@tomflow/chatloop-extension 0.3.36 → 0.3.38

package/extension/acceptance.js

@@ -125,7 +125,15 @@
         audit.messageEvidence[id] = read?.result || {status: "EMPTY_RESULT"};
         // Only dedicated tests created by this diagnostic may expose their
         // harmless assistant text, for verifying strict status parsing.
-        if (owned.some(item => item.id === id || (item.id === run?.sourceTabId && id === run?.tabId))) {
+        const ownedAcceptance = owned.some(item => item.id === id
+          || (item.id === run?.sourceTabId && id === run?.tabId));
+        // The existing read-only Audit may also inspect the CURRENT, exactly
+        // matched Worker-owned Chat. It drives the Observer's existing poll,
+        // never types into a conversation or creates an Action. Never persist
+        // unapproved user reply text for ordinary project sessions.
+        const currentOwner = run?.tabId === id
+          && audit.messageEvidence[id]?.url === "https://chatgpt.com" + run.page;
+        if (ownedAcceptance || currentOwner) {
           const proof = await chrome.tabs.sendMessage(id,
             {type: "CHAT_LOOP_TURN_VERIFY_V1"}).catch(() => null);
           audit.messageEvidence[id].observerStatus = proof?.status || "UNAVAILABLE";
@@ -135,7 +143,7 @@
             status: observed.status, reason: observed.reason, page: observed.page,
             userKey: observed.userKey, eventCount: observed.eventCount,
             observedAt: observed.observedAt} : null;
-          audit.messageEvidence[id].observerReplyText =
+          if (ownedAcceptance) audit.messageEvidence[id].observerReplyText =
             typeof proof?.replyText === "string" ? proof.replyText.slice(0, 3000) : null;
         }
       } catch {

package/extension/loop/core.js

@@ -8,14 +8,19 @@
     const match = MARKER.exec(lines.at(-1)?.trim() || "");
     if (!match) return "UNKNOWN";
     const markers = text.match(ALL_MARKERS) || [];
-    // A portable handoff packet may legitimately quote DONE/CONTINUE rules for
-    // the next Chat. Only its final HANDOFF token must be unique; all other
-    // statuses still require a single marker in the entire reply.
+    // Status is a protocol line, not any occurrence of its token in prose.
+    // A reply may describe a previous Turn as, e.g., "it ended with
+    // [CHAT_LOOP_STATUS:CONTINUE]" and still legitimately finish with DONE.
+    // Require exactly one standalone status line, at the end. Never accept
+    // two standalone statuses (even if they have the same value).
+    const standalone = lines.filter(line => MARKER.test(line.trim()));
+    // Historical HANDOFF packets may embed prior standalone statuses. Keep
+    // its compatibility rule while requiring only one HANDOFF token total.
     if (match[1] === "HANDOFF") {
       return markers.filter(v => v === "[CHAT_LOOP_STATUS:HANDOFF]").length === 1
         ? "HANDOFF" : "UNKNOWN";
     }
-    if (markers.length !== 1) return "UNKNOWN";
+    if (standalone.length !== 1) return "UNKNOWN";
     return match[1];
   }
   function fingerprint(text) {

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Chat Loop Extension",
-  "version": "0.3.36",
+  "version": "0.3.38",
   "description": "Chat Loop browser companion: Eye actions, Turn observer, Continue and Handoff Actions",
   "permissions": [
     "activeTab",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/chatloop-extension",
-  "version": "0.3.36",
+  "version": "0.3.38",
   "type": "module",
   "description": "Chat Loop Extension package: nine formal Action pages and its own native CLI bridge",
   "bin": {