@capgo/cli 8.32.7 → 8.33.1

package/dist/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "8.32.7",
+  "version": "8.33.1",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
@@ -73,6 +73,7 @@
     "test:upload": "bun test/test-upload-validation.mjs",
     "test:fail-on-incompatible": "bun test/test-fail-on-incompatible.mjs",
     "test:native-dependencies": "bun test/test-native-dependencies.mjs",
+    "test:package-json-guard": "bun test/test-package-json-guard.mjs",
     "test:credentials": "bun test/test-credentials.mjs",
     "test:asc-key-protocol": "bun test/test-asc-key-protocol.mjs",
     "test:credentials-validation": "bun test/test-credentials-validation.mjs",
@@ -160,7 +161,7 @@
     "test:ios-marketing-version": "bun test/test-ios-marketing-version.mjs",
     "test:platform-flow-contract": "bun test/test-platform-flow-contract.mjs",
     "test:tail-engine-shared": "bun test/test-tail-engine-shared.mjs",
-    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:init-guardrails && bun run test:init-replay && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
+    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:init-guardrails && bun run test:init-replay && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
     "test:build-platform-selection": "bun test/test-build-platform-selection.mjs",
     "test:ai-log-capture": "bun test/test-ai-log-capture.mjs",
     "test:ai-analyze-flow": "bun test/test-ai-analyze-flow.mjs",
@@ -204,7 +205,9 @@
     "test:app-permission-helper": "bun test/test-app-permission-helper.mjs",
     "test:organization-set-api-host": "bun test/test-organization-set-api-host.mjs",
     "test:trial-warning": "bun test/test-trial-warning.mjs",
-    "test:plan-validation": "bun test/test-plan-validation.mjs"
+    "test:plan-validation": "bun test/test-plan-validation.mjs",
+    "test:auto-bump-version": "bun test/test-auto-bump-version.mjs",
+    "test:auto-bump-ai-diff": "bun test/test-auto-bump-ai-diff.mjs"
   },
   "dependencies": {
     "@inkjs/ui": "^2.0.0",

package/dist/src/analytics/cli-headers.d.ts

@@ -0,0 +1,9 @@
+/** Must match CAPGO_API_DEFAULT_VERSION until a newer version is intentionally adopted. */
+export declare const CAPGO_CLI_API_VERSION = "2025-10-01";
+export declare function setCurrentCliCommand(command: string): void;
+export declare function getCurrentCliCommand(): string;
+/**
+ * Build Capgo API request headers that identify this CLI invocation.
+ * Does not invent an API key — callers merge Authorization/capgkey when available.
+ */
+export declare function buildCliRequestHeaders(extra?: Record<string, string>): Record<string, string>;

package/dist/src/analytics/org-resolver.d.ts

@@ -1,7 +1,9 @@
 import { createSupabaseClient } from '../utils';
 export interface OrgResolverDeps {
-    /** Injectable for tests; defaults to the real Supabase client factory. */
+    /** @deprecated Prefer fetchOwnerOrg; kept for existing unit tests. */
     createClient?: typeof createSupabaseClient;
+    /** Injectable for tests; defaults to GET app via invokeCapgoCliApi. */
+    fetchOwnerOrg?: (apikey: string, appId: string, signal?: AbortSignal) => Promise<string | undefined>;
 }
 /**
  * Resolves an app's owner organization id (`apps.owner_org`), promise-cached

package/dist/src/api/app.d.ts

@@ -1,10 +1,19 @@
 import type { SupabaseClient } from '@supabase/supabase-js';
 import type { Database } from '../types/supabase.types';
-export declare function checkAppExists(supabase: SupabaseClient<Database>, appid: string): Promise<boolean>;
+export declare function checkAppExists(apikey: string, appid: string, options?: {
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<boolean>;
 export type PendingOnboardingApp = Pick<Database['public']['Tables']['apps']['Row'], 'app_id' | 'name' | 'icon_url' | 'need_onboarding' | 'existing_app' | 'ios_store_url' | 'android_store_url'>;
 export type ExistingOrganizationApp = Pick<Database['public']['Tables']['apps']['Row'], 'app_id' | 'name' | 'owner_org' | 'need_onboarding'>;
-export declare function listPendingOnboardingApps(supabase: SupabaseClient<Database>, orgId: string): Promise<PendingOnboardingApp[]>;
-export declare function findAppInOrganization(supabase: SupabaseClient<Database>, orgId: string, appId: string): Promise<ExistingOrganizationApp | null>;
+export declare function listPendingOnboardingApps(apikey: string, orgId: string, options?: {
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<PendingOnboardingApp[]>;
+export declare function findAppInOrganization(apikey: string, orgId: string, appId: string, options?: {
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<ExistingOrganizationApp | null>;
 export declare function completePendingOnboardingApp(_supabase: SupabaseClient<Database>, orgId: string, appId: string, apikey: string, options?: {
     supaHost?: string;
     supaAnon?: string;
@@ -12,7 +21,10 @@ export declare function completePendingOnboardingApp(_supabase: SupabaseClient<D
 /**
  * Check multiple app IDs at once for batch validation (e.g., for suggestions)
  */
-export declare function checkAppIdsExist(supabase: SupabaseClient<Database>, appids: string[]): Promise<{
+export declare function checkAppIdsExist(apikey: string, appids: string[], options?: {
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<{
     appid: string;
     exists: boolean;
 }[]>;

package/dist/src/api/channels.d.ts

@@ -5,52 +5,32 @@ interface CheckVersionOptions {
     autoUnlink?: boolean;
     channelName?: string;
     requireMatch?: boolean;
+    apikey?: string;
+    supaHost?: string;
+    supaAnon?: string;
+}
+interface CapgoHttpOptions {
+    apikey: string;
+    silent?: boolean;
+    supaHost?: string;
+    supaAnon?: string;
 }
 export declare function checkVersionNotUsedInChannel(supabase: SupabaseClient<Database>, appid: string, versionData: Database['public']['Tables']['app_versions']['Row'], options?: CheckVersionOptions): Promise<void>;
-export declare function createChannel(supabase: SupabaseClient<Database>, update: Database['public']['Tables']['channels']['Insert']): import("@supabase/supabase-js").PostgrestBuilder<{
-    PostgrestVersion: "14.5";
-}, {
-    allow_dev: boolean;
-    allow_device: boolean;
-    allow_device_self_set: boolean;
-    allow_emulator: boolean;
-    allow_prod: boolean;
-    android: boolean;
+export declare function createChannel(options: CapgoHttpOptions, update: {
     app_id: string;
-    created_at: string;
-    created_by: string;
-    disable_auto_update: Database["public"]["Enums"]["disable_update"];
-    disable_auto_update_under_native: boolean;
-    electron: boolean;
-    id: number;
-    ios: boolean;
-    name: string;
-    owner_org: string;
-    public: boolean;
-    auto_pause_action: string;
-    auto_pause_confidence: number;
-    auto_pause_cooldown_minutes: number;
-    auto_pause_enabled: boolean;
-    auto_pause_failure_rate_bps: number | null;
-    auto_pause_last_checked_at: string | null;
-    auto_pause_last_triggered_at: string | null;
-    auto_pause_min_attempts: number | null;
-    auto_pause_min_failures: number | null;
-    auto_pause_window_minutes: number;
-    rollout_cache_ttl_seconds: number;
-    rollout_enabled: boolean;
-    rollout_id: string;
-    rollout_pause_reason: string | null;
-    rollout_paused_at: string | null;
-    rollout_percentage_bps: number;
-    rollout_version: number | null;
-    rbac_id: string;
-    updated_at: string;
-    version: number | null;
-}, false>;
-export declare function delChannel(supabase: SupabaseClient<Database>, name: string, appId: string): import("@supabase/supabase-js").PostgrestBuilder<{
-    PostgrestVersion: "14.5";
-}, never, false>;
+    channel: string;
+    version?: string | null;
+    public?: boolean;
+    allow_device_self_set?: boolean;
+    [key: string]: unknown;
+}): Promise<{
+    data: any;
+    error: Error | null;
+}>;
+export declare function delChannel(options: CapgoHttpOptions, name: string, appId: string, deleteBundle?: boolean): Promise<{
+    data: any;
+    error: Error | null;
+}>;
 export declare function findChannel(supabase: SupabaseClient<Database>, appId: string, name: string): import("@supabase/supabase-js").PostgrestBuilder<{
     PostgrestVersion: "14.5";
 }, {
@@ -92,14 +72,19 @@ export declare function findChannel(supabase: SupabaseClient<Database>, appId: s
     updated_at: string;
     version: number | null;
 }, false>;
-export declare function findBundleIdByChannelName(supabase: SupabaseClient<Database>, appId: string, name: string): PromiseLike<{
+export type ChannelLinkedVersion = {
     id: number;
     name: string;
-} | null>;
+};
+export declare function findVersionsLinkedToChannel(supabase: SupabaseClient<Database>, appId: string, name: string): Promise<{
+    stable: ChannelLinkedVersion | null;
+    rollout: ChannelLinkedVersion | null;
+}>;
+export declare function isVersionLinkedToOtherChannel(supabase: SupabaseClient<Database>, appId: string, versionId: number, excludeChannelName: string): Promise<boolean>;
 export type { Channel } from '../schemas/channel';
 type Channel = import('../schemas/channel').Channel;
 export declare function displayChannels(data: Channel[], silent?: boolean): void;
-export declare function getActiveChannels(supabase: SupabaseClient<Database>, appid: string, silent?: boolean): Promise<{
+export declare function getActiveChannels(options: CapgoHttpOptions, appid: string): Promise<{
     id: number;
     name: string;
     public: boolean;

package/dist/src/api/versions.d.ts

@@ -2,16 +2,25 @@ import type { SupabaseClient } from '@supabase/supabase-js';
 import type { Database } from '../types/supabase.types';
 interface VersionOptions {
     silent?: boolean;
+    apikey?: string;
+    supaHost?: string;
+    supaAnon?: string;
 }
 interface DeleteSpecificVersionOptions extends VersionOptions {
     autoUnlink?: boolean;
 }
-export declare function deleteAppVersion(supabase: SupabaseClient<Database>, appid: string, bundle: string, options?: VersionOptions): Promise<void>;
+interface CapgoHttpOptions {
+    apikey: string;
+    silent?: boolean;
+    supaHost?: string;
+    supaAnon?: string;
+}
+export declare function deleteAppVersion(supabase: SupabaseClient<Database> | null, appid: string, bundle: string, options?: VersionOptions): Promise<void>;
 export declare function deleteSpecificVersion(supabase: SupabaseClient<Database>, appid: string, bundle: string, options?: DeleteSpecificVersionOptions): Promise<void>;
 export declare function displayBundles(data: (Database['public']['Tables']['app_versions']['Row'] & {
     keep?: string;
 })[], silent?: boolean): void;
-export declare function getActiveAppVersions(supabase: SupabaseClient<Database>, appid: string, options?: VersionOptions): Promise<{
+export declare function getActiveAppVersions(apikeyOrClient: string | SupabaseClient<Database>, appid: string, options?: VersionOptions): Promise<{
     app_id: string;
     checksum: string | null;
     cli_version: string | null;
@@ -36,8 +45,8 @@ export declare function getActiveAppVersions(supabase: SupabaseClient<Database>,
     updated_at: string | null;
     user_id: string | null;
 }[]>;
-export declare function getChannelsVersion(supabase: SupabaseClient<Database>, appid: string, options?: VersionOptions): Promise<(number | null)[]>;
-export declare function getVersionData(supabase: SupabaseClient<Database>, appid: string, bundle: string, options?: VersionOptions): Promise<{
+export declare function getChannelsVersion(options: CapgoHttpOptions, appid: string): Promise<(number | null)[]>;
+export declare function getVersionData(apikeyOrClient: string | SupabaseClient<Database>, appid: string, bundle: string, options?: VersionOptions): Promise<{
     app_id: string;
     checksum: string | null;
     cli_version: string | null;

package/dist/src/app/list.d.ts

@@ -31,7 +31,7 @@ export declare function listAppInternal(options: OptionsBase, silent?: boolean):
     updated_at: string | null;
     user_id: string | null;
 }[]>;
-export declare function listApp(options: OptionsBase): Promise<{
+export declare function listApp(options: OptionsBase, silent?: boolean): Promise<{
     allow_device_custom_id: boolean;
     allow_preview: boolean;
     android_store_url: string | null;

package/dist/src/build/onboarding/android/ui/app.d.ts

@@ -9,6 +9,8 @@ interface AppProps {
     /** Optional Capgo API key passed via -a/--apikey flag; takes precedence over saved key. */
     apikey?: string;
     supaHost?: string;
+    /** Custom Supabase anon key for self-hosting (--supa-anon). */
+    supaAnon?: string;
     /** Correlation id for this onboarding run; emitted as `journey_id` on every analytics event. */
     journeyId: string;
     /** Reports the current step to the shell on every transition, so the caller can

package/dist/src/build/onboarding/command.d.ts

@@ -3,6 +3,8 @@ export interface OnboardingBuilderOptions {
     apikey?: string;
     platform?: string;
     supaHost?: string;
+    /** Custom Supabase anon key for self-hosting (--supa-anon). */
+    supaAnon?: string;
     /**
      * Offer the self-update prompt as the first wizard screen. ONLY the genuine
      * `build init` / `onboarding` entrypoint sets this. Other callers that reach

package/dist/src/build/onboarding/ui/app.d.ts

@@ -37,6 +37,8 @@ interface AppProps {
     /** Optional Capgo API key passed via -a/--apikey flag; takes precedence over saved key */
     apikey?: string;
     supaHost?: string;
+    /** Custom Supabase anon key for self-hosting (--supa-anon). */
+    supaAnon?: string;
     /** Correlation id for this onboarding run; emitted as `journey_id` on every analytics event. */
     journeyId: string;
     /** Reports the current step to the shell on every transition, so the caller can

package/dist/src/build/onboarding/ui/shell.d.ts

@@ -26,6 +26,8 @@ export interface OnboardingShellProps {
     guidedHelperUsable: boolean;
     apikey?: string;
     supaHost?: string;
+    /** Custom Supabase anon key for self-hosting (--supa-anon). */
+    supaAnon?: string;
     /** Correlation id for this onboarding run; threaded into every analytics event the apps emit. */
     journeyId: string;
     /** Pre-resolved platform (--platform flag or the single existing native dir); skips the picker. */

package/dist/src/build/prescan/command.d.ts

@@ -19,6 +19,10 @@ export interface PrescanCommandOptions {
      * will use, not a fresh saved-file/env merge.
      */
     credentials?: Record<string, string>;
+    /** Check ids to skip entirely (repeatable / comma-separated). */
+    skip?: string[] | string;
+    /** Check ids whose findings are downgraded to warning (repeatable / comma-separated). */
+    warn?: string[] | string;
 }
 export declare function validateFlags(opts: Pick<PrescanCommandOptions, 'failOnWarnings' | 'ignoreFatal'>): void;
 export declare function exitCodeFor(counts: Record<Severity, number>, opts: OutcomeOptions, findings?: PrescanReport['findings']): number;

package/dist/src/build/prescan/engine.d.ts

@@ -1,7 +1,10 @@
 import type { OutcomeOptions, PrescanCheck, PrescanOutcome, PrescanReport, ScanContext } from './types';
+import { type PrescanOverrides } from './overrides';
 interface EngineOptions {
     checkTimeoutMs?: number;
 }
-export declare function runPrescan(ctx: ScanContext, checks: PrescanCheck[], options?: EngineOptions): Promise<PrescanReport>;
+export declare function runPrescan(ctx: ScanContext, checks: PrescanCheck[], options?: EngineOptions & {
+    overrides?: PrescanOverrides;
+}): Promise<PrescanReport>;
 export declare function decideOutcome(report: Pick<PrescanReport, 'counts' | 'findings'>, options: OutcomeOptions): PrescanOutcome;
 export {};

package/dist/src/build/prescan/overrides.d.ts

@@ -0,0 +1,21 @@
+import type { Finding, PrescanCheck, Severity } from './types';
+export interface PrescanOverrides {
+    /** Check ids that must not run. */
+    skip: Set<string>;
+    /** Check ids whose findings are forced to severity=warning. */
+    warn: Set<string>;
+}
+export declare function emptyOverrides(): PrescanOverrides;
+/** Split repeatable CLI values and comma-separated lists into unique trimmed ids. */
+export declare function normalizeCheckIds(values: string[] | string | undefined): string[];
+export declare function parsePrescanOverrides(opts: {
+    skip?: string[] | string;
+    warn?: string[] | string;
+}): PrescanOverrides;
+export declare function validateOverrideIds(overrides: PrescanOverrides, knownIds: Iterable<string>): void;
+export declare function filterChecksForOverrides(checks: PrescanCheck[], overrides: PrescanOverrides): {
+    runnable: PrescanCheck[];
+    skipped: string[];
+};
+export declare function applyWarnOverrides(findings: Finding[], overrides: PrescanOverrides): Finding[];
+export declare function recountSeverities(findings: Finding[]): Record<Severity, number>;

package/dist/src/build/prescan/registry.d.ts

@@ -4,3 +4,5 @@ export declare const IOS_PRESCAN_EXPANSION_ENFORCE_AFTER = "2026-08-14T00:00:00.
 /** Legacy P12 encryption becomes mandatory for macOS runner compatibility at this UTC instant. */
 export declare const IOS_P12_LEGACY_ENFORCE_AFTER = "2026-08-17T00:00:00.000Z";
 export declare const ALL_CHECKS: PrescanCheck[];
+/** Stable list of registered check ids for CLI override validation. */
+export declare const ALL_CHECK_IDS: string[];

package/dist/src/bundle/auto-bump-ai.d.ts

@@ -0,0 +1,50 @@
+import type { SupabaseClient } from '@supabase/supabase-js';
+import type { Database } from '../types/supabase.types';
+import type { AutoBumpLevel } from '../versionHelpers';
+export type ManifestEntry = {
+    file: string;
+    hash: string;
+};
+export type ManifestDiff = {
+    added: string[];
+    removed: string[];
+    changed: string[];
+    counts: {
+        added: number;
+        removed: number;
+        changed: number;
+    };
+};
+export type AiBumpDecision = {
+    level: AutoBumpLevel;
+    reason: string;
+};
+export declare function diffManifests(local: ManifestEntry[], remote: ManifestEntry[]): ManifestDiff;
+export declare function fetchRemoteManifest(supabase: SupabaseClient<Database>, versionId: number): Promise<ManifestEntry[]>;
+export declare function resolveBaseVersionForAutoBump(supabase: SupabaseClient<Database>, appid: string, channels: string[]): Promise<{
+    name: string;
+    id: number;
+} | null>;
+export declare function requestAiBumpLevel(options: {
+    apikey: string;
+    appId: string;
+    baseVersion: string;
+    manifestDiff: ManifestDiff;
+    nativeCompatibility?: {
+        summary: string;
+        breaking?: boolean;
+    };
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<AiBumpDecision>;
+export declare function resolveAutoBumpLevelFromAi(ctx: {
+    supabase: SupabaseClient<Database>;
+    appid: string;
+    channels: string[];
+    path: string;
+    apikey: string;
+    options?: {
+        supaHost?: string;
+        supaAnon?: string;
+    };
+}): Promise<AiBumpDecision>;

package/dist/src/bundle/upload.d.ts

@@ -1,10 +1,24 @@
 import type { UploadBundleResult } from '../schemas/bundle';
 import type { UploadReporter, UploadSpinner } from './reporter';
 import type { OptionsUpload } from './upload_interface';
+import { CliUserError } from '../shared/cli-user-error';
 import { createSupabaseClient } from '../utils';
 type SupabaseType = Awaited<ReturnType<typeof createSupabaseClient>>;
 export type { UploadBundleResult };
 export type { UploadReporter, UploadSpinner };
+/**
+ * Thrown when `--fail-on-incompatible` aborts an upload because the bundle is
+ * incompatible with the channel's current native packages. A dedicated type lets
+ * `uploadBundle` skip the generic "retry the upload?" prompt — retrying an
+ * incompatible bundle is pointless.
+ *
+ * Extends `CliUserError` so `shouldCapturePosthogException` skips it: the
+ * `--fail-on-incompatible` abort is a state the user asked for, not a crash, so
+ * it must not open an error tracking `$exception` issue. The non-zero exit, the
+ * printed message, and the `Bundle Upload Blocked` event stay unchanged.
+ */
+export declare class IncompatibleBundleError extends CliUserError {
+}
 export declare function getDefaultUploadChannel(appId: string, supabase: SupabaseType, hostWeb: string): Promise<string>;
 export declare function uploadBundleInternal(preAppid: string, options: OptionsUpload, silent?: boolean, reporter?: UploadReporter): Promise<UploadBundleResult>;
 /**

package/dist/src/capacitor-cli.d.ts

@@ -6,6 +6,7 @@ export interface CapacitorCliConfig {
     };
 }
 export declare const requireTS: (typescript: unknown, filePath: string) => Record<string, unknown>;
+export declare const formatJSObject: (value: unknown) => string;
 export declare const loadConfig: () => Promise<CapacitorCliConfig>;
 export declare const writeConfig: (extConfig: CapacitorConfig, extConfigFilePath: string) => Promise<void>;
 export declare const findMonorepoRoot: (currentPath: string) => string;

package/dist/src/channel/add.d.ts

@@ -1,41 +1,5 @@
 import type { ChannelAddOptions } from '../schemas/channel';
 export declare function addChannelInternal(channelId: string, appId: string, options: ChannelAddOptions, silent?: boolean): Promise<{
-    allow_dev: boolean;
-    allow_device: boolean;
-    allow_device_self_set: boolean;
-    allow_emulator: boolean;
-    allow_prod: boolean;
-    android: boolean;
-    app_id: string;
-    created_at: string;
-    created_by: string;
-    disable_auto_update: import("../sdk").Database["public"]["Enums"]["disable_update"];
-    disable_auto_update_under_native: boolean;
-    electron: boolean;
-    id: number;
-    ios: boolean;
     name: string;
-    owner_org: string;
-    public: boolean;
-    auto_pause_action: string;
-    auto_pause_confidence: number;
-    auto_pause_cooldown_minutes: number;
-    auto_pause_enabled: boolean;
-    auto_pause_failure_rate_bps: number | null;
-    auto_pause_last_checked_at: string | null;
-    auto_pause_last_triggered_at: string | null;
-    auto_pause_min_attempts: number | null;
-    auto_pause_min_failures: number | null;
-    auto_pause_window_minutes: number;
-    rollout_cache_ttl_seconds: number;
-    rollout_enabled: boolean;
-    rollout_id: string;
-    rollout_pause_reason: string | null;
-    rollout_paused_at: string | null;
-    rollout_percentage_bps: number;
-    rollout_version: number | null;
-    rbac_id: string;
-    updated_at: string;
-    version: number | null;
 }>;
 export declare function addChannel(channelId: string, appId: string, options: ChannelAddOptions): Promise<void>;

package/dist/src/init/command-execution.d.ts

@@ -0,0 +1,37 @@
+import type { PackageManagerRunner, PackageManagerType } from '@capgo/find-package-manager';
+import type { ChildProcess } from 'node:child_process';
+import { findInstallCommand } from '@capgo/find-package-manager';
+export type SupportedPackageManager = Exclude<PackageManagerType, 'unknown'>;
+export interface PackageManagerInfo {
+    pm: SupportedPackageManager;
+    command: ReturnType<typeof findInstallCommand>;
+    installCommand: string;
+    runner: PackageManagerRunner;
+}
+export interface ExecutableProbeOptions {
+    args?: string[];
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+}
+export interface ExecutableProbeResult {
+    available: boolean;
+    error?: NodeJS.ErrnoException;
+    status?: number | null;
+    stdout?: string;
+}
+export interface CommandResult {
+    success: boolean;
+    error?: Error;
+}
+export declare function createMissingExecutableError(command: string, executablePath?: string): NodeJS.ErrnoException;
+export declare function preparePackageManagerCommandEnvironment(environment?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function probeExecutable(command: string, options?: ExecutableProbeOptions): ExecutableProbeResult;
+export declare function supportsYarnDlx(version: string): boolean;
+export declare function probePackageManagerCommand(commandLine: string, options?: ExecutableProbeOptions): ExecutableProbeResult;
+export declare function resolveExecutableProbeError(command: string, probe: ExecutableProbeResult): Error;
+export declare function getAvailablePackageManagers(detected: SupportedPackageManager, isAvailable?: (command: string) => boolean): SupportedPackageManager[];
+export declare function getPackageManagerInfo(pm: SupportedPackageManager): PackageManagerInfo;
+export declare function isPackageManagerAvailable(pm: SupportedPackageManager, isAvailable?: (command: string) => boolean): boolean;
+export declare function getMissingPackageManagerExecutable(pm: SupportedPackageManager, isAvailable?: (command: string) => boolean): string | undefined;
+export declare function waitForCommandResult(child: ChildProcess): Promise<CommandResult>;

package/dist/src/init/command.d.ts

@@ -60,6 +60,7 @@ export declare function getDirtyGitStatusActionOptions(): {
     hint: string;
 }[];
 export declare function injectInitCode(filePath: string, currentContent: string): string;
+export declare function resolveInitPackageJsonPath(currentPath: string | undefined, startDir?: string): string | undefined;
 interface ResumeResult {
     stepDone: number;
     orgId: string;

package/dist/src/mcp/tool-schemas.d.ts

@@ -25,6 +25,13 @@ export declare const mcpUploadBundleInputSchema: z.ZodObject<{
     minUpdateVersion: z.ZodOptional<z.ZodString>;
     autoMinUpdateVersion: z.ZodOptional<z.ZodBoolean>;
     autoSetBundle: z.ZodOptional<z.ZodBoolean>;
+    autoBump: z.ZodOptional<z.ZodEnum<{
+        major: "major";
+        minor: "minor";
+        patch: "patch";
+        metadata: "metadata";
+        ai: "ai";
+    }>>;
     encrypt: z.ZodOptional<z.ZodBoolean>;
     capacitorConfig: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;

package/dist/src/posthog.d.ts

@@ -8,7 +8,15 @@ interface CapturePosthogExceptionPayload {
 }
 export declare function isTruthyEnvValue(value: string | undefined): boolean;
 export declare function getPosthogToken(): string | undefined;
+/**
+ * Expected user-configuration failures: a bad or missing API key (401
+ * `invalid_apikey` / `no_key_provided`) or an app that has not been created
+ * yet. These are real user errors, not CLI bugs — they are still counted via
+ * `trackCommandFailed`, but must NOT be sent to error tracking as exceptions.
+ */
+export declare function isExpectedUserError(error: unknown): boolean;
 export declare function shouldCapturePosthogException(error: unknown): boolean;
 export declare function getCommandPath(command: Command): string;
+export declare function getInstallId(configDir?: string): string;
 export declare function capturePosthogException(payload: CapturePosthogExceptionPayload): Promise<boolean>;
 export {};

package/dist/src/preview/qr.d.ts

@@ -1,8 +1,13 @@
-import type { SupabaseClient } from '@supabase/supabase-js';
 import type { OptionsBase } from '../schemas/base';
-import type { Database } from '../types/supabase.types';
 import { type PreviewWebEnv } from './web-url';
-type CapgoSupabaseClient = SupabaseClient<Database>;
+import { invokeCapgoCliApi } from '../utils';
+export interface CapgoPreviewHttpOptions {
+    apikey: string;
+    supaHost?: string;
+    supaAnon?: string;
+    /** Injectable for unit tests; defaults to invokeCapgoCliApi. */
+    invoke?: typeof invokeCapgoCliApi;
+}
 export interface PreviewQrCommandOptions extends OptionsBase {
     bundle?: string;
     channel?: string;
@@ -27,10 +32,10 @@ export type PreviewQrTarget = {
 export declare function buildPreviewQrUrl(target: PreviewQrTarget): string;
 export declare function renderTerminalQrCode(value: string): Promise<string>;
 export declare function renderQrCodePng(value: string, outputPath: string): Promise<string>;
-export declare function assertAppAllowsPreview(supabase: CapgoSupabaseClient, appId: string): Promise<void>;
-export declare function resolveBundlePreviewTarget(supabase: CapgoSupabaseClient, appId: string, bundleRef: string): Promise<PreviewQrTarget | null>;
-export declare function resolveChannelPreviewTarget(supabase: CapgoSupabaseClient, appId: string, channelRef: string): Promise<PreviewQrTarget | null>;
-export declare function resolvePreviewQrTarget(supabase: CapgoSupabaseClient, appId: string, options: Pick<PreviewQrCommandOptions, 'bundle' | 'channel' | 'target' | 'type'>): Promise<PreviewQrTarget>;
+export declare function assertAppAllowsPreview(options: CapgoPreviewHttpOptions, appId: string): Promise<void>;
+export declare function resolveBundlePreviewTarget(options: CapgoPreviewHttpOptions, appId: string, bundleRef: string): Promise<PreviewQrTarget | null>;
+export declare function resolveChannelPreviewTarget(options: CapgoPreviewHttpOptions, appId: string, channelRef: string): Promise<PreviewQrTarget | null>;
+export declare function resolvePreviewQrTarget(http: CapgoPreviewHttpOptions, appId: string, options: Pick<PreviewQrCommandOptions, 'bundle' | 'channel' | 'target' | 'type'>): Promise<PreviewQrTarget>;
 export interface PreviewQrOutputOptions {
     png?: string;
     url?: boolean;
@@ -39,6 +44,5 @@ export interface PreviewQrOutputOptions {
 }
 export declare function resolvePreviewQrOutputValue(target: PreviewQrTarget, options?: PreviewQrOutputOptions): string;
 export declare function printPreviewQrCode(target: PreviewQrTarget, options?: PreviewQrOutputOptions): Promise<void>;
-export declare function printPreviewQrForResolvedTarget(supabase: CapgoSupabaseClient, appId: string, target: PreviewQrTarget, options?: PreviewQrOutputOptions): Promise<void>;
+export declare function printPreviewQrForResolvedTarget(http: CapgoPreviewHttpOptions, appId: string, target: PreviewQrTarget, output?: PreviewQrOutputOptions): Promise<void>;
 export declare function getPreviewQr(appId: string, target: string | undefined, options: PreviewQrCommandOptions): Promise<void>;
-export {};

package/dist/src/schemas/auth.d.ts

@@ -2,13 +2,13 @@ import { z } from 'zod';
 export declare const mcpLoginInputSchema: z.ZodObject<{
     apikey: z.ZodString;
     scope: z.ZodOptional<z.ZodEnum<{
-        global: "global";
         local: "local";
+        global: "global";
     }>>;
 }, z.core.$strip>;
 export declare const mcpLogoutInputSchema: z.ZodObject<{
     scope: z.ZodOptional<z.ZodEnum<{
-        global: "global";
         local: "local";
+        global: "global";
     }>>;
 }, z.core.$strip>;