@extenshi/mcp 0.9.0 → 0.10.0

package/dist/publish.js

@@ -7,6 +7,8 @@
  * API key, nothing passes through Extenshi servers.
  */
 import * as fs from 'node:fs';
+import path from 'node:path';
+import { isPlaceholderGeckoId, isValidGeckoId } from '@extenshi/contracts';
 import { ChromeAPI, EdgeAPI, FirefoxAPI, publishToStores, } from '@extenshi/publisher';
 import { assertValidArtifact } from './validate-artifact.js';
 export const ENV_DOCS = {
@@ -14,6 +16,16 @@ export const ENV_DOCS = {
     firefox: ['FIREFOX_ADDON_GUID', 'FIREFOX_JWT_ISSUER', 'FIREFOX_JWT_SECRET'],
     edge: ['EDGE_PRODUCT_ID', 'EDGE_CLIENT_ID', 'EDGE_CLIENT_SECRET', 'EDGE_TENANT_ID'],
 };
+/**
+ * Store credentials, with an explicitly stated AMO add-on id filling
+ * FIREFOX_ADDON_GUID when the environment has none. A different environment
+ * value is refused: one run publishes to one add-on id.
+ */
+export function storeCredentialsFor(addonId, env = process.env) {
+    if (addonId && env.FIREFOX_ADDON_GUID && env.FIREFOX_ADDON_GUID !== addonId)
+        throw new PublishSetupError(`addon_id (${addonId}) differs from FIREFOX_ADDON_GUID (${env.FIREFOX_ADDON_GUID}); state one add-on id.`);
+    return readStoreCredentials(addonId && !env.FIREFOX_ADDON_GUID ? { ...env, FIREFOX_ADDON_GUID: addonId } : env);
+}
 export function readStoreCredentials(env = process.env) {
     const creds = {};
     if (env.CHROME_APP_ID && env.CHROME_CLIENT_ID && env.CHROME_CLIENT_SECRET && env.CHROME_REFRESH_TOKEN) {
@@ -46,6 +58,70 @@ export function credentialsHelp(stores) {
 }
 export class PublishSetupError extends Error {
 }
+/**
+ * Whether this call may CREATE a new AMO add-on. With a project, its
+ * owner-decided `amo.addonId` governs (and a different FIREFOX_ADDON_GUID is
+ * refused). Without one, `allowNewAddon` is the switch and `addonId` has to
+ * state the id explicitly — it is never taken silently from the environment.
+ * Mirrors the CLI's gate.
+ */
+export function amoCreateAllowed(opts) {
+    if (opts.addonId !== undefined && opts.addonId !== opts.addonGuid)
+        throw new PublishSetupError(`addon_id (${opts.addonId}) differs from FIREFOX_ADDON_GUID (${opts.addonGuid}); state one add-on id.`);
+    if (!opts.projectId) {
+        if (!opts.allowNewAddon)
+            return false;
+        if (!opts.addonId)
+            throw new PublishSetupError('allow_new_addon without project_id needs addon_id: the AMO add-on id to create, stated explicitly. ' +
+                'It becomes permanent at the first upload and is never invented. With project_id the owner decides it in Dojo instead.');
+        if (!isValidGeckoId(opts.addonId))
+            throw new PublishSetupError(`addon_id ${opts.addonId} is not an AMO add-on id: use a braced GUID ({xxxxxxxx-xxxx-…}) or name@domain.`);
+        if (isPlaceholderGeckoId(opts.addonId))
+            throw new PublishSetupError(`addon_id ${opts.addonId} is a placeholder; AMO would bind the new add-on to it forever. State the real id.`);
+        return true;
+    }
+    if (opts.decision?.status === 'decided') {
+        if (opts.decision.value !== opts.addonGuid)
+            throw new PublishSetupError(`FIREFOX_ADDON_GUID (${opts.addonGuid}) differs from the add-on id the project owner decided (${String(opts.decision.value)}). ` +
+                'Set the manifest gecko.id and FIREFOX_ADDON_GUID to the decided id; AMO never renames an add-on.');
+        return true;
+    }
+    if (opts.allowNewAddon)
+        throw new PublishSetupError(`The owner of project ${opts.projectId} has not decided amo.addonId, and creating the AMO add-on fixes it permanently. ` +
+            'Propose it with propose_decision; the owner decides it on the Dojo project page.');
+    return false;
+}
+/** Load the listing, source and screenshots for a listed AMO submission. */
+export function loadFirefoxListing(listing) {
+    if (typeof FirefoxAPI.submitListing !== 'function' || typeof FirefoxAPI.loadAmoListing !== 'function')
+        throw new PublishSetupError("This installation's @extenshi/publisher predates AMO listing submission. Reinstall @extenshi/mcp to update it.");
+    try {
+        const parsed = FirefoxAPI.loadAmoListing(path.resolve(listing.listingPath));
+        const sourceFilePath = listing.sourcePath ? path.resolve(listing.sourcePath) : undefined;
+        if (sourceFilePath) {
+            if (!fs.existsSync(sourceFilePath))
+                throw new Error(`Source archive not found: ${listing.sourcePath}`);
+            FirefoxAPI.assertSourceArchive(sourceFilePath);
+        }
+        const screenshotPaths = listing.screenshotsDir
+            ? FirefoxAPI.listScreenshots(path.resolve(listing.screenshotsDir), parsed.defaultLocale)
+            : undefined;
+        if (screenshotPaths && !screenshotPaths.length)
+            throw new Error(`No .png, .jpg or .gif screenshots in ${listing.screenshotsDir}`);
+        return {
+            listing: parsed,
+            sourceFilePath,
+            screenshotPaths,
+            allowCreate: listing.allowCreate,
+            replaceScreenshots: listing.replaceScreenshots ?? false,
+        };
+    }
+    catch (err) {
+        if (err instanceof PublishSetupError)
+            throw err;
+        throw new PublishSetupError(err instanceof Error ? err.message : String(err));
+    }
+}
 export async function publishArtifact(args) {
     if (!fs.existsSync(args.artifactPath)) {
         throw new PublishSetupError(`Artifact not found: ${args.artifactPath}`);
@@ -62,7 +138,7 @@ export async function publishArtifact(args) {
     catch (err) {
         throw new PublishSetupError(err instanceof Error ? err.message : String(err));
     }
-    const creds = readStoreCredentials();
+    const creds = storeCredentialsFor(args.addonId);
     const configured = ['chrome', 'firefox', 'edge'].filter((s) => creds[s]);
     const stores = args.stores?.length ? args.stores : configured;
     if (!stores.length) {
@@ -74,6 +150,9 @@ export async function publishArtifact(args) {
     if (missing.length) {
         throw new PublishSetupError(`Missing credentials for: ${missing.join(', ')}\n${credentialsHelp(missing)}`);
     }
+    if (args.firefoxListing && !stores.includes('firefox'))
+        throw new PublishSetupError('listing_path, source_path and screenshots_dir apply to Firefox (AMO); include firefox in stores.');
+    const firefoxListing = args.firefoxListing ? loadFirefoxListing(args.firefoxListing) : undefined;
     return publishToStores({
         extensionId: creds.chrome?.appId ?? creds.firefox?.addonGuid ?? creds.edge?.productId ?? 'extension',
         stores,
@@ -84,7 +163,7 @@ export async function publishArtifact(args) {
         },
         storeConfigs: {
             chrome: creds.chrome,
-            firefox: creds.firefox,
+            firefox: creds.firefox ? { ...creds.firefox, ...(firefoxListing ?? {}) } : undefined,
             edge: creds.edge,
         },
         releaseNotes: args.releaseNotes,

package/dist/publish.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish.js","sourceRoot":"","sources":["../src/publish.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,EACN,SAAS,EACT,OAAO,EACP,UAAU,EACV,eAAe,GAGf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAQ5D,MAAM,CAAC,MAAM,QAAQ,GAAgC;IACpD,MAAM,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,sBAAsB,CAAC;IAC7F,OAAO,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC;IAC3E,IAAI,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,CAAC;CACnF,CAAA;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;QACvG,KAAK,CAAC,MAAM,GAAG;YACd,KAAK,EAAE,GAAG,CAAC,aAAa;YACxB,QAAQ,EAAE,GAAG,CAAC,gBAAgB;YAC9B,YAAY,EAAE,GAAG,CAAC,oBAAoB;YACtC,YAAY,EAAE,GAAG,CAAC,oBAAoB;SACtC,CAAA;IACF,CAAC;IACD,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAChF,KAAK,CAAC,OAAO,GAAG;YACf,SAAS,EAAE,GAAG,CAAC,kBAAkB;YACjC,SAAS,EAAE,GAAG,CAAC,kBAAkB;YACjC,SAAS,EAAE,GAAG,CAAC,kBAAkB;SACjC,CAAA;IACF,CAAC;IACD,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QAC/F,KAAK,CAAC,IAAI,GAAG;YACZ,SAAS,EAAE,GAAG,CAAC,eAAe;YAC9B,QAAQ,EAAE,GAAG,CAAC,cAAc;YAC5B,YAAY,EAAE,GAAG,CAAC,kBAAkB;YACpC,QAAQ,EAAE,GAAG,CAAC,cAAc;SAC5B,CAAA;IACF,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAmB;IAClD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzE,CAAC;AASD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAiB;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,iBAAiB,CAAC,+BAA+B,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACvF,CAAC;IAED,iEAAiE;IACjE,IAAI,CAAC;QACJ,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACtC,IAAI,IAAI,CAAC,mBAAmB;YAAE,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,iBAAiB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;IACpC,MAAM,UAAU,GAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACzF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAA;IAE7D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CAC1B,uFAAuF;YACtF,iEAAiE;YACjE,eAAe,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAC/C,CAAA;IACF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC3G,CAAC;IAED,OAAO,eAAe,CAAC;QACtB,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,SAAS,IAAI,WAAW;QACpG,MAAM;QACN,YAAY,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACjE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;YACjG,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SAC7D;QACD,YAAY,EAAE;YACb,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;SAChB;QACD,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,IAAI;KACd,CAAC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,MAAoB;IAEpB,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAiB,CAAA;IACxF,OAAO,OAAO,CAAC,GAAG,CACjB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAChD,KAAK,CAAC,MAAM,CAAC,QAAQ,EACrB,KAAK,CAAC,MAAM,CAAC,YAAY,EACzB,KAAK,CAAC,MAAM,CAAC,YAAY,CACzB,CAAA;YACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QAC1C,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YACpG,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QAC1C,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAC9C,KAAK,CAAC,IAAI,CAAC,QAAQ,EACnB,KAAK,CAAC,IAAI,CAAC,YAAY,EACvB,KAAK,CAAC,IAAI,CAAC,QAAQ,CACnB,CAAA;YACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QAC1C,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IAClD,CAAC,CAAC,CACF,CAAA;AACF,CAAC"}
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../src/publish.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EACN,SAAS,EACT,OAAO,EACP,UAAU,EACV,eAAe,GAGf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAQ5D,MAAM,CAAC,MAAM,QAAQ,GAAgC;IACpD,MAAM,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,sBAAsB,CAAC;IAC7F,OAAO,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC;IAC3E,IAAI,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,CAAC;CACnF,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAAgB,EAChB,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,OAAO,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,kBAAkB,KAAK,OAAO;QAC1E,MAAM,IAAI,iBAAiB,CAC1B,aAAa,OAAO,sCAAsC,GAAG,CAAC,kBAAkB,yBAAyB,CACzG,CAAA;IACF,OAAO,oBAAoB,CAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAClF,CAAA;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;QACvG,KAAK,CAAC,MAAM,GAAG;YACd,KAAK,EAAE,GAAG,CAAC,aAAa;YACxB,QAAQ,EAAE,GAAG,CAAC,gBAAgB;YAC9B,YAAY,EAAE,GAAG,CAAC,oBAAoB;YACtC,YAAY,EAAE,GAAG,CAAC,oBAAoB;SACtC,CAAA;IACF,CAAC;IACD,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAChF,KAAK,CAAC,OAAO,GAAG;YACf,SAAS,EAAE,GAAG,CAAC,kBAAkB;YACjC,SAAS,EAAE,GAAG,CAAC,kBAAkB;YACjC,SAAS,EAAE,GAAG,CAAC,kBAAkB;SACjC,CAAA;IACF,CAAC;IACD,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QAC/F,KAAK,CAAC,IAAI,GAAG;YACZ,SAAS,EAAE,GAAG,CAAC,eAAe;YAC9B,QAAQ,EAAE,GAAG,CAAC,cAAc;YAC5B,YAAY,EAAE,GAAG,CAAC,kBAAkB;YACpC,QAAQ,EAAE,GAAG,CAAC,cAAc;SAC5B,CAAA;IACF,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAmB;IAClD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzE,CAAC;AAoBD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAMhC;IACA,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;QAChE,MAAM,IAAI,iBAAiB,CAC1B,aAAa,IAAI,CAAC,OAAO,sCAAsC,IAAI,CAAC,SAAS,yBAAyB,CACtG,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAA;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO;YAChB,MAAM,IAAI,iBAAiB,CAC1B,qGAAqG;gBACpG,uHAAuH,CACxH,CAAA;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;YAChC,MAAM,IAAI,iBAAiB,CAC1B,YAAY,IAAI,CAAC,OAAO,iFAAiF,CACzG,CAAA;QACF,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YACrC,MAAM,IAAI,iBAAiB,CAC1B,YAAY,IAAI,CAAC,OAAO,oFAAoF,CAC5G,CAAA;QACF,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS;YACzC,MAAM,IAAI,iBAAiB,CAC1B,uBAAuB,IAAI,CAAC,SAAS,2DAA2D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK;gBAC/H,kGAAkG,CACnG,CAAA;QACF,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,IAAI,IAAI,CAAC,aAAa;QACrB,MAAM,IAAI,iBAAiB,CAC1B,wBAAwB,IAAI,CAAC,SAAS,kFAAkF;YACvH,kFAAkF,CACnF,CAAA;IACF,OAAO,KAAK,CAAA;AACb,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,OAAmD;IACrF,IAAI,OAAO,UAAU,CAAC,aAAa,KAAK,UAAU,IAAI,OAAO,UAAU,CAAC,cAAc,KAAK,UAAU;QACpG,MAAM,IAAI,iBAAiB,CAC1B,gHAAgH,CAChH,CAAA;IACF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAA;QAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACxF,IAAI,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;YACtG,UAAU,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAA;QAC/C,CAAC;QACD,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc;YAC7C,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;YACxF,CAAC,CAAC,SAAS,CAAA;QACZ,IAAI,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM;YAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QAClF,OAAO;YACN,OAAO,EAAE,MAAM;YACf,cAAc;YACd,eAAe;YACf,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,KAAK;SACvD,CAAA;IACF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,iBAAiB;YAAE,MAAM,GAAG,CAAA;QAC/C,MAAM,IAAI,iBAAiB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9E,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAiB;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,iBAAiB,CAAC,+BAA+B,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACvF,CAAC;IAED,iEAAiE;IACjE,IAAI,CAAC;QACJ,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACtC,IAAI,IAAI,CAAC,mBAAmB;YAAE,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,iBAAiB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACzF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAA;IAE7D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CAC1B,uFAAuF;YACtF,iEAAiE;YACjE,eAAe,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAC/C,CAAA;IACF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC3G,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,MAAM,IAAI,iBAAiB,CAC1B,kGAAkG,CAClG,CAAA;IACF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAEhG,OAAO,eAAe,CAAC;QACtB,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,SAAS,IAAI,WAAW;QACpG,MAAM;QACN,YAAY,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACjE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;YACjG,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SAC7D;QACD,YAAY,EAAE;YACb,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YACpF,IAAI,EAAE,KAAK,CAAC,IAAI;SAChB;QACD,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,IAAI;KACd,CAAC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,MAAoB;IAEpB,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAiB,CAAA;IACxF,OAAO,OAAO,CAAC,GAAG,CACjB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAChD,KAAK,CAAC,MAAM,CAAC,QAAQ,EACrB,KAAK,CAAC,MAAM,CAAC,YAAY,EACzB,KAAK,CAAC,MAAM,CAAC,YAAY,CACzB,CAAA;YACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QAC1C,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YACpG,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QAC1C,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAC9C,KAAK,CAAC,IAAI,CAAC,QAAQ,EACnB,KAAK,CAAC,IAAI,CAAC,YAAY,EACvB,KAAK,CAAC,IAAI,CAAC,QAAQ,CACnB,CAAA;YACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;QAC1C,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IAClD,CAAC,CAAC,CACF,CAAA;AACF,CAAC"}

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAGH,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,kBAAkB,EAA6C,MAAM,SAAS,CAAA;AAG1G,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AA2CnC,eAAO,MAAM,QAAQ,sCAAsC,CAAA;AAC3D,eAAO,MAAM,WAAW,oCAAoC,CAAA;AAC5D,eAAO,MAAM,YAAY,qCAAqC,CAAA;AAC9D,eAAO,MAAM,iBAAiB,+EAA+E,CAAA;AAO7G,eAAO,MAAM,mBAAmB,QAWS,CAAA;AAEzC;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAA;AAEtC,eAAO,MAAM,WAAW,aAAa,CAAA;AAErC,eAAO,MAAM,mBAAmB,QAgBmB,CAAA;AAEnD,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC,GAAG,MAAM,CAWnF;AAID,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC/B,OAAO,CAAC,EAAE,kBAAkB,CAAA;CAC5B;AAED,MAAM,WAAW,QAAQ;IACxB,kEAAkE;IAClE,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACzD,+BAA+B;IAC/B,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC,CAAA;IACrC;;;;;OAKG;IACH,MAAM,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,GAAG,CAAA;IACrC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,CAAA;IAChD;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,GAAG,SAAS,CAAA;IACxD,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAiFD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE,MAA2B,GAAG,OAAO,CAGxF;AAseD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CA0tCnE"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AASH,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,kBAAkB,EAA6C,MAAM,SAAS,CAAA;AAG1G,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAqDnC,eAAO,MAAM,QAAQ,sCAAsC,CAAA;AAC3D,eAAO,MAAM,WAAW,oCAAoC,CAAA;AAC5D,eAAO,MAAM,YAAY,qCAAqC,CAAA;AAC9D,eAAO,MAAM,iBAAiB,+EAA+E,CAAA;AAO7G,eAAO,MAAM,mBAAmB,QAWS,CAAA;AAEzC;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,KAAK,CAAA;AAEtC,eAAO,MAAM,WAAW,aAAa,CAAA;AAErC,eAAO,MAAM,mBAAmB,QAmBmB,CAAA;AAEnD,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC,GAAG,MAAM,CAWnF;AAID,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC/B,OAAO,CAAC,EAAE,kBAAkB,CAAA;CAC5B;AAED,MAAM,WAAW,QAAQ;IACxB,kEAAkE;IAClE,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACzD,+BAA+B;IAC/B,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC,CAAA;IACrC;;;;;OAKG;IACH,MAAM,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,GAAG,CAAA;IACrC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,CAAA;IAChD;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,GAAG,SAAS,CAAA;IACxD,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAiFD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE,MAA2B,GAAG,OAAO,CAGxF;AAkgBD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAy6CnE"}

package/dist/tools.js

@@ -32,7 +32,7 @@
  *
  * stdout is the MCP protocol channel for stdio — nothing here may write to it.
  */
-import { agentEvidenceSchema, importManifestSchema, workspacePatchSchema } from '@extenshi/contracts';
+import { agentCreateProjectSchema, agentEvidenceSchema, importManifestSchema, proposeDecisionSchema, workspacePatchSchema, } from '@extenshi/contracts';
 import { UserError } from 'fastmcp';
 import { z } from 'zod';
 import { zodToJsonSchema } from 'zod-to-json-schema';
@@ -44,7 +44,8 @@ import { hostedLandingNextSteps, landingFormFromArgs, renderGenerateLandingPage
 import { renderLocalizeWorkflow } from './localize-workflow.js';
 import { PAY_OPERATIONS, paySchemas } from './pay.js';
 import { describePrivacyAiUpdate } from './privacy-ai-outcome.js';
-import { PublishSetupError, publishArtifact, readStoreCredentials, validateStoreCredentials, } from './publish.js';
+import { checkInlineImage, PROJECT_MEDIA_MAX_BYTES, PROJECT_MEDIA_MIME_TYPES, ProjectMediaInputError, readWorkspaceImage, } from './project-media.js';
+import { amoCreateAllowed, PublishSetupError, publishArtifact, storeCredentialsFor, validateStoreCredentials, } from './publish.js';
 import { checkPublishAccess } from './publish-access.js';
 import { ScanError, scanArtifact } from './scan.js';
 import { describeStoreConstraints, validateSearchFilters } from './search-filters.js';
@@ -90,7 +91,10 @@ export const SERVER_INSTRUCTIONS = 'Extenshi helps develop and operate browser e
     'plan from scope and research through code, assets, privacy, CI, store release and maintenance. ' +
     'Keep a checklist covering the whole requested lifecycle. For standalone Pay, start with list_pay_apps; create_pay_app needs no development project or repository. Request explicit pay.read/pay.write scopes, use get_pay_readiness, and leave agreement acceptance and KYC to the author in the browser. Only the publishable SDK key and public verification key belong in extension code. Use search_docs (free) for current ' +
     'product details and exact CLI flags. With identity, call list_my_projects then get_project_state ' +
-    'to reuse the existing project and repository. Use list_extension_templates before the manifest, ' +
+    'to reuse the existing project and repository; for a new extension, create_project makes one (idempotent). ' +
+    'Read get_decisions early: the AMO add-on id, license, seller identity and pricing are owner decisions — ' +
+    'propose defaults with propose_decision; the owner decides them in Dojo, and release readiness blocks on them. ' +
+    'Use list_extension_templates before the manifest, ' +
     'and get_project_scaffold for a new project. Preserve existing source. For an existing extension, read get_project_workspace then preview and apply import_manifest to fill Dojo from its real manifest and default-locale messages before configuring services. Review the integration diff and preserve local edits; write integration.file ' +
     'verbatim to integration.path, check integration.unwired and re-read state after cabinet edits. ' +
     'Check get_credit_balance before metered work. get_risk_by_store_ids covers up to 40 store IDs ' +
@@ -444,6 +448,26 @@ const TOOL_ANNOTATIONS = {
         idempotentHint: true,
         openWorldHint: false,
     },
+    create_project: {
+        title: 'Create an extension project',
+        readOnlyHint: false,
+        idempotentHint: true,
+        destructiveHint: false,
+        openWorldHint: true,
+    },
+    get_decisions: {
+        title: 'Read owner decisions',
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+    propose_decision: {
+        title: 'Propose an owner decision',
+        readOnlyHint: false,
+        idempotentHint: true,
+        destructiveHint: false,
+        openWorldHint: true,
+    },
     list_my_projects: {
         title: 'List my extension projects',
         readOnlyHint: true,
@@ -567,6 +591,14 @@ const TOOL_ANNOTATIONS = {
         destructiveHint: true,
         openWorldHint: true,
     },
+    upload_project_media: {
+        title: 'Upload a public image for hosted pages',
+        readOnlyHint: false,
+        // Content-addressed: the same bytes always return the same URL.
+        idempotentHint: true,
+        destructiveHint: false,
+        openWorldHint: true,
+    },
     remove_hosted_page: {
         title: 'Remove a hosted page registration',
         readOnlyHint: false,
@@ -742,6 +774,63 @@ export function registerTools(server, deps) {
                 }
             },
         });
+        add({
+            name: 'create_project',
+            description: 'Create a new extension project (a Dojo workspace) owned by this identity, through the same service ' +
+                'the Dojo project wizard uses, with the same ownership and limits. Returns JSON {projectId, dojoUrl, ' +
+                'project, pendingDecisions, nextSteps}: the next steps cover binding the repository and the starter ' +
+                'files. Idempotent: a repeated request with the same idempotencyKey returns the project it already ' +
+                'created (replayed: true); the same key with different input is rejected. Requires project.write.',
+            parameters: agentCreateProjectSchema,
+            execute: async (args, context) => {
+                try {
+                    return JSON.stringify(await bff(context).createProject(args), null, 2);
+                }
+                catch (err) {
+                    return readError(err, missingKeyMessage);
+                }
+            },
+        });
+        add({
+            name: 'get_decisions',
+            description: 'Owner decisions for one project: the AMO add-on id, license, seller public name, support contact ' +
+                'and terms, pricing, target browsers and target locales. Each entry reports its status (undecided, ' +
+                'proposed or decided), the value, a suggested default where one is derivable (a stable {GUID} add-on ' +
+                'id or the id already in the Firefox manifest, the project browsers), who proposed or decided it and ' +
+                'when, and which releases it blocks (blocksBrowsers, blocksPayment). `pending` lists the keys the ' +
+                'owner has not decided. FREE.',
+            annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: true },
+            parameters: z.object({ projectId: z.string().uuid().describe('Project id from list_my_projects.') }),
+            execute: async (args, context) => {
+                try {
+                    return JSON.stringify(await bff(context).getDecisions(args), null, 2);
+                }
+                catch (err) {
+                    return readError(err, missingKeyMessage);
+                }
+            },
+        });
+        add({
+            name: 'propose_decision',
+            description: 'Propose a value for one owner decision. The proposal is stored with its rationale, proposer and ' +
+                'time; the owner accepts or edits it on the Dojo project page, which is the only place a decision ' +
+                'becomes decided. A key the owner already decided is refused (DECISION_ALREADY_DECIDED). Value ' +
+                'formats: amo.addonId {GUID} or name@domain; license an SPDX id such as MIT, or all-rights-reserved; ' +
+                'seller.publicName text; seller.supportContact an email or HTTPS URL; seller.terms an HTTPS URL; ' +
+                'pricing {model: free|paid|donations, trialDays?, plans?: subscription|lifetime|one_time}; ' +
+                'targetBrowsers an array of chrome/firefox/edge; targetLocales an array of locale codes. Idempotent ' +
+                'per idempotencyKey. Requires project.write.',
+            annotations: { readOnlyHint: false, idempotentHint: true, destructiveHint: false, openWorldHint: true },
+            parameters: proposeDecisionSchema,
+            execute: async (args, context) => {
+                try {
+                    return JSON.stringify(await bff(context).proposeDecision(args), null, 2);
+                }
+                catch (err) {
+                    return readError(err, missingKeyMessage);
+                }
+            },
+        });
         const reads = [
             [
                 'get_project_workspace',
@@ -753,7 +842,11 @@ export function registerTools(server, deps) {
                 'Explain readiness for the recorded browser and artifact by locale. Local or agent reports are not treated as CI attestations. Stale evidence does not pass. Requires a Pro project. ' +
                     'Readiness is measured against the release recorded in the workspace: until apply_project_patch sets patch.release ' +
                     '(browser, version, artifactDigest, manifestDigest, locales, paymentRequired, and commit or dirtyTreeDigest) it reports ' +
-                    'RELEASE_NOT_RECORDED; after that, evidence counts only when it matches that release artifactDigest.',
+                    'RELEASE_NOT_RECORDED; after that, evidence counts only when it matches that release artifactDigest. ' +
+                    "When the project has a linked Pay application, the payment check also carries `platform`: what Extenshi's own " +
+                    'payment ledger proves (checkout, license, installation activation, recovery, refund). A live-mode purchase through ' +
+                    "those stages passes the check with source 'platform'; test-mode purchases are listed without passing it. Clients cannot " +
+                    "record source 'platform'.",
                 'getReleaseReadiness',
             ],
         ];
@@ -901,7 +994,8 @@ export function registerTools(server, deps) {
                 'active custom domain. The code is permanent: republishing creates a new version at the same URL. ' +
                 'By default the URL is also registered as the project homepage, which feeds HOMEPAGE_URL. Hosted ' +
                 'images are limited to store screenshot URLs (from get_extension) and images uploaded in the Dojo ' +
-                'Page generator; the logo may be an inline SVG or a raster data: URL. Returns JSON {url, publicCode, ' +
+                'Page generator or with upload_project_media (use its url for local screenshots or a logo); the logo ' +
+                'may also be an inline SVG or a raster data: URL. Returns JSON {url, publicCode, ' +
                 'versionNumber, contentHash, bytes, warnings, homepage, nextSteps}. Requires hosted.write. ' +
                 `API reference: ${HOSTED_PAGES_DOCS}`,
             parameters: z.object({
@@ -956,6 +1050,72 @@ export function registerTools(server, deps) {
                 }
             },
         });
+        // A local filesystem exists only where local artifacts do (stdio).
+        const localFiles = caps.has('scan');
+        add({
+            name: 'upload_project_media',
+            description: "Upload a logo or screenshot (PNG, JPEG or WebP, up to 2 MB) to the project's PUBLIC media store — " +
+                'the same store the Dojo Page generator uploads into — and get a stable https URL that ' +
+                'publish_landing_page accepts as screenshots[].url or logoUrl. The server checks the file by content ' +
+                '(magic bytes), strips EXIF/XMP/text metadata and anything after the image end marker, bounds the ' +
+                'dimensions (16–4096 px) and enforces a per-project quota (100 files / 50 MB, Dojo uploads included); ' +
+                'identical bytes return the same URL without using quota. SVG is refused: rasterize it first ' +
+                '(CLI: extenshi icon store-assets) or pass an inline logo as logoSvg. ' +
+                (localFiles
+                    ? 'Pass filePath (a file inside the workspace) or dataBase64 + mime. '
+                    : 'Pass dataBase64 + mime (this connection has no access to local files). ') +
+                'Store screenshots come from the CLI: extenshi screenshots. Returns JSON {url, sha256, mime, bytes, ' +
+                'width, height, strippedBytes, deduplicated, quota}. Requires hosted.write. ' +
+                `CLI: extenshi media upload <file> --project <id>. API reference: ${HOSTED_PAGES_DOCS}`,
+            parameters: z.object({
+                projectId: z.string().uuid(),
+                filePath: z
+                    .string()
+                    .min(1)
+                    .max(4096)
+                    .optional()
+                    .describe('Image file inside the workspace (local stdio server only).'),
+                dataBase64: z
+                    .string()
+                    .min(1)
+                    .max(Math.ceil(PROJECT_MEDIA_MAX_BYTES / 3) * 4 + 16)
+                    .optional()
+                    .describe('The raw image, base64-encoded (no data: prefix). Use with mime.'),
+                mime: z.enum(PROJECT_MEDIA_MIME_TYPES).optional().describe('Required with dataBase64.'),
+            }),
+            execute: async (args, context) => {
+                let payload;
+                try {
+                    if (args.filePath && args.dataBase64)
+                        throw new ProjectMediaInputError('Pass filePath OR dataBase64, not both.');
+                    if (args.filePath) {
+                        if (!localFiles)
+                            throw new ProjectMediaInputError('filePath works only with the local stdio server; send dataBase64 + mime instead.');
+                        const read = await readWorkspaceImage(args.filePath);
+                        payload = { mime: read.mime, dataBase64: read.dataBase64 };
+                    }
+                    else if (args.dataBase64) {
+                        if (!args.mime)
+                            throw new ProjectMediaInputError('mime is required with dataBase64.');
+                        checkInlineImage(args.dataBase64, args.mime);
+                        payload = { mime: args.mime, dataBase64: args.dataBase64 };
+                    }
+                    else
+                        throw new ProjectMediaInputError('Pass filePath or dataBase64 + mime.');
+                }
+                catch (err) {
+                    if (err instanceof ProjectMediaInputError)
+                        throw new UserError(err.message);
+                    throw err;
+                }
+                try {
+                    return JSON.stringify(await bff(context).uploadProjectMedia({ projectId: args.projectId, ...payload }));
+                }
+                catch (err) {
+                    return readError(err, missingKeyMessage);
+                }
+            },
+        });
         add({
             name: 'list_hosted_pages',
             description: 'List the project registered hosted pages (homepage/support) with their verification status, content hash and last check time.',
@@ -1517,13 +1677,14 @@ export function registerTools(server, deps) {
             description: 'For extension-development tasks: returns the complete tool inventory for THIS connection, ' +
                 'the Extenshi service directory with access requirements and docs links, GitHub/code placement ' +
                 'guidance, and the ordered workflow from idea and repository through implementation, assets, ' +
-                'privacy, tests/CI, store submission and maintenance. Distinguishes MCP tools from cabinet, ' +
-                'CLI and external steps. Free; no key, account lookup or network request.',
+                'privacy, tests/CI, store submission and maintenance, plus store media: the scenes.json format for ' +
+                'CLI screenshots (per-locale store screenshots) and listing artwork sizes per store. Distinguishes ' +
+                'MCP tools from cabinet, CLI and external steps. Free; no key, account lookup or network request.',
             parameters: z.object({
                 sections: z
                     .array(z.enum(['all', ...GUIDE_SECTIONS]))
                     .optional()
-                    .describe('Full guide sections to include: tools, localActions, services, repository, workflow, handoff, or all. ' +
+                    .describe('Full guide sections to include: tools, localActions, services, repository, workflow, handoff, storeMedia, or all. ' +
                     'Omitted: a compact overview with tool names, workflow stages and a table of contents.'),
             }),
             execute: async (args) => JSON.stringify(buildDevelopmentGuide(registeredTools, args?.sections), null, 2),
@@ -1759,8 +1920,12 @@ export function registerTools(server, deps) {
                 'CHROME_REFRESH_TOKEN, FIREFOX_ADDON_GUID/FIREFOX_JWT_ISSUER/FIREFOX_JWT_SECRET, ' +
                 'EDGE_PRODUCT_ID/EDGE_CLIENT_ID/EDGE_CLIENT_SECRET/EDGE_TENANT_ID). The upload itself is local, but ' +
                 'publishing is in an active testing phase: a quick Extenshi access check runs first (it identifies your ' +
-                'account by EXTENSHI_API_KEY). Edge submissions are polled to a terminal status. The artifact is ' +
-                'not security-scanned by this tool (scanning is scan_extension).',
+                'account by EXTENSHI_API_KEY). Edge submissions are polled to a terminal status. For Firefox, ' +
+                'listing_path turns the upload into a listed AMO submission with metadata: first-time add-on creation ' +
+                '(gated by allow_new_addon or the project decision), per-locale name/summary/description, categories, ' +
+                'license, homepage, support email and URL, privacy policy, release and reviewer notes, reviewer source ' +
+                '(source_path) and previews (screenshots_dir); the result lists each step. The artifact is not ' +
+                'security-scanned by this tool (scanning is scan_extension).',
             parameters: z.object({
                 artifact_path: z
                     .string()
@@ -1774,6 +1939,42 @@ export function registerTools(server, deps) {
                     .optional()
                     .describe('Separate Firefox artifact (.xpi); defaults to artifact_path.'),
                 release_notes: z.string().optional().describe('Release notes for stores that accept them.'),
+                listing_path: z
+                    .string()
+                    .optional()
+                    .describe('Firefox: AMO listing file (JSON with per-locale fields, or the AMO.md that generate-listing --store ' +
+                    'firefox writes, placeholders filled). Makes the Firefox submission a listed one with metadata: ' +
+                    'the add-on is created on first submission (see allow_new_addon) or its listing is edited, then ' +
+                    'privacy policy, release notes, reviewer notes, source and previews are applied.'),
+                source_path: z
+                    .string()
+                    .optional()
+                    .describe('Firefox: reviewer source archive (.zip/.tar.gz/.tgz/.tar.bz2) for the new version.'),
+                screenshots_dir: z
+                    .string()
+                    .optional()
+                    .describe('Firefox: AMO previews in file-name order: a directory of .png/.jpg/.gif files, or the extenshi ' +
+                    'screenshots output directory (its firefox/<locale>/ set, default locale first).'),
+                allow_new_addon: z
+                    .boolean()
+                    .optional()
+                    .describe('Firefox: permits creating a NEW AMO add-on, whose id becomes permanent. With project_id the ' +
+                    "project's decided amo.addonId governs creation instead."),
+                addon_id: z
+                    .string()
+                    .max(255)
+                    .optional()
+                    .describe('Firefox: the AMO add-on id ({GUID} or name@domain), stated explicitly. Needed with allow_new_addon ' +
+                    'when there is no project_id; fills FIREFOX_ADDON_GUID when the environment has none.'),
+                replace_screenshots: z
+                    .boolean()
+                    .optional()
+                    .describe('Firefox: replaces the previews of an existing AMO add-on with screenshots_dir.'),
+                project_id: z
+                    .string()
+                    .uuid()
+                    .optional()
+                    .describe('Dojo project id. Its owner-decided amo.addonId gates first-time AMO creation and has to equal FIREFOX_ADDON_GUID.'),
                 extension_id: z
                     .number()
                     .optional()
@@ -1793,7 +1994,7 @@ export function registerTools(server, deps) {
                     // preflight evaluates the `publish-access` PostHog flag for this developer
                     // / extension. Fails open on any transport error — only a definitive
                     // server "no" blocks here (see checkPublishAccess).
-                    const creds = readStoreCredentials();
+                    const creds = storeCredentialsFor(args.addon_id);
                     const storeIds = {};
                     if (creds.chrome)
                         storeIds.chrome = creds.chrome.appId;
@@ -1811,12 +2012,37 @@ export function registerTools(server, deps) {
                         throw new UserError(access.message ??
                             "Publishing is in an active testing phase and isn't available for your account yet.");
                     }
+                    let firefoxListing;
+                    if (args.listing_path || args.source_path || args.screenshots_dir) {
+                        if (!args.listing_path)
+                            throw new UserError('source_path and screenshots_dir need listing_path, the AMO listing they belong to.');
+                        let decision = null;
+                        if (args.project_id) {
+                            const view = (await bff(context).getDecisions({ projectId: args.project_id }));
+                            decision = view.decisions?.find((d) => d.key === 'amo.addonId') ?? null;
+                        }
+                        firefoxListing = {
+                            listingPath: args.listing_path,
+                            sourcePath: args.source_path,
+                            screenshotsDir: args.screenshots_dir,
+                            replaceScreenshots: args.replace_screenshots,
+                            allowCreate: amoCreateAllowed({
+                                addonGuid: creds.firefox?.addonGuid ?? '',
+                                allowNewAddon: args.allow_new_addon,
+                                addonId: args.addon_id,
+                                projectId: args.project_id,
+                                decision,
+                            }),
+                        };
+                    }
                     void context.reportProgress({ progress: 0, total: 1 });
                     const result = await publishArtifact({
                         artifactPath: args.artifact_path,
                         stores: args.stores,
                         firefoxArtifactPath: args.firefox_artifact_path,
                         releaseNotes: args.release_notes,
+                        addonId: args.addon_id,
+                        firefoxListing,
                     });
                     void context.reportProgress({ progress: 1, total: 1 });
                     return JSON.stringify(result, null, 2);