@tomflow/proflow-execution-browser-extension 0.1.35 → 0.1.37

package/dist/deployment/adapter.d.ts

@@ -47,7 +47,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.35";
+            moduleVersion: "0.1.37";
             data: {
                 loadDir: string;
             };
@@ -60,7 +60,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.35";
+            readonly moduleVersion: "0.1.37";
         };
         observedEffects: never[];
     }>;
@@ -70,7 +70,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.35";
+            moduleVersion: "0.1.37";
             data: {
                 setupStatus: "ACTION_REQUIRED" | "READY";
                 runtimeStatus: "NOT_APPLICABLE";
@@ -95,7 +95,7 @@ export declare const behaviorAdapter: {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.35";
+            moduleVersion: "0.1.37";
             ok: false;
             status: "ACTION_REQUIRED";
             data: {
@@ -127,14 +127,14 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.35";
+            readonly moduleVersion: "0.1.37";
         };
         observedEffects: string[];
     } | {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.35";
+            moduleVersion: "0.1.37";
             ok: false;
             status: "FAILED";
             error: {
@@ -167,7 +167,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.35";
+            moduleVersion: "0.1.37";
             data: {
                 docs: string;
             };
@@ -180,11 +180,11 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.35";
+            readonly moduleVersion: "0.1.37";
         } | {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.35";
+            moduleVersion: "0.1.37";
             ok: false;
             status: "FAILED";
             error: {
@@ -201,7 +201,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.35";
+            readonly moduleVersion: "0.1.37";
         };
         observedEffects: never[];
     }>;

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "execution-browser-extension";
     readonly packageName: "@tomflow/proflow-execution-browser-extension";
-    readonly moduleVersion: "0.1.35";
+    readonly moduleVersion: "0.1.37";
     readonly kind: "browser-extension";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "execution-browser-extension",
     packageName: "@tomflow/proflow-execution-browser-extension",
-    moduleVersion: "0.1.35",
+    moduleVersion: "0.1.37",
     kind: "browser-extension",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",

package/dist/extension/content.js

@@ -1,94 +1,115 @@
-import { containsSubmittedFingerprint } from "../src/submitted-message.js";
-const contentInstanceId = `content:${crypto.randomUUID()}`;
-function pageState() {
+"use strict";
+(() => {
+  // packages/execution-browser-extension/src/submitted-message.ts
+  function containsSubmittedFingerprint(candidates, fingerprint) {
+    if (!fingerprint) return false;
+    for (const candidate of candidates) {
+      if (candidate.authorRole === "user" && candidate.textContent?.includes(fingerprint))
+        return true;
+    }
+    return false;
+  }
+
+  // packages/execution-browser-extension/extension/content.ts
+  var contentInstanceId = `content:${crypto.randomUUID()}`;
+  function pageState() {
     if (document.querySelector('[role="dialog"]'))
-        return { pageState: "BLOCKED", activityKind: "ACTION_PERMISSION" };
-    if (document.querySelector('[data-testid="stop-button"], button[aria-label*="Stop"]'))
-        return { pageState: "BUSY", activityKind: "GENERATING" };
-    if (document.querySelector('#prompt-textarea, textarea, [contenteditable="true"]'))
-        return { pageState: "IDLE", activityKind: null };
+      return { pageState: "BLOCKED", activityKind: "ACTION_PERMISSION" };
+    if (document.querySelector(
+      '[data-testid="stop-button"], button[aria-label*="Stop"]'
+    ))
+      return { pageState: "BUSY", activityKind: "GENERATING" };
+    if (document.querySelector(
+      '#prompt-textarea, textarea, [contenteditable="true"]'
+    ))
+      return { pageState: "IDLE", activityKind: null };
     return { pageState: "UNKNOWN", activityKind: null };
-}
-function observation() {
+  }
+  function observation() {
     return {
-        url: location.href,
-        contentInstanceId,
-        ...pageState(),
-        observedAt: new Date().toISOString(),
+      url: location.href,
+      contentInstanceId,
+      ...pageState(),
+      observedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-}
-function safeElement(selector) {
-    if (!selector || selector.length > 512)
-        throw new Error("SELECTOR_INVALID");
+  }
+  function safeElement(selector) {
+    if (!selector || selector.length > 512) throw new Error("SELECTOR_INVALID");
     const element = document.querySelector(selector);
-    if (!(element instanceof HTMLElement))
-        throw new Error("ELEMENT_NOT_FOUND");
+    if (!(element instanceof HTMLElement)) throw new Error("ELEMENT_NOT_FOUND");
     return element;
-}
-function hasFingerprint(fingerprint) {
-    return containsSubmittedFingerprint([...document.querySelectorAll('[data-message-author-role="user"]')].map((element) => ({
-        authorRole: element.getAttribute("data-message-author-role"),
-        textContent: element.textContent,
-    })), fingerprint);
-}
-chrome.runtime.onMessage.addListener((command, _sender, sendResponse) => {
+  }
+  function hasFingerprint(fingerprint) {
+    return containsSubmittedFingerprint(
+      [...document.querySelectorAll('[data-message-author-role="user"]')].map(
+        (element) => ({
+          authorRole: element.getAttribute("data-message-author-role"),
+          textContent: element.textContent
+        })
+      ),
+      fingerprint
+    );
+  }
+  chrome.runtime.onMessage.addListener((command, _sender, sendResponse) => {
     void (async () => {
-        if (command.type !== "PROFLOW_PAGE_COMMAND" ||
-            command.contentInstanceId !== contentInstanceId ||
-            command.expectedUrl !== location.href)
-            throw new Error("STALE_CONTENT_SESSION");
-        if (command.operation === "observe")
-            return observation();
-        if (command.operation === "verify")
-            return {
-                ...observation(),
-                verified: hasFingerprint(command.fingerprint),
-            };
-        if (pageState().pageState === "BLOCKED")
-            throw new Error("PAGE_PERMISSION_REQUIRES_HUMAN");
-        if (command.operation === "click") {
-            safeElement(command.selector).click();
-            return observation();
-        }
-        const input = safeElement(command.selector ?? "#prompt-textarea");
-        if (command.value === undefined || command.value.length > 4_096)
-            throw new Error("INPUT_BUDGET_EXCEEDED");
-        input.focus();
-        if (input instanceof HTMLTextAreaElement ||
-            input instanceof HTMLInputElement)
-            input.value = command.value;
-        else
-            input.textContent = command.value;
-        input.dispatchEvent(new InputEvent("input", {
-            bubbles: true,
-            inputType: "insertText",
-            data: command.value,
-        }));
-        if (command.operation === "submit")
-            safeElement('button[data-testid="send-button"], button[aria-label*="Send"]').click();
+      if (command.type !== "PROFLOW_PAGE_COMMAND" || command.contentInstanceId !== contentInstanceId || command.expectedUrl !== location.href)
+        throw new Error("STALE_CONTENT_SESSION");
+      if (command.operation === "observe") return observation();
+      if (command.operation === "verify")
+        return {
+          ...observation(),
+          verified: hasFingerprint(command.fingerprint)
+        };
+      if (pageState().pageState === "BLOCKED")
+        throw new Error("PAGE_PERMISSION_REQUIRES_HUMAN");
+      if (command.operation === "click") {
+        safeElement(command.selector).click();
         return observation();
-    })().then((value) => sendResponse({ ok: true, value }), (error) => sendResponse({
+      }
+      const input = safeElement(command.selector ?? "#prompt-textarea");
+      if (command.value === void 0 || command.value.length > 4096)
+        throw new Error("INPUT_BUDGET_EXCEEDED");
+      input.focus();
+      if (input instanceof HTMLTextAreaElement || input instanceof HTMLInputElement)
+        input.value = command.value;
+      else input.textContent = command.value;
+      input.dispatchEvent(
+        new InputEvent("input", {
+          bubbles: true,
+          inputType: "insertText",
+          data: command.value
+        })
+      );
+      if (command.operation === "submit")
+        safeElement(
+          'button[data-testid="send-button"], button[aria-label*="Send"]'
+        ).click();
+      return observation();
+    })().then(
+      (value) => sendResponse({ ok: true, value }),
+      (error) => sendResponse({
         ok: false,
-        error: error instanceof Error ? error.message : "PAGE_COMMAND_FAILED",
-    }));
+        error: error instanceof Error ? error.message : "PAGE_COMMAND_FAILED"
+      })
+    );
     return true;
-});
-const publish = () => chrome.runtime.sendMessage({
+  });
+  var publish = () => chrome.runtime.sendMessage({
     type: "PROFLOW_CONTENT_OBSERVATION",
-    observation: observation(),
-});
-void publish();
-let publishTimer;
-const observer = new MutationObserver(() => {
-    if (publishTimer !== undefined)
-        clearTimeout(publishTimer);
+    observation: observation()
+  });
+  void publish();
+  var publishTimer;
+  var observer = new MutationObserver(() => {
+    if (publishTimer !== void 0) clearTimeout(publishTimer);
     publishTimer = setTimeout(() => {
-        publishTimer = undefined;
-        void publish();
+      publishTimer = void 0;
+      void publish();
     }, 100);
-});
-observer.observe(document.documentElement, {
+  });
+  observer.observe(document.documentElement, {
     subtree: true,
     childList: true,
-    attributes: true,
-});
+    attributes: true
+  });
+})();

package/dist/src/bridge.js

@@ -152,9 +152,13 @@ export async function createBrowserRealityBridgeServer(options) {
         const origin = request.headers.origin;
         if (!authorization?.startsWith("Bearer ") ||
             !safeEqual(authorization.slice(7), options.token) ||
-            origin !== expectedOrigin)
+            (origin !== undefined && origin !== expectedOrigin))
             throw new BrowserRealityBridgeError("BRIDGE_AUTH_INVALID", "bridge authentication failed");
     };
+    const requireExtensionOrigin = (request) => {
+        if (request.headers.origin !== expectedOrigin)
+            throw new BrowserRealityBridgeError("BRIDGE_AUTH_INVALID", "bridge extension origin is required");
+    };
     const server = createServer(async (request, response) => {
         try {
             const url = new URL(request.url ?? "/", "http://127.0.0.1");
@@ -246,6 +250,7 @@ export async function createBrowserRealityBridgeServer(options) {
                 return;
             }
             if (request.method === "POST" && url.pathname === "/v1/session/hello") {
+                requireExtensionOrigin(request);
                 const body = await readJson(request);
                 if (!isRecord(body) ||
                     stringField(body, "extensionId") !== options.extensionId)

package/dist/src/pairing.js

@@ -34,9 +34,9 @@ function text(value) {
 }
 function extensionIdentity(request) {
     const origin = request.headers.origin;
-    const match = typeof origin === "string"
-        ? /^chrome-extension:\/\/([a-z]{32})$/.exec(origin)
-        : null;
+    if (origin === undefined)
+        return undefined;
+    const match = /^chrome-extension:\/\/([a-z]{32})$/.exec(origin);
     if (!match)
         throw new Error("PAIRING_AUTH_INVALID");
     return match[1];
@@ -47,7 +47,6 @@ function authenticate(request, token) {
         !safeEqual(authorization.slice(7), token)) {
         throw new Error("PAIRING_AUTH_INVALID");
     }
-    return extensionIdentity(request);
 }
 export async function createBrowserExtensionPairingServer(options) {
     if (options.token.length < 32) {
@@ -75,9 +74,13 @@ export async function createBrowserExtensionPairingServer(options) {
     const server = createServer(async (request, response) => {
         try {
             const originId = extensionIdentity(request);
-            response.setHeader("access-control-allow-origin", `chrome-extension://${originId}`);
-            response.setHeader("vary", "origin");
+            if (originId) {
+                response.setHeader("access-control-allow-origin", `chrome-extension://${originId}`);
+                response.setHeader("vary", "origin");
+            }
             if (request.method === "OPTIONS") {
+                if (!originId)
+                    throw new Error("PAIRING_AUTH_INVALID");
                 response.setHeader("access-control-allow-headers", "authorization, content-type");
                 response.setHeader("access-control-allow-methods", "GET, POST, OPTIONS");
                 response.writeHead(204);
@@ -90,7 +93,7 @@ export async function createBrowserExtensionPairingServer(options) {
                 const body = await readJson(request);
                 const extensionId = text(body.extensionId);
                 const extensionInstanceId = text(body.extensionInstanceId);
-                if (extensionId !== originId)
+                if (!originId || extensionId !== originId)
                     throw new Error("PAIRING_AUTH_INVALID");
                 if (identity && identity.extensionId !== extensionId) {
                     throw new Error("PAIRING_AUTH_INVALID");
@@ -99,7 +102,8 @@ export async function createBrowserExtensionPairingServer(options) {
                 send(response, 200, { accepted: true });
                 return;
             }
-            if (!identity || originId !== identity.extensionId) {
+            if (!identity ||
+                (originId !== undefined && originId !== identity.extensionId)) {
                 throw new Error("PAIRING_AUTH_INVALID");
             }
             if (url.searchParams.get("extensionInstanceId") !==

package/manifest.json

@@ -1,7 +1,7 @@
 {
 	"manifest_version": 3,
 	"name": "ProFlow Execution Browser",
-	"version": "0.1.35",
+	"version": "0.1.37",
 	"permissions": [
 		"tabs",
 		"storage"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-execution-browser-extension",
-  "version": "0.1.35",
+  "version": "0.1.37",
   "description": "Execution-owned MV3 Browser executor, evidence provider and browser application surface.",
   "type": "module",
   "publishConfig": {
@@ -27,8 +27,8 @@
     "SETUP.md"
   ],
   "dependencies": {
-    "@tomflow/proflow-module-contract": "^0.1.13",
-    "@tomflow/proflow-execution-contracts": "^0.1.10"
+    "@tomflow/proflow-execution-contracts": "^0.1.10",
+    "@tomflow/proflow-module-contract": "^0.1.13"
   },
   "devDependencies": {
     "@tomflow/proflow-deployment-conformance": "^0.1.13",

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "execution-browser-extension",
 	"packageName": "@tomflow/proflow-execution-browser-extension",
-	"moduleVersion": "0.1.35",
+	"moduleVersion": "0.1.37",
 	"kind": "browser-extension",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",