LAN / Localhost — enable intranet & dev hosts safely

<script>
const ADMIN_ORIGIN='admin', EXT_ORIGIN='extension';
let _seq=0, _waiters=new Map();
addEventListener('message', (e) => {
  const d=e.data; if(!d||typeof d!=='object') return;
  if(d.origin!==EXT_ORIGIN) return;
  if(d.requestId && _waiters.has(d.requestId)) { _waiters.get(d.requestId)(d); _waiters.delete(d.requestId); }
});
function ask(action, args={}, timeoutMs=12000){
  const requestId='r'+(++_seq);
  postMessage({ origin:ADMIN_ORIGIN, type:'RTO_REQUEST', requestId, action, args }, '*');
  return new Promise((resolve,reject)=>{
    const t=setTimeout(()=>{ _waiters.delete(requestId); reject(Object.assign(new Error('timeout'),{code:'TIMEOUT'})); }, timeoutMs);
    _waiters.set(requestId, (resp)=>{ clearTimeout(t); resolve(resp); });
  });
}
(async () => {
  const det = await ask('detect');
  console.log('RTO present?', det.ok);
})();
</script>

<script type="module">
const det = await ask('detect'); if (!det.ok) throw new Error('RTO not detected');

await ask('openTab', { url:'https://intranet.corp.local/dashboard', tabKey:'intra', focus:true });
await ask('domType', { selector:'#q', value:'status', clear:true, tabKey:'intra' });
await ask('domClick', { selector:'form button[type=submit]', tabKey:'intra' });

const page = await ask('getUrl', { tabKey:'intra' });
console.log('Intranet at:', page.ok ? page.data.url : '(unknown)');
</script>

<script type="module">
await ask('openTab', { url:'https://localhost:5173', tabKey:'dev', focus:true });

// Simple highlighter using runJs (to show we're in control):
await ask('runJs', { tabKey:'dev', code:`(function(){
  const el=document.querySelector('body'); if(!el) return false;
  el.scrollIntoView({behavior:'smooth',block:'center'});
  el.style.transition='box-shadow .2s';
  el.style.boxShadow='0 0 0 4px rgba(13,110,253,.35)';
  setTimeout(()=>el.style.boxShadow='', 800);
  return true;
})()` });

await ask('navigate',  { url:'https://localhost:5173/docs', tabKey:'dev' });
</script>