@extenshi/cli 0.20.0 → 0.22.0

package/dist/edgewebstore-md.js

@@ -0,0 +1,95 @@
+/**
+ * EDGE.md — Microsoft Edge Add-ons listing draft (`extenshi generate-listing --store edge`).
+ *
+ * Shares the Name / Short description / Description / Single purpose headings
+ * with CHROMEWEBSTORE.md on purpose: `review-risk --listing EDGE.md` parses
+ * it through the exact same `listingDraftFromChromeWebStoreMd` heading
+ * lookup, so nothing in listing.ts needs to know EDGE.md exists.
+ *
+ * Field names, limits and step order come from Microsoft's own publish guide:
+ * https://learn.microsoft.com/en-us/microsoft-edge/extensions/publish/publish-extension
+ * (Store logo 300×300 recommended / 128×128 minimum; description 250–10,000
+ * chars; search terms ≤7 terms / ≤30 chars each / ≤21 words total; privacy
+ * policy URL and permission justifications live on the Privacy step).
+ */
+export const EDGE_FILENAME = 'EDGE.md';
+export function renderEdgeMd(input) {
+    const loc = input.listing?.locales.find((l) => l.locale === input.listing?.defaultLocale) ?? input.listing?.locales[0];
+    const justifications = input.justifications ?? [];
+    const justBlock = justifications.length === 0
+        ? '_No sensitive permissions need a Privacy-page justification yet._'
+        : justifications.map((j) => `### ${j.permission}\n\n${j.prompt}`).join('\n\n');
+    return `# EDGE.md
+
+Microsoft Edge Add-ons listing draft. This is the same listing draft
+\`review-risk --listing\` already accepts as JSON or CHROMEWEBSTORE.md — run:
+
+\`npx @extenshi/cli@latest review-risk --listing EDGE.md\`
+
+Do not paste this into Partner Center automatically. Fill the dashboard by hand.
+Submission guide: https://learn.microsoft.com/en-us/microsoft-edge/extensions/publish/publish-extension
+
+## Name
+
+${loc?.name ?? ''}
+
+## Short description
+
+${loc?.shortDescription ?? ''}
+
+## Description
+
+${loc?.description ?? ''}
+
+_Edge requires 250–10,000 characters per language; the manifest-derived short
+description above is usually too short on its own — expand it or fill via
+\`--listing\`._
+
+## Category
+
+_Pick one from Partner Center — required for every submission._
+
+## Store logo
+
+_1:1 aspect ratio, 300×300 recommended, 128×128 minimum, one per language._
+
+## Promotional assets
+
+- Small promotional tile (optional): 440×280
+- Large promotional tile (optional): 1400×560
+- Screenshots (optional, up to 6): 640×480 or 1280×800
+
+## Search terms
+
+_Up to 7 terms, 30 characters each, 21 words total. Optional but improves discovery._
+
+## Support
+
+- Website URL: _optional — must be your own site, not the store listing itself_
+- Support contact: _email or support URL_
+- Mature content: _No, unless the extension has mature content_
+
+## Single purpose
+
+${input.singlePurpose ?? loc?.shortDescription ?? loc?.name ?? ''}
+
+## Permission justifications
+
+${justBlock}
+
+## Privacy policy
+
+${input.needsPrivacyPolicy
+        ? '**Required** — the manifest requests permissions Edge treats as accessing personal information. Set the Privacy Policy URL on the Privacy page.'
+        : 'Not required by the requested permissions alone — re-check if the extension collects data another way (e.g. through a remote service).'}
+
+## Notes for certification
+
+_Test accounts, steps to reach gated/paid features, anything a certification tester needs to exercise the extension._
+
+## Version history
+
+_Record each upload: version, what changed, why._
+`;
+}
+//# sourceMappingURL=edgewebstore-md.js.map

package/dist/edgewebstore-md.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edgewebstore-md.js","sourceRoot":"","sources":["../src/edgewebstore-md.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAA;AAEtC,MAAM,UAAU,YAAY,CAAC,KAK5B;IACA,MAAM,GAAG,GACR,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IAC3G,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAA;IACjD,MAAM,SAAS,GACd,cAAc,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,mEAAmE;QACrE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAEhF,OAAO;;;;;;;;;;;;EAYN,GAAG,EAAE,IAAI,IAAI,EAAE;;;;EAIf,GAAG,EAAE,gBAAgB,IAAI,EAAE;;;;EAI3B,GAAG,EAAE,WAAW,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCtB,KAAK,CAAC,aAAa,IAAI,GAAG,EAAE,gBAAgB,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE;;;;EAI/D,SAAS;;;;EAKV,KAAK,CAAC,kBAAkB;QACvB,CAAC,CAAC,iJAAiJ;QACnJ,CAAC,CAAC,wIACJ;;;;;;;;;CASC,CAAA;AACD,CAAC"}

package/dist/evidence-ingest.d.ts

@@ -0,0 +1,60 @@
+/**
+ * `extenshi evidence ingest <zip|extenshi-packages.json>` — post CI evidence from
+ * GitHub Actions, the same request tools/extenshi-evidence-action makes.
+ *
+ * Why the CLI carries it: that action lives in the platform monorepo, which is
+ * private, and the public mirror does not publish it — `uses:` of it 404s in a
+ * developer's repository. The CLI is public on npm, so the scaffold's evidence
+ * workflow calls this instead. The payload, idempotency key and signature are
+ * the action's byte for byte; evidence-ingest.test.ts runs the action's
+ * main.mjs next to this function against one local server and compares.
+ *
+ * Nothing here can mint trust: the server verifies through the GitHub API that
+ * the run exists in the project's bound repository, at this commit, with this
+ * conclusion, and has COMPLETED — so this must run from a `workflow_run`
+ * follow-up, not inside the run it attests. Source `ci` is written only there.
+ */
+import type { Command } from 'commander';
+/** RFC 4122 §4.3 uuidv5 — the action's derivation, so retries replay the same record. */
+export declare function uuidv5(name: string, namespace?: string): string;
+export interface IngestInput {
+    projectId: string;
+    artifactBytes: Uint8Array;
+    secret: string;
+    repository: string;
+    commit: string;
+    runId: number;
+    runAttempt: number;
+    kind: string;
+    browser: string;
+    locale?: string;
+    conclusion: string;
+    serverUrl?: string;
+}
+/** The exact body + headers the action sends. `timestamp` is injectable for tests. */
+export declare function buildIngestRequest(input: IngestInput, timestamp?: string): {
+    artifactDigest: string;
+    body: string;
+    headers: {
+        'content-type': string;
+        'x-extenshi-timestamp': string;
+        'x-extenshi-signature': string;
+    };
+};
+export interface IngestCommandOptions {
+    project: string;
+    kind: string;
+    browser: string;
+    locale?: string;
+    conclusion?: string;
+    runId?: string;
+    commit?: string;
+    bffUrl?: string;
+}
+export declare function runEvidenceIngest(artifact: string, options: IngestCommandOptions, env?: NodeJS.ProcessEnv): Promise<{
+    artifactDigest: string;
+    status: number;
+    answer: string;
+}>;
+export declare function registerEvidenceIngest(program: Command, run: (name: string, fn: () => Promise<void>) => Promise<void>): void;
+//# sourceMappingURL=evidence-ingest.d.ts.map

package/dist/evidence-ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-ingest.d.ts","sourceRoot":"","sources":["../src/evidence-ingest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAiBxC,yFAAyF;AACzF,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAgB,GAAG,MAAM,CAMtE;AAED,MAAM,WAAW,WAAW;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,UAAU,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,SAAwB;;;;;;;;EAiCvF;AAED,MAAM,WAAW,oBAAoB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,wBAAsB,iBAAiB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,oBAAoB,EAC7B,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAkDrE;AAED,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,QA4B7D"}

package/dist/evidence-ingest.js

@@ -0,0 +1,141 @@
+/**
+ * `extenshi evidence ingest <zip|extenshi-packages.json>` — post CI evidence from
+ * GitHub Actions, the same request tools/extenshi-evidence-action makes.
+ *
+ * Why the CLI carries it: that action lives in the platform monorepo, which is
+ * private, and the public mirror does not publish it — `uses:` of it 404s in a
+ * developer's repository. The CLI is public on npm, so the scaffold's evidence
+ * workflow calls this instead. The payload, idempotency key and signature are
+ * the action's byte for byte; evidence-ingest.test.ts runs the action's
+ * main.mjs next to this function against one local server and compares.
+ *
+ * Nothing here can mint trust: the server verifies through the GitHub API that
+ * the run exists in the project's bound repository, at this commit, with this
+ * conclusion, and has COMPLETED — so this must run from a `workflow_run`
+ * follow-up, not inside the run it attests. Source `ci` is written only there.
+ */
+import { createHash, createHmac } from 'node:crypto';
+import fs from 'node:fs';
+import { InvalidInputError } from './expected-error.js';
+import { resolvePackagedArtifact } from './package.js';
+const CI_KINDS = ['tests', 'scan', 'installed'];
+const CI_BROWSERS = ['chrome', 'firefox', 'edge'];
+const CI_CONCLUSIONS = [
+    'success',
+    'failure',
+    'cancelled',
+    'timed_out',
+    'skipped',
+    'neutral',
+    'startup_failure',
+];
+const URL_NAMESPACE = '6ba7b810-9dad-11d1-80b4-00c04fd430c8';
+/** RFC 4122 §4.3 uuidv5 — the action's derivation, so retries replay the same record. */
+export function uuidv5(name, namespace = URL_NAMESPACE) {
+    const hash = createHash('sha1').update(namespace.replace(/-/g, ''), 'hex').update(name).digest();
+    hash[6] = (hash[6] & 0x0f) | 0x50;
+    hash[8] = (hash[8] & 0x3f) | 0x80;
+    const hex = hash.toString('hex');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`;
+}
+/** The exact body + headers the action sends. `timestamp` is injectable for tests. */
+export function buildIngestRequest(input, timestamp = Date.now().toString()) {
+    const artifactDigest = createHash('sha256').update(input.artifactBytes).digest('hex');
+    const locale = input.locale ?? '';
+    const idempotencyKey = uuidv5(`${input.repository}:${input.runId}:${input.runAttempt}:${input.kind}:${input.browser}:${locale}:${artifactDigest}`);
+    const serverUrl = input.serverUrl ?? 'https://github.com';
+    const body = JSON.stringify({
+        projectId: input.projectId,
+        idempotencyKey,
+        repo: input.repository,
+        commit: input.commit,
+        artifactDigest,
+        kind: input.kind,
+        browser: input.browser,
+        ...(locale ? { locale } : {}),
+        conclusion: input.conclusion,
+        runId: input.runId,
+        runUrl: `${serverUrl}/${input.repository}/actions/runs/${input.runId}`,
+        reports: [],
+    });
+    // The server stores only sha256(secret) and verifies with that hash.
+    const key = createHash('sha256').update(input.secret, 'utf8').digest('hex');
+    const signature = createHmac('sha256', key).update(`${timestamp}.${body}`).digest('hex');
+    return {
+        artifactDigest,
+        body,
+        headers: {
+            'content-type': 'application/json',
+            'x-extenshi-timestamp': timestamp,
+            'x-extenshi-signature': `sha256=${signature}`,
+        },
+    };
+}
+export async function runEvidenceIngest(artifact, options, env = process.env) {
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(options.project))
+        throw new InvalidInputError('--project must be the Dojo project UUID');
+    if (!CI_KINDS.includes(options.kind))
+        throw new InvalidInputError(`--kind must be one of: ${CI_KINDS.join(', ')} (CI attests the package it built)`);
+    if (!CI_BROWSERS.includes(options.browser))
+        throw new InvalidInputError(`--browser must be one of: ${CI_BROWSERS.join(', ')}`);
+    const conclusion = options.conclusion ?? 'success';
+    if (!CI_CONCLUSIONS.includes(conclusion))
+        throw new InvalidInputError(`--conclusion must be one of: ${CI_CONCLUSIONS.join(', ')}`);
+    // A flag would put the secret in the process list and shell history.
+    const secret = env.EXTENSHI_EVIDENCE_SECRET;
+    if (!secret)
+        throw new InvalidInputError('Set EXTENSHI_EVIDENCE_SECRET (the project CI ingest secret) in the environment.');
+    const repository = env.GITHUB_REPOSITORY;
+    const commit = options.commit || env.GITHUB_SHA;
+    const runId = Number(options.runId || env.GITHUB_RUN_ID);
+    if (!repository || !commit || !Number.isInteger(runId) || runId <= 0)
+        throw new InvalidInputError('GITHUB_REPOSITORY, the commit and the run id are required — run inside GitHub Actions, and from a workflow_run follow-up pass --run-id/--commit of the completed run.');
+    const { artifactPath } = resolvePackagedArtifact(artifact, options.browser);
+    const request = buildIngestRequest({
+        projectId: options.project,
+        artifactBytes: fs.readFileSync(artifactPath),
+        secret,
+        repository,
+        commit,
+        runId,
+        runAttempt: Number(env.GITHUB_RUN_ATTEMPT || '1'),
+        kind: options.kind,
+        browser: options.browser,
+        locale: options.locale,
+        conclusion,
+        serverUrl: env.GITHUB_SERVER_URL,
+    });
+    const bffUrl = (options.bffUrl ?? env.EXTENSHI_BFF_URL ?? 'https://bff.extenshi.io').replace(/\/$/, '');
+    const response = await fetch(`${bffUrl}/projects/${options.project}/evidence/ingest`, {
+        method: 'POST',
+        headers: request.headers,
+        body: request.body,
+        signal: AbortSignal.timeout(30_000),
+    });
+    const answer = await response.text().catch(() => '');
+    if (!response.ok)
+        throw new Error(`ingest rejected (${response.status}): ${answer.slice(0, 500)}`);
+    return { artifactDigest: request.artifactDigest, status: response.status, answer };
+}
+export function registerEvidenceIngest(program, run) {
+    const evidence = program.commands.find((c) => c.name() === 'evidence') ?? program.command('evidence');
+    evidence
+        .command('ingest <artifact>')
+        .description('CI only: attest a COMPLETED GitHub Actions run for this package (zip or extenshi-packages.json) — the ' +
+        'tools/extenshi-evidence-action request, signed with EXTENSHI_EVIDENCE_SECRET. Run it from a workflow_run follow-up.')
+        .requiredOption('--project <id>', 'Dojo project UUID')
+        .requiredOption('--kind <kind>', 'tests | scan | installed')
+        .requiredOption('--browser <browser>', 'chrome | firefox | edge')
+        .option('--locale <locale>', 'Optional locale the evidence is scoped to')
+        .option('--conclusion <conclusion>', 'Run conclusion to attest (the server cross-checks it)', 'success')
+        .option('--run-id <id>', 'The completed run to attest (default GITHUB_RUN_ID — rejected while in progress)')
+        .option('--commit <sha>', 'The built commit (default GITHUB_SHA)')
+        .option('--bff-url <url>', 'Extenshi BFF base URL', undefined)
+        .action(async (artifact, options) => {
+        await run('evidence ingest', async () => {
+            const result = await runEvidenceIngest(artifact, options);
+            console.log(`extenshi-evidence: recorded ${options.kind} for ${result.artifactDigest.slice(0, 12)}… — ${result.answer.slice(0, 300)}`);
+        });
+    });
+}
+//# sourceMappingURL=evidence-ingest.js.map

package/dist/evidence-ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-ingest.js","sourceRoot":"","sources":["../src/evidence-ingest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,MAAM,SAAS,CAAA;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAEtD,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAU,CAAA;AACxD,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAU,CAAA;AAC1D,MAAM,cAAc,GAAG;IACtB,SAAS;IACT,SAAS;IACT,WAAW;IACX,WAAW;IACX,SAAS;IACT,SAAS;IACT,iBAAiB;CACR,CAAA;AACV,MAAM,aAAa,GAAG,sCAAsC,CAAA;AAE5D,yFAAyF;AACzF,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,SAAS,GAAG,aAAa;IAC7D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IAChG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IACjC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAChC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;AAC/G,CAAC;AAiBD,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAAC,KAAkB,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvF,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACrF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAA;IACjC,MAAM,cAAc,GAAG,MAAM,CAC5B,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,IAAI,MAAM,IAAI,cAAc,EAAE,CACnH,CAAA;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,oBAAoB,CAAA;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc;QACd,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc;QACd,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,GAAG,SAAS,IAAI,KAAK,CAAC,UAAU,iBAAiB,KAAK,CAAC,KAAK,EAAE;QACtE,OAAO,EAAE,EAAE;KACX,CAAC,CAAA;IACF,qEAAqE;IACrE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACxF,OAAO;QACN,cAAc;QACd,IAAI;QACJ,OAAO,EAAE;YACR,cAAc,EAAE,kBAAkB;YAClC,sBAAsB,EAAE,SAAS;YACjC,sBAAsB,EAAE,UAAU,SAAS,EAAE;SAC7C;KACD,CAAA;AACF,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,QAAgB,EAChB,OAA6B,EAC7B,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAC3F,MAAM,IAAI,iBAAiB,CAAC,yCAAyC,CAAC,CAAA;IACvE,IAAI,CAAE,QAA8B,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QAC1D,MAAM,IAAI,iBAAiB,CAC1B,0BAA0B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CACjF,CAAA;IACF,IAAI,CAAE,WAAiC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QAChE,MAAM,IAAI,iBAAiB,CAAC,6BAA6B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,SAAS,CAAA;IAClD,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC9D,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACzF,qEAAqE;IACrE,MAAM,MAAM,GAAG,GAAG,CAAC,wBAAwB,CAAA;IAC3C,IAAI,CAAC,MAAM;QACV,MAAM,IAAI,iBAAiB,CAC1B,iFAAiF,CACjF,CAAA;IACF,MAAM,UAAU,GAAG,GAAG,CAAC,iBAAiB,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAA;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,aAAa,CAAC,CAAA;IACxD,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QACnE,MAAM,IAAI,iBAAiB,CAC1B,uKAAuK,CACvK,CAAA;IACF,MAAM,EAAE,YAAY,EAAE,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3E,MAAM,OAAO,GAAG,kBAAkB,CAAC;QAClC,SAAS,EAAE,OAAO,CAAC,OAAO;QAC1B,aAAa,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC;QAC5C,MAAM;QACN,UAAU;QACV,MAAM;QACN,KAAK;QACL,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC;QACjD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU;QACV,SAAS,EAAE,GAAG,CAAC,iBAAiB;KAChC,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,gBAAgB,IAAI,yBAAyB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACvG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,aAAa,OAAO,CAAC,OAAO,kBAAkB,EAAE;QACrF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACnC,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACpD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;IAClG,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;AACnF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACrC,OAAgB,EAChB,GAA6D;IAE7D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACrG,QAAQ;SACN,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CACX,wGAAwG;QACvG,qHAAqH,CACtH;SACA,cAAc,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;SACrD,cAAc,CAAC,eAAe,EAAE,0BAA0B,CAAC;SAC3D,cAAc,CAAC,qBAAqB,EAAE,yBAAyB,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,2CAA2C,CAAC;SACxE,MAAM,CAAC,2BAA2B,EAAE,uDAAuD,EAAE,SAAS,CAAC;SACvG,MAAM,CACN,eAAe,EACf,kFAAkF,CAClF;SACA,MAAM,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;SACjE,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,SAAS,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,OAA6B,EAAE,EAAE;QACjE,MAAM,GAAG,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YACzD,OAAO,CAAC,GAAG,CACV,+BAA+B,OAAO,CAAC,IAAI,QAAQ,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACzH,CAAA;QACF,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/expected-error.d.ts

@@ -24,6 +24,15 @@
  * command surfaces to the user, never code exceptions.
  */
 export declare const EXPECTED_ERROR_KINDS: Set<string>;
+/**
+ * A problem with a file or flag the user supplied (a malformed config, a
+ * refused logo, a non-https URL) — `invalid_input`, reported with a non-zero
+ * exit but never as an exception. Recognised by `name` in telemetry.ts's
+ * classifier, so that module needs no import from here.
+ */
+export declare class InvalidInputError extends Error {
+    name: string;
+}
 /**
  * True when a thrown error is an expected, user-facing condition rather than a
  * bug worth an exception report. `kind` defaults to classifying `err`; pass one

package/dist/expected-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"expected-error.d.ts","sourceRoot":"","sources":["../src/expected-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,aAA+D,CAAA;AAEhG;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE,MAA2B,GAAG,OAAO,CAExF"}
+{"version":3,"file":"expected-error.d.ts","sourceRoot":"","sources":["../src/expected-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,aAM/B,CAAA;AAEF;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC3C,IAAI,SAAsB;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE,MAA2B,GAAG,OAAO,CAExF"}

package/dist/expected-error.js

@@ -24,7 +24,22 @@ import { classifyError } from './telemetry.js';
  * `rate_limit` — asked to slow down. All four are actionable conditions the
  * command surfaces to the user, never code exceptions.
  */
-export const EXPECTED_ERROR_KINDS = new Set(['invalid_artifact', 'auth', 'quota', 'rate_limit']);
+export const EXPECTED_ERROR_KINDS = new Set([
+    'invalid_artifact',
+    'invalid_input',
+    'auth',
+    'quota',
+    'rate_limit',
+]);
+/**
+ * A problem with a file or flag the user supplied (a malformed config, a
+ * refused logo, a non-https URL) — `invalid_input`, reported with a non-zero
+ * exit but never as an exception. Recognised by `name` in telemetry.ts's
+ * classifier, so that module needs no import from here.
+ */
+export class InvalidInputError extends Error {
+    name = 'InvalidInputError';
+}
 /**
  * True when a thrown error is an expected, user-facing condition rather than a
  * bug worth an exception report. `kind` defaults to classifying `err`; pass one

package/dist/expected-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"expected-error.js","sourceRoot":"","sources":["../src/expected-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;AAEhG;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,OAAe,aAAa,CAAC,GAAG,CAAC;IAC9E,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACtC,CAAC"}
+{"version":3,"file":"expected-error.js","sourceRoot":"","sources":["../src/expected-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IAC3C,kBAAkB;IAClB,eAAe;IACf,MAAM;IACN,OAAO;IACP,YAAY;CACZ,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC3C,IAAI,GAAG,mBAAmB,CAAA;CAC1B;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,OAAe,aAAa,CAAC,GAAG,CAAC;IAC9E,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACtC,CAAC"}

package/dist/firefox-rdp.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Minimal Firefox Remote Debugging Protocol client — just enough to install a
+ * package as a TEMPORARY add-on and watch it, the way `web-ext run` and
+ * about:debugging do. No dependency: RDP is length-prefixed JSON over TCP
+ * (`<byteLength>:<json>`), and every request is answered by one packet `from`
+ * the actor it was sent `to`.
+ *
+ * Why RDP and not Playwright/Marionette: Playwright's Firefox cannot install
+ * add-ons, and Marionette cannot script privileged moz-extension pages — but
+ * the devtools server can install the exact .zip, report its manifest warnings
+ * and background status, and stream every error the add-on's documents raise.
+ */
+import { type ChildProcess } from 'node:child_process';
+type Packet = Record<string, any>;
+export declare class RdpClient {
+    private readonly socket;
+    private buffer;
+    private pending;
+    private listeners;
+    private constructor();
+    /** Connect, retrying while Firefox starts; resolves with the client and the server's hello packet. */
+    static connect(port: number, timeoutMs: number): Promise<{
+        client: RdpClient;
+        hello: Packet;
+    }>;
+    private onData;
+    private dispatch;
+    on(listener: (p: Packet) => void): void;
+    /** The next unsolicited packet matching `predicate`. */
+    next(predicate: (p: Packet) => boolean, timeoutMs: number): Promise<Packet>;
+    request(to: string, type: string, extra?: Packet, timeoutMs?: number): Promise<Packet>;
+    close(): void;
+}
+/** A Firefox binary, or null. Order: explicit path, FIREFOX_BIN, the usual install locations, PATH. */
+export declare function findFirefox(explicit?: string, env?: NodeJS.ProcessEnv): string | null;
+export interface LaunchedFirefox {
+    client: RdpClient;
+    hello: Packet;
+    process: ChildProcess;
+    profile: string;
+    close(): Promise<void>;
+}
+/**
+ * Start a disposable headless Firefox with the devtools server on a free port.
+ * `uuids` pins the moz-extension:// host per add-on id, so extension pages have
+ * a known URL before the add-on is installed.
+ */
+export declare function launchFirefox(options: {
+    binary: string;
+    uuids: Record<string, string>;
+    headless: boolean;
+    timeoutMs: number;
+}): Promise<LaunchedFirefox>;
+export {};
+//# sourceMappingURL=firefox-rdp.d.ts.map

package/dist/firefox-rdp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firefox-rdp.d.ts","sourceRoot":"","sources":["../src/firefox-rdp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAS,MAAM,oBAAoB,CAAA;AAM7D,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAEjC,qBAAa,SAAS;IAKD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJ3C,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,OAAO,CAAyF;IACxG,OAAO,CAAC,SAAS,CAAiC;IAElD,OAAO;IAOP,sGAAsG;WACzF,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAqBpG,OAAO,CAAC,MAAM;IAmBd,OAAO,CAAC,QAAQ;IAWhB,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAIvC,wDAAwD;IACxD,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAa3E,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAoB1F,KAAK,IAAI,IAAI;CAGb;AAED,uGAAuG;AACvG,wBAAgB,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAgBlG;AAeD,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,SAAS,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,YAAY,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAC5C,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,QAAQ,EAAE,OAAO,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAAC,eAAe,CAAC,CAiD3B"}

package/dist/firefox-rdp.js

@@ -0,0 +1,203 @@
+/**
+ * Minimal Firefox Remote Debugging Protocol client — just enough to install a
+ * package as a TEMPORARY add-on and watch it, the way `web-ext run` and
+ * about:debugging do. No dependency: RDP is length-prefixed JSON over TCP
+ * (`<byteLength>:<json>`), and every request is answered by one packet `from`
+ * the actor it was sent `to`.
+ *
+ * Why RDP and not Playwright/Marionette: Playwright's Firefox cannot install
+ * add-ons, and Marionette cannot script privileged moz-extension pages — but
+ * the devtools server can install the exact .zip, report its manifest warnings
+ * and background status, and stream every error the add-on's documents raise.
+ */
+import { spawn } from 'node:child_process';
+import fs from 'node:fs';
+import net from 'node:net';
+import os from 'node:os';
+import path from 'node:path';
+export class RdpClient {
+    socket;
+    buffer = Buffer.alloc(0);
+    pending = [];
+    listeners = [];
+    constructor(socket) {
+        this.socket = socket;
+        socket.on('data', (chunk) => this.onData(chunk));
+        socket.on('close', () => {
+            for (const w of this.pending.splice(0))
+                w.reject(new Error('Firefox closed the debugging connection'));
+        });
+    }
+    /** Connect, retrying while Firefox starts; resolves with the client and the server's hello packet. */
+    static async connect(port, timeoutMs) {
+        const deadline = Date.now() + timeoutMs;
+        for (;;) {
+            try {
+                const socket = await new Promise((resolve, reject) => {
+                    const s = net.connect(port, '127.0.0.1', () => resolve(s));
+                    s.once('error', reject);
+                });
+                const client = new RdpClient(socket);
+                const hello = await client.next((p) => p.from === 'root' && 'applicationType' in p, 5_000);
+                return { client, hello };
+            }
+            catch (error) {
+                if (Date.now() > deadline)
+                    throw new Error(`Firefox did not open its debugging port within ${timeoutMs} ms (${error.message})`);
+                await new Promise((r) => setTimeout(r, 250));
+            }
+        }
+    }
+    onData(chunk) {
+        this.buffer = Buffer.concat([this.buffer, chunk]);
+        for (;;) {
+            const colon = this.buffer.indexOf(0x3a);
+            if (colon < 0)
+                return;
+            const length = Number(this.buffer.subarray(0, colon).toString());
+            if (!Number.isFinite(length)) {
+                this.socket.destroy(new Error('malformed RDP packet'));
+                return;
+            }
+            if (this.buffer.length < colon + 1 + length)
+                return;
+            const packet = JSON.parse(this.buffer.subarray(colon + 1, colon + 1 + length).toString('utf8'));
+            this.buffer = this.buffer.subarray(colon + 1 + length);
+            this.dispatch(packet);
+        }
+    }
+    dispatch(packet) {
+        // Replies carry no `type` (or carry `error`); unsolicited events carry a type.
+        const isReply = packet.error !== undefined || packet.type === undefined;
+        const waiter = isReply ? this.pending.findIndex((w) => w.actor === packet.from) : -1;
+        if (waiter >= 0) {
+            this.pending.splice(waiter, 1)[0].resolve(packet);
+            return;
+        }
+        for (const listener of this.listeners)
+            listener(packet);
+    }
+    on(listener) {
+        this.listeners.push(listener);
+    }
+    /** The next unsolicited packet matching `predicate`. */
+    next(predicate, timeoutMs) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => reject(new Error('timed out waiting for Firefox')), timeoutMs);
+            const listener = (p) => {
+                if (!predicate(p))
+                    return;
+                clearTimeout(timer);
+                this.listeners = this.listeners.filter((l) => l !== listener);
+                resolve(p);
+            };
+            this.listeners.push(listener);
+        });
+    }
+    request(to, type, extra = {}, timeoutMs = 20_000) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => reject(new Error(`Firefox did not answer ${type}`)), timeoutMs);
+            this.pending.push({
+                actor: to,
+                resolve: (p) => {
+                    clearTimeout(timer);
+                    resolve(p);
+                },
+                reject: (e) => {
+                    clearTimeout(timer);
+                    reject(e);
+                },
+            });
+            const body = Buffer.from(JSON.stringify({ to, type, ...extra }), 'utf8');
+            this.socket.write(`${body.length}:`);
+            this.socket.write(body);
+        });
+    }
+    close() {
+        this.socket.destroy();
+    }
+}
+/** A Firefox binary, or null. Order: explicit path, FIREFOX_BIN, the usual install locations, PATH. */
+export function findFirefox(explicit, env = process.env) {
+    const candidates = [explicit, env.FIREFOX_BIN];
+    if (process.platform === 'darwin')
+        candidates.push('/Applications/Firefox.app/Contents/MacOS/firefox', '/Applications/Firefox Developer Edition.app/Contents/MacOS/firefox', '/Applications/Firefox Nightly.app/Contents/MacOS/firefox');
+    else if (process.platform === 'win32')
+        for (const base of [env.ProgramFiles, env['ProgramFiles(x86)']])
+            if (base)
+                candidates.push(path.join(base, 'Mozilla Firefox', 'firefox.exe'));
+            else
+                candidates.push('/usr/bin/firefox', '/usr/lib/firefox/firefox', '/usr/local/bin/firefox');
+    for (const dir of (env.PATH ?? '').split(path.delimiter))
+        if (dir)
+            candidates.push(path.join(dir, process.platform === 'win32' ? 'firefox.exe' : 'firefox'));
+    for (const candidate of candidates)
+        if (candidate && fs.existsSync(candidate))
+            return candidate;
+    return null;
+}
+async function freePort() {
+    return new Promise((resolve, reject) => {
+        const server = net.createServer();
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            const address = server.address();
+            server.close(() => typeof address === 'object' && address ? resolve(address.port) : reject(new Error('no port')));
+        });
+    });
+}
+/**
+ * Start a disposable headless Firefox with the devtools server on a free port.
+ * `uuids` pins the moz-extension:// host per add-on id, so extension pages have
+ * a known URL before the add-on is installed.
+ */
+export async function launchFirefox(options) {
+    const profile = fs.mkdtempSync(path.join(os.tmpdir(), 'extenshi-smoke-firefox-'));
+    const prefs = {
+        'devtools.debugger.remote-enabled': true,
+        'devtools.debugger.prompt-connection': false,
+        'devtools.chrome.enabled': true,
+        'browser.shell.checkDefaultBrowser': false,
+        'browser.startup.homepage_override.mstone': 'ignore',
+        'browser.aboutwelcome.enabled': false,
+        'datareporting.policy.dataSubmissionEnabled': false,
+        'toolkit.telemetry.reportingpolicy.firstRun': false,
+        'app.update.enabled': false,
+        'extensions.webextensions.uuids': JSON.stringify(options.uuids),
+    };
+    fs.writeFileSync(path.join(profile, 'user.js'), Object.entries(prefs)
+        .map(([key, value]) => `user_pref(${JSON.stringify(key)}, ${JSON.stringify(value)});`)
+        .join('\n'));
+    const port = await freePort();
+    const args = ['-no-remote', '-profile', profile, '-start-debugger-server', String(port)];
+    if (options.headless)
+        args.unshift('-headless');
+    const child = spawn(options.binary, args, {
+        stdio: 'ignore',
+        env: { ...process.env, ...(options.headless ? { MOZ_HEADLESS: '1' } : {}) },
+    });
+    const exited = new Promise((resolve) => child.once('exit', () => resolve()));
+    const close = async () => {
+        child.kill();
+        await Promise.race([exited, new Promise((r) => setTimeout(r, 5_000))]);
+        fs.rmSync(profile, { recursive: true, force: true });
+    };
+    try {
+        const { client, hello } = await RdpClient.connect(port, options.timeoutMs);
+        return {
+            client,
+            hello,
+            process: child,
+            profile,
+            close: async () => {
+                client.close();
+                await close();
+            },
+        };
+    }
+    catch (error) {
+        await close();
+        throw error;
+    }
+}
+//# sourceMappingURL=firefox-rdp.js.map

package/dist/firefox-rdp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firefox-rdp.js","sourceRoot":"","sources":["../src/firefox-rdp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,GAAG,MAAM,UAAU,CAAA;AAC1B,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAI5B,MAAM,OAAO,SAAS;IAKgB;IAJ7B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACxB,OAAO,GAAuF,EAAE,CAAA;IAChG,SAAS,GAA+B,EAAE,CAAA;IAElD,YAAqC,MAAkB;QAAlB,WAAM,GAAN,MAAM,CAAY;QACtD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAChD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAA;QACvG,CAAC,CAAC,CAAA;IACH,CAAC;IAED,sGAAsG;IACtG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,SAAiB;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QACvC,SAAS,CAAC;YACT,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAChE,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC1D,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBACxB,CAAC,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAA;gBACpC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,iBAAiB,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;gBAC1F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;oBACxB,MAAM,IAAI,KAAK,CACd,kDAAkD,SAAS,QAAS,KAAe,CAAC,OAAO,GAAG,CAC9F,CAAA;gBACF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;YAC7C,CAAC;QACF,CAAC;IACF,CAAC;IAEO,MAAM,CAAC,KAAa;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;QACjD,SAAS,CAAC;YACT,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACvC,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAM;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;YAChE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAA;gBACtD,OAAM;YACP,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,GAAG,CAAC,GAAG,MAAM;gBAAE,OAAM;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC1D,CAAA;YACX,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAA;YACtD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACtB,CAAC;IACF,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC9B,+EAA+E;QAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,CAAA;QACvE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACpF,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACjD,OAAM;QACP,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IACxD,CAAC;IAED,EAAE,CAAC,QAA6B;QAC/B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,SAAiC,EAAE,SAAiB;QACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;YAC7F,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE;gBAC9B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBAAE,OAAM;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAA;gBAC7D,OAAO,CAAC,CAAC,CAAC,CAAA;YACX,CAAC,CAAA;YACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACH,CAAC;IAED,OAAO,CAAC,EAAU,EAAE,IAAY,EAAE,QAAgB,EAAE,EAAE,SAAS,GAAG,MAAM;QACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;YAC9F,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;oBACd,YAAY,CAAC,KAAK,CAAC,CAAA;oBACnB,OAAO,CAAC,CAAC,CAAC,CAAA;gBACX,CAAC;gBACD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;oBACb,YAAY,CAAC,KAAK,CAAC,CAAA;oBACnB,MAAM,CAAC,CAAC,CAAC,CAAA;gBACV,CAAC;aACD,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;YACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC,CAAC,CAAA;IACH,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;IACtB,CAAC;CACD;AAED,uGAAuG;AACvG,MAAM,UAAU,WAAW,CAAC,QAAiB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAClF,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;IAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAChC,UAAU,CAAC,IAAI,CACd,kDAAkD,EAClD,oEAAoE,EACpE,0DAA0D,CAC1D,CAAA;SACG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QACpC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAC9D,IAAI,IAAI;gBAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAA;;gBACvE,UAAU,CAAC,IAAI,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,wBAAwB,CAAC,CAAA;IAChG,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QACvD,IAAI,GAAG;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IACnG,KAAK,MAAM,SAAS,IAAI,UAAU;QAAE,IAAI,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IAC/F,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,KAAK,UAAU,QAAQ;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,CAAA;QACjC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;YAChC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAC7F,CAAA;QACF,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAKnC;IACA,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAA;IACjF,MAAM,KAAK,GAA8C;QACxD,kCAAkC,EAAE,IAAI;QACxC,qCAAqC,EAAE,KAAK;QAC5C,yBAAyB,EAAE,IAAI;QAC/B,mCAAmC,EAAE,KAAK;QAC1C,0CAA0C,EAAE,QAAQ;QACpD,8BAA8B,EAAE,KAAK;QACrC,4CAA4C,EAAE,KAAK;QACnD,4CAA4C,EAAE,KAAK;QACnD,oBAAoB,EAAE,KAAK;QAC3B,gCAAgC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;KAC/D,CAAA;IACD,EAAE,CAAC,aAAa,CACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAC7B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACnB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;SACrF,IAAI,CAAC,IAAI,CAAC,CACZ,CAAA;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAA;IAC7B,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACxF,IAAI,OAAO,CAAC,QAAQ;QAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;QACzC,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC3E,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAClF,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACxB,KAAK,CAAC,IAAI,EAAE,CAAA;QACZ,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACtE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,CAAC,CAAA;IACD,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;QAC1E,OAAO;YACN,MAAM;YACN,KAAK;YACL,OAAO,EAAE,KAAK;YACd,OAAO;YACP,KAAK,EAAE,KAAK,IAAI,EAAE;gBACjB,MAAM,CAAC,KAAK,EAAE,CAAA;gBACd,MAAM,KAAK,EAAE,CAAA;YACd,CAAC;SACD,CAAA;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,KAAK,EAAE,CAAA;QACb,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC"}