sdk-release-kit 0.2.0__py3-none-any.whl

sdk_release_kit/__init__.py

@@ -0,0 +1,3 @@
+"""SDK Release Kit: build mobile SDK demo apps and packages, then publish them."""
+
+__version__ = "0.2.0"

sdk_release_kit/_data/examples/custom.example.yaml

@@ -0,0 +1,18 @@
+# Custom data: free-form YAML. Recipes read it through ${custom.some.key}.
+# Unknown keys are kept as written, so teams and AI agents can add their own.
+
+# Apple Developer team used for archive and export (leave empty for automatic).
+ios_team_id: ""
+
+# Store identifiers of the demo apps, used for Play and TestFlight uploads.
+app_ids:
+  android_native: com.example.paymentsdk.demo
+  ios_native: com.example.paymentsdk.demoapp
+  flutter_android: com.example.paymentsdk.flutter.demoapp
+  flutter_ios: com.example.paymentsdk.flutter.demoapp
+  rn_android: com.example.paymentsdk.reactnative.demoapp
+  rn_ios: com.example.paymentsdk.reactnative.demoapp
+
+# Anything else your team wants to keep with the tool, for example:
+# notify:
+#   slack_webhook_env: SLACK_WEBHOOK_URL

sdk_release_kit/_data/examples/keys.example.yaml

@@ -0,0 +1,18 @@
+# Keys: PATHS to key files and REFERENCES to secrets. Never put a password in this file.
+# A secret reference is {source: env|keychain|none, name: ...}.
+#   env:      read from the environment variable `name`
+#   keychain: read from the OS keychain, service "sdk-release-kit", account `name`
+#             (set with `sdk-release-kit keys set <name>` or the Keys page)
+schema_version: 1
+android:
+  keystore_path: ~/path/to/release.keystore
+  key_alias: release
+  store_password: {source: keychain, name: android.store_password}
+  key_password: {source: keychain, name: android.key_password}
+  inject_signing: true
+play:
+  json_key_path: ~/path/to/play-service-account.json
+testflight:
+  key_id: {source: env, name: ASC_KEY_ID}
+  issuer_id: {source: env, name: ASC_ISSUER_ID}
+  key_path: ~/path/to/AuthKey_XXXXXXXXXX.p8

sdk_release_kit/_data/examples/outputs.example.yaml

@@ -0,0 +1,19 @@
+# Outputs: where artifacts go. Not committed anywhere.
+schema_version: 1
+staging: ~/sdk-release-kit/staging
+onedrive:
+  # Any locally synced folder works (OneDrive, Google Drive, Dropbox, an SMB mount).
+  enabled: false
+  root: ~/path/to/OneDrive/Mobile SDK Builds
+  demos_android: android
+  demos_ios: ios
+  packages: packages
+  copy_untargeted: false
+play:
+  enabled: false
+  track: internal
+  release_status: completed   # use "draft" for an app that has never been published
+  method: auto                # auto | api | fastlane
+testflight:
+  enabled: false
+  method: altool              # altool | fastlane

sdk_release_kit/_data/examples/repos.example.yaml

@@ -0,0 +1,33 @@
+# Repositories: recipe id -> checkout on THIS machine. Not committed anywhere.
+# Copied to <settings dir>/repos.yaml by `sdk-release-kit init`.
+schema_version: 1
+repos:
+  android-current:
+    path: ~/path/to/payment-sdk-android
+    enabled: true
+  android-legacy:
+    path: ~/path/to/payment-sdk-android-legacy
+    enabled: false
+  ios-current:
+    path: ~/path/to/payment-sdk-ios
+    enabled: false
+  ios-legacy:
+    path: ~/path/to/payment-sdk-ios-legacy
+    enabled: false
+  flutter:
+    path: ~/path/to/payment-sdk-flutter
+    enabled: false
+  reactnative-current:
+    path: ~/path/to/payment-sdk-react-native
+    enabled: false
+  reactnative-legacy:
+    path: ~/path/to/payment-sdk-react-native-legacy
+    enabled: false
+tooling:
+  # Android Studio's bundled JDK on macOS is usually:
+  # /Applications/Android Studio.app/Contents/jbr/Contents/Home
+  java_home: null
+  android_sdk: ~/Library/Android/sdk
+  flutter_bin: null      # e.g. ~/path/to/flutter/bin
+  developer_dir: null    # e.g. /Applications/Xcode.app/Contents/Developer
+  extra_path: []

sdk_release_kit/_data/recipes/sdks.yaml

@@ -0,0 +1,222 @@
+# Portable build recipes. Shipped in git.
+#
+# Rules (see AGENTS.md):
+# - Paths here are RELATIVE to the SDK checkout. Absolute paths belong in user settings.
+# - No secrets. Identifiers that differ per team come from Custom data via ${custom.key:-default}.
+# - Adjust workdirs, workspaces and schemes to your repositories, or override them per machine
+#   with a file in <settings dir>/recipes.d/ (deep-merged over this file).
+#
+# Step types: run, gradle, flutter, xcode-simulator, xcode-ipa, xcframework, npm-pack, source-zip.
+# Optional on any step: name, workdir, env, when: [onedrive|play|testflight], host: any|macos,
+# collect: [{glob, kind, target, root, required}].
+
+schema_version: 1
+
+# Shared-folder targets for demo apps: <onedrive root>/<outputs.onedrive[folder]>/<name>
+onedrive_targets:
+  android-native-current: {folder: demos_android, name: native-current.apk}
+  android-native-legacy: {folder: demos_android, name: native-legacy.apk}
+  android-flutter: {folder: demos_android, name: flutter.apk}
+  android-rn-current: {folder: demos_android, name: rn-current.apk}
+  android-rn-legacy: {folder: demos_android, name: rn-legacy.apk}
+  ios-native-current: {folder: demos_ios, name: native-current.app}
+  ios-native-legacy: {folder: demos_ios, name: native-legacy.app}
+  ios-flutter: {folder: demos_ios, name: flutter.app}
+  ios-rn-current: {folder: demos_ios, name: rn-current.app}
+  ios-rn-legacy: {folder: demos_ios, name: rn-legacy.app}
+
+recipes:
+  # ------------------------------------------------------------------------------- Android
+  android-current:
+    platform: android
+    label: Android native SDK (current)
+    version: {file: gradle.properties, regex: '^\s*VERSION_NAME\s*=\s*(\S+)'}
+    store:
+      play: true
+      android_package: "${custom.app_ids.android_native:-com.example.paymentsdk.demo}"
+    demos:
+      - type: gradle
+        name: demo APK + AAB
+        tasks: [":app:assembleRelease", ":app:bundleRelease"]
+        collect:
+          - {glob: "app/build/outputs/apk/release/*.apk", kind: apk, target: android-native-current}
+          - {glob: "app/build/outputs/bundle/release/*.aab", kind: aab}
+    packages:
+      - type: gradle
+        name: AARs to Maven local
+        tasks: [publishToMavenLocal]
+        sign: false
+        collect:
+          - {glob: "*/build/outputs/aar/*-release.aar", kind: aar}
+
+  android-legacy:
+    platform: android
+    label: Android native SDK (legacy)
+    version: {file: gradle.properties, regex: '^\s*VERSION_NAME\s*=\s*(\S+)'}
+    store:
+      play: false  # same applicationId as android-current: shared folder only
+      android_package: "${custom.app_ids.android_native:-com.example.paymentsdk.demo}"
+    demos:
+      - type: gradle
+        name: demo APK + AAB
+        tasks: [":app:assembleRelease", ":app:bundleRelease"]
+        collect:
+          - {glob: "app/build/outputs/apk/release/*.apk", kind: apk, target: android-native-legacy}
+          - {glob: "app/build/outputs/bundle/release/*.aab", kind: aab}
+    packages:
+      - type: gradle
+        name: AARs to Maven local
+        tasks: [publishToMavenLocal]
+        sign: false
+        collect:
+          - {glob: "*/build/outputs/aar/*-release.aar", kind: aar}
+
+  # ----------------------------------------------------------------------------------- iOS
+  ios-current:
+    platform: ios
+    label: iOS native SDK (current)
+    store:
+      testflight: true
+      ios_bundle_id: "${custom.app_ids.ios_native:-com.example.paymentsdk.demoapp}"
+    demos:
+      - type: xcode-simulator
+        name: simulator .app
+        workspace: DemoApp/DemoApp.xcworkspace
+        scheme: DemoApp
+        pod_install: false
+        target: ios-native-current
+      - type: xcode-ipa
+        name: archive + IPA for TestFlight
+        when: [testflight]
+        workspace: DemoApp/DemoApp.xcworkspace
+        scheme: DemoApp
+        team_id: "${custom.ios_team_id:-}"
+    packages:
+      - type: xcframework
+        workspace: DemoApp/DemoApp.xcworkspace
+        scheme: PaymentSDK
+        framework_name: PaymentSDK
+
+  ios-legacy:
+    platform: ios
+    label: iOS native SDK (legacy)
+    store:
+      testflight: false  # same bundle id as ios-current: shared folder only
+      ios_bundle_id: "${custom.app_ids.ios_native:-com.example.paymentsdk.demoapp}"
+    demos:
+      - type: xcode-simulator
+        name: simulator .app
+        workspace: DemoApp/DemoApp.xcworkspace
+        scheme: DemoApp
+        target: ios-native-legacy
+    packages:
+      - type: xcframework
+        workspace: DemoApp/DemoApp.xcworkspace
+        scheme: PaymentSDK
+        framework_name: PaymentSDK
+
+  # ------------------------------------------------------------------------------- Flutter
+  flutter:
+    platform: flutter
+    label: Flutter plugin
+    version: {file: pubspec.yaml, regex: '^version:\s*(\S+)'}
+    store:
+      play: true
+      testflight: true
+      android_package: "${custom.app_ids.flutter_android:-com.example.paymentsdk.flutter.demoapp}"
+      ios_bundle_id: "${custom.app_ids.flutter_ios:-com.example.paymentsdk.flutter.demoapp}"
+    demos:
+      - {type: flutter, name: pub get, workdir: example, args: [pub, get]}
+      - type: flutter
+        name: demo APK
+        workdir: example
+        args: [build, apk, --release]
+        collect:
+          - {glob: "build/app/outputs/flutter-apk/app-release.apk", kind: apk, target: android-flutter}
+      - type: flutter
+        name: demo AAB
+        workdir: example
+        when: [play]
+        args: [build, appbundle, --release]
+        collect:
+          - {glob: "build/app/outputs/bundle/release/*.aab", kind: aab}
+      - type: flutter
+        name: simulator .app
+        workdir: example
+        host: macos
+        args: [build, ios, --simulator, --debug]
+        collect:
+          - {glob: "build/ios/iphonesimulator/Runner.app", kind: app, target: ios-flutter}
+      - type: flutter
+        name: IPA for TestFlight
+        workdir: example
+        host: macos
+        when: [testflight]
+        args: [build, ipa, --release, --export-method, app-store]
+        collect:
+          - {glob: "build/ios/ipa/*.ipa", kind: ipa}
+    packages:
+      - {type: source-zip, name: package sources}
+
+  # -------------------------------------------------------------------------- React Native
+  reactnative-current:
+    platform: reactnative
+    label: React Native SDK (current)
+    version: {file: package.json, regex: '"version"\s*:\s*"([^"]+)"'}
+    store:
+      play: true
+      testflight: true
+      android_package: "${custom.app_ids.rn_android:-com.example.paymentsdk.reactnative.demoapp}"
+      ios_bundle_id: "${custom.app_ids.rn_ios:-com.example.paymentsdk.reactnative.demoapp}"
+    demos:
+      - {type: run, name: install demo deps, workdir: SimpleIntegration, cmd: [npm, install]}
+      - type: gradle
+        name: demo APK + AAB
+        workdir: SimpleIntegration/android
+        tasks: [assembleRelease, bundleRelease]
+        collect:
+          - {glob: "app/build/outputs/apk/release/*.apk", kind: apk, target: android-rn-current}
+          - {glob: "app/build/outputs/bundle/release/*.aab", kind: aab}
+      - type: xcode-simulator
+        name: simulator .app
+        workdir: SimpleIntegration/ios
+        workspace: SimpleIntegration.xcworkspace
+        scheme: SimpleIntegration
+        pod_install: true
+        target: ios-rn-current
+      - type: xcode-ipa
+        name: archive + IPA for TestFlight
+        when: [testflight]
+        workdir: SimpleIntegration/ios
+        workspace: SimpleIntegration.xcworkspace
+        scheme: SimpleIntegration
+        team_id: "${custom.ios_team_id:-}"
+    packages:
+      - {type: npm-pack, name: npm pack}
+
+  reactnative-legacy:
+    platform: reactnative
+    label: React Native SDK (legacy)
+    version: {file: package.json, regex: '"version"\s*:\s*"([^"]+)"'}
+    store:
+      play: false  # duplicates of reactnative-current ids: shared folder only
+      testflight: false
+      android_package: "${custom.app_ids.rn_android:-com.example.paymentsdk.reactnative.demoapp}"
+      ios_bundle_id: "${custom.app_ids.rn_ios:-com.example.paymentsdk.reactnative.demoapp}"
+    demos:
+      - {type: run, name: install demo deps, workdir: SimpleIntegration, cmd: [npm, install]}
+      - type: gradle
+        name: demo APK
+        workdir: SimpleIntegration/android
+        tasks: [assembleRelease]
+        collect:
+          - {glob: "app/build/outputs/apk/release/*.apk", kind: apk, target: android-rn-legacy}
+      - type: xcode-simulator
+        name: simulator .app
+        workdir: SimpleIntegration/ios
+        workspace: SimpleIntegration.xcworkspace
+        scheme: SimpleIntegration
+        pod_install: true
+        target: ios-rn-legacy
+    packages:
+      - {type: npm-pack, name: npm pack}

sdk_release_kit/_data/web/app.js

@@ -0,0 +1,305 @@
+// SDK Release Kit Settings UI. Plain JS, no build step.
+"use strict";
+
+const TOKEN = document.querySelector('meta[name="srk-token"]').content;
+const $ = (sel, root = document) => root.querySelector(sel);
+const $$ = (sel, root = document) => Array.from(root.querySelectorAll(sel));
+let STATUS = null;
+let REPOS = null;
+let OUTPUTS = null;
+let KEYS = null;
+
+async function api(method, path, body) {
+  const res = await fetch(path, {
+    method,
+    headers: { "Content-Type": "application/json", "X-SRK-Token": TOKEN },
+    body: body === undefined ? undefined : JSON.stringify(body),
+  });
+  if (!res.ok) {
+    let detail = res.statusText;
+    try { detail = (await res.json()).detail; } catch (_) { /* not JSON */ }
+    throw new Error(typeof detail === "string" ? detail : JSON.stringify(detail, null, 2));
+  }
+  return res.json();
+}
+
+function toast(msg, isError = false) {
+  const el = $("#toast");
+  el.textContent = msg;
+  el.className = "toast" + (isError ? " err" : "");
+  el.hidden = false;
+  clearTimeout(toast._t);
+  toast._t = setTimeout(() => (el.hidden = true), isError ? 8000 : 2500);
+}
+
+function guard(fn) {
+  return async (...args) => {
+    try { await fn(...args); } catch (e) { toast(e.message, true); }
+  };
+}
+
+const getPath = (obj, dotted) => dotted.split(".").reduce((o, k) => (o == null ? o : o[k]), obj);
+function setPath(obj, dotted, value) {
+  const parts = dotted.split(".");
+  let o = obj;
+  for (const p of parts.slice(0, -1)) o = o[p] ??= {};
+  o[parts.at(-1)] = value;
+}
+const nullIfEmpty = (v) => (v === "" ? null : v);
+
+// Tabs -------------------------------------------------------------------------------------
+$$("#tabs button").forEach((btn) =>
+  btn.addEventListener("click", () => {
+    $$("#tabs button").forEach((b) => b.classList.toggle("active", b === btn));
+    $$(".tab").forEach((t) => (t.hidden = t.id !== "tab-" + btn.dataset.tab));
+    try { localStorage.setItem("srk-tab", btn.dataset.tab); } catch (_) { /* storage blocked */ }
+  })
+);
+
+// Repositories -----------------------------------------------------------------------------
+function renderRepos() {
+  const tbody = $("#repos-table tbody");
+  tbody.innerHTML = "";
+  const ids = [...new Set([...Object.keys(STATUS.recipes), ...Object.keys(REPOS.repos)])];
+  for (const id of ids) {
+    const entry = REPOS.repos[id] || { path: "", enabled: false };
+    const recipe = STATUS.recipes[id];
+    const tr = document.createElement("tr");
+    tr.dataset.id = id;
+    tr.innerHTML = `
+      <td><input type="checkbox" class="enabled"></td>
+      <td><strong></strong><div class="muted small"></div></td>
+      <td class="path"><input class="path-input" placeholder="~/path/to/checkout"></td>
+      <td class="check"></td>`;
+    $(".enabled", tr).checked = !!entry.enabled;
+    $("strong", tr).textContent = id;
+    $(".small", tr).textContent = recipe ? `${recipe.platform}. ${recipe.label}` : "not in recipes (kept)";
+    const input = $(".path-input", tr);
+    input.value = entry.path || "";
+    const check = guard(async () => {
+      const cell = $(".check", tr);
+      if (!input.value.trim()) { cell.textContent = ""; return; }
+      const r = await api("POST", "/api/validate/path", { path: input.value });
+      cell.textContent = r.ok ? "✓ " + r.detail : "✗ " + r.detail;
+      cell.className = "check " + (r.ok ? "ok" : "bad");
+    });
+    input.addEventListener("change", check);
+    check();
+    tbody.appendChild(tr);
+  }
+  const t = REPOS.tooling || {};
+  for (const input of $$("#tooling-form input")) {
+    const v = t[input.name];
+    input.value = Array.isArray(v) ? v.join(", ") : v || "";
+  }
+}
+
+$("#save-repos").addEventListener("click", guard(async () => {
+  const repos = { ...REPOS.repos };
+  for (const tr of $$("#repos-table tbody tr")) {
+    repos[tr.dataset.id] = {
+      ...(repos[tr.dataset.id] || {}),
+      path: $(".path-input", tr).value.trim(),
+      enabled: $(".enabled", tr).checked,
+    };
+  }
+  const tooling = { ...(REPOS.tooling || {}) };
+  for (const input of $$("#tooling-form input")) {
+    tooling[input.name] = input.name === "extra_path"
+      ? input.value.split(",").map((s) => s.trim()).filter(Boolean)
+      : nullIfEmpty(input.value.trim());
+  }
+  REPOS = await api("PUT", "/api/settings/repos", { repos, tooling });
+  renderRepos();
+  renderRunSdks();
+  toast("Repositories saved");
+}));
+
+// Outputs ----------------------------------------------------------------------------------
+function renderOutputs() {
+  for (const el of $$("#tab-outputs [data-k]")) {
+    const v = getPath(OUTPUTS, el.dataset.k);
+    if (el.type === "checkbox") el.checked = !!v;
+    else el.value = v ?? "";
+  }
+}
+
+$("#save-outputs").addEventListener("click", guard(async () => {
+  const body = structuredClone(OUTPUTS);
+  for (const el of $$("#tab-outputs [data-k]")) {
+    setPath(body, el.dataset.k, el.type === "checkbox" ? el.checked : nullIfEmpty(el.value.trim()));
+  }
+  OUTPUTS = await api("PUT", "/api/settings/outputs", body);
+  renderOutputs();
+  renderRunDestinations();
+  toast("Outputs saved");
+}));
+
+// Keys -------------------------------------------------------------------------------------
+const SECRET_LABELS = {
+  "android.store_password": "Keystore password",
+  "android.key_password": "Key password (empty uses keystore password)",
+  "testflight.key_id": "ASC key id",
+  "testflight.issuer_id": "ASC issuer id",
+};
+
+function renderKeys() {
+  const { settings, status } = KEYS;
+  const chips = $("#keys-status");
+  chips.innerHTML = "";
+  for (const [name, st] of Object.entries(status)) {
+    const c = document.createElement("span");
+    c.className = "chip " + (st.configured ? "ok" : "bad");
+    c.textContent = `${name}: ${st.configured ? "configured" : "missing"}`;
+    c.title = st.detail;
+    chips.appendChild(c);
+  }
+  for (const el of $$("#tab-keys [data-key]")) {
+    const v = getPath(settings, el.dataset.key);
+    if (el.type === "checkbox") el.checked = !!v;
+    else el.value = v ?? "";
+  }
+  for (const box of $$("#tab-keys [data-secret]")) {
+    const field = box.dataset.secret;
+    const ref = getPath(settings, field) || { source: "none", name: "" };
+    const st = status[field] || {};
+    box.innerHTML = `
+      <div class="muted">${SECRET_LABELS[field]} <span class="${st.configured ? "ok" : "bad"}">(${st.configured ? "configured" : "missing"})</span></div>
+      <div class="row">
+        <select class="src"><option value="keychain">OS keychain</option><option value="env">Environment variable</option><option value="none">Not set</option></select>
+        <input class="ref-name" placeholder="entry or variable name">
+      </div>
+      <div class="row keychain-row">
+        <input class="value" type="password" autocomplete="new-password" placeholder="new value (stored in keychain, never shown)">
+        <button class="store">Store in keychain</button>
+      </div>`;
+    $(".src", box).value = ref.source;
+    $(".ref-name", box).value = ref.name;
+    const syncRow = () => ($(".keychain-row", box).hidden = $(".src", box).value !== "keychain");
+    $(".src", box).addEventListener("change", syncRow);
+    syncRow();
+    $(".store", box).addEventListener("click", guard(async () => {
+      const value = $(".value", box).value;
+      if (!value) { toast("Enter a value first", true); return; }
+      KEYS = await api("POST", "/api/keys/secret", { field, value });
+      renderKeys();
+      toast("Stored in keychain");
+    }));
+  }
+}
+
+$$("#tab-keys [data-upload]").forEach((input) =>
+  input.addEventListener("change", guard(async () => {
+    const file = input.files[0];
+    if (!file) return;
+    const buf = new Uint8Array(await file.arrayBuffer());
+    let bin = "";
+    for (let i = 0; i < buf.length; i += 0x8000) bin += String.fromCharCode(...buf.subarray(i, i + 0x8000));
+    KEYS = await api("POST", "/api/keys/upload", {
+      field: input.dataset.upload, filename: file.name, content_b64: btoa(bin),
+    });
+    input.value = "";
+    renderKeys();
+    toast(`${file.name} saved to the private keys folder`);
+  }))
+);
+
+$("#save-keys").addEventListener("click", guard(async () => {
+  const body = structuredClone(KEYS.settings);
+  for (const el of $$("#tab-keys [data-key]")) {
+    setPath(body, el.dataset.key, el.type === "checkbox" ? el.checked : nullIfEmpty(el.value.trim()));
+  }
+  for (const box of $$("#tab-keys [data-secret]")) {
+    setPath(body, box.dataset.secret, {
+      source: $(".src", box).value, name: $(".ref-name", box).value.trim(),
+    });
+  }
+  KEYS = await api("PUT", "/api/settings/keys", body);
+  renderKeys();
+  toast("Keys saved");
+}));
+
+// Custom -----------------------------------------------------------------------------------
+$("#save-custom").addEventListener("click", guard(async () => {
+  const r = await api("PUT", "/api/settings/custom", { text: $("#custom-text").value });
+  $("#custom-text").value = r.text;
+  toast(`Custom data saved (${r.keys.length} top-level keys)`);
+}));
+
+// Run --------------------------------------------------------------------------------------
+function renderRunSdks() {
+  const box = $("#run-sdks");
+  box.innerHTML = "";
+  for (const id of Object.keys(STATUS.recipes)) {
+    const entry = REPOS.repos[id];
+    const ready = entry && entry.enabled && entry.path;
+    const label = document.createElement("label");
+    label.className = "inline";
+    label.innerHTML = `<input type="checkbox" name="sdk"> <span></span>`;
+    $("input", label).value = id;
+    $("input", label).checked = !!ready;
+    $("span", label).textContent = id + (ready ? "" : " (no repo)");
+    box.appendChild(label);
+  }
+}
+
+function renderRunDestinations() {
+  for (const el of $$('input[name="dest"]')) el.checked = !!(OUTPUTS[el.value] || {}).enabled;
+}
+
+async function startRun(dryRun) {
+  const body = {
+    sdks: $$('input[name="sdk"]:checked').map((e) => e.value),
+    artifacts: $('input[name="artifacts"]:checked').value,
+    destinations: $$('input[name="dest"]:checked').map((e) => e.value),
+    dry_run: dryRun,
+    skip_upload: $("#skip-upload").checked,
+  };
+  if (!body.sdks.length) { toast("Select at least one SDK", true); return; }
+  const { id } = await api("POST", "/api/runs", body);
+  const logEl = $("#run-log");
+  logEl.textContent = "";
+  $("#run-state").textContent = dryRun ? "planning..." : "running...";
+  $$("#dry-run, #start-run").forEach((b) => (b.disabled = true));
+  try {
+    const res = await fetch(`/api/runs/${id}/log`, { headers: { "X-SRK-Token": TOKEN } });
+    const reader = res.body.getReader();
+    const dec = new TextDecoder();
+    for (;;) {
+      const { value, done } = await reader.read();
+      if (done) break;
+      const atBottom = logEl.scrollTop + logEl.clientHeight >= logEl.scrollHeight - 8;
+      logEl.textContent += dec.decode(value, { stream: true });
+      if (atBottom) logEl.scrollTop = logEl.scrollHeight;
+    }
+    const st = await api("GET", `/api/runs/${id}`);
+    const ok = st.result && (st.result.dry_run || st.result.ok);
+    $("#run-state").textContent = st.error ? "error" : dryRun ? "plan ready" : ok ? "finished" : "finished with problems";
+  } finally {
+    $$("#dry-run, #start-run").forEach((b) => (b.disabled = false));
+  }
+}
+$("#dry-run").addEventListener("click", guard(() => startRun(true)));
+$("#start-run").addEventListener("click", guard(() => startRun(false)));
+
+// Boot -------------------------------------------------------------------------------------
+guard(async () => {
+  [STATUS, REPOS, OUTPUTS, KEYS] = await Promise.all([
+    api("GET", "/api/status"),
+    api("GET", "/api/settings/repos"),
+    api("GET", "/api/settings/outputs"),
+    api("GET", "/api/settings/keys"),
+  ]);
+  $("#version").textContent = "v" + STATUS.version;
+  $("#repos-file").textContent = STATUS.files.repos;
+  if (STATUS.recipe_error) toast(STATUS.recipe_error, true);
+  $("#custom-text").value = (await api("GET", "/api/settings/custom")).text;
+  renderRepos();
+  renderOutputs();
+  renderKeys();
+  renderRunSdks();
+  renderRunDestinations();
+  let tab = null;
+  try { tab = localStorage.getItem("srk-tab"); } catch (_) { /* storage blocked */ }
+  if (tab) $(`#tabs button[data-tab="${tab}"]`)?.click();
+})();