/whatsapp-extension-react.
Responsibilities
- capture contact/chat context from WhatsApp Web
- sync selected data into DealDash backend
- support auth-aware interactions with DealDash APIs
High-Risk Areas
- auth token propagation and refresh behavior
- permissions declared in
public/manifest.json - message/contact parsing assumptions from WhatsApp DOM
Auth Persistence
WhatsApp extension auth is intentionally sticky. It should stay stored across browser restart, WhatsApp reload, DealDash refresh, and temporary DealDash localStorage hydration gaps. The DealDash content script must not clear extension auth only because localStorage is briefly empty. Auth clears only after explicit website logout through the same-originDEALDASH_EXTENSION_LOGOUT event or explicit logout from inside the extension.
Change Workflow
Validation
- extension builds without errors
- auth flow works with target backend
- contact sync does not duplicate or corrupt records
- permission set remains minimal