@tomflow/chatloop-extension 0.0.0-stage → 0.3.27

package/extension/popup.js

@@ -0,0 +1,70 @@
+const CONTRACT = "chat-loop.web-environment.v1";
+const statusNode = document.getElementById("status");
+const detailNode = document.getElementById("detail");
+
+function show(status, detail) {
+  statusNode.textContent = status;
+  detailNode.textContent = detail;
+}
+
+function requestProof(tabId) {
+  return new Promise((resolve) => {
+    chrome.tabs.sendMessage(tabId, { type: "CHAT_LOOP_WEB_CHECK_V1" }, (proof) => {
+      if (chrome.runtime.lastError) {
+        resolve({ status: "EXTENSION_UNVERIFIED" });
+        return;
+      }
+      resolve(proof);
+    });
+  });
+}
+
+async function check() {
+  const tabs = await chrome.tabs.query({ active: true, currentWindow: true });
+  const tab = tabs[0];
+  if (!tab || !tab.url) {
+    show("WEB_UNVERIFIED", "无法确认当前 Chrome 标签页。");
+    return;
+  }
+  let url;
+  try { url = new URL(tab.url); } catch {
+    show("WEB_UNVERIFIED", "当前标签页地址无效。");
+    return;
+  }
+  if (url.protocol !== "https:" || url.hostname !== "chatgpt.com") {
+    show("UNSUPPORTED_PAGE", "请在 Chrome 中打开 https://chatgpt.com 后重新检测。");
+    return;
+  }
+  const proof = await requestProof(tab.id);
+  if (proof?.contract !== CONTRACT) {
+    show("EXTENSION_UNVERIFIED", "页面尚未连接扩展。请刷新 ChatGPT 页面后再打开此扩展。");
+    return;
+  }
+  if (proof.status === "WEB_READY" && proof.browser === "GOOGLE_CHROME") {
+    show("WEB_READY", "Chrome 网页环境已验证；这是扩展本地检测结果，尚未回传给 ChatGPT Plugin。");
+    return;
+  }
+  show(proof.status || "WEB_UNVERIFIED",
+    "当前浏览器环境尚未得到 Google Chrome 的有效证明。");
+}
+
+void check().catch(() => show("WEB_UNVERIFIED", "浏览器检测失败，请重试。"));
+
+// Read-only action feedback; never expose the single-use token or message text.
+async function showActionState() {
+  const key = "chat-loop.action.run.v1";
+  const run = (await chrome.storage.local.get(key))[key];
+  const allowed = ["phase", "action", "reason", "tabId", "page", "sourceTabId", "sourcePage",
+    "userKey", "assistantKey", "newUserKey", "testSetup", "startedAt",
+    "deadlineAt", "handoffPending", "handoffPendingAt", "attemptedNewTabId"];
+  const summary = {version: chrome.runtime.getManifest().version};
+  if (run) for (const key of allowed) if (run[key] !== undefined) summary[key] = run[key];
+  document.body.dataset.actionState = JSON.stringify(summary);
+  document.getElementById("action-state").textContent = run
+    ? "最近发送动作：" + run.action + " · " + run.phase + (run.reason ? " · " + run.reason : "")
+    : "尚无发送动作记录";
+}
+void showActionState().catch(() => {
+  document.getElementById("action-state").textContent = "最近发送动作：状态无法确认，不要重复发送";
+});
+chrome.storage.onChanged.addListener(() => {void showActionState();});

package/extension/reload.html

@@ -0,0 +1,17 @@
+<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8">
+<title>Chat Loop Extension · Reload</title>
+<style>body{font:15px system-ui,sans-serif;padding:24px;max-width:620px;color:#222}
+#status{font-weight:700}#details{white-space:pre-wrap;overflow-wrap:anywhere;color:#555}
+body[data-result="error"] #status{color:#b00020}</style>
+</head>
+<body>
+<h1>Chat Loop Extension · Reload</h1>
+<p id="status" role="status">STARTING</p>
+<p id="details">正在执行，成功后关闭此页面；失败则保留错误以供诊断。</p>
+<script src="actions/common.js"></script>
+<script src="actions/reload.js"></script>
+</body>
+</html>

package/extension/screenshot.html

@@ -0,0 +1,17 @@
+<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8">
+<title>Chat Loop Extension · Screenshot</title>
+<style>body{font:15px system-ui,sans-serif;padding:24px;max-width:620px;color:#222}
+#status{font-weight:700}#details{white-space:pre-wrap;overflow-wrap:anywhere;color:#555}
+body[data-result="error"] #status{color:#b00020}</style>
+</head>
+<body>
+<h1>Chat Loop Extension · Screenshot</h1>
+<p id="status" role="status">STARTING</p>
+<p id="details">正在执行，成功后关闭此页面；失败则保留错误以供诊断。</p>
+<script src="actions/common.js"></script>
+<script src="actions/screenshot.js"></script>
+</body>
+</html>

package/extension/text.html

@@ -0,0 +1,17 @@
+<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8">
+<title>Chat Loop Extension · Text</title>
+<style>body{font:15px system-ui,sans-serif;padding:24px;max-width:620px;color:#222}
+#status{font-weight:700}#details{white-space:pre-wrap;overflow-wrap:anywhere;color:#555}
+body[data-result="error"] #status{color:#b00020}</style>
+</head>
+<body>
+<h1>Chat Loop Extension · Text</h1>
+<p id="status" role="status">STARTING</p>
+<p id="details">正在执行，成功后关闭此页面；失败则保留错误以供诊断。</p>
+<script src="actions/common.js"></script>
+<script src="actions/text.js"></script>
+</body>
+</html>

package/lib/bridge.mjs

@@ -0,0 +1,104 @@
+import {randomUUID} from 'node:crypto';
+import {existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync} from 'node:fs';
+import {homedir, tmpdir} from 'node:os';
+import {join} from 'node:path';
+
+export const HOST_NAME = 'com.tomflow.chatloop.extension';
+export const ACTIONS = ['chat_text', 'chat_dom', 'chat_screenshot', 'reload'];
+const ID = /^[a-f0-9]{32}$/;
+const MAX_TEXT = 8 * 1024 * 1024;
+const MAX_PNG = 24 * 1024 * 1024;
+const TTL_MS = 20 * 60 * 1000;
+export const configFile = () => join(homedir(), '.chat-loop', 'extension', 'config.json');
+export const tempRoot = () => join(tmpdir(), 'chatloop-extension-' + (process.getuid?.() ?? process.env.USERNAME ?? 'user'));
+export function privateDir(path) {
+  mkdirSync(path, {recursive:true, mode:0o700});
+  const st=lstatSync(path);
+  if(!st.isDirectory() || st.isSymbolicLink() || (process.getuid && st.uid!==process.getuid())
+    || (process.platform!=='win32' && (st.mode&0o077)))
+    throw Object.assign(Error('Untrusted extension state directory'),{code:'UNTRUSTED_STATE'});
+  return path;
+}
+export function requestDir(id) {
+  if(typeof id!=='string'||!ID.test(id))throw Object.assign(Error('Invalid request ID'),{code:'INVALID_REQUEST_ID'});
+  return join(tempRoot(),id);
+}
+export function prepare(action) {
+  if(!ACTIONS.includes(action))throw Object.assign(Error('Unknown extension action'),{code:'UNKNOWN_ACTION'});
+  privateDir(tempRoot());
+  cleanup();
+  const id=randomUUID().replaceAll('-',''), nonce=randomUUID().replaceAll('-',''), at=Date.now();
+  const dir=privateDir(requestDir(id));
+  writeFileSync(join(dir,'request.json'), JSON.stringify({id,nonce,action,at,expiresAt:at+TTL_MS}),
+    {flag:'wx',mode:0o600});
+  return {id,nonce,action,dir};
+}
+export function readRequest(id) {
+  const dir=requestDir(id);
+  if(!existsSync(dir))throw Object.assign(Error('No request'),{code:'NO_REQUEST'});
+  privateDir(dir);
+  const p=join(dir,'request.json'), st=lstatSync(p);
+  if(!st.isFile()||st.isSymbolicLink() || (process.getuid && st.uid!==process.getuid()))
+    throw Object.assign(Error('Invalid request record'),{code:'UNTRUSTED_REQUEST'});
+  const r=JSON.parse(readFileSync(p,'utf8'));
+  if(r.id!==id||!ACTIONS.includes(r.action)||Date.now()>r.expiresAt)
+    throw Object.assign(Error('Request expired or changed'),{code:'REQUEST_EXPIRED'});
+  return r;
+}
+export function finish({id,nonce,action,status,payload='',code=null}) {
+  const r=readRequest(id);
+  if(nonce!==r.nonce||action!==r.action)throw Object.assign(Error('Request mismatch'),{code:'REQUEST_MISMATCH'});
+  if(status!=='OK'&&status!=='FAILED')throw Object.assign(Error('Invalid status'),{code:'INVALID_RESULT'});
+  const dir=requestDir(id);
+  const resultPath=join(dir,'result.json');
+  if(existsSync(resultPath))throw Object.assign(Error('Duplicate result'),{code:'ALREADY_FINISHED'});
+  let bytes=0,mimeType=null,filename=null;
+  if(status==='OK'){
+    if(typeof payload!=='string')throw Object.assign(Error('Invalid payload'),{code:'INVALID_PAYLOAD'});
+    let buf;
+    if(action==='chat_screenshot'){
+      if(!/^[A-Za-z0-9+/]*={0,2}$/.test(payload))throw Object.assign(Error('Invalid PNG encoding'),{code:'INVALID_PNG'});
+      buf=Buffer.from(payload,'base64');
+      if(buf.subarray(0,8).toString('hex')!=='89504e470d0a1a0a')throw Object.assign(Error('Invalid PNG signature'),{code:'INVALID_PNG'});
+      mimeType='image/png';filename='result.png';
+      if(buf.length>MAX_PNG)throw Object.assign(Error('PNG too large'),{code:'RESULT_TOO_LARGE'});
+    }else{
+      buf=Buffer.from(payload,'utf8');
+      if(buf.length>MAX_TEXT)throw Object.assign(Error('Text too large'),{code:'RESULT_TOO_LARGE'});
+      mimeType=action==='chat_dom'?'text/html':'text/plain';
+      filename=action==='reload'?null:action==='chat_dom'?'result.html':'result.txt';
+    }
+    bytes=buf.length;
+    if(filename)writeFileSync(join(dir,filename),buf,{flag:'wx',mode:0o600});
+  }
+  const rec={id,action,status,code:status==='FAILED'?(String(code||'ACTION_FAILED').slice(0,120)):null,
+    path:filename?join(dir,filename):null,bytes,mimeType,at:Date.now(),
+    verified:action!=='reload'};
+  writeFileSync(resultPath+'.tmp',JSON.stringify(rec),{flag:'wx',mode:0o600});
+  renameSync(resultPath+'.tmp',resultPath);
+  return rec;
+}
+export function readResult(id) {
+  const p=join(requestDir(id),'result.json');
+  if(!existsSync(p))return null;
+  privateDir(requestDir(id));
+  return JSON.parse(readFileSync(p,'utf8'));
+}
+export function cleanup(){
+  const root=tempRoot();
+  if(!existsSync(root))return;
+  privateDir(root);
+  for(const f of readdirSync(root)){
+    if(!ID.test(f))continue;
+    const p=join(root,f);
+    try{
+      const st=lstatSync(p);
+      if(st.isDirectory()&&!st.isSymbolicLink()&&Date.now()-st.mtimeMs>TTL_MS)
+        rmSync(p,{recursive:true,force:true});
+    }catch{}
+  }
+}
+export function validateExtensionId(id) {
+  if(!/^[a-p]{32}$/.test(id||''))throw Object.assign(Error('Invalid Chrome extension ID'),{code:'INVALID_EXTENSION_ID'});
+  return id;
+}

package/lib/mcp-tools.json

@@ -0,0 +1,26 @@
+[
+  {
+    "name": "chat_text",
+    "description": "Read the text of the single Chat currently owned by Chat Loop Extension. Only when the Extension has an authenticated WAITING_REPLY Owner; returns temp artifact and text, not the clipboard.",
+    "inputSchema": {"type":"object","properties":{},"additionalProperties":false},
+    "annotations": {"readOnlyHint":true}
+  },
+  {
+    "name": "chat_dom",
+    "description": "Read the DOM HTML of the single Chat currently owned by Chat Loop Extension. Requires authenticated Owner; writes a private OS-temp artifact.",
+    "inputSchema": {"type":"object","properties":{},"additionalProperties":false},
+    "annotations": {"readOnlyHint":true}
+  },
+  {
+    "name": "chat_screenshot",
+    "description": "Capture a PNG of the single Chat currently owned by Chat Loop Extension. The tool returns actual image content; this action activates the Chat tab.",
+    "inputSchema": {"type":"object","properties":{},"additionalProperties":false},
+    "annotations": {"readOnlyHint":false}
+  },
+  {
+    "name": "reload",
+    "description": "Request a reload of Chat Loop Extension only, not any other extension. Due to self-reload, receipt can only be ACCEPTED_UNVERIFIED.",
+    "inputSchema": {"type":"object","properties":{},"additionalProperties":false},
+    "annotations": {"readOnlyHint":false}
+  }
+]

package/package.json

@@ -1,6 +1,25 @@
 {
   "name": "@tomflow/chatloop-extension",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.3.27",
+  "type": "module",
+  "description": "Chat Loop Extension package: six formal Action pages and its own native CLI bridge",
+  "bin": {
+    "chatloop-extension": "./bin/cli.mjs",
+    "chat-loop-browser": "./bin/cli.mjs"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "extension/",
+    "bin/",
+    "lib/",
+    "README.md"
+  ],
+  "scripts": {
+    "test": "node --test ./test/*.test.mjs"
+  }
+}