@extension.dev/mcp 6.1.0 → 6.3.0

package/dist/module.js

@@ -16,6 +16,394 @@ import node_http from "node:http";
 import node_net from "node:net";
 import { extensionInstall, extensionUninstall, getManagedBrowsersCacheRoot } from "extension-install";
 import { promisify } from "node:util";
+__webpack_require__.add({
+    "./node_modules/.pnpm/@extension.dev+urls@0.3.0/node_modules/@extension.dev/urls/dist/origins.cjs" (__unused_rspack_module, exports) {
+        var __nested_rspack_require_18_37__ = {};
+        (()=>{
+            __nested_rspack_require_18_37__.d = (exports1, definition)=>{
+                for(var key in definition)if (__nested_rspack_require_18_37__.o(definition, key) && !__nested_rspack_require_18_37__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                    enumerable: true,
+                    get: definition[key]
+                });
+            };
+        })();
+        (()=>{
+            __nested_rspack_require_18_37__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+        })();
+        (()=>{
+            __nested_rspack_require_18_37__.r = (exports1)=>{
+                if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+                    value: 'Module'
+                });
+                Object.defineProperty(exports1, '__esModule', {
+                    value: true
+                });
+            };
+        })();
+        var __nested_rspack_exports__ = {};
+        __nested_rspack_require_18_37__.r(__nested_rspack_exports__);
+        __nested_rspack_require_18_37__.d(__nested_rspack_exports__, {
+            DEV_LOCALHOST_ORIGINS: ()=>DEV_LOCALHOST_ORIGINS,
+            PROD_ORIGINS: ()=>PROD_ORIGINS,
+            isLocalOrigin: ()=>isLocalOrigin,
+            resolveOrigins: ()=>resolveOrigins
+        });
+        const PROD_ORIGINS = {
+            www: "https://www.extension.dev",
+            console: "https://console.extension.dev",
+            inspect: "https://inspect.extension.dev",
+            preview: "https://preview.extension.dev",
+            templates: "https://templates.extension.dev",
+            intelligence: "https://intelligence.extension.dev",
+            userland: "https://extension.dev",
+            registry: "https://registry.extension.land",
+            media: "https://media.extension.land"
+        };
+        const DEV_LOCALHOST_ORIGINS = {
+            www: "http://localhost:3100",
+            console: "http://console.extension.localhost",
+            inspect: "http://inspect.extension.localhost",
+            preview: "http://preview.extension.localhost",
+            templates: "http://templates.extension.localhost",
+            intelligence: "http://intelligence.extension.localhost",
+            userland: "http://userland.extension.localhost",
+            registry: "https://registry.extension.land",
+            media: "https://media.extension.land"
+        };
+        function strip(value) {
+            return String(value ?? "").trim().replace(/\/+$/, "");
+        }
+        function isLocalOrigin(url) {
+            const raw = strip(url);
+            if (!raw) return false;
+            let host;
+            try {
+                host = new URL(raw).hostname;
+            } catch  {
+                return false;
+            }
+            return "localhost" === host || "127.0.0.1" === host || "::1" === host || "[::1]" === host || "extension.localhost" === host || host.endsWith(".extension.localhost");
+        }
+        function resolveOrigins(overrides = {}, opts = {}) {
+            const devLike = isLocalOrigin(overrides.www) || isLocalOrigin(overrides.console) || isLocalOrigin(opts.hint);
+            const base = devLike ? DEV_LOCALHOST_ORIGINS : PROD_ORIGINS;
+            const pick = (key)=>strip(overrides[key]) || base[key];
+            return {
+                www: pick("www"),
+                console: pick("console"),
+                inspect: pick("inspect"),
+                preview: pick("preview"),
+                templates: pick("templates"),
+                intelligence: pick("intelligence"),
+                userland: pick("userland"),
+                registry: pick("registry"),
+                media: pick("media")
+            };
+        }
+        exports.DEV_LOCALHOST_ORIGINS = __nested_rspack_exports__.DEV_LOCALHOST_ORIGINS;
+        exports.PROD_ORIGINS = __nested_rspack_exports__.PROD_ORIGINS;
+        exports.isLocalOrigin = __nested_rspack_exports__.isLocalOrigin;
+        exports.resolveOrigins = __nested_rspack_exports__.resolveOrigins;
+        for(var __webpack_i__ in __nested_rspack_exports__)if (-1 === [
+            "DEV_LOCALHOST_ORIGINS",
+            "PROD_ORIGINS",
+            "isLocalOrigin",
+            "resolveOrigins"
+        ].indexOf(__webpack_i__)) exports[__webpack_i__] = __nested_rspack_exports__[__webpack_i__];
+        Object.defineProperty(exports, "__esModule", {
+            value: true
+        });
+    },
+    "./node_modules/.pnpm/@extension.dev+urls@0.3.0/node_modules/@extension.dev/urls/dist/paths.cjs" (__unused_rspack_module, exports) {
+        var __nested_rspack_require_18_37__ = {};
+        (()=>{
+            __nested_rspack_require_18_37__.d = (exports1, definition)=>{
+                for(var key in definition)if (__nested_rspack_require_18_37__.o(definition, key) && !__nested_rspack_require_18_37__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                    enumerable: true,
+                    get: definition[key]
+                });
+            };
+        })();
+        (()=>{
+            __nested_rspack_require_18_37__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+        })();
+        (()=>{
+            __nested_rspack_require_18_37__.r = (exports1)=>{
+                if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+                    value: 'Module'
+                });
+                Object.defineProperty(exports1, '__esModule', {
+                    value: true
+                });
+            };
+        })();
+        var __nested_rspack_exports__ = {};
+        __nested_rspack_require_18_37__.r(__nested_rspack_exports__);
+        __nested_rspack_require_18_37__.d(__nested_rspack_exports__, {
+            ConsoleProjectPage: ()=>ConsoleProjectPage,
+            consoleProjectPath: ()=>consoleProjectPath,
+            consoleWorkspacePath: ()=>consoleWorkspacePath,
+            inspectTabPath: ()=>inspectTabPath,
+            previewSharePath: ()=>previewSharePath,
+            templateTabPath: ()=>templateTabPath,
+            withQuery: ()=>withQuery,
+            wwwDevicePath: ()=>wwwDevicePath,
+            wwwImportPath: ()=>wwwImportPath,
+            wwwNewPath: ()=>wwwNewPath,
+            wwwTemplatesPath: ()=>wwwTemplatesPath
+        });
+        const seg = (value)=>encodeURIComponent(String(value));
+        function join(base, sub) {
+            if (!sub) return base;
+            return `${base}/${sub.replace(/^\/+/, "")}`;
+        }
+        function consoleWorkspacePath(workspace, page = "") {
+            return join(`/${seg(workspace)}`, page);
+        }
+        function consoleProjectPath(ref, page = "") {
+            return join(`/${seg(ref.workspace)}/${seg(ref.project)}`, page);
+        }
+        const ConsoleProjectPage = {
+            overview: "",
+            onboard: "onboard",
+            activity: "activity",
+            builds: "builds",
+            build: (buildId, browser)=>browser ? `builds/${seg(buildId)}/${seg(browser)}` : `builds/${seg(buildId)}`,
+            releases: "releases",
+            releasesNew: "releases/new",
+            release: (releaseId)=>`releases/${seg(releaseId)}`,
+            stores: "stores",
+            storesNew: "stores/new",
+            store: (store)=>`stores/${seg(store)}`,
+            storeSubmissions: (store)=>`stores/${seg(store)}/submissions`,
+            storeSubmissionNew: (store)=>`stores/${seg(store)}/submissions/new`,
+            storeSubmission: (store, submissionId)=>`stores/${seg(store)}/submissions/${seg(submissionId)}`,
+            projectSettings: "project-settings",
+            projectSettingsSection: (section)=>`project-settings/${seg(section)}`,
+            accessTokens: "settings/access-tokens"
+        };
+        function withQuery(path, query) {
+            if (!query) return path;
+            const params = new URLSearchParams();
+            for (const [key, value] of Object.entries(query))if (null != value && "" !== value) params.set(key, String(value));
+            const qs = params.toString();
+            return qs ? `${path}?${qs}` : path;
+        }
+        function wwwNewPath(query) {
+            return withQuery("/new", query);
+        }
+        function wwwImportPath(query) {
+            return withQuery("/import", query);
+        }
+        function wwwDevicePath() {
+            return "/device";
+        }
+        function wwwTemplatesPath(slug) {
+            return slug ? `/templates/${seg(slug)}` : "/templates";
+        }
+        function templateTabPath(slug, tab = "preview") {
+            return "preview" === tab ? `/${seg(slug)}` : `/${seg(slug)}/${tab}`;
+        }
+        function inspectTabPath(tab = "preview") {
+            return "preview" === tab ? "/" : `/${tab}`;
+        }
+        function previewSharePath(previewId) {
+            return `/?preview=${seg(previewId)}`;
+        }
+        exports.ConsoleProjectPage = __nested_rspack_exports__.ConsoleProjectPage;
+        exports.consoleProjectPath = __nested_rspack_exports__.consoleProjectPath;
+        exports.consoleWorkspacePath = __nested_rspack_exports__.consoleWorkspacePath;
+        exports.inspectTabPath = __nested_rspack_exports__.inspectTabPath;
+        exports.previewSharePath = __nested_rspack_exports__.previewSharePath;
+        exports.templateTabPath = __nested_rspack_exports__.templateTabPath;
+        exports.withQuery = __nested_rspack_exports__.withQuery;
+        exports.wwwDevicePath = __nested_rspack_exports__.wwwDevicePath;
+        exports.wwwImportPath = __nested_rspack_exports__.wwwImportPath;
+        exports.wwwNewPath = __nested_rspack_exports__.wwwNewPath;
+        exports.wwwTemplatesPath = __nested_rspack_exports__.wwwTemplatesPath;
+        for(var __webpack_i__ in __nested_rspack_exports__)if (-1 === [
+            "ConsoleProjectPage",
+            "consoleProjectPath",
+            "consoleWorkspacePath",
+            "inspectTabPath",
+            "previewSharePath",
+            "templateTabPath",
+            "withQuery",
+            "wwwDevicePath",
+            "wwwImportPath",
+            "wwwNewPath",
+            "wwwTemplatesPath"
+        ].indexOf(__webpack_i__)) exports[__webpack_i__] = __nested_rspack_exports__[__webpack_i__];
+        Object.defineProperty(exports, "__esModule", {
+            value: true
+        });
+    },
+    "./node_modules/.pnpm/@extension.dev+urls@0.3.0/node_modules/@extension.dev/urls/dist/userland.cjs" (__unused_rspack_module, exports) {
+        var __nested_rspack_require_18_37__ = {};
+        (()=>{
+            __nested_rspack_require_18_37__.d = (exports1, definition)=>{
+                for(var key in definition)if (__nested_rspack_require_18_37__.o(definition, key) && !__nested_rspack_require_18_37__.o(exports1, key)) Object.defineProperty(exports1, key, {
+                    enumerable: true,
+                    get: definition[key]
+                });
+            };
+        })();
+        (()=>{
+            __nested_rspack_require_18_37__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+        })();
+        (()=>{
+            __nested_rspack_require_18_37__.r = (exports1)=>{
+                if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+                    value: 'Module'
+                });
+                Object.defineProperty(exports1, '__esModule', {
+                    value: true
+                });
+            };
+        })();
+        var __nested_rspack_exports__ = {};
+        __nested_rspack_require_18_37__.r(__nested_rspack_exports__);
+        __nested_rspack_require_18_37__.d(__nested_rspack_exports__, {
+            userlandBuildUrl: ()=>userlandBuildUrl,
+            USERLAND_BUILD_TABS: ()=>USERLAND_BUILD_TABS,
+            userlandUrl: ()=>userlandUrl,
+            UserlandProjectPage: ()=>UserlandProjectPage,
+            UserlandDialog: ()=>UserlandDialog,
+            userlandChannelUrl: ()=>userlandChannelUrl,
+            userlandProjectPath: ()=>userlandProjectPath,
+            isUserlandBuildTab: ()=>isUserlandBuildTab,
+            userlandDialogUrl: ()=>userlandDialogUrl,
+            userlandHostMode: ()=>userlandHostMode,
+            userlandOrigin: ()=>userlandOrigin
+        });
+        const PROD_ORIGINS = {
+            www: "https://www.extension.dev",
+            console: "https://console.extension.dev",
+            inspect: "https://inspect.extension.dev",
+            preview: "https://preview.extension.dev",
+            templates: "https://templates.extension.dev",
+            intelligence: "https://intelligence.extension.dev",
+            userland: "https://extension.dev",
+            registry: "https://registry.extension.land",
+            media: "https://media.extension.land"
+        };
+        function strip(value) {
+            return String(value ?? "").trim().replace(/\/+$/, "");
+        }
+        function isLocalOrigin(url) {
+            const raw = strip(url);
+            if (!raw) return false;
+            let host;
+            try {
+                host = new URL(raw).hostname;
+            } catch  {
+                return false;
+            }
+            return "localhost" === host || "127.0.0.1" === host || "::1" === host || "[::1]" === host || "extension.localhost" === host || host.endsWith(".extension.localhost");
+        }
+        function withQuery(path, query) {
+            if (!query) return path;
+            const params = new URLSearchParams();
+            for (const [key, value] of Object.entries(query))if (null != value && "" !== value) params.set(key, String(value));
+            const qs = params.toString();
+            return qs ? `${path}?${qs}` : path;
+        }
+        const userland_seg = (value)=>encodeURIComponent(String(value));
+        const USERLAND_BUILD_TABS = [
+            "preview",
+            "whats-new",
+            "usage"
+        ];
+        function isUserlandBuildTab(value) {
+            return USERLAND_BUILD_TABS.includes(value);
+        }
+        const UserlandDialog = {
+            run: "run",
+            integrity: "integrity"
+        };
+        const DNS_LABEL = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i;
+        function userland_strip(value) {
+            return String(value ?? "").trim().replace(/\/+$/, "");
+        }
+        function userlandHostMode(base) {
+            return isLocalOrigin(userland_strip(base) || PROD_ORIGINS.userland) ? "path" : "subdomain";
+        }
+        function userlandOrigin(workspace, options = {}) {
+            const base = userland_strip(options.base) || PROD_ORIGINS.userland;
+            if ("path" === userlandHostMode(base)) return base;
+            const slug = String(workspace ?? "").trim().toLowerCase();
+            if (!DNS_LABEL.test(slug)) throw new Error(`Workspace slug ${JSON.stringify(workspace)} cannot be a subdomain label; userland production hosts are <workspace>.extension.dev.`);
+            const url = new URL(base);
+            url.hostname = `${slug}.${url.hostname}`;
+            return userland_strip(url.toString());
+        }
+        const UserlandProjectPage = {
+            overview: "",
+            build: (buildId)=>`builds/${userland_seg(buildId)}`,
+            buildTab: (buildId, tab = "preview")=>"preview" === tab ? `builds/${userland_seg(buildId)}` : `builds/${userland_seg(buildId)}/${tab}`,
+            browserBuild: (buildId, browser)=>`builds/${userland_seg(buildId)}/${userland_seg(browser)}`,
+            channel: (channel)=>`channels/${userland_seg(channel)}`,
+            channelShortcut: (channel)=>userland_seg(channel),
+            channelBrowser: (browser, channel)=>`channels/${userland_seg(browser)}/${userland_seg(channel)}`,
+            version: (version)=>`versions/${userland_seg(version)}`,
+            versionBrowser: (browser, version)=>`versions/${userland_seg(browser)}/${userland_seg(version)}`
+        };
+        function userlandProjectPath(ref, page = "", options = {}) {
+            const head = "subdomain" === userlandHostMode(options.base) ? `/${userland_seg(ref.project)}` : `/${userland_seg(ref.workspace)}/${userland_seg(ref.project)}`;
+            const tail = String(page ?? "").replace(/^\/+/, "");
+            return tail ? `${head}/${tail}` : head;
+        }
+        function userlandUrl(ref, page = "", options = {}) {
+            const origin = userlandOrigin(ref.workspace, options);
+            const path = userlandProjectPath(ref, page, options);
+            return `${origin}${withQuery(path, options.query)}`;
+        }
+        function userlandBuildUrl(ref, buildId, options = {}) {
+            const page = options.browser ? UserlandProjectPage.browserBuild(buildId, options.browser) : UserlandProjectPage.build(buildId);
+            return userlandUrl(ref, page, options);
+        }
+        function userlandDialogUrl(ref, buildId, browser, dialog, options = {}) {
+            return userlandUrl(ref, UserlandProjectPage.browserBuild(buildId, browser), {
+                ...options,
+                query: {
+                    ...options.query ?? {},
+                    dialog
+                }
+            });
+        }
+        function userlandChannelUrl(ref, channel, options = {}) {
+            const page = options.browser ? UserlandProjectPage.channelBrowser(options.browser, channel) : options.shortcut ? UserlandProjectPage.channelShortcut(channel) : UserlandProjectPage.channel(channel);
+            return userlandUrl(ref, page, options);
+        }
+        exports.USERLAND_BUILD_TABS = __nested_rspack_exports__.USERLAND_BUILD_TABS;
+        exports.UserlandDialog = __nested_rspack_exports__.UserlandDialog;
+        exports.UserlandProjectPage = __nested_rspack_exports__.UserlandProjectPage;
+        exports.isUserlandBuildTab = __nested_rspack_exports__.isUserlandBuildTab;
+        exports.userlandBuildUrl = __nested_rspack_exports__.userlandBuildUrl;
+        exports.userlandChannelUrl = __nested_rspack_exports__.userlandChannelUrl;
+        exports.userlandDialogUrl = __nested_rspack_exports__.userlandDialogUrl;
+        exports.userlandHostMode = __nested_rspack_exports__.userlandHostMode;
+        exports.userlandOrigin = __nested_rspack_exports__.userlandOrigin;
+        exports.userlandProjectPath = __nested_rspack_exports__.userlandProjectPath;
+        exports.userlandUrl = __nested_rspack_exports__.userlandUrl;
+        for(var __webpack_i__ in __nested_rspack_exports__)if (-1 === [
+            "USERLAND_BUILD_TABS",
+            "UserlandDialog",
+            "UserlandProjectPage",
+            "isUserlandBuildTab",
+            "userlandBuildUrl",
+            "userlandChannelUrl",
+            "userlandDialogUrl",
+            "userlandHostMode",
+            "userlandOrigin",
+            "userlandProjectPath",
+            "userlandUrl"
+        ].indexOf(__webpack_i__)) exports[__webpack_i__] = __nested_rspack_exports__[__webpack_i__];
+        Object.defineProperty(exports, "__esModule", {
+            value: true
+        });
+    }
+});
 var add_feature_namespaceObject = {};
 __webpack_require__.r(add_feature_namespaceObject);
 __webpack_require__.d(add_feature_namespaceObject, {
@@ -222,7 +610,7 @@ __webpack_require__.d(whoami_namespaceObject, {
     handler: ()=>whoami_handler,
     schema: ()=>whoami_schema
 });
-var package_namespaceObject = JSON.parse('{"rE":"6.0.0","El":{"OP":"4.0.16-canary.1784889479.74e12044"}}');
+var package_namespaceObject = JSON.parse('{"rE":"6.3.0","El":{"OP":"4.0.16-canary.1784889479.74e12044"}}');
 function credentialsPath() {
     if ("win32" === process.platform) {
         const base = process.env.APPDATA || process.env.LOCALAPPDATA || node_path.join(node_os.homedir(), "AppData", "Roaming");
@@ -295,77 +683,249 @@ function readValidCredentials(nowSeconds = Math.floor(Date.now() / 1000)) {
     if (creds.expiresAt && creds.expiresAt <= nowSeconds) return null;
     return creds;
 }
-const PROD_ORIGINS = {
-    www: "https://www.extension.dev",
-    console: "https://console.extension.dev",
-    inspect: "https://inspect.extension.dev",
-    templates: "https://templates.extension.dev",
-    intelligence: "https://intelligence.extension.dev",
-    registry: "https://registry.extension.land",
-    media: "https://media.extension.land"
-};
-const DEV_LOCALHOST_ORIGINS = {
-    www: "http://localhost:3100",
-    console: "http://console.extension.localhost",
-    inspect: "http://inspect.extension.localhost",
-    templates: "http://templates.extension.localhost",
-    intelligence: "http://intelligence.extension.localhost",
-    registry: "https://registry.extension.land",
-    media: "https://media.extension.land"
-};
-function strip(value) {
-    return String(value ?? "").trim().replace(/\/+$/, "");
+const origins = __webpack_require__("./node_modules/.pnpm/@extension.dev+urls@0.3.0/node_modules/@extension.dev/urls/dist/origins.cjs");
+const DEFAULT_API = origins.PROD_ORIGINS.www;
+function tokenTtlNote(workspaceSlug, projectSlug) {
+    const tokensUrl = workspaceSlug && projectSlug ? consoleProjectUrl({
+        workspace: workspaceSlug,
+        project: projectSlug
+    }, "settings/access-tokens") : consoleBase();
+    return `extension.dev CLI tokens live at most 7 days (server-enforced). CI pipelines must re-mint before expiry on the console's Access tokens page: ${tokensUrl}`;
+}
+function resolveApiBase(api) {
+    return String(api || process.env.EXTENSION_DEV_API_URL || DEFAULT_API).replace(/\/+$/, "");
 }
-function isLocalOrigin(url) {
-    const raw = strip(url);
-    if (!raw) return false;
-    let host;
+function safeApiBase(raw) {
+    let parsed;
     try {
-        host = new URL(raw).hostname;
+        parsed = new URL(raw);
     } catch  {
-        return false;
+        return {
+            ok: false,
+            message: `Invalid platform URL: ${raw}`
+        };
     }
-    return "localhost" === host || "127.0.0.1" === host || "::1" === host || "[::1]" === host || "extension.localhost" === host || host.endsWith(".extension.localhost");
+    const isLocalhost = "localhost" === parsed.hostname || "127.0.0.1" === parsed.hostname || "[::1]" === parsed.hostname || "::1" === parsed.hostname;
+    if ("https:" !== parsed.protocol && !("http:" === parsed.protocol && isLocalhost)) return {
+        ok: false,
+        message: `Refusing to send the access token to ${raw}: use https (http is allowed only for localhost).`
+    };
+    return {
+        ok: true,
+        base: `${parsed.origin}${parsed.pathname}`.replace(/\/+$/, "")
+    };
 }
-function resolveOrigins(overrides = {}, opts = {}) {
-    const devLike = isLocalOrigin(overrides.www) || isLocalOrigin(overrides.console) || isLocalOrigin(opts.hint);
-    const base = devLike ? DEV_LOCALHOST_ORIGINS : PROD_ORIGINS;
-    const pick = (key)=>strip(overrides[key]) || base[key];
+async function fetchLoginConfig(apiBase, fetchImpl = fetch) {
+    const override = String(process.env.EXTENSION_DEV_GITHUB_CLIENT_ID || "").trim();
+    if (override) return {
+        provider: "github",
+        clientId: override,
+        scope: "read:user",
+        deviceCodeUrl: "/api/cli/device/code",
+        deviceTokenUrl: "/api/cli/device/token",
+        verificationUri: "https://github.com/login/device"
+    };
+    const res = await fetchImpl(`${apiBase}/api/cli/login/config`, {
+        headers: {
+            accept: "application/json"
+        }
+    });
+    if (!res.ok) throw new Error(`Could not fetch login config from ${apiBase} (${res.status}).`);
+    const data = await res.json().catch(()=>({}));
+    const provider = "extensiondev" === data.provider ? "extensiondev" : "github";
+    const clientId = String(data.githubClientId || "").trim();
+    if ("github" === provider && !clientId) throw new Error("Login is not configured on the server (no GitHub client id). Set EXTENSION_DEV_GITHUB_CLIENT_ID to override.");
     return {
-        www: pick("www"),
-        console: pick("console"),
-        inspect: pick("inspect"),
-        templates: pick("templates"),
-        intelligence: pick("intelligence"),
-        registry: pick("registry"),
-        media: pick("media")
+        provider,
+        clientId,
+        scope: String(data.scope || "read:user"),
+        deviceCodeUrl: String(data.deviceCodeUrl || "/api/cli/device/code"),
+        deviceTokenUrl: String(data.deviceTokenUrl || "/api/cli/device/token"),
+        verificationUri: String(data.verificationUri || "https://github.com/login/device")
     };
 }
-const seg = (value)=>encodeURIComponent(String(value));
-function urls_paths_join(base, sub) {
-    if (!sub) return base;
-    return `${base}/${sub.replace(/^\/+/, "")}`;
+function persistTokenResponse(args) {
+    const token = String(args.data.token || "").trim();
+    if (!token) throw new Error("Login returned no token.");
+    const creds = {
+        version: 1,
+        token,
+        workspaceSlug: String(args.data.workspaceSlug || ""),
+        projectSlug: String(args.data.projectSlug || ""),
+        expiresAt: Number(args.data.expiresAt || 0),
+        api: args.apiBase,
+        provider: args.provider
+    };
+    writeCredentials(creds);
+    return creds;
+}
+async function exchangeAndPersist(args) {
+    const doFetch = args.fetchImpl ?? fetch;
+    const res = await doFetch(`${args.apiBase}/api/cli/login/exchange`, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            accept: "application/json"
+        },
+        body: JSON.stringify({
+            githubToken: args.githubToken,
+            project: args.project
+        })
+    });
+    const text = await res.text();
+    let data;
+    try {
+        data = JSON.parse(text);
+    } catch  {
+        data = {
+            message: text
+        };
+    }
+    if (!res.ok) throw new Error(`Login exchange failed (${res.status}): ${data.message || "unknown error"}`);
+    return persistTokenResponse({
+        apiBase: args.apiBase,
+        data,
+        provider: "github"
+    });
 }
-function consoleProjectPath(ref, page = "") {
-    return urls_paths_join(`/${seg(ref.workspace)}/${seg(ref.project)}`, page);
+function _define_property(obj, key, value) {
+    if (key in obj) Object.defineProperty(obj, key, {
+        value: value,
+        enumerable: true,
+        configurable: true,
+        writable: true
+    });
+    else obj[key] = value;
+    return obj;
 }
-function withQuery(path, query) {
-    if (!query) return path;
-    const params = new URLSearchParams();
-    for (const [key, value] of Object.entries(query))if (null != value && "" !== value) params.set(key, String(value));
-    const qs = params.toString();
-    return qs ? `${path}?${qs}` : path;
+const REFRESH_LEAD_SECONDS = 60;
+function cacheKey(ref) {
+    return `${ref.workspace.toLowerCase()}/${ref.project.toLowerCase()}`;
+}
+class RegistryAccessTokens {
+    peek(ref) {
+        const entry = this.cache.get(cacheKey(ref));
+        if (!entry || "fresh" !== entry.kind) return "";
+        return entry.expiresAt - REFRESH_LEAD_SECONDS > this.nowSeconds() ? entry.token : "";
+    }
+    async get(ref, apiHint) {
+        const key = cacheKey(ref);
+        const entry = this.cache.get(key);
+        if (entry?.kind === "pending") return entry.promise;
+        const cached = this.peek(ref);
+        if (cached) return {
+            status: "ok",
+            token: cached,
+            expiresAt: this.cache.get(key).expiresAt
+        };
+        const promise = this.mint(ref, apiHint);
+        this.cache.set(key, {
+            kind: "pending",
+            promise
+        });
+        const result = await promise;
+        if ("ok" === result.status) this.cache.set(key, {
+            kind: "fresh",
+            token: result.token,
+            expiresAt: result.expiresAt
+        });
+        else this.cache.delete(key);
+        return result;
+    }
+    async mint(ref, apiHint) {
+        const creds = readCredentials();
+        const token = String(process.env.EXTENSION_DEV_TOKEN || creds?.token || "").trim();
+        if (!token) return {
+            status: "no-credential"
+        };
+        if (creds?.workspaceSlug && creds?.projectSlug && !process.env.EXTENSION_DEV_TOKEN) {
+            const same = creds.workspaceSlug.toLowerCase() === ref.workspace.toLowerCase() && creds.projectSlug.toLowerCase() === ref.project.toLowerCase();
+            if (!same) return {
+                status: "no-credential"
+            };
+        }
+        const check = safeApiBase(resolveApiBase(apiHint || creds?.api));
+        if (!check.ok) return {
+            status: "denied",
+            message: check.message
+        };
+        let res;
+        try {
+            res = await this.fetchImpl(`${check.base}/api/access-grant`, {
+                method: "POST",
+                headers: {
+                    authorization: `Bearer ${token}`,
+                    "content-type": "application/json"
+                },
+                body: JSON.stringify({
+                    workspaceSlug: ref.workspace,
+                    projectSlug: ref.project
+                })
+            });
+        } catch (err) {
+            return {
+                status: "denied",
+                message: `Could not reach the access-grant endpoint: ${err?.message || err}`
+            };
+        }
+        if (400 === res.status) return {
+            status: "public"
+        };
+        if (!res.ok) return {
+            status: "denied",
+            httpStatus: res.status,
+            message: `access-grant returned ${res.status}`
+        };
+        let data;
+        try {
+            data = JSON.parse(await res.text());
+        } catch  {
+            return {
+                status: "denied",
+                message: "access-grant did not return JSON"
+            };
+        }
+        const minted = String(data?.token || "").trim();
+        if (!minted) return {
+            status: "denied",
+            message: "access-grant returned no token"
+        };
+        return {
+            status: "ok",
+            token: minted,
+            expiresAt: Number(data?.expiresAt || 0)
+        };
+    }
+    constructor(options){
+        _define_property(this, "cache", new Map());
+        _define_property(this, "fetchImpl", void 0);
+        _define_property(this, "nowSeconds", void 0);
+        this.fetchImpl = options?.fetchImpl ?? fetch;
+        this.nowSeconds = options?.nowSeconds ?? (()=>Math.floor(Date.now() / 1000));
+    }
 }
-function wwwNewPath(query) {
-    return withQuery("/new", query);
+const defaultRegistryAccessTokens = new RegistryAccessTokens();
+function withAccessToken(url, token) {
+    if (!token) return url;
+    try {
+        const u = new URL(url);
+        u.searchParams.set("t", token);
+        return u.toString();
+    } catch  {
+        return url;
+    }
 }
-PROD_ORIGINS.registry;
+const paths_0 = __webpack_require__("./node_modules/.pnpm/@extension.dev+urls@0.3.0/node_modules/@extension.dev/urls/dist/paths.cjs");
+const userland = __webpack_require__("./node_modules/.pnpm/@extension.dev+urls@0.3.0/node_modules/@extension.dev/urls/dist/userland.cjs");
+origins.PROD_ORIGINS.registry;
 function mcpOrigins(apiHint) {
     const www = String(apiHint || process.env.EXTENSION_DEV_API_URL || "").trim() || void 0;
-    return resolveOrigins({
+    return (0, origins.resolveOrigins)({
         www,
         console: process.env.EXTENSION_DEV_CONSOLE_URL,
         inspect: process.env.EXTENSION_DEV_INSPECT_URL,
+        preview: process.env.EXTENSION_DEV_PREVIEW_URL,
+        userland: process.env.EXTENSION_DEV_USERLAND_URL,
         registry: process.env.EXTENSION_DEV_REGISTRY_URL,
         media: process.env.EXTENSION_MEDIA_ORIGIN
     }, {
@@ -400,35 +960,77 @@ function registryFileUrl(ref, file) {
 function consoleProjectUrl(ref, page, apiHint) {
     const base = consoleBase(apiHint);
     if (!ref) return base;
-    return `${base}${consoleProjectPath(ref, page)}`;
+    return `${base}${(0, paths_0.consoleProjectPath)(ref, page)}`;
+}
+function userlandProjectUrl(ref, page = "", apiHint) {
+    if (!ref) return "";
+    try {
+        return (0, userland.userlandUrl)(ref, page, {
+            base: mcpOrigins(apiHint).userland
+        });
+    } catch  {
+        return "";
+    }
+}
+async function readJson(url, res) {
+    try {
+        const text = await res.text();
+        return {
+            ok: true,
+            json: JSON.parse(text)
+        };
+    } catch  {
+        return {
+            ok: false,
+            message: `${url} did not return valid JSON`
+        };
+    }
 }
-async function fetchRegistryJson(url, fetchImpl = fetch) {
+async function fetchRegistryJson(url, fetchImpl = fetch, options) {
+    const tokens = options?.tokens ?? defaultRegistryAccessTokens;
+    const ref = options?.ref ?? null;
+    const cached = ref ? tokens.peek(ref) : "";
+    const firstUrl = cached ? withAccessToken(url, cached) : url;
     let res;
     try {
-        res = await fetchImpl(url);
+        res = await fetchImpl(firstUrl);
     } catch (err) {
         return {
             ok: false,
             message: `Could not reach ${url}: ${err?.message || err}`
         };
     }
-    if (!res.ok) return {
+    if (res.ok) return readJson(url, res);
+    const authFailed = 401 === res.status || 403 === res.status;
+    if (!authFailed || !ref) return {
         ok: false,
         status: res.status,
         message: `${url} returned ${res.status}`
     };
-    try {
-        const text = await res.text();
+    const grant = await tokens.get(ref, options?.api);
+    if ("ok" !== grant.status) {
+        const detail = "no-credential" === grant.status ? "This project is private. Run extension_login for it, or set EXTENSION_DEV_TOKEN." : "public" === grant.status ? "The platform reports this project is public, but the registry refused the read." : grant.message;
         return {
-            ok: true,
-            json: JSON.parse(text)
+            ok: false,
+            status: res.status,
+            message: `${url} returned ${res.status}. ${detail}`
         };
-    } catch  {
+    }
+    let retried;
+    try {
+        retried = await fetchImpl(withAccessToken(url, grant.token));
+    } catch (err) {
         return {
             ok: false,
-            message: `${url} did not return valid JSON`
+            message: `Could not reach ${url}: ${err?.message || err}`
         };
     }
+    if (!retried.ok) return {
+        ok: false,
+        status: retried.status,
+        message: `${url} returned ${retried.status} even with an access token`
+    };
+    return readJson(url, retried);
 }
 function parseChannels(json) {
     if (!json || "object" != typeof json || Array.isArray(json)) return [];
@@ -613,7 +1215,7 @@ async function create_handler(args) {
     const resolvedParent = args.parentDir ? node_path.resolve(args.parentDir) : process.cwd();
     const gitInit = node_fs.existsSync(node_path.join(result.projectPath, ".git"));
     const wwwOrigin = mcpOrigins().www;
-    const deployUrl = `${wwwOrigin}${wwwNewPath({
+    const deployUrl = `${wwwOrigin}${(0, paths_0.wwwNewPath)({
         template: result.template
     })}`;
     return JSON.stringify({
@@ -3197,7 +3799,7 @@ function summarizeConsoleMessages(messages) {
         topMessages: topMessages.sort((a, b)=>b.count - a.count).slice(0, 10)
     };
 }
-function _define_property(obj, key, value) {
+function cdp_connection_define_property(obj, key, value) {
     if (key in obj) Object.defineProperty(obj, key, {
         value: value,
         enumerable: true,
@@ -3315,11 +3917,11 @@ class CDPConnection {
         };
     }
     constructor(){
-        _define_property(this, "ws", null);
-        _define_property(this, "messageId", 0);
-        _define_property(this, "eventListeners", new Set());
-        _define_property(this, "pendingRequests", new Map());
-        _define_property(this, "consoleMessages", []);
+        cdp_connection_define_property(this, "ws", null);
+        cdp_connection_define_property(this, "messageId", 0);
+        cdp_connection_define_property(this, "eventListeners", new Set());
+        cdp_connection_define_property(this, "pendingRequests", new Map());
+        cdp_connection_define_property(this, "consoleMessages", []);
     }
 }
 const PAGE_HTML_SCRIPT = `(() => {
@@ -6049,110 +6651,6 @@ async function dom_inspect_handler(args) {
         return raw;
     }
 }
-const DEFAULT_API = PROD_ORIGINS.www;
-function tokenTtlNote(workspaceSlug, projectSlug) {
-    const tokensUrl = workspaceSlug && projectSlug ? consoleProjectUrl({
-        workspace: workspaceSlug,
-        project: projectSlug
-    }, "settings/access-tokens") : consoleBase();
-    return `extension.dev CLI tokens live at most 7 days (server-enforced). CI pipelines must re-mint before expiry on the console's Access tokens page: ${tokensUrl}`;
-}
-function resolveApiBase(api) {
-    return String(api || process.env.EXTENSION_DEV_API_URL || DEFAULT_API).replace(/\/+$/, "");
-}
-function safeApiBase(raw) {
-    let parsed;
-    try {
-        parsed = new URL(raw);
-    } catch  {
-        return {
-            ok: false,
-            message: `Invalid platform URL: ${raw}`
-        };
-    }
-    const isLocalhost = "localhost" === parsed.hostname || "127.0.0.1" === parsed.hostname || "[::1]" === parsed.hostname || "::1" === parsed.hostname;
-    if ("https:" !== parsed.protocol && !("http:" === parsed.protocol && isLocalhost)) return {
-        ok: false,
-        message: `Refusing to send the access token to ${raw}: use https (http is allowed only for localhost).`
-    };
-    return {
-        ok: true,
-        base: `${parsed.origin}${parsed.pathname}`.replace(/\/+$/, "")
-    };
-}
-async function fetchLoginConfig(apiBase, fetchImpl = fetch) {
-    const override = String(process.env.EXTENSION_DEV_GITHUB_CLIENT_ID || "").trim();
-    if (override) return {
-        provider: "github",
-        clientId: override,
-        scope: "read:user",
-        deviceCodeUrl: "/api/cli/device/code",
-        deviceTokenUrl: "/api/cli/device/token",
-        verificationUri: "https://github.com/login/device"
-    };
-    const res = await fetchImpl(`${apiBase}/api/cli/login/config`, {
-        headers: {
-            accept: "application/json"
-        }
-    });
-    if (!res.ok) throw new Error(`Could not fetch login config from ${apiBase} (${res.status}).`);
-    const data = await res.json().catch(()=>({}));
-    const provider = "extensiondev" === data.provider ? "extensiondev" : "github";
-    const clientId = String(data.githubClientId || "").trim();
-    if ("github" === provider && !clientId) throw new Error("Login is not configured on the server (no GitHub client id). Set EXTENSION_DEV_GITHUB_CLIENT_ID to override.");
-    return {
-        provider,
-        clientId,
-        scope: String(data.scope || "read:user"),
-        deviceCodeUrl: String(data.deviceCodeUrl || "/api/cli/device/code"),
-        deviceTokenUrl: String(data.deviceTokenUrl || "/api/cli/device/token"),
-        verificationUri: String(data.verificationUri || "https://github.com/login/device")
-    };
-}
-function persistTokenResponse(args) {
-    const token = String(args.data.token || "").trim();
-    if (!token) throw new Error("Login returned no token.");
-    const creds = {
-        version: 1,
-        token,
-        workspaceSlug: String(args.data.workspaceSlug || ""),
-        projectSlug: String(args.data.projectSlug || ""),
-        expiresAt: Number(args.data.expiresAt || 0),
-        api: args.apiBase,
-        provider: args.provider
-    };
-    writeCredentials(creds);
-    return creds;
-}
-async function exchangeAndPersist(args) {
-    const doFetch = args.fetchImpl ?? fetch;
-    const res = await doFetch(`${args.apiBase}/api/cli/login/exchange`, {
-        method: "POST",
-        headers: {
-            "content-type": "application/json",
-            accept: "application/json"
-        },
-        body: JSON.stringify({
-            githubToken: args.githubToken,
-            project: args.project
-        })
-    });
-    const text = await res.text();
-    let data;
-    try {
-        data = JSON.parse(text);
-    } catch  {
-        data = {
-            message: text
-        };
-    }
-    if (!res.ok) throw new Error(`Login exchange failed (${res.status}): ${data.message || "unknown error"}`);
-    return persistTokenResponse({
-        apiBase: args.apiBase,
-        data,
-        provider: "github"
-    });
-}
 function resolveToken() {
     const fromEnv = String(process.env.EXTENSION_DEV_TOKEN || "").trim();
     if (fromEnv) return fromEnv;
@@ -6274,7 +6772,10 @@ async function publish_handler(args) {
     const ref = resolveProjectRef();
     if (ref) {
         const buildsUrl = registryFileUrl(ref, "builds/index.json");
-        const buildsRes = await fetchRegistryJson(buildsUrl);
+        const buildsRes = await fetchRegistryJson(buildsUrl, fetch, {
+            ref,
+            api: args.api
+        });
         if (buildsRes.ok) {
             const items = parseBuildIndex(buildsRes.json);
             const pinned = args.buildSha ? items.find((item)=>{
@@ -6396,7 +6897,10 @@ async function release_promote_handler(args) {
             enrich.hint = "Run extension_release_list to see this project's channels, their promoted shas, and recent builds.";
             if (ref) {
                 const channelsUrl = registryFileUrl(ref, "channels.json");
-                const channelsRes = await fetchRegistryJson(channelsUrl);
+                const channelsRes = await fetchRegistryJson(channelsUrl, fetch, {
+                    ref,
+                    api: args.api
+                });
                 if (channelsRes.ok) {
                     const rows = parseChannels(channelsRes.json).filter((c)=>c.sha);
                     enrich.validChannelShas = Object.fromEntries(rows.map((c)=>[
@@ -6419,11 +6923,23 @@ async function release_promote_handler(args) {
             ...enrich
         });
     }
-    return JSON.stringify(data);
+    const promotedRef = resolveProjectRef();
+    const publicChannelUrl = userlandProjectUrl(promotedRef, userland.UserlandProjectPage.channel(channel), args.api);
+    const publicBuildUrl = userlandProjectUrl(promotedRef, userland.UserlandProjectPage.build(buildId), args.api);
+    const enriched = data && "object" == typeof data && !Array.isArray(data) ? {
+        ...data,
+        ...publicChannelUrl ? {
+            publicChannelUrl
+        } : {},
+        ...publicBuildUrl ? {
+            publicBuildUrl
+        } : {}
+    } : data;
+    return JSON.stringify(enriched);
 }
 const release_list_schema = {
     name: "extension_release_list",
-    description: "List the project's release channels (channel -> promoted build sha) and recent builds from the public registry (registry.extension.land), so you can pick a valid buildSha for extension_release_promote, extension_deploy, or extension_publish. Read-only, no dispatch. Defaults to the logged-in project (extension_login); pass workspace + project to inspect another public project. Also returns the registry URLs it read and the console Builds page URL.",
+    description: "List the project's release channels (channel -> promoted build sha) and recent builds from the registry (registry.extension.land), so you can pick a valid buildSha for extension_release_promote, extension_deploy, or extension_publish. Read-only, no dispatch. Defaults to the logged-in project (extension_login); pass workspace + project to inspect another project. Works for PRIVATE projects too when your stored login covers them. Returns the registry URLs it read, the console Builds page URL (needs a login), and a publicUrl per channel and build on the public viewer (no login needed for a public project).",
     inputSchema: {
         type: "object",
         properties: {
@@ -6434,6 +6950,10 @@ const release_list_schema = {
             project: {
                 type: "string",
                 description: "Project slug override (defaults to the stored login's project)."
+            },
+            api: {
+                type: "string",
+                description: "Platform base URL (defaults to https://www.extension.dev or EXTENSION_DEV_API_URL). Used to resolve link origins and, for a private project, to mint a short-lived read token."
             }
         },
         required: []
@@ -6456,12 +6976,21 @@ async function release_list_handler(args) {
     const metaUrl = registryFileUrl(ref, "meta.json");
     const buildsUrl = registryFileUrl(ref, "builds/index.json");
     const [channelsRes, metaRes, buildsRes] = await Promise.all([
-        fetchRegistryJson(channelsUrl),
-        fetchRegistryJson(metaUrl),
-        fetchRegistryJson(buildsUrl)
+        fetchRegistryJson(channelsUrl, fetch, {
+            ref,
+            api: args.api
+        }),
+        fetchRegistryJson(metaUrl, fetch, {
+            ref,
+            api: args.api
+        }),
+        fetchRegistryJson(buildsUrl, fetch, {
+            ref,
+            api: args.api
+        })
     ]);
-    const buildsPageUrl = consoleProjectUrl(ref, "builds");
-    if (!channelsRes.ok && !metaRes.ok && !buildsRes.ok) return release_list_fail("ReleaseListNotFound", `No registry data for ${ref.workspace}/${ref.project} (${channelsUrl} returned ${channelsRes.status ?? "no response"}). The project may have no builds yet, be private (private registry data needs a share token), or the workspace/project slugs may be wrong. The console Builds page is the authoritative view: ${buildsPageUrl}`, {
+    const buildsPageUrl = consoleProjectUrl(ref, "builds", args.api);
+    if (!channelsRes.ok && !metaRes.ok && !buildsRes.ok) return release_list_fail("ReleaseListNotFound", `No registry data for ${ref.workspace}/${ref.project} (${channelsUrl} returned ${channelsRes.status ?? "no response"}). The project may have no builds yet, or the workspace/project slugs may be wrong. If it is private, make sure extension_login covers this exact project (a token scoped elsewhere cannot read it). The console Builds page is the authoritative view: ${buildsPageUrl}`, {
         workspace: ref.workspace,
         project: ref.project,
         registryUrl: channelsUrl,
@@ -6472,6 +7001,16 @@ async function release_list_handler(args) {
     recentBuilds.sort((a, b)=>String(b.timestamp ?? "").localeCompare(String(a.timestamp ?? "")));
     const meta = metaRes.ok ? metaRes.json : void 0;
     const promotable = Array.from(new Set(channels.map((c)=>c.sha).filter(Boolean)));
+    const isPrivate = "private" === String(meta?.visibility || "").toLowerCase();
+    const publicProjectUrl = userlandProjectUrl(ref, "", args.api);
+    const channelsWithUrls = channels.map((c)=>({
+            ...c,
+            publicUrl: userlandProjectUrl(ref, userland.UserlandProjectPage.channel(c.channel), args.api)
+        }));
+    const buildsWithUrls = recentBuilds.map((b)=>({
+            ...b,
+            publicUrl: userlandProjectUrl(ref, userland.UserlandProjectPage.build(b.sha), args.api)
+        }));
     const result = {
         ok: true,
         workspace: ref.workspace,
@@ -6482,10 +7021,16 @@ async function release_list_handler(args) {
         ...meta?.visibility ? {
             visibility: meta.visibility
         } : {},
-        channels,
-        recentBuilds,
+        channels: channelsWithUrls,
+        recentBuilds: buildsWithUrls,
         registryUrl: channelsUrl,
         buildsPageUrl,
+        ...publicProjectUrl ? {
+            publicProjectUrl
+        } : {},
+        ...publicProjectUrl ? {
+            publicUrlNote: isPrivate ? "publicUrl links open only for workspace members. This project is private, so an outside recipient needs a share link from extension_publish." : "publicUrl links are the public build pages: no login needed, and they carry the per-browser downloads and the run locally instructions."
+        } : {},
         message: promotable.length > 0 || recentBuilds.length > 0 ? `Promotable shas: channels currently pin ${promotable.length > 0 ? promotable.join(", ") : "none"}; recent builds add ${recentBuilds.filter((b)=>"success" === b.status).map((b)=>b.sha).join(", ") || "none"}. Use one of these as buildId/buildSha for promote/deploy/publish.` : `No channels or builds are recorded on the registry yet for ${ref.workspace}/${ref.project}. Push a commit to produce a build, then check ${buildsPageUrl}.`
     };
     if (!channelsRes.ok) result.channelsUnavailable = `channels.json unreadable: ${channelsRes.message}`;
@@ -6633,8 +7178,14 @@ async function deploy_handler(args) {
         let channelRows = null;
         if (ref) {
             const [healthRes, channelsRes] = await Promise.all([
-                fetchRegistryJson(registryFileUrl(ref, "stores/health.json")),
-                fetchRegistryJson(registryFileUrl(ref, "channels.json"))
+                fetchRegistryJson(registryFileUrl(ref, "stores/health.json"), fetch, {
+                    ref,
+                    api: args.api
+                }),
+                fetchRegistryJson(registryFileUrl(ref, "channels.json"), fetch, {
+                    ref,
+                    api: args.api
+                })
             ]);
             if (healthRes.ok) {
                 const stores = healthRes.json?.stores;
@@ -6717,6 +7268,10 @@ const store_status_schema = {
             project: {
                 type: "string",
                 description: "Project slug override (defaults to the stored login's project)."
+            },
+            api: {
+                type: "string",
+                description: "Platform base URL (defaults to https://www.extension.dev or EXTENSION_DEV_API_URL). Used to resolve link origins and, for a private project, to mint a short-lived read token."
             }
         },
         required: []
@@ -6816,11 +7371,20 @@ async function store_status_handler(args) {
     const healthUrl = registryFileUrl(ref, "stores/health.json");
     const statusUrl = registryFileUrl(ref, "stores/status.json");
     const submissionsUrl = registryFileUrl(ref, "stores/submissions.json");
-    const consoleStoresUrl = consoleProjectUrl(ref, "stores");
+    const consoleStoresUrl = consoleProjectUrl(ref, "stores", args.api);
     const [healthRes, statusRes, submissionsRes] = await Promise.all([
-        fetchRegistryJson(healthUrl),
-        fetchRegistryJson(statusUrl),
-        fetchRegistryJson(submissionsUrl)
+        fetchRegistryJson(healthUrl, fetch, {
+            ref,
+            api: args.api
+        }),
+        fetchRegistryJson(statusUrl, fetch, {
+            ref,
+            api: args.api
+        }),
+        fetchRegistryJson(submissionsUrl, fetch, {
+            ref,
+            api: args.api
+        })
     ]);
     if (!healthRes.ok && !statusRes.ok && !submissionsRes.ok) return store_status_fail("StoreStatusNotFound", `No store data on the registry for ${ref.workspace}/${ref.project} (${healthUrl} returned ${healthRes.status ?? "no response"}). The project may have no stores configured yet, be private (private registry data needs a share token), or the workspace/project slugs may be wrong. Configure stores at ${consoleStoresUrl}/new; the console Stores page is the authoritative view: ${consoleStoresUrl}`, {
         workspace: ref.workspace,