@extension.dev/mcp 5.5.0 → 5.5.1

package/.claude-plugin/marketplace.json

@@ -2,7 +2,7 @@
   "name": "extensiondev-mcp",
   "owner": {
     "name": "Cezar Augusto",
-    "email": "boss@cezaraugusto.net",
+    "email": "hello@extension.dev",
     "url": "https://extension.dev"
   },
   "plugins": [
@@ -10,7 +10,7 @@
       "name": "extension-mcp",
       "source": "./",
       "description": "MCP tools for browser extension development: scaffold from 60+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox.",
-      "version": "5.5.0",
+      "version": "5.5.1",
       "category": "development",
       "author": {
         "name": "Cezar Augusto"

package/.claude-plugin/plugin.json

@@ -1,10 +1,10 @@
 {
   "name": "extension-mcp",
   "description": "MCP tools for browser extension development: scaffold from 60+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox. Ships /extension, /extension-add, /extension-debug, and /extension-publish commands.",
-  "version": "5.5.0",
+  "version": "5.5.1",
   "author": {
     "name": "Cezar Augusto",
-    "email": "boss@cezaraugusto.net",
+    "email": "hello@extension.dev",
     "url": "https://cezaraugusto.com"
   },
   "homepage": "https://github.com/extensiondev/mcp",

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # Changelog
 
+## 5.5.1
+
+The store journey stops being write-only after submit, and the token
+surfaces start telling the truth about lifetimes and API bases.
+
+### Added
+
+- `extension_store_status` (tool 33): the post-submit sibling of
+  `extension_deploy`. Reads the project's public registry
+  (`stores/health.json`, `stores/status.json`, `stores/submissions.json`)
+  and reports per store whether it is configured, its latest credential
+  health check, the last recorded submission (version, status, store
+  URL, submitted-at), and the latest review status. Normalizes both the
+  v3 merged status schema and legacy v2 poller documents. Defaults to
+  the logged-in project; accepts `workspace` + `project` overrides like
+  `extension_release_list`. A configured store with a failing credential
+  reports `configured: true` with `health.ok: false` (rotate the
+  credential, deep-linked), never "not configured".
+
+### Fixed
+
+- `extension_whoami` no longer asserts a bare `api` field that could
+  misstate the platform base (a login minted via a localhost dev server
+  kept reporting that dead base for a token that authenticates against
+  production). The recorded login base is now labeled
+  `apiRecordedAtLogin`, `apiDefault` reports what authenticated tools
+  actually target, the message flags any divergence, and a set
+  `EXTENSION_DEV_TOKEN` is disclosed as outranking the stored login.
+- The 7-day token TTL (server-enforced) is now stated everywhere a CI
+  author looks: `extension_login`'s description and success/pending
+  results, `extension_whoami`'s `tokenTtlNote` (with the deep console
+  Access tokens URL), and the auth prose of `extension_deploy` and
+  `extension_release_promote` (`extension_publish`'s auth envelope is
+  byte-frozen and unchanged).
+- `extension_deploy`'s description says the per-store rows in the result
+  are the verdict to trust: the platform's bare preflight line does not
+  check store health. A real (non-dry-run) submission now points at
+  `extension_store_status` for tracking.
+
 ## 5.5.0
 
 The debug surfaces learn to point at things: tabs are targetable by
@@ -644,7 +683,7 @@ this release graduates that line to stable and becomes `latest`.
 
 # @extension.dev/mcp, Changelog
 
-## Unreleased, agent-bridge tools
+## 5.5.1, agent-bridge tools
 
 Adds the MCP client surface for the Extension.js **agent bridge** (dev-time
 observe + act + inspect). All new tools shell out to the `extension` CLI verbs
@@ -679,7 +718,7 @@ Internal: `lib/act` (CLI shell-out helper), `lib/exec.runExtensionCli` (capture)
 `lib/cdp.getClosedShadowRoots`. Test infra aligned to the workspace vitest
 catalog.
 
-## Unreleased, login (auth tools)
+## 5.5.1, login (auth tools)
 
 Adds the missing `login` flow so `extension_publish` no longer requires the user
 to mint and export `EXTENSION_DEV_TOKEN` by hand. Auth stays auth-AWARE: the

package/README.md

@@ -7,7 +7,7 @@
 
 # @extension.dev/mcp [![Version][npm-version-image]][npm-version-url] [![Downloads][npm-downloads-image]][npm-downloads-url] [![Discord][discord-image]][discord-url]
 
-> Give your AI agent hands for browser extension development. 30 MCP tools that scaffold, run, inspect, debug, and publish cross-browser extensions.
+> Give your AI agent hands for browser extension development. 33 MCP tools that scaffold, run, inspect, debug, and publish cross-browser extensions.
 
 <img alt="Logo" align="right" src="https://media.extension.land/brand/extension-dev/logo-dock.png" width="20.7%" />
 
@@ -127,7 +127,7 @@ Browser-launching tools (`dev`, `start`, `preview`) shell out to the `extension`
 
 ## From preview to store
 
-The platform tools connect agents to [extension.dev](https://extension.dev): `extension_login` runs a GitHub device-code flow and stores a project-scoped token locally (never returned to the agent), `extension_publish` turns a build into a shareable preview URL, and `extension_release_promote` promotes a tested build to a release channel from CI or an agent session, no browser required. `extension_deploy` submits a built extension to the Chrome Web Store, Edge Add-ons, and Firefox AMO through extension.dev, which holds your store credentials and dispatches the release from your project's mirror CI, it defaults to a dry run and store credentials are never tool arguments.
+The platform tools connect agents to [extension.dev](https://extension.dev): `extension_login` runs a GitHub device-code flow and stores a project-scoped token locally (never returned to the agent), `extension_publish` turns a build into a shareable preview URL, and `extension_release_promote` promotes a tested build to a release channel from CI or an agent session, no browser required. `extension_deploy` submits a built extension to the Chrome Web Store, Edge Add-ons, and Firefox AMO through extension.dev, which holds your store credentials and dispatches the release from your project's mirror CI, it defaults to a dry run and store credentials are never tool arguments. After a real submission, `extension_store_status` reads the recorded outcome, per-store credential health, and review state from the project's public registry, so agents and CI can answer "was it approved?" without a console visit. Access tokens live at most 7 days; CI pipelines re-mint them from the console's Access tokens page.
 
 ## The extension.dev stack
 

package/dist/module.js

@@ -193,6 +193,14 @@ __webpack_require__.d(storage_namespaceObject, {
     handler: ()=>storage_handler,
     schema: ()=>storage_schema
 });
+var store_status_namespaceObject = {};
+__webpack_require__.r(store_status_namespaceObject);
+__webpack_require__.d(store_status_namespaceObject, {
+    handler: ()=>store_status_handler,
+    latestSubmissionsByStore: ()=>latestSubmissionsByStore,
+    normalizeStoresStatus: ()=>normalizeStoresStatus,
+    schema: ()=>store_status_schema
+});
 var uninstall_browser_namespaceObject = {};
 __webpack_require__.r(uninstall_browser_namespaceObject);
 __webpack_require__.d(uninstall_browser_namespaceObject, {
@@ -211,7 +219,7 @@ __webpack_require__.d(whoami_namespaceObject, {
     handler: ()=>whoami_handler,
     schema: ()=>whoami_schema
 });
-var package_namespaceObject = JSON.parse('{"rE":"5.5.0","El":{"OP":"^4.0.13"}}');
+var package_namespaceObject = JSON.parse('{"rE":"5.5.1","El":{"OP":"^4.0.13"}}');
 function scaffoldEnginePin(projectPath) {
     try {
         const pkg = JSON.parse(node_fs.readFileSync(node_path.join(projectPath, "package.json"), "utf8"));
@@ -4686,7 +4694,117 @@ function readValidCredentials(nowSeconds = Math.floor(Date.now() / 1000)) {
     if (creds.expiresAt && creds.expiresAt <= nowSeconds) return null;
     return creds;
 }
+const REGISTRY_BASE_DEFAULT = "https://registry.extension.land";
+const CONSOLE_BASE = "https://console.extension.dev";
+function registryBase() {
+    const fromEnv = String(process.env.EXTENSION_DEV_REGISTRY_URL || "").trim();
+    return (fromEnv || REGISTRY_BASE_DEFAULT).replace(/\/+$/, "");
+}
+function resolveProjectRef(overrides) {
+    const workspace = String(overrides?.workspace || "").trim();
+    const project = String(overrides?.project || "").trim();
+    if (workspace && project) return {
+        workspace,
+        project
+    };
+    const creds = readCredentials();
+    const ws = workspace || String(creds?.workspaceSlug || "").trim();
+    const proj = project || String(creds?.projectSlug || "").trim();
+    if (!ws || !proj) return null;
+    return {
+        workspace: ws,
+        project: proj
+    };
+}
+function registryFileUrl(ref, file) {
+    return `${registryBase()}/${encodeURIComponent(ref.workspace)}/${encodeURIComponent(ref.project)}/_extension-dev/${file}`;
+}
+function consoleProjectUrl(ref, page) {
+    if (!ref) return `${CONSOLE_BASE}`;
+    return `${CONSOLE_BASE}/${encodeURIComponent(ref.workspace)}/${encodeURIComponent(ref.project)}/${page}`;
+}
+async function fetchRegistryJson(url, fetchImpl = fetch) {
+    let res;
+    try {
+        res = await fetchImpl(url);
+    } catch (err) {
+        return {
+            ok: false,
+            message: `Could not reach ${url}: ${err?.message || err}`
+        };
+    }
+    if (!res.ok) return {
+        ok: false,
+        status: res.status,
+        message: `${url} returned ${res.status}`
+    };
+    try {
+        const text = await res.text();
+        return {
+            ok: true,
+            json: JSON.parse(text)
+        };
+    } catch  {
+        return {
+            ok: false,
+            message: `${url} did not return valid JSON`
+        };
+    }
+}
+function parseChannels(json) {
+    if (!json || "object" != typeof json || Array.isArray(json)) return [];
+    const out = [];
+    for (const [channel, raw] of Object.entries(json)){
+        if (!raw || "object" != typeof raw) continue;
+        const row = raw;
+        const description = "string" == typeof row.description ? row.description : void 0;
+        const promotedAtField = "string" == typeof row.promotedAt && row.promotedAt ? row.promotedAt : void 0;
+        const fromDescription = description?.match(/\bon (\d{4}-\d{2}-\d{2}T[0-9:.]+Z?)/)?.[1];
+        const entry = {
+            channel,
+            sha: String(row.sha ?? "")
+        };
+        if (row.buildId) entry.buildId = String(row.buildId);
+        if (row.version) entry.version = String(row.version);
+        const promotedAt = promotedAtField || fromDescription;
+        if (promotedAt) entry.promotedAt = promotedAt;
+        if (description) entry.description = description;
+        out.push(entry);
+    }
+    return out;
+}
+function parseBuildIndex(json) {
+    const items = json?.items;
+    if (!Array.isArray(items)) return [];
+    const out = [];
+    for (const raw of items){
+        if (!raw || "object" != typeof raw) continue;
+        const row = raw;
+        const sha = String(row.shortSha ?? row.sha ?? row.id ?? row.buildId ?? "").trim();
+        if (!sha) continue;
+        const entry = {
+            sha
+        };
+        if (row.commit) entry.commit = String(row.commit);
+        if (row.channel) entry.channel = String(row.channel);
+        if (row.buildEnv) entry.buildEnv = String(row.buildEnv);
+        if (row.status) entry.status = String(row.status);
+        if (row.version) entry.version = String(row.version);
+        if ("string" == typeof row.message) entry.message = row.message.split("\n", 1)[0];
+        if (row.timestamp) entry.timestamp = String(row.timestamp);
+        if (Array.isArray(row.browsers)) entry.browsers = row.browsers.map((b)=>String(b)).filter(Boolean);
+        out.push(entry);
+    }
+    return out;
+}
 const DEFAULT_API = "https://www.extension.dev";
+function tokenTtlNote(workspaceSlug, projectSlug) {
+    const tokensUrl = workspaceSlug && projectSlug ? consoleProjectUrl({
+        workspace: workspaceSlug,
+        project: projectSlug
+    }, "settings/access-tokens") : CONSOLE_BASE;
+    return `extension.dev CLI tokens live at most 7 days (server-enforced). CI pipelines must re-mint before expiry on the console's Access tokens page: ${tokensUrl}`;
+}
 function resolveApiBase(api) {
     return String(api || process.env.EXTENSION_DEV_API_URL || DEFAULT_API).replace(/\/+$/, "");
 }
@@ -4851,109 +4969,6 @@ async function publish(options = {}) {
         data
     };
 }
-const REGISTRY_BASE_DEFAULT = "https://registry.extension.land";
-const CONSOLE_BASE = "https://console.extension.dev";
-function registryBase() {
-    const fromEnv = String(process.env.EXTENSION_DEV_REGISTRY_URL || "").trim();
-    return (fromEnv || REGISTRY_BASE_DEFAULT).replace(/\/+$/, "");
-}
-function resolveProjectRef(overrides) {
-    const workspace = String(overrides?.workspace || "").trim();
-    const project = String(overrides?.project || "").trim();
-    if (workspace && project) return {
-        workspace,
-        project
-    };
-    const creds = readCredentials();
-    const ws = workspace || String(creds?.workspaceSlug || "").trim();
-    const proj = project || String(creds?.projectSlug || "").trim();
-    if (!ws || !proj) return null;
-    return {
-        workspace: ws,
-        project: proj
-    };
-}
-function registryFileUrl(ref, file) {
-    return `${registryBase()}/${encodeURIComponent(ref.workspace)}/${encodeURIComponent(ref.project)}/_extension-dev/${file}`;
-}
-function consoleProjectUrl(ref, page) {
-    if (!ref) return `${CONSOLE_BASE}`;
-    return `${CONSOLE_BASE}/${encodeURIComponent(ref.workspace)}/${encodeURIComponent(ref.project)}/${page}`;
-}
-async function fetchRegistryJson(url, fetchImpl = fetch) {
-    let res;
-    try {
-        res = await fetchImpl(url);
-    } catch (err) {
-        return {
-            ok: false,
-            message: `Could not reach ${url}: ${err?.message || err}`
-        };
-    }
-    if (!res.ok) return {
-        ok: false,
-        status: res.status,
-        message: `${url} returned ${res.status}`
-    };
-    try {
-        const text = await res.text();
-        return {
-            ok: true,
-            json: JSON.parse(text)
-        };
-    } catch  {
-        return {
-            ok: false,
-            message: `${url} did not return valid JSON`
-        };
-    }
-}
-function parseChannels(json) {
-    if (!json || "object" != typeof json || Array.isArray(json)) return [];
-    const out = [];
-    for (const [channel, raw] of Object.entries(json)){
-        if (!raw || "object" != typeof raw) continue;
-        const row = raw;
-        const description = "string" == typeof row.description ? row.description : void 0;
-        const promotedAtField = "string" == typeof row.promotedAt && row.promotedAt ? row.promotedAt : void 0;
-        const fromDescription = description?.match(/\bon (\d{4}-\d{2}-\d{2}T[0-9:.]+Z?)/)?.[1];
-        const entry = {
-            channel,
-            sha: String(row.sha ?? "")
-        };
-        if (row.buildId) entry.buildId = String(row.buildId);
-        if (row.version) entry.version = String(row.version);
-        const promotedAt = promotedAtField || fromDescription;
-        if (promotedAt) entry.promotedAt = promotedAt;
-        if (description) entry.description = description;
-        out.push(entry);
-    }
-    return out;
-}
-function parseBuildIndex(json) {
-    const items = json?.items;
-    if (!Array.isArray(items)) return [];
-    const out = [];
-    for (const raw of items){
-        if (!raw || "object" != typeof raw) continue;
-        const row = raw;
-        const sha = String(row.shortSha ?? row.sha ?? row.id ?? row.buildId ?? "").trim();
-        if (!sha) continue;
-        const entry = {
-            sha
-        };
-        if (row.commit) entry.commit = String(row.commit);
-        if (row.channel) entry.channel = String(row.channel);
-        if (row.buildEnv) entry.buildEnv = String(row.buildEnv);
-        if (row.status) entry.status = String(row.status);
-        if (row.version) entry.version = String(row.version);
-        if ("string" == typeof row.message) entry.message = row.message.split("\n", 1)[0];
-        if (row.timestamp) entry.timestamp = String(row.timestamp);
-        if (Array.isArray(row.browsers)) entry.browsers = row.browsers.map((b)=>String(b)).filter(Boolean);
-        out.push(entry);
-    }
-    return out;
-}
 const publish_schema = {
     name: "extension_publish",
     description: "Publish the project your stored token is scoped to (from extension_login, or EXTENSION_DEV_TOKEN) to extension.dev and return its shareable URL. The publish target is the token's project -- there is no projectPath, the local files are not uploaded. For a PUBLIC project the URL is the canonical public page and ttlHours does not apply; for a PRIVATE project it is a fresh time-limited share link (?share=) whose lifetime is ttlHours. Posts to the platform's CLI publish endpoint. Besides extension_login this is the only tool that talks to the hosted platform.",
@@ -5031,7 +5046,7 @@ async function publish_handler(args) {
 const release_promote_DEFAULT_API = "https://www.extension.dev";
 const release_promote_schema = {
     name: "extension_release_promote",
-    description: "Promote a built extension to a release channel (e.g. stable, preview, beta) on extension.dev, headless. Auth-gated: uses your stored login (extension_login) or a release token in EXTENSION_DEV_TOKEN (mint and revoke it in the dashboard under project settings -> Access tokens). Posts to the platform's CLI release endpoint; the project is identified by the token. Cutting a version-bump PR is not available headlessly (it writes to your source repo and needs an interactive login).",
+    description: "Promote a built extension to a release channel (e.g. stable, preview, beta) on extension.dev, headless. Auth-gated: uses your stored login (extension_login) or a release token in EXTENSION_DEV_TOKEN (mint and revoke it in the dashboard under project settings -> Access tokens; tokens live at most 7 days, so CI must re-mint before expiry). Posts to the platform's CLI release endpoint; the project is identified by the token. Cutting a version-bump PR is not available headlessly (it writes to your source repo and needs an interactive login).",
     inputSchema: {
         type: "object",
         properties: {
@@ -5084,7 +5099,7 @@ function release_promote_fail(name, message) {
 }
 async function release_promote_handler(args) {
     const token = resolveToken();
-    if (!token) return release_promote_fail("ReleaseAuthError", "No token. Set EXTENSION_DEV_TOKEN to a release token (create one in the extension.dev dashboard under project settings -> Access tokens), or run extension_login.");
+    if (!token) return release_promote_fail("ReleaseAuthError", "No token. Set EXTENSION_DEV_TOKEN to a release token (create one in the extension.dev dashboard under project settings -> Access tokens; tokens live at most 7 days, so CI must re-mint before expiry), or run extension_login.");
     const buildId = String(args.buildId || "").trim();
     const channel = String(args.channel || "").trim();
     if (!buildId || !channel) return release_promote_fail("ReleaseInputError", "buildId and channel are required.");
@@ -5236,7 +5251,7 @@ function storeMdWarnings(browsers, cwd) {
         content = node_fs.readFileSync(node_path.join(cwd, "STORE.md"), "utf8");
     } catch  {
         return [
-            "No STORE.md found in the project root. Reviewer notes (Firefox) and certification notes (Edge) will not accompany the submission. See the extension-dev skill's store-md reference."
+            "No STORE.md found in the current working directory. Platform submissions read STORE.md from the project's source repository, so this may not apply here; make sure STORE.md exists there for Firefox reviewer notes and Edge certification notes. See the extension-dev skill's store-md reference."
         ];
     }
     const hasField = (section, field)=>{
@@ -5255,7 +5270,7 @@ function storeMdWarnings(browsers, cwd) {
 }
 const deploy_schema = {
     name: "extension_deploy",
-    description: "Submit a built extension to the Chrome Web Store, Firefox AMO, and/or Edge Add-ons THROUGH extension.dev, which holds your store credentials and dispatches the release from your project's mirror CI. DEFAULTS TO A DRY RUN (preflight: verifies auth, the project, that the build exists, and the store workflow - dispatches nothing); pass dryRun:false to actually submit, which is irreversible and enters store review. The target project is identified by your token (extension_login or a release token in EXTENSION_DEV_TOKEN); store credentials are never tool arguments and local files are not uploaded. Pass browsers + buildSha. Posts to the platform's CLI store-submission endpoint.",
+    description: "Submit a built extension to the Chrome Web Store, Firefox AMO, and/or Edge Add-ons THROUGH extension.dev, which holds your store credentials and dispatches the release from your project's mirror CI. DEFAULTS TO A DRY RUN (preflight - dispatches nothing): the platform side verifies auth, the project, that the build exists, and the store workflow, and this tool then adds the per-store verdict from each store's public credential-health record; trust the per-store rows in the result over the platform's bare preflight line, which does not check store health. Pass dryRun:false to actually submit, which is irreversible and enters store review. The target project is identified by your token (extension_login or a release token in EXTENSION_DEV_TOKEN; tokens live at most 7 days, so CI must re-mint from the console's Access tokens page). Store credentials are never tool arguments and local files are not uploaded. Pass browsers + buildSha (extension_release_list lists valid shas); after a real submission, extension_store_status reads the recorded outcome and review state. Posts to the platform's CLI store-submission endpoint.",
     inputSchema: {
         type: "object",
         properties: {
@@ -5311,7 +5326,7 @@ function deploy_fail(name, message) {
 }
 async function deploy_handler(args) {
     const token = resolveToken();
-    if (!token) return deploy_fail("DeployAuthError", "No token. Run extension_login, or set EXTENSION_DEV_TOKEN (create one in the extension.dev dashboard under project settings -> Access tokens).");
+    if (!token) return deploy_fail("DeployAuthError", "No token. Run extension_login, or set EXTENSION_DEV_TOKEN (create one in the extension.dev dashboard under project settings -> Access tokens; tokens live at most 7 days, so CI must re-mint before expiry).");
     const browsers = (Array.isArray(args.browsers) ? args.browsers : []).map((b)=>String(b).trim().toLowerCase()).filter(Boolean);
     if (0 === browsers.length) return deploy_fail("DeployInputError", 'browsers is required (e.g. ["chrome","firefox","edge"]).');
     const buildSha = String(args.buildSha || "").trim();
@@ -5429,9 +5444,214 @@ async function deploy_handler(args) {
         if ("string" == typeof data?.message) result.platformMessage = data.message;
         result.message = summaryParts.join(" ");
     }
+    if (!dryRun) result.statusNote = "Track this submission with extension_store_status: it reads the recorded outcome, per-store credential health, and review state from the public registry.";
     if (warnings.length > 0) result.warnings = warnings;
     return JSON.stringify(result);
 }
+const KNOWN_STORES = [
+    "chrome",
+    "firefox",
+    "edge",
+    "safari"
+];
+const store_status_schema = {
+    name: "extension_store_status",
+    description: "Report the project's browser-store state after an extension_deploy submission: per store (chrome, firefox, edge, safari) whether it is configured, its latest credential health check, the last recorded submission (version, status, store URL, submitted-at), and the latest review status. Reads the project's public registry (registry.extension.land: stores/health.json, stores/status.json, stores/submissions.json) - read-only, dispatches nothing, no auth needed for public projects. Defaults to the logged-in project (extension_login); pass workspace + project to inspect another public project. Registry state can lag the store dashboards by up to a polling interval.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            workspace: {
+                type: "string",
+                description: "Workspace slug override (defaults to the stored login's workspace)."
+            },
+            project: {
+                type: "string",
+                description: "Project slug override (defaults to the stored login's project)."
+            }
+        },
+        required: []
+    }
+};
+function isPlainObject(value) {
+    return Boolean(value) && "object" == typeof value && !Array.isArray(value);
+}
+function str(value) {
+    const text = String(value ?? "").trim();
+    return text || void 0;
+}
+function submissionView(row) {
+    const view = {};
+    const version = str(row.version);
+    const status = str(row.status);
+    const storeUrl = str(row.storeUrl);
+    const submittedAt = str(row.submittedAt) || str(row.timestamp);
+    const channel = str(row.channel);
+    const buildSha = str(row.buildSha) || str(row.buildId);
+    const storeSubmissionId = str(row.storeSubmissionId);
+    const failureReason = str(row.failureReason);
+    if (version) view.version = version;
+    if (status) view.status = status;
+    if (storeUrl) view.storeUrl = storeUrl;
+    if (submittedAt) view.submittedAt = submittedAt;
+    if (channel) view.channel = channel;
+    if (buildSha) view.buildSha = buildSha;
+    if (storeSubmissionId) view.storeSubmissionId = storeSubmissionId;
+    if (failureReason) view.failureReason = failureReason;
+    return view;
+}
+function latestSubmissionsByStore(json) {
+    const list = json?.submissions;
+    const out = {};
+    for (const raw of Array.isArray(list) ? list : []){
+        if (!isPlainObject(raw)) continue;
+        const store = str(raw.store);
+        if (!store) continue;
+        const at = Date.parse(String(raw.submittedAt || raw.updatedAt || ""));
+        const stamp = Number.isFinite(at) ? at : 0;
+        if (!out[store] || stamp >= out[store].at) out[store] = {
+            at: stamp,
+            view: submissionView(raw)
+        };
+    }
+    const flat = {};
+    for (const [store, entry] of Object.entries(out))flat[store] = entry.view;
+    return flat;
+}
+function normalizeStoresStatus(json) {
+    const base = isPlainObject(json) ? json : {};
+    const out = {
+        reviews: {}
+    };
+    if (isPlainObject(base.lastSubmission)) out.lastSubmission = base.lastSubmission;
+    if (isPlainObject(base.lastOverride)) out.lastOverride = base.lastOverride;
+    if (isPlainObject(base.reviews)) {
+        for (const [store, raw] of Object.entries(base.reviews))if (isPlainObject(raw)) out.reviews[store] = {
+            status: str(raw.status),
+            version: str(raw.version),
+            buildId: str(raw.buildId),
+            checkedAt: str(raw.checkedAt)
+        };
+    }
+    const lastPoll = isPlainObject(base.lastPoll) ? base.lastPoll : null;
+    const looksLikeLegacyPoll = !lastPoll && ("store_status" === base.kind || Array.isArray(base.updates));
+    if (lastPoll) out.lastPollAt = str(lastPoll.timestamp);
+    else if (looksLikeLegacyPoll) {
+        out.lastPollAt = str(base.updatedAt);
+        for (const raw of Array.isArray(base.updates) ? base.updates : []){
+            if (!isPlainObject(raw)) continue;
+            const store = str(raw.store);
+            if (store && !out.reviews[store]) out.reviews[store] = {
+                status: str(raw.status),
+                version: str(raw.version),
+                buildId: str(raw.buildId),
+                checkedAt: str(base.updatedAt)
+            };
+        }
+    }
+    return out;
+}
+function store_status_fail(name, message, extra) {
+    return JSON.stringify({
+        ok: false,
+        error: {
+            name,
+            message
+        },
+        ...extra ?? {}
+    });
+}
+async function store_status_handler(args) {
+    const ref = resolveProjectRef(args);
+    if (!ref) return store_status_fail("StoreStatusInputError", "No project to inspect. Run extension_login (the stored login names the project), or pass workspace + project explicitly.");
+    const healthUrl = registryFileUrl(ref, "stores/health.json");
+    const statusUrl = registryFileUrl(ref, "stores/status.json");
+    const submissionsUrl = registryFileUrl(ref, "stores/submissions.json");
+    const consoleStoresUrl = consoleProjectUrl(ref, "stores");
+    const [healthRes, statusRes, submissionsRes] = await Promise.all([
+        fetchRegistryJson(healthUrl),
+        fetchRegistryJson(statusUrl),
+        fetchRegistryJson(submissionsUrl)
+    ]);
+    if (!healthRes.ok && !statusRes.ok && !submissionsRes.ok) return store_status_fail("StoreStatusNotFound", `No store data on the registry for ${ref.workspace}/${ref.project} (${healthUrl} returned ${healthRes.status ?? "no response"}). The project may have no stores configured yet, be private (private registry data needs a share token), or the workspace/project slugs may be wrong. Configure stores at ${consoleStoresUrl}/new; the console Stores page is the authoritative view: ${consoleStoresUrl}`, {
+        workspace: ref.workspace,
+        project: ref.project,
+        registryUrls: {
+            health: healthUrl,
+            status: statusUrl,
+            submissions: submissionsUrl
+        },
+        consoleStoresUrl
+    });
+    const healthStores = healthRes.ok ? isPlainObject(healthRes.json?.stores) ? healthRes.json.stores ?? null : null : null;
+    const status = normalizeStoresStatus(statusRes.ok ? statusRes.json : null);
+    const submissionsByStore = submissionsRes.ok ? latestSubmissionsByStore(submissionsRes.json) : {};
+    const statusLastStore = str(status.lastSubmission?.store);
+    if (statusLastStore && !submissionsByStore[statusLastStore] && status.lastSubmission) submissionsByStore[statusLastStore] = submissionView(status.lastSubmission);
+    const stores = [
+        ...KNOWN_STORES,
+        ...Object.keys({
+            ...healthStores,
+            ...submissionsByStore,
+            ...status.reviews
+        }).filter((s)=>!KNOWN_STORES.includes(s))
+    ];
+    const rows = stores.map((store)=>{
+        const healthRow = healthStores?.[store];
+        const configured = healthStores ? Boolean(healthRow) : "unknown";
+        const row = {
+            store,
+            configured
+        };
+        if (healthRow) row.health = {
+            ok: true === healthRow.ok,
+            checkedAt: str(healthRow.checkedAt),
+            message: str(healthRow.message)
+        };
+        const submission = submissionsByStore[store];
+        if (submission && Object.keys(submission).length > 0) row.lastSubmission = submission;
+        const review = status.reviews[store];
+        if (review && Object.values(review).some(Boolean)) row.review = review;
+        return row;
+    });
+    const summaryParts = rows.map((row)=>{
+        const store = String(row.store);
+        const health = row.health;
+        const submission = row.lastSubmission;
+        const review = row.review;
+        let head;
+        head = "unknown" === row.configured ? `${store}: configuration unknown (stores/health.json is unreadable)` : false === row.configured ? `${store}: not configured (add it at ${consoleStoresUrl}/new)` : health && !health.ok ? `${store}: configured but its credentials FAILED the last health check (${health.message || "no reason recorded"}) - fix them at ${consoleStoresUrl}/${store}` : `${store}: configured, credentials healthy`;
+        const tail = [];
+        if (submission) {
+            tail.push(`last submission${submission.version ? ` v${submission.version}` : ""} ${submission.status || "recorded"}${submission.submittedAt ? ` at ${submission.submittedAt}` : ""}${submission.failureReason ? ` (${submission.failureReason})` : ""}`);
+            if (submission.storeUrl) tail.push(`listing ${submission.storeUrl}`);
+        } else if (true === row.configured) tail.push("no submissions recorded");
+        if (review?.status) tail.push(`review ${review.status}${review.checkedAt ? ` (checked ${review.checkedAt})` : ""}`);
+        return tail.length > 0 ? `${head}; ${tail.join("; ")}` : head;
+    });
+    const result = {
+        ok: true,
+        workspace: ref.workspace,
+        project: ref.project,
+        stores: rows,
+        ...status.lastSubmission ? {
+            lastSubmission: status.lastSubmission
+        } : {},
+        ...status.lastPollAt ? {
+            lastPollAt: status.lastPollAt
+        } : {},
+        registryUrls: {
+            health: healthUrl,
+            status: statusUrl,
+            submissions: submissionsUrl
+        },
+        consoleStoresUrl,
+        message: `${summaryParts.join(". ")}. This is the registry's recorded state (submissions and the review poller write it); the store dashboards are authoritative and may be ahead of it.`
+    };
+    if (!healthRes.ok) result.healthUnavailable = `stores/health.json unreadable: ${healthRes.message}`;
+    if (!statusRes.ok) result.statusUnavailable = `stores/status.json unreadable: ${statusRes.message}`;
+    if (!submissionsRes.ok && 404 !== submissionsRes.status) result.submissionsUnavailable = `stores/submissions.json unreadable: ${submissionsRes.message}`;
+    return JSON.stringify(result);
+}
 function doctor_readReadyContract(projectPath, browser) {
     try {
         const raw = node_fs.readFileSync(node_path.resolve(projectPath, "dist", "extension-js", browser, "ready.json"), "utf8");
@@ -6187,7 +6407,7 @@ async function pollDeviceToken(args) {
 }
 const login_schema = {
     name: "extension_login",
-    description: "Authenticate to extension.dev and store a project-scoped access token locally so extension_publish can use it. Two-phase: call with `project` to get a code + URL for the user to authorize, then call again with the returned `deviceCode` to finish. The server picks the flow: the extension.dev-gated device flow (you authorize at extension.dev/device; GitHub federation happens server-side, no GitHub token on this machine) or, as a fallback, the legacy GitHub device flow. Never returns the token. This is the only tool besides extension_publish that talks to the hosted platform.",
+    description: "Authenticate to extension.dev and store a project-scoped access token locally so extension_publish can use it. Two-phase: call with `project` to get a code + URL for the user to authorize, then call again with the returned `deviceCode` to finish. The server picks the flow: the extension.dev-gated device flow (you authorize at extension.dev/device; GitHub federation happens server-side, no GitHub token on this machine) or, as a fallback, the legacy GitHub device flow. Never returns the token. Minted tokens live at most 7 days (server-enforced), so CI pipelines must re-mint before expiry on the console's Access tokens page (project settings -> Access tokens). This is the only tool besides extension_publish that talks to the hosted platform.",
     inputSchema: {
         type: "object",
         properties: {
@@ -6221,13 +6441,15 @@ function login_fail(name, message) {
     });
 }
 function success(creds) {
+    const expiresAt = creds.expiresAt ? new Date(1000 * creds.expiresAt).toISOString() : null;
     return JSON.stringify({
         ok: true,
         status: "logged-in",
         workspaceSlug: creds.workspaceSlug,
         projectSlug: creds.projectSlug,
-        expiresAt: creds.expiresAt ? new Date(1000 * creds.expiresAt).toISOString() : null,
-        message: `Logged in to ${creds.workspaceSlug}/${creds.projectSlug}. extension_publish can now use the stored token.`
+        expiresAt,
+        tokenTtlNote: tokenTtlNote(creds.workspaceSlug, creds.projectSlug),
+        message: `Logged in to ${creds.workspaceSlug}/${creds.projectSlug}. extension_publish can now use the stored token. The token expires ${expiresAt ?? "within 7 days"}: extension.dev CLI tokens live at most 7 days, so CI must re-mint before then (console: project settings -> Access tokens).`
     });
 }
 function login_pending(start) {
@@ -6243,6 +6465,7 @@ function login_pending(start) {
             verificationUriComplete: complete
         } : {},
         deviceCode: start.deviceCode,
+        tokenTtlNote: "Once authorized, the minted token lives at most 7 days (server-enforced); CI must re-mint before expiry (console: project settings -> Access tokens).",
         message
     });
 }
@@ -6252,6 +6475,7 @@ function resumePending(deviceCode, verificationUri) {
         status: "authorization_pending",
         verificationUri,
         deviceCode,
+        tokenTtlNote: "Once authorized, the minted token lives at most 7 days (server-enforced); CI must re-mint before expiry (console: project settings -> Access tokens).",
         message: `Still waiting for authorization. The one-click link and code from the previous response are still valid: open that link (or enter the code at ${verificationUri}), then call extension_login again with this same deviceCode (and the same project).`
     });
 }
@@ -6361,7 +6585,7 @@ async function login_handler(args) {
 }
 const whoami_schema = {
     name: "extension_whoami",
-    description: "Report the identity carried by the locally stored extension.dev token that extension_login minted (workspace/project scoped), plus its expiry, without revealing the token. The identity comes from that stored token alone; it does not change with the current working directory or whichever project folder you are in. Returns logged-out status when no credentials are stored.",
+    description: "Report the identity carried by the locally stored extension.dev token that extension_login minted (workspace/project scoped), plus its expiry, without revealing the token. The identity comes from that stored token alone; it does not change with the current working directory or whichever project folder you are in. The result records where the login was minted (apiRecordedAtLogin) without asserting a platform base URL: authenticated tools target their own api argument, EXTENSION_DEV_API_URL, or the production default. Returns logged-out status when no credentials are stored.",
     inputSchema: {
         type: "object",
         properties: {}
@@ -6376,17 +6600,32 @@ async function whoami_handler() {
     });
     const now = Math.floor(Date.now() / 1000);
     const expired = Boolean(creds.expiresAt && creds.expiresAt <= now);
+    const recordedApi = String(creds.api || "").trim();
+    const effectiveDefaultApi = resolveApiBase();
+    const apiDiverges = Boolean(recordedApi) && recordedApi !== effectiveDefaultApi;
+    const envTokenSet = Boolean(String(process.env.EXTENSION_DEV_TOKEN || "").trim());
+    const messageParts = [];
+    messageParts.push(expired ? "The stored token has expired. Run extension_login to refresh it." : `Logged in as ${creds.workspaceSlug}/${creds.projectSlug}, per the token extension_login stored on this machine. That token is what scopes the identity: it does not follow the current working directory or project folder.`);
+    if (apiDiverges) messageParts.push(`This login was minted via ${recordedApi}, but authenticated tools do not read that recorded value: they target ${effectiveDefaultApi} unless given an api argument.`);
+    if (envTokenSet) messageParts.push("EXTENSION_DEV_TOKEN is set and takes precedence over this stored login for authenticated tools; this report describes only the stored login.");
     return JSON.stringify({
         ok: true,
         status: expired ? "expired" : "logged-in",
         workspaceSlug: creds.workspaceSlug,
         projectSlug: creds.projectSlug,
-        api: creds.api,
+        ...recordedApi ? {
+            apiRecordedAtLogin: recordedApi
+        } : {},
+        apiDefault: effectiveDefaultApi,
         provider: creds.provider ?? "github",
         expiresAt: creds.expiresAt ? new Date(1000 * creds.expiresAt).toISOString() : null,
         expiresInSeconds: creds.expiresAt ? creds.expiresAt - now : null,
         expired,
-        message: expired ? "The stored token has expired. Run extension_login to refresh it." : `Logged in as ${creds.workspaceSlug}/${creds.projectSlug}, per the token extension_login stored on this machine. That token is what scopes the identity: it does not follow the current working directory or project folder.`
+        ...envTokenSet ? {
+            envTokenOverride: true
+        } : {},
+        tokenTtlNote: tokenTtlNote(creds.workspaceSlug, creds.projectSlug),
+        message: messageParts.join(" ")
     });
 }
 const logout_schema = {
@@ -7073,6 +7312,7 @@ const tools = [
     release_list_namespaceObject,
     release_promote_namespaceObject,
     deploy_namespaceObject,
+    store_status_namespaceObject,
     wait_namespaceObject,
     add_feature_namespaceObject,
     login_namespaceObject,

package/dist/src/lib/login-flow.d.ts

@@ -1,4 +1,12 @@
 import { type StoredCredentials } from "./credentials";
+/**
+ * The platform clamps CLI token TTL to at most 7 days (server-owned; this
+ * client only states the truth). Every token surface repeats it so CI authors
+ * learn the rotation contract up front instead of from a 401 a week after
+ * wiring the pipeline. Links the console's Access tokens page when the
+ * project is known.
+ */
+export declare function tokenTtlNote(workspaceSlug?: string, projectSlug?: string): string;
 type FetchImpl = typeof fetch;
 export declare function resolveApiBase(api?: string): string;
 /**

package/dist/src/tools/store-status.d.ts

@@ -0,0 +1,56 @@
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            workspace: {
+                type: string;
+                description: string;
+            };
+            project: {
+                type: string;
+                description: string;
+            };
+        };
+        required: never[];
+    };
+};
+interface SubmissionView {
+    version?: string;
+    status?: string;
+    storeUrl?: string;
+    submittedAt?: string;
+    channel?: string;
+    buildSha?: string;
+    storeSubmissionId?: string;
+    failureReason?: string;
+}
+interface ReviewView {
+    status?: string;
+    version?: string;
+    buildId?: string;
+    checkedAt?: string;
+}
+/** Latest submissions.json record per store, newest submittedAt first. */
+export declare function latestSubmissionsByStore(json: unknown): Record<string, SubmissionView>;
+export interface NormalizedStoresStatus {
+    lastSubmission?: Record<string, unknown>;
+    lastOverride?: Record<string, unknown>;
+    reviews: Record<string, ReviewView>;
+    lastPollAt?: string;
+}
+/**
+ * Accept any historical shape of stores/status.json. SchemaVersion 3 carries
+ * lastSubmission / lastOverride / lastPoll / reviews as sections. Legacy v2
+ * came in two flavors that used to clobber each other: the submit-path shape
+ * (kind "stores_status", lastSubmission only) and the poller shape (kind
+ * "store_status" with perStore/updates at the top level) whose updates seed
+ * the reviews map here, mirroring the registry template's normalizer.
+ */
+export declare function normalizeStoresStatus(json: unknown): NormalizedStoresStatus;
+export declare function handler(args: {
+    workspace?: string;
+    project?: string;
+}): Promise<string>;
+export {};

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@extension.dev/mcp",
   "type": "module",
-  "version": "5.5.0",
-  "description": "MCP server that lets AI agents (Claude Code, Claude Desktop, Cursor, Copilot, Codex) build, run, inspect, and publish browser extensions. 32 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, Firefox, Safari, and every Chromium- or Gecko-based browser (Brave, Opera, Vivaldi, Yandex, Waterfox, LibreWolf). Powered by extension.dev and Extension.js.",
+  "version": "5.5.1",
+  "description": "MCP server that lets AI agents (Claude Code, Claude Desktop, Cursor, Copilot, Codex) build, run, inspect, and publish browser extensions. 33 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, Firefox, Safari, and every Chromium- or Gecko-based browser (Brave, Opera, Vivaldi, Yandex, Waterfox, LibreWolf). Powered by extension.dev and Extension.js.",
   "mcpName": "io.github.extensiondev/mcp",
   "license": "MIT",
   "author": {
     "name": "Cezar Augusto",
-    "email": "boss@cezaraugusto.net",
+    "email": "hello@extension.dev",
     "url": "https://cezaraugusto.com"
   },
   "repository": {

package/server.json

@@ -1,19 +1,19 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
   "name": "io.github.extensiondev/mcp",
-  "description": "Build, run, inspect, and publish browser extensions from any MCP client. 32 tools, 11 browsers.",
+  "description": "Build, run, inspect, and publish browser extensions from any MCP client. 33 tools, 11 browsers.",
   "repository": {
     "url": "https://github.com/extensiondev/mcp",
     "source": "github"
   },
   "websiteUrl": "https://extension.dev",
-  "version": "5.5.0",
+  "version": "5.5.1",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@extension.dev/mcp",
-      "version": "5.5.0",
+      "version": "5.5.1",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"