Keep client secrets in add-on storage; host only verifies and serves the local API.

2026-09-22 07:42:10 -04:00
parent de0814f3ed
commit 41c83dabac
13 changed files with 185 additions and 290 deletions
@@ -5,9 +5,9 @@ const manage = document.getElementById("manage");

 browser.runtime.sendMessage({ type: "status" }).then((info) => {
  if (info && info.hostUp) {
-    statusEl.textContent = `Host connected on 127.0.0.1:${info.port}`;
+    statusEl.textContent = "Local script access is on.";
  } else {
-    statusEl.textContent = "Native host is not connected. Is it installed?";
+    statusEl.textContent = "You can still issue secrets. Local script access needs the native host.";
  }
 });