@speedkit/cli 4.20.5 → 4.21.0

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+# [4.21.0](https://gitlab.orestes.info/baqend/speed-kit-cli/compare/v4.20.5...v4.21.0) (2026-08-14)
+
+
+### Features
+
+* implement extensionManagement ([17e65b7](https://gitlab.orestes.info/baqend/speed-kit-cli/commit/17e65b72c8e7791ba1174dd7c948daffe4a9b9cc))
+
 ## [4.20.5](https://gitlab.orestes.info/baqend/speed-kit-cli/compare/v4.20.4...v4.20.5) (2026-08-10)
 
 

package/README.md

@@ -21,7 +21,7 @@ $ npm install -g @speedkit/cli
 $ sk COMMAND
 running command...
 $ sk (--version)
-@speedkit/cli/4.20.5 linux-x64 node-v22.23.2
+@speedkit/cli/4.21.0 linux-x64 node-v22.23.2
 $ sk --help [COMMAND]
 USAGE
   $ sk COMMAND
@@ -78,6 +78,10 @@ By either...
 * [`sk deploy CUSTOMERPATH`](#sk-deploy-customerpath)
 * [`sk diff-url-parameters PAGEURL`](#sk-diff-url-parameters-pageurl)
 * [`sk document-handler CUSTOMERPATH`](#sk-document-handler-customerpath)
+* [`sk extension add [REF]`](#sk-extension-add-ref)
+* [`sk extension list`](#sk-extension-list)
+* [`sk extension remove [REF]`](#sk-extension-remove-ref)
+* [`sk extension update`](#sk-extension-update)
 * [`sk find-pops APP`](#sk-find-pops-app)
 * [`sk generate-customer-config`](#sk-generate-customer-config)
 * [`sk generate-pop-config APP`](#sk-generate-pop-config-app)
@@ -381,6 +385,78 @@ EXAMPLES
   $ sk deploy customers/decathlon.de -c production
 ```
 
+## `sk extension add [REF]`
+
+Install a Chrome extension into the onboarding browser by Web Store link or id
+
+```
+USAGE
+  $ sk extension add [REF]
+
+ARGUMENTS
+  [REF]  Chrome Web Store link or extension id
+
+DESCRIPTION
+  Install a Chrome extension into the onboarding browser by Web Store link or id
+
+EXAMPLES
+  $ sk extension add fmkadmapgofadopljbjfkapdkoienihi
+
+  $ sk extension add https://chromewebstore.google.com/detail/react-developer-tools/fmkadmapgofadopljbjfkapdkoienihi
+
+  $ sk extension add
+```
+
+## `sk extension list`
+
+List Chrome extensions managed by the setup wizard
+
+```
+USAGE
+  $ sk extension list
+
+DESCRIPTION
+  List Chrome extensions managed by the setup wizard
+
+EXAMPLES
+  $ sk extension list
+```
+
+## `sk extension remove [REF]`
+
+Remove a managed Chrome extension
+
+```
+USAGE
+  $ sk extension remove [REF]
+
+ARGUMENTS
+  [REF]  Chrome Web Store link or extension id
+
+DESCRIPTION
+  Remove a managed Chrome extension
+
+EXAMPLES
+  $ sk extension remove
+
+  $ sk extension remove <id>
+```
+
+## `sk extension update`
+
+Check managed Chrome extensions for updates and install them
+
+```
+USAGE
+  $ sk extension update
+
+DESCRIPTION
+  Check managed Chrome extensions for updates and install them
+
+EXAMPLES
+  $ sk extension update
+```
+
 ## `sk find-pops APP`
 
 Get IPs for all fastly PoPs

package/dist/commands/extension/add.d.ts

@@ -0,0 +1,9 @@
+import { Command } from "@oclif/core";
+export default class ExtensionAdd extends Command {
+    static description: string;
+    static examples: string[];
+    static args: {
+        ref: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/extension/add.js

@@ -0,0 +1,41 @@
+import { Args, Command } from "@oclif/core";
+import { CliServiceFactory } from "../../services/cli/index.js";
+import { SetupServiceFactory } from "../../services/setup/index.js";
+export default class ExtensionAdd extends Command {
+    static description = "Install a Chrome extension into the onboarding browser by Web Store link or id";
+    static examples = [
+        "$ sk extension add fmkadmapgofadopljbjfkapdkoienihi",
+        "$ sk extension add https://chromewebstore.google.com/detail/react-developer-tools/fmkadmapgofadopljbjfkapdkoienihi",
+        "$ sk extension add",
+    ];
+    static args = {
+        ref: Args.string({
+            name: "ref",
+            required: false,
+            description: "Chrome Web Store link or extension id",
+        }),
+    };
+    async run() {
+        const { args } = await this.parse(ExtensionAdd);
+        const cli = new CliServiceFactory().getService();
+        const { extensions } = new SetupServiceFactory(this.config).getService();
+        let ref = args.ref;
+        if (!ref) {
+            ref = await cli.prompt("Paste a Chrome Web Store link or extension id", {
+                defaultAnswer: "",
+            });
+        }
+        if (!ref?.trim()) {
+            cli.writeWarning("No extension provided.");
+            return;
+        }
+        cli.writeWarning("Only add extensions you trust — they are loaded into the onboarding browser.");
+        try {
+            const ext = await extensions.addFromInput(ref);
+            cli.writeSuccess(`Installed ${ext.name} ${ext.version}`);
+        }
+        catch (error) {
+            cli.writeError(`Could not install extension: ${error?.message ?? error}`);
+        }
+    }
+}

package/dist/commands/extension/list.d.ts

@@ -0,0 +1,6 @@
+import { Command } from "@oclif/core";
+export default class ExtensionList extends Command {
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+}

package/dist/commands/extension/list.js

@@ -0,0 +1,27 @@
+import { Command } from "@oclif/core";
+import { CliServiceFactory } from "../../services/cli/index.js";
+import { SetupServiceFactory } from "../../services/setup/index.js";
+export default class ExtensionList extends Command {
+    static description = "List Chrome extensions managed by the setup wizard";
+    static examples = ["$ sk extension list"];
+    async run() {
+        const cli = new CliServiceFactory().getService();
+        const { extensions } = new SetupServiceFactory(this.config).getService();
+        const list = extensions.list();
+        if (list.length === 0) {
+            cli.writeWarning("No managed extensions installed.");
+            return;
+        }
+        cli.table(list.map((ext) => ({
+            name: ext.name,
+            version: ext.version,
+            id: ext.id,
+            path: ext.path,
+        })), {
+            name: { header: "Name" },
+            version: { header: "Version" },
+            id: { header: "Id" },
+            path: { header: "Path" },
+        });
+    }
+}

package/dist/commands/extension/remove.d.ts

@@ -0,0 +1,9 @@
+import { Command } from "@oclif/core";
+export default class ExtensionRemove extends Command {
+    static description: string;
+    static examples: string[];
+    static args: {
+        ref: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/extension/remove.js

@@ -0,0 +1,38 @@
+import { Args, Command } from "@oclif/core";
+import { CliServiceFactory } from "../../services/cli/index.js";
+import { parseExtensionId, SetupServiceFactory, } from "../../services/setup/index.js";
+export default class ExtensionRemove extends Command {
+    static description = "Remove a managed Chrome extension";
+    static examples = ["$ sk extension remove", "$ sk extension remove <id>"];
+    static args = {
+        ref: Args.string({
+            name: "ref",
+            required: false,
+            description: "Chrome Web Store link or extension id",
+        }),
+    };
+    async run() {
+        const { args } = await this.parse(ExtensionRemove);
+        const cli = new CliServiceFactory().getService();
+        const { extensions } = new SetupServiceFactory(this.config).getService();
+        const list = extensions.list();
+        if (list.length === 0) {
+            cli.writeWarning("No managed extensions to remove.");
+            return;
+        }
+        let id = args.ref ? parseExtensionId(args.ref) : null;
+        if (!id) {
+            id = await cli.select("Which extension should be removed?", list.map((ext) => ({
+                name: `${ext.name} (${ext.version})`,
+                value: ext.id,
+            })));
+        }
+        const removed = await extensions.remove(id);
+        if (removed) {
+            cli.writeSuccess(`Removed extension ${id}`);
+        }
+        else {
+            cli.writeWarning(`Extension not found: ${id}`);
+        }
+    }
+}

package/dist/commands/extension/update.d.ts

@@ -0,0 +1,6 @@
+import { Command } from "@oclif/core";
+export default class ExtensionUpdate extends Command {
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+}

package/dist/commands/extension/update.js

@@ -0,0 +1,20 @@
+import { Command } from "@oclif/core";
+import { CliServiceFactory } from "../../services/cli/index.js";
+import { SetupServiceFactory } from "../../services/setup/index.js";
+export default class ExtensionUpdate extends Command {
+    static description = "Check managed Chrome extensions for updates and install them";
+    static examples = ["$ sk extension update"];
+    async run() {
+        const cli = new CliServiceFactory().getService();
+        const { extensions } = new SetupServiceFactory(this.config).getService();
+        const list = extensions.list();
+        if (list.length === 0) {
+            cli.writeWarning("No managed extensions to update.");
+            return;
+        }
+        cli.startAction("EXT:CHECK", "Checking extensions for updates…");
+        cli.endAction("EXT:CHECK");
+        await extensions.updateAll();
+        cli.writeSuccess("Extension update check complete.");
+    }
+}

package/dist/helpers/cli-config.d.ts

@@ -1,4 +1,13 @@
 import { Config } from "@oclif/core";
+/** A Chrome extension installed via the setup wizard and tracked for updates. */
+export interface ManagedExtension {
+    /** Chrome Web Store extension id */
+    id: string;
+    name: string;
+    version: string;
+    /** absolute path to the unpacked extension directory */
+    path: string;
+}
 export interface UserCliConfig {
     chromeExtensionPaths: string;
     chromePath: string;
@@ -14,6 +23,8 @@ export interface UserCliConfig {
     browserAutoUpdate: boolean;
     updateReminderDays: number;
     lastBrowserUpdateCheck: string;
+    managedChromeExtensions: ManagedExtension[];
+    lastExtensionUpdateCheck: string;
     firstRunCompleted: boolean;
     tempFolder: string;
     runtimeConfig: Config;

package/dist/helpers/cli-config.js

@@ -36,6 +36,8 @@ export class CliConfig {
         browserAutoUpdate: false,
         updateReminderDays: 3,
         lastBrowserUpdateCheck: "",
+        managedChromeExtensions: [],
+        lastExtensionUpdateCheck: "",
         firstRunCompleted: false,
         tempFolder: "/tmp",
         runtimeConfig: {},
@@ -74,6 +76,8 @@ export class CliConfig {
             browserAutoUpdate: false,
             updateReminderDays: 3,
             lastBrowserUpdateCheck: "",
+            managedChromeExtensions: [],
+            lastExtensionUpdateCheck: "",
             firstRunCompleted: false,
         };
     }

package/dist/helpers/cli-config.spec.js

@@ -67,4 +67,17 @@ describe("CliConfig save/load", () => {
         const reloaded = new CliConfig(fakeOclifConfig(dir)).load();
         expect(reloaded.browserAutoUpdate).to.equal(false);
     });
+    it("round-trips the managedChromeExtensions array", () => {
+        const cfg = new CliConfig(fakeOclifConfig(dir));
+        cfg.load();
+        cfg.save({
+            managedChromeExtensions: [
+                { id: "abc", name: "Ext", version: "1.0.0", path: "/tmp/ext/abc" },
+            ],
+        });
+        const reloaded = new CliConfig(fakeOclifConfig(dir)).load();
+        expect(reloaded.managedChromeExtensions).to.have.length(1);
+        expect(reloaded.managedChromeExtensions[0].id).to.equal("abc");
+        expect(reloaded.managedChromeExtensions[0].version).to.equal("1.0.0");
+    });
 });

package/dist/hooks/init/first-run.js

@@ -28,6 +28,7 @@ const hook = async function (opts) {
         }
         const service = new SetupServiceFactory(config).getService();
         await service.remindBrowserUpdate();
+        await service.remindExtensionUpdates();
     }
     catch {
         // never block a command because of setup housekeeping

package/dist/services/setup/extension/crx.d.ts

@@ -0,0 +1,13 @@
+/**
+ * A CRX file is a ZIP archive prefixed with a header. Because the header shifts
+ * the archive's byte offsets, a plain unzip cannot read it directly — the header
+ * has to be stripped first. This returns the byte offset at which the embedded
+ * ZIP begins. A buffer without the `Cr24` magic is assumed to already be a ZIP
+ * (offset 0).
+ */
+export declare function getZipOffset(buffer: Buffer): number;
+/**
+ * Extracts a CRX (or plain ZIP) buffer into `destDir` as an unpacked extension.
+ * The destination is cleared first so re-installs/updates replace it cleanly.
+ */
+export declare function extractCrx(crxBuffer: Buffer, destDir: string, tempFolder: string): Promise<void>;

package/dist/services/setup/extension/crx.js

@@ -0,0 +1,48 @@
+import fs from "node:fs";
+import path from "node:path";
+import extract from "extract-zip";
+/**
+ * A CRX file is a ZIP archive prefixed with a header. Because the header shifts
+ * the archive's byte offsets, a plain unzip cannot read it directly — the header
+ * has to be stripped first. This returns the byte offset at which the embedded
+ * ZIP begins. A buffer without the `Cr24` magic is assumed to already be a ZIP
+ * (offset 0).
+ */
+export function getZipOffset(buffer) {
+    const magic = buffer.toString("utf8", 0, 4);
+    if (magic !== "Cr24") {
+        return 0;
+    }
+    const version = buffer.readUInt32LE(4);
+    // CRX2: magic(4) version(4) pubKeyLen(4) sigLen(4) pubKey sig zip
+    if (version === 2) {
+        const publicKeyLength = buffer.readUInt32LE(8);
+        const signatureLength = buffer.readUInt32LE(12);
+        return 16 + publicKeyLength + signatureLength;
+    }
+    // CRX3: magic(4) version(4) headerLen(4) header zip
+    if (version === 3) {
+        const headerLength = buffer.readUInt32LE(8);
+        return 12 + headerLength;
+    }
+    throw new Error(`Unsupported CRX version: ${version}`);
+}
+/**
+ * Extracts a CRX (or plain ZIP) buffer into `destDir` as an unpacked extension.
+ * The destination is cleared first so re-installs/updates replace it cleanly.
+ */
+export async function extractCrx(crxBuffer, destDir, tempFolder) {
+    const offset = getZipOffset(crxBuffer);
+    const zipBuffer = offset > 0 ? crxBuffer.subarray(offset) : crxBuffer;
+    const resolvedDest = path.resolve(destDir);
+    // extract-zip needs a file path, so stage the embedded zip on disk first
+    const tempZipPath = path.resolve(tempFolder, `${path.basename(resolvedDest)}.crx.zip`);
+    fs.writeFileSync(tempZipPath, zipBuffer);
+    fs.rmSync(resolvedDest, { recursive: true, force: true });
+    try {
+        await extract(tempZipPath, { dir: resolvedDest });
+    }
+    finally {
+        fs.rmSync(tempZipPath, { force: true });
+    }
+}

package/dist/services/setup/extension/crx.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/services/setup/extension/crx.spec.js

@@ -0,0 +1,38 @@
+import { expect } from "chai";
+import { describe, it } from "mocha";
+import { getZipOffset } from "./crx.js";
+function crx3Header(headerLength) {
+    const buffer = Buffer.alloc(12);
+    buffer.write("Cr24", 0, "utf8");
+    buffer.writeUInt32LE(3, 4);
+    buffer.writeUInt32LE(headerLength, 8);
+    return buffer;
+}
+function crx2Header(publicKeyLength, signatureLength) {
+    const buffer = Buffer.alloc(16);
+    buffer.write("Cr24", 0, "utf8");
+    buffer.writeUInt32LE(2, 4);
+    buffer.writeUInt32LE(publicKeyLength, 8);
+    buffer.writeUInt32LE(signatureLength, 12);
+    return buffer;
+}
+describe("crx.getZipOffset", () => {
+    it("returns 0 for a plain zip (no Cr24 magic)", () => {
+        const zip = Buffer.from([0x50, 0x4b, 0x03, 0x04, 0, 0, 0, 0]);
+        expect(getZipOffset(zip)).to.equal(0);
+    });
+    it("computes the offset for a CRX3 file", () => {
+        // 12 fixed bytes + headerLength
+        expect(getZipOffset(crx3Header(42))).to.equal(54);
+    });
+    it("computes the offset for a CRX2 file", () => {
+        // 16 fixed bytes + pubKeyLen + sigLen
+        expect(getZipOffset(crx2Header(3, 4))).to.equal(23);
+    });
+    it("throws on an unsupported CRX version", () => {
+        const buffer = Buffer.alloc(12);
+        buffer.write("Cr24", 0, "utf8");
+        buffer.writeUInt32LE(9, 4);
+        expect(() => getZipOffset(buffer)).to.throw(/Unsupported CRX version/);
+    });
+});

package/dist/services/setup/extension/extension-installer.d.ts

@@ -0,0 +1,31 @@
+import { ManagedExtension } from "../../../helpers/cli-config.js";
+/**
+ * Derives the Chrome major version to send as `prodversion` to Google's update
+ * service. Prefers the configured puppeteer build, falling back to a recent
+ * constant (the endpoint is lenient about this value).
+ */
+export declare function resolveChromeMajorVersion(browserBuildId: string): string;
+/**
+ * Downloads, extracts and inspects Chrome Web Store extensions. Purely handles
+ * files and network; persistence/prompts live in the setup service.
+ */
+export declare class ExtensionInstaller {
+    private readonly tempFolder;
+    private readonly chromeMajorVersion;
+    constructor(tempFolder: string, chromeMajorVersion: string);
+    get extensionsDir(): string;
+    /**
+     * Installs an extension from a bare id or a Web Store URL and returns its
+     * tracked metadata. Throws on an unparseable input or a failed download.
+     */
+    install(input: string): Promise<ManagedExtension>;
+    /**
+     * Returns the latest available version for an extension, or null when the
+     * check fails or reports no update.
+     */
+    checkLatestVersion(id: string): Promise<string | null>;
+    /** Removes an unpacked extension directory from disk. */
+    removeFiles(extensionPath: string): void;
+    private download;
+    private readManifest;
+}

package/dist/services/setup/extension/extension-installer.js

@@ -0,0 +1,87 @@
+import fs from "node:fs";
+import path from "node:path";
+import { extractCrx } from "./crx.js";
+import { buildCrxUrl, buildUpdateCheckUrl, parseExtensionId, parseUpdateCheckVersion, } from "./webstore.js";
+const EXTENSIONS_DIRNAME = "extensions";
+const FALLBACK_CHROME_MAJOR = "131";
+/**
+ * Derives the Chrome major version to send as `prodversion` to Google's update
+ * service. Prefers the configured puppeteer build, falling back to a recent
+ * constant (the endpoint is lenient about this value).
+ */
+export function resolveChromeMajorVersion(browserBuildId) {
+    const major = (browserBuildId ?? "").split(".")[0];
+    return /^\d+$/.test(major) ? major : FALLBACK_CHROME_MAJOR;
+}
+/**
+ * Downloads, extracts and inspects Chrome Web Store extensions. Purely handles
+ * files and network; persistence/prompts live in the setup service.
+ */
+export class ExtensionInstaller {
+    tempFolder;
+    chromeMajorVersion;
+    constructor(tempFolder, chromeMajorVersion) {
+        this.tempFolder = tempFolder;
+        this.chromeMajorVersion = chromeMajorVersion;
+    }
+    get extensionsDir() {
+        return path.resolve(this.tempFolder, EXTENSIONS_DIRNAME);
+    }
+    /**
+     * Installs an extension from a bare id or a Web Store URL and returns its
+     * tracked metadata. Throws on an unparseable input or a failed download.
+     */
+    async install(input) {
+        const id = parseExtensionId(input);
+        if (!id) {
+            throw new Error(`Could not parse a Chrome extension id from: "${input}"`);
+        }
+        const crxBuffer = await this.download(buildCrxUrl(id, this.chromeMajorVersion));
+        const destDir = path.resolve(this.extensionsDir, id);
+        await extractCrx(crxBuffer, destDir, this.tempFolder);
+        const manifest = this.readManifest(destDir, id);
+        return {
+            id,
+            name: manifest.name,
+            version: manifest.version,
+            path: destDir,
+        };
+    }
+    /**
+     * Returns the latest available version for an extension, or null when the
+     * check fails or reports no update.
+     */
+    async checkLatestVersion(id) {
+        const url = buildUpdateCheckUrl(id, this.chromeMajorVersion);
+        const response = await fetch(url);
+        if (!response.ok) {
+            return null;
+        }
+        const xml = await response.text();
+        return parseUpdateCheckVersion(xml);
+    }
+    /** Removes an unpacked extension directory from disk. */
+    removeFiles(extensionPath) {
+        fs.rmSync(extensionPath, { recursive: true, force: true });
+    }
+    async download(url) {
+        const response = await fetch(url);
+        if (!response.ok) {
+            throw new Error(`Failed to download extension: HTTP ${response.status}`);
+        }
+        return Buffer.from(await response.arrayBuffer());
+    }
+    readManifest(dir, id) {
+        const manifestPath = path.resolve(dir, "manifest.json");
+        if (!fs.existsSync(manifestPath)) {
+            throw new Error(`No manifest.json in extracted extension: ${dir}`);
+        }
+        const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+        const rawName = manifest.name ?? "";
+        // extension names can be i18n placeholders (__MSG_appName__); fall back to id
+        const name = /^__MSG_.*__$/.test(rawName)
+            ? `Chrome extension ${id}`
+            : rawName || `Chrome extension ${id}`;
+        return { name, version: manifest.version ?? "0.0.0" };
+    }
+}

package/dist/services/setup/extension/extension-setup-service.d.ts

@@ -0,0 +1,40 @@
+import { CliServiceInterface } from "../../cli/index.js";
+import { CliConfig, ManagedExtension, UserCliConfig } from "../../../helpers/cli-config.js";
+import { ExtensionInstaller } from "./extension-installer.js";
+export declare class ExtensionSetupService {
+    private readonly cli;
+    private readonly cliConfig;
+    private readonly userConfig;
+    private readonly installer;
+    constructor(cli: CliServiceInterface, cliConfig: CliConfig, userConfig: UserCliConfig, installer: ExtensionInstaller);
+    /**
+     * Wizard step: optionally install one or more Chrome extensions by id/URL.
+     */
+    run(): Promise<void>;
+    /** Installs (or reinstalls) an extension from input and persists it. */
+    addFromInput(input: string): Promise<ManagedExtension>;
+    list(): ManagedExtension[];
+    /** Removes an installed extension (files + config). Returns false if unknown. */
+    remove(id: string): Promise<boolean>;
+    /**
+     * Daily update check across all managed extensions; prompts before each
+     * update. Callers must ensure the session is interactive first.
+     */
+    remindIfDue(): Promise<void>;
+    /**
+     * Checks every managed extension for updates now (ignores the daily gate).
+     * Used by `sk extension update`.
+     */
+    updateAll(): Promise<void>;
+    private remindOne;
+    private current;
+    private upsert;
+    /**
+     * Persists the managed list and mirrors the unpacked dirs into
+     * chromeExtensionPaths (the list the onboarding browser actually loads),
+     * preserving any manually configured paths outside our extensions folder.
+     */
+    private persist;
+    private isCheckDue;
+    private nowIso;
+}

package/dist/services/setup/extension/extension-setup-service.js

@@ -0,0 +1,152 @@
+import { compareVersions } from "./webstore.js";
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+export class ExtensionSetupService {
+    cli;
+    cliConfig;
+    userConfig;
+    installer;
+    constructor(cli, cliConfig, userConfig, installer) {
+        this.cli = cli;
+        this.cliConfig = cliConfig;
+        this.userConfig = userConfig;
+        this.installer = installer;
+    }
+    /**
+     * Wizard step: optionally install one or more Chrome extensions by id/URL.
+     */
+    async run() {
+        const wanted = await this.cli.confirm("Do you want to install Chrome extensions into the onboarding browser?", false);
+        if (!wanted) {
+            return;
+        }
+        this.cli.writeWarning("Only add extensions you trust — they are loaded into the onboarding browser.");
+        let addMore = true;
+        while (addMore) {
+            const input = await this.cli.prompt("Paste a Chrome Web Store link or extension id (leave empty to stop)", { defaultAnswer: "" });
+            if (!input.trim()) {
+                break;
+            }
+            try {
+                const ext = await this.addFromInput(input);
+                this.cli.writeSuccess(`Installed ${ext.name} ${ext.version}`);
+            }
+            catch (error) {
+                this.cli.writeError(`Could not install extension: ${error?.message ?? error}`);
+            }
+            addMore = await this.cli.confirm("Add another extension?", false);
+        }
+    }
+    /** Installs (or reinstalls) an extension from input and persists it. */
+    async addFromInput(input) {
+        this.cli.startAction("EXT:INSTALL", "Downloading extension…");
+        try {
+            const ext = await this.installer.install(input);
+            this.persist(this.upsert(this.current(), ext));
+            this.cli.endAction("EXT:INSTALL");
+            return ext;
+        }
+        catch (error) {
+            this.cli.failAction("EXT:INSTALL");
+            throw error;
+        }
+    }
+    list() {
+        return this.current();
+    }
+    /** Removes an installed extension (files + config). Returns false if unknown. */
+    async remove(id) {
+        const list = this.current();
+        const target = list.find((ext) => ext.id === id);
+        if (!target) {
+            return false;
+        }
+        this.installer.removeFiles(target.path);
+        this.persist(list.filter((ext) => ext.id !== id));
+        return true;
+    }
+    /**
+     * Daily update check across all managed extensions; prompts before each
+     * update. Callers must ensure the session is interactive first.
+     */
+    async remindIfDue() {
+        if (this.current().length === 0 || !this.isCheckDue()) {
+            return;
+        }
+        await this.updateAll();
+    }
+    /**
+     * Checks every managed extension for updates now (ignores the daily gate).
+     * Used by `sk extension update`.
+     */
+    async updateAll() {
+        const list = this.current();
+        // stamp so the daily reminder does not immediately ask again
+        this.cliConfig.save({ lastExtensionUpdateCheck: this.nowIso() });
+        for (const ext of list) {
+            await this.remindOne(ext);
+        }
+    }
+    async remindOne(ext) {
+        let latest;
+        try {
+            latest = await this.installer.checkLatestVersion(ext.id);
+        }
+        catch {
+            return;
+        }
+        if (!latest || compareVersions(latest, ext.version) <= 0) {
+            return;
+        }
+        const update = await this.cli.confirm(`Update available for ${ext.name}: ${ext.version} → ${latest}. Install?`, true);
+        if (!update) {
+            return;
+        }
+        try {
+            const updated = await this.addFromInput(ext.id);
+            this.cli.writeSuccess(`Updated ${updated.name} to ${updated.version}`);
+        }
+        catch (error) {
+            this.cli.writeError(`Update failed: ${error?.message ?? error}`);
+        }
+    }
+    current() {
+        return this.userConfig.managedChromeExtensions ?? [];
+    }
+    upsert(list, ext) {
+        return [...list.filter((entry) => entry.id !== ext.id), ext];
+    }
+    /**
+     * Persists the managed list and mirrors the unpacked dirs into
+     * chromeExtensionPaths (the list the onboarding browser actually loads),
+     * preserving any manually configured paths outside our extensions folder.
+     */
+    persist(managed) {
+        const managedDir = this.installer.extensionsDir;
+        const managedPaths = new Set(managed.map((ext) => ext.path));
+        const manualPaths = this.userConfig.chromeExtensionPaths
+            .split(",")
+            .map((entry) => entry.trim())
+            .filter((entry) => entry.length > 0 &&
+            !entry.startsWith(managedDir) &&
+            !managedPaths.has(entry));
+        const combined = [...manualPaths, ...managed.map((ext) => ext.path)];
+        this.cliConfig.save({
+            managedChromeExtensions: managed,
+            chromeExtensionPaths: combined.join(","),
+        });
+    }
+    isCheckDue() {
+        const last = this.userConfig.lastExtensionUpdateCheck;
+        if (!last) {
+            return true;
+        }
+        const lastMs = new Date(last).getTime();
+        if (Number.isNaN(lastMs)) {
+            return true;
+        }
+        return Date.now() - lastMs >= MS_PER_DAY;
+    }
+    nowIso() {
+        return new Date().toISOString();
+    }
+}

package/dist/services/setup/extension/webstore.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Pure helpers for dealing with the Chrome Web Store: extracting an extension
+ * id from user input, and building the Google update-service URLs used to
+ * download a CRX and to check for a newer version.
+ */
+/**
+ * Resolves a Chrome extension id from a bare id or a Web Store URL. Supports
+ * both the current `chromewebstore.google.com/detail/<slug>/<id>` and the
+ * legacy `chrome.google.com/webstore/detail/<slug>/<id>` layouts. Returns null
+ * when no valid id can be found.
+ */
+export declare function parseExtensionId(input: string): string | null;
+/**
+ * Builds the download URL for an extension's CRX. `response=redirect` makes the
+ * endpoint 302 to the actual CRX file, which fetch follows automatically.
+ */
+export declare function buildCrxUrl(id: string, chromeMajorVersion: string): string;
+/**
+ * Builds the update-check URL. `installsource=ondemand` makes the endpoint
+ * report the latest available version (without it, it answers "noupdate"),
+ * which we then compare against the installed version ourselves.
+ */
+export declare function buildUpdateCheckUrl(id: string, chromeMajorVersion: string): string;
+/**
+ * Parses the latest version from an update-check XML response. Returns null when
+ * the response reports no update or carries no version attribute.
+ */
+export declare function parseUpdateCheckVersion(xml: string): string | null;
+/**
+ * Compares two dotted numeric versions (handles Chrome's 4-part versions, which
+ * semver cannot parse). Returns >0 if a is newer, <0 if older, 0 if equal.
+ */
+export declare function compareVersions(a: string, b: string): number;

package/dist/services/setup/extension/webstore.js

@@ -0,0 +1,74 @@
+/**
+ * Pure helpers for dealing with the Chrome Web Store: extracting an extension
+ * id from user input, and building the Google update-service URLs used to
+ * download a CRX and to check for a newer version.
+ */
+const EXTENSION_ID = /[a-p]{32}/;
+const CRX_ENDPOINT = "https://clients2.google.com/service/update2/crx";
+/**
+ * Resolves a Chrome extension id from a bare id or a Web Store URL. Supports
+ * both the current `chromewebstore.google.com/detail/<slug>/<id>` and the
+ * legacy `chrome.google.com/webstore/detail/<slug>/<id>` layouts. Returns null
+ * when no valid id can be found.
+ */
+export function parseExtensionId(input) {
+    const trimmed = (input ?? "").trim();
+    if (!trimmed) {
+        return null;
+    }
+    if (new RegExp(`^${EXTENSION_ID.source}$`).test(trimmed)) {
+        return trimmed;
+    }
+    const detail = trimmed.match(new RegExp(`/detail/(?:[^/]+/)?(${EXTENSION_ID.source})`));
+    if (detail) {
+        return detail[1];
+    }
+    const anywhere = trimmed.match(EXTENSION_ID);
+    return anywhere ? anywhere[0] : null;
+}
+/**
+ * Builds the download URL for an extension's CRX. `response=redirect` makes the
+ * endpoint 302 to the actual CRX file, which fetch follows automatically.
+ */
+export function buildCrxUrl(id, chromeMajorVersion) {
+    const x = encodeURIComponent(`id=${id}&installsource=ondemand&uc`);
+    return (`${CRX_ENDPOINT}?response=redirect&acceptformat=crx2,crx3` +
+        `&prodversion=${chromeMajorVersion}&x=${x}`);
+}
+/**
+ * Builds the update-check URL. `installsource=ondemand` makes the endpoint
+ * report the latest available version (without it, it answers "noupdate"),
+ * which we then compare against the installed version ourselves.
+ */
+export function buildUpdateCheckUrl(id, chromeMajorVersion) {
+    const x = encodeURIComponent(`id=${id}&installsource=ondemand&uc`);
+    return (`${CRX_ENDPOINT}?response=updatecheck&acceptformat=crx2,crx3` +
+        `&prodversion=${chromeMajorVersion}&x=${x}`);
+}
+/**
+ * Parses the latest version from an update-check XML response. Returns null when
+ * the response reports no update or carries no version attribute.
+ */
+export function parseUpdateCheckVersion(xml) {
+    if (/status="noupdate"/.test(xml)) {
+        return null;
+    }
+    const match = xml.match(/<updatecheck[^>]*\bversion="([^"]+)"/);
+    return match ? match[1] : null;
+}
+/**
+ * Compares two dotted numeric versions (handles Chrome's 4-part versions, which
+ * semver cannot parse). Returns >0 if a is newer, <0 if older, 0 if equal.
+ */
+export function compareVersions(a, b) {
+    const partsA = a.split(".").map((part) => Number.parseInt(part, 10) || 0);
+    const partsB = b.split(".").map((part) => Number.parseInt(part, 10) || 0);
+    const length = Math.max(partsA.length, partsB.length);
+    for (let index = 0; index < length; index++) {
+        const diff = (partsA[index] || 0) - (partsB[index] || 0);
+        if (diff !== 0) {
+            return diff > 0 ? 1 : -1;
+        }
+    }
+    return 0;
+}

package/dist/services/setup/extension/webstore.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/services/setup/extension/webstore.spec.js

@@ -0,0 +1,51 @@
+import { expect } from "chai";
+import { describe, it } from "mocha";
+import { buildCrxUrl, buildUpdateCheckUrl, compareVersions, parseExtensionId, parseUpdateCheckVersion, } from "./webstore.js";
+const ID = "fmkadmapgofadopljbjfkapdkoienihi";
+describe("webstore.parseExtensionId", () => {
+    it("accepts a bare 32-char id", () => {
+        expect(parseExtensionId(ID)).to.equal(ID);
+    });
+    it("extracts the id from a current Web Store URL", () => {
+        expect(parseExtensionId(`https://chromewebstore.google.com/detail/react-developer-tools/${ID}`)).to.equal(ID);
+    });
+    it("extracts the id from a legacy Web Store URL with query", () => {
+        expect(parseExtensionId(`https://chrome.google.com/webstore/detail/react/${ID}?hl=en`)).to.equal(ID);
+    });
+    it("returns null for input without an id", () => {
+        expect(parseExtensionId("not-an-extension")).to.equal(null);
+        expect(parseExtensionId("")).to.equal(null);
+    });
+});
+describe("webstore URL builders", () => {
+    it("builds a redirecting CRX download URL with the id and prodversion", () => {
+        const url = buildCrxUrl(ID, "131");
+        expect(url).to.contain("response=redirect");
+        expect(url).to.contain("prodversion=131");
+        expect(url).to.contain(encodeURIComponent(`id=${ID}`));
+    });
+    it("builds an update-check URL that reports the latest version", () => {
+        const url = buildUpdateCheckUrl(ID, "131");
+        expect(url).to.contain("response=updatecheck");
+        expect(url).to.contain(encodeURIComponent("installsource=ondemand"));
+    });
+});
+describe("webstore.parseUpdateCheckVersion", () => {
+    it("parses the version from an update response", () => {
+        const xml = `<gupdate><app appid="${ID}">` +
+            `<updatecheck status="ok" codebase="https://x/ext.crx" version="4.28.0"/>` +
+            `</app></gupdate>`;
+        expect(parseUpdateCheckVersion(xml)).to.equal("4.28.0");
+    });
+    it("returns null when there is no update", () => {
+        const xml = `<updatecheck status="noupdate"/>`;
+        expect(parseUpdateCheckVersion(xml)).to.equal(null);
+    });
+});
+describe("webstore.compareVersions", () => {
+    it("handles 4-part Chrome-style versions", () => {
+        expect(compareVersions("1.2.3.4", "1.2.3.3")).to.be.greaterThan(0);
+        expect(compareVersions("1.2.0.0", "1.10.0.0")).to.be.lessThan(0);
+        expect(compareVersions("2.0", "2.0.0.0")).to.equal(0);
+    });
+});

package/dist/services/setup/index.d.ts

@@ -6,5 +6,9 @@ export * from "./browser/browser-manager.js";
 export * from "./browser/browser-setup-service.js";
 export * from "./difftool/difftool-detector.js";
 export * from "./difftool/difftool-setup-service.js";
+export * from "./extension/webstore.js";
+export * from "./extension/crx.js";
+export * from "./extension/extension-installer.js";
+export * from "./extension/extension-setup-service.js";
 export * from "./os/tool-registry.js";
 export * from "./os/detector-helper.js";

package/dist/services/setup/index.js

@@ -6,5 +6,9 @@ export * from "./browser/browser-manager.js";
 export * from "./browser/browser-setup-service.js";
 export * from "./difftool/difftool-detector.js";
 export * from "./difftool/difftool-setup-service.js";
+export * from "./extension/webstore.js";
+export * from "./extension/crx.js";
+export * from "./extension/extension-installer.js";
+export * from "./extension/extension-setup-service.js";
 export * from "./os/tool-registry.js";
 export * from "./os/detector-helper.js";

package/dist/services/setup/setup-service-factory.js

@@ -6,6 +6,8 @@ import { BrowserManager } from "./browser/browser-manager.js";
 import { BrowserSetupService } from "./browser/browser-setup-service.js";
 import { DiffToolDetector } from "./difftool/difftool-detector.js";
 import { DiffToolSetupService } from "./difftool/difftool-setup-service.js";
+import { ExtensionInstaller, resolveChromeMajorVersion, } from "./extension/extension-installer.js";
+import { ExtensionSetupService } from "./extension/extension-setup-service.js";
 import { SetupContext } from "./setup-context.js";
 import { SetupService } from "./setup-service.js";
 export class SetupServiceFactory {
@@ -31,7 +33,9 @@ export class SetupServiceFactory {
         const browserSetup = new BrowserSetupService(cli, cliConfig, userConfig, browserDetector, browserManager);
         const diffDetector = new DiffToolDetector(platform, home);
         const diffSetup = new DiffToolSetupService(cli, cliConfig, userConfig, diffDetector);
-        this.service = new SetupService(cli, cliConfig, userConfig, browserSetup, diffSetup, this.context);
+        const extensionInstaller = new ExtensionInstaller(cacheDir, resolveChromeMajorVersion(userConfig.browserBuildId));
+        const extensionSetup = new ExtensionSetupService(cli, cliConfig, userConfig, extensionInstaller);
+        this.service = new SetupService(cli, cliConfig, userConfig, browserSetup, diffSetup, extensionSetup, this.context);
         return this.service;
     }
 }

package/dist/services/setup/setup-service.d.ts

@@ -2,6 +2,7 @@ import { CliServiceInterface } from "../cli/index.js";
 import { CliConfig, UserCliConfig } from "../../helpers/cli-config.js";
 import { BrowserSetupService } from "./browser/browser-setup-service.js";
 import { DiffToolSetupService } from "./difftool/difftool-setup-service.js";
+import { ExtensionSetupService } from "./extension/extension-setup-service.js";
 import { SetupContext } from "./setup-context.js";
 export declare class SetupService {
     private readonly cli;
@@ -9,12 +10,20 @@ export declare class SetupService {
     private readonly userConfig;
     private readonly browserSetup;
     private readonly diffSetup;
+    private readonly extensionSetup;
     private readonly context;
-    constructor(cli: CliServiceInterface, cliConfig: CliConfig, userConfig: UserCliConfig, browserSetup: BrowserSetupService, diffSetup: DiffToolSetupService, context: SetupContext);
-    /** Runs the full first-run wizard (browser + diff tool) and marks it done. */
+    constructor(cli: CliServiceInterface, cliConfig: CliConfig, userConfig: UserCliConfig, browserSetup: BrowserSetupService, diffSetup: DiffToolSetupService, extensionSetup: ExtensionSetupService, context: SetupContext);
+    /**
+     * Runs the full first-run wizard (browser + diff tool + extensions) and marks
+     * it done.
+     */
     run(): Promise<void>;
     /** True when the first-run wizard has already been completed once. */
     isFirstRunCompleted(): boolean;
     /** Update-reminder check for the browser, used by the init hook. */
     remindBrowserUpdate(): Promise<void>;
+    /** Daily update-reminder check for managed extensions, used by the init hook. */
+    remindExtensionUpdates(): Promise<void>;
+    /** Extension management operations exposed for the `sk extension` commands. */
+    get extensions(): ExtensionSetupService;
 }

package/dist/services/setup/setup-service.js

@@ -4,24 +4,31 @@ export class SetupService {
     userConfig;
     browserSetup;
     diffSetup;
+    extensionSetup;
     context;
-    constructor(cli, cliConfig, userConfig, browserSetup, diffSetup, context) {
+    constructor(cli, cliConfig, userConfig, browserSetup, diffSetup, extensionSetup, context) {
         this.cli = cli;
         this.cliConfig = cliConfig;
         this.userConfig = userConfig;
         this.browserSetup = browserSetup;
         this.diffSetup = diffSetup;
+        this.extensionSetup = extensionSetup;
         this.context = context;
     }
-    /** Runs the full first-run wizard (browser + diff tool) and marks it done. */
+    /**
+     * Runs the full first-run wizard (browser + diff tool + extensions) and marks
+     * it done.
+     */
     async run() {
         this.cli.spacer();
         this.cli.write(this.cli.style.bold("Speed Kit CLI — setup"));
-        this.cli.comment("Configure the browser and diff tool used for onboarding and deploys.");
+        this.cli.comment("Configure the browser, diff tool and extensions used for onboarding.");
         this.cli.spacer();
         await this.browserSetup.run();
         this.cli.spacer();
         await this.diffSetup.run();
+        this.cli.spacer();
+        await this.extensionSetup.run();
         this.cliConfig.save({ firstRunCompleted: true });
         this.cli.spacer();
         this.cli.writeSuccess("Setup complete. Re-run any time with `sk config setup`.");
@@ -34,4 +41,12 @@ export class SetupService {
     async remindBrowserUpdate() {
         await this.browserSetup.remindIfDue();
     }
+    /** Daily update-reminder check for managed extensions, used by the init hook. */
+    async remindExtensionUpdates() {
+        await this.extensionSetup.remindIfDue();
+    }
+    /** Extension management operations exposed for the `sk extension` commands. */
+    get extensions() {
+        return this.extensionSetup;
+    }
 }

package/oclif.manifest.json

@@ -999,7 +999,118 @@
         "config",
         "setup.js"
       ]
+    },
+    "extension:add": {
+      "aliases": [],
+      "args": {
+        "ref": {
+          "description": "Chrome Web Store link or extension id",
+          "name": "ref",
+          "required": false
+        }
+      },
+      "description": "Install a Chrome extension into the onboarding browser by Web Store link or id",
+      "examples": [
+        "$ sk extension add fmkadmapgofadopljbjfkapdkoienihi",
+        "$ sk extension add https://chromewebstore.google.com/detail/react-developer-tools/fmkadmapgofadopljbjfkapdkoienihi",
+        "$ sk extension add"
+      ],
+      "flags": {},
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "extension:add",
+      "pluginAlias": "@speedkit/cli",
+      "pluginName": "@speedkit/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "extension",
+        "add.js"
+      ]
+    },
+    "extension:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List Chrome extensions managed by the setup wizard",
+      "examples": [
+        "$ sk extension list"
+      ],
+      "flags": {},
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "extension:list",
+      "pluginAlias": "@speedkit/cli",
+      "pluginName": "@speedkit/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "extension",
+        "list.js"
+      ]
+    },
+    "extension:remove": {
+      "aliases": [],
+      "args": {
+        "ref": {
+          "description": "Chrome Web Store link or extension id",
+          "name": "ref",
+          "required": false
+        }
+      },
+      "description": "Remove a managed Chrome extension",
+      "examples": [
+        "$ sk extension remove",
+        "$ sk extension remove <id>"
+      ],
+      "flags": {},
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "extension:remove",
+      "pluginAlias": "@speedkit/cli",
+      "pluginName": "@speedkit/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "extension",
+        "remove.js"
+      ]
+    },
+    "extension:update": {
+      "aliases": [],
+      "args": {},
+      "description": "Check managed Chrome extensions for updates and install them",
+      "examples": [
+        "$ sk extension update"
+      ],
+      "flags": {},
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "extension:update",
+      "pluginAlias": "@speedkit/cli",
+      "pluginName": "@speedkit/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "extension",
+        "update.js"
+      ]
     }
   },
-  "version": "4.20.5"
+  "version": "4.21.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@speedkit/cli",
   "description": "Speed Kit CLI",
-  "version": "4.20.5",
+  "version": "4.21.0",
   "author": {
     "name": "Baqend.com",
     "email": "info@baqend.com"