@tomflow/chatloop-extension 0.3.46 → 0.3.47

package/README.md

@@ -49,3 +49,5 @@ Clean 只清空输入框，不发送，不更改 Owner；必须指定精确标
 **新页准备超时策略（0.3.45）**：Start 新 Chat 编辑器只读等待约 218 秒，Handoff 新 Chat 只读等待约 234 秒，均保持一次新建/一次发送且不跳过 ChatGPT 网页验证。Start CLI 最多等待 310 秒，MCP Tools 转发最多 330 秒；Worker 对 Start/Handoff 的未确认资源等待 330 秒，其它 Action 维持 180 秒。窗口到期仍无确定回执时保留 BLOCKED，禁止自动重发。
 
 **0.3.46 Chrome pendingUrl 修复**：Worker 创建正式 Action 时，以自己刚发起的受控 Extension URL 与 Chrome 返回的数值 tabId 登记资源，不能依赖 `tabs.create` 立即返回最终 `tab.url`（它可能仅有 `pendingUrl`）。Action 自身仍需验证真实 URL、Owner、token，任何未确认发送都不得重试；代码回归覆盖过渡 tab.url 缺失但单次 Action 正常创建。
+
+**0.3.47 严格受限的 E2E BLOCKED 标签回收**：只通过正式内置 `popup.html?cleanupBlockedE2E=<tabId>`，要求当前唯一 BLOCKED/CONTINUE 测试 Session、精确 tabId/URL/userKey/assistantKey、对应测试用户消息标识、助手完整 CONTINUE 尾标记、空草稿、无上传和非生成状态两次稳定检查；最后重核 Worker 身份及未发出新 Action，才可关闭此测试标签，不删除 ChatGPT 聊天记录。普通用户 Chat、未知副作用、活动 Session 均禁止清理。

package/extension/acceptance.js

@@ -1,7 +1,7 @@
 // Read-only acceptance inventory and strictly scoped test-tab lifecycle.
 (() => {
   const q = new URLSearchParams(location.search);
-  const modes = ["audit", "newTest", "cleanup", "cleanupVerified", "cleanupStaleMachine", "cleanupTestHome", "cleanupFailedStartHome"].filter(k => q.has(k));
+  const modes = ["audit", "newTest", "cleanup", "cleanupVerified", "cleanupStaleMachine", "cleanupTestHome", "cleanupFailedStartHome", "cleanupBlockedE2E"].filter(k => q.has(k));
   if (!modes.length) return; // Ordinary popup remains unchanged.
   const runKey = "chat-loop.action.run.v1";
   const ownedKey = "chat-loop.acceptance.owned.v1";
@@ -317,6 +317,70 @@
         chatTabs: left.filter(tab => isChat(tab.url)).length,
         extensionTabs: left.filter(tab => tab.url?.startsWith(extensionOrigin)
           && tab.id !== own.id).length};
+    } else if (mode === "cleanupBlockedE2E") {
+      // One explicitly scoped test Chat only. Closing a tab preserves its
+      // canonical ChatGPT history; never close a real user or unknown Turn.
+      const tabId=Number(q.get('cleanupBlockedE2E'));
+      if(!Number.isSafeInteger(tabId)||tabId<=0 || run?.phase!=='BLOCKED'
+        ||run.action!=='CONTINUE' ||run.tabId!==tabId
+        ||typeof run.page!=='string'
+        ||!/^\/c\/[0-9a-f-]{12,}$/i.test(run.page)
+        ||!/^cl-intent-e2e-[a-z0-9-]+$/i.test(run.projectId||'')
+        ||!/^user:[^\s]{8,}$/.test(run.userKey||'')
+        ||!/^assistant:[^\s]{8,}$/.test(run.assistantKey||''))
+        throw Error('BLOCKED_E2E_IDENTITY_UNVERIFIED');
+      const expectedUrl='https://chatgpt.com'+run.page;
+      const source=await chrome.tabs.get(tabId).catch(()=>null);
+      if(!source||source.url!==expectedUrl||source.active||source.pinned)
+        throw Error('BLOCKED_E2E_TAB_NOT_SAFE');
+      const expectedCode=run.projectId.toUpperCase().replace(/^CL-INTENT-E2E-/, 'CL-INTENT-E2E-');
+      async function observe(){
+        const [check]=await chrome.scripting.executeScript({
+          target:{tabId},func:(code,userKey,assistantKey,expectedPage)=>{
+            if(location.origin!=='https://chatgpt.com'||location.pathname!==expectedPage)
+              return false;
+            const visible=n=>!!n?.getClientRects?.().length;
+            const mains=[...document.querySelectorAll('main')].filter(visible);
+            if(mains.length!==1)return false;
+            const modern=[...mains[0].querySelectorAll('[data-chatgpt-search-unit-key][data-chatgpt-search-message-ids]')];
+            const rows=modern.length?modern:[...mains[0].querySelectorAll('[data-message-author-role]')];
+            const role=n=>n.getAttribute('data-message-author-role')
+              ||n.getAttribute('data-chatgpt-search-unit-key')?.split(':').at(-1);
+            const id=n=>n.getAttribute('data-message-id')
+              ||n.getAttribute('data-chatgpt-search-message-ids')?.trim().split(/\s+/)[0];
+            const users=rows.filter(n=>role(n)==='user');
+            const assistants=rows.filter(n=>role(n)==='assistant');
+            const user=users.at(-1),assistant=assistants.at(-1);
+            const content=assistant?.querySelector('.markdown')?.innerText
+              ||assistant?.innerText||assistant?.textContent||'';
+            const editor=document.querySelector('[contenteditable="true"][data-composer-markdown]')
+              ||document.querySelector('#prompt-textarea[contenteditable="true"]');
+            const hasUploads=!!document.querySelector('[data-testid*="attachment-preview"],[data-testid*="image-preview"],[data-testid="composer-attachment"]');
+            const stillRunning=[...document.querySelectorAll('button[data-testid="stop-button"],button[aria-label="Stop generating"],button[aria-label="停止响应"]')].some(visible);
+            return !!(user&&assistant&&'user:'+id(user)===userKey
+              &&'assistant:'+id(assistant)===assistantKey
+              &&(user.innerText||user.textContent||'').includes(code)
+              &&content.trim().endsWith('[CHAT_LOOP_STATUS:CONTINUE]')
+              &&visible(editor)&&!(editor.innerText||editor.textContent||'').trim()
+              &&!hasUploads&&!stillRunning);
+          },args:[expectedCode,run.userKey,run.assistantKey,run.page]});
+        return check?.result===true;
+      }
+      if(!await observe())throw Error('BLOCKED_E2E_FINAL_TURN_NOT_VERIFIED');
+      await sleep(1250);
+      if(!await observe())throw Error('BLOCKED_E2E_FINAL_TURN_UNSTABLE');
+      const latest=(await chrome.storage.local.get(runKey))[runKey];
+      const same=latest?.sessionId===run.sessionId&&latest?.phase==='BLOCKED'
+        &&latest.action===run.action&&latest.tabId===tabId
+        &&latest.userKey===run.userKey&&latest.assistantKey===run.assistantKey;
+      const live=await chrome.tabs.get(tabId).catch(()=>null);
+      const actionPages=await chrome.tabs.query({});
+      if(!same||live?.url!==source.url||live.active||live.pinned
+        ||actionPages.some(t=>t.url?.startsWith(chrome.runtime.getURL('continue.html?tabId='+tabId))
+          ||t.url?.startsWith(chrome.runtime.getURL('handoff.html?tabId='+tabId))))
+        throw Error('BLOCKED_E2E_SOURCE_CHANGED');
+      await chrome.tabs.remove(tabId);
+      audit.cleanedBlockedE2E=tabId;
     } else if (mode === "cleanupFailedStartHome") {
       // Only a known failed pre-send Start home, never a Chat conversation.
       const id=Number(q.get('cleanupFailedStartHome'));

package/extension/loop/resources.js

@@ -24,7 +24,7 @@
     if (u.pathname === '/popup.html' && u.searchParams.size === 1) {
       const name=[...u.searchParams.keys()][0],value=u.searchParams.get(name);
       const noId=new Set(['newTest','cleanup','cleanupVerified','cleanupStaleMachine']);
-      const tabId=new Set(['cleanupTestHome','cleanupFailedStartHome']);
+      const tabId=new Set(['cleanupTestHome','cleanupFailedStartHome','cleanupBlockedE2E']);
       if ((noId.has(name)&&value==='1') || (tabId.has(name)&&validTabId(value)))
         return {kind:'manual',name:'acceptance'};
     }

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Chat Loop Extension",
-  "version": "0.3.46",
+  "version": "0.3.47",
   "description": "Chat Loop browser companion: Eye actions, Turn observer, Continue and Handoff Actions",
   "permissions": [
     "activeTab",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/chatloop-extension",
-  "version": "0.3.46",
+  "version": "0.3.47",
   "type": "module",
   "description": "Chat Loop Extension package: nine formal Action pages and its own native CLI bridge",
   "bin": {