hot-updater 0.23.0 → 0.23.1

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { _ as __toESM, a as nativeFingerprint, c as showFingerprintDiff, d as IosConfigParser, f as require_plist, g as __require, h as __commonJS, i as generateFingerprints, l as isFingerprintEquals, m as AndroidConfigParser, o as readLocalFingerprint, p as require_base64_js, s as getFingerprintDiff, t as createAndInjectFingerprintFiles, u as require_out } from "./fingerprint-11-3nNgi.js";
+import { _ as require_base64_js, a as createAndInjectFingerprintFiles, b as __require, c as generateFingerprints, d as getFingerprintDiff, f as showFingerprintDiff, g as require_plist, h as IosConfigParser, i as saveKeyPair, l as nativeFingerprint, m as require_out, n as getPublicKeyFromPrivate, p as isFingerprintEquals, r as loadPrivateKey, t as generateKeyPair, u as readLocalFingerprint, v as AndroidConfigParser, x as __toESM, y as __commonJS } from "./keyGeneration-D_2zTEmt.js";
 import { EventEmitter, addAbortListener, on, once, setMaxListeners } from "node:events";
 import childProcess, { ChildProcess, execFile, spawn, spawnSync } from "node:child_process";
 import path from "node:path";
@@ -35437,74 +35437,6 @@ const appendOutputDirectoryIntoGitignore = ({ cwd } = {}) => {
 	});
 };
 
-//#endregion
-//#region src/utils/signing/keyGeneration.ts
-/**
-* Generate RSA key pair for bundle signing.
-* @param keySize Key size in bits (2048 or 4096)
-* @returns Promise resolving to key pair in PEM format
-*/
-async function generateKeyPair(keySize = 4096) {
-	return new Promise((resolve, reject) => {
-		crypto$1.generateKeyPair("rsa", {
-			modulusLength: keySize,
-			publicKeyEncoding: {
-				type: "spki",
-				format: "pem"
-			},
-			privateKeyEncoding: {
-				type: "pkcs8",
-				format: "pem"
-			}
-		}, (err, publicKey, privateKey) => {
-			if (err) reject(err);
-			else resolve({
-				privateKey,
-				publicKey
-			});
-		});
-	});
-}
-/**
-* Save key pair to disk with secure permissions.
-* @param keyPair Generated key pair
-* @param outputDir Directory to save keys
-*/
-async function saveKeyPair(keyPair, outputDir) {
-	await fs$2.mkdir(outputDir, { recursive: true });
-	const privateKeyPath = path.join(outputDir, "private-key.pem");
-	const publicKeyPath = path.join(outputDir, "public-key.pem");
-	await fs$2.writeFile(privateKeyPath, keyPair.privateKey, { mode: 384 });
-	await fs$2.writeFile(publicKeyPath, keyPair.publicKey, { mode: 420 });
-}
-/**
-* Load private key from PEM file.
-* @param privateKeyPath Path to private key file
-* @returns Private key in PEM format
-* @throws Error if file not found or invalid format
-*/
-async function loadPrivateKey(privateKeyPath) {
-	try {
-		const privateKey = await fs$2.readFile(privateKeyPath, "utf-8");
-		crypto$1.createPrivateKey(privateKey);
-		return privateKey;
-	} catch (error) {
-		throw new Error(`Failed to load private key from ${privateKeyPath}: ${error.message}`);
-	}
-}
-/**
-* Extract public key from private key.
-* @param privateKeyPEM Private key in PEM format
-* @returns Public key in PEM format
-*/
-function getPublicKeyFromPrivate(privateKeyPEM) {
-	const privateKey = crypto$1.createPrivateKey(privateKeyPEM);
-	return crypto$1.createPublicKey(privateKey).export({
-		type: "spki",
-		format: "pem"
-	});
-}
-
 //#endregion
 //#region src/utils/signing/bundleSigning.ts
 /**
@@ -37538,9 +37470,13 @@ const keysGenerate = async (options = {}) => {
 		spinner.stop("Keys generated successfully");
 		p.log.success(`Private key: ${path.join(outputDir, "private-key.pem")}`);
 		p.log.success(`Public key: ${path.join(outputDir, "public-key.pem")}`);
+		const keysDir = path.basename(outputDir);
+		if (appendToProjectRootGitignore({
+			cwd,
+			globLines: [`${keysDir}/`]
+		})) p.log.success(`Added ${keysDir}/ to .gitignore`);
 		console.log("");
 		p.log.warn("⚠️  Keep private key secure!");
-		p.log.warn("   - Add keys/ to .gitignore");
 		p.log.warn("   - Use secure storage for CI/CD (AWS Secrets Manager, etc.)");
 		console.log("");
 		p.log.info("Next steps:");

package/dist/{fingerprint-BHiixsXU.cjs → keyGeneration-BsF6FbpU.cjs}

@@ -1,4 +1,6 @@
 const require_chunk = require('./chunk-DWy1uDak.cjs');
+let node_path = require("node:path");
+node_path = require_chunk.__toESM(node_path);
 let __hot_updater_cli_tools = require("@hot-updater/cli-tools");
 __hot_updater_cli_tools = require_chunk.__toESM(__hot_updater_cli_tools);
 let path = require("path");
@@ -7,6 +9,10 @@ let fs = require("fs");
 fs = require_chunk.__toESM(fs);
 let __expo_fingerprint = require("@expo/fingerprint");
 __expo_fingerprint = require_chunk.__toESM(__expo_fingerprint);
+let node_fs_promises = require("node:fs/promises");
+node_fs_promises = require_chunk.__toESM(node_fs_promises);
+let node_crypto = require("node:crypto");
+node_crypto = require_chunk.__toESM(node_crypto);
 
 //#region ../../node_modules/.pnpm/fast-xml-parser@5.2.3/node_modules/fast-xml-parser/src/util.js
 const nameStartChar$1 = ":A-Za-z_\\u00C0-\\u00D6\\u00D8-\\u00F6\\u00F8-\\u02FF\\u0370-\\u037D\\u037F-\\u1FFF\\u200C-\\u200D\\u2070-\\u218F\\u2C00-\\u2FEF\\u3001-\\uD7FF\\uF900-\\uFDCF\\uFDF0-\\uFFFD";
@@ -1474,10 +1480,10 @@ var AndroidConfigParser = class {
 		});
 	}
 	async exists() {
-		return this.stringsXmlPaths.some((path$15) => fs.default.existsSync(path$15));
+		return this.stringsXmlPaths.some((path$16) => fs.default.existsSync(path$16));
 	}
 	getExistingPaths() {
-		return this.stringsXmlPaths.filter((path$15) => fs.default.existsSync(path$15));
+		return this.stringsXmlPaths.filter((path$16) => fs.default.existsSync(path$16));
 	}
 	async get(key) {
 		const existingPaths = this.getExistingPaths();
@@ -9232,7 +9238,7 @@ var require_fs$3 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_module
 var require_path = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/fast-glob@3.3.3/node_modules/fast-glob/out/utils/path.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	const os$1 = require("os");
-	const path$12 = require("path");
+	const path$13 = require("path");
 	const IS_WINDOWS_PLATFORM = os$1.platform() === "win32";
 	const LEADING_DOT_SEGMENT_CHARACTERS_COUNT = 2;
 	/**
@@ -9261,7 +9267,7 @@ var require_path = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_module
 	}
 	exports.unixify = unixify;
 	function makeAbsolute(cwd, filepath) {
-		return path$12.resolve(cwd, filepath);
+		return path$13.resolve(cwd, filepath);
 	}
 	exports.makeAbsolute = makeAbsolute;
 	function removeLeadingDotSegment(entry) {
@@ -10508,7 +10514,7 @@ var require_braces = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modu
 //#endregion
 //#region ../../node_modules/.pnpm/picomatch@2.3.1/node_modules/picomatch/lib/constants.js
 var require_constants$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/picomatch@2.3.1/node_modules/picomatch/lib/constants.js": ((exports, module) => {
-	const path$11 = require("path");
+	const path$12 = require("path");
 	const WIN_SLASH = "\\\\/";
 	const WIN_NO_SLASH = `[^${WIN_SLASH}]`;
 	/**
@@ -10633,7 +10639,7 @@ var require_constants$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node
 		CHAR_UNDERSCORE: 95,
 		CHAR_VERTICAL_LINE: 124,
 		CHAR_ZERO_WIDTH_NOBREAK_SPACE: 65279,
-		SEP: path$11.sep,
+		SEP: path$12.sep,
 		extglobChars(chars$1) {
 			return {
 				"!": {
@@ -10672,7 +10678,7 @@ var require_constants$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node
 //#endregion
 //#region ../../node_modules/.pnpm/picomatch@2.3.1/node_modules/picomatch/lib/utils.js
 var require_utils$2 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/picomatch@2.3.1/node_modules/picomatch/lib/utils.js": ((exports) => {
-	const path$10 = require("path");
+	const path$11 = require("path");
 	const win32 = process.platform === "win32";
 	const { REGEX_BACKSLASH, REGEX_REMOVE_BACKSLASH, REGEX_SPECIAL_CHARS, REGEX_SPECIAL_CHARS_GLOBAL } = require_constants$1();
 	exports.isObject = (val) => val !== null && typeof val === "object" && !Array.isArray(val);
@@ -10692,7 +10698,7 @@ var require_utils$2 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_mod
 	};
 	exports.isWindows = (options) => {
 		if (options && typeof options.windows === "boolean") return options.windows;
-		return win32 === true || path$10.sep === "\\";
+		return win32 === true || path$11.sep === "\\";
 	};
 	exports.escapeLast = (input, char, lastIdx) => {
 		const idx = input.lastIndexOf(char, lastIdx);
@@ -11868,7 +11874,7 @@ var require_parse = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modul
 //#endregion
 //#region ../../node_modules/.pnpm/picomatch@2.3.1/node_modules/picomatch/lib/picomatch.js
 var require_picomatch$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/picomatch@2.3.1/node_modules/picomatch/lib/picomatch.js": ((exports, module) => {
-	const path$9 = require("path");
+	const path$10 = require("path");
 	const scan = require_scan();
 	const parse = require_parse();
 	const utils$11 = require_utils$2();
@@ -12007,7 +12013,7 @@ var require_picomatch$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node
 	* @api public
 	*/
 	picomatch$1.matchBase = (input, glob, options, posix = utils$11.isWindows(options)) => {
-		return (glob instanceof RegExp ? glob : picomatch$1.makeRe(glob, options)).test(path$9.basename(input));
+		return (glob instanceof RegExp ? glob : picomatch$1.makeRe(glob, options)).test(path$10.basename(input));
 	};
 	/**
 	* Returns true if **any** of the given glob `patterns` match the specified `string`.
@@ -12564,7 +12570,7 @@ var require_micromatch = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_
 //#region ../../node_modules/.pnpm/fast-glob@3.3.3/node_modules/fast-glob/out/utils/pattern.js
 var require_pattern = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/fast-glob@3.3.3/node_modules/fast-glob/out/utils/pattern.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
-	const path$8 = require("path");
+	const path$9 = require("path");
 	const globParent = require_glob_parent();
 	const micromatch = require_micromatch();
 	const GLOBSTAR = "**";
@@ -12672,7 +12678,7 @@ var require_pattern = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_mod
 	}
 	exports.endsWithSlashGlobStar = endsWithSlashGlobStar;
 	function isAffectDepthOfReadingPattern(pattern$1) {
-		const basename = path$8.basename(pattern$1);
+		const basename = path$9.basename(pattern$1);
 		return endsWithSlashGlobStar(pattern$1) || isStaticPattern(basename);
 	}
 	exports.isAffectDepthOfReadingPattern = isAffectDepthOfReadingPattern;
@@ -12746,7 +12752,7 @@ var require_pattern = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_mod
 	}
 	exports.partitionAbsoluteAndRelative = partitionAbsoluteAndRelative;
 	function isAbsolute(pattern$1) {
-		return path$8.isAbsolute(pattern$1);
+		return path$9.isAbsolute(pattern$1);
 	}
 	exports.isAbsolute = isAbsolute;
 }) });
@@ -12874,10 +12880,10 @@ var require_utils$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_mod
 	exports.array = array;
 	const errno = require_errno();
 	exports.errno = errno;
-	const fs$9 = require_fs$3();
-	exports.fs = fs$9;
-	const path$7 = require_path();
-	exports.path = path$7;
+	const fs$10 = require_fs$3();
+	exports.fs = fs$10;
+	const path$8 = require_path();
+	exports.path = path$8;
 	const pattern = require_pattern();
 	exports.pattern = pattern;
 	const stream = require_stream$3();
@@ -12984,8 +12990,8 @@ var require_tasks = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modul
 //#region ../../node_modules/.pnpm/@nodelib+fs.stat@2.0.5/node_modules/@nodelib/fs.stat/out/providers/async.js
 var require_async$5 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/@nodelib+fs.stat@2.0.5/node_modules/@nodelib/fs.stat/out/providers/async.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
-	function read$3(path$15, settings, callback) {
-		settings.fs.lstat(path$15, (lstatError, lstat) => {
+	function read$3(path$16, settings, callback) {
+		settings.fs.lstat(path$16, (lstatError, lstat) => {
 			if (lstatError !== null) {
 				callFailureCallback$2(callback, lstatError);
 				return;
@@ -12994,7 +13000,7 @@ var require_async$5 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_mod
 				callSuccessCallback$2(callback, lstat);
 				return;
 			}
-			settings.fs.stat(path$15, (statError, stat$1) => {
+			settings.fs.stat(path$16, (statError, stat$1) => {
 				if (statError !== null) {
 					if (settings.throwErrorOnBrokenSymbolicLink) {
 						callFailureCallback$2(callback, statError);
@@ -13021,11 +13027,11 @@ var require_async$5 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_mod
 //#region ../../node_modules/.pnpm/@nodelib+fs.stat@2.0.5/node_modules/@nodelib/fs.stat/out/providers/sync.js
 var require_sync$5 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/@nodelib+fs.stat@2.0.5/node_modules/@nodelib/fs.stat/out/providers/sync.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
-	function read$2(path$15, settings) {
-		const lstat = settings.fs.lstatSync(path$15);
+	function read$2(path$16, settings) {
+		const lstat = settings.fs.lstatSync(path$16);
 		if (!lstat.isSymbolicLink() || !settings.followSymbolicLink) return lstat;
 		try {
-			const stat$1 = settings.fs.statSync(path$15);
+			const stat$1 = settings.fs.statSync(path$16);
 			if (settings.markSymbolicLink) stat$1.isSymbolicLink = () => true;
 			return stat$1;
 		} catch (error) {
@@ -13041,12 +13047,12 @@ var require_sync$5 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modu
 var require_fs$2 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/@nodelib+fs.stat@2.0.5/node_modules/@nodelib/fs.stat/out/adapters/fs.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	exports.createFileSystemAdapter = exports.FILE_SYSTEM_ADAPTER = void 0;
-	const fs$8 = require("fs");
+	const fs$9 = require("fs");
 	exports.FILE_SYSTEM_ADAPTER = {
-		lstat: fs$8.lstat,
-		stat: fs$8.stat,
-		lstatSync: fs$8.lstatSync,
-		statSync: fs$8.statSync
+		lstat: fs$9.lstat,
+		stat: fs$9.stat,
+		lstatSync: fs$9.lstatSync,
+		statSync: fs$9.statSync
 	};
 	function createFileSystemAdapter$1(fsMethods) {
 		if (fsMethods === void 0) return exports.FILE_SYSTEM_ADAPTER;
@@ -13059,12 +13065,12 @@ var require_fs$2 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_module
 //#region ../../node_modules/.pnpm/@nodelib+fs.stat@2.0.5/node_modules/@nodelib/fs.stat/out/settings.js
 var require_settings$3 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/@nodelib+fs.stat@2.0.5/node_modules/@nodelib/fs.stat/out/settings.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
-	const fs$7 = require_fs$2();
+	const fs$8 = require_fs$2();
 	var Settings$3 = class {
 		constructor(_options = {}) {
 			this._options = _options;
 			this.followSymbolicLink = this._getValue(this._options.followSymbolicLink, true);
-			this.fs = fs$7.createFileSystemAdapter(this._options.fs);
+			this.fs = fs$8.createFileSystemAdapter(this._options.fs);
 			this.markSymbolicLink = this._getValue(this._options.markSymbolicLink, false);
 			this.throwErrorOnBrokenSymbolicLink = this._getValue(this._options.throwErrorOnBrokenSymbolicLink, true);
 		}
@@ -13083,17 +13089,17 @@ var require_out$3 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modul
 	const sync$1 = require_sync$5();
 	const settings_1$3 = require_settings$3();
 	exports.Settings = settings_1$3.default;
-	function stat(path$15, optionsOrSettingsOrCallback, callback) {
+	function stat(path$16, optionsOrSettingsOrCallback, callback) {
 		if (typeof optionsOrSettingsOrCallback === "function") {
-			async$1.read(path$15, getSettings$2(), optionsOrSettingsOrCallback);
+			async$1.read(path$16, getSettings$2(), optionsOrSettingsOrCallback);
 			return;
 		}
-		async$1.read(path$15, getSettings$2(optionsOrSettingsOrCallback), callback);
+		async$1.read(path$16, getSettings$2(optionsOrSettingsOrCallback), callback);
 	}
 	exports.stat = stat;
-	function statSync(path$15, optionsOrSettings) {
+	function statSync(path$16, optionsOrSettings) {
 		const settings = getSettings$2(optionsOrSettings);
-		return sync$1.read(path$15, settings);
+		return sync$1.read(path$16, settings);
 	}
 	exports.statSync = statSync;
 	function getSettings$2(settingsOrOptions = {}) {
@@ -13200,8 +13206,8 @@ var require_fs$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_module
 //#region ../../node_modules/.pnpm/@nodelib+fs.scandir@2.1.5/node_modules/@nodelib/fs.scandir/out/utils/index.js
 var require_utils = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/@nodelib+fs.scandir@2.1.5/node_modules/@nodelib/fs.scandir/out/utils/index.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
-	const fs$6 = require_fs$1();
-	exports.fs = fs$6;
+	const fs$7 = require_fs$1();
+	exports.fs = fs$7;
 }) });
 
 //#endregion
@@ -13287,16 +13293,16 @@ var require_async$4 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_mod
 				return;
 			}
 			rpl(names.map((name) => {
-				const path$15 = common$4.joinPathSegments(directory, name, settings.pathSegmentSeparator);
+				const path$16 = common$4.joinPathSegments(directory, name, settings.pathSegmentSeparator);
 				return (done) => {
-					fsStat$5.stat(path$15, settings.fsStatSettings, (error, stats) => {
+					fsStat$5.stat(path$16, settings.fsStatSettings, (error, stats) => {
 						if (error !== null) {
 							done(error);
 							return;
 						}
 						const entry = {
 							name,
-							path: path$15,
+							path: path$16,
 							dirent: utils$8.fs.createDirentFromStats(name, stats)
 						};
 						if (settings.stats) entry.stats = stats;
@@ -13372,14 +13378,14 @@ var require_sync$4 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modu
 var require_fs = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/@nodelib+fs.scandir@2.1.5/node_modules/@nodelib/fs.scandir/out/adapters/fs.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	exports.createFileSystemAdapter = exports.FILE_SYSTEM_ADAPTER = void 0;
-	const fs$5 = require("fs");
+	const fs$6 = require("fs");
 	exports.FILE_SYSTEM_ADAPTER = {
-		lstat: fs$5.lstat,
-		stat: fs$5.stat,
-		lstatSync: fs$5.lstatSync,
-		statSync: fs$5.statSync,
-		readdir: fs$5.readdir,
-		readdirSync: fs$5.readdirSync
+		lstat: fs$6.lstat,
+		stat: fs$6.stat,
+		lstatSync: fs$6.lstatSync,
+		statSync: fs$6.statSync,
+		readdir: fs$6.readdir,
+		readdirSync: fs$6.readdirSync
 	};
 	function createFileSystemAdapter(fsMethods) {
 		if (fsMethods === void 0) return exports.FILE_SYSTEM_ADAPTER;
@@ -13392,15 +13398,15 @@ var require_fs = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/
 //#region ../../node_modules/.pnpm/@nodelib+fs.scandir@2.1.5/node_modules/@nodelib/fs.scandir/out/settings.js
 var require_settings$2 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/@nodelib+fs.scandir@2.1.5/node_modules/@nodelib/fs.scandir/out/settings.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
-	const path$6 = require("path");
+	const path$7 = require("path");
 	const fsStat$3 = require_out$3();
-	const fs$4 = require_fs();
+	const fs$5 = require_fs();
 	var Settings$2 = class {
 		constructor(_options = {}) {
 			this._options = _options;
 			this.followSymbolicLinks = this._getValue(this._options.followSymbolicLinks, false);
-			this.fs = fs$4.createFileSystemAdapter(this._options.fs);
-			this.pathSegmentSeparator = this._getValue(this._options.pathSegmentSeparator, path$6.sep);
+			this.fs = fs$5.createFileSystemAdapter(this._options.fs);
+			this.pathSegmentSeparator = this._getValue(this._options.pathSegmentSeparator, path$7.sep);
 			this.stats = this._getValue(this._options.stats, false);
 			this.throwErrorOnBrokenSymbolicLink = this._getValue(this._options.throwErrorOnBrokenSymbolicLink, true);
 			this.fsStatSettings = new fsStat$3.Settings({
@@ -13424,17 +13430,17 @@ var require_out$2 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modul
 	const sync = require_sync$4();
 	const settings_1$2 = require_settings$2();
 	exports.Settings = settings_1$2.default;
-	function scandir(path$15, optionsOrSettingsOrCallback, callback) {
+	function scandir(path$16, optionsOrSettingsOrCallback, callback) {
 		if (typeof optionsOrSettingsOrCallback === "function") {
-			async.read(path$15, getSettings$1(), optionsOrSettingsOrCallback);
+			async.read(path$16, getSettings$1(), optionsOrSettingsOrCallback);
 			return;
 		}
-		async.read(path$15, getSettings$1(optionsOrSettingsOrCallback), callback);
+		async.read(path$16, getSettings$1(optionsOrSettingsOrCallback), callback);
 	}
 	exports.scandir = scandir;
-	function scandirSync(path$15, optionsOrSettings) {
+	function scandirSync(path$16, optionsOrSettings) {
 		const settings = getSettings$1(optionsOrSettings);
-		return sync.read(path$15, settings);
+		return sync.read(path$16, settings);
 	}
 	exports.scandirSync = scandirSync;
 	function getSettings$1(settingsOrOptions = {}) {
@@ -13979,7 +13985,7 @@ var require_sync$2 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modu
 //#region ../../node_modules/.pnpm/@nodelib+fs.walk@1.2.8/node_modules/@nodelib/fs.walk/out/settings.js
 var require_settings$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/@nodelib+fs.walk@1.2.8/node_modules/@nodelib/fs.walk/out/settings.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
-	const path$5 = require("path");
+	const path$6 = require("path");
 	const fsScandir = require_out$2();
 	var Settings$1 = class {
 		constructor(_options = {}) {
@@ -13989,7 +13995,7 @@ var require_settings$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_
 			this.deepFilter = this._getValue(this._options.deepFilter, null);
 			this.entryFilter = this._getValue(this._options.entryFilter, null);
 			this.errorFilter = this._getValue(this._options.errorFilter, null);
-			this.pathSegmentSeparator = this._getValue(this._options.pathSegmentSeparator, path$5.sep);
+			this.pathSegmentSeparator = this._getValue(this._options.pathSegmentSeparator, path$6.sep);
 			this.fsScandirSettings = new fsScandir.Settings({
 				followSymbolicLinks: this._options.followSymbolicLinks,
 				fs: this._options.fs,
@@ -14042,7 +14048,7 @@ var require_out$1 = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modul
 //#region ../../node_modules/.pnpm/fast-glob@3.3.3/node_modules/fast-glob/out/readers/reader.js
 var require_reader = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/fast-glob@3.3.3/node_modules/fast-glob/out/readers/reader.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
-	const path$4 = require("path");
+	const path$5 = require("path");
 	const fsStat$2 = require_out$3();
 	const utils$6 = require_utils$1();
 	var Reader = class {
@@ -14055,7 +14061,7 @@ var require_reader = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modu
 			});
 		}
 		_getFullEntryPath(filepath) {
-			return path$4.resolve(this._settings.cwd, filepath);
+			return path$5.resolve(this._settings.cwd, filepath);
 		}
 		_makeEntry(stats, pattern$1) {
 			const entry = {
@@ -14399,7 +14405,7 @@ var require_entry = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modul
 //#region ../../node_modules/.pnpm/fast-glob@3.3.3/node_modules/fast-glob/out/providers/provider.js
 var require_provider = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/fast-glob@3.3.3/node_modules/fast-glob/out/providers/provider.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
-	const path$3 = require("path");
+	const path$4 = require("path");
 	const deep_1 = require_deep();
 	const entry_1 = require_entry$1();
 	const error_1 = require_error();
@@ -14413,7 +14419,7 @@ var require_provider = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_mo
 			this.entryTransformer = new entry_2.default(this._settings);
 		}
 		_getRootDirectory(task) {
-			return path$3.resolve(this._settings.cwd, task.base);
+			return path$4.resolve(this._settings.cwd, task.base);
 		}
 		_getReaderOptions(task) {
 			const basePath = task.base === "." ? "" : task.base;
@@ -14574,7 +14580,7 @@ var require_sync = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_module
 var require_settings = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_modules/.pnpm/fast-glob@3.3.3/node_modules/fast-glob/out/settings.js": ((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
 	exports.DEFAULT_FILE_SYSTEM_ADAPTER = void 0;
-	const fs$3 = require("fs");
+	const fs$4 = require("fs");
 	const os = require("os");
 	/**
 	* The `os.cpus` method can return zero. We expect the number of cores to be greater than zero.
@@ -14582,12 +14588,12 @@ var require_settings = /* @__PURE__ */ require_chunk.__commonJS({ "../../node_mo
 	*/
 	const CPU_COUNT = Math.max(os.cpus().length, 1);
 	exports.DEFAULT_FILE_SYSTEM_ADAPTER = {
-		lstat: fs$3.lstat,
-		lstatSync: fs$3.lstatSync,
-		stat: fs$3.stat,
-		statSync: fs$3.statSync,
-		readdir: fs$3.readdir,
-		readdirSync: fs$3.readdirSync
+		lstat: fs$4.lstat,
+		lstatSync: fs$4.lstatSync,
+		stat: fs$4.stat,
+		statSync: fs$4.statSync,
+		readdir: fs$4.readdir,
+		readdirSync: fs$4.readdirSync
 	};
 	var Settings = class {
 		constructor(_options = {}) {
@@ -14793,7 +14799,7 @@ function getDefaultIgnorePaths() {
 		"**/build/"
 	];
 }
-function getOtaFingerprintOptions(platform, path$15, options) {
+function getOtaFingerprintOptions(platform, path$16, options) {
 	return {
 		useRNCoreAutolinkingFromExpo: false,
 		platforms: [platform],
@@ -14834,7 +14840,7 @@ function getOtaFingerprintOptions(platform, path$15, options) {
 			...options.ignorePaths ?? []
 		],
 		sourceSkips: __expo_fingerprint.SourceSkips.GitIgnore | __expo_fingerprint.SourceSkips.PackageJsonScriptsAll | __expo_fingerprint.SourceSkips.PackageJsonAndroidAndIosScriptsIfNotContainRun | __expo_fingerprint.SourceSkips.ExpoConfigAll | __expo_fingerprint.SourceSkips.ExpoConfigVersions | __expo_fingerprint.SourceSkips.ExpoConfigNames | __expo_fingerprint.SourceSkips.ExpoConfigRuntimeVersionIfString | __expo_fingerprint.SourceSkips.ExpoConfigAssets | __expo_fingerprint.SourceSkips.ExpoConfigExtraSection | __expo_fingerprint.SourceSkips.ExpoConfigEASProject | __expo_fingerprint.SourceSkips.ExpoConfigSchemes,
-		extraSources: processExtraSources(options.extraSources ?? [], path$15),
+		extraSources: processExtraSources(options.extraSources ?? [], path$16),
 		debug: options.debug
 	};
 }
@@ -14874,9 +14880,9 @@ function showFingerprintDiff(diff, platform) {
 /**
 * Calculates the fingerprint of the native parts project of the project.
 */
-async function nativeFingerprint(path$15, options) {
+async function nativeFingerprint(path$16, options) {
 	const platform = options.platform;
-	return (0, __expo_fingerprint.createFingerprintAsync)(path$15, getOtaFingerprintOptions(platform, path$15, options));
+	return (0, __expo_fingerprint.createFingerprintAsync)(path$16, getOtaFingerprintOptions(platform, path$16, options));
 }
 const generateFingerprints = async () => {
 	const fingerprintConfig = await ensureFingerprintConfig();
@@ -14948,6 +14954,74 @@ const readLocalFingerprint = async () => {
 	}
 };
 
+//#endregion
+//#region src/utils/signing/keyGeneration.ts
+/**
+* Generate RSA key pair for bundle signing.
+* @param keySize Key size in bits (2048 or 4096)
+* @returns Promise resolving to key pair in PEM format
+*/
+async function generateKeyPair(keySize = 4096) {
+	return new Promise((resolve, reject) => {
+		node_crypto.default.generateKeyPair("rsa", {
+			modulusLength: keySize,
+			publicKeyEncoding: {
+				type: "spki",
+				format: "pem"
+			},
+			privateKeyEncoding: {
+				type: "pkcs8",
+				format: "pem"
+			}
+		}, (err, publicKey, privateKey) => {
+			if (err) reject(err);
+			else resolve({
+				privateKey,
+				publicKey
+			});
+		});
+	});
+}
+/**
+* Save key pair to disk with secure permissions.
+* @param keyPair Generated key pair
+* @param outputDir Directory to save keys
+*/
+async function saveKeyPair(keyPair, outputDir) {
+	await node_fs_promises.default.mkdir(outputDir, { recursive: true });
+	const privateKeyPath = node_path.default.join(outputDir, "private-key.pem");
+	const publicKeyPath = node_path.default.join(outputDir, "public-key.pem");
+	await node_fs_promises.default.writeFile(privateKeyPath, keyPair.privateKey, { mode: 384 });
+	await node_fs_promises.default.writeFile(publicKeyPath, keyPair.publicKey, { mode: 420 });
+}
+/**
+* Load private key from PEM file.
+* @param privateKeyPath Path to private key file
+* @returns Private key in PEM format
+* @throws Error if file not found or invalid format
+*/
+async function loadPrivateKey(privateKeyPath) {
+	try {
+		const privateKey = await node_fs_promises.default.readFile(privateKeyPath, "utf-8");
+		node_crypto.default.createPrivateKey(privateKey);
+		return privateKey;
+	} catch (error) {
+		throw new Error(`Failed to load private key from ${privateKeyPath}: ${error.message}`);
+	}
+}
+/**
+* Extract public key from private key.
+* @param privateKeyPEM Private key in PEM format
+* @returns Public key in PEM format
+*/
+function getPublicKeyFromPrivate(privateKeyPEM) {
+	const privateKey = node_crypto.default.createPrivateKey(privateKeyPEM);
+	return node_crypto.default.createPublicKey(privateKey).export({
+		type: "spki",
+		format: "pem"
+	});
+}
+
 //#endregion
 Object.defineProperty(exports, 'AndroidConfigParser', {
   enumerable: true,
@@ -14985,18 +15059,36 @@ Object.defineProperty(exports, 'generateFingerprints', {
     return generateFingerprints;
   }
 });
+Object.defineProperty(exports, 'generateKeyPair', {
+  enumerable: true,
+  get: function () {
+    return generateKeyPair;
+  }
+});
 Object.defineProperty(exports, 'getFingerprintDiff', {
   enumerable: true,
   get: function () {
     return getFingerprintDiff;
   }
 });
+Object.defineProperty(exports, 'getPublicKeyFromPrivate', {
+  enumerable: true,
+  get: function () {
+    return getPublicKeyFromPrivate;
+  }
+});
 Object.defineProperty(exports, 'isFingerprintEquals', {
   enumerable: true,
   get: function () {
     return isFingerprintEquals;
   }
 });
+Object.defineProperty(exports, 'loadPrivateKey', {
+  enumerable: true,
+  get: function () {
+    return loadPrivateKey;
+  }
+});
 Object.defineProperty(exports, 'nativeFingerprint', {
   enumerable: true,
   get: function () {
@@ -15027,6 +15119,12 @@ Object.defineProperty(exports, 'require_plist', {
     return require_plist;
   }
 });
+Object.defineProperty(exports, 'saveKeyPair', {
+  enumerable: true,
+  get: function () {
+    return saveKeyPair;
+  }
+});
 Object.defineProperty(exports, 'showFingerprintDiff', {
   enumerable: true,
   get: function () {