@scalebun-release/cli 2.5.0

package/lib/utils/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../src/utils/provenance.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,8CAmDC;AAuBD,oDAkCC;AArJD,4DAA8C;AAC9C,uCAAyB;AACzB,2CAA6B;AAC7B,iCAAoC;AAkBpC,SAAS,GAAG,CAAC,IAAc,EAAE,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY;aACrB,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;aAC1F,IAAI,EAAE,CAAC;QACV,OAAO,GAAG,IAAI,SAAS,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,SAAS,OAAO,CAAC,CAAa;IAC5B,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;YAAG,GAA+B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAExB,iBAAiB;IACjB,IAAI,GAAG,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,OAAO,CAAC;YACb,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;YACzD,SAAS,EAAE,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;YACjF,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAClD,UAAU,EAAE,gBAAgB;YAC5B,UAAU,EAAE,GAAG,CAAC,eAAe;YAC/B,aAAa,EAAE,GAAG,CAAC,iBAAiB;YACpC,QAAQ,EACN,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,aAAa;gBACjE,CAAC,CAAC,GAAG,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,iBAAiB,GAAG,CAAC,aAAa,EAAE;gBACvF,CAAC,CAAC,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,YAAY;IACZ,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC;YACb,MAAM,EAAE,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;YAC5D,SAAS,EAAE,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;YACpF,QAAQ,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,eAAe;YACvD,aAAa,EAAE,GAAG,CAAC,eAAe;YAClC,QAAQ,EAAE,GAAG,CAAC,eAAe;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,UAAU;IACV,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;YACb,MAAM,EAAE,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;YACjE,SAAS,EAAE,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;YACpF,QAAQ,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,GAAG,CAAC,6BAA6B;YAC7C,aAAa,EAAE,GAAG,CAAC,oBAAoB;YACvC,QAAQ,EAAE,GAAG,CAAC,iBAAiB;SAChC,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IACrD,OAAO,OAAO,CAAC;QACb,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;QACvC,SAAS,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AASD,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACnG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAClC,UAAkB,EAClB,YAAoB,EACpB,eAAuB,EACvB,SAAkB;IAElB,MAAM,MAAM,GAAiB;QAC3B,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE;KACvG,CAAC;IACF,IAAI,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;YAC3B,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAClC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBACrB,IAAI,CAAC,IAAI,CAAC,CAAC;gBACb,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACrE,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,GAAG;wBACT,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC;wBAChC,SAAS,EAAE,EAAE,CAAC,IAAI;wBAClB,MAAM,EAAE,IAAA,iBAAU,EAAC,IAAI,CAAC;qBACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/lib/utils/resolve.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Resolving what a command should act on, without making the operator type it.
+ *
+ * ── The chain, in order ─────────────────────────────────────────────────────
+ *
+ *   1. an explicit flag                  — always wins
+ *   2. SCALEBUN_APP_ID / scalebun.json   — the common case, and silent
+ *   3. the account has exactly one app   — auto-select and say so
+ *   4. a TTY                             — interactive picker
+ *   5. no TTY                            — hard error naming the flag
+ *
+ * Layer 5 is the one that must never be skipped. A prompt that blocks in CI is
+ * a deploy that hangs until the job times out, and it looks like a network
+ * fault rather than a missing flag. The publish wizard already got this right
+ * (`ota-publish.ts`, TTY-gated); this generalises that rule so every command
+ * inherits it instead of re-deciding.
+ *
+ * ── Why resolving beats prompting ───────────────────────────────────────────
+ *
+ * Prompting on nine commands turns a nine-flag problem into a nine-prompt
+ * problem. Layer 2 is where the win is: `scalebun link` once, and the flag
+ * disappears from every later invocation. There is a cost argument too —
+ * `fetchAllApps` walks orgs → projects → project-detail, so resolving from the
+ * network on every command pays N+1 HTTP calls every time.
+ */
+export interface ResolveOpts {
+    /** The explicit flag value, if the user passed one. */
+    appId?: string;
+    /** Skip layers 3 and 4 — set by --json / --non-interactive / --yes. */
+    nonInteractive?: boolean;
+    /** Flag name to quote in the non-TTY error. */
+    flag?: string;
+}
+/**
+ * True when this process must not prompt: no TTY, or the caller forbade it.
+ *
+ * `isJson()` is the authority on machine mode rather than a per-command
+ * `opts.json`. Commander does not hand root options down to subcommand
+ * handlers — and because the root declares `--json` too, it consumes the flag
+ * before a subcommand ever sees it. So the flag is read once from raw argv at
+ * startup (`applyGlobalFlags`) and every consumer asks `output.ts`. The
+ * per-command `--json` declarations remain, purely so `--help` documents them.
+ */
+export declare function isNonInteractive(opts?: {
+    nonInteractive?: boolean;
+}): boolean;
+/**
+ * Resolve the app id for a command.
+ *
+ * Never returns an empty string — it either returns an id or exits with a
+ * message naming the exact flag to pass.
+ */
+export declare function resolveAppId(opts?: ResolveOpts): Promise<string>;
+/**
+ * Resolve a release for the control commands.
+ *
+ * `pause` and `rollback` already accepted an optional --release-id and fell
+ * back to "the single ACTIVE release"; `resume` required it and never resolved,
+ * which made the undo of the panic button the hardest command to type. This
+ * generalises the resolver and lets each caller say which statuses count —
+ * so `resume` can look for PAUSED rather than ACTIVE.
+ */
+export interface ReleaseRow {
+    id: string;
+    status: string;
+    rolloutPercent?: number;
+    bundle?: {
+        version?: number;
+        platform?: string;
+    };
+}
+export declare function describeRelease(r: ReleaseRow): string;
+export declare function resolveRelease(releases: ReleaseRow[], opts: {
+    releaseId?: string;
+    /** Statuses that qualify when no id was given. */
+    statuses: string[];
+    /** Verb used in messages: "resume", "pause", … */
+    verb: string;
+    nonInteractive?: boolean;
+}): Promise<ReleaseRow>;
+//# sourceMappingURL=resolve.d.ts.map

package/lib/utils/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/utils/resolve.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CASjF;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsE1E;AAmBD;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAIrD;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,UAAU,EAAE,EACtB,IAAI,EAAE;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GACA,OAAO,CAAC,UAAU,CAAC,CAmCrB"}

package/lib/utils/resolve.js

@@ -0,0 +1,139 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isNonInteractive = isNonInteractive;
+exports.resolveAppId = resolveAppId;
+exports.describeRelease = describeRelease;
+exports.resolveRelease = resolveRelease;
+const chalk_1 = __importDefault(require("chalk"));
+const client_1 = require("../api/client");
+const credentials_1 = require("./credentials");
+const apps_1 = require("./apps");
+const context_1 = require("./context");
+const prompt_1 = require("./prompt");
+const output_1 = require("./output");
+const validate_1 = require("./validate");
+/**
+ * True when this process must not prompt: no TTY, or the caller forbade it.
+ *
+ * `isJson()` is the authority on machine mode rather than a per-command
+ * `opts.json`. Commander does not hand root options down to subcommand
+ * handlers — and because the root declares `--json` too, it consumes the flag
+ * before a subcommand ever sees it. So the flag is read once from raw argv at
+ * startup (`applyGlobalFlags`) and every consumer asks `output.ts`. The
+ * per-command `--json` declarations remain, purely so `--help` documents them.
+ */
+function isNonInteractive(opts = {}) {
+    return (!!opts.nonInteractive ||
+        (0, output_1.isJson)() ||
+        !process.stdin.isTTY ||
+        !process.stdout.isTTY ||
+        process.argv.includes('--non-interactive') ||
+        process.env.CI === 'true');
+}
+/**
+ * Resolve the app id for a command.
+ *
+ * Never returns an empty string — it either returns an id or exits with a
+ * message naming the exact flag to pass.
+ */
+async function resolveAppId(opts = {}) {
+    const flag = opts.flag ?? '--app-id';
+    // An explicit flag is checked before it is used. The two ways an id arrives
+    // broken both end in a confusing 404 rather than a usage error: an unset
+    // shell variable (`--app-id $APP`) leaves the flag to swallow whatever comes
+    // next, and a mis-quoted paste brings whitespace with it. Only the explicit
+    // value is checked — a stored scalebun.json or SCALEBUN_APP_ID is the user's
+    // own earlier input and failing here would strand a linked project.
+    if (opts.appId !== undefined)
+        (0, validate_1.checkedId)(flag, opts.appId);
+    // Layers 1 + 2 — explicit, then ambient. getContext does both, in order.
+    const ctx = (0, context_1.getContext)({ appId: opts.appId });
+    if (ctx.appId)
+        return ctx.appId;
+    const creds = (0, credentials_1.readCredentials)();
+    if (!creds) {
+        (0, output_1.fail)('Not signed in.', ['Run `scalebun login`, or set SCALEBUN_TOKEN in CI.'], output_1.ExitCode.Usage);
+    }
+    // Layers 3 + 4 need the network, so they are also the layers CI must not reach.
+    if (isNonInteractive(opts)) {
+        (0, output_1.fail)(`${flag} is required.`, [
+            `Pass ${flag}, set SCALEBUN_APP_ID, or run \`scalebun link\` in this project.`,
+            'This shell is not interactive, so the app cannot be chosen here.',
+        ], output_1.ExitCode.Usage);
+    }
+    let entries;
+    try {
+        entries = await (0, apps_1.fetchAllApps)(new client_1.ApiClient(creds));
+    }
+    catch (err) {
+        (0, output_1.fail)(`Could not list apps: ${err?.message ?? err}`, [], output_1.ExitCode.Network);
+    }
+    if (!entries.length) {
+        (0, output_1.fail)('This account has no apps yet.', ['Create one in the dashboard (Organization → Project → App), then re-run.'], output_1.ExitCode.Usage);
+    }
+    // Layer 3 — one app is not a choice, so do not present it as one.
+    if (entries.length === 1) {
+        const only = entries[0];
+        console.log(chalk_1.default.dim(`Using your only app: ${only.app.name} (${only.app.id})`));
+        rememberIfLinked(only);
+        return only.app.id;
+    }
+    // Layer 4 — a real choice, so ask.
+    const chosen = await (0, prompt_1.select)('Which app?', entries.map((e) => ({
+        label: `${e.app.name}  ${chalk_1.default.dim(`${e.orgName} / ${e.projectName}`)}`,
+        value: e,
+    })));
+    (0, prompt_1.closePrompts)();
+    rememberIfLinked(chosen);
+    return chosen.app.id;
+}
+/**
+ * Cache the choice into an EXISTING scalebun.json.
+ *
+ * Deliberately does not create one: `scalebun link` is the command that decides
+ * a directory is a ScaleBun project, and a picker answering one command should
+ * not silently write a config file into a directory the user never linked.
+ */
+function rememberIfLinked(entry) {
+    const root = (0, context_1.findProjectRoot)();
+    if (!root)
+        return;
+    try {
+        (0, context_1.writeProjectConfig)(root, { appId: entry.app.id, appName: entry.app.name });
+    }
+    catch {
+        /* cache only */
+    }
+}
+function describeRelease(r) {
+    const v = r.bundle?.version != null ? `v${r.bundle.version}` : r.id;
+    const p = r.bundle?.platform ? ` (${r.bundle.platform})` : '';
+    return `${v}${p} — ${r.status} @ ${r.rolloutPercent ?? 0}%`;
+}
+async function resolveRelease(releases, opts) {
+    if (opts.releaseId) {
+        const hit = releases.find((r) => r.id === opts.releaseId);
+        if (!hit)
+            (0, output_1.fail)(`No release ${opts.releaseId} on this app.`, [], output_1.ExitCode.Usage);
+        return hit;
+    }
+    const candidates = releases.filter((r) => opts.statuses.includes(r.status));
+    if (candidates.length === 0) {
+        (0, output_1.fail)(`Nothing to ${opts.verb} — no release is ${opts.statuses.join(' or ')}.`, ['Run `scalebun ota releases` to see the current state.'], output_1.ExitCode.Usage);
+    }
+    if (candidates.length === 1)
+        return candidates[0];
+    // More than one qualifies. Refusing to guess is right — but the old code
+    // then exited and made the operator copy an id out of a list during an
+    // incident. On a TTY, offer the list as a choice instead.
+    if (isNonInteractive(opts)) {
+        (0, output_1.fail)(`${candidates.length} releases are ${opts.statuses.join(' or ')} — pass --release-id.`, candidates.map((r) => `  ${r.id}  ${describeRelease(r)}`), output_1.ExitCode.Usage);
+    }
+    const chosen = await (0, prompt_1.select)(`Which release do you want to ${opts.verb}?`, candidates.map((r) => ({ label: describeRelease(r), value: r })));
+    (0, prompt_1.closePrompts)();
+    return chosen;
+}
+//# sourceMappingURL=resolve.js.map

package/lib/utils/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/utils/resolve.ts"],"names":[],"mappings":";;;;;AAsDA,4CASC;AAQD,oCAsEC;AAmCD,0CAIC;AAED,wCA6CC;AAnOD,kDAA0B;AAC1B,0CAA0C;AAC1C,+CAAgD;AAChD,iCAAgD;AAChD,uCAA4E;AAC5E,qCAAgD;AAChD,qCAAkD;AAClD,yCAAuC;AAqCvC;;;;;;;;;GASG;AACH,SAAgB,gBAAgB,CAAC,OAAqC,EAAE;IACtE,OAAO,CACL,CAAC,CAAC,IAAI,CAAC,cAAc;QACrB,IAAA,eAAM,GAAE;QACR,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QACpB,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QACrB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAC1B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAAC,OAAoB,EAAE;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC;IAErC,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,oEAAoE;IACpE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,IAAA,oBAAS,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAE1D,yEAAyE;IACzE,MAAM,GAAG,GAAG,IAAA,oBAAU,EAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC;IAEhC,MAAM,KAAK,GAAG,IAAA,6BAAe,GAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAA,aAAI,EACF,gBAAgB,EAChB,CAAC,oDAAoD,CAAC,EACtD,iBAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAA,aAAI,EACF,GAAG,IAAI,eAAe,EACtB;YACE,QAAQ,IAAI,kEAAkE;YAC9E,kEAAkE;SACnE,EACD,iBAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IAED,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAA,mBAAY,EAAC,IAAI,kBAAS,CAAC,KAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAA,aAAI,EAAC,wBAAwB,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,iBAAQ,CAAC,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC,OAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,IAAA,aAAI,EACF,+BAA+B,EAC/B,CAAC,0EAA0E,CAAC,EAC5E,iBAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,IAAI,OAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACjF,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACrB,CAAC;IAED,mCAAmC;IACnC,MAAM,MAAM,GAAG,MAAM,IAAA,eAAM,EACzB,YAAY,EACZ,OAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnB,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE;QACvE,KAAK,EAAE,CAAC;KACT,CAAC,CAAC,CACJ,CAAC;IACF,IAAA,qBAAY,GAAE,CAAC;IACf,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAe;IACvC,MAAM,IAAI,GAAG,IAAA,yBAAe,GAAE,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC;QACH,IAAA,4BAAkB,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;AACH,CAAC;AAkBD,SAAgB,eAAe,CAAC,CAAa;IAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC;AAC9D,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,QAAsB,EACtB,IAOC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG;YAAE,IAAA,aAAI,EAAC,cAAc,IAAI,CAAC,SAAS,eAAe,EAAE,EAAE,EAAE,iBAAQ,CAAC,KAAK,CAAC,CAAC;QAChF,OAAO,GAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,IAAA,aAAI,EACF,cAAc,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EACxE,CAAC,uDAAuD,CAAC,EACzD,iBAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IAElD,yEAAyE;IACzE,uEAAuE;IACvE,0DAA0D;IAC1D,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAA,aAAI,EACF,GAAG,UAAU,CAAC,MAAM,iBAAiB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EACtF,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,EACzD,iBAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,eAAM,EACzB,gCAAgC,IAAI,CAAC,IAAI,GAAG,EAC5C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CACjE,CAAC;IACF,IAAA,qBAAY,GAAE,CAAC;IACf,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/lib/utils/sdkBin.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Locating and running @scalebun/react-native's bin from this CLI.
+ *
+ * `init android` / `init ios` live in the SDK package (they need its native
+ * codemods), but both this CLI and the SDK declare the same `scalebun` bin
+ * name — so whichever binary the user ends up with must be able to reach the
+ * other's commands. The SDK bin already forwards `ota …` here; these helpers
+ * are the return path, shared by the unknown-command forwarder (index.ts) and
+ * quickstart's native-wiring step.
+ */
+/** Resolve @scalebun/react-native's bin script, or null when absent. */
+export declare function resolveSdkBin(): string | null;
+/**
+ * Run the SDK bin with the given argv, inheriting stdio.
+ * Returns the child's exit code (1 when the child died on a signal).
+ */
+export declare function runSdkBin(sdkBin: string, args: string[]): number;
+//# sourceMappingURL=sdkBin.d.ts.map

package/lib/utils/sdkBin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdkBin.d.ts","sourceRoot":"","sources":["../../src/utils/sdkBin.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AAEH,wEAAwE;AACxE,wBAAgB,aAAa,IAAI,MAAM,GAAG,IAAI,CAc7C;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAGhE"}

package/lib/utils/sdkBin.js

@@ -0,0 +1,76 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSdkBin = resolveSdkBin;
+exports.runSdkBin = runSdkBin;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+/**
+ * Locating and running @scalebun/react-native's bin from this CLI.
+ *
+ * `init android` / `init ios` live in the SDK package (they need its native
+ * codemods), but both this CLI and the SDK declare the same `scalebun` bin
+ * name — so whichever binary the user ends up with must be able to reach the
+ * other's commands. The SDK bin already forwards `ota …` here; these helpers
+ * are the return path, shared by the unknown-command forwarder (index.ts) and
+ * quickstart's native-wiring step.
+ */
+/** Resolve @scalebun/react-native's bin script, or null when absent. */
+function resolveSdkBin() {
+    try {
+        // The SDK's `exports` map has no "./bin/*" entry, so resolving the bin
+        // subpath directly throws ERR_PACKAGE_PATH_NOT_EXPORTED. "./package.json"
+        // IS exported — resolve that and join. cwd first: the SDK is installed in
+        // the app being worked on, not necessarily next to this CLI.
+        const pkg = require.resolve('@scalebun/react-native/package.json', {
+            paths: [process.cwd(), __dirname],
+        });
+        const bin = path.join(path.dirname(pkg), 'bin', 'scalebun.js');
+        return fs.existsSync(bin) ? bin : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Run the SDK bin with the given argv, inheriting stdio.
+ * Returns the child's exit code (1 when the child died on a signal).
+ */
+function runSdkBin(sdkBin, args) {
+    const res = (0, child_process_1.spawnSync)(process.execPath, [sdkBin, ...args], { stdio: 'inherit' });
+    return res.status ?? 1;
+}
+//# sourceMappingURL=sdkBin.js.map

package/lib/utils/sdkBin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdkBin.js","sourceRoot":"","sources":["../../src/utils/sdkBin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,sCAcC;AAMD,8BAGC;AAvCD,uCAAyB;AACzB,2CAA6B;AAC7B,iDAA0C;AAE1C;;;;;;;;;GASG;AAEH,wEAAwE;AACxE,SAAgB,aAAa;IAC3B,IAAI,CAAC;QACH,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,qCAAqC,EAAE;YACjE,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC/D,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAC,MAAc,EAAE,IAAc;IACtD,MAAM,GAAG,GAAG,IAAA,yBAAS,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/lib/utils/signer.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Where a release signature comes from.
+ *
+ * ── Why this exists ──────────────────────────────────────────────────────────
+ *
+ * Control T-1 of a customer's security assessment reads: "Signing key held in an
+ * HSM or approved key vault; signing only within controlled CI/CD." That is an
+ * obligation on THEM — we never hold the key — but until now our CLI could only
+ * sign with a PEM on disk, so a customer whose security policy requires an HSM
+ * had no way to use the product at all.
+ *
+ * ── Why an external COMMAND rather than an SDK per vault ─────────────────────
+ *
+ * A command covers AWS KMS, Google Cloud KMS, Azure Key Vault, PKCS#11, YubiHSM
+ * and whatever the customer has already standardised on, without this package
+ * taking a dependency on any of them. Every dependency a signing tool carries is
+ * a dependency someone has to audit forever, and the customers who need this are
+ * precisely the ones who will audit it.
+ *
+ * ── What does NOT change ─────────────────────────────────────────────────────
+ *
+ * The bytes that get signed, and the self-verify that happens afterwards. The
+ * canonical payload is serialized exactly as before, and the resulting signature
+ * is verified before it is returned, so a vault that produces an unusable
+ * signature fails on the build machine instead of on a million handsets.
+ *
+ * That check is the reason an external signer must ALSO supply the public key:
+ * with a local PEM the public half is derived from the private one, and we do
+ * not have the private one here. Skipping the verification instead would remove
+ * the guarantee exactly where it matters most — a remote signer is the case with
+ * the most ways to go quietly wrong.
+ */
+import * as crypto from 'crypto';
+export interface Signer {
+    /** Sign the canonical payload bytes. */
+    sign(bytes: Uint8Array): Promise<Buffer>;
+    /** The public half, for the self-verify. */
+    publicKey(): Promise<crypto.KeyObject>;
+    /** One line for --dry-run output and the audit trail. */
+    describe(): string;
+}
+/** Today's behaviour, unchanged: a PKCS#8 PEM on this machine. */
+export declare class LocalPemSigner implements Signer {
+    private readonly key;
+    constructor(privateKeyPem: string | Buffer, passphrase?: string);
+    sign(bytes: Uint8Array): Promise<Buffer>;
+    publicKey(): Promise<crypto.KeyObject>;
+    describe(): string;
+}
+export interface ExternalSignerConfig {
+    /** Command line, e.g. "aws kms sign --key-id alias/ota ...". */
+    command: string;
+    /** SPKI PEM of the public half, or a path to one. */
+    publicKeyPem: string;
+    timeoutMs?: number;
+}
+/**
+ * Sign by handing the payload to a command on stdin and reading the signature
+ * from stdout.
+ *
+ * The contract is deliberately the smallest one that can work:
+ *
+ *   stdin   the raw canonical payload bytes
+ *   stdout  the raw signature bytes, or the same base64-encoded
+ *   exit 0  success; anything else is a failure and the build stops
+ *
+ * Base64 is accepted because most cloud KMS CLIs emit it by default, and
+ * requiring every customer to pipe through a decoder would be a footgun that
+ * buys nothing.
+ */
+export declare class ExternalCommandSigner implements Signer {
+    private pub?;
+    private readonly cfg;
+    constructor(cfg: ExternalSignerConfig);
+    sign(bytes: Uint8Array): Promise<Buffer>;
+    publicKey(): Promise<crypto.KeyObject>;
+    describe(): string;
+    private run;
+}
+/**
+ * Build a signer from configuration.
+ *
+ * An external signer is used ONLY when explicitly configured. With nothing set,
+ * this returns the local PEM signer and every existing flow behaves exactly as
+ * it did — which is the whole point: this is additive, and a customer who has
+ * not asked for an HSM must not notice it exists.
+ */
+export declare function resolveSigner(opts: {
+    privateKeyPem?: string | Buffer | null;
+    passphrase?: string;
+    signerCommand?: string;
+    signerPublicKey?: string;
+}): Signer;
+//# sourceMappingURL=signer.d.ts.map

package/lib/utils/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/utils/signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAUjC,MAAM,WAAW,MAAM;IACrB,wCAAwC;IACxC,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,4CAA4C;IAC5C,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,yDAAyD;IACzD,QAAQ,IAAI,MAAM,CAAC;CACpB;AAED,kEAAkE;AAClE,qBAAa,cAAe,YAAW,MAAM;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;gBAE3B,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;IASzD,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;IAI5C,QAAQ,IAAI,MAAM;CAGnB;AAED,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,qBAAsB,YAAW,MAAM;IAClD,OAAO,CAAC,GAAG,CAAC,CAAmB;IAE/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAuB;gBAI/B,GAAG,EAAE,oBAAoB;IAY/B,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAsBxC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;IAe5C,QAAQ,IAAI,MAAM;IAIlB,OAAO,CAAC,GAAG;CA8DZ;AAKD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,MAAM,CAaT"}