Test UserandClaude 8e8dd3840b fix(extension): never return a borrowed tab into another session's Agent Window ...

When a borrowed tab's original window is gone, tab_return's fallback
picker called getLastFocused({windowTypes:["normal"]}) and only
excluded the *current* session's Agent Window. Agent Windows are
created with type:"normal", so the picker could move a returned user
tab into *another* session's Agent Window. That session could then
write to the tab (it passes enforceAgentWindow), and the tab would be
destroyed when that session stops and closes its window — a
cross-session sandbox break plus silent user-data loss.

Thread an isAgentWindowId predicate (derived from SessionManager in
the production handlers, mirroring the existing filter in
borrow-confirmation's listConfirmationCandidates) through
returnBorrowedTab -> chooseFallbackWindow so every live Agent Window
is skipped as a fallback target.

Adds two regression tests (both fail on the unpatched code).

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-02 20:23:02 +08:00

..

assets

Initial public release

2026-06-22 17:36:26 +08:00

src

fix(extension): never return a borrowed tab into another session's Agent Window

2026-07-02 20:23:02 +08:00

.gitkeep

Initial public release

2026-06-22 17:36:26 +08:00

package.json

Initial public release

2026-06-22 17:36:26 +08:00

PRIVACY.md

Initial public release

2026-06-22 17:36:26 +08:00

PRIVACY.zh-CN.md

Initial public release

2026-06-22 17:36:26 +08:00

tsconfig.json

Initial public release

2026-06-22 17:36:26 +08:00

vitest.config.ts

Initial public release

2026-06-22 17:36:26 +08:00

wxt.config.ts

Initial public release

2026-06-22 17:36:26 +08:00