Replace Ed25519 with hashed API tokens and an in-Firefox client manager.

2026-09-22 07:24:35 -04:00
parent 55f7e863dc
commit 9242c01015
16 changed files with 487 additions and 339 deletions
@@ -0,0 +1,49 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <title>Firefox Agent Bridge</title>
+  <link rel="stylesheet" href="ui.css">
+</head>
+<body class="page">
+  <header>
+    <h1>Firefox Agent Bridge</h1>
+    <p class="muted">Issue a secret to each script or agent. The add-on keeps only a hash. Put the secret in an env var, vault, or <code>.env</code> — whatever you already use.</p>
+    <p id="status" class="muted"></p>
+  </header>
+
+  <section class="row">
+    <input id="name" type="text" maxlength="64" placeholder="Client name, e.g. cursor-agent" autocomplete="off">
+    <button id="create" type="button">Generate secret</button>
+  </section>
+  <p id="error" class="error" hidden></p>
+
+  <table>
+    <thead>
+      <tr>
+        <th>Name</th>
+        <th>Created</th>
+        <th>Last used</th>
+        <th></th>
+      </tr>
+    </thead>
+    <tbody id="rows">
+      <tr><td colspan="4" class="muted">Loading…</td></tr>
+    </tbody>
+  </table>
+
+  <dialog id="secret-modal">
+    <h2>Copy this secret now</h2>
+    <p class="muted">It will not be shown again. Store it the same way you store any other API token.</p>
+    <label class="sr">Secret</label>
+    <textarea id="secret" readonly rows="3"></textarea>
+    <p class="hint">Example: <code>set FAB_TOKEN=&lt;secret&gt;</code> then <code>python tools/client.py meta.methods</code></p>
+    <div class="row">
+      <button id="copy" type="button">Copy</button>
+      <button id="close" type="button">I saved it</button>
+    </div>
+  </dialog>
+
+  <script src="options.js"></script>
+</body>
+</html>