@capgo/cli 8.33.0 → 8.33.2

package/dist/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "8.33.0",
+  "version": "8.33.2",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
@@ -73,6 +73,7 @@
     "test:upload": "bun test/test-upload-validation.mjs",
     "test:fail-on-incompatible": "bun test/test-fail-on-incompatible.mjs",
     "test:native-dependencies": "bun test/test-native-dependencies.mjs",
+    "test:package-json-guard": "bun test/test-package-json-guard.mjs",
     "test:credentials": "bun test/test-credentials.mjs",
     "test:asc-key-protocol": "bun test/test-asc-key-protocol.mjs",
     "test:credentials-validation": "bun test/test-credentials-validation.mjs",
@@ -160,7 +161,7 @@
     "test:ios-marketing-version": "bun test/test-ios-marketing-version.mjs",
     "test:platform-flow-contract": "bun test/test-platform-flow-contract.mjs",
     "test:tail-engine-shared": "bun test/test-tail-engine-shared.mjs",
-    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:init-guardrails && bun run test:init-replay && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
+    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:build-platform-selection && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:init-guardrails && bun run test:init-replay && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
     "test:build-platform-selection": "bun test/test-build-platform-selection.mjs",
     "test:ai-log-capture": "bun test/test-ai-log-capture.mjs",
     "test:ai-analyze-flow": "bun test/test-ai-analyze-flow.mjs",
@@ -205,7 +206,8 @@
     "test:organization-set-api-host": "bun test/test-organization-set-api-host.mjs",
     "test:trial-warning": "bun test/test-trial-warning.mjs",
     "test:plan-validation": "bun test/test-plan-validation.mjs",
-    "test:auto-bump-version": "bun test/test-auto-bump-version.mjs"
+    "test:auto-bump-version": "bun test/test-auto-bump-version.mjs",
+    "test:auto-bump-ai-diff": "bun test/test-auto-bump-ai-diff.mjs"
   },
   "dependencies": {
     "@inkjs/ui": "^2.0.0",

package/dist/src/analytics/cli-headers.d.ts

@@ -0,0 +1,9 @@
+/** Must match CAPGO_API_DEFAULT_VERSION until a newer version is intentionally adopted. */
+export declare const CAPGO_CLI_API_VERSION = "2025-10-01";
+export declare function setCurrentCliCommand(command: string): void;
+export declare function getCurrentCliCommand(): string;
+/**
+ * Build Capgo API request headers that identify this CLI invocation.
+ * Does not invent an API key — callers merge Authorization/capgkey when available.
+ */
+export declare function buildCliRequestHeaders(extra?: Record<string, string>): Record<string, string>;

package/dist/src/analytics/org-resolver.d.ts

@@ -1,7 +1,9 @@
 import { createSupabaseClient } from '../utils';
 export interface OrgResolverDeps {
-    /** Injectable for tests; defaults to the real Supabase client factory. */
+    /** @deprecated Prefer fetchOwnerOrg; kept for existing unit tests. */
     createClient?: typeof createSupabaseClient;
+    /** Injectable for tests; defaults to GET app via invokeCapgoCliApi. */
+    fetchOwnerOrg?: (apikey: string, appId: string, signal?: AbortSignal) => Promise<string | undefined>;
 }
 /**
  * Resolves an app's owner organization id (`apps.owner_org`), promise-cached

package/dist/src/api/app.d.ts

@@ -1,10 +1,19 @@
 import type { SupabaseClient } from '@supabase/supabase-js';
 import type { Database } from '../types/supabase.types';
-export declare function checkAppExists(supabase: SupabaseClient<Database>, appid: string): Promise<boolean>;
+export declare function checkAppExists(apikey: string, appid: string, options?: {
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<boolean>;
 export type PendingOnboardingApp = Pick<Database['public']['Tables']['apps']['Row'], 'app_id' | 'name' | 'icon_url' | 'need_onboarding' | 'existing_app' | 'ios_store_url' | 'android_store_url'>;
 export type ExistingOrganizationApp = Pick<Database['public']['Tables']['apps']['Row'], 'app_id' | 'name' | 'owner_org' | 'need_onboarding'>;
-export declare function listPendingOnboardingApps(supabase: SupabaseClient<Database>, orgId: string): Promise<PendingOnboardingApp[]>;
-export declare function findAppInOrganization(supabase: SupabaseClient<Database>, orgId: string, appId: string): Promise<ExistingOrganizationApp | null>;
+export declare function listPendingOnboardingApps(apikey: string, orgId: string, options?: {
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<PendingOnboardingApp[]>;
+export declare function findAppInOrganization(apikey: string, orgId: string, appId: string, options?: {
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<ExistingOrganizationApp | null>;
 export declare function completePendingOnboardingApp(_supabase: SupabaseClient<Database>, orgId: string, appId: string, apikey: string, options?: {
     supaHost?: string;
     supaAnon?: string;
@@ -12,7 +21,10 @@ export declare function completePendingOnboardingApp(_supabase: SupabaseClient<D
 /**
  * Check multiple app IDs at once for batch validation (e.g., for suggestions)
  */
-export declare function checkAppIdsExist(supabase: SupabaseClient<Database>, appids: string[]): Promise<{
+export declare function checkAppIdsExist(apikey: string, appids: string[], options?: {
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<{
     appid: string;
     exists: boolean;
 }[]>;

package/dist/src/api/channels.d.ts

@@ -5,52 +5,32 @@ interface CheckVersionOptions {
     autoUnlink?: boolean;
     channelName?: string;
     requireMatch?: boolean;
+    apikey?: string;
+    supaHost?: string;
+    supaAnon?: string;
+}
+interface CapgoHttpOptions {
+    apikey: string;
+    silent?: boolean;
+    supaHost?: string;
+    supaAnon?: string;
 }
 export declare function checkVersionNotUsedInChannel(supabase: SupabaseClient<Database>, appid: string, versionData: Database['public']['Tables']['app_versions']['Row'], options?: CheckVersionOptions): Promise<void>;
-export declare function createChannel(supabase: SupabaseClient<Database>, update: Database['public']['Tables']['channels']['Insert']): import("@supabase/supabase-js").PostgrestBuilder<{
-    PostgrestVersion: "14.5";
-}, {
-    allow_dev: boolean;
-    allow_device: boolean;
-    allow_device_self_set: boolean;
-    allow_emulator: boolean;
-    allow_prod: boolean;
-    android: boolean;
+export declare function createChannel(options: CapgoHttpOptions, update: {
     app_id: string;
-    created_at: string;
-    created_by: string;
-    disable_auto_update: Database["public"]["Enums"]["disable_update"];
-    disable_auto_update_under_native: boolean;
-    electron: boolean;
-    id: number;
-    ios: boolean;
-    name: string;
-    owner_org: string;
-    public: boolean;
-    auto_pause_action: string;
-    auto_pause_confidence: number;
-    auto_pause_cooldown_minutes: number;
-    auto_pause_enabled: boolean;
-    auto_pause_failure_rate_bps: number | null;
-    auto_pause_last_checked_at: string | null;
-    auto_pause_last_triggered_at: string | null;
-    auto_pause_min_attempts: number | null;
-    auto_pause_min_failures: number | null;
-    auto_pause_window_minutes: number;
-    rollout_cache_ttl_seconds: number;
-    rollout_enabled: boolean;
-    rollout_id: string;
-    rollout_pause_reason: string | null;
-    rollout_paused_at: string | null;
-    rollout_percentage_bps: number;
-    rollout_version: number | null;
-    rbac_id: string;
-    updated_at: string;
-    version: number | null;
-}, false>;
-export declare function delChannel(supabase: SupabaseClient<Database>, name: string, appId: string): import("@supabase/supabase-js").PostgrestBuilder<{
-    PostgrestVersion: "14.5";
-}, never, false>;
+    channel: string;
+    version?: string | null;
+    public?: boolean;
+    allow_device_self_set?: boolean;
+    [key: string]: unknown;
+}): Promise<{
+    data: any;
+    error: Error | null;
+}>;
+export declare function delChannel(options: CapgoHttpOptions, name: string, appId: string, deleteBundle?: boolean): Promise<{
+    data: any;
+    error: Error | null;
+}>;
 export declare function findChannel(supabase: SupabaseClient<Database>, appId: string, name: string): import("@supabase/supabase-js").PostgrestBuilder<{
     PostgrestVersion: "14.5";
 }, {
@@ -92,14 +72,19 @@ export declare function findChannel(supabase: SupabaseClient<Database>, appId: s
     updated_at: string;
     version: number | null;
 }, false>;
-export declare function findBundleIdByChannelName(supabase: SupabaseClient<Database>, appId: string, name: string): PromiseLike<{
+export type ChannelLinkedVersion = {
     id: number;
     name: string;
-} | null>;
+};
+export declare function findVersionsLinkedToChannel(supabase: SupabaseClient<Database>, appId: string, name: string): Promise<{
+    stable: ChannelLinkedVersion | null;
+    rollout: ChannelLinkedVersion | null;
+}>;
+export declare function isVersionLinkedToOtherChannel(supabase: SupabaseClient<Database>, appId: string, versionId: number, excludeChannelName: string): Promise<boolean>;
 export type { Channel } from '../schemas/channel';
 type Channel = import('../schemas/channel').Channel;
 export declare function displayChannels(data: Channel[], silent?: boolean): void;
-export declare function getActiveChannels(supabase: SupabaseClient<Database>, appid: string, silent?: boolean): Promise<{
+export declare function getActiveChannels(options: CapgoHttpOptions, appid: string): Promise<{
     id: number;
     name: string;
     public: boolean;

package/dist/src/api/versions.d.ts

@@ -2,16 +2,25 @@ import type { SupabaseClient } from '@supabase/supabase-js';
 import type { Database } from '../types/supabase.types';
 interface VersionOptions {
     silent?: boolean;
+    apikey?: string;
+    supaHost?: string;
+    supaAnon?: string;
 }
 interface DeleteSpecificVersionOptions extends VersionOptions {
     autoUnlink?: boolean;
 }
-export declare function deleteAppVersion(supabase: SupabaseClient<Database>, appid: string, bundle: string, options?: VersionOptions): Promise<void>;
+interface CapgoHttpOptions {
+    apikey: string;
+    silent?: boolean;
+    supaHost?: string;
+    supaAnon?: string;
+}
+export declare function deleteAppVersion(supabase: SupabaseClient<Database> | null, appid: string, bundle: string, options?: VersionOptions): Promise<void>;
 export declare function deleteSpecificVersion(supabase: SupabaseClient<Database>, appid: string, bundle: string, options?: DeleteSpecificVersionOptions): Promise<void>;
 export declare function displayBundles(data: (Database['public']['Tables']['app_versions']['Row'] & {
     keep?: string;
 })[], silent?: boolean): void;
-export declare function getActiveAppVersions(supabase: SupabaseClient<Database>, appid: string, options?: VersionOptions): Promise<{
+export declare function getActiveAppVersions(apikeyOrClient: string | SupabaseClient<Database>, appid: string, options?: VersionOptions): Promise<{
     app_id: string;
     checksum: string | null;
     cli_version: string | null;
@@ -36,8 +45,8 @@ export declare function getActiveAppVersions(supabase: SupabaseClient<Database>,
     updated_at: string | null;
     user_id: string | null;
 }[]>;
-export declare function getChannelsVersion(supabase: SupabaseClient<Database>, appid: string, options?: VersionOptions): Promise<(number | null)[]>;
-export declare function getVersionData(supabase: SupabaseClient<Database>, appid: string, bundle: string, options?: VersionOptions): Promise<{
+export declare function getChannelsVersion(options: CapgoHttpOptions, appid: string): Promise<(number | null)[]>;
+export declare function getVersionData(apikeyOrClient: string | SupabaseClient<Database>, appid: string, bundle: string, options?: VersionOptions): Promise<{
     app_id: string;
     checksum: string | null;
     cli_version: string | null;

package/dist/src/app/list.d.ts

@@ -31,7 +31,7 @@ export declare function listAppInternal(options: OptionsBase, silent?: boolean):
     updated_at: string | null;
     user_id: string | null;
 }[]>;
-export declare function listApp(options: OptionsBase): Promise<{
+export declare function listApp(options: OptionsBase, silent?: boolean): Promise<{
     allow_device_custom_id: boolean;
     allow_preview: boolean;
     android_store_url: string | null;

package/dist/src/build/credentials.d.ts

@@ -26,6 +26,12 @@ export type { CredentialFile, SavedCredentials } from '../schemas/build';
 export declare function parseOutputRetentionSeconds(raw: string): number;
 export declare function parseOptionalBoolean(value: boolean | string | undefined): boolean;
 export declare function parseInAppUpdatePriority(value: number | string): number;
+export declare const ANDROID_PLAY_STORE_TRACKS: readonly ["internal", "alpha", "beta", "production"];
+export type AndroidPlayStoreTrack = typeof ANDROID_PLAY_STORE_TRACKS[number];
+export declare const ANDROID_PLAY_STORE_RELEASE_STATUSES: readonly ["draft", "completed", "inProgress", "halted"];
+export type AndroidPlayStoreReleaseStatus = typeof ANDROID_PLAY_STORE_RELEASE_STATUSES[number];
+export declare function parseAndroidPlayStoreTrack(value: string): AndroidPlayStoreTrack;
+export declare function parseAndroidPlayStoreReleaseStatus(value: string): AndroidPlayStoreReleaseStatus;
 /**
  * Load saved credentials for a specific app
  * Checks local file first, then global file

package/dist/src/build/onboarding/android/types.d.ts

@@ -1,5 +1,5 @@
 import type { TailProgress } from '../tail-types.js';
-export type AndroidOnboardingStep = 'welcome' | 'resume-prompt' | 'credentials-exist' | 'backing-up' | 'no-platform' | 'keystore-method-select' | 'keystore-explainer' | 'keystore-existing-path' | 'keystore-existing-picker' | 'keystore-existing-store-password' | 'keystore-existing-detecting-alias' | 'keystore-existing-alias-select' | 'keystore-existing-alias' | 'keystore-existing-key-password' | 'keystore-new-alias' | 'keystore-new-password-method' | 'keystore-new-store-password' | 'keystore-new-key-password' | 'keystore-new-cn' | 'keystore-generating' | 'service-account-method-select' | 'sa-json-existing-path' | 'sa-json-existing-picker' | 'sa-json-validating' | 'sa-json-validation-failed' | 'google-sign-in' | 'google-sign-in-running' | 'play-developer-id-input' | 'gcp-projects-loading' | 'gcp-projects-select' | 'gcp-project-create-name' | 'android-package-select' | 'android-app-verify' | 'gcp-setup-running' | 'saving-credentials' | 'detecting-ci-secrets' | 'ci-secrets-setup' | 'ci-secrets-target-select' | 'ask-ci-secrets' | 'checking-ci-secrets' | 'confirm-ci-secret-overwrite' | 'uploading-ci-secrets' | 'ci-secrets-failed' | 'ask-github-actions-setup' | 'confirm-secrets-push' | 'ask-export-env' | 'exporting-env' | 'confirm-env-export-overwrite' | 'overwrite-and-export-env' | 'pick-package-manager' | 'pick-build-script' | 'pick-build-script-custom' | 'preview-workflow-file' | 'view-workflow-diff' | 'writing-workflow-file' | 'ask-build' | 'requesting-build' | 'ai-analysis-prompt' | 'ai-analysis-running' | 'ai-analysis-result' | 'ai-analysis-result-scroll' | 'build-complete' | 'error' | 'support-confirm' | 'support-log-view' | 'support-uploading';
+export type AndroidOnboardingStep = 'welcome' | 'resume-prompt' | 'credentials-exist' | 'backing-up' | 'no-platform' | 'keystore-method-select' | 'keystore-explainer' | 'keystore-existing-path' | 'keystore-existing-picker' | 'keystore-existing-store-password' | 'keystore-existing-detecting-alias' | 'keystore-existing-alias-select' | 'keystore-existing-alias' | 'keystore-existing-key-password' | 'keystore-new-alias' | 'keystore-new-password-method' | 'keystore-new-store-password' | 'keystore-new-key-password' | 'keystore-new-cn' | 'keystore-generating' | 'service-account-method-select' | 'sa-json-existing-path' | 'sa-json-existing-picker' | 'sa-json-validating' | 'sa-json-validation-failed' | 'google-sign-in' | 'google-sign-in-running' | 'play-developer-id-input' | 'gcp-projects-loading' | 'gcp-projects-select' | 'gcp-project-create-name' | 'android-package-select' | 'android-app-verify' | 'gcp-setup-running' | 'saving-credentials' | 'detecting-ci-secrets' | 'ci-secrets-setup' | 'ci-secrets-target-select' | 'ask-ci-secrets' | 'checking-ci-secrets' | 'confirm-ci-secret-overwrite' | 'uploading-ci-secrets' | 'ci-secrets-failed' | 'ask-github-actions-setup' | 'confirm-secrets-push' | 'ask-export-env' | 'exporting-env' | 'confirm-env-export-overwrite' | 'overwrite-and-export-env' | 'pick-package-manager' | 'pick-build-script' | 'pick-build-script-custom' | 'preview-workflow-file' | 'view-workflow-diff' | 'writing-workflow-file' | 'ask-build' | 'requesting-build' | 'build-log-view' | 'ai-analysis-prompt' | 'ai-analysis-running' | 'ai-analysis-result' | 'ai-analysis-result-scroll' | 'build-complete' | 'error' | 'support-confirm' | 'support-log-view' | 'support-uploading';
 export type AndroidOnboardingErrorCategory = 'keystore_invalid' | 'google_oauth_failed' | 'play_account_id_invalid' | 'sa_json_shape_invalid' | 'sa_json_token_rejected' | 'sa_json_no_app_access' | 'sa_json_network_error' | 'unknown';
 export type KeystoreMethod = 'existing' | 'generate';
 export type ServiceAccountMethod = 'existing' | 'generate';

package/dist/src/build/onboarding/android/ui/app.d.ts

@@ -9,6 +9,8 @@ interface AppProps {
     /** Optional Capgo API key passed via -a/--apikey flag; takes precedence over saved key. */
     apikey?: string;
     supaHost?: string;
+    /** Custom Supabase anon key for self-hosting (--supa-anon). */
+    supaAnon?: string;
     /** Correlation id for this onboarding run; emitted as `journey_id` on every analytics event. */
     journeyId: string;
     /** Reports the current step to the shell on every transition, so the caller can

package/dist/src/build/onboarding/command.d.ts

@@ -3,6 +3,8 @@ export interface OnboardingBuilderOptions {
     apikey?: string;
     platform?: string;
     supaHost?: string;
+    /** Custom Supabase anon key for self-hosting (--supa-anon). */
+    supaAnon?: string;
     /**
      * Offer the self-update prompt as the first wizard screen. ONLY the genuine
      * `build init` / `onboarding` entrypoint sets this. Other callers that reach

package/dist/src/build/onboarding/types.d.ts

@@ -17,7 +17,7 @@ export interface OnboardingResult {
     /** Present only when outcome === 'completed'. */
     summary?: OnboardingCompletionSummary;
 }
-export type OnboardingStep = 'welcome' | 'resume-prompt' | 'platform-select' | 'adding-platform' | 'credentials-exist' | 'backing-up' | 'setup-method-select' | 'import-scanning' | 'import-distribution-mode' | 'import-pick-identity' | 'import-pick-profile' | 'import-validating-all-certs' | 'import-checking-apple-cert' | 'import-no-match-recovery' | 'import-portal-explanation' | 'import-provide-profile-path' | 'import-create-profile-only' | 'import-export-warning' | 'import-exporting' | 'p8-source-select' | 'asc-key-generating' | 'asc-key-created' | 'api-key-instructions' | 'p8-method-select' | 'input-p8-path' | 'input-key-id' | 'input-issuer-id' | 'verifying-key' | 'verify-app' | 'creating-certificate' | 'cert-limit-prompt' | 'revoking-certificate' | 'creating-profile' | 'duplicate-profile-prompt' | 'deleting-duplicate-profiles' | 'saving-credentials' | 'detecting-ci-secrets' | 'ci-secrets-setup' | 'ci-secrets-target-select' | 'ask-ci-secrets' | 'checking-ci-secrets' | 'confirm-ci-secret-overwrite' | 'uploading-ci-secrets' | 'ci-secrets-failed' | 'ask-github-actions-setup' | 'confirm-secrets-push' | 'ask-export-env' | 'exporting-env' | 'confirm-env-export-overwrite' | 'overwrite-and-export-env' | 'pick-package-manager' | 'pick-build-script' | 'pick-build-script-custom' | 'preview-workflow-file' | 'view-workflow-diff' | 'writing-workflow-file' | 'ask-build' | 'requesting-build' | 'ai-analysis-prompt' | 'ai-analysis-running' | 'ai-analysis-result' | 'ai-analysis-result-scroll' | 'build-complete' | 'no-platform' | 'error' | 'support-confirm' | 'support-log-view' | 'support-uploading';
+export type OnboardingStep = 'welcome' | 'resume-prompt' | 'platform-select' | 'adding-platform' | 'credentials-exist' | 'backing-up' | 'setup-method-select' | 'import-scanning' | 'import-distribution-mode' | 'import-pick-identity' | 'import-pick-profile' | 'import-validating-all-certs' | 'import-checking-apple-cert' | 'import-no-match-recovery' | 'import-portal-explanation' | 'import-provide-profile-path' | 'import-create-profile-only' | 'import-export-warning' | 'import-exporting' | 'p8-source-select' | 'asc-key-generating' | 'asc-key-created' | 'api-key-instructions' | 'p8-method-select' | 'input-p8-path' | 'input-key-id' | 'input-issuer-id' | 'verifying-key' | 'verify-app' | 'creating-certificate' | 'cert-limit-prompt' | 'revoking-certificate' | 'creating-profile' | 'duplicate-profile-prompt' | 'deleting-duplicate-profiles' | 'saving-credentials' | 'detecting-ci-secrets' | 'ci-secrets-setup' | 'ci-secrets-target-select' | 'ask-ci-secrets' | 'checking-ci-secrets' | 'confirm-ci-secret-overwrite' | 'uploading-ci-secrets' | 'ci-secrets-failed' | 'ask-github-actions-setup' | 'confirm-secrets-push' | 'ask-export-env' | 'exporting-env' | 'confirm-env-export-overwrite' | 'overwrite-and-export-env' | 'pick-package-manager' | 'pick-build-script' | 'pick-build-script-custom' | 'preview-workflow-file' | 'view-workflow-diff' | 'writing-workflow-file' | 'ask-build' | 'requesting-build' | 'build-log-view' | 'ai-analysis-prompt' | 'ai-analysis-running' | 'ai-analysis-result' | 'ai-analysis-result-scroll' | 'build-complete' | 'no-platform' | 'error' | 'support-confirm' | 'support-log-view' | 'support-uploading';
 export type OnboardingErrorCategory = 'apple_api_unauthorized' | 'apple_api_forbidden' | 'apple_agreements_missing' | 'apple_api_rate_limited' | 'cert_limit_reached' | 'profile_creation_failed' | 'p8_invalid' | 'keychain_no_identities' | 'keychain_export_failed' | 'profile_no_match' | 'profile_read_failed' | 'unknown';
 export interface ApiKeyData {
     keyId: string;

package/dist/src/build/onboarding/ui/app.d.ts

@@ -37,6 +37,8 @@ interface AppProps {
     /** Optional Capgo API key passed via -a/--apikey flag; takes precedence over saved key */
     apikey?: string;
     supaHost?: string;
+    /** Custom Supabase anon key for self-hosting (--supa-anon). */
+    supaAnon?: string;
     /** Correlation id for this onboarding run; emitted as `journey_id` on every analytics event. */
     journeyId: string;
     /** Reports the current step to the shell on every transition, so the caller can

package/dist/src/build/onboarding/ui/components.d.ts

@@ -144,6 +144,7 @@ export declare const FullscreenBuildOutput: FC<{
     title: string;
     lines: string[];
     terminalRows: number;
+    onExit?: () => void;
 }>;
 /**
  * Minimal bordered table component for the confirm-secrets-push step.

package/dist/src/build/onboarding/ui/shell.d.ts

@@ -26,6 +26,8 @@ export interface OnboardingShellProps {
     guidedHelperUsable: boolean;
     apikey?: string;
     supaHost?: string;
+    /** Custom Supabase anon key for self-hosting (--supa-anon). */
+    supaAnon?: string;
     /** Correlation id for this onboarding run; threaded into every analytics event the apps emit. */
     journeyId: string;
     /** Pre-resolved platform (--platform flag or the single existing native dir); skips the picker. */

package/dist/src/build/onboarding/ui/steps/android-shared.d.ts

@@ -36,7 +36,7 @@ export interface ErrorStepProps {
 }
 export declare const ErrorStep: FC<ErrorStepProps>;
 export interface AiAnalysisPromptStepProps {
-    onChoose: (choice: 'debug' | 'skip' | 'support') => void;
+    onChoose: (choice: 'debug' | 'logs' | 'skip' | 'support') => void;
     dense?: boolean;
 }
 export declare const AiAnalysisPromptStep: FC<AiAnalysisPromptStepProps>;

package/dist/src/bundle/auto-bump-ai.d.ts

@@ -0,0 +1,50 @@
+import type { SupabaseClient } from '@supabase/supabase-js';
+import type { Database } from '../types/supabase.types';
+import type { AutoBumpLevel } from '../versionHelpers';
+export type ManifestEntry = {
+    file: string;
+    hash: string;
+};
+export type ManifestDiff = {
+    added: string[];
+    removed: string[];
+    changed: string[];
+    counts: {
+        added: number;
+        removed: number;
+        changed: number;
+    };
+};
+export type AiBumpDecision = {
+    level: AutoBumpLevel;
+    reason: string;
+};
+export declare function diffManifests(local: ManifestEntry[], remote: ManifestEntry[]): ManifestDiff;
+export declare function fetchRemoteManifest(supabase: SupabaseClient<Database>, versionId: number): Promise<ManifestEntry[]>;
+export declare function resolveBaseVersionForAutoBump(supabase: SupabaseClient<Database>, appid: string, channels: string[]): Promise<{
+    name: string;
+    id: number;
+} | null>;
+export declare function requestAiBumpLevel(options: {
+    apikey: string;
+    appId: string;
+    baseVersion: string;
+    manifestDiff: ManifestDiff;
+    nativeCompatibility?: {
+        summary: string;
+        breaking?: boolean;
+    };
+    supaHost?: string;
+    supaAnon?: string;
+}): Promise<AiBumpDecision>;
+export declare function resolveAutoBumpLevelFromAi(ctx: {
+    supabase: SupabaseClient<Database>;
+    appid: string;
+    channels: string[];
+    path: string;
+    apikey: string;
+    options?: {
+        supaHost?: string;
+        supaAnon?: string;
+    };
+}): Promise<AiBumpDecision>;

package/dist/src/bundle/upload.d.ts

@@ -1,10 +1,24 @@
 import type { UploadBundleResult } from '../schemas/bundle';
 import type { UploadReporter, UploadSpinner } from './reporter';
 import type { OptionsUpload } from './upload_interface';
+import { CliUserError } from '../shared/cli-user-error';
 import { createSupabaseClient } from '../utils';
 type SupabaseType = Awaited<ReturnType<typeof createSupabaseClient>>;
 export type { UploadBundleResult };
 export type { UploadReporter, UploadSpinner };
+/**
+ * Thrown when `--fail-on-incompatible` aborts an upload because the bundle is
+ * incompatible with the channel's current native packages. A dedicated type lets
+ * `uploadBundle` skip the generic "retry the upload?" prompt — retrying an
+ * incompatible bundle is pointless.
+ *
+ * Extends `CliUserError` so `shouldCapturePosthogException` skips it: the
+ * `--fail-on-incompatible` abort is a state the user asked for, not a crash, so
+ * it must not open an error tracking `$exception` issue. The non-zero exit, the
+ * printed message, and the `Bundle Upload Blocked` event stay unchanged.
+ */
+export declare class IncompatibleBundleError extends CliUserError {
+}
 export declare function getDefaultUploadChannel(appId: string, supabase: SupabaseType, hostWeb: string): Promise<string>;
 export declare function uploadBundleInternal(preAppid: string, options: OptionsUpload, silent?: boolean, reporter?: UploadReporter): Promise<UploadBundleResult>;
 /**

package/dist/src/capacitor-cli.d.ts

@@ -6,6 +6,7 @@ export interface CapacitorCliConfig {
     };
 }
 export declare const requireTS: (typescript: unknown, filePath: string) => Record<string, unknown>;
+export declare const formatJSObject: (value: unknown) => string;
 export declare const loadConfig: () => Promise<CapacitorCliConfig>;
 export declare const writeConfig: (extConfig: CapacitorConfig, extConfigFilePath: string) => Promise<void>;
 export declare const findMonorepoRoot: (currentPath: string) => string;

package/dist/src/channel/add.d.ts

@@ -1,41 +1,5 @@
 import type { ChannelAddOptions } from '../schemas/channel';
 export declare function addChannelInternal(channelId: string, appId: string, options: ChannelAddOptions, silent?: boolean): Promise<{
-    allow_dev: boolean;
-    allow_device: boolean;
-    allow_device_self_set: boolean;
-    allow_emulator: boolean;
-    allow_prod: boolean;
-    android: boolean;
-    app_id: string;
-    created_at: string;
-    created_by: string;
-    disable_auto_update: import("../sdk").Database["public"]["Enums"]["disable_update"];
-    disable_auto_update_under_native: boolean;
-    electron: boolean;
-    id: number;
-    ios: boolean;
     name: string;
-    owner_org: string;
-    public: boolean;
-    auto_pause_action: string;
-    auto_pause_confidence: number;
-    auto_pause_cooldown_minutes: number;
-    auto_pause_enabled: boolean;
-    auto_pause_failure_rate_bps: number | null;
-    auto_pause_last_checked_at: string | null;
-    auto_pause_last_triggered_at: string | null;
-    auto_pause_min_attempts: number | null;
-    auto_pause_min_failures: number | null;
-    auto_pause_window_minutes: number;
-    rollout_cache_ttl_seconds: number;
-    rollout_enabled: boolean;
-    rollout_id: string;
-    rollout_pause_reason: string | null;
-    rollout_paused_at: string | null;
-    rollout_percentage_bps: number;
-    rollout_version: number | null;
-    rbac_id: string;
-    updated_at: string;
-    version: number | null;
 }>;
 export declare function addChannel(channelId: string, appId: string, options: ChannelAddOptions): Promise<void>;

package/dist/src/mcp/tool-schemas.d.ts

@@ -30,6 +30,7 @@ export declare const mcpUploadBundleInputSchema: z.ZodObject<{
         minor: "minor";
         patch: "patch";
         metadata: "metadata";
+        ai: "ai";
     }>>;
     encrypt: z.ZodOptional<z.ZodBoolean>;
     capacitorConfig: z.ZodOptional<z.ZodString>;

package/dist/src/posthog.d.ts

@@ -8,7 +8,15 @@ interface CapturePosthogExceptionPayload {
 }
 export declare function isTruthyEnvValue(value: string | undefined): boolean;
 export declare function getPosthogToken(): string | undefined;
+/**
+ * Expected user-configuration failures: a bad or missing API key (401
+ * `invalid_apikey` / `no_key_provided`) or an app that has not been created
+ * yet. These are real user errors, not CLI bugs — they are still counted via
+ * `trackCommandFailed`, but must NOT be sent to error tracking as exceptions.
+ */
+export declare function isExpectedUserError(error: unknown): boolean;
 export declare function shouldCapturePosthogException(error: unknown): boolean;
 export declare function getCommandPath(command: Command): string;
+export declare function getInstallId(configDir?: string): string;
 export declare function capturePosthogException(payload: CapturePosthogExceptionPayload): Promise<boolean>;
 export {};

package/dist/src/preview/qr.d.ts

@@ -1,8 +1,13 @@
-import type { SupabaseClient } from '@supabase/supabase-js';
 import type { OptionsBase } from '../schemas/base';
-import type { Database } from '../types/supabase.types';
 import { type PreviewWebEnv } from './web-url';
-type CapgoSupabaseClient = SupabaseClient<Database>;
+import { invokeCapgoCliApi } from '../utils';
+export interface CapgoPreviewHttpOptions {
+    apikey: string;
+    supaHost?: string;
+    supaAnon?: string;
+    /** Injectable for unit tests; defaults to invokeCapgoCliApi. */
+    invoke?: typeof invokeCapgoCliApi;
+}
 export interface PreviewQrCommandOptions extends OptionsBase {
     bundle?: string;
     channel?: string;
@@ -27,10 +32,10 @@ export type PreviewQrTarget = {
 export declare function buildPreviewQrUrl(target: PreviewQrTarget): string;
 export declare function renderTerminalQrCode(value: string): Promise<string>;
 export declare function renderQrCodePng(value: string, outputPath: string): Promise<string>;
-export declare function assertAppAllowsPreview(supabase: CapgoSupabaseClient, appId: string): Promise<void>;
-export declare function resolveBundlePreviewTarget(supabase: CapgoSupabaseClient, appId: string, bundleRef: string): Promise<PreviewQrTarget | null>;
-export declare function resolveChannelPreviewTarget(supabase: CapgoSupabaseClient, appId: string, channelRef: string): Promise<PreviewQrTarget | null>;
-export declare function resolvePreviewQrTarget(supabase: CapgoSupabaseClient, appId: string, options: Pick<PreviewQrCommandOptions, 'bundle' | 'channel' | 'target' | 'type'>): Promise<PreviewQrTarget>;
+export declare function assertAppAllowsPreview(options: CapgoPreviewHttpOptions, appId: string): Promise<void>;
+export declare function resolveBundlePreviewTarget(options: CapgoPreviewHttpOptions, appId: string, bundleRef: string): Promise<PreviewQrTarget | null>;
+export declare function resolveChannelPreviewTarget(options: CapgoPreviewHttpOptions, appId: string, channelRef: string): Promise<PreviewQrTarget | null>;
+export declare function resolvePreviewQrTarget(http: CapgoPreviewHttpOptions, appId: string, options: Pick<PreviewQrCommandOptions, 'bundle' | 'channel' | 'target' | 'type'>): Promise<PreviewQrTarget>;
 export interface PreviewQrOutputOptions {
     png?: string;
     url?: boolean;
@@ -39,6 +44,5 @@ export interface PreviewQrOutputOptions {
 }
 export declare function resolvePreviewQrOutputValue(target: PreviewQrTarget, options?: PreviewQrOutputOptions): string;
 export declare function printPreviewQrCode(target: PreviewQrTarget, options?: PreviewQrOutputOptions): Promise<void>;
-export declare function printPreviewQrForResolvedTarget(supabase: CapgoSupabaseClient, appId: string, target: PreviewQrTarget, options?: PreviewQrOutputOptions): Promise<void>;
+export declare function printPreviewQrForResolvedTarget(http: CapgoPreviewHttpOptions, appId: string, target: PreviewQrTarget, output?: PreviewQrOutputOptions): Promise<void>;
 export declare function getPreviewQr(appId: string, target: string | undefined, options: PreviewQrCommandOptions): Promise<void>;
-export {};

package/dist/src/schemas/auth.d.ts

@@ -2,13 +2,13 @@ import { z } from 'zod';
 export declare const mcpLoginInputSchema: z.ZodObject<{
     apikey: z.ZodString;
     scope: z.ZodOptional<z.ZodEnum<{
-        global: "global";
         local: "local";
+        global: "global";
     }>>;
 }, z.core.$strip>;
 export declare const mcpLogoutInputSchema: z.ZodObject<{
     scope: z.ZodOptional<z.ZodEnum<{
-        global: "global";
         local: "local";
+        global: "global";
     }>>;
 }, z.core.$strip>;