Hanzo Extensions - Browser & IDE Plugins

1. Extension opens tab → hanzo.id/login/oauth/authorize?response_type=token&...
2. User logs in on Casdoor form
3. Redirect to hanzo.ai/callback?access_token=JWT&state=...
4. Extension catches redirect via chrome.tabs.onUpdated
5. Extracts token, closes tab

// packages/browser/src/auth.ts
async function startAuth(): Promise<string> {
  const state = crypto.randomUUID()

  const authUrl = new URL("https://hanzo.id/login/oauth/authorize")
  authUrl.searchParams.set("response_type", "token")
  authUrl.searchParams.set("client_id", "app-hanzo")
  authUrl.searchParams.set("redirect_uri", "https://hanzo.ai/callback")
  authUrl.searchParams.set("scope", "openid profile email")
  authUrl.searchParams.set("state", state)

  // Open auth tab
  const tab = await chrome.tabs.create({ url: authUrl.toString() })

  // Listen for redirect
  return new Promise((resolve) => {
    chrome.tabs.onUpdated.addListener(function listener(tabId, info) {
      if (tabId !== tab.id || !info.url?.includes("callback")) return

      const hash = new URL(info.url).hash.substring(1)
      const params = new URLSearchParams(hash)
      const token = params.get("access_token")

      chrome.tabs.onUpdated.removeListener(listener)
      chrome.tabs.remove(tabId)
      resolve(token!)
    })
  })
}

// /api/userinfo only returns `sub` — use /api/get-account
async function getProfile(token: string) {
  const res = await fetch("https://iam.hanzo.ai/api/get-account", {
    headers: { "Authorization": `Bearer ${token}` }
  })
  return res.json()  // { name, email, avatar, ... }
}

cd extension
pnpm install

# Browser extension
cd packages/browser
pnpm dev           # Watch mode for Chrome
pnpm build         # Production build

# VS Code extension
cd packages/vscode
pnpm dev           # Watch mode
pnpm package       # Create .vsix

# JetBrains plugin
cd packages/jetbrains
./gradlew buildPlugin  # Create .zip