지점 진행 현황 (생각대로 가맹점용) by Heekyo Seo

This is an unofficial merchant helper for https://top-shop.logiall.com/. It requires an authorized merchant account; no production credentials are included in the package. Please request a dedicated test account from the publisher before testing authenticated flows. Do not place production delivery orders while reviewing.

quick.js runs at document_start in the MAIN world to capture the Authorization header of this page's own Logiall API requests. It keeps the header only in page memory and uses it solely for https://top-api.logiall.com/api/v1/. It does not read passwords or cookies and does not send authorization or order/customer data to the publisher's status server.

content.js and mobile.js run in the isolated content-script world. They read the merchant's existing sessionStorage shop/branch identifier and fetch aggregate branch status/notices from https://iru.baecou.com/branch/<branch>.json using the site's CORS permissions. String-valued CustomEvents connect the isolated UI to the MAIN-world order UI. No remote executable code is downloaded, no eval is used, and all code is included as readable source.

On first install the extension opens the original merchant site. If host access is absent it opens its own setup page, where a user gesture requests access. Updates do not open tabs. The toolbar action opens the merchant site or permission-recovery page. The only declared host access is https://top-shop.logiall.com/*.

All order submission tests in this workspace used mocked responses. Chromium isolated/main-world and mobile UI checks do not substitute for Firefox Android device testing. Android release verification and reviewer test-account access remain the publisher's responsibility before general distribution.