expo-harmony-toolkit 1.7.0 → 1.7.1

package/README.en.md

@@ -9,7 +9,7 @@
   <p>
     <a href="https://github.com/BlackishGreen33/Expo-Harmony-Toolkit/actions/workflows/ci.yml"><img alt="Checks" src="https://img.shields.io/badge/checks-passing-16a34a?style=flat-square&logo=githubactions&logoColor=white"></a>
     <a href="./LICENSE"><img alt="License" src="https://img.shields.io/badge/license-MIT-0f766e?style=flat-square"></a>
-    <a href="https://github.com/BlackishGreen33/Expo-Harmony-Toolkit/releases"><img alt="Version" src="https://img.shields.io/badge/version-v1.7.0-111827?style=flat-square"></a>
+    <a href="https://github.com/BlackishGreen33/Expo-Harmony-Toolkit/releases"><img alt="Version" src="https://img.shields.io/badge/version-v1.7.1-111827?style=flat-square"></a>
     <a href="./docs/support-matrix.md"><img alt="Matrix" src="https://img.shields.io/badge/matrix-expo55--rnoh082--ui--stack-2563eb?style=flat-square"></a>
     <img alt="Input" src="https://img.shields.io/badge/input-Managed%2FCNG-059669?style=flat-square">
   </p>
@@ -24,7 +24,7 @@
 </div>
 
 > [!IMPORTANT]
-> `v1.7` keeps the `verified + preview + experimental` model and moves `expo-location` and `expo-camera` into `preview`. The public path is still "Core Expo Full Coverage first, long-tail third-party native modules second"; this is still not a claim that arbitrary Expo apps can be published to HarmonyOS unchanged.
+> `v1.7` keeps the `verified + preview + experimental` model and moves `expo-location` and `expo-camera` into `preview`. Starting with this documentation refresh, the public promise is tighter: `latest` only carries fully accepted `verified` capabilities, while `next` is reserved for preview fast-track work. The roadmap still targets `Managed/CNG Core Expo Coverage` first and long-tail extension coverage second.
 
 > [!TIP]
 > The two validated `@react-native-oh-tpl/*` adapters in the public matrix are currently consumed via exact Git URLs and commits. For repository development and the official UI-stack sample, prefer `pnpm install --ignore-scripts` so adapter prepare hooks do not fail on private upstream resources.
@@ -47,17 +47,19 @@
 
 | Item | Status |
 | --- | --- |
-| Current version | `v1.7.0` |
+| Current version | `v1.7.1` |
 | Support model | `verified + preview + experimental` |
 | Public `verified` matrix | `expo55-rnoh082-ui-stack` |
 | Supported input | Managed/CNG Expo projects |
 | `verified` JS/UI capabilities | `expo-router`, `expo-linking`, `expo-constants`, `react-native-reanimated`, `react-native-svg` |
 | `preview` native capabilities | `expo-file-system`, `expo-image-picker`, `expo-location`, `expo-camera` |
 | `experimental` capabilities | `expo-notifications`, `react-native-gesture-handler` |
+| Release tracks | `latest` = fully accepted `verified` only; `next` = preview fast track |
+| Capability telemetry | `runtimeMode` + `evidence(bundle/debugBuild/device/release)` |
 | Build path | `doctor -> init -> bundle -> build-hap` |
 | Primary sample | `examples/official-ui-stack-sample` |
 | Preview sample | `examples/official-native-capabilities-sample` |
-| Regression baselines | `examples/official-app-shell-sample`, `examples/official-minimal-sample` |
+| Supporting onboarding samples | `examples/official-app-shell-sample`, `examples/official-minimal-sample` |
 
 <details>
 <summary><strong>Still outside the verified public promise</strong></summary>
@@ -168,7 +170,7 @@ Common decision points:
 
 ## Support Matrix
 
-`v1.7` keeps tiered support:
+`v1.7` keeps tiered support and now exposes capability promotion distance in public reports:
 
 - `verified`: the only public matrix remains `expo55-rnoh082-ui-stack`
 - `preview`: `expo-file-system`, `expo-image-picker`, `expo-location`, `expo-camera`
@@ -176,18 +178,24 @@ Common decision points:
 
 `doctor --strict` still means `verified` only. `doctor --target-tier preview` allows the same runtime matrix plus preview-tier capabilities, but that does not promote them into the formal public promise.
 
+Starting in this refresh:
+
+- `doctor-report.json` exposes `capabilities[].runtimeMode`
+- `doctor-report.json` and `toolkit-config.json` expose `evidence.bundle`, `evidence.debugBuild`, `evidence.device`, and `evidence.release`
+- `runtimeMode=shim` means the capability still has not reached a verified runtime path even if bundling and debug-build scaffolding already exist
+
 See [docs/support-matrix.md](./docs/support-matrix.md) for the full allowlist, pairing rules, exact specifiers, issue codes, and release gates.
 
 ## Official Samples
 
 - `examples/official-ui-stack-sample`
-  The primary public sample for `v1.5.0`, covering router, linking, constants, SVG, reanimated, and Harmony sidecar build flow.
+  The current public main sample, covering router, linking, constants, SVG, reanimated, and the Harmony sidecar build flow.
 - `examples/official-native-capabilities-sample`
-  The `v1.7` Batch A+B preview sample, covering `expo-file-system`, `expo-image-picker`, `expo-location`, and `expo-camera` bridge, permission, bundle, and debug-build validation.
+  The `v1.7.x` Batch A+B preview walkthrough sample, covering the supported core subsets for `expo-file-system`, `expo-image-picker`, `expo-location`, and `expo-camera` plus permission, bundle, and debug-build validation.
 - `examples/official-app-shell-sample`
-  The `v1.1` App Shell regression baseline that protects router behavior while UI-stack support is finalized.
+  The minimal App Shell onboarding sample that demonstrates router, linking, constants, pathname, observed URL, and a generated deep-link flow.
 - `examples/official-minimal-sample`
-  The smallest smoke baseline for sidecar templates and the shortest bundle path.
+  The smallest onboarding sample, explaining the shortest `doctor -> init -> bundle -> build-hap` chain and what it intentionally does not cover.
 
 See:
 
@@ -230,14 +238,16 @@ Pre-publish checks:
 - `pnpm build`
 - `pnpm test`
 - `npm pack --dry-run`
-- tarball smoke: `doctor --strict`, `init --force`, `bundle`
+- tarball smoke:
+  `latest` runs `doctor --strict`, `init --force`, `bundle`
+  `next` runs `doctor --target-tier preview`, `init --force`, `bundle`
 
-Automatic publishing defaults to hosted CI only:
+Automatic publishing still defaults to hosted CI only, but now splits into two tracks:
 
-- GitHub workflow runs `build/test/pack/tarball smoke`
-- `build-hap --mode debug` does not block npm publish
-- GitHub auto-publish uses the `latest` dist-tag and provenance
-- local manual publishing uses the `latest` dist-tag
+- `stable/latest`: only verified samples and fully accepted capabilities
+- `fast-track/next`: preview sample smoke and preview capability validation
+- GitHub auto-publish selects `latest` or `next` based on the tag and keeps provenance enabled
+- `build-hap --mode debug` still does not block hosted npm publishing
 
 Manual Harmony acceptance still requires:
 
@@ -248,6 +258,12 @@ Manual Harmony acceptance still requires:
 - `Build Debug Hap(s)` succeeds
 - `official-native-capabilities-sample` at least proves Batch A+B preview route bundling, generated Harmony permissions, and the debug build path
 
+Verified promotion still additionally requires:
+
+- device-side acceptance
+- release signing plus `build-hap --mode release`
+- roadmap, support matrix, README, and acceptance records updated in the same PR
+
 See [docs/npm-release.md](./docs/npm-release.md) and [docs/signing-and-release.md](./docs/signing-and-release.md).
 
 ## Documentation
@@ -260,7 +276,7 @@ See [docs/npm-release.md](./docs/npm-release.md) and [docs/signing-and-release.m
 - [Official Minimal Sample Guide](./docs/official-minimal-sample.md)
 - [npm Release Notes](./docs/npm-release.md)
 - [Signing and Release Notes](./docs/signing-and-release.md)
-- [v1.7.0 Acceptance Log (In Progress)](./docs/v1.7.0-acceptance.md)
+- [v1.7.1 Acceptance Log](./docs/v1.7.1-acceptance.md)
 - [Roadmap](./docs/roadmap.md)
 
 ## License

package/README.md

@@ -9,7 +9,7 @@
   <p>
     <a href="https://github.com/BlackishGreen33/Expo-Harmony-Toolkit/actions/workflows/ci.yml"><img alt="Checks" src="https://img.shields.io/badge/checks-passing-16a34a?style=flat-square&logo=githubactions&logoColor=white"></a>
     <a href="./LICENSE"><img alt="License" src="https://img.shields.io/badge/license-MIT-0f766e?style=flat-square"></a>
-    <a href="https://github.com/BlackishGreen33/Expo-Harmony-Toolkit/releases"><img alt="Version" src="https://img.shields.io/badge/version-v1.7.0-111827?style=flat-square"></a>
+    <a href="https://github.com/BlackishGreen33/Expo-Harmony-Toolkit/releases"><img alt="Version" src="https://img.shields.io/badge/version-v1.7.1-111827?style=flat-square"></a>
     <a href="./docs/support-matrix.md"><img alt="Matrix" src="https://img.shields.io/badge/matrix-expo55--rnoh082--ui--stack-2563eb?style=flat-square"></a>
     <img alt="Input" src="https://img.shields.io/badge/input-Managed%2FCNG-059669?style=flat-square">
   </p>
@@ -24,7 +24,7 @@
 </div>
 
 > [!IMPORTANT]
-> `v1.7` 延续 `verified + preview + experimental` 三层支持模型，并把 `expo-location`、`expo-camera` 推进到 `preview`。当前对外路线仍然是先做到 `Core Expo Full Coverage`，再去覆盖长尾第三方 native module；这依然不是“任意 Expo 项目都能原样发布到 HarmonyOS”的声明。
+> `v1.7` 延续 `verified + preview + experimental` 三层支持模型，并把 `expo-location`、`expo-camera` 推进到 `preview`。从这版文档开始，对外承诺进一步收紧为：`latest` 只承诺完整验收的 `verified` 能力，`next` 用于 preview fast track；路线仍然是先做到 `Managed/CNG Core Expo Coverage`，再通过 extension model 逼近“任意 Expo 项目”。
 
 > [!TIP]
 > 由于当前公开矩阵内的两套 `@react-native-oh-tpl/*` adapter 依赖以 Git URL + exact commit 形式接入，仓库开发和官方 UI-stack sample 推荐使用 `pnpm install --ignore-scripts`，避免 Git adapter 在 prepare 阶段拉取私有资源而中断安装。
@@ -47,17 +47,19 @@
 
 | 项目 | 说明 |
 | --- | --- |
-| 当前版本 | `v1.7.0` |
+| 当前版本 | `v1.7.1` |
 | 支持模型 | `verified + preview + experimental` |
 | 唯一 `verified` 公开矩阵 | `expo55-rnoh082-ui-stack` |
 | 输入范围 | Managed/CNG Expo 项目 |
 | `verified` JS/UI 能力 | `expo-router`、`expo-linking`、`expo-constants`、`react-native-reanimated`、`react-native-svg` |
 | `preview` 原生能力 | `expo-file-system`、`expo-image-picker`、`expo-location`、`expo-camera` |
 | `experimental` 能力 | `expo-notifications`、`react-native-gesture-handler` |
+| 发布轨 | `latest` = fully accepted verified only；`next` = preview fast track |
+| capability 遥测 | `runtimeMode` + `evidence(bundle/debugBuild/device/release)` |
 | 构建链 | `doctor -> init -> bundle -> build-hap` |
 | 主 sample | `examples/official-ui-stack-sample` |
 | preview sample | `examples/official-native-capabilities-sample` |
-| 回归基线 | `examples/official-app-shell-sample`、`examples/official-minimal-sample` |
+| 辅助 onboarding samples | `examples/official-app-shell-sample`、`examples/official-minimal-sample` |
 
 <details>
 <summary><strong>当前仍不在 verified 正式承诺范围</strong></summary>
@@ -168,7 +170,7 @@ pnpm exec expo-harmony build-hap --mode release
 
 ## 支持矩阵
 
-`v1.7` 继续采用支持分层：
+`v1.7` 继续采用支持分层，并开始把 capability 晋升距离写进公开报告：
 
 - `verified`：唯一公开矩阵仍是 `expo55-rnoh082-ui-stack`
 - `preview`：`expo-file-system`、`expo-image-picker`、`expo-location`、`expo-camera`
@@ -176,6 +178,18 @@ pnpm exec expo-harmony build-hap --mode release
 
 `doctor --strict` 继续只代表 `verified`。`doctor --target-tier preview` 会在同一 runtime matrix 下额外放行 preview 能力，但这不等于它们已经进入正式承诺。
 
+从本版开始：
+
+- `doctor-report.json` 的 `capabilities[]` 会带出 `runtimeMode`
+- `doctor-report.json` 与 `toolkit-config.json` 会带出 `evidence.bundle`、`evidence.debugBuild`、`evidence.device`、`evidence.release`
+- `runtimeMode=shim` 说明当前仍未进入 verified runtime path，即使 bundle / debug build 已经可走通
+
+文档里的状态标记额外约定为：
+
+- `🟡`：当前子集已经实现，主要只差真机 / release 证据
+- `🟠`：包已经进入 `preview`，但这个具体子 API 还没到可信实现，不能简单理解成“只差真机”
+- `⛔`：完全不在当前公开支持范围
+
 完整白名单、配对规则、exact specifier、issue code 与 release gate 见 [docs/support-matrix.md](./docs/support-matrix.md)。
 
 ## 官方 Samples
@@ -183,11 +197,11 @@ pnpm exec expo-harmony build-hap --mode release
 - `examples/official-ui-stack-sample`
   当前唯一对外主 sample，同时覆盖 router、linking、constants、SVG、reanimated 和 Harmony sidecar 构建链。
 - `examples/official-native-capabilities-sample`
-  `v1.7` 的 Batch A+B preview sample，用来承接 `expo-file-system`、`expo-image-picker`、`expo-location`、`expo-camera` 的 bridge、permission、bundle 与 debug build 验收。
+  `v1.7.x` 的 Batch A+B preview walkthrough sample，用来承接 `expo-file-system`、`expo-image-picker`、`expo-location`、`expo-camera` 的核心支持子集、permission、bundle 与 debug build 验收。
 - `examples/official-app-shell-sample`
-  `v1.1` App Shell 回归基线，用来防止 UI-stack 收口引入 router 退化。
+  最小可理解的 App Shell onboarding sample，用来展示 router、linking、constants、pathname、observed URL 与 generated deep link。
 - `examples/official-minimal-sample`
-  最小 smoke baseline，用来回归 sidecar 模板与最短 bundle 路径。
+  最小 onboarding sample，用来说明最短 `doctor -> init -> bundle -> build-hap` 链路，以及它故意不覆盖的范围。
 
 详见：
 
@@ -230,14 +244,16 @@ pnpm exec expo-harmony build-hap --mode release
 - `pnpm build`
 - `pnpm test`
 - `npm pack --dry-run`
-- tarball 安装 smoke：`doctor --strict`、`init --force`、`bundle`
+- tarball 安装 smoke：
+  `latest` 走 `doctor --strict`、`init --force`、`bundle`
+  `next` 走 `doctor --target-tier preview`、`init --force`、`bundle`
 
-自动发布默认走 hosted CI only：
+自动发布默认走 hosted CI only，并区分双轨：
 
-- GitHub workflow 跑 `build/test/pack/tarball smoke`
-- `build-hap --mode debug` 不阻塞 npm publish
-- GitHub 自动发布使用 `latest` dist-tag 和 provenance
-- 本地手动发布使用 `latest` dist-tag
+- `stable/latest`：只承接 verified sample 与完整验收能力
+- `fast-track/next`：承接 preview sample 与 preview capability smoke
+- GitHub 自动发布按 tag 选择 `latest` 或 `next` dist-tag，并保留 provenance
+- `build-hap --mode debug` 继续不作为 hosted npm publish 的硬阻塞条件
 
 手动 Harmony 验收继续要求：
 
@@ -248,6 +264,12 @@ pnpm exec expo-harmony build-hap --mode release
 - `Build Debug Hap(s)` 成功
 - `official-native-capabilities-sample` 至少完成 Batch A+B preview route 的 bundle、permission 与 debug build 检查
 
+verified capability 晋升还必须补齐：
+
+- device-side 验收
+- release signing / `build-hap --mode release`
+- roadmap、support matrix、README、acceptance 记录同 PR 更新
+
 详见 [docs/npm-release.md](./docs/npm-release.md) 与 [docs/signing-and-release.md](./docs/signing-and-release.md)。
 
 ## 文档索引
@@ -260,7 +282,7 @@ pnpm exec expo-harmony build-hap --mode release
 - [官方最小 sample 指南](./docs/official-minimal-sample.md)
 - [npm 发布说明](./docs/npm-release.md)
 - [签名与 Release 说明](./docs/signing-and-release.md)
-- [v1.7.0 验收记录（进行中）](./docs/v1.7.0-acceptance.md)
+- [v1.7.1 验收记录](./docs/v1.7.1-acceptance.md)
 - [路线图](./docs/roadmap.md)
 
 ## License

package/build/core/build.js

@@ -200,7 +200,7 @@ async function buildHapProject(projectRoot, options) {
     if (options.mode === 'release' && !envReport.signingConfigured) {
         blockingIssues.push({
             code: 'env.signing.missing',
-            message: 'Release HAP builds require signingConfigs in harmony/build-profile.json5.',
+            message: 'Release HAP builds require signingConfigs from .expo-harmony/signing.local.json or harmony/build-profile.json5.',
         });
     }
     if (blockingIssues.length > 0) {

package/build/core/constants.d.ts

@@ -1,12 +1,13 @@
 export declare const TOOLKIT_PACKAGE_NAME = "expo-harmony-toolkit";
 export declare const CLI_NAME = "expo-harmony";
-export declare const TOOLKIT_VERSION = "1.7.0";
+export declare const TOOLKIT_VERSION = "1.7.1";
 export declare const TEMPLATE_VERSION = "rnoh-0.82.18";
 export declare const RNOH_VERSION = "0.82.18";
 export declare const RNOH_CLI_VERSION = "0.82.18";
 export declare const SUPPORTED_EXPO_SDKS: number[];
 export declare const GENERATED_DIR = ".expo-harmony";
 export declare const GENERATED_SHIMS_DIR = ".expo-harmony/shims";
+export declare const SIGNING_LOCAL_FILENAME = "signing.local.json";
 export declare const MANIFEST_FILENAME = "manifest.json";
 export declare const DOCTOR_REPORT_FILENAME = "doctor-report.json";
 export declare const ENV_REPORT_FILENAME = "env-report.json";

package/build/core/constants.js

@@ -1,15 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DESIRED_PACKAGE_SCRIPTS = exports.HARMONY_RUNTIME_PRELUDE_RELATIVE_PATH = exports.HARMONY_ROUTER_ENTRY_FILENAME = exports.STRICT_ENV_EXIT_CODE = exports.STRICT_DOCTOR_EXIT_CODE = exports.DEFAULT_HVIGOR_PLUGIN_FILENAME = exports.PREBUILD_METADATA_FILENAME = exports.TOOLKIT_CONFIG_FILENAME = exports.BUILD_REPORT_FILENAME = exports.ENV_REPORT_FILENAME = exports.DOCTOR_REPORT_FILENAME = exports.MANIFEST_FILENAME = exports.GENERATED_SHIMS_DIR = exports.GENERATED_DIR = exports.SUPPORTED_EXPO_SDKS = exports.RNOH_CLI_VERSION = exports.RNOH_VERSION = exports.TEMPLATE_VERSION = exports.TOOLKIT_VERSION = exports.CLI_NAME = exports.TOOLKIT_PACKAGE_NAME = void 0;
+exports.DESIRED_PACKAGE_SCRIPTS = exports.HARMONY_RUNTIME_PRELUDE_RELATIVE_PATH = exports.HARMONY_ROUTER_ENTRY_FILENAME = exports.STRICT_ENV_EXIT_CODE = exports.STRICT_DOCTOR_EXIT_CODE = exports.DEFAULT_HVIGOR_PLUGIN_FILENAME = exports.PREBUILD_METADATA_FILENAME = exports.TOOLKIT_CONFIG_FILENAME = exports.BUILD_REPORT_FILENAME = exports.ENV_REPORT_FILENAME = exports.DOCTOR_REPORT_FILENAME = exports.MANIFEST_FILENAME = exports.SIGNING_LOCAL_FILENAME = exports.GENERATED_SHIMS_DIR = exports.GENERATED_DIR = exports.SUPPORTED_EXPO_SDKS = exports.RNOH_CLI_VERSION = exports.RNOH_VERSION = exports.TEMPLATE_VERSION = exports.TOOLKIT_VERSION = exports.CLI_NAME = exports.TOOLKIT_PACKAGE_NAME = void 0;
 exports.TOOLKIT_PACKAGE_NAME = 'expo-harmony-toolkit';
 exports.CLI_NAME = 'expo-harmony';
-exports.TOOLKIT_VERSION = '1.7.0';
+exports.TOOLKIT_VERSION = '1.7.1';
 exports.TEMPLATE_VERSION = 'rnoh-0.82.18';
 exports.RNOH_VERSION = '0.82.18';
 exports.RNOH_CLI_VERSION = '0.82.18';
 exports.SUPPORTED_EXPO_SDKS = [53, 55];
 exports.GENERATED_DIR = '.expo-harmony';
 exports.GENERATED_SHIMS_DIR = `${exports.GENERATED_DIR}/shims`;
+exports.SIGNING_LOCAL_FILENAME = 'signing.local.json';
 exports.MANIFEST_FILENAME = 'manifest.json';
 exports.DOCTOR_REPORT_FILENAME = 'doctor-report.json';
 exports.ENV_REPORT_FILENAME = 'env-report.json';

package/build/core/env.js

@@ -10,6 +10,7 @@ const fs_extra_1 = __importDefault(require("fs-extra"));
 const path_1 = __importDefault(require("path"));
 const constants_1 = require("./constants");
 const project_1 = require("./project");
+const signing_1 = require("./signing");
 const DEFAULT_DEVECO_STUDIO_CANDIDATES = [
     '/Applications/DevEco-Studio.app',
     path_1.default.join(process.env.HOME ?? '', 'Applications', 'DevEco-Studio.app'),
@@ -56,9 +57,11 @@ async function buildEnvReport(projectRoot, options = {}) {
     const harmonyProjectRoot = (await fs_extra_1.default.pathExists(harmonyProjectRootCandidate))
         ? harmonyProjectRootCandidate
         : null;
-    const signingConfigured = harmonyProjectRoot
-        ? await detectSigningConfiguration(path_1.default.join(harmonyProjectRoot, 'build-profile.json5'))
-        : false;
+    const signingLocalConfig = await (0, signing_1.readSigningLocalConfig)(resolvedProjectRoot);
+    const buildProfileContents = harmonyProjectRoot
+        ? await readBuildProfileContents(path_1.default.join(harmonyProjectRoot, 'build-profile.json5'))
+        : null;
+    const signingConfigured = (0, signing_1.hasSigningConfiguration)(buildProfileContents, signingLocalConfig);
     const blockingIssues = [];
     const advisories = [];
     const warnings = [];
@@ -92,7 +95,7 @@ async function buildEnvReport(projectRoot, options = {}) {
     else if (!signingConfigured) {
         advisories.push({
             code: 'env.signing.missing',
-            message: 'Harmony build-profile.json5 does not declare any signingConfigs yet. Debug GUI flows may still work, but release builds require signing.',
+            message: 'Neither .expo-harmony/signing.local.json nor harmony/build-profile.json5 declares usable signingConfigs yet. Debug GUI flows may still work, but release builds require signing.',
         });
     }
     return {
@@ -169,16 +172,11 @@ function findExecutableInPath(executableName, runtimeEnv) {
     }
     return null;
 }
-async function detectSigningConfiguration(buildProfilePath) {
+async function readBuildProfileContents(buildProfilePath) {
     if (!(await fs_extra_1.default.pathExists(buildProfilePath))) {
-        return false;
-    }
-    const contents = await fs_extra_1.default.readFile(buildProfilePath, 'utf8');
-    const signingConfigsMatch = contents.match(/signingConfigs\s*:\s*\[([\s\S]*?)\]/m);
-    if (!signingConfigsMatch) {
-        return false;
+        return null;
     }
-    return signingConfigsMatch[1].trim().length > 0;
+    return fs_extra_1.default.readFile(buildProfilePath, 'utf8');
 }
 function renderIssueLine(issue) {
     return `- ${issue.code}: ${issue.message}${issue.subject ? ` (${issue.subject})` : ''}`;

package/build/core/report.js

@@ -46,6 +46,8 @@ async function buildDoctorReport(projectRoot, options = {}) {
         packageName: definition.packageName,
         status: definition.status,
         supportTier: definition.supportTier,
+        runtimeMode: definition.runtimeMode,
+        evidence: { ...definition.evidence },
         note: definition.note,
         docsUrl: definition.docsUrl,
         nativePackageNames: [...definition.nativePackageNames],
@@ -135,7 +137,13 @@ function renderDoctorReport(report) {
             const permissions = capability.harmonyPermissions.length > 0
                 ? ` | permissions: ${capability.harmonyPermissions.join(', ')}`
                 : '';
-            return `- [${capability.status}/${capability.supportTier}] ${capability.packageName} -> ${capability.nativePackageNames.join(', ') || 'toolkit-managed bridge'} | sample: ${capability.sampleRoute}${permissions}`;
+            const missingEvidence = getMissingCapabilityEvidence(capability.evidence);
+            const evidence = ` | evidence: ${renderCapabilityEvidence(capability.evidence)}`;
+            const promotionGaps = buildCapabilityPromotionGaps(capability.runtimeMode, missingEvidence);
+            const gapSuffix = promotionGaps.length > 0
+                ? ` | verified gaps: ${promotionGaps.join(', ')}`
+                : '';
+            return `- [${capability.status}/${capability.supportTier}] ${capability.packageName} -> ${capability.nativePackageNames.join(', ') || 'toolkit-managed bridge'} | runtime: ${capability.runtimeMode} | sample: ${capability.sampleRoute}${permissions}${evidence}${gapSuffix}`;
         }));
     }
     if (report.blockingIssues.length > 0) {
@@ -149,6 +157,26 @@ function renderDoctorReport(report) {
     }
     return sections.join('\n');
 }
+function renderCapabilityEvidence(evidence) {
+    return [
+        `bundle=${evidence.bundle ? 'yes' : 'no'}`,
+        `debugBuild=${evidence.debugBuild ? 'yes' : 'no'}`,
+        `device=${evidence.device ? 'yes' : 'no'}`,
+        `release=${evidence.release ? 'yes' : 'no'}`,
+    ].join(', ');
+}
+function getMissingCapabilityEvidence(evidence) {
+    return Object.entries(evidence)
+        .filter(([, present]) => !present)
+        .map(([key]) => key);
+}
+function buildCapabilityPromotionGaps(runtimeMode, missingEvidence) {
+    const gaps = missingEvidence.map((entry) => String(entry));
+    if (runtimeMode !== 'verified') {
+        gaps.unshift(`runtimeMode:${runtimeMode}->verified`);
+    }
+    return gaps;
+}
 function createDependencyRecord(name, version, source) {
     const matrixRecord = dependencyCatalog_1.DEPENDENCY_CATALOG[name] ?? DEFAULT_RECORD;
     return {

package/build/core/signing.d.ts

@@ -0,0 +1,11 @@
+type JsonRecord = Record<string, unknown>;
+type SigningLocalAppFragment = {
+    signingConfigs?: JsonRecord[];
+    products?: JsonRecord[];
+};
+export declare function getSigningLocalPath(projectRoot: string): string;
+export declare function readSigningLocalConfig(projectRoot: string): Promise<SigningLocalAppFragment | null>;
+export declare function mergeSigningLocalConfigIntoBuildProfile(rawBuildProfileContents: string, signingLocalConfig: SigningLocalAppFragment | null): string;
+export declare function hasSigningConfiguration(rawBuildProfileContents: string | null, signingLocalConfig?: SigningLocalAppFragment | null): boolean;
+export declare function hasSigningLocalConfiguration(signingLocalConfig: SigningLocalAppFragment | null): boolean;
+export {};

package/build/core/signing.js

@@ -0,0 +1,113 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSigningLocalPath = getSigningLocalPath;
+exports.readSigningLocalConfig = readSigningLocalConfig;
+exports.mergeSigningLocalConfigIntoBuildProfile = mergeSigningLocalConfigIntoBuildProfile;
+exports.hasSigningConfiguration = hasSigningConfiguration;
+exports.hasSigningLocalConfiguration = hasSigningLocalConfiguration;
+const fs_extra_1 = __importDefault(require("fs-extra"));
+const json5_1 = __importDefault(require("json5"));
+const path_1 = __importDefault(require("path"));
+const constants_1 = require("./constants");
+function getSigningLocalPath(projectRoot) {
+    return path_1.default.join(projectRoot, constants_1.GENERATED_DIR, constants_1.SIGNING_LOCAL_FILENAME);
+}
+async function readSigningLocalConfig(projectRoot) {
+    const signingLocalPath = getSigningLocalPath(projectRoot);
+    if (!(await fs_extra_1.default.pathExists(signingLocalPath))) {
+        return null;
+    }
+    const rawConfig = (await fs_extra_1.default.readJson(signingLocalPath));
+    return normalizeSigningLocalConfig(rawConfig);
+}
+function mergeSigningLocalConfigIntoBuildProfile(rawBuildProfileContents, signingLocalConfig) {
+    if (!signingLocalConfig) {
+        return rawBuildProfileContents;
+    }
+    const parsed = json5_1.default.parse(rawBuildProfileContents);
+    const merged = mergeSigningLocalConfig(parsed, signingLocalConfig);
+    return JSON.stringify(merged, null, 2) + '\n';
+}
+function hasSigningConfiguration(rawBuildProfileContents, signingLocalConfig = null) {
+    if (hasSigningLocalConfiguration(signingLocalConfig)) {
+        return true;
+    }
+    if (!rawBuildProfileContents) {
+        return false;
+    }
+    try {
+        const parsed = json5_1.default.parse(rawBuildProfileContents);
+        return hasNonEmptySigningConfigList(parsed.app?.signingConfigs);
+    }
+    catch (_error) {
+        return false;
+    }
+}
+function hasSigningLocalConfiguration(signingLocalConfig) {
+    return hasNonEmptySigningConfigList(signingLocalConfig?.signingConfigs);
+}
+function normalizeSigningLocalConfig(rawConfig) {
+    const candidate = rawConfig && typeof rawConfig === 'object' && !Array.isArray(rawConfig)
+        ? 'app' in rawConfig &&
+            rawConfig.app &&
+            typeof rawConfig.app === 'object' &&
+            !Array.isArray(rawConfig.app)
+            ? rawConfig.app
+            : rawConfig
+        : {};
+    const signingConfigs = Array.isArray(candidate.signingConfigs)
+        ? candidate.signingConfigs.filter(isJsonRecord)
+        : undefined;
+    const products = Array.isArray(candidate.products)
+        ? candidate.products.filter(isJsonRecord)
+        : undefined;
+    return {
+        ...(signingConfigs ? { signingConfigs } : {}),
+        ...(products ? { products } : {}),
+    };
+}
+function mergeSigningLocalConfig(buildProfile, signingLocalConfig) {
+    const nextBuildProfile = {
+        ...buildProfile,
+        app: isJsonRecord(buildProfile.app)
+            ? {
+                ...buildProfile.app,
+            }
+            : {},
+    };
+    if (Array.isArray(signingLocalConfig.signingConfigs)) {
+        nextBuildProfile.app.signingConfigs = signingLocalConfig.signingConfigs.map((entry) => ({ ...entry }));
+    }
+    if (Array.isArray(signingLocalConfig.products)) {
+        const currentProducts = Array.isArray(nextBuildProfile.app.products)
+            ? nextBuildProfile.app.products.map((entry) => ({ ...entry }))
+            : [];
+        for (const incomingProduct of signingLocalConfig.products) {
+            const incomingName = typeof incomingProduct.name === 'string' && incomingProduct.name.length > 0
+                ? incomingProduct.name
+                : null;
+            const existingIndex = incomingName === null
+                ? -1
+                : currentProducts.findIndex((entry) => entry.name === incomingName);
+            if (existingIndex >= 0) {
+                currentProducts[existingIndex] = {
+                    ...currentProducts[existingIndex],
+                    ...incomingProduct,
+                };
+                continue;
+            }
+            currentProducts.push({ ...incomingProduct });
+        }
+        nextBuildProfile.app.products = currentProducts;
+    }
+    return nextBuildProfile;
+}
+function hasNonEmptySigningConfigList(signingConfigs) {
+    return Array.isArray(signingConfigs) && signingConfigs.some(isJsonRecord);
+}
+function isJsonRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}