@extension.dev/mcp 3.17.0 → 4.0.8

package/dist/src/lib/cdp-connection.d.ts

@@ -0,0 +1,20 @@
+export declare class CDPConnection {
+    private ws;
+    private messageId;
+    private eventListeners;
+    private pendingRequests;
+    private consoleMessages;
+    connect(wsUrl: string): Promise<void>;
+    disconnect(): void;
+    private handleMessage;
+    private rejectAllPending;
+    sendCommand(method: string, params?: Record<string, unknown>, sessionId?: string): Promise<unknown>;
+    getConsoleMessages(): Array<{
+        level: string;
+        text: string;
+        source: string;
+        timestamp: number;
+    }>;
+    getConsoleSummary(): Record<string, unknown>;
+    protected onEvent(handler: (msg: Record<string, unknown>) => void): () => void;
+}

package/dist/src/lib/cdp-page-scripts.d.ts

@@ -0,0 +1,5 @@
+export declare const PAGE_HTML_SCRIPT = "(() => {\n        try {\n          const doctype = document.doctype;\n          const dt = doctype\n            ? '<!DOCTYPE ' + doctype.name\n              + (doctype.publicId ? ' PUBLIC \"' + doctype.publicId + '\"' : '')\n              + (doctype.systemId ? ' \"' + doctype.systemId + '\"' : '')\n              + '>'\n            : '';\n          // Include shadow DOM content from extension roots\n          const roots = Array.from(document.querySelectorAll(\n            '#extension-root,[data-extension-root]:not([data-extension-root=\"extension-js-devtools\"])'\n          ));\n          if (roots.length) {\n            const clone = document.documentElement.cloneNode(true);\n            const clonedRoots = Array.from(clone.querySelectorAll(\n              '#extension-root,[data-extension-root]:not([data-extension-root=\"extension-js-devtools\"])'\n            ));\n            const s = new XMLSerializer();\n            for (let i = 0; i < Math.min(roots.length, clonedRoots.length); i++) {\n              const sr = roots[i].shadowRoot;\n              if (!sr) continue;\n              try {\n                const shadow = Array.from(sr.childNodes).map(n => {\n                  try { return s.serializeToString(n); } catch { return ''; }\n                }).join('');\n                if (shadow) clonedRoots[i].innerHTML = shadow;\n              } catch {}\n            }\n            return dt + '\\n' + clone.outerHTML;\n          }\n          return dt + '\\n' + document.documentElement.outerHTML;\n        } catch (e) { return ''; }\n      })()";
+export declare const PAGE_META_SCRIPT = "(() => {\n        try {\n          return {\n            title: document.title,\n            url: location.href,\n            readyState: document.readyState,\n            viewport: {\n              width: window.innerWidth,\n              height: window.innerHeight,\n              devicePixelRatio: window.devicePixelRatio\n            },\n            frameCount: window.frames.length,\n            scriptCount: document.querySelectorAll('script').length,\n            styleCount: document.querySelectorAll('style,link[rel=\"stylesheet\"]').length\n          };\n        } catch { return {}; }\n      })()";
+export declare const EXTENSION_ROOT_META_SCRIPT = "(() => {\n        try {\n          const readGeneration = (node) => {\n            const raw = node.getAttribute && node.getAttribute('data-extjs-reinject-generation');\n            const parsed = Number(raw);\n            return Number.isFinite(parsed) ? parsed : undefined;\n          };\n          const normalize = (node) => ({\n            tag: node.tagName ? String(node.tagName).toLowerCase() : 'unknown',\n            id: node.id || undefined,\n            key: node.getAttribute ? node.getAttribute('data-extjs-reinject-key') || undefined : undefined,\n            generation: readGeneration(node),\n            status: node.getAttribute ? node.getAttribute('data-extjs-reinject-status') || undefined : undefined\n          });\n          const roots = Array.from(\n            document.querySelectorAll('#extension-root,[data-extension-root]:not([data-extension-root=\"extension-js-devtools\"])')\n          ).slice(0, 10).map(normalize);\n          const markers = Array.from(\n            document.querySelectorAll('[data-extjs-reinject-marker=\"true\"]')\n          ).slice(0, 10).map(normalize);\n          if (!roots.length && !markers.length) return null;\n          const generations = [...roots, ...markers]\n            .map(e => e.generation)\n            .filter(g => typeof g === 'number');\n          return {\n            rootCount: roots.length,\n            markerCount: markers.length,\n            latestGeneration: generations.length ? Math.max(...generations) : 0,\n            roots,\n            markers\n          };\n        } catch { return null; }\n      })()";
+export declare function probeSelectorsScript(selectors: string[]): string;
+export declare function domSnapshotScript(maxNodes: number): string;

package/dist/src/lib/cdp.d.ts

@@ -1,14 +1,5 @@
-export declare class CDPClient {
-    private ws;
-    private messageId;
-    private eventListeners;
-    private pendingRequests;
-    private consoleMessages;
-    connect(wsUrl: string): Promise<void>;
-    disconnect(): void;
-    private handleMessage;
-    private rejectAllPending;
-    sendCommand(method: string, params?: Record<string, unknown>, sessionId?: string): Promise<unknown>;
+import { CDPConnection } from "./cdp-connection";
+export declare class CDPClient extends CDPConnection {
     static discoverBrowserWsUrl(port: number, host?: string): Promise<string>;
     static discoverTargets(port: number, host?: string): Promise<Array<{
         id: string;
@@ -37,12 +28,4 @@ export declare class CDPClient {
     }>>;
     getDomSnapshot(sessionId: string, maxNodes?: number): Promise<Array<Record<string, unknown>>>;
     getExtensionRootMeta(sessionId: string): Promise<Record<string, unknown> | null>;
-    getConsoleMessages(): Array<{
-        level: string;
-        text: string;
-        source: string;
-        timestamp: number;
-    }>;
-    getConsoleSummary(): Record<string, unknown>;
-    private onEvent;
 }

package/dist/src/lib/exec.d.ts

@@ -1,4 +1,4 @@
-import { type ChildProcess } from "node:child_process";
+import type { ChildProcess } from "node:child_process";
 export interface CliResult {
     code: number | null;
     stdout: string;

package/dist/src/tools/logs-constants.d.ts

@@ -0,0 +1,6 @@
+export declare const CONTROL_ENVELOPE_VERSION = 1;
+export declare const CONTROL_WS_PATH = "/extjs-control";
+export declare const DEFAULT_LIMIT = 200;
+export declare const DEFAULT_FOLLOW_MS = 4000;
+export declare const MIN_FOLLOW_MS = 500;
+export declare const MAX_FOLLOW_MS = 15000;

package/dist/src/tools/logs-filter.d.ts

@@ -0,0 +1,14 @@
+export interface LogsArgs {
+    projectPath: string;
+    browser?: string;
+    level?: string;
+    context?: string[] | string;
+    signalsOnly?: boolean;
+    since?: number;
+    url?: string;
+    tab?: number;
+    follow?: boolean;
+    followMs?: number;
+    limit?: number;
+}
+export declare function makeFilter(args: LogsArgs): (event: any) => boolean;

package/dist/src/tools/logs-schema.d.ts

@@ -0,0 +1,65 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            projectPath: {
+                type: string;
+                description: string;
+            };
+            browser: {
+                type: string;
+                default: string;
+                description: string;
+            };
+            level: {
+                type: string;
+                enum: string[];
+                default: string;
+                description: string;
+            };
+            context: {
+                type: string;
+                items: {
+                    type: string;
+                    enum: string[];
+                };
+                description: string;
+            };
+            signalsOnly: {
+                type: string;
+                default: boolean;
+                description: string;
+            };
+            since: {
+                type: string;
+                description: string;
+            };
+            url: {
+                type: string;
+                description: string;
+            };
+            tab: {
+                type: string;
+                description: string;
+            };
+            follow: {
+                type: string;
+                default: boolean;
+                description: string;
+            };
+            followMs: {
+                type: string;
+                default: number;
+                description: string;
+            };
+            limit: {
+                type: string;
+                default: number;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};

package/dist/src/tools/logs.d.ts

@@ -1,80 +1,3 @@
-export declare const schema: {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: "object";
-        properties: {
-            projectPath: {
-                type: string;
-                description: string;
-            };
-            browser: {
-                type: string;
-                default: string;
-                description: string;
-            };
-            level: {
-                type: string;
-                enum: string[];
-                default: string;
-                description: string;
-            };
-            context: {
-                type: string;
-                items: {
-                    type: string;
-                    enum: string[];
-                };
-                description: string;
-            };
-            signalsOnly: {
-                type: string;
-                default: boolean;
-                description: string;
-            };
-            since: {
-                type: string;
-                description: string;
-            };
-            url: {
-                type: string;
-                description: string;
-            };
-            tab: {
-                type: string;
-                description: string;
-            };
-            follow: {
-                type: string;
-                default: boolean;
-                description: string;
-            };
-            followMs: {
-                type: string;
-                default: number;
-                description: string;
-            };
-            limit: {
-                type: string;
-                default: number;
-                description: string;
-            };
-        };
-        required: string[];
-    };
-};
-interface LogsArgs {
-    projectPath: string;
-    browser?: string;
-    level?: string;
-    context?: string[] | string;
-    signalsOnly?: boolean;
-    since?: number;
-    url?: string;
-    tab?: number;
-    follow?: boolean;
-    followMs?: number;
-    limit?: number;
-}
+import { type LogsArgs } from "./logs-filter";
+export { schema } from "./logs-schema";
 export declare function handler(args: LogsArgs): Promise<string>;
-export {};

package/dist/src/tools/publish.d.ts

@@ -26,6 +26,21 @@ export declare const schema: {
 };
 /** Resolve the access token: EXTENSION_DEV_TOKEN env first, then the login creds file. */
 export declare function resolveToken(): string;
+/**
+ * Validate the platform base URL BEFORE we attach a bearer token to a request to
+ * it. SECURITY: the `api` arg / EXTENSION_DEV_API_URL is operator-supplied, but a
+ * hostile value (e.g. via prompt-injection in the client) could redirect the
+ * token to an attacker. The access token must never leave over plaintext or go to
+ * an arbitrary scheme, so we require https -- allowing http only for localhost
+ * dev. Returns the normalized base (no trailing slash) or an error message.
+ */
+export declare function safeApiBase(raw: string): {
+    ok: true;
+    base: string;
+} | {
+    ok: false;
+    message: string;
+};
 export declare function handler(args: {
     projectPath: string;
     ttlHours?: number;

package/dist/src/tools/release-promote.d.ts

@@ -0,0 +1,50 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            buildId: {
+                type: string;
+                description: string;
+            };
+            channel: {
+                type: string;
+                description: string;
+            };
+            sourceChannel: {
+                type: string;
+                description: string;
+            };
+            browsers: {
+                type: string;
+                items: {
+                    type: string;
+                };
+                description: string;
+            };
+            version: {
+                type: string;
+                description: string;
+            };
+            releaseNotes: {
+                type: string;
+                description: string;
+            };
+            api: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};
+export declare function handler(args: {
+    buildId: string;
+    channel: string;
+    sourceChannel?: string;
+    browsers?: string[];
+    version?: string;
+    releaseNotes?: string;
+    api?: string;
+}): Promise<string>;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@extension.dev/mcp",
   "type": "module",
-  "version": "3.17.0",
+  "version": "4.0.8",
   "description": "MCP server that lets AI agents build, run, inspect, and publish browser extensions. 26 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, and Firefox.",
   "license": "MIT",
   "author": {
@@ -20,7 +20,6 @@
   "engines": {
     "node": ">=20.18"
   },
-  "packageManager": "pnpm@10.19.0",
   "exports": {
     ".": {
       "types": "./dist/module.d.ts",
@@ -40,15 +39,6 @@
     "CHANGELOG.md",
     "LICENSE"
   ],
-  "scripts": {
-    "clean": "rm -rf dist",
-    "watch": "rslib build --watch",
-    "compile": "rslib build",
-    "build": "pnpm run compile",
-    "start": "node bin/extension-mcp.js",
-    "test": "vitest run",
-    "prepublishOnly": "pnpm run test && pnpm run compile"
-  },
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org"
@@ -73,9 +63,11 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
-    "extension-create": "^3.13.5",
-    "extension-develop": "^3.13.5",
-    "extension-install": "^3.13.5",
+    "browser-extension-manifest-fields": "^2.2.9",
+    "cross-spawn": "^7.0.6",
+    "extension-create": "^4.0.8",
+    "extension-develop": "^4.0.8",
+    "extension-install": "^4.0.8",
     "ws": "^8.20.0"
   },
   "devDependencies": {
@@ -84,5 +76,13 @@
     "@types/ws": "^8.18.1",
     "typescript": "6.0.2",
     "vitest": "^4.1.3"
+  },
+  "scripts": {
+    "clean": "rm -rf dist",
+    "watch": "rslib build --watch",
+    "compile": "rslib build",
+    "build": "pnpm run compile",
+    "start": "node bin/extension-mcp.js",
+    "test": "vitest run"
   }
-}
+}