@scalebun/cli 1.0.0 → 1.4.0

package/lib/commands/ota-delete-bundle.js

@@ -1,8 +1,50 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerOtaDeleteBundleCommand = registerOtaDeleteBundleCommand;
+const readline = __importStar(require("readline"));
 const credentials_1 = require("../utils/credentials");
 const client_1 = require("../api/client");
+/**
+ * `scalebun ota delete-bundle` — permanent, irreversible artifact deletion.
+ *
+ * It asks first. This used to delete on sight: one mis-pasted --bundle-id and
+ * the artifact was gone, with devices possibly still running it. `ota rollback`
+ * already had this shape (prompt on a TTY, explicit --yes off-TTY); a command
+ * whose own description says "permanently" needs it at least as much.
+ */
 function registerOtaDeleteBundleCommand(ota) {
     ota
         .command('delete-bundle')
@@ -10,12 +52,30 @@ function registerOtaDeleteBundleCommand(ota) {
         .description('Delete an OTA bundle permanently')
         .requiredOption('--app-id <id>', 'Scalebun app ID')
         .requiredOption('--bundle-id <id>', 'OTA bundle ID to delete')
+        .option('--yes', 'Skip the confirmation prompt (required in CI / non-interactive shells)')
         .action(async (opts) => {
         const creds = (0, credentials_1.readCredentials)();
         if (!creds) {
             console.error('❌ Not logged in. Run `scalebun login` first.');
             process.exit(1);
         }
+        if (!opts.yes) {
+            if (!process.stdin.isTTY) {
+                console.error('❌ Refusing to delete without confirmation in a non-interactive shell.\n' +
+                    '   Re-run with --yes if this is intentional.');
+                process.exit(1);
+            }
+            console.log(`\n⚠️  This permanently deletes bundle ${opts.bundleId} from app ${opts.appId}.\n` +
+                '   Devices still running it keep their local copy, but it can never be\n' +
+                '   re-served, and any release pointing at it becomes undeliverable.\n');
+            const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+            const answer = await new Promise((resolve) => rl.question('   Type the bundle id to confirm: ', resolve));
+            rl.close();
+            if (answer.trim() !== opts.bundleId) {
+                console.log('Aborted — nothing was deleted.');
+                return;
+            }
+        }
         const client = new client_1.ApiClient(creds);
         try {
             console.log(`🗑️ Deleting bundle ${opts.bundleId} from App ${opts.appId}…`);

package/lib/commands/ota-delete-bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"ota-delete-bundle.js","sourceRoot":"","sources":["../../src/commands/ota-delete-bundle.ts"],"names":[],"mappings":";;AAIA,wEAwBC;AA3BD,sDAAuD;AACvD,0CAA0C;AAE1C,SAAgB,8BAA8B,CAAC,GAAY;IACzD,GAAG;SACA,OAAO,CAAC,eAAe,CAAC;SACxB,KAAK,CAAC,QAAQ,CAAC;SACf,WAAW,CAAC,kCAAkC,CAAC;SAC/C,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC;SAClD,cAAc,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,IAAyC,EAAE,EAAE;QAC1D,MAAM,KAAK,GAAG,IAAA,6BAAe,GAAE,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,QAAQ,aAAa,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YAC5E,MAAM,MAAM,CAAC,MAAM,CAAM,cAAc,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,QAAQ,wBAAwB,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"ota-delete-bundle.js","sourceRoot":"","sources":["../../src/commands/ota-delete-bundle.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaA,wEAiDC;AA9DD,mDAAqC;AAErC,sDAAuD;AACvD,0CAA0C;AAE1C;;;;;;;GAOG;AACH,SAAgB,8BAA8B,CAAC,GAAY;IACzD,GAAG;SACA,OAAO,CAAC,eAAe,CAAC;SACxB,KAAK,CAAC,QAAQ,CAAC;SACf,WAAW,CAAC,kCAAkC,CAAC;SAC/C,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC;SAClD,cAAc,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;SAC7D,MAAM,CAAC,OAAO,EAAE,wEAAwE,CAAC;SACzF,MAAM,CAAC,KAAK,EAAE,IAAwD,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,IAAA,6BAAe,GAAE,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CACX,yEAAyE;oBACvE,8CAA8C,CACjD,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,CAAC,GAAG,CACT,yCAAyC,IAAI,CAAC,QAAQ,aAAa,IAAI,CAAC,KAAK,KAAK;gBAChF,0EAA0E;gBAC1E,uEAAuE,CAC1E,CAAC;YACF,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CACnD,EAAE,CAAC,QAAQ,CAAC,oCAAoC,EAAE,OAAO,CAAC,CAC3D,CAAC;YACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,QAAQ,aAAa,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YAC5E,MAAM,MAAM,CAAC,MAAM,CAAM,cAAc,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,QAAQ,wBAAwB,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/lib/commands/ota-keys.d.ts

@@ -0,0 +1,14 @@
+import { Command } from 'commander';
+import * as crypto from 'crypto';
+/** Hex-encoded raw 32-byte ed25519 public key from a Node KeyObject. */
+export declare function rawPublicKeyHex(publicKey: crypto.KeyObject): string;
+export declare function registerOtaKeysCommand(ota: Command): void;
+/**
+ * Sign a bundle hash with the locally-held private key.
+ *
+ * Returns null when no key is present — publishing without signing stays valid
+ * for apps that have not adopted it, and `ota publish` reports which happened
+ * rather than failing.
+ */
+export declare function signBundleHash(sha256Hex: string, keyDir?: string): string | null;
+//# sourceMappingURL=ota-keys.d.ts.map

package/lib/commands/ota-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ota-keys.d.ts","sourceRoot":"","sources":["../../src/commands/ota-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AA+BjC,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAInE;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CA0JzD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,GAAG,IAAI,CAcf"}

package/lib/commands/ota-keys.js

@@ -0,0 +1,200 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rawPublicKeyHex = rawPublicKeyHex;
+exports.registerOtaKeysCommand = registerOtaKeysCommand;
+exports.signBundleHash = signBundleHash;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const credentials_1 = require("../utils/credentials");
+const client_1 = require("../api/client");
+/**
+ * Bundle signing keys (OTA-03).
+ *
+ * The security model, which is the reason this command exists at all: the
+ * private key is generated on the developer's machine and NEVER leaves it. Only
+ * the public half is uploaded. A server that cannot sign cannot forge a bundle,
+ * so a compromise of ScaleBun's infrastructure still cannot push code to a
+ * customer's users.
+ *
+ * `scalebun ota generate-key-pair` was referenced in the product documentation
+ * before it existed — the docs described verification the SDK never performed
+ * and a command the CLI never registered. This implements it.
+ */
+const KEY_DIR = '.scalebun';
+const PRIVATE_KEY_FILE = 'ota-signing-key.pem';
+/** Hex-encoded raw 32-byte ed25519 public key from a Node KeyObject. */
+function rawPublicKeyHex(publicKey) {
+    // SPKI for ed25519 is a fixed 12-byte header followed by the 32-byte key.
+    const spki = publicKey.export({ type: 'spki', format: 'der' });
+    return spki.subarray(spki.length - 32).toString('hex');
+}
+function registerOtaKeysCommand(ota) {
+    ota
+        .command('generate-key-pair')
+        .description('Generate an ed25519 signing keypair locally and register the public half')
+        .option('--app-id <id>', 'Register the public key against this app')
+        .option('--name <name>', 'Label for the key in the dashboard')
+        .option('--out <dir>', `Directory for the private key (default: ./${KEY_DIR})`)
+        .option('--force', 'Overwrite an existing private key')
+        .action(async (opts) => {
+        const outDir = path.resolve(opts.out ?? KEY_DIR);
+        const privatePath = path.join(outDir, PRIVATE_KEY_FILE);
+        if (fs.existsSync(privatePath) && !opts.force) {
+            console.error(`❌ A signing key already exists at ${privatePath}.\n` +
+                `   Overwriting it means every bundle signed with the old key can no longer be\n` +
+                `   verified by apps carrying the old public key. Pass --force if that is intended.`);
+            process.exit(1);
+        }
+        const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');
+        fs.mkdirSync(outDir, { recursive: true });
+        fs.writeFileSync(privatePath, privateKey.export({ type: 'pkcs8', format: 'pem' }), 
+        // Owner read/write only. Irrelevant on Windows, correct everywhere else.
+        { mode: 0o600 });
+        const publicHex = rawPublicKeyHex(publicKey);
+        console.log(`\n🔑 ed25519 signing keypair generated.\n`);
+        console.log(`  Private key : ${privatePath}`);
+        console.log(`                NEVER commit this. Add ${KEY_DIR}/ to .gitignore.`);
+        console.log(`  Public key  : ${publicHex}\n`);
+        if (opts.appId) {
+            const creds = (0, credentials_1.readCredentials)();
+            if (!creds) {
+                console.error('❌ Not logged in. Run `scalebun login` first.');
+                console.error('   The keypair was still written; register it later with:');
+                console.error(`   scalebun ota register-key --app-id <id> --public-key ${publicHex}`);
+                process.exit(1);
+            }
+            const client = new client_1.ApiClient(creds);
+            try {
+                await client.post(`/saas/apps/${opts.appId}/ota/signing-keys`, {
+                    publicKey: publicHex,
+                    name: opts.name ?? `CLI ${new Date().toISOString().slice(0, 10)}`,
+                });
+                console.log('✅ Public key registered with ScaleBun.\n');
+            }
+            catch (err) {
+                console.error(`❌ Failed to register public key: ${err.message}`);
+                console.error(`   Retry with: scalebun ota register-key --app-id ${opts.appId} --public-key ${publicHex}\n`);
+                process.exit(1);
+            }
+        }
+        else {
+            console.log('ℹ️  Pass --app-id to register the public key automatically.\n');
+        }
+        console.log('Next: embed the PUBLIC key in your app and enforce it at init:\n');
+        console.log('  ScaleBun.init({');
+        console.log('    // …');
+        console.log('    ota: {');
+        console.log(`      publicSigningKey: '${publicHex}',`);
+        console.log('      verifySignature: myEd25519Verifier,');
+        console.log('    },');
+        console.log('  })\n');
+    });
+    ota
+        .command('register-key')
+        .description('Register an existing ed25519 public key with an app')
+        .requiredOption('--app-id <id>', 'Scalebun app ID')
+        .requiredOption('--public-key <hex>', 'ed25519 public key (hex or base64)')
+        .option('--name <name>', 'Label for the key in the dashboard')
+        .action(async (opts) => {
+        const creds = (0, credentials_1.readCredentials)();
+        if (!creds) {
+            console.error('❌ Not logged in. Run `scalebun login` first.');
+            process.exit(1);
+        }
+        const client = new client_1.ApiClient(creds);
+        try {
+            await client.post(`/saas/apps/${opts.appId}/ota/signing-keys`, {
+                publicKey: opts.publicKey,
+                name: opts.name ?? 'CLI',
+            });
+            console.log('✅ Public key registered.\n');
+        }
+        catch (err) {
+            console.error(`❌ Failed to register public key: ${err.message}`);
+            process.exit(1);
+        }
+    });
+    ota
+        .command('keys')
+        .description('List signing keys registered for an app')
+        .requiredOption('--app-id <id>', 'Scalebun app ID')
+        .action(async (opts) => {
+        const creds = (0, credentials_1.readCredentials)();
+        if (!creds) {
+            console.error('❌ Not logged in. Run `scalebun login` first.');
+            process.exit(1);
+        }
+        const client = new client_1.ApiClient(creds);
+        try {
+            const keys = await client.get(`/saas/apps/${opts.appId}/ota/signing-keys`);
+            console.log(`\n🔑 Signing keys for app ${opts.appId}:\n`);
+            if (!keys?.length) {
+                console.log('  (none — run `scalebun ota generate-key-pair --app-id <id>`)\n');
+                return;
+            }
+            for (const k of keys) {
+                const state = k.revokedAt ? 'REVOKED' : 'active';
+                console.log(`  • ${(k.name ?? 'unnamed').padEnd(20)} ${state.padEnd(8)} ${k.publicKey.slice(0, 16)}…`);
+            }
+            console.log('');
+        }
+        catch (err) {
+            console.error(`❌ Failed to list keys: ${err.message}`);
+            process.exit(1);
+        }
+    });
+}
+/**
+ * Sign a bundle hash with the locally-held private key.
+ *
+ * Returns null when no key is present — publishing without signing stays valid
+ * for apps that have not adopted it, and `ota publish` reports which happened
+ * rather than failing.
+ */
+function signBundleHash(sha256Hex, keyDir) {
+    const privatePath = path.join(path.resolve(keyDir ?? KEY_DIR), PRIVATE_KEY_FILE);
+    if (!fs.existsSync(privatePath))
+        return null;
+    const privateKey = crypto.createPrivateKey(fs.readFileSync(privatePath));
+    // The signature covers the bundle's SHA-256, which the device already has from
+    // the check response and re-computes from the downloaded bytes. Signing the
+    // hash rather than the bundle keeps the CLI from re-reading 20 MB, and gives
+    // the device one value to verify that transitively covers the whole artifact.
+    const signature = crypto.sign(null, Buffer.from(sha256Hex, 'hex'), privateKey);
+    return signature.toString('hex');
+}
+//# sourceMappingURL=ota-keys.js.map

package/lib/commands/ota-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ota-keys.js","sourceRoot":"","sources":["../../src/commands/ota-keys.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,0CAIC;AAED,wDA0JC;AASD,wCAiBC;AA1ND,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAC7B,sDAAuD;AACvD,0CAA0C;AAE1C;;;;;;;;;;;;GAYG;AAEH,MAAM,OAAO,GAAG,WAAW,CAAC;AAC5B,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAU/C,wEAAwE;AACxE,SAAgB,eAAe,CAAC,SAA2B;IACzD,0EAA0E;IAC1E,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;IACzE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAgB,sBAAsB,CAAC,GAAY;IACjD,GAAG;SACA,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CACV,0EAA0E,CAC3E;SACA,MAAM,CAAC,eAAe,EAAE,0CAA0C,CAAC;SACnE,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;SAC7D,MAAM,CACL,aAAa,EACb,6CAA6C,OAAO,GAAG,CACxD;SACA,MAAM,CAAC,SAAS,EAAE,mCAAmC,CAAC;SACtD,MAAM,CACL,KAAK,EAAE,IAKN,EAAE,EAAE;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAExD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9C,OAAO,CAAC,KAAK,CACX,qCAAqC,WAAW,KAAK;gBACnD,iFAAiF;gBACjF,oFAAoF,CACvF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAExE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,aAAa,CACd,WAAW,EACX,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW;QAC7D,yEAAyE;QACzE,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QAEF,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAE7C,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,0CAA0C,OAAO,kBAAkB,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,IAAI,CAAC,CAAC;QAE9C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,IAAA,6BAAe,GAAE,CAAC;YAChC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAC9D,OAAO,CAAC,KAAK,CACX,2DAA2D,CAC5D,CAAC;gBACF,OAAO,CAAC,KAAK,CACX,2DAA2D,SAAS,EAAE,CACvE,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,mBAAmB,EAAE;oBAC7D,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;iBAClE,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,oCAAoC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjE,OAAO,CAAC,KAAK,CACX,qDAAqD,IAAI,CAAC,KAAK,iBAAiB,SAAS,IAAI,CAC9F,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,4BAA4B,SAAS,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC,CACF,CAAC;IAEJ,GAAG;SACA,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,qDAAqD,CAAC;SAClE,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC;SAClD,cAAc,CAAC,oBAAoB,EAAE,oCAAoC,CAAC;SAC1E,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;SAC7D,MAAM,CACL,KAAK,EAAE,IAAyD,EAAE,EAAE;QAClE,MAAM,KAAK,GAAG,IAAA,6BAAe,GAAE,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,mBAAmB,EAAE;gBAC7D,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;aACzB,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,oCAAoC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CACF,CAAC;IAEJ,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yCAAyC,CAAC;SACtD,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC;SAClD,MAAM,CAAC,KAAK,EAAE,IAAuB,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,IAAA,6BAAe,GAAE,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B,cAAc,IAAI,CAAC,KAAK,mBAAmB,CAC5C,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CACT,iEAAiE,CAClE,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACjD,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAC1F,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAC5B,SAAiB,EACjB,MAAe;IAEf,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAC/B,gBAAgB,CACjB,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7C,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IACzE,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/E,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/lib/commands/ota-publish.d.ts

@@ -12,5 +12,15 @@ export type InstallMode = 'IMMEDIATE' | 'ON_NEXT_RESTART' | 'ON_NEXT_RESUME';
  *   6. POST /saas/apps/:appId/ota/bundles/:id/promote → configure installMode & rollout
  *   7. Print success
  */
+/**
+ * Parse `--rollout`, refusing anything that isn't 0-100.
+ *
+ * This was `parseInt(x, 10) || 100`, which turned BOTH `--rollout 0` and any
+ * typo into a 100% rollout — the opposite of what the operator asked for. A
+ * dark release (0%) is a documented, legitimate way to promote a bundle without
+ * exposing it, so silently inverting it exposes every production device to an
+ * untested bundle. Exits rather than guessing.
+ */
+export declare function parseRolloutPercent(raw: string | undefined): number;
 export declare function registerOtaPublishCommand(ota: Command): void;
 //# sourceMappingURL=ota-publish.d.ts.map

package/lib/commands/ota-publish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ota-publish.d.ts","sourceRoot":"","sources":["../../src/commands/ota-publish.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;AAE7E;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAwN5D"}
+{"version":3,"file":"ota-publish.d.ts","sourceRoot":"","sources":["../../src/commands/ota-publish.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA6BpC,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;AAE7E;;;;;;;;;;;GAWG;AACH;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAWnE;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAuc5D"}