@novacraft-engineering/pulsar-cli 1.1.0 → 1.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@novacraft-engineering/pulsar-cli",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Pulsar OTA release CLI — bundle, hash, and ship React Native updates over-the-air.",
   "type": "module",
   "bin": {

package/pulsar.js

@@ -3,6 +3,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import readline from 'node:readline';
+import http from 'node:http';
 import {execFileSync} from 'node:child_process';
 import crypto from 'node:crypto';
 import {computePackageHash, fileHashes} from './hash.js';
@@ -44,13 +45,13 @@ function saveConfig(config) {
   fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
 }
 
-async function api(pathname, {method = 'GET', body, headers = {}, raw, allowAnonymous} = {}) {
+async function api(pathname, {method = 'GET', body, headers = {}, raw, allowAnonymous, onUploadProgress} = {}) {
   const {apiUrl, token} = loadConfig();
   if (!apiUrl) die('No API url. Run: pulsar login <apiUrl>');
   // Every call except the login handshake must carry a token, so an expired or
   // cleared session fails here rather than silently issuing anonymous requests.
   if (!token && !allowAnonymous) die('Not authenticated. Run: pulsar login <apiUrl>');
-  const response = await fetch(apiUrl.replace(/\/$/, '') + pathname, {
+  const options = {
     method,
     headers: {
       ...(token ? {authorization: `Bearer ${token}`} : {}),
@@ -58,11 +59,42 @@ async function api(pathname, {method = 'GET', body, headers = {}, raw, allowAnon
       ...headers,
     },
     body: raw ? body : body ? JSON.stringify(body) : undefined,
-  });
+  };
+  // Stream a raw upload in chunks so we can report progress as the request drains to the socket.
+  if (raw && onUploadProgress && body && body.length) {
+    const total = body.length;
+    let offset = 0;
+    const chunkSize = 64 * 1024;
+    options.body = new ReadableStream({
+      pull(controller) {
+        if (offset >= total) { controller.close(); return; }
+        const end = Math.min(offset + chunkSize, total);
+        controller.enqueue(body.subarray(offset, end));
+        offset = end;
+        onUploadProgress(offset, total);
+      },
+    });
+    options.duplex = 'half';
+  }
+  const response = await fetch(apiUrl.replace(/\/$/, '') + pathname, options);
   const text = await response.text();
-  const data = text ? JSON.parse(text) : {};
-  if (!response.ok) die(`${response.status}: ${data.error || text}`);
-  return data;
+  // Check the status BEFORE parsing: an edge/proxy error (413, 502, 524) returns
+  // an HTML page, and parsing that first turned every such failure into an
+  // opaque "Unexpected token '<'" SyntaxError instead of the real status.
+  if (!response.ok) {
+    let detail = text;
+    try {
+      detail = JSON.parse(text).error || text;
+    } catch {
+      detail = text.replace(/<[^>]*>/g, ' ').replace(/\s+/g, ' ').trim().slice(0, 300);
+    }
+    die(`${response.status} ${response.statusText}: ${detail}`);
+  }
+  try {
+    return text ? JSON.parse(text) : {};
+  } catch {
+    die(`${response.status}: expected JSON, got ${text.slice(0, 200)}`);
+  }
 }
 
 function die(message) {
@@ -85,11 +117,74 @@ function prompt(question, hidden = false) {
   });
 }
 
-async function resolveApp(nameOrId) {
+// Returns an onUploadProgress callback that renders a single updating line (or plain lines in CI).
+function uploadProgress(label) {
+  let lastPct = -1;
+  return (sent, total) => {
+    const pct = Math.floor((sent / total) * 100);
+    if (pct === lastPct && sent < total) return;
+    lastPct = pct;
+    const line = `• ${label} — ${pct}% (${(sent / 1e6).toFixed(1)}/${(total / 1e6).toFixed(1)} MB)`;
+    if (process.stdout.isTTY) {
+      process.stdout.write(`\r${line}   `);
+      if (sent >= total) process.stdout.write('\n');
+    } else if (sent >= total) {
+      console.log(line);
+    }
+  };
+}
+
+function openBrowser(url) {
+  try {
+    if (process.platform === 'darwin') execFileSync('open', [url], {stdio: 'ignore'});
+    else if (process.platform === 'win32') execFileSync('cmd', ['/c', 'start', '', url], {stdio: 'ignore'});
+    else execFileSync('xdg-open', [url], {stdio: 'ignore'});
+  } catch { /* the URL is printed too, so the user can open it manually */ }
+}
+
+function dashboardUrl(apiUrl) {
+  try {
+    const parsed = new URL(apiUrl);
+    parsed.host = parsed.host.replace(/^api\./, '');
+    return `${parsed.protocol}//${parsed.host}`;
+  } catch { return apiUrl.replace(/\/$/, ''); }
+}
+
+// Browser login: spin up a throwaway localhost server, open the dashboard's /cli-login page which
+// (once you're signed in) redirects back here with a token. No password ever touches the terminal.
+function browserLogin(apiUrl) {
+  return new Promise((resolve, reject) => {
+    const server = http.createServer((req, res) => {
+      const requestUrl = new URL(req.url, 'http://127.0.0.1');
+      const token = requestUrl.searchParams.get('token');
+      res.writeHead(token ? 200 : 400, {'content-type': 'text/html'});
+      res.end(`<!doctype html><meta charset="utf-8"><body style="font-family:system-ui;background:#080a0f;color:#eef2f7;display:grid;place-items:center;height:100vh;margin:0"><div style="text-align:center"><h2 style="font-weight:600">${token ? 'Pulsar CLI authorized ✓' : 'No token received'}</h2><p style="color:#8f98a6">You can close this tab and return to your terminal.</p></div></body>`);
+      setTimeout(() => { try { server.close(); } catch {} }, 100);
+      if (token) resolve(token); else reject(new Error('No token received from the browser'));
+    });
+    server.on('error', reject);
+    server.listen(0, '127.0.0.1', () => {
+      const {port} = server.address();
+      const authUrl = `${dashboardUrl(apiUrl)}/cli-login?port=${port}`;
+      console.log(`\n  Authorize the CLI in your browser:\n  ${authUrl}\n`);
+      openBrowser(authUrl);
+      console.log('  Waiting for authorization…');
+    });
+    setTimeout(() => { try { server.close(); } catch {} reject(new Error('Login timed out after 3 minutes')); }, 180000);
+  });
+}
+
+async function resolveApp(nameOrId, platform) {
   const apps = await api('/apps');
-  const match = apps.find((app) => app.id === nameOrId || app.name === nameOrId);
-  if (!match) die(`App not found: ${nameOrId}. Known: ${apps.map((app) => app.name).join(', ') || '(none)'}`);
-  return match;
+  const byId = apps.find((app) => app.id === nameOrId);
+  if (byId) return byId;
+  const named = apps.filter((app) => app.name === nameOrId);
+  if (!named.length) die(`App not found: ${nameOrId}. Known: ${apps.map((app) => `${app.name} [${app.os}]`).join(', ') || '(none)'}`);
+  if (named.length === 1) return named[0];
+  // Same name for an iOS and an Android app — disambiguate by platform (or the app id).
+  const forPlatform = platform && named.find((app) => app.os === platform);
+  if (forPlatform) return forPlatform;
+  die(`Multiple apps named "${nameOrId}" (${named.map((app) => app.os).join(', ')}). Pass --platform ios|android, or use the app id.`);
 }
 
 function bundle(platform, contentsDir) {
@@ -159,9 +254,26 @@ function getFlag(args, name, fallback) {
 
 async function cmdLogin(args) {
   const apiUrl = args[0] || (await prompt('API url: '));
+  saveConfig({apiUrl, token: undefined});
+
+  let mode;
+  if (args.includes('--browser')) mode = 'browser';
+  else if (args.includes('--terminal')) mode = 'terminal';
+  else {
+    const answer = (await prompt('Sign in with [b]rowser or [t]erminal? (b/t): ')).toLowerCase();
+    mode = answer.startsWith('t') ? 'terminal' : 'browser';
+  }
+
+  if (mode === 'browser') {
+    const token = await browserLogin(apiUrl);
+    saveConfig({apiUrl, token});
+    const me = await api('/auth/me').catch(() => null);
+    console.log(`✓ logged in${me?.email ? ` as ${me.email}` : ''} (browser)`);
+    return;
+  }
+
   const email = await prompt('Email: ');
   const password = await prompt('Password: ', true);
-  saveConfig({apiUrl, token: undefined});
   const {token, user} = await api('/auth/login', {method: 'POST', body: {email, password}, allowAnonymous: true});
   saveConfig({apiUrl, token});
   console.log(`✓ logged in as ${user.email} (${user.platformRole})`);
@@ -193,6 +305,7 @@ async function pushBuiltRelease(app, deployment, args, contentsDir, packageHash,
     method: 'POST',
     raw: true,
     body: zip,
+    onUploadProgress: uploadProgress(`uploading ${(zip.length / 1e6).toFixed(1)}MB bundle`),
     headers: {
       'content-type': 'application/zip',
       'x-app-version': getFlag(args, 'target'),
@@ -217,6 +330,7 @@ async function pushBuiltRelease(app, deployment, args, contentsDir, packageHash,
         method: 'POST',
         raw: true,
         body: diffZip,
+        onUploadProgress: uploadProgress(`uploading ${(diffZip.length / 1e6).toFixed(1)}MB diff`),
         headers: {'content-type': 'application/zip', 'x-base-hash': prevLatest.packageHash},
       });
       const saved = Math.round((1 - diffZip.length / zip.length) * 100);
@@ -248,7 +362,10 @@ async function cmdRelease(args) {
   const [nameOrId, deployment = 'Staging'] = args;
   if (!nameOrId) die('Usage: pulsar release <app> <Staging|Production> --platform ios|android --target <ver> [--mandatory] [--disabled] [--rollout N] [--devices id1,id2,...] [--private-key key.pem] [--no-diff] [--description "..."]');
   if (!getFlag(args, 'target')) die('--target <binary version> is required (e.g. --target 1.0.0)');
-  const app = await resolveApp(nameOrId);
+  const app = await resolveApp(nameOrId, getFlag(args, 'platform', 'ios'));
+  if (app.os !== getFlag(args, 'platform', 'ios')) {
+    console.log(`• note: resolved app "${app.name}" is ${app.os}; bundling ${getFlag(args, 'platform', 'ios')}`);
+  }
   const {contentsDir, packageHash, zip} = buildOnce(args);
   await pushBuiltRelease(app, deployment, args, contentsDir, packageHash, zip);
 }
@@ -288,7 +405,7 @@ async function cmdReleaseTrain(args) {
 
 async function cmdPromote(args) {
   const [nameOrId, from = 'Staging', to = 'Production'] = args;
-  const app = await resolveApp(nameOrId);
+  const app = await resolveApp(nameOrId, getFlag(args, 'platform'));
   const release = await api(`/apps/${app.id}/deployments/${from}/promote`, {
     method: 'POST',
     body: {to, rollout: Number(getFlag(args, 'rollout', '100'))},
@@ -298,14 +415,14 @@ async function cmdPromote(args) {
 
 async function cmdRollback(args) {
   const [nameOrId, deployment = 'Production'] = args;
-  const app = await resolveApp(nameOrId);
+  const app = await resolveApp(nameOrId, getFlag(args, 'platform'));
   const release = await api(`/apps/${app.id}/deployments/${deployment}/rollback`, {method: 'POST'});
   console.log(`✓ rolled back ${app.name}/${deployment} → ${release.label}`);
 }
 
 async function cmdDeployment(args) {
   const [sub, nameOrId, depName] = args;
-  const app = await resolveApp(nameOrId);
+  const app = await resolveApp(nameOrId, getFlag(args, 'platform'));
   if (sub === 'add') {
     if (!depName) die('Usage: pulsar deployment add <app> <name>');
     const created = await api(`/apps/${app.id}/deployments`, {method: 'POST', body: {name: depName}});
@@ -322,7 +439,7 @@ async function cmdDeployment(args) {
 
 async function cmdHistory(args) {
   const [nameOrId, deployment = 'Staging'] = args;
-  const app = await resolveApp(nameOrId);
+  const app = await resolveApp(nameOrId, getFlag(args, 'platform'));
   const releases = await api(`/apps/${app.id}/deployments/${deployment}/releases`);
   if (!releases.length) return console.log('(no releases)');
   for (const release of [...releases].reverse()) {
@@ -334,7 +451,7 @@ async function cmdHistory(args) {
 async function cmdPatch(args) {
   const [nameOrId, deployment, label] = args;
   if (!label) die('Usage: pulsar patch <app> <deployment> <label> [--rollout N] [--mandatory] [--disable] [--enable] [--devices id1,id2,...]');
-  const app = await resolveApp(nameOrId);
+  const app = await resolveApp(nameOrId, getFlag(args, 'platform'));
   const body = {};
   const rollout = getFlag(args, 'rollout');
   if (rollout !== undefined) body.rollout = Number(rollout);