@gpc-cli/core 0.9.43 → 0.9.44

package/dist/index.js

@@ -363,10 +363,7 @@ function formatJunit(data, commandName = "command") {
 }
 
 // src/plugins.ts
-var FIRST_PARTY_PLUGINS = /* @__PURE__ */ new Set([
-  "@gpc-cli/plugin-ci",
-  "@gpc-cli/plugin-sdk"
-]);
+var FIRST_PARTY_PLUGINS = /* @__PURE__ */ new Set(["@gpc-cli/plugin-ci", "@gpc-cli/plugin-sdk"]);
 var PluginManager = class {
   plugins = [];
   beforeHandlers = [];
@@ -755,7 +752,13 @@ ${validation.errors.join("\n")}`,
         if (options.onUploadProgress) options.onUploadProgress(event);
       }
     };
-    const bundle = isApk ? await client.apks.upload(packageName, edit.id, filePath, uploadOpts) : await client.bundles.upload(packageName, edit.id, filePath, uploadOpts, options.deviceTierConfigId);
+    const bundle = isApk ? await client.apks.upload(packageName, edit.id, filePath, uploadOpts) : await client.bundles.upload(
+      packageName,
+      edit.id,
+      filePath,
+      uploadOpts,
+      options.deviceTierConfigId
+    );
     if (options.mappingFile) {
       await client.deobfuscation.upload(
         packageName,
@@ -2452,16 +2455,20 @@ function analyzeReviews(reviews) {
 async function listReviews(client, packageName, options) {
   let reviews;
   if (options?.all) {
-    const { items } = await paginateAll(async (pageToken) => {
-      const apiOptions = { token: pageToken };
-      if (options?.translationLanguage) apiOptions.translationLanguage = options.translationLanguage;
-      if (options?.maxResults) apiOptions.maxResults = options.maxResults;
-      const response = await client.reviews.list(packageName, apiOptions);
-      return {
-        items: response.reviews || [],
-        nextPageToken: response.tokenPagination?.nextPageToken
-      };
-    }, { limit: options?.limit });
+    const { items } = await paginateAll(
+      async (pageToken) => {
+        const apiOptions = { token: pageToken };
+        if (options?.translationLanguage)
+          apiOptions.translationLanguage = options.translationLanguage;
+        if (options?.maxResults) apiOptions.maxResults = options.maxResults;
+        const response = await client.reviews.list(packageName, apiOptions);
+        return {
+          items: response.reviews || [],
+          nextPageToken: response.tokenPagination?.nextPageToken
+        };
+      },
+      { limit: options?.limit }
+    );
     reviews = items;
   } else {
     const apiOptions = {};
@@ -3336,10 +3343,6 @@ async function revokeSubscriptionPurchase(client, packageName, token) {
   validatePackageName(packageName);
   return client.purchases.revokeSubscriptionV2(packageName, token);
 }
-async function refundSubscriptionV2(client, packageName, token) {
-  validatePackageName(packageName);
-  return client.purchases.refundSubscriptionV2(packageName, token);
-}
 async function listVoidedPurchases(client, packageName, options) {
   validatePackageName(packageName);
   if (options?.limit || options?.nextPage) {
@@ -3375,10 +3378,20 @@ async function getOrderDetails(client, packageName, orderId) {
 async function batchGetOrders(client, packageName, orderIds) {
   validatePackageName(packageName);
   if (orderIds.length === 0) {
-    throw new GpcError("No order IDs provided", "ORDERS_BATCH_EMPTY", 2, "Pass at least one order ID with --ids");
+    throw new GpcError(
+      "No order IDs provided",
+      "ORDERS_BATCH_EMPTY",
+      2,
+      "Pass at least one order ID with --ids"
+    );
   }
   if (orderIds.length > 1e3) {
-    throw new GpcError(`Too many order IDs (${orderIds.length}). Maximum is 1000.`, "ORDERS_BATCH_LIMIT", 2, "Split into multiple requests of 1000 or fewer");
+    throw new GpcError(
+      `Too many order IDs (${orderIds.length}). Maximum is 1000.`,
+      "ORDERS_BATCH_LIMIT",
+      2,
+      "Split into multiple requests of 1000 or fewer"
+    );
   }
   return client.orders.batchGet(packageName, orderIds);
 }
@@ -3504,8 +3517,22 @@ async function listUsers(client, developerId, options) {
   const response = await client.list(developerId, options);
   return { users: response.users || [], nextPageToken: response.nextPageToken };
 }
-async function getUser(client, developerId, userId) {
-  return client.get(developerId, userId);
+async function getUser(client, developerId, email) {
+  const lowerEmail = email.toLowerCase();
+  let pageToken;
+  do {
+    const response = await client.list(developerId, pageToken ? { pageToken } : void 0);
+    const users = response.users || [];
+    const match = users.find((u) => u.email?.toLowerCase() === lowerEmail);
+    if (match) return match;
+    pageToken = response.nextPageToken;
+  } while (pageToken);
+  throw new GpcError(
+    `User "${email}" not found in developer account.`,
+    "USER_NOT_FOUND",
+    4,
+    "Check the email address and ensure the user has access to this developer account."
+  );
 }
 async function inviteUser(client, developerId, email, permissions, grants) {
   const user = { email };
@@ -3899,7 +3926,7 @@ var OTP_ID_FIELDS = /* @__PURE__ */ new Set(["productId", "packageName"]);
 function deriveOtpUpdateMask(data) {
   return Object.keys(data).filter((k) => !OTP_ID_FIELDS.has(k)).join(",");
 }
-var OTP_OFFER_ID_FIELDS = /* @__PURE__ */ new Set(["productId", "offerId"]);
+var OTP_OFFER_ID_FIELDS = /* @__PURE__ */ new Set(["packageName", "productId", "purchaseOptionId", "offerId"]);
 function deriveOtpOfferUpdateMask(data) {
   return Object.keys(data).filter((k) => !OTP_OFFER_ID_FIELDS.has(k)).join(",");
 }
@@ -3928,9 +3955,9 @@ async function deleteOneTimeProduct(client, packageName, productId) {
     );
   }
 }
-async function listOneTimeOffers(client, packageName, productId) {
+async function listOneTimeOffers(client, packageName, productId, purchaseOptionId = "-") {
   try {
-    return await client.oneTimeProducts.listOffers(packageName, productId);
+    return await client.oneTimeProducts.listOffers(packageName, productId, purchaseOptionId);
   } catch (error) {
     throw new GpcError(
       `Failed to list offers for product "${productId}": ${error instanceof Error ? error.message : String(error)}`,
@@ -3940,9 +3967,9 @@ async function listOneTimeOffers(client, packageName, productId) {
     );
   }
 }
-async function getOneTimeOffer(client, packageName, productId, offerId) {
+async function getOneTimeOffer(client, packageName, productId, offerId, purchaseOptionId = "-") {
   try {
-    return await client.oneTimeProducts.getOffer(packageName, productId, offerId);
+    return await client.oneTimeProducts.getOffer(packageName, productId, purchaseOptionId, offerId);
   } catch (error) {
     throw new GpcError(
       `Failed to get offer "${offerId}" for product "${productId}": ${error instanceof Error ? error.message : String(error)}`,
@@ -3952,9 +3979,9 @@ async function getOneTimeOffer(client, packageName, productId, offerId) {
     );
   }
 }
-async function createOneTimeOffer(client, packageName, productId, data) {
+async function createOneTimeOffer(client, packageName, productId, data, purchaseOptionId = "-") {
   try {
-    return await client.oneTimeProducts.createOffer(packageName, productId, data);
+    return await client.oneTimeProducts.createOffer(packageName, productId, purchaseOptionId, data);
   } catch (error) {
     throw new GpcError(
       `Failed to create offer for product "${productId}": ${error instanceof Error ? error.message : String(error)}`,
@@ -3964,10 +3991,17 @@ async function createOneTimeOffer(client, packageName, productId, data) {
     );
   }
 }
-async function updateOneTimeOffer(client, packageName, productId, offerId, data, updateMask) {
+async function updateOneTimeOffer(client, packageName, productId, offerId, data, updateMask, purchaseOptionId = "-") {
   try {
     const mask = updateMask || deriveOtpOfferUpdateMask(data);
-    return await client.oneTimeProducts.updateOffer(packageName, productId, offerId, data, mask);
+    return await client.oneTimeProducts.updateOffer(
+      packageName,
+      productId,
+      purchaseOptionId,
+      offerId,
+      data,
+      mask
+    );
   } catch (error) {
     throw new GpcError(
       `Failed to update offer "${offerId}" for product "${productId}": ${error instanceof Error ? error.message : String(error)}`,
@@ -3992,9 +4026,9 @@ async function diffOneTimeProduct(client, packageName, productId, localData) {
   }
   return diffs;
 }
-async function deleteOneTimeOffer(client, packageName, productId, offerId) {
+async function deleteOneTimeOffer(client, packageName, productId, offerId, purchaseOptionId = "-") {
   try {
-    await client.oneTimeProducts.deleteOffer(packageName, productId, offerId);
+    await client.oneTimeProducts.deleteOffer(packageName, productId, purchaseOptionId, offerId);
   } catch (error) {
     throw new GpcError(
       `Failed to delete offer "${offerId}" for product "${productId}": ${error instanceof Error ? error.message : String(error)}`,
@@ -4225,7 +4259,13 @@ async function advanceTrain(apiClient, reportingClient, packageName) {
 }
 async function executeStage(apiClient, packageName, state, stageIndex) {
   const stage = state.stages[stageIndex];
-  if (!stage) throw new GpcError(`Stage ${stageIndex} not found`, "TRAIN_STAGE_NOT_FOUND", 1, "Check your release train configuration.");
+  if (!stage)
+    throw new GpcError(
+      `Stage ${stageIndex} not found`,
+      "TRAIN_STAGE_NOT_FOUND",
+      1,
+      "Check your release train configuration."
+    );
   const rolloutFraction = stage.rollout / 100;
   await updateRollout(apiClient, packageName, stage.track, "increase", rolloutFraction);
   stage.executedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -4678,7 +4718,9 @@ var RESOURCE_IDS = {
   16842754: "icon",
   16842755: "name",
   16842767: "versionCode",
+  16843291: "versionCode",
   16842768: "versionName",
+  16843292: "versionName",
   16843276: "minSdkVersion",
   16843376: "targetSdkVersion",
   16842782: "debuggable",
@@ -4694,27 +4736,39 @@ var RESOURCE_IDS = {
 function buildXmlSchema() {
   const root = new protobuf.Root();
   const ns = root.define("aapt.pb");
-  const Source = new protobuf.Type("Source").add(new protobuf.Field("pathIdx", 1, "uint32")).add(new protobuf.Field("position", 2, "Position"));
-  const Position = new protobuf.Type("Position").add(new protobuf.Field("lineNumber", 1, "uint32")).add(new protobuf.Field("columnNumber", 2, "uint32"));
+  const NullType = new protobuf.Type("NullType");
+  const EmptyType = new protobuf.Type("EmptyType");
   const Primitive = new protobuf.Type("Primitive").add(
-    new protobuf.OneOf("oneofValue").add(new protobuf.Field("intDecimalValue", 6, "int32")).add(new protobuf.Field("intHexadecimalValue", 7, "uint32")).add(new protobuf.Field("booleanValue", 8, "bool")).add(new protobuf.Field("floatValue", 11, "float"))
-  );
-  const Reference = new protobuf.Type("Reference").add(new protobuf.Field("id", 1, "uint32")).add(new protobuf.Field("name", 2, "string"));
-  const Item = new protobuf.Type("Item").add(
-    new protobuf.OneOf("value").add(new protobuf.Field("ref", 1, "Reference")).add(new protobuf.Field("str", 2, "String")).add(new protobuf.Field("prim", 4, "Primitive"))
+    new protobuf.OneOf("oneofValue").add(new protobuf.Field("nullValue", 1, "NullType")).add(new protobuf.Field("emptyValue", 2, "EmptyType")).add(new protobuf.Field("floatValue", 3, "float")).add(new protobuf.Field("intDecimalValue", 6, "int32")).add(new protobuf.Field("intHexadecimalValue", 7, "uint32")).add(new protobuf.Field("booleanValue", 8, "bool")).add(new protobuf.Field("colorArgb8Value", 9, "uint32")).add(new protobuf.Field("colorRgb8Value", 10, "uint32")).add(new protobuf.Field("colorArgb4Value", 11, "uint32")).add(new protobuf.Field("colorRgb4Value", 12, "uint32")).add(new protobuf.Field("dimensionValue", 13, "uint32")).add(new protobuf.Field("fractionValue", 14, "uint32"))
   );
+  const Reference = new protobuf.Type("Reference").add(new protobuf.Field("type", 1, "uint32")).add(new protobuf.Field("id", 2, "uint32")).add(new protobuf.Field("name", 3, "string")).add(new protobuf.Field("isPrivate", 4, "bool")).add(new protobuf.Field("isDynamic", 5, "Boolean")).add(new protobuf.Field("typeFlags", 6, "uint32")).add(new protobuf.Field("allowRaw", 7, "bool"));
   const StringMsg = new protobuf.Type("String").add(new protobuf.Field("value", 1, "string"));
-  const XmlAttribute = new protobuf.Type("XmlAttribute").add(new protobuf.Field("namespaceUri", 1, "string")).add(new protobuf.Field("name", 2, "string")).add(new protobuf.Field("value", 3, "string")).add(new protobuf.Field("source", 4, "Source")).add(new protobuf.Field("resourceId", 5, "uint32")).add(new protobuf.Field("compiledItem", 6, "Item"));
-  const XmlNamespace = new protobuf.Type("XmlNamespace").add(new protobuf.Field("prefix", 1, "string")).add(new protobuf.Field("uri", 2, "string")).add(new protobuf.Field("source", 3, "Source"));
+  const RawString = new protobuf.Type("RawString").add(new protobuf.Field("value", 1, "string"));
+  const StyledString = new protobuf.Type("StyledString").add(new protobuf.Field("value", 1, "string")).add(new protobuf.Field("span", 2, "Span", "repeated"));
+  const Span = new protobuf.Type("Span").add(new protobuf.Field("tag", 1, "string")).add(new protobuf.Field("firstChar", 2, "uint32")).add(new protobuf.Field("lastChar", 3, "uint32"));
+  const FileReference = new protobuf.Type("FileReference").add(new protobuf.Field("path", 1, "string")).add(new protobuf.Field("type", 2, "uint32"));
+  const Id = new protobuf.Type("Id");
+  const BooleanMsg = new protobuf.Type("Boolean").add(new protobuf.Field("value", 1, "bool"));
+  const Item = new protobuf.Type("Item").add(
+    new protobuf.OneOf("value").add(new protobuf.Field("ref", 1, "Reference")).add(new protobuf.Field("str", 2, "String")).add(new protobuf.Field("rawStr", 3, "RawString")).add(new protobuf.Field("styledStr", 4, "StyledString")).add(new protobuf.Field("file", 5, "FileReference")).add(new protobuf.Field("id", 6, "Id")).add(new protobuf.Field("prim", 7, "Primitive"))
+  ).add(new protobuf.Field("flagStatus", 8, "uint32")).add(new protobuf.Field("flagNegated", 9, "bool")).add(new protobuf.Field("flagName", 10, "string"));
+  const XmlAttribute = new protobuf.Type("XmlAttribute").add(new protobuf.Field("namespaceUri", 1, "string")).add(new protobuf.Field("name", 2, "string")).add(new protobuf.Field("value", 3, "string")).add(new protobuf.Field("resourceId", 5, "uint32")).add(new protobuf.Field("compiledItem", 6, "Item"));
+  const XmlNamespace = new protobuf.Type("XmlNamespace").add(new protobuf.Field("prefix", 1, "string")).add(new protobuf.Field("uri", 2, "string"));
   const XmlElement = new protobuf.Type("XmlElement").add(new protobuf.Field("namespaceDeclaration", 1, "XmlNamespace", "repeated")).add(new protobuf.Field("namespaceUri", 2, "string")).add(new protobuf.Field("name", 3, "string")).add(new protobuf.Field("attribute", 4, "XmlAttribute", "repeated")).add(new protobuf.Field("child", 5, "XmlNode", "repeated"));
   const XmlNode = new protobuf.Type("XmlNode").add(
     new protobuf.OneOf("node").add(new protobuf.Field("element", 1, "XmlElement")).add(new protobuf.Field("text", 2, "string"))
-  ).add(new protobuf.Field("source", 3, "Source"));
-  ns.add(Position);
-  ns.add(Source);
+  );
+  ns.add(NullType);
+  ns.add(EmptyType);
   ns.add(Primitive);
+  ns.add(BooleanMsg);
   ns.add(Reference);
   ns.add(StringMsg);
+  ns.add(RawString);
+  ns.add(StyledString);
+  ns.add(Span);
+  ns.add(FileReference);
+  ns.add(Id);
   ns.add(Item);
   ns.add(XmlAttribute);
   ns.add(XmlNamespace);
@@ -4736,29 +4790,26 @@ function decodeManifest(buf) {
   }
   return extractManifestData(decoded.element);
 }
-function getAttrValue(attrs, resId) {
-  const attr = attrs.find((a) => a.resourceId === resId);
-  if (!attr) return void 0;
-  const ci = attr.compiledItem;
-  if (ci?.str?.value !== void 0) return ci.str.value;
-  if (ci?.ref?.name !== void 0) return ci.ref.name;
-  return attr.value || void 0;
-}
 function getAttrByName(attrs, name) {
   const attr = attrs.find((a) => a.name === name || RESOURCE_IDS[a.resourceId] === name);
   if (!attr) return void 0;
   const ci = attr.compiledItem;
   if (ci?.str?.value !== void 0) return ci.str.value;
   if (ci?.ref?.name !== void 0) return ci.ref.name;
-  return attr.value || void 0;
+  const prim = ci?.prim;
+  if (attr.value) return attr.value;
+  if (prim?.booleanValue === true) return "true";
+  if (prim?.intDecimalValue) return String(prim.intDecimalValue);
+  if (prim?.intHexadecimalValue) return String(prim.intHexadecimalValue);
+  return void 0;
 }
-function getBoolAttr(attrs, resId, defaultVal) {
-  const val = getAttrValue(attrs, resId);
+function getBoolByName(attrs, name, defaultVal) {
+  const val = getAttrByName(attrs, name);
   if (val === void 0) return defaultVal;
   return val === "true" || val === "1";
 }
-function getIntAttr(attrs, resId, defaultVal) {
-  const val = getAttrValue(attrs, resId);
+function getIntByName(attrs, name, defaultVal) {
+  const val = getAttrByName(attrs, name);
   if (val === void 0) return defaultVal;
   const n = parseInt(val, 10);
   return isNaN(n) ? defaultVal : n;
@@ -4769,23 +4820,25 @@ function getChildren(elem, tagName) {
 function extractManifestData(manifest) {
   const attrs = manifest.attribute || [];
   const packageName = getAttrByName(attrs, "package") || "";
-  const versionCode = getIntAttr(attrs, 16842767, 0);
-  const versionName = getAttrValue(attrs, 16842768) || "";
+  const versionCodeStr = getAttrByName(attrs, "versionCode");
+  const versionCode = versionCodeStr ? parseInt(versionCodeStr, 10) || 0 : 0;
+  const versionName = getAttrByName(attrs, "versionName") || "";
   const usesSdkElements = getChildren(manifest, "uses-sdk");
   const usesSdk = usesSdkElements[0];
-  const minSdk = usesSdk ? getIntAttr(usesSdk.attribute || [], 16843276, 1) : 1;
-  const targetSdk = usesSdk ? getIntAttr(usesSdk.attribute || [], 16843376, minSdk) : minSdk;
-  const permissions = getChildren(manifest, "uses-permission").map((el) => getAttrValue(el.attribute || [], 16842755)).filter((p) => p !== void 0);
+  const minSdk = usesSdk ? getIntByName(usesSdk.attribute || [], "minSdkVersion", 1) : 1;
+  const targetSdk = usesSdk ? getIntByName(usesSdk.attribute || [], "targetSdkVersion", minSdk) : minSdk;
+  const permissions = getChildren(manifest, "uses-permission").map((el) => getAttrByName(el.attribute || [], "name")).filter((p) => p !== void 0);
   const features = getChildren(manifest, "uses-feature").map((el) => ({
-    name: getAttrValue(el.attribute || [], 16842755) || "",
-    required: getBoolAttr(el.attribute || [], 16843402, true)
+    name: getAttrByName(el.attribute || [], "name") || "",
+    required: getBoolByName(el.attribute || [], "required", true)
   }));
   const appElements = getChildren(manifest, "application");
   const app = appElements[0];
-  const debuggable = app ? getBoolAttr(app.attribute || [], 16842782, false) : false;
-  const testOnly = getBoolAttr(attrs, 16843378, false);
-  const usesCleartextTraffic = app ? getBoolAttr(app.attribute || [], 16843760, true) : true;
-  const extractNativeLibs = app ? getBoolAttr(app.attribute || [], 16844010, true) : true;
+  const debuggable = app ? getBoolByName(app.attribute || [], "debuggable", false) : false;
+  const testOnly = getBoolByName(attrs, "testOnly", false);
+  const usesCleartextTraffic = app ? getBoolByName(app.attribute || [], "usesCleartextTraffic", true) : true;
+  const extractNativeLibs = app ? getBoolByName(app.attribute || [], "extractNativeLibs", true) : true;
+  const pageSizeCompat = app ? getBoolByName(app.attribute || [], "pageSizeCompat", false) : false;
   const activities = app ? extractComponents(app, "activity") : [];
   const services = app ? extractComponents(app, "service") : [];
   const receivers = app ? extractComponents(app, "receiver") : [];
@@ -4800,6 +4853,7 @@ function extractManifestData(manifest) {
     testOnly,
     usesCleartextTraffic,
     extractNativeLibs,
+    pageSizeCompat: pageSizeCompat || void 0,
     permissions,
     features,
     activities,
@@ -4811,13 +4865,29 @@ function extractManifestData(manifest) {
 function extractComponents(appElement, tagName) {
   return getChildren(appElement, tagName).map((el) => {
     const compAttrs = el.attribute || [];
-    const exportedVal = getAttrValue(compAttrs, 16842795);
-    const hasIntentFilter = getChildren(el, "intent-filter").length > 0;
+    const exportedVal = getAttrByName(compAttrs, "exported");
+    const intentFilters = getChildren(el, "intent-filter");
+    const hasIntentFilter = intentFilters.length > 0;
+    const intentActions = [];
+    const intentCategories = [];
+    for (const filter of intentFilters) {
+      for (const action of getChildren(filter, "action")) {
+        const name = getAttrByName(action.attribute || [], "name");
+        if (name) intentActions.push(name);
+      }
+      for (const cat of getChildren(filter, "category")) {
+        const name = getAttrByName(cat.attribute || [], "name");
+        if (name) intentCategories.push(name);
+      }
+    }
     return {
-      name: getAttrValue(compAttrs, 16842755) || "",
+      name: getAttrByName(compAttrs, "name") || "",
       exported: exportedVal === void 0 ? void 0 : exportedVal === "true" || exportedVal === "1",
-      foregroundServiceType: tagName === "service" ? getAttrValue(compAttrs, 16843985) : void 0,
-      hasIntentFilter
+      permission: getAttrByName(compAttrs, "permission") || void 0,
+      foregroundServiceType: tagName === "service" ? getAttrByName(compAttrs, "foregroundServiceType") : void 0,
+      hasIntentFilter,
+      intentActions: intentActions.length > 0 ? intentActions : void 0,
+      intentCategories: intentCategories.length > 0 ? intentCategories : void 0
     };
   });
 }
@@ -4825,12 +4895,14 @@ function extractComponents(appElement, tagName) {
 // src/preflight/aab-reader.ts
 var AAB_MANIFEST_PATH = "base/manifest/AndroidManifest.xml";
 var APK_MANIFEST_PATH = "AndroidManifest.xml";
+var SO_HEADER_BYTES = 256;
+var SO_PATH_RE = /\/lib\/[^/]+\/[^/]+\.so$/;
 function detectManifestPath(filePath) {
   return filePath.toLowerCase().endsWith(".apk") ? APK_MANIFEST_PATH : AAB_MANIFEST_PATH;
 }
 async function readAab(aabPath) {
   const manifestPath = detectManifestPath(aabPath);
-  const { zipfile, entries, manifestBuf } = await openAndScan(aabPath, manifestPath);
+  const { zipfile, entries, manifestBuf, soHeaders } = await openAndScan(aabPath, manifestPath);
   zipfile.close();
   if (!manifestBuf) {
     const fileType = aabPath.toLowerCase().endsWith(".apk") ? "APK" : "AAB";
@@ -4846,7 +4918,7 @@ async function readAab(aabPath) {
     manifest = createFallbackManifest();
     manifest._parseError = `Manifest could not be fully parsed: ${errMsg}. Manifest-dependent checks will be skipped.`;
   }
-  return { manifest, entries };
+  return { manifest, entries, nativeLibHeaders: soHeaders };
 }
 function createFallbackManifest() {
   return {
@@ -4875,8 +4947,11 @@ function openAndScan(aabPath, manifestPath = AAB_MANIFEST_PATH) {
         return;
       }
       const entries = [];
+      const soHeaders = /* @__PURE__ */ new Map();
       let manifestBuf = null;
       let rejected = false;
+      let pendingStreams = 0;
+      let entrysDone = false;
       function fail(error) {
         if (!rejected) {
           rejected = true;
@@ -4884,6 +4959,46 @@ function openAndScan(aabPath, manifestPath = AAB_MANIFEST_PATH) {
           reject(error);
         }
       }
+      function maybeResolve() {
+        if (!rejected && entrysDone && pendingStreams === 0) {
+          resolve2({ zipfile, entries, manifestBuf, soHeaders });
+        }
+      }
+      function readEntryStream(entry, onData, maxBytes) {
+        pendingStreams++;
+        zipfile.openReadStream(entry, (streamErr, stream) => {
+          if (streamErr || !stream) {
+            fail(streamErr ?? new Error(`Failed to read ${entry.fileName}`));
+            return;
+          }
+          const chunks = [];
+          let totalBytes = 0;
+          let done = false;
+          stream.on("data", (chunk) => {
+            chunks.push(chunk);
+            totalBytes += chunk.length;
+            if (maxBytes && totalBytes >= maxBytes) {
+              stream.destroy();
+            }
+          });
+          stream.on("error", (e) => {
+            if (maxBytes && totalBytes >= maxBytes) return;
+            fail(e);
+          });
+          const finish = () => {
+            if (done) return;
+            done = true;
+            const buf = Buffer.concat(chunks);
+            onData(maxBytes ? buf.subarray(0, maxBytes) : buf);
+            pendingStreams--;
+            maybeResolve();
+          };
+          stream.on("end", finish);
+          stream.on("close", () => {
+            if (totalBytes > 0 && maxBytes) finish();
+          });
+        });
+      }
       zipfile.on("error", fail);
       zipfile.on("entry", (entry) => {
         if (rejected) return;
@@ -4896,27 +5011,23 @@ function openAndScan(aabPath, manifestPath = AAB_MANIFEST_PATH) {
           });
         }
         if (path === manifestPath) {
-          zipfile.openReadStream(entry, (streamErr, stream) => {
-            if (streamErr || !stream) {
-              fail(streamErr ?? new Error("Failed to read manifest entry"));
-              return;
-            }
-            const chunks = [];
-            stream.on("data", (chunk) => chunks.push(chunk));
-            stream.on("error", (e) => fail(e));
-            stream.on("end", () => {
-              manifestBuf = Buffer.concat(chunks);
-              zipfile.readEntry();
-            });
+          readEntryStream(entry, (buf) => {
+            manifestBuf = buf;
           });
-        } else {
-          zipfile.readEntry();
+        } else if (SO_PATH_RE.test(path)) {
+          readEntryStream(
+            entry,
+            (buf) => {
+              soHeaders.set(path, buf);
+            },
+            SO_HEADER_BYTES
+          );
         }
+        zipfile.readEntry();
       });
       zipfile.on("end", () => {
-        if (!rejected) {
-          resolve2({ zipfile, entries, manifestBuf });
-        }
+        entrysDone = true;
+        maybeResolve();
       });
       zipfile.readEntry();
     });
@@ -4985,13 +5096,13 @@ var manifestScanner = {
       });
     }
     if (manifest.targetSdk >= 31) {
-      const allComponents = [
+      const allComponents2 = [
         ...manifest.activities,
         ...manifest.services,
         ...manifest.receivers,
         ...manifest.providers
       ];
-      for (const comp of allComponents) {
+      for (const comp of allComponents2) {
         if (comp.hasIntentFilter && comp.exported === void 0) {
           findings.push({
             scanner: "manifest",
@@ -5023,6 +5134,27 @@ var manifestScanner = {
         }
       }
     }
+    const allComponents = [
+      ...manifest.activities,
+      ...manifest.services,
+      ...manifest.receivers,
+      ...manifest.providers
+    ];
+    for (const comp of allComponents) {
+      if (comp.exported !== true) continue;
+      if (comp.permission) continue;
+      const isLauncher = comp.intentActions?.includes("android.intent.action.MAIN") && comp.intentCategories?.includes("android.intent.category.LAUNCHER");
+      if (isLauncher) continue;
+      findings.push({
+        scanner: "manifest",
+        ruleId: "exported-no-permission",
+        severity: "warning",
+        title: `Exported component "${comp.name}" has no permission`,
+        message: `"${comp.name}" is exported without an android:permission attribute. Any app on the device can access this component.`,
+        suggestion: `Add android:permission to restrict access, or set android:exported="false" if external access is not needed.`,
+        policyUrl: "https://developer.android.com/privacy-and-security/security-tips#components"
+      });
+    }
     if (manifest.minSdk < 21) {
       findings.push({
         scanner: "manifest",
@@ -5253,9 +5385,53 @@ var permissionsScanner = {
 // src/preflight/scanners/native-libs-scanner.ts
 var KNOWN_ABIS = ["arm64-v8a", "armeabi-v7a", "x86", "x86_64"];
 var LIB_PATH_RE = /^(?:[^/]+\/)?lib\/([^/]+)\/[^/]+\.so$/;
+var ELF_MAGIC = 2135247942;
+var PT_LOAD = 1;
+var PAGE_16KB = 16384;
+function checkElfAlignment(buf) {
+  if (buf.length < 52) return null;
+  if (buf.readUInt32BE(0) !== ELF_MAGIC) return null;
+  const is64 = buf[4] === 2;
+  const isLE = buf[5] === 1;
+  const read16 = isLE ? (o) => buf.readUInt16LE(o) : (o) => buf.readUInt16BE(o);
+  const read32 = isLE ? (o) => buf.readUInt32LE(o) : (o) => buf.readUInt32BE(o);
+  const read64 = isLE ? (o) => Number(buf.readBigUInt64LE(o)) : (o) => Number(buf.readBigUInt64BE(o));
+  let phOff, phSize, phNum;
+  if (is64) {
+    if (buf.length < 64) return null;
+    phOff = read64(32);
+    phSize = read16(54);
+    phNum = read16(56);
+  } else {
+    phOff = read32(28);
+    phSize = read16(42);
+    phNum = read16(44);
+  }
+  if (phNum === 0 || phSize === 0) return null;
+  let minAlign = Infinity;
+  let foundLoad = false;
+  for (let i = 0; i < phNum; i++) {
+    const off = phOff + i * phSize;
+    if (off + phSize > buf.length) break;
+    const pType = read32(off);
+    if (pType !== PT_LOAD) continue;
+    foundLoad = true;
+    const pAlign = is64 ? read64(off + 48) : read32(off + 28);
+    if (pAlign > 0 && pAlign < minAlign) {
+      minAlign = pAlign;
+    }
+  }
+  if (!foundLoad) return null;
+  return { minAlign: minAlign === Infinity ? 0 : minAlign, is64 };
+}
+function alignmentLabel(align) {
+  if (align <= 0) return "unknown";
+  const log2 = Math.log2(align);
+  return Number.isInteger(log2) ? `${align / 1024}KB (2^${log2})` : `${align} bytes`;
+}
 var nativeLibsScanner = {
   name: "native-libs",
-  description: "Checks native library architectures for 64-bit compliance",
+  description: "Checks native library architectures, 64-bit compliance, and 16KB alignment",
   requires: ["zipEntries"],
   async scan(ctx) {
     const entries = ctx.zipEntries;
@@ -5298,6 +5474,7 @@ var nativeLibsScanner = {
         policyUrl: "https://developer.android.com/google/play/requirements/64-bit"
       });
     }
+    check16KBAlignment(ctx.nativeLibHeaders, ctx.manifest, findings);
     const detectedAbis = KNOWN_ABIS.filter((abi) => abisFound.has(abi));
     const unknownAbis = [...abisFound].filter(
       (abi) => !KNOWN_ABIS.includes(abi)
@@ -5324,6 +5501,33 @@ var nativeLibsScanner = {
     return findings;
   }
 };
+function check16KBAlignment(headers, manifest, findings) {
+  if (!headers || headers.size === 0) return;
+  const nonCompliant = [];
+  for (const [path, buf] of headers) {
+    const result = checkElfAlignment(buf);
+    if (!result) continue;
+    if (result.minAlign < PAGE_16KB) {
+      nonCompliant.push({ path, align: result.minAlign });
+    }
+  }
+  if (nonCompliant.length === 0) return;
+  const hasPageSizeCompat = manifest?.pageSizeCompat === true;
+  const fileList = nonCompliant.map((f) => {
+    const name = f.path.split("/").pop() ?? f.path;
+    return `  ${name}: aligned to ${alignmentLabel(f.align)}, requires 16KB (2^14)`;
+  }).join("\n");
+  findings.push({
+    scanner: "native-libs",
+    ruleId: "native-libs-16kb-alignment",
+    severity: hasPageSizeCompat ? "warning" : "critical",
+    title: `${nonCompliant.length} native ${nonCompliant.length === 1 ? "library" : "libraries"} not 16KB aligned`,
+    message: `Google Play requires 16KB page size alignment for all native libraries (enforced since Nov 2025).
+${fileList}` + (hasPageSizeCompat ? "\nandroid:pageSizeCompat is set, so the app will work via compatibility mode, but users on 16KB devices will see a compatibility dialog." : ""),
+    suggestion: "Recompile with: -Wl,-z,max-page-size=16384\nOr upgrade to NDK r28+ (16KB aligned by default).\nOr set cmake flag: -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON (NDK r27).",
+    policyUrl: "https://developer.android.com/guide/practices/page-sizes"
+  });
+}
 
 // src/preflight/scanners/metadata-scanner.ts
 import { readdir as readdir5, stat as stat8, readFile as readFile10 } from "fs/promises";
@@ -6021,6 +6225,7 @@ async function runPreflight(options) {
     const aab = await readAab(options.aabPath);
     ctx.manifest = aab.manifest;
     ctx.zipEntries = aab.entries;
+    ctx.nativeLibHeaders = aab.nativeLibHeaders;
     if (aab.manifest._parseError) {
       earlyFindings.push({
         scanner: "manifest-parser",
@@ -6431,68 +6636,6 @@ async function downloadGeneratedApk(client, packageName, versionCode, apkId, out
   return { path: outputPath, sizeBytes: bytes.byteLength };
 }
 
-// src/commands/purchase-options.ts
-async function listPurchaseOptions(client, packageName) {
-  try {
-    return await client.purchaseOptions.list(packageName);
-  } catch (error) {
-    throw new GpcError(
-      `Failed to list purchase options: ${error instanceof Error ? error.message : String(error)}`,
-      "PURCHASE_OPTIONS_LIST_FAILED",
-      4,
-      "Check your package name and API permissions."
-    );
-  }
-}
-async function getPurchaseOption(client, packageName, purchaseOptionId) {
-  try {
-    return await client.purchaseOptions.get(packageName, purchaseOptionId);
-  } catch (error) {
-    throw new GpcError(
-      `Failed to get purchase option "${purchaseOptionId}": ${error instanceof Error ? error.message : String(error)}`,
-      "PURCHASE_OPTION_GET_FAILED",
-      4,
-      "Check that the purchase option ID exists."
-    );
-  }
-}
-async function createPurchaseOption(client, packageName, data) {
-  try {
-    return await client.purchaseOptions.create(packageName, data);
-  } catch (error) {
-    throw new GpcError(
-      `Failed to create purchase option: ${error instanceof Error ? error.message : String(error)}`,
-      "PURCHASE_OPTION_CREATE_FAILED",
-      4,
-      "Check your purchase option data and API permissions."
-    );
-  }
-}
-async function activatePurchaseOption(client, packageName, purchaseOptionId) {
-  try {
-    return await client.purchaseOptions.activate(packageName, purchaseOptionId);
-  } catch (error) {
-    throw new GpcError(
-      `Failed to activate purchase option "${purchaseOptionId}": ${error instanceof Error ? error.message : String(error)}`,
-      "PURCHASE_OPTION_ACTIVATE_FAILED",
-      4,
-      "Check that the purchase option exists and is in a valid state for activation."
-    );
-  }
-}
-async function deactivatePurchaseOption(client, packageName, purchaseOptionId) {
-  try {
-    return await client.purchaseOptions.deactivate(packageName, purchaseOptionId);
-  } catch (error) {
-    throw new GpcError(
-      `Failed to deactivate purchase option "${purchaseOptionId}": ${error instanceof Error ? error.message : String(error)}`,
-      "PURCHASE_OPTION_DEACTIVATE_FAILED",
-      4,
-      "Check that the purchase option exists and is in a valid state for deactivation."
-    );
-  }
-}
-
 // src/commands/bundle-analysis.ts
 import { readFile as readFile14, stat as stat10 } from "fs/promises";
 var EOCD_SIGNATURE = 101010256;
@@ -7177,21 +7320,15 @@ async function fetchChangelog(options) {
       signal: controller.signal
     });
   } catch {
-    throw new Error(
-      `Could not fetch changelog. View online: ${DOCS_CHANGELOG_URL}`
-    );
+    throw new Error(`Could not fetch changelog. View online: ${DOCS_CHANGELOG_URL}`);
   } finally {
     clearTimeout(timer);
   }
   if (!response.ok) {
     if (response.status === 404 && options?.version) {
-      throw new Error(
-        `Version ${options.version} not found. Run: gpc changelog --limit 10`
-      );
+      throw new Error(`Version ${options.version} not found. Run: gpc changelog --limit 10`);
     }
-    throw new Error(
-      `GitHub API returned ${response.status}. View online: ${DOCS_CHANGELOG_URL}`
-    );
+    throw new Error(`GitHub API returned ${response.status}. View online: ${DOCS_CHANGELOG_URL}`);
   }
   const data = await response.json();
   const releases = Array.isArray(data) ? data : [data];
@@ -7240,7 +7377,7 @@ async function getRtdnStatus(client, packageName) {
   try {
     const edit = await client.edits.insert(packageName);
     try {
-      const details = await client.details.get(packageName, edit.id);
+      await client.details.get(packageName, edit.id);
       return {
         topicName: null,
         enabled: false
@@ -7324,7 +7461,6 @@ export {
   acknowledgeProductPurchase,
   activateBasePlan,
   activateOffer,
-  activatePurchaseOption,
   addRecoveryTargeting,
   addTesters,
   advanceTrain,
@@ -7354,14 +7490,12 @@ export {
   createOffer,
   createOneTimeOffer,
   createOneTimeProduct,
-  createPurchaseOption,
   createRecoveryAction,
   createSpinner,
   createSubscription,
   createTrack,
   deactivateBasePlan,
   deactivateOffer,
-  deactivatePurchaseOption,
   decodeNotification,
   deferSubscriptionPurchase,
   deferSubscriptionV2,
@@ -7419,7 +7553,6 @@ export {
   getOrderDetails,
   getProductPurchase,
   getProductPurchaseV2,
-  getPurchaseOption,
   getQuotaUsage,
   getReleasesStatus,
   getReview,
@@ -7464,7 +7597,6 @@ export {
   listOffers,
   listOneTimeOffers,
   listOneTimeProducts,
-  listPurchaseOptions,
   listRecoveryActions,
   listReports,
   listReviews,
@@ -7492,7 +7624,6 @@ export {
   redactSensitive,
   refundExternalTransaction,
   refundOrder,
-  refundSubscriptionV2,
   relativeTime,
   removeTesters,
   removeUser,