@expo/build-tools 1.0.31 → 1.0.34

package/dist/steps/utils/ios/credentials/keychain.js

@@ -0,0 +1,93 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const turtle_spawn_1 = __importDefault(require("@expo/turtle-spawn"));
+const uuid_1 = require("uuid");
+const fastlane_1 = require("../fastlane");
+class Keychain {
+    constructor() {
+        this.created = false;
+        this.destroyed = false;
+        this.keychainPath = path_1.default.join(os_1.default.tmpdir(), `turtle-v2-${(0, uuid_1.v4)()}.keychain`);
+        this.keychainPassword = (0, uuid_1.v4)();
+    }
+    get data() {
+        return {
+            path: this.keychainPath,
+            password: this.keychainPassword,
+        };
+    }
+    async create(logger) {
+        logger.debug(`Creating keychain - ${this.keychainPath}`);
+        await (0, fastlane_1.runFastlane)([
+            'run',
+            'create_keychain',
+            `path:${this.keychainPath}`,
+            `password:${this.keychainPassword}`,
+            'unlock:true',
+            'timeout:360000',
+        ]);
+        this.created = true;
+    }
+    async importCertificate(logger, certPath, certPassword) {
+        if (!this.created) {
+            throw new Error('You must create a keychain first.');
+        }
+        logger.debug(`Importing certificate ${certPath} into keychain ${this.keychainPath}`);
+        await (0, fastlane_1.runFastlane)([
+            'run',
+            'import_certificate',
+            `certificate_path:${certPath}`,
+            `certificate_password:${certPassword}`,
+            `keychain_path:${this.keychainPath}`,
+            `keychain_password:${this.keychainPassword}`,
+        ]);
+    }
+    async ensureCertificateImported(teamId, fingerprint) {
+        const identities = await this.findIdentitiesByTeamId(teamId);
+        if (!identities.includes(fingerprint)) {
+            throw new Error(`Distribution certificate with fingerprint ${fingerprint} hasn't been imported successfully`);
+        }
+    }
+    async destroy(logger, keychainPath) {
+        if (!keychainPath && !this.created) {
+            logger.warn("There is nothing to destroy, a keychain hasn't been created yet.");
+            return;
+        }
+        if (this.destroyed) {
+            logger.warn('The keychain has been already destroyed');
+            return;
+        }
+        const keychainToDeletePath = keychainPath !== null && keychainPath !== void 0 ? keychainPath : this.keychainPath;
+        logger.info(`Destroying keychain - ${keychainToDeletePath}`);
+        try {
+            await (0, fastlane_1.runFastlane)(['run', 'delete_keychain', `keychain_path:${keychainToDeletePath}`]);
+            this.destroyed = true;
+        }
+        catch (err) {
+            logger.error({ err }, 'Failed to delete the keychain\n');
+            throw err;
+        }
+    }
+    async cleanUpKeychains(logger) {
+        var _a;
+        const { stdout } = await (0, turtle_spawn_1.default)('security', ['list-keychains'], { stdio: 'pipe' });
+        const keychainList = ((_a = /"(.*)"/g.exec(stdout)) !== null && _a !== void 0 ? _a : []).map((i) => i.slice(1, i.length - 1));
+        const turtleKeychainList = keychainList.filter((keychain) => /turtle-v2-[\w-]+\.keychain$/.exec(keychain));
+        for (const turtleKeychainPath of turtleKeychainList) {
+            await this.destroy(logger, turtleKeychainPath);
+        }
+    }
+    async findIdentitiesByTeamId(teamId) {
+        const { output } = await (0, turtle_spawn_1.default)('security', ['find-identity', '-v', '-s', `(${teamId})`, this.keychainPath], {
+            stdio: 'pipe',
+        });
+        return output.join('');
+    }
+}
+exports.default = Keychain;
+//# sourceMappingURL=keychain.js.map

package/dist/steps/utils/ios/credentials/keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../../../../../src/steps/utils/ios/credentials/keychain.ts"],"names":[],"mappings":";;;;;AAAA,4CAAoB;AACpB,gDAAwB;AAExB,sEAAuC;AACvC,+BAAkC;AAGlC,0CAA0C;AAE1C,MAAqB,QAAQ;IAM3B;QAHQ,YAAO,GAAG,KAAK,CAAC;QAChB,cAAS,GAAG,KAAK,CAAC;QAGxB,IAAI,CAAC,YAAY,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,aAAa,IAAA,SAAI,GAAE,WAAW,CAAC,CAAC;QAC3E,IAAI,CAAC,gBAAgB,GAAG,IAAA,SAAI,GAAE,CAAC;IACjC,CAAC;IAED,IAAI,IAAI;QACN,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,YAAY;YACvB,QAAQ,EAAE,IAAI,CAAC,gBAAgB;SAChC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,MAAc;QAChC,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACzD,MAAM,IAAA,sBAAW,EAAC;YAChB,KAAK;YACL,iBAAiB;YACjB,QAAQ,IAAI,CAAC,YAAY,EAAE;YAC3B,YAAY,IAAI,CAAC,gBAAgB,EAAE;YACnC,aAAa;YACb,gBAAgB;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAC5B,MAAc,EACd,QAAgB,EAChB,YAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACjB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;SACtD;QAED,MAAM,CAAC,KAAK,CAAC,yBAAyB,QAAQ,kBAAkB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACrF,MAAM,IAAA,sBAAW,EAAC;YAChB,KAAK;YACL,oBAAoB;YACpB,oBAAoB,QAAQ,EAAE;YAC9B,wBAAwB,YAAY,EAAE;YACtC,iBAAiB,IAAI,CAAC,YAAY,EAAE;YACpC,qBAAqB,IAAI,CAAC,gBAAgB,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,yBAAyB,CAAC,MAAc,EAAE,WAAmB;QACxE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;YACrC,MAAM,IAAI,KAAK,CACb,6CAA6C,WAAW,oCAAoC,CAC7F,CAAC;SACH;IACH,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,YAAqB;QACxD,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAClC,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;YAChF,OAAO;SACR;QACD,IAAI,IAAI,CAAC,SAAS,EAAE;YAClB,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACvD,OAAO;SACR;QACD,MAAM,oBAAoB,GAAG,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,IAAI,CAAC,YAAY,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,yBAAyB,oBAAoB,EAAE,CAAC,CAAC;QAC7D,IAAI;YACF,MAAM,IAAA,sBAAW,EAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,oBAAoB,EAAE,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;SACvB;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iCAAiC,CAAC,CAAC;YACzD,MAAM,GAAG,CAAC;SACX;IACH,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,MAAc;;QAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,sBAAK,EAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClF,MAAM,YAAY,GAAG,CAAC,MAAA,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,mCAAK,EAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1E,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CACzB,CAAC;QACF,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1D,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC7C,CAAC;QACF,KAAK,MAAM,kBAAkB,IAAI,kBAAkB,EAAE;YACnD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;SAChD;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,MAAc;QACjD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,sBAAK,EAC5B,UAAU,EACV,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,EAC/D;YACE,KAAK,EAAE,MAAM;SACd,CACF,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;CACF;AAvGD,2BAuGC","sourcesContent":["import os from 'os';\nimport path from 'path';\n\nimport spawn from '@expo/turtle-spawn';\nimport { v4 as uuid } from 'uuid';\nimport { bunyan } from '@expo/logger';\n\nimport { runFastlane } from '../fastlane';\n\nexport default class Keychain {\n  private readonly keychainPath: string;\n  private readonly keychainPassword: string;\n  private created = false;\n  private destroyed = false;\n\n  constructor() {\n    this.keychainPath = path.join(os.tmpdir(), `turtle-v2-${uuid()}.keychain`);\n    this.keychainPassword = uuid();\n  }\n\n  get data(): { path: string; password: string } {\n    return {\n      path: this.keychainPath,\n      password: this.keychainPassword,\n    };\n  }\n\n  public async create(logger: bunyan): Promise<void> {\n    logger.debug(`Creating keychain - ${this.keychainPath}`);\n    await runFastlane([\n      'run',\n      'create_keychain',\n      `path:${this.keychainPath}`,\n      `password:${this.keychainPassword}`,\n      'unlock:true',\n      'timeout:360000',\n    ]);\n    this.created = true;\n  }\n\n  public async importCertificate(\n    logger: bunyan,\n    certPath: string,\n    certPassword: string\n  ): Promise<void> {\n    if (!this.created) {\n      throw new Error('You must create a keychain first.');\n    }\n\n    logger.debug(`Importing certificate ${certPath} into keychain ${this.keychainPath}`);\n    await runFastlane([\n      'run',\n      'import_certificate',\n      `certificate_path:${certPath}`,\n      `certificate_password:${certPassword}`,\n      `keychain_path:${this.keychainPath}`,\n      `keychain_password:${this.keychainPassword}`,\n    ]);\n  }\n\n  public async ensureCertificateImported(teamId: string, fingerprint: string): Promise<void> {\n    const identities = await this.findIdentitiesByTeamId(teamId);\n    if (!identities.includes(fingerprint)) {\n      throw new Error(\n        `Distribution certificate with fingerprint ${fingerprint} hasn't been imported successfully`\n      );\n    }\n  }\n\n  public async destroy(logger: bunyan, keychainPath?: string): Promise<void> {\n    if (!keychainPath && !this.created) {\n      logger.warn(\"There is nothing to destroy, a keychain hasn't been created yet.\");\n      return;\n    }\n    if (this.destroyed) {\n      logger.warn('The keychain has been already destroyed');\n      return;\n    }\n    const keychainToDeletePath = keychainPath ?? this.keychainPath;\n    logger.info(`Destroying keychain - ${keychainToDeletePath}`);\n    try {\n      await runFastlane(['run', 'delete_keychain', `keychain_path:${keychainToDeletePath}`]);\n      this.destroyed = true;\n    } catch (err) {\n      logger.error({ err }, 'Failed to delete the keychain\\n');\n      throw err;\n    }\n  }\n\n  public async cleanUpKeychains(logger: bunyan): Promise<void> {\n    const { stdout } = await spawn('security', ['list-keychains'], { stdio: 'pipe' });\n    const keychainList = (/\"(.*)\"/g.exec(stdout) ?? ([] as string[])).map((i) =>\n      i.slice(1, i.length - 1)\n    );\n    const turtleKeychainList = keychainList.filter((keychain) =>\n      /turtle-v2-[\\w-]+\\.keychain$/.exec(keychain)\n    );\n    for (const turtleKeychainPath of turtleKeychainList) {\n      await this.destroy(logger, turtleKeychainPath);\n    }\n  }\n\n  private async findIdentitiesByTeamId(teamId: string): Promise<string> {\n    const { output } = await spawn(\n      'security',\n      ['find-identity', '-v', '-s', `(${teamId})`, this.keychainPath],\n      {\n        stdio: 'pipe',\n      }\n    );\n    return output.join('');\n  }\n}\n"]}

package/dist/steps/utils/ios/credentials/manager.d.ts

@@ -0,0 +1,23 @@
+/// <reference types="bunyan" />
+import { Ios } from '@expo/eas-build-job';
+import { bunyan } from '@expo/logger';
+import ProvisioningProfile, { DistributionType, ProvisioningProfileData } from './provisioningProfile';
+export interface Credentials {
+    applicationTargetProvisioningProfile: ProvisioningProfile;
+    keychainPath: string;
+    targetProvisioningProfiles: TargetProvisioningProfiles;
+    distributionType: DistributionType;
+    teamId: string;
+}
+export type TargetProvisioningProfiles = Record<string, ProvisioningProfileData>;
+export default class IosCredentialsManager {
+    private readonly buildCredentials;
+    private keychain?;
+    private readonly provisioningProfiles;
+    private cleanedUp;
+    constructor(buildCredentials: Ios.BuildCredentials);
+    prepare(logger: bunyan): Promise<Credentials>;
+    cleanUp(logger: bunyan): Promise<void>;
+    private prepareTargetCredentials;
+    private getApplicationTargetProvisioningProfile;
+}

package/dist/steps/utils/ios/credentials/manager.js

@@ -0,0 +1,115 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert_1 = __importDefault(require("assert"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const fs_extra_1 = __importDefault(require("fs-extra"));
+const lodash_1 = require("lodash");
+const uuid_1 = require("uuid");
+const distributionCertificateUtils = __importStar(require("./distributionCertificate"));
+const keychain_1 = __importDefault(require("./keychain"));
+const provisioningProfile_1 = __importDefault(require("./provisioningProfile"));
+class IosCredentialsManager {
+    constructor(buildCredentials) {
+        this.buildCredentials = buildCredentials;
+        this.provisioningProfiles = [];
+        this.cleanedUp = false;
+    }
+    async prepare(logger) {
+        logger.info('Preparing credentials');
+        logger.info('Creating keychain');
+        this.keychain = new keychain_1.default();
+        await this.keychain.create(logger);
+        const targets = Object.keys(this.buildCredentials);
+        const targetProvisioningProfiles = {};
+        for (const target of targets) {
+            const provisioningProfile = await this.prepareTargetCredentials(logger, target, this.buildCredentials[target]);
+            this.provisioningProfiles.push(provisioningProfile);
+            targetProvisioningProfiles[target] = provisioningProfile.data;
+        }
+        const applicationTargetProvisioningProfile = this.getApplicationTargetProvisioningProfile();
+        // TODO: ensure that all dist types and team ids in the array are the same
+        const { distributionType, teamId } = applicationTargetProvisioningProfile.data;
+        return {
+            applicationTargetProvisioningProfile,
+            keychainPath: this.keychain.data.path,
+            targetProvisioningProfiles,
+            distributionType,
+            teamId,
+        };
+    }
+    async cleanUp(logger) {
+        if (this.cleanedUp || (!this.keychain && this.provisioningProfiles.length === 0)) {
+            return;
+        }
+        if (this.keychain) {
+            await this.keychain.destroy(logger);
+        }
+        if (this.provisioningProfiles) {
+            for (const provisioningProfile of this.provisioningProfiles) {
+                await provisioningProfile.destroy(logger);
+            }
+        }
+        this.cleanedUp = true;
+    }
+    async prepareTargetCredentials(logger, target, targetCredentials) {
+        try {
+            (0, assert_1.default)(this.keychain, 'Keychain should be initialized');
+            logger.info(`Preparing credentials for target '${target}'`);
+            const distCertPath = path_1.default.join(os_1.default.tmpdir(), `${(0, uuid_1.v4)()}.p12`);
+            logger.info('Getting distribution certificate fingerprint and common name');
+            const certificateFingerprint = distributionCertificateUtils.getFingerprint(targetCredentials.distributionCertificate);
+            const certificateCommonName = distributionCertificateUtils.getCommonName(targetCredentials.distributionCertificate);
+            logger.info(`Fingerprint = "${certificateFingerprint}", common name = ${certificateCommonName}`);
+            logger.info(`Writing distribution certificate to ${distCertPath}`);
+            await fs_extra_1.default.writeFile(distCertPath, Buffer.from(targetCredentials.distributionCertificate.dataBase64, 'base64'));
+            logger.info('Importing distribution certificate into the keychain');
+            await this.keychain.importCertificate(logger, distCertPath, targetCredentials.distributionCertificate.password);
+            logger.info('Initializing provisioning profile');
+            const provisioningProfile = new provisioningProfile_1.default(Buffer.from(targetCredentials.provisioningProfileBase64, 'base64'), this.keychain.data.path, target, certificateCommonName);
+            await provisioningProfile.init(logger);
+            logger.info('Validating whether distribution certificate has been imported successfully');
+            await this.keychain.ensureCertificateImported(provisioningProfile.data.teamId, certificateFingerprint);
+            logger.info('Verifying whether the distribution certificate and provisioning profile match');
+            provisioningProfile.verifyCertificate(certificateFingerprint);
+            return provisioningProfile;
+        }
+        catch (err) {
+            await this.cleanUp(logger);
+            throw err;
+        }
+    }
+    getApplicationTargetProvisioningProfile() {
+        // sorting works because bundle ids share common prefix
+        const sorted = (0, lodash_1.orderBy)(this.provisioningProfiles, 'data.bundleIdentifier', 'asc');
+        return sorted[0];
+    }
+}
+exports.default = IosCredentialsManager;
+//# sourceMappingURL=manager.js.map

package/dist/steps/utils/ios/credentials/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../../../src/steps/utils/ios/credentials/manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oDAA4B;AAC5B,4CAAoB;AACpB,gDAAwB;AAGxB,wDAA0B;AAC1B,mCAAiC;AACjC,+BAAkC;AAGlC,wFAA0E;AAC1E,0DAAkC;AAClC,gFAG+B;AAY/B,MAAqB,qBAAqB;IAKxC,YAA6B,gBAAsC;QAAtC,qBAAgB,GAAhB,gBAAgB,CAAsB;QAHlD,yBAAoB,GAA0B,EAAE,CAAC;QAC1D,cAAS,GAAG,KAAK,CAAC;IAE4C,CAAC;IAEhE,KAAK,CAAC,OAAO,CAAC,MAAc;QACjC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAErC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,kBAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnD,MAAM,0BAA0B,GAA+B,EAAE,CAAC;QAClE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;YAC5B,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC7D,MAAM,EACN,MAAM,EACN,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAC9B,CAAC;YACF,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACpD,0BAA0B,CAAC,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC;SAC/D;QAED,MAAM,oCAAoC,GAAG,IAAI,CAAC,uCAAuC,EAAE,CAAC;QAE5F,0EAA0E;QAC1E,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,oCAAoC,CAAC,IAAI,CAAC;QAE/E,OAAO;YACL,oCAAoC;YACpC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI;YACrC,0BAA0B;YAC1B,gBAAgB;YAChB,MAAM;SACP,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,MAAc;QACjC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE;YAChF,OAAO;SACR;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE;YACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SACrC;QACD,IAAI,IAAI,CAAC,oBAAoB,EAAE;YAC7B,KAAK,MAAM,mBAAmB,IAAI,IAAI,CAAC,oBAAoB,EAAE;gBAC3D,MAAM,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aAC3C;SACF;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,MAAc,EACd,MAAc,EACd,iBAAwC;QAExC,IAAI;YACF,IAAA,gBAAM,EAAC,IAAI,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC;YAExD,MAAM,CAAC,IAAI,CAAC,qCAAqC,MAAM,GAAG,CAAC,CAAC;YAC5D,MAAM,YAAY,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,GAAG,IAAA,SAAI,GAAE,MAAM,CAAC,CAAC;YAE7D,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC5E,MAAM,sBAAsB,GAAG,4BAA4B,CAAC,cAAc,CACxE,iBAAiB,CAAC,uBAAuB,CAC1C,CAAC;YACF,MAAM,qBAAqB,GAAG,4BAA4B,CAAC,aAAa,CACtE,iBAAiB,CAAC,uBAAuB,CAC1C,CAAC;YACF,MAAM,CAAC,IAAI,CACT,kBAAkB,sBAAsB,oBAAoB,qBAAqB,EAAE,CACpF,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,uCAAuC,YAAY,EAAE,CAAC,CAAC;YACnE,MAAM,kBAAE,CAAC,SAAS,CAChB,YAAY,EACZ,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAC5E,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACpE,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CACnC,MAAM,EACN,YAAY,EACZ,iBAAiB,CAAC,uBAAuB,CAAC,QAAQ,CACnD,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACjD,MAAM,mBAAmB,GAAG,IAAI,6BAAmB,CACjD,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,QAAQ,CAAC,EAClE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EACvB,MAAM,EACN,qBAAqB,CACtB,CAAC;YACF,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEvC,MAAM,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;YAC1F,MAAM,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAC3C,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAC/B,sBAAsB,CACvB,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;YAC7F,mBAAmB,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;YAE9D,OAAO,mBAAmB,CAAC;SAC5B;QAAC,OAAO,GAAG,EAAE;YACZ,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC;SACX;IACH,CAAC;IAEO,uCAAuC;QAC7C,uDAAuD;QACvD,MAAM,MAAM,GAAG,IAAA,gBAAO,EAAC,IAAI,CAAC,oBAAoB,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;CACF;AAzHD,wCAyHC","sourcesContent":["import assert from 'assert';\nimport os from 'os';\nimport path from 'path';\n\nimport { Ios } from '@expo/eas-build-job';\nimport fs from 'fs-extra';\nimport { orderBy } from 'lodash';\nimport { v4 as uuid } from 'uuid';\nimport { bunyan } from '@expo/logger';\n\nimport * as distributionCertificateUtils from './distributionCertificate';\nimport Keychain from './keychain';\nimport ProvisioningProfile, {\n  DistributionType,\n  ProvisioningProfileData,\n} from './provisioningProfile';\n\nexport interface Credentials {\n  applicationTargetProvisioningProfile: ProvisioningProfile;\n  keychainPath: string;\n  targetProvisioningProfiles: TargetProvisioningProfiles;\n  distributionType: DistributionType;\n  teamId: string;\n}\n\nexport type TargetProvisioningProfiles = Record<string, ProvisioningProfileData>;\n\nexport default class IosCredentialsManager {\n  private keychain?: Keychain;\n  private readonly provisioningProfiles: ProvisioningProfile[] = [];\n  private cleanedUp = false;\n\n  constructor(private readonly buildCredentials: Ios.BuildCredentials) {}\n\n  public async prepare(logger: bunyan): Promise<Credentials> {\n    logger.info('Preparing credentials');\n\n    logger.info('Creating keychain');\n    this.keychain = new Keychain();\n    await this.keychain.create(logger);\n\n    const targets = Object.keys(this.buildCredentials);\n    const targetProvisioningProfiles: TargetProvisioningProfiles = {};\n    for (const target of targets) {\n      const provisioningProfile = await this.prepareTargetCredentials(\n        logger,\n        target,\n        this.buildCredentials[target]\n      );\n      this.provisioningProfiles.push(provisioningProfile);\n      targetProvisioningProfiles[target] = provisioningProfile.data;\n    }\n\n    const applicationTargetProvisioningProfile = this.getApplicationTargetProvisioningProfile();\n\n    // TODO: ensure that all dist types and team ids in the array are the same\n    const { distributionType, teamId } = applicationTargetProvisioningProfile.data;\n\n    return {\n      applicationTargetProvisioningProfile,\n      keychainPath: this.keychain.data.path,\n      targetProvisioningProfiles,\n      distributionType,\n      teamId,\n    };\n  }\n\n  public async cleanUp(logger: bunyan): Promise<void> {\n    if (this.cleanedUp || (!this.keychain && this.provisioningProfiles.length === 0)) {\n      return;\n    }\n\n    if (this.keychain) {\n      await this.keychain.destroy(logger);\n    }\n    if (this.provisioningProfiles) {\n      for (const provisioningProfile of this.provisioningProfiles) {\n        await provisioningProfile.destroy(logger);\n      }\n    }\n    this.cleanedUp = true;\n  }\n\n  private async prepareTargetCredentials(\n    logger: bunyan,\n    target: string,\n    targetCredentials: Ios.TargetCredentials\n  ): Promise<ProvisioningProfile> {\n    try {\n      assert(this.keychain, 'Keychain should be initialized');\n\n      logger.info(`Preparing credentials for target '${target}'`);\n      const distCertPath = path.join(os.tmpdir(), `${uuid()}.p12`);\n\n      logger.info('Getting distribution certificate fingerprint and common name');\n      const certificateFingerprint = distributionCertificateUtils.getFingerprint(\n        targetCredentials.distributionCertificate\n      );\n      const certificateCommonName = distributionCertificateUtils.getCommonName(\n        targetCredentials.distributionCertificate\n      );\n      logger.info(\n        `Fingerprint = \"${certificateFingerprint}\", common name = ${certificateCommonName}`\n      );\n\n      logger.info(`Writing distribution certificate to ${distCertPath}`);\n      await fs.writeFile(\n        distCertPath,\n        Buffer.from(targetCredentials.distributionCertificate.dataBase64, 'base64')\n      );\n\n      logger.info('Importing distribution certificate into the keychain');\n      await this.keychain.importCertificate(\n        logger,\n        distCertPath,\n        targetCredentials.distributionCertificate.password\n      );\n\n      logger.info('Initializing provisioning profile');\n      const provisioningProfile = new ProvisioningProfile(\n        Buffer.from(targetCredentials.provisioningProfileBase64, 'base64'),\n        this.keychain.data.path,\n        target,\n        certificateCommonName\n      );\n      await provisioningProfile.init(logger);\n\n      logger.info('Validating whether distribution certificate has been imported successfully');\n      await this.keychain.ensureCertificateImported(\n        provisioningProfile.data.teamId,\n        certificateFingerprint\n      );\n\n      logger.info('Verifying whether the distribution certificate and provisioning profile match');\n      provisioningProfile.verifyCertificate(certificateFingerprint);\n\n      return provisioningProfile;\n    } catch (err) {\n      await this.cleanUp(logger);\n      throw err;\n    }\n  }\n\n  private getApplicationTargetProvisioningProfile(): ProvisioningProfile {\n    // sorting works because bundle ids share common prefix\n    const sorted = orderBy(this.provisioningProfiles, 'data.bundleIdentifier', 'asc');\n    return sorted[0];\n  }\n}\n"]}

package/dist/steps/utils/ios/credentials/provisioningProfile.d.ts

@@ -0,0 +1,35 @@
+/// <reference types="node" />
+/// <reference types="bunyan" />
+import { bunyan } from '@expo/logger';
+export interface ProvisioningProfileData {
+    path: string;
+    target: string;
+    bundleIdentifier: string;
+    teamId: string;
+    uuid: string;
+    name: string;
+    developerCertificate: Buffer;
+    certificateCommonName: string;
+    distributionType: DistributionType;
+}
+export declare enum DistributionType {
+    AD_HOC = "ad-hoc",
+    APP_STORE = "app-store",
+    ENTERPRISE = "enterprise"
+}
+export default class ProvisioningProfile {
+    private readonly profile;
+    private readonly keychainPath;
+    private readonly target;
+    private readonly certificateCommonName;
+    get data(): ProvisioningProfileData;
+    private readonly profilePath;
+    private profileData?;
+    constructor(profile: Buffer, keychainPath: string, target: string, certificateCommonName: string);
+    init(logger: bunyan): Promise<void>;
+    destroy(logger: bunyan): Promise<void>;
+    verifyCertificate(fingerprint: string): void;
+    private load;
+    private resolveDistributionType;
+    private genDerCertFingerprint;
+}

package/dist/steps/utils/ios/credentials/provisioningProfile.js

@@ -0,0 +1,114 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DistributionType = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const eas_build_job_1 = require("@expo/eas-build-job");
+const turtle_spawn_1 = __importDefault(require("@expo/turtle-spawn"));
+const fs_extra_1 = __importDefault(require("fs-extra"));
+const plist_1 = __importDefault(require("plist"));
+const uuid_1 = require("uuid");
+var DistributionType;
+(function (DistributionType) {
+    DistributionType["AD_HOC"] = "ad-hoc";
+    DistributionType["APP_STORE"] = "app-store";
+    DistributionType["ENTERPRISE"] = "enterprise";
+})(DistributionType || (exports.DistributionType = DistributionType = {}));
+const PROVISIONING_PROFILES_DIRECTORY = path_1.default.join(os_1.default.homedir(), 'Library/MobileDevice/Provisioning Profiles');
+class ProvisioningProfile {
+    get data() {
+        if (!this.profileData) {
+            throw new Error('You must init the profile first!');
+        }
+        else {
+            return this.profileData;
+        }
+    }
+    constructor(profile, keychainPath, target, certificateCommonName) {
+        this.profile = profile;
+        this.keychainPath = keychainPath;
+        this.target = target;
+        this.certificateCommonName = certificateCommonName;
+        this.profilePath = path_1.default.join(PROVISIONING_PROFILES_DIRECTORY, `${(0, uuid_1.v4)()}.mobileprovision`);
+    }
+    async init(logger) {
+        logger.debug(`Making sure ${PROVISIONING_PROFILES_DIRECTORY} exits`);
+        await fs_extra_1.default.ensureDir(PROVISIONING_PROFILES_DIRECTORY);
+        logger.debug(`Writing provisioning profile to ${this.profilePath}`);
+        await fs_extra_1.default.writeFile(this.profilePath, this.profile);
+        logger.debug('Loading provisioning profile');
+        await this.load();
+    }
+    async destroy(logger) {
+        if (!this.profilePath) {
+            logger.warn("There is nothing to destroy, a provisioning profile hasn't been created yet.");
+            return;
+        }
+        logger.info('Removing provisioning profile');
+        await fs_extra_1.default.remove(this.profilePath);
+    }
+    verifyCertificate(fingerprint) {
+        const devCertFingerprint = this.genDerCertFingerprint();
+        if (devCertFingerprint !== fingerprint) {
+            throw new eas_build_job_1.errors.CredentialsDistCertMismatchError(`Provisioning profile and distribution certificate don't match.
+Profile's certificate fingerprint = ${devCertFingerprint}, distribution certificate fingerprint = ${fingerprint}`);
+        }
+    }
+    async load() {
+        let result;
+        try {
+            result = await (0, turtle_spawn_1.default)('security', ['cms', '-D', '-k', this.keychainPath, '-i', this.profilePath], {
+                stdio: 'pipe',
+            });
+        }
+        catch (err) {
+            throw new Error(err.stderr.trim());
+        }
+        const { output } = result;
+        const plistRaw = output.join('');
+        let plistData;
+        try {
+            plistData = plist_1.default.parse(plistRaw);
+        }
+        catch (error) {
+            throw new Error(`Error when parsing plist: ${error.message}`);
+        }
+        const applicationIdentifier = plistData.Entitlements['application-identifier'];
+        const bundleIdentifier = applicationIdentifier.replace(/^.+?\./, '');
+        this.profileData = {
+            path: this.profilePath,
+            target: this.target,
+            bundleIdentifier,
+            teamId: plistData.TeamIdentifier[0],
+            uuid: plistData.UUID,
+            name: plistData.Name,
+            developerCertificate: Buffer.from(plistData.DeveloperCertificates[0], 'base64'),
+            certificateCommonName: this.certificateCommonName,
+            distributionType: this.resolveDistributionType(plistData),
+        };
+    }
+    resolveDistributionType(plistData) {
+        if (plistData.ProvisionsAllDevices) {
+            return DistributionType.ENTERPRISE;
+        }
+        else if (plistData.ProvisionedDevices) {
+            return DistributionType.AD_HOC;
+        }
+        else {
+            return DistributionType.APP_STORE;
+        }
+    }
+    genDerCertFingerprint() {
+        return crypto_1.default
+            .createHash('sha1')
+            .update(this.data.developerCertificate)
+            .digest('hex')
+            .toUpperCase();
+    }
+}
+exports.default = ProvisioningProfile;
+//# sourceMappingURL=provisioningProfile.js.map

package/dist/steps/utils/ios/credentials/provisioningProfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioningProfile.js","sourceRoot":"","sources":["../../../../../src/steps/utils/ios/credentials/provisioningProfile.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,4CAAoB;AACpB,gDAAwB;AAExB,uDAA6C;AAC7C,sEAAuC;AACvC,wDAA0B;AAC1B,kDAA0B;AAC1B,+BAAkC;AAelC,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,qCAAiB,CAAA;IACjB,2CAAuB,CAAA;IACvB,6CAAyB,CAAA;AAC3B,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAED,MAAM,+BAA+B,GAAG,cAAI,CAAC,IAAI,CAC/C,YAAE,CAAC,OAAO,EAAE,EACZ,4CAA4C,CAC7C,CAAC;AAEF,MAAqB,mBAAmB;IACtC,IAAI,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACrD;aAAM;YACL,OAAO,IAAI,CAAC,WAAW,CAAC;SACzB;IACH,CAAC;IAKD,YACmB,OAAe,EACf,YAAoB,EACpB,MAAc,EACd,qBAA6B;QAH7B,YAAO,GAAP,OAAO,CAAQ;QACf,iBAAY,GAAZ,YAAY,CAAQ;QACpB,WAAM,GAAN,MAAM,CAAQ;QACd,0BAAqB,GAArB,qBAAqB,CAAQ;QAE9C,IAAI,CAAC,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,+BAA+B,EAAE,GAAG,IAAA,SAAI,GAAE,kBAAkB,CAAC,CAAC;IAC7F,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,MAAc;QAC9B,MAAM,CAAC,KAAK,CAAC,eAAe,+BAA+B,QAAQ,CAAC,CAAC;QACrE,MAAM,kBAAE,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAEpD,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpE,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnD,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,MAAc;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YACrB,MAAM,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;YAC5F,OAAO;SACR;QACD,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC7C,MAAM,kBAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAEM,iBAAiB,CAAC,WAAmB;QAC1C,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACxD,IAAI,kBAAkB,KAAK,WAAW,EAAE;YACtC,MAAM,IAAI,sBAAM,CAAC,gCAAgC,CAC/C;sCAC8B,kBAAkB,4CAA4C,WAAW,EAAE,CAC1G,CAAC;SACH;IACH,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,MAAM,CAAC;QACX,IAAI;YACF,MAAM,GAAG,MAAM,IAAA,sBAAK,EAClB,UAAU,EACV,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAC9D;gBACE,KAAK,EAAE,MAAM;aACd,CACF,CAAC;SACH;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;SACpC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,SAAS,CAAC;QACd,IAAI;YACF,SAAS,GAAG,eAAK,CAAC,KAAK,CAAC,QAAQ,CAAsB,CAAC;SACxD;QAAC,OAAO,KAAU,EAAE;YACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;SAC/D;QAED,MAAM,qBAAqB,GAAI,SAAS,CAAC,YAAkC,CACzE,wBAAwB,CACf,CAAC;QACZ,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAErE,IAAI,CAAC,WAAW,GAAG;YACjB,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,gBAAgB;YAChB,MAAM,EAAG,SAAS,CAAC,cAA2B,CAAC,CAAC,CAAC;YACjD,IAAI,EAAE,SAAS,CAAC,IAAc;YAC9B,IAAI,EAAE,SAAS,CAAC,IAAc;YAC9B,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAE,SAAS,CAAC,qBAAkC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YAC7F,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;YACjD,gBAAgB,EAAE,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC;SAC1D,CAAC;IACJ,CAAC;IAEO,uBAAuB,CAAC,SAA4B;QAC1D,IAAI,SAAS,CAAC,oBAAoB,EAAE;YAClC,OAAO,gBAAgB,CAAC,UAAU,CAAC;SACpC;aAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE;YACvC,OAAO,gBAAgB,CAAC,MAAM,CAAC;SAChC;aAAM;YACL,OAAO,gBAAgB,CAAC,SAAS,CAAC;SACnC;IACH,CAAC;IAEO,qBAAqB;QAC3B,OAAO,gBAAM;aACV,UAAU,CAAC,MAAM,CAAC;aAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;aACtC,MAAM,CAAC,KAAK,CAAC;aACb,WAAW,EAAE,CAAC;IACnB,CAAC;CACF;AA7GD,sCA6GC","sourcesContent":["import crypto from 'crypto';\nimport os from 'os';\nimport path from 'path';\n\nimport { errors } from '@expo/eas-build-job';\nimport spawn from '@expo/turtle-spawn';\nimport fs from 'fs-extra';\nimport plist from 'plist';\nimport { v4 as uuid } from 'uuid';\nimport { bunyan } from '@expo/logger';\n\nexport interface ProvisioningProfileData {\n  path: string;\n  target: string;\n  bundleIdentifier: string;\n  teamId: string;\n  uuid: string;\n  name: string;\n  developerCertificate: Buffer;\n  certificateCommonName: string;\n  distributionType: DistributionType;\n}\n\nexport enum DistributionType {\n  AD_HOC = 'ad-hoc',\n  APP_STORE = 'app-store',\n  ENTERPRISE = 'enterprise',\n}\n\nconst PROVISIONING_PROFILES_DIRECTORY = path.join(\n  os.homedir(),\n  'Library/MobileDevice/Provisioning Profiles'\n);\n\nexport default class ProvisioningProfile {\n  get data(): ProvisioningProfileData {\n    if (!this.profileData) {\n      throw new Error('You must init the profile first!');\n    } else {\n      return this.profileData;\n    }\n  }\n\n  private readonly profilePath: string;\n  private profileData?: ProvisioningProfileData;\n\n  constructor(\n    private readonly profile: Buffer,\n    private readonly keychainPath: string,\n    private readonly target: string,\n    private readonly certificateCommonName: string\n  ) {\n    this.profilePath = path.join(PROVISIONING_PROFILES_DIRECTORY, `${uuid()}.mobileprovision`);\n  }\n\n  public async init(logger: bunyan): Promise<void> {\n    logger.debug(`Making sure ${PROVISIONING_PROFILES_DIRECTORY} exits`);\n    await fs.ensureDir(PROVISIONING_PROFILES_DIRECTORY);\n\n    logger.debug(`Writing provisioning profile to ${this.profilePath}`);\n    await fs.writeFile(this.profilePath, this.profile);\n\n    logger.debug('Loading provisioning profile');\n    await this.load();\n  }\n\n  public async destroy(logger: bunyan): Promise<void> {\n    if (!this.profilePath) {\n      logger.warn(\"There is nothing to destroy, a provisioning profile hasn't been created yet.\");\n      return;\n    }\n    logger.info('Removing provisioning profile');\n    await fs.remove(this.profilePath);\n  }\n\n  public verifyCertificate(fingerprint: string): void {\n    const devCertFingerprint = this.genDerCertFingerprint();\n    if (devCertFingerprint !== fingerprint) {\n      throw new errors.CredentialsDistCertMismatchError(\n        `Provisioning profile and distribution certificate don't match.\nProfile's certificate fingerprint = ${devCertFingerprint}, distribution certificate fingerprint = ${fingerprint}`\n      );\n    }\n  }\n\n  private async load(): Promise<void> {\n    let result;\n    try {\n      result = await spawn(\n        'security',\n        ['cms', '-D', '-k', this.keychainPath, '-i', this.profilePath],\n        {\n          stdio: 'pipe',\n        }\n      );\n    } catch (err: any) {\n      throw new Error(err.stderr.trim());\n    }\n    const { output } = result;\n\n    const plistRaw = output.join('');\n    let plistData;\n    try {\n      plistData = plist.parse(plistRaw) as plist.PlistObject;\n    } catch (error: any) {\n      throw new Error(`Error when parsing plist: ${error.message}`);\n    }\n\n    const applicationIdentifier = (plistData.Entitlements as plist.PlistObject)[\n      'application-identifier'\n    ] as string;\n    const bundleIdentifier = applicationIdentifier.replace(/^.+?\\./, '');\n\n    this.profileData = {\n      path: this.profilePath,\n      target: this.target,\n      bundleIdentifier,\n      teamId: (plistData.TeamIdentifier as string[])[0],\n      uuid: plistData.UUID as string,\n      name: plistData.Name as string,\n      developerCertificate: Buffer.from((plistData.DeveloperCertificates as string[])[0], 'base64'),\n      certificateCommonName: this.certificateCommonName,\n      distributionType: this.resolveDistributionType(plistData),\n    };\n  }\n\n  private resolveDistributionType(plistData: plist.PlistObject): DistributionType {\n    if (plistData.ProvisionsAllDevices) {\n      return DistributionType.ENTERPRISE;\n    } else if (plistData.ProvisionedDevices) {\n      return DistributionType.AD_HOC;\n    } else {\n      return DistributionType.APP_STORE;\n    }\n  }\n\n  private genDerCertFingerprint(): string {\n    return crypto\n      .createHash('sha1')\n      .update(this.data.developerCertificate)\n      .digest('hex')\n      .toUpperCase();\n  }\n}\n"]}

package/dist/steps/utils/ios/fastlane.d.ts

@@ -1,11 +1,15 @@
 /// <reference types="bunyan" />
 import { bunyan } from '@expo/logger';
 import { Env } from '@expo/eas-build-job';
-export declare function runFastlaneGym({ scheme, buildConfiguration, workingDir, logger, buildLogsDirectory, env, }: {
-    scheme: string;
-    buildConfiguration?: string;
+import { SpawnResult } from '@expo/turtle-spawn';
+export declare function runFastlaneGym({ workingDir, logger, buildLogsDirectory, env, }: {
     workingDir: string;
     logger: bunyan;
     buildLogsDirectory: string;
     env: Env;
 }): Promise<void>;
+export declare function runFastlane(fastlaneArgs: string[], { logger, env, cwd, }?: {
+    logger?: bunyan;
+    env?: Record<string, string>;
+    cwd?: string;
+}): Promise<SpawnResult>;

package/dist/steps/utils/ios/fastlane.js

@@ -3,44 +3,15 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runFastlaneGym = void 0;
+exports.runFastlane = exports.runFastlaneGym = void 0;
 const path_1 = __importDefault(require("path"));
-const fs_extra_1 = __importDefault(require("fs-extra"));
-const gymfile_1 = require("../../../ios/gymfile");
-const xcpretty_1 = require("../../../ios/xcpretty");
-const fastlane_1 = require("../../../ios/fastlane");
-const tvos_1 = require("./tvos");
-async function ensureGymfileExists({ logger, scheme, buildConfiguration, logsDirectory, workingDir, }) {
-    const gymfilePath = path_1.default.join(workingDir, 'ios/Gymfile');
-    if (await fs_extra_1.default.pathExists(gymfilePath)) {
-        logger.info('Gymfile already exists');
-        return;
-    }
-    const isTV = await (0, tvos_1.isTVOS)({ scheme, buildConfiguration, workingDir });
-    const simulatorDestination = `generic/platform=${isTV ? 'tvOS' : 'iOS'} Simulator`;
-    await (0, gymfile_1.createGymfileForSimulatorBuild)({
-        outputFile: gymfilePath,
-        scheme,
-        buildConfiguration: buildConfiguration !== null && buildConfiguration !== void 0 ? buildConfiguration : 'release',
-        derivedDataPath: './build',
-        clean: false,
-        logsDirectory,
-        simulatorDestination,
-    });
-    logger.info('Creating Gymfile');
-}
-async function runFastlaneGym({ scheme, buildConfiguration, workingDir, logger, buildLogsDirectory, env, }) {
-    await ensureGymfileExists({
-        scheme,
-        buildConfiguration: buildConfiguration !== null && buildConfiguration !== void 0 ? buildConfiguration : 'release',
-        logsDirectory: buildLogsDirectory,
-        workingDir,
-        logger,
-    });
+const turtle_spawn_1 = __importDefault(require("@expo/turtle-spawn"));
+const xcpretty_1 = require("./xcpretty");
+async function runFastlaneGym({ workingDir, logger, buildLogsDirectory, env, }) {
     const buildLogger = new xcpretty_1.XcodeBuildLogger(logger, workingDir);
     void buildLogger.watchLogFiles(buildLogsDirectory);
     try {
-        await (0, fastlane_1.runFastlane)(['gym'], {
+        await runFastlane(['gym'], {
             cwd: path_1.default.join(workingDir, 'ios'),
             logger,
             env,
@@ -51,4 +22,20 @@ async function runFastlaneGym({ scheme, buildConfiguration, workingDir, logger,
     }
 }
 exports.runFastlaneGym = runFastlaneGym;
+async function runFastlane(fastlaneArgs, { logger, env, cwd, } = {}) {
+    const fastlaneEnvVars = {
+        FASTLANE_DISABLE_COLORS: '1',
+        FASTLANE_SKIP_UPDATE_CHECK: '1',
+        SKIP_SLOW_FASTLANE_WARNING: 'true',
+        FASTLANE_HIDE_TIMESTAMP: 'true',
+        LC_ALL: 'en_US.UTF-8',
+        ...(env !== null && env !== void 0 ? env : process.env),
+    };
+    return await (0, turtle_spawn_1.default)('fastlane', fastlaneArgs, {
+        env: fastlaneEnvVars,
+        logger,
+        cwd,
+    });
+}
+exports.runFastlane = runFastlane;
 //# sourceMappingURL=fastlane.js.map

package/dist/steps/utils/ios/fastlane.js.map

@@ -1 +1 @@
-{"version":3,"file":"fastlane.js","sourceRoot":"","sources":["../../../../src/steps/utils/ios/fastlane.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AAExB,wDAA0B;AAI1B,kDAAsE;AACtE,oDAAyD;AACzD,oDAAoD;AAEpD,iCAAgC;AAEhC,KAAK,UAAU,mBAAmB,CAAC,EACjC,MAAM,EACN,MAAM,EACN,kBAAkB,EAClB,aAAa,EACb,UAAU,GAOX;IACC,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,MAAM,kBAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QACpC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO;KACR;IAED,MAAM,IAAI,GAAG,MAAM,IAAA,aAAM,EAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC;IACtE,MAAM,oBAAoB,GAAG,oBAAoB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC;IAEnF,MAAM,IAAA,wCAA8B,EAAC;QACnC,UAAU,EAAE,WAAW;QACvB,MAAM;QACN,kBAAkB,EAAE,kBAAkB,aAAlB,kBAAkB,cAAlB,kBAAkB,GAAI,SAAS;QACnD,eAAe,EAAE,SAAS;QAC1B,KAAK,EAAE,KAAK;QACZ,aAAa;QACb,oBAAoB;KACrB,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAClC,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,EACnC,MAAM,EACN,kBAAkB,EAClB,UAAU,EACV,MAAM,EACN,kBAAkB,EAClB,GAAG,GAQJ;IACC,MAAM,mBAAmB,CAAC;QACxB,MAAM;QACN,kBAAkB,EAAE,kBAAkB,aAAlB,kBAAkB,cAAlB,kBAAkB,GAAI,SAAS;QACnD,aAAa,EAAE,kBAAkB;QACjC,UAAU;QACV,MAAM;KACP,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,IAAI,2BAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7D,KAAK,WAAW,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACnD,IAAI;QACF,MAAM,IAAA,sBAAW,EAAC,CAAC,KAAK,CAAC,EAAE;YACzB,GAAG,EAAE,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC;YACjC,MAAM;YACN,GAAG;SACJ,CAAC,CAAC;KACJ;YAAS;QACR,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;KAC3B;AACH,CAAC;AAjCD,wCAiCC","sourcesContent":["import path from 'path';\n\nimport fs from 'fs-extra';\nimport { bunyan } from '@expo/logger';\nimport { Env } from '@expo/eas-build-job';\n\nimport { createGymfileForSimulatorBuild } from '../../../ios/gymfile';\nimport { XcodeBuildLogger } from '../../../ios/xcpretty';\nimport { runFastlane } from '../../../ios/fastlane';\n\nimport { isTVOS } from './tvos';\n\nasync function ensureGymfileExists({\n  logger,\n  scheme,\n  buildConfiguration,\n  logsDirectory,\n  workingDir,\n}: {\n  logger: bunyan;\n  scheme: string;\n  buildConfiguration: string;\n  logsDirectory: string;\n  workingDir: string;\n}): Promise<void> {\n  const gymfilePath = path.join(workingDir, 'ios/Gymfile');\n  if (await fs.pathExists(gymfilePath)) {\n    logger.info('Gymfile already exists');\n    return;\n  }\n\n  const isTV = await isTVOS({ scheme, buildConfiguration, workingDir });\n  const simulatorDestination = `generic/platform=${isTV ? 'tvOS' : 'iOS'} Simulator`;\n\n  await createGymfileForSimulatorBuild({\n    outputFile: gymfilePath,\n    scheme,\n    buildConfiguration: buildConfiguration ?? 'release',\n    derivedDataPath: './build',\n    clean: false,\n    logsDirectory,\n    simulatorDestination,\n  });\n\n  logger.info('Creating Gymfile');\n}\n\nexport async function runFastlaneGym({\n  scheme,\n  buildConfiguration,\n  workingDir,\n  logger,\n  buildLogsDirectory,\n  env,\n}: {\n  scheme: string;\n  buildConfiguration?: string;\n  workingDir: string;\n  logger: bunyan;\n  buildLogsDirectory: string;\n  env: Env;\n}): Promise<void> {\n  await ensureGymfileExists({\n    scheme,\n    buildConfiguration: buildConfiguration ?? 'release',\n    logsDirectory: buildLogsDirectory,\n    workingDir,\n    logger,\n  });\n  const buildLogger = new XcodeBuildLogger(logger, workingDir);\n  void buildLogger.watchLogFiles(buildLogsDirectory);\n  try {\n    await runFastlane(['gym'], {\n      cwd: path.join(workingDir, 'ios'),\n      logger,\n      env,\n    });\n  } finally {\n    await buildLogger.flush();\n  }\n}\n"]}
+{"version":3,"file":"fastlane.js","sourceRoot":"","sources":["../../../../src/steps/utils/ios/fastlane.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AAIxB,sEAAwD;AAExD,yCAA8C;AAEvC,KAAK,UAAU,cAAc,CAAC,EACnC,UAAU,EACV,MAAM,EACN,kBAAkB,EAClB,GAAG,GAMJ;IACC,MAAM,WAAW,GAAG,IAAI,2BAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7D,KAAK,WAAW,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACnD,IAAI;QACF,MAAM,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE;YACzB,GAAG,EAAE,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC;YACjC,MAAM;YACN,GAAG;SACJ,CAAC,CAAC;KACJ;YAAS;QACR,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;KAC3B;AACH,CAAC;AAtBD,wCAsBC;AAEM,KAAK,UAAU,WAAW,CAC/B,YAAsB,EACtB,EACE,MAAM,EACN,GAAG,EACH,GAAG,MAKD,EAAE;IAEN,MAAM,eAAe,GAAG;QACtB,uBAAuB,EAAE,GAAG;QAC5B,0BAA0B,EAAE,GAAG;QAC/B,0BAA0B,EAAE,MAAM;QAClC,uBAAuB,EAAE,MAAM;QAC/B,MAAM,EAAE,aAAa;QACrB,GAAG,CAAC,GAAG,aAAH,GAAG,cAAH,GAAG,GAAI,OAAO,CAAC,GAAG,CAAC;KACxB,CAAC;IACF,OAAO,MAAM,IAAA,sBAAK,EAAC,UAAU,EAAE,YAAY,EAAE;QAC3C,GAAG,EAAE,eAAe;QACpB,MAAM;QACN,GAAG;KACJ,CAAC,CAAC;AACL,CAAC;AAzBD,kCAyBC","sourcesContent":["import path from 'path';\n\nimport { bunyan } from '@expo/logger';\nimport { Env } from '@expo/eas-build-job';\nimport spawn, { SpawnResult } from '@expo/turtle-spawn';\n\nimport { XcodeBuildLogger } from './xcpretty';\n\nexport async function runFastlaneGym({\n  workingDir,\n  logger,\n  buildLogsDirectory,\n  env,\n}: {\n  workingDir: string;\n  logger: bunyan;\n  buildLogsDirectory: string;\n  env: Env;\n}): Promise<void> {\n  const buildLogger = new XcodeBuildLogger(logger, workingDir);\n  void buildLogger.watchLogFiles(buildLogsDirectory);\n  try {\n    await runFastlane(['gym'], {\n      cwd: path.join(workingDir, 'ios'),\n      logger,\n      env,\n    });\n  } finally {\n    await buildLogger.flush();\n  }\n}\n\nexport async function runFastlane(\n  fastlaneArgs: string[],\n  {\n    logger,\n    env,\n    cwd,\n  }: {\n    logger?: bunyan;\n    env?: Record<string, string>;\n    cwd?: string;\n  } = {}\n): Promise<SpawnResult> {\n  const fastlaneEnvVars = {\n    FASTLANE_DISABLE_COLORS: '1',\n    FASTLANE_SKIP_UPDATE_CHECK: '1',\n    SKIP_SLOW_FASTLANE_WARNING: 'true',\n    FASTLANE_HIDE_TIMESTAMP: 'true',\n    LC_ALL: 'en_US.UTF-8',\n    ...(env ?? process.env),\n  };\n  return await spawn('fastlane', fastlaneArgs, {\n    env: fastlaneEnvVars,\n    logger,\n    cwd,\n  });\n}\n"]}

package/dist/steps/utils/ios/resolve.d.ts

@@ -1,5 +1,3 @@
 import { Ios } from '@expo/eas-build-job';
-export declare function resolveScheme(job: Ios.Job, { workingDir }: {
-    workingDir: string;
-}): string;
-export declare function resolveBuildConfiguration(job: Ios.Job): string;
+export declare function resolveScheme(workingDir: string, job: Ios.Job, scheme?: string): string;
+export declare function resolveBuildConfiguration(job: Ios.Job, buildConfiguration?: string): string;

package/dist/steps/utils/ios/resolve.js

@@ -6,7 +6,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveBuildConfiguration = exports.resolveScheme = void 0;
 const assert_1 = __importDefault(require("assert"));
 const config_plugins_1 = require("@expo/config-plugins");
-function resolveScheme(job, { workingDir }) {
+function resolveScheme(workingDir, job, scheme) {
+    if (scheme) {
+        return scheme;
+    }
     if (job.scheme) {
         return job.scheme;
     }
@@ -15,8 +18,11 @@ function resolveScheme(job, { workingDir }) {
     return schemes[0];
 }
 exports.resolveScheme = resolveScheme;
-function resolveBuildConfiguration(job) {
-    if (job.buildConfiguration) {
+function resolveBuildConfiguration(job, buildConfiguration) {
+    if (buildConfiguration) {
+        return buildConfiguration;
+    }
+    else if (job.buildConfiguration) {
         return job.buildConfiguration;
     }
     else if (job.developmentClient) {

package/dist/steps/utils/ios/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../../src/steps/utils/ios/resolve.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAG5B,yDAAiD;AAEjD,SAAgB,aAAa,CAAC,GAAY,EAAE,EAAE,UAAU,EAA0B;IAChF,IAAI,GAAG,CAAC,MAAM,EAAE;QACd,OAAO,GAAG,CAAC,MAAM,CAAC;KACnB;IACD,MAAM,OAAO,GAAG,0BAAS,CAAC,WAAW,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAA,gBAAM,EAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,gDAAgD,CAAC,CAAC;IAC/E,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAPD,sCAOC;AAED,SAAgB,yBAAyB,CAAC,GAAY;IACpD,IAAI,GAAG,CAAC,kBAAkB,EAAE;QAC1B,OAAO,GAAG,CAAC,kBAAkB,CAAC;KAC/B;SAAM,IAAI,GAAG,CAAC,iBAAiB,EAAE;QAChC,OAAO,OAAO,CAAC;KAChB;SAAM;QACL,OAAO,SAAS,CAAC;KAClB;AACH,CAAC;AARD,8DAQC","sourcesContent":["import assert from 'assert';\n\nimport { Ios } from '@expo/eas-build-job';\nimport { IOSConfig } from '@expo/config-plugins';\n\nexport function resolveScheme(job: Ios.Job, { workingDir }: { workingDir: string }): string {\n  if (job.scheme) {\n    return job.scheme;\n  }\n  const schemes = IOSConfig.BuildScheme.getSchemesFromXcodeproj(workingDir);\n  assert(schemes.length === 1, 'Ejected project should have exactly one scheme');\n  return schemes[0];\n}\n\nexport function resolveBuildConfiguration(job: Ios.Job): string {\n  if (job.buildConfiguration) {\n    return job.buildConfiguration;\n  } else if (job.developmentClient) {\n    return 'Debug';\n  } else {\n    return 'Release';\n  }\n}\n"]}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../../src/steps/utils/ios/resolve.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAG5B,yDAAiD;AAEjD,SAAgB,aAAa,CAAC,UAAkB,EAAE,GAAY,EAAE,MAAe;IAC7E,IAAI,MAAM,EAAE;QACV,OAAO,MAAM,CAAC;KACf;IACD,IAAI,GAAG,CAAC,MAAM,EAAE;QACd,OAAO,GAAG,CAAC,MAAM,CAAC;KACnB;IACD,MAAM,OAAO,GAAG,0BAAS,CAAC,WAAW,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAA,gBAAM,EAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,gDAAgD,CAAC,CAAC;IAC/E,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAVD,sCAUC;AAED,SAAgB,yBAAyB,CAAC,GAAY,EAAE,kBAA2B;IACjF,IAAI,kBAAkB,EAAE;QACtB,OAAO,kBAAkB,CAAC;KAC3B;SAAM,IAAI,GAAG,CAAC,kBAAkB,EAAE;QACjC,OAAO,GAAG,CAAC,kBAAkB,CAAC;KAC/B;SAAM,IAAI,GAAG,CAAC,iBAAiB,EAAE;QAChC,OAAO,OAAO,CAAC;KAChB;SAAM;QACL,OAAO,SAAS,CAAC;KAClB;AACH,CAAC;AAVD,8DAUC","sourcesContent":["import assert from 'assert';\n\nimport { Ios } from '@expo/eas-build-job';\nimport { IOSConfig } from '@expo/config-plugins';\n\nexport function resolveScheme(workingDir: string, job: Ios.Job, scheme?: string): string {\n  if (scheme) {\n    return scheme;\n  }\n  if (job.scheme) {\n    return job.scheme;\n  }\n  const schemes = IOSConfig.BuildScheme.getSchemesFromXcodeproj(workingDir);\n  assert(schemes.length === 1, 'Ejected project should have exactly one scheme');\n  return schemes[0];\n}\n\nexport function resolveBuildConfiguration(job: Ios.Job, buildConfiguration?: string): string {\n  if (buildConfiguration) {\n    return buildConfiguration;\n  } else if (job.buildConfiguration) {\n    return job.buildConfiguration;\n  } else if (job.developmentClient) {\n    return 'Debug';\n  } else {\n    return 'Release';\n  }\n}\n"]}

package/dist/steps/utils/ios/xcpretty.d.ts

@@ -0,0 +1,16 @@
+/// <reference types="bunyan" />
+import { bunyan } from '@expo/logger';
+export declare class XcodeBuildLogger {
+    private readonly logger;
+    private readonly projectRoot;
+    private loggerError?;
+    private flushing;
+    private logReaderPromise?;
+    private logsPath?;
+    constructor(logger: bunyan, projectRoot: string);
+    watchLogFiles(logsDirectory: string): Promise<void>;
+    flush(): Promise<void>;
+    private getBuildLogFilename;
+    private startBuildLogger;
+    private findBundlerErrors;
+}