@extenshi/mcp 0.5.2 → 0.7.0

package/dist/development-guide.js

@@ -0,0 +1,273 @@
+const docs = (page) => `https://docs.extenshi.io/developers/${page}`;
+const toolPage = (key) => `https://dojo.extenshi.io/tools/${key}`;
+export const DEVELOPMENT_GUIDE_URL = docs('development-workflow');
+export const DEVELOPMENT_SERVICES = [
+    {
+        id: 'documentation',
+        purpose: 'Discover capabilities, extension shapes, exact CLI commands and reusable agent skills.',
+        tools: ['get_development_guide', 'search_docs', 'list_extension_templates'],
+        access: 'Free guidance; no API key. Hosted transport still requires connector sign-in.',
+        urls: [docs('mcp'), DEVELOPMENT_GUIDE_URL, docs('agent-skills')],
+    },
+    {
+        id: 'account',
+        purpose: 'Sign in, provision an API key for local tools and check credit pools before paid work.',
+        tools: ['get_credit_balance', 'connection_diagnostics'],
+        access: 'Balance lookup is free and requires identity; catalog reads and scans use credit pools.',
+        urls: [docs('scan-credits'), 'https://dojo.extenshi.io/api-keys', 'https://dojo.extenshi.io/billing'],
+    },
+    {
+        id: 'research',
+        purpose: 'Validate demand, competitors, user complaints, permissions and existing security findings.',
+        tools: [
+            'search_extensions',
+            'get_extension',
+            'get_reviews',
+            'get_security',
+            'get_risk_by_store_ids',
+            'market_overview',
+        ],
+        access: 'Identity required. Catalog tools cost 1 read per call; get_security costs 3. Bulk risk: up to 40 per call. Chrome review text is unavailable; use its aggregate.',
+        urls: [docs('mcp'), 'https://catalog.extenshi.io'],
+    },
+    {
+        id: 'projects',
+        purpose: 'Read an existing project, selected browser types, manifests, repository binding, saved tool state, hosted URLs and starter files.',
+        tools: [
+            'list_my_projects',
+            'get_project_state',
+            'get_project_scaffold',
+            'get_project_workspace',
+            'import_manifest',
+            'diff_project_state',
+            'apply_project_patch',
+            'record_project_evidence',
+            'create_ci_ingest_secret',
+            'upsert_hosted_page',
+            'verify_hosted_artifact',
+            'list_hosted_pages',
+            'get_release_readiness',
+        ],
+        access: 'Own-project MCP reads are free and require identity. Create projects in the cabinet. Synchronize repository metadata, source/built manifests and scope with typed revisioned patches. project.write, evidence.write and hosted.write require explicit OAuth consent. Repository metadata does not grant GitHub access. CI evidence (source=ci) is written only by the verified ingest endpoint — create its secret with create_ci_ingest_secret. Automated release-readiness access requires a Pro project.',
+        urls: [
+            DEVELOPMENT_GUIDE_URL,
+            'https://dojo.extenshi.io/projects',
+            'https://dojo.extenshi.io/integrations',
+        ],
+    },
+    {
+        id: 'manifest',
+        purpose: 'Choose minimum permissions, target browsers and manifest entries; validate every referenced file.',
+        tools: ['list_extension_templates', 'get_project_state', 'get_project_scaffold'],
+        access: 'Free template guidance; project reads require identity. The cabinet also has a manifest editor.',
+        urls: [docs('manifest-generator'), toolPage('manifest-generator')],
+    },
+    {
+        id: 'localization',
+        purpose: 'Translate extension messages locally with your coding agent and validate the resulting locales.',
+        tools: ['localize_workflow'],
+        access: 'Free static workflow; local CLI validation requires no key or Extenshi credits. Translation uses your agent provider. Check CLI release availability before invoking commands.',
+        urls: [docs('localization')],
+    },
+    {
+        id: 'icons',
+        purpose: 'Design the SVG, preview at toolbar sizes and export store assets with the local CLI.',
+        tools: ['generate_icon_workflow'],
+        access: 'Free workflow. Drawing, browser preview and file export happen in the local agent environment; the cabinet offers its own icon generator subject to availability and credits.',
+        urls: [docs('icon-generator'), toolPage('icon-generator')],
+    },
+    {
+        id: 'privacy',
+        purpose: 'Describe actual data practices; generate/export a policy or maintain a hosted policy and its version history.',
+        tools: [
+            'list_privacy_policy_versions',
+            'get_privacy_policy_version',
+            'update_privacy_policy_with_ai',
+            'publish_privacy_policy',
+        ],
+        access: 'Hosted policy tools require an owned Pro project. Version reads spend no credit; AI updates have a per-project daily limit. publish_privacy_policy changes the live page. The browser generator supports export.',
+        urls: [docs('privacy-policy-generator'), docs('data-declaration'), toolPage('privacy-policy-generator')],
+    },
+    {
+        id: 'onboarding',
+        purpose: 'Prepare a welcome page, pin guide, install instructions and uninstall survey; wire verified URLs into the extension.',
+        tools: ['generate_welcome_page_workflow', 'get_project_state'],
+        access: 'Free welcome-page brief. Edit, host and inspect responses in the cabinet where enabled; account/project limits apply. MCP returns guidance and saved state, not a page-publishing tool.',
+        urls: [
+            DEVELOPMENT_GUIDE_URL,
+            docs('pin-guide'),
+            docs('uninstall-feedback'),
+            toolPage('onboarding-page'),
+            toolPage('instruction-generator'),
+            toolPage('install-instructions'),
+            toolPage('uninstall-feedback'),
+        ],
+    },
+    {
+        id: 'listing-and-marketing',
+        purpose: 'Prepare listing copy, screenshots, landing page, support links and AI discovery assets.',
+        tools: [],
+        access: 'Use CLI generate-listing / review-risk and cabinet tools where enabled. MCP has no listing, landing-page or SEO execution tool.',
+        urls: [
+            docs('cli'),
+            docs('ai-visibility'),
+            docs('store-policies'),
+            toolPage('page-generator'),
+            toolPage('seo-optimizer'),
+            toolPage('ai-visibility'),
+        ],
+    },
+    {
+        id: 'verification-and-ci',
+        purpose: 'Test the built extension in each target browser, review store risks, scan the final package and retain reports in CI.',
+        tools: ['scan_extension'],
+        access: 'Scan requires a local artifact and API key, and spends 1 scan credit. CLI review-risk is local. Configure GitHub Actions in the repository; browser tests use the agent environment.',
+        urls: [docs('cli'), docs('cli-github-actions'), docs('store-policies')],
+    },
+    {
+        id: 'publishing',
+        purpose: 'Validate store credentials, submit the exact tested package and verify review status and the public listing.',
+        tools: ['publish_extension'],
+        access: 'Local stdio or CLI with local store credentials; publishing access is checked. Store registration, disclosures and review are separate steps. Upload success alone does not establish a live release.',
+        urls: [docs('cli'), docs('publish-to-chrome-web-store'), toolPage('publish')],
+    },
+    {
+        id: 'maintenance',
+        purpose: 'Claim the listing, respond to findings, inspect reviews/uninstall feedback, update policies and maintain releases.',
+        tools: ['get_reviews', 'get_security', 'get_project_state'],
+        access: 'Catalog reads are metered. Ownership, declarations, responses, badges and feedback management use the cabinet; consult account access.',
+        urls: [
+            docs('claim-your-extension'),
+            docs('respond-to-findings'),
+            docs('security-badge'),
+            docs('uninstall-feedback'),
+            docs('data-declaration'),
+        ],
+    },
+    {
+        id: 'monetization',
+        purpose: 'Optional paid-feature integration: seller setup, offers, checkout, signed entitlements and purchase verification.',
+        tools: [
+            'list_pay_apps',
+            'create_pay_app',
+            'get_pay_app',
+            'get_pay_readiness',
+            'link_pay_app',
+            'unlink_pay_app',
+            'archive_pay_app',
+            'export_pay_data',
+            'get_pay_seller',
+            'connect_pay_seller',
+            'refresh_pay_seller',
+            'set_pay_seller_profile',
+            'upsert_pay_offer',
+            'archive_pay_offer',
+            'set_pay_enabled',
+            'rotate_pay_key',
+        ],
+        access: 'Pay applications work independently of development projects. Explicit pay.read/pay.write permission is required; older connections and API keys have no Pay grant. Check get_pay_readiness and actual SDK distribution before integrating. Author completes seller agreement and Stripe KYC in the browser. Configure offers and profile, then enable checkout only with explicit authorization. Registration does not prove production deployment or npm publication.',
+        urls: [docs('pay-sdk'), 'https://dojo.extenshi.io/payments'],
+    },
+];
+const WORKFLOW = [
+    {
+        id: 'scope',
+        actions: 'Record the user problem, target sites and browsers, MVP, permissions/data needs, acceptance criteria, distribution and optional monetization. Inspect available tools with get_development_guide; use search_docs for current details. Keep deferred features out of release promises.',
+        doneWhen: 'A written scope and acceptance checklist cover implementation, testing, assets, release and maintenance.',
+    },
+    {
+        id: 'research',
+        actions: 'If market research is needed, check get_credit_balance, then search_extensions / market_overview, get_extension and get_reviews for a small relevant set. Use get_security for detailed findings or get_risk_by_store_ids for a batch. Record gaps and constraints.',
+        doneWhen: 'The chosen feature and supported surfaces have evidence; optional research is marked skipped with a reason.',
+    },
+    {
+        id: 'project-and-repository',
+        actions: 'With identity, call list_my_projects then get_project_state for the selected project. Reuse its repository. If no project exists, create/configure one in dojo where available; otherwise continue locally and record that integration is pending. Create or reuse a Git remote, preferably GitHub, before substantial implementation.',
+        doneWhen: 'Project ID (or explicit pending status), repository URL, branch, README, build commands and release checklist are recorded.',
+    },
+    {
+        id: 'architecture-and-scaffold',
+        actions: 'Call list_extension_templates, choose minimum permissions and browser-specific files. For a new project call get_project_scaffold once per browser into separate outputs; preserve existing code when integrating an existing repository. Read includeToolStates only for needed keys. Write integration.file verbatim to integration.path, review integration.unwired and re-read state after cabinet changes.',
+        doneWhen: 'Each manifest references real packaged files; browser variants and the project integration contract are preserved.',
+    },
+    {
+        id: 'implementation',
+        actions: 'Implement the MVP, accessible popup/options, storage and error handling. Test actual target sites and extension lifecycle, including service-worker restart and permission denial. Use localize_workflow for local message translation, structural validation and manual language/RTL review. If payments or user accounts are needed, verify the supported integration and complete its prerequisites before depending on it.',
+        doneWhen: 'Acceptance criteria pass on real target surfaces; optional integrations have end-to-end evidence or remain explicit blockers.',
+    },
+    {
+        id: 'assets-and-hosted-pages',
+        actions: "Use generate_icon_workflow and generate_welcome_page_workflow as needed. Prepare screenshots, pin/install instructions, a privacy policy, uninstall feedback, support and landing URLs. For an existing Pro policy, list/read versions, then update_privacy_policy_with_ai when needed, review proposedMarkdown and publish within the author's authorization. Re-read get_project_state and verify the returned URLs.",
+        doneWhen: 'Assets show the real product; hosted links load and match actual data practices; installation/uninstallation flows work.',
+    },
+    {
+        id: 'quality-and-listing',
+        actions: 'Build each browser package; run unit/integration checks and manual browser scenarios. Get exact review-risk and generate-listing commands from search_docs; review disclosures, permission justifications, listing copy and screenshots against the build. Run scan_extension if available, otherwise the local CLI. Add CI using cli-github-actions docs.',
+        doneWhen: 'The exact versioned artifact has passing checks, retained scan/review reports and truthful store materials; unresolved findings have a disposition.',
+    },
+    {
+        id: 'release',
+        actions: "Verify store accounts, credentials and submission access; use publish_extension with validate_only first when available. Submit the tested artifact within the user's publishing authorization through local MCP, CLI or the store console. Record upload, submission, approval and public-listing status separately.",
+        doneWhen: 'Store status and installed version are verified; pending store review is reported as pending, with artifact and source commit recorded.',
+    },
+    {
+        id: 'operate',
+        actions: 'Claim the catalog listing, maintain declarations and a security badge, review findings and uninstall feedback, verify optional purchase/license flows, and plan updates. Repeat build, review, scan, policy and release checks for later versions.',
+        doneWhen: 'A handoff records repository/commit, artifacts, URLs, checks, remaining blockers, support owner and follow-up work.',
+    },
+];
+export function buildDevelopmentGuide(registeredTools) {
+    const names = new Set(registeredTools.map((tool) => tool.name));
+    return {
+        schemaVersion: 1,
+        documentation: DEVELOPMENT_GUIDE_URL,
+        availability: 'tools lists the tools registered on THIS connection. Registration does not prove account access, remaining credits or local prerequisites. Service URLs describe where work happens; check live account/project access. Use MCP tools/list for the exact input schemas. This guide makes no network calls.',
+        tools: registeredTools.map((tool) => ({
+            ...tool,
+            docs: [
+                ...new Set(DEVELOPMENT_SERVICES.filter((s) => s.tools.includes(tool.name)).flatMap((s) => s.urls.filter((url) => url.startsWith('https://docs.extenshi.io/')))),
+            ],
+        })),
+        localActions: ['scan_extension', 'publish_extension'].map((name) => ({
+            name,
+            availableInThisConnection: names.has(name),
+            fallback: 'Use local @extenshi/mcp (stdio), or npx @extenshi/cli@latest on the machine holding the artifact. Read search_docs for exact commands and prerequisites.',
+            docs: docs('cli'),
+        })),
+        services: DEVELOPMENT_SERVICES.map(({ tools, ...service }) => ({
+            ...service,
+            toolsInThisConnection: tools.filter((name) => names.has(name)),
+        })),
+        repository: {
+            recommendation: 'Keep source in a developer-owned Git repository; prefer GitHub for the existing dojo integration and GitHub Actions. Reuse the bound repository. GitLab, Bitbucket or self-hosted Git also work with local code and CI; their automatic dojo binding is not provided by these MCP tools.',
+            setup: "Choose repository owner and visibility with the developer; use a private repository unless public source is intended. Connect GitHub at https://dojo.extenshi.io/integrations and select the repository in the project where enabled. Repository creation/writes use GitHub, its connector/CLI or the cabinet, with the user's authorization.",
+            layout: [
+                'README.md: setup, target browsers, build/test/release commands',
+                'src/: extension logic and extenshi.config.js at the path supplied by the project',
+                'assets/ and _locales/: icons and translations (follow the chosen framework layout)',
+                'tests/: behavior and browser scenarios',
+                'docs/: privacy source, listing copy, support and release checklist',
+                '.github/workflows/: build, tests and artifact scan',
+                'dist/: generated per-browser packages; attach versioned artifacts to CI/releases',
+            ],
+            practice: 'Commit source, dependency lockfile and .env.example with placeholders. Keep tokens, store credentials, signing keys, .env and user data in local/CI secret storage. Use branches and reviewable pull requests; associate release artifacts with a source commit/tag.',
+            docs: [
+                'https://docs.github.com/en/repositories/creating-and-managing-repositories/quickstart-for-repositories',
+                docs('cli-github-actions'),
+                DEVELOPMENT_GUIDE_URL,
+            ],
+        },
+        workflow: WORKFLOW,
+        handoff: [
+            'scope and acceptance criteria',
+            'project ID, repository URL, branch and commit',
+            'completed/skipped/blocked stages with reasons',
+            'per-browser artifact version and checks',
+            'hosted policy/onboarding/support URLs',
+            'store submission versus live status',
+            'optional payment verification',
+            'remaining actions and owners',
+        ],
+    };
+}
+//# sourceMappingURL=development-guide.js.map

package/dist/development-guide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-guide.js","sourceRoot":"","sources":["../src/development-guide.ts"],"names":[],"mappings":"AAaA,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,uCAAuC,IAAI,EAAE,CAAA;AAC5E,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,kCAAkC,GAAG,EAAE,CAAA;AAEzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,sBAAsB,CAAC,CAAA;AAEjE,MAAM,CAAC,MAAM,oBAAoB,GAAG;IACnC;QACC,EAAE,EAAE,eAAe;QACnB,OAAO,EAAE,wFAAwF;QACjG,KAAK,EAAE,CAAC,uBAAuB,EAAE,aAAa,EAAE,0BAA0B,CAAC;QAC3E,MAAM,EAAE,+EAA+E;QACvF,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;KAChE;IACD;QACC,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,wFAAwF;QACjG,KAAK,EAAE,CAAC,oBAAoB,EAAE,wBAAwB,CAAC;QACvD,MAAM,EAAE,yFAAyF;QACjG,IAAI,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,mCAAmC,EAAE,kCAAkC,CAAC;KACrG;IACD;QACC,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,4FAA4F;QACrG,KAAK,EAAE;YACN,mBAAmB;YACnB,eAAe;YACf,aAAa;YACb,cAAc;YACd,uBAAuB;YACvB,iBAAiB;SACjB;QACD,MAAM,EACL,kKAAkK;QACnK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,6BAA6B,CAAC;KAClD;IACD;QACC,EAAE,EAAE,UAAU;QACd,OAAO,EACN,mIAAmI;QACpI,KAAK,EAAE;YACN,kBAAkB;YAClB,mBAAmB;YACnB,sBAAsB;YACtB,uBAAuB;YACvB,iBAAiB;YACjB,oBAAoB;YACpB,qBAAqB;YACrB,yBAAyB;YACzB,yBAAyB;YACzB,oBAAoB;YACpB,wBAAwB;YACxB,mBAAmB;YACnB,uBAAuB;SACvB;QACD,MAAM,EACL,6eAA6e;QAC9e,IAAI,EAAE;YACL,qBAAqB;YACrB,mCAAmC;YACnC,uCAAuC;SACvC;KACD;IACD;QACC,EAAE,EAAE,UAAU;QACd,OAAO,EACN,mGAAmG;QACpG,KAAK,EAAE,CAAC,0BAA0B,EAAE,mBAAmB,EAAE,sBAAsB,CAAC;QAChF,MAAM,EAAE,iGAAiG;QACzG,IAAI,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;KAClE;IACD;QACC,EAAE,EAAE,cAAc;QAClB,OAAO,EACN,iGAAiG;QAClG,KAAK,EAAE,CAAC,mBAAmB,CAAC;QAC5B,MAAM,EACL,gLAAgL;QACjL,IAAI,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;KAC5B;IACD;QACC,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,sFAAsF;QAC/F,KAAK,EAAE,CAAC,wBAAwB,CAAC;QACjC,MAAM,EACL,+KAA+K;QAChL,IAAI,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;KAC1D;IACD;QACC,EAAE,EAAE,SAAS;QACb,OAAO,EACN,+GAA+G;QAChH,KAAK,EAAE;YACN,8BAA8B;YAC9B,4BAA4B;YAC5B,+BAA+B;YAC/B,wBAAwB;SACxB;QACD,MAAM,EACL,kNAAkN;QACnN,IAAI,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;KACxG;IACD;QACC,EAAE,EAAE,YAAY;QAChB,OAAO,EACN,sHAAsH;QACvH,KAAK,EAAE,CAAC,gCAAgC,EAAE,mBAAmB,CAAC;QAC9D,MAAM,EACL,yLAAyL;QAC1L,IAAI,EAAE;YACL,qBAAqB;YACrB,IAAI,CAAC,WAAW,CAAC;YACjB,IAAI,CAAC,oBAAoB,CAAC;YAC1B,QAAQ,CAAC,iBAAiB,CAAC;YAC3B,QAAQ,CAAC,uBAAuB,CAAC;YACjC,QAAQ,CAAC,sBAAsB,CAAC;YAChC,QAAQ,CAAC,oBAAoB,CAAC;SAC9B;KACD;IACD;QACC,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,yFAAyF;QAClG,KAAK,EAAE,EAAE;QACT,MAAM,EACL,iIAAiI;QAClI,IAAI,EAAE;YACL,IAAI,CAAC,KAAK,CAAC;YACX,IAAI,CAAC,eAAe,CAAC;YACrB,IAAI,CAAC,gBAAgB,CAAC;YACtB,QAAQ,CAAC,gBAAgB,CAAC;YAC1B,QAAQ,CAAC,eAAe,CAAC;YACzB,QAAQ,CAAC,eAAe,CAAC;SACzB;KACD;IACD;QACC,EAAE,EAAE,qBAAqB;QACzB,OAAO,EACN,uHAAuH;QACxH,KAAK,EAAE,CAAC,gBAAgB,CAAC;QACzB,MAAM,EACL,sLAAsL;QACvL,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;KACvE;IACD;QACC,EAAE,EAAE,YAAY;QAChB,OAAO,EACN,8GAA8G;QAC/G,KAAK,EAAE,CAAC,mBAAmB,CAAC;QAC5B,MAAM,EACL,uMAAuM;QACxM,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;KAC7E;IACD;QACC,EAAE,EAAE,aAAa;QACjB,OAAO,EACN,oHAAoH;QACrH,KAAK,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,mBAAmB,CAAC;QAC3D,MAAM,EACL,wIAAwI;QACzI,IAAI,EAAE;YACL,IAAI,CAAC,sBAAsB,CAAC;YAC5B,IAAI,CAAC,qBAAqB,CAAC;YAC3B,IAAI,CAAC,gBAAgB,CAAC;YACtB,IAAI,CAAC,oBAAoB,CAAC;YAC1B,IAAI,CAAC,kBAAkB,CAAC;SACxB;KACD;IACD;QACC,EAAE,EAAE,cAAc;QAClB,OAAO,EACN,mHAAmH;QACpH,KAAK,EAAE;YACN,eAAe;YACf,gBAAgB;YAChB,aAAa;YACb,mBAAmB;YACnB,cAAc;YACd,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,gBAAgB;YAChB,oBAAoB;YACpB,oBAAoB;YACpB,wBAAwB;YACxB,kBAAkB;YAClB,mBAAmB;YACnB,iBAAiB;YACjB,gBAAgB;SAChB;QACD,MAAM,EACL,wcAAwc;QACzc,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,mCAAmC,CAAC;KAC5D;CACQ,CAAA;AAEV,MAAM,QAAQ,GAAG;IAChB;QACC,EAAE,EAAE,OAAO;QACX,OAAO,EACN,wRAAwR;QACzR,QAAQ,EACP,0GAA0G;KAC3G;IACD;QACC,EAAE,EAAE,UAAU;QACd,OAAO,EACN,qQAAqQ;QACtQ,QAAQ,EACP,6GAA6G;KAC9G;IACD;QACC,EAAE,EAAE,wBAAwB;QAC5B,OAAO,EACN,wUAAwU;QACzU,QAAQ,EACP,6HAA6H;KAC9H;IACD;QACC,EAAE,EAAE,2BAA2B;QAC/B,OAAO,EACN,iZAAiZ;QAClZ,QAAQ,EACP,oHAAoH;KACrH;IACD;QACC,EAAE,EAAE,gBAAgB;QACpB,OAAO,EACN,gaAAga;QACja,QAAQ,EACP,+HAA+H;KAChI;IACD;QACC,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EACN,wZAAwZ;QACzZ,QAAQ,EACP,0HAA0H;KAC3H;IACD;QACC,EAAE,EAAE,qBAAqB;QACzB,OAAO,EACN,4VAA4V;QAC7V,QAAQ,EACP,qJAAqJ;KACtJ;IACD;QACC,EAAE,EAAE,SAAS;QACb,OAAO,EACN,uTAAuT;QACxT,QAAQ,EACP,yIAAyI;KAC1I;IACD;QACC,EAAE,EAAE,SAAS;QACb,OAAO,EACN,oPAAoP;QACrP,QAAQ,EACP,qHAAqH;KACtH;CACQ,CAAA;AAEV,MAAM,UAAU,qBAAqB,CAAC,eAAqC;IAC1E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/D,OAAO;QACN,aAAa,EAAE,CAAC;QAChB,aAAa,EAAE,qBAAqB;QACpC,YAAY,EACX,4SAA4S;QAC7S,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrC,GAAG,IAAI;YACP,IAAI,EAAE;gBACL,GAAG,IAAI,GAAG,CACT,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAC7F,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAC1E,CACD;aACD;SACD,CAAC,CAAC;QACH,YAAY,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpE,IAAI;YACJ,yBAAyB,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1C,QAAQ,EACP,0JAA0J;YAC3J,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;SACjB,CAAC,CAAC;QACH,QAAQ,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9D,GAAG,OAAO;YACV,qBAAqB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SAC9D,CAAC,CAAC;QACH,UAAU,EAAE;YACX,cAAc,EACb,0RAA0R;YAC3R,KAAK,EACJ,+UAA+U;YAChV,MAAM,EAAE;gBACP,gEAAgE;gBAChE,kFAAkF;gBAClF,oFAAoF;gBACpF,wCAAwC;gBACxC,oEAAoE;gBACpE,oDAAoD;gBACpD,kFAAkF;aAClF;YACD,QAAQ,EACP,sQAAsQ;YACvQ,IAAI,EAAE;gBACL,wGAAwG;gBACxG,IAAI,CAAC,oBAAoB,CAAC;gBAC1B,qBAAqB;aACrB;SACD;QACD,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE;YACR,+BAA+B;YAC/B,+CAA+C;YAC/C,+CAA+C;YAC/C,yCAAyC;YACzC,uCAAuC;YACvC,qCAAqC;YACrC,+BAA+B;YAC/B,8BAA8B;SAC9B;KACD,CAAA;AACF,CAAC"}

package/dist/index.js

@@ -25,7 +25,7 @@ import { makeBff } from './bff.js';
 import { loadConfig } from './config.js';
 import { reportServerStarted } from './startup.js';
 import { flushTelemetry, initTelemetry } from './telemetry.js';
-import { MISSING_KEY_MESSAGE, registerTools, SERVER_INSTRUCTIONS, SERVER_NAME, } from './tools.js';
+import { getServerInstructions, MISSING_KEY_MESSAGE, registerTools, SERVER_NAME, } from './tools.js';
 import { checkForUpdate } from './update-check.js';
 const require = createRequire(import.meta.url);
 const pkg = require('../package.json');
@@ -41,17 +41,18 @@ function requireKey() {
 function bff() {
     return makeBff(cfg.bffUrl, requireKey());
 }
+const capabilities = new Set(['read', 'docs', 'scan', 'publish']);
 const server = new FastMCP({
     name: SERVER_NAME,
     // FastMCP types `version` as a semver template literal; package.json gives a plain string.
     version: pkg.version,
-    instructions: SERVER_INSTRUCTIONS,
+    instructions: getServerInstructions(capabilities),
 });
 // stdio identity is fixed (env key) — the call context is ignored. ALL four
 // capabilities are enabled: the local client has a filesystem and store creds.
 const stdioDeps = {
     cfg: { bffUrl: cfg.bffUrl, scanUrl: cfg.scanUrl, docsUrl: cfg.docsUrl },
-    capabilities: new Set(['read', 'docs', 'scan', 'publish']),
+    capabilities,
     getBff: () => bff(),
     requireApiKey: () => requireKey(),
     getApiKey: () => cfg.apiKey ?? undefined,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAY,OAAO,EAAE,MAAM,UAAU,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,EAEN,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,WAAW,GAEX,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAA;AAE7D,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;AAEvD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;AAExB,0EAA0E;AAC1E,SAAS,UAAU;IAClB,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAA;IACzD,OAAO,GAAG,CAAC,MAAM,CAAA;AAClB,CAAC;AAED,mFAAmF;AACnF,SAAS,GAAG;IACX,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC;IAC1B,IAAI,EAAE,WAAW;IACjB,2FAA2F;IAC3F,OAAO,EAAE,GAAG,CAAC,OAA0C;IACvD,YAAY,EAAE,mBAAmB;CACjC,CAAC,CAAA;AAEF,4EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,SAAS,GAAa;IAC3B,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;IACvE,YAAY,EAAE,IAAI,GAAG,CAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACtE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE;IACnB,aAAa,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;IACjC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS;CACxC,CAAA;AAED,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAEhC,wEAAwE;AACxE,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,6DAA6D;AAC7D,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACzB,KAAK,cAAc,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;AACH,CAAC;AACD,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE;IAC/B,KAAK,cAAc,EAAE,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF,iFAAiF;AACjF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,gFAAgF;AAChF,kEAAkE;AAClE,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAA;AAE9C,+EAA+E;AAC/E,kFAAkF;AAClF,mFAAmF;AACnF,sEAAsE;AACtE,oCAAoC;AACpC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAE/B,8EAA8E;AAC9E,oEAAoE;AACpE,KAAK,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAY,OAAO,EAAE,MAAM,UAAU,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,EAEN,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,WAAW,GAEX,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAA;AAE7D,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;AAEvD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;AAExB,0EAA0E;AAC1E,SAAS,UAAU;IAClB,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAA;IACzD,OAAO,GAAG,CAAC,MAAM,CAAA;AAClB,CAAC;AAED,mFAAmF;AACnF,SAAS,GAAG;IACX,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AAE7E,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC;IAC1B,IAAI,EAAE,WAAW;IACjB,2FAA2F;IAC3F,OAAO,EAAE,GAAG,CAAC,OAA0C;IACvD,YAAY,EAAE,qBAAqB,CAAC,YAAY,CAAC;CACjD,CAAC,CAAA;AAEF,4EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,SAAS,GAAa;IAC3B,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;IACvE,YAAY;IACZ,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE;IACnB,aAAa,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;IACjC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS;CACxC,CAAA;AAED,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAEhC,wEAAwE;AACxE,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,6DAA6D;AAC7D,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACzB,KAAK,cAAc,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;AACH,CAAC;AACD,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE;IAC/B,KAAK,cAAc,EAAE,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF,iFAAiF;AACjF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,gFAAgF;AAChF,kEAAkE;AAClE,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAA;AAE9C,+EAA+E;AAC/E,kFAAkF;AAClF,mFAAmF;AACnF,sEAAsE;AACtE,oCAAoC;AACpC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAE/B,8EAA8E;AAC9E,oEAAoE;AACpE,KAAK,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA"}

package/dist/localize-workflow.d.ts

@@ -0,0 +1,3 @@
+/** Static, keyless guidance; translation and filesystem changes belong to the caller's local agent. */
+export declare function renderLocalizeWorkflow(): string;
+//# sourceMappingURL=localize-workflow.d.ts.map

package/dist/localize-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localize-workflow.d.ts","sourceRoot":"","sources":["../src/localize-workflow.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,wBAAgB,sBAAsB,IAAI,MAAM,CAoF/C"}

package/dist/localize-workflow.js

@@ -0,0 +1,87 @@
+/** Static, keyless guidance; translation and filesystem changes belong to the caller's local agent. */
+export function renderLocalizeWorkflow() {
+    return `# Local extension localization
+
+This workflow is free of Extenshi credits and requires no API key. The MCP tool returns
+static instructions. Your coding agent translates using its own provider and tokens;
+the CLI prepares and validates local files offline after installation.
+
+## Availability
+
+First run \`extenshi localize --help\` with the CLI installed in your environment.
+Use a release that includes localize. A merged change is not proof that npm latest
+contains it. When working from the Extenshi repository, build the CLI with
+\`yarn workspace @extenshi/cli build\` and replace \`extenshi\` below with
+\`node tools/extenshi-cli/dist/cli.js\` (from the repository root).
+
+## Prepare
+
+Start from manifest.json with default_locale and
+_locales/<default_locale>/messages.json. This workflow handles these messages,
+including manifest name/description references. Full store descriptions and arbitrary
+hardcoded UI strings need their own extraction and review.
+
+\`\`\`bash
+extenshi localize prepare ./extension --lang fr,de,es --output ./localization --protect MyBrand
+\`\`\`
+
+The output localization-request.json contains missing, stale or untracked messages, grouped by
+locale. Use a fresh output directory on each run; prepare refuses to overwrite its request.
+When localization.json supplies targetLocales, --lang is optional. Its protectedTerms
+are combined with --protect. Keep the version, sourceLocale, locale keys and sourceHashes unchanged. Each
+locale has this structure (the hash shown is illustrative; retain the actual prepared hash):
+
+\`\`\`json
+{
+  "version": 1,
+  "sourceLocale": "en",
+  "locales": {
+    "fr": {
+      "sourceHashes": { "greeting": "<prepared SHA-256>" },
+      "messages": { "greeting": { "message": "Hello", "description": "Greeting in popup" } }
+    }
+  }
+}
+\`\`\`
+
+## Translate and review
+
+Translate only message text into each target language. Preserve keys, placeholder
+names and definitions, positional substitutions, escaped dollar signs and protected
+terms exactly. Keep descriptions as translation context. Use the actual product for
+context; never invent features, guarantees or marketing claims. Save the edited bundle
+as ./localization/translations.json. Preserve any removeKeys array: it lists translations whose source keys were
+deleted. Review these removals together with the translated messages. A removal-only
+locale has empty messages and sourceHashes objects and still requires reviewed: true.
+
+Review the translations for meaning, tone, brand spelling and truthful claims before
+applying, then add "reviewed": true inside each reviewed locale object alongside
+sourceHashes and messages. Apply requires this explicit review marker. Source hashes detect edits to the source while translation was in progress;
+if the source changed, prepare a fresh request and translate the changed entries again.
+
+## Apply and validate
+
+\`\`\`bash
+extenshi localize apply ./extension --translations ./localization/translations.json --protect MyBrand
+extenshi localize check ./extension --protect MyBrand
+\`\`\`
+
+Apply validates the bundle before updating _locales. Keep .extenshi-localization.json
+with the project: it records source and reviewed target hashes for incremental updates. Direct target edits require re-review. Re-run
+prepare after changing source messages. Review the diff and resolve validation errors;
+do not bypass placeholder, protected-term or listing-risk failures to get a green result.
+
+## Release review gates
+
+- Run review-risk for every target locale using the exact command documented by your
+  installed CLI's help. Resolve listing risks against the real build and retain reports.
+- Have a fluent reviewer inspect the copy and any full store descriptions/screenshots.
+- Load the packaged extension under each target language. Check popup/options, long
+  strings, truncation and keyboard accessibility. For Arabic/Hebrew, inspect RTL direction,
+  layout and mixed text/numbers. A locale file or passing CLI check does not prove RTL UI support.
+- Rebuild and check every browser artifact. Publish only within the developer's authorization.
+
+Documentation: https://docs.extenshi.io/developers/localization
+`;
+}
+//# sourceMappingURL=localize-workflow.js.map

package/dist/localize-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localize-workflow.js","sourceRoot":"","sources":["../src/localize-workflow.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,MAAM,UAAU,sBAAsB;IACrC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkFP,CAAA;AACD,CAAC"}

package/dist/pay.d.ts

@@ -0,0 +1,214 @@
+/** Published packages deliberately carry this small contract locally; BFF validates again. */
+import { z } from 'zod';
+export declare const paySchemas: {
+    readonly listPayApps: z.ZodObject<{
+        includeArchived: z.ZodOptional<z.ZodBoolean>;
+        cursor: z.ZodOptional<z.ZodString>;
+        limit: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        includeArchived?: boolean | undefined;
+        cursor?: string | undefined;
+        limit?: number | undefined;
+    }, {
+        includeArchived?: boolean | undefined;
+        cursor?: string | undefined;
+        limit?: number | undefined;
+    }>;
+    readonly createPayApp: z.ZodObject<{
+        name: z.ZodString;
+        linkedProjectId: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        linkedProjectId?: string | undefined;
+    }, {
+        name: string;
+        linkedProjectId?: string | undefined;
+    }>;
+    readonly getPayApp: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly getPayReadiness: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly linkPayApp: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        projectId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        projectId: string;
+    }, {
+        appId: string;
+        projectId: string;
+    }>;
+    readonly unlinkPayApp: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly archivePayApp: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly exportPayData: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        resource: z.ZodEnum<["offers", "payments", "subscriptions", "entitlements", "customers"]>;
+        cursor: z.ZodOptional<z.ZodString>;
+        limit: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        resource: "offers" | "payments" | "subscriptions" | "entitlements" | "customers";
+        cursor?: string | undefined;
+        limit?: number | undefined;
+    }, {
+        appId: string;
+        resource: "offers" | "payments" | "subscriptions" | "entitlements" | "customers";
+        cursor?: string | undefined;
+        limit?: number | undefined;
+    }>;
+    readonly getPaySeller: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly connectPaySeller: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        provider: z.ZodDefault<z.ZodLiteral<"stripe">>;
+        accountKind: z.ZodDefault<z.ZodEnum<["standard", "express"]>>;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        provider: "stripe";
+        accountKind: "standard" | "express";
+    }, {
+        appId: string;
+        provider?: "stripe" | undefined;
+        accountKind?: "standard" | "express" | undefined;
+    }>;
+    readonly refreshPaySeller: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+    readonly setPaySellerProfile: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        profile: z.ZodObject<{
+            displayName: z.ZodString;
+            supportUrl: z.ZodUnion<[z.ZodEffects<z.ZodString, string, string>, z.ZodString]>;
+            termsUrl: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+        }, "strict", z.ZodTypeAny, {
+            displayName: string;
+            supportUrl: string;
+            termsUrl: string | null;
+        }, {
+            displayName: string;
+            supportUrl: string;
+            termsUrl: string | null;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        profile: {
+            displayName: string;
+            supportUrl: string;
+            termsUrl: string | null;
+        };
+    }, {
+        appId: string;
+        profile: {
+            displayName: string;
+            supportUrl: string;
+            termsUrl: string | null;
+        };
+    }>;
+    readonly upsertPayOffer: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        sku: z.ZodString;
+        kind: z.ZodEnum<["one_time", "subscription", "lifetime"]>;
+        interval: z.ZodDefault<z.ZodNullable<z.ZodEnum<["month", "year"]>>>;
+        amountMinor: z.ZodNumber;
+        currency: z.ZodEnum<["usd", "eur", "gbp"]>;
+        title: z.ZodString;
+        description: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        features: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        sortOrder: z.ZodDefault<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        sku: string;
+        kind: "one_time" | "subscription" | "lifetime";
+        interval: "month" | "year" | null;
+        amountMinor: number;
+        currency: "usd" | "eur" | "gbp";
+        title: string;
+        description: string | null;
+        features: string[];
+        sortOrder: number;
+    }, {
+        appId: string;
+        sku: string;
+        kind: "one_time" | "subscription" | "lifetime";
+        amountMinor: number;
+        currency: "usd" | "eur" | "gbp";
+        title: string;
+        interval?: "month" | "year" | null | undefined;
+        description?: string | null | undefined;
+        features?: string[] | undefined;
+        sortOrder?: number | undefined;
+    }>;
+    readonly archivePayOffer: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        sku: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        sku: string;
+    }, {
+        appId: string;
+        sku: string;
+    }>;
+    readonly setPayEnabled: z.ZodObject<{
+        appId: z.ZodString;
+    } & {
+        enabled: z.ZodBoolean;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+        enabled: boolean;
+    }, {
+        appId: string;
+        enabled: boolean;
+    }>;
+    readonly rotatePayKey: z.ZodObject<{
+        appId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        appId: string;
+    }, {
+        appId: string;
+    }>;
+};
+export type PayMethod = keyof typeof paySchemas;
+export type PayBff = {
+    [M in PayMethod]: (input: z.infer<(typeof paySchemas)[M]>) => Promise<unknown>;
+};
+export declare const PAY_OPERATIONS: readonly [readonly ["listPayApps", "list_pay_apps", "list", "payApp.list", false, "List your independent Pay applications. No development project required. Follow nextCursor for more results."], readonly ["createPayApp", "create_pay_app", "create", "payApp.create", true, "Create an independent Pay application; linking a development project is optional. Creates a new application on every call: do not retry blindly after a timeout."], readonly ["getPayApp", "get_pay_app", "get", "payApp.get", false, "Read your Pay application and optional project link."], readonly ["getPayReadiness", "get_pay_readiness", "readiness", "payApp.readiness", false, "Check current checkout and launch prerequisites. A passing checkout check does not prove a live external purchase or SDK publication."], readonly ["linkPayApp", "link_pay_app", "link", "payApp.link", true, "Link your Pay application to your development project. Existing purchases remain attached to the Pay application."], readonly ["unlinkPayApp", "unlink_pay_app", "unlink", "payApp.unlink", true, "Remove the optional development-project link without deleting Pay data."], readonly ["archivePayApp", "archive_pay_app", "archive", "payApp.archive", true, "Archive your application and stop new checkout. Preserve payment records and existing entitlements."], readonly ["exportPayData", "export_pay_data", "export", "payApp.export", false, "Export one page of your application data. Follow nextCursor until null for a complete export. Customer/payment data is sensitive: save only to an author-controlled destination; never paste into public issues."], readonly ["getPaySeller", "get_pay_seller", "seller", "paySeller.get", false, "Read seller connection, public profile, offers and publishable SDK key. Agreement signing and KYC require the author in the browser."], readonly ["connectPaySeller", "connect_pay_seller", "connect", "paySeller.connect", true, "Start Stripe Connect onboarding and return a browser action URL. The author must complete KYC and legal acceptance; never do these on their behalf."], readonly ["refreshPaySeller", "refresh_pay_seller", "refresh", "paySeller.refreshStatus", true, "Refresh current payment-provider onboarding status. This does not complete KYC or accept agreements."], readonly ["setPaySellerProfile", "set_pay_seller_profile", "profile", "paySeller.setPublicProfile", true, "Save author-confirmed public seller identity, support and terms links. Never invent legal identity or terms."], readonly ["upsertPayOffer", "upsert_pay_offer", "offer-upsert", "paySeller.upsertOffer", true, "Create or update an offer by stable SKU. Price is in minor currency units. Use only the author-approved price, billing interval and features."], readonly ["archivePayOffer", "archive_pay_offer", "offer-archive", "paySeller.archiveOffer", true, "Stop offering a SKU for new checkout; preserve historical purchases."], readonly ["setPayEnabled", "set_pay_enabled", "enable", "paySeller.setEnabled", true, "Explicitly enable or disable new payments. Enabling is a live commerce change: only do so with author authorization and after checking readiness. Backend prerequisites remain enforced."], readonly ["rotatePayKey", "rotate_pay_key", "rotate-key", "paySeller.rotatePublishableKey", true, "Generate a new publishable SDK key. Prior keys remain accepted for installed extension builds; this is not secret revocation. Never retry blindly."]];
+/** The legacy seller API uses projectId as the payment namespace. Never substitute a linked project ID. */
+export declare function payWireInput(method: PayMethod, input: Record<string, unknown>): Record<string, unknown>;
+//# sourceMappingURL=pay.d.ts.map