@better-update/cli 0.3.0 → 0.4.0

package/package.json

@@ -1,24 +1,24 @@
 {
   "name": "@better-update/cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "bin": {
-    "better-update": "./src/index.ts"
+    "better-update": "./dist/index.js"
   },
+  "files": [
+    "dist"
+  ],
   "type": "module",
+  "main": "./dist/index.js",
   "exports": {
-    ".": "./src/index.ts"
+    ".": "./dist/index.js"
   },
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
-    "@better-update/api": "0.1.0",
-    "@better-update/encoding": "0.0.1",
-    "@better-update/expo-protocol": "0.0.1",
-    "@better-update/safe-json": "0.0.1",
     "@effect/cli": "^0.75.1",
     "@effect/platform": "^0.96.0",
-    "@effect/platform-bun": "^0.89.0",
+    "@effect/platform-node": "^0.106.0",
     "@expo/apple-utils": "^2.1.21",
     "@expo/config": "^55.0.15",
     "@expo/pkcs12": "^0.4.2",
@@ -32,5 +32,8 @@
   "optionalDependencies": {
     "keychain": "^1.5.0"
   },
-  "gitHead": "64a0b8c3b55a6d8aecbfa2d3bee2716695936d03"
+  "engines": {
+    "node": ">=22"
+  },
+  "gitHead": "b0814ea80e9c4e24598e3e1b43b0c8775337cb64"
 }

package/CHANGELOG.md

@@ -1,58 +0,0 @@
-# Change Log
-
-All notable changes to this project will be documented in this file.
-See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
-
-## 0.3.0 (2026-04-21)
-
-### Features
-
-* add CLI build command for local native iOS/Android builds ([97a3e73](https://github.com/better-update/better-update/commit/97a3e73501f120118e44087f2359696c5a913c9d)) - by @
-* add CLI package for project, credential, and env management ([07c0ff7](https://github.com/better-update/better-update/commit/07c0ff75d55f88bae94e4760625013b070896f36)) - by @
-* add CLI update publish command ([5f4268a](https://github.com/better-update/better-update/commit/5f4268a90bacb8a231bbc98ca92bd70452bcf02c)) - by @
-* **cli,server,dashboard:** close EAS Update feature gaps ([#4](https://github.com/better-update/better-update/issues/4), [#6](https://github.com/better-update/better-update/issues/6), [#7](https://github.com/better-update/better-update/issues/7), [#2](https://github.com/better-update/better-update/issues/2)) ([ecdc224](https://github.com/better-update/better-update/commit/ecdc22423f4117ab27ddac15e175329bf50c1031)) - by @
-* **cli,server:** integrate EAS CLI libraries, Apple auto-provisioning, and content-type-namespaced asset hashing ([ff3d881](https://github.com/better-update/better-update/commit/ff3d8812a27387e2331cc9e01741f4c01195e31a)) - by @
-* **cli:** add --rollout-percentage to update publish + schema-validated args ([e656e75](https://github.com/better-update/better-update/commit/e656e75685e4fe8f872d7495325f1bd8d6534cc8)) - by @
-* **cli:** add Android keystore certificate expiry validation ([78f3e46](https://github.com/better-update/better-update/commit/78f3e460e394632a0a39a6e3b5d7779b2dcd174d)) - by @
-* **cli:** add Apple App Store Connect provider selection ([0cd1894](https://github.com/better-update/better-update/commit/0cd189454eeed653826867411102b993d1fc1c9f)) - by @
-* **cli:** add full CLI coverage for all API groups ([9e05b10](https://github.com/better-update/better-update/commit/9e05b10152d27c9617288a0c182678aaec9d4864)) - by @
-* **repo:** add rollback-to-embedded flows ([f5fe1c4](https://github.com/better-update/better-update/commit/f5fe1c439ad7424dc671d84a7b81721e9b6976ad)) - by @
-* **repo:** add update lifecycle and credential flows ([f55cf5d](https://github.com/better-update/better-update/commit/f55cf5dea7874540fef6c9620ab8ced7c78e872f)) - by @
-* **repo:** expand build management coverage and dashboard details ([96d8d11](https://github.com/better-update/better-update/commit/96d8d11c41a171d67a3dad82d936c924a3e614c7)) - by @
-* **repo:** switch uploads to direct r2 flow ([736e7f1](https://github.com/better-update/better-update/commit/736e7f17d887a773b35038119981b31195b4f510)) - by @
-* **server,cli:** add build-credentials resolver with roster-hash gated profile regen ([e3a42f8](https://github.com/better-update/better-update/commit/e3a42f86eb7dfd6ec20edeafae6e1aae9c5f76ad)) - by @
-
-### Bug Fixes
-
-* **cli:** defer api client auth and repair e2e harness ([77de9db](https://github.com/better-update/better-update/commit/77de9db2a93facbfbdb859fe65b5307d1f56a29e)) - by @
-* **dashboard:** remove build upload UI and restrict uploads to CLI only ([278b011](https://github.com/better-update/better-update/commit/278b0117945a6b766171df0a74d1443b0710ab10)) - by @
-* **repo:** add knip dead code detection, fix timing-safe HMAC verification ([ef3e3b6](https://github.com/better-update/better-update/commit/ef3e3b6c6d936e85346ed2b0f53941e92cc8d226)) - by @
-* **repo:** harden update publish and republish flows ([5b2a7b7](https://github.com/better-update/better-update/commit/5b2a7b7dc164baf29bbe54db83174f3a1f09b503)) - by @
-* **repo:** stream update artifacts and enable signed promote flows ([4ed09f1](https://github.com/better-update/better-update/commit/4ed09f15909e44a68e597a28d00c7b0825448211)) - by @
-
-## 0.2.0 (2026-04-21)
-
-### Features
-
-* add CLI build command for local native iOS/Android builds ([97a3e73](https://github.com/better-update/better-update/commit/97a3e73501f120118e44087f2359696c5a913c9d)) - by @trancong12102
-* add CLI package for project, credential, and env management ([07c0ff7](https://github.com/better-update/better-update/commit/07c0ff75d55f88bae94e4760625013b070896f36)) - by @trancong12102
-* add CLI update publish command ([5f4268a](https://github.com/better-update/better-update/commit/5f4268a90bacb8a231bbc98ca92bd70452bcf02c)) - by @trancong12102
-* **cli,server,dashboard:** close EAS Update feature gaps ([#4](https://github.com/better-update/better-update/issues/4), [#6](https://github.com/better-update/better-update/issues/6), [#7](https://github.com/better-update/better-update/issues/7), [#2](https://github.com/better-update/better-update/issues/2)) ([ecdc224](https://github.com/better-update/better-update/commit/ecdc22423f4117ab27ddac15e175329bf50c1031)) - by @trancong12102
-* **cli,server:** integrate EAS CLI libraries, Apple auto-provisioning, and content-type-namespaced asset hashing ([ff3d881](https://github.com/better-update/better-update/commit/ff3d8812a27387e2331cc9e01741f4c01195e31a)) - by @trancong12102
-* **cli:** add --rollout-percentage to update publish + schema-validated args ([e656e75](https://github.com/better-update/better-update/commit/e656e75685e4fe8f872d7495325f1bd8d6534cc8)) - by @trancong12102
-* **cli:** add Android keystore certificate expiry validation ([78f3e46](https://github.com/better-update/better-update/commit/78f3e460e394632a0a39a6e3b5d7779b2dcd174d)) - by @trancong12102
-* **cli:** add Apple App Store Connect provider selection ([0cd1894](https://github.com/better-update/better-update/commit/0cd189454eeed653826867411102b993d1fc1c9f)) - by @trancong12102
-* **cli:** add full CLI coverage for all API groups ([9e05b10](https://github.com/better-update/better-update/commit/9e05b10152d27c9617288a0c182678aaec9d4864)) - by @trancong12102
-* **repo:** add rollback-to-embedded flows ([f5fe1c4](https://github.com/better-update/better-update/commit/f5fe1c439ad7424dc671d84a7b81721e9b6976ad)) - by @trancong12102
-* **repo:** add update lifecycle and credential flows ([f55cf5d](https://github.com/better-update/better-update/commit/f55cf5dea7874540fef6c9620ab8ced7c78e872f)) - by @trancong12102
-* **repo:** expand build management coverage and dashboard details ([96d8d11](https://github.com/better-update/better-update/commit/96d8d11c41a171d67a3dad82d936c924a3e614c7)) - by @trancong12102
-* **repo:** switch uploads to direct r2 flow ([736e7f1](https://github.com/better-update/better-update/commit/736e7f17d887a773b35038119981b31195b4f510)) - by @trancong12102
-* **server,cli:** add build-credentials resolver with roster-hash gated profile regen ([e3a42f8](https://github.com/better-update/better-update/commit/e3a42f86eb7dfd6ec20edeafae6e1aae9c5f76ad)) - by @trancong12102
-
-### Bug Fixes
-
-* **cli:** defer api client auth and repair e2e harness ([77de9db](https://github.com/better-update/better-update/commit/77de9db2a93facbfbdb859fe65b5307d1f56a29e)) - by @trancong12102
-* **dashboard:** remove build upload UI and restrict uploads to CLI only ([278b011](https://github.com/better-update/better-update/commit/278b0117945a6b766171df0a74d1443b0710ab10)) - by @trancong12102
-* **repo:** add knip dead code detection, fix timing-safe HMAC verification ([ef3e3b6](https://github.com/better-update/better-update/commit/ef3e3b6c6d936e85346ed2b0f53941e92cc8d226)) - by @trancong12102
-* **repo:** harden update publish and republish flows ([5b2a7b7](https://github.com/better-update/better-update/commit/5b2a7b7dc164baf29bbe54db83174f3a1f09b503)) - by @trancong12102
-* **repo:** stream update artifacts and enable signed promote flows ([4ed09f1](https://github.com/better-update/better-update/commit/4ed09f15909e44a68e597a28d00c7b0825448211)) - by @trancong12102

package/oxlint.config.ts

@@ -1,6 +0,0 @@
-import cli from "@better-update/oxlint-config/cli";
-import { defineConfig } from "oxlint";
-
-export default defineConfig({
-  extends: [cli],
-});

package/src/app-layer.ts

@@ -1,29 +0,0 @@
-import { FetchHttpClient } from "@effect/platform";
-import { BunContext } from "@effect/platform-bun";
-import { Layer } from "effect";
-
-import { ApiClientLive } from "./services/api-client";
-import { AppleSessionStoreLive } from "./services/apple-session-store";
-import { AuthStoreLive } from "./services/auth-store";
-import { CliRuntimeLive } from "./services/cli-runtime";
-import { ConfigStoreLive } from "./services/config-store";
-import { PresignedUploadClientLive } from "./services/presigned-upload";
-import { UpdateAssetUploaderLive } from "./services/update-asset-uploader";
-
-const CliPlatformLayer = Layer.mergeAll(CliRuntimeLive, BunContext.layer, FetchHttpClient.layer);
-const CliStoreLayer = Layer.mergeAll(AuthStoreLive, ConfigStoreLive, AppleSessionStoreLive).pipe(
-  Layer.provide(CliPlatformLayer),
-);
-const CliAdapterDependencies = Layer.mergeAll(CliPlatformLayer, CliStoreLayer);
-const ApiClientLayer = ApiClientLive.pipe(Layer.provide(CliAdapterDependencies));
-const PresignedUploadLayer = PresignedUploadClientLive.pipe(Layer.provide(CliPlatformLayer));
-const UpdateAssetUploaderLayer = UpdateAssetUploaderLive.pipe(
-  Layer.provide(Layer.mergeAll(ApiClientLayer, PresignedUploadLayer)),
-);
-
-export const CliLive = Layer.mergeAll(
-  CliAdapterDependencies,
-  ApiClientLayer,
-  PresignedUploadLayer,
-  UpdateAssetUploaderLayer,
-);

package/src/application/build-workflow.ts

@@ -1,222 +0,0 @@
-import { Console, Effect } from "effect";
-
-import { runAndroidBuild } from "../commands/build/android";
-import { runIosBuild } from "../commands/build/ios";
-import { reserveAndUpload } from "../commands/build/reserve-and-upload";
-import { readAppJson, readProjectId } from "../lib/app-json";
-import { readAppMeta, readBuildProfile } from "../lib/build-profile";
-import { pullEnvVars } from "../lib/env-exporter";
-import { BuildProfileError } from "../lib/exit-codes";
-import { readAppMetaFromConfig, readExpoConfig } from "../lib/expo-config";
-import { readGitContext } from "../lib/git-context";
-import { readGradleConfig, warnOnGradleMismatch } from "../lib/gradle-config";
-import { printKeyValue } from "../lib/output";
-import { resolveRuntimeVersion } from "../lib/runtime-version";
-import { acquireBuildTempDir } from "../lib/temp-dir";
-import { apiClient } from "../services/api-client";
-import { CliRuntime } from "../services/cli-runtime";
-
-import type { BuildTarget } from "../commands/build/reserve-and-upload";
-import type { Platform } from "../lib/build-profile";
-
-export interface RunBuildWorkflowOptions {
-  readonly platform: Platform;
-  readonly profileName: string;
-  readonly message: string | undefined;
-  readonly noUpload: boolean;
-  readonly rawOutput?: boolean;
-}
-
-type AppMeta = Effect.Effect.Success<ReturnType<typeof readAppMeta>>;
-type BuildProfile = Effect.Effect.Success<ReturnType<typeof readBuildProfile>>;
-type ApiClient = Effect.Effect.Success<typeof apiClient>;
-
-interface PlatformBuildInput {
-  readonly api: ApiClient;
-  readonly options: RunBuildWorkflowOptions;
-  readonly profile: BuildProfile;
-  readonly appMeta: AppMeta;
-  readonly envVars: Record<string, string>;
-  readonly projectId: string;
-  readonly projectRoot: string;
-  readonly tempDir: string;
-}
-
-const runIosPlatformBuild = (input: PlatformBuildInput) =>
-  Effect.gen(function* () {
-    const { api, appMeta, envVars, options, profile, projectId, projectRoot, tempDir } = input;
-    if (!profile.ios) {
-      return yield* new BuildProfileError({
-        message: `Profile "${profile.name}" has no ios section.`,
-      });
-    }
-    const iosProfile = profile.ios;
-    const iosBundleId = appMeta.bundleId;
-    if (!iosBundleId) {
-      return yield* new BuildProfileError({
-        message: "Missing expo.ios.bundleIdentifier in app.json.",
-      });
-    }
-    const build = yield* runIosBuild({
-      api,
-      tempDir,
-      projectRoot,
-      iosProfile,
-      bundleId: iosBundleId,
-      envVars,
-      projectId,
-      rawOutput: options.rawOutput,
-    });
-    const target: BuildTarget = {
-      platform: "ios",
-      distribution: iosProfile.distribution,
-      artifactFormat: "ipa",
-    };
-    return { build, target, bundleId: iosBundleId };
-  });
-
-const runAndroidPlatformBuild = (input: PlatformBuildInput) =>
-  Effect.gen(function* () {
-    const { api, appMeta, envVars, profile, projectId, projectRoot, tempDir } = input;
-    if (!profile.android) {
-      return yield* new BuildProfileError({
-        message: `Profile "${profile.name}" has no android section.`,
-      });
-    }
-    const androidProfile = profile.android;
-    const androidBundleId = appMeta.androidPackage;
-    if (!androidBundleId) {
-      return yield* new BuildProfileError({
-        message: "Missing expo.android.package in app.json.",
-      });
-    }
-    // Cross-validate Gradle config against app.json (Groovy only). When
-    // Gradle resolves a different applicationId, the built APK/AAB is signed
-    // Under that id — so the Credential resolver must key off the Gradle value.
-    const androidDir = `${projectRoot}/android`;
-    const gradleConfig = yield* readGradleConfig(androidDir);
-    yield* warnOnGradleMismatch(gradleConfig, androidBundleId);
-    const applicationIdentifier = gradleConfig?.applicationId ?? androidBundleId;
-    const build = yield* runAndroidBuild({
-      api,
-      tempDir,
-      projectRoot,
-      androidProfile,
-      applicationIdentifier,
-      envVars,
-      projectId,
-    });
-    const target: BuildTarget =
-      androidProfile.format === "aab"
-        ? { platform: "android", distribution: "play-store", artifactFormat: "aab" }
-        : { platform: "android", distribution: "direct", artifactFormat: "apk" };
-    return { build, target, bundleId: applicationIdentifier };
-  });
-
-const runPlatformBuild = (input: PlatformBuildInput) =>
-  input.options.platform === "ios" ? runIosPlatformBuild(input) : runAndroidPlatformBuild(input);
-
-export const runBuildWorkflow = (options: RunBuildWorkflowOptions) =>
-  Effect.scoped(
-    Effect.gen(function* () {
-      const api = yield* apiClient;
-      const runtime = yield* CliRuntime;
-      const projectRoot = yield* runtime.cwd;
-
-      const appJson = yield* readAppJson;
-      const projectId = yield* readProjectId;
-
-      const profile = yield* readBuildProfile(appJson, options.profileName);
-
-      // Load env vars BEFORE resolving dynamic config — app.config.js may read process.env
-      const envVars = yield* pullEnvVars(api, {
-        projectId,
-        environment: profile.environment,
-      });
-
-      // Try @expo/config for dynamic configs (app.config.js/ts), fall back to static app.json.
-      // EnvVars are applied as a scoped process.env overlay inside readExpoConfig and restored
-      // After the call so secrets do not leak to child processes spawned later.
-      const expoConfig = yield* readExpoConfig(projectRoot, envVars);
-      const appMeta = expoConfig
-        ? yield* readAppMetaFromConfig(expoConfig, options.platform).pipe(
-            Effect.tap(() => Console.log("Resolved app config via @expo/config")),
-            Effect.catchAll(() => readAppMeta(appJson, options.platform)),
-          )
-        : yield* readAppMeta(appJson, options.platform);
-
-      const runtimeVersion = yield* resolveRuntimeVersion({
-        raw: appMeta.rawRuntimeVersion,
-        appVersion: appMeta.appVersion,
-        projectRoot,
-      });
-
-      const tempDir = yield* acquireBuildTempDir;
-
-      yield* Console.log(
-        `Building ${options.platform} artifact for profile "${profile.name}" (runtimeVersion=${runtimeVersion})`,
-      );
-
-      const outcome = yield* runPlatformBuild({
-        api,
-        options,
-        profile,
-        appMeta,
-        envVars,
-        projectId,
-        projectRoot,
-        tempDir,
-      });
-      const { build, target, bundleId } = outcome;
-
-      yield* Console.log(`Artifact produced: ${build.artifactPath}`);
-
-      if (options.noUpload) {
-        yield* printKeyValue([
-          ["Artifact", build.artifactPath],
-          ["SHA-256", build.sha256],
-          ["Bytes", String(build.byteSize)],
-          ["Upload", "skipped (--no-upload)"],
-        ]);
-        return;
-      }
-
-      const rawGitContext = yield* readGitContext(projectRoot);
-      const gitContext: {
-        readonly ref?: string;
-        readonly commit?: string;
-        readonly dirty: boolean;
-      } = {
-        ...(rawGitContext.ref === undefined ? {} : { ref: rawGitContext.ref }),
-        ...(rawGitContext.commit === undefined ? {} : { commit: rawGitContext.commit }),
-        dirty: rawGitContext.dirty,
-      };
-
-      const result = yield* reserveAndUpload(api, {
-        target,
-        projectId,
-        profileName: profile.name,
-        runtimeVersion,
-        ...(appMeta.appVersion === undefined ? {} : { appVersion: appMeta.appVersion }),
-        ...(appMeta.buildNumber === undefined ? {} : { buildNumber: appMeta.buildNumber }),
-        bundleId,
-        gitContext,
-        ...(options.message === undefined ? {} : { message: options.message }),
-        artifactPath: build.artifactPath,
-        sha256: build.sha256,
-        byteSize: build.byteSize,
-      });
-
-      yield* Console.log("");
-      yield* printKeyValue([
-        ["Build ID", result.id],
-        ["Status", result.status],
-        ["Platform", options.platform],
-        ["Profile", profile.name],
-        ["Runtime version", runtimeVersion],
-        ["Artifact", build.artifactPath],
-        ["SHA-256", build.sha256],
-        ["Bytes", String(build.byteSize)],
-      ]);
-    }),
-  );

package/src/application/command-exit.ts

@@ -1,13 +0,0 @@
-import { Console, Effect } from "effect";
-
-import { CliRuntime } from "../services/cli-runtime";
-
-export const exitWith = (code: number, message: string): Effect.Effect<void, never, CliRuntime> =>
-  Console.error(message).pipe(
-    Effect.zipRight(
-      Effect.gen(function* () {
-        const runtime = yield* CliRuntime;
-        yield* runtime.setExitCode(code);
-      }),
-    ),
-  );

package/src/application/login.ts

@@ -1,87 +0,0 @@
-import { Prompt } from "@effect/cli";
-import { Command } from "@effect/platform";
-import { Console, Effect, Redacted } from "effect";
-
-import type { CommandExecutor } from "@effect/platform";
-
-import { createBrowserLoginServer } from "../lib/browser-login";
-import { AuthStore } from "../services/auth-store";
-import { CliRuntime } from "../services/cli-runtime";
-import { ConfigStore } from "../services/config-store";
-
-const tokenPrompt = Prompt.password({
-  message: "Paste your API key (from dashboard > API Keys):",
-});
-
-const buildOpenBrowserCommand = (platform: NodeJS.Platform, url: string) => {
-  if (platform === "darwin") {
-    return Command.make("open", url);
-  }
-  if (platform === "win32") {
-    return Command.make("cmd", "/c", "start", "", url);
-  }
-  return Command.make("xdg-open", url);
-};
-
-const openBrowser = (
-  url: string,
-): Effect.Effect<void, never, CliRuntime | CommandExecutor.CommandExecutor> =>
-  Effect.gen(function* () {
-    const runtime = yield* CliRuntime;
-    const command = buildOpenBrowserCommand(runtime.platform, url);
-
-    const opened = yield* Command.exitCode(command).pipe(
-      Effect.map((code) => code === 0),
-      Effect.catchAll(() => Effect.succeed(false)),
-    );
-
-    if (!opened) {
-      yield* Console.log(`Open this URL manually:\n${url}`);
-    }
-  });
-
-const browserLogin = Effect.scoped(
-  Effect.gen(function* () {
-    const configStore = yield* ConfigStore;
-    const authStore = yield* AuthStore;
-    const dashboardUrl = yield* configStore.getDashboardUrl;
-
-    const loginServer = yield* Effect.acquireRelease(
-      Effect.sync(createBrowserLoginServer),
-      (server) => Effect.sync(server.stop),
-    );
-
-    const loginUrl = `${dashboardUrl}/cli-login?callbackUrl=${encodeURIComponent(loginServer.callbackUrl)}`;
-
-    yield* Console.log("Opening browser for better-update login...");
-    yield* Console.log("");
-    yield* openBrowser(loginUrl);
-
-    const token = yield* loginServer.waitForToken;
-    yield* authStore.saveToken(token);
-    yield* Console.log("");
-    yield* Console.log("Logged in successfully. Token saved to ~/.better-update/auth.json");
-  }),
-);
-
-const manualLogin = Effect.gen(function* () {
-  yield* Console.log("Log in to better-update with an existing API key");
-  yield* Console.log("Get your API key from the dashboard > API Keys page");
-  yield* Console.log("");
-
-  const token = Redacted.value(yield* tokenPrompt);
-  const authStore = yield* AuthStore;
-  yield* authStore.saveToken(token);
-  yield* Console.log("");
-  yield* Console.log("Logged in successfully. Token saved to ~/.better-update/auth.json");
-});
-
-export const runLogin = (options: { readonly manualApiKey: boolean }) =>
-  Effect.gen(function* () {
-    if (options.manualApiKey) {
-      yield* manualLogin;
-      return;
-    }
-
-    yield* browserLogin;
-  });

package/src/application/update-promote.ts

@@ -1,88 +0,0 @@
-import { Effect } from "effect";
-
-import type { FileSystem } from "@effect/platform";
-
-import { UpdatePromoteError } from "../lib/exit-codes";
-import { formatCause } from "../lib/format-error";
-import { loadOptionalSignedPayload } from "../lib/signed-payloads";
-import { apiClient } from "../services/api-client";
-
-import type { AuthRequiredError } from "../lib/exit-codes";
-import type { ApiClientService } from "../services/api-client";
-
-export interface RunUpdatePromoteOptions {
-  readonly updateId: string;
-  readonly channel: string;
-  readonly manifestBodyFile: string | undefined;
-  readonly signatureFile: string | undefined;
-  readonly certificateChainFile: string | undefined;
-}
-
-export interface UpdatePromoteResult {
-  readonly sourceUpdateId: string;
-  readonly channel: string;
-  readonly updateId: string;
-}
-
-export const runUpdatePromote = (
-  options: RunUpdatePromoteOptions,
-): Effect.Effect<
-  UpdatePromoteResult,
-  AuthRequiredError | UpdatePromoteError,
-  ApiClientService | FileSystem.FileSystem
-> =>
-  Effect.gen(function* () {
-    const api = yield* apiClient;
-    const signedPayload = yield* loadOptionalSignedPayload({
-      files: {
-        manifestBodyFile: options.manifestBodyFile,
-        signatureFile: options.signatureFile,
-        certificateChainFile: options.certificateChainFile,
-      },
-      label: "Signed promote",
-      makeError: (message) => new UpdatePromoteError({ message }),
-    });
-
-    const result = yield* api.updates
-      .republish({
-        payload: {
-          sourceUpdateId: options.updateId,
-          destinationChannel: options.channel,
-          ...(signedPayload
-            ? {
-                signedUpdates: [
-                  {
-                    sourceUpdateId: options.updateId,
-                    manifestBody: signedPayload.manifestBody,
-                    signature: signedPayload.signature,
-                    certificateChain: signedPayload.certificateChain,
-                  },
-                ],
-              }
-            : {}),
-        },
-      })
-      .pipe(
-        Effect.catchIf(
-          (cause): cause is Exclude<typeof cause, AuthRequiredError> =>
-            (cause as { readonly _tag?: string })._tag !== "AuthRequiredError",
-          (cause) =>
-            new UpdatePromoteError({
-              message: `Failed to promote update: ${formatCause(cause)}`,
-            }),
-        ),
-      );
-
-    const [promotedUpdate] = result.updates;
-    if (!promotedUpdate) {
-      return yield* new UpdatePromoteError({
-        message: "Promote completed without returning a promoted update.",
-      });
-    }
-
-    return {
-      sourceUpdateId: options.updateId,
-      channel: options.channel,
-      updateId: promotedUpdate.id,
-    } as const satisfies UpdatePromoteResult;
-  });