@hot-updater/android-helper 1.2.0-rc.2 → 1.2.0-rc.3

package/dist/index.cjs

@@ -164,6 +164,26 @@ const createGradleLogger = ({ logPrefix }) => new _hot_updater_cli_tools.BuildLo
 	}
 });
 //#endregion
+//#region src/utils/formatCommand.ts
+/**
+* A command to print, broken at spaces with ` \` once a line would pass
+* `width`, each continuation indented two spaces, so a terminal never wraps
+* it mid-word and it still pastes as one command.
+*/
+const formatCommand = (words, width = 74) => {
+	const lines = [];
+	let line = "";
+	for (const word of words) {
+		const next = line ? `${line} ${word}` : word;
+		if (line && next.length > width - 2) {
+			lines.push(`${line} \\`);
+			line = `  ${word}`;
+		} else line = next;
+	}
+	lines.push(line);
+	return lines.join("\n");
+};
+//#endregion
 //#region src/builder/runGradle.ts
 /** Why Gradle failed, without its command line. */
 const describeFailure = (error) => {
@@ -190,12 +210,14 @@ async function runGradle({ tasks, logPrefix, args, env, androidProjectPath, appM
 	const gradleArgs = getTaskNames(appModuleName, tasks);
 	gradleArgs.push("-x", "lint");
 	if (args.extraParams) gradleArgs.push(...args.extraParams);
-	_hot_updater_cli_tools.p.log.info(`Run Gradle Settings: 
-Project    ${androidProjectPath}
-App Module ${appModuleName}
-Tasks      ${tasks.join(", ")}
-Args       ${gradleArgs.join(" ")}
-`);
+	_hot_updater_cli_tools.p.log.info([
+		"Gradle build",
+		`Project     ${path.default.relative((0, _hot_updater_cli_tools.getCwd)(), androidProjectPath) || "."}`,
+		`App module  ${appModuleName}`,
+		`Tasks       ${tasks.join(", ")}`,
+		"Command",
+		formatCommand([path.default.basename(getGradleWrapper()), ...gradleArgs])
+	].join("\n"));
 	if ("port" in args && args.port != null) gradleArgs.push(`-PreactNativeDevServerPort=${args.port}`);
 	const logger = createGradleLogger({ logPrefix });
 	await logger.start();
@@ -257,7 +279,7 @@ async function getBuildOutputFilePath({ aab, appModuleName, buildDirectory, vari
 	const outputFile = `${appModuleName}-${variant}.${aab ? "aab" : "apk"}`;
 	const outputFilePath = path.default.join(buildDirectory, outputFile);
 	if (fs.default.existsSync(outputFilePath)) return outputFilePath;
-	_hot_updater_cli_tools.p.log.error(`Failed to find the output file for ${outputFilePath}`);
+	_hot_updater_cli_tools.p.log.error(`Gradle wrote no ${outputFilePath}.`);
 	process.exit(1);
 }
 //#endregion
@@ -277,7 +299,7 @@ const resolveGradleSigningEnv = async ({ schemeConfig, credentials }) => {
 	const reference = schemeConfig.signing?.keystore;
 	if (!reference) return;
 	if (isDebugVariant(schemeConfig.variant)) {
-		_hot_updater_cli_tools.p.log.info(`${schemeConfig.variant} signs with the debug keystore, so signing.keystore is not used.`);
+		_hot_updater_cli_tools.p.log.info(`${schemeConfig.variant} signs with the debug keystore; signing.keystore is unused.`);
 		return;
 	}
 	const keystore = await (credentials ?? (0, _hot_updater_cli_tools.createCredentialResolver)()).resolve({
@@ -430,7 +452,7 @@ const writeBaseModuleApk = async (aabPath, directory) => {
 const readBuiltApp = async ({ artifactPath, androidProjectPath }) => {
 	const aapt2 = findAapt2(androidProjectPath);
 	if (!aapt2) {
-		_hot_updater_cli_tools.p.log.warn("aapt2 was not found in the Android SDK's build-tools, so the build reports the app version and channel of the project files.");
+		_hot_updater_cli_tools.p.log.warn("No aapt2 in the Android SDK build-tools.\nThe build reports the project files' app version and channel.");
 		return;
 	}
 	const directory = await fs.default.promises.mkdtemp(path.default.join(os.default.tmpdir(), "android-helper-"));
@@ -455,7 +477,7 @@ const readBuiltApp = async ({ artifactPath, androidProjectPath }) => {
 		};
 		const appVersion = await resolve(parseManifestVersionName(xmltree));
 		const channel = await resolve(parseManifestMetaData(xmltree, CHANNEL_META_DATA_KEY));
-		if (appVersion === void 0 || channel === void 0) _hot_updater_cli_tools.p.log.warn("aapt2 printed the artifact's versionName or com.hotupdater.CHANNEL in a form that cannot be read exactly, so the build reports the project files' value for it.");
+		if (appVersion === void 0 || channel === void 0) _hot_updater_cli_tools.p.log.warn("Couldn't read the artifact's versionName or com.hotupdater.CHANNEL exactly.\nThe build reports the project files' value instead.");
 		const versionCode = parseManifestVersionCode(xmltree);
 		return {
 			appVersion: appVersion ?? null,
@@ -586,7 +608,7 @@ const readServiceAccount = (json) => {
 		throw new Error("The Play service account is not a JSON key file.");
 	}
 	const { client_email, private_key, token_uri } = parsed;
-	if (typeof client_email !== "string" || typeof private_key !== "string") throw new Error("The Play service account has no client_email or private_key: use the JSON key file Google Cloud creates for the service account.");
+	if (typeof client_email !== "string" || typeof private_key !== "string") throw new Error("The Play service account has no client_email or private_key.\nUse the JSON key file Google Cloud creates for it.");
 	(0, _hot_updater_cli_tools.registerSecretValue)(private_key);
 	let privateKey;
 	try {
@@ -632,7 +654,7 @@ const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var PlayVersionCodeUsedError = class extends Error {
 	name = "PlayVersionCodeUsedError";
 	constructor(options) {
-		super("Google Play already has this .aab's version code. Raise versionCode for every build you upload.", options);
+		super("Google Play already has this .aab's version code.\nRaise versionCode for every build you upload.", options);
 	}
 };
 /**
@@ -642,8 +664,12 @@ var PlayVersionCodeUsedError = class extends Error {
 const explain = (error, packageName) => {
 	if (!(error instanceof GooglePlayError)) return error;
 	const { status, apiMessage } = error;
-	if (status === 401 || /does not have permission/i.test(apiMessage)) return new Error(`The Play service account cannot release ${packageName}. Invite its email in Play Console under Users and permissions, with permission to release to testing tracks, and enable the Google Play Android Developer API in its Google Cloud project.`, { cause: error });
-	if (/package not found/i.test(apiMessage)) return new Error(`Google Play has no app ${packageName}. Create the app in Play Console and upload its first .aab there; the API releases the builds after it.`, { cause: error });
+	if (status === 401 || /does not have permission/i.test(apiMessage)) return new Error([
+		`The Play service account can't release ${packageName}.`,
+		"Invite its email in Play Console (Users and permissions) to release to",
+		"testing tracks, and enable the Google Play Android Developer API."
+	].join("\n"), { cause: error });
+	if (/package not found/i.test(apiMessage)) return new Error(`Google Play has no app ${packageName}.\nCreate it in Play Console and upload its first .aab there.`, { cause: error });
 	if (/version code .*(already been used|already used)/i.test(apiMessage)) return new PlayVersionCodeUsedError({ cause: error });
 	return error;
 };
@@ -668,7 +694,7 @@ const createPlayClient = ({ json, packageName, fetch }) => {
 					assertion
 				}).toString()
 			});
-			if (!response.ok) throw new Error(`Google refused the Play service account (HTTP ${response.status}): ${await readApiMessage(response) || "check that its key is current and the service account is enabled."}`);
+			if (!response.ok) throw new Error(`Google refused the Play service account (HTTP ${response.status}).\n${await readApiMessage(response) || "Check that its key is current and the service account is enabled."}`);
 			const { access_token } = await response.json();
 			if (typeof access_token !== "string" || !access_token) throw new Error("Google answered the Play service account with no access token.");
 			(0, _hot_updater_cli_tools.registerSecretValue)(access_token);
@@ -746,7 +772,11 @@ const assertPlaySigned = async (aabPath) => {
 		"-jarfile",
 		aabPath
 	], { reject: false });
-	if (exitCode === 0 && ANDROID_DEBUG_SIGNER.test(String(stdout))) throw new Error(`Google Play refuses an .aab signed with the Android debug keystore, and ${aabPath} is. Set the scheme's signing.keystore, or a release signingConfig in android/app/build.gradle, then build again.`);
+	if (exitCode === 0 && ANDROID_DEBUG_SIGNER.test(String(stdout))) throw new Error([
+		"Google Play refuses an .aab signed with the Android debug keystore.",
+		"Set the scheme's signing.keystore, or a release signingConfig in",
+		"android/app/build.gradle, then build again."
+	].join("\n"));
 };
 /**
 * Uploads an `.aab` to Google Play's internal testing track with the Google
@@ -797,7 +827,7 @@ const uploadToPlay = async ({ aabPath, packageName, serviceAccount: { json }, fe
 			};
 		} catch (error) {
 			if (!(error instanceof GooglePlayError) || !DRAFT_APP_ERRORS.some((message) => error.apiMessage.includes(message))) throw error;
-			_hot_updater_cli_tools.p.log.warn(`Play Console has not published ${packageName} yet, which takes only draft releases. The internal release of version code ${versionCode} is a draft: roll it out in Play Console.`);
+			_hot_updater_cli_tools.p.log.warn(`${packageName} isn't published yet, so version code ${versionCode} is a draft.\nRoll it out in Play Console.`);
 			await release("draft");
 			return {
 				versionCode,
@@ -819,10 +849,14 @@ const commit = async ({ request, edit, retryDelayMs }) => {
 	let changesNotSentForReview = false;
 	for (let attempt = 1;; attempt++) try {
 		await request("Committing the Google Play edit", "POST", `${edit}:commit${changesNotSentForReview ? "?changesNotSentForReview=true" : ""}`);
-		if (changesNotSentForReview) _hot_updater_cli_tools.p.log.warn("Google Play saved the release without sending it for review, as the app's state requires. Send the changes for review in Play Console.");
+		if (changesNotSentForReview) _hot_updater_cli_tools.p.log.warn("Google Play saved the release without sending it for review.\nSend the changes for review in Play Console.");
 		return;
 	} catch (error) {
-		if (!(error instanceof GooglePlayError) || error.status >= 500 || error.status === 429) throw new Error(`Google Play did not confirm the release: ${error instanceof Error ? error.message : String(error)} Check internal testing in Play Console before you upload this version code again.`, { cause: error });
+		if (!(error instanceof GooglePlayError) || error.status >= 500 || error.status === 429) throw new Error([
+			"Google Play didn't confirm the release.",
+			error instanceof Error ? error.message : String(error),
+			"Check internal testing in Play Console before you upload it again."
+		].join("\n"), { cause: error });
 		if (error.status !== 400) throw error;
 		if (!changesNotSentForReview && error.apiMessage.includes(NEEDS_CHANGES_NOT_SENT_FOR_REVIEW)) {
 			changesNotSentForReview = true;
@@ -925,9 +959,9 @@ const confirmedOffset = (response) => {
 * from new apps, or a debug variant, which Play refuses.
 */
 const resolvePlayUploadServiceAccount = ({ scheme, androidScheme }) => {
-	if (androidScheme.aab === false) throw new Error(`Google Play takes an .aab, and the scheme ${scheme} builds an .apk (aab: false).`);
+	if (androidScheme.aab === false) throw new Error(`The scheme ${scheme} builds an .apk (aab: false); Google Play takes an .aab.`);
 	const variant = androidScheme.variant ?? "Release";
-	if (/debug$/i.test(variant)) throw new Error(`Google Play takes a release build, and the scheme ${scheme} builds the ${variant} variant, which is debuggable and loads its JavaScript from Metro.`);
+	if (/debug$/i.test(variant)) throw new Error(`The scheme ${scheme} builds ${variant}; Google Play takes a release build.`);
 	return {
 		kind: "play-service-account",
 		name: "play-service-account"
@@ -1231,7 +1265,7 @@ const signInWithGoogle = async ({ client, scopes, onUrl, fetch = globalThis.fetc
 			}).toString()
 		});
 		const token = await response.json().catch(() => ({}));
-		if (!response.ok || typeof token.access_token !== "string") throw new PlayServiceAccountError(token.error === "invalid_client" ? "sign-in-not-configured" : "sign-in-cancelled", `Google refused the sign-in (HTTP ${response.status})${typeof token.error_description === "string" ? `: ${token.error_description}` : typeof token.error === "string" ? `: ${token.error}` : "."}`);
+		if (!response.ok || typeof token.access_token !== "string") throw new PlayServiceAccountError(token.error === "invalid_client" ? "sign-in-not-configured" : "sign-in-cancelled", `Google refused the sign-in (HTTP ${response.status}).${typeof token.error_description === "string" ? `\n${token.error_description}` : typeof token.error === "string" ? `\n${token.error}` : ""}`);
 		(0, _hot_updater_cli_tools.registerSecretValue)(token.access_token);
 		return {
 			accessToken: token.access_token,
@@ -1286,11 +1320,11 @@ const newProjectId = () => `${PLAY_SERVICE_ACCOUNT_ID}-${node_crypto.default.ran
 const isNotFound = (error) => error instanceof GoogleApiError && error.status === 404;
 const isConflict = (error) => error instanceof GoogleApiError && error.status === 409;
 /** The API is disabled in the OAuth client's own project: waiting does not help. */
-const clientApiDisabled = (error) => new PlayServiceAccountError("api-not-enabled", `${error.apiMessage} The Google OAuth client Hot Updater signs in with belongs to that project, which must enable the API (see ${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientId}).`, { cause: error });
+const clientApiDisabled = (error) => new PlayServiceAccountError("api-not-enabled", `${error.apiMessage}\nEnable it in the OAuth client's project (${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientId}).`, { cause: error });
 /** Google's own words, after a message that names the likely cause. */
-const googleSays = (error) => error instanceof GoogleApiError && error.apiMessage ? ` (Google: ${error.apiMessage})` : "";
+const googleSays = (error) => error instanceof GoogleApiError && error.apiMessage ? `\nGoogle: ${error.apiMessage}` : "";
 /** A Play Console refusal, as `not-play-admin`. */
-const notPlayAdmin = (developerId, error) => new PlayServiceAccountError("not-play-admin", `The Google Account you signed in with is not an admin of the Play Console developer account ${developerId}. Sign in with an account that has the Admin permission there (Users and permissions in ${PLAY_CONSOLE_URL})${googleSays(error)}.`, { cause: error });
+const notPlayAdmin = (developerId, error) => new PlayServiceAccountError("not-play-admin", `This Google Account isn't an admin of Play Console developer ${developerId}.${googleSays(error)}\nSign in with an account that has the Admin permission there.`, { cause: error });
 const isDenied = (error) => error instanceof GoogleApiError && (error.status === 403 || error.apiStatus === "PERMISSION_DENIED");
 /**
 * `IssuePlayServiceAccount` with Google's own APIs, after a sign-in on
@@ -1311,7 +1345,11 @@ const isDenied = (error) => error instanceof GoogleApiError && (error.status ===
 */
 const createGoogleKeyIssuer = ({ fetch = globalThis.fetch, sleep = sleepFor } = {}) => async (request) => {
 	const { packageName, oauthClient, onStep = () => {} } = request;
-	if (!oauthClient?.clientId) throw new PlayServiceAccountError("sign-in-not-configured", `This build of Hot Updater has no Google OAuth client to sign in with. Set ${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientId} and ${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientSecret} to a "Desktop app" OAuth client.`);
+	if (!oauthClient?.clientId) throw new PlayServiceAccountError("sign-in-not-configured", [
+		"This build of Hot Updater has no Google OAuth client to sign in with.",
+		"Set these to a \"Desktop app\" OAuth client:",
+		`${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientId}, ${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientSecret}`
+	].join("\n"));
 	const signIn = await signInWithGoogle({
 		client: oauthClient,
 		scopes: SCOPES,
@@ -1323,14 +1361,14 @@ const createGoogleKeyIssuer = ({ fetch = globalThis.fetch, sleep = sleepFor } =
 	};
 	try {
 		const missing = SCOPES.filter((scope) => !signIn.scopes.includes(scope));
-		if (missing.length > 0) throw new PlayServiceAccountError("scope-not-granted", `The sign-in did not allow ${missing.map((scope) => scope === ANDROID_PUBLISHER_SCOPE ? "managing Google Play" : "managing Google Cloud").join(" or ")}. Run this again and keep every box on Google's consent screen ticked.`);
+		if (missing.length > 0) throw new PlayServiceAccountError("scope-not-granted", `The sign-in didn't allow ${missing.map((scope) => scope === ANDROID_PUBLISHER_SCOPE ? "managing Google Play" : "managing Google Cloud").join(" or ")}.\nRun this again and keep every box on Google's consent screen ticked.`);
 		const google = createGoogleRequest({
 			accessToken: signIn.accessToken,
 			fetch
 		});
 		const developerInput = await request.askDeveloperId();
 		const developerId = parseDeveloperId(developerInput);
-		if (developerId === void 0) throw new PlayServiceAccountError("developer-not-found", `"${developerInput.trim()}" is no developer account ID. Open ${PLAY_CONSOLE_URL}: it is the number after /developers/ in the address.`);
+		if (developerId === void 0) throw new PlayServiceAccountError("developer-not-found", `"${developerInput.trim()}" is not a developer account ID.\nIt is the number after /developers/ in Play Console's address.`);
 		onStep("Checking the Play Console developer account");
 		await checkPlayConsole({
 			google,
@@ -1402,7 +1440,7 @@ const checkPlayConsole = async ({ google, developerId, packageName }) => {
 		await google("Listing the Play Console users", "GET", `${PUBLISHER_API}/developers/${developerId}/users?pageSize=1`);
 	} catch (error) {
 		if (isServiceDisabled(error)) throw clientApiDisabled(error);
-		if (isNotFound(error)) throw new PlayServiceAccountError("developer-not-found", `Play Console has no developer account ${developerId}. Open ${PLAY_CONSOLE_URL}: the developer account ID is the number after /developers/ in the address${googleSays(error)}.`, { cause: error });
+		if (isNotFound(error)) throw new PlayServiceAccountError("developer-not-found", `Play Console has no developer account ${developerId}.${googleSays(error)}\nIt is the number after /developers/ in Play Console's address.`, { cause: error });
 		if (isDenied(error)) throw notPlayAdmin(developerId, error);
 		throw error;
 	}
@@ -1463,9 +1501,18 @@ const chooseProject = async ({ google, request, sleep, onStep }) => {
 		};
 	} catch (error) {
 		if (!(error instanceof GoogleApiError)) throw error;
-		if (error.status === 429 || error.apiStatus === "RESOURCE_EXHAUSTED" || /quota/iu.test(error.apiMessage)) throw new PlayServiceAccountError("project-quota", `Google Cloud has no project quota left for this account: ${error.apiMessage || "quota exceeded"}. Delete a project you no longer use (https://console.cloud.google.com/cloud-resource-manager), or run this again and pick an existing project.`, { cause: error });
-		if (/terms of service/iu.test(error.apiMessage)) throw new PlayServiceAccountError("project-create-denied", "This Google Account has not accepted the Google Cloud Terms of Service. Open https://console.cloud.google.com once to accept them, then run this again.", { cause: error });
-		if (isDenied(error) || error.apiStatus === "FAILED_PRECONDITION") throw new PlayServiceAccountError("project-create-denied", `This Google Account may not create Google Cloud projects: ${error.apiMessage || "permission denied"}. Ask your organization's admin for the Project Creator role, or run this again and pick an existing project.`, { cause: error });
+		if (error.status === 429 || error.apiStatus === "RESOURCE_EXHAUSTED" || /quota/iu.test(error.apiMessage)) throw new PlayServiceAccountError("project-quota", [
+			"Google Cloud has no project quota left for this account.",
+			error.apiMessage || "Quota exceeded.",
+			"Run this again and pick an existing project, or delete one at:",
+			"https://console.cloud.google.com/cloud-resource-manager"
+		].join("\n"), { cause: error });
+		if (/terms of service/iu.test(error.apiMessage)) throw new PlayServiceAccountError("project-create-denied", "This Google Account hasn't accepted the Google Cloud Terms of Service.\nAccept them at https://console.cloud.google.com, then run this again.", { cause: error });
+		if (isDenied(error) || error.apiStatus === "FAILED_PRECONDITION") throw new PlayServiceAccountError("project-create-denied", [
+			"This Google Account may not create Google Cloud projects.",
+			error.apiMessage || "Permission denied.",
+			"Pick an existing project, or ask an admin for the Project Creator role."
+		].join("\n"), { cause: error });
 		throw error;
 	}
 };
@@ -1485,7 +1532,7 @@ const whilePropagating = async ({ run, project, sleep, notFound = false }) => {
 		const disabled = isServiceDisabled(error);
 		if (disabled && !consumerIs(error, project)) throw clientApiDisabled(error);
 		if (!disabled && !(notFound && isNotFound(error)) || attempt >= PROPAGATION_ATTEMPTS) {
-			if (disabled) throw new PlayServiceAccountError("api-not-enabled", `Google is still enabling the APIs in ${project.projectId}: ${error.apiMessage} Wait a few minutes, then run this again.`, { cause: error });
+			if (disabled) throw new PlayServiceAccountError("api-not-enabled", `Google is still enabling the APIs in ${project.projectId}.\n${error.apiMessage}\nWait a few minutes, then run this again.`, { cause: error });
 			throw error;
 		}
 		await sleep(PROPAGATION_DELAY_MS);
@@ -1508,7 +1555,11 @@ const enableServices = async ({ google, projectId, sleep }) => {
 			sleep
 		});
 	} catch (error) {
-		if (isDenied(error) && !isServiceDisabled(error)) throw new PlayServiceAccountError("project-access-denied", `This Google Account may not enable APIs in ${projectId}: ${error.apiMessage || "permission denied"}. Pick a project you own, or ask its owner for the Editor role.`, { cause: error });
+		if (isDenied(error) && !isServiceDisabled(error)) throw new PlayServiceAccountError("project-access-denied", [
+			`This Google Account may not enable APIs in ${projectId}.`,
+			error.apiMessage || "Permission denied.",
+			"Pick a project you own, or ask its owner for the Editor role."
+		].join("\n"), { cause: error });
 		throw error;
 	}
 };
@@ -1530,7 +1581,11 @@ const ensureServiceAccount = async ({ google, project, sleep }) => {
 		})).email ?? email;
 	} catch (error) {
 		if (isConflict(error)) return email;
-		if (isDenied(error) && !isServiceDisabled(error)) throw new PlayServiceAccountError("project-access-denied", `This Google Account may not create service accounts in ${projectId}: ${error.apiMessage || "permission denied"}. Pick a project you own, or ask its owner for the Service Account Admin role.`, { cause: error });
+		if (isDenied(error) && !isServiceDisabled(error)) throw new PlayServiceAccountError("project-access-denied", [
+			`This Google Account may not create service accounts in ${projectId}.`,
+			error.apiMessage || "Permission denied.",
+			"Pick a project you own, or ask for the Service Account Admin role."
+		].join("\n"), { cause: error });
 		throw error;
 	}
 };
@@ -1602,7 +1657,11 @@ const createKey = async ({ google, project, email, sleep }) => {
 			})
 		});
 	} catch (error) {
-		if (error instanceof GoogleApiError && (error.violations.includes(KEY_CREATION_CONSTRAINT) || /disableServiceAccountKeyCreation/u.test(error.apiMessage))) throw new PlayServiceAccountError("key-creation-disabled", `An organization policy (iam.disableServiceAccountKeyCreation) forbids service account keys in ${projectId}; organizations created since 2024 enforce it by default. Ask an organization policy admin to allow keys for this project, or run this again with a project outside the organization. The service account ${email} and its Play Console access remain for the next run.`, { cause: error });
+		if (error instanceof GoogleApiError && (error.violations.includes(KEY_CREATION_CONSTRAINT) || /disableServiceAccountKeyCreation/u.test(error.apiMessage))) throw new PlayServiceAccountError("key-creation-disabled", [
+			`iam.disableServiceAccountKeyCreation forbids keys in ${projectId}.`,
+			"Ask an organization policy admin to allow keys for this project,",
+			"or run this again with a project outside the organization."
+		].join("\n"), { cause: error });
 		throw error;
 	}
 	if (!key.name || !key.privateKeyData) throw new Error("Google Cloud created the key without its JSON file.");

package/dist/index.mjs

@@ -134,6 +134,26 @@ const createGradleLogger = ({ logPrefix }) => new BuildLogger({
 	}
 });
 //#endregion
+//#region src/utils/formatCommand.ts
+/**
+* A command to print, broken at spaces with ` \` once a line would pass
+* `width`, each continuation indented two spaces, so a terminal never wraps
+* it mid-word and it still pastes as one command.
+*/
+const formatCommand = (words, width = 74) => {
+	const lines = [];
+	let line = "";
+	for (const word of words) {
+		const next = line ? `${line} ${word}` : word;
+		if (line && next.length > width - 2) {
+			lines.push(`${line} \\`);
+			line = `  ${word}`;
+		} else line = next;
+	}
+	lines.push(line);
+	return lines.join("\n");
+};
+//#endregion
 //#region src/builder/runGradle.ts
 /** Why Gradle failed, without its command line. */
 const describeFailure = (error) => {
@@ -160,12 +180,14 @@ async function runGradle({ tasks, logPrefix, args, env, androidProjectPath, appM
 	const gradleArgs = getTaskNames(appModuleName, tasks);
 	gradleArgs.push("-x", "lint");
 	if (args.extraParams) gradleArgs.push(...args.extraParams);
-	p.log.info(`Run Gradle Settings: 
-Project    ${androidProjectPath}
-App Module ${appModuleName}
-Tasks      ${tasks.join(", ")}
-Args       ${gradleArgs.join(" ")}
-`);
+	p.log.info([
+		"Gradle build",
+		`Project     ${path.relative(getCwd(), androidProjectPath) || "."}`,
+		`App module  ${appModuleName}`,
+		`Tasks       ${tasks.join(", ")}`,
+		"Command",
+		formatCommand([path.basename(getGradleWrapper()), ...gradleArgs])
+	].join("\n"));
 	if ("port" in args && args.port != null) gradleArgs.push(`-PreactNativeDevServerPort=${args.port}`);
 	const logger = createGradleLogger({ logPrefix });
 	await logger.start();
@@ -227,7 +249,7 @@ async function getBuildOutputFilePath({ aab, appModuleName, buildDirectory, vari
 	const outputFile = `${appModuleName}-${variant}.${aab ? "aab" : "apk"}`;
 	const outputFilePath = path.join(buildDirectory, outputFile);
 	if (fs.existsSync(outputFilePath)) return outputFilePath;
-	p.log.error(`Failed to find the output file for ${outputFilePath}`);
+	p.log.error(`Gradle wrote no ${outputFilePath}.`);
 	process.exit(1);
 }
 //#endregion
@@ -247,7 +269,7 @@ const resolveGradleSigningEnv = async ({ schemeConfig, credentials }) => {
 	const reference = schemeConfig.signing?.keystore;
 	if (!reference) return;
 	if (isDebugVariant(schemeConfig.variant)) {
-		p.log.info(`${schemeConfig.variant} signs with the debug keystore, so signing.keystore is not used.`);
+		p.log.info(`${schemeConfig.variant} signs with the debug keystore; signing.keystore is unused.`);
 		return;
 	}
 	const keystore = await (credentials ?? createCredentialResolver()).resolve({
@@ -400,7 +422,7 @@ const writeBaseModuleApk = async (aabPath, directory) => {
 const readBuiltApp = async ({ artifactPath, androidProjectPath }) => {
 	const aapt2 = findAapt2(androidProjectPath);
 	if (!aapt2) {
-		p.log.warn("aapt2 was not found in the Android SDK's build-tools, so the build reports the app version and channel of the project files.");
+		p.log.warn("No aapt2 in the Android SDK build-tools.\nThe build reports the project files' app version and channel.");
 		return;
 	}
 	const directory = await fs.promises.mkdtemp(path.join(os.tmpdir(), "android-helper-"));
@@ -425,7 +447,7 @@ const readBuiltApp = async ({ artifactPath, androidProjectPath }) => {
 		};
 		const appVersion = await resolve(parseManifestVersionName(xmltree));
 		const channel = await resolve(parseManifestMetaData(xmltree, CHANNEL_META_DATA_KEY));
-		if (appVersion === void 0 || channel === void 0) p.log.warn("aapt2 printed the artifact's versionName or com.hotupdater.CHANNEL in a form that cannot be read exactly, so the build reports the project files' value for it.");
+		if (appVersion === void 0 || channel === void 0) p.log.warn("Couldn't read the artifact's versionName or com.hotupdater.CHANNEL exactly.\nThe build reports the project files' value instead.");
 		const versionCode = parseManifestVersionCode(xmltree);
 		return {
 			appVersion: appVersion ?? null,
@@ -556,7 +578,7 @@ const readServiceAccount = (json) => {
 		throw new Error("The Play service account is not a JSON key file.");
 	}
 	const { client_email, private_key, token_uri } = parsed;
-	if (typeof client_email !== "string" || typeof private_key !== "string") throw new Error("The Play service account has no client_email or private_key: use the JSON key file Google Cloud creates for the service account.");
+	if (typeof client_email !== "string" || typeof private_key !== "string") throw new Error("The Play service account has no client_email or private_key.\nUse the JSON key file Google Cloud creates for it.");
 	registerSecretValue(private_key);
 	let privateKey;
 	try {
@@ -602,7 +624,7 @@ const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var PlayVersionCodeUsedError = class extends Error {
 	name = "PlayVersionCodeUsedError";
 	constructor(options) {
-		super("Google Play already has this .aab's version code. Raise versionCode for every build you upload.", options);
+		super("Google Play already has this .aab's version code.\nRaise versionCode for every build you upload.", options);
 	}
 };
 /**
@@ -612,8 +634,12 @@ var PlayVersionCodeUsedError = class extends Error {
 const explain = (error, packageName) => {
 	if (!(error instanceof GooglePlayError)) return error;
 	const { status, apiMessage } = error;
-	if (status === 401 || /does not have permission/i.test(apiMessage)) return new Error(`The Play service account cannot release ${packageName}. Invite its email in Play Console under Users and permissions, with permission to release to testing tracks, and enable the Google Play Android Developer API in its Google Cloud project.`, { cause: error });
-	if (/package not found/i.test(apiMessage)) return new Error(`Google Play has no app ${packageName}. Create the app in Play Console and upload its first .aab there; the API releases the builds after it.`, { cause: error });
+	if (status === 401 || /does not have permission/i.test(apiMessage)) return new Error([
+		`The Play service account can't release ${packageName}.`,
+		"Invite its email in Play Console (Users and permissions) to release to",
+		"testing tracks, and enable the Google Play Android Developer API."
+	].join("\n"), { cause: error });
+	if (/package not found/i.test(apiMessage)) return new Error(`Google Play has no app ${packageName}.\nCreate it in Play Console and upload its first .aab there.`, { cause: error });
 	if (/version code .*(already been used|already used)/i.test(apiMessage)) return new PlayVersionCodeUsedError({ cause: error });
 	return error;
 };
@@ -638,7 +664,7 @@ const createPlayClient = ({ json, packageName, fetch }) => {
 					assertion
 				}).toString()
 			});
-			if (!response.ok) throw new Error(`Google refused the Play service account (HTTP ${response.status}): ${await readApiMessage(response) || "check that its key is current and the service account is enabled."}`);
+			if (!response.ok) throw new Error(`Google refused the Play service account (HTTP ${response.status}).\n${await readApiMessage(response) || "Check that its key is current and the service account is enabled."}`);
 			const { access_token } = await response.json();
 			if (typeof access_token !== "string" || !access_token) throw new Error("Google answered the Play service account with no access token.");
 			registerSecretValue(access_token);
@@ -716,7 +742,11 @@ const assertPlaySigned = async (aabPath) => {
 		"-jarfile",
 		aabPath
 	], { reject: false });
-	if (exitCode === 0 && ANDROID_DEBUG_SIGNER.test(String(stdout))) throw new Error(`Google Play refuses an .aab signed with the Android debug keystore, and ${aabPath} is. Set the scheme's signing.keystore, or a release signingConfig in android/app/build.gradle, then build again.`);
+	if (exitCode === 0 && ANDROID_DEBUG_SIGNER.test(String(stdout))) throw new Error([
+		"Google Play refuses an .aab signed with the Android debug keystore.",
+		"Set the scheme's signing.keystore, or a release signingConfig in",
+		"android/app/build.gradle, then build again."
+	].join("\n"));
 };
 /**
 * Uploads an `.aab` to Google Play's internal testing track with the Google
@@ -767,7 +797,7 @@ const uploadToPlay = async ({ aabPath, packageName, serviceAccount: { json }, fe
 			};
 		} catch (error) {
 			if (!(error instanceof GooglePlayError) || !DRAFT_APP_ERRORS.some((message) => error.apiMessage.includes(message))) throw error;
-			p.log.warn(`Play Console has not published ${packageName} yet, which takes only draft releases. The internal release of version code ${versionCode} is a draft: roll it out in Play Console.`);
+			p.log.warn(`${packageName} isn't published yet, so version code ${versionCode} is a draft.\nRoll it out in Play Console.`);
 			await release("draft");
 			return {
 				versionCode,
@@ -789,10 +819,14 @@ const commit = async ({ request, edit, retryDelayMs }) => {
 	let changesNotSentForReview = false;
 	for (let attempt = 1;; attempt++) try {
 		await request("Committing the Google Play edit", "POST", `${edit}:commit${changesNotSentForReview ? "?changesNotSentForReview=true" : ""}`);
-		if (changesNotSentForReview) p.log.warn("Google Play saved the release without sending it for review, as the app's state requires. Send the changes for review in Play Console.");
+		if (changesNotSentForReview) p.log.warn("Google Play saved the release without sending it for review.\nSend the changes for review in Play Console.");
 		return;
 	} catch (error) {
-		if (!(error instanceof GooglePlayError) || error.status >= 500 || error.status === 429) throw new Error(`Google Play did not confirm the release: ${error instanceof Error ? error.message : String(error)} Check internal testing in Play Console before you upload this version code again.`, { cause: error });
+		if (!(error instanceof GooglePlayError) || error.status >= 500 || error.status === 429) throw new Error([
+			"Google Play didn't confirm the release.",
+			error instanceof Error ? error.message : String(error),
+			"Check internal testing in Play Console before you upload it again."
+		].join("\n"), { cause: error });
 		if (error.status !== 400) throw error;
 		if (!changesNotSentForReview && error.apiMessage.includes(NEEDS_CHANGES_NOT_SENT_FOR_REVIEW)) {
 			changesNotSentForReview = true;
@@ -895,9 +929,9 @@ const confirmedOffset = (response) => {
 * from new apps, or a debug variant, which Play refuses.
 */
 const resolvePlayUploadServiceAccount = ({ scheme, androidScheme }) => {
-	if (androidScheme.aab === false) throw new Error(`Google Play takes an .aab, and the scheme ${scheme} builds an .apk (aab: false).`);
+	if (androidScheme.aab === false) throw new Error(`The scheme ${scheme} builds an .apk (aab: false); Google Play takes an .aab.`);
 	const variant = androidScheme.variant ?? "Release";
-	if (/debug$/i.test(variant)) throw new Error(`Google Play takes a release build, and the scheme ${scheme} builds the ${variant} variant, which is debuggable and loads its JavaScript from Metro.`);
+	if (/debug$/i.test(variant)) throw new Error(`The scheme ${scheme} builds ${variant}; Google Play takes a release build.`);
 	return {
 		kind: "play-service-account",
 		name: "play-service-account"
@@ -1201,7 +1235,7 @@ const signInWithGoogle = async ({ client, scopes, onUrl, fetch = globalThis.fetc
 			}).toString()
 		});
 		const token = await response.json().catch(() => ({}));
-		if (!response.ok || typeof token.access_token !== "string") throw new PlayServiceAccountError(token.error === "invalid_client" ? "sign-in-not-configured" : "sign-in-cancelled", `Google refused the sign-in (HTTP ${response.status})${typeof token.error_description === "string" ? `: ${token.error_description}` : typeof token.error === "string" ? `: ${token.error}` : "."}`);
+		if (!response.ok || typeof token.access_token !== "string") throw new PlayServiceAccountError(token.error === "invalid_client" ? "sign-in-not-configured" : "sign-in-cancelled", `Google refused the sign-in (HTTP ${response.status}).${typeof token.error_description === "string" ? `\n${token.error_description}` : typeof token.error === "string" ? `\n${token.error}` : ""}`);
 		registerSecretValue(token.access_token);
 		return {
 			accessToken: token.access_token,
@@ -1256,11 +1290,11 @@ const newProjectId = () => `${PLAY_SERVICE_ACCOUNT_ID}-${crypto$1.randomBytes(3)
 const isNotFound = (error) => error instanceof GoogleApiError && error.status === 404;
 const isConflict = (error) => error instanceof GoogleApiError && error.status === 409;
 /** The API is disabled in the OAuth client's own project: waiting does not help. */
-const clientApiDisabled = (error) => new PlayServiceAccountError("api-not-enabled", `${error.apiMessage} The Google OAuth client Hot Updater signs in with belongs to that project, which must enable the API (see ${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientId}).`, { cause: error });
+const clientApiDisabled = (error) => new PlayServiceAccountError("api-not-enabled", `${error.apiMessage}\nEnable it in the OAuth client's project (${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientId}).`, { cause: error });
 /** Google's own words, after a message that names the likely cause. */
-const googleSays = (error) => error instanceof GoogleApiError && error.apiMessage ? ` (Google: ${error.apiMessage})` : "";
+const googleSays = (error) => error instanceof GoogleApiError && error.apiMessage ? `\nGoogle: ${error.apiMessage}` : "";
 /** A Play Console refusal, as `not-play-admin`. */
-const notPlayAdmin = (developerId, error) => new PlayServiceAccountError("not-play-admin", `The Google Account you signed in with is not an admin of the Play Console developer account ${developerId}. Sign in with an account that has the Admin permission there (Users and permissions in ${PLAY_CONSOLE_URL})${googleSays(error)}.`, { cause: error });
+const notPlayAdmin = (developerId, error) => new PlayServiceAccountError("not-play-admin", `This Google Account isn't an admin of Play Console developer ${developerId}.${googleSays(error)}\nSign in with an account that has the Admin permission there.`, { cause: error });
 const isDenied = (error) => error instanceof GoogleApiError && (error.status === 403 || error.apiStatus === "PERMISSION_DENIED");
 /**
 * `IssuePlayServiceAccount` with Google's own APIs, after a sign-in on
@@ -1281,7 +1315,11 @@ const isDenied = (error) => error instanceof GoogleApiError && (error.status ===
 */
 const createGoogleKeyIssuer = ({ fetch = globalThis.fetch, sleep = sleepFor } = {}) => async (request) => {
 	const { packageName, oauthClient, onStep = () => {} } = request;
-	if (!oauthClient?.clientId) throw new PlayServiceAccountError("sign-in-not-configured", `This build of Hot Updater has no Google OAuth client to sign in with. Set ${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientId} and ${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientSecret} to a "Desktop app" OAuth client.`);
+	if (!oauthClient?.clientId) throw new PlayServiceAccountError("sign-in-not-configured", [
+		"This build of Hot Updater has no Google OAuth client to sign in with.",
+		"Set these to a \"Desktop app\" OAuth client:",
+		`${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientId}, ${GOOGLE_OAUTH_CLIENT_ENV_NAMES.clientSecret}`
+	].join("\n"));
 	const signIn = await signInWithGoogle({
 		client: oauthClient,
 		scopes: SCOPES,
@@ -1293,14 +1331,14 @@ const createGoogleKeyIssuer = ({ fetch = globalThis.fetch, sleep = sleepFor } =
 	};
 	try {
 		const missing = SCOPES.filter((scope) => !signIn.scopes.includes(scope));
-		if (missing.length > 0) throw new PlayServiceAccountError("scope-not-granted", `The sign-in did not allow ${missing.map((scope) => scope === ANDROID_PUBLISHER_SCOPE ? "managing Google Play" : "managing Google Cloud").join(" or ")}. Run this again and keep every box on Google's consent screen ticked.`);
+		if (missing.length > 0) throw new PlayServiceAccountError("scope-not-granted", `The sign-in didn't allow ${missing.map((scope) => scope === ANDROID_PUBLISHER_SCOPE ? "managing Google Play" : "managing Google Cloud").join(" or ")}.\nRun this again and keep every box on Google's consent screen ticked.`);
 		const google = createGoogleRequest({
 			accessToken: signIn.accessToken,
 			fetch
 		});
 		const developerInput = await request.askDeveloperId();
 		const developerId = parseDeveloperId(developerInput);
-		if (developerId === void 0) throw new PlayServiceAccountError("developer-not-found", `"${developerInput.trim()}" is no developer account ID. Open ${PLAY_CONSOLE_URL}: it is the number after /developers/ in the address.`);
+		if (developerId === void 0) throw new PlayServiceAccountError("developer-not-found", `"${developerInput.trim()}" is not a developer account ID.\nIt is the number after /developers/ in Play Console's address.`);
 		onStep("Checking the Play Console developer account");
 		await checkPlayConsole({
 			google,
@@ -1372,7 +1410,7 @@ const checkPlayConsole = async ({ google, developerId, packageName }) => {
 		await google("Listing the Play Console users", "GET", `${PUBLISHER_API}/developers/${developerId}/users?pageSize=1`);
 	} catch (error) {
 		if (isServiceDisabled(error)) throw clientApiDisabled(error);
-		if (isNotFound(error)) throw new PlayServiceAccountError("developer-not-found", `Play Console has no developer account ${developerId}. Open ${PLAY_CONSOLE_URL}: the developer account ID is the number after /developers/ in the address${googleSays(error)}.`, { cause: error });
+		if (isNotFound(error)) throw new PlayServiceAccountError("developer-not-found", `Play Console has no developer account ${developerId}.${googleSays(error)}\nIt is the number after /developers/ in Play Console's address.`, { cause: error });
 		if (isDenied(error)) throw notPlayAdmin(developerId, error);
 		throw error;
 	}
@@ -1433,9 +1471,18 @@ const chooseProject = async ({ google, request, sleep, onStep }) => {
 		};
 	} catch (error) {
 		if (!(error instanceof GoogleApiError)) throw error;
-		if (error.status === 429 || error.apiStatus === "RESOURCE_EXHAUSTED" || /quota/iu.test(error.apiMessage)) throw new PlayServiceAccountError("project-quota", `Google Cloud has no project quota left for this account: ${error.apiMessage || "quota exceeded"}. Delete a project you no longer use (https://console.cloud.google.com/cloud-resource-manager), or run this again and pick an existing project.`, { cause: error });
-		if (/terms of service/iu.test(error.apiMessage)) throw new PlayServiceAccountError("project-create-denied", "This Google Account has not accepted the Google Cloud Terms of Service. Open https://console.cloud.google.com once to accept them, then run this again.", { cause: error });
-		if (isDenied(error) || error.apiStatus === "FAILED_PRECONDITION") throw new PlayServiceAccountError("project-create-denied", `This Google Account may not create Google Cloud projects: ${error.apiMessage || "permission denied"}. Ask your organization's admin for the Project Creator role, or run this again and pick an existing project.`, { cause: error });
+		if (error.status === 429 || error.apiStatus === "RESOURCE_EXHAUSTED" || /quota/iu.test(error.apiMessage)) throw new PlayServiceAccountError("project-quota", [
+			"Google Cloud has no project quota left for this account.",
+			error.apiMessage || "Quota exceeded.",
+			"Run this again and pick an existing project, or delete one at:",
+			"https://console.cloud.google.com/cloud-resource-manager"
+		].join("\n"), { cause: error });
+		if (/terms of service/iu.test(error.apiMessage)) throw new PlayServiceAccountError("project-create-denied", "This Google Account hasn't accepted the Google Cloud Terms of Service.\nAccept them at https://console.cloud.google.com, then run this again.", { cause: error });
+		if (isDenied(error) || error.apiStatus === "FAILED_PRECONDITION") throw new PlayServiceAccountError("project-create-denied", [
+			"This Google Account may not create Google Cloud projects.",
+			error.apiMessage || "Permission denied.",
+			"Pick an existing project, or ask an admin for the Project Creator role."
+		].join("\n"), { cause: error });
 		throw error;
 	}
 };
@@ -1455,7 +1502,7 @@ const whilePropagating = async ({ run, project, sleep, notFound = false }) => {
 		const disabled = isServiceDisabled(error);
 		if (disabled && !consumerIs(error, project)) throw clientApiDisabled(error);
 		if (!disabled && !(notFound && isNotFound(error)) || attempt >= PROPAGATION_ATTEMPTS) {
-			if (disabled) throw new PlayServiceAccountError("api-not-enabled", `Google is still enabling the APIs in ${project.projectId}: ${error.apiMessage} Wait a few minutes, then run this again.`, { cause: error });
+			if (disabled) throw new PlayServiceAccountError("api-not-enabled", `Google is still enabling the APIs in ${project.projectId}.\n${error.apiMessage}\nWait a few minutes, then run this again.`, { cause: error });
 			throw error;
 		}
 		await sleep(PROPAGATION_DELAY_MS);
@@ -1478,7 +1525,11 @@ const enableServices = async ({ google, projectId, sleep }) => {
 			sleep
 		});
 	} catch (error) {
-		if (isDenied(error) && !isServiceDisabled(error)) throw new PlayServiceAccountError("project-access-denied", `This Google Account may not enable APIs in ${projectId}: ${error.apiMessage || "permission denied"}. Pick a project you own, or ask its owner for the Editor role.`, { cause: error });
+		if (isDenied(error) && !isServiceDisabled(error)) throw new PlayServiceAccountError("project-access-denied", [
+			`This Google Account may not enable APIs in ${projectId}.`,
+			error.apiMessage || "Permission denied.",
+			"Pick a project you own, or ask its owner for the Editor role."
+		].join("\n"), { cause: error });
 		throw error;
 	}
 };
@@ -1500,7 +1551,11 @@ const ensureServiceAccount = async ({ google, project, sleep }) => {
 		})).email ?? email;
 	} catch (error) {
 		if (isConflict(error)) return email;
-		if (isDenied(error) && !isServiceDisabled(error)) throw new PlayServiceAccountError("project-access-denied", `This Google Account may not create service accounts in ${projectId}: ${error.apiMessage || "permission denied"}. Pick a project you own, or ask its owner for the Service Account Admin role.`, { cause: error });
+		if (isDenied(error) && !isServiceDisabled(error)) throw new PlayServiceAccountError("project-access-denied", [
+			`This Google Account may not create service accounts in ${projectId}.`,
+			error.apiMessage || "Permission denied.",
+			"Pick a project you own, or ask for the Service Account Admin role."
+		].join("\n"), { cause: error });
 		throw error;
 	}
 };
@@ -1572,7 +1627,11 @@ const createKey = async ({ google, project, email, sleep }) => {
 			})
 		});
 	} catch (error) {
-		if (error instanceof GoogleApiError && (error.violations.includes(KEY_CREATION_CONSTRAINT) || /disableServiceAccountKeyCreation/u.test(error.apiMessage))) throw new PlayServiceAccountError("key-creation-disabled", `An organization policy (iam.disableServiceAccountKeyCreation) forbids service account keys in ${projectId}; organizations created since 2024 enforce it by default. Ask an organization policy admin to allow keys for this project, or run this again with a project outside the organization. The service account ${email} and its Play Console access remain for the next run.`, { cause: error });
+		if (error instanceof GoogleApiError && (error.violations.includes(KEY_CREATION_CONSTRAINT) || /disableServiceAccountKeyCreation/u.test(error.apiMessage))) throw new PlayServiceAccountError("key-creation-disabled", [
+			`iam.disableServiceAccountKeyCreation forbids keys in ${projectId}.`,
+			"Ask an organization policy admin to allow keys for this project,",
+			"or run this again with a project outside the organization."
+		].join("\n"), { cause: error });
 		throw error;
 	}
 	if (!key.name || !key.privateKeyData) throw new Error("Google Cloud created the key without its JSON file.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hot-updater/android-helper",
-  "version": "1.2.0-rc.2",
+  "version": "1.2.0-rc.3",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -29,9 +29,9 @@
   "dependencies": {
     "execa": "9.5.2",
     "jszip": "^3.10.1",
-    "@hot-updater/cli-tools": "1.2.0-rc.2",
-    "@hot-updater/plugin-core": "1.2.0-rc.2",
-    "@hot-updater/protocol": "1.2.0-rc.2"
+    "@hot-updater/cli-tools": "1.2.0-rc.3",
+    "@hot-updater/plugin-core": "1.2.0-rc.3",
+    "@hot-updater/protocol": "1.2.0-rc.3"
   },
   "devDependencies": {
     "@types/node": "^20"