fix: propagate zip entry errors, correct exit codes, versionId null unbind, Windows cresc brand detection

- enumZipEntries now rejects on callback errors instead of silently
  skipping entries, preventing incomplete diff patches reported as success
- exit with code 1 on 401 auth failure and command errors (was 0 / 255)
- install: validate package args, check spawnSync result, support Windows
  (.cmd shims need shell), report failures instead of silent success
- update --versionId null now sends real null to unbind instead of "null"
- interactive version chooser: normalize id comparison (number vs string)
- rolloutConfigSet message: fill missing {{version}} placeholder
- cresc brand detection: dedicated bin entry setting RNU_BRAND, no longer
  relies on argv[1] basename (always bin.js under Windows npm shims)
- cli.json: remove unimplemented build/release commands
- engines: >= 18.17.0 to match read@4 requirement

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: sunnylqm

bun.lock

@@ -221,9 +221,6 @@
         }
       }
     },
-    "build": {
-      "description": "Bundle javascript and copy assets."
-    },
     "bundle": {
       "description": "Bundle javascript code only and optionally publish.",
       "options": {
@@ -316,9 +313,6 @@
         }
       }
     },
-    "release": {
-      "description": "Push builded file to server."
-    },
     "hdiff": {
       "description": "Create hdiff patch",
       "options": {

cli.json

@@ -6,7 +6,7 @@
   "types": "lib/exports.d.ts",
   "bin": {
     "pushy": "lib/bin.js",
-    "cresc": "lib/bin.js"
+    "cresc": "lib/bin-cresc.js"
   },
   "exports": {
     ".": {
@@ -32,7 +32,7 @@
     "cli.json"
   ],
   "scripts": {
-    "build": "rm -rf lib && swc src -d lib --strip-leading-paths && bun run typecheck:build && chmod +x lib/bin.js",
+    "build": "rm -rf lib && swc src -d lib --strip-leading-paths && bun run typecheck:build && chmod +x lib/bin.js lib/bin-cresc.js",
     "prepublishOnly": "bun run build",
     "typecheck": "tsc --noEmit",
     "typecheck:build": "tsc -p tsconfig.build.json",
@@ -87,7 +87,7 @@
     "@xmldom/xmldom": "0.8.13"
   },
   "engines": {
-    "node": ">= 16.6.0"
+    "node": ">= 18.17.0"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.4.12",

package.json

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+
+// Dedicated entry for the `cresc` bin so brand detection does not depend on
+// process.argv[1], which on Windows npm shims always points to the js file
+// instead of the invoked command name.
+process.env.RNU_BRAND = 'cresc';
+
+require('./bin');

src/bin-cresc.ts

@@ -83,10 +83,10 @@ async function run() {
   } catch (err: any) {
     if (err.status === 401) {
       console.log(t('loginFirst'));
-      return;
+      process.exit(1);
     }
     console.error(err.stack);
-    process.exit(-1);
+    process.exit(1);
   }
 }
 

src/bin.ts

@@ -182,6 +182,7 @@ async function diffFromPPK(
             entry.fileName,
             zipOptionsForPayloadEntry(entry.fileName, entryPrefix),
           );
+          readStream.on('error', reject);
           readStream.on('end', () => {
             //console.log('add finished');
             resolve(void 0);
@@ -318,6 +319,7 @@ async function diffFromPackage(
             entry.fileName,
             zipOptionsForPayloadEntry(entry.fileName, entryPrefix),
           );
+          readStream.on('error', reject);
           readStream.on('end', () => {
             //console.log('add finished');
             resolve(void 0);

src/diff.ts

@@ -1,20 +1,50 @@
 import { spawnSync } from 'child_process';
 import path from 'path';
 import type { CommandContext } from './types';
+import { scriptName } from './utils/constants';
+import { t } from './utils/i18n';
 import { getInstallCommand } from './utils/runtime';
 
+// package names / version specs only — rejects shell metacharacters since
+// Windows needs shell: true to run package manager .cmd shims
+const SAFE_PACKAGE_ARG = /^[@a-z0-9^~._/-]+$/i;
+
 export const installCommands = {
   install: async ({ args }: CommandContext) => {
     if (args.length === 0) {
-      return;
+      throw new Error(t('installPackageRequired', { scriptName }));
+    }
+    for (const arg of args) {
+      if (!SAFE_PACKAGE_ARG.test(arg)) {
+        throw new Error(t('installPackageRequired', { scriptName }));
+      }
     }
 
     const cliDir = path.resolve(__dirname, '..');
     const installCommand = getInstallCommand(args, cliDir);
 
-    spawnSync(installCommand.command, installCommand.args, {
+    const result = spawnSync(installCommand.command, installCommand.args, {
       cwd: cliDir,
       stdio: 'inherit',
+      // package manager executables are .cmd shims on Windows
+      shell: process.platform === 'win32',
     });
+
+    if (result.error) {
+      throw new Error(
+        t('installFailed', {
+          packages: args.join(' '),
+          error: result.error.message,
+        }),
+      );
+    }
+    if (result.status !== 0) {
+      throw new Error(
+        t('installFailed', {
+          packages: args.join(' '),
+          error: `${installCommand.command} exited with code ${result.status}`,
+        }),
+      );
+    }
   },
 };

src/install.ts

@@ -182,6 +182,9 @@ This can reduce the risk of inconsistent dependencies and supply chain attacks.
   nodeHdiffpatchRequired:
     'This function needs "node-hdiffpatch". Please run "{{scriptName}} install node-hdiffpatch" to install',
   apkExtracted: 'APK extracted to {{output}}',
+  installPackageRequired:
+    'Please specify the package to install, e.g. "{{scriptName}} install node-hdiffpatch"',
+  installFailed: 'Failed to install {{packages}}: {{error}}',
   proxyNetworkError:
     'Network error — likely caused by a proxy/VPN. Please try disabling your proxy and retry.',
   proxyNetworkErrorTips:

src/locales/en.ts

@@ -168,6 +168,9 @@ export default {
   nodeHdiffpatchRequired:
     '此功能需要 "node-hdiffpatch"。请运行 "{{scriptName}} install node-hdiffpatch" 来安装',
   apkExtracted: 'APK 已提取到 {{output}}',
+  installPackageRequired:
+    '请指定要安装的包，例如 "{{scriptName}} install node-hdiffpatch"',
+  installFailed: '安装 {{packages}} 失败: {{error}}',
   proxyNetworkError:
     '网络连接异常，可能是代理/VPN 导致。请尝试关闭代理后重试。',
   proxyNetworkErrorTips:

src/locales/zh.ts

@@ -1,6 +1,10 @@
 import path from 'path';
 
-export const scriptName = path.basename(process.argv[1]) as 'cresc' | 'pushy';
+export const scriptName =
+  process.env.RNU_BRAND === 'cresc' ||
+  path.basename(process.argv[1] ?? '') === 'cresc'
+    ? 'cresc'
+    : 'pushy';
 export const IS_CRESC = scriptName === 'cresc';
 
 export const ppkBundleFileNames = ['index.bundlejs', 'bundle.harmony.js'];