roder-ext-chrome 0.1.1

Agentic software development tools and SDKs for Roder.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

//! Action classification for browser commands.
//!
//! Roder policy gates browser actions in two layers beyond the per-origin site
//! permissions enforced inside the extension:
//!
//! * **Protected** actions (eval, downloads, uploads, navigation, form submits)
//!   require explicit approval and only run in `control` mode.
//! * **Prohibited** actions (CAPTCHA bypass, raw payment/credential handling) are
//!   refused outright and never reach the browser.

use roder_api::chrome::ChromePermissionMode;

/// How a browser command is treated by Roder policy.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum ChromeActionClass {
    /// Read-only inspection; allowed in `assist`/`control` when the site permits.
    Inspect,
    /// Ordinary interaction (click/type/scroll); allowed in `control`.
    Interact,
    /// High-risk; requires explicit approval and `control` mode.
    Protected,
    /// Refused outright.
    Prohibited,
}

/// Classify a wire command `kind` (e.g. `"page/click"`).
pub fn classify_action(kind: &str) -> ChromeActionClass {
    match kind {
        // Refused outright.
        "page/captcha" | "page/solveCaptcha" => ChromeActionClass::Prohibited,

        // High-risk, approval + control mode.
        "page/eval" | "page/upload" | "page/download" | "tab/navigate" => {
            ChromeActionClass::Protected
        }

        // Interaction.
        "page/click" | "page/type" | "page/keypress" | "page/scroll" | "page/select"
        | "tab/open" | "tab/close" | "tab/activate" | "tabs/group" => ChromeActionClass::Interact,

        // Everything else (snapshot, screenshot, tabs/list, debug reads, chat,
        // permissions queries, recording) is inspection.
        _ => ChromeActionClass::Inspect,
    }
}

/// Returns `Err(reason)` if `kind` may not run under `mode`. The extension also
/// enforces per-origin site permissions; this is the host-side action gate.
pub fn guard(kind: &str, mode: ChromePermissionMode) -> Result<(), String> {
    match classify_action(kind) {
        ChromeActionClass::Prohibited => Err(format!(
            "browser action {kind:?} is prohibited and cannot be performed"
        )),
        ChromeActionClass::Protected if mode != ChromePermissionMode::Control => Err(format!(
            "browser action {kind:?} is protected and requires control mode plus explicit approval"
        )),
        ChromeActionClass::Interact if mode == ChromePermissionMode::Observe => Err(format!(
            "browser action {kind:?} requires assist or control mode"
        )),
        _ => Ok(()),
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn prohibited_actions_are_refused_in_every_mode() {
        for mode in [
            ChromePermissionMode::Observe,
            ChromePermissionMode::Assist,
            ChromePermissionMode::Control,
        ] {
            assert!(guard("page/captcha", mode).is_err());
        }
    }

    #[test]
    fn protected_actions_require_control_mode() {
        assert!(guard("page/eval", ChromePermissionMode::Assist).is_err());
        assert!(guard("page/eval", ChromePermissionMode::Control).is_ok());
    }

    #[test]
    fn inspection_allowed_in_assist() {
        assert!(guard("page/snapshot", ChromePermissionMode::Assist).is_ok());
        assert_eq!(classify_action("tabs/list"), ChromeActionClass::Inspect);
    }
}