@xopcai/xopc 0.0.415 → 0.0.416

package/dist/browser-ext/_locales/en/messages.json

@@ -285,5 +285,8 @@
   "clarifyApprove": { "message": "Approve once" },
   "clarifyCompose": { "message": "Select and add details" },
   "clarifyClear": { "message": "Clear selection" },
-  "clarifyRecommended": { "message": "Recommended" }
+  "clarifyRecommended": { "message": "Recommended" },
+  "browserControlStopped": { "message": "You stopped Chrome control. Page operations stay paused until you choose to resume. Return to the original chat to retry the test." },
+  "browserControlResume": { "message": "Resume browser control" },
+  "errorLocalHostBlockedHelp": { "message": "The local connection program could not start. Return to the original chat to check and repair installation, then retry. If your system shows a security prompt, review it yourself; do not disable system protection." }
 }

package/dist/browser-ext/_locales/zh_CN/messages.json

@@ -285,5 +285,8 @@
   "clarifyApprove": { "message": "批准本次操作" },
   "clarifyCompose": { "message": "选择并补充" },
   "clarifyClear": { "message": "清除选择" },
-  "clarifyRecommended": { "message": "推荐" }
+  "clarifyRecommended": { "message": "推荐" },
+  "browserControlStopped": { "message": "你已停止 Chrome 控制。网页操作将保持暂停，直到你主动恢复。恢复后请返回原对话重新验收。" },
+  "browserControlResume": { "message": "恢复网页控制" },
+  "errorLocalHostBlockedHelp": { "message": "本机连接程序启动被阻止。请返回原对话检查并修复安装，再重试连接。若系统显示安全提示，请自行审阅决定，不要关闭系统保护。" }
 }

package/dist/browser-ext/dist/assets/{page-context-MuzjMBlJ.js → page-context-CVvmTWZb.js}

@@ -5805,12 +5805,14 @@ ${credentialId}
 ${timestamp}
 ${nonce}
 ${requestId}
-${nextRefreshToken}`;
+${nextRefreshToken}
+request-proof:1`;
   const signature = await sign(pair, proof);
   const body = {
     refreshToken,
     nextRefreshToken,
     requestId,
+    requestProofVersion: 1,
     timestamp,
     nonce,
     signature
@@ -5833,7 +5835,7 @@ ${nextRefreshToken}`;
   }
   if (typeof response.signedPayload !== "string" || typeof response.signature !== "string" || !await verifyGateway(gateway.gatewayPublicKey, response.signedPayload, response.signature)) throw new Error(t("errorGatewayVerification"));
   const responseProof = decodeJson(response.signedPayload);
-  if (responseProof.purpose !== "device-refresh-v3" || responseProof.gatewayId !== gateway.gatewayId || responseProof.requestId !== requestId || responseProof.nonce !== nonce || !(responseProof.expiresAt > Date.now()) || responseProof.expiresAt > Date.now() + 6e4) throw new Error("Gateway refresh response does not match this request");
+  if (responseProof.purpose !== "device-refresh-v3" || responseProof.gatewayId !== gateway.gatewayId || responseProof.requestId !== requestId || responseProof.requestProofVersion !== 1 || responseProof.nonce !== nonce || !(responseProof.expiresAt > Date.now()) || responseProof.expiresAt > Date.now() + 6e4) throw new Error("Gateway refresh response does not match this request");
   const payload = responseProof.tokens;
   if (!payload?.accessToken || !payload.accessTokenExpiresAt || payload.refreshToken !== nextRefreshToken) {
     throw new Error(t("errorInvalidCredentials"));
@@ -6077,14 +6079,37 @@ async function getAccessProfile(options) {
     refreshTask = void 0;
   }
 }
+async function createBrowserRequestProof(profile, outgoing, credential, method) {
+  const bearer = credential ?? outgoing.headers.get("Authorization").slice("Bearer ".length);
+  const digest = async (bytes) => Array.from(new Uint8Array(await crypto.subtle.digest("SHA-256", bytes))).map((byte) => byte.toString(16).padStart(2, "0")).join("");
+  const timestamp = Date.now();
+  const nonce = randomNonce();
+  const bodyDigest = await digest(await outgoing.clone().arrayBuffer());
+  const url = new URL(outgoing.url);
+  const signedHeaders = ["content-type", "idempotency-key", "x-xopc-expected-session-key", "x-endpoint-id", "x-endpoint-upload-token"];
+  const proof = [
+    "xopc-request-v1",
+    profile.gatewayId,
+    await digest(new TextEncoder().encode(bearer)),
+    method ?? outgoing.method,
+    url.pathname + url.search,
+    bodyDigest,
+    ...signedHeaders.map((name) => outgoing.headers.get(name) ?? ""),
+    String(timestamp),
+    nonce
+  ].join("\n");
+  return `${timestamp}.${nonce}.${bodyDigest}.${await sign(await getOrCreateKeyPair(), proof)}`;
+}
 async function gatewayFetch(path, init = {}, expectedIdentity) {
   let profile = await getAccessProfile();
   const identity = expectedIdentity ?? profile;
   assertProfileIdentity(profile, identity);
-  const request = () => {
+  const request = async () => {
     const headers = new Headers(init.headers);
     headers.set("Authorization", `Bearer ${profile.accessToken}`);
-    return fetch(`${profile.gatewayUrl}${path}`, { ...init, headers });
+    const outgoing = new Request(`${profile.gatewayUrl}${path}`, { ...init, headers });
+    outgoing.headers.set("X-Xopc-Proof", await createBrowserRequestProof(profile, outgoing));
+    return fetch(outgoing.url, { ...init, headers: outgoing.headers, body: outgoing.body ? await outgoing.arrayBuffer() : void 0 });
   };
   let response = await request();
   assertProfileIdentity(await readProfile(), identity);
@@ -6140,10 +6165,7 @@ async function forgetProfile() {
 async function revokeAndForgetProfile() {
   try {
     const profile = await getAccessProfile();
-    await fetch(`${profile.gatewayUrl}/api/devices/me`, {
-      method: "DELETE",
-      headers: { Authorization: `Bearer ${profile.accessToken}` }
-    });
+    await gatewayFetch("/api/devices/me", { method: "DELETE" }, profile);
   } finally {
     await forgetProfile();
     try {
@@ -6192,6 +6214,7 @@ const realtimeSubscriptionSchema = object({
 discriminatedUnion("kind", [
   envelope("realtime.hello", object({
     ticket: string().min(32).max(512),
+    connectionProof: string().min(1).max(256).optional(),
     clientId: string().min(1).max(160),
     clientKind: realtimeClientKindSchema,
     subscriptions: array(realtimeSubscriptionSchema).max(100).default([]),
@@ -6423,6 +6446,7 @@ class RealtimeClient {
         }));
         this.send(this.clientMessage("realtime.hello", {
           ticket,
+          ...issuedTicket.connectionProof ? { connectionProof: issuedTicket.connectionProof } : {},
           clientId: this.options.clientId,
           clientKind: this.options.clientKind,
           subscriptions,
@@ -6742,4 +6766,4 @@ ${marker.timeOrigin}`),
   });
 }
 
-export { registerBrowserEndpoint as A, revokeAndForgetProfile as B, runWithTabSiteAccess as C, saveExtensionLocalePreference as D, ENDPOINT_PROTOCOL_VERSION as E, setAutoConnectEnabled as F, strictObject as G, string as H, t as I, unknown as J, MAX_BROWSER_CONTEXTS_PER_TURN as M, PENDING_CONTEXT_KEY as P, REALTIME_PROTOCOL_VERSION as R, TAB_BINDING_PREFIX as T, _enum as _, RealtimeClient as a, activeTabId as b, array as c, boolean as d, browserPageContextsInputSchema as e, cancelPendingBrowserPairing as f, canonicalJson as g, captureContextMenuSelection as h, captureTabWithPermission as i, createBrowserEndpointHello as j, currentTabDescriptor as k, discoverLocalGateway as l, discriminatedUnion as m, endpointToolContentSchema as n, extensionLocale as o, gatewayFetch as p, getAccessProfile as q, literal as r, loadExtensionLocalePreference as s, number as t, object as u, openDatabase as v, pairGateway as w, readPendingBrowserPairing as x, readProfile as y, record as z };
+export { record as A, registerBrowserEndpoint as B, revokeAndForgetProfile as C, runWithTabSiteAccess as D, ENDPOINT_PROTOCOL_VERSION as E, saveExtensionLocalePreference as F, setAutoConnectEnabled as G, strictObject as H, string as I, t as J, unknown as K, MAX_BROWSER_CONTEXTS_PER_TURN as M, PENDING_CONTEXT_KEY as P, REALTIME_PROTOCOL_VERSION as R, TAB_BINDING_PREFIX as T, _enum as _, RealtimeClient as a, activeTabId as b, array as c, boolean as d, browserPageContextsInputSchema as e, cancelPendingBrowserPairing as f, canonicalJson as g, captureContextMenuSelection as h, captureTabWithPermission as i, createBrowserEndpointHello as j, createBrowserRequestProof as k, currentTabDescriptor as l, discoverLocalGateway as m, discriminatedUnion as n, endpointToolContentSchema as o, extensionLocale as p, gatewayFetch as q, getAccessProfile as r, literal as s, loadExtensionLocalePreference as t, number as u, object as v, openDatabase as w, pairGateway as x, readPendingBrowserPairing as y, readProfile as z };

package/dist/browser-ext/dist/background.js

@@ -1,4 +1,4 @@
-import { y as readProfile, p as gatewayFetch, n as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, g as canonicalJson, T as TAB_BINDING_PREFIX, h as captureContextMenuSelection, P as PENDING_CONTEXT_KEY, I as t, A as registerBrowserEndpoint, q as getAccessProfile, a as RealtimeClient, j as createBrowserEndpointHello, R as REALTIME_PROTOCOL_VERSION } from './assets/page-context-MuzjMBlJ.js';
+import { z as readProfile, q as gatewayFetch, o as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, g as canonicalJson, T as TAB_BINDING_PREFIX, h as captureContextMenuSelection, P as PENDING_CONTEXT_KEY, J as t, B as registerBrowserEndpoint, r as getAccessProfile, a as RealtimeClient, j as createBrowserEndpointHello, R as REALTIME_PROTOCOL_VERSION, k as createBrowserRequestProof } from './assets/page-context-CVvmTWZb.js';
 
 const LOG_COLORS = {
   debug: "color: #888",
@@ -1214,11 +1214,25 @@ class EndpointToolHostController {
 
 const log$1 = createLogger("CDP");
 const attached = /* @__PURE__ */ new Set();
+const CONTROL_PAUSED_KEY = "xopc.browser.control-paused";
+let controlPaused = false;
+let pausePersistence = Promise.resolve();
+async function isControlPaused() {
+  await pausePersistence;
+  const stored = await chrome.storage.local.get(CONTROL_PAUSED_KEY);
+  return controlPaused || stored[CONTROL_PAUSED_KEY] === true;
+}
+async function resumeControl() {
+  await pausePersistence;
+  await chrome.storage.local.remove(CONTROL_PAUSED_KEY);
+  controlPaused = false;
+}
 function isDebuggableUrl(url) {
   if (!url) return true;
   return url.startsWith("http://") || url.startsWith("https://") || url === "about:blank" || url.startsWith("data:");
 }
 async function ensureAttached(tabId) {
+  if (await isControlPaused()) throw new Error("BROWSER_CONTROL_REVOKED: You stopped Chrome control. Resume browser control in the xopc extension before retrying.");
   try {
     const tab = await chrome.tabs.get(tabId);
     if (!isDebuggableUrl(tab.url)) {
@@ -1246,10 +1260,7 @@ async function ensureAttached(tabId) {
   let lastError = "";
   for (let attempt = 1; attempt <= MAX_RETRIES; attempt++) {
     try {
-      try {
-        await chrome.debugger.detach({ tabId });
-      } catch {
-      }
+      if (await isControlPaused()) throw new Error("BROWSER_CONTROL_REVOKED: Resume browser control in the xopc extension.");
       await chrome.debugger.attach({ tabId }, "1.3");
       attached.add(tabId);
       await chrome.debugger.sendCommand({ tabId }, "Runtime.enable", {});
@@ -1257,6 +1268,7 @@ async function ensureAttached(tabId) {
       log$1.debug("Attached to tab", { tabId, attempt });
       return;
     } catch (e) {
+      if (await isControlPaused()) throw new Error("BROWSER_CONTROL_REVOKED: Resume browser control in the xopc extension.");
       lastError = e instanceof Error ? e.message : String(e);
       if (attempt < MAX_RETRIES) {
         await new Promise((r) => setTimeout(r, RETRY_DELAY));
@@ -1291,8 +1303,14 @@ async function captureScreenshot(tabId, options) {
 async function dispatchInput(tabId, type, params) {
   await sendCommand(tabId, `Input.${type}`, params);
 }
-chrome.debugger.onDetach.addListener((source) => {
-  if (source.tabId) attached.delete(source.tabId);
+chrome.debugger.onDetach.addListener((source, reason) => {
+  if (source.tabId !== void 0) attached.delete(source.tabId);
+  if (reason === "canceled_by_user") {
+    controlPaused = true;
+    pausePersistence = chrome.storage.local.set({ [CONTROL_PAUSED_KEY]: true }).catch((error) => {
+      log$1.warn("Could not persist Chrome control stop", { error: String(error) });
+    });
+  }
 });
 
 const observations = /* @__PURE__ */ new Map();
@@ -1336,7 +1354,7 @@ async function resolveAttachedTarget(input) {
   if (origin !== binding.urlOrigin) {
     return fail("STALE_OBSERVATION", "The attached tab navigated to another site. Bind it again.");
   }
-  if (await markerDigest(tabId) !== binding.documentId) {
+  if (input.action !== "close" && await markerDigest(tabId) !== binding.documentId) {
     return fail("STALE_OBSERVATION", "The attached tab document changed. Bind it again.");
   }
   return { binding, tabId, stateKey: `attached:${binding.id}` };
@@ -1369,6 +1387,7 @@ async function executeBrowserCommand(command, signal) {
   }
 }
 async function execute(input, timeoutMs, visualFallback, startedAt, signal) {
+  if (input.action !== "close" && await isControlPaused()) return fail("DRIVER_UNAVAILABLE", "BROWSER_CONTROL_REVOKED: You stopped Chrome control. Resume browser control in the xopc extension before retrying.");
   const sessionId = input.sessionId;
   if (!sessionId) return fail("INVALID_INPUT", "Extension actions require a session id.");
   const attached = await resolveAttachedTarget(input);
@@ -1767,7 +1786,11 @@ async function connect(generation) {
       });
       const body = await response.json();
       if (!response.ok || !body.payload?.ticket || !body.payload.realtime) throw new Error(`Realtime ticket failed (${response.status})`);
-      return { ticket: body.payload.ticket, realtime: body.payload.realtime };
+      return {
+        ticket: body.payload.ticket,
+        realtime: body.payload.realtime,
+        connectionProof: await createBrowserRequestProof(profile, new Request(`${profile.gatewayUrl}/api/realtime/v1/ws`), body.payload.ticket, "CONNECT")
+      };
     },
     createWebSocket: (url) => new WebSocket(url),
     onStateChange: (state, error) => {
@@ -1834,9 +1857,15 @@ chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
     }
     void recordingCommand(message.operation ?? "status", message.tabId).then((value) => sendResponse({ ok: true, value })).catch((error) => sendResponse({ ok: false, error: error instanceof Error ? error.message : String(error) }));
   } else if (message.type === "browser/get-status") {
-    sendResponse({ connected: Boolean(endpointClaim), transport: "gateway-realtime", error: lastConnectionError });
+    void isControlPaused().then((controlPaused) => sendResponse({ connected: Boolean(endpointClaim), transport: "gateway-realtime", error: lastConnectionError, controlPaused }));
   } else if (message.type === "browser/get-endpoint-claim") {
     sendResponse({ claim: endpointClaim, error: lastConnectionError });
+  } else if (message.type === "browser/resume-control") {
+    if (sender.url?.split("?")[0] !== chrome.runtime.getURL("dist/sidepanel.html")) {
+      sendResponse({ ok: false, error: "Use the extension control to resume." });
+      return true;
+    }
+    void resumeControl().then(() => sendResponse({ ok: true })).catch(() => sendResponse({ ok: false, error: "Control could not be resumed." }));
   } else if (message.type === "browser/reconnect") {
     disconnect();
     connectWithLogging();

package/dist/browser-ext/dist/sidepanel.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>xopc</title>
     <script type="module" crossorigin src="./sidepanel.js"></script>
-    <link rel="modulepreload" crossorigin href="./assets/page-context-MuzjMBlJ.js">
+    <link rel="modulepreload" crossorigin href="./assets/page-context-CVvmTWZb.js">
     <link rel="stylesheet" crossorigin href="./assets/sidepanel-CQeQB5vW.css">
   </head>
   <body>

package/dist/browser-ext/dist/sidepanel.js

@@ -1,4 +1,4 @@
-import { G as strictObject, t as number, d as boolean, H as string, c as array, _ as _enum, r as literal, u as object, m as discriminatedUnion, e as browserPageContextsInputSchema, z as record$1, J as unknown, I as t, p as gatewayFetch, M as MAX_BROWSER_CONTEXTS_PER_TURN, o as extensionLocale, v as openDatabase, a as RealtimeClient, R as REALTIME_PROTOCOL_VERSION, b as activeTabId, k as currentTabDescriptor, T as TAB_BINDING_PREFIX, q as getAccessProfile, y as readProfile, C as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, i as captureTabWithPermission, w as pairGateway, F as setAutoConnectEnabled, x as readPendingBrowserPairing, l as discoverLocalGateway, D as saveExtensionLocalePreference, B as revokeAndForgetProfile, f as cancelPendingBrowserPairing, s as loadExtensionLocalePreference } from './assets/page-context-MuzjMBlJ.js';
+import { H as strictObject, u as number, d as boolean, I as string, c as array, _ as _enum, s as literal, v as object, n as discriminatedUnion, e as browserPageContextsInputSchema, A as record$1, K as unknown, J as t, q as gatewayFetch, M as MAX_BROWSER_CONTEXTS_PER_TURN, p as extensionLocale, w as openDatabase, a as RealtimeClient, R as REALTIME_PROTOCOL_VERSION, b as activeTabId, l as currentTabDescriptor, T as TAB_BINDING_PREFIX, r as getAccessProfile, z as readProfile, D as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, i as captureTabWithPermission, x as pairGateway, G as setAutoConnectEnabled, y as readPendingBrowserPairing, m as discoverLocalGateway, F as saveExtensionLocalePreference, C as revokeAndForgetProfile, f as cancelPendingBrowserPairing, t as loadExtensionLocalePreference } from './assets/page-context-CVvmTWZb.js';
 
 const AppContextResourceSchema = strictObject({
   kind: _enum(["note", "task", "project", "local_app"]),
@@ -46271,9 +46271,20 @@ function pairingErrorMessage(cause) {
   if (message.startsWith("PAIRING_ROUTE_PERMISSION_REQUIRED:")) {
     return t("errorNextRoutePermission");
   }
+  if (/Failed to start native messaging host|Access to the specified native messaging host is forbidden/i.test(message)) return t("errorLocalHostBlockedHelp");
   return message;
 }
 function SidePanelApp({ initialLocale, initialTheme }) {
+  const [controlPaused, setControlPaused] = reactExports.useState(false);
+  reactExports.useEffect(() => {
+    const refresh = () => {
+      void chrome.runtime.sendMessage({ type: "browser/get-status" }).then((status) => setControlPaused(status?.controlPaused === true)).catch(() => {
+      });
+    };
+    refresh();
+    const timer = setInterval(refresh, 1500);
+    return () => clearInterval(timer);
+  }, []);
   const [profile, setProfile] = reactExports.useState();
   const [invitation, setInvitation] = reactExports.useState("");
   const [confirmationCode, setConfirmationCode] = reactExports.useState("");
@@ -46396,7 +46407,7 @@ function SidePanelApp({ initialLocale, initialTheme }) {
       setLocalInvitation(local.invitation);
       await connect(local.invitation);
     } catch (cause) {
-      setError(cause instanceof Error ? cause.message : String(cause));
+      setError(pairingErrorMessage(cause));
       setState("unpaired");
     }
   }
@@ -46410,7 +46421,7 @@ function SidePanelApp({ initialLocale, initialTheme }) {
       setConfirmationCode("");
       setState("unpaired");
     } catch (cause) {
-      setError(cause instanceof Error ? cause.message : String(cause));
+      setError(pairingErrorMessage(cause));
       setState("unpaired");
     }
   }
@@ -46488,6 +46499,14 @@ function SidePanelApp({ initialLocale, initialTheme }) {
         ] }) : null
       ] })
     ] }),
+    controlPaused && /* @__PURE__ */ jsxRuntimeExports.jsxs("section", { className: "card", role: "alert", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx("p", { children: t("browserControlStopped") }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary", onClick: () => {
+        void chrome.runtime.sendMessage({ type: "browser/resume-control" }).then((result) => {
+          if (result?.ok) setControlPaused(false);
+        });
+      }, children: t("browserControlResume") })
+    ] }),
     state !== "online" ? /* @__PURE__ */ jsxRuntimeExports.jsxs("section", { className: "center", children: [
       state === "loading" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "muted", children: t("loading") }) : null,
       state === "unpaired" || state === "pairing" ? /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "card", children: [

package/dist/browser-ext/manifest.json

@@ -3,7 +3,7 @@
   "minimum_chrome_version": "120",
   "default_locale": "en",
   "name": "__MSG_appName__",
-  "version": "0.0.415",
+  "version": "0.0.416",
   "description": "__MSG_appDescription__",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpr4vpLC/nmvy+wiOWk3SWlp2nEZkFijfk8ivGw7StNZgCK90nOMvwhdEtlkk3GOWDvdVnq8HxCsM3UNQ8FnGUyerpH1FJXqXuradxeHf8ZxFjiQU/mIWfnKbUuONWQORon3/pigyoXoK/VUXgg0Wbm/rbVwsS0bv+25R6m+mZgBspOLeKuoH7ivhL+48WV6POtMBsFPZweY26477EM7ukh+56Ff5ENevB8ymxBBn7qK5ZoeZd2a23U8ioX5TsHfe6fnrjitPWjIxD8G0NoKQxcaa/Mo+xs+T6UiLKxP0wjz5bm7jB5H+CXtkRJqzBWUB0h+RSLJckzZfA8BAJrRwIDAQAB",
   "permissions": [

package/dist/extensions/telegram/xopc.extension.json

@@ -2,7 +2,7 @@
   "id": "telegram",
   "name": "Telegram Channel",
   "description": "Bundled Telegram Bot channel (private workspace sources; ships inside @xopcai/xopc dist/)",
-  "version": "0.0.415",
+  "version": "0.0.416",
   "kind": "channel",
   "main": "src/index.js",
   "channels": [