@shipvo/cli 0.1.2 → 0.1.4

package/README.md

@@ -26,7 +26,7 @@ npx -y @shipvo/cli sim                  # serve the app in the simulator for age
 | `mcp` | Print the MCP config agents need |
 | `keygen [--out seed.txt]` | Create an Ed25519 release signing key |
 | `pubkey` | Print the public key for the current seed |
-| `hash <file>`, `sign-file <file>`, `sign-json <file>`, `verify-json <file> <key>` | Low-level signing helpers |
+| `hash <file>`, `sign-file <file>`, `sign-json <file>`, `verify-json <file> <key>`, `verify <pointer> [key]` (release pointers) | Low-level signing helpers |
 
 Changing computers? See [Moving to a new machine](new-machine.md).
 

package/dist/adopt-bare.d.ts

@@ -0,0 +1,39 @@
+export interface ShipvoNativeValues {
+    baseUrl: string;
+    publicKey: string;
+    appId: string;
+    shellMajor?: number;
+    hermesBytecodeVersions?: number[];
+    nativeModules?: Record<string, string>;
+}
+/** Name and value pairs, in the order and format app.plugin.js writes them. */
+export declare function androidMetaData(v: ShipvoNativeValues): Array<[string, string]>;
+/** Returns the manifest path if `dir/android/app/src/main/AndroidManifest.xml` exists, else null. */
+export declare function findAndroidManifest(dir: string): string | null;
+/** Adds or updates the dev.shipvo.* meta-data in `<application>`. Returns true if the file changed. */
+export declare function writeAndroidConfig(manifestPath: string, values: ShipvoNativeValues): boolean;
+export declare function applyAndroidConfig(xml: string, values: ShipvoNativeValues): string;
+export interface ExpoModulesCheck {
+    installed: boolean;
+    expoPackage: boolean;
+    android: boolean;
+    ios: boolean;
+    /** Steps to run by hand. Never run by this function. */
+    plan: string[];
+}
+/** Reports whether Expo Modules are set up in a bare app. Read-only. */
+export declare function checkExpoModules(dir: string): ExpoModulesCheck;
+export type IosConfigValues = ShipvoNativeValues;
+/** The Info.plist keys for these values. Optional keys are left out when their value is omitted. */
+export declare function iosPlistEntries(values: IosConfigValues): Record<string, string>;
+/**
+ * Set the Shipvo keys in an Info.plist. Other keys and their order stay. New keys go at the end.
+ * Returns true when the file changed; a second run with the same values writes nothing.
+ */
+export declare function writeIosConfig(infoPlistPath: string, values: IosConfigValues): boolean;
+/** The app target's Info.plist: `ios/<name>/Info.plist`. Skips Pods and test targets. Undefined when none is found. */
+export declare function findIosInfoPlist(dir?: string): string | undefined;
+/** What to tell the user once both platforms are configured. */
+export declare function adoptNextSteps(): string;
+/** True when writeIosConfig would change the file. Reads only. */
+export declare function iosConfigChanged(infoPlistPath: string, values: IosConfigValues): boolean;

package/dist/adopt-bare.js

@@ -0,0 +1,236 @@
+// Bare React Native adopt: write the native config by hand, without a prebuild.
+// Android manifest and the Expo Modules check, then the iOS Info.plist.
+// Writes the same values as packages/runtime/app.plugin.js.
+import { existsSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import plist from "plist";
+/** Name and value pairs, in the order and format app.plugin.js writes them. */
+export function androidMetaData(v) {
+    if (!v.baseUrl || !v.publicKey || !v.appId)
+        throw new Error("baseUrl, publicKey and appId are required");
+    const out = [
+        ["dev.shipvo.BASE_URL", v.baseUrl],
+        ["dev.shipvo.PUBLIC_KEY", v.publicKey],
+        ["dev.shipvo.APP_ID", v.appId],
+        ["dev.shipvo.SHELL_MAJOR", String(v.shellMajor ?? 1)],
+    ];
+    if (v.hermesBytecodeVersions !== undefined)
+        out.push(["dev.shipvo.HERMES_BYTECODE_VERSIONS", formatBytecodeVersions(v.hermesBytecodeVersions)]);
+    if (v.nativeModules !== undefined)
+        out.push(["dev.shipvo.NATIVE_MODULES", formatNativeModules(v.nativeModules)]);
+    return out;
+}
+// Same rules as formatBytecodeVersions in packages/runtime/app.plugin.js.
+function formatBytecodeVersions(value) {
+    if (!Array.isArray(value))
+        throw new Error("adopt-bare: hermesBytecodeVersions must be an array of integers");
+    for (const v of value) {
+        if (!Number.isInteger(v) || v < 0) {
+            throw new Error(`adopt-bare: hermesBytecodeVersions must be non-negative integers, got ${JSON.stringify(v)}`);
+        }
+    }
+    return value.join(",");
+}
+// Same rules as formatNativeModules in packages/runtime/app.plugin.js.
+function formatNativeModules(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error("adopt-bare: nativeModules must be an object of package name to version");
+    }
+    return Object.entries(value)
+        .map(([name, version]) => {
+        if (!name.trim())
+            throw new Error("adopt-bare: nativeModules has an empty package name");
+        if (typeof version !== "string" || !version.trim()) {
+            throw new Error(`adopt-bare: nativeModules version for "${name}" must be a non-empty string`);
+        }
+        if (/[,\s]/.test(version) || /[,\s]/.test(name)) {
+            throw new Error(`adopt-bare: nativeModules entry "${name}": "${version}" has a comma or space where it cannot`);
+        }
+        return `${name}@${version}`;
+    })
+        .join(",");
+}
+/** Returns the manifest path if `dir/android/app/src/main/AndroidManifest.xml` exists, else null. */
+export function findAndroidManifest(dir) {
+    const p = join(dir, "android", "app", "src", "main", "AndroidManifest.xml");
+    return existsSync(p) ? p : null;
+}
+const escAttr = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+const unescAttr = (s) => s.replace(/&quot;/g, '"').replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+// Same length as the input, with comments and CDATA blanked, so offsets match the original.
+const mask = (s) => s.replace(/<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>/g, (m) => " ".repeat(m.length));
+/** Adds or updates the dev.shipvo.* meta-data in `<application>`. Returns true if the file changed. */
+export function writeAndroidConfig(manifestPath, values) {
+    const original = readFileSync(manifestPath, "utf8");
+    const next = applyAndroidConfig(original, values);
+    if (next === original)
+        return false;
+    writeFileSync(manifestPath, next);
+    return true;
+}
+export function applyAndroidConfig(xml, values) {
+    const items = androidMetaData(values);
+    let text = xml;
+    let m = /<application(?=[\s/>])/.exec(mask(text));
+    if (!m)
+        throw new Error("AndroidManifest.xml has no <application> element");
+    const start = m.index;
+    // End of the opening tag, skipping quoted attribute values.
+    let i = start + "<application".length;
+    let quote = "";
+    for (; i < text.length; i++) {
+        const c = text[i];
+        if (quote) {
+            if (c === quote)
+                quote = "";
+        }
+        else if (c === '"' || c === "'")
+            quote = c;
+        else if (c === ">")
+            break;
+    }
+    if (i >= text.length)
+        throw new Error("AndroidManifest.xml has an unterminated <application> tag");
+    const lineStart = text.lastIndexOf("\n", start) + 1;
+    const indent = /^[ \t]*/.exec(text.slice(lineStart, start))[0];
+    const inner = indent + "  ";
+    const line = ([n, v]) => `${inner}<meta-data android:name="${n}" android:value="${escAttr(v)}"/>`;
+    if (text[i - 1] === "/") {
+        // Self-closed: open it up. Keep the attributes exactly as they were.
+        const head = text.slice(start, i - 1).replace(/[ \t]+$/, "");
+        return text.slice(0, start) + head + ">\n" + items.map(line).join("\n") + "\n" + indent + "</application>" + text.slice(i + 1);
+    }
+    const close = mask(text).indexOf("</application", i);
+    if (close < 0)
+        throw new Error("AndroidManifest.xml has no </application>");
+    let body = text.slice(i + 1, close);
+    const maskedBody = mask(body);
+    const missing = [];
+    for (const [name, value] of items) {
+        const re = /<meta-data\b(?:"[^"]*"|'[^']*'|[^>"'])*>/g;
+        let found = false;
+        let e;
+        while ((e = re.exec(maskedBody))) {
+            const nm = /android:name\s*=\s*(?:"([^"]*)"|'([^']*)')/.exec(e[0]);
+            if (!nm || unescAttr(nm[1] ?? nm[2]) !== name)
+                continue;
+            found = true;
+            const tag = body.slice(e.index, e.index + e[0].length);
+            const vm = /(android:value\s*=\s*)(?:"([^"]*)"|'([^']*)')/.exec(tag);
+            let newTag;
+            if (vm) {
+                if (unescAttr(vm[2] ?? vm[3]) === value)
+                    break;
+                newTag = tag.slice(0, vm.index) + `${vm[1]}"${escAttr(value)}"` + tag.slice(vm.index + vm[0].length);
+            }
+            else {
+                newTag = tag.replace(/\s*\/?>$/, (end) => ` android:value="${escAttr(value)}"${end.trim()}`);
+            }
+            body = body.slice(0, e.index) + newTag + body.slice(e.index + tag.length);
+            // Offsets after this point moved; rebuild is simplest, so stop and re-run for the rest.
+            return applyAndroidConfig(text.slice(0, i + 1) + body + text.slice(close), values);
+        }
+        if (!found)
+            missing.push([name, value]);
+    }
+    if (missing.length === 0)
+        return text;
+    const closeLineStart = text.lastIndexOf("\n", close) + 1;
+    const onOwnLine = /^[ \t]*$/.test(text.slice(closeLineStart, close));
+    const add = missing.map(line).join("\n") + "\n";
+    if (onOwnLine)
+        return text.slice(0, closeLineStart) + add + text.slice(closeLineStart);
+    return text.slice(0, close) + "\n" + add + indent + text.slice(close);
+}
+function walk(dir, match, depth = 8) {
+    if (depth < 0 || !existsSync(dir))
+        return null;
+    for (const e of readdirSync(dir, { withFileTypes: true })) {
+        if (e.name === "node_modules" || e.name === "Pods" || e.name === "build")
+            continue;
+        const p = join(dir, e.name);
+        if (e.isDirectory()) {
+            const r = walk(p, match, depth - 1);
+            if (r)
+                return r;
+        }
+        else if (match.test(e.name))
+            return p;
+    }
+    return null;
+}
+/** Reports whether Expo Modules are set up in a bare app. Read-only. */
+export function checkExpoModules(dir) {
+    let expoPackage = false;
+    try {
+        const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+        expoPackage = Boolean(pkg.dependencies?.expo ?? pkg.devDependencies?.expo);
+    }
+    catch { /* no package.json: not installed */ }
+    const has = (file, re) => (file ? re.test(readFileSync(file, "utf8")) : false);
+    const android = has(walk(join(dir, "android", "app", "src", "main", "java"), /^MainApplication\.(kt|java)$/), /expo\.modules\.(ApplicationLifecycleDispatcher|ReactNativeHostWrapper)|ExpoModulesPackage/);
+    const ios = has(walk(join(dir, "ios"), /^AppDelegate\.(swift|mm?|h)$/), /\bExpo(AppDelegate|ReactDelegate|Modules)?\b|import Expo/);
+    const installed = expoPackage && android && ios;
+    return { installed, expoPackage, android, ios, plan: installed ? [] : ["npx install-expo-modules@latest"] };
+}
+/** The Info.plist keys for these values. Optional keys are left out when their value is omitted. */
+export function iosPlistEntries(values) {
+    const { baseUrl, publicKey, appId, shellMajor = 1 } = values;
+    if (!baseUrl || !publicKey || !appId)
+        throw new Error("baseUrl, publicKey and appId are required");
+    const out = {
+        ShipvoBaseURL: baseUrl,
+        ShipvoPublicKey: publicKey,
+        ShipvoAppId: appId,
+        ShipvoShellMajor: String(shellMajor),
+    };
+    if (values.hermesBytecodeVersions !== undefined)
+        out.ShipvoHermesBytecodeVersions = formatBytecodeVersions(values.hermesBytecodeVersions);
+    if (values.nativeModules !== undefined)
+        out.ShipvoNativeModules = formatNativeModules(values.nativeModules);
+    return out;
+}
+/**
+ * Set the Shipvo keys in an Info.plist. Other keys and their order stay. New keys go at the end.
+ * Returns true when the file changed; a second run with the same values writes nothing.
+ */
+export function writeIosConfig(infoPlistPath, values) {
+    const entries = iosPlistEntries(values);
+    const dict = plist.parse(readFileSync(infoPlistPath, "utf8"));
+    if (Object.entries(entries).every(([k, v]) => dict[k] === v))
+        return false;
+    Object.assign(dict, entries);
+    writeFileSync(infoPlistPath, plist.build(dict, { indent: "\t", newline: "\n" }) + "\n");
+    return true;
+}
+/** The app target's Info.plist: `ios/<name>/Info.plist`. Skips Pods and test targets. Undefined when none is found. */
+export function findIosInfoPlist(dir = ".") {
+    const ios = join(dir, "ios");
+    let entries;
+    try {
+        entries = readdirSync(ios, { withFileTypes: true });
+    }
+    catch {
+        return undefined;
+    }
+    const names = entries.filter((e) => e.isDirectory() && !/^Pods$|Tests$|\.(xcodeproj|xcworkspace|xcassets)$/.test(e.name)).map((e) => e.name).sort();
+    const withPlist = names.filter((n) => existsSync(join(ios, n, "Info.plist")));
+    // Prefer the folder named like the Xcode project.
+    const project = entries.find((e) => e.name.endsWith(".xcodeproj"))?.name.replace(/\.xcodeproj$/, "");
+    const pick = withPlist.find((n) => n === project) ?? withPlist[0];
+    return pick ? join(ios, pick, "Info.plist") : undefined;
+}
+/** What to tell the user once both platforms are configured. */
+export function adoptNextSteps() {
+    return [
+        "Next steps:",
+        "  1. cd ios && pod install",
+        "  2. Rebuild both apps (Android and iOS) so the native shells carry the new config.",
+        "  3. shipvo publish --dry-run",
+    ].join("\n");
+}
+/** True when writeIosConfig would change the file. Reads only. */
+export function iosConfigChanged(infoPlistPath, values) {
+    const dict = plist.parse(readFileSync(infoPlistPath, "utf8"));
+    return !Object.entries(iosPlistEntries(values)).every(([k, v]) => dict[k] === v);
+}

package/dist/adopt.d.ts

@@ -0,0 +1,26 @@
+export type PackageManager = "npm" | "pnpm" | "yarn" | "bun";
+export type Project = {
+    dir: string;
+    isExpo: boolean;
+    isBare: boolean;
+    expoSdk: number | null;
+    packageManager: PackageManager;
+    configKind: "app.json" | "app.config.js" | "app.config.ts" | null;
+    configFile: string | null;
+    expoUpdates: boolean;
+    codePush: boolean;
+};
+/** Reads the folder and says what kind of app it is. Changes nothing. */
+export declare function detectProject(dir: string): Project;
+export type AdoptDeps = {
+    install: (pm: PackageManager, pkgs: string[], dir: string, dev?: boolean) => void;
+    installExpoModules: (dir: string) => void;
+    confirm: (q: string) => Promise<boolean>;
+    doctor: boolean;
+};
+/** A package.json with committed ios/ and android/ folders and no Expo config plugins or config code: a bare React Native app. */
+export declare const isBareApp: (dir: string) => boolean;
+/** Does argv ask for adopt mode: no folder, or ".". */
+export declare const isAdoptArgs: (argv: string[]) => boolean;
+export declare const positional: (argv: string[]) => string[];
+export declare function adopt(argv: string[], dir?: string, overrides?: Partial<AdoptDeps>): Promise<undefined>;

package/dist/adopt.js

@@ -0,0 +1,257 @@
+// `shipvo init` inside an existing app ("adopt mode"): detect the project, show a plan, apply it only after
+// confirmation. Never overwrites a file. In an Expo app it never touches ios/ or android/. In a bare React Native app
+// it writes the Shipvo values into AndroidManifest.xml and Info.plist (adopt-bare.ts).
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { randomBytes } from "node:crypto";
+import { spawnSync } from "node:child_process";
+import { createInterface } from "node:readline/promises";
+import { join, resolve } from "node:path";
+import { b64, keyFromSeed } from "./index.js";
+import { runDoctorChecks } from "./doctor.js";
+import { adoptNextSteps, applyAndroidConfig, checkExpoModules, findAndroidManifest, findIosInfoPlist, iosConfigChanged, writeAndroidConfig, writeIosConfig } from "./adopt-bare.js";
+const HOSTED = "https://api.shipvo.dev";
+const readJson = (p) => { try {
+    return JSON.parse(readFileSync(p, "utf8"));
+}
+catch {
+    return null;
+} };
+/** Reads the folder and says what kind of app it is. Changes nothing. */
+export function detectProject(dir) {
+    const pkg = readJson(join(dir, "package.json"));
+    const deps = { ...pkg?.dependencies, ...pkg?.devDependencies };
+    const configFile = ["app.json", "app.config.ts", "app.config.js"].find((f) => existsSync(join(dir, f))) ?? null;
+    const lock = [["pnpm-lock.yaml", "pnpm"], ["yarn.lock", "yarn"], ["bun.lock", "bun"], ["bun.lockb", "bun"], ["package-lock.json", "npm"]];
+    const packageManager = lock.find(([f]) => existsSync(join(dir, f)))?.[1] ?? "npm";
+    const sdk = /(\d+)\./.exec(String(deps.expo ?? ""))?.[1];
+    const appJson = configFile === "app.json" ? readJson(join(dir, "app.json")) : null;
+    const plugins = appJson?.expo?.plugins ?? appJson?.plugins ?? [];
+    const hasNative = existsSync(join(dir, "ios")) && existsSync(join(dir, "android"));
+    const isExpo = !!pkg && !!deps.expo && !!configFile;
+    return {
+        dir, isExpo, isBare: hasNative && plugins.length === 0 && configFile !== "app.config.js" && configFile !== "app.config.ts",
+        expoSdk: sdk ? Number(sdk) : null, packageManager, configKind: configFile, configFile,
+        expoUpdates: !!deps["expo-updates"] || plugins.some((p) => (Array.isArray(p) ? p[0] : p) === "expo-updates"),
+        codePush: !!deps["react-native-code-push"] || !!deps["@revopush/react-native-code-push"],
+    };
+}
+const ADOPT_FLAGS = new Set(["yes", "dry-run", "device"]);
+const defaultDeps = {
+    install(pm, pkgs, dir, dev = false) {
+        const devFlag = dev ? [pm === "npm" ? "--save-dev" : pm === "yarn" || pm === "bun" ? "--dev" : "-D"] : [];
+        const r = spawnSync(pm, [pm === "npm" ? "install" : "add", ...devFlag, ...pkgs], { cwd: dir, stdio: "inherit" });
+        if (r.status !== 0)
+            throw new Error(`${pm} could not install ${pkgs.join(", ")}`);
+    },
+    installExpoModules(dir) {
+        const r = spawnSync("npx", ["install-expo-modules@latest", "--non-interactive"], { cwd: dir, stdio: "inherit" });
+        if (r.status !== 0)
+            throw new Error("npx install-expo-modules@latest failed");
+    },
+    async confirm(q) {
+        if (!process.stdin.isTTY) {
+            console.error("shipvo: this is not a terminal, so I cannot ask. Re-run with --yes to apply the plan, or --dry-run to only read it.");
+            process.exit(2);
+        }
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const ans = (await rl.question(q)).trim().toLowerCase();
+        rl.close();
+        return ans === "y" || ans === "yes";
+    },
+    doctor: true,
+};
+/** A package.json with committed ios/ and android/ folders and no Expo config plugins or config code: a bare React Native app. */
+export const isBareApp = (dir) => {
+    if (!existsSync(join(dir, "package.json")) || !existsSync(join(dir, "ios")) || !existsSync(join(dir, "android")))
+        return false;
+    const p = detectProject(dir);
+    return !p.isExpo || p.isBare;
+};
+/** Does argv ask for adopt mode: no folder, or ".". */
+export const isAdoptArgs = (argv) => {
+    const pos = positional(argv);
+    return pos.length === 0 || (pos.length === 1 && pos[0] === ".");
+};
+export const positional = (argv) => argv.filter((x, i) => !x.startsWith("-") && !(argv[i - 1]?.startsWith("--") && !ADOPT_FLAGS.has(argv[i - 1].slice(2))));
+const flag = (argv, n) => { const i = argv.indexOf(`--${n}`); return i >= 0 && argv[i + 1] && !argv[i + 1].startsWith("--") ? argv[i + 1] : undefined; };
+export async function adopt(argv, dir = process.cwd(), overrides = {}) {
+    const deps = { ...defaultDeps, ...overrides };
+    dir = resolve(dir);
+    const yes = argv.includes("--yes"), dry = argv.includes("--dry-run"), withDevice = argv.includes("--device");
+    const fail = (msg, code = 1) => { console.error(msg); process.exit(code); };
+    const p = detectProject(dir);
+    const bare = isBareApp(dir);
+    if (!bare && (!existsSync(join(dir, "package.json")) || !p.isExpo)) {
+        return fail(`shipvo: ${dir} is not an Expo app. Adopt mode needs a package.json with "expo" and an app.json or app.config.js/ts.\nTo start a new app, run:  shipvo init myshop`);
+    }
+    if (p.expoUpdates || p.codePush) {
+        const what = p.expoUpdates ? "expo-updates" : "react-native-code-push";
+        return fail(`shipvo: this app uses ${what}. Two over-the-air systems would fight over the bundle, so I stopped and changed nothing.\nRemove ${what} first. Steps: docs/migrate-from-codepush.md`);
+    }
+    let manifest = null, infoPlist;
+    if (bare) {
+        manifest = findAndroidManifest(dir);
+        infoPlist = findIosInfoPlist(dir);
+        if (!manifest || !infoPlist)
+            return fail(`shipvo: this looks like a bare React Native app, but I could not find ${[!manifest && "android/app/src/main/AndroidManifest.xml", !infoPlist && "ios/<app>/Info.plist"].filter(Boolean).join(" or ")}. I changed nothing.\nIf this is an Expo managed app, add any config plugin to app.json (or app.config.*), or remove the ios/ and android/ folders, and run this again.`);
+    }
+    if (!bare && p.configKind === "app.json" && !readJson(join(dir, "app.json")))
+        return fail("shipvo: app.json is not valid JSON, so I changed nothing. Fix it and run this again.");
+    const pkg = readJson(join(dir, "package.json"));
+    const have = (n) => !!(pkg.dependencies?.[n] ?? pkg.devDependencies?.[n]);
+    const cfgPath = join(dir, "shipvo.json");
+    const existingCfg = existsSync(cfgPath) ? readJson(cfgPath) : null;
+    const seedPath = join(dir, ".shipvo", "seed.txt");
+    const appJson = p.configKind === "app.json" ? readJson(join(dir, "app.json")) : null;
+    const expo = appJson ? (appJson.expo ?? appJson) : null;
+    if (bare && !readJson(cfgPath) && existsSync(cfgPath))
+        return fail("shipvo: shipvo.json is not valid JSON, so I changed nothing.");
+    const appId = (existingCfg?.appId ?? expo?.slug ?? String(pkg.name ?? "app").replace(/^@[^/]+\//, "")).toLowerCase().replace(/[^a-z0-9-]/g, "-").slice(0, 32);
+    const name = existingCfg?.name ?? expo?.name ?? appId;
+    const controlPlane = (flag(argv, "control-plane") ?? existingCfg?.controlPlane ?? HOSTED).replace(/\/$/, "");
+    // Signing key: the one given, the one in shipvo.json, the seed already on disk, or a new one.
+    const givenKey = flag(argv, "public-key");
+    if (givenKey !== undefined && !isPublicKey(givenKey))
+        return fail(`shipvo: --public-key must be a base64 string that decodes to 32 bytes. I changed nothing.`, 2);
+    const seedKey = existsSync(seedPath) ? b64(keyFromSeed(readFileSync(seedPath, "utf8").trim()).publicKey) : null;
+    if (existingCfg?.publicKey && seedKey && existingCfg.publicKey !== seedKey)
+        return fail(`shipvo: the publicKey in shipvo.json does not match the seed in .shipvo/seed.txt. Updates signed with the seed would be rejected by the app. I changed nothing.\nFix: restore the matching seed, or set publicKey in shipvo.json to the key of this seed.`);
+    let publicKey = givenKey ?? existingCfg?.publicKey;
+    let newSeed = null;
+    if (!publicKey) {
+        if (seedKey)
+            publicKey = seedKey;
+        else {
+            newSeed = b64(randomBytes(32));
+            publicKey = b64(keyFromSeed(newSeed).publicKey);
+        }
+    }
+    if (existingCfg?.publicKey && givenKey && givenKey !== existingCfg.publicKey)
+        console.log(`note: shipvo.json already has a publicKey, and --public-key differs. The flag goes into the plugin props; shipvo.json is kept. Make them match before you ship.`);
+    if (existingCfg?.controlPlane && flag(argv, "control-plane") && controlPlane !== String(existingCfg.controlPlane).replace(/\/$/, ""))
+        console.log(`note: --control-plane differs from shipvo.json; the flag is used for the plugin, the file is kept.`);
+    const pluginProps = { baseUrl: controlPlane, publicKey, appId, shellMajor: 1 };
+    const steps = [];
+    const wantPkgs = ["@shipvo/runtime", ...(withDevice ? ["@shipvo/device"] : [])].filter((n) => !have(n));
+    if (wantPkgs.length)
+        steps.push({ text: `Install ${wantPkgs.join(" and ")} with ${p.packageManager}`, run: () => deps.install(p.packageManager, wantPkgs, dir) });
+    // The scripts and the workflow run `shipvo`; without @shipvo/cli, npx would fetch an unrelated package.
+    const wantDev = ["@shipvo/cli", "@shipvo/sim"].filter((n) => !have(n));
+    if (wantDev.length)
+        steps.push({ text: `Install ${wantDev.join(" and ")} as dev dependencies with ${p.packageManager}`, run: () => deps.install(p.packageManager, wantDev, dir, true) });
+    const gi = join(dir, ".gitignore");
+    const giText = existsSync(gi) ? readFileSync(gi, "utf8") : "";
+    if (!giText.split(/\r?\n/).some((l) => /^\/?\.shipvo\/?$/.test(l.trim())))
+        steps.push({ text: "Add .shipvo/ to .gitignore", run: () => writeFileSync(gi, giText + (giText && !giText.endsWith("\n") ? "\n" : "") + "# never commit the release signing seed\n.shipvo/\n") });
+    // .shipvo/ is ignored before the seed exists, so a stopped run never leaves it unignored.
+    if (newSeed)
+        steps.push({ text: "Create a signing key in .shipvo/seed.txt (git-ignored)", run: () => { mkdirSync(join(dir, ".shipvo"), { recursive: true }); writeFileSync(seedPath, newSeed, { mode: 0o600 }); } });
+    let printLines = false;
+    if (bare) {
+        const check = checkExpoModules(dir);
+        if (!check.installed)
+            steps.push({ text: "Run npx install-expo-modules@latest (adds Expo Modules to the native projects)", run: () => deps.installExpoModules(dir) });
+        if (applyAndroidConfig(readFileSync(manifest, "utf8"), pluginProps) !== readFileSync(manifest, "utf8"))
+            steps.push({ text: "Write the Shipvo values into android/app/src/main/AndroidManifest.xml", run: () => { writeAndroidConfig(manifest, pluginProps); } });
+        if (iosConfigChanged(infoPlist, pluginProps))
+            steps.push({ text: `Write the Shipvo values into ${infoPlist.slice(dir.length + 1)}`, run: () => { writeIosConfig(infoPlist, pluginProps); } });
+    }
+    else if (p.configKind === "app.json") {
+        const list = expo.plugins ?? [];
+        if (!list.some((x) => (Array.isArray(x) ? x[0] : x) === "@shipvo/runtime"))
+            steps.push({ text: "Add the @shipvo/runtime config plugin to app.json (with your public key)", run: () => {
+                    const raw = readFileSync(join(dir, "app.json"), "utf8");
+                    const j = JSON.parse(raw), target = j.expo ?? j;
+                    target.plugins = [...(target.plugins ?? []), ["@shipvo/runtime", pluginProps]];
+                    writeFileSync(join(dir, "app.json"), JSON.stringify(j, null, /\n\t/.test(raw) ? "\t" : 2) + "\n");
+                } });
+    }
+    else
+        printLines = true;
+    if (!existingCfg)
+        steps.push({ text: `Write shipvo.json (app id "${appId}")`, run: () => writeFileSync(cfgPath, JSON.stringify({ appId, name, shellMajor: 1, controlPlane, publicKey }, null, 2) + "\n") });
+    const wantScripts = { sim: "shipvo sim", publish: "shipvo publish", rollback: "shipvo rollback" };
+    const missing = Object.entries(wantScripts).filter(([k]) => !pkg.scripts?.[k]);
+    if (missing.length)
+        steps.push({ text: `Add package.json scripts: ${missing.map(([k]) => k).join(", ")}`, run: () => {
+                const path = join(dir, "package.json"), raw = readFileSync(path, "utf8"), j = JSON.parse(raw);
+                j.scripts = { ...j.scripts };
+                for (const [k, v] of missing)
+                    if (!j.scripts[k])
+                        j.scripts[k] = v;
+                writeFileSync(path, JSON.stringify(j, null, /\n\t/.test(raw) ? "\t" : 2) + "\n");
+            } });
+    const wf = join(dir, ".github", "workflows", "publish.yml");
+    if (!existsSync(wf))
+        steps.push({ text: "Add .github/workflows/publish.yml", run: () => { mkdirSync(join(dir, ".github", "workflows"), { recursive: true }); writeFileSync(wf, PUBLISH_WORKFLOW(p.packageManager)); } });
+    console.log(`Shipvo found ${bare ? "a bare React Native app" : `an Expo app${p.expoSdk ? ` (SDK ${p.expoSdk})` : ""}`} in ${dir}\n  package manager: ${p.packageManager}   config: ${p.configFile}   expo-updates: ${p.expoUpdates ? "yes" : "no"}   CodePush: ${p.codePush ? "yes" : "no"}\n`);
+    if (!steps.length) {
+        console.log("Nothing to change: this app is already set up for Shipvo.");
+    }
+    else {
+        console.log("Plan:");
+        steps.forEach((s, i) => console.log(`  ${i + 1}. ${s.text}`));
+    }
+    if (printLines && newSeed)
+        console.log(`\n(The public key below is new and is only written when you apply the plan. Do not paste it before then.)`);
+    if (printLines)
+        console.log(`\n${p.configFile} is code, so I will not rewrite it. Add this to its "plugins" list:\n\n  ["@shipvo/runtime", ${JSON.stringify(pluginProps)}],\n`);
+    console.log(bare ? "\nI only add or update the Shipvo keys in AndroidManifest.xml and Info.plist, and I will not overwrite any other file." : "\nI will not touch ios/ or android/, and I will not overwrite any file.");
+    if (dry) {
+        console.log("\n--dry-run: nothing was changed.");
+        return;
+    }
+    if (!steps.length)
+        return;
+    if (!yes && !(await deps.confirm("\nApply this plan? [y/N] "))) {
+        console.log("Nothing was changed.");
+        return;
+    }
+    const applied = [];
+    for (const s of steps) {
+        try {
+            s.run();
+        }
+        catch (e) {
+            console.error(`shipvo: a step failed: ${s.text}\n${e.message}${applied.length ? `\nAlready applied:\n${applied.map((a) => `  - ${a}`).join("\n")}` : ""}`);
+            process.exit(1);
+        }
+        applied.push(s.text);
+        console.log(`done: ${s.text}`);
+    }
+    if (newSeed)
+        console.log(`\nBack up .shipvo/seed.txt offline and put it in the SHIPVO_SIGNING_SEED secret of your CI. Lose it and you cannot publish to installed shells.`);
+    if (deps.doctor) {
+        console.log("\nshipvo doctor:");
+        for (const r of await runDoctorChecks({ cwd: dir }))
+            console.log(r.ok ? `PASS ${r.name}${r.note ? ` (${r.note})` : ""}` : `FAIL ${r.name} — fix: ${r.fix}`);
+    }
+    if (bare) {
+        console.log(`\n${adoptNextSteps()}`);
+        return;
+    }
+    console.log(`\nNext steps:
+  1. Rebuild the native app once so the runtime is in the shell: npx expo prebuild, then npx expo run:android (or run:ios)
+  2. npx shipvo publish --dry-run   # see what a release would contain`);
+}
+const isPublicKey = (k) => /^[A-Za-z0-9+/]+={0,2}$/.test(k) && Buffer.from(k, "base64").length === 32;
+const PUBLISH_WORKFLOW = (pm) => `name: publish
+on:
+  workflow_dispatch:   # manual only; add a push trigger with a paths filter when you are ready to ship on merge
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    concurrency: shipvo-publish
+    if: \${{ github.event_name != 'push' || !contains(github.event.head_commit.message, '[no-ota]') }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with: { node-version: 22 }
+      - run: ${pm === "npm" ? "npm ci" : pm === "pnpm" ? "corepack enable && pnpm install --frozen-lockfile" : pm === "yarn" ? "corepack enable && yarn install --immutable" : "npm i -g bun && bun install --frozen-lockfile"}
+      - run: pip install --break-system-packages bsdiff4
+      - name: Build, sign and publish over the air
+        env:
+          SHIPVO_PUBLISH_TOKEN: \${{ secrets.SHIPVO_PUBLISH_TOKEN }}
+          SHIPVO_SIGNING_SEED: \${{ secrets.SHIPVO_SIGNING_SEED }}
+        run: npx shipvo publish | tee -a "$GITHUB_STEP_SUMMARY"
+`;

package/dist/autohalt.d.ts

@@ -0,0 +1,5 @@
+export declare const AUTOHALT_FLAGS: string[];
+export declare const AUTOHALT_HELP = "Usage: shipvo auto-halt [flags]\n\nStop serving a release on its own when too many devices fail to apply it.\nWith no flags, print the current setting.\n\nFlags (write a value after a space, not =):\n  --threshold 0.2     Halt when more than this share of reports failed (above 0, at most 1)\n  --min-reports 20    Wait for this many reports first (1 to 10000, default 20)\n  --off               Turn auto-halt off\n  --dry-run           Print what would change, write nothing\n  --help              Show this help\n\nNeeds SHIPVO_OWNER_TOKEN, or the publish token from shipvo app create (SHIPVO_PUBLISH_TOKEN or .shipvo/publish-token).\n";
+export declare function autoHalt(argv: string[], deps?: {
+    fetchFn?: typeof fetch;
+}): Promise<void>;