@tiledev/tile-push-cli 0.1.0

package/dist/index.cjs

@@ -0,0 +1,134 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_apiClient = require("./apiClient-DiRjggqw.cjs");
+require("./bin/tile-push.cjs");
+let node_fs = require("node:fs");
+let node_fs_promises = require("node:fs/promises");
+let node_path = require("node:path");
+let node_stream_promises = require("node:stream/promises");
+let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
+//#region src/plugins/storage.ts
+const detectContentType = (filePath) => {
+	const lower = filePath.toLowerCase();
+	if (lower.endsWith(".zip")) return "application/zip";
+	if (lower.endsWith(".tar.gz") || lower.endsWith(".tgz")) return "application/gzip";
+	if (lower.endsWith(".tar.br")) return "application/x-brotli";
+	if (lower.endsWith(".json")) return "application/json";
+	if (lower.endsWith(".png")) return "image/png";
+	if (lower.endsWith(".jpg") || lower.endsWith(".jpeg")) return "image/jpeg";
+	if (lower.endsWith(".webp")) return "image/webp";
+	if (lower.endsWith(".svg")) return "image/svg+xml";
+	return "application/octet-stream";
+};
+/**
+* For PUT to GCS via signed URL, GCS expects the request body to be the raw
+* file bytes with Content-Length set. We use a buffered Buffer (rather than
+* a stream) because:
+*   1. node fetch streaming requires `duplex: "half"` which is gated behind
+*      experimental flags in some Node versions
+*   2. Bundle files are typically <50MB — easily fits in memory
+*   3. Content-Length is required by GCS signed URLs and easier from a Buffer
+*/
+const putToSignedUrl = async (uploadUrl, filePath, headers) => {
+	const { readFile } = await import("node:fs/promises");
+	const data = await readFile(filePath);
+	const response = await fetch(uploadUrl, {
+		method: "PUT",
+		headers: {
+			...headers,
+			"Content-Length": String(data.byteLength)
+		},
+		body: data
+	});
+	if (!response.ok) {
+		const text = await response.text().catch(() => "");
+		throw new Error(`Upload to GCS failed (HTTP ${response.status}): ${text.slice(0, 300)}`);
+	}
+};
+const tilePushStorage = (0, _hot_updater_plugin_core.createNodeStoragePlugin)({
+	name: "tilePushStorage",
+	supportedProtocol: "gs",
+	factory: (_config) => {
+		let cachedClient = null;
+		const getClient = () => cachedClient ??= require_apiClient.TilePushClient.create();
+		return {
+			async upload(key, filePath) {
+				const client = await getClient();
+				const filename = (0, node_path.basename)(filePath);
+				const composedKey = key ? `${key}/${filename}` : filename;
+				const { uploadUrl, storageUri, requiredHeaders } = await client.post("/upload-url", { json: {
+					key: composedKey,
+					contentType: detectContentType(filePath)
+				} });
+				await putToSignedUrl(uploadUrl, filePath, requiredHeaders);
+				return { storageUri };
+			},
+			async exists(storageUri) {
+				const client = await getClient();
+				try {
+					return (await client.get(`/storage/exists?uri=${encodeURIComponent(storageUri)}`)).exists;
+				} catch (err) {
+					return false;
+				}
+			},
+			async delete(storageUri) {
+				await (await getClient()).delete(`/storage?uri=${encodeURIComponent(storageUri)}`);
+			},
+			async downloadFile(storageUri, filePath) {
+				const { downloadUrl } = await (await getClient()).get(`/storage/download-url?uri=${encodeURIComponent(storageUri)}`);
+				const response = await fetch(downloadUrl);
+				if (!response.ok || !response.body) throw new Error(`Failed to download ${storageUri} (HTTP ${response.status})`);
+				await (0, node_fs_promises.mkdir)((0, node_path.dirname)(filePath), { recursive: true });
+				const writeStream = (0, node_fs.createWriteStream)(filePath);
+				const { Readable } = await import("node:stream");
+				await (0, node_stream_promises.pipeline)(Readable.fromWeb(response.body), writeStream);
+			}
+		};
+	}
+});
+//#endregion
+//#region src/plugins/database.ts
+const tilePushDatabase = (0, _hot_updater_plugin_core.createDatabasePlugin)({
+	name: "tilePushDatabase",
+	factory: (_config) => {
+		let cachedClient = null;
+		const getClient = () => cachedClient ??= require_apiClient.TilePushClient.create();
+		return {
+			supportsCursorPagination: false,
+			async getBundleById(bundleId) {
+				const client = await getClient();
+				try {
+					return await client.get(`/bundles/${encodeURIComponent(bundleId)}`);
+				} catch (err) {
+					if (typeof err === "object" && err !== null && "status" in err && err.status === 404) return null;
+					throw err;
+				}
+			},
+			async getBundles(options) {
+				const client = await getClient();
+				const params = new URLSearchParams();
+				params.set("limit", String(options.limit));
+				if (options.where?.channel) params.set("channel", options.where.channel);
+				if (options.where?.platform) params.set("platform", options.where.platform);
+				if (options.cursor?.after) params.set("after", options.cursor.after);
+				return client.get(`/bundles?${params}`);
+			},
+			async getChannels() {
+				const { channels } = await (await getClient()).get("/channels");
+				return channels;
+			},
+			async commitBundle({ changedSets }) {
+				if (changedSets.length === 0) return;
+				await (await getClient()).post("/bundles", { json: { changedSets } });
+			}
+		};
+	}
+});
+//#endregion
+exports.TilePushApiError = require_apiClient.TilePushApiError;
+exports.TilePushClient = require_apiClient.TilePushClient;
+exports.credentialsDiagnostic = require_apiClient.credentialsDiagnostic;
+exports.loadCredentials = require_apiClient.loadCredentials;
+exports.requireCredentials = require_apiClient.requireCredentials;
+exports.saveCredentials = require_apiClient.saveCredentials;
+exports.tilePushDatabase = tilePushDatabase;
+exports.tilePushStorage = tilePushStorage;

package/dist/index.d.cts

@@ -0,0 +1,153 @@
+import * as _$_hot_updater_plugin_core0 from "@hot-updater/plugin-core";
+
+//#region src/plugins/storage.d.ts
+/**
+ * Tile Push storage plugin.
+ *
+ * Implements the hot-updater NodeStoragePlugin interface as a thin HTTP
+ * client against our Cloud Functions:
+ *
+ *   upload(key, filePath)
+ *     1. POST /upload-url → get a signed GCS PUT URL
+ *     2. Stream the file to that URL directly (bytes never touch our Cloud
+ *        Function, only metadata does)
+ *     3. Return storageUri so the deploy can write it into the bundle row
+ *
+ *   exists(storageUri)        — HEAD via signed read URL
+ *   delete(storageUri)        — DELETE proxied through server
+ *   downloadFile(uri, path)   — stream a signed read URL to disk
+ *
+ * supportedProtocol is "gs" because our server returns gs:// URIs (the same
+ * scheme the firebase plugin's runtime side already understands when
+ * generating CDN URLs during update-check).
+ */
+interface TilePushStorageConfig {
+  /**
+   * Tenant id. Falls back to the credentials store / env vars if omitted.
+   * Strongly recommended to pass explicitly so deploys don't accidentally
+   * write to the wrong tenant when multiple are configured locally.
+   */
+  appId?: string;
+  /** API base URL override. Defaults to the credentials store / env value. */
+  apiUrl?: string;
+}
+declare const tilePushStorage: (config: TilePushStorageConfig, hooks?: _$_hot_updater_plugin_core0.StoragePluginHooks) => () => _$_hot_updater_plugin_core0.NodeStoragePlugin;
+type TilePushStoragePlugin = ReturnType<ReturnType<typeof tilePushStorage>>;
+//#endregion
+//#region src/plugins/database.d.ts
+/**
+ * Tile Push database plugin.
+ *
+ * Built on top of `createDatabasePlugin`, which gives us:
+ *   - automatic buffering of appendBundle / updateBundle / deleteBundle
+ *     into a per-instance changedMap
+ *   - one commitBundle({changedSets}) call to our factory, which we ship
+ *     to the server in a single POST
+ *
+ * Reads (getBundleById, getBundles, getChannels) pass through directly to
+ * the matching server route. Writes batch through commitBundle.
+ */
+interface TilePushDatabaseConfig {
+  /**
+   * Tenant id. Falls back to the credentials store / env vars if omitted.
+   * Strongly recommended to pass explicitly so deploys don't accidentally
+   * write to the wrong tenant when multiple are configured locally.
+   */
+  appId?: string;
+  /** API base URL override. Defaults to the credentials store / env value. */
+  apiUrl?: string;
+}
+declare const tilePushDatabase: (config: TilePushDatabaseConfig, hooks?: _$_hot_updater_plugin_core0.DatabasePluginHooks) => () => _$_hot_updater_plugin_core0.DatabasePlugin<unknown>;
+type TilePushDatabasePlugin = ReturnType<ReturnType<typeof tilePushDatabase>>;
+//#endregion
+//#region src/auth/tokenStore.d.ts
+/**
+ * Persistent credential store at ~/.tile-push/credentials.json.
+ *
+ *   {
+ *     "appId": "tk_acme",
+ *     "token": "tpd_xxxxxxxxxxxx",
+ *     "apiUrl": "https://api.tile-push.app"  // optional override
+ *   }
+ *
+ * Permissions are tightened to 0600 (owner read/write only) on every write.
+ * This file is the equivalent of a passwd entry — losing control of it gives
+ * an attacker deploy access to the tenant.
+ *
+ * For env-var overrides (CI machines, scripted use), TILE_PUSH_APP_ID +
+ * TILE_PUSH_TOKEN take precedence over whatever's on disk. That way you
+ * don't need to write a creds file during CI runs.
+ */
+interface TilePushCredentials {
+  appId: string;
+  token: string;
+  apiUrl?: string;
+}
+/**
+ * Resolve credentials with env precedence:
+ *   1. TILE_PUSH_APP_ID + TILE_PUSH_TOKEN env vars (preferred for CI)
+ *   2. ~/.tile-push/credentials.json (interactive / dev machines)
+ *   3. null if neither set
+ *
+ * TILE_PUSH_API_URL overrides the API base URL in either case.
+ */
+declare const loadCredentials: () => Promise<TilePushCredentials | null>;
+declare const saveCredentials: (creds: TilePushCredentials) => Promise<void>;
+/**
+ * Throws a helpful message if no credentials are configured. Use this at the
+ * top of any command that needs server access.
+ */
+declare const requireCredentials: () => Promise<TilePushCredentials>;
+/** Test helper — confirms creds file exists and is 0600 (or just env vars). */
+declare const credentialsDiagnostic: () => Promise<{
+  source: "env" | "file" | "none";
+  pathOrEnv: string;
+  modeOk?: boolean;
+}>;
+//#endregion
+//#region src/auth/apiClient.d.ts
+/**
+ * Thin fetch wrapper that injects the Bearer token, prepends the tenant
+ * prefix to relative paths, parses JSON, and throws typed errors.
+ *
+ * Usage:
+ *   const client = await TilePushClient.create();
+ *   const me = await client.get<{ appId, tenantName, tokenLabel }>("/me");
+ *
+ * All `pathSuffix` arguments are appended to `/api/cli/t/{appId}/`, so
+ * the client never has to think about tenant routing.
+ */
+declare class TilePushApiError extends Error {
+  readonly status: number;
+  readonly body: unknown;
+  constructor(message: string, status: number, body: unknown);
+}
+interface RequestOptions {
+  /** Override Content-Type. Defaults to application/json for body-bearing methods. */
+  contentType?: string;
+  /** Custom headers (merged with defaults). */
+  headers?: Record<string, string>;
+  /** Raw body (Buffer or stream). If unset and `json` is set, json is used. */
+  body?: BodyInit;
+  /** JSON-encodable body. Auto-stringified. */
+  json?: unknown;
+  /** Don't parse the response as JSON; return raw Response. */
+  raw?: boolean;
+}
+declare class TilePushClient {
+  private readonly creds;
+  private constructor();
+  static create(): Promise<TilePushClient>;
+  /** Like create() but returns null instead of throwing if no creds set. */
+  static createOptional(): Promise<TilePushClient | null>;
+  get appId(): string;
+  get apiUrl(): string;
+  private buildUrl;
+  private request;
+  get<T>(pathSuffix: string, options?: Omit<RequestOptions, "json" | "body">): Promise<T>;
+  post<T>(pathSuffix: string, options?: RequestOptions): Promise<T>;
+  patch<T>(pathSuffix: string, options?: RequestOptions): Promise<T>;
+  delete<T>(pathSuffix: string, options?: RequestOptions): Promise<T>;
+}
+//#endregion
+export { TilePushApiError, TilePushClient, type TilePushCredentials, type TilePushDatabaseConfig, type TilePushDatabasePlugin, type TilePushStorageConfig, type TilePushStoragePlugin, credentialsDiagnostic, loadCredentials, requireCredentials, saveCredentials, tilePushDatabase, tilePushStorage };

package/dist/index.d.mts

@@ -0,0 +1,153 @@
+import * as _$_hot_updater_plugin_core0 from "@hot-updater/plugin-core";
+
+//#region src/plugins/storage.d.ts
+/**
+ * Tile Push storage plugin.
+ *
+ * Implements the hot-updater NodeStoragePlugin interface as a thin HTTP
+ * client against our Cloud Functions:
+ *
+ *   upload(key, filePath)
+ *     1. POST /upload-url → get a signed GCS PUT URL
+ *     2. Stream the file to that URL directly (bytes never touch our Cloud
+ *        Function, only metadata does)
+ *     3. Return storageUri so the deploy can write it into the bundle row
+ *
+ *   exists(storageUri)        — HEAD via signed read URL
+ *   delete(storageUri)        — DELETE proxied through server
+ *   downloadFile(uri, path)   — stream a signed read URL to disk
+ *
+ * supportedProtocol is "gs" because our server returns gs:// URIs (the same
+ * scheme the firebase plugin's runtime side already understands when
+ * generating CDN URLs during update-check).
+ */
+interface TilePushStorageConfig {
+  /**
+   * Tenant id. Falls back to the credentials store / env vars if omitted.
+   * Strongly recommended to pass explicitly so deploys don't accidentally
+   * write to the wrong tenant when multiple are configured locally.
+   */
+  appId?: string;
+  /** API base URL override. Defaults to the credentials store / env value. */
+  apiUrl?: string;
+}
+declare const tilePushStorage: (config: TilePushStorageConfig, hooks?: _$_hot_updater_plugin_core0.StoragePluginHooks) => () => _$_hot_updater_plugin_core0.NodeStoragePlugin;
+type TilePushStoragePlugin = ReturnType<ReturnType<typeof tilePushStorage>>;
+//#endregion
+//#region src/plugins/database.d.ts
+/**
+ * Tile Push database plugin.
+ *
+ * Built on top of `createDatabasePlugin`, which gives us:
+ *   - automatic buffering of appendBundle / updateBundle / deleteBundle
+ *     into a per-instance changedMap
+ *   - one commitBundle({changedSets}) call to our factory, which we ship
+ *     to the server in a single POST
+ *
+ * Reads (getBundleById, getBundles, getChannels) pass through directly to
+ * the matching server route. Writes batch through commitBundle.
+ */
+interface TilePushDatabaseConfig {
+  /**
+   * Tenant id. Falls back to the credentials store / env vars if omitted.
+   * Strongly recommended to pass explicitly so deploys don't accidentally
+   * write to the wrong tenant when multiple are configured locally.
+   */
+  appId?: string;
+  /** API base URL override. Defaults to the credentials store / env value. */
+  apiUrl?: string;
+}
+declare const tilePushDatabase: (config: TilePushDatabaseConfig, hooks?: _$_hot_updater_plugin_core0.DatabasePluginHooks) => () => _$_hot_updater_plugin_core0.DatabasePlugin<unknown>;
+type TilePushDatabasePlugin = ReturnType<ReturnType<typeof tilePushDatabase>>;
+//#endregion
+//#region src/auth/tokenStore.d.ts
+/**
+ * Persistent credential store at ~/.tile-push/credentials.json.
+ *
+ *   {
+ *     "appId": "tk_acme",
+ *     "token": "tpd_xxxxxxxxxxxx",
+ *     "apiUrl": "https://api.tile-push.app"  // optional override
+ *   }
+ *
+ * Permissions are tightened to 0600 (owner read/write only) on every write.
+ * This file is the equivalent of a passwd entry — losing control of it gives
+ * an attacker deploy access to the tenant.
+ *
+ * For env-var overrides (CI machines, scripted use), TILE_PUSH_APP_ID +
+ * TILE_PUSH_TOKEN take precedence over whatever's on disk. That way you
+ * don't need to write a creds file during CI runs.
+ */
+interface TilePushCredentials {
+  appId: string;
+  token: string;
+  apiUrl?: string;
+}
+/**
+ * Resolve credentials with env precedence:
+ *   1. TILE_PUSH_APP_ID + TILE_PUSH_TOKEN env vars (preferred for CI)
+ *   2. ~/.tile-push/credentials.json (interactive / dev machines)
+ *   3. null if neither set
+ *
+ * TILE_PUSH_API_URL overrides the API base URL in either case.
+ */
+declare const loadCredentials: () => Promise<TilePushCredentials | null>;
+declare const saveCredentials: (creds: TilePushCredentials) => Promise<void>;
+/**
+ * Throws a helpful message if no credentials are configured. Use this at the
+ * top of any command that needs server access.
+ */
+declare const requireCredentials: () => Promise<TilePushCredentials>;
+/** Test helper — confirms creds file exists and is 0600 (or just env vars). */
+declare const credentialsDiagnostic: () => Promise<{
+  source: "env" | "file" | "none";
+  pathOrEnv: string;
+  modeOk?: boolean;
+}>;
+//#endregion
+//#region src/auth/apiClient.d.ts
+/**
+ * Thin fetch wrapper that injects the Bearer token, prepends the tenant
+ * prefix to relative paths, parses JSON, and throws typed errors.
+ *
+ * Usage:
+ *   const client = await TilePushClient.create();
+ *   const me = await client.get<{ appId, tenantName, tokenLabel }>("/me");
+ *
+ * All `pathSuffix` arguments are appended to `/api/cli/t/{appId}/`, so
+ * the client never has to think about tenant routing.
+ */
+declare class TilePushApiError extends Error {
+  readonly status: number;
+  readonly body: unknown;
+  constructor(message: string, status: number, body: unknown);
+}
+interface RequestOptions {
+  /** Override Content-Type. Defaults to application/json for body-bearing methods. */
+  contentType?: string;
+  /** Custom headers (merged with defaults). */
+  headers?: Record<string, string>;
+  /** Raw body (Buffer or stream). If unset and `json` is set, json is used. */
+  body?: BodyInit;
+  /** JSON-encodable body. Auto-stringified. */
+  json?: unknown;
+  /** Don't parse the response as JSON; return raw Response. */
+  raw?: boolean;
+}
+declare class TilePushClient {
+  private readonly creds;
+  private constructor();
+  static create(): Promise<TilePushClient>;
+  /** Like create() but returns null instead of throwing if no creds set. */
+  static createOptional(): Promise<TilePushClient | null>;
+  get appId(): string;
+  get apiUrl(): string;
+  private buildUrl;
+  private request;
+  get<T>(pathSuffix: string, options?: Omit<RequestOptions, "json" | "body">): Promise<T>;
+  post<T>(pathSuffix: string, options?: RequestOptions): Promise<T>;
+  patch<T>(pathSuffix: string, options?: RequestOptions): Promise<T>;
+  delete<T>(pathSuffix: string, options?: RequestOptions): Promise<T>;
+}
+//#endregion
+export { TilePushApiError, TilePushClient, type TilePushCredentials, type TilePushDatabaseConfig, type TilePushDatabasePlugin, type TilePushStorageConfig, type TilePushStoragePlugin, credentialsDiagnostic, loadCredentials, requireCredentials, saveCredentials, tilePushDatabase, tilePushStorage };

package/dist/index.mjs

@@ -0,0 +1,125 @@
+import { a as requireCredentials, i as loadCredentials, n as TilePushClient, o as saveCredentials, r as credentialsDiagnostic, t as TilePushApiError } from "./apiClient-Dxz7PXQr.mjs";
+import { createWriteStream } from "node:fs";
+import { mkdir } from "node:fs/promises";
+import { basename, dirname } from "node:path";
+import { pipeline } from "node:stream/promises";
+import { createDatabasePlugin, createNodeStoragePlugin } from "@hot-updater/plugin-core";
+//#region src/plugins/storage.ts
+const detectContentType = (filePath) => {
+	const lower = filePath.toLowerCase();
+	if (lower.endsWith(".zip")) return "application/zip";
+	if (lower.endsWith(".tar.gz") || lower.endsWith(".tgz")) return "application/gzip";
+	if (lower.endsWith(".tar.br")) return "application/x-brotli";
+	if (lower.endsWith(".json")) return "application/json";
+	if (lower.endsWith(".png")) return "image/png";
+	if (lower.endsWith(".jpg") || lower.endsWith(".jpeg")) return "image/jpeg";
+	if (lower.endsWith(".webp")) return "image/webp";
+	if (lower.endsWith(".svg")) return "image/svg+xml";
+	return "application/octet-stream";
+};
+/**
+* For PUT to GCS via signed URL, GCS expects the request body to be the raw
+* file bytes with Content-Length set. We use a buffered Buffer (rather than
+* a stream) because:
+*   1. node fetch streaming requires `duplex: "half"` which is gated behind
+*      experimental flags in some Node versions
+*   2. Bundle files are typically <50MB — easily fits in memory
+*   3. Content-Length is required by GCS signed URLs and easier from a Buffer
+*/
+const putToSignedUrl = async (uploadUrl, filePath, headers) => {
+	const { readFile } = await import("node:fs/promises");
+	const data = await readFile(filePath);
+	const response = await fetch(uploadUrl, {
+		method: "PUT",
+		headers: {
+			...headers,
+			"Content-Length": String(data.byteLength)
+		},
+		body: data
+	});
+	if (!response.ok) {
+		const text = await response.text().catch(() => "");
+		throw new Error(`Upload to GCS failed (HTTP ${response.status}): ${text.slice(0, 300)}`);
+	}
+};
+const tilePushStorage = createNodeStoragePlugin({
+	name: "tilePushStorage",
+	supportedProtocol: "gs",
+	factory: (_config) => {
+		let cachedClient = null;
+		const getClient = () => cachedClient ??= TilePushClient.create();
+		return {
+			async upload(key, filePath) {
+				const client = await getClient();
+				const filename = basename(filePath);
+				const composedKey = key ? `${key}/${filename}` : filename;
+				const { uploadUrl, storageUri, requiredHeaders } = await client.post("/upload-url", { json: {
+					key: composedKey,
+					contentType: detectContentType(filePath)
+				} });
+				await putToSignedUrl(uploadUrl, filePath, requiredHeaders);
+				return { storageUri };
+			},
+			async exists(storageUri) {
+				const client = await getClient();
+				try {
+					return (await client.get(`/storage/exists?uri=${encodeURIComponent(storageUri)}`)).exists;
+				} catch (err) {
+					return false;
+				}
+			},
+			async delete(storageUri) {
+				await (await getClient()).delete(`/storage?uri=${encodeURIComponent(storageUri)}`);
+			},
+			async downloadFile(storageUri, filePath) {
+				const { downloadUrl } = await (await getClient()).get(`/storage/download-url?uri=${encodeURIComponent(storageUri)}`);
+				const response = await fetch(downloadUrl);
+				if (!response.ok || !response.body) throw new Error(`Failed to download ${storageUri} (HTTP ${response.status})`);
+				await mkdir(dirname(filePath), { recursive: true });
+				const writeStream = createWriteStream(filePath);
+				const { Readable } = await import("node:stream");
+				await pipeline(Readable.fromWeb(response.body), writeStream);
+			}
+		};
+	}
+});
+//#endregion
+//#region src/plugins/database.ts
+const tilePushDatabase = createDatabasePlugin({
+	name: "tilePushDatabase",
+	factory: (_config) => {
+		let cachedClient = null;
+		const getClient = () => cachedClient ??= TilePushClient.create();
+		return {
+			supportsCursorPagination: false,
+			async getBundleById(bundleId) {
+				const client = await getClient();
+				try {
+					return await client.get(`/bundles/${encodeURIComponent(bundleId)}`);
+				} catch (err) {
+					if (typeof err === "object" && err !== null && "status" in err && err.status === 404) return null;
+					throw err;
+				}
+			},
+			async getBundles(options) {
+				const client = await getClient();
+				const params = new URLSearchParams();
+				params.set("limit", String(options.limit));
+				if (options.where?.channel) params.set("channel", options.where.channel);
+				if (options.where?.platform) params.set("platform", options.where.platform);
+				if (options.cursor?.after) params.set("after", options.cursor.after);
+				return client.get(`/bundles?${params}`);
+			},
+			async getChannels() {
+				const { channels } = await (await getClient()).get("/channels");
+				return channels;
+			},
+			async commitBundle({ changedSets }) {
+				if (changedSets.length === 0) return;
+				await (await getClient()).post("/bundles", { json: { changedSets } });
+			}
+		};
+	}
+});
+//#endregion
+export { TilePushApiError, TilePushClient, credentialsDiagnostic, loadCredentials, requireCredentials, saveCredentials, tilePushDatabase, tilePushStorage };

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@tiledev/tile-push-cli",
+  "version": "0.1.0",
+  "description": "Tile Push CLI — OTA deploys for React Native, built on top of hot-updater.",
+  "type": "module",
+  "bin": {
+    "tile-push": "dist/bin/tile-push.mjs"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.cts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs"
+    },
+    "./bin/tile-push": {
+      "import": "./dist/bin/tile-push.mjs",
+      "require": "./dist/bin/tile-push.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "react-native",
+    "ota",
+    "code-push",
+    "hot-updater",
+    "tile-push",
+    "cli"
+  ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "hot-updater": "npm:@tiledev/hot-updater@0.32.0",
+    "@hot-updater/plugin-core": "0.32.0",
+    "@hot-updater/cli-tools": "0.32.0"
+  },
+  "inlinedDependencies": {
+    "bundle-name": "4.1.0",
+    "commander": "14.0.3",
+    "default-browser": "5.5.0",
+    "default-browser-id": "5.0.1",
+    "define-lazy-prop": "3.0.0",
+    "is-docker": "3.0.0",
+    "is-inside-container": "1.0.0",
+    "is-wsl": "3.1.1",
+    "open": "10.1.0",
+    "picocolors": "1.1.1",
+    "run-applescript": "7.0.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/gronxb/hot-updater.git"
+  }
+}