@wenathlan/extension 1.1.60 → 1.1.61

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,5 +1,5 @@
1
1
  <!doctype html>
2
2
  <html lang="en">
3
3
  <head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Devthink</title><link rel="stylesheet" href="style.css"></head>
4
- <body><main><header><p class="eyebrow">DEVTHINK 1.1.60</p><h1>Browser bridge</h1><p>Consent is required before page access or action.</p></header><label for="endpoint">Optional agent endpoint</label><input id="endpoint" type="url" inputmode="url" placeholder="https://agent.example/proposal" autocomplete="off"><button id="connect">Approve endpoint origin</button><div class="actions"><button id="session">Start active tab session</button><button id="pause" class="secondary">Pause session</button><button id="openpanel" class="secondary">Review plans</button><button id="stop" class="danger">Stop</button></div><p id="capabilities" role="status" class="muted">Optional capabilities: loading.</p><p id="livelogic" role="status" class="muted">Held keys: none · Open dialogs answered: none.</p><p id="navstate" role="status" class="muted">Navigation: unknown.</p><p id="windowlayout" role="status" class="muted">Window layout: unknown.</p><p id="captchastate" role="status" class="muted">Captcha handoff: none.</p><p id="datasetstate" role="status" class="muted">Datasets: none collected yet.</p><p id="downloadstate" role="status" class="muted">Downloads: none.</p><p id="clipboardstate" role="status" class="muted">Clipboard consent: none waiting.</p><p id="capturestate" role="status" class="muted">Captures: none.</p><p id="mediastate" role="status" class="muted">Media: none.</p><p id="callstate" role="status" class="muted">Outbound calls: none.</p><p id="netstate" role="status" class="muted">Observed requests: none.</p><p id="rulestate" role="status" class="muted">Traffic rules: none active.</p><p id="debugstate" role="status" class="muted">Timeline: no errors captured.</p><p id="emulationstate" role="status" class="muted">Emulation: no active layer.</p><p id="sessionstate" role="status" class="muted">Sessions: none saved yet.</p><p id="workflowstate" role="status" class="muted">Workflows: none running.</p><p id="triggerstate" role="status" class="muted">Triggers: none armed.</p><p id="mcpstate" role="status" class="muted">Mcp server: stopped.</p><p id="modelstate" role="status" class="muted">Models: none connected.</p><p id="swarmstate" role="status" class="muted">Swarm: no agents.</p><p id="environmentstate" role="status" class="muted">Environments: no run state.</p><div id="workflowcontrols" class="actions"></div><div id="windowcontrols" class="actions"></div><div id="environmentcontrols" class="actions"></div><p id="status" role="status">Loading session state.</p></main><script type="module" src="popup.js"></script></body>
4
+ <body><main><header><p class="eyebrow">DEVTHINK 1.1.61</p><h1>Browser bridge</h1><p>Consent is required before page access or action.</p></header><label for="endpoint">Optional agent endpoint</label><input id="endpoint" type="url" inputmode="url" placeholder="https://agent.example/proposal" autocomplete="off"><button id="connect">Approve endpoint origin</button><div class="actions"><button id="session">Start active tab session</button><button id="pause" class="secondary">Pause session</button><button id="openpanel" class="secondary">Review plans</button><button id="stop" class="danger">Stop</button></div><p id="capabilities" role="status" class="muted">Optional capabilities: loading.</p><p id="livelogic" role="status" class="muted">Held keys: none · Open dialogs answered: none.</p><p id="navstate" role="status" class="muted">Navigation: unknown.</p><p id="windowlayout" role="status" class="muted">Window layout: unknown.</p><p id="captchastate" role="status" class="muted">Captcha handoff: none.</p><p id="datasetstate" role="status" class="muted">Datasets: none collected yet.</p><p id="downloadstate" role="status" class="muted">Downloads: none.</p><p id="clipboardstate" role="status" class="muted">Clipboard consent: none waiting.</p><p id="capturestate" role="status" class="muted">Captures: none.</p><p id="mediastate" role="status" class="muted">Media: none.</p><p id="callstate" role="status" class="muted">Outbound calls: none.</p><p id="netstate" role="status" class="muted">Observed requests: none.</p><p id="rulestate" role="status" class="muted">Traffic rules: none active.</p><p id="debugstate" role="status" class="muted">Timeline: no errors captured.</p><p id="emulationstate" role="status" class="muted">Emulation: no active layer.</p><p id="sessionstate" role="status" class="muted">Sessions: none saved yet.</p><p id="workflowstate" role="status" class="muted">Workflows: none running.</p><p id="triggerstate" role="status" class="muted">Triggers: none armed.</p><p id="mcpstate" role="status" class="muted">Mcp server: stopped.</p><p id="modelstate" role="status" class="muted">Models: none connected.</p><p id="swarmstate" role="status" class="muted">Swarm: no agents.</p><p id="environmentstate" role="status" class="muted">Environments: no run state.</p><p id="securitystate" role="status" class="muted">Security: denydefault posture.</p><div id="workflowcontrols" class="actions"></div><div id="windowcontrols" class="actions"></div><div id="environmentcontrols" class="actions"></div><div id="securitycontrols" class="actions"></div><p id="status" role="status">Loading session state.</p></main><script type="module" src="popup.js"></script></body>
5
5
  </html>
@@ -40,6 +40,8 @@ var mcpstatenode = document.querySelector("#mcpstate");
40
40
  var modelstatenode = document.querySelector("#modelstate");
41
41
  var swarmstatenode = document.querySelector("#swarmstate");
42
42
  var environmentstatenode = document.querySelector("#environmentstate");
43
+ var securitystatenode = document.querySelector("#securitystate");
44
+ var securitycontrols = document.querySelector("#securitycontrols");
43
45
  var environmentcontrols = document.querySelector("#environmentcontrols");
44
46
  var workflowcontrols = document.querySelector("#workflowcontrols");
45
47
  var windowcontrols = document.querySelector("#windowcontrols");
@@ -305,6 +307,42 @@ function renderenvironmentstate(view) {
305
307
  }
306
308
  }
307
309
  }
310
+ function rendersecuritystate(view, activeorigin) {
311
+ if (!securitystatenode) return;
312
+ if (!view) {
313
+ securitystatenode.textContent = "Security: state unknown.";
314
+ return;
315
+ }
316
+ const origin = activeorigin ?? view.sessionorigin ?? "the active tab";
317
+ const granted = view.allowlist.some((entry) => entry.origin === origin);
318
+ const profile = view.profiles.find((candidate) => candidate.origin === origin);
319
+ const windowstate = view.windows.find((candidate) => candidate.origin === origin && candidate.state === "active");
320
+ const verified = view.chain.filter((chain) => chain.valid).length;
321
+ securitystatenode.textContent = `Security: ${origin} ${granted ? "allowlisted" : "ungranted (denydefault)"}${profile !== void 0 ? ` \xB7 profile ${profile.grants.length} granted / ${profile.denials.length} denied` : " \xB7 no origin profile"}${windowstate !== void 0 ? ` \xB7 consent window until ${new Date(windowstate.expiresat).toLocaleTimeString()}` : " \xB7 no active consent window"} \xB7 ${verified}/${view.chain.length} log chain${view.chain.length === 1 ? "" : "s"} verified.`;
322
+ if (granted) delete securitystatenode.dataset.state;
323
+ else securitystatenode.dataset.state = "error";
324
+ if (securitycontrols) {
325
+ securitycontrols.replaceChildren();
326
+ if (!granted) {
327
+ const grant = document.createElement("button");
328
+ grant.className = "secondary";
329
+ grant.textContent = `Grant ${origin} allowlist entry`;
330
+ grant.addEventListener("click", () => {
331
+ void request({ kind: "security", allowlist: { add: { origin } } }).then(() => restore()).catch((error) => status(error instanceof Error ? error.message : String(error), true));
332
+ });
333
+ securitycontrols.append(grant);
334
+ }
335
+ if (view.chain.length > 0) {
336
+ const seal = view.chain.find((chain) => chain.sealhash !== void 0);
337
+ if (seal?.sealhash !== void 0) {
338
+ const sealinfo = document.createElement("span");
339
+ sealinfo.className = "muted";
340
+ sealinfo.textContent = `Seal ${seal.sealhash.slice(0, 10)}\u2026`;
341
+ securitycontrols.append(sealinfo);
342
+ }
343
+ }
344
+ }
345
+ }
308
346
  function renderswarmstate(state) {
309
347
  if (!swarmstatenode) return;
310
348
  if (!state) {
@@ -361,6 +399,7 @@ async function restore() {
361
399
  rendermodelstate(context.llm);
362
400
  renderswarmstate(context.swarm);
363
401
  renderenvironmentstate(context.environments);
402
+ rendersecuritystate(context.security, context.session?.origin);
364
403
  renderrulestate(context.activerules, (context.traffic?.blocks ?? []).filter((rule) => rule.revertedat === void 0).reduce((total, rule) => total + rule.hits, 0), (context.traffic?.mocks ?? []).filter((spec) => spec.revertedat === void 0).reduce((total, spec) => total + spec.hits, 0));
365
404
  const active = context.session && !context.session.stoppedat && context.session.expiresat > Date.now();
366
405
  if (pausebutton) {