@capgo/cli 8.3.0 → 8.4.0

package/dist/src/build/onboarding/android/types.d.ts

@@ -1,3 +1,4 @@
+import type { TailProgress } from '../tail-types.js';
 export type AndroidOnboardingStep = 'welcome' | 'resume-prompt' | 'credentials-exist' | 'backing-up' | 'no-platform' | 'keystore-method-select' | 'keystore-explainer' | 'keystore-existing-path' | 'keystore-existing-picker' | 'keystore-existing-store-password' | 'keystore-existing-detecting-alias' | 'keystore-existing-alias-select' | 'keystore-existing-alias' | 'keystore-existing-key-password' | 'keystore-new-alias' | 'keystore-new-password-method' | 'keystore-new-store-password' | 'keystore-new-key-password' | 'keystore-new-cn' | 'keystore-generating' | 'service-account-method-select' | 'sa-json-existing-path' | 'sa-json-existing-picker' | 'sa-json-validating' | 'sa-json-validation-failed' | 'google-sign-in' | 'google-sign-in-running' | 'play-developer-id-input' | 'gcp-projects-loading' | 'gcp-projects-select' | 'gcp-project-create-name' | 'android-package-select' | 'gcp-setup-running' | 'saving-credentials' | 'detecting-ci-secrets' | 'ci-secrets-setup' | 'ci-secrets-target-select' | 'ask-ci-secrets' | 'checking-ci-secrets' | 'confirm-ci-secret-overwrite' | 'uploading-ci-secrets' | 'ci-secrets-failed' | 'ask-github-actions-setup' | 'confirm-secrets-push' | 'ask-export-env' | 'exporting-env' | 'confirm-env-export-overwrite' | 'overwrite-and-export-env' | 'pick-package-manager' | 'pick-build-script' | 'pick-build-script-custom' | 'preview-workflow-file' | 'view-workflow-diff' | 'writing-workflow-file' | 'ask-build' | 'requesting-build' | 'ai-analysis-prompt' | 'ai-analysis-running' | 'ai-analysis-result' | 'ai-analysis-result-scroll' | 'build-complete' | 'error' | 'support-confirm' | 'support-log-view' | 'support-uploading';
 export type AndroidOnboardingErrorCategory = 'keystore_invalid' | 'google_oauth_failed' | 'play_account_id_invalid' | 'sa_json_shape_invalid' | 'sa_json_token_rejected' | 'sa_json_no_app_access' | 'sa_json_network_error' | 'unknown';
 export type KeystoreMethod = 'existing' | 'generate';
@@ -38,7 +39,21 @@ export interface AndroidPackageChoice {
     /** How we picked it — useful for telemetry / resume clarity. */
     source: 'gradle' | 'capacitor-config' | 'user-input';
 }
-export interface AndroidOnboardingProgress {
+export interface CredentialsSaved {
+    /** ISO timestamp credentials.json was written — purely informational. */
+    savedAt: string;
+}
+export interface BuildRequested {
+    /** The build dashboard URL surfaced after the queue request succeeded. */
+    buildUrl: string;
+}
+export interface CiSecretsUploaded {
+    /** Provider the secrets were pushed to (matches the chosen ciSecretTarget). */
+    provider: 'github' | 'gitlab';
+    /** How many env vars were pushed — informational. */
+    count: number;
+}
+export interface AndroidOnboardingProgress extends TailProgress {
     platform: 'android';
     appId: string;
     startedAt: string;
@@ -62,11 +77,37 @@ export interface AndroidOnboardingProgress {
         androidPackageChosen?: AndroidPackageChoice;
         serviceAccountProvisioned?: ServiceAccountProvisioned;
         playInviteProvisioned?: PlayInviteProvisioned;
+        /** Set once `saving-credentials` wrote credentials.json. Gates tail entry. */
+        credentialsSaved?: CredentialsSaved;
+        /** Set once `requesting-build` queued a build. Guards a double build-request. */
+        buildRequested?: BuildRequested;
+        /** Set once `uploading-ci-secrets` pushed the secrets. Guards a re-upload. */
+        ciSecretsUploaded?: CiSecretsUploaded;
     };
     _oauthRefreshToken?: string;
     _keystoreBase64?: string;
     /** Base64 of the downloaded SA JSON key — saved as PLAY_CONFIG_JSON at end. */
     _serviceAccountKeyBase64?: string;
+    /** Platform whose onboarding is currently in-flight. */
+    activePlatform?: 'android';
+    /** True when the new-keystore password was auto-generated (random). Never logged. */
+    keystorePasswordGenerated?: boolean;
+    /** True once the user chose the MANUAL password method (lets the stateless MCP advance). */
+    keystorePasswordManual?: boolean;
+    /**
+     * Data-safety gate state for the shared engine (mirrors main's ink TUI
+     * `credentials-exist` → `backing-up` flow). The Ink driver does not read this
+     * field — it gates the same situation via React state — so it is harmless to
+     * the TUI. Lifecycle:
+     *   - undefined → gate not yet evaluated (or no saved credentials exist)
+     *   - 'pending' → saved android credentials exist; awaiting the user's
+     *                 backup-or-cancel choice (the `credentials-exist` step)
+     *   - 'backup'  → user chose backup; the `backing-up` effect must still run
+     *   - 'done'    → backup performed (or source absent); proceed to keystore
+     *   - 'cancel'  → user chose to stop; onboarding halts to protect the
+     *                 existing credentials (mirrors main's exitOnboarding())
+     */
+    _credentialsExistGate?: 'pending' | 'backup' | 'done' | 'cancel';
 }
 export declare const ANDROID_STEP_PROGRESS: Record<AndroidOnboardingStep, number>;
 export declare function getAndroidPhaseLabel(step: AndroidOnboardingStep): string;

package/dist/src/build/onboarding/apple-api.d.ts

@@ -79,6 +79,7 @@ export declare function classifyCertAvailability(args: {
  */
 export declare function listDistributionCerts(token: string, options?: {
     includeContent?: boolean;
+    types?: ('DISTRIBUTION' | 'IOS_DISTRIBUTION')[];
 }): Promise<AscDistributionCert[]>;
 /**
  * Compute the SHA1 hash of an ASC certificate's base64-DER content. Returns
@@ -140,7 +141,10 @@ export declare class CertificateLimitError extends Error {
     constructor(certificates: AscDistributionCert[]);
 }
 /**
- * Create a distribution certificate using a CSR.
+ * Create an Apple Distribution certificate (type DISTRIBUTION — the modern
+ * cross-platform type Xcode 11+ uses; the legacy IOS_DISTRIBUTION type is
+ * deprecated and its separate per-team pool tends to be full of old certs)
+ * using a CSR.
  * Returns the certificate ID, base64 DER content, expiration date, and team ID.
  *
  * Throws CertificateLimitError if the limit is reached, so the UI can ask

package/dist/src/build/onboarding/env-export.d.ts

@@ -6,6 +6,12 @@
  * Reuses the renderer from `build credentials manage` so the file format
  * (section comments, .gitignore reminder, provisioning-map base64 fallback)
  * stays identical between the two paths.
+ *
+ * IMPORTANT (v1 contract): this writes a LOCAL `.env.capgo.<appId>.<platform>`
+ * file (mode 0o600). The file holds credentials, so it should stay local (add it to `.gitignore`). It performs NO git
+ * operation — no `git add`, no `git commit`, nothing touches the repo index.
+ * v1 must NOT add an auto-commit here; the user owns whether/when the file
+ * lands in version control.
  */
 import type { BuildCredentials } from '../../schemas/build.js';
 export interface EnvExportOpts {
@@ -14,7 +20,12 @@ export interface EnvExportOpts {
     credentials: Partial<BuildCredentials>;
     /** Default false — onboarding writes into the global store, not local. */
     local?: boolean;
-    /** If absent, defaults to `<cwd>/.env.capgo.<appId>.<platform>`. */
+    /**
+     * If absent, defaults to `<cwd>/.env.capgo.<appId>.<platform>`.
+     *
+     * This is the path of a LOCAL 0o600 .env file holding credentials — keep it out of version control.
+     * Writing it performs NO git operation; v1 must not add an auto-commit.
+     */
     targetPath?: string;
     /** When true, write even if the file already exists. */
     overwrite?: boolean;

package/dist/src/build/onboarding/flow/android-flow.d.ts

@@ -0,0 +1,3 @@
+import type { AndroidOnboardingProgress, AndroidOnboardingStep } from '../android/types.js';
+import type { PlatformFlow } from './contract.js';
+export declare const androidFlow: PlatformFlow<AndroidOnboardingStep, AndroidOnboardingProgress, Record<string, unknown>>;

package/dist/src/build/onboarding/flow/contract.d.ts

@@ -0,0 +1,24 @@
+export type StepKind = 'auto' | 'human_gate' | 'choice' | 'info' | 'input' | 'done' | 'error';
+export interface StepView {
+    kind: StepKind;
+    prompt: string;
+    options?: {
+        value: string;
+        label: string;
+        note?: string;
+    }[];
+    collect?: {
+        field: string;
+        desc: string;
+        secret?: boolean;
+    }[];
+    context?: Record<string, unknown>;
+}
+export interface PlatformFlow<Step extends string, Progress, Input> {
+    resumeStep: (progress: Progress | null) => Step;
+    viewForStep: (step: Step, progress: Progress, ctx?: Record<string, unknown>) => StepView;
+    applyInput: (step: Step, progress: Progress, input: Input) => Progress;
+    runEffect: (step: Step, progress: Progress, deps: unknown) => Promise<unknown>;
+}
+/** Runtime guard used by tests + frontends to validate a view-model. */
+export declare function isStepView(v: unknown): v is StepView;

package/dist/src/build/onboarding/flow/ios-flow.d.ts

@@ -0,0 +1,3 @@
+import type { OnboardingProgress, OnboardingStep } from '../types.js';
+import type { PlatformFlow } from './contract.js';
+export declare const iosFlow: PlatformFlow<OnboardingStep, OnboardingProgress, Record<string, unknown>>;