port: from the old factory (tea-mcp/src/persimmons-extension), as it was, 2026-10-14

connection.mjs

@@ -0,0 +1,77 @@
+import {runJuice, juiceRequest, giteaToken} from './juice.mjs';
+import {vaultUnlocked, vaultUsername, useVaultCredential} from './vault-worker.mjs';
+import {CONNECTION} from './connection-state.mjs';
+import {vaultRequest} from './human-api.mjs';
+
+function trustedPage(message, sender, type) {
+  return sender.origin === 'https://persimmons.app' &&
+    new URL(sender.url).origin === sender.origin && sender.frameId === 0 &&
+    message?.type === type;
+}
+
+export async function connectionStatus(message, sender) {
+  if (!trustedPage(message, sender, 'persimmons.connection.v1')) return null;
+  const result = {connected: false, version: chrome.runtime.getManifest().version};
+  if (!/^[a-z0-9][a-z0-9_.-]{0,99}$/.test(message.owner)) return result;
+  const hint = (await chrome.storage.local.get(CONNECTION))[CONNECTION];
+  if (hint?.owner && hint.owner !== message.owner) return result;
+  try {
+    const data = await vaultRequest('GET', message.owner);
+    if (!hint?.owner) await chrome.storage.local.set({[CONNECTION]: {owner: message.owner}});
+    const storageId = `human-vault:https://persimmons.app:${message.owner}`;
+    result.connected = true;
+    result.initialized = !!(await chrome.storage.local.get(storageId))[storageId];
+    result.unlocked = vaultUnlocked(message.owner);
+    result.empty = data.items.length === 0;
+  } catch {}
+  return result;
+}
+export async function vaultInventory(message, sender) {
+  if (!trustedPage(message, sender, 'persimmons.inventory.v1')) return null;
+  if (!/^[a-z0-9][a-z0-9_.-]{0,99}$/.test(message.owner)) return null;
+  const hint = (await chrome.storage.local.get(CONNECTION))[CONNECTION];
+  if (hint?.owner !== message.owner || !vaultUnlocked(message.owner)) return null;
+  try {
+    const data = await vaultRequest('GET', hint.owner);
+    const items = [];
+    for (const metadata of data.items) {
+      const full = await vaultRequest('GET', hint.owner, metadata.id);
+      const username = await vaultUsername(hint.owner, full.item);
+      if (typeof username === 'string' && username) {
+        items.push({id: metadata.id, origin: metadata.origin, username});
+      }
+    }
+    return {items};
+  } catch {
+    return null;
+  }
+}
+
+async function liveJuice(owner) {
+  const hint = (await chrome.storage.local.get(CONNECTION))[CONNECTION];
+  if (hint?.owner !== owner) throw new Error();
+  await vaultRequest('GET', owner);
+}
+let juiceBusy = false;
+export async function juiceMessage(message, sender) {
+  if (juiceBusy) return {ok: false, message: 'A Juice operation is already running.'};
+  juiceBusy = true;
+  try {
+    return await runJuice(message, sender, {
+      live: liveJuice,
+      unlocked: async owner => {
+        if (!vaultUnlocked(owner) || !(await chrome.storage.local.get(`human-vault:https://persimmons.app:${owner}`))[`human-vault:https://persimmons.app:${owner}`]) throw new Error();
+      },
+      source: async (owner, id) => (await vaultRequest('GET', owner, id)).item,
+      use: useVaultCredential, request: juiceRequest, provider: giteaToken,
+      id: () => crypto.randomUUID().replaceAll('-', '')
+    });
+  } finally { juiceBusy = false; }
+}
+
+// External responses contain only status, operation IDs and safe username metadata.
+chrome.runtime.onMessageExternal.addListener((message, sender, reply) => {
+  const work = message?.type === 'persimmons.juice.v1' ? juiceMessage(message, sender) : message?.type === 'persimmons.inventory.v1' ? vaultInventory(message, sender) : connectionStatus(message, sender);
+  work.then(reply, () => reply(null));
+  return true;
+});