@extenshi/cli 0.21.0 → 0.23.0

package/dist/auto-evidence.d.ts

@@ -0,0 +1,154 @@
+/**
+ * `--evidence` on `scan`, `review-risk`, `generate-listing`, `test smoke` and
+ * `screenshots`: turn the result the command just computed into the readiness
+ * evidence kind it attests, with the digests `releaseReadiness` matches against,
+ * and record it for the project bound in this directory — through the same client
+ * path as `extenshi evidence push` (project.ts → recordAgentEvidence).
+ *
+ * The digests are the contract (shared-types/project-workspace.ts
+ * `releaseReadiness`):
+ *
+ *   kind          artifactDigest     inputDigest                      locale
+ *   scan          sha256(zip)        sha256(zip)                      —
+ *   installed     sha256(zip)        sha256(zip)                      —
+ *   permissions   sha256(zip)        hashMetadata(packaged manifest)  —
+ *   listing       sha256(zip)        sha256(listing file bytes)       each locale
+ *   screenshots   sha256(zip)        sha256(listing file bytes)       each shot locale
+ *
+ * `hashMetadata(manifest)` is what `release prepare` stores as manifestDigest,
+ * and `sha256(listing file)` is what `release prepare --listing <file>` stores as
+ * listingDigest — so evidence recorded here is current exactly when the release
+ * binds the same package and the same listing file.
+ *
+ * Status rules (documented in the CLI docs):
+ *   scan         failed on a REJECTION_LIKELY store-compliance finding or any
+ *                CRITICAL security finding — the report's own "fail" verdict.
+ *   permissions  failed on a REJECTED review-risk finding outside the listing rules.
+ *   listing      failed only on a REJECTED listing-rule finding for that locale —
+ *                exactly what would make `review-risk` exit non-zero. Listing rules
+ *                are ADVISORY by roadmap policy (iteration 2 T9: the v3 dictionary
+ *                measured a 78.7% false-positive rate) and never fail review-risk,
+ *                so failing readiness on them would block releases on false
+ *                positives. An advisory finding leaves the check `passed`.
+ *   installed    the smoke result.
+ *   screenshots  failed when the store's set for that locale is empty or over the
+ *                store's limit (Chrome 5, Edge 6) — it cannot be submitted as shot.
+ *                A locale the run cannot verify stops the run, so nothing is recorded.
+ *
+ * `screenshots` records carry their PNGs as attachments (private storage, the
+ * `evidence push --attach` upload path) — see recordScreenshotsEvidence.
+ *
+ * `permissions` and `listing` carry a `summary` (finding count, blocking count,
+ * distinct check ids) so the advisories behind a `passed` stay visible to
+ * whoever reads the record. It is sent only to a server that advertises it
+ * (project.ts → recordAgentEvidence).
+ */
+import { type Listing } from './listing.js';
+import type { EvidenceRecord } from './project.js';
+import { type ReviewFinding } from './review-checks.js';
+import type { ScreenshotFile, ScreenshotsResult } from './screenshots.js';
+import type { SmokeResult } from './smoke.js';
+export type EvidenceBrowser = 'chrome' | 'edge' | 'firefox';
+export declare const sha256Hex: (bytes: Uint8Array | string) => string;
+/**
+ * `--evidence` is checked BEFORE the work it attests: a paid scan that cannot
+ * record its evidence afterwards would spend a credit for nothing.
+ */
+export declare function assertEvidenceBinding(cwd?: string): void;
+/** Evidence binds to the exact package bytes, so it needs a package file, not an unpacked folder. */
+export declare function evidenceArtifact(artifact: string): Promise<{
+    bytes: Buffer;
+    digest: string;
+}>;
+/**
+ * Which store(s) the evidence is for: the explicit list, else the browsers
+ * `extenshi package` recorded for these exact bytes (Chrome and Edge built from
+ * one directory are the same zip), else refuse — mislabelled evidence would
+ * satisfy the wrong release.
+ */
+export declare function evidenceBrowsers(artifactPath: string, artifactDigest: string, explicit?: string): EvidenceBrowser[];
+export declare function scanEvidence(input: {
+    artifactDigest: string;
+    browsers: EvidenceBrowser[];
+    body: Record<string, unknown>;
+}): EvidenceRecord[];
+export declare function smokeEvidence(input: {
+    browser: EvidenceBrowser;
+    result: SmokeResult;
+}): EvidenceRecord[];
+type EvidenceSummary = NonNullable<EvidenceRecord['summary']>;
+/** Counts and distinct check ids — never finding text, which can quote listing copy or code. */
+export declare function findingSummary(findings: readonly ReviewFinding[]): EvidenceSummary;
+export declare function permissionsEvidence(input: {
+    artifactDigest: string;
+    manifest: unknown;
+    browsers: EvidenceBrowser[];
+    findings: readonly ReviewFinding[];
+    listingCheckIds: ReadonlySet<string>;
+}): EvidenceRecord[];
+/** Listing findings carry `[locale] field…` evidence; one without a locale applies to every locale. */
+export declare function findingLocale(finding: ReviewFinding): string | null;
+export declare function listingEvidence(input: {
+    artifactDigest: string;
+    listingBytes: Uint8Array | string;
+    listing: Listing | null;
+    browsers: EvidenceBrowser[];
+    /** Output of runListingOnlyChecks for the same listing. */
+    listingFindings: readonly ReviewFinding[];
+}): EvidenceRecord[];
+/**
+ * `generate-listing --evidence`: read the draft the command just wrote
+ * (CHROMEWEBSTORE.md, EDGE.md or AMO.md — one parser, keyed on headings) back
+ * over the package, run the listing rules on it and bind the evidence to that
+ * file's bytes. `browsers` is the store the draft is for.
+ */
+export declare function generatedListingEvidence(input: {
+    artifactBytes: Buffer;
+    artifactDigest: string;
+    draftPath: string;
+    browsers: EvidenceBrowser[];
+}): Promise<EvidenceRecord[]>;
+/**
+ * What `screenshots --evidence` needs, settled before Chromium starts: the bound
+ * project, the exact zip (it is also what gets shot), the listing revision the
+ * shots illustrate, and the stores the evidence is for — each one a store this
+ * run shoots, since `<out>/<store>/<locale>/` is that store's own set.
+ */
+export declare function screenshotsEvidencePlan(input: {
+    extension: string;
+    listing?: string;
+    store?: string;
+    evidenceBrowser?: string;
+}): Promise<{
+    artifactDigest: string;
+    listingBytes: Buffer;
+    browsers: EvidenceBrowser[];
+}>;
+/** One `screenshots` record per store and shot locale (status rules: file header). */
+export declare function screenshotsEvidence(input: {
+    artifactDigest: string;
+    listingBytes: Uint8Array | string;
+    browsers: EvidenceBrowser[];
+    result: Pick<ScreenshotsResult, 'files' | 'locales'>;
+}): EvidenceRecord[];
+/**
+ * `screenshots --evidence`: record each record with its store's PNGs for that
+ * locale attached (project.ts → uploadEvidenceAttachment, the same upload path
+ * as `evidence push --attach`).
+ *
+ * Every file passes the local checks — type, 10 MB each, at most
+ * EVIDENCE_ATTACHMENTS_MAX per record, and bytes still matching the sha256 the
+ * run wrote to screenshots.json — before the first upload. Then one locale at a
+ * time: upload, record. The server caps uploads no record references yet (100
+ * per project), so uploading every locale ahead of a single record call would
+ * fail a large run midway; a locale is at most 12 scenes × 2 sizes.
+ */
+export declare function recordScreenshotsEvidence(records: EvidenceRecord[], files: readonly ScreenshotFile[], cwd?: string): Promise<void>;
+/**
+ * Record the batch for the bound project and say so on stderr (stdout stays the
+ * command's own output, e.g. --json). A queued (offline) record sets exit code 1
+ * like `evidence push`; any other failure throws — the caller asked for evidence.
+ */
+export declare function recordAutoEvidence(records: EvidenceRecord[], cwd?: string): Promise<void>;
+export {};
+//# sourceMappingURL=auto-evidence.d.ts.map

package/dist/auto-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-evidence.d.ts","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAQH,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAA;AAItE,OAAO,EAAE,KAAK,aAAa,EAAwB,MAAM,oBAAoB,CAAA;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAG7C,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;AAG3D,eAAO,MAAM,SAAS,GAAI,OAAO,UAAU,GAAG,MAAM,WAAqD,CAAA;AAEzG;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,SAAgB,GAAG,IAAI,CAK/D;AAED,qGAAqG;AACrG,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAOnG;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC/B,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,QAAQ,CAAC,EAAE,MAAM,GACf,eAAe,EAAE,CAmBnB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE;IACnC,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B,GAAG,cAAc,EAAE,CAWnB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG,cAAc,EAAE,CAUxG;AAQD,KAAK,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;AAE7D,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,CAMlF;AAKD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;IAClC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CACpC,GAAG,cAAc,EAAE,CAYnB;AAED,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAEnE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACtC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,UAAU,GAAG,MAAM,CAAA;IACjC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,2DAA2D;IAC3D,eAAe,EAAE,SAAS,aAAa,EAAE,CAAA;CACzC,GAAG,cAAc,EAAE,CAwBnB;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACrD,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC3B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAU5B;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACpD,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC,CAmBzF;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,UAAU,GAAG,MAAM,CAAA;IACjC,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,SAAS,CAAC,CAAA;CACpD,GAAG,cAAc,EAAE,CAgBnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,cAAc,EAAE,EACzB,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,GAAG,SAAgB,GACjB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtG"}

package/dist/auto-evidence.js

@@ -0,0 +1,297 @@
+/**
+ * `--evidence` on `scan`, `review-risk`, `generate-listing`, `test smoke` and
+ * `screenshots`: turn the result the command just computed into the readiness
+ * evidence kind it attests, with the digests `releaseReadiness` matches against,
+ * and record it for the project bound in this directory — through the same client
+ * path as `extenshi evidence push` (project.ts → recordAgentEvidence).
+ *
+ * The digests are the contract (shared-types/project-workspace.ts
+ * `releaseReadiness`):
+ *
+ *   kind          artifactDigest     inputDigest                      locale
+ *   scan          sha256(zip)        sha256(zip)                      —
+ *   installed     sha256(zip)        sha256(zip)                      —
+ *   permissions   sha256(zip)        hashMetadata(packaged manifest)  —
+ *   listing       sha256(zip)        sha256(listing file bytes)       each locale
+ *   screenshots   sha256(zip)        sha256(listing file bytes)       each shot locale
+ *
+ * `hashMetadata(manifest)` is what `release prepare` stores as manifestDigest,
+ * and `sha256(listing file)` is what `release prepare --listing <file>` stores as
+ * listingDigest — so evidence recorded here is current exactly when the release
+ * binds the same package and the same listing file.
+ *
+ * Status rules (documented in the CLI docs):
+ *   scan         failed on a REJECTION_LIKELY store-compliance finding or any
+ *                CRITICAL security finding — the report's own "fail" verdict.
+ *   permissions  failed on a REJECTED review-risk finding outside the listing rules.
+ *   listing      failed only on a REJECTED listing-rule finding for that locale —
+ *                exactly what would make `review-risk` exit non-zero. Listing rules
+ *                are ADVISORY by roadmap policy (iteration 2 T9: the v3 dictionary
+ *                measured a 78.7% false-positive rate) and never fail review-risk,
+ *                so failing readiness on them would block releases on false
+ *                positives. An advisory finding leaves the check `passed`.
+ *   installed    the smoke result.
+ *   screenshots  failed when the store's set for that locale is empty or over the
+ *                store's limit (Chrome 5, Edge 6) — it cannot be submitted as shot.
+ *                A locale the run cannot verify stops the run, so nothing is recorded.
+ *
+ * `screenshots` records carry their PNGs as attachments (private storage, the
+ * `evidence push --attach` upload path) — see recordScreenshotsEvidence.
+ *
+ * `permissions` and `listing` carry a `summary` (finding count, blocking count,
+ * distinct check ids) so the advisories behind a `passed` stay visible to
+ * whoever reads the record. It is sent only to a server that advertises it
+ * (project.ts → recordAgentEvidence).
+ */
+import { createHash } from 'node:crypto';
+import fs from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { EVIDENCE_ATTACHMENTS_MAX, hashMetadata } from '@extenshi/contracts';
+import { InvalidInputError } from './expected-error.js';
+import { assembleListing } from './listing.js';
+import { packagedBrowsersFor } from './package.js';
+import { summarizeCompliance, summarizeReport } from './render.js';
+import { computeVerdict } from './report.js';
+import { loadArtifact } from './review-archive.js';
+import { runListingOnlyChecks } from './review-checks.js';
+import { parseStores, STORE_SCREENSHOT_SPECS } from './store-assets.js';
+const BROWSERS = ['chrome', 'edge', 'firefox'];
+export const sha256Hex = (bytes) => createHash('sha256').update(bytes).digest('hex');
+/**
+ * `--evidence` is checked BEFORE the work it attests: a paid scan that cannot
+ * record its evidence afterwards would spend a credit for nothing.
+ */
+export function assertEvidenceBinding(cwd = process.cwd()) {
+    if (!fs.existsSync(path.join(cwd, '.extenshi/project.json')))
+        throw new InvalidInputError('--evidence records against the project bound in this directory. Run extenshi project bind --project <id> --repo <owner/repo> first.');
+}
+/** Evidence binds to the exact package bytes, so it needs a package file, not an unpacked folder. */
+export async function evidenceArtifact(artifact) {
+    if (!fs.existsSync(artifact) || !fs.statSync(artifact).isFile())
+        throw new InvalidInputError('--evidence binds to the exact package: pass the zip (e.g. from extenshi package), not an unpacked folder.');
+    const bytes = await readFile(artifact);
+    return { bytes, digest: sha256Hex(bytes) };
+}
+/**
+ * Which store(s) the evidence is for: the explicit list, else the browsers
+ * `extenshi package` recorded for these exact bytes (Chrome and Edge built from
+ * one directory are the same zip), else refuse — mislabelled evidence would
+ * satisfy the wrong release.
+ */
+export function evidenceBrowsers(artifactPath, artifactDigest, explicit) {
+    if (explicit) {
+        const list = explicit
+            .split(',')
+            .map((s) => s.trim().toLowerCase())
+            .filter(Boolean);
+        const bad = list.filter((s) => !BROWSERS.includes(s));
+        if (bad.length || !list.length)
+            throw new InvalidInputError(`--evidence-browser takes a comma-separated list of: ${BROWSERS.join(', ')}`);
+        return [...new Set(list)];
+    }
+    const packaged = packagedBrowsersFor(artifactPath, artifactDigest);
+    if (packaged.length)
+        return packaged;
+    throw new InvalidInputError('--evidence needs to know which store this package is for. Pass --evidence-browser chrome|edge|firefox, ' +
+        'or run it on a zip from `extenshi package`, whose extenshi-packages.json records the browser.');
+}
+export function scanEvidence(input) {
+    const verdict = computeVerdict(summarizeCompliance(input.body), summarizeReport(input.body));
+    const critical = summarizeReport(input.body).findings.some((f) => f.severity === 'CRITICAL');
+    const status = verdict.level === 'fail' || critical ? 'failed' : 'passed';
+    return input.browsers.map((browser) => ({
+        kind: 'scan',
+        browser,
+        artifactDigest: input.artifactDigest,
+        inputDigest: input.artifactDigest,
+        status,
+    }));
+}
+export function smokeEvidence(input) {
+    return [
+        {
+            kind: 'installed',
+            browser: input.browser,
+            artifactDigest: input.result.sha256,
+            inputDigest: input.result.sha256,
+            status: input.result.status,
+        },
+    ];
+}
+/**
+ * Mirrors EVIDENCE_SUMMARY_MAX_IDS in the contract. Not imported: an installed
+ * @extenshi/contracts that predates the summary has no such export, and a
+ * missing named ESM import would stop the whole CLI from loading.
+ */
+const SUMMARY_MAX_IDS = 50;
+/** Counts and distinct check ids — never finding text, which can quote listing copy or code. */
+export function findingSummary(findings) {
+    return {
+        findingCount: findings.length,
+        blockingCount: findings.filter(isBlocking).length,
+        findingIds: [...new Set(findings.map((f) => f.check))].sort().slice(0, SUMMARY_MAX_IDS),
+    };
+}
+/** What makes `review-risk` exit non-zero (summarize → `blocking`). */
+const isBlocking = (f) => f.verdict === 'REJECTED';
+export function permissionsEvidence(input) {
+    const own = input.findings.filter((f) => !input.listingCheckIds.has(f.check));
+    const summary = findingSummary(own);
+    const inputDigest = hashMetadata(input.manifest);
+    return input.browsers.map((browser) => ({
+        kind: 'permissions',
+        browser,
+        artifactDigest: input.artifactDigest,
+        inputDigest,
+        status: summary.blockingCount ? 'failed' : 'passed',
+        summary,
+    }));
+}
+/** Listing findings carry `[locale] field…` evidence; one without a locale applies to every locale. */
+export function findingLocale(finding) {
+    return /^\[([^\]\s]+)\]/.exec(finding.evidence ?? '')?.[1] ?? null;
+}
+export function listingEvidence(input) {
+    const locales = input.listing?.locales.map((l) => l.locale) ?? [];
+    if (!locales.length)
+        throw new InvalidInputError('The listing has no locale with text, so there is nothing to attest.');
+    const inputDigest = sha256Hex(input.listingBytes);
+    return input.browsers.flatMap((browser) => locales.map((locale) => {
+        const hits = input.listingFindings.filter((f) => {
+            const at = findingLocale(f);
+            return at === null || at === locale;
+        });
+        const summary = findingSummary(hits);
+        return {
+            kind: 'listing',
+            browser,
+            locale,
+            artifactDigest: input.artifactDigest,
+            inputDigest,
+            // Advisory findings are carried in the summary, never in the status.
+            status: summary.blockingCount ? 'failed' : 'passed',
+            summary,
+        };
+    }));
+}
+/**
+ * `generate-listing --evidence`: read the draft the command just wrote
+ * (CHROMEWEBSTORE.md, EDGE.md or AMO.md — one parser, keyed on headings) back
+ * over the package, run the listing rules on it and bind the evidence to that
+ * file's bytes. `browsers` is the store the draft is for.
+ */
+export async function generatedListingEvidence(input) {
+    const { manifest, files } = await loadArtifact(input.artifactBytes);
+    const listing = assembleListing(manifest, files, input.draftPath);
+    return listingEvidence({
+        artifactDigest: input.artifactDigest,
+        listingBytes: fs.readFileSync(input.draftPath),
+        listing,
+        browsers: input.browsers,
+        listingFindings: runListingOnlyChecks(listing),
+    });
+}
+/**
+ * What `screenshots --evidence` needs, settled before Chromium starts: the bound
+ * project, the exact zip (it is also what gets shot), the listing revision the
+ * shots illustrate, and the stores the evidence is for — each one a store this
+ * run shoots, since `<out>/<store>/<locale>/` is that store's own set.
+ */
+export async function screenshotsEvidencePlan(input) {
+    assertEvidenceBinding();
+    const { digest } = await evidenceArtifact(input.extension);
+    const listing = input.listing;
+    if (!listing)
+        throw new InvalidInputError('--evidence binds screenshots to the listing they illustrate: pass --listing <file>, the file you give release prepare --listing.');
+    const listingBytes = await readFile(listing).catch(() => {
+        throw new InvalidInputError(`Listing file not found: ${listing}`);
+    });
+    const browsers = evidenceBrowsers(input.extension, digest, input.evidenceBrowser ?? input.store);
+    const shot = parseStores(input.store);
+    const unshot = browsers.filter((b) => !shot.includes(b));
+    if (unshot.length)
+        throw new InvalidInputError(`--evidence-browser ${unshot.join(',')}: this run shoots only ${shot.join(',')} (--store), and screenshots evidence is that store's own set.`);
+    return { artifactDigest: digest, listingBytes, browsers };
+}
+/** One `screenshots` record per store and shot locale (status rules: file header). */
+export function screenshotsEvidence(input) {
+    const inputDigest = sha256Hex(input.listingBytes);
+    return input.browsers.flatMap((browser) => input.result.locales.map(({ locale }) => {
+        const count = input.result.files.filter((f) => f.store === browser && f.locale === locale).length;
+        const max = STORE_SCREENSHOT_SPECS[browser].max;
+        return {
+            kind: 'screenshots',
+            browser,
+            locale,
+            artifactDigest: input.artifactDigest,
+            inputDigest,
+            status: count && (max === null || count <= max) ? 'passed' : 'failed',
+        };
+    }));
+}
+/**
+ * `screenshots --evidence`: record each record with its store's PNGs for that
+ * locale attached (project.ts → uploadEvidenceAttachment, the same upload path
+ * as `evidence push --attach`).
+ *
+ * Every file passes the local checks — type, 10 MB each, at most
+ * EVIDENCE_ATTACHMENTS_MAX per record, and bytes still matching the sha256 the
+ * run wrote to screenshots.json — before the first upload. Then one locale at a
+ * time: upload, record. The server caps uploads no record references yet (100
+ * per project), so uploading every locale ahead of a single record call would
+ * fail a large run midway; a locale is at most 12 scenes × 2 sizes.
+ */
+export async function recordScreenshotsEvidence(records, files, cwd = process.cwd()) {
+    const { prepareEvidenceAttachment } = await import('./project.js');
+    const prepared = new Map();
+    const attached = [];
+    for (const record of records) {
+        const own = files.filter((f) => f.store === record.browser && f.locale === record.locale);
+        if (own.length > EVIDENCE_ATTACHMENTS_MAX)
+            throw new InvalidInputError(`${record.browser}/${record.locale} has ${own.length} screenshots; an evidence record carries at most ${EVIDENCE_ATTACHMENTS_MAX}.`);
+        const attach = [];
+        for (const file of own) {
+            let ready = prepared.get(file.path);
+            if (!ready) {
+                ready = await prepareEvidenceAttachment(file.path);
+                if (ready.sha256 !== file.sha256)
+                    throw new InvalidInputError(`${file.path} changed after it was shot; rerun extenshi screenshots.`);
+                prepared.set(file.path, ready);
+            }
+            attach.push(ready);
+        }
+        attached.push(attach.length ? { ...record, attach } : record);
+    }
+    for (const locale of [...new Set(attached.map((r) => r.locale))])
+        await recordAutoEvidence(attached.filter((r) => r.locale === locale), cwd);
+}
+/**
+ * Record the batch for the bound project and say so on stderr (stdout stays the
+ * command's own output, e.g. --json). A queued (offline) record sets exit code 1
+ * like `evidence push`; any other failure throws — the caller asked for evidence.
+ */
+export async function recordAutoEvidence(records, cwd = process.cwd()) {
+    if (!records.length)
+        return;
+    const { recordAgentEvidence } = await import('./project.js');
+    const result = await recordAgentEvidence(cwd, records);
+    const summary = records
+        .map((r) => {
+        const advisories = r.summary ? r.summary.findingCount - r.summary.blockingCount : 0;
+        const note = advisories ? ` (${advisories} advisory: ${r.summary?.findingIds.join(' ')})` : '';
+        const files = r.attach?.length ? ` +${r.attach.length} file(s)` : '';
+        return `${r.kind}${r.locale ? `:${r.locale}` : ''}/${r.browser}=${r.status}${note}${files}`;
+    })
+        .join(', ');
+    if (!result.summaries && records.some((r) => r.summary))
+        process.stderr.write('note: this server does not store evidence summaries yet — the advisory findings above are shown here only\n');
+    if (result.status === 'pending-sync') {
+        process.stderr.write(`evidence queued (offline) for project ${result.projectId}: ${summary}. Run extenshi project sync.\n`);
+        process.exitCode = 1;
+    }
+    else {
+        process.stderr.write(`evidence recorded for project ${result.projectId}: ${summary}\n`);
+    }
+}
+//# sourceMappingURL=auto-evidence.js.map

package/dist/auto-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-evidence.js","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAgB,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAsB,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAG7E,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAGvE,MAAM,QAAQ,GAA+B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;AAE1E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEzG;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QAC3D,MAAM,IAAI,iBAAiB,CAC1B,qIAAqI,CACrI,CAAA;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;QAC9D,MAAM,IAAI,iBAAiB,CAC1B,2GAA2G,CAC3G,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACtC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC/B,YAAoB,EACpB,cAAsB,EACtB,QAAiB;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ;aACnB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAClC,MAAM,CAAC,OAAO,CAAC,CAAA;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,QAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7B,MAAM,IAAI,iBAAiB,CAC1B,uDAAuD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAA;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAsB,CAAA;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IAClE,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAA;IACpC,MAAM,IAAI,iBAAiB,CAC1B,yGAAyG;QACxG,+FAA+F,CAChG,CAAA;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAI5B;IACA,MAAM,OAAO,GAAG,cAAc,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5F,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAA;IAC5F,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;IACzE,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,cAAc;QACjC,MAAM;KACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAwD;IACrF,OAAO;QACN;YACC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YACnC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC3B;KACD,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,eAAe,GAAG,EAAE,CAAA;AAG1B,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAAC,QAAkC;IAChE,OAAO;QACN,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM;QACjD,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;KACvF,CAAA;AACF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAA;AAEjE,MAAM,UAAU,mBAAmB,CAAC,KAMnC;IACA,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,aAAa;QACnB,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW;QACX,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACnD,OAAO;KACP,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,OAAsB;IACnD,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAO/B;IACA,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACjE,IAAI,CAAC,OAAO,CAAC,MAAM;QAClB,MAAM,IAAI,iBAAiB,CAAC,qEAAqE,CAAC,CAAA;IACnG,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACjD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC3B,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,MAAM,CAAA;QACpC,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACpC,OAAO;YACN,IAAI,EAAE,SAAS;YACf,OAAO;YACP,MAAM;YACN,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW;YACX,qEAAqE;YACrE,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,QAAkB;YACzE,OAAO;SACP,CAAA;IACF,CAAC,CAAC,CACF,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAK9C;IACA,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IACjE,OAAO,eAAe,CAAC;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9C,OAAO;QACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC;KAC9C,CAAC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAK7C;IACA,qBAAqB,EAAE,CAAA;IACvB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7B,IAAI,CAAC,OAAO;QACX,MAAM,IAAI,iBAAiB,CAC1B,kIAAkI,CAClI,CAAA;IACF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACvD,MAAM,IAAI,iBAAiB,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IAChG,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,MAAM;QAChB,MAAM,IAAI,iBAAiB,CAC1B,sBAAsB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+DAA+D,CAC7I,CAAA;IACF,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA;AAC1D,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACA,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACjD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAA;QACjG,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAA;QAC/C,OAAO;YACN,IAAI,EAAE,aAAa;YACnB,OAAO;YACP,MAAM;YACN,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW;YACX,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,QAAkB;SAC3F,CAAA;IACF,CAAC,CAAC,CACF,CAAA;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAyB,EACzB,KAAgC,EAChC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAA;IACtD,MAAM,QAAQ,GAAqB,EAAE,CAAA;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAA;QACzF,IAAI,GAAG,CAAC,MAAM,GAAG,wBAAwB;YACxC,MAAM,IAAI,iBAAiB,CAC1B,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAM,oDAAoD,wBAAwB,GAAG,CACnI,CAAA;QACF,MAAM,MAAM,GAAyB,EAAE,CAAA;QACvC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACxB,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,KAAK,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAClD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAC/B,MAAM,IAAI,iBAAiB,CAAC,GAAG,IAAI,CAAC,IAAI,yDAAyD,CAAC,CAAA;gBACnG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAC/B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC9D,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,kBAAkB,CACvB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAC3C,GAAG,CACH,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACtF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAM;IAC3B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,OAAO;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,cAAc,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9F,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE,CAAA;QACpE,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,GAAG,KAAK,EAAE,CAAA;IAC5F,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,6GAA6G,CAC7G,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,yCAAyC,MAAM,CAAC,SAAS,KAAK,OAAO,gCAAgC,CACrG,CAAA;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACrB,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAA;IACxF,CAAC;AACF,CAAC"}

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG"}