hot-updater 0.35.7 → 0.35.9

package/dist/index.mjs

@@ -1,9 +1,9 @@
-#!/usr/bin/env node
+#!/usr/bin/env -S node --
 import { C as __toESM, S as __require, _ as IosConfigParser, a as createAndInjectFingerprintFiles, b as AndroidConfigParser, c as generateFingerprints, d as getFingerprintDiff, f as showFingerprintDiff, g as warnIfExpoCNG, h as isMissingFingerprintDependencyError, i as saveKeyPair, l as nativeFingerprint, m as require_out, n as getPublicKeyFromPrivate, p as isFingerprintEquals, r as loadPrivateKey, t as generateKeyPair, u as readLocalFingerprint, v as parsePlist, x as __commonJSMin, y as require_base64_js } from "./keyGeneration-DVUvCTrW.mjs";
 import { createRequire } from "node:module";
 import fs, { createReadStream, existsSync, realpathSync, statSync } from "fs";
 import path from "path";
-import { HotUpdateDirUtil, banner, colors, createTarBrTargetFiles, createTarGzTargetFiles, createZipTargetFiles, ensureInstallPackages, getCwd, getPackageManager, loadConfig, p, printBanner, promoteBundle, readPackageUp } from "@hot-updater/cli-tools";
+import { HotUpdateDirUtil, InitError, MissingInitInputsError, banner, colors, createTarBrTargetFiles, createTarGzTargetFiles, createZipTargetFiles, ensureInstallPackages, getCwd, getHotUpdaterEnvValue, getMissingInitInputs, getMissingInitProviderInputs, getPackageManager, loadConfig, makeEnv, p, printBanner, promoteBundle, readHotUpdaterInitEnv, readPackageUp, resolveInitProviderInputs } from "@hot-updater/cli-tools";
 import { promisify } from "util";
 import crypto from "node:crypto";
 import fs$1, { constants } from "node:fs/promises";
@@ -21,7 +21,7 @@ import { fileURLToPath } from "node:url";
 import { StringDecoder } from "node:string_decoder";
 import { aborted, callbackify, debuglog, inspect, promisify as promisify$1, stripVTControlCharacters } from "node:util";
 import tty from "node:tty";
-import { exec } from "child_process";
+import { exec, spawnSync as spawnSync$1 } from "child_process";
 import { scheduler, setImmediate, setTimeout } from "node:timers/promises";
 import { serialize } from "node:v8";
 import { finished } from "node:stream/promises";
@@ -30046,6 +30046,15 @@ const appendToProjectRootGitignore = ({ cwd, globLines }) => {
 	} else fs.writeFileSync(gitIgnorePath, `${[comment, ...globLines].join("\n")}\n`, { encoding: "utf8" });
 	return true;
 };
+const isProjectFileTracked = ({ cwd, filePath }) => spawnSync$1("git", [
+	"ls-files",
+	"--error-unmatch",
+	"--",
+	filePath
+], {
+	cwd: cwd ?? getCwd(),
+	stdio: "ignore"
+}).status === 0;
 //#endregion
 //#region src/utils/signing/bundleSigning.ts
 /**
@@ -30742,7 +30751,415 @@ const ensureInstallPackages$1 = async (buildPluginPackages) => {
 	await ensureInstallPackages(buildPluginPackages, { versionResolver: ensurePackageVersion });
 };
 //#endregion
+//#region ../../plugins/aws/dist/init/index.mjs
+const AWS_AUTH_MODES = [
+	"local-session",
+	"shared-profile",
+	"sso",
+	"account"
+];
+const isAwsAuthMode = (value) => value !== void 0 && AWS_AUTH_MODES.some((mode) => mode === value);
+const AWS_REGION_VALUES = [
+	"af-south-1",
+	"ap-east-1",
+	"ap-east-2",
+	"ap-northeast-1",
+	"ap-northeast-2",
+	"ap-northeast-3",
+	"ap-south-1",
+	"ap-south-2",
+	"ap-southeast-1",
+	"ap-southeast-2",
+	"ap-southeast-3",
+	"ap-southeast-4",
+	"ap-southeast-5",
+	"ap-southeast-6",
+	"ap-southeast-7",
+	"ca-central-1",
+	"ca-west-1",
+	"cn-north-1",
+	"cn-northwest-1",
+	"eu-central-1",
+	"eu-central-2",
+	"eu-north-1",
+	"eu-south-1",
+	"eu-south-2",
+	"eu-west-1",
+	"eu-west-2",
+	"eu-west-3",
+	"il-central-1",
+	"me-central-1",
+	"me-south-1",
+	"mx-central-1",
+	"sa-east-1",
+	"us-east-1",
+	"us-east-2",
+	"us-gov-east-1",
+	"us-gov-west-1",
+	"us-west-1",
+	"us-west-2"
+];
+const isAwsRegionValue = (value) => value !== void 0 && AWS_REGION_VALUES.some((region) => region === value);
+const initProvider$3 = {
+	label: "AWS S3 + Lambda@Edge",
+	inputs: {
+		authMode: {
+			envKey: "HOT_UPDATER_AWS_AUTH_MODE",
+			help: "AWS authentication mode: local-session, shared-profile, sso, or account",
+			prompt: {
+				message: "Select the mode to login to AWS",
+				type: "select"
+			},
+			validate: isAwsAuthMode
+		},
+		profile: {
+			envKey: "HOT_UPDATER_AWS_PROFILE",
+			help: "AWS profile name",
+			requiredWhen: (inputs) => inputs.authMode === "shared-profile" || inputs.authMode === "sso",
+			requirementHint: "required for shared-profile and sso auth",
+			prompt: {
+				defaultValue: "default",
+				message: "Enter the AWS profile name",
+				placeholder: "default",
+				type: "text"
+			}
+		},
+		accessKeyId: {
+			envKey: "HOT_UPDATER_S3_ACCESS_KEY_ID",
+			help: "AWS access key ID",
+			persistence: "with-consent",
+			requiredWhen: (inputs) => inputs.authMode === "account",
+			requirementHint: "required for account auth",
+			prompt: {
+				message: "Enter your AWS Access Key ID",
+				placeholder: "AKIA...",
+				type: "text"
+			}
+		},
+		secretAccessKey: {
+			envKey: "HOT_UPDATER_S3_SECRET_ACCESS_KEY",
+			help: "AWS secret access key",
+			persistence: "with-consent",
+			requiredWhen: (inputs) => inputs.authMode === "account",
+			requirementHint: "required for account auth",
+			prompt: {
+				message: "Enter your AWS Secret Access Key",
+				type: "password"
+			}
+		},
+		bucketName: {
+			envKey: "HOT_UPDATER_S3_BUCKET_NAME",
+			help: "S3 bucket name",
+			prompt: {
+				defaultValue: "hot-updater-storage",
+				message: "Enter the name of the new S3 Bucket",
+				placeholder: "hot-updater-storage",
+				type: "text"
+			}
+		},
+		bucketRegion: {
+			envKey: "HOT_UPDATER_S3_REGION",
+			help: "S3 bucket region",
+			prompt: {
+				message: "Enter AWS region for the S3 bucket",
+				type: "select"
+			},
+			validate: isAwsRegionValue
+		},
+		lambdaName: {
+			envKey: "HOT_UPDATER_AWS_LAMBDA_NAME",
+			help: "Lambda@Edge function name",
+			prompt: {
+				defaultValue: "hot-updater-edge",
+				message: "Enter the name of the Lambda@Edge function",
+				placeholder: "hot-updater-edge",
+				type: "text"
+			}
+		},
+		distributionId: {
+			envKey: "HOT_UPDATER_CLOUDFRONT_DISTRIBUTION_ID",
+			help: "Existing CloudFront distribution ID",
+			optional: true
+		},
+		migrationApproved: {
+			envKey: "HOT_UPDATER_AWS_MIGRATION_APPROVED",
+			help: "Allow pending Hot Updater S3 migrations (true)",
+			optional: true,
+			prompt: {
+				message: "Apply pending Hot Updater S3 migrations during init and future infrastructure updates?",
+				type: "confirm"
+			},
+			validate: (value) => value === "true"
+		}
+	}
+};
+//#endregion
+//#region ../../plugins/cloudflare/dist/init/index.mjs
+const initProvider$2 = {
+	label: "Cloudflare D1 + R2 + Worker",
+	inputs: {
+		accountId: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_ACCOUNT_ID",
+			help: "Cloudflare account ID",
+			prompt: {
+				message: "Account List",
+				type: "select"
+			}
+		},
+		apiToken: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_API_TOKEN",
+			help: "API token with D1 edit permission",
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the Cloudflare D1 API Token",
+				type: "password"
+			}
+		},
+		bucketName: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_BUCKET_NAME",
+			help: "R2 bucket name",
+			prompt: {
+				defaultValue: "hot-updater-storage",
+				message: "Enter the name of the new R2 Bucket",
+				placeholder: "hot-updater-storage",
+				type: "text"
+			}
+		},
+		accessKeyId: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_ACCESS_KEY_ID",
+			help: "R2 access key ID",
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the R2 Access Key ID",
+				type: "password"
+			}
+		},
+		secretAccessKey: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_SECRET_ACCESS_KEY",
+			help: "R2 secret access key",
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the R2 Secret Access Key",
+				type: "password"
+			}
+		},
+		workerName: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_WORKER_NAME",
+			help: "Worker name",
+			prompt: {
+				defaultValue: "hot-updater",
+				message: "Enter the name of the worker",
+				placeholder: "hot-updater",
+				type: "text"
+			}
+		},
+		d1DatabaseId: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_ID",
+			help: "D1 database ID"
+		},
+		d1DatabaseName: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_D1_DATABASE_NAME",
+			help: "D1 database name",
+			prompt: {
+				defaultValue: "hot-updater",
+				message: "Enter the name of the new D1 Database",
+				placeholder: "hot-updater",
+				type: "text"
+			}
+		},
+		r2Private: {
+			envKey: "HOT_UPDATER_CLOUDFLARE_R2_PRIVATE",
+			help: "Whether the R2 bucket is private (true or false)",
+			prompt: {
+				message: "Make R2 bucket private?",
+				type: "confirm"
+			},
+			validate: (value) => value === "true" || value === "false"
+		}
+	}
+};
+//#endregion
+//#region ../../plugins/firebase/dist/init/index.mjs
+const isFirebaseRegion = (value) => value !== void 0 && /^[a-z]+(?:-[a-z]+)+[0-9]+$/.test(value);
+const isFirebaseProjectId = (value) => value !== void 0 && /^[a-z][a-z0-9-]{4,28}[a-z0-9]$/.test(value);
+const initProvider$1 = {
+	label: "Firebase",
+	inputs: {
+		projectId: {
+			envKey: "HOT_UPDATER_FIREBASE_PROJECT_ID",
+			help: "Firebase project ID",
+			prompt: {
+				message: "Enter the Firebase project ID:",
+				placeholder: "hot-updater-app",
+				type: "text"
+			},
+			validate: isFirebaseProjectId
+		},
+		region: {
+			envKey: "HOT_UPDATER_FIREBASE_REGION",
+			help: "Firebase Functions region",
+			prompt: {
+				message: "Select Region",
+				type: "select"
+			},
+			validate: isFirebaseRegion
+		},
+		applicationCredentials: {
+			envKey: "GOOGLE_APPLICATION_CREDENTIALS",
+			help: "Service account JSON path",
+			optional: true,
+			persistence: "with-consent",
+			prompt: {
+				message: "Enter the service account JSON path (press Enter to configure later)",
+				placeholder: "~/Downloads/firebase-service-account.json",
+				type: "text"
+			}
+		}
+	}
+};
+//#endregion
+//#region ../../plugins/supabase/dist/init/index.mjs
+const SUPABASE_REGION_VALUES = [
+	"ap-east-1",
+	"ap-northeast-1",
+	"ap-northeast-2",
+	"ap-south-1",
+	"ap-southeast-1",
+	"ap-southeast-2",
+	"ca-central-1",
+	"eu-central-1",
+	"eu-central-2",
+	"eu-north-1",
+	"eu-west-1",
+	"eu-west-2",
+	"eu-west-3",
+	"sa-east-1",
+	"us-east-1",
+	"us-east-2",
+	"us-west-1",
+	"us-west-2"
+];
+const isSupabaseRegion = (value) => value !== void 0 && SUPABASE_REGION_VALUES.some((region) => region === value);
+const isSupabaseFunctionName = (value) => value !== void 0 && /^[A-Za-z][A-Za-z0-9_-]*$/.test(value);
+//#endregion
+//#region src/commands/initProviders.ts
+const INIT_PROVIDER_PACKAGES = {
+	cloudflare: {
+		definition: initProvider$2,
+		devDependencies: ["wrangler"],
+		load: () => import("@hot-updater/cloudflare/iac"),
+		packageName: "@hot-updater/cloudflare"
+	},
+	aws: {
+		definition: initProvider$3,
+		devDependencies: [],
+		load: () => import("@hot-updater/aws/iac"),
+		packageName: "@hot-updater/aws"
+	},
+	supabase: {
+		definition: {
+			label: "Supabase",
+			inputs: {
+				projectId: {
+					envKey: "HOT_UPDATER_SUPABASE_PROJECT_ID",
+					help: "Supabase project reference"
+				},
+				projectName: {
+					envKey: "HOT_UPDATER_SUPABASE_PROJECT_NAME",
+					help: "Project name used when creating a Supabase project",
+					optional: true,
+					prompt: {
+						defaultValue: "hot-updater",
+						message: "Enter a name for the new Supabase project",
+						placeholder: "hot-updater",
+						type: "text"
+					}
+				},
+				organizationSlug: {
+					envKey: "HOT_UPDATER_SUPABASE_ORGANIZATION_SLUG",
+					help: "Organization slug used when creating a Supabase project",
+					optional: true,
+					prompt: {
+						message: "Select a Supabase organization",
+						type: "select"
+					}
+				},
+				region: {
+					envKey: "HOT_UPDATER_SUPABASE_REGION",
+					help: "Region used when creating a Supabase project",
+					optional: true,
+					prompt: {
+						defaultValue: "us-east-1",
+						message: "Select a region for the new Supabase project",
+						type: "select"
+					},
+					validate: isSupabaseRegion
+				},
+				accessToken: {
+					envKey: "SUPABASE_ACCESS_TOKEN",
+					help: "Supabase personal access token",
+					persistence: "with-consent",
+					preflight: false,
+					prompt: {
+						message: "Enter your Supabase personal access token",
+						type: "password"
+					}
+				},
+				bucketName: {
+					envKey: "HOT_UPDATER_SUPABASE_BUCKET_NAME",
+					help: "Storage bucket name",
+					prompt: {
+						defaultValue: "hot-updater-storage",
+						message: "Enter a name for the new storage bucket",
+						placeholder: "hot-updater-storage",
+						type: "text"
+					}
+				},
+				functionName: {
+					envKey: "HOT_UPDATER_SUPABASE_FUNCTION_NAME",
+					help: "Edge Function name",
+					prompt: {
+						defaultValue: "update-server",
+						message: "Enter a name for the edge function",
+						placeholder: "update-server",
+						type: "text"
+					},
+					validate: isSupabaseFunctionName
+				},
+				databasePassword: {
+					envKey: "HOT_UPDATER_SUPABASE_DB_PASSWORD",
+					help: "Database password, when required by the linked project",
+					optional: true,
+					persistence: "with-consent",
+					prompt: {
+						message: "Enter your Supabase database password (press Enter to skip if none)",
+						type: "password"
+					}
+				}
+			}
+		},
+		devDependencies: [],
+		load: () => import("@hot-updater/supabase/iac"),
+		packageName: "@hot-updater/supabase"
+	},
+	firebase: {
+		definition: initProvider$1,
+		devDependencies: ["firebase-tools", "firebase-admin"],
+		load: () => import("@hot-updater/firebase/iac"),
+		packageName: "@hot-updater/firebase"
+	}
+};
+const isInitProvider = (value) => value !== void 0 && Object.hasOwn(INIT_PROVIDER_PACKAGES, value);
+const INIT_PROVIDER_NAMES = Object.keys(INIT_PROVIDER_PACKAGES).filter(isInitProvider);
+//#endregion
 //#region src/commands/init.ts
+const INIT_BUILD_ENV_KEY = "HOT_UPDATER_INIT_BUILD";
+const INIT_PROVIDER_ENV_KEY = "HOT_UPDATER_INIT_PROVIDER";
+const BUILD_PLUGIN_KEYS = [
+	"bare",
+	"rock",
+	"expo"
+];
 const REQUIRED_PACKAGES = {
 	dependencies: ["@hot-updater/react-native"],
 	devDependencies: ["dotenv"]
@@ -30769,74 +31186,91 @@ const BUILD_PLUGINS = {
 		devDependencies: ["@hot-updater/expo"]
 	}
 };
-const PROVIDER_LABELS = {
-	cloudflare: "Cloudflare D1 + R2 + Worker",
-	aws: "AWS S3 + Lambda@Edge",
-	supabase: "Supabase",
-	firebase: "Firebase"
-};
-const PACKAGE_MAP = {
-	supabase: {
-		dependencies: [],
-		devDependencies: ["@hot-updater/supabase"]
-	},
-	aws: {
-		dependencies: [],
-		devDependencies: ["@hot-updater/aws"]
-	},
-	cloudflare: {
-		dependencies: [],
-		devDependencies: ["wrangler", "@hot-updater/cloudflare"]
-	},
-	firebase: {
-		dependencies: [],
-		devDependencies: [
-			"firebase-tools",
-			"firebase-admin",
-			"@hot-updater/firebase"
-		]
-	}
-};
-const resolveBuildPlugin = async (flag) => {
-	if (flag) return BUILD_PLUGINS[flag];
-	const selected = await p.select({
-		message: "Select a build plugin",
-		options: Object.values(BUILD_PLUGINS).map((plugin) => ({
-			value: plugin,
-			label: plugin.label,
-			hint: plugin.hint
-		}))
-	});
-	if (p.isCancel(selected)) process.exit(0);
-	return selected;
+const isBuildPluginKey = (value) => {
+	return value !== void 0 && Object.keys(BUILD_PLUGINS).includes(value);
+};
+const collectInitChoices = async (options) => {
+	const { env: existingEnv } = await readHotUpdaterInitEnv(process.cwd(), options.envFile);
+	const savedBuild = getHotUpdaterEnvValue(existingEnv, INIT_BUILD_ENV_KEY);
+	const savedProvider = getHotUpdaterEnvValue(existingEnv, INIT_PROVIDER_ENV_KEY);
+	const build = options.build ?? (isBuildPluginKey(savedBuild) ? savedBuild : null);
+	const provider = options.provider ?? (isInitProvider(savedProvider) ? savedProvider : null);
+	if (options.envFile !== void 0) {
+		const missingInputs = [...getMissingInitInputs({
+			[INIT_BUILD_ENV_KEY]: build ?? void 0,
+			[INIT_PROVIDER_ENV_KEY]: provider ?? void 0
+		}), ...provider ? getMissingInitProviderInputs({
+			inputs: resolveInitProviderInputs(existingEnv, INIT_PROVIDER_PACKAGES[provider].definition),
+			preflightOnly: true,
+			provider: INIT_PROVIDER_PACKAGES[provider].definition
+		}) : []];
+		if (missingInputs.length > 0) throw new MissingInitInputsError([...new Set(missingInputs)]);
+	}
+	if (build && provider) return {
+		build,
+		provider
+	};
+	return await p.group({
+		build: () => build ? Promise.resolve(build) : p.select({
+			message: "Select a build plugin",
+			options: BUILD_PLUGIN_KEYS.map((value) => ({
+				value,
+				label: BUILD_PLUGINS[value].label,
+				hint: BUILD_PLUGINS[value].hint
+			}))
+		}),
+		provider: () => provider ? Promise.resolve(provider) : p.select({
+			message: "Select a provider",
+			options: INIT_PROVIDER_NAMES.map((value) => ({
+				value,
+				label: INIT_PROVIDER_PACKAGES[value].definition.label
+			}))
+		})
+	}, { onCancel: () => process.exit(0) });
 };
-const resolveProvider = async (flag) => {
-	if (flag) return flag;
-	const selected = await p.select({
-		message: "Select a provider",
-		options: Object.keys(PROVIDER_LABELS).map((value) => ({
-			value,
-			label: PROVIDER_LABELS[value]
-		}))
-	});
-	if (p.isCancel(selected)) process.exit(0);
-	return selected;
+const handleInitError = (error) => {
+	if (!(error instanceof InitError)) return false;
+	p.log.error(error.message);
+	process.exitCode = 1;
+	return true;
 };
 const init = async (options = {}) => {
 	printBanner$1();
-	const buildPluginPackage = await resolveBuildPlugin(options.build);
-	const provider = await resolveProvider(options.provider);
+	let choices;
+	try {
+		choices = await collectInitChoices(options);
+	} catch (error) {
+		if (handleInitError(error)) return;
+		throw error;
+	}
+	if (isProjectFileTracked({
+		cwd: process.cwd(),
+		filePath: ".env.hotupdater"
+	})) {
+		p.log.error("Refusing to save init credentials because .env.hotupdater is tracked by Git. Untrack it before running init.");
+		process.exitCode = 1;
+		return;
+	}
+	if (appendToProjectRootGitignore({ globLines: [
+		".env.hotupdater",
+		HotUpdateDirUtil.outputGitignorePath,
+		HotUpdateDirUtil.logGitignorePath
+	] })) p.log.info(".gitignore has been modified to include hot-updater entries");
+	const buildPluginPackage = BUILD_PLUGINS[choices.build];
+	const provider = choices.provider;
+	const providerPackage = INIT_PROVIDER_PACKAGES[provider];
+	await makeEnv({
+		[INIT_BUILD_ENV_KEY]: choices.build,
+		[INIT_PROVIDER_ENV_KEY]: provider
+	});
 	try {
 		await ensureInstallPackages$1({
-			dependencies: [
-				...buildPluginPackage.dependencies,
-				...REQUIRED_PACKAGES.dependencies,
-				...PACKAGE_MAP[provider].dependencies
-			],
+			dependencies: [...buildPluginPackage.dependencies, ...REQUIRED_PACKAGES.dependencies],
 			devDependencies: [
 				...buildPluginPackage.devDependencies,
 				...REQUIRED_PACKAGES.devDependencies,
-				...PACKAGE_MAP[provider].devDependencies
+				...providerPackage.devDependencies,
+				providerPackage.packageName
 			]
 		});
 	} catch (e) {
@@ -30844,29 +31278,38 @@ const init = async (options = {}) => {
 		else if (e instanceof Error) p.log.error(e.message);
 		process.exit(1);
 	}
-	const build = buildPluginPackage.name;
-	switch (provider) {
-		case "supabase":
-			await (await import("@hot-updater/supabase/iac")).runInit({ build });
-			break;
-		case "cloudflare":
-			await (await import("@hot-updater/cloudflare/iac")).runInit({ build });
-			break;
-		case "aws":
-			await (await import("@hot-updater/aws/iac")).runInit({ build });
-			break;
-		case "firebase":
-			await (await import("@hot-updater/firebase/iac")).runInit({ build });
-			break;
-		default: throw new Error("Invalid provider");
+	const runInitOptions = {
+		build: buildPluginPackage.name,
+		envFile: options.envFile
+	};
+	try {
+		await (await providerPackage.load()).runInit(runInitOptions);
+	} catch (error) {
+		if (handleInitError(error)) return;
+		throw error;
 	}
-	if (appendToProjectRootGitignore({ globLines: [
-		".env.hotupdater",
-		HotUpdateDirUtil.outputGitignorePath,
-		HotUpdateDirUtil.logGitignorePath
-	] })) p.log.info(".gitignore has been modified to include hot-updater entries");
 };
 //#endregion
+//#region src/commands/initHelp.ts
+const formatInput = ({ envKey, help, optional, requirementHint }) => {
+	return `  ${envKey}  ${help} (${optional ? "optional" : requirementHint ? requirementHint : "required"})`;
+};
+const initHelp = [
+	"",
+	"Environment file replay:",
+	"  Re-run init with saved values to reconcile provider infrastructure:",
+	"  $ hot-updater init --provider aws --env-file .env.hotupdater",
+	"",
+	"  --env-file disables init prompts and reports every missing value.",
+	"  Interactive init asks once before saving credential inputs for reuse.",
+	"",
+	"Provider inputs:",
+	...INIT_PROVIDER_NAMES.flatMap((providerName) => {
+		const provider = INIT_PROVIDER_PACKAGES[providerName].definition;
+		return [`\n${providerName} (${provider.label})`, ...Object.values(provider.inputs).map(formatInput)];
+	})
+].join("\n");
+//#endregion
 //#region src/commands/patch.ts
 const createPatch = async (options) => {
 	printBanner$1();
@@ -54621,16 +55064,11 @@ const parseRolloutCohortCount = (value) => {
 };
 const program = new Command$1();
 program.name("hot-updater").description(banner(version)).version(version);
-program.command("init").description("Initialize Hot Updater").addOption(new Option("--provider <provider>", "provider to use; skips the prompt").choices([
-	"cloudflare",
-	"aws",
-	"supabase",
-	"firebase"
-])).addOption(new Option("--build <plugin>", "build plugin to use; skips the prompt").choices([
+program.command("init").description("Initialize Hot Updater").addOption(new Option("--provider <provider>", "provider to use; skips the prompt").choices(INIT_PROVIDER_NAMES)).addOption(new Option("--build <plugin>", "build plugin to use; skips the prompt").choices([
 	"bare",
 	"rock",
 	"expo"
-])).action((options) => init(options));
+])).option("--env-file <path>", "load saved init inputs and fail if any are missing").addHelpText("after", initHelp).action((options) => init(options));
 program.command("doctor").description("Check the health of Hot Updater").option("--server-base-url <url>", "server base URL used by update checks (doctor appends /version)").option("--json", "output machine-readable doctor result").action(handleDoctor);
 const fingerprintCommand = program.command("fingerprint").description("Generate fingerprint");
 fingerprintCommand.action(handleFingerprint);
@@ -54671,8 +55109,11 @@ program.command("deploy").description("deploy a new version").addOption(platform
 	try {
 		return normalizeRolloutPercentage(value);
 	} catch (error) {
-		p.log.error(error.message);
-		process.exit(1);
+		if (error instanceof Error) {
+			p.log.error(error.message);
+			process.exit(1);
+		}
+		throw error;
 	}
 }).default(100)).addOption(interactiveCommandOption).addOption(new Option("-c, --channel <channel>", "specify the channel to deploy").default(DEFAULT_CHANNEL)).addOption(new Option("-m, --message <message>", "Specify a custom message for this deployment. If not provided, the latest git commit message will be used as the deployment message")).action(async (options) => deploy(options));
 program.command("patch").description("create patch artifacts for a deployed bundle").requiredOption("-b, --bundle-id <bundleId>", "target bundle id that should receive the patch artifact").requiredOption("--base-bundle-id <baseBundleId>", "older bundle id to use as the patch base").addOption(platformCommandOption).addOption(interactiveCommandOption).addOption(new Option("-c, --channel <channel>", "specify the channel used to load config").default(DEFAULT_CHANNEL)).action(async (options) => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hot-updater",
   "type": "module",
-  "version": "0.35.7",
+  "version": "0.35.9",
   "engines": {
     "node": ">=20.19.0"
   },
@@ -49,13 +49,13 @@
   },
   "dependencies": {
     "jiti": "2.6.1",
-    "@hot-updater/android-helper": "0.35.7",
-    "@hot-updater/apple-helper": "0.35.7",
-    "@hot-updater/cli-tools": "0.35.7",
-    "@hot-updater/console": "0.35.7",
-    "@hot-updater/core": "0.35.7",
-    "@hot-updater/plugin-core": "0.35.7",
-    "@hot-updater/server": "0.35.7"
+    "@hot-updater/apple-helper": "0.35.9",
+    "@hot-updater/core": "0.35.9",
+    "@hot-updater/plugin-core": "0.35.9",
+    "@hot-updater/server": "0.35.9",
+    "@hot-updater/cli-tools": "0.35.9",
+    "@hot-updater/console": "0.35.9",
+    "@hot-updater/android-helper": "0.35.9"
   },
   "devDependencies": {
     "@bacons/xcode": "1.0.0-alpha.24",
@@ -77,13 +77,14 @@
     "semver": "^7.6.3",
     "tsdown": "0.21.6",
     "sql-formatter": "15.6.10",
-    "typescript": "6.0.2",
-    "@hot-updater/cloudflare": "0.35.7",
-    "@hot-updater/server": "0.35.7",
-    "@hot-updater/aws": "0.35.7",
-    "@hot-updater/supabase": "0.35.7",
-    "@hot-updater/firebase": "0.35.7",
-    "@hot-updater/test-utils": "0.35.7"
+    "@typescript/native": "npm:typescript@7.0.2",
+    "typescript": "npm:@typescript/typescript6@6.0.2",
+    "@hot-updater/cloudflare": "0.35.9",
+    "@hot-updater/server": "0.35.9",
+    "@hot-updater/firebase": "0.35.9",
+    "@hot-updater/supabase": "0.35.9",
+    "@hot-updater/test-utils": "0.35.9",
+    "@hot-updater/aws": "0.35.9"
   },
   "peerDependencies": {
     "@expo/fingerprint": "*",