Problem

The tool enables workflow creation that could be misused for malicious purposes (cyber attacks, malware, illegal activities). As the developer, I need to demonstrate "reasonable measures" were taken to prevent misuse without degrading UX or incurring costs.

Current Behavior

1. User opens extension for first time
2. ❌ No warning or agreement about prohibited uses
3. User has full access to workflow creation

Expected Behavior

1. User opens extension for first time
2. ✅ Terms of Use dialog appears with prohibited use cases
3. User must agree before accessing features
4. ✅ Onboarding tour starts automatically after acceptance

Solution

Implemented one-time Terms of Use dialog with:

• Explicit prohibition list (cyber attacks, malware, data theft, illegal activities)
• User liability statement
• Checkbox agreement requirement
• Multi-language support (5 languages)
• Cancel option closes extension window
• Auto-start onboarding tour after acceptance

Changes

Extension Host

File: src/extension/commands/open-editor.ts

• Replaced isFirstLaunch flag with hasAcceptedTerms
• Added ACCEPT_TERMS message handler to update globalState
• Added CANCEL_TERMS message handler to close panel

File: src/shared/types/messages.ts

• Changed InitialStatePayload.isFirstLaunch to hasAcceptedTerms
• Added ACCEPT_TERMS and CANCEL_TERMS message types

Webview UI

File: src/webview/src/components/dialogs/TermsOfUseDialog.tsx (new)

• Modal dialog with dark overlay
• Title, introduction, prohibited uses list, liability statement
• Checkbox agreement requirement (disables Accept button when unchecked)
• Keyboard accessibility (Enter/Space on checkbox)
• Accept button sends ACCEPT_TERMS message
• Cancel button sends CANCEL_TERMS message

File: src/webview/src/App.tsx

• Show Terms dialog when hasAcceptedTerms is false
• Auto-start onboarding tour after accepting Terms
• Handle CANCEL_TERMS to send close message

File: src/webview/src/styles/main.css

• Added text-shadow: none to .driver-popover-next-btn and .driver-popover-prev-btn
• Fixes onboarding tour button blur issue

Translations

Files: src/webview/src/i18n/translation-keys.ts and translations/*.ts

• Added 13 Terms of Use translation keys
• Supported languages: English, Japanese, Korean, Chinese (Simplified), Chinese (Traditional)
• Keys: title, introduction, prohibited uses (4 items), liability, agreement checkbox, buttons

Impact

• UX: Minimal - one-time dialog on first launch only
• Breaking changes: None
• Legal protection: Demonstrates "reasonable measures" against tool misuse
• Side effects: Removed auto-start tour logic (tour now starts after accepting Terms)

Testing

• Manual E2E testing completed
• Terms dialog displays on first launch
• Onboarding tour auto-starts after acceptance
• Cancel button closes extension window
• Checkbox agreement works correctly (Accept button disabled when unchecked)
• All 5 language translations verified
• Code quality checks passed (format, lint, build)

Notes

• Terms acceptance stored in VSCode globalState (hasAcceptedTerms: boolean)
• Tour remains accessible via Help menu button (🎓 icon)
• No server-side validation implemented (cost/complexity constraint)
• Prohibited uses: cyber attacks (DDoS, unauthorized access), malware/ransomware, data theft, other illegal activities