extension 4.0.9 → 4.0.10

package/README.md

@@ -94,7 +94,7 @@ npx extension@latest dev --gecko-binary "/Applications/Firefox.app/Contents/MacO
 
 | <img alt="Chrome" src="https://media.extension.land/logos/browsers/chrome.svg" width="70"> | <img alt="Edge" src="https://media.extension.land/logos/browsers/edge.svg" width="70"> | <img alt="Firefox" src="https://media.extension.land/logos/browsers/firefox.svg" width="70"> | <img alt="Safari" src="https://media.extension.land/logos/browsers/safari.svg" width="70"> | <img alt="Chromium" src="https://media.extension.land/logos/browsers/chromium.svg" width="70"> | <img alt="Gecko" src="https://media.extension.land/logos/browsers/firefox.svg" width="70"> |
 | :-: | :-: | :-: | :-: | :-: | :-: |
-| Google Chrome<br>✅ Supported | Microsoft Edge<br>✅ Supported | Mozilla Firefox<br>✅ Supported | Apple Safari<br> 🚙 Next | Chromium-based<br>✅ Supported | Gecko-based<br>✅ Supported |
+| Google Chrome<br>✅ Supported | Microsoft Edge<br>✅ Supported | Mozilla Firefox<br>✅ Supported | Apple Safari<br> 🧪 Alpha | Chromium-based<br>✅ Supported | Gecko-based<br>✅ Supported |
 
 </div>
 

package/dist/browsers.cjs

@@ -463,6 +463,10 @@ var __webpack_modules__ = {
         function mv3BackgroundScriptsNotSupportedByChromium(extensionPath) {
             return `${getLoggingPrefix('warn')} ${pintor__rspack_import_4_default().brightYellow("This MV3 extension declares Firefox-style background.scripts with no service_worker — Chromium refuses to load it.")}\n${pintor__rspack_import_4_default().gray('PATH')} ${pintor__rspack_import_4_default().underline(extensionPath)}\nThe browser rejects it at launch with no console error, so the dev session cannot attach.\nRun it on the browser it targets (${pintor__rspack_import_4_default().blue('--browser firefox')}) or declare ${pintor__rspack_import_4_default().blue('background.service_worker')} for Chromium.`;
         }
+        function unsupportedManifestVersionOnChromium(extensionPath, declared) {
+            const value = void 0 === declared ? 'no manifest_version' : `manifest_version ${JSON.stringify(declared)}`;
+            return `${getLoggingPrefix('warn')} ${pintor__rspack_import_4_default().brightYellow(`This extension declares ${value}, which Chromium refuses as an unsupported manifest version.`)}\n${pintor__rspack_import_4_default().gray('PATH')} ${pintor__rspack_import_4_default().underline(extensionPath)}\nThe browser rejects it at launch (a native dialog, not a console error), so the dev session cannot attach.\nDeclare ${pintor__rspack_import_4_default().blue('"manifest_version": 3')} in the source manifest.`;
+        }
         function chromiumInvalidMatchPatterns(extensionPath, patterns) {
             const shown = patterns.slice(0, 6);
             const more = patterns.length - shown.length;
@@ -731,6 +735,7 @@ var __webpack_modules__ = {
             $w: ()=>bestEffortBannerPrintFailed,
             A9: ()=>firefoxLaunchCalled,
             AG: ()=>enhancedProcessManagementForceKill,
+            CN: ()=>unsupportedManifestVersionOnChromium,
             CY: ()=>devChromiumDebugPort,
             Cn: ()=>chromeProcessError,
             Dh: ()=>invalidGeckoBinaryPath,
@@ -1768,6 +1773,7 @@ var __webpack_modules__ = {
             const m = manifest;
             if (2 === Number(m?.manifest_version)) return 'mv2';
             if (3 === Number(m?.manifest_version) && Array.isArray(m?.background?.scripts) && m.background.scripts.length > 0 && !m?.background?.service_worker) return "mv3-background-scripts";
+            if (m && 'object' == typeof m && !Array.isArray(m) && 3 !== Number(m.manifest_version)) return 'unsupported-manifest-version';
             return null;
         }
         function findInvalidMatchPatterns(manifest) {
@@ -1802,9 +1808,42 @@ var __webpack_modules__ = {
             if (!host.includes('*')) return false;
             return '*' !== host && !/^\*\.[^*]+$/.test(host);
         }
-        function findChromiumLoadBlockers(manifest) {
+        function findChromiumLoadBlockers(manifest, browserVersion) {
             const m = manifest;
             const blockers = [];
+            if (!m || 'object' != typeof m || Array.isArray(m)) return blockers;
+            if ('string' != typeof m.name || '' === m.name) blockers.push("name: missing, empty, or not a string — Chrome requires a non-empty string name and refuses the extension.");
+            if ('string' != typeof m.version || !isValidDottedVersion(m.version)) blockers.push("version: missing or invalid — Chrome requires 1-4 dot-separated integers (0-65535) and refuses the extension.");
+            if (3 === Number(m.manifest_version) && Array.isArray(m.web_accessible_resources)) m.web_accessible_resources.forEach((entry, index)=>{
+                if (!entry || 'object' != typeof entry || Array.isArray(entry)) return void blockers.push(`web_accessible_resources[${index}]: MV2-style entry — MV3 requires {resources, matches|extension_ids|use_dynamic_url} dictionaries.`);
+                if (void 0 === entry.resources) blockers.push(`web_accessible_resources[${index}]: 'resources' is required — Chrome refuses the extension without it.`);
+                if (void 0 === entry.matches && void 0 === entry.extension_ids && void 0 === entry.use_dynamic_url) blockers.push(`web_accessible_resources[${index}]: needs one of 'matches', 'extension_ids', or 'use_dynamic_url' beside resources — Chrome refuses the extension without it.`);
+            });
+            const CS_RUN_AT = [
+                'document_start',
+                'document_end',
+                'document_idle'
+            ];
+            const csGroups = Array.isArray(m.content_scripts) ? m.content_scripts : [];
+            csGroups.forEach((group, index)=>{
+                if (!group || 'object' != typeof group) return;
+                if (void 0 === group.matches) blockers.push(`content_scripts[${index}]: 'matches' is required — Chrome refuses the extension without it.`);
+                else if (Array.isArray(group.matches) && 0 === group.matches.length) blockers.push(`content_scripts[${index}].matches: there must be at least one match — Chrome refuses the extension over an empty list.`);
+                for (const listKey of [
+                    'js',
+                    'css'
+                ]){
+                    const list = group[listKey];
+                    if (Array.isArray(list)) list.forEach((entry, entryIndex)=>{
+                        if ('string' != typeof entry) blockers.push(`content_scripts[${index}].${listKey}[${entryIndex}]: expected a string, got ${typeof entry} — Chrome refuses the extension.`);
+                    });
+                }
+                if (void 0 !== group.run_at && !CS_RUN_AT.includes(group.run_at)) blockers.push(`content_scripts[${index}].run_at: expected "document_start", "document_end" or "document_idle", got ${JSON.stringify(group.run_at)} — Chrome refuses the extension.`);
+            });
+            const minVersion = m.minimum_chrome_version;
+            if (void 0 !== minVersion) if ('string' == typeof minVersion && isValidDottedVersion(minVersion)) {
+                if (browserVersion && isValidDottedVersion(browserVersion) && compareDottedVersions(minVersion, browserVersion) > 0) blockers.push(`minimum_chrome_version: requires ${minVersion} but the resolved browser is ${browserVersion} — the browser refuses the extension.`);
+            } else blockers.push(`minimum_chrome_version: invalid value ${JSON.stringify(minVersion)} — Chrome refuses the extension.`);
             const commands = m?.commands;
             if (commands && 'object' == typeof commands) {
                 const withKeys = Object.values(commands).filter((command)=>command?.suggested_key);
@@ -1851,6 +1890,74 @@ var __webpack_modules__ = {
             }
             return findings;
         }
+        function findLocaleLoadBlockers(manifest, extensionDir) {
+            const m = manifest;
+            const blockers = [];
+            if (!m || 'object' != typeof m || Array.isArray(m)) return blockers;
+            const localesDir = external_path_.join(extensionDir, '_locales');
+            const defaultLocale = m.default_locale;
+            if ('string' == typeof defaultLocale && '' !== defaultLocale.trim()) {
+                const catalogPath = external_path_.join(localesDir, defaultLocale, 'messages.json');
+                let catalogKeys = null;
+                try {
+                    if (external_fs_.existsSync(catalogPath)) try {
+                        const raw = external_fs_.readFileSync(catalogPath, 'utf8').replace(/^\uFEFF/, '');
+                        const catalog = JSON.parse(raw);
+                        catalogKeys = new Set(Object.keys(catalog || {}).map((key)=>key.toLowerCase()));
+                    } catch  {
+                        blockers.push(`default_locale: _locales/${defaultLocale}/messages.json is not valid JSON — Chrome refuses the whole extension.`);
+                    }
+                    else blockers.push(`default_locale: "${defaultLocale}" is declared but _locales/${defaultLocale}/messages.json is missing — Chrome refuses the whole extension.`);
+                } catch  {
+                    return blockers;
+                }
+                if (catalogKeys) {
+                    const refs = new Set();
+                    collectMsgRefs(m, refs);
+                    for (const ref of refs)if (!catalogKeys.has(ref.toLowerCase())) blockers.push(`__MSG_${ref}__: used in the manifest but not defined in _locales/${defaultLocale}/messages.json — Chrome refuses the whole extension.`);
+                }
+            } else try {
+                if (external_fs_.existsSync(localesDir)) {
+                    const hasCatalog = external_fs_.readdirSync(localesDir).some((entry)=>external_fs_.existsSync(external_path_.join(localesDir, entry, 'messages.json')));
+                    if (hasCatalog) blockers.push("_locales: a locales tree exists but the manifest declares no default_locale — Chrome refuses the whole extension.");
+                }
+            } catch  {}
+            return blockers;
+        }
+        function findMissingManagedSchema(manifest, extensionDir) {
+            const m = manifest;
+            const schema = m?.storage?.managed_schema;
+            if ('string' != typeof schema || '' === schema.trim()) return [];
+            try {
+                const abs = external_path_.join(extensionDir, schema.replace(/^\//, ''));
+                if (!external_fs_.existsSync(abs)) return [
+                    `storage.managed_schema: "${schema}" does not exist in the extension directory — Chrome refuses the whole extension.`
+                ];
+            } catch  {}
+            return [];
+        }
+        function collectMsgRefs(value, out) {
+            if ('string' == typeof value) {
+                const match = /^__MSG_(.+)__$/.exec(value.trim());
+                if (match && !match[1].startsWith('@@')) out.add(match[1]);
+            } else if (Array.isArray(value)) for (const item of value)collectMsgRefs(item, out);
+            else if (value && 'object' == typeof value) for (const item of Object.values(value))collectMsgRefs(item, out);
+        }
+        function isValidDottedVersion(version) {
+            if (!version) return false;
+            const parts = version.split('.');
+            if (parts.length > 4) return false;
+            return parts.every((part)=>/^\d{1,5}$/.test(part) && Number(part) <= 65535);
+        }
+        function compareDottedVersions(a, b) {
+            const pa = a.split('.').map(Number);
+            const pb = b.split('.').map(Number);
+            for(let i = 0; i < 4; i++){
+                const diff = (pa[i] || 0) - (pb[i] || 0);
+                if (0 !== diff) return diff;
+            }
+            return 0;
+        }
         function isValidBase64(value) {
             if (0 === value.length || value.length % 4 !== 0) return false;
             if (!/^[A-Za-z0-9+/]+={0,2}$/.test(value)) return false;
@@ -2644,16 +2751,20 @@ var __webpack_modules__ = {
                 console.log(messages.iL(browser, browserBinaryLocation, browserVersionLine));
                 const extensionsToLoad = (0, runtime_options.fT)(this.options.extension);
                 (0, runtime_options.sl)(extensionsToLoad, this.ctx.setExtensionRoot);
+                const resolvedBrowserVersion = /(\d+(?:\.\d+){0,3})/.exec(browserVersionLine || '')?.[1];
                 for (const extPath of extensionsToLoad)try {
                     const m = JSON.parse(external_fs_.readFileSync(external_path_.join(String(extPath), 'manifest.json'), 'utf8'));
                     const refusal = diagnoseChromiumManifestRefusal(m);
                     if ('mv2' === refusal) console.warn(messages.sP(String(extPath)));
                     else if ("mv3-background-scripts" === refusal) console.warn(messages.NO(String(extPath)));
+                    else if ('unsupported-manifest-version' === refusal) console.warn(messages.CN(String(extPath), m?.manifest_version));
                     const invalidPatterns = findInvalidMatchPatterns(m);
                     if (invalidPatterns.length) console.warn(messages.qR(String(extPath), invalidPatterns));
                     const loadBlockers = [
-                        ...findChromiumLoadBlockers(m),
-                        ...findUnloadableIconFiles(m, String(extPath))
+                        ...findChromiumLoadBlockers(m, resolvedBrowserVersion),
+                        ...findUnloadableIconFiles(m, String(extPath)),
+                        ...findLocaleLoadBlockers(m, String(extPath)),
+                        ...findMissingManagedSchema(m, String(extPath))
                     ];
                     if (loadBlockers.length) console.warn(messages.L(String(extPath), loadBlockers));
                 } catch  {}

package/dist/cli.cjs

@@ -464,6 +464,10 @@ var __webpack_modules__ = {
         function mv3BackgroundScriptsNotSupportedByChromium(extensionPath) {
             return `${getLoggingPrefix('warn')} ${pintor__rspack_import_4_default().brightYellow("This MV3 extension declares Firefox-style background.scripts with no service_worker — Chromium refuses to load it.")}\n${pintor__rspack_import_4_default().gray('PATH')} ${pintor__rspack_import_4_default().underline(extensionPath)}\nThe browser rejects it at launch with no console error, so the dev session cannot attach.\nRun it on the browser it targets (${pintor__rspack_import_4_default().blue('--browser firefox')}) or declare ${pintor__rspack_import_4_default().blue('background.service_worker')} for Chromium.`;
         }
+        function unsupportedManifestVersionOnChromium(extensionPath, declared) {
+            const value = void 0 === declared ? 'no manifest_version' : `manifest_version ${JSON.stringify(declared)}`;
+            return `${getLoggingPrefix('warn')} ${pintor__rspack_import_4_default().brightYellow(`This extension declares ${value}, which Chromium refuses as an unsupported manifest version.`)}\n${pintor__rspack_import_4_default().gray('PATH')} ${pintor__rspack_import_4_default().underline(extensionPath)}\nThe browser rejects it at launch (a native dialog, not a console error), so the dev session cannot attach.\nDeclare ${pintor__rspack_import_4_default().blue('"manifest_version": 3')} in the source manifest.`;
+        }
         function chromiumInvalidMatchPatterns(extensionPath, patterns) {
             const shown = patterns.slice(0, 6);
             const more = patterns.length - shown.length;
@@ -607,7 +611,10 @@ var __webpack_modules__ = {
             return platform;
         }
         function safariRequiresMacOS(platform) {
-            return `${getLoggingPrefix('warn')} Safari extensions can only be built on macOS.\nDetected ${pintor__rspack_import_4_default().gray(prettyPlatform(platform))} — skipping Safari packaging. The web-extension build in ${pintor__rspack_import_4_default().yellow('dist/safari')} is still complete and can be packaged later on a Mac with Xcode.`;
+            return `${getLoggingPrefix('warn')} Safari extensions can only be built on macOS.\nDetected ${pintor__rspack_import_4_default().gray(prettyPlatform(platform))}. Target another browser via ${pintor__rspack_import_4_default().blue('--browser')} ${pintor__rspack_import_4_default().gray('<chrome|edge|firefox>')}, or run this command on a Mac with Xcode.`;
+        }
+        function safariPackagingSkippedNonMac(platform) {
+            return `${getLoggingPrefix('warn')} Safari packaging needs macOS with Xcode — detected ${pintor__rspack_import_4_default().gray(prettyPlatform(platform))}, so the Xcode packaging step is skipped.\nThe web-extension build in ${pintor__rspack_import_4_default().yellow('dist/safari')} is still complete and can be packaged later on a Mac with ${pintor__rspack_import_4_default().blue('extension build --browser=safari')}.`;
         }
         function safariXcodeRequired(developerDir) {
             const current = developerDir ? `${pintor__rspack_import_4_default().gray('Active toolchain:')} ${pintor__rspack_import_4_default().underline(developerDir)}` : `${pintor__rspack_import_4_default().gray('No active developer directory was found.')}`;
@@ -631,8 +638,19 @@ var __webpack_modules__ = {
         function safariOpening(target) {
             return `${getLoggingPrefix('info')} Opening ${pintor__rspack_import_4_default().underline(target)}`;
         }
-        function safariFailed(error) {
-            return `${getLoggingPrefix('error')} Safari build failed:\n${pintor__rspack_import_4_default().red(errorDetail(error))}`;
+        function safariToolFailed(tool, exitCode, outputTail) {
+            const code = null === exitCode ? 'no exit code' : `exit ${exitCode}`;
+            const tail = outputTail.trim().length ? `\n${pintor__rspack_import_4_default().gray('── last output ──')}\n${outputTail}` : `\n${pintor__rspack_import_4_default().gray('(no output captured)')}`;
+            return `${getLoggingPrefix('error')} Safari packaging tool ${pintor__rspack_import_4_default().underline(tool)} failed (${pintor__rspack_import_4_default().red(code)}).${tail}`;
+        }
+        function safariConverterWarnings(warnings) {
+            return `${getLoggingPrefix('warn')} safari-web-extension-converter reported ${pintor__rspack_import_4_default().yellow(String(warnings.length))} warning(s) — some manifest keys/APIs may not be supported by Safari:\n` + warnings.map((line)=>`  ${pintor__rspack_import_4_default().gray('•')} ${line}`).join('\n');
+        }
+        function safariDefaultBundleIdNote(bundleId) {
+            return `${getLoggingPrefix('info')} Using the generated bundle id ${pintor__rspack_import_4_default().gray(bundleId)}. For an app you plan to distribute, set your own with ${pintor__rspack_import_4_default().blue('--bundle-id')} now — changing it later makes Safari treat the extension as a new identity.`;
+        }
+        function safariOpenHint(appPath, appName) {
+            return `${getLoggingPrefix('info')} Launch it once to register with Safari: ${pintor__rspack_import_4_default().blue('open')} ${pintor__rspack_import_4_default().underline(`"${appPath}"`)}\nThen enable ${pintor__rspack_import_4_default().brightBlue(appName)} via Safari ▸ Develop ▸ ${pintor__rspack_import_4_default().yellow('Allow Unsigned Extensions')} and Safari ▸ Settings ▸ Extensions.`;
         }
         function safariDryRunNotBuilding() {
             return `${getLoggingPrefix('info')} [browser] Dry run: not building Safari app`;
@@ -656,7 +674,13 @@ var __webpack_modules__ = {
             return `${getLoggingPrefix('success')} Rebuilt ${pintor__rspack_import_4_default().brightBlue(appName)} — reload the page (or toggle the extension) in Safari to see changes.`;
         }
         function safariProjectStale() {
-            return `${getLoggingPrefix('info')} manifest.json changed since the Xcode project was generated — regenerating project.`;
+            return `${getLoggingPrefix('info')} manifest.json or identity options changed since the Xcode project was generated — regenerating project.`;
+        }
+        function safariForcedRegeneration() {
+            return `${getLoggingPrefix('info')} --force-regenerate set — regenerating the Xcode project.`;
+        }
+        function safariRegenerationDiscards(preservedKeys) {
+            return `${getLoggingPrefix('warn')} Regenerating replaces the Xcode project: customizations made in Xcode (entitlements, capabilities, added files/targets) are ${pintor__rspack_import_4_default().red('discarded')}.\nPreserved automatically: ${pintor__rspack_import_4_default().yellow(preservedKeys.join(', '))}. If you customized the project, back it up before continuing.`;
         }
         function safariSettingsPreserved(keys) {
             return `${getLoggingPrefix('info')} Preserved Xcode build settings across regeneration: ${pintor__rspack_import_4_default().yellow(keys.join(', '))}.\nIf any other project-level tweaks were lost, reconfigure them in Xcode.`;
@@ -795,10 +819,13 @@ var __webpack_modules__ = {
             return `${getLoggingPrefix('error')} Invalid RDP request payload`;
         }
         __webpack_require__.d(__webpack_exports__, {
+            $q: ()=>safariDefaultBundleIdNote,
             $w: ()=>bestEffortBannerPrintFailed,
+            A: ()=>safariToolFailed,
             A9: ()=>firefoxLaunchCalled,
             AG: ()=>enhancedProcessManagementForceKill,
             Aj: ()=>safariDryRunXcodebuild,
+            CN: ()=>unsupportedManifestVersionOnChromium,
             CY: ()=>devChromiumDebugPort,
             Cn: ()=>chromeProcessError,
             Cs: ()=>safariToolchainMissing,
@@ -811,6 +838,7 @@ var __webpack_modules__ = {
             Fm: ()=>connectionClosedError,
             G3: ()=>safariRequiresMacOS,
             Gq: ()=>locatingBrowser,
+            H1: ()=>safariRegenerationDiscards,
             HH: ()=>messageWithoutSenderError,
             Ih: ()=>browserNotInstalledError,
             JB: ()=>devChannelSnapshotInUse,
@@ -826,12 +854,13 @@ var __webpack_modules__ = {
             NO: ()=>mv3BackgroundScriptsNotSupportedByChromium,
             Nk: ()=>chromiumDryRunNotLaunching,
             Q0: ()=>chromiumDryRunBinary,
-            Qr: ()=>safariFailed,
             Rl: ()=>safariBuilt,
             Sp: ()=>invalidChromiumBinaryPath,
             TF: ()=>enhancedProcessManagementCleanupError,
             Te: ()=>cdpClientTargetWebSocketUrlStored,
             Th: ()=>browserInstanceExited,
+            Tq: ()=>safariForcedRegeneration,
+            UW: ()=>safariPackagingSkippedNonMac,
             Ug: ()=>usingManagedChromiumFamilyFallback,
             Vk: ()=>enhancedProcessManagementCleanup,
             WV: ()=>addonInstallError,
@@ -840,6 +869,7 @@ var __webpack_modules__ = {
             Z5: ()=>cdpClientExtensionInfoFailed,
             _D: ()=>browserLaunchError,
             aI: ()=>devChromeProfilePath,
+            aO: ()=>safariOpenHint,
             bv: ()=>cdpUnifiedExtensionLog,
             cD: ()=>targetActorHasActiveRequestError,
             cF: ()=>safariRebuilt,
@@ -882,6 +912,7 @@ var __webpack_modules__ = {
             wk: ()=>chromeFailedToSpawn,
             xx: ()=>cdpFailedToHandleMessage,
             xy: ()=>chromeInitializingEnhancedReload,
+            y1: ()=>safariConverterWarnings,
             y7: ()=>skippingBrowserLaunchDueToCompileErrors,
             yc: ()=>safariDryRunNotBuilding
         });
@@ -1853,6 +1884,7 @@ var __webpack_modules__ = {
             const m = manifest;
             if (2 === Number(m?.manifest_version)) return 'mv2';
             if (3 === Number(m?.manifest_version) && Array.isArray(m?.background?.scripts) && m.background.scripts.length > 0 && !m?.background?.service_worker) return "mv3-background-scripts";
+            if (m && 'object' == typeof m && !Array.isArray(m) && 3 !== Number(m.manifest_version)) return 'unsupported-manifest-version';
             return null;
         }
         function findInvalidMatchPatterns(manifest) {
@@ -1887,9 +1919,42 @@ var __webpack_modules__ = {
             if (!host.includes('*')) return false;
             return '*' !== host && !/^\*\.[^*]+$/.test(host);
         }
-        function findChromiumLoadBlockers(manifest) {
+        function findChromiumLoadBlockers(manifest, browserVersion) {
             const m = manifest;
             const blockers = [];
+            if (!m || 'object' != typeof m || Array.isArray(m)) return blockers;
+            if ('string' != typeof m.name || '' === m.name) blockers.push("name: missing, empty, or not a string — Chrome requires a non-empty string name and refuses the extension.");
+            if ('string' != typeof m.version || !isValidDottedVersion(m.version)) blockers.push("version: missing or invalid — Chrome requires 1-4 dot-separated integers (0-65535) and refuses the extension.");
+            if (3 === Number(m.manifest_version) && Array.isArray(m.web_accessible_resources)) m.web_accessible_resources.forEach((entry, index)=>{
+                if (!entry || 'object' != typeof entry || Array.isArray(entry)) return void blockers.push(`web_accessible_resources[${index}]: MV2-style entry — MV3 requires {resources, matches|extension_ids|use_dynamic_url} dictionaries.`);
+                if (void 0 === entry.resources) blockers.push(`web_accessible_resources[${index}]: 'resources' is required — Chrome refuses the extension without it.`);
+                if (void 0 === entry.matches && void 0 === entry.extension_ids && void 0 === entry.use_dynamic_url) blockers.push(`web_accessible_resources[${index}]: needs one of 'matches', 'extension_ids', or 'use_dynamic_url' beside resources — Chrome refuses the extension without it.`);
+            });
+            const CS_RUN_AT = [
+                'document_start',
+                'document_end',
+                'document_idle'
+            ];
+            const csGroups = Array.isArray(m.content_scripts) ? m.content_scripts : [];
+            csGroups.forEach((group, index)=>{
+                if (!group || 'object' != typeof group) return;
+                if (void 0 === group.matches) blockers.push(`content_scripts[${index}]: 'matches' is required — Chrome refuses the extension without it.`);
+                else if (Array.isArray(group.matches) && 0 === group.matches.length) blockers.push(`content_scripts[${index}].matches: there must be at least one match — Chrome refuses the extension over an empty list.`);
+                for (const listKey of [
+                    'js',
+                    'css'
+                ]){
+                    const list = group[listKey];
+                    if (Array.isArray(list)) list.forEach((entry, entryIndex)=>{
+                        if ('string' != typeof entry) blockers.push(`content_scripts[${index}].${listKey}[${entryIndex}]: expected a string, got ${typeof entry} — Chrome refuses the extension.`);
+                    });
+                }
+                if (void 0 !== group.run_at && !CS_RUN_AT.includes(group.run_at)) blockers.push(`content_scripts[${index}].run_at: expected "document_start", "document_end" or "document_idle", got ${JSON.stringify(group.run_at)} — Chrome refuses the extension.`);
+            });
+            const minVersion = m.minimum_chrome_version;
+            if (void 0 !== minVersion) if ('string' == typeof minVersion && isValidDottedVersion(minVersion)) {
+                if (browserVersion && isValidDottedVersion(browserVersion) && compareDottedVersions(minVersion, browserVersion) > 0) blockers.push(`minimum_chrome_version: requires ${minVersion} but the resolved browser is ${browserVersion} — the browser refuses the extension.`);
+            } else blockers.push(`minimum_chrome_version: invalid value ${JSON.stringify(minVersion)} — Chrome refuses the extension.`);
             const commands = m?.commands;
             if (commands && 'object' == typeof commands) {
                 const withKeys = Object.values(commands).filter((command)=>command?.suggested_key);
@@ -1936,6 +2001,74 @@ var __webpack_modules__ = {
             }
             return findings;
         }
+        function findLocaleLoadBlockers(manifest, extensionDir) {
+            const m = manifest;
+            const blockers = [];
+            if (!m || 'object' != typeof m || Array.isArray(m)) return blockers;
+            const localesDir = external_path_.join(extensionDir, '_locales');
+            const defaultLocale = m.default_locale;
+            if ('string' == typeof defaultLocale && '' !== defaultLocale.trim()) {
+                const catalogPath = external_path_.join(localesDir, defaultLocale, 'messages.json');
+                let catalogKeys = null;
+                try {
+                    if (external_fs_.existsSync(catalogPath)) try {
+                        const raw = external_fs_.readFileSync(catalogPath, 'utf8').replace(/^\uFEFF/, '');
+                        const catalog = JSON.parse(raw);
+                        catalogKeys = new Set(Object.keys(catalog || {}).map((key)=>key.toLowerCase()));
+                    } catch  {
+                        blockers.push(`default_locale: _locales/${defaultLocale}/messages.json is not valid JSON — Chrome refuses the whole extension.`);
+                    }
+                    else blockers.push(`default_locale: "${defaultLocale}" is declared but _locales/${defaultLocale}/messages.json is missing — Chrome refuses the whole extension.`);
+                } catch  {
+                    return blockers;
+                }
+                if (catalogKeys) {
+                    const refs = new Set();
+                    collectMsgRefs(m, refs);
+                    for (const ref of refs)if (!catalogKeys.has(ref.toLowerCase())) blockers.push(`__MSG_${ref}__: used in the manifest but not defined in _locales/${defaultLocale}/messages.json — Chrome refuses the whole extension.`);
+                }
+            } else try {
+                if (external_fs_.existsSync(localesDir)) {
+                    const hasCatalog = external_fs_.readdirSync(localesDir).some((entry)=>external_fs_.existsSync(external_path_.join(localesDir, entry, 'messages.json')));
+                    if (hasCatalog) blockers.push("_locales: a locales tree exists but the manifest declares no default_locale — Chrome refuses the whole extension.");
+                }
+            } catch  {}
+            return blockers;
+        }
+        function findMissingManagedSchema(manifest, extensionDir) {
+            const m = manifest;
+            const schema = m?.storage?.managed_schema;
+            if ('string' != typeof schema || '' === schema.trim()) return [];
+            try {
+                const abs = external_path_.join(extensionDir, schema.replace(/^\//, ''));
+                if (!external_fs_.existsSync(abs)) return [
+                    `storage.managed_schema: "${schema}" does not exist in the extension directory — Chrome refuses the whole extension.`
+                ];
+            } catch  {}
+            return [];
+        }
+        function collectMsgRefs(value, out) {
+            if ('string' == typeof value) {
+                const match = /^__MSG_(.+)__$/.exec(value.trim());
+                if (match && !match[1].startsWith('@@')) out.add(match[1]);
+            } else if (Array.isArray(value)) for (const item of value)collectMsgRefs(item, out);
+            else if (value && 'object' == typeof value) for (const item of Object.values(value))collectMsgRefs(item, out);
+        }
+        function isValidDottedVersion(version) {
+            if (!version) return false;
+            const parts = version.split('.');
+            if (parts.length > 4) return false;
+            return parts.every((part)=>/^\d{1,5}$/.test(part) && Number(part) <= 65535);
+        }
+        function compareDottedVersions(a, b) {
+            const pa = a.split('.').map(Number);
+            const pb = b.split('.').map(Number);
+            for(let i = 0; i < 4; i++){
+                const diff = (pa[i] || 0) - (pb[i] || 0);
+                if (0 !== diff) return diff;
+            }
+            return 0;
+        }
         function isValidBase64(value) {
             if (0 === value.length || value.length % 4 !== 0) return false;
             if (!/^[A-Za-z0-9+/]+={0,2}$/.test(value)) return false;
@@ -2729,16 +2862,20 @@ var __webpack_modules__ = {
                 console.log(messages.iL(browser, browserBinaryLocation, browserVersionLine));
                 const extensionsToLoad = (0, runtime_options.fT)(this.options.extension);
                 (0, runtime_options.sl)(extensionsToLoad, this.ctx.setExtensionRoot);
+                const resolvedBrowserVersion = /(\d+(?:\.\d+){0,3})/.exec(browserVersionLine || '')?.[1];
                 for (const extPath of extensionsToLoad)try {
                     const m = JSON.parse(external_fs_.readFileSync(external_path_.join(String(extPath), 'manifest.json'), 'utf8'));
                     const refusal = diagnoseChromiumManifestRefusal(m);
                     if ('mv2' === refusal) console.warn(messages.sP(String(extPath)));
                     else if ("mv3-background-scripts" === refusal) console.warn(messages.NO(String(extPath)));
+                    else if ('unsupported-manifest-version' === refusal) console.warn(messages.CN(String(extPath), m?.manifest_version));
                     const invalidPatterns = findInvalidMatchPatterns(m);
                     if (invalidPatterns.length) console.warn(messages.qR(String(extPath), invalidPatterns));
                     const loadBlockers = [
-                        ...findChromiumLoadBlockers(m),
-                        ...findUnloadableIconFiles(m, String(extPath))
+                        ...findChromiumLoadBlockers(m, resolvedBrowserVersion),
+                        ...findUnloadableIconFiles(m, String(extPath)),
+                        ...findLocaleLoadBlockers(m, String(extPath)),
+                        ...findMissingManagedSchema(m, String(extPath))
                     ];
                     if (loadBlockers.length) console.warn(messages.L(String(extPath), loadBlockers));
                 } catch  {}
@@ -4973,6 +5110,12 @@ AI Assistants
         function unsupportedBrowserFlag(value, supported) {
             return `${getLoggingPrefix('error')} Unsupported --browser value: ${value}. Supported: ${supported.join(', ')}.`;
         }
+        function safariOnlyOption(flags) {
+            return `${getLoggingPrefix('error')} ${flags.map(messages_code).join(', ')} only appl${1 === flags.length ? 'ies' : 'y'} to Safari targets. Add ${messages_code('--browser safari')} (or ${messages_code('webkit-based')}).`;
+        }
+        function safariInvalidBundleId(bundleId) {
+            return `${getLoggingPrefix('error')} Invalid bundle identifier: ${messages_code(bundleId)}\nUse reverse-DNS form — dot-separated segments of letters, digits and hyphens, each starting with a letter (e.g. ${messages_code('com.example.my-extension')}).`;
+        }
         function safariCommandNotSupported(command) {
             return `${getLoggingPrefix('error')} ${messages_code(command)} can't load an extension into Safari automatically.\nSafari extensions ship inside a signed app and are enabled by hand, so there's no live browser session to load into — unlike Chromium and Firefox.\nBuild the Safari app instead: ${messages_code('extension build --browser safari')}\nThen open the generated app and enable it in Safari → Settings → Extensions.`;
         }
@@ -6156,6 +6299,9 @@ Cross-Browser Compatibility
         function deriveBundleId(appName) {
             return `dev.extensionjs.${bundleSegment(appName)}`;
         }
+        function isValidBundleId(value) {
+            return /^[A-Za-z][A-Za-z0-9-]*(\.[A-Za-z][A-Za-z0-9-]*)+$/.test(value);
+        }
         function readManifest(extensionDir) {
             try {
                 const manifestPath = external_path_.join(extensionDir, 'manifest.json');
@@ -6167,13 +6313,16 @@ Cross-Browser Compatibility
             const extensionDir = String(compilation?.options?.output?.path || '');
             const manifest = readManifest(extensionDir);
             const appName = sanitizeAppName(String(host.appName || manifest?.name || 'Extension'));
-            const bundleIdentifier = deriveBundleId(appName);
+            const userBundleId = String(host.bundleId || '').trim();
+            const bundleIdDerived = !userBundleId;
+            const bundleIdentifier = bundleIdDerived ? deriveBundleId(appName) : userBundleId;
             const projectLocation = `${extensionDir.replace(/[\\/]+$/, '')}-xcode`;
             return {
                 extensionDir,
                 projectLocation,
                 appName,
                 bundleIdentifier,
+                bundleIdDerived,
                 macOsOnly: false !== host.macOsOnly,
                 language: 'swift',
                 open: !host.noOpen,
@@ -6250,19 +6399,31 @@ Cross-Browser Compatibility
                 return raw;
             }
         }
+        function composeProjectFingerprint(config) {
+            return JSON.stringify({
+                v: 2,
+                identity: {
+                    appName: config.appName,
+                    bundleId: config.bundleIdentifier,
+                    macOsOnly: config.macOsOnly
+                },
+                manifest: normalizeManifest(readManifestRaw(config.extensionDir))
+            });
+        }
         function saveManifestFingerprint(config) {
-            const raw = readManifestRaw(config.extensionDir);
             external_fs_.mkdirSync(external_path_.dirname(manifestFingerprintPath(config)), {
                 recursive: true
             });
-            external_fs_.writeFileSync(manifestFingerprintPath(config), normalizeManifest(raw), 'utf8');
+            external_fs_.writeFileSync(manifestFingerprintPath(config), composeProjectFingerprint(config), 'utf8');
         }
         function isProjectStale(config) {
             const fpPath = manifestFingerprintPath(config);
             if (!external_fs_.existsSync(fpPath)) return true;
             const stored = external_fs_.readFileSync(fpPath, 'utf8');
-            const current = normalizeManifest(readManifestRaw(config.extensionDir));
-            return stored !== current;
+            return stored !== composeProjectFingerprint(config);
+        }
+        function alignBundleIdentifiers(pbxprojContent, bundleId) {
+            return pbxprojContent.replace(/PRODUCT_BUNDLE_IDENTIFIER = ("?)([^;"]+)\1;/g, (_match, _quote, value)=>/\.Extension$/.test(String(value)) ? `PRODUCT_BUNDLE_IDENTIFIER = "${bundleId}.Extension";` : `PRODUCT_BUNDLE_IDENTIFIER = "${bundleId}";`);
         }
         const PRESERVED_SETTINGS = [
             'DEVELOPMENT_TEAM',
@@ -6319,19 +6480,17 @@ Cross-Browser Compatibility
         function delay(ms) {
             return new Promise((resolve)=>setTimeout(resolve, ms));
         }
-        function runTool(bin, args) {
-            const inheritOutput = 'true' === process.env.EXTENSION_AUTHOR_MODE;
-            return new Promise((resolve)=>{
-                const child = (0, external_child_process_.spawn)(bin, args, {
-                    stdio: inheritOutput ? 'inherit' : 'ignore'
-                });
-                child.on('error', ()=>resolve(false));
-                child.on('close', (code)=>resolve(0 === code));
-            });
+        const TOOL_TAIL_LINES = 50;
+        const TOOL_TAIL_BYTES = 8192;
+        function toolOutputTail(output) {
+            const lines = output.slice(4 * -TOOL_TAIL_BYTES).split(/\r?\n/).filter((line)=>line.trim().length > 0);
+            const tail = lines.slice(-TOOL_TAIL_LINES).join('\n');
+            return tail.length > TOOL_TAIL_BYTES ? tail.slice(-TOOL_TAIL_BYTES) : tail;
         }
-        function runToolCapture(bin, args) {
+        function runTool(bin, args, opts) {
+            const streamOutput = 'true' === process.env.EXTENSION_AUTHOR_MODE && !opts?.quiet;
             return new Promise((resolve)=>{
-                let stdout = '';
+                let output = '';
                 const child = (0, external_child_process_.spawn)(bin, args, {
                     stdio: [
                         'ignore',
@@ -6339,26 +6498,38 @@ Cross-Browser Compatibility
                         'pipe'
                     ]
                 });
-                child.stdout?.on('data', (chunk)=>{
-                    stdout += String(chunk);
-                });
-                child.on('error', ()=>resolve({
+                const onChunk = (chunk)=>{
+                    const text = String(chunk);
+                    output += text;
+                    if (output.length > 8 * TOOL_TAIL_BYTES) output = output.slice(4 * -TOOL_TAIL_BYTES);
+                    if (streamOutput) process.stdout.write(text);
+                };
+                child.stdout?.on('data', onChunk);
+                child.stderr?.on('data', onChunk);
+                child.on('error', (error)=>resolve({
                         ok: false,
-                        stdout
+                        code: null,
+                        output: `${output}${String(error)}`
                     }));
                 child.on('close', (code)=>resolve({
                         ok: 0 === code,
-                        stdout
+                        code,
+                        output
                     }));
             });
         }
+        function converterWarnings(output) {
+            return output.split(/\r?\n/).filter((line)=>/warning/i.test(line)).map((line)=>line.trim()).filter((line)=>line.length > 0);
+        }
         async function confirmRegisteredWithSafari(bundleIdentifier) {
             const needle = `${bundleIdentifier}.Extension`;
             for(let attempt = 0; attempt < 6; attempt += 1){
-                const { ok, stdout } = await runToolCapture('pluginkit', [
+                const { ok, output } = await runTool('pluginkit', [
                     '-m'
-                ]);
-                if (ok && stdout.includes(needle)) return true;
+                ], {
+                    quiet: true
+                });
+                if (ok && output.includes(needle)) return true;
                 await delay(800);
             }
             return false;
@@ -6372,6 +6543,20 @@ Cross-Browser Compatibility
             }
             return null;
         }
+        function safariBuildPreflight() {
+            const tc = detectSafariToolchain();
+            if (!tc.platformOk) return {
+                severity: 'skip',
+                message: messages.UW(process.platform)
+            };
+            if (!tc.ok) return {
+                severity: 'fatal',
+                message: tc.needsFullXcode ? messages.Xi(tc.developerDir) : messages.Cs(tc.converter ? 'xcodebuild' : 'safari-web-extension-converter')
+            };
+            return {
+                severity: 'ok'
+            };
+        }
         async function runSafariPipeline(compilation, host, logger, mode) {
             const config = resolveSafariBuildConfig(compilation, host);
             const converterArgs = composeConverterArgs(config);
@@ -6390,10 +6575,24 @@ Cross-Browser Compatibility
             const projectExists = external_fs_.existsSync(xcodeProjectPath(config));
             const needsConversion = !projectExists || host.forceRegenerate || isProjectStale(config);
             if (needsConversion) {
-                if (projectExists) logger.info?.(messages.jc());
+                if (projectExists) {
+                    logger.info?.(host.forceRegenerate ? messages.Tq() : messages.jc());
+                    logger.warn?.(messages.H1([
+                        ...PRESERVED_SETTINGS
+                    ]));
+                }
                 const { saved, restore } = backupAndRestoreXcodeSettings(config);
                 logger.info?.(messages.uK(config.extensionDir));
-                if (!await runTool('xcrun', converterArgs)) return void logger.error?.(messages.Qr(new Error('safari-web-extension-converter failed')));
+                const converted = await runTool('xcrun', converterArgs);
+                if (!converted.ok) {
+                    const tail = toolOutputTail(converted.output);
+                    logger.error?.(messages.A('safari-web-extension-converter', converted.code, tail));
+                    throw new Error(`safari-web-extension-converter failed (exit ${converted.code})\n${tail}`);
+                }
+                const warnings = converterWarnings(converted.output);
+                if (warnings.length > 0) logger.warn?.(messages.y1(warnings));
+                const projFile = pbxprojPath(config);
+                if (external_fs_.existsSync(projFile)) external_fs_.writeFileSync(projFile, alignBundleIdentifiers(external_fs_.readFileSync(projFile, 'utf8'), config.bundleIdentifier), 'utf8');
                 restore();
                 const preservedKeys = Object.keys(saved);
                 if (preservedKeys.length > 0) logger.info?.(messages.oB(preservedKeys));
@@ -6401,21 +6600,26 @@ Cross-Browser Compatibility
                 logger.info?.(messages.l_(config.projectLocation));
             } else logger.info?.(messages.oM());
             if ('full' === mode) logger.info?.(messages.jR(macOsSchemeName(config)));
-            if (!await runTool('xcodebuild', xcodebuildArgs)) return void logger.error?.(messages.Qr(new Error('xcodebuild failed')));
+            const built = await runTool('xcodebuild', xcodebuildArgs);
+            if (!built.ok) {
+                const tail = toolOutputTail(built.output);
+                logger.error?.(messages.A('xcodebuild', built.code, tail));
+                throw new Error(`xcodebuild failed (exit ${built.code})\n${tail}`);
+            }
             const appPath = builtAppPath(config);
             if ('resync' === mode) return void logger.info?.(messages.cF(config.appName));
             logger.info?.(messages.Rl(appPath));
-            if (config.open) {
-                const target = external_fs_.existsSync(appPath) ? appPath : xcodeProjectPath(config);
-                logger.info?.(messages.fw(target));
-                await runTool('open', [
-                    target
-                ]);
-                if (config.safariBinary) await runTool('open', [
-                    '-a',
-                    config.safariBinary
-                ]);
-            }
+            if (config.bundleIdDerived) logger.info?.(messages.$q(config.bundleIdentifier));
+            if (!config.open) return void logger.info?.(messages.aO(appPath, config.appName));
+            const target = external_fs_.existsSync(appPath) ? appPath : xcodeProjectPath(config);
+            logger.info?.(messages.fw(target));
+            await runTool('open', [
+                target
+            ]);
+            if (config.safariBinary) await runTool('open', [
+                '-a',
+                config.safariBinary
+            ]);
             logger.info?.(messages.fO(config.appName));
             if (await confirmRegisteredWithSafari(config.bundleIdentifier)) logger.info?.(messages.fd(config.appName));
             else logger.warn?.(messages.qY(config.appName));
@@ -6454,7 +6658,7 @@ Cross-Browser Compatibility
             return values.length > 0 ? values : void 0;
         }
         function registerDevCommand(program) {
-            program.command('dev').arguments('[project-path|remote-url]').usage('[project-path|remote-url] [options]').description(commandDescriptions.dev).addHelpText('after', "\nAdditional options:\n  --no-browser    do not launch the browser (dev server still starts)\n  --no-reload     emit a dev-mode dist without the content-script reload runtime; tabs need manual reload to see changes\n  --wait          wait for ready contract and exit\n  --wait-format   pretty|json output for wait mode\n").option('--profile <path-to-file | boolean>', 'what path to use for the browser profile. A boolean value of false sets the profile to the default user profile. Defaults to a fresh profile').option('-b, --browser <chrome | chromium | edge | firefox | chromium-based | gecko-based | firefox-based | safari | webkit-based>', 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds and opens a Safari app via Xcode (macOS only; no live reload)').option('--chromium-binary <path-to-binary>', 'specify a path to the Chromium binary. This option overrides the --browser setting. Defaults to the system default').option('--gecko-binary, --firefox-binary <path-to-binary>', 'specify a path to the Gecko binary. This option overrides the --browser setting. Defaults to the system default').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `true`', parseOptionalBoolean).option('--no-open', 'do not open the browser automatically (default: open)').option('--starting-url <url>', 'specify the starting URL for the browser. Defaults to `undefined`').option('--port <port>', 'specify the port to use for the development server. Defaults to `8080`').option('--host <host>', 'specify the host to bind the dev server to. Use 0.0.0.0 for Docker/devcontainers. Defaults to `127.0.0.1`').option('--public-host <host>', 'connectable host the browser (HMR + reload bridge) dials when it differs from the bind host (e.g. a remote/devcontainer). Defaults to the bind host, or 127.0.0.1 when bound to 0.0.0.0').option('--log-context <list>', '[experimental] comma-separated contexts to include (background,content,page,sidebar,popup,options,devtools). Use `all` to include all contexts (default)').option('--logs <off|error|warn|info|debug|trace|all>', '[experimental] minimum centralized logger level to display in terminal (default: off)').option('--log-format <pretty|json|ndjson>', '[experimental] output format for logger events. Defaults to `pretty`').option('--no-log-timestamps', 'disable ISO timestamps in pretty output').option('--no-log-color', 'disable color in pretty output').option('--log-url <pattern>', '[experimental] only show logs where event.url matches this substring or regex (/re/i)').option('--log-tab <id>', 'only show logs for a specific tabId (number)').option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--wait [boolean]', 'wait for dist/extension-js/<browser>/ready.json and exit', parseOptionalBoolean).option('--wait-timeout <ms>', 'timeout in milliseconds when using --wait (default: 60000)').option('--wait-format <pretty|json>', 'output format for --wait results (default: pretty)').option('--author, --author-mode', '[internal] enable maintainer diagnostics (does not affect user runtime logs)').option('--allow-control', 'enable the agent-bridge control channel for bounded act (storage/reload/open): see `extension reload|storage|open`').option('--allow-eval', 'additionally enable `extension eval` (runs arbitrary code in a context; writes a 0600 session token)').action(async function(pathOrRemoteUrl, { browser = 'chromium', ...devOptions }) {
+            program.command('dev').arguments('[project-path|remote-url]').usage('[project-path|remote-url] [options]').description(commandDescriptions.dev).addHelpText('after', "\nAdditional options:\n  --no-browser    do not launch the browser (dev server still starts)\n  --no-reload     emit a dev-mode dist without the content-script reload runtime; tabs need manual reload to see changes\n  --wait          wait for ready contract and exit\n  --wait-format   pretty|json output for wait mode\n").option('--profile <path-to-file | boolean>', 'what path to use for the browser profile. A boolean value of false sets the profile to the default user profile. Defaults to a fresh profile').option('-b, --browser <chrome | chromium | edge | firefox | chromium-based | gecko-based | firefox-based | safari | webkit-based>', 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds and opens a Safari app via Xcode (macOS only; no live reload)').option('--chromium-binary <path-to-binary>', 'specify a path to the Chromium binary. This option overrides the --browser setting. Defaults to the system default').option('--gecko-binary, --firefox-binary <path-to-binary>', 'specify a path to the Gecko binary. This option overrides the --browser setting. Defaults to the system default').option('--safari-binary <path-to-binary>', 'specify the Safari binary to open after packaging (safari targets only)').option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `true`', parseOptionalBoolean).option('--no-open', 'do not open the browser automatically (default: open)').option('--starting-url <url>', 'specify the starting URL for the browser. Defaults to `undefined`').option('--port <port>', 'specify the port to use for the development server. Defaults to `8080`').option('--host <host>', 'specify the host to bind the dev server to. Use 0.0.0.0 for Docker/devcontainers. Defaults to `127.0.0.1`').option('--public-host <host>', 'connectable host the browser (HMR + reload bridge) dials when it differs from the bind host (e.g. a remote/devcontainer). Defaults to the bind host, or 127.0.0.1 when bound to 0.0.0.0').option('--log-context <list>', '[experimental] comma-separated contexts to include (background,content,page,sidebar,popup,options,devtools). Use `all` to include all contexts (default)').option('--logs <off|error|warn|info|debug|trace|all>', '[experimental] minimum centralized logger level to display in terminal (default: off)').option('--log-format <pretty|json|ndjson>', '[experimental] output format for logger events. Defaults to `pretty`').option('--no-log-timestamps', 'disable ISO timestamps in pretty output').option('--no-log-color', 'disable color in pretty output').option('--log-url <pattern>', '[experimental] only show logs where event.url matches this substring or regex (/re/i)').option('--log-tab <id>', 'only show logs for a specific tabId (number)').option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--wait [boolean]', 'wait for dist/extension-js/<browser>/ready.json and exit', parseOptionalBoolean).option('--wait-timeout <ms>', 'timeout in milliseconds when using --wait (default: 60000)').option('--wait-format <pretty|json>', 'output format for --wait results (default: pretty)').option('--author, --author-mode', '[internal] enable maintainer diagnostics (does not affect user runtime logs)').option('--allow-control', 'enable the agent-bridge control channel for bounded act (storage/reload/open): see `extension reload|storage|open`').option('--allow-eval', 'additionally enable `extension eval` (runs arbitrary code in a context; writes a 0600 session token)').action(async function(pathOrRemoteUrl, { browser = 'chromium', ...devOptions }) {
                 if (devOptions.author || devOptions['authorMode']) {
                     process.env.EXTENSION_AUTHOR_MODE = 'true';
                     if (!process.env.EXTENSION_VERBOSE) process.env.EXTENSION_VERBOSE = '1';
@@ -6463,6 +6667,33 @@ Cross-Browser Compatibility
                 validateVendorsOrExit(list, (invalid, supported)=>{
                     console.error(unsupportedBrowserFlag(invalid, supported));
                 });
+                const opts = devOptions;
+                const safariOnlyFlags = [
+                    [
+                        '--safari-binary',
+                        opts.safariBinary
+                    ],
+                    [
+                        '--app-name',
+                        opts.appName
+                    ],
+                    [
+                        '--bundle-id',
+                        opts.bundleId
+                    ],
+                    [
+                        '--force-regenerate',
+                        opts.forceRegenerate
+                    ]
+                ].filter(([, value])=>void 0 !== value && false !== value);
+                if (safariOnlyFlags.length > 0 && !list.some(isSafariVendor)) {
+                    console.error(safariOnlyOption(safariOnlyFlags.map(([flag])=>flag)));
+                    process.exit(1);
+                }
+                if (opts.bundleId && !isValidBundleId(opts.bundleId)) {
+                    console.error(safariInvalidBundleId(opts.bundleId));
+                    process.exit(1);
+                }
                 if (list.some(isSafariVendor)) {
                     const issue = safariPreflightError();
                     if (issue) {
@@ -6514,14 +6745,15 @@ Cross-Browser Compatibility
                         logUrl: devOptions.logUrl,
                         logTab: devOptions.logTab,
                         launcher: noBrowser ? void 0 : browsers.launchBrowser,
-                        safariPackager: async (distPath, mode)=>{
+                        safariPackager: async (distPath, mode, overrides)=>{
                             await packageSafariExtension({
                                 extension: [
                                     distPath
                                 ],
                                 browser: vendor,
                                 noOpen: false === devOptions.open,
-                                dryRun: false
+                                dryRun: false,
+                                ...overrides
                             }, distPath, void 0, mode);
                         }
                     };
@@ -6645,7 +6877,7 @@ Cross-Browser Compatibility
             });
         }
         function registerBuildCommand(program) {
-            program.command('build').arguments('[project-name]').usage('[path-to-remote-extension] [options]').description(commandDescriptions.build).option('--browser <chrome | chromium | edge | firefox | chromium-based | gecko-based | firefox-based | safari | webkit-based>', 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds a Safari app via Xcode (macOS only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `false`', parseOptionalBoolean).option('--zip [boolean]', 'whether or not to compress the extension into a ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-source [boolean]', 'whether or not to include the source files in the ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-filename <string>', 'specify the name of the ZIP file. Defaults to the extension name and version').option('--silent [boolean]', 'whether or not to open the browser automatically. Defaults to `false`', parseOptionalBoolean).option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--mode <development|production|none>', 'bundler mode override (also sets NODE_ENV). Defaults to `production`').option('--author, --author-mode', '[internal] enable maintainer diagnostics (does not affect user runtime logs)').action(async function(pathOrRemoteUrl, { browser = 'chromium', ...buildOptions }) {
+            program.command('build').arguments('[project-name]').usage('[path-to-remote-extension] [options]').description(commandDescriptions.build).option('--browser <chrome | chromium | edge | firefox | chromium-based | gecko-based | firefox-based | safari | webkit-based>', 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds a Safari app via Xcode (macOS only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `false`', parseOptionalBoolean).option('--zip [boolean]', 'whether or not to compress the extension into a ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-source [boolean]', 'whether or not to include the source files in the ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-filename <string>', 'specify the name of the ZIP file. Defaults to the extension name and version').option('--silent [boolean]', 'whether or not to open the browser automatically. Defaults to `false`', parseOptionalBoolean).option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--mode <development|production|none>', 'bundler mode override (also sets NODE_ENV). Defaults to `production`').option('--open [boolean]', 'open the built Safari app after packaging (safari targets only). Defaults to `false`', parseOptionalBoolean).option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--author, --author-mode', '[internal] enable maintainer diagnostics (does not affect user runtime logs)').action(async function(pathOrRemoteUrl, { browser = 'chromium', ...buildOptions }) {
                 if (buildOptions.author || buildOptions['authorMode']) {
                     process.env.EXTENSION_AUTHOR_MODE = 'true';
                     if (!process.env.EXTENSION_VERBOSE) process.env.EXTENSION_VERBOSE = '1';
@@ -6663,12 +6895,43 @@ Cross-Browser Compatibility
                         process.exit(1);
                     }
                 }
+                const safariOnlyFlags = [
+                    [
+                        '--open',
+                        buildOptions.open
+                    ],
+                    [
+                        '--app-name',
+                        buildOptions.appName
+                    ],
+                    [
+                        '--bundle-id',
+                        buildOptions.bundleId
+                    ],
+                    [
+                        '--force-regenerate',
+                        buildOptions.forceRegenerate
+                    ]
+                ].filter(([, value])=>void 0 !== value && false !== value);
+                if (safariOnlyFlags.length > 0 && !list.some(isSafariVendor)) {
+                    console.error(safariOnlyOption(safariOnlyFlags.map(([flag])=>flag)));
+                    process.exit(1);
+                }
+                if (buildOptions.bundleId && !isValidBundleId(buildOptions.bundleId)) {
+                    console.error(safariInvalidBundleId(buildOptions.bundleId));
+                    process.exit(1);
+                }
+                let safariPackagingEnabled = true;
                 if (list.some(isSafariVendor)) {
-                    const issue = safariPreflightError();
-                    if (issue) {
-                        console.error(issue);
+                    const preflight = safariBuildPreflight();
+                    if ('fatal' === preflight.severity) {
+                        console.error(preflight.message);
                         process.exit(1);
                     }
+                    if ('skip' === preflight.severity) {
+                        safariPackagingEnabled = false;
+                        console.warn(preflight.message);
+                    }
                 }
                 const { extensionBuild } = await loadExtensionDevelopModule();
                 for (const vendor of list)await extensionBuild(pathOrRemoteUrl, {
@@ -6681,16 +6944,20 @@ Cross-Browser Compatibility
                     install: buildOptions.install,
                     extensions: parseExtensionsList(buildOptions.extensions),
                     mode,
-                    safariPackager: async (distPath, packagerMode)=>{
+                    appName: buildOptions.appName,
+                    bundleId: buildOptions.bundleId,
+                    forceRegenerate: buildOptions.forceRegenerate,
+                    safariPackager: safariPackagingEnabled ? async (distPath, packagerMode, overrides)=>{
                         await packageSafariExtension({
                             extension: [
                                 distPath
                             ],
                             browser: vendor,
-                            noOpen: !!buildOptions.silent,
-                            dryRun: false
+                            noOpen: true !== buildOptions.open,
+                            dryRun: false,
+                            ...overrides
                         }, distPath, void 0, packagerMode);
-                    }
+                    } : void 0
                 });
             });
         }

package/dist/extension/browsers/browsers-lib/manifest-refusal.d.ts

@@ -4,7 +4,7 @@
  * dev session just wedges with no CDP target. Diagnose them before spawn
  * and say why, like the resolved-binary line.
  */
-export type ChromiumManifestRefusal = 'mv2' | 'mv3-background-scripts' | null;
+export type ChromiumManifestRefusal = 'mv2' | 'mv3-background-scripts' | 'unsupported-manifest-version' | null;
 export declare function diagnoseChromiumManifestRefusal(manifest: unknown): ChromiumManifestRefusal;
 /**
  * Match patterns Chrome's grammar refuses. ONE invalid pattern in
@@ -27,13 +27,37 @@ export declare function diagnoseChromiumManifestRefusal(manifest: unknown): Chro
  */
 export declare function findInvalidMatchPatterns(manifest: unknown): string[];
 /**
- * Other manifest shapes Chrome refuses outright, each proven against a wild
- * subject with CDP `Extensions.loadUnpacked` (which, unlike --load-extension,
- * reports the reason). All are extension-own — loading the source unpacked in
- * real Chrome fails identically — but the refusal is silent, so dev must name
- * it instead of printing an ID for an extension that never loads.
+ * Other manifest shapes Chrome refuses outright, each proven with CDP
+ * `Extensions.loadUnpacked` (which, unlike --load-extension, reports the
+ * reason) — the wild-subject shapes on Chrome 150 (2026-07-11) and the
+ * fixture batch on Chrome 150 (2026-07-13). The refusal is silent under
+ * --load-extension, so dev must name it instead of printing an ID for an
+ * extension that never loads.
+ *
+ * NOT refusals — verified to LOAD on Chrome 150 (2026-07-13, CDP
+ * loadUnpacked); do NOT add these however fatal they look:
+ * - MV3 `background.page`; `background.persistent` true or false
+ * - icon files with undecodable bytes, and SVG icons — only a MISSING or
+ *   0-byte icon file refuses
+ * - unknown `permissions` entries; MV2 keys like `browser_action` under MV3
+ * - a WAR dictionary with only `use_dynamic_url` beside `resources`
+ * - `__MSG_@@predefined__` variables; catalog-key case differences (message
+ *   lookup is case-insensitive)
+ * And on Firefox 147 (2026-07-13, RDP installTemporaryAddon): explicit AND
+ * wildcard ports in match patterns install fine — the old "host must not
+ * include a port" grammar is gone; do not resurrect it for gecko.
+ *
+ * Safari (2026-07-13, macOS 15.7.7): safari-web-extension-converter
+ * CONVERTS every one of these shapes with exit 0 — missing name, bad locale
+ * catalogs, all of it. The converter is not a refusal surface and must not
+ * be gated on manifest shapes; Safari's real refusals happen at runtime
+ * inside Safari, which has no scriptable install path to verify against.
+ * Converter/xcodebuild exit codes still matter (toolchain failures), but
+ * they say nothing about manifest validity.
+ *
+ * `browserVersion` (when known) enables the minimum_chrome_version compare.
  */
-export declare function findChromiumLoadBlockers(manifest: unknown): string[];
+export declare function findChromiumLoadBlockers(manifest: unknown, browserVersion?: string): string[];
 /**
  * Icon files Chrome cannot load — missing from the extension directory or
  * present but empty (0 bytes, undecodable). Either one makes Chrome refuse
@@ -44,3 +68,17 @@ export declare function findChromiumLoadBlockers(manifest: unknown): string[];
  * validates at install: `icons` and `*_action.default_icon`.
  */
 export declare function findUnloadableIconFiles(manifest: unknown, extensionDir: string): string[];
+/**
+ * The locale shapes Chrome refuses the whole extension over, all verified
+ * live on Chrome 150 (2026-07-13, CDP loadUnpacked; fixtures 03/04/05/20/
+ * 22/29). Common in converted/repacked extensions that lost their _locales
+ * tree. Verified tolerances: an EMPTY messages.json loads; message-key
+ * lookup is case-insensitive; `__MSG_@@predefined__` never needs a catalog.
+ */
+export declare function findLocaleLoadBlockers(manifest: unknown, extensionDir: string): string[];
+/**
+ * "File does not exist: <path>/schema.json" — a storage.managed_schema
+ * pointing at a file that is not in the extension directory refuses the
+ * whole extension (fixture 19, Chrome 150).
+ */
+export declare function findMissingManagedSchema(manifest: unknown, extensionDir: string): string[];

package/dist/extension/browsers/browsers-lib/messages.d.ts

@@ -17,6 +17,7 @@ export declare function resolvedBrowserBinary(browser: Browser, binaryPath: stri
 export declare function preferringSystemBrowserOverSnapshot(systemBinary: string, snapshotBinary: string): string;
 export declare function mv2NotSupportedByChromium(extensionPath: string): string;
 export declare function mv3BackgroundScriptsNotSupportedByChromium(extensionPath: string): string;
+export declare function unsupportedManifestVersionOnChromium(extensionPath: string, declared: unknown): string;
 export declare function chromiumInvalidMatchPatterns(extensionPath: string, patterns: string[]): string;
 export declare function chromiumManifestLoadBlockers(extensionPath: string, blockers: string[]): string;
 export declare function devChannelSnapshotInUse(binaryPath: string): string;
@@ -58,6 +59,7 @@ export declare function firefoxDryRunBinary(path: string): string;
 export declare function firefoxDryRunConfig(cfg: string): string;
 export declare function safariBuildCalled(): string;
 export declare function safariRequiresMacOS(platform: string): string;
+export declare function safariPackagingSkippedNonMac(platform: string): string;
 export declare function safariXcodeRequired(developerDir: string | null): string;
 export declare function safariToolchainMissing(tool: string): string;
 export declare function safariConverting(extensionDir: string): string;
@@ -65,7 +67,10 @@ export declare function safariConverted(projectDir: string): string;
 export declare function safariBuilding(scheme: string): string;
 export declare function safariBuilt(appPath: string): string;
 export declare function safariOpening(target: string): string;
-export declare function safariFailed(error: unknown): string;
+export declare function safariToolFailed(tool: string, exitCode: number | null, outputTail: string): string;
+export declare function safariConverterWarnings(warnings: string[]): string;
+export declare function safariDefaultBundleIdNote(bundleId: string): string;
+export declare function safariOpenHint(appPath: string, appName: string): string;
 export declare function safariDryRunNotBuilding(): string;
 export declare function safariDryRunConverter(cmd: string): string;
 export declare function safariDryRunXcodebuild(cmd: string): string;
@@ -74,6 +79,8 @@ export declare function safariRegistered(appName: string): string;
 export declare function safariNotYetRegistered(appName: string): string;
 export declare function safariRebuilt(appName: string): string;
 export declare function safariProjectStale(): string;
+export declare function safariForcedRegeneration(): string;
+export declare function safariRegenerationDiscards(preservedKeys: string[]): string;
 export declare function safariSettingsPreserved(keys: string[]): string;
 export declare function safariSkippingConversion(): string;
 export declare function cdpClientFoundTargets(count: number): string;

package/dist/extension/browsers/run-safari/safari-launch/index.d.ts

@@ -1,5 +1,18 @@
 import type { BrowserLogger } from '../../browsers-types';
 import type { SafariPluginLike } from '../safari-types';
+export declare function toolOutputTail(output: string): string;
 export type SafariPipelineMode = 'full' | 'resync';
 export declare function safariPreflightError(): string | null;
+export interface SafariBuildPreflight {
+    severity: 'ok' | 'skip' | 'fatal';
+    message?: string;
+}
+/**
+ * Preflight for `build`: a non-macOS host is not an error — the web-extension
+ * bundle is still produced and can be packaged later on a Mac — so packaging
+ * is skipped with a warning. A macOS host with a broken/missing Xcode stays
+ * fatal because the user can act on it locally. `dev` keeps the stricter
+ * safariPreflightError(): a Safari dev loop without packaging is pointless.
+ */
+export declare function safariBuildPreflight(): SafariBuildPreflight;
 export declare function packageSafariExtension(host: SafariPluginLike, outputPath: string, logger?: BrowserLogger, mode?: SafariPipelineMode): Promise<void>;

package/dist/extension/browsers/run-safari/safari-launch/safari-config.d.ts

@@ -1,5 +1,10 @@
 import type { CompilationLike } from '../../browsers-types';
 import type { SafariBuildConfig, SafariPluginLike } from '../safari-types';
+/**
+ * Apple bundle identifiers: dot-separated segments of alphanumerics and
+ * hyphens, each starting with a letter, at least two segments (reverse-DNS).
+ */
+export declare function isValidBundleId(value: string): boolean;
 export declare function resolveSafariBuildConfig(compilation: CompilationLike, host: SafariPluginLike): SafariBuildConfig;
 export declare function composeConverterArgs(config: SafariBuildConfig): string[];
 export declare function macOsSchemeName(config: SafariBuildConfig): string;
@@ -15,8 +20,27 @@ export declare function builtAppPath(config: SafariBuildConfig): string;
  */
 export declare function composeXcodebuildArgs(config: SafariBuildConfig): string[];
 export declare function manifestFingerprintPath(config: SafariBuildConfig): string;
+/**
+ * v2 fingerprint: manifest content PLUS the identity inputs baked into the
+ * generated Xcode project (app name, bundle id, platform). An identity change
+ * must re-run the converter or the project keeps shipping the old identity.
+ * A v1 fingerprint (raw normalized manifest, no JSON envelope) never matches
+ * this shape, so old projects regenerate once and migrate automatically.
+ */
+export declare function composeProjectFingerprint(config: SafariBuildConfig): string;
 export declare function saveManifestFingerprint(config: SafariBuildConfig): void;
 export declare function isProjectStale(config: SafariBuildConfig): boolean;
+/**
+ * The converter does not honor --bundle-identifier verbatim: it writes the
+ * appex id as `<identifier>.Extension` but derives the PARENT app id from the
+ * identifier's namespace plus the app-name segment (observed on Xcode 16/26).
+ * With a user-provided id whose last segment differs from the app name, the
+ * prefixes mismatch and ValidateEmbeddedBinary fails the build. Rewrite both
+ * PRODUCT_BUNDLE_IDENTIFIERs so the project always carries exactly the
+ * configured identity: app = <bundleId>, appex = <bundleId>.Extension.
+ */
+export declare function alignBundleIdentifiers(pbxprojContent: string, bundleId: string): string;
+export declare const PRESERVED_SETTINGS: readonly ["DEVELOPMENT_TEAM", "CODE_SIGN_STYLE", "PROVISIONING_PROFILE_SPECIFIER"];
 export declare function pbxprojPath(config: SafariBuildConfig): string;
 export declare function extractXcodeUserSettings(pbxprojContent: string): Record<string, string>;
 export declare function applyXcodeUserSettings(pbxprojContent: string, settings: Record<string, string>): string;

package/dist/extension/browsers/run-safari/safari-types.d.ts

@@ -3,6 +3,7 @@ export type SafariPluginLike = Pick<PluginInterface, 'extension' | 'noOpen' | 'i
     browser: PluginInterface['browser'];
     safariBinary?: string;
     appName?: string;
+    bundleId?: string;
     macOsOnly?: boolean;
     forceRegenerate?: boolean;
 };
@@ -11,6 +12,8 @@ export interface SafariBuildConfig {
     projectLocation: string;
     appName: string;
     bundleIdentifier: string;
+    /** True when the bundle id was derived (dev.extensionjs.*), not user-set. */
+    bundleIdDerived: boolean;
     macOsOnly: boolean;
     language: 'swift' | 'objc';
     open: boolean;

package/dist/extension/helpers/messages.d.ts

@@ -36,6 +36,8 @@ export declare function noURLWithoutStart(argument: string): string;
 export declare function notImplemented(argument: string): string;
 export declare function programUserHelp(): string;
 export declare function unsupportedBrowserFlag(value: string, supported: string[]): string;
+export declare function safariOnlyOption(flags: string[]): string;
+export declare function safariInvalidBundleId(bundleId: string): string;
 export declare function safariCommandNotSupported(command: 'dev' | 'preview' | 'start'): string;
 export declare function programAIHelp(): string;
 export type ProgramAIHelpJSON = {

package/package.json

@@ -38,7 +38,7 @@
     "extension": "./bin/extension.cjs"
   },
   "name": "extension",
-  "version": "4.0.9",
+  "version": "4.0.10",
   "description": "The cross-browser extension framework. Build Chrome, Edge, Firefox, and Safari extensions with no build configuration.",
   "homepage": "https://extension.js.org/",
   "bugs": {
@@ -109,9 +109,9 @@
     "vivaldi-location2": "2.1.0",
     "waterfox-location": "2.1.0",
     "yandex-location": "2.1.0",
-    "extension-create": "4.0.9",
-    "extension-develop": "4.0.9",
-    "extension-install": "4.0.9",
+    "extension-create": "4.0.10",
+    "extension-develop": "4.0.10",
+    "extension-install": "4.0.10",
     "commander": "^15.0.0",
     "pintor": "0.3.0",
     "semver": "^7.7.3",