菜单
Manifest V3 extension gotchas — the three execution worlds, key custody, CSP / no-remote-code, the ephemeral service worker, and the typed message bus. Use when touching the manifest, wxt.config.ts, entrypoints, cross-world messaging, or when something behaves differently in the extension than in tests.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Implement or modify the in-browser live-edit engine — DOM mutation primitives, the element picker, stable-selector heuristics, and the changeset recorder. Use when touching src/dom, src/entrypoints/content.ts, or src/shared/changeset.ts, or when the task mentions live editing, DOM tools, selectors, or recording changes.
Assemble an accepted changeset and dispatch the implementation handoff over MCP to ai-dev / developerz.ai. Use when touching src/mcp, the ship flow in src/entrypoints/background.ts, or when the task mentions handoff, shipping a design, MCP task creation, or turning edits into a PR.
SolidJS + single-responsibility conventions for the side-panel UI — one component per file with co-located SCSS, thin stores, no logic in components. Use when creating or editing anything under src/entrypoints/sidepanel, Solid components, signals/stores, or SCSS.
Testing patterns for the extension — Vitest unit + integration projects and Playwright E2E on a loaded extension. Use when writing or fixing tests, setting up mocks for the agent loop / DOM tools / MCP, or when CI test jobs fail.
| name | mv3 |
| description | Manifest V3 extension gotchas — the three execution worlds, key custody, CSP / no-remote-code, the ephemeral service worker, and the typed message bus. Use when touching the manifest, wxt.config.ts, entrypoints, cross-world messaging, or when something behaves differently in the extension than in tests. |
Three worlds, strict separation (load-bearing). See docs/idea/extension.md, docs/architecture/mv3-worlds.md.
| World | File | Has | NEVER has |
|---|---|---|---|
| Service worker | src/entrypoints/background.ts | keys, network, agent loop, MCP, changeset store | DOM |
| Content script | src/entrypoints/content.ts | DOM, picker, recorder | keys, tokens, network to model/MCP |
| Side panel | src/entrypoints/sidepanel/ | SolidJS UI (own origin, CSP-clean) | page trust |
eval. Solid is prebuilt to static JS — that's why we prebuild with Bun/WXT.chrome.storage.session; rehydrate on wake. Never assume an in-memory Map survives.panel ↔ sw ↔ content messages are Zod-validated in src/shared/messages.ts. No any across the bus.Least privilege. host_permissions opt-in per site (or activeTab); broad access via optional_host_permissions the user grants. Don't add a permission without a reason.