---
name: release-management
description: Use when working on Capgo OTA release workflows including bundle uploads, compatibility checks, channel management, cleanup, and encryption key setup.
---

# Capgo CLI Release Management

Use this skill for OTA update workflows in Capgo Cloud.

## Shared notes

- Prefer `npx @capgo/cli@latest ...` examples.
- `appId` can often be inferred from the current Capacitor project.
- Shared public flags often include `-a, --apikey`.

## Bundle workflows

### `bundle upload [appId]`

- Alias: `u`
- Example: `npx @capgo/cli@latest bundle upload com.example.app --path ./dist --channel production`
- Key behavior:
  - Bundle version must be greater than `0.0.0` and unique.
  - Deleted versions cannot be reused.
  - External URL mode is useful for very large or privacy-sensitive bundles.
  - Encryption is recommended for trustless distribution.
  - Interactive prompts are disabled automatically in CI and other non-interactive sessions so uploads do not block automation.
  - Optional upload prompts can remember the user's answer on the current machine so future uploads can skip the same question.
- Important options:
  - `-p, --path <path>`
  - `-c, --channel <channel>`
  - `-e, --external <url>`
  - `--iv-session-key <key>`
  - `-b, --bundle <bundle>`
  - `--link <link>`
  - `--comment <comment>`
  - `--min-update-version <minUpdateVersion>`
  - `--auto-min-update-version`
  - `--ignore-metadata-check`
  - `--ignore-checksum-check`
  - `--force-crc32-checksum`
  - `--timeout <timeout>`
  - `--zip`
  - `--tus`
  - `--tus-chunk-size <tusChunkSize>`
  - `--delta`
  - `--delta-only`
  - `--no-delta`
  - `--encrypted-checksum <encryptedChecksum>`
  - `--auto-set-bundle`
  - `--dry-upload`
  - `--package-json <packageJson>`
  - `--node-modules <nodeModules>`
  - `--encrypt-partial`
  - `--delete-linked-bundle-on-upload`
  - `--no-brotli-patterns <patterns>`
  - `--disable-brotli`
  - `--version-exists-ok`
  - `--self-assign`
  - S3 options: `--s3-region`, `--s3-apikey`, `--s3-apisecret`, `--s3-endpoint`, `--s3-bucket-name`, `--s3-port`, `--no-s3-ssl`
  - Signing options: `--key-v2`, `--key-data-v2`, `--bundle-url`, `--no-key`, `--display-iv-session`
  - Deprecated options still supported: `--multipart`, `--partial`, `--partial-only`

### `bundle compatibility [appId]`

- Example: `npx @capgo/cli@latest bundle compatibility com.example.app --channel production`
- Use to check whether a bundle is safe for a given channel.
- Key options:
  - `-c, --channel <channel>`
  - `--text`
  - `--package-json <packageJson>`
  - `--node-modules <nodeModules>`

### `bundle releaseType [appId]`

- Example: `npx @capgo/cli@latest bundle releaseType com.example.app --channel production`
- Prints `native` or `OTA` based on channel compatibility.
- Key options:
  - `-c, --channel <channel>`
  - `--package-json <packageJson>`
  - `--node-modules <nodeModules>`

### `bundle list [appId]`

- Alias: `l`
- Example: `npx @capgo/cli@latest bundle list com.example.app`

### `bundle delete [bundleId] [appId]`

- Alias: `d`
- Example: `npx @capgo/cli@latest bundle delete BUNDLE_ID com.example.app`

### `bundle cleanup [appId]`

- Alias: `c`
- Example: `npx @capgo/cli@latest bundle cleanup com.example.app --bundle=1.0 --keep=3`
- Notes:
  - Linked bundles are preserved unless `--ignore-channel` is used.
- Key options:
  - `-b, --bundle <bundle>`
  - `-k, --keep <keep>`
  - `-f, --force`
  - `--ignore-channel`

### `bundle zip [appId]`

- Example: `npx @capgo/cli@latest bundle zip com.example.app --path ./dist`
- Notes:
  - Produces a checksum for encryption workflows.
  - Use `--json` for machine-readable output.
- Key options:
  - `-p, --path <path>`
  - `-b, --bundle <bundle>`
  - `-n, --name <name>`
  - `-j, --json`
  - `--no-code-check`
  - `--key-v2`
  - `--package-json <packageJson>`

### `bundle encrypt [zipPath] [checksum]`

- Example: `npx @capgo/cli@latest bundle encrypt ./myapp.zip CHECKSUM`
- Notes:
  - Returns the `ivSessionKey` needed for upload and later decryption.
- Key options:
  - `--key <key>`
  - `--key-data <keyData>`
  - `-j, --json`
  - `--package-json <packageJson>`

### `bundle decrypt [zipPath] [checksum]`

- Example: `npx @capgo/cli@latest bundle decrypt ./myapp_encrypted.zip CHECKSUM`
- Notes:
  - Mainly for testing.
  - Prints the base64 session key for verification.
- Key options:
  - `--key <key>`
  - `--key-data <keyData>`
  - `--checksum <checksum>`
  - `--package-json <packageJson>`

## Channel workflows

### `channel add [channelId] [appId]`

- Alias: `a`
- Example: `npx @capgo/cli@latest channel add production com.example.app --default`
- Key options:
  - `-d, --default`
  - `--self-assign`

### `channel list [appId]`

- Alias: `l`
- Example: `npx @capgo/cli@latest channel list com.example.app`

### `channel delete [channelId] [appId]`

- Alias: `d`
- Example: `npx @capgo/cli@latest channel delete production com.example.app`
- Key options:
  - `--delete-bundle`
  - `--success-if-not-found`

### `channel currentBundle [channel] [appId]`

- Example: `npx @capgo/cli@latest channel currentBundle production com.example.app`
- Key options:
  - `-c, --channel <channel>`
  - `--quiet`

### `channel set [channelId] [appId]`

- Alias: `s`
- Example: `npx @capgo/cli@latest channel set production com.example.app --bundle 1.0.0 --state default`
- Notes:
  - One channel must remain default.
  - Supports update policies `major`, `minor`, `metadata`, `patch`, and `none`.
  - Supports platform and device targeting.
- Key options:
  - `-b, --bundle <bundle>`
  - `-s, --state <state>`
  - `--latest-remote`
  - `--latest`
  - `--downgrade`, `--no-downgrade`
  - `--ios`, `--no-ios`
  - `--android`, `--no-android`
  - `--self-assign`, `--no-self-assign`
  - `--disable-auto-update <disableAutoUpdate>`
  - `--dev`, `--no-dev`
  - `--prod`, `--no-prod`
  - `--emulator`, `--no-emulator`
  - `--device`, `--no-device`
  - `--package-json <packageJson>`
  - `--ignore-metadata-check`

## Encryption key workflows

### `key save`

- Example: `npx @capgo/cli@latest key save --key ./path/to/key.pub`
- Notes:
  - Saves the public key in Capacitor config.
  - Useful for CI.
  - Recommended not to commit the key.
- Key options:
  - `-f, --force`
  - `--key <key>`
  - `--key-data <keyData>`

### `key create`

- Example: `npx @capgo/cli@latest key create`
- Notes:
  - Creates `.capgo_key_v2` and `.capgo_key_v2.pub`.
  - Saves the public key to Capacitor config.
  - Never commit the private key.
- Key options:
  - `-f, --force`

### `key delete_old`

- Example: `npx @capgo/cli@latest key delete_old`