runcloud 0.2.169 → 0.2.171

package/dist/commands/appStoreEvaluate.js

@@ -22,6 +22,14 @@ const CONFIG_RULES = {
     orientation: { path: ['expo', 'orientation'], absent: 'info' },
     ios_supports_tablet: { path: ['expo', 'ios', 'supportsTablet'], absent: 'info' },
 };
+const READS_APP_CONFIG = new Set([...Object.keys(CONFIG_RULES), 'ios_encryption', 'plugin_permission_missing', 'permission_descriptions', 'privacy_manifest']);
+const DYNAMIC_CONFIGS = ['ts', 'mts', 'cts', 'mjs', 'cjs', 'js'].map((ext) => `app.config.${ext}`);
+export function dynamicExpoConfig(root) {
+    return DYNAMIC_CONFIGS.find((name) => existsSync(path.join(root, name)));
+}
+export function uncheckedUnder(dynamicConfig, finding) {
+    return `Not checked: ${dynamicConfig} can set this, and it only runs when the app builds. From app.json alone: ${finding}`;
+}
 const JUDGMENT_IDS = new Set([
     'apple_sign_in_order',
     'permission_string_quality',
@@ -108,7 +116,8 @@ const SKIP_DIRS = new Set([
 export function evaluateCompliance(manifest, projectDir, options = {}) {
     const root = path.resolve(projectDir);
     const appJson = asReleased(readJson(path.join(root, 'app.json')), options.iosBundleId);
-    const targetPlatforms = targetPlatformsFromAppJson(appJson);
+    const dynamicConfig = dynamicExpoConfig(root);
+    const targetPlatforms = dynamicConfig ? ['ios', 'android'] : targetPlatformsFromAppJson(appJson);
     const items = [];
     const unresolved = [];
     for (const item of activeItems(manifest)) {
@@ -117,6 +126,10 @@ export function evaluateCompliance(manifest, projectDir, options = {}) {
             continue;
         }
         const evaluated = evaluateLocalItem(root, appJson, item);
+        if (evaluated && dynamicConfig && READS_APP_CONFIG.has(item.id) && (evaluated.status === 'fail' || evaluated.status === 'warning')) {
+            items.push(makeItem(item, 'info', uncheckedUnder(dynamicConfig, evaluated.message ?? `${item.label} is not set.`), evaluated.evidence));
+            continue;
+        }
         if (evaluated) {
             items.push(evaluated);
             continue;

package/dist/commands/run-cloud-fleet.js

@@ -280,6 +280,10 @@ export async function readFleetLogs(client, hostId, source = 'service', limit =
         lines: Array.isArray(result.data.lines) ? result.data.lines.map(safeFleetText) : [] };
 }
 function credentialsClient() { const credentials = requireCredentials(); return new ApiClient(credentials.apiUrl, credentials.token); }
+function requireFleetReadAccess(reason) {
+    if (reason === 'HTTP 401' || reason === 'HTTP 403')
+        throw new Error(`Fleet access denied (${reason}); use an admin identity with read permission`);
+}
 function action(fn) {
     return fn().catch(error => { console.error(safeFleetText(error instanceof Error ? error.message : 'Fleet read failed')); process.exitCode = 1; });
 }
@@ -323,9 +327,14 @@ export function registerRunCloudFleet(program) {
         .option('--event-pages <pages>', 'Maximum pages (1..10)', '1')
         .action(opts => action(async () => {
         const result = await readFleetEvents(credentialsClient(), { hostId: opts.host, range: opts.range, limit: Number(opts.limit), eventPages: Number(opts.eventPages) });
+        requireFleetReadAccess(result.coverage.reason);
         console.log(JSON.stringify({ coverage: result.coverage, items: result.items.map(eventEvidence) }, null, 2));
     }));
     fleet.command('logs <hostId>').description('Read bounded retained host logs; no SSH or host changes')
         .option('--source <source>', 'service, warm_pool, or event_log', 'service').option('--limit <rows>', 'Maximum lines (1..500)', '100')
-        .action((hostId, opts) => action(async () => { console.log(JSON.stringify(await readFleetLogs(credentialsClient(), hostId, opts.source, Number(opts.limit)), null, 2)); }));
+        .action((hostId, opts) => action(async () => {
+        const result = await readFleetLogs(credentialsClient(), hostId, opts.source, Number(opts.limit));
+        requireFleetReadAccess(result.reason);
+        console.log(JSON.stringify(result, null, 2));
+    }));
 }

package/dist/version.js

@@ -1 +1 @@
-export const CLI_VERSION = '0.2.169';
+export const CLI_VERSION = '0.2.171';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runcloud",
-  "version": "0.2.169",
+  "version": "0.2.171",
   "description": "Create and control run.cloud remote mobile simulators and cloud sandboxes",
   "license": "Apache-2.0",
   "keywords": [