@shipvo/cli 0.1.2 → 0.1.4

package/dist/help.js

@@ -0,0 +1,76 @@
+export const COMMANDS = [
+    "init", "sim", "preview", "publish", "promote", "auto-halt", "rollback", "app", "login", "doctor", "store", "status", "keys", "mcp",
+    "keygen", "pubkey", "hash", "sign-file", "sign-json", "verify-json", "verify",
+];
+export const help = `shipvo <command>
+
+Start
+  init <dir>                  Create a new app wired to Shipvo
+  sim [--port 4545]           Build the app and run it in the simulator
+  sim --watch [--verbose]     Rebuild on file changes and keep serving; --verbose shows full build errors
+  preview [--json]            Publish a public 24-hour preview link (here.now, no account)
+
+Ship
+  publish [--bands b0,b1,b2]  Build, sign and publish an over-the-air release
+  publish --dry-run [--out d] Check a release offline: build and sign, write nothing remote
+  promote [--to b1,b2]        Widen a staged release to more bands (same release, new signature)
+  promote --dry-run           Preview a promote, write nothing
+  auto-halt [--threshold 0.2 --min-reports 20 | --off]  Show, turn on or turn off auto-halt
+  rollback --to <release>     Republish an earlier release as a new release
+  rollback --to <n> --dry-run Preview a rollback, write nothing
+  app create | list | delete  Register, list or remove apps on the hosted control plane
+  login                       Sign in with GitHub and get a key for the hosted simulator
+  store details --dry-run     Draft Play Data safety answers and a privacy policy from shipvo.json
+  status [--app id] [--json]  Show how the newest releases are doing on phones
+  doctor [--port <n>]         Check setup before first publish
+  keys                        Show the stored key's status and quota
+  keys export [--out f]       Print or save this app's signing seed, to back it up
+  keys import [seed|--file f] Restore the signing seed on a new machine
+  mcp                         Print the MCP config that agents need
+
+Advanced
+  keygen [--out seed.txt]     Create an Ed25519 signing key and print the public key
+  pubkey                      Print the public key for SHIPVO_SIGNING_SEED
+  hash <file>                 Print the SHA-256 and size of a file
+  sign-file <file>            Print the Ed25519 signature (base64) of a file
+  sign-json <file.json>       Sign a JSON document and write the signature into it
+  verify <pointer> [public-key-b64]
+                              Check a release pointer (such as one from publish --dry-run)
+  verify-json <file.json> <public-key-b64>
+                              Check the signature of a JSON document
+`;
+export function distance(a, b) {
+    let prev = Array.from({ length: b.length + 1 }, (_, j) => j);
+    for (let i = 1; i <= a.length; i++) {
+        const cur = [i];
+        for (let j = 1; j <= b.length; j++) {
+            cur[j] = Math.min(prev[j] + 1, cur[j - 1] + 1, prev[j - 1] + (a[i - 1] === b[j - 1] ? 0 : 1));
+        }
+        prev = cur;
+    }
+    return prev[b.length];
+}
+/** Closest command within edit distance 2, or undefined. */
+export function suggest(input) {
+    let best;
+    let bestD = 3;
+    for (const c of COMMANDS) {
+        const d = distance(input.toLowerCase(), c);
+        if (d < bestD) {
+            best = c;
+            bestD = d;
+        }
+    }
+    return best;
+}
+export function unknownCommand(input) {
+    const s = suggest(input);
+    return `shipvo: '${input}' is not a command.${s ? ` Did you mean '${s}'?` : ""}\nRun 'shipvo --help' to see all commands.\n`;
+}
+/** What to print when a command throws: the message, not a stack trace. Set SHIPVO_DEBUG=1 for the stack. */
+export function failure(e, debug = !!process.env.SHIPVO_DEBUG) {
+    if (debug && e instanceof Error && e.stack)
+        return e.stack;
+    const m = e instanceof Error ? e.message : String(e);
+    return `shipvo: ${m}\nRun 'shipvo doctor' to check your setup, or set SHIPVO_DEBUG=1 to see the full error.\n`;
+}

package/dist/hermes.d.ts

@@ -0,0 +1,11 @@
+/** True if the bytes start with the Hermes bytecode magic number. */
+export declare const isHermesBytecode: (b: Uint8Array) => boolean;
+/** The bytecode version in the header, or null if this is not Hermes bytecode. */
+export declare function hermesBytecodeVersion(b: Uint8Array): number | null;
+/** Parse a declared version list such as "96" or "96,98" (CLI flag) or a number / number[] (shipvo.json). */
+export declare function parseDeclared(v: unknown): number[] | undefined;
+/**
+ * Decide what to record in the release. Returns the version (or undefined when nothing is known).
+ * Throws when the bundle is not bytecode but the app declares a bytecode version, or when the versions differ.
+ */
+export declare function checkBundle(file: string, bytes: Uint8Array, declared?: number[]): number | undefined;

package/dist/hermes.js

@@ -0,0 +1,41 @@
+// Read the Hermes bytecode version from a bundle header, and check it against what the app's shells declare.
+// A Hermes bytecode file starts with an 8-byte magic number (little-endian 0x1F1903C103BC1FC6),
+// followed by the bytecode format version as a 32-bit little-endian integer.
+// Layout source: the BytecodeFileHeader struct in facebook/hermes, include/hermes/BCGen/HBC/BytecodeFileFormat.h
+// (fields MAGIC, then VERSION).
+const MAGIC = [0xc6, 0x1f, 0xbc, 0x03, 0xc1, 0x03, 0x19, 0x1f];
+/** True if the bytes start with the Hermes bytecode magic number. */
+export const isHermesBytecode = (b) => b.length >= 12 && MAGIC.every((m, i) => b[i] === m);
+/** The bytecode version in the header, or null if this is not Hermes bytecode. */
+export function hermesBytecodeVersion(b) {
+    if (!isHermesBytecode(b))
+        return null;
+    return new DataView(b.buffer, b.byteOffset, b.byteLength).getUint32(8, true);
+}
+/** Parse a declared version list such as "96" or "96,98" (CLI flag) or a number / number[] (shipvo.json). */
+export function parseDeclared(v) {
+    if (v === undefined || v === null || v === "")
+        return undefined;
+    const list = Array.isArray(v) ? v : String(v).split(",");
+    const nums = list.map((x) => Number(String(x).trim()));
+    if (!nums.length || nums.some((n) => !Number.isInteger(n) || n <= 0))
+        throw new Error(`hermes bytecode version must be positive integers (got ${JSON.stringify(v)})`);
+    return nums;
+}
+/**
+ * Decide what to record in the release. Returns the version (or undefined when nothing is known).
+ * Throws when the bundle is not bytecode but the app declares a bytecode version, or when the versions differ.
+ */
+export function checkBundle(file, bytes, declared) {
+    const version = hermesBytecodeVersion(bytes);
+    if (version === null) {
+        if (file.endsWith(".hbc"))
+            throw new Error(`${file} has a .hbc name but no Hermes bytecode header. Was it compiled with hermesc?`);
+        if (declared)
+            throw new Error(`${file} is plain JavaScript, but the app declares Hermes bytecode version ${declared.join(", ")}. Enable Hermes bytecode in the export, or remove hermesBytecodeVersion.`);
+        return undefined;
+    }
+    if (declared && !declared.includes(version))
+        throw new Error(`${file} is Hermes bytecode version ${version}, but the app's shells run ${declared.join(", ")}. Build with the same Hermes as the shell, or update hermesBytecodeVersion if the shell changed.`);
+    return version;
+}