Replace session storage with in-memory session state management

- Refactor send-prompt-content-script.ts and add-apply-response-button.ts to replace all sessionStorage calls (setItem, getItem, removeItem) with a newly created exported module-level variable (e.g. let session_state) to securely store the session data within the content script's isolated memory.

└── apps
    └── browser
        ├── README.md
        └── src
            ├── background
            │   ├── clear-chat-init-data.ts
            │   ├── main.ts
            │   └── message-handler.ts
            ├── content-scripts
            │   └── send-prompt-content-script
            │       ├── chatbots
            │       │   └── ai-studio.ts
            │       ├── send-prompt-content-script.ts
            │       └── utils
            │           ├── add-apply-response-button.ts
            │           └── session-state.ts
            └── manifest.json

Author: robertpiosik

apps/browser/src/content-scripts/send-prompt-content-script/send-prompt-content-script.ts

@@ -24,6 +24,7 @@ import {
   hugging_chat,
   z_ai
 } from './chatbots'
+import { session_state, set_session_state } from './utils/session-state'
 
 // In case url changes on load
 const current_url = window.location.href
@@ -176,8 +177,6 @@ const initialize_chat = async (params: { message: string; chat: Chat }) => {
 }
 
 const main = async () => {
-  const session_data_key = 'cwc-session-data'
-
   const hash = window.location.hash
   const is_cwc_hash = hash.startsWith(hash_prefix_new)
   const batch_id = hash.substring(hash_prefix_new.length + 1)
@@ -235,32 +234,27 @@ const main = async () => {
     if (chatbot?.setup_observer) {
       const inject_button = stored_data.inject_apply_response_button ?? false
 
-      sessionStorage.setItem(
-        session_data_key,
-        JSON.stringify({
-          client_id: stored_data.client_id,
-          raw_instructions: stored_data.raw_instructions,
-          inject_button
-        })
-      )
+      set_session_state({
+        client_id: stored_data.client_id,
+        raw_instructions: stored_data.raw_instructions,
+        inject_button
+      })
       chatbot.setup_observer({
         client_id: stored_data.client_id,
         raw_instructions: stored_data.raw_instructions,
         inject_button
       })
     } else {
-      sessionStorage.removeItem(session_data_key)
+      set_session_state(null)
     }
   } else {
-    const session_data_str = sessionStorage.getItem(session_data_key)
-    if (session_data_str && chatbot) {
+    if (session_state && chatbot) {
       try {
-        const session_data = JSON.parse(session_data_str)
         if (chatbot.setup_observer) {
           chatbot.setup_observer({
-            client_id: session_data.client_id,
-            raw_instructions: session_data.raw_instructions,
-            inject_button: session_data.inject_button ?? true
+            client_id: session_state.client_id,
+            raw_instructions: session_state.raw_instructions,
+            inject_button: session_state.inject_button ?? true
           })
         }
       } catch (e) {

apps/browser/src/content-scripts/send-prompt-content-script/utils/add-apply-response-button.ts

@@ -7,6 +7,7 @@ import {
   set_button_disabled_state
 } from './apply-response-styles'
 import { show_response_ready_notification } from './show-response-ready-notification'
+import { session_state } from './session-state'
 
 export function add_apply_response_button(params: {
   client_id: string
@@ -40,12 +41,10 @@ export function add_apply_response_button(params: {
       let raw_instructions = params.raw_instructions
 
       try {
-        const session_data_str = sessionStorage.getItem('cwc-session-data')
-        if (session_data_str) {
-          const session_data = JSON.parse(session_data_str)
-          if (session_data.client_id !== undefined) {
-            client_id = session_data.client_id
-            raw_instructions = session_data.raw_instructions
+        if (session_state) {
+          if (session_state.client_id !== undefined) {
+            client_id = session_state.client_id
+            raw_instructions = session_state.raw_instructions
           }
         }
       } catch (error) {

apps/browser/src/content-scripts/send-prompt-content-script/utils/session-state.ts

@@ -0,0 +1,9 @@
+export let session_state: {
+  client_id: string
+  raw_instructions?: string
+  inject_button?: boolean
+} | null = null
+
+export const set_session_state = (state: typeof session_state) => {
+  session_state = state
+}