From be0670a2aab3ba2728aa5c033d81c5cc48caa16e Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 13:09:52 -0700
Subject: [PATCH 01/19] test: sweep committed docs/superpowers for retired-CLI
 claims

Closes F13. grep's --exclude-dir=superpowers matches that name at any
depth, so the retired-CLI sweep silently exempted every committed spec
and plan under docs/superpowers/ and superpowers/.

- smoke-test.sh: drop --exclude-dir=superpowers from the sweep (the
  git-ignored .superpowers/ exclusion stays). The sweep comment now
  explains the any-depth match and lists the extension's model API as a
  legitimate tagged mention.
- Tag the 14 lines under docs/superpowers/ that name the extension's
  model API (3 files): prose and html-fence lines get an HTML comment
  tag, lines in javascript fences get a // tag.

The matching mutation case (23) lands with the harness rework in S2.

Deviation: the last sentence of the comment's "A tag is for..."
paragraph is re-wrapped (same words) so the lengthened first sentence
does not leave a 100-column line.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../2026-08-15-chrome-extension-experiment.md | 18 ++++++-------
 .../plans/2026-08-15-course-crawler.md        |  2 +-
 .../2026-08-15-chrome-extension-design.md     |  8 +++---
 test/smoke-test.sh                            | 25 +++++++++++--------
 4 files changed, 29 insertions(+), 24 deletions(-)

diff --git a/docs/superpowers/plans/2026-08-15-chrome-extension-experiment.md b/docs/superpowers/plans/2026-08-15-chrome-extension-experiment.md
index 0be01cf..41363c0 100644
--- a/docs/superpowers/plans/2026-08-15-chrome-extension-experiment.md
+++ b/docs/superpowers/plans/2026-08-15-chrome-extension-experiment.md
@@ -4,7 +4,7 @@
 
 **Goal:** Build a frictionless Manifest V3 Chrome Extension that brings idstack's evidence-based course design audits into Canvas LMS, Google Docs, and web browsers via Chrome's native Side Panel.
 
-**Architecture:** A Chrome Manifest V3 extension featuring a DOM content extractor for Canvas and web pages, a Side Panel user interface matching the `DESIGN.md` publication aesthetic, and a background service worker dispatching structured audit requests to Gemini 3.7 Flash with T1–T5 evidence citations.
+**Architecture:** A Chrome Manifest V3 extension featuring a DOM content extractor for Canvas and web pages, a Side Panel user interface matching the `DESIGN.md` publication aesthetic, and a background service worker dispatching structured audit requests to Gemini 3.7 Flash with T1–T5 evidence citations. <!-- IDSTACK_CLI_LEAK_ALLOW -->
 
 **Tech Stack:** Chrome Extensions API (Manifest V3, Side Panel API, Content Scripts, Service Worker), Vanilla JavaScript (ES Modules), Vanilla CSS (matching `DESIGN.md` tokens), Node.js test runner for unit tests.
 
@@ -407,7 +407,7 @@ git commit -m "feat(extension): implement DOM extractor for Canvas and web sylla
 
 ---
 
-### Task 4: Background Service Worker & Gemini API Engine
+### Task 4: Background Service Worker & Gemini API Engine <!-- IDSTACK_CLI_LEAK_ALLOW -->
 
 **Files:**
 - Create: `extension/background/service-worker.js`
@@ -424,9 +424,9 @@ Create `test/test-service-worker.js`:
 const assert = require('assert');
 const { parseAuditResponse } = require('../extension/background/parser-helper.cjs');
 
-const rawGeminiResponse = "```json\n{\n  \"summary\": {\n    \"bloomsLevel\": \"Remember\",\n    \"alignmentScore\": \"Moderate\",\n    \"keyTakeaway\": \"Quiz focuses only on memorization.\"\n  },\n  \"findings\": [],\n  \"improvedDraft\": {\n    \"title\": \"Analysis Prompt\",\n    \"content\": \"Compare and contrast\"\n  }\n}\n```";
+const rawGeminiResponse = "```json\n{\n  \"summary\": {\n    \"bloomsLevel\": \"Remember\",\n    \"alignmentScore\": \"Moderate\",\n    \"keyTakeaway\": \"Quiz focuses only on memorization.\"\n  },\n  \"findings\": [],\n  \"improvedDraft\": {\n    \"title\": \"Analysis Prompt\",\n    \"content\": \"Compare and contrast\"\n  }\n}\n```"; // IDSTACK_CLI_LEAK_ALLOW
 
-const parsed = parseAuditResponse(rawGeminiResponse);
+const parsed = parseAuditResponse(rawGeminiResponse); // IDSTACK_CLI_LEAK_ALLOW
 assert.strictEqual(parsed.summary.bloomsLevel, 'Remember');
 assert.strictEqual(parsed.improvedDraft.title, 'Analysis Prompt');
 
@@ -456,8 +456,8 @@ function cleanJsonResponse(rawText) {
   return JSON.parse(cleaned.trim());
 }
 
-async function callGeminiApi(apiKey, prompt) {
-  const url = `https://generativelanguage.googleapis.com/v1beta/models/gemini-2.5-flash:generateContent?key=${apiKey}`;
+async function callGeminiApi(apiKey, prompt) { // IDSTACK_CLI_LEAK_ALLOW
+  const url = `https://generativelanguage.googleapis.com/v1beta/models/gemini-2.5-flash:generateContent?key=${apiKey}`; // IDSTACK_CLI_LEAK_ALLOW
   const response = await fetch(url, {
     method: 'POST',
     headers: { 'Content-Type': 'application/json' },
@@ -492,10 +492,10 @@ chrome.runtime.onMessage.addListener((request, sender, sendResponse) => {
         // Use user's key if provided, or default endpoint
         let auditResult;
         if (settings.apiKey) {
-          auditResult = await callGeminiApi(settings.apiKey, prompt);
+          auditResult = await callGeminiApi(settings.apiKey, prompt); // IDSTACK_CLI_LEAK_ALLOW
         } else {
           // Fallback demo mock or proxy endpoint
-          auditResult = await callGeminiApi('YOUR_DEFAULT_API_KEY_OR_PROXY', prompt);
+          auditResult = await callGeminiApi('YOUR_DEFAULT_API_KEY_OR_PROXY', prompt); // IDSTACK_CLI_LEAK_ALLOW
         }
 
         await saveAuditResult({
@@ -624,7 +624,7 @@ Create `extension/sidepanel/index.html`:
       </div>
       <div class="drawer-body">
         <div class="form-group">
-          <label for="api-key-input">Gemini / Claude API Key (Optional BYOK)</label>
+          <label for="api-key-input">Gemini / Claude API Key (Optional BYOK)</label> <!-- IDSTACK_CLI_LEAK_ALLOW -->
           <input type="password" id="api-key-input" placeholder="AIzaSy... or sk-ant-..." />
           <p class="help-text">Leave blank to use the standard free demo tier.</p>
         </div>
diff --git a/docs/superpowers/plans/2026-08-15-course-crawler.md b/docs/superpowers/plans/2026-08-15-course-crawler.md
index 5063523..323695c 100644
--- a/docs/superpowers/plans/2026-08-15-course-crawler.md
+++ b/docs/superpowers/plans/2026-08-15-course-crawler.md
@@ -13,7 +13,7 @@
 - **Design System:** Strictly follow `DESIGN.md` (Source Serif 4, Public Sans, JetBrains Mono, `#faf8f3` ivory background, `#ffffff` card surfaces, `#1a1815` ink, canonical T1–T5 palette: T1 `#2f7a4a`, T2 `#2864a8`, T3 `#a87726`, T4 `#b35a1f`, T5 `#6b6b6b`).
 - **Zero Build Overhead:** Pure Vanilla JS and CSS without bundlers, webpack, or npm runtime dependencies.
 - **Privacy & FERPA:** Only extract syllabus, assignment descriptions, and rubrics. Never touch student rosters, submissions, or grades.
-- **Free Tier Onboarding:** Provide direct link to Google AI Studio for free Gemini API keys, plus a rich demo fallback mode for instant testing without an API key.
+- **Free Tier Onboarding:** Provide direct link to Google AI Studio for free Gemini API keys, plus a rich demo fallback mode for instant testing without an API key. <!-- IDSTACK_CLI_LEAK_ALLOW -->
 - **T1–T5 Research Grounding:** All course audit prompts ground alignment ratings in `evidence/references.md` (Biggs constructive alignment, Bloom's taxonomy, Hattie feedback, Sweller cognitive load).
 
 ---
diff --git a/docs/superpowers/specs/2026-08-15-chrome-extension-design.md b/docs/superpowers/specs/2026-08-15-chrome-extension-design.md
index 7d8de38..da4a022 100644
--- a/docs/superpowers/specs/2026-08-15-chrome-extension-design.md
+++ b/docs/superpowers/specs/2026-08-15-chrome-extension-design.md
@@ -33,7 +33,7 @@ Building institutional LMS integrations (LTI 1.3, Canvas Developer Keys) introdu
        ▼ (Automatic platform detection: "Canvas Assignment Detected")
 [User clicks "Audit with Evidence"]
        │
-       ▼ (2-3s fast analysis via Gemini 3.7 Flash)
+       ▼ (2-3s fast analysis via Gemini 3.7 Flash) <!-- IDSTACK_CLI_LEAK_ALLOW -->
 [Results Displayed in Side Panel]
  ├── Bloom's Taxonomy Level & Alignment Summary
  ├── Finding Cards with [T1]–[T5] Evidence Badges
@@ -49,7 +49,7 @@ Building institutional LMS integrations (LTI 1.3, Canvas Developer Keys) introdu
    - **Finding Cards:** Categorized by severity (Critical / Warning / Suggestion) with mono-tagged citation chips (e.g. `[Assessment-8] [T1]`).
    - **Actionable Rewrite Box:** Formatted revised rubric criteria or rewritten measurable learning objectives with a **"📋 Copy to Clipboard"** button.
    - **Feedback Mechanism:** Instant 1-click **"Helpful? 👍 / 👎"** toggle to collect experiment signal.
-4. **Settings / Privacy State:** Clean drawer allowing users to view privacy commitments (zero student PII stored) and optionally enter a custom Gemini / Claude API key for BYOK mode.
+4. **Settings / Privacy State:** Clean drawer allowing users to view privacy commitments (zero student PII stored) and optionally enter a custom Gemini / Claude API key for BYOK mode. <!-- IDSTACK_CLI_LEAK_ALLOW -->
 
 ---
 
@@ -88,7 +88,7 @@ The content script is injected on demand or on target domains to extract course
 ### 3.2 Background Worker (`background/service-worker.js`)
 - Receives audit requests from the Side Panel.
 - Formats prompt with extracted DOM text + idstack research criteria.
-- Dispatches request to the configured LLM endpoint (Gemini 3.7 Flash default proxy or local BYOK endpoint).
+- Dispatches request to the configured LLM endpoint (Gemini 3.7 Flash default proxy or local BYOK endpoint). <!-- IDSTACK_CLI_LEAK_ALLOW -->
 - Validates and parses the returned JSON schema and forwards results to the Side Panel.
 
 ---
@@ -139,6 +139,6 @@ For this experiment to be considered successful before expanding into larger fea
 1. **Phase 1: Project Scaffolding & Manifest:** Create `extension/manifest.json`, icon assets, and baseline extension setup.
 2. **Phase 2: Content Extraction Engine:** Implement `content/extractor.js` for Canvas LMS and general web pages.
 3. **Phase 3: Side Panel UI & Design System:** Implement `sidepanel/index.html`, `sidepanel.css` (using `DESIGN.md` tokens), and interactive state rendering.
-4. **Phase 4: LLM Audit Engine & Prompts:** Implement `background/service-worker.js` with structured Gemini 3.7 Flash prompting and JSON schema enforcement.
+4. **Phase 4: LLM Audit Engine & Prompts:** Implement `background/service-worker.js` with structured Gemini 3.7 Flash prompting and JSON schema enforcement. <!-- IDSTACK_CLI_LEAK_ALLOW -->
 5. **Phase 5: Copy Actions & Stakeholder Report Generator:** Wire 1-click clipboard revision copying and standalone HTML report generation.
 6. **Phase 6: Testing & Verification:** Verify on real Canvas pages and web syllabi.
diff --git a/test/smoke-test.sh b/test/smoke-test.sh
index 84fb967..b607b99 100755
--- a/test/smoke-test.sh
+++ b/test/smoke-test.sh
@@ -415,21 +415,26 @@ check "preamble embeds no ~/.agents fallbacks" "! grep -q '\.agents/' '$IDSTACK_
 #      directories. Implementation reports and review notes written during
 #      development are not shipped and CI never sees them (fresh checkout), but
 #      they can discuss the sweep and trip it unreliably.
-#   3. Lines tagged IDSTACK_CLI_LEAK_ALLOW. Three kinds of line carry the tag:
-#      this block's own patterns, the dated release note on the landing page,
-#      and the comments crediting "Gemini Code Assist" — a PR-review bot  # IDSTACK_CLI_LEAK_ALLOW
+#      --exclude-dir matches a name at any depth, so never add the dotless
+#      `superpowers`: it exempted the committed specs and plans under
+#      docs/superpowers/ and superpowers/.
+#   3. Lines tagged IDSTACK_CLI_LEAK_ALLOW. Kinds of line that carry the tag
+#      include: this block's own patterns, the dated release note on the
+#      landing page, the comments crediting "Gemini Code Assist" — a PR-review bot  # IDSTACK_CLI_LEAK_ALLOW
 #      that flagged the version classifier four times, unrelated to the CLI and
-#      the reason those test cases exist.
+#      the reason those test cases exist — and mentions of the Gemini model API  # IDSTACK_CLI_LEAK_ALLOW
+#      the Chrome extension calls, which is an LLM endpoint, not a CLI.
 #
-#      A tag is for a dated, historical mention. It is NEVER for a line that
-#      claims idstack runs somewhere it does not. Tag individual lines, never
-#      whole files, and never filter on a bare string: an earlier draft dropped
-#      every line containing the bot's name repo-wide, which would have
-#      let an untagged capability claim through anywhere it appeared.
+#      A tag is for a dated, historical mention or the extension's model API.
+#      It is NEVER for a line that claims idstack runs somewhere it does not.
+#      Tag individual lines, never whole files, and never filter on a bare
+#      string: an earlier draft dropped every line containing the bot's name
+#      repo-wide, which would have let an untagged capability claim through
+#      anywhere it appeared.
 CLI_LEAK_RE='codex|gemini'            # IDSTACK_CLI_LEAK_ALLOW
 CLI_LEAK="$(grep -rIiE "$CLI_LEAK_RE" "$IDSTACK_DIR" \
   --exclude-dir=.git --exclude-dir=.gstack --exclude-dir=.idstack \
-  --exclude-dir=.claude --exclude-dir=.superpowers --exclude-dir=superpowers --exclude=CHANGELOG.md 2>/dev/null || true)"
+  --exclude-dir=.claude --exclude-dir=.superpowers --exclude=CHANGELOG.md 2>/dev/null || true)"
 CLI_LEAK="$(printf '%s' "$CLI_LEAK" | grep -vF 'IDSTACK_CLI_LEAK_ALLOW' || true)"
 # Printed through the command itself, not tested with -z, so a failure names
 # the offending lines instead of just saying the string was non-empty.

From 8fdd0c3cbfadc6b61010bf9219ff8b8dbc183017 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 13:49:00 -0700
Subject: [PATCH 02/19] test: make mutation-test prove its guards

Closes F2 and adds the F13 mutation (case 23).

fresh() never copied extension/, so since 2b36bea smoke-test failed on
every copy ("chrome extension tests pass") and each smoke-guarded case
reported GUARDED while guarding nothing. Cases 16 and 17 had also gone
stale: their python assert failed ("anchor not unique: 0"), nothing
checked it, and both still counted as GUARDED.

- Snapshot: build one $WORK/base from the explicit item list, now
  including extension; fresh() copies base, so the baseline, the diff
  target and every case copy are the same tree.
- No-op guard: expect_fail aborts the run unless diff -rq (ignoring
  *.bak) against base exits 1, naming the diff exit code.
- Baseline: smoke on an unmutated copy must pass or the run aborts,
  printing each FAIL with its diagnostic lines. Case 0 proves a no-op
  mutation is refused.
- Cases 16/17 anchor on <h2 id="install-title"> instead of the heading
  text, with the untagged claim on its own line before it.
- Case 23: an untagged claim in docs/superpowers/leak.md must fail smoke.
- Header says "each fixed defect" instead of "each bug fixed in v3.3.0.0".

Deviation: the re-anchored 16/17 heredocs open docs/index.html with
encoding='utf-8' for read and write, per the plan's heredoc style rule.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 test/mutation-test.sh | 79 +++++++++++++++++++++++++++++++------------
 1 file changed, 58 insertions(+), 21 deletions(-)

diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 25fee9d..bc3f6f5 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Mutation test: reintroduce each bug fixed in v3.3.0.0 into a throwaway copy
+# Mutation test: reintroduce each fixed defect into a throwaway copy
 # of the repo and confirm the guarding test FAILS. A test that still passes
 # with its bug reintroduced is not guarding anything — that is exactly how the
 # v3.3.0.0 defects survived (the version-classifier suite tested a local copy
@@ -19,6 +19,16 @@ trap 'rm -rf "$WORK"' EXIT
 pass=0; fail=0; skip=0
 expect_fail() { # <name> <cmd...>
   local name="$1"; shift
+  # A mutation that edits nothing proves nothing, whatever the suite then does.
+  # Cases 16 and 17 went stale twice this way: their anchor stopped matching,
+  # python's assert exited nonzero, nothing checked it, and both kept reporting
+  # GUARDED. *.bak is excluded because sed -i.bak writes one even on no match.
+  local d=0
+  diff -rq -x '*.bak' "$WORK/base" "$WORK/r" >/dev/null 2>&1 || d=$?
+  if [ "$d" -ne 1 ]; then
+    echo "  ERROR: $name: the mutation did not change the copy (diff exit $d; stale anchor?) — fix the case; no result is trustworthy until then" >&2
+    exit 1
+  fi
   if "$@" >/dev/null 2>&1; then
     echo "  NOT-GUARDED: $name (test still passed with the bug reintroduced)"
     fail=$((fail+1))
@@ -39,16 +49,20 @@ skip_case() { # <name> <why>
 # 3.12+. Mutating it under 3.12 would report a false NOT-GUARDED.
 PY_LT_312=$(python3 -c 'import sys; print(1 if sys.version_info < (3,12) else 0)' 2>/dev/null || echo 0)
 
+# Every case starts from one pristine snapshot, taken once. It is the tree the
+# baseline below vouches for and the tree expect_fail diffs each mutation
+# against, so all three agree by construction even if $SRC is edited mid-run.
+# Copy only what the suites need; skip .git and any nested worktrees.
+mkdir -p "$WORK/base"
+for item in bin skills templates test evidence docs extension .claude-plugin \
+            VERSION CHANGELOG.md README.md TODOS.md CONTRIBUTING.md \
+            DESIGN.md ROADMAP.md CLAUDE.md setup; do
+  [ -e "$SRC/$item" ] && cp -R "$SRC/$item" "$WORK/base/"
+done
+
 fresh() {
   rm -rf "$WORK/r"
-  mkdir -p "$WORK/r"
-  # Copy only what the suites need; skip .git and any nested worktrees.
-  for item in bin skills templates test evidence docs .claude-plugin \
-              VERSION CHANGELOG.md README.md TODOS.md CONTRIBUTING.md \
-              DESIGN.md ROADMAP.md CLAUDE.md setup; do
-    [ -e "$SRC/$item" ] && cp -R "$SRC/$item" "$WORK/r/"
-  done
-  return 0
+  cp -R "$WORK/base" "$WORK/r"
 }
 
 # Regenerate after mutating a .tmpl or a spliced template. Without this, the
@@ -67,6 +81,25 @@ regen() {
   fi
 }
 
+# Baseline: the unmutated copy must pass, or every expect_fail below reports
+# GUARDED for the wrong reason. fresh() once omitted extension/, so smoke-test
+# failed on every copy and each smoke-guarded case "passed" while guarding
+# nothing. smoke-test runs every other guarding suite, so one run covers them.
+fresh
+if ! "$WORK/r/test/smoke-test.sh" "$WORK/r" >"$WORK/baseline.log" 2>&1; then
+  echo "  ERROR: the unmutated copy fails smoke-test; every GUARDED result would be meaningless" >&2
+  grep -A5 'FAIL:' "$WORK/baseline.log" >&2
+  exit 1
+fi
+
+# 0. expect_fail must refuse a mutation that changed nothing. Run in a subshell
+# so its exit is observable; bash does not run the parent's EXIT trap there.
+fresh
+if ( expect_fail "no-op mutation" false ) >/dev/null 2>&1; then
+  echo "  ERROR: a mutation that changed nothing was counted as GUARDED" >&2
+  exit 1
+fi
+
 # 1. f-string bug in the preamble -> test-preamble-python must fail.
 # Only meaningful on Python < 3.12; see PY_LT_312 above.
 if [ "$PY_LT_312" = "1" ]; then
@@ -302,13 +335,11 @@ expect_fail "second-CLI dist/ bundle returns" "$WORK/r/test/smoke-test.sh" "$WOR
 fresh
 python3 - "$WORK/r/docs/index.html" <<'PY'
 import sys
-p = sys.argv[1]; s = open(p).read()
-old = "<h2 id=\"install-title\">Install in 30 seconds.</h2>"
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = '<h2 id="install-title">'
 assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
-s = s.replace(old,
-              "<h2 id=\"install-title\">Install in 30 seconds.</h2>\n"
-              "      <p>Also runs in OpenAI Codex CLI.</p>", 1)  # IDSTACK_CLI_LEAK_ALLOW
-open(p,'w').write(s)
+s = s.replace(old, '<p>Also runs in OpenAI Codex CLI.</p>\n        ' + old, 1)  # IDSTACK_CLI_LEAK_ALLOW
+open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "untagged reference in a file with tagged lines" "$WORK/r/test/smoke-test.sh" "$WORK/r"
 
@@ -321,13 +352,11 @@ expect_fail "untagged reference in a file with tagged lines" "$WORK/r/test/smoke
 fresh
 python3 - "$WORK/r/docs/index.html" <<'PY'
 import sys
-p = sys.argv[1]; s = open(p).read()
-old = "<h2 id=\"install-title\">Install in 30 seconds.</h2>"
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = '<h2 id="install-title">'
 assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
-s = s.replace(old,
-              "<h2 id=\"install-title\">Install in 30 seconds.</h2>\n"
-              "      <p>Reviewed by Gemini Code Assist. Also runs in Codex CLI.</p>", 1)  # IDSTACK_CLI_LEAK_ALLOW
-open(p,'w').write(s)
+s = s.replace(old, '<p>Reviewed by Gemini Code Assist. Also runs in Codex CLI.</p>\n        ' + old, 1)  # IDSTACK_CLI_LEAK_ALLOW
+open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "claim carrying the bot's name is not exempt" "$WORK/r/test/smoke-test.sh" "$WORK/r"
 
@@ -404,6 +433,14 @@ open(p, 'w').write(s)
 PY
 expect_fail "dateModified reintroduced into docs/index.html" "$WORK/r/test/smoke-test.sh" "$WORK/r"
 
+# 23. an untagged claim in a committed doc under docs/superpowers/ -> smoke-test
+# must fail. 2b36bea added --exclude-dir=superpowers to the sweep to hide the
+# extension's design docs; grep matches that name at any depth, so it exempted
+# every committed spec and plan under docs/superpowers/ and superpowers/.
+fresh
+printf 'idstack also runs in OpenAI Codex CLI.\n' > "$WORK/r/docs/superpowers/leak.md"  # IDSTACK_CLI_LEAK_ALLOW
+expect_fail "committed docs/superpowers is not sweep-exempt" "$WORK/r/test/smoke-test.sh" "$WORK/r"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]

From 7a9c7fdf3dffaf108c15d3f2e2161124205ae99f Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 14:10:43 -0700
Subject: [PATCH 03/19] ci: pin Node 22 wherever the extension suite runs

Adds actions/setup-node@v4 (node-version '22') to the test job (all
three matrix legs), the mutation job and release.yml, whose smoke run
(and so test-extension.sh) had no Node pin. The upcoming .mjs tests
rely on ESM syntax detection, which is default only from Node 20.19 /
22.7, and once fresh() copies extension/ every smoke-guarded mutation
case depends on the pin too.

Adds a direct "Chrome extension unit tests" step to the test job,
matching every other suite smoke-test calls; check() truncates a
failure to 5 lines, so this is the only place CI shows the full output.

Prepares F5 (S4/S5). The release.yml comment gets a one-line note that
smoke-test.sh runs test-extension.sh, mirroring the mutation job's note.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/release.yml |  7 +++++++
 .github/workflows/test.yml    | 16 ++++++++++++++++
 CONTRIBUTING.md               |  3 ++-
 3 files changed, 25 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4690099..6108002 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,6 +24,13 @@ jobs:
             echo "plugin.json version does not match VERSION ($VER)" >&2; exit 1; }
           grep -qF "## v$VER" CHANGELOG.md || {
             echo "CHANGELOG.md has no entry for v$VER" >&2; exit 1; }
+      # test/test-extension.sh imports the shipped extension ES modules. extension/ has no
+      # package.json, so Node must detect ESM syntax in .js files itself (default only from
+      # 20.19 / 22.7). Pinned so the runner image's Node cannot change under the suite.
+      # Required here too: smoke-test.sh runs test-extension.sh.
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
       - name: Run test suite
         run: ./test/smoke-test.sh
       - name: Create GitHub Release
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 3363fe6..164c0bb 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -27,6 +27,12 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
+      # test/test-extension.sh imports the shipped extension ES modules. extension/ has no
+      # package.json, so Node must detect ESM syntax in .js files itself (default only from
+      # 20.19 / 22.7). Pinned so the runner image's Node cannot change under the suite.
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
       - name: Smoke test
         run: ./test/smoke-test.sh
       - name: Integration test
@@ -45,6 +51,8 @@ jobs:
         run: ./test/test-preamble-python.sh
       - name: Setup behavioral tests
         run: ./test/test-setup.sh
+      - name: Chrome extension unit tests
+        run: ./test/test-extension.sh
 
   # Confirms the guards above actually fail when their bugs return. Slower
   # (copies the repo per mutation), so it runs once rather than per matrix leg.
@@ -60,5 +68,13 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: '3.9'
+      # test/test-extension.sh imports the shipped extension ES modules. extension/ has no
+      # package.json, so Node must detect ESM syntax in .js files itself (default only from
+      # 20.19 / 22.7). Pinned so the runner image's Node cannot change under the suite.
+      # Required for every smoke-test case too: fresh() copies extension/ and smoke runs
+      # test-extension.sh.
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
       - name: Mutation test
         run: ./test/mutation-test.sh
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index c837a07..97269f3 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -127,7 +127,7 @@ bin/idstack-gen-skills --dry-run  # Generated files up to date? Run this first.
 ./test/smoke-test.sh              # Verify the install
 ```
 
-Ten suites run in CI (`.github/workflows/test.yml`) on every push and pull request. Run whichever ones your change touches locally; CI runs them all:
+Eleven suites run in CI (`.github/workflows/test.yml`) on every push and pull request. Run whichever ones your change touches locally; CI runs them all:
 
 | Suite | Covers |
 |-------|--------|
@@ -140,6 +140,7 @@ Ten suites run in CI (`.github/workflows/test.yml`) on every push and pull reque
 | `test/test-version-classifier.sh` | `bin/lib/version-classify.sh` |
 | `test/test-plugin-status.sh` | `bin/lib/plugin-status.sh` |
 | `test/test-preamble-python.sh` | The preamble's embedded Python, on 3.9 and 3.12 |
+| `test/test-extension.sh` | The Chrome extension. Imports the shipped `extension/` modules through `test/extension-harness.mjs` (Node 20.19+ or 22.7+) and fails if a hand-copied `.cjs` twin comes back |
 | `python3 test/check-evidence-cards.py .` | Verifies landing page evidence card study counts and tier ranges against `evidence/references.md` |
 | `python3 test/check-doc-accuracy.py .` | Validates version agreement, manifest schema version, binary/flag references, link targets, and surface accuracy across docs |
 | `test/mutation-test.sh` | Reintroduces each known defect into a throwaway copy and asserts the guarding test fails. Add a mutation here whenever you fix a bug — it is what proves your new test would have caught it |

From 1f55d560d213bf1c373ba8b5c444f2cf378dd2c8 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 14:38:33 -0700
Subject: [PATCH 04/19] test(extension): import the shipped ESM; retire .cjs
 twins

Closes F5 part 1: the extension tests loaded hand-maintained .cjs copies,
so a bug in the .js Chrome actually runs stayed green (mutations 24a and
24b both passed the old suite).

- git rm the seven .cjs twins.
- New test/extension-harness.mjs: importFresh, loadContentScript
  (vm.Script syntax check, then require), async chrome.storage callbacks,
  MV3 promise sendMessage, runtime.id/getURL, dispatch() defaulting to a
  side-panel sender, and a document-order fake DOM.
- Port the tests to .mjs importing the shipped modules: test-prompts,
  test-crawler (top-level await), test-dossier-compiler (source-grep
  Test 4 dropped), test-extractor (fake-DOM page(), Test 10 via
  dispatch), test-service-worker.js -> test-parser-helper.mjs,
  test-sidepanel-logic.js -> test-renderer-helper.mjs; new
  test-course-context.mjs tests the file sidepanel.js imports.
- extractor-core.js keeps only detectCourseContext (path unchanged, so
  sidepanel.js is untouched); extractor.js drops its unused copy.
- test-extension.sh: Node >= 20.19/22.7 floor, a no-.cjs guard, and runs
  every test-*.mjs.
- CLAUDE.md: test-extension.sh line and the Node 22 CI note.
- Mutations 24a (renderer escaping), 24b (isCourseRoot in
  extractor-core.js), 24f (.cjs twin returns).

Deviations: the harness uses the plan's sender identity
(EXTENSION_ID 'idstackextensionidfortests', unexported PANEL_SENDER
{id, url}) rather than U2's exported SIDE_PANEL_SENDER; the CLAUDE.md
comment wraps onto two lines to keep the column-aligned style.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 CLAUDE.md                                     |   5 +-
 extension/background/canvas-crawler.cjs       |  59 ---
 extension/background/parser-helper.cjs        | 128 -------
 extension/content/extractor-core.cjs          |   8 -
 extension/content/extractor-core.js           |  47 +--
 extension/content/extractor.js                |  19 +-
 extension/shared/dossier-compiler.cjs         |  96 -----
 extension/shared/evidence-base.cjs            |  26 --
 extension/shared/prompts.cjs                  |  93 -----
 extension/sidepanel/renderer-helper.cjs       | 116 ------
 test/extension-harness.mjs                    | 278 ++++++++++++++
 test/mutation-test.sh                         |  35 ++
 test/test-course-context.mjs                  |  23 ++
 test/test-crawler.js                          |  50 ---
 test/test-crawler.mjs                         |  48 +++
 ...-compiler.js => test-dossier-compiler.mjs} |  15 +-
 test/test-extension.sh                        |  24 +-
 test/test-extractor.js                        | 338 ------------------
 test/test-extractor.mjs                       | 167 +++++++++
 ...rvice-worker.js => test-parser-helper.mjs} |   4 +-
 test/{test-prompts.js => test-prompts.mjs}    |   5 +-
 ...anel-logic.js => test-renderer-helper.mjs} |   5 +-
 22 files changed, 582 insertions(+), 1007 deletions(-)
 delete mode 100644 extension/background/canvas-crawler.cjs
 delete mode 100644 extension/background/parser-helper.cjs
 delete mode 100644 extension/content/extractor-core.cjs
 delete mode 100644 extension/shared/dossier-compiler.cjs
 delete mode 100644 extension/shared/evidence-base.cjs
 delete mode 100644 extension/shared/prompts.cjs
 delete mode 100644 extension/sidepanel/renderer-helper.cjs
 create mode 100644 test/extension-harness.mjs
 create mode 100644 test/test-course-context.mjs
 delete mode 100644 test/test-crawler.js
 create mode 100644 test/test-crawler.mjs
 rename test/{test-dossier-compiler.js => test-dossier-compiler.mjs} (77%)
 delete mode 100644 test/test-extractor.js
 create mode 100644 test/test-extractor.mjs
 rename test/{test-service-worker.js => test-parser-helper.mjs} (94%)
 rename test/{test-prompts.js => test-prompts.mjs} (88%)
 rename test/{test-sidepanel-logic.js => test-renderer-helper.mjs} (97%)

diff --git a/CLAUDE.md b/CLAUDE.md
index 0f590c0..aa5b5c6 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -39,7 +39,8 @@ Tests (run in CI on every push and PR — see `.github/workflows/test.yml`):
 ./test/test-version-classifier.sh # bin/lib/version-classify.sh unit tests
 ./test/test-plugin-status.sh      # bin/lib/plugin-status.sh unit tests
 ./test/test-preamble-python.sh    # Runs the preamble's embedded python on 3.9 and 3.12
-./test/test-extension.sh          # Chrome Extension packaging and static analysis tests
+./test/test-extension.sh          # Chrome extension unit tests; import the shipped extension/ modules via
+                                  # test/extension-harness.mjs (Node >= 20.19 or 22.7; never add .cjs twins)
 python3 test/check-evidence-cards.py . # Verifies landing page evidence cards match evidence/references.md
 python3 test/check-doc-accuracy.py .   # Verifies documentation accuracy across version strings, binaries, flags, and links
 ./test/mutation-test.sh           # Reintroduces each fixed defect and asserts its guarding test fails
@@ -47,7 +48,7 @@ python3 test/check-doc-accuracy.py .   # Verifies documentation accuracy across
 
 `test/test-helper.sh` is not a suite — it is sourced by all of them and owns the shared `PASS`/`FAIL`/`TOTAL` counters and the `check()` assertion. Do not add a local counter block to a suite; smoke-test fails on one, and a mutation proves that guard works.
 
-CI matrix: ubuntu (Python 3.9 + 3.12) and macOS (3.12). 3.9 is the leg that catches modern-only Python syntax reaching the preamble's embedded scripts — it is what macOS ships. `mutation-test.sh` runs once, pinned to 3.9.
+CI matrix: ubuntu (Python 3.9 + 3.12) and macOS (3.12). 3.9 is the leg that catches modern-only Python syntax reaching the preamble's embedded scripts — it is what macOS ships. `mutation-test.sh` runs once, pinned to 3.9. The test, mutation and release jobs pin Node 22 for the extension tests.
 
 No build step for users. No dependencies beyond bash (python3 recommended for full features). Skills are plain Markdown files.
 
diff --git a/extension/background/canvas-crawler.cjs b/extension/background/canvas-crawler.cjs
deleted file mode 100644
index 23529c1..0000000
--- a/extension/background/canvas-crawler.cjs
+++ /dev/null
@@ -1,59 +0,0 @@
-function stripHtml(html) {
-  if (!html) return '';
-  return html
-    .replace(/<style[^>]*>[\s\S]*?<\/style>/gi, '')
-    .replace(/<script[^>]*>[\s\S]*?<\/script>/gi, '')
-    .replace(/<[^>]+>/g, ' ')
-    .replace(/&nbsp;/gi, ' ')
-    .replace(/&amp;/gi, '&')
-    .replace(/&lt;/gi, '<')
-    .replace(/&gt;/gi, '>')
-    .replace(/&quot;/gi, '"')
-    .replace(/\s+/g, ' ')
-    .trim();
-}
-
-async function crawlCanvasCourse(origin, courseId, fetchImpl = fetch) {
-  if (!origin || !courseId) {
-    throw new Error('Canvas origin and courseId are required for course crawling.');
-  }
-
-  // 1. Fetch Course details & syllabus
-  const courseUrl = `${origin}/api/v1/courses/${courseId}?include[]=syllabus_body`;
-  const courseRes = await fetchImpl(courseUrl, { credentials: 'include' });
-  if (!courseRes.ok) {
-    throw new Error(`Failed to fetch Canvas course info (${courseRes.status})`);
-  }
-  const courseJson = await courseRes.json();
-
-  // 2. Fetch Assignments list (up to 50)
-  const assignmentsUrl = `${origin}/api/v1/courses/${courseId}/assignments?per_page=50`;
-  let assignments = [];
-  try {
-    const assignRes = await fetchImpl(assignmentsUrl, { credentials: 'include' });
-    if (assignRes.ok) {
-      const assignJson = await assignRes.json();
-      if (Array.isArray(assignJson)) {
-        assignments = assignJson.map((a) => ({
-          title: a.name || 'Untitled Assignment',
-          description: stripHtml(a.description || '').slice(0, 1000),
-          points: a.points_possible || 0,
-          dueAt: a.due_at || null
-        }));
-      }
-    }
-  } catch (e) {
-    console.warn('Could not fetch assignments list:', e);
-  }
-
-  return {
-    title: courseJson.name || courseJson.course_code || 'Canvas Course',
-    syllabus: stripHtml(courseJson.syllabus_body || ''),
-    assignments
-  };
-}
-
-module.exports = {
-  stripHtml,
-  crawlCanvasCourse
-};
diff --git a/extension/background/parser-helper.cjs b/extension/background/parser-helper.cjs
deleted file mode 100644
index b98b518..0000000
--- a/extension/background/parser-helper.cjs
+++ /dev/null
@@ -1,128 +0,0 @@
-/**
- * Helper to clean and parse JSON responses from LLM API.
- */
-function cleanJsonResponse(rawText) {
-  let cleaned = rawText.trim();
-  if (cleaned.startsWith('```json')) cleaned = cleaned.replace(/^```json/, '');
-  if (cleaned.startsWith('```')) cleaned = cleaned.replace(/^```/, '');
-  if (cleaned.endsWith('```')) cleaned = cleaned.replace(/```$/, '');
-  return JSON.parse(cleaned.trim());
-}
-
-function parseAuditResponse(rawText) {
-  return cleanJsonResponse(rawText);
-}
-
-function getDemoAuditResult(payload = {}) {
-  const title = (payload && payload.title) ? payload.title : 'Course Material';
-  const pageType = (payload && payload.pageType) ? payload.pageType : 'Assignment / Syllabus';
-
-  return {
-    summary: {
-      bloomsLevel: 'Analyze (Level 4)',
-      alignmentScore: 'Moderate (78%)',
-      keyTakeaway: `[Demo Mode] Sample audit for "${title}" (${pageType}). Entering an API key in Settings unlocks live audits on any page.`
-    },
-    findings: [
-      {
-        severity: 'warning',
-        tier: 'T1',
-        citation: '[Assessment-8] Formative Feedback Matrix',
-        observation: 'Assessment rubric lacks descriptive performance criteria for intermediate mastery levels.',
-        evidence: 'Wisniewski et al. (2020) [T1 meta-analysis, d=0.48]: Elaborated feedback and rubric transparency significantly boost student self-regulation and achievement.',
-        recommendation: 'Add concrete performance descriptors and milestone criteria for each grade band instead of generic labels.'
-      },
-      {
-        severity: 'critical',
-        tier: 'T2',
-        citation: '[Alignment-3] Direct Constructive Alignment',
-        observation: 'Learning objectives target analytical synthesis, but evaluation instruments only test lower-order recall.',
-        evidence: 'Biggs (1996) & Liou et al. (2023) [T2 controlled trial]: Constructive misalignment between stated objectives and assessment formats leads to superficial learning strategies.',
-        recommendation: 'Incorporate authentic problem-solving prompts and case analysis rather than purely multiple-choice recall questions.'
-      },
-      {
-        severity: 'info',
-        tier: 'T1',
-        citation: '[Cognitive-2] Cognitive Load & Chunking',
-        observation: 'Task instructions present multiple complex requirements in a single unsegmented block.',
-        evidence: 'Costley et al. (2023) [T1 meta-analysis]: Segmenting complex instructional tasks into structured sequential phases reduces extraneous cognitive load.',
-        recommendation: 'Format multi-step assignment guidelines into sequenced checklists or distinct milestone stages.'
-      }
-    ],
-    improvedDraft: {
-      title: 'Improved Rubric Draft (idstack Recommended)',
-      content: `### Revised Task & Assessment Rubric for: ${title}
-
-> **Note:** This is a sample evidence-based draft generated in demo mode. Entering an API key in Settings unlocks live audits on any page.
-
-#### Analytical Task Prompt
-Analyze the core case scenario and formulate a structured recommendation addressing:
-1. Primary contributing factors identified in the evidence base.
-2. Direct trade-offs between proposed intervention strategies.
-3. A measurable evaluation plan for validating outcomes.
-
-#### Evaluation Rubric (Elaborated Criteria)
-| Criterion | Exemplary (Proficient) | Developing | Novice |
-| :--- | :--- | :--- | :--- |
-| **Evidence Application [T1]** | Synthesizes 3+ relevant empirical sources with clear justification. | References 1-2 sources with partial justification. | Makes claims without empirical citations. |
-| **Analytical Rigor [T2]** | Rigorously evaluates trade-offs and alternative hypotheses. | Identifies trade-offs but lacks systematic comparison. | Describes facts without evaluating trade-offs. |
-| **Actionable Strategy [T1]** | Proposes concrete, measurable milestones with validation metrics. | Proposes general steps without measurable metrics. | Vague or non-actionable suggestions. |`
-    }
-  };
-}
-
-function getDemoCourseAuditResult(payload = {}) {
-  const title = payload.title || 'Sample Canvas Course';
-  return {
-    summary: {
-      bloomsLevel: 'Analyze & Evaluate (Levels 4-5)',
-      alignmentScore: 'Moderate (74%)',
-      keyTakeaway: `[Course-Level Demo] Full-course audit for "${title}". Alignment gaps identified between week 1-4 recall quizzes and week 12 analytical capstone.`
-    },
-    findings: [
-      {
-        severity: 'critical',
-        tier: 'T2',
-        citation: '[Alignment-3] Direct Constructive Alignment',
-        observation: 'Modules 1-6 assess solely lower-order factual recall, while the final course project demands high-order synthesis without intermediate scaffolding.',
-        evidence: 'Biggs (1996) & Liou et al. (2023) [T2 controlled trial]: Abrupt jumps in cognitive demand without progressive assessment scaffolding increase failure rates.',
-        recommendation: 'Introduce mid-semester milestone case studies in Module 4 to bridge the gap between quizzes and the final capstone.'
-      },
-      {
-        severity: 'warning',
-        tier: 'T1',
-        citation: '[Cognitive-2] Cognitive Load & Spaced Practice',
-        observation: 'Major assignment deadlines are clustered in Week 14-15 with no spaced formative checkpoints.',
-        evidence: 'Carpenter et al. (2022) [T1 meta-analysis, d=0.61]: Distributing assessments across spaced intervals produces significantly higher long-term retention.',
-        recommendation: 'Redistribute submission checkpoints into 3 progressive deliverables across weeks 6, 10, and 14.'
-      },
-      {
-        severity: 'info',
-        tier: 'T1',
-        citation: '[Assessment-8] Formative Rubric Transparency',
-        observation: 'Syllabus grading policy lacks explicit performance criteria for collaborative group deliverables.',
-        evidence: 'Wisniewski et al. (2020) [T1 meta-analysis]: Pre-distribution of analytic rubrics with milestone criteria boosts student self-regulation and achievement.',
-        recommendation: 'Publish the multi-tier analytic grading rubric during the initial module launch.'
-      }
-    ],
-    improvedDraft: {
-      title: 'Course-Wide Constructive Alignment Matrix',
-      content: `### Course Alignment Matrix: ${title}
-
-| Week / Module | Intended Learning Outcome | Formative Checkpoint [T1] | Summative Assessment [T2] |
-| :--- | :--- | :--- | :--- |
-| **Weeks 1-3** | Foundational Cell Structure | Spaced Knowledge Check (10 pts) | Module 1 Synthesis Quiz |
-| **Weeks 4-7** | Enzyme Kinetics & Modeling | Case Problem Milestone 1 [T2] | Lab Protocol Analysis |
-| **Weeks 8-11** | Experimental Troubleshooting | Peer Review Protocol [T1] | Milestone 2 Experimental Draft |
-| **Weeks 12-15**| Autonomous Investigation | Scaffolded Capstone Consult | Final Research Capstone |`
-    }
-  };
-}
-
-module.exports = {
-  cleanJsonResponse,
-  parseAuditResponse,
-  getDemoAuditResult,
-  getDemoCourseAuditResult
-};
-
diff --git a/extension/content/extractor-core.cjs b/extension/content/extractor-core.cjs
deleted file mode 100644
index 0256253..0000000
--- a/extension/content/extractor-core.cjs
+++ /dev/null
@@ -1,8 +0,0 @@
-const { detectPageType, extractContentFromDOM, extractPageContent, detectCourseContext } = require('./extractor.js');
-
-module.exports = {
-  detectPageType,
-  extractContentFromDOM,
-  extractPageContent,
-  detectCourseContext
-};
diff --git a/extension/content/extractor-core.js b/extension/content/extractor-core.js
index 897bfa6..799f60d 100644
--- a/extension/content/extractor-core.js
+++ b/extension/content/extractor-core.js
@@ -1,49 +1,4 @@
-export function detectPageType(url, document) {
-  if (url.includes('instructure.com') || url.includes('/courses/')) {
-    if (document.querySelector('#assignment_show')) return 'Canvas Assignment';
-    if (document.querySelector('#syllabusContainer') || url.includes('/assignments/syllabus')) return 'Canvas Syllabus';
-    if (document.querySelector('#modules') || url.includes('/modules')) return 'Canvas Modules';
-    if (document.querySelector('#rubrics')) return 'Canvas Rubric';
-    return 'Canvas LMS Page';
-  }
-  if (url.includes('docs.google.com/document')) return 'Google Doc Syllabus';
-  return 'Web Syllabus / Course Page';
-}
-
-export function extractContentFromDOM(document, url = (typeof window !== 'undefined' && window.location ? window.location.href : '')) {
-  const pageType = detectPageType(url, document);
-  let title = (document && document.title) || 'Course Document';
-  let content = '';
-
-  if (pageType.startsWith('Canvas')) {
-    const heading = document.querySelector('#assignment_show .title, .page-title, h1');
-    if (heading) title = (heading.innerText || heading.textContent || '').trim();
-
-    const mainBody = document.querySelector('#assignment_show .description.user_content, .show-content.user_content, #syllabusContainer, .module-item-title');
-    content = mainBody ? (mainBody.innerText || mainBody.textContent || '').trim() : (document.body ? (document.body.innerText || document.body.textContent || '').trim() : '');
-  } else if (pageType === 'Google Doc Syllabus') {
-    const kixApp = document.querySelector('.kix-appview-editor');
-    content = kixApp ? (kixApp.innerText || kixApp.textContent || '').trim() : (document.body ? (document.body.innerText || document.body.textContent || '').trim() : '');
-  } else {
-    // General web page extraction
-    const article = document.querySelector('main, article, [role="main"]');
-    content = article ? (article.innerText || article.textContent || '').trim() : (document.body ? (document.body.innerText || document.body.textContent || '').trim() : '');
-  }
-
-  return {
-    url,
-    title,
-    pageType,
-    content: content.slice(0, 15000),
-    wordCount: content.split(/\s+/).filter(Boolean).length
-  };
-}
-
-export function extractPageContent() {
-  const url = typeof window !== 'undefined' && window.location ? window.location.href : '';
-  return extractContentFromDOM(document, url);
-}
-
+// Canvas course-root detection for the side panel. The content script does not use it.
 export function detectCourseContext(url, docTitle) {
   if (!url) return { isCourseRoot: false, courseId: null, origin: null };
   try {
diff --git a/extension/content/extractor.js b/extension/content/extractor.js
index 9d72934..f5e25ae 100644
--- a/extension/content/extractor.js
+++ b/extension/content/extractor.js
@@ -47,22 +47,6 @@ function extractPageContent() {
   return extractContentFromDOM(document, url);
 }
 
-function detectCourseContext(url, docTitle) {
-  if (!url) return { isCourseRoot: false, courseId: null, origin: null };
-  try {
-    const parsedUrl = new URL(url);
-    const match = parsedUrl.pathname.match(/\/courses\/(\d+)(?:\/(?:modules)?)?\/?$/);
-    const anyCourseMatch = parsedUrl.pathname.match(/\/courses\/(\d+)/);
-    return {
-      isCourseRoot: !!match,
-      courseId: anyCourseMatch ? anyCourseMatch[1] : null,
-      origin: parsedUrl.origin
-    };
-  } catch (e) {
-    return { isCourseRoot: false, courseId: null, origin: null };
-  }
-}
-
 // Listen for messages from Side Panel
 if (typeof chrome !== 'undefined' && chrome.runtime && chrome.runtime.onMessage) {
   chrome.runtime.onMessage.addListener((request, sender, sendResponse) => {
@@ -78,7 +62,6 @@ if (typeof module !== 'undefined' && module.exports) {
   module.exports = {
     detectPageType,
     extractContentFromDOM,
-    extractPageContent,
-    detectCourseContext
+    extractPageContent
   };
 }
diff --git a/extension/shared/dossier-compiler.cjs b/extension/shared/dossier-compiler.cjs
deleted file mode 100644
index 376ca21..0000000
--- a/extension/shared/dossier-compiler.cjs
+++ /dev/null
@@ -1,96 +0,0 @@
-function compileSingleAuditToMarkdown(item) {
-  if (!item || !item.result) return '';
-  const result = item.result;
-  const title = item.title || 'Course Material';
-  const pageType = item.pageType || 'Web Page';
-  const url = item.url || '';
-  const timestamp = item.timestamp ? new Date(item.timestamp).toLocaleString() : new Date().toLocaleString();
-
-  let md = `# idstack Instructional Design Audit: ${title}\n\n`;
-  md += `> **Audited Component:** ${pageType}  \n`;
-  if (url) md += `> **Source URL:** [${url}](${url})  \n`;
-  md += `> **Date:** ${timestamp}  \n`;
-  md += `> **Evaluator:** idstack Evidence-Based Course Design Engine (Manifest V3)\n\n`;
-
-  md += `## Executive Summary\n\n`;
-  md += `- **Bloom's Demand:** ${result.summary?.bloomsLevel || 'N/A'}\n`;
-  md += `- **Constructive Alignment:** ${result.summary?.alignmentScore || 'N/A'}\n`;
-  md += `- **Key Takeaway:** ${result.summary?.keyTakeaway || 'No summary provided.'}\n\n`;
-
-  if (Array.isArray(result.findings) && result.findings.length > 0) {
-    md += `## Evidence-Based Findings & Recommendations\n\n`;
-    result.findings.forEach((f, idx) => {
-      md += `### ${idx + 1}. [${f.tier || 'T1'}] ${f.citation || 'Citation'}\n\n`;
-      md += `- **Severity:** \`${(f.severity || 'info').toUpperCase()}\`\n`;
-      md += `- **Observation:** ${f.observation || ''}\n`;
-      md += `- **Empirical Evidence:** ${f.evidence || ''}\n`;
-      md += `- **Actionable Recommendation:** ${f.recommendation || ''}\n\n`;
-    });
-  }
-
-  if (result.improvedDraft && result.improvedDraft.content) {
-    md += `## ${result.improvedDraft.title || 'Improved Draft & Alignment Matrix'}\n\n`;
-    md += `${result.improvedDraft.content}\n\n`;
-  }
-
-  md += `---\n*Generated by [idstack](https://github.com/savvides/idstack) — Evidence-Based Course Design.*`;
-  return md;
-}
-
-function compileDossierToMarkdown(dossierItems, courseTitle = 'Canvas Course') {
-  if (!Array.isArray(dossierItems) || dossierItems.length === 0) {
-    return `# idstack Course Audit Dossier: ${courseTitle}\n\n*No audit materials in dossier.*`;
-  }
-
-  const timestamp = new Date().toLocaleString();
-  let md = `# idstack Course Audit Dossier: ${courseTitle}\n\n`;
-  md += `> **Course:** ${courseTitle}  \n`;
-  md += `> **Total Audited Materials:** ${dossierItems.length} components  \n`;
-  md += `> **Compiled Date:** ${timestamp}  \n`;
-  md += `> **Engine:** idstack Evidence-Based Instructional Design Co-Pilot\n\n`;
-
-  md += `## Table of Audited Materials\n\n`;
-  md += `| # | Component Title | Type | Bloom's Demand | Alignment Score |\n`;
-  md += `| :--- | :--- | :--- | :--- | :--- |\n`;
-  dossierItems.forEach((item, idx) => {
-    const s = item.result?.summary || {};
-    md += `| ${idx + 1} | ${item.title || 'Untitled'} | ${item.pageType || 'Page'} | ${s.bloomsLevel || 'N/A'} | ${s.alignmentScore || 'N/A'} |\n`;
-  });
-  md += `\n---\n\n`;
-
-  dossierItems.forEach((item, idx) => {
-    md += `## Section ${idx + 1}: ${item.title || 'Component'}\n\n`;
-    md += `> **Type:** ${item.pageType || 'Page'} | **Source:** ${item.url || 'N/A'}\n\n`;
-
-    const r = item.result || {};
-    md += `### Summary\n`;
-    md += `- **Cognitive Demand:** ${r.summary?.bloomsLevel || 'N/A'}\n`;
-    md += `- **Alignment Rating:** ${r.summary?.alignmentScore || 'N/A'}\n`;
-    md += `- **Takeaway:** ${r.summary?.keyTakeaway || 'N/A'}\n\n`;
-
-    if (Array.isArray(r.findings) && r.findings.length > 0) {
-      md += `### Findings & Evidence\n\n`;
-      r.findings.forEach((f, fIdx) => {
-        md += `#### ${idx + 1}.${fIdx + 1} [${f.tier || 'T1'}] ${f.citation || 'Citation'}\n`;
-        md += `- **Observation:** ${f.observation || ''}\n`;
-        md += `- **Evidence:** ${f.evidence || ''}\n`;
-        md += `- **Recommendation:** ${f.recommendation || ''}\n\n`;
-      });
-    }
-
-    if (r.improvedDraft && r.improvedDraft.content) {
-      md += `### ${r.improvedDraft.title || 'Revised Draft'}\n\n`;
-      md += `${r.improvedDraft.content}\n\n`;
-    }
-
-    md += `---\n\n`;
-  });
-
-  md += `*Generated by [idstack](https://github.com/savvides/idstack) — Evidence-Based Course Design.*`;
-  return md;
-}
-
-module.exports = {
-  compileSingleAuditToMarkdown,
-  compileDossierToMarkdown
-};
diff --git a/extension/shared/evidence-base.cjs b/extension/shared/evidence-base.cjs
deleted file mode 100644
index 0bb8374..0000000
--- a/extension/shared/evidence-base.cjs
+++ /dev/null
@@ -1,26 +0,0 @@
-const TIER_METADATA = {
-  T1: { label: 'Meta-analysis', description: 'Systematic reviews / meta-analyses with large effect sizes', color: '#2f7a4a' },
-  T2: { label: 'Controlled trial', description: 'Peer-reviewed empirical randomized or quasi-experimental studies', color: '#2864a8' },
-  T3: { label: 'Observational', description: 'Correlational, cohort, or longitudinal learning studies', color: '#a87726' },
-  T4: { label: 'Case study', description: 'Single-institution or discipline-specific qualitative studies', color: '#b35a1f' },
-  T5: { label: 'Expert guidance', description: 'Established instructional design frameworks (QM, OLC, Bloom)', color: '#6b6b6b' }
-};
-
-const EVIDENCE_DOMAINS = [
-  { code: 'Models', name: 'Instructional Design Models & Frameworks', keyStudies: ['Abuhassna et al. (2024) [T3]', 'Kalonde et al. (2025) [T3]', 'Crompton et al. (2023) [T3]'] },
-  { code: 'Alignment', name: 'Constructive Alignment & Learning Objectives', keyStudies: ['Biggs (1996) [T5]', 'Anderson & Krathwohl (2001) [T5]', 'Agarwal (2019) [T1]'] },
-  { code: 'Needs', name: 'Needs Analysis', keyStudies: ['Markaki et al. (2021) [T3]', 'Garavan et al. (2019) [T3]', 'Alsalamah & Callinan (2021) [T3]'] },
-  { code: 'Cognitive', name: 'Cognitive Load Theory & Sequencing', keyStudies: ['Sweller (1994) [T5]', 'Costley et al. (2023) [T1]', 'Paas & van Merrienboer (2020) [T5]', 'Chen et al. (2018) [T1]'] },
-  { code: 'Assessment', name: 'Formative Assessment & Feedback', keyStudies: ['Wisniewski et al. (2020) [T1]', 'Hattie & Timperley (2007) [T1]', 'Black & Wiliam (1998) [T1]', 'Double et al. (2019) [T1]'] },
-  { code: 'Multimedia', name: 'Multimedia Learning Principles', keyStudies: ['Mayer (2024) [T5]', 'Moreno & Mayer (1999) [T1]', 'Noetel et al. (2021) [T1]'] },
-  { code: 'Learner', name: 'Learner Analysis & Differentiation', keyStudies: ['Deunk et al. (2018) [T1]', 'Puzio et al. (2020) [T1]', 'Liou et al. (2023) [T2]'] },
-  { code: 'Evaluation', name: 'Evaluation Models', keyStudies: ['Kirkpatrick / Alsalamah & Callinan (2021) [T3]', 'Frye & Hemmer (2012) [T5]', 'Allen et al. (2021) [T3]'] },
-  { code: 'Prototype', name: 'Rapid Prototyping & Design-Based Research', keyStudies: ['Tripp & Bichelmeyer (1990) [T5]', 'Shakeel et al. (2022) [T2]', 'Design-Based Research Collective (2003) [T5]'] },
-  { code: 'Online', name: 'Online Course Quality Frameworks', keyStudies: ['Quality Matters / Zimmerman et al. (2020) [T4]', 'Castro & Tumibay (2019) [T1]', 'Swan et al. (2012) [T2]'] },
-  { code: 'Accessibility', name: 'Universal Design for Learning & A11y', keyStudies: ['CAST UDL Guidelines (2024) [T5]', 'WCAG 2.1/2.2 AA [T5]', 'Puzio et al. (2020) [T1]'] }
-];
-
-module.exports = {
-  TIER_METADATA,
-  EVIDENCE_DOMAINS
-};
diff --git a/extension/shared/prompts.cjs b/extension/shared/prompts.cjs
deleted file mode 100644
index 3192726..0000000
--- a/extension/shared/prompts.cjs
+++ /dev/null
@@ -1,93 +0,0 @@
-const { EVIDENCE_DOMAINS, TIER_METADATA } = require('./evidence-base.cjs');
-
-function buildAuditPrompt({ title, pageType, content = '' }) {
-  return `You are idstack, an evidence-based instructional design co-pilot.
-Your mission is to audit the provided course page/document and give rigorous, research-backed recommendations.
-
-Target Document Title: "${title || 'Untitled Course Page'}"
-Detected Document Type: ${pageType || 'Course Content'}
-
-Document Content:
-"""
-${(content || '').slice(0, 10000)}
-"""
-
-Please audit this material against peer-reviewed instructional design evidence:
-1. Classify learning objectives or implied cognitive depth using Bloom's Revised Taxonomy (Remember, Understand, Apply, Analyze, Evaluate, Create).
-2. Check Constructive Alignment: Do activities and assessments match the stated or necessary cognitive depth?
-3. Flag Cognitive Load, Elaborated Feedback gaps, and Accessibility considerations.
-4. Rate each recommendation with an evidence tier [T1] to [T5].
-5. Provide a ready-to-use, improved version (rewritten rubric, upgraded learning outcome verbs, or enhanced prompt).
-
-You MUST respond strictly with valid JSON conforming to this schema:
-{
-  "summary": {
-    "bloomsLevel": "Remember | Understand | Apply | Analyze | Evaluate | Create",
-    "alignmentScore": "Strong | Moderate | Weak",
-    "keyTakeaway": "1-2 sentence executive summary of findings"
-  },
-  "findings": [
-    {
-      "severity": "critical | warning | suggestion",
-      "tier": "T1 | T2 | T3 | T4 | T5",
-      "citation": "[Domain-Code] Short Citation",
-      "observation": "What is present in the current material",
-      "evidence": "What peer-reviewed research indicates",
-      "recommendation": "Specific actionable suggestion"
-    }
-  ],
-  "improvedDraft": {
-    "title": "Improved Rubric / Learning Objective / Assignment Prompt",
-    "content": "Full markdown text ready for the instructor to copy-paste into Canvas"
-  }
-}`;
-}
-
-function buildCourseAuditPrompt(courseData = {}) {
-  const assignmentsSummary = (courseData.assignments || [])
-    .map((a, i) => `Assignment ${i+1}: ${a.title} (${a.points || 0} pts)\nDescription: ${(a.description || '').slice(0, 500)}`)
-    .join('\n\n');
-
-  return `You are an expert instructional designer and cognitive scientist using the idstack evidence base.
-Perform a full-course Constructive Alignment audit (courseAudit) for the following course:
-
-COURSE TITLE: ${courseData.title || 'Canvas Course'}
-SYLLABUS & LEARNING OBJECTIVES:
-${(courseData.syllabus || 'No syllabus provided').slice(0, 8000)}
-
-COURSE ASSIGNMENTS & ASSESSMENTS (${(courseData.assignments || []).length} items):
-${assignmentsSummary.slice(0, 20000)}
-
-Evaluate whether the assessment system constructively aligns with stated learning outcomes (Biggs 1996 [T2], Liou et al. 2023 [T2]).
-Identify cognitive load bottlenecks (Sweller 2011 [T1]), scaffolding gaps (Wood et al. 1976 [T2]), and formative feedback quality (Wisniewski et al. 2020 [T1]).
-
-Respond with ONLY a valid JSON object matching this schema:
-{
-  "summary": {
-    "bloomsLevel": "Overall Cognitive Demand (e.g. Apply / Analyze)",
-    "alignmentScore": "High (90%) | Moderate (70%) | Low (40%)",
-    "keyTakeaway": "1-2 sentence executive summary of course-wide curriculum alignment."
-  },
-  "findings": [
-    {
-      "severity": "critical" | "warning" | "info",
-      "tier": "T1" | "T2" | "T3" | "T4" | "T5",
-      "citation": "[Domain-ID] Citation Name",
-      "observation": "What was identified across the course syllabus and assignments.",
-      "evidence": "Author (Year) [Tier description]: Empirical finding.",
-      "recommendation": "Concrete actionable curriculum fix."
-    }
-  ],
-  "improvedDraft": {
-    "title": "Course Alignment & Scaffolding Matrix",
-    "content": "Markdown formatted course roadmap and revised assessment scaffolding."
-  }
-}`;
-}
-
-module.exports = {
-  EVIDENCE_DOMAINS,
-  TIER_METADATA,
-  buildAuditPrompt,
-  buildCourseAuditPrompt
-};
diff --git a/extension/sidepanel/renderer-helper.cjs b/extension/sidepanel/renderer-helper.cjs
deleted file mode 100644
index d2b4438..0000000
--- a/extension/sidepanel/renderer-helper.cjs
+++ /dev/null
@@ -1,116 +0,0 @@
-/**
- * idstack Side Panel HTML Renderer Helper (CommonJS)
- */
-
-function escapeHtml(str) {
-  if (str === null || str === undefined) return '';
-  return String(str)
-    .replace(/&/g, '&amp;')
-    .replace(/</g, '&lt;')
-    .replace(/>/g, '&gt;')
-    .replace(/"/g, '&quot;')
-    .replace(/'/g, '&#039;');
-}
-
-function renderAuditHTML(data) {
-  if (!data) return '';
-  const summary = data.summary || { bloomsLevel: 'N/A', alignmentScore: 'N/A', keyTakeaway: '' };
-  const findings = data.findings || [];
-  const improvedDraft = data.improvedDraft || { title: 'Improved Draft', content: '' };
-
-  const findingsHTML = findings.map(f => {
-    const tier = escapeHtml(f.tier || 'T1');
-    const tierClass = escapeHtml((f.tier || 'T1').toLowerCase());
-    const severity = escapeHtml(f.severity || 'info');
-    const citation = escapeHtml(f.citation || '');
-    const observation = escapeHtml(f.observation || '');
-    const evidence = escapeHtml(f.evidence || '');
-    const recommendation = escapeHtml(f.recommendation || '');
-
-    return `
-    <div class="finding-card severity-${severity}">
-      <div class="finding-header">
-        <span class="tier-badge tier-${tierClass}">${tier}</span>
-        <span class="citation">${citation}</span>
-      </div>
-      <p class="finding-obs"><strong>Observation:</strong> ${observation}</p>
-      <p class="finding-evi"><strong>Evidence:</strong> ${evidence}</p>
-      <p class="finding-rec"><strong>Recommendation:</strong> ${recommendation}</p>
-    </div>
-  `;
-  }).join('');
-
-  const bloomsLevel = escapeHtml(summary.bloomsLevel || 'N/A');
-  const alignmentScore = escapeHtml(summary.alignmentScore || 'N/A');
-  const keyTakeaway = escapeHtml(summary.keyTakeaway || '');
-  const draftTitle = escapeHtml(improvedDraft.title || 'Improved Draft');
-  const draftContent = escapeHtml(improvedDraft.content || '');
-
-  return `
-    <div class="context-card summary-card">
-      <div class="score-row">
-        <span class="chip">Bloom's: <strong>${bloomsLevel}</strong></span>
-        <span class="chip">Alignment: <strong>${alignmentScore}</strong></span>
-      </div>
-      <p class="key-takeaway">${keyTakeaway}</p>
-    </div>
-
-    <h3 class="section-title">Evidence-Based Findings (${findings.length})</h3>
-    <div class="findings-list">${findingsHTML}</div>
-
-    <div class="improved-box">
-      <div class="improved-header">
-        <h4>${draftTitle}</h4>
-        <button id="copy-improved-btn" class="secondary-btn">📋 Copy to Clipboard</button>
-      </div>
-      <pre class="improved-content"><code>${draftContent}</code></pre>
-    </div>
-
-    <div class="feedback-row">
-      <span>Was this audit helpful?</span>
-      <button class="feedback-btn" data-vote="up">👍</button>
-      <button class="feedback-btn" data-vote="down">👎</button>
-      <button id="re-audit-btn" class="link-btn">Audit Another Page</button>
-    </div>
-  `;
-}
-
-function renderDossierListHTML(dossierItems) {
-  if (!Array.isArray(dossierItems) || dossierItems.length === 0) {
-    return `
-      <div class="dossier-empty">
-        <p>No items in dossier yet.</p>
-        <p class="help-text">Audit pages and click &ldquo;Add to Dossier&rdquo; to build your course dossier.</p>
-      </div>
-    `;
-  }
-
-  return dossierItems.map((item) => {
-    const id = escapeHtml(item.id || '');
-    const title = escapeHtml(item.title || 'Untitled Material');
-    const pageType = escapeHtml(item.pageType || 'Page');
-    const blooms = escapeHtml(item.result?.summary?.bloomsLevel || 'N/A');
-    const alignment = escapeHtml(item.result?.summary?.alignmentScore || 'N/A');
-
-    return `
-      <div class="dossier-item" data-dossier-id="${id}">
-        <div class="dossier-item-header">
-          <span class="chip">${pageType}</span>
-          <button class="dossier-delete-btn icon-btn" data-dossier-id="${id}" title="Remove from Dossier">✕</button>
-        </div>
-        <h4 class="dossier-item-title">${title}</h4>
-        <div class="dossier-item-meta">
-          <span>Bloom's: <strong>${blooms}</strong></span>
-          <span>Alignment: <strong>${alignment}</strong></span>
-        </div>
-      </div>
-    `;
-  }).join('');
-}
-
-module.exports = {
-  escapeHtml,
-  renderAuditHTML,
-  renderDossierListHTML
-};
-
diff --git a/test/extension-harness.mjs b/test/extension-harness.mjs
new file mode 100644
index 0000000..8b3df5d
--- /dev/null
+++ b/test/extension-harness.mjs
@@ -0,0 +1,278 @@
+// Loads the SHIPPED extension files under Node with stubbed browser globals.
+// Tests import extension/**/*.js directly; never copy a module into test/ or
+// keep a hand-maintained twin (that is how the old .cjs copies worked).
+//
+// Fake-DOM limits: no entity decoding in text, innerText is not layout-aware,
+// no event bubbling, selectors are limited to tag, #id, .a.b, [attr] and
+// [attr="v"] with descendant combinators and comma lists. The parser expects
+// well-formed markup: a close tag that does not match the open element is
+// ignored, `<x />` on a non-void tag stays open, and an attribute value must
+// not contain the other quote character.
+import { readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+import vm from 'node:vm';
+
+const EXT = new URL('../extension/', import.meta.url);
+const require = createRequire(import.meta.url);
+
+// ES modules (service worker, side panel, shared/*): each call re-runs the
+// module's top-level code. Its imports stay cached, which is fine: they read
+// chrome/fetch/document at call time, not at load time.
+let freshCount = 0;
+export function importFresh(relPath) {
+  return import(`${new URL(relPath, EXT).href}?fresh=${++freshCount}`);
+}
+
+// Classic content scripts carry no ESM syntax, so Node loads them as CommonJS
+// (via extractor.js's module.exports guard). A query string does not bust the
+// CommonJS cache, hence require + cache delete. vm.Script first: Chrome runs
+// content scripts as classic scripts, so import/export must fail here rather
+// than be quietly accepted by Node's require(esm).
+export function loadContentScript(relPath) {
+  const file = fileURLToPath(new URL(relPath, EXT));
+  new vm.Script(readFileSync(file, 'utf8'), { filename: file });
+  delete require.cache[file];
+  return require(file);
+}
+
+// Resolves after every already-queued promise callback has run.
+export const flush = () => new Promise((resolve) => setTimeout(resolve, 0));
+
+export const EXTENSION_ID = 'idstackextensionidfortests';
+// What chrome.runtime.onMessage sees for a message from the side panel page.
+const PANEL_SENDER = { id: EXTENSION_ID, url: `chrome-extension://${EXTENSION_ID}/sidepanel/index.html` };
+
+function storageArea(data) {
+  return {
+    // keys: string | string[] | null (everything) | { key: default }.
+    // Callbacks run asynchronously, as in Chrome: two get-then-set sequences
+    // in flight at once interleave here exactly as they do in the browser.
+    get(keys, callback) {
+      const defaults = keys && typeof keys === 'object' && !Array.isArray(keys) ? keys : {};
+      const wanted = keys == null ? Object.keys(data) : typeof keys === 'string' ? [keys] : Array.isArray(keys) ? keys : Object.keys(keys);
+      const out = {};
+      for (const k of wanted) {
+        if (k in data) out[k] = structuredClone(data[k]);
+        else if (k in defaults) out[k] = defaults[k];
+      }
+      const done = Promise.resolve(out);
+      if (callback) done.then(callback);
+      return done;
+    },
+    set(items, callback) {
+      Object.assign(data, structuredClone(items));
+      const done = Promise.resolve();
+      if (callback) done.then(() => callback());
+      return done;
+    }
+  };
+}
+
+// Installs globalThis.chrome. Options:
+//   sync, local       initial chrome.storage contents
+//   tabs              what chrome.tabs.query resolves to
+//   onTabMessage      (tabId, message) => response for chrome.tabs.sendMessage;
+//                     omitted = reject like a tab with no content script
+//   onRuntimeMessage  (message) => response for chrome.runtime.sendMessage
+// Returns { chrome, storage, listeners, sent, dispatch }. storage.sync/.local
+// are the live backing objects; sent records runtime.sendMessage calls;
+// dispatch(message, sender = PANEL_SENDER) delivers to the registered
+// runtime.onMessage listeners and resolves with the sendResponse value
+// (undefined if no listener keeps the channel open and none responds).
+export function installChrome({ sync = {}, local = {}, tabs = [], onTabMessage, onRuntimeMessage } = {}) {
+  const storage = { sync: structuredClone(sync), local: structuredClone(local) };
+  const listeners = { message: [], tabActivated: [], tabUpdated: [] };
+  const sent = [];
+  const chrome = {
+    runtime: {
+      id: EXTENSION_ID,
+      getURL: (p = '') => `chrome-extension://${EXTENSION_ID}/${p}`,
+      lastError: undefined,
+      onMessage: { addListener: (fn) => listeners.message.push(fn) },
+      sendMessage(message, callback) {
+        sent.push(message);
+        const reply = Promise.resolve(onRuntimeMessage ? onRuntimeMessage(message) : undefined);
+        if (!callback) return reply; // MV3 promise form
+        reply.then(callback);
+      }
+    },
+    storage: { sync: storageArea(storage.sync), local: storageArea(storage.local) },
+    tabs: {
+      query: async () => tabs,
+      sendMessage: async (tabId, message) => {
+        if (!onTabMessage) throw new Error('Could not establish connection. Receiving end does not exist.');
+        return onTabMessage(tabId, message);
+      },
+      onActivated: { addListener: (fn) => listeners.tabActivated.push(fn) },
+      onUpdated: { addListener: (fn) => listeners.tabUpdated.push(fn) }
+    },
+    scripting: { executeScript: async () => [] },
+    sidePanel: { setPanelBehavior: async () => {} }
+  };
+  globalThis.chrome = chrome;
+
+  function dispatch(message, sender = PANEL_SENDER) {
+    return new Promise((resolve) => {
+      let responded = false;
+      const sendResponse = (response) => {
+        if (!responded) { responded = true; resolve(response); }
+      };
+      const keepOpen = listeners.message
+        .map((fn) => fn(message, sender, sendResponse))
+        .some((r) => r === true);
+      if (!keepOpen && !responded) resolve(undefined);
+    });
+  }
+  return { chrome, storage, listeners, sent, dispatch };
+}
+
+// Replaces globalThis.fetch; handler(url, init) returns a Response or throws.
+// Returns the array of recorded { url, init } calls.
+const realFetch = globalThis.fetch;
+export function installFetch(handler) {
+  const calls = [];
+  globalThis.fetch = async (url, init = {}) => {
+    calls.push({ url: String(url), init });
+    return handler(String(url), init);
+  };
+  return calls;
+}
+
+export function jsonResponse(body, init = {}) {
+  return new Response(JSON.stringify(body), {
+    status: 200,
+    headers: { 'Content-Type': 'application/json' },
+    ...init
+  });
+}
+
+// ---- Minimal DOM: enough for extractor.js selectors and sidepanel.js. ----
+// Results come in document order, as in Chrome. Assigning innerHTML re-parses,
+// so rendered buttons are live. Text is not entity-decoded: assert on structure
+// (querySelector) rather than on decoded text.
+const VOID_TAGS = new Set(['meta', 'link', 'img', 'br', 'hr', 'input']);
+
+class FakeElement {
+  constructor(tagName, attrs = {}) {
+    this.tagName = tagName.toLowerCase();
+    this.attrs = attrs;
+    this.children = [];
+    this.parentElement = null;
+    this.listeners = {};
+    this.value = attrs.value || '';
+    this.style = {};
+    for (const decl of (attrs.style || '').split(';')) {
+      const [prop, val] = decl.split(':').map((s) => s && s.trim());
+      if (prop && val) this.style[prop] = val;
+    }
+    const el = this;
+    this.classList = {
+      contains: (c) => el._classes().includes(c),
+      add: (c) => { if (!el.classList.contains(c)) el.attrs.class = [...el._classes(), c].join(' '); },
+      remove: (c) => { el.attrs.class = el._classes().filter((x) => x !== c).join(' '); },
+      toggle: (c) => (el.classList.contains(c) ? (el.classList.remove(c), false) : (el.classList.add(c), true))
+    };
+  }
+  _classes() { return (this.attrs.class || '').split(/\s+/).filter(Boolean); }
+  get id() { return this.attrs.id || ''; }
+  getAttribute(name) { return name in this.attrs ? this.attrs[name] : null; }
+  get textContent() {
+    return this.children.map((c) => (typeof c === 'string' ? c : c.textContent)).join(' ').trim();
+  }
+  set textContent(text) { this.children = [String(text)]; }
+  get innerText() { return this.textContent; }
+  set innerHTML(html) {
+    this.children = parseHtml(String(html)).children;
+    for (const c of this.children) if (typeof c !== 'string') c.parentElement = this;
+  }
+  appendChild(child) { child.parentElement = this; this.children.push(child); return child; }
+  removeChild(child) { this.children = this.children.filter((c) => c !== child); return child; }
+  addEventListener(type, fn) { (this.listeners[type] ||= []).push(fn); }
+  click() {
+    const event = { type: 'click', target: this, currentTarget: this, stopPropagation() {}, preventDefault() {} };
+    for (const fn of this.listeners.click || []) fn(event);
+  }
+  _descendants() {
+    const out = [];
+    const walk = (el) => { for (const c of el.children) if (typeof c !== 'string') { out.push(c); walk(c); } };
+    walk(this);
+    return out;
+  }
+  _matches(part) {
+    if (part.startsWith('#')) return this.attrs.id === part.slice(1);
+    if (part.startsWith('.')) return part.split('.').filter(Boolean).every((c) => this._classes().includes(c));
+    if (part.startsWith('[')) {
+      const m = part.match(/\[([a-zA-Z0-9_-]+)(?:="([^"]*)")?\]/);
+      return !!m && (m[2] === undefined ? m[1] in this.attrs : this.attrs[m[1]] === m[2]);
+    }
+    return this.tagName === part.toLowerCase();
+  }
+  // Document order, like the real DOM: querySelector('a, b') returns whichever
+  // matching element comes first in the page, not the first selector's match.
+  querySelectorAll(selectorList) {
+    const selectors = selectorList.split(',').map((s) => s.trim().split(/\s+/));
+    return this._descendants().filter((el) => selectors.some((parts) => el._matchesSelector(parts)));
+  }
+  querySelector(selectorList) { return this.querySelectorAll(selectorList)[0] || null; }
+  _matchesSelector(parts) {
+    if (!this._matches(parts[parts.length - 1])) return false;
+    let i = parts.length - 2;
+    for (let anc = this.parentElement; anc && i >= 0; anc = anc.parentElement) {
+      if (anc._matches(parts[i])) i--;
+    }
+    return i < 0;
+  }
+}
+
+function parseHtml(html) {
+  const root = new FakeElement('#root');
+  const stack = [root];
+  const tagRe = /<(\/)?([a-zA-Z0-9]+)([^>]*)>|([^<]+)/g;
+  let m;
+  while ((m = tagRe.exec(html)) !== null) {
+    const [, isClose, tag, attrStr, text] = m;
+    const top = stack[stack.length - 1];
+    if (text) {
+      if (text.trim()) top.children.push(text.trim());
+    } else if (isClose) {
+      if (stack.length > 1 && top.tagName === tag.toLowerCase()) stack.pop();
+    } else {
+      const attrs = {};
+      const attrRe = /([a-zA-Z0-9_-]+)(?:=["']([^"']*)["'])?/g;
+      let a;
+      while ((a = attrRe.exec(attrStr)) !== null) attrs[a[1]] = a[2] || '';
+      const el = new FakeElement(tag, attrs);
+      top.appendChild(el);
+      if (!VOID_TAGS.has(el.tagName)) stack.push(el);
+    }
+  }
+  return root;
+}
+
+// Builds a document from an HTML string (does not touch globals).
+export function createDocument(html) {
+  const root = parseHtml(html);
+  const titleEl = root.querySelector('title');
+  return {
+    title: titleEl ? titleEl.textContent : '',
+    body: root.querySelector('body') || root,
+    getElementById: (id) => root._descendants().find((el) => el.id === id) || null,
+    querySelector: (s) => root.querySelector(s),
+    querySelectorAll: (s) => root.querySelectorAll(s),
+    createElement: (tag) => new FakeElement(tag)
+  };
+}
+
+// Installs globalThis.document; defaults to the shipped side panel page.
+export function installDocument(html = readFileSync(new URL('sidepanel/index.html', EXT), 'utf8')) {
+  globalThis.document = createDocument(html);
+  return globalThis.document;
+}
+
+export function resetGlobals() {
+  delete globalThis.chrome;
+  delete globalThis.document;
+  delete globalThis.window;
+  globalThis.fetch = realFetch;
+}
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index bc3f6f5..1f341bb 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -441,6 +441,41 @@ fresh
 printf 'idstack also runs in OpenAI Codex CLI.\n' > "$WORK/r/docs/superpowers/leak.md"  # IDSTACK_CLI_LEAK_ALLOW
 expect_fail "committed docs/superpowers is not sweep-exempt" "$WORK/r/test/smoke-test.sh" "$WORK/r"
 
+# 24a/24b/24f. The extension suite must exercise the SHIPPED files. Every
+# extension test used to load a hand-maintained .cjs twin, so a bug planted in
+# the .js that Chrome actually runs stayed green.
+
+# 24a. shipped renderer stops escaping '<' -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/renderer-helper.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "    .replace(/</g, '&lt;')\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "shipped renderer stops escaping '<'" "$WORK/r/test/test-extension.sh"
+
+# 24b. the course-root detector the side panel imports treats every course page
+# as the root -> test-extension must fail. The old suite tested extractor.js's
+# copy (via a .cjs twin); sidepanel.js imports content/extractor-core.js.
+fresh
+python3 - "$WORK/r/extension/content/extractor-core.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "isCourseRoot: !!match,"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "isCourseRoot: !!anyCourseMatch,", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "side panel course-root detector matches every course page" "$WORK/r/test/test-extension.sh"
+
+# 24f. a hand-copied .cjs twin comes back -> test-extension must fail.
+fresh
+cp "$WORK/r/extension/sidepanel/renderer-helper.js" "$WORK/r/extension/sidepanel/renderer-helper.cjs"
+expect_fail "hand-copied .cjs twin back in extension/" "$WORK/r/test/test-extension.sh"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-course-context.mjs b/test/test-course-context.mjs
new file mode 100644
index 0000000..91a9492
--- /dev/null
+++ b/test/test-course-context.mjs
@@ -0,0 +1,23 @@
+import assert from 'node:assert';
+import { detectCourseContext } from '../extension/content/extractor-core.js';
+
+// The side panel imports this module (sidepanel.js L3); test that file, not the content script.
+const rootCtx = detectCourseContext('https://canvas.instructure.com/courses/987654', 'Biology 101');
+assert.strictEqual(rootCtx.isCourseRoot, true);
+assert.strictEqual(rootCtx.courseId, '987654');
+assert.strictEqual(rootCtx.origin, 'https://canvas.instructure.com');
+
+const modulesCtx = detectCourseContext('https://canvas.instructure.com/courses/987654/modules', 'Modules');
+assert.strictEqual(modulesCtx.isCourseRoot, true);
+assert.strictEqual(modulesCtx.courseId, '987654');
+assert.strictEqual(modulesCtx.origin, 'https://canvas.instructure.com');
+
+const queryParamCtx = detectCourseContext('https://canvas.instructure.com/courses/987654/modules?view=feed', 'Modules Feed');
+assert.strictEqual(queryParamCtx.isCourseRoot, true);
+assert.strictEqual(queryParamCtx.courseId, '987654');
+
+const subpageCtx = detectCourseContext('https://canvas.instructure.com/courses/987654/assignments/123', 'Lab 1');
+assert.strictEqual(subpageCtx.isCourseRoot, false);
+assert.strictEqual(subpageCtx.courseId, '987654');
+
+console.log('✅ Course context detection tests passed.');
diff --git a/test/test-crawler.js b/test/test-crawler.js
deleted file mode 100644
index 6c8f325..0000000
--- a/test/test-crawler.js
+++ /dev/null
@@ -1,50 +0,0 @@
-const assert = require('assert');
-const { crawlCanvasCourse, stripHtml } = require('../extension/background/canvas-crawler.cjs');
-const { getDemoCourseAuditResult } = require('../extension/background/parser-helper.cjs');
-
-// Test 1: HTML Tag Stripping
-const clean = stripHtml('<p>Hello <strong>World</strong> &amp; Students<br></p>');
-assert.strictEqual(clean, 'Hello World & Students');
-
-// Test 2: Mock Canvas Crawler
-let fetchOptionsPassed = [];
-const mockFetch = async (url, options) => {
-  if (options) fetchOptionsPassed.push(options);
-  if (url.includes('include[]=syllabus_body')) {
-    return {
-      ok: true,
-      json: async () => ({
-        name: 'Biology 101: Cell Systems',
-        syllabus_body: '<p>Welcome to Biology 101. Objectives: Analyze cellular metabolism.</p>'
-      })
-    };
-  }
-  if (url.includes('/assignments')) {
-    return {
-      ok: true,
-      json: async () => [
-        { name: 'Quiz 1', description: '<p>Recall organelles</p>', points_possible: 10 },
-        { name: 'Lab Report 1', description: '<p>Analyze enzyme kinetics</p>', points_possible: 50 }
-      ]
-    };
-  }
-  throw new Error('Not found: ' + url);
-};
-
-(async () => {
-  const courseData = await crawlCanvasCourse('https://canvas.instructure.com', '12345', mockFetch);
-  assert.strictEqual(courseData.title, 'Biology 101: Cell Systems');
-  assert.ok(fetchOptionsPassed.every(opt => opt && opt.credentials === 'include'), 'fetchImpl must include credentials');
-  assert.ok(courseData.syllabus.includes('Analyze cellular metabolism'));
-  assert.strictEqual(courseData.assignments.length, 2);
-  assert.strictEqual(courseData.assignments[0].title, 'Quiz 1');
-  assert.strictEqual(courseData.assignments[0].description, 'Recall organelles');
-
-  // Test 3: Demo Course Audit Fallback
-  const demoResult = getDemoCourseAuditResult({ title: 'Biology 101: Cell Systems' });
-  assert.ok(demoResult.summary.keyTakeaway.includes('Course-Level Demo'));
-  assert.ok(demoResult.findings.length >= 2);
-  assert.ok(demoResult.improvedDraft.title.includes('Matrix'));
-
-  console.log('✅ Task 2 Canvas crawler tests passed.');
-})();
diff --git a/test/test-crawler.mjs b/test/test-crawler.mjs
new file mode 100644
index 0000000..0901d3e
--- /dev/null
+++ b/test/test-crawler.mjs
@@ -0,0 +1,48 @@
+import assert from 'node:assert';
+import { crawlCanvasCourse, stripHtml } from '../extension/background/canvas-crawler.js';
+import { getDemoCourseAuditResult } from '../extension/background/parser-helper.js';
+
+// Test 1: HTML Tag Stripping
+const clean = stripHtml('<p>Hello <strong>World</strong> &amp; Students<br></p>');
+assert.strictEqual(clean, 'Hello World & Students');
+
+// Test 2: Mock Canvas Crawler
+let fetchOptionsPassed = [];
+const mockFetch = async (url, options) => {
+  if (options) fetchOptionsPassed.push(options);
+  if (url.includes('include[]=syllabus_body')) {
+    return {
+      ok: true,
+      json: async () => ({
+        name: 'Biology 101: Cell Systems',
+        syllabus_body: '<p>Welcome to Biology 101. Objectives: Analyze cellular metabolism.</p>'
+      })
+    };
+  }
+  if (url.includes('/assignments')) {
+    return {
+      ok: true,
+      json: async () => [
+        { name: 'Quiz 1', description: '<p>Recall organelles</p>', points_possible: 10 },
+        { name: 'Lab Report 1', description: '<p>Analyze enzyme kinetics</p>', points_possible: 50 }
+      ]
+    };
+  }
+  throw new Error('Not found: ' + url);
+};
+
+const courseData = await crawlCanvasCourse('https://canvas.instructure.com', '12345', mockFetch);
+assert.strictEqual(courseData.title, 'Biology 101: Cell Systems');
+assert.ok(fetchOptionsPassed.every(opt => opt && opt.credentials === 'include'), 'fetchImpl must include credentials');
+assert.ok(courseData.syllabus.includes('Analyze cellular metabolism'));
+assert.strictEqual(courseData.assignments.length, 2);
+assert.strictEqual(courseData.assignments[0].title, 'Quiz 1');
+assert.strictEqual(courseData.assignments[0].description, 'Recall organelles');
+
+// Test 3: Demo Course Audit Fallback
+const demoResult = getDemoCourseAuditResult({ title: 'Biology 101: Cell Systems' });
+assert.ok(demoResult.summary.keyTakeaway.includes('Course-Level Demo'));
+assert.ok(demoResult.findings.length >= 2);
+assert.ok(demoResult.improvedDraft.title.includes('Matrix'));
+
+console.log('✅ Task 2 Canvas crawler tests passed.');
diff --git a/test/test-dossier-compiler.js b/test/test-dossier-compiler.mjs
similarity index 77%
rename from test/test-dossier-compiler.js
rename to test/test-dossier-compiler.mjs
index 8db95e7..7a3b38c 100644
--- a/test/test-dossier-compiler.js
+++ b/test/test-dossier-compiler.mjs
@@ -1,7 +1,5 @@
-const fs = require('fs');
-const path = require('path');
-const assert = require('assert');
-const { compileDossierToMarkdown, compileSingleAuditToMarkdown } = require('../extension/shared/dossier-compiler.cjs');
+import assert from 'node:assert';
+import { compileDossierToMarkdown, compileSingleAuditToMarkdown } from '../extension/shared/dossier-compiler.js';
 
 // Test 1: Single Audit Markdown Compilation
 const singleItem = {
@@ -86,13 +84,4 @@ assert.ok(emptyDossierMd.includes('*No audit materials in dossier.*'));
 const nullDossierMd = compileDossierToMarkdown(null);
 assert.ok(nullDossierMd.includes('*No audit materials in dossier.*'));
 
-// Test 4: Verify storage.js methods exist
-const storagePath = path.join(__dirname, '../extension/shared/storage.js');
-assert.ok(fs.existsSync(storagePath), 'storage.js must exist');
-const storageContent = fs.readFileSync(storagePath, 'utf8');
-assert.ok(storageContent.includes('export async function getDossier()'), 'getDossier export required');
-assert.ok(storageContent.includes('export async function addToDossier('), 'addToDossier export required');
-assert.ok(storageContent.includes('export async function removeFromDossier('), 'removeFromDossier export required');
-assert.ok(storageContent.includes('export async function clearDossier()'), 'clearDossier export required');
-
 console.log('✅ Task 1 Dossier compiler tests passed.');
diff --git a/test/test-extension.sh b/test/test-extension.sh
index a5e5f49..571d5d3 100755
--- a/test/test-extension.sh
+++ b/test/test-extension.sh
@@ -3,14 +3,26 @@ set -euo pipefail
 
 DIR="$(cd "$(dirname "$0")" && pwd)"
 
+# The tests import the shipped extension modules directly. extension/ has no
+# package.json (Chrome needs none), so Node must detect ES module syntax in .js
+# files itself: on by default from Node 20.19 and 22.7.
+if ! node -e 'const [a,b]=process.versions.node.split(".").map(Number);process.exit(a>22||(a===22&&b>=7)||(a===20&&b>=19)?0:1)'; then
+  echo "test-extension.sh needs Node >= 20.19 or >= 22.7 (found $(node --version))" >&2
+  exit 1
+fi
+
+# Test the shipped file, never a copy: hand-maintained .cjs twins let the tests
+# pass against code the extension never ran.
+if find "$DIR/../extension" -name '*.cjs' | grep .; then
+  echo "extension/ must not contain .cjs copies; tests import the shipped .js" >&2
+  exit 1
+fi
+
 echo "==> Running idstack Chrome Extension test suite..."
 node "$DIR/test-manifest.js"
-node "$DIR/test-prompts.js"
-node "$DIR/test-extractor.js"
-node "$DIR/test-crawler.js"
-node "$DIR/test-service-worker.js"
-node "$DIR/test-dossier-compiler.js"
 node "$DIR/test-sidepanel-dom.js"
-node "$DIR/test-sidepanel-logic.js"
+for t in "$DIR"/test-*.mjs; do
+  node "$t"
+done
 
 echo "==> All Chrome Extension tests passed!"
diff --git a/test/test-extractor.js b/test/test-extractor.js
deleted file mode 100644
index 9081df9..0000000
--- a/test/test-extractor.js
+++ /dev/null
@@ -1,338 +0,0 @@
-const assert = require('assert');
-
-// Support JSDOM if available, or fallback to built-in DOM mock for standalone node environments
-let JSDOM;
-try {
-  JSDOM = require('jsdom').JSDOM;
-} catch {
-  class MockElement {
-    constructor(tagName = 'div', attrs = {}, text = '') {
-      this.tagName = tagName.toLowerCase();
-      this.attrs = attrs;
-      this.children = [];
-      this._text = text;
-    }
-    get innerText() {
-      if (this.children.length > 0) {
-        return this.children.map(c => typeof c === 'string' ? c : c.innerText).join(' ').trim();
-      }
-      return this._text.trim();
-    }
-    get textContent() {
-      return this.innerText;
-    }
-    querySelector(selector) {
-      const selectors = selector.split(',').map(s => s.trim());
-      for (const sel of selectors) {
-        const found = this._querySingle(sel);
-        if (found) return found;
-      }
-      return null;
-    }
-    _querySingle(selector) {
-      const parts = selector.split(/\s+/);
-      let current = [this];
-      for (const part of parts) {
-        const next = [];
-        for (const el of current) {
-          next.push(...el._findDescendants(part));
-        }
-        current = next;
-        if (current.length === 0) return null;
-      }
-      return current[0] || null;
-    }
-    _findDescendants(part) {
-      const results = [];
-      const check = (el) => {
-        if (el !== this) {
-          let match = true;
-          if (part.startsWith('#')) {
-            if (el.attrs.id !== part.slice(1)) match = false;
-          } else if (part.startsWith('.')) {
-            const requiredClasses = part.split('.').filter(Boolean);
-            const elClasses = (el.attrs.class || '').split(/\s+/).filter(Boolean);
-            if (!requiredClasses.every(cls => elClasses.includes(cls))) match = false;
-          } else if (part.startsWith('[')) {
-            const m = part.match(/\[([a-zA-Z0-9_-]+)(?:="([^"]*)")?\]/);
-            if (m) {
-              const [, attrName, attrVal] = m;
-              if (attrVal !== undefined) {
-                if (el.attrs[attrName] !== attrVal) match = false;
-              } else {
-                if (!(attrName in el.attrs)) match = false;
-              }
-            }
-          } else {
-            if (el.tagName !== part.toLowerCase()) match = false;
-          }
-          if (match) results.push(el);
-        }
-        for (const child of el.children) {
-          if (typeof child !== 'string') check(child);
-        }
-      };
-      check(this);
-      return results;
-    }
-  }
-
-  function parseHtmlToTree(html) {
-    const root = new MockElement('root');
-    const stack = [root];
-    const tagRegex = /<(\/)?([a-zA-Z0-9]+)([^>]*)>|([^<]+)/g;
-    let match;
-
-    while ((match = tagRegex.exec(html)) !== null) {
-      const [full, isClose, tagName, attrStr, text] = match;
-      if (text) {
-        const trimmed = text.trim();
-        if (trimmed) {
-          const current = stack[stack.length - 1];
-          current.children.push(trimmed);
-        }
-      } else if (tagName) {
-        if (isClose) {
-          if (stack.length > 1 && stack[stack.length - 1].tagName === tagName.toLowerCase()) {
-            stack.pop();
-          }
-        } else {
-          const attrs = {};
-          if (attrStr) {
-            const attrRegex = /([a-zA-Z0-9_-]+)(?:=["']([^"']*)["'])?/g;
-            let attrMatch;
-            while ((attrMatch = attrRegex.exec(attrStr)) !== null) {
-              attrs[attrMatch[1]] = attrMatch[2] || '';
-            }
-          }
-          const el = new MockElement(tagName, attrs);
-          stack[stack.length - 1].children.push(el);
-          if (!['meta', 'link', 'img', 'br', 'hr', 'input'].includes(tagName.toLowerCase())) {
-            stack.push(el);
-          }
-        }
-      }
-    }
-    return root;
-  }
-
-  class SimpleJSDOM {
-    constructor(html, { url = 'http://localhost' } = {}) {
-      const tree = parseHtmlToTree(html);
-      const titleEl = tree.querySelector('title');
-      const titleText = titleEl ? titleEl.innerText : '';
-      const bodyEl = tree.querySelector('body') || tree;
-
-      this.window = {
-        location: { href: url },
-        document: {
-          title: titleText,
-          body: bodyEl,
-          querySelector: (sel) => tree.querySelector(sel)
-        }
-      };
-    }
-  }
-  JSDOM = SimpleJSDOM;
-}
-
-const { detectPageType, extractContentFromDOM, extractPageContent } = require('../extension/content/extractor-core.cjs');
-
-// Test 1: Canvas Assignment fixture
-const canvasAssignmentHTML = `
-  <html>
-    <head><title>Module 3: Enzymes Assignment</title></head>
-    <body>
-      <div id="assignment_show">
-        <h1 class="title">Enzymes Lab Analysis</h1>
-        <div class="description user_content">
-          <p>Read chapter 4 and answer the 5 review questions.</p>
-        </div>
-      </div>
-    </body>
-  </html>
-`;
-const domAssignment = new JSDOM(canvasAssignmentHTML, { url: 'https://canvas.instructure.com/courses/101/assignments/202' });
-const extractedAssignment = extractContentFromDOM(domAssignment.window.document, domAssignment.window.location.href);
-
-assert.strictEqual(extractedAssignment.pageType, 'Canvas Assignment');
-assert.strictEqual(extractedAssignment.title, 'Enzymes Lab Analysis');
-assert.ok(extractedAssignment.content.includes('Read chapter 4'));
-assert.strictEqual(extractedAssignment.wordCount, 9);
-
-// Test 2: Canvas Syllabus fixture
-const canvasSyllabusHTML = `
-  <html>
-    <head><title>Course Syllabus - CS 101</title></head>
-    <body>
-      <h1 class="page-title">CS 101 Syllabus</h1>
-      <div id="syllabusContainer">
-        <p>This course covers algorithms and data structures.</p>
-      </div>
-    </body>
-  </html>
-`;
-const domSyllabus = new JSDOM(canvasSyllabusHTML, { url: 'https://canvas.instructure.com/courses/101/assignments/syllabus' });
-const extractedSyllabus = extractContentFromDOM(domSyllabus.window.document, domSyllabus.window.location.href);
-
-assert.strictEqual(extractedSyllabus.pageType, 'Canvas Syllabus');
-assert.strictEqual(extractedSyllabus.title, 'CS 101 Syllabus');
-assert.ok(extractedSyllabus.content.includes('algorithms and data structures'));
-
-// Test 3: Canvas Modules fixture
-const canvasModulesHTML = `
-  <html>
-    <head><title>Course Modules - BIO 200</title></head>
-    <body>
-      <h1 class="page-title">BIO 200 Modules</h1>
-      <div id="modules">
-        <span class="module-item-title">Week 1: Cellular Respiration</span>
-      </div>
-    </body>
-  </html>
-`;
-const domModules = new JSDOM(canvasModulesHTML, { url: 'https://canvas.instructure.com/courses/101/modules' });
-const extractedModules = extractContentFromDOM(domModules.window.document, domModules.window.location.href);
-
-assert.strictEqual(extractedModules.pageType, 'Canvas Modules');
-assert.strictEqual(extractedModules.title, 'BIO 200 Modules');
-assert.ok(extractedModules.content.includes('Week 1: Cellular Respiration'));
-
-// Test 4: Canvas Rubrics fixture
-const canvasRubricsHTML = `
-  <html>
-    <head><title>Course Rubrics</title></head>
-    <body>
-      <h1 class="page-title">Grading Criteria</h1>
-      <div id="rubrics">
-        <p>Criteria 1: Clarity of argument (10 pts)</p>
-      </div>
-    </body>
-  </html>
-`;
-const domRubrics = new JSDOM(canvasRubricsHTML, { url: 'https://canvas.instructure.com/courses/101/rubrics' });
-const extractedRubrics = extractContentFromDOM(domRubrics.window.document, domRubrics.window.location.href);
-
-assert.strictEqual(extractedRubrics.pageType, 'Canvas Rubric');
-assert.strictEqual(extractedRubrics.title, 'Grading Criteria');
-
-// Test 5: Canvas Generic LMS Page
-const canvasGenericHTML = `
-  <html>
-    <head><title>Course Overview</title></head>
-    <body>
-      <h1 class="page-title">Welcome to PHY 101</h1>
-      <div class="show-content user_content">
-        <p>General introduction to physics principles.</p>
-      </div>
-    </body>
-  </html>
-`;
-const domGeneric = new JSDOM(canvasGenericHTML, { url: 'https://canvas.instructure.com/courses/101/pages/overview' });
-const extractedGeneric = extractContentFromDOM(domGeneric.window.document, domGeneric.window.location.href);
-
-assert.strictEqual(extractedGeneric.pageType, 'Canvas LMS Page');
-assert.strictEqual(extractedGeneric.title, 'Welcome to PHY 101');
-assert.ok(extractedGeneric.content.includes('physics principles'));
-
-// Test 6: Google Docs fixture
-const gdocHTML = `
-  <html>
-    <head><title>Instructional Design Principles - Google Docs</title></head>
-    <body>
-      <div class="kix-appview-editor">
-        <p>Course Outline: 1. Assessment Design 2. Cognitive Load Management</p>
-      </div>
-    </body>
-  </html>
-`;
-const domGdoc = new JSDOM(gdocHTML, { url: 'https://docs.google.com/document/d/1BxiMVs0XRA5nFMdKvBdBZjgmUUqptlbs74OgvE2upms/edit' });
-const extractedGdoc = extractContentFromDOM(domGdoc.window.document, domGdoc.window.location.href);
-
-assert.strictEqual(extractedGdoc.pageType, 'Google Doc Syllabus');
-assert.ok(extractedGdoc.content.includes('Assessment Design'));
-
-// Test 7: Generic Web Page fixture
-const webHTML = `
-  <html>
-    <head><title>Open Courseware Syllabus</title></head>
-    <body>
-      <main>
-        <h1>Introduction to Machine Learning</h1>
-        <p>Course schedule and grading policy.</p>
-      </main>
-    </body>
-  </html>
-`;
-const domWeb = new JSDOM(webHTML, { url: 'https://ocw.mit.edu/syllabus/intro-ml' });
-const extractedWeb = extractContentFromDOM(domWeb.window.document, domWeb.window.location.href);
-
-assert.strictEqual(extractedWeb.pageType, 'Web Syllabus / Course Page');
-assert.strictEqual(extractedWeb.title, 'Open Courseware Syllabus');
-assert.ok(extractedWeb.content.includes('Machine Learning'));
-
-// Test 8: Content length cap at 15000 characters
-const longText = 'word '.repeat(4000); // 20,000 characters
-const longHTML = `<html><head><title>Long Document</title></head><body><main><p>${longText}</p></main></body></html>`;
-const domLong = new JSDOM(longHTML, { url: 'https://example.com/long' });
-const extractedLong = extractContentFromDOM(domLong.window.document, domLong.window.location.href);
-
-assert.strictEqual(extractedLong.content.length, 15000, 'Content should be capped at 15000 chars');
-
-// Test 9: detectPageType helper directly
-assert.strictEqual(detectPageType('https://canvas.instructure.com/courses/1/assignments/2', { querySelector: (s) => s === '#assignment_show' ? {} : null }), 'Canvas Assignment');
-assert.strictEqual(detectPageType('https://docs.google.com/document/d/123', {}), 'Google Doc Syllabus');
-assert.strictEqual(detectPageType('https://harvard.edu/syllabus', {}), 'Web Syllabus / Course Page');
-
-// Test 10: Chrome Runtime onMessage listener handling
-let messageListener = null;
-global.chrome = {
-  runtime: {
-    onMessage: {
-      addListener: (fn) => {
-        messageListener = fn;
-      }
-    }
-  }
-};
-global.window = domAssignment.window;
-global.document = domAssignment.window.document;
-
-delete require.cache[require.resolve('../extension/content/extractor.js')];
-require('../extension/content/extractor.js');
-
-assert.ok(typeof messageListener === 'function', 'chrome.runtime.onMessage listener should be registered');
-let responseData = null;
-messageListener({ action: 'EXTRACT_CONTENT' }, {}, (data) => {
-  responseData = data;
-});
-assert.ok(responseData, 'Response data must be returned on EXTRACT_CONTENT action');
-assert.strictEqual(responseData.pageType, 'Canvas Assignment');
-assert.strictEqual(responseData.title, 'Enzymes Lab Analysis');
-
-// Clean up globals
-delete global.chrome;
-delete global.window;
-delete global.document;
-
-// Test 11: Canvas Course Root Detection
-const { detectCourseContext } = require('../extension/content/extractor-core.cjs');
-const rootCtx = detectCourseContext('https://canvas.instructure.com/courses/987654', 'Biology 101');
-assert.strictEqual(rootCtx.isCourseRoot, true);
-assert.strictEqual(rootCtx.courseId, '987654');
-assert.strictEqual(rootCtx.origin, 'https://canvas.instructure.com');
-
-const modulesCtx = detectCourseContext('https://canvas.instructure.com/courses/987654/modules', 'Modules');
-assert.strictEqual(modulesCtx.isCourseRoot, true);
-assert.strictEqual(modulesCtx.courseId, '987654');
-assert.strictEqual(modulesCtx.origin, 'https://canvas.instructure.com');
-
-const queryParamCtx = detectCourseContext('https://canvas.instructure.com/courses/987654/modules?view=feed', 'Modules Feed');
-assert.strictEqual(queryParamCtx.isCourseRoot, true);
-assert.strictEqual(queryParamCtx.courseId, '987654');
-
-const subpageCtx = detectCourseContext('https://canvas.instructure.com/courses/987654/assignments/123', 'Lab 1');
-assert.strictEqual(subpageCtx.isCourseRoot, false);
-assert.strictEqual(subpageCtx.courseId, '987654');
-
-console.log('✅ Task 3 extractor tests passed.');
diff --git a/test/test-extractor.mjs b/test/test-extractor.mjs
new file mode 100644
index 0000000..4ab2e38
--- /dev/null
+++ b/test/test-extractor.mjs
@@ -0,0 +1,167 @@
+import assert from 'node:assert';
+import { createDocument, installChrome, loadContentScript, resetGlobals } from './extension-harness.mjs';
+
+// The shipped content script: a classic script, loaded exactly as Chrome gets it.
+const { detectPageType, extractContentFromDOM } = loadContentScript('content/extractor.js');
+const page = (html, url) => ({ url, document: createDocument(html) });
+
+// Test 1: Canvas Assignment fixture
+const canvasAssignmentHTML = `
+  <html>
+    <head><title>Module 3: Enzymes Assignment</title></head>
+    <body>
+      <div id="assignment_show">
+        <h1 class="title">Enzymes Lab Analysis</h1>
+        <div class="description user_content">
+          <p>Read chapter 4 and answer the 5 review questions.</p>
+        </div>
+      </div>
+    </body>
+  </html>
+`;
+const domAssignment = page(canvasAssignmentHTML, 'https://canvas.instructure.com/courses/101/assignments/202');
+const extractedAssignment = extractContentFromDOM(domAssignment.document, domAssignment.url);
+
+assert.strictEqual(extractedAssignment.pageType, 'Canvas Assignment');
+assert.strictEqual(extractedAssignment.title, 'Enzymes Lab Analysis');
+assert.ok(extractedAssignment.content.includes('Read chapter 4'));
+assert.strictEqual(extractedAssignment.wordCount, 9);
+
+// Test 2: Canvas Syllabus fixture
+const canvasSyllabusHTML = `
+  <html>
+    <head><title>Course Syllabus - CS 101</title></head>
+    <body>
+      <h1 class="page-title">CS 101 Syllabus</h1>
+      <div id="syllabusContainer">
+        <p>This course covers algorithms and data structures.</p>
+      </div>
+    </body>
+  </html>
+`;
+const domSyllabus = page(canvasSyllabusHTML, 'https://canvas.instructure.com/courses/101/assignments/syllabus');
+const extractedSyllabus = extractContentFromDOM(domSyllabus.document, domSyllabus.url);
+
+assert.strictEqual(extractedSyllabus.pageType, 'Canvas Syllabus');
+assert.strictEqual(extractedSyllabus.title, 'CS 101 Syllabus');
+assert.ok(extractedSyllabus.content.includes('algorithms and data structures'));
+
+// Test 3: Canvas Modules fixture
+const canvasModulesHTML = `
+  <html>
+    <head><title>Course Modules - BIO 200</title></head>
+    <body>
+      <h1 class="page-title">BIO 200 Modules</h1>
+      <div id="modules">
+        <span class="module-item-title">Week 1: Cellular Respiration</span>
+      </div>
+    </body>
+  </html>
+`;
+const domModules = page(canvasModulesHTML, 'https://canvas.instructure.com/courses/101/modules');
+const extractedModules = extractContentFromDOM(domModules.document, domModules.url);
+
+assert.strictEqual(extractedModules.pageType, 'Canvas Modules');
+assert.strictEqual(extractedModules.title, 'BIO 200 Modules');
+assert.ok(extractedModules.content.includes('Week 1: Cellular Respiration'));
+
+// Test 4: Canvas Rubrics fixture
+const canvasRubricsHTML = `
+  <html>
+    <head><title>Course Rubrics</title></head>
+    <body>
+      <h1 class="page-title">Grading Criteria</h1>
+      <div id="rubrics">
+        <p>Criteria 1: Clarity of argument (10 pts)</p>
+      </div>
+    </body>
+  </html>
+`;
+const domRubrics = page(canvasRubricsHTML, 'https://canvas.instructure.com/courses/101/rubrics');
+const extractedRubrics = extractContentFromDOM(domRubrics.document, domRubrics.url);
+
+assert.strictEqual(extractedRubrics.pageType, 'Canvas Rubric');
+assert.strictEqual(extractedRubrics.title, 'Grading Criteria');
+
+// Test 5: Canvas Generic LMS Page
+const canvasGenericHTML = `
+  <html>
+    <head><title>Course Overview</title></head>
+    <body>
+      <h1 class="page-title">Welcome to PHY 101</h1>
+      <div class="show-content user_content">
+        <p>General introduction to physics principles.</p>
+      </div>
+    </body>
+  </html>
+`;
+const domGeneric = page(canvasGenericHTML, 'https://canvas.instructure.com/courses/101/pages/overview');
+const extractedGeneric = extractContentFromDOM(domGeneric.document, domGeneric.url);
+
+assert.strictEqual(extractedGeneric.pageType, 'Canvas LMS Page');
+assert.strictEqual(extractedGeneric.title, 'Welcome to PHY 101');
+assert.ok(extractedGeneric.content.includes('physics principles'));
+
+// Test 6: Google Docs fixture
+const gdocHTML = `
+  <html>
+    <head><title>Instructional Design Principles - Google Docs</title></head>
+    <body>
+      <div class="kix-appview-editor">
+        <p>Course Outline: 1. Assessment Design 2. Cognitive Load Management</p>
+      </div>
+    </body>
+  </html>
+`;
+const domGdoc = page(gdocHTML, 'https://docs.google.com/document/d/1BxiMVs0XRA5nFMdKvBdBZjgmUUqptlbs74OgvE2upms/edit');
+const extractedGdoc = extractContentFromDOM(domGdoc.document, domGdoc.url);
+
+assert.strictEqual(extractedGdoc.pageType, 'Google Doc Syllabus');
+assert.ok(extractedGdoc.content.includes('Assessment Design'));
+
+// Test 7: Generic Web Page fixture
+const webHTML = `
+  <html>
+    <head><title>Open Courseware Syllabus</title></head>
+    <body>
+      <main>
+        <h1>Introduction to Machine Learning</h1>
+        <p>Course schedule and grading policy.</p>
+      </main>
+    </body>
+  </html>
+`;
+const domWeb = page(webHTML, 'https://ocw.mit.edu/syllabus/intro-ml');
+const extractedWeb = extractContentFromDOM(domWeb.document, domWeb.url);
+
+assert.strictEqual(extractedWeb.pageType, 'Web Syllabus / Course Page');
+assert.strictEqual(extractedWeb.title, 'Open Courseware Syllabus');
+assert.ok(extractedWeb.content.includes('Machine Learning'));
+
+// Test 8: Content length cap at 15000 characters
+const longText = 'word '.repeat(4000); // 20,000 characters
+const longHTML = `<html><head><title>Long Document</title></head><body><main><p>${longText}</p></main></body></html>`;
+const domLong = page(longHTML, 'https://example.com/long');
+const extractedLong = extractContentFromDOM(domLong.document, domLong.url);
+
+assert.strictEqual(extractedLong.content.length, 15000, 'Content should be capped at 15000 chars');
+
+// Test 9: detectPageType helper directly
+assert.strictEqual(detectPageType('https://canvas.instructure.com/courses/1/assignments/2', { querySelector: (s) => s === '#assignment_show' ? {} : null }), 'Canvas Assignment');
+assert.strictEqual(detectPageType('https://docs.google.com/document/d/123', {}), 'Google Doc Syllabus');
+assert.strictEqual(detectPageType('https://harvard.edu/syllabus', {}), 'Web Syllabus / Course Page');
+
+// Test 10: Chrome Runtime onMessage listener handling
+const h = installChrome();
+globalThis.window = { location: { href: domAssignment.url } };
+globalThis.document = domAssignment.document;
+loadContentScript('content/extractor.js');
+
+assert.strictEqual(h.listeners.message.length, 1, 'chrome.runtime.onMessage listener should be registered');
+const responseData = await h.dispatch({ action: 'EXTRACT_CONTENT' });
+assert.ok(responseData, 'Response data must be returned on EXTRACT_CONTENT action');
+assert.strictEqual(responseData.pageType, 'Canvas Assignment');
+assert.strictEqual(responseData.title, 'Enzymes Lab Analysis');
+resetGlobals();
+
+console.log('✅ Task 3 extractor tests passed.');
diff --git a/test/test-service-worker.js b/test/test-parser-helper.mjs
similarity index 94%
rename from test/test-service-worker.js
rename to test/test-parser-helper.mjs
index 6d41846..6c50ef6 100644
--- a/test/test-service-worker.js
+++ b/test/test-parser-helper.mjs
@@ -1,5 +1,5 @@
-const assert = require('assert');
-const { parseAuditResponse, cleanJsonResponse, getDemoAuditResult, getDemoCourseAuditResult } = require('../extension/background/parser-helper.cjs');
+import assert from 'node:assert';
+import { parseAuditResponse, cleanJsonResponse, getDemoAuditResult, getDemoCourseAuditResult } from '../extension/background/parser-helper.js';
 
 // Test 1: Markdown fenced JSON with '```json'
 const rawLlmResponse = "```json\n{\n  \"summary\": {\n    \"bloomsLevel\": \"Remember\",\n    \"alignmentScore\": \"Moderate\",\n    \"keyTakeaway\": \"Quiz focuses only on memorization.\"\n  },\n  \"findings\": [],\n  \"improvedDraft\": {\n    \"title\": \"Analysis Prompt\",\n    \"content\": \"Compare and contrast\"\n  }\n}\n```";
diff --git a/test/test-prompts.js b/test/test-prompts.mjs
similarity index 88%
rename from test/test-prompts.js
rename to test/test-prompts.mjs
index e9a5cf9..193956d 100644
--- a/test/test-prompts.js
+++ b/test/test-prompts.mjs
@@ -1,5 +1,5 @@
-const assert = require('assert');
-const { EVIDENCE_DOMAINS, TIER_METADATA, buildAuditPrompt } = require('../extension/shared/prompts.cjs');
+import assert from 'node:assert';
+import { EVIDENCE_DOMAINS, TIER_METADATA, buildAuditPrompt, buildCourseAuditPrompt } from '../extension/shared/prompts.js';
 
 assert.ok(EVIDENCE_DOMAINS.length >= 10, 'Should include all core idstack research domains');
 assert.ok(TIER_METADATA.T1, 'Tier 1 metadata must exist');
@@ -21,7 +21,6 @@ assert.ok(prompt.includes('Biology 101'), 'Prompt should include content title')
 assert.ok(prompt.includes("Bloom's"), "Prompt should require Bloom's classification");
 assert.ok(prompt.includes('JSON'), 'Prompt should enforce JSON format');
 
-const { buildCourseAuditPrompt } = require('../extension/shared/prompts.cjs');
 assert.strictEqual(typeof buildCourseAuditPrompt, 'function');
 const coursePrompt = buildCourseAuditPrompt({
   title: 'Biology 101',
diff --git a/test/test-sidepanel-logic.js b/test/test-renderer-helper.mjs
similarity index 97%
rename from test/test-sidepanel-logic.js
rename to test/test-renderer-helper.mjs
index 06e6568..597ff5e 100644
--- a/test/test-sidepanel-logic.js
+++ b/test/test-renderer-helper.mjs
@@ -1,5 +1,5 @@
-const assert = require('assert');
-const { renderAuditHTML, escapeHtml } = require('../extension/sidepanel/renderer-helper.cjs');
+import assert from 'node:assert';
+import { renderAuditHTML, renderDossierListHTML, escapeHtml } from '../extension/sidepanel/renderer-helper.js';
 
 // Test 1: Full mock audit data rendering
 const mockData = {
@@ -147,7 +147,6 @@ assert.ok(renderedCourse.includes('Course Alignment Matrix'));
 assert.ok(renderedCourse.includes('High (88%)'));
 
 // Test 8: Dossier Item Rendering in Drawer
-const { renderDossierListHTML } = require('../extension/sidepanel/renderer-helper.cjs');
 assert.strictEqual(typeof renderDossierListHTML, 'function', 'renderDossierListHTML must be a function');
 const listHtml = renderDossierListHTML([
   { id: '1', title: 'Week 1 Quiz', pageType: 'Assignment', result: { summary: { bloomsLevel: 'Remember', alignmentScore: 'Low' } } }

From 4e3d6c5c00a1746f00c58794aad10bcb36f4b347 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 15:09:58 -0700
Subject: [PATCH 05/19] test(extension): execute service worker, storage and
 side panel under the harness

Closes F5 part 2: service-worker.js, storage.js and sidepanel.js never
ran under the extension suite (no chrome or DOM stub), so a bug planted
in any of them stayed green. Mutations 24c-e each passed the S4 suite.

- New test/test-storage.mjs: settings round-trip, 20-entry newest-first
  history, dossier add / replace-by-url / remove / clear.
- New test/test-service-worker.mjs: RUN_AUDIT demo and keyed paths, model
  API error, CRAWL_AND_AUDIT_COURSE, unknown action. Named assertions that
  each async action replies. The course fixture has syllabus text, so it
  survives the later empty-course guard.
- New test/test-sidepanel.mjs: loads the shipped index.html and
  sidepanel.js; course-root button, preloaded key, dossier badge, audit
  round-trip, escaped error card.
- Mutations 24c (RUN_AUDIT drops return true), 24d (dossier replace
  >= 0 -> > 0), 24e (course-audit button visibility swapped).

Deviations: the tests are U2 section 4 verbatim except that the storage
comment no longer names the internal design unit (U8), and the course
fixture carries a one-line comment on why it has syllabus text.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 test/mutation-test.sh        | 41 +++++++++++++++++++++++++
 test/test-service-worker.mjs | 58 ++++++++++++++++++++++++++++++++++++
 test/test-sidepanel.mjs      | 56 ++++++++++++++++++++++++++++++++++
 test/test-storage.mjs        | 36 ++++++++++++++++++++++
 4 files changed, 191 insertions(+)
 create mode 100644 test/test-service-worker.mjs
 create mode 100644 test/test-sidepanel.mjs
 create mode 100644 test/test-storage.mjs

diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 1f341bb..4270370 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -476,6 +476,47 @@ fresh
 cp "$WORK/r/extension/sidepanel/renderer-helper.js" "$WORK/r/extension/sidepanel/renderer-helper.cjs"
 expect_fail "hand-copied .cjs twin back in extension/" "$WORK/r/test/test-extension.sh"
 
+# 24c/24d/24e. service-worker.js, storage.js and sidepanel.js never ran under
+# the old suite (no chrome or DOM stub), so a bug planted in any of them stayed
+# green. Each case now trips a test that executes the shipped module.
+
+# 24c. RUN_AUDIT stops holding the reply channel open -> test-extension must
+# fail. Without `return true` Chrome closes the port and the panel gets undefined.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "      return true; // async reply\n    }\n\n    if (request.action === 'CRAWL_AND_AUDIT_COURSE')"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "    }\n\n    if (request.action === 'CRAWL_AND_AUDIT_COURSE')", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "service worker drops return true for RUN_AUDIT" "$WORK/r/test/test-extension.sh"
+
+# 24d. re-auditing a page appends a duplicate dossier entry -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/shared/storage.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "if (existingIdx >= 0) {"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "if (existingIdx > 0) {", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "dossier replace-by-url off by one" "$WORK/r/test/test-extension.sh"
+
+# 24e. side panel hides the course-audit button on a course root -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "isCourseRoot ? 'block' : 'none'"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "isCourseRoot ? 'none' : 'block'", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "course-audit button hidden on a course root" "$WORK/r/test/test-extension.sh"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-service-worker.mjs b/test/test-service-worker.mjs
new file mode 100644
index 0000000..bc0beae
--- /dev/null
+++ b/test/test-service-worker.mjs
@@ -0,0 +1,58 @@
+import assert from 'node:assert';
+import { installChrome, installFetch, jsonResponse, importFresh, resetGlobals } from './extension-harness.mjs';
+import { saveSettings, getAuditHistory } from '../extension/shared/storage.js';
+
+const payload = { url: 'https://canvas.instructure.com/courses/1/assignments/2', title: 'Enzymes Lab', pageType: 'Canvas Assignment', content: 'Read chapter 4 and answer the review questions.' };
+const llmReply = (obj) => jsonResponse({ candidates: [{ content: { parts: [{ text: JSON.stringify(obj) }] } }] });
+
+// Each scenario loads a fresh service worker against a fresh chrome stub. The
+// key goes through saveSettings so the test does not care which storage area holds it.
+async function loadWorker({ apiKey, fetchHandler } = {}) {
+  const h = installChrome();
+  if (apiKey) await saveSettings({ apiKey });
+  h.fetchCalls = installFetch(fetchHandler || (async (url) => { throw new Error('unexpected fetch ' + url); }));
+  await importFresh('background/service-worker.js');
+  assert.strictEqual(h.listeners.message.length, 1, 'worker registers one runtime.onMessage listener');
+  return h;
+}
+
+// RUN_AUDIT with no API key: demo result, saved to history, no network.
+let h = await loadWorker();
+let res = await h.dispatch({ action: 'RUN_AUDIT', payload });
+assert.ok(res, 'RUN_AUDIT replies (the listener must return true to keep the channel open)');
+assert.strictEqual(res.success, true);
+assert.ok(res.data.summary && Array.isArray(res.data.findings), 'demo audit has the result shape');
+assert.strictEqual(h.fetchCalls.length, 0, 'demo mode makes no network calls');
+assert.strictEqual((await getAuditHistory())[0].title, 'Enzymes Lab');
+
+// RUN_AUDIT with a key: one model call, parsed JSON returned.
+h = await loadWorker({ apiKey: 'k', fetchHandler: async () => llmReply({ summary: { bloomsLevel: 'Apply' }, findings: [] }) });
+res = await h.dispatch({ action: 'RUN_AUDIT', payload });
+assert.strictEqual(res.success, true);
+assert.strictEqual(res.data.summary.bloomsLevel, 'Apply');
+assert.strictEqual(h.fetchCalls.length, 1);
+assert.ok(h.fetchCalls[0].url.startsWith('https://generativelanguage.googleapis.com/'));
+assert.ok(JSON.parse(h.fetchCalls[0].init.body).contents[0].parts[0].text.includes('Enzymes Lab'), 'prompt carries the page');
+
+// Model API failure surfaces as { success: false }, not a hang.
+h = await loadWorker({ apiKey: 'k', fetchHandler: async () => new Response('quota exceeded', { status: 429 }) });
+res = await h.dispatch({ action: 'RUN_AUDIT', payload });
+assert.strictEqual(res.success, false);
+assert.match(res.error, /429/);
+
+// CRAWL_AND_AUDIT_COURSE: crawls the Canvas API, audits, records the course URL.
+// The course has syllabus text, so it is not an empty course.
+h = await loadWorker({ fetchHandler: async (url) => url.includes('include[]=syllabus_body')
+  ? jsonResponse({ name: 'Biology 101', syllabus_body: '<p>Objectives</p>' })
+  : jsonResponse([]) });
+res = await h.dispatch({ action: 'CRAWL_AND_AUDIT_COURSE', payload: { origin: 'https://canvas.instructure.com', courseId: '12' } });
+assert.ok(res, 'CRAWL_AND_AUDIT_COURSE replies (the listener must return true)');
+assert.strictEqual(res.success, true);
+assert.strictEqual(res.courseData.title, 'Biology 101');
+assert.strictEqual((await getAuditHistory())[0].url, 'https://canvas.instructure.com/courses/12');
+
+// Unknown actions get no reply and do not hold the channel open.
+assert.strictEqual(await h.dispatch({ action: 'NOT_A_REAL_ACTION' }), undefined);
+
+resetGlobals();
+console.log('✅ Service worker routing tests passed.');
diff --git a/test/test-sidepanel.mjs b/test/test-sidepanel.mjs
new file mode 100644
index 0000000..324fb9d
--- /dev/null
+++ b/test/test-sidepanel.mjs
@@ -0,0 +1,56 @@
+import assert from 'node:assert';
+import { installChrome, installDocument, importFresh, flush, resetGlobals } from './extension-harness.mjs';
+import { saveSettings } from '../extension/shared/storage.js';
+
+const COURSE_ROOT = 'https://canvas.instructure.com/courses/42';
+const ASSIGNMENT = 'https://canvas.instructure.com/courses/42/assignments/7';
+
+// Loads a fresh side panel against the shipped index.html and a stubbed chrome
+// whose active tab is `url` and whose content script answers EXTRACT_CONTENT.
+async function openPanel(url, { apiKey, ...chromeOpts } = {}) {
+  const document = installDocument();
+  const h = installChrome({
+    tabs: [{ id: 7, url, title: 'Tab title', active: true }],
+    onTabMessage: async () => ({ url, title: 'Extracted title', pageType: 'Canvas Assignment', content: 'Some content' }),
+    ...chromeOpts
+  });
+  if (apiKey) await saveSettings({ apiKey });
+  await importFresh('sidepanel/sidepanel.js');
+  await flush();
+  return { h, document, $: (id) => document.getElementById(id) };
+}
+
+// Course root: course-audit button shown, tag says so.
+let p = await openPanel(COURSE_ROOT);
+assert.strictEqual(p.$('audit-course-btn').style.display, 'block', 'course audit offered on a course root');
+assert.strictEqual(p.$('page-type-tag').textContent, 'Canvas Course Root');
+assert.strictEqual(p.$('page-title').textContent, 'Extracted title');
+
+// Assignment page: no course-audit button; single-page audit sends the extracted payload.
+p = await openPanel(ASSIGNMENT, {
+  apiKey: 'saved-key',
+  local: { activeDossier: [{ id: 'x', title: 'Saved', result: {} }] },
+  onRuntimeMessage: () => ({ success: true, data: { summary: { bloomsLevel: 'Analyze' }, findings: [] } })
+});
+assert.strictEqual(p.$('audit-course-btn').style.display, 'none');
+assert.strictEqual(p.$('page-type-tag').textContent, 'Canvas Assignment');
+assert.strictEqual(p.$('api-key-input').value, 'saved-key', 'saved key is preloaded');
+assert.strictEqual(p.$('dossier-count').textContent, '1', 'badge shows dossier size');
+p.$('audit-btn').click();
+await flush();
+assert.strictEqual(p.h.sent.length, 1);
+assert.strictEqual(p.h.sent[0].action, 'RUN_AUDIT');
+assert.strictEqual(p.h.sent[0].payload.title, 'Extracted title');
+assert.ok(p.$('results-state').classList.contains('active'), 'results panel shown');
+assert.ok(p.$('results-container').textContent.includes('Analyze'));
+
+// Worker error: rendered escaped in the error card (checked by structure, not entity text).
+p = await openPanel(ASSIGNMENT, { onRuntimeMessage: () => ({ success: false, error: '<b>quota</b>' }) });
+p.$('audit-btn').click();
+await flush();
+const errorMsg = p.document.querySelector('.error-msg');
+assert.ok(errorMsg.textContent.includes('quota'));
+assert.strictEqual(errorMsg.querySelector('b'), null, 'worker error text is escaped, not parsed as HTML');
+
+resetGlobals();
+console.log('✅ Side panel state tests passed.');
diff --git a/test/test-storage.mjs b/test/test-storage.mjs
new file mode 100644
index 0000000..1209b8c
--- /dev/null
+++ b/test/test-storage.mjs
@@ -0,0 +1,36 @@
+import assert from 'node:assert';
+import { installChrome, resetGlobals } from './extension-harness.mjs';
+import {
+  getSettings, saveSettings, getAuditHistory, saveAuditResult,
+  getDossier, addToDossier, removeFromDossier, clearDossier
+} from '../extension/shared/storage.js';
+
+// Settings round-trip and defaults (independent of storage area, so the key can move)
+installChrome();
+assert.strictEqual((await getSettings()).apiKey, '', 'no key configured by default');
+await saveSettings({ apiKey: 'test-key' });
+assert.strictEqual((await getSettings()).apiKey, 'test-key');
+
+// Audit history: newest first, capped at 20
+for (let i = 0; i < 22; i++) await saveAuditResult({ title: `Audit ${i}` });
+const history = await getAuditHistory();
+assert.strictEqual(history.length, 20, 'history keeps the last 20 audits');
+assert.strictEqual(history[0].title, 'Audit 21', 'newest audit first');
+assert.ok(history[0].timestamp, 'entries are timestamped');
+
+// Dossier: add, replace-by-url, remove, clear
+const a = { url: 'https://canvas.instructure.com/courses/1/assignments/2', title: 'Lab 1', result: {} };
+const b = { url: 'https://canvas.instructure.com/courses/1/assignments/3', title: 'Lab 2', result: {} };
+await addToDossier(a);
+await addToDossier(b);
+await addToDossier({ ...a, title: 'Lab 1 (re-audited)' });
+let dossier = await getDossier();
+assert.strictEqual(dossier.length, 2, 're-auditing the same page replaces its entry');
+assert.strictEqual(dossier[0].title, 'Lab 1 (re-audited)');
+await removeFromDossier(dossier[1].id);
+assert.deepStrictEqual((await getDossier()).map((d) => d.title), ['Lab 1 (re-audited)']);
+await clearDossier();
+assert.deepStrictEqual(await getDossier(), []);
+
+resetGlobals();
+console.log('✅ Storage helper tests passed.');

From 36fcdc37b377d2f01847570d6a7b779b35ac0bad Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 15:39:24 -0700
Subject: [PATCH 06/19] fix(extension): crawl every page of assignments and
 fail loudly

Closes F12. F1 (Canvas while(1); prefix) is refuted: canvas-lms 485acb0a05
removed it in 2019, so there is no Accept header and no prefix strip.

- canvas-crawler.js follows Link rel="next" across pages, up to
  MAX_ASSIGNMENT_PAGES = 10 (500 assignments). A non-OK response, a network
  error or a non-array body now rejects instead of becoming an empty list,
  and going past the cap throws a clear message.
- prompts.js keeps the 20,000-char assignment budget but fills it with whole
  assignment blocks only, and the header now reads
  "(N items; M shown in full below)" (plan override 3).
- test-crawler.mjs: a Canvas-shaped fake (real Response/Headers, Link
  pagination, JSON 4xx) covering two-page reads, 403, a page-2 network
  failure and the page cap. test-prompts.mjs: an 80-assignment course states
  "80 items", states the shown count and never cuts a block.
- Mutations 25a-25d.

Deviations from the step spec:
- Mutation 25d uses two anchors: it drops the budget's break and restores
  the plain .slice(0, 20000). With the whole-block budget the slice alone
  changes nothing, so the test still passes (checked).
- prompts.js also changes the summary build and the header line (override 3),
  not only L59. S7 does not own either hunk.
- The MAX_ASSIGNMENT_PAGES comment no longer says the cap bounds the prompt,
  because the prompt now has its own budget.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 extension/background/canvas-crawler.js |  39 ++++----
 extension/shared/prompts.js            |  22 ++++-
 test/mutation-test.sh                  |  69 ++++++++++++++
 test/test-crawler.mjs                  | 123 +++++++++++++++++--------
 test/test-prompts.mjs                  |  16 ++++
 5 files changed, 210 insertions(+), 59 deletions(-)

diff --git a/extension/background/canvas-crawler.js b/extension/background/canvas-crawler.js
index 0c48f1a..6425b78 100644
--- a/extension/background/canvas-crawler.js
+++ b/extension/background/canvas-crawler.js
@@ -13,6 +13,9 @@ export function stripHtml(html) {
     .trim();
 }
 
+// 10 pages of 50 bounds the crawl at 500 assignments.
+const MAX_ASSIGNMENT_PAGES = 10;
+
 export async function crawlCanvasCourse(origin, courseId, fetchImpl = fetch) {
   if (!origin || !courseId) {
     throw new Error('Canvas origin and courseId are required for course crawling.');
@@ -26,24 +29,28 @@ export async function crawlCanvasCourse(origin, courseId, fetchImpl = fetch) {
   }
   const courseJson = await courseRes.json();
 
-  // 2. Fetch Assignments list (up to 50)
-  const assignmentsUrl = `${origin}/api/v1/courses/${courseId}/assignments?per_page=50`;
-  let assignments = [];
-  try {
+  // 2. Fetch every page of the Assignments list (Canvas paginates via the Link
+  // header). Any failure is fatal: an alignment audit run on a partial or empty
+  // list tells the instructor the course has no assessments.
+  const assignments = [];
+  let assignmentsUrl = `${origin}/api/v1/courses/${courseId}/assignments?per_page=50`;
+  for (let page = 1; assignmentsUrl; page++) {
+    if (page > MAX_ASSIGNMENT_PAGES) {
+      throw new Error(`This course has more than ${assignments.length} assignments, more than the full-course audit can read. Try auditing individual assignment pages instead.`);
+    }
     const assignRes = await fetchImpl(assignmentsUrl, { credentials: 'include' });
-    if (assignRes.ok) {
-      const assignJson = await assignRes.json();
-      if (Array.isArray(assignJson)) {
-        assignments = assignJson.map((a) => ({
-          title: a.name || 'Untitled Assignment',
-          description: stripHtml(a.description || '').slice(0, 1000),
-          points: a.points_possible || 0,
-          dueAt: a.due_at || null
-        }));
-      }
+    if (!assignRes.ok) {
+      throw new Error(`Failed to fetch Canvas assignments (${assignRes.status})`);
     }
-  } catch (e) {
-    console.warn('Could not fetch assignments list:', e);
+    const assignJson = await assignRes.json();
+    assignments.push(...assignJson.map((a) => ({
+      title: a.name || 'Untitled Assignment',
+      description: stripHtml(a.description || '').slice(0, 1000),
+      points: a.points_possible || 0,
+      dueAt: a.due_at || null
+    })));
+    const next = /<([^>]+)>;\s*rel="next"/.exec(assignRes.headers.get('Link') || '');
+    assignmentsUrl = next ? next[1] : null;
   }
 
   return {
diff --git a/extension/shared/prompts.js b/extension/shared/prompts.js
index 9822f9f..0d77a89 100644
--- a/extension/shared/prompts.js
+++ b/extension/shared/prompts.js
@@ -44,9 +44,21 @@ You MUST respond strictly with valid JSON conforming to this schema:
 }
 
 export function buildCourseAuditPrompt(courseData = {}) {
-  const assignmentsSummary = (courseData.assignments || [])
-    .map((a, i) => `Assignment ${i+1}: ${a.title} (${a.points || 0} pts)\nDescription: ${(a.description || '').slice(0, 500)}`)
-    .join('\n\n');
+  const blocks = (courseData.assignments || [])
+    .map((a, i) => `Assignment ${i+1}: ${a.title} (${a.points || 0} pts)\nDescription: ${(a.description || '').slice(0, 500)}`);
+  // Whole assignments up to a 20,000-char budget, and the header says how many
+  // made it: a plain character cut ended mid-assignment under a header that
+  // still counted every item. The budget keeps a 500-assignment course's
+  // prompt, and so the model's response time, bounded.
+  const total = blocks.length;
+  let shown = 0;
+  let assignmentsSummary = '';
+  for (const block of blocks) {
+    const next = shown ? `${assignmentsSummary}\n\n${block}` : block;
+    if (next.length > 20000) break;
+    assignmentsSummary = next;
+    shown++;
+  }
 
   return `You are an expert instructional designer and cognitive scientist using the idstack evidence base.
 Perform a full-course Constructive Alignment audit (courseAudit) for the following course:
@@ -55,8 +67,8 @@ COURSE TITLE: ${courseData.title || 'Canvas Course'}
 SYLLABUS & LEARNING OBJECTIVES:
 ${(courseData.syllabus || 'No syllabus provided').slice(0, 8000)}
 
-COURSE ASSIGNMENTS & ASSESSMENTS (${(courseData.assignments || []).length} items):
-${assignmentsSummary.slice(0, 20000)}
+COURSE ASSIGNMENTS & ASSESSMENTS (${total} items; ${shown} shown in full below):
+${assignmentsSummary}
 
 Evaluate whether the assessment system constructively aligns with stated learning outcomes (Biggs 1996 [T2], Liou et al. 2023 [T2]).
 Identify cognitive load bottlenecks (Sweller 2011 [T1]), scaffolding gaps (Wood et al. 1976 [T2]), and formative feedback quality (Wisniewski et al. 2020 [T1]).
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 4270370..13a3f8c 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -517,6 +517,75 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "course-audit button hidden on a course root" "$WORK/r/test/test-extension.sh"
 
+# 25a-25d. The full-course audit read one page of 50 assignments and turned any
+# fetch failure into an empty list, and the prompt then cut that list at 20,000
+# characters mid-assignment under a header that still counted every item.
+
+# 25a. the crawler stops following Link rel="next" -> test-crawler must fail.
+# Canvas pages assignments 50 at a time; reading only page 1 audited the first
+# 50 of an 80-assignment course without saying so.
+fresh
+python3 - "$WORK/r/extension/background/canvas-crawler.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "assignmentsUrl = next ? next[1] : null;"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "assignmentsUrl = null;", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "canvas crawler ignores Link rel=next" node "$WORK/r/test/test-crawler.mjs"
+
+# 25b. the original try/catch returns around the assignments fetch -> test-crawler
+# must fail. That catch turned a 403 or a dropped connection into an empty list,
+# and the audit then told the instructor the course had no assessments.
+fresh
+python3 - "$WORK/r/extension/background/canvas-crawler.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+for old, new in [
+    ("  for (let page = 1; assignmentsUrl; page++) {\n",
+     "  try {\n  for (let page = 1; assignmentsUrl; page++) {\n"),
+    ("    assignmentsUrl = next ? next[1] : null;\n  }\n",
+     "    assignmentsUrl = next ? next[1] : null;\n  }\n  } catch (e) {\n    console.warn('Could not fetch assignments list:', e);\n  }\n"),
+]:
+    assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+    s = s.replace(old, new, 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "canvas crawler swallows assignment-fetch failures" node "$WORK/r/test/test-crawler.mjs"
+
+# 25c. pagination page cap removed -> test-crawler must fail. The loop follows
+# server-supplied links; without the cap a Link cycle crawls until OOM. The test
+# fake is finite (12 pages) so this fails in milliseconds instead of hanging.
+fresh
+python3 - "$WORK/r/extension/background/canvas-crawler.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "if (page > MAX_ASSIGNMENT_PAGES) {"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "if (false) {", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "canvas crawler page cap removed" node "$WORK/r/test/test-crawler.mjs"
+
+# 25d. the course prompt goes back to a plain 20,000-char slice of every
+# assignment -> test-prompts must fail. The slice ended mid-assignment while the
+# header counted every item. Reverting needs both edits: the whole-block budget
+# already fits in 20,000 chars, so the slice alone would change nothing.
+fresh
+python3 - "$WORK/r/extension/shared/prompts.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+for old, new in [
+    ("    if (next.length > 20000) break;\n", ""),
+    ("${assignmentsSummary}\n", "${assignmentsSummary.slice(0, 20000)}\n"),
+]:
+    assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+    s = s.replace(old, new, 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "course prompt cuts the assignment list mid-block" node "$WORK/r/test/test-prompts.mjs"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-crawler.mjs b/test/test-crawler.mjs
index 0901d3e..415f9f9 100644
--- a/test/test-crawler.mjs
+++ b/test/test-crawler.mjs
@@ -2,44 +2,91 @@ import assert from 'node:assert';
 import { crawlCanvasCourse, stripHtml } from '../extension/background/canvas-crawler.js';
 import { getDemoCourseAuditResult } from '../extension/background/parser-helper.js';
 
-// Test 1: HTML Tag Stripping
-const clean = stripHtml('<p>Hello <strong>World</strong> &amp; Students<br></p>');
-assert.strictEqual(clean, 'Hello World & Students');
-
-// Test 2: Mock Canvas Crawler
-let fetchOptionsPassed = [];
-const mockFetch = async (url, options) => {
-  if (options) fetchOptionsPassed.push(options);
-  if (url.includes('include[]=syllabus_body')) {
-    return {
-      ok: true,
-      json: async () => ({
-        name: 'Biology 101: Cell Systems',
-        syllabus_body: '<p>Welcome to Biology 101. Objectives: Analyze cellular metabolism.</p>'
-      })
-    };
-  }
-  if (url.includes('/assignments')) {
-    return {
-      ok: true,
-      json: async () => [
-        { name: 'Quiz 1', description: '<p>Recall organelles</p>', points_possible: 10 },
-        { name: 'Lab Report 1', description: '<p>Analyze enzyme kinetics</p>', points_possible: 50 }
-      ]
-    };
-  }
-  throw new Error('Not found: ' + url);
-};
-
-const courseData = await crawlCanvasCourse('https://canvas.instructure.com', '12345', mockFetch);
-assert.strictEqual(courseData.title, 'Biology 101: Cell Systems');
-assert.ok(fetchOptionsPassed.every(opt => opt && opt.credentials === 'include'), 'fetchImpl must include credentials');
-assert.ok(courseData.syllabus.includes('Analyze cellular metabolism'));
-assert.strictEqual(courseData.assignments.length, 2);
-assert.strictEqual(courseData.assignments[0].title, 'Quiz 1');
-assert.strictEqual(courseData.assignments[0].description, 'Recall organelles');
-
-// Test 3: Demo Course Audit Fallback
+// Fake Canvas that behaves like the real API under session-cookie auth: clean
+// JSON bodies (Canvas stopped prefixing while(1); in Aug 2019, canvas-lms
+// commit 485acb0a05), list endpoints paginated through a Link header, and JSON
+// error bodies on 4xx. The previous fake served one clean page and never
+// failed, which is how a crawler that audited a truncated or empty assignment
+// list passed green.
+const ORIGIN = 'https://canvas.test';
+const COURSE_URL = `${ORIGIN}/api/v1/courses/12345?include[]=syllabus_body`;
+const PAGE1_URL = `${ORIGIN}/api/v1/courses/12345/assignments?per_page=50`;
+const pageUrl = (n) => (n === 1 ? PAGE1_URL : `${ORIGIN}/api/v1/courses/12345/assignments?page=${n}&per_page=50`);
+// Canvas sends rel="current" and rel="first" on every page, rel="next" on all but the last.
+const linkFor = (n, last) => [`<${pageUrl(n)}>; rel="current"`]
+  .concat(n < last ? [`<${pageUrl(n + 1)}>; rel="next"`] : [], [`<${PAGE1_URL}>; rel="first"`])
+  .join(',');
+const assignmentsFrom = (first, count) => Array.from({ length: count }, (_, i) => ({
+  name: `Assignment ${first + i}`, description: '<p>Analyze enzyme kinetics</p>', points_possible: 10
+}));
+const COURSE = { body: { name: 'Biology 101: Cell Systems', syllabus_body: '<p>Welcome to Biology 101. Objectives: Analyze cellular metabolism.</p>' } };
+
+function canvasFetch(routes) {
+  const calls = [];
+  const fetchImpl = async (url, options = {}) => {
+    calls.push({ url, credentials: options.credentials });
+    const route = typeof routes === 'function' ? routes(url) : routes[url];
+    if (!route) throw new TypeError(`Failed to fetch ${url}`);
+    const headers = { 'Content-Type': 'application/json; charset=utf-8' };
+    if (route.link) headers.Link = route.link;
+    return new Response(JSON.stringify(route.body), { status: route.status || 200, headers });
+  };
+  return { fetchImpl, calls };
+}
+
+// Test 1: HTML tag stripping
+assert.strictEqual(stripHtml('<p>Hello <strong>World</strong> &amp; Students<br></p>'), 'Hello World & Students');
+
+// Test 2: an 80-assignment course is read across both pages
+{
+  const { fetchImpl, calls } = canvasFetch({
+    [COURSE_URL]: COURSE,
+    [PAGE1_URL]: { body: assignmentsFrom(1, 50), link: linkFor(1, 2) },
+    [pageUrl(2)]: { body: assignmentsFrom(51, 30), link: linkFor(2, 2) }
+  });
+  const courseData = await crawlCanvasCourse(ORIGIN, '12345', fetchImpl);
+  assert.strictEqual(courseData.title, 'Biology 101: Cell Systems');
+  assert.ok(courseData.syllabus.includes('Analyze cellular metabolism'));
+  assert.ok(calls.every((c) => c.credentials === 'include'), 'every Canvas GET must send session cookies');
+  assert.strictEqual(courseData.assignments.length, 80, 'crawler must follow Link rel="next"');
+  assert.strictEqual(courseData.assignments[0].description, 'Analyze enzyme kinetics');
+  assert.strictEqual(courseData.assignments[79].title, 'Assignment 80');
+}
+
+// Test 3: a failed assignments fetch is fatal, never an empty list the LLM
+// reads as "this course has no assessments"
+{
+  const { fetchImpl } = canvasFetch({
+    [COURSE_URL]: COURSE,
+    [PAGE1_URL]: { status: 403, body: { errors: [{ message: 'user not authorized to perform that action' }] } }
+  });
+  await assert.rejects(crawlCanvasCourse(ORIGIN, '12345', fetchImpl), /Failed to fetch Canvas assignments \(403\)/);
+}
+
+// Test 4: a network failure on page 2 is fatal, not a silent 50-item list
+{
+  const { fetchImpl } = canvasFetch({
+    [COURSE_URL]: COURSE,
+    [PAGE1_URL]: { body: assignmentsFrom(1, 50), link: linkFor(1, 2) }
+  });
+  await assert.rejects(crawlCanvasCourse(ORIGIN, '12345', fetchImpl), /Failed to fetch/);
+}
+
+// Test 5: page cap. The fake course is FINITE (12 pages) so a crawler without
+// the cap returns 600 items and fails here instead of looping until OOM.
+{
+  const { fetchImpl, calls } = canvasFetch((url) => {
+    if (url === COURSE_URL) return COURSE;
+    for (let n = 1; n <= 12; n++) {
+      if (url === pageUrl(n)) return { body: assignmentsFrom((n - 1) * 50 + 1, 50), link: linkFor(n, 12) };
+    }
+    return null;
+  });
+  await assert.rejects(crawlCanvasCourse(ORIGIN, '12345', fetchImpl), /more than 500 assignments/);
+  assert.strictEqual(calls.filter((c) => c.url.includes('/assignments')).length, 10);
+}
+
+// Test 6: Demo Course Audit Fallback
 const demoResult = getDemoCourseAuditResult({ title: 'Biology 101: Cell Systems' });
 assert.ok(demoResult.summary.keyTakeaway.includes('Course-Level Demo'));
 assert.ok(demoResult.findings.length >= 2);
diff --git a/test/test-prompts.mjs b/test/test-prompts.mjs
index 193956d..f21af7a 100644
--- a/test/test-prompts.mjs
+++ b/test/test-prompts.mjs
@@ -34,4 +34,20 @@ assert.ok(coursePrompt.includes('Biology 101'));
 assert.ok(coursePrompt.includes('Constructive Alignment'));
 assert.ok(coursePrompt.includes('courseAudit'));
 
+// A long course: the crawler reads up to 500 assignments, and the prompt keeps
+// a 20,000-char budget for them. It must list whole assignments and say how
+// many it lists, not cut one mid-description under a header that counts all.
+const longCoursePrompt = buildCourseAuditPrompt({
+  title: 'Biology 101',
+  syllabus: 'Objectives: Analyze cellular metabolism.',
+  assignments: Array.from({ length: 80 }, (_, i) => ({ title: `Lab ${i + 1}`, description: 'd'.repeat(600), points: 10 }))
+});
+const assignmentsHeader = /COURSE ASSIGNMENTS & ASSESSMENTS \((\d+) items; (\d+) shown in full below\)/.exec(longCoursePrompt);
+assert.ok(assignmentsHeader, 'course prompt header states the item count and how many are shown in full');
+assert.strictEqual(assignmentsHeader[1], '80', 'the header counts every crawled assignment');
+const listedBlocks = longCoursePrompt.match(/^Assignment \d+: .*\nDescription: .*$/gm) || [];
+assert.strictEqual(listedBlocks.length, Number(assignmentsHeader[2]), 'the header states exactly how many assignments are listed');
+assert.ok(listedBlocks.length > 0 && listedBlocks.length < 80, '80 long assignments exceed the budget, so only some are listed');
+assert.ok(listedBlocks.every((b) => b.endsWith('\nDescription: ' + 'd'.repeat(500))), 'no assignment is cut mid-description');
+
 console.log('✅ Task 2 prompt engine tests passed.');

From e70b482b2355198b435af1e45097e71d9bcca1e4 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 16:43:30 -0700
Subject: [PATCH 07/19] fix(extension): align evidence tiers, citations and
 severities with references.md

Closes F15. The extension's evidence labels disagreed with
evidence/references.md and CLAUDE.md:
- TIER_METADATA put randomized trials in T2; it now uses the CLAUDE.md
  labels and the references.md definitions (DESIGN.md colours unchanged).
- EVIDENCE_DOMAINS is deleted with its prompts.js import and re-export: it
  had no runtime consumer, non-canonical codes, and cited studies that are
  not in references.md.
- Both prompts now carry TIER_SCALE, built from TIER_METADATA. The page
  prompt asks for critical|warning|info, not 'suggestion'. The course
  prompt's citations are coded: [Alignment-1] Biggs (1996) [T5],
  [CogLoad-4] Sweller (1994) [T5], [CogLoad-1] Costley et al. (2023) [T1]
  and [Assessment-8] Wisniewski et al. (2020) [T1]. That replaces Sweller
  2011 and Wood 1976, which are not in references.md, and drops Liou.
- Demo findings: Biggs is [Alignment-1] T5, not [Alignment-3] T2.
  [Cognitive-2], which does not exist, is now [CogLoad-1]. Carpenter
  (2022), not in references.md, is now [CogLoad-6] Chen et al. (2018) T1.
- sidepanel.css drops the off-vocabulary severity-suggestion tokens and
  rule.

New test/test-evidence-labels.mjs parses references.md and CLAUDE.md and
checks the three shipped files, the demo results, the built prompts and the
side-panel CSS against them. test-prompts.mjs drops the EVIDENCE_DOMAINS
and 'Meta-analysis' assertions; test-parser-helper.mjs now expects a T5
demo badge instead of T2. Mutations 26a-26g reintroduce each defect.

Deviations from the spec:
- The test collects every disagreement and fails once, listing them all,
  where U9 stopped at the first assert. On the unfixed tree it names
  [Cognitive-2], Sweller 2011, Wood 1976, Carpenter 2022 and the uncited
  EVIDENCE_DOMAINS studies in one run.
- The CSS check also covers the --severity-*/--sev-* tokens, not only the
  .finding-card rules, because the plan removes both.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 extension/background/parser-helper.js | 20 +++---
 extension/shared/evidence-base.js     | 24 ++-----
 extension/shared/prompts.js           | 17 +++--
 extension/sidepanel/sidepanel.css     |  8 ---
 test/mutation-test.sh                 | 93 +++++++++++++++++++++++++
 test/test-evidence-labels.mjs         | 98 +++++++++++++++++++++++++++
 test/test-parser-helper.mjs           |  4 +-
 test/test-prompts.mjs                 |  4 +-
 8 files changed, 220 insertions(+), 48 deletions(-)
 create mode 100644 test/test-evidence-labels.mjs

diff --git a/extension/background/parser-helper.js b/extension/background/parser-helper.js
index 9890569..dbf8c91 100644
--- a/extension/background/parser-helper.js
+++ b/extension/background/parser-helper.js
@@ -34,18 +34,18 @@ export function getDemoAuditResult(payload = {}) {
       },
       {
         severity: 'critical',
-        tier: 'T2',
-        citation: '[Alignment-3] Direct Constructive Alignment',
+        tier: 'T5',
+        citation: '[Alignment-1] Direct Constructive Alignment',
         observation: 'Learning objectives target analytical synthesis, but evaluation instruments only test lower-order recall.',
-        evidence: 'Biggs (1996) & Liou et al. (2023) [T2 controlled trial]: Constructive misalignment between stated objectives and assessment formats leads to superficial learning strategies.',
+        evidence: 'Biggs (1996) [T5]: Constructive misalignment between stated objectives and assessment formats leads to superficial learning strategies.',
         recommendation: 'Incorporate authentic problem-solving prompts and case analysis rather than purely multiple-choice recall questions.'
       },
       {
         severity: 'info',
         tier: 'T1',
-        citation: '[Cognitive-2] Cognitive Load & Chunking',
+        citation: '[CogLoad-1] Cognitive Load & Chunking',
         observation: 'Task instructions present multiple complex requirements in a single unsegmented block.',
-        evidence: 'Costley et al. (2023) [T1 meta-analysis]: Segmenting complex instructional tasks into structured sequential phases reduces extraneous cognitive load.',
+        evidence: 'Costley et al. (2023) [T1]: Segmenting complex instructional tasks into structured sequential phases reduces extraneous cognitive load.',
         recommendation: 'Format multi-step assignment guidelines into sequenced checklists or distinct milestone stages.'
       }
     ],
@@ -82,18 +82,18 @@ export function getDemoCourseAuditResult(payload = {}) {
     findings: [
       {
         severity: 'critical',
-        tier: 'T2',
-        citation: '[Alignment-3] Direct Constructive Alignment',
+        tier: 'T5',
+        citation: '[Alignment-1] Direct Constructive Alignment',
         observation: 'Modules 1-6 assess solely lower-order factual recall, while the final course project demands high-order synthesis without intermediate scaffolding.',
-        evidence: 'Biggs (1996) & Liou et al. (2023) [T2 controlled trial]: Abrupt jumps in cognitive demand without progressive assessment scaffolding increase failure rates.',
+        evidence: 'Biggs (1996) [T5]: Constructive alignment requires every assessment to engage the cognitive level its learning outcome names.',
         recommendation: 'Introduce mid-semester milestone case studies in Module 4 to bridge the gap between quizzes and the final capstone.'
       },
       {
         severity: 'warning',
         tier: 'T1',
-        citation: '[Cognitive-2] Cognitive Load & Spaced Practice',
+        citation: '[CogLoad-6] Cognitive Load & Spaced Practice',
         observation: 'Major assignment deadlines are clustered in Week 14-15 with no spaced formative checkpoints.',
-        evidence: 'Carpenter et al. (2022) [T1 meta-analysis, d=0.61]: Distributing assessments across spaced intervals produces significantly higher long-term retention.',
+        evidence: 'Chen et al. (2018) [T1]: Distributing practice across time produces stronger long-term retention than massing the same content into a single session.',
         recommendation: 'Redistribute submission checkpoints into 3 progressive deliverables across weeks 6, 10, and 14.'
       },
       {
diff --git a/extension/shared/evidence-base.js b/extension/shared/evidence-base.js
index 6c01133..615a9ae 100644
--- a/extension/shared/evidence-base.js
+++ b/extension/shared/evidence-base.js
@@ -1,21 +1,7 @@
 export const TIER_METADATA = {
-  T1: { label: 'Meta-analysis', description: 'Systematic reviews / meta-analyses with large effect sizes', color: '#2f7a4a' },
-  T2: { label: 'Controlled trial', description: 'Peer-reviewed empirical randomized or quasi-experimental studies', color: '#2864a8' },
-  T3: { label: 'Observational', description: 'Correlational, cohort, or longitudinal learning studies', color: '#a87726' },
-  T4: { label: 'Case study', description: 'Single-institution or discipline-specific qualitative studies', color: '#b35a1f' },
-  T5: { label: 'Expert guidance', description: 'Established instructional design frameworks (QM, OLC, Bloom)', color: '#6b6b6b' }
+  T1: { label: 'Meta-analyses, RCTs', description: 'RCTs, meta-analyses with learning outcome measures', color: '#2f7a4a' },
+  T2: { label: 'Quasi-experimental with controls', description: 'Quasi-experimental with appropriate controls', color: '#2864a8' },
+  T3: { label: 'Systematic reviews of mixed evidence', description: 'Systematic reviews (synthesis of mixed evidence)', color: '#a87726' },
+  T4: { label: 'Observational, no comparison group', description: 'Observational / pre-post without comparison groups', color: '#b35a1f' },
+  T5: { label: 'Expert opinion, theoretical frameworks', description: 'Expert opinion, literature reviews, theoretical frameworks', color: '#6b6b6b' }
 };
-
-export const EVIDENCE_DOMAINS = [
-  { code: 'Models', name: 'Instructional Design Models & Frameworks', keyStudies: ['Abuhassna et al. (2024) [T3]', 'Kalonde et al. (2025) [T3]', 'Crompton et al. (2023) [T3]'] },
-  { code: 'Alignment', name: 'Constructive Alignment & Learning Objectives', keyStudies: ['Biggs (1996) [T5]', 'Anderson & Krathwohl (2001) [T5]', 'Agarwal (2019) [T1]'] },
-  { code: 'Needs', name: 'Needs Analysis', keyStudies: ['Markaki et al. (2021) [T3]', 'Garavan et al. (2019) [T3]', 'Alsalamah & Callinan (2021) [T3]'] },
-  { code: 'Cognitive', name: 'Cognitive Load Theory & Sequencing', keyStudies: ['Sweller (1994) [T5]', 'Costley et al. (2023) [T1]', 'Paas & van Merrienboer (2020) [T5]', 'Chen et al. (2018) [T1]'] },
-  { code: 'Assessment', name: 'Formative Assessment & Feedback', keyStudies: ['Wisniewski et al. (2020) [T1]', 'Hattie & Timperley (2007) [T1]', 'Black & Wiliam (1998) [T1]', 'Double et al. (2019) [T1]'] },
-  { code: 'Multimedia', name: 'Multimedia Learning Principles', keyStudies: ['Mayer (2024) [T5]', 'Moreno & Mayer (1999) [T1]', 'Noetel et al. (2021) [T1]'] },
-  { code: 'Learner', name: 'Learner Analysis & Differentiation', keyStudies: ['Deunk et al. (2018) [T1]', 'Puzio et al. (2020) [T1]', 'Liou et al. (2023) [T2]'] },
-  { code: 'Evaluation', name: 'Evaluation Models', keyStudies: ['Kirkpatrick / Alsalamah & Callinan (2021) [T3]', 'Frye & Hemmer (2012) [T5]', 'Allen et al. (2021) [T3]'] },
-  { code: 'Prototype', name: 'Rapid Prototyping & Design-Based Research', keyStudies: ['Tripp & Bichelmeyer (1990) [T5]', 'Shakeel et al. (2022) [T2]', 'Design-Based Research Collective (2003) [T5]'] },
-  { code: 'Online', name: 'Online Course Quality Frameworks', keyStudies: ['Quality Matters / Zimmerman et al. (2020) [T4]', 'Castro & Tumibay (2019) [T1]', 'Swan et al. (2012) [T2]'] },
-  { code: 'Accessibility', name: 'Universal Design for Learning & A11y', keyStudies: ['CAST UDL Guidelines (2024) [T5]', 'WCAG 2.1/2.2 AA [T5]', 'Puzio et al. (2020) [T1]'] }
-];
diff --git a/extension/shared/prompts.js b/extension/shared/prompts.js
index 0d77a89..8d142e7 100644
--- a/extension/shared/prompts.js
+++ b/extension/shared/prompts.js
@@ -1,4 +1,6 @@
-import { EVIDENCE_DOMAINS, TIER_METADATA } from './evidence-base.js';
+import { TIER_METADATA } from './evidence-base.js';
+
+const TIER_SCALE = Object.entries(TIER_METADATA).map(([tier, m]) => `   ${tier}: ${m.description}`).join('\n');
 
 export function buildAuditPrompt({ title, pageType, content = '' }) {
   return `You are idstack, an evidence-based instructional design co-pilot.
@@ -16,7 +18,8 @@ Please audit this material against peer-reviewed instructional design evidence:
 1. Classify learning objectives or implied cognitive depth using Bloom's Revised Taxonomy (Remember, Understand, Apply, Analyze, Evaluate, Create).
 2. Check Constructive Alignment: Do activities and assessments match the stated or necessary cognitive depth?
 3. Flag Cognitive Load, Elaborated Feedback gaps, and Accessibility considerations.
-4. Rate each recommendation with an evidence tier [T1] to [T5].
+4. Rate each recommendation with an evidence tier:
+${TIER_SCALE}
 5. Provide a ready-to-use, improved version (rewritten rubric, upgraded learning outcome verbs, or enhanced prompt).
 
 You MUST respond strictly with valid JSON conforming to this schema:
@@ -28,7 +31,7 @@ You MUST respond strictly with valid JSON conforming to this schema:
   },
   "findings": [
     {
-      "severity": "critical | warning | suggestion",
+      "severity": "critical | warning | info",
       "tier": "T1 | T2 | T3 | T4 | T5",
       "citation": "[Domain-Code] Short Citation",
       "observation": "What is present in the current material",
@@ -70,8 +73,10 @@ ${(courseData.syllabus || 'No syllabus provided').slice(0, 8000)}
 COURSE ASSIGNMENTS & ASSESSMENTS (${total} items; ${shown} shown in full below):
 ${assignmentsSummary}
 
-Evaluate whether the assessment system constructively aligns with stated learning outcomes (Biggs 1996 [T2], Liou et al. 2023 [T2]).
-Identify cognitive load bottlenecks (Sweller 2011 [T1]), scaffolding gaps (Wood et al. 1976 [T2]), and formative feedback quality (Wisniewski et al. 2020 [T1]).
+Evaluate whether the assessment system constructively aligns with stated learning outcomes ([Alignment-1] Biggs (1996) [T5]).
+Identify cognitive load bottlenecks ([CogLoad-4] Sweller (1994) [T5]), scaffolding gaps ([CogLoad-1] Costley et al. (2023) [T1]), and formative feedback quality ([Assessment-8] Wisniewski et al. (2020) [T1]).
+Rate each finding's evidence tier on this scale:
+${TIER_SCALE}
 
 Respond with ONLY a valid JSON object matching this schema:
 {
@@ -97,4 +102,4 @@ Respond with ONLY a valid JSON object matching this schema:
 }`;
 }
 
-export { EVIDENCE_DOMAINS, TIER_METADATA };
+export { TIER_METADATA };
diff --git a/extension/sidepanel/sidepanel.css b/extension/sidepanel/sidepanel.css
index b826e2b..c32322d 100644
--- a/extension/sidepanel/sidepanel.css
+++ b/extension/sidepanel/sidepanel.css
@@ -29,12 +29,10 @@
   /* Severity palette */
   --severity-critical: #8c2515;
   --severity-warning: #7a4f0c;
-  --severity-suggestion: #2f7a4a;
   --severity-info: #344566;
 
   --sev-critical-bg: #f5dcd5;
   --sev-warning-bg: #fbf0d9;
-  --sev-suggestion-bg: #eef6f0;
   --sev-info-bg: #e7eaf1;
 
   /* Typography */
@@ -71,12 +69,10 @@
 
     --severity-critical: #e89786;
     --severity-warning: #e3b25c;
-    --severity-suggestion: #5fc185;
     --severity-info: #9bafd2;
 
     --sev-critical-bg: #2e1612;
     --sev-warning-bg: #2e2210;
-    --sev-suggestion-bg: #14281b;
     --sev-info-bg: #1a2030;
   }
 }
@@ -285,10 +281,6 @@ body {
   border-left-color: var(--severity-warning);
 }
 
-.finding-card.severity-suggestion {
-  border-left-color: var(--severity-suggestion);
-}
-
 .finding-card.severity-info {
   border-left-color: var(--severity-info);
 }
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 13a3f8c..8db82f5 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -586,6 +586,99 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "course prompt cuts the assignment list mid-block" node "$WORK/r/test/test-prompts.mjs"
 
+# 26a-26g. The extension shipped a tier scale that put randomized trials in T2,
+# demo findings citing Biggs as [Alignment-3] [T2] and a nonexistent
+# [Cognitive-2], uncoded prompt citations, and a page prompt asking for a
+# 'suggestion' severity. test-evidence-labels.mjs checks every label against
+# evidence/references.md and CLAUDE.md; each case reverts one defect.
+
+# 26a. TIER_METADATA relabels T2 as randomized trials -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/shared/evidence-base.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "T2: { label: 'Quasi-experimental with controls', description: 'Quasi-experimental with appropriate controls'"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "T2: { label: 'Controlled trial', description: 'Peer-reviewed empirical randomized or quasi-experimental studies'", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "tier scale puts randomized trials in T2" "$WORK/r/test/test-extension.sh"
+
+# 26b. the demo cites Biggs as [Alignment-3] [T2] again -> test-extension must
+# fail. references.md files Biggs as [Alignment-1] T5; [Alignment-3] is Pereira, T4.
+fresh
+python3 - "$WORK/r/extension/background/parser-helper.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "tier: 'T5',\n        citation: '[Alignment-1] Direct Constructive Alignment',\n        observation: 'Learning objectives"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "tier: 'T2',\n        citation: '[Alignment-3] Direct Constructive Alignment',\n        observation: 'Learning objectives", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "demo cites Biggs as [Alignment-3] T2" "$WORK/r/test/test-extension.sh"
+
+# 26c. the demo cites the nonexistent [Cognitive-2] again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/background/parser-helper.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "'[CogLoad-1] Cognitive Load & Chunking'"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "'[Cognitive-2] Cognitive Load & Chunking'", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "demo cites nonexistent [Cognitive-2]" "$WORK/r/test/test-extension.sh"
+
+# 26d. the course prompt cites Biggs uncoded at T2 again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/shared/prompts.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "([Alignment-1] Biggs (1996) [T5])."
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "(Biggs 1996 [T2], Liou et al. 2023 [T2]).", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "course prompt cites Biggs uncoded at T2" "$WORK/r/test/test-extension.sh"
+
+# 26e. the page prompt asks for a 'suggestion' severity again -> test-extension
+# must fail. The course prompt, the reports and the side panel use critical|warning|info.
+fresh
+python3 - "$WORK/r/extension/shared/prompts.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = '"severity": "critical | warning | info",'
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, '"severity": "critical | warning | suggestion",', 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "page prompt asks for a suggestion severity" "$WORK/r/test/test-extension.sh"
+
+# 26f. the course prompt drops the canonical tier scale -> test-extension must
+# fail. Without it the model rates tiers on whatever scale it assumes.
+fresh
+python3 - "$WORK/r/extension/shared/prompts.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "Rate each finding's evidence tier on this scale:\n${TIER_SCALE}\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "course prompt drops the tier scale" "$WORK/r/test/test-extension.sh"
+
+# 26g. the side panel styles a 'suggestion' finding card again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.css" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = ".finding-card.severity-info {"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, ".finding-card.severity-suggestion {\n  border-left-color: #2f7a4a;\n}\n\n.finding-card.severity-info {", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "side panel styles a suggestion severity" "$WORK/r/test/test-extension.sh"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-evidence-labels.mjs b/test/test-evidence-labels.mjs
new file mode 100644
index 0000000..db7ae6b
--- /dev/null
+++ b/test/test-evidence-labels.mjs
@@ -0,0 +1,98 @@
+// Evidence labels shipped in the extension must agree with evidence/references.md
+// (codes, studies, tiers) and CLAUDE.md (tier meanings). The extension shipped a
+// tier scale that put randomized trials in T2, demo findings citing Biggs (T5,
+// [Alignment-1]) as "[Alignment-3] ... [T2]" and a nonexistent [Cognitive-2],
+// uncoded prompt citations to studies references.md does not contain, and a page
+// prompt asking for a "suggestion" severity. Expected values are parsed from the
+// canonical files, never restated here.
+import assert from 'node:assert';
+import fs from 'node:fs';
+import { TIER_METADATA } from '../extension/shared/evidence-base.js';
+import { getDemoAuditResult, getDemoCourseAuditResult } from '../extension/background/parser-helper.js';
+import { buildAuditPrompt, buildCourseAuditPrompt } from '../extension/shared/prompts.js';
+
+const read = (rel) => fs.readFileSync(new URL(`../${rel}`, import.meta.url), 'utf8');
+const SEVERITIES = ['critical', 'warning', 'info'];
+const SOURCES = ['extension/shared/prompts.js', 'extension/background/parser-helper.js', 'extension/shared/evidence-base.js'];
+const CODE = /\[([A-Z][A-Za-z]+-\d+)\](?: \[(T[1-5])\])?/g; // capitalized, so arr[i-1] is no code
+// "[Code-N] Author (Year) [Tn]", "Author et al. Year [Tn", "Author (Year)": code and tier optional.
+const STUDY = /(?:\[([A-Z][A-Za-z]+-\d+)\] )?([A-Z][A-Za-z'-]+)(?: et al\.)? \(?((?:19|20)\d{2})\)?(?: \[(T[1-5])\b)?/g;
+
+const refsText = read('evidence/references.md');
+const refs = {}; // 'Alignment-1' -> { line, tier }
+for (const m of refsText.matchAll(/^- \[([A-Za-z]+-\d+)\] (.+) (T[1-5])\s*$/gm)) refs[m[1]] = { line: m[2], tier: m[3] };
+const tierDefs = {}; // references.md "Definition" column
+for (const m of refsText.matchAll(/^\| (T[1-5]) \| ([^|]+?) \|/gm)) tierDefs[m[1]] = m[2];
+const tierMeanings = {}; // CLAUDE.md "Evidence standards" "Meaning" column
+for (const m of read('CLAUDE.md').matchAll(/^\| (T[1-5]) \| ([^|]+?) \|\s*$/gm)) tierMeanings[m[1]] = m[2];
+// A parse that finds nothing would make every check below vacuous.
+assert.ok(Object.keys(refs).length >= 100, 'parsed too few references from evidence/references.md');
+assert.strictEqual(Object.keys(tierDefs).length, 5, 'references.md tier table not parsed');
+assert.strictEqual(Object.keys(tierMeanings).length, 5, 'CLAUDE.md tier table not parsed');
+
+// Collect every disagreement so one run names them all.
+const problems = new Set();
+const check = (ok, msg) => { if (!ok) problems.add(msg); };
+const names = (line, author, year) => line.includes(author) && line.includes(`(${year})`);
+
+// A code must be a references.md entry at the stated tier, naming the stated study.
+function cite(where, code, tier, author, year) {
+  const ref = refs[code];
+  if (!ref) return check(false, `${where}: [${code}] is not in evidence/references.md`);
+  if (tier) check(tier === ref.tier, `${where}: [${code}] is ${ref.tier} in references.md, not ${tier}`);
+  if (author) check(names(ref.line, author, year), `${where}: ${author} (${year}) is not [${code}] ${ref.line}`);
+}
+// An uncoded "Author (Year)" must still be a references.md entry, at the stated tier.
+function study(where, author, year, tier) {
+  const entries = Object.values(refs).filter((r) => names(r.line, author, year));
+  check(entries.length, `${where}: ${author} (${year}) is not in evidence/references.md`);
+  if (entries.length && tier) check(entries.some((r) => r.tier === tier), `${where}: ${author} (${year}) is ${entries[0].tier} in references.md, not ${tier}`);
+}
+
+// 1. Every [Code-N] and every "Author (Year)" in the shipped files is a
+//    references.md entry, at whatever tier the text states beside it.
+for (const rel of SOURCES) {
+  const text = read(rel);
+  for (const m of text.matchAll(CODE)) cite(rel, m[1], m[2]);
+  for (const m of text.matchAll(STUDY)) {
+    if (m[1]) cite(rel, m[1], m[4], m[2], m[3]);
+    else study(rel, m[2], m[3], m[4]);
+  }
+}
+
+// 2. The tier scale restates the canonical tables.
+for (const t of Object.keys(tierDefs)) {
+  check(TIER_METADATA[t]?.description === tierDefs[t], `TIER_METADATA.${t}.description must be references.md's "${tierDefs[t]}"`);
+  check(TIER_METADATA[t]?.label === tierMeanings[t], `TIER_METADATA.${t}.label must be CLAUDE.md's "${tierMeanings[t]}"`);
+}
+
+// 3. Demo findings: canonical severity; the citation's code is at the finding's
+//    tier; the evidence names that code's study and states the same tier.
+for (const [where, result] of [['page demo', getDemoAuditResult({})], ['course demo', getDemoCourseAuditResult({})]]) {
+  for (const f of result.findings) {
+    const at = `${where} "${f.citation}"`;
+    check(SEVERITIES.includes(f.severity), `${at}: severity "${f.severity}" is not ${SEVERITIES.join('|')}`);
+    const code = (f.citation.match(/^\[([A-Za-z]+-\d+)\]/) || [])[1];
+    const named = f.evidence.match(/^([A-Z][A-Za-z'-]+)[^(]*\((\d{4})\)/) || [];
+    check(named[1], `${at}: evidence names no "Author (Year)"`);
+    cite(at, code, f.tier, named[1], named[2]);
+    for (const t of f.evidence.matchAll(/\[(T[1-5])\b/g)) check(t[1] === f.tier, `${at}: evidence says ${t[1]}, finding says ${f.tier}`);
+  }
+}
+
+// 4. Prompts: one severity vocabulary; every tiered citation carries its code;
+//    both define the canonical tier scale.
+for (const [where, prompt] of [['page prompt', buildAuditPrompt({ title: 't' })], ['course prompt', buildCourseAuditPrompt({})]]) {
+  const vocab = ((prompt.match(/"severity": (.*)/) || [])[1] || '').match(/[a-z]+/g) || [];
+  check(vocab.join('|') === SEVERITIES.join('|'), `${where}: severity vocabulary is ${vocab.join('|')}, not ${SEVERITIES.join('|')}`);
+  for (const m of prompt.matchAll(STUDY)) check(m[1] || !m[4], `${where}: "${m[0]}" states a tier without a references.md code`);
+  for (const t of Object.keys(tierDefs)) check(prompt.includes(`${t}: ${tierDefs[t]}`), `${where} must define ${t} as "${tierDefs[t]}"`);
+}
+
+// 5. The side panel styles exactly the canonical severities (rules and tokens).
+const css = read('extension/sidepanel/sidepanel.css');
+const styled = [...new Set([...css.matchAll(/(?:\.severity|--sev(?:erity)?)-([a-z]+)/g)].map((m) => m[1]))].sort();
+check(styled.join('|') === [...SEVERITIES].sort().join('|'), `sidepanel.css styles severities ${styled.join('|')}, not ${SEVERITIES.join('|')}`);
+
+assert.ok(problems.size === 0, `Extension evidence labels disagree with evidence/references.md or CLAUDE.md:\n  ${[...problems].join('\n  ')}`);
+console.log('✅ Evidence label tests passed.');
diff --git a/test/test-parser-helper.mjs b/test/test-parser-helper.mjs
index 6c50ef6..2d1fcc4 100644
--- a/test/test-parser-helper.mjs
+++ b/test/test-parser-helper.mjs
@@ -42,9 +42,9 @@ assert.ok(demoData.summary.keyTakeaway.includes('Settings'), 'Demo result must n
 assert.ok(demoData.findings.length >= 2, 'Demo result must provide multiple evidence-based findings');
 
 const hasT1 = demoData.findings.some(f => f.tier === 'T1');
-const hasT2 = demoData.findings.some(f => f.tier === 'T2');
+const hasT5 = demoData.findings.some(f => f.tier === 'T5');
 assert.ok(hasT1, 'Demo findings must include T1 evidence tier badge');
-assert.ok(hasT2, 'Demo findings must include T2 evidence tier badge');
+assert.ok(hasT5, 'Demo findings must include T5 evidence tier badge');
 
 assert.ok(demoData.improvedDraft.title, 'Demo draft must include title');
 assert.ok(demoData.improvedDraft.content.includes('Settings'), 'Demo draft must remind user to configure API key in Settings');
diff --git a/test/test-prompts.mjs b/test/test-prompts.mjs
index f21af7a..d63d284 100644
--- a/test/test-prompts.mjs
+++ b/test/test-prompts.mjs
@@ -1,9 +1,7 @@
 import assert from 'node:assert';
-import { EVIDENCE_DOMAINS, TIER_METADATA, buildAuditPrompt, buildCourseAuditPrompt } from '../extension/shared/prompts.js';
+import { TIER_METADATA, buildAuditPrompt, buildCourseAuditPrompt } from '../extension/shared/prompts.js';
 
-assert.ok(EVIDENCE_DOMAINS.length >= 10, 'Should include all core idstack research domains');
 assert.ok(TIER_METADATA.T1, 'Tier 1 metadata must exist');
-assert.strictEqual(TIER_METADATA.T1.label, 'Meta-analysis');
 assert.strictEqual(TIER_METADATA.T1.color, '#2f7a4a', 'T1 must match canonical DESIGN.md color');
 assert.strictEqual(TIER_METADATA.T2.color, '#2864a8', 'T2 must match canonical DESIGN.md color');
 assert.strictEqual(TIER_METADATA.T3.color, '#a87726', 'T3 must match canonical DESIGN.md color');

From c18e9204c86e3351c6efa24668e8d8800daddec6 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 17:30:32 -0700
Subject: [PATCH 08/19] fix(extension): refuse empty pages/courses, validate
 model JSON, bound the fetch, key in header

Closes F7 (worker side, plus the same defect on the course path), F9
(worker side) and F10.

- RUN_AUDIT refuses content under MIN_AUDIT_WORDS = 10 before the model
  or demo path, and shows payload.emptyReason when the extractor or
  panel supplies one.
- CRAWL_AND_AUDIT_COURSE refuses a course with no syllabus text and no
  assignments, right after the crawl (demo mode too).
- The model call sends the key in an x-goog-api-key header, not the URL,
  and is bounded by AbortSignal.timeout(25 s); a timeout is reported
  plainly by checking signal.aborted (Chrome < 124 says AbortError).
- Model output must have findings as an array of objects with string or
  missing tier and severity before it is saved or returned.
- test-service-worker.mjs: 13-word payload, one AbortSignal.timeout spy,
  refusal, transport, timeout, pass-through and malformed-shape
  scenarios; every refusal asserts empty history.
- Mutations 27a-27f.

Deviations:
- 27e deletes `request.payload?.emptyReason || ` instead of inserting a
  literal '' there, which would make a tagged template that throws and
  trips the suite for the wrong reason.
- The fetch .catch uses a multi-line form (as in the U5 design) rather
  than the spec's compressed one; no mutation anchors on it.
- The emptyReason scenario uses a realistic reason string, asserted by
  strict equality, instead of 'X'.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 extension/background/service-worker.js | 35 +++++++++--
 test/mutation-test.sh                  | 85 ++++++++++++++++++++++++++
 test/test-service-worker.mjs           | 83 ++++++++++++++++++++++++-
 3 files changed, 198 insertions(+), 5 deletions(-)

diff --git a/extension/background/service-worker.js b/extension/background/service-worker.js
index ddede63..dc08980 100644
--- a/extension/background/service-worker.js
+++ b/extension/background/service-worker.js
@@ -3,23 +3,35 @@ import { getSettings, saveAuditResult } from '../shared/storage.js';
 import { cleanJsonResponse, getDemoAuditResult, getDemoCourseAuditResult } from './parser-helper.js';
 import { crawlCanvasCourse } from './canvas-crawler.js';
 
+const LLM_TIMEOUT_MS = 25000;   // Chrome kills an extension SW whose fetch response takes >30 s
+// Fewer words than this means an unreadable page (browser page, PDF viewer,
+// a single Modules item title); the model would return an audit of nothing.
+const MIN_AUDIT_WORDS = 10;
+
 // Setup side panel behavior on action click
 if (typeof chrome !== 'undefined' && chrome.sidePanel && chrome.sidePanel.setPanelBehavior) {
   chrome.sidePanel.setPanelBehavior({ openPanelOnActionClick: true }).catch((err) => console.error(err));
 }
 
 async function callLlmApi(apiKey, prompt) {
-  const url = `https://generativelanguage.googleapis.com/v1beta/models/gemini-2.5-flash:generateContent?key=${apiKey}`; // IDSTACK_CLI_LEAK_ALLOW
+  const url = 'https://generativelanguage.googleapis.com/v1beta/models/gemini-2.5-flash:generateContent'; // IDSTACK_CLI_LEAK_ALLOW
+  const signal = AbortSignal.timeout(LLM_TIMEOUT_MS);
   const response = await fetch(url, {
     method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
+    headers: { 'Content-Type': 'application/json', 'x-goog-api-key': apiKey },
     body: JSON.stringify({
       contents: [{ parts: [{ text: prompt }] }],
       generationConfig: {
         responseMimeType: 'application/json',
         temperature: 0.2
       }
-    })
+    }),
+    signal
+  }).catch((err) => {
+    // Chrome < 124 rejects a timed-out fetch with AbortError, so check the signal, not err.name.
+    throw signal.aborted
+      ? new Error(`The AI service did not respond within ${LLM_TIMEOUT_MS / 1000} seconds. Please retry the audit.`)
+      : err;
   });
 
   if (!response.ok) {
@@ -31,7 +43,14 @@ async function callLlmApi(apiKey, prompt) {
   const rawText = data.candidates?.[0]?.content?.parts?.[0]?.text;
   if (!rawText) throw new Error('Empty response from AI model.');
 
-  return cleanJsonResponse(rawText);
+  const result = cleanJsonResponse(rawText);
+  // The renderer and dossier compiler read every finding and call string methods
+  // on tier and severity; refuse a shape they cannot handle before it is saved.
+  const optionalString = (v) => v == null || typeof v === 'string';
+  if (!Array.isArray(result?.findings) || !result.findings.every((f) => f && typeof f === 'object' && optionalString(f.tier) && optionalString(f.severity))) {
+    throw new Error('The AI response did not match the audit format. Please retry the audit.');
+  }
+  return result;
 }
 
 if (typeof chrome !== 'undefined' && chrome.runtime && chrome.runtime.onMessage) {
@@ -39,6 +58,11 @@ if (typeof chrome !== 'undefined' && chrome.runtime && chrome.runtime.onMessage)
     if (request.action === 'RUN_AUDIT') {
       (async () => {
         try {
+          const wordCount = String(request.payload?.content || '').split(/\s+/).filter(Boolean).length;
+          if (wordCount < MIN_AUDIT_WORDS) {
+            // The extractor and side panel explain pages they could not or would not read.
+            throw new Error(request.payload?.emptyReason || `This page has too little readable text to audit (${wordCount} words; at least ${MIN_AUDIT_WORDS} needed). Browser pages, PDF viewers, and image-only pages expose no text to idstack.`);
+          }
           const settings = await getSettings();
           
           let auditResult;
@@ -70,6 +94,9 @@ if (typeof chrome !== 'undefined' && chrome.runtime && chrome.runtime.onMessage)
         try {
           const { origin, courseId } = request.payload || {};
           const courseData = await crawlCanvasCourse(origin, courseId);
+          if (!courseData.syllabus.trim() && courseData.assignments.length === 0) {
+            throw new Error('This course has no syllabus text and no assignments for idstack to audit.');
+          }
           const settings = await getSettings();
 
           let auditResult;
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 8db82f5..0af7d4f 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -679,6 +679,91 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "side panel styles a suggestion severity" "$WORK/r/test/test-extension.sh"
 
+# 27a-27f. The service worker audited whatever it was sent: a restricted tab's
+# empty fallback, a lone Modules item title or an empty course came back as an
+# invented audit and was saved. Malformed model JSON was saved and stuck the
+# panel, and the model fetch had no timeout and carried the API key in its URL.
+# test-service-worker.mjs drives the shipped worker through each case.
+
+# 27a. RUN_AUDIT audits a page with no readable text again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "if (wordCount < MIN_AUDIT_WORDS) {"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "if (false) {", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "RUN_AUDIT audits a page with no text" "$WORK/r/test/test-extension.sh"
+
+# 27b. malformed model JSON is saved and handed to the panel again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "throw new Error('The AI response did not match the audit format. Please retry the audit.');"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "malformed model JSON saved to history" "$WORK/r/test/test-extension.sh"
+
+# 27c. the API key goes back into the URL query string -> test-extension must
+# fail. A query-string key lands in proxy, gateway and crash logs.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+for old, new in [
+    (":generateContent';", ":generateContent?key=' + apiKey;"),
+    (", 'x-goog-api-key': apiKey", ""),
+]:
+    assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+    s = s.replace(old, new, 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "API key sent in the URL query string" "$WORK/r/test/test-extension.sh"
+
+# 27d. the model fetch loses its timeout -> test-extension must fail. Chrome
+# kills a service worker whose fetch response takes over 30 s, and the panel
+# then gets a closed message port instead of an explanation.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "const signal = AbortSignal.timeout(LLM_TIMEOUT_MS);"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "const signal = new AbortController().signal;", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "model fetch without a timeout" "$WORK/r/test/test-extension.sh"
+
+# 27e. the worker drops the reason the extractor or panel gave for an unread
+# page -> test-extension must fail. The user would see a generic word count.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "request.payload?.emptyReason || "
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "refusal reason from the extractor/panel dropped" "$WORK/r/test/test-extension.sh"
+
+# 27f. a course with no syllabus and no assignments is audited again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "if (!courseData.syllabus.trim() && courseData.assignments.length === 0) {"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "if (false) {", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "empty course audited" "$WORK/r/test/test-extension.sh"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-service-worker.mjs b/test/test-service-worker.mjs
index bc0beae..67a22c1 100644
--- a/test/test-service-worker.mjs
+++ b/test/test-service-worker.mjs
@@ -2,12 +2,30 @@ import assert from 'node:assert';
 import { installChrome, installFetch, jsonResponse, importFresh, resetGlobals } from './extension-harness.mjs';
 import { saveSettings, getAuditHistory } from '../extension/shared/storage.js';
 
-const payload = { url: 'https://canvas.instructure.com/courses/1/assignments/2', title: 'Enzymes Lab', pageType: 'Canvas Assignment', content: 'Read chapter 4 and answer the review questions.' };
+// A real but short Canvas prompt (13 words): the worker must still audit it.
+const TEXT = 'Post a reflection on chapter four and reply to two peers by Friday.';
+const payload = { url: 'https://canvas.instructure.com/courses/1/assignments/2', title: 'Enzymes Lab', pageType: 'Canvas Assignment', content: TEXT };
 const llmReply = (obj) => jsonResponse({ candidates: [{ content: { parts: [{ text: JSON.stringify(obj) }] } }] });
+const VALID = {
+  summary: { bloomsLevel: 'Apply', alignmentScore: 'Strong', keyTakeaway: 'k' },
+  findings: [{ severity: 'info', tier: 'T1', citation: 'c', observation: 'o', evidence: 'e', recommendation: 'r' }],
+  improvedDraft: { title: 't', content: 'c' }
+};
+
+// One spy for the whole file: it records every AbortSignal.timeout the worker
+// asks for and, when a scenario sets timeouts.fire, returns a signal that has
+// already timed out. Node unrefs the real timer, so nothing waits 25 s.
+const realTimeout = AbortSignal.timeout;
+const timeouts = { requested: [], fire: false };
+AbortSignal.timeout = (ms) => {
+  timeouts.requested.push(ms);
+  return timeouts.fire ? AbortSignal.abort(new DOMException('signal timed out', 'TimeoutError')) : realTimeout.call(AbortSignal, ms);
+};
 
 // Each scenario loads a fresh service worker against a fresh chrome stub. The
 // key goes through saveSettings so the test does not care which storage area holds it.
 async function loadWorker({ apiKey, fetchHandler } = {}) {
+  Object.assign(timeouts, { requested: [], fire: false });
   const h = installChrome();
   if (apiKey) await saveSettings({ apiKey });
   h.fetchCalls = installFetch(fetchHandler || (async (url) => { throw new Error('unexpected fetch ' + url); }));
@@ -54,5 +72,68 @@ assert.strictEqual((await getAuditHistory())[0].url, 'https://canvas.instructure
 // Unknown actions get no reply and do not hold the channel open.
 assert.strictEqual(await h.dispatch({ action: 'NOT_A_REAL_ACTION' }), undefined);
 
+// A refused audit replies with an error and is never saved to history.
+async function assertRejected(res, pattern) {
+  assert.strictEqual(res?.success, false, `expected an error, got ${String(JSON.stringify(res)).slice(0, 120)}`);
+  assert.match(res.error, pattern);
+  assert.deepStrictEqual(await getAuditHistory(), [], 'a refused audit must not be saved to history');
+}
+const modelCalls = (h) => h.fetchCalls.filter((c) => new URL(c.url).host === 'generativelanguage.googleapis.com');
+
+// F7: a page with no readable text (restricted tab, PDF viewer) or a lone
+// Modules item title never reaches the model, with or without a key.
+for (const [content, apiKey] of [['', 'k'], ['  \n ', undefined], ['Week 1 Reading', 'k']]) {
+  h = await loadWorker({ apiKey, fetchHandler: async () => llmReply(VALID) });
+  await assertRejected(await h.dispatch({ action: 'RUN_AUDIT', payload: { ...payload, content } }), /too little readable text/);
+  assert.strictEqual(h.fetchCalls.length, 0, `page content ${JSON.stringify(content)} must not be sent to the model`);
+}
+
+// F7: the extractor's or panel's reason for not reading a page is what the user sees.
+const reason = 'idstack does not read student-record pages such as the Gradebook.';
+h = await loadWorker({ apiKey: 'k', fetchHandler: async () => llmReply(VALID) });
+res = await h.dispatch({ action: 'RUN_AUDIT', payload: { ...payload, content: '', emptyReason: reason } });
+await assertRejected(res, /Gradebook/);
+assert.strictEqual(res.error, reason, 'the payload emptyReason is the error shown');
+assert.strictEqual(h.fetchCalls.length, 0);
+
+// F7, course path: no syllabus text and no assignments is an audit of nothing.
+h = await loadWorker({ apiKey: 'k', fetchHandler: async (url) => url.includes('include[]=syllabus_body')
+  ? jsonResponse({ name: 'Sandbox', syllabus_body: '' })
+  : url.includes('/assignments') ? jsonResponse([]) : llmReply(VALID) });
+res = await h.dispatch({ action: 'CRAWL_AND_AUDIT_COURSE', payload: { origin: 'https://canvas.instructure.com', courseId: '12' } });
+await assertRejected(res, /no syllabus text and no assignments/);
+assert.strictEqual(modelCalls(h).length, 0, 'an empty course must not be sent to the model');
+
+// F10 transport: the key travels in a header, not the URL, and the model fetch
+// is bounded below Chrome's 30 s cutoff for an extension fetch.
+h = await loadWorker({ apiKey: 'k', fetchHandler: async () => llmReply(VALID) });
+res = await h.dispatch({ action: 'RUN_AUDIT', payload });
+assert.strictEqual(res.success, true, JSON.stringify(res));
+assert.deepStrictEqual(res.data, VALID);
+assert.deepStrictEqual((await getAuditHistory())[0].result, VALID);
+assert.strictEqual(h.fetchCalls.length, 1);
+const [call] = h.fetchCalls;
+assert.ok(call.url.startsWith('https://generativelanguage.googleapis.com/'));
+assert.ok(!call.url.includes('key='), `API key must not be in the URL: ${call.url}`);
+assert.strictEqual(call.init.headers['x-goog-api-key'], 'k', 'API key travels in the x-goog-api-key header');
+assert.strictEqual(timeouts.requested.length, 1, 'model fetch must be bounded by AbortSignal.timeout');
+assert.ok(timeouts.requested[0] > 0 && timeouts.requested[0] < 30000, `timeout ${timeouts.requested[0]}ms must beat Chrome's 30 s fetch cutoff`);
+assert.ok(call.init.signal instanceof AbortSignal && !call.init.signal.aborted, 'the timeout signal must reach fetch');
+
+// F10: a timed-out model call is explained, not saved. Chrome before 124
+// rejects it with AbortError, so the worker must check the signal, not the name.
+h = await loadWorker({ apiKey: 'k', fetchHandler: async () => { throw new DOMException('The user aborted a request.', 'AbortError'); } });
+timeouts.fire = true;
+await assertRejected(await h.dispatch({ action: 'RUN_AUDIT', payload }), /did not respond within 25 seconds/);
+// Control: any other network error passes through unchanged.
+h = await loadWorker({ apiKey: 'k', fetchHandler: async () => { throw new TypeError('Failed to fetch'); } });
+await assertRejected(await h.dispatch({ action: 'RUN_AUDIT', payload }), /^Failed to fetch$/);
+
+// F9: model output the renderer or dossier compiler cannot handle is refused before it is saved.
+for (const bad of [{ findings: { 0: {} } }, { findings: [null] }, { findings: [{ tier: 1 }] }, { findings: [{ severity: 2 }] }, 'not an object']) {
+  h = await loadWorker({ apiKey: 'k', fetchHandler: async () => llmReply(bad) });
+  await assertRejected(await h.dispatch({ action: 'RUN_AUDIT', payload }), /audit format/);
+}
+
 resetGlobals();
 console.log('✅ Service worker routing tests passed.');

From 57e050693160459613109fcfee01a12082824da2 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 18:19:19 -0700
Subject: [PATCH 09/19] fix(extension): gate SW messages to the panel; drop
 <all_urls>; read tabs via activeTab

Closes F3 and F4 (decision D1 = A).

F3: the service worker answered any sender and spliced the raw origin and
courseId into credentialed Canvas fetches. Its listener now ignores any
sender whose URL is not one of the extension's own pages (a content script
shares sender.id), and CRAWL_AND_AUDIT_COURSE accepts only a bare https
origin and a numeric course id.

F4: the <all_urls> content script is gone ("all your data on all websites"
at install, and its match also widened the worker's CORS allowlist). The
icon click now reaches chrome.action.onClicked (openPanelOnActionClick is
reset to false, since Chrome's toggle path skips the activeTab grant),
opens the panel without an await, and tells an open panel to re-read the
tab. The panel injects content/extractor.js with executeScript and reads
the script's completion value; an unreadable tab carries an emptyReason
that the worker shows. Custom-domain Canvas hosts are requested per site
(optional_host_permissions https://*/*) inside the Audit Entire Course
click, before any await. minimum_chrome_version 116 for sidePanel.open.
extractor.js no longer registers an onMessage listener (which returned
true for every message).

Tests: test-manifest.js, test-extractor.mjs (Test 10: vm injection run
twice in one world), test-service-worker.mjs (sender gate, five invalid
targets, custom-domain crawl, panel behaviour, onClicked) and
test-sidepanel.mjs (injection, synchronous permission request, denial,
TAB_ACCESS_GRANTED, unreadable tab). The harness gains action, sidePanel,
permissions and scripting stubs and drops tabs.sendMessage/onTabMessage.
Mutation cases 28a-28n.

Deviations from the spec: the TAB_ACCESS_GRANTED listener sits inside the
file's usual `typeof chrome` guard (the pinned lines are unchanged, indented
two more spaces; 28n still anchors uniquely). Test 10 reuses the harness
chrome stub and the Test 1 assignment fixture instead of U4's hand-built
stub. The side-panel permission scenarios use a custom-domain course root
(canvas.asu.edu), the case the optional host permission exists for.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 extension/background/service-worker.js |  25 +++-
 extension/content/extractor.js         |  17 +--
 extension/manifest.json                |  15 +-
 extension/sidepanel/sidepanel.js       |  68 +++++----
 test/extension-harness.mjs             |  53 ++++---
 test/mutation-test.sh                  | 182 +++++++++++++++++++++++++
 test/test-extractor.mjs                |  30 ++--
 test/test-manifest.js                  |  11 ++
 test/test-service-worker.mjs           |  49 ++++++-
 test/test-sidepanel.mjs                |  48 ++++++-
 10 files changed, 413 insertions(+), 85 deletions(-)

diff --git a/extension/background/service-worker.js b/extension/background/service-worker.js
index dc08980..695288b 100644
--- a/extension/background/service-worker.js
+++ b/extension/background/service-worker.js
@@ -8,9 +8,20 @@ const LLM_TIMEOUT_MS = 25000;   // Chrome kills an extension SW whose fetch resp
 // a single Modules item title); the model would return an audit of nothing.
 const MIN_AUDIT_WORDS = 10;
 
-// Setup side panel behavior on action click
+// Open the panel from action.onClicked, not openPanelOnActionClick: Chrome routes a
+// side-panel-toggle click past its activeTab grant (crbug.com/40904917), and activeTab
+// is how the panel reads pages now that no content script is declared. v1.0.0 stored
+// `true` in the extension's prefs, so set it back to false explicitly.
 if (typeof chrome !== 'undefined' && chrome.sidePanel && chrome.sidePanel.setPanelBehavior) {
-  chrome.sidePanel.setPanelBehavior({ openPanelOnActionClick: true }).catch((err) => console.error(err));
+  chrome.sidePanel.setPanelBehavior({ openPanelOnActionClick: false }).catch((err) => console.error(err));
+}
+if (typeof chrome !== 'undefined' && chrome.action && chrome.action.onClicked) {
+  chrome.action.onClicked.addListener((tab) => {
+    // No await before open(): it needs the click's user gesture.
+    chrome.sidePanel.open({ windowId: tab.windowId });
+    // An open panel re-reads the tab it can now access; if none is open yet, nothing listens.
+    chrome.runtime.sendMessage({ action: 'TAB_ACCESS_GRANTED' }).catch(() => {});
+  });
 }
 
 async function callLlmApi(apiKey, prompt) {
@@ -55,6 +66,9 @@ async function callLlmApi(apiKey, prompt) {
 
 if (typeof chrome !== 'undefined' && chrome.runtime && chrome.runtime.onMessage) {
   chrome.runtime.onMessage.addListener((request, sender, sendResponse) => {
+    // Only the extension's own pages (the side panel) may start audits. A content-script
+    // context shares sender.id, so compare the sender's URL with our origin instead.
+    if (!String(sender.url || '').startsWith(chrome.runtime.getURL(''))) return;
     if (request.action === 'RUN_AUDIT') {
       (async () => {
         try {
@@ -93,6 +107,13 @@ if (typeof chrome !== 'undefined' && chrome.runtime && chrome.runtime.onMessage)
       (async () => {
         try {
           const { origin, courseId } = request.payload || {};
+          // origin is spliced into a credentialed fetch URL: accept only a bare https
+          // origin and a numeric course id, so no path or query can ride along.
+          let target = null;
+          try { target = new URL(origin); } catch (e) { /* not a URL */ }
+          if (!target || target.protocol !== 'https:' || target.origin !== origin || !/^\d+$/.test(courseId)) {
+            throw new Error('Invalid Canvas course target.');
+          }
           const courseData = await crawlCanvasCourse(origin, courseId);
           if (!courseData.syllabus.trim() && courseData.assignments.length === 0) {
             throw new Error('This course has no syllabus text and no assignments for idstack to audit.');
diff --git a/extension/content/extractor.js b/extension/content/extractor.js
index f5e25ae..6365440 100644
--- a/extension/content/extractor.js
+++ b/extension/content/extractor.js
@@ -47,21 +47,16 @@ function extractPageContent() {
   return extractContentFromDOM(document, url);
 }
 
-// Listen for messages from Side Panel
-if (typeof chrome !== 'undefined' && chrome.runtime && chrome.runtime.onMessage) {
-  chrome.runtime.onMessage.addListener((request, sender, sendResponse) => {
-    if (request.action === 'EXTRACT_CONTENT') {
-      const data = extractPageContent();
-      sendResponse(data);
-    }
-    return true;
-  });
-}
-
+// Injected with chrome.scripting.executeScript({ files }): the value of the final
+// statement is the InjectionResult the side panel reads, so extractPageContent()
+// must stay last. Re-injected on every refresh into the same isolated world, so no
+// top-level let/const/class (redeclaring them throws).
 if (typeof module !== 'undefined' && module.exports) {
   module.exports = {
     detectPageType,
     extractContentFromDOM,
     extractPageContent
   };
+} else {
+  extractPageContent();
 }
diff --git a/extension/manifest.json b/extension/manifest.json
index 8bdfac4..4d2750e 100644
--- a/extension/manifest.json
+++ b/extension/manifest.json
@@ -2,6 +2,7 @@
   "manifest_version": 3,
   "name": "idstack — Evidence-Based Course Design",
   "version": "1.0.0",
+  "minimum_chrome_version": "116",
   "description": "Evidence-based instructional design co-pilot for Canvas LMS, Google Docs, and course web pages.",
   "homepage_url": "https://idstack.org",
   "icons": {
@@ -19,17 +20,6 @@
     "service_worker": "background/service-worker.js",
     "type": "module"
   },
-  "content_scripts": [
-    {
-      "matches": [
-        "*://*.instructure.com/*",
-        "*://docs.google.com/document/*",
-        "<all_urls>"
-      ],
-      "js": ["content/extractor.js"],
-      "run_at": "document_idle"
-    }
-  ],
   "permissions": [
     "sidePanel",
     "storage",
@@ -39,5 +29,8 @@
   "host_permissions": [
     "https://generativelanguage.googleapis.com/*",
     "*://*.instructure.com/*"
+  ],
+  "optional_host_permissions": [
+    "https://*/*"
   ]
 }
diff --git a/extension/sidepanel/sidepanel.js b/extension/sidepanel/sidepanel.js
index 7b383c9..2f38b92 100644
--- a/extension/sidepanel/sidepanel.js
+++ b/extension/sidepanel/sidepanel.js
@@ -75,8 +75,16 @@ export async function refreshActiveTab() {
       auditCourseBtn.style.display = activeCourseContext.isCourseRoot ? 'block' : 'none';
     }
 
+    // No declarative content script: inject the extractor on demand. Its final
+    // statement evaluates to the payload, which comes back as the injection result.
+    // Needs access to the tab: activeTab (clicking the idstack icon on this tab) or a
+    // host permission (*.instructure.com, or a site granted for a course audit).
     try {
-      const response = await chrome.tabs.sendMessage(tab.id, { action: 'EXTRACT_CONTENT' });
+      const [injection] = await chrome.scripting.executeScript({
+        target: { tabId: tab.id },
+        files: ['content/extractor.js']
+      });
+      const response = injection && injection.result;
       if (response) {
         activePayload = response;
         const pageTypeTag = document.getElementById('page-type-tag');
@@ -86,38 +94,22 @@ export async function refreshActiveTab() {
         return;
       }
     } catch (err) {
-      // Content script may not be injected on pre-existing tabs. Attempt programmatic injection.
-      if (chrome.scripting && chrome.scripting.executeScript) {
-        try {
-          await chrome.scripting.executeScript({
-            target: { tabId: tab.id },
-            files: ['content/extractor.js']
-          });
-          const retryResponse = await chrome.tabs.sendMessage(tab.id, { action: 'EXTRACT_CONTENT' });
-          if (retryResponse) {
-            activePayload = retryResponse;
-            const pageTypeTag = document.getElementById('page-type-tag');
-            const pageTitle = document.getElementById('page-title');
-            if (pageTypeTag) pageTypeTag.textContent = activeCourseContext.isCourseRoot ? 'Canvas Course Root' : retryResponse.pageType;
-            if (pageTitle) pageTitle.textContent = retryResponse.title;
-            return;
-          }
-        } catch (injectionErr) {
-          // Tab may be a chrome:// or restricted URL
-        }
-      }
+      // No access to this tab yet (switched to it without clicking the icon) or a
+      // restricted page such as chrome:// or the Chrome Web Store.
     }
 
-    // Fallback payload if content script extraction fails
+    // Fallback payload if extraction fails. Without access Chrome hides tab.title too.
     const pageTypeTag = document.getElementById('page-type-tag');
     const pageTitle = document.getElementById('page-title');
     if (pageTypeTag) pageTypeTag.textContent = activeCourseContext.isCourseRoot ? 'Canvas Course Root' : 'Web Page';
-    if (pageTitle) pageTitle.textContent = tab.title || 'Current Tab';
+    if (pageTitle) pageTitle.textContent = tab.title || 'Click the idstack toolbar icon to read this tab';
     activePayload = {
       url: tab.url || '',
       title: tab.title || 'Current Tab',
       pageType: activeCourseContext.isCourseRoot ? 'Canvas Course Root' : 'Web Page',
-      content: ''
+      content: '',
+      // The service worker shows this instead of auditing an empty page.
+      emptyReason: 'idstack cannot read this tab. If you just switched to it, click the idstack toolbar icon, then audit again. Browser pages such as chrome:// and the Chrome Web Store cannot be read.'
     };
   } catch (e) {
     console.warn('Error refreshing active tab:', e);
@@ -294,12 +286,21 @@ if (auditBtn) {
 const auditCourseBtn = document.getElementById('audit-course-btn');
 if (auditCourseBtn) {
   auditCourseBtn.addEventListener('click', async () => {
-    if (!activePayload) await refreshActiveTab();
-
-    const url = (activePayload && activePayload.url) || '';
-    const courseCtx = activeCourseContext || detectCourseContext(url);
-    const origin = courseCtx.origin || (url ? new URL(url).origin : '');
-    const courseId = courseCtx.courseId;
+    // Shown only after refreshActiveTab() found a course root, so the context is set.
+    const { origin, courseId } = activeCourseContext || {};
+    // permissions.request needs this click's user gesture, so it comes before any other
+    // await. Already-held access (*.instructure.com) resolves true with no prompt; other
+    // Canvas hosts get a one-time Chrome prompt for that site only.
+    let granted = false;
+    try {
+      granted = await chrome.permissions.request({ origins: [`${origin}/*`] });
+    } catch (err) {
+      // Not a requestable origin (optional_host_permissions covers https only)
+    }
+    if (!granted) {
+      renderError(`idstack needs access to ${origin} to audit the whole course.`);
+      return;
+    }
 
     const progressCard = document.getElementById('crawl-progress-card');
     const statusText = document.getElementById('crawl-status-text');
@@ -475,6 +476,13 @@ if (typeof chrome !== 'undefined' && chrome.tabs) {
   }
 }
 
+// The service worker announces an icon click: activeTab now covers the current tab.
+if (typeof chrome !== 'undefined' && chrome.runtime && chrome.runtime.onMessage) {
+  chrome.runtime.onMessage.addListener((msg) => {
+    if (msg && msg.action === 'TAB_ACCESS_GRANTED') refreshActiveTab();
+  });
+}
+
 // Initial tab detection on load
 if (typeof chrome !== 'undefined' && chrome.tabs) {
   refreshActiveTab();
diff --git a/test/extension-harness.mjs b/test/extension-harness.mjs
index 8b3df5d..068f873 100644
--- a/test/extension-harness.mjs
+++ b/test/extension-harness.mjs
@@ -70,20 +70,27 @@ function storageArea(data) {
 }
 
 // Installs globalThis.chrome. Options:
-//   sync, local       initial chrome.storage contents
-//   tabs              what chrome.tabs.query resolves to
-//   onTabMessage      (tabId, message) => response for chrome.tabs.sendMessage;
-//                     omitted = reject like a tab with no content script
-//   onRuntimeMessage  (message) => response for chrome.runtime.sendMessage
-// Returns { chrome, storage, listeners, sent, dispatch }. storage.sync/.local
-// are the live backing objects; sent records runtime.sendMessage calls;
+//   sync, local          initial chrome.storage contents
+//   tabs                 what chrome.tabs.query resolves to
+//   onRuntimeMessage     (message) => response for chrome.runtime.sendMessage
+//   onExecuteScript      (injection) => InjectionResult[] for
+//                        chrome.scripting.executeScript; omitted = reject like
+//                        a tab the extension has no access to
+//   onPermissionRequest  (permissions) => boolean for chrome.permissions.request;
+//                        omitted = granted
+// Returns { chrome, storage, listeners, sent, calls, dispatch }.
+// storage.sync/.local are the live backing objects; sent records
+// runtime.sendMessage calls; calls records executeScript injections
+// (executed), permission requests (permissionRequests), sidePanel.open
+// options (opened) and the last setPanelBehavior value (panelBehavior).
 // dispatch(message, sender = PANEL_SENDER) delivers to the registered
 // runtime.onMessage listeners and resolves with the sendResponse value
 // (undefined if no listener keeps the channel open and none responds).
-export function installChrome({ sync = {}, local = {}, tabs = [], onTabMessage, onRuntimeMessage } = {}) {
+export function installChrome({ sync = {}, local = {}, tabs = [], onRuntimeMessage, onExecuteScript, onPermissionRequest } = {}) {
   const storage = { sync: structuredClone(sync), local: structuredClone(local) };
-  const listeners = { message: [], tabActivated: [], tabUpdated: [] };
+  const listeners = { message: [], tabActivated: [], tabUpdated: [], actionClicked: [] };
   const sent = [];
+  const calls = { executed: [], permissionRequests: [], opened: [], panelBehavior: undefined };
   const chrome = {
     runtime: {
       id: EXTENSION_ID,
@@ -100,15 +107,29 @@ export function installChrome({ sync = {}, local = {}, tabs = [], onTabMessage,
     storage: { sync: storageArea(storage.sync), local: storageArea(storage.local) },
     tabs: {
       query: async () => tabs,
-      sendMessage: async (tabId, message) => {
-        if (!onTabMessage) throw new Error('Could not establish connection. Receiving end does not exist.');
-        return onTabMessage(tabId, message);
-      },
       onActivated: { addListener: (fn) => listeners.tabActivated.push(fn) },
       onUpdated: { addListener: (fn) => listeners.tabUpdated.push(fn) }
     },
-    scripting: { executeScript: async () => [] },
-    sidePanel: { setPanelBehavior: async () => {} }
+    scripting: {
+      executeScript: async (injection) => {
+        calls.executed.push(injection);
+        if (!onExecuteScript) throw new Error('Cannot access contents of the page.');
+        return onExecuteScript(injection);
+      }
+    },
+    // Recorded before any await, so a test can check that a request was made
+    // synchronously inside a click handler (it needs the user gesture).
+    permissions: {
+      request(permissions) {
+        calls.permissionRequests.push(permissions);
+        return Promise.resolve(onPermissionRequest ? onPermissionRequest(permissions) : true);
+      }
+    },
+    action: { onClicked: { addListener: (fn) => listeners.actionClicked.push(fn) } },
+    sidePanel: {
+      setPanelBehavior: async (behavior) => { calls.panelBehavior = behavior; },
+      open(options) { calls.opened.push(options); return Promise.resolve(); }
+    }
   };
   globalThis.chrome = chrome;
 
@@ -124,7 +145,7 @@ export function installChrome({ sync = {}, local = {}, tabs = [], onTabMessage,
       if (!keepOpen && !responded) resolve(undefined);
     });
   }
-  return { chrome, storage, listeners, sent, dispatch };
+  return { chrome, storage, listeners, sent, calls, dispatch };
 }
 
 // Replaces globalThis.fetch; handler(url, init) returns a Response or throws.
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 0af7d4f..5c22325 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -764,6 +764,188 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "empty course audited" "$WORK/r/test/test-extension.sh"
 
+# 28a-28n. The extension declared an <all_urls> content script (install prompt:
+# "all your data on all websites"), yet custom-domain Canvas hosts could not be
+# crawled; and the service worker answered any sender, splicing the raw origin
+# and courseId into credentialed Canvas fetches. Now the panel reads tabs through
+# activeTab (the icon click reaches action.onClicked), requests a Canvas host per
+# site, and the worker serves only its own pages and validated course targets.
+
+# 28a. the worker gates on sender.id, which a content script shares -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "if (!String(sender.url || '').startsWith(chrome.runtime.getURL(''))) return;"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "if (sender.id !== chrome.runtime.id) return;", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "service worker trusts content-script senders" "$WORK/r/test/test-extension.sh"
+
+# 28b. the course origin may carry a path or query again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "target.origin !== origin || "
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "course origin smuggles a path" "$WORK/r/test/test-extension.sh"
+
+# 28c. the course id may carry a path again -> test-extension must fail. fetch
+# normalizes '../' segments, so '../../users/self' is any credentialed GET on the host.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = " || !/^\\d+$/.test(courseId)"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "course id smuggles a path" "$WORK/r/test/test-extension.sh"
+
+# 28d. the <all_urls> content script comes back -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/manifest.json" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = '  "permissions": [\n'
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, '  "content_scripts": [\n    {\n      "matches": ["<all_urls>"],\n      "js": ["content/extractor.js"],\n      "run_at": "document_idle"\n    }\n  ],\n' + old, 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "<all_urls> content script back" "$WORK/r/test/test-extension.sh"
+
+# 28e. the per-site optional host permission is dropped -> test-extension must
+# fail. Canvas outside instructure.com could then never be crawled.
+fresh
+python3 - "$WORK/r/extension/manifest.json" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = '  ],\n  "optional_host_permissions": [\n    "https://*/*"\n  ]\n'
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, '  ]\n', 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "custom-domain permission dropped" "$WORK/r/test/test-extension.sh"
+
+# 28f. the icon click toggles the panel directly again -> test-extension must
+# fail. Chrome's side-panel toggle path skips the activeTab grant.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "setPanelBehavior({ openPanelOnActionClick: false })"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "setPanelBehavior({ openPanelOnActionClick: true })", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "icon click no longer grants activeTab" "$WORK/r/test/test-extension.sh"
+
+# 28g. the site permission is requested after an await -> test-extension must
+# fail. Chrome rejects permissions.request once the click's user gesture is gone.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "    let granted = false;\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "    await refreshActiveTab();\n" + old, 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "site permission requested after an await" "$WORK/r/test/test-extension.sh"
+
+# 28h. the extractor's final statement no longer yields the payload -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "} else {\n  extractPageContent();\n}\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "}\n", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "extractor no longer returns its payload" "$WORK/r/test/test-extension.sh"
+
+# 28i. a top-level const in the extractor -> test-extension must fail. The panel
+# re-injects into the same isolated world, where a redeclaration throws.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "function detectPageType("
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "const EXTRACTOR_READY = true;\n" + old, 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "extractor breaks on re-injection" "$WORK/r/test/test-extension.sh"
+
+# 28j. an unreadable tab is sent with no explanation -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "      emptyReason: 'idstack cannot read this tab. If you just switched to it, click the idstack toolbar icon, then audit again. Browser pages such as chrome:// and the Chrome Web Store cannot be read.'\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "unreadable tab sent with no explanation" "$WORK/r/test/test-extension.sh"
+
+# 28k. the Chrome floor for sidePanel.open is dropped -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/manifest.json" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = '  "minimum_chrome_version": "116",\n'
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, '', 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "Chrome floor for sidePanel.open dropped" "$WORK/r/test/test-extension.sh"
+
+# 28l. the course crawl ignores a denied site permission -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "    if (!granted) {"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "    if (false) {", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "course crawl runs after the site permission is denied" "$WORK/r/test/test-extension.sh"
+
+# 28m. the icon click no longer opens the panel -> test-extension must fail.
+# With openPanelOnActionClick off, onClicked is the only way the panel opens.
+fresh
+python3 - "$WORK/r/extension/background/service-worker.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "  chrome.sidePanel.open({ windowId: tab.windowId });\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "icon click no longer opens the panel" "$WORK/r/test/test-extension.sh"
+
+# 28n. the panel ignores the worker's TAB_ACCESS_GRANTED -> test-extension must
+# fail. After a tab switch and an icon click the header would stay stale.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "  if (msg && msg.action === 'TAB_ACCESS_GRANTED') refreshActiveTab();\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "panel ignores newly granted tab access" "$WORK/r/test/test-extension.sh"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-extractor.mjs b/test/test-extractor.mjs
index 4ab2e38..134f7cf 100644
--- a/test/test-extractor.mjs
+++ b/test/test-extractor.mjs
@@ -1,4 +1,6 @@
 import assert from 'node:assert';
+import { readFileSync } from 'node:fs';
+import vm from 'node:vm';
 import { createDocument, installChrome, loadContentScript, resetGlobals } from './extension-harness.mjs';
 
 // The shipped content script: a classic script, loaded exactly as Chrome gets it.
@@ -151,17 +153,25 @@ assert.strictEqual(detectPageType('https://canvas.instructure.com/courses/1/assi
 assert.strictEqual(detectPageType('https://docs.google.com/document/d/123', {}), 'Google Doc Syllabus');
 assert.strictEqual(detectPageType('https://harvard.edu/syllabus', {}), 'Web Syllabus / Course Page');
 
-// Test 10: Chrome Runtime onMessage listener handling
+// Test 10: executeScript({ files }) contract. The side panel injects the shipped
+// extractor.js and reads the script's completion value as the InjectionResult.
+// It re-injects on every refresh into the same isolated world, so a second run
+// must work too (a top-level let/const/class would throw on redeclaration).
+const extractorUrl = new URL('../extension/content/extractor.js', import.meta.url);
+const extractorSrc = readFileSync(extractorUrl, 'utf8');
 const h = installChrome();
-globalThis.window = { location: { href: domAssignment.url } };
-globalThis.document = domAssignment.document;
-loadContentScript('content/extractor.js');
-
-assert.strictEqual(h.listeners.message.length, 1, 'chrome.runtime.onMessage listener should be registered');
-const responseData = await h.dispatch({ action: 'EXTRACT_CONTENT' });
-assert.ok(responseData, 'Response data must be returned on EXTRACT_CONTENT action');
-assert.strictEqual(responseData.pageType, 'Canvas Assignment');
-assert.strictEqual(responseData.title, 'Enzymes Lab Analysis');
+const isolatedWorld = vm.createContext({
+  URL,
+  chrome: h.chrome,
+  document: domAssignment.document,
+  window: { location: { href: domAssignment.url } }
+});
+for (const run of ['first', 'second']) {
+  const injected = vm.runInContext(extractorSrc, isolatedWorld, { filename: extractorUrl.pathname });
+  assert.ok(injected && injected.pageType === 'Canvas Assignment', `${run} injection must evaluate to the extraction payload`);
+  assert.strictEqual(injected.title, 'Enzymes Lab Analysis');
+}
+assert.strictEqual(h.listeners.message.length, 0, 'extractor must not register a persistent runtime.onMessage listener');
 resetGlobals();
 
 console.log('✅ Task 3 extractor tests passed.');
diff --git a/test/test-manifest.js b/test/test-manifest.js
index 8f7e3bf..656c04e 100644
--- a/test/test-manifest.js
+++ b/test/test-manifest.js
@@ -15,6 +15,17 @@ assert.ok(manifest.permissions.includes('activeTab'));
 assert.ok(manifest.host_permissions && manifest.host_permissions.includes('https://generativelanguage.googleapis.com/*'), 'host_permissions for AI API required');
 assert.ok(manifest.host_permissions && manifest.host_permissions.includes('*://*.instructure.com/*'), 'host_permissions for Canvas API required');
 
+// F4: no declarative content script (its <all_urls> match put "all your data on all
+// websites" on the install prompt). The panel injects the extractor on demand under
+// activeTab; non-instructure Canvas hosts are requested per site at runtime.
+assert.strictEqual(manifest.content_scripts, undefined, 'no declarative content_scripts');
+assert.ok(manifest.permissions.includes('scripting'), 'scripting permission required for on-demand extraction');
+assert.deepStrictEqual(manifest.optional_host_permissions, ['https://*/*'], 'custom-domain Canvas hosts are requested per site');
+assert.ok(!manifest.host_permissions.some((h) => ['<all_urls>', '*://*/*', 'https://*/*', 'http://*/*'].includes(h)),
+  'required host_permissions must stay narrow');
+// chrome.sidePanel.open, called from the icon click, needs Chrome 116.
+assert.ok(Number(manifest.minimum_chrome_version) >= 116, 'minimum_chrome_version must be at least 116 for sidePanel.open');
+
 // Storage helper check
 const storagePath = path.join(__dirname, '../extension/shared/storage.js');
 assert.ok(fs.existsSync(storagePath), 'storage.js must exist');
diff --git a/test/test-service-worker.mjs b/test/test-service-worker.mjs
index 67a22c1..8d1251c 100644
--- a/test/test-service-worker.mjs
+++ b/test/test-service-worker.mjs
@@ -1,5 +1,5 @@
 import assert from 'node:assert';
-import { installChrome, installFetch, jsonResponse, importFresh, resetGlobals } from './extension-harness.mjs';
+import { installChrome, installFetch, jsonResponse, importFresh, resetGlobals, EXTENSION_ID } from './extension-harness.mjs';
 import { saveSettings, getAuditHistory } from '../extension/shared/storage.js';
 
 // A real but short Canvas prompt (13 words): the worker must still audit it.
@@ -135,5 +135,52 @@ for (const bad of [{ findings: { 0: {} } }, { findings: [null] }, { findings: [{
   await assertRejected(await h.dispatch({ action: 'RUN_AUDIT', payload }), /audit format/);
 }
 
+// F3: only the side panel may start audits. A content script shares sender.id
+// with the panel, so a sender.id check would let any page's injected world
+// trigger credentialed Canvas fetches and write audit history.
+const fakeCanvas = async (url) => url.includes('include[]=syllabus_body')
+  ? jsonResponse({ name: 'Biology 101', syllabus_body: '<p>Course outcomes and weekly schedule</p>' })
+  : jsonResponse([]);
+const contentScript = { id: EXTENSION_ID, url: 'https://evil.example/page', tab: { id: 7 }, frameId: 0 };
+h = await loadWorker({ fetchHandler: fakeCanvas });
+res = await h.dispatch({ action: 'CRAWL_AND_AUDIT_COURSE', payload: { origin: 'https://canvas.instructure.com', courseId: '12' } }, contentScript);
+assert.strictEqual(res, undefined, 'a content-script sender gets no reply');
+res = await h.dispatch({ action: 'RUN_AUDIT', payload }, contentScript);
+assert.strictEqual(res, undefined, 'a content-script sender gets no RUN_AUDIT reply');
+assert.strictEqual(h.fetchCalls.length, 0, 'no credentialed Canvas fetch for a content-script sender');
+assert.deepStrictEqual(await getAuditHistory(), [], 'a content-script sender must not write audit history');
+
+// F3: origin and courseId are spliced into a credentialed fetch URL, so only a
+// bare https origin and a numeric course id are accepted.
+for (const target of [
+  { origin: 'https://victim.instructure.com/api/v1/users/self?x=', courseId: '1' },
+  { origin: 'https://canvas.asu.edu', courseId: '1/users' },
+  { origin: 'http://canvas.asu.edu', courseId: '1' },
+  { origin: 'https://user@canvas.asu.edu', courseId: '1' },
+  {}
+]) {
+  h = await loadWorker({ fetchHandler: fakeCanvas });
+  res = await h.dispatch({ action: 'CRAWL_AND_AUDIT_COURSE', payload: target });
+  assert.strictEqual(res?.success, false, `must reject course target ${JSON.stringify(target)}`);
+  assert.strictEqual(h.fetchCalls.length, 0, `rejected course target ${JSON.stringify(target)} must never be fetched`);
+}
+
+// Positive control: the panel can still crawl a custom-domain Canvas course,
+// and every request stays inside the validated course.
+h = await loadWorker({ fetchHandler: fakeCanvas });
+res = await h.dispatch({ action: 'CRAWL_AND_AUDIT_COURSE', payload: { origin: 'https://canvas.asu.edu', courseId: '42' } });
+assert.strictEqual(res?.success, true, JSON.stringify(res));
+assert.ok(h.fetchCalls.length > 0 && h.fetchCalls.every((c) => c.url.startsWith('https://canvas.asu.edu/api/v1/courses/42')),
+  `every crawl request stays inside the validated course: ${h.fetchCalls.map((c) => c.url).join(', ')}`);
+
+// F4: activeTab is granted only when the icon click reaches action.onClicked;
+// Chrome's openPanelOnActionClick path skips the grant (crbug.com/40904917).
+assert.deepStrictEqual(h.calls.panelBehavior, { openPanelOnActionClick: false },
+  'openPanelOnActionClick must be off: the side-panel toggle path skips the activeTab grant');
+assert.strictEqual(h.listeners.actionClicked.length, 1, 'service worker must handle action.onClicked');
+h.listeners.actionClicked[0]({ id: 3, windowId: 9 });
+assert.deepStrictEqual(h.calls.opened, [{ windowId: 9 }], 'icon click opens the panel synchronously (sidePanel.open needs the gesture)');
+assert.ok(h.sent.some((m) => m.action === 'TAB_ACCESS_GRANTED'), 'icon click tells an open panel to re-read the tab');
+
 resetGlobals();
 console.log('✅ Service worker routing tests passed.');
diff --git a/test/test-sidepanel.mjs b/test/test-sidepanel.mjs
index 324fb9d..45d429d 100644
--- a/test/test-sidepanel.mjs
+++ b/test/test-sidepanel.mjs
@@ -4,14 +4,15 @@ import { saveSettings } from '../extension/shared/storage.js';
 
 const COURSE_ROOT = 'https://canvas.instructure.com/courses/42';
 const ASSIGNMENT = 'https://canvas.instructure.com/courses/42/assignments/7';
+const CUSTOM_ROOT = 'https://canvas.asu.edu/courses/42';
 
 // Loads a fresh side panel against the shipped index.html and a stubbed chrome
-// whose active tab is `url` and whose content script answers EXTRACT_CONTENT.
+// whose active tab is `url` and whose extractor injection returns a payload.
 async function openPanel(url, { apiKey, ...chromeOpts } = {}) {
   const document = installDocument();
   const h = installChrome({
     tabs: [{ id: 7, url, title: 'Tab title', active: true }],
-    onTabMessage: async () => ({ url, title: 'Extracted title', pageType: 'Canvas Assignment', content: 'Some content' }),
+    onExecuteScript: async () => [{ frameId: 0, result: { url, title: 'Extracted title', pageType: 'Canvas Assignment', content: 'Some content' } }],
     ...chromeOpts
   });
   if (apiKey) await saveSettings({ apiKey });
@@ -20,11 +21,14 @@ async function openPanel(url, { apiKey, ...chromeOpts } = {}) {
   return { h, document, $: (id) => document.getElementById(id) };
 }
 
-// Course root: course-audit button shown, tag says so.
+// Course root: course-audit button shown, tag says so. There is no declarative
+// content script: the panel injects the shipped extractor and reads the
+// script's completion value.
 let p = await openPanel(COURSE_ROOT);
+assert.deepStrictEqual(p.h.calls.executed, [{ target: { tabId: 7 }, files: ['content/extractor.js'] }], 'the panel injects the shipped extractor into the active tab');
 assert.strictEqual(p.$('audit-course-btn').style.display, 'block', 'course audit offered on a course root');
 assert.strictEqual(p.$('page-type-tag').textContent, 'Canvas Course Root');
-assert.strictEqual(p.$('page-title').textContent, 'Extracted title');
+assert.strictEqual(p.$('page-title').textContent, 'Extracted title', 'page title comes from the injection result');
 
 // Assignment page: no course-audit button; single-page audit sends the extracted payload.
 p = await openPanel(ASSIGNMENT, {
@@ -52,5 +56,41 @@ const errorMsg = p.document.querySelector('.error-msg');
 assert.ok(errorMsg.textContent.includes('quota'));
 assert.strictEqual(errorMsg.querySelector('b'), null, 'worker error text is escaped, not parsed as HTML');
 
+// F4: the course crawl needs host access to the Canvas site. permissions.request
+// needs the click's user gesture, so it must run before the handler's first
+// await: it has already been called when click() returns.
+p = await openPanel(CUSTOM_ROOT);
+p.$('audit-course-btn').click();
+assert.deepStrictEqual(p.h.calls.permissionRequests, [{ origins: ['https://canvas.asu.edu/*'] }], 'site permission is requested synchronously inside the click');
+await flush();
+const crawl = p.h.sent.find((m) => m.action === 'CRAWL_AND_AUDIT_COURSE');
+assert.ok(crawl, 'with the site permission granted, the course crawl is sent');
+assert.deepStrictEqual(crawl.payload, { origin: 'https://canvas.asu.edu', courseId: '42' });
+
+// Permission denied: no crawl, and the error card says why.
+p = await openPanel(CUSTOM_ROOT, { onPermissionRequest: () => false });
+p.$('audit-course-btn').click();
+await flush();
+assert.ok(!p.h.sent.some((m) => m.action === 'CRAWL_AND_AUDIT_COURSE'), 'no course crawl without the site permission');
+assert.ok(p.document.querySelector('.error-msg').textContent.includes('https://canvas.asu.edu'), 'the error names the site idstack needs');
+
+// The worker announces an icon click (activeTab now covers the tab): re-read it.
+const injectionsBefore = p.h.calls.executed.length;
+await p.h.dispatch({ action: 'TAB_ACCESS_GRANTED' });
+await flush();
+assert.strictEqual(p.h.calls.executed.length, injectionsBefore + 1, 'TAB_ACCESS_GRANTED re-reads the tab');
+
+// A tab switched to without an icon click: Chrome hides its url and title and
+// the injection fails. The header says how to grant access, and an audit sends
+// the reason along so the worker shows it instead of auditing an empty page.
+p = await openPanel(undefined, { tabs: [{ id: 12, active: true }], onExecuteScript: undefined });
+assert.match(p.$('page-title').textContent, /idstack toolbar icon/, 'an unreadable tab tells the user how to grant access');
+p.$('audit-btn').click();
+await flush();
+const unreadable = p.h.sent.find((m) => m.action === 'RUN_AUDIT');
+assert.ok(unreadable, 'the audit request is still sent, so the worker can explain the refusal');
+assert.strictEqual(unreadable.payload.content, '');
+assert.match(unreadable.payload.emptyReason || '', /toolbar icon/, 'an unreadable tab is sent with the reason it could not be read');
+
 resetGlobals();
 console.log('✅ Side panel state tests passed.');

From 6695795bb546fe156ca7ae16c7b6b5469ce43064 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 18:50:11 -0700
Subject: [PATCH 10/19] fix(extension): read every Modules item, refuse
 student-record pages, read Docs via export

Closes F6, F11 (content side) and F7 (Google Docs).

- Modules pages (including a course home in Modules view, #context_modules)
  now send every .module-item-title, not only the first.
- A URL-string guard refuses Canvas student-record views (gradebook and
  SpeedGrader, grades, People at course and account level, groups,
  discussions, submissions, Inbox) with content '' and an emptyReason.
  Canvas pages no longer fall back to document.body; #rubrics joins the
  content selector. Only numeric /courses/N URLs count as Canvas.
- extractPageContent is async. For Google Docs it reads the doc's
  /export?format=txt with fetch's default credentials mode and a 10 s
  timeout, accepts only text/plain, sets emptyReason on failure, and skips
  published /d/e/ docs.
- test-extractor.mjs: Tests 3, 4, 12, 13 and an await in Test 10.
  Mutations 29a-29i.

Deviations: the spec's "content not 'Student records page'" check for an
empty url is vacuous (the guard always sets content ''), so the test asserts
the title is not 'Student records page' and generic extraction still runs.
Test 13 also asserts the export fetch sets no credentials option. The guard
regex is held in a function-scoped const (studentRecordUrl); 29d anchors on
its if-line.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 extension/content/extractor.js |  57 ++++++++++++++--
 test/mutation-test.sh          | 117 +++++++++++++++++++++++++++++++++
 test/test-extractor.mjs        | 106 ++++++++++++++++++++++++++++-
 3 files changed, 271 insertions(+), 9 deletions(-)

diff --git a/extension/content/extractor.js b/extension/content/extractor.js
index 6365440..8f51e39 100644
--- a/extension/content/extractor.js
+++ b/extension/content/extractor.js
@@ -2,10 +2,10 @@
  * Injected content script to extract course content from Canvas, Google Docs, and web pages.
  */
 function detectPageType(url, document) {
-  if (url.includes('instructure.com') || url.includes('/courses/')) {
+  if (url.includes('instructure.com') || /\/courses\/\d+(?:[/?#]|$)/.test(url)) {
     if (document.querySelector('#assignment_show')) return 'Canvas Assignment';
     if (document.querySelector('#syllabusContainer') || url.includes('/assignments/syllabus')) return 'Canvas Syllabus';
-    if (document.querySelector('#modules') || url.includes('/modules')) return 'Canvas Modules';
+    if (document.querySelector('#context_modules, #modules') || url.includes('/modules')) return 'Canvas Modules';
     if (document.querySelector('#rubrics')) return 'Canvas Rubric';
     return 'Canvas LMS Page';
   }
@@ -14,6 +14,23 @@ function detectPageType(url, document) {
 }
 
 function extractContentFromDOM(document, url = (typeof window !== 'undefined' && window.location ? window.location.href : '')) {
+  // Canvas views that show student records: gradebook and SpeedGrader, grades, People
+  // (course and account level), groups, discussion replies, submissions, Inbox. Checked on
+  // every URL, because Canvas on a custom domain is only detected as Canvas under /courses/N.
+  // Matched on the URL string: url can be '', and new URL('') throws. Function-scoped on
+  // purpose: a top-level const would throw when the file is re-injected into the same world.
+  const studentRecordUrl = /^https?:\/\/[^/?#]+\/(?:courses\/\d+\/(?:gradebook|grades|users|groups|discussion_topics|assignments\/\d+\/submissions)|conversations|groups\/\d+|users\/\d+|accounts\/\d+\/users)(?:[/?#]|$)/;
+  if (studentRecordUrl.test(url)) {
+    return {
+      url,
+      title: 'Student records page',
+      pageType: 'Canvas Student Records',
+      content: '',
+      wordCount: 0,
+      emptyReason: 'idstack does not read Canvas pages that show student records (grades, People, Inbox, discussions, groups, submissions). Consider auditing an assignment, page, syllabus, rubric, or Modules view instead.'
+    };
+  }
+
   const pageType = detectPageType(url, document);
   let title = (document && document.title) || 'Course Document';
   let content = '';
@@ -22,8 +39,17 @@ function extractContentFromDOM(document, url = (typeof window !== 'undefined' &&
     const heading = document.querySelector('#assignment_show .title, .page-title, h1');
     if (heading) title = (heading.innerText || heading.textContent || '').trim();
 
-    const mainBody = document.querySelector('#assignment_show .description.user_content, .show-content.user_content, #syllabusContainer, .module-item-title');
-    content = mainBody ? (mainBody.innerText || mainBody.textContent || '').trim() : (document.body ? (document.body.innerText || document.body.textContent || '').trim() : '');
+    if (pageType === 'Canvas Modules') {
+      // Every item title; querySelector alone returns only the first one.
+      content = Array.from(document.querySelectorAll('.module-item-title'))
+        .map((el) => (el.innerText || el.textContent || '').trim())
+        .filter(Boolean)
+        .join('\n');
+    } else {
+      const mainBody = document.querySelector('#assignment_show .description.user_content, .show-content.user_content, #syllabusContainer, #rubrics');
+      // No document.body fallback on Canvas: an unmatched view can hold names, grades, or posts.
+      content = mainBody ? (mainBody.innerText || mainBody.textContent || '').trim() : '';
+    }
   } else if (pageType === 'Google Doc Syllabus') {
     const kixApp = document.querySelector('.kix-appview-editor');
     content = kixApp ? (kixApp.innerText || kixApp.textContent || '').trim() : (document.body ? (document.body.innerText || document.body.textContent || '').trim() : '');
@@ -42,9 +68,28 @@ function extractContentFromDOM(document, url = (typeof window !== 'undefined' &&
   };
 }
 
-function extractPageContent() {
+// Async, so the injection's completion value is a Promise; Chrome awaits it and the
+// side panel still receives the payload.
+async function extractPageContent() {
   const url = typeof window !== 'undefined' && window.location ? window.location.href : '';
-  return extractContentFromDOM(document, url);
+  const data = extractContentFromDOM(document, url);
+  // Google Docs draws its text on <canvas>, so the editor DOM holds none of it. Read the
+  // plain-text export with the user's own session instead (same origin, no new permission).
+  // Keep fetch's default credentials mode: the export redirects to a host that answers
+  // ACAO: *, which a credentialed request would reject. Published /d/e/ docs are skipped:
+  // their text is in the DOM.
+  const doc = url.match(/^https:\/\/docs\.google\.com\/document\/(?:u\/\d+\/)?d\/(?!e\/)[\w-]+/);
+  if (!doc) return data;
+  try {
+    const res = await fetch(`${doc[0]}/export?format=txt`, { signal: AbortSignal.timeout(10000) });
+    // Signed out, the export answers 200 with an HTML sign-in page.
+    if (!res.ok || !(res.headers.get('content-type') || '').startsWith('text/plain')) throw new Error(String(res.status));
+    const text = (await res.text()).trim();
+    return { ...data, content: text.slice(0, 15000), wordCount: text.split(/\s+/).filter(Boolean).length };
+  } catch (e) {
+    // Offline, timed out, refused, or not plain text.
+    return { ...data, content: '', wordCount: 0, emptyReason: 'idstack could not read the text of this Google Doc. If downloading is turned off for it, consider asking the owner to allow downloads.' };
+  }
 }
 
 // Injected with chrome.scripting.executeScript({ files }): the value of the final
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 5c22325..f6c8298 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -946,6 +946,123 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "panel ignores newly granted tab access" "$WORK/r/test/test-extension.sh"
 
+# 29a-29i. The extractor sent a Modules page's first item title only, read the
+# whole page on any Canvas view it did not recognize (Gradebook, People, Inbox,
+# discussions), treated any /courses/ URL as Canvas, and read Google Docs from
+# the editor DOM, which holds no document text. test-extractor.mjs runs the
+# shipped extractor on each page.
+
+# 29a. a Modules page reads only the first item title -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "Array.from(document.querySelectorAll('.module-item-title'))"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "[document.querySelector('.module-item-title')]", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "Modules page reads only the first item title" "$WORK/r/test/test-extension.sh"
+
+# 29b. a course home in Modules view is not detected -> test-extension must fail.
+# Canvas's modules container is #context_modules, and the course home URL has no /modules.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "'#context_modules, #modules'"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "'#modules'", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "course home in Modules view not detected" "$WORK/r/test/test-extension.sh"
+
+# 29c. an unrecognized Canvas view falls back to the whole page -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "content = mainBody ? (mainBody.innerText || mainBody.textContent || '').trim() : '';"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "content = mainBody ? (mainBody.innerText || mainBody.textContent || '').trim() : (document.body ? (document.body.innerText || document.body.textContent || '').trim() : '');", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "Canvas page falls back to the whole document body" "$WORK/r/test/test-extension.sh"
+
+# 29d. the student-record guard is disabled -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "if (studentRecordUrl.test(url)) {"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "if (false && studentRecordUrl.test(url)) {", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "student-record page guard disabled" "$WORK/r/test/test-extension.sh"
+
+# 29e. custom-domain Canvas course pages are not detected as Canvas -> test-extension
+# must fail. They would go through the generic reader, which reads [role=main].
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = r" || /\/courses\/\d+(?:[/?#]|$)/.test(url)"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "custom-domain Canvas course page not detected as Canvas" "$WORK/r/test/test-extension.sh"
+
+# 29f. any /courses/<slug> site is treated as Canvas again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = r"/\/courses\/\d+(?:[/?#]|$)/.test(url)"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "url.includes('/courses/')", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "non-Canvas /courses/<slug> site treated as Canvas" "$WORK/r/test/test-extension.sh"
+
+# 29g. rubric pages lose their text without the body fallback -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = ", #rubrics'"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "'", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "rubric text lost with the body fallback" "$WORK/r/test/test-extension.sh"
+
+# 29h. Google Docs are read from the editor DOM again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "  if (!doc) return data;\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "  return data;\n", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "Google Docs read from the canvas-rendered DOM" "$WORK/r/test/test-extension.sh"
+
+# 29i. the Docs export accepts any content type -> test-extension must fail. A
+# signed-out export answers 200 with an HTML sign-in page, audited as the document.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = " || !(res.headers.get('content-type') || '').startsWith('text/plain')"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "HTML sign-in page audited as the Google Doc" "$WORK/r/test/test-extension.sh"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-extractor.mjs b/test/test-extractor.mjs
index 134f7cf..a3ecedd 100644
--- a/test/test-extractor.mjs
+++ b/test/test-extractor.mjs
@@ -1,10 +1,10 @@
 import assert from 'node:assert';
 import { readFileSync } from 'node:fs';
 import vm from 'node:vm';
-import { createDocument, installChrome, loadContentScript, resetGlobals } from './extension-harness.mjs';
+import { createDocument, installChrome, installFetch, loadContentScript, resetGlobals } from './extension-harness.mjs';
 
 // The shipped content script: a classic script, loaded exactly as Chrome gets it.
-const { detectPageType, extractContentFromDOM } = loadContentScript('content/extractor.js');
+const { detectPageType, extractContentFromDOM, extractPageContent } = loadContentScript('content/extractor.js');
 const page = (html, url) => ({ url, document: createDocument(html) });
 
 // Test 1: Canvas Assignment fixture
@@ -56,6 +56,7 @@ const canvasModulesHTML = `
       <h1 class="page-title">BIO 200 Modules</h1>
       <div id="modules">
         <span class="module-item-title">Week 1: Cellular Respiration</span>
+        <span class="module-item-title">Lab 1: Measuring Oxygen Uptake</span>
       </div>
     </body>
   </html>
@@ -66,6 +67,13 @@ const extractedModules = extractContentFromDOM(domModules.document, domModules.u
 assert.strictEqual(extractedModules.pageType, 'Canvas Modules');
 assert.strictEqual(extractedModules.title, 'BIO 200 Modules');
 assert.ok(extractedModules.content.includes('Week 1: Cellular Respiration'));
+assert.ok(extractedModules.content.includes('Lab 1: Measuring Oxygen Uptake'), 'Modules must read every item title, not just the first');
+
+// A course home in Modules view: no /modules in the URL, and Canvas's container is #context_modules.
+const domCourseHome = page(`<html><head><title>BIO 200</title></head><body><div id="context_modules"><span class="module-item-title">Week 1: Cellular Respiration</span><span class="module-item-title">Lab 1: Measuring Oxygen Uptake</span></div></body></html>`, 'https://canvas.instructure.com/courses/101');
+const extractedCourseHome = extractContentFromDOM(domCourseHome.document, domCourseHome.url);
+assert.strictEqual(extractedCourseHome.pageType, 'Canvas Modules', 'course home in Modules view is a Modules page');
+assert.ok(extractedCourseHome.content.includes('Lab 1: Measuring Oxygen Uptake'), 'course home Modules view reads every item title');
 
 // Test 4: Canvas Rubrics fixture
 const canvasRubricsHTML = `
@@ -84,6 +92,7 @@ const extractedRubrics = extractContentFromDOM(domRubrics.document, domRubrics.u
 
 assert.strictEqual(extractedRubrics.pageType, 'Canvas Rubric');
 assert.strictEqual(extractedRubrics.title, 'Grading Criteria');
+assert.ok(extractedRubrics.content.includes('Criteria 1'), 'rubric text must be read without a document.body fallback');
 
 // Test 5: Canvas Generic LMS Page
 const canvasGenericHTML = `
@@ -167,11 +176,102 @@ const isolatedWorld = vm.createContext({
   window: { location: { href: domAssignment.url } }
 });
 for (const run of ['first', 'second']) {
-  const injected = vm.runInContext(extractorSrc, isolatedWorld, { filename: extractorUrl.pathname });
+  // extractPageContent is async; Chrome awaits a Promise completion value.
+  const injected = await vm.runInContext(extractorSrc, isolatedWorld, { filename: extractorUrl.pathname });
   assert.ok(injected && injected.pageType === 'Canvas Assignment', `${run} injection must evaluate to the extraction payload`);
   assert.strictEqual(injected.title, 'Enzymes Lab Analysis');
 }
 assert.strictEqual(h.listeners.message.length, 0, 'extractor must not register a persistent runtime.onMessage listener');
 resetGlobals();
 
+// Test 12: student-record pages are refused, and Canvas never falls back to the whole page (F11)
+const studentRecordHTML = `
+  <html>
+    <head><title>Jane Doe: BIO 200</title></head>
+    <body>
+      <div id="content" role="main">
+        <h1>Jane Doe</h1>
+        <p>Jane Doe jane.doe@example.edu Section 01 Final grade 72%</p>
+      </div>
+    </body>
+  </html>
+`;
+for (const url of [
+  'https://canvas.instructure.com/courses/101/gradebook',
+  'https://canvas.instructure.com/courses/101/gradebook/speed_grader?assignment_id=5',
+  'https://canvas.instructure.com/courses/101/grades/7',
+  'https://canvas.instructure.com/courses/101/users/7',
+  'https://canvas.instructure.com/courses/101/groups',
+  'https://canvas.instructure.com/courses/101/discussion_topics/9',
+  'https://canvas.instructure.com/courses/101/assignments/5/submissions/7',
+  'https://canvas.instructure.com/conversations',
+  // Canvas on a custom domain outside /courses/N is not detected as Canvas; the guard still applies.
+  'https://canvas.example.edu/conversations',
+  'https://canvas.example.edu/groups/12',
+  'https://canvas.example.edu/users/7',
+  'https://canvas.example.edu/accounts/1/users'
+]) {
+  const r = extractContentFromDOM(createDocument(studentRecordHTML), url);
+  assert.strictEqual(r.content, '', `${url}: student-record page must not be read`);
+  assert.ok(r.emptyReason, `${url}: must say why nothing was read`);
+  assert.ok(!JSON.stringify(r).includes('Jane Doe'), `${url}: student name leaked into the payload`);
+}
+
+// An unlisted Canvas view gets '' rather than the whole page.
+const quizHistoryUrl = 'https://canvas.instructure.com/courses/101/quizzes/5/history?quiz_submission_id=3';
+assert.strictEqual(extractContentFromDOM(createDocument(studentRecordHTML), quizHistoryUrl).content, '', 'Canvas must not fall back to document.body');
+
+// Custom-domain Canvas course pages are Canvas (no [role=main] or body read).
+const customCourseUrl = 'https://canvas.example.edu/courses/101/quizzes/5/history?quiz_submission_id=3';
+const extractedCustomCourse = extractContentFromDOM(createDocument(studentRecordHTML), customCourseUrl);
+assert.ok(extractedCustomCourse.pageType.startsWith('Canvas'), 'custom-domain /courses/N URLs are Canvas');
+assert.strictEqual(extractedCustomCourse.content, '', 'custom-domain Canvas must not fall back to the whole page');
+
+// Non-Canvas /courses/<slug> sites keep generic extraction.
+const ocwUrl = 'https://ocw.mit.edu/courses/6-006-introduction-to-algorithms-spring-2020/pages/syllabus/';
+const extractedOcw = extractContentFromDOM(createDocument(webHTML), ocwUrl);
+assert.strictEqual(extractedOcw.pageType, 'Web Syllabus / Course Page', 'non-numeric /courses/ URLs are not Canvas');
+assert.ok(extractedOcw.content.includes('Machine Learning'));
+
+// No URL at all (url defaults to '' outside a page): the guard must not throw
+// (new URL('') does) and must not refuse the page.
+let extractedNoUrl;
+assert.doesNotThrow(() => { extractedNoUrl = extractContentFromDOM(createDocument(webHTML), ''); }, 'an empty url must not throw');
+assert.notStrictEqual(extractedNoUrl.title, 'Student records page', 'an empty url is not a student-record page');
+assert.ok(extractedNoUrl.content.includes('Machine Learning'), 'an empty url falls through to generic extraction');
+
+// Test 13: Google Docs text comes from the doc's plain-text export, never the editor
+// DOM, which holds no document text (F7). extractPageContent reads window, document and fetch.
+const docsEditorHTML = `<html><head><title>BIO 200 Syllabus - Google Docs</title></head><body><div id="docs-menubar">File Edit View Insert Format Tools Extensions Help</div><div class="kix-appview-editor">Turn on screen reader support. To enable screen reader support, press Ctrl+Alt+Z</div></body></html>`;
+const docUrl = 'https://docs.google.com/document/u/1/d/1AbC_dEf-GhIjKlMnOpQrStUvWxYz0123456789abcd/edit?tab=t.0';
+globalThis.window = { location: { href: docUrl } };
+globalThis.document = createDocument(docsEditorHTML);
+const docFetches = installFetch(() => new Response('BIO 200 Syllabus\nLearning objectives: analyze enzyme kinetics.', { headers: { 'content-type': 'text/plain; charset=utf-8' } }));
+const exported = await extractPageContent();
+assert.deepStrictEqual(docFetches.map((c) => c.url), ['https://docs.google.com/document/u/1/d/1AbC_dEf-GhIjKlMnOpQrStUvWxYz0123456789abcd/export?format=txt'], 'Docs text must be fetched from the plain-text export');
+assert.strictEqual(docFetches[0].init.credentials, undefined, "the export fetch must keep fetch's default credentials mode");
+assert.ok(exported.content.startsWith('BIO 200 Syllabus'), 'Docs text must come from the export, BOM stripped');
+assert.strictEqual(exported.wordCount, 8);
+assert.strictEqual(exported.emptyReason, undefined);
+
+installFetch(() => new Response('<html></html>', { status: 403, headers: { 'content-type': 'text/html; charset=utf-8' } }));
+const refused = await extractPageContent();
+assert.strictEqual(refused.content, '', 'a refused export must not fall back to the editor DOM');
+assert.ok(refused.emptyReason, 'a refused export must say why nothing was read');
+
+// Signed out, the export answers 200 with an HTML sign-in page.
+installFetch(() => new Response('<html><body>Sign in to continue to Docs</body></html>', { headers: { 'content-type': 'text/html; charset=utf-8' } }));
+const signIn = await extractPageContent();
+assert.strictEqual(signIn.content, '', 'an HTML sign-in page must not be audited as the document');
+assert.ok(signIn.emptyReason, 'an HTML export answer must say why nothing was read');
+
+// Published /d/e/ docs render their text in the DOM and have no export.
+globalThis.window = { location: { href: 'https://docs.google.com/document/d/e/2PACX-1vTabc/pub' } };
+globalThis.document = createDocument('<html><head><title>Syllabus</title></head><body><div id="contents"><p>Week 1 readings.</p></div></body></html>');
+const pubFetches = installFetch(() => { throw new Error('published docs must not be fetched'); });
+const published = await extractPageContent();
+assert.strictEqual(pubFetches.length, 0, 'published docs are read from the DOM, not fetched');
+assert.ok(published.content.includes('Week 1 readings'));
+resetGlobals();
+
 console.log('✅ Task 3 extractor tests passed.');

From 4f913f64e67f94bb48cbf0dbc81784d3e7a6432b Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 19:41:19 -0700
Subject: [PATCH 11/19] fix(extension): label results with the audited page;
 clear stale state on error; Retry/votes/clipboard; defensive renderer

Closes review F8, F14 and the renderer side of F9.

- F8: a page audit is labelled with the payload that was sent (const sent),
  not the tab active when the reply lands; a course audit is labelled
  origin/courses/id with response.courseData.title, matching the worker's
  auditHistory entry. refreshActiveTab takes a sequence number and drops
  a stale refresh after tabs.query, after executeScript and before the
  fallback, so a slow tab cannot overwrite a newer one.
- F14: renderError clears activeAuditItem and hides the result action bar
  (renderResults shows it again); Retry re-clicks the button that started
  the failed audit (D12 = A; set synchronously, before the course
  handler's permissions.request), unless a tab switch has hidden that
  button (no course root), so Retry never crawls, or asks for access to,
  a non-course page; a vote removes only the vote buttons, keeping Audit
  Another Page; both copy buttons go through copyWithFeedback, which
  reports "Copy failed" and never rejects.
- F9 (renderer): non-array findings render as none, null and non-object
  entries are dropped, and a non-string tier is stringified.

Tests: new test/test-sidepanel-state.mjs (eleven panel scenarios on the
shipped sidepanel.js; ten fail on the previous tree, the eleventh guards
the hidden-button check on Retry; the course Retry scenario counts the
crawls sent, so a Retry that sends nothing fails) and a Test 9 block in
test-renderer-helper.mjs. Harness: FakeElement.remove(); click() returns
a promise and collects listener errors in clickErrors, and an exit hook
fails any suite that leaves clickErrors non-empty; tabs may be a
function. Mutations 30a-30l (guarded 86 on Python 3.9).

Deviations:
- test-sidepanel-state.mjs reports every failing scenario and then asserts
  none failed, instead of stopping at the first one; it still ends with
  assert.deepStrictEqual(clickErrors, []) and process.exit(0).
- New fixtures cite [Alignment-1] at T5 and [CogLoad-1] instead of U7's
  T1/T2 and [CogLoad-2], so no new tier mismatch with references.md.
- Course scenarios flush after the click: S9's handler awaits
  permissions.request before it sends (U7 predates S9).
- Retry skips a hidden Audit Entire Course button. U7 accepted that
  residual as "an error card", but since S9 the click raises a host
  permission prompt for whatever https site is active. No counted
  mutation for the guard, to keep the pinned count at 86; removing it
  fails the new scenario.
- The harness exit hook is not in the spec. Since click() catches
  listener errors, suites that never read clickErrors (test-sidepanel.mjs)
  would otherwise pass a rejecting handler that used to crash them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 extension/sidepanel/renderer-helper.js |   7 +-
 extension/sidepanel/sidepanel.js       |  90 ++++++++----
 test/extension-harness.mjs             |  23 ++-
 test/mutation-test.sh                  | 179 +++++++++++++++++++++++
 test/test-renderer-helper.mjs          |   8 +
 test/test-sidepanel-state.mjs          | 195 +++++++++++++++++++++++++
 6 files changed, 466 insertions(+), 36 deletions(-)
 create mode 100644 test/test-sidepanel-state.mjs

diff --git a/extension/sidepanel/renderer-helper.js b/extension/sidepanel/renderer-helper.js
index 0c3a85d..42528a9 100644
--- a/extension/sidepanel/renderer-helper.js
+++ b/extension/sidepanel/renderer-helper.js
@@ -15,12 +15,13 @@ export function escapeHtml(str) {
 export function renderAuditHTML(data) {
   if (!data) return '';
   const summary = data.summary || { bloomsLevel: 'N/A', alignmentScore: 'N/A', keyTakeaway: '' };
-  const findings = data.findings || [];
+  const findings = Array.isArray(data.findings) ? data.findings.filter((f) => f && typeof f === 'object') : [];
   const improvedDraft = data.improvedDraft || { title: 'Improved Draft', content: '' };
 
   const findingsHTML = findings.map(f => {
-    const tier = escapeHtml(f.tier || 'T1');
-    const tierClass = escapeHtml((f.tier || 'T1').toLowerCase());
+    const tierLabel = String(f.tier || 'T1');
+    const tier = escapeHtml(tierLabel);
+    const tierClass = escapeHtml(tierLabel.toLowerCase());
     const severity = escapeHtml(f.severity || 'info');
     const citation = escapeHtml(f.citation || '');
     const observation = escapeHtml(f.observation || '');
diff --git a/extension/sidepanel/sidepanel.js b/extension/sidepanel/sidepanel.js
index 2f38b92..d8a4579 100644
--- a/extension/sidepanel/sidepanel.js
+++ b/extension/sidepanel/sidepanel.js
@@ -7,6 +7,8 @@ let activePayload = null;
 let activeCourseContext = null;
 let activeAuditResult = null;
 let activeAuditItem = null;
+let lastAuditBtn = null;
+let refreshSeq = 0;
 
 function sanitizeFilename(name) {
   return String(name || 'material')
@@ -27,6 +29,19 @@ function downloadMarkdownFile(filename, content) {
   URL.revokeObjectURL(url);
 }
 
+// A missing navigator.clipboard throws inside the try, so it is reported too.
+async function copyWithFeedback(btn, text, idleLabel) {
+  try {
+    await navigator.clipboard.writeText(text);
+    btn.textContent = '✓ Copied!';
+  } catch (e) {
+    btn.textContent = 'Copy failed';
+  }
+  setTimeout(() => {
+    btn.textContent = idleLabel;
+  }, 2000);
+}
+
 export async function updateDossierBadge() {
   const countEl = document.getElementById('dossier-count');
   if (!countEl) return;
@@ -63,10 +78,12 @@ export async function updateDossierUI() {
 
 export async function refreshActiveTab() {
   if (typeof chrome === 'undefined' || !chrome.tabs || !chrome.tabs.query) return;
+  // Tab events can fire back to back; only the newest refresh may write state.
+  const seq = ++refreshSeq;
 
   try {
     const [tab] = await chrome.tabs.query({ active: true, currentWindow: true });
-    if (!tab || !tab.id) return;
+    if (seq !== refreshSeq || !tab || !tab.id) return;
 
     const url = tab.url || '';
     activeCourseContext = detectCourseContext(url);
@@ -84,6 +101,7 @@ export async function refreshActiveTab() {
         target: { tabId: tab.id },
         files: ['content/extractor.js']
       });
+      if (seq !== refreshSeq) return;
       const response = injection && injection.result;
       if (response) {
         activePayload = response;
@@ -98,6 +116,7 @@ export async function refreshActiveTab() {
       // restricted page such as chrome:// or the Chrome Web Store.
     }
 
+    if (seq !== refreshSeq) return;
     // Fallback payload if extraction fails. Without access Chrome hides tab.title too.
     const pageTypeTag = document.getElementById('page-type-tag');
     const pageTitle = document.getElementById('page-title');
@@ -122,13 +141,15 @@ export function showState(stateName) {
   if (target) target.classList.add('active');
 }
 
-export function renderResults(data) {
+// source: the page (or course) the request was sent for. The active tab may
+// have changed while the audit ran.
+export function renderResults(data, source) {
   activeAuditResult = data;
   activeAuditItem = {
-    id: activePayload?.url || `item-${Date.now()}`,
-    title: activePayload?.title || 'Course Material',
-    pageType: activePayload?.pageType || 'Web Page',
-    url: activePayload?.url || '',
+    id: source?.url || `item-${Date.now()}`,
+    title: source?.title || 'Course Material',
+    pageType: source?.pageType || 'Web Page',
+    url: source?.url || '',
     result: data,
     timestamp: new Date().toISOString()
   };
@@ -137,6 +158,9 @@ export function renderResults(data) {
   if (addToDossierBtn) {
     addToDossierBtn.textContent = '➕ Add to Dossier';
   }
+  // renderError hides the bar; '' restores the stylesheet's display.
+  const actionsBar = document.querySelector('.result-actions-bar');
+  if (actionsBar) actionsBar.style.display = '';
 
   const container = document.getElementById('results-container');
   if (!container) return;
@@ -147,13 +171,7 @@ export function renderResults(data) {
   if (copyBtn) {
     copyBtn.addEventListener('click', () => {
       const contentToCopy = (data && data.improvedDraft && data.improvedDraft.content) || '';
-      if (navigator.clipboard && navigator.clipboard.writeText) {
-        navigator.clipboard.writeText(contentToCopy);
-      }
-      copyBtn.textContent = '✓ Copied!';
-      setTimeout(() => {
-        copyBtn.textContent = '📋 Copy to Clipboard';
-      }, 2000);
+      copyWithFeedback(copyBtn, contentToCopy, '📋 Copy to Clipboard');
     });
   }
 
@@ -166,11 +184,13 @@ export function renderResults(data) {
   }
 
   document.querySelectorAll('.feedback-btn').forEach(btn => {
-    btn.addEventListener('click', (e) => {
-      const parent = e.target.parentElement;
-      if (parent) {
-        parent.innerHTML = '<em>Thank you for your feedback!</em>';
-      }
+    btn.addEventListener('click', () => {
+      const row = btn.parentElement;
+      if (!row) return;
+      // Replace only the vote controls; the row also holds #re-audit-btn.
+      row.querySelectorAll('.feedback-btn').forEach((b) => b.remove());
+      const prompt = row.querySelector('span');
+      if (prompt) prompt.innerHTML = '<em>Thank you for your feedback!</em>';
     });
   });
 
@@ -178,6 +198,11 @@ export function renderResults(data) {
 }
 
 export function renderError(errorMessage) {
+  // Clear the last result so Add to Dossier / Export .md cannot act on it.
+  activeAuditItem = null;
+  const actionsBar = document.querySelector('.result-actions-bar');
+  if (actionsBar) actionsBar.style.display = 'none';
+
   const container = document.getElementById('results-container');
   if (!container) return;
 
@@ -208,8 +233,10 @@ export function renderError(errorMessage) {
   if (retryBtn) {
     retryBtn.addEventListener('click', () => {
       showState('ready');
-      const btn = document.getElementById('audit-btn');
-      if (btn) btn.click();
+      // A tab switch can hide Audit Entire Course; re-clicking it would crawl,
+      // and ask for access to, whatever site is active now.
+      if (lastAuditBtn && lastAuditBtn.style.display === 'none') return;
+      if (lastAuditBtn) lastAuditBtn.click();
     });
   }
 
@@ -252,7 +279,10 @@ if (exportSingleMdBtn) {
 const auditBtn = document.getElementById('audit-btn');
 if (auditBtn) {
   auditBtn.addEventListener('click', async () => {
+    lastAuditBtn = auditBtn;
     if (!activePayload) await refreshActiveTab();
+    // Label the result with the page sent, not the tab active when the reply lands.
+    const sent = activePayload;
 
     const progressCard = document.getElementById('crawl-progress-card');
     if (progressCard) progressCard.style.display = 'none';
@@ -264,13 +294,13 @@ if (auditBtn) {
 
     if (typeof chrome !== 'undefined' && chrome.runtime && chrome.runtime.sendMessage) {
       try {
-        chrome.runtime.sendMessage({ action: 'RUN_AUDIT', payload: activePayload }, (response) => {
+        chrome.runtime.sendMessage({ action: 'RUN_AUDIT', payload: sent }, (response) => {
           if (chrome.runtime.lastError) {
             renderError(chrome.runtime.lastError.message);
             return;
           }
           if (response && response.success) {
-            renderResults(response.data);
+            renderResults(response.data, sent);
           } else {
             renderError(response?.error || 'Unknown error occurred during audit.');
           }
@@ -286,6 +316,7 @@ if (auditBtn) {
 const auditCourseBtn = document.getElementById('audit-course-btn');
 if (auditCourseBtn) {
   auditCourseBtn.addEventListener('click', async () => {
+    lastAuditBtn = auditCourseBtn;
     // Shown only after refreshActiveTab() found a course root, so the context is set.
     const { origin, courseId } = activeCourseContext || {};
     // permissions.request needs this click's user gesture, so it comes before any other
@@ -338,7 +369,12 @@ if (auditCourseBtn) {
             return;
           }
           if (response && response.success) {
-            renderResults(response.data);
+            // Same label as the worker's auditHistory entry for this course.
+            renderResults(response.data, {
+              url: `${origin}/courses/${courseId}`,
+              title: response.courseData?.title || 'Canvas Course',
+              pageType: 'Canvas Course (Full Audit)'
+            });
           } else {
             renderError(response?.error || 'Unknown error occurred during course audit.');
           }
@@ -396,13 +432,7 @@ if (copyDossierMdBtn) {
       ? `Course ${activeCourseContext.courseId}`
       : (activePayload?.title || 'Canvas Course');
     const md = compileDossierToMarkdown(dossier, courseTitle);
-    if (navigator.clipboard && navigator.clipboard.writeText) {
-      await navigator.clipboard.writeText(md);
-    }
-    copyDossierMdBtn.textContent = '✓ Copied!';
-    setTimeout(() => {
-      copyDossierMdBtn.textContent = '📋 Copy Markdown';
-    }, 2000);
+    await copyWithFeedback(copyDossierMdBtn, md, '📋 Copy Markdown');
   });
 }
 
diff --git a/test/extension-harness.mjs b/test/extension-harness.mjs
index 068f873..b077b61 100644
--- a/test/extension-harness.mjs
+++ b/test/extension-harness.mjs
@@ -71,7 +71,8 @@ function storageArea(data) {
 
 // Installs globalThis.chrome. Options:
 //   sync, local          initial chrome.storage contents
-//   tabs                 what chrome.tabs.query resolves to
+//   tabs                 what chrome.tabs.query resolves to, or a function
+//                        returning it (read on every query, so a test can switch tabs)
 //   onRuntimeMessage     (message) => response for chrome.runtime.sendMessage
 //   onExecuteScript      (injection) => InjectionResult[] for
 //                        chrome.scripting.executeScript; omitted = reject like
@@ -106,7 +107,7 @@ export function installChrome({ sync = {}, local = {}, tabs = [], onRuntimeMessa
     },
     storage: { sync: storageArea(storage.sync), local: storageArea(storage.local) },
     tabs: {
-      query: async () => tabs,
+      query: async () => (typeof tabs === 'function' ? tabs() : tabs),
       onActivated: { addListener: (fn) => listeners.tabActivated.push(fn) },
       onUpdated: { addListener: (fn) => listeners.tabUpdated.push(fn) }
     },
@@ -174,6 +175,17 @@ export function jsonResponse(body, init = {}) {
 // (querySelector) rather than on decoded text.
 const VOID_TAGS = new Set(['meta', 'link', 'img', 'br', 'hr', 'input']);
 
+// What click listeners threw or rejected with. Chrome reports these as uncaught
+// errors, so a test asserts this stays empty rather than letting one crash it.
+export const clickErrors = [];
+// A suite that never inspects clickErrors still fails on one.
+process.on('exit', () => {
+  if (clickErrors.length) {
+    console.error('A click handler threw or rejected:', clickErrors);
+    process.exitCode = 1;
+  }
+});
+
 class FakeElement {
   constructor(tagName, attrs = {}) {
     this.tagName = tagName.toLowerCase();
@@ -209,10 +221,15 @@ class FakeElement {
   }
   appendChild(child) { child.parentElement = this; this.children.push(child); return child; }
   removeChild(child) { this.children = this.children.filter((c) => c !== child); return child; }
+  remove() { if (this.parentElement) this.parentElement.removeChild(this); }
   addEventListener(type, fn) { (this.listeners[type] ||= []).push(fn); }
+  // Each listener runs synchronously up to its first await, as in Chrome. The
+  // returned promise settles once every (async) listener has finished.
   click() {
     const event = { type: 'click', target: this, currentTarget: this, stopPropagation() {}, preventDefault() {} };
-    for (const fn of this.listeners.click || []) fn(event);
+    return Promise.all((this.listeners.click || []).map(async (fn) => {
+      try { await fn(event); } catch (e) { clickErrors.push(e); }
+    }));
   }
   _descendants() {
     const out = [];
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index f6c8298..e4cbef0 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -1063,6 +1063,185 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "HTML sign-in page audited as the Google Doc" "$WORK/r/test/test-extension.sh"
 
+# 30a-30l. The side panel labelled a result with whatever tab was active when
+# the reply landed, let a slow tab refresh overwrite a newer one, left the last
+# result behind Add to Dossier after an error, retried the single-page audit
+# whatever had failed, wiped Audit Another Page on a vote, and said "Copied!"
+# when the clipboard write failed. The renderer threw on malformed findings,
+# inside the sendMessage callback, so the spinner stayed up.
+# test-sidepanel-state.mjs drives the shipped sidepanel.js through each case.
+
+# 30a. a page audit is labelled with the tab active when the reply lands ->
+# test-sidepanel-state must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "renderResults(response.data, sent);"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "renderResults(response.data, activePayload);", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "page audit labelled with the tab active when the reply lands" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30b. a course audit is labelled with the current page, not the course the
+# worker crawled -> test-sidepanel-state must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = ("renderResults(response.data, {\n"
+       "              url: `${origin}/courses/${courseId}`,\n"
+       "              title: response.courseData?.title || 'Canvas Course',\n"
+       "              pageType: 'Canvas Course (Full Audit)'\n"
+       "            });")
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "renderResults(response.data, activePayload);", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "course audit label ignores the crawled course" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30c. every refresh passes the sequence check -> test-sidepanel-state must
+# fail. A slow injection for a tab the user already left overwrites the newer
+# tab's title and payload, and the next audit sends the wrong page.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "const seq = ++refreshSeq;"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "const seq = refreshSeq;", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "stale tab refresh overwrites a newer tab" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30d. an error leaves the previous result actionable -> test-sidepanel-state
+# must fail. Add to Dossier would save the last success under the failed page.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "\n  activeAuditItem = null;\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "\n", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "error leaves the previous result actionable" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30e. the action bar hidden by an error never comes back -> test-sidepanel-state must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "  if (actionsBar) actionsBar.style.display = '';\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "action bar never returns after an error" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30f. Copy to Clipboard says "Copied!" whether or not the write worked ->
+# test-sidepanel-state must fail. The .catch keeps the failure on the label.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "copyWithFeedback(copyBtn, contentToCopy, '📋 Copy to Clipboard');"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "navigator.clipboard.writeText(contentToCopy).catch(() => {}); copyBtn.textContent = '✓ Copied!';", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "copy button claims success on a rejected write" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30g. Copy Markdown lets a rejected write escape the click handler ->
+# test-sidepanel-state must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "await copyWithFeedback(copyDossierMdBtn, md, '📋 Copy Markdown');"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "await navigator.clipboard.writeText(md); copyDossierMdBtn.textContent = '✓ Copied!';", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "dossier copy leaks an unhandled rejection" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30h. Retry always runs the single-page audit -> test-sidepanel-state must
+# fail. A failed course audit was retried as an audit of the current page.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "if (lastAuditBtn) lastAuditBtn.click();"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "document.getElementById('audit-btn').click();", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "Retry always runs the single-page audit" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30m. Retry clicks the hidden course button after a switch to a non-course tab
+# -> test-sidepanel-state must fail. It would crawl, and ask for access to,
+# whatever site is active now.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "      if (lastAuditBtn && lastAuditBtn.style.display === 'none') return;\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "Retry clicks the hidden course button" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30i. a feedback vote rewrites the whole row -> test-sidepanel-state must fail.
+# The row also holds Audit Another Page, the only way back to the ready state.
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "if (prompt) prompt.innerHTML = '<em>Thank you for your feedback!</em>';"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "row.innerHTML = '<em>Thank you for your feedback!</em>';", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "feedback vote wipes Audit Another Page" node "$WORK/r/test/test-sidepanel-state.mjs"
+
+# 30j. the renderer trusts a non-array findings value -> test-renderer-helper must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/renderer-helper.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "Array.isArray(data.findings) ? data.findings.filter((f) => f && typeof f === 'object') : []"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "data.findings || []", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "renderer trusts non-array findings" node "$WORK/r/test/test-renderer-helper.mjs"
+
+# 30k. the renderer keeps null and non-object findings -> test-renderer-helper must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/renderer-helper.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = ".filter((f) => f && typeof f === 'object')"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "renderer crashes on a null finding entry" node "$WORK/r/test/test-renderer-helper.mjs"
+
+# 30l. the renderer calls toLowerCase on a non-string tier -> test-renderer-helper must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/renderer-helper.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "String(f.tier || 'T1')"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "(f.tier || 'T1')", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "renderer calls toLowerCase on a non-string tier" node "$WORK/r/test/test-renderer-helper.mjs"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-renderer-helper.mjs b/test/test-renderer-helper.mjs
index 597ff5e..7d95ac8 100644
--- a/test/test-renderer-helper.mjs
+++ b/test/test-renderer-helper.mjs
@@ -174,6 +174,14 @@ assert.ok(!escapedDossierHtml.includes('<script>'), 'Must escape script tags in
 assert.ok(!escapedDossierHtml.includes('<img src=x>'), 'Must escape img tags in dossier page type');
 assert.ok(escapedDossierHtml.includes('&lt;script&gt;alert(1)&lt;/script&gt;'), 'Must properly escape characters in dossier title');
 
+// Test 9: malformed model JSON renders instead of throwing (F9). The panel
+// renders inside a runtime.sendMessage callback, so a throw leaves the spinner up.
+assert.ok(renderAuditHTML({ findings: { 0: { tier: 'T1' } } }).includes('Evidence-Based Findings (0)'), 'non-array findings render as none');
+const junk = renderAuditHTML({ findings: [null, 'oops', { tier: 'T5', citation: '[Alignment-1]' }] });
+assert.ok(junk.includes('Evidence-Based Findings (1)'), 'null and non-object findings are dropped');
+assert.ok(junk.includes('[Alignment-1]'), 'a valid finding next to junk still renders');
+assert.ok(renderAuditHTML({ findings: [{ tier: 1, citation: '[CogLoad-1]' }] }).includes('tier-badge tier-1'), 'a non-string tier is stringified');
+
 console.log('✅ Side panel renderer, escaping, course matrix & dossier tests passed.');
 
 
diff --git a/test/test-sidepanel-state.mjs b/test/test-sidepanel-state.mjs
new file mode 100644
index 0000000..994de25
--- /dev/null
+++ b/test/test-sidepanel-state.mjs
@@ -0,0 +1,195 @@
+import assert from 'node:assert';
+import { installChrome, installDocument, importFresh, flush, resetGlobals, clickErrors } from './extension-harness.mjs';
+
+// Side panel state across tab switches, errors and clipboard failures (review
+// F8, F14 and the panel side of F9). Each scenario loads the SHIPPED
+// sidepanel.js against the shipped index.html and a stubbed chrome whose
+// worker replies arrive only when the scenario sends them.
+
+const RESULT = {
+  summary: { bloomsLevel: 'Apply', alignmentScore: 'Strong', keyTakeaway: 'k' },
+  findings: [{ severity: 'info', tier: 'T5', citation: '[Alignment-1]', observation: 'o', evidence: 'e', recommendation: 'r' }],
+  improvedDraft: { title: 'Draft', content: 'draft body' }
+};
+const page = (title, url, pageType = 'Canvas Assignment') => ({ url, title, pageType, content: `body of ${title}` });
+const A = page('Assignment A', 'https://x.instructure.com/courses/1/assignments/10');
+const B = page('Assignment B', 'https://x.instructure.com/courses/1/assignments/20');
+const C = page('Assignment C', 'https://x.instructure.com/courses/1/assignments/30');
+const rejectingClipboard = { writeText: () => Promise.reject(new Error('Document is not focused.')) };
+
+// payloads: tabId -> the extractor's result for that tab, or a function
+// returning a promise for it (so the scenario decides when that injection settles).
+async function loadPanel({ tab, payloads, clipboard = { writeText: async () => {} } }) {
+  let currentTab = tab;
+  const pending = []; // sendResponse of each message the worker has not answered yet
+  const document = installDocument();
+  const h = installChrome({
+    tabs: () => [currentTab],
+    onExecuteScript: async ({ target }) => {
+      const p = payloads[target.tabId];
+      return [{ frameId: 0, result: await (typeof p === 'function' ? p() : p) }];
+    },
+    onRuntimeMessage: () => new Promise((resolve) => pending.push(resolve))
+  });
+  // Node 21+ defines globalThis.navigator as a getter; assigning to it throws in a module.
+  Object.defineProperty(globalThis, 'navigator', { value: { clipboard }, configurable: true, writable: true });
+  await importFresh('sidepanel/sidepanel.js');
+  await flush();
+  return {
+    h,
+    document,
+    $: (id) => document.getElementById(id),
+    lastMessage: () => h.sent[h.sent.length - 1],
+    // The worker answers the most recent message.
+    reply: async (response) => { pending.pop()(response); await flush(); },
+    switchTab: async (next) => {
+      currentTab = next;
+      h.listeners.tabActivated.forEach((fn) => fn({ tabId: next.id }));
+      await flush();
+    }
+  };
+}
+
+const scenarios = {
+  async 'result is labelled with the page that was sent (F8)'() {
+    const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A, 2: B } });
+    await p.$('audit-btn').click();
+    await p.switchTab({ id: 2, url: B.url });
+    await p.reply({ success: true, data: RESULT });
+    await p.$('add-to-dossier-btn').click();
+    const [item] = p.h.storage.local.activeDossier;
+    assert.strictEqual(item.title, A.title);
+    assert.strictEqual(item.url, A.url);
+  },
+
+  async 'course audit is labelled from response.courseData (F8)'() {
+    const url = 'https://x.instructure.com/courses/123/modules';
+    const p = await loadPanel({ tab: { id: 1, url }, payloads: { 1: page('Course Modules', url, 'Canvas Modules') } });
+    await p.$('audit-course-btn').click();
+    await flush();
+    await p.reply({ success: true, data: RESULT, courseData: { title: 'BIO 101: Cell Biology' } });
+    await p.$('add-to-dossier-btn').click();
+    const [item] = p.h.storage.local.activeDossier;
+    assert.deepStrictEqual([item.title, item.pageType, item.url],
+      ['BIO 101: Cell Biology', 'Canvas Course (Full Audit)', 'https://x.instructure.com/courses/123']);
+  },
+
+  async 'a slow extraction reply for an old tab is dropped (F8)'() {
+    let releaseB;
+    const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A, 2: () => new Promise((r) => { releaseB = () => r(B); }), 3: C } });
+    await p.switchTab({ id: 2, url: B.url });
+    await p.switchTab({ id: 3, url: C.url });
+    releaseB();
+    await flush();
+    assert.strictEqual(p.$('page-title').textContent, C.title);
+    await p.$('audit-btn').click();
+    assert.strictEqual(p.lastMessage().payload.title, C.title);
+  },
+
+  async 'a slow extraction failure for an old tab does not write its fallback (F8)'() {
+    let failB;
+    const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A, 2: () => new Promise((_, j) => { failB = () => j(new Error('Cannot access contents of the page.')); }), 3: C } });
+    await p.switchTab({ id: 2, url: B.url, title: 'Tab B' });
+    await p.switchTab({ id: 3, url: C.url });
+    failB();
+    await flush();
+    assert.strictEqual(p.$('page-title').textContent, C.title);
+  },
+
+  async 'an error clears the previous result and hides the action bar until the next success (F14)'() {
+    const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A } });
+    await p.$('audit-btn').click();
+    await p.reply({ success: true, data: RESULT });
+    await p.$('re-audit-btn').click();
+    await flush();
+    await p.$('audit-btn').click();
+    await p.reply({ success: false, error: 'AI API error (500)' });
+    const bar = p.document.querySelector('.result-actions-bar');
+    assert.strictEqual(bar.style.display, 'none');
+    await p.$('add-to-dossier-btn').click();
+    assert.strictEqual((p.h.storage.local.activeDossier || []).length, 0, 'Add to Dossier must not save the previous result');
+    await p.$('error-retry-btn').click();
+    await flush();
+    await p.reply({ success: true, data: RESULT });
+    assert.notStrictEqual(bar.style.display, 'none', 'action bar returns on the next success');
+  },
+
+  async 'Retry repeats the action that failed (F14)'() {
+    const url = 'https://x.instructure.com/courses/123';
+    const p = await loadPanel({ tab: { id: 1, url }, payloads: { 1: page('Home', url, 'Canvas LMS Page') } });
+    await p.$('audit-course-btn').click();
+    await flush();
+    await p.reply({ success: false, error: 'Failed to fetch Canvas course info (401)' });
+    await p.$('error-retry-btn').click();
+    await flush();
+    assert.strictEqual(p.h.sent.filter((m) => m.action === 'CRAWL_AND_AUDIT_COURSE').length, 2, 'Retry sends the course crawl again');
+    assert.strictEqual(p.lastMessage().action, 'CRAWL_AND_AUDIT_COURSE');
+  },
+
+  async 'Retry after a switch to a non-course tab does not click the hidden course button (F14)'() {
+    const url = 'https://x.instructure.com/courses/123';
+    const blog = 'https://example.com/blog';
+    const p = await loadPanel({ tab: { id: 1, url }, payloads: { 1: page('Home', url, 'Canvas LMS Page'), 2: page('Blog', blog, 'Web Page') } });
+    await p.$('audit-course-btn').click();
+    await flush();
+    await p.reply({ success: false, error: 'Failed to fetch Canvas course info (401)' });
+    await p.switchTab({ id: 2, url: blog });
+    await p.$('error-retry-btn').click();
+    await flush();
+    assert.deepStrictEqual(p.h.calls.permissionRequests, [{ origins: ['https://x.instructure.com/*'] }],
+      'Retry must not ask for access to the site now active');
+    assert.strictEqual(p.h.sent.filter((m) => m.action === 'CRAWL_AND_AUDIT_COURSE').length, 1);
+  },
+
+  async 'a feedback vote keeps the Audit Another Page button (F14)'() {
+    const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A } });
+    await p.$('audit-btn').click();
+    await p.reply({ success: true, data: RESULT });
+    await p.document.querySelector('.feedback-btn').click();
+    assert.ok(p.$('re-audit-btn'), '#re-audit-btn must survive a vote');
+    assert.strictEqual(p.document.querySelectorAll('.feedback-btn').length, 0);
+    assert.ok(p.document.querySelector('.feedback-row').textContent.includes('Thank you for your feedback!'));
+  },
+
+  async 'Copy to Clipboard reports a rejected write (F14)'() {
+    const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A }, clipboard: rejectingClipboard });
+    await p.$('audit-btn').click();
+    await p.reply({ success: true, data: RESULT });
+    const btn = p.$('copy-improved-btn');
+    await btn.click();
+    await flush();
+    assert.strictEqual(btn.textContent, 'Copy failed');
+  },
+
+  async 'Copy Markdown reports a rejected write without rejecting the handler (F14)'() {
+    const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A }, clipboard: rejectingClipboard });
+    const before = clickErrors.length;
+    const btn = p.$('copy-dossier-md-btn');
+    await btn.click();
+    await flush();
+    assert.strictEqual(clickErrors.length, before, 'click handler must not reject');
+    assert.strictEqual(btn.textContent, 'Copy failed');
+  },
+
+  async 'malformed findings still reach the results state (F9)'() {
+    const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A } });
+    await p.$('audit-btn').click();
+    await p.reply({ success: true, data: { summary: {}, findings: { 0: { tier: 1 } } } });
+    assert.ok(p.$('results-state').classList.contains('active'));
+  }
+};
+
+let failed = 0;
+for (const [name, run] of Object.entries(scenarios)) {
+  try {
+    await run();
+  } catch (err) {
+    failed++;
+    console.error(`not ok - ${name}\n  ${err.message.split('\n').join('\n  ')}`);
+  }
+}
+assert.strictEqual(failed, 0, `${failed} side panel state scenario(s) failed`);
+assert.deepStrictEqual(clickErrors, [], 'a click handler threw or rejected');
+resetGlobals();
+console.log('✅ Side panel labelling, stale refresh, error, retry, vote and clipboard tests passed.');
+process.exit(0); // pending 2 s button-label timers would otherwise hold the process open

From 192447725bdf479ffb5485818417d4d1e0f000bd Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 22:32:34 -0700
Subject: [PATCH 12/19] docs: make the extension's privacy and capability
 claims match the code

Closes F11 (docs side) and the course-crawler overclaim; also the README
"dashboard", "JSON" and "quizzes" claims and the undisclosed Google Fonts
request (D11).

- Side panel: the demo line says every audit shows the same sample
  findings and nothing is sent; "Privacy & Student Data" says what is sent
  to Google with a key, what Google's free tier allows, and which Canvas
  pages are refused. No FERPA or no-PII claim. The AI Studio link line is
  unchanged.
- PRIVACY.md: a "What it reads" bullet matching S9/S10, chrome.storage.sync
  for the key, the last-20 audit history, the free-tier terms (tagged
  link), the Fonts request, plugin-scoped network sentences, new date.
- README: tab-switch and custom-domain notes, crawler bullet limited to the
  syllabus and assignments, no dashboard/JSON/quizzes, demo and key setup
  text, the FAQ covers the extension.
- test/test-disclosures.mjs ties each claim to the shipped storage.js,
  parser-helper.js, canvas-crawler.js and extractor.js. It fails 15 checks
  on the old docs. Mutations 31a-31i; PRIVACY.md joins the snapshot list.

Deviations: the test collects every disagreement before asserting (the
test-evidence-labels.mjs pattern); the README custom-domain note follows
the Full Course Audit bullets, not the colon that introduces them; the
tab-switch note also exempts Canvas sites already allowed. PRIVACY.md,
README notes, the date and the Fonts line are prose reviewed by reading.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 PRIVACY.md                     |  20 +++---
 README.md                      |  18 +++--
 extension/sidepanel/index.html |   6 +-
 test/mutation-test.sh          | 122 ++++++++++++++++++++++++++++++++-
 test/test-disclosures.mjs      | 110 +++++++++++++++++++++++++++++
 5 files changed, 257 insertions(+), 19 deletions(-)
 create mode 100644 test/test-disclosures.mjs

diff --git a/PRIVACY.md b/PRIVACY.md
index f88e5ed..cc6dbae 100644
--- a/PRIVACY.md
+++ b/PRIVACY.md
@@ -1,10 +1,10 @@
 # Privacy Policy
 
-**Last updated:** April 21, 2026
+**Last updated:** September 23, 2026
 
 ## What idstack collects
 
-Nothing. idstack runs entirely on your local machine.
+Nothing. idstack has no servers of its own and receives none of your data. The Claude Code plugin runs on your machine; the Chrome extension runs in your browser and sends page text to Google only when you run an audit with your own API key saved (see below).
 
 ## Where your data lives
 
@@ -20,7 +20,7 @@ Designer profile and cross-project learnings are stored locally:
 - `~/.idstack/profile.yaml` — your experience level preference
 - `~/.idstack/global/learnings.jsonl` — learnings promoted across projects
 
-idstack adds no analytics, no tracking, and no telemetry. Two things do reach the network, both only when you ask for them, and both are listed under Third-party services below: the Canvas API calls made by `/idstack:course-import` and `/idstack:course-export`, and an update check against this repository on GitHub.
+idstack adds no analytics, no tracking, and no telemetry. In the Claude Code plugin, two things do reach the network, both only when you ask for them, and both are listed under Third-party services below: the Canvas API calls made by `/idstack:course-import` and `/idstack:course-export`, and an update check against this repository on GitHub.
 
 ## Third-party services
 
@@ -37,12 +37,16 @@ Both run only when you invoke that skill and confirm the target course. Your tok
 
 ## idstack Chrome Extension
 
-The idstack Chrome Extension is designed with a strict privacy-first and FERPA-compliant architecture:
+The extension is built to audit course materials, not student records. Here is what it reads, where that text goes, and what it keeps.
 
-- **Curriculum-Only Processing:** The extension only reads public or instructor-accessible course materials (syllabi, module structures, assignment guidelines, and rubrics). It never accesses student rosters, student submissions, student grades, or any Personally Identifiable Information (PII).
-- **Client-Side Storage:** Your optional Google AI Studio API key and saved course audit dossiers are stored locally on your device via `chrome.storage.local`. No audit history or credentials are ever sent to idstack servers.
-- **Direct AI Inference:** If you provide your own Google AI Studio API key, requests are sent directly from your browser to Google's API (`generativelanguage.googleapis.com`). Zero data is routed through intermediary proxy servers.
-- **No Tracking:** The extension contains zero analytics, tracking scripts, or telemetry.
+- **What it reads.** The extension reads a tab only when it has access: after you click the idstack toolbar icon on that tab, on Canvas pages at `instructure.com`, or on a Canvas site you allowed when Chrome asked. While the side panel is open it reads the title and main text of such a tab; that text stays in the panel until you click **Audit Page with Evidence**. On a Google Doc it downloads the document's plain text using your Google login. **Audit Entire Course** requests the course syllabus and assignments from your Canvas instance's API using your existing Canvas login. The extension will not read Canvas grades, Gradebook, SpeedGrader, People, groups, discussions, submissions, or Inbox pages. Other pages can still contain student names or work, so audit course materials rather than student work.
+- **Demo mode.** With no API key saved, the page's text is not sent anywhere: every audit returns the same sample findings, whatever the page says.
+- **Where the text goes with a key.** With your own Google AI Studio API key saved, the page title and text (or the syllabus and assignments) are sent directly from your browser to Google's Generative Language API (`generativelanguage.googleapis.com`) under your key and your agreement with Google. No idstack server is involved.
+- **Google's free tier.** If your key's Google Cloud project has no active Cloud Billing account, Google's terms let Google use what you submit, and the responses, to improve its products, and human reviewers may read them. The same terms ask you not to submit personal information. On billed projects, and for users in the European Economic Area, Switzerland, and the United Kingdom, Google says it does not use prompts or responses to improve its products. See [Google's terms for this API](https://ai.google.dev/gemini-api/terms). <!-- IDSTACK_CLI_LEAK_ALLOW -->
+- **API key.** Your API key is saved in `chrome.storage.sync`. If Chrome sync is on, Chrome copies it to your Google account and to other browsers where you are signed in. The extension sends it only to Google's API, with each audit. To remove it, clear the field in Settings and save.
+- **Audit history and dossier.** The last 20 audit results (page address, title, page type, and the full audit result) are kept in `chrome.storage.local`, as is the Course Dossier you build. Both stay on this device. **Clear Dossier** empties the dossier; removing the extension deletes both.
+- **Fonts.** Opening the side panel loads its fonts from Google Fonts (`fonts.googleapis.com`, `fonts.gstatic.com`), so Google receives your IP address and browser details; no page or course content is sent.
+- **No tracking.** The extension contains no analytics, tracking scripts, or telemetry.
 
 ## Questions
 
diff --git a/README.md b/README.md
index 0fcd242..a1e244b 100644
--- a/README.md
+++ b/README.md
@@ -188,6 +188,8 @@ If you or your instructional designers don't use the terminal, idstack is availa
 3. Navigate to any Canvas assignment, syllabus, or Google Doc and click the idstack icon to open the Side Panel.
 4. Click **"Audit Page with Evidence"** for instant Bloom's classification, constructive alignment reviews, and 1-click improved rubrics.
 
+If you switch tabs while the panel is open, click the idstack icon again so it can read the new tab. This isn't needed on Canvas pages at `instructure.com` or on a Canvas site you've already allowed.
+
 #### Loading Unpacked (Local Development)
 
 If developing or modifying the extension locally:
@@ -198,24 +200,26 @@ If developing or modifying the extension locally:
 #### Full Course Audit (Canvas LMS)
 
 When viewing any Canvas course homepage or modules list (`/courses/:id`), idstack automatically detects the course environment and presents an **"Audit Entire Course"** button:
-- **Zero Developer Tokens Required:** Crawls published syllabus items, modules, assignments, discussions, and quizzes in the background using your active browser session. No Canvas API keys, LMS admin setup, or command line required.
-- **Course Quality Matrix:** Synthesizes findings across all modules into an interactive course health dashboard, highlighting cognitive process distribution across Bloom's levels, constructive alignment gaps, and prioritized action items.
-- **Export Ready:** Download the full synthesized course audit as JSON or Markdown to share with instructional design teams and faculty stakeholders.
+- **Zero Developer Tokens Required:** Reads the course syllabus and assignment descriptions through Canvas's API using your active browser session. No Canvas API keys, LMS admin setup, or command line required.
+- **Course-level findings:** Reviews the syllabus and assignments together for alignment gaps, cognitive demand across Bloom's levels, and prioritized fixes, shown in the same results view as a page audit.
+- **Export Ready:** Add the course audit to your Course Dossier or export it as Markdown to share with instructional design teams and faculty stakeholders.
+
+On Canvas hosted outside `instructure.com` (for example, a university's own domain), Chrome asks once, for that site only, when you first click **"Audit Entire Course"**.
 
 #### Multi-Page Course Dossier & Markdown Export
 
 Audit multiple pages across a course or syllabus and accumulate findings into a structured institutional deliverable:
-- **Incremental Dossier Accumulation:** Click **"Add to Dossier"** on any page audit (assignments, quizzes, syllabi, Google Docs). The header dossier badge tracks your collected course components across browsing sessions.
+- **Incremental Dossier Accumulation:** Click **"Add to Dossier"** on any page audit (assignments, pages, syllabi, rubrics, Google Docs). The header dossier badge tracks your collected course components across browsing sessions.
 - **1-Click Compiled Markdown Export (`.md`):** Open the Dossier drawer to download a synthesized multi-page Markdown report (`idstack-course-dossier-<title>.md`) containing executive summaries, cognitive demand tables, itemized empirical citations (T1–T5), and improved rubric drafts.
 - **Clipboard Ready:** Copy the compiled Markdown report directly to your clipboard for pasting into LMS course notes, Google Docs, Notion, or faculty review tickets.
 
 #### Free Google AI Studio API Key Setup
 
-idstack includes a rich built-in simulation fallback mode for instant demonstration without API keys. To connect live LLM inference:
+Without a key, the extension runs in demo mode: every audit returns the same sample findings, whatever the page says. To get real audits:
 1. Obtain a free API key from [Google AI Studio](https://aistudio.google.com/app/apikey).
 2. In the idstack Side Panel, click the **Settings** (gear) icon in the top header.
 3. Paste your API key into the input field and click **Save Settings**.
-4. All prompts execute client-side directly against Google's API (`gemini-2.5-flash`). Zero student PII or course content is stored or transmitted to external intermediary servers. <!-- IDSTACK_CLI_LEAK_ALLOW -->
+4. Each audit sends the page's title and text (or, for a full-course audit, the syllabus and assignments) straight from your browser to Google's API; no idstack server is involved. On Google's free tier, Google may use that content to improve its products, so read [PRIVACY.md](PRIVACY.md) before auditing anything that names students.
 
 #### Packaging for Chrome Web Store
 
@@ -433,7 +437,7 @@ Run `bin/idstack-status` from your project directory for the dashboard (quality
 python3 is recommended but not required. With python3, you get quality score trends, dimension analysis, search filtering, and safe JSON serialization. Without it, basic timeline logging and learnings still work via bash fallback, but score trends and search filtering are unavailable. Most systems have python3 pre-installed.
 
 **Is my data safe?**
-idstack runs locally on your machine. Course data stays in your project folder (`.idstack/project.json`). Session history (`.idstack/timeline.jsonl`) and learnings (`.idstack/learnings.jsonl`) are also local. Course data reaches external servers only when you explicitly invoke integration skills (such as Canvas API calls via `/idstack:course-import` or `/idstack:course-export`) or perform hourly update checks via `git fetch`. Claude Code's own privacy policy applies to the AI conversation.
+idstack runs locally on your machine. Course data stays in your project folder (`.idstack/project.json`). Session history (`.idstack/timeline.jsonl`) and learnings (`.idstack/learnings.jsonl`) are also local. In the Claude Code plugin, course data reaches external servers only when you explicitly invoke integration skills (such as Canvas API calls via `/idstack:course-import` or `/idstack:course-export`) or perform hourly update checks via `git fetch`. The Chrome extension sends page text to Google's API when you run an audit with your own API key saved; see [PRIVACY.md](PRIVACY.md). Claude Code's own privacy policy applies to the AI conversation.
 
 **Can I edit the project manifest directly?**
 You can, but let the skills manage it. If you do edit it, keep the JSON valid.
diff --git a/extension/sidepanel/index.html b/extension/sidepanel/index.html
index 989d843..81d4a26 100644
--- a/extension/sidepanel/index.html
+++ b/extension/sidepanel/index.html
@@ -98,13 +98,13 @@ <h3>Settings & Privacy</h3>
           <label for="api-key-input">Google AI Studio API Key (Optional BYOK)</label>
           <input type="password" id="api-key-input" placeholder="AIzaSy..." />
           <a id="get-api-key-link" href="https://aistudio.google.com/app/apikey" target="_blank" class="help-link">Get your free Google AI Studio key &rarr;</a>
-          <p class="help-text">Leave blank to use the built-in free demo tier.</p>
+          <p class="help-text">Without a key, idstack runs in demo mode: every audit shows the same sample findings, whatever the page says, and the page's text is not sent anywhere.</p>
         </div>
         <button id="save-settings-btn" class="secondary-btn">Save Settings</button>
         <hr class="divider" />
         <div class="privacy-note">
-          <h4>Privacy & FERPA Commitment</h4>
-          <p>idstack processes only curriculum and assignment text. No student PII is ever collected, retained, or used for model training.</p>
+          <h4>Privacy & Student Data</h4>
+          <p>With a key saved, each audit sends the page's title and text (for a full-course audit, the syllabus and assignments) from your browser to Google's API. On Google's free tier, Google may use that content to improve its products, and human reviewers may read it. idstack will not read Canvas grades, Gradebook, SpeedGrader, People, groups, discussions, submissions, or Inbox pages. Other pages can still name students, so audit course materials, not student work.</p>
         </div>
       </div>
     </section>
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index e4cbef0..d7a0a42 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -55,7 +55,7 @@ PY_LT_312=$(python3 -c 'import sys; print(1 if sys.version_info < (3,12) else 0)
 # Copy only what the suites need; skip .git and any nested worktrees.
 mkdir -p "$WORK/base"
 for item in bin skills templates test evidence docs extension .claude-plugin \
-            VERSION CHANGELOG.md README.md TODOS.md CONTRIBUTING.md \
+            VERSION CHANGELOG.md README.md PRIVACY.md TODOS.md CONTRIBUTING.md \
             DESIGN.md ROADMAP.md CLAUDE.md setup; do
   [ -e "$SRC/$item" ] && cp -R "$SRC/$item" "$WORK/base/"
 done
@@ -1242,6 +1242,126 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "renderer calls toLowerCase on a non-string tier" node "$WORK/r/test/test-renderer-helper.mjs"
 
+# 31a-31i. The docs made promises the code did not keep. The side panel said
+# no student data was "ever collected, retained, or used for model training"
+# while the extractor read whole Canvas pages and the panel pointed at a free
+# API tier whose terms allow that use. The settings called canned demo output
+# a "free demo tier". PRIVACY.md put the API key in chrome.storage.local and
+# called the design FERPA-compliant. README said the course crawler reads
+# modules, discussions and quizzes. test-disclosures.mjs checks each doc claim
+# against the shipped code.
+
+# 31a. the side panel's absolute no-PII promise returns -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/index.html" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "<h4>Privacy & Student Data</h4>"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, old + "\n          <p>No student PII is ever collected, retained, or used for model training.</p>", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "absolute no-PII promise back in the side panel" "$WORK/r/test/test-extension.sh"
+
+# 31b. the free-tier data-use disclosure is dropped from the side panel -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/index.html" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = " On Google's free tier, Google may use that content to improve its products, and human reviewers may read it."
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "free-tier data-use disclosure dropped from the side panel" "$WORK/r/test/test-extension.sh"
+
+# 31c. demo mode advertised as a service tier again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/extension/sidepanel/index.html" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "Without a key, idstack runs in demo mode: every audit shows the same sample findings, whatever the page says, and the page's text is not sent anywhere."
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "Leave blank to use the built-in free demo tier.", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "demo advertised as a service tier again" "$WORK/r/test/test-extension.sh"
+
+# 31d. the privacy policy names the wrong storage area for the API key -> test-extension must fail.
+fresh
+python3 - "$WORK/r/PRIVACY.md" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "Your API key is saved in `chrome.storage.sync`."
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "Your API key is saved in `chrome.storage.local`.", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "privacy policy names the wrong storage area for the API key" "$WORK/r/test/test-extension.sh"
+
+# 31e. the never-accesses-PII claim is back in the privacy policy -> test-extension must fail.
+fresh
+python3 - "$WORK/r/PRIVACY.md" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "- **No tracking.**"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "- **Curriculum-Only Processing:** The extension only reads public or instructor-accessible course materials (syllabi, module structures, assignment guidelines, and rubrics). It never accesses student rosters, student submissions, student grades, or any Personally Identifiable Information (PII).\n" + old, 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "never-accesses-PII claim back in the privacy policy" "$WORK/r/test/test-extension.sh"
+
+# 31f. audit-history retention goes undisclosed -> test-extension must fail.
+fresh
+python3 - "$WORK/r/PRIVACY.md" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "The last 20 audit results (page address, title, page type, and the full audit result) are kept in `chrome.storage.local`, as is the Course Dossier you build."
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "The Course Dossier you build is kept in `chrome.storage.local`.", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "audit-history retention undisclosed" "$WORK/r/test/test-extension.sh"
+
+# 31g. the README crawler bullet overclaims again -> test-extension must fail.
+fresh
+python3 - "$WORK/r/README.md" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "Reads the course syllabus and assignment descriptions through Canvas's API using your active browser session."
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "Crawls published syllabus items, modules, assignments, discussions, and quizzes in the background using your active browser session.", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "README crawler bullet overclaims again" "$WORK/r/test/test-extension.sh"
+
+# 31h. the docs say Inbox is refused but the extractor reads it -> test-disclosures
+# must fail. Run directly: test-extractor.mjs would also fail under test-extension.sh,
+# leaving GUARDED ambiguous about which assertion caught it.
+fresh
+python3 - "$WORK/r/extension/content/extractor.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "|conversations"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "docs say Inbox is refused but the extractor reads it" node "$WORK/r/test/test-disclosures.mjs"
+
+# 31i. the FERPA-compliance claim is back in the privacy policy -> test-extension must fail.
+# idstack cannot certify FERPA compliance; that determination is the institution's.
+fresh
+python3 - "$WORK/r/PRIVACY.md" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "The extension is built to audit course materials, not student records."
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "The idstack Chrome Extension is designed with a strict privacy-first and FERPA-compliant architecture.", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "FERPA-compliance claim back in the privacy policy" "$WORK/r/test/test-extension.sh"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-disclosures.mjs b/test/test-disclosures.mjs
new file mode 100644
index 0000000..db1e2ce
--- /dev/null
+++ b/test/test-disclosures.mjs
@@ -0,0 +1,110 @@
+// What the side panel, PRIVACY.md and README.md say about the extension must
+// match the shipped code. v3.5.0.0's panel promised no student data was "ever
+// collected, retained, or used for model training", PRIVACY.md put the API key
+// in chrome.storage.local and called the design FERPA-compliant, the settings
+// called canned demo output a "free demo tier", and README said the course
+// crawler reads modules, discussions and quizzes. Each fact below is taken from
+// the shipped modules (storage areas, demo output, crawler requests, extractor
+// refusals), never restated here.
+import assert from 'node:assert';
+import { readFileSync } from 'node:fs';
+import { installChrome, loadContentScript, resetGlobals } from './extension-harness.mjs';
+import { saveSettings, saveAuditResult, addToDossier } from '../extension/shared/storage.js';
+import { getDemoAuditResult, getDemoCourseAuditResult } from '../extension/background/parser-helper.js';
+import { crawlCanvasCourse } from '../extension/background/canvas-crawler.js';
+
+const read = (rel) => readFileSync(new URL(`../${rel}`, import.meta.url), 'utf8');
+const html = read('extension/sidepanel/index.html');
+const privacy = read('PRIVACY.md');
+const readme = read('README.md');
+const manifest = JSON.parse(read('extension/manifest.json'));
+const DOCS = [['index.html', html], ['PRIVACY.md', privacy], ['README.md', readme]];
+
+// Collect every disagreement so one run names them all.
+const problems = new Set();
+const check = (ok, msg) => { if (!ok) problems.add(msg); };
+
+// 1. Storage: record which chrome.storage area each key really lands in, and
+//    how many audits the history keeps.
+const h = installChrome();
+await saveSettings({ apiKey: 'k' });
+for (let i = 0; i < 25; i++) await saveAuditResult({ url: `u${i}`, result: {} });
+await addToDossier({ url: 'u', result: {} });
+resetGlobals();
+const areaOf = (key) => Object.keys(h.storage).find((a) => key in h.storage[a]);
+for (const [key, label] of [['apiKey', /API key/i], ['auditHistory', /audit history/i], ['activeDossier', /dossier/i]]) {
+  const lines = privacy.split('\n').filter((l) => label.test(l) && l.includes('chrome.storage.'));
+  check(lines.length, `PRIVACY.md must say where ${key} is stored (code: chrome.storage.${areaOf(key)})`);
+  for (const l of lines) check(l.includes(`chrome.storage.${areaOf(key)}`), `PRIVACY.md misstates where ${key} is stored (code: chrome.storage.${areaOf(key)}): ${l}`);
+}
+const kept = h.storage[areaOf('auditHistory')].auditHistory.length;
+check(privacy.includes(`last ${kept} audit results`), `PRIVACY.md must disclose that the last ${kept} audit results are kept`);
+
+// 2. Demo mode ignores the page. The docs must say so, and stop saying so if that changes.
+const same = (f, a, b) => JSON.stringify(f(a)) === JSON.stringify(f(b));
+const canned = same(getDemoAuditResult, { title: 'T', pageType: 'P', content: 'alpha' }, { title: 'T', pageType: 'P', content: 'omega' })
+  && same(getDemoCourseAuditResult, { title: 'C', syllabus: 'a', assignments: [] }, { title: 'C', syllabus: 'b', assignments: [{ title: 'x' }] });
+for (const [name, text] of DOCS) {
+  check(text.includes('same sample findings') === canned, `${name}: demo-mode description disagrees with parser-helper.js (canned output: ${canned})`);
+}
+
+// 3. While the extension can reach Google's API, disclose what Google's free tier may do with submitted text.
+const hosts = [...(manifest.host_permissions || []), ...(manifest.optional_host_permissions || [])];
+if (hosts.some((host) => host.includes('generativelanguage.googleapis.com'))) {
+  for (const [name, text] of [['index.html', html], ['PRIVACY.md', privacy]]) {
+    check(text.includes('improve its products'), `${name} must disclose that Google's free tier may use submitted content to improve its products`);
+  }
+  check(/ai\.google\.dev\/\S*terms/.test(privacy), "PRIVACY.md must link to Google's terms for the API");
+}
+
+// 4. No absolute student-data promises and no compliance claims.
+for (const [name, text] of DOCS) {
+  check(!/\b(?:no|never|zero)\b[^.]*\b(?:PII|personally identifiable)/i.test(text), `${name} makes an absolute no-PII promise`);
+  check(!/FERPA[- ]compli/i.test(text), `${name} claims FERPA compliance`);
+}
+
+// 5. README's crawler bullet may name only Canvas resources the shipped crawler requests.
+const requested = [];
+await crawlCanvasCourse('https://school.instructure.com', '1', async (url) => {
+  requested.push(url);
+  return { ok: true, status: 200, headers: { get: () => null }, json: async () => (/\/courses\/1(\?|$)/.test(url) ? {} : []) };
+});
+const bullet = readme.split('\n').find((l) => l.includes('Zero Developer Tokens Required'));
+check(bullet, "README.md's course-crawler bullet (Zero Developer Tokens Required) is missing");
+for (const [word, endpoint] of [[/\bsyllab/i, 'syllabus_body'], [/\bassignment/i, '/assignments'], [/\bmodule/i, '/modules'], [/\bdiscussion/i, '/discussion_topics'], [/\bquiz/i, '/quizzes']]) {
+  if (bullet && word.test(bullet)) check(requested.some((u) => u.includes(endpoint)), `README.md's crawler bullet claims content the crawler never requests (${endpoint})`);
+}
+
+// 6. Each student-record page the docs say is not read must be refused: neither
+//    its text nor its title may come back, even when every content selector
+//    matches and on a custom Canvas domain, so the guard (not a missing
+//    selector) is what holds.
+const { extractContentFromDOM } = loadContentScript('content/extractor.js');
+const secret = 'Jane Student 92%';
+const el = { innerText: secret, textContent: secret };
+const doc = { title: secret, querySelector: () => el, querySelectorAll: () => [el], body: el };
+const note = (html.match(/<div class="privacy-note">([\s\S]*?)<\/div>/) || [])[1];
+check(note, 'index.html has no privacy note');
+const at = privacy.indexOf('## idstack Chrome Extension');
+check(at >= 0, 'PRIVACY.md has no "## idstack Chrome Extension" section');
+const policy = at >= 0 ? privacy.slice(at) : '';
+for (const [word, url] of [
+  [/Gradebook/, 'https://canvas.example.edu/courses/1/gradebook'],
+  [/SpeedGrader/, 'https://canvas.example.edu/courses/1/gradebook/speed_grader?assignment_id=1'],
+  [/\bgrades\b/, 'https://canvas.example.edu/courses/1/grades/7'],
+  [/People/, 'https://canvas.example.edu/courses/1/users'],
+  [/People/, 'https://canvas.example.edu/courses/1/users/42'],
+  [/\bgroups\b/, 'https://canvas.example.edu/courses/1/groups'],
+  [/\bsubmissions\b/, 'https://canvas.example.edu/courses/1/assignments/5/submissions/7'],
+  [/Inbox/, 'https://canvas.example.edu/conversations'],
+  [/\bdiscussion/i, 'https://canvas.example.edu/courses/1/discussion_topics/1'],
+]) {
+  for (const [name, text] of [['side-panel privacy note', note || ''], ['PRIVACY.md', policy]]) {
+    if (!word.test(text)) continue;
+    const r = extractContentFromDOM(doc, url);
+    check(!JSON.stringify([r.title, r.content]).includes(secret), `${name} says ${word.source} pages are not read, but the extractor returned page text or title for ${url}`);
+  }
+}
+
+assert.ok(problems.size === 0, `Extension disclosures disagree with the shipped code:\n  ${[...problems].join('\n  ')}`);
+console.log('✅ Extension privacy and capability disclosures match the shipped code.');

From f50b6e75e310d70bb94d5a86e7a9cbf7bc13eaad Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Wed, 23 Sep 2026 23:29:59 -0700
Subject: [PATCH 13/19] release: v3.5.1.0 (extension 1.1.0)

Cuts the release for review findings F2-F15 (F1 refuted; no claim made).

- Version 3.5.1.0 in VERSION, .claude-plugin/plugin.json, the README
  header and docs/index.html (softwareVersion, hero string, and a
  "patched through v3.5.1.0" note on the v3.5.0.0 card).
- CHANGELOG: new top entry grouped as site access; student-record
  refusal, Modules and Docs; course crawl; empty pages/courses,
  malformed output, timeout and key header; side-panel state; evidence
  labels; privacy promises (with the "Correction to the v3.5.0.0 notes"
  bullet); For contributors. The v3.5.0.0 entry is untouched.
- Extension manifest 1.1.0 and side-panel badge v1.1. test-manifest.js
  asserts the badge equals v<major>.<minor> of the manifest version.
- bin/package-extension.sh names the zip from manifest.json (node -p)
  and excludes icons/generate-icons.js; README's packaging line follows.
- Mutation 32: badge drift (v1.1 -> v1.0) must fail test-extension.sh.

Deviations:
- 3.5.1.0, not the spec's 3.5.0.1 (plan override 1).
- Failing first: on the unbumped tree the badge and manifest agree, so
  the new assertion was shown failing by bumping the manifest alone
  (badge v1.0 vs 1.1.0), then passing once the badge moved to v1.1.
- README's packaging line keeps its "ready for submission" clause and is
  now L230 (S12 shifted it); the refusal of student-record pages is
  described once in the CHANGELOG and the privacy bullet points to it.
- The zip name and the generate-icons.js exclusion stay unguarded by a
  suite (spec exception); verified once with package-extension.sh and
  unzip -l. The built zip is in the git-ignored build/.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .claude-plugin/plugin.json     |  2 +-
 CHANGELOG.md                   | 58 ++++++++++++++++++++++++++++++++++
 README.md                      |  4 +--
 VERSION                        |  2 +-
 bin/package-extension.sh       |  6 ++--
 docs/index.html                |  7 ++--
 extension/manifest.json        |  2 +-
 extension/sidepanel/index.html |  2 +-
 test/mutation-test.sh          | 13 ++++++++
 test/test-manifest.js          |  8 +++++
 10 files changed, 93 insertions(+), 11 deletions(-)

diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 1c193b1..05205e6 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "idstack",
-  "version": "3.5.0.0",
+  "version": "3.5.1.0",
   "description": "Evidence-based instructional design pipeline. 11 skills backed by peer-reviewed research across 11 domains. Analyze, design, build, review, and export courses with every recommendation citing its evidence tier.",
   "author": {
     "name": "Philippos Savvides",
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 947dd61..b580dd0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,63 @@
 # Changelog
 
+## v3.5.1.0 (2026-09-23)
+
+Hardens the Chrome extension after a code review of v3.5.0.0. It no longer asks for access to every website, refuses Canvas pages that show student records, reads every page of a course's assignments, and its privacy notes now say what is sent to Google. The extension is now version 1.1.0 and needs Chrome 116 or later. The Claude Code plugin's skills are unchanged.
+
+To update: `cd` into your idstack clone, then `git pull && ./setup`. The Chrome Web Store updates the extension on its own once 1.1.0 is published there.
+
+### Fixed — the extension could read every website
+
+- **v3.5.0.0 injected its page reader into every site you visited.** Chrome's install prompt therefore said it could read your data on all websites, and the same match let the extension's background worker make logged-in requests to any site and read the replies. The reader is now injected only into the tab you are looking at, after you click the idstack toolbar icon. Canvas at `instructure.com` needs no click. A Canvas site on its own domain is requested for that site only, when you first click **Audit Entire Course** there, and Chrome asks you before granting it. The toolbar icon now opens the panel and no longer closes it.
+- **The background worker took course-audit requests from any part of the extension, including the page reader it injected into every site, and fetched whatever course address it was given.** Web pages themselves could not message it. It now ignores messages that don't come from the extension's own pages. The course audit accepts only a bare `https` site address and a numeric course id before it requests anything with your Canvas login.
+
+### Fixed — student-record pages, Modules pages, and Google Docs
+
+- **Canvas pages that show student records were read like any other page.** Gradebook and SpeedGrader, grades, People (in a course or the whole account), groups, discussions, submissions, and Inbox are now refused, and the panel says why instead of auditing them. Other Canvas pages no longer fall back to reading the whole page body, and rubric text is now included. On a Canvas site outside `instructure.com`, only numeric `/courses/<n>` pages are read as Canvas; its other pages, such as the dashboard, are read like any web page.
+- **A Modules page audited only its first item.** Every module item title is now read, including a course home shown in Modules view.
+- **Google Docs were read from the editor's rendered page.** The extension now downloads the document's plain-text export with your Google login, waits at most 10 seconds, accepts only plain text, and says so when a document can't be exported. Published (`/d/e/`) documents are not fetched.
+
+### Fixed — the course audit read at most 50 assignments and hid failures
+
+- **Courses with more than 50 assignments were silently cut short.** The crawler now follows Canvas's pagination to the end, up to 10 pages (500 assignments), and says so when a course has more. A failed request or an unexpected response now stops the audit with an error. It used to become an empty assignment list, so the audit ran as if the course had no assessments.
+- **The course prompt could cut an assignment off partway through.** It keeps its 20,000-character budget but fills it with whole assignments, and its header now states how many of the course's items are shown in full.
+
+### Fixed — empty pages, malformed answers, slow requests, and the API key in the URL
+
+- **An empty or unreadable page was still audited.** Pages with fewer than 10 words are refused before anything is sent, with the reason when the extension knows it (for example, a tab it cannot read). A course with no syllabus text and no assignments is refused too. Both checks also apply in demo mode.
+- **A malformed answer from the model was saved and could crash the results view.** An answer must contain a list of findings before it is saved or shown.
+- **A slow model request had no limit of its own.** It now stops after 25 seconds with a message that says so.
+- **Your API key travelled in the request URL.** It is now sent in a request header.
+
+### Fixed — the side panel labelled, kept, or retried the wrong result
+
+- **A result could carry the wrong page's name.** A page audit is now labelled with the page that was sent, not whichever tab is active when the answer arrives, and a course audit is labelled with the course. A slow tab read can no longer overwrite a newer one.
+- **After an error, the previous result stayed actionable.** The error card now clears it and hides **Add to Dossier** and **Export .md** until the next successful audit. **Retry** re-runs the audit you started, page or course, instead of always running a page audit.
+- **A thumbs-up or thumbs-down vote also removed Audit Another Page.** Now only the vote buttons go.
+- **The copy buttons did not report a refused clipboard.** One said "Copied!" anyway and the other failed silently. Both now say "Copy failed".
+- **The results view crashed on findings that were not a list, on empty entries, or on a tier that was not text.** It now handles all three.
+
+### Fixed — evidence labels disagreed with `evidence/references.md`
+
+- **The extension's tier scale put randomized trials in T2 and called T3 observational.** Its labels now match idstack's scale, T1 meta-analyses and RCTs through T5 expert opinion, and both prompts give the model that scale.
+- **Demo findings and the course prompt cited studies idstack does not hold, or held them at the wrong tier.** Biggs (1996) is now `[Alignment-1] [T5]`, not `[Alignment-3]` at T2. The non-existent `[Cognitive-2]` is replaced by `[CogLoad-1]` and `[CogLoad-6]`, which exist. Carpenter (2022), Sweller (2011), and Wood (1976), none of which are in `evidence/references.md`, are replaced by studies that are. An unused list of evidence domains that cited unreferenced studies is removed.
+- **The page prompt asked for a `suggestion` severity, which idstack does not use.** It now asks for `critical`, `warning`, or `info`.
+
+### Fixed — the Chrome extension's privacy promises did not match what it does
+
+- **The Settings panel promised that no student data is "ever collected, retained, or used for model training."** None of that held. On a Canvas page the extractor did not recognize, such as Gradebook, People, Inbox, or a discussion, it read the whole page. The panel also points you to a free Google AI Studio key, whose terms let Google use submitted content to improve its products and let human reviewers read it. The extractor now refuses those pages (see above), and the panel says what is sent, to whom, and what Google's free tier allows.
+- **"Leave blank to use the built-in free demo tier" described a service that does not exist.** Without a key, every audit returns the same sample findings, whatever the page says. The panel, README, and PRIVACY.md now say so.
+- **PRIVACY.md said the API key is stored with `chrome.storage.local`.** The code uses `chrome.storage.sync`, which Chrome copies to your Google account when sync is on. The policy now says that. It also discloses that the last 20 audit results are kept in `chrome.storage.local` and that the side panel loads its fonts from Google Fonts. It no longer claims that the extension never touches rosters or grades, or that its design is FERPA-compliant. The README's "Is my data safe?" answer now points to it for the extension.
+- **Correction to the v3.5.0.0 notes.** They said the course crawler audits "syllabi, modules, assignments, discussions, quizzes". It requests the syllabus and assignments only. README repeated the claim, along with a course "dashboard" and a JSON export that do not exist, and is fixed. The v3.5.0.0 entry is left as released.
+
+### For contributors
+
+- **The mutation suite proves its guards again.** Its repo copy never included `extension/`, so once smoke-test ran the extension suite, smoke failed on every mutated copy. Every smoke-guarded case then reported GUARDED while guarding nothing, and two cases whose anchors had gone stale were counted too. The suite now runs smoke once on an unmutated snapshot and stops if it fails, and it stops on any mutation that leaves the copy unchanged. It grows from 27 cases to 97.
+- **The retired-CLI sweep now covers `docs/superpowers/`.** `--exclude-dir=superpowers` matched that name at any depth and exempted every committed spec and plan.
+- **The extension tests run the shipped code.** They used to load hand-copied `.cjs` twins, which are gone, and `test-extension.sh` fails if one comes back. `test/extension-harness.mjs` stubs the Chrome APIs and a small DOM, so the tests import the shipped modules and now also run the background worker, storage, and side panel. `test/test-evidence-labels.mjs` checks every citation and tier against `evidence/references.md`. `test/test-disclosures.mjs` checks the side panel, PRIVACY.md, and README against the shipped code.
+- **Node 22 is pinned** wherever CI runs the extension suite (the test and mutation jobs and the release workflow), and `test-extension.sh` stops with a clear message on a Node too old to import the modules (it needs 20.19+ or 22.7+). The extension suite also has its own CI step, so its full failure output shows.
+- **`bin/package-extension.sh` names the zip from `extension/manifest.json`** and leaves the dev-only `icons/generate-icons.js` out of it. The side panel's version badge is tested against the manifest.
+
 ## v3.5.0.0 (2026-08-16)
 
 Adds the native Chrome Side Panel extension for Canvas LMS and web course audits, the Course Dossier compiled Markdown export, and resolves open issues in learnings log management and test coverage.
diff --git a/README.md b/README.md
index a1e244b..5dba82f 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # idstack
 
-> **Status: beta (v3.5.0.0).** Skills work end-to-end and ship behind a versioned plugin, but expect rough edges and breaking changes between minor versions while we shake out the rest of the workflow with real instructional designers. See [CHANGELOG.md](CHANGELOG.md) for what's new in the current release. [Tell us what's broken or missing.](https://forms.gle/6LDgDD1M6WWyYvME8)
+> **Status: beta (v3.5.1.0).** Skills work end-to-end and ship behind a versioned plugin, but expect rough edges and breaking changes between minor versions while we shake out the rest of the workflow with real instructional designers. See [CHANGELOG.md](CHANGELOG.md) for what's new in the current release. [Tell us what's broken or missing.](https://forms.gle/6LDgDD1M6WWyYvME8)
 
 Decades of research say elaborated feedback improves learning. Cognitive load theory has been replicated for 30 years. Constructive alignment measurably raises grades. The evidence is strong, but most course design tools don't make it easy to apply.
 
@@ -227,7 +227,7 @@ To create a distribution bundle:
 ```bash
 ./bin/package-extension.sh
 ```
-Produces `build/idstack-chrome-extension-v1.0.0.zip` ready for submission to the Chrome Web Store Developer Console.
+Produces `build/idstack-chrome-extension-v<version>.zip` (version from `extension/manifest.json`), ready for submission to the Chrome Web Store Developer Console.
 
 
 ## Your design team
diff --git a/VERSION b/VERSION
index 5f56c9f..a11b5ad 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-3.5.0.0
+3.5.1.0
diff --git a/bin/package-extension.sh b/bin/package-extension.sh
index 15daf6d..408ebf2 100755
--- a/bin/package-extension.sh
+++ b/bin/package-extension.sh
@@ -7,7 +7,8 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
 EXT_DIR="$REPO_ROOT/extension"
 BUILD_DIR="$REPO_ROOT/build"
-ZIP_NAME="idstack-chrome-extension-v1.0.0.zip"
+# The zip is named for the version in manifest.json, so a release bump cannot ship a stale name.
+ZIP_NAME="idstack-chrome-extension-v$(node -p 'require(process.argv[1]).version' "$EXT_DIR/manifest.json").zip"
 ZIP_PATH="$BUILD_DIR/$ZIP_NAME"
 
 echo "==> Verifying extension test suite..."
@@ -19,7 +20,8 @@ rm -f "$ZIP_PATH"
 
 echo "==> Packaging extension from $EXT_DIR..."
 # Zip contents directly so manifest.json is at root of archive
-(cd "$EXT_DIR" && zip -r "$ZIP_PATH" . -x "*.DS_Store" "*__MACOSX*" "*.git*")
+# icons/generate-icons.js is a dev-time script that drew the PNGs; it is not part of the extension.
+(cd "$EXT_DIR" && zip -r "$ZIP_PATH" . -x "*.DS_Store" "*__MACOSX*" "*.git*" "icons/generate-icons.js")
 
 echo ""
 echo "✅ Extension packaged successfully!"
diff --git a/docs/index.html b/docs/index.html
index 8aa9f29..17c5f58 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -42,7 +42,7 @@
     "url": "https://idstack.org",
     "applicationCategory": "EducationalApplication",
     "operatingSystem": "macOS, Linux, Windows (WSL or Git Bash)",
-    "softwareVersion": "3.5.0.0",
+    "softwareVersion": "3.5.1.0",
     "datePublished": "2026-04-20",
     "offers": {
       "@type": "Offer",
@@ -983,7 +983,7 @@
           <span class="dot" aria-hidden="true"></span>
           <span>MIT</span>
           <span class="dot" aria-hidden="true"></span>
-          <span>v3.5.0.0 · Claude Code &amp; Chrome Extension</span>
+          <span>v3.5.1.0 · Claude Code &amp; Chrome Extension</span>
         </p>
         <h1 id="hero-title">Evidence-based instructional design with peer-reviewed citations.</h1>
         <p class="lede">108 peer-reviewed studies across 11 research domains. Every recommendation includes its evidence tier: <span class="tier tier-1">T1</span> meta-analyses and RCTs through <span class="tier tier-5">T5</span> expert opinion. Runs in Claude Code and as a native Chrome Extension.</p>
@@ -1272,10 +1272,11 @@ <h2 id="whatsnew-title">Recent Updates &amp; Release Notes</h2>
       </header>
 
       <article class="release-card">
-        <p class="release-meta">August 16, 2026 · v3.5.0.0</p>
+        <p class="release-meta">August 16, 2026 · v3.5.0.0 · patched through v3.5.1.0</p>
         <h3>Chrome Side Panel co-pilot &amp; Course Dossier export.</h3>
         <p>idstack is officially published as a native <a href="https://chromewebstore.google.com/detail/eclnhfehloplcnidkkopphamllnlhinm" target="_blank" rel="noopener">Chrome Side Panel extension on the Chrome Web Store</a>. It provides in-browser Bloom's taxonomy classification, constructive alignment reviews, and empirical citations (T1–T5) for Canvas LMS assignments, syllabi, and Google Docs without requiring command-line configuration.</p>
         <p>This release also introduces a background Canvas course crawler for multi-page syllabus audits, a Course Dossier export drawer that compiles multi-page findings into structured Markdown (<code>.md</code>) reports, atomic writes for learnings logs (Issue #60), and local-over-global search precedence (Issue #61).</p>
+        <p>The v3.5.1.0 update hardened the Chrome extension: it no longer requests access to every website, refuses Canvas pages that show student records, reads every page of a course's assignments, and its privacy notes now say what is sent to Google.</p>
       </article>
 
       <article class="release-card">
diff --git a/extension/manifest.json b/extension/manifest.json
index 4d2750e..f7784c4 100644
--- a/extension/manifest.json
+++ b/extension/manifest.json
@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "idstack — Evidence-Based Course Design",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "minimum_chrome_version": "116",
   "description": "Evidence-based instructional design co-pilot for Canvas LMS, Google Docs, and course web pages.",
   "homepage_url": "https://idstack.org",
diff --git a/extension/sidepanel/index.html b/extension/sidepanel/index.html
index 81d4a26..1c7e372 100644
--- a/extension/sidepanel/index.html
+++ b/extension/sidepanel/index.html
@@ -13,7 +13,7 @@
   <header class="app-header">
     <div class="brand">
       <span class="logo">idstack</span>
-      <span class="badge-version">v1.0</span>
+      <span class="badge-version">v1.1</span>
     </div>
     <div class="header-actions">
       <button id="dossier-toggle-btn" class="dossier-pill" title="Course Audit Dossier">
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index d7a0a42..10731f6 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -1362,6 +1362,19 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "FERPA-compliance claim back in the privacy policy" "$WORK/r/test/test-extension.sh"
 
+# 32. the side panel's version badge drifts from the manifest -> test-extension must fail.
+# The badge is hand-written, so a manifest bump alone would leave the panel showing the old version.
+fresh
+python3 - "$WORK/r/extension/sidepanel/index.html" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = '<span class="badge-version">v1.1</span>'
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, '<span class="badge-version">v1.0</span>', 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "side panel version badge drifts from the manifest" "$WORK/r/test/test-extension.sh"
+
 echo ""
 echo "guarded: $pass   NOT guarded: $fail   skipped: $skip"
 [ "$fail" -eq 0 ]
diff --git a/test/test-manifest.js b/test/test-manifest.js
index 656c04e..9db680d 100644
--- a/test/test-manifest.js
+++ b/test/test-manifest.js
@@ -26,6 +26,14 @@ assert.ok(!manifest.host_permissions.some((h) => ['<all_urls>', '*://*/*', 'http
 // chrome.sidePanel.open, called from the icon click, needs Chrome 116.
 assert.ok(Number(manifest.minimum_chrome_version) >= 116, 'minimum_chrome_version must be at least 116 for sidePanel.open');
 
+// The side panel's version badge shows v<major>.<minor> of the manifest version.
+// The badge is hand-written, so a manifest bump alone would leave the panel showing the old version.
+const sidepanelHtml = fs.readFileSync(path.join(__dirname, '../extension/sidepanel/index.html'), 'utf8');
+const badge = sidepanelHtml.match(/<span class="badge-version">([^<]*)<\/span>/);
+assert.ok(badge, 'side panel must show a version badge');
+const [major, minor] = manifest.version.split('.');
+assert.strictEqual(badge[1], `v${major}.${minor}`, `side panel badge ${badge[1]} must match manifest version ${manifest.version}`);
+
 // Storage helper check
 const storagePath = path.join(__dirname, '../extension/shared/storage.js');
 assert.ok(fs.existsSync(storagePath), 'storage.js must exist');

From 36823ca16f8eaced4d2da7d7ff553e27b1bf66a9 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Thu, 24 Sep 2026 08:32:43 -0700
Subject: [PATCH 14/19] docs: disclose what the Consensus integration sends

#89 made both halves of idstack send finding text to api.consensus.app
when a Consensus key is set, and added that host to the extension's
host_permissions. None of the privacy docs said so: PRIVACY.md and
README still listed Canvas and the update check as the plugin's only
network traffic, and the side panel described only Google.

- PRIVACY.md: a Consensus API entry under Third-party services (where
  the key is read from, what is sent, the ~/.idstack/cache/consensus/
  cache, and why a key in project.json travels with the project), plus
  an extension bullet (what is sent after each audit, the
  chrome.storage.local cache, and demo findings still being checked).
  The API key bullet now covers both keys in chrome.storage.sync.
- The side panel's privacy note and the Consensus key help text say that
  each finding's claim goes to Consensus. README's "Is my data safe?"
  answer does the same.
- test-disclosures.mjs: every host_permissions host must be named in
  PRIVACY.md's extension section, and a Consensus key field requires the
  panel's note to mention Consensus. Both checks fail on the previous
  docs. Mutation 31j proves the host check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                   |  2 +-
 PRIVACY.md                     | 13 ++++++++-----
 README.md                      |  2 +-
 extension/sidepanel/index.html |  4 ++--
 test/mutation-test.sh          | 14 ++++++++++++++
 test/test-disclosures.mjs      | 11 +++++++++++
 6 files changed, 37 insertions(+), 9 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 61d6394..1fad8c3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -59,7 +59,7 @@ To update: `cd` into your idstack clone, then `git pull && ./setup`. The Chrome
 
 ### For contributors
 
-- **The mutation suite refuses a mutation that changes nothing.** Two cases whose anchors had gone stale kept reporting GUARDED because nothing checked that the mutation had edited anything. The suite now copies the repo once into a snapshot that its baseline smoke run vouches for, and stops on any mutation that leaves the copy unchanged. It grows from 36 cases to 107.
+- **The mutation suite refuses a mutation that changes nothing.** Two cases whose anchors had gone stale kept reporting GUARDED because nothing checked that the mutation had edited anything. The suite now copies the repo once into a snapshot that its baseline smoke run vouches for, and stops on any mutation that leaves the copy unchanged. It grows from 36 cases to 108.
 - **The retired-CLI sweep now covers `docs/superpowers/`.** `--exclude-dir=superpowers` matched that name at any depth and exempted every committed spec and plan.
 - **The extension tests run the shipped code.** They used to load hand-copied `.cjs` twins, which are gone, and `test-extension.sh` fails if one comes back. `test/extension-harness.mjs` stubs the Chrome APIs and a small DOM, so the tests import the shipped modules and now also run the background worker, storage, and side panel. `test/test-evidence-labels.mjs` checks every citation and tier against `evidence/references.md`. `test/test-disclosures.mjs` checks the side panel, PRIVACY.md, and README against the shipped code.
 - **The release workflow pins Node 22**, as the test and mutation jobs already did, and `test-extension.sh` stops with a clear message on a Node too old to import the modules (it needs 20.19+ or 22.7+). The extension suite also has its own CI step, so its full failure output shows.
diff --git a/PRIVACY.md b/PRIVACY.md
index cc6dbae..c494262 100644
--- a/PRIVACY.md
+++ b/PRIVACY.md
@@ -1,10 +1,10 @@
 # Privacy Policy
 
-**Last updated:** September 23, 2026
+**Last updated:** September 24, 2026
 
 ## What idstack collects
 
-Nothing. idstack has no servers of its own and receives none of your data. The Claude Code plugin runs on your machine; the Chrome extension runs in your browser and sends page text to Google only when you run an audit with your own API key saved (see below).
+Nothing. idstack has no servers of its own and receives none of your data. The Claude Code plugin runs on your machine and the Chrome extension runs in your browser. The extension sends page text to Google only when you run an audit with your own Google API key saved, and both send the text of findings to Consensus only when you have set up your own Consensus key (see below).
 
 ## Where your data lives
 
@@ -20,7 +20,7 @@ Designer profile and cross-project learnings are stored locally:
 - `~/.idstack/profile.yaml` — your experience level preference
 - `~/.idstack/global/learnings.jsonl` — learnings promoted across projects
 
-idstack adds no analytics, no tracking, and no telemetry. In the Claude Code plugin, two things do reach the network, both only when you ask for them, and both are listed under Third-party services below: the Canvas API calls made by `/idstack:course-import` and `/idstack:course-export`, and an update check against this repository on GitHub.
+idstack adds no analytics, no tracking, and no telemetry. In the Claude Code plugin, three things can reach the network, all listed under Third-party services below: the Canvas API calls made by `/idstack:course-import` and `/idstack:course-export`, an update check against this repository on GitHub, and Consensus lookups once you set up a Consensus key.
 
 ## Third-party services
 
@@ -33,6 +33,8 @@ idstack runs inside Claude Code, which is operated by Anthropic. Your conversati
 
 Both run only when you invoke that skill and confirm the target course. Your token is used for those API calls and is neither stored by idstack nor sent anywhere else. The receiving Canvas instance is your institution's, not ours.
 
+**Consensus API.** Only if you set up your own Consensus API key: `CONSENSUS_API_KEY` in your environment, `consensus_api_key` in `~/.idstack/profile.yaml` (where `bin/idstack-consensus configure` saves it), or `preferences.consensus_api_key` in `.idstack/project.json`. With a key, `bin/idstack-consensus` sends the text of each claim it checks to Consensus (`api.consensus.app`) under your key. Those claims are the findings from `/idstack:course-quality-review`, `/idstack:assessment-design`, and `/idstack:red-team`, which describe your course and can quote it, or the research domain you name to `idstack-consensus sync`. Answers are cached in `~/.idstack/cache/consensus/`, and a claim already in the cache is not sent again. A key kept in `.idstack/project.json` travels with that file, so if you share the project folder, consider the environment variable or your profile instead. Without a key, nothing is sent to Consensus.
+
 **Update check.** On skill startup idstack runs `git fetch` against this repository to see whether a newer version exists, at most once an hour. That is a request to GitHub carrying nothing but the fetch itself; it never uploads your course data. It only runs for git installs, and removing the repo's `.git` directory disables it.
 
 ## idstack Chrome Extension
@@ -40,10 +42,11 @@ Both run only when you invoke that skill and confirm the target course. Your tok
 The extension is built to audit course materials, not student records. Here is what it reads, where that text goes, and what it keeps.
 
 - **What it reads.** The extension reads a tab only when it has access: after you click the idstack toolbar icon on that tab, on Canvas pages at `instructure.com`, or on a Canvas site you allowed when Chrome asked. While the side panel is open it reads the title and main text of such a tab; that text stays in the panel until you click **Audit Page with Evidence**. On a Google Doc it downloads the document's plain text using your Google login. **Audit Entire Course** requests the course syllabus and assignments from your Canvas instance's API using your existing Canvas login. The extension will not read Canvas grades, Gradebook, SpeedGrader, People, groups, discussions, submissions, or Inbox pages. Other pages can still contain student names or work, so audit course materials rather than student work.
-- **Demo mode.** With no API key saved, the page's text is not sent anywhere: every audit returns the same sample findings, whatever the page says.
+- **Demo mode.** With no Google API key saved, the page's text is not sent anywhere: every audit returns the same sample findings, whatever the page says. If a Consensus key is saved, those sample findings are still checked against Consensus.
 - **Where the text goes with a key.** With your own Google AI Studio API key saved, the page title and text (or the syllabus and assignments) are sent directly from your browser to Google's Generative Language API (`generativelanguage.googleapis.com`) under your key and your agreement with Google. No idstack server is involved.
 - **Google's free tier.** If your key's Google Cloud project has no active Cloud Billing account, Google's terms let Google use what you submit, and the responses, to improve its products, and human reviewers may read them. The same terms ask you not to submit personal information. On billed projects, and for users in the European Economic Area, Switzerland, and the United Kingdom, Google says it does not use prompts or responses to improve its products. See [Google's terms for this API](https://ai.google.dev/gemini-api/terms). <!-- IDSTACK_CLI_LEAK_ALLOW -->
-- **API key.** Your API key is saved in `chrome.storage.sync`. If Chrome sync is on, Chrome copies it to your Google account and to other browsers where you are signed in. The extension sends it only to Google's API, with each audit. To remove it, clear the field in Settings and save.
+- **Consensus, with a Consensus key.** If you also save a Consensus key in Settings, then after each audit the claim of every finding (its evidence text, or failing that its observation, recommendation, or citation) is sent from your browser to Consensus (`api.consensus.app`) under your key. Findings describe the audited page and can quote it. Answers are cached in `chrome.storage.local`, and a claim already in the cache is not sent again. Without a Consensus key, nothing goes to Consensus.
+- **API keys.** Your Google API key and your Consensus key are saved in `chrome.storage.sync`. If Chrome sync is on, Chrome copies them to your Google account and to other browsers where you are signed in. The extension sends each key only to its own service, with each audit. To remove one, clear its field in Settings and save.
 - **Audit history and dossier.** The last 20 audit results (page address, title, page type, and the full audit result) are kept in `chrome.storage.local`, as is the Course Dossier you build. Both stay on this device. **Clear Dossier** empties the dossier; removing the extension deletes both.
 - **Fonts.** Opening the side panel loads its fonts from Google Fonts (`fonts.googleapis.com`, `fonts.gstatic.com`), so Google receives your IP address and browser details; no page or course content is sent.
 - **No tracking.** The extension contains no analytics, tracking scripts, or telemetry.
diff --git a/README.md b/README.md
index 5b8fd79..965126b 100644
--- a/README.md
+++ b/README.md
@@ -437,7 +437,7 @@ Run `bin/idstack-status` from your project directory for the dashboard (quality
 python3 is recommended but not required. With python3, you get quality score trends, dimension analysis, search filtering, and safe JSON serialization. Without it, basic timeline logging and learnings still work via bash fallback, but score trends and search filtering are unavailable. Most systems have python3 pre-installed.
 
 **Is my data safe?**
-idstack runs locally on your machine. Course data stays in your project folder (`.idstack/project.json`). Session history (`.idstack/timeline.jsonl`) and learnings (`.idstack/learnings.jsonl`) are also local. In the Claude Code plugin, course data reaches external servers only when you explicitly invoke integration skills (such as Canvas API calls via `/idstack:course-import` or `/idstack:course-export`) or perform hourly update checks via `git fetch`. The Chrome extension sends page text to Google's API when you run an audit with your own API key saved; see [PRIVACY.md](PRIVACY.md). Claude Code's own privacy policy applies to the AI conversation.
+idstack runs locally on your machine. Course data stays in your project folder (`.idstack/project.json`). Session history (`.idstack/timeline.jsonl`) and learnings (`.idstack/learnings.jsonl`) are also local. In the Claude Code plugin, course data reaches external servers only when you explicitly invoke integration skills (such as Canvas API calls via `/idstack:course-import` or `/idstack:course-export`) or perform hourly update checks via `git fetch`, and findings are sent to Consensus only if you set up your own Consensus key. The Chrome extension sends page text to Google's API when you run an audit with your own API key saved, and finding text to Consensus when you also save a Consensus key; see [PRIVACY.md](PRIVACY.md). Claude Code's own privacy policy applies to the AI conversation.
 
 **Can I edit the project manifest directly?**
 You can, but let the skills manage it. If you do edit it, keep the JSON valid.
diff --git a/extension/sidepanel/index.html b/extension/sidepanel/index.html
index 15519e9..4c75369 100644
--- a/extension/sidepanel/index.html
+++ b/extension/sidepanel/index.html
@@ -104,13 +104,13 @@ <h3>Settings & Privacy</h3>
           <label for="consensus-api-key-input">Consensus API Key (Optional BYOK)</label>
           <input type="password" id="consensus-api-key-input" placeholder="cons_..." />
           <a id="get-consensus-api-key-link" href="https://consensus.app" target="_blank" rel="noopener noreferrer" class="help-link">Get your Consensus API key &rarr;</a>
-          <p class="help-text">Enables live academic literature verification via Consensus search.</p>
+          <p class="help-text">Checks each finding against the research literature on Consensus. With a key saved, each finding's claim is sent to Consensus under your key.</p>
         </div>
         <button id="save-settings-btn" class="secondary-btn">Save Settings</button>
         <hr class="divider" />
         <div class="privacy-note">
           <h4>Privacy & Student Data</h4>
-          <p>With a key saved, each audit sends the page's title and text (for a full-course audit, the syllabus and assignments) from your browser to Google's API. On Google's free tier, Google may use that content to improve its products, and human reviewers may read it. idstack will not read Canvas grades, Gradebook, SpeedGrader, People, groups, discussions, submissions, or Inbox pages. Other pages can still name students, so audit course materials, not student work.</p>
+          <p>With a key saved, each audit sends the page's title and text (for a full-course audit, the syllabus and assignments) from your browser to Google's API. On Google's free tier, Google may use that content to improve its products, and human reviewers may read it. idstack will not read Canvas grades, Gradebook, SpeedGrader, People, groups, discussions, submissions, or Inbox pages. Other pages can still name students, so audit course materials, not student work. With a Consensus key saved, each finding's claim, which can quote the page, is also sent to Consensus.</p>
         </div>
       </div>
     </section>
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 0be5c5d..99f4efb 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -1362,6 +1362,20 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "FERPA-compliance claim back in the privacy policy" "$WORK/r/test/test-extension.sh"
 
+# 31j. the policy stops naming a host the manifest can reach -> test-extension must fail.
+# #89 added api.consensus.app to host_permissions without a word in PRIVACY.md. The
+# plugin section names the host too, so this proves the check reads the extension section.
+fresh
+python3 - "$WORK/r/PRIVACY.md" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "from your browser to Consensus (`api.consensus.app`)"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "from your browser to Consensus", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "privacy policy omits a host the manifest can reach" "$WORK/r/test/test-extension.sh"
+
 # 32. the side panel's version badge drifts from the manifest -> test-extension must fail.
 # The badge is hand-written, so a manifest bump alone would leave the panel showing the old version.
 fresh
diff --git a/test/test-disclosures.mjs b/test/test-disclosures.mjs
index db1e2ce..7630fd9 100644
--- a/test/test-disclosures.mjs
+++ b/test/test-disclosures.mjs
@@ -106,5 +106,16 @@ for (const [word, url] of [
   }
 }
 
+// 7. Every host the manifest lets the extension reach must be named in the policy, and a
+//    settings field for a Consensus key means the panel's privacy note must mention Consensus.
+//    #89 added api.consensus.app to host_permissions and a key field with neither.
+for (const pattern of manifest.host_permissions || []) {
+  const host = pattern.replace(/^[^:]+:\/\//, '').replace(/^\*\./, '').replace(/\/.*$/, '');
+  check(policy.includes(host), `PRIVACY.md's extension section does not name ${host}, which manifest.json host_permissions lets the extension reach`);
+}
+if (html.includes('id="consensus-api-key-input"')) {
+  check(/Consensus/.test(note || ''), 'side-panel privacy note does not say what a saved Consensus key sends to Consensus');
+}
+
 assert.ok(problems.size === 0, `Extension disclosures disagree with the shipped code:\n  ${[...problems].join('\n  ')}`);
 console.log('✅ Extension privacy and capability disclosures match the shipped code.');

From 36e59197694d338fb98617f62adf39f419ec7078 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Thu, 24 Sep 2026 08:33:08 -0700
Subject: [PATCH 15/19] test: port useful cases from closed bot PRs #99 #100
 #101

These PRs targeted parser-helper.cjs, test-service-worker.js and
test-extractor.js, all of which this branch removed, so they cannot
merge. Their cases that add coverage now live in the ESM suites:

- test-parser-helper.mjs: JSON arrays, whitespace with no fence, and a
  SyntaxError for a trailing comma, truncated JSON, or plain text (#99, #101).
- test-course-context.mjs: null and non-URL input, a #fragment on a
  course root, a non-Canvas path, and a missing or non-numeric
  course id (#100).

#108's one real fix, `cut` in test-doctor's mock PATH, already reached
this branch from main.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 test/test-course-context.mjs | 14 ++++++++++++++
 test/test-parser-helper.mjs  |  6 ++++++
 2 files changed, 20 insertions(+)

diff --git a/test/test-course-context.mjs b/test/test-course-context.mjs
index 91a9492..8c9418a 100644
--- a/test/test-course-context.mjs
+++ b/test/test-course-context.mjs
@@ -20,4 +20,18 @@ const subpageCtx = detectCourseContext('https://canvas.instructure.com/courses/9
 assert.strictEqual(subpageCtx.isCourseRoot, false);
 assert.strictEqual(subpageCtx.courseId, '987654');
 
+// Edge cases from closed bot PR #100.
+for (const bad of [null, 'invalid-url']) {
+  assert.deepStrictEqual(detectCourseContext(bad), { isCourseRoot: false, courseId: null, origin: null }, `${bad} is not a course`);
+}
+const hashCtx = detectCourseContext('https://canvas.instructure.com/courses/987654#main');
+assert.strictEqual(hashCtx.isCourseRoot, true, 'a fragment does not change the page');
+assert.strictEqual(hashCtx.courseId, '987654');
+assert.deepStrictEqual(detectCourseContext('https://example.com/other/123'), { isCourseRoot: false, courseId: null, origin: 'https://example.com' });
+for (const url of ['https://canvas.instructure.com/courses/', 'https://canvas.instructure.com/courses/abc']) {
+  const ctx = detectCourseContext(url);
+  assert.strictEqual(ctx.isCourseRoot, false, `${url} has no numeric course id`);
+  assert.strictEqual(ctx.courseId, null);
+}
+
 console.log('✅ Course context detection tests passed.');
diff --git a/test/test-parser-helper.mjs b/test/test-parser-helper.mjs
index 2d1fcc4..edc7b04 100644
--- a/test/test-parser-helper.mjs
+++ b/test/test-parser-helper.mjs
@@ -28,6 +28,12 @@ assert.strictEqual(parsedWhitespace.summary.bloomsLevel, 'Evaluate');
 assert.strictEqual(typeof cleanJsonResponse, 'function');
 const cleaned = cleanJsonResponse('{"key": "value"}');
 assert.strictEqual(cleaned.key, 'value');
+// Cases from closed bot PRs #99 and #101: arrays, bare whitespace, and malformed JSON.
+assert.deepStrictEqual(cleanJsonResponse('["item1", "item2"]'), ['item1', 'item2']);
+assert.strictEqual(cleanJsonResponse('  \n\t {"key": "value"} \n ').key, 'value');
+assert.throws(() => cleanJsonResponse('```json\n{"key": "value",}\n```'), SyntaxError, 'a trailing comma must not parse');
+assert.throws(() => cleanJsonResponse('{"key": "value"'), SyntaxError, 'truncated JSON must not parse');
+assert.throws(() => cleanJsonResponse('not json'), SyntaxError);
 
 // Test 6: Demo fallback when API key is not configured
 assert.strictEqual(typeof getDemoAuditResult, 'function', 'getDemoAuditResult must be a function');

From 2e7ff4616092091c1ddbcc99781f803d2c7961d0 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Thu, 24 Sep 2026 08:44:34 -0700
Subject: [PATCH 16/19] test: re-anchor mutation 31d on the two-key storage
 sentence

The Consensus disclosure rewrote PRIVACY.md's API key bullet to cover
both keys, so 31d's anchor stopped matching. expect_fail's no-op check
caught this on CI and stopped the run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 test/mutation-test.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 99f4efb..b901512 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -1292,9 +1292,9 @@ fresh
 python3 - "$WORK/r/PRIVACY.md" <<'PY'
 import sys
 p = sys.argv[1]; s = open(p, encoding='utf-8').read()
-old = "Your API key is saved in `chrome.storage.sync`."
+old = "Your Google API key and your Consensus key are saved in `chrome.storage.sync`."
 assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
-s = s.replace(old, "Your API key is saved in `chrome.storage.local`.", 1)
+s = s.replace(old, "Your Google API key and your Consensus key are saved in `chrome.storage.local`.", 1)
 open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "privacy policy names the wrong storage area for the API key" "$WORK/r/test/test-extension.sh"

From 2fa2f2e9b3fdfa1f39036ea80b0cadb30393639e Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Thu, 24 Sep 2026 08:48:47 -0700
Subject: [PATCH 17/19] fix(extension): Retry does not audit a different course
 than the one that failed

Codex review on #109: after a course audit fails, a switch to another
course's root or Modules page keeps Audit Entire Course visible. The
hidden-button guard (mutation 30m) passes, and Retry re-clicked the
button, which audits the course now active. Retry now also returns to
the ready screen when the current course is not the one that failed.

Covered by a new test-sidepanel-state scenario, which fails without the
guard, and by mutation 30n.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                     |  4 ++--
 extension/sidepanel/sidepanel.js |  7 +++++++
 test/mutation-test.sh            | 14 ++++++++++++++
 test/test-sidepanel-state.mjs    | 16 ++++++++++++++++
 4 files changed, 39 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1fad8c3..5d0712d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -39,7 +39,7 @@ To update: `cd` into your idstack clone, then `git pull && ./setup`. The Chrome
 ### Fixed — the side panel labelled, kept, or retried the wrong result
 
 - **A result could carry the wrong page's name.** A page audit is now labelled with the page that was sent, not whichever tab is active when the answer arrives, and a course audit is labelled with the course. A slow tab read can no longer overwrite a newer one.
-- **After an error, the previous result stayed actionable.** The error card now clears it and hides **Add to Dossier** and **Export .md** until the next successful audit. **Retry** re-runs the audit you started, page or course, instead of always running a page audit.
+- **After an error, the previous result stayed actionable.** The error card now clears it and hides **Add to Dossier** and **Export .md** until the next successful audit. **Retry** re-runs the audit you started, page or course, instead of always running a page audit. If you have since moved to a different course, it goes back to the ready screen instead of auditing that course.
 - **A thumbs-up or thumbs-down vote also removed Audit Another Page.** Now only the vote buttons go.
 - **The copy buttons did not report a refused clipboard.** One said "Copied!" anyway and the other failed silently. Both now say "Copy failed".
 - **The results view crashed on findings that were not a list, on empty entries, or on a tier that was not text.** It now handles all three.
@@ -59,7 +59,7 @@ To update: `cd` into your idstack clone, then `git pull && ./setup`. The Chrome
 
 ### For contributors
 
-- **The mutation suite refuses a mutation that changes nothing.** Two cases whose anchors had gone stale kept reporting GUARDED because nothing checked that the mutation had edited anything. The suite now copies the repo once into a snapshot that its baseline smoke run vouches for, and stops on any mutation that leaves the copy unchanged. It grows from 36 cases to 108.
+- **The mutation suite refuses a mutation that changes nothing.** Two cases whose anchors had gone stale kept reporting GUARDED because nothing checked that the mutation had edited anything. The suite now copies the repo once into a snapshot that its baseline smoke run vouches for, and stops on any mutation that leaves the copy unchanged. It grows from 36 cases to 109.
 - **The retired-CLI sweep now covers `docs/superpowers/`.** `--exclude-dir=superpowers` matched that name at any depth and exempted every committed spec and plan.
 - **The extension tests run the shipped code.** They used to load hand-copied `.cjs` twins, which are gone, and `test-extension.sh` fails if one comes back. `test/extension-harness.mjs` stubs the Chrome APIs and a small DOM, so the tests import the shipped modules and now also run the background worker, storage, and side panel. `test/test-evidence-labels.mjs` checks every citation and tier against `evidence/references.md`. `test/test-disclosures.mjs` checks the side panel, PRIVACY.md, and README against the shipped code.
 - **The release workflow pins Node 22**, as the test and mutation jobs already did, and `test-extension.sh` stops with a clear message on a Node too old to import the modules (it needs 20.19+ or 22.7+). The extension suite also has its own CI step, so its full failure output shows.
diff --git a/extension/sidepanel/sidepanel.js b/extension/sidepanel/sidepanel.js
index 25996cb..013f32b 100644
--- a/extension/sidepanel/sidepanel.js
+++ b/extension/sidepanel/sidepanel.js
@@ -8,6 +8,7 @@ let activeCourseContext = null;
 let activeAuditResult = null;
 let activeAuditItem = null;
 let lastAuditBtn = null;
+let lastCourseTarget = null; // `${origin}/courses/${id}` of the last course audit; null after a page audit
 let refreshSeq = 0;
 
 function sanitizeFilename(name) {
@@ -236,6 +237,10 @@ export function renderError(errorMessage) {
       // A tab switch can hide Audit Entire Course; re-clicking it would crawl,
       // and ask for access to, whatever site is active now.
       if (lastAuditBtn && lastAuditBtn.style.display === 'none') return;
+      // A switch to another course root keeps the button visible; re-clicking it would
+      // audit that course instead of the one that failed.
+      const ctx = activeCourseContext || {};
+      if (lastCourseTarget && lastCourseTarget !== `${ctx.origin}/courses/${ctx.courseId}`) return;
       if (lastAuditBtn) lastAuditBtn.click();
     });
   }
@@ -280,6 +285,7 @@ const auditBtn = document.getElementById('audit-btn');
 if (auditBtn) {
   auditBtn.addEventListener('click', async () => {
     lastAuditBtn = auditBtn;
+    lastCourseTarget = null;
     if (!activePayload) await refreshActiveTab();
     // Label the result with the page sent, not the tab active when the reply lands.
     const sent = activePayload;
@@ -319,6 +325,7 @@ if (auditCourseBtn) {
     lastAuditBtn = auditCourseBtn;
     // Shown only after refreshActiveTab() found a course root, so the context is set.
     const { origin, courseId } = activeCourseContext || {};
+    lastCourseTarget = `${origin}/courses/${courseId}`;
     // permissions.request needs this click's user gesture, so it comes before any other
     // await. Already-held access (*.instructure.com) resolves true with no prompt; other
     // Canvas hosts get a one-time Chrome prompt for that site only.
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index b901512..16eb334 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -1193,6 +1193,20 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "Retry clicks the hidden course button" node "$WORK/r/test/test-sidepanel-state.mjs"
 
+# 30n. Retry re-clicks the course button after a switch to another course root
+# -> test-sidepanel-state must fail. The button stays visible there, so 30m's
+# guard passes and Retry would audit the other course (Codex review on #109).
+fresh
+python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
+import sys
+p = sys.argv[1]; s = open(p, encoding='utf-8').read()
+old = "      if (lastCourseTarget && lastCourseTarget !== `${ctx.origin}/courses/${ctx.courseId}`) return;\n"
+assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
+s = s.replace(old, "", 1)
+open(p, 'w', encoding='utf-8').write(s)
+PY
+expect_fail "Retry audits the course now active, not the one that failed" node "$WORK/r/test/test-sidepanel-state.mjs"
+
 # 30i. a feedback vote rewrites the whole row -> test-sidepanel-state must fail.
 # The row also holds Audit Another Page, the only way back to the ready state.
 fresh
diff --git a/test/test-sidepanel-state.mjs b/test/test-sidepanel-state.mjs
index 994de25..1f81976 100644
--- a/test/test-sidepanel-state.mjs
+++ b/test/test-sidepanel-state.mjs
@@ -141,6 +141,22 @@ const scenarios = {
     assert.strictEqual(p.h.sent.filter((m) => m.action === 'CRAWL_AND_AUDIT_COURSE').length, 1);
   },
 
+  async 'Retry after a switch to another course does not audit that course (F14)'() {
+    const a = 'https://x.instructure.com/courses/123';
+    const b = 'https://x.instructure.com/courses/456';
+    const p = await loadPanel({ tab: { id: 1, url: a }, payloads: { 1: page('Course A', a, 'Canvas LMS Page'), 2: page('Course B', b, 'Canvas LMS Page') } });
+    await p.$('audit-course-btn').click();
+    await flush();
+    await p.reply({ success: false, error: 'Failed to fetch Canvas course info (401)' });
+    await p.switchTab({ id: 2, url: b });
+    assert.notStrictEqual(p.$('audit-course-btn').style.display, 'none', 'course B shows its own course button');
+    await p.$('error-retry-btn').click();
+    await flush();
+    const crawls = p.h.sent.filter((m) => m.action === 'CRAWL_AND_AUDIT_COURSE');
+    assert.strictEqual(crawls.length, 1, 'Retry must not crawl the course now active');
+    assert.strictEqual(crawls[0].payload.courseId, '123');
+  },
+
   async 'a feedback vote keeps the Audit Another Page button (F14)'() {
     const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A } });
     await p.$('audit-btn').click();

From 2896bf9d3396e2c87a098cc58dcae288d8cdf8e8 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Thu, 24 Sep 2026 08:51:56 -0700
Subject: [PATCH 18/19] test: keep a retired CLI's name out of mutation 30n's
 comment

smoke-test's retired-CLI sweep flagged the reviewer bot's name in the
comment added with 30n.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 test/mutation-test.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 16eb334..5021ad0 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -1195,7 +1195,7 @@ expect_fail "Retry clicks the hidden course button" node "$WORK/r/test/test-side
 
 # 30n. Retry re-clicks the course button after a switch to another course root
 # -> test-sidepanel-state must fail. The button stays visible there, so 30m's
-# guard passes and Retry would audit the other course (Codex review on #109).
+# guard passes and Retry would audit the other course (automated review on #109).
 fresh
 python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
 import sys

From 6a6ca7848fb6b5bb3c442f508579544eba957a97 Mon Sep 17 00:00:00 2001
From: Philippos Savvides <whiplash@A2001609.local>
Date: Thu, 24 Sep 2026 09:05:10 -0700
Subject: [PATCH 19/19] fix(extension): one Retry guard, keyed on the course
 that failed

The course-target guard added in 2fa2f2e also covers the switch to a
non-course tab. That left the older hidden-button guard with one
effect of its own: on another page of the same course it stopped Retry
from re-running that course's audit, which is what Retry is for. CI's
mutation job showed the overlap: removing the old guard (30m) no longer
failed any test.

Retry now has a single guard. It proceeds only when the course now
shown is the one that failed. Mutation 30m targets that guard and fails
both switch scenarios, so 30n is folded into it. A new scenario pins the
same-course behavior.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                     |  4 ++--
 extension/sidepanel/sidepanel.js |  8 +++-----
 test/mutation-test.sh            | 23 +++++------------------
 test/test-sidepanel-state.mjs    | 15 +++++++++++++++
 4 files changed, 25 insertions(+), 25 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5d0712d..49cb773 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -39,7 +39,7 @@ To update: `cd` into your idstack clone, then `git pull && ./setup`. The Chrome
 ### Fixed — the side panel labelled, kept, or retried the wrong result
 
 - **A result could carry the wrong page's name.** A page audit is now labelled with the page that was sent, not whichever tab is active when the answer arrives, and a course audit is labelled with the course. A slow tab read can no longer overwrite a newer one.
-- **After an error, the previous result stayed actionable.** The error card now clears it and hides **Add to Dossier** and **Export .md** until the next successful audit. **Retry** re-runs the audit you started, page or course, instead of always running a page audit. If you have since moved to a different course, it goes back to the ready screen instead of auditing that course.
+- **After an error, the previous result stayed actionable.** The error card now clears it and hides **Add to Dossier** and **Export .md** until the next successful audit. **Retry** re-runs the audit you started, page or course, instead of always running a page audit. If the tab now shows a different course, or no course, Retry goes back to the ready screen instead of auditing it.
 - **A thumbs-up or thumbs-down vote also removed Audit Another Page.** Now only the vote buttons go.
 - **The copy buttons did not report a refused clipboard.** One said "Copied!" anyway and the other failed silently. Both now say "Copy failed".
 - **The results view crashed on findings that were not a list, on empty entries, or on a tier that was not text.** It now handles all three.
@@ -59,7 +59,7 @@ To update: `cd` into your idstack clone, then `git pull && ./setup`. The Chrome
 
 ### For contributors
 
-- **The mutation suite refuses a mutation that changes nothing.** Two cases whose anchors had gone stale kept reporting GUARDED because nothing checked that the mutation had edited anything. The suite now copies the repo once into a snapshot that its baseline smoke run vouches for, and stops on any mutation that leaves the copy unchanged. It grows from 36 cases to 109.
+- **The mutation suite refuses a mutation that changes nothing.** Two cases whose anchors had gone stale kept reporting GUARDED because nothing checked that the mutation had edited anything. The suite now copies the repo once into a snapshot that its baseline smoke run vouches for, and stops on any mutation that leaves the copy unchanged. It grows from 36 cases to 108.
 - **The retired-CLI sweep now covers `docs/superpowers/`.** `--exclude-dir=superpowers` matched that name at any depth and exempted every committed spec and plan.
 - **The extension tests run the shipped code.** They used to load hand-copied `.cjs` twins, which are gone, and `test-extension.sh` fails if one comes back. `test/extension-harness.mjs` stubs the Chrome APIs and a small DOM, so the tests import the shipped modules and now also run the background worker, storage, and side panel. `test/test-evidence-labels.mjs` checks every citation and tier against `evidence/references.md`. `test/test-disclosures.mjs` checks the side panel, PRIVACY.md, and README against the shipped code.
 - **The release workflow pins Node 22**, as the test and mutation jobs already did, and `test-extension.sh` stops with a clear message on a Node too old to import the modules (it needs 20.19+ or 22.7+). The extension suite also has its own CI step, so its full failure output shows.
diff --git a/extension/sidepanel/sidepanel.js b/extension/sidepanel/sidepanel.js
index 013f32b..960d046 100644
--- a/extension/sidepanel/sidepanel.js
+++ b/extension/sidepanel/sidepanel.js
@@ -234,11 +234,9 @@ export function renderError(errorMessage) {
   if (retryBtn) {
     retryBtn.addEventListener('click', () => {
       showState('ready');
-      // A tab switch can hide Audit Entire Course; re-clicking it would crawl,
-      // and ask for access to, whatever site is active now.
-      if (lastAuditBtn && lastAuditBtn.style.display === 'none') return;
-      // A switch to another course root keeps the button visible; re-clicking it would
-      // audit that course instead of the one that failed.
+      // The course button reads activeCourseContext when clicked. After a tab switch to
+      // another course, or off Canvas, re-clicking it would crawl, and ask for access
+      // to, whatever is active now instead of the course that failed.
       const ctx = activeCourseContext || {};
       if (lastCourseTarget && lastCourseTarget !== `${ctx.origin}/courses/${ctx.courseId}`) return;
       if (lastAuditBtn) lastAuditBtn.click();
diff --git a/test/mutation-test.sh b/test/mutation-test.sh
index 5021ad0..935ae4e 100755
--- a/test/mutation-test.sh
+++ b/test/mutation-test.sh
@@ -1179,23 +1179,10 @@ open(p, 'w', encoding='utf-8').write(s)
 PY
 expect_fail "Retry always runs the single-page audit" node "$WORK/r/test/test-sidepanel-state.mjs"
 
-# 30m. Retry clicks the hidden course button after a switch to a non-course tab
-# -> test-sidepanel-state must fail. It would crawl, and ask for access to,
-# whatever site is active now.
-fresh
-python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
-import sys
-p = sys.argv[1]; s = open(p, encoding='utf-8').read()
-old = "      if (lastAuditBtn && lastAuditBtn.style.display === 'none') return;\n"
-assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
-s = s.replace(old, "", 1)
-open(p, 'w', encoding='utf-8').write(s)
-PY
-expect_fail "Retry clicks the hidden course button" node "$WORK/r/test/test-sidepanel-state.mjs"
-
-# 30n. Retry re-clicks the course button after a switch to another course root
-# -> test-sidepanel-state must fail. The button stays visible there, so 30m's
-# guard passes and Retry would audit the other course (automated review on #109).
+# 30m. Retry re-clicks the course button after a tab switch -> test-sidepanel-state
+# must fail. The button reads the active course when clicked, so Retry would crawl,
+# and ask for access to, the course or site now active. Both switch scenarios (to a
+# non-course tab, and to another course root, which keeps the button visible) fail.
 fresh
 python3 - "$WORK/r/extension/sidepanel/sidepanel.js" <<'PY'
 import sys
@@ -1205,7 +1192,7 @@ assert s.count(old) == 1, 'anchor not unique: %d' % s.count(old)
 s = s.replace(old, "", 1)
 open(p, 'w', encoding='utf-8').write(s)
 PY
-expect_fail "Retry audits the course now active, not the one that failed" node "$WORK/r/test/test-sidepanel-state.mjs"
+expect_fail "Retry audits the course or site now active, not the one that failed" node "$WORK/r/test/test-sidepanel-state.mjs"
 
 # 30i. a feedback vote rewrites the whole row -> test-sidepanel-state must fail.
 # The row also holds Audit Another Page, the only way back to the ready state.
diff --git a/test/test-sidepanel-state.mjs b/test/test-sidepanel-state.mjs
index 1f81976..60a404e 100644
--- a/test/test-sidepanel-state.mjs
+++ b/test/test-sidepanel-state.mjs
@@ -157,6 +157,21 @@ const scenarios = {
     assert.strictEqual(crawls[0].payload.courseId, '123');
   },
 
+  async 'Retry from another page of the same course re-runs that course audit (F14)'() {
+    const root = 'https://x.instructure.com/courses/123';
+    const sub = 'https://x.instructure.com/courses/123/assignments/9';
+    const p = await loadPanel({ tab: { id: 1, url: root }, payloads: { 1: page('Home', root, 'Canvas LMS Page'), 2: page('Lab 9', sub) } });
+    await p.$('audit-course-btn').click();
+    await flush();
+    await p.reply({ success: false, error: 'Failed to fetch Canvas course info (401)' });
+    await p.switchTab({ id: 2, url: sub });
+    await p.$('error-retry-btn').click();
+    await flush();
+    const crawls = p.h.sent.filter((m) => m.action === 'CRAWL_AND_AUDIT_COURSE');
+    assert.strictEqual(crawls.length, 2, 'Retry re-runs the course that failed');
+    assert.strictEqual(crawls[1].payload.courseId, '123');
+  },
+
   async 'a feedback vote keeps the Audit Another Page button (F14)'() {
     const p = await loadPanel({ tab: { id: 1, url: A.url }, payloads: { 1: A } });
     await p.$('audit-btn').click();