@scalebun-release/cli 2.5.0

package/lib/commands/ota-bundle.js

@@ -0,0 +1,253 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerOtaBundleCommand = registerOtaBundleCommand;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const bundle_1 = require("../utils/bundle");
+const validate_1 = require("../utils/validate");
+const provenance_1 = require("../utils/provenance");
+const bundleStore_1 = require("../utils/bundleStore");
+/**
+ * Ensure that the bundles folder and its artifacts are ignored by git.
+ */
+function ensureBundlesGitIgnored(bundleFilePath) {
+    const bundleDir = path.dirname(bundleFilePath);
+    if (!fs.existsSync(bundleDir)) {
+        fs.mkdirSync(bundleDir, { recursive: true });
+    }
+    let updatedGitignore = false;
+    // 1. Inside the bundles directory itself, create a .gitignore so all files are ignored by default
+    const baseDirName = path.basename(bundleDir).toLowerCase();
+    if (baseDirName === 'bundles' || baseDirName === 'bundels') {
+        const localGitignore = path.join(bundleDir, '.gitignore');
+        if (!fs.existsSync(localGitignore)) {
+            try {
+                fs.writeFileSync(localGitignore, '# Ignore all bundle files in this directory\n*\n!.gitignore\n', 'utf8');
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
+    // 2. Also ensure root project .gitignore ignores bundles/
+    let curr = process.cwd();
+    for (let i = 0; i < 5; i++) {
+        const gitignorePath = path.join(curr, '.gitignore');
+        const isGitRepo = fs.existsSync(path.join(curr, '.git'));
+        if (fs.existsSync(gitignorePath) || isGitRepo) {
+            const gitignoreTarget = fs.existsSync(gitignorePath) ? gitignorePath : path.join(curr, '.gitignore');
+            let content = '';
+            try {
+                if (fs.existsSync(gitignoreTarget)) {
+                    content = fs.readFileSync(gitignoreTarget, 'utf8');
+                }
+            }
+            catch {
+                content = '';
+            }
+            // Check if bundles or bundles/ is already ignored
+            const lines = content.split(/\r?\n/).map((l) => l.trim());
+            const alreadyIgnored = lines.some((l) => l === 'bundles' ||
+                l === 'bundles/' ||
+                l === '/bundles' ||
+                l === '/bundles/' ||
+                l === '**/bundles/**' ||
+                l === '**/bundles');
+            if (!alreadyIgnored) {
+                const prefix = content.length > 0 && !content.endsWith('\n') ? '\n' : '';
+                const entry = `${prefix}\n# Scalebun OTA bundles\nbundles/\n`;
+                try {
+                    fs.writeFileSync(gitignoreTarget, content + entry, 'utf8');
+                    updatedGitignore = true;
+                }
+                catch {
+                    /* ignore */
+                }
+            }
+            break;
+        }
+        const parent = path.dirname(curr);
+        if (parent === curr)
+            break;
+        curr = parent;
+    }
+    return updatedGitignore;
+}
+/**
+ * `scalebun ota bundle build` — package a standalone bundle file for upload.
+ *
+ * ── Why this is `bundle build` and not `bundle` ────────────────────────────
+ *
+ * `ota bundles` (plural) lists what is on the server; `ota bundle` (singular)
+ * ran Metro and hermesc and wrote a file to disk. Two commands one character
+ * apart doing entirely different things is a footgun: reaching for the list
+ * and getting a full Hermes compile is a minute of confusion at best, and at
+ * worst it happens in a pipeline.
+ *
+ * Moving the builder under an explicit verb makes bare `ota bundle` print the
+ * group's help — which disambiguates instead of guessing. `bundle` is kept as
+ * an alias of the group, so nothing that already worked stops working.
+ *
+ * Usage:
+ *   npx scalebun ota bundle build --platform android
+ *   npx scalebun ota bundle build --platform ios --output ./bundles/my-app.bundle
+ */
+function registerOtaBundleCommand(ota) {
+    const bundle = ota
+        .command('bundle')
+        .description('Build a bundle file locally (see `ota bundles` to list uploaded ones)');
+    bundle
+        .command('build', { isDefault: false })
+        .description('Build a standalone OTA bundle file for manual upload in the Scalebun Dashboard')
+        .option('--platform <platform>', 'Target platform: android | ios', 'android')
+        .option('--entry-file <path>', 'JS entry file', 'index.js')
+        .option('--output <path>', 'Output bundle destination path (default: ./bundles/index.<platform>.bundle)')
+        .option('--key-dir <path>', 'Directory containing ota-signing-key.pem (default: .scalebun)')
+        .option('--hermes', 'Compile to Hermes bytecode (the default — flag kept for compatibility)')
+        .option('--hermes-disabled', 'Ship plain JS instead of Hermes bytecode (~20-30% slower cold start)')
+        .option('--allow-plain-js', 'Emit uncompiled JS if hermesc fails, instead of aborting')
+        .option('--sourcemap', 'Generate sourcemap alongside the bundle')
+        .action(async (opts) => {
+        const platform = (0, validate_1.checkedEnum)('--platform', opts.platform, ['android', 'ios'], {
+            caseInsensitive: true,
+        });
+        const useHermes = opts.hermesDisabled ? false : true;
+        console.log(`📦 Bundling ${platform} application${useHermes ? ' (Hermes bytecode)' : ''}…`);
+        try {
+            const result = (0, bundle_1.buildBundle)({
+                platform,
+                entryFile: opts.entryFile,
+                dev: false,
+                hermes: useHermes,
+                allowPlainJs: opts.allowPlainJs ?? false,
+                sourcemap: opts.sourcemap,
+            });
+            // Resolve destination inside bundles/ by default
+            let destPath;
+            // A DIRECTORY gets the same distinct name the default path uses:
+            // pointing builds at ./artifacts should not quietly reintroduce the
+            // overwrite-every-time behaviour that made older builds unrecoverable.
+            // A full FILE path is an explicit choice and is honoured verbatim, so
+            // CI referencing a fixed filename keeps working.
+            const named = (0, bundleStore_1.bundleFileName)(platform, (0, provenance_1.collectProvenance)().gitSha);
+            if (opts.output) {
+                const resolved = path.resolve(opts.output);
+                if (fs.existsSync(resolved) && fs.statSync(resolved).isDirectory()) {
+                    destPath = path.join(resolved, named);
+                }
+                else if (opts.output.endsWith('/') || opts.output.endsWith('\\')) {
+                    destPath = path.join(resolved, named);
+                }
+                else {
+                    destPath = resolved;
+                }
+            }
+            else {
+                // One file per build, not one file overwritten by every build.
+                // `bundles/index.<platform>.bundle` meant build #3 destroyed #2 and
+                // #1 — so the moment the newest turns out to be broken there is
+                // nothing left to fall back to. The timestamp orders them; the short
+                // git sha is what a human recognises when choosing between them.
+                destPath = path.resolve(bundleStore_1.BUNDLES_DIR, (0, bundleStore_1.bundleFileName)(platform, (0, provenance_1.collectProvenance)().gitSha));
+            }
+            const destDir = path.dirname(destPath);
+            if (!fs.existsSync(destDir)) {
+                fs.mkdirSync(destDir, { recursive: true });
+            }
+            // Ensure bundles directory is git-ignored
+            const gitignoreUpdated = ensureBundlesGitIgnored(destPath);
+            fs.copyFileSync(result.bundlePath, destPath);
+            // Compute SHA-256. Under SB-OTA-RSA-SHA256-V1 the signature is not a
+            // detached `.sig` over the hash — it is an RSA signature over a binary
+            // signed-release payload whose identity fields (releaseId, bundleId,
+            // releaseSequence) are reserved by the server at publish time. A bundle
+            // built offline for manual dashboard upload therefore cannot be signed
+            // here; sign at `scalebun ota publish`, or use the dashboard's signed
+            // upload flow. This command emits the bundle + its hash only.
+            const bundleBytes = fs.readFileSync(destPath);
+            const sha256 = crypto.createHash('sha256').update(bundleBytes).digest('hex');
+            // If sourcemap was generated, also copy it alongside the bundle in bundles/
+            if (opts.sourcemap && result.sourcemapPath && fs.existsSync(result.sourcemapPath)) {
+                const mapDest = `${destPath}.map`;
+                fs.copyFileSync(result.sourcemapPath, mapDest);
+            }
+            const stats = fs.statSync(destPath);
+            const sizeMb = (stats.size / (1024 * 1024)).toFixed(2);
+            // Record what this bundle IS, beside it. `ota sign` shows these so the
+            // right build can be chosen later — and the git sha, not the clock, is
+            // what identifies a build to the person who made it.
+            const prov = (0, provenance_1.collectProvenance)();
+            let gitDirty;
+            try {
+                const st = require('child_process')
+                    .execSync('git status --porcelain', { cwd: process.cwd(), stdio: ['ignore', 'pipe', 'ignore'] })
+                    .toString()
+                    .trim();
+                gitDirty = st.length > 0;
+            }
+            catch {
+                gitDirty = undefined;
+            }
+            const meta = {
+                platform,
+                createdAt: new Date().toISOString(),
+                sha256,
+                size: stats.size,
+                gitSha: prov.gitSha,
+                gitBranch: prov.gitBranch,
+                gitDirty,
+            };
+            fs.writeFileSync((0, bundleStore_1.metaPathFor)(destPath), JSON.stringify(meta, null, 2) + '\n');
+            // Old builds are cheap to keep and expensive to lose; prune generously.
+            const pruned = (0, bundleStore_1.pruneBundles)();
+            console.log(`\n✔ Bundle successfully created!`);
+            console.log(`   Output Path: ${destPath}`);
+            console.log(`   Size:        ${sizeMb} MB (${stats.size} bytes)`);
+            console.log(`   SHA-256:     ${sha256}`);
+            console.log(`   Signature:   signed at publish time (RSA-3072 / SB-OTA-RSA-SHA256-V1)`);
+            if (gitignoreUpdated) {
+                console.log(`   Git Status:  Added 'bundles/' to .gitignore`);
+            }
+            console.log(`\n💡 You can now drag & drop this file into the Scalebun Dashboard at https://dash.scalebun.com/ota/publish`);
+        }
+        catch (err) {
+            console.error(`✖ Bundling failed: ${err?.message || err}`);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=ota-bundle.js.map

package/lib/commands/ota-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ota-bundle.js","sourceRoot":"","sources":["../../src/commands/ota-bundle.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8GA,4DAuJC;AArQD,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAE7B,4CAA8C;AAC9C,gDAAgD;AAChD,oDAAwD;AACxD,sDAM8B;AAE9B;;GAEG;AACH,SAAS,uBAAuB,CAAC,cAAsB;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,kGAAkG;IAClG,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,EAAE,CAAC,aAAa,CACd,cAAc,EACd,+DAA+D,EAC/D,MAAM,CACP,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,SAAS,EAAE,CAAC;YAC9C,MAAM,eAAe,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACrG,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;oBACnC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,EAAE,CAAC;YACf,CAAC;YAED,kDAAkD;YAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,KAAK,SAAS;gBACf,CAAC,KAAK,UAAU;gBAChB,CAAC,KAAK,UAAU;gBAChB,CAAC,KAAK,WAAW;gBACjB,CAAC,KAAK,eAAe;gBACrB,CAAC,KAAK,YAAY,CACrB,CAAC;YAEF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,MAAM,KAAK,GAAG,GAAG,MAAM,sCAAsC,CAAC;gBAC9D,IAAI,CAAC;oBACH,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,OAAO,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC;oBAC3D,gBAAgB,GAAG,IAAI,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;YACH,CAAC;YACD,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM;QAC3B,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,wBAAwB,CAAC,GAAY;IACnD,MAAM,MAAM,GAAG,GAAG;SACf,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uEAAuE,CAAC,CAAC;IAExF,MAAM;SACH,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SACtC,WAAW,CAAC,gFAAgF,CAAC;SAC7F,MAAM,CAAC,uBAAuB,EAAE,gCAAgC,EAAE,SAAS,CAAC;SAC5E,MAAM,CAAC,qBAAqB,EAAE,eAAe,EAAE,UAAU,CAAC;SAC1D,MAAM,CACL,iBAAiB,EACjB,6EAA6E,CAC9E;SACA,MAAM,CAAC,kBAAkB,EAAE,+DAA+D,CAAC;SAC3F,MAAM,CAAC,UAAU,EAAE,wEAAwE,CAAC;SAC5F,MAAM,CAAC,mBAAmB,EAAE,sEAAsE,CAAC;SACnG,MAAM,CAAC,kBAAkB,EAAE,0DAA0D,CAAC;SACtF,MAAM,CAAC,aAAa,EAAE,yCAAyC,CAAC;SAChE,MAAM,CACL,KAAK,EAAE,IASN,EAAE,EAAE;QACH,MAAM,QAAQ,GAAG,IAAA,sBAAW,EAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,KAAK,CAAU,EAAE;YACrF,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,eAAe,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAE5F,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,oBAAW,EAAC;gBACzB,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,EAAE,KAAK;gBACV,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,KAAK;gBACxC,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YAEH,iDAAiD;YACjD,IAAI,QAAgB,CAAC;YACrB,iEAAiE;YACjE,oEAAoE;YACpE,uEAAuE;YACvE,sEAAsE;YACtE,iDAAiD;YACjD,MAAM,KAAK,GAAG,IAAA,4BAAc,EAAC,QAAQ,EAAE,IAAA,8BAAiB,GAAE,CAAC,MAAM,CAAC,CAAC;YACnE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBACnE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACxC,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,QAAQ,CAAC;gBACtB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,+DAA+D;gBAC/D,oEAAoE;gBACpE,gEAAgE;gBAChE,qEAAqE;gBACrE,iEAAiE;gBACjE,QAAQ,GAAG,IAAI,CAAC,OAAO,CACrB,yBAAW,EACX,IAAA,4BAAc,EAAC,QAAQ,EAAE,IAAA,8BAAiB,GAAE,CAAC,MAAM,CAAC,CACrD,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;YAED,0CAA0C;YAC1C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;YAE3D,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAE7C,qEAAqE;YACrE,uEAAuE;YACvE,qEAAqE;YACrE,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE,8DAA8D;YAC9D,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE7E,4EAA4E;YAC5E,IAAI,IAAI,CAAC,SAAS,IAAK,MAAc,CAAC,aAAa,IAAI,EAAE,CAAC,UAAU,CAAE,MAAc,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpG,MAAM,OAAO,GAAG,GAAG,QAAQ,MAAM,CAAC;gBAClC,EAAE,CAAC,YAAY,CAAE,MAAc,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAEvD,uEAAuE;YACvE,uEAAuE;YACvE,qDAAqD;YACrD,MAAM,IAAI,GAAG,IAAA,8BAAiB,GAAE,CAAC;YACjC,IAAI,QAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC;qBAChC,QAAQ,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;qBAC/F,QAAQ,EAAE;qBACV,IAAI,EAAE,CAAC;gBACV,QAAQ,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,SAAS,CAAC;YACvB,CAAC;YACD,MAAM,IAAI,GAAe;gBACvB,QAAQ;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ;aACT,CAAC;YACF,EAAE,CAAC,aAAa,CAAC,IAAA,yBAAW,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAE9E,wEAAwE;YACxE,MAAM,MAAM,GAAG,IAAA,0BAAY,GAAE,CAAC;YAE9B,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,QAAQ,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;YACxF,IAAI,gBAAgB,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,CAAC,GAAG,CACT,6GAA6G,CAC9G,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CACF,CAAC;AACN,CAAC"}

package/lib/commands/ota-channels.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function registerOtaChannelsCommand(ota: Command): void;
+//# sourceMappingURL=ota-channels.d.ts.map

package/lib/commands/ota-channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ota-channels.d.ts","sourceRoot":"","sources":["../../src/commands/ota-channels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsHpC,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CA2M7D"}

package/lib/commands/ota-channels.js

@@ -0,0 +1,231 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerOtaChannelsCommand = registerOtaChannelsCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const credentials_1 = require("../utils/credentials");
+const client_1 = require("../api/client");
+const resolve_1 = require("../utils/resolve");
+const prompt_1 = require("../utils/prompt");
+const output_1 = require("../utils/output");
+async function loadChannels(api, appId) {
+    try {
+        const res = await api.get(`/saas/apps/${appId}/ota/channels`);
+        return Array.isArray(res) ? res : [];
+    }
+    catch (err) {
+        (0, output_1.failFromError)('Could not list channels', err);
+    }
+}
+/**
+ * Accept a channel by name OR id.
+ *
+ * Operators think in names — "production" — and ids appear nowhere in their
+ * workflow. The backend already resolves either for bundle lookups, so the CLI
+ * matching only ids would be gratuitously stricter than the API.
+ */
+function findChannel(channels, nameOrId) {
+    return (channels.find((c) => c.id === nameOrId) ||
+        channels.find((c) => c.name.toLowerCase() === nameOrId.toLowerCase()));
+}
+function client() {
+    const creds = (0, credentials_1.readCredentials)();
+    if (!creds)
+        (0, output_1.fail)('Not signed in.', ['Run `scalebun login` first.'], output_1.ExitCode.Usage);
+    return new client_1.ApiClient(creds);
+}
+/**
+ * Which environment a new channel belongs to.
+ *
+ * Order: an explicit --env (by name or id) > the environment an existing
+ * channel already uses > the app's only environment. Fails with the real list
+ * rather than a bare 400 when none of those resolve, because "environmentId
+ * must be a string" tells the operator nothing they can act on.
+ */
+async function resolveEnvironmentId(api, appId, existing, wanted) {
+    let environments = [];
+    try {
+        const paged = await api.get(`/saas/apps/${appId}/ota/channels/paged?page=1&pageSize=1`);
+        environments = paged?.environments ?? [];
+    }
+    catch {
+        // Listing is a convenience here; the fallbacks below still work.
+    }
+    if (wanted) {
+        const hit = environments.find((e) => e.id === wanted) ||
+            environments.find((e) => e.name.toLowerCase() === wanted.toLowerCase());
+        if (hit)
+            return hit.id;
+        (0, output_1.fail)(`No environment "${wanted}" on this app.`, environments.length
+            ? [`Existing: ${environments.map((e) => e.name).join(', ')}`]
+            : ['This app has no environments yet — create one in the dashboard.'], output_1.ExitCode.Usage);
+    }
+    const fromChannel = existing.find((c) => c.environmentId)?.environmentId;
+    if (fromChannel)
+        return fromChannel;
+    if (environments.length === 1)
+        return environments[0].id;
+    if (environments.length > 1) {
+        (0, output_1.fail)('This app has several environments — say which one with --env.', environments.map((e) => `  ${e.name}  ${e.id}`), output_1.ExitCode.Usage);
+    }
+    (0, output_1.fail)('Could not determine which environment this channel belongs to.', ['Pass --env <name>, or create the first channel from the dashboard.'], output_1.ExitCode.Usage);
+}
+function registerOtaChannelsCommand(ota) {
+    const channels = ota
+        .command('channels')
+        .alias('channel')
+        .description('List, create, rename or remove OTA channels');
+    // Bare `ota channels` keeps listing, which is what it has always done.
+    channels
+        .option('--app-id <id>', 'Scalebun app ID (resolved from scalebun.json when omitted)')
+        .option('--json', 'Machine-readable output')
+        .action(async (opts) => {
+        // A subcommand was given — commander runs that action, not this one.
+        if (channels.args.length && channels.commands.some((c) => c.name() === channels.args[0]))
+            return;
+        const api = client();
+        const appId = await (0, resolve_1.resolveAppId)({ appId: opts.appId, nonInteractive: opts.json });
+        const rows = await loadChannels(api, appId);
+        (0, output_1.emit)(() => {
+            console.log('');
+            if (!rows.length) {
+                console.log('  No channels yet — `scalebun ota publish` creates `default` automatically.\n');
+                return;
+            }
+            for (const c of rows) {
+                const env = c.environment?.name ? chalk_1.default.dim(`  env ${c.environment.name}`) : '';
+                console.log(`  ${chalk_1.default.bold(c.name.padEnd(16))}${env}`);
+                console.log(chalk_1.default.dim(`    ${c.id}`));
+            }
+            // One channel means every bundle ever built goes straight to
+            // production with nowhere to test first. Worth saying out loud.
+            if (rows.length === 1) {
+                console.log(chalk_1.default.yellow(`\n  Only one channel. Everything ships straight to ${rows[0].name} —\n` +
+                    '  `scalebun ota channels create --name staging` gives you somewhere to test.'));
+            }
+            console.log('');
+        }, { ok: true, count: rows.length, channels: rows });
+    });
+    // ── create ────────────────────────────────────────────────────────────────
+    channels
+        .command('create')
+        .description('Create a channel')
+        .requiredOption('--name <name>', 'Channel name, e.g. staging')
+        .option('--app-id <id>', 'Scalebun app ID (resolved from scalebun.json when omitted)')
+        .option('--env <nameOrId>', 'Environment to attach it to')
+        .option('--json', 'Machine-readable output')
+        .action(async (_raw, cmd) => {
+        // optsWithGlobals, not the action's own opts. The PARENT `ota channels`
+        // also declares --app-id, and commander gives a flag to the first command
+        // that declares it — so `ota channels create --app-id X` parsed X onto the
+        // parent and handed this action an undefined, which then reported
+        // "--app-id is required" with the id sitting right there in the command.
+        // Only the env var worked, which is a miserable thing to discover.
+        const opts = cmd.optsWithGlobals();
+        const api = client();
+        const appId = await (0, resolve_1.resolveAppId)({ appId: opts.appId, nonInteractive: opts.json });
+        const existing = await loadChannels(api, appId);
+        if (findChannel(existing, opts.name)) {
+            (0, output_1.fail)(`A channel named "${opts.name}" already exists on this app.`, [], output_1.ExitCode.Usage);
+        }
+        // environmentId is REQUIRED by the API and this never sent it, so every
+        // `channels create` failed with `400 environmentId must be a string` —
+        // the command could not have worked once since it was added.
+        //
+        // Channels live inside an environment, and an app that already has one
+        // channel already has the answer. Reuse it rather than making the user
+        // find an id that never appears in their workflow.
+        const environmentId = await resolveEnvironmentId(api, appId, existing, opts.env);
+        const body = { name: opts.name, environmentId };
+        let created;
+        try {
+            created = await api.post(`/saas/apps/${appId}/ota/channels`, body);
+        }
+        catch (err) {
+            (0, output_1.failFromError)('Could not create the channel', err);
+        }
+        (0, output_1.emit)(() => {
+            console.log(`\n✅ Created channel ${chalk_1.default.bold(created.name)}`);
+            console.log(chalk_1.default.dim(`   ${created.id}`));
+            (0, output_1.printNextSteps)([
+                { label: 'Ship to it', argv: ['ota', 'publish', '--channel', created.name] },
+                { label: 'See every channel', argv: ['ota', 'channels'] },
+            ], chalk_1.default.cyan);
+        }, { ok: true, channel: created });
+    });
+    // ── rename ────────────────────────────────────────────────────────────────
+    channels
+        .command('rename')
+        .description('Rename a channel (this route had no client anywhere)')
+        .requiredOption('--channel <nameOrId>', 'Channel to rename')
+        .requiredOption('--name <newName>', 'New name')
+        .option('--app-id <id>', 'Scalebun app ID (resolved from scalebun.json when omitted)')
+        .option('--json', 'Machine-readable output')
+        .action(async (_raw, cmd) => {
+        // Same parent-swallow as `create`: --app-id lands on the parent
+        // `ota channels`, so read the merged view.
+        const opts = cmd.optsWithGlobals();
+        const api = client();
+        const appId = await (0, resolve_1.resolveAppId)({ appId: opts.appId, nonInteractive: opts.json });
+        const rows = await loadChannels(api, appId);
+        const target = findChannel(rows, opts.channel);
+        if (!target) {
+            (0, output_1.fail)(`No channel "${opts.channel}" on this app.`, rows.map((c) => `  ${c.name}  ${c.id}`), output_1.ExitCode.Usage);
+        }
+        try {
+            await api.patch(`/saas/apps/${appId}/ota/channels/${target.id}`, { name: opts.name });
+        }
+        catch (err) {
+            (0, output_1.failFromError)('Could not rename the channel', err);
+        }
+        (0, output_1.emit)(() => console.log(`\n✅ ${chalk_1.default.bold(target.name)} → ${chalk_1.default.bold(opts.name)}\n`), { ok: true, channelId: target.id, from: target.name, to: opts.name });
+    });
+    // ── remove ────────────────────────────────────────────────────────────────
+    channels
+        .command('rm')
+        .alias('delete')
+        .description('Delete a channel — cascades to its bundles and releases')
+        .requiredOption('--channel <nameOrId>', 'Channel to delete')
+        .option('--app-id <id>', 'Scalebun app ID (resolved from scalebun.json when omitted)')
+        .option('--yes', 'Skip the confirmation (required off a TTY)')
+        .option('--json', 'Machine-readable output')
+        .action(async (_raw, cmd) => {
+        // Same parent-swallow as `create`: --app-id lands on the parent
+        // `ota channels`, so read the merged view.
+        const opts = cmd.optsWithGlobals();
+        const api = client();
+        const appId = await (0, resolve_1.resolveAppId)({ appId: opts.appId, nonInteractive: opts.json });
+        const rows = await loadChannels(api, appId);
+        const target = findChannel(rows, opts.channel);
+        if (!target) {
+            (0, output_1.fail)(`No channel "${opts.channel}" on this app.`, rows.map((c) => `  ${c.name}  ${c.id}`), output_1.ExitCode.Usage);
+        }
+        // This destroys the channel's bundles and releases. Confirming by name
+        // rather than y/n is the same bar delete-bundle sets for one bundle.
+        if (!opts.yes) {
+            if ((0, resolve_1.isNonInteractive)({ nonInteractive: opts.json })) {
+                (0, output_1.fail)('Refusing to delete a channel without confirmation.', ['Pass --yes if this is intentional.'], output_1.ExitCode.Usage);
+            }
+            console.log('');
+            console.log(chalk_1.default.yellow(`⚠️  Deleting ${chalk_1.default.bold(target.name)} also deletes every bundle and release on it.`));
+            const ok = await (0, prompt_1.confirmPhrase)('   Type the channel name to confirm: ', target.name);
+            (0, prompt_1.closePrompts)();
+            if (!ok) {
+                console.log('Cancelled — nothing was deleted.');
+                process.exit(output_1.ExitCode.Ok);
+            }
+        }
+        try {
+            await api.delete(`/saas/apps/${appId}/ota/channels/${target.id}`);
+        }
+        catch (err) {
+            (0, output_1.failFromError)('Could not delete the channel', err, [
+                'Deleting a channel requires an owner or admin role.',
+            ]);
+        }
+        (0, output_1.emit)(() => console.log(`\n🗑  Deleted channel ${chalk_1.default.bold(target.name)}\n`), { ok: true, channelId: target.id, name: target.name });
+    });
+}
+//# sourceMappingURL=ota-channels.js.map

package/lib/commands/ota-channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ota-channels.js","sourceRoot":"","sources":["../../src/commands/ota-channels.ts"],"names":[],"mappings":";;;;;AAsHA,gEA2MC;AAhUD,kDAA0B;AAC1B,sDAAuD;AACvD,0CAA0C;AAC1C,8CAAkE;AAClE,4CAA8D;AAC9D,4CAAsF;AA4BtF,KAAK,UAAU,YAAY,CAAC,GAAc,EAAE,KAAa;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAgB,cAAc,KAAK,eAAe,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAA,sBAAa,EAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,QAAuB,EAAE,QAAgB;IAC5D,OAAO,CACL,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,MAAM;IACb,MAAM,KAAK,GAAG,IAAA,6BAAe,GAAE,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,IAAA,aAAI,EAAC,gBAAgB,EAAE,CAAC,6BAA6B,CAAC,EAAE,iBAAQ,CAAC,KAAK,CAAC,CAAC;IACpF,OAAO,IAAI,kBAAS,CAAC,KAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,oBAAoB,CACjC,GAAc,EACd,KAAa,EACb,QAAuB,EACvB,MAAe;IAEf,IAAI,YAAY,GAAwC,EAAE,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CACzB,cAAc,KAAK,uCAAuC,CAC3D,CAAC;QACF,YAAY,GAAG,KAAK,EAAE,YAAY,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GACP,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;YACzC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,EAAE,CAAC;QACvB,IAAA,aAAI,EACF,mBAAmB,MAAM,gBAAgB,EACzC,YAAY,CAAC,MAAM;YACjB,CAAC,CAAC,CAAC,aAAa,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,CAAC,CAAC,CAAC,iEAAiE,CAAC,EACvE,iBAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACzE,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAA,aAAI,EACF,+DAA+D,EAC/D,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAC/C,iBAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IACD,IAAA,aAAI,EACF,gEAAgE,EAChE,CAAC,oEAAoE,CAAC,EACtE,iBAAQ,CAAC,KAAK,CACf,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CAAC,GAAY;IACrD,MAAM,QAAQ,GAAG,GAAG;SACjB,OAAO,CAAC,UAAU,CAAC;SACnB,KAAK,CAAC,SAAS,CAAC;SAChB,WAAW,CAAC,6CAA6C,CAAC,CAAC;IAE9D,uEAAuE;IACvE,QAAQ;SACL,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,qEAAqE;QACrE,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO;QAEjG,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAE5C,IAAA,aAAI,EACF,GAAG,EAAE;YACH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;gBAC7F,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,6DAA6D;YAC7D,gEAAgE;YAChE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,sDAAsD,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM;oBACtE,8EAA8E,CACjF,CACF,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC,EACD,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,kBAAkB,CAAC;SAC/B,cAAc,CAAC,eAAe,EAAE,4BAA4B,CAAC;SAC7D,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;SACzD,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1B,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,kEAAkE;QAClE,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QAEnC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAEnF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAA,aAAI,EAAC,oBAAoB,IAAI,CAAC,IAAI,+BAA+B,EAAE,EAAE,EAAE,iBAAQ,CAAC,KAAK,CAAC,CAAC;QACzF,CAAC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,6DAA6D;QAC7D,EAAE;QACF,uEAAuE;QACvE,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAEjF,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;QAEzE,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAc,cAAc,KAAK,eAAe,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAA,sBAAa,EAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,IAAA,aAAI,EACF,GAAG,EAAE;YACH,OAAO,CAAC,GAAG,CAAC,uBAAuB,eAAK,CAAC,IAAI,CAAC,OAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,MAAM,OAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5C,IAAA,uBAAc,EACZ;gBACE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAQ,CAAC,IAAI,CAAC,EAAE;gBAC7E,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE;aAC1D,EACD,eAAK,CAAC,IAAI,CACX,CAAC;QACJ,CAAC,EACD,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAQ,EAAE,CAChC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,sDAAsD,CAAC;SACnE,cAAc,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;SAC3D,cAAc,CAAC,kBAAkB,EAAE,UAAU,CAAC;SAC9C,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1B,gEAAgE;QAChE,2CAA2C;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAA,aAAI,EACF,eAAe,IAAI,CAAC,OAAO,gBAAgB,EAC3C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EACvC,iBAAQ,CAAC,KAAK,CACf,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,iBAAiB,MAAO,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAA,sBAAa,EAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,IAAA,aAAI,EACF,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,eAAK,CAAC,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,MAAM,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EACjF,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAO,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,CACvE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,IAAI,CAAC;SACb,KAAK,CAAC,QAAQ,CAAC;SACf,WAAW,CAAC,yDAAyD,CAAC;SACtE,cAAc,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;SAC3D,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,OAAO,EAAE,4CAA4C,CAAC;SAC7D,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1B,gEAAgE;QAChE,2CAA2C;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAA,aAAI,EACF,eAAe,IAAI,CAAC,OAAO,gBAAgB,EAC3C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EACvC,iBAAQ,CAAC,KAAK,CACf,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,IAAA,0BAAgB,EAAC,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpD,IAAA,aAAI,EACF,oDAAoD,EACpD,CAAC,oCAAoC,CAAC,EACtC,iBAAQ,CAAC,KAAK,CACf,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,gBAAgB,eAAK,CAAC,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,+CAA+C,CACxF,CACF,CAAC;YACF,MAAM,EAAE,GAAG,MAAM,IAAA,sBAAa,EAAC,uCAAuC,EAAE,MAAO,CAAC,IAAI,CAAC,CAAC;YACtF,IAAA,qBAAY,GAAE,CAAC;YACf,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,iBAAQ,CAAC,EAAE,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,iBAAiB,MAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAA,sBAAa,EAAC,8BAA8B,EAAE,GAAG,EAAE;gBACjD,qDAAqD;aACtD,CAAC,CAAC;QACL,CAAC;QAED,IAAA,aAAI,EACF,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,eAAK,CAAC,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EACxE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAO,CAAC,IAAI,EAAE,CACxD,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC"}

package/lib/commands/ota-delete-bundle.d.ts

@@ -0,0 +1,16 @@
+import { Command } from 'commander';
+/**
+ * `scalebun ota delete-bundle` — permanent, irreversible artifact deletion.
+ *
+ * `--app-id` resolves from scalebun.json like every other command, and
+ * `--bundle-id` opens a picker on a TTY when omitted, so choosing "delete-bundle"
+ * from the interactive menu lands on a bundle list instead of erroring on a
+ * missing required flag.
+ *
+ * It still asks first. This used to delete on sight: one mis-pasted --bundle-id
+ * and the artifact was gone, with devices possibly still running it. `ota rollback`
+ * already had this shape (prompt on a TTY, explicit --yes off-TTY); a command
+ * whose own description says "permanently" needs it at least as much.
+ */
+export declare function registerOtaDeleteBundleCommand(ota: Command): void;
+//# sourceMappingURL=ota-delete-bundle.d.ts.map

package/lib/commands/ota-delete-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ota-delete-bundle.d.ts","sourceRoot":"","sources":["../../src/commands/ota-delete-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAyFjE"}

package/lib/commands/ota-delete-bundle.js

@@ -0,0 +1,96 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerOtaDeleteBundleCommand = registerOtaDeleteBundleCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const credentials_1 = require("../utils/credentials");
+const client_1 = require("../api/client");
+const resolve_1 = require("../utils/resolve");
+const prompt_1 = require("../utils/prompt");
+const output_1 = require("../utils/output");
+/**
+ * `scalebun ota delete-bundle` — permanent, irreversible artifact deletion.
+ *
+ * `--app-id` resolves from scalebun.json like every other command, and
+ * `--bundle-id` opens a picker on a TTY when omitted, so choosing "delete-bundle"
+ * from the interactive menu lands on a bundle list instead of erroring on a
+ * missing required flag.
+ *
+ * It still asks first. This used to delete on sight: one mis-pasted --bundle-id
+ * and the artifact was gone, with devices possibly still running it. `ota rollback`
+ * already had this shape (prompt on a TTY, explicit --yes off-TTY); a command
+ * whose own description says "permanently" needs it at least as much.
+ */
+function registerOtaDeleteBundleCommand(ota) {
+    ota
+        .command('delete-bundle')
+        .alias('delete')
+        .description('Delete an OTA bundle permanently')
+        .option('--app-id <id>', 'Scalebun app ID (resolved from scalebun.json when omitted)')
+        .option('--bundle-id <id>', 'OTA bundle ID to delete (picker on a TTY when omitted)')
+        .option('--yes', 'Skip the confirmation prompt (required in CI / non-interactive shells)')
+        .action(async (opts) => {
+        const creds = (0, credentials_1.readCredentials)();
+        if (!creds)
+            (0, output_1.fail)('Not logged in. Run `scalebun login` first.', [], output_1.ExitCode.Usage);
+        const appId = await (0, resolve_1.resolveAppId)({ appId: opts.appId });
+        const client = new client_1.ApiClient(creds);
+        // Resolve the bundle: an explicit --bundle-id, or a picker on a TTY.
+        let bundleId = opts.bundleId;
+        let picked;
+        if (!bundleId) {
+            if (!process.stdin.isTTY) {
+                (0, output_1.fail)('--bundle-id is required.', [
+                    'Find one with `scalebun ota bundles`.',
+                    'This shell is not interactive, so the bundle cannot be chosen here.',
+                ], output_1.ExitCode.Usage);
+            }
+            let rows;
+            try {
+                const res = await client.get(`/saas/apps/${appId}/ota/bundles?sort=newest`);
+                rows = Array.isArray(res) ? res : (res?.rows ?? []);
+            }
+            catch (err) {
+                (0, output_1.failFromError)('Could not list bundles', err);
+            }
+            if (!rows.length) {
+                (0, output_1.fail)('No bundles on this app.', ['Nothing to delete.'], output_1.ExitCode.Usage);
+            }
+            picked = await (0, prompt_1.select)('Which bundle should be deleted permanently?', rows.slice(0, 15).map((b) => ({
+                label: `${b.version != null ? `v${b.version}` : b.id.slice(0, 8)}  ` +
+                    chalk_1.default.dim(`${b.platform ?? '?'} · ${b.channel?.name ?? 'default'} · ${b.signature ? 'signed' : 'unsigned'}`),
+                value: b,
+            })));
+            (0, prompt_1.closePrompts)();
+            bundleId = picked.id;
+        }
+        const label = picked?.version != null ? `v${picked.version}` : bundleId.slice(0, 8);
+        // Confirmation. --yes skips it; a non-interactive shell without --yes is a
+        // hard stop rather than a silent destructive delete.
+        if (!opts.yes) {
+            if (!process.stdin.isTTY) {
+                (0, output_1.fail)('Refusing to delete without confirmation in a non-interactive shell.', ['Re-run with --yes if this is intentional.'], output_1.ExitCode.Usage);
+            }
+            console.log(`\n⚠️  This permanently deletes bundle ${label} (${bundleId}) from app ${appId}.\n` +
+                '   Devices still running it keep their local copy, but it can never be\n' +
+                '   re-served, and any release pointing at it becomes undeliverable.\n');
+            const ok = await (0, prompt_1.confirmPhrase)('Type the bundle id to confirm:', bundleId);
+            (0, prompt_1.closePrompts)();
+            if (!ok) {
+                console.log('Aborted — nothing was deleted.');
+                return;
+            }
+        }
+        try {
+            console.log(`🗑️  Deleting bundle ${label} from app ${appId}…`);
+            await client.delete(`/saas/apps/${appId}/ota/bundles/${bundleId}`);
+            console.log(`✅ Bundle ${label} deleted successfully.`);
+        }
+        catch (err) {
+            (0, output_1.failFromError)('Failed to delete bundle', err);
+        }
+    });
+}
+//# sourceMappingURL=ota-delete-bundle.js.map