react-native-update-cli 2.8.4 → 2.8.5

package/lib/locales/en.js

@@ -82,6 +82,17 @@ This can reduce the risk of inconsistent dependencies and supply chain attacks.
     operationSuccess: 'Operation successful',
     packageIdRequired: 'Please provide packageId or packageVersion parameter',
     packageUploadSuccess: 'Successfully uploaded new hot update package (id: {{id}})',
+    depsChangeSummary: 'Dependency changes: added {{added}}, removed {{removed}}, changed {{changed}}.',
+    depsChangeTargetPackage: 'Target native package: {{packageName}} (id: {{packageId}})',
+    depsChangeDependencyHeader: 'Dependency',
+    depsChangeVersionHeader: 'Version change',
+    depsChangeAddedLabel: 'Added',
+    depsChangeRemovedLabel: 'Removed',
+    depsChangeChangedLabel: 'Changed',
+    depsChangeArrow: '->',
+    depsChangeRiskWarning: 'Warning: if changed dependencies are pure JS modules, impact is usually low; if native code is newly introduced or changed, OTA update may cause abnormal behavior or even crashes. Test thoroughly before production release.',
+    depsChangeFetchFailed: 'Failed to fetch OTA dependency info: {{error}}',
+    depsChangeNonBlockingHint: 'This is only a dependency change warning and will not block publishing.',
     packing: 'Packing',
     pausedStatus: '(Paused)',
     platform: 'Platform',

package/lib/locales/zh.js

@@ -82,6 +82,17 @@ const _default = {
     operationSuccess: '操作成功',
     packageIdRequired: '请提供 packageId 或 packageVersion 参数',
     packageUploadSuccess: '已成功上传新热更包（id: {{id}}）',
+    depsChangeSummary: '依赖变化：新增 {{added}} 项，移除 {{removed}} 项，版本变更 {{changed}} 项。',
+    depsChangeTargetPackage: '目标原生包：{{packageName}} (id: {{packageId}})',
+    depsChangeDependencyHeader: '依赖',
+    depsChangeVersionHeader: '版本变化',
+    depsChangeAddedLabel: '新增',
+    depsChangeRemovedLabel: '移除',
+    depsChangeChangedLabel: '变更',
+    depsChangeArrow: '->',
+    depsChangeRiskWarning: '警告：如果变更依赖是纯 JS 模块，则一般没有影响；若包含原生代码新增或变化，热更可能导致功能不正常甚至闪退，建议发布前使用扫码功能完整测试。',
+    depsChangeFetchFailed: '获取热更依赖信息失败：{{error}}',
+    depsChangeNonBlockingHint: '以上仅为依赖变化提示，不会阻止本次发布。',
     packing: '正在打包',
     pausedStatus: '(已暂停)',
     platform: '平台',

package/lib/versions.js

@@ -21,6 +21,7 @@ const _utils = require("./utils");
 const _i18n = require("./utils/i18n");
 const _chalk = /*#__PURE__*/ _interop_require_default(require("chalk"));
 const _compareversions = require("compare-versions");
+const _ttytable = /*#__PURE__*/ _interop_require_default(require("tty-table"));
 const _app = require("./app");
 const _package = require("./package");
 const _depversions = require("./utils/dep-versions");
@@ -30,6 +31,181 @@ function _interop_require_default(obj) {
         default: obj
     };
 }
+function normalizeDeps(input) {
+    if (!input) {
+        return undefined;
+    }
+    let raw = input;
+    if (typeof input === 'string') {
+        try {
+            raw = JSON.parse(input);
+        } catch (_e) {
+            return undefined;
+        }
+    }
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+        return undefined;
+    }
+    const deps = {};
+    for (const [name, version] of Object.entries(raw)){
+        if (typeof version === 'string' && version) {
+            deps[name] = version;
+        }
+    }
+    return Object.keys(deps).length > 0 ? deps : undefined;
+}
+function getDepsChanges(oldDeps, newDeps) {
+    if (!oldDeps || !newDeps) {
+        return [];
+    }
+    const rows = [];
+    const keys = Object.keys({
+        ...oldDeps,
+        ...newDeps
+    }).sort((a, b)=>a.localeCompare(b));
+    for (const key of keys){
+        const oldVersion = oldDeps[key];
+        const newVersion = newDeps[key];
+        if (oldVersion === undefined && newVersion !== undefined) {
+            rows.push({
+                dependency: key,
+                oldVersion: '-',
+                newVersion,
+                type: 'added'
+            });
+            continue;
+        }
+        if (oldVersion !== undefined && newVersion === undefined) {
+            rows.push({
+                dependency: key,
+                oldVersion,
+                newVersion: '-',
+                type: 'removed'
+            });
+            continue;
+        }
+        if (oldVersion !== undefined && newVersion !== undefined && oldVersion !== newVersion) {
+            rows.push({
+                dependency: key,
+                oldVersion,
+                newVersion,
+                type: 'changed'
+            });
+        }
+    }
+    return rows;
+}
+function getDepsChangeSummary(changes) {
+    return changes.reduce((acc, item)=>{
+        if (item.type === 'added') {
+            acc.added += 1;
+        } else if (item.type === 'removed') {
+            acc.removed += 1;
+        } else {
+            acc.changed += 1;
+        }
+        return acc;
+    }, {
+        added: 0,
+        removed: 0,
+        changed: 0
+    });
+}
+function renderVersionChange(change) {
+    const arrow = _chalk.default.gray(` ${(0, _i18n.t)('depsChangeArrow')} `);
+    if (change.type === 'added') {
+        return `${_chalk.default.red((0, _i18n.t)('depsChangeAddedLabel'))} | ${_chalk.default.gray(change.oldVersion)}${arrow}${_chalk.default.red(change.newVersion)}`;
+    }
+    if (change.type === 'removed') {
+        return `${_chalk.default.green((0, _i18n.t)('depsChangeRemovedLabel'))} | ${_chalk.default.green(change.oldVersion)}${arrow}${_chalk.default.gray(change.newVersion)}`;
+    }
+    return `${_chalk.default.yellow((0, _i18n.t)('depsChangeChangedLabel'))} | ${_chalk.default.yellow(change.oldVersion)}${arrow}${_chalk.default.yellow(change.newVersion)}`;
+}
+function printDepsChangesForPackage({ pkg, versionDeps }) {
+    const pkgDeps = normalizeDeps(pkg.deps);
+    if (!pkgDeps) {
+        return false;
+    }
+    const changes = getDepsChanges(pkgDeps, versionDeps);
+    if (changes.length === 0) {
+        return false;
+    }
+    const summary = getDepsChangeSummary(changes);
+    const summaryText = (0, _i18n.t)('depsChangeSummary', {
+        added: _chalk.default.red(String(summary.added)),
+        removed: _chalk.default.green(String(summary.removed)),
+        changed: _chalk.default.yellow(String(summary.changed))
+    });
+    const header = [
+        {
+            value: (0, _i18n.t)('depsChangeDependencyHeader')
+        },
+        {
+            value: (0, _i18n.t)('depsChangeVersionHeader')
+        }
+    ];
+    const rows = changes.map((change)=>[
+            change.dependency,
+            renderVersionChange(change)
+        ]);
+    console.log('');
+    console.log(_chalk.default.yellow((0, _i18n.t)('depsChangeTargetPackage', {
+        packageName: pkg.name,
+        packageId: pkg.id
+    })));
+    console.log(summaryText);
+    console.log((0, _ttytable.default)(header, rows).render());
+    console.log(_chalk.default.yellow((0, _i18n.t)('depsChangeRiskWarning')));
+    return true;
+}
+async function findVersionDeps(appId, versionId) {
+    const targetId = String(versionId);
+    const limit = 100;
+    let offset = 0;
+    while(true){
+        const { data, count } = await (0, _api.get)(`/app/${appId}/version/list?offset=${offset}&limit=${limit}`);
+        const versions = Array.isArray(data) ? data : [];
+        const version = versions.find((item)=>String(item.id) === targetId);
+        if (version) {
+            return normalizeDeps(version.deps);
+        }
+        offset += versions.length;
+        if (versions.length === 0 || offset >= Number(count || 0)) {
+            break;
+        }
+    }
+    return undefined;
+}
+async function printDepsChangesForPublish({ appId, versionId, pkgs, providedVersionDeps }) {
+    if (!versionId || pkgs.length === 0) {
+        return;
+    }
+    let versionDeps = normalizeDeps(providedVersionDeps);
+    if (!versionDeps) {
+        try {
+            versionDeps = await findVersionDeps(appId, versionId);
+        } catch (error) {
+            console.warn(_chalk.default.yellow((0, _i18n.t)('depsChangeFetchFailed', {
+                error: (error == null ? void 0 : error.message) || String(error)
+            })));
+            return;
+        }
+    }
+    if (!versionDeps) {
+        return;
+    }
+    let hasChanges = false;
+    for (const pkg of pkgs){
+        const printed = printDepsChangesForPackage({
+            pkg,
+            versionDeps
+        });
+        hasChanges = hasChanges || printed;
+    }
+    if (hasChanges) {
+        console.log(_chalk.default.yellow((0, _i18n.t)('depsChangeNonBlockingHint')));
+    }
+}
 async function showVersion(appId, offset) {
     const { data, count } = await (0, _api.get)(`/app/${appId}/version/list`);
     console.log((0, _i18n.t)('offset', {
@@ -164,7 +340,8 @@ const versionCommands = {
                     minPackageVersion,
                     maxPackageVersion,
                     rollout,
-                    dryRun
+                    dryRun,
+                    versionDeps: _depversions.depVersions
                 }
             });
         } else {
@@ -173,7 +350,8 @@ const versionCommands = {
                 await this.update({
                     options: {
                         versionId: id,
-                        platform
+                        platform,
+                        versionDeps: _depversions.depVersions
                     }
                 });
             }
@@ -269,6 +447,12 @@ const versionCommands = {
                 }));
             }
         }
+        await printDepsChangesForPublish({
+            appId,
+            versionId,
+            pkgs: pkgsToBind,
+            providedVersionDeps: options.versionDeps
+        });
         await bindVersionToPackages({
             appId,
             versionId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-update-cli",
-  "version": "2.8.4",
+  "version": "2.8.5",
   "description": "command line tool for react-native-update (remote updates for react native)",
   "main": "index.js",
   "bin": {

package/src/locales/en.ts

@@ -96,6 +96,21 @@ This can reduce the risk of inconsistent dependencies and supply chain attacks.
   packageIdRequired: 'Please provide packageId or packageVersion parameter',
   packageUploadSuccess:
     'Successfully uploaded new hot update package (id: {{id}})',
+  depsChangeSummary:
+    'Dependency changes: added {{added}}, removed {{removed}}, changed {{changed}}.',
+  depsChangeTargetPackage:
+    'Target native package: {{packageName}} (id: {{packageId}})',
+  depsChangeDependencyHeader: 'Dependency',
+  depsChangeVersionHeader: 'Version change',
+  depsChangeAddedLabel: 'Added',
+  depsChangeRemovedLabel: 'Removed',
+  depsChangeChangedLabel: 'Changed',
+  depsChangeArrow: '->',
+  depsChangeRiskWarning:
+    'Warning: if changed dependencies are pure JS modules, impact is usually low; if native code is newly introduced or changed, OTA update may cause abnormal behavior or even crashes. Test thoroughly before production release.',
+  depsChangeFetchFailed: 'Failed to fetch OTA dependency info: {{error}}',
+  depsChangeNonBlockingHint:
+    'This is only a dependency change warning and will not block publishing.',
   packing: 'Packing',
   pausedStatus: '(Paused)',
   platform: 'Platform',

package/src/locales/zh.ts

@@ -89,6 +89,19 @@ export default {
   operationSuccess: '操作成功',
   packageIdRequired: '请提供 packageId 或 packageVersion 参数',
   packageUploadSuccess: '已成功上传新热更包（id: {{id}}）',
+  depsChangeSummary:
+    '依赖变化：新增 {{added}} 项，移除 {{removed}} 项，版本变更 {{changed}} 项。',
+  depsChangeTargetPackage: '目标原生包：{{packageName}} (id: {{packageId}})',
+  depsChangeDependencyHeader: '依赖',
+  depsChangeVersionHeader: '版本变化',
+  depsChangeAddedLabel: '新增',
+  depsChangeRemovedLabel: '移除',
+  depsChangeChangedLabel: '变更',
+  depsChangeArrow: '->',
+  depsChangeRiskWarning:
+    '警告：如果变更依赖是纯 JS 模块，则一般没有影响；若包含原生代码新增或变化，热更可能导致功能不正常甚至闪退，建议发布前使用扫码功能完整测试。',
+  depsChangeFetchFailed: '获取热更依赖信息失败：{{error}}',
+  depsChangeNonBlockingHint: '以上仅为依赖变化提示，不会阻止本次发布。',
   packing: '正在打包',
   pausedStatus: '(已暂停)',
   platform: '平台',

package/src/types.ts

@@ -18,6 +18,7 @@ export interface Package {
   appKey?: string;
   versionName?: any;
   buildTime?: any;
+  deps?: Record<string, string> | string | null;
 }
 
 export interface Version {
@@ -25,6 +26,7 @@ export interface Version {
   hash: string;
   name: string;
   packages?: Package[];
+  deps?: Record<string, string> | string | null;
 }
 
 export interface CommandContext {

package/src/versions.ts

@@ -1,9 +1,10 @@
-import { get, getAllPackages, post, put, uploadFile, doDelete } from './api';
+import { doDelete, get, getAllPackages, post, put, uploadFile } from './api';
 import { question, saveToLocal } from './utils';
 import { t } from './utils/i18n';
 
 import chalk from 'chalk';
 import { satisfies } from 'compare-versions';
+import Table from 'tty-table';
 import { getPlatform, getSelectedApp } from './app';
 import { choosePackage } from './package';
 import type { Package, Platform, Version } from './types';
@@ -24,6 +25,258 @@ interface VersionCommandOptions {
   packageVersionRange?: string;
   rollout?: string;
   dryRun?: boolean;
+  versionDeps?: Record<string, string>;
+}
+
+type Deps = Record<string, string>;
+type DepChangeType = 'added' | 'removed' | 'changed';
+
+interface DepChange {
+  dependency: string;
+  oldVersion: string;
+  newVersion: string;
+  type: DepChangeType;
+}
+
+interface DepsChangeSummary {
+  added: number;
+  removed: number;
+  changed: number;
+}
+
+function normalizeDeps(input: unknown): Deps | undefined {
+  if (!input) {
+    return undefined;
+  }
+
+  let raw: unknown = input;
+  if (typeof input === 'string') {
+    try {
+      raw = JSON.parse(input);
+    } catch (_e) {
+      return undefined;
+    }
+  }
+
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+    return undefined;
+  }
+
+  const deps: Deps = {};
+  for (const [name, version] of Object.entries(
+    raw as Record<string, unknown>,
+  )) {
+    if (typeof version === 'string' && version) {
+      deps[name] = version;
+    }
+  }
+
+  return Object.keys(deps).length > 0 ? deps : undefined;
+}
+
+function getDepsChanges(oldDeps?: Deps, newDeps?: Deps): DepChange[] {
+  if (!oldDeps || !newDeps) {
+    return [];
+  }
+
+  const rows: DepChange[] = [];
+  const keys = Object.keys({ ...oldDeps, ...newDeps }).sort((a, b) =>
+    a.localeCompare(b),
+  );
+
+  for (const key of keys) {
+    const oldVersion = oldDeps[key];
+    const newVersion = newDeps[key];
+
+    if (oldVersion === undefined && newVersion !== undefined) {
+      rows.push({
+        dependency: key,
+        oldVersion: '-',
+        newVersion,
+        type: 'added',
+      });
+      continue;
+    }
+
+    if (oldVersion !== undefined && newVersion === undefined) {
+      rows.push({
+        dependency: key,
+        oldVersion,
+        newVersion: '-',
+        type: 'removed',
+      });
+      continue;
+    }
+
+    if (
+      oldVersion !== undefined &&
+      newVersion !== undefined &&
+      oldVersion !== newVersion
+    ) {
+      rows.push({
+        dependency: key,
+        oldVersion,
+        newVersion,
+        type: 'changed',
+      });
+    }
+  }
+
+  return rows;
+}
+
+function getDepsChangeSummary(changes: DepChange[]): DepsChangeSummary {
+  return changes.reduce(
+    (acc, item) => {
+      if (item.type === 'added') {
+        acc.added += 1;
+      } else if (item.type === 'removed') {
+        acc.removed += 1;
+      } else {
+        acc.changed += 1;
+      }
+      return acc;
+    },
+    { added: 0, removed: 0, changed: 0 },
+  );
+}
+
+function renderVersionChange(change: DepChange) {
+  const arrow = chalk.gray(` ${t('depsChangeArrow')} `);
+
+  if (change.type === 'added') {
+    return `${chalk.red(t('depsChangeAddedLabel'))} | ${chalk.gray(
+      change.oldVersion,
+    )}${arrow}${chalk.red(change.newVersion)}`;
+  }
+
+  if (change.type === 'removed') {
+    return `${chalk.green(t('depsChangeRemovedLabel'))} | ${chalk.green(
+      change.oldVersion,
+    )}${arrow}${chalk.gray(change.newVersion)}`;
+  }
+
+  return `${chalk.yellow(t('depsChangeChangedLabel'))} | ${chalk.yellow(
+    change.oldVersion,
+  )}${arrow}${chalk.yellow(change.newVersion)}`;
+}
+
+function printDepsChangesForPackage({
+  pkg,
+  versionDeps,
+}: {
+  pkg: Package;
+  versionDeps: Deps;
+}) {
+  const pkgDeps = normalizeDeps(pkg.deps);
+  if (!pkgDeps) {
+    return false;
+  }
+
+  const changes = getDepsChanges(pkgDeps, versionDeps);
+  if (changes.length === 0) {
+    return false;
+  }
+
+  const summary = getDepsChangeSummary(changes);
+  const summaryText = t('depsChangeSummary', {
+    added: chalk.red(String(summary.added)),
+    removed: chalk.green(String(summary.removed)),
+    changed: chalk.yellow(String(summary.changed)),
+  });
+  const header = [
+    { value: t('depsChangeDependencyHeader') },
+    { value: t('depsChangeVersionHeader') },
+  ];
+  const rows = changes.map((change) => [
+    change.dependency,
+    renderVersionChange(change),
+  ]);
+
+  console.log('');
+  console.log(
+    chalk.yellow(
+      t('depsChangeTargetPackage', {
+        packageName: pkg.name,
+        packageId: pkg.id,
+      }),
+    ),
+  );
+  console.log(summaryText);
+  console.log(Table(header, rows).render());
+  console.log(chalk.yellow(t('depsChangeRiskWarning')));
+  return true;
+}
+
+async function findVersionDeps(appId: string, versionId: string) {
+  const targetId = String(versionId);
+  const limit = 100;
+  let offset = 0;
+
+  while (true) {
+    const { data, count } = await get(
+      `/app/${appId}/version/list?offset=${offset}&limit=${limit}`,
+    );
+    const versions: Version[] = Array.isArray(data) ? data : [];
+    const version = versions.find((item) => String(item.id) === targetId);
+
+    if (version) {
+      return normalizeDeps(version.deps);
+    }
+
+    offset += versions.length;
+    if (versions.length === 0 || offset >= Number(count || 0)) {
+      break;
+    }
+  }
+
+  return undefined;
+}
+
+async function printDepsChangesForPublish({
+  appId,
+  versionId,
+  pkgs,
+  providedVersionDeps,
+}: {
+  appId: string;
+  versionId?: string;
+  pkgs: Package[];
+  providedVersionDeps?: Deps;
+}) {
+  if (!versionId || pkgs.length === 0) {
+    return;
+  }
+
+  let versionDeps = normalizeDeps(providedVersionDeps);
+  if (!versionDeps) {
+    try {
+      versionDeps = await findVersionDeps(appId, versionId);
+    } catch (error: any) {
+      console.warn(
+        chalk.yellow(
+          t('depsChangeFetchFailed', {
+            error: error?.message || String(error),
+          }),
+        ),
+      );
+      return;
+    }
+  }
+
+  if (!versionDeps) {
+    return;
+  }
+
+  let hasChanges = false;
+  for (const pkg of pkgs) {
+    const printed = printDepsChangesForPackage({ pkg, versionDeps });
+    hasChanges = hasChanges || printed;
+  }
+
+  if (hasChanges) {
+    console.log(chalk.yellow(t('depsChangeNonBlockingHint')));
+  }
 }
 
 async function showVersion(appId: string, offset: number) {
@@ -211,12 +464,15 @@ export const versionCommands = {
           maxPackageVersion,
           rollout,
           dryRun,
+          versionDeps: depVersions,
         },
       });
     } else {
       const q = await question(t('updateNativePackageQuestion'));
       if (q.toLowerCase() === 'y') {
-        await this.update({ options: { versionId: id, platform } });
+        await this.update({
+          options: { versionId: id, platform, versionDeps: depVersions },
+        });
       }
     }
     return versionName;
@@ -318,6 +574,13 @@ export const versionCommands = {
       }
     }
 
+    await printDepsChangesForPublish({
+      appId,
+      versionId,
+      pkgs: pkgsToBind,
+      providedVersionDeps: options.versionDeps,
+    });
+
     await bindVersionToPackages({
       appId,
       versionId,