archive/yaklang-chrome-extension
1
0
Fork 0
mirror of https://github.com/yaklang/yaklang-chrome-extension.git synced 2026-09-27 05:31:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Enhance architecture documentation and update project dependencies. Introduce new features for browser recording, page callables, and transform capabilities. Improve build scripts and permissions for better functionality.

Browse Source
This commit is contained in:
go0p
2026-08-06 15:11:35 +08:00
committed by go0p
parent 0371a8b802
commit af5a4db694
125 changed files with 25018 additions and 1675 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/features/grants/service.ts
+128 -25
View File
@@ -5,12 +5,23 @@ import {
stopNetworkCapturesForGrant,
} from '@/features/network-capture/service';
import {
clearPageObservations, listPageObservations, pageObservationStatus, startPageObservation,
stopPageObservation, stopPageObservationsForGrant,
} from '@/features/page-observation/service';
browserRecordingStatus, clearBrowserRecording, createRecordedPageCallable, getBrowserRecording, startBrowserRecording,
stopBrowserRecording, stopBrowserRecordingsForGrant,
} from '@/features/browser-recording/service';
import {
createCapturedPageCallable, deepCaptureStatus, detachDeepCapture,
keepDeepCaptureAlive, resumeDeepCapture,
startDeepCapture, stopDeepCapturesForGrant,
} from '@/features/deep-capture/service';
import { deletePageCallable, executePageCallable, listPageCallables } from '@/features/page-callable/service';
import {
deleteBrowserTransformProfile, executeBrowserTransform, getBrowserTransformProfile,
listBrowserTransformProfiles, saveBrowserTransformProfile,
} from '@/features/browser-transform/service';
import { capturedRequestEnginePayload } from '@/features/network-capture/workflows';
import type {
BridgeGrant, BrowserRequestAnalysisBundle, BrowserTarget, CapabilityScope, HandoffReason,
BridgeGrant, BrowserDeepCaptureMatcher, BrowserRequestAnalysisBundle, BrowserTarget,
BrowserTransformExecuteInput, BrowserTransformProfileInput, CapabilityScope, HandoffReason,
PageContextOptions, YakPocGenerateResult,
} from '@/types/models';
import { CONTROL_CAPABILITY_SCOPES, READ_CAPABILITY_SCOPES } from '@/protocol/capabilities';
@@ -46,11 +57,24 @@ const CAPABILITY_SCOPES: Record<string, CapabilityScope> = {
'browser.network.export': 'browser.network.sensitive.read',
'browser.network.poc': 'browser.network.sensitive.read',
'browser.network.analysis': 'browser.network.sensitive.read',
'browser.observe.start': 'browser.observation.control',
'browser.observe.status': 'browser.observation.read',
'browser.observe.list': 'browser.observation.read',
'browser.observe.clear': 'browser.observation.control',
'browser.observe.stop': 'browser.observation.control',
'browser.recording.start': 'browser.recording.control',
'browser.recording.status': 'browser.recording.read',
'browser.recording.get': 'browser.recording.read',
'browser.recording.clear': 'browser.recording.control',
'browser.recording.stop': 'browser.recording.control',
'browser.callable.create': 'browser.callable.execute',
'browser.callable.list': 'browser.recording.read',
'browser.callable.execute': 'browser.callable.execute',
'browser.callable.delete': 'browser.callable.execute',
'browser.deep_capture.start': 'browser.debugger.control',
'browser.deep_capture.status': 'browser.debugger.read',
'browser.deep_capture.keepalive': 'browser.debugger.control',
'browser.deep_capture.resume': 'browser.debugger.control',
'browser.deep_capture.detach': 'browser.debugger.control',
'browser.transform.profile.list': 'browser.transform.read',
'browser.transform.profile.save': 'browser.transform.manage',
'browser.transform.profile.delete': 'browser.transform.manage',
'browser.transform.execute': 'browser.transform.execute',
'browser.invoke': 'browser.page.invoke',
'browser.eval': 'browser.page.eval.expression',
'proxy.list': 'browser.proxy.read',
@@ -71,7 +95,8 @@ async function activeGrant(required: CapabilityScope): Promise<BridgeGrant> {
}));
await Promise.all([
stopNetworkCapturesForGrant(grant.id),
stopPageObservationsForGrant(grant.id),
stopBrowserRecordingsForGrant(grant.id),
stopDeepCapturesForGrant(grant.id),
]);
await setAgentRuntimeState('expired', grant);
if (state.handoff) await browser.action.setBadgeText({ text: '', tabId: state.handoff.target.tabId });
@@ -91,7 +116,11 @@ function originOf(url: string): string {
}
}
async function allowedTarget(grant: BridgeGrant, input: Record<string, unknown>): Promise<BrowserTarget> {
async function allowedTarget(
grant: BridgeGrant,
input: { tabId?: unknown; frameId?: unknown; documentId?: unknown },
resolveInPage = true,
): Promise<BrowserTarget> {
const requested = typeof input.tabId === 'number' ? input.tabId : grant.targets[0]?.tabId;
const requestedFrameId = typeof input.frameId === 'number' ? input.frameId : 0;
const target = grant.targets.find((item) => item.tabId === requested && item.frameId === requestedFrameId);
@@ -109,6 +138,7 @@ async function allowedTarget(grant: BridgeGrant, input: Record<string, unknown>)
if (typeof input.documentId === 'string' && target.documentId && input.documentId !== target.documentId) {
throw new ExtensionError('stale_document', '请求的页面文档已经失效，请重新授权');
}
if (!resolveInPage) return target;
const resolved = await resolveDocumentTarget(target);
if (target.documentId && resolved.documentId && target.documentId !== resolved.documentId) {
throw new ExtensionError('stale_document', '目标页面已经刷新或导航，请重新授权');
@@ -225,32 +255,105 @@ export async function routeCapability(
if (!requestEngine) throw new ExtensionError('bridge_disconnected', 'Yak 引擎请求通道不可用');
return requestEngine<BrowserRequestAnalysisBundle>(
'yakit.browser_request.prepare_analysis',
await capturedRequestEnginePayload(target, String(input.id), grant.scopes.includes('browser.observation.read')),
await capturedRequestEnginePayload(target, String(input.id), grant.scopes.includes('browser.recording.read')),
);
}
}
if (method.startsWith('browser.observe.')) {
if (method.startsWith('browser.recording.')) {
const target = await allowedTarget(grant, input);
if (method === 'browser.observe.start') {
if (input.captureValues === true) requireScope(grant, 'browser.observation.sensitive.read');
return startPageObservation(target, {
if (method === 'browser.recording.start') {
if (input.captureValues === true) requireScope(grant, 'browser.recording.sensitive.read');
return startBrowserRecording(target, {
captureValues: input.captureValues === true,
maxEntries: typeof input.maxEntries === 'number' ? input.maxEntries : undefined,
maxValueBytes: typeof input.maxValueBytes === 'number' ? input.maxValueBytes : undefined,
expiresAt: grant.expiresAt,
}, { kind: 'grant', grantId: grant.id });
}
if (method === 'browser.observe.status') return pageObservationStatus(target);
if (method === 'browser.observe.list') {
return listPageObservations(
target,
typeof input.limit === 'number' ? input.limit : 100,
grant.scopes.includes('browser.observation.sensitive.read'),
);
if (method === 'browser.recording.status') return browserRecordingStatus(target);
if (method === 'browser.recording.get') return getBrowserRecording(
target,
typeof input.limit === 'number' ? input.limit : 500,
grant.scopes.includes('browser.recording.sensitive.read'),
);
if (method === 'browser.recording.clear') return clearBrowserRecording(target, grant.scopes.includes('browser.recording.sensitive.read'));
if (method === 'browser.recording.stop') return stopBrowserRecording(target, grant.scopes.includes('browser.recording.sensitive.read'));
}
if (method.startsWith('browser.callable.')) {
const source = String(input.source || '');
const target = await allowedTarget(grant, input, source !== 'deep-capture');
if (method === 'browser.callable.list') return listPageCallables(target);
if (method === 'browser.callable.create') {
if (source === 'deep-capture') {
requireScope(grant, 'browser.debugger.control');
const strategy = input.strategy === 'expression' ? 'expression' : 'selected-frame';
return createCapturedPageCallable(target, String(input.callFrameId || ''), strategy === 'expression' ? {
strategy,
name: String(input.name || ''),
functionExpression: String(input.functionExpression || ''),
} : {
strategy,
name: typeof input.name === 'string' ? input.name : undefined,
}, { kind: 'grant', grantId: grant.id });
}
return createRecordedPageCallable(target, {
callHandleId: String(input.callHandleId || ''),
name: String(input.name || ''),
});
}
if (method === 'browser.callable.execute') {
return executePageCallable(target, String(input.callableId || ''), Array.isArray(input.args) ? input.args : []);
}
if (method === 'browser.callable.delete') return deletePageCallable(target, String(input.callableId || ''));
}
if (method.startsWith('browser.deep_capture.')) {
const target = await allowedTarget(grant, input, method === 'browser.deep_capture.start');
const owner = { kind: 'grant' as const, grantId: grant.id };
if (method === 'browser.deep_capture.start') {
return startDeepCapture(target, input.matcher as BrowserDeepCaptureMatcher, owner);
}
if (method === 'browser.deep_capture.status') return deepCaptureStatus(target, owner);
if (method === 'browser.deep_capture.keepalive') return keepDeepCaptureAlive(target, owner);
if (method === 'browser.deep_capture.resume') return resumeDeepCapture(target, 'engine-request', owner);
if (method === 'browser.deep_capture.detach') return detachDeepCapture(target, owner);
}
if (method.startsWith('browser.transform.')) {
if (method === 'browser.transform.profile.list') {
const profiles = await listBrowserTransformProfiles();
const visible = await Promise.all(profiles.map(async (profile) => {
try {
await allowedTarget(grant, profile.target);
return profile;
} catch {
return undefined;
}
}));
return visible.filter(Boolean);
}
if (method === 'browser.transform.profile.save') {
const profileInput = input as unknown as BrowserTransformProfileInput;
const target = await allowedTarget(grant, profileInput.target);
const grantedTarget = grant.targets.find((item) => item.tabId === target.tabId && item.frameId === target.frameId);
if (!grantedTarget || profileInput.origin !== grantedTarget.origin) {
throw new ExtensionError('target_denied', '转换配置来源不在本次共享会话中');
}
return saveBrowserTransformProfile({ ...profileInput, target });
}
if (method === 'browser.transform.profile.delete') {
const profile = await getBrowserTransformProfile(String(input.id || ''));
await allowedTarget(grant, profile.target);
return deleteBrowserTransformProfile(profile.id);
}
if (method === 'browser.transform.execute') {
const executeInput = input as unknown as BrowserTransformExecuteInput;
const profile = await getBrowserTransformProfile(executeInput.profileId);
await allowedTarget(grant, profile.target);
return executeBrowserTransform(executeInput);
}
if (method === 'browser.observe.clear') return clearPageObservations(target);
if (method === 'browser.observe.stop') return stopPageObservation(target);
}
if (method === 'browser.context') {