@extenshi/cli 0.21.0 → 0.22.0

package/dist/auto-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-evidence.d.ts","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAMH,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAIlD,OAAO,EAAE,KAAK,aAAa,EAAwB,MAAM,oBAAoB,CAAA;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;AAG3D,eAAO,MAAM,SAAS,GAAI,OAAO,UAAU,GAAG,MAAM,WAAqD,CAAA;AAEzG;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC/B,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,QAAQ,CAAC,EAAE,MAAM,GACf,eAAe,EAAE,CAmBnB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE;IACnC,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B,GAAG,cAAc,EAAE,CAWnB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG,cAAc,EAAE,CAUxG;AAQD,KAAK,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;AAE7D,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,CAMlF;AAKD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;IAClC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CACpC,GAAG,cAAc,EAAE,CAYnB;AAED,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAEnE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACtC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,UAAU,GAAG,MAAM,CAAA;IACjC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,2DAA2D;IAC3D,eAAe,EAAE,SAAS,aAAa,EAAE,CAAA;CACzC,GAAG,cAAc,EAAE,CAwBnB;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACrD,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC3B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAU5B;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBtG"}

package/dist/auto-evidence.js

@@ -0,0 +1,197 @@
+/**
+ * `--evidence` on `scan`, `review-risk`, `generate-listing` and `test smoke`:
+ * turn the result the command just computed into the readiness evidence kind it
+ * attests, with the digests `releaseReadiness` matches against, and record it for
+ * the project bound in this directory — through the same client path as
+ * `extenshi evidence push` (project.ts → recordAgentEvidence).
+ *
+ * The digests are the contract (shared-types/project-workspace.ts
+ * `releaseReadiness`):
+ *
+ *   kind          artifactDigest     inputDigest                      locale
+ *   scan          sha256(zip)        sha256(zip)                      —
+ *   installed     sha256(zip)        sha256(zip)                      —
+ *   permissions   sha256(zip)        hashMetadata(packaged manifest)  —
+ *   listing       sha256(zip)        sha256(listing file bytes)       each locale
+ *
+ * `hashMetadata(manifest)` is what `release prepare` stores as manifestDigest,
+ * and `sha256(listing file)` is what `release prepare --listing <file>` stores as
+ * listingDigest — so evidence recorded here is current exactly when the release
+ * binds the same package and the same listing file.
+ *
+ * Status rules (documented in the CLI docs):
+ *   scan         failed on a REJECTION_LIKELY store-compliance finding or any
+ *                CRITICAL security finding — the report's own "fail" verdict.
+ *   permissions  failed on a REJECTED review-risk finding outside the listing rules.
+ *   listing      failed only on a REJECTED listing-rule finding for that locale —
+ *                exactly what would make `review-risk` exit non-zero. Listing rules
+ *                are ADVISORY by roadmap policy (iteration 2 T9: the v3 dictionary
+ *                measured a 78.7% false-positive rate) and never fail review-risk,
+ *                so failing readiness on them would block releases on false
+ *                positives. An advisory finding leaves the check `passed`.
+ *   installed    the smoke result.
+ *
+ * `permissions` and `listing` carry a `summary` (finding count, blocking count,
+ * distinct check ids) so the advisories behind a `passed` stay visible to
+ * whoever reads the record. It is sent only to a server that advertises it
+ * (project.ts → recordAgentEvidence).
+ */
+import { createHash } from 'node:crypto';
+import fs from 'node:fs';
+import { hashMetadata } from '@extenshi/contracts';
+import { InvalidInputError } from './expected-error.js';
+import { assembleListing } from './listing.js';
+import { packagedBrowsersFor } from './package.js';
+import { summarizeCompliance, summarizeReport } from './render.js';
+import { computeVerdict } from './report.js';
+import { loadArtifact } from './review-archive.js';
+import { runListingOnlyChecks } from './review-checks.js';
+const BROWSERS = ['chrome', 'edge', 'firefox'];
+export const sha256Hex = (bytes) => createHash('sha256').update(bytes).digest('hex');
+/**
+ * Which store(s) the evidence is for: the explicit list, else the browsers
+ * `extenshi package` recorded for these exact bytes (Chrome and Edge built from
+ * one directory are the same zip), else refuse — mislabelled evidence would
+ * satisfy the wrong release.
+ */
+export function evidenceBrowsers(artifactPath, artifactDigest, explicit) {
+    if (explicit) {
+        const list = explicit
+            .split(',')
+            .map((s) => s.trim().toLowerCase())
+            .filter(Boolean);
+        const bad = list.filter((s) => !BROWSERS.includes(s));
+        if (bad.length || !list.length)
+            throw new InvalidInputError(`--evidence-browser takes a comma-separated list of: ${BROWSERS.join(', ')}`);
+        return [...new Set(list)];
+    }
+    const packaged = packagedBrowsersFor(artifactPath, artifactDigest);
+    if (packaged.length)
+        return packaged;
+    throw new InvalidInputError('--evidence needs to know which store this package is for. Pass --evidence-browser chrome|edge|firefox, ' +
+        'or run it on a zip from `extenshi package`, whose extenshi-packages.json records the browser.');
+}
+export function scanEvidence(input) {
+    const verdict = computeVerdict(summarizeCompliance(input.body), summarizeReport(input.body));
+    const critical = summarizeReport(input.body).findings.some((f) => f.severity === 'CRITICAL');
+    const status = verdict.level === 'fail' || critical ? 'failed' : 'passed';
+    return input.browsers.map((browser) => ({
+        kind: 'scan',
+        browser,
+        artifactDigest: input.artifactDigest,
+        inputDigest: input.artifactDigest,
+        status,
+    }));
+}
+export function smokeEvidence(input) {
+    return [
+        {
+            kind: 'installed',
+            browser: input.browser,
+            artifactDigest: input.result.sha256,
+            inputDigest: input.result.sha256,
+            status: input.result.status,
+        },
+    ];
+}
+/**
+ * Mirrors EVIDENCE_SUMMARY_MAX_IDS in the contract. Not imported: an installed
+ * @extenshi/contracts that predates the summary has no such export, and a
+ * missing named ESM import would stop the whole CLI from loading.
+ */
+const SUMMARY_MAX_IDS = 50;
+/** Counts and distinct check ids — never finding text, which can quote listing copy or code. */
+export function findingSummary(findings) {
+    return {
+        findingCount: findings.length,
+        blockingCount: findings.filter(isBlocking).length,
+        findingIds: [...new Set(findings.map((f) => f.check))].sort().slice(0, SUMMARY_MAX_IDS),
+    };
+}
+/** What makes `review-risk` exit non-zero (summarize → `blocking`). */
+const isBlocking = (f) => f.verdict === 'REJECTED';
+export function permissionsEvidence(input) {
+    const own = input.findings.filter((f) => !input.listingCheckIds.has(f.check));
+    const summary = findingSummary(own);
+    const inputDigest = hashMetadata(input.manifest);
+    return input.browsers.map((browser) => ({
+        kind: 'permissions',
+        browser,
+        artifactDigest: input.artifactDigest,
+        inputDigest,
+        status: summary.blockingCount ? 'failed' : 'passed',
+        summary,
+    }));
+}
+/** Listing findings carry `[locale] field…` evidence; one without a locale applies to every locale. */
+export function findingLocale(finding) {
+    return /^\[([^\]\s]+)\]/.exec(finding.evidence ?? '')?.[1] ?? null;
+}
+export function listingEvidence(input) {
+    const locales = input.listing?.locales.map((l) => l.locale) ?? [];
+    if (!locales.length)
+        throw new InvalidInputError('The listing has no locale with text, so there is nothing to attest.');
+    const inputDigest = sha256Hex(input.listingBytes);
+    return input.browsers.flatMap((browser) => locales.map((locale) => {
+        const hits = input.listingFindings.filter((f) => {
+            const at = findingLocale(f);
+            return at === null || at === locale;
+        });
+        const summary = findingSummary(hits);
+        return {
+            kind: 'listing',
+            browser,
+            locale,
+            artifactDigest: input.artifactDigest,
+            inputDigest,
+            // Advisory findings are carried in the summary, never in the status.
+            status: summary.blockingCount ? 'failed' : 'passed',
+            summary,
+        };
+    }));
+}
+/**
+ * `generate-listing --evidence`: read the draft the command just wrote
+ * (CHROMEWEBSTORE.md, EDGE.md or AMO.md — one parser, keyed on headings) back
+ * over the package, run the listing rules on it and bind the evidence to that
+ * file's bytes. `browsers` is the store the draft is for.
+ */
+export async function generatedListingEvidence(input) {
+    const { manifest, files } = await loadArtifact(input.artifactBytes);
+    const listing = assembleListing(manifest, files, input.draftPath);
+    return listingEvidence({
+        artifactDigest: input.artifactDigest,
+        listingBytes: fs.readFileSync(input.draftPath),
+        listing,
+        browsers: input.browsers,
+        listingFindings: runListingOnlyChecks(listing),
+    });
+}
+/**
+ * Record the batch for the bound project and say so on stderr (stdout stays the
+ * command's own output, e.g. --json). A queued (offline) record sets exit code 1
+ * like `evidence push`; any other failure throws — the caller asked for evidence.
+ */
+export async function recordAutoEvidence(records, cwd = process.cwd()) {
+    if (!records.length)
+        return;
+    const { recordAgentEvidence } = await import('./project.js');
+    const result = await recordAgentEvidence(cwd, records);
+    const summary = records
+        .map((r) => {
+        const advisories = r.summary ? r.summary.findingCount - r.summary.blockingCount : 0;
+        const note = advisories ? ` (${advisories} advisory: ${r.summary?.findingIds.join(' ')})` : '';
+        return `${r.kind}${r.locale ? `:${r.locale}` : ''}/${r.browser}=${r.status}${note}`;
+    })
+        .join(', ');
+    if (!result.summaries && records.some((r) => r.summary))
+        process.stderr.write('note: this server does not store evidence summaries yet — the advisory findings above are shown here only\n');
+    if (result.status === 'pending-sync') {
+        process.stderr.write(`evidence queued (offline) for project ${result.projectId}: ${summary}. Run extenshi project sync.\n`);
+        process.exitCode = 1;
+    }
+    else {
+        process.stderr.write(`evidence recorded for project ${result.projectId}: ${summary}\n`);
+    }
+}
+//# sourceMappingURL=auto-evidence.js.map

package/dist/auto-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-evidence.js","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAgB,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAsB,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAI7E,MAAM,QAAQ,GAA+B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;AAE1E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEzG;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC/B,YAAoB,EACpB,cAAsB,EACtB,QAAiB;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ;aACnB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAClC,MAAM,CAAC,OAAO,CAAC,CAAA;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,QAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7B,MAAM,IAAI,iBAAiB,CAC1B,uDAAuD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAA;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAsB,CAAA;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IAClE,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAA;IACpC,MAAM,IAAI,iBAAiB,CAC1B,yGAAyG;QACxG,+FAA+F,CAChG,CAAA;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAI5B;IACA,MAAM,OAAO,GAAG,cAAc,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5F,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAA;IAC5F,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;IACzE,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,cAAc;QACjC,MAAM;KACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAwD;IACrF,OAAO;QACN;YACC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YACnC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC3B;KACD,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,eAAe,GAAG,EAAE,CAAA;AAG1B,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAAC,QAAkC;IAChE,OAAO;QACN,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM;QACjD,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;KACvF,CAAA;AACF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAA;AAEjE,MAAM,UAAU,mBAAmB,CAAC,KAMnC;IACA,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,aAAa;QACnB,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW;QACX,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACnD,OAAO;KACP,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,OAAsB;IACnD,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAO/B;IACA,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACjE,IAAI,CAAC,OAAO,CAAC,MAAM;QAClB,MAAM,IAAI,iBAAiB,CAAC,qEAAqE,CAAC,CAAA;IACnG,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACjD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC3B,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,MAAM,CAAA;QACpC,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACpC,OAAO;YACN,IAAI,EAAE,SAAS;YACf,OAAO;YACP,MAAM;YACN,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW;YACX,qEAAqE;YACrE,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,QAAkB;YACzE,OAAO;SACP,CAAA;IACF,CAAC,CAAC,CACF,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAK9C;IACA,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IACjE,OAAO,eAAe,CAAC;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9C,OAAO;QACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC;KAC9C,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACtF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAM;IAC3B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,OAAO;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,cAAc,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9F,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,EAAE,CAAA;IACpF,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,6GAA6G,CAC7G,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,yCAAyC,MAAM,CAAC,SAAS,KAAK,OAAO,gCAAgC,CACrG,CAAA;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACrB,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAA;IACxF,CAAC;AACF,CAAC"}

package/dist/cli.js

@@ -27,14 +27,19 @@
  * re-reads the config on the first event of the run, so an answer given here is
  * already in force for the very run that asked it.
  */
+import { existsSync, statSync } from 'node:fs';
 import { readFile } from 'node:fs/promises';
 import { createRequire } from 'node:module';
 import os from 'node:os';
+import path from 'node:path';
 import * as readline from 'node:readline/promises';
 import { program } from 'commander';
+import { runAmoSource } from './amo-source.js';
+import { evidenceBrowsers, generatedListingEvidence, listingEvidence, permissionsEvidence, recordAutoEvidence, scanEvidence, sha256Hex, smokeEvidence, } from './auto-evidence.js';
 import { checkAutoUpdate } from './auto-update.js';
 import { CONFIG_PATH, loadConfig, readTelemetryPreference, saveConfig, saveTelemetryPreference, } from './config.js';
-import { isExpectedError } from './expected-error.js';
+import { registerEvidenceIngest } from './evidence-ingest.js';
+import { InvalidInputError, isExpectedError } from './expected-error.js';
 import { runGenerateListing } from './generate-listing.js';
 import { runIconPreview } from './icon.js';
 import { applyLocalization, checkLocalization, prepareLocalization } from './localize.js';
@@ -42,13 +47,20 @@ import { initializeLocalization } from './localize-init.js';
 import { makeLoginBff } from './login-bff.js';
 import { runBrowserLogin } from './login-flow.js';
 import { openBrowser, openLoopback, sleep } from './login-runtime.js';
+import { runMediaUpload } from './media.js';
+import { parsePackageBrowsers, resolvePackagedArtifact, runPackage } from './package.js';
 import { runPageGenerate, runPagePublish, runPageRegister, runPageUnpublish } from './page.js';
 import { registerPayCommands } from './pay.js';
+import { registerPayTestCycle } from './pay-test-cycle.js';
 import { registerProjectCommands } from './project.js';
 import { runPublish } from './publish.js';
+import { runListingOnlyChecks } from './review-checks.js';
 import { runReviewRisk } from './review-risk.js';
 import { parseRefs, parseStore, runRisk } from './risk.js';
 import { runScan } from './scan.js';
+import { runScreenshotsCommand } from './screenshots.js';
+import { ENGINE_BROWSER, parseSmokeEngine, renderSmoke, runSmoke } from './smoke.js';
+import { runStoreAssets } from './store-assets.js';
 import { captureError, captureEvent, classifyError, flagsFromArgv, flushTelemetry, initTelemetry, } from './telemetry.js';
 import { defaultConsentDeps, envAnswerSource, maybeAskForTelemetryConsent } from './telemetry-consent.js';
 const MISSING_KEY_HELP = "Looks like you don't have an Extenshi API key set up yet — let's fix that.\n" +
@@ -102,8 +114,24 @@ async function runCommand(command, action) {
         process.exit(1);
     }
 }
+/**
+ * `--evidence` is checked BEFORE the work it attests: a paid scan that cannot
+ * record its evidence afterwards would spend a credit for nothing.
+ */
+function assertEvidenceBinding() {
+    if (!existsSync(path.join(process.cwd(), '.extenshi/project.json')))
+        throw new InvalidInputError('--evidence records against the project bound in this directory. Run extenshi project bind --project <id> --repo <owner/repo> first.');
+}
+/** Evidence binds to the exact package bytes, so it needs a package file, not an unpacked folder. */
+async function evidenceArtifact(artifact) {
+    if (!existsSync(artifact) || !statSync(artifact).isFile())
+        throw new InvalidInputError('--evidence binds to the exact package: pass the zip (e.g. from extenshi package), not an unpacked folder.');
+    const bytes = await readFile(artifact);
+    return { bytes, digest: sha256Hex(bytes) };
+}
 registerProjectCommands(program);
-registerPayCommands(program);
+registerPayTestCycle(registerPayCommands(program));
+registerEvidenceIngest(program, runCommand);
 program
     .name('extenshi')
     .description('Pre-publish security scanner for browser extensions')
@@ -125,12 +153,21 @@ program
     .option('--listing <file>', 'JSON file with your store listing text (name / shortDescription / description, optionally per locale). ' +
     'Without it the listing checks still run, but only over the name and short description the package carries — ' +
     'the full description lives in the dashboard, never in the artifact')
+    .option('--evidence', 'Record the result as `scan` release evidence for the project bound here (extenshi project bind), bound to this exact package')
+    .option('--evidence-browser <list>', 'Store(s) the evidence is for: chrome,edge,firefox (default: read from the extenshi-packages.json next to the zip)')
     .action(async (artifact, opts) => {
     await runCommand('scan', async () => {
         const config = await loadConfig(opts.apiUrl);
         if (!config.apiKey) {
             throw new Error(MISSING_KEY_HELP);
         }
+        // Everything --evidence needs is settled before a credit is spent.
+        let evidence;
+        if (opts.evidence) {
+            assertEvidenceBinding();
+            const { digest } = await evidenceArtifact(artifact);
+            evidence = { digest, browsers: evidenceBrowsers(artifact, digest, opts.evidenceBrowser) };
+        }
         // Auto-update check (fail-soft — never blocks scan)
         await checkAutoUpdate();
         let reportFormat;
@@ -161,7 +198,7 @@ program
         // explicitly disabled (--no-open), and not in CI (no browser/display —
         // the file is still written so CI can archive it as an artifact).
         const openReport = format === 'html' && (opts.open ?? true) && !process.env.CI;
-        await runScan({
+        const body = await runScan({
             artifactPath: artifact,
             apiKey: config.apiKey,
             apiUrl: config.apiUrl,
@@ -180,6 +217,8 @@ program
             bffUrl: config.bffUrl,
             listingPath: opts.listing,
         });
+        if (evidence)
+            await recordAutoEvidence(scanEvidence({ artifactDigest: evidence.digest, browsers: evidence.browsers, body }));
     });
 });
 program
@@ -191,6 +230,13 @@ program
     .option('--stores <list>', 'Comma-separated stores: chrome,firefox,edge (default: every store with complete credentials)')
     .option('--firefox-artifact <path>', 'Separate .xpi for Firefox (default: the main artifact)')
     .option('--release-notes <text>', 'Release notes passed to stores that accept them')
+    .option('--listing <file>', 'Firefox: AMO listing (JSON, or the AMO.md `generate-listing --store firefox` writes, placeholders filled); ' +
+    'creates the add-on on first submission or edits its listing')
+    .option('--source <archive>', 'Firefox: reviewer source archive (.zip/.tar.gz) for the new version (needs --listing)')
+    .option('--screenshots <dir>', 'Firefox: AMO previews in file-name order: an image folder or `extenshi screenshots` output (its firefox/<locale>/ set); needs --listing')
+    .option('--allow-new-addon', 'Firefox: allow creating a NEW AMO add-on, whose id is permanent (in a bound project the owner-decided amo.addonId governs this)')
+    .option('--addon-id <id>', 'Firefox: the AMO add-on id ({GUID} or name@domain), stated explicitly; required with --allow-new-addon outside a bound project')
+    .option('--replace-screenshots', 'Firefox: replace the previews of an existing AMO add-on')
     .option('--validate', 'Only validate store credentials, publish nothing')
     .option('--no-wait', 'Edge: return after commit without polling the operation to a terminal status')
     .option('--extension-id <id>', 'Numeric catalog ID — checks publish-beta access against this specific extension')
@@ -227,6 +273,12 @@ program
             bffUrl: config.bffUrl,
             apiKey: config.apiKey,
             extensionId,
+            listingPath: opts.listing,
+            sourcePath: opts.source,
+            screenshotsDir: opts.screenshots,
+            allowNewAddon: opts.allowNewAddon ?? false,
+            addonId: opts.addonId,
+            replaceScreenshots: opts.replaceScreenshots ?? false,
         });
     });
 });
@@ -245,8 +297,20 @@ program
     'The package already supplies the localized name and short description; this adds the full description, ' +
     'which exists only in the developer dashboard.')
     .option('--json', 'Output raw JSON findings')
+    .option('--evidence', 'Record `permissions` evidence (bound to the packaged manifest) and, with --listing, `listing` evidence per locale ' +
+    '(bound to that file — pass the same file to release prepare --listing) for the project bound here')
+    .option('--evidence-browser <list>', 'Store(s) the evidence is for: chrome,edge,firefox (default: --store, else the extenshi-packages.json next to the zip)')
     .action(async (artifact, opts) => {
     await runCommand('review-risk', async () => {
+        let evidence;
+        if (opts.evidence) {
+            assertEvidenceBinding();
+            const { digest } = await evidenceArtifact(artifact);
+            evidence = {
+                digest,
+                browsers: evidenceBrowsers(artifact, digest, opts.evidenceBrowser ?? opts.store),
+            };
+        }
         // Default to CHROME — this tool is Chrome-Web-Store-centric, and pinning
         // the store avoids diffing against another store's snapshot.
         const storeMap = {
@@ -262,7 +326,7 @@ program
         // manifest diff only uses the key if the catalog read path is gated.
         const config = await loadConfig();
         await checkAutoUpdate();
-        await runReviewRisk({
+        const result = await runReviewRisk({
             artifactPath: artifact,
             extensionId: opts.extensionId,
             bffUrl: (opts.catalogUrl ?? 'https://bff.extenshi.io').replace(/\/$/, ''),
@@ -271,6 +335,27 @@ program
             listingPath: opts.listing,
             outputJson: opts.json ?? false,
         });
+        if (evidence) {
+            const listingFindings = runListingOnlyChecks(result.listing);
+            const records = permissionsEvidence({
+                artifactDigest: evidence.digest,
+                manifest: result.manifest,
+                browsers: evidence.browsers,
+                findings: result.summary.findings,
+                listingCheckIds: new Set(listingFindings.map((f) => f.check)),
+            });
+            if (opts.listing)
+                records.push(...listingEvidence({
+                    artifactDigest: evidence.digest,
+                    listingBytes: await readFile(opts.listing),
+                    listing: result.listing,
+                    browsers: evidence.browsers,
+                    listingFindings,
+                }));
+            else
+                process.stderr.write('note: no listing evidence — it binds to a listing file; pass --listing <file> (the one you give release prepare --listing)\n');
+            await recordAutoEvidence(records);
+        }
     });
 });
 const localize = program
@@ -322,21 +407,140 @@ localize
 });
 program
     .command('generate-listing <artifact>')
-    .description('Generate CHROMEWEBSTORE.md from a packaged (.zip/.crx/.xpi) or unpacked extension: ' +
+    .description('Generate a store listing draft from a packaged (.zip/.crx/.xpi) or unpacked extension: ' +
     'listing copy, permission justifications, single purpose and privacy-practices questions. ' +
     'Assembles the existing justification and privacy-disclosure checklists — does not write ' +
-    'anything into Chrome Web Store. The file is the same listing draft `review-risk --listing` accepts.')
-    .option('--output <path>', 'Where to write the markdown (default: CHROMEWEBSTORE.md in the current directory)')
+    'anything into any store dashboard. --store picks CHROMEWEBSTORE.md / EDGE.md / AMO.md ' +
+    '(default chrome); all three are the same listing draft `review-risk --listing` accepts.')
+    .option('--store <store>', 'Which store to draft for: chrome (default), edge, or firefox', 'chrome')
+    .option('--output <path>', 'Where to write the markdown (default: the per-store filename in the current directory)')
     .option('--listing <file>', 'JSON file with your store listing text (name / shortDescription / description). ' +
     'Overlays the package so the generated markdown can include the full dashboard description.')
+    .option('--evidence', 'After writing the file, run the listing rules over it and record `listing` evidence per locale, bound to the ' +
+    'generated file (pass it to release prepare --listing). Needs a packaged zip, not a folder.')
+    .option('--evidence-browser <list>', 'Store(s) the evidence is for: chrome,edge,firefox (default: the --store the draft is written for)')
     .action(async (artifact, opts) => {
     await runCommand('generate-listing', async () => {
+        const store = (opts.store ?? 'chrome').trim().toLowerCase();
+        if (store !== 'chrome' && store !== 'edge' && store !== 'firefox') {
+            throw new Error(`--store must be chrome, edge or firefox (got "${opts.store}")`);
+        }
+        // The draft is one store's listing, so its evidence is that store's by default.
+        let evidence;
+        if (opts.evidence) {
+            assertEvidenceBinding();
+            const { bytes, digest } = await evidenceArtifact(artifact);
+            evidence = {
+                bytes,
+                digest,
+                browsers: evidenceBrowsers(artifact, digest, opts.evidenceBrowser ?? store),
+            };
+        }
         await checkAutoUpdate();
-        await runGenerateListing({
+        const outputPath = await runGenerateListing({
             artifactPath: artifact,
             outputPath: opts.output,
             listingPath: opts.listing,
+            store,
+        });
+        if (evidence)
+            await recordAutoEvidence(await generatedListingEvidence({
+                artifactBytes: evidence.bytes,
+                artifactDigest: evidence.digest,
+                draftPath: outputPath,
+                browsers: evidence.browsers,
+            }));
+    });
+});
+program
+    .command('package [dir]')
+    .description('Build one reproducible store zip per browser from an unpacked build directory: sorted entries, fixed ' +
+    'timestamps, no file modes or extra metadata — the same bytes on every machine and timezone. Prints the ' +
+    'sha256 of each zip and writes extenshi-packages.json, which release prepare, test smoke and evidence ' +
+    'ingest accept directly. Never modifies the source directory. Free, offline.')
+    .option('--browser <list>', 'Comma-separated: chrome,edge,firefox (default: chrome)')
+    .option('--chrome-dir <dir>', 'Build directory for Chrome (overrides [dir])')
+    .option('--edge-dir <dir>', 'Build directory for Edge (overrides [dir])')
+    .option('--firefox-dir <dir>', 'Build directory for Firefox (overrides [dir])')
+    .option('--out <dir>', 'Output directory (default: .extenshi/packages — ignored by the dirty-tree digest release prepare records)')
+    .option('--exclude <patterns...>', 'Leave files out (gitignore-style globs, comma-separated or repeated). Dot-entries and node_modules are always left out.')
+    .option('--gecko-id <id>', 'Firefox: write this add-on ID into the PACKAGED manifest. A missing or placeholder ID is refused otherwise.')
+    .option('--fix-war', 'Replace wildcard web_accessible_resources with the explicit list of matching files, in the packaged copy only')
+    .option('--json', 'Print the packages manifest as JSON')
+    .action(async (dir, opts) => {
+    await runCommand('package', async () => {
+        runPackage({
+            dir,
+            dirs: { chrome: opts.chromeDir, edge: opts.edgeDir, firefox: opts.firefoxDir },
+            browsers: parsePackageBrowsers(opts.browser),
+            outDir: opts.out ?? '.extenshi/packages',
+            exclude: opts.exclude,
+            geckoId: opts.geckoId,
+            fixWar: opts.fixWar ?? false,
+            json: opts.json ?? false,
+            cliVersion: pkg.version,
+        });
+    });
+});
+const test = program.command('test').description('Test packaged extensions in real browsers');
+test
+    .command('smoke <package>')
+    .description('Install the EXACT package (a zip, or extenshi-packages.json + --browser) in a real browser and check that it ' +
+    'loads, its service worker/background starts, the browser reports no manifest errors, and its popup/options/' +
+    'side-panel pages open without console errors. chromium/edge use Playwright (install it in your project: ' +
+    'npm i -D playwright && npx playwright install chromium); firefox needs only a Firefox binary. Exit 1 on failure.')
+    .requiredOption('--browser <browser>', 'chromium (alias chrome) | edge | firefox')
+    .option('--json', 'Print the result as JSON')
+    .option('--timeout <ms>', 'Budget per wait (service worker start, page load)', '15000')
+    .option('--headed', 'Show the browser window')
+    .option('--firefox-bin <path>', 'Firefox binary (default: FIREFOX_BIN, standard install locations, PATH)')
+    .option('--browser-path <path>', 'Chromium/Edge executable instead of the Playwright channel default')
+    .option('--evidence', 'Record the result as `installed` release evidence for the project bound here (extenshi project bind)')
+    .action(async (packagePath, opts) => {
+    await runCommand('test smoke', async () => {
+        const engine = parseSmokeEngine(opts.browser);
+        if (opts.evidence)
+            assertEvidenceBinding();
+        const timeoutMs = Number.parseInt(opts.timeout, 10);
+        if (!Number.isFinite(timeoutMs) || timeoutMs < 1000)
+            throw new InvalidInputError('--timeout must be ≥ 1000 ms');
+        const { artifactPath } = resolvePackagedArtifact(packagePath, ENGINE_BROWSER[engine]);
+        const result = await runSmoke({
+            artifactPath,
+            engine,
+            timeoutMs,
+            headed: opts.headed ?? false,
+            firefoxBinary: opts.firefoxBin,
+            browserPath: opts.browserPath,
         });
+        process.stdout.write(opts.json ? `${JSON.stringify(result, null, 2)}\n` : `${renderSmoke(result)}\n`);
+        if (opts.evidence)
+            await recordAutoEvidence(smokeEvidence({ browser: ENGINE_BROWSER[engine], result }));
+        if (result.status === 'failed')
+            process.exitCode = 1;
+    });
+});
+program
+    .command('amo-source <project-dir>')
+    .description('Produce the AMO source-code archive + BUILD.md reviewer instructions for a Firefox add-on ' +
+    'project directory. Excludes node_modules/dist/.git and dotenv secrets (.env*); includes the ' +
+    'lockfile. Refuses on an uncommitted git working tree (the archive should match a real commit). ' +
+    'Flags vendored minified files with no reproducible-build provenance as blockers. Does not talk ' +
+    'to the AMO API — upload the archive by hand, or via the separate AMO API submission path.')
+    .option('--out <path>', 'Where to write the archive (default: amo-source.zip in the current directory)')
+    .action(async (projectDir, opts) => {
+    await runCommand('amo-source', async () => {
+        await checkAutoUpdate();
+        const result = await runAmoSource({ projectDir, outputPath: opts.out });
+        console.log(`Wrote ${result.zipPath} (${result.fileCount} files)`);
+        console.log(`Wrote ${result.buildMdPath}`);
+        if (result.blockers.length > 0) {
+            console.log(`\n${result.blockers.length} file(s) need a source-code submission before this can go to AMO:`);
+            for (const f of result.blockers)
+                console.log(`  - ${f.path}`);
+            console.log('See BUILD.md for what to do about each one.');
+            process.exitCode = 1;
+        }
     });
 });
 program
@@ -399,6 +603,58 @@ icon
         await runIconPreview(iconPath, opts, pkg.version);
     });
 });
+icon
+    .command('store-assets <source>')
+    .description('Render the store LISTING artwork from one .svg / .png source: Chrome Web Store icon 128 (96 px artwork + ' +
+    '16 px padding), 440×280 promo tile and 1400×560 marquee; Edge Add-ons 300×300 logo and 440×280 / ' +
+    '1400×560 tiles; AMO 128 / 64 / 32 icons. Offline (WebAssembly renderer), no API key.')
+    .option('--store <stores>', 'Comma-separated: chrome, edge, firefox (default: all)')
+    .option('--out <dir>', 'Output directory (default: ./store-assets)')
+    .option('--background <color>', 'Promo tile / marquee background (default: a light tint of the icon colour)')
+    .option('--icon-background <color>', 'Fill behind icons and the Edge logo (default: transparent)')
+    .option('--promo <file>', 'Full-bleed artwork (.svg/.png) for the 440×280 tiles instead of composing the icon')
+    .option('--marquee <file>', 'Full-bleed artwork (.svg/.png) for the 1400×560 tiles instead of composing the icon')
+    .option('--font <files...>', 'Font files for text in SVG sources (system fonts are matched by name otherwise)')
+    .option('--json', 'Print the result as JSON')
+    .action(async (source, opts) => {
+    await runCommand('icon store-assets', async () => {
+        await runStoreAssets(source, opts);
+    });
+});
+program
+    .command('screenshots <extension>')
+    .description('Store screenshots without a human: load an unpacked build (or .zip) in Chromium, run the declarative ' +
+    'scenes in --scenes per locale (the UI language is switched and verified through chrome.i18n), and ' +
+    'write each store size — Chrome/Edge/AMO 1280×800 (or --small) — as <out>/<store>/<locale>/NN-<scene>-WxH.png ' +
+    'plus screenshots.json. Needs Playwright with Chromium in the project (npm i -D playwright && npx playwright ' +
+    'install chromium). Scenes format: https://docs.extenshi.io/developers/cli#extenshi-screenshots')
+    .requiredOption('--scenes <scenes.json>', 'Declarative scenes file')
+    .option('--locales <codes>', 'Comma-separated _locales codes (default: every locale the extension ships)')
+    .option('--store <stores>', 'Comma-separated: chrome, edge, firefox (default: all)')
+    .option('--out <dir>', 'Output directory (default: ./store-screenshots)')
+    .option('--small', "Each store's smaller size: Chrome 640×400, Edge 640×480, AMO 640×400")
+    .option('--headed', 'Show the browser window (debugging scenes)')
+    .option('--json', 'Print the result as JSON')
+    .action(async (extension, opts) => {
+    await runCommand('screenshots', async () => {
+        await runScreenshotsCommand(extension, opts);
+    });
+});
+program
+    .command('media')
+    .description("The project's PUBLIC media store (logo, screenshots) used by hosted pages")
+    .command('upload <files...>')
+    .description("Upload PNG/JPEG/WebP images (≤2 MB each; .svg is rasterized to PNG locally) to the project's public media " +
+    'store and print their stable URLs — the same store Dojo uploads use, accepted by `page publish` as ' +
+    'screenshots[].url / logoUrl. The server strips metadata and enforces a per-project quota. Requires an ' +
+    'API key (extenshi login) with hosted.write.')
+    .requiredOption('--project <id>', 'Dojo project ID (UUID)')
+    .option('--svg-width <px>', 'Width to rasterize .svg files at (default 1024)')
+    .action(async (files, opts) => {
+    await runCommand('media upload', async () => {
+        await runMediaUpload(files, opts);
+    });
+});
 const page = program
     .command('page')
     .description('Landing page (homepage) for your extension: generate static HTML offline, register its URL');
@@ -438,6 +694,7 @@ page
     .requiredOption('--config <landing.json>', 'Landing config JSON')
     .option('--logo <file>', 'Logo: .svg or .png/.jpg/.webp/.gif (≤256 KiB)')
     .option('--no-homepage', 'Do not register the URL as the project homepage')
+    .option('--upload-local', "Upload local screenshot / logoUrl paths (relative to the config file) to the project's public media store first")
     .action(async (opts) => {
     await runCommand('page publish', async () => {
         await runPagePublish(opts);