@hot-updater/cli-tools 1.0.0-rc.0 → 1.0.0-rc.1

package/dist/index.d.mts

@@ -47,10 +47,13 @@ interface BundleSigningSession {
   readonly publicKey: string;
   readonly signFileHash: (fileHash: string) => Promise<string>;
 }
+declare const readBundleSigningPublicKeyFile: (publicKeyPath: string, options?: {
+  readonly cwd?: string;
+}) => Promise<string>;
 declare const prepareBundleSigning: (signing: SigningConfig | undefined, options?: {
   readonly cwd?: string;
 }) => Promise<BundleSigningSession | null>;
-/** Resolves the native trust anchor without calling a remote signing provider. */
+/** Resolves the public identity of the configured bundle signer. */
 declare const getBundleSigningPublicKey: (signing: SigningConfig | undefined, options?: {
   readonly cwd?: string;
 }) => Promise<string | null>;
@@ -1842,4 +1845,4 @@ type TransformTemplateArgs<T extends string> = { [Key in ExtractPlaceholders<T>]
  */
 declare function transformTemplate<T extends string>(templateString: T, values: TransformTemplateArgs<T>): string;
 //#endregion
-export { BuildLogger, BuildLoggerConfig, BuildType, BundleSigningSession, ConfigBuilder, ConfigBuilderScaffold, ConfigResponse, CreateHotUpdaterConfigScaffoldFromBuilderOptions, CreateHotUpdaterConfigScaffoldOptions, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, HotUpdaterConfigOptions, HotUpdaterConfigScaffold, HotUpdaterInitEnv, HotUpdaterLogWriter, IConfigBuilder, ImportInfo, InitEnvFileError, InitError, InitProviderDefinition, InitProviderInputDefinition, InitProviderInputPersistence, LEGACY_BUNDLE_ERROR, LegacyInfrastructureError, ManagedHelperStatement, ManagedHelperStrategy, MissingInitInputsError, PromptProgress, PromptSpinner, ProviderConfig, ReactNativeMetadata, ReadPackageUpResult, RunInitOptions, WriteHotUpdaterConfigResult, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createCopiedBundleArchive, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createTarBr, createTarBrTargetFiles, createTarGz, createTarGzTargetFiles, createZip, createZipTargetFiles, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, formatApiKeyNote, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, link, loadConfig, log, makeEnv, p, prepareBundleSigning, printBanner, putStorageFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeStorageFile, writeStorageResponseFile };
+export { BuildLogger, BuildLoggerConfig, BuildType, BundleSigningSession, ConfigBuilder, ConfigBuilderScaffold, ConfigResponse, CreateHotUpdaterConfigScaffoldFromBuilderOptions, CreateHotUpdaterConfigScaffoldOptions, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, HotUpdaterConfigOptions, HotUpdaterConfigScaffold, HotUpdaterInitEnv, HotUpdaterLogWriter, IConfigBuilder, ImportInfo, InitEnvFileError, InitError, InitProviderDefinition, InitProviderInputDefinition, InitProviderInputPersistence, LEGACY_BUNDLE_ERROR, LegacyInfrastructureError, ManagedHelperStatement, ManagedHelperStrategy, MissingInitInputsError, PromptProgress, PromptSpinner, ProviderConfig, ReactNativeMetadata, ReadPackageUpResult, RunInitOptions, WriteHotUpdaterConfigResult, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createCopiedBundleArchive, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createTarBr, createTarBrTargetFiles, createTarGz, createTarGzTargetFiles, createZip, createZipTargetFiles, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, formatApiKeyNote, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, link, loadConfig, log, makeEnv, p, prepareBundleSigning, printBanner, putStorageFile, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeStorageFile, writeStorageResponseFile };

package/dist/index.mjs

@@ -24521,7 +24521,7 @@ const loadPrivateKey = async (privateKeyPath) => {
 		throw new Error("Failed to load the local bundle signing private key.");
 	}
 };
-const createLocalSigningPlugin = ({ privateKeyPath, publicKeyPath }) => {
+const createLocalSigningPlugin = ({ privateKeyPath }) => {
 	const privateKeys = /* @__PURE__ */ new Map();
 	const getPrivateKey = (cwd = process.cwd()) => {
 		const resolvedPath = resolvePath$1(cwd, privateKeyPath);
@@ -24536,7 +24536,6 @@ const createLocalSigningPlugin = ({ privateKeyPath, publicKeyPath }) => {
 	};
 	return {
 		name: "localSigning",
-		publicKeyPath,
 		async getPublicKey({ cwd } = {}) {
 			const privateKey = await getPrivateKey(cwd);
 			return { publicKey: crypto$1.createPublicKey(privateKey).export({
@@ -24564,21 +24563,18 @@ const normalizeSigningConfig = (signing) => {
 	].some((key) => Reflect.has(signing, key));
 	if ((hasPrivateKeyPath || hasEnabled) && hasPluginMembers) throw new Error("Bundle signing config cannot combine local signing fields with signing plugin fields.");
 	if (!hasPluginMembers) {
-		if (Object.keys(signing).some((key) => key !== "enabled" && key !== "privateKeyPath" && key !== "publicKeyPath")) throw new Error("Local bundle signing accepts only enabled, privateKeyPath and publicKeyPath.");
+		if (Object.keys(signing).some((key) => key !== "enabled" && key !== "privateKeyPath")) throw new Error("Local bundle signing accepts only enabled and privateKeyPath.");
 		const enabled = Reflect.get(signing, "enabled");
-		if (enabled === false || enabled === void 0) return void 0;
+		if (enabled === false) return void 0;
 		if (enabled !== true) throw invalidSigningConfig();
 		const privateKeyPath = Reflect.get(signing, "privateKeyPath");
-		const publicKeyPath = Reflect.get(signing, "publicKeyPath");
 		if (typeof privateKeyPath !== "string" || !privateKeyPath.trim()) throw new Error("Enabled local bundle signing requires privateKeyPath.");
-		if (publicKeyPath !== void 0 && (typeof publicKeyPath !== "string" || !publicKeyPath.trim())) throw new Error("Local bundle signing publicKeyPath must be a non-empty path when provided.");
 		return {
 			enabled: true,
-			privateKeyPath,
-			...publicKeyPath === void 0 ? {} : { publicKeyPath }
+			privateKeyPath
 		};
 	}
-	if (typeof Reflect.get(signing, "name") !== "string" || typeof Reflect.get(signing, "publicKeyPath") !== "string" || !Reflect.get(signing, "publicKeyPath").trim() || typeof Reflect.get(signing, "getPublicKey") !== "function" || typeof Reflect.get(signing, "sign") !== "function") throw invalidSigningConfig();
+	if (typeof Reflect.get(signing, "name") !== "string" || typeof Reflect.get(signing, "getPublicKey") !== "function" || typeof Reflect.get(signing, "sign") !== "function") throw invalidSigningConfig();
 	return signing;
 };
 //#endregion
@@ -24600,20 +24596,10 @@ const exportPublicKey = (publicKey) => publicKey.export({
 	type: "spki",
 	format: "pem"
 }).toString();
-const publicKeysMatch = (left, right) => {
-	const leftDer = left.export({
-		type: "spki",
-		format: "der"
-	});
-	const rightDer = right.export({
-		type: "spki",
-		format: "der"
-	});
-	return leftDer.byteLength === rightDer.byteLength && crypto$1.timingSafeEqual(leftDer, rightDer);
-};
-const readKeyFile = async (cwd, filePath) => {
+const readBundleSigningPublicKeyFile = async (publicKeyPath, options = {}) => {
+	if (!publicKeyPath.trim()) throw new Error("Bundle signing public key path is required.");
 	try {
-		return await fs$3.readFile(resolvePath(cwd, filePath), "utf8");
+		return exportPublicKey(parseRsaPublicKey(await fs$3.readFile(resolvePath(options.cwd ?? getCwd(), publicKeyPath), "utf8")));
 	} catch {
 		throw new Error("Failed to read the bundle signing public key file.");
 	}
@@ -24654,8 +24640,7 @@ const createMemoizedSigner = ({ publicKey, sign }) => {
 	};
 };
 const preparePluginSigning = async (signing, cwd) => {
-	const [configuredPublicKeyPEM, providerPublicKey] = await Promise.all([signing.publicKeyPath === void 0 ? void 0 : readKeyFile(cwd, signing.publicKeyPath), getProviderPublicKey(signing, cwd)]);
-	if (!publicKeysMatch(configuredPublicKeyPEM === void 0 ? providerPublicKey : parseRsaPublicKey(configuredPublicKeyPEM), providerPublicKey)) throw new Error("Bundle signing provider public key does not match publicKeyPath.");
+	const providerPublicKey = await getProviderPublicKey(signing, cwd);
 	return {
 		name: signing.name,
 		publicKey: exportPublicKey(providerPublicKey),
@@ -24676,19 +24661,12 @@ const prepareBundleSigning = async (signing, options = {}) => {
 	const cwd = options.cwd ?? getCwd();
 	return preparePluginSigning("enabled" in normalized ? createLocalSigningPlugin(normalized) : normalized, cwd);
 };
-/** Resolves the native trust anchor without calling a remote signing provider. */
+/** Resolves the public identity of the configured bundle signer. */
 const getBundleSigningPublicKey = async (signing, options = {}) => {
 	const normalized = normalizeSigningConfig(signing);
 	if (!normalized) return null;
 	const cwd = options.cwd ?? getCwd();
-	if (normalized.publicKeyPath !== void 0) return exportPublicKey(parseRsaPublicKey(await readKeyFile(cwd, normalized.publicKeyPath)));
-	if ("enabled" in normalized) try {
-		const { publicKey } = await createLocalSigningPlugin(normalized).getPublicKey({ cwd });
-		return exportPublicKey(parseRsaPublicKey(publicKey));
-	} catch {
-		return exportPublicKey(parseRsaPublicKey(await readKeyFile(cwd, path$1.join(path$1.dirname(normalized.privateKeyPath), "public-key.pem"))));
-	}
-	throw new Error("Bundle signing plugins require publicKeyPath.");
+	return exportPublicKey(await getProviderPublicKey("enabled" in normalized ? createLocalSigningPlugin(normalized) : normalized, cwd));
 };
 //#endregion
 //#region src/ConfigBuilder.ts
@@ -43916,7 +43894,7 @@ const missingDatabase = createDatabasePlugin({
 				throw new Error("database plugin is required");
 			}
 		},
-		analytics: {
+		insights: {
 			append: async () => {
 				throw new Error("database plugin is required");
 			},
@@ -44592,4 +44570,4 @@ function transformTemplate(templateString, values) {
 	return result;
 }
 //#endregion
-export { BuildLogger, ConfigBuilder, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, InitEnvFileError, InitError, LEGACY_BUNDLE_ERROR, LegacyInfrastructureError, MissingInitInputsError, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createCopiedBundleArchive, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createTarBr, createTarBrTargetFiles, createTarGz, createTarGzTargetFiles, createZip, createZipTargetFiles, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, formatApiKeyNote, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, link, loadConfig, log, makeEnv, p, prepareBundleSigning, printBanner, putStorageFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeStorageFile, writeStorageResponseFile };
+export { BuildLogger, ConfigBuilder, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, InitEnvFileError, InitError, LEGACY_BUNDLE_ERROR, LegacyInfrastructureError, MissingInitInputsError, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createCopiedBundleArchive, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createTarBr, createTarBrTargetFiles, createTarGz, createTarGzTargetFiles, createZip, createZipTargetFiles, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, formatApiKeyNote, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, link, loadConfig, log, makeEnv, p, prepareBundleSigning, printBanner, putStorageFile, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeStorageFile, writeStorageResponseFile };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hot-updater/cli-tools",
-  "version": "1.0.0-rc.0",
+  "version": "1.0.0-rc.1",
   "type": "module",
   "engines": {
     "node": ">=20.19.0"
@@ -49,7 +49,7 @@
     "oxc-parser": "0.141.0",
     "oxc-transform": "0.141.0",
     "unconfig": "7.5.0",
-    "@hot-updater/plugin-core": "1.0.0-rc.0",
+    "@hot-updater/plugin-core": "1.0.0-rc.1",
     "@hot-updater/core": "1.0.0-rc.0"
   },
   "devDependencies": {
@@ -64,7 +64,7 @@
     "tar": "^7.5.16",
     "verkit": "0.3.2",
     "workspace-tools": "^0.41.7",
-    "@hot-updater/test-utils": "1.0.0-rc.0"
+    "@hot-updater/test-utils": "1.0.0-rc.1"
   },
   "inlinedDependencies": {
     "@babel/code-frame": "7.29.0",