@extension.dev/deploy 0.1.0 → 0.2.0

package/dist/module.mjs

@@ -1,6 +1,9 @@
+import external_node_fs_default from "node:fs";
+import external_node_path_default from "node:path";
 import { z } from "zod";
 import promises_default from "node:fs/promises";
 import external_node_crypto_default from "node:crypto";
+import external_node_readline_default from "node:readline";
 const chromeOptionsSchema = z.object({
     zip: z.string().min(1),
     extensionId: z.string().min(1).trim(),
@@ -883,4 +886,576 @@ async function runWatchLoop(_store, probe, options) {
         await delay(pollInterval);
     }
 }
-export { chromeOptionsSchema, deploy, deployConfigSchema, edgeOptionsSchema, firefoxOptionsSchema, getChromeSubmissionEvent, getEdgeSubmissionEvent, getFirefoxSubmissionEvent, resolveConfig, validateConfig, verifyChromeCredentials, verifyEdgeCredentials, verifyFirefoxCredentials, watchChromeSubmission, watchEdgeSubmission, watchFirefoxSubmission };
+const STORE_CHOICES = [
+    {
+        value: "chrome",
+        label: "Chrome Web Store"
+    },
+    {
+        value: "firefox",
+        label: "Firefox AMO (addons.mozilla.org)"
+    },
+    {
+        value: "edge",
+        label: "Edge Add-ons (Partner Center)"
+    }
+];
+const CHROME_OAUTH_TOKEN_URL = "https://oauth2.googleapis.com/token";
+const CHROME_OAUTH_AUTH_URL = "https://accounts.google.com/o/oauth2/auth";
+const CHROME_OOB_REDIRECT = "urn:ietf:wg:oauth:2.0:oob";
+const CHROME_SCOPE = "https://www.googleapis.com/auth/chromewebstore";
+async function runInit(deps, options = {}) {
+    const { io } = deps;
+    io.log("");
+    io.log("extension-deploy init \u2014 set up store credentials");
+    io.log("");
+    io.log("This wizard walks you through creating credentials for each store and");
+    io.log("writes them to a .env.submit file. Press Ctrl+C at any time to abort.");
+    io.log("");
+    const stores = options.stores ? options.stores : await io.multiselect("Which stores do you want to configure?", STORE_CHOICES);
+    if (0 === stores.length) throw new Error("init: at least one store must be selected. Use --init-stores chrome,firefox,edge or make a selection.");
+    const envLines = [
+        "# Generated by `extension-deploy init`.",
+        "# Do not commit secrets to source control.",
+        ""
+    ];
+    const verified = {};
+    for (const store of stores){
+        io.log("");
+        io.log(`=== ${labelFor(store)} ===`);
+        io.log("");
+        if ("chrome" === store) {
+            const creds = await collectChromeCredentials(deps);
+            envLines.push(`CHROME_EXTENSION_ID=${creds.extensionId}`, `CHROME_CLIENT_ID=${creds.clientId}`, `CHROME_CLIENT_SECRET=${creds.clientSecret}`, `CHROME_REFRESH_TOKEN=${creds.refreshToken}`, "");
+            if (!options.skipVerify) {
+                const verify = deps.verifyChrome ?? verifyChromeCredentials;
+                verified.chrome = normalizeVerify(await verify(creds));
+                logVerify(io, "chrome", verified.chrome);
+            }
+        } else if ("firefox" === store) {
+            const creds = await collectFirefoxCredentials(deps);
+            envLines.push(`FIREFOX_EXTENSION_ID=${creds.addonId}`, `FIREFOX_JWT_ISSUER=${creds.jwtIssuer}`, `FIREFOX_JWT_SECRET=${creds.jwtSecret}`, "");
+            if (!options.skipVerify) {
+                const verify = deps.verifyFirefox ?? verifyFirefoxCredentials;
+                verified.firefox = normalizeVerify(await verify({
+                    jwtIssuer: creds.jwtIssuer,
+                    jwtSecret: creds.jwtSecret,
+                    addonId: creds.addonId
+                }));
+                logVerify(io, "firefox", verified.firefox);
+            }
+        } else {
+            const creds = await collectEdgeCredentials(deps);
+            envLines.push(`EDGE_PRODUCT_ID=${creds.productId}`, `EDGE_CLIENT_ID=${creds.clientId}`, `EDGE_API_KEY=${creds.apiKey}`, "");
+            if (!options.skipVerify) {
+                const verify = deps.verifyEdge ?? verifyEdgeCredentials;
+                verified.edge = normalizeVerify(await verify({
+                    clientId: creds.clientId,
+                    apiKey: creds.apiKey,
+                    productId: creds.productId
+                }));
+                logVerify(io, "edge", verified.edge);
+            }
+        }
+    }
+    const envContent = envLines.join("\n");
+    const envPath = resolveEnvPath(deps.cwd, options.outputPath);
+    const exists = await deps.fileExists(envPath);
+    let wrote = false;
+    if (exists && !options.force) {
+        const overwrite = await deps.io.confirm(`${envPath} already exists. Overwrite?`, false);
+        if (overwrite) {
+            await deps.writeFile(envPath, envContent);
+            wrote = true;
+        } else {
+            io.log("");
+            io.log(`Skipped writing ${envPath}. Credential block:`);
+            io.log("");
+            io.log(envContent);
+        }
+    } else {
+        await deps.writeFile(envPath, envContent);
+        wrote = true;
+    }
+    if (wrote) {
+        io.log("");
+        io.log(`Wrote ${envPath}`);
+        io.log("");
+        io.log("Next steps:");
+        io.log("  - Add .env.submit to .gitignore if it isn't already (it contains secrets).");
+        io.log("  - Run `extension-deploy --dry-run` to sanity-check the full submit flow.");
+        io.log("");
+    }
+    return {
+        stores,
+        envPath,
+        envContent,
+        verified,
+        wrote
+    };
+}
+async function collectChromeCredentials(deps) {
+    const { io } = deps;
+    io.log("Chrome Web Store needs OAuth credentials. You'll need:");
+    io.log("  1. A Google Cloud project with the Chrome Web Store API enabled:");
+    io.log("     https://console.cloud.google.com/apis/library/chromewebstore.googleapis.com");
+    io.log("  2. OAuth 2.0 credentials (application type: Desktop app):");
+    io.log("     https://console.cloud.google.com/apis/credentials");
+    io.log("  3. Your extension ID from the Chrome Web Store Developer Dashboard.");
+    io.log("");
+    io.log("This wizard will take your Client ID + Secret and walk you through");
+    io.log("generating a refresh token automatically.");
+    io.log("");
+    const extensionId = await requireValue(io, "Chrome extension ID", "(32-character ID from the CWS dashboard URL)");
+    const clientId = await requireValue(io, "OAuth Client ID");
+    const clientSecret = await requireValue(io, "OAuth Client Secret", void 0, {
+        secret: true
+    });
+    const refreshToken = await obtainChromeRefreshToken(deps, clientId, clientSecret);
+    return {
+        extensionId,
+        clientId,
+        clientSecret,
+        refreshToken
+    };
+}
+function buildChromeAuthUrl(clientId) {
+    const params = new URLSearchParams({
+        response_type: "code",
+        client_id: clientId,
+        redirect_uri: CHROME_OOB_REDIRECT,
+        scope: CHROME_SCOPE,
+        access_type: "offline",
+        prompt: "consent"
+    });
+    return `${CHROME_OAUTH_AUTH_URL}?${params.toString()}`;
+}
+async function exchangeChromeAuthCode(input) {
+    const fetchFn = input.fetchImpl ?? fetch;
+    const body = new URLSearchParams({
+        code: input.authCode,
+        client_id: input.clientId,
+        client_secret: input.clientSecret,
+        redirect_uri: CHROME_OOB_REDIRECT,
+        grant_type: "authorization_code"
+    });
+    const res = await fetchFn(CHROME_OAUTH_TOKEN_URL, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: body.toString()
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(()=>"");
+        throw new Error(`Chrome token exchange failed (HTTP ${res.status}): ${text || res.statusText}`);
+    }
+    const json = await res.json();
+    if (!json.refresh_token) throw new Error(`Chrome token exchange returned no refresh_token${json.error ? `: ${json.error} \u{2014} ${json.error_description ?? ""}` : ""}. This usually means the authorization code was already used or expired; try the init wizard again.`);
+    return json.refresh_token;
+}
+async function obtainChromeRefreshToken(deps, clientId, clientSecret) {
+    const { io } = deps;
+    const authUrl = buildChromeAuthUrl(clientId);
+    io.log("");
+    io.log("Open the URL below in your browser, approve the scope, and paste the");
+    io.log("authorization code shown on the page:");
+    io.log("");
+    io.log(`  ${authUrl}`);
+    io.log("");
+    const authCode = await requireValue(io, "Authorization code", void 0, {
+        secret: true
+    });
+    return exchangeChromeAuthCode({
+        clientId,
+        clientSecret,
+        authCode,
+        fetchImpl: deps.fetchImpl
+    });
+}
+async function collectFirefoxCredentials(deps) {
+    const { io } = deps;
+    io.log("Firefox AMO needs JWT API credentials:");
+    io.log("  1. Sign in at https://addons.mozilla.org");
+    io.log("  2. Create API credentials at https://addons.mozilla.org/developers/addon/api/key/");
+    io.log("  3. Copy the JWT issuer and JWT secret (the secret is only shown once).");
+    io.log("");
+    const addonId = await requireValue(io, "Firefox addon ID", "({uuid} GUID or email-style ID from your addon page)");
+    const jwtIssuer = await requireValue(io, "JWT issuer");
+    const jwtSecret = await requireValue(io, "JWT secret", void 0, {
+        secret: true
+    });
+    return {
+        addonId,
+        jwtIssuer,
+        jwtSecret
+    };
+}
+async function collectEdgeCredentials(deps) {
+    const { io } = deps;
+    io.log("Edge Partner Center needs the v1.1 API credentials:");
+    io.log("  1. Open the Partner Center dashboard: https://partner.microsoft.com/dashboard/microsoftedge/overview");
+    io.log("  2. Under your extension, go to Settings \u2192 API access \u2192 API v1.1 and generate credentials.");
+    io.log("  3. Copy the Client ID, API key, and Product ID.");
+    io.log("");
+    const productId = await requireValue(io, "Edge product ID");
+    const clientId = await requireValue(io, "Edge client ID");
+    const apiKey = await requireValue(io, "Edge API key", void 0, {
+        secret: true
+    });
+    return {
+        productId,
+        clientId,
+        apiKey
+    };
+}
+function labelFor(store) {
+    var _STORE_CHOICES_find;
+    return (null == (_STORE_CHOICES_find = STORE_CHOICES.find((c)=>c.value === store)) ? void 0 : _STORE_CHOICES_find.label) ?? String(store);
+}
+function normalizeVerify(result) {
+    return {
+        ok: result.ok,
+        message: result.message
+    };
+}
+function logVerify(io, store, record) {
+    const marker = record.ok ? "[ok]" : "[fail]";
+    io.log(`  ${marker} verify ${store}: ${record.message}`);
+}
+function resolveEnvPath(cwd, outputPath) {
+    const target = outputPath ?? ".env.submit";
+    return external_node_path_default.isAbsolute(target) ? target : external_node_path_default.join(cwd, target);
+}
+async function requireValue(io, label, hint, opts) {
+    const question = hint ? `${label} ${hint}:` : `${label}:`;
+    for(let attempt = 0; attempt < 3; attempt++){
+        const answer = (await io.prompt(question, opts)).trim();
+        if (answer) return answer;
+        io.log(`  ${label} is required.`);
+    }
+    throw new Error(`init: ${label} is required.`);
+}
+function createStdinIO() {
+    const rl = external_node_readline_default.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+        terminal: false
+    });
+    const lineIter = rl[Symbol.asyncIterator]();
+    async function readLine() {
+        const { value, done } = await lineIter.next();
+        if (done) return "";
+        return value;
+    }
+    function write(chunk) {
+        process.stdout.write(chunk);
+    }
+    return {
+        async prompt (question, opts) {
+            const suffix = (null == opts ? void 0 : opts.default) ? ` [${opts.default}]` : "";
+            const secretNote = (null == opts ? void 0 : opts.secret) ? " (input visible)" : "";
+            write(`${question}${suffix}${secretNote} `);
+            const answer = await readLine();
+            if (0 === answer.length && (null == opts ? void 0 : opts.default)) return opts.default;
+            return answer;
+        },
+        async confirm (question, defaultValue = false) {
+            const suffix = defaultValue ? "[Y/n]" : "[y/N]";
+            write(`${question} ${suffix} `);
+            const raw = (await readLine()).trim().toLowerCase();
+            if ("" === raw) return defaultValue;
+            return "y" === raw || "yes" === raw;
+        },
+        async multiselect (question, choices) {
+            write(`${question}\n`);
+            choices.forEach((choice, idx)=>{
+                write(`  ${idx + 1}) ${choice.label}\n`);
+            });
+            write('  Enter comma-separated numbers (e.g. 1,2 or "all"): ');
+            const raw = (await readLine()).trim().toLowerCase();
+            if ("all" === raw) return choices.map((c)=>c.value);
+            const indices = raw.split(/[,\s]+/).map((token)=>Number.parseInt(token, 10)).filter((n)=>Number.isInteger(n) && n >= 1 && n <= choices.length);
+            const unique = Array.from(new Set(indices));
+            return unique.map((i)=>choices[i - 1].value);
+        },
+        log (message) {
+            write(`${message}\n`);
+        },
+        dispose () {
+            rl.close();
+        }
+    };
+}
+const stdinFs = {
+    async writeFile (filePath, content) {
+        await promises_default.writeFile(filePath, content, "utf-8");
+    },
+    async fileExists (filePath) {
+        try {
+            await promises_default.access(filePath);
+            return true;
+        } catch  {
+            return false;
+        }
+    }
+};
+function usage() {
+    return `
+extension-deploy \u{2014} Deploy browser extensions to Chrome, Firefox, and Edge.
+
+USAGE
+  extension-deploy [options]                    submit to one or more stores
+  extension-deploy init [options]               interactive credential setup wizard
+  extension-deploy watch --chrome [options]     poll an in-flight submission
+  extension-deploy watch --firefox [options]
+  extension-deploy watch --edge [options]
+
+GLOBAL
+  --dry-run                 Verify auth without uploading or publishing
+  --output-json <path>      Write the DeployResult / WatchEvent as JSON to <path>
+  --help                    Show this help message
+
+CHROME
+  --chrome-zip <path>               Path to Chrome extension ZIP
+  --chrome-extension-id <id>        Chrome extension ID
+  --chrome-client-id <id>           OAuth2 client ID
+  --chrome-client-secret <secret>   OAuth2 client secret
+  --chrome-refresh-token <token>    OAuth2 refresh token
+  --chrome-publish-target <target>  "default" or "trustedTesters"
+  --chrome-deploy-percentage <n>    Staged rollout percentage (1-100)
+  --chrome-review-exemption         Request expedited review
+  --chrome-skip-submit-review       Upload only, skip publish
+
+FIREFOX
+  --firefox-zip <path>              Path to Firefox extension ZIP
+  --firefox-sources-zip <path>      Path to sources ZIP (optional)
+  --firefox-extension-id <id>       Addon GUID or email-style ID
+  --firefox-jwt-issuer <issuer>     AMO JWT issuer
+  --firefox-jwt-secret <secret>     AMO JWT secret
+  --firefox-channel <channel>       "listed" or "unlisted"
+
+EDGE
+  --edge-zip <path>                 Path to Edge extension ZIP
+  --edge-product-id <id>            Partner Center product ID
+  --edge-client-id <id>             Partner Center client ID
+  --edge-api-key <key>              Partner Center API key (v1.1)
+  --edge-skip-submit-review         Upload only, skip publish
+
+WATCH
+  --watch-submission-id <id>        Required for firefox/edge (version id / operation id)
+  --watch-interval <seconds>        Poll interval (default 60)
+  --watch-timeout <seconds>         Max time to wait for a terminal state (default 3600)
+
+INIT
+  --init-stores <list>              Comma-separated store list (skip picker)
+  --init-output <path>              Destination file (default .env.submit)
+  --init-skip-verify                Don't run verifyCredentials after collection
+  --init-force                      Overwrite existing .env.submit without asking
+
+ENVIRONMENT VARIABLES
+  All flags can be set via SCREAMING_SNAKE_CASE env vars (e.g. CHROME_ZIP,
+  FIREFOX_JWT_SECRET, EDGE_API_KEY). Flags take precedence over env vars.
+  A .env.submit file in the current directory is loaded automatically.
+`.trim();
+}
+const BOOLEAN_FLAGS = new Set([
+    "help",
+    "dryRun",
+    "chromeReviewExemption",
+    "chromeSkipSubmitReview",
+    "edgeSkipSubmitReview",
+    "initSkipVerify",
+    "initForce"
+]);
+const INT_FLAGS = new Set([
+    "chromeDeployPercentage",
+    "watchInterval",
+    "watchTimeout"
+]);
+function parseArgs(argv) {
+    const flags = {};
+    let i = 0;
+    if ("watch" === argv[0]) {
+        flags.command = "watch";
+        i = 1;
+    } else if ("init" === argv[0]) {
+        flags.command = "init";
+        i = 1;
+    }
+    while(i < argv.length){
+        const arg = argv[i];
+        if ("--help" === arg || "-h" === arg) {
+            flags.help = true;
+            i++;
+            continue;
+        }
+        if ("--chrome" === arg) {
+            flags.watchStore = "chrome";
+            i++;
+            continue;
+        }
+        if ("--firefox" === arg) {
+            flags.watchStore = "firefox";
+            i++;
+            continue;
+        }
+        if ("--edge" === arg) {
+            flags.watchStore = "edge";
+            i++;
+            continue;
+        }
+        if (!(null == arg ? void 0 : arg.startsWith("--"))) {
+            i++;
+            continue;
+        }
+        const key = arg.slice(2).replace(/-([a-z])/g, (_, c)=>c.toUpperCase());
+        if (BOOLEAN_FLAGS.has(key)) {
+            flags[key] = true;
+            i++;
+            continue;
+        }
+        const next = argv[i + 1];
+        if (null == next || next.startsWith("--")) {
+            flags[key] = true;
+            i++;
+            continue;
+        }
+        flags[key] = INT_FLAGS.has(key) ? parseInt(next, 10) : next;
+        i += 2;
+    }
+    return flags;
+}
+function loadDotEnv() {
+    try {
+        const envPath = external_node_path_default.resolve(process.cwd(), ".env.submit");
+        const content = external_node_fs_default.readFileSync(envPath, "utf-8");
+        for (const line of content.split("\n")){
+            const trimmed = line.trim();
+            if (!trimmed || trimmed.startsWith("#")) continue;
+            const eqIdx = trimmed.indexOf("=");
+            if (-1 === eqIdx) continue;
+            const key = trimmed.slice(0, eqIdx).trim();
+            let value = trimmed.slice(eqIdx + 1).trim();
+            if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) value = value.slice(1, -1);
+            if (!(key in process.env)) process.env[key] = value;
+        }
+    } catch  {}
+}
+function writeJsonOutput(filePath, payload) {
+    external_node_fs_default.mkdirSync(external_node_path_default.dirname(external_node_path_default.resolve(filePath)), {
+        recursive: true
+    });
+    external_node_fs_default.writeFileSync(filePath, JSON.stringify(payload, null, 2) + "\n", "utf-8");
+}
+async function main() {
+    loadDotEnv();
+    const flags = parseArgs(process.argv.slice(2));
+    if (flags.help) {
+        console.log(usage());
+        process.exit(0);
+    }
+    if ("watch" === flags.command) return void await runWatch(flags);
+    if ("init" === flags.command) return void await runInitCommand(flags);
+    const config = resolveConfig(flags);
+    try {
+        const result = await deploy(config);
+        if (flags.outputJson) writeJsonOutput(flags.outputJson, result);
+        if (!result.success) process.exit(1);
+    } catch (err) {
+        console.error(err instanceof Error ? err.message : err);
+        process.exit(1);
+    }
+}
+async function runWatch(flags) {
+    const store = flags.watchStore;
+    if (!store) {
+        console.error("watch: one of --chrome, --firefox, or --edge must be provided.");
+        process.exit(2);
+    }
+    const onEvent = (event)=>{
+        const line = `[watch:${event.store}] ${event.status}${event.nativeStatus ? ` (${event.nativeStatus})` : ""}${event.message ? ` \u{2014} ${event.message}` : ""}`;
+        console.log(line);
+    };
+    const pollIntervalMs = (flags.watchInterval ?? 60) * 1000;
+    const timeoutMs = (flags.watchTimeout ?? 3600) * 1000;
+    let terminal;
+    try {
+        terminal = "chrome" === store ? await watchChromeSubmission({
+            clientId: mustEnv("CHROME_CLIENT_ID", flags.chromeClientId),
+            clientSecret: mustEnv("CHROME_CLIENT_SECRET", flags.chromeClientSecret),
+            refreshToken: mustEnv("CHROME_REFRESH_TOKEN", flags.chromeRefreshToken),
+            extensionId: mustEnv("CHROME_EXTENSION_ID", flags.chromeExtensionId)
+        }, {
+            pollIntervalMs,
+            timeoutMs,
+            onEvent
+        }) : "firefox" === store ? await watchFirefoxSubmission({
+            jwtIssuer: mustEnv("FIREFOX_JWT_ISSUER", flags.firefoxJwtIssuer),
+            jwtSecret: mustEnv("FIREFOX_JWT_SECRET", flags.firefoxJwtSecret),
+            extensionId: mustEnv("FIREFOX_EXTENSION_ID", flags.firefoxExtensionId),
+            versionId: mustValue("--watch-submission-id", flags.watchSubmissionId)
+        }, {
+            pollIntervalMs,
+            timeoutMs,
+            onEvent
+        }) : await watchEdgeSubmission({
+            clientId: mustEnv("EDGE_CLIENT_ID", flags.edgeClientId),
+            apiKey: mustEnv("EDGE_API_KEY", flags.edgeApiKey),
+            productId: mustEnv("EDGE_PRODUCT_ID", flags.edgeProductId),
+            operationId: mustValue("--watch-submission-id", flags.watchSubmissionId)
+        }, {
+            pollIntervalMs,
+            timeoutMs,
+            onEvent
+        });
+    } catch (err) {
+        console.error(err instanceof Error ? err.message : err);
+        process.exit(1);
+    }
+    if (flags.outputJson) writeJsonOutput(flags.outputJson, terminal);
+    if ("failed" === terminal.status || "rejected" === terminal.status) process.exit(1);
+}
+function mustEnv(envName, flagValue) {
+    const v = flagValue ?? process.env[envName];
+    if (!v) throw new Error(`Missing required credential: ${envName}. Set the env var or pass the matching flag.`);
+    return v;
+}
+function mustValue(flagName, value) {
+    if (!value) throw new Error(`Missing required flag: ${flagName}`);
+    return value;
+}
+async function runInitCommand(flags) {
+    const stores = parseInitStores(flags.initStores);
+    const io = createStdinIO();
+    try {
+        await runInit({
+            io,
+            cwd: process.cwd(),
+            writeFile: stdinFs.writeFile,
+            fileExists: stdinFs.fileExists
+        }, {
+            stores,
+            outputPath: flags.initOutput,
+            skipVerify: flags.initSkipVerify,
+            force: flags.initForce
+        });
+    } catch (err) {
+        console.error(err instanceof Error ? err.message : err);
+        process.exit(1);
+    } finally{
+        io.dispose();
+    }
+}
+function parseInitStores(raw) {
+    if (!raw) return;
+    const allowed = [
+        "chrome",
+        "firefox",
+        "edge"
+    ];
+    const parsed = raw.split(",").map((s)=>s.trim().toLowerCase()).filter((s)=>allowed.includes(s));
+    if (0 === parsed.length) throw new Error(`--init-stores: expected a comma-separated list of chrome,firefox,edge (got "${raw}")`);
+    return parsed;
+}
+export { chromeOptionsSchema, deploy, deployConfigSchema, edgeOptionsSchema, firefoxOptionsSchema, getChromeSubmissionEvent, getEdgeSubmissionEvent, getFirefoxSubmissionEvent, main, resolveConfig, validateConfig, verifyChromeCredentials, verifyEdgeCredentials, verifyFirefoxCredentials, watchChromeSubmission, watchEdgeSubmission, watchFirefoxSubmission };

package/dist/src/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AA2EzC,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CA8D3D;AAiCD,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CA4B1C"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAsFzC,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiE3D;AAiCD,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAiC1C"}

package/dist/src/config.d.ts

@@ -34,8 +34,8 @@ export interface CliFlags {
     dryRun: boolean;
     /** Path to write the final DeployResult as JSON (for CI integration). */
     outputJson: string;
-    /** Subcommand: "deploy" (default) or "watch". */
-    command: "deploy" | "watch";
+    /** Subcommand: "deploy" (default), "watch", or "init". */
+    command: "deploy" | "watch" | "init";
     /** Store targeted by the watch subcommand. */
     watchStore: "chrome" | "firefox" | "edge";
     /** Opaque submission ID (firefox version id, edge publish operation id). */
@@ -64,5 +64,13 @@ export interface CliFlags {
     edgeClientId: string;
     edgeApiKey: string;
     edgeSkipSubmitReview: boolean;
+    /** Comma-separated store list for non-interactive init (e.g. "chrome,firefox"). */
+    initStores: string;
+    /** Target file path for init (default ".env.submit"). */
+    initOutput: string;
+    /** Skip running verifyCredentials after collecting values. */
+    initSkipVerify: boolean;
+    /** Overwrite an existing .env.submit without prompting. */
+    initForce: boolean;
 }
 //# sourceMappingURL=config.d.ts.map

package/dist/src/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAEhE,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,GACvB,YAAY,CAiDd;AA2CD,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmB/C;AAiBD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC5B,8CAA8C;IAC9C,UAAU,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IAC1C,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,sBAAsB,EAAE,OAAO,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,OAAO,CAAC;CAC/B"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAEhE,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,GACvB,YAAY,CAiDd;AA2CD,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmB/C;AAiBD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,OAAO,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;IACrC,8CAA8C;IAC9C,UAAU,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IAC1C,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,sBAAsB,EAAE,OAAO,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,cAAc,EAAE,OAAO,CAAC;IACxB,2DAA2D;IAC3D,SAAS,EAAE,OAAO,CAAC;CACpB"}

package/dist/src/index.d.ts

@@ -1,3 +1,4 @@
+export { main } from "./cli";
 export { deploy } from "./deploy";
 export { resolveConfig, validateConfig } from "./config";
 export type { CliFlags } from "./config";

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACzD,YAAY,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,YAAY,EACV,QAAQ,EACR,aAAa,EACb,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACnD,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,YAAY,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACzD,YAAY,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,YAAY,EACV,QAAQ,EACR,aAAa,EACb,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACnD,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,YAAY,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,SAAS,CAAC"}

package/dist/src/init-io.d.ts

@@ -0,0 +1,21 @@
+import type { InitIO } from "./init";
+/**
+ * Production stdin-based IO for the init wizard.
+ *
+ * We consume stdin via a readline async iterator instead of rl.question().
+ * Under Node 23, question() against a non-TTY stdin hangs on the second
+ * sequential call — the line iterator works consistently for both TTY and
+ * piped stdin, which matters for CI / test / shell-pipeline use.
+ *
+ * We intentionally don't mask echo for secret prompts. The _writeToOutput
+ * trick is fragile and the downside is small: users on their own terminal.
+ * A note is printed so users aren't surprised.
+ */
+export declare function createStdinIO(): InitIO & {
+    dispose: () => void;
+};
+export declare const stdinFs: {
+    writeFile(filePath: string, content: string): Promise<void>;
+    fileExists(filePath: string): Promise<boolean>;
+};
+//# sourceMappingURL=init-io.d.ts.map

package/dist/src/init-io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-io.d.ts","sourceRoot":"","sources":["../../src/init-io.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAgB,MAAM,QAAQ,CAAC;AAEnD;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CA4DhE;AAED,eAAO,MAAM,OAAO;wBACQ,MAAM,WAAW,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;yBAGtC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAQrD,CAAC"}