@ahmedsamirelsaka/react-native-local-release 2.0.0-rc.1

package/dist/patch.js

@@ -0,0 +1,352 @@
+import path from 'node:path';
+import { exists, readText, writeText, backupFile, sha256OfText, sha256OfFile } from './fs.js';
+export const BEGIN = '# >>> rn-local-release';
+export const END = '# <<< rn-local-release';
+export function upsertMarkedBlock(content, block, begin = BEGIN, end = END) {
+    const markerStart = content.indexOf(begin);
+    const markerEnd = content.indexOf(end);
+    const wrapped = `${begin}\n${block.trimEnd()}\n${end}\n`;
+    if (markerStart !== -1 && markerEnd !== -1 && markerEnd > markerStart) {
+        return (content.slice(0, markerStart) +
+            wrapped +
+            content.slice(markerEnd + end.length).replace(/^\n/, ''));
+    }
+    const trimmed = content.endsWith('\n') ? content : `${content}\n`;
+    return `${trimmed}\n${wrapped}`;
+}
+export function removeMarkedBlock(content, begin = BEGIN, end = END) {
+    const markerStart = content.indexOf(begin);
+    const markerEnd = content.indexOf(end);
+    if (markerStart === -1 || markerEnd === -1 || markerEnd < markerStart) {
+        return content;
+    }
+    return (content.slice(0, markerStart) + content.slice(markerEnd + end.length).replace(/^\n/, ''));
+}
+export const DEFAULT_GITIGNORE_ENTRIES = [
+    '# Local release credentials + store artifacts (never commit)',
+    '**/fastlane/.env',
+    '**/fastlane/.env.*',
+    '!**/fastlane/.env.example',
+    '**/fastlane/README.md',
+    '**/fastlane/report.xml',
+    '*.ipa',
+    '*.dSYM.zip',
+    '*.aab',
+    '*.apk',
+    '!android/app/debug.keystore',
+    '*.jks',
+    '*.keystore',
+    'keystore.properties',
+    '**/keystore.properties',
+    'secrets/**',
+    '!secrets/.gitignore',
+    '!secrets/README.md',
+    'credentials.txt',
+    '**/credentials.txt',
+    '**/AuthKey_*.p8',
+    '**/play-store-*.json',
+    '**/google-play-*.json',
+    '**/*-service-account*.json',
+    'build/ios/',
+    'build/android/',
+    'build/release-manifest.json',
+    'build/release-manifest-*.json',
+    'build/upload-journal.json',
+    'logs/',
+    'versions/',
+    '.rn-local-release/',
+    '*.rn-local-release.bak',
+];
+export function mergeGitignore(content) {
+    return upsertMarkedBlock(content || '', DEFAULT_GITIGNORE_ENTRIES.join('\n'));
+}
+export function mergePackageScripts(packageJson, scripts) {
+    const next = {
+        ...packageJson,
+        scripts: { ...(packageJson.scripts || {}) },
+    };
+    const scriptBag = next.scripts;
+    for (const [key, value] of Object.entries(scripts)) {
+        scriptBag[key] = value;
+    }
+    if (!scriptBag.typecheck) {
+        scriptBag.typecheck = 'tsc --noEmit';
+    }
+    return next;
+}
+export function mergeGemfile(content) {
+    let next = content;
+    if (!/gem ['"]fastlane['"]/.test(next)) {
+        next = upsertMarkedBlock(next, "gem 'fastlane', '~> 2.234'");
+    }
+    return next;
+}
+export function ensureRubyVersion(root, version, { dryRun = false } = {}) {
+    const filePath = path.join(root, '.ruby-version');
+    if (exists(filePath))
+        return { path: filePath, wrote: false };
+    if (dryRun)
+        return { path: filePath, wrote: false, dryRun: true };
+    writeText(filePath, `${version}\n`);
+    return { path: filePath, wrote: true };
+}
+const GROOVY_SIGNING_HELPER = `
+// >>> rn-local-release-signing
+def loadKeystoreProperties() {
+    def props = new Properties()
+    def keystorePropertiesFile = rootProject.file("keystore.properties")
+    if (keystorePropertiesFile.exists()) {
+        keystorePropertiesFile.withInputStream { props.load(it) }
+    }
+    return props
+}
+
+def releaseSigningProperty(String name) {
+    def keystoreProps = loadKeystoreProperties()
+    def fromFile = keystoreProps.getProperty(name)
+    if (fromFile != null && !fromFile.trim().isEmpty()) {
+        return fromFile.trim()
+    }
+    def fromProject = project.findProperty(name)
+    if (fromProject != null && !fromProject.toString().trim().isEmpty()) {
+        return fromProject.toString().trim()
+    }
+    def fromEnv = System.getenv(name)
+    if (fromEnv != null && !fromEnv.trim().isEmpty()) {
+        return fromEnv.trim()
+    }
+    return null
+}
+
+def releaseStoreFileName = releaseSigningProperty("MYAPP_UPLOAD_STORE_FILE")
+def releaseStorePassword = releaseSigningProperty("MYAPP_UPLOAD_STORE_PASSWORD")
+def releaseKeyAlias = releaseSigningProperty("MYAPP_UPLOAD_KEY_ALIAS")
+def releaseKeyPassword = releaseSigningProperty("MYAPP_UPLOAD_KEY_PASSWORD")
+def hasReleaseSigning =
+    releaseStoreFileName != null &&
+    releaseStorePassword != null &&
+    releaseKeyAlias != null &&
+    releaseKeyPassword != null
+// <<< rn-local-release-signing
+`.trim();
+const GROOVY_RELEASE_GUARD = `
+// >>> rn-local-release-guard
+gradle.taskGraph.whenReady { graph ->
+    if (hasReleaseSigning) {
+        return
+    }
+    def wantsSignedRelease = graph.allTasks.any { task ->
+        def name = task.name
+        name == "assembleRelease" ||
+            name == "bundleRelease" ||
+            name == "packageRelease" ||
+            name == "packageReleaseBundle" ||
+            name == "signReleaseBundle"
+    }
+    if (wantsSignedRelease) {
+        throw new GradleException(
+            "Release signing is not configured. Set MYAPP_UPLOAD_* via android/keystore.properties or environment variables."
+        )
+    }
+}
+// <<< rn-local-release-guard
+`.trim();
+export function patchAndroidBuildGradleGroovy(content) {
+    let next = content;
+    if (!next.includes('rn-local-release-signing')) {
+        const anchors = [
+            /def jscFlavor[^\n]*\n/,
+            /apply plugin: "com\.facebook\.react"[^\n]*\n/,
+            /android\s*\{\n/,
+        ];
+        let inserted = false;
+        for (const anchor of anchors) {
+            if (anchor.test(next)) {
+                next = next.replace(anchor, (match) => `${match}\n${GROOVY_SIGNING_HELPER}\n\n`);
+                inserted = true;
+                break;
+            }
+        }
+        if (!inserted) {
+            next = `${GROOVY_SIGNING_HELPER}\n\n${next}`;
+        }
+    }
+    if (/signingConfigs\s*\{[\s\S]*release\s*\{[\s\S]*storeFile\s+file\(MYAPP_UPLOAD_STORE_FILE\)/.test(next)) {
+        next = next.replace(/release\s*\{[\s\S]*?storeFile\s+file\(MYAPP_UPLOAD_STORE_FILE\)[\s\S]*?keyPassword\s+MYAPP_UPLOAD_KEY_PASSWORD\s*\}/, `release {
+            if (hasReleaseSigning) {
+                storeFile file(releaseStoreFileName)
+                storePassword releaseStorePassword
+                keyAlias releaseKeyAlias
+                keyPassword releaseKeyPassword
+            }
+        }`);
+    }
+    if (!next.includes('rn-local-release-guard')) {
+        if (/\n(dependencies\s*\{)/.test(next)) {
+            next = next.replace(/\n(dependencies\s*\{)/, `\n${GROOVY_RELEASE_GUARD}\n\n$1`);
+        }
+        else {
+            next = `${next.trimEnd()}\n\n${GROOVY_RELEASE_GUARD}\n`;
+        }
+    }
+    return next;
+}
+const KTS_SIGNING_HELPER = `
+// >>> rn-local-release-signing
+fun loadKeystoreProperties(): java.util.Properties {
+    val props = java.util.Properties()
+    val keystorePropertiesFile = rootProject.file("keystore.properties")
+    if (keystorePropertiesFile.exists()) {
+        keystorePropertiesFile.inputStream().use { props.load(it) }
+    }
+    return props
+}
+
+fun releaseSigningProperty(name: String): String? {
+    val fromFile = loadKeystoreProperties().getProperty(name)
+    if (!fromFile.isNullOrBlank()) return fromFile.trim()
+    val fromProject = project.findProperty(name)?.toString()
+    if (!fromProject.isNullOrBlank()) return fromProject.trim()
+    val fromEnv = System.getenv(name)
+    if (!fromEnv.isNullOrBlank()) return fromEnv.trim()
+    return null
+}
+
+val releaseStoreFileName = releaseSigningProperty("MYAPP_UPLOAD_STORE_FILE")
+val releaseStorePassword = releaseSigningProperty("MYAPP_UPLOAD_STORE_PASSWORD")
+val releaseKeyAlias = releaseSigningProperty("MYAPP_UPLOAD_KEY_ALIAS")
+val releaseKeyPassword = releaseSigningProperty("MYAPP_UPLOAD_KEY_PASSWORD")
+val hasReleaseSigning =
+    !releaseStoreFileName.isNullOrBlank() &&
+        !releaseStorePassword.isNullOrBlank() &&
+        !releaseKeyAlias.isNullOrBlank() &&
+        !releaseKeyPassword.isNullOrBlank()
+// <<< rn-local-release-signing
+`.trim();
+const KTS_RELEASE_GUARD = `
+// >>> rn-local-release-guard
+gradle.taskGraph.whenReady {
+    if (hasReleaseSigning) return@whenReady
+    val wantsSignedRelease = allTasks.any { task ->
+        val name = task.name
+        name == "assembleRelease" ||
+            name == "bundleRelease" ||
+            name == "packageRelease" ||
+            name == "packageReleaseBundle" ||
+            name == "signReleaseBundle"
+    }
+    if (wantsSignedRelease) {
+        throw GradleException(
+            "Release signing is not configured. Set MYAPP_UPLOAD_* via android/keystore.properties or environment variables."
+        )
+    }
+}
+// <<< rn-local-release-guard
+`.trim();
+export function patchAndroidBuildGradleKts(content) {
+    let next = content;
+    if (!next.includes('rn-local-release-signing')) {
+        if (/android\s*\{/.test(next)) {
+            next = next.replace(/android\s*\{/, `${KTS_SIGNING_HELPER}\n\nandroid {`);
+        }
+        else {
+            next = `${KTS_SIGNING_HELPER}\n\n${next}`;
+        }
+    }
+    if (!next.includes('rn-local-release-guard')) {
+        next = `${next.trimEnd()}\n\n${KTS_RELEASE_GUARD}\n`;
+    }
+    return next;
+}
+export function patchAndroidBuildGradle(content, dsl) {
+    return dsl === 'kotlin'
+        ? patchAndroidBuildGradleKts(content)
+        : patchAndroidBuildGradleGroovy(content);
+}
+export function patchGradleProperties(content) {
+    // Do not force ABI/R8 changes — only strip accidental passwords from tracked file.
+    return content
+        .split('\n')
+        .filter((line) => !line.startsWith('MYAPP_UPLOAD_STORE_PASSWORD=') &&
+        !line.startsWith('MYAPP_UPLOAD_KEY_PASSWORD='))
+        .join('\n')
+        .replace(/\n*$/, '\n');
+}
+export function applyPlan(projectRoot, actions, dryRun) {
+    const managed = [];
+    const backups = [];
+    try {
+        for (const action of actions) {
+            if (action.type === 'skip')
+                continue;
+            const target = action.type === 'write' ? action.path : action.to;
+            const absolute = path.isAbsolute(target) ? target : path.join(projectRoot, target);
+            const originalHash = exists(absolute) ? sha256OfFile(absolute) : null;
+            if (dryRun) {
+                managed.push({
+                    path: path.relative(projectRoot, absolute),
+                    kind: originalHash ? 'patched' : 'created',
+                    originalHash,
+                    installedHash: action.type === 'write' ? sha256OfText(action.contents) : 'dry-run',
+                });
+                continue;
+            }
+            const backup = backupFile(absolute);
+            backups.push({ path: absolute, backup });
+            if (action.type === 'write') {
+                writeText(absolute, action.contents, action.mode ?? 0o644);
+            }
+            else {
+                const fromAbs = path.isAbsolute(action.from)
+                    ? action.from
+                    : path.join(projectRoot, action.from);
+                writeText(absolute, readText(fromAbs), action.mode ?? 0o644);
+            }
+            managed.push({
+                path: path.relative(projectRoot, absolute).split(path.sep).join('/'),
+                kind: originalHash ? 'patched' : 'created',
+                originalHash,
+                installedHash: sha256OfFile(absolute),
+            });
+        }
+    }
+    catch (error) {
+        for (const item of backups.reverse()) {
+            if (item.backup && exists(item.backup)) {
+                writeText(item.path, readText(item.backup));
+            }
+        }
+        throw error;
+    }
+    return managed;
+}
+export function releaseScripts() {
+    return {
+        'release:doctor': 'bundle exec fastlane doctor',
+        'release:verify': 'bundle exec fastlane verify',
+        'release:credentials': 'bundle exec fastlane credentials',
+        'release:bump': 'bundle exec fastlane bump_version',
+        'release:prepare': 'bundle exec fastlane prepare',
+        'release:compile': 'bundle exec fastlane compile',
+        'release:upload': 'bundle exec fastlane upload_all',
+        'release:ios:build': 'bundle exec fastlane ios build',
+        'release:ios:beta': 'bundle exec fastlane ios beta',
+        'release:ios:upload': 'bundle exec fastlane ios upload',
+        'release:ios:promote': 'bundle exec fastlane ios promote',
+        'release:android:build': 'bundle exec fastlane android build',
+        'release:android:beta': 'bundle exec fastlane android beta',
+        'release:android:upload': 'bundle exec fastlane android upload',
+        'release:android:promote': 'bundle exec fastlane android promote',
+        'release:build': 'bundle exec fastlane build_all',
+        'release:beta': 'bundle exec fastlane beta_all',
+    };
+}
+export function renderTemplate(template, values) {
+    return template.replace(/\{\{(\w+)\}\}/g, (_match, key) => {
+        if (!(key in values)) {
+            throw new Error(`Missing template value: ${key}`);
+        }
+        return values[key];
+    });
+}
+//# sourceMappingURL=patch.js.map

package/dist/patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.js","sourceRoot":"","sources":["../src/patch.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG9F,MAAM,CAAC,MAAM,KAAK,GAAG,wBAAwB,CAAC;AAC9C,MAAM,CAAC,MAAM,GAAG,GAAG,wBAAwB,CAAC;AAE5C,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,KAAa,EACb,KAAK,GAAG,KAAK,EACb,GAAG,GAAG,GAAG;IAET,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;IACzD,IAAI,WAAW,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,SAAS,GAAG,WAAW,EAAE,CAAC;QACtE,OAAO,CACL,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;YAC7B,OAAO;YACP,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC;IAClE,OAAO,GAAG,OAAO,KAAK,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,GAAG,GAAG;IACzE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,WAAW,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,SAAS,GAAG,WAAW,EAAE,CAAC;QACtE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,CACL,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CACzF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,8DAA8D;IAC9D,kBAAkB;IAClB,oBAAoB;IACpB,2BAA2B;IAC3B,uBAAuB;IACvB,wBAAwB;IACxB,OAAO;IACP,YAAY;IACZ,OAAO;IACP,OAAO;IACP,6BAA6B;IAC7B,OAAO;IACP,YAAY;IACZ,qBAAqB;IACrB,wBAAwB;IACxB,YAAY;IACZ,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;IACjB,sBAAsB;IACtB,uBAAuB;IACvB,4BAA4B;IAC5B,YAAY;IACZ,gBAAgB;IAChB,6BAA6B;IAC7B,+BAA+B;IAC/B,2BAA2B;IAC3B,OAAO;IACP,WAAW;IACX,oBAAoB;IACpB,wBAAwB;CACzB,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,iBAAiB,CAAC,OAAO,IAAI,EAAE,EAAE,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,WAAoC,EACpC,OAA+B;IAE/B,MAAM,IAAI,GAAG;QACX,GAAG,WAAW;QACd,OAAO,EAAE,EAAE,GAAG,CAAE,WAAW,CAAC,OAAkC,IAAI,EAAE,CAAC,EAAE;KACxE,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAiC,CAAC;IACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACzB,SAAS,CAAC,SAAS,GAAG,cAAc,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,OAAe,EACf,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,EAAE;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9D,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClE,SAAS,CAAC,QAAQ,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsC7B,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;CAqB5B,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG;YACd,uBAAuB;YACvB,8CAA8C;YAC9C,gBAAgB;SACjB,CAAC;QACF,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,qBAAqB,MAAM,CAAC,CAAC;gBACjF,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,GAAG,GAAG,qBAAqB,OAAO,IAAI,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IACE,0FAA0F,CAAC,IAAI,CAC7F,IAAI,CACL,EACD,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,OAAO,CACjB,qHAAqH,EACrH;;;;;;;UAOI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC7C,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,KAAK,oBAAoB,QAAQ,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,oBAAoB,IAAI,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+B1B,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;CAmBzB,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAC/C,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,kBAAkB,eAAe,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,GAAG,kBAAkB,OAAO,IAAI,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC7C,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,iBAAiB,IAAI,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,GAAwB;IAC/E,OAAO,GAAG,KAAK,QAAQ;QACrB,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC;QACrC,CAAC,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,mFAAmF;IACnF,OAAO,OAAO;SACX,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI,CAAC,UAAU,CAAC,8BAA8B,CAAC;QAChD,CAAC,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,CACjD;SACA,IAAI,CAAC,IAAI,CAAC;SACV,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAOD,MAAM,UAAU,SAAS,CACvB,WAAmB,EACnB,OAAwB,EACxB,MAAe;IAEf,MAAM,OAAO,GAAoC,EAAE,CAAC;IACpD,MAAM,OAAO,GAAmD,EAAE,CAAC;IACnE,IAAI,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACnF,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACtE,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;oBAC1C,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;oBAC1C,YAAY;oBACZ,aAAa,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;iBACnF,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC1C,CAAC,CAAC,MAAM,CAAC,IAAI;oBACb,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACxC,SAAS,CACP,QAAQ,EACR,QAAQ,CAAC,OAAO,CAAC,EACjB,MAAM,CAAC,IAAI,IAAI,KAAK,CACrB,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACpE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBAC1C,YAAY;gBACZ,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,gBAAgB,EAAE,6BAA6B;QAC/C,gBAAgB,EAAE,6BAA6B;QAC/C,qBAAqB,EAAE,kCAAkC;QACzD,cAAc,EAAE,mCAAmC;QACnD,iBAAiB,EAAE,8BAA8B;QACjD,iBAAiB,EAAE,8BAA8B;QACjD,gBAAgB,EAAE,iCAAiC;QACnD,mBAAmB,EAAE,gCAAgC;QACrD,kBAAkB,EAAE,+BAA+B;QACnD,oBAAoB,EAAE,iCAAiC;QACvD,qBAAqB,EAAE,kCAAkC;QACzD,uBAAuB,EAAE,oCAAoC;QAC7D,sBAAsB,EAAE,mCAAmC;QAC3D,wBAAwB,EAAE,qCAAqC;QAC/D,yBAAyB,EAAE,sCAAsC;QACjE,eAAe,EAAE,gCAAgC;QACjD,cAAc,EAAE,+BAA+B;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,MAA8B;IAC7E,OAAO,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE;QAChE,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Resolve a path and ensure it stays within the project root (no traversal).
+ */
+export declare function resolveWithinRoot(projectRoot: string, inputPath: string): string;
+export declare function toPosixRelative(projectRoot: string, absolutePath: string): string;
+export declare function assertSafeRelativePath(relativePath: string): void;
+export declare const TEAM_ID_RE: RegExp;
+export declare const BUNDLE_ID_RE: RegExp;
+export declare const SEMVER_RE: RegExp;
+export declare function assertTeamId(value: string): void;
+export declare function assertBundleId(value: string): void;
+export declare function assertSemver(value: string): void;
+export declare function rejectControlChars(value: string, label: string): void;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAmBhF;AAED,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAcjE;AAED,eAAO,MAAM,UAAU,QAAqB,CAAC;AAC7C,eAAO,MAAM,YAAY,QAAwD,CAAC;AAClF,eAAO,MAAM,SAAS,QAAyC,CAAC;AAEhE,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIhD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIlD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIhD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIrE"}

package/dist/paths.js

@@ -0,0 +1,65 @@
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Resolve a path and ensure it stays within the project root (no traversal).
+ */
+export function resolveWithinRoot(projectRoot, inputPath) {
+    const rootReal = fs.realpathSync(path.resolve(projectRoot));
+    const absolute = path.isAbsolute(inputPath)
+        ? path.resolve(inputPath)
+        : path.resolve(projectRoot, inputPath);
+    let resolved = absolute;
+    if (fs.existsSync(absolute)) {
+        resolved = fs.realpathSync(absolute);
+    }
+    const relative = path.relative(rootReal, resolved);
+    if (relative.startsWith('..') || path.isAbsolute(relative)) {
+        throw new Error(`Path escapes project root: ${inputPath}`);
+    }
+    if (inputPath.includes('\0') || /(^|[\\/])\.\.([\\/]|$)/.test(inputPath)) {
+        // Allow absolute paths outside check already handled; relative .. already rejected.
+    }
+    return resolved;
+}
+export function toPosixRelative(projectRoot, absolutePath) {
+    return path.relative(projectRoot, absolutePath).split(path.sep).join('/');
+}
+export function assertSafeRelativePath(relativePath) {
+    if (!relativePath || relativePath.trim() !== relativePath) {
+        throw new Error(`Invalid path: ${relativePath}`);
+    }
+    if (path.isAbsolute(relativePath) || relativePath.includes('\0')) {
+        throw new Error(`Absolute or invalid path not allowed: ${relativePath}`);
+    }
+    const normalized = path.posix.normalize(relativePath.replace(/\\/g, '/'));
+    if (normalized.startsWith('../') || normalized === '..' || normalized.startsWith('/')) {
+        throw new Error(`Path traversal rejected: ${relativePath}`);
+    }
+    if (!/^[\w./@+-]+$/.test(normalized)) {
+        throw new Error(`Path contains unsupported characters: ${relativePath}`);
+    }
+}
+export const TEAM_ID_RE = /^[A-Z0-9]{6,12}$/;
+export const BUNDLE_ID_RE = /^[A-Za-z][A-Za-z0-9_-]*(\.[A-Za-z][A-Za-z0-9_-]*)+$/;
+export const SEMVER_RE = /^\d+\.\d+\.\d+([.-][A-Za-z0-9.-]+)?$/;
+export function assertTeamId(value) {
+    if (!TEAM_ID_RE.test(value)) {
+        throw new Error(`Invalid Apple Team ID: ${value}`);
+    }
+}
+export function assertBundleId(value) {
+    if (!BUNDLE_ID_RE.test(value)) {
+        throw new Error(`Invalid bundle/package identifier: ${value}`);
+    }
+}
+export function assertSemver(value) {
+    if (!SEMVER_RE.test(value)) {
+        throw new Error(`Invalid marketing version (expected SemVer): ${value}`);
+    }
+}
+export function rejectControlChars(value, label) {
+    if (/[\u0000-\u001f\u007f]/.test(value)) {
+        throw new Error(`${label} contains control characters`);
+    }
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,SAAiB;IACtE,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAEzC,IAAI,QAAQ,GAAG,QAAQ,CAAC;IACxB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,oFAAoF;IACtF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,YAAoB;IACvE,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,YAAoB;IACzD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,YAAY,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,iBAAiB,YAAY,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,yCAAyC,YAAY,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,yCAAyC,YAAY,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,qDAAqD,CAAC;AAClF,MAAM,CAAC,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEhE,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,KAAa;IAC7D,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/dist/process.d.ts

@@ -0,0 +1,26 @@
+export type SpawnResult = {
+    status: number | null;
+    stdout: string;
+    stderr: string;
+};
+/**
+ * Execute a command without a shell — argv only.
+ */
+export declare function runArgv(command: string, args: string[], options?: {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+}): SpawnResult;
+/**
+ * Parse a simple package-manager command into argv.
+ * Rejects shell metacharacters. Supports: yarn lint, npm run typecheck, etc.
+ */
+export declare function parseTrustedCommand(command: string): {
+    command: string;
+    args: string[];
+};
+export declare function runTrustedCommand(command: string, options?: {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+}): SpawnResult;
+//# sourceMappingURL=process.d.ts.map

package/dist/process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../src/process.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;GAEG;AACH,wBAAgB,OAAO,CACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1E,WAAW,CAab;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAkBxF;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GACtD,WAAW,CAGb"}

package/dist/process.js

@@ -0,0 +1,43 @@
+import { spawnSync } from 'node:child_process';
+/**
+ * Execute a command without a shell — argv only.
+ */
+export function runArgv(command, args, options = {}) {
+    const result = spawnSync(command, args, {
+        cwd: options.cwd,
+        env: options.env,
+        encoding: 'utf8',
+        shell: false,
+        timeout: options.timeoutMs,
+    });
+    return {
+        status: result.status,
+        stdout: result.stdout?.toString() || '',
+        stderr: result.stderr?.toString() || '',
+    };
+}
+const ALLOWED_PACKAGE_MANAGERS = new Set(['yarn', 'npm', 'pnpm', 'bundle', 'node']);
+/**
+ * Parse a simple package-manager command into argv.
+ * Rejects shell metacharacters. Supports: yarn lint, npm run typecheck, etc.
+ */
+export function parseTrustedCommand(command) {
+    const trimmed = command.trim();
+    if (!trimmed) {
+        throw new Error('Empty command');
+    }
+    if (/[;|&`$()<>]/.test(trimmed) || trimmed.includes('\n')) {
+        throw new Error(`Refusing shell metacharacters in command: ${trimmed}. Use argv-safe commands only.`);
+    }
+    const parts = trimmed.split(/\s+/);
+    const bin = parts[0];
+    if (!bin || !ALLOWED_PACKAGE_MANAGERS.has(bin)) {
+        throw new Error(`Command binary not allowlisted: ${bin}. Allowed: ${[...ALLOWED_PACKAGE_MANAGERS].join(', ')}`);
+    }
+    return { command: bin, args: parts.slice(1) };
+}
+export function runTrustedCommand(command, options = {}) {
+    const parsed = parseTrustedCommand(command);
+    return runArgv(parsed.command, parsed.args, options);
+}
+//# sourceMappingURL=process.js.map

package/dist/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../src/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAQ/C;;GAEG;AACH,MAAM,UAAU,OAAO,CACrB,OAAe,EACf,IAAc,EACd,UAAyE,EAAE;IAE3E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACtC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,OAAO,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,6CAA6C,OAAO,gCAAgC,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,GAAG,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,mCAAmC,GAAG,cAAc,CAAC,GAAG,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,UAAqD,EAAE;IAEvD,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,9 @@
+import readline from 'node:readline/promises';
+export declare function ask(rl: readline.Interface, question: string, defaultValue?: string): Promise<string>;
+export declare function askYesNo(rl: readline.Interface, question: string, defaultYes?: boolean): Promise<boolean>;
+/**
+ * Hidden password prompt — does not echo characters.
+ */
+export declare function askSecret(question: string): Promise<string>;
+export declare function createReadline(): readline.Interface;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,wBAAwB,CAAC;AAG9C,wBAAsB,GAAG,CACvB,EAAE,EAAE,QAAQ,CAAC,SAAS,EACtB,QAAQ,EAAE,MAAM,EAChB,YAAY,SAAK,GAChB,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,wBAAsB,QAAQ,CAC5B,EAAE,EAAE,QAAQ,CAAC,SAAS,EACtB,QAAQ,EAAE,MAAM,EAChB,UAAU,UAAQ,GACjB,OAAO,CAAC,OAAO,CAAC,CAKlB;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA+CjE;AAED,wBAAgB,cAAc,IAAI,QAAQ,CAAC,SAAS,CAEnD"}

package/dist/prompt.js

@@ -0,0 +1,70 @@
+import readline from 'node:readline/promises';
+import { stdin as input, stdout as output } from 'node:process';
+export async function ask(rl, question, defaultValue = '') {
+    const suffix = defaultValue ? ` [${defaultValue}]` : '';
+    const answer = (await rl.question(`${question}${suffix}: `)).trim();
+    return answer || defaultValue;
+}
+export async function askYesNo(rl, question, defaultYes = false) {
+    const hint = defaultYes ? 'Y/n' : 'y/N';
+    const answer = (await rl.question(`${question} (${hint}): `)).trim().toLowerCase();
+    if (!answer)
+        return defaultYes;
+    return answer === 'y' || answer === 'yes';
+}
+/**
+ * Hidden password prompt — does not echo characters.
+ */
+export async function askSecret(question) {
+    if (!input.isTTY || !output.isTTY) {
+        // Non-TTY fallback: still avoid echoing by reading without local echo where possible.
+        const rl = readline.createInterface({ input, output: undefined });
+        try {
+            return (await rl.question(`${question}: `)).trim();
+        }
+        finally {
+            rl.close();
+        }
+    }
+    return new Promise((resolve, reject) => {
+        output.write(`${question}: `);
+        const wasRaw = input.isRaw;
+        input.setRawMode?.(true);
+        let value = '';
+        const onData = (chunk) => {
+            const str = chunk.toString('utf8');
+            for (const char of str) {
+                if (char === '\n' || char === '\r' || char === '\u0004') {
+                    cleanup();
+                    output.write('\n');
+                    resolve(value);
+                    return;
+                }
+                if (char === '\u0003') {
+                    cleanup();
+                    reject(new Error('Cancelled'));
+                    return;
+                }
+                if (char === '\u007f' || char === '\b') {
+                    value = value.slice(0, -1);
+                    continue;
+                }
+                value += char;
+            }
+        };
+        const cleanup = () => {
+            input.off('data', onData);
+            if (typeof wasRaw === 'boolean') {
+                input.setRawMode?.(wasRaw);
+            }
+            else {
+                input.setRawMode?.(false);
+            }
+        };
+        input.on('data', onData);
+    });
+}
+export function createReadline() {
+    return readline.createInterface({ input, output });
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,wBAAwB,CAAC;AAC9C,OAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,cAAc,CAAC;AAEhE,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,EAAsB,EACtB,QAAgB,EAChB,YAAY,GAAG,EAAE;IAEjB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,OAAO,MAAM,IAAI,YAAY,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,EAAsB,EACtB,QAAgB,EAChB,UAAU,GAAG,KAAK;IAElB,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnF,IAAI,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC;IAC/B,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB;IAC9C,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClC,sFAAsF;QACtF,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAA6C,EAAE,CAAC,CAAC;QACtG,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3B,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBACvB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACxD,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACnB,OAAO,CAAC,KAAK,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACvC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC3B,SAAS;gBACX,CAAC;gBACD,KAAK,IAAI,IAAI,CAAC;YAChB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1B,IAAI,OAAO,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AACrD,CAAC"}