@capgo/cli 8.43.0 → 8.45.0

package/dist/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "8.43.0",
+  "version": "8.45.0",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
@@ -65,6 +65,7 @@
     "check-posix-paths": "node test/check-posix-paths.js",
     "generate-docs": "node dist/index.js generate-docs README.md",
     "test:bundle": "bun test/test-bundle.mjs",
+    "test:bundle-validation": "bun test test/bundle/",
     "test:prescan": "bun test test/prescan/",
     "test:functional": "bun test/test-functional.mjs",
     "test:semver": "bun test/test-semver-validation.mjs",
@@ -75,6 +76,7 @@
     "test:native-dependencies": "bun test/test-native-dependencies.mjs && bun test/test-get-remote-dependencies.mjs",
     "test:package-json-guard": "bun test/test-package-json-guard.mjs",
     "test:credentials": "bun test/test-credentials.mjs",
+    "test:credentials-export": "bun test/test-credentials-export.mjs",
     "test:asc-key-protocol": "bun test/test-asc-key-protocol.mjs",
     "test:credentials-validation": "bun test/test-credentials-validation.mjs",
     "test:android-service-account-validation": "bun test/test-android-service-account-validation.mjs",
@@ -88,6 +90,7 @@
     "test:v2-event-migration": "bun test/test-v2-event-migration.mjs",
     "test:analytics": "bun test/test-analytics.mjs",
     "test:cli-headers": "bun test/test-cli-headers.mjs",
+    "test:min-cli-version": "bun test/test-min-cli-version.mjs",
     "test:authenticated-command-invocation": "bun test/test-authenticated-command-invocation.mjs",
     "test:analytics-error-category": "bun test/test-analytics-error-category.mjs",
     "test:analytics-org-resolver": "bun test/test-analytics-org-resolver.mjs",
@@ -109,6 +112,7 @@
     "test:app-list-output-text": "bun test/test-app-list-output-text.mjs",
     "test:doctor-analytics": "bun test/test-doctor-analytics.mjs",
     "test:posthog-exception": "bun test/test-posthog-exception.mjs",
+    "test:cli-recovery": "bun test/test-cli-recovery.mjs",
     "test:create-supabase-client": "bun test/test-create-supabase-client.mjs",
     "test:onboarding-recovery": "bun test/test-onboarding-recovery.mjs",
     "test:onboarding-progress": "bun test/test-onboarding-progress.mjs",
@@ -170,7 +174,7 @@
     "test:android-version": "bun test/test-android-version.mjs",
     "test:platform-flow-contract": "bun test/test-platform-flow-contract.mjs",
     "test:tail-engine-shared": "bun test/test-tail-engine-shared.mjs",
-    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:cli-headers && bun run test:authenticated-command-invocation && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:app-list-output-text && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:create-supabase-client && bun run test:build-platform-selection && bun run test:builder-project-discovery && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:channel-add-exists && bun run test:wait-log && bun run test:init-guardrails && bun run test:init-replay && bun run test:init-telemetry && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:android-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:2fa-compliance-network && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
+    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:bundle-validation && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-export && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:cli-headers && bun run test:min-cli-version && bun run test:authenticated-command-invocation && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:app-list-output-text && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:cli-recovery && bun run test:create-supabase-client && bun run test:build-platform-selection && bun run test:builder-project-discovery && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:channel-add-exists && bun run test:wait-log && bun run test:init-guardrails && bun run test:init-replay && bun run test:init-telemetry && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:android-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:2fa-compliance-network && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
     "test:build-platform-selection": "bun test/test-build-platform-selection.mjs",
     "test:builder-project-discovery": "bun test/test-builder-project-discovery.mjs",
     "test:ai-log-capture": "bun test/test-ai-log-capture.mjs",

package/dist/src/api/app.d.ts

@@ -44,6 +44,5 @@ export declare function check2FAComplianceForApp(supabase: SupabaseClient<Databa
 export declare function checkAppExistsAndHasPermissionOrgErr(supabase: SupabaseClient<Database>, apikey: string, appid: string, requiredPermissionKey: string, silent?: boolean, skip2FACheck?: boolean, channelId?: number | null): Promise<boolean>;
 export type { AppOptions as Options } from '../schemas/app';
 export declare const newIconPath = "assets/icon.png";
-export declare const defaultAppIconPath = "public/capgo.png";
 export declare function resolveAppSetIconPath(explicitIcon?: string): string | undefined;
 export declare function getAppIconStoragePath(organizationUid: string, appId: string): string;

package/dist/src/api/crypto.d.ts

@@ -14,6 +14,7 @@ interface RSAKeys {
     privateKey: string;
 }
 export declare function createRSA(): RSAKeys;
+export declare function derivePublicKeyFromPrivate(privateKeyPem: string): string;
 /**
  * Calculate the key ID from a public key
  * Shows the first 20 characters of base64-encoded key body for easy visual verification

package/dist/src/api/min-cli-version.d.ts

@@ -0,0 +1,16 @@
+export interface MinCliVersionConfig {
+    minCliVersion?: string;
+    minCliVersionReason?: string;
+}
+/**
+ * Returns true when `currentVersion` is a valid semver strictly below `minCliVersion`.
+ */
+export declare function isCliVersionBelowMin(currentVersion: string, minCliVersion: string): boolean;
+/**
+ * Builds the user-facing message shown when the CLI is below the API minimum version.
+ */
+export declare function formatMinCliVersionMessage(currentVersion: string, minCliVersion: string, reason?: string): string;
+/**
+ * Throws `CliUserError` when the running CLI is older than the API-published minimum.
+ */
+export declare function assertMinCliVersion(config: MinCliVersionConfig, currentVersion?: string, silent?: boolean): void;

package/dist/src/app/add.d.ts

@@ -9,7 +9,7 @@ export declare function addAppInternal(initialAppId: string, options: AppOptions
     organizationUid: string;
     userId: string;
     name: string;
-    iconUrl: string;
-    signedURL: string;
+    iconUrl: string | undefined;
+    signedURL: string | undefined;
 }>;
 export declare function addApp(appId: string, options: AppOptions): Promise<void>;

package/dist/src/build/credentials-base64.d.ts

@@ -0,0 +1,3 @@
+import { Buffer } from 'node:buffer';
+export declare function canDecodeCredentialBase64(key: string, value: string): boolean;
+export declare function decodeCredentialBase64(value: string): Buffer;

package/dist/src/build/credentials-export-command.d.ts

@@ -0,0 +1,41 @@
+import type { SavedCredentials } from '../schemas/build';
+import { link, mkdtemp, open, rmdir, unlink } from 'node:fs/promises';
+type Platform = 'ios' | 'android';
+type Store = 'local' | 'global';
+type CredentialsExportOptions = {
+    appId?: string;
+    platform?: string;
+    local?: boolean;
+    global?: boolean;
+    file?: string;
+    raw?: boolean;
+    decodeBase64?: boolean;
+};
+type CredentialsExportStores = Record<Store, SavedCredentials | null>;
+type ResolvedCredentialsExport = {
+    value: string;
+    source: Store;
+    platforms: Platform[];
+};
+type FileValue = {
+    data: string | Buffer;
+    decoded: boolean;
+    warnLiteral: boolean;
+};
+type FileWriterDependencies = {
+    mkdtemp?: typeof mkdtemp;
+    open?: typeof open;
+    link?: typeof link;
+    unlink?: typeof unlink;
+    rmdir?: typeof rmdir;
+};
+export declare function isCredentialsExportInvocation(argv: readonly string[]): boolean;
+export declare function resolveCredentialsExport(variable: string, options: CredentialsExportOptions, savedStores: CredentialsExportStores): ResolvedCredentialsExport;
+export declare function resolveCredentialsFileValue(variable: string, value: string, { decodeBase64, interactive, promptDecode }: {
+    decodeBase64?: boolean;
+    interactive: boolean;
+    promptDecode: () => Promise<boolean | symbol>;
+}): Promise<FileValue>;
+export declare function writeCredentialsExportFile(path: string, data: string | Buffer, { mkdtemp: makeTemp, open: openFile, link: publish, unlink: removeFile, rmdir: removeDir }?: FileWriterDependencies): Promise<void>;
+export declare function exportCredentialsCommand(variable: string | undefined, options: CredentialsExportOptions): Promise<void>;
+export {};

package/dist/src/build/credentials-export-terminal.d.ts

@@ -0,0 +1,3 @@
+export declare function sanitizeCredentialsExportTerminalText(value: string): string;
+export declare const quoteCredentialsExportTerminalValue: (value: string | undefined) => string;
+export declare function writeCredentialsExportStderr(message: string): Promise<void>;

package/dist/src/build/credentials.d.ts

@@ -36,7 +36,7 @@ export declare function parseAndroidPlayStoreReleaseStatus(value: string): Andro
  * Load saved credentials for a specific app
  * Checks local file first, then global file
  */
-export declare function loadSavedCredentials(appId?: string, local?: boolean): Promise<SavedCredentials | null>;
+export declare function loadSavedCredentials(appId?: string, local?: boolean, throwOnReadError?: boolean): Promise<SavedCredentials | null>;
 /**
  * Load credentials from environment variables
  * Only returns credentials that are actually set in env

package/dist/src/bundle/validate-inputs.d.ts

@@ -0,0 +1,4 @@
+export declare function requireZipPath(zipPath: string | undefined): asserts zipPath is string;
+export declare function requireExistingZipPath(zipPath: string): void;
+export declare function requireChecksum(checksum: string | undefined): string;
+export declare function requireIvSessionKey(ivSessionKey: string | undefined): asserts ivSessionKey is string;

package/dist/src/recovery/app-id.d.ts

@@ -0,0 +1,15 @@
+import type { CapacitorConfig } from '../config';
+export declare function isValidAppId(appId: string): boolean;
+export declare function parsePackageJsonOptionPaths(packageJson?: string): string[] | undefined;
+export declare function collectAppIdCandidates(config: CapacitorConfig | undefined, projectRoot?: string, packageJsonPaths?: string[]): string[];
+export interface ResolveAppIdOptions {
+    explicitAppId?: string;
+    config?: CapacitorConfig;
+    apikey?: string;
+    packageJsonPaths?: string[];
+    interactive?: boolean;
+    json?: boolean;
+    supaHost?: string;
+    supaAnon?: string;
+}
+export declare function resolveAppIdWithRecovery(options: ResolveAppIdOptions): Promise<string>;

package/dist/src/recovery/bundle-zip.d.ts

@@ -0,0 +1,12 @@
+export declare function resolveLocalSemverFallback(uuid: string): string;
+export declare function resolveUpdaterPackageJsonPath(packageJsonOption?: string): string;
+export declare function buildUpdaterInstallInvocation(pm: {
+    pm: string;
+    installCommand: string;
+}, versionToInstall: string, declaredVersion: string | null): {
+    command: string;
+    args: string[];
+} | null;
+export declare function recoverInvalidSemverBundle(bundle: string, fallback: string): Promise<string | null>;
+export declare function recoverMissingWebDirPath(pathLabel: string): Promise<string | null>;
+export declare function recoverMissingUpdater(packageJsonPath?: string): Promise<boolean>;

package/dist/src/recovery/notify-app-ready.d.ts

@@ -0,0 +1,17 @@
+export declare const notifyAppReadyDocsUrl = "https://capgo.app/docs/plugins/updater/notify-app-ready/";
+export declare function findBuildEntryJsPath(webDir: string): string | undefined;
+export declare function resolveCapacitorUpdaterIdentifier(content: string): string | undefined;
+export declare function hasCallableCapacitorUpdaterBinding(content: string): boolean;
+export declare function injectNotifyAppReadyIntoJs(filePath: string, content: string): string;
+export declare function injectNotifyAppReadyIntoBuildJs(content: string): string | undefined;
+export declare function patchNotifyAppReadyInBuildFolder(webDir: string): string | undefined;
+export declare function patchNotifyAppReadyInSourceAsync(projectRoot?: string): Promise<string | undefined>;
+export type NotifyAppReadyRecoveryResult = 'present' | 'recovered' | 'skipped';
+export interface EnsureNotifyAppReadyOptions {
+    webDir: string;
+    interactive?: boolean;
+    json?: boolean;
+    allowSkip?: boolean;
+}
+export declare function buildCiNotifyAppReadyMessage(webDir: string): string;
+export declare function ensureNotifyAppReadyInBuildFolder(options: EnsureNotifyAppReadyOptions): Promise<NotifyAppReadyRecoveryResult>;

package/dist/src/recovery/public-key.d.ts

@@ -0,0 +1,7 @@
+export interface EnsurePublicKeyOptions {
+    interactive?: boolean;
+    silent?: boolean;
+    json?: boolean;
+}
+export declare function ensurePublicKeyInConfig(options?: EnsurePublicKeyOptions): Promise<void>;
+export declare function ensurePublicKeyFromPrivateKey(privateKeyPem: string, options?: Pick<EnsurePublicKeyOptions, 'silent' | 'json'>): Promise<void>;

package/dist/src/schemas/bundle.d.ts

@@ -25,6 +25,7 @@ export declare const optionsUploadSchema: z.ZodObject<{
     s3Endpoint: z.ZodOptional<z.ZodString>;
     bundleUrl: z.ZodOptional<z.ZodBoolean>;
     codeCheck: z.ZodOptional<z.ZodBoolean>;
+    ignoreNotifyAppReady: z.ZodOptional<z.ZodBoolean>;
     oldEncryption: z.ZodOptional<z.ZodBoolean>;
     minUpdateVersion: z.ZodOptional<z.ZodString>;
     autoMinUpdateVersion: z.ZodOptional<z.ZodBoolean>;
@@ -114,6 +115,7 @@ export declare const bundleZipOptionsSchema: z.ZodObject<{
     bundle: z.ZodOptional<z.ZodString>;
     path: z.ZodOptional<z.ZodString>;
     codeCheck: z.ZodOptional<z.ZodBoolean>;
+    ignoreNotifyAppReady: z.ZodOptional<z.ZodBoolean>;
     name: z.ZodOptional<z.ZodString>;
     json: z.ZodOptional<z.ZodBoolean>;
     keyV2: z.ZodOptional<z.ZodBoolean>;