fix(extension): visit short hosts when a signed-in panel is ready

Installing signed out and signing in through the panel left go/ and sim/ untaught until the next browser start. Prove it end to end: nothing is visited signed out, and each host is visited once after sign-in.

Author: waleedlatif1

apps/docs/content/docs/search/sim-links.mdx

@@ -21,7 +21,7 @@ For suggestions, type `sim`, press **Space**, and enter part of a name. Matching
 
 ### If a shortcut opens search
 
-This can happen if you installed the extension while signed out, or just cleared your browsing history. Opening the Sim extension once signed in fixes the first case, and the second fixes itself within a week. Until then, a trailing slash (`go/handbook/`) or `http://go/handbook` tells Chrome to navigate directly.
+This can happen if you installed the extension while signed out, or just cleared your browsing history. Opening the Sim extension and signing in fixes the first case, and the second fixes itself within a week. Until then, a trailing slash (`go/handbook/`) or `http://go/handbook` tells Chrome to navigate directly.
 
 To catch these searches automatically, open the extension’s **+ → Browser shortcuts** and turn on your search engine. Approve Chrome’s site-access prompt if shown. Google (`google.com`), Bing, DuckDuckGo, and Yahoo are supported. Other searches and your default search engine stay unchanged.
 

apps/extension/README.md

@@ -30,7 +30,7 @@ SIM_EXTENSION_DEV=1 SIM_EXTENSION_ORIGIN=http://localhost:3000 bun run --cwd app
 ## Data and permissions
 
 - Required capabilities: `activeTab`, `scripting`, `sidePanel`, `storage`, `contextMenus`, `declarativeNetRequestWithHostAccess`, and access to the configured Sim origin and to `http(s)://sim/*` and `http(s)://go/*`.
-- Type `sim`, press Space, enter the name, and press Enter to open an organization's [link](https://docs.sim.ai/search/sim-links). `go/<name>` opens the same link. Chrome treats bare `go/<name>` or `sim/<name>` as a search until its history holds that short host, so on install, and at browser start once a week, the extension opens `http://go/` and `http://sim/` in background tabs that close themselves. It does this only once Sim says links are on for the signed-in session, so `go/x` stays an ordinary search for everyone else; opening the side panel checks again. Chrome counts a visit to an unfamiliar single-label host as typed, which is what the address bar checks, and repeating covers history that expires after 90 days or is cleared. A trailing slash (`go/<name>/`) always selects navigation. A single static redirect rule rewrites top-level navigations to `http(s)://sim/*` and `http(s)://go/*` to `<Sim origin>/sim/*` with the path and query unchanged. The `sim` and `go` host permissions exist only for that rule: every navigation to those hosts is redirected before it loads, and no other request is matched or observed. An organization that already serves an intranet host named `sim` or `go` should not install this build, since its links would be redirected to Sim. When another extension (such as another go-links tool) also redirects `go/`, Chrome applies the most recently installed extension's rule.
+- Type `sim`, press Space, enter the name, and press Enter to open an organization's [link](https://docs.sim.ai/search/sim-links). `go/<name>` opens the same link. Chrome treats bare `go/<name>` or `sim/<name>` as a search until its history holds that short host, so on install, and at browser start once a week, the extension opens `http://go/` and `http://sim/` in background tabs that close themselves. It does this only once Sim says links are on for the signed-in session, so `go/x` stays an ordinary search for everyone else; signing in through the side panel checks again. Chrome counts a visit to an unfamiliar single-label host as typed, which is what the address bar checks, and repeating covers history that expires after 90 days or is cleared. A trailing slash (`go/<name>/`) always selects navigation. A single static redirect rule rewrites top-level navigations to `http(s)://sim/*` and `http(s)://go/*` to `<Sim origin>/sim/*` with the path and query unchanged. The `sim` and `go` host permissions exist only for that rule: every navigation to those hosts is redirected before it loads, and no other request is matched or observed. An organization that already serves an intranet host named `sim` or `go` should not install this build, since its links would be redirected to Sim. When another extension (such as another go-links tool) also redirects `go/`, Chrome applies the most recently installed extension's rule.
 - The `sim` address-bar keyword (`sim`, then Space) lists matching Sim links while you type and opens what you enter through the same resolver. For these suggestions, the background worker sends the text typed before the first `/` or `?`, and nothing else, unless that text contains a space (a search) or is longer than a link name can be, to `<Sim origin>/api/sim-links/suggestions` with the signed-in session, and the extension's content security policy allows connections to that origin alone. Unlisted links are never suggested.
 - **+ → Browser shortcuts** separately opts into recovery for exact Google, Bing, DuckDuckGo, or Yahoo HTTPS search hosts. After a direct Chrome permission grant, dynamic request rules redirect only top-level GET requests with one query parameter containing a whole `go/<name>` or `sim/<name>` shortcut. Only that value reaches `/sim-links/recover`, which validates it and redirects to the existing authenticated resolver. Ordinary search terms, additional search parameters, subframes, and unsupported inputs are not forwarded. Chrome applies these rules without an extension search-URL observer. Turning a provider off removes its rules while preserving site access; revoking access clears its recovery choice. This does not enable page reference or change the default search provider.
 - Optional HTTP/HTTPS access is requested together by **Allow across websites**, from a direct user action. Chrome's `activeTab` access is temporary and does not follow arbitrary new sites.

apps/extension/scripts/test-e2e.ts

@@ -30,6 +30,8 @@ const checks: { name: string; status: 'passed' | 'failed'; durationMs: number; e
 const secretReveal = renderToStaticMarkup(
   createElement(SecretReveal, { value: 'SECRET_REVEAL_SENTINEL' })
 )
+let linksChecks = 0
+let shortHostVisits = 0
 const fixture = Bun.serve({
   hostname: '127.0.0.1',
   port: 0,
@@ -39,8 +41,14 @@ const fixture = Bun.serve({
       return new Response('Fixture session created', {
         headers: { 'set-cookie': 'fixture-session=present; Path=/; HttpOnly; SameSite=Lax' },
       })
-    if (url.pathname === SIM_LINK_SUGGESTIONS_PATH)
-      return Response.json({ enabled: true, links: [] })
+    if (url.pathname === SIM_LINK_SUGGESTIONS_PATH) {
+      linksChecks += 1
+      return Response.json({
+        enabled: request.headers.get('cookie')?.includes('fixture-session=present') === true,
+        links: [],
+      })
+    }
+    if (url.pathname === '/sim/') shortHostVisits += 1
     if (url.pathname === '/extension')
       return new Response(
         `<!doctype html><html><body>
@@ -212,22 +220,14 @@ try {
   const worker = context.serviceWorkers()[0] ?? (await context.waitForEvent('serviceworker'))
   context.setDefaultTimeout(15_000)
   const extensionId = worker.url().split('/')[2]
-  await check('Installing visits each short host in tabs that close themselves', async () => {
-    await expect
-      .poll(
-        () =>
-          worker.evaluate(
-            async () =>
-              typeof (await chrome.storage.local.get('shortHostsVisitedAt')).shortHostsVisitedAt
-          ),
-        { timeout: 30_000 }
-      )
-      .toBe('number')
-    const leftBehind = await worker.evaluate(
-      async (simLinks) => (await chrome.tabs.query({ url: simLinks })).length,
-      ['http://go/*', 'http://sim/*', `${origin}/sim*`]
+  const shortHostsVisitedAt = () =>
+    worker.evaluate(
+      async () => typeof (await chrome.storage.local.get('shortHostsVisitedAt')).shortHostsVisitedAt
     )
-    assert(leftBehind === 0, 'Short host tabs were left open')
+  await check('Installing signed out leaves go/ and sim/ as ordinary searches', async () => {
+    await expect.poll(() => linksChecks, { timeout: 30_000 }).toBeGreaterThan(0)
+    assert((await shortHostsVisitedAt()) === 'undefined', 'Visits were recorded while signed out')
+    assert(shortHostVisits === 0, 'Short hosts were visited while signed out')
   })
   const signIn = await context.newPage()
   await signIn.goto(`${origin}/sign-in`)
@@ -523,6 +523,18 @@ try {
     )
     await page.reload()
   })
+  await check(
+    'A signed-in panel visits each short host in tabs that close themselves',
+    async () => {
+      await expect.poll(shortHostsVisitedAt, { timeout: 30_000 }).toBe('number')
+      assert(shortHostVisits === SIM_LINK_HOSTS.length, `Visited ${shortHostVisits} short hosts`)
+      const leftBehind = await worker.evaluate(
+        async (simLinks) => (await chrome.tabs.query({ url: simLinks })).length,
+        ['http://go/*', 'http://sim/*', `${origin}/sim/`]
+      )
+      assert(leftBehind === 0, 'Short host tabs were left open')
+    }
+  )
   await check(
     'An expired toolbar intent asks for a fresh capture without delivering content',
     async () => {

apps/extension/src/config.ts

@@ -3,6 +3,7 @@ export const SIM_ORIGIN = __SIM_ORIGIN__
 export const PAGE_ACCESS_ORIGINS = ['https://*/*', 'http://*/*']
 export const REFERENCE_PAGE_KEY = 'referenceCurrentPage'
 export const OPEN_SIM_COMMAND = 'open-sim'
+export const VISIT_SHORT_HOSTS_MESSAGE = 'visit-short-hosts'
 export const CAPTURE_INTENT_KEY = 'captureIntent'
 export const CAPTURE_INTENT_TTL_MS = 30_000
 export const captureIntentKey = (windowId: number, intentId: string) =>

apps/extension/src/short-hosts.ts

@@ -4,7 +4,7 @@ import {
   simLinkSuggestionsSchema,
 } from '@sim/browser-extension-protocol'
 import { createLogger } from '@sim/logger'
-import { SIM_ORIGIN } from '@/config'
+import { SIM_ORIGIN, VISIT_SHORT_HOSTS_MESSAGE } from '@/config'
 
 const logger = createLogger('ShortHosts')
 const VISITED_AT_KEY = 'shortHostsVisitedAt'
@@ -74,6 +74,8 @@ export function registerShortHostVisits() {
   }
   chrome.runtime.onInstalled.addListener(visit)
   chrome.runtime.onStartup.addListener(visit)
-  // Installing signed out leaves nothing to learn yet, so opening Sim is the next chance.
-  chrome.action.onClicked.addListener(visit)
+  // Installing signed out leaves nothing to learn yet, so a signed-in panel is the next chance.
+  chrome.runtime.onMessage.addListener((message: unknown, sender) => {
+    if (sender.id === chrome.runtime.id && message === VISIT_SHORT_HOSTS_MESSAGE) visit()
+  })
 }

apps/extension/src/sidepanel.tsx

@@ -13,7 +13,13 @@ import {
   SiteAccessRequiredError,
   UnreadableSelectionError,
 } from '@/capture'
-import { CAPTURE_INTENT_KEY, CAPTURE_INTENT_TTL_MS, REFERENCE_PAGE_KEY, SIM_ORIGIN } from '@/config'
+import {
+  CAPTURE_INTENT_KEY,
+  CAPTURE_INTENT_TTL_MS,
+  REFERENCE_PAGE_KEY,
+  SIM_ORIGIN,
+  VISIT_SHORT_HOSTS_MESSAGE,
+} from '@/config'
 import { type CaptureIntent, captureIntentSchema } from '@/intent'
 import { createReferenceCapture, PAGE_ATTACHMENT_PENDING_MESSAGE } from '@/reference'
 import { SearchRecoveryDialog } from '@/search-recovery-dialog'
@@ -329,6 +335,7 @@ function SidePanel({ origin }: SidePanelProps) {
         applyTheme()
       } else if (parsed.data.type === 'ready') {
         void connect(parsed.data.sessionId)
+        void chrome.runtime.sendMessage(VISIT_SHORT_HOSTS_MESSAGE).catch(() => undefined)
       } else if (parsed.data.sessionId !== sessionRef.current) {
         return
       } else if (parsed.data.type === 'unavailable') {

apps/sim/lib/api/contracts/sim-links.ts

@@ -6,7 +6,7 @@ import {
 import { z } from 'zod'
 import { defineRouteContract } from '@/lib/api/contracts'
 import { organizationIdSchema } from '@/lib/api/contracts/primitives'
-import { SIM_LINK_SORTS, simLinkFieldsSchema, simLinkNameSchema } from '@/lib/sim-links/validation'
+import { SIM_LINK_SORTS, simLinkFieldsSchema } from '@/lib/sim-links/validation'
 import { SORT_DIRECTIONS } from '@/lib/url-state'
 
 const params = z.object({ id: organizationIdSchema })