@capuchoo/cli 0.2.0

package/dist/services/cloud.d.ts

@@ -0,0 +1,58 @@
+import type { CloudApp, CloudChannel, CloudOrganization, CloudRelease, UserProfile } from "@capuchoo/core";
+/**
+ * The Capucho API client.
+ *
+ * Replaces the previous split between `CloudService`, `CloudConfigService`,
+ * `ChannelService` and `AuthService`. Those overlapped: two of them fetched
+ * channels, `ChannelService` called a `/api/channel` endpoint the backend does
+ * not implement and silently returned `["development", "staging", "production"]`
+ * on failure - hard-coded names that then failed validation server-side - and
+ * `CloudConfigService` cached a `/api/project/config` response nobody read.
+ */
+export declare class CloudClient {
+    private readonly options;
+    constructor(endpoint: string, apiKey: string);
+    get endpoint(): string;
+    /** Verifies the credentials and returns the profile behind them. */
+    whoami(): Promise<UserProfile | null>;
+    organizations(): Promise<CloudOrganization[]>;
+    apps(): Promise<CloudApp[]>;
+    createApp(input: {
+        name: string;
+        app_id: string;
+        platform: string;
+        organization_id: string;
+    }): Promise<CloudApp>;
+    channels(cloudAppId: string): Promise<CloudChannel[]>;
+    releases(cloudAppId: string, channel?: string): Promise<CloudRelease[]>;
+    /**
+     * Resolves a channel by name and rejects the ones that cannot be deployed to.
+     *
+     * A channel without an `environment` is unusable: the environment is what
+     * selects the build flavour, so there would be nothing to build. The old code
+     * checked this at two separate call sites with slightly different messages.
+     */
+    requireChannel(cloudAppId: string, name: string): Promise<CloudChannel>;
+    uploadBundle(input: {
+        filePath: string;
+        appId: string;
+        channel: string;
+        platform: string;
+        versionName: string;
+        releaseNotes: string;
+        active: boolean;
+        required: boolean;
+    }): Promise<import("../utils/http.js").UploadResult>;
+    uploadNative(input: {
+        filePath: string;
+        appId: string;
+        channel: string;
+        platform: string;
+        versionName: string;
+        versionCode: number;
+        releaseNotes: string;
+        active: boolean;
+        required: boolean;
+    }): Promise<import("../utils/http.js").UploadResult>;
+}
+//# sourceMappingURL=cloud.d.ts.map

package/dist/services/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../src/services/cloud.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,QAAQ,EACR,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACZ,MAAM,gBAAgB,CAAC;AAGxB;;;;;;;;;GASG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;gBAE1B,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAI5C,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,oEAAoE;IAC9D,MAAM,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQ3C,aAAa,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAI7C,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAI3B,SAAS,CAAC,KAAK,EAAE;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIrB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIrD,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAKvE;;;;;;OAMG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAmB7E,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,OAAO,CAAC;KACnB;IAiBD,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,OAAO,CAAC;KACnB;CAiBF"}

package/dist/services/cloud.js

@@ -0,0 +1,89 @@
+import { get, post, uploadArtifact } from "../utils/http.js";
+/**
+ * The Capucho API client.
+ *
+ * Replaces the previous split between `CloudService`, `CloudConfigService`,
+ * `ChannelService` and `AuthService`. Those overlapped: two of them fetched
+ * channels, `ChannelService` called a `/api/channel` endpoint the backend does
+ * not implement and silently returned `["development", "staging", "production"]`
+ * on failure - hard-coded names that then failed validation server-side - and
+ * `CloudConfigService` cached a `/api/project/config` response nobody read.
+ */
+export class CloudClient {
+    options;
+    constructor(endpoint, apiKey) {
+        this.options = { endpoint, apiKey };
+    }
+    get endpoint() {
+        return this.options.endpoint;
+    }
+    /** Verifies the credentials and returns the profile behind them. */
+    async whoami() {
+        try {
+            return await get("/api/auth/me", this.options);
+        }
+        catch {
+            return null;
+        }
+    }
+    organizations() {
+        return get("/api/organizations", this.options);
+    }
+    apps() {
+        return get("/api/apps", this.options);
+    }
+    createApp(input) {
+        return post("/api/apps", input, this.options);
+    }
+    channels(cloudAppId) {
+        return get(`/api/apps/${cloudAppId}/channels`, this.options);
+    }
+    releases(cloudAppId, channel) {
+        const query = channel ? `?channel=${encodeURIComponent(channel)}` : "";
+        return get(`/api/apps/${cloudAppId}/releases${query}`, this.options);
+    }
+    /**
+     * Resolves a channel by name and rejects the ones that cannot be deployed to.
+     *
+     * A channel without an `environment` is unusable: the environment is what
+     * selects the build flavour, so there would be nothing to build. The old code
+     * checked this at two separate call sites with slightly different messages.
+     */
+    async requireChannel(cloudAppId, name) {
+        const channels = await this.channels(cloudAppId);
+        const channel = channels.find((candidate) => candidate.name === name);
+        if (!channel) {
+            const available = channels.map((c) => c.name).join(", ") || "none";
+            throw new Error(`Channel "${name}" does not exist for this app. Available: ${available}.`);
+        }
+        if (!channel.environment) {
+            throw new Error(`Channel "${name}" has no environment set, so the CLI cannot tell which ` +
+                "flavour to build. Set it in the dashboard.");
+        }
+        return channel;
+    }
+    uploadBundle(input) {
+        return uploadArtifact("/api/admin/upload", input.filePath, {
+            app_id: input.appId,
+            channel: input.channel,
+            platform: input.platform,
+            version_name: input.versionName,
+            release_notes: input.releaseNotes,
+            active: String(input.active),
+            required: String(input.required),
+        }, { ...this.options, fileField: "bundle" });
+    }
+    uploadNative(input) {
+        return uploadArtifact("/api/admin/native-upload", input.filePath, {
+            app_id: input.appId,
+            channel: input.channel,
+            platform: input.platform,
+            version_name: input.versionName,
+            version_code: String(input.versionCode),
+            release_notes: input.releaseNotes,
+            active: String(input.active),
+            required: String(input.required),
+        }, { ...this.options, fileField: "bundle" });
+    }
+}
+//# sourceMappingURL=cloud.js.map

package/dist/services/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../../src/services/cloud.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAoB,MAAM,kBAAkB,CAAC;AAE/E;;;;;;;;;GASG;AACH,MAAM,OAAO,WAAW;IACL,OAAO,CAAc;IAEtC,YAAY,QAAgB,EAAE,MAAc;QAC1C,IAAI,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAc,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,aAAa;QACX,OAAO,GAAG,CAAsB,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,IAAI;QACF,OAAO,GAAG,CAAa,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,SAAS,CAAC,KAKT;QACC,OAAO,IAAI,CAAW,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,QAAQ,CAAC,UAAkB;QACzB,OAAO,GAAG,CAAiB,aAAa,UAAU,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/E,CAAC;IAED,QAAQ,CAAC,UAAkB,EAAE,OAAgB;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,GAAG,CAAiB,aAAa,UAAU,YAAY,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,IAAY;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAEtE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,6CAA6C,SAAS,GAAG,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,yDAAyD;gBACvE,4CAA4C,CAC/C,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,KASZ;QACC,OAAO,cAAc,CACnB,mBAAmB,EACnB,KAAK,CAAC,QAAQ,EACd;YACE,MAAM,EAAE,KAAK,CAAC,KAAK;YACnB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;SACjC,EACD,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CACzC,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,KAUZ;QACC,OAAO,cAAc,CACnB,0BAA0B,EAC1B,KAAK,CAAC,QAAQ,EACd;YACE,MAAM,EAAE,KAAK,CAAC,KAAK;YACnB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;YACvC,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;SACjC,EACD,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CACzC,CAAC;IACJ,CAAC;CACF"}

package/dist/utils/config.d.ts

@@ -0,0 +1,52 @@
+import { type ProjectConfig, type ResolvedProjectConfig } from "@capuchoo/core";
+export interface GlobalConfig {
+    endpoint?: string;
+    apiKey?: string;
+    user?: {
+        id: string;
+        email: string;
+    };
+    authenticatedAt?: string;
+    defaultChannel?: string;
+}
+/** Credentials resolved for this invocation, and where they came from. */
+export interface Credentials {
+    endpoint: string;
+    apiKey: string;
+    source: "environment" | "config";
+}
+export declare function globalConfigPath(): string;
+export declare function projectConfigPath(appDir: string): string;
+export declare function readGlobalConfig(): GlobalConfig;
+export declare function writeGlobalConfig(config: GlobalConfig): void;
+export declare function updateGlobalConfig(patch: Partial<GlobalConfig>): GlobalConfig;
+/**
+ * Resolves credentials.
+ *
+ * Environment variables win, and are never written to disk. That is what makes
+ * a CI run safe: `CAPUCHO_API_KEY` lives in the job for its lifetime and leaves
+ * nothing behind on the runner.
+ */
+export declare function resolveCredentials(): Credentials | null;
+export declare function readProjectConfig(appDir: string): ProjectConfig | null;
+export declare function writeProjectConfig(appDir: string, config: ProjectConfig): void;
+/**
+ * Loads and validates the project config, resolving every default.
+ *
+ * Throws with the list of problems rather than returning null, so callers do
+ * not each reinvent the error message.
+ */
+export declare function requireProjectConfig(appDir: string): ResolvedProjectConfig;
+/** Reads the application's semantic version from its package.json. */
+export declare function readAppVersion(appDir: string): string;
+/**
+ * Writes a new version to the application's package.json.
+ *
+ * This replaces `npm version <type> --no-git-tag-version`. In a workspace npm
+ * resolves the nearest package.json from the *process* working directory, so
+ * running it from a monorepo root bumped the root package rather than the app.
+ * Writing the file directly also leaves the rest of it byte-identical, instead
+ * of npm reformatting the whole file.
+ */
+export declare function writeAppVersion(appDir: string, version: string): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/utils/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC3B,MAAM,gBAAgB,CAAC;AAyBxB,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,GAAG,QAAQ,CAAC;CAClC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD;AAgBD,wBAAgB,gBAAgB,IAAI,YAAY,CAE/C;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAW5D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAO7E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,IAAI,WAAW,GAAG,IAAI,CAsBvD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAEtE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAE9E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,CAa1E;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CASrD;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAYrE"}

package/dist/utils/config.js

@@ -0,0 +1,144 @@
+import { normaliseProjectConfig, validateProjectConfig, } from "@capuchoo/core";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+/**
+ * Configuration and credential storage.
+ *
+ * Two files, with distinct jobs:
+ *
+ *   ~/.capuchoo/config.json        credentials and preferences. Never committed.
+ *   <app>/.capuchoo/project.json   which app this directory publishes.
+ *                                 Committed - it is not a secret.
+ *
+ * The old `ConfigManager` merged both into one flat object and then read
+ * `apiKey` out of the result, which meant a project.json could override the
+ * credentials of whoever ran the deploy. Keeping them separate removes that,
+ * and removes the 40-field `CapuchoConfig` interface that had accumulated every
+ * key any command had ever wanted.
+ */
+const DIR = ".capuchoo";
+const GLOBAL_FILE = "config.json";
+const PROJECT_FILE = "project.json";
+export function globalConfigPath() {
+    return path.join(os.homedir(), DIR, GLOBAL_FILE);
+}
+export function projectConfigPath(appDir) {
+    return path.join(appDir, DIR, PROJECT_FILE);
+}
+function readJson(file) {
+    if (!fs.existsSync(file))
+        return null;
+    try {
+        return JSON.parse(fs.readFileSync(file, "utf8"));
+    }
+    catch {
+        throw new Error(`${file} is not valid JSON. Fix or delete it.`);
+    }
+}
+function writeJson(file, value) {
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, `${JSON.stringify(value, null, 2)}\n`);
+}
+export function readGlobalConfig() {
+    return readJson(globalConfigPath()) ?? {};
+}
+export function writeGlobalConfig(config) {
+    const file = globalConfigPath();
+    writeJson(file, config);
+    // The file holds an API key. Restrict it where the platform supports it;
+    // Windows ACLs are not modelled by chmod, so failure is not fatal.
+    try {
+        fs.chmodSync(file, 0o600);
+    }
+    catch {
+        /* best effort */
+    }
+}
+export function updateGlobalConfig(patch) {
+    const next = { ...readGlobalConfig(), ...patch };
+    for (const key of Object.keys(next)) {
+        if (next[key] === undefined)
+            delete next[key];
+    }
+    writeGlobalConfig(next);
+    return next;
+}
+/**
+ * Resolves credentials.
+ *
+ * Environment variables win, and are never written to disk. That is what makes
+ * a CI run safe: `CAPUCHO_API_KEY` lives in the job for its lifetime and leaves
+ * nothing behind on the runner.
+ */
+export function resolveCredentials() {
+    const envEndpoint = process.env.CAPUCHO_ENDPOINT;
+    const envKey = process.env.CAPUCHO_API_KEY;
+    if (envEndpoint && envKey) {
+        return {
+            endpoint: envEndpoint.replace(/\/+$/, ""),
+            apiKey: envKey,
+            source: "environment",
+        };
+    }
+    const config = readGlobalConfig();
+    if (config.endpoint && config.apiKey) {
+        return {
+            endpoint: config.endpoint.replace(/\/+$/, ""),
+            apiKey: config.apiKey,
+            source: "config",
+        };
+    }
+    return null;
+}
+export function readProjectConfig(appDir) {
+    return readJson(projectConfigPath(appDir));
+}
+export function writeProjectConfig(appDir, config) {
+    writeJson(projectConfigPath(appDir), config);
+}
+/**
+ * Loads and validates the project config, resolving every default.
+ *
+ * Throws with the list of problems rather than returning null, so callers do
+ * not each reinvent the error message.
+ */
+export function requireProjectConfig(appDir) {
+    const raw = readProjectConfig(appDir);
+    const problems = validateProjectConfig(raw);
+    if (problems.length > 0) {
+        const location = path.relative(process.cwd(), projectConfigPath(appDir));
+        throw new Error(`${location} is not usable:\n  - ${problems.join("\n  - ")}\n\n` +
+            `Run "capuchoo init" in this directory to create it.`);
+    }
+    return normaliseProjectConfig(raw);
+}
+/** Reads the application's semantic version from its package.json. */
+export function readAppVersion(appDir) {
+    const file = path.join(appDir, "package.json");
+    const pkg = readJson(file);
+    if (!pkg?.version) {
+        throw new Error(`${file} has no "version" field, so there is nothing to publish.`);
+    }
+    return pkg.version;
+}
+/**
+ * Writes a new version to the application's package.json.
+ *
+ * This replaces `npm version <type> --no-git-tag-version`. In a workspace npm
+ * resolves the nearest package.json from the *process* working directory, so
+ * running it from a monorepo root bumped the root package rather than the app.
+ * Writing the file directly also leaves the rest of it byte-identical, instead
+ * of npm reformatting the whole file.
+ */
+export function writeAppVersion(appDir, version) {
+    const file = path.join(appDir, "package.json");
+    const contents = fs.readFileSync(file, "utf8");
+    // Replace only the top-level "version" value, preserving formatting.
+    const updated = contents.replace(/^(\s*"version"\s*:\s*")[^"]*(")/m, `$1${version}$2`);
+    if (updated === contents) {
+        throw new Error(`Could not update the version field in ${file}`);
+    }
+    fs.writeFileSync(file, updated);
+}
+//# sourceMappingURL=config.js.map

package/dist/utils/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GAGtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;;;;;;GAcG;AAEH,MAAM,GAAG,GAAG,WAAW,CAAC;AACxB,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,YAAY,GAAG,cAAc,CAAC;AAiBpC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAI,IAAY;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc;IAC7C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,QAAQ,CAAe,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAExB,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA4B;IAC7D,MAAM,IAAI,GAAG,EAAE,GAAG,gBAAgB,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAA8B,EAAE,CAAC;QACjE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAE3C,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;QAC1B,OAAO;YACL,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,aAAa;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,QAAQ,CAAgB,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,MAAqB;IACtE,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,wBAAwB,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC9D,qDAAqD,CACxD,CAAC;IACJ,CAAC;IAED,OAAO,sBAAsB,CAAC,GAAoB,CAAC,CAAC;AACtD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAuB,IAAI,CAAC,CAAC;IAEjD,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0DAA0D,CAAC,CAAC;IACrF,CAAC;IAED,OAAO,GAAG,CAAC,OAAO,CAAC;AACrB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,OAAe;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/C,qEAAqE;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,kCAAkC,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC;IAEvF,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC"}

package/dist/utils/exec.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Command execution for the deploy pipeline.
+ *
+ * Two things drove this rewrite. The old helper used `exec` with a shell string
+ * built by concatenation, so any path containing a space silently produced the
+ * wrong command, and it buffered all output in memory - a Gradle build easily
+ * exceeds the default 1 MB `maxBuffer` and used to fail with a truncated,
+ * meaningless error. `spawn` with an argv array fixes both, and streams output
+ * to a log file as it arrives.
+ */
+export interface RunOptions {
+    cwd: string;
+    /** Extra environment for this command only. */
+    env?: Record<string, string>;
+    /** Append stdout/stderr here as they arrive. */
+    logFile?: string;
+    /** Mirror output to the terminal. */
+    verbose?: boolean;
+    /** Kill the command after this many milliseconds. */
+    timeoutMs?: number;
+}
+export interface RunResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+export declare class CommandError extends Error {
+    readonly command: string;
+    readonly code: number;
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly logFile?: string;
+    constructor(command: string, result: RunResult, logFile?: string);
+}
+/**
+ * Runs a command, streaming its output to the log file.
+ *
+ * `file` and `args` are passed to the OS separately - there is no shell on
+ * POSIX, so nothing in `args` can be reinterpreted as shell syntax.
+ */
+export declare function run(file: string, args: string[], options: RunOptions): Promise<RunResult>;
+/** Runs a command and returns false instead of throwing when it fails. */
+export declare function tryRun(file: string, args: string[], options: RunOptions): Promise<boolean>;
+//# sourceMappingURL=exec.d.ts.map

package/dist/utils/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/utils/exec.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AAEH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBAEd,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM;CAcjE;AAkDD;;;;;GAKG;AACH,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA4D/F;AAED,0EAA0E;AAC1E,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAOhG"}

package/dist/utils/exec.js

@@ -0,0 +1,136 @@
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+export class CommandError extends Error {
+    command;
+    code;
+    stdout;
+    stderr;
+    logFile;
+    constructor(command, result, logFile) {
+        // Put the last few lines of stderr in the message. The old code told the
+        // user to "see capuchoo-deploy.log" and nothing else, which meant every
+        // failure needed a second round trip to diagnose.
+        const tail = (result.stderr || result.stdout).trimEnd().split("\n").slice(-6).join("\n");
+        super(`${command} exited with ${result.code}${tail ? `\n${tail}` : ""}`);
+        this.name = "CommandError";
+        this.command = command;
+        this.code = result.code;
+        this.stdout = result.stdout;
+        this.stderr = result.stderr;
+        this.logFile = logFile;
+    }
+}
+function appendLog(logFile, chunk) {
+    if (!logFile)
+        return;
+    try {
+        fs.mkdirSync(path.dirname(logFile), { recursive: true });
+        fs.appendFileSync(logFile, chunk);
+    }
+    catch {
+        // Never fail a deploy because logging failed.
+    }
+}
+/**
+ * Windows cannot execute a `.cmd` or `.bat` directly - and almost every
+ * `node_modules/.bin` entry is one - so those need `cmd.exe`.
+ *
+ * `spawn(..., { shell: true })` is the usual shortcut, but Node 26 deprecates
+ * passing an args array with it (DEP0190): the arguments are concatenated
+ * rather than escaped, so anything containing a space or a shell
+ * metacharacter changes the command. This builds the `cmd.exe` invocation
+ * explicitly and does its own quoting, which is both warning-free and
+ * predictable.
+ *
+ * Everything else - real executables, and every POSIX case - is spawned
+ * directly with no shell at all.
+ */
+function windowsSafeSpawn(file, args) {
+    const needsShell = process.platform === "win32" && /\.(cmd|bat)$/i.test(file);
+    if (!needsShell)
+        return { file, args, options: {} };
+    const command = [file, ...args].map(quoteForCmd).join(" ");
+    return {
+        file: process.env.ComSpec ?? "cmd.exe",
+        // /d skips AutoRun scripts, /s treats the rest as one command, /c runs it.
+        args: ["/d", "/s", "/c", `"${command}"`],
+        // We have already quoted; stop Node quoting again on top.
+        options: { windowsVerbatimArguments: true },
+    };
+}
+function quoteForCmd(value) {
+    // Bare tokens are left alone so the command stays readable in the log.
+    if (/^[\w.:\\/=@-]+$/.test(value))
+        return value;
+    return `"${value.replaceAll('"', '""')}"`;
+}
+/**
+ * Runs a command, streaming its output to the log file.
+ *
+ * `file` and `args` are passed to the OS separately - there is no shell on
+ * POSIX, so nothing in `args` can be reinterpreted as shell syntax.
+ */
+export async function run(file, args, options) {
+    const printable = [file, ...args].join(" ");
+    appendLog(options.logFile, `\n$ ${printable}\n  cwd: ${options.cwd}\n${"-".repeat(60)}\n`);
+    const spawned = windowsSafeSpawn(file, args);
+    return new Promise((resolve, reject) => {
+        const child = spawn(spawned.file, spawned.args, {
+            cwd: options.cwd,
+            env: { ...process.env, ...options.env },
+            windowsHide: true,
+            ...spawned.options,
+        });
+        let stdout = "";
+        let stderr = "";
+        let timer;
+        if (options.timeoutMs) {
+            timer = setTimeout(() => {
+                child.kill();
+                reject(new Error(`${printable} did not finish within ${options.timeoutMs}ms and was stopped`));
+            }, options.timeoutMs);
+        }
+        child.stdout?.on("data", (data) => {
+            const text = data.toString();
+            stdout += text;
+            appendLog(options.logFile, text);
+            if (options.verbose)
+                process.stdout.write(text);
+        });
+        child.stderr?.on("data", (data) => {
+            const text = data.toString();
+            stderr += text;
+            appendLog(options.logFile, text);
+            if (options.verbose)
+                process.stderr.write(text);
+        });
+        child.on("error", (error) => {
+            if (timer)
+                clearTimeout(timer);
+            appendLog(options.logFile, `\nspawn failed: ${error.message}\n`);
+            reject(error);
+        });
+        child.on("close", (code) => {
+            if (timer)
+                clearTimeout(timer);
+            const result = { code: code ?? 1, stdout, stderr };
+            if (result.code !== 0) {
+                reject(new CommandError(printable, result, options.logFile));
+                return;
+            }
+            resolve(result);
+        });
+    });
+}
+/** Runs a command and returns false instead of throwing when it fails. */
+export async function tryRun(file, args, options) {
+    try {
+        await run(file, args, options);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=exec.js.map

package/dist/utils/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/utils/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA+B7B,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,OAAO,CAAS;IAChB,IAAI,CAAS;IACb,MAAM,CAAS;IACf,MAAM,CAAS;IACf,OAAO,CAAU;IAE1B,YAAY,OAAe,EAAE,MAAiB,EAAE,OAAgB;QAC9D,yEAAyE;QACzE,wEAAwE;QACxE,kDAAkD;QAClD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzF,KAAK,CAAC,GAAG,OAAO,gBAAgB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,SAAS,SAAS,CAAC,OAA2B,EAAE,KAAa;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,gBAAgB,CACvB,IAAY,EACZ,IAAc;IAEd,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAEpD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS;QACtC,2EAA2E;QAC3E,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,GAAG,CAAC;QACxC,0DAA0D;QAC1D,OAAO,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,uEAAuE;IACvE,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,OAAmB;IACzE,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5C,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,SAAS,YAAY,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAE3F,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE7C,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;YAC9C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvC,WAAW,EAAE,IAAI;YACjB,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,KAAiC,CAAC;QAEtC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,KAAK,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,CACJ,IAAI,KAAK,CAAC,GAAG,SAAS,0BAA0B,OAAO,CAAC,SAAS,oBAAoB,CAAC,CACvF,CAAC;YACJ,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAED,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,IAAI,CAAC;YACf,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,IAAI,CAAC;YACf,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YACjE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAc,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAE9D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,IAAc,EAAE,OAAmB;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/utils/http.d.ts

@@ -0,0 +1,37 @@
+/**
+ * HTTP for the CLI.
+ *
+ * Node 22 has `fetch`, `FormData` and `openAsBlob`, which between them cover
+ * everything the CLI was using `axios` and `form-data` for. `openAsBlob` in
+ * particular reads lazily, so a 60 MB APK is streamed rather than buffered -
+ * the previous `fs.createReadStream` plus `maxBodyLength: Infinity` combination
+ * worked, but only because the limit was disabled.
+ */
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(message: string, status: number, body: unknown);
+}
+export interface HttpOptions {
+    endpoint: string;
+    apiKey: string;
+    timeoutMs?: number;
+}
+export declare function get<T>(pathname: string, options: HttpOptions): Promise<T>;
+export declare function post<T>(pathname: string, body: unknown, options: HttpOptions): Promise<T>;
+export interface UploadResult {
+    status: number;
+    body: unknown;
+}
+/**
+ * Uploads a build artefact as multipart form data.
+ *
+ * The upload timeout is separate and generous: a release APK on a slow
+ * connection legitimately takes minutes, and the 30 second default used for API
+ * calls would abort it.
+ */
+export declare function uploadArtifact(pathname: string, filePath: string, fields: Record<string, string>, options: HttpOptions & {
+    fileField?: string;
+    timeoutMs?: number;
+}): Promise<UploadResult>;
+//# sourceMappingURL=http.d.ts.map

package/dist/utils/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/utils/http.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AAEH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBAEX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;CAM3D;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAwED,wBAAgB,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAEzE;AAED,wBAAgB,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAEzF;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,EAAE,WAAW,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC,YAAY,CAAC,CA8CvB"}