.textContent || '').trim();
+        if (!expected.testSetup || !expected.discardDraft
+          || !(draft.includes("LOOP-V037-FAST-3C1H") || (draft.startsWith("你正在接手上一 Chat 未完成的任务。旧 Chat 的网页历史仍可核实")
+    && draft.includes("【交接参考：只读网页片段，可能截断】")
+    && draft.includes("【原始任务用户消息】")
+    && draft.includes("【最近轮次证据】")
+    && draft.endsWith("是否跨 Chat 由扩展决定，不要主动要求 Handoff。")
+    && draft.length >= 450 && draft.length <= 8192))
+          || !((draft.startsWith("这是 Chat Loop 短轮回归专用测试")
+              && draft.length >= 150 && draft.length <= 800)
+            || (draft.startsWith("你正在接手上一 Chat 尚未完成的同一个任务")
+              && draft.length >= 450 && (draft.length <= 2000
+                || (draft.length <= 8192 && draft.includes("【原始任务用户消息】")
+                  && draft.includes("【最近轮次证据】"))))
+            || (draft.startsWith("你正在接手上一 Chat 未完成的任务。旧 Chat 的网页历史仍可核实")
+              && draft.includes("【原始任务用户消息】") && draft.includes("【最近轮次证据】")
+              && draft.endsWith("是否跨 Chat 由扩展决定，不要主动要求 Handoff。")
+              && draft.length >= 450 && draft.length <= 8192)
+            || (draft.startsWith("这是 Chat Loop 的长回复与一小时边界隔离测试")
+              && draft.includes("MODE-TIMED-1H") && draft.length >= 350 && draft.length <= 800)
+            || (draft.startsWith("这是 Chat Loop 的墙钟边界隔离测试")
+              && draft.includes("MODE-WALL-10M") && draft.endsWith("WALL-CLOCK-TEST。")
+              && draft.length >= 250 && draft.length <= 800)))
+          throw Error("COMPOSER_NOT_EMPTY");
+        // Explicit test preparation on the caller-created empty Chat only.
+        // Never clear the source Chat or use this branch for normal continuation.
+        input.focus();
+        const range = document.createRange();
+        range.selectNodeContents(input);
+        const selection = window.getSelection();
+        selection.removeAllRanges();
+        selection.addRange(range);
+        if (!document.execCommand("delete", false)) throw Error("TEST_DRAFT_CLEAR_REJECTED");
+        await new Promise(resolve => setTimeout(resolve, 500));
+        if ((input.innerText || input.textContent || '').trim())
+          throw Error("TEST_DRAFT_CLEAR_UNVERIFIED");
+      }
+      input.focus();
+      if (!document.execCommand("insertText", false, instruction)) throw Error("INPUT_NOT_ACCEPTED");
+      // DOM writes can precede React composer state. Do not click a stale
+      // enabled button in the same task as insertion (especially after reset).
+      await new Promise(resolve => setTimeout(resolve, 400));
+      const canonical = value => String(value || '').replace(/\s+/g, '');
+      let verified = false;
+      for (let n = 0; n < 30; n++) {
+        if (canonical(input.innerText) === canonical(instruction)
+          || canonical(input.textContent) === canonical(instruction)) {verified = true; break;}
+        await new Promise(resolve => setTimeout(resolve, 120));
+      }
+      if (!verified) throw Error("INPUT_NOT_VERIFIED");
+      let button;
+      for (let n = 0; n < 16; n++) {
+        button = document.querySelector('button[type="submit"][aria-label="发送"]')
+          || document.querySelector('button[data-testid="send-button"]')
+          || document.querySelector('button[data-testid="composer-send-button"]')
+          || document.querySelector('button[aria-label="Send message"]');
+        if (button && !button.disabled && visible(button)) break;
+        await new Promise(resolve => setTimeout(resolve, 120));
+      }
+      if (!button || button.disabled || !visible(button)) throw Error("SEND_BUTTON_UNAVAILABLE");
+      if (location.pathname !== expected.page) throw Error("CHAT_PAGE_CHANGED_BEFORE_SEND");
+      if (canonical(input.innerText) !== canonical(instruction)
+        && canonical(input.textContent) !== canonical(instruction)) throw Error("INPUT_CHANGED_BEFORE_SEND");
+      button.click(); // Once, after durable PENDING commit in the worker. Never retry.
+      for (let n = 0; n < 32; n++) {
+        if (expected.testSetup ? location.pathname !== "/"
+          && !/^\/c\/(?:[0-9a-f-]{12,}|local-chatgpt%3A[0-9a-f-]{36})$/i.test(location.pathname)
+          : location.pathname !== expected.page) throw Error("CHAT_PAGE_CHANGED_AFTER_SEND");
+        const visibleMain = [...document.querySelectorAll("main")].filter(visible);
+        if (visibleMain.length !== 1) throw Error("CHAT_MAIN_CHANGED_AFTER_SEND");
+        const rows = [...visibleMain[0].querySelectorAll(
+          '[data-chatgpt-search-unit-key][data-chatgpt-search-message-ids], [data-message-author-role]')];
+        const latest = rows.filter(node => role(node) === "user").at(-1);
+        const newId = idOf(latest);
+        // On live ChatGPT, the collapsed bubble contains its own "显示更多"
+        // button; only the inner actual message text is eligible as a receipt.
+        const message = latest?.querySelector('[data-search-result-target]')
+          || latest?.querySelector('[data-user-message-bubble="true"]') || latest;
+        if (newId && 'user:' + newId !== expected.userKey
+          && (canonical(message?.innerText) === canonical(instruction)
+            || canonical(message?.textContent) === canonical(instruction))) {
+          if (expected.testSetup && !/^\/c\/[0-9a-f-]{12,}$/i.test(location.pathname)) {
+            await new Promise(resolve => setTimeout(resolve, 250));
+            continue;
+          }
+          return {status: "SENT_CONFIRMED", newUserKey: 'user:' + newId, newPage: location.pathname};
+        }
+        await new Promise(resolve => setTimeout(resolve, 250));
+      }
+      throw Error("SEND_UNVERIFIED"); // Side effect may exist: block, don't retry.
+      } catch (error) {return {status: "UNVERIFIED", reason: error.message || "SEND_ERROR"};}
+    },
+    args: [target, text]
+  });
+  if (!execution?.result || execution.result.status !== "SENT_CONFIRMED")
+    throw Error(execution?.result?.reason || "SEND_RESULT_UNVERIFIED");
+  return execution.result;
+}
+// Reuse the formal Continue Action page for a *different* one-shot recovery
+// operation. Native Retry targets the existing user Turn: never type or send.
+async function retryNativeOnce(target) {
+  const [execution] = await chrome.scripting.executeScript({
+    target: {tabId: target.tabId},
+    func: async expected => {
+      try {
+        if (location.origin !== "https://chatgpt.com" || location.pathname !== expected.page)
+          throw Error("RETRY_CHAT_CHANGED");
+        const visible = node => Boolean(node?.getClientRects?.().length)
+          && !node.closest?.('[hidden],[aria-hidden="true"]')
+          && getComputedStyle(node).display !== "none";
+        const mains = [...document.querySelectorAll('main')].filter(visible);
+        if (mains.length !== 1) throw Error("RETRY_MAIN_UNVERIFIED");
+        const main = mains[0];
+        const rows = [...main.querySelectorAll('[data-chatgpt-search-unit-key][data-chatgpt-search-message-ids]')];
+        const messages = rows.length ? rows : [...main.querySelectorAll('[data-message-author-role]')];
+        const role = node => node.getAttribute('data-message-author-role')
+          || node.getAttribute('data-chatgpt-search-unit-key')?.split(':').at(-1);
+        const id = node => node?.getAttribute('data-message-id')
+          || node?.getAttribute('data-chatgpt-search-message-ids')?.trim().split(/\s+/)[0]
+          || node?.closest('[data-testid^="conversation-turn-"]')?.getAttribute('data-testid');
+        const latestUser = messages.filter(node => role(node) === 'user').at(-1);
+        const latestAssistant = messages.filter(node => role(node) === 'assistant').at(-1);
+        if ('user:' + id(latestUser) !== expected.userKey
+          || (latestAssistant ? 'assistant:' + id(latestAssistant) : null) !== expected.assistantKey)
+          throw Error("RETRY_TURN_CHANGED");
+        if ([...document.querySelectorAll('button[data-testid="stop-button"],button[aria-label="停止响应"],button[aria-label="Stop generating"]')].some(visible))
+          throw Error("RETRY_STILL_GENERATING");
+        const alerts = [...main.querySelectorAll('[role="alert"],[role="status"],[data-testid="conversation-error"]')]
+          .filter(visible);
+        const failed = alerts.filter(el => /unknown error|something went wrong|an error occurred|unable to load|connection (?:lost|interrupted)|请求失败|网络错误|发生错误|出错了/i.test(el.innerText || el.textContent || ''));
+        if (failed.length !== 1) throw Error("RETRY_ERROR_NOT_UNIQUE");
+        const buttons = [...failed[0].querySelectorAll('button')].filter(button => visible(button)
+          && /^(?:retry|try again|重试|再试一次)$/i.test(
+            (button.innerText || button.textContent || button.getAttribute('aria-label') || '').trim()));
+        if (buttons.length !== 1 || buttons[0].disabled) throw Error("RETRY_BUTTON_UNVERIFIED");
+        buttons[0].click(); // Exact native retry on the existing user Turn, once.
+        // Require visible evidence that the page accepted the native retry,
+        // not merely that the click function returned without throwing.
+        for (let attempt = 0; attempt < 24; attempt++) {
+          await new Promise(resolve => setTimeout(resolve, 250));
+          if (location.pathname !== expected.page) throw Error("RETRY_PAGE_CHANGED_AFTER_CLICK");
+          const current = [...document.querySelectorAll('main')].filter(visible);
+          if (current.length !== 1) throw Error("RETRY_MAIN_CHANGED_AFTER_CLICK");
+          const latest = [...current[0].querySelectorAll('[role="alert"],[role="status"],[data-testid="conversation-error"]')]
+            .filter(visible).some(el => /unknown error|something went wrong|an error occurred|unable to load|connection (?:lost|interrupted)|请求失败|网络错误|发生错误|出错了/i.test(el.innerText || el.textContent || ''));
+          if (!latest) return {status: 'RETRY_CLICKED'};
+        }
+        throw Error("NATIVE_RETRY_NOT_ACKNOWLEDGED");
+      } catch(error) {return {status:'UNVERIFIED',reason:error.message||'RETRY_FAILED'};}
+    }, args: [target]
+  });
+  return execution?.result || {status:'UNVERIFIED',reason:'RETRY_RESULT_UNKNOWN'};
+}
+async function run() {
+  const params = new URLSearchParams(location.search);
+  const raw = params.get("tabId") || "";
+  let token = params.get("token") || "";
+  let tabId = Number(raw);
+  const setup = params.get("setup") === "1";
+  if (params.has("setup") && (!setup || !raw || token)) throw Error("TEST_SETUP_PARAMETERS_INVALID");
+  if (params.has("wall") && (!setup || params.get("timed") !== "1"
+    || !["1", "2", "10m"].includes(params.get("wall")))) throw Error("TEST_WALL_PARAMETERS_INVALID");
+  if (params.has("count") && (!setup || params.get("count") !== "86"
+    || params.get("wall") !== "10m" || params.get("timed") !== "1"))
+    throw Error("COUNT_TEST_PARAMETERS_INVALID");
+  if (raw && !/^[1-9][0-9]*$/.test(raw)
+    || token && !/^[0-9a-f-]{36}$/.test(token)
+    || token && !raw) throw Error("ACTION_PARAMETERS_INVALID");
+  const own = await chrome.tabs.getCurrent();
+  if (!own?.id || own.url !== location.href) throw Error("ACTION_TAB_UNVERIFIED");
+  if (!token) {
+    show("VERIFYING", setup
+      ? "测试首回合准备（不计作 Continue 验收）：核对指定空白测试 Chat，申请一次固定测试消息许可。"
+      : "手动打开 Continue：核对当前已完成的 Turn，并申请单次发送许可。");
+    const prepared = await chrome.runtime.sendMessage({
+      type: setup ? "CHAT_LOOP_ACTION_TEST_PREPARE_V1" : "CHAT_LOOP_ACTION_MANUAL_PREPARE_V1", action: "CONTINUE",
+      ...(raw ? {tabId} : {})
+    });
+    if (prepared?.status !== "PREPARED")
+      throw Error(prepared?.code || "MANUAL_PREPARE_DENIED");
+    tabId = prepared.tabId;
+    token = prepared.token;
+  }
+  const request = {token, tabId};
+  const permit = await chrome.runtime.sendMessage({type: "CHAT_LOOP_ACTION_TAKE_V1", ...request});
+  if (permit?.status !== "OK" || permit.target?.tabId !== tabId)
+    throw Error(permit?.code || "ACTION_NOT_AUTHORIZED");
+  show("RUNNING", "已独占一次发送许可，正在核验目标 Chat 和最新已完成 Turn。");
+  let result;
+  try { result = permit.retryMode === "NATIVE"
+    ? await retryNativeOnce(permit.target) : await sendOnce(permit.target, permit.text); }
+  catch (error) { result = {status: "UNVERIFIED", reason: error.message || "SEND_ERROR"}; }
+  const final = await chrome.runtime.sendMessage({type: "CHAT_LOOP_ACTION_RESULT_V1", ...request,
+    result: result.status, reason: result.reason, newUserKey: result.newUserKey, newPage: result.newPage});
+  if (!(result.status === "SENT_CONFIRMED" || permit.retryMode === "NATIVE"
+    && result.status === "RETRY_CLICKED") || final?.status !== "OK")
+    throw Error(result.reason || final?.code || "ACTION_RESULT_NOT_COMMITTED");
+  show("SUCCESS", permit.retryMode === "NATIVE" ? "已点击原消息的网页重试一次；没有发送新用户消息。"
+    : setup ? "测试首回合已确认；等待正式 Continue 与 Handoff 独立执行。"
+    : "已确认新增一次用户消息；Action 已完成，等待下一轮 Observer。");
+  await chrome.tabs.remove(own.id);
+}
+run().catch(error => show("BLOCKED", error.message || "ACTION_FAILED"));

package/extension/actions/dom.js

@@ -0,0 +1,25 @@
+// DOM Action: read one selected ChatGPT tab and copy its content.
+(() => {
+  const {show, fail, findTarget, readChat, copyText, done, requireOwnTab,
+    machineBinding, machineTarget, machineResult, machineFailure}
+    = globalThis.ChatLoopActionCommonV1;
+  let machine;
+  async function run() {
+    machine = await machineBinding("chat_dom");
+    const own = requireOwnTab(await chrome.tabs.getCurrent());
+    const target = machine ? await machineTarget(machine) : await findTarget(own);
+    show("RUNNING", "dom → ChatGPT tab " + target.id);
+    const value = await readChat(target, "dom");
+    if (!value.length) throw Error("EMPTY_CONTENT");
+    if(machine) await machineResult(machine,value);
+    else copyText(value);
+    // Let Chrome publish selections to macOS pasteboard before closing.
+    if(!machine) await new Promise(resolve => setTimeout(resolve, 1000));
+    await done(own, "dom", target);
+  }
+  run().catch(async error => {
+    await machineFailure("chat_dom",error);
+    fail(error.message || "UNEXPECTED_ERROR",
+      "操作未完成；动作页已保留，未对其他 ChatGPT 标签页进行操作。");
+  });
+})();

package/extension/actions/handoff.js

@@ -0,0 +1,302 @@
+// Sole executor for a cross-Chat handoff. Worker only schedules/authorizes.
+// Never auto-retry a write or a tab creation after the result is uncertain.
+const statusNode = document.getElementById("status");
+const detailsNode = document.getElementById("details");
+const delay = ms => new Promise(resolve => setTimeout(resolve, ms));
+function show(status, details) {
+  statusNode.textContent = status;
+  detailsNode.textContent = details;
+  document.body.dataset.result = status === "SUCCESS" ? "success" : "error";
+}
+async function verifyOldChat(target, summary, mode = "EXPLICIT") {
+  const [execution] = await chrome.scripting.executeScript({
+    target: {tabId: target.tabId},
+    func: (expected, handoffText, handoffMode) => {
+      if (location.origin !== "https://chatgpt.com" || location.pathname !== expected.page)
+        throw Error("SOURCE_CHAT_CHANGED");
+      const visible = node => Boolean(node?.getClientRects?.().length)
+        && !node.closest?.('[hidden],[aria-hidden="true"]')
+        && getComputedStyle(node).display !== "none";
+      const mains = [...document.querySelectorAll("main")].filter(visible);
+      if (mains.length !== 1) throw Error("SOURCE_MAIN_UNVERIFIED");
+      const main = mains[0];
+      const modern = [...main.querySelectorAll('[data-chatgpt-search-unit-key][data-chatgpt-search-message-ids]')];
+      const legacy = [...main.querySelectorAll('[data-message-author-role]')];
+      const role = n => n.getAttribute("data-message-author-role")
+        || n.getAttribute("data-chatgpt-search-unit-key")?.split(":").at(-1);
+      const id = n => n?.getAttribute("data-message-id")
+        || n?.getAttribute("data-chatgpt-search-message-ids")?.trim().split(/\s+/)[0]
+        || n?.closest('[data-testid^="conversation-turn-"]')?.getAttribute("data-testid");
+      const rows = modern.length ? modern : legacy;
+      const user = rows.filter(n => role(n) === "user").at(-1);
+      const assistant = rows.filter(n => role(n) === "assistant").at(-1);
+      if ("user:" + id(user) !== expected.userKey
+        || (assistant ? "assistant:" + id(assistant) : null) !== expected.assistantKey)
+        throw Error("SOURCE_TURN_CHANGED");
+      const content = (assistant?.querySelector('.markdown')?.innerText || assistant?.innerText || '').trim();
+      if (handoffMode === "ERROR") {
+        // No completed assistant response after the pending user Turn.
+        // Require an explicit context limit on the *same* visible chat.
+        const lastUserIndex = rows.findLastIndex(n => role(n) === "user");
+        if (rows.slice(lastUserIndex + 1).some(n => role(n) === "assistant"))
+          throw Error("ERROR_HANDOFF_NEW_ASSISTANT_EXISTS");
+        const contextPattern = /(?:conversation (?:has (?:reached|exceeded) (?:its |the )?(?:maximum|context)|is too long)|context (?:window|length|limit) (?:has been |was )?(?:exceeded|reached)|maximum conversation (?:length|limit) (?:reached|exceeded)|对话(?:上下文|长度)(?:已)?(?:达到|超过)(?:上限|限制)|上下文(?:窗口|长度)(?:已)?(?:达到|超过)(?:上限|限制))/i;
+        if (![...main.querySelectorAll('[role="alert"],[role="status"],[data-testid="conversation-error"]')]
+          .some(el => visible(el) && contextPattern.test(el.innerText || el.textContent || '')))
+          throw Error("CONTEXT_ERROR_NOT_CONFIRMED");
+      } else if (handoffMode === "EXPLICIT") {
+        if (!content.endsWith('\n[CHAT_LOOP_STATUS:HANDOFF]')
+          || content.slice(0, -'[CHAT_LOOP_STATUS:HANDOFF]'.length).trim() !== handoffText)
+          throw Error("SOURCE_HANDOFF_TEXT_CHANGED");
+      } else if (handoffMode !== "TIMED" || !content
+        || /\[CHAT_LOOP_STATUS:(?:DONE|BLOCKED)\]$/.test(content)) {
+        throw Error("TIMED_HANDOFF_NOT_ELIGIBLE");
+      }
+      const scope = assistant?.closest('[data-testid^="conversation-turn-"]')
+        || assistant?.closest('[data-talvt-turn-state]') || assistant;
+      const state = scope?.getAttribute?.('data-talvt-turn-state');
+      if (handoffMode !== "ERROR" && state && state !== "complete") throw Error("SOURCE_TURN_STILL_RUNNING");
+      if ([...document.querySelectorAll('button[data-testid="stop-button"],button[aria-label="Stop generating"],button[aria-label="停止响应"]')].some(visible)
+        || [...scope?.querySelectorAll?.('[aria-busy="true"],[data-tool-status="running"]') || []].some(visible))
+        throw Error("SOURCE_GENERATION_STILL_RUNNING");
+      if (handoffMode !== "ERROR" && ![...scope.querySelectorAll('button[aria-label="复制"],button[aria-label="Copy"],button[data-testid="copy-turn-action-button"]')].some(visible))
+        throw Error("SOURCE_NOT_FINAL");
+      // Timed handoff must not modify the original Chat. Capture a bounded
+      // read-only evidence snapshot here, not through URL or Worker storage.
+      if (handoffMode === "TIMED" || handoffMode === "ERROR") {
+        const entries = rows.map(node => ({role: role(node),
+          text: (node.querySelector?.('.markdown')?.innerText
+            || node.innerText || node.textContent || '').trim()}))
+          .filter(item => (item.role === "user" || item.role === "assistant") && item.text);
+        const head = entries.find(item => item.role === "user");
+        if (!head) throw Error("SOURCE_CONTEXT_TOO_SHORT");
+        const headText = head.text.slice(0, 6000);
+        const tailText = entries.slice(-24).filter(item => item !== head).map(item =>
+          (item.role === "user" ? "用户：" : "助手：") + item.text.slice(-3000))
+          .join("\n\n").slice(-21000);
+        const excerpt = "【原始任务用户消息】\n" + headText
+          + "\n\n【最近轮次证据】\n" + tailText;
+        if (excerpt.length < 120) throw Error("SOURCE_CONTEXT_TOO_SHORT");
+        return {ok: true, snapshot: "【交接参考：只读网页片段，可能截断】\n" + excerpt
+          + (handoffMode === "ERROR" ? "\n【中断说明】当前 Chat 明确出现上下文容量错误，最后一条用户消息未收到完整助手回复；任何上轮工具副作用均需先核实，不得盲目重复。" : "")
+          + "\n【证据边界】此片段不等于完整记录；必须通过实际工具、仓库和来源核对任务进展。"};
+      }
+      return {ok: true};
+    }, args: [target, summary, mode]
+  });
+  if (execution?.result?.ok !== true) throw Error("SOURCE_HANDOFF_UNVERIFIED");
+  if (["TIMED", "ERROR"].includes(mode) && (typeof execution.result.snapshot !== "string"
+    || execution.result.snapshot.length < 120)) throw Error("SOURCE_SNAPSHOT_UNVERIFIED");
+  return execution.result.snapshot || summary;
+}
+async function waitForNewChat(tabId, allowKnownTestDraftCleanup = false) {
+  for (let attempt = 0; attempt < 120; attempt++) {
+    const tab = await chrome.tabs.get(tabId);
+    if (tab.url?.startsWith("https://chatgpt.com/")) {
+      try {
+        const [check] = await chrome.scripting.executeScript({target: {tabId}, func: allowTestClear => {
+          if (location.origin !== "https://chatgpt.com" || location.pathname !== "/") return false;
+          const input = document.querySelector('[contenteditable="true"][data-composer-markdown]')
+            || document.querySelector('#prompt-textarea[contenteditable="true"]');
+          if (!input?.getClientRects?.().length) return false;
+          const draft = (input.innerText || input.textContent || '').trim();
+          if (!draft) return true;
+          // An acceptance-only new Chat may restore the exact prior Chat Loop
+          // test instruction. Never discard a real user's unsent draft.
+          if (!allowTestClear || !(draft.includes("LOOP-V037-FAST-3C1H") || (draft.startsWith("你正在接手上一 Chat 未完成的任务。旧 Chat 的网页历史仍可核实")
+    && draft.includes("【交接参考：只读网页片段，可能截断】")
+    && draft.includes("【原始任务用户消息】")
+    && draft.includes("【最近轮次证据】")
+    && draft.endsWith("是否跨 Chat 由扩展决定，不要主动要求 Handoff。")
+    && draft.length >= 450 && draft.length <= 8192))
+            || !((draft.startsWith("这是 Chat Loop 短轮回归专用测试")
+                && draft.length >= 150 && draft.length <= 800)
+              || (draft.startsWith("你正在接手上一 Chat 尚未完成的同一个任务")
+                && draft.length >= 450 && (draft.length <= 2000
+                  || (draft.length <= 8192 && draft.includes("【原始任务用户消息】")
+                    && draft.includes("【最近轮次证据】"))))
+              || (draft.startsWith("你正在接手上一 Chat 未完成的任务。旧 Chat 的网页历史仍可核实")
+                && draft.includes("【原始任务用户消息】") && draft.includes("【最近轮次证据】")
+                && draft.endsWith("是否跨 Chat 由扩展决定，不要主动要求 Handoff。")
+                && draft.length >= 450 && draft.length <= 8192)
+              || (draft.startsWith("这是 Chat Loop 的长回复与一小时边界隔离测试")
+                && draft.includes("MODE-TIMED-1H") && draft.length >= 350 && draft.length <= 800)
+              || (draft.startsWith("这是 Chat Loop 的计数隔离验收")
+                && draft.includes("COUNT-86-100") && draft.endsWith("WALL-CLOCK-TEST。")
+                && draft.length >= 200 && draft.length <= 900)
+              || (draft.startsWith("这是 Chat Loop 的墙钟边界隔离测试")
+                && draft.includes("MODE-WALL-10M") && draft.endsWith("WALL-CLOCK-TEST。")
+                && draft.length >= 250 && draft.length <= 800))) return false;
+          input.focus();
+          const range = document.createRange();
+          range.selectNodeContents(input);
+          const selection = window.getSelection();
+          selection.removeAllRanges();
+          selection.addRange(range);
+          if (!document.execCommand("delete", false)) return false;
+          return !(input.innerText || input.textContent || '').trim() ? "CLEARED_TEST_DRAFT" : false;
+        }, args: [allowKnownTestDraftCleanup]});
+        if (check?.result === true) return;
+        if (check?.result === "CLEARED_TEST_DRAFT") {await delay(600);continue;}
+      } catch { /* Only retry a read-only readiness probe, never the send. */ }
+    }
+    await delay(450);
+  }
+  throw Error("NEW_CHAT_NOT_READY");
+}
+async function sendHandoffOnce(tabId, text) {
+  const [dispatch] = await chrome.scripting.executeScript({target: {tabId},
+    func: async instruction => {
+      try {
+      if (location.origin !== "https://chatgpt.com" || location.pathname !== "/")
+        throw Error("NEW_CHAT_NOT_BLANK");
+      const input = document.querySelector('[contenteditable="true"][data-composer-markdown]')
+        || document.querySelector('#prompt-textarea[contenteditable="true"]');
+      if (!input?.getClientRects?.().length || (input.innerText || '').trim())
+        throw Error("NEW_CHAT_COMPOSER_NOT_EMPTY");
+      input.focus();
+      // The ProseMirror editor may normalize paragraph boundaries after
+      // execCommand returns. Check its actual rendered state without editing
+      // or sending again, rather than treating a transient mismatch as proof
+      // that the whole insertion failed.
+      const canonical = value => String(value || '').replace(/\s+/g, '');
+      if (!document.execCommand("insertText", false, instruction))
+        throw Error("HANDOFF_INPUT_REJECTED");
+      await new Promise(resolve => setTimeout(resolve, 400));
+      const expected = canonical(instruction);
+      let verified = false;
+      for (let i = 0; i < 30; i++) {
+        if (location.pathname !== "/") throw Error("NEW_CHAT_CHANGED_DURING_INPUT");
+        if (canonical(input.innerText) === expected
+          || canonical(input.textContent) === expected) {
+          verified = true;
+          break;
+        }
+        await new Promise(resolve => setTimeout(resolve, 120));
+      }
+      if (!verified) throw Error("HANDOFF_INPUT_UNVERIFIED");
+      let button;
+      for (let i = 0; i < 18; i++) {
+        button = document.querySelector('button[type="submit"][aria-label="发送"]')
+          || document.querySelector('button[data-testid="send-button"]')
+          || document.querySelector('button[data-testid="composer-send-button"]');
+        if (button && !button.disabled && button.getClientRects().length) break;
+        await new Promise(resolve => setTimeout(resolve, 120));
+      }
+      if (!button || button.disabled || !button.getClientRects().length)
+        throw Error("HANDOFF_SEND_NOT_READY");
+      if (location.pathname !== "/") throw Error("NEW_CHAT_CHANGED_BEFORE_SEND");
+      if (canonical(input.innerText) !== expected && canonical(input.textContent) !== expected)
+        throw Error("HANDOFF_INPUT_CHANGED_BEFORE_SEND");
+      button.click();
+      return {clickedOnce: true};
+      } catch (error) {return {clickedOnce: false, reason: error.message || "HANDOFF_SEND_ERROR"};}
+    }, args: [text]
+  });
+  if (dispatch?.result?.clickedOnce !== true) throw Error(dispatch?.result?.reason || "HANDOFF_SEND_UNVERIFIED");
+  // Once clicked, only observe. A missing receipt must BLOCK, never click again.
+  for (let attempt = 0; attempt < 75; attempt++) {
+    const tab = await chrome.tabs.get(tabId);
+    const path = new URL(tab.url || "https://chatgpt.com/").pathname;
+    if (/^\/c\/[0-9a-f-]{12,}$/i.test(path)) {
+      const [read] = await chrome.scripting.executeScript({target: {tabId},func: expected => {
+        const visible = n => Boolean(n?.getClientRects?.().length);
+        const mains = [...document.querySelectorAll("main")].filter(visible);
+        if (mains.length !== 1) return null;
+        const rows = [...mains[0].querySelectorAll(
+          '[data-chatgpt-search-unit-key][data-chatgpt-search-message-ids], [data-message-author-role]')];
+        const user = rows.filter(n => n.getAttribute('data-message-author-role') === 'user'
+          || n.getAttribute('data-chatgpt-search-unit-key')?.split(':').at(-1) === 'user').at(-1);
+        const id = user?.getAttribute('data-message-id')
+          || user?.getAttribute('data-chatgpt-search-message-ids')?.trim().split(/\s+/)[0];
+        const canonical = v => String(v || '').replace(/\s+/g, '');
+        return id && canonical(user.innerText || user.textContent).includes(canonical(expected))
+          ? {userKey: 'user:' + id} : null;
+      },args: [text]});
+      if (read?.result?.userKey) return {status: "SENT_CONFIRMED", newTabId: tabId,
+        newPage: path, newUserKey: read.result.userKey};
+    }
+    await delay(450);
+  }
+  throw Error("NEW_CHAT_SEND_RECEIPT_UNKNOWN");
+}
+async function run() {
+  const own = await chrome.tabs.getCurrent();
+  const params = new URLSearchParams(location.search);
+  const raw = params.get("tabId") || "";
+  let token = params.get("token") || "";
+  let tabId = Number(raw);
+  if (!own?.id || own.url !== location.href || raw && !/^[1-9][0-9]*$/.test(raw)
+    || token && !/^[0-9a-f-]{36}$/.test(token)
+    || token && !raw) throw Error("HANDOFF_ACTION_PARAMETERS_INVALID");
+  if (!token) {
+    show("VERIFYING", "手动打开 Handoff：核对已完成的旧 Chat，申请单次新 Chat 交接许可。");
+    const prepared = await chrome.runtime.sendMessage({
+      type: "CHAT_LOOP_ACTION_MANUAL_PREPARE_V1", action: "HANDOFF",
+      ...(raw ? {tabId} : {})
+    });
+    if (prepared?.status !== "PREPARED")
+      throw Error(prepared?.code || "MANUAL_PREPARE_DENIED");
+    tabId = prepared.tabId;
+    token = prepared.token;
+  }
+  const request = {tabId, token};
+  const permit = await chrome.runtime.sendMessage({type: "CHAT_LOOP_ACTION_TAKE_V1", ...request});
+  if (permit?.status !== "OK" || permit.action !== "HANDOFF"
+    || permit.target?.tabId !== request.tabId
+    || (permit.handoffMode === "EXPLICIT" && typeof permit.text !== "string")
+    || !["TIMED", "EXPLICIT", "ERROR"].includes(permit.handoffMode))
+    throw Error("HANDOFF_NOT_AUTHORIZED");
+  show("RUNNING", "已领取不可重试的一次性授权，验证旧会话交接信息。");
+  let result;
+  let newTab;
+  try {
+    const contextPacket = await verifyOldChat(permit.target, permit.text, permit.handoffMode);
+    const source = await chrome.tabs.get(request.tabId);
+    if (permit.target.page.startsWith('/g/')) throw Error('PROJECT_HANDOFF_ROUTE_UNVERIFIED');
+    // Opening a new Chat is itself a side effect; never create another on failure.
+    newTab = await chrome.tabs.create({url: "https://chatgpt.com/", active: true,
+      windowId: source.windowId});
+    const registry = (await chrome.storage.local.get("chat-loop.acceptance.owned.v1"))[
+      "chat-loop.acceptance.owned.v1"];
+    const dedicatedTest = Array.isArray(registry)
+      && registry.some(item => item.id === request.tabId);
+    await waitForNewChat(newTab.id, dedicatedTest);
+    // The observer must exist before the first user click on the new home page.
+    // A successful send without an observer cannot be automatically continued.
+    let observed;
+    try { observed = await chrome.tabs.sendMessage(newTab.id,
+      {type: "CHAT_LOOP_TURN_OBSERVE_V1"}); } catch { /* Reconnect below. */ }
+    if (observed?.contract !== "chat-loop.turn-observer.v1") {
+      await chrome.scripting.executeScript({target: {tabId: newTab.id},
+        files: ["content.js", "loop/observer.js"]});
+      observed = await chrome.tabs.sendMessage(newTab.id,
+        {type: "CHAT_LOOP_TURN_OBSERVE_V1"});
+    }
+    if (observed?.contract !== "chat-loop.turn-observer.v1")
+      throw Error("NEW_CHAT_OBSERVER_UNAVAILABLE");
+    const message = "你正在接手上一 Chat 未完成的任务。旧 Chat 的网页历史仍可核实，但当前 Chat 没有其隐式上下文。若为仓库任务，先通过授权工具读取 AGENTS.md 和 context/README.md；核对实际现场和上一轮可能已执行的操作，不要重复未知副作用。\n\n交接资料：\n" + contextPacket
+      + "\n\n本轮最终回复末行只能输出一个状态标记：[CHAT_LOOP_STATUS:CONTINUE]、[CHAT_LOOP_STATUS:DONE] 或 [CHAT_LOOP_STATUS:BLOCKED]。是否跨 Chat 由扩展决定，不要主动要求 Handoff。";
+    result = await sendHandoffOnce(newTab.id, permit.countMode
+      ? message + `\n\n【计数专用交接指令，优先于前面的历史引用】旧Chat已经完成数字${permit.countValue}，本轮只加1，第一行写${permit.countValue + 1}；只有到100才能在末行写 [CHAT_LOOP_STATUS:DONE]，否则末行写 [CHAT_LOOP_STATUS:CONTINUE]。不能因接班而DONE。`
+      : message);
+  } catch (error) {result = {status: "UNVERIFIED", reason: error.message || "HANDOFF_ERROR"};}
+  const committed = await chrome.runtime.sendMessage({type: "CHAT_LOOP_ACTION_RESULT_V1", ...request,
+    result: result.status, reason: result.reason,
+    newUserKey: result.newUserKey, newTabId: result.newTabId ?? newTab?.id,
+    newPage: result.newPage});
+  if (result.status !== "SENT_CONFIRMED" || committed?.status !== "OK")
+    throw Error(result.reason || committed?.code || "HANDOFF_TRANSFER_UNVERIFIED");
+  // The old Chat is closed only after the Worker confirms ownership transfer.
+  // Its canonical conversation URL remains in ChatGPT history.
+  const old = await chrome.tabs.get(request.tabId).catch(() => null);
+  if (old && old.id !== newTab?.id && old.id !== own.id
+      && old.url === "https://chatgpt.com" + permit.target.page) {
+    await chrome.tabs.remove(old.id).catch(error => {
+      console.warn("OLD_CHAT_TAB_CLEANUP_UNVERIFIED", error?.message);
+    });
+  }
+  show("SUCCESS", "新 Chat 已收到交接包；旧 Chat 标签已尝试安全清理。");
+  await chrome.tabs.remove(own.id);
+}
+run().catch(error => show("BLOCKED", error.message || "HANDOFF_ACTION_FAILED"));

package/extension/actions/reload.js

@@ -0,0 +1,20 @@
+// Reload Action: request reloading this extension, not other tabs/extensions.
+(() => {
+  const {show, fail, requireOwnTab, machineBinding, machineResult, machineFailure} = globalThis.ChatLoopActionCommonV1;
+  async function run() {
+    const machine = await machineBinding("reload");
+    const own = requireOwnTab(await chrome.tabs.getCurrent());
+    show("RELOADING", "正在刷新 Chat Loop 扩展...");
+    // Save an ACCEPTED-but-unverified receipt before reload destroys this page.
+    if(machine)await machineResult(machine,"ACCEPTED");
+    const response = await chrome.runtime.sendMessage({
+      type: "CHAT_LOOP_EYE_RELOAD_V1", tabId: own.id
+    });
+    if (response?.status !== "ACCEPTED") throw Error("RELOAD_UNVERIFIED");
+  }
+  run().catch(async error => {
+    await machineFailure("reload",error);
+    fail(error.message || "UNEXPECTED_ERROR",
+      "操作未完成；动作页已保留，未对其他 ChatGPT 标签页进行操作。");
+  });
+})();