@extension.dev/mcp 3.17.0 → 4.1.0

package/dist/module.js

@@ -7,10 +7,13 @@ import node_fs, { existsSync, readdirSync, statSync } from "node:fs";
 import node_path, { join } from "node:path";
 import node_os from "node:os";
 import { extensionBuild } from "extension-develop";
-import { execFile, spawn } from "node:child_process";
+import cross_spawn from "cross-spawn";
+import { filterKeysForThisBrowser } from "browser-extension-manifest-fields";
 import node_net from "node:net";
 import ws from "ws";
+import { clearCredentials, exchangeAndPersist, fetchLoginConfig, pollForToken, publish, readCredentials, resolveApiBase, resolveToken, safeApiBase, startDeviceCode } from "@extension.dev/core";
 import { extensionInstall, getManagedBrowsersCacheRoot } from "extension-install";
+import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 var add_feature_namespaceObject = {};
 __webpack_require__.r(add_feature_namespaceObject);
@@ -106,7 +109,7 @@ var logs_namespaceObject = {};
 __webpack_require__.r(logs_namespaceObject);
 __webpack_require__.d(logs_namespaceObject, {
     handler: ()=>logs_handler,
-    schema: ()=>logs_schema
+    schema: ()=>logs_schema_schema
 });
 var manifest_validate_namespaceObject = {};
 __webpack_require__.r(manifest_validate_namespaceObject);
@@ -130,9 +133,14 @@ var publish_namespaceObject = {};
 __webpack_require__.r(publish_namespaceObject);
 __webpack_require__.d(publish_namespaceObject, {
     handler: ()=>publish_handler,
-    resolveToken: ()=>resolveToken,
     schema: ()=>publish_schema
 });
+var release_promote_namespaceObject = {};
+__webpack_require__.r(release_promote_namespaceObject);
+__webpack_require__.d(release_promote_namespaceObject, {
+    handler: ()=>release_promote_handler,
+    schema: ()=>release_promote_schema
+});
 var reload_namespaceObject = {};
 __webpack_require__.r(reload_namespaceObject);
 __webpack_require__.d(reload_namespaceObject, {
@@ -169,6 +177,9 @@ __webpack_require__.d(whoami_namespaceObject, {
     handler: ()=>whoami_handler,
     schema: ()=>whoami_schema
 });
+var package_namespaceObject = {
+    rE: "4.1.0"
+};
 const schema = {
     name: "extension_create",
     description: "Create a new browser extension project from a template in the extension.dev template catalog. Use extension_list_templates to see available options.",
@@ -398,7 +409,7 @@ async function build_handler(args) {
 }
 function runExtensionCli(args, options) {
     return new Promise((resolve)=>{
-        const child = spawn("npx", [
+        const child = cross_spawn("npx", [
             "extension",
             ...args
         ], {
@@ -413,7 +424,6 @@ function runExtensionCli(args, options) {
                 FORCE_COLOR: "0",
                 NO_COLOR: "1"
             },
-            shell: true,
             timeout: options?.timeoutMs ?? 30000
         });
         let stdout = "";
@@ -433,7 +443,7 @@ function runExtensionCli(args, options) {
     });
 }
 function spawnExtensionCli(args, options) {
-    const child = spawn("npx", [
+    const child = cross_spawn("npx", [
         "extension",
         ...args
     ], {
@@ -448,8 +458,7 @@ function spawnExtensionCli(args, options) {
             ...process.env,
             FORCE_COLOR: "0",
             NO_COLOR: "1"
-        },
-        shell: true
+        }
     });
     child.unref();
     return child;
@@ -778,9 +787,8 @@ async function manifest_validate_handler(args) {
     }
     if (!manifest.name) result.errors.push("Missing required field: name");
     if (!manifest.version) result.warnings.push("Missing field: version (required for store submission)");
-    const chromiumMv = manifest["chromium:manifest_version"] ?? manifest.manifest_version;
-    manifest["firefox:manifest_version"] ?? manifest.manifest_version;
-    if (!chromiumMv && !manifest.manifest_version) result.errors.push('Missing manifest_version. Use "chromium:manifest_version": 3 and "firefox:manifest_version": 2 for cross-browser support.');
+    const chromiumManifest = filterKeysForThisBrowser(manifest, "chrome");
+    if (!chromiumManifest.manifest_version) result.errors.push('Missing manifest_version. Use "chromium:manifest_version": 3 and "firefox:manifest_version": 2 for cross-browser support.');
     for (const browser of browsers){
         const isChromium = [
             "chrome",
@@ -791,25 +799,26 @@ async function manifest_validate_handler(args) {
             "firefox",
             "gecko-based"
         ].includes(browser);
+        const effective = filterKeysForThisBrowser(manifest, browser);
         const issues = [];
         if (isChromium) {
-            const mv = chromiumMv;
+            const mv = effective.manifest_version;
             if (mv && mv < 3) issues.push("Manifest V2 is deprecated on Chromium. Use chromium:manifest_version: 3.");
-            if (manifest["chromium:side_panel"] || manifest.side_panel) {
-                const perms = manifest["chromium:permissions"] ?? manifest.permissions ?? [];
+            if (effective.side_panel) {
+                const perms = effective.permissions ?? [];
                 if (!perms.includes("sidePanel")) issues.push('Side panel declared but "sidePanel" permission is missing.');
             }
-            if (manifest["firefox:browser_action"] && !manifest["chromium:action"] && !manifest.action) issues.push('Firefox browser_action found but no chromium:action. Chromium MV3 uses "action" instead of "browser_action".');
+            if (manifest["firefox:browser_action"] && !effective.action) issues.push('Firefox browser_action found but no chromium:action. Chromium MV3 uses "action" instead of "browser_action".');
         }
         if (isFirefox) {
-            const contentScripts = manifest.content_scripts;
+            const contentScripts = effective.content_scripts;
             if (contentScripts) {
                 for (const cs of contentScripts)if ("MAIN" === cs.world || "MAIN" === cs["world"]) issues.push('content_scripts.world: "MAIN" is Chromium-only. Use "chromium:world": "MAIN" and provide a Firefox fallback.');
             }
-            if (manifest["chromium:side_panel"] && !manifest["firefox:sidebar_action"]) issues.push("Chromium side_panel declared but no firefox:sidebar_action. Firefox uses sidebar_action for sidebars.");
-            const bg = manifest.background;
+            if (chromiumManifest.side_panel && !effective.sidebar_action) issues.push("Chromium side_panel declared but no firefox:sidebar_action. Firefox uses sidebar_action for sidebars.");
+            const bg = effective.background;
             if (bg) {
-                if (bg.service_worker && !bg["firefox:scripts"] && !bg.scripts) issues.push('Background service_worker declared but no firefox:scripts. Firefox uses "scripts" (array) instead of "service_worker".');
+                if (bg.service_worker && !bg.scripts) issues.push('Background service_worker declared but no firefox:scripts. Firefox uses "scripts" (array) instead of "service_worker".');
             }
         }
         result.browserSupport[browser] = {
@@ -819,11 +828,11 @@ async function manifest_validate_handler(args) {
         if (issues.length) result.valid = false;
     }
     const surfaces = [];
-    if (manifest.content_scripts) surfaces.push("content");
-    if (manifest["chromium:side_panel"] || manifest.side_panel) surfaces.push("sidebar");
-    if (manifest.action || manifest["chromium:action"] || manifest["firefox:browser_action"]) surfaces.push("action");
-    if (manifest.chrome_url_overrides?.newtab) surfaces.push("newtab");
-    if (manifest.background) surfaces.push("background");
+    if (chromiumManifest.content_scripts) surfaces.push("content");
+    if (chromiumManifest.side_panel) surfaces.push("sidebar");
+    if (chromiumManifest.action || manifest["firefox:browser_action"]) surfaces.push("action");
+    if (chromiumManifest.chrome_url_overrides?.newtab) surfaces.push("newtab");
+    if (chromiumManifest.background) surfaces.push("background");
     if (surfaces.length) try {
         const templates = await listTemplates();
         result.similarTemplates = templates.filter((t)=>t.surfaces.some((s)=>surfaces.includes(s))).slice(0, 5).map((t)=>({
@@ -1000,7 +1009,7 @@ function _define_property(obj, key, value) {
     return obj;
 }
 const COMMAND_TIMEOUT_MS = 15000;
-class CDPClient {
+class CDPConnection {
     async connect(wsUrl) {
         return new Promise((resolve, reject)=>{
             this.ws = new ws(wsUrl);
@@ -1092,61 +1101,52 @@ class CDPClient {
             this.ws.send(JSON.stringify(message));
         });
     }
-    static async discoverBrowserWsUrl(port, host = "127.0.0.1") {
-        const res = await fetch(`http://${host}:${port}/json/version`);
-        if (!res.ok) throw new Error(`CDP /json/version failed: ${res.status}`);
-        const data = await res.json();
-        if ("string" == typeof data.webSocketDebuggerUrl) return data.webSocketDebuggerUrl;
-        throw new Error("No webSocketDebuggerUrl in /json/version response");
-    }
-    static async discoverTargets(port, host = "127.0.0.1") {
-        const res = await fetch(`http://${host}:${port}/json`);
-        if (!res.ok) throw new Error(`CDP /json failed: ${res.status}`);
-        return await res.json();
-    }
-    async getTargets() {
-        const response = await this.sendCommand("Target.getTargets");
-        return response?.targetInfos ?? [];
-    }
-    async attachToTarget(targetId) {
-        const response = await this.sendCommand("Target.attachToTarget", {
-            targetId,
-            flatten: true
-        });
-        return response.sessionId ?? "";
-    }
-    async enableDomains(sessionId) {
-        await Promise.all([
-            this.sendCommand("Runtime.enable", {}, sessionId),
-            this.sendCommand("Log.enable", {}, sessionId),
-            this.sendCommand("Page.enable", {}, sessionId)
-        ]);
+    getConsoleMessages() {
+        return [
+            ...this.consoleMessages
+        ];
     }
-    async navigate(sessionId, url) {
-        await this.sendCommand("Page.navigate", {
-            url
-        }, sessionId);
-        await new Promise((resolve)=>{
-            const timeout = setTimeout(resolve, 5000);
-            const unsubscribe = this.onEvent((msg)=>{
-                if ("Page.loadEventFired" === msg.method) {
-                    clearTimeout(timeout);
-                    unsubscribe();
-                    resolve();
-                }
+    getConsoleSummary() {
+        const counts = {};
+        const uniqueByLevel = {};
+        for (const msg of this.consoleMessages){
+            counts[msg.level] = (counts[msg.level] ?? 0) + 1;
+            if (!uniqueByLevel[msg.level]) uniqueByLevel[msg.level] = new Map();
+            const key = msg.text.slice(0, 200);
+            uniqueByLevel[msg.level].set(key, (uniqueByLevel[msg.level].get(key) ?? 0) + 1);
+        }
+        const topMessages = [];
+        for (const [level, msgs] of Object.entries(uniqueByLevel)){
+            const sorted = [
+                ...msgs.entries()
+            ].sort((a, b)=>b[1] - a[1]);
+            for (const [text, count] of sorted.slice(0, 5))topMessages.push({
+                level,
+                text,
+                count
             });
-        });
+        }
+        return {
+            total: this.consoleMessages.length,
+            counts,
+            topMessages: topMessages.sort((a, b)=>b.count - a.count).slice(0, 10)
+        };
     }
-    async evaluate(sessionId, expression) {
-        const response = await this.sendCommand("Runtime.evaluate", {
-            expression,
-            returnByValue: true,
-            awaitPromise: false
-        }, sessionId);
-        return response.result?.value;
+    onEvent(handler) {
+        this.eventListeners.add(handler);
+        return ()=>{
+            this.eventListeners.delete(handler);
+        };
     }
-    async getPageHTML(sessionId) {
-        const result = await this.evaluate(sessionId, `(() => {
+    constructor(){
+        _define_property(this, "ws", null);
+        _define_property(this, "messageId", 0);
+        _define_property(this, "eventListeners", new Set());
+        _define_property(this, "pendingRequests", new Map());
+        _define_property(this, "consoleMessages", []);
+    }
+}
+const PAGE_HTML_SCRIPT = `(() => {
         try {
           const doctype = document.doctype;
           const dt = doctype
@@ -1179,61 +1179,8 @@ class CDPClient {
           }
           return dt + '\\n' + document.documentElement.outerHTML;
         } catch (e) { return ''; }
-      })()`);
-        return "string" == typeof result ? result : "";
-    }
-    async getClosedShadowRoots(sessionId, maxBytes = 65536) {
-        await this.sendCommand("DOM.enable", {}, sessionId);
-        const doc = await this.sendCommand("DOM.getDocument", {
-            depth: -1,
-            pierce: true
-        }, sessionId);
-        const found = [];
-        const walk = (node, hostName)=>{
-            if (!node || "object" != typeof node) return;
-            const name = node.localName || node.nodeName || hostName;
-            if (Array.isArray(node.shadowRoots)) for (const sr of node.shadowRoots){
-                if (sr && "closed" === sr.shadowRootType && "number" == typeof sr.nodeId) found.push({
-                    nodeId: sr.nodeId,
-                    host: String(name),
-                    type: "closed"
-                });
-                walk(sr, name);
-            }
-            if (Array.isArray(node.children)) for (const c of node.children)walk(c, name);
-            if (node.contentDocument) walk(node.contentDocument, name);
-        };
-        walk(doc.root, "html");
-        const out = [];
-        for (const f of found)try {
-            const oh = await this.sendCommand("DOM.getOuterHTML", {
-                nodeId: f.nodeId
-            }, sessionId);
-            let html = String(oh?.outerHTML ?? "");
-            let truncated = false;
-            if (maxBytes > 0 && html.length > maxBytes) {
-                html = html.slice(0, maxBytes);
-                truncated = true;
-            }
-            out.push({
-                host: f.host,
-                type: f.type,
-                html,
-                ...truncated ? {
-                    truncated
-                } : {}
-            });
-        } catch  {
-            out.push({
-                host: f.host,
-                type: f.type,
-                html: ""
-            });
-        }
-        return out;
-    }
-    async getPageMeta(sessionId) {
-        const result = await this.evaluate(sessionId, `(() => {
+      })()`;
+const PAGE_META_SCRIPT = `(() => {
         try {
           return {
             title: document.title,
@@ -1249,11 +1196,42 @@ class CDPClient {
             styleCount: document.querySelectorAll('style,link[rel="stylesheet"]').length
           };
         } catch { return {}; }
-      })()`);
-        return result ?? {};
-    }
-    async probeSelectors(sessionId, selectors) {
-        const result = await this.evaluate(sessionId, `(() => {
+      })()`;
+const EXTENSION_ROOT_META_SCRIPT = `(() => {
+        try {
+          const readGeneration = (node) => {
+            const raw = node.getAttribute && node.getAttribute('data-extjs-reinject-generation');
+            const parsed = Number(raw);
+            return Number.isFinite(parsed) ? parsed : undefined;
+          };
+          const normalize = (node) => ({
+            tag: node.tagName ? String(node.tagName).toLowerCase() : 'unknown',
+            id: node.id || undefined,
+            key: node.getAttribute ? node.getAttribute('data-extjs-reinject-key') || undefined : undefined,
+            generation: readGeneration(node),
+            status: node.getAttribute ? node.getAttribute('data-extjs-reinject-status') || undefined : undefined
+          });
+          const roots = Array.from(
+            document.querySelectorAll('#extension-root,[data-extension-root]:not([data-extension-root="extension-js-devtools"])')
+          ).slice(0, 10).map(normalize);
+          const markers = Array.from(
+            document.querySelectorAll('[data-extjs-reinject-marker="true"]')
+          ).slice(0, 10).map(normalize);
+          if (!roots.length && !markers.length) return null;
+          const generations = [...roots, ...markers]
+            .map(e => e.generation)
+            .filter(g => typeof g === 'number');
+          return {
+            rootCount: roots.length,
+            markerCount: markers.length,
+            latestGeneration: generations.length ? Math.max(...generations) : 0,
+            roots,
+            markers
+          };
+        } catch { return null; }
+      })()`;
+function probeSelectorsScript(selectors) {
+    return `(() => {
         const selectors = ${JSON.stringify(selectors)};
         return selectors.map(selector => {
           try {
@@ -1275,11 +1253,10 @@ class CDPClient {
             return { selector, count: 0, samples: [], error: String(e) };
           }
         });
-      })()`);
-        return result ?? [];
-    }
-    async getDomSnapshot(sessionId, maxNodes = 500) {
-        const result = await this.evaluate(sessionId, `(() => {
+      })()`;
+}
+function domSnapshotScript(maxNodes) {
+    return `(() => {
         const maxNodes = ${maxNodes};
         const nodes = [];
         const walk = (node, depth) => {
@@ -1301,88 +1278,131 @@ class CDPClient {
         };
         walk(document.documentElement, 0);
         return nodes;
-      })()`);
-        return result ?? [];
+      })()`;
+}
+class CDPClient extends CDPConnection {
+    static async discoverBrowserWsUrl(port, host = "127.0.0.1") {
+        const res = await fetch(`http://${host}:${port}/json/version`);
+        if (!res.ok) throw new Error(`CDP /json/version failed: ${res.status}`);
+        const data = await res.json();
+        if ("string" == typeof data.webSocketDebuggerUrl) return data.webSocketDebuggerUrl;
+        throw new Error("No webSocketDebuggerUrl in /json/version response");
     }
-    async getExtensionRootMeta(sessionId) {
-        const result = await this.evaluate(sessionId, `(() => {
-        try {
-          const readGeneration = (node) => {
-            const raw = node.getAttribute && node.getAttribute('data-extjs-reinject-generation');
-            const parsed = Number(raw);
-            return Number.isFinite(parsed) ? parsed : undefined;
-          };
-          const normalize = (node) => ({
-            tag: node.tagName ? String(node.tagName).toLowerCase() : 'unknown',
-            id: node.id || undefined,
-            key: node.getAttribute ? node.getAttribute('data-extjs-reinject-key') || undefined : undefined,
-            generation: readGeneration(node),
-            status: node.getAttribute ? node.getAttribute('data-extjs-reinject-status') || undefined : undefined
-          });
-          const roots = Array.from(
-            document.querySelectorAll('#extension-root,[data-extension-root]:not([data-extension-root="extension-js-devtools"])')
-          ).slice(0, 10).map(normalize);
-          const markers = Array.from(
-            document.querySelectorAll('[data-extjs-reinject-marker="true"]')
-          ).slice(0, 10).map(normalize);
-          if (!roots.length && !markers.length) return null;
-          const generations = [...roots, ...markers]
-            .map(e => e.generation)
-            .filter(g => typeof g === 'number');
-          return {
-            rootCount: roots.length,
-            markerCount: markers.length,
-            latestGeneration: generations.length ? Math.max(...generations) : 0,
-            roots,
-            markers
-          };
-        } catch { return null; }
-      })()`);
-        return result ?? null;
+    static async discoverTargets(port, host = "127.0.0.1") {
+        const res = await fetch(`http://${host}:${port}/json`);
+        if (!res.ok) throw new Error(`CDP /json failed: ${res.status}`);
+        return await res.json();
     }
-    getConsoleMessages() {
-        return [
-            ...this.consoleMessages
-        ];
+    async getTargets() {
+        const response = await this.sendCommand("Target.getTargets");
+        return response?.targetInfos ?? [];
     }
-    getConsoleSummary() {
-        const counts = {};
-        const uniqueByLevel = {};
-        for (const msg of this.consoleMessages){
-            counts[msg.level] = (counts[msg.level] ?? 0) + 1;
-            if (!uniqueByLevel[msg.level]) uniqueByLevel[msg.level] = new Map();
-            const key = msg.text.slice(0, 200);
-            uniqueByLevel[msg.level].set(key, (uniqueByLevel[msg.level].get(key) ?? 0) + 1);
-        }
-        const topMessages = [];
-        for (const [level, msgs] of Object.entries(uniqueByLevel)){
-            const sorted = [
-                ...msgs.entries()
-            ].sort((a, b)=>b[1] - a[1]);
-            for (const [text, count] of sorted.slice(0, 5))topMessages.push({
-                level,
-                text,
-                count
+    async attachToTarget(targetId) {
+        const response = await this.sendCommand("Target.attachToTarget", {
+            targetId,
+            flatten: true
+        });
+        return response.sessionId ?? "";
+    }
+    async enableDomains(sessionId) {
+        await Promise.all([
+            this.sendCommand("Runtime.enable", {}, sessionId),
+            this.sendCommand("Log.enable", {}, sessionId),
+            this.sendCommand("Page.enable", {}, sessionId)
+        ]);
+    }
+    async navigate(sessionId, url) {
+        await this.sendCommand("Page.navigate", {
+            url
+        }, sessionId);
+        await new Promise((resolve)=>{
+            const timeout = setTimeout(resolve, 5000);
+            const unsubscribe = this.onEvent((msg)=>{
+                if ("Page.loadEventFired" === msg.method) {
+                    clearTimeout(timeout);
+                    unsubscribe();
+                    resolve();
+                }
+            });
+        });
+    }
+    async evaluate(sessionId, expression) {
+        const response = await this.sendCommand("Runtime.evaluate", {
+            expression,
+            returnByValue: true,
+            awaitPromise: false
+        }, sessionId);
+        return response.result?.value;
+    }
+    async getPageHTML(sessionId) {
+        const result = await this.evaluate(sessionId, PAGE_HTML_SCRIPT);
+        return "string" == typeof result ? result : "";
+    }
+    async getClosedShadowRoots(sessionId, maxBytes = 65536) {
+        await this.sendCommand("DOM.enable", {}, sessionId);
+        const doc = await this.sendCommand("DOM.getDocument", {
+            depth: -1,
+            pierce: true
+        }, sessionId);
+        const found = [];
+        const walk = (node, hostName)=>{
+            if (!node || "object" != typeof node) return;
+            const name = node.localName || node.nodeName || hostName;
+            if (Array.isArray(node.shadowRoots)) for (const sr of node.shadowRoots){
+                if (sr && "closed" === sr.shadowRootType && "number" == typeof sr.nodeId) found.push({
+                    nodeId: sr.nodeId,
+                    host: String(name),
+                    type: "closed"
+                });
+                walk(sr, name);
+            }
+            if (Array.isArray(node.children)) for (const c of node.children)walk(c, name);
+            if (node.contentDocument) walk(node.contentDocument, name);
+        };
+        walk(doc.root, "html");
+        const out = [];
+        for (const f of found)try {
+            const oh = await this.sendCommand("DOM.getOuterHTML", {
+                nodeId: f.nodeId
+            }, sessionId);
+            let html = String(oh?.outerHTML ?? "");
+            let truncated = false;
+            if (maxBytes > 0 && html.length > maxBytes) {
+                html = html.slice(0, maxBytes);
+                truncated = true;
+            }
+            out.push({
+                host: f.host,
+                type: f.type,
+                html,
+                ...truncated ? {
+                    truncated
+                } : {}
+            });
+        } catch  {
+            out.push({
+                host: f.host,
+                type: f.type,
+                html: ""
             });
         }
-        return {
-            total: this.consoleMessages.length,
-            counts,
-            topMessages: topMessages.sort((a, b)=>b.count - a.count).slice(0, 10)
-        };
+        return out;
     }
-    onEvent(handler) {
-        this.eventListeners.add(handler);
-        return ()=>{
-            this.eventListeners.delete(handler);
-        };
+    async getPageMeta(sessionId) {
+        const result = await this.evaluate(sessionId, PAGE_META_SCRIPT);
+        return result ?? {};
     }
-    constructor(){
-        _define_property(this, "ws", null);
-        _define_property(this, "messageId", 0);
-        _define_property(this, "eventListeners", new Set());
-        _define_property(this, "pendingRequests", new Map());
-        _define_property(this, "consoleMessages", []);
+    async probeSelectors(sessionId, selectors) {
+        const result = await this.evaluate(sessionId, probeSelectorsScript(selectors));
+        return result ?? [];
+    }
+    async getDomSnapshot(sessionId, maxNodes = 500) {
+        const result = await this.evaluate(sessionId, domSnapshotScript(maxNodes));
+        return result ?? [];
+    }
+    async getExtensionRootMeta(sessionId) {
+        const result = await this.evaluate(sessionId, EXTENSION_ROOT_META_SCRIPT);
+        return result ?? null;
     }
 }
 const source_inspect_schema = {
@@ -1685,13 +1705,57 @@ async function list_extensions_findCdpPort(projectPath, browser) {
         socket.connect(defaultPort, "127.0.0.1");
     });
 }
-const CONTROL_ENVELOPE_VERSION = 1;
 const CONTROL_WS_PATH = "/extjs-control";
-const DEFAULT_LIMIT = 200;
-const DEFAULT_FOLLOW_MS = 4000;
-const MIN_FOLLOW_MS = 500;
-const MAX_FOLLOW_MS = 15000;
-const logs_schema = {
+const LEVEL_ORDER = [
+    "error",
+    "warn",
+    "info",
+    "debug",
+    "trace"
+];
+function levelRank(level) {
+    const l = "log" === level ? "info" : level;
+    const i = LEVEL_ORDER.indexOf(l);
+    return -1 === i ? LEVEL_ORDER.length : i;
+}
+function makeUrlMatcher(pattern) {
+    const hasGlob = pattern.includes("*");
+    let re = null;
+    if (hasGlob) {
+        const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+        re = new RegExp(escaped);
+    }
+    return (event)=>{
+        const candidates = [
+            event.url,
+            event.hostname
+        ].filter((v)=>"string" == typeof v);
+        if (0 === candidates.length) return false;
+        return candidates.some((c)=>re ? re.test(c) : c.includes(pattern));
+    };
+}
+function makeFilter(args) {
+    const minLevel = String(args.level || "all").toLowerCase();
+    const rawContexts = Array.isArray(args.context) ? args.context : "string" == typeof args.context ? args.context.split(",") : null;
+    const contexts = rawContexts && rawContexts.length ? new Set(rawContexts.map((c)=>c.trim()).filter(Boolean)) : null;
+    const sinceSeq = null != args.since ? Number(args.since) : null;
+    const urlMatches = args.url ? makeUrlMatcher(args.url) : null;
+    const tabId = null != args.tab ? Number(args.tab) : null;
+    return (event)=>{
+        if (!event || "object" != typeof event) return false;
+        if ("header" === event.type) return false;
+        if (args.signalsOnly && "dx.signal" !== event.eventType) return false;
+        if (contexts && !contexts.has(event.context)) return false;
+        if ("all" !== minLevel && "off" !== minLevel) {
+            if (levelRank(event.level) > levelRank(minLevel)) return false;
+        }
+        if (null != sinceSeq && Number.isFinite(sinceSeq) && "number" == typeof event.seq && event.seq <= sinceSeq) return false;
+        if (urlMatches && !urlMatches(event)) return false;
+        if (null != tabId && Number.isFinite(tabId) && event.tabId !== tabId) return false;
+        return true;
+    };
+}
+const logs_schema_schema = {
     name: "extension_logs",
     description: "Read or stream logs from every context of a running dev session (service worker, content scripts, popup, options, sidebar, devtools, pages) in one ordered timeline. Reads the same agent-bridge plane as the `extension logs` CLI: a one-shot returns the most recent matching lines from logs.ndjson; `follow:true` collects from the live control channel for a bounded window. Requires an active `extension dev` session.",
     inputSchema: {
@@ -1760,12 +1824,12 @@ const logs_schema = {
             },
             followMs: {
                 type: "number",
-                default: DEFAULT_FOLLOW_MS,
-                description: `How long to collect live frames when follow=true (clamped ${MIN_FOLLOW_MS}–${MAX_FOLLOW_MS}ms).`
+                default: 4000,
+                description: "How long to collect live frames when follow=true (clamped 500–15000ms)."
             },
             limit: {
                 type: "number",
-                default: DEFAULT_LIMIT,
+                default: 200,
                 description: "Maximum number of (most recent) events to return."
             }
         },
@@ -1774,55 +1838,6 @@ const logs_schema = {
         ]
     }
 };
-const LEVEL_ORDER = [
-    "error",
-    "warn",
-    "info",
-    "debug",
-    "trace"
-];
-function levelRank(level) {
-    const l = "log" === level ? "info" : level;
-    const i = LEVEL_ORDER.indexOf(l);
-    return -1 === i ? LEVEL_ORDER.length : i;
-}
-function makeUrlMatcher(pattern) {
-    const hasGlob = pattern.includes("*");
-    let re = null;
-    if (hasGlob) {
-        const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
-        re = new RegExp(escaped);
-    }
-    return (event)=>{
-        const candidates = [
-            event.url,
-            event.hostname
-        ].filter((v)=>"string" == typeof v);
-        if (0 === candidates.length) return false;
-        return candidates.some((c)=>re ? re.test(c) : c.includes(pattern));
-    };
-}
-function makeFilter(args) {
-    const minLevel = String(args.level || "all").toLowerCase();
-    const rawContexts = Array.isArray(args.context) ? args.context : "string" == typeof args.context ? args.context.split(",") : null;
-    const contexts = rawContexts && rawContexts.length ? new Set(rawContexts.map((c)=>c.trim()).filter(Boolean)) : null;
-    const sinceSeq = null != args.since ? Number(args.since) : null;
-    const urlMatches = args.url ? makeUrlMatcher(args.url) : null;
-    const tabId = null != args.tab ? Number(args.tab) : null;
-    return (event)=>{
-        if (!event || "object" != typeof event) return false;
-        if ("header" === event.type) return false;
-        if (args.signalsOnly && "dx.signal" !== event.eventType) return false;
-        if (contexts && !contexts.has(event.context)) return false;
-        if ("all" !== minLevel && "off" !== minLevel) {
-            if (levelRank(event.level) > levelRank(minLevel)) return false;
-        }
-        if (null != sinceSeq && Number.isFinite(sinceSeq) && "number" == typeof event.seq && event.seq <= sinceSeq) return false;
-        if (urlMatches && !urlMatches(event)) return false;
-        if (null != tabId && Number.isFinite(tabId) && event.tabId !== tabId) return false;
-        return true;
-    };
-}
 function logsFilePath(projectPath, browser) {
     return node_path.resolve(projectPath, "dist", "extension-js", browser, "logs.ndjson");
 }
@@ -1898,7 +1913,7 @@ async function readFromStream(args, browser, limit) {
         error: `No active control channel found for ${browser}.`,
         hint: `Run extension_dev (browser: ${browser}) and wait for it to be ready, then retry. For past logs without a live channel, call without follow.`
     });
-    const followMs = Math.min(Math.max(args.followMs ?? DEFAULT_FOLLOW_MS, MIN_FOLLOW_MS), MAX_FOLLOW_MS);
+    const followMs = Math.min(Math.max(args.followMs ?? 4000, 500), 15000);
     const matches = makeFilter(args);
     const events = [];
     let dropped = 0;
@@ -1929,7 +1944,7 @@ async function readFromStream(args, browser, limit) {
             try {
                 socket.send(JSON.stringify({
                     type: "hello",
-                    v: CONTROL_ENVELOPE_VERSION,
+                    v: 1,
                     role: "consumer",
                     instanceId: ready.instanceId
                 }));
@@ -1961,7 +1976,7 @@ async function readFromStream(args, browser, limit) {
 }
 async function logs_handler(args) {
     const browser = args.browser ?? "chromium";
-    const limit = args.limit && args.limit > 0 ? args.limit : DEFAULT_LIMIT;
+    const limit = args.limit && args.limit > 0 ? args.limit : 200;
     if (args.follow) return readFromStream(args, browser, limit);
     return readFromFile(args, browser, limit);
 }
@@ -2325,70 +2340,6 @@ async function dom_inspect_handler(args) {
     if (null != args.timeout) cli.push("--timeout", String(args.timeout));
     return runActVerb(cli, args.projectPath, args.timeout);
 }
-function credentialsPath() {
-    if ("win32" === process.platform) {
-        const base = process.env.APPDATA || process.env.LOCALAPPDATA || node_path.join(node_os.homedir(), "AppData", "Roaming");
-        return node_path.join(base, "extension-dev", "auth.json");
-    }
-    const xdg = String(process.env.XDG_CONFIG_HOME || "").trim();
-    const base = xdg || node_path.join(node_os.homedir(), ".config");
-    return node_path.join(base, "extension-dev", "auth.json");
-}
-function readCredentials() {
-    try {
-        const raw = node_fs.readFileSync(credentialsPath(), "utf8");
-        const data = JSON.parse(raw);
-        if (!data || "object" != typeof data) return null;
-        if (1 !== data.version) return null;
-        const token = String(data.token || "").trim();
-        if (!token) return null;
-        return {
-            version: 1,
-            token,
-            workspaceSlug: String(data.workspaceSlug || ""),
-            projectSlug: String(data.projectSlug || ""),
-            expiresAt: Number(data.expiresAt || 0),
-            api: String(data.api || "")
-        };
-    } catch  {
-        return null;
-    }
-}
-function writeCredentials(creds) {
-    const file = credentialsPath();
-    node_fs.mkdirSync(node_path.dirname(file), {
-        recursive: true
-    });
-    node_fs.writeFileSync(file, JSON.stringify(creds, null, 2) + "\n", {
-        mode: 384
-    });
-    try {
-        node_fs.chmodSync(file, 384);
-    } catch  {}
-    return file;
-}
-function clearCredentials() {
-    const file = credentialsPath();
-    try {
-        node_fs.unlinkSync(file);
-        return {
-            cleared: true,
-            path: file
-        };
-    } catch  {
-        return {
-            cleared: false,
-            path: file
-        };
-    }
-}
-function readValidCredentials(nowSeconds = Math.floor(Date.now() / 1000)) {
-    const creds = readCredentials();
-    if (!creds) return null;
-    if (creds.expiresAt && creds.expiresAt <= nowSeconds) return null;
-    return creds;
-}
-const DEFAULT_API = "https://www.extension.dev";
 const publish_schema = {
     name: "extension_publish",
     description: "Publish a project to extension.dev and return a shareable URL. Auth-gated: requires EXTENSION_DEV_TOKEN (a workspace/project access token) in the environment. Posts to the platform's CLI publish endpoint directly. This is the only tool that talks to the hosted platform rather than the local browser.",
@@ -2417,12 +2368,68 @@ const publish_schema = {
         ]
     }
 };
-function resolveToken() {
-    const fromEnv = String(process.env.EXTENSION_DEV_TOKEN || "").trim();
-    if (fromEnv) return fromEnv;
-    const creds = readValidCredentials();
-    return creds?.token ? String(creds.token).trim() : "";
+async function publish_handler(args) {
+    const token = resolveToken();
+    if (!token) return JSON.stringify({
+        ok: false,
+        error: {
+            name: "PublishAuthError",
+            message: "No token. Run extension_login, or set EXTENSION_DEV_TOKEN (create one in the extension.dev dashboard)."
+        }
+    });
+    const result = await publish({
+        ttlHours: args.ttlHours,
+        buildSha: args.buildSha,
+        api: args.api,
+        token
+    });
+    return result.ok ? JSON.stringify(result.data) : JSON.stringify(result);
 }
+const DEFAULT_API = "https://www.extension.dev";
+const release_promote_schema = {
+    name: "extension_release_promote",
+    description: "Promote a built extension to a release channel (e.g. stable, preview, beta) on extension.dev, headless. Auth-gated: requires a release token in EXTENSION_DEV_TOKEN (mint and revoke it in the dashboard under project settings -> Access tokens). Posts to the platform's CLI release endpoint; the project is identified by the token. Cutting a version-bump PR is not available headlessly (it writes to your source repo and needs an interactive login).",
+    inputSchema: {
+        type: "object",
+        properties: {
+            buildId: {
+                type: "string",
+                description: "Build commit SHA to promote (a 7-char short SHA is fine)"
+            },
+            channel: {
+                type: "string",
+                description: "Target release channel, e.g. stable, preview, beta"
+            },
+            sourceChannel: {
+                type: "string",
+                description: "Channel to promote from (optional; inferred otherwise)"
+            },
+            browsers: {
+                type: "array",
+                items: {
+                    type: "string"
+                },
+                description: "Browsers to release (optional; auto-detected from the build)"
+            },
+            version: {
+                type: "string",
+                description: "Version label for the release (optional)"
+            },
+            releaseNotes: {
+                type: "string",
+                description: "Release notes markdown (optional)"
+            },
+            api: {
+                type: "string",
+                description: "Platform base URL (defaults to https://www.extension.dev or EXTENSION_DEV_API_URL)"
+            }
+        },
+        required: [
+            "buildId",
+            "channel"
+        ]
+    }
+};
 function fail(name, message) {
     return JSON.stringify({
         ok: false,
@@ -2432,14 +2439,23 @@ function fail(name, message) {
         }
     });
 }
-async function publish_handler(args) {
+async function release_promote_handler(args) {
     const token = resolveToken();
-    if (!token) return fail("PublishAuthError", "No token. Run extension_login, or set EXTENSION_DEV_TOKEN (create one in the extension.dev dashboard).");
-    const base = String(args.api || process.env.EXTENSION_DEV_API_URL || DEFAULT_API).replace(/\/+$/, "");
-    const url = `${base}/api/cli/publish`;
-    const body = {};
-    if (null != args.ttlHours) body.ttlHours = Number(args.ttlHours);
-    if (args.buildSha) body.buildSha = args.buildSha;
+    if (!token) return fail("ReleaseAuthError", "No token. Set EXTENSION_DEV_TOKEN to a release token (create one in the extension.dev dashboard under project settings -> Access tokens), or run extension_login.");
+    const buildId = String(args.buildId || "").trim();
+    const channel = String(args.channel || "").trim();
+    if (!buildId || !channel) return fail("ReleaseInputError", "buildId and channel are required.");
+    const apiCheck = safeApiBase(String(args.api || process.env.EXTENSION_DEV_API_URL || DEFAULT_API));
+    if (!apiCheck.ok) return fail("ReleaseConfigError", apiCheck.message);
+    const url = `${apiCheck.base}/api/cli/release/promote`;
+    const body = {
+        buildId,
+        channel
+    };
+    if (args.sourceChannel) body.sourceChannel = String(args.sourceChannel).trim();
+    if (Array.isArray(args.browsers) && args.browsers.length) body.browsers = args.browsers.map((b)=>String(b).trim()).filter(Boolean);
+    if (args.version) body.version = String(args.version).trim();
+    if (args.releaseNotes) body.releaseNotes = String(args.releaseNotes);
     let res;
     try {
         res = await fetch(url, {
@@ -2451,7 +2467,7 @@ async function publish_handler(args) {
             body: JSON.stringify(body)
         });
     } catch (err) {
-        return fail("PublishNetworkError", `Could not reach ${url}: ${err?.message || err}`);
+        return fail("ReleaseNetworkError", `Could not reach ${url}: ${err?.message || err}`);
     }
     const text = await res.text();
     let data;
@@ -2462,7 +2478,7 @@ async function publish_handler(args) {
             message: text
         };
     }
-    if (!res.ok) return fail("PublishError", `publish failed (${res.status}): ${data?.message || text || "unknown error"}`);
+    if (!res.ok) return fail("ReleaseError", `promote failed (${res.status}): ${data?.message || text || "unknown error"}`);
     return JSON.stringify(data);
 }
 const wait_schema = {
@@ -2760,138 +2776,6 @@ async function add_feature_handler(args) {
         hint: conflicts.length ? `Warning: ${conflicts.length} file(s) already exist and would be overwritten.` : "No conflicts detected. Safe to create all files."
     });
 }
-const GITHUB_DEVICE_CODE_URL = "https://github.com/login/device/code";
-const GITHUB_TOKEN_URL = "https://github.com/login/oauth/access_token";
-const DEVICE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
-const defaultSleep = (ms)=>new Promise((resolve)=>setTimeout(resolve, ms));
-async function startDeviceCode(args) {
-    const doFetch = args.fetchImpl ?? fetch;
-    const res = await doFetch(GITHUB_DEVICE_CODE_URL, {
-        method: "POST",
-        headers: {
-            accept: "application/json",
-            "content-type": "application/json"
-        },
-        body: JSON.stringify({
-            client_id: args.clientId,
-            scope: args.scope || "read:user"
-        })
-    });
-    const data = await res.json().catch(()=>({}));
-    if (!res.ok || data.error) throw new Error(`GitHub device-code request failed: ${data.error_description || data.error || res.status}`);
-    return {
-        deviceCode: String(data.device_code || ""),
-        userCode: String(data.user_code || ""),
-        verificationUri: String(data.verification_uri || "https://github.com/login/device"),
-        interval: Number(data.interval || 5),
-        expiresIn: Number(data.expires_in || 900)
-    };
-}
-async function pollForToken(args) {
-    const doFetch = args.fetchImpl ?? fetch;
-    const sleep = args.sleepImpl ?? defaultSleep;
-    let intervalMs = 1000 * Math.max(1, args.interval);
-    const deadline = Date.now() + Math.max(0, args.budgetMs);
-    while(Date.now() < deadline){
-        await sleep(intervalMs);
-        const res = await doFetch(GITHUB_TOKEN_URL, {
-            method: "POST",
-            headers: {
-                accept: "application/json",
-                "content-type": "application/json"
-            },
-            body: JSON.stringify({
-                client_id: args.clientId,
-                device_code: args.deviceCode,
-                grant_type: DEVICE_GRANT_TYPE
-            })
-        });
-        const data = await res.json().catch(()=>({}));
-        const token = String(data.access_token || "").trim();
-        if (token) return {
-            ok: true,
-            githubToken: token
-        };
-        const error = String(data.error || "");
-        if ("authorization_pending" === error) continue;
-        if ("slow_down" === error) {
-            intervalMs = Math.max(intervalMs + 5000, 1000 * Number(data.interval || 0));
-            continue;
-        }
-        if ("expired_token" === error) return {
-            ok: false,
-            reason: "expired"
-        };
-        if ("access_denied" === error) return {
-            ok: false,
-            reason: "denied"
-        };
-    }
-    return {
-        ok: false,
-        reason: "pending"
-    };
-}
-const login_flow_DEFAULT_API = "https://www.extension.dev";
-function resolveApiBase(api) {
-    return String(api || process.env.EXTENSION_DEV_API_URL || login_flow_DEFAULT_API).replace(/\/+$/, "");
-}
-async function fetchLoginConfig(apiBase, fetchImpl = fetch) {
-    const override = String(process.env.EXTENSION_DEV_GITHUB_CLIENT_ID || "").trim();
-    if (override) return {
-        clientId: override,
-        scope: "read:user"
-    };
-    const res = await fetchImpl(`${apiBase}/api/cli/login/config`, {
-        headers: {
-            accept: "application/json"
-        }
-    });
-    if (!res.ok) throw new Error(`Could not fetch login config from ${apiBase} (${res.status}).`);
-    const data = await res.json().catch(()=>({}));
-    const clientId = String(data.githubClientId || "").trim();
-    if (!clientId) throw new Error("Login is not configured on the server (no GitHub client id). Set EXTENSION_DEV_GITHUB_CLIENT_ID to override.");
-    return {
-        clientId,
-        scope: String(data.scope || "read:user")
-    };
-}
-async function exchangeAndPersist(args) {
-    const doFetch = args.fetchImpl ?? fetch;
-    const res = await doFetch(`${args.apiBase}/api/cli/login/exchange`, {
-        method: "POST",
-        headers: {
-            "content-type": "application/json",
-            accept: "application/json"
-        },
-        body: JSON.stringify({
-            githubToken: args.githubToken,
-            project: args.project
-        })
-    });
-    const text = await res.text();
-    let data;
-    try {
-        data = JSON.parse(text);
-    } catch  {
-        data = {
-            message: text
-        };
-    }
-    if (!res.ok) throw new Error(`Login exchange failed (${res.status}): ${data.message || "unknown error"}`);
-    const token = String(data.token || "").trim();
-    if (!token) throw new Error("Login exchange returned no token.");
-    const creds = {
-        version: 1,
-        token,
-        workspaceSlug: String(data.workspaceSlug || ""),
-        projectSlug: String(data.projectSlug || ""),
-        expiresAt: Number(data.expiresAt || 0),
-        api: args.apiBase
-    };
-    writeCredentials(creds);
-    return creds;
-}
 const login_schema = {
     name: "extension_login",
     description: "Authenticate to extension.dev via GitHub device-code and store a project-scoped access token locally so extension_publish can use it. Two-phase: call with `project` to get a code + URL for the user to authorize, then call again with the returned `deviceCode` to finish. Never returns the token. This is the only tool besides extension_publish that talks to the hosted platform.",
@@ -3404,6 +3288,7 @@ const tools = [
     open_namespaceObject,
     dom_inspect_namespaceObject,
     publish_namespaceObject,
+    release_promote_namespaceObject,
     wait_namespaceObject,
     add_feature_namespaceObject,
     login_namespaceObject,
@@ -3418,7 +3303,7 @@ for (const tool of tools)toolMap.set(tool.schema.name, tool);
 async function startServer() {
     const server = new Server({
         name: "extension-dev",
-        version: "3.13.5"
+        version: package_namespaceObject.rE
     }, {
         capabilities: {
             tools: {}
@@ -3484,6 +3369,34 @@ async function runCli(cmd, args) {
         log(await whoami_handler());
         return 0;
     }
+    if ("release" === cmd) {
+        const sub = String(args[0] || "").trim();
+        if ("promote" === sub) {
+            const buildId = String(flag("build") || flag("build-id") || "").trim();
+            const channel = String(flag("channel") || "").trim();
+            if (!buildId || !channel) {
+                log("Usage: extension-mcp release promote --build <sha> --channel <channel> [--source-channel <c>] [--version <v>] [--api <url>]");
+                return 1;
+            }
+            const out = await release_promote_handler({
+                buildId,
+                channel,
+                sourceChannel: flag("source-channel"),
+                version: flag("version"),
+                api: flag("api")
+            });
+            log(out);
+            let parsed = null;
+            try {
+                parsed = JSON.parse(out);
+            } catch  {
+                parsed = null;
+            }
+            return parsed?.ok === false ? 1 : 0;
+        }
+        log("Usage: extension-mcp release promote --build <sha> --channel <channel>");
+        return 1;
+    }
     if ("logout" === cmd) {
         log(await logout_handler());
         return 0;
@@ -3527,7 +3440,7 @@ async function runCli(cmd, args) {
             return 1;
         }
     }
-    log(`Unknown command: ${cmd}. Expected one of: login, logout, whoami.`);
+    log(`Unknown command: ${cmd}. Expected one of: login, logout, whoami, release.`);
     return 1;
 }
 export { runCli, startServer };