@extension.dev/mcp 3.17.0-canary.1779910200.ddcd9eb → 4.0.8

package/dist/src/index.d.ts

@@ -1 +1,9 @@
 export declare function startServer(): Promise<void>;
+/**
+ * Human-facing subcommands for `extension-mcp <cmd>`. Unlike the MCP tools
+ * (which must return promptly and so resume across calls), the bin blocks on
+ * the device flow because there is a person watching the terminal. Returns a
+ * process exit code. All console output goes to stderr so it never pollutes a
+ * machine-readable stdout if a script captures it.
+ */
+export declare function runCli(cmd: string, args: string[]): Promise<number>;

package/dist/src/lib/cdp-connection.d.ts

@@ -0,0 +1,20 @@
+export declare class CDPConnection {
+    private ws;
+    private messageId;
+    private eventListeners;
+    private pendingRequests;
+    private consoleMessages;
+    connect(wsUrl: string): Promise<void>;
+    disconnect(): void;
+    private handleMessage;
+    private rejectAllPending;
+    sendCommand(method: string, params?: Record<string, unknown>, sessionId?: string): Promise<unknown>;
+    getConsoleMessages(): Array<{
+        level: string;
+        text: string;
+        source: string;
+        timestamp: number;
+    }>;
+    getConsoleSummary(): Record<string, unknown>;
+    protected onEvent(handler: (msg: Record<string, unknown>) => void): () => void;
+}

package/dist/src/lib/cdp-page-scripts.d.ts

@@ -0,0 +1,5 @@
+export declare const PAGE_HTML_SCRIPT = "(() => {\n        try {\n          const doctype = document.doctype;\n          const dt = doctype\n            ? '<!DOCTYPE ' + doctype.name\n              + (doctype.publicId ? ' PUBLIC \"' + doctype.publicId + '\"' : '')\n              + (doctype.systemId ? ' \"' + doctype.systemId + '\"' : '')\n              + '>'\n            : '';\n          // Include shadow DOM content from extension roots\n          const roots = Array.from(document.querySelectorAll(\n            '#extension-root,[data-extension-root]:not([data-extension-root=\"extension-js-devtools\"])'\n          ));\n          if (roots.length) {\n            const clone = document.documentElement.cloneNode(true);\n            const clonedRoots = Array.from(clone.querySelectorAll(\n              '#extension-root,[data-extension-root]:not([data-extension-root=\"extension-js-devtools\"])'\n            ));\n            const s = new XMLSerializer();\n            for (let i = 0; i < Math.min(roots.length, clonedRoots.length); i++) {\n              const sr = roots[i].shadowRoot;\n              if (!sr) continue;\n              try {\n                const shadow = Array.from(sr.childNodes).map(n => {\n                  try { return s.serializeToString(n); } catch { return ''; }\n                }).join('');\n                if (shadow) clonedRoots[i].innerHTML = shadow;\n              } catch {}\n            }\n            return dt + '\\n' + clone.outerHTML;\n          }\n          return dt + '\\n' + document.documentElement.outerHTML;\n        } catch (e) { return ''; }\n      })()";
+export declare const PAGE_META_SCRIPT = "(() => {\n        try {\n          return {\n            title: document.title,\n            url: location.href,\n            readyState: document.readyState,\n            viewport: {\n              width: window.innerWidth,\n              height: window.innerHeight,\n              devicePixelRatio: window.devicePixelRatio\n            },\n            frameCount: window.frames.length,\n            scriptCount: document.querySelectorAll('script').length,\n            styleCount: document.querySelectorAll('style,link[rel=\"stylesheet\"]').length\n          };\n        } catch { return {}; }\n      })()";
+export declare const EXTENSION_ROOT_META_SCRIPT = "(() => {\n        try {\n          const readGeneration = (node) => {\n            const raw = node.getAttribute && node.getAttribute('data-extjs-reinject-generation');\n            const parsed = Number(raw);\n            return Number.isFinite(parsed) ? parsed : undefined;\n          };\n          const normalize = (node) => ({\n            tag: node.tagName ? String(node.tagName).toLowerCase() : 'unknown',\n            id: node.id || undefined,\n            key: node.getAttribute ? node.getAttribute('data-extjs-reinject-key') || undefined : undefined,\n            generation: readGeneration(node),\n            status: node.getAttribute ? node.getAttribute('data-extjs-reinject-status') || undefined : undefined\n          });\n          const roots = Array.from(\n            document.querySelectorAll('#extension-root,[data-extension-root]:not([data-extension-root=\"extension-js-devtools\"])')\n          ).slice(0, 10).map(normalize);\n          const markers = Array.from(\n            document.querySelectorAll('[data-extjs-reinject-marker=\"true\"]')\n          ).slice(0, 10).map(normalize);\n          if (!roots.length && !markers.length) return null;\n          const generations = [...roots, ...markers]\n            .map(e => e.generation)\n            .filter(g => typeof g === 'number');\n          return {\n            rootCount: roots.length,\n            markerCount: markers.length,\n            latestGeneration: generations.length ? Math.max(...generations) : 0,\n            roots,\n            markers\n          };\n        } catch { return null; }\n      })()";
+export declare function probeSelectorsScript(selectors: string[]): string;
+export declare function domSnapshotScript(maxNodes: number): string;

package/dist/src/lib/cdp.d.ts

@@ -1,14 +1,5 @@
-export declare class CDPClient {
-    private ws;
-    private messageId;
-    private eventListeners;
-    private pendingRequests;
-    private consoleMessages;
-    connect(wsUrl: string): Promise<void>;
-    disconnect(): void;
-    private handleMessage;
-    private rejectAllPending;
-    sendCommand(method: string, params?: Record<string, unknown>, sessionId?: string): Promise<unknown>;
+import { CDPConnection } from "./cdp-connection";
+export declare class CDPClient extends CDPConnection {
     static discoverBrowserWsUrl(port: number, host?: string): Promise<string>;
     static discoverTargets(port: number, host?: string): Promise<Array<{
         id: string;
@@ -37,12 +28,4 @@ export declare class CDPClient {
     }>>;
     getDomSnapshot(sessionId: string, maxNodes?: number): Promise<Array<Record<string, unknown>>>;
     getExtensionRootMeta(sessionId: string): Promise<Record<string, unknown> | null>;
-    getConsoleMessages(): Array<{
-        level: string;
-        text: string;
-        source: string;
-        timestamp: number;
-    }>;
-    getConsoleSummary(): Record<string, unknown>;
-    private onEvent;
 }

package/dist/src/lib/credentials.d.ts

@@ -0,0 +1,24 @@
+export interface StoredCredentials {
+    version: 1;
+    /** The HMAC access token the publish path sends as `Bearer`. */
+    token: string;
+    workspaceSlug: string;
+    projectSlug: string;
+    /** Token expiry as unix epoch seconds (0 if unknown). */
+    expiresAt: number;
+    /** Platform base URL the token was minted against. */
+    api: string;
+}
+export declare function credentialsPath(): string;
+export declare function readCredentials(): StoredCredentials | null;
+export declare function writeCredentials(creds: StoredCredentials): string;
+export declare function clearCredentials(): {
+    cleared: boolean;
+    path: string;
+};
+/**
+ * Return stored credentials only if the token has not expired. Used by the
+ * publish token resolution so an expired local token falls through cleanly to
+ * "no token" instead of producing a 401 from the platform.
+ */
+export declare function readValidCredentials(nowSeconds?: number): StoredCredentials | null;

package/dist/src/lib/exec.d.ts

@@ -1,4 +1,4 @@
-import { type ChildProcess } from "node:child_process";
+import type { ChildProcess } from "node:child_process";
 export interface CliResult {
     code: number | null;
     stdout: string;

package/dist/src/lib/github-device.d.ts

@@ -0,0 +1,40 @@
+export interface DeviceCodeStart {
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    /** Minimum seconds to wait between polls. */
+    interval: number;
+    /** Seconds until the device code expires. */
+    expiresIn: number;
+}
+export type PollResult = {
+    ok: true;
+    githubToken: string;
+} | {
+    ok: false;
+    reason: "pending" | "expired" | "denied";
+    error?: string;
+};
+type FetchImpl = typeof fetch;
+type SleepImpl = (ms: number) => Promise<void>;
+export declare function startDeviceCode(args: {
+    clientId: string;
+    scope?: string;
+    fetchImpl?: FetchImpl;
+}): Promise<DeviceCodeStart>;
+/**
+ * Poll for the access token until the budget elapses. A budget shorter than
+ * the device-code lifetime lets a caller (e.g. an MCP tool that must return
+ * promptly) poll in bounded slices and report "pending" between calls; a long
+ * budget (a blocking CLI) waits the whole time. Returns `pending` only on
+ * budget exhaustion; `expired`/`denied` are terminal.
+ */
+export declare function pollForToken(args: {
+    clientId: string;
+    deviceCode: string;
+    interval: number;
+    budgetMs: number;
+    fetchImpl?: FetchImpl;
+    sleepImpl?: SleepImpl;
+}): Promise<PollResult>;
+export {};

package/dist/src/lib/login-flow.d.ts

@@ -0,0 +1,25 @@
+import { type StoredCredentials } from "./credentials";
+type FetchImpl = typeof fetch;
+export declare function resolveApiBase(api?: string): string;
+export interface LoginConfig {
+    clientId: string;
+    scope: string;
+}
+/**
+ * Resolve the GitHub OAuth client id the device flow authenticates against.
+ * EXTENSION_DEV_GITHUB_CLIENT_ID overrides (useful when pointing at a self-
+ * hosted platform); otherwise it comes from the platform's public config.
+ */
+export declare function fetchLoginConfig(apiBase: string, fetchImpl?: FetchImpl): Promise<LoginConfig>;
+/**
+ * Trade a verified GitHub user token for a project-scoped access token and
+ * write it to the local credentials file. Returns the stored credentials
+ * (token included for the caller's in-memory use; never logged).
+ */
+export declare function exchangeAndPersist(args: {
+    apiBase: string;
+    githubToken: string;
+    project: string;
+    fetchImpl?: FetchImpl;
+}): Promise<StoredCredentials>;
+export {};

package/dist/src/tools/list-extensions.d.ts

@@ -0,0 +1,22 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            projectPath: {
+                type: string;
+                description: string;
+            };
+            browser: {
+                type: string;
+                default: string;
+            };
+        };
+        required: string[];
+    };
+};
+export declare function handler(args: {
+    projectPath: string;
+    browser?: string;
+}): Promise<string>;

package/dist/src/tools/login.d.ts

@@ -0,0 +1,27 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            project: {
+                type: string;
+                description: string;
+            };
+            deviceCode: {
+                type: string;
+                description: string;
+            };
+            api: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};
+export declare function handler(args: {
+    project: string;
+    deviceCode?: string;
+    api?: string;
+}): Promise<string>;

package/dist/src/tools/logout.d.ts

@@ -0,0 +1,9 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {};
+    };
+};
+export declare function handler(): Promise<string>;

package/dist/src/tools/logs-constants.d.ts

@@ -0,0 +1,6 @@
+export declare const CONTROL_ENVELOPE_VERSION = 1;
+export declare const CONTROL_WS_PATH = "/extjs-control";
+export declare const DEFAULT_LIMIT = 200;
+export declare const DEFAULT_FOLLOW_MS = 4000;
+export declare const MIN_FOLLOW_MS = 500;
+export declare const MAX_FOLLOW_MS = 15000;

package/dist/src/tools/logs-filter.d.ts

@@ -0,0 +1,14 @@
+export interface LogsArgs {
+    projectPath: string;
+    browser?: string;
+    level?: string;
+    context?: string[] | string;
+    signalsOnly?: boolean;
+    since?: number;
+    url?: string;
+    tab?: number;
+    follow?: boolean;
+    followMs?: number;
+    limit?: number;
+}
+export declare function makeFilter(args: LogsArgs): (event: any) => boolean;

package/dist/src/tools/logs-schema.d.ts

@@ -0,0 +1,65 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            projectPath: {
+                type: string;
+                description: string;
+            };
+            browser: {
+                type: string;
+                default: string;
+                description: string;
+            };
+            level: {
+                type: string;
+                enum: string[];
+                default: string;
+                description: string;
+            };
+            context: {
+                type: string;
+                items: {
+                    type: string;
+                    enum: string[];
+                };
+                description: string;
+            };
+            signalsOnly: {
+                type: string;
+                default: boolean;
+                description: string;
+            };
+            since: {
+                type: string;
+                description: string;
+            };
+            url: {
+                type: string;
+                description: string;
+            };
+            tab: {
+                type: string;
+                description: string;
+            };
+            follow: {
+                type: string;
+                default: boolean;
+                description: string;
+            };
+            followMs: {
+                type: string;
+                default: number;
+                description: string;
+            };
+            limit: {
+                type: string;
+                default: number;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};

package/dist/src/tools/logs.d.ts

@@ -1,80 +1,3 @@
-export declare const schema: {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: "object";
-        properties: {
-            projectPath: {
-                type: string;
-                description: string;
-            };
-            browser: {
-                type: string;
-                default: string;
-                description: string;
-            };
-            level: {
-                type: string;
-                enum: string[];
-                default: string;
-                description: string;
-            };
-            context: {
-                type: string;
-                items: {
-                    type: string;
-                    enum: string[];
-                };
-                description: string;
-            };
-            signalsOnly: {
-                type: string;
-                default: boolean;
-                description: string;
-            };
-            since: {
-                type: string;
-                description: string;
-            };
-            url: {
-                type: string;
-                description: string;
-            };
-            tab: {
-                type: string;
-                description: string;
-            };
-            follow: {
-                type: string;
-                default: boolean;
-                description: string;
-            };
-            followMs: {
-                type: string;
-                default: number;
-                description: string;
-            };
-            limit: {
-                type: string;
-                default: number;
-                description: string;
-            };
-        };
-        required: string[];
-    };
-};
-interface LogsArgs {
-    projectPath: string;
-    browser?: string;
-    level?: string;
-    context?: string[] | string;
-    signalsOnly?: boolean;
-    since?: number;
-    url?: string;
-    tab?: number;
-    follow?: boolean;
-    followMs?: number;
-    limit?: number;
-}
+import { type LogsArgs } from "./logs-filter";
+export { schema } from "./logs-schema";
 export declare function handler(args: LogsArgs): Promise<string>;
-export {};

package/dist/src/tools/open.d.ts

@@ -14,6 +14,10 @@ export declare const schema: {
                 enum: string[];
                 description: string;
             };
+            name: {
+                type: string;
+                description: string;
+            };
             browser: {
                 type: string;
                 default: string;
@@ -28,4 +32,5 @@ export declare const schema: {
 };
 export declare function handler(args: ActArgs & {
     surface: string;
+    name?: string;
 }): Promise<string>;

package/dist/src/tools/publish.d.ts

@@ -24,6 +24,23 @@ export declare const schema: {
         required: string[];
     };
 };
+/** Resolve the access token: EXTENSION_DEV_TOKEN env first, then the login creds file. */
+export declare function resolveToken(): string;
+/**
+ * Validate the platform base URL BEFORE we attach a bearer token to a request to
+ * it. SECURITY: the `api` arg / EXTENSION_DEV_API_URL is operator-supplied, but a
+ * hostile value (e.g. via prompt-injection in the client) could redirect the
+ * token to an attacker. The access token must never leave over plaintext or go to
+ * an arbitrary scheme, so we require https -- allowing http only for localhost
+ * dev. Returns the normalized base (no trailing slash) or an error message.
+ */
+export declare function safeApiBase(raw: string): {
+    ok: true;
+    base: string;
+} | {
+    ok: false;
+    message: string;
+};
 export declare function handler(args: {
     projectPath: string;
     ttlHours?: number;

package/dist/src/tools/release-promote.d.ts

@@ -0,0 +1,50 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            buildId: {
+                type: string;
+                description: string;
+            };
+            channel: {
+                type: string;
+                description: string;
+            };
+            sourceChannel: {
+                type: string;
+                description: string;
+            };
+            browsers: {
+                type: string;
+                items: {
+                    type: string;
+                };
+                description: string;
+            };
+            version: {
+                type: string;
+                description: string;
+            };
+            releaseNotes: {
+                type: string;
+                description: string;
+            };
+            api: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};
+export declare function handler(args: {
+    buildId: string;
+    channel: string;
+    sourceChannel?: string;
+    browsers?: string[];
+    version?: string;
+    releaseNotes?: string;
+    api?: string;
+}): Promise<string>;

package/dist/src/tools/whoami.d.ts

@@ -0,0 +1,9 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {};
+    };
+};
+export declare function handler(): Promise<string>;

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@extension.dev/mcp",
   "type": "module",
-  "version": "3.17.0-canary.1779910200.ddcd9eb",
-  "description": "MCP server for building, debugging, and publishing cross-browser extensions. Gives AI assistants programmatic access to the extension.dev platform and template catalog.",
+  "version": "4.0.8",
+  "description": "MCP server that lets AI agents build, run, inspect, and publish browser extensions. 26 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, and Firefox.",
   "license": "MIT",
   "author": {
     "name": "Cezar Augusto",
@@ -11,12 +11,12 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/extensiondev/extension-dev.git"
+    "url": "git+https://github.com/extensiondev/mcp.git"
   },
   "bugs": {
-    "url": "https://github.com/extensiondev/extension-dev/issues"
+    "url": "https://github.com/extensiondev/mcp/issues"
   },
-  "homepage": "https://github.com/extensiondev/extension-dev#readme",
+  "homepage": "https://github.com/extensiondev/mcp#readme",
   "engines": {
     "node": ">=20.18"
   },
@@ -46,21 +46,28 @@
   "keywords": [
     "mcp",
     "model-context-protocol",
-    "browser-extension",
-    "extension.dev",
-    "browser-extension-development",
-    "extension-dev",
+    "ai-agent",
+    "agents",
     "claude",
     "claude-code",
-    "ai-tools",
+    "claude-desktop",
+    "cursor",
+    "browser-extension",
+    "chrome-extension",
+    "firefox-addon",
+    "manifest-v3",
     "webextension",
-    "cross-browser"
+    "cross-browser",
+    "developer-tools",
+    "extension.dev"
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
-    "extension-create": "^3.13.5",
-    "extension-develop": "^3.13.5",
-    "extension-install": "^3.13.5",
+    "browser-extension-manifest-fields": "^2.2.9",
+    "cross-spawn": "^7.0.6",
+    "extension-create": "^4.0.8",
+    "extension-develop": "^4.0.8",
+    "extension-install": "^4.0.8",
     "ws": "^8.20.0"
   },
   "devDependencies": {
@@ -68,7 +75,7 @@
     "@types/node": "^25.2.0",
     "@types/ws": "^8.18.1",
     "typescript": "6.0.2",
-    "vitest": "3.2.2"
+    "vitest": "^4.1.3"
   },
   "scripts": {
     "clean": "rm -rf dist",

package/dist/rslib.config.d.ts

@@ -1,2 +0,0 @@
-declare const _default: import("@rslib/core").RslibConfig;
-export default _default;

package/dist/vitest.config.d.ts

@@ -1,3 +0,0 @@
-import type { UserConfig } from "vitest/config";
-declare const config: UserConfig;
-export default config;