opencode-browser-annotation-plugin 0.6.0 → 0.6.2

package/extension/icons/icon.svg

@@ -0,0 +1,27 @@
+<svg width="128" height="128" viewBox="0 0 128 128" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="0" y2="128" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#22262e"/>
+      <stop offset="1" stop-color="#15171c"/>
+    </linearGradient>
+    <linearGradient id="mint" x1="34" y1="30" x2="94" y2="98" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#7ef0c8"/>
+      <stop offset="1" stop-color="#39c79a"/>
+    </linearGradient>
+  </defs>
+
+  <!-- rounded dark badge -->
+  <rect x="4" y="4" width="120" height="120" rx="28" fill="url(#bg)"/>
+  <rect x="4.5" y="4.5" width="119" height="119" rx="27.5" fill="none" stroke="#3a3f49" stroke-width="1"/>
+
+  <!-- element-picker corner brackets (mint) -->
+  <g stroke="url(#mint)" stroke-width="7" stroke-linecap="round" stroke-linejoin="round" fill="none">
+    <path d="M34 50 V38 A4 4 0 0 1 38 34 H50"/>
+    <path d="M78 34 H90 A4 4 0 0 1 94 38 V50"/>
+    <path d="M34 78 V90 A4 4 0 0 1 38 94 H50"/>
+  </g>
+
+  <!-- cursor / pick arrow, lower-right, on top of brackets -->
+  <path d="M66 60 L98 74 L83 80 L91 98 L82 102 L74 84 L62 92 Z"
+        fill="#ffffff" stroke="#15171c" stroke-width="3" stroke-linejoin="round"/>
+</svg>

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "OpenCode Browser Annotation",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Alt+A to annotate an element, Alt+Shift+A for the annotation list. Sends element metadata to your OpenCode agent.",
   "permissions": [
     "activeTab",
@@ -16,8 +16,20 @@
     "service_worker": "background.js",
     "type": "module"
   },
+  "icons": {
+    "16": "icons/icon-16.png",
+    "32": "icons/icon-32.png",
+    "48": "icons/icon-48.png",
+    "128": "icons/icon-128.png"
+  },
   "action": {
-    "default_title": "OpenCode Annotation — Alt+A to pick, Alt+Shift+A for list"
+    "default_title": "OpenCode Annotation — Alt+A to pick, Alt+Shift+A for list",
+    "default_icon": {
+      "16": "icons/icon-16.png",
+      "32": "icons/icon-32.png",
+      "48": "icons/icon-48.png",
+      "128": "icons/icon-128.png"
+    }
   },
   "options_page": "options.html",
   "commands": {

package/extension/overlay.js

@@ -355,9 +355,18 @@
     try {
       const tag = el.tagName.toLowerCase();
       const attrs = [];
+      const nameAttr = el.getAttribute("name") || "";
+      const typeAttr = el.getAttribute("type") || "";
+      // Redact the value= of any input whose name/type looks sensitive (CSRF
+      // tokens, passwords, hidden auth fields), regardless of input type.
+      const valueIsSecret = SECRET_ATTR.test(nameAttr) || /password|hidden/i.test(typeAttr);
       for (const a of Array.from(el.attributes || [])) {
+        // Skip class/style: class is already captured (cleaned) in `classes`,
+        // and inline style is noise. This avoids duplication and the ugly
+        // mid-class truncation.
+        if (a.name === "class" || a.name === "style") continue;
         let v = a.value;
-        if (SECRET_ATTR.test(a.name) || (a.name === "value" && /password|hidden/i.test(el.getAttribute("type") || ""))) {
+        if (SECRET_ATTR.test(a.name) || (a.name === "value" && valueIsSecret)) {
           v = "[redacted]";
         } else if (v && v.length > 120) {
           v = v.slice(0, 120) + "…";
@@ -365,7 +374,7 @@
         attrs.push(v === "" ? a.name : `${a.name}="${v}"`);
       }
       const open = `<${tag}${attrs.length ? " " + attrs.join(" ") : ""}>`;
-      return open.slice(0, 600);
+      return open;
     } catch {
       return undefined;
     }
@@ -395,6 +404,9 @@
       framework: fw ? fw.framework : undefined,
       html: safeOpenTag(el),
     };
+    // Drop the opening tag if it carries no attributes beyond the tag name
+    // (redundant with `tag` once class/style are excluded).
+    if (m.html && /^<[a-z0-9-]+>$/i.test(m.html)) delete m.html;
     for (const k of Object.keys(m)) if (m[k] === undefined) delete m[k];
     if (Array.isArray(m.ancestors) && m.ancestors.length === 0) delete m.ancestors;
     return m;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-browser-annotation-plugin",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Select an element in your browser, type an instruction, and send it to your OpenCode agent over a loopback + SSH tunnel. Text and element metadata only (no screenshots).",
   "keywords": [
     "opencode",
@@ -34,6 +34,7 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
+    "pack:ext": "node scripts/pack-extension.mjs",
     "prepublishOnly": "npm run build"
   },
   "peerDependencies": {