@tomflow/chatloop-extension 0.3.32 → 0.3.34

package/README.md

@@ -1,6 +1,6 @@
 # @tomflow/chatloop-extension
 
-Chrome 扩展（7 个 Action）及其独立 CLI / Native Messaging Host。执行前先看 Help：
+Chrome 扩展（9 个独立 Action，含 Status / Start）及其独立 CLI / Native Messaging Host。执行前先看 Help：
 
 ```sh
 npx --yes --package=@tomflow/chatloop-extension@latest chatloop-extension --help
@@ -18,10 +18,20 @@ npx --yes --package=@tomflow/chatloop-extension@latest chatloop-extension extens
 
 ```text
 Usage: chatloop-extension extension <command>
-Commands: chat text | chat dom | chat screenshot | reload | clean <tab-id> | continue | handoff
+Commands: chat text | chat dom | chat screenshot | reload | clean <tab-id> | continue | handoff | status | start
 Run: chatloop-extension extension <command> --help
 ```
 
+**Chrome 独立运行安装路径：**先用 `npm install --prefix "$HOME/.chat-loop/extension/npm" --save-exact --ignore-scripts @tomflow/chatloop-extension@latest` 下载，再在 `chrome://extensions` 加载该目录下的 `node_modules/@tomflow/chatloop-extension/extension`。改目录会改变扩展 ID，必须通过同一个 npm 包的 `host install <id>` 更新 Native Host。详情见 [Extension 主文档](../../docs/extension.md)。
+
+`extension start` 正常只在 `status=IDLE`、用户确认后启动。上一 Session 若是 `BLOCKED`，可在用户**再次明确批准一个不同 projectId 的全新任务**时附上 `replaceBlockedSessionId`（精确 UUID）作为受控替换条件：扩展 Worker 与本机持久指针必须同时指向该 BLOCKED Session，才能允许新 Session；旧执行 Chat 保留审计，旧用户 Turn 永不自动重发。示例只用于说明 JSON 签名，不会自动调用：
+
+```json
+{"projectId":"new-distinct-test","prompt":"新的独立任务","confirmed":true,"replaceBlockedSessionId":"11111111-1111-4111-a111-111111111111"}
+```
+
+`PAGE_ERROR` 且无原生 Retry 时，Worker 仅观察最多四次；只有原用户消息 ID 未变且连续两次证明错误消失才继续观察，其余情况依旧 BLOCKED。**不能把当前网页错误消失当成原消息未发送的证据**。
+
 Clean 只清空输入框，不发送，不更改 Owner；必须指定精确标签页 ID 且验证目标。Chrome 已安装扩展不随 npm 包自动安装。本地源码与已发布 npm 版本可能不同，真实结果请看 [CURRENT](../../context/CURRENT.md)。
 
 详细接口和安全边界统一见 [Extension 产品文档](../../docs/extension.md)。

package/bin/cli.mjs

@@ -10,10 +10,12 @@ const contract='chat-loop.extension-cli.v1';
 const HELP={
   '': 'Usage: chatloop-extension <command> [options]\nCommands: capabilities, host, extension\nRun: chatloop-extension <command> --help',
   host: 'Usage: chatloop-extension host install <extension-id>\nRegisters the local Chrome Native Messaging Host (macOS).',
-  extension: 'Usage: chatloop-extension extension <command>\nCommands: chat text | chat dom | chat screenshot | reload | clean <tab-id> | continue | handoff\nRun: chatloop-extension extension <command> --help',
+  extension: 'Usage: chatloop-extension extension <command>\nCommands: chat text | chat dom | chat screenshot | reload | clean <tab-id> | continue | handoff | status | start\nRun: chatloop-extension extension <command> --help',
   'extension clean':'Usage: chatloop-extension extension clean <tab-id>\nClear only the verified ChatGPT composer. Never send or close a Chat.\nRequires exact tab id of a registered test page or the sole completed Chat Loop Owner.',
   'extension continue':'Usage: chatloop-extension extension continue (JSON intent on stdin)\nSubmit next-turn text or query receipt; does not send directly.',
-  'extension handoff':'Usage: chatloop-extension extension handoff (JSON intent on stdin)\nRequest early handoff or query receipt; does not transfer directly.'
+  'extension handoff':'Usage: chatloop-extension extension handoff (JSON intent on stdin)\nRequest early handoff or query receipt; does not transfer directly.',
+  'extension status':'Usage: chatloop-extension extension status\nRead-only, verified active Web Chat status.',
+  'extension start':'Usage: chatloop-extension extension start (JSON on stdin)\nStart exactly one confirmed task in the Mac Chrome Web Chat; refuses duplicate owner.'
 };
 function helpFor(args){
   if(args.length===1&&['-h','--help','help'].includes(args[0]))return HELP[''];
@@ -62,18 +64,18 @@ function openAction(url) {
 async function executeAction(action,intent) {
   if(!ACTIONS.includes(action))throw Object.assign(Error('Unknown action'),{code:'UNKNOWN_ACTION'});
   const config=configuration(),req=prepare(action,intent);
-  const page=action==='reload'?'reload.html': ['continue','handoff','clean'].includes(action)
+  const page=action==='reload'?'reload.html': ['continue','handoff','clean','start','status'].includes(action)
     ? action+'.html':action.slice(5)+'.html';
   const url='chrome-extension://'+config.extensionId+'/'+page+'?requestId='+req.id;
   openAction(url);
-  const until=Date.now()+27000;
+  const until=Date.now()+(action==='start'?105000:27000);
   while(Date.now()<until){
     const result=readResult(req.id);
     if(result){
       if(result.status!=='OK')throw Object.assign(Error(result.code||'ACTION_FAILED'),{code:result.code||'ACTION_FAILED'});
       if(!result.verified) return {...result,status:'ACCEPTED_UNVERIFIED'};
       // The temp file is the canonical artifact. Returning small text is a CLI convenience.
-      if(action==='chat_text'||action==='chat_dom'||action==='continue'||action==='handoff'||action==='clean'){
+      if(['chat_text','chat_dom','continue','handoff','clean','start','status'].includes(action)){
         const contents=readFileSync(result.path,'utf8');
         return {...result,content:contents.length<=500000?contents:undefined,
           truncated:contents.length>500000};
@@ -102,7 +104,8 @@ async function execute(argv) {
     return {implemented:['capabilities','host install <extension-id>','extension chat text',
       'extension chat dom','extension chat screenshot','extension reload',
       'extension clean <tab-id>',
-      'extension continue (JSON on stdin)','extension handoff (JSON on stdin)'],
+      'extension continue (JSON on stdin)','extension handoff (JSON on stdin)',
+      'extension status','extension start (JSON on stdin)'],
       available:existsSync(configFile()),hostConfigured:existsSync(configFile())};
   }
   if(argv[0]==='host'&&argv[1]==='install'&&argv.length===3)return installHost(argv[2]);
@@ -115,6 +118,8 @@ async function execute(argv) {
     return executeAction('clean',{tabId:Number(argv[2])});
   if(cmd==='extension continue')return executeAction('continue',await readIntent());
   if(cmd==='extension handoff')return executeAction('handoff',await readIntent());
+  if(cmd==='extension status')return executeAction('status');
+  if(cmd==='extension start')return executeAction('start',await readIntent());
   throw Object.assign(Error('Unknown command'),{code:'INVALID_ARGUMENT'});
 }
 const args=process.argv.slice(2),command=args.join(' ')||'capabilities';

package/bin/native-host.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 // Chrome Native Messaging: one request per process, no persistent server.
 import {readRequest, finish, staleFailureConfirmed} from '../lib/bridge.mjs';
+import {readSession,writeSession} from '../lib/session-file.mjs';
 const MAX_INPUT=48*1024*1024;
 const write=obj=>{
   const b=Buffer.from(JSON.stringify(obj)),len=Buffer.alloc(4);
@@ -24,6 +25,10 @@ process.stdin.on('data',chunk=>{
     }else if(m.op==='complete'){
       const r=finish(m);
       write({status:'SAVED',id:r.id,action:r.action,bytes:r.bytes});
+    }else if(m.op==='session-read'){
+      write({status:'OK',session:readSession()});
+    }else if(m.op==='session-sync'){
+      write({status:'OK',session:writeSession(m.session,m.replaceBlockedSessionId)});
     }else if(m.op==='stale-failure'){
       const confirmed=staleFailureConfirmed(m.id,m.action);
       write({status:confirmed?'STALE_FAILURE_CONFIRMED':'NOT_ELIGIBLE',

package/extension/acceptance.js

@@ -49,6 +49,7 @@
       messageEvidence: {}, actionEvidence: {},
       run: run ? Object.fromEntries(["phase", "action", "reason", "tabId", "page",
         "sourceTabId", "sourcePage", "attemptedNewTabId", "newUserKey",
+        "sessionId", "projectId", "generation",
         "userKey", "assistantKey", "startedAt", "deadlineAt", "handoffPending",
         "handoffPendingAt", "handoffMode", "testSetup", "timedTest", "testTurnIndex",
         "clockAdvancedAt", "clockAdvanceMinutes", "clockRunningProof",

package/extension/actions/start.js

@@ -0,0 +1,145 @@
+// Dedicated first-Turn Action. Only this page creates and sends the initial Web Chat.
+// All subsequent turns are owned by the existing Observer / Continue / Handoff flow.
+const info=document.getElementById('details'),label=document.getElementById('status');
+const pause=ms=>new Promise(resolve=>setTimeout(resolve,ms));
+const show=(s,d)=>{label.textContent=s;info.textContent=d;document.body.dataset.result=s==='SUCCESS'?'success':'error';};
+const host='com.tomflow.chatloop.extension';
+async function newChatReady(id){
+  for(let i=0;i<85;i++){
+    const tab=await chrome.tabs.get(id).catch(()=>null);
+    if(tab?.url==='https://chatgpt.com/'){
+      const [found]=await chrome.scripting.executeScript({target:{tabId:id},func:()=>{
+        const visible=e=>Boolean(e?.getClientRects?.().length);
+        const mains=[...document.querySelectorAll('main')].filter(visible);
+        const editor=document.querySelector('[contenteditable="true"][data-composer-markdown]')
+          ||document.querySelector('#prompt-textarea[contenteditable="true"]');
+        return location.origin==='https://chatgpt.com'&&location.pathname==='/'&&mains.length===1
+          &&visible(editor)&&!(editor.innerText||editor.textContent||'').trim()
+          &&!mains[0].querySelector('[data-chatgpt-search-message-ids],[data-message-author-role]');
+      }}).catch(()=>[]);
+      if(found?.result===true)return;
+      if(found?.result===false&&i>=15)throw Error('NEW_CHAT_NOT_BLANK_OR_READY');
+    }
+    await pause(420);
+  }
+  throw Error('NEW_CHAT_NOT_READY');
+}
+async function observerReady(id){
+  let proof=await chrome.tabs.sendMessage(id,{type:'CHAT_LOOP_TURN_OBSERVE_V1'}).catch(()=>null);
+  if(proof?.contract!=='chat-loop.turn-observer.v1'){
+    await chrome.scripting.executeScript({target:{tabId:id},files:['content.js','loop/observer.js']});
+    proof=await chrome.tabs.sendMessage(id,{type:'CHAT_LOOP_TURN_OBSERVE_V1'}).catch(()=>null);
+  }
+  if(proof?.contract!=='chat-loop.turn-observer.v1')throw Error('FIRST_TURN_OBSERVER_UNAVAILABLE');
+}
+async function sendFirst(id,text){
+  const [clicked]=await chrome.scripting.executeScript({target:{tabId:id},
+    func:async instruction=>{
+      try{
+        const visible=e=>Boolean(e?.getClientRects?.().length);
+        if(location.origin!=='https://chatgpt.com'||location.pathname!=='/')throw Error('START_PAGE_CHANGED');
+        const mains=[...document.querySelectorAll('main')].filter(visible);
+        const editor=document.querySelector('[contenteditable="true"][data-composer-markdown]')
+          ||document.querySelector('#prompt-textarea[contenteditable="true"]');
+        if(mains.length!==1||!visible(editor)||!(editor.isContentEditable)||!document.contains(editor)
+          ||(editor.innerText||editor.textContent||'').trim()
+          ||mains[0].querySelector('[data-chatgpt-search-message-ids],[data-message-author-role]'))
+          throw Error('START_COMPOSER_UNVERIFIED');
+        const canonical=v=>String(v||'').replace(/\s+/g,'');
+        editor.focus();
+        if(!document.execCommand('insertText',false,instruction))throw Error('START_INPUT_REJECTED');
+        let verified=false;
+        for(let i=0;i<25;i++){
+          if(location.pathname!=='/')throw Error('START_PAGE_CHANGED_DURING_INPUT');
+          if(canonical(editor.innerText)===canonical(instruction)
+            ||canonical(editor.textContent)===canonical(instruction)){verified=true;break;}
+          await new Promise(r=>setTimeout(r,120));
+        }
+        if(!verified)throw Error('START_INPUT_UNVERIFIED');
+        let send;
+        for(let i=0;i<16;i++){
+          send=document.querySelector('button[data-testid="send-button"]')
+            ||document.querySelector('button[data-testid="composer-send-button"]')
+            ||document.querySelector('button[type="submit"][aria-label="发送"]')
+            ||document.querySelector('button[aria-label="Send message"]');
+          if(send&&!send.disabled&&visible(send))break;
+          await new Promise(r=>setTimeout(r,120));
+        }
+        if(!send||send.disabled||!visible(send))throw Error('START_SEND_BUTTON_UNAVAILABLE');
+        if(location.pathname!=='/'||(canonical(editor.innerText)!==canonical(instruction)
+          &&canonical(editor.textContent)!==canonical(instruction)))
+          throw Error('START_INPUT_CHANGED');
+        send.click(); // Once only. Worker persisted PENDING before this point.
+        return {clickedOnce:true};
+      }catch(e){return {clickedOnce:false,reason:e.message||'START_INPUT_UNKNOWN'};}
+    },args:[text]});
+  if(clicked?.result?.clickedOnce!==true)
+    throw Error(clicked?.result?.reason||'START_CLICK_UNVERIFIED');
+  // Once clicked: read-only receipt, NEVER retry typing or clicking.
+  for(let i=0;i<90;i++){
+    const tab=await chrome.tabs.get(id).catch(()=>null);
+    const page=tab?.url&&new URL(tab.url).pathname;
+    if(/^\/c\/[0-9a-f-]{12,}$/i.test(page||'')){
+      const [r]=await chrome.scripting.executeScript({target:{tabId:id},func:expected=>{
+        const visible=e=>Boolean(e?.getClientRects?.().length);
+        const mains=[...document.querySelectorAll('main')].filter(visible);
+        if(mains.length!==1)return null;
+        const modern=[...mains[0].querySelectorAll('[data-chatgpt-search-unit-key][data-chatgpt-search-message-ids]')];
+        const rows=modern.length?modern:[...mains[0].querySelectorAll('[data-message-author-role]')];
+        const role=n=>n.getAttribute('data-message-author-role')
+          ||n.getAttribute('data-chatgpt-search-unit-key')?.split(':').at(-1);
+        const user=rows.filter(n=>role(n)==='user').at(-1);
+        const id=user?.getAttribute('data-message-id')
+          ||user?.getAttribute('data-chatgpt-search-message-ids')?.trim().split(/\s+/)[0];
+        const bubble=user?.querySelector('[data-search-result-target]')
+          ||user?.querySelector('[data-user-message-bubble="true"]')||user;
+        const canonical=v=>String(v||'').replace(/\s+/g,'');
+        return id&&canonical(bubble?.innerText||bubble?.textContent)===canonical(expected)
+          ?{userKey:'user:'+id}:null;
+      },args:[text]}).catch(()=>[]);
+      if(r?.result?.userKey)return {status:'SENT_CONFIRMED',newUserKey:r.result.userKey,
+        newPage:page,newTabId:id};
+    }
+    await pause(420);
+  }
+  throw Error('FIRST_SEND_RECEIPT_UNKNOWN');
+}
+async function run(){
+  const own=await chrome.tabs.getCurrent();
+  const q=new URLSearchParams(location.search),id=q.get('requestId');
+  if(!own?.id||own.url!==location.href||[...q.keys()].length!==1
+    ||!/^[a-f0-9]{32}$/.test(id||''))throw Error('START_ACTION_SOURCE_INVALID');
+  const proof=await chrome.runtime.sendNativeMessage(host,{op:'acquire',id,action:'start'});
+  if(proof?.status!=='OK'||proof.action!=='start'||proof.id!==id
+    ||typeof proof.nonce!=='string')throw Error(proof?.code||'START_NATIVE_INVALID');
+  let prepared,taken,newTab,committed;
+  try{
+    prepared=await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_START_PREPARE_V1',requestId:id});
+    if(prepared?.status!=='PREPARED')throw Error(prepared?.code||'START_PREPARE_DENIED');
+    taken=await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_START_TAKE_V1',
+      requestId:id,token:prepared.token});
+    if(taken?.status!=='OK'||taken.sessionId!==prepared.sessionId
+      ||typeof taken.prompt!=='string')throw Error(taken?.code||'START_TAKE_DENIED');
+    show('RUNNING','已独占会话，正在创建唯一网页 Chat 并确认首轮发送。');
+    newTab=await chrome.tabs.create({url:'https://chatgpt.com/',active:true,windowId:own.windowId});
+    await newChatReady(newTab.id);
+    await observerReady(newTab.id);
+    const receipt=await sendFirst(newTab.id,taken.prompt);
+    committed=await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_START_RESULT_V1',
+      requestId:id,token:prepared.token,...receipt,result:receipt.status});
+    if(committed?.status!=='OK')throw Error(committed?.code||'START_COMMIT_UNVERIFIED');
+    const stored=await chrome.runtime.sendNativeMessage(host,{op:'complete',
+      id,nonce:proof.nonce,action:'start',status:'OK',payload:JSON.stringify(committed)});
+    if(stored?.status!=='SAVED')throw Error(stored?.code||'START_RECEIPT_NOT_STORED');
+    show('SUCCESS','唯一网页 Chat 已确认；执行由 Observer 和 Continue/Handoff 接管。');
+    await chrome.tabs.remove(own.id);
+  }catch(e){
+    if(taken&&committed?.status!=='OK')
+      await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_START_RESULT_V1',
+        requestId:id,token:prepared.token,result:'UNVERIFIED',newTabId:newTab?.id}).catch(()=>{});
+    await chrome.runtime.sendNativeMessage(host,{op:'complete',id,nonce:proof.nonce,
+      action:'start',status:'FAILED',code:String(e.message||'START_UNVERIFIED').slice(0,100)}).catch(()=>{});
+    throw e; // Unknown target tab is kept for inspection, never auto-retried.
+  }
+}
+void run().catch(e=>show('BLOCKED',e.message||'START_UNVERIFIED'));

package/extension/actions/status.js

@@ -0,0 +1,22 @@
+// Read-only machine Status. Does not create a Chat or modify the browser Owner.
+const host='com.tomflow.chatloop.extension';
+async function run(){
+  const own=await chrome.tabs.getCurrent(),q=new URLSearchParams(location.search);
+  const id=q.get('requestId');
+  if(!own?.id||own.url!==location.href||[...q.keys()].length!==1
+    ||!/^[a-f0-9]{32}$/.test(id||''))throw Error('INVALID_STATUS_ACTION');
+  const proof=await chrome.runtime.sendNativeMessage(host,{op:'acquire',id,action:'status'});
+  if(proof?.status!=='OK'||proof.action!=='status'||proof.id!==id)
+    throw Error(proof?.code||'STATUS_NATIVE_INVALID');
+  const state=await chrome.runtime.sendMessage({type:'CHAT_LOOP_SESSION_STATUS_V1',requestId:id});
+  const receipt=await chrome.runtime.sendNativeMessage(host,{op:'complete',id,
+    nonce:proof.nonce,action:'status',status:'OK',payload:JSON.stringify(state)});
+  if(receipt?.status!=='SAVED')throw Error(receipt?.code||'STATUS_NOT_STORED');
+  document.getElementById('status').textContent='SUCCESS';
+  document.getElementById('details').textContent='只读状态已返回本机请求；未修改执行 Chat。';
+  await chrome.tabs.remove(own.id);
+}
+void run().catch(e=>{
+  document.getElementById('status').textContent='UNVERIFIED';
+  document.getElementById('details').textContent=e.message||'STATUS_UNKNOWN';
+});

package/extension/background.js

@@ -2,6 +2,7 @@
 // Only extension-owned Action pages execute Continue or cross-Chat Handoff.
 importScripts("loop/core.js");
 const RUN_KEY = "chat-loop.action.run.v1";
+const SESSION_HOST = "com.tomflow.chatloop.extension";
 const HOUR_MS = 60 * 60 * 1000; // Acceptance wall-clock hours are independent of the MVP timeout.
 const RUN_BUDGET_MS = 10 * 60 * 1000; // Ten minutes per Chat; never interrupt a running Turn.
 const ALARM_NAME = "chat-loop.turn-watch.v1";
@@ -97,6 +98,15 @@ async function saveRun(run) {
     next.handoffPendingAt = now;
   }
   await chrome.storage.local.set({[RUN_KEY]: next});
+  if(next.sessionId){
+    const record = sessionProjection(next);
+    const saved = await chrome.runtime.sendNativeMessage(SESSION_HOST,
+      {op:"session-sync",session:record,
+        ...(next.replacedBlockedSessionId?{replaceBlockedSessionId:next.replacedBlockedSessionId}:{})}).catch(()=>null);
+    if(saved?.status!=="OK"||saved.session?.sessionId!==next.sessionId)
+      throw Error(saved?.code||"SESSION_PERSISTENCE_UNVERIFIED");
+  }
+
   try {
     if (clockActive(next) && !next.handoffPending && deadlineAt > Date.now()) {
       await chrome.alarms?.create?.(DEADLINE_ALARM_NAME, {when: deadlineAt});
@@ -108,6 +118,119 @@ async function saveRun(run) {
     else await chrome.alarms?.clear?.(COUNT_ALARM_NAME);
   } catch { /* The existing periodic alarm is a conservative backup. */ }
 }
+// Browser Owner remains the only send authority. Native Host mirrors a minimal
+// session pointer so later Chats can find the current Web Chat without a task engine.
+function sessionProjection(run) {
+  const page=typeof run.page==='string'?run.page:'';
+  const match=page.match(/\/c\/([0-9a-f-]{12,})$/i);
+  const activeChatId=match?.[1]||null;
+  return {sessionId:run.sessionId,projectId:run.projectId,
+    phase:run.phase,generation:run.generation||0,activeChatId,
+    activeChatUrl:activeChatId?"https://chatgpt.com"+page:null,
+    updatedAt:Date.now()};
+}
+const sessionPage=(sender,name,id)=> Number.isInteger(sender.tab?.id)
+  && typeof id==='string'&&/^[a-f0-9]{32}$/.test(id)
+  && sender.url===chrome.runtime.getURL(name+'.html')+'?requestId='+id;
+async function sessionStartPrepare(message,sender){
+  if(!sessionPage(sender,'start',message.requestId))
+    return {status:'DENIED',code:'INVALID_START_SOURCE'};
+  const prior=await readRun();
+  // Read the single authenticated intent BEFORE deciding whether a previously
+  // BLOCKED session can be explicitly superseded. Never infer consent from
+  // a failed page or an old session pointer alone.
+  const proof=await chrome.runtime.sendNativeMessage(SESSION_HOST,
+    {op:'acquire',id:message.requestId,action:'start'}).catch(()=>null);
+  const intent=proof?.intent;
+  if(proof?.status!=='OK'||intent?.confirmed!==true
+    ||typeof intent.projectId!=='string'
+    ||!/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/.test(intent.projectId)
+    ||typeof intent.prompt!=='string'||!intent.prompt.trim()||intent.prompt.length>4000
+    ||(intent.replaceBlockedSessionId!==undefined
+      && !/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(intent.replaceBlockedSessionId)))
+    return {status:'DENIED',code:'START_INTENT_UNVERIFIED'};
+  const replace=intent.replaceBlockedSessionId||null;
+  const matchingBlocked=prior?.phase==='BLOCKED' && prior.sessionId===replace
+    && prior.projectId!==intent.projectId;
+  if(replace&&!matchingBlocked)return {status:'DENIED',code:'BLOCKED_REPLACEMENT_MISMATCH'};
+  if(prior&&prior.phase!=='DONE'&&!matchingBlocked)
+    return {status:'DENIED',code:'LOOP_ALREADY_ACTIVE'};
+  const disk=await chrome.runtime.sendNativeMessage(SESSION_HOST,{op:'session-read'}).catch(()=>null);
+  if(disk?.status!=='OK')return {status:'DENIED',code:'SESSION_STATE_UNVERIFIED'};
+  if(matchingBlocked&&(!disk.session||disk.session.phase!=='BLOCKED'
+    ||disk.session.sessionId!==replace||disk.session.projectId!==prior.projectId))
+    return {status:'DENIED',code:'SESSION_REPLACEMENT_MISMATCH'};
+  if(disk.session&&disk.session.phase!=='DONE'&&!matchingBlocked)
+    return {status:'DENIED',code:'SESSION_ALREADY_ACTIVE'};
+  // The same blocked task may never be replayed implicitly: a replacement
+  // requires a new project ID and leaves the old Chat intact for audit.
+  const next={sessionId:crypto.randomUUID(),projectId:intent.projectId,
+    generation:0,phase:'STARTING',action:'START',token:crypto.randomUUID(),
+    page:'/',tabId:null,startedAt:Date.now(),
+    machineRequestId:message.requestId,machineActionTabId:sender.tab.id,
+    ...(matchingBlocked?{replacedBlockedSessionId:replace}:{}),
+    startPrompt:intent.prompt};
+  await saveRun(next); // Reserve BEFORE any new Chrome tab or send.
+  return {status:'PREPARED',token:next.token,sessionId:next.sessionId};
+}
+async function sessionStartTake(message,sender){
+  const run=await readRun();
+  if(!sessionPage(sender,'start',message.requestId)||run?.machineRequestId!==message.requestId
+    ||run.machineActionTabId!==sender.tab.id||run.token!==message.token
+    ||run.phase!=='STARTING')return {status:'DENIED',code:'START_OWNER_CHANGED'};
+  await saveRun({...run,phase:'PENDING'});
+  return {status:'OK',sessionId:run.sessionId,prompt:run.startPrompt};
+}
+async function sessionStartResult(message,sender){
+  const run=await readRun();
+  if(!sessionPage(sender,'start',message.requestId)||run?.machineRequestId!==message.requestId
+    ||run.machineActionTabId!==sender.tab.id||run.token!==message.token
+    ||run.phase!=='PENDING')return {status:'DENIED',code:'START_OWNER_CHANGED'};
+  let confirmed=message.result==='SENT_CONFIRMED'
+    &&Number.isInteger(message.newTabId)
+    &&typeof message.newPage==='string'&&pathOf('https://chatgpt.com'+message.newPage)===message.newPage
+    &&typeof message.newUserKey==='string'&&/^user:[^\s]{8,}$/.test(message.newUserKey);
+  if(confirmed){
+    const tab=await chrome.tabs.get(message.newTabId).catch(()=>null);
+    confirmed=!!tab&&pathOf(tab.url)===message.newPage;
+  }
+  const next={...run,phase:confirmed?'WAITING_REPLY':'BLOCKED',
+    reason:confirmed?'':'START_SEND_UNVERIFIED',
+    ...(confirmed?{tabId:message.newTabId,page:message.newPage,
+      newUserKey:message.newUserKey}:{attemptedNewTabId:Number.isInteger(message.newTabId)?message.newTabId:null})};
+  delete next.startPrompt;
+  delete next.machineRequestId;
+  delete next.machineActionTabId;
+  await saveRun(next);
+  return confirmed?{status:'OK',sessionId:next.sessionId,
+    activeChatId:sessionProjection(next).activeChatId,
+    activeChatUrl:sessionProjection(next).activeChatUrl}
+    :{status:'BLOCKED',code:'START_SEND_UNVERIFIED'};
+}
+async function sessionStatus(message,sender){
+  if(!sessionPage(sender,'status',message.requestId))
+    return {status:'DENIED',code:'INVALID_STATUS_SOURCE'};
+  const run=await readRun();
+  const disk=await chrome.runtime.sendNativeMessage(SESSION_HOST,{op:'session-read'}).catch(()=>null);
+  if(disk?.status!=='OK')return {status:'UNVERIFIED',code:'SESSION_STATE_UNVERIFIED'};
+  if(run?.sessionId&&(!disk.session||run.sessionId!==disk.session.sessionId
+    ||run.phase!==disk.session.phase
+    ||(run.generation||0)!==disk.session.generation))
+    return {status:'UNVERIFIED',code:'SESSION_FILE_MISMATCH'};
+  if(!run?.sessionId&&disk.session&&disk.session.phase!=='DONE')
+    return {status:'UNVERIFIED',code:'SESSION_OWNER_MISMATCH'};
+  if(run&&run.phase!=='DONE'&&!run.sessionId)
+    return {status:'OK',state:'LEGACY_OWNER',phase:run.phase};
+  if(!run||run.phase==='DONE')return {status:'OK',state:'IDLE',
+    ...(disk.session?{lastSession:disk.session}:{} )};
+  const record=sessionProjection(run);
+  if(record.activeChatId&&run.phase==='WAITING_REPLY'){
+    const tab=await chrome.tabs.get(run.tabId).catch(()=>null);
+    if(!tab||pathOf(tab.url)!==run.page)
+      return {status:'UNVERIFIED',code:'OWNER_TAB_MISSING',session:record};
+  }
+  return {status:'OK',state:run.phase==='BLOCKED'?'BLOCKED':'ACTIVE',session:record};
+}
 async function prepareHandoffIfDue() {
   const run = await readRun();
   const deadlineAt = deadlineOf(run);
@@ -196,6 +319,26 @@ async function onTurnBlocked(message, sender) {
   const second = await verify();
   if (!second || first.retryAvailable !== second.retryAvailable)
     return {status: "IGNORED", code: "ERROR_NOT_STABLE"};
+  // A network interruption may show a transient page error without a native
+  // Retry button. Only *observe* for a bounded grace period: never resend an
+  // uncertain user Turn. Resume normal observation only if the EXACT submitted
+  // user identity stays present and two consecutive polls show no page fault.
+  // If the optimistic user message disappears, this is NOT proof of no send.
+  if (reason === "PAGE_ERROR" && second.retryAvailable !== true) {
+    let recovered = 0;
+    for (let attempt = 0; attempt < 4; attempt++) {
+      await new Promise(resolve => setTimeout(resolve, 1000));
+      const proof = await chrome.tabs.sendMessage(previous.tabId,
+        {type: "CHAT_LOOP_TURN_OBSERVE_V1", poll: true}).catch(() => null);
+      const sameTurn = proof?.contract === "chat-loop.turn-observer.v1"
+        && proof.page === previous.page
+        && proof.userKey === previous.newUserKey;
+      if (sameTurn && ["RUNNING", "UNKNOWN", "IDLE"].includes(proof.status)) {
+        recovered++;
+        if (recovered === 2) return {status: "IGNORED", code: "PAGE_ERROR_CLEARED_SAME_TURN"};
+      } else recovered = 0;
+    }
+  }
   // A security challenge is an explicit stop condition, not a prompt to retry
   // or evade site access controls. Keep the original Chat and user Turn intact.
   if (reason === "SECURITY_CHALLENGE") {
@@ -415,7 +558,9 @@ async function onTurnFinished(message, sender) {
   const newlyDue = Date.now() >= startedAt + windowMsOf(previous);
   if (nextAction === "CONTINUE" && newlyDue) nextAction = "HANDOFF";
   const token = crypto.randomUUID();
-  const run = {tabId, page: message.page, userKey: message.userKey,
+  const run = {...(previous?.sessionId ? {sessionId: previous.sessionId,
+    projectId: previous.projectId, generation: previous.generation || 0} : {}),
+    tabId, page: message.page, userKey: message.userKey,
     assistantKey: message.assistantKey, phase: "RESERVED", token,
     action: nextAction, startedAt, modelReceipts:receiptHistory(previous),
     ...(countMode ? {countMode:true, countValue:verifiedCount,
@@ -524,7 +669,8 @@ async function onManualPrepare(message, sender) {
       || message.tabId !== Number(rawTabId))))
     return {status: "DENIED", code: "INVALID_ACTION_URL"};
   const previous = await readRun();
-  if (previous && !["DONE", "BLOCKED"].includes(previous.phase))
+  if (previous && (previous.sessionId&&previous.phase!=="DONE"
+    || !["DONE", "BLOCKED"].includes(previous.phase)))
     return {status: "DENIED", code: "LOOP_ALREADY_ACTIVE"};
   const candidates = await chrome.tabs.query({url: "https://chatgpt.com/*"});
   const all = candidates.filter(tab => Number.isInteger(tab.id) && pathOf(tab.url));
@@ -586,7 +732,8 @@ async function onTestPrepare(message, sender) {
       chrome.runtime.getURL("continue.html") + "?tabId=" + tabId + "&setup=1&discardDraft=1&timed=1&wall=10m&count=86"].includes(sender.url))
     return {status: "DENIED", code: "INVALID_TEST_ACTION"};
   const previous = await readRun();
-  if (previous && !["DONE", "BLOCKED"].includes(previous.phase))
+  if (previous && (previous.sessionId&&previous.phase!=="DONE"
+    || !["DONE", "BLOCKED"].includes(previous.phase)))
     return {status: "DENIED", code: "LOOP_ALREADY_ACTIVE"};
   if (previous?.tabId === tabId)
     return {status: "DENIED", code: "TEST_TARGET_ALREADY_USED"};
@@ -867,6 +1014,7 @@ async function onResult(message, sender) {
         // Keep source identities as the already-processed baseline; the new
         // user's first reply must not be suppressed by duplicate detection.
         newUserKey: message.newUserKey, phase: "WAITING_REPLY", reason: "",
+        ...(run.sessionId?{generation:(run.generation||0)+1}:{}),
         // The new Chat has no previous assistant message. Never authenticate
         // its first Retry/Error Handoff using the OLD Chat's assistant ID.
         userKey: null, assistantKey: null, startedAt: Date.now(),
@@ -1092,8 +1240,14 @@ chrome.runtime.onMessage.addListener((message, sender, reply) => {
     "CHAT_LOOP_ACTION_RESULT_V1", "CHAT_LOOP_ACTION_MANUAL_PREPARE_V1",
     "CHAT_LOOP_MODEL_INTENT_V1", "CHAT_LOOP_MODEL_INTENT_STATUS_V1",
     "CHAT_LOOP_ACTION_TEST_PREPARE_V1",
+    "CHAT_LOOP_SESSION_START_PREPARE_V1", "CHAT_LOOP_SESSION_START_TAKE_V1",
+    "CHAT_LOOP_SESSION_START_RESULT_V1", "CHAT_LOOP_SESSION_STATUS_V1",
     "CHAT_LOOP_ACCEPTANCE_CLOCK_ADVANCE_V1"].includes(type)) {
-    const work = serial(() => type === "CHAT_LOOP_MODEL_INTENT_V1"
+    const work = serial(() => type === "CHAT_LOOP_SESSION_START_PREPARE_V1"
+      ? sessionStartPrepare(message,sender) : type === "CHAT_LOOP_SESSION_START_TAKE_V1"
+      ? sessionStartTake(message,sender) : type === "CHAT_LOOP_SESSION_START_RESULT_V1"
+      ? sessionStartResult(message,sender) : type === "CHAT_LOOP_SESSION_STATUS_V1"
+      ? sessionStatus(message,sender) : type === "CHAT_LOOP_MODEL_INTENT_V1"
       ? onModelIntent(message, sender) : type === "CHAT_LOOP_MODEL_INTENT_STATUS_V1"
       ? onModelIntentStatus(message,sender) : type === "CHAT_LOOP_TURN_FINISHED_V1"
       ? onTurnFinished(message, sender) : type === "CHAT_LOOP_TURN_BLOCKED_V1"

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Chat Loop Extension",
-  "version": "0.3.32",
+  "version": "0.3.34",
   "description": "Chat Loop browser companion: Eye actions, Turn observer, Continue and Handoff Actions",
   "permissions": [
     "activeTab",

package/extension/popup.js

@@ -56,6 +56,7 @@ async function showActionState() {
   const run = (await chrome.storage.local.get(key))[key];
   const allowed = ["phase", "action", "reason", "tabId", "page", "sourceTabId", "sourcePage",
     "userKey", "assistantKey", "newUserKey", "testSetup", "startedAt",
+    "sessionId", "projectId", "generation",
     "deadlineAt", "handoffPending", "handoffPendingAt", "attemptedNewTabId"];
   const summary = {version: chrome.runtime.getManifest().version};
   if (run) for (const key of allowed) if (run[key] !== undefined) summary[key] = run[key];

package/extension/start.html

@@ -0,0 +1,6 @@
+<!doctype html>
+<html lang="zh-CN"><head><meta charset="utf-8"><title>Chat Loop · start</title>
+<style>body{font:15px system-ui,sans-serif;padding:24px;max-width:620px;color:#222}#status{font-weight:bold}#details{white-space:pre-wrap;overflow-wrap:anywhere}body[data-result="error"] #status{color:#b00020}</style>
+</head><body><h1>Chat Loop · start</h1><p id="status" role="status">STARTING</p>
+<p id="details">只有已确认意图且成功取得全局执行权才会发送首条消息。</p>
+<script src="actions/start.js"></script></body></html>

package/extension/status.html

@@ -0,0 +1,6 @@
+<!doctype html>
+<html lang="zh-CN"><head><meta charset="utf-8"><title>Chat Loop · status</title>
+<style>body{font:15px system-ui,sans-serif;padding:24px;max-width:620px;color:#222}#status{font-weight:bold}#details{white-space:pre-wrap;overflow-wrap:anywhere}body[data-result="error"] #status{color:#b00020}</style>
+</head><body><h1>Chat Loop · status</h1><p id="status" role="status">STARTING</p>
+<p id="details">只读查询唯一网页执行会话，不执行网页副作用。</p>
+<script src="actions/status.js"></script></body></html>

package/lib/bridge.mjs

@@ -4,7 +4,7 @@ import {homedir, tmpdir} from 'node:os';
 import {join} from 'node:path';
 
 export const HOST_NAME = 'com.tomflow.chatloop.extension';
-export const ACTIONS = ['chat_text', 'chat_dom', 'chat_screenshot', 'reload', 'continue', 'handoff', 'clean'];
+export const ACTIONS = ['chat_text', 'chat_dom', 'chat_screenshot', 'reload', 'continue', 'handoff', 'clean', 'status', 'start'];
 const ID = /^[a-f0-9]{32}$/;
 const MAX_TEXT = 8 * 1024 * 1024;
 const MAX_PNG = 24 * 1024 * 1024;
@@ -24,6 +24,20 @@ export function requestDir(id) {
   return join(tempRoot(),id);
 }
 export function validateIntent(action, intent) {
+  if(action==='start'){
+    if(!intent||typeof intent!=='object'||Array.isArray(intent)
+      ||Object.keys(intent).some(k=>!['projectId','prompt','confirmed','replaceBlockedSessionId'].includes(k))
+      ||!(/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/).test(intent.projectId||'')
+      ||intent.confirmed!==true
+      || (intent.replaceBlockedSessionId!==undefined
+        && !/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(intent.replaceBlockedSessionId))
+      ||typeof intent.prompt!=='string'
+      ||!intent.prompt.trim()||intent.prompt.length>4000
+      ||/[\x00-\x08\x0b\x0c\x0e-\x1f]/.test(intent.prompt))
+      throw Object.assign(Error('Explicit confirmed task and project required'),{code:'INVALID_START_INTENT'});
+    return {projectId:intent.projectId,prompt:intent.prompt,confirmed:true,
+      ...(intent.replaceBlockedSessionId?{replaceBlockedSessionId:intent.replaceBlockedSessionId}:{})};
+  }
   if(action==='clean'){
     if(!intent || typeof intent!=='object' || Array.isArray(intent)
       || Object.keys(intent).length!==1 || !Number.isSafeInteger(intent.tabId)
@@ -82,7 +96,7 @@ export function readRequest(id) {
   const r=JSON.parse(readFileSync(p,'utf8'));
   if(r.id!==id||!ACTIONS.includes(r.action)||Date.now()>r.expiresAt)
     throw Object.assign(Error('Request expired or changed'),{code:'REQUEST_EXPIRED'});
-  if(['continue','handoff','clean'].includes(r.action))validateIntent(r.action,r.intent);
+  if(['continue','handoff','clean','start'].includes(r.action))validateIntent(r.action,r.intent);
   return r;
 }
 export function finish({id,nonce,action,status,payload='',code=null}) {

package/lib/session-file.mjs

@@ -0,0 +1,79 @@
+// Single-Mac durable session pointer. Extension Worker is the only admission/sending authority.
+// This file is a checked, minimal projection, not a second executor or task engine.
+import {openSync,closeSync,readFileSync,writeFileSync,renameSync,unlinkSync,lstatSync,existsSync,mkdirSync} from 'node:fs';
+import {homedir} from 'node:os';
+import {join,dirname} from 'node:path';
+import {randomUUID} from 'node:crypto';
+
+const ID=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const CHAT=/^[0-9a-f-]{12,}$/i;
+const PROJECT=/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;
+const PHASE=new Set(['STARTING','RESERVED','PENDING','WAITING_REPLY','WAITING_INTERVAL','DONE','BLOCKED','WALL_CLOCK_HOLD']);
+const fail=code=>Object.assign(Error(code),{code});
+export const sessionPath=()=>join(homedir(),'.chat-loop','session','active-session.json');
+const ensurePrivate=dir=>{
+  if(!existsSync(dir))mkdirSync(dir,{recursive:true,mode:0o700});
+  const st=lstatSync(dir);
+  if(!st.isDirectory()||st.isSymbolicLink()||(process.getuid&&st.uid!==process.getuid())||
+    (process.platform!=='win32'&&(st.mode&0o077)))throw fail('SESSION_DIRECTORY_UNTRUSTED');
+};
+const validate=r=>{
+  if(!r||typeof r!=='object'||Array.isArray(r)||
+    !ID.test(r.sessionId||'')||!PROJECT.test(r.projectId||'')||
+    !PHASE.has(r.phase)||!Number.isSafeInteger(r.generation)||r.generation<0||
+    !Number.isSafeInteger(r.updatedAt)||r.updatedAt<=0)
+    throw fail('SESSION_INVALID');
+  if(r.activeChatId!==null&&(typeof r.activeChatId!=='string'||!CHAT.test(r.activeChatId)))
+    throw fail('SESSION_CHAT_INVALID');
+  if(r.activeChatUrl!==null&&(typeof r.activeChatUrl!=='string'
+    || !/^https:\/\/chatgpt\.com\/(?:c\/[0-9a-f-]{12,}|g\/[^/]+\/c\/[0-9a-f-]{12,})$/i.test(r.activeChatUrl)))
+    throw fail('SESSION_CHAT_INVALID');
+  if((r.activeChatId===null)!==(r.activeChatUrl===null))
+    throw fail('SESSION_CHAT_INVALID');
+  if(r.activeChatUrl!==null&&!r.activeChatUrl.endsWith('/'+r.activeChatId))
+    throw fail('SESSION_CHAT_INVALID');
+  if(r.activeChatId===null&&r.phase==='WAITING_REPLY')throw fail('SESSION_CHAT_INVALID');
+  const keys=['sessionId','projectId','phase','generation','activeChatId','activeChatUrl','updatedAt'];
+  if(Object.keys(r).some(k=>!keys.includes(k)))throw fail('SESSION_EXTRA_FIELDS');
+  return Object.fromEntries(keys.map(k=>[k,r[k]]));
+};
+export function readSession(){
+  const file=sessionPath();
+  if(!existsSync(file))return null;
+  ensurePrivate(dirname(file));
+  const st=lstatSync(file);
+  if(!st.isFile()||st.isSymbolicLink()||(process.getuid&&st.uid!==process.getuid())
+    ||(process.platform!=='win32'&&(st.mode&0o077)))throw fail('SESSION_FILE_UNTRUSTED');
+  try{return validate(JSON.parse(readFileSync(file,'utf8')));}
+  catch(e){if(e.code)throw e;throw fail('SESSION_FILE_CORRUPT');}
+}
+export function writeSession(input,replaceBlockedSessionId=null){
+  const next=validate(input),file=sessionPath(),dir=dirname(file),lock=file+'.lock';
+  ensurePrivate(dir);
+  let fd;
+  try{fd=openSync(lock,'wx',0o600);}catch{throw fail('SESSION_CONCURRENT_UPDATE');}
+  try{
+    const old=readSession();
+    if(replaceBlockedSessionId && (!old||old.sessionId!==next.sessionId
+      && (old.phase!=='BLOCKED'||old.sessionId!==replaceBlockedSessionId)))
+      throw fail('SESSION_REPLACEMENT_MISMATCH');
+    if(old&&old.sessionId!==next.sessionId&&old.phase!=='DONE'
+      && !(old.phase==='BLOCKED' && next.phase==='STARTING'
+        && replaceBlockedSessionId===old.sessionId && next.projectId!==old.projectId))
+      throw fail('SESSION_ALREADY_ACTIVE');
+    if(old&&old.sessionId===next.sessionId){
+      if(next.generation<old.generation)throw fail('SESSION_STALE_GENERATION');
+      if(old.phase==='DONE'&&next.phase!=='DONE'||old.phase==='BLOCKED'
+        && !['BLOCKED','DONE'].includes(next.phase))
+        throw fail('SESSION_TERMINAL_LOCKED');
+      if(old.activeChatId!==null&&next.generation===old.generation&&
+        next.activeChatId!==null&&old.activeChatId!==next.activeChatId)
+        throw fail('SESSION_CHAT_CHANGED_WITHOUT_HANDOFF');
+    }
+    const temp=join(dir,'.active-session-'+randomUUID()+'.tmp');
+    try{writeFileSync(temp,JSON.stringify(next,null,2)+'\n',{flag:'wx',mode:0o600});
+      renameSync(temp,file);
+    }catch(e){try{unlinkSync(temp);}catch{}throw e;}
+    return next;
+  }finally{closeSync(fd);unlinkSync(lock);}
+}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@tomflow/chatloop-extension",
-  "version": "0.3.32",
+  "version": "0.3.34",
   "type": "module",
-  "description": "Chat Loop Extension package: seven formal Action pages and its own native CLI bridge",
+  "description": "Chat Loop Extension package: nine formal Action pages and its own native CLI bridge",
   "bin": {
     "chatloop-extension": "bin/cli.mjs",
     "chat-loop-browser": "bin/cli.mjs"