@capuchoo/cli 0.2.0

package/dist/pipeline/native-config.d.ts

@@ -0,0 +1,43 @@
+import { type RunOptions } from "../utils/exec.js";
+import type { ResolvedFlavour } from "./flavour.js";
+/**
+ * Applies a flavour's identity and version to the native projects.
+ *
+ * The old pipeline ran `pnpm trapeze:<env>` and died if that script did not
+ * exist or Trapeze was not installed - which is the single most common way a
+ * deploy failed on a fresh checkout. Here Trapeze is *preferred* but optional:
+ *
+ *  1. Trapeze installed and a config exists for the flavour -> run Trapeze, so
+ *     the app's own YAML stays authoritative (permissions, plist entries, and
+ *     everything else this file does not model).
+ *  2. Otherwise -> apply the identity and version directly. That is the subset
+ *     every flavour needs, and it is enough for a correct build.
+ *
+ * Either way the deploy proceeds, and the CLI says which path it took.
+ */
+export type NativeConfigMethod = "trapeze" | "builtin";
+export interface NativeConfigResult {
+    method: NativeConfigMethod;
+    /** Files the built-in path rewrote. Empty when Trapeze ran. */
+    changed: string[];
+    /** Why the built-in path was used, when it was. */
+    reason?: string;
+}
+export interface NativeConfigInput {
+    appDir: string;
+    androidDir: string;
+    iosDir: string;
+    flavour: ResolvedFlavour;
+    /** Environment for Trapeze's `vars:` block and for the built-in patcher. */
+    env: Record<string, string>;
+    platform: "android" | "ios";
+    runOptions: Omit<RunOptions, "cwd" | "env">;
+}
+export declare function applyNativeConfig(input: NativeConfigInput): Promise<NativeConfigResult>;
+/**
+ * The bundle identifier iOS builds from lives in `project.pbxproj`, which is
+ * not safely editable with a regex. Trapeze does it properly, so the built-in
+ * path reports the limitation instead of pretending to have handled it.
+ */
+export declare function builtinConfigLimitations(platform: "android" | "ios"): string[];
+//# sourceMappingURL=native-config.d.ts.map

package/dist/pipeline/native-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-config.d.ts","sourceRoot":"","sources":["../../src/pipeline/native-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAO,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGpD;;;;;;;;;;;;;;GAcG;AAEH,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,SAAS,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,CAAC;IACzB,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,QAAQ,EAAE,SAAS,GAAG,KAAK,CAAC;IAC5B,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;CAC7C;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmB7F;AA+GD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,SAAS,GAAG,KAAK,GAAG,MAAM,EAAE,CAK9E"}

package/dist/pipeline/native-config.js

@@ -0,0 +1,127 @@
+import fs from "node:fs";
+import path from "node:path";
+import { run } from "../utils/exec.js";
+import { resolveBin } from "./toolchain.js";
+export async function applyNativeConfig(input) {
+    const trapezeBin = resolveBin("trapeze", input.appDir);
+    if (trapezeBin && input.flavour.trapezeConfig) {
+        // `-y` accepts the diff Trapeze prints; without it the command waits for
+        // input forever in CI.
+        await run(trapezeBin, ["run", input.flavour.trapezeConfig, "-y"], {
+            ...input.runOptions,
+            cwd: input.appDir,
+            env: input.env,
+        });
+        return { method: "trapeze", changed: [] };
+    }
+    const reason = !trapezeBin
+        ? "@trapezedev/configure is not installed"
+        : `no Trapeze config at ${input.flavour.config.trapezeConfig}`;
+    return { ...applyBuiltinConfig(input), reason };
+}
+function applyBuiltinConfig(input) {
+    const changed = [];
+    if (input.platform === "android") {
+        changed.push(...patchAndroid(input));
+    }
+    else {
+        changed.push(...patchIos(input));
+    }
+    return { method: "builtin", changed };
+}
+function readEnv(env, key) {
+    const value = env[key];
+    return value && value.length > 0 ? value : undefined;
+}
+function patchAndroid(input) {
+    const androidRoot = path.resolve(input.appDir, input.androidDir);
+    if (!fs.existsSync(androidRoot))
+        return [];
+    const appId = readEnv(input.env, "VITE_APP_ID");
+    const appName = readEnv(input.env, "VITE_APP_NAME");
+    const version = readEnv(input.env, "VITE_APP_VERSION");
+    const versionCode = readEnv(input.env, "VERSION_CODE");
+    const changed = [];
+    const gradleFile = path.join(androidRoot, "app", "build.gradle");
+    if (fs.existsSync(gradleFile)) {
+        let gradle = fs.readFileSync(gradleFile, "utf8");
+        const before = gradle;
+        if (appId) {
+            // Both forms appear in a Capacitor project: `namespace = "..."` and
+            // `applicationId "..."`. Quote style varies, so match either.
+            gradle = gradle.replace(/(\bnamespace\s*=\s*)["'][^"']*["']/, `$1"${appId}"`);
+            gradle = gradle.replace(/(\bapplicationId\s*=?\s*)["'][^"']*["']/, `$1"${appId}"`);
+        }
+        if (version) {
+            gradle = gradle.replace(/(\bversionName\s*=?\s*)["'][^"']*["']/, `$1"${version}"`);
+        }
+        if (versionCode) {
+            gradle = gradle.replace(/(\bversionCode\s*=?\s*)\d+/, `$1${versionCode}`);
+        }
+        if (gradle !== before) {
+            fs.writeFileSync(gradleFile, gradle);
+            changed.push(path.relative(input.appDir, gradleFile));
+        }
+    }
+    const stringsFile = path.join(androidRoot, "app", "src", "main", "res", "values", "strings.xml");
+    if (fs.existsSync(stringsFile)) {
+        let strings = fs.readFileSync(stringsFile, "utf8");
+        const before = strings;
+        if (appName) {
+            strings = replaceStringResource(strings, "app_name", appName);
+            strings = replaceStringResource(strings, "title_activity_main", appName);
+        }
+        if (appId) {
+            strings = replaceStringResource(strings, "package_name", appId);
+            strings = replaceStringResource(strings, "custom_url_scheme", appId);
+        }
+        if (strings !== before) {
+            fs.writeFileSync(stringsFile, strings);
+            changed.push(path.relative(input.appDir, stringsFile));
+        }
+    }
+    return changed;
+}
+/** Replaces one `<string name="x">…</string>` value, escaping XML metacharacters. */
+function replaceStringResource(xml, name, value) {
+    const escaped = value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+    const pattern = new RegExp(`(<string\\s+name=(?:"|')${name}(?:"|')\\s*>)([\\s\\S]*?)(</string>)`);
+    return xml.replace(pattern, `$1${escaped}$3`);
+}
+function patchIos(input) {
+    const iosRoot = path.resolve(input.appDir, input.iosDir);
+    const plist = path.join(iosRoot, "App", "App", "Info.plist");
+    if (!fs.existsSync(plist))
+        return [];
+    const appName = readEnv(input.env, "VITE_APP_NAME");
+    const version = readEnv(input.env, "VITE_APP_VERSION");
+    const build = readEnv(input.env, "BUILD_NUMBER");
+    let contents = fs.readFileSync(plist, "utf8");
+    const before = contents;
+    if (version)
+        contents = replacePlistString(contents, "CFBundleShortVersionString", version);
+    if (build)
+        contents = replacePlistString(contents, "CFBundleVersion", build);
+    if (appName)
+        contents = replacePlistString(contents, "CFBundleDisplayName", appName);
+    if (contents === before)
+        return [];
+    fs.writeFileSync(plist, contents);
+    return [path.relative(input.appDir, plist)];
+}
+function replacePlistString(xml, key, value) {
+    const pattern = new RegExp(`(<key>${key}</key>\\s*<string>)([\\s\\S]*?)(</string>)`);
+    return xml.replace(pattern, `$1${value}$3`);
+}
+/**
+ * The bundle identifier iOS builds from lives in `project.pbxproj`, which is
+ * not safely editable with a regex. Trapeze does it properly, so the built-in
+ * path reports the limitation instead of pretending to have handled it.
+ */
+export function builtinConfigLimitations(platform) {
+    if (platform === "ios") {
+        return ["the iOS bundle identifier in project.pbxproj is not changed without Trapeze"];
+    }
+    return ["AndroidManifest permissions declared only in a Trapeze config are not applied"];
+}
+//# sourceMappingURL=native-config.js.map

package/dist/pipeline/native-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-config.js","sourceRoot":"","sources":["../../src/pipeline/native-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAmB,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAuC5C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAwB;IAC9D,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAEvD,IAAI,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC9C,yEAAyE;QACzE,uBAAuB;QACvB,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE;YAChE,GAAG,KAAK,CAAC,UAAU;YACnB,GAAG,EAAE,KAAK,CAAC,MAAM;YACjB,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,UAAU;QACxB,CAAC,CAAC,wCAAwC;QAC1C,CAAC,CAAC,wBAAwB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;IAEjE,OAAO,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAwB;IAClD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,GAA2B,EAAE,GAAW;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,KAAwB;IAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC;QAEtB,IAAI,KAAK,EAAE,CAAC;YACV,oEAAoE;YACpE,8DAA8D;YAC9D,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,oCAAoC,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC;YAC9E,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,yCAAyC,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,uCAAuC,EAAE,MAAM,OAAO,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,4BAA4B,EAAE,KAAK,WAAW,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACjG,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,OAAO,CAAC;QAEvB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAC9D,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;YAChE,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qFAAqF;AACrF,SAAS,qBAAqB,CAAC,GAAW,EAAE,IAAY,EAAE,KAAa;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE/F,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,2BAA2B,IAAI,sCAAsC,CAAC,CAAC;IAClG,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAEjD,IAAI,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC;IAExB,IAAI,OAAO;QAAE,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,4BAA4B,EAAE,OAAO,CAAC,CAAC;IAC5F,IAAI,KAAK;QAAE,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAC7E,IAAI,OAAO;QAAE,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;IAErF,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAEnC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,GAAW,EAAE,KAAa;IACjE,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,SAAS,GAAG,4CAA4C,CAAC,CAAC;IACrF,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAA2B;IAClE,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,6EAA6E,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,CAAC,+EAA+E,CAAC,CAAC;AAC3F,CAAC"}

package/dist/pipeline/toolchain.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Locates the tools the deploy pipeline needs.
+ *
+ * The old pipeline assumed a great deal: that pnpm was the package manager,
+ * that the application defined scripts called `assets:<env>`, `build:<env>` and
+ * `trapeze:<env>`, and that `@capgo/cli` could be fetched from the network
+ * mid-deploy. Any of those being false failed the deploy halfway through, after
+ * the version had already been bumped.
+ *
+ * Nothing here shells out to a package manager to find a tool. A dependency's
+ * executable already lives in `node_modules/.bin`, and in a workspace it lives
+ * in the *root* `node_modules/.bin` too - so walking up from the app directory
+ * finds it whether the app is standalone or a workspace member.
+ */
+export type PackageManager = "pnpm" | "npm" | "yarn" | "bun";
+export interface Toolchain {
+    /** Directory the application lives in. */
+    appDir: string;
+    /** Workspace root, or `appDir` when the app is standalone. */
+    workspaceRoot: string;
+    packageManager: PackageManager;
+    /** True when Vite+ drives this workspace. */
+    hasVitePlus: boolean;
+}
+/**
+ * Resolves a dependency executable to an absolute path.
+ *
+ * On Windows the runnable file is `<name>.cmd` (or `.exe`), not `<name>`, so
+ * both are probed. Returns null when the tool is not installed - callers decide
+ * whether that is fatal or a reason to skip a step.
+ */
+export declare function resolveBin(name: string, from: string): string | null;
+/**
+ * Detects the workspace root and package manager.
+ *
+ * Lockfile detection is deliberately last: a `packageManager` field is an
+ * explicit declaration, a lockfile is an artefact. When nothing is declared the
+ * fallback is npm, which every Node installation has.
+ */
+export declare function detectToolchain(appDir: string): Toolchain;
+/** Reads a script out of the application's package.json. */
+export declare function readScript(appDir: string, name: string): string | null;
+/** The argv for running a package.json script with the detected manager. */
+export declare function scriptCommand(toolchain: Toolchain, script: string): {
+    file: string;
+    args: string[];
+};
+export interface ToolLookup {
+    /** Absolute path to the executable, when it is installed. */
+    bin: string | null;
+    /** Package that provides it, for the "not installed" message. */
+    packageName: string;
+}
+/**
+ * Tools the pipeline can use. Every one of them is optional: a missing tool
+ * makes the CLI skip or substitute that step, never abort the deploy.
+ */
+export declare function lookupTools(appDir: string): {
+    vite: {
+        bin: string | null;
+        packageName: string;
+    };
+    vp: {
+        bin: string | null;
+        packageName: string;
+    };
+    capacitor: {
+        bin: string | null;
+        packageName: string;
+    };
+    assets: {
+        bin: string | null;
+        packageName: string;
+    };
+    trapeze: {
+        bin: string | null;
+        packageName: string;
+    };
+};
+//# sourceMappingURL=toolchain.d.ts.map

package/dist/pipeline/toolchain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolchain.d.ts","sourceRoot":"","sources":["../../src/pipeline/toolchain.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;AAE7D,MAAM,WAAW,SAAS;IACxB,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,cAAc,CAAC;IAC/B,6CAA6C;IAC7C,WAAW,EAAE,OAAO,CAAC;CACtB;AAmBD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWpE;AAgBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAoCzD;AA8BD,4DAA4D;AAC5D,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYtE;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,CAC3B,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,MAAM,GACb;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAElC;AAED,MAAM,WAAW,UAAU;IACzB,6DAA6D;IAC7D,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;EAczC"}

package/dist/pipeline/toolchain.js

@@ -0,0 +1,146 @@
+import fs from "node:fs";
+import path from "node:path";
+const BIN_DIR = path.join("node_modules", ".bin");
+/** Directories that could hold a dependency executable, nearest first. */
+function binDirs(from) {
+    const dirs = [];
+    let current = path.resolve(from);
+    for (;;) {
+        dirs.push(path.join(current, BIN_DIR));
+        const parent = path.dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    return dirs;
+}
+/**
+ * Resolves a dependency executable to an absolute path.
+ *
+ * On Windows the runnable file is `<name>.cmd` (or `.exe`), not `<name>`, so
+ * both are probed. Returns null when the tool is not installed - callers decide
+ * whether that is fatal or a reason to skip a step.
+ */
+export function resolveBin(name, from) {
+    const candidates = process.platform === "win32" ? [`${name}.cmd`, `${name}.exe`, name] : [name];
+    for (const dir of binDirs(from)) {
+        for (const candidate of candidates) {
+            const full = path.join(dir, candidate);
+            if (fs.existsSync(full))
+                return full;
+        }
+    }
+    return null;
+}
+/** Finds the nearest ancestor containing any of `markers`. */
+function findUp(from, markers) {
+    let current = path.resolve(from);
+    for (;;) {
+        if (markers.some((marker) => fs.existsSync(path.join(current, marker)))) {
+            return current;
+        }
+        const parent = path.dirname(current);
+        if (parent === current)
+            return null;
+        current = parent;
+    }
+}
+/**
+ * Detects the workspace root and package manager.
+ *
+ * Lockfile detection is deliberately last: a `packageManager` field is an
+ * explicit declaration, a lockfile is an artefact. When nothing is declared the
+ * fallback is npm, which every Node installation has.
+ */
+export function detectToolchain(appDir) {
+    const workspaceRoot = findUp(appDir, [
+        "pnpm-workspace.yaml",
+        "pnpm-lock.yaml",
+        "yarn.lock",
+        "bun.lock",
+        "bun.lockb",
+        "package-lock.json",
+    ]) ?? appDir;
+    let packageManager = "npm";
+    const declared = readPackageManagerField(workspaceRoot);
+    if (declared) {
+        packageManager = declared;
+    }
+    else if (fs.existsSync(path.join(workspaceRoot, "pnpm-lock.yaml")) ||
+        fs.existsSync(path.join(workspaceRoot, "pnpm-workspace.yaml"))) {
+        packageManager = "pnpm";
+    }
+    else if (fs.existsSync(path.join(workspaceRoot, "yarn.lock"))) {
+        packageManager = "yarn";
+    }
+    else if (fs.existsSync(path.join(workspaceRoot, "bun.lock")) ||
+        fs.existsSync(path.join(workspaceRoot, "bun.lockb"))) {
+        packageManager = "bun";
+    }
+    return {
+        appDir,
+        workspaceRoot,
+        packageManager,
+        hasVitePlus: resolveBin("vp", appDir) !== null,
+    };
+}
+function readPackageManagerField(root) {
+    const file = path.join(root, "package.json");
+    if (!fs.existsSync(file))
+        return null;
+    try {
+        const pkg = JSON.parse(fs.readFileSync(file, "utf8"));
+        const fromField = pkg.packageManager?.split("@")[0];
+        if (isPackageManager(fromField))
+            return fromField;
+        const declared = pkg.devEngines?.packageManager;
+        const name = Array.isArray(declared) ? declared[0]?.name : declared?.name;
+        if (isPackageManager(name))
+            return name;
+    }
+    catch {
+        // A malformed package.json is the app's problem, not a reason to crash
+        // during tool detection.
+    }
+    return null;
+}
+function isPackageManager(value) {
+    return value === "pnpm" || value === "npm" || value === "yarn" || value === "bun";
+}
+/** Reads a script out of the application's package.json. */
+export function readScript(appDir, name) {
+    const file = path.join(appDir, "package.json");
+    if (!fs.existsSync(file))
+        return null;
+    try {
+        const pkg = JSON.parse(fs.readFileSync(file, "utf8"));
+        return pkg.scripts?.[name] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The argv for running a package.json script with the detected manager. */
+export function scriptCommand(toolchain, script) {
+    return { file: toolchain.packageManager, args: ["run", script] };
+}
+/**
+ * Tools the pipeline can use. Every one of them is optional: a missing tool
+ * makes the CLI skip or substitute that step, never abort the deploy.
+ */
+export function lookupTools(appDir) {
+    return {
+        vite: { bin: resolveBin("vite", appDir), packageName: "vite" },
+        vp: { bin: resolveBin("vp", appDir), packageName: "vite-plus" },
+        capacitor: { bin: resolveBin("cap", appDir), packageName: "@capacitor/cli" },
+        assets: {
+            bin: resolveBin("capacitor-assets", appDir),
+            packageName: "@capacitor/assets",
+        },
+        trapeze: {
+            bin: resolveBin("trapeze", appDir),
+            packageName: "@trapezedev/configure",
+        },
+    };
+}
+//# sourceMappingURL=toolchain.js.map

package/dist/pipeline/toolchain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolchain.js","sourceRoot":"","sources":["../../src/pipeline/toolchain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA6B7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;AAElD,0EAA0E;AAC1E,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC,SAAS,CAAC;QACR,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAC9B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEhG,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACvC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8DAA8D;AAC9D,SAAS,MAAM,CAAC,IAAY,EAAE,OAAiB;IAC7C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC,SAAS,CAAC;QACR,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,EAAE;QACb,qBAAqB;QACrB,gBAAgB;QAChB,WAAW;QACX,UAAU;QACV,WAAW;QACX,mBAAmB;KACpB,CAAC,IAAI,MAAM,CAAC;IAEf,IAAI,cAAc,GAAmB,KAAK,CAAC;IAE3C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,QAAQ,EAAE,CAAC;QACb,cAAc,GAAG,QAAQ,CAAC;IAC5B,CAAC;SAAM,IACL,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QACzD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,EAC9D,CAAC;QACD,cAAc,GAAG,MAAM,CAAC;IAC1B,CAAC;SAAM,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAChE,cAAc,GAAG,MAAM,CAAC;IAC1B,CAAC;SAAM,IACL,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QACnD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,EACpD,CAAC;QACD,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO;QACL,MAAM;QACN,aAAa;QACb,cAAc;QACd,WAAW,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAGnD,CAAC;QAEF,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAElD,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC;QAC1E,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,yBAAyB;IAC3B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,CAAC;AACpF,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAEnD,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAC3B,SAAoB,EACpB,MAAc;IAEd,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;AACnE,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO;QACL,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE;QAC9D,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE;QAC/D,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE;QAC5E,MAAM,EAAE;YACN,GAAG,EAAE,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC;YAC3C,WAAW,EAAE,mBAAmB;SACjC;QACD,OAAO,EAAE;YACP,GAAG,EAAE,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC;YAClC,WAAW,EAAE,uBAAuB;SACrC;KACmC,CAAC;AACzC,CAAC"}

package/dist/pipeline/zip.d.ts

@@ -0,0 +1,22 @@
+export interface BundleResult {
+    zipPath: string;
+    fileCount: number;
+    byteSize: number;
+}
+export interface BundleOptions {
+    /** Directory whose *contents* become the archive root. */
+    webDir: string;
+    /** Where to write the archive. */
+    outFile: string;
+    /** Fixed modification time, for reproducible archives. */
+    mtime?: Date;
+}
+/** Builds the OTA archive from a built web directory. */
+export declare function createBundleZip(options: BundleOptions): BundleResult;
+/**
+ * Names the archive after the app and version rather than dropping a bare
+ * `<version>.zip` in the project root, so a stray archive is identifiable and
+ * the gitignore rule can match it.
+ */
+export declare function bundleFileName(appId: string, version: string): string;
+//# sourceMappingURL=zip.d.ts.map

package/dist/pipeline/zip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.d.ts","sourceRoot":"","sources":["../../src/pipeline/zip.ts"],"names":[],"mappings":"AAgHA,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,IAAI,CAAC;CACd;AAED,yDAAyD;AACzD,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,YAAY,CAsGpE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAGrE"}

package/dist/pipeline/zip.js

@@ -0,0 +1,188 @@
+import fs from "node:fs";
+import path from "node:path";
+import zlib from "node:zlib";
+/**
+ * Writes the OTA bundle archive.
+ *
+ * The pipeline used to run `npx @capgo/cli bundle zip <appId> --json` for this,
+ * which meant a deploy could not run offline, depended on a third-party CLI
+ * resolved at deploy time, and dropped the archive somewhere in the project
+ * root - after which `findLatestZip` picked *the newest .zip in the directory*,
+ * whatever it was, and deleted it on success.
+ *
+ * The archive format is dictated by `@capgo/capacitor-updater`, which unpacks
+ * it on the device. Two of its rules are easy to break and fail only on a real
+ * phone:
+ *
+ *  1. Entry names must use forward slashes. The Android unzip rejects any entry
+ *     containing a backslash outright ("Windows path not supported"), so a
+ *     naive `path.join` on Windows produces an archive that installs nowhere.
+ *  2. After unpacking, if the extracted directory holds exactly one entry and
+ *     that entry is not `index.html`, the plugin treats it as a wrapper and
+ *     descends into it. Writing the web assets at the archive root - which is
+ *     what this does - keeps that logic out of the picture entirely.
+ *
+ * The plugin also validates that `index.html` exists at the bundle root, so
+ * that is checked before anything is written.
+ */
+const LOCAL_HEADER = 0x04_03_4b_50;
+const CENTRAL_HEADER = 0x02_01_4b_50;
+const END_OF_CENTRAL_DIR = 0x06_05_4b_50;
+const ZIP_VERSION = 20; // 2.0 - deflate
+const DEFLATED = 8;
+const MAX_ZIP_SIZE = 0xff_ff_ff_ff; // 4 GiB - beyond this ZIP64 is required.
+/** Files that must never reach a device. */
+const EXCLUDED = new Set([".DS_Store", "Thumbs.db", ".gitkeep", "capuchoo-deploy.log"]);
+const CRC_TABLE = buildCrcTable();
+function buildCrcTable() {
+    const table = new Int32Array(256);
+    for (let i = 0; i < 256; i++) {
+        let c = i;
+        for (let k = 0; k < 8; k++) {
+            c = c & 1 ? 0xed_b8_83_20 ^ (c >>> 1) : c >>> 1;
+        }
+        table[i] = c;
+    }
+    return table;
+}
+function crc32(buffer) {
+    let crc = -1;
+    for (const byte of buffer) {
+        crc = (crc >>> 8) ^ CRC_TABLE[(crc ^ byte) & 0xff];
+    }
+    return (crc ^ -1) >>> 0;
+}
+/**
+ * Encodes a timestamp as MS-DOS date and time.
+ *
+ * A fixed timestamp keeps the archive byte-for-byte reproducible: rebuilding
+ * the same bundle twice produces the same checksum, so the backend can tell a
+ * genuine change from a rebuild.
+ */
+function dosDateTime(date) {
+    const time = (Math.floor(date.getSeconds() / 2) & 0x1f) |
+        ((date.getMinutes() & 0x3f) << 5) |
+        ((date.getHours() & 0x1f) << 11);
+    const day = (date.getDate() & 0x1f) |
+        (((date.getMonth() + 1) & 0x0f) << 5) |
+        (((date.getFullYear() - 1980) & 0x7f) << 9);
+    return { time, date: day };
+}
+/** Collects files under `root`, depth first, with forward-slash names. */
+function collect(root, prefix = "") {
+    const entries = [];
+    for (const item of fs
+        .readdirSync(root, { withFileTypes: true })
+        .sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0))) {
+        if (EXCLUDED.has(item.name))
+            continue;
+        const absolute = path.join(root, item.name);
+        // Built with "/" explicitly rather than path.join, which would emit "\"
+        // on Windows and produce an archive the Android plugin refuses.
+        const name = prefix ? `${prefix}/${item.name}` : item.name;
+        if (item.isDirectory()) {
+            entries.push(...collect(absolute, name));
+        }
+        else if (item.isFile()) {
+            entries.push({ name, source: absolute });
+        }
+        // Symlinks are skipped: the plugin has no way to reproduce them and
+        // following one could pull in files from outside the web directory.
+    }
+    return entries;
+}
+/** Builds the OTA archive from a built web directory. */
+export function createBundleZip(options) {
+    const { webDir, outFile } = options;
+    if (!fs.existsSync(webDir)) {
+        throw new Error(`Web directory "${webDir}" does not exist. The build step produced nothing to publish.`);
+    }
+    if (!fs.existsSync(path.join(webDir, "index.html"))) {
+        throw new Error(`"${webDir}" has no index.html at its root. ` +
+            "@capgo/capacitor-updater rejects a bundle without one, so this archive " +
+            "would download on every device and then fail to apply.");
+    }
+    const entries = collect(webDir);
+    if (entries.length === 0) {
+        throw new Error(`"${webDir}" is empty, so there is nothing to publish.`);
+    }
+    // 1980-01-01, the earliest representable MS-DOS timestamp.
+    const stamp = dosDateTime(options.mtime ?? new Date(Date.UTC(1980, 0, 1)));
+    const localParts = [];
+    const centralParts = [];
+    let offset = 0;
+    for (const entry of entries) {
+        const contents = fs.readFileSync(entry.source);
+        const compressed = zlib.deflateRawSync(contents, { level: 9 });
+        const nameBytes = Buffer.from(entry.name, "utf8");
+        const crc = crc32(contents);
+        const local = Buffer.alloc(30);
+        local.writeUInt32LE(LOCAL_HEADER, 0);
+        local.writeUInt16LE(ZIP_VERSION, 4);
+        // Bit 11 marks the name as UTF-8, which matters for non-ASCII asset names.
+        local.writeUInt16LE(0x08_00, 6);
+        local.writeUInt16LE(DEFLATED, 8);
+        local.writeUInt16LE(stamp.time, 10);
+        local.writeUInt16LE(stamp.date, 12);
+        local.writeUInt32LE(crc, 14);
+        local.writeUInt32LE(compressed.length, 18);
+        local.writeUInt32LE(contents.length, 22);
+        local.writeUInt16LE(nameBytes.length, 26);
+        local.writeUInt16LE(0, 28);
+        localParts.push(local, nameBytes, compressed);
+        const central = Buffer.alloc(46);
+        central.writeUInt32LE(CENTRAL_HEADER, 0);
+        central.writeUInt16LE(ZIP_VERSION, 4);
+        central.writeUInt16LE(ZIP_VERSION, 6);
+        central.writeUInt16LE(0x08_00, 8);
+        central.writeUInt16LE(DEFLATED, 10);
+        central.writeUInt16LE(stamp.time, 12);
+        central.writeUInt16LE(stamp.date, 14);
+        central.writeUInt32LE(crc, 16);
+        central.writeUInt32LE(compressed.length, 20);
+        central.writeUInt32LE(contents.length, 24);
+        central.writeUInt16LE(nameBytes.length, 28);
+        central.writeUInt16LE(0, 30); // extra
+        central.writeUInt16LE(0, 32); // comment
+        central.writeUInt16LE(0, 34); // disk number
+        central.writeUInt16LE(0, 36); // internal attributes
+        // Regular file, mode 0644, in the high word where Unix permissions live.
+        // `>>> 0` is required: the shift alone overflows into a negative int32,
+        // which writeUInt32LE rejects.
+        central.writeUInt32LE((0o10_0644 << 16) >>> 0, 38);
+        central.writeUInt32LE(offset, 42);
+        centralParts.push(central, nameBytes);
+        offset += local.length + nameBytes.length + compressed.length;
+        if (offset > MAX_ZIP_SIZE) {
+            throw new Error("The web bundle exceeds 4 GiB, which needs ZIP64. Reduce the bundle size.");
+        }
+    }
+    const centralDirectory = Buffer.concat(centralParts);
+    const end = Buffer.alloc(22);
+    end.writeUInt32LE(END_OF_CENTRAL_DIR, 0);
+    end.writeUInt16LE(0, 4); // this disk
+    end.writeUInt16LE(0, 6); // disk with central directory
+    end.writeUInt16LE(entries.length, 8);
+    end.writeUInt16LE(entries.length, 10);
+    end.writeUInt32LE(centralDirectory.length, 12);
+    end.writeUInt32LE(offset, 16);
+    end.writeUInt16LE(0, 20); // comment length
+    const archive = Buffer.concat([...localParts, centralDirectory, end]);
+    fs.mkdirSync(path.dirname(outFile), { recursive: true });
+    fs.writeFileSync(outFile, archive);
+    return {
+        zipPath: outFile,
+        fileCount: entries.length,
+        byteSize: archive.length,
+    };
+}
+/**
+ * Names the archive after the app and version rather than dropping a bare
+ * `<version>.zip` in the project root, so a stray archive is identifiable and
+ * the gitignore rule can match it.
+ */
+export function bundleFileName(appId, version) {
+    const safe = `${appId}-${version}`.replaceAll(/[^\w.-]/g, "-");
+    return `capuchoo-bundle-${safe}.zip`;
+}
+//# sourceMappingURL=zip.js.map

package/dist/pipeline/zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.js","sourceRoot":"","sources":["../../src/pipeline/zip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,WAAW,GAAG,EAAE,CAAC,CAAC,gBAAgB;AACxC,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,yCAAyC;AAE7E,4CAA4C;AAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAExF,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;AAElC,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,MAAc;IAC3B,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAE,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,IAAU;IAC7B,MAAM,IAAI,GACR,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,MAAM,GAAG,GACP,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAQD,0EAA0E;AAC1E,SAAS,OAAO,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IACxC,MAAM,OAAO,GAAY,EAAE,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,EAAE;SAClB,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC1C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAE3D,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,oEAAoE;QACpE,oEAAoE;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAiBD,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,OAAsB;IACpD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,+DAA+D,CACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,IAAI,MAAM,mCAAmC;YAC3C,yEAAyE;YACzE,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,6CAA6C,CAAC,CAAC;IAC3E,CAAC;IAED,2DAA2D;IAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE5B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACrC,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACpC,2EAA2E;QAC3E,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACjC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7B,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE3B,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAE9C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ;QACtC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACxC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc;QAC5C,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB;QACpD,yEAAyE;QACzE,wEAAwE;QACxE,+BAA+B;QAC/B,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAElC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEtC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAC9D,IAAI,MAAM,GAAG,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;IACzC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY;IACrC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,8BAA8B;IACvD,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,GAAG,CAAC,aAAa,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;IAE3C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC;IAEtE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEnC,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,OAAO,CAAC,MAAM;QACzB,QAAQ,EAAE,OAAO,CAAC,MAAM;KACzB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAe;IAC3D,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,mBAAmB,IAAI,MAAM,CAAC;AACvC,CAAC"}