@shipvo/cli 0.1.3 → 0.1.5

package/dist/config.js

@@ -3,7 +3,7 @@ import { join } from "node:path";
 export function loadConfig(dir = process.cwd()) {
     const p = join(dir, "shipvo.json");
     if (!existsSync(p))
-        throw new Error("No shipvo.json here. Run this inside an app created with `shipvo init`, or create one (see docs/getting-started.md).");
+        throw new Error("No shipvo.json in this folder. Run this inside your app's folder. To start a new app, run `shipvo init myshop`.");
     const c = JSON.parse(readFileSync(p, "utf8"));
     for (const k of ["appId", "controlPlane", "publicKey"])
         if (!c[k])
@@ -26,8 +26,8 @@ export function seed() {
     if (!s && local)
         return local;
     if (!s) {
-        console.error("Set SHIPVO_SIGNING_SEED or SHIPVO_SIGNING_SEED_FILE (the seed `shipvo keygen` printed), or keep it at .shipvo/seed.txt.");
-        process.exit(2);
+        console.error("Set SHIPVO_SIGNING_SEED or SHIPVO_SIGNING_SEED_FILE (the seed `shipvo keygen` printed), or keep it at .shipvo/seed.txt. No key yet? Run `shipvo keygen`.");
+        process.exit(1);
     }
     return s;
 }
@@ -42,18 +42,46 @@ export function publishToken() {
         return null;
     }
 }
+const RETRIES = 2;
 /** Publishing through the hosted control plane: the same get/put/keys, scoped to this app and signed-pointer checked server side. */
 function hostedKv(cfg, token) {
     const base = `${cfg.controlPlane.replace(/\/$/, "")}/apps/${cfg.appId}/kv`;
-    const auth = { Authorization: `Bearer ${token}` };
+    const auth = { Authorization: `Bearer ${token}`, ...(process.env.SHIPVO_ACTOR === "agent" ? { "x-shipvo-actor": "agent" } : {}) };
     const path = (k) => `${base}/${k.split("/").map(encodeURIComponent).join("/")}`;
+    const host = cfg.controlPlane.replace(/\/$/, "");
+    /** One place for the two first-run failures: the server is not there, or it does not accept the token. */
+    const call = async (url, init, what) => {
+        let r;
+        for (let attempt = 0;; attempt++) {
+            try {
+                r = await fetch(url, init);
+                break;
+            }
+            catch (err) {
+                // Network errors only, never HTTP statuses. Every call here is a GET or a PUT of the same bytes to the same key, so repeating it is safe.
+                if (attempt < RETRIES) {
+                    await new Promise((ok) => setTimeout(ok, 150 * 2 ** attempt));
+                    continue;
+                }
+                const cause = err?.cause?.code ?? err?.code ?? err?.cause?.message ?? err?.message ?? "unknown error";
+                throw new Error(`Cannot reach the control plane at ${host} (${cause}) while ${init.method ?? "GET"} ${what}. Check "controlPlane" in shipvo.json, then run \`shipvo doctor\`.`);
+            }
+        }
+        if (r.status === 403) { // a typed policy refusal is not a bad token
+            const j = await r.clone().json().catch(() => null);
+            if (j?.code === "policy_refused")
+                throw new Error(`Refused by policy rule ${j.rule}: ${j.reason}`);
+        }
+        if (r.status === 401 || r.status === 403)
+            throw new Error(`The control plane at ${host} rejected your publish token (${r.status}). Run \`shipvo login\`, then \`shipvo app create\` for a new token.`);
+        return r;
+    };
     return {
-        async get(k) { const r = await fetch(path(k), { headers: auth }); if (r.status === 401)
-            throw new Error("publish token rejected: run `shipvo app create` for a new one"); return r.ok ? r.text() : null; },
-        async getBytes(k) { const r = await fetch(path(k), { headers: auth }); return r.ok ? new Uint8Array(await r.arrayBuffer()) : null; },
-        async keys(prefix) { const r = await fetch(`${base}?prefix=${encodeURIComponent(prefix)}`, { headers: auth }); return r.ok ? (await r.json()).keys : []; },
+        async get(k) { const r = await call(path(k), { headers: auth }, k); return r.ok ? r.text() : null; },
+        async getBytes(k) { const r = await call(path(k), { headers: auth }, k); return r.ok ? new Uint8Array(await r.arrayBuffer()) : null; },
+        async keys(prefix) { const r = await call(`${base}?prefix=${encodeURIComponent(prefix)}`, { headers: auth }, `keys ${prefix}`); return r.ok ? (await r.json()).keys : []; },
         async put(k, body, type) {
-            const r = await fetch(path(k), { method: "PUT", headers: { ...auth, "content-type": type }, body });
+            const r = await call(path(k), { method: "PUT", headers: { ...auth, "content-type": type }, body }, k);
             if (!r.ok) {
                 let m = "";
                 try {
@@ -75,7 +103,7 @@ export function kv(cfg) {
         if (pt)
             return hostedKv(cfg, pt);
         console.error("Nothing to publish with. Hosted: run `shipvo login`, then `shipvo app create` (or set SHIPVO_PUBLISH_TOKEN). Self-hosted: set CLOUDFLARE_ACCOUNT_ID, CLOUDFLARE_API_TOKEN and SHIPVO_KV_ID.");
-        process.exit(2);
+        process.exit(1);
     }
     const url = (k) => `https://api.cloudflare.com/client/v4/accounts/${ACC}/storage/kv/namespaces/${NS}/values/${encodeURIComponent(k)}`;
     const auth = { Authorization: `Bearer ${TOKEN}` };

package/dist/doctor.d.ts

@@ -3,6 +3,7 @@ type CheckResult = {
     name: string;
     ok: boolean;
     fix: string;
+    note?: string;
 };
 type DoctorDeps = {
     cwd: string;
@@ -11,6 +12,19 @@ type DoctorDeps = {
     fetchFn: typeof fetch;
     fileExists: typeof existsSync;
     readText: (path: string) => string;
+    platform: NodeJS.Platform;
+    fileMode: (path: string) => number | null;
+    /** Port the simulator will use (default 4545). */
+    port: number;
+    /** Path of the Playwright Chromium binary, or null if Playwright is not installed. */
+    chromiumPath: (cwd: string) => string | null;
+    /** Version of the playwright that chromiumPath resolved, or null if unknown. */
+    playwrightVersion: (cwd: string) => string | null;
+    portFree: (port: number) => Promise<boolean>;
+    /** Skip the checks that need the network (control plane reachable and /health). */
+    offline: boolean;
+    /** Skip the simulator checks (Chromium, port) even when package.json has a `sim` script. */
+    skipSim: boolean;
 };
 export declare function runDoctorChecks(overrides?: Partial<DoctorDeps>): Promise<CheckResult[]>;
 export declare function doctor(argv: string[]): Promise<void>;

package/dist/doctor.js

@@ -1,5 +1,9 @@
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, readFileSync, statSync } from "node:fs";
 import { join } from "node:path";
+import { createRequire } from "node:module";
+import { execSync } from "node:child_process";
+import { portFree } from "./sim.js";
+import { args as parseArgs } from "./config.js";
 import { b64, keyFromSeed } from "./index.js";
 import { parseDeclared } from "./hermes.js";
 const defaultDeps = () => ({
@@ -9,9 +13,70 @@ const defaultDeps = () => ({
     fetchFn: fetch,
     fileExists: existsSync,
     readText: (path) => readFileSync(path, "utf8"),
+    platform: process.platform,
+    fileMode: (path) => { try {
+        return statSync(path).mode & 0o777;
+    }
+    catch {
+        return null;
+    } },
+    port: 4545,
+    chromiumPath: playwrightChromiumPath,
+    playwrightVersion: (cwd) => { try {
+        return createRequire(join(cwd, "package.json"))("playwright/package.json").version;
+    }
+    catch {
+        return null;
+    } },
+    portFree,
+    offline: false,
+    skipSim: false,
 });
+/** Finds Playwright the way packages/sim/server.mjs does (the app's install, then this package's and @shipvo/sim's, then the global npm root) and asks it where Chromium should be. */
+function playwrightChromiumPath(cwd) {
+    const tries = [
+        () => createRequire(join(cwd, "package.json"))("playwright"),
+        () => createRequire(import.meta.url)("playwright"),
+        () => createRequire(createRequire(import.meta.url).resolve("@shipvo/sim/package.json"))("playwright"),
+        () => createRequire(import.meta.url)(join(execSync("npm root -g", { stdio: ["ignore", "pipe", "ignore"] }).toString().trim(), "playwright")),
+    ];
+    for (const get of tries) {
+        try {
+            return get().chromium.executablePath();
+        }
+        catch { }
+    }
+    return null;
+}
+/** Where system Chrome or Edge lives. Same places as the simulator's browser resolver (packages/sim/browser-resolver.mjs). */
+function systemBrowserPaths(platform, env) {
+    if (platform === "win32") {
+        const roots = [env.PROGRAMFILES, env["PROGRAMFILES(X86)"], env.LOCALAPPDATA].filter(Boolean);
+        return roots.flatMap((r) => [["Chrome", r + "\\Google\\Chrome\\Application\\chrome.exe"], ["Edge", r + "\\Microsoft\\Edge\\Application\\msedge.exe"]]);
+    }
+    if (platform === "darwin")
+        return [["Chrome", "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"], ["Edge", "/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge"]];
+    return [
+        ["Chrome", "/usr/bin/google-chrome"], ["Chrome", "/usr/bin/google-chrome-stable"], ["Chrome", "/opt/google/chrome/chrome"],
+        ["Edge", "/usr/bin/microsoft-edge"], ["Edge", "/usr/bin/microsoft-edge-stable"], ["Edge", "/opt/microsoft/msedge/msedge"],
+    ];
+}
+function hasSimScript(deps) {
+    try {
+        const pkg = JSON.parse(deps.readText(join(deps.cwd, "package.json")));
+        return typeof pkg?.scripts?.sim === "string";
+    }
+    catch {
+        return false;
+    }
+}
 const parseMajor = (v) => Number(v.split(".")[0] || 0);
 const pub = (s) => b64(keyFromSeed(s).publicKey);
+function seedFilePath(env, cwd) {
+    if (env.SHIPVO_SIGNING_SEED || env.PURENATIVE_SIGNING_SEED)
+        return null;
+    return env.SHIPVO_SIGNING_SEED_FILE || env.PURENATIVE_SIGNING_SEED_FILE || join(cwd, ".shipvo", "seed.txt");
+}
 function resolveSeed(env, cwd, readText) {
     const direct = env.SHIPVO_SIGNING_SEED || env.PURENATIVE_SIGNING_SEED;
     if (direct)
@@ -71,9 +136,10 @@ export async function runDoctorChecks(overrides = {}) {
     })();
     const needCfg = "fix shipvo.json first";
     results.push({ name: "signing key matches shipvo.json publicKey", ok: signingOk, fix: !cfg ? needCfg : "restore the right seed with `shipvo keys import` (or set SHIPVO_SIGNING_SEED)" });
+    const skipped = "skipped, --offline";
     let controlPlaneOk = false;
     let cpFix = "check shipvo.json controlPlane and your network access (5 second timeout)";
-    if (cfg?.controlPlane && typeof cfg.controlPlane === "string") {
+    if (!deps.offline && cfg?.controlPlane && typeof cfg.controlPlane === "string") {
         try {
             const res = await deps.fetchFn(cfg.controlPlane.replace(/\/$/, ""), { signal: AbortSignal.timeout(5000) });
             if (res.status >= 500)
@@ -83,7 +149,50 @@ export async function runDoctorChecks(overrides = {}) {
         }
         catch { }
     }
-    results.push({ name: "control plane reachable", ok: controlPlaneOk, fix: !cfg ? needCfg : cpFix });
+    if (deps.offline)
+        results.push({ name: "control plane reachable", ok: true, fix: "none", note: skipped });
+    else
+        results.push({ name: "control plane reachable", ok: controlPlaneOk, fix: !cfg ? needCfg : cpFix });
+    const keyName = "signing key file is private";
+    const keyPath = seedFilePath(deps.env, deps.cwd);
+    if (deps.platform === "win32") {
+        results.push({ name: keyName, ok: true, fix: "none", note: "skipped on Windows, file modes do not apply" });
+    }
+    else if (!keyPath) {
+        results.push({ name: keyName, ok: true, fix: "none", note: "skipped, the seed comes from an environment variable" });
+    }
+    else {
+        const mode = deps.fileMode(keyPath);
+        if (mode === null)
+            results.push({ name: keyName, ok: true, fix: "none", note: "skipped, no key file found" });
+        else
+            results.push({ name: keyName, ok: (mode & 0o077) === 0, fix: `run \`chmod 600 ${keyPath}\` (it is mode ${mode.toString(8).padStart(3, "0")})` });
+    }
+    let healthOk = false;
+    let healthFix = "check shipvo.json controlPlane and your network access (5 second timeout)";
+    if (!deps.offline && cfg?.controlPlane && typeof cfg.controlPlane === "string") {
+        try {
+            const res = await deps.fetchFn(cfg.controlPlane.replace(/\/$/, "") + "/health", { signal: AbortSignal.timeout(5000) });
+            if (res.status !== 200)
+                healthFix = `/health answered HTTP ${res.status}, expected 200; check the control plane URL and deploy`;
+            else {
+                try {
+                    await res.json();
+                    healthOk = true;
+                }
+                catch {
+                    healthFix = "/health answered 200 but not JSON; controlPlane may point at the wrong service";
+                }
+            }
+        }
+        catch (e) {
+            healthFix = e instanceof Error && e.name === "TimeoutError" ? "/health did not answer within 5 seconds; check the URL and your network" : healthFix;
+        }
+    }
+    if (deps.offline)
+        results.push({ name: "control plane /health returns JSON", ok: true, fix: "none", note: skipped });
+    else
+        results.push({ name: "control plane /health returns JSON", ok: healthOk, fix: !cfg ? needCfg : healthFix });
     let hermesOk = true;
     if (cfg && Object.prototype.hasOwnProperty.call(cfg, "hermesBytecodeVersion")) {
         try {
@@ -94,16 +203,32 @@ export async function runDoctorChecks(overrides = {}) {
         }
     }
     results.push({ name: "hermesBytecodeVersion (if present) is set", ok: hermesOk, fix: "set hermesBytecodeVersion to a positive integer or list (for example 96 or [96, 98])" });
+    // Simulator checks only apply to projects that have a `sim` script.
+    if (!deps.skipSim && hasSimScript(deps)) {
+        const system = systemBrowserPaths(deps.platform, deps.env).find(([, p]) => deps.fileExists(p));
+        const exe = deps.chromiumPath(deps.cwd);
+        const cached = !!exe && deps.fileExists(exe);
+        const noAuto = deps.env.SHIPVO_NO_AUTO_INSTALL === "1";
+        const ok = !!system || cached || !noAuto;
+        const note = system ? `system ${system[0]}` : cached ? "Playwright Chromium" : "none found yet; the first run downloads Chromium once";
+        results.push({ name: "Browser for the simulator", ok, fix: `SHIPVO_NO_AUTO_INSTALL=1 is set and no Chrome, Edge or Playwright Chromium was found; install Chrome or Edge, or run \`npx playwright install chromium\` in the app folder${deps.playwrightVersion(deps.cwd) ? ` (playwright ${deps.playwrightVersion(deps.cwd)})` : ""}. On Linux, if it then fails to start, run \`npx playwright install-deps chromium\``, note });
+        results.push({ name: `sim port ${deps.port} is free`, ok: await deps.portFree(deps.port), fix: "Stop the other process or pass --port <n>" });
+    }
     return results;
 }
 export async function doctor(argv) {
-    if (argv.length) {
-        console.error("Usage: shipvo doctor");
+    const a = parseArgs(argv);
+    const port = a.port === undefined ? 4545 : Number(a.port);
+    const offline = argv.includes("--offline");
+    const skipSim = argv.includes("--skip-sim");
+    const stray = argv.some((x, i) => !x.startsWith("--") && argv[i - 1] !== "--port");
+    if (stray || !Number.isInteger(port) || port < 1 || port > 65535) {
+        console.error("Usage: shipvo doctor [--port <n>] [--offline] [--skip-sim]");
         process.exit(2);
     }
-    const results = await runDoctorChecks();
+    const results = await runDoctorChecks({ port, offline, skipSim });
     for (const r of results)
-        console.log(`${r.ok ? `PASS ${r.name}` : `FAIL ${r.name} — fix: ${r.fix}`}`);
+        console.log(`${r.ok ? `PASS ${r.name}${r.note ? ` (${r.note})` : ""}` : `FAIL ${r.name} — fix: ${r.fix}`}`);
     if (results.some((r) => !r.ok))
         process.exit(1);
 }

package/dist/eas.d.ts

@@ -0,0 +1,29 @@
+export declare const ANDROID_IMAGE = "latest";
+export declare const IOS_IMAGE = "macos-tahoe-26.5-xcode-26.6";
+export declare const NODE_VERSION = "22";
+export declare const JDK_VERSION = "21";
+export interface CapacitorProject {
+    configFile: string;
+    android: boolean;
+    ios: boolean;
+}
+/** Look for a Capacitor project at `root`. Returns undefined when it is not one. */
+export declare function detectCapacitor(root: string): CapacitorProject | undefined;
+export interface PlannedFile {
+    path: string;
+    content: string;
+    action: "create" | "update";
+}
+/** Work out which files need writing. Existing build YAMLs and schemes are never overwritten. */
+export declare function planEasSetup(root: string, p: CapacitorProject): PlannedFile[];
+/** Create the `ios/App.xcodeproj -> App/App.xcodeproj` link the EAS CLI scheme check needs. Returns true if it made one. */
+export declare function ensureSchemeShim(root: string): boolean;
+export declare const ONE_TIME_STEPS: readonly [readonly ["eas-cli", "init"], readonly ["eas-cli", "build:version:set", "-p", "ios"]];
+export declare const IOS_UNPROVEN = "Note: the iOS signing steps in .eas/build/ios.yml are unproven. The step names were not checked against Expo's custom build functions (https://docs.expo.dev/custom-builds/schema/), so your first iOS build is the check.";
+export type Runner = (cmd: string, args: string[], cwd: string) => number;
+export interface EasOptions {
+    cwd?: string;
+    log?: (s: string) => void;
+    runner?: Runner;
+}
+export declare function easCmd(args: string[], o?: EasOptions): Promise<number>;

package/dist/eas.js

@@ -0,0 +1,258 @@
+// `shipvo eas setup` and `shipvo eas build`: make a Capacitor repo ready for `eas build` and `eas submit`
+// with the customer's own Expo account. Shipvo writes files; it never holds Expo credentials.
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, symlinkSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { spawnSync } from "node:child_process";
+export const ANDROID_IMAGE = "latest";
+export const IOS_IMAGE = "macos-tahoe-26.5-xcode-26.6";
+export const NODE_VERSION = "22";
+export const JDK_VERSION = "21";
+const SCHEME_PATH = "ios/App/App.xcodeproj/xcshareddata/xcschemes/App.xcscheme";
+const SHIM = "ios/App.xcodeproj";
+const SHIM_TARGET = "App/App.xcodeproj";
+/** Look for a Capacitor project at `root`. Returns undefined when it is not one. */
+export function detectCapacitor(root) {
+    const configFile = readdirSync(root).find((f) => /^capacitor\.config\.(ts|js|json|mjs|cjs)$/.test(f));
+    const android = existsSync(join(root, "android"));
+    const ios = existsSync(join(root, "ios/App/App.xcodeproj"));
+    if (!configFile || (!android && !ios))
+        return undefined;
+    return { configFile, android, ios };
+}
+const androidYaml = `# Written by \`shipvo eas setup\`. Safe to edit; setup will not overwrite this file.
+# Docs: https://docs.expo.dev/custom-builds/get-started/
+build:
+  name: Capacitor Android release
+  steps:
+    - eas/checkout
+    - eas/install_node_modules
+    - run:
+        name: Install JDK ${JDK_VERSION}
+        command: |
+          source "$HOME/.sdkman/bin/sdkman-init.sh"
+          sdk install java ${JDK_VERSION}-tem < /dev/null
+          set-env JAVA_HOME "$(sdk home java ${JDK_VERSION}-tem)"
+    - run:
+        name: Build the web app
+        command: npm run build
+    - run:
+        name: Sync Capacitor
+        command: npx cap sync android
+    - eas/inject_android_credentials
+    - eas/run_gradle:
+        inputs:
+          command: :app:bundleRelease
+    - eas/find_and_upload_build_artifacts
+`;
+const iosYaml = `# Written by \`shipvo eas setup\`. Safe to edit; setup will not overwrite this file.
+# Docs: https://docs.expo.dev/custom-builds/get-started/
+# Before the first build, run \`shipvo eas build\`: it creates the ios/App.xcodeproj link that the EAS CLI scheme check needs on your machine before upload.
+build:
+  name: Capacitor iOS release
+  steps:
+    - eas/checkout
+    - eas/install_node_modules
+    - run:
+        name: Build the web app
+        command: npm run build
+    - run:
+        name: Sync Capacitor
+        command: npx cap sync ios
+    - run:
+        name: Install CocoaPods dependencies
+        command: cd ios/App && pod install
+    - eas/resolve_apple_team_id_from_credentials:
+        id: resolve_apple_team_id
+    - eas/prebuild_credentials_ios:
+        inputs:
+          project_dir: ios
+    - eas/configure_ios_credentials
+    - run:
+        name: Write ExportOptions.plist
+        # Nothing else creates this file. The team id comes from the EAS credentials step above;
+        # the profile name is read from the Xcode project that eas/configure_ios_credentials updated.
+        command: |
+          BUNDLE_ID="$(xcodebuild -project ios/App/App.xcodeproj -scheme App -configuration Release -showBuildSettings | awk -F' = ' '/ PRODUCT_BUNDLE_IDENTIFIER /{print $2; exit}')"
+          PROFILE="$(xcodebuild -project ios/App/App.xcodeproj -scheme App -configuration Release -showBuildSettings | awk -F' = ' '/ PROVISIONING_PROFILE_SPECIFIER /{print $2; exit}')"
+          cat > ios/App/ExportOptions.plist <<PLIST
+          <?xml version="1.0" encoding="UTF-8"?>
+          <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+          <plist version="1.0">
+          <dict>
+            <key>method</key><string>app-store</string>
+            <key>teamID</key><string>\${{ steps.resolve_apple_team_id.outputs.apple_team_id }}</string>
+            <key>signingStyle</key><string>manual</string>
+            <key>provisioningProfiles</key>
+            <dict><key>$BUNDLE_ID</key><string>$PROFILE</string></dict>
+          </dict>
+          </plist>
+          PLIST
+    - run:
+        name: Archive with distribution signing
+        command: |
+          xcodebuild archive \\
+            -workspace ios/App/App.xcworkspace \\
+            -scheme App \\
+            -configuration Release \\
+            -archivePath build/App.xcarchive \\
+            DEVELOPMENT_TEAM="\${{ steps.resolve_apple_team_id.outputs.apple_team_id }}" \\
+            CODE_SIGN_STYLE=Manual
+          xcodebuild -exportArchive \\
+            -archivePath build/App.xcarchive \\
+            -exportPath build/export \\
+            -exportOptionsPlist ios/App/ExportOptions.plist
+    - eas/find_and_upload_build_artifacts
+`;
+const scheme = `<?xml version="1.0" encoding="UTF-8"?>
+<Scheme LastUpgradeVersion="1600" version="1.7">
+  <BuildAction parallelizeBuildables="YES" buildImplicitDependencies="YES">
+    <BuildActionEntries>
+      <BuildActionEntry buildForTesting="YES" buildForRunning="YES" buildForProfiling="YES" buildForArchiving="YES" buildForAnalyzing="YES">
+        <BuildableReference BuildableIdentifier="primary" BlueprintName="App" BuildableName="App.app" BlueprintIdentifier="504EC3011FED79650016851F" ReferencedContainer="container:App.xcodeproj"/>
+      </BuildActionEntry>
+    </BuildActionEntries>
+  </BuildAction>
+  <LaunchAction buildConfiguration="Debug" selectedDebuggerIdentifier="Xcode.DebuggerFoundation.Debugger.LLDB" selectedLauncherIdentifier="Xcode.DebuggerFoundation.Launcher.LLDB" launchStyle="0" useCustomWorkingDirectory="NO" ignoresPersistentStateOnLaunch="NO" debugDocumentVersioning="YES" debugServiceExtension="internal" allowLocationSimulation="YES"/>
+  <ArchiveAction buildConfiguration="Release" revealArchiveInOrganizer="YES"/>
+</Scheme>
+`;
+function readJson(path) {
+    try {
+        return JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch (e) {
+        if (e.code === "ENOENT")
+            return {};
+        throw new Error(`${path} is not valid JSON. Fix it and run the command again.`);
+    }
+}
+/** Merge our profiles into an existing eas.json without touching the customer's own settings. */
+function easJson(root, p) {
+    const j = readJson(join(root, "eas.json"));
+    for (const k of ["cli", "build", "submit"]) {
+        if (j[k] !== undefined && (j[k] === null || typeof j[k] !== "object" || Array.isArray(j[k]))) {
+            throw new Error(`${join(root, "eas.json")} is not valid: "${k}" must be an object. Fix it and run the command again.`);
+        }
+    }
+    j.cli = { appVersionSource: "remote", ...(j.cli ?? {}) };
+    j.build ??= {};
+    if (p.android)
+        j.build["shipvo-android"] ??= { android: { image: ANDROID_IMAGE, buildType: "app-bundle", config: "android.yml" }, distribution: "store" };
+    if (p.ios)
+        j.build["shipvo-ios"] ??= { ios: { image: IOS_IMAGE, node: NODE_VERSION, config: "ios.yml" }, distribution: "store", autoIncrement: true };
+    j.submit ??= {};
+    if (p.android)
+        j.submit["shipvo-android"] ??= { android: {} };
+    if (p.ios)
+        j.submit["shipvo-ios"] ??= { ios: {} };
+    return JSON.stringify(j, null, 2) + "\n";
+}
+function gitignore(root) {
+    const path = join(root, ".gitignore");
+    const cur = existsSync(path) ? readFileSync(path, "utf8") : "";
+    if (cur.split(/\r?\n/).some((l) => l.trim() === SHIM))
+        return undefined;
+    const sep = cur === "" || cur.endsWith("\n") ? "" : "\n";
+    return `${cur}${sep}# Created by \`shipvo eas build\` for EAS; never commit\n${SHIM}\n`;
+}
+/** Work out which files need writing. Existing build YAMLs and schemes are never overwritten. */
+export function planEasSetup(root, p) {
+    const out = [];
+    const add = (path, content, overwrite) => {
+        const exists = existsSync(join(root, path));
+        if (exists && !overwrite)
+            return;
+        if (exists && readFileSync(join(root, path), "utf8") === content)
+            return;
+        out.push({ path, content, action: exists ? "update" : "create" });
+    };
+    add("eas.json", easJson(root, p), true);
+    if (p.android)
+        add(".eas/build/android.yml", androidYaml, false);
+    if (p.ios) {
+        add(".eas/build/ios.yml", iosYaml, false);
+        add(SCHEME_PATH, scheme, false);
+    }
+    const gi = p.ios ? gitignore(root) : undefined;
+    if (gi !== undefined)
+        out.push({ path: ".gitignore", content: gi, action: existsSync(join(root, ".gitignore")) ? "update" : "create" });
+    return out;
+}
+/** Create the `ios/App.xcodeproj -> App/App.xcodeproj` link the EAS CLI scheme check needs. Returns true if it made one. */
+export function ensureSchemeShim(root) {
+    const link = join(root, SHIM);
+    try {
+        lstatSync(link);
+        return false;
+    }
+    catch { /* missing: create it */ }
+    try {
+        symlinkSync(SHIM_TARGET, link, "dir");
+    }
+    catch (e) {
+        throw new Error(`Could not create the link ${SHIM} -> ${SHIM_TARGET} (${e.message}). Create it yourself (on Windows, run as administrator or turn on Developer Mode), then run the command again.`);
+    }
+    return true;
+}
+export const ONE_TIME_STEPS = [
+    ["eas-cli", "init"],
+    ["eas-cli", "build:version:set", "-p", "ios"],
+];
+export const IOS_UNPROVEN = "Note: the iOS signing steps in .eas/build/ios.yml are unproven. The step names were not checked against Expo's custom build functions (https://docs.expo.dev/custom-builds/schema/), so your first iOS build is the check.";
+const defaultRunner = (cmd, args, cwd) => spawnSync(cmd, args, { cwd, stdio: "inherit" }).status ?? 1;
+export async function easCmd(args, o = {}) {
+    const cwd = o.cwd ?? process.cwd();
+    const log = o.log ?? ((s) => console.log(s));
+    const runner = o.runner ?? defaultRunner;
+    const [sub, ...rest] = args;
+    if (sub !== "setup" && sub !== "build") {
+        throw new Error("Usage: shipvo eas setup [--dry-run] [--run] | shipvo eas build [eas build args]");
+    }
+    const project = detectCapacitor(cwd);
+    if (!project)
+        throw new Error("This is not a Capacitor project. Run this in a folder with capacitor.config.* and an android/ or ios/App/App.xcodeproj folder.");
+    if (sub === "build") {
+        if (project.ios && ensureSchemeShim(cwd))
+            log(`Linked ${SHIM} -> ${SHIM_TARGET} (git-ignored).`);
+        return runner("npx", ["eas-cli", "build", ...rest], cwd);
+    }
+    const known = ["--dry-run", "--run"];
+    const bad = rest.filter((a) => !known.includes(a));
+    if (bad.length)
+        throw new Error(`Unknown option for shipvo eas setup: ${bad.join(" ")}. Use --dry-run or --run.`);
+    const dry = rest.includes("--dry-run");
+    const runSteps = rest.includes("--run") && !dry;
+    const plan = planEasSetup(cwd, project);
+    for (const f of plan) {
+        log(`${dry ? "Would " + f.action : f.action === "create" ? "Created" : "Updated"} ${f.path}`);
+        if (dry)
+            log(f.content.replace(/^/gm, "  "));
+        else {
+            mkdirSync(dirname(join(cwd, f.path)), { recursive: true });
+            writeFileSync(join(cwd, f.path), f.content);
+        }
+    }
+    if (!plan.length)
+        log("Nothing to change: this repo is already set up for EAS.");
+    if (project.ios)
+        log(IOS_UNPROVEN);
+    if (dry)
+        return 0;
+    log("\nRemaining one-time steps:");
+    for (const s of ONE_TIME_STEPS)
+        log(`  npx ${s.join(" ")}`);
+    if (project.ios)
+        log("Before an iOS build, build with `shipvo eas build -p ios --profile shipvo-ios`: it creates the git-ignored ios/App.xcodeproj link first.");
+    if (runSteps) {
+        for (const s of ONE_TIME_STEPS) {
+            if (s[1] === "build:version:set" && !project.ios)
+                continue;
+            const code = runner("npx", [...s], cwd);
+            if (code !== 0) {
+                log(`\`npx ${s.join(" ")}\` failed (exit ${code}). Fix that and run it again.`);
+                return code;
+            }
+        }
+    }
+    return 0;
+}

package/dist/ensure-playwright.d.ts

@@ -0,0 +1,21 @@
+export type PackageManager = "pnpm" | "yarn" | "bun" | "npm";
+export interface EnsurePlaywrightDeps {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    /** Does this path exist? Used to find the lockfile. */
+    exists: (path: string) => boolean;
+    /** Runs a command in `cwd`. Throws if it fails. */
+    run: (cmd: string, args: string[], cwd: string) => void;
+    log: (line: string) => void;
+    /** True when `playwright` resolves from the app. Defaults to the same lookup order as `doctor`. */
+    resolves?: (cwd: string) => boolean;
+}
+export declare function detectPackageManager(cwd: string, exists: (path: string) => boolean): PackageManager;
+export declare function installCommand(pm: PackageManager): {
+    cmd: string;
+    args: string[];
+};
+/** Installs `playwright` as a dev dependency with the app's package manager when it is missing. */
+export declare function ensurePlaywright(deps: Partial<EnsurePlaywrightDeps> & {
+    cwd: string;
+}): void;