@scalebun-release/cli 2.5.0

package/lib/commands/ci-init.js

@@ -0,0 +1,348 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCiInitCommand = registerCiInitCommand;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const credentials_1 = require("../utils/credentials");
+const client_1 = require("../api/client");
+const resolve_1 = require("../utils/resolve");
+/**
+ * `scalebun ci init` — generate working CI/CD pipelines for OTA publishing.
+ *
+ * Credentials in CI are environment variables, no login step:
+ *   SCALEBUN_API_TOKEN  a personal access token (scalebun_pat_…) — create one in
+ *                       the dashboard (OTA Settings → Access Tokens) or via
+ *                       `scalebun login` locally and copy from the output.
+ *                       (SCALEBUN_TOKEN is still accepted for back-compat.)
+ *   SCALEBUN_API_URL    optional — defaults to https://api.scalebun.com/api/v1
+ *                       (only set it to target a self-hosted backend).
+ *
+ * Signing (a signature-enforcing app) also reads, straight from the env:
+ *   SCALEBUN_SIGNING_PRIVATE_KEY      RSA private-key PEM — signs in the runner,
+ *                                     never sent to ScaleBun
+ *   SCALEBUN_SIGNING_KEY_PASSPHRASE   passphrase, only if the key is encrypted
+ *   SCALEBUN_KEY_ID                   the signing key id
+ *
+ * `readCredentials()` + `resolveSigningMaterial()` pick these up automatically, so
+ * every command that works locally works headless: publish, rollout, pause,
+ * rollback — signed, with no key file written in CI.
+ */
+const GITHUB_ACTIONS_WORKFLOW = `name: Scalebun OTA
+
+on:
+  push:
+    branches: [main]
+  # Manual controls from the Actions tab — staged rollout without a laptop.
+  workflow_dispatch:
+    inputs:
+      action:
+        description: What to do
+        type: choice
+        options: [publish, rollout, pause, rollback]
+        default: publish
+      percent:
+        description: Rollout percent (rollout action only)
+        default: '100'
+
+env:
+  # Add these as repository secrets (Settings -> Secrets and variables -> Actions).
+  # SCALEBUN_API_TOKEN is a scalebun_pat_... token from the dashboard (OTA Settings
+  # -> Access Tokens). Session JWTs expire in minutes - always use a PAT here.
+  SCALEBUN_API_TOKEN: \${{ secrets.SCALEBUN_API_TOKEN }}
+  SCALEBUN_APP_ID: \${{ secrets.SCALEBUN_APP_ID }}
+  # Signing — the private key signs locally in the runner and NEVER reaches
+  # ScaleBun; only the signature it produces is uploaded. A signature-enforcing
+  # app rejects unsigned releases, so --require-signing below fails the job rather
+  # than shipping a release no device will install. Omit these three for an
+  # unsigned (SHA-256-only) app.
+  SCALEBUN_SIGNING_PRIVATE_KEY: \${{ secrets.SCALEBUN_SIGNING_PRIVATE_KEY }}
+  SCALEBUN_SIGNING_KEY_PASSPHRASE: \${{ secrets.SCALEBUN_SIGNING_KEY_PASSPHRASE }}
+  SCALEBUN_KEY_ID: \${{ secrets.SCALEBUN_KEY_ID }}
+  # Required by --sourcemap: without it the map uploads but is never
+  # registered for symbolication, so production stack traces stay minified.
+  SCALEBUN_SDK_SECRET: \${{ secrets.SCALEBUN_SDK_SECRET }}
+
+jobs:
+  ota:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      # ── Publish (push to main, or manual "publish") ──────────────────────
+      # Starts at 10%, NOT 100: a staged rollout is the whole point of OTA.
+      # Widen it with the manual "rollout" action once health looks clean.
+      # NOTE: the channel must already exist - a typo'd channel name is
+      # rejected rather than silently created.
+      - name: Publish OTA update
+        if: github.event_name == 'push' || inputs.action == 'publish'
+        # The commit message is UNTRUSTED input. Interpolating \${{ }} straight
+        # into run: splices it into the shell — a message with a quote breaks the
+        # job, and one with ";cmd;" executes with SCALEBUN_API_TOKEN in scope.
+        # Passing it through env keeps it data.
+        env:
+          COMMIT_MESSAGE: \${{ github.event.head_commit.message || 'Manual publish' }}
+        run: |
+          npx scalebun ota publish \\
+            --app-id "$SCALEBUN_APP_ID" \\
+            --channel production \\
+            --platform android \\
+            --hermes \\
+            --sourcemap \\
+            --require-signing \\
+            --rollout 10 \\
+            --release-note "$COMMIT_MESSAGE"
+
+      # ── Manual controls ──────────────────────────────────────────────────
+      - name: Widen rollout
+        if: inputs.action == 'rollout'
+        # Same rule as COMMIT_MESSAGE above: workflow inputs are attacker-typed
+        # strings, and \${{ }} inside run: splices them into the shell with
+        # SCALEBUN_API_TOKEN in scope. env keeps the value data. (The CLI validates
+        # 0-100 anyway, but validation there is no reason to splice here.)
+        env:
+          ROLLOUT_PERCENT: \${{ inputs.percent }}
+        run: npx scalebun ota rollout --app-id "$SCALEBUN_APP_ID" --percent "$ROLLOUT_PERCENT"
+
+      - name: Pause release
+        if: inputs.action == 'pause'
+        run: npx scalebun ota pause --app-id "$SCALEBUN_APP_ID"
+
+      - name: Roll back release
+        if: inputs.action == 'rollback'
+        run: npx scalebun ota rollback --app-id "$SCALEBUN_APP_ID" --yes
+`;
+const GITLAB_CI_TEMPLATE = `# Scalebun OTA — GitLab CI
+#
+# Set these CI/CD variables (Settings -> CI/CD -> Variables):
+#   SCALEBUN_API_TOKEN               scalebun_pat_... (dashboard -> OTA Settings -> Access Tokens)
+#   SCALEBUN_APP_ID                  your application id
+#   SCALEBUN_SIGNING_PRIVATE_KEY     RSA private-key PEM — signs locally, never sent to ScaleBun
+#   SCALEBUN_SIGNING_KEY_PASSPHRASE  passphrase for the key (only if it is encrypted)
+#   SCALEBUN_KEY_ID                  the signing key id
+#
+# Session JWTs expire in minutes - always use a scalebun_pat_... token in CI.
+# For an unsigned (SHA-256-only) app, omit the three SIGNING_/KEY_ID vars and
+# drop --require-signing below.
+
+stages: [ota]
+
+.ota-base:
+  stage: ota
+  image: node:20
+  before_script:
+    - npm ci
+
+# Publishes on every push to the default branch, staged at 10%.
+ota-publish:
+  extends: .ota-base
+  rules:
+    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+  script:
+    - npx scalebun ota publish
+      --app-id "$SCALEBUN_APP_ID"
+      --channel production
+      --platform android
+      --hermes
+      --sourcemap
+      --require-signing
+      --rollout 10
+      --release-note "$CI_COMMIT_TITLE"
+
+# Manual jobs — run from the pipeline UI once health looks clean (or bad).
+ota-rollout-100:
+  extends: .ota-base
+  rules: [{ when: manual }]
+  script:
+    - npx scalebun ota rollout --app-id "$SCALEBUN_APP_ID" --percent 100
+
+ota-pause:
+  extends: .ota-base
+  rules: [{ when: manual }]
+  script:
+    - npx scalebun ota pause --app-id "$SCALEBUN_APP_ID"
+
+ota-rollback:
+  extends: .ota-base
+  rules: [{ when: manual }]
+  script:
+    - npx scalebun ota rollback --app-id "$SCALEBUN_APP_ID" --yes
+`;
+async function fetchSetup(appIdOpt) {
+    const creds = (0, credentials_1.readCredentials)();
+    if (!creds)
+        return null;
+    try {
+        const appId = await (0, resolve_1.resolveAppId)({ appId: appIdOpt, nonInteractive: true });
+        const api = new client_1.ApiClient(creds);
+        return await api.get(`/saas/apps/${appId}/ota/ci-setup`);
+    }
+    catch {
+        // Every failure here is recoverable: the caller falls back to the local
+        // template. Nothing about setting up CI should require the network.
+        return null;
+    }
+}
+function channelNames(setup) {
+    return (setup.channels ?? [])
+        .map((c) => (typeof c === 'string' ? c : c?.name ?? ''))
+        .filter(Boolean);
+}
+function printSetupFacts(setup) {
+    console.log('');
+    console.log(`  Rendered for ${setup.appName} (${setup.appId})`);
+    const plats = setup.platforms?.length ? setup.platforms.join(', ') : 'none published yet';
+    const chans = channelNames(setup);
+    console.log(`  Platforms   ${plats}`);
+    console.log(`  Channels    ${chans.length ? chans.join(', ') : 'none yet — create one before the first run'}`);
+    if (setup.secrets?.length) {
+        console.log('');
+        console.log('  Secrets to add to your CI:');
+        for (const sec of setup.secrets) {
+            // A value the server legitimately knows is printed so it can be pasted;
+            // a token is never echoed by this endpoint and is not invented here.
+            const rhs = sec.value ? sec.value : 'you supply this';
+            console.log(`    ${sec.name.padEnd(20)} ${rhs}`);
+            if (sec.why)
+                console.log(`    ${' '.repeat(20)} ${sec.why}`);
+        }
+    }
+}
+function writeTemplate(targetPath, content) {
+    if (fs.existsSync(targetPath)) {
+        console.error(`❌ ${path.relative(process.cwd(), targetPath)} already exists — refusing to overwrite.\n` +
+            '   Delete it first if you want a fresh template.');
+        return false;
+    }
+    fs.mkdirSync(path.dirname(targetPath), { recursive: true });
+    fs.writeFileSync(targetPath, content, 'utf-8');
+    return true;
+}
+function printNextSteps(provider, file) {
+    console.log(`✅ ${provider} pipeline generated: ${file}`);
+    console.log('');
+    console.log('Next steps:');
+    console.log('  1. Create an access token: dashboard → Settings → Access Tokens');
+    console.log('     (or run `scalebun login` locally and copy the scalebun_pat_… it prints)');
+    console.log('  2. Add these CI secrets: SCALEBUN_API_TOKEN, SCALEBUN_APP_ID,');
+    console.log('     and (for a signed app) SCALEBUN_SIGNING_PRIVATE_KEY, SCALEBUN_KEY_ID');
+    console.log('     (+ SCALEBUN_SIGNING_KEY_PASSPHRASE if the key is encrypted).');
+    console.log('  3. Make sure the target channel exists (`scalebun ota channels --app-id <id>`).');
+    console.log('  4. Push — the release goes out staged at 10%; widen it from the CI UI.');
+}
+function registerCiInitCommand(program) {
+    const ci = program.command('ci').description('CI/CD integration setup');
+    ci.command('init')
+        .description('Generate a CI/CD pipeline for OTA publishing (publish / rollout / pause / rollback)')
+        .option('--provider <name>', 'CI provider: github | gitlab', 'github')
+        .option('--app-id <id>', 'Scalebun app ID (resolved from scalebun.json when omitted)')
+        .option('--offline', 'Skip the server and write the generic template')
+        .action(async (opts) => {
+        const provider = opts.provider.toLowerCase();
+        // Ask the server for a workflow that knows this app's real platforms and
+        // channels. Falls back silently — see fetchSetup.
+        const setup = opts.offline ? null : await fetchSetup(opts.appId);
+        if (provider === 'github') {
+            const target = path.join(process.cwd(), '.github', 'workflows', 'scalebun-ota.yml');
+            const rendered = setup?.workflow?.content;
+            if (rendered) {
+                const at = setup?.workflow?.path
+                    ? path.join(process.cwd(), setup.workflow.path)
+                    : target;
+                if (!writeTemplate(at, rendered))
+                    process.exit(1);
+                console.log(`✅ GitHub Actions pipeline generated: ${path.relative(process.cwd(), at)}`);
+                printSetupFacts(setup);
+                console.log('');
+                console.log('Next steps:');
+                console.log('  1. Create an access token: dashboard → Settings → Access Tokens');
+                console.log('     (or run `scalebun login` locally and copy the scalebun_pat_… it prints)');
+                console.log('  2. Add the secrets above to your repository.');
+                console.log('  3. Push — the workflow publishes, then rollout / pause / rollback run on demand.');
+                return;
+            }
+            if (writeTemplate(target, GITHUB_ACTIONS_WORKFLOW)) {
+                printNextSteps('GitHub Actions', path.relative(process.cwd(), target));
+                // Say WHICH pipeline this is. A generic template that silently claims
+                // to be app-specific is how you end up publishing to a channel that
+                // does not exist and blaming the CLI.
+                console.log('');
+                console.log('  ℹ️  Generic template — the channel and platform in it are defaults,');
+                console.log("     not this app's. Sign in and re-run for one rendered from your");
+                console.log('     real channels and platforms.');
+            }
+            else {
+                process.exit(1);
+            }
+        }
+        else if (provider === 'gitlab') {
+            const target = path.join(process.cwd(), '.gitlab-ci.scalebun-ota.yml');
+            if (writeTemplate(target, GITLAB_CI_TEMPLATE)) {
+                printNextSteps('GitLab CI', path.relative(process.cwd(), target));
+                console.log('');
+                console.log("  Include it from your .gitlab-ci.yml:");
+                console.log("    include:");
+                console.log("      - local: .gitlab-ci.scalebun-ota.yml");
+            }
+            else {
+                process.exit(1);
+            }
+        }
+        else {
+            // Any other system: the commands are plain npx calls over env-var
+            // credentials, so print the recipe instead of pretending to support it.
+            console.log(`ℹ️  No template for "${provider}" — but any CI works. Set these env vars:`);
+            console.log('     SCALEBUN_API_TOKEN              (scalebun_pat_… from the dashboard)');
+            console.log('     SCALEBUN_SIGNING_PRIVATE_KEY   (RSA private-key PEM — signed app only)');
+            console.log('     SCALEBUN_KEY_ID                (the signing key id — signed app only)');
+            console.log('     SCALEBUN_SIGNING_KEY_PASSPHRASE (only if the key is encrypted)');
+            console.log('');
+            console.log('   Then script the commands directly:');
+            console.log('     npx scalebun ota publish  --app-id $APP_ID --channel production --hermes --require-signing --rollout 10');
+            console.log('     npx scalebun ota rollout  --app-id $APP_ID --percent 100');
+            console.log('     npx scalebun ota pause    --app-id $APP_ID');
+            console.log('     npx scalebun ota rollback --app-id $APP_ID --yes');
+        }
+    });
+}
+//# sourceMappingURL=ci-init.js.map

package/lib/commands/ci-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-init.js","sourceRoot":"","sources":["../../src/commands/ci-init.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyRA,sDAwEC;AAjWD,uCAAyB;AACzB,2CAA6B;AAE7B,sDAAuD;AACvD,0CAA0C;AAC1C,8CAAgD;AAEhD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2F/B,CAAC;AAEF,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuD1B,CAAC;AAsCF,KAAK,UAAU,UAAU,CAAC,QAAiB;IACzC,MAAM,KAAK,GAAG,IAAA,6BAAe,GAAE,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,kBAAS,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAU,cAAc,KAAK,eAAe,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,oEAAoE;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;SACvD,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAC1F,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,4CAA4C,EAAE,CAAC,CAAC;IAC/G,IAAI,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,wEAAwE;YACxE,qEAAqE;YACrE,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACjD,IAAI,GAAG,CAAC,GAAG;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB,EAAE,OAAe;IACxD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CACX,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,4CAA4C;YACvF,kDAAkD,CACrD,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,IAAY;IACpD,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,wBAAwB,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC;IACjG,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;AAC1F,CAAC;AAED,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAExE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,qFAAqF,CAAC;SAClG,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,QAAQ,CAAC;SACrE,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,IAA6D,EAAE,EAAE;QAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE7C,yEAAyE;QACzE,kDAAkD;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjE,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;YACpF,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;YAC1C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI;oBAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC/C,CAAC,CAAC,MAAM,CAAC;gBACX,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBACxF,eAAe,CAAC,KAAM,CAAC,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;gBACjF,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;gBAC5F,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;gBAClG,OAAO;YACT,CAAC;YACD,IAAI,aAAa,CAAC,MAAM,EAAE,uBAAuB,CAAC,EAAE,CAAC;gBACnD,cAAc,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;gBACvE,sEAAsE;gBACtE,oEAAoE;gBACpE,sCAAsC;gBACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;gBACrF,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;gBAClF,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,6BAA6B,CAAC,CAAC;YACvE,IAAI,aAAa,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAC9C,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;gBAClE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,kEAAkE;YAClE,wEAAwE;YACxE,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,2CAA2C,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;YACxF,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;YAC3F,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;YAC1F,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;YACnF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,8GAA8G,CAAC,CAAC;YAC5H,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/lib/commands/doctor.d.ts

@@ -0,0 +1,31 @@
+import { Command } from 'commander';
+/**
+ * iOS app sources that build the React host with a STATIC bundle URL.
+ *
+ * RCTHost DOES re-resolve on reload — `_reloadWithShouldRestartSurfaces` calls
+ * `_bundleURLProvider()` again — but only through the provider it was handed.
+ * `initWithBundleURL:` wraps a constant in a block returning that same constant
+ * forever (RCTRootViewFactory.mm), so a host built that way can never see a
+ * bundle that did not exist at launch.
+ *
+ * The symptom is precise and very confusing: the update downloads, verifies,
+ * applies, `restartApp()` runs, every OTA metric reports success — and the app
+ * comes back on the OLD bundle, while a cold start loads it correctly.
+ *
+ * Matched on whole-file text, not per line, because these initialisers are
+ * routinely wrapped across lines. Only the STATIC forms match:
+ * `initWithBundleURLBlock:` / `initWithBundleURLProvider:` / `bundleURLProvider:`
+ * are the dynamic ones, and the trailing colon keeps them out.
+ */
+export declare function findStaticHostConstruction(iosDir: string): {
+    file: string;
+    line: number;
+    text: string;
+}[];
+export declare function registerDoctorCommand(program: Command): void;
+/**
+ * All doctor checks as a reusable step (`quickstart` runs it inline).
+ * Same contract as the command: exits the process on a blocking failure.
+ */
+export declare function runDoctor(): Promise<void>;
+//# sourceMappingURL=doctor.d.ts.map

package/lib/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+DpC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,GACb;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAiDhD;AAmFD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAM5D;AAED;;;GAGG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CA6X/C"}