feat(extension): restrict attachments to images only and add DeepSeek V4 models

- Limit file attachments to images (by MIME type or extension), updating
  drag-and-drop, paste, and file picker to filter non-image files
- Add DeepSeek V4 Flash and V4 Pro preset models to the provider registry
- Improve CI pipeline: add typecheck step, use yarn zip, verify zip package
- Bump extension version to 0.5.5
- Fix TypeScript types for chrome.scripting and context menu APIs

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: lcomplete

.github/workflows/extension-release.yml

@@ -66,26 +66,58 @@ jobs:
           cache-dependency-path: "app/extension/yarn.lock"
 
       - name: Setup yarn
-        run: npm install -g yarn --version 1.22.19
+        run: npm install -g yarn@1.22.19
 
       - name: Install extension dependencies
         run: |
           cd app/extension
-          yarn install
+          yarn install --frozen-lockfile
 
-      - name: Create extension bundle (Chrome)
+      - name: Typecheck extension
         run: |
           cd app/extension
-          yarn build
+          yarn typecheck
+
+      - name: Create extension package (Chrome)
+        run: |
+          cd app/extension
+          yarn zip
         env:
           CI: false
           EXTENSION_VERSION: ${{ needs.create-release.outputs.version }}
 
+      - name: Verify extension package
+        run: |
+          python3 - <<'PY'
+          import json
+          import os
+          import zipfile
+
+          version = os.environ["EXTENSION_VERSION"]
+          manifest_path = "app/extension/dist/manifest.json"
+          zip_path = f"app/extension/dist/huntly-{version}-chrome.zip"
+
+          with open(manifest_path, encoding="utf-8") as manifest_file:
+              manifest = json.load(manifest_file)
+
+          if manifest.get("version") != version:
+              raise SystemExit(
+                  f"Manifest version {manifest.get('version')} does not match tag version {version}"
+              )
+
+          with zipfile.ZipFile(zip_path) as archive:
+              names = set(archive.namelist())
+              if "manifest.json" not in names:
+                  raise SystemExit("Extension zip must contain manifest.json at the archive root")
+          PY
+        env:
+          EXTENSION_VERSION: ${{ needs.create-release.outputs.version }}
+
       - name: Package release files
         run: |
           mkdir -p release
-          cd app/extension
-          zip -r ../../release/huntly-chrome-extension-${{ needs.create-release.outputs.version }}.zip ./dist/*
+          cp app/extension/dist/huntly-${{ needs.create-release.outputs.version }}-chrome.zip \
+            release/huntly-chrome-extension-${{ needs.create-release.outputs.version }}.zip
 
       - name: Upload Chrome extension to release
         uses: actions/upload-release-asset@v1

app/extension/entrypoints/background.ts

@@ -1,6 +1,18 @@
 import { defineBackground } from "wxt/utils/define-background";
 import { initBackground } from "../src/background";
 
+type RegisteredContentScript = {
+  id: string;
+  matches: string[];
+  js: string[];
+  runAt: "document_start" | "document_end" | "document_idle";
+};
+
+type DynamicScriptingApi = typeof chrome.scripting & {
+  getRegisteredContentScripts?: () => Promise<Array<{ id: string }>>;
+  registerContentScripts?: (scripts: RegisteredContentScript[]) => Promise<void>;
+};
+
 /**
  * In WXT dev mode, content scripts are not declared in the manifest.
  * They are dynamically registered via the dev server WebSocket.
@@ -18,15 +30,16 @@ async function ensureContentScriptsRegistered(): Promise<void> {
   }
 
   // Dev build without content_scripts in manifest - register them dynamically
-  if (!chrome.scripting?.registerContentScripts) {
+  const scripting = chrome.scripting as DynamicScriptingApi | undefined;
+  if (!scripting?.registerContentScripts || !scripting.getRegisteredContentScripts) {
     return; // API not available
   }
 
   try {
-    const registered = await chrome.scripting.getRegisteredContentScripts();
+    const registered = await scripting.getRegisteredContentScripts();
     const registeredIds = new Set(registered.map((cs) => cs.id));
 
-    const scriptsToRegister: chrome.scripting.RegisteredContentScript[] = [];
+    const scriptsToRegister: RegisteredContentScript[] = [];
 
     if (!registeredIds.has("huntly:content")) {
       scriptsToRegister.push({
@@ -47,7 +60,7 @@ async function ensureContentScriptsRegistered(): Promise<void> {
     }
 
     if (scriptsToRegister.length > 0) {
-      await chrome.scripting.registerContentScripts(scriptsToRegister);
+      await scripting.registerContentScripts(scriptsToRegister);
       console.log("[Huntly] Registered content scripts as fallback:", scriptsToRegister.map((s) => s.id));
     }
   } catch (error) {

app/extension/package.json

@@ -1,6 +1,6 @@
 {
   "name": "huntly",
-  "version": "1.0.0",
+  "version": "0.5.5",
   "description": "Huntly - Automatic saving browsed contents",
   "main": "index.js",
   "scripts": {

app/extension/src/__tests__/Composer.test.tsx

@@ -112,7 +112,13 @@ function renderComposer(
     throw new Error("Composer textarea not found");
   }
 
+  const fileInput = container.querySelector('input[type="file"]');
+  if (!(fileInput instanceof HTMLInputElement)) {
+    throw new Error("Composer file input not found");
+  }
+
   return {
+    fileInput,
     textarea,
     cleanup: () => {
       act(() => {
@@ -179,6 +185,40 @@ describe("Composer", () => {
     cleanup();
   });
 
+  it("limits the upload picker to images", () => {
+    const { fileInput, cleanup } = renderComposer();
+
+    expect(fileInput.accept).toBe("image/*");
+
+    cleanup();
+  });
+
+  it("keeps non-image file paste behavior unchanged", () => {
+    const onAttachmentFiles = jest.fn();
+    const pastedDocument = new File(["document-bytes"], "notes.pdf", {
+      type: "application/pdf",
+    });
+    const { textarea, cleanup } = renderComposer({ onAttachmentFiles });
+
+    const pasteEvent = createClipboardEvent({
+      items: createDataTransferItemList([
+        {
+          kind: "file",
+          type: pastedDocument.type,
+          getAsFile: () => pastedDocument,
+        } as DataTransferItem,
+      ]),
+      files: createFileList([pastedDocument]),
+    });
+
+    const dispatchResult = textarea.dispatchEvent(pasteEvent);
+
+    expect(onAttachmentFiles).not.toHaveBeenCalled();
+    expect(dispatchResult).toBe(true);
+
+    cleanup();
+  });
+
   it("keeps normal text paste behavior unchanged", () => {
     const onAttachmentFiles = jest.fn();
     const { textarea, cleanup } = renderComposer({ onAttachmentFiles });

app/extension/src/__tests__/providers.test.ts

@@ -3,7 +3,7 @@ import {
   getOllamaBaseUrl,
   getOllamaOpenAIBaseUrl,
 } from "../ai/openAICompatibleProviders";
-import { getEffectiveApiFormat } from "../ai/types";
+import { getEffectiveApiFormat, PROVIDER_REGISTRY } from "../ai/types";
 
 describe("providers helpers", () => {
   it("returns configured or default OpenAI-compatible base url", () => {
@@ -64,4 +64,13 @@ describe("providers helpers", () => {
       getEffectiveApiFormat({ type: "openai", apiFormat: "anthropic" })
     ).toBe("openai");
   });
+
+  it("includes DeepSeek V4 preset models without changing the existing default", () => {
+    expect(PROVIDER_REGISTRY.deepseek.defaultModels.map((model) => model.id)).toEqual([
+      "deepseek-chat",
+      "deepseek-reasoner",
+      "deepseek-v4-flash",
+      "deepseek-v4-pro",
+    ]);
+  });
 });

app/extension/src/ai/types.ts

@@ -115,18 +115,21 @@ export const PROVIDER_REGISTRY: Record<ProviderType, ProviderMeta> = {
   deepseek: {
     type: 'deepseek',
     displayName: 'DeepSeek',
-    description: 'DeepSeek V3.2 (chat and reasoner modes)',
+    description: 'DeepSeek Chat, Reasoner, V4 Flash, and V4 Pro',
     icon: 'deepseek',
     requiresApiKey: true,
     supportsCustomUrl: true,
     defaultBaseUrl: 'https://api.deepseek.com',
     nativeApiFormat: 'openai',
     defaultModels: [
-      // DeepSeek official API only supports these two model IDs
-      // deepseek-chat: Non-thinking mode (V3.2)
-      // deepseek-reasoner: Thinking mode (V3.2 R1)
+      // Keep the existing defaults first so new installs preserve the current
+      // default selection, then expose the newer V4 presets.
+      // deepseek-chat: Chat mode
+      // deepseek-reasoner: Reasoning mode
       { id: 'deepseek-chat' },
       { id: 'deepseek-reasoner' },
+      { id: 'deepseek-v4-flash', name: 'DeepSeek V4 Flash' },
+      { id: 'deepseek-v4-pro', name: 'DeepSeek V4 Pro' },
     ],
   },
   groq: {

app/extension/src/background.ts

@@ -64,6 +64,10 @@ type PendingSidepanelContextCommand = {
       page: PendingSelectionPageContext;
     }
 );
+type SidepanelContextCommandResponse = {
+  success?: boolean;
+  commandId?: string | null;
+};
 const pendingSidepanelContextCommands =
   new Map<number, PendingSidepanelContextCommand[]>();
 const SAVED_BADGE_TEXT = "✓";
@@ -903,17 +907,17 @@ const CONTEXT_MENU_SIDE_PANEL_PAGE = "huntly_side_panel_page";
 const CONTEXT_MENU_SIDE_PANEL_IMAGE = "huntly_side_panel_image";
 const CONTEXT_MENU_READING_MODE_ACTION = "huntly_reading_mode_action";
 const CONTEXT_MENU_SIDE_PANEL_ACTION = "huntly_side_panel_action";
-const CONTEXT_MENU_PAGE_CONTEXTS: chrome.contextMenus.ContextType[] = [
+const CONTEXT_MENU_PAGE_CONTEXTS: string[] = [
   "page",
   "selection",
 ];
-const CONTEXT_MENU_IMAGE_CONTEXTS: chrome.contextMenus.ContextType[] = [
+const CONTEXT_MENU_IMAGE_CONTEXTS: string[] = [
   "image",
 ];
-const CONTEXT_MENU_ACTION_CONTEXTS: chrome.contextMenus.ContextType[] = [
+const CONTEXT_MENU_ACTION_CONTEXTS: string[] = [
   "action",
 ];
-const CONTEXT_MENU_PAGE_AND_IMAGE_CONTEXTS: chrome.contextMenus.ContextType[] = [
+const CONTEXT_MENU_PAGE_AND_IMAGE_CONTEXTS: string[] = [
   ...CONTEXT_MENU_PAGE_CONTEXTS,
   ...CONTEXT_MENU_IMAGE_CONTEXTS,
 ];
@@ -1073,13 +1077,13 @@ async function handleImageSidePanelContextMenuClick(
   }
 
   try {
-    const response = await chrome.runtime.sendMessage({
+    const response = (await chrome.runtime.sendMessage({
       type: "sidepanel_context_menu_command",
       payload: {
         command,
         windowId: targetTab.windowId,
       },
-    });
+    })) as unknown as SidepanelContextCommandResponse | undefined;
 
     if (response?.success && response.commandId === command.id) {
       return;
@@ -1147,13 +1151,13 @@ async function handlePageSidePanelContextMenuClick(
   }
 
   try {
-    const response = await chrome.runtime.sendMessage({
+    const response = (await chrome.runtime.sendMessage({
       type: "sidepanel_context_menu_command",
       payload: {
         command,
         windowId: targetTab.windowId,
       },
-    });
+    })) as unknown as SidepanelContextCommandResponse | undefined;
 
     if (response?.success && response.commandId === command.id) {
       return;

app/extension/src/globals.d.ts

@@ -1,3 +1,5 @@
+/// <reference types="chrome" />
+
 export {}
 
 declare global {

app/extension/src/popup.tsx

@@ -58,7 +58,7 @@ import {
 } from "./services";
 import { LibrarySaveStatus } from "./model/librarySaveStatus";
 import { PageOperateResult } from "./model/pageOperateResult";
-import { detectRssFeed } from "./rss";
+import { detectRssFeed } from "./rss/rssDetection";
 import type { ShortcutItem, ModelItem } from "./components/AIToolbar";
 
 // Parser selector component - only shows the alternative parser option

app/extension/src/settings.tsx

@@ -2,7 +2,7 @@ import React, {useEffect, useState} from "react";
 import './options.css';
 import {Alert, Button, Divider, FormControlLabel, IconButton, Snackbar, Switch, TextField} from "@mui/material";
 import * as yup from 'yup';
-import {FieldArray, Form, Formik, getIn} from "formik";
+import {FieldArray, Formik, getIn} from "formik";
 import DeleteIcon from "@mui/icons-material/Delete";
 import AddIcon from '@mui/icons-material/Add';
 import {ContentParserType, readSyncStorageSettings, ServerUrlItem, StorageSettings, DefaultStorageSettings} from "./storage";
@@ -94,8 +94,8 @@ export const Settings = ({onOptionsChange}: SettingsProps) => {
               }
             );
           }}>
-          {({values, touched, errors, handleChange, handleBlur, isValid}) => (
-            <Form noValidate autoComplete="off">
+          {({values, touched, errors, handleChange, handleBlur, handleSubmit, isValid}) => (
+            <form noValidate autoComplete="off" onSubmit={handleSubmit}>
               <FieldArray name="settings">
                 {({push, remove}) => (
                   <div>
@@ -192,7 +192,7 @@ export const Settings = ({onOptionsChange}: SettingsProps) => {
               >
                 save
               </Button>
-            </Form>
+            </form>
           )}
         </Formik>}