Release 1.0.6

README.md

@@ -1,4 +1,4 @@
-# Opportunities Extension 1.0.5
+# Opportunities Extension 1.0.6
 
 Browser extension that adds the "Opportunities Extension" shortcut to the permitted Oracle Fusion pages, retrieves opportunities, and displays them in a filterable table or calendar.
 
@@ -382,6 +382,15 @@ a focused chart fixture. Stop the server with Ctrl+C when finished.
 - Successful forecast updates refresh local comparisons and invalidate workload caches. Workloads reuse Cache duration across modal openings and token renewals.
 - Regenerated Chromium/Edge and Firefox distributions. Release validation uses synthetic automated tests; live Oracle writes and installed-browser smoke tests are not part of this validation.
 
+## Release 1.0.6 - 2026-10-21
+
+- Validate the current-user JSON structure before starting dependent requests, sharing concurrent authentication work and retrying failed identity acquisition.
+- Recover SPA sessions through one inactive auxiliary tab at `https://spa.oracle.com/`, preserving the originating window and Firefox cookie store.
+- Inspect the SPA document before retrying identity: reject error pages, SAML/login forms, OAuth callbacks and incomplete documents. HTTP 200, cookies and elapsed time alone no longer release identity probes.
+- Read identity in the verified SPA tab, at most once per document; restart rejected authentication at the home URL rather than replaying OAuth callbacks. Readiness timeouts do not trigger fallback API probes.
+- Correct native timer invocation and retain protected debug diagnostics and auxiliary-tab cleanup.
+- Regenerated Chromium/Edge and Firefox distributions. Validation uses synthetic automated tests; live Oracle authentication and installed-browser smoke tests were not performed for this release.
+
 ## Loading in Development Mode
 
 ### Chrome or Microsoft Edge

dist/chromium/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "name": "Opportunities Extension",
   "description": "Adiciona um atalho de Opportunities Extension nas paginas Oracle Fusion permitidas.",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "permissions": [
     "cookies",
     "storage",

dist/firefox/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "name": "Opportunities Extension",
   "description": "Adiciona um atalho de Opportunities Extension nas paginas Oracle Fusion permitidas.",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "permissions": [
     "cookies",
     "storage",

docs/browser-smoke.md

@@ -12,7 +12,7 @@ pass until executed and recorded separately for each browser.
 - Run `node scripts/build.mjs --check` and `node scripts/test.cjs` first.
 - Load `dist/chromium` using Load unpacked in Chrome/Edge, or load
   `dist/firefox/manifest.json` as a temporary Firefox add-on. Verify the source
-  directory and version 1.0.5; avoid testing a previously installed stale copy.
+  directory and version 1.0.6; avoid testing a previously installed stale copy.
 - Keep debug secrets hidden. Record only status codes, request names, durations
   and sanitized errors. Do not export real tokens, response bodies or account data.
 - AI generation and tests requiring a deliberately expired session must use an

package.json

@@ -1,6 +1,6 @@
 {
   "name": "opportunities-extension",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "private": true,
   "type": "module",
   "scripts": {

scripts/build.mjs

@@ -15,7 +15,7 @@ const baseManifest = {
   manifest_version: 3,
   name: "Opportunities Extension",
   description: "Adiciona um atalho de Opportunities Extension nas paginas Oracle Fusion permitidas.",
-  version: "1.0.5",
+  version: "1.0.6",
   permissions: [
     "cookies",
     "storage",

tests/characterization.test.cjs

@@ -40,7 +40,7 @@ test("distribution contracts: manifests, execution boundaries and deterministic
   const base = {
     manifest_version: 3, name: "Opportunities Extension",
     description: "Adiciona um atalho de Opportunities Extension nas paginas Oracle Fusion permitidas.",
-    version: "1.0.5", permissions: ["cookies", "storage", "webRequest", "declarativeNetRequestWithHostAccess"],
+    version: "1.0.6", permissions: ["cookies", "storage", "webRequest", "declarativeNetRequestWithHostAccess"],
     host_permissions: ["https://eeho.fa.us2.oraclecloud.com/*", "https://spa.oracle.com/*", "https://comcipapic-oalprod.integration.ocp.oraclecloud.com/*"],
     content_scripts: [{
       matches: ["https://eeho.fa.us2.oraclecloud.com/hcmUI/faces/FuseWelcome*", "https://eeho.fa.us2.oraclecloud.com/fscmUI/faces/FuseWelcome*"],