extension 4.1.19 → 4.1.20

package/dist/cli.cjs

@@ -741,16 +741,19 @@ var __webpack_modules__ = {
             const tail = outputTail.trim().length ? `\n${pintor__rspack_import_8_default().gray('── last output ──')}\n${outputTail}` : `\n${pintor__rspack_import_8_default().gray('(no output captured)')}`;
             return `${getLoggingPrefix('error')} Safari packaging tool ${pintor__rspack_import_8_default().underline(tool)} failed (${pintor__rspack_import_8_default().red(code)}).${tail}`;
         }
+        const SAFARI_KEPT_ON_PURPOSE = {
+            world: 'Safari has honored the MAIN world since Safari 18, so the key stays'
+        };
         function safariConverterWarnings(warnings) {
-            return `${getLoggingPrefix('warn')} safari-web-extension-converter reported ${pintor__rspack_import_8_default().yellow(String(warnings.length))} ${1 === warnings.length ? 'warning' : 'warnings'}, some manifest keys/APIs may not be supported by Safari:\n` + warnings.map((line)=>`  ${pintor__rspack_import_8_default().gray('•')} ${line}`).join('\n');
+            const kept = warnings.map((line)=>line.trim()).filter((line)=>line in SAFARI_KEPT_ON_PURPOSE);
+            const keptLines = kept.map((line)=>`  ${pintor__rspack_import_8_default().yellow(line)} ${pintor__rspack_import_8_default().gray(SAFARI_KEPT_ON_PURPOSE[line])}`).join('\n');
+            return `${getLoggingPrefix('warn')} safari-web-extension-converter reported ${pintor__rspack_import_8_default().yellow(String(warnings.length))} ${1 === warnings.length ? 'warning' : 'warnings'}, some manifest keys/APIs may not be supported by Safari:\n` + warnings.map((line)=>`  ${pintor__rspack_import_8_default().gray('•')} ${line}`).join('\n') + (kept.length ? `\nExtension.js kept ${1 === kept.length ? 'one of these keys' : 'some of these keys'} on purpose:\n${keptLines}` : '');
         }
         function safariDefaultBundleIdNote(bundleId) {
             return `${getLoggingPrefix('warn')} The bundle id ${pintor__rspack_import_8_default().gray(bundleId)} is generated from the app name.\nEvery project built from the same source shares this id, and the first team to register it takes it.\nSet your own with ${pintor__rspack_import_8_default().blue('--bundle-id')} before your first submission.\nAfter a submission, a new id is a new extension with none of your users.`;
         }
-        function safariOpenHint(appPath, appName, signed) {
-            const launch = `${getLoggingPrefix('info')} Launch it once to register with Safari: ${pintor__rspack_import_8_default().blue('open')} ${pintor__rspack_import_8_default().underline(`"${appPath}"`)}\n`;
-            if (signed) return launch + `Then turn on ${pintor__rspack_import_8_default().yellow(appName)} in Safari ▸ Settings ▸ Extensions.`;
-            return launch + `Then enable ${pintor__rspack_import_8_default().yellow(appName)} via Safari ▸ Develop ▸ ` + `${pintor__rspack_import_8_default().yellow('Allow Unsigned Extensions')} and Safari ▸ Settings ▸ Extensions.`;
+        function safariOpenHint(appPath, appName) {
+            return `${getLoggingPrefix('info')} Launch it once to register with Safari: ${pintor__rspack_import_8_default().blue('open')} ${pintor__rspack_import_8_default().underline(`"${appPath}"`)}\nThen turn on ${pintor__rspack_import_8_default().yellow(appName)} in Safari ▸ Settings ▸ Extensions.`;
         }
         function safariDryRunNotBuilding() {
             return `${getLoggingPrefix('info')} Dry run: skip the Safari app build.`;
@@ -762,8 +765,9 @@ var __webpack_modules__ = {
             return `${getLoggingPrefix('info')} xcodebuild: ${pintor__rspack_import_8_default().gray(cmd)}.`;
         }
         function safariNextSteps(appName, signed) {
-            if (signed) return `${getLoggingPrefix('info')} One-time setup to load ${pintor__rspack_import_8_default().yellow(appName)} in Safari:\n  ${pintor__rspack_import_8_default().gray('1.')} Safari ▸ Settings ▸ Extensions ▸ turn on ${pintor__rspack_import_8_default().yellow(appName)}\n  ${pintor__rspack_import_8_default().gray('→')} Signed with your team id, so this survives a restart.`;
-            return `${getLoggingPrefix('info')} One-time setup to load ${pintor__rspack_import_8_default().yellow(appName)} in Safari:\n  ${pintor__rspack_import_8_default().gray('1.')} Safari ▸ Settings ▸ Advanced ▸ check ${pintor__rspack_import_8_default().yellow('“Show features for web developers”')}\n  ${pintor__rspack_import_8_default().gray('2.')} Safari ▸ Develop ▸ ${pintor__rspack_import_8_default().yellow('Allow Unsigned Extensions')} ${pintor__rspack_import_8_default().gray('(resets each launch)')}\n  ${pintor__rspack_import_8_default().gray('3.')} Safari ▸ Settings ▸ Extensions ▸ turn on ${pintor__rspack_import_8_default().yellow(appName)}\n  ${pintor__rspack_import_8_default().gray('→')} The app window that just opened can also take you there.`;
+            const steps = `${getLoggingPrefix('info')} One-time setup to load ${pintor__rspack_import_8_default().yellow(appName)} in Safari:\n  ${pintor__rspack_import_8_default().gray('1.')} Safari ▸ Settings ▸ Extensions ▸ turn on ${pintor__rspack_import_8_default().yellow(appName)}\n`;
+            if (signed) return steps + `  ${pintor__rspack_import_8_default().gray('→')} Signed with your team id, so the identity is stable for distribution.`;
+            return steps + `  ${pintor__rspack_import_8_default().gray('→')} Ad-hoc signed, so it stays enabled across restarts.`;
         }
         function safariRegistered(appName) {
             return `${getLoggingPrefix('success')} Safari recognizes ${pintor__rspack_import_8_default().yellow(appName)}, finish enabling it with the steps above.`;
@@ -772,7 +776,7 @@ var __webpack_modules__ = {
             return `${getLoggingPrefix('info')} Safari hasn't picked up ${pintor__rspack_import_8_default().yellow(appName)} yet.\nOpen the app once, then check Safari ▸ Settings ▸ Extensions.`;
         }
         function safariRebuilt(appName) {
-            return `${getLoggingPrefix('success')} Rebuilt ${pintor__rspack_import_8_default().yellow(appName)}, reload the page (or toggle the extension) in Safari to see changes.`;
+            return `${getLoggingPrefix('success')} Rebuilt ${pintor__rspack_import_8_default().yellow(appName)}.`;
         }
         function safariProjectStale() {
             return `${getLoggingPrefix('info')} Regenerating the Xcode project, manifest.json or identity options changed since it was generated.`;
@@ -5927,7 +5931,24 @@ var __webpack_modules__ = {
             });
         }
         function converterWarnings(output) {
-            return output.split(/\r?\n/).filter((line)=>/warning/i.test(line)).map((line)=>line.trim()).filter((line)=>line.length > 0);
+            const lines = output.split(/\r?\n/);
+            const collected = [];
+            let inWarning = false;
+            for (const line of lines){
+                const trimmed = line.trim();
+                if (/warning/i.test(line)) {
+                    inWarning = true;
+                    if (trimmed.length > 0) collected.push(trimmed);
+                    continue;
+                }
+                const isContinuation = inWarning && /^\s/.test(line) && trimmed.length > 0;
+                if (isContinuation) {
+                    collected.push(trimmed);
+                    continue;
+                }
+                inWarning = false;
+            }
+            return collected;
         }
         async function confirmRegisteredWithSafari(bundleIdentifier) {
             const needle = `${bundleIdentifier}.Extension`;
@@ -6058,7 +6079,7 @@ var __webpack_modules__ = {
                 if (preservedKeys.length > 0) logger.info?.(messages.oB(preservedKeys));
                 (0, safari_config.x7)(config);
                 logger.info?.(messages.l_(config.projectLocation));
-            } else logger.info?.(messages.oM());
+            } else if ('full' === mode) logger.info?.(messages.oM());
             if ('full' === mode) logger.info?.(messages.jR((0, safari_config.aD)(config)));
             const built = await runTool('xcodebuild', xcodebuildArgs);
             if (!built.ok) {
@@ -6073,7 +6094,7 @@ var __webpack_modules__ = {
             }
             logger.info?.(messages.Rl(appPath));
             if (!config.open) {
-                logger.info?.(messages.aO(appPath, config.appName, isSigned));
+                logger.info?.(messages.aO(appPath, config.appName));
                 if (host.announceDevReady) await announceSafariDevSession(host, config, appPath);
                 return describePackage(config);
             }
@@ -6218,36 +6239,55 @@ var __webpack_modules__ = {
         function manifestFingerprintPath(config) {
             return node_path__rspack_import_1.join(config.projectLocation, '.manifest-fingerprint');
         }
-        function stableStringify(obj) {
-            if (null == obj) return JSON.stringify(obj);
-            if ('object' != typeof obj) return JSON.stringify(obj);
-            if (Array.isArray(obj)) return `[${obj.map(stableStringify).join(',')}]`;
-            const keys = Object.keys(obj).sort();
-            return `{${keys.map((k)=>`${JSON.stringify(k)}:${stableStringify(obj[k])}`).join(',')}}`;
-        }
-        function readManifestRaw(extensionDir) {
+        function topLevelEntries(extensionDir) {
             try {
-                return node_fs__rspack_import_0.readFileSync(node_path__rspack_import_1.join(extensionDir, 'manifest.json'), 'utf8');
+                return node_fs__rspack_import_0.readdirSync(extensionDir).sort();
             } catch  {
-                return '';
+                return [];
             }
         }
-        function normalizeManifest(raw) {
+        function iconsFingerprint(extensionDir) {
             try {
-                return stableStringify(JSON.parse(raw));
+                const raw = node_fs__rspack_import_0.readFileSync(node_path__rspack_import_1.join(extensionDir, 'manifest.json'), 'utf8');
+                const icons = JSON.parse(raw).icons;
+                if (!icons || 'object' != typeof icons) return '';
+                return Object.keys(icons).sort().map((size)=>`${size}:${String(icons[size])}`).join(',');
             } catch  {
-                return raw;
+                return '';
+            }
+        }
+        function asRecord(value) {
+            return value && 'object' == typeof value && !Array.isArray(value) ? value : {};
+        }
+        function judgedManifestSurface(extensionDir) {
+            const manifest = readManifest(extensionDir);
+            const parts = [
+                Object.keys(manifest).sort().join(',')
+            ];
+            for (const listName of [
+                'permissions',
+                'optional_permissions'
+            ]){
+                const list = manifest[listName];
+                const names = Array.isArray(list) ? list.filter((entry)=>'string' == typeof entry).sort() : [];
+                parts.push(`${listName}:${names.join(',')}`);
             }
+            const contentScripts = manifest.content_scripts;
+            if (Array.isArray(contentScripts)) parts.push(contentScripts.map((entry)=>Object.keys(asRecord(entry)).sort().join('+')).join(';'));
+            parts.push(Object.keys(asRecord(manifest.options_ui)).sort().join(','));
+            return parts.join('|');
         }
         function composeProjectFingerprint(config) {
             return JSON.stringify({
-                v: 2,
+                v: 4,
                 identity: {
                     appName: config.appName,
                     bundleId: config.bundleIdentifier,
                     macOsOnly: config.macOsOnly
                 },
-                manifest: normalizeManifest(readManifestRaw(config.extensionDir))
+                entries: topLevelEntries(config.extensionDir),
+                icons: iconsFingerprint(config.extensionDir),
+                judged: judgedManifestSurface(config.extensionDir)
             });
         }
         function saveManifestFingerprint(config) {
@@ -6663,21 +6703,47 @@ var __webpack_modules__ = {
     "./index.ts" (__unused_rspack_module, __unused_rspack___webpack_exports__, __webpack_require__) {
         const MIN_NODE_MAJOR = 22;
         const MIN_NODE_MINOR = 12;
+        const MIN_DENO_MAJOR = 2;
+        const MIN_DENO_MINOR = 5;
+        const BLOCKED_DENO_VERSIONS = [
+            '2.8.0'
+        ];
+        function meetsFloor(version, major, minor) {
+            const [actualMajor, actualMinor] = version.split('.').map((part)=>parseInt(part, 10));
+            if (!Number.isFinite(actualMajor)) return true;
+            if (actualMajor !== major) return actualMajor > major;
+            return (Number.isFinite(actualMinor) ? actualMinor : 0) >= minor;
+        }
         function isSupportedNodeVersion(version) {
-            const [major, minor] = version.split('.').map((part)=>parseInt(part, 10));
-            if (!Number.isFinite(major)) return true;
-            if (major !== MIN_NODE_MAJOR) return major > MIN_NODE_MAJOR;
-            return (Number.isFinite(minor) ? minor : 0) >= MIN_NODE_MINOR;
+            return meetsFloor(version, MIN_NODE_MAJOR, MIN_NODE_MINOR);
+        }
+        function isSupportedDenoVersion(version) {
+            if (BLOCKED_DENO_VERSIONS.includes(version)) return false;
+            return meetsFloor(version, MIN_DENO_MAJOR, MIN_DENO_MINOR);
         }
         function detectBunVersion(versions = process.versions) {
             const bunVersion = versions.bun;
             return 'string' == typeof bunVersion && bunVersion.length > 0 ? bunVersion : void 0;
         }
+        function detectDenoVersion(versions = process.versions) {
+            const denoVersion = versions.deno;
+            return 'string' == typeof denoVersion && denoVersion.length > 0 ? denoVersion : void 0;
+        }
+        function unsupportedDenoVersionMessage(version) {
+            if (BLOCKED_DENO_VERSIONS.includes(version)) return `[Extension.js] Deno ${version} cannot load node:querystring inside the bundler, so every build fails on it. Deno fixed that in 2.8.1. Run deno upgrade to build the extension on Deno.`;
+            return `[Extension.js] Requires Deno >= ${MIN_DENO_MAJOR}.${MIN_DENO_MINOR} (you are on ${version}). Run deno upgrade, or run the extension CLI on Node.js >= ${MIN_NODE_MAJOR}.${MIN_NODE_MINOR} instead.`;
+        }
         function unsupportedNodeVersionMessage(version, bunVersion) {
             if (bunVersion) return `[Extension.js] The extension CLI runs on Node.js, not on the Bun runtime (Bun ${bunVersion}, reporting Node.js ${version}), so the Node.js you have installed is not the problem. Run it on Node.js instead: drop --bun from bunx or bun run, or unset run.bun in bunfig.toml, plain bunx runs the extension CLI on Node.js.`;
             return `[Extension.js] Requires Node.js >= ${MIN_NODE_MAJOR}.${MIN_NODE_MINOR} (you are on ${version}). Upgrade Node.js to run the extension CLI.`;
         }
-        function enforceSupportedNodeVersion(version = process.versions.node, bunVersion = detectBunVersion()) {
+        function enforceSupportedNodeVersion(version = process.versions.node, bunVersion = detectBunVersion(), denoVersion = detectDenoVersion()) {
+            if (denoVersion) {
+                if (isSupportedDenoVersion(denoVersion)) return;
+                console.error(unsupportedDenoVersionMessage(denoVersion));
+                process.exit(1);
+                return;
+            }
             if (!bunVersion && isSupportedNodeVersion(version)) return;
             console.error(unsupportedNodeVersionMessage(version, bunVersion));
             process.exit(1);
@@ -7075,7 +7141,7 @@ var __webpack_modules__ = {
             return Math.min(Math.max(n, min), max);
         }
         const TEMPLATE_CORPUS_REPO = 'extension-js/examples';
-        const TEMPLATE_CORPUS_REF = 'e552f6db6f2862093ba9d7026e0d376f002d95cc';
+        const TEMPLATE_CORPUS_REF = '39448a235ea1b02516e6d555bcae409db2258b7f';
         const TEMPLATE_CORPUS_SLUGS = [
             'action',
             'action-locales',
@@ -8066,7 +8132,7 @@ AI assistants
             return `${getLoggingPrefix('error')} Can't use ${messages_code(bundleId)} as a bundle identifier.\nUse reverse-DNS form: dot-separated segments of letters, digits and hyphens, each starting with a letter (e.g. ${messages_code('com.example.my-extension')}).`;
         }
         function safariCommandNotSupported(command) {
-            return `${getLoggingPrefix('error')} ${messages_code(command)} can't load an extension into Safari automatically.\nSafari extensions ship inside a signed app and are enabled by hand, so there's no live browser session to load into, unlike Chromium and Firefox.\nBuild the Safari app instead: ${messages_code('extension build --browser safari')}\nThen open the generated app and enable it in Safari → Settings → Extensions.`;
+            return `${getLoggingPrefix('error')} ${messages_code(command)} can't load an extension into Safari.\nSafari loads an extension only from an app it has registered, and that app is enabled by hand once installed.\nIts automation route can load a folder but grants no website access, so content scripts never run.\nRun a live Safari session: ${messages_code('extension dev --browser safari')}\nOr package the app and open it: ${messages_code('extension build --browser safari --open')}\nBoth need macOS with Xcode, and Safari takes the enable gesture once in Safari ▸ Settings ▸ Extensions.`;
         }
         function programAIHelp() {
             return `\n${getLoggingPrefix('info')} ${external_pintor_default().gray('Development tips for extension developers and AI assistants')}
@@ -8483,6 +8549,96 @@ Cross-browser compatibility
         function sessionLogsPath(bridge, projectPath, browser) {
             return sessionFilePath(bridge, 'logsPath', projectPath, browser, 'logs.ndjson');
         }
+        function isSafariVendor(value) {
+            return 'safari' === value || 'webkit-based' === value;
+        }
+        const SUPPORTED_BROWSER_TARGETS = [
+            'chrome',
+            'chromium',
+            'edge',
+            'firefox',
+            'brave',
+            'opera',
+            'vivaldi',
+            'yandex',
+            'waterfox',
+            'librewolf',
+            'chromium-based',
+            'gecko-based',
+            'firefox-based',
+            'safari',
+            'webkit-based'
+        ];
+        const BROWSER_TARGETS_HELP = SUPPORTED_BROWSER_TARGETS.join(' | ');
+        const SESSION_BROWSER_TARGETS_HELP = "chrome | chromium | edge | firefox | safari";
+        const NO_SAFARI_BROWSER_TARGETS_HELP = SUPPORTED_BROWSER_TARGETS.filter((target)=>!isSafariVendor(target)).join(' | ');
+        function parseOptionalBoolean(value) {
+            if (void 0 === value) return true;
+            const normalized = String(value).trim().toLowerCase();
+            return ![
+                'false',
+                '0',
+                'no',
+                'off'
+            ].includes(normalized);
+        }
+        const vendors = (browser)=>{
+            const value = browser ?? 'chromium';
+            return 'all' === value ? [
+                'chrome',
+                'edge',
+                'firefox'
+            ] : String(value).split(',').map((part)=>part.trim()).filter(Boolean);
+        };
+        const MANAGED_INSTALL_TARGETS = [
+            'chrome',
+            'chromium',
+            'edge',
+            'firefox',
+            'chromium-based',
+            'gecko-based',
+            'firefox-based'
+        ];
+        const MANAGED_INSTALL_TARGETS_HELP = [
+            ...MANAGED_INSTALL_TARGETS,
+            'all'
+        ].join(' | ');
+        const MANAGED_INSTALL_BINARIES = [
+            'chrome',
+            'chromium',
+            'edge',
+            'firefox'
+        ];
+        const installTargets = (browser)=>'all' === browser ? [
+                ...MANAGED_INSTALL_BINARIES
+            ] : vendors(browser);
+        function validateVendors(vendorsList, onInvalid) {
+            const supported = SUPPORTED_BROWSER_TARGETS;
+            for (const v of vendorsList)if (!supported.includes(v)) {
+                onInvalid(v, supported);
+                return false;
+            }
+            return true;
+        }
+        const MANAGED_INSTALL_TARGET_SET = new Set(MANAGED_INSTALL_TARGETS);
+        const SUPPORTED_BROWSER_TARGET_SET = new Set(SUPPORTED_BROWSER_TARGETS);
+        function classifyManagedInstallTarget(name) {
+            const value = String(name || '').trim().toLowerCase();
+            if (!value) return 'unknown';
+            if (MANAGED_INSTALL_TARGET_SET.has(value)) return 'managed';
+            if (SUPPORTED_BROWSER_TARGET_SET.has(value)) return 'not-installable';
+            return 'unknown';
+        }
+        function firstNonManagedInstallTarget(targetsList) {
+            for (const name of targetsList){
+                const kind = classifyManagedInstallTarget(name);
+                if ('managed' !== kind) return {
+                    name,
+                    kind
+                };
+            }
+            return null;
+        }
         function parseLogSinceLocal(value) {
             if (null == value || '' === value) return null;
             if ('number' == typeof value) return Number.isFinite(value) ? {
@@ -8593,7 +8749,7 @@ Cross-browser compatibility
             }
         }
         function registerLogsCommand(program) {
-            program.command('logs').arguments('[project-path]').usage('[project-path] [options]').description(commandDescriptions.logs).option('--browser <chrome | chromium | edge | firefox>', 'which dist/extension-js/<browser> to read. Defaults to `chromium`').option('--follow', 'stream live via the control channel instead of printing and exiting').option('--context <list>', 'comma-separated contexts (background, content, popup, options, sidebar, devtools, page)').option('--level <off|error|warn|info|debug|trace|all>', 'minimum severity to show. Defaults to `all`').option('--signals-only', '[experimental] show only structured dx.signal diagnostics. No emitter ships yet, so this currently prints nothing').option('--since <seq|iso>', 'only show events after this sequence number or ISO timestamp').option('--url <glob|substring>', 'only events whose url/hostname matches (glob with * or plain substring)').option('--tab <id>', 'only events from this tab id').option('--output <pretty|json|ndjson>', 'output format. Defaults to pretty on a TTY, ndjson when piped').action(async (projectPathArg, options)=>{
+            program.command('logs').arguments('[project-path]').usage('[project-path] [options]').description(commandDescriptions.logs).option(`--browser <${SESSION_BROWSER_TARGETS_HELP}>`, 'which dist/extension-js/<browser> to read. Defaults to `chromium`').option('--follow', 'stream live via the control channel instead of printing and exiting').option('--context <list>', 'comma-separated contexts (background, content, popup, options, sidebar, devtools, page)').option('--level <off|error|warn|info|debug|trace|all>', 'minimum severity to show. Defaults to `all`').option('--signals-only', '[experimental] show only structured dx.signal diagnostics. No emitter ships yet, so this currently prints nothing').option('--since <seq|iso>', 'only show events after this sequence number or ISO timestamp').option('--url <glob|substring>', 'only events whose url/hostname matches (glob with * or plain substring)').option('--tab <id>', 'only events from this tab id').option('--output <pretty|json|ndjson>', 'output format. Defaults to pretty on a TTY, ndjson when piped').action(async (projectPathArg, options)=>{
                 const bridge = await loadExtensionDevelopBridgeModule();
                 const projectPath = resolveSessionProjectPath(bridge, projectPathArg);
                 const browser = options.browser || 'chromium';
@@ -8936,7 +9092,7 @@ Cross-browser compatibility
             if (null != opts.tab && '' !== opts.tab) target.tabId = Number(opts.tab);
             return target;
         }
-        const commonOptions = (cmd)=>cmd.option('--browser <chrome | chromium | edge | firefox>', 'which session to target (default chromium)').option('--timeout <ms>', 'command timeout in milliseconds (default 5000)').option('--output <pretty|json>', 'output format (default pretty)');
+        const commonOptions = (cmd)=>cmd.option(`--browser <${SESSION_BROWSER_TARGETS_HELP}>`, 'which session to target (default chromium)').option('--timeout <ms>', 'command timeout in milliseconds (default 5000)').option('--output <pretty|json>', 'output format (default pretty)');
         function registerActCommands(program) {
             commonOptions(program.command('eval').arguments('<expression> [project-path]').description(commandDescriptions.eval).option('--context <background|popup|options|sidebar|devtools|newtab|history|bookmarks|content|page>', 'target context (default background). Extension pages (popup/options/sidebar/devtools/newtab/history/bookmarks) answer via their own in-page relay and must be open').option('--url <glob|substring>', 'for content/page: document to target (resolved to its tab)').option('--tab <id>', 'for content/page: a specific tab (default: the --url match, else the active tab)')).action(async (expression, projectPathArg, opts)=>{
                 await runCommand({
@@ -9107,97 +9263,8 @@ Cross-browser compatibility
             const values = String(raw).split(',').map((value)=>value.trim()).filter((value)=>value.length > 0);
             return values.length > 0 ? values : void 0;
         }
-        function isSafariVendor(value) {
-            return 'safari' === value || 'webkit-based' === value;
-        }
-        const SUPPORTED_BROWSER_TARGETS = [
-            'chrome',
-            'chromium',
-            'edge',
-            'firefox',
-            'brave',
-            'opera',
-            'vivaldi',
-            'yandex',
-            'waterfox',
-            'librewolf',
-            'chromium-based',
-            'gecko-based',
-            'firefox-based',
-            'safari',
-            'webkit-based'
-        ];
-        const BROWSER_TARGETS_HELP = SUPPORTED_BROWSER_TARGETS.join(' | ');
-        const NO_SAFARI_BROWSER_TARGETS_HELP = SUPPORTED_BROWSER_TARGETS.filter((target)=>!isSafariVendor(target)).join(' | ');
-        function parseOptionalBoolean(value) {
-            if (void 0 === value) return true;
-            const normalized = String(value).trim().toLowerCase();
-            return ![
-                'false',
-                '0',
-                'no',
-                'off'
-            ].includes(normalized);
-        }
-        const vendors = (browser)=>{
-            const value = browser ?? 'chromium';
-            return 'all' === value ? [
-                'chrome',
-                'edge',
-                'firefox'
-            ] : String(value).split(',').map((part)=>part.trim()).filter(Boolean);
-        };
-        const MANAGED_INSTALL_TARGETS = [
-            'chrome',
-            'chromium',
-            'edge',
-            'firefox',
-            'chromium-based',
-            'gecko-based',
-            'firefox-based'
-        ];
-        const MANAGED_INSTALL_TARGETS_HELP = [
-            ...MANAGED_INSTALL_TARGETS,
-            'all'
-        ].join(' | ');
-        const MANAGED_INSTALL_BINARIES = [
-            'chrome',
-            'chromium',
-            'edge',
-            'firefox'
-        ];
-        const installTargets = (browser)=>'all' === browser ? [
-                ...MANAGED_INSTALL_BINARIES
-            ] : vendors(browser);
-        function validateVendors(vendorsList, onInvalid) {
-            const supported = SUPPORTED_BROWSER_TARGETS;
-            for (const v of vendorsList)if (!supported.includes(v)) {
-                onInvalid(v, supported);
-                return false;
-            }
-            return true;
-        }
-        const MANAGED_INSTALL_TARGET_SET = new Set(MANAGED_INSTALL_TARGETS);
-        const SUPPORTED_BROWSER_TARGET_SET = new Set(SUPPORTED_BROWSER_TARGETS);
-        function classifyManagedInstallTarget(name) {
-            const value = String(name || '').trim().toLowerCase();
-            if (!value) return 'unknown';
-            if (MANAGED_INSTALL_TARGET_SET.has(value)) return 'managed';
-            if (SUPPORTED_BROWSER_TARGET_SET.has(value)) return 'not-installable';
-            return 'unknown';
-        }
-        function firstNonManagedInstallTarget(targetsList) {
-            for (const name of targetsList){
-                const kind = classifyManagedInstallTarget(name);
-                if ('managed' !== kind) return {
-                    name,
-                    kind
-                };
-            }
-            return null;
-        }
         function registerBuildCommand(program) {
-            program.command('build').arguments('[project-name]').usage('[path-to-remote-extension] [options]').description(commandDescriptions.build).option(`--browser <${BROWSER_TARGETS_HELP}>`, 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds a Safari app via Xcode (macOS only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `false`', parseOptionalBoolean).option('--no-polyfill', 'disable the cross-browser polyfill').option('--zip [boolean]', 'whether or not to compress the extension into a ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-source [boolean]', 'whether or not to include the source files in the ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-filename <string>', 'specify the name of the ZIP file. Defaults to the extension name and version').option('--silent [boolean]', 'suppress the build summary output. Defaults to `false`', parseOptionalBoolean).option('--addon-lint [boolean]', 'check Firefox builds against addons.mozilla.org rules with addons-linter when it is installed. Findings print as warnings. Defaults to `true`', parseOptionalBoolean).option('--no-addon-lint', 'skip the addons.mozilla.org lint of Firefox builds').option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--mode <development|production|none>', 'bundler mode override (also sets NODE_ENV). Defaults to `production`').option('--open [boolean]', 'open the built Safari app after packaging (safari targets only). Defaults to `false`', parseOptionalBoolean).option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--development-team <id>', 'sign the Safari app with an Apple Developer team id (safari targets only). Without it the build is ad-hoc signed, which Safari treats as unsigned: the extension then needs Develop \u25b8 Allow Unsigned Extensions re-ticked on every launch. A signed build is listed and stays enabled across restarts').option('--macos-only [boolean]', 'generate a macOS-only Safari Xcode project (safari targets only). Pass `false` for a universal macOS + iOS project. Defaults to `true`', parseOptionalBoolean).option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').addOption(new external_commander_namespaceObject.Option('--debug', 'print maintainer diagnostics alongside normal output')).addOption(new external_commander_namespaceObject.Option('--author, --author-mode', 'deprecated alias for --debug').hideHelp()).action(async (pathOrRemoteUrl, { browser: cliBrowser, ...buildOptions })=>{
+            program.command('build').arguments('[project-name]').usage('[path-to-remote-extension] [options]').description(commandDescriptions.build).option(`--browser <${BROWSER_TARGETS_HELP}>`, 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds a Safari app via Xcode (macOS only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `false`', parseOptionalBoolean).option('--no-polyfill', 'disable the cross-browser polyfill').option('--zip [boolean]', 'whether or not to compress the extension into a ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-source [boolean]', 'whether or not to include the source files in the ZIP file. Defaults to `false`', parseOptionalBoolean).option('--zip-filename <string>', 'specify the name of the ZIP file. Defaults to the extension name and version').option('--silent [boolean]', 'suppress the build summary output. Defaults to `false`', parseOptionalBoolean).option('--addon-lint [boolean]', 'check Firefox builds against addons.mozilla.org rules with addons-linter when it is installed. Findings print as warnings. Defaults to `true`', parseOptionalBoolean).option('--no-addon-lint', 'skip the addons.mozilla.org lint of Firefox builds').option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--mode <development|production|none>', 'bundler mode override (also sets NODE_ENV). Defaults to `production`').option('--open [boolean]', 'open the built Safari app after packaging (safari targets only). Defaults to `false`', parseOptionalBoolean).option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--development-team <id>', 'sign the Safari app with an Apple Developer team id (safari targets only). Without it the build is ad-hoc signed, which Safari loads locally with no per-launch toggle. Use a team id for a stable identity you can distribute').option('--macos-only [boolean]', 'generate a macOS-only Safari Xcode project (safari targets only). Pass `false` for a universal macOS + iOS project. Defaults to `true`', parseOptionalBoolean).option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').addOption(new external_commander_namespaceObject.Option('--debug', 'print maintainer diagnostics alongside normal output')).addOption(new external_commander_namespaceObject.Option('--author, --author-mode', 'deprecated alias for --debug').hideHelp()).action(async (pathOrRemoteUrl, { browser: cliBrowser, ...buildOptions })=>{
                 const browser = cliBrowser ?? await resolveConfigBrowser(pathOrRemoteUrl || process.cwd(), 'build') ?? 'chromium';
                 if (buildOptions.debug || buildOptions.author || buildOptions.authorMode) {
                     process.env.EXTENSION_DEBUG = '1';
@@ -9833,7 +9900,7 @@ Cross-browser compatibility
             return Number.isFinite(parsed) && parsed >= 0 ? Math.floor(parsed) : 8080;
         }
         function registerDevCommand(program) {
-            program.command('dev').arguments('[project-path|remote-url]').usage('[project-path|remote-url] [options]').description(commandDescriptions.dev).addHelpText('after', "\nAdditional options:\n  --no-browser    stop the browser launch, the dev server still starts\n  --no-reload     emit a dev-mode dist without the content-script reload runtime, tabs need a manual reload to see changes\n  --wait          wait for ready contract and exit, pair with --output json for machine output\n" + BROWSER_LAUNCH_HELP_FOOTER).option('--profile <path-to-file | boolean>', 'what path to use for the browser profile. A boolean value of false sets the profile to the default user profile. Defaults to a fresh profile').option(`-b, --browser <${BROWSER_TARGETS_HELP}>`, 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds and opens a Safari app via Xcode (macOS only; no live reload)').option('--chromium-binary <path-to-binary>', 'specify a path to the Chromium binary. This option overrides the --browser setting. Defaults to the system default').addOption(geckoBinaryOption()).addOption(firefoxBinaryAliasOption()).option('--safari-binary <path-to-binary>', 'specify the Safari binary to open after packaging (safari targets only)').option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--development-team <id>', 'sign the Safari app with an Apple Developer team id (safari targets only). Without it the build is ad-hoc signed, which Safari treats as unsigned: the extension then needs Develop \u25b8 Allow Unsigned Extensions re-ticked on every launch. A signed build is listed and stays enabled across restarts').option('--macos-only [boolean]', 'generate a macOS-only Safari Xcode project (safari targets only). Pass `false` for a universal macOS + iOS project. Defaults to `true`', parseOptionalBoolean).option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `true`', parseOptionalBoolean).option('--no-polyfill', 'disable the cross-browser polyfill').option('--no-open', NO_OPEN_FLAG_DESCRIPTION).option('--starting-url <url>', 'specify the starting URL for the browser. Defaults to `undefined`').option('--port <port>', 'specify the port to use for the development server. Defaults to `8080`').option('--host <host>', 'specify the host to bind the dev server to. Use 0.0.0.0 for Docker/devcontainers. Defaults to `127.0.0.1`').option('--public-host <host>', 'connectable host the browser (HMR + reload bridge) dials when it differs from the bind host (e.g. a remote/devcontainer). Defaults to the bind host, or 127.0.0.1 when bound to 0.0.0.0').option('--log-context <list>', '[experimental] comma-separated contexts to include (background,content,page,sidebar,popup,options,devtools). Use `all` to include all contexts (default)').option('--logs <off|error|warn|info|debug|trace|all>', '[experimental] minimum centralized logger level to display in terminal (default: off)').option('--log-format <pretty|json|ndjson>', '[experimental] output format for logger events. Defaults to `pretty`').option('--no-log-timestamps', 'disable ISO timestamps in pretty output').option('--no-log-color', 'disable color in pretty output').option('--log-url <pattern>', '[experimental] only show logs where event.url matches this substring or regex (/re/i)').option('--log-tab <id>', 'only show logs for a specific tabId (number)').option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--wait [boolean]', 'wait for dist/extension-js/<browser>/ready.json and exit', parseOptionalBoolean).option('--wait-timeout <ms>', 'timeout in milliseconds when using --wait (default: 60000)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').addOption(new external_commander_namespaceObject.Option('--wait-format <pretty|json>').hideHelp()).addOption(new external_commander_namespaceObject.Option('--debug', 'print maintainer diagnostics alongside normal output')).addOption(new external_commander_namespaceObject.Option('--author, --author-mode', 'deprecated alias for --debug').hideHelp()).option('--allow-control', 'enable the agent-bridge control channel for bounded act (storage/reload/open): see `extension reload|storage|open`').option('--allow-eval', 'additionally enable `extension eval` (implies --allow-control, runs arbitrary code in a context, writes a 0600 session token)').option('--parent-pid <pid>', 'exit when the given process dies. For wrappers that spawn `extension dev`, so a leaked dev server can never outlive its owner').action(async (pathOrRemoteUrl, options, command)=>{
+            program.command('dev').arguments('[project-path|remote-url]').usage('[project-path|remote-url] [options]').description(commandDescriptions.dev).addHelpText('after', "\nAdditional options:\n  --no-browser    stop the browser launch, the dev server still starts\n  --no-reload     emit a dev-mode dist without the content-script reload runtime, tabs need a manual reload to see changes\n  --wait          wait for ready contract and exit, pair with --output json for machine output\n" + BROWSER_LAUNCH_HELP_FOOTER).option('--profile <path-to-file | boolean>', 'what path to use for the browser profile. A boolean value of false sets the profile to the default user profile. Defaults to a fresh profile').option(`-b, --browser <${BROWSER_TARGETS_HELP}>`, 'specify a browser/engine to run. Defaults to `chromium`. `safari` builds and opens a Safari app via Xcode (macOS only)').option('--chromium-binary <path-to-binary>', 'specify a path to the Chromium binary. This option overrides the --browser setting. Defaults to the system default').addOption(geckoBinaryOption()).addOption(firefoxBinaryAliasOption()).option('--safari-binary <path-to-binary>', 'specify the Safari binary to open after packaging (safari targets only)').option('--app-name <name>', 'override the Safari app name (safari targets only). Defaults to the manifest `name`').option('--bundle-id <reverse.dns>', 'set a user-owned Safari bundle identifier (safari targets only). Defaults to a generated dev.extensionjs.* id').option('--development-team <id>', 'sign the Safari app with an Apple Developer team id (safari targets only). Without it the build is ad-hoc signed, which Safari loads locally with no per-launch toggle. Use a team id for a stable identity you can distribute').option('--macos-only [boolean]', 'generate a macOS-only Safari Xcode project (safari targets only). Pass `false` for a universal macOS + iOS project. Defaults to `true`', parseOptionalBoolean).option('--force-regenerate', 'regenerate the Safari Xcode project even when up to date (safari targets only)').option('--polyfill [boolean]', 'whether or not to apply the cross-browser polyfill. Defaults to `true`', parseOptionalBoolean).option('--no-polyfill', 'disable the cross-browser polyfill').option('--no-open', NO_OPEN_FLAG_DESCRIPTION).option('--starting-url <url>', 'specify the starting URL for the browser. Defaults to `undefined`').option('--port <port>', 'specify the port to use for the development server. Defaults to `8080`').option('--host <host>', 'specify the host to bind the dev server to. Use 0.0.0.0 for Docker/devcontainers. Defaults to `127.0.0.1`').option('--public-host <host>', 'connectable host the browser (HMR + reload bridge) dials when it differs from the bind host (e.g. a remote/devcontainer). Defaults to the bind host, or 127.0.0.1 when bound to 0.0.0.0').option('--log-context <list>', '[experimental] comma-separated contexts to include (background,content,page,sidebar,popup,options,devtools). Use `all` to include all contexts (default)').option('--logs <off|error|warn|info|debug|trace|all>', '[experimental] minimum centralized logger level to display in terminal (default: off)').option('--log-format <pretty|json|ndjson>', '[experimental] output format for logger events. Defaults to `pretty`').option('--no-log-timestamps', 'disable ISO timestamps in pretty output').option('--no-log-color', 'disable color in pretty output').option('--log-url <pattern>', '[experimental] only show logs where event.url matches this substring or regex (/re/i)').option('--log-tab <id>', 'only show logs for a specific tabId (number)').option('--extensions <list>', 'comma-separated list of companion extensions or store URLs to load').option('--install [boolean]', '[internal] install project dependencies when missing', parseOptionalBoolean).option('--wait [boolean]', 'wait for dist/extension-js/<browser>/ready.json and exit', parseOptionalBoolean).option('--wait-timeout <ms>', 'timeout in milliseconds when using --wait (default: 60000)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').addOption(new external_commander_namespaceObject.Option('--wait-format <pretty|json>').hideHelp()).addOption(new external_commander_namespaceObject.Option('--debug', 'print maintainer diagnostics alongside normal output')).addOption(new external_commander_namespaceObject.Option('--author, --author-mode', 'deprecated alias for --debug').hideHelp()).option('--allow-control', 'enable the agent-bridge control channel for bounded act (storage/reload/open): see `extension reload|storage|open`').option('--allow-eval', 'additionally enable `extension eval` (implies --allow-control, runs arbitrary code in a context, writes a 0600 session token)').option('--parent-pid <pid>', 'exit when the given process dies. For wrappers that spawn `extension dev`, so a leaked dev server can never outlive its owner').action(async (pathOrRemoteUrl, options, command)=>{
                 const { browser: cliBrowser, ...devOptions } = options;
                 const browser = cliBrowser ?? await resolveConfigBrowser(pathOrRemoteUrl || process.cwd(), 'dev') ?? 'chromium';
                 if (devOptions.debug || devOptions.author || devOptions.authorMode) {
@@ -10313,7 +10380,7 @@ Cross-browser compatibility
             browser: messaging.Lp.E_BROWSER_LAUNCH
         };
         function registerDoctorCommand(program) {
-            program.command('doctor').argument('[project-path]', 'path to the extension project root or the folder holding its manifest').option('--browser <chrome | chromium | edge | firefox>', 'which session to diagnose (defaults to the single live session, else chromium)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').description(commandDescriptions.doctor).action(async (projectPathArg, opts)=>{
+            program.command('doctor').argument('[project-path]', 'path to the extension project root or the folder holding its manifest').option(`--browser <${SESSION_BROWSER_TARGETS_HELP}>`, 'which session to diagnose (defaults to the single live session, else chromium)').option('--output <pretty|json>', 'result format. Use json for a schema-1 envelope on stdout').description(commandDescriptions.doctor).action(async (projectPathArg, opts)=>{
                 const asJson = isJsonOutput(opts);
                 let results;
                 try {

package/dist/extension/browsers/browsers-lib/constants.d.ts

@@ -1,10 +1,8 @@
 export declare const DEFAULT_DEBUG_PORT = 9222;
 export declare const PORT_OFFSET = 100;
 export declare const CDP_COMMAND_TIMEOUT_MS: number;
-/** CDP HTTP endpoint timeout for /json discovery (ms). Override: EXTENSION_CDP_HTTP_TIMEOUT_MS */
 export declare const CDP_HTTP_TIMEOUT_MS: number;
 export declare const RDP_EVAL_TIMEOUT_MS: number;
-/** Firefox RDP connect retry count. Override: EXTENSION_RDP_MAX_RETRIES */
 export declare const RDP_MAX_RETRIES: number;
 export declare const RDP_RETRY_INTERVAL_MS: number;
 export declare const CDP_HEARTBEAT_INTERVAL_MS: number;

package/dist/extension/browsers/browsers-lib/messages.d.ts

@@ -72,7 +72,7 @@ export declare function safariOpening(target: string): string;
 export declare function safariToolFailed(tool: string, exitCode: number | null, outputTail: string): string;
 export declare function safariConverterWarnings(warnings: string[]): string;
 export declare function safariDefaultBundleIdNote(bundleId: string): string;
-export declare function safariOpenHint(appPath: string, appName: string, signed?: boolean): string;
+export declare function safariOpenHint(appPath: string, appName: string): string;
 export declare function safariDryRunNotBuilding(): string;
 export declare function safariDryRunConverter(cmd: string): string;
 export declare function safariDryRunXcodebuild(cmd: string): string;

package/dist/extension/browsers/browsers-lib/resolve-profile.d.ts

@@ -1,33 +1,10 @@
-/**
- * The single decision about what profile a development run gets. Both the
- * chromium and firefox launchers route through this so the profile contract
- * (`false`, `copyFromProfile`, `keepProfileChanges`, the env switch, explicit
- * paths and the plain ephemeral default) is interpreted in exactly one place.
- *
- * - `system`, the browser's own default profile. No managed directory is
- *                created, seeded or cleaned and no profile launch arg is
- *                emitted. Produced by `profile: false` and by the
- *                EXTENSION_USE_SYSTEM_PROFILE / EXTJS_USE_SYSTEM_PROFILE switch.
- * - `explicit`, a user-provided profile path; launched against exactly that
- *                directory.
- * - `managed`, a directory under `dist/extension-js/profiles/<browser>-profile`
- *                that extension.js owns. Ephemeral by default (marked so it is
- *                reclaimed on browser exit); persistent (`dev`) when
- *                `persistProfile` or `keepProfileChanges` is set, in which case
- *                the marker is withheld so the cleanup hook skips it.
- */
 export type ProfileKind = 'system' | 'explicit' | 'managed';
 export interface ResolveProfileInput {
     rawProfile?: string | boolean;
-    /** Managed-profile base directory: `<distRoot>/extension-js/profiles/<browser>-profile`. */
     managedBaseDir: string;
-    /** EXTENSION_USE_SYSTEM_PROFILE / EXTJS_USE_SYSTEM_PROFILE resolved to a boolean. */
     useSystemProfile: boolean;
-    /** `persistProfile` option (stable `dev` directory, never auto-cleaned). */
     persistProfile?: boolean;
-    /** `keepProfileChanges` option, keep the managed profile and its changes across runs. */
     keepProfileChanges?: boolean;
-    /** `copyFromProfile` option, seed the managed profile as a copy of this path. */
     copyFromProfile?: string;
     resolveExplicit: (trimmedProfile: string) => string;
     provision?: boolean;
@@ -35,21 +12,9 @@ export interface ResolveProfileInput {
 export interface ResolvedProfile {
     kind: ProfileKind;
     profilePath: string;
-    /** True when the managed profile is persisted (no cleanup on exit). */
     persisted: boolean;
-    /** Set when `copyFromProfile` seeded this run, for logging/visibility. */
     seededFrom?: string;
 }
-/**
- * The one interpretation of the `--profile` / `profile` option value.
- * Commander delivers flag values as strings, so `--profile false` arrives as
- * the string `'false'`. Without this normalization that string reads as an
- * explicit path and a literal profile directory named `false` gets created.
- *
- * - `false` / `'false'`: the browser's own default profile (system).
- * - `true` / `'true'`: the managed default (same as leaving the option unset).
- * - any other string: an explicit profile path.
- */
 export declare function normalizeProfileOption(value: string | boolean | undefined): string | false | undefined;
 export declare function ensureProfileRootIgnoreFile(managedBaseDir: string): void;
 export declare function seedProfileFrom(source: string, dest: string): void;