@extenshi/cli 0.21.0 → 0.22.0

package/README.md

@@ -74,4 +74,8 @@ Use `link` with `{ "appId": "...", "projectId": "..." }` to attach an optional d
 
 Profile JSON: `{ "appId": "...", "profile": { "displayName": "Author-confirmed name", "supportUrl": "https://example.com/support", "termsUrl": "https://example.com/terms" } }`. Offer JSON: `{ "appId": "...", "sku": "pro", "kind": "subscription", "interval": "month", "amountMinor": 499, "currency": "usd", "title": "Pro", "features": ["premium"] }`. A one-time or lifetime offer uses `interval: null`.
 
+`extenshi pay payment-evidence --input '{"appId":"..."}'` prints what Extenshi's payment ledger proves about the application, per mode: checkout completed, license issued, an installation received the signed license, restored on a second installation, refund revoked. It is derived from provider-signed webhooks, carries opaque IDs and timestamps only, and is the same evidence `extenshi release status` uses for the payment check of a linked project. Only a live-mode purchase satisfies a release's payment requirement.
+
+`extenshi pay test-cycle --app <appId> [--sku pro] [--refund-key-env NAME]` runs one Stripe TEST-mode purchase against an application whose seller is in test mode and prints that evidence. It refuses a live seller, a non-test Checkout session and a non-test refund key. The CLI acts as the installation: it opens a checkout, prints the hosted URL for payment with card 4242 4242 4242 4242, waits for the webhook, verifies the signed license, optionally refunds with the Stripe TEST secret named by `--refund-key-env` and checks the signed revocation. Test-mode purchases are recorded and shown but do not satisfy a release's payment requirement.
+
 Without `--output`, export returns one page with `nextCursor`; pass that cursor to retrieve the next page. With `--output`, all pages are streamed to a new private (0600) JSONL file; existing files are never overwritten, and failures remove incomplete files. Resources: offers, payments, subscriptions, entitlements, customers. Keep exports private. Only the publishable SDK key belongs in extension code.

package/dist/amo-source-detect.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Detect vendored/minified files that need a source-code submission on AMO.
+ *
+ * Shared by `amowebstore-md.ts` (lists them in AMO.md's "Source code" section)
+ * and `amo-source.ts` (the `extenshi amo-source` command, which treats an
+ * unreproducible one as a hard blocker). AMO policy:
+ * https://extensionworkshop.com/documentation/publish/source-code-submission/
+ * — minification/bundling/transpilation are allowed, but reviewers must be
+ * able to rebuild the pre-build source from provided instructions.
+ */
+import type { FileMap } from './review-checks.js';
+export interface MinifiedFileFinding {
+    path: string;
+    /** True when the file's own banner states version + commit + build command. */
+    hasProvenanceBanner: boolean;
+}
+export declare function detectMinifiedFiles(files: FileMap): MinifiedFileFinding[];
+//# sourceMappingURL=amo-source-detect.d.ts.map

package/dist/amo-source-detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amo-source-detect.d.ts","sourceRoot":"","sources":["../src/amo-source-detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAcjD,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,+EAA+E;IAC/E,mBAAmB,EAAE,OAAO,CAAA;CAC5B;AAWD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,EAAE,CAOzE"}

package/dist/amo-source-detect.js

@@ -0,0 +1,41 @@
+/**
+ * Detect vendored/minified files that need a source-code submission on AMO.
+ *
+ * Shared by `amowebstore-md.ts` (lists them in AMO.md's "Source code" section)
+ * and `amo-source.ts` (the `extenshi amo-source` command, which treats an
+ * unreproducible one as a hard blocker). AMO policy:
+ * https://extensionworkshop.com/documentation/publish/source-code-submission/
+ * — minification/bundling/transpilation are allowed, but reviewers must be
+ * able to rebuild the pre-build source from provided instructions.
+ */
+const CODE_EXT_RE = /\.(?:m?js|cjs)$/i;
+const MIN_FILENAME_RE = /[.-]min\.(?:m|c)?js$/i;
+/**
+ * The banner convention this repo's own build tooling emits for vendored SDK
+ * bundles (`extenshi-pay-sdk`, `extenshi-storage-sdk`): version + commit SHA +
+ * build command in the first ~2KB. A file carrying it is not "source", but a
+ * reviewer (or a developer) can use it to reproduce the build without a
+ * separate vendor-src/ archive for THAT file specifically.
+ */
+const PROVENANCE_BANNER_RE = /v\d+\.\d+\.\d+.{0,300}?commit\s+[0-9a-f]{7,40}.{0,300}?built by/is;
+function looksMinified(path, content) {
+    if (!CODE_EXT_RE.test(path))
+        return false;
+    if (MIN_FILENAME_RE.test(path))
+        return true;
+    if (!content || content.length < 2000)
+        return false;
+    const lines = content.split('\n');
+    const longestLine = lines.reduce((max, l) => Math.max(max, l.length), 0);
+    return longestLine > 500 && content.length / lines.length > 300;
+}
+export function detectMinifiedFiles(files) {
+    const out = [];
+    for (const [path, content] of files) {
+        if (!looksMinified(path, content))
+            continue;
+        out.push({ path, hasProvenanceBanner: PROVENANCE_BANNER_RE.test(content.slice(0, 2000)) });
+    }
+    return out.sort((a, b) => a.path.localeCompare(b.path));
+}
+//# sourceMappingURL=amo-source-detect.js.map

package/dist/amo-source-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amo-source-detect.js","sourceRoot":"","sources":["../src/amo-source-detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,WAAW,GAAG,kBAAkB,CAAA;AACtC,MAAM,eAAe,GAAG,uBAAuB,CAAA;AAE/C;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,mEAAmE,CAAA;AAQhG,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IACnD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,KAAK,CAAA;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IACxE,OAAO,WAAW,GAAG,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAA;AAChE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IACjD,MAAM,GAAG,GAA0B,EAAE,CAAA;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,SAAQ;QAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AACxD,CAAC"}

package/dist/amo-source.d.ts

@@ -0,0 +1,41 @@
+/**
+ * `extenshi amo-source <project-dir> [--out <path>]` — produce the AMO
+ * source-code archive + BUILD.md reviewer instructions.
+ *
+ * AMO requires reviewable source for any minified/bundled/transpiled code so a
+ * reviewer can rebuild the extension and diff it against the submitted
+ * package: https://extensionworkshop.com/documentation/publish/source-code-submission/
+ *
+ * This command does NOT run the build itself and does NOT talk to AMO's API
+ * (that is `publisher/src/services/firefox.ts`, owned separately). It only:
+ *   1. archives the project's tracked-looking source (excluding node_modules,
+ *      dist, .git, dotenv secrets, and any top-level directory the project's
+ *      own .gitignore names plainly — e.g. `dist-firefox/`, `dist-edge/`),
+ *   2. writes BUILD.md with the exact commands a reviewer needs (Node/npm
+ *      versions, package manager + lockfile, the build script from
+ *      package.json), and
+ *   3. flags vendored minified files that carry no reproducible-build
+ *      provenance as BLOCKERS — the developer must vendor their source (e.g.
+ *      under vendor-src/) before submitting.
+ *
+ * If the project directory is a clean git working tree, the archive is
+ * refused when there are uncommitted changes (matching the pattern this repo
+ * already uses for its own extension projects) — the archive should match a
+ * commit a reviewer can also check out. A directory that is not a git repo at
+ * all is archived as-is; there is nothing to compare it against.
+ */
+import { type MinifiedFileFinding } from './amo-source-detect.js';
+export interface AmoSourceOptions {
+    projectDir: string;
+    /** Where to write the archive. Default: `amo-source.zip` in the current directory. */
+    outputPath?: string;
+}
+export interface AmoSourceResult {
+    zipPath: string;
+    buildMdPath: string;
+    fileCount: number;
+    blockers: MinifiedFileFinding[];
+    reproducible: MinifiedFileFinding[];
+}
+export declare function runAmoSource(opts: AmoSourceOptions): Promise<AmoSourceResult>;
+//# sourceMappingURL=amo-source.d.ts.map

package/dist/amo-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amo-source.d.ts","sourceRoot":"","sources":["../src/amo-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAsDtF,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,YAAY,EAAE,mBAAmB,EAAE,CAAA;CACnC;AAyJD,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAuCnF"}

package/dist/amo-source.js

@@ -0,0 +1,240 @@
+/**
+ * `extenshi amo-source <project-dir> [--out <path>]` — produce the AMO
+ * source-code archive + BUILD.md reviewer instructions.
+ *
+ * AMO requires reviewable source for any minified/bundled/transpiled code so a
+ * reviewer can rebuild the extension and diff it against the submitted
+ * package: https://extensionworkshop.com/documentation/publish/source-code-submission/
+ *
+ * This command does NOT run the build itself and does NOT talk to AMO's API
+ * (that is `publisher/src/services/firefox.ts`, owned separately). It only:
+ *   1. archives the project's tracked-looking source (excluding node_modules,
+ *      dist, .git, dotenv secrets, and any top-level directory the project's
+ *      own .gitignore names plainly — e.g. `dist-firefox/`, `dist-edge/`),
+ *   2. writes BUILD.md with the exact commands a reviewer needs (Node/npm
+ *      versions, package manager + lockfile, the build script from
+ *      package.json), and
+ *   3. flags vendored minified files that carry no reproducible-build
+ *      provenance as BLOCKERS — the developer must vendor their source (e.g.
+ *      under vendor-src/) before submitting.
+ *
+ * If the project directory is a clean git working tree, the archive is
+ * refused when there are uncommitted changes (matching the pattern this repo
+ * already uses for its own extension projects) — the archive should match a
+ * commit a reviewer can also check out. A directory that is not a git repo at
+ * all is archived as-is; there is nothing to compare it against.
+ */
+import { execFileSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import JSZip from 'jszip';
+import { detectMinifiedFiles } from './amo-source-detect.js';
+const BASE_EXCLUDE_DIRS = new Set([
+    'node_modules',
+    '.git',
+    'dist',
+    'build',
+    '.turbo',
+    '.cache',
+    'coverage',
+    '.yarn',
+    '.next',
+]);
+const ENV_FILE_RE = /^\.env(\..+)?$/i;
+// A plain top-level directory ignore line: letters/digits/-/_/. only, no
+// globs, no nested path, optional trailing slash. Anything more complex
+// (negations, globs, nested paths) is skipped rather than mis-handled — this
+// is a heuristic, not a gitignore engine, and under-excluding is the safer
+// failure mode (a developer notices an oversized archive; over-excluding
+// silently drops source AMO needed).
+const SIMPLE_GITIGNORE_DIR_RE = /^([\w.-]+)\/?$/;
+/**
+ * Fold a project's own top-level `.gitignore` build-output directories into
+ * the exclude set — `dist-firefox/`, `dist-edge/` etc. are exactly the kind
+ * of committed-for-CI build output that should never end up in a "source"
+ * archive, and there is no way to enumerate every project's naming scheme in
+ * a fixed list.
+ */
+function additionalExcludeDirs(projectDir) {
+    const extra = new Set();
+    let raw;
+    try {
+        raw = fs.readFileSync(path.join(projectDir, '.gitignore'), 'utf8');
+    }
+    catch {
+        return extra;
+    }
+    for (const line of raw.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#') || trimmed.startsWith('!'))
+            continue;
+        const m = SIMPLE_GITIGNORE_DIR_RE.exec(trimmed);
+        if (m)
+            extra.add(m[1]);
+    }
+    return extra;
+}
+const TEXT_CODE_RE = /\.(?:m?js|cjs)$/i;
+const MAX_FILE_BYTES = 25 * 1024 * 1024;
+const LOCKFILES = [
+    { file: 'package-lock.json', manager: 'npm', installCmd: 'npm ci' },
+    { file: 'yarn.lock', manager: 'yarn', installCmd: 'yarn install --immutable' },
+    { file: 'pnpm-lock.yaml', manager: 'pnpm', installCmd: 'pnpm install --frozen-lockfile' },
+];
+function isGitClean(cwd) {
+    const git = (...args) => execFileSync('git', args, { cwd, stdio: ['ignore', 'pipe', 'ignore'] })
+        .toString()
+        .trim();
+    try {
+        git('rev-parse', '--is-inside-work-tree');
+    }
+    catch {
+        return { isRepo: false, clean: true };
+    }
+    const status = git('status', '--porcelain', '--', '.');
+    let commit;
+    try {
+        commit = git('rev-parse', 'HEAD');
+    }
+    catch {
+        // No commits yet — still archivable, just nothing to diff against.
+    }
+    return { isRepo: true, clean: status.length === 0, commit };
+}
+function readPackageJson(projectDir) {
+    try {
+        const raw = fs.readFileSync(path.join(projectDir, 'package.json'), 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+function detectLockfile(projectDir) {
+    return LOCKFILES.find((l) => fs.existsSync(path.join(projectDir, l.file)));
+}
+function npmVersion() {
+    try {
+        return execFileSync('npm', ['--version'], { stdio: ['ignore', 'pipe', 'ignore'] })
+            .toString()
+            .trim();
+    }
+    catch {
+        return undefined;
+    }
+}
+function walkProject(projectDir, outputAbsPath) {
+    const zip = new JSZip();
+    const textFiles = new Map();
+    let fileCount = 0;
+    const excludeDirs = new Set([...BASE_EXCLUDE_DIRS, ...additionalExcludeDirs(projectDir)]);
+    const walk = (dir) => {
+        for (const ent of fs.readdirSync(dir, { withFileTypes: true })) {
+            const full = path.join(dir, ent.name);
+            if (path.resolve(full) === path.resolve(outputAbsPath))
+                continue; // never zip ourselves
+            if (ent.isDirectory()) {
+                if (excludeDirs.has(ent.name))
+                    continue;
+                walk(full);
+                continue;
+            }
+            if (!ent.isFile())
+                continue;
+            if (ENV_FILE_RE.test(ent.name))
+                continue;
+            const stat = fs.statSync(full);
+            if (stat.size > MAX_FILE_BYTES)
+                continue;
+            const rel = path.relative(projectDir, full).split(path.sep).join('/');
+            const buf = fs.readFileSync(full);
+            zip.file(rel, buf);
+            fileCount++;
+            if (TEXT_CODE_RE.test(ent.name)) {
+                try {
+                    textFiles.set(rel, buf.toString('utf8'));
+                }
+                catch {
+                    // Binary content that happened to match the extension — skip minification scan for it.
+                }
+            }
+        }
+    };
+    walk(projectDir);
+    return { zip, textFiles, fileCount };
+}
+function renderBuildMd(input) {
+    const installCmd = input.lockfile?.installCmd ?? 'npm install';
+    const buildCmd = input.buildScript ? `npm run ${input.buildScript}` : undefined;
+    const commands = [installCmd, buildCmd].filter((c) => Boolean(c));
+    const blockersBlock = input.blockers.length === 0
+        ? '_None detected._'
+        : input.blockers
+            .map((f) => `- \`${f.path}\` — no reproducible-build banner found. Vendor its pre-minification source (e.g. under \`vendor-src/\`), add a build script that reproduces it byte-for-byte, and document the exact command here.`)
+            .join('\n');
+    const reproducibleBlock = input.reproducible.length === 0
+        ? ''
+        : `\n## Vendored bundles with a provenance banner\n\n${input.reproducible
+            .map((f) => `- \`${f.path}\` — declares its own version/commit/build command in a header comment.`)
+            .join('\n')}\n`;
+    return `# Source code for AMO review
+
+Upload the sibling \`.zip\` in AMO's "Source code" step, and paste the section
+below into the reviewer notes (or attach this file directly if AMO's form
+allows a file upload for build instructions).
+
+## Build instructions for reviewers
+
+Requirements:
+- Node.js ${input.nodeVersion}${input.npmVersion ? `, npm ${input.npmVersion}` : ''}${input.lockfile ? ` (${input.lockfile.manager}, lockfile included)` : ' (no lockfile found — pin your own versions here)'}
+
+\`\`\`sh
+${commands.length > 0 ? commands.join('\n') : '# No install/build script detected in package.json — fill in the exact commands here.'}
+\`\`\`
+
+${input.commit ? `Archived from commit \`${input.commit}\`.` : 'Archived from an uncommitted directory (not a git repository, or no commits yet) — there is no commit to diff against.'}
+
+## Files that need a source-code submission
+
+${blockersBlock}
+${reproducibleBlock}
+## web-ext lint
+
+Run \`npx web-ext@10 lint --source-dir <built-output>\` and confirm 0 errors
+before submitting — see
+https://extensionworkshop.com/documentation/develop/web-ext-command-reference/
+`;
+}
+export async function runAmoSource(opts) {
+    const projectDir = path.resolve(opts.projectDir);
+    if (!fs.existsSync(projectDir) || !fs.statSync(projectDir).isDirectory()) {
+        throw new Error(`Project directory not found: ${projectDir}`);
+    }
+    const git = isGitClean(projectDir);
+    if (git.isRepo && !git.clean) {
+        throw new Error(`${projectDir} has uncommitted changes. Commit first — the source archive should match a commit a reviewer can also check out.`);
+    }
+    const zipPath = path.resolve(opts.outputPath ?? 'amo-source.zip');
+    const buildMdPath = path.join(path.dirname(zipPath), 'BUILD.md');
+    const { zip, textFiles, fileCount } = walkProject(projectDir, zipPath);
+    const minified = detectMinifiedFiles(textFiles);
+    const blockers = minified.filter((f) => !f.hasProvenanceBanner);
+    const reproducible = minified.filter((f) => f.hasProvenanceBanner);
+    const pkg = readPackageJson(projectDir);
+    const buildMd = renderBuildMd({
+        projectDir,
+        commit: git.commit,
+        nodeVersion: pkg.engines?.node ?? process.version,
+        npmVersion: pkg.engines?.npm ?? npmVersion(),
+        lockfile: detectLockfile(projectDir),
+        buildScript: pkg.scripts?.build ? 'build' : undefined,
+        blockers,
+        reproducible,
+    });
+    fs.mkdirSync(path.dirname(zipPath), { recursive: true });
+    const buf = await zip.generateAsync({ type: 'nodebuffer', compression: 'DEFLATE' });
+    fs.writeFileSync(zipPath, buf);
+    fs.writeFileSync(buildMdPath, buildMd, 'utf8');
+    return { zipPath, buildMdPath, fileCount, blockers, reproducible };
+}
+//# sourceMappingURL=amo-source.js.map

package/dist/amo-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amo-source.js","sourceRoot":"","sources":["../src/amo-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,mBAAmB,EAA4B,MAAM,wBAAwB,CAAA;AAGtF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACjC,cAAc;IACd,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,OAAO;IACP,OAAO;CACP,CAAC,CAAA;AACF,MAAM,WAAW,GAAG,iBAAiB,CAAA;AACrC,yEAAyE;AACzE,wEAAwE;AACxE,6EAA6E;AAC7E,2EAA2E;AAC3E,yEAAyE;AACzE,qCAAqC;AACrC,MAAM,uBAAuB,GAAG,gBAAgB,CAAA;AAEhD;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,UAAkB;IAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACJ,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;IACnE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC5E,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC/C,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AACD,MAAM,YAAY,GAAG,kBAAkB,CAAA;AACvC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AACvC,MAAM,SAAS,GAAiE;IAC/E,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE;IACnE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,0BAA0B,EAAE;IAC9E,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,gCAAgC,EAAE;CACzF,CAAA;AAsBD,SAAS,UAAU,CAAC,GAAW;IAC9B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAc,EAAU,EAAE,CACzC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;SACrE,QAAQ,EAAE;SACV,IAAI,EAAE,CAAA;IACT,IAAI,CAAC;QACJ,GAAG,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACtC,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IACtD,IAAI,MAA0B,CAAA;IAC9B,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,mEAAmE;IACpE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IAC1C,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAA;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAA;IACV,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACzC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,UAAU;IAClB,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;aAChF,QAAQ,EAAE;aACV,IAAI,EAAE,CAAA;IACT,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAQD,SAAS,WAAW,CAAC,UAAkB,EAAE,aAAqB;IAC7D,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE,CAAA;IACvB,MAAM,SAAS,GAAY,IAAI,GAAG,EAAE,CAAA;IACpC,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,iBAAiB,EAAE,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAEzF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QAClC,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;YACrC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;gBAAE,SAAQ,CAAC,sBAAsB;YACvF,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAQ;gBACvC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACV,SAAQ;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;gBAAE,SAAQ;YAC3B,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACxC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;gBAAE,SAAQ;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACrE,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;YACjC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAClB,SAAS,EAAE,CAAA;YACX,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACJ,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACR,uFAAuF;gBACxF,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC,CAAA;IACD,IAAI,CAAC,UAAU,CAAC,CAAA;IAChB,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AACrC,CAAC;AAED,SAAS,aAAa,CAAC,KAStB;IACA,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,IAAI,aAAa,CAAA;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/E,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IAE9E,MAAM,aAAa,GAClB,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,KAAK,CAAC,QAAQ;aACb,GAAG,CACH,CAAC,CAAC,EAAE,EAAE,CACL,OAAO,CAAC,CAAC,IAAI,qMAAqM,CACnN;aACA,IAAI,CAAC,IAAI,CAAC,CAAA;IAEf,MAAM,iBAAiB,GACtB,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAC9B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,qDAAqD,KAAK,CAAC,YAAY;aACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,yEAAyE,CAAC;aAClG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;IAEnB,OAAO;;;;;;;;;YASI,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,mDAAmD;;;EAG5M,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uFAAuF;;;EAGnI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,wHAAwH;;;;EAIrL,aAAa;EACb,iBAAiB;;;;;;CAMlB,CAAA;AACD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAsB;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IAClC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACd,GAAG,UAAU,kHAAkH,CAC/H,CAAA;IACF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAA;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAA;IAEhE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACtE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;IAC/D,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;IAElE,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG,aAAa,CAAC;QAC7B,UAAU;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,OAAO;QACjD,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE;QAC5C,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC;QACpC,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACrD,QAAQ;QACR,YAAY;KACZ,CAAC,CAAA;IAEF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAA;IACnF,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC9B,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAE9C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;AACnE,CAAC"}

package/dist/amowebstore-md.d.ts

@@ -0,0 +1,38 @@
+/**
+ * AMO.md — Mozilla Add-ons (addons.mozilla.org) listing draft
+ * (`extenshi generate-listing --store firefox`).
+ *
+ * Shares the Name / Short description / Description / Single purpose
+ * headings with CHROMEWEBSTORE.md on purpose — `review-risk --listing AMO.md`
+ * parses it through the same `listingDraftFromChromeWebStoreMd` heading
+ * lookup.
+ *
+ * Sources:
+ * - gecko.id / strict_min_version: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/manifest.json/browser_specific_settings
+ * - data_collection_permissions (mandatory for new submissions since 2025-11-03):
+ *   https://extensionworkshop.com/documentation/develop/firefox-builtin-data-consent/
+ * - source-code submission for minified/bundled files:
+ *   https://extensionworkshop.com/documentation/publish/source-code-submission/
+ * - listing best practices (summary ≤250 chars, categories, support):
+ *   https://extensionworkshop.com/documentation/develop/create-an-appealing-listing/
+ */
+import type { MinifiedFileFinding } from './amo-source-detect.js';
+import type { Listing } from './listing.js';
+export declare const AMO_FILENAME = "AMO.md";
+export interface AmoGeckoInfo {
+    id?: string;
+    isPlaceholder?: boolean;
+    strictMinVersion?: string;
+    dataCollectionRequired?: string[];
+}
+export declare function renderAmoMd(input: {
+    listing: Listing | null;
+    justifications?: readonly {
+        permission: string;
+        prompt: string;
+    }[];
+    singlePurpose?: string;
+    gecko?: AmoGeckoInfo;
+    minifiedFiles?: readonly MinifiedFileFinding[];
+}): string;
+//# sourceMappingURL=amowebstore-md.d.ts.map

package/dist/amowebstore-md.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amowebstore-md.d.ts","sourceRoot":"","sources":["../src/amowebstore-md.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAE3C,eAAO,MAAM,YAAY,WAAW,CAAA;AAEpC,MAAM,WAAW,YAAY;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;CACjC;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE;IAClC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,cAAc,CAAC,EAAE,SAAS;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAClE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB,aAAa,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAA;CAC9C,GAAG,MAAM,CA4GT"}

package/dist/amowebstore-md.js

@@ -0,0 +1,118 @@
+/**
+ * AMO.md — Mozilla Add-ons (addons.mozilla.org) listing draft
+ * (`extenshi generate-listing --store firefox`).
+ *
+ * Shares the Name / Short description / Description / Single purpose
+ * headings with CHROMEWEBSTORE.md on purpose — `review-risk --listing AMO.md`
+ * parses it through the same `listingDraftFromChromeWebStoreMd` heading
+ * lookup.
+ *
+ * Sources:
+ * - gecko.id / strict_min_version: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/manifest.json/browser_specific_settings
+ * - data_collection_permissions (mandatory for new submissions since 2025-11-03):
+ *   https://extensionworkshop.com/documentation/develop/firefox-builtin-data-consent/
+ * - source-code submission for minified/bundled files:
+ *   https://extensionworkshop.com/documentation/publish/source-code-submission/
+ * - listing best practices (summary ≤250 chars, categories, support):
+ *   https://extensionworkshop.com/documentation/develop/create-an-appealing-listing/
+ */
+export const AMO_FILENAME = 'AMO.md';
+export function renderAmoMd(input) {
+    const loc = input.listing?.locales.find((l) => l.locale === input.listing?.defaultLocale) ?? input.listing?.locales[0];
+    const justifications = input.justifications ?? [];
+    const justBlock = justifications.length === 0
+        ? '_No sensitive permissions need a reviewer justification yet._'
+        : justifications.map((j) => `### ${j.permission}\n\n${j.prompt}`).join('\n\n');
+    const gecko = input.gecko ?? {};
+    const geckoIdLine = !gecko.id
+        ? '**NOT SET** — required to sign a Manifest V3 add-on. Add `browser_specific_settings.gecko.id` (e.g. `@your-extension-name` or a GUID); once published, treat it as permanent.'
+        : gecko.isPlaceholder
+            ? `\`${gecko.id}\` — **this looks like a template placeholder.** Replace it before the first AMO upload.`
+            : `\`${gecko.id}\``;
+    const strictMinLine = gecko.strictMinVersion
+        ? `\`${gecko.strictMinVersion}\``
+        : 'not set — recommended so `web-ext lint` can flag manifest keys/APIs unavailable on older Firefox.';
+    const dataCollectionLine = gecko.dataCollectionRequired && gecko.dataCollectionRequired.length > 0
+        ? `\`${JSON.stringify(gecko.dataCollectionRequired)}\``
+        : '**NOT SET** — required for new add-ons submitted to AMO since 2025-11-03. Set `data_collection_permissions.required` to `["none"]` if nothing is collected, or list the categories collected.';
+    const minified = input.minifiedFiles ?? [];
+    const sourceBlock = minified.length === 0
+        ? '_No minified/bundled files detected (filename or size/pattern heuristic) — re-check after adding a bundler._'
+        : minified
+            .map((f) => f.hasProvenanceBanner
+            ? `- \`${f.path}\` — carries a version/commit/build-command banner. Still upload the source archive; the banner tells the reviewer how to rebuild it, it is not a substitute.`
+            : `- \`${f.path}\` — **BLOCKER**: no reproducible-build banner found. Vendor the pre-minification source (e.g. under \`vendor-src/\`) and document the exact build command, or run \`extenshi amo-source\` to generate the archive + BUILD.md.`)
+            .join('\n');
+    return `# AMO.md
+
+Mozilla Add-ons (AMO) listing draft. This is the same listing draft
+\`review-risk --listing\` already accepts as JSON or CHROMEWEBSTORE.md — run:
+
+\`npx @extenshi/cli@latest review-risk --listing AMO.md\`
+
+Do not paste this into the AMO submission form automatically. Fill it by hand.
+Submit at https://addons.mozilla.org/developers/ → Submit a New Add-on.
+
+## Name
+
+${loc?.name ?? ''}
+
+_AMO has no hard character cap on the name, but keep it short — long names truncate in search results._
+
+## Short description
+
+${loc?.shortDescription ?? ''}
+
+_This is AMO's "summary" field — hard-capped at 250 characters._
+
+## Description
+
+${loc?.description ?? ''}
+
+## Add-on ID (browser_specific_settings.gecko.id)
+
+${geckoIdLine}
+
+## Minimum Firefox version (strict_min_version)
+
+${strictMinLine}
+
+## Data collection permissions
+
+${dataCollectionLine}
+
+## Source code
+
+${sourceBlock}
+
+## License
+
+_e.g. MIT, GPL-3.0 — AMO publishes the chosen license alongside the add-on._
+
+## Categories
+
+_Up to 2, e.g. "Appearance", "Other"._
+
+## Support
+
+- Support email: _required or strongly recommended — users hit a dead end without one_
+- Support website / homepage: _optional_
+
+## Single purpose
+
+${input.singlePurpose ?? loc?.shortDescription ?? loc?.name ?? ''}
+
+## Permission justifications
+
+${justBlock}
+
+## Notes to reviewer
+
+_Test accounts, steps to reach gated/paid features, and a plain-language pointer to the "Source code" section above if any file needs it._
+
+## Version history
+
+_Record each upload: version, what changed, why._
+`;
+}
+//# sourceMappingURL=amowebstore-md.js.map

package/dist/amowebstore-md.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amowebstore-md.js","sourceRoot":"","sources":["../src/amowebstore-md.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAA;AASpC,MAAM,UAAU,WAAW,CAAC,KAM3B;IACA,MAAM,GAAG,GACR,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IAC3G,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAA;IACjD,MAAM,SAAS,GACd,cAAc,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,+DAA+D;QACjE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAEhF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAA;IAC/B,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,EAAE;QAC5B,CAAC,CAAC,+KAA+K;QACjL,CAAC,CAAC,KAAK,CAAC,aAAa;YACpB,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,0FAA0F;YACzG,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,IAAI,CAAA;IAErB,MAAM,aAAa,GAAG,KAAK,CAAC,gBAAgB;QAC3C,CAAC,CAAC,KAAK,KAAK,CAAC,gBAAgB,IAAI;QACjC,CAAC,CAAC,mGAAmG,CAAA;IAEtG,MAAM,kBAAkB,GACvB,KAAK,CAAC,sBAAsB,IAAI,KAAK,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC;QACtE,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI;QACvD,CAAC,CAAC,+LAA+L,CAAA;IAEnM,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAA;IAC1C,MAAM,WAAW,GAChB,QAAQ,CAAC,MAAM,KAAK,CAAC;QACpB,CAAC,CAAC,8GAA8G;QAChH,CAAC,CAAC,QAAQ;aACP,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACV,CAAC,CAAC,mBAAmB;YACpB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,+JAA+J;YAC9K,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,gOAAgO,CAChP;aACA,IAAI,CAAC,IAAI,CAAC,CAAA;IAEf,OAAO;;;;;;;;;;;;EAYN,GAAG,EAAE,IAAI,IAAI,EAAE;;;;;;EAMf,GAAG,EAAE,gBAAgB,IAAI,EAAE;;;;;;EAM3B,GAAG,EAAE,WAAW,IAAI,EAAE;;;;EAItB,WAAW;;;;EAIX,aAAa;;;;EAIb,kBAAkB;;;;EAIlB,WAAW;;;;;;;;;;;;;;;;;EAiBX,KAAK,CAAC,aAAa,IAAI,GAAG,EAAE,gBAAgB,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE;;;;EAI/D,SAAS;;;;;;;;;CASV,CAAA;AACD,CAAC"}

package/dist/auto-evidence.d.ts

@@ -0,0 +1,100 @@
+/**
+ * `--evidence` on `scan`, `review-risk`, `generate-listing` and `test smoke`:
+ * turn the result the command just computed into the readiness evidence kind it
+ * attests, with the digests `releaseReadiness` matches against, and record it for
+ * the project bound in this directory — through the same client path as
+ * `extenshi evidence push` (project.ts → recordAgentEvidence).
+ *
+ * The digests are the contract (shared-types/project-workspace.ts
+ * `releaseReadiness`):
+ *
+ *   kind          artifactDigest     inputDigest                      locale
+ *   scan          sha256(zip)        sha256(zip)                      —
+ *   installed     sha256(zip)        sha256(zip)                      —
+ *   permissions   sha256(zip)        hashMetadata(packaged manifest)  —
+ *   listing       sha256(zip)        sha256(listing file bytes)       each locale
+ *
+ * `hashMetadata(manifest)` is what `release prepare` stores as manifestDigest,
+ * and `sha256(listing file)` is what `release prepare --listing <file>` stores as
+ * listingDigest — so evidence recorded here is current exactly when the release
+ * binds the same package and the same listing file.
+ *
+ * Status rules (documented in the CLI docs):
+ *   scan         failed on a REJECTION_LIKELY store-compliance finding or any
+ *                CRITICAL security finding — the report's own "fail" verdict.
+ *   permissions  failed on a REJECTED review-risk finding outside the listing rules.
+ *   listing      failed only on a REJECTED listing-rule finding for that locale —
+ *                exactly what would make `review-risk` exit non-zero. Listing rules
+ *                are ADVISORY by roadmap policy (iteration 2 T9: the v3 dictionary
+ *                measured a 78.7% false-positive rate) and never fail review-risk,
+ *                so failing readiness on them would block releases on false
+ *                positives. An advisory finding leaves the check `passed`.
+ *   installed    the smoke result.
+ *
+ * `permissions` and `listing` carry a `summary` (finding count, blocking count,
+ * distinct check ids) so the advisories behind a `passed` stay visible to
+ * whoever reads the record. It is sent only to a server that advertises it
+ * (project.ts → recordAgentEvidence).
+ */
+import { type Listing } from './listing.js';
+import type { EvidenceRecord } from './project.js';
+import { type ReviewFinding } from './review-checks.js';
+import type { SmokeResult } from './smoke.js';
+export type EvidenceBrowser = 'chrome' | 'edge' | 'firefox';
+export declare const sha256Hex: (bytes: Uint8Array | string) => string;
+/**
+ * Which store(s) the evidence is for: the explicit list, else the browsers
+ * `extenshi package` recorded for these exact bytes (Chrome and Edge built from
+ * one directory are the same zip), else refuse — mislabelled evidence would
+ * satisfy the wrong release.
+ */
+export declare function evidenceBrowsers(artifactPath: string, artifactDigest: string, explicit?: string): EvidenceBrowser[];
+export declare function scanEvidence(input: {
+    artifactDigest: string;
+    browsers: EvidenceBrowser[];
+    body: Record<string, unknown>;
+}): EvidenceRecord[];
+export declare function smokeEvidence(input: {
+    browser: EvidenceBrowser;
+    result: SmokeResult;
+}): EvidenceRecord[];
+type EvidenceSummary = NonNullable<EvidenceRecord['summary']>;
+/** Counts and distinct check ids — never finding text, which can quote listing copy or code. */
+export declare function findingSummary(findings: readonly ReviewFinding[]): EvidenceSummary;
+export declare function permissionsEvidence(input: {
+    artifactDigest: string;
+    manifest: unknown;
+    browsers: EvidenceBrowser[];
+    findings: readonly ReviewFinding[];
+    listingCheckIds: ReadonlySet<string>;
+}): EvidenceRecord[];
+/** Listing findings carry `[locale] field…` evidence; one without a locale applies to every locale. */
+export declare function findingLocale(finding: ReviewFinding): string | null;
+export declare function listingEvidence(input: {
+    artifactDigest: string;
+    listingBytes: Uint8Array | string;
+    listing: Listing | null;
+    browsers: EvidenceBrowser[];
+    /** Output of runListingOnlyChecks for the same listing. */
+    listingFindings: readonly ReviewFinding[];
+}): EvidenceRecord[];
+/**
+ * `generate-listing --evidence`: read the draft the command just wrote
+ * (CHROMEWEBSTORE.md, EDGE.md or AMO.md — one parser, keyed on headings) back
+ * over the package, run the listing rules on it and bind the evidence to that
+ * file's bytes. `browsers` is the store the draft is for.
+ */
+export declare function generatedListingEvidence(input: {
+    artifactBytes: Buffer;
+    artifactDigest: string;
+    draftPath: string;
+    browsers: EvidenceBrowser[];
+}): Promise<EvidenceRecord[]>;
+/**
+ * Record the batch for the bound project and say so on stderr (stdout stays the
+ * command's own output, e.g. --json). A queued (offline) record sets exit code 1
+ * like `evidence push`; any other failure throws — the caller asked for evidence.
+ */
+export declare function recordAutoEvidence(records: EvidenceRecord[], cwd?: string): Promise<void>;
+export {};
+//# sourceMappingURL=auto-evidence.d.ts.map