@depup/expo__cli 55.0.16-depup.0

package/build/src/utils/codesigning.js

@@ -0,0 +1,395 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: all[name]
+    });
+}
+_export(exports, {
+    DevelopmentCodeSigningInfoFile: function() {
+        return DevelopmentCodeSigningInfoFile;
+    },
+    getCodeSigningInfoAsync: function() {
+        return getCodeSigningInfoAsync;
+    },
+    getDevelopmentCodeSigningDirectory: function() {
+        return getDevelopmentCodeSigningDirectory;
+    },
+    signManifestString: function() {
+        return signManifestString;
+    }
+});
+function _codesigningcertificates() {
+    const data = require("@expo/code-signing-certificates");
+    _codesigningcertificates = function() {
+        return data;
+    };
+    return data;
+}
+function _jsonfile() {
+    const data = /*#__PURE__*/ _interop_require_default(require("@expo/json-file"));
+    _jsonfile = function() {
+        return data;
+    };
+    return data;
+}
+function _fs() {
+    const data = require("fs");
+    _fs = function() {
+        return data;
+    };
+    return data;
+}
+function _path() {
+    const data = /*#__PURE__*/ _interop_require_default(require("path"));
+    _path = function() {
+        return data;
+    };
+    return data;
+}
+function _structuredheaders() {
+    const data = require("structured-headers");
+    _structuredheaders = function() {
+        return data;
+    };
+    return data;
+}
+const _env = require("./env");
+const _errors = require("./errors");
+const _getExpoGoIntermediateCertificate = require("../api/getExpoGoIntermediateCertificate");
+const _getProjectDevelopmentCertificate = require("../api/getProjectDevelopmentCertificate");
+const _client = require("../api/graphql/client");
+const _AppQuery = require("../api/graphql/queries/AppQuery");
+const _UserSettings = require("../api/user/UserSettings");
+const _actions = require("../api/user/actions");
+const _log = /*#__PURE__*/ _interop_require_wildcard(require("../log"));
+const _link = require("../utils/link");
+function _interop_require_default(obj) {
+    return obj && obj.__esModule ? obj : {
+        default: obj
+    };
+}
+function _getRequireWildcardCache(nodeInterop) {
+    if (typeof WeakMap !== "function") return null;
+    var cacheBabelInterop = new WeakMap();
+    var cacheNodeInterop = new WeakMap();
+    return (_getRequireWildcardCache = function(nodeInterop) {
+        return nodeInterop ? cacheNodeInterop : cacheBabelInterop;
+    })(nodeInterop);
+}
+function _interop_require_wildcard(obj, nodeInterop) {
+    if (!nodeInterop && obj && obj.__esModule) {
+        return obj;
+    }
+    if (obj === null || typeof obj !== "object" && typeof obj !== "function") {
+        return {
+            default: obj
+        };
+    }
+    var cache = _getRequireWildcardCache(nodeInterop);
+    if (cache && cache.has(obj)) {
+        return cache.get(obj);
+    }
+    var newObj = {
+        __proto__: null
+    };
+    var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor;
+    for(var key in obj){
+        if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) {
+            var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null;
+            if (desc && (desc.get || desc.set)) {
+                Object.defineProperty(newObj, key, desc);
+            } else {
+                newObj[key] = obj[key];
+            }
+        }
+    }
+    newObj.default = obj;
+    if (cache) {
+        cache.set(obj, newObj);
+    }
+    return newObj;
+}
+const debug = require('debug')('expo:codesigning');
+const DEVELOPMENT_CODE_SIGNING_SETTINGS_FILE_NAME = 'development-code-signing-settings-2.json';
+function getDevelopmentCodeSigningDirectory() {
+    return _path().default.join((0, _UserSettings.getExpoHomeDirectory)(), 'codesigning');
+}
+function getProjectDevelopmentCodeSigningInfoFile(defaults) {
+    function getFile(easProjectId) {
+        const filePath = _path().default.join(getDevelopmentCodeSigningDirectory(), easProjectId, DEVELOPMENT_CODE_SIGNING_SETTINGS_FILE_NAME);
+        return new (_jsonfile()).default(filePath);
+    }
+    async function readAsync(easProjectId) {
+        let projectSettings;
+        try {
+            projectSettings = await getFile(easProjectId).readAsync();
+        } catch  {
+            projectSettings = await getFile(easProjectId).writeAsync(defaults, {
+                ensureDir: true
+            });
+        }
+        // Set defaults for any missing fields
+        return {
+            ...defaults,
+            ...projectSettings
+        };
+    }
+    async function setAsync(easProjectId, json) {
+        try {
+            return await getFile(easProjectId).mergeAsync(json, {
+                cantReadFileDefault: defaults
+            });
+        } catch  {
+            return await getFile(easProjectId).writeAsync({
+                ...defaults,
+                ...json
+            }, {
+                ensureDir: true
+            });
+        }
+    }
+    return {
+        getFile,
+        readAsync,
+        setAsync
+    };
+}
+const DevelopmentCodeSigningInfoFile = getProjectDevelopmentCodeSigningInfoFile({
+    easProjectId: null,
+    scopeKey: null,
+    privateKey: null,
+    certificateChain: null
+});
+async function getCodeSigningInfoAsync(exp, expectSignatureHeader, privateKeyPath) {
+    if (!expectSignatureHeader) {
+        return null;
+    }
+    let parsedExpectSignature;
+    try {
+        parsedExpectSignature = (0, _structuredheaders().parseDictionary)(expectSignatureHeader);
+    } catch  {
+        throw new _errors.CommandError('Invalid value for expo-expect-signature header');
+    }
+    const expectedKeyIdOuter = parsedExpectSignature.get('keyid');
+    if (!expectedKeyIdOuter) {
+        throw new _errors.CommandError('keyid not present in expo-expect-signature header');
+    }
+    const expectedKeyId = expectedKeyIdOuter[0];
+    if (typeof expectedKeyId !== 'string') {
+        throw new _errors.CommandError(`Invalid value for keyid in expo-expect-signature header: ${expectedKeyId}`);
+    }
+    let expectedAlg = null;
+    const expectedAlgOuter = parsedExpectSignature.get('alg');
+    if (expectedAlgOuter) {
+        const expectedAlgTemp = expectedAlgOuter[0];
+        if (typeof expectedAlgTemp !== 'string') {
+            throw new _errors.CommandError('Invalid value for alg in expo-expect-signature header');
+        }
+        expectedAlg = expectedAlgTemp;
+    }
+    if (expectedKeyId === 'expo-root') {
+        return await getExpoRootDevelopmentCodeSigningInfoAsync(exp);
+    } else if (expectedKeyId === 'expo-go') {
+        throw new _errors.CommandError('Invalid certificate requested: cannot sign with embedded keyid=expo-go key');
+    } else {
+        return await getProjectCodeSigningCertificateAsync(exp, privateKeyPath, expectedKeyId, expectedAlg);
+    }
+}
+/**
+ * Get a development code signing certificate for the expo-root -> expo-go -> (development certificate) certificate chain.
+ * This requires the user be logged in and online, otherwise try to use the cached development certificate.
+ */ async function getExpoRootDevelopmentCodeSigningInfoAsync(exp) {
+    var _exp_extra_eas, _exp_extra;
+    const easProjectId = (_exp_extra = exp.extra) == null ? void 0 : (_exp_extra_eas = _exp_extra.eas) == null ? void 0 : _exp_extra_eas.projectId;
+    // can't check for scope key validity since scope key is derived on the server from projectId and we may be offline.
+    // we rely upon the client certificate check to validate the scope key
+    if (!easProjectId) {
+        debug(`WARN: Expo Application Services (EAS) is not configured for your project. Configuring EAS enables a more secure development experience amongst many other benefits. ${(0, _link.learnMore)('https://docs.expo.dev/eas/')}`);
+        return null;
+    }
+    const developmentCodeSigningInfoFromFile = await DevelopmentCodeSigningInfoFile.readAsync(easProjectId);
+    const validatedCodeSigningInfo = validateStoredDevelopmentExpoRootCertificateCodeSigningInfo(developmentCodeSigningInfoFromFile, easProjectId);
+    // 1. If online, ensure logged in, generate key pair and CSR, fetch and cache certificate chain for projectId
+    //    (overwriting existing dev cert in case projectId changed or it has expired)
+    if (!_env.env.EXPO_OFFLINE) {
+        try {
+            const newCodeSigningInfo = await fetchAndCacheNewDevelopmentCodeSigningInfoAsync(easProjectId);
+            if (newCodeSigningInfo) {
+                return newCodeSigningInfo;
+            // fall back to cached certificate if we couldn't fetch a new one
+            } else if (validatedCodeSigningInfo) {
+                _log.warn('Could not fetch new Expo development certificate, falling back to cached certificate');
+                return validatedCodeSigningInfo;
+            } else {
+                return null;
+            }
+        } catch (e) {
+            if (validatedCodeSigningInfo) {
+                _log.warn('There was an error fetching the Expo development certificate, falling back to cached certificate');
+                return validatedCodeSigningInfo;
+            } else {
+                // need to return null here and say a message
+                throw e;
+            }
+        }
+    }
+    // 2. check for cached cert/private key matching projectId and scopeKey of project, if found and valid return private key and cert chain including expo-go cert
+    if (validatedCodeSigningInfo) {
+        return validatedCodeSigningInfo;
+    }
+    // 3. if offline, return null
+    _log.warn('Offline and no cached development certificate found, unable to sign manifest');
+    return null;
+}
+/**
+ * Get the certificate configured for expo-updates for this project.
+ */ async function getProjectCodeSigningCertificateAsync(exp, privateKeyPath, expectedKeyId, expectedAlg) {
+    var _exp_updates, _exp_updates1;
+    const codeSigningCertificatePath = (_exp_updates = exp.updates) == null ? void 0 : _exp_updates.codeSigningCertificate;
+    if (!codeSigningCertificatePath) {
+        return null;
+    }
+    if (!privateKeyPath) {
+        throw new _errors.CommandError('Must specify --private-key-path argument to sign development manifest for requested code signing key');
+    }
+    const codeSigningMetadata = (_exp_updates1 = exp.updates) == null ? void 0 : _exp_updates1.codeSigningMetadata;
+    if (!codeSigningMetadata) {
+        throw new _errors.CommandError('Must specify "codeSigningMetadata" under the "updates" field of your app config file to use EAS code signing');
+    }
+    const { alg, keyid } = codeSigningMetadata;
+    if (!alg || !keyid) {
+        throw new _errors.CommandError('Must specify "keyid" and "alg" in the "codeSigningMetadata" field under the "updates" field of your app config file to use EAS code signing');
+    }
+    if (expectedKeyId !== keyid) {
+        throw new _errors.CommandError(`keyid mismatch: client=${expectedKeyId}, project=${keyid}`);
+    }
+    if (expectedAlg && expectedAlg !== alg) {
+        throw new _errors.CommandError(`"alg" field mismatch (client=${expectedAlg}, project=${alg})`);
+    }
+    const { privateKeyPEM, certificatePEM } = await getProjectPrivateKeyAndCertificateFromFilePathsAsync({
+        codeSigningCertificatePath,
+        privateKeyPath
+    });
+    return {
+        keyId: keyid,
+        privateKey: privateKeyPEM,
+        certificateForPrivateKey: certificatePEM,
+        certificateChainForResponse: [],
+        scopeKey: null
+    };
+}
+async function readFileWithErrorAsync(path, errorMessage) {
+    try {
+        return await _fs().promises.readFile(path, 'utf8');
+    } catch  {
+        throw new _errors.CommandError(errorMessage);
+    }
+}
+async function getProjectPrivateKeyAndCertificateFromFilePathsAsync({ codeSigningCertificatePath, privateKeyPath }) {
+    const [codeSigningCertificatePEM, privateKeyPEM] = await Promise.all([
+        readFileWithErrorAsync(codeSigningCertificatePath, `Code signing certificate cannot be read from path: ${codeSigningCertificatePath}`),
+        readFileWithErrorAsync(privateKeyPath, `Code signing private key cannot be read from path: ${privateKeyPath}`)
+    ]);
+    const privateKey = (0, _codesigningcertificates().convertPrivateKeyPEMToPrivateKey)(privateKeyPEM);
+    const certificate = (0, _codesigningcertificates().convertCertificatePEMToCertificate)(codeSigningCertificatePEM);
+    (0, _codesigningcertificates().validateSelfSignedCertificate)(certificate, {
+        publicKey: certificate.publicKey,
+        privateKey
+    });
+    return {
+        privateKeyPEM,
+        certificatePEM: codeSigningCertificatePEM
+    };
+}
+/**
+ * Validate that the cached code signing info is still valid for the current project and
+ * that it hasn't expired. If invalid, return null.
+ */ function validateStoredDevelopmentExpoRootCertificateCodeSigningInfo(codeSigningInfo, easProjectId) {
+    if (codeSigningInfo.easProjectId !== easProjectId) {
+        return null;
+    }
+    const { privateKey: privateKeyPEM, certificateChain: certificatePEMs, scopeKey } = codeSigningInfo;
+    if (!privateKeyPEM || !certificatePEMs) {
+        return null;
+    }
+    const certificateChain = certificatePEMs.map((certificatePEM)=>(0, _codesigningcertificates().convertCertificatePEMToCertificate)(certificatePEM));
+    // TODO(wschurman): maybe move to @expo/code-signing-certificates
+    // ensure all intermediate certificates are valid
+    for (const certificate of certificateChain){
+        const now = new Date();
+        if (certificate.validity.notBefore > now || certificate.validity.notAfter < now) {
+            return null;
+        }
+    }
+    // TODO(wschurman): maybe do more validation, like validation of projectID and scopeKey within eas certificate extension
+    return {
+        keyId: 'expo-go',
+        certificateChainForResponse: certificatePEMs,
+        certificateForPrivateKey: certificatePEMs[0],
+        privateKey: privateKeyPEM,
+        scopeKey
+    };
+}
+function actorCanGetProjectDevelopmentCertificate(actor, app) {
+    var _actor_accounts_find_users_find_permissions, _actor_accounts_find_users_find, _actor_accounts_find_users, _actor_accounts_find;
+    const owningAccountId = app.ownerAccount.id;
+    const owningAccountIsActorPrimaryAccount = actor.__typename === 'User' || actor.__typename === 'SSOUser' ? actor.primaryAccount.id === owningAccountId : false;
+    const userHasPublishPermissionForOwningAccount = !!((_actor_accounts_find = actor.accounts.find((account)=>account.id === owningAccountId)) == null ? void 0 : (_actor_accounts_find_users = _actor_accounts_find.users) == null ? void 0 : (_actor_accounts_find_users_find = _actor_accounts_find_users.find((userPermission)=>userPermission.actor.id === actor.id)) == null ? void 0 : (_actor_accounts_find_users_find_permissions = _actor_accounts_find_users_find.permissions) == null ? void 0 : _actor_accounts_find_users_find_permissions.includes('PUBLISH'));
+    return owningAccountIsActorPrimaryAccount || userHasPublishPermissionForOwningAccount;
+}
+async function fetchAndCacheNewDevelopmentCodeSigningInfoAsync(easProjectId) {
+    const actor = await (0, _actions.tryGetUserAsync)();
+    if (!actor) {
+        return null;
+    }
+    let app;
+    try {
+        app = await _AppQuery.AppQuery.byIdAsync(easProjectId);
+    } catch (e) {
+        if (e instanceof _client.UnexpectedServerError || e instanceof _client.UnexpectedServerData) {
+            return null;
+        }
+        throw e;
+    }
+    if (!actorCanGetProjectDevelopmentCertificate(actor, app)) {
+        return null;
+    }
+    const keyPair = (0, _codesigningcertificates().generateKeyPair)();
+    const keyPairPEM = (0, _codesigningcertificates().convertKeyPairToPEM)(keyPair);
+    const csr = (0, _codesigningcertificates().generateCSR)(keyPair, `Development Certificate for ${easProjectId}`);
+    const csrPEM = (0, _codesigningcertificates().convertCSRToCSRPEM)(csr);
+    const [developmentSigningCertificate, expoGoIntermediateCertificate] = await Promise.all([
+        (0, _getProjectDevelopmentCertificate.getProjectDevelopmentCertificateAsync)(easProjectId, csrPEM),
+        (0, _getExpoGoIntermediateCertificate.getExpoGoIntermediateCertificateAsync)(easProjectId)
+    ]);
+    await DevelopmentCodeSigningInfoFile.setAsync(easProjectId, {
+        easProjectId,
+        scopeKey: app.scopeKey,
+        privateKey: keyPairPEM.privateKeyPEM,
+        certificateChain: [
+            developmentSigningCertificate,
+            expoGoIntermediateCertificate
+        ]
+    });
+    return {
+        keyId: 'expo-go',
+        certificateChainForResponse: [
+            developmentSigningCertificate,
+            expoGoIntermediateCertificate
+        ],
+        certificateForPrivateKey: developmentSigningCertificate,
+        privateKey: keyPairPEM.privateKeyPEM,
+        scopeKey: app.scopeKey
+    };
+}
+function signManifestString(stringifiedManifest, codeSigningInfo) {
+    const privateKey = (0, _codesigningcertificates().convertPrivateKeyPEMToPrivateKey)(codeSigningInfo.privateKey);
+    const certificate = (0, _codesigningcertificates().convertCertificatePEMToCertificate)(codeSigningInfo.certificateForPrivateKey);
+    return (0, _codesigningcertificates().signBufferRSASHA256AndVerify)(privateKey, certificate, Buffer.from(stringifiedManifest, 'utf8'));
+}
+
+//# sourceMappingURL=codesigning.js.map

package/build/src/utils/codesigning.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/utils/codesigning.ts"],"sourcesContent":["import {\n  convertCertificatePEMToCertificate,\n  convertKeyPairToPEM,\n  convertCSRToCSRPEM,\n  generateKeyPair,\n  generateCSR,\n  convertPrivateKeyPEMToPrivateKey,\n  validateSelfSignedCertificate,\n  signBufferRSASHA256AndVerify,\n} from '@expo/code-signing-certificates';\nimport { ExpoConfig } from '@expo/config';\nimport JsonFile, { JSONObject } from '@expo/json-file';\nimport { promises as fs } from 'fs';\nimport { pki as PKI } from 'node-forge';\nimport path from 'path';\nimport { Dictionary, parseDictionary } from 'structured-headers';\n\nimport { env } from './env';\nimport { CommandError } from './errors';\nimport { getExpoGoIntermediateCertificateAsync } from '../api/getExpoGoIntermediateCertificate';\nimport { getProjectDevelopmentCertificateAsync } from '../api/getProjectDevelopmentCertificate';\nimport { UnexpectedServerError, UnexpectedServerData } from '../api/graphql/client';\nimport { AppQuery, type App } from '../api/graphql/queries/AppQuery';\nimport { getExpoHomeDirectory } from '../api/user/UserSettings';\nimport { tryGetUserAsync } from '../api/user/actions';\nimport { Actor } from '../api/user/user';\nimport * as Log from '../log';\nimport { learnMore } from '../utils/link';\n\nconst debug = require('debug')('expo:codesigning') as typeof console.log;\n\nexport type CodeSigningInfo = {\n  keyId: string;\n  privateKey: string;\n  certificateForPrivateKey: string;\n  /**\n   * Chain of certificates to serve in the manifest multipart body \"certificate_chain\" part.\n   * The leaf certificate must be the 0th element of the array, followed by any intermediate certificates\n   * necessary to evaluate the chain of trust ending in the implicitly trusted root certificate embedded in\n   * the client.\n   *\n   * An empty array indicates that there is no need to serve the certificate chain in the multipart response.\n   */\n  certificateChainForResponse: string[];\n  /**\n   * Scope key cached for the project when certificate is development Expo Go code signing.\n   * For project-specific code signing (keyId == the project's generated keyId) this is undefined.\n   */\n  scopeKey: string | null;\n};\n\ntype StoredDevelopmentExpoRootCodeSigningInfo = {\n  easProjectId: string | null;\n  scopeKey: string | null;\n  privateKey: string | null;\n  certificateChain: string[] | null;\n};\nconst DEVELOPMENT_CODE_SIGNING_SETTINGS_FILE_NAME = 'development-code-signing-settings-2.json';\n\nexport function getDevelopmentCodeSigningDirectory(): string {\n  return path.join(getExpoHomeDirectory(), 'codesigning');\n}\n\nfunction getProjectDevelopmentCodeSigningInfoFile<T extends JSONObject>(defaults: T) {\n  function getFile(easProjectId: string): JsonFile<T> {\n    const filePath = path.join(\n      getDevelopmentCodeSigningDirectory(),\n      easProjectId,\n      DEVELOPMENT_CODE_SIGNING_SETTINGS_FILE_NAME\n    );\n    return new JsonFile<T>(filePath);\n  }\n\n  async function readAsync(easProjectId: string): Promise<T> {\n    let projectSettings;\n    try {\n      projectSettings = await getFile(easProjectId).readAsync();\n    } catch {\n      projectSettings = await getFile(easProjectId).writeAsync(defaults, { ensureDir: true });\n    }\n    // Set defaults for any missing fields\n    return { ...defaults, ...projectSettings };\n  }\n\n  async function setAsync(easProjectId: string, json: Partial<T>): Promise<T> {\n    try {\n      return await getFile(easProjectId).mergeAsync(json, {\n        cantReadFileDefault: defaults,\n      });\n    } catch {\n      return await getFile(easProjectId).writeAsync(\n        {\n          ...defaults,\n          ...json,\n        },\n        { ensureDir: true }\n      );\n    }\n  }\n\n  return {\n    getFile,\n    readAsync,\n    setAsync,\n  };\n}\n\nexport const DevelopmentCodeSigningInfoFile =\n  getProjectDevelopmentCodeSigningInfoFile<StoredDevelopmentExpoRootCodeSigningInfo>({\n    easProjectId: null,\n    scopeKey: null,\n    privateKey: null,\n    certificateChain: null,\n  });\n\n/**\n * Get info necessary to generate a response `expo-signature` header given a project and incoming request `expo-expect-signature` header.\n * This only knows how to serve two code signing keyids:\n * - `expo-root` indicates that it should use a development certificate in the `expo-root` chain. See {@link getExpoRootDevelopmentCodeSigningInfoAsync}\n * - <developer's expo-updates keyid> indicates that it should sign with the configured certificate. See {@link getProjectCodeSigningCertificateAsync}\n */\nexport async function getCodeSigningInfoAsync(\n  exp: ExpoConfig,\n  expectSignatureHeader: string | null,\n  privateKeyPath: string | undefined\n): Promise<CodeSigningInfo | null> {\n  if (!expectSignatureHeader) {\n    return null;\n  }\n\n  let parsedExpectSignature: Dictionary;\n  try {\n    parsedExpectSignature = parseDictionary(expectSignatureHeader);\n  } catch {\n    throw new CommandError('Invalid value for expo-expect-signature header');\n  }\n\n  const expectedKeyIdOuter = parsedExpectSignature.get('keyid');\n  if (!expectedKeyIdOuter) {\n    throw new CommandError('keyid not present in expo-expect-signature header');\n  }\n\n  const expectedKeyId = expectedKeyIdOuter[0];\n  if (typeof expectedKeyId !== 'string') {\n    throw new CommandError(\n      `Invalid value for keyid in expo-expect-signature header: ${expectedKeyId}`\n    );\n  }\n\n  let expectedAlg: string | null = null;\n  const expectedAlgOuter = parsedExpectSignature.get('alg');\n  if (expectedAlgOuter) {\n    const expectedAlgTemp = expectedAlgOuter[0];\n    if (typeof expectedAlgTemp !== 'string') {\n      throw new CommandError('Invalid value for alg in expo-expect-signature header');\n    }\n    expectedAlg = expectedAlgTemp;\n  }\n\n  if (expectedKeyId === 'expo-root') {\n    return await getExpoRootDevelopmentCodeSigningInfoAsync(exp);\n  } else if (expectedKeyId === 'expo-go') {\n    throw new CommandError(\n      'Invalid certificate requested: cannot sign with embedded keyid=expo-go key'\n    );\n  } else {\n    return await getProjectCodeSigningCertificateAsync(\n      exp,\n      privateKeyPath,\n      expectedKeyId,\n      expectedAlg\n    );\n  }\n}\n\n/**\n * Get a development code signing certificate for the expo-root -> expo-go -> (development certificate) certificate chain.\n * This requires the user be logged in and online, otherwise try to use the cached development certificate.\n */\nasync function getExpoRootDevelopmentCodeSigningInfoAsync(\n  exp: ExpoConfig\n): Promise<CodeSigningInfo | null> {\n  const easProjectId = exp.extra?.eas?.projectId;\n  // can't check for scope key validity since scope key is derived on the server from projectId and we may be offline.\n  // we rely upon the client certificate check to validate the scope key\n  if (!easProjectId) {\n    debug(\n      `WARN: Expo Application Services (EAS) is not configured for your project. Configuring EAS enables a more secure development experience amongst many other benefits. ${learnMore(\n        'https://docs.expo.dev/eas/'\n      )}`\n    );\n    return null;\n  }\n\n  const developmentCodeSigningInfoFromFile =\n    await DevelopmentCodeSigningInfoFile.readAsync(easProjectId);\n  const validatedCodeSigningInfo = validateStoredDevelopmentExpoRootCertificateCodeSigningInfo(\n    developmentCodeSigningInfoFromFile,\n    easProjectId\n  );\n\n  // 1. If online, ensure logged in, generate key pair and CSR, fetch and cache certificate chain for projectId\n  //    (overwriting existing dev cert in case projectId changed or it has expired)\n  if (!env.EXPO_OFFLINE) {\n    try {\n      const newCodeSigningInfo =\n        await fetchAndCacheNewDevelopmentCodeSigningInfoAsync(easProjectId);\n\n      if (newCodeSigningInfo) {\n        return newCodeSigningInfo;\n        // fall back to cached certificate if we couldn't fetch a new one\n      } else if (validatedCodeSigningInfo) {\n        Log.warn(\n          'Could not fetch new Expo development certificate, falling back to cached certificate'\n        );\n        return validatedCodeSigningInfo;\n      } else {\n        return null;\n      }\n    } catch (e: any) {\n      if (validatedCodeSigningInfo) {\n        Log.warn(\n          'There was an error fetching the Expo development certificate, falling back to cached certificate'\n        );\n        return validatedCodeSigningInfo;\n      } else {\n        // need to return null here and say a message\n        throw e;\n      }\n    }\n  }\n\n  // 2. check for cached cert/private key matching projectId and scopeKey of project, if found and valid return private key and cert chain including expo-go cert\n  if (validatedCodeSigningInfo) {\n    return validatedCodeSigningInfo;\n  }\n\n  // 3. if offline, return null\n  Log.warn('Offline and no cached development certificate found, unable to sign manifest');\n  return null;\n}\n\n/**\n * Get the certificate configured for expo-updates for this project.\n */\nasync function getProjectCodeSigningCertificateAsync(\n  exp: ExpoConfig,\n  privateKeyPath: string | undefined,\n  expectedKeyId: string,\n  expectedAlg: string | null\n): Promise<CodeSigningInfo | null> {\n  const codeSigningCertificatePath = exp.updates?.codeSigningCertificate;\n  if (!codeSigningCertificatePath) {\n    return null;\n  }\n\n  if (!privateKeyPath) {\n    throw new CommandError(\n      'Must specify --private-key-path argument to sign development manifest for requested code signing key'\n    );\n  }\n\n  const codeSigningMetadata = exp.updates?.codeSigningMetadata;\n  if (!codeSigningMetadata) {\n    throw new CommandError(\n      'Must specify \"codeSigningMetadata\" under the \"updates\" field of your app config file to use EAS code signing'\n    );\n  }\n\n  const { alg, keyid } = codeSigningMetadata;\n  if (!alg || !keyid) {\n    throw new CommandError(\n      'Must specify \"keyid\" and \"alg\" in the \"codeSigningMetadata\" field under the \"updates\" field of your app config file to use EAS code signing'\n    );\n  }\n\n  if (expectedKeyId !== keyid) {\n    throw new CommandError(`keyid mismatch: client=${expectedKeyId}, project=${keyid}`);\n  }\n\n  if (expectedAlg && expectedAlg !== alg) {\n    throw new CommandError(`\"alg\" field mismatch (client=${expectedAlg}, project=${alg})`);\n  }\n\n  const { privateKeyPEM, certificatePEM } =\n    await getProjectPrivateKeyAndCertificateFromFilePathsAsync({\n      codeSigningCertificatePath,\n      privateKeyPath,\n    });\n\n  return {\n    keyId: keyid,\n    privateKey: privateKeyPEM,\n    certificateForPrivateKey: certificatePEM,\n    certificateChainForResponse: [],\n    scopeKey: null,\n  };\n}\n\nasync function readFileWithErrorAsync(path: string, errorMessage: string): Promise<string> {\n  try {\n    return await fs.readFile(path, 'utf8');\n  } catch {\n    throw new CommandError(errorMessage);\n  }\n}\n\nasync function getProjectPrivateKeyAndCertificateFromFilePathsAsync({\n  codeSigningCertificatePath,\n  privateKeyPath,\n}: {\n  codeSigningCertificatePath: string;\n  privateKeyPath: string;\n}): Promise<{ privateKeyPEM: string; certificatePEM: string }> {\n  const [codeSigningCertificatePEM, privateKeyPEM] = await Promise.all([\n    readFileWithErrorAsync(\n      codeSigningCertificatePath,\n      `Code signing certificate cannot be read from path: ${codeSigningCertificatePath}`\n    ),\n    readFileWithErrorAsync(\n      privateKeyPath,\n      `Code signing private key cannot be read from path: ${privateKeyPath}`\n    ),\n  ]);\n\n  const privateKey = convertPrivateKeyPEMToPrivateKey(privateKeyPEM);\n  const certificate = convertCertificatePEMToCertificate(codeSigningCertificatePEM);\n  validateSelfSignedCertificate(certificate, {\n    publicKey: certificate.publicKey as PKI.rsa.PublicKey,\n    privateKey,\n  });\n\n  return { privateKeyPEM, certificatePEM: codeSigningCertificatePEM };\n}\n\n/**\n * Validate that the cached code signing info is still valid for the current project and\n * that it hasn't expired. If invalid, return null.\n */\nfunction validateStoredDevelopmentExpoRootCertificateCodeSigningInfo(\n  codeSigningInfo: StoredDevelopmentExpoRootCodeSigningInfo,\n  easProjectId: string\n): CodeSigningInfo | null {\n  if (codeSigningInfo.easProjectId !== easProjectId) {\n    return null;\n  }\n\n  const {\n    privateKey: privateKeyPEM,\n    certificateChain: certificatePEMs,\n    scopeKey,\n  } = codeSigningInfo;\n  if (!privateKeyPEM || !certificatePEMs) {\n    return null;\n  }\n\n  const certificateChain = certificatePEMs.map((certificatePEM) =>\n    convertCertificatePEMToCertificate(certificatePEM)\n  );\n\n  // TODO(wschurman): maybe move to @expo/code-signing-certificates\n\n  // ensure all intermediate certificates are valid\n  for (const certificate of certificateChain) {\n    const now = new Date();\n    if (certificate.validity.notBefore > now || certificate.validity.notAfter < now) {\n      return null;\n    }\n  }\n\n  // TODO(wschurman): maybe do more validation, like validation of projectID and scopeKey within eas certificate extension\n\n  return {\n    keyId: 'expo-go',\n    certificateChainForResponse: certificatePEMs,\n    certificateForPrivateKey: certificatePEMs[0],\n    privateKey: privateKeyPEM,\n    scopeKey,\n  };\n}\n\nfunction actorCanGetProjectDevelopmentCertificate(actor: Actor, app: App) {\n  const owningAccountId = app.ownerAccount.id;\n\n  const owningAccountIsActorPrimaryAccount =\n    actor.__typename === 'User' || actor.__typename === 'SSOUser'\n      ? actor.primaryAccount.id === owningAccountId\n      : false;\n  const userHasPublishPermissionForOwningAccount = !!actor.accounts\n    .find((account) => account.id === owningAccountId)\n    ?.users?.find((userPermission) => userPermission.actor.id === actor.id)\n    ?.permissions?.includes('PUBLISH');\n  return owningAccountIsActorPrimaryAccount || userHasPublishPermissionForOwningAccount;\n}\n\nasync function fetchAndCacheNewDevelopmentCodeSigningInfoAsync(\n  easProjectId: string\n): Promise<CodeSigningInfo | null> {\n  const actor = await tryGetUserAsync();\n\n  if (!actor) {\n    return null;\n  }\n\n  let app: App;\n  try {\n    app = await AppQuery.byIdAsync(easProjectId);\n  } catch (e) {\n    if (e instanceof UnexpectedServerError || e instanceof UnexpectedServerData) {\n      return null;\n    }\n    throw e;\n  }\n  if (!actorCanGetProjectDevelopmentCertificate(actor, app)) {\n    return null;\n  }\n\n  const keyPair = generateKeyPair();\n  const keyPairPEM = convertKeyPairToPEM(keyPair);\n  const csr = generateCSR(keyPair, `Development Certificate for ${easProjectId}`);\n  const csrPEM = convertCSRToCSRPEM(csr);\n  const [developmentSigningCertificate, expoGoIntermediateCertificate] = await Promise.all([\n    getProjectDevelopmentCertificateAsync(easProjectId, csrPEM),\n    getExpoGoIntermediateCertificateAsync(easProjectId),\n  ]);\n\n  await DevelopmentCodeSigningInfoFile.setAsync(easProjectId, {\n    easProjectId,\n    scopeKey: app.scopeKey,\n    privateKey: keyPairPEM.privateKeyPEM,\n    certificateChain: [developmentSigningCertificate, expoGoIntermediateCertificate],\n  });\n\n  return {\n    keyId: 'expo-go',\n    certificateChainForResponse: [developmentSigningCertificate, expoGoIntermediateCertificate],\n    certificateForPrivateKey: developmentSigningCertificate,\n    privateKey: keyPairPEM.privateKeyPEM,\n    scopeKey: app.scopeKey,\n  };\n}\n/**\n * Generate the `expo-signature` header for a manifest and code signing info.\n */\nexport function signManifestString(\n  stringifiedManifest: string,\n  codeSigningInfo: CodeSigningInfo\n): string {\n  const privateKey = convertPrivateKeyPEMToPrivateKey(codeSigningInfo.privateKey);\n  const certificate = convertCertificatePEMToCertificate(codeSigningInfo.certificateForPrivateKey);\n  return signBufferRSASHA256AndVerify(\n    privateKey,\n    certificate,\n    Buffer.from(stringifiedManifest, 'utf8')\n  );\n}\n"],"names":["DevelopmentCodeSigningInfoFile","getCodeSigningInfoAsync","getDevelopmentCodeSigningDirectory","signManifestString","debug","require","DEVELOPMENT_CODE_SIGNING_SETTINGS_FILE_NAME","path","join","getExpoHomeDirectory","getProjectDevelopmentCodeSigningInfoFile","defaults","getFile","easProjectId","filePath","JsonFile","readAsync","projectSettings","writeAsync","ensureDir","setAsync","json","mergeAsync","cantReadFileDefault","scopeKey","privateKey","certificateChain","exp","expectSignatureHeader","privateKeyPath","parsedExpectSignature","parseDictionary","CommandError","expectedKeyIdOuter","get","expectedKeyId","expectedAlg","expectedAlgOuter","expectedAlgTemp","getExpoRootDevelopmentCodeSigningInfoAsync","getProjectCodeSigningCertificateAsync","extra","eas","projectId","learnMore","developmentCodeSigningInfoFromFile","validatedCodeSigningInfo","validateStoredDevelopmentExpoRootCertificateCodeSigningInfo","env","EXPO_OFFLINE","newCodeSigningInfo","fetchAndCacheNewDevelopmentCodeSigningInfoAsync","Log","warn","e","codeSigningCertificatePath","updates","codeSigningCertificate","codeSigningMetadata","alg","keyid","privateKeyPEM","certificatePEM","getProjectPrivateKeyAndCertificateFromFilePathsAsync","keyId","certificateForPrivateKey","certificateChainForResponse","readFileWithErrorAsync","errorMessage","fs","readFile","codeSigningCertificatePEM","Promise","all","convertPrivateKeyPEMToPrivateKey","certificate","convertCertificatePEMToCertificate","validateSelfSignedCertificate","publicKey","codeSigningInfo","certificatePEMs","map","now","Date","validity","notBefore","notAfter","actorCanGetProjectDevelopmentCertificate","actor","app","owningAccountId","ownerAccount","id","owningAccountIsActorPrimaryAccount","__typename","primaryAccount","userHasPublishPermissionForOwningAccount","accounts","find","account","users","userPermission","permissions","includes","tryGetUserAsync","AppQuery","byIdAsync","UnexpectedServerError","UnexpectedServerData","keyPair","generateKeyPair","keyPairPEM","convertKeyPairToPEM","csr","generateCSR","csrPEM","convertCSRToCSRPEM","developmentSigningCertificate","expoGoIntermediateCertificate","getProjectDevelopmentCertificateAsync","getExpoGoIntermediateCertificateAsync","stringifiedManifest","signBufferRSASHA256AndVerify","Buffer","from"],"mappings":";;;;;;;;;;;IA2GaA,8BAA8B;eAA9BA;;IAcSC,uBAAuB;eAAvBA;;IA9DNC,kCAAkC;eAAlCA;;IAiYAC,kBAAkB;eAAlBA;;;;yBAnbT;;;;;;;gEAE8B;;;;;;;yBACN;;;;;;;gEAEd;;;;;;;yBAC2B;;;;;;qBAExB;wBACS;kDACyB;kDACA;wBACM;0BACzB;8BACE;yBACL;6DAEX;sBACK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAE1B,MAAMC,QAAQC,QAAQ,SAAS;AA4B/B,MAAMC,8CAA8C;AAE7C,SAASJ;IACd,OAAOK,eAAI,CAACC,IAAI,CAACC,IAAAA,kCAAoB,KAAI;AAC3C;AAEA,SAASC,yCAA+DC,QAAW;IACjF,SAASC,QAAQC,YAAoB;QACnC,MAAMC,WAAWP,eAAI,CAACC,IAAI,CACxBN,sCACAW,cACAP;QAEF,OAAO,IAAIS,CAAAA,WAAO,SAAC,CAAID;IACzB;IAEA,eAAeE,UAAUH,YAAoB;QAC3C,IAAII;QACJ,IAAI;YACFA,kBAAkB,MAAML,QAAQC,cAAcG,SAAS;QACzD,EAAE,OAAM;YACNC,kBAAkB,MAAML,QAAQC,cAAcK,UAAU,CAACP,UAAU;gBAAEQ,WAAW;YAAK;QACvF;QACA,sCAAsC;QACtC,OAAO;YAAE,GAAGR,QAAQ;YAAE,GAAGM,eAAe;QAAC;IAC3C;IAEA,eAAeG,SAASP,YAAoB,EAAEQ,IAAgB;QAC5D,IAAI;YACF,OAAO,MAAMT,QAAQC,cAAcS,UAAU,CAACD,MAAM;gBAClDE,qBAAqBZ;YACvB;QACF,EAAE,OAAM;YACN,OAAO,MAAMC,QAAQC,cAAcK,UAAU,CAC3C;gBACE,GAAGP,QAAQ;gBACX,GAAGU,IAAI;YACT,GACA;gBAAEF,WAAW;YAAK;QAEtB;IACF;IAEA,OAAO;QACLP;QACAI;QACAI;IACF;AACF;AAEO,MAAMpB,iCACXU,yCAAmF;IACjFG,cAAc;IACdW,UAAU;IACVC,YAAY;IACZC,kBAAkB;AACpB;AAQK,eAAezB,wBACpB0B,GAAe,EACfC,qBAAoC,EACpCC,cAAkC;IAElC,IAAI,CAACD,uBAAuB;QAC1B,OAAO;IACT;IAEA,IAAIE;IACJ,IAAI;QACFA,wBAAwBC,IAAAA,oCAAe,EAACH;IAC1C,EAAE,OAAM;QACN,MAAM,IAAII,oBAAY,CAAC;IACzB;IAEA,MAAMC,qBAAqBH,sBAAsBI,GAAG,CAAC;IACrD,IAAI,CAACD,oBAAoB;QACvB,MAAM,IAAID,oBAAY,CAAC;IACzB;IAEA,MAAMG,gBAAgBF,kBAAkB,CAAC,EAAE;IAC3C,IAAI,OAAOE,kBAAkB,UAAU;QACrC,MAAM,IAAIH,oBAAY,CACpB,CAAC,yDAAyD,EAAEG,eAAe;IAE/E;IAEA,IAAIC,cAA6B;IACjC,MAAMC,mBAAmBP,sBAAsBI,GAAG,CAAC;IACnD,IAAIG,kBAAkB;QACpB,MAAMC,kBAAkBD,gBAAgB,CAAC,EAAE;QAC3C,IAAI,OAAOC,oBAAoB,UAAU;YACvC,MAAM,IAAIN,oBAAY,CAAC;QACzB;QACAI,cAAcE;IAChB;IAEA,IAAIH,kBAAkB,aAAa;QACjC,OAAO,MAAMI,2CAA2CZ;IAC1D,OAAO,IAAIQ,kBAAkB,WAAW;QACtC,MAAM,IAAIH,oBAAY,CACpB;IAEJ,OAAO;QACL,OAAO,MAAMQ,sCACXb,KACAE,gBACAM,eACAC;IAEJ;AACF;AAEA;;;CAGC,GACD,eAAeG,2CACbZ,GAAe;QAEMA,gBAAAA;IAArB,MAAMd,gBAAec,aAAAA,IAAIc,KAAK,sBAATd,iBAAAA,WAAWe,GAAG,qBAAdf,eAAgBgB,SAAS;IAC9C,oHAAoH;IACpH,sEAAsE;IACtE,IAAI,CAAC9B,cAAc;QACjBT,MACE,CAAC,oKAAoK,EAAEwC,IAAAA,eAAS,EAC9K,+BACC;QAEL,OAAO;IACT;IAEA,MAAMC,qCACJ,MAAM7C,+BAA+BgB,SAAS,CAACH;IACjD,MAAMiC,2BAA2BC,4DAC/BF,oCACAhC;IAGF,6GAA6G;IAC7G,iFAAiF;IACjF,IAAI,CAACmC,QAAG,CAACC,YAAY,EAAE;QACrB,IAAI;YACF,MAAMC,qBACJ,MAAMC,gDAAgDtC;YAExD,IAAIqC,oBAAoB;gBACtB,OAAOA;YACP,iEAAiE;YACnE,OAAO,IAAIJ,0BAA0B;gBACnCM,KAAIC,IAAI,CACN;gBAEF,OAAOP;YACT,OAAO;gBACL,OAAO;YACT;QACF,EAAE,OAAOQ,GAAQ;YACf,IAAIR,0BAA0B;gBAC5BM,KAAIC,IAAI,CACN;gBAEF,OAAOP;YACT,OAAO;gBACL,6CAA6C;gBAC7C,MAAMQ;YACR;QACF;IACF;IAEA,+JAA+J;IAC/J,IAAIR,0BAA0B;QAC5B,OAAOA;IACT;IAEA,6BAA6B;IAC7BM,KAAIC,IAAI,CAAC;IACT,OAAO;AACT;AAEA;;CAEC,GACD,eAAeb,sCACbb,GAAe,EACfE,cAAkC,EAClCM,aAAqB,EACrBC,WAA0B;QAEST,cAWPA;IAX5B,MAAM4B,8BAA6B5B,eAAAA,IAAI6B,OAAO,qBAAX7B,aAAa8B,sBAAsB;IACtE,IAAI,CAACF,4BAA4B;QAC/B,OAAO;IACT;IAEA,IAAI,CAAC1B,gBAAgB;QACnB,MAAM,IAAIG,oBAAY,CACpB;IAEJ;IAEA,MAAM0B,uBAAsB/B,gBAAAA,IAAI6B,OAAO,qBAAX7B,cAAa+B,mBAAmB;IAC5D,IAAI,CAACA,qBAAqB;QACxB,MAAM,IAAI1B,oBAAY,CACpB;IAEJ;IAEA,MAAM,EAAE2B,GAAG,EAAEC,KAAK,EAAE,GAAGF;IACvB,IAAI,CAACC,OAAO,CAACC,OAAO;QAClB,MAAM,IAAI5B,oBAAY,CACpB;IAEJ;IAEA,IAAIG,kBAAkByB,OAAO;QAC3B,MAAM,IAAI5B,oBAAY,CAAC,CAAC,uBAAuB,EAAEG,cAAc,UAAU,EAAEyB,OAAO;IACpF;IAEA,IAAIxB,eAAeA,gBAAgBuB,KAAK;QACtC,MAAM,IAAI3B,oBAAY,CAAC,CAAC,6BAA6B,EAAEI,YAAY,UAAU,EAAEuB,IAAI,CAAC,CAAC;IACvF;IAEA,MAAM,EAAEE,aAAa,EAAEC,cAAc,EAAE,GACrC,MAAMC,qDAAqD;QACzDR;QACA1B;IACF;IAEF,OAAO;QACLmC,OAAOJ;QACPnC,YAAYoC;QACZI,0BAA0BH;QAC1BI,6BAA6B,EAAE;QAC/B1C,UAAU;IACZ;AACF;AAEA,eAAe2C,uBAAuB5D,IAAY,EAAE6D,YAAoB;IACtE,IAAI;QACF,OAAO,MAAMC,cAAE,CAACC,QAAQ,CAAC/D,MAAM;IACjC,EAAE,OAAM;QACN,MAAM,IAAIyB,oBAAY,CAACoC;IACzB;AACF;AAEA,eAAeL,qDAAqD,EAClER,0BAA0B,EAC1B1B,cAAc,EAIf;IACC,MAAM,CAAC0C,2BAA2BV,cAAc,GAAG,MAAMW,QAAQC,GAAG,CAAC;QACnEN,uBACEZ,4BACA,CAAC,mDAAmD,EAAEA,4BAA4B;QAEpFY,uBACEtC,gBACA,CAAC,mDAAmD,EAAEA,gBAAgB;KAEzE;IAED,MAAMJ,aAAaiD,IAAAA,2DAAgC,EAACb;IACpD,MAAMc,cAAcC,IAAAA,6DAAkC,EAACL;IACvDM,IAAAA,wDAA6B,EAACF,aAAa;QACzCG,WAAWH,YAAYG,SAAS;QAChCrD;IACF;IAEA,OAAO;QAAEoC;QAAeC,gBAAgBS;IAA0B;AACpE;AAEA;;;CAGC,GACD,SAASxB,4DACPgC,eAAyD,EACzDlE,YAAoB;IAEpB,IAAIkE,gBAAgBlE,YAAY,KAAKA,cAAc;QACjD,OAAO;IACT;IAEA,MAAM,EACJY,YAAYoC,aAAa,EACzBnC,kBAAkBsD,eAAe,EACjCxD,QAAQ,EACT,GAAGuD;IACJ,IAAI,CAAClB,iBAAiB,CAACmB,iBAAiB;QACtC,OAAO;IACT;IAEA,MAAMtD,mBAAmBsD,gBAAgBC,GAAG,CAAC,CAACnB,iBAC5Cc,IAAAA,6DAAkC,EAACd;IAGrC,iEAAiE;IAEjE,iDAAiD;IACjD,KAAK,MAAMa,eAAejD,iBAAkB;QAC1C,MAAMwD,MAAM,IAAIC;QAChB,IAAIR,YAAYS,QAAQ,CAACC,SAAS,GAAGH,OAAOP,YAAYS,QAAQ,CAACE,QAAQ,GAAGJ,KAAK;YAC/E,OAAO;QACT;IACF;IAEA,wHAAwH;IAExH,OAAO;QACLlB,OAAO;QACPE,6BAA6Bc;QAC7Bf,0BAA0Be,eAAe,CAAC,EAAE;QAC5CvD,YAAYoC;QACZrC;IACF;AACF;AAEA,SAAS+D,yCAAyCC,KAAY,EAAEC,GAAQ;QAOnBD,6CAAAA,iCAAAA,4BAAAA;IANnD,MAAME,kBAAkBD,IAAIE,YAAY,CAACC,EAAE;IAE3C,MAAMC,qCACJL,MAAMM,UAAU,KAAK,UAAUN,MAAMM,UAAU,KAAK,YAChDN,MAAMO,cAAc,CAACH,EAAE,KAAKF,kBAC5B;IACN,MAAMM,2CAA2C,CAAC,GAACR,uBAAAA,MAAMS,QAAQ,CAC9DC,IAAI,CAAC,CAACC,UAAYA,QAAQP,EAAE,KAAKF,sCADeF,6BAAAA,qBAE/CY,KAAK,sBAF0CZ,kCAAAA,2BAExCU,IAAI,CAAC,CAACG,iBAAmBA,eAAeb,KAAK,CAACI,EAAE,KAAKJ,MAAMI,EAAE,uBAFrBJ,8CAAAA,gCAG/Cc,WAAW,qBAHoCd,4CAGlCe,QAAQ,CAAC;IAC1B,OAAOV,sCAAsCG;AAC/C;AAEA,eAAe7C,gDACbtC,YAAoB;IAEpB,MAAM2E,QAAQ,MAAMgB,IAAAA,wBAAe;IAEnC,IAAI,CAAChB,OAAO;QACV,OAAO;IACT;IAEA,IAAIC;IACJ,IAAI;QACFA,MAAM,MAAMgB,kBAAQ,CAACC,SAAS,CAAC7F;IACjC,EAAE,OAAOyC,GAAG;QACV,IAAIA,aAAaqD,6BAAqB,IAAIrD,aAAasD,4BAAoB,EAAE;YAC3E,OAAO;QACT;QACA,MAAMtD;IACR;IACA,IAAI,CAACiC,yCAAyCC,OAAOC,MAAM;QACzD,OAAO;IACT;IAEA,MAAMoB,UAAUC,IAAAA,0CAAe;IAC/B,MAAMC,aAAaC,IAAAA,8CAAmB,EAACH;IACvC,MAAMI,MAAMC,IAAAA,sCAAW,EAACL,SAAS,CAAC,4BAA4B,EAAEhG,cAAc;IAC9E,MAAMsG,SAASC,IAAAA,6CAAkB,EAACH;IAClC,MAAM,CAACI,+BAA+BC,8BAA8B,GAAG,MAAM9C,QAAQC,GAAG,CAAC;QACvF8C,IAAAA,uEAAqC,EAAC1G,cAAcsG;QACpDK,IAAAA,uEAAqC,EAAC3G;KACvC;IAED,MAAMb,+BAA+BoB,QAAQ,CAACP,cAAc;QAC1DA;QACAW,UAAUiE,IAAIjE,QAAQ;QACtBC,YAAYsF,WAAWlD,aAAa;QACpCnC,kBAAkB;YAAC2F;YAA+BC;SAA8B;IAClF;IAEA,OAAO;QACLtD,OAAO;QACPE,6BAA6B;YAACmD;YAA+BC;SAA8B;QAC3FrD,0BAA0BoD;QAC1B5F,YAAYsF,WAAWlD,aAAa;QACpCrC,UAAUiE,IAAIjE,QAAQ;IACxB;AACF;AAIO,SAASrB,mBACdsH,mBAA2B,EAC3B1C,eAAgC;IAEhC,MAAMtD,aAAaiD,IAAAA,2DAAgC,EAACK,gBAAgBtD,UAAU;IAC9E,MAAMkD,cAAcC,IAAAA,6DAAkC,EAACG,gBAAgBd,wBAAwB;IAC/F,OAAOyD,IAAAA,uDAA4B,EACjCjG,YACAkD,aACAgD,OAAOC,IAAI,CAACH,qBAAqB;AAErC"}

package/build/src/utils/createFileTransform.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+Object.defineProperty(exports, "createGlobFilter", {
+    enumerable: true,
+    get: function() {
+        return createGlobFilter;
+    }
+});
+function _picomatch() {
+    const data = /*#__PURE__*/ _interop_require_default(require("picomatch"));
+    _picomatch = function() {
+        return data;
+    };
+    return data;
+}
+function _interop_require_default(obj) {
+    return obj && obj.__esModule ? obj : {
+        default: obj
+    };
+}
+const debug = require('debug')('expo:file-transform');
+function createGlobFilter(globPattern, options) {
+    const matcher = (0, _picomatch().default)(globPattern, options);
+    debug('filter: created for pattern(s) "%s" (%s)', Array.isArray(globPattern) ? globPattern.join('", "') : globPattern, options);
+    return (path)=>{
+        const included = matcher(path);
+        debug('filter: %s - %s', included ? 'include' : 'exclude', path);
+        return included;
+    };
+}
+
+//# sourceMappingURL=createFileTransform.js.map

package/build/src/utils/createFileTransform.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/utils/createFileTransform.ts"],"sourcesContent":["import picomatch from 'picomatch';\n\nconst debug = require('debug')('expo:file-transform') as typeof console.log;\n\nexport function createGlobFilter(\n  globPattern: picomatch.Glob,\n  options?: picomatch.PicomatchOptions\n) {\n  const matcher = picomatch(globPattern, options);\n\n  debug(\n    'filter: created for pattern(s) \"%s\" (%s)',\n    Array.isArray(globPattern) ? globPattern.join('\", \"') : globPattern,\n    options\n  );\n\n  return (path: string) => {\n    const included = matcher(path);\n    debug('filter: %s - %s', included ? 'include' : 'exclude', path);\n    return included;\n  };\n}\n"],"names":["createGlobFilter","debug","require","globPattern","options","matcher","picomatch","Array","isArray","join","path","included"],"mappings":";;;;+BAIgBA;;;eAAAA;;;;gEAJM;;;;;;;;;;;AAEtB,MAAMC,QAAQC,QAAQ,SAAS;AAExB,SAASF,iBACdG,WAA2B,EAC3BC,OAAoC;IAEpC,MAAMC,UAAUC,IAAAA,oBAAS,EAACH,aAAaC;IAEvCH,MACE,4CACAM,MAAMC,OAAO,CAACL,eAAeA,YAAYM,IAAI,CAAC,UAAUN,aACxDC;IAGF,OAAO,CAACM;QACN,MAAMC,WAAWN,QAAQK;QACzBT,MAAM,mBAAmBU,WAAW,YAAY,WAAWD;QAC3D,OAAOC;IACT;AACF"}

package/build/src/utils/createTempPath.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: all[name]
+    });
+}
+_export(exports, {
+    createTempDirectoryPath: function() {
+        return createTempDirectoryPath;
+    },
+    createTempFilePath: function() {
+        return createTempFilePath;
+    }
+});
+function _crypto() {
+    const data = require("crypto");
+    _crypto = function() {
+        return data;
+    };
+    return data;
+}
+function _fs() {
+    const data = /*#__PURE__*/ _interop_require_default(require("fs"));
+    _fs = function() {
+        return data;
+    };
+    return data;
+}
+function _os() {
+    const data = /*#__PURE__*/ _interop_require_default(require("os"));
+    _os = function() {
+        return data;
+    };
+    return data;
+}
+function _path() {
+    const data = /*#__PURE__*/ _interop_require_default(require("path"));
+    _path = function() {
+        return data;
+    };
+    return data;
+}
+function _interop_require_default(obj) {
+    return obj && obj.__esModule ? obj : {
+        default: obj
+    };
+}
+const uniqueTempPath = ()=>{
+    return _path().default.join(_os().default.tmpdir(), (0, _crypto().randomBytes)(16).toString('hex'));
+};
+function createTempDirectoryPath() {
+    const directory = uniqueTempPath();
+    _fs().default.mkdirSync(directory);
+    return directory;
+}
+function createTempFilePath(name = '') {
+    if (name) {
+        return _path().default.join(createTempDirectoryPath(), name);
+    } else {
+        return uniqueTempPath();
+    }
+}
+
+//# sourceMappingURL=createTempPath.js.map

package/build/src/utils/createTempPath.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/utils/createTempPath.ts"],"sourcesContent":["import { randomBytes } from 'crypto';\nimport fs from 'fs';\nimport os from 'os';\nimport path from 'path';\n\nconst uniqueTempPath = (): string => {\n  return path.join(os.tmpdir(), randomBytes(16).toString('hex'));\n};\n\n// Functionally equivalent to: https://github.com/sindresorhus/tempy/blob/943ade0c935367117adbe2b690516ebc94139c6d/index.js#L43-L47\nexport function createTempDirectoryPath(): string {\n  const directory = uniqueTempPath();\n  fs.mkdirSync(directory);\n  return directory;\n}\n\n// Functionally equivalent to: https://github.com/sindresorhus/tempy/blob/943ade0c935367117adbe2b690516ebc94139c6d/index.js#L25-L39\nexport function createTempFilePath(name = ''): string {\n  if (name) {\n    return path.join(createTempDirectoryPath(), name);\n  } else {\n    return uniqueTempPath();\n  }\n}\n"],"names":["createTempDirectoryPath","createTempFilePath","uniqueTempPath","path","join","os","tmpdir","randomBytes","toString","directory","fs","mkdirSync","name"],"mappings":";;;;;;;;;;;IAUgBA,uBAAuB;eAAvBA;;IAOAC,kBAAkB;eAAlBA;;;;yBAjBY;;;;;;;gEACb;;;;;;;gEACA;;;;;;;gEACE;;;;;;;;;;;AAEjB,MAAMC,iBAAiB;IACrB,OAAOC,eAAI,CAACC,IAAI,CAACC,aAAE,CAACC,MAAM,IAAIC,IAAAA,qBAAW,EAAC,IAAIC,QAAQ,CAAC;AACzD;AAGO,SAASR;IACd,MAAMS,YAAYP;IAClBQ,aAAE,CAACC,SAAS,CAACF;IACb,OAAOA;AACT;AAGO,SAASR,mBAAmBW,OAAO,EAAE;IAC1C,IAAIA,MAAM;QACR,OAAOT,eAAI,CAACC,IAAI,CAACJ,2BAA2BY;IAC9C,OAAO;QACL,OAAOV;IACT;AACF"}

package/build/src/utils/delay.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: all[name]
+    });
+}
+_export(exports, {
+    delayAsync: function() {
+        return delayAsync;
+    },
+    resolveWithTimeout: function() {
+        return resolveWithTimeout;
+    },
+    waitForActionAsync: function() {
+        return waitForActionAsync;
+    }
+});
+const _errors = require("./errors");
+function delayAsync(timeout) {
+    return new Promise((resolve)=>setTimeout(resolve, timeout));
+}
+async function waitForActionAsync({ action, interval = 100, maxWaitTime = 20000 }) {
+    let complete;
+    const start = Date.now();
+    do {
+        const actionStartTime = Date.now();
+        complete = await action();
+        const actionTimeElapsed = Date.now() - actionStartTime;
+        const remainingDelayInterval = interval - actionTimeElapsed;
+        if (remainingDelayInterval > 0) {
+            await delayAsync(remainingDelayInterval);
+        }
+        if (Date.now() - start > maxWaitTime) {
+            break;
+        }
+    }while (!complete);
+    return complete;
+}
+function resolveWithTimeout(action, { timeout, errorMessage }) {
+    return new Promise((resolve, reject)=>{
+        const timeoutId = setTimeout(()=>{
+            reject(new _errors.CommandError('TIMEOUT', errorMessage));
+        }, timeout);
+        action().then((result)=>{
+            clearTimeout(timeoutId);
+            resolve(result);
+        }, (error)=>{
+            clearTimeout(timeoutId);
+            reject(error);
+        });
+    });
+}
+
+//# sourceMappingURL=delay.js.map

package/build/src/utils/delay.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/utils/delay.ts"],"sourcesContent":["import { CommandError } from './errors';\n\n/** Await for a given duration of milliseconds. */\nexport function delayAsync(timeout: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, timeout));\n}\n\n/** Wait for a given action to return a truthy value. */\nexport async function waitForActionAsync<T>({\n  action,\n  interval = 100,\n  maxWaitTime = 20000,\n}: {\n  action: () => T | Promise<T>;\n  interval?: number;\n  maxWaitTime?: number;\n}): Promise<T> {\n  let complete: T;\n  const start = Date.now();\n  do {\n    const actionStartTime = Date.now();\n    complete = await action();\n\n    const actionTimeElapsed = Date.now() - actionStartTime;\n    const remainingDelayInterval = interval - actionTimeElapsed;\n    if (remainingDelayInterval > 0) {\n      await delayAsync(remainingDelayInterval);\n    }\n    if (Date.now() - start > maxWaitTime) {\n      break;\n    }\n  } while (!complete);\n\n  return complete;\n}\n\n/** Resolves a given function or rejects if the provided timeout is passed. */\nexport function resolveWithTimeout<T>(\n  action: () => Promise<T>,\n  {\n    timeout,\n    errorMessage,\n  }: {\n    /** Duration in milliseconds to wait before asserting a timeout. */\n    timeout: number;\n    /** Optional error message to use in the assertion. */\n    errorMessage?: string;\n  }\n): Promise<T> {\n  return new Promise((resolve, reject) => {\n    const timeoutId = setTimeout(() => {\n      reject(new CommandError('TIMEOUT', errorMessage));\n    }, timeout);\n    action().then(\n      (result) => {\n        clearTimeout(timeoutId);\n        resolve(result);\n      },\n      (error) => {\n        clearTimeout(timeoutId);\n        reject(error);\n      }\n    );\n  });\n}\n"],"names":["delayAsync","resolveWithTimeout","waitForActionAsync","timeout","Promise","resolve","setTimeout","action","interval","maxWaitTime","complete","start","Date","now","actionStartTime","actionTimeElapsed","remainingDelayInterval","errorMessage","reject","timeoutId","CommandError","then","result","clearTimeout","error"],"mappings":";;;;;;;;;;;IAGgBA,UAAU;eAAVA;;IAkCAC,kBAAkB;eAAlBA;;IA7BMC,kBAAkB;eAAlBA;;;wBARO;AAGtB,SAASF,WAAWG,OAAe;IACxC,OAAO,IAAIC,QAAQ,CAACC,UAAYC,WAAWD,SAASF;AACtD;AAGO,eAAeD,mBAAsB,EAC1CK,MAAM,EACNC,WAAW,GAAG,EACdC,cAAc,KAAK,EAKpB;IACC,IAAIC;IACJ,MAAMC,QAAQC,KAAKC,GAAG;IACtB,GAAG;QACD,MAAMC,kBAAkBF,KAAKC,GAAG;QAChCH,WAAW,MAAMH;QAEjB,MAAMQ,oBAAoBH,KAAKC,GAAG,KAAKC;QACvC,MAAME,yBAAyBR,WAAWO;QAC1C,IAAIC,yBAAyB,GAAG;YAC9B,MAAMhB,WAAWgB;QACnB;QACA,IAAIJ,KAAKC,GAAG,KAAKF,QAAQF,aAAa;YACpC;QACF;IACF,QAAS,CAACC,UAAU;IAEpB,OAAOA;AACT;AAGO,SAAST,mBACdM,MAAwB,EACxB,EACEJ,OAAO,EACPc,YAAY,EAMb;IAED,OAAO,IAAIb,QAAQ,CAACC,SAASa;QAC3B,MAAMC,YAAYb,WAAW;YAC3BY,OAAO,IAAIE,oBAAY,CAAC,WAAWH;QACrC,GAAGd;QACHI,SAASc,IAAI,CACX,CAACC;YACCC,aAAaJ;YACbd,QAAQiB;QACV,GACA,CAACE;YACCD,aAAaJ;YACbD,OAAOM;QACT;IAEJ;AACF"}