@gpc-cli/core 0.10.7 → 0.11.0

package/dist/index.d.ts

@@ -1368,6 +1368,8 @@ interface ParsedManifest {
     services: ManifestComponent[];
     receivers: ManifestComponent[];
     providers: ManifestComponent[];
+    /** `<meta-data>` entries of `<application>`, name to value. Entries without a value are omitted. */
+    metaData: Record<string, string>;
     /** Android 16+ compat shim for non-16KB-aligned native libs. */
     pageSizeCompat?: boolean;
     /** Set when the manifest could not be fully parsed -- manifest-dependent scanners should skip. */
@@ -1668,6 +1670,12 @@ declare function runWatchLoop(opts: WatchOptions): Promise<void>;
 /** Returns true if breach state changed (breach started or cleared). */
 declare function trackBreachState(packageName: string, isBreaching: boolean): Promise<boolean>;
 declare function sendNotification(title: string, body: string): void;
+/**
+ * Re-rates a saved status against the thresholds of the current run. A cached
+ * status keeps the thresholds of the run that fetched it, so serving it as-is
+ * would gate on values the caller never asked for.
+ */
+declare function applyVitalThresholds(status: AppStatus, vitalThresholds: GetAppStatusOptions["vitalThresholds"]): AppStatus;
 declare function statusHasBreach(status: AppStatus): boolean;
 
 interface ChangelogEntry {
@@ -2052,4 +2060,4 @@ declare function readinessBadgeColor(grade: ReadinessGrade): string;
 declare function readinessBadgeUrl(score: ReadinessScore): string;
 declare function readinessBadgeMarkdown(score: ReadinessScore): string;
 
-export { ApiError, type ApiSigningFingerprint, type AppInfo, type AppStatus, type ApplyReleaseNotesResult, type AuditEntry, type BatchSyncResult, type BundleAnalysis, type BundleComparison, type BundleEntry, type BundleSizeCheckResult, type BundleSizeConfig, type BundlesWaitOptions, type ChangelogEntry, type ChecklistInput, type ChecklistItem, type ChecklistResult, type CommandContext, type CommitCluster, type CommitResult, ConfigError, type CreateEnterpriseAppParams, DEFAULT_LIMITS, DEFAULT_MODELS, DEFAULT_PREFLIGHT_CONFIG, DEFAULT_WATCH_THRESHOLDS, type DecodedNotification, type DiffToken, type DiscoverPluginsOptions, type DiscoveredPlugin, type DryRunPublishResult, type DryRunResult, type DryRunUploadResult, type ErrorReason, type ExportImagesOptions, type ExportImagesSummary, type ExternalTransactionRefundOptions, type FastlaneDetection, type FastlaneLane, type FetchChangelogOptions, type FieldLintResult, type FileValidationResult, type FinancialReportDownload, type FindingSeverity, GOOGLE_PLAY_LANGUAGES, type GameConfigDiff, type GamesPushOptions, type GamesSyncResult, type GenerateOptions, type GeneratedChangelog, type GetAppStatusOptions, type GitNotesOptions, type GitReleaseNotes, type GitRunner, GpcError, type ImageSyncDetail, type ImageSyncOptions, type ImageSyncResult, type ImageValidationResult, type InitOptions, type InitResult, type InternalSharingUploadResult, type KeystoreFingerprint, type ListGamesConfigOptions, type ListIapOptions, type ListReportsResult, type ListSubscriptionsOptions, type ListUsersOptions, type ListVoidedOptions, type ListingDiff, type ListingFieldLimits, type ListingLintResult, type ListingsResult, type LoadedPlugin, type LocaleBundle, type LocaleEntry, type MigrationResult, NetworkError, type OneTimeProductDiff, type OutputMode, PERMISSION_PROPAGATION_WARNING, PLACEHOLDER_TEXT, PLAY_STORE_LIMIT, PROVIDER_WHITELIST, type ParsedCommit, type ParsedManifest, type ParsedMonth, type PlayStoreFormat, type PlayStoreRenderOptions, PluginManager, type PreflightConfig, type PreflightFinding, type PreflightOptions, type PreflightResult, type PreflightScanner, type Provider, type PublishOptions, type PublishResult, type PushResult, type QuotaUsage, RENDERERS, REVIEW_SORT_PRESETS, type RawCommit, type ReadinessBreakdownEntry, type ReadinessGrade, type ReadinessScore, type ReadinessSignal, type ReadinessSignalStatus, type RefundReviewPreference, type ReleaseDiff, type ReleaseNotesValidation, type ReleaseStatusResult, type Renderer, type ReportObject, type ReportsAuth, type ResolveAiConfigOptions, type ResolveLocalesOptions, type ReviewAnalysis, type ReviewExportOptions, type ReviewOrderRefundOptions, type ReviewOrderRefundResult, type ReviewSortPreset, type ReviewsFilterOptions, type RevocationRefundType, type RtdnStatus, SECTION_ORDER, SENSITIVE_ARG_KEYS, SENSITIVE_KEYS, SEVERITY_ORDER, type ScaffoldOptions, type ScaffoldResult, type SigningConsistencyResult, type SigningKeyComparison, type Spinner, type StatsReportDownload, type StatusDiff, type StatusRelease, type StatusReviews, type StatusVitalMetric, type SubscriptionAnalytics, type SubscriptionDiff, type SyncResult, type ThresholdResult, type TrainConfig, type TrainState, type TranslateBundleOptions, type TranslatedBundle, type TranslationFailure, type TranslationPath, type TranslationResult, type Translator, type TranslatorConfig, type UploadResult, VALID_WATCH_METRICS, type ValidateCheck, type ValidateOptions, type ValidateResult, type ValidatedPluginApproval, type VersionVitalsComparison, type VersionVitalsRow, type VitalsOverview, type VitalsQueryOptions, type VitalsTrendComparison, type WatchAction, type WatchCallbacks, type WatchConfig, type WatchEvent, type WatchMetric, type WatchOptions, type WatchRollout, type WatchSummary, type WatchVitalReading, type WatchVitalsOptions, type WebhookPayload, type ZipCsvEntry, abortTrain, acknowledgeProductPurchase, activateBasePlan, activateOffer, addRecoveryTargeting, addTesters, advanceTrain, analyzeBundle, analyzeRemoteListings, analyzeReviews, annotateListResult, applyReleaseNotes, assertRateThreshold, assignRelease, batchGetOrders, batchSyncInAppProducts, buildChecklist, buildExternalTransactionRefund, buildLocaleBundle, bundleToReleaseNotes, cancelRecoveryAction, cancelSubscriptionPurchase, cancelSubscriptionV2, checkBundleSize, checkSigningConsistency, checkThreshold, classifyError, clearAuditLog, commitWithRescue, compareBundles, compareFingerprints, compareVersionVitals, compareVitalsTrend, computeStatusDiff, consumeProductPurchase, convertRegionPrices, createAchievementConfig, createAuditEntry, createDeviceTier, createEnterpriseApp, createExternalTransaction, createGrant, createInAppProduct, createLeaderboardConfig, createOffer, createOneTimeOffer, createOneTimeProduct, createRecoveryAction, createSpinner, createSubscription, createTrack, createTranslator, deactivateBasePlan, deactivateOffer, decodeCsvText, decodeNotification, decodeStatsCsv, defaultGitRunner, deferSubscriptionPurchase, deferSubscriptionV2, deleteAchievementConfig, deleteBasePlan, deleteGrant, deleteImage, deleteInAppProduct, deleteLeaderboardConfig, deleteListing, deleteOffer, deleteOneTimeOffer, deleteOneTimeProduct, deleteSubscription, deployRecoveryAction, detectFastlane, detectOutputFormat, diffAchievementConfig, diffLeaderboardConfig, diffListings, diffListingsCommand, diffListingsEnhanced, diffOneTimeProduct, diffReleases, diffSubscription, discoverPluginEntries, discoverPlugins, dispatchWebhook, downloadFinancialReport, downloadGeneratedApk, downloadReportObject, downloadStatsReport, exportImages, exportReviews, extractCsvEntriesFromZip, fetchAggregateCost, fetchChangelog, fetchReleaseNotes, findBundle, formatChangelogEntry, formatCustomPayload, formatDiscordPayload, formatJunit, formatMoney, formatNotification, formatOutput, formatPathLabel, formatSlackPayload, formatStatusDiff, formatStatusSummary, formatStatusTable, formatWordDiff, generateChangelog, generateMigrationPlan, generateNotesFromGit, getAchievementConfig, getAllScannerNames, getApiSigningFingerprint, getAppInfo, getAppStatus, getCountryAvailability, getDeviceTier, getExternalTransaction, getInAppProduct, getKeystoreFingerprint, getLeaderboardConfig, getListings, getOffer, getOneTimeOffer, getOneTimeProduct, getOrderDetails, getProductPurchase, getProductPurchaseV2, getQuotaUsage, getReleasesStatus, getReview, getRtdnStatus, getSubscription, getSubscriptionAnalytics, getSubscriptionPurchase, getTrainStatus, getUser, getVitalsAnomalies, getVitalsAnr, getVitalsBattery, getVitalsCrashes, getVitalsErrorCount, getVitalsLmk, getVitalsMemory, getVitalsMemoryBitmap, getVitalsMemoryRss, getVitalsOverview, getVitalsRendering, getVitalsStartup, gradeFromPercent, gunzipIfNeeded, handleBreach, importDataSafety, importTestersFromCsv, initAudit, initProject, inviteUser, isFinancialReportType, isGzip, isStatsReportType, isValidBcp47, isValidReportType, isValidStatsDimension, isVersionedNotesDir, isZip, latestWorstValue, lintListing, lintListings, lintLocalListings, listAchievementConfigs, listAchievements, listAuditEvents, listBundles, listDeviceTiers, listGeneratedApks, listGrants, listImages, listInAppProducts, listLeaderboardConfigs, listLeaderboards, listOffers, listOneTimeOffers, listOneTimeProducts, listRecoveryActions, listReportObjects, listReports, listReviews, listSubscriptions, listTesters, listTracks, listUsers, listVoidedPurchases, loadPreflightConfig, loadStatusCache, maybePaginate, migratePrices, monthToken, moreResultsFooter, normalizeFingerprint, parseAppfile, parseCommit, parseFastfile, parseGrantArg, parseKeytoolOutput, parseMonth, parseRemoteUrl, pauseTrain, promoteRelease, publish, publishEnterpriseApp, pullAchievementConfigs, pullLeaderboardConfigs, pullListings, pushAchievementConfigs, pushLeaderboardConfigs, pushListings, readListingsFromDir, readMetricValue, readReleaseNotesForVersion, readReleaseNotesFromDir, readinessBadgeColor, readinessBadgeMarkdown, readinessBadgeUrl, redactAuditArgs, redactSensitive, refundExternalTransaction, refundOrder, relativeTime, removeTesters, removeUser, renderChecklistMarkdown, renderJson, renderMarkdown, renderPlayStore, renderPlayStoreJson, renderPlayStoreMd, renderPlayStorePrompt, renderPrompt, replyToReview, reportAccessDeniedError, reportBucketNotFoundError, reportObjectNotFoundError, reportPrefix, resolveAiConfig, resolveLocales, resolveReportsBucket, retryOnUploadNotComplete, reviewOrderRefund, revokeSubscriptionPurchase, runPreflight, runWatch, runWatchLoop, safePath, safePathWithin, saveStatusCache, scaffoldPlugin, scoreReadiness, searchAuditEvents, searchVitalsErrors, sendNotification, sendWebhook, setAchievementIcon, setLeaderboardIcon, sha256File, sortResults, sortReviews, startTrain, statusHasBreach, syncImages, syncInAppProducts, topFiles, trackBreachState, translateBundle, updateAchievementConfig, updateAppDetails, updateDataSafety, updateGrant, updateInAppProduct, updateLeaderboardConfig, updateListing, updateOffer, updateOneTimeOffer, updateOneTimeProduct, updateRollout, updateSubscription, updateTrackConfig, updateUser, uploadExternallyHosted, uploadImage, uploadInternalSharing, uploadRelease, validateAndCommit, validateBundleForApply, validateImage, validateLanguageCode, validatePackageName, validatePluginForApproval, validatePreSubmission, validateReleaseNotes, validateSku, validateTrackName, validateUploadFile, validateVersionCode, waitForBundle, waitForBundleProcessing, watchVitalsWithAutoHalt, wordDiff, worstSliceAverage, writeAuditLog, writeListingsToDir, writeMigrationOutput };
+export { ApiError, type ApiSigningFingerprint, type AppInfo, type AppStatus, type ApplyReleaseNotesResult, type AuditEntry, type BatchSyncResult, type BundleAnalysis, type BundleComparison, type BundleEntry, type BundleSizeCheckResult, type BundleSizeConfig, type BundlesWaitOptions, type ChangelogEntry, type ChecklistInput, type ChecklistItem, type ChecklistResult, type CommandContext, type CommitCluster, type CommitResult, ConfigError, type CreateEnterpriseAppParams, DEFAULT_LIMITS, DEFAULT_MODELS, DEFAULT_PREFLIGHT_CONFIG, DEFAULT_WATCH_THRESHOLDS, type DecodedNotification, type DiffToken, type DiscoverPluginsOptions, type DiscoveredPlugin, type DryRunPublishResult, type DryRunResult, type DryRunUploadResult, type ErrorReason, type ExportImagesOptions, type ExportImagesSummary, type ExternalTransactionRefundOptions, type FastlaneDetection, type FastlaneLane, type FetchChangelogOptions, type FieldLintResult, type FileValidationResult, type FinancialReportDownload, type FindingSeverity, GOOGLE_PLAY_LANGUAGES, type GameConfigDiff, type GamesPushOptions, type GamesSyncResult, type GenerateOptions, type GeneratedChangelog, type GetAppStatusOptions, type GitNotesOptions, type GitReleaseNotes, type GitRunner, GpcError, type ImageSyncDetail, type ImageSyncOptions, type ImageSyncResult, type ImageValidationResult, type InitOptions, type InitResult, type InternalSharingUploadResult, type KeystoreFingerprint, type ListGamesConfigOptions, type ListIapOptions, type ListReportsResult, type ListSubscriptionsOptions, type ListUsersOptions, type ListVoidedOptions, type ListingDiff, type ListingFieldLimits, type ListingLintResult, type ListingsResult, type LoadedPlugin, type LocaleBundle, type LocaleEntry, type MigrationResult, NetworkError, type OneTimeProductDiff, type OutputMode, PERMISSION_PROPAGATION_WARNING, PLACEHOLDER_TEXT, PLAY_STORE_LIMIT, PROVIDER_WHITELIST, type ParsedCommit, type ParsedManifest, type ParsedMonth, type PlayStoreFormat, type PlayStoreRenderOptions, PluginManager, type PreflightConfig, type PreflightFinding, type PreflightOptions, type PreflightResult, type PreflightScanner, type Provider, type PublishOptions, type PublishResult, type PushResult, type QuotaUsage, RENDERERS, REVIEW_SORT_PRESETS, type RawCommit, type ReadinessBreakdownEntry, type ReadinessGrade, type ReadinessScore, type ReadinessSignal, type ReadinessSignalStatus, type RefundReviewPreference, type ReleaseDiff, type ReleaseNotesValidation, type ReleaseStatusResult, type Renderer, type ReportObject, type ReportsAuth, type ResolveAiConfigOptions, type ResolveLocalesOptions, type ReviewAnalysis, type ReviewExportOptions, type ReviewOrderRefundOptions, type ReviewOrderRefundResult, type ReviewSortPreset, type ReviewsFilterOptions, type RevocationRefundType, type RtdnStatus, SECTION_ORDER, SENSITIVE_ARG_KEYS, SENSITIVE_KEYS, SEVERITY_ORDER, type ScaffoldOptions, type ScaffoldResult, type SigningConsistencyResult, type SigningKeyComparison, type Spinner, type StatsReportDownload, type StatusDiff, type StatusRelease, type StatusReviews, type StatusVitalMetric, type SubscriptionAnalytics, type SubscriptionDiff, type SyncResult, type ThresholdResult, type TrainConfig, type TrainState, type TranslateBundleOptions, type TranslatedBundle, type TranslationFailure, type TranslationPath, type TranslationResult, type Translator, type TranslatorConfig, type UploadResult, VALID_WATCH_METRICS, type ValidateCheck, type ValidateOptions, type ValidateResult, type ValidatedPluginApproval, type VersionVitalsComparison, type VersionVitalsRow, type VitalsOverview, type VitalsQueryOptions, type VitalsTrendComparison, type WatchAction, type WatchCallbacks, type WatchConfig, type WatchEvent, type WatchMetric, type WatchOptions, type WatchRollout, type WatchSummary, type WatchVitalReading, type WatchVitalsOptions, type WebhookPayload, type ZipCsvEntry, abortTrain, acknowledgeProductPurchase, activateBasePlan, activateOffer, addRecoveryTargeting, addTesters, advanceTrain, analyzeBundle, analyzeRemoteListings, analyzeReviews, annotateListResult, applyReleaseNotes, applyVitalThresholds, assertRateThreshold, assignRelease, batchGetOrders, batchSyncInAppProducts, buildChecklist, buildExternalTransactionRefund, buildLocaleBundle, bundleToReleaseNotes, cancelRecoveryAction, cancelSubscriptionPurchase, cancelSubscriptionV2, checkBundleSize, checkSigningConsistency, checkThreshold, classifyError, clearAuditLog, commitWithRescue, compareBundles, compareFingerprints, compareVersionVitals, compareVitalsTrend, computeStatusDiff, consumeProductPurchase, convertRegionPrices, createAchievementConfig, createAuditEntry, createDeviceTier, createEnterpriseApp, createExternalTransaction, createGrant, createInAppProduct, createLeaderboardConfig, createOffer, createOneTimeOffer, createOneTimeProduct, createRecoveryAction, createSpinner, createSubscription, createTrack, createTranslator, deactivateBasePlan, deactivateOffer, decodeCsvText, decodeNotification, decodeStatsCsv, defaultGitRunner, deferSubscriptionPurchase, deferSubscriptionV2, deleteAchievementConfig, deleteBasePlan, deleteGrant, deleteImage, deleteInAppProduct, deleteLeaderboardConfig, deleteListing, deleteOffer, deleteOneTimeOffer, deleteOneTimeProduct, deleteSubscription, deployRecoveryAction, detectFastlane, detectOutputFormat, diffAchievementConfig, diffLeaderboardConfig, diffListings, diffListingsCommand, diffListingsEnhanced, diffOneTimeProduct, diffReleases, diffSubscription, discoverPluginEntries, discoverPlugins, dispatchWebhook, downloadFinancialReport, downloadGeneratedApk, downloadReportObject, downloadStatsReport, exportImages, exportReviews, extractCsvEntriesFromZip, fetchAggregateCost, fetchChangelog, fetchReleaseNotes, findBundle, formatChangelogEntry, formatCustomPayload, formatDiscordPayload, formatJunit, formatMoney, formatNotification, formatOutput, formatPathLabel, formatSlackPayload, formatStatusDiff, formatStatusSummary, formatStatusTable, formatWordDiff, generateChangelog, generateMigrationPlan, generateNotesFromGit, getAchievementConfig, getAllScannerNames, getApiSigningFingerprint, getAppInfo, getAppStatus, getCountryAvailability, getDeviceTier, getExternalTransaction, getInAppProduct, getKeystoreFingerprint, getLeaderboardConfig, getListings, getOffer, getOneTimeOffer, getOneTimeProduct, getOrderDetails, getProductPurchase, getProductPurchaseV2, getQuotaUsage, getReleasesStatus, getReview, getRtdnStatus, getSubscription, getSubscriptionAnalytics, getSubscriptionPurchase, getTrainStatus, getUser, getVitalsAnomalies, getVitalsAnr, getVitalsBattery, getVitalsCrashes, getVitalsErrorCount, getVitalsLmk, getVitalsMemory, getVitalsMemoryBitmap, getVitalsMemoryRss, getVitalsOverview, getVitalsRendering, getVitalsStartup, gradeFromPercent, gunzipIfNeeded, handleBreach, importDataSafety, importTestersFromCsv, initAudit, initProject, inviteUser, isFinancialReportType, isGzip, isStatsReportType, isValidBcp47, isValidReportType, isValidStatsDimension, isVersionedNotesDir, isZip, latestWorstValue, lintListing, lintListings, lintLocalListings, listAchievementConfigs, listAchievements, listAuditEvents, listBundles, listDeviceTiers, listGeneratedApks, listGrants, listImages, listInAppProducts, listLeaderboardConfigs, listLeaderboards, listOffers, listOneTimeOffers, listOneTimeProducts, listRecoveryActions, listReportObjects, listReports, listReviews, listSubscriptions, listTesters, listTracks, listUsers, listVoidedPurchases, loadPreflightConfig, loadStatusCache, maybePaginate, migratePrices, monthToken, moreResultsFooter, normalizeFingerprint, parseAppfile, parseCommit, parseFastfile, parseGrantArg, parseKeytoolOutput, parseMonth, parseRemoteUrl, pauseTrain, promoteRelease, publish, publishEnterpriseApp, pullAchievementConfigs, pullLeaderboardConfigs, pullListings, pushAchievementConfigs, pushLeaderboardConfigs, pushListings, readListingsFromDir, readMetricValue, readReleaseNotesForVersion, readReleaseNotesFromDir, readinessBadgeColor, readinessBadgeMarkdown, readinessBadgeUrl, redactAuditArgs, redactSensitive, refundExternalTransaction, refundOrder, relativeTime, removeTesters, removeUser, renderChecklistMarkdown, renderJson, renderMarkdown, renderPlayStore, renderPlayStoreJson, renderPlayStoreMd, renderPlayStorePrompt, renderPrompt, replyToReview, reportAccessDeniedError, reportBucketNotFoundError, reportObjectNotFoundError, reportPrefix, resolveAiConfig, resolveLocales, resolveReportsBucket, retryOnUploadNotComplete, reviewOrderRefund, revokeSubscriptionPurchase, runPreflight, runWatch, runWatchLoop, safePath, safePathWithin, saveStatusCache, scaffoldPlugin, scoreReadiness, searchAuditEvents, searchVitalsErrors, sendNotification, sendWebhook, setAchievementIcon, setLeaderboardIcon, sha256File, sortResults, sortReviews, startTrain, statusHasBreach, syncImages, syncInAppProducts, topFiles, trackBreachState, translateBundle, updateAchievementConfig, updateAppDetails, updateDataSafety, updateGrant, updateInAppProduct, updateLeaderboardConfig, updateListing, updateOffer, updateOneTimeOffer, updateOneTimeProduct, updateRollout, updateSubscription, updateTrackConfig, updateUser, uploadExternallyHosted, uploadImage, uploadInternalSharing, uploadRelease, validateAndCommit, validateBundleForApply, validateImage, validateLanguageCode, validatePackageName, validatePluginForApproval, validatePreSubmission, validateReleaseNotes, validateSku, validateTrackName, validateUploadFile, validateVersionCode, waitForBundle, waitForBundleProcessing, watchVitalsWithAutoHalt, wordDiff, worstSliceAverage, writeAuditLog, writeListingsToDir, writeMigrationOutput };

package/dist/index.js

@@ -3093,7 +3093,7 @@ async function loadStatusCache(packageName, ttlSeconds = DEFAULT_TTL_SECONDS) {
     const raw = await readFile4(cacheFilePath(packageName), "utf-8");
     const entry = JSON.parse(raw);
     const age = (Date.now() - new Date(entry.fetchedAt).getTime()) / 1e3;
-    if (age > (entry.ttl ?? ttlSeconds)) return null;
+    if (age > ttlSeconds) return null;
     const data = entry.data;
     return {
       ...data,
@@ -3164,6 +3164,14 @@ async function queryVitalWithTrend(reporting, packageName, metricSet, days) {
   return { current, previous, trend };
 }
 var SKIPPED_VITAL = { current: void 0, previous: void 0, trend: null };
+function resolveStatusThresholds(overrides) {
+  return {
+    crashRate: overrides?.crashRate ?? DEFAULT_THRESHOLDS.crashRate,
+    anrRate: overrides?.anrRate ?? DEFAULT_THRESHOLDS.anrRate,
+    slowStartRate: overrides?.slowStartRate ?? DEFAULT_THRESHOLDS.slowStartRate,
+    slowRenderingRate: overrides?.slowRenderingRate ?? DEFAULT_THRESHOLDS.slowRenderingRate
+  };
+}
 function toVitalMetric(value, threshold, previousValue, trend) {
   const base = previousValue !== void 0 ? { value, threshold, status: "unknown", previousValue, trend: trend ?? null } : { value, threshold, status: "unknown" };
   if (value === void 0) return { ...base, status: "unknown" };
@@ -3210,12 +3218,7 @@ async function getAppStatus(client, reporting, packageName, options = {}) {
   const days = options.days ?? 7;
   const reviewDays = options.reviewDays ?? 30;
   const sections = new Set(options.sections ?? ["releases", "vitals", "reviews"]);
-  const thresholds = {
-    crashRate: options.vitalThresholds?.crashRate ?? DEFAULT_THRESHOLDS.crashRate,
-    anrRate: options.vitalThresholds?.anrRate ?? DEFAULT_THRESHOLDS.anrRate,
-    slowStartRate: options.vitalThresholds?.slowStartRate ?? DEFAULT_THRESHOLDS.slowStartRate,
-    slowRenderingRate: options.vitalThresholds?.slowRenderingRate ?? DEFAULT_THRESHOLDS.slowRenderingRate
-  };
+  const thresholds = resolveStatusThresholds(options.vitalThresholds);
   const [
     releasesResult,
     crashesResult,
@@ -3592,6 +3595,22 @@ function sendNotification(title, body) {
   } catch {
   }
 }
+function applyVitalThresholds(status, vitalThresholds) {
+  const v = status.vitals;
+  if (!v) return status;
+  const t = resolveStatusThresholds(vitalThresholds);
+  const rate = (metric, threshold) => metric && toVitalMetric(metric.value, threshold, metric.previousValue, metric.trend);
+  return {
+    ...status,
+    vitals: {
+      ...v,
+      crashes: rate(v.crashes, t.crashRate),
+      anr: rate(v.anr, t.anrRate),
+      slowStarts: rate(v.slowStarts, t.slowStartRate),
+      slowRender: rate(v.slowRender, t.slowRenderingRate)
+    }
+  };
+}
 function statusHasBreach(status) {
   return status.vitals.crashes.status === "breach" || status.vitals.anr.status === "breach" || status.vitals.slowStarts.status === "breach" || status.vitals.slowRender.status === "breach";
 }
@@ -6285,6 +6304,7 @@ var RESOURCE_IDS = {
   16843376: "targetSdkVersion",
   16842782: "debuggable",
   16842786: "permission",
+  16842788: "value",
   16842795: "exported",
   16843378: "testOnly",
   16843760: "usesCleartextTraffic",
@@ -6413,6 +6433,7 @@ function extractManifestData(manifest) {
   const services = app ? extractComponents(app, "service") : [];
   const receivers = app ? extractComponents(app, "receiver") : [];
   const providers = app ? extractComponents(app, "provider") : [];
+  const metaData = app ? extractMetaData(app) : {};
   return {
     packageName,
     versionCode,
@@ -6429,9 +6450,20 @@ function extractManifestData(manifest) {
     activities,
     services,
     receivers,
-    providers
+    providers,
+    metaData
   };
 }
+function extractMetaData(elem) {
+  const entries = {};
+  for (const el of getChildren(elem, "meta-data")) {
+    const attrs = el.attribute || [];
+    const name = getAttrByName(attrs, "name");
+    const value = getAttrByName(attrs, "value");
+    if (name && value !== void 0) entries[name] = value;
+  }
+  return entries;
+}
 function extractComponents(appElement, tagName) {
   return getChildren(appElement, tagName).map((el) => {
     const compAttrs = el.attribute || [];
@@ -6534,7 +6566,8 @@ function createFallbackManifest() {
     activities: [],
     services: [],
     receivers: [],
-    providers: []
+    providers: [],
+    metaData: {}
   };
 }
 function openAndScan(buffer, manifestPath = AAB_MANIFEST_PATH) {
@@ -6808,7 +6841,7 @@ var manifestScanner = {
             ruleId: "geofencing-foreground-service",
             severity: "warning",
             title: `Possible geofencing via foreground service "${service.name}"`,
-            message: `Service "${service.name}" uses foregroundServiceType "location" and the app declares ACCESS_BACKGROUND_LOCATION. Google Play no longer approves geofencing as a foreground service use case (sensitive-permissions policy announced April 15, 2026); enforcement for apps targeting Android 17 (API 37+) begins October 28, 2026.`,
+            message: `Service "${service.name}" uses foregroundServiceType "location" and the app declares ACCESS_BACKGROUND_LOCATION. Google Play no longer approves geofencing as a foreground service use case (sensitive-permissions policy announced April 15, 2026).`,
             suggestion: 'If this service performs geofencing, migrate to the Geofencing API (LocationServices.getGeofencingClient) or WorkManager/AlarmManager. If this is legitimate background location tracking (navigation, fitness), suppress this rule via .preflightrc.json: "disabledRules": ["geofencing-foreground-service"].',
             policyUrl: "https://support.google.com/googleplay/android-developer/answer/16926792"
           });
@@ -6898,7 +6931,7 @@ var RESTRICTED_PERMISSIONS = [
     permission: "android.permission.READ_CALL_LOG",
     severity: "critical",
     title: "READ_CALL_LOG requires declaration form",
-    message: "READ_CALL_LOG is restricted to default phone/assistant handler apps. As of July 15, 2026, account verification via phone call is no longer an accepted use case for the Call Log permissions.",
+    message: "READ_CALL_LOG is restricted to default phone/assistant handler apps. From January 27, 2027, account verification via phone call is no longer an accepted use case for the Call Log permissions.",
     suggestion: "Remove READ_CALL_LOG unless your app is a default phone or assistant handler. For phone-number verification, use the Digital Credentials API; for one-time codes, use the SMS Retriever API instead of reading the call log.",
     policyUrl: "https://support.google.com/googleplay/android-developer/answer/10208820"
   },
@@ -7041,14 +7074,14 @@ var permissionsScanner = {
     ].filter((p) => manifest.permissions.includes(p) && !allowed.has(p));
     if (contactsPerms.length > 0) {
       const names = contactsPerms.map((p) => p.split(".").pop()).join(", ");
-      const enforced = manifest.targetSdk >= 37 ? ` Your app targets API ${manifest.targetSdk}, so this is enforced.` : "";
+      const enforced = manifest.targetSdk >= 37 ? ` Your app targets API ${manifest.targetSdk}, so this applies to it.` : "";
       findings.push({
         scanner: "permissions",
         ruleId: "contacts-permission-broad",
         severity: "warning",
         title: "Broad contacts access requires migration to Contact Picker",
-        message: `Your app declares ${names}. Google Play's Contacts Permissions policy requires the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) unless broad access is core to your app. Mandatory for apps targeting Android 17 (API 37+) on October 28, 2026.${enforced}`,
-        suggestion: "Migrate to the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) for user-initiated contact selection, or file a Permissions Declaration Form before October 28, 2026 if the picker cannot serve your core functionality. Remove READ_CONTACTS/WRITE_CONTACTS unless your app is a dialer, messaging, or contacts management app.",
+        message: `Your app declares ${names}. Google Play's Contacts Permissions policy requires the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) unless broad access is core to your app and you submit a Play Console declaration. Mandatory for apps targeting Android 17 (API 37+) on January 27, 2027.${enforced}`,
+        suggestion: "Migrate to the Android Contact Picker (Intent.ACTION_PICK_CONTACTS) for user-initiated contact selection, or submit the contacts declaration in Play Console before January 27, 2027 if the picker cannot serve your core functionality. Remove READ_CONTACTS/WRITE_CONTACTS unless your app is a dialer, messaging, or contacts management app.",
         policyUrl: "https://support.google.com/googleplay/android-developer/answer/16935362"
       });
     }
@@ -7060,8 +7093,8 @@ var permissionsScanner = {
         ruleId: "location-minimal-scope",
         severity: targetsApi37 ? "warning" : "info",
         title: "Precise location \u2014 consider the location button (minimum scope)",
-        message: `Your app declares ACCESS_FINE_LOCATION. Google Play's Location Permissions policy makes the Android location button the recommended minimum scope for transactional (one-time) precise location. Mandatory for apps targeting Android 17 (API 37+) on October 28, 2026.${targetsApi37 ? ` Your app targets API ${manifest.targetSdk}.` : ""}`,
-        suggestion: 'For one-time/transactional precise location, use the system location button instead of requesting ACCESS_FINE_LOCATION up front. Only keep continuous fine location if navigation, fitness, or a similar feature is core functionality. Suppress via .preflightrc.json "disabledRules": ["location-minimal-scope"] if fine location is essential.',
+        message: `Your app declares ACCESS_FINE_LOCATION. Google Play's Location Permissions policy requires the Android location button for one-time or infrequent precise location, and a Play Console declaration explaining why coarse location or the location button is not enough. Mandatory for apps targeting Android 17 (API 37+) on January 27, 2027.${targetsApi37 ? ` Your app targets API ${manifest.targetSdk}.` : ""}`,
+        suggestion: 'For one-time/transactional precise location, use the system location button instead of requesting ACCESS_FINE_LOCATION up front. Only keep continuous fine location if navigation, fitness, or a similar feature is core functionality, and complete the precise location declaration in Play Console. Suppress via .preflightrc.json "disabledRules": ["location-minimal-scope"] if fine location is essential.',
         policyUrl: "https://support.google.com/googleplay/android-developer/answer/17033915"
       });
     }
@@ -7814,6 +7847,129 @@ var privacyScanner = {
   }
 };
 
+// src/preflight/billing-library.ts
+var BILLING_LIBRARY_DEADLINES = {
+  5: { updateDeadline: "2024-08-31", extensionDeadline: "2024-11-01" },
+  6: { updateDeadline: "2025-08-31", extensionDeadline: "2025-11-01" },
+  7: { updateDeadline: "2026-08-31", extensionDeadline: "2026-11-01" },
+  8: { updateDeadline: "2027-08-31", extensionDeadline: "2027-11-01" },
+  9: { updateDeadline: "2028-08-31", extensionDeadline: "2028-11-01" }
+};
+var BILLING_PERMISSION = "com.android.vending.BILLING";
+var VERSION_META_DATA = "com.google.android.play.billingclient.version";
+var DEPRECATION_FAQ = "https://developer.android.com/google/play/billing/deprecation-faq";
+var RELEASE_NOTES = "https://developer.android.com/google/play/billing/release-notes";
+var MIGRATION_GUIDES = {
+  8: "https://developer.android.com/google/play/billing/migrate-gpblv8",
+  9: "https://developer.android.com/google/play/billing/migrate-gpblv9"
+};
+var KNOWN_MAJORS = Object.keys(BILLING_LIBRARY_DEADLINES).map(Number).sort((a, b) => a - b);
+var OLDEST_KNOWN = KNOWN_MAJORS[0] ?? 0;
+var NEWEST_KNOWN = KNOWN_MAJORS[KNOWN_MAJORS.length - 1] ?? 0;
+var ISO_DAY_RE = /^(\d{4})-(\d{2})-(\d{2})$/;
+function utcDayStart(isoDay, { years = 0, days = 0 } = {}) {
+  const match = ISO_DAY_RE.exec(isoDay);
+  if (!match) throw new Error(`Invalid Billing Library deadline "${isoDay}" (expected YYYY-MM-DD)`);
+  return Date.UTC(Number(match[1]) + years, Number(match[2]) - 1, Number(match[3]) + days);
+}
+var BOUNDARIES = new Map(
+  Object.entries(BILLING_LIBRARY_DEADLINES).map(([key, { updateDeadline, extensionDeadline }]) => {
+    const major = Number(key);
+    return [
+      major,
+      {
+        infoFrom: utcDayStart(updateDeadline, { years: -1 }),
+        updatePastFrom: utcDayStart(updateDeadline, { days: 1 }),
+        extensionPastFrom: utcDayStart(extensionDeadline, { days: 1 })
+      }
+    ];
+  })
+);
+var STATUS_SEVERITY = {
+  "older-than-table": "error",
+  "past-extension-deadline": "error",
+  "past-update-deadline": "warning",
+  "update-deadline-within-a-year": "info"
+};
+function billingLibraryStatus(major, now) {
+  if (major < OLDEST_KNOWN) return "older-than-table";
+  const bounds = BOUNDARIES.get(major);
+  if (!bounds) return void 0;
+  const t = now.getTime();
+  if (t >= bounds.extensionPastFrom) return "past-extension-deadline";
+  if (t >= bounds.updatePastFrom) return "past-update-deadline";
+  if (t >= bounds.infoFrom) return "update-deadline-within-a-year";
+  return void 0;
+}
+function targetMajor(major, now) {
+  const next = KNOWN_MAJORS.find((m) => {
+    const bounds = BOUNDARIES.get(m);
+    return m > major && bounds !== void 0 && now.getTime() < bounds.updatePastFrom;
+  });
+  return next ?? NEWEST_KNOWN + 1;
+}
+function migrationAdvice(target) {
+  const guide = MIGRATION_GUIDES[target];
+  return guide ? `Move to Billing Library ${target} or later. Migration guide: ${guide}` : `Move to Billing Library ${target} or later. Release notes: ${RELEASE_NOTES}`;
+}
+function billingLibraryFindings(manifest, now) {
+  if (!manifest.permissions.includes(BILLING_PERMISSION)) return [];
+  const version = manifest.metaData[VERSION_META_DATA];
+  const majorMatch = version?.trim().match(/^\d+/);
+  if (!version || !majorMatch) {
+    const found = version ? `has an unreadable value ("${version}")` : "is missing";
+    return [
+      {
+        scanner: "policy",
+        ruleId: "billing-library-version-unknown",
+        severity: "info",
+        title: "Google Play Billing Library version could not be determined",
+        message: `This bundle requests ${BILLING_PERMISSION}, but the ${VERSION_META_DATA} manifest entry ${found}. Manifest merging can remove it (for example a tools:node="remove" override), so preflight cannot compare the Billing Library version with Google Play's deadlines.`,
+        suggestion: `Check the Billing Library version in your Gradle dependencies against Google's support timeline: ${DEPRECATION_FAQ}`,
+        policyUrl: DEPRECATION_FAQ
+      }
+    ];
+  }
+  const major = Number(majorMatch[0]);
+  const status = billingLibraryStatus(major, now);
+  if (!status) return [];
+  const shipsVersion = `This bundle ships Google Play Billing Library ${version}.`;
+  const advice = migrationAdvice(targetMajor(major, now));
+  let title;
+  let message;
+  let suggestion = advice;
+  if (status === "older-than-table") {
+    const oldest = BILLING_LIBRARY_DEADLINES[OLDEST_KNOWN];
+    title = `Google Play Billing Library ${major} is no longer supported`;
+    message = `${shipsVersion} It is older than Billing Library ${OLDEST_KNOWN}, whose extension deadline passed on ${oldest?.extensionDeadline ?? "an earlier date"}. Google Play no longer accepts new apps or app updates built on it.`;
+  } else {
+    const deadlines = BILLING_LIBRARY_DEADLINES[major];
+    if (!deadlines) return [];
+    if (status === "past-extension-deadline") {
+      title = `Google Play Billing Library ${major} is no longer supported`;
+      message = `${shipsVersion} Its extension deadline passed on ${deadlines.extensionDeadline}, so Google Play no longer accepts new apps or app updates built on Billing Library ${major}.`;
+    } else if (status === "past-update-deadline") {
+      title = `Google Play Billing Library ${major} is past its update deadline`;
+      message = `${shipsVersion} Its update deadline passed on ${deadlines.updateDeadline}. Until ${deadlines.extensionDeadline}, Google Play accepts new apps and app updates on Billing Library ${major} only if the app was granted an extension. After that date it accepts none.`;
+      suggestion = `To keep shipping while you migrate, request an extension from the warning on Play Console's Policy status page. ${advice}`;
+    } else {
+      title = `Google Play Billing Library ${major} update deadline is ${deadlines.updateDeadline}`;
+      message = `${shipsVersion} After ${deadlines.updateDeadline}, Google Play accepts new apps and app updates on Billing Library ${major} only with an extension, and after ${deadlines.extensionDeadline} not at all.`;
+    }
+  }
+  return [
+    {
+      scanner: "policy",
+      ruleId: "billing-library-deprecated",
+      severity: STATUS_SEVERITY[status],
+      title,
+      message,
+      suggestion,
+      policyUrl: DEPRECATION_FAQ
+    }
+  ];
+}
+
 // src/preflight/scanners/policy-scanner.ts
 var policyScanner = {
   name: "policy",
@@ -7912,6 +8068,18 @@ var policyScanner = {
         policyUrl: "https://support.google.com/googleplay/android-developer/answer/13392821"
       });
     }
+    if (perms.has("android.permission.ACCESS_LOCAL_NETWORK") && manifest.targetSdk >= 37) {
+      findings.push({
+        scanner: "policy",
+        ruleId: "policy-local-network-declaration",
+        severity: "info",
+        title: "ACCESS_LOCAL_NETWORK requires a Play Console declaration",
+        message: `This app targets API ${manifest.targetSdk} and requests ACCESS_LOCAL_NETWORK. From August 25, 2027, Google Play requires apps targeting Android 17 (API 37) or higher to submit a Play Console declaration to use this permission, and allows it only for core functionality that device pickers cannot provide. The declaration is stored in Play Console, so it cannot be verified from the AAB.`,
+        suggestion: "If a device picker (for example NsdManager discovery through the system picker) covers your use case, use it and drop ACCESS_LOCAL_NETWORK. Otherwise submit the local network declaration in Play Console, explaining why device pickers are not sufficient.",
+        policyUrl: "https://support.google.com/googleplay/android-developer/answer/16935362#local_network_permission"
+      });
+    }
+    findings.push(...billingLibraryFindings(manifest, /* @__PURE__ */ new Date()));
     if (perms.has("android.permission.SYSTEM_ALERT_WINDOW")) {
       findings.push({
         scanner: "policy",
@@ -10529,6 +10697,7 @@ export {
   analyzeReviews2 as analyzeReviews,
   annotateListResult,
   applyReleaseNotes,
+  applyVitalThresholds,
   assertRateThreshold,
   assignRelease,
   batchGetOrders,