extension-develop 4.1.15 → 4.1.16

package/dist/0~rspack-config.mjs

@@ -10277,6 +10277,26 @@ class AddDependencies {
         });
     }
 }
+const DEV_INJECTED_PERMISSIONS_MV3 = [
+    "scripting",
+    'tabs',
+    'management',
+    'storage'
+];
+const DEV_INJECTED_PERMISSIONS_MV2 = [
+    'tabs',
+    'storage'
+];
+function devInjectedPermissions(manifestVersion) {
+    return 3 === manifestVersion ? DEV_INJECTED_PERMISSIONS_MV3 : DEV_INJECTED_PERMISSIONS_MV2;
+}
+const PARTIALLY_GATED_APIS = {
+    tabs: "Some chrome.tabs methods run without the permission, but the tab url, title and favIconUrl fields and the url and title query filters come back empty without it."
+};
+function partiallyGatedNote(api) {
+    const note = PARTIALLY_GATED_APIS[api];
+    return note ? ` ${note}` : '';
+}
 function persistentPatchFor(manifest) {
     return 3 === manifest.manifest_version ? {} : {
         persistent: true
@@ -10527,11 +10547,6 @@ function patchWebResourcesV3(manifest) {
         }
     ];
 }
-const INJECTED_PERMISSION_APIS = [
-    'storage',
-    "scripting",
-    'management'
-];
 function findInjectedOnlyPermissionUses(compilation, declared, injected) {
     const firstOffenderByApi = new Map();
     const candidates = injected.filter((api)=>!declared.has(api));
@@ -10609,40 +10624,19 @@ class ApplyDevDefaults {
                         ...optionalPermissions
                     ]
                 ]);
-                const devInjectedPermissions = 3 === canonicalManifest.manifest_version ? [
-                    "scripting",
-                    'tabs',
-                    'management',
-                    'storage'
-                ] : [
-                    'tabs',
-                    'storage'
-                ];
-                for (const permission of devInjectedPermissions)if (optionalPermissions.has(permission) && !(canonicalManifest.permissions || []).includes(permission)) pushDevWarning('DevPromotedOptionalPermissionWarning', `manifest.json lists "${permission}" under optional_permissions, but the dev build needs it and lists it under permissions too. Listed in both means required, so in development it is granted at install and your runtime request flow never runs. The production build keeps it optional.`);
-                for (const match of contentScriptMatches)if (optionalHosts.has(match)) pushDevWarning('DevPromotedOptionalHostWarning', `manifest.json keeps "${match}" optional, but a content script matches it and the dev build grants that host at install so it can re-inject the script on save. In development the host is required; the production build keeps it optional.`);
+                const injectedPermissions = devInjectedPermissions(canonicalManifest.manifest_version);
+                for (const permission of injectedPermissions)if (optionalPermissions.has(permission) && !(canonicalManifest.permissions || []).includes(permission)) pushDevWarning('DevPromotedOptionalPermissionWarning', `manifest.json lists "${permission}" under optional_permissions, but the dev build needs it and lists it under permissions too. Listed in both means required, so in development it is granted at install and your runtime request flow never runs. The production build keeps it optional.`);
+                for (const match of contentScriptMatches)if (optionalHosts.has(match)) pushDevWarning('DevPromotedOptionalHostWarning', `manifest.json keeps "${match}" optional, but a content script matches it and the dev build grants that host at install so it can re-inject the script on save. In development the host is required. The production build keeps it optional.`);
                 const patchedManifest = {
                     ...canonicalManifest,
                     content_security_policy: 3 === canonicalManifest.manifest_version ? patchV3CSP(canonicalManifest) : patchV2CSP(canonicalManifest),
-                    ...3 === canonicalManifest.manifest_version ? {
-                        permissions: [
-                            ...new Set([
-                                "scripting",
-                                'tabs',
-                                'management',
-                                'storage',
-                                ...canonicalManifest.permissions || []
-                            ])
-                        ]
-                    } : {
-                        permissions: [
-                            ...new Set([
-                                'tabs',
-                                'storage',
-                                ...contentScriptMatches,
-                                ...canonicalManifest.permissions || []
-                            ])
-                        ]
-                    },
+                    permissions: [
+                        ...new Set([
+                            ...injectedPermissions,
+                            ...3 === canonicalManifest.manifest_version ? [] : contentScriptMatches,
+                            ...canonicalManifest.permissions || []
+                        ])
+                    ],
                     ...hostPermissionsPatch,
                     ...patchBackground(canonicalManifest, this.browser),
                     ...patchExternallyConnectable(canonicalManifest),
@@ -10650,14 +10644,11 @@ class ApplyDevDefaults {
                 };
                 try {
                     const declared = new Set(canonicalManifest.permissions || []);
-                    const injectedForEra = 3 === canonicalManifest.manifest_version ? INJECTED_PERMISSION_APIS : [
-                        'storage'
-                    ];
-                    const uses = findInjectedOnlyPermissionUses(compilation, declared, injectedForEra);
+                    const uses = findInjectedOnlyPermissionUses(compilation, declared, injectedPermissions);
                     for (const [api, file] of uses){
                         const relative = __rspack_external_path.relative(__rspack_external_path.dirname(this.manifestPath), file);
                         const text = optionalPermissions.has(api) ? `manifest.json only lists the "${api}" permission under optional_permissions, but ${relative} uses chrome.${api}. It works in development only because the dev instrumentation injects "${api}" as required: the production build has it only after a runtime chrome.permissions.request, so guard the use or move "${api}" to permissions.` : `manifest.json does not declare the "${api}" permission, but ${relative} uses chrome.${api}. It works in development only because the dev instrumentation injects "${api}": the production build will fail at runtime. Add "${api}" to permissions in manifest.json.`;
-                        pushDevWarning('DevInjectedPermissionWarning', text);
+                        pushDevWarning('DevInjectedPermissionWarning', text + partiallyGatedNote(api));
                     }
                 } catch  {}
                 const source = JSON.stringify(patchedManifest, null, 2);

package/dist/101.mjs

@@ -352,7 +352,7 @@ async function isUsingExperimentalConfig(projectPath) {
     }
     return false;
 }
-var package_namespaceObject = /*#__PURE__*/ JSON.parse('{"rE":"4.1.15","El":{"@prefresh/core":"1.5.9","@prefresh/utils":"1.2.1","@rspack/core":"^2.1.1","@rspack/dev-server":"2.1.0","@rspack/plugin-preact-refresh":"2.0.1","@rspack/plugin-react-refresh":"2.0.2","@vue/compiler-sfc":"3.5.26","acorn":"^8.16.0","browser-extension-manifest-fields":"^2.3.1","case-sensitive-paths-webpack-plugin":"^2.4.0","content-security-policy-parser":"^0.6.0","dotenv":"^17.2.3","es-module-lexer":"^2.1.0","extension-from-store":"^0.2.5","fflate":"^0.8.3","go-git-it":"^5.1.5","ignore":"^7.0.5","less":"4.6.7","less-loader":"13.0.0","parse5-utilities":"^1.0.0","pintor":"0.3.0","postcss":"8.5.23","postcss-loader":"8.2.1","postcss-preset-env":"11.1.1","postcss-scss":"4.0.9","preact":"10.27.3","prefers-yarn":"2.0.1","react-refresh":"0.18.0","sass-loader":"17.0.0","schema-utils":"^4.3.3","svelte-loader":"3.2.4","tiny-glob":"^0.2.9","vue":"3.5.26","vue-loader":"17.4.2","webextension-polyfill":"^0.12.0","webpack-merge":"^6.0.1","webpack-target-webextension":"^2.1.3","ws":"^8.20.1"}}');
+var package_namespaceObject = /*#__PURE__*/ JSON.parse('{"rE":"4.1.16","El":{"@prefresh/core":"1.5.9","@prefresh/utils":"1.2.1","@rspack/core":"^2.1.1","@rspack/dev-server":"2.1.0","@rspack/plugin-preact-refresh":"2.0.1","@rspack/plugin-react-refresh":"2.0.2","@vue/compiler-sfc":"3.5.26","acorn":"^8.16.0","browser-extension-manifest-fields":"^2.3.1","case-sensitive-paths-webpack-plugin":"^2.4.0","content-security-policy-parser":"^0.6.0","dotenv":"^17.2.3","es-module-lexer":"^2.1.0","extension-from-store":"^0.2.5","fflate":"^0.8.3","go-git-it":"^5.1.5","ignore":"^7.0.5","less":"4.6.7","less-loader":"13.0.0","parse5-utilities":"^1.0.0","pintor":"0.3.0","postcss":"8.5.23","postcss-loader":"8.2.1","postcss-preset-env":"11.1.1","postcss-scss":"4.0.9","preact":"10.27.3","prefers-yarn":"2.0.1","react-refresh":"0.18.0","sass-loader":"17.0.0","schema-utils":"^4.3.3","svelte-loader":"3.2.4","tiny-glob":"^0.2.9","vue":"3.5.26","vue-loader":"17.4.2","webextension-polyfill":"^0.12.0","webpack-merge":"^6.0.1","webpack-target-webextension":"^2.1.3","ws":"^8.20.1"}}');
 function sanitize(obj) {
     return Object.fromEntries(Object.entries(obj || {}).filter(([, value])=>void 0 !== value));
 }

package/dist/plugin-web-extension/feature-manifest/steps/apply-dev-defaults-lib/dev-injected-permissions.d.ts

@@ -0,0 +1,2 @@
+export declare function devInjectedPermissions(manifestVersion: unknown): readonly string[];
+export declare function partiallyGatedNote(api: string): string;

package/package.json

@@ -43,7 +43,7 @@
     "runtime"
   ],
   "name": "extension-develop",
-  "version": "4.1.15",
+  "version": "4.1.16",
   "description": "Develop, build, preview, and package Extension.js projects.",
   "author": {
     "name": "Cezar Augusto",