@1llum1n4t1/cws-mcp 1.4.2 → 2.0.0

package/README.ko.md

@@ -13,7 +13,6 @@ Chrome Web Store 확장 프로그램 관리를 위한 MCP 서버. Claude Code
 - **"크롬 확장 프로그램 새 버전 업로드해줘"** — ZIP을 빌드하고 `upload` 도구로 초안 업데이트
 - **"확장 프로그램 Chrome Web Store에 퍼블리시해줘"** — `publish`로 리뷰 제출 및 배포
 - **"확장 프로그램 리뷰 상태 확인해줘"** — `status`로 리뷰 상태, 버전, 배포 비율 확인
-- **"확장 프로그램 메타데이터(설명, 스크린샷) 업데이트해줘"** — `update-metadata-ui`로 스토어 리스팅 수정
 - **"제출 대기 중인 거 취소해줘"** — `cancel`로 리뷰 중인 제출 철회
 - **"확장 프로그램 단계적 배포 설정해줘"** — `publish`로 단계적 배포 후 `deploy-percentage`로 비율 증가
 
@@ -23,12 +22,12 @@ Chrome Web Store 확장 프로그램 관리를 위한 MCP 서버. Claude Code
 |---|---|
 | `upload` | ZIP 파일을 Chrome Web Store에 업로드 (기존 항목 초안 업데이트) |
 | `publish` | 단계적 배포, 퍼블리시 유형, 리뷰 건너뛰기 옵션으로 확장 프로그램 퍼블리시 |
+| `submit` | 원샷: upload → publish → status를 한 번의 호출로 실행 (존재 여부 preflight 체크와 읽기 쉬운 에러 메시지 포함) |
 | `status` | 리뷰 상태, 배포 비율, 버전 등 현재 상태 확인 |
 | `cancel` | 제출 대기 중인 항목 취소 |
 | `deploy-percentage` | 단계적 배포 비율 설정 (0-100, 현재 목표보다 높아야 함) |
 | `get` | DRAFT/PUBLISHED 리스팅 메타데이터 조회 (v1.1 API, 2026년 10월 지원 종료) |
 | `update-metadata` | v1.1 API로 리스팅 메타데이터 업데이트 (2026년 10월 지원 종료) |
-| `update-metadata-ui` | 대시보드 UI 자동화(Playwright)로 리스팅 메타데이터 업데이트 |
 
 ## API 커버리지
 
@@ -42,7 +41,9 @@ Chrome Web Store 확장 프로그램 관리를 위한 MCP 서버. Claude Code
 | `publishers.items.cancelSubmission` | `cancel` |
 | `publishers.items.setPublishedDeployPercentage` | `deploy-percentage` |
 
-추가로, 메타데이터 조작을 위한 v1.1 API 엔드포인트(`get`, `update-metadata`)가 제공되며, v1 지원 종료에 대비하여 대시보드 UI 자동화(`update-metadata-ui`)를 권장합니다.
+추가로, 메타데이터 조작을 위한 v1.1 API 엔드포인트(`get`, `update-metadata`)가 제공됩니다. v1.1 지원 종료 이후의 리스팅 변경은 Chrome Web Store 개발자 대시보드에서 수동으로 진행하세요 (v2 API에는 메타데이터 쓰기 엔드포인트가 없으며, 이 MCP는 브라우저 자동화를 사용하지 않습니다).
+
+Chrome Web Store API는 새 항목(아이템) 생성을 지원하지 않습니다. 새 항목은 Chrome Web Store 개발자 대시보드에서 수동으로 만든 뒤, 발급된 Item ID를 `CWS_ITEM_ID`에 설정해 이 도구들로 관리하세요.
 
 ## 설정
 
@@ -135,7 +136,6 @@ Claude Code MCP 설정 (`~/.claude/settings.local.json`)에 추가합니다.
 | `CWS_REFRESH_TOKEN` | 인증 B | OAuth2 Refresh Token |
 | `CWS_PUBLISHER_ID` | 아니오 | 퍼블리셔 ID (기본값: `me`) |
 | `CWS_ITEM_ID` | 아니오 | 기본 확장 프로그램 Item ID |
-| `CWS_DASHBOARD_PROFILE_DIR` | 아니오 | `update-metadata-ui`용 브라우저 프로필 경로 (기본값: `~/.cws-mcp-profile`) |
 
 ## 사용 예시
 
@@ -181,22 +181,6 @@ cws-mcp update-metadata에서 metadata 객체 전달:
 }
 ```
 
-### API 반영이 안 되는 경우(UI 자동화)
-```
-cws-mcp update-metadata-ui 사용:
-- title
-- summary
-- description
-- category
-- homepageUrl
-- supportUrl
-```
-
-참고:
-- 이 도구는 Chrome Web Store 대시보드 UI를 자동 조작합니다.
-- 로그인 필요 시 `headless=false`로 1회 실행해 로그인하세요.
-- 브라우저 프로필 기본 경로: `~/.cws-mcp-profile` (`CWS_DASHBOARD_PROFILE_DIR`로 변경 가능)
-
 ### 단계적 배포
 ```
 1. cws-mcp publish
@@ -209,7 +193,7 @@ cws-mcp update-metadata-ui 사용:
 
 ## V1 API 지원 종료 안내
 
-`get`과 `update-metadata` 도구는 Chrome Web Store v1.1 API를 사용하며, **2026년 10월 15일 이후 지원이 종료**됩니다. v2 API에는 메타데이터 읽기/쓰기 엔드포인트가 없어 이 도구들이 브릿지 역할을 합니다. 장기적으로는 `update-metadata-ui` (Playwright 대시보드 자동화)를 대안으로 사용하세요.
+`get`과 `update-metadata` 도구는 Chrome Web Store v1.1 API를 사용하며, **2026년 10월 15일 이후 지원이 종료**됩니다. v2 API에는 메타데이터 읽기/쓰기 엔드포인트가 없어 이 도구들이 브릿지 역할을 합니다. v1.1 지원 종료 이후의 리스팅 변경은 Chrome Web Store 개발자 대시보드에서 수동으로 진행하세요 (v2 API에는 메타데이터 쓰기 엔드포인트가 없으며, 이 MCP는 브라우저 자동화를 사용하지 않습니다).
 
 ## 라이선스
 

package/README.md

@@ -15,7 +15,7 @@ Use this MCP when you need to:
 - **"Upload a new version of my Chrome extension"** — build your ZIP and use the `upload` tool to push it as a draft
 - **"Publish my extension to the Chrome Web Store"** — use `publish` to submit for review and go live
 - **"Check the review status of my extension"** — use `status` to see review state, version, and deploy percentage
-- **"Update my extension's metadata (description, screenshots)"** — use `update-metadata-ui` to change store listing details
+- **"Upload and publish in one step"** — use `submit` to run upload → publish → status as a single call
 - **"Cancel a pending submission"** — use `cancel` to withdraw a submission under review
 - **"Set up staged rollout for my extension"** — use `publish` with staged rollout, then `deploy-percentage` to ramp up
 
@@ -30,7 +30,9 @@ Use this MCP when you need to:
 | `deploy-percentage` | Set staged rollout percentage (0-100, must exceed current target) |
 | `get` | Read draft/published listing metadata (v1.1 API, deprecated Oct 2026) |
 | `update-metadata` | Update listing metadata via v1.1 API (deprecated Oct 2026) |
-| `update-metadata-ui` | Update listing metadata via dashboard UI automation (Playwright) |
+| `submit` | One-shot: run upload → publish → status in a single call (with existence preflight and readable errors) |
+
+> The Chrome Web Store API cannot create items. Create a new item manually in the Chrome Web Store Developer Dashboard, then use `upload` / `publish` (or `submit`) against its item ID.
 
 ## API Coverage
 
@@ -44,7 +46,7 @@ This MCP server covers **all Chrome Web Store API v2 endpoints**:
 | `publishers.items.cancelSubmission` | `cancel` |
 | `publishers.items.setPublishedDeployPercentage` | `deploy-percentage` |
 
-Additionally, v1.1 API endpoints are available for metadata operations (`get`, `update-metadata`), with dashboard UI automation (`update-metadata-ui`) as the recommended alternative since v1 is deprecated.
+Additionally, v1.1 API endpoints are available for metadata operations (`get`, `update-metadata`). Since v1.1 is deprecated, listing changes after its removal must be made manually in the Chrome Web Store Developer Dashboard (the v2 API has no metadata write endpoint, and this MCP does not automate the browser).
 
 ## Setup
 
@@ -137,7 +139,6 @@ Provide **either** a service-account key (Auth A) **or** the OAuth2 refresh-toke
 | `CWS_REFRESH_TOKEN` | Auth B | OAuth2 Refresh Token |
 | `CWS_PUBLISHER_ID` | No | Publisher ID (default: `me`) |
 | `CWS_ITEM_ID` | No | Default extension item ID |
-| `CWS_DASHBOARD_PROFILE_DIR` | No | Browser profile path for `update-metadata-ui` (default: `~/.cws-mcp-profile`) |
 
 ## Usage Examples
 
@@ -182,22 +183,6 @@ Use cws-mcp update-metadata with metadata={
 }
 ```
 
-### When API metadata updates don't reflect
-```
-Use cws-mcp update-metadata-ui with:
-- title
-- summary
-- description
-- category
-- homepageUrl
-- supportUrl
-```
-
-Notes:
-- This tool automates the Chrome Web Store dashboard UI.
-- First run with `headless=false` if login is required.
-- Browser profile path defaults to `~/.cws-mcp-profile` (override with `CWS_DASHBOARD_PROFILE_DIR`).
-
 ### Staged rollout
 ```
 1. Use cws-mcp publish
@@ -210,7 +195,7 @@ Note: `deploy-percentage` is only available for extensions with 10,000+ seven-da
 
 ## V1 API Deprecation
 
-The `get` and `update-metadata` tools use the Chrome Web Store v1.1 API, which is **deprecated and will be removed after October 15, 2026**. The v2 API does not provide metadata read/write endpoints, so these tools remain available as a bridge. Use `update-metadata-ui` (Playwright dashboard automation) as the long-term alternative.
+The `get` and `update-metadata` tools use the Chrome Web Store v1.1 API, which is **deprecated and will be removed after October 15, 2026**. The v2 API does not provide metadata read/write endpoints, so these tools remain available as a bridge. After v1.1 is removed, make listing changes manually in the Chrome Web Store Developer Dashboard — the v2 API has no metadata write endpoint, and this MCP does not automate the browser.
 
 ## License
 

package/dist/index.js

@@ -4,8 +4,6 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { z } from "zod";
 import { readFileSync } from "node:fs";
 import { createSign } from "node:crypto";
-import { chromium } from "playwright";
-import { homedir } from "node:os";
 import { resolve, join, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 // ── Version ──
@@ -27,9 +25,10 @@ const TOKEN_URL = "https://oauth2.googleapis.com/token";
 const SCOPE = "https://www.googleapis.com/auth/chromewebstore";
 /** Date after which Google removes the Chrome Web Store v1.1 API. */
 const V1_SUNSET = "2026-10-15";
-const DASHBOARD_PROFILE_DIR = process.env.CWS_DASHBOARD_PROFILE_DIR || resolve(homedir(), ".cws-mcp-profile");
 // ── Auth: OAuth2 refresh token & service account (JWT bearer) ──
 let cachedToken = null;
+/** 取得中のトークン Promise（single-flight 用。並行取得の多重発火を防ぐ）。 */
+let tokenInflight = null;
 /** Load a service account key from CWS_SERVICE_ACCOUNT_KEY (raw JSON or a file path). Returns null when not configured. */
 function loadServiceAccount() {
     const value = SERVICE_ACCOUNT_KEY.trim();
@@ -77,6 +76,7 @@ async function fetchTokenViaServiceAccount(sa) {
         method: "POST",
         headers: { "Content-Type": "application/x-www-form-urlencoded" },
         body: body.toString(),
+        signal: AbortSignal.timeout(30_000),
     });
     if (!res.ok) {
         throw new Error(`Service account token request failed (${res.status}): ${await res.text()}`);
@@ -95,6 +95,7 @@ async function fetchTokenViaRefreshToken() {
         method: "POST",
         headers: { "Content-Type": "application/x-www-form-urlencoded" },
         body: body.toString(),
+        signal: AbortSignal.timeout(30_000),
     });
     if (!res.ok) {
         throw new Error(`Token refresh failed (${res.status}): ${await res.text()}`);
@@ -109,23 +110,42 @@ async function getAccessToken() {
     if (cachedToken && Date.now() < cachedToken.expires_at - 60_000) {
         return cachedToken.access_token;
     }
-    const sa = loadServiceAccount();
-    let data;
-    if (sa) {
-        data = await fetchTokenViaServiceAccount(sa);
-    }
-    else if (CLIENT_ID && CLIENT_SECRET && REFRESH_TOKEN) {
-        data = await fetchTokenViaRefreshToken();
+    // 並行リクエストでトークンを多重取得しないよう、取得中は同じ Promise を共有する。
+    if (tokenInflight)
+        return tokenInflight;
+    tokenInflight = (async () => {
+        const sa = loadServiceAccount();
+        let data;
+        if (sa) {
+            data = await fetchTokenViaServiceAccount(sa);
+        }
+        else if (CLIENT_ID && CLIENT_SECRET && REFRESH_TOKEN) {
+            data = await fetchTokenViaRefreshToken();
+        }
+        else {
+            throw new Error("Missing credentials. Set CWS_SERVICE_ACCOUNT_KEY (service account), " +
+                "or CWS_CLIENT_ID + CWS_CLIENT_SECRET + CWS_REFRESH_TOKEN (OAuth refresh token).");
+        }
+        // トークンエンドポイントの想定外レスポンス（access_token 欠落 / expires_in 非数）を
+        // そのままキャッシュすると Bearer undefined や expires_at=NaN を生むので明示的に弾く。
+        if (typeof data.access_token !== "string" ||
+            !data.access_token ||
+            typeof data.expires_in !== "number" ||
+            !Number.isFinite(data.expires_in)) {
+            throw new Error("Token endpoint returned an unexpected response (missing access_token or expires_in).");
+        }
+        cachedToken = {
+            access_token: data.access_token,
+            expires_at: Date.now() + data.expires_in * 1000,
+        };
+        return cachedToken.access_token;
+    })();
+    try {
+        return await tokenInflight;
     }
-    else {
-        throw new Error("Missing credentials. Set CWS_SERVICE_ACCOUNT_KEY (service account), " +
-            "or CWS_CLIENT_ID + CWS_CLIENT_SECRET + CWS_REFRESH_TOKEN (OAuth refresh token).");
+    finally {
+        tokenInflight = null;
     }
-    cachedToken = {
-        access_token: data.access_token,
-        expires_at: Date.now() + data.expires_in * 1000,
-    };
-    return cachedToken.access_token;
 }
 // ── Helpers ──
 function errMsg(e) {
@@ -136,21 +156,99 @@ function resolveItemId(itemId) {
     if (!id) {
         throw new Error("No item ID provided. Pass itemId parameter or set CWS_ITEM_ID env var.");
     }
-    return id;
+    // URL パスセグメントとして安全化（itemId 経由で verb/クエリをすり替えられないように）。
+    return encodeURIComponent(id);
 }
 function resolvePublisherId(publisherId) {
-    return publisherId || PUBLISHER_ID;
+    return encodeURIComponent(publisherId || PUBLISHER_ID);
+}
+/** v2 API のアイテム操作 URL を組み立てる（pub/id は呼び出し側で安全化済みの前提）。 */
+function itemUrl(pub, id, action) {
+    return `${API_BASE}/v2/publishers/${pub}/items/${id}:${action}`;
 }
-async function apiCall(url, options) {
+/** publish / submit 共通の publish リクエストボディを組み立てる。 */
+function buildPublishBody(opts) {
+    const body = {};
+    if (opts.publishType)
+        body.publishType = opts.publishType;
+    if (opts.deployPercentage !== undefined)
+        body.deployInfos = [{ deployPercentage: opts.deployPercentage }];
+    if (opts.skipReview !== undefined)
+        body.skipReview = opts.skipReview;
+    if (opts.blockOnWarnings !== undefined)
+        body.blockOnWarnings = opts.blockOnWarnings;
+    return body;
+}
+async function apiCall(url, options, timeoutMs = 60_000) {
     const token = await getAccessToken();
     const headers = {
         Authorization: `Bearer ${token}`,
         ...(options.headers || {}),
     };
-    const res = await fetch(url, { ...options, headers });
+    // タイムアウトが無いとネットワークストール時に stdio リクエストが無言ハングする。
+    const res = await fetch(url, { ...options, headers, signal: AbortSignal.timeout(timeoutMs) });
     const body = await res.text();
+    // 認証/認可エラー時はキャッシュした古いトークンを破棄し、次回の再取得で自己回復させる。
+    if (res.status === 401 || res.status === 403)
+        cachedToken = null;
     return { ok: res.ok, status: res.status, body };
 }
+/**
+ * 既知の Chrome Web Store エラーを「次に何をすればよいか」が分かる助言に翻訳する。
+ * 該当しなければ null を返す（呼び出し側は生エラーのみを見せる）。
+ */
+function interpretCwsError(status, body) {
+    const b = body.toLowerCase();
+    // itemId が空・不正・未作成（今回の ReplaceTranslator 404 ブロッカーの正体）。
+    if (b.includes("could not find handler")) {
+        return ("Hint: the item ID looks empty or malformed (the request URL had no valid item ID). " +
+            "For a brand-new extension, create the item first in the Developer Dashboard (the CWS API cannot create items), " +
+            "then set CWS_ITEM_ID / pass itemId.");
+    }
+    // publisher が見つからない（generic 404 より先に判定）。
+    if (b.includes("publisher") && (b.includes("not found") || b.includes("no publisher"))) {
+        return "Hint: publisher not found. Check CWS_PUBLISHER_ID (or pass publisherId). 'me' targets the authenticated publisher.";
+    }
+    // 認証・権限。
+    if (status === 401 ||
+        status === 403 ||
+        b.includes("invalid_grant") ||
+        b.includes("unauthorized") ||
+        b.includes("invalid credentials") ||
+        b.includes("insufficient permission")) {
+        return ("Hint: authentication/authorization failed. Check CWS_SERVICE_ACCOUNT_KEY (service account) " +
+            "or CWS_CLIENT_ID / CWS_CLIENT_SECRET / CWS_REFRESH_TOKEN, confirm the account owns this item/publisher, " +
+            "and that the OAuth scope includes chromewebstore.");
+    }
+    // 審査中で更新不可。
+    if (b.includes("in review") ||
+        b.includes("pending review") ||
+        b.includes("being reviewed") ||
+        b.includes("not updatable") ||
+        b.includes("item_not_updatable") ||
+        b.includes("review in progress")) {
+        return ("Hint: the item is currently in review and cannot be updated. " +
+            "Wait for the review to finish, or cancel the pending submission with the 'cancel' tool, then re-upload.");
+    }
+    // version 重複。
+    if (b.includes("version already exists") ||
+        b.includes("already been uploaded") ||
+        b.includes("duplicate version") ||
+        (b.includes("version") && b.includes("conflict"))) {
+        return ("Hint: this version already exists on the store. " +
+            "Bump the 'version' field in the extension's manifest.json, rebuild the ZIP, and retry.");
+    }
+    // レート制限 / quota。
+    if (status === 429 || b.includes("quota") || b.includes("rate limit") || b.includes("too many requests")) {
+        return "Hint: rate limit / quota exceeded. Wait a bit and retry.";
+    }
+    // 上記に当てはまらない 404 / not found は item 不在として案内。
+    if (status === 404 || b.includes("not found")) {
+        return ("Hint: the item ID does not exist or you lack access to it. " +
+            "Double-check the 32-char item ID (CWS_ITEM_ID / itemId); for a new extension create it first in the Developer Dashboard.");
+    }
+    return null;
+}
 /** Format an API response with structured error info when applicable. */
 function formatResponse(result) {
     if (result.ok) {
@@ -167,8 +265,10 @@ function formatResponse(result) {
     catch {
         // Keep raw body
     }
+    const hint = interpretCwsError(result.status, result.body);
+    const text = `API Error (${result.status}): ${errorDetail}` + (hint ? `\n\n${hint}` : "");
     return {
-        content: [{ type: "text", text: `API Error (${result.status}): ${errorDetail}` }],
+        content: [{ type: "text", text }],
         isError: true,
     };
 }
@@ -177,90 +277,116 @@ function appendNote(result, note) {
     return { ...result, content: [...result.content, { type: "text", text: note }] };
 }
 const V1_NOTE = `⚠️ This tool uses the Chrome Web Store v1.1 API, which Google will remove after ${V1_SUNSET}. ` +
-    `The v2 API has no metadata read/write endpoint — for store-listing changes, prefer the 'update-metadata-ui' tool.`;
+    `The v2 API has no metadata read/write endpoint — after the sunset, change the store listing in the Developer Dashboard.`;
+/**
+ * v1.1 API の sunset 後は API を叩く前に明示エラーを返す（404 の「item 不在」誤誘導を防ぐ）。
+ * sunset 前は null を返し通常フローへ進む。
+ */
+function v1SunsetGuard() {
+    if (Date.now() > Date.parse(`${V1_SUNSET}T00:00:00Z`)) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `The Chrome Web Store v1.1 API was removed after ${V1_SUNSET}. ` +
+                        `Change the store listing in the Developer Dashboard (the v2 API has no metadata read/write endpoint).`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    return null;
+}
 function toolError(e) {
     return { content: [{ type: "text", text: `Error: ${errMsg(e)}` }], isError: true };
 }
-function escapeRegExp(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-async function fillTextFieldByLabel(page, labels, value) {
-    const parts = labels.map(escapeRegExp).join("|");
-    const regex = new RegExp(parts, "i");
-    const candidates = [
-        page.getByLabel(regex).first(),
-        page.getByRole("textbox", { name: regex }).first(),
-        page.getByPlaceholder(regex).first(),
-    ];
-    for (const locator of candidates) {
-        if ((await locator.count()) > 0) {
-            await locator.fill(value);
-            return;
-        }
+/**
+ * v2 fetchStatus の JSON から人間向けの短いサマリを作る。
+ * V2 のフィールド名に幅があるため防御的に拾い、拒否理由・違反・警告も再帰収集する。
+ * 解釈不能なら null。
+ */
+function summarizeStatus(raw) {
+    let data;
+    try {
+        data = JSON.parse(raw);
     }
-    const labelNode = page.getByText(regex).first();
-    if ((await labelNode.count()) > 0) {
-        const container = labelNode.locator("xpath=ancestor::*[self::div or self::section][1]");
-        const field = container.locator("textarea, input[type='text'], input:not([type])").first();
-        if ((await field.count()) > 0) {
-            await field.fill(value);
-            return;
-        }
+    catch {
+        return null;
     }
-    throw new Error(`Unable to locate field by labels: ${labels.join(", ")}`);
-}
-async function uploadFileBySectionLabel(page, labels, filePath) {
-    const resolvedPath = resolve(filePath);
-    const parts = labels.map(escapeRegExp).join("|");
-    const regex = new RegExp(parts, "i");
-    const labelNode = page.getByText(regex).first();
-    if ((await labelNode.count()) > 0) {
-        const container = labelNode.locator("xpath=ancestor::*[self::div or self::section][1]");
-        const fileInput = container.locator("input[type='file']").first();
-        if ((await fileInput.count()) > 0) {
-            await fileInput.setInputFiles(resolvedPath);
-            await page.waitForTimeout(1200);
-            return;
+    if (!data || typeof data !== "object")
+        return null;
+    const obj = data;
+    const pick = (...keys) => {
+        for (const k of keys) {
+            const v = obj[k];
+            if (typeof v === "string" && v)
+                return v;
+            if (typeof v === "number")
+                return String(v);
         }
-    }
-    const anyFileInput = page.locator("input[type='file']").first();
-    if ((await anyFileInput.count()) > 0) {
-        await anyFileInput.setInputFiles(resolvedPath);
-        await page.waitForTimeout(1200);
-        return;
-    }
-    throw new Error(`Unable to locate file input for labels: ${labels.join(", ")}`);
-}
-async function clickSaveButton(page) {
-    const roleCandidates = [
-        page.getByRole("button", { name: /save|저장|임시저장|save draft/i }).first(),
-        page.getByRole("button", { name: /submit for review|검토/i }).first(),
-    ];
-    for (const saveBtn of roleCandidates) {
-        if ((await saveBtn.count()) > 0) {
-            await saveBtn.click();
-            await page.waitForTimeout(2000);
+        return undefined;
+    };
+    const lines = [];
+    const state = pick("status", "state", "reviewStatus", "itemStatus");
+    if (state)
+        lines.push(`State: ${state}`);
+    const version = pick("crxVersion", "version", "publishedVersion");
+    if (version)
+        lines.push(`Version: ${version}`);
+    const deploy = pick("deployPercentage", "publishedDeployPercentage");
+    if (deploy !== undefined)
+        lines.push(`Deploy: ${deploy}%`);
+    // 拒否理由・違反・警告・詳細メッセージを再帰的に集める。
+    const reasons = [];
+    const collect = (node, depth) => {
+        if (depth > 6 || node == null)
             return;
-        }
-    }
-    const textCandidates = [
-        page.locator("button:has-text('저장')").first(),
-        page.locator("button:has-text('임시저장')").first(),
-        page.locator("button:has-text('Save')").first(),
-    ];
-    for (const saveBtn of textCandidates) {
-        if ((await saveBtn.count()) > 0) {
-            await saveBtn.click();
-            await page.waitForTimeout(2000);
+        if (Array.isArray(node)) {
+            for (const x of node)
+                collect(x, depth + 1);
             return;
         }
+        if (typeof node === "object") {
+            for (const [k, v] of Object.entries(node)) {
+                const lk = k.toLowerCase();
+                const looksLikeIssue = lk.includes("reason") ||
+                    lk.includes("violation") ||
+                    lk.includes("rejection") ||
+                    lk.includes("warning") ||
+                    lk.includes("detail") ||
+                    lk.includes("message");
+                if (looksLikeIssue && typeof v === "string" && v.trim()) {
+                    reasons.push(`${k}: ${v.trim()}`);
+                }
+                else if (looksLikeIssue && Array.isArray(v)) {
+                    for (const item of v) {
+                        if (typeof item === "string" && item.trim())
+                            reasons.push(`${k}: ${item.trim()}`);
+                        else
+                            collect(item, depth + 1);
+                    }
+                }
+                else {
+                    collect(v, depth + 1);
+                }
+            }
+        }
+    };
+    collect(obj, 0);
+    const uniqReasons = [...new Set(reasons)];
+    if (uniqReasons.length > 0) {
+        lines.push("Issues:");
+        for (const r of uniqReasons.slice(0, 20))
+            lines.push(`  - ${r}`);
     }
-    if ((await page.getByText(/항목이 저장되었습니다|saved/i).count()) > 0) {
-        return;
-    }
-    if ((await page.getByText(/변경사항이 저장되지 않았|unsaved/i).count()) === 0) {
-        throw new Error("Save button not found on dashboard page.");
+    else {
+        // 拒否理由を自動抽出できなかった場合も「Issues なし＝承認」と誤読されないよう明示する。
+        // Google のレスポンス形状変更でキー名マッチが外れても、生レスポンスの確認へ誘導する。
+        lines.push("Issues: none auto-extracted — verify the raw status response for any rejection details.");
     }
+    if (lines.length === 0)
+        return null;
+    return ["── Summary ──", ...lines].join("\n");
 }
 // ── Shared tool schemas (single source of truth for main server + sandbox) ──
 const itemIdSchema = z
@@ -338,23 +464,33 @@ const schemas = {
             .optional()
             .describe("Raw metadata object forwarded as-is to the v1.1 API. Useful for fields not exposed as first-class params."),
     },
-    "update-metadata-ui": {
+    submit: {
+        zipPath: z.string().describe("Absolute path to the ZIP file to upload and submit"),
         itemId: itemIdSchema,
-        title: z.string().optional().describe("Store listing title"),
-        summary: z.string().optional().describe("Store listing short summary"),
-        description: z.string().optional().describe("Store listing long description"),
-        category: z.string().optional().describe("Category label as shown in dashboard UI"),
-        homepageUrl: z.string().optional().describe("Homepage URL"),
-        supportUrl: z.string().optional().describe("Support URL"),
-        storeIconPath: z.string().optional().describe("Absolute path to 128x128 store icon image"),
-        accountIndex: z
+        publisherId: publisherIdSchema,
+        publishType: z
+            .enum(["DEFAULT_PUBLISH", "STAGED_PUBLISH"])
+            .optional()
+            .describe("DEFAULT_PUBLISH (default): publish immediately after approval. STAGED_PUBLISH: stage for manual publishing."),
+        deployPercentage: z
             .number()
             .int()
             .min(0)
-            .max(9)
+            .max(100)
+            .optional()
+            .describe("Initial deploy percentage for staged rollout (0-100)."),
+        skipReview: z
+            .boolean()
+            .optional()
+            .describe("Attempt to skip review if the extension qualifies. Defaults to false."),
+        blockOnWarnings: z
+            .boolean()
+            .optional()
+            .describe("If true, block the publish when the submission has warnings. Defaults to false."),
+        preflight: z
+            .boolean()
             .optional()
-            .describe("Google account index in dashboard URL (default: 0)"),
-        headless: z.boolean().optional().describe("Run browser headless (default: false)"),
+            .describe("Verify the item exists before uploading (default: true). Set false to skip the pre-check."),
     },
 };
 const descriptions = {
@@ -364,8 +500,8 @@ const descriptions = {
     cancel: "Cancel a pending submission on Chrome Web Store. Can be used to cancel an item currently in review.",
     "deploy-percentage": "Set the published deploy percentage for staged rollout on Chrome Web Store. The new percentage must be higher than the current target. Only available for items with 10,000+ seven-day active users.",
     get: `Get the current metadata of a Chrome Web Store item (v1.1 API). Returns title, description, category, and other listing fields. Note: the v1.1 API is deprecated and will be removed after ${V1_SUNSET}.`,
-    "update-metadata": `Update the store listing metadata of a Chrome Web Store item (v1.1 API). Supports common fields and a raw metadata payload. Note: the v1.1 API is deprecated and will be removed after ${V1_SUNSET}. Use 'update-metadata-ui' as the long-term alternative.`,
-    "update-metadata-ui": "Update listing metadata via Chrome Web Store dashboard UI automation (Playwright). Use this when API metadata updates are not reflected, or as the primary metadata update method since the v1.1 API is deprecated.",
+    "update-metadata": `Update the store listing metadata of a Chrome Web Store item (v1.1 API). Supports common fields and a raw metadata payload. Note: the v1.1 API is deprecated and will be removed after ${V1_SUNSET}; after that, listing changes must be made in the Developer Dashboard.`,
+    submit: "One-shot submission: (optional preflight existence check) → upload the ZIP → verify the upload succeeded → publish for review → return the final status with a readable summary. Combines upload + publish + status and surfaces actionable errors at each step.",
 };
 // ── MCP Server ──
 const server = new McpServer({
@@ -383,7 +519,7 @@ server.registerTool("upload", { description: descriptions.upload, inputSchema: s
             method: "POST",
             headers: { "Content-Type": "application/zip" },
             body: new Uint8Array(zipData),
-        });
+        }, 180_000);
         return formatResponse(result);
     }
     catch (e) {
@@ -395,16 +531,8 @@ server.registerTool("publish", { description: descriptions.publish, inputSchema:
     try {
         const id = resolveItemId(itemId);
         const pub = resolvePublisherId(publisherId);
-        const url = `${API_BASE}/v2/publishers/${pub}/items/${id}:publish`;
-        const body = {};
-        if (publishType)
-            body.publishType = publishType;
-        if (deployPercentage !== undefined)
-            body.deployInfos = [{ deployPercentage }];
-        if (skipReview !== undefined)
-            body.skipReview = skipReview;
-        if (blockOnWarnings !== undefined)
-            body.blockOnWarnings = blockOnWarnings;
+        const url = itemUrl(pub, id, "publish");
+        const body = buildPublishBody({ publishType, deployPercentage, skipReview, blockOnWarnings });
         const hasBody = Object.keys(body).length > 0;
         const result = await apiCall(url, {
             method: "POST",
@@ -423,9 +551,15 @@ server.registerTool("status", { description: descriptions.status, inputSchema: s
     try {
         const id = resolveItemId(itemId);
         const pub = resolvePublisherId(publisherId);
-        const url = `${API_BASE}/v2/publishers/${pub}/items/${id}:fetchStatus`;
+        const url = itemUrl(pub, id, "fetchStatus");
         const result = await apiCall(url, { method: "GET" });
-        return formatResponse(result);
+        const formatted = formatResponse(result);
+        if (result.ok) {
+            const summary = summarizeStatus(result.body);
+            if (summary)
+                return appendNote(formatted, summary);
+        }
+        return formatted;
     }
     catch (e) {
         return toolError(e);
@@ -436,7 +570,7 @@ server.registerTool("cancel", { description: descriptions.cancel, inputSchema: s
     try {
         const id = resolveItemId(itemId);
         const pub = resolvePublisherId(publisherId);
-        const url = `${API_BASE}/v2/publishers/${pub}/items/${id}:cancelSubmission`;
+        const url = itemUrl(pub, id, "cancelSubmission");
         const result = await apiCall(url, { method: "POST" });
         return formatResponse(result);
     }
@@ -449,7 +583,7 @@ server.registerTool("deploy-percentage", { description: descriptions["deploy-per
     try {
         const id = resolveItemId(itemId);
         const pub = resolvePublisherId(publisherId);
-        const url = `${API_BASE}/v2/publishers/${pub}/items/${id}:setPublishedDeployPercentage`;
+        const url = itemUrl(pub, id, "setPublishedDeployPercentage");
         const result = await apiCall(url, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
@@ -464,6 +598,9 @@ server.registerTool("deploy-percentage", { description: descriptions["deploy-per
 // ── get (v1.1 — deprecated, sunset Oct 2026) ──
 server.registerTool("get", { description: descriptions.get, inputSchema: schemas.get }, async ({ itemId, projection }) => {
     try {
+        const guard = v1SunsetGuard();
+        if (guard)
+            return guard;
         const id = resolveItemId(itemId);
         const p = projection || "DRAFT";
         const url = `${V1_BASE}/items/${id}?projection=${encodeURIComponent(p)}`;
@@ -477,6 +614,9 @@ server.registerTool("get", { description: descriptions.get, inputSchema: schemas
 // ── update-metadata (v1.1 — deprecated, sunset Oct 2026) ──
 server.registerTool("update-metadata", { description: descriptions["update-metadata"], inputSchema: schemas["update-metadata"] }, async ({ itemId, title, summary, description, category, defaultLocale, homepageUrl, supportUrl, metadata }) => {
     try {
+        const guard = v1SunsetGuard();
+        if (guard)
+            return guard;
         const id = resolveItemId(itemId);
         const url = `${V1_BASE}/items/${id}`;
         const payload = { ...(metadata || {}) };
@@ -508,69 +648,129 @@ server.registerTool("update-metadata", { description: descriptions["update-metad
         return toolError(e);
     }
 });
-// ── update-metadata-ui (dashboard automation) ──
-server.registerTool("update-metadata-ui", { description: descriptions["update-metadata-ui"], inputSchema: schemas["update-metadata-ui"] }, async ({ itemId, title, summary, description, category, homepageUrl, supportUrl, storeIconPath, accountIndex, headless }) => {
+// ── submit (one-shot: preflight → upload → publish → status) ──
+server.registerTool("submit", { description: descriptions.submit, inputSchema: schemas.submit }, async ({ zipPath, itemId, publisherId, publishType, deployPercentage, skipReview, blockOnWarnings, preflight }) => {
     try {
         const id = resolveItemId(itemId);
-        const idx = accountIndex ?? 0;
-        const dashboardUrl = `https://chromewebstore.google.com/u/${idx}/dashboard/${id}/edit`;
-        const hasAnyField = [title, summary, description, category, homepageUrl, supportUrl, storeIconPath].some((v) => typeof v === "string" && v.trim().length > 0);
-        if (!hasAnyField) {
-            throw new Error("No fields provided for UI update.");
-        }
-        const context = await chromium.launchPersistentContext(DASHBOARD_PROFILE_DIR, {
-            channel: "chrome",
-            headless: headless ?? false,
-        });
+        const pub = resolvePublisherId(publisherId);
+        const steps = [];
+        // ZIP を先に読む（パス不正ならここで分かりやすく失敗）。
+        let zipData;
         try {
-            const page = context.pages()[0] || (await context.newPage());
-            await page.goto(dashboardUrl, { waitUntil: "domcontentloaded", timeout: 90_000 });
-            await page.waitForTimeout(2500);
-            if (page.url().includes("accounts.google.com")) {
-                throw new Error(`Not signed in to Chrome Web Store dashboard. Open once with headless=false and sign in. Profile dir: ${DASHBOARD_PROFILE_DIR}`);
-            }
-            if (title?.trim()) {
-                await fillTextFieldByLabel(page, ["Title", "제목", "Name", "이름"], title.trim());
-            }
-            if (summary?.trim()) {
-                await fillTextFieldByLabel(page, ["Summary", "Short description", "요약", "짧은 설명"], summary.trim());
-            }
-            if (description?.trim()) {
-                await fillTextFieldByLabel(page, ["Description", "설명"], description.trim());
-            }
-            if (homepageUrl?.trim()) {
-                await fillTextFieldByLabel(page, ["Homepage", "홈페이지"], homepageUrl.trim());
-            }
-            if (supportUrl?.trim()) {
-                await fillTextFieldByLabel(page, ["Support", "지원", "Help", "도움말"], supportUrl.trim());
-            }
-            if (storeIconPath?.trim()) {
-                await uploadFileBySectionLabel(page, ["Store icon", "스토어 아이콘", "아이콘", "Icon"], storeIconPath.trim());
-            }
-            if (category?.trim()) {
-                const categoryCombo = page.getByRole("combobox", { name: /category|카테고리/i }).first();
-                if ((await categoryCombo.count()) > 0) {
-                    await categoryCombo.click();
-                    const option = page.getByRole("option", { name: new RegExp(escapeRegExp(category), "i") }).first();
-                    if ((await option.count()) > 0) {
-                        await option.click();
-                    }
-                }
+            zipData = readFileSync(zipPath);
+        }
+        catch (e) {
+            return toolError(new Error(`Cannot read ZIP at '${zipPath}': ${errMsg(e)}`));
+        }
+        // 1) Preflight: アイテム存在確認（アップロード前に 404 を検出する）。
+        if (preflight !== false) {
+            const pre = await apiCall(itemUrl(pub, id, "fetchStatus"), {
+                method: "GET",
+            });
+            const preMissing = !pre.ok && (pre.status === 404 || pre.body.toLowerCase().includes("could not find handler"));
+            if (preMissing) {
+                const hint = interpretCwsError(pre.status, pre.body);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `Preflight failed: item '${id}' was not found (HTTP ${pre.status}).` +
+                                (hint ? `\n\n${hint}` : ""),
+                        },
+                    ],
+                    isError: true,
+                };
             }
-            await clickSaveButton(page);
+            steps.push({ step: "preflight", ok: pre.ok, detail: pre.ok ? "item exists" : `status ${pre.status} (proceeding)` });
+        }
+        // 2) Upload
+        const uploadRes = await apiCall(`${UPLOAD_BASE}/publishers/${pub}/items/${id}:upload`, {
+            method: "POST",
+            headers: { "Content-Type": "application/zip" },
+            body: new Uint8Array(zipData),
+        }, 180_000);
+        let uploadState;
+        let uploadItemError;
+        try {
+            const j = JSON.parse(uploadRes.body);
+            uploadState = typeof j.uploadState === "string" ? j.uploadState : undefined;
+            uploadItemError = j.itemError;
+        }
+        catch {
+            // non-JSON body — leave undefined
+        }
+        // upload は HTTP 200 でも uploadState=FAILURE / itemError で失敗していることがある。
+        // 「成功と確認できたときだけ次へ進む」方針: HTTP エラー・itemError（配列でもオブジェクトでも）・
+        // 既知の非 SUCCESS ステートは失敗扱いにし、壊れた版を黙って publish しない。
+        // ただし進行中（IN_PROGRESS / PROCESSING）と、ステート不明（非 JSON で HTTP 200）のときは中断しない。
+        const uploadPending = uploadState === "IN_PROGRESS" || uploadState === "PROCESSING";
+        const hasItemError = uploadItemError != null &&
+            (!Array.isArray(uploadItemError) || uploadItemError.length > 0);
+        const uploadFailed = !uploadRes.ok ||
+            hasItemError ||
+            (uploadState !== undefined && uploadState !== "SUCCESS" && !uploadPending);
+        steps.push({
+            step: "upload",
+            ok: !uploadFailed,
+            detail: `HTTP ${uploadRes.status}${uploadState ? `, uploadState=${uploadState}` : ""}`,
+        });
+        if (uploadFailed) {
+            const hint = interpretCwsError(uploadRes.status, uploadRes.body);
             return {
                 content: [
                     {
                         type: "text",
-                        text: JSON.stringify({ ok: true, mode: "dashboard-ui", profileDir: DASHBOARD_PROFILE_DIR, url: page.url() }, null, 2),
+                        text: `Upload failed (HTTP ${uploadRes.status}${uploadState ? `, uploadState=${uploadState}` : ""}): ${uploadRes.body}` +
+                            (hint ? `\n\n${hint}` : ""),
                     },
                 ],
-                isError: false,
+                isError: true,
             };
         }
-        finally {
-            await context.close();
+        // 3) Publish
+        const publishBody = buildPublishBody({ publishType, deployPercentage, skipReview, blockOnWarnings });
+        const hasBody = Object.keys(publishBody).length > 0;
+        const publishRes = await apiCall(itemUrl(pub, id, "publish"), {
+            method: "POST",
+            ...(hasBody
+                ? { headers: { "Content-Type": "application/json" }, body: JSON.stringify(publishBody) }
+                : {}),
+        });
+        steps.push({ step: "publish", ok: publishRes.ok, detail: `HTTP ${publishRes.status}` });
+        if (!publishRes.ok) {
+            const hint = interpretCwsError(publishRes.status, publishRes.body);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Upload succeeded, but publish failed (HTTP ${publishRes.status}): ${publishRes.body}` +
+                            (hint ? `\n\n${hint}` : "") +
+                            "\n\nNote: the new ZIP is already uploaded as a draft — no need to re-upload. " +
+                            "Retry with the 'publish' tool alone; re-running 'submit' would upload the ZIP again unnecessarily.",
+                    },
+                ],
+                isError: true,
+            };
         }
+        // 4) Final status
+        const statusRes = await apiCall(itemUrl(pub, id, "fetchStatus"), {
+            method: "GET",
+        });
+        steps.push({ step: "status", ok: statusRes.ok, detail: `HTTP ${statusRes.status}` });
+        const summary = statusRes.ok ? summarizeStatus(statusRes.body) : null;
+        const out = [
+            `✅ Submitted '${id}' for review.`,
+            "",
+            "Steps:",
+            ...steps.map((s) => `  ${s.ok ? "✓" : "✗"} ${s.step}${s.detail ? ` — ${s.detail}` : ""}`),
+        ];
+        if (summary)
+            out.push("", summary);
+        // 要約のキー名マッチが外れても拒否理由を取りこぼさないよう、生 status も併記する。
+        if (statusRes.ok)
+            out.push("", "Status response:", statusRes.body);
+        out.push("", "Publish response:", publishRes.body);
+        return { content: [{ type: "text", text: out.join("\n") }], isError: false };
     }
     catch (e) {
         return toolError(e);
@@ -583,40 +783,29 @@ server.registerResource("extension-status", new ResourceTemplate("cws://extensio
     mimeType: "application/json",
 }, async (uri, variables) => {
     const extensionId = String(variables.extensionId);
+    const encId = encodeURIComponent(extensionId);
     try {
         const pub = resolvePublisherId();
-        const token = await getAccessToken();
-        // v2 status — the canonical source, must succeed.
-        const statusRes = await fetch(`${API_BASE}/v2/publishers/${pub}/items/${extensionId}:fetchStatus`, {
-            headers: { Authorization: `Bearer ${token}` },
-        });
-        const statusText = await statusRes.text();
-        let statusData;
-        try {
-            statusData = JSON.parse(statusText);
-        }
-        catch {
-            statusData = { raw: statusText };
-        }
-        // v1.1 metadata — optional, gracefully degrades once the v1.1 API is sunset.
-        let metaData;
-        try {
-            const metaRes = await fetch(`${V1_BASE}/items/${extensionId}?projection=PUBLISHED`, {
-                headers: { Authorization: `Bearer ${token}` },
-            });
-            const metaText = await metaRes.text();
+        // v2 status (canonical) と v1.1 metadata (optional) は独立なので並列取得。
+        // apiCall 経由でトークン付与・タイムアウト・401 無効化を tool 群と共有する。
+        const [statusRes, metaRes] = await Promise.all([
+            apiCall(itemUrl(pub, encId, "fetchStatus"), { method: "GET" }),
+            apiCall(`${V1_BASE}/items/${encId}?projection=PUBLISHED`, { method: "GET" }).catch((e) => ({ ok: false, status: 0, body: errMsg(e) })),
+        ]);
+        const parseBody = (raw) => {
             try {
-                metaData = JSON.parse(metaText);
+                return JSON.parse(raw);
             }
             catch {
-                metaData = { raw: metaText };
+                return { raw };
             }
-        }
-        catch (e) {
-            metaData = {
-                unavailable: `v1.1 metadata fetch failed (the v1.1 API is deprecated after ${V1_SUNSET}): ${errMsg(e)}`,
+        };
+        const statusData = parseBody(statusRes.body);
+        const metaData = metaRes.ok
+            ? parseBody(metaRes.body)
+            : {
+                unavailable: `v1.1 metadata fetch failed (the v1.1 API is deprecated after ${V1_SUNSET}): ${metaRes.body}`,
             };
-        }
         const result = { extensionId, status: statusData, metadata: metaData };
         return {
             contents: [
@@ -651,11 +840,11 @@ server.registerPrompt("publish_extension", {
 Extension ID: ${extensionId}
 ZIP file: ${zipPath}${version ? `\nNew version: ${version}` : ""}
 
-Follow these steps using the available cws-mcp tools:
+Tip: for a one-shot flow, the \`submit\` tool runs preflight → upload → publish → status in a single call. (A brand-new extension must first be created in the Developer Dashboard — the CWS API cannot create items.) The step-by-step flow below is the manual equivalent:
 
 1. **Upload the ZIP** — Use the \`upload\` tool with zipPath="${zipPath}" and itemId="${extensionId}" to upload the new build as a draft.
 2. **Verify upload** — Use the \`status\` tool to confirm the upload succeeded and the item is in DRAFT state.
-3. **Check/update metadata** — Use the \`get\` tool (projection=DRAFT) to review current listing metadata. If anything needs updating (title, description, category), prefer \`update-metadata-ui\` (the v1.1-based \`update-metadata\` is deprecated and sunset ${V1_SUNSET}).
+3. **Check/update metadata** — Use the \`get\` tool (projection=DRAFT) to review current listing metadata. If text fields need updating (title, description, category), use \`update-metadata\` (v1.1, deprecated and sunset ${V1_SUNSET}); after the sunset, edit the listing in the Developer Dashboard.
 4. **Publish** — Use the \`publish\` tool to submit the draft for review. Optionally use publishType="STAGED_PUBLISH" for staged rollout, or skipReview=true if eligible.
 5. **Confirm submission** — Use the \`status\` tool again to confirm the item entered the review queue.
 6. **Optional staged rollout** — After approval, use \`deploy-percentage\` to gradually roll out (e.g., 10%, 50%, 100%).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1llum1n4t1/cws-mcp",
-  "version": "1.4.2",
+  "version": "2.0.0",
   "mcpName": "io.github.1llum1n4t1s/cws",
   "description": "MCP server for Chrome Web Store extension management (V2 API)",
   "type": "module",
@@ -46,7 +46,6 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "playwright": "^1.60.0",
     "zod": "^3.24.2"
   },
   "devDependencies": {