sliccy 6.130.0 → 6.131.0

package/dist/node-server/_shared/handoff-link.d.ts

@@ -0,0 +1,90 @@
+/**
+ * SLICC handoff link extractor.
+ *
+ * Replaces the legacy `x-slicc` response header with two custom rels carried
+ * in a standard RFC 8288 `Link` header:
+ *
+ *   Link: <https://github.com/owner/repo>; rel="https://www.sliccy.ai/rel/upskill"
+ *   Link: <>; rel="https://www.sliccy.ai/rel/handoff";
+ *         title*=UTF-8''Continue%20the%20signup%20flow
+ *
+ * SLICC dispatches by rel — the rel IS the verb. New verbs add new rels under
+ * the `https://www.sliccy.ai/rel/` namespace.
+ */
+import type { ParsedLink } from './link-header.js';
+export declare const HANDOFF_REL = "https://www.sliccy.ai/rel/handoff";
+export declare const UPSKILL_REL = "https://www.sliccy.ai/rel/upskill";
+/**
+ * CDP `Network.Response.headers` bag. Values are strings at runtime (same-name
+ * headers joined with `\n`); the protocol envelope leaves them untyped until
+ * `getLinkHeaderValuesFromCdp` narrows.
+ */
+export type CdpHeaderBag = Record<string, unknown>;
+export type HandoffVerb = 'handoff' | 'upskill';
+export interface HandoffMatch {
+    verb: HandoffVerb;
+    /**
+     * Absolute URL when the verb's payload is a URL (e.g. upskill points at a
+     * GitHub repo). For prose-only verbs (handoff), this resolves to the page
+     * itself via the empty `<>` anchor convention.
+     */
+    target: string;
+    /** Free-form prose instruction from the link's `title` parameter, if any. */
+    instruction?: string;
+    /**
+     * Optional branch name carried by the upskill rel's `branch` Link param.
+     * Only populated for the upskill verb; the handoff verb ignores both
+     * `branch` and `path` because its target is the page itself, not a repo.
+     */
+    branch?: string;
+    /**
+     * Optional sub-path under the upskill rel's repo carried by the `path`
+     * Link param. Canonical directory form: a trailing `/SKILL.md` (which
+     * some emitters include to point at the manifest itself) is stripped so
+     * downstream consumers always see the skill's containing directory.
+     * Only populated for the upskill verb.
+     */
+    path?: string;
+}
+export declare function isSafeUpskillBranch(value: string): boolean;
+export declare function isSafeUpskillPath(value: string): boolean;
+export declare function extractHandoff(links: ParsedLink[]): HandoffMatch | null;
+/**
+ * Stable identity for a handoff/upskill payload, independent of the page URL
+ * that advertised it.
+ *
+ * A site can emit the same SLICC `Link` rel on every page response (e.g. a
+ * site-wide upskill pointing at one repo). Keying dedup on the page URL would
+ * never collapse those because the path changes on every navigation, while the
+ * payload (`verb` + `target` repo + `branch` + `path`, or for the prose
+ * `handoff` verb the page `target` + `instruction`) stays constant. Keying on
+ * this fingerprint lets callers process a given handoff once and silently drop
+ * repeat sightings of the same payload within a session.
+ *
+ * The NUL separator can't appear in any of the parts (URLs, git refs, paths,
+ * and the RFC 8187-decoded title are all NUL-free), so concatenation is
+ * collision-free without hashing.
+ */
+export declare function handoffFingerprint(input: {
+    verb: string;
+    target: string;
+    branch?: string;
+    path?: string;
+    instruction?: string;
+}): string;
+export declare function extractHandoffFromCdpHeaders(headers: CdpHeaderBag | undefined, baseUrl?: string): {
+    match: HandoffMatch | null;
+    links: ParsedLink[];
+};
+export declare function extractHandoffFromWebRequest(headers: Array<{
+    name: string;
+    value?: string;
+}> | undefined, baseUrl?: string): {
+    match: HandoffMatch | null;
+    links: ParsedLink[];
+};
+export declare function extractHandoffFromFetchHeaders(headers: Headers | undefined, baseUrl?: string): {
+    match: HandoffMatch | null;
+    links: ParsedLink[];
+};
+//# sourceMappingURL=handoff-link.d.ts.map

package/dist/node-server/_shared/handoff-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff-link.d.ts","sourceRoot":"","sources":["../src/handoff-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAQnD,eAAO,MAAM,WAAW,sCAAuC,CAAC;AAChE,eAAO,MAAM,WAAW,sCAAuC,CAAC;AAEhE;;;;GAIG;AAEH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEnD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,WAAW,CAAC;IAClB;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAiDD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAO1D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMxD;AAuCD,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,YAAY,GAAG,IAAI,CAevE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAQT;AAID,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,OAAO,CAAC,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAA;CAAE,CAKrD;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAAS,EAC5D,OAAO,CAAC,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAA;CAAE,CAKrD;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,OAAO,CAAC,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAA;CAAE,CAKrD"}

package/dist/node-server/_shared/handoff-link.js

@@ -0,0 +1,192 @@
+/**
+ * SLICC handoff link extractor.
+ *
+ * Replaces the legacy `x-slicc` response header with two custom rels carried
+ * in a standard RFC 8288 `Link` header:
+ *
+ *   Link: <https://github.com/owner/repo>; rel="https://www.sliccy.ai/rel/upskill"
+ *   Link: <>; rel="https://www.sliccy.ai/rel/handoff";
+ *         title*=UTF-8''Continue%20the%20signup%20flow
+ *
+ * SLICC dispatches by rel — the rel IS the verb. New verbs add new rels under
+ * the `https://www.sliccy.ai/rel/` namespace.
+ */
+import { SLICC_HOSTED_ORIGIN } from './bridge-protocol.js';
+import { getLinkHeaderValuesFromCdp, getLinkHeaderValuesFromHeaders, getLinkHeaderValuesFromWebRequest, parseLinkHeader, } from './link-header.js';
+export const HANDOFF_REL = `${SLICC_HOSTED_ORIGIN}/rel/handoff`;
+export const UPSKILL_REL = `${SLICC_HOSTED_ORIGIN}/rel/upskill`;
+/** Strip a trailing `/SKILL.md` (case-insensitive) so callers see a directory. */
+function canonicaliseUpskillPath(raw) {
+    const trimmed = raw.replace(/\/+$/, '');
+    const lower = trimmed.toLowerCase();
+    if (lower.endsWith('/skill.md'))
+        return trimmed.slice(0, -'/skill.md'.length);
+    if (lower === 'skill.md')
+        return '';
+    return trimmed;
+}
+/**
+ * Shell-metacharacter allowlists for `branch` and `path` Link params.
+ *
+ * The `Link` header is attacker-controlled (any page the user opens can
+ * emit one). The cone consumes the navigate-lick body verbatim and
+ * follows the `handoff` SKILL instruction to render `upskill --branch
+ * <b> --path <p> <target>` as a `bash` tool call — a string the WASM
+ * shell tokenizes. If `b` or `p` carry `;`, backticks, dollar-paren,
+ * or a trailing newline, an unquoted/mis-quoted splice could smuggle
+ * a second command past the approval card's visible code rows.
+ *
+ * Defense-in-depth: drop unsafe values here so they never enter the
+ * lick body the cone reads. The `upskill` command also re-validates
+ * (`upskill-command.ts` imports `isSafeUpskillBranch` /
+ * `isSafeUpskillPath`) as a second gate in case a future dispatch
+ * path bypasses this extractor.
+ *
+ * The allowlists are intentionally narrow:
+ *
+ * - Branch: `git check-ref-format` characters (alphanumerics, `.`,
+ *   `_`, `/`, `-`). `..` segments, a leading `-`/`/`, a trailing `/`,
+ *   and a `.lock` suffix are rejected to match git's own rules. Max
+ *   length 250 (git's `MAX_REF_NAMELEN`).
+ * - Path: same character set as branches; no `..` traversal, no
+ *   leading `-` (avoids being parsed as a flag) or leading `/` (the
+ *   wire format is repo-relative). Max length 1024.
+ *
+ * Anything beyond ASCII is rejected on purpose: a homoglyph branch
+ * name would render identical to a real one in the approval card but
+ * resolve to a different ref. Real git branches in the wild are
+ * ASCII; the cost of rejecting unicode here is low and the
+ * homoglyph-spoofing surface this closes is meaningful.
+ */
+const SAFE_BRANCH_RE = /^[A-Za-z0-9._/-]+$/;
+const SAFE_PATH_RE = /^[A-Za-z0-9._/-]+$/;
+const MAX_BRANCH_LEN = 250;
+const MAX_PATH_LEN = 1024;
+export function isSafeUpskillBranch(value) {
+    if (value.length === 0 || value.length > MAX_BRANCH_LEN)
+        return false;
+    if (!SAFE_BRANCH_RE.test(value))
+        return false;
+    if (value.startsWith('-') || value.startsWith('/') || value.endsWith('/'))
+        return false;
+    if (value.includes('..'))
+        return false;
+    if (value.endsWith('.lock'))
+        return false;
+    return true;
+}
+export function isSafeUpskillPath(value) {
+    if (value.length === 0 || value.length > MAX_PATH_LEN)
+        return false;
+    if (!SAFE_PATH_RE.test(value))
+        return false;
+    if (value.startsWith('-') || value.startsWith('/'))
+        return false;
+    if (value.includes('..'))
+        return false;
+    return true;
+}
+/**
+ * Find the first SLICC-recognised handoff link in a parsed Link header set.
+ *
+ * Rel comparison is case-sensitive: RFC 8288 §2.1.1 mandates URI rels, and
+ * generic URI comparison is case-sensitive in path/query. Scheme and host
+ * are case-insensitive, but our canonical form uses lowercase already.
+ *
+ * For the upskill verb, optional `branch` and `path` Link params are
+ * surfaced on the match so the dispatch path can pass them through to the
+ * `upskill` command's `--branch` / `--path` flags. These params are
+ * upskill-only — they are ignored on the handoff verb (whose target is the
+ * page itself, not a git tree).
+ */
+/**
+ * Populate optional upskill params (branch, path) on a match.
+ *
+ * `parseLinkHeader` lowercases param names and applies RFC 8187 ext-value
+ * decoding, so `branch`, `branch*=UTF-8''…`, `BRANCH=…` all land under
+ * the same `branch` key.
+ *
+ * Shell-injection defense: drop branch/path values that contain anything
+ * outside the allowlist (see `isSafeUpskillBranch` / `isSafeUpskillPath`).
+ * The values ride to the cone inside a navigate-lick body, then back out as
+ * flag arguments to the `upskill` bash command — every character has to be
+ * safe both as JSON content and as an argv token. Silent drop matches the
+ * existing "empty value -> field omitted" contract.
+ */
+function applyUpskillParams(result, params) {
+    const branch = params.branch;
+    if (typeof branch === 'string' && isSafeUpskillBranch(branch))
+        result.branch = branch;
+    const pathParam = params.path;
+    if (typeof pathParam === 'string' && pathParam.length > 0) {
+        const canon = canonicaliseUpskillPath(pathParam);
+        if (canon.length > 0 && isSafeUpskillPath(canon))
+            result.path = canon;
+    }
+}
+export function extractHandoff(links) {
+    for (const link of links) {
+        if (link.rel.includes(HANDOFF_REL)) {
+            const result = { verb: 'handoff', target: link.href };
+            if (link.title != null && link.title.length > 0)
+                result.instruction = link.title;
+            return result;
+        }
+        if (link.rel.includes(UPSKILL_REL)) {
+            const result = { verb: 'upskill', target: link.href };
+            if (link.title != null && link.title.length > 0)
+                result.instruction = link.title;
+            applyUpskillParams(result, link.params);
+            return result;
+        }
+    }
+    return null;
+}
+/**
+ * Stable identity for a handoff/upskill payload, independent of the page URL
+ * that advertised it.
+ *
+ * A site can emit the same SLICC `Link` rel on every page response (e.g. a
+ * site-wide upskill pointing at one repo). Keying dedup on the page URL would
+ * never collapse those because the path changes on every navigation, while the
+ * payload (`verb` + `target` repo + `branch` + `path`, or for the prose
+ * `handoff` verb the page `target` + `instruction`) stays constant. Keying on
+ * this fingerprint lets callers process a given handoff once and silently drop
+ * repeat sightings of the same payload within a session.
+ *
+ * The NUL separator can't appear in any of the parts (URLs, git refs, paths,
+ * and the RFC 8187-decoded title are all NUL-free), so concatenation is
+ * collision-free without hashing.
+ */
+export function handoffFingerprint(input) {
+    return [
+        input.verb,
+        input.target,
+        input.branch ?? '',
+        input.path ?? '',
+        input.instruction ?? '',
+    ].join('\u0000');
+}
+/* ────────── header-shape adapters that go straight to a verb match ────────── */
+export function extractHandoffFromCdpHeaders(headers, baseUrl) {
+    const values = getLinkHeaderValuesFromCdp(headers);
+    if (values.length === 0)
+        return { match: null, links: [] };
+    const links = parseLinkHeader(values, baseUrl);
+    return { match: extractHandoff(links), links };
+}
+export function extractHandoffFromWebRequest(headers, baseUrl) {
+    const values = getLinkHeaderValuesFromWebRequest(headers);
+    if (values.length === 0)
+        return { match: null, links: [] };
+    const links = parseLinkHeader(values, baseUrl);
+    return { match: extractHandoff(links), links };
+}
+export function extractHandoffFromFetchHeaders(headers, baseUrl) {
+    const values = getLinkHeaderValuesFromHeaders(headers);
+    if (values.length === 0)
+        return { match: null, links: [] };
+    const links = parseLinkHeader(values, baseUrl);
+    return { match: extractHandoff(links), links };
+}
+//# sourceMappingURL=handoff-link.js.map

package/dist/node-server/_shared/handoff-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff-link.js","sourceRoot":"","sources":["../src/handoff-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,iCAAiC,EACjC,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,mBAAmB,cAAc,CAAC;AAChE,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,mBAAmB,cAAc,CAAC;AAsChE,kFAAkF;AAClF,SAAS,uBAAuB,CAAC,GAAW;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9E,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAC5C,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAC1C,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH;;;;;;;;;;;;;GAaG;AACH,SAAS,kBAAkB,CAAC,MAAoB,EAAE,MAA8B;IAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,mBAAmB,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;IAC9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;IACxE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,MAAM,MAAM,GAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACpE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;YACjF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,MAAM,MAAM,GAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACpE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;YACjF,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAMlC;IACC,OAAO;QACL,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,MAAM,IAAI,EAAE;QAClB,KAAK,CAAC,IAAI,IAAI,EAAE;QAChB,KAAK,CAAC,WAAW,IAAI,EAAE;KACxB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACnB,CAAC;AAED,kFAAkF;AAElF,MAAM,UAAU,4BAA4B,CAC1C,OAAiC,EACjC,OAAgB;IAEhB,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAA4D,EAC5D,OAAgB;IAEhB,MAAM,MAAM,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAA4B,EAC5B,OAAgB;IAEhB,MAAM,MAAM,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACjD,CAAC"}

package/dist/node-server/_shared/iframe-repaint.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Whether this page itself is running inside another frame (e.g. a cherry
+ * follower embedded in a third-party host page's iframe). A sprinkle's or
+ * dip's own render iframe is then nested two levels deep instead of one,
+ * which hits a Chromium first-paint bug: the innermost iframe's content
+ * loads and executes correctly but the compositor never rasterizes it,
+ * leaving the panel blank until something forces a full frame-tree repaint
+ * (DevTools attaching, or a page reload). `nudgeIframeRepaint` works around
+ * it without either of those.
+ *
+ * DOM globals (`window`, `HTMLIFrameElement`, `requestAnimationFrame`) are
+ * read through `globalThis` with local structural types rather than the
+ * ambient `lib.dom` identifiers: this module is only ever RUN in a browser,
+ * but it is also type-checked by non-browser tsconfig projects that compile
+ * `@slicc/shared-ts` source without the `DOM` lib (the worker/CLI/node-server
+ * projects) — see this package's Conventions in CLAUDE.md.
+ */
+export declare function isNestedInAnotherFrame(): boolean;
+/** Structural subset of `HTMLIFrameElement` this module needs. */
+interface RepaintableIframe {
+    style: {
+        display: string;
+    };
+    isConnected: boolean;
+}
+/**
+ * Force the browser to redo the render/compositing pass for `iframe` by
+ * toggling `display` off and back on across two animation frames. A resize
+ * event or explicit layout read (`getBoundingClientRect`) does NOT trigger
+ * the missing repaint for this bug — only a `display` toggle (or an
+ * out-of-band event like DevTools attaching) does.
+ *
+ * In nested cross-origin frames (cherry follower inside a host page), the
+ * single nudge on load can race with the compositor's frame-tree commit.
+ * A safety-net retry fires after 500ms, but ONLY when the first nudge was
+ * restored by the setTimeout fallback (indicating rAF was throttled and the
+ * compositor likely didn't commit). When rAF fires normally the retry is
+ * skipped — the compositor was responsive and the nudge almost certainly
+ * took effect.
+ *
+ * Re-entrancy-safe: the dip mount fires this from BOTH the iframe `load`
+ * handler AND an IntersectionObserver, which can overlap. A second call that
+ * landed mid-nudge would read the transient `display:'none'` as
+ * `previousDisplay` and "restore" the iframe to hidden — leaving dips
+ * permanently invisible in nested followers (the extension side panel). When a
+ * nudge is already pending we skip: the in-flight one will restore the correct
+ * display, so we just run the callback.
+ */
+export declare function nudgeIframeRepaint(iframe: RepaintableIframe, onDone?: () => void): void;
+export {};
+//# sourceMappingURL=iframe-repaint.d.ts.map

package/dist/node-server/_shared/iframe-repaint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iframe-repaint.d.ts","sourceRoot":"","sources":["../src/iframe-repaint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,wBAAgB,sBAAsB,IAAI,OAAO,CAchD;AAED,kEAAkE;AAClE,UAAU,iBAAiB;IACzB,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;CACtB;AASD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,MAAM,IAAI,GAAG,IAAI,CAoBvF"}

package/dist/node-server/_shared/iframe-repaint.js

@@ -0,0 +1,118 @@
+/**
+ * Whether this page itself is running inside another frame (e.g. a cherry
+ * follower embedded in a third-party host page's iframe). A sprinkle's or
+ * dip's own render iframe is then nested two levels deep instead of one,
+ * which hits a Chromium first-paint bug: the innermost iframe's content
+ * loads and executes correctly but the compositor never rasterizes it,
+ * leaving the panel blank until something forces a full frame-tree repaint
+ * (DevTools attaching, or a page reload). `nudgeIframeRepaint` works around
+ * it without either of those.
+ *
+ * DOM globals (`window`, `HTMLIFrameElement`, `requestAnimationFrame`) are
+ * read through `globalThis` with local structural types rather than the
+ * ambient `lib.dom` identifiers: this module is only ever RUN in a browser,
+ * but it is also type-checked by non-browser tsconfig projects that compile
+ * `@slicc/shared-ts` source without the `DOM` lib (the worker/CLI/node-server
+ * projects) — see this package's Conventions in CLAUDE.md.
+ */
+export function isNestedInAnotherFrame() {
+    try {
+        // Read through `globalThis.window`, not `globalThis` itself: in a real
+        // browser `window === globalThis`, so the two are equivalent, but a test
+        // harness that stubs a separate `window` object (assigning only
+        // `globalThis.window`, not replacing `globalThis`) needs this to resolve
+        // the SAME way a bare `window.self`/`window.top` reference would.
+        const win = globalThis.window ?? globalThis;
+        return win.self !== win.top;
+    }
+    catch {
+        // Cross-origin access to `window.top` throws — that itself means we're
+        // framed by a different origin, which is the case this guards against.
+        return true;
+    }
+}
+/** Iframes with a repaint nudge currently in flight (display toggled off,
+ *  restore pending). Guards against overlapping nudges corrupting the restore
+ *  value — see {@link nudgeIframeRepaint}. */
+const nudgeInFlight = new WeakSet();
+/**
+ * Force the browser to redo the render/compositing pass for `iframe` by
+ * toggling `display` off and back on across two animation frames. A resize
+ * event or explicit layout read (`getBoundingClientRect`) does NOT trigger
+ * the missing repaint for this bug — only a `display` toggle (or an
+ * out-of-band event like DevTools attaching) does.
+ *
+ * In nested cross-origin frames (cherry follower inside a host page), the
+ * single nudge on load can race with the compositor's frame-tree commit.
+ * A safety-net retry fires after 500ms, but ONLY when the first nudge was
+ * restored by the setTimeout fallback (indicating rAF was throttled and the
+ * compositor likely didn't commit). When rAF fires normally the retry is
+ * skipped — the compositor was responsive and the nudge almost certainly
+ * took effect.
+ *
+ * Re-entrancy-safe: the dip mount fires this from BOTH the iframe `load`
+ * handler AND an IntersectionObserver, which can overlap. A second call that
+ * landed mid-nudge would read the transient `display:'none'` as
+ * `previousDisplay` and "restore" the iframe to hidden — leaving dips
+ * permanently invisible in nested followers (the extension side panel). When a
+ * nudge is already pending we skip: the in-flight one will restore the correct
+ * display, so we just run the callback.
+ */
+export function nudgeIframeRepaint(iframe, onDone) {
+    if (nudgeInFlight.has(iframe)) {
+        onDone?.();
+        return;
+    }
+    // Track whether rAF restored (compositor responsive) vs setTimeout fallback.
+    let rafRestored = false;
+    performNudge(iframe, onDone, () => {
+        rafRestored = true;
+    });
+    // Safety-net retry: fires only when the first nudge fell back to setTimeout
+    // (rAF was throttled), meaning the compositor likely didn't commit the frame
+    // tree in time for the first toggle to take effect.
+    setTimeout(() => {
+        if (rafRestored)
+            return;
+        if (!iframe.isConnected)
+            return;
+        performNudge(iframe);
+    }, 500);
+}
+function performNudge(iframe, onDone, onRafRestore) {
+    if (nudgeInFlight.has(iframe)) {
+        onDone?.();
+        return;
+    }
+    nudgeInFlight.add(iframe);
+    const previousDisplay = iframe.style.display;
+    iframe.style.display = 'none';
+    // In cross-origin iframes, rAF can be throttled. Use setTimeout as a
+    // fallback ceiling so the restore always fires within a bounded time.
+    let restored = false;
+    const restore = (viaRaf) => {
+        if (restored)
+            return;
+        restored = true;
+        iframe.style.display = previousDisplay;
+        nudgeInFlight.delete(iframe);
+        if (viaRaf)
+            onRafRestore?.();
+        onDone?.();
+    };
+    // rAF may be absent — a non-browser context, or (the common case) a test
+    // whose 500ms safety-net setTimeout fires AFTER the test tore down its jsdom
+    // global. Guard it so a missing rAF just falls through to the setTimeout
+    // ceiling below rather than throwing an unhandled `requestAnimationFrame is
+    // not a function` (which fails the whole vitest run — see #1603's merge-queue
+    // flake). In a real browser rAF is always present, so behavior is unchanged.
+    const raf = globalThis
+        .requestAnimationFrame;
+    if (typeof raf === 'function') {
+        raf(() => {
+            raf(() => restore(true));
+        });
+    }
+    setTimeout(() => restore(false), 100);
+}
+//# sourceMappingURL=iframe-repaint.js.map

package/dist/node-server/_shared/iframe-repaint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iframe-repaint.js","sourceRoot":"","sources":["../src/iframe-repaint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC;QACH,uEAAuE;QACvE,yEAAyE;QACzE,gEAAgE;QAChE,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,GAAG,GAAI,UAAuC,CAAC,MAAM,IAAK,UAA0B,CAAC;QAC3F,OAAO,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,GAAG,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,uEAAuE;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAQD;;8CAE8C;AAC9C,MAAM,aAAa,GAAG,IAAI,OAAO,EAAqB,CAAC;AAIvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,EAAE,MAAmB;IAC/E,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,6EAA6E;IAC7E,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE;QAChC,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,6EAA6E;IAC7E,oDAAoD;IACpD,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,WAAW;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO;QAChC,YAAY,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC,EAAE,GAAG,CAAC,CAAC;AACV,CAAC;AAED,SAAS,YAAY,CACnB,MAAyB,EACzB,MAAmB,EACnB,YAAyB;IAEzB,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;IAE9B,qEAAqE;IACrE,sEAAsE;IACtE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,CAAC,MAAe,EAAE,EAAE;QAClC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,eAAe,CAAC;QACvC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,MAAM;YAAE,YAAY,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,EAAE,CAAC;IACb,CAAC,CAAC;IAEF,yEAAyE;IACzE,6EAA6E;IAC7E,yEAAyE;IACzE,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,GAAG,GAAI,UAAkE;SAC5E,qBAAqB,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,EAAE;YACP,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IACD,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC"}

package/dist/node-server/_shared/index.d.ts

@@ -2,13 +2,21 @@ export * from './agent-wire-types.js';
 export * from './base64.js';
 export * from './bridge-protocol.js';
 export * from './cdp-frame-unmask.js';
+export * from './cdp-target-info.js';
 export * from './content-type.js';
+export * from './discovery-link.js';
 export * from './electron-overlay-route.js';
+export * from './extension-bridge-protocol.js';
 export * from './fetch-proxy-protocol.js';
 export * from './form-body-unmask.js';
+export * from './handoff-link.js';
+export * from './iframe-repaint.js';
+export * from './leader-ext-id.js';
+export * from './link-header.js';
 export * from './loopback.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
+export * from './proxy-headers.js';
 export * from './runtime-env.js';
 export * from './secret-env-schema.js';
 export * from './secret-masking.js';
@@ -22,4 +30,5 @@ export * from './transcript-redaction.js';
 export * from './tray-signaling.js';
 export * from './tray-sync-protocol.js';
 export * from './tray-url-shared.js';
+export * from './well-known-probe.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/node-server/_shared/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/node-server/_shared/index.js

@@ -3,13 +3,21 @@ export * from './agent-wire-types.js';
 export * from './base64.js';
 export * from './bridge-protocol.js';
 export * from './cdp-frame-unmask.js';
+export * from './cdp-target-info.js';
 export * from './content-type.js';
+export * from './discovery-link.js';
 export * from './electron-overlay-route.js';
+export * from './extension-bridge-protocol.js';
 export * from './fetch-proxy-protocol.js';
 export * from './form-body-unmask.js';
+export * from './handoff-link.js';
+export * from './iframe-repaint.js';
+export * from './leader-ext-id.js';
+export * from './link-header.js';
 export * from './loopback.js';
 export * from './oauth-extra-domains-storage.js';
 export * from './preview-url.js';
+export * from './proxy-headers.js';
 export * from './runtime-env.js';
 export * from './secret-env-schema.js';
 export * from './secret-masking.js';
@@ -23,4 +31,5 @@ export * from './transcript-redaction.js';
 export * from './tray-signaling.js';
 export * from './tray-sync-protocol.js';
 export * from './tray-url-shared.js';
+export * from './well-known-probe.js';
 //# sourceMappingURL=index.js.map

package/dist/node-server/_shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/node-server/_shared/leader-ext-id.d.ts

@@ -0,0 +1,16 @@
+/**
+ * URL query parameter the service worker appends to the pinned leader-tab
+ * URL carrying the extension id. The leader page reads it to open the
+ * `chrome.runtime.connect(<id>, { name: EXTENSION_BRIDGE_PORT_NAME })` Port
+ * (see `extension-bridge-protocol.ts`) — `chrome.runtime.id` is undefined on
+ * an externally_connectable page, so the id must be passed in out of band.
+ *
+ * Deliberately its own one-export module (#2276 slice E round-1 review)
+ * rather than living inside `extension-bridge-protocol.ts`: two first-load
+ * page files (`ui/boot/setup-standalone-prelude.ts`,
+ * `ui/llm-proxy-sw-config.ts`) import only this constant, and pulling in the
+ * whole 240-line envelope-type module for one string constant unnecessarily
+ * widens whatever a bundler decides is reachable from the eager page graph.
+ */
+export declare const LEADER_EXT_ID_QUERY_NAME = "ext";
+//# sourceMappingURL=leader-ext-id.d.ts.map

package/dist/node-server/_shared/leader-ext-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leader-ext-id.d.ts","sourceRoot":"","sources":["../src/leader-ext-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,wBAAwB,QAAQ,CAAC"}

package/dist/node-server/_shared/leader-ext-id.js

@@ -0,0 +1,16 @@
+/**
+ * URL query parameter the service worker appends to the pinned leader-tab
+ * URL carrying the extension id. The leader page reads it to open the
+ * `chrome.runtime.connect(<id>, { name: EXTENSION_BRIDGE_PORT_NAME })` Port
+ * (see `extension-bridge-protocol.ts`) — `chrome.runtime.id` is undefined on
+ * an externally_connectable page, so the id must be passed in out of band.
+ *
+ * Deliberately its own one-export module (#2276 slice E round-1 review)
+ * rather than living inside `extension-bridge-protocol.ts`: two first-load
+ * page files (`ui/boot/setup-standalone-prelude.ts`,
+ * `ui/llm-proxy-sw-config.ts`) import only this constant, and pulling in the
+ * whole 240-line envelope-type module for one string constant unnecessarily
+ * widens whatever a bundler decides is reachable from the eager page graph.
+ */
+export const LEADER_EXT_ID_QUERY_NAME = 'ext';
+//# sourceMappingURL=leader-ext-id.js.map

package/dist/node-server/_shared/leader-ext-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leader-ext-id.js","sourceRoot":"","sources":["../src/leader-ext-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC"}