@shipvo/cli 0.1.3 → 0.1.5

package/dist/preview-recorder.js

@@ -0,0 +1,62 @@
+// The recorder that runs inside the preview frame page. It is plain browser JavaScript kept as a string,
+// so `shipvo preview` can inline it. `shipvoExport` mirrors `exportTest` in packages/mcp/src/export.ts;
+// a test keeps the two outputs identical.
+export const RECORDER_JS = String.raw `
+var shipvoSteps=[];
+function shipvoQ(s){return JSON.stringify(s).replace(new RegExp("\\u2028","g"),"\\\\u2028").replace(new RegExp("\\u2029","g"),"\\\\u2029")}
+function shipvoOneLine(s){return s.replace(new RegExp("[\\r\\n\\u2028\\u2029]+","g")," ")}
+function shipvoEnv(l){return "SHIPVO_TEST_"+(l.replace(/[^A-Za-z0-9]+/g,"_").replace(/^_+|_+$/g,"").toUpperCase()||"FIELD")}
+function shipvoLine(s){
+  var t=s.target;
+  if(s.action==="note")return ["// "+shipvoOneLine(s.text||"")];
+  if(s.action==="set_device")return ["await phone.device.set("+shipvoQ(s.device||{})+");"];
+  if(s.action==="back")return ["await phone.back();"];
+  if(s.action==="scroll")return ["await phone.scroll("+shipvoQ(["down","up","left","right"].indexOf(s.direction)>=0?s.direction:"down")+");"];
+  if(s.action==="tap"){
+    if(!t)return ["// TODO: tap without a target"];
+    if(t.matches>1)return ["// TODO: ambiguous target "+shipvoOneLine(shipvoQ(t.text))];
+    return ["await phone.tap("+shipvoQ(t.text)+");"];
+  }
+  if(s.action==="type"){
+    var label=s.fieldLabel||(t&&t.text);
+    if(!label)return ["// TODO: type without a field label"];
+    if(t&&t.matches>1)return ["// TODO: ambiguous target "+shipvoOneLine(shipvoQ(label))];
+    return ["await phone.type("+shipvoQ(label)+", "+(s.passwordLike?"process.env."+shipvoEnv(label)+"!":shipvoQ(s.text||""))+");"];
+  }
+  return [];
+}
+function shipvoExport(app,steps,title){
+  var out=['import { test } from "@shipvo/test/vitest";','import { openApp } from "@shipvo/test";','','test('+shipvoQ("recorded session for "+(title||app))+', async () => {','  const phone = await openApp({ app: '+shipvoQ(app)+' });'];
+  steps.forEach(function(s){
+    var lines=shipvoLine(s);
+    lines.forEach(function(l){out.push("  "+l)});
+    if(s.changed&&lines.length&&lines[0].indexOf("//")!==0&&s.action!=="open")out.push("  await phone.waitFor(/\\S/); // TODO: name the text that should appear");
+  });
+  out.push("});","");
+  return out.join("\n");
+}
+function shipvoLabel(el){
+  var l=el.getAttribute("aria-label")||(el.labels&&el.labels[0]&&el.labels[0].textContent)||el.getAttribute("placeholder")||el.textContent||"";
+  return l.replace(/\s+/g," ").trim();
+}
+function shipvoCount(doc,label){
+  var n=0;doc.querySelectorAll("button,a,[role=button],[role=link],[role=tab],input,textarea,[aria-label]").forEach(function(e){if(shipvoLabel(e)===label)n++});
+  return n;
+}
+function shipvoAttach(frame,onStep){
+  var doc=frame.contentDocument;if(!doc||doc.__shipvoAttached)return;
+  doc.__shipvoAttached=true;
+  var sel="button,a,[role=button],[role=link],[role=tab],[role=switch],[role=checkbox]";
+  doc.addEventListener("click",function(e){
+    var el=e.target&&e.target.closest&&e.target.closest(sel);
+    if(!el||el.matches("input,textarea"))return;
+    var text=shipvoLabel(el);if(!text){onStep({action:"note",text:"TODO: tap without a label"});return}
+    onStep({action:"tap",target:{text:text,role:el.getAttribute("role")||el.tagName.toLowerCase(),matches:shipvoCount(doc,text)},changed:true});
+  },true);
+  doc.addEventListener("change",function(e){
+    var el=e.target;if(!el||!/^(INPUT|TEXTAREA)$/.test(el.tagName))return;
+    var label=shipvoLabel(el);if(!label)return;
+    onStep({action:"type",fieldLabel:label,text:el.value,passwordLike:el.type==="password",target:{text:label,role:"textbox",matches:shipvoCount(doc,label)}});
+  },true);
+}
+`;

package/dist/preview.d.ts

@@ -0,0 +1,35 @@
+export type PreviewFile = {
+    path: string;
+    bytes: Uint8Array;
+    contentType: string;
+};
+export type PreviewResult = {
+    url: string;
+    claimUrl: string | null;
+    expiresAt: string | null;
+    files: number;
+    warnings: string[];
+};
+export type PreviewOpts = {
+    fetch?: typeof fetch;
+    sleep?: (ms: number) => Promise<void>;
+    maxRetries?: number;
+};
+export declare const blockedPath: (rel: string) => boolean;
+/** Throws if any file would leak a secret. Names the file and the kind, never the value. */
+export declare function refuseSecrets(files: PreviewFile[], secrets?: string[]): void;
+/** Reads a build folder into upload entries, skipping files that must never be uploaded. */
+export declare function collectFiles(dir: string): PreviewFile[];
+/** The page people open: the app in an Android or iPhone frame, with skin, size and theme switches, a back control and a recorder panel. */
+export declare function framePage(name: string, appId?: string): string;
+/** Puts the frame page at index.html and the app's own entry at app.html (its asset paths are absolute, so it stays at the site root). */
+export declare function wrapBuild(buildDir: string, name: string, appId?: string): PreviewFile[];
+/** Publishes to here.now anonymously: create, upload, finalize. Refreshes expired upload URLs and waits out 429s. */
+export declare function publishToHereNow(files: PreviewFile[], o?: PreviewOpts): Promise<PreviewResult>;
+export declare const NOTICE = "This link is public: anyone who has it can open the preview. It expires in 24 hours unless you open the claim link and sign in to here.now, which keeps it.";
+/** Builds, wraps and publishes. Used by the CLI and by the MCP `publish_preview` tool (through `shipvo preview --json`). */
+export declare function runPreview(root: string, o?: PreviewOpts & {
+    skipBuild?: boolean;
+    buildDir?: string;
+}): Promise<PreviewResult>;
+export declare function preview(argv: string[]): Promise<void>;

package/dist/preview.js

@@ -0,0 +1,346 @@
+// `shipvo preview`: build the web artifact with the simulated device, wrap it in a phone-sized frame page
+// and publish it to here.now with no account. The link is public and lasts 24 hours unless claimed.
+import { spawn } from "node:child_process";
+import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync } from "node:fs";
+import { join, relative, sep, extname } from "node:path";
+import { args as parse, loadConfig } from "./config.js";
+import { RECORDER_JS } from "./preview-recorder.js";
+const API = "https://here.now/api/v1";
+const CLIENT = "shipvo/cli";
+const TYPES = {
+    ".html": "text/html; charset=utf-8", ".js": "text/javascript; charset=utf-8", ".css": "text/css; charset=utf-8", ".json": "application/json",
+    ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".gif": "image/gif", ".svg": "image/svg+xml", ".webp": "image/webp",
+    ".ico": "image/x-icon", ".ttf": "font/ttf", ".otf": "font/otf", ".woff": "font/woff", ".woff2": "font/woff2", ".txt": "text/plain; charset=utf-8", ".wasm": "application/wasm",
+};
+const typeOf = (p) => TYPES[extname(p).toLowerCase()] ?? "application/octet-stream";
+// Files that never leave the machine, wherever they sit in the tree.
+const BLOCKED_SEGMENTS = new Set([".shipvo", ".git", "node_modules", ".herenow"]);
+const BLOCKED_NAME = /^(\.env.*|.*\.map|.*\.(pem|key|p8|p12|jks|keystore|mobileprovision)|seed\.txt|publish-token|id_rsa|id_ed25519)$/i;
+export const blockedPath = (rel) => {
+    const segs = rel.split(/[\\/]/);
+    return segs.some((s) => BLOCKED_SEGMENTS.has(s)) || BLOCKED_NAME.test(segs[segs.length - 1]);
+};
+const SECRET_PATTERNS = [
+    [/-----BEGIN [A-Z ]*PRIVATE KEY-----/, "a private key"],
+    [/SHIPVO_SIGNING_SEED\s*["']?\s*[:=]/, "SHIPVO_SIGNING_SEED"],
+    [/SHIPVO_PUBLISH_TOKEN\s*["']?\s*[:=]/, "SHIPVO_PUBLISH_TOKEN"],
+    [/CLOUDFLARE_API_TOKEN\s*["']?\s*[:=]/, "CLOUDFLARE_API_TOKEN"],
+    [/\bgh[pousr]_[A-Za-z0-9]{30,}/, "a GitHub token"],
+    [/\bAKIA[0-9A-Z]{16}\b/, "an AWS access key"],
+    [/\bsk-[A-Za-z0-9_-]{32,}/, "an API key"],
+];
+const TEXT = /\.(html|js|mjs|css|json|txt|svg)$/i;
+/** Secret values this process knows: they must not appear in anything we upload. */
+function knownSecrets() {
+    const e = process.env;
+    const out = [e.SHIPVO_SIGNING_SEED, e.PURENATIVE_SIGNING_SEED, e.SHIPVO_PUBLISH_TOKEN, e.CLOUDFLARE_API_TOKEN];
+    for (const f of [join(process.cwd(), ".shipvo", "seed.txt"), join(process.cwd(), ".shipvo", "publish-token")]) {
+        try {
+            out.push(readFileSync(f, "utf8").trim());
+        }
+        catch { }
+    }
+    return out.filter((s) => !!s && s.length >= 16);
+}
+/** Throws if any file would leak a secret. Names the file and the kind, never the value. */
+export function refuseSecrets(files, secrets = knownSecrets()) {
+    for (const f of files) {
+        if (!TEXT.test(f.path))
+            continue;
+        const text = Buffer.from(f.bytes).toString("utf8");
+        for (const s of secrets)
+            if (text.includes(s))
+                throw new Error(`Refusing to publish: ${f.path} contains a secret value from your environment or .shipvo/. Remove it from the app's web build and run again.`);
+        for (const [re, what] of SECRET_PATTERNS)
+            if (re.test(text))
+                throw new Error(`Refusing to publish: ${f.path} references ${what}. Keep secrets out of the web build and run again.`);
+    }
+}
+/** Reads a build folder into upload entries, skipping files that must never be uploaded. */
+export function collectFiles(dir) {
+    const out = [];
+    const walk = (d) => {
+        for (const name of readdirSync(d)) {
+            const full = join(d, name), rel = relative(dir, full).split(sep).join("/");
+            if (blockedPath(rel))
+                continue;
+            if (statSync(full).isDirectory())
+                walk(full);
+            else
+                out.push({ path: rel, bytes: new Uint8Array(readFileSync(full)), contentType: typeOf(rel) });
+        }
+    };
+    walk(dir);
+    return out;
+}
+/** The page people open: the app in an Android or iPhone frame, with skin, size and theme switches, a back control and a recorder panel. */
+export function framePage(name, appId = name) {
+    const title = name.replace(/[<>&"']/g, "");
+    return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover">
+<title>${title} preview</title>
+<style>
+:root{color-scheme:light}body.dark{color-scheme:dark}
+html,body{margin:0;height:100%;font:14px system-ui,sans-serif;background:#e8eaed;color:#111}
+body.dark{background:#15171a;color:#eee}
+.bar{display:flex;gap:8px;justify-content:center;align-items:center;padding:10px;flex-wrap:wrap}
+.bar button,.back{font:inherit;padding:6px 12px;border:1px solid #888;border-radius:8px;background:transparent;color:inherit;cursor:pointer}
+.bar button[aria-pressed=true]{background:#2563eb;border-color:#2563eb;color:#fff}
+.stage{display:flex;justify-content:center;align-items:flex-start;gap:16px;padding:0 10px 20px;flex-wrap:wrap}
+.device{display:flex;flex-direction:column;background:#000;color:#fff;border-radius:28px;box-shadow:0 8px 30px #0005;overflow:hidden;width:360px;max-width:100%;box-sizing:border-box;padding:0 6px}
+.device[data-skin=iphone]{border-radius:44px;padding:0 10px}
+.status{display:flex;justify-content:space-between;align-items:center;height:28px;padding:0 14px;font-size:12px;flex:none}
+.device[data-skin=iphone] .status{height:44px;padding:0 24px}
+.device[data-skin=android] .status .notch{display:none}
+.device[data-skin=iphone] .status .icons{letter-spacing:2px}
+.notch{width:90px;height:24px;background:#000;border-radius:14px;position:absolute}
+.device[data-skin=iphone] .status{position:relative}
+.device[data-skin=iphone] .status .notch{left:50%;margin-left:-45px;top:8px;background:#111}
+iframe{border:0;background:#fff;width:100%;flex:1;min-height:0;display:block}
+.nav{flex:none;display:flex;justify-content:center;align-items:center;height:44px}
+.device[data-skin=iphone] .nav{height:44px}
+.back{color:#fff;border-color:#888;padding:4px 14px}
+.device[data-skin=iphone] .back{display:block;position:relative;width:134px;height:44px;padding:0;border:0;background:transparent;font-size:0}
+.device[data-skin=iphone] .back::after{content:"";position:absolute;left:0;right:0;top:50%;height:5px;margin-top:-2px;border-radius:3px;background:#fff}
+.back:focus-visible{outline:2px solid #fff;outline-offset:2px}
+.device[data-skin=android] .back{border:0}
+.side{max-width:360px;margin:0 auto 20px;padding:0 10px;box-sizing:border-box}
+.side h2{font-size:14px;margin:0 0 6px}.side ol{padding-left:20px;margin:6px 0}.side li{margin-bottom:6px}.side small{opacity:.7}
+.side button,.side input{font:inherit}
+.side input{width:100%;box-sizing:border-box;min-height:36px;background:transparent;color:inherit;border:1px solid #888;border-radius:6px;padding:4px 8px;margin:4px 0}
+body.dark .side input{background:#15171a;color:#eee}body.dark .side small{opacity:.85}
+.fab{position:fixed;right:12px;bottom:12px;z-index:10;min-width:44px;min-height:44px;padding:8px 14px;font:inherit;border:1px solid #888;border-radius:22px;background:#fff;color:#111;cursor:pointer;box-shadow:0 2px 8px #0004}
+.fab[aria-pressed=true]{background:#2563eb;border-color:#2563eb;color:#fff}
+.fab:focus-visible{outline:3px solid #f59e0b;outline-offset:2px}
+body.dark .fab{background:#2a2d31;color:#eee}body.dark .fab[aria-pressed=true]{background:#2563eb;color:#fff}
+.device{position:relative}
+#pin{position:absolute;inset:0;display:none;cursor:crosshair;background:#2563eb22;z-index:5}
+#pin.on{display:block}
+#pin .hint{position:absolute;left:8px;right:8px;top:8px;padding:6px 8px;border-radius:6px;background:#111;color:#fff;font-size:13px;text-align:center}
+.note{text-align:center;opacity:.7;padding:0 12px 16px}
+.recp a{color:inherit;text-decoration:underline}body.dark .recp a{color:#93c5fd}.recp button:focus-visible,.bar button:focus-visible,.recp a:focus-visible{outline:2px solid #60a5fa;outline-offset:2px}
+.recp{max-width:520px;margin:0 auto;padding:0 12px 24px;text-align:center}.recp p{opacity:.8}.recp button{font:inherit;padding:6px 12px;border:1px solid #888;border-radius:8px;background:transparent;color:inherit;cursor:pointer}
+.panel{width:280px;max-width:100%;box-sizing:border-box;display:grid;gap:10px;padding:12px;border:1px solid #8886;border-radius:12px}
+.panel h2{font-size:15px;margin:0}.panel fieldset{border:0;margin:0;padding:0;display:grid;gap:6px}.panel legend{font-weight:600;padding:0 0 4px}
+.panel .row{display:flex;gap:6px;flex-wrap:wrap}.panel input,.panel select,.panel button{font:inherit;padding:5px 8px;border:1px solid #888;border-radius:8px;background:transparent;color:inherit;min-width:0}
+body.dark .panel select,body.dark .panel option{background:#15171a;color:#eee}.panel button[aria-pressed=true]{background:#2563eb;border-color:#2563eb;color:#fff}.panel input{flex:1 1 80px}.panel button{cursor:pointer}.panel .sim{opacity:.7;font-size:12px;margin:0}
+@media (max-width:500px){.bar,.note{display:none}.stage{padding:0;display:block}.panel{width:auto;margin:10px;max-width:none}.device{padding:0!important;width:100vw!important;height:100vh!important;height:100dvh!important;border-radius:0!important;box-shadow:none}}
+</style></head><body>
+<div class="bar" role="toolbar" aria-label="Preview options">
+<button data-skin="android" aria-pressed="true">Android</button><button data-skin="iphone" aria-pressed="false">iPhone</button>
+<button data-size="phone" aria-pressed="true">Phone</button><button data-size="large" aria-pressed="false">Large phone</button><button data-size="tablet" aria-pressed="false">Tablet</button>
+<button id="theme" aria-pressed="false">Dark</button></div>
+<button id="comment" class="fab" aria-pressed="false">Comment</button>
+<div class="stage"><div class="device" id="device" data-skin="android" style="width:360px;height:760px">
+<div class="status" id="status"><span id="clock">9:41</span><span class="notch"></span><span class="icons" id="icons">&#9679;&#9679; 5G 100%</span></div>
+<iframe id="app" src="app.html" title="${title}"></iframe><div id="pin" role="button" tabindex="0" aria-label="Tap where the problem is, or press Enter to mark the centre of the device"><span class="hint">Tap where the problem is. Press Escape to cancel.</span></div>
+<div class="nav"><button class="back" id="back" aria-label="Back" title="Back">&#9664; Back</button></div>
+</div>
+<aside class="panel" id="device-panel" aria-label="Device controls"><h2>Device</h2>
+<fieldset><legend>Location</legend><div class="row"><select data-control="location-list" aria-label="Place"><option value="4.0511,9.7679">Douala</option><option value="48.8566,2.3522">Paris</option><option value="40.7128,-74.006">New York</option><option value="-1.2921,36.8219">Nairobi</option></select><button data-control="location-set">Set</button></div>
+<div class="row"><input data-control="lat" placeholder="Latitude" inputmode="decimal" aria-label="Latitude"><input data-control="lng" placeholder="Longitude" inputmode="decimal" aria-label="Longitude"><button data-control="coords-set">Go</button></div></fieldset>
+<fieldset><legend>Camera</legend><div class="row"><select data-control="camera-list" aria-label="Barcode"><option value="ean13|6181234567890">EAN-13 6181234567890</option><option value="qr|https://example.com">QR https://example.com</option><option value="none|">Nothing in view</option></select><button data-control="camera-set">Show</button></div></fieldset>
+<fieldset><legend>Fingerprint / Face ID</legend><div class="row"><button data-control="bio-success">Match</button><button data-control="bio-fail">No match</button></div></fieldset>
+<fieldset><legend>Payment</legend><div class="row"><button data-control="pay-approve">Approve</button><button data-control="pay-decline">Decline</button></div></fieldset>
+<fieldset><legend>Network</legend><div class="row"><button data-control="net-online">Online</button><button data-control="net-slow">Slow</button><button data-control="net-offline">Offline</button></div></fieldset>
+<fieldset><legend>Push notification</legend><input data-control="push-title" placeholder="Title" aria-label="Title"><input data-control="push-body" placeholder="Body" aria-label="Body"><button data-control="push-send">Send</button></fieldset>
+<p class="sim" id="panel-status" role="status">All device events here are simulated.</p></aside>
+</div>
+<div class="side" id="side"><h2>Comments (<span id="count">0</span>)</h2>
+<form id="noteform" hidden><label for="notetext">Note for the point you tapped</label><br><input id="notetext"> <button type="submit">Save</button></form><span id="notesaved" role="status"></span>
+<ol id="notelist"></ol>
+<button id="export">Export comments.json</button>
+<p><small>Notes live in this browser until you export them. Nothing is uploaded.</small></p></div>
+<p class="note">${title}: simulated device, public preview. System sheets such as permissions and payments are simulated.</p>
+<script data-notes>
+(function(){
+var KEY="shipvo-preview-comments",steps=[],pending=null,notes=[];
+function $(id){return document.getElementById(id)}
+try{notes=JSON.parse(localStorage.getItem(KEY)||"[]");if(!Array.isArray(notes))notes=[]}catch(e){notes=[]}
+function save(){try{localStorage.setItem(KEY,JSON.stringify(notes))}catch(e){}}
+function esc(t){return String(t).replace(/[&<>"']/g,function(c){return"&#"+c.charCodeAt(0)+";"})}
+function screenName(){try{var w=$("app").contentWindow,t=w.document.title,r=w.location.pathname+(w.location.hash||"");return t?t+" ("+r+")":r}catch(e){return"unknown"}}
+function step(text){steps.push(text)}
+function add(note,x,y){var n={note:String(note),x:Math.round(x),y:Math.round(y),screen:screenName(),steps:steps.slice()};notes.push(n);save();render();return n}
+function exportJson(){return JSON.stringify(notes,null,2)}
+function render(){var l=$("notelist"),c=$("count");if(c)c.textContent=notes.length;if(l)l.innerHTML=notes.map(function(n){return"<li>"+esc(n.note)+"<br><small>"+esc(n.screen)+" at "+Number(n.x)+","+Number(n.y)+", "+(n.steps||[]).length+" steps</small></li>"}).join("")}
+function download(){var b=new Blob([exportJson()],{type:"application/json"}),u=URL.createObjectURL(b),a=document.createElement("a");a.href=u;a.download="comments.json";document.body.appendChild(a);a.click();document.body.removeChild(a);URL.revokeObjectURL(u)}
+function label(e){var t=e.getAttribute&&(e.getAttribute("aria-label")||e.textContent)||"";return String(t).trim().slice(0,40)}
+var seen=typeof WeakSet==="function"?new WeakSet():null;
+function watch(){try{var d=$("app").contentWindow.document;if(seen){if(seen.has(d))return;seen.add(d)}d.addEventListener("click",function(ev){var e=ev.target,k=e&&e.closest&&e.closest("button,[role=button],a,input");step("tap "+(k?label(k)||"control":"screen"))},true)}catch(e){}}
+function setMode(on,refocus){var p=$("pin"),b=$("comment");if(p)p.className=on?"on":"";if(b){b.setAttribute("aria-pressed",on);if(refocus&&b.focus)b.focus()}if(on&&p&&p.focus)p.focus()}
+var cb=$("comment");if(cb)cb.onclick=function(){setMode($("pin").className!=="on")};
+function place(x,y){pending={x:x,y:y};setMode(false);$("noteform").hidden=false;if($("notetext").focus)$("notetext").focus()}
+var pin=$("pin");if(pin){pin.onclick=function(ev){var r=pin.getBoundingClientRect?pin.getBoundingClientRect():{left:0,top:0};place(ev.clientX-r.left,ev.clientY-r.top)};
+pin.onkeydown=function(ev){if(ev.key==="Enter"||ev.key===" "){if(ev.preventDefault)ev.preventDefault();var r=pin.getBoundingClientRect?pin.getBoundingClientRect():{width:0,height:0};place((r.width||0)/2,(r.height||0)/2)}}}
+var fm=$("noteform");if(fm)fm.onsubmit=function(ev){if(ev&&ev.preventDefault)ev.preventDefault();var t=$("notetext");if(pending&&t.value.trim()){add(t.value.trim(),pending.x,pending.y)}t.value="";pending=null;fm.hidden=true;var st=$("notesaved");if(st)st.textContent="Saved";setMode(false,true);return false};
+if(document.addEventListener)document.addEventListener("keydown",function(ev){if(ev.key==="Escape"){var was=$("pin")&&$("pin").className==="on",f=$("noteform");if(was||(f&&!f.hidden)){if(f)f.hidden=true;pending=null;setMode(false,true)}}});
+var ex=$("export");if(ex)ex.onclick=download;
+var bk=$("back");if(bk&&bk.addEventListener)bk.addEventListener("click",function(){step("back")});
+var ap=$("app");if(ap){if(ap.addEventListener)ap.addEventListener("load",watch);watch()}
+window.shipvoNotes={add:add,step:step,list:function(){return notes.slice()},exportJson:exportJson,download:download};
+render();
+})();
+</script>
+<section class="recp" aria-label="Recorder"><p id="honesty">This is the app's web build on Shipvo's simulated device, measured against Android and iOS in <a href="https://github.com/shipvo/shipvo/blob/main/docs/parity-results.md">docs/parity-results.md</a>. Native-only UI can differ.</p>
+<button id="rec" aria-pressed="false">Record</button> <button id="dl" disabled>Download test</button> <span id="stepcount" aria-live="polite">0 steps</span></section>
+<script>${RECORDER_JS}
+var APP=${JSON.stringify(appId).replace(/</g, "\\u003c")},TITLE=${JSON.stringify(title).replace(/</g, "\\u003c")},recording=false;
+function step(s){if(recording){shipvoSteps.push(s);document.getElementById("stepcount").textContent=shipvoSteps.length+(shipvoSteps.length===1?" step":" steps");document.getElementById("dl").disabled=false}}
+document.getElementById("app").addEventListener("load",function(){shipvoAttach(this,step)});
+(function(a){if(a.contentDocument&&a.contentDocument.readyState==="complete")shipvoAttach(a,step)})(document.getElementById("app"));
+document.getElementById("rec").onclick=function(){recording=!recording;if(recording){shipvoSteps.length=0;document.getElementById("stepcount").textContent="0 steps";document.getElementById("dl").disabled=true}this.setAttribute("aria-pressed",recording)};
+document.getElementById("dl").onclick=function(){var a=document.createElement("a");a.href=URL.createObjectURL(new Blob([shipvoExport(APP,shipvoSteps,TITLE)],{type:"text/typescript"}));a.download="recorded-session.test.ts";a.click()};
+var SIZES={phone:[360,760],large:[412,892],tablet:[820,1180]},IPHONE={phone:[390,844],large:[430,932],tablet:[820,1180]};
+var skin="android",size="phone",d=document.getElementById("device"),f=document.getElementById("app"),bk=document.getElementById("back");
+function pressed(sel,val,key){document.querySelectorAll(sel).forEach(function(o){o.setAttribute("aria-pressed",o.dataset[key]===val)})}
+function apply(){var s=(skin==="iphone"?IPHONE:SIZES)[size];d.dataset.skin=skin;d.style.width=s[0]+"px";d.style.height=s[1]+"px";bk.innerHTML=skin==="iphone"?"Back":"&#9664; Back";bk.setAttribute("aria-label","Back");document.getElementById("icons").innerHTML=skin==="iphone"?"5G &#9646; 100%":"&#9679;&#9679; 5G 100%";pressed("[data-skin]",skin,"skin");pressed("[data-size]",size,"size")}
+document.querySelectorAll("[data-skin]").forEach(function(b){b.onclick=function(){step({action:"note",text:"panel: skin set to "+b.dataset.skin});skin=b.dataset.skin;apply()}});
+document.querySelectorAll("[data-size]").forEach(function(b){b.onclick=function(){step({action:"note",text:"panel: size set to "+b.dataset.size});size=b.dataset.size;apply()}});
+// Back does what the simulator's back action does: press the screen's Back button, else go back in history.
+function goBack(){var w=f.contentWindow;try{var doc=w&&w.document;if(!doc)return;var els=doc.querySelectorAll("button,[role=button],a");for(var i=0;i<els.length;i++){var e=els[i],t=(e.getAttribute("aria-label")||e.textContent||"").trim();if(t==="Back"){e.click();return}}w.history.back()}catch(x){}}
+bk.onclick=goBack;
+var t=document.getElementById("theme");t.onclick=function(){step({action:"note",text:"panel: theme toggled"});var k=!document.body.classList.contains("dark");document.body.classList.toggle("dark",k);t.setAttribute("aria-pressed",k);t.textContent=k?"Light":"Dark";f.style.colorScheme=k?"dark":"light"};
+var P=document.getElementById("panel-status");
+function pnSay(m){P.textContent=m+" (simulated)"}
+function pnDev(){var d=f.contentWindow&&f.contentWindow.__pnDevice;if(!d){pnSay("The app is still loading");return null}return d}
+function pnNum(c){var v=pnVal(c).trim();return v===""?NaN:Number(v)}
+function pnVal(c){return document.querySelector('[data-control="'+c+'"]').value}
+function pnSet(patch,msg){var d=pnDev();if(d){d.set(patch);step({action:"set_device",device:patch});pnSay(msg)}}
+var pnDelay=0;
+function pnSlow(){var w=f.contentWindow;if(!w||w.__pnSlow||!w.fetch)return;w.__pnSlow=1;var o=w.fetch.bind(w);w.fetch=function(){var a=arguments;return new Promise(function(r){setTimeout(r,pnDelay)}).then(function(){return o.apply(null,a)})}}
+var A={
+"location-set":function(){var v=pnVal("location-list").split(",");pnSet({location:{latitude:+v[0],longitude:+v[1],accuracy:20}},"Location set")},
+"coords-set":function(){var a=pnNum("lat"),o=pnNum("lng");if(!(a>=-90&&a<=90&&o>=-180&&o<=180)){pnSay("Enter latitude -90 to 90 and longitude -180 to 180");return}pnSet({location:{latitude:a,longitude:o,accuracy:20}},"Location set")},
+"camera-set":function(){var v=pnVal("camera-list").split("|");pnSet({camera:{barcode:v[0]==="none"?null:{type:v[0],data:v.slice(1).join("|")}}},"Camera shows "+(v[0]==="none"?"nothing":v[0]))},
+"bio-success":function(){pnSet({biometrics:{nextResult:"success"}},"Fingerprint and Face ID match from now on")},
+"bio-fail":function(){pnSet({biometrics:{nextResult:"fail"}},"Fingerprint and Face ID do not match from now on")},
+"pay-approve":function(){pnSet({payment:{nextResult:"approve"}},"Payments are approved from now on")},
+"pay-decline":function(){pnSet({payment:{nextResult:"decline"}},"Payments are declined from now on")},
+"net-online":function(){pnDelay=0;pnSet({online:true},"Network online")},
+"net-slow":function(){if(!pnDev())return;pnDelay=1500;pnSlow();pnSet({online:true},"Network slow (requests wait 1.5 s)")},
+"net-offline":function(){pnDelay=0;pnSet({online:false},"Network offline")},
+"push-send":function(){var d=pnDev();if(!d)return;var t=pnVal("push-title")||"Notification",b=pnVal("push-body");var ok=d.push({title:t,body:b})!==null;if(ok)step({action:"note",text:"panel: push sent"});pnSay(ok?"Push sent":"Not delivered: the app has not been granted notification permission")}
+};
+var pnGroups=[["bio-success","bio-fail"],["pay-approve","pay-decline"],["net-online","net-slow","net-offline"]];
+document.querySelectorAll("[data-control]").forEach(function(e){var c=e.dataset.control;if(A[c])e.onclick=function(){A[c]();pnGroups.forEach(function(g){if(g.indexOf(c)<0)return;g.forEach(function(k){var b=document.querySelector('[data-control="'+k+'"]');if(b.setAttribute)b.setAttribute("aria-pressed",k===c)})})}});
+apply();
+</script></body></html>
+`;
+}
+/** Puts the frame page at index.html and the app's own entry at app.html (its asset paths are absolute, so it stays at the site root). */
+export function wrapBuild(buildDir, name, appId = name) {
+    const files = collectFiles(buildDir).filter((f) => f.path !== "index.html");
+    const entry = join(buildDir, "index.html");
+    if (!existsSync(entry))
+        throw new Error("The web build has no index.html. Run `npx expo export --platform web` and check it works.");
+    files.push({ path: "app.html", bytes: new Uint8Array(readFileSync(entry)), contentType: typeOf("x.html") });
+    files.push({ path: "index.html", bytes: new TextEncoder().encode(framePage(name, appId)), contentType: typeOf("x.html") });
+    return files;
+}
+const realSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/** Publishes to here.now anonymously: create, upload, finalize. Refreshes expired upload URLs and waits out 429s. */
+export async function publishToHereNow(files, o = {}) {
+    const f = o.fetch ?? fetch, sleep = o.sleep ?? realSleep, max = o.maxRetries ?? 3;
+    refuseSecrets(files);
+    const blocked = files.find((x) => blockedPath(x.path));
+    if (blocked)
+        throw new Error(`Refusing to upload ${blocked.path}.`);
+    const headers = { "content-type": "application/json", "X-HereNow-Client": CLIENT };
+    /** One JSON call; on 429 waits retry_after seconds (or Retry-After) and tries again, up to `max` times. */
+    const call = async (url, body, what) => {
+        for (let attempt = 0;; attempt++) {
+            const r = await f(url, { method: "POST", headers, body: JSON.stringify(body) });
+            if (r.status === 429 && attempt < max) {
+                let j = {};
+                try {
+                    j = await r.json();
+                }
+                catch { }
+                const secs = Number(j.retry_after ?? r.headers.get("retry-after") ?? 5);
+                await sleep((Number.isFinite(secs) && secs > 0 ? Math.min(secs, 120) : 5) * 1000);
+                continue;
+            }
+            let j = {};
+            try {
+                j = await r.json();
+            }
+            catch { }
+            if (!r.ok)
+                throw new Error(r.status === 429 ? `here.now is rate limiting this publish (${what}). Wait ${j.retry_after ?? "a few"} seconds and run again.` : `here.now ${what} failed (${r.status}): ${j.message ?? j.error ?? "no details"}`);
+            return j;
+        }
+    };
+    const created = await call(`${API}/publish`, { files: files.map((x) => ({ path: x.path, size: x.bytes.length, contentType: x.contentType })) }, "create");
+    const slug = created.slug;
+    let targets = created.upload.uploads;
+    const byPath = new Map(files.map((x) => [x.path, x]));
+    const putAll = async (list) => {
+        const expired = [];
+        for (const t of list) {
+            const file = byPath.get(t.path);
+            if (!file)
+                continue;
+            const r = await f(t.url, { method: "PUT", headers: { "content-type": file.contentType, ...(t.headers ?? {}) }, body: file.bytes });
+            if (r.status === 403 || r.status === 401 || r.status === 400)
+                expired.push(t);
+            else if (!r.ok)
+                throw new Error(`Upload of ${t.path} failed (${r.status}).`);
+        }
+        return expired;
+    };
+    let pending = await putAll(targets);
+    for (let i = 0; pending.length && i < 2; i++) {
+        const fresh = await call(`${API}/publish/${slug}/uploads/refresh`, { claimToken: created.claimToken }, "refresh upload URLs");
+        const want = new Set(pending.map((p) => p.path));
+        targets = fresh.upload.uploads.filter((t) => want.has(t.path));
+        pending = await putAll(targets);
+    }
+    if (pending.length)
+        throw new Error(`Could not upload ${pending.length} file(s), e.g. ${pending[0].path}. Check that *.r2.cloudflarestorage.com is reachable, then run again.`);
+    const done = await call(`${API}/publish/${slug}/finalize`, { versionId: created.upload.versionId }, "finalize");
+    const warnings = (done.warnings ?? []).map((w) => (typeof w === "string" ? w : JSON.stringify(w)));
+    return { url: done.siteUrl ?? created.siteUrl, claimUrl: created.claimUrl ?? null, expiresAt: created.expiresAt ?? null, files: files.length, warnings };
+}
+function build(root, out) {
+    rmSync(out, { recursive: true, force: true });
+    mkdirSync(join(root, ".shipvo"), { recursive: true });
+    return new Promise((resolve, reject) => {
+        const p = spawn("npx", ["expo", "export", "--platform", "web", "--clear", "--output-dir", out], { cwd: root, env: { ...process.env, PN_SIM: "1" }, stdio: ["ignore", "ignore", "inherit"] });
+        p.on("error", reject);
+        p.on("exit", (c) => (c === 0 ? resolve() : reject(new Error(`The web build failed (exit ${c}). Run \`npx expo export --platform web\` to see why.`))));
+    });
+}
+export const NOTICE = "This link is public: anyone who has it can open the preview. It expires in 24 hours unless you open the claim link and sign in to here.now, which keeps it.";
+/** Builds, wraps and publishes. Used by the CLI and by the MCP `publish_preview` tool (through `shipvo preview --json`). */
+export async function runPreview(root, o = {}) {
+    const cfg = loadConfig(root);
+    const provider = cfg.preview ?? "here.now";
+    if (provider === "control-plane")
+        throw new Error('shipvo.json sets "preview": "control-plane". That provider is not built yet. Remove the setting or use "here.now".');
+    if (provider !== "here.now")
+        throw new Error(`shipvo.json: "preview" must be "here.now" or "control-plane", not "${provider}".`);
+    const dir = o.buildDir ?? join(root, ".shipvo", "preview-build");
+    if (!o.skipBuild)
+        await build(root, dir);
+    return publishToHereNow(wrapBuild(dir, cfg.name, cfg.appId), o);
+}
+export async function preview(argv) {
+    const a = parse(argv);
+    const json = a.json === "true";
+    if (!json)
+        console.error("Building the web app with the simulated device…");
+    const r = await runPreview(process.cwd(), { skipBuild: a["skip-build"] === "true" });
+    if (json) {
+        console.log(JSON.stringify({ url: r.url, claimUrl: r.claimUrl, expiresAt: r.expiresAt, files: r.files, warnings: r.warnings, public: true, notice: NOTICE }));
+        return;
+    }
+    console.log(`Preview: ${r.url}`);
+    if (r.claimUrl)
+        console.log(`Keep it (claim link): ${r.claimUrl}`);
+    if (r.expiresAt)
+        console.log(`Expires: ${r.expiresAt}`);
+    console.log(NOTICE);
+    for (const w of r.warnings)
+        console.log(`Warning from here.now: ${w}`);
+}

package/dist/promote.d.ts

@@ -0,0 +1,9 @@
+import { kv as kvFor } from "./config.js";
+type Store = Pick<ReturnType<typeof kvFor>, "get" | "put">;
+export declare const PROMOTE_FLAGS: string[];
+export declare const PROMOTE_HELP = "Usage: shipvo promote [flags]\n\nWiden a staged release to more bands. The release number, bundle and patches stay the same; the pointer is signed again.\n\nFlags (write a value after a space, not =):\n  --to b1,b2                   Bands to write (default: every band with no pointer for this release)\n                               Bands that already hold a newer release are always skipped\n  --platform android|ios|all   Platform to promote (default android)\n  --dry-run                    Print the plan, write nothing\n  --report <file>              Test report from shipvo test --report (default shipvo-test-report.json if it exists)\n                               A report for this release with failing flows blocks promote\n  --force                      Promote even if the release is halted, has reverts or has a failing test report\n  --help                       Show this help\n";
+export declare function promote(argv: string[], deps?: {
+    kv?: Store;
+    fetchFn?: typeof fetch;
+}): Promise<void>;
+export {};

package/dist/promote.js

@@ -0,0 +1,153 @@
+// `shipvo promote`: widen a staged release to more bands. Reads the pointer on the narrowest band that has one,
+// and writes the same release (same bundle, hashes and patches) to the other bands with a fresh issued_at and signature.
+import { existsSync, readFileSync } from "node:fs";
+import { signBytes } from "./index.js";
+import { args as parse, kv as kvFor, loadConfig, seed } from "./config.js";
+const BANDS = ["b0", "b1", "b2"];
+const REVERT_EVENTS = ["rolled_back", "crash_loop_revert"];
+const pointerKey = (app, major, band, pf) => (pf === "ios" ? `p/${app}/${major}/ios/${band}` : `p/${app}/${major}/${band}`);
+export const PROMOTE_FLAGS = ["to", "platform", "dry-run", "force", "report"];
+export const PROMOTE_HELP = `Usage: shipvo promote [flags]
+
+Widen a staged release to more bands. The release number, bundle and patches stay the same; the pointer is signed again.
+
+Flags (write a value after a space, not =):
+  --to b1,b2                   Bands to write (default: every band with no pointer for this release)
+                               Bands that already hold a newer release are always skipped
+  --platform android|ios|all   Platform to promote (default android)
+  --dry-run                    Print the plan, write nothing
+  --report <file>              Test report from shipvo test --report (default shipvo-test-report.json if it exists)
+                               A report for this release with failing flows blocks promote
+  --force                      Promote even if the release is halted, has reverts or has a failing test report
+  --help                       Show this help
+`;
+function checkFlags(argv, known) {
+    const bad = argv.filter((x) => x.startsWith("--") && !known.includes(x.slice(2)));
+    if (bad.length) {
+        const eq = bad.find((x) => x.includes("="));
+        const hint = eq ? ` Write "${eq.replace("=", " ")}" (a space, not =).` : "";
+        throw new Error(`Unknown flag ${bad.join(", ")}.${hint} Known flags: ${known.map((k) => "--" + k).join(" ")}`);
+    }
+}
+export async function promote(argv, deps = {}) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(PROMOTE_HELP);
+        return;
+    }
+    checkFlags(argv, PROMOTE_FLAGS);
+    const a = parse(argv), cfg = loadConfig();
+    const dry = a["dry-run"] !== undefined, force = a.force !== undefined;
+    const p = (a.platform || "android").toLowerCase();
+    if (p !== "android" && p !== "ios" && p !== "all")
+        throw new Error(`--platform must be android, ios or all (got "${a.platform}")`);
+    const platforms = p === "all" ? ["android", "ios"] : [p];
+    if (a.to === "true")
+        throw new Error("--to needs bands: pass --to b1,b2");
+    const explicit = a.to ? a.to.split(",").map((s) => s.trim()).filter(Boolean) : null;
+    if (explicit) {
+        const bad = explicit.filter((b) => !BANDS.includes(b));
+        if (bad.length)
+            throw new Error(`Unknown band ${bad.join(", ")}. Bands are ${BANDS.join(", ")}.`);
+    }
+    if (a.report === "true")
+        throw new Error("--report needs a file name: pass --report <file>");
+    const reportFile = a.report ?? (existsSync("shipvo-test-report.json") ? "shipvo-test-report.json" : null);
+    const APP = cfg.appId, MAJOR = cfg.shellMajor;
+    const store = deps.kv ?? kvFor(cfg);
+    // Read every source pointer before touching the network or writing anything.
+    const plans = [];
+    for (const pf of platforms) {
+        let from = "", body = null;
+        const have = new Map();
+        for (const band of BANDS) {
+            const raw = await store.get(pointerKey(APP, MAJOR, band, pf));
+            if (!raw)
+                continue;
+            try {
+                const b = JSON.parse(JSON.parse(raw).body);
+                have.set(band, b.release);
+                if (!body) {
+                    from = band;
+                    body = b;
+                }
+            }
+            catch { /* unreadable pointer: skip */ }
+        }
+        if (!body)
+            throw new Error(`No ${pf} pointer found on any band. Run shipvo publish --bands b0 first.`);
+        const release = body.release;
+        if (explicit && explicit.length && explicit.every((b) => b === from))
+            throw new Error(`${from} is the source band (release ${release}). Pass --to with a different band.`);
+        // Never write an older release over a newer one: promote widens, it does not downgrade. --force does not change this.
+        const cand = (explicit ?? BANDS).filter((b) => b !== from && (explicit || have.get(b) !== release));
+        const newer = cand.filter((b) => (have.get(b) ?? 0) > release).map((b) => [b, have.get(b)]);
+        const targets = cand.filter((b) => !((have.get(b) ?? 0) > release));
+        plans.push({ pf, release, from, body, targets, newer });
+    }
+    if (reportFile) {
+        let rep;
+        try {
+            rep = JSON.parse(readFileSync(reportFile, "utf8"));
+        }
+        catch (e) {
+            throw new Error(`Could not read the test report ${reportFile} (${e instanceof Error ? e.message : String(e)}).`);
+        }
+        const rel = rep.release == null ? null : String(rep.release);
+        const failing = (Array.isArray(rep.flows) ? rep.flows : []).filter((f) => f.status === "failed").map((f) => f.name ?? "(unnamed flow)");
+        const mine = plans.filter((x) => String(x.release) === rel);
+        if (mine.length && failing.length) {
+            const msg = `Test report ${reportFile} has ${failing.length} failing flow${failing.length === 1 ? "" : "s"} for release ${mine[0].release}: ${failing.join(", ")}.`;
+            if (!force)
+                throw new Error(`${msg} Fix them and run shipvo test --report again, or pass --force to promote anyway.`);
+            console.log(`${msg} Overridden by --force.`);
+        }
+        else if (!mine.length) {
+            console.log(`Warning: test report ${reportFile} is for ${rel === null ? "no release" : `release ${rel}`}, not release ${plans.map((x) => x.release).join(", ")}. It is stale and was not used.`);
+        }
+    }
+    if (!force) {
+        const base = cfg.controlPlane.replace(/\/$/, "");
+        let data;
+        try {
+            const r = await (deps.fetchFn ?? fetch)(`${base}/t/${encodeURIComponent(APP)}/summary`);
+            if (!r.ok)
+                throw new Error(`HTTP ${r.status}`);
+            data = (await r.json());
+        }
+        catch (e) {
+            throw new Error(`Could not read the release status from ${base} (${e instanceof Error ? e.message : String(e)}). Try again, or pass --force to promote without the check.`);
+        }
+        for (const { release } of plans) {
+            if (data.halted && typeof data.halted === "object" && data.halted.release === release)
+                throw new Error(`Release ${release} is halted. Publish a new release or run shipvo rollback, or pass --force to promote it anyway.`);
+            const ev = data.releases?.find((r) => r.release === release)?.events ?? {};
+            const n = REVERT_EVENTS.reduce((s, k) => s + (ev[k] ?? 0), 0);
+            if (n > 0)
+                throw new Error(`Release ${release} has ${n} reported revert${n === 1 ? "" : "s"}. Check shipvo status, publish a fix, or pass --force to promote it anyway.`);
+        }
+    }
+    for (const { pf, release, from, body, targets, newer } of plans) {
+        for (const [b, r] of newer)
+            console.log(`Skipped ${b} (${pf}): it already has release ${r}, which is newer than ${release}.`);
+        if (!targets.length && newer.length) {
+            console.log(`Nothing to promote: every other band already has a newer release than ${release} (${pf}).`);
+            continue;
+        }
+        if (!targets.length) {
+            console.log(`Nothing to promote: release ${release} (${pf}) already has a pointer on every band.`);
+            continue;
+        }
+        const issued_at = new Date().toISOString();
+        for (const band of targets) {
+            if (dry) {
+                console.log(`Would write ${band} (${pf}): release ${release}, copied from ${from}`);
+                continue;
+            }
+            const text = JSON.stringify({ ...body, band, issued_at });
+            await store.put(pointerKey(APP, MAJOR, band, pf), JSON.stringify({ body: text, signature: signBytes(new TextEncoder().encode(text), seed()) }), "application/json");
+            console.log(`Wrote ${band} (${pf}): release ${release}, copied from ${from}`);
+        }
+    }
+    if (dry)
+        console.log("Dry run: nothing was written.");
+}