@iyexin/mio-android-tools 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,30 @@
+MIT License
+
+Copyright (c) 2026 Mio contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+Third-party components (Flutter/Dart, webview_flutter, webview_flutter_windows,
+window_manager, file_selector, url_launcher, path_provider, @electron/asar,
+resedit, apksigner/zipalign, and the Dart/npm dependencies listed in
+packages/*/THIRD_PARTY_NOTICES.md) keep their own licenses. The prebuilt
+Android/Windows templates in packages/cli/templates embed the Flutter engine;
+review those licenses before redistributing an app built with Mio.

package/README.md

@@ -1,3 +1,87 @@
-# Temporary Holding Version
+# @iyexin/mio-android-tools
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Android APK 工具链封装。负责：
+
+- 发现本机 Android SDK build-tools / Java，或使用 Mio 下载的工具包；
+- `zipalign`（4KB / 16KB page size）；
+- `apksigner` 签名（v1/v2/v3）；
+- `apksigner verify` 解析；
+- 调试 keystore 生成。
+
+## 为什么需要它
+
+Android APK 必须签名；targetSdk 30+ 只带 v1 的 APK 在 Android 11+ 无法安装。
+`apksigner` 是目前最成熟的 v2+ 签名实现，但它需要 JVM。Mio 的策略是：
+
+1. 优先复用系统 Java + Android SDK；
+2. 没有时下载最小 JRE + `apksigner.jar` + `zipalign` 的工具包；
+3. CLI 不要求开发者安装 Android Studio。
+
+## 用法
+
+```ts
+import { discoverAndroidTools, signApk } from "@iyexin/mio-android-tools";
+
+const tools = await discoverAndroidTools();
+
+const result = await signApk({
+  tools,
+  input: "app-unsigned.apk",
+  output: "app-release.apk",
+  keystore: "release.p12",
+  keystorePassword: process.env.MIO_KS_PASS!,
+  keyAlias: "release",
+  minSdkVersion: 24,
+  pageSize: 16,
+});
+
+console.log(result.verify.v2, result.verify.v3);
+```
+
+`signApk` 的固定顺序是：**zipalign → apksigner sign → apksigner verify**。
+`apksigner` 不负责对齐，`zipalign` 不能省。
+
+## 工具包（无 Android SDK 的机器）
+
+`installToolBundle` 负责下载、SHA-256 校验、解压和缓存：
+
+```ts
+import { installToolBundle } from "@iyexin/mio-android-tools";
+
+const installed = await installToolBundle({
+  manifest: "https://example.com/mio-android-tools.json",
+  version: "0.1.0",
+  // 默认读取 HTTPS_PROXY / HTTP_PROXY / ALL_PROXY
+  proxy: "http://127.0.0.1:7897",
+});
+
+const result = await signApk({
+  tools: installed.tools,
+  ...
+});
+```
+
+默认缓存目录：`~/.mio/tools/android/<version>/<platform>/`。
+缓存命中条件：版本、平台、SHA-256 都匹配。
+
+### 构建工具包
+
+```bash
+node scripts/build-bundle.mjs \
+  --jre <jre-dir> \
+  --apksigner <build-tools>/lib/apksigner.jar \
+  --zipalign <build-tools>/zipalign.exe \
+  --out artifacts/mio-android-tools-win32-x64.tar.gz
+```
+
+脚本会打印 manifest 里所需的 `sha256` 和 `size`。
+
+## 测试
+
+```bash
+pnpm --filter @iyexin/mio-android-tools test
+```
+
+测试会使用本机 Android SDK/JAVA_HOME；没有配置时自动跳过签名集成测试。
+`test/fixtures/base.apk` 是只用于签名测试的最小 APK，`test.p12` 是测试密钥，
+都不是发布材料。

package/dist/apk.d.ts

@@ -0,0 +1,23 @@
+import { type ManifestPatch } from "./axml.js";
+export interface InjectApkOptions {
+    templateApk: string;
+    asar: string;
+    output: string;
+    manifest: ManifestPatch;
+    /** Optional source image used to replace the template's launcher icons. */
+    icon?: string;
+}
+export interface InjectApkResult {
+    output: string;
+    entries: number;
+    asarBytes: number;
+}
+declare const SIGNATURE_ENTRY: RegExp;
+/**
+ * Inject app.asar into a prebuilt Flutter APK and patch its manifest.
+ *
+ * This intentionally does not sign. The caller must run zipalign + apksigner
+ * afterwards (see signApk in @iyexin/mio-android-tools).
+ */
+export declare function injectApk(options: InjectApkOptions): Promise<InjectApkResult>;
+export { SIGNATURE_ENTRY };

package/dist/apk.js

@@ -0,0 +1,109 @@
+import { createWriteStream } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { pipeline } from "node:stream/promises";
+import { Buffer } from "node:buffer";
+import yauzl from "yauzl";
+import yazl from "yazl";
+import { patchManifestAxml } from "./axml.js";
+const SIGNATURE_ENTRY = /^META-INF\/(?:MANIFEST\.MF|.*\.(?:SF|RSA|DSA|EC))$/i;
+/**
+ * Inject app.asar into a prebuilt Flutter APK and patch its manifest.
+ *
+ * This intentionally does not sign. The caller must run zipalign + apksigner
+ * afterwards (see signApk in @iyexin/mio-android-tools).
+ */
+export async function injectApk(options) {
+    const entries = await readEntries(options.templateApk);
+    const asar = await readFile(options.asar);
+    if (asar.length === 0)
+        throw new Error("app.asar is empty");
+    const manifestEntry = entries.find((entry) => entry.name === "AndroidManifest.xml");
+    if (!manifestEntry)
+        throw new Error("template APK has no AndroidManifest.xml");
+    manifestEntry.data = patchManifestAxml(manifestEntry.data, options.manifest);
+    if (options.icon) {
+        await replaceLauncherIcons(entries, options.icon);
+    }
+    const outputEntries = entries.filter((entry) => {
+        if (SIGNATURE_ENTRY.test(entry.name))
+            return false;
+        if (entry.name === "assets/mio/app.asar")
+            return false;
+        return true;
+    });
+    const zip = new yazl.ZipFile();
+    for (const entry of outputEntries) {
+        zip.addBuffer(entry.data, entry.name, {
+            compress: entry.compress,
+            mtime: new Date(0),
+        });
+    }
+    zip.addBuffer(asar, "assets/mio/app.asar", {
+        compress: true,
+        mtime: new Date(0),
+    });
+    zip.end();
+    await pipeline(zip.outputStream, createWriteStream(options.output));
+    return {
+        output: options.output,
+        entries: outputEntries.length + 1,
+        asarBytes: asar.length,
+    };
+}
+function readEntries(path) {
+    return new Promise((resolve, reject) => {
+        yauzl.open(path, { lazyEntries: true, autoClose: true }, (error, zip) => {
+            if (error || !zip) {
+                reject(error ?? new Error("cannot open APK"));
+                return;
+            }
+            const entries = [];
+            zip.on("error", reject);
+            zip.on("end", () => resolve(entries));
+            zip.on("entry", (entry) => {
+                if (entry.fileName.endsWith("/")) {
+                    zip.readEntry();
+                    return;
+                }
+                if (entry.compressionMethod !== 0 && entry.compressionMethod !== 8) {
+                    reject(new Error(`unsupported ZIP compression method: ${entry.compressionMethod}`));
+                    return;
+                }
+                zip.openReadStream(entry, (streamError, stream) => {
+                    if (streamError || !stream) {
+                        reject(streamError ?? new Error(`cannot read ${entry.fileName}`));
+                        return;
+                    }
+                    const chunks = [];
+                    stream.on("data", (chunk) => chunks.push(chunk));
+                    stream.on("error", reject);
+                    stream.on("end", () => {
+                        entries.push({
+                            name: entry.fileName.replaceAll("\\", "/"),
+                            data: Buffer.concat(chunks),
+                            compress: entry.compressionMethod !== 0,
+                        });
+                        zip.readEntry();
+                    });
+                });
+            });
+            zip.readEntry();
+        });
+    });
+}
+export { SIGNATURE_ENTRY };
+async function replaceLauncherIcons(entries, iconPath) {
+    const { default: sharp } = await import("sharp");
+    const icon = await readFile(iconPath);
+    const launcher = entries.filter((entry) => entry.name.startsWith("res/") && entry.name.endsWith(".png"));
+    for (const entry of launcher) {
+        const metadata = await sharp(entry.data).metadata();
+        if (!metadata.width || !metadata.height)
+            continue;
+        entry.data = await sharp(icon)
+            .resize(metadata.width, metadata.height, { fit: "cover" })
+            .png()
+            .toBuffer();
+    }
+}
+//# sourceMappingURL=apk.js.map

package/dist/apk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apk.js","sourceRoot":"","sources":["../src/apk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAsB,MAAM,WAAW,CAAC;AAuBlE,MAAM,eAAe,GAAG,qDAAqD,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAE5D,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;IACpF,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/E,aAAa,CAAC,IAAI,GAAG,iBAAiB,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE7E,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB;YAAE,OAAO,KAAK,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,qBAAqB,EAAE;QACzC,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;KACnB,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,EAAE,CAAC;IAEV,MAAM,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;QACjC,SAAS,EAAE,IAAI,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtE,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClB,MAAM,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAe,EAAE,CAAC;YAC/B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACxB,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,GAAG,CAAC,SAAS,EAAE,CAAC;oBAChB,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,EAAE,CAAC;oBACnE,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;oBACpF,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;oBAChD,IAAI,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC;wBAC3B,MAAM,CAAC,WAAW,IAAI,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;wBAClE,OAAO;oBACT,CAAC;oBACD,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBACzD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC3B,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBACpB,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC;4BAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;4BAC3B,QAAQ,EAAE,KAAK,CAAC,iBAAiB,KAAK,CAAC;yBACxC,CAAC,CAAC;wBACH,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,KAAK,UAAU,oBAAoB,CAAC,OAAmB,EAAE,QAAgB;IACvE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CACxE,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,SAAS;QAClD,KAAK,CAAC,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;aAC3B,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACzD,GAAG,EAAE;aACL,QAAQ,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/apksigner.d.ts

@@ -0,0 +1,48 @@
+import type { AndroidTools } from "./discover.js";
+export interface SignApkWithApksignerOptions {
+    input: string;
+    output: string;
+    keystore: string;
+    keystorePassword: string;
+    keyAlias: string;
+    keyPassword?: string;
+    minSdkVersion?: number;
+    v1?: boolean;
+    v2?: boolean;
+    v3?: boolean;
+    verbose?: boolean;
+}
+export interface SignerCertificate {
+    signer: number;
+    dn?: string;
+    sha256?: string;
+    sha1?: string;
+    md5?: string;
+    keyAlgorithm?: string;
+    keySizeBits?: number;
+}
+export interface VerifyResult {
+    verified: boolean;
+    v1: boolean;
+    v2: boolean;
+    v3: boolean;
+    v4: boolean;
+    signers: SignerCertificate[];
+    exitCode: number;
+    raw: string;
+}
+/**
+ * Parse `apksigner verify --verbose --print-certs` output.
+ * Exported so the parser can be unit tested without a JVM.
+ */
+export declare function parseVerifyOutput(output: string, exitCode?: number): VerifyResult;
+export declare function buildSignArgs(options: SignApkWithApksignerOptions): string[];
+export declare function signApkWithApksigner(tools: AndroidTools, options: SignApkWithApksignerOptions): Promise<{
+    stdout: string;
+    stderr: string;
+}>;
+export interface VerifyApkOptions {
+    minSdkVersion?: number;
+    printCerts?: boolean;
+}
+export declare function verifyApkWithApksigner(tools: AndroidTools, apk: string, options?: VerifyApkOptions): Promise<VerifyResult>;

package/dist/apksigner.js

@@ -0,0 +1,158 @@
+import { access } from "node:fs/promises";
+import { constants } from "node:fs";
+import { MioToolError } from "./errors.js";
+import { run } from "./exec.js";
+async function exists(path) {
+    try {
+        await access(path, constants.F_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function parseBool(value) {
+    return value?.toLowerCase() === "true";
+}
+/**
+ * Parse `apksigner verify --verbose --print-certs` output.
+ * Exported so the parser can be unit tested without a JVM.
+ */
+export function parseVerifyOutput(output, exitCode = 0) {
+    const normalized = output.replace(/\r\n/g, "\n");
+    const scheme = (label) => {
+        const expression = new RegExp(`Verified using ${label}[^:]*:\\s*(true|false)`, "i");
+        return parseBool(expression.exec(normalized)?.[1]);
+    };
+    const signers = [];
+    let current;
+    for (const line of normalized.split("\n")) {
+        const signerMatch = /^Signer #(\d+) certificate DN:\s*(.*)$/.exec(line);
+        if (signerMatch) {
+            current = { signer: Number(signerMatch[1]), dn: signerMatch[2] };
+            signers.push(current);
+            continue;
+        }
+        if (!current)
+            continue;
+        const sha256 = /^Signer #\d+ certificate SHA-256 digest:\s*(\S+)/.exec(line);
+        if (sha256) {
+            current.sha256 = sha256[1];
+            continue;
+        }
+        const sha1 = /^Signer #\d+ certificate SHA-1 digest:\s*(\S+)/.exec(line);
+        if (sha1) {
+            current.sha1 = sha1[1];
+            continue;
+        }
+        const md5 = /^Signer #\d+ certificate MD5 digest:\s*(\S+)/.exec(line);
+        if (md5) {
+            current.md5 = md5[1];
+            continue;
+        }
+        const key = /^Signer #\d+ key algorithm:\s*(.+)$/.exec(line);
+        if (key) {
+            current.keyAlgorithm = key[1]?.trim();
+            continue;
+        }
+        const bits = /^Signer #\d+ key size \(bits\):\s*(\d+)/.exec(line);
+        if (bits) {
+            current.keySizeBits = Number(bits[1]);
+        }
+    }
+    const verified = exitCode === 0 &&
+        /^Verifies$/m.test(normalized) &&
+        !/DOES NOT VERIFY/i.test(normalized);
+    return {
+        verified,
+        v1: scheme("v1 scheme"),
+        v2: scheme("v2 scheme"),
+        v3: scheme("v3 scheme"),
+        v4: scheme("v4 scheme"),
+        signers,
+        exitCode,
+        raw: normalized,
+    };
+}
+function resolveV1(options) {
+    if (options.v1 !== undefined)
+        return options.v1;
+    if (options.minSdkVersion !== undefined)
+        return options.minSdkVersion < 24;
+    return true;
+}
+export function buildSignArgs(options) {
+    const v1 = resolveV1(options);
+    const v2 = options.v2 ?? true;
+    const v3 = options.v3 ?? true;
+    const args = [
+        "sign",
+        "--ks",
+        options.keystore,
+        "--ks-key-alias",
+        options.keyAlias,
+        "--ks-pass",
+        "env:MIO_KS_PASS",
+        "--key-pass",
+        "env:MIO_KEY_PASS",
+        "--out",
+        options.output,
+        "--v1-signing-enabled",
+        String(v1),
+        "--v2-signing-enabled",
+        String(v2),
+        "--v3-signing-enabled",
+        String(v3),
+    ];
+    if (options.minSdkVersion !== undefined) {
+        args.push("--min-sdk-version", String(options.minSdkVersion));
+    }
+    if (options.verbose) {
+        args.push("--verbose");
+    }
+    args.push(options.input);
+    return args;
+}
+export async function signApkWithApksigner(tools, options) {
+    if (!(await exists(options.input))) {
+        throw new MioToolError("MISSING_FILE", `Input APK does not exist: ${options.input}`);
+    }
+    if (!(await exists(options.keystore))) {
+        throw new MioToolError("KEYSTORE_NOT_FOUND", `Keystore does not exist: ${options.keystore}`);
+    }
+    const keyPassword = options.keyPassword ?? options.keystorePassword;
+    const result = await run(tools.java, ["-jar", tools.apksignerJar, ...buildSignArgs(options)], {
+        env: {
+            MIO_KS_PASS: options.keystorePassword,
+            MIO_KEY_PASS: keyPassword,
+        },
+        timeoutMs: 300_000,
+    });
+    if (result.code !== 0) {
+        throw new MioToolError("APKSIGNER_SIGN_FAILED", "apksigner sign failed", {
+            stdout: result.stdout,
+            stderr: result.stderr,
+            details: `exit code ${result.code}`,
+        });
+    }
+    return { stdout: result.stdout, stderr: result.stderr };
+}
+export async function verifyApkWithApksigner(tools, apk, options = {}) {
+    if (!(await exists(apk))) {
+        throw new MioToolError("MISSING_FILE", `APK does not exist: ${apk}`);
+    }
+    const args = ["verify", "--verbose"];
+    if (options.printCerts ?? true) {
+        args.push("--print-certs");
+    }
+    if (options.minSdkVersion !== undefined) {
+        args.push("--min-sdk-version", String(options.minSdkVersion));
+    }
+    args.push(apk);
+    const result = await run(tools.java, ["-jar", tools.apksignerJar, ...args], {
+        timeoutMs: 120_000,
+    });
+    const raw = `${result.stdout}${result.stderr}`;
+    return parseVerifyOutput(raw, result.code);
+}
+//# sourceMappingURL=apksigner.js.map

package/dist/apksigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apksigner.js","sourceRoot":"","sources":["../src/apksigner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAsChC,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;IAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAW,EAAE;QACxC,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,kBAAkB,KAAK,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACpF,OAAO,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,OAAsC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,MAAM,GAAG,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GACZ,QAAQ,KAAK,CAAC;QACd,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAC9B,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEvC,OAAO;QACL,QAAQ;QACR,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC;QACvB,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC;QACvB,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC;QACvB,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC;QACvB,OAAO;QACP,QAAQ;QACR,GAAG,EAAE,UAAU;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAoC;IACrD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,aAAa,GAAG,EAAE,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAoC;IAChE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC;IAC9B,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC;IAE9B,MAAM,IAAI,GAAG;QACX,MAAM;QACN,MAAM;QACN,OAAO,CAAC,QAAQ;QAChB,gBAAgB;QAChB,OAAO,CAAC,QAAQ;QAChB,WAAW;QACX,iBAAiB;QACjB,YAAY;QACZ,kBAAkB;QAClB,OAAO;QACP,OAAO,CAAC,MAAM;QACd,sBAAsB;QACtB,MAAM,CAAC,EAAE,CAAC;QACV,sBAAsB;QACtB,MAAM,CAAC,EAAE,CAAC;QACV,sBAAsB;QACtB,MAAM,CAAC,EAAE,CAAC;KACX,CAAC;IAEF,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAmB,EACnB,OAAoC;IAEpC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,6BAA6B,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,YAAY,CACpB,oBAAoB,EACpB,4BAA4B,OAAO,CAAC,QAAQ,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,gBAAgB,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE;QAC5F,GAAG,EAAE;YACH,WAAW,EAAE,OAAO,CAAC,gBAAgB;YACrC,YAAY,EAAE,WAAW;SAC1B;QACD,SAAS,EAAE,OAAO;KACnB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,uBAAuB,EAAE;YACvE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,aAAa,MAAM,CAAC,IAAI,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC1D,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAmB,EACnB,GAAW,EACX,UAA4B,EAAE;IAE9B,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,uBAAuB,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEf,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1E,SAAS,EAAE,OAAO;KACnB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IAC/C,OAAO,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC"}

package/dist/axml.d.ts

@@ -0,0 +1,36 @@
+import { Buffer } from "node:buffer";
+export interface ManifestPatch {
+    packageName: string;
+    versionCode?: number;
+    versionName?: string;
+    appName?: string;
+}
+export interface AxmlAttribute {
+    chunkOffset: number;
+    attributeOffset: number;
+    namespace: number;
+    name: number;
+    rawValue: number;
+    valueType: number;
+    data: number;
+}
+export interface AxmlElement {
+    chunkOffset: number;
+    name: string;
+    attributes: AxmlAttribute[];
+}
+export interface AxmlDocument {
+    strings: string[];
+    elements: AxmlElement[];
+    encoding: "utf8" | "utf16";
+}
+export declare function parseAxml(buffer: Buffer): AxmlDocument;
+/**
+ * Patch a binary AndroidManifest.xml.
+ *
+ * The template's MainActivity class is intentionally qualified with the
+ * template package (dev.mio.mio_shell.MainActivity). The manifest package and
+ * package-derived permission/authority strings are rewritten, but that class
+ * name must remain untouched so Android can still resolve it.
+ */
+export declare function patchManifestAxml(buffer: Buffer, patch: ManifestPatch): Buffer;