@stackable-labs/cli-app-extension 1.26.4 → 1.27.1

package/dist/index.js

@@ -6,9 +6,10 @@ import { program } from "commander";
 import { render } from "ink";
 
 // src/App.tsx
+import { readFile as readFile3 } from "fs/promises";
 import { join as join3 } from "path";
-import { Box as Box14, Text as Text14, useApp } from "ink";
-import { useCallback, useState as useState9 } from "react";
+import { Box as Box15, Text as Text15, useApp } from "ink";
+import { useCallback, useState as useState10 } from "react";
 
 // src/components/Confirm.tsx
 import { Box as Box2, Text as Text2, useFocus, useFocusManager, useInput as useInput2 } from "ink";
@@ -44,7 +45,7 @@ var TEMPLATE_FLAVOR_META = {
 };
 var TARGET_PERMISSION_MAP = {
   "slot.header": ["context:read"],
-  "slot.content": ["context:read", "data:query", "actions:toast", "actions:invoke"],
+  "slot.content": ["context:read", "data:query", "data:fetch", "actions:toast", "actions:invoke"],
   "slot.footer": [],
   "slot.footer-links": []
 };
@@ -98,11 +99,11 @@ var VersionRow = ({ currentVersion, value, onChange, onFocusChange, onConfirm, o
   const { focusPrevious, focusNext } = useFocusManager();
   useInput2((_, key) => {
     if (!isFocused) return;
-    if (key.upArrow || key.tab && key.shift) {
+    if (key.upArrow) {
       focusPrevious();
       return;
     }
-    if (key.tab && !key.shift) {
+    if (key.downArrow) {
       focusNext();
       return;
     }
@@ -140,9 +141,14 @@ var Confirm = ({
   extensionPort,
   previewPort,
   targets,
+  registryTargets,
   outputDir,
   bundleUrl,
   enabled,
+  permissions,
+  allowedDomains,
+  registryPermissions,
+  registryAllowedDomains,
   newVersion,
   onVersionOverride,
   onConfirm,
@@ -238,10 +244,57 @@ var Confirm = ({
         ] }),
         /* @__PURE__ */ jsxs2(Box2, { gap: 2, children: [
           /* @__PURE__ */ jsx2(Text2, { dimColor: true, children: "Targets       " }),
-          /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", children: targets.map((t) => /* @__PURE__ */ jsxs2(Box2, { children: [
-            /* @__PURE__ */ jsx2(Text2, { color: "green", children: "\u2022 " }),
-            /* @__PURE__ */ jsx2(Text2, { children: t })
-          ] }, t)) })
+          /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
+            targets.map((t) => {
+              const isAdded = registryTargets && !registryTargets.includes(t);
+              return /* @__PURE__ */ jsxs2(Box2, { gap: 1, children: [
+                /* @__PURE__ */ jsx2(Text2, { color: "green", children: "\u2022 " }),
+                /* @__PURE__ */ jsx2(Text2, { children: t }),
+                isAdded && /* @__PURE__ */ jsx2(Text2, { color: "green", dimColor: true, children: "(+ added)" })
+              ] }, t);
+            }),
+            registryTargets?.filter((t) => !targets.includes(t)).map((t) => /* @__PURE__ */ jsxs2(Box2, { gap: 1, children: [
+              /* @__PURE__ */ jsx2(Text2, { color: "red", children: "\u2022 " }),
+              /* @__PURE__ */ jsx2(Text2, { color: "red", dimColor: true, strikethrough: true, children: t }),
+              /* @__PURE__ */ jsx2(Text2, { color: "red", dimColor: true, children: "(- removed)" })
+            ] }, t))
+          ] })
+        ] }),
+        permissions && (permissions.length > 0 || registryPermissions?.some((p) => !permissions.includes(p))) && /* @__PURE__ */ jsxs2(Box2, { gap: 2, children: [
+          /* @__PURE__ */ jsx2(Text2, { dimColor: true, children: "Permissions   " }),
+          /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
+            permissions.map((p) => {
+              const isAdded = registryPermissions && !registryPermissions.includes(p);
+              return /* @__PURE__ */ jsxs2(Box2, { gap: 1, children: [
+                /* @__PURE__ */ jsx2(Text2, { color: "green", children: "\u2022 " }),
+                /* @__PURE__ */ jsx2(Text2, { children: p }),
+                isAdded && /* @__PURE__ */ jsx2(Text2, { color: "green", dimColor: true, children: "(+ added)" })
+              ] }, p);
+            }),
+            registryPermissions?.filter((p) => !permissions.includes(p)).map((p) => /* @__PURE__ */ jsxs2(Box2, { gap: 1, children: [
+              /* @__PURE__ */ jsx2(Text2, { color: "red", children: "\u2022 " }),
+              /* @__PURE__ */ jsx2(Text2, { color: "red", dimColor: true, strikethrough: true, children: p }),
+              /* @__PURE__ */ jsx2(Text2, { color: "red", dimColor: true, children: "(- removed)" })
+            ] }, p))
+          ] })
+        ] }),
+        allowedDomains && (allowedDomains.length > 0 || registryAllowedDomains?.some((d) => !allowedDomains.includes(d))) && /* @__PURE__ */ jsxs2(Box2, { gap: 2, children: [
+          /* @__PURE__ */ jsx2(Text2, { dimColor: true, children: "Domains       " }),
+          /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
+            allowedDomains.map((d) => {
+              const isAdded = registryAllowedDomains && !registryAllowedDomains.includes(d);
+              return /* @__PURE__ */ jsxs2(Box2, { gap: 1, children: [
+                /* @__PURE__ */ jsx2(Text2, { color: "green", children: "\u2022 " }),
+                /* @__PURE__ */ jsx2(Text2, { children: d }),
+                isAdded && /* @__PURE__ */ jsx2(Text2, { color: "green", dimColor: true, children: "(+ added)" })
+              ] }, d);
+            }),
+            registryAllowedDomains?.filter((d) => !allowedDomains.includes(d)).map((d) => /* @__PURE__ */ jsxs2(Box2, { gap: 1, children: [
+              /* @__PURE__ */ jsx2(Text2, { color: "red", children: "\u2022 " }),
+              /* @__PURE__ */ jsx2(Text2, { color: "red", dimColor: true, strikethrough: true, children: d }),
+              /* @__PURE__ */ jsx2(Text2, { color: "red", dimColor: true, children: "(- removed)" })
+            ] }, d))
+          ] })
         ] })
       ] })
     }
@@ -447,24 +500,151 @@ var SettingsPrompt = ({ defaultDir, onSubmit, onBack }) => {
   );
 };
 
-// src/components/UpdateSettingsPrompt.tsx
-import { Box as Box7, Text as Text7, useFocus as useFocus3, useFocusManager as useFocusManager3, useInput as useInput4 } from "ink";
-import TextInput4 from "ink-text-input";
+// src/components/ManifestReviewPrompt.tsx
+import { Box as Box7, Text as Text7, useInput as useInput4 } from "ink";
 import { useState as useState4 } from "react";
+
+// src/lib/manifest-diff.ts
+var diffManifestValues = (localValues, registryValues) => {
+  const localSet = new Set(localValues ?? []);
+  const registrySet = new Set(registryValues);
+  const all = /* @__PURE__ */ new Set([...localSet, ...registrySet]);
+  return [...all].map((value) => {
+    const inLocal = localSet.has(value);
+    const inRegistry = registrySet.has(value);
+    if (!inLocal) {
+      return { value, status: "removed", enabled: false };
+    }
+    return inRegistry ? { value, status: "unchanged", enabled: true } : { value, status: "new", enabled: false };
+  });
+};
+
+// src/components/ManifestReviewPrompt.tsx
 import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
-var FieldRow2 = ({ label, value, onChange, placeholder, autoFocus, isFirst, isLast, onSubmitAll }) => {
-  const { isFocused } = useFocus3({ autoFocus });
-  const { focusNext, focusPrevious } = useFocusManager3();
-  useInput4((_, key) => {
-    if (!isFocused) return;
+var statusLabel = (status) => {
+  switch (status) {
+    case "new":
+      return "(+ added)";
+    case "removed":
+      return "(- removed)";
+    case "unchanged":
+      return void 0;
+  }
+};
+var statusColor = (status) => {
+  switch (status) {
+    case "new":
+      return "green";
+    case "removed":
+      return "red";
+    case "unchanged":
+      return void 0;
+  }
+};
+var ManifestReviewPrompt = ({
+  localManifest,
+  registryManifest,
+  onSubmit,
+  onBack
+}) => {
+  const [permItems, setPermItems] = useState4(() => diffManifestValues(localManifest?.permissions, registryManifest.permissions));
+  const [domainItems, setDomainItems] = useState4(() => diffManifestValues(localManifest?.allowedDomains, registryManifest.allowedDomains));
+  const [cursor, setCursor] = useState4(0);
+  const totalItems = permItems.length + domainItems.length;
+  const cursorInPerms = cursor < permItems.length;
+  const cursorInDomains = cursor >= permItems.length;
+  const toggle = (index) => {
+    if (index < permItems.length) {
+      setPermItems((prev) => prev.map((item, i) => i === index ? { ...item, enabled: !item.enabled } : item));
+    } else {
+      const domainIndex = index - permItems.length;
+      setDomainItems((prev) => prev.map((item, i) => i === domainIndex ? { ...item, enabled: !item.enabled } : item));
+    }
+  };
+  const handleSubmit = () => {
+    onSubmit({
+      permissions: permItems.filter((i) => i.enabled).map((i) => i.value),
+      allowedDomains: domainItems.filter((i) => i.enabled).map((i) => i.value)
+    });
+  };
+  const domainSectionStart = permItems.length;
+  useInput4((input, key) => {
+    if (key.downArrow) {
+      setCursor((c) => Math.min(c + 1, totalItems - 1));
+      return;
+    }
+    if (key.upArrow) {
+      setCursor((c) => Math.max(c - 1, 0));
+      return;
+    }
     if (key.tab && !key.shift) {
-      if (!isLast) focusNext();
+      setCursor((c) => {
+        if (c < domainSectionStart && domainItems.length > 0) return domainSectionStart;
+        return c;
+      });
       return;
     }
     if (key.tab && key.shift) {
-      if (!isFirst) focusPrevious();
+      setCursor((c) => {
+        if (c >= domainSectionStart) return 0;
+        return c;
+      });
+      return;
+    }
+    if (input === " ") {
+      toggle(cursor);
       return;
     }
+    if (key.return) {
+      handleSubmit();
+    }
+  });
+  const renderItem = (item, index) => {
+    const isCursor = index === cursor;
+    return /* @__PURE__ */ jsxs7(Box7, { gap: 1, children: [
+      /* @__PURE__ */ jsx7(Text7, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
+      /* @__PURE__ */ jsx7(Text7, { color: item.enabled ? "green" : "gray", children: item.enabled ? "\u25C9" : "\u25CB" }),
+      /* @__PURE__ */ jsx7(Text7, { bold: isCursor, children: item.value }),
+      statusLabel(item.status) && /* @__PURE__ */ jsx7(Text7, { color: statusColor(item.status), dimColor: true, children: statusLabel(item.status) })
+    ] }, item.value);
+  };
+  return /* @__PURE__ */ jsx7(
+    StepShell,
+    {
+      title: "Review Manifest changes",
+      hint: "Tab/shift-tab to jump section, \u2191/\u2193 navigate. Enter to submit",
+      onBack,
+      children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", gap: 1, children: [
+        !localManifest && /* @__PURE__ */ jsx7(Text7, { color: "yellow", children: "No local manifest.json found \u2014 showing registry values only" }),
+        /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+          /* @__PURE__ */ jsx7(Text7, { dimColor: !cursorInPerms, bold: cursorInPerms, children: "Permissions".padEnd(14) }),
+          /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", paddingLeft: 2, children: [
+            permItems.length > 0 ? permItems.map((item, i) => renderItem(item, i)) : /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "  (none)" }),
+            cursorInPerms && /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "  (space to toggle)" })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+          /* @__PURE__ */ jsx7(Text7, { dimColor: !cursorInDomains, bold: cursorInDomains, children: "Allowed Domains".padEnd(14) }),
+          /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", paddingLeft: 2, children: [
+            domainItems.length > 0 ? domainItems.map((item, i) => renderItem(item, i + permItems.length)) : /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "  (none)" }),
+            cursorInDomains && /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "  (space to toggle)" })
+          ] })
+        ] })
+      ] })
+    }
+  );
+};
+
+// src/components/UpdateSettingsPrompt.tsx
+import { Box as Box8, Text as Text8, useFocus as useFocus3, useFocusManager as useFocusManager3, useInput as useInput5 } from "ink";
+import TextInput4 from "ink-text-input";
+import { useState as useState5 } from "react";
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+var FieldRow2 = ({ label, value, onChange, placeholder, autoFocus, isFirst, isLast, onSubmitAll }) => {
+  const { isFocused } = useFocus3({ autoFocus });
+  const { focusNext, focusPrevious } = useFocusManager3();
+  useInput5((_, key) => {
+    if (!isFocused) return;
     if (key.downArrow) {
       if (!isLast) focusNext();
       return;
@@ -477,29 +657,17 @@ var FieldRow2 = ({ label, value, onChange, placeholder, autoFocus, isFirst, isLa
       onSubmitAll();
     }
   });
-  return /* @__PURE__ */ jsxs7(Box7, { gap: 2, children: [
-    /* @__PURE__ */ jsx7(Text7, { dimColor: !isFocused, bold: isFocused, children: label.padEnd(14) }),
-    isFocused ? /* @__PURE__ */ jsx7(TextInput4, { value, onChange, placeholder }) : /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: value || placeholder || "" })
+  return /* @__PURE__ */ jsxs8(Box8, { gap: 2, children: [
+    /* @__PURE__ */ jsx8(Text8, { dimColor: !isFocused, bold: isFocused, children: label.padEnd(14) }),
+    isFocused ? /* @__PURE__ */ jsx8(TextInput4, { value, onChange, placeholder }) : /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: value || placeholder || "" })
   ] });
 };
 var TargetToggleRow = ({ targets, availableTargets, onToggle, autoFocus, isLast, onSubmitAll }) => {
   const { isFocused } = useFocus3({ autoFocus });
   const { focusNext, focusPrevious } = useFocusManager3();
-  const [cursor, setCursor] = useState4(0);
-  useInput4((input, key) => {
+  const [cursor, setCursor] = useState5(0);
+  useInput5((input, key) => {
     if (!isFocused) return;
-    if (key.tab && !key.shift) {
-      focusNext();
-      return;
-    }
-    if (key.tab && key.shift) {
-      if (cursor > 0) {
-        setCursor((c) => c - 1);
-      } else {
-        focusPrevious();
-      }
-      return;
-    }
     if (key.downArrow) {
       if (cursor < availableTargets.length - 1) {
         setCursor((c) => c + 1);
@@ -524,35 +692,27 @@ var TargetToggleRow = ({ targets, availableTargets, onToggle, autoFocus, isLast,
       onSubmitAll();
     }
   });
-  return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx7(Text7, { dimColor: !isFocused, bold: isFocused, children: "Targets".padEnd(14) }),
-    /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", paddingLeft: 2, children: [
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx8(Text8, { dimColor: !isFocused, bold: isFocused, children: "Targets".padEnd(14) }),
+    /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", paddingLeft: 2, children: [
       availableTargets.map((t, i) => {
         const selected = targets.includes(t);
         const isCursor = isFocused && i === cursor;
-        return /* @__PURE__ */ jsxs7(Box7, { gap: 1, children: [
-          /* @__PURE__ */ jsx7(Text7, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
-          /* @__PURE__ */ jsx7(Text7, { color: selected ? "green" : "gray", children: selected ? "\u25C9" : "\u25CB" }),
-          /* @__PURE__ */ jsx7(Text7, { bold: isCursor, children: t })
+        return /* @__PURE__ */ jsxs8(Box8, { gap: 1, children: [
+          /* @__PURE__ */ jsx8(Text8, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
+          /* @__PURE__ */ jsx8(Text8, { color: selected ? "green" : "gray", children: selected ? "\u25C9" : "\u25CB" }),
+          /* @__PURE__ */ jsx8(Text8, { bold: isCursor, children: t })
         ] }, t);
       }),
-      isFocused && /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "  (space to toggle)" })
+      isFocused && /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: "  (space to toggle)" })
     ] })
   ] });
 };
 var EnabledToggleRow = ({ enabled, onToggle, autoFocus, isLast, onSubmitAll }) => {
   const { isFocused } = useFocus3({ autoFocus });
   const { focusNext, focusPrevious } = useFocusManager3();
-  useInput4((input, key) => {
+  useInput5((input, key) => {
     if (!isFocused) return;
-    if (key.tab && !key.shift) {
-      if (!isLast) focusNext();
-      return;
-    }
-    if (key.tab && key.shift) {
-      focusPrevious();
-      return;
-    }
     if (key.downArrow) {
       if (!isLast) focusNext();
       return;
@@ -569,25 +729,17 @@ var EnabledToggleRow = ({ enabled, onToggle, autoFocus, isLast, onSubmitAll }) =
       onSubmitAll();
     }
   });
-  return /* @__PURE__ */ jsxs7(Box7, { gap: 2, children: [
-    /* @__PURE__ */ jsx7(Text7, { dimColor: !isFocused, bold: isFocused, children: "Enabled".padEnd(14) }),
-    /* @__PURE__ */ jsx7(Text7, { color: enabled ? "green" : "red", bold: isFocused, children: enabled ? "Yes" : "No" }),
-    isFocused && /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "(space/arrows to toggle)" })
+  return /* @__PURE__ */ jsxs8(Box8, { gap: 2, children: [
+    /* @__PURE__ */ jsx8(Text8, { dimColor: !isFocused, bold: isFocused, children: "Enabled".padEnd(14) }),
+    /* @__PURE__ */ jsx8(Text8, { color: enabled ? "green" : "red", bold: isFocused, children: enabled ? "Yes" : "No" }),
+    isFocused && /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: "(space/arrows to toggle)" })
   ] });
 };
 var ForceMajorToggleRow = ({ forceMajor, onToggle, autoFocus, isLast, onSubmitAll }) => {
   const { isFocused } = useFocus3({ autoFocus });
   const { focusPrevious, focusNext } = useFocusManager3();
-  useInput4((input, key) => {
+  useInput5((input, key) => {
     if (!isFocused) return;
-    if (key.tab && !key.shift) {
-      if (!isLast) focusNext();
-      return;
-    }
-    if (key.tab && key.shift) {
-      focusPrevious();
-      return;
-    }
     if (key.downArrow) {
       if (!isLast) focusNext();
       return;
@@ -604,10 +756,10 @@ var ForceMajorToggleRow = ({ forceMajor, onToggle, autoFocus, isLast, onSubmitAl
       onSubmitAll();
     }
   });
-  return /* @__PURE__ */ jsxs7(Box7, { gap: 2, children: [
-    /* @__PURE__ */ jsx7(Text7, { dimColor: !isFocused, bold: isFocused, children: "Force major".padEnd(14) }),
-    /* @__PURE__ */ jsx7(Text7, { color: forceMajor ? "yellow" : "gray", bold: isFocused, children: forceMajor ? "Yes" : "No" }),
-    isFocused && /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "(space/arrows to toggle)" })
+  return /* @__PURE__ */ jsxs8(Box8, { gap: 2, children: [
+    /* @__PURE__ */ jsx8(Text8, { dimColor: !isFocused, bold: isFocused, children: "Force major".padEnd(14) }),
+    /* @__PURE__ */ jsx8(Text8, { color: forceMajor ? "yellow" : "gray", bold: isFocused, children: forceMajor ? "Yes" : "No" }),
+    isFocused && /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: "(space/arrows to toggle)" })
   ] });
 };
 var UpdateSettingsPrompt = ({
@@ -619,11 +771,11 @@ var UpdateSettingsPrompt = ({
   onSubmit,
   onBack
 }) => {
-  const [nameValue, setNameValue] = useState4(initialName);
-  const [targetsValue, setTargetsValue] = useState4(initialTargets);
-  const [bundleUrlValue, setBundleUrlValue] = useState4(initialBundleUrl);
-  const [enabledValue, setEnabledValue] = useState4(initialEnabled);
-  const [forceMajorValue, setForceMajorValue] = useState4(false);
+  const [nameValue, setNameValue] = useState5(initialName);
+  const [targetsValue, setTargetsValue] = useState5(initialTargets);
+  const [bundleUrlValue, setBundleUrlValue] = useState5(initialBundleUrl);
+  const [enabledValue, setEnabledValue] = useState5(initialEnabled);
+  const [forceMajorValue, setForceMajorValue] = useState5(false);
   const handleToggleTarget = (target) => {
     setTargetsValue((prev) => prev.includes(target) ? prev.filter((t) => t !== target) : [...prev, target]);
   };
@@ -637,14 +789,14 @@ var UpdateSettingsPrompt = ({
       forceMajor: forceMajorValue
     });
   };
-  return /* @__PURE__ */ jsx7(
+  return /* @__PURE__ */ jsx8(
     StepShell,
     {
       title: "Update Extension settings",
-      hint: "Tab/arrows to navigate, Enter to submit",
+      hint: "Tab/shift-tab to jump section, \u2191/\u2193 navigate. Enter to submit",
       onBack,
-      children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsx7(
+      children: /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsx8(
           FieldRow2,
           {
             label: "Name",
@@ -656,7 +808,7 @@ var UpdateSettingsPrompt = ({
             onSubmitAll: handleSubmitAll
           }
         ),
-        /* @__PURE__ */ jsx7(
+        /* @__PURE__ */ jsx8(
           TargetToggleRow,
           {
             targets: targetsValue,
@@ -665,7 +817,7 @@ var UpdateSettingsPrompt = ({
             onSubmitAll: handleSubmitAll
           }
         ),
-        /* @__PURE__ */ jsx7(
+        /* @__PURE__ */ jsx8(
           FieldRow2,
           {
             label: "Bundle URL",
@@ -675,7 +827,7 @@ var UpdateSettingsPrompt = ({
             onSubmitAll: handleSubmitAll
           }
         ),
-        /* @__PURE__ */ jsx7(
+        /* @__PURE__ */ jsx8(
           EnabledToggleRow,
           {
             enabled: enabledValue,
@@ -683,7 +835,7 @@ var UpdateSettingsPrompt = ({
             onSubmitAll: handleSubmitAll
           }
         ),
-        /* @__PURE__ */ jsx7(
+        /* @__PURE__ */ jsx8(
           ForceMajorToggleRow,
           {
             forceMajor: forceMajorValue,
@@ -698,33 +850,33 @@ var UpdateSettingsPrompt = ({
 };
 
 // src/components/ScaffoldProgress.tsx
-import { Box as Box8, Text as Text8 } from "ink";
+import { Box as Box9, Text as Text9 } from "ink";
 import Spinner from "ink-spinner";
-import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
 var stepIcon = (status) => {
   switch (status) {
     case "running":
-      return /* @__PURE__ */ jsx8(Spinner, { type: "dots" });
+      return /* @__PURE__ */ jsx9(Spinner, { type: "dots" });
     case "done":
-      return /* @__PURE__ */ jsx8(Text8, { color: "green", children: "\u2714" });
+      return /* @__PURE__ */ jsx9(Text9, { color: "green", children: "\u2714" });
     case "error":
-      return /* @__PURE__ */ jsx8(Text8, { color: "red", children: "\u2716" });
+      return /* @__PURE__ */ jsx9(Text9, { color: "red", children: "\u2716" });
     default:
-      return /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: "\u25CB" });
+      return /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "\u25CB" });
   }
 };
-var ScaffoldProgress = ({ steps }) => /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", gap: 1, children: [
-  /* @__PURE__ */ jsx8(Text8, { bold: true, children: "Scaffolding your Extension\u2026" }),
-  /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", children: steps.map((step) => /* @__PURE__ */ jsxs8(Box8, { gap: 2, children: [
+var ScaffoldProgress = ({ steps }) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", gap: 1, children: [
+  /* @__PURE__ */ jsx9(Text9, { bold: true, children: "Scaffolding your Extension\u2026" }),
+  /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", children: steps.map((step) => /* @__PURE__ */ jsxs9(Box9, { gap: 2, children: [
     stepIcon(step.status),
-    /* @__PURE__ */ jsx8(Text8, { dimColor: step.status === "pending", color: step.status === "running" ? "cyan" : void 0, children: step.label })
+    /* @__PURE__ */ jsx9(Text9, { dimColor: step.status === "pending", color: step.status === "running" ? "cyan" : void 0, children: step.label })
   ] }, step.label)) })
 ] });
 
 // src/components/TargetSelect.tsx
-import { Box as Box9, Text as Text9, useInput as useInput5 } from "ink";
-import { useState as useState5 } from "react";
-import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+import { Box as Box10, Text as Text10, useInput as useInput6 } from "ink";
+import { useState as useState6 } from "react";
+import { jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
 var TARGET_DESCRIPTIONS = {
   "slot.header": "Renders content in the panel header area",
   "slot.content": "Renders the main panel body (includes store + navigation state)",
@@ -732,12 +884,12 @@ var TARGET_DESCRIPTIONS = {
   "slot.footer-links": "Renders a link row in the global footer"
 };
 var TargetSelect = ({ availableTargets, preSelected, onSubmit, onBack }) => {
-  const [cursor, setCursor] = useState5(0);
-  const [selected, setSelected] = useState5(
+  const [cursor, setCursor] = useState6(0);
+  const [selected, setSelected] = useState6(
     new Set(preSelected ?? (availableTargets.includes("slot.content") ? ["slot.content"] : []))
   );
-  const [error, setError] = useState5();
-  useInput5((input, key) => {
+  const [error, setError] = useState6();
+  useInput6((input, key) => {
     if (key.upArrow) {
       setCursor((c) => Math.max(0, c - 1));
       return;
@@ -768,39 +920,39 @@ var TargetSelect = ({ availableTargets, preSelected, onSubmit, onBack }) => {
       onSubmit([...selected]);
     }
   });
-  return /* @__PURE__ */ jsxs9(
+  return /* @__PURE__ */ jsxs10(
     StepShell,
     {
       title: "Select Surface targets/slots",
       hint: "Space to toggle, Enter to confirm",
       onBack,
       children: [
-        /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", gap: 1, children: availableTargets.map((target, i) => {
+        /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", gap: 1, children: availableTargets.map((target, i) => {
           const isSelected = selected.has(target);
           const isCursor = i === cursor;
-          return /* @__PURE__ */ jsxs9(Box9, { gap: 1, children: [
-            /* @__PURE__ */ jsx9(Text9, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
-            /* @__PURE__ */ jsx9(Text9, { color: isSelected ? "green" : void 0, children: isSelected ? "\u25C9" : "\u25CB" }),
-            /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-              /* @__PURE__ */ jsx9(Text9, { bold: isSelected, children: target }),
-              /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: TARGET_DESCRIPTIONS[target] ?? target })
+          return /* @__PURE__ */ jsxs10(Box10, { gap: 1, children: [
+            /* @__PURE__ */ jsx10(Text10, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
+            /* @__PURE__ */ jsx10(Text10, { color: isSelected ? "green" : void 0, children: isSelected ? "\u25C9" : "\u25CB" }),
+            /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+              /* @__PURE__ */ jsx10(Text10, { bold: isSelected, children: target }),
+              /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: TARGET_DESCRIPTIONS[target] ?? target })
             ] })
           ] }, target);
         }) }),
-        error && /* @__PURE__ */ jsx9(Text9, { color: "red", children: error })
+        error && /* @__PURE__ */ jsx10(Text10, { color: "red", children: error })
       ]
     }
   );
 };
 
 // src/components/TemplateSelect.tsx
-import { Box as Box10, Text as Text10, useInput as useInput6 } from "ink";
-import { useState as useState6 } from "react";
-import { jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
+import { Box as Box11, Text as Text11, useInput as useInput7 } from "ink";
+import { useState as useState7 } from "react";
+import { jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
 var FLAVORS = ["minimal", "starter", "kitchen-sink"];
 var TemplateSelect = ({ onSubmit, onBack }) => {
-  const [cursor, setCursor] = useState6(1);
-  useInput6((_input, key) => {
+  const [cursor, setCursor] = useState7(1);
+  useInput7((_input, key) => {
     if (key.upArrow) {
       setCursor((c) => Math.max(0, c - 1));
       return;
@@ -813,21 +965,21 @@ var TemplateSelect = ({ onSubmit, onBack }) => {
       onSubmit(FLAVORS[cursor]);
     }
   });
-  return /* @__PURE__ */ jsx10(
+  return /* @__PURE__ */ jsx11(
     StepShell,
     {
       title: "Choose a template",
       hint: "\u2191\u2193 to navigate, Enter to select",
       onBack,
-      children: /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", gap: 1, children: FLAVORS.map((flavor, i) => {
+      children: /* @__PURE__ */ jsx11(Box11, { flexDirection: "column", gap: 1, children: FLAVORS.map((flavor, i) => {
         const meta = TEMPLATE_FLAVOR_META[flavor];
         const isCursor = i === cursor;
-        return /* @__PURE__ */ jsxs10(Box10, { gap: 1, children: [
-          /* @__PURE__ */ jsx10(Text10, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
-          /* @__PURE__ */ jsx10(Text10, { color: isCursor ? "green" : void 0, children: isCursor ? "\u25C9" : "\u25CB" }),
-          /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
-            /* @__PURE__ */ jsx10(Text10, { bold: isCursor, children: meta.label }),
-            /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: meta.description })
+        return /* @__PURE__ */ jsxs11(Box11, { gap: 1, children: [
+          /* @__PURE__ */ jsx11(Text11, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
+          /* @__PURE__ */ jsx11(Text11, { color: isCursor ? "green" : void 0, children: isCursor ? "\u25C9" : "\u25CB" }),
+          /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+            /* @__PURE__ */ jsx11(Text11, { bold: isCursor, children: meta.label }),
+            /* @__PURE__ */ jsx11(Text11, { dimColor: true, children: meta.description })
           ] })
         ] }, flavor);
       }) })
@@ -836,9 +988,9 @@ var TemplateSelect = ({ onSubmit, onBack }) => {
 };
 
 // src/components/AppSelect.tsx
-import { Box as Box12, Text as Text12, useInput as useInput7 } from "ink";
+import { Box as Box13, Text as Text13, useInput as useInput8 } from "ink";
 import Spinner2 from "ink-spinner";
-import { useEffect as useEffect2, useState as useState7 } from "react";
+import { useEffect as useEffect2, useState as useState8 } from "react";
 
 // src/lib/api.ts
 var DEFAULT_ADMIN_API_URL = "https://api-use1.stackablelabs.io/admin";
@@ -915,8 +1067,8 @@ var updateExtension = async (token, appId, extensionId, payload) => {
 };
 
 // src/components/Banner.tsx
-import { Box as Box11, Text as Text11 } from "ink";
-import { jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
+import { Box as Box12, Text as Text12 } from "ink";
+import { jsx as jsx12, jsxs as jsxs12 } from "react/jsx-runtime";
 var WORDMARK = [
   "     _             _         _     _      ",
   " ___| |_ __ _  ___| | ____ _| |__ | | ___",
@@ -952,18 +1104,18 @@ var gradientColor = (row, col, rows, cols) => {
 var Banner = ({ userId, orgId } = {}) => {
   const termWidth = process.stdout.columns ?? 80;
   const maxLen = Math.max(...WORDMARK.map((l) => l.length));
-  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx11(Text11, { dimColor: true, children: "\u2500".repeat(termWidth) }),
-    /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", paddingX: 1, paddingY: 1, children: [
-      WORDMARK.map((line, row) => /* @__PURE__ */ jsx11(Box11, { children: line.split("").map((ch, col) => /* @__PURE__ */ jsx11(Text11, { bold: true, color: ch === " " ? void 0 : gradientColor(row, col, WORDMARK.length, maxLen), children: ch }, col)) }, row)),
-      userId && orgId && /* @__PURE__ */ jsxs11(Box11, { gap: 2, marginTop: 1, children: [
-        /* @__PURE__ */ jsxs11(Box11, { gap: 1, children: [
-          /* @__PURE__ */ jsx11(Text11, { dimColor: true, children: "User:" }),
-          /* @__PURE__ */ jsx11(Text11, { color: "cyan", children: userId })
+  return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx12(Text12, { dimColor: true, children: "\u2500".repeat(termWidth) }),
+    /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", paddingX: 1, paddingY: 1, children: [
+      WORDMARK.map((line, row) => /* @__PURE__ */ jsx12(Box12, { children: line.split("").map((ch, col) => /* @__PURE__ */ jsx12(Text12, { bold: true, color: ch === " " ? void 0 : gradientColor(row, col, WORDMARK.length, maxLen), children: ch }, col)) }, row)),
+      userId && orgId && /* @__PURE__ */ jsxs12(Box12, { gap: 2, marginTop: 1, children: [
+        /* @__PURE__ */ jsxs12(Box12, { gap: 1, children: [
+          /* @__PURE__ */ jsx12(Text12, { dimColor: true, children: "User:" }),
+          /* @__PURE__ */ jsx12(Text12, { color: "cyan", children: userId })
         ] }),
-        /* @__PURE__ */ jsxs11(Box11, { gap: 1, children: [
-          /* @__PURE__ */ jsx11(Text11, { dimColor: true, children: "Org:" }),
-          /* @__PURE__ */ jsx11(Text11, { color: "cyan", children: orgId })
+        /* @__PURE__ */ jsxs12(Box12, { gap: 1, children: [
+          /* @__PURE__ */ jsx12(Text12, { dimColor: true, children: "Org:" }),
+          /* @__PURE__ */ jsx12(Text12, { color: "cyan", children: orgId })
         ] })
       ] })
     ] })
@@ -971,16 +1123,16 @@ var Banner = ({ userId, orgId } = {}) => {
 };
 
 // src/components/AppSelect.tsx
-import { jsx as jsx12, jsxs as jsxs12 } from "react/jsx-runtime";
+import { jsx as jsx13, jsxs as jsxs13 } from "react/jsx-runtime";
 var AppSelect = ({ token, userId, orgId, onSubmit }) => {
-  const [apps, setApps] = useState7([]);
-  const [loading, setLoading] = useState7(true);
-  const [error, setError] = useState7();
-  const [cursor, setCursor] = useState7(0);
+  const [apps, setApps] = useState8([]);
+  const [loading, setLoading] = useState8(true);
+  const [error, setError] = useState8();
+  const [cursor, setCursor] = useState8(0);
   useEffect2(() => {
     fetchApps(token).then(setApps).catch((err) => setError(err instanceof Error ? err.message : String(err))).finally(() => setLoading(false));
   }, [token]);
-  useInput7((_, key) => {
+  useInput8((_, key) => {
     if (loading || error || apps.length === 0) return;
     if (key.upArrow) {
       setCursor((c) => Math.max(0, c - 1));
@@ -992,26 +1144,26 @@ var AppSelect = ({ token, userId, orgId, onSubmit }) => {
   });
   const renderContent = () => {
     if (loading) {
-      return /* @__PURE__ */ jsxs12(Box12, { gap: 2, children: [
-        /* @__PURE__ */ jsx12(Spinner2, { type: "dots" }),
-        /* @__PURE__ */ jsx12(Text12, { children: "Loading available Apps\u2026" })
+      return /* @__PURE__ */ jsxs13(Box13, { gap: 2, children: [
+        /* @__PURE__ */ jsx13(Spinner2, { type: "dots" }),
+        /* @__PURE__ */ jsx13(Text13, { children: "Loading available Apps\u2026" })
       ] });
     }
     if (error) {
-      return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsx12(Text12, { color: "red", bold: true, children: "Failed to load Apps" }),
-        /* @__PURE__ */ jsx12(Text12, { color: "red", children: error })
+      return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsx13(Text13, { color: "red", bold: true, children: "Failed to load Apps" }),
+        /* @__PURE__ */ jsx13(Text13, { color: "red", children: error })
       ] });
     }
     if (apps.length === 0) {
-      return /* @__PURE__ */ jsx12(Text12, { color: "yellow", children: "No Apps available. Contact your administrator." });
+      return /* @__PURE__ */ jsx13(Text13, { color: "yellow", children: "No Apps available. Contact your administrator." });
     }
-    return /* @__PURE__ */ jsx12(Box12, { flexDirection: "column", children: apps.map((app, i) => {
+    return /* @__PURE__ */ jsx13(Box13, { flexDirection: "column", children: apps.map((app, i) => {
       const isCursor = i === cursor;
-      return /* @__PURE__ */ jsxs12(Box12, { gap: 1, children: [
-        /* @__PURE__ */ jsx12(Text12, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
-        /* @__PURE__ */ jsx12(Text12, { bold: isCursor, children: app.name }),
-        /* @__PURE__ */ jsxs12(Text12, { dimColor: true, children: [
+      return /* @__PURE__ */ jsxs13(Box13, { gap: 1, children: [
+        /* @__PURE__ */ jsx13(Text13, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
+        /* @__PURE__ */ jsx13(Text13, { bold: isCursor, children: app.name }),
+        /* @__PURE__ */ jsxs13(Text13, { dimColor: true, children: [
           "(",
           app.id,
           ")"
@@ -1019,26 +1171,26 @@ var AppSelect = ({ token, userId, orgId, onSubmit }) => {
       ] }, app.id);
     }) });
   };
-  return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx12(Banner, { userId, orgId }),
-    /* @__PURE__ */ jsx12(StepShell, { title: "Select the App you are building an Extension for:", children: renderContent() })
+  return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx13(Banner, { userId, orgId }),
+    /* @__PURE__ */ jsx13(StepShell, { title: "Select the App you are building an Extension for:", children: renderContent() })
   ] });
 };
 
 // src/components/ExtensionSelect.tsx
-import { Box as Box13, Text as Text13, useInput as useInput8 } from "ink";
+import { Box as Box14, Text as Text14, useInput as useInput9 } from "ink";
 import Spinner3 from "ink-spinner";
-import { useEffect as useEffect3, useState as useState8 } from "react";
-import { jsx as jsx13, jsxs as jsxs13 } from "react/jsx-runtime";
+import { useEffect as useEffect3, useState as useState9 } from "react";
+import { jsx as jsx14, jsxs as jsxs14 } from "react/jsx-runtime";
 var ExtensionSelect = ({ appId, token, command, onSubmit, onBack }) => {
-  const [extensions, setExtensions] = useState8([]);
-  const [loading, setLoading] = useState8(true);
-  const [error, setError] = useState8();
-  const [cursor, setCursor] = useState8(0);
+  const [extensions, setExtensions] = useState9([]);
+  const [loading, setLoading] = useState9(true);
+  const [error, setError] = useState9();
+  const [cursor, setCursor] = useState9(0);
   useEffect3(() => {
     fetchExtensions(token, appId).then((byId) => setExtensions(Object.values(byId))).catch((err) => setError(err instanceof Error ? err.message : String(err))).finally(() => setLoading(false));
   }, [appId, token]);
-  useInput8((_, key) => {
+  useInput9((_, key) => {
     if (key.upArrow) {
       if (!loading && !error && extensions.length > 0) {
         setCursor((c) => Math.max(0, c - 1));
@@ -1059,30 +1211,30 @@ var ExtensionSelect = ({ appId, token, command, onSubmit, onBack }) => {
   });
   const renderContent = () => {
     if (loading) {
-      return /* @__PURE__ */ jsxs13(Box13, { gap: 2, children: [
-        /* @__PURE__ */ jsx13(Spinner3, { type: "dots" }),
-        /* @__PURE__ */ jsx13(Text13, { children: "Loading Extensions\u2026" })
+      return /* @__PURE__ */ jsxs14(Box14, { gap: 2, children: [
+        /* @__PURE__ */ jsx14(Spinner3, { type: "dots" }),
+        /* @__PURE__ */ jsx14(Text14, { children: "Loading Extensions\u2026" })
       ] });
     }
     if (error) {
-      return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsx13(Text13, { color: "red", bold: true, children: "Failed to load Extensions" }),
-        /* @__PURE__ */ jsx13(Text13, { color: "red", children: error })
+      return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsx14(Text14, { color: "red", bold: true, children: "Failed to load Extensions" }),
+        /* @__PURE__ */ jsx14(Text14, { color: "red", children: error })
       ] });
     }
     if (extensions.length === 0) {
-      return /* @__PURE__ */ jsx13(Text13, { color: "yellow", children: "No Extensions found for this App." });
+      return /* @__PURE__ */ jsx14(Text14, { color: "yellow", children: "No Extensions found for this App." });
     }
-    return /* @__PURE__ */ jsx13(Box13, { flexDirection: "column", children: extensions.map((ext, i) => {
+    return /* @__PURE__ */ jsx14(Box14, { flexDirection: "column", children: extensions.map((ext, i) => {
       const isCursor = i === cursor;
-      return /* @__PURE__ */ jsxs13(Box13, { gap: 1, children: [
-        /* @__PURE__ */ jsx13(Text13, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
-        /* @__PURE__ */ jsx13(Text13, { bold: isCursor, children: ext.manifest.name }),
-        /* @__PURE__ */ jsxs13(Text13, { dimColor: true, children: [
+      return /* @__PURE__ */ jsxs14(Box14, { gap: 1, children: [
+        /* @__PURE__ */ jsx14(Text14, { color: isCursor ? "cyan" : void 0, children: isCursor ? "\u276F" : " " }),
+        /* @__PURE__ */ jsx14(Text14, { bold: isCursor, children: ext.manifest.name }),
+        /* @__PURE__ */ jsxs14(Text14, { dimColor: true, children: [
           "v",
           ext.manifest.version
         ] }),
-        /* @__PURE__ */ jsxs13(Text13, { dimColor: true, children: [
+        /* @__PURE__ */ jsxs14(Text14, { dimColor: true, children: [
           "(",
           ext.id,
           ")"
@@ -1090,7 +1242,7 @@ var ExtensionSelect = ({ appId, token, command, onSubmit, onBack }) => {
       ] }, ext.id);
     }) });
   };
-  return /* @__PURE__ */ jsx13(
+  return /* @__PURE__ */ jsx14(
     StepShell,
     {
       title: command === "update" /* UPDATE */ ? "Select an Extension to update:" : "Select an existing Extension to scaffold:",
@@ -1161,10 +1313,11 @@ var readDevContext = async (projectRoot) => {
   const stackableEnv = await readEnvFile(join(projectRoot, ".env.stackable"));
   const env = await readEnvFile(join(projectRoot, ".env"));
   let extensionName = stackableEnv.EXTENSION_NAME || "Unknown Extension";
+  let manifest = null;
   try {
     const manifestPath = join(projectRoot, "packages/extension/public/manifest.json");
     const manifestContent = await readFile(manifestPath, "utf8");
-    const manifest = JSON.parse(manifestContent);
+    manifest = JSON.parse(manifestContent);
     extensionName = manifest.name;
   } catch {
   }
@@ -1179,7 +1332,8 @@ var readDevContext = async (projectRoot) => {
     appName: stackableEnv.APP_NAME || null,
     orgId: stackableEnv.ORG_ID || null,
     extensionPort,
-    previewPort
+    previewPort,
+    manifest
   };
 };
 var DEV_LOCAL_ENV = ".env.development.local";
@@ -1209,11 +1363,13 @@ var writeDevContext = async (projectRoot, ctx) => {
   await writeEnvFile(join(projectRoot, ".env.stackable"), env);
 };
 
-// src/lib/scaffold.ts
+// src/lib/utils.ts
 var toKebabCase = (value) => value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+
+// src/lib/scaffold.ts
 var isTextFile = (filePath) => /\.(ts|tsx|js|jsx|json|md|html|yml|yaml|env|gitignore|nvmrc)$/i.test(filePath);
 var normalizeTargets = (targets) => Array.from(new Set(targets));
-var derivePermissions = (targets) => {
+var deriveScaffoldPermissions = (targets) => {
   const permissions = /* @__PURE__ */ new Set();
   for (const target of targets) {
     for (const permission of TARGET_PERMISSION_MAP[target] ?? DEFAULT_PERMISSIONS) {
@@ -1529,6 +1685,7 @@ var scaffold = async (options) => {
   const templateSource = TEMPLATE_SOURCES[flavor];
   const { dir } = await downloadTemplate(templateSource, {
     dir: options.outputDir,
+    forceClean: true,
     force: true
   });
   await replacePlaceholders(dir, {
@@ -1539,7 +1696,7 @@ var scaffold = async (options) => {
   });
   if (flavor === "starter") {
     const selectedTargets = normalizeTargets(options.targets);
-    const derivedPermissions = derivePermissions(selectedTargets);
+    const derivedPermissions = deriveScaffoldPermissions(selectedTargets);
     await generateManifest(dir, options.name, selectedTargets, derivedPermissions);
     await generateSurfaceFiles(dir, selectedTargets);
     await rewriteExtensionIndex(dir, options.extensionId || options.name, selectedTargets);
@@ -1557,17 +1714,18 @@ var scaffold = async (options) => {
     appName: options.appName || null,
     extensionName: options.name,
     extensionPort: options.extensionPort,
-    previewPort: options.previewPort
+    previewPort: options.previewPort,
+    manifest: null
   });
   return options;
 };
 
 // src/App.tsx
-import { jsx as jsx14, jsxs as jsxs14 } from "react/jsx-runtime";
+import { jsx as jsx15, jsxs as jsxs15 } from "react/jsx-runtime";
 var STEPS = {
   ["create" /* CREATE */]: ["app", "name", "template", "targets", "settings", "confirm"],
   ["scaffold" /* SCAFFOLD */]: ["app", "extensionSelect", "confirmTargets", "settings", "confirm"],
-  ["update" /* UPDATE */]: ["app", "extensionSelect", "updateSettings", "confirm"],
+  ["update" /* UPDATE */]: ["app", "extensionSelect", "updateSettings", "manifestReview", "confirm"],
   ["dev" /* DEV */]: []
   // Dev command has no wizard steps
 };
@@ -1589,8 +1747,7 @@ var PROGRESS_STEPS = {
   ["dev" /* DEV */]: []
   // Dev command has no progress steps
 };
-var toKebabCase2 = (value) => value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-var derivePermissions2 = (targets) => {
+var deriveRegistryPermissions = (targets) => {
   const permissions = /* @__PURE__ */ new Set();
   for (const target of targets) {
     const mapped = TARGET_PERMISSION_MAP[target];
@@ -1609,33 +1766,37 @@ var derivePermissions2 = (targets) => {
 };
 var App = ({ command, token, userId, orgId, initialName, initialExtensionId, options }) => {
   const { exit } = useApp();
-  const [step, setStep] = useState9("app");
-  const [name, setName] = useState9(initialName ?? options?.name ?? "");
-  const [extensionId, setExtensionId] = useState9(initialExtensionId ?? "");
-  const [extensionVersion, setExtensionVersion] = useState9("");
-  const [bundleUrl, setBundleUrl] = useState9(options?.bundleUrl ?? "");
-  const [enabled, setEnabled] = useState9(
+  const [step, setStep] = useState10("app");
+  const [name, setName] = useState10(initialName ?? options?.name ?? "");
+  const [extensionId, setExtensionId] = useState10(initialExtensionId ?? "");
+  const [extensionVersion, setExtensionVersion] = useState10("");
+  const [bundleUrl, setBundleUrl] = useState10(options?.bundleUrl ?? "");
+  const [enabled, setEnabled] = useState10(
     options?.enabled !== void 0 ? options.enabled !== "false" : true
   );
-  const [versionOverride, setVersionOverride] = useState9(void 0);
-  const [forceMajor, setForceMajor] = useState9(false);
-  const [initialExtension, setInitialExtension] = useState9(null);
-  const [templateFlavor, setTemplateFlavor] = useState9(
+  const [versionOverride, setVersionOverride] = useState10(void 0);
+  const [forceMajor, setForceMajor] = useState10(false);
+  const [initialExtension, setInitialExtension] = useState10(null);
+  const [templateFlavor, setTemplateFlavor] = useState10(
     options?.template ?? "starter"
   );
-  const [targets, setTargets] = useState9(
+  const [targets, setTargets] = useState10(
     options?.targets ? options.targets.split(",").map((t) => t.trim()) : []
   );
-  const [selectedApp, setSelectedApp] = useState9(null);
-  const [extensionPort, setExtensionPort] = useState9(
+  const [selectedApp, setSelectedApp] = useState10(null);
+  const [extensionPort, setExtensionPort] = useState10(
     options?.extensionPort ? parseInt(options.extensionPort, 10) : 6543
   );
-  const [previewPort, setPreviewPort] = useState9(
+  const [previewPort, setPreviewPort] = useState10(
     options?.previewPort ? parseInt(options.previewPort, 10) : 6544
   );
-  const [outputDir, setOutputDir] = useState9("");
-  const [progressSteps, setProgressSteps] = useState9(PROGRESS_STEPS[command]);
-  const [errorMessage, setErrorMessage] = useState9();
+  const [registryManifest, setRegistryManifest] = useState10(null);
+  const [localManifest, setLocalManifest] = useState10(null);
+  const [confirmedPermissions, setConfirmedPermissions] = useState10([]);
+  const [confirmedAllowedDomains, setConfirmedAllowedDomains] = useState10([]);
+  const [outputDir, setOutputDir] = useState10("");
+  const [progressSteps, setProgressSteps] = useState10(PROGRESS_STEPS[command]);
+  const [errorMessage, setErrorMessage] = useState10();
   const updateStep = useCallback((index, status) => {
     setProgressSteps((prev) => prev.map((s, i) => i === index ? { ...s, status } : s));
   }, []);
@@ -1670,8 +1831,47 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       return idx > 0 ? steps[idx - 1] : prev;
     });
   }, [activeSteps]);
-  const handleAppSelect = (app) => {
+  const handleAppSelect = async (app) => {
     setSelectedApp(app);
+    if (command === "update" /* UPDATE */ && initialExtensionId) {
+      try {
+        const extensions = await fetchExtensions(token, app.id);
+        const ext = extensions[initialExtensionId];
+        if (!ext) {
+          setErrorMessage(
+            `Extension "${initialExtensionId}" not found or is disabled. If disabled, re-enable it in the admin dashboard before updating.`
+          );
+          setStep("error");
+          return;
+        }
+        setName(ext.manifest.name);
+        setExtensionId(ext.id);
+        setExtensionVersion(ext.manifest.version);
+        setTargets(ext.manifest.targets);
+        setBundleUrl(ext.bundleUrl);
+        setEnabled(ext.enabled ?? true);
+        setInitialExtension({
+          name: ext.manifest.name,
+          targets: ext.manifest.targets,
+          bundleUrl: ext.bundleUrl
+        });
+        setRegistryManifest(ext.manifest);
+        const projectRoot = options?.dir || process.cwd();
+        try {
+          const manifestPath = join3(projectRoot, "packages/extension/public/manifest.json");
+          const content = await readFile3(manifestPath, "utf8");
+          setLocalManifest(JSON.parse(content));
+        } catch {
+          setLocalManifest(null);
+        }
+        setStep("updateSettings");
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        setErrorMessage(message);
+        setStep("error");
+      }
+      return;
+    }
     if (command === "scaffold" /* SCAFFOLD */ || command === "update" /* UPDATE */) {
       setStep("extensionSelect");
       return;
@@ -1682,7 +1882,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
         if (meta.skipTargetStep && meta.defaultTargets) {
           setTargets(meta.defaultTargets);
           if (options?.extensionPort || options?.previewPort) {
-            setOutputDir(join3(process.cwd(), toKebabCase2(initialName)));
+            setOutputDir(join3(process.cwd(), toKebabCase(initialName)));
             setStep("confirm");
           } else {
             setStep("settings");
@@ -1697,7 +1897,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       setStep("name");
     }
   };
-  const handleExtensionSelect = (ext) => {
+  const handleExtensionSelect = async (ext) => {
     setName(ext.manifest.name);
     setExtensionId(ext.id);
     setExtensionVersion(ext.manifest.version);
@@ -1709,6 +1909,15 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       targets: ext.manifest.targets,
       bundleUrl: ext.bundleUrl
     });
+    setRegistryManifest(ext.manifest);
+    const projectRoot = options?.dir || process.cwd();
+    try {
+      const manifestPath = join3(projectRoot, "packages/extension/public/manifest.json");
+      const content = await readFile3(manifestPath, "utf8");
+      setLocalManifest(JSON.parse(content));
+    } catch {
+      setLocalManifest(null);
+    }
     if (command === "scaffold" /* SCAFFOLD */) {
       setStep("confirmTargets");
     } else if (command === "update" /* UPDATE */) {
@@ -1718,7 +1927,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
   const handleConfirmTargets = (value) => {
     setTargets(value);
     if (options?.extensionPort || options?.previewPort) {
-      setOutputDir(join3(process.cwd(), toKebabCase2(extensionId || name)));
+      setOutputDir(join3(process.cwd(), toKebabCase(extensionId || name)));
       setStep("confirm");
     } else {
       setStep("settings");
@@ -1726,13 +1935,13 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
   };
   const handleName = (value) => {
     setName(value);
-    setExtensionId(toKebabCase2(value));
+    setExtensionId(toKebabCase(value));
     if (options?.template) {
       const meta = TEMPLATE_FLAVOR_META[templateFlavor];
       if (meta.skipTargetStep && meta.defaultTargets) {
         setTargets(meta.defaultTargets);
         if (options?.extensionPort || options?.previewPort) {
-          setOutputDir(join3(process.cwd(), toKebabCase2(value)));
+          setOutputDir(join3(process.cwd(), toKebabCase(value)));
           setStep("confirm");
         } else {
           setStep("settings");
@@ -1750,7 +1959,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
     if (meta.skipTargetStep && meta.defaultTargets) {
       setTargets(meta.defaultTargets);
       if (options?.extensionPort || options?.previewPort) {
-        setOutputDir(join3(process.cwd(), toKebabCase2(extensionId || name)));
+        setOutputDir(join3(process.cwd(), toKebabCase(extensionId || name)));
         setStep("confirm");
       } else {
         setStep("settings");
@@ -1762,7 +1971,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
   const handleTargets = (value) => {
     setTargets(value);
     if (options?.extensionPort || options?.previewPort) {
-      setOutputDir(join3(process.cwd(), toKebabCase2(extensionId || name)));
+      setOutputDir(join3(process.cwd(), toKebabCase(extensionId || name)));
       setStep("confirm");
     } else {
       setStep("settings");
@@ -1784,7 +1993,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
     if (targetsChanged) return `${major}.${minor + 1}.0`;
     const nameChanged = newName !== initialExtension.name;
     if (nameChanged) return `${major}.${minor}.${patch + 1}`;
-    return currentVersion;
+    return `${major}.${minor}.${patch + 1}`;
   };
   const handleConfirm = async () => {
     if (command === "update" /* UPDATE */) {
@@ -1798,8 +2007,8 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
             name,
             version: resolvedVersion,
             targets,
-            permissions: derivePermissions2(targets),
-            allowedDomains: []
+            permissions: confirmedPermissions,
+            allowedDomains: confirmedAllowedDomains
           },
           bundleUrl: bundleUrl || void 0,
           enabled
@@ -1817,7 +2026,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
     setStep("scaffolding");
     setProgressSteps(PROGRESS_STEPS[command]);
     try {
-      let resolvedExtensionId = extensionId || toKebabCase2(name);
+      let resolvedExtensionId = extensionId || toKebabCase(name);
       let scaffoldStepOffset = 0;
       if (command === "create" /* CREATE */) {
         scaffoldStepOffset = 1;
@@ -1827,7 +2036,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
             name,
             version: "0.0.0",
             targets,
-            permissions: derivePermissions2(targets),
+            permissions: deriveRegistryPermissions(targets),
             allowedDomains: []
           },
           bundleUrl: `http://localhost:${extensionPort}`
@@ -1849,6 +2058,17 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
         previewPort
       });
       updateStep(scaffoldStepOffset + 0, "done");
+      if (command === "create" /* CREATE */) {
+        const manifestPath = join3(outputDir, "packages/extension/public/manifest.json");
+        try {
+          const manifestContent = await readFile3(manifestPath, "utf8");
+          const manifest = JSON.parse(manifestContent);
+          await updateExtension(token, selectedApp.id, resolvedExtensionId, {
+            manifest: { ...manifest, allowedDomains: [] }
+          });
+        } catch {
+        }
+      }
       updateStep(scaffoldStepOffset + 1, "running");
       await new Promise((r) => setTimeout(r, 200));
       updateStep(scaffoldStepOffset + 1, "done");
@@ -1871,7 +2091,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
   };
   switch (step) {
     case "app": {
-      return /* @__PURE__ */ jsx14(
+      return /* @__PURE__ */ jsx15(
         AppSelect,
         {
           token,
@@ -1882,7 +2102,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       );
     }
     case "extensionSelect": {
-      return /* @__PURE__ */ jsx14(
+      return /* @__PURE__ */ jsx15(
         ExtensionSelect,
         {
           appId: selectedApp.id,
@@ -1894,7 +2114,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       );
     }
     case "confirmTargets": {
-      return /* @__PURE__ */ jsx14(
+      return /* @__PURE__ */ jsx15(
         TargetSelect,
         {
           availableTargets: selectedApp?.targets ?? [],
@@ -1905,7 +2125,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       );
     }
     case "name": {
-      return /* @__PURE__ */ jsx14(
+      return /* @__PURE__ */ jsx15(
         NamePrompt,
         {
           initialValue: name,
@@ -1915,7 +2135,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       );
     }
     case "template": {
-      return /* @__PURE__ */ jsx14(
+      return /* @__PURE__ */ jsx15(
         TemplateSelect,
         {
           onSubmit: handleTemplateSelect,
@@ -1924,7 +2144,7 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       );
     }
     case "targets": {
-      return /* @__PURE__ */ jsx14(
+      return /* @__PURE__ */ jsx15(
         TargetSelect,
         {
           availableTargets: selectedApp?.targets ?? [],
@@ -1934,29 +2154,34 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       );
     }
     case "settings": {
-      return /* @__PURE__ */ jsx14(
+      return /* @__PURE__ */ jsx15(
         SettingsPrompt,
         {
-          defaultDir: join3(process.cwd(), toKebabCase2(extensionId || name)),
+          defaultDir: join3(process.cwd(), toKebabCase(extensionId || name)),
           onSubmit: handleSettings,
           onBack: goBack
         }
       );
     }
     case "confirm": {
-      return /* @__PURE__ */ jsx14(
+      return /* @__PURE__ */ jsx15(
         Confirm,
         {
           command,
           name,
           templateFlavor: command === "create" /* CREATE */ ? templateFlavor : void 0,
           targets,
+          registryTargets: command === "update" /* UPDATE */ ? registryManifest?.targets : void 0,
           outputDir,
           previewPort,
           extensionPort,
           extensionVersion: command !== "create" /* CREATE */ ? extensionVersion : void 0,
           bundleUrl: command === "update" /* UPDATE */ ? bundleUrl : void 0,
           enabled: command === "update" /* UPDATE */ ? enabled : void 0,
+          permissions: command === "update" /* UPDATE */ ? confirmedPermissions : void 0,
+          allowedDomains: command === "update" /* UPDATE */ ? confirmedAllowedDomains : void 0,
+          registryPermissions: command === "update" /* UPDATE */ ? registryManifest?.permissions : void 0,
+          registryAllowedDomains: command === "update" /* UPDATE */ ? registryManifest?.allowedDomains : void 0,
           newVersion: command === "update" /* UPDATE */ ? options?.setVersion ?? versionOverride ?? computeVersionBump(extensionVersion, name, targets, bundleUrl, forceMajor) : void 0,
           onVersionOverride: command === "update" /* UPDATE */ ? setVersionOverride : void 0,
           onConfirm: handleConfirm,
@@ -1966,10 +2191,10 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       );
     }
     case "scaffolding": {
-      return /* @__PURE__ */ jsx14(ScaffoldProgress, { steps: progressSteps });
+      return /* @__PURE__ */ jsx15(ScaffoldProgress, { steps: progressSteps });
     }
     case "updateSettings": {
-      return /* @__PURE__ */ jsx14(
+      return /* @__PURE__ */ jsx15(
         UpdateSettingsPrompt,
         {
           name,
@@ -1984,6 +2209,21 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
             setEnabled(updated.enabled);
             setForceMajor(updated.forceMajor);
             setVersionOverride(void 0);
+            setStep("manifestReview");
+          },
+          onBack: goBack
+        }
+      );
+    }
+    case "manifestReview": {
+      return /* @__PURE__ */ jsx15(
+        ManifestReviewPrompt,
+        {
+          localManifest,
+          registryManifest,
+          onSubmit: (result) => {
+            setConfirmedPermissions(result.permissions);
+            setConfirmedAllowedDomains(result.allowedDomains);
             setStep("confirm");
           },
           onBack: goBack
@@ -1991,46 +2231,46 @@ var App = ({ command, token, userId, orgId, initialName, initialExtensionId, opt
       );
     }
     case "updating": {
-      return /* @__PURE__ */ jsx14(ScaffoldProgress, { steps: progressSteps });
+      return /* @__PURE__ */ jsx15(ScaffoldProgress, { steps: progressSteps });
     }
     case "updateDone": {
-      return /* @__PURE__ */ jsx14(StepShell, { title: "Extension updated", onBack: goBack, children: /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsx14(Text14, { color: "green", bold: true, children: "Extension updated successfully!" }),
-        /* @__PURE__ */ jsxs14(Text14, { dimColor: true, children: [
+      return /* @__PURE__ */ jsx15(StepShell, { title: "Extension updated", onBack: goBack, children: /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsx15(Text15, { color: "green", bold: true, children: "Extension updated successfully!" }),
+        /* @__PURE__ */ jsxs15(Text15, { dimColor: true, children: [
           "Name: ",
           name
         ] }),
-        /* @__PURE__ */ jsxs14(Text14, { dimColor: true, children: [
+        /* @__PURE__ */ jsxs15(Text15, { dimColor: true, children: [
           "ID: ",
           extensionId
         ] }),
-        /* @__PURE__ */ jsxs14(Text14, { dimColor: true, children: [
+        /* @__PURE__ */ jsxs15(Text15, { dimColor: true, children: [
           "Version: ",
           extensionVersion
         ] })
       ] }) });
     }
     case "done": {
-      return /* @__PURE__ */ jsx14(Done, { name, outputDir, templateFlavor: command === "create" /* CREATE */ ? templateFlavor : void 0 });
+      return /* @__PURE__ */ jsx15(Done, { name, outputDir, templateFlavor: command === "create" /* CREATE */ ? templateFlavor : void 0 });
     }
     case "error": {
-      return /* @__PURE__ */ jsx14(StepShell, { title: "Operation failed", onBack: goBack, children: /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsx14(Text14, { color: "red", bold: true, children: "An error occurred" }),
-        errorMessage && /* @__PURE__ */ jsx14(Text14, { color: "red", children: errorMessage })
+      return /* @__PURE__ */ jsx15(StepShell, { title: "Operation failed", onBack: goBack, children: /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsx15(Text15, { color: "red", bold: true, children: "An error occurred" }),
+        errorMessage && /* @__PURE__ */ jsx15(Text15, { color: "red", children: errorMessage })
       ] }) });
     }
     default: {
-      return /* @__PURE__ */ jsx14(StepShell, { title: "Scaffold failed", onBack: goBack, children: /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsx14(Text14, { color: "red", bold: true, children: "An error occurred" }),
-        errorMessage && /* @__PURE__ */ jsx14(Text14, { color: "red", children: errorMessage })
+      return /* @__PURE__ */ jsx15(StepShell, { title: "Scaffold failed", onBack: goBack, children: /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsx15(Text15, { color: "red", bold: true, children: "An error occurred" }),
+        errorMessage && /* @__PURE__ */ jsx15(Text15, { color: "red", children: errorMessage })
       ] }) });
     }
   }
 };
 
 // src/components/DevApp.tsx
-import { useRef, useState as useState11, useEffect as useEffect6, useCallback as useCallback2 } from "react";
-import { useInput as useInput10, Box as Box17, Text as Text17 } from "ink";
+import { useRef, useState as useState12, useEffect as useEffect6, useCallback as useCallback2 } from "react";
+import { useInput as useInput11, Box as Box18, Text as Text18 } from "ink";
 
 // src/lib/tunnel.ts
 import { Tunnel } from "cloudflared";
@@ -2064,12 +2304,12 @@ var startDevServer = (projectRoot) => {
 };
 
 // src/components/DevSetup.tsx
-import { Box as Box15, Text as Text15 } from "ink";
-import { useState as useState10, useEffect as useEffect4 } from "react";
-import { jsx as jsx15, jsxs as jsxs15 } from "react/jsx-runtime";
+import { Box as Box16, Text as Text16 } from "ink";
+import { useState as useState11, useEffect as useEffect4 } from "react";
+import { jsx as jsx16, jsxs as jsxs16 } from "react/jsx-runtime";
 var DevSetup = ({ initialContext, token, onReady }) => {
-  const [step, setStep] = useState10("app");
-  const [selectedApp, setSelectedApp] = useState10(null);
+  const [step, setStep] = useState11("app");
+  const [selectedApp, setSelectedApp] = useState11(null);
   useEffect4(() => {
     if (initialContext.appId) {
       setStep("extension");
@@ -2087,9 +2327,9 @@ var DevSetup = ({ initialContext, token, onReady }) => {
     });
   };
   if (step === "app") {
-    return /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx15(Box15, { marginBottom: 1, children: /* @__PURE__ */ jsx15(Text15, { children: "Select the App for your extension:" }) }),
-      /* @__PURE__ */ jsx15(
+    return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx16(Box16, { marginBottom: 1, children: /* @__PURE__ */ jsx16(Text16, { children: "Select the App for your extension:" }) }),
+      /* @__PURE__ */ jsx16(
         AppSelect,
         {
           token,
@@ -2098,9 +2338,9 @@ var DevSetup = ({ initialContext, token, onReady }) => {
       )
     ] });
   }
-  return /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx15(Box15, { marginBottom: 1, children: /* @__PURE__ */ jsx15(Text15, { children: "Select the Extension to develop:" }) }),
-    /* @__PURE__ */ jsx15(
+  return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx16(Box16, { marginBottom: 1, children: /* @__PURE__ */ jsx16(Text16, { children: "Select the Extension to develop:" }) }),
+    /* @__PURE__ */ jsx16(
       ExtensionSelect,
       {
         token,
@@ -2112,9 +2352,9 @@ var DevSetup = ({ initialContext, token, onReady }) => {
 };
 
 // src/components/DevDashboard.tsx
-import { Box as Box16, Text as Text16, useInput as useInput9 } from "ink";
+import { Box as Box17, Text as Text17, useInput as useInput10 } from "ink";
 import { useEffect as useEffect5 } from "react";
-import { jsx as jsx16, jsxs as jsxs16 } from "react/jsx-runtime";
+import { jsx as jsx17, jsxs as jsxs17 } from "react/jsx-runtime";
 var DevDashboard = ({
   previewTunnelUrl,
   tunnelUrl,
@@ -2126,6 +2366,7 @@ var DevDashboard = ({
   extensionName,
   extensionPort,
   previewPort,
+  manifestWarnings = [],
   onQuit
 }) => {
   useEffect5(() => {
@@ -2137,72 +2378,80 @@ var DevDashboard = ({
       process.off("SIGINT", handler);
     };
   }, [onQuit]);
-  useInput9((input, key) => {
+  useInput10((input, key) => {
     if (input === "q" || key.ctrl && input === "c") {
       onQuit();
     }
   });
-  return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx16(Banner, { userId, orgId }),
-    /* @__PURE__ */ jsxs16(
+  return /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx17(Banner, { userId, orgId }),
+    /* @__PURE__ */ jsxs17(
       StepShell,
       {
         title: "dev",
         hint: `Live development ${tunnelUrl ? "with" : "w/o"} Tunnel`,
-        footer: /* @__PURE__ */ jsx16(Box16, { flexDirection: "column", gap: 1, children: /* @__PURE__ */ jsx16(Text16, { dimColor: true, children: "Press q or Ctrl-C to quit" }) }),
+        footer: /* @__PURE__ */ jsx17(Box17, { flexDirection: "column", gap: 1, children: /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "Press q or Ctrl-C to quit" }) }),
         children: [
-          /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
-            /* @__PURE__ */ jsxs16(Box16, { gap: 2, children: [
-              /* @__PURE__ */ jsx16(Text16, { dimColor: true, children: "Extension:" }),
-              /* @__PURE__ */ jsxs16(Text16, { children: [
+          /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
+            /* @__PURE__ */ jsxs17(Box17, { gap: 2, children: [
+              /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "Extension:" }),
+              /* @__PURE__ */ jsxs17(Text17, { children: [
                 extensionName,
                 " (",
                 extensionId,
                 ")"
               ] })
             ] }),
-            /* @__PURE__ */ jsxs16(Box16, { gap: 2, children: [
-              /* @__PURE__ */ jsx16(Text16, { dimColor: true, children: "App:" }),
-              /* @__PURE__ */ jsx16(Text16, { children: `${appName ? `${appName} ` : ""}(${appId})` })
+            /* @__PURE__ */ jsxs17(Box17, { gap: 2, children: [
+              /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "App:" }),
+              /* @__PURE__ */ jsx17(Text17, { children: `${appName ? `${appName} ` : ""}(${appId})` })
             ] }),
-            /* @__PURE__ */ jsxs16(Box16, { gap: 2, children: [
-              /* @__PURE__ */ jsx16(Text16, { dimColor: true, children: "Bundle URL:" }),
-              /* @__PURE__ */ jsx16(Text16, { children: tunnelUrl || `http://localhost:${extensionPort}` })
+            /* @__PURE__ */ jsxs17(Box17, { gap: 2, children: [
+              /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "Bundle URL:" }),
+              /* @__PURE__ */ jsx17(Text17, { children: tunnelUrl || `http://localhost:${extensionPort}` })
             ] })
           ] }),
-          /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
-            previewTunnelUrl && /* @__PURE__ */ jsxs16(Box16, { gap: 2, children: [
-              /* @__PURE__ */ jsx16(Text16, { dimColor: true, children: "Tunnel Dev - Preview:" }),
-              /* @__PURE__ */ jsx16(Text16, { children: previewTunnelUrl })
+          /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
+            previewTunnelUrl && /* @__PURE__ */ jsxs17(Box17, { gap: 2, children: [
+              /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "Tunnel Dev - Preview:" }),
+              /* @__PURE__ */ jsx17(Text17, { children: previewTunnelUrl })
             ] }),
-            /* @__PURE__ */ jsxs16(Box16, { gap: 2, children: [
-              /* @__PURE__ */ jsx16(Text16, { dimColor: true, children: "Local Dev - Preview:" }),
-              /* @__PURE__ */ jsxs16(Text16, { children: [
+            /* @__PURE__ */ jsxs17(Box17, { gap: 2, children: [
+              /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "Local Dev - Preview:" }),
+              /* @__PURE__ */ jsxs17(Text17, { children: [
                 "http://localhost:",
                 previewPort
               ] })
             ] })
           ] }),
-          /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
-            tunnelUrl && /* @__PURE__ */ jsxs16(Box16, { gap: 2, children: [
-              /* @__PURE__ */ jsx16(Text16, { dimColor: true, children: "Tunnel Dev - Extension:" }),
-              /* @__PURE__ */ jsx16(Text16, { children: tunnelUrl })
+          /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
+            tunnelUrl && /* @__PURE__ */ jsxs17(Box17, { gap: 2, children: [
+              /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "Tunnel Dev - Extension:" }),
+              /* @__PURE__ */ jsx17(Text17, { children: tunnelUrl })
             ] }),
-            /* @__PURE__ */ jsxs16(Box16, { gap: 2, children: [
-              /* @__PURE__ */ jsx16(Text16, { dimColor: true, children: "Local Dev - Extension:" }),
-              /* @__PURE__ */ jsxs16(Text16, { children: [
+            /* @__PURE__ */ jsxs17(Box17, { gap: 2, children: [
+              /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "Local Dev - Extension:" }),
+              /* @__PURE__ */ jsxs17(Text17, { children: [
                 "http://localhost:",
                 extensionPort
               ] })
             ] })
           ] }),
-          /* @__PURE__ */ jsx16(Box16, { flexDirection: "column", children: tunnelUrl && /* @__PURE__ */ jsxs16(Box16, { gap: 2, children: [
-            /* @__PURE__ */ jsx16(Text16, { dimColor: true, children: "Host Dev - Query Param:" }),
-            /* @__PURE__ */ jsxs16(Text16, { children: [
+          /* @__PURE__ */ jsx17(Box17, { flexDirection: "column", children: tunnelUrl && /* @__PURE__ */ jsxs17(Box17, { gap: 2, children: [
+            /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "Host Dev - Query Param:" }),
+            /* @__PURE__ */ jsxs17(Text17, { children: [
               "?_stackable_dev=",
               encodeURIComponent(`${extensionId}:${tunnelUrl}`)
             ] })
-          ] }) })
+          ] }) }),
+          manifestWarnings.length > 0 && /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", borderStyle: "round", borderColor: "yellow", paddingX: 1, children: [
+            /* @__PURE__ */ jsx17(Text17, { color: "yellow", bold: true, children: "Local manifest differs from registry:" }),
+            manifestWarnings.map((w, i) => /* @__PURE__ */ jsxs17(Text17, { color: "yellow", children: [
+              "  ",
+              w
+            ] }, i)),
+            /* @__PURE__ */ jsx17(Text17, { dimColor: true, children: "  Run `pnpm dlx @stackable-labs/cli-app-extension@latest update` to review and sync." })
+          ] })
         ]
       }
     )
@@ -2210,16 +2459,17 @@ var DevDashboard = ({
 };
 
 // src/components/DevApp.tsx
-import { jsx as jsx17 } from "react/jsx-runtime";
+import { jsx as jsx18 } from "react/jsx-runtime";
 var DevApp = ({ token, userId, orgId, options = {} }) => {
-  const [state, setState] = useState11("setup");
-  const [devContext, setDevContext] = useState11(null);
-  const [resolvedContext, setResolvedContext] = useState11(null);
-  const [tunnelUrl, setTunnelUrl] = useState11(null);
-  const [previewTunnelUrl, setPreviewTunnelUrl] = useState11(null);
-  const [tunnelHandle, setTunnelHandle] = useState11(null);
-  const [previewTunnelHandle, setPreviewTunnelHandle] = useState11(null);
-  const [devServerHandle, setDevServerHandle] = useState11(null);
+  const [state, setState] = useState12("setup");
+  const [devContext, setDevContext] = useState12(null);
+  const [resolvedContext, setResolvedContext] = useState12(null);
+  const [tunnelUrl, setTunnelUrl] = useState12(null);
+  const [previewTunnelUrl, setPreviewTunnelUrl] = useState12(null);
+  const [tunnelHandle, setTunnelHandle] = useState12(null);
+  const [previewTunnelHandle, setPreviewTunnelHandle] = useState12(null);
+  const [devServerHandle, setDevServerHandle] = useState12(null);
+  const [manifestWarnings, setManifestWarnings] = useState12([]);
   const shuttingDown = useRef(false);
   const useTunnel = options.tunnel !== false;
   useEffect6(() => {
@@ -2240,6 +2490,31 @@ var DevApp = ({ token, userId, orgId, options = {} }) => {
       extensionId: resolved.extensionId,
       appName: resolved.appName || null
     });
+    if (devContext.manifest) {
+      try {
+        const extensions = await fetchExtensions(token, resolved.appId);
+        const registryExt = extensions[resolved.extensionId];
+        if (registryExt) {
+          const localPerms = new Set(devContext.manifest.permissions);
+          const registryPerms = new Set(registryExt.manifest.permissions);
+          const missingPerms = [...localPerms].filter((p) => !registryPerms.has(p));
+          const extraPerms = [...registryPerms].filter((p) => !localPerms.has(p));
+          const localDomains = new Set(devContext.manifest.allowedDomains);
+          const registryDomains = new Set(registryExt.manifest.allowedDomains);
+          const missingDomains = [...localDomains].filter((d) => !registryDomains.has(d));
+          const extraDomains = [...registryDomains].filter((d) => !localDomains.has(d));
+          const warnings = [];
+          if (missingPerms.length > 0) warnings.push(`Permissions in local but not registry: ${missingPerms.join(", ")}`);
+          if (extraPerms.length > 0) warnings.push(`Permissions in registry but not local: ${extraPerms.join(", ")}`);
+          if (missingDomains.length > 0) warnings.push(`Domains in local but not registry: ${missingDomains.join(", ")}`);
+          if (extraDomains.length > 0) warnings.push(`Domains in registry but not local: ${extraDomains.join(", ")}`);
+          if (warnings.length > 0) {
+            setManifestWarnings(warnings);
+          }
+        }
+      } catch {
+      }
+    }
     const extensionPort = options.extensionPort ? parseInt(options.extensionPort, 10) : devContext.extensionPort;
     const previewPort = options.previewPort ? parseInt(options.previewPort, 10) : devContext.previewPort;
     await patchViteAllowedHosts(devContext.projectRoot);
@@ -2268,7 +2543,7 @@ var DevApp = ({ token, userId, orgId, options = {} }) => {
     setDevServerHandle(serverHandle);
     console.log("[dev] Ready");
     setState("running");
-  }, [devContext, options.extensionPort, options.previewPort, useTunnel]);
+  }, [devContext, token, options.extensionPort, options.previewPort, useTunnel]);
   useEffect6(() => {
     if (state === "setup" && devContext && devContext.appId && devContext.extensionId) {
       handleSetupReady({
@@ -2304,7 +2579,7 @@ var DevApp = ({ token, userId, orgId, options = {} }) => {
     console.log("[dev] Done");
     process.exit(0);
   };
-  useInput10((input, key) => {
+  useInput11((input, key) => {
     if (input === "c" && key.ctrl) {
       if (state === "running") {
         handleQuit();
@@ -2315,7 +2590,7 @@ var DevApp = ({ token, userId, orgId, options = {} }) => {
   });
   if (state === "setup" && devContext) {
     if (!devContext.appId || !devContext.extensionId) {
-      return /* @__PURE__ */ jsx17(
+      return /* @__PURE__ */ jsx18(
         DevSetup,
         {
           token,
@@ -2327,7 +2602,7 @@ var DevApp = ({ token, userId, orgId, options = {} }) => {
     return null;
   }
   if (state === "running" && devContext && resolvedContext) {
-    return /* @__PURE__ */ jsx17(
+    return /* @__PURE__ */ jsx18(
       DevDashboard,
       {
         previewTunnelUrl,
@@ -2340,6 +2615,7 @@ var DevApp = ({ token, userId, orgId, options = {} }) => {
         extensionId: resolvedContext.extensionId,
         extensionPort: options.extensionPort ? parseInt(options.extensionPort, 10) : devContext.extensionPort,
         previewPort: options.previewPort ? parseInt(options.previewPort, 10) : devContext.previewPort,
+        manifestWarnings,
         onQuit: handleQuit
       }
     );
@@ -2347,13 +2623,13 @@ var DevApp = ({ token, userId, orgId, options = {} }) => {
   if (state === "stopping") {
     return null;
   }
-  return /* @__PURE__ */ jsx17(Box17, { children: /* @__PURE__ */ jsx17(Text17, { children: "Loading..." }) });
+  return /* @__PURE__ */ jsx18(Box18, { children: /* @__PURE__ */ jsx18(Text18, { children: "Loading..." }) });
 };
 
 // src/components/AIScaffold.tsx
-import { Box as Box18, Text as Text18, useApp as useApp2 } from "ink";
+import { Box as Box19, Text as Text19, useApp as useApp2 } from "ink";
 import Spinner4 from "ink-spinner";
-import { useState as useState12, useEffect as useEffect7 } from "react";
+import { useState as useState13, useEffect as useEffect7 } from "react";
 
 // src/lib/aiDocs.ts
 import { existsSync, readFileSync } from "fs";
@@ -2406,12 +2682,12 @@ var downloadAndExtractAiDocs = async (targetDir, version2) => {
 };
 
 // src/components/AIScaffold.tsx
-import { jsx as jsx18, jsxs as jsxs17 } from "react/jsx-runtime";
+import { jsx as jsx19, jsxs as jsxs18 } from "react/jsx-runtime";
 var AIScaffold = ({ version: version2 }) => {
   const { exit } = useApp2();
-  const [state, setState] = useState12("validating");
-  const [files, setFiles] = useState12([]);
-  const [errorMessage, setErrorMessage] = useState12("");
+  const [state, setState] = useState13("validating");
+  const [files, setFiles] = useState13([]);
+  const [errorMessage, setErrorMessage] = useState13("");
   useEffect7(() => {
     const run = async () => {
       const projectDir = process.cwd();
@@ -2435,35 +2711,35 @@ var AIScaffold = ({ version: version2 }) => {
     };
     run();
   }, []);
-  return /* @__PURE__ */ jsxs17(Box18, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx18(Banner, {}),
-    /* @__PURE__ */ jsxs17(StepShell, { title: "AI Editor Config", children: [
-      state === "validating" && /* @__PURE__ */ jsxs17(Box18, { gap: 1, children: [
-        /* @__PURE__ */ jsx18(Text18, { color: "cyan", children: /* @__PURE__ */ jsx18(Spinner4, { type: "dots" }) }),
-        /* @__PURE__ */ jsx18(Text18, { children: "Checking project..." })
+  return /* @__PURE__ */ jsxs18(Box19, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx19(Banner, {}),
+    /* @__PURE__ */ jsxs18(StepShell, { title: "AI Editor Config", children: [
+      state === "validating" && /* @__PURE__ */ jsxs18(Box19, { gap: 1, children: [
+        /* @__PURE__ */ jsx19(Text19, { color: "cyan", children: /* @__PURE__ */ jsx19(Spinner4, { type: "dots" }) }),
+        /* @__PURE__ */ jsx19(Text19, { children: "Checking project..." })
       ] }),
-      state === "downloading" && /* @__PURE__ */ jsxs17(Box18, { gap: 1, children: [
-        /* @__PURE__ */ jsx18(Text18, { color: "cyan", children: /* @__PURE__ */ jsx18(Spinner4, { type: "dots" }) }),
-        /* @__PURE__ */ jsxs17(Text18, { children: [
+      state === "downloading" && /* @__PURE__ */ jsxs18(Box19, { gap: 1, children: [
+        /* @__PURE__ */ jsx19(Text19, { color: "cyan", children: /* @__PURE__ */ jsx19(Spinner4, { type: "dots" }) }),
+        /* @__PURE__ */ jsxs18(Text19, { children: [
           "Downloading AI editor configs (",
           version2,
           ")..."
         ] })
       ] }),
-      state === "done" && /* @__PURE__ */ jsxs17(Box18, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsxs17(Box18, { gap: 1, children: [
-          /* @__PURE__ */ jsx18(Text18, { color: "green", bold: true, children: "\u2714" }),
-          /* @__PURE__ */ jsxs17(Text18, { bold: true, children: [
+      state === "done" && /* @__PURE__ */ jsxs18(Box19, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsxs18(Box19, { gap: 1, children: [
+          /* @__PURE__ */ jsx19(Text19, { color: "green", bold: true, children: "\u2714" }),
+          /* @__PURE__ */ jsxs18(Text19, { bold: true, children: [
             "AI editor configs installed (",
             files.length,
             " files)"
           ] })
         ] }),
-        /* @__PURE__ */ jsx18(Box18, { flexDirection: "column", marginLeft: 2, children: files.map((f) => /* @__PURE__ */ jsx18(Text18, { dimColor: true, children: f }, f)) })
+        /* @__PURE__ */ jsx19(Box19, { flexDirection: "column", marginLeft: 2, children: files.map((f) => /* @__PURE__ */ jsx19(Text19, { dimColor: true, children: f }, f)) })
       ] }),
-      state === "error" && /* @__PURE__ */ jsxs17(Box18, { gap: 1, children: [
-        /* @__PURE__ */ jsx18(Text18, { color: "red", children: "\u2716" }),
-        /* @__PURE__ */ jsx18(Text18, { children: errorMessage })
+      state === "error" && /* @__PURE__ */ jsxs18(Box19, { gap: 1, children: [
+        /* @__PURE__ */ jsx19(Text19, { color: "red", children: "\u2716" }),
+        /* @__PURE__ */ jsx19(Text19, { children: errorMessage })
       ] })
     ] })
   ] });
@@ -2471,20 +2747,20 @@ var AIScaffold = ({ version: version2 }) => {
 
 // src/components/AuthLogin.tsx
 import { createServer } from "http";
-import { Box as Box19, Text as Text19, useApp as useApp3 } from "ink";
+import { Box as Box20, Text as Text20, useApp as useApp3 } from "ink";
 import Spinner5 from "ink-spinner";
 import open from "open";
-import { useState as useState13, useEffect as useEffect8 } from "react";
+import { useState as useState14, useEffect as useEffect8 } from "react";
 
 // src/lib/auth.ts
-import { readFile as readFile3, writeFile as writeFile4, mkdir as mkdir2, unlink } from "fs/promises";
+import { readFile as readFile4, writeFile as writeFile4, mkdir as mkdir2, unlink } from "fs/promises";
 import { join as join5 } from "path";
 import { homedir } from "os";
 var AUTH_DIR = join5(homedir(), ".stackable");
 var AUTH_FILE = join5(AUTH_DIR, "auth.json");
 var readAuthState = async () => {
   try {
-    const content = await readFile3(AUTH_FILE, "utf8");
+    const content = await readFile4(AUTH_FILE, "utf8");
     return JSON.parse(content);
   } catch {
     return null;
@@ -2527,7 +2803,7 @@ var getToken = async () => {
 };
 
 // src/components/AuthLogin.tsx
-import { jsx as jsx19, jsxs as jsxs18 } from "react/jsx-runtime";
+import { jsx as jsx20, jsxs as jsxs19 } from "react/jsx-runtime";
 var LOGIN_TIMEOUT_MS = 5 * 60 * 1e3;
 var callbackPage = (heading, sub, redirectUrl) => `<!DOCTYPE html>
 <html><head><meta charset="utf-8"><title>Stackable CLI</title>
@@ -2538,11 +2814,11 @@ ${redirectUrl ? `<script>(function(){var s=3,el=document.getElementById('h');fun
 </body></html>`;
 var AuthLogin = ({ dashboardUrl }) => {
   const { exit } = useApp3();
-  const [state, setState] = useState13("waiting");
-  const [loginUrl, setLoginUrl] = useState13("");
-  const [userIdLabel, setUserIdLabel] = useState13("");
-  const [orgIdLabel, setOrgIdLabel] = useState13("");
-  const [errorMessage, setErrorMessage] = useState13("");
+  const [state, setState] = useState14("waiting");
+  const [loginUrl, setLoginUrl] = useState14("");
+  const [userIdLabel, setUserIdLabel] = useState14("");
+  const [orgIdLabel, setOrgIdLabel] = useState14("");
+  const [errorMessage, setErrorMessage] = useState14("");
   useEffect8(() => {
     let server;
     let timeout;
@@ -2618,38 +2894,38 @@ var AuthLogin = ({ dashboardUrl }) => {
       server?.close();
     };
   }, []);
-  return /* @__PURE__ */ jsxs18(Box19, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx19(Banner, {}),
-    /* @__PURE__ */ jsxs18(StepShell, { title: "Authenticate with Stackable", children: [
-      state === "waiting" && /* @__PURE__ */ jsxs18(Box19, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsxs18(Box19, { gap: 1, children: [
-          /* @__PURE__ */ jsx19(Text19, { color: "cyan", children: /* @__PURE__ */ jsx19(Spinner5, { type: "dots" }) }),
-          /* @__PURE__ */ jsx19(Text19, { children: "Waiting for browser authentication..." })
+  return /* @__PURE__ */ jsxs19(Box20, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx20(Banner, {}),
+    /* @__PURE__ */ jsxs19(StepShell, { title: "Authenticate with Stackable", children: [
+      state === "waiting" && /* @__PURE__ */ jsxs19(Box20, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsxs19(Box20, { gap: 1, children: [
+          /* @__PURE__ */ jsx20(Text20, { color: "cyan", children: /* @__PURE__ */ jsx20(Spinner5, { type: "dots" }) }),
+          /* @__PURE__ */ jsx20(Text20, { children: "Waiting for browser authentication..." })
         ] }),
-        loginUrl && /* @__PURE__ */ jsxs18(Text19, { dimColor: true, children: [
+        loginUrl && /* @__PURE__ */ jsxs19(Text20, { dimColor: true, children: [
           "  ",
           loginUrl
         ] })
       ] }),
-      state === "success" && /* @__PURE__ */ jsxs18(Box19, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsxs18(Box19, { flexDirection: "column", children: [
-          /* @__PURE__ */ jsxs18(Box19, { gap: 2, children: [
-            /* @__PURE__ */ jsx19(Text19, { dimColor: true, children: "User:" }),
-            /* @__PURE__ */ jsx19(Text19, { color: "cyan", children: userIdLabel })
+      state === "success" && /* @__PURE__ */ jsxs19(Box20, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsxs19(Box20, { flexDirection: "column", children: [
+          /* @__PURE__ */ jsxs19(Box20, { gap: 2, children: [
+            /* @__PURE__ */ jsx20(Text20, { dimColor: true, children: "User:" }),
+            /* @__PURE__ */ jsx20(Text20, { color: "cyan", children: userIdLabel })
           ] }),
-          /* @__PURE__ */ jsxs18(Box19, { gap: 2, children: [
-            /* @__PURE__ */ jsx19(Text19, { dimColor: true, children: "Org: " }),
-            /* @__PURE__ */ jsx19(Text19, { color: "cyan", children: orgIdLabel })
+          /* @__PURE__ */ jsxs19(Box20, { gap: 2, children: [
+            /* @__PURE__ */ jsx20(Text20, { dimColor: true, children: "Org: " }),
+            /* @__PURE__ */ jsx20(Text20, { color: "cyan", children: orgIdLabel })
           ] })
         ] }),
-        /* @__PURE__ */ jsxs18(Box19, { gap: 1, children: [
-          /* @__PURE__ */ jsx19(Text19, { color: "green", bold: true, children: "\u2714" }),
-          /* @__PURE__ */ jsx19(Text19, { bold: true, children: "Authenticated" })
+        /* @__PURE__ */ jsxs19(Box20, { gap: 1, children: [
+          /* @__PURE__ */ jsx20(Text20, { color: "green", bold: true, children: "\u2714" }),
+          /* @__PURE__ */ jsx20(Text20, { bold: true, children: "Authenticated" })
         ] })
       ] }),
-      state === "error" && /* @__PURE__ */ jsxs18(Box19, { gap: 1, children: [
-        /* @__PURE__ */ jsx19(Text19, { color: "red", children: "\u2716" }),
-        /* @__PURE__ */ jsx19(Text19, { children: errorMessage })
+      state === "error" && /* @__PURE__ */ jsxs19(Box20, { gap: 1, children: [
+        /* @__PURE__ */ jsx20(Text20, { color: "red", children: "\u2716" }),
+        /* @__PURE__ */ jsx20(Text20, { children: errorMessage })
       ] })
     ] })
   ] });
@@ -2657,70 +2933,70 @@ var AuthLogin = ({ dashboardUrl }) => {
 
 // src/components/AuthLogout.tsx
 import { useEffect as useEffect9 } from "react";
-import { Box as Box20, Text as Text20, useApp as useApp4 } from "ink";
-import { jsx as jsx20, jsxs as jsxs19 } from "react/jsx-runtime";
+import { Box as Box21, Text as Text21, useApp as useApp4 } from "ink";
+import { jsx as jsx21, jsxs as jsxs20 } from "react/jsx-runtime";
 var AuthLogout = () => {
   const { exit } = useApp4();
   useEffect9(() => {
     exit();
   }, [exit]);
-  return /* @__PURE__ */ jsxs19(Box20, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx20(Banner, {}),
-    /* @__PURE__ */ jsx20(StepShell, { title: "Authenticate with Stackable", children: /* @__PURE__ */ jsxs19(Box20, { gap: 1, children: [
-      /* @__PURE__ */ jsx20(Text20, { color: "green", bold: true, children: "\u2714" }),
-      /* @__PURE__ */ jsx20(Text20, { bold: true, children: "Logged out" })
+  return /* @__PURE__ */ jsxs20(Box21, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx21(Banner, {}),
+    /* @__PURE__ */ jsx21(StepShell, { title: "Authenticate with Stackable", children: /* @__PURE__ */ jsxs20(Box21, { gap: 1, children: [
+      /* @__PURE__ */ jsx21(Text21, { color: "green", bold: true, children: "\u2714" }),
+      /* @__PURE__ */ jsx21(Text21, { bold: true, children: "Logged out" })
     ] }) })
   ] });
 };
 
 // src/components/AuthStatus.tsx
 import { useEffect as useEffect10 } from "react";
-import { useApp as useApp5, Box as Box21, Text as Text21 } from "ink";
-import { jsx as jsx21, jsxs as jsxs20 } from "react/jsx-runtime";
+import { useApp as useApp5, Box as Box22, Text as Text22 } from "ink";
+import { jsx as jsx22, jsxs as jsxs21 } from "react/jsx-runtime";
 var AuthStatus = ({ state, userId, orgId, expiry }) => {
   const { exit } = useApp5();
   useEffect10(() => {
     exit();
   }, [exit]);
-  return /* @__PURE__ */ jsxs20(Box21, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx21(Banner, {}),
-    /* @__PURE__ */ jsxs20(StepShell, { title: "Authenticate with Stackable", children: [
-      state === "authenticated" && /* @__PURE__ */ jsxs20(Box21, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsxs20(Box21, { flexDirection: "column", children: [
-          /* @__PURE__ */ jsxs20(Box21, { gap: 2, children: [
-            /* @__PURE__ */ jsx21(Text21, { dimColor: true, children: "User:" }),
-            /* @__PURE__ */ jsx21(Text21, { color: "cyan", children: userId })
+  return /* @__PURE__ */ jsxs21(Box22, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx22(Banner, {}),
+    /* @__PURE__ */ jsxs21(StepShell, { title: "Authenticate with Stackable", children: [
+      state === "authenticated" && /* @__PURE__ */ jsxs21(Box22, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsxs21(Box22, { flexDirection: "column", children: [
+          /* @__PURE__ */ jsxs21(Box22, { gap: 2, children: [
+            /* @__PURE__ */ jsx22(Text22, { dimColor: true, children: "User:" }),
+            /* @__PURE__ */ jsx22(Text22, { color: "cyan", children: userId })
           ] }),
-          /* @__PURE__ */ jsxs20(Box21, { gap: 2, children: [
-            /* @__PURE__ */ jsx21(Text21, { dimColor: true, children: "Org: " }),
-            /* @__PURE__ */ jsx21(Text21, { color: "cyan", children: orgId })
+          /* @__PURE__ */ jsxs21(Box22, { gap: 2, children: [
+            /* @__PURE__ */ jsx22(Text22, { dimColor: true, children: "Org: " }),
+            /* @__PURE__ */ jsx22(Text22, { color: "cyan", children: orgId })
           ] }),
-          expiry && /* @__PURE__ */ jsxs20(Box21, { gap: 2, children: [
-            /* @__PURE__ */ jsx21(Text21, { dimColor: true, children: "Exp: " }),
-            /* @__PURE__ */ jsx21(Text21, { color: "cyan", children: expiry.toLocaleDateString() })
+          expiry && /* @__PURE__ */ jsxs21(Box22, { gap: 2, children: [
+            /* @__PURE__ */ jsx22(Text22, { dimColor: true, children: "Exp: " }),
+            /* @__PURE__ */ jsx22(Text22, { color: "cyan", children: expiry.toLocaleDateString() })
           ] })
         ] }),
-        /* @__PURE__ */ jsxs20(Box21, { gap: 1, children: [
-          /* @__PURE__ */ jsx21(Text21, { color: "green", bold: true, children: "\u2714" }),
-          /* @__PURE__ */ jsx21(Text21, { bold: true, children: "Authenticated" })
+        /* @__PURE__ */ jsxs21(Box22, { gap: 1, children: [
+          /* @__PURE__ */ jsx22(Text22, { color: "green", bold: true, children: "\u2714" }),
+          /* @__PURE__ */ jsx22(Text22, { bold: true, children: "Authenticated" })
         ] })
       ] }),
-      state === "expired" && /* @__PURE__ */ jsxs20(Box21, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsxs20(Box21, { gap: 1, children: [
-          /* @__PURE__ */ jsx21(Text21, { color: "red", children: "\u2716" }),
-          /* @__PURE__ */ jsxs20(Text21, { children: [
+      state === "expired" && /* @__PURE__ */ jsxs21(Box22, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsxs21(Box22, { gap: 1, children: [
+          /* @__PURE__ */ jsx22(Text22, { color: "red", children: "\u2716" }),
+          /* @__PURE__ */ jsxs21(Text22, { children: [
             "Session expired",
             expiry ? ` (${expiry.toLocaleDateString()})` : ""
           ] })
         ] }),
-        /* @__PURE__ */ jsx21(Text21, { dimColor: true, children: "Run `stackable-app-extension auth login` to re-authenticate." })
+        /* @__PURE__ */ jsx22(Text22, { dimColor: true, children: "Run `stackable-app-extension auth login` to re-authenticate." })
       ] }),
-      state === "not-logged-in" && /* @__PURE__ */ jsxs20(Box21, { flexDirection: "column", gap: 1, children: [
-        /* @__PURE__ */ jsxs20(Box21, { gap: 1, children: [
-          /* @__PURE__ */ jsx21(Text21, { color: "red", children: "\u2716" }),
-          /* @__PURE__ */ jsx21(Text21, { children: "Not logged in" })
+      state === "not-logged-in" && /* @__PURE__ */ jsxs21(Box22, { flexDirection: "column", gap: 1, children: [
+        /* @__PURE__ */ jsxs21(Box22, { gap: 1, children: [
+          /* @__PURE__ */ jsx22(Text22, { color: "red", children: "\u2716" }),
+          /* @__PURE__ */ jsx22(Text22, { children: "Not logged in" })
         ] }),
-        /* @__PURE__ */ jsx21(Text21, { dimColor: true, children: "Run `stackable-app-extension auth login`" })
+        /* @__PURE__ */ jsx22(Text22, { dimColor: true, children: "Run `stackable-app-extension auth login`" })
       ] })
     ] })
   ] });
@@ -2774,7 +3050,7 @@ var checkForUpdate = (currentVersion) => {
 };
 
 // src/index.tsx
-import { jsx as jsx22 } from "react/jsx-runtime";
+import { jsx as jsx23 } from "react/jsx-runtime";
 var require2 = createRequire(import.meta.url);
 var { version } = require2("../package.json");
 checkForUpdate(version);
@@ -2787,7 +3063,7 @@ var ensureToken = async () => {
     const message = err instanceof Error ? err.message : String(err);
     const isExpired = message.toLowerCase().includes("expired");
     render(
-      /* @__PURE__ */ jsx22(AuthStatus, { state: isExpired ? "expired" : "not-logged-in" })
+      /* @__PURE__ */ jsx23(AuthStatus, { state: isExpired ? "expired" : "not-logged-in" })
     );
     return null;
   }
@@ -2800,7 +3076,7 @@ program.command("create" /* CREATE */).description("Create a new Extension proje
   }
   const { token, userId, orgId } = auth2;
   render(
-    /* @__PURE__ */ jsx22(
+    /* @__PURE__ */ jsx23(
       App,
       {
         command: "create" /* CREATE */,
@@ -2820,7 +3096,7 @@ program.command("scaffold" /* SCAFFOLD */).description("Scaffold a local project
   }
   const { token, userId, orgId } = auth2;
   render(
-    /* @__PURE__ */ jsx22(
+    /* @__PURE__ */ jsx23(
       App,
       {
         command: "scaffold" /* SCAFFOLD */,
@@ -2832,14 +3108,14 @@ program.command("scaffold" /* SCAFFOLD */).description("Scaffold a local project
     )
   );
 });
-program.command("update" /* UPDATE */).description("Update an existing Extension").argument("[extensionId]", "Extension ID to update").option("--app-id <id>", "Skip App selection").option("--name <name>", "New Extension name").option("--targets <targets>", "Comma-separated target slots (validated against app)").option("--bundle-url <url>", "New bundle URL").option("--enabled <bool>", "Enable/disable Extension").option("--set-version <version>", "Explicit version (skips auto-compute)").action(async (extensionId, options) => {
+program.command("update" /* UPDATE */).description("Update an existing Extension").argument("[extensionId]", "Extension ID to update").option("--app-id <id>", "Skip App selection").option("--name <name>", "New Extension name").option("--targets <targets>", "Comma-separated target slots (validated against app)").option("--bundle-url <url>", "New bundle URL").option("--enabled <bool>", "Enable/disable Extension").option("--set-version <version>", "Explicit version (skips auto-compute)").option("--dir <path>", "Project root (default: cwd)").action(async (extensionId, options) => {
   const auth2 = await ensureToken();
   if (!auth2) {
     return;
   }
   const { token, userId, orgId } = auth2;
   render(
-    /* @__PURE__ */ jsx22(
+    /* @__PURE__ */ jsx23(
       App,
       {
         command: "update" /* UPDATE */,
@@ -2859,7 +3135,7 @@ program.command("dev" /* DEV */).description("Start dev servers with a public tu
   }
   const { token, userId, orgId } = auth2;
   render(
-    /* @__PURE__ */ jsx22(
+    /* @__PURE__ */ jsx23(
       DevApp,
       {
         options,
@@ -2874,17 +3150,17 @@ program.command("dev" /* DEV */).description("Start dev servers with a public tu
 var DASHBOARD_URL = process.env.ADMIN_DASHBOARD_URL ?? "https://admin.stackablelabs.io";
 var auth = program.command("auth").description("Manage CLI authentication");
 auth.command("login").description("Authenticate with Stackable via browser").action(async () => {
-  render(/* @__PURE__ */ jsx22(AuthLogin, { dashboardUrl: DASHBOARD_URL }));
+  render(/* @__PURE__ */ jsx23(AuthLogin, { dashboardUrl: DASHBOARD_URL }));
 });
 auth.command("logout").description("Clear stored CLI credentials").action(async () => {
   await clearAuthState();
-  render(/* @__PURE__ */ jsx22(AuthLogout, {}));
+  render(/* @__PURE__ */ jsx23(AuthLogout, {}));
 });
 auth.command("status").description("Show current authentication status").action(async () => {
   const state = await readAuthState();
   if (!state) {
     render(
-      /* @__PURE__ */ jsx22(AuthStatus, { state: "not-logged-in" })
+      /* @__PURE__ */ jsx23(AuthStatus, { state: "not-logged-in" })
     );
     return;
   }
@@ -2892,11 +3168,11 @@ auth.command("status").description("Show current authentication status").action(
   const payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString());
   const expiry = payload.exp ? new Date(payload.exp * 1e3) : null;
   if (expiry && Date.now() >= expiry.getTime()) {
-    render(/* @__PURE__ */ jsx22(AuthStatus, { state: "expired", expiry }));
+    render(/* @__PURE__ */ jsx23(AuthStatus, { state: "expired", expiry }));
     return;
   }
   render(
-    /* @__PURE__ */ jsx22(
+    /* @__PURE__ */ jsx23(
       AuthStatus,
       {
         state: "authenticated",
@@ -2909,6 +3185,6 @@ auth.command("status").description("Show current authentication status").action(
 });
 var ai = program.command("ai").description("AI editor configuration tools");
 ai.command("scaffold").description("Download AI editor config files into your Extension project").option("--version <version>", 'AI docs version (semver or "latest")', "latest").action(async (options) => {
-  render(/* @__PURE__ */ jsx22(AIScaffold, { version: options.version }));
+  render(/* @__PURE__ */ jsx23(AIScaffold, { version: options.version }));
 });
 program.parse(process.argv.filter((arg) => arg !== "--"));