Repository navigation
release: 3.2.0 Chrome Web Store readiness - #40
Merged
Merged
Conversation
Fix three extension pages that failed in a real MV3 load: the Library imported vendor helpers from a nonexistent src/vendor/, and share.html and whats-new.html ran inline scripts the extension CSP blocks (plus an inline onsubmit on the Ask bar that let Enter reload the Library). Drop the tabs and webNavigation permissions and the unused claude.ai, grok.com, and pypi.org/pypi hosts. The ChatGPT loopback callback is read via tabs.onUpdated with the existing localhost host permission, so the install prompt no longer asks to read browsing history. Add a deterministic, validated store package (npm run package), a release consistency gate (npm run check:release), PRIVACY.md and a website privacy page, a store submission kit with permission justifications and brand assets, an honest config-driven install CTA, an agents (MCP) docs page with a wmcp.sh pointer, a clear OLLAMA_ORIGINS fix for local Ollama 403s, and refreshed lockfiles for new high-severity advisories. Cut 3.2.0 across manifest, package, CHANGELOG, What's New, README, and the website. Amp-Thread-ID: https://ampcode.com/threads/T-01a135b8-65da-7511-9a0e-72a5ad5dff0f Co-authored-by: aisle9angel@gmail.com <aisle9angel@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Prepares RepoLens 3.2.0 as the first Chrome Web Store build.
Blockers fixed (found by loading the extension in Chrome 155):
src/library.jsimported./vendor/*.mjs(nonexistent since the move intosrc/).share.htmlandwhats-new.htmlused inline scripts blocked by the MV3 CSP (share card stuck on "Loading…", What's New blank below the hero); moved tosrc/share.js/src/whats-new.js.onsubmiton the Ask bar was blocked, so Enter reloaded the Library.Permissions: dropped
tabs,webNavigation, and unusedclaude.ai,grok.com,pypi.org/pypihosts — no more "read your browsing history" install warning. Verified in Chrome that extension-page tab queries and the ChatGPT loopback callback viatabs.onUpdatedstill work without them.Distribution:
npm run package→ deterministic, validateddist/repolens-v3.2.0.zip(+ sha256). Validation rejects inline scripts/handlers, unresolved imports/page URLs, wrong icon sizes, dev files, manifest limits, version drift, and permissions without a store justification. It catches all of the bugs above on currentmain.npm run check:releasekeeps manifest/package/lockfile/CHANGELOG/What's New/README/website versions in sync; CI runs both and uploads the zip; tag pushes attach it to a GitHub Release.PRIVACY.md+/docs/privacy,docs/store/chrome-web-store.md(listing copy, single purpose, data disclosures, permission justifications, asset checklist), store icon + small promo tile.CHROME_WEB_STORE_URLis set; new "Use from your agent" MCP page with a wmcp.sh pointer; footer version from release data.OLLAMA_ORIGINS=chrome-extension://*.Checks:
npm run verify(982 tests, lint, HTML, format, release consistency, package), root/MCP audits, MCP syntax, website lint + build.https://ampcode.com/threads/T-01a135b8-65da-7511-9a0e-72a5ad5dff0f