@tomflow/chatloop-extension 0.3.29 → 0.3.33

package/extension/actions/clean.js

@@ -0,0 +1,120 @@
+// Standalone Clean Action: one verified composer only. No sends, Owner mutations or tab closures.
+const statusNode=document.getElementById('status');
+const detailNode=document.getElementById('details');
+const show=(status,detail)=>{statusNode.textContent=status;detailNode.textContent=detail;
+  document.body.dataset.result=status==='SUCCESS'?'success':status==='BLOCKED'?'error':'running';};
+const isChat=url=>{try{const u=new URL(url);return u.origin==='https://chatgpt.com'
+  && (u.pathname==='/'||/^\/(?:c\/[0-9a-f-]{12,}|g\/[^/]+\/c\/[0-9a-f-]{12,})$/i.test(u.pathname));}
+  catch{return false;}};
+const runKey='chat-loop.action.run.v1';
+const ownedKey='chat-loop.acceptance.owned.v1';
+function targetAuthorized(tab,run,owned,machine,own){
+  if(!isChat(tab?.url) || !Number.isSafeInteger(tab?.id))throw Error('CLEAN_TARGET_NOT_CHATGPT');
+  if(tab.id===own.id)throw Error('CLEAN_SELF_TARGET');
+  if(machine){
+    const testHome=tab.url==='https://chatgpt.com/' && Array.isArray(owned)
+      && owned.some(entry=>entry.id===tab.id);
+    const owner=run?.tabId===tab.id && tab.url==='https://chatgpt.com'+run?.page;
+    if(!testHome&&!owner)throw Error('CLEAN_MACHINE_TARGET_NOT_OWNED');
+    if(run && !['DONE','BLOCKED'].includes(run.phase))
+      throw Error('CLEAN_ACTIVE_LOOP_DENIED');
+  }else{
+    if(tab.windowId!==own.windowId)throw Error('CLEAN_WINDOW_CHANGED');
+    if(run?.tabId===tab.id&&!['DONE','BLOCKED'].includes(run.phase))
+      throw Error('CLEAN_ACTIVE_LOOP_DENIED');
+  }
+}
+async function clear(target,machine){
+  const [proof]=await chrome.scripting.executeScript({target:{tabId:target.id},
+    func:async expected=>{
+      try{
+        if(location.origin!=='https://chatgpt.com'||location.href!==expected.url)
+          return {status:'TARGET_CHANGED'};
+        const visible=node=>!!node?.getClientRects?.().length
+          && getComputedStyle(node).display!=='none';
+        const main=[...document.querySelectorAll('main')].filter(visible);
+        if(main.length!==1)return {status:'MAIN_UNVERIFIED'};
+        const inputs=[...document.querySelectorAll(
+          '[contenteditable="true"][data-composer-markdown],#prompt-textarea[contenteditable="true"]')]
+          .filter(visible);
+        const unique=[...new Set(inputs)];
+        if(unique.length!==1)return {status:'COMPOSER_UNVERIFIED'};
+        const input=unique[0];
+        if(input.closest('[aria-disabled="true"]')
+          || [...document.querySelectorAll(
+            '[data-testid*="attachment-preview"],[data-testid*="image-preview"],[data-testid="composer-attachment"]')]
+            .some(visible))return {status:'COMPOSER_HAS_ATTACHMENTS'};
+        if([...document.querySelectorAll(
+          'button[data-testid="stop-button"],button[aria-label="Stop generating"],button[aria-label="停止响应"]')]
+          .some(visible))return {status:'TURN_STILL_RUNNING'};
+        if(expected.machine&&expected.url==='https://chatgpt.com/'
+          && main[0].querySelector('[data-chatgpt-search-message-ids],[data-message-author-role]'))
+          return {status:'TEST_HOME_HAS_MESSAGES'};
+        const before=(input.innerText||input.textContent||'').trim();
+        if(before){
+          input.focus();
+          const range=document.createRange();
+          range.selectNodeContents(input);
+          const selection=window.getSelection();
+          selection.removeAllRanges();selection.addRange(range);
+          if(!document.execCommand('delete',false))return {status:'DELETE_REJECTED'};
+        }
+        await new Promise(resolve=>setTimeout(resolve,400));
+        if(location.href!==expected.url)return {status:'TARGET_CHANGED'};
+        const remaining=(input.innerText||input.textContent||'').trim();
+        if(remaining)return {status:'CLEAN_NOT_CONFIRMED'};
+        return {status:'CLEARED',hadDraft:!!before};
+      }catch{return {status:'CLEAN_UNVERIFIED'};}
+    },args:[{url:target.url,machine}]});
+  if(proof?.result?.status!=='CLEARED')throw Error(proof?.result?.status||'CLEAN_UNVERIFIED');
+  const live=await chrome.tabs.get(target.id);
+  if(!live||live.url!==target.url)throw Error('CLEAN_TARGET_CHANGED_AFTER');
+  return {status:'CLEARED',action:'clean',tabId:target.id,hadDraft:proof.result.hadDraft===true};
+}
+async function run(){
+  const params=new URLSearchParams(location.search);
+  const own=await chrome.tabs.getCurrent();
+  if(!own?.id||own.url!==location.href)throw Error('CLEAN_ACTION_TAB_UNVERIFIED');
+  const reqId=params.get('requestId');
+  const machine=reqId!==null;
+  if(machine?([ ...params.keys()].length!==1||!/^[a-f0-9]{32}$/.test(reqId)):
+    ([...params.keys()].length!==1||!/^[1-9][0-9]*$/.test(params.get('tabId')||'')))
+    throw Error('CLEAN_PARAMETERS_INVALID');
+  const host='com.tomflow.chatloop.extension', action='clean';
+  let receipt,tabId;
+  if(machine){
+    receipt=await chrome.runtime.sendNativeMessage(host,{op:'acquire',id:reqId,action});
+    if(receipt?.status!=='OK'||receipt.id!==reqId||receipt.action!==action
+      ||typeof receipt.nonce!=='string'||!Number.isSafeInteger(receipt.intent?.tabId))
+      throw Error(receipt?.code||'CLEAN_REQUEST_UNVERIFIED');
+    tabId=receipt.intent.tabId;
+  }else tabId=Number(params.get('tabId'));
+  try{
+    const tab=await chrome.tabs.get(tabId);
+    const state=await chrome.storage.local.get([runKey,ownedKey]);
+    targetAuthorized(tab,state[runKey],state[ownedKey],machine,own);
+    show('RUNNING','已确认单个目标，清理其未发送文本。');
+    const result=await clear(tab,machine);
+    if(machine){
+      const saved=await chrome.runtime.sendNativeMessage(host,{
+        op:'complete',id:reqId,nonce:receipt.nonce,action,status:'OK',
+        payload:JSON.stringify(result)});
+      if(saved?.status!=='SAVED'||saved.id!==reqId)throw Error('CLEAN_RECEIPT_UNVERIFIED');
+    }
+    show('SUCCESS','仅清空输入框；未发送消息或修改 Chat Owner。');
+    await chrome.tabs.remove(own.id);
+  }catch(e){
+    if(machine&&receipt?.nonce){
+      try{
+        const saved=await chrome.runtime.sendNativeMessage(host,{
+          op:'complete',id:reqId,nonce:receipt.nonce,action,status:'FAILED',
+          code:String(e.message||'CLEAN_UNVERIFIED').slice(0,120)});
+        if(saved?.status==='SAVED'&&saved.id===reqId){
+          await chrome.tabs.remove(own.id).catch(()=>{});
+        }
+      }catch{}
+    }
+    throw e;
+  }
+}
+run().catch(e=>show('BLOCKED',e.message||'CLEAN_FAILED'));

package/extension/actions/common.js

@@ -115,10 +115,19 @@ function copyText(value) {
     try {
       const req=await chrome.runtime.sendNativeMessage(nativeHost,
         {op:"acquire",id:machineId,action});
-      if(req?.status==="OK") await chrome.runtime.sendNativeMessage(nativeHost,{
-        op:"complete",id:machineId,nonce:req.nonce,action,status:"FAILED",
-        code:String(error?.message||"ACTION_FAILED").slice(0,120)
-      });
+      if(req?.status==="OK") {
+        const saved = await chrome.runtime.sendNativeMessage(nativeHost,{
+          op:"complete",id:machineId,nonce:req.nonce,action,status:"FAILED",
+          code:String(error?.message||"ACTION_FAILED").slice(0,120)
+        });
+        // Machine errors already have a durable CLI receipt. They must not
+        // accumulate as abandoned tabs; manual/unverified errors remain open.
+        if(saved?.status==="SAVED" && saved.id===machineId) {
+          const own = await chrome.tabs.getCurrent();
+          if(own?.id && own.url===location.href)
+            await chrome.tabs.remove(own.id).catch(()=>{});
+        }
+      }
     } catch { /* CLI timeout is UNKNOWN, never success. */ }
   }
   function requireOwnTab(tab) {

package/extension/actions/continue.js

@@ -261,4 +261,6 @@ async function run() {
     : "已确认新增一次用户消息；Action 已完成，等待下一轮 Observer。");
   await chrome.tabs.remove(own.id);
 }
-run().catch(error => show("BLOCKED", error.message || "ACTION_FAILED"));
+(new URLSearchParams(location.search).has("requestId")
+  ? import(chrome.runtime.getURL("actions/model-intent.js")).then(m => m.queueModelIntent("continue")) : run())
+  .catch(error => show("BLOCKED", error.message || "ACTION_FAILED"));

package/extension/actions/handoff.js

@@ -275,11 +275,22 @@ async function run() {
     }
     if (observed?.contract !== "chat-loop.turn-observer.v1")
       throw Error("NEW_CHAT_OBSERVER_UNAVAILABLE");
-    const message = "你正在接手上一 Chat 未完成的任务。旧 Chat 的网页历史仍可核实，但当前 Chat 没有其隐式上下文。若为仓库任务，先通过授权工具读取 AGENTS.md 和 context/README.md；核对实际现场和上一轮可能已执行的操作，不要重复未知副作用。\n\n交接资料：\n" + contextPacket
+    const message = "你正在接手上一 Chat 未完成的任务。旧 Chat 的网页历史仍可核实，但当前 Chat 没有其隐式上下文。若为项目任务，先按已授权的项目 Skill 或目标仓库真实入口核实规则、进度和上一轮副作用；不要假定每个项目都有 AGENTS.md 或固定 context 目录，也不要重复未知副作用。\n\n交接资料：\n" + contextPacket
       + "\n\n本轮最终回复末行只能输出一个状态标记：[CHAT_LOOP_STATUS:CONTINUE]、[CHAT_LOOP_STATUS:DONE] 或 [CHAT_LOOP_STATUS:BLOCKED]。是否跨 Chat 由扩展决定，不要主动要求 Handoff。";
+    const notice=permit.modelIntent?.id
+      ? "\n\n【扩展控制回执】本次交接由上一 Chat 的工具意图 "
+        + permit.modelIntent.id + " 触发；已通过唯一 Action 发送。"
+        + (permit.modelIntent.reason ? "\n【交接原因（待核实）】"
+          + permit.modelIntent.reason : "") : "";
+    const checkpoint=permit.pendingPlan?.id&&typeof permit.pendingPlan.nextPrompt==="string"
+      ? "\n\n【上一 Chat 暂存的下一步检查点｜到期交接覆盖了 Continue】请求 "
+        + permit.pendingPlan.id + " 原计划：\n"
+        + permit.pendingPlan.nextPrompt
+        + "\n【边界】这只是上一轮模型提出的计划，不代表用户新增批准。新 Chat 必须先核实任务状态、项目规则及已发生的副作用，不能盲目重复。"
+      : "";
     result = await sendHandoffOnce(newTab.id, permit.countMode
       ? message + `\n\n【计数专用交接指令，优先于前面的历史引用】旧Chat已经完成数字${permit.countValue}，本轮只加1，第一行写${permit.countValue + 1}；只有到100才能在末行写 [CHAT_LOOP_STATUS:DONE]，否则末行写 [CHAT_LOOP_STATUS:CONTINUE]。不能因接班而DONE。`
-      : message);
+      : message + notice + checkpoint + (permit.modelTurnNote || ""));
   } catch (error) {result = {status: "UNVERIFIED", reason: error.message || "HANDOFF_ERROR"};}
   const committed = await chrome.runtime.sendMessage({type: "CHAT_LOOP_ACTION_RESULT_V1", ...request,
     result: result.status, reason: result.reason,
@@ -299,4 +310,6 @@ async function run() {
   show("SUCCESS", "新 Chat 已收到交接包；旧 Chat 标签已尝试安全清理。");
   await chrome.tabs.remove(own.id);
 }
-run().catch(error => show("BLOCKED", error.message || "HANDOFF_ACTION_FAILED"));
+(new URLSearchParams(location.search).has("requestId")
+  ? import(chrome.runtime.getURL("actions/model-intent.js")).then(m => m.queueModelIntent("handoff")) : run())
+  .catch(error => show("BLOCKED", error.message || "HANDOFF_ACTION_FAILED"));

package/extension/actions/model-intent.js

@@ -0,0 +1,53 @@
+// The only model-driven entrance reuses the two existing formal Action pages.
+// It registers a decision; it never edits ChatGPT, creates a new Chat, or sends.
+export async function queueModelIntent(action) {
+  const params = new URLSearchParams(location.search);
+  const id = params.get('requestId');
+  if([...params.keys()].length !== 1 || !/^[a-f0-9]{32}$/.test(id||''))
+    throw Error('INVALID_MODEL_REQUEST');
+  const own = await chrome.tabs.getCurrent();
+  if(!own?.id || own.url !== location.href)
+    throw Error('MODEL_ACTION_TAB_UNVERIFIED');
+  const host='com.tomflow.chatloop.extension';
+  const auth = await chrome.runtime.sendNativeMessage(host,{op:'acquire',id,action});
+  if(auth?.status!=='OK'||auth.id!==id||auth.action!==action
+    ||typeof auth.nonce!=='string'||!auth.intent)
+    throw Error(auth?.code||'MODEL_REQUEST_UNVERIFIED');
+  let outcome;
+  try {
+    const query=typeof auth.intent.intentId==='string'||auth.intent.lookup===true;
+    outcome = await chrome.runtime.sendMessage({
+      type:query?'CHAT_LOOP_MODEL_INTENT_STATUS_V1':'CHAT_LOOP_MODEL_INTENT_V1',
+      id, action:action.toUpperCase(),intent:auth.intent
+    });
+    if(outcome?.status!==(query?'STATUS':'QUEUED')
+      || !/^[a-f0-9]{32}$/.test(outcome.intentId||'')
+      || (query&&auth.intent.intentId&&outcome.intentId!==auth.intent.intentId)
+      || (!query&&outcome.intentId!==id)
+      ||outcome.action!==action.toUpperCase())
+      throw Error(outcome?.code||'MODEL_INTENT_DENIED');
+    const saved = await chrome.runtime.sendNativeMessage(host,{
+      op:'complete',id,nonce:auth.nonce,action,status:'OK',
+      payload:JSON.stringify(outcome)
+    });
+    if(saved?.status!=='SAVED'||saved.id!==id)
+      throw Error(saved?.code||'INTENT_RECEIPT_UNVERIFIED');
+    await chrome.tabs.remove(own.id);
+  } catch(e) {
+    // An already-queued intent is not retried. Native failure is diagnostic only.
+    try {
+      const saved=await chrome.runtime.sendNativeMessage(host,{
+        op:'complete',id,nonce:auth.nonce,action,status:'FAILED',
+        code:String(e.message||'INTENT_UNVERIFIED').slice(0,120)
+      });
+      // The CLI already has a durable failure receipt. Keep the page only
+      // when that receipt could not be verified; never resubmit the intent.
+      if(saved?.status==='SAVED'&&saved.id===id) {
+        const live=await chrome.tabs.getCurrent();
+        if(live?.id===own.id&&live.url===location.href)
+          await chrome.tabs.remove(own.id).catch(()=>{});
+      }
+    } catch {}
+    throw e;
+  }
+};

package/extension/actions/start.js

@@ -0,0 +1,145 @@
+// Dedicated first-Turn Action. Only this page creates and sends the initial Web Chat.
+// All subsequent turns are owned by the existing Observer / Continue / Handoff flow.
+const info=document.getElementById('details'),label=document.getElementById('status');
+const pause=ms=>new Promise(resolve=>setTimeout(resolve,ms));
+const show=(s,d)=>{label.textContent=s;info.textContent=d;document.body.dataset.result=s==='SUCCESS'?'success':'error';};
+const host='com.tomflow.chatloop.extension';
+async function newChatReady(id){
+  for(let i=0;i<85;i++){
+    const tab=await chrome.tabs.get(id).catch(()=>null);
+    if(tab?.url==='https://chatgpt.com/'){
+      const [found]=await chrome.scripting.executeScript({target:{tabId:id},func:()=>{
+        const visible=e=>Boolean(e?.getClientRects?.().length);
+        const mains=[...document.querySelectorAll('main')].filter(visible);
+        const editor=document.querySelector('[contenteditable="true"][data-composer-markdown]')
+          ||document.querySelector('#prompt-textarea[contenteditable="true"]');
+        return location.origin==='https://chatgpt.com'&&location.pathname==='/'&&mains.length===1
+          &&visible(editor)&&!(editor.innerText||editor.textContent||'').trim()
+          &&!mains[0].querySelector('[data-chatgpt-search-message-ids],[data-message-author-role]');
+      }}).catch(()=>[]);
+      if(found?.result===true)return;
+      if(found?.result===false&&i>=15)throw Error('NEW_CHAT_NOT_BLANK_OR_READY');
+    }
+    await pause(420);
+  }
+  throw Error('NEW_CHAT_NOT_READY');
+}
+async function observerReady(id){
+  let proof=await chrome.tabs.sendMessage(id,{type:'CHAT_LOOP_TURN_OBSERVE_V1'}).catch(()=>null);
+  if(proof?.contract!=='chat-loop.turn-observer.v1'){
+    await chrome.scripting.executeScript({target:{tabId:id},files:['content.js','loop/observer.js']});
+    proof=await chrome.tabs.sendMessage(id,{type:'CHAT_LOOP_TURN_OBSERVE_V1'}).catch(()=>null);
+  }
+  if(proof?.contract!=='chat-loop.turn-observer.v1')throw Error('FIRST_TURN_OBSERVER_UNAVAILABLE');
+}
+async function sendFirst(id,text){
+  const [clicked]=await chrome.scripting.executeScript({target:{tabId:id},
+    func:async instruction=>{
+      try{
+        const visible=e=>Boolean(e?.getClientRects?.().length);
+        if(location.origin!=='https://chatgpt.com'||location.pathname!=='/')throw Error('START_PAGE_CHANGED');
+        const mains=[...document.querySelectorAll('main')].filter(visible);
+        const editor=document.querySelector('[contenteditable="true"][data-composer-markdown]')
+          ||document.querySelector('#prompt-textarea[contenteditable="true"]');
+        if(mains.length!==1||!visible(editor)||!(editor.isContentEditable)||!document.contains(editor)
+          ||(editor.innerText||editor.textContent||'').trim()
+          ||mains[0].querySelector('[data-chatgpt-search-message-ids],[data-message-author-role]'))
+          throw Error('START_COMPOSER_UNVERIFIED');
+        const canonical=v=>String(v||'').replace(/\s+/g,'');
+        editor.focus();
+        if(!document.execCommand('insertText',false,instruction))throw Error('START_INPUT_REJECTED');
+        let verified=false;
+        for(let i=0;i<25;i++){
+          if(location.pathname!=='/')throw Error('START_PAGE_CHANGED_DURING_INPUT');
+          if(canonical(editor.innerText)===canonical(instruction)
+            ||canonical(editor.textContent)===canonical(instruction)){verified=true;break;}
+          await new Promise(r=>setTimeout(r,120));
+        }
+        if(!verified)throw Error('START_INPUT_UNVERIFIED');
+        let send;
+        for(let i=0;i<16;i++){
+          send=document.querySelector('button[data-testid="send-button"]')
+            ||document.querySelector('button[data-testid="composer-send-button"]')
+            ||document.querySelector('button[type="submit"][aria-label="发送"]')
+            ||document.querySelector('button[aria-label="Send message"]');
+          if(send&&!send.disabled&&visible(send))break;
+          await new Promise(r=>setTimeout(r,120));
+        }
+        if(!send||send.disabled||!visible(send))throw Error('START_SEND_BUTTON_UNAVAILABLE');
+        if(location.pathname!=='/'||(canonical(editor.innerText)!==canonical(instruction)
+          &&canonical(editor.textContent)!==canonical(instruction)))
+          throw Error('START_INPUT_CHANGED');
+        send.click(); // Once only. Worker persisted PENDING before this point.
+        return {clickedOnce:true};
+      }catch(e){return {clickedOnce:false,reason:e.message||'START_INPUT_UNKNOWN'};}
+    },args:[text]});
+  if(clicked?.result?.clickedOnce!==true)
+    throw Error(clicked?.result?.reason||'START_CLICK_UNVERIFIED');
+  // Once clicked: read-only receipt, NEVER retry typing or clicking.
+  for(let i=0;i<90;i++){
+    const tab=await chrome.tabs.get(id).catch(()=>null);
+    const page=tab?.url&&new URL(tab.url).pathname;
+    if(/^\/c\/[0-9a-f-]{12,}$/i.test(page||'')){
+      const [r]=await chrome.scripting.executeScript({target:{tabId:id},func:expected=>{
+        const visible=e=>Boolean(e?.getClientRects?.().length);
+        const mains=[...document.querySelectorAll('main')].filter(visible);
+        if(mains.length!==1)return null;
+        const modern=[...mains[0].querySelectorAll('[data-chatgpt-search-unit-key][data-chatgpt-search-message-ids]')];
+        const rows=modern.length?modern:[...mains[0].querySelectorAll('[data-message-author-role]')];
+        const role=n=>n.getAttribute('data-message-author-role')
+          ||n.getAttribute('data-chatgpt-search-unit-key')?.split(':').at(-1);
+        const user=rows.filter(n=>role(n)==='user').at(-1);
+        const id=user?.getAttribute('data-message-id')
+          ||user?.getAttribute('data-chatgpt-search-message-ids')?.trim().split(/\s+/)[0];
+        const bubble=user?.querySelector('[data-search-result-target]')
+          ||user?.querySelector('[data-user-message-bubble="true"]')||user;
+        const canonical=v=>String(v||'').replace(/\s+/g,'');
+        return id&&canonical(bubble?.innerText||bubble?.textContent)===canonical(expected)
+          ?{userKey:'user:'+id}:null;
+      },args:[text]}).catch(()=>[]);
+      if(r?.result?.userKey)return {status:'SENT_CONFIRMED',newUserKey:r.result.userKey,
+        newPage:page,newTabId:id};
+    }
+    await pause(420);
+  }
+  throw Error('FIRST_SEND_RECEIPT_UNKNOWN');
+}
+async function run(){
+  const own=await chrome.tabs.getCurrent();
+  const q=new URLSearchParams(location.search),id=q.get('requestId');
+  if(!own?.id||own.url!==location.href||[...q.keys()].length!==1
+    ||!/^[a-f0-9]{32}$/.test(id||''))throw Error('START_ACTION_SOURCE_INVALID');
+  const proof=await chrome.runtime.sendNativeMessage(host,{op:'acquire',id,action:'start'});
+  if(proof?.status!=='OK'||proof.action!=='start'||proof.id!==id
+    ||typeof proof.nonce!=='string')throw Error(proof?.code||'START_NATIVE_INVALID');
+  let prepared,taken,newTab,committed;
+  try{
+    prepared=await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_START_PREPARE_V1',requestId:id});
+    if(prepared?.status!=='PREPARED')throw Error(prepared?.code||'START_PREPARE_DENIED');
+    taken=await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_START_TAKE_V1',
+      requestId:id,token:prepared.token});
+    if(taken?.status!=='OK'||taken.sessionId!==prepared.sessionId
+      ||typeof taken.prompt!=='string')throw Error(taken?.code||'START_TAKE_DENIED');
+    show('RUNNING','已独占会话，正在创建唯一网页 Chat 并确认首轮发送。');
+    newTab=await chrome.tabs.create({url:'https://chatgpt.com/',active:true,windowId:own.windowId});
+    await newChatReady(newTab.id);
+    await observerReady(newTab.id);
+    const receipt=await sendFirst(newTab.id,taken.prompt);
+    committed=await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_START_RESULT_V1',
+      requestId:id,token:prepared.token,...receipt,result:receipt.status});
+    if(committed?.status!=='OK')throw Error(committed?.code||'START_COMMIT_UNVERIFIED');
+    const stored=await chrome.runtime.sendNativeMessage(host,{op:'complete',
+      id,nonce:proof.nonce,action:'start',status:'OK',payload:JSON.stringify(committed)});
+    if(stored?.status!=='SAVED')throw Error(stored?.code||'START_RECEIPT_NOT_STORED');
+    show('SUCCESS','唯一网页 Chat 已确认；执行由 Observer 和 Continue/Handoff 接管。');
+    await chrome.tabs.remove(own.id);
+  }catch(e){
+    if(taken&&committed?.status!=='OK')
+      await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_START_RESULT_V1',
+        requestId:id,token:prepared.token,result:'UNVERIFIED',newTabId:newTab?.id}).catch(()=>{});
+    await chrome.runtime.sendNativeMessage(host,{op:'complete',id,nonce:proof.nonce,
+      action:'start',status:'FAILED',code:String(e.message||'START_UNVERIFIED').slice(0,100)}).catch(()=>{});
+    throw e; // Unknown target tab is kept for inspection, never auto-retried.
+  }
+}
+void run().catch(e=>show('BLOCKED',e.message||'START_UNVERIFIED'));

package/extension/actions/status.js

@@ -0,0 +1,22 @@
+// Read-only machine Status. Does not create a Chat or modify the browser Owner.
+const host='com.tomflow.chatloop.extension';
+async function run(){
+  const own=await chrome.tabs.getCurrent(),q=new URLSearchParams(location.search);
+  const id=q.get('requestId');
+  if(!own?.id||own.url!==location.href||[...q.keys()].length!==1
+    ||!/^[a-f0-9]{32}$/.test(id||''))throw Error('INVALID_STATUS_ACTION');
+  const proof=await chrome.runtime.sendNativeMessage(host,{op:'acquire',id,action:'status'});
+  if(proof?.status!=='OK'||proof.action!=='status'||proof.id!==id)
+    throw Error(proof?.code||'STATUS_NATIVE_INVALID');
+  const state=await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_STATUS_V1',requestId:id});
+  const receipt=await chrome.runtime.sendNativeMessage(host,{op:'complete',id,
+    nonce:proof.nonce,action:'status',status:'OK',payload:JSON.stringify(state)});
+  if(receipt?.status!=='SAVED')throw Error(receipt?.code||'STATUS_NOT_STORED');
+  document.getElementById('status').textContent='SUCCESS';
+  document.getElementById('details').textContent='只读状态已返回本机请求；未修改执行 Chat。';
+  await chrome.tabs.remove(own.id);
+}
+void run().catch(e=>{
+  document.getElementById('status').textContent='UNVERIFIED';
+  document.getElementById('details').textContent=e.message||'STATUS_UNKNOWN';
+});