feat(extensions): implement iframe-based isolation with TinyBase sync#1957

Merged

yujonglee merged 13 commits intomainfrom

devin/1764287392-extension-iframe-isolation

Nov 28, 2025

Commits on Nov 27, 2025

feat(extensions): implement iframe-based isolation with TinyBase sync

devin-ai-integration[bot]
and
yujonglee
committed

Commits on Nov 28, 2025

fix: resolve TypeScript errors in iframe-sync and extensions

devin-ai-integration[bot]
and
yujonglee
committed
fix: pass scriptUrl from parent to iframe to avoid Tauri access issue

devin-ai-integration[bot]
and
yujonglee
committed
fix: bypass AuthProvider/BillingProvider for ext-host iframe route

devin-ai-integration[bot]
and
yujonglee
committed
fix: use dynamic import for MainAppLayout to prevent auth module loading in iframe

devin-ai-integration[bot]
and
yujonglee
committed
fix: guard auth.tsx against iframe context to prevent Tauri API access errors

devin-ai-integration[bot]
and
yujonglee
committed
fix: add __TAURI_INTERNALS__ polyfill in index.html for iframe context

devin-ai-integration[bot]
and
yujonglee
committed
fix: guard getCurrentWebviewWindowLabel call in iframe context

devin-ai-integration[bot]
and
yujonglee
committed
fix: rename extensions.d.ts to extensions.ts for proper module import

devin-ai-integration[bot]
and
yujonglee
committed
fix(security): address postMessage and iframe security issues

devin-ai-integration[bot]
and
yujonglee
committed
at least it work now
yujonglee
committed
fix(ext-host): add input validation and content-type check

devin-ai-integration[bot]
and
yujonglee
committed
fix(ext-host): add isMountedRef guards to prevent state updates after unmount

devin-ai-integration[bot]
and
yujonglee
committed