extension 4.0.27 → 4.0.28

package/dist/cli.cjs

@@ -7653,8 +7653,9 @@ Cross-browser compatibility
                 command: input.command,
                 output: input.opts.output
             };
+            const unlockFlag = 'eval' === input.op ? '--allow-eval' : '--allow-control';
             const ready = readReadyContract(projectPath, browser);
-            if (!ready) fail(`No active control channel found for ${browser}. Run \`extension dev --browser=${browser} --allow-control\` first.`, {
+            if (!ready) fail(`No active control channel found for ${browser}. Run \`extension dev --browser=${browser} ${unlockFlag}\` first.`, {
                 ...outputFrame,
                 code: messaging.Lp.E_SESSION_NOT_FOUND
             });
@@ -7662,7 +7663,8 @@ Cross-browser compatibility
             const controller = new BridgeController({
                 controlPort: ready.controlPort,
                 instanceId: ready.instanceId,
-                token: token ?? void 0
+                token: token ?? void 0,
+                unlockFlag
             });
             try {
                 await controller.connect();
@@ -8506,7 +8508,7 @@ Cross-browser compatibility
             return Number.isFinite(parsed) && parsed >= 0 ? Math.floor(parsed) : 8080;
         }
         function registerDevCommand(program) {
-            program.command('dev').arguments('[project-path|remote-url]').usage('[project-path|remote-url] [options]').description(commandDescriptions.dev).addHelpText('after', "\nAdditional options:\n  --no-browser    do not launch the browser (dev server still starts)\n  --no-reload     emit a dev-mode dist without the content-script reload runtime; tabs need manual reload to see changes\n  --wait          wait for ready contract and exit; pair with --output json for machine output\n").option('--profile <path-to-file | boolean>', 'what path to use for the browser profile. A boolean value of false sets the profile to the default user profile. Defaults to a fresh profile').option('-b, --browser <chrome | chromium | edge | firefox | chromium-based | gecko-based | firefox-based | safari | webkit-based>', 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds and opens a Safari app via Xcode (macOS only; no live reload)').option('--chromium-binary <path-to-binary>', 'specify a path to the Chromium binary. This option overrides the --browser setting. Defaults to the system default').option('--gecko-binary, --firefox-binary <path-to-binary>', 'specify a path to the Gecko binary. This option overrides the --browser setting. Defaults to the system default').option('--safari-binary <path-to-binary>', 'specify the Safari binary to open after packaging (safari targets only)').option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--macos-only [boolean]', 'generate a macOS-only Safari Xcode project (safari targets only). Pass `false` for a universal macOS + iOS project. Defaults to `true`', parseOptionalBoolean).option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `true`', parseOptionalBoolean).option('--no-polyfill', 'disable the cross-browser polyfill').option('--no-open', 'do not open the browser automatically (default: open)').option('--starting-url <url>', 'specify the starting URL for the browser. Defaults to `undefined`').option('--port <port>', 'specify the port to use for the development server. Defaults to `8080`').option('--host <host>', 'specify the host to bind the dev server to. Use 0.0.0.0 for Docker/devcontainers. Defaults to `127.0.0.1`').option('--public-host <host>', 'connectable host the browser (HMR + reload bridge) dials when it differs from the bind host (e.g. a remote/devcontainer). Defaults to the bind host, or 127.0.0.1 when bound to 0.0.0.0').option('--log-context <list>', '[experimental] comma-separated contexts to include (background,content,page,sidebar,popup,options,devtools). Use `all` to include all contexts (default)').option('--logs <off|error|warn|info|debug|trace|all>', '[experimental] minimum centralized logger level to display in terminal (default: off)').option('--log-format <pretty|json|ndjson>', '[experimental] output format for logger events. Defaults to `pretty`').option('--no-log-timestamps', 'disable ISO timestamps in pretty output').option('--no-log-color', 'disable color in pretty output').option('--log-url <pattern>', '[experimental] only show logs where event.url matches this substring or regex (/re/i)').option('--log-tab <id>', 'only show logs for a specific tabId (number)').option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--wait [boolean]', 'wait for dist/extension-js/<browser>/ready.json and exit', parseOptionalBoolean).option('--wait-timeout <ms>', 'timeout in milliseconds when using --wait (default: 60000)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').addOption(new external_commander_namespaceObject.Option('--wait-format <pretty|json>').hideHelp()).addOption(new external_commander_namespaceObject.Option('--debug', 'print maintainer diagnostics alongside normal output')).addOption(new external_commander_namespaceObject.Option('--author, --author-mode', 'deprecated alias for --debug').hideHelp()).option('--allow-control', 'enable the agent-bridge control channel for bounded act (storage/reload/open): see `extension reload|storage|open`').option('--allow-eval', 'additionally enable `extension eval` (runs arbitrary code in a context; writes a 0600 session token)').option('--parent-pid <pid>', 'exit when the given process dies. For wrappers that spawn `extension dev`, so a leaked dev server can never outlive its owner').action(async (pathOrRemoteUrl, options, command)=>{
+            program.command('dev').arguments('[project-path|remote-url]').usage('[project-path|remote-url] [options]').description(commandDescriptions.dev).addHelpText('after', "\nAdditional options:\n  --no-browser    do not launch the browser (dev server still starts)\n  --no-reload     emit a dev-mode dist without the content-script reload runtime; tabs need manual reload to see changes\n  --wait          wait for ready contract and exit; pair with --output json for machine output\n").option('--profile <path-to-file | boolean>', 'what path to use for the browser profile. A boolean value of false sets the profile to the default user profile. Defaults to a fresh profile').option('-b, --browser <chrome | chromium | edge | firefox | chromium-based | gecko-based | firefox-based | safari | webkit-based>', 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds and opens a Safari app via Xcode (macOS only; no live reload)').option('--chromium-binary <path-to-binary>', 'specify a path to the Chromium binary. This option overrides the --browser setting. Defaults to the system default').option('--gecko-binary, --firefox-binary <path-to-binary>', 'specify a path to the Gecko binary. This option overrides the --browser setting. Defaults to the system default').option('--safari-binary <path-to-binary>', 'specify the Safari binary to open after packaging (safari targets only)').option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--macos-only [boolean]', 'generate a macOS-only Safari Xcode project (safari targets only). Pass `false` for a universal macOS + iOS project. Defaults to `true`', parseOptionalBoolean).option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `true`', parseOptionalBoolean).option('--no-polyfill', 'disable the cross-browser polyfill').option('--no-open', 'do not open the browser automatically (default: open)').option('--starting-url <url>', 'specify the starting URL for the browser. Defaults to `undefined`').option('--port <port>', 'specify the port to use for the development server. Defaults to `8080`').option('--host <host>', 'specify the host to bind the dev server to. Use 0.0.0.0 for Docker/devcontainers. Defaults to `127.0.0.1`').option('--public-host <host>', 'connectable host the browser (HMR + reload bridge) dials when it differs from the bind host (e.g. a remote/devcontainer). Defaults to the bind host, or 127.0.0.1 when bound to 0.0.0.0').option('--log-context <list>', '[experimental] comma-separated contexts to include (background,content,page,sidebar,popup,options,devtools). Use `all` to include all contexts (default)').option('--logs <off|error|warn|info|debug|trace|all>', '[experimental] minimum centralized logger level to display in terminal (default: off)').option('--log-format <pretty|json|ndjson>', '[experimental] output format for logger events. Defaults to `pretty`').option('--no-log-timestamps', 'disable ISO timestamps in pretty output').option('--no-log-color', 'disable color in pretty output').option('--log-url <pattern>', '[experimental] only show logs where event.url matches this substring or regex (/re/i)').option('--log-tab <id>', 'only show logs for a specific tabId (number)').option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--wait [boolean]', 'wait for dist/extension-js/<browser>/ready.json and exit', parseOptionalBoolean).option('--wait-timeout <ms>', 'timeout in milliseconds when using --wait (default: 60000)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').addOption(new external_commander_namespaceObject.Option('--wait-format <pretty|json>').hideHelp()).addOption(new external_commander_namespaceObject.Option('--debug', 'print maintainer diagnostics alongside normal output')).addOption(new external_commander_namespaceObject.Option('--author, --author-mode', 'deprecated alias for --debug').hideHelp()).option('--allow-control', 'enable the agent-bridge control channel for bounded act (storage/reload/open): see `extension reload|storage|open`').option('--allow-eval', 'additionally enable `extension eval` (implies --allow-control, runs arbitrary code in a context, writes a 0600 session token)').option('--parent-pid <pid>', 'exit when the given process dies. For wrappers that spawn `extension dev`, so a leaked dev server can never outlive its owner').action(async (pathOrRemoteUrl, options, command)=>{
                 const { browser = 'chromium', ...devOptions } = options;
                 if (devOptions.debug || devOptions.author || devOptions.authorMode) {
                     process.env.EXTENSION_DEBUG = '1';
@@ -9340,39 +9342,75 @@ Cross-browser compatibility
             const base = xdg || external_node_path_default().join(external_node_os_default().homedir(), '.config');
             return external_node_path_default().join(base, 'extension-dev', 'auth.json');
         }
-        function readStoredLoginToken() {
+        function readStoredLogin() {
             try {
                 const raw = external_node_fs_default().readFileSync(storedLoginPath(), 'utf8');
                 const data = JSON.parse(raw);
-                if (!data || 'object' != typeof data) return '';
-                if (1 !== data.version) return '';
+                if (!data || 'object' != typeof data) return null;
+                if (1 !== data.version) return null;
                 const token = String(data.token || '').trim();
-                if (!token) return '';
+                if (!token) return null;
                 const expiresAt = Number(data.expiresAt || 0);
-                if (expiresAt && expiresAt <= Math.floor(Date.now() / 1000)) return '';
-                return token;
+                if (expiresAt && expiresAt <= Math.floor(Date.now() / 1000)) return null;
+                return {
+                    token,
+                    projectSlug: String(data.projectSlug || '').trim(),
+                    workspaceSlug: String(data.workspaceSlug || '').trim()
+                };
             } catch  {
-                return '';
+                return null;
             }
         }
-        function buildPublishRequest(opts) {
-            const token = String(opts.token || process.env.EXTENSION_DEV_TOKEN || readStoredLoginToken()).trim();
+        function readLocalProjectName(projectPath) {
+            const fromJson = (file)=>{
+                try {
+                    const data = JSON.parse(external_node_fs_default().readFileSync(file, 'utf8'));
+                    return String(data?.name || '').trim();
+                } catch  {
+                    return '';
+                }
+            };
+            return fromJson(external_node_path_default().join(projectPath, 'package.json')) || fromJson(external_node_path_default().join(projectPath, 'manifest.json')) || fromJson(external_node_path_default().join(projectPath, 'src', 'manifest.json')) || external_node_path_default().basename(external_node_path_default().resolve(projectPath));
+        }
+        function slugish(value) {
+            return value.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
+        }
+        function buildPublishPlan(opts) {
+            const stored = readStoredLogin();
+            const flagToken = String(opts.token || '').trim();
+            const envToken = String(process.env.EXTENSION_DEV_TOKEN || '').trim();
+            const token = flagToken || envToken || stored?.token || '';
+            const source = flagToken ? 'flag' : envToken ? 'env' : 'stored-login';
             if (!token) throw new Error(`No token. Publishing needs an extension.dev access token.\nGet one: ${PUBLISH_DOCS_URL}\n` + NO_TOKEN_REMEDY);
+            const projectPath = external_node_path_default().resolve(opts.projectPath || process.cwd());
+            const localName = readLocalProjectName(projectPath);
+            const confirmed = String(opts.project || '').trim();
+            const scopedSlug = 'stored-login' === source ? stored?.projectSlug || '' : '';
+            if (confirmed && scopedSlug && slugish(confirmed) !== slugish(scopedSlug)) throw new Error(`You asked to publish "${confirmed}" but your stored login is scoped to "${scopedSlug}".\nPass --token for ${confirmed}, or run npx @extension.dev/mcp login for it.`);
+            if (scopedSlug && slugish(scopedSlug) !== slugish(localName) && slugish(confirmed) !== slugish(scopedSlug)) throw new Error(`Your stored login is scoped to the "${scopedSlug}" project${stored?.workspaceSlug ? ` in workspace "${stored.workspaceSlug}"` : ''}, but ${projectPath} is "${localName}".\nPublishing here would share ${scopedSlug}, not ${localName}.\nRun extension publish inside ${scopedSlug}, pass --project ${scopedSlug} to publish that project on purpose, or pass --token / EXTENSION_DEV_TOKEN for this one.`);
             const base = String(opts.api || process.env.EXTENSION_DEV_API_URL || DEFAULT_API).replace(/\/+$/, '');
             const body = {};
             if (null != opts.ttl && '' !== opts.ttl) body.ttlHours = Number(opts.ttl);
             if (opts.buildSha) body.buildSha = opts.buildSha;
             return {
-                url: `${base}/api/cli/publish`,
-                headers: {
-                    authorization: `Bearer ${token}`,
-                    'content-type': 'application/json'
+                request: {
+                    url: `${base}/api/cli/publish`,
+                    headers: {
+                        authorization: `Bearer ${token}`,
+                        'content-type': 'application/json'
+                    },
+                    body: JSON.stringify(body)
                 },
-                body: JSON.stringify(body)
+                scope: {
+                    source,
+                    actsFor: scopedSlug || confirmed || localName,
+                    workspace: 'stored-login' === source ? stored?.workspaceSlug || '' : '',
+                    localName
+                }
             };
         }
         function registerPublishCommand(program) {
-            program.command('publish').arguments('[project-path]').usage('[project-path] [options]').description(commandDescriptions.publish).option('--token <token>', 'extension.dev access token (or EXTENSION_DEV_TOKEN, or the stored login)').option('--api <url>', 'platform base URL (or EXTENSION_DEV_API_URL)').option('--ttl <hours>', 'share-link lifetime in hours (1–168, default 24)').option('--build-sha <sha>', 'pin the share URL to a specific build').option('--output <pretty|json>', 'output format (default pretty)').action(async (_projectPathArg, opts)=>{
+            program.command('publish').arguments('[project-path]').usage('[project-path] [options]').description(commandDescriptions.publish).option('--token <token>', 'extension.dev access token (or EXTENSION_DEV_TOKEN, or the stored login)').option('--api <url>', 'platform base URL (or EXTENSION_DEV_API_URL)').option('--ttl <hours>', 'share-link lifetime in hours (1–168, default 24)').option('--build-sha <sha>', 'pin the share URL to a specific build').option('--project <slug>', 'name the project this publish is for, when it is not the directory you are in').option('--output <pretty|json>', 'output format (default pretty)').action(async (projectPathArg, opts)=>{
                 const asJson = 'json' === opts.output;
                 const failWith = async (status, error, prose, hint)=>{
                     if (asJson) console.log(JSON.stringify(messaging.Pr.fail('publish', status, error, hint ? {
@@ -9382,8 +9420,14 @@ Cross-browser compatibility
                     await exitAfterDrain(1);
                 };
                 let req;
+                let scope;
                 try {
-                    req = buildPublishRequest(opts);
+                    const plan = buildPublishPlan({
+                        ...opts,
+                        projectPath: projectPathArg
+                    });
+                    req = plan.request;
+                    scope = plan.scope;
                 } catch (err) {
                     const message = err?.message || 'publish failed: no token';
                     await failWith('denied', {
@@ -9425,8 +9469,16 @@ Cross-browser compatibility
                     }, message);
                     return;
                 }
-                if (asJson) console.log(JSON.stringify(messaging.Pr.ok('publish', 'published', data)));
-                else console.log(data.shareUrl || JSON.stringify(data));
+                if (asJson) console.log(JSON.stringify(messaging.Pr.ok('publish', 'published', {
+                    ...data,
+                    project: scope.actsFor,
+                    workspace: scope.workspace || void 0,
+                    tokenSource: scope.source
+                })));
+                else {
+                    console.error(`Published ${scope.actsFor}${scope.workspace ? ` (workspace ${scope.workspace})` : ''}:`);
+                    console.log(data.shareUrl || JSON.stringify(data));
+                }
                 await exitAfterDrain(0);
             });
         }

package/dist/extension/browsers/browsers-types.d.ts

@@ -35,7 +35,7 @@ export interface BrowserConfig {
  *
  * Each flag disables or modifies a specific browser feature for a more controlled development environment.
  */
-export type DefaultBrowserFlags = '--no-first-run' | '--disable-client-side-phishing-detection' | '--disable-component-extensions-with-background-pages' | '--disable-default-apps' | '--disable-features=InterestFeedContentSuggestions' | '--disable-features=Translate' | '--hide-scrollbars' | '--mute-audio' | '--no-default-browser-check' | '--ash-no-nudges' | '--disable-search-engine-choice-screen' | '--disable-features=MediaRoute' | '--use-mock-keychain' | '--disable-background-networking' | '--disable-breakpad' | '--disable-component-update' | '--disable-domain-reliability' | '--disable-features=AutofillServerCommunicatio' | '--disable-features=CertificateTransparencyComponentUpdate' | '--disable-sync' | '--disable-features=OptimizationHints' | '--disable-features=DialMediaRouteProvider' | '--no-pings' | '--enable-features=SidePanelUpdates' | '--enable-unsafe-extension-debugging' | '--silent-debugger-extension-api';
+export type DefaultBrowserFlags = '--no-first-run' | '--disable-client-side-phishing-detection' | '--disable-component-extensions-with-background-pages' | '--disable-default-apps' | '--disable-features=InterestFeedContentSuggestions' | '--disable-features=Translate' | '--hide-scrollbars' | '--mute-audio' | '--no-default-browser-check' | '--ash-no-nudges' | '--disable-search-engine-choice-screen' | '--disable-features=MediaRoute' | '--use-mock-keychain' | '--disable-background-networking' | '--disable-breakpad' | '--disable-component-update' | '--disable-domain-reliability' | '--disable-features=AutofillServerCommunicatio' | '--disable-features=CertificateTransparencyComponentUpdate' | '--disable-sync' | '--disable-features=OptimizationHints' | '--disable-features=DialMediaRouteProvider' | '--no-pings' | '--enable-features=SidePanelUpdates' | '--disable-features=DisableLoadExtensionCommandLineSwitch' | '--disable-features=ExtensionDisableUnsupportedDeveloper' | '--enable-unsafe-extension-debugging' | '--silent-debugger-extension-api';
 /**
  * Options for the browser plugin.
  */

package/dist/extension/commands/publish.d.ts

@@ -1,5 +1,12 @@
 import type { Command } from 'commander';
+export interface StoredLogin {
+    token: string;
+    projectSlug: string;
+    workspaceSlug: string;
+}
+export declare function readStoredLogin(): StoredLogin | null;
 export declare function readStoredLoginToken(): string;
+export declare function readLocalProjectName(projectPath: string): string;
 export interface PublishRequest {
     url: string;
     headers: Record<string, string>;
@@ -10,7 +17,24 @@ export interface PublishInput {
     api?: string;
     ttl?: string | number;
     buildSha?: string;
+    projectPath?: string;
+    project?: string;
+}
+/**
+ * The project this publish will act for, and where that answer came from. A
+ * stored login is scoped to one project, so a publish run anywhere else answers
+ * for the wrong one; `actsFor` is what the command prints and refuses on.
+ */
+export interface PublishScope {
+    source: 'flag' | 'env' | 'stored-login';
+    actsFor: string;
+    workspace: string;
+    localName: string;
 }
 /** Build the HTTP request (pure, unit-testable, no network). */
 export declare function buildPublishRequest(opts: PublishInput): PublishRequest;
+export declare function buildPublishPlan(opts: PublishInput): {
+    request: PublishRequest;
+    scope: PublishScope;
+};
 export declare function registerPublishCommand(program: Command): void;

package/package.json

@@ -38,7 +38,7 @@
     "extension": "./bin/extension.cjs"
   },
   "name": "extension",
-  "version": "4.0.27",
+  "version": "4.0.28",
   "description": "The cross-browser extension framework. Build Chrome, Edge, Firefox, and Safari extensions with no build configuration.",
   "homepage": "https://extension.js.org/",
   "bugs": {
@@ -106,9 +106,9 @@
     "vivaldi-location2": "2.1.1",
     "waterfox-location": "2.1.1",
     "yandex-location": "2.1.1",
-    "extension-create": "4.0.27",
-    "extension-develop": "4.0.27",
-    "extension-install": "4.0.27",
+    "extension-create": "4.0.28",
+    "extension-develop": "4.0.28",
+    "extension-install": "4.0.28",
     "commander": "^15.0.0",
     "pintor": "0.3.0",
     "semver": "^7.7.3",