Merge feature/browser-extension: add-to-cart browser extension + token auth

Author: mayur-tolexo

cmd/shoplit-api/main.go

@@ -18,6 +18,7 @@ import (
 	"github.com/mayur-tolexo/shoplit/internal/config"
 	"github.com/mayur-tolexo/shoplit/internal/db"
 	sqlcgen "github.com/mayur-tolexo/shoplit/internal/db/sqlc"
+	"github.com/mayur-tolexo/shoplit/internal/exttoken"
 	"github.com/mayur-tolexo/shoplit/internal/httpx"
 	"github.com/mayur-tolexo/shoplit/internal/ogfetch"
 	"github.com/mayur-tolexo/shoplit/internal/publicapi"
@@ -60,13 +61,15 @@ func run() error {
 
 	q := sqlcgen.New(pool)
 
+	sm := auth.NewSessionManager(cfg.SessionSecret).
+		WithSecure(cfg.CookieSecure).
+		WithBearerResolver(exttoken.Resolver(q))
+
 	rc, err := redis.Open(ctx, cfg.RedisURL)
 	if err != nil {
 		return err
 	}
 	defer rc.Close()
-
-	sm := auth.NewSessionManager(cfg.SessionSecret).WithSecure(cfg.CookieSecure)
 	upsert := auth.NewUserUpsertFn(q)
 	fetcher := ogfetch.New(rc)
 	svc := carts.NewService(q)
@@ -101,6 +104,7 @@ func run() error {
 	// Authenticated creator endpoints
 	r.Route("/api/v1", func(r chi.Router) {
 		r.Use(sm.RequireUser())
+		r.Post("/extension/token", exttoken.MintHandler(q))
 		carts.RegisterRoutes(r, svc, fetcher)
 	})
 

extension/.gitignore

@@ -0,0 +1,2 @@
+node_modules/
+dist/

extension/README.md

@@ -0,0 +1,36 @@
+# shoplit extension (dev)
+
+## Dev load
+
+1. `npm install && npm run build`
+2. Chrome → chrome://extensions → enable Developer mode → "Load unpacked" → select `extension/dist`.
+3. Copy the extension ID Chrome shows; set `NEXT_PUBLIC_EXTENSION_ID` for the web app (and rebuild the connect page) so the auto-handoff works. Without it, the copy-paste fallback is used.
+4. Sign in at https://shoplit.in, open https://shoplit.in/connect-extension to connect.
+5. Visit a product page on Nykaa/Myntra/Amazon/Flipkart/AJIO → click the toolbar icon or the "＋ shoplit" button → pick a cart → Add.
+
+## Connect flow
+
+- Navigating to `/connect-extension` while signed in mints a Bearer token via `POST /api/v1/extension/token`.
+- If the extension is detected (via `externally_connectable`), the token is handed off directly using `chrome.runtime.sendMessage` → the service worker stores it in `chrome.storage.local`.
+- If the extension is not detected (e.g., first load before granting permission, or a version mismatch), a copy-paste fallback is shown: copy the token and paste it into the extension popup manually.
+
+## Manual E2E checklist
+
+Record results in the PR description. For each retailer (Nykaa, Myntra, Amazon.in, Flipkart, AJIO):
+
+- [ ] Open a product page; confirm the "＋ shoplit" floating button appears within 2 seconds of page load.
+- [ ] Click the toolbar icon; confirm the popup shows the correct title, image, and price (populated from JSON-LD or OG tags).
+- [ ] Select a cart from the dropdown and click "＋ Add to cart"; confirm the request succeeds (no error message).
+- [ ] Open the cart's `/c/{slug}` page and confirm the product appears with title, image, and price.
+- [ ] Confirm the product's "Shop" link redirects to the original product URL on the retailer site.
+
+Expected: title + image populate on at least JSON-LD retailers (Nykaa, Amazon); price where present. Where a field is missing, the inline edit lets the user fix it before adding.
+
+## Build and test
+
+```bash
+cd extension
+npm install
+npm run build    # esbuild → dist/
+npx vitest run  # retailer classification + product extraction tests
+```

extension/build.mjs

@@ -0,0 +1,24 @@
+// extension/build.mjs
+import { build } from "esbuild";
+import { cp, mkdir, rm } from "node:fs/promises";
+
+await rm("dist", { recursive: true, force: true });
+await mkdir("dist", { recursive: true });
+
+await build({
+  entryPoints: {
+    "service-worker": "src/service-worker.ts",
+    content: "src/content.ts",
+    popup: "src/popup.ts",
+  },
+  outdir: "dist",
+  bundle: true,
+  format: "esm",
+  target: "chrome114",
+  logLevel: "info",
+});
+
+await cp("manifest.json", "dist/manifest.json");
+await cp("src/popup.html", "dist/popup.html");
+await cp("icons", "dist/icons", { recursive: true }).catch(() => {});
+console.log("built → dist/");

extension/manifest.json

@@ -0,0 +1,33 @@
+{
+  "manifest_version": 3,
+  "name": "shoplit — add to cart",
+  "version": "0.1.0",
+  "description": "Add any product to your shoplit cart from Amazon, Myntra, Nykaa, Flipkart, AJIO.",
+  "action": { "default_popup": "popup.html", "default_title": "Add to shoplit" },
+  "background": { "service_worker": "service-worker.js", "type": "module" },
+  "permissions": ["activeTab", "scripting", "storage"],
+  "host_permissions": [
+    "https://shoplit.in/*",
+    "https://*.nykaa.com/*",
+    "https://*.myntra.com/*",
+    "https://*.amazon.in/*",
+    "https://*.amazon.com/*",
+    "https://*.flipkart.com/*",
+    "https://*.ajio.com/*"
+  ],
+  "content_scripts": [
+    {
+      "matches": [
+        "https://*.nykaa.com/*",
+        "https://*.myntra.com/*",
+        "https://*.amazon.in/*",
+        "https://*.amazon.com/*",
+        "https://*.flipkart.com/*",
+        "https://*.ajio.com/*"
+      ],
+      "js": ["content.js"],
+      "run_at": "document_idle"
+    }
+  ],
+  "externally_connectable": { "matches": ["https://shoplit.in/*"] }
+}