@gpc-cli/core 0.9.55 → 0.9.56

package/dist/index.d.ts

@@ -1472,4 +1472,60 @@ declare function decodeNotification(base64Payload: string): DecodedNotification;
  */
 declare function formatNotification(notification: DecodedNotification): Record<string, unknown>;
 
-export { ApiError, type AppInfo, type AppStatus, type ApplyReleaseNotesResult, type AuditEntry, type BatchSyncResult, type BundleAnalysis, type BundleComparison, type BundleEntry, type BundleSizeCheckResult, type BundleSizeConfig, type ChangelogEntry, type CommandContext, type CommitCluster, ConfigError, type CreateEnterpriseAppParams, DEFAULT_LIMITS, DEFAULT_MODELS, DEFAULT_PREFLIGHT_CONFIG, type DecodedNotification, type DiffToken, type DiscoverPluginsOptions, type DryRunPublishResult, type DryRunResult, type DryRunUploadResult, type ErrorReason, type ExportImagesOptions, type ExportImagesSummary, type FastlaneDetection, type FastlaneLane, type FetchChangelogOptions, type FieldLintResult, type FileValidationResult, type FindingSeverity, GOOGLE_PLAY_LANGUAGES, type GenerateOptions, type GeneratedChangelog, type GetAppStatusOptions, type GitNotesOptions, type GitReleaseNotes, type GitRunner, GpcError, type ImageValidationResult, type InitOptions, type InitResult, type InternalSharingUploadResult, type ListIapOptions, type ListSubscriptionsOptions, type ListUsersOptions, type ListVoidedOptions, type ListingDiff, type ListingFieldLimits, type ListingLintResult, type ListingsResult, type LoadedPlugin, type LocaleBundle, type LocaleEntry, type MigrationResult, NetworkError, type OneTimeProductDiff, type OutputMode, PERMISSION_PROPAGATION_WARNING, PLACEHOLDER_TEXT, PLAY_STORE_LIMIT, PROVIDER_WHITELIST, type ParsedCommit, type ParsedManifest, type ParsedMonth, type PlayStoreFormat, type PlayStoreRenderOptions, PluginManager, type PreflightConfig, type PreflightFinding, type PreflightOptions, type PreflightResult, type PreflightScanner, type Provider, type PublishOptions, type PublishResult, type PushResult, type QuotaUsage, RENDERERS, type RawCommit, type ReleaseDiff, type ReleaseNotesValidation, type ReleaseStatusResult, type Renderer, type ResolveAiConfigOptions, type ResolveLocalesOptions, type ReviewAnalysis, type ReviewExportOptions, type ReviewsFilterOptions, type RtdnStatus, SECTION_ORDER, SENSITIVE_ARG_KEYS, SENSITIVE_KEYS, SEVERITY_ORDER, type ScaffoldOptions, type ScaffoldResult, type Spinner, type StatusDiff, type StatusRelease, type StatusReviews, type StatusVitalMetric, type SubscriptionAnalytics, type SubscriptionDiff, type SyncResult, type ThresholdResult, type TrainConfig, type TrainState, type TranslateBundleOptions, type TranslatedBundle, type TranslationFailure, type TranslationPath, type TranslationResult, type Translator, type TranslatorConfig, type UploadResult, type ValidateCheck, type ValidateOptions, type ValidateResult, type VersionVitalsComparison, type VersionVitalsRow, type VitalsOverview, type VitalsQueryOptions, type VitalsTrendComparison, type WatchOptions, type WatchVitalsOptions, type WebhookPayload, abortTrain, acknowledgeProductPurchase, activateBasePlan, activateOffer, addRecoveryTargeting, addTesters, advanceTrain, analyzeBundle, analyzeRemoteListings, analyzeReviews, applyReleaseNotes, batchGetOrders, batchSyncInAppProducts, buildLocaleBundle, bundleToReleaseNotes, cancelRecoveryAction, cancelSubscriptionPurchase, cancelSubscriptionV2, checkBundleSize, checkThreshold, classifyError, clearAuditLog, compareBundles, compareVersionVitals, compareVitalsTrend, computeStatusDiff, consumeProductPurchase, convertRegionPrices, createAuditEntry, createDeviceTier, createEnterpriseApp, createExternalTransaction, createGrant, createInAppProduct, createOffer, createOneTimeOffer, createOneTimeProduct, createRecoveryAction, createSpinner, createSubscription, createTrack, createTranslator, deactivateBasePlan, deactivateOffer, decodeNotification, defaultGitRunner, deferSubscriptionPurchase, deferSubscriptionV2, deleteBasePlan, deleteGrant, deleteImage, deleteInAppProduct, deleteListing, deleteOffer, deleteOneTimeOffer, deleteOneTimeProduct, deleteSubscription, deployRecoveryAction, detectFastlane, detectOutputFormat, diffListings, diffListingsCommand, diffListingsEnhanced, diffOneTimeProduct, diffReleases, diffSubscription, discoverPlugins, downloadGeneratedApk, downloadReport, exportImages, exportReviews, fetchAggregateCost, fetchChangelog, fetchReleaseNotes, formatChangelogEntry, formatCustomPayload, formatDiscordPayload, formatJunit, formatNotification, formatOutput, formatPathLabel, formatSlackPayload, formatStatusDiff, formatStatusSummary, formatStatusTable, formatWordDiff, generateChangelog, generateMigrationPlan, generateNotesFromGit, getAllScannerNames, getAppInfo, getAppStatus, getCountryAvailability, getDeviceTier, getExternalTransaction, getInAppProduct, getListings, getOffer, getOneTimeOffer, getOneTimeProduct, getOrderDetails, getProductPurchase, getProductPurchaseV2, getQuotaUsage, getReleasesStatus, getReview, getRtdnStatus, getSubscription, getSubscriptionAnalytics, getSubscriptionPurchase, getTrainStatus, getUser, getVitalsAnomalies, getVitalsAnr, getVitalsBattery, getVitalsCrashes, getVitalsErrorCount, getVitalsLmk, getVitalsMemory, getVitalsOverview, getVitalsRendering, getVitalsStartup, importDataSafety, importTestersFromCsv, initAudit, initProject, inviteUser, isFinancialReportType, isStatsReportType, isValidBcp47, isValidReportType, isValidStatsDimension, lintListing, lintListings, lintLocalListings, listAchievements, listAuditEvents, listDeviceTiers, listEvents, listGeneratedApks, listGrants, listImages, listInAppProducts, listLeaderboards, listOffers, listOneTimeOffers, listOneTimeProducts, listRecoveryActions, listReports, listReviews, listSubscriptions, listTesters, listTracks, listUsers, listVoidedPurchases, loadPreflightConfig, loadStatusCache, maybePaginate, migratePrices, parseAppfile, parseCommit, parseFastfile, parseGrantArg, parseMonth, parseRemoteUrl, pauseTrain, promoteRelease, publish, publishEnterpriseApp, pullListings, pushListings, readListingsFromDir, readReleaseNotesFromDir, redactAuditArgs, redactSensitive, refundExternalTransaction, refundOrder, relativeTime, removeTesters, removeUser, renderJson, renderMarkdown, renderPlayStore, renderPlayStoreJson, renderPlayStoreMd, renderPlayStorePrompt, renderPrompt, replyToReview, resolveAiConfig, resolveLocales, revokeSubscriptionPurchase, runPreflight, runWatchLoop, safePath, safePathWithin, saveStatusCache, scaffoldPlugin, searchAuditEvents, searchVitalsErrors, sendNotification, sendWebhook, sortResults, startTrain, statusHasBreach, syncInAppProducts, topFiles, trackBreachState, translateBundle, updateAppDetails, updateDataSafety, updateGrant, updateInAppProduct, updateListing, updateOffer, updateOneTimeOffer, updateOneTimeProduct, updateRollout, updateSubscription, updateTrackConfig, updateUser, uploadExternallyHosted, uploadImage, uploadInternalSharing, uploadRelease, validateBundleForApply, validateImage, validateLanguageCode, validatePackageName, validatePreSubmission, validateReleaseNotes, validateSku, validateTrackName, validateUploadFile, validateVersionCode, waitForBundleProcessing, watchVitalsWithAutoHalt, wordDiff, writeAuditLog, writeListingsToDir, writeMigrationOutput };
+interface KeystoreFingerprint {
+    sha256: string;
+    alias: string;
+    keystorePath: string;
+}
+interface ApiSigningFingerprint {
+    sha256: string;
+    versionCode: number;
+}
+interface SigningKeyComparison {
+    local?: KeystoreFingerprint;
+    api?: ApiSigningFingerprint;
+    match: boolean | null;
+}
+declare function normalizeFingerprint(fp: string): string;
+declare function parseKeytoolOutput(stdout: string): {
+    sha256: string;
+    alias: string;
+};
+declare function getKeystoreFingerprint(keystorePath: string, storePassword: string, keyAlias?: string): Promise<KeystoreFingerprint>;
+declare function getApiSigningFingerprint(accessToken: string, packageName: string, apiHost?: string): Promise<ApiSigningFingerprint | null>;
+declare function compareFingerprints(a: string, b: string): boolean;
+
+interface SigningConsistencyResult {
+    currentVersionCode: number;
+    currentFingerprint: string;
+    previousVersionCode?: number;
+    previousFingerprint?: string;
+    consistent: boolean;
+    firstRelease: boolean;
+}
+declare function checkSigningConsistency(accessToken: string, packageName: string, apiHost?: string): Promise<SigningConsistencyResult>;
+
+interface ChecklistItem {
+    id: string;
+    title: string;
+    status: "done" | "action-needed" | "cannot-detect";
+    detail?: string;
+    actionUrl?: string;
+}
+interface ChecklistResult {
+    items: ChecklistItem[];
+    completed: number;
+    total: number;
+}
+interface ChecklistInput {
+    authenticated: boolean;
+    accountEmail?: string;
+    appAccessible?: boolean;
+    bundleCount?: number;
+    hasGeneratedApks?: boolean;
+    interactiveAnswers?: Record<string, boolean>;
+}
+declare function buildChecklist(input: ChecklistInput): ChecklistResult;
+declare function renderChecklistMarkdown(result: ChecklistResult, accountEmail: string): string;
+
+export { ApiError, type ApiSigningFingerprint, type AppInfo, type AppStatus, type ApplyReleaseNotesResult, type AuditEntry, type BatchSyncResult, type BundleAnalysis, type BundleComparison, type BundleEntry, type BundleSizeCheckResult, type BundleSizeConfig, type ChangelogEntry, type ChecklistInput, type ChecklistItem, type ChecklistResult, type CommandContext, type CommitCluster, ConfigError, type CreateEnterpriseAppParams, DEFAULT_LIMITS, DEFAULT_MODELS, DEFAULT_PREFLIGHT_CONFIG, type DecodedNotification, type DiffToken, type DiscoverPluginsOptions, type DryRunPublishResult, type DryRunResult, type DryRunUploadResult, type ErrorReason, type ExportImagesOptions, type ExportImagesSummary, type FastlaneDetection, type FastlaneLane, type FetchChangelogOptions, type FieldLintResult, type FileValidationResult, type FindingSeverity, GOOGLE_PLAY_LANGUAGES, type GenerateOptions, type GeneratedChangelog, type GetAppStatusOptions, type GitNotesOptions, type GitReleaseNotes, type GitRunner, GpcError, type ImageValidationResult, type InitOptions, type InitResult, type InternalSharingUploadResult, type KeystoreFingerprint, type ListIapOptions, type ListSubscriptionsOptions, type ListUsersOptions, type ListVoidedOptions, type ListingDiff, type ListingFieldLimits, type ListingLintResult, type ListingsResult, type LoadedPlugin, type LocaleBundle, type LocaleEntry, type MigrationResult, NetworkError, type OneTimeProductDiff, type OutputMode, PERMISSION_PROPAGATION_WARNING, PLACEHOLDER_TEXT, PLAY_STORE_LIMIT, PROVIDER_WHITELIST, type ParsedCommit, type ParsedManifest, type ParsedMonth, type PlayStoreFormat, type PlayStoreRenderOptions, PluginManager, type PreflightConfig, type PreflightFinding, type PreflightOptions, type PreflightResult, type PreflightScanner, type Provider, type PublishOptions, type PublishResult, type PushResult, type QuotaUsage, RENDERERS, type RawCommit, type ReleaseDiff, type ReleaseNotesValidation, type ReleaseStatusResult, type Renderer, type ResolveAiConfigOptions, type ResolveLocalesOptions, type ReviewAnalysis, type ReviewExportOptions, type ReviewsFilterOptions, type RtdnStatus, SECTION_ORDER, SENSITIVE_ARG_KEYS, SENSITIVE_KEYS, SEVERITY_ORDER, type ScaffoldOptions, type ScaffoldResult, type SigningConsistencyResult, type SigningKeyComparison, type Spinner, type StatusDiff, type StatusRelease, type StatusReviews, type StatusVitalMetric, type SubscriptionAnalytics, type SubscriptionDiff, type SyncResult, type ThresholdResult, type TrainConfig, type TrainState, type TranslateBundleOptions, type TranslatedBundle, type TranslationFailure, type TranslationPath, type TranslationResult, type Translator, type TranslatorConfig, type UploadResult, type ValidateCheck, type ValidateOptions, type ValidateResult, type VersionVitalsComparison, type VersionVitalsRow, type VitalsOverview, type VitalsQueryOptions, type VitalsTrendComparison, type WatchOptions, type WatchVitalsOptions, type WebhookPayload, abortTrain, acknowledgeProductPurchase, activateBasePlan, activateOffer, addRecoveryTargeting, addTesters, advanceTrain, analyzeBundle, analyzeRemoteListings, analyzeReviews, applyReleaseNotes, batchGetOrders, batchSyncInAppProducts, buildChecklist, buildLocaleBundle, bundleToReleaseNotes, cancelRecoveryAction, cancelSubscriptionPurchase, cancelSubscriptionV2, checkBundleSize, checkSigningConsistency, checkThreshold, classifyError, clearAuditLog, compareBundles, compareFingerprints, compareVersionVitals, compareVitalsTrend, computeStatusDiff, consumeProductPurchase, convertRegionPrices, createAuditEntry, createDeviceTier, createEnterpriseApp, createExternalTransaction, createGrant, createInAppProduct, createOffer, createOneTimeOffer, createOneTimeProduct, createRecoveryAction, createSpinner, createSubscription, createTrack, createTranslator, deactivateBasePlan, deactivateOffer, decodeNotification, defaultGitRunner, deferSubscriptionPurchase, deferSubscriptionV2, deleteBasePlan, deleteGrant, deleteImage, deleteInAppProduct, deleteListing, deleteOffer, deleteOneTimeOffer, deleteOneTimeProduct, deleteSubscription, deployRecoveryAction, detectFastlane, detectOutputFormat, diffListings, diffListingsCommand, diffListingsEnhanced, diffOneTimeProduct, diffReleases, diffSubscription, discoverPlugins, downloadGeneratedApk, downloadReport, exportImages, exportReviews, fetchAggregateCost, fetchChangelog, fetchReleaseNotes, formatChangelogEntry, formatCustomPayload, formatDiscordPayload, formatJunit, formatNotification, formatOutput, formatPathLabel, formatSlackPayload, formatStatusDiff, formatStatusSummary, formatStatusTable, formatWordDiff, generateChangelog, generateMigrationPlan, generateNotesFromGit, getAllScannerNames, getApiSigningFingerprint, getAppInfo, getAppStatus, getCountryAvailability, getDeviceTier, getExternalTransaction, getInAppProduct, getKeystoreFingerprint, getListings, getOffer, getOneTimeOffer, getOneTimeProduct, getOrderDetails, getProductPurchase, getProductPurchaseV2, getQuotaUsage, getReleasesStatus, getReview, getRtdnStatus, getSubscription, getSubscriptionAnalytics, getSubscriptionPurchase, getTrainStatus, getUser, getVitalsAnomalies, getVitalsAnr, getVitalsBattery, getVitalsCrashes, getVitalsErrorCount, getVitalsLmk, getVitalsMemory, getVitalsOverview, getVitalsRendering, getVitalsStartup, importDataSafety, importTestersFromCsv, initAudit, initProject, inviteUser, isFinancialReportType, isStatsReportType, isValidBcp47, isValidReportType, isValidStatsDimension, lintListing, lintListings, lintLocalListings, listAchievements, listAuditEvents, listDeviceTiers, listEvents, listGeneratedApks, listGrants, listImages, listInAppProducts, listLeaderboards, listOffers, listOneTimeOffers, listOneTimeProducts, listRecoveryActions, listReports, listReviews, listSubscriptions, listTesters, listTracks, listUsers, listVoidedPurchases, loadPreflightConfig, loadStatusCache, maybePaginate, migratePrices, normalizeFingerprint, parseAppfile, parseCommit, parseFastfile, parseGrantArg, parseKeytoolOutput, parseMonth, parseRemoteUrl, pauseTrain, promoteRelease, publish, publishEnterpriseApp, pullListings, pushListings, readListingsFromDir, readReleaseNotesFromDir, redactAuditArgs, redactSensitive, refundExternalTransaction, refundOrder, relativeTime, removeTesters, removeUser, renderChecklistMarkdown, renderJson, renderMarkdown, renderPlayStore, renderPlayStoreJson, renderPlayStoreMd, renderPlayStorePrompt, renderPrompt, replyToReview, resolveAiConfig, resolveLocales, revokeSubscriptionPurchase, runPreflight, runWatchLoop, safePath, safePathWithin, saveStatusCache, scaffoldPlugin, searchAuditEvents, searchVitalsErrors, sendNotification, sendWebhook, sortResults, startTrain, statusHasBreach, syncInAppProducts, topFiles, trackBreachState, translateBundle, updateAppDetails, updateDataSafety, updateGrant, updateInAppProduct, updateListing, updateOffer, updateOneTimeOffer, updateOneTimeProduct, updateRollout, updateSubscription, updateTrackConfig, updateUser, uploadExternallyHosted, uploadImage, uploadInternalSharing, uploadRelease, validateBundleForApply, validateImage, validateLanguageCode, validatePackageName, validatePreSubmission, validateReleaseNotes, validateSku, validateTrackName, validateUploadFile, validateVersionCode, waitForBundleProcessing, watchVitalsWithAutoHalt, wordDiff, writeAuditLog, writeListingsToDir, writeMigrationOutput };

package/dist/index.js

@@ -8580,6 +8580,323 @@ function formatNotification(notification) {
   }
   return { ...base, type: "unknown" };
 }
+
+// src/signing.ts
+import { execFile as execFile3 } from "child_process";
+import { access as access2, constants } from "fs/promises";
+var SHA256_RE = /SHA-?256\s*:\s*([A-Fa-f0-9]{2}(?::[A-Fa-f0-9]{2}){31})/;
+var ALIAS_RE = /Alias name:\s*(.+)/i;
+function normalizeFingerprint(fp) {
+  return fp.replace(/[:\s]/g, "").toLowerCase();
+}
+function parseKeytoolOutput(stdout) {
+  const sha256Match = SHA256_RE.exec(stdout);
+  if (!sha256Match?.[1]) {
+    throw new GpcError(
+      "Could not find SHA-256 fingerprint in keytool output",
+      "KEYTOOL_PARSE_ERROR",
+      1,
+      "Ensure the keystore contains a valid certificate entry"
+    );
+  }
+  const aliasMatch = ALIAS_RE.exec(stdout);
+  return {
+    sha256: sha256Match[1].toUpperCase(),
+    alias: aliasMatch?.[1]?.trim() ?? "unknown"
+  };
+}
+async function getKeystoreFingerprint(keystorePath, storePassword, keyAlias) {
+  await access2(keystorePath, constants.R_OK).catch(() => {
+    throw new GpcError(
+      `Keystore not found or not readable: ${keystorePath}`,
+      "KEYSTORE_READ_ERROR",
+      1,
+      "Check the path and file permissions"
+    );
+  });
+  const args = ["-list", "-v", "-keystore", keystorePath, "-storepass", storePassword];
+  if (keyAlias) args.push("-alias", keyAlias);
+  const stdout = await new Promise((resolve2, reject) => {
+    execFile3("keytool", args, { timeout: 1e4 }, (err, stdout2, stderr) => {
+      if (err) {
+        const msg = stderr || err.message;
+        if (msg.includes("not found") || err.code === "ENOENT") {
+          reject(
+            new GpcError(
+              "keytool not found",
+              "KEYTOOL_NOT_FOUND",
+              1,
+              "Install a JDK (keytool ships with it) or add it to your PATH"
+            )
+          );
+          return;
+        }
+        if (msg.includes("password was incorrect") || msg.includes("Keystore was tampered")) {
+          reject(
+            new GpcError(
+              "Keystore password is incorrect or the keystore is corrupted",
+              "KEYSTORE_PASSWORD_ERROR",
+              1,
+              "Check --store-pass or GPC_STORE_PASSWORD"
+            )
+          );
+          return;
+        }
+        reject(
+          new GpcError(
+            `keytool failed: ${msg}`,
+            "KEYTOOL_ERROR",
+            1,
+            "Check the keystore path and password"
+          )
+        );
+        return;
+      }
+      resolve2(stdout2);
+    });
+  });
+  const { sha256, alias } = parseKeytoolOutput(stdout);
+  return { sha256, alias, keystorePath };
+}
+async function getApiSigningFingerprint(accessToken, packageName, apiHost = "androidpublisher.googleapis.com") {
+  const baseUrl = `https://${apiHost}/androidpublisher/v3/applications/${encodeURIComponent(packageName)}`;
+  const editResp = await fetch(`${baseUrl}/edits`, {
+    method: "POST",
+    headers: { Authorization: `Bearer ${accessToken}`, "Content-Type": "application/json" },
+    body: JSON.stringify({}),
+    signal: AbortSignal.timeout(1e4)
+  });
+  if (!editResp.ok) return null;
+  const edit = await editResp.json();
+  try {
+    const bundlesResp = await fetch(`${baseUrl}/edits/${edit.id}/bundles`, {
+      headers: { Authorization: `Bearer ${accessToken}` },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!bundlesResp.ok) return null;
+    const bundlesData = await bundlesResp.json();
+    const bundles = bundlesData.bundles ?? [];
+    if (bundles.length === 0) return null;
+    const latest = bundles.reduce((max, b) => b.versionCode > max.versionCode ? b : max);
+    const apksResp = await fetch(`${baseUrl}/generatedApks/${latest.versionCode}`, {
+      headers: { Authorization: `Bearer ${accessToken}` },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!apksResp.ok) return null;
+    const apksData = await apksResp.json();
+    const fp = apksData.generatedApks?.[0]?.certificateSha256Fingerprint;
+    if (!fp) return null;
+    return { sha256: fp.toUpperCase(), versionCode: latest.versionCode };
+  } finally {
+    await fetch(`${baseUrl}/edits/${edit.id}`, {
+      method: "DELETE",
+      headers: { Authorization: `Bearer ${accessToken}` },
+      signal: AbortSignal.timeout(5e3)
+    }).catch(() => {
+    });
+  }
+}
+function compareFingerprints(a, b) {
+  return normalizeFingerprint(a) === normalizeFingerprint(b);
+}
+
+// src/signing-consistency.ts
+async function checkSigningConsistency(accessToken, packageName, apiHost = "androidpublisher.googleapis.com") {
+  const baseUrl = `https://${apiHost}/androidpublisher/v3/applications/${encodeURIComponent(packageName)}`;
+  const editResp = await fetch(`${baseUrl}/edits`, {
+    method: "POST",
+    headers: { Authorization: `Bearer ${accessToken}`, "Content-Type": "application/json" },
+    body: JSON.stringify({}),
+    signal: AbortSignal.timeout(1e4)
+  });
+  if (!editResp.ok) {
+    const body = await editResp.json().catch(() => ({}));
+    throw new GpcError(
+      `Failed to create edit: ${body.error?.message ?? `HTTP ${editResp.status}`}`,
+      "EDIT_CREATE_FAILED",
+      4,
+      "Check your credentials and app access permissions"
+    );
+  }
+  const edit = await editResp.json();
+  try {
+    const bundlesResp = await fetch(`${baseUrl}/edits/${edit.id}/bundles`, {
+      headers: { Authorization: `Bearer ${accessToken}` },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!bundlesResp.ok) {
+      throw new GpcError(
+        `Failed to list bundles: HTTP ${bundlesResp.status}`,
+        "BUNDLES_LIST_FAILED",
+        4,
+        "Check your API permissions for this app"
+      );
+    }
+    const bundlesData = await bundlesResp.json();
+    const bundles = (bundlesData.bundles ?? []).sort((a, b) => b.versionCode - a.versionCode);
+    if (bundles.length === 0) {
+      throw new GpcError(
+        "No bundles found for this app",
+        "NO_BUNDLES",
+        4,
+        "Upload at least one AAB with 'gpc publish' before checking signing consistency"
+      );
+    }
+    const currentVc = bundles[0].versionCode;
+    const currentFp = await fetchFingerprint(baseUrl, accessToken, currentVc);
+    if (bundles.length === 1) {
+      return {
+        currentVersionCode: currentVc,
+        currentFingerprint: currentFp,
+        consistent: true,
+        firstRelease: true
+      };
+    }
+    const previousVc = bundles[1].versionCode;
+    const previousFp = await fetchFingerprint(baseUrl, accessToken, previousVc);
+    const consistent = normalizeFingerprint(currentFp) === normalizeFingerprint(previousFp);
+    return {
+      currentVersionCode: currentVc,
+      currentFingerprint: currentFp,
+      previousVersionCode: previousVc,
+      previousFingerprint: previousFp,
+      consistent,
+      firstRelease: false
+    };
+  } finally {
+    await fetch(`${baseUrl}/edits/${edit.id}`, {
+      method: "DELETE",
+      headers: { Authorization: `Bearer ${accessToken}` },
+      signal: AbortSignal.timeout(5e3)
+    }).catch(() => {
+    });
+  }
+}
+async function fetchFingerprint(baseUrl, accessToken, versionCode) {
+  const resp = await fetch(`${baseUrl}/generatedApks/${versionCode}`, {
+    headers: { Authorization: `Bearer ${accessToken}` },
+    signal: AbortSignal.timeout(1e4)
+  });
+  if (!resp.ok) {
+    throw new GpcError(
+      `Failed to get generated APKs for versionCode ${versionCode}: HTTP ${resp.status}`,
+      "GENERATED_APKS_FAILED",
+      4,
+      "Check your API permissions for this app"
+    );
+  }
+  const data = await resp.json();
+  const fp = data.generatedApks?.[0]?.certificateSha256Fingerprint;
+  if (!fp) {
+    throw new GpcError(
+      `No signing certificate found for versionCode ${versionCode}`,
+      "NO_SIGNING_CERT",
+      4,
+      "The app may not be enrolled in Play App Signing"
+    );
+  }
+  return fp.toUpperCase();
+}
+
+// src/verify-checklist.ts
+var PLAY_CONSOLE_SETTINGS = "https://play.google.com/console/developers/settings";
+var VERIFICATION_PAGE = "https://developer.android.com/developer-verification";
+var PLAY_APP_SIGNING = "https://support.google.com/googleplay/android-developer/answer/9842756";
+function buildChecklist(input) {
+  const items = [];
+  const answers = input.interactiveAnswers ?? {};
+  items.push({
+    id: "account-active",
+    title: "Play Console account active",
+    status: input.authenticated ? "done" : "action-needed",
+    detail: input.authenticated ? `Authenticated as ${input.accountEmail ?? "unknown"}` : "Could not authenticate with Google Play",
+    actionUrl: input.authenticated ? void 0 : "https://play.google.com/console"
+  });
+  items.push(
+    resolveManualStep(
+      "identity-verified",
+      "Identity verification complete",
+      "Confirm your identity is verified under Developer Account in Play Console Settings",
+      PLAY_CONSOLE_SETTINGS,
+      answers
+    )
+  );
+  items.push(
+    resolveManualStep(
+      "auto-registration-reviewed",
+      "Auto-registration results reviewed",
+      "Check the registration status banner above your app list in Play Console",
+      PLAY_CONSOLE_SETTINGS,
+      answers
+    )
+  );
+  if (input.appAccessible !== void 0) {
+    items.push({
+      id: "app-accessible",
+      title: "App accessible via API",
+      status: input.appAccessible ? "done" : "action-needed",
+      detail: input.appAccessible ? "App is reachable through the Play Developer API" : "Could not access app via API"
+    });
+  }
+  if (input.bundleCount !== void 0) {
+    items.push({
+      id: "bundle-uploaded",
+      title: "At least one bundle uploaded",
+      status: input.bundleCount > 0 ? "done" : "action-needed",
+      detail: input.bundleCount > 0 ? `${input.bundleCount} bundle${input.bundleCount !== 1 ? "s" : ""} on file` : "No bundles found. Upload an AAB with: gpc publish"
+    });
+  }
+  if (input.hasGeneratedApks !== void 0) {
+    items.push({
+      id: "play-app-signing",
+      title: "Play App Signing enrolled",
+      status: input.hasGeneratedApks ? "done" : "action-needed",
+      detail: input.hasGeneratedApks ? "Google manages your app signing key" : "App may not be enrolled in Play App Signing",
+      actionUrl: input.hasGeneratedApks ? void 0 : PLAY_APP_SIGNING
+    });
+  }
+  items.push(
+    resolveManualStep(
+      "additional-keys",
+      "Additional signing keys registered",
+      "If you distribute outside Play with a different key, register it in Play Console",
+      VERIFICATION_PAGE,
+      answers
+    )
+  );
+  const completed = items.filter((i) => i.status === "done").length;
+  return { items, completed, total: items.length };
+}
+function resolveManualStep(id, title, detail, actionUrl, answers) {
+  if (id in answers) {
+    return {
+      id,
+      title,
+      status: answers[id] ? "done" : "action-needed",
+      detail,
+      actionUrl: answers[id] ? void 0 : actionUrl
+    };
+  }
+  return { id, title, status: "cannot-detect", detail, actionUrl };
+}
+function renderChecklistMarkdown(result, accountEmail) {
+  const lines = [
+    "# Developer Verification Checklist",
+    "",
+    `Account: ${accountEmail}`,
+    `Date: ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}`,
+    `Progress: ${result.completed}/${result.total}`,
+    ""
+  ];
+  for (const item of result.items) {
+    const check = item.status === "done" ? "x" : " ";
+    lines.push(`- [${check}] ${item.title}`);
+    if (item.detail) lines.push(`  ${item.detail}`);
+    if (item.actionUrl && item.status !== "done") lines.push(`  ${item.actionUrl}`);
+  }
+  lines.push("");
+  return lines.join("\n");
+}
 export {
   ApiError,
   ConfigError,
@@ -8612,16 +8929,19 @@ export {
   applyReleaseNotes,
   batchGetOrders,
   batchSyncInAppProducts,
+  buildChecklist,
   buildLocaleBundle,
   bundleToReleaseNotes,
   cancelRecoveryAction,
   cancelSubscriptionPurchase,
   cancelSubscriptionV2,
   checkBundleSize,
+  checkSigningConsistency,
   checkThreshold,
   classifyError,
   clearAuditLog,
   compareBundles,
+  compareFingerprints,
   compareVersionVitals,
   compareVitalsTrend,
   computeStatusDiff,
@@ -8689,12 +9009,14 @@ export {
   generateMigrationPlan,
   generateNotesFromGit,
   getAllScannerNames,
+  getApiSigningFingerprint,
   getAppInfo,
   getAppStatus,
   getCountryAvailability,
   getDeviceTier,
   getExternalTransaction,
   getInAppProduct,
+  getKeystoreFingerprint,
   getListings,
   getOffer,
   getOneTimeOffer,
@@ -8758,10 +9080,12 @@ export {
   loadStatusCache,
   maybePaginate,
   migratePrices,
+  normalizeFingerprint,
   parseAppfile,
   parseCommit,
   parseFastfile,
   parseGrantArg,
+  parseKeytoolOutput,
   parseMonth,
   parseRemoteUrl,
   pauseTrain,
@@ -8779,6 +9103,7 @@ export {
   relativeTime,
   removeTesters,
   removeUser,
+  renderChecklistMarkdown,
   renderJson,
   renderMarkdown,
   renderPlayStore,