sootsim 0.1.294 → 0.1.296

package/src/host/bridge-host.ts

@@ -27,11 +27,16 @@ import {
   writeDevBridgeLockfile,
   writeRuntimeUpgradeNotice,
   writeSharedConfig,
+  sootsimHomeDir,
   type DaemonLockfile,
   type DevBridgeLockfile,
   type SharedConfig,
 } from '../home-paths.ts'
-import { resolveDevCheckoutRuntimeRoot } from '../runtime-assets.ts'
+import {
+  resolveDevCheckoutRuntimeRoot,
+  resolveInstalledRuntimeRoot,
+  runtimeVersionFromHostname,
+} from '../runtime-assets.ts'
 import { sootsimRuntime } from '../runtime-delivery.ts'
 import { AgentHost, type AgentHostOptions } from './agent-host.ts'
 import {
@@ -616,6 +621,7 @@ export class SootSimBridgeHost {
           recentActions: [],
         }
         this.sims.set(sim.id, sim)
+        this.writeConnectedRuntimeSnapshot()
         if (this.shouldPromoteSim(sim)) {
           this.primarySimId = sim.id
         }
@@ -722,6 +728,7 @@ export class SootSimBridgeHost {
           sim = null
           role = 'cli'
           this.cliIdentityKeyBySocket.set(ws, `ws-${this.nextCliFallbackId++}`)
+          this.writeConnectedRuntimeSnapshot()
           this.broadcastSimAssignments()
           this.broadcastSimClientStates()
         }
@@ -736,6 +743,7 @@ export class SootSimBridgeHost {
             sim.url = registration.url
             sim.title = registration.title
             sim.userAgent = registration.userAgent
+            this.writeConnectedRuntimeSnapshot()
             // kind/meta are optional and free-form. only update if the
             // sender supplied a value so we don't accidentally clear
             // state on a heartbeat-style re-register.
@@ -779,30 +787,20 @@ export class SootSimBridgeHost {
           // tab that has the engine config global picks up the change live
           // — same shape as electron's `config:changed` IPC.
           if (msg.type === 'bridge:write-shared-config') {
-            const patch =
-              msg.patch && typeof msg.patch === 'object'
-                ? (msg.patch as Partial<SharedConfig>)
-                : null
-            if (!patch) return
-            let next: SharedConfig
+            if (!msg.patch || typeof msg.patch !== 'object' || Array.isArray(msg.patch)) {
+              return
+            }
+            const patch = Object.fromEntries(
+              Object.entries(msg.patch),
+            ) satisfies Partial<SharedConfig>
             try {
-              next = writeSharedConfig(patch)
+              this.writeAndBroadcastSharedConfig(patch)
             } catch (err) {
               process.stderr.write(
                 `sootsim: bridge:write-shared-config failed: ${err instanceof Error ? err.message : String(err)}\n`,
               )
               return
             }
-            const payload = JSON.stringify({
-              type: 'bridge:shared-config-changed',
-              config: next,
-            })
-            for (const peer of this.sims.values()) {
-              if (peer.ws.readyState !== WebSocket.OPEN) continue
-              try {
-                peer.ws.send(payload)
-              } catch {}
-            }
             return
           }
 
@@ -1177,6 +1175,18 @@ export class SootSimBridgeHost {
 
   private bootstrapping = true
 
+  private connectedRuntimeVersions(): string[] {
+    const versions = new Set<string>()
+    for (const sim of this.sims.values()) {
+      try {
+        const url = new URL(sim.url || sim.origin || 'http://localhost')
+        const version = runtimeVersionFromHostname(url.hostname)
+        if (version) versions.add(version)
+      } catch {}
+    }
+    return [...versions].sort()
+  }
+
   private buildLockfileSnapshot(): DaemonLockfile {
     return {
       schema: 1,
@@ -1186,6 +1196,7 @@ export class SootSimBridgeHost {
       runtimePort: this.effectivePort,
       activeRuntime: this.activeRuntimeVersion,
       activeRuntimeDir: this.activeRuntimeDirPath,
+      servedRuntimes: this.connectedRuntimeVersions(),
       startedAt: this.startedAt,
       heartbeatAt: Date.now(),
       bootstrapping: this.bootstrapping,
@@ -1205,6 +1216,7 @@ export class SootSimBridgeHost {
       startedAt: this.startedAt,
       heartbeatAt: Date.now(),
       source: 'vite-dev',
+      servedRuntimes: this.connectedRuntimeVersions(),
     }
   }
 
@@ -1216,6 +1228,19 @@ export class SootSimBridgeHost {
     writeDevBridgeLockfile(this.buildDevLockfileSnapshot())
   }
 
+  private writeConnectedRuntimeSnapshot() {
+    if (this.shouldWriteLockfile && this.httpServer) {
+      try {
+        this.writeLockfileSnapshot()
+      } catch {}
+    }
+    if (this.shouldWriteDevLockfile && this.httpServer) {
+      try {
+        this.writeDevLockfileSnapshot()
+      } catch {}
+    }
+  }
+
   private refreshActiveRuntime() {
     this.activeRuntimeVersion = readActiveRuntime()
     // mode boundary (see runtime-assets resolveDevCheckoutRuntimeRoot): inside
@@ -1280,12 +1305,13 @@ export class SootSimBridgeHost {
 
   private startRuntimeUpdater() {
     if (!this.shouldWriteLockfile || this.runtimeUpdateTimer) return
+    if (fs.existsSync(path.join(sootsimHomeDir(), 'runtime-update-disabled'))) return
     // an isolated dev daemon (explicit SOOTSIM_HOME, dev checkout, nothing
     // staged) serves the repo's public/sootsim build. auto-installing the
     // published runtime here would stage it active and shadow that dev build
     // (runtime-assets prefers a staged runtime under an explicit home), so the
     // daemon would silently validate published code instead of the checkout.
-    // a home where CI/local-publish already staged a runtime keeps updating.
+    // local-publish writes the marker above when it stages a source build.
     if (process.env.SOOTSIM_HOME && isSootsimDevCheckout() && !readActiveRuntime()) {
       return
     }
@@ -1304,7 +1330,9 @@ export class SootSimBridgeHost {
         if (reason === 'startup') {
           process.stderr.write('sootsim: checking for runtime updates…\n')
         }
-        const result = await sootsimRuntime.updateToLatest()
+        const result = await sootsimRuntime.updateToLatest({
+          protectVersions: this.connectedRuntimeVersions(),
+        })
         if (!result.updated || !result.latestVersion) {
           if (reason === 'startup') {
             process.stderr.write(
@@ -1371,6 +1399,10 @@ export class SootSimBridgeHost {
       runtimeDir: this.activeRuntimeDirPath,
     })
     for (const sim of this.sims.values()) {
+      try {
+        const simUrl = new URL(sim.url || sim.origin || 'http://localhost')
+        if (runtimeVersionFromHostname(simUrl.hostname)) continue
+      } catch {}
       if (sim.ws.readyState === WebSocket.OPEN) {
         try {
           sim.ws.send(payload)
@@ -1434,17 +1466,85 @@ export class SootSimBridgeHost {
       return
     }
 
-    // only accept read methods. anything else returns 405 — we never
-    // mutate via http; the WS channel owns all writes.
     const method = (req.method || 'GET').toUpperCase()
+    let url: URL
+    try {
+      url = new URL(req.url || '/', `http://${req.headers.host || 'localhost'}`)
+    } catch {
+      res.writeHead(400, { 'Content-Type': 'text/plain; charset=utf-8' })
+      res.end('invalid request URL or host')
+      return
+    }
+
+    // /__sootsim/shared-config is the one awaited HTTP write. ordinary
+    // settings fan out over WS, but destructive reloads need confirmation
+    // that the disk source of truth accepted their final reset first.
+    if (url.pathname === '/__sootsim/shared-config') {
+      res.setHeader('Access-Control-Allow-Origin', '*')
+      res.setHeader('Access-Control-Allow-Headers', 'Content-Type')
+      res.setHeader('Cache-Control', 'no-store')
+      if (method === 'OPTIONS') {
+        res.writeHead(204, { Allow: 'GET, HEAD, POST, OPTIONS' })
+        res.end()
+        return
+      }
+      if (method === 'GET' || method === 'HEAD') {
+        let body = '{}'
+        try {
+          body = JSON.stringify(readSharedConfig())
+        } catch {}
+        res.writeHead(200, { 'Content-Type': 'application/json' })
+        if (method === 'HEAD') res.end()
+        else res.end(body)
+        return
+      }
+      if (method === 'POST') {
+        void (async () => {
+          try {
+            const chunks: Buffer[] = []
+            let size = 0
+            for await (const chunk of req) {
+              const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)
+              size += buffer.byteLength
+              if (size > 8 * 1024 * 1024) {
+                res.writeHead(413, { 'Content-Type': 'text/plain; charset=utf-8' })
+                res.end('shared config patch is too large')
+                return
+              }
+              chunks.push(buffer)
+            }
+            const parsed: unknown = JSON.parse(Buffer.concat(chunks).toString('utf8'))
+            if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+              throw new Error('shared config patch must be an object')
+            }
+            const patch = Object.fromEntries(
+              Object.entries(parsed),
+            ) satisfies Partial<SharedConfig>
+            const next = this.writeAndBroadcastSharedConfig(patch)
+            res.writeHead(200, { 'Content-Type': 'application/json' })
+            res.end(JSON.stringify(next))
+          } catch (error) {
+            res.writeHead(400, { 'Content-Type': 'text/plain; charset=utf-8' })
+            res.end(
+              `invalid shared config patch: ${error instanceof Error ? error.message : String(error)}`,
+            )
+          }
+        })()
+        return
+      }
+      res.writeHead(405, { Allow: 'GET, HEAD, POST, OPTIONS' })
+      res.end('method not allowed')
+      return
+    }
+
+    // every other daemon route is read-only unless its owning proxy handled
+    // the mutation above.
     if (method !== 'GET' && method !== 'HEAD') {
       res.writeHead(405, { Allow: 'GET, HEAD' })
       res.end('method not allowed')
       return
     }
 
-    const url = new URL(req.url || '/', 'http://localhost')
-
     // /__bundle-proxy?url=<encoded> — runtime/worker fetches metro bundles +
     // assets through here. needed because workers can't directly fetch a
     // cross-origin URL without CORS headers, and metro doesn't set them.
@@ -1544,42 +1644,21 @@ export class SootSimBridgeHost {
       return
     }
 
-    // /__sootsim/shared-config — bridge over ~/.sootsim/config.json for
-    // browser tabs that have no other path to disk (private windows,
-    // statically hosted runtime). GET returns the parsed config; POST
-    // merges a partial patch via writeSharedConfig (same shallow-merge
-    // semantics used by electron). matches the shell dev server's
-    // route at the same path so the engine's persistence layer can use
-    // one url regardless of host. cors-permissive because the runtime
-    // and the page may have different origins (electron loads from
-    // bridgePort; demo apps may iframe across origins).
-    if (url.pathname === '/__sootsim/shared-config') {
-      res.setHeader('Access-Control-Allow-Origin', '*')
-      res.setHeader('Cache-Control', 'no-store')
-      if (method === 'GET' || method === 'HEAD') {
-        let body = '{}'
-        try {
-          body = JSON.stringify(readSharedConfig())
-        } catch {}
-        res.writeHead(200, { 'Content-Type': 'application/json' })
-        if (method === 'HEAD') res.end()
-        else res.end(body)
-        return
-      }
-      res.writeHead(405, { Allow: 'GET, HEAD' })
-      res.end('method not allowed (use the bridge over WS for writes)')
-      return
-    }
-
-    // runtime may have been swapped on disk (sootsim runtime use via file
-    // write, or another cli process) — re-read per-request so we serve
-    // the current active version. cost is one readFileSync + one statSync.
-    this.refreshActiveRuntime()
-    const baseDir = this.activeRuntimeDirPath
+    // a repo-selected app runtime opens on its own versioned localhost origin. this
+    // keeps root-relative runtime assets on the same version without changing
+    // the machine's default runtime or interfering with another app. ordinary
+    // localhost requests continue to follow the active stable runtime.
+    const requestedRuntime = runtimeVersionFromHostname(url.hostname)
+    if (!requestedRuntime) this.refreshActiveRuntime()
+    const baseDir = requestedRuntime
+      ? resolveInstalledRuntimeRoot(requestedRuntime)
+      : this.activeRuntimeDirPath
     if (!baseDir) {
       res.writeHead(503, { 'Content-Type': 'text/plain; charset=utf-8' })
       res.end(
-        'sootsim: no active runtime installed. run `sootsim runtime install` to fetch one.',
+        requestedRuntime
+          ? `sootsim: runtime ${requestedRuntime} is not installed. run \`sootsim open\` from that app again.`
+          : 'sootsim: no active runtime installed. run `sootsim runtime install` to fetch one.',
       )
       return
     }
@@ -2333,6 +2412,21 @@ export class SootSimBridgeHost {
     }
   }
 
+  private writeAndBroadcastSharedConfig(patch: Partial<SharedConfig>): SharedConfig {
+    const next = writeSharedConfig(patch)
+    const payload = JSON.stringify({
+      type: 'bridge:shared-config-changed',
+      config: next,
+    })
+    for (const peer of this.sims.values()) {
+      if (peer.ws.readyState !== WebSocket.OPEN) continue
+      try {
+        peer.ws.send(payload)
+      } catch {}
+    }
+    return next
+  }
+
   private broadcastSimClientStates() {
     for (const sim of this.sims.values()) {
       if (sim.ws.readyState !== WebSocket.OPEN) continue
@@ -2488,6 +2582,7 @@ export class SootSimBridgeHost {
       expiresAt: Date.now() + SootSimBridgeHost.SIM_RECONNECT_TTL_MS,
     })
     this.sims.delete(sim.id)
+    this.writeConnectedRuntimeSnapshot()
   }
 
   private getRestorableSimState(simId: string): BridgeRestorableSimState | null {

package/src/index.ts

@@ -6,5 +6,8 @@
 export { sootsimPlugin } from './vite-plugin-one'
 export { default as metroPlugin } from './metro-plugin'
 export { default as jumpToSourceBabelPlugin } from './jump-to-source-babel'
-export { DEFAULT_SOOTSIM_BRIDGE_PORT } from './bridge-constants'
+export {
+  DEFAULT_SOOTSIM_BRIDGE_PORT,
+  DEFAULT_SOOTSIM_BRIDGE_URL,
+} from './bridge-constants'
 export { DEFAULT_SOOTSIM_SHELL_URL } from './cli-constants'

package/src/menu.ts

@@ -493,7 +493,6 @@ function helpMenu(): SootSimMenuDef {
         action: 'open-devtools-report',
         showInShortcutDocs: true,
       },
-      { label: 'Show Onboarding', action: 'open-devtools-onboard' },
     ],
   }
 }

package/src/runtime-assets.ts

@@ -5,6 +5,7 @@
 import fs from 'fs'
 import path from 'path'
 import { fileURLToPath } from 'url'
+import { isValidRuntimeVersion } from '@contrast/runtime-delivery'
 import { readActiveRuntime, runtimeDir } from './home-paths'
 
 export const SOOTSIM_RUNTIME_MISSING_MESSAGE =
@@ -124,6 +125,40 @@ export function resolveActiveRuntimeRoot(): string | null {
   return dir
 }
 
+export function runtimeVersionHostname(version: string): string {
+  const trimmed = version.trim()
+  if (!isValidRuntimeVersion(trimmed)) {
+    throw new Error(`invalid SootSim runtime version: ${version}`)
+  }
+  const encoded = Buffer.from(trimmed, 'utf8').toString('hex')
+  const labels = encoded.match(/.{1,60}/g)
+  if (!labels) throw new Error(`invalid SootSim runtime version: ${version}`)
+  return `${labels.join('.')}.runtime.localhost`
+}
+
+export function runtimeVersionFromHostname(hostname: string): string | null {
+  const suffix = '.runtime.localhost'
+  if (!hostname.toLowerCase().endsWith(suffix)) return null
+  const labels = hostname.slice(0, -suffix.length).split('.')
+  if (labels.length === 0 || labels.some((label) => !/^[0-9a-f]{1,60}$/i.test(label))) {
+    return null
+  }
+  const encoded = labels.join('')
+  if (encoded.length % 2 !== 0) return null
+  try {
+    const version = Buffer.from(encoded, 'hex').toString('utf8')
+    return isValidRuntimeVersion(version) ? version : null
+  } catch {
+    return null
+  }
+}
+
+export function resolveInstalledRuntimeRoot(version: string): string | null {
+  const dir = runtimeDir(version)
+  if (!fs.existsSync(path.join(dir, 'index.html'))) return null
+  return dir
+}
+
 export function isRootRuntimeAssetPath(pathname: string): boolean {
   return ROOT_RUNTIME_PATHS.some((p) => pathname === p || pathname.startsWith(p))
 }

package/src/runtime-delivery.ts

@@ -1,8 +1,8 @@
 // sootsim's binding of the shared runtime-delivery machinery.
 //
 // the machinery itself (hosted manifest, sha256-verified tarballs, channels,
-// pinning, auto-update) lives in @contrast/runtime-delivery and knows nothing
-// about sootsim. this file supplies sootsim's identity: ~/.sootsim, the
+// channel resolution, and auto-update) lives in @contrast/runtime-delivery and
+// knows nothing about sootsim. this file supplies sootsim's identity: ~/.sootsim, the
 // SOOTSIM_* env overrides, and the contrast.dev/runtimes hosting layout.
 //
 // @contrast/runtime-delivery is an internal workspace package that is never
@@ -23,12 +23,10 @@ import {
 
 export const DEFAULT_RUNTIME_CDN_ORIGIN = 'https://contrast.dev'
 
-/** website URL where the sootsim changelog is rendered. the CLI used to drain
- *  a paginated /api/changelog/sootsim endpoint here; the changelog is now a
- *  static page checked into the Contrast repo (one MDX file per runtime release
- *  under src/features/site/changelog/sootsim-entries/), so `sootsim runtime
- *  notes` points users at the page. */
+/** the official curated changelog and the machine-readable release feed. the
+ *  SootSim site is static, so its /api traffic is owned by contrast.dev. */
 export const SOOTSIM_CHANGELOG_URL = 'https://sootsim.com/changelog'
+export const SOOTSIM_CHANGELOG_API_URL = 'https://contrast.dev/api/changelog/sootsim'
 
 export const SOOTSIM_RUNTIME_PRODUCT: RuntimeProduct = {
   id: 'sootsim',
@@ -42,7 +40,6 @@ export const SOOTSIM_RUNTIME_PRODUCT: RuntimeProduct = {
   env: {
     cdnOrigin: 'SOOTSIM_CDN_ORIGIN',
     channel: 'SOOTSIM_RUNTIME_CHANNEL',
-    pin: 'SOOTSIM_RUNTIME_VERSION',
   },
   ensureHome: ensureSootsimHome,
   configFile: configFilePath,

package/src/skills/builtin/compat-check.ts

@@ -2,15 +2,6 @@
 
 import type { SootSimSkill } from '../types'
 
-function getCompatStatus(entry: {
-  stubType: 'native' | 'works' | 'build-only'
-  versions: Array<{ coverage: number }>
-}): 'full' | 'partial' | 'auto-stub' {
-  if (entry.stubType === 'works') return 'full'
-  if (entry.stubType === 'build-only') return 'full'
-  return entry.versions.some((version) => version.coverage >= 1) ? 'full' : 'auto-stub'
-}
-
 export const skill: SootSimSkill = {
   name: 'compat-check',
   description: 'Check package compatibility with sootsim',
@@ -28,77 +19,53 @@ export const skill: SootSimSkill = {
         },
       },
       async execute(params, context) {
-        const fs = await import('fs')
-        const path = await import('path')
-
-        const { POLYFILL_REGISTRY } = await import('../../../../compat/src/web.ts')
-
-        if (params.packageName) {
-          const entry = POLYFILL_REGISTRY[params.packageName]
-          if (!entry) {
-            return {
-              success: true,
-              message: `${params.packageName}: not in registry (may be auto-stubbed if native)`,
-              data: { package: params.packageName, status: 'unknown' },
-            }
-          }
-          const status = getCompatStatus(entry)
-          return {
-            success: true,
-            message: `${params.packageName}: ${status}`,
-            data: { package: params.packageName, status, ...entry },
-          }
-        }
+        const fs = await import('node:fs')
+        const path = await import('node:path')
+        const { COMPAT_RESULT_CAVEAT, formatPackageStatus, formatScanCounts, scanDeps } =
+          await import('../../../../compat/src/web.ts')
 
-        // scan project deps
-        const pkgPath = path.join(context.projectDir, 'package.json')
-        if (!fs.existsSync(pkgPath)) {
+        const packagePath = path.join(context.projectDir, 'package.json')
+        if (!fs.existsSync(packagePath)) {
           return { success: false, message: 'No package.json found' }
         }
-
-        const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'))
-        const allDeps = { ...pkg.dependencies, ...pkg.devDependencies }
-
-        const results: Record<string, string[]> = {
-          full: [],
-          partial: [],
-          'auto-stub': [],
-          unsupported: [],
-          unknown: [],
+        const parsed: unknown = JSON.parse(fs.readFileSync(packagePath, 'utf8'))
+        if (!parsed || typeof parsed !== 'object') {
+          return { success: false, message: 'package.json is not an object' }
         }
 
-        for (const dep of Object.keys(allDeps)) {
-          const entry = POLYFILL_REGISTRY[dep]
-          if (entry) {
-            const status = getCompatStatus(entry)
-            if (results[status]) results[status].push(dep)
-          } else if (isNative(dep)) {
-            results.unknown.push(dep)
-          }
-        }
+        const dependencies = readDependencies(parsed)
+        const scan = params.packageName
+          ? scanDeps({
+              dependencies: {
+                [params.packageName]: dependencies[params.packageName] ?? '*',
+              },
+            })
+          : scanDeps(parsed)
+        const packageResult = params.packageName ? scan.packages[0] : undefined
+        const message = packageResult
+          ? `${params.packageName}: ${formatPackageStatus(packageResult)}. ${COMPAT_RESULT_CAVEAT}`
+          : `${formatScanCounts(scan)}. ${COMPAT_RESULT_CAVEAT}`
 
         const reportPath = path.join(context.outputDir, 'compat-report.json')
         fs.mkdirSync(path.dirname(reportPath), { recursive: true })
-        fs.writeFileSync(reportPath, JSON.stringify(results, null, 2))
+        fs.writeFileSync(reportPath, `${JSON.stringify(scan, null, 2)}\n`)
 
         return {
-          success: results.unsupported.length === 0,
-          message: `${results.full.length} full, ${results.partial.length} partial, ${results.unsupported.length} unsupported, ${results.unknown.length} unknown`,
+          success: true,
+          message,
           artifacts: [{ type: 'report', name: 'compat-report', path: reportPath }],
-          data: results,
+          data: scan,
         }
       },
     },
   ],
 }
 
-function isNative(name: string): boolean {
-  return (
-    name.startsWith('expo-') ||
-    name.startsWith('react-native-') ||
-    name.startsWith('@react-native/') ||
-    name.startsWith('@react-native-community/') ||
-    name.startsWith('@expo/') ||
-    name === 'expo'
-  )
+function readDependencies(value: object): Record<string, string> {
+  const dependencies = Reflect.get(value, 'dependencies')
+  const devDependencies = Reflect.get(value, 'devDependencies')
+  return {
+    ...(dependencies && typeof dependencies === 'object' ? dependencies : {}),
+    ...(devDependencies && typeof devDependencies === 'object' ? devDependencies : {}),
+  }
 }

package/dist-cli/chunks/app-fonts-IMYBO6AQ.js

@@ -1,4 +0,0 @@
-/*! sootsim v0.1.294 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import { createRequire as __sootsimCreateRequire } from 'node:module'
-var require = __sootsimCreateRequire(import.meta.url)
-import{d as p}from"./chunk-37ZXWXM3.js";import"./chunk-D2R7PDN5.js";import{existsSync as h,mkdirSync as d,readFileSync as y,writeFileSync as g}from"node:fs";import{join as m}from"node:path";import{gzipSync as w}from"node:zlib";function f(t,e){let o=t.indexOf(`--${e}`);if(o!==-1&&o+1<t.length)return t[o+1];let i=t.find(r=>r.startsWith(`--${e}=`));return i?i.slice(e.length+3):void 0}async function S(t){let e=f(t,"wire")||"",o=f(t,"out-dir"),i=f(t,"manifest");if((!o||!i)&&(console.error("  usage: sootsim app-fonts stage --wire <wire> --out-dir <dir> --manifest <path>"),process.exit(1)),!e.trim()){console.log("no app fonts declared \u2014 nothing to stage");return}d(o,{recursive:!0});let r=await p(e,{onStaged:({url:n,byteLength:s})=>console.log(`  staged app font: ${n} (${(s/1024).toFixed(1)} KiB)`),onError:(n,s)=>console.error(`  warning: failed to fetch app font ${n}: ${s instanceof Error?s.message:s}`)}),a=[];for(let n of r){let s=w(n.bytes);g(m(o,n.urlhash),s),a.push({url:n.url,urlhash:n.urlhash,contentType:n.contentType,encoding:"gzip",sizeBytes:s.length,rawBytes:n.bytes.byteLength})}let c=[];if(h(i))try{let n=JSON.parse(y(i,"utf8"));Array.isArray(n)&&(c=n)}catch{}let u=new Set(c.map(n=>n.urlhash)),l=[...c,...a.filter(n=>!u.has(n.urlhash))];g(i,JSON.stringify(l)),console.log(`staged ${a.length} app font(s); manifest now has ${l.length} file(s)`)}async function E(t){let e=t[0];if(e==="stage"){await S(t.slice(1));return}console.error(`  unknown app-fonts subcommand: ${e??"(none)"}`),console.error("  available: stage"),process.exit(1)}export{E as runAppFonts};

package/dist-cli/chunks/chunk-37ZXWXM3.js

@@ -1,4 +0,0 @@
-/*! sootsim v0.1.294 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import { createRequire as __sootsimCreateRequire } from 'node:module'
-var require = __sootsimCreateRequire(import.meta.url)
-import{createHash as U}from"node:crypto";import w from"node:fs";import{createRequire as D}from"node:module";import s from"node:path";var R=/\.(ttf|otf|woff|woff2)$/i;function N(t,e,o){if(!t||typeof t!="object")return;let n=t.fonts;if(Array.isArray(n))for(let i of n)typeof i=="string"&&o.push(i);let r=t[e];if(!r||typeof r!="object")return;let c=r.fonts;if(Array.isArray(c))for(let i of c){if(typeof i=="string"){o.push(i);continue}if(!i||typeof i!="object")continue;let f=i.fontDefinitions;if(Array.isArray(f))for(let y of f){if(!y||typeof y!="object")continue;let h=y.path;typeof h=="string"&&o.push(h)}}}function C(t,e){if(!Array.isArray(t))return[];let o=[];for(let n of t){let r=Array.isArray(n)?n[0]:n;if(typeof r!="string"||!/(^|\/)expo-font$/.test(r))continue;let c=Array.isArray(n)?n[1]??{}:{};N(c,e,o)}return o}function L(t){return t.slice(t.lastIndexOf("/")+1).replace(R,"")}function S(t,e){let o=e.replace(/\/+$/,""),n=new Set,r=[];for(let c of t){let i=c.replace(/^\.\//,"").replace(/^\/+/,"");!i||n.has(i)||(n.add(i),R.test(i)&&r.push({family:L(i),url:`${o}/assets/${i}`}))}return r}var k=D(import.meta.url);function _(t){try{let e=new URL(t),o=e.hostname.replace(/^\[|\]$/g,"").toLowerCase();if(o==="localhost"||o.endsWith(".localhost")||o==="0.0.0.0"||o==="::1"||/^127(?:\.\d{1,3}){3}$/.test(o))return e.origin}catch{}return null}var M=["app.config.js","app.config.ts","app.config.cjs","app.config.mjs","app.json"];function $(t){for(let e of M)try{if(w.statSync(s.join(t,e)).isFile())return!0}catch{}return!1}var W=new Set(["node_modules","artifacts","dist","build","out","coverage","tmp","public","ios","android","macos","windows","__fixtures__","__tests__","examples","example"]);function T(t,e){$(t)&&e.push(t);let o;try{o=w.readdirSync(t,{withFileTypes:!0})}catch{return}for(let n of o)n.isDirectory()&&(n.name.startsWith(".")||W.has(n.name)||T(s.join(t,n.name),e))}function q(t){try{return w.statSync(s.join(t,"package.json")).isFile()}catch{return!1}}function Q(t){let e=_(t.bundleUrl);if(!e)return[];let o=t.repoDir||process.env.CONTRAST_REPO_DIR,n=o?s.resolve(o):process.cwd();if(!o&&!q(n))return[];let r=[];o?(T(n,r),r.includes(n)||r.push(n)):r.push(n);let c=(t.platform||process.env.CONTRAST_PLATFORM||"ios").toLowerCase(),i=null;if(o||$(n))try{let l=k.resolve("@expo/config",{paths:[...r,n]}),p=k(l);typeof p.getConfig=="function"&&(i=p.getConfig)}catch{}let f=n,y=[];if(i)for(let l of r)try{let p=i(l,{skipSDKVersionRequirement:!0});if(p?.exp&&typeof p.exp=="object"){let u=p.exp.plugins;if(Array.isArray(u)){f=l,y=u;break}}}catch{}let h=C(y,c==="android"?"android":"ios"),A=(l,p)=>{let u=[l];for(;u.length>0;){let a=u.pop();if(!a)continue;let g;try{g=w.readdirSync(a,{withFileTypes:!0})}catch{continue}for(let d of g){let m=s.join(a,d.name);if(d.isDirectory()){u.push(m);continue}if(!d.isFile()||!/\.(ttf|otf|woff|woff2)$/i.test(d.name))continue;let F=s.relative(l,m).split(s.sep).join("/");h.push(s.posix.join(p,F))}}};try{let l=JSON.parse(w.readFileSync(s.join(f,"package.json"),"utf8")),p=new Set;for(let a of["dependencies","devDependencies","optionalDependencies"]){let g=Reflect.get(l,a);if(!(!g||typeof g!="object"))for(let d of Object.keys(g))p.add(d)}let u=[...p].filter(a=>a==="react-native-vector-icons"||a.startsWith("@react-native-vector-icons/"));if(u.length>0){let a=Reflect.get(l,"reactNativeVectorIcons"),g=a&&typeof a=="object"?Reflect.get(a,"fontDir"):null,d=typeof g=="string"?g:"rnvi-fonts",m=s.resolve(f,d),F=s.relative(f,m);!F.startsWith("..")&&!s.isAbsolute(F)&&A(m,F.split(s.sep).join("/"));let E=D(s.join(f,"package.json"));for(let x of u)try{let j=E.resolve(x),O=x.split("/").join(s.sep),v=`${s.sep}node_modules${s.sep}${O}${s.sep}`,P=j.lastIndexOf(v);if(P===-1)continue;let I=j.slice(0,P+v.length-1),b=x==="react-native-vector-icons"?"Fonts":"fonts";A(s.join(I,b),s.posix.join("node_modules",x,b))}catch{}}}catch{}return S(h,e)}async function Y(t,e){let o=_(t);if(!o)return null;let n=new AbortController,r=setTimeout(()=>n.abort(),e?.timeoutMs??1500);try{let c=await fetch(`${o}/`,{headers:{"expo-platform":"ios",Accept:"application/json"},signal:n.signal});if(!c.ok)return null;let f=(await c.json())?.extra?.expoClient?._internal?.projectRoot;return typeof f=="string"&&f.length>0?f:null}catch{return null}finally{clearTimeout(r)}}function Z(t){return t.map(e=>`${encodeURIComponent(e.url)}::${encodeURIComponent(e.family)}`).join(",")}function G(t){let e=[];for(let o of t.split(",")){let n=o.trim();if(!n)continue;let r=n.indexOf("::"),c=r===-1?n:n.slice(0,r);try{e.push(decodeURIComponent(c))}catch{e.push(c)}}return e.filter(Boolean)}function J(t){let e=(t.split("?")[0].split(".").pop()||"").toLowerCase();return e==="ttf"?"font/ttf":e==="otf"?"font/otf":e==="woff"?"font/woff":e==="woff2"?"font/woff2":"application/octet-stream"}async function tt(t,e){let o=[],n=new Set;for(let r of G(t)){let c=U("sha256").update(r).digest("hex");if(!n.has(c)){n.add(c);try{let i=await fetch(r);if(!i.ok){e?.onError?.(r,new Error(`${i.status} ${i.statusText}`));continue}let f=new Uint8Array(await i.arrayBuffer());o.push({url:r,urlhash:c,contentType:J(r),bytes:f}),e?.onStaged?.({url:r,byteLength:f.byteLength})}catch(i){e?.onError?.(r,i)}}}return o}export{Q as a,Y as b,Z as c,tt as d};

package/dist-cli/chunks/chunk-3F2GAJ4Z.js

@@ -1,6 +0,0 @@
-/*! sootsim v0.1.294 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import { createRequire as __sootsimCreateRequire } from 'node:module'
-var require = __sootsimCreateRequire(import.meta.url)
-import{createInterface as i}from"readline";var c=()=>i({input:process.stdin,output:process.stdout});function s(o){return new Promise(n=>{let r=c();r.question(o,t=>{r.close(),n(t.trim())})})}async function u(o,n=!0){let r=n?"[Y/n]":"[y/N]";if(!process.stdin.isTTY)return console.log(`  ${o} ${r} ${n?"y":"n"} (non-interactive)`),n;let t=await s(`  ${o} ${r} `);return t===""?n:t.toLowerCase().startsWith("y")}async function a(o,n){console.log(`
-  ${o}
-`);for(let e=0;e<n.length;e++)console.log(`    ${e+1}. ${n[e]}`);if(console.log(),!process.stdin.isTTY)return console.log(`  choose [1-${n.length}]: 1 (non-interactive)`),0;let r=await s(`  choose [1-${n.length}]: `),t=parseInt(r,10);return t>=1&&t<=n.length?t-1:0}export{u as a,a as b};

package/dist-cli/chunks/chunk-5S3GPTX7.js

@@ -1,6 +0,0 @@
-/*! sootsim v0.1.294 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import { createRequire as __sootsimCreateRequire } from 'node:module'
-var require = __sootsimCreateRequire(import.meta.url)
-import{d as h}from"./chunk-CTMPC5DN.js";import{b as w}from"./chunk-AO65WEF7.js";import{G as v,K as B,M as C,g as S}from"./chunk-WQL3BLFD.js";import a from"node:fs";import c from"node:path";var g=1,E=`automatic-cleanup-v${g}.json`,L=`automatic-cleanup-v${g}.lock`,P=360*60*1e3;function k(){let i=c.join(S(),E);try{return JSON.parse(a.readFileSync(i,"utf8")).generation===g}catch{return!1}}function M(i){if(i<1024)return`${i} B`;let e=["KiB","MiB","GiB","TiB"],n=i/1024,r=e[0];for(let s=1;s<e.length&&n>=1024;s++)n/=1024,r=e[s];return`${n.toFixed(n>=10?1:2)} ${r}`}function p(i){let e;try{e=a.lstatSync(i)}catch{return 0}let n=e.blocks>0?e.blocks*512:e.size;if(!e.isDirectory()||e.isSymbolicLink())return n;let r=n;try{for(let s of a.readdirSync(i))r+=p(c.join(i,s))}catch{}return r}function R(i){for(let e of["SingletonLock","SingletonSocket","lockfile"])try{if(a.lstatSync(c.join(i,e)))return!0}catch{}return!1}function b(i,e){let n;try{n=a.readdirSync(i,{withFileTypes:!0})}catch{return[]}let r=R(e),s=[];for(let t of n){if(!t.isDirectory()||t.isSymbolicLink())continue;let o=c.join(i,t.name);if(w(t.name)){s.push({path:o,bytes:p(o),kind:"browser-cache",state:r?"in-use":"safe",selected:!r,detail:r?"browser profile is open; close it before cleanup":"disposable browser HTTP, bytecode, or GPU cache"});continue}s.push(...b(o,e))}return s}function U(i){let e=c.join(i,"profiles","playwright"),n;try{n=a.readdirSync(e,{withFileTypes:!0})}catch{return[]}return n.flatMap(r=>{if(!r.isDirectory()||r.isSymbolicLink())return[];let s=c.join(e,r.name);return b(s,s)})}function V(i){let e=c.join(i,"electron","userData");return b(e,e)}function D(i,e){let n=c.join(i,"recordings"),r;try{r=a.readdirSync(n,{withFileTypes:!0})}catch{return[]}return r.map(s=>{let t=c.join(n,s.name);return{path:t,bytes:p(t),kind:"recording",state:"aggressive",selected:e,detail:"user-created recording or captured-frame output"}})}function A(){let i=B();return!C(i)||!i.activeRuntime?[]:[i.activeRuntime]}function x(i){let e=new Set(A()),n=[...e],r=h.planLocalRetention({retainVersions:2,protectVersions:n}),s=h.planLocalRetention({retainVersions:1,protectVersions:n}),t=new Set(r.removeVersions),o=new Set(s.removeVersions),u=new Set([...r.keepVersions,...r.removeVersions,...s.keepVersions,...s.removeVersions]),m=[];for(let l of[...u].sort()){let d=h.product.runtimeDir(l),y="retained",f="retained runtime";e.has(l)&&l!==r.activeVersion&&l!==r.pinnedVersion?(y="in-use",f="runtime is served by the running daemon"):t.has(l)?(y="safe",f="inactive runtime outside the two-version rollback window"):o.has(l)?(y="aggressive",f="most recent rollback runtime"):l===r.activeVersion?f="active runtime; always protected":l===r.pinnedVersion&&(f="pinned runtime; always protected"),m.push({path:d,bytes:p(d),kind:"runtime-version",state:y,selected:y==="safe"||y==="aggressive"&&i,detail:f})}for(let l of r.removeCacheFiles)m.push({path:l,bytes:p(l),kind:"runtime-archive",state:"safe",selected:!0,detail:"downloaded archive is unnecessary after successful extraction"});return{activeRuntime:r.activeVersion,pinnedRuntime:r.pinnedVersion,entries:m}}function T(i={}){let e=i.aggressive===!0,n=S(),r=x(e),s=[...r.entries,...U(n),...V(n),...D(n,e)].sort((t,o)=>o.bytes-t.bytes||t.path.localeCompare(o.path));return{home:n,activeRuntime:r.activeRuntime,pinnedRuntime:r.pinnedRuntime,entries:s,reclaimableBytes:s.reduce((t,o)=>t+(o.selected?o.bytes:0),0),protectedBytes:s.reduce((t,o)=>t+(o.selected?0:o.bytes),0),totalBytes:p(n)}}function I(i,e){let n=c.relative(i,e);if(!n||n.startsWith("..")||c.isAbsolute(n))throw new Error(`refusing cleanup target outside the SootSim home: ${e}`)}function F(i={}){let e=T(i),n=i.aggressive===!0?1:2;h.pruneLocalRetention({retainVersions:n,protectVersions:A()});for(let t of e.entries)if(t.selected&&!(t.kind==="runtime-archive"||t.kind==="runtime-version")){if(t.kind==="browser-cache"){let u=c.relative(e.home,t.path).split(c.sep),m=u[0]==="profiles"&&u[1]==="playwright"&&u[2]?c.join(e.home,"profiles","playwright",u[2]):u[0]==="electron"&&u[1]==="userData"?c.join(e.home,"electron","userData"):null;if(m&&R(m)){t.state="in-use",t.selected=!1,t.detail="browser profile opened while cleanup was starting";continue}}I(e.home,t.path),a.rmSync(t.path,{recursive:!0,force:!0})}let r=e.entries.filter(t=>t.selected&&!a.existsSync(t.path)).map(t=>t.path),s=p(e.home);return{...e,removedPaths:r,reclaimedBytes:Math.max(0,e.totalBytes-s),remainingBytes:s}}function K(){v();let i=S(),e=c.join(i,E),n=c.join(i,L);if(k())return{status:"already-complete",reclaimedBytes:0,remainingBytes:0,deferredInUseBytes:0};let r=null;for(let s=0;s<2&&r===null;s++)try{let t=a.openSync(n,"wx");try{a.writeFileSync(t,`${JSON.stringify({pid:process.pid,startedAt:Date.now()})}
-`,"utf8"),r=t}catch(o){a.closeSync(t);try{a.unlinkSync(n)}catch{}throw o}}catch(t){if((t instanceof Error&&"code"in t?t.code:null)!=="EEXIST")throw t;let u=0,m=0,l=null;try{l=a.lstatSync(n);let d=JSON.parse(a.readFileSync(n,"utf8"));u=typeof d.pid=="number"?d.pid:0,m=typeof d.startedAt=="number"?d.startedAt:0}catch{}if(u>0&&m>0&&Date.now()-m<P)try{return process.kill(u,0),{status:"busy",reclaimedBytes:0,remainingBytes:0,deferredInUseBytes:0}}catch{}if(!l)continue;try{let d=a.lstatSync(n);if(d.dev!==l.dev||d.ino!==l.ino)return{status:"busy",reclaimedBytes:0,remainingBytes:0,deferredInUseBytes:0};a.unlinkSync(n)}catch{}}if(r===null)return{status:"busy",reclaimedBytes:0,remainingBytes:0,deferredInUseBytes:0};try{if(k())return{status:"already-complete",reclaimedBytes:0,remainingBytes:0,deferredInUseBytes:0};let s=F(),t=s.entries.reduce((u,m)=>u+(m.state==="in-use"?m.bytes:0),0);if(t>0)return{status:"deferred",reclaimedBytes:s.reclaimedBytes,remainingBytes:s.remainingBytes,deferredInUseBytes:t};let o=`${e}.${process.pid}.tmp`;return a.writeFileSync(o,`${JSON.stringify({generation:g,completedAt:Date.now(),reclaimedBytes:s.reclaimedBytes})}
-`,"utf8"),a.renameSync(o,e),{status:"complete",reclaimedBytes:s.reclaimedBytes,remainingBytes:s.remainingBytes,deferredInUseBytes:0}}finally{a.closeSync(r);try{a.unlinkSync(n)}catch{}}}export{k as a,M as b,T as c,F as d,K as e};

package/dist-cli/chunks/chunk-6YN3IAWJ.js

@@ -1,4 +0,0 @@
-/*! sootsim v0.1.294 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import { createRequire as __sootsimCreateRequire } from 'node:module'
-var require = __sootsimCreateRequire(import.meta.url)
-import{createHash as D}from"node:crypto";import y from"node:fs";import{createRequire as I}from"node:module";import h from"node:path";var w=/(^|\/)expo-splash-screen$/,R=/(^|\/)react-native-bootsplash$/;function U(n,e){let r=e.replace(/\/+$/,""),o=n.replace(/^\.\//,"").replace(/^\/+/,"");if(o)return`${r}/assets/${o}`}function d(n,e,r){return r?r(n):U(n,e)}function C(n){if(n==="cover")return"cover";if(n==="contain"||n==="native")return"contain"}function p(n){return typeof n=="string"&&n.length>0?n:void 0}function k(n){return typeof n=="number"&&Number.isFinite(n)?n:void 0}function v(n,e,r){if(!n||typeof n!="object")return null;let o=n,s={source:"expo-splash-screen",backgroundColor:p(o.backgroundColor)??"#ffffff"},a=p(o.image);a&&(s.imageUrl=d(a,e,r));let t=k(o.imageWidth);t!=null&&(s.imageWidthPx=t);let c=C(o.resizeMode);c&&(s.resizeMode=c);let l=o.dark;if(l&&typeof l=="object"){let u=l,g=p(u.backgroundColor),f=p(u.image);(g||f)&&(s.dark={},g&&(s.dark.backgroundColor=g),f&&(s.dark.imageUrl=d(f,e,r)))}return s}function j(n,e,r,o){let i=n[e],s=i&&typeof i=="object"?i.splash:void 0,a=n.splash,t=s&&typeof s=="object"?s:a;if(!t||typeof t!="object")return null;let l={source:"expo-legacy",backgroundColor:p(t.backgroundColor)??"#ffffff",imageWidthPx:k(t.imageWidth)??200,resizeMode:C(t.resizeMode)??"contain"},u=p(t.image);u&&(l.imageUrl=d(u,r,o));let g=t.dark;if(g&&typeof g=="object"){let f=g,S=p(f.backgroundColor),m=p(f.image);(S||m)&&(l.dark={},S&&(l.dark.backgroundColor=S),m&&(l.dark.imageUrl=d(m,r,o)))}return l}function _(n,e,r){if(!n||typeof n!="object")return null;let o=n,i=p(o.logo);if(!i)return null;let s={source:"react-native-bootsplash",backgroundColor:p(o.background)??"#fff",imageUrl:d(i,e,r),imageWidthPx:k(o.logoWidth)??100,resizeMode:"contain"},a=p(o.darkBackground),t=p(o.darkLogo);return(a||t)&&(s.dark={},a&&(s.dark.backgroundColor=a),t&&(s.dark.imageUrl=d(t,e,r))),s}function b(n,e,r,o={}){if(!n||typeof n!="object")return null;let i=n,s=i.plugins,a=null,t=null;if(Array.isArray(s))for(let c of s){let l=Array.isArray(c)?c[0]:c;if(typeof l!="string")continue;let u=Array.isArray(c)?c[1]??{}:{};!a&&w.test(l)?a=v(u,r,o.resolveAssetUrl):!t&&R.test(l)&&(t=_(u,r,o.resolveAssetUrl))}return t||a||j(i,e,r,o.resolveAssetUrl)}var x=I(import.meta.url);function E(n){try{let e=new URL(n),r=e.hostname.replace(/^\[|\]$/g,"").toLowerCase();if(r==="localhost"||r.endsWith(".localhost")||r==="0.0.0.0"||r==="::1"||/^127(?:\.\d{1,3}){3}$/.test(r))return e.origin}catch{}return null}var L=["app.config.js","app.config.ts","app.config.cjs","app.config.mjs","app.json"];function P(n){for(let e of L)try{if(y.statSync(h.join(n,e)).isFile())return!0}catch{}return!1}var F=new Set(["node_modules","artifacts","dist","build","out","coverage","tmp","public","ios","android","macos","windows","__fixtures__","__tests__","examples","example"]);function A(n,e){P(n)&&e.push(n);let r;try{r=y.readdirSync(n,{withFileTypes:!0})}catch{return}for(let o of r)o.isDirectory()&&(o.name.startsWith(".")||F.has(o.name)||A(h.join(n,o.name),e))}function M(n){try{return y.statSync(h.join(n,"package.json")).isFile()}catch{return!1}}function H(n){let e=E(n.bundleUrl);if(!e)return null;let r=n.repoDir||process.env.CONTRAST_REPO_DIR,o=r?h.resolve(r):process.cwd();if(!r&&!M(o))return null;let i=[];if(r)A(o,i),i.includes(o)||i.push(o);else{if(!P(o))return null;i.push(o)}if(i.length===0)return null;let s=(n.platform||process.env.CONTRAST_PLATFORM||"ios").toLowerCase(),a=null;try{let c=x.resolve("@expo/config",{paths:[...i,o]}),l=x(c);typeof l.getConfig=="function"&&(a=l.getConfig)}catch{}if(!a)return null;let t;for(let c of i)try{let l=a(c,{skipSDKVersionRequirement:!0});if(l?.exp&&typeof l.exp=="object"){t=l.exp;break}}catch{}return!t||typeof t!="object"?null:b(t,s==="android"?"android":"ios",e)}function J(n){return encodeURIComponent(JSON.stringify(n))}function z(n){if(!n)return null;try{let e=JSON.parse(decodeURIComponent(n));if(!e||typeof e!="object")return null;let r=e;return r.source!=="expo-splash-screen"&&r.source!=="expo-legacy"&&r.source!=="react-native-bootsplash"||typeof r.backgroundColor!="string"?null:e}catch{return null}}function W(n){let e=new Set;return n.imageUrl&&e.add(n.imageUrl),n.dark?.imageUrl&&e.add(n.dark.imageUrl),[...e]}function N(n){let e=(n.split("?")[0].split(".").pop()||"").toLowerCase();return e==="png"?"image/png":e==="jpg"||e==="jpeg"?"image/jpeg":e==="webp"?"image/webp":e==="gif"?"image/gif":e==="svg"?"image/svg+xml":"application/octet-stream"}async function K(n,e){let r=z(n);if(!r)return[];let o=[],i=new Set;for(let s of W(r)){let a=D("sha256").update(s).digest("hex");if(!i.has(a)){i.add(a);try{let t=await fetch(s);if(!t.ok){e?.onError?.(s,new Error(`${t.status} ${t.statusText}`));continue}let c=new Uint8Array(await t.arrayBuffer());o.push({url:s,urlhash:a,contentType:N(s),bytes:c}),e?.onStaged?.({url:s,byteLength:c.byteLength})}catch(t){e?.onError?.(s,t)}}}return o}export{H as a,J as b,K as c};