ota-manager 1.0.4 → 1.0.6

package/README.md

@@ -1,56 +1,143 @@
-# ota-manager
-
-Enterprise-grade Over-The-Air (OTA) update manager for Astro and static web projects.
-
-## Features
-
-- 🚀 **Multi-Provider Support**: Switch between GitHub and GitLab seamlessly.
-- 🏗️ **Multi-Channel Deployment**: Manage 'training' and 'live' environments independently.
-- 🔒 **Secure PAT Management**: Separate Read-only tokens (for APK) and Developer tokens (for deployment).
-- 🛡️ **Pre-deployment Health Check**: Automatic version gap checking and token verification.
-- 📦 **Smart ZIP Archiving**: POSIX-compliant compression for Android compatibility.
-
-## Installation
-
-```bash
-npm install ota-manager --save-dev
-```
-
-## Quick Start
-
-### 1. Initialize Configuration
-```bash
-npx ota-updates register gitlab
-```
-Follow the interactive prompts to set up your repository URL and Access Tokens.
-
-### 2. Check Status
-```bash
-npx ota-updates status
-```
-
-### 3. Deploy Update
-```bash
-npx ota-updates training
-```
-
-## Configuration
-
-The manager stores metadata in `ota-config.json` and sensitive tokens in your `.env` file.
-
-```json
-// ota-config.json
-{
-  "strategy": "gitlab",
-  "configs": {
-    "gitlab": {
-      "repo": "https://gitlab.com/your-user/your-ota-repo",
-      "branch": "main"
-    }
-  }
-}
-```
-
-## License
-
-MIT © First Ryan
+# 📦 ota-manager
+
+<div align="center">
+  <h3>Enterprise-Grade Over-The-Air (OTA) Update Manager for Astro, Capacitor, and Static Web Apps</h3>
+  <p>Seamlessly deploy live updates to mobile WebViews and web apps without going through App Store or Play Store reviews.</p>
+</div>
+
+---
+
+## ✨ Why `ota-manager`?
+
+Modern mobile hybrid apps (built with Astro, Vite, or Capacitor) require a robust, foolproof update pipeline. `ota-manager` provides an end-to-end automated deployment system with built-in safeguards against common deployment pitfalls like broken asset paths, zip bombs, and token leaks.
+
+### 🌟 Key Features
+
+*   🚀 **Universal & Project-Agnostic**: Dynamically detects `process.cwd()` to integrate flawlessly into any Astro, Vite, Next.js, or static web project.
+*   🔄 **Flexible CLI Shorthands**: Supports both `npx ota-manager` and `npx ota-updates`. Features lightning-fast shorthands like `npx ota-manager -d training` and `-d live`.
+*   🔀 **Multi-Provider & Multi-Channel Routing**: Built-in support for GitHub and GitLab strategies. Configure independent target repositories and branches for `training` vs `live` environments.
+*   🛡️ **Size Guardian Protocol**: Pre-flight audit of your `dist/` directory and generated ZIP archive to prevent Zip Bombs (>50MB threshold protection).
+*   💥 **Tsar Bomba Path Cleanse (`flatten-dist.cjs`)**: Post-build normalization of absolute asset paths (`/assets/`) to relative paths (`./assets/`) to guarantee flawless Capacitor WebView navigation.
+*   🙈 **API Route Protection**: Automatically isolates and hides `/src/pages/api` during static export/build to prevent build failures, then restores them seamlessly.
+*   🔐 **Security Auditor (`ota-security.js`)**: Automated inspection of Personal Access Tokens (PAT) to prevent token leaks or overly broad repository access.
+*   📡 **E2E Connection Simulation**: Built-in `test` command to simulate push and read capabilities against your Git provider before executing actual deployments.
+
+---
+
+## 📦 Installation
+
+Install `ota-manager` as a development dependency in your project:
+
+```bash
+npm install ota-manager --save-dev
+```
+
+---
+
+## 🚀 Quick Start Guide
+
+### 1. Initialize Infrastructure
+Register your Git provider (GitHub or GitLab) to initialize `ota-config.json` and `.env` credentials:
+```bash
+npx ota-manager register github
+# or: npx ota-manager register gitlab
+```
+*Follow the interactive prompts to enter your repository URL and Access Tokens.*
+
+### 2. Verify Connection & Security
+Run an end-to-end simulation to ensure your tokens and repository permissions are perfectly configured:
+```bash
+npx ota-manager test
+```
+
+### 3. Check Version Gap
+Compare your local `.env` app version against the remote release manifest:
+```bash
+npx ota-manager status
+```
+
+### 4. Deploy Update
+Deploy your build to the `training` or `live` channel with automated pre-flight checks, path cleansing, and size auditing:
+```bash
+# Deploy to Training Channel
+npx ota-manager deploy training
+# Shorthand alias:
+npx ota-manager -d training
+
+# Deploy to Live (Production) Channel
+npx ota-manager deploy live
+# Shorthand alias:
+npx ota-manager -d live
+```
+
+---
+
+## ⚙️ Advanced Configuration
+
+`ota-manager` stores its active strategy in `ota-config.json` and sensitive tokens in your `.env` file.
+
+### Flexible Channel Routing (`ota-config.json`)
+You can configure different branches or even different repositories for your `training` and `live` channels:
+
+```json
+{
+  "strategy": "github",
+  "github": {
+    "repo": "https://github.com/your-org/your-ota-repo",
+    "branch": "main",
+    "channels": {
+      "training": {
+        "branch": "main"
+      },
+      "live": {
+        "branch": "ota-live"
+      }
+    }
+  }
+}
+```
+
+### Environment Variables (`.env`)
+The manager automatically updates your versioning and OTA target URLs during deployment:
+```env
+GITHUB_DEV_PAT="ghp_your_developer_token_here"
+PUBLIC_APP_VERSION_ANDROID=1.0.4
+PUBLIC_APP_VERSION_IOS=1.0.4
+PUBLIC_OTA_UPDATE_URL=https://raw.githubusercontent.com/your-org/your-ota-repo/main/manifest.json
+```
+
+---
+
+## 🛡️ Built-in Safeguards Architecture
+
+```text
+┌──────────────────────────────────────────────────────────┐
+│                   npx ota-manager -d live                │
+└─────────────────────────────┬────────────────────────────┘
+                              ▼
+┌──────────────────────────────────────────────────────────┐
+│ 1. Pre-Flight Check: ota-version & verify-dist           │
+└─────────────────────────────┬────────────────────────────┘
+                              ▼
+┌──────────────────────────────────────────────────────────┐
+│ 2. API Route Protection: Hides /src/pages/api            │
+└─────────────────────────────┬────────────────────────────┘
+                              ▼
+┌──────────────────────────────────────────────────────────┐
+│ 3. Build & Tsar Bomba Cleanse: Normalizes /assets/ paths │
+└─────────────────────────────┬────────────────────────────┘
+                              ▼
+┌──────────────────────────────────────────────────────────┐
+│ 4. Size Guardian Audit: Validates dist/ & ZIP < 50MB     │
+└─────────────────────────────┬────────────────────────────┘
+                              ▼
+┌──────────────────────────────────────────────────────────┐
+│ 5. Remote Push & Manifest Update (GitHub / GitLab)       │
+└──────────────────────────────────────────────────────────┘
+```
+
+---
+
+## 📄 License
+
+MIT © [First Ryan](https://github.com/firstryan)

package/lib/ota-deploy.js

@@ -1,284 +1,315 @@
-import fs from 'fs';
-import path from 'path';
-import { execSync } from 'child_process';
-import { fileURLToPath } from 'url';
-import OTA_CONFIG from './ota-config.js';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const rootDir = process.cwd();
-
-const OTA_RELEASES_DIR = path.join(rootDir, 'ota-releases');
-const DIST_DIR = path.join(rootDir, 'dist');
-const ENV_PATH = path.join(rootDir, '.env');
-const MAIN_MANIFEST_PATH = path.join(rootDir, 'src', 'data', 'update-data.json');
-const API_DIR = path.join(rootDir, 'src', 'pages', 'api');
-const API_BACKUP_DIR = path.join(rootDir, 'src', '_api-backup');
-
-const VERIFY_SCRIPT = path.join(__dirname, 'verify-dist.cjs');
-const FLATTEN_SCRIPT = path.join(__dirname, 'flatten-dist.cjs');
-
-function hideApi() {
-    if (fs.existsSync(API_DIR)) {
-        console.log('🙈 Hiding API routes (Using Robust Move)...');
-        try {
-            if (fs.existsSync(API_BACKUP_DIR)) fs.rmSync(API_BACKUP_DIR, { recursive: true, force: true });
-            
-            if (process.platform === 'win32') {
-                try {
-                    execSync(`robocopy "${API_DIR}" "${API_BACKUP_DIR}" /E /MOVE /NFL /NDL /NJH /NJS`, { stdio: 'ignore' });
-                } catch (e) {
-                    if (fs.existsSync(API_DIR)) throw e;
-                }
-            } else {
-                fs.renameSync(API_DIR, API_BACKUP_DIR);
-            }
-            console.log('✅ API routes hidden.');
-        } catch (e) {
-            console.warn(`⚠️  Warning: Could not hide API routes (${e.message}).`);
-        }
-    }
-}
-
-function showApi() {
-    if (fs.existsSync(API_BACKUP_DIR)) {
-        console.log('🐵 Restoring API routes...');
-        try {
-            if (process.platform === 'win32') {
-                try {
-                    execSync(`robocopy "${API_BACKUP_DIR}" "${API_DIR}" /E /MOVE /NFL /NDL /NJH /NJS`, { stdio: 'ignore' });
-                } catch (e) {
-                    if (fs.existsSync(API_BACKUP_DIR)) throw e;
-                }
-            } else {
-                if (fs.existsSync(API_DIR)) fs.rmSync(API_DIR, { recursive: true, force: true });
-                fs.renameSync(API_BACKUP_DIR, API_DIR);
-            }
-            console.log('✅ API routes restored.');
-        } catch (e) {
-            console.error(`❌ Error: Failed to restore API routes: ${e.message}`);
-        }
-    }
-}
-
-const envContent = fs.existsSync(ENV_PATH) ? fs.readFileSync(ENV_PATH, 'utf-8') : '';
-const githubPat = envContent.match(/GITHUB_DEV_PAT=(.*)/)?.[1]?.trim().replace(/^"|"$/g, '') || '';
-const gitlabPat = envContent.match(/GITLAB_DEV_PAT=(.*)/)?.[1]?.trim().replace(/^"|"$/g, '') || '';
-
-const MAX_OTA_SIZE_MB = 50;
-
-function getDirSize(dirPath) {
-    let size = 0;
-    if (!fs.existsSync(dirPath)) return 0;
-    const files = fs.readdirSync(dirPath);
-    for (let i = 0; i < files.length; i++) {
-        const filePath = path.join(dirPath, files[i]);
-        const stats = fs.statSync(filePath);
-        if (stats.isFile()) {
-            size += stats.size;
-        } else if (stats.isDirectory()) {
-            size += getDirSize(filePath);
-        }
-    }
-    return size;
-}
-
-function getRawBaseUrl(repoUrl, strategy, branch = 'main') {
-    let base = repoUrl.replace(/\/$/, '');
-    if (strategy === 'github') {
-        return base.replace('github.com', 'raw.githubusercontent.com') + `/${branch}`;
-    } else if (strategy === 'gitlab') {
-        return base + `/-/raw/${branch}`;
-    }
-    return base;
-}
-
-async function deployOTA() {
-    console.log(`🚀 Starting OTA Deployment (Strategy: ${OTA_CONFIG.strategy})...`);
-
-    const argChannel = process.argv[2] || 'training'; 
-    
-    try {
-        if (!fs.existsSync(OTA_RELEASES_DIR)) fs.mkdirSync(OTA_RELEASES_DIR);
-        
-        const config = OTA_CONFIG[OTA_CONFIG.strategy];
-        if (!config || !config.repo) {
-            throw new Error(`Repository not configured for strategy "${OTA_CONFIG.strategy}". Run 'npx ota-updates register ${OTA_CONFIG.strategy}' first.`);
-        }
-        
-        const channelConfig = config.channels?.[argChannel];
-        const activeBranch = channelConfig?.branch || config.branch || 'main';
-
-        console.log(`📂 Preparing ${OTA_CONFIG.strategy} OTA Repository (Branch: ${activeBranch})...`);
-        if (fs.existsSync(OTA_RELEASES_DIR)) {
-            fs.rmSync(OTA_RELEASES_DIR, { recursive: true, force: true });
-        }
-        
-        const pat = OTA_CONFIG.strategy === 'gitlab' ? gitlabPat : githubPat;
-        
-        const cloneRepo = config.repo.endsWith('.git') ? config.repo : config.repo + '.git';
-        const authRepo = cloneRepo.replace('https://', `https://${pat}@`);
-        
-        execSync(`git clone --branch ${activeBranch} ${authRepo} "${OTA_RELEASES_DIR}"`, { stdio: 'inherit' });
-
-        if (!pat) {
-            throw new Error(`Developer PAT for ${OTA_CONFIG.strategy.toUpperCase()} is missing in .env! Run 'npx ota-updates register ${OTA_CONFIG.strategy}' to fix it.`);
-        }
-
-        const currentEnv = fs.readFileSync(ENV_PATH, 'utf-8');
-        const versionMatch = currentEnv.match(/PUBLIC_APP_VERSION_ANDROID=([0-9.]+)/);
-        const currentVersion = versionMatch ? versionMatch[1] : '0.1.9.0';
-
-        let nextVersion = process.argv[3];
-        
-        if (!nextVersion) {
-            console.log('🔍 No version provided, auto-incrementing from remote manifest...');
-            const otaManifestPath = path.join(OTA_RELEASES_DIR, argChannel === 'training' ? 'manifest-training.json' : 'manifest.json');
-            
-            if (fs.existsSync(otaManifestPath)) {
-                const otaManifest = JSON.parse(fs.readFileSync(otaManifestPath, 'utf8'));
-                const latestVersion = otaManifest.version || currentVersion;
-                const parts = latestVersion.split('.');
-                const lastIdx = parts.length - 1;
-                parts[lastIdx] = (parseInt(parts[lastIdx]) + 1).toString();
-                nextVersion = parts.join('.');
-                console.log(`📈 Auto-increment: ${latestVersion} -> ${nextVersion}`);
-            } else {
-                nextVersion = currentVersion;
-                console.log(`⚠️ No remote manifest, using .env version: ${nextVersion}`);
-            }
-        }
-
-        console.log(`📦 Target Version: ${nextVersion} [${argChannel}]`);
-
-        const rawBaseUrl = getRawBaseUrl(config.repo, OTA_CONFIG.strategy, activeBranch);
-        const manifestFileName = argChannel === 'training' ? 'manifest-training.json' : 'manifest.json';
-        const activeOtaUrl = `${rawBaseUrl}/${manifestFileName}`;
-        
-        console.log(`🔗 Auto-Constructing Raw OTA URL: ${activeOtaUrl}`);
-        
-        let updatedEnv = currentEnv;
-        updatedEnv = updatedEnv.replace(/PUBLIC_APP_VERSION_ANDROID=.*/, `PUBLIC_APP_VERSION_ANDROID=${nextVersion}`);
-        updatedEnv = updatedEnv.replace(/PUBLIC_APP_VERSION_IOS=.*/, `PUBLIC_APP_VERSION_IOS=${nextVersion}`);
-        
-        if (updatedEnv.includes('PUBLIC_APP_VERSION=')) {
-            updatedEnv = updatedEnv.replace(/PUBLIC_APP_VERSION=.*/, `PUBLIC_APP_VERSION=${nextVersion}`);
-        }
-        
-        if (updatedEnv.includes('PUBLIC_OTA_UPDATE_URL=')) {
-            updatedEnv = updatedEnv.replace(/PUBLIC_OTA_UPDATE_URL=.*/, `PUBLIC_OTA_UPDATE_URL=${activeOtaUrl}`);
-        } else {
-            updatedEnv += `\nPUBLIC_OTA_UPDATE_URL=${activeOtaUrl}`;
-        }
-        
-        console.log(`📝 Updating .env to version ${nextVersion} (Android & iOS) and setting OTA target...`);
-        fs.writeFileSync(ENV_PATH, updatedEnv);
-        
-        if (fs.existsSync(MAIN_MANIFEST_PATH)) {
-            const manifest = JSON.parse(fs.readFileSync(MAIN_MANIFEST_PATH, 'utf8'));
-            manifest.version = nextVersion;
-            fs.writeFileSync(MAIN_MANIFEST_PATH, JSON.stringify(manifest, null, 2));
-        }
-
-        console.log('🏗️ Building project for OTA...');
-        hideApi();
-        try {
-            execSync('npm run build', { stdio: 'inherit', cwd: rootDir });
-            
-            if (fs.existsSync(FLATTEN_SCRIPT)) {
-                console.log('🚀 Running Tsar Bomba Path Cleanse...');
-                execSync(`node "${FLATTEN_SCRIPT}"`, { stdio: 'inherit', cwd: rootDir });
-            }
-
-            if (fs.existsSync(VERIFY_SCRIPT)) {
-                console.log('🔍 Running Pre-Flight Verification...');
-                execSync(`node "${VERIFY_SCRIPT}"`, { stdio: 'inherit', cwd: rootDir });
-            }
-        } finally {
-            showApi();
-        }
-
-        console.log('🛡️  Size Guardian: Checking dist/ folder size...');
-        const distSizeBytes = getDirSize(DIST_DIR);
-        const distSizeMB = distSizeBytes / (1024 * 1024);
-        console.log(`📊 Estimated Size: ${distSizeMB.toFixed(2)} MB`);
-
-        if (distSizeMB > MAX_OTA_SIZE_MB) {
-            throw new Error(`CRITICAL SIZE VIOLATION: Folder dist/ has bloated to ${distSizeMB.toFixed(2)} MB! Limit is ${MAX_OTA_SIZE_MB} MB. Packaging aborted to prevent ZIP BOMB!`);
-        }
-
-        const otaName = `v${nextVersion.replace(/\./g, '_')}.zip`;
-        const otaPath = path.join(rootDir, otaName);
-
-        const isWindows = process.platform === 'win32';
-        const tarCmd = isWindows ? 'tar.exe' : 'tar';
-        const zipCmd = `${tarCmd} -a -c -f "${otaPath}" -C "${DIST_DIR}" .`;
-        
-        execSync(zipCmd, { stdio: 'inherit' });
-
-        console.log('🛡️  Verifying ZIP Integrity...');
-        try {
-            execSync(`${tarCmd} -t -f "${otaPath}"`, { stdio: 'ignore' });
-            console.log('✅ ZIP is valid and readable.');
-        } catch (e) {
-            throw new Error('CRITICAL: Generated ZIP is corrupt or invalid!');
-        }
-
-        const zipStats = fs.statSync(otaPath);
-        const zipSizeMB = zipStats.size / (1024 * 1024);
-        console.log(`📊 Final ZIP Size: ${zipSizeMB.toFixed(2)} MB`);
-
-        if (zipSizeMB > MAX_OTA_SIZE_MB) {
-            if (fs.existsSync(otaPath)) fs.unlinkSync(otaPath);
-            throw new Error(`CRITICAL SIZE VIOLATION: ZIP file bloated to ${zipSizeMB.toFixed(2)} MB! Deployment aborted!`);
-        }
-
-        await deployToRemote(otaPath, otaName, nextVersion, argChannel, activeBranch);
-
-        console.log(`\n✅ OTA DEPLOY SUCCESS!`);
-        console.log(`📄 Version: ${nextVersion}`);
-        console.log(`🔗 Channel: ${argChannel}\n`);
-
-    } catch (error) {
-        console.error(`\n❌ Deployment Failed: ${error.message}\n`);
-        process.exit(1);
-    } finally {
-        showApi();
-    }
-}
-
-async function deployToRemote(otaPath, otaName, version, channel, branch) {
-    const config = OTA_CONFIG[OTA_CONFIG.strategy];
-    const pat = OTA_CONFIG.strategy === 'gitlab' ? gitlabPat : githubPat;
-    console.log(`🚀 Pushing to ${OTA_CONFIG.strategy} (Branch: ${branch})...`);
-    
-    const targetPath = path.join(OTA_RELEASES_DIR, otaName);
-    fs.copyFileSync(otaPath, targetPath);
-
-    const manifestPath = path.join(OTA_RELEASES_DIR, 'manifest.json');
-    let manifest = { live: {}, training: {} };
-    if (fs.existsSync(manifestPath)) {
-        manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));
-    }
-
-    const rawBaseUrl = getRawBaseUrl(config.repo, OTA_CONFIG.strategy, branch);
-    manifest[channel] = {
-        version,
-        url: `${rawBaseUrl}/${otaName}`,
-        date: new Date().toISOString(),
-        note: `Update to ${version} (${channel})`
-    };
-
-    fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
-
-    const flatManifestPath = path.join(OTA_RELEASES_DIR, `manifest-${channel}.json`);
-    fs.writeFileSync(flatManifestPath, JSON.stringify(manifest[channel], null, 2));
-    
-    execSync(`git add .`, { cwd: OTA_RELEASES_DIR });
-    execSync(`git commit -m "release: v${version} for ${channel}"`, { cwd: OTA_RELEASES_DIR });
-    execSync(`git push origin ${branch}`, { cwd: OTA_RELEASES_DIR });
-
-    if (fs.existsSync(otaPath)) fs.unlinkSync(otaPath);
-}
-
-deployOTA();
+import fs from 'fs';
+import path from 'path';
+import { execSync } from 'child_process';
+import { fileURLToPath } from 'url';
+import crypto from 'crypto';
+import OTA_CONFIG from './ota-config.js';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const rootDir = process.cwd();
+
+const OTA_RELEASES_DIR = path.join(rootDir, 'ota-releases');
+const DIST_DIR = path.join(rootDir, 'dist');
+const ENV_PATH = path.join(rootDir, '.env');
+const MAIN_MANIFEST_PATH = path.join(rootDir, 'src', 'data', 'update-data.json');
+const API_DIR = path.join(rootDir, 'src', 'pages', 'api');
+const API_BACKUP_DIR = path.join(rootDir, 'src', '_api-backup');
+
+const VERIFY_SCRIPT = path.join(__dirname, 'verify-dist.cjs');
+const FLATTEN_SCRIPT = path.join(__dirname, 'flatten-dist.cjs');
+
+function hideApi() {
+    if (fs.existsSync(API_DIR)) {
+        console.log('🙈 Hiding API routes (Using Robust Move)...');
+        try {
+            if (fs.existsSync(API_BACKUP_DIR)) fs.rmSync(API_BACKUP_DIR, { recursive: true, force: true });
+            
+            if (process.platform === 'win32') {
+                try {
+                    execSync(`robocopy "${API_DIR}" "${API_BACKUP_DIR}" /E /MOVE /NFL /NDL /NJH /NJS`, { stdio: 'ignore' });
+                } catch (e) {
+                    if (fs.existsSync(API_DIR)) throw e;
+                }
+            } else {
+                fs.renameSync(API_DIR, API_BACKUP_DIR);
+            }
+            console.log('✅ API routes hidden.');
+        } catch (e) {
+            console.warn(`⚠️  Warning: Could not hide API routes (${e.message}).`);
+        }
+    }
+}
+
+function showApi() {
+    if (fs.existsSync(API_BACKUP_DIR)) {
+        console.log('🐵 Restoring API routes...');
+        try {
+            if (process.platform === 'win32') {
+                try {
+                    execSync(`robocopy "${API_BACKUP_DIR}" "${API_DIR}" /E /MOVE /NFL /NDL /NJH /NJS`, { stdio: 'ignore' });
+                } catch (e) {
+                    if (fs.existsSync(API_BACKUP_DIR)) throw e;
+                }
+            } else {
+                if (fs.existsSync(API_DIR)) fs.rmSync(API_DIR, { recursive: true, force: true });
+                fs.renameSync(API_BACKUP_DIR, API_DIR);
+            }
+            console.log('✅ API routes restored.');
+        } catch (e) {
+            console.error(`❌ Error: Failed to restore API routes: ${e.message}`);
+        }
+    }
+}
+
+const envContent = fs.existsSync(ENV_PATH) ? fs.readFileSync(ENV_PATH, 'utf-8') : '';
+const githubPat = envContent.match(/GITHUB_DEV_PAT=(.*)/)?.[1]?.trim().replace(/^"|"$/g, '') || '';
+const gitlabPat = envContent.match(/GITLAB_DEV_PAT=(.*)/)?.[1]?.trim().replace(/^"|"$/g, '') || '';
+
+const MAX_OTA_SIZE_MB = 50;
+
+function getDirHash(dirPath) {
+    if (!fs.existsSync(dirPath)) return '';
+    const hash = crypto.createHash('sha256');
+    const files = fs.readdirSync(dirPath, { recursive: true });
+    files.sort().forEach(file => {
+        const fullPath = path.join(dirPath, file);
+        const stats = fs.statSync(fullPath);
+        if (stats.isFile()) {
+            hash.update(file);
+            hash.update(fs.readFileSync(fullPath));
+        }
+    });
+    return hash.digest('hex');
+}
+
+function getDirSize(dirPath) {
+    let size = 0;
+    if (!fs.existsSync(dirPath)) return 0;
+    const files = fs.readdirSync(dirPath);
+    for (let i = 0; i < files.length; i++) {
+        const filePath = path.join(dirPath, files[i]);
+        const stats = fs.statSync(filePath);
+        if (stats.isFile()) {
+            size += stats.size;
+        } else if (stats.isDirectory()) {
+            size += getDirSize(filePath);
+        }
+    }
+    return size;
+}
+
+function getRawBaseUrl(repoUrl, strategy, branch = 'main') {
+    let base = repoUrl.replace(/\/$/, '');
+    if (strategy === 'github') {
+        return base.replace('github.com', 'raw.githubusercontent.com') + `/${branch}`;
+    } else if (strategy === 'gitlab') {
+        return base + `/-/raw/${branch}`;
+    }
+    return base;
+}
+
+async function deployOTA() {
+    console.log(`🚀 Starting OTA Deployment (Strategy: ${OTA_CONFIG.strategy})...`);
+
+    const argChannel = process.argv[2] || 'training'; 
+    
+    try {
+        if (!fs.existsSync(OTA_RELEASES_DIR)) fs.mkdirSync(OTA_RELEASES_DIR);
+        
+        const config = OTA_CONFIG[OTA_CONFIG.strategy];
+        if (!config || !config.repo) {
+            throw new Error(`Repository not configured for strategy "${OTA_CONFIG.strategy}". Run 'npx ota-updates register ${OTA_CONFIG.strategy}' first.`);
+        }
+        
+        const channelConfig = config.channels?.[argChannel];
+        const activeBranch = channelConfig?.branch || config.branch || 'main';
+
+        console.log(`📂 Preparing ${OTA_CONFIG.strategy} OTA Repository (Branch: ${activeBranch})...`);
+        if (fs.existsSync(OTA_RELEASES_DIR)) {
+            fs.rmSync(OTA_RELEASES_DIR, { recursive: true, force: true });
+        }
+        
+        const pat = OTA_CONFIG.strategy === 'gitlab' ? gitlabPat : githubPat;
+        
+        const cloneRepo = config.repo.endsWith('.git') ? config.repo : config.repo + '.git';
+        const authRepo = cloneRepo.replace('https://', `https://${pat}@`);
+        
+        execSync(`git clone --branch ${activeBranch} ${authRepo} "${OTA_RELEASES_DIR}"`, { stdio: 'inherit' });
+
+        if (!pat) {
+            throw new Error(`Developer PAT for ${OTA_CONFIG.strategy.toUpperCase()} is missing in .env! Run 'npx ota-updates register ${OTA_CONFIG.strategy}' to fix it.`);
+        }
+
+        const currentEnv = fs.readFileSync(ENV_PATH, 'utf-8');
+        const versionMatch = currentEnv.match(/PUBLIC_APP_VERSION_ANDROID=([0-9.]+)/);
+        const currentVersion = versionMatch ? versionMatch[1] : '0.1.9.0';
+        const otaManifestPath = path.join(OTA_RELEASES_DIR, argChannel === 'training' ? 'manifest-training.json' : 'manifest.json');
+        
+        let previousHash = null;
+        let previousVersion = currentVersion;
+        if (fs.existsSync(otaManifestPath)) {
+            const otaManifest = JSON.parse(fs.readFileSync(otaManifestPath, 'utf8'));
+            previousVersion = otaManifest.version || currentVersion;
+            previousHash = otaManifest.hash || null;
+        }
+
+        console.log('🏗️ Building project for OTA Diff Check...');
+        hideApi();
+        try {
+            execSync('npm run build', { stdio: 'inherit', cwd: rootDir });
+            
+            if (fs.existsSync(FLATTEN_SCRIPT)) {
+                console.log('🚀 Running Tsar Bomba Path Cleanse...');
+                execSync(`node "${FLATTEN_SCRIPT}"`, { stdio: 'inherit', cwd: rootDir });
+            }
+
+            if (fs.existsSync(VERIFY_SCRIPT)) {
+                console.log('🔍 Running Pre-Flight Verification...');
+                execSync(`node "${VERIFY_SCRIPT}"`, { stdio: 'inherit', cwd: rootDir });
+            }
+        } finally {
+            showApi();
+        }
+
+        console.log('🧠 Calculating SHA-256 Hash of dist/ artifacts...');
+        const currentBuildHash = getDirHash(DIST_DIR);
+        console.log(`🔑 Current Build Hash : ${currentBuildHash.substring(0, 16)}...`);
+        if (previousHash) {
+            console.log(`🔒 Previous Release Hash: ${previousHash.substring(0, 16)}...`);
+        }
+
+        if (previousHash && previousHash === currentBuildHash) {
+            console.log(`\nℹ️ [SMART DIFF CHECKER] No changes detected in build artifacts.`);
+            console.log(`✅ Deploy Success (Skipped remote push to save bandwidth & Git storage).`);
+            console.log(`📄 Active Version: ${previousVersion} (Unchanged)`);
+            console.log(`🔗 Channel: ${argChannel}\n`);
+            process.exit(0);
+        }
+
+        let nextVersion = process.argv[3];
+        if (!nextVersion) {
+            console.log('🔍 Changes detected! Auto-incrementing from remote manifest...');
+            const parts = previousVersion.split('.');
+            const lastIdx = parts.length - 1;
+            parts[lastIdx] = (parseInt(parts[lastIdx]) + 1).toString();
+            nextVersion = parts.join('.');
+            console.log(`📈 Auto-increment: ${previousVersion} -> ${nextVersion}`);
+        }
+
+        console.log(`📦 Target Version: ${nextVersion} [${argChannel}]`);
+
+        const rawBaseUrl = getRawBaseUrl(config.repo, OTA_CONFIG.strategy, activeBranch);
+        const manifestFileName = argChannel === 'training' ? 'manifest-training.json' : 'manifest.json';
+        const activeOtaUrl = `${rawBaseUrl}/${manifestFileName}`;
+        
+        console.log(`🔗 Auto-Constructing Raw OTA URL: ${activeOtaUrl}`);
+        
+        let updatedEnv = currentEnv;
+        updatedEnv = updatedEnv.replace(/PUBLIC_APP_VERSION_ANDROID=.*/, `PUBLIC_APP_VERSION_ANDROID=${nextVersion}`);
+        updatedEnv = updatedEnv.replace(/PUBLIC_APP_VERSION_IOS=.*/, `PUBLIC_APP_VERSION_IOS=${nextVersion}`);
+        
+        if (updatedEnv.includes('PUBLIC_APP_VERSION=')) {
+            updatedEnv = updatedEnv.replace(/PUBLIC_APP_VERSION=.*/, `PUBLIC_APP_VERSION=${nextVersion}`);
+        }
+        
+        if (updatedEnv.includes('PUBLIC_OTA_UPDATE_URL=')) {
+            updatedEnv = updatedEnv.replace(/PUBLIC_OTA_UPDATE_URL=.*/, `PUBLIC_OTA_UPDATE_URL=${activeOtaUrl}`);
+        } else {
+            updatedEnv += `\nPUBLIC_OTA_UPDATE_URL=${activeOtaUrl}`;
+        }
+        
+        console.log(`📝 Updating .env to version ${nextVersion} (Android & iOS) and setting OTA target...`);
+        fs.writeFileSync(ENV_PATH, updatedEnv);
+        
+        if (fs.existsSync(MAIN_MANIFEST_PATH)) {
+            const manifest = JSON.parse(fs.readFileSync(MAIN_MANIFEST_PATH, 'utf8'));
+            manifest.version = nextVersion;
+            fs.writeFileSync(MAIN_MANIFEST_PATH, JSON.stringify(manifest, null, 2));
+        }
+
+        console.log('🛡️  Size Guardian: Checking dist/ folder size...');
+        const distSizeBytes = getDirSize(DIST_DIR);
+        const distSizeMB = distSizeBytes / (1024 * 1024);
+        console.log(`📊 Estimated Size: ${distSizeMB.toFixed(2)} MB`);
+
+        if (distSizeMB > MAX_OTA_SIZE_MB) {
+            throw new Error(`CRITICAL SIZE VIOLATION: Folder dist/ has bloated to ${distSizeMB.toFixed(2)} MB! Limit is ${MAX_OTA_SIZE_MB} MB. Packaging aborted to prevent ZIP BOMB!`);
+        }
+
+        const otaName = `v${nextVersion.replace(/\./g, '_')}.zip`;
+        const otaPath = path.join(rootDir, otaName);
+
+        const isWindows = process.platform === 'win32';
+        const tarCmd = isWindows ? 'tar.exe' : 'tar';
+        const zipCmd = `${tarCmd} -a -c -f "${otaPath}" -C "${DIST_DIR}" .`;
+        
+        execSync(zipCmd, { stdio: 'inherit' });
+
+        console.log('🛡️  Verifying ZIP Integrity...');
+        try {
+            execSync(`${tarCmd} -t -f "${otaPath}"`, { stdio: 'ignore' });
+            console.log('✅ ZIP is valid and readable.');
+        } catch (e) {
+            throw new Error('CRITICAL: Generated ZIP is corrupt or invalid!');
+        }
+
+        const zipStats = fs.statSync(otaPath);
+        const zipSizeMB = zipStats.size / (1024 * 1024);
+        console.log(`📊 Final ZIP Size: ${zipSizeMB.toFixed(2)} MB`);
+
+        if (zipSizeMB > MAX_OTA_SIZE_MB) {
+            if (fs.existsSync(otaPath)) fs.unlinkSync(otaPath);
+            throw new Error(`CRITICAL SIZE VIOLATION: ZIP file bloated to ${zipSizeMB.toFixed(2)} MB! Deployment aborted!`);
+        }
+
+        await deployToRemote(otaPath, otaName, nextVersion, argChannel, activeBranch, currentBuildHash);
+
+        console.log(`\n✅ OTA DEPLOY SUCCESS!`);
+        console.log(`📄 Version: ${nextVersion}`);
+        console.log(`🔗 Channel: ${argChannel}\n`);
+
+    } catch (error) {
+        console.error(`\n❌ Deployment Failed: ${error.message}\n`);
+        process.exit(1);
+    } finally {
+        showApi();
+    }
+}
+
+async function deployToRemote(otaPath, otaName, version, channel, branch, buildHash) {
+    const config = OTA_CONFIG[OTA_CONFIG.strategy];
+    const pat = OTA_CONFIG.strategy === 'gitlab' ? gitlabPat : githubPat;
+    console.log(`🚀 Pushing to ${OTA_CONFIG.strategy} (Branch: ${branch})...`);
+    
+    const targetPath = path.join(OTA_RELEASES_DIR, otaName);
+    fs.copyFileSync(otaPath, targetPath);
+
+    const manifestPath = path.join(OTA_RELEASES_DIR, 'manifest.json');
+    let manifest = { live: {}, training: {} };
+    if (fs.existsSync(manifestPath)) {
+        manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));
+    }
+
+    const rawBaseUrl = getRawBaseUrl(config.repo, OTA_CONFIG.strategy, branch);
+    manifest[channel] = {
+        version,
+        url: `${rawBaseUrl}/${otaName}`,
+        date: new Date().toISOString(),
+        hash: buildHash || '',
+        note: `Update to ${version} (${channel})`
+    };
+
+    fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
+
+    const flatManifestPath = path.join(OTA_RELEASES_DIR, `manifest-${channel}.json`);
+    fs.writeFileSync(flatManifestPath, JSON.stringify(manifest[channel], null, 2));
+    
+    execSync(`git add .`, { cwd: OTA_RELEASES_DIR });
+    execSync(`git commit -m "release: v${version} for ${channel}"`, { cwd: OTA_RELEASES_DIR });
+    execSync(`git push origin ${branch}`, { cwd: OTA_RELEASES_DIR });
+
+    if (fs.existsSync(otaPath)) fs.unlinkSync(otaPath);
+}
+
+deployOTA();

package/package.json

@@ -1,43 +1,43 @@
-{
-  "name": "ota-manager",
-  "version": "1.0.4",
-  "description": "Multi-provider OTA update manager for Astro and static web projects.",
-  "type": "module",
-  "main": "index.js",
-  "bin": {
-    "ota-manager": "bin/cli.js",
-    "ota-updates": "bin/cli.js"
-  },
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
-  },
-  "keywords": [
-    "astro",
-    "ota",
-    "deployment",
-    "github",
-    "gitlab",
-    "automation"
-  ],
-  "author": {
-    "name": "First Ryan",
-    "email": "firstryan@gmail.com",
-    "url": "https://github.com/firstryan"
-  },
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/firstryan/ota-manager.git"
-  },
-  "bugs": {
-    "url": "https://github.com/firstryan/ota-manager/issues"
-  },
-  "homepage": "https://github.com/firstryan/ota-manager#readme",
-  "dependencies": {
-    "archiver": "^8.0.0",
-    "ota-manager": "^1.0.1"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  }
-}
+{
+  "name": "ota-manager",
+  "version": "1.0.6",
+  "description": "Multi-provider OTA update manager for Astro and static web projects.",
+  "type": "module",
+  "main": "index.js",
+  "bin": {
+    "ota-manager": "bin/cli.js",
+    "ota-updates": "bin/cli.js"
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [
+    "astro",
+    "ota",
+    "deployment",
+    "github",
+    "gitlab",
+    "automation"
+  ],
+  "author": {
+    "name": "First Ryan",
+    "email": "firstryan@gmail.com",
+    "url": "https://github.com/firstryan"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/firstryan/ota-manager.git"
+  },
+  "bugs": {
+    "url": "https://github.com/firstryan/ota-manager/issues"
+  },
+  "homepage": "https://github.com/firstryan/ota-manager#readme",
+  "dependencies": {
+    "archiver": "^8.0.0",
+    "ota-manager": "^1.0.1"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}