@hot-updater/cli-tools 1.0.8 → 1.1.0

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import { Readable } from "stream";
 import { Key as Key$1 } from "node:readline";
-import { AnyHotUpdaterPlugin, BundleSigningAdapter, ConfigInput, ConfiguredDatabase, EngineDatabase, HotUpdaterCoreApi, LocalSigningConfig, Migrator, Platform, PluginClientPlugin, RequiredDeep, SchemaGenerator, SigningConfig, StorageAdapter, StorageAdapterWith, StoragePutResult, ToolingDatabase } from "@hot-updater/plugin-core";
+import { AnyHotUpdaterPlugin, BundleSigningAdapter, ConfigInput, ConfiguredDatabase, EngineDatabase, HotUpdaterCoreApi, LocalSigningConfig, Migrator, NativeFingerprint, NativeFingerprintOptions, Platform, PluginClientPlugin, RequiredDeep, SchemaGenerator, SigningConfig, StorageAdapter, StorageAdapterWith, StoragePutResult, ToolingDatabase } from "@hot-updater/plugin-core";
 import { Readable as Readable$1, Writable } from "node:stream";
 import { ManifestArchive } from "@hot-updater/protocol";
 //#region src/BuildLogger.d.ts
@@ -510,6 +510,99 @@ declare const assertInitInputs: ({ inputs, strict }: {
 }) => void;
 declare const getMissingInitInputs: (inputs: Readonly<Record<string, string | undefined>>) => readonly string[];
 //#endregion
+//#region src/interfaceFingerprint.d.ts
+/**
+ * The engine fingerprint.json records for the interface fingerprint. Change
+ * it with any change to what is hashed or how, so the new hashes are reported
+ * as an engine change rather than a native one.
+ */
+declare const INTERFACE_FINGERPRINT_ENGINE = "hot-updater/interface@1";
+/**
+ * A native package linked into the app: its directory, when it comes from a
+ * package manager, or its name and version, when the framework declares it
+ * elsewhere (a CocoaPods or Maven dependency).
+ */
+type NativeDependency = {
+  name: string;
+  root: string;
+  /**
+   * Where autolinking finds the platform's native code when it isn't the
+   * package's `ios`/`android` folder: Android's `sourceDir`, or the
+   * folder of the iOS podspec. An Expo module can name several.
+   */
+  sourceDirs?: string[];
+  /** Prebuilt native files autolinking links, such as an Expo module's AARs. */
+  files?: string[];
+} | {
+  name: string;
+  version: string;
+};
+/**
+ * The native side JavaScript runs against: the runtime, such as
+ * `react-native@0.85.0`, and the native packages linked into the app.
+ */
+interface NativeInterface {
+  runtime: string;
+  dependencies: NativeDependency[];
+  /**
+   * Native settings that decide how JavaScript runs, such as the JavaScript
+   * engine, read from the files the framework itself reads.
+   */
+  settings?: Record<string, string>;
+}
+/**
+ * The expo-modules-autolinking an Expo app builds with, resolved from its
+ * `expo` package as the native templates resolve it.
+ */
+declare const resolveExpoAutolinking: (cwd: string) => {
+  bin: string;
+  version: string;
+  /** Whether it lists React Native packages (`react-native-config`, 1.12+). */
+  linksReactNative: boolean;
+};
+/**
+ * Reads the native interface of a React Native app from the JSON its
+ * autolinking `config` command prints: `react-native config` for React Native
+ * CLI, `rock config -p <platform>` for Rock, `expo-modules-autolinking
+ * react-native-config` for Expo. An app that links Expo modules gets them
+ * from expo-modules-autolinking as well.
+ *
+ * The engine and architecture settings come from what the project declares:
+ * `settings` when the framework records them elsewhere, such as Expo's app
+ * config, else android/gradle.properties. Nothing generated by an install,
+ * such as Podfile.lock, is read, so every machine computes the same
+ * fingerprint before and after `pod install` or `expo prebuild`.
+ */
+declare const readReactNativeInterface: ({ cwd, command, args, platform, settings: declaredSettings }: {
+  cwd: string;
+  command: string;
+  args: string[];
+  platform: Platform;
+  settings?: Record<string, string>;
+}) => Promise<NativeInterface>;
+/**
+ * Whether React Native codegen reads `file` as a spec for `platform`: the
+ * rule of its `filterJSFile`, so a fingerprint follows the specs codegen
+ * compiles and nothing else in `jsSrcsDir`.
+ */
+declare const isCodegenSpecFile: (original: string, platform: Platform) => boolean;
+/**
+ * Fingerprints the native interface JavaScript depends on, not the native
+ * build: the runtime and its native settings, each registry package as
+ * `name@version`, the codegen
+ * specs of the app and of local packages (a local package without specs by
+ * its native files), patches to those packages, `nativeVersion`, and
+ * `extraSources`. Version and build numbers, native implementations, and
+ * JavaScript-only dependencies leave it unchanged.
+ */
+declare const createInterfaceFingerprint: (cwd: string, options: NativeFingerprintOptions, nativeInterface: NativeInterface) => Promise<NativeFingerprint>;
+/**
+ * The fingerprint of a React Native CLI project: the native interface
+ * `react-native config` reports. The bare adapter's fingerprint, and the one
+ * a build adapter without its own gets.
+ */
+declare const reactNativeCliFingerprint: (cwd: string, options: NativeFingerprintOptions) => Promise<NativeFingerprint>;
+//#endregion
 //#region src/LogWriter.d.ts
 type HotUpdaterLogWriter = {
   logFilePath: string | null;
@@ -1925,4 +2018,4 @@ type TransformTemplateArgs<T extends string> = { [Key in ExtractPlaceholders<T>]
  */
 declare function transformTemplate<T extends string>(templateString: T, values: TransformTemplateArgs<T>): string;
 //#endregion
-export { AppClientCredential, AppClientPlugin, AssembleServerOptions, AssembledServer, BuildLogger, BuildLoggerConfig, BuildType, BundleSigningSession, ClientAuthSpec, ClientCredentialSpec, ConfigBuilder, ConfigBuilderScaffold, ConfigResponse, CreateHotUpdaterConfigScaffoldFromBuilderOptions, CreateHotUpdaterConfigScaffoldOptions, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, HotUpdaterConfigOptions, HotUpdaterConfigScaffold, HotUpdaterInitEnv, HotUpdaterLogWriter, ImportInfo, InitEnvFileError, InitError, InitProviderDefinition, InitProviderInputDefinition, InitProviderInputPersistence, LegacyInfrastructureError, ManagedHelperStatement, ManagedHelperStrategy, MissingInitInputsError, PromptProgress, PromptSpinner, ProviderConfig, ProvisionedClientCredential, ReactNativeMetadata, ReadPackageUpResult, RunInitOptions, ServerClientEndpoint, ServerDefinition, ServerDefinitionError, WriteHotUpdaterConfigResult, assembleServer, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, clientAuthOf, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createMigrator, createTarBrTargetFiles, createZip, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, generateClientCredential, generateSchema, generatesSchema, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, isServerDefinition, link, loadConfig, loadPlatformConfigs, log, makeEnv, moduleSpecifiersOf, p, prepareBundleSigning, printAppSetup, printBanner, provisionClientCredential, putStorageFile, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderAppImports, renderAppSetup, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, serverDefinitionOf, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeHotUpdaterFiles };
+export { AppClientCredential, AppClientPlugin, AssembleServerOptions, AssembledServer, BuildLogger, BuildLoggerConfig, BuildType, BundleSigningSession, ClientAuthSpec, ClientCredentialSpec, ConfigBuilder, ConfigBuilderScaffold, ConfigResponse, CreateHotUpdaterConfigScaffoldFromBuilderOptions, CreateHotUpdaterConfigScaffoldOptions, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, HotUpdaterConfigOptions, HotUpdaterConfigScaffold, HotUpdaterInitEnv, HotUpdaterLogWriter, INTERFACE_FINGERPRINT_ENGINE, ImportInfo, InitEnvFileError, InitError, InitProviderDefinition, InitProviderInputDefinition, InitProviderInputPersistence, LegacyInfrastructureError, ManagedHelperStatement, ManagedHelperStrategy, MissingInitInputsError, NativeDependency, NativeInterface, PromptProgress, PromptSpinner, ProviderConfig, ProvisionedClientCredential, ReactNativeMetadata, ReadPackageUpResult, RunInitOptions, ServerClientEndpoint, ServerDefinition, ServerDefinitionError, WriteHotUpdaterConfigResult, assembleServer, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, clientAuthOf, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createInterfaceFingerprint, createLogWriter, createMigrator, createTarBrTargetFiles, createZip, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, generateClientCredential, generateSchema, generatesSchema, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, isCodegenSpecFile, isServerDefinition, link, loadConfig, loadPlatformConfigs, log, makeEnv, moduleSpecifiersOf, p, prepareBundleSigning, printAppSetup, printBanner, provisionClientCredential, putStorageFile, reactNativeCliFingerprint, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, readReactNativeInterface, renderAppImports, renderAppSetup, renderImportStatements, resolveExpoAutolinking, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, serverDefinitionOf, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeHotUpdaterFiles };

package/dist/index.mjs

@@ -44983,6 +44983,474 @@ const getInitProviderEnvVars = ({ includeConsentInputs, inputs, provider }) => {
 	return env;
 };
 //#endregion
+//#region src/interfaceFingerprint.ts
+var import_out = /* @__PURE__ */ __toESM(require_out(), 1);
+var import_readYaml = require_readYaml();
+const require$2 = createRequire(import.meta.url);
+/**
+* The engine fingerprint.json records for the interface fingerprint. Change
+* it with any change to what is hashed or how, so the new hashes are reported
+* as an engine change rather than a native one.
+*/
+const INTERFACE_FINGERPRINT_ENGINE = "hot-updater/interface@1";
+const GENERATED_DIRS = [
+	"**/node_modules/**",
+	"**/build/**",
+	"**/Pods/**",
+	"**/.gradle/**",
+	"**/.cxx/**",
+	"**/DerivedData/**"
+];
+const TEST_DIRS = [
+	"**/{test,tests,Tests,androidTest,__tests__}/**",
+	"**/*Tests.swift",
+	"**/*Test.{kt,java}"
+];
+const NATIVE_FILES = {
+	ios: [
+		"*.podspec",
+		"ios/**/*.{h,hpp,hxx,m,mm,c,cc,cpp,cxx,swift}",
+		"apple/**/*.{h,hpp,hxx,m,mm,c,cc,cpp,cxx,swift}"
+	],
+	android: ["android/**/*.{java,kt,c,cc,cpp,cxx,h,hpp,hxx,gradle,kts}", "android/**/CMakeLists.txt"]
+};
+/**
+* The folders under `dir` that hold a package of their own, such as an example
+* app beside a library's podspec: their files belong to that package.
+*/
+const nestedPackages = async (dir) => (await (0, import_out.default)("**/package.json", {
+	cwd: dir,
+	ignore: [...GENERATED_DIRS]
+})).map((file) => path$1.posix.dirname(file)).filter((folder) => folder !== ".").map((folder) => `${folder}/**`);
+/** A platform's native files in a folder autolinking points at. */
+const NATIVE_SOURCE_FILES = {
+	ios: ["*.podspec", "**/*.{h,hpp,hxx,m,mm,c,cc,cpp,cxx,swift}"],
+	android: ["**/*.{java,kt,c,cc,cpp,cxx,h,hpp,hxx,gradle,kts}", "**/CMakeLists.txt"]
+};
+/**
+* The folder autolinking reads a dependency's native code from, when the
+* config names one: Android's `sourceDir`, or the iOS podspec's folder.
+*/
+const nativeSourceDir = (platform, config) => {
+	if (!config || typeof config !== "object") return void 0;
+	const value = platform === "ios" ? config.podspecPath : config.sourceDir;
+	if (typeof value !== "string") return void 0;
+	return platform === "ios" ? path$1.dirname(value) : value;
+};
+const readManifest = async (dir) => {
+	try {
+		return JSON.parse(await fs$2.readFile(path$1.join(dir, "package.json"), "utf8"));
+	} catch {
+		return null;
+	}
+};
+const parseJsonOutput = (stdout, command) => {
+	const start = stdout.indexOf("{");
+	try {
+		if (start >= 0) return JSON.parse(stdout.slice(start));
+	} catch {}
+	throw new Error(`\`${command}\` printed no JSON configuration. Check that it runs in this project.`);
+};
+const findPackageRoot = async (from, name) => {
+	let dir = from;
+	while (true) {
+		if ((await readManifest(dir))?.name === name) return dir;
+		const parent = path$1.dirname(dir);
+		if (parent === dir) return null;
+		dir = parent;
+	}
+};
+/**
+* A local Expo module's registration for `platform`, from its
+* expo-module.config.json (or legacy unimodule.json): whether it lists the platform, the platform's
+* own section, and the native features it requires. Other platforms' and
+* non-native sections, such as `web` and `devtools`, leave it alone.
+*/
+const readExpoModuleConfig = async (root, platform) => {
+	let file = null;
+	for (const name of ["expo-module.config.json", "unimodule.json"]) {
+		file = await fs$2.readFile(path$1.join(root, name), "utf8").catch(() => null);
+		if (file !== null) break;
+	}
+	if (file === null) return null;
+	const config = JSON.parse(file);
+	const names = platform === "ios" ? ["apple", "ios"] : ["android"];
+	const section = platform === "ios" ? config["apple"] ?? config["ios"] : config["android"];
+	return stableStringify({
+		listed: Array.isArray(config["platforms"]) ? names.some((name) => config["platforms"].includes(name)) : null,
+		coreFeatures: config["coreFeatures"] ?? null,
+		section: section ?? null
+	});
+};
+const atLeast = (version, minimum) => {
+	const parts = version.split(/[.+-]/u).map(Number);
+	for (let index = 0; index < 3; index++) {
+		const part = parts[index] ?? 0;
+		if (part !== minimum[index]) return part > minimum[index];
+	}
+	return true;
+};
+/**
+* The expo-modules-autolinking an Expo app builds with, resolved from its
+* `expo` package as the native templates resolve it.
+*/
+const resolveExpoAutolinking = (cwd) => {
+	const expo = path$1.dirname(require$2.resolve("expo/package.json", { paths: [cwd] }));
+	const manifest = require$2.resolve("expo-modules-autolinking/package.json", { paths: [expo] });
+	const { version = "0.0.0" } = JSON.parse(readFileSync(manifest, "utf8"));
+	return {
+		bin: path$1.join(path$1.dirname(manifest), "bin/expo-modules-autolinking.js"),
+		version,
+		linksReactNative: atLeast(version, [
+			1,
+			12,
+			0
+		])
+	};
+};
+/**
+* The Expo modules linked into a React Native app through
+* `use_expo_modules!` / `useExpoModules()`. React Native CLI's config lists
+* only the `expo` package for them, so they are read from
+* expo-modules-autolinking.
+*/
+const readExpoModules = async (cwd, platform) => {
+	const { bin, version } = resolveExpoAutolinking(cwd);
+	const name = platform === "android" ? "android" : atLeast(version, [
+		1,
+		10,
+		0
+	]) ? "apple" : "ios";
+	const result = await execa(process.execPath, [
+		bin,
+		"resolve",
+		"--platform",
+		name,
+		"--json"
+	], {
+		cwd,
+		reject: false
+	});
+	if (result.exitCode !== 0) throw new Error("`expo-modules-autolinking resolve` failed.");
+	const { modules = [] } = parseJsonOutput(result.stdout, "expo-modules-autolinking resolve");
+	return readExpoModuleDependencies(modules);
+};
+const readExpoModuleDependencies = (modules) => Promise.all(modules.flatMap((module) => {
+	const name = module.packageName;
+	if (!name) return [];
+	const sourceDirs = [
+		...(module.projects ?? []).map(({ sourceDir }) => sourceDir),
+		...(module.plugins ?? []).map(({ sourceDir }) => sourceDir),
+		...(module.pods ?? []).map(({ podspecDir }) => podspecDir)
+	].filter((dir) => Boolean(dir));
+	const files = [...(module.projects ?? []).flatMap(({ aarProjects }) => aarProjects ?? []), ...module.aarProjects ?? []].map(({ aarFilePath }) => aarFilePath).filter((file) => Boolean(file));
+	return [(async () => {
+		const anchor = sourceDirs[0] ?? files[0];
+		const root = anchor ? await findPackageRoot(anchor, name) : null;
+		return root ? {
+			name,
+			root,
+			sourceDirs,
+			...files.length > 0 ? { files } : {}
+		} : {
+			name,
+			version: module.packageVersion ?? "unknown"
+		};
+	})()];
+}));
+const GRADLE_FLAGS = [
+	"hermesEnabled",
+	"hermesV1Enabled",
+	"react.hermesV1Enabled",
+	"newArchEnabled"
+];
+/**
+* The engine and architecture flags android/gradle.properties declares. An
+* absent flag takes React Native's default, which follows its version.
+*/
+const readGradleFlags = async (androidDir) => {
+	const properties = await fs$2.readFile(path$1.join(androidDir, "gradle.properties"), "utf8").catch(() => "");
+	const flags = {};
+	const lines = [];
+	let pending = "";
+	for (const line of properties.split(/\r?\n/)) {
+		const joined = pending + (pending ? line.trimStart() : line);
+		if (/\\*$/.exec(joined)[0].length % 2 === 1) {
+			pending = joined.slice(0, -1);
+			continue;
+		}
+		lines.push(joined);
+		pending = "";
+	}
+	if (pending) lines.push(pending);
+	for (const line of lines) {
+		const trimmed = line.trim();
+		if (!trimmed || trimmed.startsWith("#") || trimmed.startsWith("!")) continue;
+		const separator = trimmed.search(/[=:\s]/);
+		const end = separator < 0 ? trimmed.length : separator;
+		const key = trimmed.slice(0, end);
+		if (GRADLE_FLAGS.includes(key)) flags[`android:${key}`] = trimmed.slice(end).replace(/^\s*[=:]?/, "").trim();
+	}
+	return flags;
+};
+/**
+* Reads the native interface of a React Native app from the JSON its
+* autolinking `config` command prints: `react-native config` for React Native
+* CLI, `rock config -p <platform>` for Rock, `expo-modules-autolinking
+* react-native-config` for Expo. An app that links Expo modules gets them
+* from expo-modules-autolinking as well.
+*
+* The engine and architecture settings come from what the project declares:
+* `settings` when the framework records them elsewhere, such as Expo's app
+* config, else android/gradle.properties. Nothing generated by an install,
+* such as Podfile.lock, is read, so every machine computes the same
+* fingerprint before and after `pod install` or `expo prebuild`.
+*/
+const readReactNativeInterface = async ({ cwd, command, args, platform, settings: declaredSettings }) => {
+	const { stdout } = await execa(command, args, { cwd });
+	const config = parseJsonOutput(stdout, [path$1.basename(command), ...args].join(" "));
+	const reactNative = config.reactNativePath ? await readManifest(config.reactNativePath) : null;
+	const dependencies = Object.values(config.dependencies ?? {}).flatMap((dependency) => dependency.name && dependency.root && dependency.platforms?.[platform] ? [{
+		name: dependency.name,
+		root: dependency.root,
+		sourceDir: nativeSourceDir(platform, dependency.platforms[platform])
+	}].map(({ sourceDir, ...rest }) => sourceDir ? {
+		...rest,
+		sourceDirs: [sourceDir]
+	} : rest) : []);
+	const expoModules = dependencies.some(({ name }) => name === "expo") ? await readExpoModules(cwd, platform) : [];
+	const names = new Set(dependencies.map(({ name }) => name));
+	const settings = declaredSettings ?? (platform === "android" ? await readGradleFlags(config.project?.android?.sourceDir ?? path$1.join(cwd, "android")) : {});
+	return {
+		runtime: `react-native@${reactNative?.version ?? "unknown"}`,
+		dependencies: [...dependencies, ...expoModules.filter(({ name }) => !names.has(name))],
+		settings
+	};
+};
+const sha256 = (data) => createHash("sha256").update(data).digest("hex");
+const toPosix = (filePath) => filePath.split(path$1.sep).join("/");
+/** JSON with object keys sorted, so key order in package.json doesn't count. */
+const stableStringify = (value) => JSON.stringify(value, (_key, entry) => entry && typeof entry === "object" && !Array.isArray(entry) ? Object.fromEntries(Object.entries(entry).sort(([a], [b]) => a < b ? -1 : 1)) : entry);
+/**
+* Whether React Native codegen reads `file` as a spec for `platform`: the
+* rule of its `filterJSFile`, so a fingerprint follows the specs codegen
+* compiles and nothing else in `jsSrcsDir`.
+*/
+const isCodegenSpecFile = (original, platform) => {
+	const file = original.replace(/\.fb(\.|$)/, "$1");
+	const name = path$1.basename(file);
+	if (!/^(Native.+|.+NativeComponent)/.test(name) || name.endsWith(".d.ts") || file.endsWith("NativeUIManager.js") || file.includes("__tests")) return false;
+	const parts = name.split(".");
+	return parts.length === 2 || parts[1] === platform;
+};
+const findCodegenSpecs = async (packageRoot, platform) => {
+	const config = (await readManifest(packageRoot))?.codegenConfig;
+	const jsSrcsDirs = (config?.libraries ?? (config ? [config] : [])).map(({ jsSrcsDir }) => jsSrcsDir).filter((dir) => Boolean(dir));
+	if (jsSrcsDirs.length === 0) return null;
+	const files = [];
+	for (const jsSrcsDir of jsSrcsDirs) files.push(...await (0, import_out.default)("**/*.{js,jsx,ts,tsx}", {
+		cwd: path$1.resolve(packageRoot, jsSrcsDir),
+		absolute: true,
+		ignore: ["**/node_modules/**"]
+	}));
+	return files.filter((file, index) => files.indexOf(file) === index).filter((file) => isCodegenSpecFile(file, platform));
+};
+const isPatchFor = (file, name) => {
+	const plus = name.replace("/", "+");
+	const underscore = name.replace("/", "__");
+	return file.startsWith(`${plus}+`) || file.startsWith(`${underscore}@`) || file.startsWith(`${underscore}+`) || file === `${underscore}.patch`;
+};
+const isWorkspaceRoot = async (dir) => {
+	if (await fs$2.access(path$1.join(dir, "pnpm-workspace.yaml")).then(() => true).catch(() => false)) return true;
+	return (await readManifest(dir))?.workspaces !== void 0;
+};
+/**
+* The folders whose patches apply to the app: its own and, in a monorepo,
+* the workspace root, where pnpm and patch-package keep them.
+*/
+const findPatchRoots = async (cwd) => {
+	let dir = cwd;
+	while (!await isWorkspaceRoot(dir)) {
+		const parent = path$1.dirname(dir);
+		if (parent === dir) return [cwd];
+		dir = parent;
+	}
+	return dir === cwd ? [cwd] : [cwd, dir];
+};
+/** `name` from a `name@version` or `name@npm:version` key. */
+const packageNameOf = (key) => {
+	const at = key.lastIndexOf("@");
+	return at > 0 ? key.slice(0, at) : key;
+};
+/**
+* The patch files a package manager records for each package in `root`:
+* pnpm's and Bun's `patchedDependencies` (in package.json or
+* pnpm-workspace.yaml) and Yarn's `patch:` resolutions.
+*/
+const findConfiguredPatches = async (root) => {
+	const manifest = await readManifest(root);
+	const workspace = await fs$2.readFile(path$1.join(root, "pnpm-workspace.yaml"), "utf8").then((contents) => (0, import_readYaml.parseYaml)(contents)).catch(() => null);
+	const patches = Object.entries({
+		...manifest?.patchedDependencies,
+		...manifest?.pnpm?.patchedDependencies,
+		...workspace?.patchedDependencies
+	}).map(([key, file]) => ({
+		name: packageNameOf(key),
+		file: path$1.resolve(root, file)
+	}));
+	for (const [key, value] of [
+		...Object.entries(manifest?.resolutions ?? {}),
+		...Object.entries(manifest?.dependencies ?? {}),
+		...Object.entries(manifest?.devDependencies ?? {}),
+		...Object.entries(manifest?.optionalDependencies ?? {})
+	]) {
+		const hash = value.lastIndexOf("#");
+		if (!value.startsWith("patch:") || hash < 0) continue;
+		const file = value.slice(hash + 1).split("::")[0];
+		patches.push({
+			name: packageNameOf(key),
+			file: path$1.resolve(root, file.replace(/^~\//, ""))
+		});
+	}
+	return patches;
+};
+/**
+* Fingerprints the native interface JavaScript depends on, not the native
+* build: the runtime and its native settings, each registry package as
+* `name@version`, the codegen
+* specs of the app and of local packages (a local package without specs by
+* its native files), patches to those packages, `nativeVersion`, and
+* `extraSources`. Version and build numbers, native implementations, and
+* JavaScript-only dependencies leave it unchanged.
+*/
+const createInterfaceFingerprint = async (cwd, options, nativeInterface) => {
+	const { platform } = options;
+	const sources = /* @__PURE__ */ new Map();
+	const addContents = (id, contents, reason) => {
+		sources.set(`contents:${id}`, {
+			type: "contents",
+			id,
+			contents,
+			reasons: [reason],
+			hash: sha256(contents)
+		});
+	};
+	const addFile = async (absolutePath, reason) => {
+		const filePath = toPosix(path$1.relative(cwd, absolutePath));
+		sources.set(`file:${filePath}`, {
+			type: "file",
+			filePath,
+			reasons: [reason],
+			hash: sha256(await fs$2.readFile(absolutePath))
+		});
+	};
+	addContents("runtime", nativeInterface.runtime, "runtime");
+	for (const [key, value] of Object.entries(nativeInterface.settings ?? {})) addContents(`setting:${key}`, value, "native-setting");
+	const addCodegenConfig = async (root) => {
+		const config = (await readManifest(root))?.codegenConfig;
+		if (config) {
+			const other = platform === "ios" ? "android" : "ios";
+			const ownSection = (section) => {
+				const { [other]: _other, ...own } = section;
+				return own;
+			};
+			const own = ownSection(config);
+			if (Array.isArray(own.libraries)) own.libraries = own.libraries.map((library) => library && typeof library === "object" ? ownSection(library) : library);
+			addContents(`codegen-config:${toPosix(path$1.relative(cwd, root)) || "."}`, stableStringify(own), "codegen-config");
+		}
+	};
+	await addCodegenConfig(cwd);
+	for (const specFile of await findCodegenSpecs(cwd, platform) ?? []) await addFile(specFile, "app-codegen-spec");
+	for (const dependency of nativeInterface.dependencies) {
+		if ("version" in dependency) {
+			addContents(`dependency:${dependency.name}`, `${dependency.name}@${dependency.version}`, "native-dependency");
+			continue;
+		}
+		const root = await fs$2.realpath(dependency.root);
+		if (root.split(path$1.sep).includes("node_modules")) {
+			const version = (await readManifest(root))?.version ?? "unknown";
+			addContents(`dependency:${dependency.name}`, `${dependency.name}@${version}`, "native-dependency");
+			continue;
+		}
+		await addCodegenConfig(root);
+		const found = await findCodegenSpecs(root, platform);
+		const specs = found && found.length > 0 ? found : null;
+		const files = specs ?? [...await (0, import_out.default)([...NATIVE_FILES[platform]], {
+			cwd: root,
+			absolute: true,
+			ignore: [...GENERATED_DIRS, ...TEST_DIRS]
+		})];
+		const expoModuleConfig = await readExpoModuleConfig(root, platform);
+		if (expoModuleConfig !== null) addContents(`expo-module-config:${dependency.name}`, expoModuleConfig, "local-dependency-expo-module");
+		for (const file of dependency.files ?? []) {
+			const real = await fs$2.realpath(file).catch(() => void 0);
+			if (real) await addFile(real, "local-dependency-native");
+		}
+		if (!specs) for (const dir of dependency.sourceDirs ?? []) {
+			const sourceDir = await fs$2.realpath(dir).catch(() => void 0);
+			if (!sourceDir) continue;
+			files.push(...await (0, import_out.default)([...NATIVE_SOURCE_FILES[platform]], {
+				cwd: sourceDir,
+				absolute: true,
+				ignore: [
+					...GENERATED_DIRS,
+					...TEST_DIRS,
+					...await nestedPackages(sourceDir)
+				]
+			}));
+		}
+		for (const file of new Set(files)) await addFile(file, specs ? "local-dependency-codegen-spec" : "local-dependency-native");
+	}
+	const patchedNames = ["react-native", ...nativeInterface.dependencies.map(({ name }) => name)];
+	for (const root of await findPatchRoots(cwd)) {
+		const dir = path$1.join(root, "patches");
+		const patches = await fs$2.readdir(dir).catch(() => []);
+		for (const patch of patches) if (patchedNames.some((name) => isPatchFor(patch, name))) await addFile(path$1.join(dir, patch), "native-dependency-patch");
+		for (const { name, file } of await findConfiguredPatches(root)) if (await fs$2.access(file).then(() => true, () => false) && patchedNames.includes(name)) await addFile(file, "native-dependency-patch");
+	}
+	if (options.nativeVersion !== void 0) addContents("nativeVersion", String(options.nativeVersion), "config");
+	const extraSources = Array.isArray(options.extraSources) ? options.extraSources : options.extraSources?.[platform] ?? [];
+	if (extraSources.length > 0) {
+		const files = await (0, import_out.default)(extraSources, {
+			cwd,
+			absolute: true,
+			dot: true,
+			ignore: [...GENERATED_DIRS, ...options.ignorePaths ?? []],
+			onlyFiles: false,
+			markDirectories: true
+		});
+		for (const match of files) {
+			const prefix = toPosix(path$1.relative(cwd, match)).replace(/\/$/, "");
+			const matches = match.endsWith("/") ? await (0, import_out.default)(prefix ? `${prefix}/**/*` : "**/*", {
+				cwd,
+				absolute: true,
+				dot: true,
+				ignore: [...GENERATED_DIRS, ...options.ignorePaths ?? []]
+			}) : [match];
+			for (const file of matches) await addFile(file, "extra-source");
+		}
+	}
+	const sorted = [...sources.entries()].sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([, source]) => source);
+	const digest = createHash("sha256").update(`${INTERFACE_FINGERPRINT_ENGINE}\0`);
+	for (const source of sorted) digest.update(`${source.type}\0${source.type === "contents" ? source.id : source.filePath}\0${source.hash}\0`);
+	return {
+		engine: INTERFACE_FINGERPRINT_ENGINE,
+		hash: digest.digest("hex"),
+		sources: sorted
+	};
+};
+/**
+* The fingerprint of a React Native CLI project: the native interface
+* `react-native config` reports. The bare adapter's fingerprint, and the one
+* a build adapter without its own gets.
+*/
+const reactNativeCliFingerprint = async (cwd, options) => createInterfaceFingerprint(cwd, options, await readReactNativeInterface({
+	cwd,
+	command: process.execPath,
+	args: [path$1.join(path$1.dirname(require$2.resolve("react-native/package.json", { paths: [cwd] })), "cli.js"), "config"],
+	platform: options.platform
+}));
+//#endregion
 //#region ../../node_modules/.pnpm/es-toolkit@1.47.0/node_modules/es-toolkit/dist/predicate/isPlainObject.mjs
 /**
 * Checks if a given value is a plain object.
@@ -45116,7 +45584,6 @@ function mergeWith(target, source, merge) {
 }
 //#endregion
 //#region src/loadConfig.ts
-var import_out = /* @__PURE__ */ __toESM(require_out(), 1);
 const getDefaultPlatformConfig = () => {
 	let infoPlistPaths = [];
 	try {
@@ -45564,4 +46031,4 @@ function transformTemplate(templateString, values) {
 	return result;
 }
 //#endregion
-export { BuildLogger, ConfigBuilder, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, InitEnvFileError, InitError, LegacyInfrastructureError, MissingInitInputsError, ServerDefinitionError, assembleServer, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, clientAuthOf, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createLogWriter, createMigrator, createTarBrTargetFiles, createZip, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, generateClientCredential, generateSchema, generatesSchema, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, isServerDefinition, link, loadConfig, loadPlatformConfigs, log, makeEnv, moduleSpecifiersOf, p, prepareBundleSigning, printAppSetup, printBanner, provisionClientCredential, putStorageFile, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, renderAppImports, renderAppSetup, renderImportStatements, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, serverDefinitionOf, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeHotUpdaterFiles };
+export { BuildLogger, ConfigBuilder, HOT_UPDATER_SERVER_PACKAGE_VERSION_ENV, HotUpdateDirUtil, INTERFACE_FINGERPRINT_ENGINE, InitEnvFileError, InitError, LegacyInfrastructureError, MissingInitInputsError, ServerDefinitionError, assembleServer, assertInfrastructureGenerationAtUrl, assertInfrastructureGenerationPayload, assertInitInputs, assertInitProviderInputs, banner, clientAuthOf, typedColors as colors, confirmInitInputPersistence, copyDirToTmp, createHotUpdaterConfigScaffold, createHotUpdaterConfigScaffoldFromBuilder, createInterfaceFingerprint, createLogWriter, createMigrator, createTarBrTargetFiles, createZip, decryptJson, defineInitProvider, encryptJson, ensureInstallPackages, generateClientCredential, generateSchema, generatesSchema, getAndroidSdkPath, getBundleSigningPublicKey, getCwd, getHotUpdaterEnvValue, getHotUpdaterInitInputEnv, getInitProviderEnvVars, getInitProviderTextPromptValues, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, getReactNativeMetadatas, getStorageFileByteSize, isCodegenSpecFile, isServerDefinition, link, loadConfig, loadPlatformConfigs, log, makeEnv, moduleSpecifiersOf, p, prepareBundleSigning, printAppSetup, printBanner, provisionClientCredential, putStorageFile, reactNativeCliFingerprint, readBundleSigningPublicKeyFile, readHotUpdaterEnv, readHotUpdaterInitEnv, readPackageUp, readReactNativeInterface, renderAppImports, renderAppSetup, renderImportStatements, resolveExpoAutolinking, resolveHotUpdaterServerVersion, resolveInitProviderInput, resolveInitProviderInputs, resolvePackageVersion, serverDefinitionOf, shouldAutoSelectOnlyInitResource, stripAnsi, transformEnv, transformTemplate, writeHotUpdaterConfig, writeHotUpdaterFiles };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hot-updater/cli-tools",
-  "version": "1.0.8",
+  "version": "1.1.0",
   "type": "module",
   "engines": {
     "node": ">=20.19.0"
@@ -49,9 +49,9 @@
     "oxc-parser": "0.141.0",
     "oxc-transform": "0.141.0",
     "unconfig": "7.5.0",
-    "@hot-updater/protocol": "1.0.8",
-    "@hot-updater/plugin-core": "1.0.8",
-    "@hot-updater/server": "1.0.8"
+    "@hot-updater/protocol": "1.1.0",
+    "@hot-updater/plugin-core": "1.1.0",
+    "@hot-updater/server": "1.1.0"
   },
   "devDependencies": {
     "@clack/prompts": "1.7.0",
@@ -65,7 +65,7 @@
     "tar": "^7.5.16",
     "verkit": "0.4.0",
     "workspace-tools": "^0.41.7",
-    "@hot-updater/test-utils": "1.0.8"
+    "@hot-updater/test-utils": "1.1.0"
   },
   "inlinedDependencies": {
     "@babel/code-frame": "7.29.0",