wield-mcp 0.0.0-stage → 0.1.2

package/dist/extension/confirm.js

@@ -0,0 +1,162 @@
+"use strict";
+(() => {
+  // apps/extension/src/ui/confirm.ts
+  var $ = (id2) => document.getElementById(id2);
+  var id = location.hash.slice(1);
+  var answered = false;
+  function el(tag, cls, text) {
+    const e = document.createElement(tag);
+    e.className = cls;
+    if (text !== void 0) e.textContent = text;
+    return e;
+  }
+  function setButtons(enabled) {
+    $("allow").disabled = !enabled;
+    $("deny").disabled = !enabled;
+  }
+  async function answer(allow) {
+    if (answered) return;
+    answered = true;
+    setButtons(false);
+    await chrome.runtime.sendMessage({ type: "ask_answer", id, allow });
+    window.close();
+  }
+  function gone(msg) {
+    $("main").replaceChildren(el("p", "ask-gone", msg));
+    document.querySelector(".ask-foot")?.remove();
+  }
+  function renderWrite(ask) {
+    const host = new URL(ask.site.origin).host;
+    document.title = `Wield \xB7 Allow on ${host}?`;
+    $("title").textContent = ask.info.summary || ask.task;
+    $("site").replaceChildren("on ", el("b", "", ask.site.name), ` \xB7 ${host}`);
+    const list = $("writes");
+    for (const w of ask.info.writes) {
+      const li = el("li", "ask-write");
+      const line = el("div", "ask-request");
+      line.append(el("span", "ask-method", w.method));
+      const whereHost = new URL(w.origin).host;
+      line.append(el("span", "ask-path", `${whereHost === host ? "" : whereHost}${w.path}`));
+      li.append(line);
+      if (w.body_preview) {
+        const pre = el("pre", "ask-body-preview");
+        let text = w.body_preview;
+        try {
+          text = JSON.stringify(JSON.parse(text), null, 2);
+        } catch {
+        }
+        pre.textContent = text;
+        pre.setAttribute("aria-label", "Exactly what is sent");
+        li.append(pre);
+      } else if (w.body_fields.length) {
+        const fields = el("ul", "ask-fields");
+        fields.setAttribute("aria-label", "Fields sent");
+        for (const f of w.body_fields) fields.append(el("li", "ask-field", f));
+        li.append(fields);
+      } else {
+        li.append(el("p", "ask-nofields", "No form fields"));
+      }
+      list.append(li);
+    }
+    $("write").hidden = false;
+    $("note").textContent = `Sent from this browser to ${host} only, with your own login. One Allow covers this one task.`;
+    $("allow").addEventListener("click", () => void answer(true));
+  }
+  function renderPermission(ask) {
+    const host = new URL(ask.site.origin).host;
+    document.body.dataset.kind = "permission";
+    document.title = `Wield \xB7 Use ${host}?`;
+    $("kind").textContent = "New site";
+    $("eyebrow").textContent = "Your agent wants to use a new site";
+    $("title").textContent = `Let Wield use ${host}?`;
+    $("site").replaceChildren(el("b", "", ask.site.name), ` \xB7 for \u201C${ask.task}\u201D`);
+    $("perm-text").textContent = `Wield runs the task in your own tab of ${host}, with your own login. Requests go only to that site.`;
+    $("perm").hidden = false;
+    $("note").textContent = "Nothing is sent until you allow it.";
+    $("allow").textContent = "Allow access";
+    $("allow").addEventListener("click", async () => {
+      let granted = false;
+      try {
+        granted = await chrome.permissions.request({ origins: [`${ask.site.origin}/*`] });
+      } catch {
+        granted = false;
+      }
+      void answer(granted);
+    });
+  }
+  function renderDraft(ask) {
+    const host = new URL(ask.site.origin).host;
+    document.body.dataset.kind = "draft";
+    document.title = `Wield \xB7 Test a new recipe on ${host}?`;
+    $("kind").textContent = "New recipe";
+    $("eyebrow").textContent = "Your agent wants to test a recipe it just built";
+    $("title").textContent = `Test \u201C${ask.task}\u201D on ${host}?`;
+    $("site").replaceChildren("Not signed or published yet. It runs once in your tab of ", el("b", "", host), ", with your login.");
+    const foreign = (ask.draft?.origins ?? []).filter((o) => o.foreign).map((o) => new URL(o.origin).host);
+    for (const o of ask.draft?.origins ?? []) {
+      const host2 = new URL(o.origin).host;
+      $("draft-origins").append(o.foreign ? el("li", "ask-field ask-field-foreign", `\u26A0 ${host2} (not ${ask.draft.domain})`) : el("li", "ask-field", host2));
+    }
+    if (foreign.length) {
+      const warn = $("draft-warning");
+      warn.textContent = `This recipe would also send requests to ${foreign.join(", ")}, which ${foreign.length === 1 ? "is" : "are"} not part of ${ask.draft.domain}. A page you recorded can make another site look like part of the task. Deny unless you expected ${foreign.length === 1 ? "this site" : "these sites"}.`;
+      warn.hidden = false;
+    }
+    for (const s of ask.draft?.steps ?? []) {
+      const li = el("li", "ask-write");
+      const line = el("div", "ask-request");
+      line.append(el("span", "ask-method", s.method), el("span", "ask-path", s.url));
+      li.append(line);
+      $("draft-steps").append(li);
+    }
+    $("draft").hidden = false;
+    $("note").textContent = "Anything that changes something on a site still asks you again before it is sent.";
+    $("allow").textContent = "Run the test";
+    $("allow").addEventListener("click", () => void answer(true));
+  }
+  function renderRecord(ask) {
+    const host = new URL(ask.site.origin).host;
+    document.body.dataset.kind = "record";
+    document.title = `Wield \xB7 Record on ${host}?`;
+    $("kind").textContent = "Recording";
+    $("eyebrow").textContent = "Your agent asks you to show it a task";
+    $("title").textContent = ask.task ? `Show Wield how to \u201C${ask.task}\u201D on ${host}?` : `Record a task on ${host}?`;
+    $("site").replaceChildren(el("b", "", host));
+    $("perm-text").textContent = "You do the task once in your own tab. Wield notes the requests that page makes, removes logins, cookies, tokens and what you type, and shows you exactly what it would send. Nothing leaves your browser until you click Send.";
+    $("perm").hidden = false;
+    $("perm-chrome").hidden = true;
+    $("note").textContent = "A Wield bar stays in the page while it records, with Done and Cancel.";
+    $("allow").textContent = "Allow recording";
+    $("allow").addEventListener("click", () => void answer(true));
+  }
+  async function main() {
+    const key = `ask:${id}`;
+    const ask = (await chrome.storage.session.get(key))[key];
+    if (!ask) return gone("This request has expired. Nothing was sent.");
+    if (ask.kind === "write" && ask.info) renderWrite(ask);
+    else if (ask.kind === "record") renderRecord(ask);
+    else if (ask.kind === "draft") renderDraft(ask);
+    else renderPermission(ask);
+    $("deny").addEventListener("click", () => void answer(false));
+    document.addEventListener("keydown", (e) => e.key === "Escape" && void answer(false));
+    setButtons(true);
+    $("deny").focus();
+    const total = Math.max(1, ask.expires_at - Date.now());
+    const bar = $("timer-bar");
+    bar.style.transitionDuration = `${total}ms`;
+    requestAnimationFrame(() => requestAnimationFrame(() => bar.classList.add("run")));
+    const tick = () => {
+      const left = Math.max(0, Math.round((ask.expires_at - Date.now()) / 1e3));
+      if (left <= 0) {
+        setButtons(false);
+        $("countdown").textContent = "No answer, so nothing was sent.";
+        clearInterval(timer);
+        return;
+      }
+      $("countdown").textContent = `No answer in ${Math.floor(left / 60)}:${String(left % 60).padStart(2, "0")} means no.`;
+    };
+    tick();
+    const timer = setInterval(tick, 1e3);
+  }
+  void main();
+})();