Browser Extension

Capture

The extension recognizes the current page and extracts title, body, provenance, and media. Before sending, the user chooses a target knowledge space and confirms the preview.

Draft delivery

Web can hand only human-approved packages to the extension. The extension uses the browser's current platform session and writes to a draft box after final confirmation. It never receives arbitrary remote executable code.

Credential boundary

• DraPub JWT stays in chrome.storage.session.
• Platform cookies, tokens, and tickets are not sent to DraPub Backend.
• Messages validate their origin and configured Web Origin.
• A delivery task is persisted before execution so MV3 service worker recycling is safe.

If a platform layout change causes failure, preserve diagnostics and avoid repeated clicks that could create duplicate drafts.