add deps warning

Author: sunnylqm

package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-update-cli",
-  "version": "2.7.3",
+  "version": "2.8.5",
   "description": "command line tool for react-native-update (remote updates for react native)",
   "main": "index.js",
   "bin": {

src/locales/en.ts

@@ -96,6 +96,21 @@ This can reduce the risk of inconsistent dependencies and supply chain attacks.
   packageIdRequired: 'Please provide packageId or packageVersion parameter',
   packageUploadSuccess:
     'Successfully uploaded new hot update package (id: {{id}})',
+  depsChangeSummary:
+    'Dependency changes: added {{added}}, removed {{removed}}, changed {{changed}}.',
+  depsChangeTargetPackage:
+    'Target native package: {{packageName}} (id: {{packageId}})',
+  depsChangeDependencyHeader: 'Dependency',
+  depsChangeVersionHeader: 'Version change',
+  depsChangeAddedLabel: 'Added',
+  depsChangeRemovedLabel: 'Removed',
+  depsChangeChangedLabel: 'Changed',
+  depsChangeArrow: '->',
+  depsChangeRiskWarning:
+    'Warning: if changed dependencies are pure JS modules, impact is usually low; if native code is newly introduced or changed, OTA update may cause abnormal behavior or even crashes. Test thoroughly before production release.',
+  depsChangeFetchFailed: 'Failed to fetch OTA dependency info: {{error}}',
+  depsChangeNonBlockingHint:
+    'This is only a dependency change warning and will not block publishing.',
   packing: 'Packing',
   pausedStatus: '(Paused)',
   platform: 'Platform',

src/locales/zh.ts

@@ -89,6 +89,19 @@ export default {
   operationSuccess: '操作成功',
   packageIdRequired: '请提供 packageId 或 packageVersion 参数',
   packageUploadSuccess: '已成功上传新热更包（id: {{id}}）',
+  depsChangeSummary:
+    '依赖变化：新增 {{added}} 项，移除 {{removed}} 项，版本变更 {{changed}} 项。',
+  depsChangeTargetPackage: '目标原生包：{{packageName}} (id: {{packageId}})',
+  depsChangeDependencyHeader: '依赖',
+  depsChangeVersionHeader: '版本变化',
+  depsChangeAddedLabel: '新增',
+  depsChangeRemovedLabel: '移除',
+  depsChangeChangedLabel: '变更',
+  depsChangeArrow: '->',
+  depsChangeRiskWarning:
+    '警告：如果变更依赖是纯 JS 模块，则一般没有影响；若包含原生代码新增或变化，热更可能导致功能不正常甚至闪退，建议发布前使用扫码功能完整测试。',
+  depsChangeFetchFailed: '获取热更依赖信息失败：{{error}}',
+  depsChangeNonBlockingHint: '以上仅为依赖变化提示，不会阻止本次发布。',
   packing: '正在打包',
   pausedStatus: '(已暂停)',
   platform: '平台',

src/types.ts

@@ -18,13 +18,15 @@ export interface Package {
   appKey?: string;
   versionName?: any;
   buildTime?: any;
+  deps?: Record<string, string> | string | null;
 }
 
 export interface Version {
   id: string;
   hash: string;
   name: string;
   packages?: Package[];
+  deps?: Record<string, string> | string | null;
 }
 
 export interface CommandContext {

src/versions.ts

@@ -1,9 +1,10 @@
-import { get, getAllPackages, post, put, uploadFile, doDelete } from './api';
+import { doDelete, get, getAllPackages, post, put, uploadFile } from './api';
 import { question, saveToLocal } from './utils';
 import { t } from './utils/i18n';
 
 import chalk from 'chalk';
 import { satisfies } from 'compare-versions';
+import Table from 'tty-table';
 import { getPlatform, getSelectedApp } from './app';
 import { choosePackage } from './package';
 import type { Package, Platform, Version } from './types';
@@ -24,6 +25,258 @@ interface VersionCommandOptions {
   packageVersionRange?: string;
   rollout?: string;
   dryRun?: boolean;
+  versionDeps?: Record<string, string>;
+}
+
+type Deps = Record<string, string>;
+type DepChangeType = 'added' | 'removed' | 'changed';
+
+interface DepChange {
+  dependency: string;
+  oldVersion: string;
+  newVersion: string;
+  type: DepChangeType;
+}
+
+interface DepsChangeSummary {
+  added: number;
+  removed: number;
+  changed: number;
+}
+
+function normalizeDeps(input: unknown): Deps | undefined {
+  if (!input) {
+    return undefined;
+  }
+
+  let raw: unknown = input;
+  if (typeof input === 'string') {
+    try {
+      raw = JSON.parse(input);
+    } catch (_e) {
+      return undefined;
+    }
+  }
+
+  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+    return undefined;
+  }
+
+  const deps: Deps = {};
+  for (const [name, version] of Object.entries(
+    raw as Record<string, unknown>,
+  )) {
+    if (typeof version === 'string' && version) {
+      deps[name] = version;
+    }
+  }
+
+  return Object.keys(deps).length > 0 ? deps : undefined;
+}
+
+function getDepsChanges(oldDeps?: Deps, newDeps?: Deps): DepChange[] {
+  if (!oldDeps || !newDeps) {
+    return [];
+  }
+
+  const rows: DepChange[] = [];
+  const keys = Object.keys({ ...oldDeps, ...newDeps }).sort((a, b) =>
+    a.localeCompare(b),
+  );
+
+  for (const key of keys) {
+    const oldVersion = oldDeps[key];
+    const newVersion = newDeps[key];
+
+    if (oldVersion === undefined && newVersion !== undefined) {
+      rows.push({
+        dependency: key,
+        oldVersion: '-',
+        newVersion,
+        type: 'added',
+      });
+      continue;
+    }
+
+    if (oldVersion !== undefined && newVersion === undefined) {
+      rows.push({
+        dependency: key,
+        oldVersion,
+        newVersion: '-',
+        type: 'removed',
+      });
+      continue;
+    }
+
+    if (
+      oldVersion !== undefined &&
+      newVersion !== undefined &&
+      oldVersion !== newVersion
+    ) {
+      rows.push({
+        dependency: key,
+        oldVersion,
+        newVersion,
+        type: 'changed',
+      });
+    }
+  }
+
+  return rows;
+}
+
+function getDepsChangeSummary(changes: DepChange[]): DepsChangeSummary {
+  return changes.reduce(
+    (acc, item) => {
+      if (item.type === 'added') {
+        acc.added += 1;
+      } else if (item.type === 'removed') {
+        acc.removed += 1;
+      } else {
+        acc.changed += 1;
+      }
+      return acc;
+    },
+    { added: 0, removed: 0, changed: 0 },
+  );
+}
+
+function renderVersionChange(change: DepChange) {
+  const arrow = chalk.gray(` ${t('depsChangeArrow')} `);
+
+  if (change.type === 'added') {
+    return `${chalk.red(t('depsChangeAddedLabel'))} | ${chalk.gray(
+      change.oldVersion,
+    )}${arrow}${chalk.red(change.newVersion)}`;
+  }
+
+  if (change.type === 'removed') {
+    return `${chalk.green(t('depsChangeRemovedLabel'))} | ${chalk.green(
+      change.oldVersion,
+    )}${arrow}${chalk.gray(change.newVersion)}`;
+  }
+
+  return `${chalk.yellow(t('depsChangeChangedLabel'))} | ${chalk.yellow(
+    change.oldVersion,
+  )}${arrow}${chalk.yellow(change.newVersion)}`;
+}
+
+function printDepsChangesForPackage({
+  pkg,
+  versionDeps,
+}: {
+  pkg: Package;
+  versionDeps: Deps;
+}) {
+  const pkgDeps = normalizeDeps(pkg.deps);
+  if (!pkgDeps) {
+    return false;
+  }
+
+  const changes = getDepsChanges(pkgDeps, versionDeps);
+  if (changes.length === 0) {
+    return false;
+  }
+
+  const summary = getDepsChangeSummary(changes);
+  const summaryText = t('depsChangeSummary', {
+    added: chalk.red(String(summary.added)),
+    removed: chalk.green(String(summary.removed)),
+    changed: chalk.yellow(String(summary.changed)),
+  });
+  const header = [
+    { value: t('depsChangeDependencyHeader') },
+    { value: t('depsChangeVersionHeader') },
+  ];
+  const rows = changes.map((change) => [
+    change.dependency,
+    renderVersionChange(change),
+  ]);
+
+  console.log('');
+  console.log(
+    chalk.yellow(
+      t('depsChangeTargetPackage', {
+        packageName: pkg.name,
+        packageId: pkg.id,
+      }),
+    ),
+  );
+  console.log(summaryText);
+  console.log(Table(header, rows).render());
+  console.log(chalk.yellow(t('depsChangeRiskWarning')));
+  return true;
+}
+
+async function findVersionDeps(appId: string, versionId: string) {
+  const targetId = String(versionId);
+  const limit = 100;
+  let offset = 0;
+
+  while (true) {
+    const { data, count } = await get(
+      `/app/${appId}/version/list?offset=${offset}&limit=${limit}`,
+    );
+    const versions: Version[] = Array.isArray(data) ? data : [];
+    const version = versions.find((item) => String(item.id) === targetId);
+
+    if (version) {
+      return normalizeDeps(version.deps);
+    }
+
+    offset += versions.length;
+    if (versions.length === 0 || offset >= Number(count || 0)) {
+      break;
+    }
+  }
+
+  return undefined;
+}
+
+async function printDepsChangesForPublish({
+  appId,
+  versionId,
+  pkgs,
+  providedVersionDeps,
+}: {
+  appId: string;
+  versionId?: string;
+  pkgs: Package[];
+  providedVersionDeps?: Deps;
+}) {
+  if (!versionId || pkgs.length === 0) {
+    return;
+  }
+
+  let versionDeps = normalizeDeps(providedVersionDeps);
+  if (!versionDeps) {
+    try {
+      versionDeps = await findVersionDeps(appId, versionId);
+    } catch (error: any) {
+      console.warn(
+        chalk.yellow(
+          t('depsChangeFetchFailed', {
+            error: error?.message || String(error),
+          }),
+        ),
+      );
+      return;
+    }
+  }
+
+  if (!versionDeps) {
+    return;
+  }
+
+  let hasChanges = false;
+  for (const pkg of pkgs) {
+    const printed = printDepsChangesForPackage({ pkg, versionDeps });
+    hasChanges = hasChanges || printed;
+  }
+
+  if (hasChanges) {
+    console.log(chalk.yellow(t('depsChangeNonBlockingHint')));
+  }
 }
 
 async function showVersion(appId: string, offset: number) {
@@ -211,12 +464,15 @@ export const versionCommands = {
           maxPackageVersion,
           rollout,
           dryRun,
+          versionDeps: depVersions,
         },
       });
     } else {
       const q = await question(t('updateNativePackageQuestion'));
       if (q.toLowerCase() === 'y') {
-        await this.update({ options: { versionId: id, platform } });
+        await this.update({
+          options: { versionId: id, platform, versionDeps: depVersions },
+        });
       }
     }
     return versionName;
@@ -318,6 +574,13 @@ export const versionCommands = {
       }
     }
 
+    await printDepsChangesForPublish({
+      appId,
+      versionId,
+      pkgs: pkgsToBind,
+      providedVersionDeps: options.versionDeps,
+    });
+
     await bindVersionToPackages({
       appId,
       versionId,