@extenshi/cli 0.22.0 → 0.23.1

package/dist/auto-evidence.d.ts

@@ -1,9 +1,9 @@
 /**
- * `--evidence` on `scan`, `review-risk`, `generate-listing` and `test smoke`:
- * turn the result the command just computed into the readiness evidence kind it
- * attests, with the digests `releaseReadiness` matches against, and record it for
- * the project bound in this directory — through the same client path as
- * `extenshi evidence push` (project.ts → recordAgentEvidence).
+ * `--evidence` on `scan`, `review-risk`, `generate-listing`, `test smoke` and
+ * `screenshots`: turn the result the command just computed into the readiness
+ * evidence kind it attests, with the digests `releaseReadiness` matches against,
+ * and record it for the project bound in this directory — through the same client
+ * path as `extenshi evidence push` (project.ts → recordAgentEvidence).
  *
  * The digests are the contract (shared-types/project-workspace.ts
  * `releaseReadiness`):
@@ -13,6 +13,7 @@
  *   installed     sha256(zip)        sha256(zip)                      —
  *   permissions   sha256(zip)        hashMetadata(packaged manifest)  —
  *   listing       sha256(zip)        sha256(listing file bytes)       each locale
+ *   screenshots   sha256(zip)        sha256(listing file bytes)       each shot locale
  *
  * `hashMetadata(manifest)` is what `release prepare` stores as manifestDigest,
  * and `sha256(listing file)` is what `release prepare --listing <file>` stores as
@@ -30,6 +31,12 @@
  *                so failing readiness on them would block releases on false
  *                positives. An advisory finding leaves the check `passed`.
  *   installed    the smoke result.
+ *   screenshots  failed when the store's set for that locale is empty or over the
+ *                store's limit (Chrome 5, Edge 6) — it cannot be submitted as shot.
+ *                A locale the run cannot verify stops the run, so nothing is recorded.
+ *
+ * `screenshots` records carry their PNGs as attachments (private storage, the
+ * `evidence push --attach` upload path) — see recordScreenshotsEvidence.
  *
  * `permissions` and `listing` carry a `summary` (finding count, blocking count,
  * distinct check ids) so the advisories behind a `passed` stay visible to
@@ -39,9 +46,20 @@
 import { type Listing } from './listing.js';
 import type { EvidenceRecord } from './project.js';
 import { type ReviewFinding } from './review-checks.js';
+import type { ScreenshotFile, ScreenshotsResult } from './screenshots.js';
 import type { SmokeResult } from './smoke.js';
 export type EvidenceBrowser = 'chrome' | 'edge' | 'firefox';
 export declare const sha256Hex: (bytes: Uint8Array | string) => string;
+/**
+ * `--evidence` is checked BEFORE the work it attests: a paid scan that cannot
+ * record its evidence afterwards would spend a credit for nothing.
+ */
+export declare function assertEvidenceBinding(cwd?: string): void;
+/** Evidence binds to the exact package bytes, so it needs a package file, not an unpacked folder. */
+export declare function evidenceArtifact(artifact: string): Promise<{
+    bytes: Buffer;
+    digest: string;
+}>;
 /**
  * Which store(s) the evidence is for: the explicit list, else the browsers
  * `extenshi package` recorded for these exact bytes (Chrome and Edge built from
@@ -90,6 +108,42 @@ export declare function generatedListingEvidence(input: {
     draftPath: string;
     browsers: EvidenceBrowser[];
 }): Promise<EvidenceRecord[]>;
+/**
+ * What `screenshots --evidence` needs, settled before Chromium starts: the bound
+ * project, the exact zip (it is also what gets shot), the listing revision the
+ * shots illustrate, and the stores the evidence is for — each one a store this
+ * run shoots, since `<out>/<store>/<locale>/` is that store's own set.
+ */
+export declare function screenshotsEvidencePlan(input: {
+    extension: string;
+    listing?: string;
+    store?: string;
+    evidenceBrowser?: string;
+}): Promise<{
+    artifactDigest: string;
+    listingBytes: Buffer;
+    browsers: EvidenceBrowser[];
+}>;
+/** One `screenshots` record per store and shot locale (status rules: file header). */
+export declare function screenshotsEvidence(input: {
+    artifactDigest: string;
+    listingBytes: Uint8Array | string;
+    browsers: EvidenceBrowser[];
+    result: Pick<ScreenshotsResult, 'files' | 'locales'>;
+}): EvidenceRecord[];
+/**
+ * `screenshots --evidence`: record each record with its store's PNGs for that
+ * locale attached (project.ts → uploadEvidenceAttachment, the same upload path
+ * as `evidence push --attach`).
+ *
+ * Every file passes the local checks — type, 10 MB each, at most
+ * EVIDENCE_ATTACHMENTS_MAX per record, and bytes still matching the sha256 the
+ * run wrote to screenshots.json — before the first upload. Then one locale at a
+ * time: upload, record. The server caps uploads no record references yet (100
+ * per project), so uploading every locale ahead of a single record call would
+ * fail a large run midway; a locale is at most 12 scenes × 2 sizes.
+ */
+export declare function recordScreenshotsEvidence(records: EvidenceRecord[], files: readonly ScreenshotFile[], cwd?: string): Promise<void>;
 /**
  * Record the batch for the bound project and say so on stderr (stdout stays the
  * command's own output, e.g. --json). A queued (offline) record sets exit code 1

package/dist/auto-evidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-evidence.d.ts","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAMH,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAIlD,OAAO,EAAE,KAAK,aAAa,EAAwB,MAAM,oBAAoB,CAAA;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;AAG3D,eAAO,MAAM,SAAS,GAAI,OAAO,UAAU,GAAG,MAAM,WAAqD,CAAA;AAEzG;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC/B,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,QAAQ,CAAC,EAAE,MAAM,GACf,eAAe,EAAE,CAmBnB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE;IACnC,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B,GAAG,cAAc,EAAE,CAWnB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG,cAAc,EAAE,CAUxG;AAQD,KAAK,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;AAE7D,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,CAMlF;AAKD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;IAClC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CACpC,GAAG,cAAc,EAAE,CAYnB;AAED,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAEnE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACtC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,UAAU,GAAG,MAAM,CAAA;IACjC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,2DAA2D;IAC3D,eAAe,EAAE,SAAS,aAAa,EAAE,CAAA;CACzC,GAAG,cAAc,EAAE,CAwBnB;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACrD,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC3B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAU5B;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBtG"}
+{"version":3,"file":"auto-evidence.d.ts","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAQH,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAA;AAItE,OAAO,EAAE,KAAK,aAAa,EAAwB,MAAM,oBAAoB,CAAA;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAG7C,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;AAG3D,eAAO,MAAM,SAAS,GAAI,OAAO,UAAU,GAAG,MAAM,WAAqD,CAAA;AAEzG;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,SAAgB,GAAG,IAAI,CAK/D;AAED,qGAAqG;AACrG,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAOnG;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC/B,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,QAAQ,CAAC,EAAE,MAAM,GACf,eAAe,EAAE,CAmBnB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE;IACnC,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B,GAAG,cAAc,EAAE,CAWnB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG,cAAc,EAAE,CAUxG;AAQD,KAAK,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;AAE7D,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,CAMlF;AAKD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;IAClC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CACpC,GAAG,cAAc,EAAE,CAYnB;AAED,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAEnE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACtC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,UAAU,GAAG,MAAM,CAAA;IACjC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,2DAA2D;IAC3D,eAAe,EAAE,SAAS,aAAa,EAAE,CAAA;CACzC,GAAG,cAAc,EAAE,CAwBnB;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACrD,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC3B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAU5B;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACpD,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC,CAmBzF;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,UAAU,GAAG,MAAM,CAAA;IACjC,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,SAAS,CAAC,CAAA;CACpD,GAAG,cAAc,EAAE,CAgBnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,cAAc,EAAE,EACzB,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,GAAG,SAAgB,GACjB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtG"}

package/dist/auto-evidence.js

@@ -1,9 +1,9 @@
 /**
- * `--evidence` on `scan`, `review-risk`, `generate-listing` and `test smoke`:
- * turn the result the command just computed into the readiness evidence kind it
- * attests, with the digests `releaseReadiness` matches against, and record it for
- * the project bound in this directory — through the same client path as
- * `extenshi evidence push` (project.ts → recordAgentEvidence).
+ * `--evidence` on `scan`, `review-risk`, `generate-listing`, `test smoke` and
+ * `screenshots`: turn the result the command just computed into the readiness
+ * evidence kind it attests, with the digests `releaseReadiness` matches against,
+ * and record it for the project bound in this directory — through the same client
+ * path as `extenshi evidence push` (project.ts → recordAgentEvidence).
  *
  * The digests are the contract (shared-types/project-workspace.ts
  * `releaseReadiness`):
@@ -13,6 +13,7 @@
  *   installed     sha256(zip)        sha256(zip)                      —
  *   permissions   sha256(zip)        hashMetadata(packaged manifest)  —
  *   listing       sha256(zip)        sha256(listing file bytes)       each locale
+ *   screenshots   sha256(zip)        sha256(listing file bytes)       each shot locale
  *
  * `hashMetadata(manifest)` is what `release prepare` stores as manifestDigest,
  * and `sha256(listing file)` is what `release prepare --listing <file>` stores as
@@ -30,6 +31,12 @@
  *                so failing readiness on them would block releases on false
  *                positives. An advisory finding leaves the check `passed`.
  *   installed    the smoke result.
+ *   screenshots  failed when the store's set for that locale is empty or over the
+ *                store's limit (Chrome 5, Edge 6) — it cannot be submitted as shot.
+ *                A locale the run cannot verify stops the run, so nothing is recorded.
+ *
+ * `screenshots` records carry their PNGs as attachments (private storage, the
+ * `evidence push --attach` upload path) — see recordScreenshotsEvidence.
  *
  * `permissions` and `listing` carry a `summary` (finding count, blocking count,
  * distinct check ids) so the advisories behind a `passed` stay visible to
@@ -38,7 +45,9 @@
  */
 import { createHash } from 'node:crypto';
 import fs from 'node:fs';
-import { hashMetadata } from '@extenshi/contracts';
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { EVIDENCE_ATTACHMENTS_MAX, hashMetadata } from '@extenshi/contracts';
 import { InvalidInputError } from './expected-error.js';
 import { assembleListing } from './listing.js';
 import { packagedBrowsersFor } from './package.js';
@@ -46,8 +55,24 @@ import { summarizeCompliance, summarizeReport } from './render.js';
 import { computeVerdict } from './report.js';
 import { loadArtifact } from './review-archive.js';
 import { runListingOnlyChecks } from './review-checks.js';
+import { parseStores, STORE_SCREENSHOT_SPECS } from './store-assets.js';
 const BROWSERS = ['chrome', 'edge', 'firefox'];
 export const sha256Hex = (bytes) => createHash('sha256').update(bytes).digest('hex');
+/**
+ * `--evidence` is checked BEFORE the work it attests: a paid scan that cannot
+ * record its evidence afterwards would spend a credit for nothing.
+ */
+export function assertEvidenceBinding(cwd = process.cwd()) {
+    if (!fs.existsSync(path.join(cwd, '.extenshi/project.json')))
+        throw new InvalidInputError('--evidence records against the project bound in this directory. Run extenshi project bind --project <id> --repo <owner/repo> first.');
+}
+/** Evidence binds to the exact package bytes, so it needs a package file, not an unpacked folder. */
+export async function evidenceArtifact(artifact) {
+    if (!fs.existsSync(artifact) || !fs.statSync(artifact).isFile())
+        throw new InvalidInputError('--evidence binds to the exact package: pass the zip (e.g. from extenshi package), not an unpacked folder.');
+    const bytes = await readFile(artifact);
+    return { bytes, digest: sha256Hex(bytes) };
+}
 /**
  * Which store(s) the evidence is for: the explicit list, else the browsers
  * `extenshi package` recorded for these exact bytes (Chrome and Edge built from
@@ -167,6 +192,80 @@ export async function generatedListingEvidence(input) {
         listingFindings: runListingOnlyChecks(listing),
     });
 }
+/**
+ * What `screenshots --evidence` needs, settled before Chromium starts: the bound
+ * project, the exact zip (it is also what gets shot), the listing revision the
+ * shots illustrate, and the stores the evidence is for — each one a store this
+ * run shoots, since `<out>/<store>/<locale>/` is that store's own set.
+ */
+export async function screenshotsEvidencePlan(input) {
+    assertEvidenceBinding();
+    const { digest } = await evidenceArtifact(input.extension);
+    const listing = input.listing;
+    if (!listing)
+        throw new InvalidInputError('--evidence binds screenshots to the listing they illustrate: pass --listing <file>, the file you give release prepare --listing.');
+    const listingBytes = await readFile(listing).catch(() => {
+        throw new InvalidInputError(`Listing file not found: ${listing}`);
+    });
+    const browsers = evidenceBrowsers(input.extension, digest, input.evidenceBrowser ?? input.store);
+    const shot = parseStores(input.store);
+    const unshot = browsers.filter((b) => !shot.includes(b));
+    if (unshot.length)
+        throw new InvalidInputError(`--evidence-browser ${unshot.join(',')}: this run shoots only ${shot.join(',')} (--store), and screenshots evidence is that store's own set.`);
+    return { artifactDigest: digest, listingBytes, browsers };
+}
+/** One `screenshots` record per store and shot locale (status rules: file header). */
+export function screenshotsEvidence(input) {
+    const inputDigest = sha256Hex(input.listingBytes);
+    return input.browsers.flatMap((browser) => input.result.locales.map(({ locale }) => {
+        const count = input.result.files.filter((f) => f.store === browser && f.locale === locale).length;
+        const max = STORE_SCREENSHOT_SPECS[browser].max;
+        return {
+            kind: 'screenshots',
+            browser,
+            locale,
+            artifactDigest: input.artifactDigest,
+            inputDigest,
+            status: count && (max === null || count <= max) ? 'passed' : 'failed',
+        };
+    }));
+}
+/**
+ * `screenshots --evidence`: record each record with its store's PNGs for that
+ * locale attached (project.ts → uploadEvidenceAttachment, the same upload path
+ * as `evidence push --attach`).
+ *
+ * Every file passes the local checks — type, 10 MB each, at most
+ * EVIDENCE_ATTACHMENTS_MAX per record, and bytes still matching the sha256 the
+ * run wrote to screenshots.json — before the first upload. Then one locale at a
+ * time: upload, record. The server caps uploads no record references yet (100
+ * per project), so uploading every locale ahead of a single record call would
+ * fail a large run midway; a locale is at most 12 scenes × 2 sizes.
+ */
+export async function recordScreenshotsEvidence(records, files, cwd = process.cwd()) {
+    const { prepareEvidenceAttachment } = await import('./project.js');
+    const prepared = new Map();
+    const attached = [];
+    for (const record of records) {
+        const own = files.filter((f) => f.store === record.browser && f.locale === record.locale);
+        if (own.length > EVIDENCE_ATTACHMENTS_MAX)
+            throw new InvalidInputError(`${record.browser}/${record.locale} has ${own.length} screenshots; an evidence record carries at most ${EVIDENCE_ATTACHMENTS_MAX}.`);
+        const attach = [];
+        for (const file of own) {
+            let ready = prepared.get(file.path);
+            if (!ready) {
+                ready = await prepareEvidenceAttachment(file.path);
+                if (ready.sha256 !== file.sha256)
+                    throw new InvalidInputError(`${file.path} changed after it was shot; rerun extenshi screenshots.`);
+                prepared.set(file.path, ready);
+            }
+            attach.push(ready);
+        }
+        attached.push(attach.length ? { ...record, attach } : record);
+    }
+    for (const locale of [...new Set(attached.map((r) => r.locale))])
+        await recordAutoEvidence(attached.filter((r) => r.locale === locale), cwd);
+}
 /**
  * Record the batch for the bound project and say so on stderr (stdout stays the
  * command's own output, e.g. --json). A queued (offline) record sets exit code 1
@@ -181,7 +280,8 @@ export async function recordAutoEvidence(records, cwd = process.cwd()) {
         .map((r) => {
         const advisories = r.summary ? r.summary.findingCount - r.summary.blockingCount : 0;
         const note = advisories ? ` (${advisories} advisory: ${r.summary?.findingIds.join(' ')})` : '';
-        return `${r.kind}${r.locale ? `:${r.locale}` : ''}/${r.browser}=${r.status}${note}`;
+        const files = r.attach?.length ? ` +${r.attach.length} file(s)` : '';
+        return `${r.kind}${r.locale ? `:${r.locale}` : ''}/${r.browser}=${r.status}${note}${files}`;
     })
         .join(', ');
     if (!result.summaries && records.some((r) => r.summary))

package/dist/auto-evidence.js.map

@@ -1 +1 @@
-{"version":3,"file":"auto-evidence.js","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAgB,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAsB,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAI7E,MAAM,QAAQ,GAA+B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;AAE1E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEzG;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC/B,YAAoB,EACpB,cAAsB,EACtB,QAAiB;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ;aACnB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAClC,MAAM,CAAC,OAAO,CAAC,CAAA;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,QAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7B,MAAM,IAAI,iBAAiB,CAC1B,uDAAuD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAA;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAsB,CAAA;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IAClE,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAA;IACpC,MAAM,IAAI,iBAAiB,CAC1B,yGAAyG;QACxG,+FAA+F,CAChG,CAAA;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAI5B;IACA,MAAM,OAAO,GAAG,cAAc,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5F,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAA;IAC5F,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;IACzE,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,cAAc;QACjC,MAAM;KACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAwD;IACrF,OAAO;QACN;YACC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YACnC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC3B;KACD,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,eAAe,GAAG,EAAE,CAAA;AAG1B,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAAC,QAAkC;IAChE,OAAO;QACN,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM;QACjD,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;KACvF,CAAA;AACF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAA;AAEjE,MAAM,UAAU,mBAAmB,CAAC,KAMnC;IACA,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,aAAa;QACnB,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW;QACX,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACnD,OAAO;KACP,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,OAAsB;IACnD,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAO/B;IACA,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACjE,IAAI,CAAC,OAAO,CAAC,MAAM;QAClB,MAAM,IAAI,iBAAiB,CAAC,qEAAqE,CAAC,CAAA;IACnG,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACjD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC3B,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,MAAM,CAAA;QACpC,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACpC,OAAO;YACN,IAAI,EAAE,SAAS;YACf,OAAO;YACP,MAAM;YACN,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW;YACX,qEAAqE;YACrE,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,QAAkB;YACzE,OAAO;SACP,CAAA;IACF,CAAC,CAAC,CACF,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAK9C;IACA,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IACjE,OAAO,eAAe,CAAC;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9C,OAAO;QACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC;KAC9C,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACtF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAM;IAC3B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,OAAO;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,cAAc,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9F,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,EAAE,CAAA;IACpF,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,6GAA6G,CAC7G,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,yCAAyC,MAAM,CAAC,SAAS,KAAK,OAAO,gCAAgC,CACrG,CAAA;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACrB,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAA;IACxF,CAAC;AACF,CAAC"}
+{"version":3,"file":"auto-evidence.js","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAgB,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAsB,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAG7E,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAGvE,MAAM,QAAQ,GAA+B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;AAE1E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEzG;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QAC3D,MAAM,IAAI,iBAAiB,CAC1B,qIAAqI,CACrI,CAAA;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;QAC9D,MAAM,IAAI,iBAAiB,CAC1B,2GAA2G,CAC3G,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACtC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC/B,YAAoB,EACpB,cAAsB,EACtB,QAAiB;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ;aACnB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAClC,MAAM,CAAC,OAAO,CAAC,CAAA;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,QAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7B,MAAM,IAAI,iBAAiB,CAC1B,uDAAuD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAA;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAsB,CAAA;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IAClE,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAA;IACpC,MAAM,IAAI,iBAAiB,CAC1B,yGAAyG;QACxG,+FAA+F,CAChG,CAAA;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAI5B;IACA,MAAM,OAAO,GAAG,cAAc,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5F,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAA;IAC5F,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;IACzE,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,cAAc;QACjC,MAAM;KACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAwD;IACrF,OAAO;QACN;YACC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YACnC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC3B;KACD,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,eAAe,GAAG,EAAE,CAAA;AAG1B,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAAC,QAAkC;IAChE,OAAO;QACN,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM;QACjD,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;KACvF,CAAA;AACF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAA;AAEjE,MAAM,UAAU,mBAAmB,CAAC,KAMnC;IACA,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,aAAa;QACnB,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW;QACX,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACnD,OAAO;KACP,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,OAAsB;IACnD,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAO/B;IACA,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACjE,IAAI,CAAC,OAAO,CAAC,MAAM;QAClB,MAAM,IAAI,iBAAiB,CAAC,qEAAqE,CAAC,CAAA;IACnG,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACjD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC3B,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,MAAM,CAAA;QACpC,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACpC,OAAO;YACN,IAAI,EAAE,SAAS;YACf,OAAO;YACP,MAAM;YACN,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW;YACX,qEAAqE;YACrE,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,QAAkB;YACzE,OAAO;SACP,CAAA;IACF,CAAC,CAAC,CACF,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAK9C;IACA,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IACjE,OAAO,eAAe,CAAC;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9C,OAAO;QACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC;KAC9C,CAAC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAK7C;IACA,qBAAqB,EAAE,CAAA;IACvB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7B,IAAI,CAAC,OAAO;QACX,MAAM,IAAI,iBAAiB,CAC1B,kIAAkI,CAClI,CAAA;IACF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACvD,MAAM,IAAI,iBAAiB,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IAChG,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,MAAM;QAChB,MAAM,IAAI,iBAAiB,CAC1B,sBAAsB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+DAA+D,CAC7I,CAAA;IACF,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA;AAC1D,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACA,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACjD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAA;QACjG,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAA;QAC/C,OAAO;YACN,IAAI,EAAE,aAAa;YACnB,OAAO;YACP,MAAM;YACN,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW;YACX,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,QAAkB;SAC3F,CAAA;IACF,CAAC,CAAC,CACF,CAAA;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAyB,EACzB,KAAgC,EAChC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAA;IACtD,MAAM,QAAQ,GAAqB,EAAE,CAAA;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAA;QACzF,IAAI,GAAG,CAAC,MAAM,GAAG,wBAAwB;YACxC,MAAM,IAAI,iBAAiB,CAC1B,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAM,oDAAoD,wBAAwB,GAAG,CACnI,CAAA;QACF,MAAM,MAAM,GAAyB,EAAE,CAAA;QACvC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACxB,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,KAAK,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAClD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAC/B,MAAM,IAAI,iBAAiB,CAAC,GAAG,IAAI,CAAC,IAAI,yDAAyD,CAAC,CAAA;gBACnG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAC/B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC9D,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,kBAAkB,CACvB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAC3C,GAAG,CACH,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACtF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAM;IAC3B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,OAAO;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,cAAc,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9F,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE,CAAA;QACpE,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,GAAG,KAAK,EAAE,CAAA;IAC5F,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,6GAA6G,CAC7G,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,yCAAyC,MAAM,CAAC,SAAS,KAAK,OAAO,gCAAgC,CACrG,CAAA;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACrB,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAA;IACxF,CAAC;AACF,CAAC"}

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG"}

package/dist/cli.js

@@ -27,17 +27,16 @@
  * re-reads the config on the first event of the run, so an answer given here is
  * already in force for the very run that asked it.
  */
-import { existsSync, statSync } from 'node:fs';
 import { readFile } from 'node:fs/promises';
 import { createRequire } from 'node:module';
 import os from 'node:os';
-import path from 'node:path';
 import * as readline from 'node:readline/promises';
 import { program } from 'commander';
 import { runAmoSource } from './amo-source.js';
-import { evidenceBrowsers, generatedListingEvidence, listingEvidence, permissionsEvidence, recordAutoEvidence, scanEvidence, sha256Hex, smokeEvidence, } from './auto-evidence.js';
+import { assertEvidenceBinding, evidenceArtifact, evidenceBrowsers, generatedListingEvidence, listingEvidence, permissionsEvidence, recordAutoEvidence, recordScreenshotsEvidence, scanEvidence, screenshotsEvidence, screenshotsEvidencePlan, smokeEvidence, } from './auto-evidence.js';
 import { checkAutoUpdate } from './auto-update.js';
 import { CONFIG_PATH, loadConfig, readTelemetryPreference, saveConfig, saveTelemetryPreference, } from './config.js';
+import { runDomainAdd, runDomainRemove, runDomainStatus, runDomainVerify } from './domain.js';
 import { registerEvidenceIngest } from './evidence-ingest.js';
 import { InvalidInputError, isExpectedError } from './expected-error.js';
 import { runGenerateListing } from './generate-listing.js';
@@ -49,7 +48,7 @@ import { runBrowserLogin } from './login-flow.js';
 import { openBrowser, openLoopback, sleep } from './login-runtime.js';
 import { runMediaUpload } from './media.js';
 import { parsePackageBrowsers, resolvePackagedArtifact, runPackage } from './package.js';
-import { runPageGenerate, runPagePublish, runPageRegister, runPageUnpublish } from './page.js';
+import { runPageDraft, runPageGenerate, runPagePreview, runPagePublish, runPageRegister, runPageRollback, runPageUnpublish, runPageValidate, runPageVersions, } from './page.js';
 import { registerPayCommands } from './pay.js';
 import { registerPayTestCycle } from './pay-test-cycle.js';
 import { registerProjectCommands } from './project.js';
@@ -114,21 +113,6 @@ async function runCommand(command, action) {
         process.exit(1);
     }
 }
-/**
- * `--evidence` is checked BEFORE the work it attests: a paid scan that cannot
- * record its evidence afterwards would spend a credit for nothing.
- */
-function assertEvidenceBinding() {
-    if (!existsSync(path.join(process.cwd(), '.extenshi/project.json')))
-        throw new InvalidInputError('--evidence records against the project bound in this directory. Run extenshi project bind --project <id> --repo <owner/repo> first.');
-}
-/** Evidence binds to the exact package bytes, so it needs a package file, not an unpacked folder. */
-async function evidenceArtifact(artifact) {
-    if (!existsSync(artifact) || !statSync(artifact).isFile())
-        throw new InvalidInputError('--evidence binds to the exact package: pass the zip (e.g. from extenshi package), not an unpacked folder.');
-    const bytes = await readFile(artifact);
-    return { bytes, digest: sha256Hex(bytes) };
-}
 registerProjectCommands(program);
 registerPayTestCycle(registerPayCommands(program));
 registerEvidenceIngest(program, runCommand);
@@ -143,7 +127,7 @@ program
     .option('--output <path>', 'Path for the HTML report file (default: <artifact>-extenshi-report.html in the current directory; --format html only)')
     .option('--no-open', 'Do not open the HTML report in the browser after generating it')
     .option('--json', 'Shortcut for --format json (raw JSON to stdout)')
-    .option('--extension-id <id>', "Numeric catalog ID of a verified extension (required to spend free credits; see the Ownership tab in dojo). Paid credits don't need it.")
+    .option('--extension-id <id>', 'Numeric catalog ID of your extension — pulls its published listing for the listing checks and enables the auto-disable diff against the last published manifest. Optional: free and paid scans both run without it.')
     .option('--skip-preflight', 'Skip CI timeout pre-flight probe (use at your own risk)')
     .option('--no-stream', 'Disable live progress streaming; wait for a single final JSON response')
     .option('--api-url <url>', 'Override the scan API base URL (default: https://scan.extenshi.io)')
@@ -290,7 +274,7 @@ program
     'Your build never leaves your machine: it reads the manifest and listing text locally, ' +
     'with no API key. Pass --extension-id to also diff against your last published manifest ' +
     '(that sends the id, not the build).')
-    .option('--extension-id <id>', 'Numeric catalog ID — enables the auto-disable diff against the last published manifest (Ownership tab in dojo)')
+    .option('--extension-id <id>', 'Numeric catalog ID (the number in its catalog URL) — enables the auto-disable diff against the last published manifest')
     .option('--catalog-url <url>', 'Override the catalog BFF base URL (default: https://bff.extenshi.io)')
     .option('--store <store>', 'Store to diff the manifest against: chrome | firefox | edge (default: chrome). Permission sets differ per store.')
     .option('--listing <file>', 'JSON file with your store listing text (name / shortDescription / description, optionally per locale). ' +
@@ -635,9 +619,17 @@ program
     .option('--small', "Each store's smaller size: Chrome 640×400, Edge 640×480, AMO 640×400")
     .option('--headed', 'Show the browser window (debugging scenes)')
     .option('--json', 'Print the result as JSON')
+    .option('--evidence', 'Record `screenshots` evidence per shot locale and store for the project bound here (extenshi project bind), ' +
+    "bound to this zip and to --listing, with that store's PNGs attached (private storage). Needs a packaged zip, not a folder.")
+    .option('--listing <file>', 'With --evidence: the listing revision these screenshots illustrate — the file you give release prepare --listing')
+    .option('--evidence-browser <list>', 'Store(s) the evidence is for: chrome,edge,firefox (default: --store, else the extenshi-packages.json next to the zip); each must be shot')
     .action(async (extension, opts) => {
     await runCommand('screenshots', async () => {
-        await runScreenshotsCommand(extension, opts);
+        // Settled before Chromium starts, so a run that cannot be recorded is not shot.
+        const evidence = opts.evidence ? await screenshotsEvidencePlan({ extension, ...opts }) : undefined;
+        const result = await runScreenshotsCommand(extension, opts);
+        if (evidence)
+            await recordScreenshotsEvidence(screenshotsEvidence({ ...evidence, result }), result.files);
     });
 });
 program
@@ -686,8 +678,8 @@ page
 });
 page
     .command('publish')
-    .description('Host the landing page on extenshi.io (page.extenshi.io/<code>, or /landing on your active custom ' +
-    'domain) from the same JSON config as `page generate`. Republishing keeps the URL. Also registers it ' +
+    .description('Host the landing page on extenshi.io (page.extenshi.io/<code>, or the root of your active custom ' +
+    'domain) from the same JSON config as `page generate` (v1, or schema v2 from `page draft`). Republishing keeps the URL. Also registers it ' +
     'as the project homepage unless --no-homepage. Screenshots must be https store/Dojo images. ' +
     'Requires an API key (extenshi login).')
     .requiredOption('--project <id>', 'Dojo project ID (UUID)')
@@ -700,6 +692,70 @@ page
         await runPagePublish(opts);
     });
 });
+page
+    .command('draft')
+    .description('Draft a full homepage (schema v2: sections, theme, SEO, locales) from the project state on extenshi.io — ' +
+    'manifest and its translations, the published page, project media, Pay offers, hosted privacy/uninstall/' +
+    'terms pages — and write it as a config for `page preview` / `page publish`. Prints where each field ' +
+    'came from and what only you can add. Writes nothing on the server. Requires an API key.')
+    .requiredOption('--project <id>', 'Dojo project ID (UUID)')
+    .option('--out <landing.json>', 'Where to write the config', 'landing.json')
+    .option('--chrome-url <url>', 'Chrome Web Store listing URL (when the project does not know it yet)')
+    .option('--firefox-url <url>', 'Firefox Add-ons listing URL')
+    .option('--edge-url <url>', 'Edge Add-ons listing URL')
+    .action(async (opts) => {
+    await runCommand('page draft', async () => {
+        await runPageDraft(opts);
+    });
+});
+page
+    .command('preview')
+    .description('Validate and render a config exactly as `page publish` would (image hosts, store locales, Pay offer ' +
+    'prices, canonical URL) without publishing. Writes the page to --out; exits non-zero with every problem ' +
+    'and its fix when publish would refuse it. --screenshot saves a full-page PNG (needs Playwright + ' +
+    'Chromium, as for `extenshi screenshots`). Requires an API key.')
+    .requiredOption('--project <id>', 'Dojo project ID (UUID)')
+    .requiredOption('--config <landing.json>', 'Landing config JSON')
+    .option('--locale <locale>', 'Which locale page to render (default: the default locale)')
+    .option('--out <path>', 'Where to write the rendered HTML', 'preview.html')
+    .option('--screenshot <png>', 'Also save a full-page screenshot')
+    .option('--logo <file>', 'Logo: .svg or .png/.jpg/.webp/.gif (≤256 KiB)')
+    .action(async (opts) => {
+    await runCommand('page preview', async () => {
+        await runPagePreview(opts);
+    });
+});
+page
+    .command('validate')
+    .description('Check a landing config against the shared rules offline (sections, attribution, fonts, colours, locales, ' +
+    'SEO) and print every problem with its fix. Hosted-only rules need `page preview`. No API key.')
+    .requiredOption('--config <landing.json>', 'Landing config JSON')
+    .action(async (opts) => {
+    await runCommand('page validate', async () => {
+        await runPageValidate(opts);
+    });
+});
+page
+    .command('versions')
+    .description('Version history of the hosted landing page (newest first; which one is live, why each exists).')
+    .requiredOption('--project <id>', 'Dojo project ID (UUID)')
+    .action(async (opts) => {
+    await runCommand('page versions', async () => {
+        await runPageVersions(opts);
+    });
+});
+page
+    .command('rollback')
+    .description('Restore an earlier version of the hosted landing page. It is published as a new version (history stays ' +
+    "append-only), re-rendered with today's URL and Pay prices.")
+    .requiredOption('--project <id>', 'Dojo project ID (UUID)')
+    .requiredOption('--version <n>', 'Version number to restore (see `extenshi page versions`)')
+    .option('--no-homepage', 'Do not register the URL as the project homepage')
+    .action(async (opts) => {
+    await runCommand('page rollback', async () => {
+        await runPageRollback(opts);
+    });
+});
 page
     .command('unpublish')
     .description('Take the hosted landing page offline (404). The URL returns on the next publish; a homepage ' +
@@ -710,6 +766,48 @@ page
         await runPageUnpublish(opts);
     });
 });
+const domain = program
+    .command('domain')
+    .description('Custom domain for the project homepage (served at the domain root) and every hosted page — Pro, one ' +
+    'hostname per project. Prints the exact DNS records; nothing is served until ownership (TXT) and the ' +
+    'HTTPS certificate are verified.');
+domain
+    .command('add')
+    .description('Add www.example.com (or the apex) and print the CNAME + TXT records to set')
+    .requiredOption('--project <id>', 'Dojo project ID (UUID)')
+    .requiredOption('--hostname <host>', 'e.g. www.example.com')
+    .action(async (opts) => {
+    await runCommand('domain add', async () => {
+        await runDomainAdd(opts);
+    });
+});
+domain
+    .command('status')
+    .description('Show the domain, its verification state, the DNS records and the next step')
+    .requiredOption('--project <id>', 'Dojo project ID (UUID)')
+    .action(async (opts) => {
+    await runCommand('domain status', async () => {
+        await runDomainStatus(opts);
+    });
+});
+domain
+    .command('verify')
+    .description('Check ownership and the certificate now; on ACTIVE the homepage moves to the domain root and HOMEPAGE_URL follows')
+    .requiredOption('--project <id>', 'Dojo project ID (UUID)')
+    .action(async (opts) => {
+    await runCommand('domain verify', async () => {
+        await runDomainVerify(opts);
+    });
+});
+domain
+    .command('remove')
+    .description('Stop serving the custom domain; the homepage returns to page.extenshi.io')
+    .requiredOption('--project <id>', 'Dojo project ID (UUID)')
+    .action(async (opts) => {
+    await runCommand('domain remove', async () => {
+        await runDomainRemove(opts);
+    });
+});
 /**
  * Change or inspect the answer to the first-run telemetry question.
  *