@capgo/cli 8.57.0 → 8.59.0

package/dist/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "8.57.0",
+  "version": "8.59.0",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
@@ -133,10 +133,12 @@
     "test:init-replay": "bun test/test-init-replay.mjs",
     "test:init-telemetry": "bun test/test-init-telemetry.mjs",
     "test:capacitor-config-target": "bun test/test-capacitor-config-target.mjs",
+    "test:builder-app-id-config": "bun test/test-builder-app-id-config.mjs",
     "test:capacitor-config-typescript7": "bun test/test-capacitor-config-typescript7.mjs",
     "test:capacitor-config-native-import": "bun test/test-capacitor-config-native-import.mjs",
     "test:cli-user-error-config": "bun test/test-cli-user-error-config.mjs",
-    "test:init-monorepo-targeting": "bun run test:capacitor-config-target && bun run test:capacitor-config-typescript7 && bun run test:capacitor-config-native-import && bun run test:cli-user-error-config && bun test/test-init-monorepo-targeting.mjs",
+    "test:cordova-upload-mode": "bun test/test-cordova-upload-mode.mjs",
+    "test:init-monorepo-targeting": "bun run test:capacitor-config-target && bun run test:builder-app-id-config && bun run test:capacitor-config-typescript7 && bun run test:capacitor-config-native-import && bun run test:cli-user-error-config && bun test/test-init-monorepo-targeting.mjs",
     "test:prompt-preferences": "bun test/test-prompt-preferences.mjs",
     "test:esm-sdk": "node test/test-sdk-esm.mjs",
     "test:auth-session": "bun test/test-auth-session.mjs",
@@ -184,7 +186,7 @@
     "test:android-version": "bun test/test-android-version.mjs",
     "test:platform-flow-contract": "bun test/test-platform-flow-contract.mjs",
     "test:tail-engine-shared": "bun test/test-tail-engine-shared.mjs",
-    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:notify-app-ready-background && bun run test:bundle-validation && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-export && bun run test:ios-provisioning-map && bun run test:ios-provisioning-command && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:cli-help && bun run test:build-cache-payload && bun run test:build-cancellation && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:cli-headers && bun run test:min-cli-version && bun run test:authenticated-command-invocation && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:app-add-exists && bun run test:app-add-getting-started && bun run test:app-list-output-text && bun run test:app-todo && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:cli-recovery && bun run test:create-supabase-client && bun run test:build-platform-selection && bun run test:builder-project-discovery && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:channel-list && bun run test:channel-add-exists && bun run test:wait-log && bun run test:init-guardrails && bun run test:init-upload-recovery && bun run test:init-replay && bun run test:init-telemetry && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:android-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-gcp && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:2fa-compliance-network && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
+    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:notify-app-ready-background && bun run test:bundle-validation && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:cordova-upload-mode && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-export && bun run test:ios-provisioning-map && bun run test:ios-provisioning-command && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:cli-help && bun run test:build-cache-payload && bun run test:build-cancellation && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:cli-headers && bun run test:min-cli-version && bun run test:authenticated-command-invocation && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:app-add-exists && bun run test:app-add-getting-started && bun run test:app-list-output-text && bun run test:app-todo && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:cli-recovery && bun run test:create-supabase-client && bun run test:build-platform-selection && bun run test:builder-project-discovery && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:channel-list && bun run test:channel-add-exists && bun run test:wait-log && bun run test:init-guardrails && bun run test:init-upload-recovery && bun run test:init-replay && bun run test:init-telemetry && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:android-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-gcp && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:2fa-compliance-network && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
     "test:build-platform-selection": "bun test/test-build-platform-selection.mjs",
     "test:builder-project-discovery": "bun test/test-builder-project-discovery.mjs",
     "test:ai-log-capture": "bun test/test-ai-log-capture.mjs",

package/dist/src/analytics/track.d.ts

@@ -2,7 +2,8 @@ import { withSupabaseSource } from './supabase-perf';
 export { getGlobalAnalyticsProps, getInvocationSource, setInvocationSource } from './global-props';
 export declare function isTelemetryDisabled(): boolean;
 export declare function flushAnalytics(timeoutMs?: number): Promise<void>;
-export declare function resolveTrackingContext(apikey: string, signal?: AbortSignal): Promise<{
+export declare function isBuilderInvocation(commandPath: string): boolean;
+export declare function resolveTrackingContext(apikey: string, signal?: AbortSignal, builder?: boolean): Promise<{
     appId?: string;
     orgId?: string;
 }>;

package/dist/src/build/app-id.d.ts

@@ -0,0 +1,5 @@
+import type { CapacitorConfig } from '../config';
+export declare function hasBuilderAppIdField(config: CapacitorConfig | undefined): boolean;
+export declare function getConfiguredBuilderAppId(config: CapacitorConfig | undefined): string | undefined;
+/** Resolve the Capgo app key for Builder commands only. */
+export declare function getBuilderAppId(explicitAppId: string | undefined, config: CapacitorConfig | undefined, legacyDefault?: 'updater' | 'native', explicitMode?: 'truthy' | 'defined'): string | undefined;

package/dist/src/build/onboarding/mcp/engine.d.ts

@@ -173,6 +173,8 @@ export interface EngineDeps {
     cwd: string;
     hasSavedKey: () => boolean;
     getAppId: () => Promise<string | undefined>;
+    /** Native package/bundle id, separate from the Capgo Builder app key. */
+    getNativeAppId?: () => Promise<string | undefined>;
     detectPlatforms: () => Promise<Platform[]>;
     isAppRegistered: (appId: string) => Promise<boolean>;
     loadProgress: (appId: string) => Promise<OnboardingProgress | null>;

package/dist/src/build/onboarding/telemetry.d.ts

@@ -17,7 +17,7 @@ export interface TrackBuilderOnboardingStepInput {
     errorCategory?: OnboardingErrorCategory | AndroidOnboardingErrorCategory;
     replaySessionId?: string;
 }
-export type BuilderOnboardingAction = 'resume_prompt_decision' | 'android_sa_method_selected' | 'android_sa_validation_recovery_selected' | 'android_sa_validation_result';
+export type BuilderOnboardingAction = 'resume_prompt_decision' | 'question_shown' | 'question_answered' | 'android_sa_method_selected' | 'android_sa_validation_recovery_selected' | 'android_sa_validation_result';
 export interface TrackBuilderOnboardingActionInput {
     apikey: string;
     appId: string;

package/dist/src/build/onboarding/ui/app.d.ts

@@ -4,10 +4,9 @@ import type { OnboardingBeforeExit } from './exit.js';
 interface AppProps {
     /**
      * Capgo lookup key (progress files, saved credentials, Capgo SaaS build
-     * API). Resolved by `getAppId()`, which prefers
-     * `config.plugins.CapacitorUpdater.appId` over `config.appId` so dev-tunnel
-     * sandboxes can override the Capgo-side identifier without renaming the
-     * iOS bundle. Do NOT use for Apple-side operations — see
+     * API). Resolved by the Builder app-id helper, which uses
+     * `plugins.CapgoBuilder.capgoBuilderAppId` when configured and otherwise
+     * keeps the prior updater/native fallback. Do NOT use for Apple-side operations — see
      * `iosBundleIdInitial`.
      */
     appId: string;

package/dist/src/build/onboarding/ui/appflow-app.d.ts

@@ -4,6 +4,7 @@ import type { MigrationScope } from '../appflow/types.js';
 import type { OnboardingBeforeExit } from './exit.js';
 export interface AppflowAppProps {
     appId: string;
+    packageName?: string;
     /** Migration scope ('ios' | 'android') from the single-platform "migrating from Appflow?" gate. */
     scope: MigrationScope;
     apikey?: string;

package/dist/src/build/onboarding/ui/shell.d.ts

@@ -10,12 +10,14 @@ export interface OnboardingShellProps {
     /**
      * iOS-side bundle id default — sourced from `config.appId` (top-level), which
      * is what `cap sync` writes into `PRODUCT_BUNDLE_IDENTIFIER`. Distinct from
-     * `appId` above, which `getAppId()` may resolve to
+     * `appId` above, which the Builder resolver may resolve to
      * `config.plugins.CapacitorUpdater.appId` (a Capgo lookup key — wrong for
      * Apple signing). Threaded down to the iOS OnboardingApp; the Android app
      * ignores it.
      */
     iosBundleIdInitial: string;
+    /** Android package name for Appflow validation; defaults to the legacy Capgo key. */
+    appflowPackageName?: string;
     iosDir: string;
     androidDir: string;
     /**

package/dist/src/build/prescan/command.d.ts

@@ -28,6 +28,7 @@ export declare function validateFlags(opts: Pick<PrescanCommandOptions, 'failOnW
 export declare function exitCodeFor(counts: Record<Severity, number>, opts: OutcomeOptions, findings?: PrescanReport['findings']): number;
 export interface PrescanExecution {
     report: PrescanReport;
+    appId: string;
     /** apikey actually used for the scan (flag or saved key); undefined when remote checks were skipped */
     apikey?: string;
 }

package/dist/src/build/prescan/types.d.ts

@@ -20,6 +20,8 @@ export interface Finding {
 }
 export interface ScanContext {
     appId: string;
+    /** Native bundle/package id for local checks; defaults to appId for legacy scans. */
+    nativeAppId?: string;
     platform: Platform;
     /** Operating system running the prescan, used for host-specific local checks. */
     hostPlatform: NodeJS.Platform;

package/dist/src/bundle/upload-config.d.ts

@@ -0,0 +1,14 @@
+import type { ExtConfigPairs } from '../config';
+import type { OptionsUpload } from './upload_interface';
+export declare function buildCordovaModeUploadExample(options: Pick<OptionsUpload, 'path' | 'channel'> & {
+    appId?: string;
+}): string;
+export declare function buildMissingCapacitorConfigUploadMessage(options: Pick<OptionsUpload, 'path' | 'channel'> & {
+    appId?: string;
+}): string;
+export declare function enhanceMissingCapacitorConfigUploadError(error: unknown, options: Pick<OptionsUpload, 'path' | 'channel'> & {
+    appId?: string;
+}): never;
+export declare function loadUploadProjectConfig(options: OptionsUpload, context?: {
+    appId?: string;
+}): Promise<ExtConfigPairs>;

package/dist/src/cordova/project.d.ts

@@ -0,0 +1,9 @@
+import type { ExtConfigPairs } from '../config';
+export declare const CORDOVA_DEFAULT_WEB_DIR = "www";
+export declare function findCordovaProjectRoot(startDir?: string): string;
+export declare function collectCordovaAppIdCandidates(projectRoot?: string): string[];
+export declare function resolveCordovaWebDir(path?: string): string;
+export declare function buildCordovaUploadConfig(options: {
+    path?: string;
+    appId?: string;
+}): ExtConfigPairs;

package/dist/src/framework/mode.d.ts

@@ -0,0 +1,2 @@
+export declare const CLI_PROJECT_MODES: readonly ["cordova"];
+export declare function isCordovaMode(mode?: string): boolean;

package/dist/src/mcp/tool-schemas.d.ts

@@ -16,6 +16,9 @@ export declare const mcpDeleteAppInputSchema: z.ZodObject<{
 export declare const mcpUploadBundleInputSchema: z.ZodObject<{
     appId: z.ZodString;
     path: z.ZodString;
+    mode: z.ZodOptional<z.ZodEnum<{
+        cordova: "cordova";
+    }>>;
     bundle: z.ZodOptional<z.ZodString>;
     channel: z.ZodOptional<z.ZodString>;
     rollout: z.ZodOptional<z.ZodNumber>;

package/dist/src/schemas/bundle.d.ts

@@ -3,6 +3,9 @@ export declare const optionsUploadSchema: z.ZodObject<{
     apikey: z.ZodString;
     supaHost: z.ZodOptional<z.ZodString>;
     supaAnon: z.ZodOptional<z.ZodString>;
+    mode: z.ZodOptional<z.ZodEnum<{
+        cordova: "cordova";
+    }>>;
     bundle: z.ZodOptional<z.ZodString>;
     path: z.ZodOptional<z.ZodString>;
     channel: z.ZodOptional<z.ZodString>;

package/dist/src/schemas/sdk.d.ts

@@ -49,6 +49,9 @@ export type StarAllRepositoriesOptions = z.infer<typeof starAllRepositoriesOptio
 export declare const uploadOptionsSchema: z.ZodObject<{
     appId: z.ZodString;
     path: z.ZodString;
+    mode: z.ZodOptional<z.ZodEnum<{
+        cordova: "cordova";
+    }>>;
     bundle: z.ZodOptional<z.ZodString>;
     channel: z.ZodOptional<z.ZodString>;
     rollout: z.ZodOptional<z.ZodNumber>;