@extenshi/cli 0.0.8 → 0.1.0

package/dist/review-checks.d.ts

@@ -0,0 +1,139 @@
+/**
+ * review-risk — pure check logic for the pre-publish "will the store reject /
+ * slow-walk / silently disable this?" suite.
+ *
+ * Every finding maps to ONE of three real-world consequences, never a generic
+ * lint level:
+ *
+ *   REJECTED  — the store will reject the submission (you cannot ship as-is).
+ *   SLOW      — it ships, but review moves from <24h to several days.
+ *   ATTRITION — it ships and passes review, but installed users are silently
+ *               dropped on the update until they re-accept a new permission.
+ *
+ * Each check's `citation` points to the relevant official Chrome Web Store /
+ * Chrome for Developers documentation so the user can verify the rule at the
+ * source. (We do not cite third-party books in product output.)
+ *
+ * This module is PURE (no I/O) so the rules are unit-testable against fixtures.
+ * Archive extraction lives in review-archive.ts; the network manifest fetch in
+ * review-catalog.ts; rendering in review-render.ts.
+ */
+export type Verdict = 'REJECTED' | 'SLOW' | 'ATTRITION';
+export interface ReviewFinding {
+    /** The real-world consequence — drives the label shown to the user. */
+    verdict: Verdict;
+    /** Stable machine id (for --json consumers / suppression later). */
+    check: string;
+    /** One-line headline. */
+    title: string;
+    /** Why it matters, in plain language. */
+    detail: string;
+    /** The offending value or `file:line`, when there is one. */
+    evidence?: string;
+    /** The concrete fix. */
+    recommendation: string;
+    /** Official Chrome documentation backing the rule (shown to the user). */
+    citation: string;
+}
+/** A parsed manifest.json — only the fields the checks read are typed. */
+export interface Manifest {
+    manifest_version?: number;
+    name?: string;
+    version?: string;
+    permissions?: unknown;
+    optional_permissions?: unknown;
+    host_permissions?: unknown;
+    optional_host_permissions?: unknown;
+    content_scripts?: Array<{
+        matches?: unknown;
+        js?: unknown;
+        [k: string]: unknown;
+    }>;
+    background?: {
+        service_worker?: string;
+        scripts?: unknown;
+        page?: string;
+        type?: string;
+        [k: string]: unknown;
+    };
+    action?: {
+        default_popup?: string;
+        [k: string]: unknown;
+    };
+    browser_action?: {
+        default_popup?: string;
+        [k: string]: unknown;
+    };
+    options_ui?: {
+        page?: string;
+        [k: string]: unknown;
+    };
+    options_page?: string;
+    side_panel?: {
+        default_path?: string;
+        [k: string]: unknown;
+    };
+    devtools_page?: string;
+    chrome_url_overrides?: Record<string, string>;
+    sandbox?: {
+        pages?: unknown;
+        [k: string]: unknown;
+    };
+    [k: string]: unknown;
+}
+/** A text file pulled out of the artifact: package-relative path → contents. */
+export type FileMap = Map<string, string>;
+export declare const PERMISSION_WARNINGS: Readonly<Record<string, string>>;
+export declare function isGlobalHost(value: string): boolean;
+/**
+ * Required API permissions only (host patterns stripped out). In MV2 hosts and
+ * API permissions share the `permissions` array, so we split by shape.
+ */
+export declare function requiredApiPermissions(m: Manifest): string[];
+/** Required host patterns: `host_permissions` (MV3) plus any host-shaped entry in `permissions` (MV2). */
+export declare function requiredHostPermissions(m: Manifest): string[];
+/** Normalise a manifest-declared path to the package-relative key used in the file map. */
+export declare function normalizePath(p: string): string;
+/**
+ * HTML pages the browser renders inside the extension's own CSP — popup,
+ * options, side panel, devtools, newtab/history/bookmarks overrides, sandbox
+ * pages, and the MV2 background page. These are exactly where inline scripts and
+ * eval get the extension rejected.
+ */
+export declare function htmlEntrypoints(m: Manifest): string[];
+export declare function checkSlowReviewQueue(m: Manifest): ReviewFinding[];
+/**
+ * Static advisory — there is nothing in the package to inspect; it's a
+ * publishing-process fact developers routinely get burned by. Emitted once.
+ */
+export declare function checkListingChangeReReview(): ReviewFinding[];
+/**
+ * Diff the local manifest against the last-published one. A newly-added
+ * *required* permission that shows a warning silently disables the extension for
+ * the whole installed base on update (only a small toolbar icon appears) →
+ * silent attrition. Newly-added permissions of any kind also re-trip the slow
+ * review queue (ch.10).
+ *
+ * `prior` is the manifest fetched from the catalog's last snapshot; pass null
+ * when it could not be fetched (the caller surfaces why and this returns []).
+ */
+export declare function checkAutoDisableOnUpdate(local: Manifest, prior: Manifest | null): ReviewFinding[];
+export declare function checkRemoteCode(files: FileMap): ReviewFinding[];
+export declare function checkHtmlCsp(m: Manifest, files: FileMap): ReviewFinding[];
+export declare function checkServiceWorker(m: Manifest, files: FileMap): ReviewFinding[];
+export declare function checkActiveTabAdvisor(m: Manifest): ReviewFinding[];
+export interface ReviewInputs {
+    manifest: Manifest;
+    files: FileMap;
+    /** Last-published manifest from the catalog, or null when unavailable. */
+    priorManifest: Manifest | null;
+}
+export declare function runChecks(input: ReviewInputs): ReviewFinding[];
+export interface ReviewSummary {
+    findings: ReviewFinding[];
+    counts: Record<Verdict, number>;
+    /** True when at least one finding will block publishing. */
+    blocking: boolean;
+}
+export declare function summarize(findings: ReviewFinding[]): ReviewSummary;
+//# sourceMappingURL=review-checks.d.ts.map

package/dist/review-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-checks.d.ts","sourceRoot":"","sources":["../src/review-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,MAAM,MAAM,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,WAAW,CAAA;AAEvD,MAAM,WAAW,aAAa;IAC7B,uEAAuE;IACvE,OAAO,EAAE,OAAO,CAAA;IAChB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAA;IACb,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,wBAAwB;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAA;CAChB;AAED,0EAA0E;AAC1E,MAAM,WAAW,QAAQ;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,eAAe,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,OAAO,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAA;IAClF,UAAU,CAAC,EAAE;QACZ,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KACpB,CAAA;IACD,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACzD,cAAc,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACjE,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACpD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7C,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACnD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CACpB;AAED,gFAAgF;AAChF,MAAM,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAazC,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkChE,CAAA;AA2BD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKnD;AAMD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,EAAE,CAE5D;AAED,0GAA0G;AAC1G,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,EAAE,CAE7D;AAID,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,EAAE,CAerD;AAID,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,QAAQ,GAAG,aAAa,EAAE,CAkBjE;AAID;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,aAAa,EAAE,CAe5D;AAID;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,aAAa,EAAE,CAoEjG;AA4BD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,EAAE,CAyB/D;AASD,wBAAgB,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,aAAa,EAAE,CAkFzE;AAgDD,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,aAAa,EAAE,CAkD/E;AAYD,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,QAAQ,GAAG,aAAa,EAAE,CA6BlE;AAID,MAAM,WAAW,YAAY;IAC5B,QAAQ,EAAE,QAAQ,CAAA;IAClB,KAAK,EAAE,OAAO,CAAA;IACd,0EAA0E;IAC1E,aAAa,EAAE,QAAQ,GAAG,IAAI,CAAA;CAC9B;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,EAAE,CAU9D;AAID,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC/B,4DAA4D;IAC5D,QAAQ,EAAE,OAAO,CAAA;CACjB;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,aAAa,CAKlE"}