harden: list and end site connections made without Remember in Settings #419

Merged
clawbot merged 1 commits from issue-406-revoke-session-connection into next 2026-10-04 06:41:41 +02:00
1 Commits
Author SHA1 Message Date
clawbot b931866e70 harden: list and end site connections made without Remember in Settings (closes #406)
check / check (push) Successful in 3m2s
e2e / e2e-chrome (push) Successful in 3m53s
e2e / e2e-firefox (push) Successful in 3m15s
A site allowed without "Remember" lives only in the background's
in-memory connectedSites map. Settings never listed it, and
AUTISTMASK_REMOVE_SITE, sent on every remove, did nothing, so the user
could not end such a connection.

Settings now asks the background for those sites and lists them under
Connected Sites. Removing a site from Allowed Sites or Connected Sites
drops its remembered entry under every address and sends
AUTISTMASK_REMOVE_SITE with the hostname; the background deletes every
matching connectedSites entry and sends accountsChanged with an empty
list to the site's tabs. Only the extension's own pages may send either
message.

Model: opus-5-5
2026-10-04 03:13:02 +00:00