@wenathlan/extension 1.1.36 → 1.1.37

package/extension/dist/sidepanel.js

@@ -1,7 +1,7 @@
 // policy.ts
-var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab"]);
+var sensitiveactions = /* @__PURE__ */ new Set(["click", "type", "navigate", "select", "presskey", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "reload", "back", "forward", "writestorage", "setattribute", "removeattribute", "evaluate", "tabcreate", "tabactivate", "tabclose", "tabreload", "windowcreate", "windowclose", "windowresize", "downloadfile", "clickpoint", "shiftclick", "dismissdialog", "enterframe", "typetime", "appendtext", "setvalue", "typeedit", "keyhold", "keyrelease", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "openlink", "openprivate", "reloadcache", "stopnav", "followlink", "spanav", "rewritequery", "setfragment", "navlist", "navprofile", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "pausenav", "navrate", "openclipboard", "batchopen", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "restorelayout", "reopenrun", "badgetab", "fillform", "filllabel", "fillplaceholder", "submitform", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcard", "fillcode", "consentpassword"]);
 var interactionactions = /* @__PURE__ */ new Set(["focus", "scroll", "hover", "clickdeep", "rightclick", "doubleclick", "scrollpage", "scrollby", "scrollend", "scrolltop", "fullscreen", "zoomset", "movepointer", "clicktext", "clickaria", "clickname", "expanddetails", "pierceshadow", "retryaction"]);
-var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta"]);
+var readactions = /* @__PURE__ */ new Set(["observe", "inspect", "extract", "wait", "waitfor", "waittext", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "readlinks", "readimages", "readmeta", "readforms", "readstorage", "highlight", "tablist", "windowlist", "tabsnapshot", "mapclicks", "verifyvisible", "verifyenabled", "resolvexpath", "a11ytree", "readvisible", "readertree", "detectlists", "detecttables", "readjson", "watchmutate", "waitquiet", "watchbanner", "detectinfinitescroll", "detectvirtual", "detectlazy", "readscrollpos", "readlang", "readoutline", "countpages", "listshadow", "listframes", "classifypage", "fingerprintsection", "diffsnapshots", "readselection", "watchfocus", "detectsticky", "detectscrolllock", "readopengraph", "detectlanguage", "deriveselector", "waitload", "waiturl", "spawait", "detecthttp", "readredirects", "readfinalurl", "trailaudit", "navintent", "checksafe", "querytabs", "watchtab", "findclones", "searchtabs", "listaudio", "snapshotsession", "savelayout", "attachmeta", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "readerrors", "skiphoneypot", "detectlogin", "detecttemplate", "handoffcaptcha"]);
 var allowedactions = /* @__PURE__ */ new Set([...sensitiveactions, ...interactionactions, ...readactions]);
 
 // extension/tabscommand.ts
@@ -17,6 +17,17 @@ function switcherlist(tabs, recency, filter) {
   });
 }
 
+// extension/pageforms.ts
+function cardmask(value) {
+  const trimmed = value.trim();
+  if (/^\d[\d\s-]{11,18}$/.test(trimmed)) {
+    const compact = trimmed.replace(/[\s-]/g, "");
+    const last = compact.slice(-4);
+    return `${"\u2022".repeat(Math.max(0, compact.length - 4))}${last}`;
+  }
+  return "\u2022".repeat(trimmed.length);
+}
+
 // extension/sidepanel.ts
 var objective = document.querySelector("#objective");
 var localbutton = document.querySelector("#localplan");
@@ -36,6 +47,7 @@ var selectorsroot = document.querySelector("#selectors");
 var trailroot = document.querySelector("#trail");
 var navigationroot = document.querySelector("#navigation");
 var tabswindowsroot = document.querySelector("#tabswindows");
+var formsroot = document.querySelector("#forms");
 var statusnode = document.querySelector("#status");
 var progressnode = document.querySelector("#planprogress");
 var capabilitiestext = document.querySelector("#capabilitiestext");
@@ -68,7 +80,7 @@ function button(label, action, disabled = false) {
   element.addEventListener("click", () => action().catch((error) => status(error instanceof Error ? error.message : String(error), true)));
   return element;
 }
-var previewkinds = ["focus", "inspect", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "clickpoint", "clicktext", "clickaria", "clickname", "resolvexpath", "deriveselector", "fingerprintsection"];
+var previewkinds = ["focus", "inspect", "click", "type", "scroll", "select", "hover", "clickdeep", "rightclick", "doubleclick", "drag", "drop", "upload", "clear", "check", "uncheck", "toggle", "submit", "readattribute", "readstyle", "readgeometry", "readvalue", "readtext", "readhtml", "countelements", "readtable", "highlight", "setattribute", "removeattribute", "waitfor", "shiftclick", "typetime", "appendtext", "setvalue", "typeedit", "submitsearch", "selectmulti", "chooseradio", "setslider", "setdate", "setcolor", "expanddetails", "verifyvisible", "verifyenabled", "pierceshadow", "clickpoint", "clicktext", "clickaria", "clickname", "resolvexpath", "deriveselector", "fingerprintsection", "submitform", "retryform", "selectchain", "picktypeahead", "pickdate", "attachfile", "fillcode", "consentpassword"];
 var topictags = [
   { topic: "pointer", kinds: ["movepointer", "clickpoint", "shiftclick", "clicktext", "clickaria", "clickname", "pierceshadow"] },
   { topic: "typing", kinds: ["typetime", "appendtext", "setvalue", "typeedit", "submitsearch"] },
@@ -82,7 +94,8 @@ var topictags = [
   { topic: "detection", kinds: ["detectlists", "detecttables", "detectinfinitescroll", "detectvirtual", "detectlazy", "detectsticky", "detectscrolllock", "countpages", "classifypage", "fingerprintsection"] },
   { topic: "watch", kinds: ["watchmutate", "watchbanner", "watchfocus", "waitquiet", "readjson", "diffsnapshots", "deriveselector"] },
   { topic: "navigation", kinds: ["openlink", "openprivate", "reloadcache", "stopnav", "waitload", "waiturl", "followlink", "spanav", "spawait", "rewritequery", "setfragment", "navlist", "navprofile", "detecthttp", "readredirects", "readfinalurl", "handleauth", "printpdf", "prefetch", "preconnect", "deeplink", "reopentab", "trailaudit", "pausenav", "navintent", "navrate", "openclipboard", "checksafe", "batchopen"] },
-  { topic: "tabs", kinds: ["querytabs", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "watchtab", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "savelayout", "restorelayout", "findclones", "searchtabs", "badgetab", "attachmeta", "listaudio", "reopenrun", "snapshotsession"] }
+  { topic: "tabs", kinds: ["querytabs", "duplicatetab", "closepattern", "pintab", "mutetab", "movetab", "movetabwindow", "grouptabs", "colorgroup", "collapsegroup", "discardtab", "reloadtabs", "zoomin", "zoomout", "watchtab", "switchtab", "maximizewindow", "minimizewindow", "restorewindow", "focuswindow", "scratchwindow", "incognitowindow", "restoretab", "savelayout", "restorelayout", "findclones", "searchtabs", "badgetab", "attachmeta", "listaudio", "reopenrun", "snapshotsession"] },
+  { topic: "forms", kinds: ["fillform", "filllabel", "fillplaceholder", "detectfields", "generatevalues", "saveprofiles", "asksubmit", "submitform", "readerrors", "retryform", "runwizard", "selectchain", "picktypeahead", "pickdate", "attachfile", "handoffcaptcha", "fillcard", "fillcode", "consentpassword", "skiphoneypot", "detectlogin", "detecttemplate"] }
 ];
 function steptopic(kind) {
   return topictags.find((tag) => tag.kinds.includes(kind))?.topic;
@@ -785,6 +798,173 @@ function rendertabswindows(context) {
   controlcard.append(" ", controlbutton);
   tabswindowsroot.append(controlcard);
 }
+function renderforms(context) {
+  if (!formsroot) return;
+  formsroot.replaceChildren();
+  const outcomes = context.outcomes ?? [];
+  const active = context.session && !context.session.stoppedat && context.session.expiresat > Date.now();
+  const opencaptcha = (context.captchas ?? []).find((handoff) => !handoff.resolved);
+  if (opencaptcha) {
+    const card = document.createElement("div");
+    card.className = "bannercard";
+    card.textContent = `Captcha handoff open on ${opencaptcha.origin}: control is yours and the plan waits until you resolve it.`;
+    card.append(" ", button("Captcha resolved", async () => {
+      await request({ kind: "resolvecaptcha" });
+      status("Captcha handoff resolved; the plan continues.");
+      await refresh();
+    }));
+    formsroot.append(card);
+  }
+  const detections = context.detections ?? [];
+  if (detections.length > 0) {
+    const badges = document.createElement("p");
+    badges.textContent = `template badges: ${detections.slice(0, 6).map((record) => `${record.kind} on ${record.origin}${record.markers.length > 0 ? ` (${record.markers.join(", ")})` : ""}`).join(" \xB7 ")}`;
+    formsroot.append(badges);
+  }
+  const mapoutcome = [...outcomes].reverse().find((outcome) => outcome.details?.report !== void 0 && outcome.details?.count !== void 0);
+  const skippedselectors = new Set(outcomes.flatMap((outcome) => Array.isArray(outcome.details?.skipped) ? outcome.details?.skipped : []).map((trap) => trap.selector));
+  if (mapoutcome) {
+    const report = mapoutcome.details?.report;
+    const heading = document.createElement("p");
+    heading.textContent = `form map${report.form ? ` of ${report.form}` : ""}: ${report.fields.length} detected field${report.fields.length === 1 ? "" : "s"} with their kinds${skippedselectors.size > 0 ? `; ${skippedselectors.size} honeypot field${skippedselectors.size === 1 ? "" : "s"} highlighted as skipped` : ""}`;
+    formsroot.append(heading);
+    const list = document.createElement("ul");
+    for (const field of report.fields.slice(0, 10)) {
+      const item = document.createElement("li");
+      const skipped = skippedselectors.has(field.selector);
+      item.textContent = `${field.label || field.selector} \xB7 ${field.kind}${field.matched ? "" : " \xB7 unmatched"}${skipped ? " \xB7 honeypot, skipped" : ""}`;
+      list.append(item);
+    }
+    formsroot.append(list);
+  }
+  const valuesoutcome = [...outcomes].reverse().find((outcome) => Array.isArray(outcome.details?.values) && outcome.details?.locale !== void 0);
+  if (valuesoutcome) {
+    const values = valuesoutcome.details?.values;
+    const locale = typeof valuesoutcome.details?.locale === "string" ? valuesoutcome.details.locale : "en";
+    const seed = typeof valuesoutcome.details?.seed === "number" ? valuesoutcome.details.seed : 1;
+    const heading = document.createElement("p");
+    heading.textContent = `generated values (locale ${locale}, seed ${seed}) with a regenerate button per field:`;
+    formsroot.append(heading);
+    const list = document.createElement("ul");
+    for (const entry of values.slice(0, 10)) {
+      const item = document.createElement("li");
+      item.textContent = `${entry.label} \xB7 ${entry.kind} \xB7 ${entry.value}`;
+      item.append(" ", button("Regenerate", async () => {
+        const regenerated = await request({ kind: "regeneratevalue", field: entry.kind, locale, seed: seed + 1 });
+        status(`Regenerated ${entry.label}: ${regenerated.value}.`);
+      }));
+      list.append(item);
+    }
+    formsroot.append(list);
+  }
+  const cardoutcome = [...outcomes].reverse().find((outcome) => Array.isArray(outcome.details?.segments));
+  if (cardoutcome) {
+    const segments = cardoutcome.details?.segments;
+    const cardline = document.createElement("p");
+    cardline.textContent = `card fill segments (masked): ${segments.map((segment) => `${segment.label} ${cardmask(segment.masked)}`).join(" \xB7 ")}`;
+    formsroot.append(cardline);
+  }
+  const profiles = context.profiles ?? [];
+  if (profiles.length > 0) {
+    const heading = document.createElement("p");
+    heading.textContent = "saved form profiles with origin grants:";
+    formsroot.append(heading);
+    const list = document.createElement("ul");
+    for (const profile of profiles.slice(0, 6)) {
+      const item = document.createElement("li");
+      item.textContent = `${profile.name} \xB7 ${profile.fields.length} field${profile.fields.length === 1 ? "" : "s"} \xB7 grants ${profile.grants.join(", ")} \xB7 saved ${new Date(profile.savedat).toLocaleString()}`;
+      item.append(" ", button("Apply", async () => {
+        const applied = await request({ kind: "applyprofile", name: profile.name });
+        pickhint(`profile hint: ${profile.name} with ${applied.profile.fields.length} reviewed field entries`);
+      }), " ", button("Remove", async () => {
+        await request({ kind: "removeprofile", name: profile.name });
+        status(`Form profile ${profile.name} removed.`);
+        await refresh();
+      }));
+      list.append(item);
+    }
+    formsroot.append(list);
+  }
+  const pending = (context.tickets ?? []).filter((ticket) => ticket.approved === void 0);
+  for (const ticket of pending) {
+    const card = document.createElement("div");
+    card.className = "bannercard";
+    const title = document.createElement("p");
+    title.textContent = `asksubmit for form ${ticket.form || "the reviewed form"} \xB7 values hash ${ticket.valueshash}`;
+    card.append(title);
+    const askoutcome = [...outcomes].reverse().find((outcome) => Array.isArray(outcome.details?.values) && outcome.details?.ticket !== void 0);
+    const values = askoutcome?.details?.values;
+    if (values) {
+      const diff = document.createElement("ul");
+      for (const entry of values.slice(0, 10)) {
+        const item = document.createElement("li");
+        item.textContent = `${entry.label}: ${entry.value}`;
+        diff.append(item);
+      }
+      card.append(diff);
+    } else {
+      const note = document.createElement("p");
+      note.textContent = "The full values diff appears here once the asksubmit step reads the form.";
+      card.append(note);
+    }
+    card.append(button("Approve submission", async () => {
+      await request({ kind: "approvesubmit", id: ticket.id, approved: true });
+      status("Submission approved; the reviewed submitform step may run.");
+      await refresh();
+    }), " ", button("Decline", async () => {
+      await request({ kind: "approvesubmit", id: ticket.id, approved: false });
+      status("Submission declined.");
+      await refresh();
+    }));
+    formsroot.append(card);
+  }
+  const wizards = context.wizards?.wizards ?? [];
+  if (wizards.length > 0) {
+    const wizard = wizards[0];
+    const heading = document.createElement("p");
+    const indicators = Array.from({ length: wizard.steps }, (_, index) => `${index < wizard.index ? wizard.completed[index] ? "\u2713" : "\xB7" : "\u25CB"}`).join(" ");
+    heading.textContent = `wizard progress: step ${Math.min(wizard.index + 1, wizard.steps)} of ${wizard.steps} ${indicators}`;
+    formsroot.append(heading);
+  }
+  const picks = context.wizards?.picks ?? [];
+  if (picks.length > 0) {
+    const pickline = document.createElement("p");
+    pickline.textContent = `typeahead picks: ${picks.slice(0, 6).map((pick) => `"${pick.pick}" for "${pick.query}"`).join(" \xB7 ")}`;
+    formsroot.append(pickline);
+  }
+  const reports = context.errorreports ?? [];
+  if (reports.length > 0) {
+    const heading = document.createElement("p");
+    heading.textContent = "inline error reports with field refs for correction loops:";
+    formsroot.append(heading);
+    const list = document.createElement("ul");
+    for (const report of reports.slice(0, 3)) {
+      const item = document.createElement("li");
+      item.textContent = `${report.form || "the reviewed form"}: ${report.errors.map((error) => `${error.field} \u2014 ${error.message}`).join("; ") || "no message"}`;
+      list.append(item);
+    }
+    formsroot.append(list);
+  }
+  const codecard = document.createElement("div");
+  codecard.className = "bannercard";
+  const codetitle = document.createElement("p");
+  codetitle.textContent = active ? "one time code entry (stored behind the consent gate of the active session):" : "one time code entry needs an active session first.";
+  codecard.append(codetitle);
+  if (active) {
+    const codeinput = document.createElement("input");
+    codeinput.type = "text";
+    codeinput.inputMode = "numeric";
+    codeinput.placeholder = context.codeentry ? "a reviewed code is stored" : "one time code";
+    codeinput.setAttribute("aria-label", "one time code");
+    const storebutton = button("Store reviewed code", async () => {
+      await request({ kind: "storecode", code: codeinput.value });
+      status("The reviewed one time code is stored behind the consent gate.");
+      await refresh();
+    });
+    codecard.append(codeinput, " ", storebutton);
+  }
+  formsroot.append(codecard);
+}
 function rendercapabilities(report) {
   if (!capabilitiestext) return;
   if (!report) {
@@ -831,6 +1011,7 @@ async function refresh() {
   rendertrail(context.trail?.trail ?? []);
   rendernavigation(context);
   rendertabswindows(context);
+  renderforms(context);
   renderaudit(context.audit);
   rendercapabilities(context.capabilities);
   if (context.session?.pausedat) status("Session paused. Reviewed actions are blocked until resume.");