@extension.dev/mcp 10.7.0 → 10.8.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "extension-mcp",
       "source": "./",
       "description": "MCP tools for browser extension development: scaffold from 50+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox.",
-      "version": "10.7.0",
+      "version": "10.8.0",
       "category": "development",
       "author": {
         "name": "Cezar Augusto"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "extension-mcp",
   "description": "MCP tools for browser extension development: scaffold from 50+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox. Ships /extension, /extension-add, /extension-debug, and /extension-publish commands.",
-  "version": "10.7.0",
+  "version": "10.8.0",
   "author": {
     "name": "Cezar Augusto",
     "email": "hello@extension.dev",

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 10.8.0
+
+Some MCP actions change what a public channel serves or hand something to a
+store, and none of those can be taken back in place. The client now carries
+an approval gate for exactly those actions, so a human can stand between an
+agent's proposal and the write when the platform asks for one.
+
+- `extension_submit`, `extension_release_promote` and the destructive
+  `extension_shares` actions accept an `approvalId`. When the platform's
+  approval gate is on, the first call answers `approval-required` with an
+  approval id and a URL a human approves at extension.dev; the same call
+  repeated with that id performs the action. Rejections and pending
+  approvals answer as themselves, never as a bare error.
+- Approvals are bound to an action fingerprint, so an approval for one
+  promote cannot be replayed on another.
+- The gate is off unless the platform enables it; every existing flow is
+  unchanged by default.
+
 ## 10.7.0
 
 The published client had no idea the platform could be held, so on the five

package/dist/module.js

@@ -222,7 +222,7 @@ __webpack_require__.d(wait_namespaceObject, {
     handler: ()=>wait_handler,
     schema: ()=>wait_schema
 });
-var package_namespaceObject = JSON.parse('{"rE":"10.7.0","El":{"OP":"4.0.30"}}');
+var package_namespaceObject = JSON.parse('{"rE":"10.8.0","El":{"OP":"4.0.30"}}');
 const ENVELOPE_SCHEMA = 1;
 const collectWarnings = (warnings)=>{
     if (!warnings) return [];
@@ -1080,7 +1080,7 @@ function parseBuildIndex(json) {
 }
 const DEFAULT_MEDIA_ORIGIN = "https://media.extension.land";
 const DEFAULT_CHANNEL = "latest";
-const PINNED_COMMIT = "f7f4e6efb56a7e5ae08d58dbff3972d94af7d021";
+const PINNED_COMMIT = "1d04a3d62f4d82ab3f13a3388800d517d1627707";
 const CHANNEL_CACHE_TTL_MS = 300000;
 function mediaOrigin() {
     return (process.env.EXTENSION_MEDIA_ORIGIN || "").trim() || DEFAULT_MEDIA_ORIGIN;
@@ -1144,6 +1144,10 @@ function templateCatalogUrl(slug, utmSource = "mcp") {
     const origin = mcpOrigins().templates.replace(/\/+$/, "");
     return `${origin}/${encodeURIComponent(slug)}?utm_source=${utmSource}&utm_medium=tool`;
 }
+async function resolvedTemplateCommit() {
+    const release = await resolveRelease();
+    return release?.commit || PINNED_COMMIT;
+}
 async function templateMetaUrls() {
     const urls = [];
     const release = await resolveRelease();
@@ -1169,6 +1173,86 @@ async function templateFileUrls(slug, relativePath) {
     urls.push(`${rawBaseForCommit(PINNED_COMMIT)}/examples/${slug}/${relative}`);
     return urls;
 }
+const DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com";
+const PLATFORM_PROJECT_KEY = "phc_t8hwHt3uJdjxil8TUA9AIWUFeWyJtTxhfXV58bPiV6T";
+const DRAFT_SEEDED_EVENT = "draft_seeded";
+const FUNNEL_ENTRY = "mcp";
+const FUNNEL_SOURCE = "@extension.dev/mcp";
+const FUNNEL_EMITTED_FROM = "node";
+function posthogHost() {
+    return String(process.env.EXTENSION_DEV_POSTHOG_HOST || "").trim() || DEFAULT_POSTHOG_HOST;
+}
+function trimSlashes(value) {
+    return String(value || "").replace(/\/+$/, "");
+}
+function funnelEnvironment() {
+    return trimSlashes(mcpOrigins().www) === trimSlashes(PROD_ORIGINS.www) ? "production" : "development";
+}
+function posthogKeyForEnvironment(environment) {
+    if ("production" === String(environment || "").trim()) return String(process.env.EXTENSION_DEV_POSTHOG_KEY || "").trim() || PLATFORM_PROJECT_KEY;
+    return String(process.env.EXTENSION_DEV_POSTHOG_KEY_NONPRODUCTION || "").trim();
+}
+function shouldSendCreationFunnelEvent() {
+    if (telemetryDisabled()) return false;
+    if (!posthogKeyForEnvironment(funnelEnvironment())) return false;
+    if (!session_identity_sessionId()) return false;
+    return "function" == typeof fetch;
+}
+function seedRef(slug, commit) {
+    return `${String(slug || "").trim()}@${String(commit || "").trim()}`;
+}
+function creationFunnelPayload(event, properties, now = new Date()) {
+    if (!shouldSendCreationFunnelEvent()) return null;
+    const environment = funnelEnvironment();
+    const session = session_identity_sessionId();
+    return {
+        api_key: posthogKeyForEnvironment(environment),
+        event,
+        distinct_id: session,
+        timestamp: now.toISOString(),
+        properties: {
+            draft_id: null,
+            ...properties,
+            source: FUNNEL_SOURCE,
+            entry: FUNNEL_ENTRY,
+            session_id: session,
+            environment,
+            emitted_from: FUNNEL_EMITTED_FROM,
+            $process_person_profile: false
+        }
+    };
+}
+async function captureCreationFunnelEvent(event, properties, fetchImpl = fetch) {
+    try {
+        const payload = creationFunnelPayload(event, properties);
+        if (!payload) return null;
+        await fetchImpl(`${posthogHost()}/capture/`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json"
+            },
+            body: JSON.stringify(payload)
+        }).catch(()=>void 0);
+        return payload;
+    } catch  {
+        return null;
+    }
+}
+async function captureTemplateSeed(input, fetchImpl = fetch) {
+    try {
+        const slug = String(input?.slug || "").trim();
+        if (!slug) return null;
+        if (!shouldSendCreationFunnelEvent()) return null;
+        const commit = await resolvedTemplateCommit();
+        return await captureCreationFunnelEvent(DRAFT_SEEDED_EVENT, {
+            seed_source: input.source ?? "template",
+            seed_ref: seedRef(slug, commit),
+            seed_slug: slug
+        }, fetchImpl);
+    } catch  {
+        return null;
+    }
+}
 const COMMAND = "extension_create";
 function scaffoldEnginePin(projectPath) {
     try {
@@ -1323,6 +1407,10 @@ async function create_handler(args) {
         },
         hint: "Delete the directory and retry extension_create; a template download interrupted mid-way can leave a partial tree."
     });
+    captureTemplateSeed({
+        slug: result.template,
+        source: "template"
+    });
     const packageManager = result.packageManager || (result.depsInstalled ? detectPackageManager(result.projectPath) : "npm");
     const runDev = `${packageManager} run dev`;
     const addDev = (spec)=>"npm" === packageManager ? `npm i -D ${spec}` : "yarn" === packageManager ? `yarn add -D ${spec}` : `${packageManager} add -D ${spec}`;
@@ -6199,6 +6287,7 @@ async function revokeArtifact(options) {
         }
     };
     const url = `${apiCheck.base}/api/artifacts/${encodeURIComponent(options.artifactId)}`;
+    const approvalId = String(options.approvalId || "").trim();
     const doFetch = options.fetchImpl ?? fetch;
     let res;
     try {
@@ -6207,6 +6296,9 @@ async function revokeArtifact(options) {
             headers: {
                 authorization: `Bearer ${token}`,
                 accept: "application/json",
+                ...approvalId ? {
+                    "x-extensiondev-approval": approvalId
+                } : {},
                 ...identityHeaders("extension_shares")
             }
         });
@@ -6554,6 +6646,7 @@ async function probeShareCors(options) {
             finalStatus: 0,
             redirects,
             allowOrigin: null,
+            held: false,
             ...extra
         });
     for(let hop = 0; hop < MAX_HOPS; hop++){
@@ -6582,6 +6675,13 @@ async function probeShareCors(options) {
         }
         const status = res.status;
         const allowOrigin = res.headers.get("access-control-allow-origin");
+        if (sawPlatformHold(res)) return verdict({
+            ok: false,
+            held: true,
+            finalStatus: status,
+            allowOrigin,
+            reason: `${url} answered ${status} with the platform hold, so this link is held from the public until extension.dev opens. It is not broken: the share was created and will open once the platform is open. A signed-in operator can still reach it.`
+        });
         if (status >= 300 && status < 400) {
             const location = res.headers.get("location");
             if (!location) return verdict({
@@ -6783,7 +6883,11 @@ async function buildShare(projectPath, distDir, manifest, browser, verifyInBrows
         } : {},
         serves: "uploaded-local-build",
         localBuildUploaded: true,
-        ...browserCheck ? {
+        ...browserCheck ? browserCheck.held ? {
+            browserLoadable: null,
+            heldFromPublic: true,
+            browserCheck
+        } : {
             browserLoadable: browserCheck.ok,
             browserCheck
         } : {
@@ -7164,6 +7268,216 @@ async function preview_web_handler(args) {
         });
     }
 }
+const APPROVAL_GATE_ENV = "EXTENSION_DEV_APPROVAL_GATE";
+const APPROVAL_REQUIRED_STATUS = "approval-required";
+const APPROVAL_PENDING_STATUS = "approval-pending";
+const APPROVAL_REJECTED_STATUS = "approval-rejected";
+function approvalGateEnabled() {
+    const raw = String(process.env[APPROVAL_GATE_ENV] || "").trim().toLowerCase();
+    return "" !== raw && "0" !== raw && "false" !== raw && "off" !== raw;
+}
+function canonicalScope(scope) {
+    return Object.keys(scope).sort().map((key)=>{
+        const value = scope[key];
+        const rendered = Array.isArray(value) ? [
+            ...value
+        ].map((v)=>String(v)).sort().join(",") : String(value);
+        return `${key}=${rendered}`;
+    }).join("\n");
+}
+function actionFingerprint(action, scope) {
+    return node_crypto.createHash("sha256").update(`${action}\n${canonicalScope(scope)}`).digest("hex");
+}
+function approval_gate_block(command, status, code, name, message, value, hint) {
+    return {
+        blocked: true,
+        envelope: envelope_envelope({
+            ok: false,
+            command,
+            status,
+            value,
+            error: {
+                code,
+                name,
+                message
+            },
+            ...hint ? {
+                hint
+            } : {}
+        })
+    };
+}
+async function approval_gate_readJson(res) {
+    const text = await res.text();
+    try {
+        const parsed = JSON.parse(text);
+        return parsed && "object" == typeof parsed && !Array.isArray(parsed) ? parsed : {
+            message: text
+        };
+    } catch  {
+        return {
+            message: text
+        };
+    }
+}
+async function requestApproval(params) {
+    const { base, fingerprint, input, doFetch } = params;
+    const url = `${base}/api/cli/approvals`;
+    let res;
+    try {
+        res = await doFetch(url, {
+            method: "POST",
+            headers: {
+                authorization: `Bearer ${input.token}`,
+                "content-type": "application/json"
+            },
+            body: JSON.stringify({
+                action: input.action,
+                fingerprint,
+                scope: input.scope,
+                description: input.description
+            })
+        });
+    } catch (err) {
+        return approval_gate_block(input.command, APPROVAL_REQUIRED_STATUS, "E_APPROVAL_REQUIRED", "ApprovalRequired", `A human must approve this irreversible action before it runs, and the approval could not be requested from ${url}: ${err?.message || err}. Nothing was executed. Retry once the platform is reachable.`, {
+            action: input.action,
+            fingerprint,
+            description: input.description
+        });
+    }
+    const data = await approval_gate_readJson(res);
+    if (sawPlatformHold(res, data)) return {
+        blocked: true,
+        envelope: platformHoldEnvelope({
+            command: input.command,
+            name: "ApprovalHeld",
+            body: data,
+            api: input.api,
+            value: {
+                action: input.action,
+                description: input.description
+            }
+        })
+    };
+    if (!res.ok) return approval_gate_block(input.command, APPROVAL_REQUIRED_STATUS, "E_APPROVAL_REQUIRED", "ApprovalRequired", `A human must approve this irreversible action before it runs. The platform did not create an approval request (${res.status}): ${"string" == typeof data.message && data.message ? data.message : "no approval endpoint answered"}. Nothing was executed.`, {
+        action: input.action,
+        fingerprint,
+        description: input.description
+    });
+    const approvalId = String(data.approvalId || "").trim();
+    const approvalUrl = String(data.approvalUrl || "").trim();
+    return approval_gate_block(input.command, APPROVAL_REQUIRED_STATUS, "E_APPROVAL_REQUIRED", "ApprovalRequired", `${input.description} This is irreversible, so a human must approve it first. Open ${approvalUrl || "the approval URL"} to review and approve, then call this tool again with approvalId ${approvalId || "<from the response>"}. Nothing was executed.`, {
+        action: input.action,
+        fingerprint,
+        description: input.description,
+        ...approvalId ? {
+            approvalId
+        } : {},
+        ...approvalUrl ? {
+            approvalUrl
+        } : {},
+        ...data.expiresAt ? {
+            expiresAt: data.expiresAt
+        } : {}
+    }, approvalUrl ? `Approve at ${approvalUrl}, then re-run with approvalId ${approvalId}.` : void 0);
+}
+async function verifyApproval(params) {
+    const { base, fingerprint, input, doFetch } = params;
+    const approvalId = String(input.approvalId || "").trim();
+    const url = `${base}/api/cli/approvals/${encodeURIComponent(approvalId)}`;
+    let res;
+    try {
+        res = await doFetch(url, {
+            method: "GET",
+            headers: {
+                authorization: `Bearer ${input.token}`,
+                accept: "application/json"
+            }
+        });
+    } catch (err) {
+        return approval_gate_block(input.command, APPROVAL_REJECTED_STATUS, "E_APPROVAL_REJECTED", "ApprovalUnverifiable", `The approval ${approvalId} could not be verified with the platform (${err?.message || err}), so this irreversible action was refused. Nothing was executed.`, {
+            action: input.action,
+            approvalId,
+            fingerprint
+        });
+    }
+    const data = await approval_gate_readJson(res);
+    if (sawPlatformHold(res, data)) return {
+        blocked: true,
+        envelope: platformHoldEnvelope({
+            command: input.command,
+            name: "ApprovalHeld",
+            body: data,
+            api: input.api,
+            value: {
+                action: input.action,
+                approvalId
+            }
+        })
+    };
+    if (!res.ok) return approval_gate_block(input.command, APPROVAL_REJECTED_STATUS, "E_APPROVAL_REJECTED", "ApprovalUnverifiable", `The platform did not confirm approval ${approvalId} (${res.status}): ${"string" == typeof data.message && data.message ? data.message : "unknown approval"}. This irreversible action was refused. Request a fresh approval by calling this tool with no approvalId.`, {
+        action: input.action,
+        approvalId,
+        fingerprint
+    });
+    const status = String(data.status || "").trim().toLowerCase();
+    const storedFingerprint = String(data.fingerprint || "").trim();
+    const used = true === data.used;
+    const now = input.now ?? Date.now();
+    const expiresAt = "string" == typeof data.expiresAt ? Date.parse(data.expiresAt) : NaN;
+    const expired = "expired" === status || Number.isFinite(expiresAt) && expiresAt <= now;
+    if (storedFingerprint && storedFingerprint !== fingerprint) return approval_gate_block(input.command, APPROVAL_REJECTED_STATUS, "E_APPROVAL_REJECTED", "ApprovalScopeMismatch", `Approval ${approvalId} was granted for a different action and cannot authorize ${input.action}: ${input.description} Request a fresh approval for this exact action by calling this tool with no approvalId.`, {
+        action: input.action,
+        approvalId,
+        expectedFingerprint: fingerprint,
+        approvedFingerprint: storedFingerprint
+    });
+    if ("denied" === status) return approval_gate_block(input.command, APPROVAL_REJECTED_STATUS, "E_APPROVAL_REJECTED", "ApprovalDenied", `Approval ${approvalId} was denied by the human reviewer, so nothing was executed.`, {
+        action: input.action,
+        approvalId
+    });
+    if (expired) return approval_gate_block(input.command, APPROVAL_REJECTED_STATUS, "E_APPROVAL_REJECTED", "ApprovalExpired", `Approval ${approvalId} has expired, so nothing was executed. Request a fresh approval by calling this tool with no approvalId.`, {
+        action: input.action,
+        approvalId
+    });
+    if (used) return approval_gate_block(input.command, APPROVAL_REJECTED_STATUS, "E_APPROVAL_REJECTED", "ApprovalConsumed", `Approval ${approvalId} was already used once and approvals are single-use, so nothing was executed. Request a fresh approval by calling this tool with no approvalId.`, {
+        action: input.action,
+        approvalId
+    });
+    if ("approved" !== status) return approval_gate_block(input.command, APPROVAL_PENDING_STATUS, "E_APPROVAL_PENDING", "ApprovalPending", `Approval ${approvalId} has not been granted yet: ${input.description} Open the approval URL and approve it, then call this tool again with the same approvalId. Nothing was executed.`, {
+        action: input.action,
+        approvalId,
+        status: status || "pending"
+    });
+    return {
+        blocked: false,
+        approvalId
+    };
+}
+async function evaluateApproval(input) {
+    const enabled = input.enabled ?? approvalGateEnabled();
+    if (!enabled) return {
+        blocked: false
+    };
+    const apiCheck = safeApiBase(resolveApiBase(input.api), input.api);
+    if (!apiCheck.ok) return approval_gate_block(input.command, APPROVAL_REJECTED_STATUS, "E_CONFIG", "ApprovalConfigError", apiCheck.message, {
+        action: input.action
+    });
+    const doFetch = input.fetchImpl ?? fetch;
+    const fingerprint = actionFingerprint(input.action, input.scope);
+    if (!String(input.approvalId || "").trim()) return requestApproval({
+        base: apiCheck.base,
+        fingerprint,
+        input,
+        doFetch
+    });
+    return verifyApproval({
+        base: apiCheck.base,
+        fingerprint,
+        input,
+        doFetch
+    });
+}
 const LOGIN_HINT = "Run extension_auth (action: login), or set EXTENSION_DEV_TOKEN (create one in the extension.dev dashboard).";
 const shares_schema = {
     name: "extension_shares",
@@ -7188,6 +7502,10 @@ const shares_schema = {
                 type: "string",
                 description: "Any URL of the share to revoke (previewUrl, zipUrl, viewUrl, or revokeUrl). The artifact id is read out of it, so the link you sent someone is enough to pull it back."
             },
+            approvalId: {
+                type: "string",
+                description: "The approval handle returned by a prior approval-required response for a revoke. Revoking permanently burns a share and cannot be undone, so when the platform's approval gate is on this needs a human approval: call revoke once without this to get an approval id and URL, have a human approve at extension.dev, then call revoke again with the same id. Listing never needs it."
+            },
             projectPath: {
                 type: "string",
                 description: "Path to the extension project root. Reconciles the platform's answer against this project's .extension.dev/shared-previews.json record. Read-only."
@@ -7435,8 +7753,26 @@ async function revokeShare(args) {
             message: supplied ? `The reference is malformed and nothing was sent to the platform: no share id could be read out of ${JSON.stringify(supplied.length > 200 ? `${supplied.slice(0, 200)}...` : supplied)}. A share id is gen_ followed by exactly 64 lowercase hex characters (32 on shares minted before 2026-07-30), and a url revokes only when it contains one whole. Check the ref for a copy-paste cut, or run action:"list" and copy the exact artifactId.` : 'Nothing to revoke. Pass artifactId (a gen_... id) or url (the previewUrl, zipUrl, viewUrl, or revokeUrl of the share). Run action:"list" to see both.'
         }
     });
+    const token = resolveToken();
+    if (token) {
+        const gate = await evaluateApproval({
+            command: "extension_shares",
+            action: "extension_shares.revoke",
+            scope: {
+                artifactId: ref
+            },
+            description: `Permanently revoke share ${ref}, killing the link for everyone with no way to restore it.`,
+            approvalId: args.approvalId,
+            token,
+            api: args.api
+        });
+        if (gate.blocked) return gate.envelope;
+    }
     const result = await revokeArtifact({
         artifactId: ref,
+        ...args.approvalId ? {
+            approvalId: args.approvalId
+        } : {},
         ...args.api ? {
             api: args.api
         } : {}
@@ -7523,6 +7859,9 @@ async function shares_handler(args) {
         ...args.projectPath ? {
             projectPath: args.projectPath
         } : {},
+        ...args.approvalId ? {
+            approvalId: args.approvalId
+        } : {},
         ...args.api ? {
             api: args.api
         } : {}
@@ -12247,6 +12586,10 @@ const release_promote_schema = {
                 type: "string",
                 description: "Release notes markdown (optional)"
             },
+            approvalId: {
+                type: "string",
+                description: "The approval handle returned by a prior approval-required response. Promoting changes what a public channel serves and is not reversible in place, so when the platform's approval gate is on this needs a human approval: call once without this to get an approval id and URL, have a human approve at extension.dev, then call again with the same id."
+            },
             api: API_BASE
         },
         required: [
@@ -12276,10 +12619,34 @@ async function release_promote_handler(args) {
     const apiCheck = safeApiBase(resolveApiBase(args.api), args.api);
     if (!apiCheck.ok) return release_promote_fail("ReleaseConfigError", apiCheck.message, "bad-config", "E_CONFIG");
     const url = `${apiCheck.base}/api/cli/release/promote`;
+    const sourceChannel = args.sourceChannel ? String(args.sourceChannel).trim() : "";
+    const gateBrowsers = (Array.isArray(args.browsers) ? args.browsers : []).map((b)=>String(b).trim()).filter(Boolean);
+    const gate = await evaluateApproval({
+        command: "extension_release_promote",
+        action: "extension_release_promote",
+        scope: {
+            buildId: buildId.toLowerCase(),
+            channel,
+            ...sourceChannel ? {
+                sourceChannel
+            } : {},
+            ...gateBrowsers.length ? {
+                browsers: [
+                    ...gateBrowsers
+                ].sort()
+            } : {}
+        },
+        description: `Promote build ${buildId} to the ${channel} channel, changing what ${channel} serves.`,
+        approvalId: args.approvalId,
+        token,
+        api: args.api
+    });
+    if (gate.blocked) return gate.envelope;
     const body = {
         buildId,
         channel
     };
+    if (gate.approvalId) body.approvalId = gate.approvalId;
     if (args.sourceChannel) body.sourceChannel = String(args.sourceChannel).trim();
     if (Array.isArray(args.browsers) && args.browsers.length) body.browsers = args.browsers.map((b)=>String(b).trim()).filter(Boolean);
     if (args.version) body.version = String(args.version).trim();
@@ -12895,6 +13262,10 @@ const submit_schema = {
                 type: "string",
                 description: "Path to the extension project root, read only for the local STORE.md advisory check. Nothing local is uploaded; without it the check falls back to the server's working directory."
             },
+            approvalId: {
+                type: "string",
+                description: "The approval handle returned by a prior approval-required response for a real submission. A real submission (dryRun:false) is irreversible and needs a human approval when the platform's approval gate is on: call once without this to get an approval id and URL, have a human approve at extension.dev, then call again with the same id. A dry run never needs it."
+            },
             api: API_BASE
         },
         required: [
@@ -12926,6 +13297,7 @@ async function submit_handler(args) {
     if (!apiCheck.ok) return submit_fail("SubmitConfigError", apiCheck.message, "bad-config", "E_CONFIG");
     const url = `${apiCheck.base}/api/cli/stores/submit`;
     const dryRun = false !== args.dryRun;
+    const channel = args.channel ? String(args.channel).trim() : "stable";
     const body = {
         browsers,
         buildSha,
@@ -12933,6 +13305,25 @@ async function submit_handler(args) {
     };
     if (args.channel) body.channel = String(args.channel).trim();
     if (args.version) body.version = String(args.version).trim();
+    if (!dryRun) {
+        const gate = await evaluateApproval({
+            command: "extension_submit",
+            action: "extension_submit",
+            scope: {
+                browsers: [
+                    ...browsers
+                ].sort(),
+                buildSha: buildSha.toLowerCase(),
+                channel
+            },
+            description: `Submit build ${buildSha} to ${browsers.join(", ")} for store review.`,
+            approvalId: args.approvalId,
+            token,
+            api: args.api
+        });
+        if (gate.blocked) return gate.envelope;
+        if (gate.approvalId) body.approvalId = gate.approvalId;
+    }
     let res;
     try {
         res = await fetch(url, {

package/dist/src/lib/approval-gate.d.ts

@@ -0,0 +1,27 @@
+export declare const APPROVAL_GATE_ENV = "EXTENSION_DEV_APPROVAL_GATE";
+export declare const APPROVAL_REQUIRED_STATUS = "approval-required";
+export declare const APPROVAL_PENDING_STATUS = "approval-pending";
+export declare const APPROVAL_REJECTED_STATUS = "approval-rejected";
+export declare function approvalGateEnabled(): boolean;
+export type ApprovalScope = Record<string, string | string[]>;
+export declare function actionFingerprint(action: string, scope: ApprovalScope): string;
+export interface ApprovalGateInput {
+    command: string;
+    action: string;
+    scope: ApprovalScope;
+    description: string;
+    approvalId?: string;
+    token: string;
+    api?: string;
+    fetchImpl?: typeof fetch;
+    enabled?: boolean;
+    now?: number;
+}
+export type ApprovalGateResult = {
+    blocked: false;
+    approvalId?: string;
+} | {
+    blocked: true;
+    envelope: string;
+};
+export declare function evaluateApproval(input: ApprovalGateInput): Promise<ApprovalGateResult>;

package/dist/src/lib/artifacts-api.d.ts

@@ -72,6 +72,7 @@ export declare function revokeArtifact(options: {
     artifactId: string;
     api?: string;
     token?: string;
+    approvalId?: string;
     fetchImpl?: FetchImpl;
 }): Promise<ArtifactsOutcome<ArtifactRevocation>>;
 export {};

package/dist/src/lib/envelope.d.ts

@@ -1,6 +1,6 @@
 export declare const ENVELOPE_SCHEMA: 1;
 export declare const DECISION_D6 = "The MCP tool name owns the envelope `command` key; forking the key to `tool` would fork the schema the checksum test pins.";
-export type ErrorCode = "E_AMBIGUOUS_TARGET" | "E_AUTH_DENIED" | "E_AUTH_EXPIRED" | "E_AUTH_FAILED" | "E_AUTH_PENDING" | "E_AUTH_REQUIRED" | "E_BAD_HOST_URL" | "E_BAD_MANIFEST" | "E_BAD_REQUEST" | "E_BRIDGE" | "E_BROWSER_EXITED" | "E_BROWSER_INSTALL" | "E_BROWSER_UNINSTALL" | "E_BUILD_FAILED" | "E_CARRIER_IN_DIST" | "E_CDP" | "E_CLI" | "E_COMPILE" | "E_CONFIG" | "E_CONTRACT_ERROR" | "E_CONTROL_CHANNEL" | "E_CONTROL_ENVELOPE" | "E_ENGINE_TOO_OLD" | "E_ENTRYPOINT_MISSING" | "E_FIRST_COMPILE" | "E_INPUT_VALIDATION" | "E_INTERNAL" | "E_INVALID_BUNDLE_ID" | "E_LOGS_MISSING" | "E_MANIFEST_BLOCKING" | "E_MANIFEST_NOT_FOUND" | "E_NAVIGATE_ERROR" | "E_NAVIGATE_FAILED" | "E_NETWORK" | "E_NO_CONTROL_CHANNEL" | "E_NO_DIST" | "E_NO_EXTENSION_ID" | "E_NO_MATCHING_TARGET" | "E_NO_REFERENCE_TEMPLATE" | "E_NO_SESSION" | "E_NO_SURFACE_DOCUMENT" | "E_NO_TARGET" | "E_NOT_ATTACHED" | "E_PARSE" | "E_PLATFORM" | "E_PREVIEW_HOST_UNREACHABLE" | "E_PROFILE_LOCKED" | "E_RDP" | "E_SAFARI_ONLY_OPTION" | "E_SCAFFOLD_FAILED" | "E_SCAFFOLD_INCOMPLETE" | "E_SESSION_EXISTS" | "E_SESSION_EXITED" | "E_STALE_CONTRACT" | "E_SURFACE_DID_NOT_OPEN" | "E_TEMPLATE_FETCH" | "E_TEMPLATE_NOT_FOUND" | "E_UNKNOWN_COMMAND" | "E_UNKNOWN_TOOL" | "E_UNSUPPORTED_BROWSER" | "E_WAIT_TIMEOUT";
+export type ErrorCode = "E_AMBIGUOUS_TARGET" | "E_APPROVAL_PENDING" | "E_APPROVAL_REJECTED" | "E_APPROVAL_REQUIRED" | "E_AUTH_DENIED" | "E_AUTH_EXPIRED" | "E_AUTH_FAILED" | "E_AUTH_PENDING" | "E_AUTH_REQUIRED" | "E_BAD_HOST_URL" | "E_BAD_MANIFEST" | "E_BAD_REQUEST" | "E_BRIDGE" | "E_BROWSER_EXITED" | "E_BROWSER_INSTALL" | "E_BROWSER_UNINSTALL" | "E_BUILD_FAILED" | "E_CARRIER_IN_DIST" | "E_CDP" | "E_CLI" | "E_COMPILE" | "E_CONFIG" | "E_CONTRACT_ERROR" | "E_CONTROL_CHANNEL" | "E_CONTROL_ENVELOPE" | "E_ENGINE_TOO_OLD" | "E_ENTRYPOINT_MISSING" | "E_FIRST_COMPILE" | "E_INPUT_VALIDATION" | "E_INTERNAL" | "E_INVALID_BUNDLE_ID" | "E_LOGS_MISSING" | "E_MANIFEST_BLOCKING" | "E_MANIFEST_NOT_FOUND" | "E_NAVIGATE_ERROR" | "E_NAVIGATE_FAILED" | "E_NETWORK" | "E_NO_CONTROL_CHANNEL" | "E_NO_DIST" | "E_NO_EXTENSION_ID" | "E_NO_MATCHING_TARGET" | "E_NO_REFERENCE_TEMPLATE" | "E_NO_SESSION" | "E_NO_SURFACE_DOCUMENT" | "E_NO_TARGET" | "E_NOT_ATTACHED" | "E_PARSE" | "E_PLATFORM" | "E_PREVIEW_HOST_UNREACHABLE" | "E_PROFILE_LOCKED" | "E_RDP" | "E_SAFARI_ONLY_OPTION" | "E_SCAFFOLD_FAILED" | "E_SCAFFOLD_INCOMPLETE" | "E_SESSION_EXISTS" | "E_SESSION_EXITED" | "E_STALE_CONTRACT" | "E_SURFACE_DID_NOT_OPEN" | "E_TEMPLATE_FETCH" | "E_TEMPLATE_NOT_FOUND" | "E_UNKNOWN_COMMAND" | "E_UNKNOWN_TOOL" | "E_UNSUPPORTED_BROWSER" | "E_WAIT_TIMEOUT";
 export declare const ERROR_CODES: ErrorCode[];
 export interface EnvelopeError {
     code: ErrorCode | string;

package/dist/src/lib/funnel-telemetry.d.ts

@@ -0,0 +1,24 @@
+export declare const DRAFT_SEEDED_EVENT = "draft_seeded";
+export declare const FUNNEL_ENTRY = "mcp";
+export declare const FUNNEL_SOURCE = "@extension.dev/mcp";
+export declare const FUNNEL_EMITTED_FROM = "node";
+export type SeedSource = "template" | "fork" | "blank-init";
+export type CreationFunnelProperties = Record<string, string | number | boolean | null>;
+export type CreationFunnelPayload = {
+    api_key: string;
+    event: string;
+    distinct_id: string;
+    timestamp: string;
+    properties: Record<string, string | number | boolean | null>;
+};
+export declare function posthogHost(): string;
+export declare function funnelEnvironment(): string;
+export declare function posthogKeyForEnvironment(environment: unknown): string;
+export declare function shouldSendCreationFunnelEvent(): boolean;
+export declare function seedRef(slug: unknown, commit: unknown): string;
+export declare function creationFunnelPayload(event: string, properties: CreationFunnelProperties, now?: Date): CreationFunnelPayload | null;
+export declare function captureCreationFunnelEvent(event: string, properties: CreationFunnelProperties, fetchImpl?: typeof fetch): Promise<CreationFunnelPayload | null>;
+export declare function captureTemplateSeed(input: {
+    slug: string;
+    source?: SeedSource;
+}, fetchImpl?: typeof fetch): Promise<CreationFunnelPayload | null>;

package/dist/src/lib/share-cors-probe.d.ts

@@ -7,6 +7,7 @@ export interface ShareCorsVerdict {
     finalStatus: number;
     redirects: number;
     allowOrigin: string | null;
+    held: boolean;
     reason: string;
 }
 export declare function probeShareCors(options: {

package/dist/src/lib/template-artifact-source.d.ts

@@ -1,6 +1,7 @@
-export declare const PINNED_COMMIT = "f7f4e6efb56a7e5ae08d58dbff3972d94af7d021";
+export declare const PINNED_COMMIT = "1d04a3d62f4d82ab3f13a3388800d517d1627707";
 export type TemplateCatalogUtmSource = "mcp" | "mcp-create";
 export declare function templateCatalogUrl(slug: string, utmSource?: TemplateCatalogUtmSource): string;
+export declare function resolvedTemplateCommit(): Promise<string>;
 export declare function templateMetaUrls(): Promise<string[]>;
 export declare function stripTemplatePathPrefix(slug: string, relativePath: string): string;
 export declare function templateFileUrls(slug: string, relativePath: string): Promise<string[]>;

package/dist/src/tools/release-promote.d.ts

@@ -31,6 +31,10 @@ export declare const schema: {
                 type: string;
                 description: string;
             };
+            approvalId: {
+                type: string;
+                description: string;
+            };
             api: {
                 readonly type: "string";
                 readonly description: "Platform base URL (default EXTENSION_DEV_API_URL, else https://www.extension.dev)";
@@ -46,5 +50,6 @@ export declare function handler(args: {
     browsers?: string[];
     version?: string;
     releaseNotes?: string;
+    approvalId?: string;
     api?: string;
 }): Promise<string>;

package/dist/src/tools/shares.d.ts

@@ -18,6 +18,10 @@ export declare const schema: {
                 type: string;
                 description: string;
             };
+            approvalId: {
+                type: string;
+                description: string;
+            };
             projectPath: {
                 type: string;
                 description: string;
@@ -45,6 +49,7 @@ export declare function handler(args: {
     artifactId?: string;
     url?: string;
     projectPath?: string;
+    approvalId?: string;
     status?: string;
     limit?: number;
     api?: string;

package/dist/src/tools/submit.d.ts

@@ -6,6 +6,7 @@ export interface SubmitToolArgs {
     version?: string;
     dryRun?: boolean;
     projectPath?: string;
+    approvalId?: string;
     api?: string;
 }
 export declare const schema: {
@@ -43,6 +44,10 @@ export declare const schema: {
                 type: string;
                 description: string;
             };
+            approvalId: {
+                type: string;
+                description: string;
+            };
             api: {
                 readonly type: "string";
                 readonly description: "Platform base URL (default EXTENSION_DEV_API_URL, else https://www.extension.dev)";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@extension.dev/mcp",
   "type": "module",
-  "version": "10.7.0",
+  "version": "10.8.0",
   "description": "MCP server that lets AI agents (Claude Code, Claude Desktop, Cursor, Copilot, Codex) build, run, inspect, and publish browser extensions. 30 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, Firefox, Safari, and every Chromium- or Gecko-based browser (Brave, Opera, Vivaldi, Yandex, Waterfox, LibreWolf). Powered by extension.dev and Extension.js.",
   "mcpName": "io.github.extensiondev/mcp",
   "license": "Apache-2.0",

package/server.json

@@ -7,13 +7,13 @@
     "source": "github"
   },
   "websiteUrl": "https://extension.dev",
-  "version": "10.7.0",
+  "version": "10.8.0",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@extension.dev/mcp",
-      "version": "10.7.0",
+      "version": "10.8.0",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"