@xopcai/xopc 0.0.273 → 0.0.274

package/dist/browser-ext/dist/assets/{auth-DkwOUI6_.js → auth-O8RiOF3l.js}

@@ -5655,7 +5655,34 @@ class RealtimeClient {
   }
 }
 
-_enum(["mobile", "browser"]);
+const DEVICE_PAIRING_VERSION = 3;
+const BROWSER_PAIRING_INVITATION_VERSION = 1;
+const BROWSER_PAIRING_INVITATION_PREFIX = `XOPC-BROWSER-INVITE-V${BROWSER_PAIRING_INVITATION_VERSION}:`;
+const devicePairingTargetKindSchema = _enum(["mobile", "browser"]);
+const devicePairingRouteSchema = strictObject({
+  id: string().trim().min(1).max(80),
+  kind: _enum(["xopc-secure-link", "tailscale", "custom-https", "local-browser"]),
+  url: string().url()
+}).superRefine((route, context) => {
+  const url = new URL(route.url);
+  const isOrigin = !url.username && !url.password && url.pathname === "/" && !url.search && !url.hash;
+  const valid = route.kind === "local-browser" ? url.protocol === "http:" && url.hostname === "127.0.0.1" && isOrigin : url.protocol === "https:" && isOrigin;
+  if (!valid) context.addIssue({ code: "custom", path: ["url"], message: "Pairing route must be a secure origin" });
+});
+const devicePairingInvitationPayloadSchema = strictObject({
+  version: literal(DEVICE_PAIRING_VERSION),
+  targetKind: devicePairingTargetKindSchema,
+  pairingToken: string().regex(/^xopc_pair_[0-9a-f-]{36}_[A-Za-z0-9_-]{43}$/i),
+  gatewayId: string().uuid(),
+  gatewayName: string().trim().min(1).max(120),
+  gatewayPublicKey: string().regex(/^[A-Za-z0-9_-]{43}$/),
+  routes: array(devicePairingRouteSchema).min(1).max(8),
+  expiresAt: number().int().positive()
+}).superRefine((payload, context) => {
+  if (payload.targetKind === "mobile" && payload.routes.some((route) => route.kind === "local-browser")) {
+    context.addIssue({ code: "custom", path: ["routes"], message: "Mobile invitations require remote routes" });
+  }
+});
 const devicePairingKeySchema = strictObject({
   kty: literal("EC"),
   crv: literal("P-256"),
@@ -5691,6 +5718,18 @@ devicePairingProofSchema.extend({
   idempotencyKey: string().uuid(),
   initialRefreshToken: initialDeviceRefreshTokenSchema
 });
+function isRetryableDevicePairingHttpStatus(status) {
+  return status >= 500 || [404, 408, 425, 429].includes(status);
+}
+function readBrowserPairingInvitation(value) {
+  const invitation = value.trim();
+  if (!invitation.startsWith(BROWSER_PAIRING_INVITATION_PREFIX)) {
+    throw new Error("Browser pairing invitation is invalid");
+  }
+  const encodedPayload = invitation.slice(BROWSER_PAIRING_INVITATION_PREFIX.length);
+  if (!/^[A-Za-z0-9_-]+$/.test(encodedPayload)) throw new Error("Browser pairing invitation is invalid");
+  return encodedPayload;
+}
 function canonical(value) {
   if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
   if (value !== null && typeof value === "object") {
@@ -5977,6 +6016,7 @@ async function clearBrowserOutboxes() {
 }
 
 const PROFILE_KEY = "xopc.browser.profile";
+const PAIRING_JOURNAL_KEY = "xopc.browser.pairing";
 const AUTO_CONNECT_KEY = "xopc.browser.auto-connect";
 const KEY_DATABASE = "xopc-browser-identity";
 const KEY_STORE = "identity";
@@ -6014,13 +6054,13 @@ async function discoverLocalGateway(options) {
         nonce
       }
     );
-    if (response.ok !== true || typeof response.gatewayUrl !== "string" || typeof response.pairingLink !== "string" || typeof response.expiresAt !== "number") {
+    if (response.ok !== true || typeof response.gatewayUrl !== "string" || typeof response.invitation !== "string" || typeof response.expiresAt !== "number") {
       if (options?.force) throw new Error(response.error || "The local xopc enrollment host returned an invalid response");
       return void 0;
     }
     return {
       gatewayUrl: response.gatewayUrl,
-      pairingLink: response.pairingLink,
+      invitation: response.invitation,
       expiresAt: response.expiresAt
     };
   } catch (cause) {
@@ -6049,25 +6089,12 @@ function randomNonce(bytes = 24) {
 function createRefreshToken() {
   return `xopc_rt_${crypto.randomUUID()}_${randomNonce(32)}`;
 }
-function parseBrowserPairingLink(value) {
-  const url = new URL(value.trim());
-  if (url.protocol !== "https:" || url.hostname !== "link.xopc.ai" || url.pathname !== "/connect") {
-    throw new Error("Pairing link is not from xopc");
-  }
-  const encoded = new URLSearchParams(url.hash.slice(1)).get("p");
-  if (!encoded) throw new Error("Pairing link is invalid");
-  const payload = decodeJson(encoded);
-  if (payload.version !== 3 || payload.targetKind !== "browser" || !payload.gatewayId || !payload.pairingToken || !payload.gatewayPublicKey || !Array.isArray(payload.routes)) {
-    throw new Error("Pairing link version is not supported");
-  }
-  if (payload.expiresAt <= Date.now()) throw new Error("Pairing link has expired");
-  if (!payload.routes.length) throw new Error("Pairing link has no Gateway route");
-  for (const route of payload.routes) {
-    const routeUrl = new URL(route.url);
-    if (!route.id || !["http:", "https:"].includes(routeUrl.protocol)) {
-      throw new Error("Pairing link has an invalid Gateway route");
-    }
-  }
+function parseBrowserPairingInvitation(value, allowExpired = false) {
+  const encoded = readBrowserPairingInvitation(value);
+  const parsed = devicePairingInvitationPayloadSchema.safeParse(decodeJson(encoded));
+  if (!parsed.success || parsed.data.targetKind !== "browser") throw new Error("Pairing invitation version is not supported");
+  const payload = parsed.data;
+  if (!allowExpired && payload.expiresAt <= Date.now()) throw new Error("Pairing invitation has expired");
   return payload;
 }
 function openIdentityDatabase() {
@@ -6154,6 +6181,11 @@ function requestGatewayOriginPermissions(origins) {
   if (!patterns.length) return Promise.resolve(true);
   return chrome.permissions.request({ origins: patterns });
 }
+async function hasGatewayOriginPermission(origin) {
+  const url = new URL(origin);
+  if (url.protocol === "http:" && ["127.0.0.1", "localhost"].includes(url.hostname)) return true;
+  return chrome.permissions.contains({ origins: [`${url.origin}/*`] });
+}
 class GatewayHttpError extends Error {
   constructor(message, status) {
     super(message);
@@ -6222,7 +6254,12 @@ async function signedPairingRequest(pair, payload, origin, requestId, action, co
   return decoded;
 }
 function shouldTryNextRoute(cause) {
-  return !(cause instanceof GatewayHttpError) || cause.status >= 500 || [404, 408, 425, 429].includes(cause.status);
+  return !(cause instanceof GatewayHttpError) || isRetryableDevicePairingHttpStatus(cause.status);
+}
+function isRouteFailure(cause) {
+  if (cause instanceof GatewayHttpError) return isRetryableDevicePairingHttpStatus(cause.status);
+  const message = cause instanceof Error ? cause.message : String(cause);
+  return /network|fetch|respond|identity|route/i.test(message);
 }
 async function signedPairingRequestAcrossRoutes(pair, payload, origins, requestId, action, completion) {
   let lastRouteError;
@@ -6236,9 +6273,11 @@ async function signedPairingRequestAcrossRoutes(pair, payload, origins, requestI
   }
   throw lastRouteError instanceof Error ? lastRouteError : new Error("No Gateway route could be reached");
 }
-async function refreshAccessToken(gatewayUrls, refreshToken, pair, gateway) {
-  const nextRefreshToken = createRefreshToken();
-  const requestId = crypto.randomUUID();
+async function refreshAccessToken(gatewayUrls, refreshToken, pair, gateway, operation = {
+  requestId: crypto.randomUUID(),
+  nextRefreshToken: createRefreshToken()
+}) {
+  const { nextRefreshToken, requestId } = operation;
   const timestamp = Date.now();
   const nonce = randomNonce();
   const credentialId = refreshToken.slice("xopc_rt_".length).split("_")[0];
@@ -6285,71 +6324,149 @@ ${nextRefreshToken}`;
 function wait(milliseconds) {
   return new Promise((resolve) => setTimeout(resolve, milliseconds));
 }
-async function pairGateway(link, onApproval) {
-  const payload = parseBrowserPairingLink(link);
+async function pairGateway(invitation, onApproval, requestedOrigin) {
+  const payload = parseBrowserPairingInvitation(invitation, true);
   const origins = [...new Set(payload.routes.map((route) => new URL(route.url).origin))];
-  const permissionTask = requestGatewayOriginPermissions(origins);
+  const selectedOrigin = requestedOrigin && origins.includes(requestedOrigin) ? requestedOrigin : origins[0];
+  const permissionTask = requestGatewayOriginPermissions([selectedOrigin]);
   if (!await permissionTask) throw new Error("Gateway site permission was not granted");
+  const permittedOrigins = (await Promise.all(origins.map(async (origin) => ({
+    origin,
+    permitted: await hasGatewayOriginPermission(origin)
+  })))).filter((candidate) => candidate.permitted).map((candidate) => candidate.origin);
   const pair = await getOrCreateKeyPair();
-  const requestId = crypto.randomUUID();
-  const initialRefreshToken = createRefreshToken();
-  let { origin, result } = await signedPairingRequestAcrossRoutes(
-    pair,
-    payload,
-    origins,
-    requestId,
-    "request"
-  );
-  if (result.request.status === "pending") onApproval(result.request.confirmationCode);
-  while (result.request.status === "pending") {
-    await wait(1500);
-    const response = await signedPairingRequestAcrossRoutes(
-      pair,
-      payload,
-      [origin, ...origins.filter((candidate) => candidate !== origin)],
-      requestId,
-      "status"
-    );
-    ({ origin, result } = response);
+  const stored = await chrome.storage.local.get(PAIRING_JOURNAL_KEY);
+  let journal = stored[PAIRING_JOURNAL_KEY];
+  if (journal && journal.payload.pairingToken !== payload.pairingToken) {
+    throw new Error("PAIRING_ALREADY_PENDING");
   }
-  if (result.request.status !== "approved" && result.request.status !== "completed") {
-    throw new Error(`Pairing ${result.request.status}`);
+  if (!journal) {
+    if (payload.expiresAt <= Date.now()) throw new Error("Pairing invitation has expired");
+    journal = {
+      invitation: invitation.trim(),
+      payload,
+      requestId: crypto.randomUUID(),
+      idempotencyKey: crypto.randomUUID(),
+      initialRefreshToken: createRefreshToken()
+    };
+    await chrome.storage.local.set({ [PAIRING_JOURNAL_KEY]: journal });
   }
-  if (result.request.status !== "completed") {
-    const response = await signedPairingRequestAcrossRoutes(
+  delete journal.nextOrigin;
+  await chrome.storage.local.set({ [PAIRING_JOURNAL_KEY]: journal });
+  const requestId = journal.requestId;
+  const availableOrigins = journal.origin && permittedOrigins.includes(journal.origin) ? [journal.origin, ...permittedOrigins.filter((candidate) => candidate !== journal.origin)] : [selectedOrigin, ...permittedOrigins.filter((candidate) => candidate !== selectedOrigin)];
+  try {
+    let { origin, result } = await signedPairingRequestAcrossRoutes(
       pair,
-      payload,
-      [origin, ...origins.filter((candidate) => candidate !== origin)],
+      journal.payload,
+      availableOrigins,
       requestId,
-      "complete",
-      {
-        idempotencyKey: crypto.randomUUID(),
-        initialRefreshToken
-      }
+      "request"
+    );
+    journal.origin = origin;
+    await chrome.storage.local.set({ [PAIRING_JOURNAL_KEY]: journal });
+    if (result.request.status === "pending") onApproval(result.request.confirmationCode);
+    while (result.request.status === "pending") {
+      await wait(1500);
+      const response = await signedPairingRequestAcrossRoutes(
+        pair,
+        journal.payload,
+        [origin, ...permittedOrigins.filter((candidate) => candidate !== origin)],
+        requestId,
+        "status"
+      );
+      ({ origin, result } = response);
+      journal.origin = origin;
+      await chrome.storage.local.set({ [PAIRING_JOURNAL_KEY]: journal });
+    }
+    if (result.request.status !== "approved" && result.request.status !== "completed") {
+      await chrome.storage.local.remove(PAIRING_JOURNAL_KEY);
+      throw new Error(`Pairing ${result.request.status}`);
+    }
+    if (result.request.status !== "completed") {
+      const response = await signedPairingRequestAcrossRoutes(
+        pair,
+        journal.payload,
+        [origin, ...permittedOrigins.filter((candidate) => candidate !== origin)],
+        requestId,
+        "complete",
+        {
+          idempotencyKey: journal.idempotencyKey,
+          initialRefreshToken: journal.initialRefreshToken
+        }
+      );
+      ({ origin, result } = response);
+    }
+    if (!result.request.deviceId) throw new Error("Gateway did not register the browser");
+    journal.origin = origin;
+    journal.completed = { deviceId: result.request.deviceId, gatewayName: result.gateway.name };
+    journal.refresh ??= { requestId: crypto.randomUUID(), nextRefreshToken: createRefreshToken() };
+    await chrome.storage.local.set({ [PAIRING_JOURNAL_KEY]: journal });
+    const orderedOrigins = [origin, ...permittedOrigins.filter((candidate) => candidate !== origin)];
+    const tokens = await refreshAccessToken(
+      orderedOrigins,
+      journal.initialRefreshToken,
+      pair,
+      journal.payload,
+      journal.refresh
+    );
+    const profile = {
+      gatewayId: journal.payload.gatewayId,
+      gatewayName: journal.completed.gatewayName,
+      gatewayUrl: tokens.gatewayUrl,
+      gatewayUrls: [tokens.gatewayUrl, ...orderedOrigins.filter((candidate) => candidate !== tokens.gatewayUrl)],
+      gatewayPublicKey: journal.payload.gatewayPublicKey,
+      deviceId: journal.completed.deviceId,
+      refreshToken: tokens.refreshToken,
+      accessToken: tokens.accessToken,
+      accessTokenExpiresAt: tokens.accessTokenExpiresAt
+    };
+    await chrome.storage.local.set({ [PROFILE_KEY]: profile });
+    await chrome.storage.local.remove(PAIRING_JOURNAL_KEY);
+    return profile;
+  } catch (cause) {
+    const nextOrigin = origins.find((origin) => !permittedOrigins.includes(origin));
+    if (nextOrigin && isRouteFailure(cause)) {
+      journal.nextOrigin = nextOrigin;
+      await chrome.storage.local.set({ [PAIRING_JOURNAL_KEY]: journal });
+      throw new Error(`PAIRING_ROUTE_PERMISSION_REQUIRED:${nextOrigin}`);
+    }
+    throw cause;
+  }
+}
+async function readPendingBrowserPairing() {
+  const stored = await chrome.storage.local.get(PAIRING_JOURNAL_KEY);
+  const journal = stored[PAIRING_JOURNAL_KEY];
+  return journal ? { invitation: journal.invitation, ...journal.nextOrigin ? { nextOrigin: journal.nextOrigin } : {} } : void 0;
+}
+async function cancelPendingBrowserPairing() {
+  const stored = await chrome.storage.local.get(PAIRING_JOURNAL_KEY);
+  const journal = stored[PAIRING_JOURNAL_KEY];
+  if (!journal) return;
+  const origins = [...new Set(journal.payload.routes.map((route) => new URL(route.url).origin))];
+  const permittedOrigins = (await Promise.all(origins.map(async (origin) => ({
+    origin,
+    permitted: await hasGatewayOriginPermission(origin)
+  })))).filter((candidate) => candidate.permitted).map((candidate) => candidate.origin);
+  try {
+    await signedPairingRequestAcrossRoutes(
+      await getOrCreateKeyPair(),
+      journal.payload,
+      journal.origin && permittedOrigins.includes(journal.origin) ? [journal.origin, ...permittedOrigins.filter((candidate) => candidate !== journal.origin)] : permittedOrigins,
+      journal.requestId,
+      "cancel"
     );
-    ({ origin, result } = response);
+  } catch (cause) {
+    if (!(cause instanceof GatewayHttpError) || !["PAIRING_NOT_FOUND", "PAIRING_EXPIRED", "PAIRING_CANCELLED"].includes(cause.message)) throw cause;
   }
-  if (!result.request.deviceId) throw new Error("Gateway did not register the browser");
-  const orderedOrigins = [origin, ...origins.filter((candidate) => candidate !== origin)];
-  const tokens = await refreshAccessToken(orderedOrigins, initialRefreshToken, pair, payload);
-  const profile = {
-    gatewayId: payload.gatewayId,
-    gatewayName: result.gateway.name,
-    gatewayUrl: tokens.gatewayUrl,
-    gatewayUrls: [tokens.gatewayUrl, ...orderedOrigins.filter((candidate) => candidate !== tokens.gatewayUrl)],
-    gatewayPublicKey: payload.gatewayPublicKey,
-    deviceId: result.request.deviceId,
-    refreshToken: tokens.refreshToken,
-    accessToken: tokens.accessToken,
-    accessTokenExpiresAt: tokens.accessTokenExpiresAt
-  };
-  await chrome.storage.local.set({ [PROFILE_KEY]: profile });
-  return profile;
+  await chrome.storage.local.remove(PAIRING_JOURNAL_KEY);
 }
 async function readProfile() {
-  const stored = await chrome.storage.local.get(PROFILE_KEY);
+  const stored = await chrome.storage.local.get([PROFILE_KEY, PAIRING_JOURNAL_KEY]);
   const profile = stored[PROFILE_KEY];
-  return profile?.gatewayId && profile.gatewayUrl && profile.refreshToken ? profile : void 0;
+  if (!profile?.gatewayId || !profile.gatewayUrl || !profile.refreshToken) return void 0;
+  if (stored[PAIRING_JOURNAL_KEY]) await chrome.storage.local.remove(PAIRING_JOURNAL_KEY);
+  return profile;
 }
 async function getAccessProfile() {
   const profile = await readProfile();
@@ -6428,7 +6545,7 @@ async function createBrowserEndpointHello(tools = []) {
   };
 }
 async function forgetProfile() {
-  await chrome.storage.local.remove(PROFILE_KEY);
+  await chrome.storage.local.remove([PROFILE_KEY, PAIRING_JOURNAL_KEY]);
 }
 async function revokeAndForgetProfile() {
   try {
@@ -6451,4 +6568,4 @@ async function revokeAndForgetProfile() {
   }
 }
 
-export { ENDPOINT_PROTOCOL_VERSION as E, PENDING_CONTEXT_KEY as P, RealtimeClient as R, TAB_BINDING_PREFIX as T, activeTabId as a, captureTabWithPermission as b, canonicalJson as c, createBrowserEndpointHello as d, currentTabDescriptor as e, deleteBrowserOutbox as f, discoverLocalGateway as g, endpointToolContentSchema as h, gatewayFetch as i, getAccessProfile as j, readProfile as k, registerBrowserEndpoint as l, revokeAndForgetProfile as m, runWithTabSiteAccess as n, pairGateway as p, readBrowserOutbox as r, setAutoConnectEnabled as s, writeBrowserOutbox as w };
+export { ENDPOINT_PROTOCOL_VERSION as E, PENDING_CONTEXT_KEY as P, RealtimeClient as R, TAB_BINDING_PREFIX as T, activeTabId as a, canonicalJson as b, cancelPendingBrowserPairing as c, captureTabWithPermission as d, createBrowserEndpointHello as e, currentTabDescriptor as f, deleteBrowserOutbox as g, discoverLocalGateway as h, endpointToolContentSchema as i, gatewayFetch as j, getAccessProfile as k, readPendingBrowserPairing as l, readProfile as m, registerBrowserEndpoint as n, revokeAndForgetProfile as o, pairGateway as p, runWithTabSiteAccess as q, readBrowserOutbox as r, setAutoConnectEnabled as s, writeBrowserOutbox as w };

package/dist/browser-ext/dist/background.js

@@ -1,4 +1,4 @@
-import { h as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, c as canonicalJson, T as TAB_BINDING_PREFIX, b as captureTabWithPermission, P as PENDING_CONTEXT_KEY, k as readProfile, l as registerBrowserEndpoint, j as getAccessProfile, R as RealtimeClient, d as createBrowserEndpointHello, i as gatewayFetch } from './assets/auth-DkwOUI6_.js';
+import { i as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, b as canonicalJson, T as TAB_BINDING_PREFIX, d as captureTabWithPermission, P as PENDING_CONTEXT_KEY, m as readProfile, n as registerBrowserEndpoint, k as getAccessProfile, R as RealtimeClient, e as createBrowserEndpointHello, j as gatewayFetch } from './assets/auth-O8RiOF3l.js';
 
 const BROWSER_EXTENSION_PROTOCOL_VERSION = 4;
 const BROWSER_CONTROL_ENDPOINT_TOOL_NAME = "browser.control";

package/dist/browser-ext/dist/sidepanel.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>xopc</title>
     <script type="module" crossorigin src="./sidepanel.js"></script>
-    <link rel="modulepreload" crossorigin href="./assets/auth-DkwOUI6_.js">
+    <link rel="modulepreload" crossorigin href="./assets/auth-O8RiOF3l.js">
     <link rel="stylesheet" crossorigin href="./assets/sidepanel-C86O7q5Y.css">
   </head>
   <body>

package/dist/browser-ext/dist/sidepanel.js

@@ -1,4 +1,4 @@
-import { R as RealtimeClient, i as gatewayFetch, a as activeTabId, r as readBrowserOutbox, w as writeBrowserOutbox, f as deleteBrowserOutbox, e as currentTabDescriptor, T as TAB_BINDING_PREFIX, j as getAccessProfile, n as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, b as captureTabWithPermission, p as pairGateway, s as setAutoConnectEnabled, k as readProfile, g as discoverLocalGateway, m as revokeAndForgetProfile } from './assets/auth-DkwOUI6_.js';
+import { R as RealtimeClient, j as gatewayFetch, a as activeTabId, r as readBrowserOutbox, w as writeBrowserOutbox, g as deleteBrowserOutbox, f as currentTabDescriptor, T as TAB_BINDING_PREFIX, k as getAccessProfile, q as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, d as captureTabWithPermission, p as pairGateway, s as setAutoConnectEnabled, l as readPendingBrowserPairing, m as readProfile, h as discoverLocalGateway, c as cancelPendingBrowserPairing, o as revokeAndForgetProfile } from './assets/auth-O8RiOF3l.js';
 
 true              &&(function polyfill() {
   const relList = document.createElement("link").relList;
@@ -27549,7 +27549,7 @@ function pairingErrorMessage(cause) {
   if (message === "Gateway site permission was not granted") {
     return "Chrome needs access to the Gateway address. Select Connect again and allow the site permission.";
   }
-  if (message === "PAIRING_EXPIRED" || message === "Pairing expired" || message === "Pairing link has expired") {
+  if (message === "PAIRING_EXPIRED" || message === "Pairing expired" || message === "Pairing invitation has expired") {
     return "This invitation expired. Create and copy a new invitation from Device access.";
   }
   if (message === "PAIRING_DEVICE_MISMATCH") {
@@ -27558,32 +27558,37 @@ function pairingErrorMessage(cause) {
   if (message === "No Gateway route could be reached") {
     return "None of the Gateway addresses responded. Check that the Gateway is online and its secure connection is active.";
   }
+  if (message.startsWith("PAIRING_ROUTE_PERMISSION_REQUIRED:")) {
+    return "The current Gateway address did not respond. Select Continue to allow the next address listed in the invitation.";
+  }
   return message;
 }
 function SidePanelApp() {
   const [profile, setProfile] = reactExports.useState();
-  const [pairingLink, setPairingLink] = reactExports.useState("");
+  const [invitation, setInvitation] = reactExports.useState("");
   const [confirmationCode, setConfirmationCode] = reactExports.useState("");
   const [state, setState] = reactExports.useState("loading");
   const [error, setError] = reactExports.useState("");
-  const [localPairingLink, setLocalPairingLink] = reactExports.useState("");
+  const [localInvitation, setLocalInvitation] = reactExports.useState("");
+  const [nextOrigin, setNextOrigin] = reactExports.useState();
   const initializationStarted = reactExports.useRef(false);
   const pairingStarted = reactExports.useRef(false);
-  const connect = reactExports.useCallback(async (link) => {
+  const connect = reactExports.useCallback(async (value, origin) => {
     if (pairingStarted.current) return;
     pairingStarted.current = true;
     setState("pairing");
     setError("");
     setConfirmationCode("");
-    setPairingLink(link);
+    setInvitation(value);
     try {
-      const paired = await pairGateway(link, setConfirmationCode);
+      const paired = await pairGateway(value, setConfirmationCode, origin);
       await setAutoConnectEnabled(true);
       await reconnectBrowserBridge();
       setProfile(paired);
       setState("online");
     } catch (cause) {
       setError(pairingErrorMessage(cause));
+      setNextOrigin((await readPendingBrowserPairing())?.nextOrigin);
       setState("unpaired");
     } finally {
       pairingStarted.current = false;
@@ -27600,20 +27605,28 @@ function SidePanelApp() {
         setState("online");
         return;
       }
+      const pending = await readPendingBrowserPairing();
+      if (pending) {
+        setInvitation(pending.invitation);
+        setNextOrigin(pending.nextOrigin);
+        if (!pending.nextOrigin) await connect(pending.invitation);
+        else setState("unpaired");
+        return;
+      }
       const local = await discoverLocalGateway();
       if (!local) {
         setState("unpaired");
         return;
       }
-      setLocalPairingLink(local.pairingLink);
-      await connect(local.pairingLink);
+      setLocalInvitation(local.invitation);
+      await connect(local.invitation);
     })();
   }, [connect]);
   reactExports.useEffect(() => watchSidePanelTheme(profile?.gatewayUrl), [profile?.gatewayUrl]);
   async function disconnect() {
     await revokeAndForgetProfile();
     setProfile(void 0);
-    setLocalPairingLink("");
+    setLocalInvitation("");
     setState("unpaired");
   }
   async function connectLocalGateway() {
@@ -27622,8 +27635,22 @@ function SidePanelApp() {
     try {
       const local = await discoverLocalGateway({ force: true });
       if (!local) throw new Error("No local xopc Gateway was found");
-      setLocalPairingLink(local.pairingLink);
-      await connect(local.pairingLink);
+      setLocalInvitation(local.invitation);
+      await connect(local.invitation);
+    } catch (cause) {
+      setError(cause instanceof Error ? cause.message : String(cause));
+      setState("unpaired");
+    }
+  }
+  async function cancelPairing() {
+    setState("pairing");
+    setError("");
+    try {
+      await cancelPendingBrowserPairing();
+      setInvitation("");
+      setNextOrigin(void 0);
+      setConfirmationCode("");
+      setState("unpaired");
     } catch (cause) {
       setError(cause instanceof Error ? cause.message : String(cause));
       setState("unpaired");
@@ -27644,9 +27671,9 @@ function SidePanelApp() {
       state === "loading" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "muted", children: "Loading…" }) : null,
       state === "unpaired" || state === "pairing" ? /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "card", children: [
         /* @__PURE__ */ jsxRuntimeExports.jsx("h1", { children: "Connect a Gateway" }),
-        localPairingLink ? /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+        localInvitation ? /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "muted", children: "A local xopc Gateway was found. xopc connects automatically on this computer." }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary local-connect", onClick: () => void connect(localPairingLink), disabled: state === "pairing", children: state === "pairing" ? "Connecting…" : "Retry local connection" }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary local-connect", onClick: () => void connect(localInvitation), disabled: state === "pairing", children: state === "pairing" ? "Connecting…" : "Retry local connection" }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "pairing-divider", children: "or paste an invitation" })
         ] }) : /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "muted", children: "Connect locally, or paste the one-time invitation copied from Device access." }),
@@ -27655,14 +27682,17 @@ function SidePanelApp() {
         ] }),
         /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "field", children: [
           "One-time invitation",
-          /* @__PURE__ */ jsxRuntimeExports.jsx("textarea", { rows: 4, value: pairingLink, onChange: (event) => setPairingLink(event.target.value), disabled: state === "pairing" })
+          /* @__PURE__ */ jsxRuntimeExports.jsx("textarea", { rows: 4, value: invitation, onChange: (event) => setInvitation(event.target.value), disabled: state === "pairing" })
         ] }),
         confirmationCode ? /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "muted", children: "Confirm this code in the Gateway:" }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "approval-code", children: confirmationCode })
         ] }) : null,
         error ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "error-text", children: error }) : null,
-        /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "actions", children: /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary", onClick: () => void connect(pairingLink), disabled: !pairingLink.trim() || state === "pairing", children: state === "pairing" ? "Waiting for approval…" : "Connect" }) })
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "actions", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary", onClick: () => void connect(invitation, nextOrigin), disabled: !invitation.trim() || state === "pairing", children: state === "pairing" ? "Waiting for approval…" : nextOrigin ? `Allow ${new URL(nextOrigin).host} and continue` : "Connect" }),
+          invitation ? /* @__PURE__ */ jsxRuntimeExports.jsx("button", { onClick: () => void cancelPairing(), disabled: state === "pairing", children: "Cancel pairing" }) : null
+        ] })
       ] }) : null
     ] }) : /* @__PURE__ */ jsxRuntimeExports.jsx(ChatPanel, {}),
     state === "online" && profile ? /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "disconnect-link", onClick: disconnect, title: `Disconnect ${profile.gatewayName}`, children: "Disconnect" }) : null

package/dist/browser-ext/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "minimum_chrome_version": "120",
   "name": "xopc",
-  "version": "0.0.273",
+  "version": "0.0.274",
   "description": "Chat with xopc and explicitly share or control the current page.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpr4vpLC/nmvy+wiOWk3SWlp2nEZkFijfk8ivGw7StNZgCK90nOMvwhdEtlkk3GOWDvdVnq8HxCsM3UNQ8FnGUyerpH1FJXqXuradxeHf8ZxFjiQU/mIWfnKbUuONWQORon3/pigyoXoK/VUXgg0Wbm/rbVwsS0bv+25R6m+mZgBspOLeKuoH7ivhL+48WV6POtMBsFPZweY26477EM7ukh+56Ff5ENevB8ymxBBn7qK5ZoeZd2a23U8ioX5TsHfe6fnrjitPWjIxD8G0NoKQxcaa/Mo+xs+T6UiLKxP0wjz5bm7jB5H+CXtkRJqzBWUB0h+RSLJckzZfA8BAJrRwIDAQAB",
   "permissions": [

package/dist/extensions/telegram/xopc.extension.json

@@ -2,7 +2,7 @@
   "id": "telegram",
   "name": "Telegram Channel",
   "description": "Bundled Telegram Bot channel (private workspace sources; ships inside @xopcai/xopc dist/)",
-  "version": "0.0.273",
+  "version": "0.0.274",
   "kind": "channel",
   "main": "src/index.js",
   "channels": [

package/dist/gateway/static/root/assets/{activity-store-cF7IX2RP.js → activity-store-SJZ5fS17.js}

@@ -1 +1 @@
-import{p as e}from"./locale-store-BBSCIl4I.js";var t=`xopc.activity-center.v1`,n=80,r=720*60*60*1e3;function i(e){return e===`error`?`failed`:e===`warning`?`attention`:`done`}function a(){if(!(typeof window>`u`))return window.location.hash.replace(/^#/,``)||`${window.location.pathname}${window.location.search}`||void 0}function o(){try{let e=globalThis.localStorage?.getItem(t);if(!e)return[];let i=JSON.parse(e);if(!Array.isArray(i.items))return[];let a=Date.now()-r,o=i.items.filter(e=>e&&typeof e.id==`string`&&typeof e.title==`string`).filter(e=>Number.isFinite(e.updatedAt)&&e.updatedAt>=a).slice(0,n);return o.length!==i.items.length&&s(o),o}catch{return[]}}function s(e){try{globalThis.localStorage?.setItem(t,JSON.stringify({items:e}))}catch{}}function c(e){return`${e.toString(36)}-${Math.random().toString(36).slice(2,8)}`}var l=e(e=>({items:o(),add:t=>e(e=>{let r=t.title.trim();if(!r)return e;let o=Date.now(),l=t.tone??`info`,u=t.dedupeKey?e.items.findIndex(e=>e.dedupeKey===t.dedupeKey):-1,d=[{id:u>=0?e.items[u].id:c(o),tone:l,status:t.status??i(l),title:r,message:t.message?.trim()||void 0,source:t.source?.trim()||void 0,href:t.href??a(),dedupeKey:t.dedupeKey,createdAt:u>=0?e.items[u].createdAt:o,updatedAt:o,read:t.read??!1,occurrences:u>=0?e.items[u].occurrences+1:1},...u>=0?e.items.filter((e,t)=>t!==u):e.items].slice(0,n);return s(d),{items:d}}),markAllRead:()=>e(e=>{let t=e.items.map(e=>({...e,read:!0}));return s(t),{items:t}}),remove:t=>e(e=>{let n=e.items.filter(e=>e.id!==t);return s(n),{items:n}}),clearFinished:()=>e(e=>{let t=e.items.filter(e=>e.status!==`done`);return s(t),{items:t}}),clear:()=>{s([]),e({items:[]})}}));function u(e){l.getState().add(e)}export{u as t};
+import{p as e}from"./locale-store-BkJ7g35d.js";var t=`xopc.activity-center.v1`,n=80,r=720*60*60*1e3;function i(e){return e===`error`?`failed`:e===`warning`?`attention`:`done`}function a(){if(!(typeof window>`u`))return window.location.hash.replace(/^#/,``)||`${window.location.pathname}${window.location.search}`||void 0}function o(){try{let e=globalThis.localStorage?.getItem(t);if(!e)return[];let i=JSON.parse(e);if(!Array.isArray(i.items))return[];let a=Date.now()-r,o=i.items.filter(e=>e&&typeof e.id==`string`&&typeof e.title==`string`).filter(e=>Number.isFinite(e.updatedAt)&&e.updatedAt>=a).slice(0,n);return o.length!==i.items.length&&s(o),o}catch{return[]}}function s(e){try{globalThis.localStorage?.setItem(t,JSON.stringify({items:e}))}catch{}}function c(e){return`${e.toString(36)}-${Math.random().toString(36).slice(2,8)}`}var l=e(e=>({items:o(),add:t=>e(e=>{let r=t.title.trim();if(!r)return e;let o=Date.now(),l=t.tone??`info`,u=t.dedupeKey?e.items.findIndex(e=>e.dedupeKey===t.dedupeKey):-1,d=[{id:u>=0?e.items[u].id:c(o),tone:l,status:t.status??i(l),title:r,message:t.message?.trim()||void 0,source:t.source?.trim()||void 0,href:t.href??a(),dedupeKey:t.dedupeKey,createdAt:u>=0?e.items[u].createdAt:o,updatedAt:o,read:t.read??!1,occurrences:u>=0?e.items[u].occurrences+1:1},...u>=0?e.items.filter((e,t)=>t!==u):e.items].slice(0,n);return s(d),{items:d}}),markAllRead:()=>e(e=>{let t=e.items.map(e=>({...e,read:!0}));return s(t),{items:t}}),remove:t=>e(e=>{let n=e.items.filter(e=>e.id!==t);return s(n),{items:n}}),clearFinished:()=>e(e=>{let t=e.items.filter(e=>e.status!==`done`);return s(t),{items:t}}),clear:()=>{s([]),e({items:[]})}}));function u(e){l.getState().add(e)}export{u as t};