┌─────────────────┐     chrome.runtime.sendMessage     ┌──────────────────┐     window.postMessage     ┌──────────────────┐
│  Sidepanel UI   │ ──────────────────────────────────► │  XHR Bridge      │ ─────────────────────────────► │  XHR Scraper     │
│  (chrome://     │     (xhr:* prefix messages)         │  (ISOLATED world)│  (FROM_CONTENT/FROM_PAGE)   │  (MAIN world)     │
│   side-panel)   │ ◄────────────────────────────────── │                  │ ◄─────────────────────────── │                  │
└─────────────────┘     response via sendResponse         └──────────────────┘     response via callback       └──────────────────┘

Layer 1 — Sidepanel:  User controls, export triggers, mode selection
Layer 2 — XHR Bridge:  Relay between Sidepanel ↔ MAIN world (ISOLATED)
Layer 3 — XHR Scraper: Intercepts XHR/fetch, replays requests, captures responses

// Download tracking flow
1. Click download button in DOM
2. Chrome creates download item → onCreated event
3. Match download URL/filename to pending ticket
4. Monitor onChanged → state: 'complete' | 'interrupted'
5. Mark ticket as done → proceed to next item

// Batch limit: 10 items per page (CLICK_BATCH_SIZE)
// Burst delay: progressive increase between batches

// Self-resume mechanism
1. Before each click → save pending state to localStorage
2. On page load → check for saved state
3. If state exists and < 5 minutes old → resume
4. If state is stale → start fresh
5. After all items done → clear saved state

POST /einvoiceportal/api/outputinvoice/view
{
  "RecordIdentifier": "<from list .RecordId>",
  "EinvoiceVATStatus": "VAT_VAT",
  "TaxpayerAggregateIdentifier": "<from list .Seller* or .Buyer* AggregateIdentifier>"
}

// Response: Payload.FormData is a JSON STRING — must parse twice
// Parse → extract TransactionDocumentData, BuyerInformationData,
//         TransactionDetailsData.Rows[], FooterRow, metadata

// Headers auto-captured:
//   content-type: application/json
//   languageid: id-ID
//   x-dgt-code: <auto-captured CSRF token>

// Settings keys (all default: true)
interSheet1Ringkasan: true   // Sheet 1 — can be disabled
interSheet2Header: true      // Sheet 2
interSheet3DocData: true     // Sheet 3
interSheet4Buyer: true       // Sheet 4
interSheet5Items: true       // Sheet 5 — MOST IMPORTANT
interSheet6Footer: true      // Sheet 6
interSheet7Meta: true        // Sheet 7

Step 1: SCAN — Find invoices without download buttons
─────────────────────────────────────────────────
• Scan every row in the FM table
• Rows without #DownloadButton → marked as "pending"
• Bot mode: scan up to 500 pages
• Capture mode: scan current page only
• Output: pendingInvoices[]

Step 2: EXTRACT — Open edit pages and collect data
─────────────────────────────────────────────────
• For each pending invoice:
  1. Filter by invoice number in the search field
  2. Click the "Edit" button → navigate to edit page
  3. Wait for page to load (DOM polling, not sleep)
  4. Extract 14 columns of transaction rows
  5. Navigate back (history.back())
• Retry: 3 inner retries + 2 outer retries per invoice
• Output: excelRows[]

Step 3: DOWNLOAD — Build and save the XLSX file
─────────────────────────────────────────────────
• Build workbook with SheetJS (21 columns)
• Sanitize cells (formula injection + leading zero protection)
• Encode as base64 data URL (MV3 constraint)
• Trigger download via chrome.downloads API

1. Extension monitors downloads from coretax.pajak.go.id
2. When a PDF download completes:
   a. Match the downloaded file to an invoice in the extracted data
   b. Use document type, invoice number, and other identifiers
   c. Rename the file based on matched data
3. Naming pattern varies by document type:
   • E-Invoice:  {InvoiceNumber}.pdf
   • Bukti Potong:  {BupotNumber}.pdf
   • Doc Management:  {DocType}_{Identifier}.pdf
4. Fallback: If no match found, keep original filename

hasFullAccess() = isCompanyUser() || isSubscriptionActive()

Priority order:
  1. Company User  → ALWAYS full access (highest priority)
                       No ads, no subscription needed, no donation UI
  2. Subscriber    → Full access until subscription expires
                       No ads, all features
  3. Free User     → All features with interstitial ads
                       Probability-based ad display

Company access takes priority over everything:
  • Even if subscription is expired → full access
  • Even if subscription is active → company badge shown
  • Admin can revoke company access at any time

1. Click "Subscribe" in the sidepanel
2. Extension creates payment request → server generates QR code
3. Scan QR code with any Indonesian payment app (GoPay, OVO, Dana, etc.)
4. Payment confirmed via webhook (RSA-SHA256 verified)
5. Extension polls status → subscription activated automatically

Price:  Rp 100,000 (≈ US $6)
Period: 30 days
Identity: email_id (SHA-256 of normalized email)