@extension.dev/mcp 5.3.0 → 5.3.1

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "extension-mcp",
       "source": "./",
       "description": "MCP tools for browser extension development: scaffold from 60+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox.",
-      "version": "5.3.0",
+      "version": "5.3.1",
       "category": "development",
       "author": {
         "name": "Cezar Augusto"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "extension-mcp",
   "description": "MCP tools for browser extension development: scaffold from 60+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox. Ships /extension, /extension-add, /extension-debug, and /extension-publish commands.",
-  "version": "5.3.0",
+  "version": "5.3.1",
   "author": {
     "name": "Cezar Augusto",
     "email": "boss@cezaraugusto.net",

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 5.3.1
+
+### Added
+
+- `extension_login` pending results lead with the one-click device link
+  when the flow provides one (RFC 8628 `verification_uri_complete`): the
+  user opens it and approves with the code pre-filled, no typing. The
+  bare URI and code stay in the result as the fallback for flows that
+  cannot prefill.
+- `extension_deploy` and `extension_release_promote` accept each other's
+  spelling for the same build commit: deploy folds a `buildId` argument
+  onto its canonical `buildSha`, and promote folds `buildSha` onto its
+  canonical `buildId`. Full-schema validation errors enumerate the new
+  aliases alongside the rest of the contract.
+
+### Fixed
+
+- Resuming `extension_login` with a `deviceCode` while authorization is
+  still pending no longer claims a userCode of "(see the previous
+  response)". Only a hash of the code is stored, so it cannot be echoed
+  again; the result now says plainly that the one-click link and code
+  from the previous response are still valid, to open that link (or
+  enter the code at the verification URI), then call `extension_login`
+  again with the same deviceCode.
+
 ## 5.3.0
 
 The DevX surprise swarm ran ten personas over the full create-to-release

package/dist/module.js

@@ -210,7 +210,7 @@ __webpack_require__.d(whoami_namespaceObject, {
     handler: ()=>whoami_handler,
     schema: ()=>whoami_schema
 });
-var package_namespaceObject = JSON.parse('{"rE":"5.3.0","El":{"OP":"^4.0.13"}}');
+var package_namespaceObject = JSON.parse('{"rE":"5.3.1","El":{"OP":"^4.0.13"}}');
 function scaffoldEnginePin(projectPath) {
     try {
         const pkg = JSON.parse(node_fs.readFileSync(node_path.join(projectPath, "package.json"), "utf8"));
@@ -5806,13 +5806,28 @@ function success(creds) {
     });
 }
 function login_pending(start) {
+    const complete = String(start.verificationUriComplete || "").trim();
+    const hasCompleteLink = complete.length > 0 && complete !== start.verificationUri;
+    const message = hasCompleteLink ? `Open ${complete} and approve (code ${start.userCode} is pre-filled), then call extension_login again with this deviceCode (and the same project). If the page asks for a code, enter ${start.userCode} at ${start.verificationUri}.` : `Open ${start.verificationUri} and enter code ${start.userCode}, then call extension_login again with this deviceCode (and the same project).`;
     return JSON.stringify({
         ok: false,
         status: "authorization_pending",
         userCode: start.userCode,
         verificationUri: start.verificationUri,
+        ...hasCompleteLink ? {
+            verificationUriComplete: complete
+        } : {},
         deviceCode: start.deviceCode,
-        message: `Open ${start.verificationUri} and enter code ${start.userCode}, then call extension_login again with this deviceCode (and the same project).`
+        message
+    });
+}
+function resumePending(deviceCode, verificationUri) {
+    return JSON.stringify({
+        ok: false,
+        status: "authorization_pending",
+        verificationUri,
+        deviceCode,
+        message: `Still waiting for authorization. The one-click link and code from the previous response are still valid: open that link (or enter the code at ${verificationUri}), then call extension_login again with this same deviceCode (and the same project).`
     });
 }
 async function login_handler(args) {
@@ -5839,11 +5854,7 @@ async function login_handler(args) {
             if ("expired" === poll.reason) return login_fail("LoginExpired", "The device code expired. Run extension_login again to restart.");
             if ("denied" === poll.reason) return login_fail("LoginDenied", "Authorization was denied at extension.dev/device.");
             if ("error" === poll.reason) return login_fail("LoginError", poll.message || "Device login failed.");
-            return login_pending({
-                deviceCode: String(args.deviceCode),
-                userCode: "(see the previous response)",
-                verificationUri: config.verificationUri
-            });
+            return resumePending(String(args.deviceCode), config.verificationUri);
         }
         let start;
         try {
@@ -5868,7 +5879,8 @@ async function login_handler(args) {
         return login_pending({
             deviceCode: start.deviceCode,
             userCode: start.userCode,
-            verificationUri: start.verificationUri
+            verificationUri: start.verificationUri,
+            verificationUriComplete: start.verificationUriComplete
         });
     }
     if (args.deviceCode) {
@@ -5881,11 +5893,7 @@ async function login_handler(args) {
         if (!poll.ok) {
             if ("expired" === poll.reason) return login_fail("LoginExpired", "The device code expired. Run extension_login again to restart.");
             if ("denied" === poll.reason) return login_fail("LoginDenied", "Authorization was denied on GitHub.");
-            return login_pending({
-                deviceCode: String(args.deviceCode),
-                userCode: "(see the previous response)",
-                verificationUri: "https://github.com/login/device"
-            });
+            return resumePending(String(args.deviceCode), "https://github.com/login/device");
         }
         try {
             const creds = await exchangeAndPersist({
@@ -6538,6 +6546,12 @@ const ARG_ALIASES = {
     ],
     browser: [
         "browserName"
+    ],
+    buildSha: [
+        "buildId"
+    ],
+    buildId: [
+        "buildSha"
     ]
 };
 function normalizeArgAliases(inputSchema, args) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@extension.dev/mcp",
   "type": "module",
-  "version": "5.3.0",
+  "version": "5.3.1",
   "description": "MCP server that lets AI agents (Claude Code, Claude Desktop, Cursor, Copilot, Codex) build, run, inspect, and publish browser extensions. 32 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, Firefox, Safari, and every Chromium- or Gecko-based browser (Brave, Opera, Vivaldi, Yandex, Waterfox, LibreWolf). Powered by extension.dev and Extension.js.",
   "mcpName": "io.github.extensiondev/mcp",
   "license": "MIT",

package/server.json

@@ -7,13 +7,13 @@
     "source": "github"
   },
   "websiteUrl": "https://extension.dev",
-  "version": "5.3.0",
+  "version": "5.3.1",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@extension.dev/mcp",
-      "version": "5.3.0",
+      "version": "5.3.1",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"