extension 4.1.35 → 4.1.36

package/README.md

@@ -120,7 +120,7 @@ Useful flags:
 - `--zip` packages the build into a ZIP ready for store upload
 - `--zip-source` includes source files for store source-code review
 - `--zip-filename <name>` controls the output filename, written as `dist/<name>-<browser>.zip`
-- `--out-dir <path>` writes the build to `<path>/<browser>` instead of `dist/<browser>`, so a build can run beside a dev session
+- `--out-dir <path>` writes the build to `<path>/<browser>` instead of `dist/<browser>`. A build into the folder a live dev session serves is refused, so this is how a build runs beside a dev session
 - `--polyfill` enables the cross-browser webextension polyfill
 
 ## Manage browser binaries

package/dist/browsers.cjs

@@ -364,7 +364,8 @@ var __webpack_modules__ = {
         function stageCompanionForSession(input) {
             const { extensionPaths } = input;
             const cdpOnly = (0, _browser_family__rspack_import_3.v$)(input.browser || '');
-            if (!input.noOpen && !cdpOnly || !input.stageRoot) return extensionPaths;
+            const plain = !input.noOpen && !input.startingUrl && !cdpOnly;
+            if (plain || !input.stageRoot) return extensionPaths;
             const index = extensionPaths.findIndex((p)=>isDevtoolsCompanionPath(p));
             if (-1 === index) return extensionPaths;
             const source = extensionPaths[index];
@@ -379,7 +380,8 @@ var __webpack_modules__ = {
                     recursive: true
                 });
                 const flags = {
-                    noOpen: Boolean(input.noOpen)
+                    noOpen: Boolean(input.noOpen),
+                    startingUrl: Boolean(input.startingUrl)
                 };
                 node_fs__rspack_import_0.writeFileSync(node_path__rspack_import_1.join(staged, COMPANION_SESSION_FLAGS_FILE), `${JSON.stringify(flags)}\n`, 'utf8');
                 if (cdpOnly) dropNewTabOverride(staged);
@@ -809,6 +811,13 @@ var __webpack_modules__ = {
         function browserGoneBeforeReady(browser) {
             return `${getLoggingPrefix('error')} ${capitalizedBrowserName(browser)} exited before the extension loaded, so nothing is running.\nThe dev server keeps watching, but nothing will load until the browser is relaunched. Restart "extension dev".`;
         }
+        function browserUpNotAttached(opts) {
+            const name = capitalizedBrowserName(opts.browser);
+            const pid = opts.browserPid ? ` (pid ${opts.browserPid})` : '';
+            const seconds = Math.round(opts.waitedMs / 1000);
+            const profile = opts.profilePath ? opts.profileReused ? `Profile ${pintor__rspack_import_8_default().underline(opts.profilePath)} had been run before: a profile picker, a restore prompt or a stale copy of the extension in it can keep the extension from connecting.` : `Profile ${pintor__rspack_import_8_default().underline(opts.profilePath)} is fresh, so look at the browser window for a dialog or an extensions page error.` : "Look at the browser window for a dialog or an extensions page error.";
+            return `${getLoggingPrefix('warn')} ${name}${pid} is up, but the extension has not connected after ${seconds} s.\n${profile}\nDismiss any dialog there, or stop this session and run again on a fresh profile (delete that folder, or pass ${pintor__rspack_import_8_default().yellow('--profile <new path>')}). The session keeps waiting and says "ready" once the extension connects.`;
+        }
         function chromeProcessError(error) {
             return `${getLoggingPrefix('error')} The Chrome process reported an error.\n${pintor__rspack_import_8_default().red(errorDetail(error))}`;
         }
@@ -929,10 +938,24 @@ var __webpack_modules__ = {
         function safariOpening(target) {
             return `${getLoggingPrefix('info')} Opening ${pintor__rspack_import_8_default().underline(target)}`;
         }
-        function safariToolFailed(tool, exitCode, outputTail) {
+        function safariToolFailed(tool, exitCode, outputTail, cause) {
             const code = null === exitCode ? 'no exit code' : `exit ${exitCode}`;
             const tail = outputTail.trim().length ? `\n${pintor__rspack_import_8_default().gray('── last output ──')}\n${outputTail}` : `\n${pintor__rspack_import_8_default().gray('(no output captured)')}`;
-            return `${getLoggingPrefix('error')} Safari packaging tool ${pintor__rspack_import_8_default().underline(tool)} failed (${pintor__rspack_import_8_default().red(code)}).${tail}`;
+            return `${getLoggingPrefix('error')} Safari packaging tool ${pintor__rspack_import_8_default().underline(tool)} failed (${pintor__rspack_import_8_default().red(code)}).${cause ? `\n${cause}` : ''}${tail}`;
+        }
+        function safariKnownTeamsList(teams) {
+            return teams.map((team)=>team.name ? `${pintor__rspack_import_8_default().yellow(team.id)} (${team.name})` : pintor__rspack_import_8_default().yellow(team.id)).join(', ');
+        }
+        function safariTeamRemedyLines(team, knownTeams = []) {
+            const known = knownTeams.length ? `Set ${pintor__rspack_import_8_default().blue('developmentTeam')} to a team Xcode knows: ${safariKnownTeamsList(knownTeams)}.` : `Set ${pintor__rspack_import_8_default().blue('developmentTeam')} to a team Xcode is signed into.`;
+            return [
+                `Sign in to Xcode (Settings, Accounts) with the Apple ID that owns team ${pintor__rspack_import_8_default().yellow(team)}.`,
+                known,
+                `Drop ${pintor__rspack_import_8_default().blue('developmentTeam')} for an ad-hoc build.`
+            ];
+        }
+        function safariNoAccountForTeam(team, knownTeams = []) {
+            return `Xcode has no account for team ${pintor__rspack_import_8_default().yellow(team)}, so it couldn't sign the app with it.\n` + safariTeamRemedyLines(team, knownTeams).map((line)=>`- ${line}`).join('\n');
         }
         const SAFARI_KEPT_ON_PURPOSE = {
             world: 'Safari has honored the MAIN world since Safari 18, so the key stays'
@@ -957,14 +980,26 @@ var __webpack_modules__ = {
         function safariDryRunXcodebuild(cmd) {
             return `${getLoggingPrefix('info')} xcodebuild: ${pintor__rspack_import_8_default().gray(cmd)}.`;
         }
-        function safariNextSteps(appName, signed) {
+        const SAFARI_AD_HOC_LOADING = 'Safari runs an ad-hoc build only while unsigned extensions are allowed, and Safari turns that off at quit';
+        const SAFARI_TEAM_SIGNED_LOADING = 'A team-signed build needs no toggle, and the Apple Development certificate of an Xcode account signed in on this Mac is enough for local runs, no Developer ID needed';
+        function safariNextSteps(appName, signed, signing = {}) {
             const name = pintor__rspack_import_8_default().yellow(appName);
-            const unsignedStep = signed ? '' : `  ${pintor__rspack_import_8_default().gray('1.')} Safari ▸ Settings ▸ Developer ▸ Allow unsigned extensions (Safari forgets it on quit)\n`;
+            const unsignedStep = signed ? '' : `  ${pintor__rspack_import_8_default().gray('1.')} Safari ▸ Settings ▸ Developer ▸ Allow unsigned extensions (Safari turns it off at quit, so turn it on after each relaunch)\n`;
             const enableStep = `  ${pintor__rspack_import_8_default().gray(signed ? '1.' : '2.')} Safari ▸ Settings ▸ Extensions ▸ turn on ${name}\n`;
             const websitesStep = `  ${pintor__rspack_import_8_default().gray(signed ? '2.' : '3.')} Safari ▸ Settings ▸ Websites ▸ ${name} ▸ For other websites ▸ Allow\n`;
             const steps = `${getLoggingPrefix('info')} One-time setup to load ${name} in Safari, or pass ${pintor__rspack_import_8_default().blue('--enable-extension')} to let Extension.js do it:\n` + unsignedStep + enableStep + websitesStep + `  ${pintor__rspack_import_8_default().gray('→')} Use a regular Safari window for this, a trip to Settings from the automation window ends the WebDriver session.\n`;
-            if (signed) return steps + `  ${pintor__rspack_import_8_default().gray('→')} Signed with your team id, so the identity is stable for distribution.`;
-            return steps + `  ${pintor__rspack_import_8_default().gray('→')} Ad-hoc signed, so Safari lists it only while unsigned extensions are allowed.`;
+            if (signed) {
+                const team = signing.team ? `team ${pintor__rspack_import_8_default().yellow(signing.team)}` : 'your team id';
+                return steps + `  ${pintor__rspack_import_8_default().gray('→')} Signed with ${team}, so Safari loads it with no developer toggle and the identity is stable for distribution.`;
+            }
+            const adHoc = `  ${pintor__rspack_import_8_default().gray('→')} Ad-hoc signed. ${SAFARI_AD_HOC_LOADING}. With the toggle off after a relaunch, the toolbar button stays but does nothing.\n  ${pintor__rspack_import_8_default().gray('→')} Pass ${pintor__rspack_import_8_default().blue('--development-team')} to sign with your team. ${SAFARI_TEAM_SIGNED_LOADING}.\n  ${pintor__rspack_import_8_default().gray('→')} Safari keys stored data on the appex id, so ${pintor__rspack_import_8_default().yellow('storage.local')} survives rebuilds.`;
+            const requested = String(signing.requestedTeam || '').trim();
+            if (!requested) return steps + adHoc;
+            const why = signing.noAccount ? 'Xcode has no account for that team' : 'Xcode did not sign with it';
+            return steps + `  ${pintor__rspack_import_8_default().gray('→')} Ad-hoc signed although ${pintor__rspack_import_8_default().blue('developmentTeam')} ${pintor__rspack_import_8_default().yellow(requested)} was set: ${why}.\n` + safariTeamRemedyLines(requested, signing.knownTeams).map((line)=>`  ${pintor__rspack_import_8_default().gray('→')} ${line}`).join('\n');
+        }
+        function safariSigningChanged(appName, before, after) {
+            return `${getLoggingPrefix('info')} ${pintor__rspack_import_8_default().yellow(appName)} is now ${after} signed and the last build was ${before} signed, so Safari treats it as a new extension and the setup steps run again.`;
         }
         function safariEnableStep(step, before, after, detail) {
             const reading = null === before ? `${pintor__rspack_import_8_default().gray('read back')} ${pintor__rspack_import_8_default().yellow(after ?? 'nothing')}` : `${pintor__rspack_import_8_default().gray('read')} ${pintor__rspack_import_8_default().yellow(before)} ${pintor__rspack_import_8_default().gray('→')} ${pintor__rspack_import_8_default().yellow(after ?? 'nothing')}`;
@@ -1012,9 +1047,6 @@ var __webpack_modules__ = {
         function safariBuildUpToDate() {
             return `${getLoggingPrefix('info')} Skipping xcodebuild, the Safari app is up to date with the build.`;
         }
-        function safariStorageReset(appName) {
-            return `${getLoggingPrefix('warn')} Safari reset the extension's storage: ${pintor__rspack_import_8_default().yellow(appName)} is signed ad hoc, and Safari keeps an extension's storage only for a build signed by a team, so each rebuild starts with an empty ${pintor__rspack_import_8_default().yellow('storage.local')}.\nPass ${pintor__rspack_import_8_default().blue('--development-team <TEAM_ID>')} to keep it across rebuilds.`;
-        }
         function safariSkippingConversion() {
             return `${getLoggingPrefix('info')} Skipping the conversion, the Xcode project is up to date with manifest.json.`;
         }
@@ -1205,6 +1237,7 @@ var __webpack_modules__ = {
             Cd: ()=>safariEnabled,
             Cn: ()=>chromeProcessError,
             Cs: ()=>safariToolchainMissing,
+            D$: ()=>safariNoAccountForTeam,
             Dh: ()=>invalidGeckoBinaryPath,
             E8: ()=>chromiumDryRunFlags,
             EE: ()=>geckoAddonLoadRefused,
@@ -1228,6 +1261,7 @@ var __webpack_modules__ = {
             KP: ()=>safariBuildCalled,
             L: ()=>chromiumManifestLoadBlockers,
             LD: ()=>firefoxDryRunBinary,
+            LE: ()=>browserUpNotAttached,
             LT: ()=>browserStderrTail,
             M3: ()=>cdpClientConnected,
             M6: ()=>chromiumExtensionLoadRefused,
@@ -1275,11 +1309,11 @@ var __webpack_modules__ = {
             dw: ()=>devFirefoxProfilePath,
             eK: ()=>copyFromProfileSourceMissing,
             e_: ()=>runningInDevelopment,
+            ei: ()=>safariSigningChanged,
             fL: ()=>safariDryRunConverter,
             fO: ()=>safariNextSteps,
             fR: ()=>cdpClientConnectionError,
             fd: ()=>safariRegistered,
-            fl: ()=>safariStorageReset,
             fw: ()=>safariOpening,
             gE: ()=>firefoxProfileRemoteDebuggingOn,
             gX: ()=>firstRunInstallFailed,
@@ -1800,10 +1834,12 @@ var __webpack_modules__ = {
             Jk: ()=>claimReadyPath,
             dT: ()=>describeLaunchFailure,
             NE: ()=>launchFailureCode,
+            Lb: ()=>readReadyExecutorAttached,
             Uf: ()=>readReadyRunId,
             Wi: ()=>stampReadyBrowserExited,
             M: ()=>stampReadyBrowserLaunch,
             dz: ()=>stampReadyBrowserLaunchFailed,
+            xG: ()=>stampReadyBrowserUpNotAttached,
             QP: ()=>stampReadyCdpFault,
             HI: ()=>stampReadyCdpPort,
             hg: ()=>stampReadyExtensionId,
@@ -1909,6 +1945,7 @@ var __webpack_modules__ = {
                 if (isForeignRun(ready, runId)) return;
                 const profilePath = String(details?.profilePath || '').trim();
                 if (profilePath) ready.profilePath = profilePath;
+                if ('boolean' == typeof details?.profileReused) ready.profileReused = details.profileReused;
                 if ('number' == typeof details?.browserPid && Number.isFinite(details.browserPid)) ready.browserPid = details.browserPid;
                 if ('number' == typeof details?.launcherPid && Number.isFinite(details.launcherPid)) ready.launcherPid = details.launcherPid;
                 const extensionId = String(details?.extensionId || '').trim();
@@ -1932,6 +1969,31 @@ var __webpack_modules__ = {
                 writeJsonAtomic(readyPath, ready);
             } catch  {}
         }
+        function readReadyExecutorAttached(extensionOutputPath, runId) {
+            try {
+                if (!extensionOutputPath) return false;
+                const readyPath = readyPathFor(extensionOutputPath);
+                if (!external_node_fs_.existsSync(readyPath)) return false;
+                const ready = JSON.parse(external_node_fs_.readFileSync(readyPath, 'utf-8'));
+                if (isForeignRun(ready, runId)) return false;
+                return 'string' == typeof ready.executorAttachedAt || 'attached' === ready.runtime;
+            } catch  {
+                return false;
+            }
+        }
+        function stampReadyBrowserUpNotAttached(extensionOutputPath, details, runId) {
+            try {
+                if (!extensionOutputPath) return;
+                const readyPath = readyPathFor(extensionOutputPath);
+                if (!external_node_fs_.existsSync(readyPath)) return;
+                const ready = JSON.parse(external_node_fs_.readFileSync(readyPath, 'utf-8'));
+                if (isForeignRun(ready, runId)) return;
+                ready.browserUpNotAttachedAt = new Date().toISOString();
+                ready.browserUpNotAttachedWaitMs = details.waitedMs;
+                ready.browserUpNotAttachedHint = String(details.hint || '').trim() || 'the browser is up, but the extension has not connected';
+                writeJsonAtomic(readyPath, ready);
+            } catch  {}
+        }
         function describeLaunchFailure(error) {
             const message = error instanceof Error ? error.message : 'string' == typeof error ? error : String(error?.message ?? error ?? '');
             return (0, messaging.UT)(message).replace(/\s+/g, ' ').trim();
@@ -3744,7 +3806,6 @@ var __webpack_modules__ = {
             '--disable-features=InterestFeedContentSuggestions',
             '--disable-features=Translate',
             '--hide-scrollbars',
-            '--mute-audio',
             '--no-default-browser-check',
             '--ash-no-nudges',
             '--disable-search-engine-choice-screen',
@@ -3762,6 +3823,48 @@ var __webpack_modules__ = {
             '--enable-unsafe-extension-debugging',
             '--silent-debugger-extension-api'
         ];
+        const HEADLESS_ONLY_BROWSER_FLAGS = [
+            '--mute-audio'
+        ];
+        const AUTOMATION_CONTROLLED = 'AutomationControlled';
+        const DISABLE_BLINK_FEATURES = '--disable-blink-features=';
+        function asksForAutomation(flags) {
+            return flags.some((flag)=>'--enable-automation' === flag || flag.startsWith('--enable-blink-features=') && flag.slice(24).split(',').some((name)=>name.trim() === AUTOMATION_CONTROLLED));
+        }
+        function withBlinkFeatureDisabled(flags, feature) {
+            const values = [];
+            let at = -1;
+            const rest = [];
+            for (const flag of flags){
+                if (!flag.startsWith(DISABLE_BLINK_FEATURES)) {
+                    rest.push(flag);
+                    continue;
+                }
+                if (at < 0) at = rest.length;
+                for (const value of flag.slice(DISABLE_BLINK_FEATURES.length).split(',')){
+                    const trimmed = value.trim();
+                    if (trimmed && !values.includes(trimmed)) values.push(trimmed);
+                }
+            }
+            if (!values.includes(feature)) values.push(feature);
+            rest.splice(at < 0 ? rest.length : at, 0, DISABLE_BLINK_FEATURES + values.join(','));
+            return rest;
+        }
+        function applyLaunchModeFlags(flags, excludeFlags = []) {
+            if ((0, shared_utils.P1)(flags)) {
+                const muted = (0, shared_utils.ov)(HEADLESS_ONLY_BROWSER_FLAGS, excludeFlags);
+                return [
+                    ...flags,
+                    ...muted.filter((flag)=>!flags.includes(flag))
+                ];
+            }
+            if (asksForAutomation(flags)) return flags;
+            const clearWebdriver = `${DISABLE_BLINK_FEATURES}${AUTOMATION_CONTROLLED}`;
+            if (!(0, shared_utils.ov)([
+                clearWebdriver
+            ], excludeFlags).length) return flags;
+            return withBlinkFeatureDisabled(flags, AUTOMATION_CONTROLLED);
+        }
         function isPlainObject(value) {
             return !!value && 'object' == typeof value && !Array.isArray(value);
         }
@@ -3914,7 +4017,7 @@ var __webpack_modules__ = {
                 ...(0, shared_utils.W0)(process.env.EXTENSION_BROWSER_FLAGS)
             ];
             if ((0, shared_utils.ZO)() && !baseFlags.some((flag)=>flag.startsWith('--headless'))) baseFlags.push('--headless=new');
-            return (0, shared_utils.Py)(baseFlags);
+            return (0, shared_utils.Py)(applyLaunchModeFlags(baseFlags, excludeFlags));
         }
         function logChromiumDryRun(browser, browserBinaryLocation, chromiumConfig) {
             if ((0, messaging._o)()) (0, messaging._w)(messages.xy(browser));
@@ -4173,6 +4276,24 @@ var __webpack_modules__ = {
             });
         }
         const STDERR_TAIL_LINES = 8;
+        const ATTACH_GRACE_MS = 15000;
+        const ATTACH_POLL_MS = 250;
+        function profileWasRunBefore(profilePath) {
+            if (!profilePath) return false;
+            try {
+                return external_node_fs_.existsSync(external_node_path_.join(profilePath, 'Local State'));
+            } catch  {
+                return false;
+            }
+        }
+        function hostsNoDevRuntime(extensionOutputPath) {
+            try {
+                const manifest = JSON.parse(external_node_fs_.readFileSync(external_node_path_.join(extensionOutputPath, 'manifest.json'), 'utf-8'));
+                return Boolean(manifest.theme) && !manifest.background;
+            } catch  {
+                return false;
+            }
+        }
         class ChromiumLaunchPlugin {
             getExtensionLoadRefusal() {
                 return this.extensionLoadRefused || null;
@@ -4225,7 +4346,7 @@ var __webpack_modules__ = {
                         if (hasErrors) return void this.logger.info(messages.y7());
                         await this.launchChromium(stats.compilation);
                         this.didLaunch = true;
-                        if (!this.didReportReady && !this.extensionLoadRefused && !this.browserGone) (0, messaging._w)((0, ready_message.G)(stats.compilation.options.mode, this.options.browser));
+                        if (!this.didReportReady && !this.readyDeferred && !this.extensionLoadRefused && !this.browserGone) (0, messaging._w)((0, ready_message.G)(stats.compilation.options.mode, this.options.browser));
                     } catch (error) {
                         this.stampLaunchFailed(stats.compilation, error);
                         try {
@@ -4629,8 +4750,11 @@ var __webpack_modules__ = {
                 const child = await this.launchWithDirectSpawn(browserBinaryLocation, chromiumConfig, usePipe);
                 this.didSpawn = true;
                 const launchOutputPath = this.closeHandlerContext?.extensionOutputPath;
+                const launchProfilePath = chromiumConfig.find((flag)=>flag.startsWith('--user-data-dir='))?.slice('--user-data-dir='.length).replace(/^"|"$/g, '');
+                this.profileReused = profileWasRunBefore(launchProfilePath);
                 (0, ready_stamp.M)(launchOutputPath, {
-                    profilePath: chromiumConfig.find((flag)=>flag.startsWith('--user-data-dir='))?.slice('--user-data-dir='.length).replace(/^"|"$/g, ''),
+                    profilePath: launchProfilePath,
+                    profileReused: this.profileReused,
                     browserPid: child?.pid,
                     binary: browserBinaryLocation ?? void 0,
                     binaryProvenance,
@@ -4696,7 +4820,13 @@ var __webpack_modules__ = {
                         if (cdpConfig.extensionLoadRefused) this.extensionLoadRefused = cdpConfig.extensionLoadRefused;
                         if (cdpConfig.cdpController) this.ctx.setController(cdpConfig.cdpController);
                     }
-                    reportReady();
+                    await this.reportReadyWhenAttached({
+                        compilation,
+                        enableCdp,
+                        reportReady,
+                        browserPid: child?.pid,
+                        profilePath: launchProfilePath
+                    });
                 } catch (error) {
                     const message = String(error && error.message);
                     const hint = /timed out|did not complete/i.test(message) ? " Chrome likely rejected the extension at launch, open chrome://extensions in the dev browser window for the exact error. Common causes: MV3 content_security_policy with 'unsafe-inline', manifest keys Chrome does not support, or manifest references to missing files. Reload/HMR cannot attach until this is fixed." : '';
@@ -4707,9 +4837,49 @@ var __webpack_modules__ = {
                         return;
                     }
                     this.stampCdpFault(compilation, error);
-                    reportReady();
+                    await this.reportReadyWhenAttached({
+                        compilation,
+                        enableCdp,
+                        reportReady,
+                        browserPid: child?.pid,
+                        profilePath: launchProfilePath
+                    });
                 }
             }
+            async reportReadyWhenAttached(opts) {
+                const outputPath = this.closeHandlerContext?.extensionOutputPath;
+                const runId = this.closeHandlerContext?.runId;
+                if ('development' !== opts.compilation.options.mode || !opts.enableCdp || !outputPath || this.extensionLoadRefused || hostsNoDevRuntime(outputPath)) return void opts.reportReady();
+                const graceMs = opts.graceMs ?? ATTACH_GRACE_MS;
+                const pollMs = opts.pollMs ?? ATTACH_POLL_MS;
+                const attached = ()=>(0, ready_stamp.Lb)(outputPath, runId);
+                const deadline = Date.now() + graceMs;
+                while(!this.browserGone && !attached() && Date.now() < deadline)await new Promise((resolve)=>setTimeout(resolve, pollMs));
+                if (this.browserGone) return;
+                if (attached()) return void opts.reportReady();
+                const waitedMs = graceMs;
+                const message = messages.LE({
+                    browser: this.options.browser,
+                    browserPid: opts.browserPid,
+                    profilePath: opts.profilePath,
+                    profileReused: this.profileReused,
+                    waitedMs
+                });
+                (0, messaging.mR)(message);
+                (0, ready_stamp.xG)(outputPath, {
+                    waitedMs,
+                    hint: (0, messaging.UT)(message)
+                }, runId);
+                this.readyDeferred = true;
+                const watcher = setInterval(()=>{
+                    if (this.browserGone || this.didReportReady) return void clearInterval(watcher);
+                    if (attached()) {
+                        clearInterval(watcher);
+                        opts.reportReady();
+                    }
+                }, pollMs);
+                watcher.unref?.();
+            }
             async waitForBrowserGone(child, graceMs) {
                 if (!child) return;
                 const deadline = Date.now() + graceMs;
@@ -4819,6 +4989,8 @@ var __webpack_modules__ = {
                 _define_property(this, "ctx", void 0);
                 _define_property(this, "didLaunch", void 0);
                 _define_property(this, "didReportReady", void 0);
+                _define_property(this, "readyDeferred", void 0);
+                _define_property(this, "profileReused", void 0);
                 _define_property(this, "browserGone", void 0);
                 _define_property(this, "didSpawn", void 0);
                 _define_property(this, "extensionLoadRefused", void 0);
@@ -4829,6 +5001,8 @@ var __webpack_modules__ = {
                 this.ctx = ctx;
                 this.didLaunch = false;
                 this.didReportReady = false;
+                this.readyDeferred = false;
+                this.profileReused = false;
                 this.browserGone = false;
                 this.didSpawn = false;
                 this.closeHandlerContext = null;
@@ -5340,6 +5514,7 @@ var __webpack_modules__ = {
             const extensionsToLoad = (0, companion_session.mO)({
                 extensionPaths: configOptions.extension ? (0, runtime_options.fT)(configOptions.extension) : [],
                 noOpen: configOptions.noOpen,
+                startingUrl: Boolean((0, runtime_options.cP)(configOptions)),
                 stageRoot: profilePath || void 0,
                 provision
             });
@@ -7883,6 +8058,67 @@ var __webpack_modules__ = {
             (0, messaging._w)(messages.Aj(xcodebuildCmd));
         }
         var safari_config = __webpack_require__("./browsers/run-safari/safari-launch/safari-config.ts");
+        var external_node_path_ = __webpack_require__("node:path");
+        const ADHOC_SIGNATURE = 'adhoc';
+        function parseCodeSignature(output) {
+            const rows = new Map();
+            for (const line of output.split(/\r?\n/)){
+                const at = line.indexOf('=');
+                if (!(at <= 0)) rows.set(line.slice(0, at).trim(), line.slice(at + 1).trim());
+            }
+            const team = rows.get('TeamIdentifier') || '';
+            const adhoc = 'adhoc' === rows.get('Signature') || !team || /^not set$/i.test(team);
+            if (adhoc) return {
+                signed: false,
+                team: null
+            };
+            return {
+                signed: true,
+                team
+            };
+        }
+        function signatureKey(signature) {
+            return signature.signed && signature.team ? signature.team : ADHOC_SIGNATURE;
+        }
+        function describeSignature(key) {
+            return key && key !== ADHOC_SIGNATURE ? `team ${key}` : 'ad-hoc';
+        }
+        function noAccountForTeam(output) {
+            const hit = /No Account for Team\s+"?([A-Za-z0-9]+)"?/i.exec(output);
+            return hit ? hit[1] : null;
+        }
+        function parseXcodeTeams(output) {
+            const teams = new Map();
+            for (const block of output.split('{')){
+                const id = /teamID\s*=\s*"?([A-Za-z0-9]+)"?\s*;/.exec(block);
+                if (!id || teams.has(id[1])) continue;
+                const name = /teamName\s*=\s*"?([^";]*)"?\s*;/.exec(block);
+                teams.set(id[1], {
+                    id: id[1],
+                    name: name?.[1].trim() || null
+                });
+            }
+            return [
+                ...teams.values()
+            ];
+        }
+        function signatureRecordPath(config) {
+            return external_node_path_.join(config.projectLocation, '.signature');
+        }
+        function readSignatureRecord(config) {
+            try {
+                const stored = external_node_fs_.readFileSync(signatureRecordPath(config), 'utf8').trim();
+                return stored || null;
+            } catch  {
+                return null;
+            }
+        }
+        function saveSignatureRecord(config, signature) {
+            external_node_fs_.mkdirSync(external_node_path_.dirname(signatureRecordPath(config)), {
+                recursive: true
+            });
+            external_node_fs_.writeFileSync(signatureRecordPath(config), signatureKey(signature), 'utf8');
+        }
         var external_node_child_process_ = __webpack_require__("node:child_process");
         function isMacOS() {
             return 'darwin' === process.platform;
@@ -8087,7 +8323,24 @@ var __webpack_modules__ = {
                         String(port)
                     ]),
                 listAutomationPids: ()=>listPidsWhere(isAutomationSafariArgs),
-                listAppPids: (appPath)=>listPidsWhere((args)=>isContainerAppArgs(appPath, args))
+                listAppPids: (appPath)=>listPidsWhere((args)=>isContainerAppArgs(appPath, args)),
+                readCodeSignature: (appPath)=>runTool('codesign', [
+                        '-dv',
+                        '--verbose=2',
+                        appPath
+                    ], {
+                        quiet: true
+                    }),
+                readXcodeTeams: async ()=>{
+                    const { ok, output } = await runTool('defaults', [
+                        'read',
+                        'com.apple.dt.Xcode',
+                        'IDEProvisioningTeams'
+                    ], {
+                        quiet: true
+                    });
+                    return ok ? output : '';
+                }
             };
         }
         var external_node_http_ = __webpack_require__("node:http");
@@ -8097,6 +8350,8 @@ var __webpack_modules__ = {
         const SESSION_CREATE_MS = 30000;
         const SESSION_CLOSE_MS = 5000;
         const AUTOMATION_QUIT_MS = 3000;
+        const WEBDRIVER_NOT_ASKED_YET = 'the launcher has not asked safaridriver for a session yet: it opens the app and enables the extension first, then asks, and this line is replaced by the session or by the reason it got none';
+        const WEBDRIVER_SESSION_PENDING = `the launcher is asking safaridriver for a session now: the request alone waits up to ${SESSION_CREATE_MS / 1000} s, and this line is replaced by the session or by the reason it got none`;
         const activeSessions = new Set();
         const activeDrivers = new Set();
         let webdriver_handlersInstalled = false;
@@ -8330,7 +8585,7 @@ var __webpack_modules__ = {
             if ('0' === value) return 'off';
             return value;
         }
-        async function enableThroughSafariUi(host, config, appPath, logger) {
+        async function enableThroughSafariUi(host, config, appPath, logger, signedTeam) {
             const uiTools = host.uiTools || (0, safari_ui.Uw)();
             const access = await (0, safari_ui.d8)(uiTools);
             if (!access.granted) {
@@ -8341,7 +8596,7 @@ var __webpack_modules__ = {
                 const report = await (0, safari_ui.Hm)({
                     target: {
                         bundleId: config.bundleIdentifier,
-                        developmentTeam: config.developmentTeam
+                        developmentTeam: signedTeam ?? void 0
                     },
                     appPath,
                     tools: uiTools,
@@ -8359,6 +8614,24 @@ var __webpack_modules__ = {
                 return false;
             }
         }
+        async function readAppSignature(tools, appPath) {
+            try {
+                const { output } = await tools.readCodeSignature(appPath);
+                return parseCodeSignature(output);
+            } catch  {
+                return {
+                    signed: false,
+                    team: null
+                };
+            }
+        }
+        async function listXcodeTeams(tools) {
+            try {
+                return parseXcodeTeams(await tools.readXcodeTeams());
+            } catch  {
+                return [];
+            }
+        }
         function describePackage(config) {
             return {
                 appName: config.appName,
@@ -8411,8 +8684,11 @@ var __webpack_modules__ = {
             } catch  {}
         }
         async function holdWebDriverSession(tools, config, logger) {
-            await closeSafariWebDriverSessions();
             const runId = (0, ready_stamp.Uf)(config.extensionDir);
+            (0, ready_stamp.ZC)(config.extensionDir, {
+                unavailableReason: WEBDRIVER_SESSION_PENDING
+            }, runId);
+            await closeSafariWebDriverSessions();
             const outcome = await openSafariWebDriverSession(tools);
             if (outcome.session) {
                 const { port, sessionId } = outcome.session;
@@ -8433,7 +8709,6 @@ var __webpack_modules__ = {
             const config = (0, safari_config.F7)(compilation, host);
             const converterArgs = (0, safari_config.w7)(config);
             const xcodebuildArgs = (0, safari_config.vx)(config);
-            const isSigned = Boolean(config.developmentTeam);
             if (host.dryRun) {
                 logSafariDryRun(`xcrun ${converterArgs.join(' ')}`, `xcodebuild ${xcodebuildArgs.join(' ')}`);
                 return completePackage(config, logger, mode);
@@ -8480,6 +8755,7 @@ var __webpack_modules__ = {
             } else if ('full' === mode) logger.info?.(messages.oM());
             const buildFingerprint = (0, safari_config.XE)(config, xcodebuildArgs);
             const reuseBuild = !needsConversion && (0, safari_config.uO)(config, buildFingerprint);
+            let buildOutput = '';
             if (reuseBuild) {
                 if ('full' === mode) logger.info?.(messages.xx());
             } else {
@@ -8487,13 +8763,30 @@ var __webpack_modules__ = {
                 const built = await tools.runXcodebuild(xcodebuildArgs);
                 if (!built.ok) {
                     const tail = toolOutputTail(built.output);
-                    logger.error?.(messages.A('xcodebuild', built.code, tail));
-                    throw new Error(`xcodebuild failed (exit ${built.code})\n${tail}`);
+                    const missingTeam = noAccountForTeam(built.output);
+                    const cause = missingTeam ? messages.D$(missingTeam, await listXcodeTeams(tools)) : void 0;
+                    logger.error?.(messages.A('xcodebuild', built.code, tail, cause));
+                    throw new Error(`xcodebuild failed (exit ${built.code})\n${cause ? `${cause}\n` : ''}${tail}`);
                 }
+                buildOutput = built.output;
                 (0, safari_config.q_)(config, buildFingerprint);
-                if (host.announceDevReady && !isSigned) logger.warn?.(messages.fl(config.appName));
             }
             const appPath = (0, safari_config.fd)(config);
+            const signature = await readAppSignature(tools, appPath);
+            const isSigned = signature.signed;
+            const previousSignature = readSignatureRecord(config);
+            const requestedTeam = String(config.developmentTeam || '').trim();
+            const noAccount = Boolean(noAccountForTeam(buildOutput));
+            const signingNote = {
+                team: signature.team,
+                requestedTeam: requestedTeam || void 0,
+                noAccount,
+                knownTeams: !isSigned && requestedTeam ? await listXcodeTeams(tools) : []
+            };
+            if (!reuseBuild) {
+                saveSignatureRecord(config, signature);
+                if (null !== previousSignature && previousSignature !== signatureKey(signature)) logger.info?.(messages.ei(config.appName, describeSignature(previousSignature), describeSignature(signatureKey(signature))));
+            }
             if ('resync' === mode) {
                 if (!reuseBuild) logger.info?.(messages.cF(config.appName));
                 return describePackage(config);
@@ -8518,13 +8811,16 @@ var __webpack_modules__ = {
                 binaryProvenance: config.safariBinary ? 'pinned' : 'system',
                 extensionId: `${config.bundleIdentifier}.Extension`
             }, (0, ready_stamp.Uf)(config.extensionDir));
+            if (host.announceDevReady) (0, ready_stamp.ZC)(config.extensionDir, {
+                unavailableReason: WEBDRIVER_NOT_ASKED_YET
+            }, (0, ready_stamp.Uf)(config.extensionDir));
             if (!browserPid) logger.warn?.(messages.jn(config.appName));
-            if (!host.enableExtension) logger.info?.(messages.fO(config.appName, isSigned));
+            if (!host.enableExtension) logger.info?.(messages.fO(config.appName, isSigned, signingNote));
             if (await confirmRegisteredWithSafari(tools, config.bundleIdentifier)) logger.info?.(messages.fd(config.appName));
             else logger.info?.(messages.qY(config.appName));
             if (host.enableExtension) {
-                const enabled = await enableThroughSafariUi(host, config, appPath, logger);
-                if (!enabled) logger.info?.(messages.fO(config.appName, isSigned));
+                const enabled = await enableThroughSafariUi(host, config, appPath, logger, signature.team);
+                if (!enabled) logger.info?.(messages.fO(config.appName, isSigned, signingNote));
             }
             if (host.announceDevReady) {
                 await holdWebDriverSession(tools, config, logger);
@@ -9833,6 +10129,7 @@ function describeButton(b) {
             E_LOCALES_LAYOUT: 'E_LOCALES_LAYOUT',
             E_WAR_INVALID: 'E_WAR_INVALID',
             E_DEV_SESSION_DIST_SHARED: 'E_DEV_SESSION_DIST_SHARED',
+            E_PROD_LOOPBACK_ORIGIN: 'E_PROD_LOOPBACK_ORIGIN',
             E_BACKGROUND_REQUIRED: 'E_BACKGROUND_REQUIRED',
             E_CONTENT_SCRIPT_SYNTAX: 'E_CONTENT_SCRIPT_SYNTAX',
             E_NO_ENTRYPOINTS: 'E_NO_ENTRYPOINTS',