@radhya/mach 1.1.0 → 1.4.6

package/README.md

@@ -16,7 +16,7 @@ npm install -g @radhya/mach
 # Login to Mach Dashboard
 mach login
 
-# Initialize a project
+# Initialize a new project
 mach init
 
 # Link an existing project
@@ -44,10 +44,29 @@ mach build --platform android
 | `mach host` | Setup AWS S3 static hosting with CloudFront |
 | `mach sitemap` | Generate sitemap.xml from Expo Router |
 | `mach audit` | Run automated security audit on the project |
+| `mach agent` | Start local device discovery agent for Install Hub (port 7070) |
+
+### Legacy Commands
+
+| Command | Description |
+|---------|-------------|
+| `mach credentials:setup` | Automated credential provisioning |
+| `mach credentials:service` | Upload service credentials (ASC API Key / Google Service JSON) |
 
 ## Cloud Builds
 
-Build your apps on cloud infrastructure using AWS Spot Instances — fast, cost-effective, and fully automated.
+iOS builds run on a self-hosted Mac Mini via a GitLab CI runner. Android builds run on AWS EC2 Spot Instances.
+
+### How iOS Cloud Builds Work
+
+1. **CLI zips & uploads** your source code to S3 (node_modules and build artifacts are excluded)
+2. **Dashboard API** triggers a GitLab pipeline via trigger token
+3. **GitLab runner** on the Mac Mini picks up the job — it skips git fetch (`GIT_STRATEGY: none`) since source comes from S3
+4. **Runner downloads** source from S3, extracts it, and runs `mach build --local`
+5. **Build artifacts** (IPA/APK) are uploaded back to S3
+6. **Dashboard** shows live logs and download links
+
+> **Important:** The `ios-build` GitLab repo must have `GIT_STRATEGY: none` set in `.gitlab-ci.yml` — otherwise the runner will try to git fetch from GitLab on every build, which can cause hangs if the Mac Mini has slow connectivity to GitLab.
 
 ```bash
 # iOS build
@@ -66,12 +85,36 @@ mach build --platform android --dry-run
 ### Build Options
 
 - `--platform <os>` — Target platform: `ios` or `android` (required)
-- `--profile <name>` — Build profile: `production`, `staging`, `development`
+- `--profile <name>` — Build profile from `mach.config.json` (e.g., `production`, `staging`, `development`)
+- `--auto-version` — **(Android)** Automatically resolve and increment versionCode via Google Play API
 - `--local` — Run build on local machine
 - `--dry-run` — Generate script without launching
 - `--verbose` — Enable verbose logging
 - `--simulator` — Build for iOS Simulator (no signing required)
 
+## Automated Versioning (Android)
+
+Mach can automatically resolve your next `versionCode` by querying the Google Play Store. This prevents "Duplicate Version Code" rejection errors.
+
+### Setup
+Ensure you have uploaded a **Google Service Account JSON** to the Mach Dashboard under Service Credentials.
+
+### usage
+Set the version code to `"auto"` in your config:
+```json
+"android": {
+  "versionCode": "auto"
+}
+```
+Or pass the flag via CLI:
+```bash
+mach build --platform android --auto-version
+```
+
+> [!TIP]
+> Mach queries all tracks (Internal, Alpha, Beta, Production), finds the highest existing version, and increments it by 1 for your new build.
+
+
 ## Store Submission
 
 Automate your App Store and Google Play submissions directly from the CLI.
@@ -115,24 +158,113 @@ Create a `mach.config.json` in your project root:
     "teamId": "XXXXXXXXXX"
   },
   "android": {
-    "package": "com.example.myapp"
+    "package": "com.example.myapp",
+    "versionCode": "auto"
   }
 }
 ```
 
 ### Build Profiles
 
-Define multiple build profiles for different environments:
+Define multiple build profiles under the `build` key. Profiles support deep inheritance via `extends`.
 
 ```json
 {
   "projectId": "your-project-id",
-  "profiles": {
+  "name": "MyApp",
+  "slug": "my-app",
+  "scheme": "myapp",
+  "android": { "package": "com.example.myapp" },
+  "ios": { "bundleIdentifier": "com.example.myapp" },
+  "build": {
+    "base": {},
     "development": {
-      "ios": { "configuration": "Debug", "exportMethod": "development" }
+      "extends": "base",
+      "developmentClient": true,
+      "environment": "development"
+    },
+    "staging": {
+      "extends": "base",
+      "distribution": "internal"
     },
     "production": {
-      "ios": { "configuration": "Release", "exportMethod": "app-store" }
+      "extends": "base",
+      "distribution": "store"
+    }
+  },
+  "submit": {
+    "production": {
+      "android": { "track": "internal" },
+      "ios": {
+        "ascAppId": "1234567890",
+        "appleTeamId": "XXXXXXXXXX"
+      }
+    }
+  }
+}
+```
+
+### Profile Properties
+
+| Property | Description |
+|----------|-------------|
+| `extends` | Inherit settings from another profile (recursive) |
+| `environment` | Map to a Dashboard Secret Environment (`development`, `staging`, `production`). Defaults to profile name. |
+| `developmentClient` | `true` to build with `expo-dev-client` |
+| `distribution` | `internal` (TestFlight/Play Console) or `store` (Production) |
+| `preBuild` / `postBuild` | Reference a script or run a raw command |
+| `envGroups` | Array of environment group names to merge into this profile |
+
+### Platform Overrides
+
+Any property can be overridden per platform using `ios` or `android` blocks:
+
+```json
+{
+  "build": {
+    "development": {
+      "extends": "base",
+      "developmentClient": true,
+      "ios": {
+        "simulator": true,
+        "iosDeploymentTarget": "15.0"
+      }
+    }
+  }
+}
+```
+
+### Environment Groups
+
+Define reusable sets of environment variables shared across profiles:
+
+```json
+{
+  "envGroups": {
+    "common": {
+      "API_URL": "https://api.example.com"
+    }
+  },
+  "build": {
+    "production": {
+      "envGroups": ["common"]
+    }
+  }
+}
+```
+
+### Scripts
+
+Define custom build hooks:
+
+```json
+{
+  "scripts": {
+    "clean": "rm -rf ios/build android/app/build"
+  },
+  "build": {
+    "production": {
+      "preBuild": "scripts.clean"
     }
   }
 }
@@ -140,14 +272,32 @@ Define multiple build profiles for different environments:
 
 ## Environment Variables
 
+Mach allows you to securely inject secrets directly into your cloud builds without exposing them in your codebase. All secrets are fully encrypted using AES-256-GCM.
+
 ```bash
-# Set environment variables
+# Set environment variables for the project (Defaults to Secret mode)
 mach env set API_URL=https://api.example.com SECRET_KEY=xxx
 
 # List all variables
 mach env list
 ```
 
+### Android Keystore Passwords
+For maximum security, your Android Keystore (`.jks`) file is stored in a separate encrypted S3 bucket away from its passwords. 
+
+To provide your passwords to the Cloud Builder, you **must** define them as Mach Environment variables (Secrets). Mach will automatically securely decrypt and inject them during the Gradle build process.
+
+```bash
+# Set the master password for the keystore (used for both the Keystore and the Key Alias)
+mach env set KEYSTORE_PASSWORD_PRODUCTION=my_super_secret_password
+
+# If your Keystore password and Key Alias password differ, you can set both independently:
+mach env set KEYSTORE_PASSWORD_PRODUCTION=my_key_pass KEYSTORE_STORE_PASSWORD_PRODUCTION=my_store_pass
+```
+
+*(Note: Replace `PRODUCTION` with `STAGING` or `DEVELOPMENT` depending on your targeted build profile).*
+
+
 ## Development Server
 
 ```bash
@@ -172,6 +322,36 @@ mach audit --fix
 mach audit --json  # CI/CD friendly output
 ```
 
+## Authentication
+
+### Interactive Login
+
+```bash
+mach login
+```
+
+Credentials are stored in `~/.mach/credentials.json`.
+
+### CI/CD (Token-based)
+
+Set the `MACH_TOKEN` environment variable for non-interactive authentication:
+
+```bash
+export MACH_TOKEN=your-personal-access-token
+mach build --platform ios --profile production
+```
+
+Generate tokens from the Mach Dashboard under Settings > Personal Access Tokens.
+
+## Environment Variables Reference
+
+| Variable | Description |
+|----------|-------------|
+| `MACH_TOKEN` | Personal access token for CI/CD (skips login) |
+| `MACH_API_URL` | Override the API endpoint (default: `https://mach-api.securejs.in`) |
+| `MACH_DEBUG` | Enable debug logging |
+| `MACH_P12_PASSWORD` | iOS certificate password (avoids interactive prompt) |
+
 ## Requirements
 
 - Node.js 18+
@@ -185,4 +365,4 @@ ISC
 
 ---
 
-Built by [Radhya Softlabs](https://radhya.com)
+Built by [Radhya Softlabs](https://radhyasoftlabs.com)

package/dist/chunk-D7KD526W.js

@@ -0,0 +1,53 @@
+import{a as d,g as b}from"./chunk-YZYFEHP5.js";import{log as t,spinner as T,text as O,password as pe,select as K,confirm as ue,isCancel as V,cancel as _,intro as we,outro as ve,note as me}from"@clack/prompts";import{log as w,spinner as Q,text as J,select as q,isCancel as k,cancel as H,note as ee,confirm as Ae}from"@clack/prompts";import Z from"chalk";import{spawnSync as j}from"child_process";import v from"fs";import W from"path";import ne from"os";var ye="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";function te(){let a=W.join(ne.tmpdir(),d.nameLower);v.existsSync(a)||v.mkdirSync(a,{recursive:!0});let e=W.join(a,"manage_asc_keys.rb");return v.writeFileSync(e,Buffer.from(ye,"base64").toString("utf-8"),{mode:493}),e}function ie(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}var oe=async a=>{let e=Q(),r=a.platform,o=`./${d.configFileName}`;if(!v.existsSync(o)){w.error(`No ${d.configFileName} found. Run \`${d.nameLower} init\` or \`${d.nameLower} link\` first.`);return}let n=JSON.parse(v.readFileSync(o,"utf-8")),{projectId:c}=n;if(!c){w.error(`${d.configFileName} is missing projectId.`);return}let s=a.file;if(r==="ios"&&!s){let l=await q({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically (EAS-Style)",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F  Delete an existing Key"}]});if(k(l)){H("Operation cancelled");return}if(l==="magic"){await he(c,n);return}if(l==="delete"){await Se(c,n);return}}if(!s){let l=r==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";ee(`To submit to the ${r==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
+
+1. Open: ${Z.cyan(l)}
+`+(r==="ios"?`2. Generate an "App Store Connect API Key" with ${Z.bold("Admin")} role.
+3. Download the ${Z.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${Z.bold("JSON")} key.
+3. Download the ${Z.bold(".json")} file.`),"Guided Setup"),e.start("Scanning for downloaded keys...");let C=be(r);if(e.stop(C.length>0?`Detected ${C.length} potential key(s)`:"No keys detected automatically"),C.length>0){let h=await q({message:"Found these potential keys. Use one of them?",options:[...C.map(g=>({value:g.path,label:`${W.basename(g.path)} (${g.location})`})),{value:"manual",label:"Enter path manually..."}]});if(k(h)){H("Operation cancelled");return}h!=="manual"&&(s=h)}if(!s){let h=await J({message:`Paste the path to your ${r==="ios"?".p8":".json"} file:`,validate:g=>v.existsSync(g)?void 0:"File not found"});if(k(h)){H("Operation cancelled");return}s=h}}let p=a.issuerId,I=a.keyId;if(r==="ios"){if(!I&&s){let l=W.basename(s).match(/AuthKey_(.*)\.p8/);l&&(I=l[1],w.info(`Auto-detected Key ID from filename: ${Z.green(I)}`))}if(!p){let l=await J({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:C=>C.length>0?void 0:"Issuer ID is required"});if(k(l)){H("Operation cancelled");return}p=l}if(!I){let l=await J({message:"Enter App Store Connect Key ID:",validate:C=>C.length>0?void 0:"Key ID is required"});if(k(l)){H("Operation cancelled");return}I=l}}await se(c,s,r,p,I)};async function he(a,e){let r=Q(),o=e.submit?.production?.ios?.appleId,n=e.submit?.production?.ios?.appleTeamId;if(!o){let p=await J({message:"Apple ID:",placeholder:"your-email@example.com"});if(k(p))return;o=p,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=o,v.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}if(!n){let p=await J({message:"Apple Team ID:",placeholder:"e.g. 4523G95823"});if(k(p))return;n=p,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=n,v.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}let c=await J({message:"Enter a name for the new API Key:",initialValue:`[${d.name}] Project ${a}`});if(k(c))return;r.start("Authenticating with Apple and creating API Key...");let s=te();if(!v.existsSync(s)){w.error(`Magic Error: Helper script not found at ${s}`);return}try{let p=j("ruby",[s,"create",c],{env:{...ie(),FASTLANE_USER:o,FASTLANE_TEAM_ID:n},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),I=p.stdout||"",l=p.stderr||"";if(l&&(l.includes("DEBUG:")||l.includes("ERROR:"))&&l.split(`
+`).forEach(u=>{u.trim()&&w.info(Z.dim(`[Ruby] ${u.trim()}`))}),p.status!==0){r.stop("Failed"),w.error(`Magic creation failed: ${l}`);return}let C=I.match(new RegExp(`${d.jsonStartMarker}(.*)${d.jsonEndMarker}`));if(!C){r.stop("Parse Error"),w.error("Could not parse response from Apple Portal.");return}let h=JSON.parse(C[1]),{id:g,issuerId:y,keyContent:m}=h;if(r.stop("Key Created Successfully"),w.success(`\u2713 Created Key ID: ${Z.green(g)}`),!y){ee(`Your Issuer ID is shown at the top of:
+  ${Z.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
+
+It looks like: ${Z.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let u=await J({message:"Enter your App Store Connect Issuer ID:",validate:N=>N.trim().length>0?void 0:"Issuer ID is required"});if(k(u)){H("Operation cancelled.");return}y=u.trim()}if(m){let u=W.join(ne.tmpdir(),`AuthKey_${g}.p8`);v.writeFileSync(u,m),await se(a,u,"ios",y,g),v.unlinkSync(u)}else{w.warn(Z.yellow("\u26A0\uFE0F  Apple did not return the private key in the response.")),ee(`Download the .p8 file manually:
+
+  1. Open: ${Z.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
+  2. Find Key ID: ${Z.green(g)}
+  3. Click ${Z.bold("Download API Key")} (only available once)
+  4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let u=await J({message:"Path to the downloaded .p8 file (drag & drop here):",validate:N=>v.existsSync(N)?void 0:"File not found"});if(k(u)){H("Operation cancelled. Credential ID was registered but key content is missing.");return}await se(a,u,"ios",y,g)}}catch(p){r.stop("Error"),w.error(`Error: ${p.message}`)}}async function Se(a,e){let r=Q(),o=e.submit?.production?.ios?.appleId,n=e.submit?.production?.ios?.appleTeamId;if(!o){let s=await J({message:"Apple ID:"});if(k(s))return;o=s,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=o,v.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}if(!n){let s=await J({message:"Apple Team ID:"});if(k(s))return;n=s,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=n,v.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}r.start("Fetching existing API Keys...");let c=te();if(!v.existsSync(c)){w.error(`Magic Error: Helper script not found at ${c}`);return}try{let s=j("ruby",[c,"list"],{env:{...ie(),FASTLANE_USER:o,FASTLANE_TEAM_ID:n},stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(s.status!==0){r.stop("Failed"),w.error(`Listing failed: ${s.stderr}`);return}let p=s.stdout.match(new RegExp(`${d.jsonStartMarker}(.*)${d.jsonEndMarker}`));if(!p){r.stop("Parse Error");return}let I=JSON.parse(p[1]);if(r.stop(`Found ${I.length} keys`),I.length===0){w.info("No API Keys found on this team.");return}let l=await q({message:"Select a key to delete from Apple Developer Portal:",options:[...I.map(g=>({value:g.id,label:`ID: ${g.id} - ${g.name} (${g.role})`})),{value:"cancel",label:"Cancel"}]});if(k(l)||l==="cancel")return;let C=await Ae({message:`Are you sure you want to delete Key ${l}? This cannot be undone.`});if(!C||k(C))return;r.start(`Deleting Key ${l}...`);let h=j("ruby",[te(),"delete",l],{env:{...ie(),FASTLANE_USER:o,FASTLANE_TEAM_ID:n},stdio:"pipe",encoding:"utf-8"});h.status===0?(r.stop("Deleted"),w.success(`\u2713 Key ${l} has been removed from Apple Portal.`)):(r.stop("Deletion Failed"),w.error(`Error: ${h.stderr}`))}catch(s){r.stop("Error"),w.error(`Error: ${s.message}`)}}async function se(a,e,r,o,n){let c=Q();c.start(`Uploading Service Credentials for ${r}...`);try{let s=r==="ios"?"asc_api_key":"google_service_account",p=new URL(import.meta.url),I=W.dirname(p.pathname),l=[W.join(I,"isolated-upload.js"),W.join(I,"commands","isolated-upload.js"),W.resolve(I,"../commands/isolated-upload.js"),W.resolve(process.cwd(),`node_modules/.bin/${d.nameLower}-upload`)],C="";for(let g of l)if(v.existsSync(g)){C=g;break}if(!C)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let h=j("node",[C,a,e,s,"*","service","undefined","undefined",o||"undefined",n||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(h.status!==0){let g=h.stderr||h.stdout||"Unknown upload failure";c.stop("Upload Failed"),w.error(Z.red(`Upload Failed: ${g}`));return}h.stdout.includes("SUCCESS")?(c.stop("Upload Success"),w.success(Z.green(`\u2713 Service Credentials for ${r} uploaded successfully.`))):(c.stop("Upload Summary"),w.warn(Z.yellow(`Upload finished but success not confirmed: ${h.stdout}`)))}catch(s){c.stop("Upload Error"),w.error(Z.red(`Error: ${s.message}`))}}function be(a){let e=a==="ios"?".p8":".json",r=[],o=[{path:"./",label:"Project Root"},{path:W.join(ne.homedir(),"Downloads"),label:"Downloads"}];for(let n of o)if(v.existsSync(n.path))try{let c=v.readdirSync(n.path);for(let s of c)if(s.endsWith(e)){if(a==="android"&&!v.readFileSync(W.join(n.path,s),"utf8").includes("service_account")||a==="ios"&&!s.startsWith("AuthKey"))continue;r.push({path:W.join(n.path,s),location:n.label})}}catch{}return r}import Ie from"axios";import i from"chalk";import{execSync as $,spawnSync as M}from"child_process";import ce from"crypto";import f from"fs";import G from"path";import fe from"os";Ie.defaults.proxy=!1;function ae(a,e){if(!f.existsSync(a))return;let r=f.readdirSync(a);for(let o of r){let n=G.join(a,o);if(f.statSync(n).isDirectory()){let s=ae(n,e);if(s)return s}else if(e.test(o))return n}}var le=async a=>{we(i.bgCyan.black(d.cliTag("Credentials")));let e=await K({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});V(e)&&(_("Operation cancelled"),process.exit(0));let r=await K({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(o=>!(e==="android"&&(o.value==="service"&&(o.label="Google Service Account (JSON)"),o.value==="push")))});if((V(r)||r==="exit")&&(_("Operation cancelled"),process.exit(0)),r==="back")return le(a);if(r==="setup")await Re({...a,platform:e});else if(r==="download")await Ne({...a,platform:e});else if(r==="service")await oe({platform:e});else if(r==="push")return me("Push Notifications management is coming soon!","Coming Soon"),le(a);ve(i.green("Done!"))},Re=async a=>{let e=T(),r=a.platform,o=a.profile;if(!o){let p=await K({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});V(p)&&(_("Operation cancelled"),process.exit(0)),o=p}let n=`./${d.configFileName}`;if(!f.existsSync(n)){t.error(`No ${d.configFileName} found. Run \`${d.nameLower} init\` or \`${d.nameLower} link\` first.`);return}let c=JSON.parse(f.readFileSync(n,"utf-8")),{projectId:s}=c;if(!s){t.error(`${d.configFileName} is missing projectId.`);return}a.awsProfile&&t.warn(i.yellow(`Ignoring --aws-profile. Authenticating with ${d.name} Cloud...`)),t.info(i.dim(`Setting up credentials for: ${o}`)),r==="ios"?await Ze(s,o,a,c):await Ge(s,o,o==="production"?"store":"internal",a)};async function Ze(a,e,r,o){let n=r.bundleId||o.submit?.production?.ios?.bundleId||o.ios?.bundleId;if(!n){let I=await O({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:C=>C.includes(".")?void 0:"Please enter a valid Bundle ID"});V(I)&&(_("Operation cancelled"),process.exit(0)),n=I;let l=await ue({message:`Save this Bundle ID to ${d.configFileName} for future use?`,initialValue:!0});l&&!V(l)&&(o.submit||(o.submit={production:{ios:{}}}),o.submit.production||(o.submit.production={ios:{}}),o.submit.production.ios||(o.submit.production.ios={}),o.submit.production.ios.bundleId=n,f.writeFileSync(`./${d.configFileName}`,JSON.stringify(o,null,2)),t.success(i.green("\u2713 Bundle ID saved to config")))}t.info(i.dim(`Bundle ID: ${n}`));let c=e==="production"?"store":e==="staging"?"adhoc":"development",s=o.submit?.production?.ios?.appleId;s&&t.info(i.dim(`Using Apple ID from config: ${s}`)),await Ee(a,n,e,c,c==="store"?"appstore":c==="adhoc"?"adhoc":"development",r,o,s)}async function Ve(a){let e="MATCH_ENCRYPTION_PASSPHRASE";try{let s=((await b.get(`/projects/${a}/secrets/export?env=development`)).data.secrets||{})[e];if(s&&!s.includes("[Decryption Failed]"))return t.info(i.dim("Using existing encryption passphrase from Dashboard")),t.info(i.cyan(`MATCH_PASSWORD: ${s}`)),s;if(s&&s.includes("[Decryption Failed]")){t.warn(i.yellow("\u26A0\uFE0F  Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),t.info(i.dim("Generating a fresh passphrase and cleaning old certificates..."));let p=ce.randomBytes(32).toString("base64");try{await b.post(`/projects/${a}/secrets`,{key:e,value:p,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await b.post("/credentials/clean-match-storage",{projectId:a}),t.success(i.green("\u2713 Cleaned old certificates from storage"))}catch{}return p}}catch(n){t.info(i.dim(`Could not fetch existing passphrase from Dashboard: ${n.message}`))}let r=await K({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((V(r)||r==="cancel")&&(_("Operation cancelled"),process.exit(0)),r==="enter"){let n=await pe({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:s=>s.length>0?void 0:"Passphrase is required"});V(n)&&(_("Operation cancelled"),process.exit(0));let c=n;try{await b.post(`/projects/${a}/secrets`,{key:e,value:c,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),t.success(i.green("\u2713 Saved passphrase to Dashboard"))}catch{}return c}let o=ce.randomBytes(32).toString("base64");try{await b.post(`/projects/${a}/secrets`,{key:e,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 Generated and saved encryption passphrase to Dashboard")),t.info(i.cyan(`MATCH_PASSWORD: ${o}`))}catch(n){t.warn(i.yellow(`Could not save passphrase to Dashboard: ${n.message}`))}return o}async function Ee(a,e,r,o,n,c,s,p){let I=T();if(t.info(i.blue("Configuring iOS certificate management...")),!p){let l=await O({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:C=>C.includes("@")?void 0:"Please enter a valid email"});V(l)&&(_("Operation cancelled"),process.exit(0)),p=l,s.submit||(s.submit={production:{ios:{}}}),s.submit.production||(s.submit.production={ios:{}}),s.submit.production.ios||(s.submit.production.ios={}),s.submit.production.ios.appleId=p,f.writeFileSync(`./${d.configFileName}`,JSON.stringify(s,null,2)),t.success(i.green("\u2713 Apple ID saved to config"))}I.start(`Fetching ${n} certificates...`);try{let l=await Ve(a),C="",h="";try{let u=await b.post("/credentials/build-server-token",{projectId:a});u.data.status==="success"&&u.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=u.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=u.data.credentials.secretAccessKey,u.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=u.data.credentials.sessionToken),h=u.data.credentials.region||"ap-south-1",C=u.data.credentials.bucket||d.bucketPrefix,process.env.AWS_REGION=h,delete process.env.AWS_PROFILE)}catch(u){throw t.error(`Failed to authenticate with ${d.name} Cloud.`),u}if(!C||!h){t.error(`Failed to resolve S3 configuration from ${d.name} Cloud.`);return}let g=c.teamId||s.submit?.production?.ios?.appleTeamId;if(!g)try{let N=(await b.get(`/projects/${a}/secrets`)).data.secrets?.find(P=>P.key==="APPLE_TEAM_ID");N&&(g=N.value,t.info(i.dim(`Using Team ID from Dashboard: ${g}`)))}catch{}if(g&&g===s.submit?.production?.ios?.appleTeamId&&t.info(i.dim(`Using Apple Team ID from config: ${g}`)),!g){t.warn(i.yellow(`
+Apple Team ID is required to fetch certificates.`)),t.info(i.dim("You can find this at: https://developer.apple.com/account -> Membership Details"));let u=await O({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. 4523G95823",validate:N=>N.length===10?void 0:"Team ID must be exactly 10 characters"});V(u)&&(_("Operation cancelled"),process.exit(0)),g=u,await de(a,g)}I.stop("Starting certificate sync...");let y=d.credentialsKeychain,m=d.keychainPassword;try{let N=`${process.env.HOME||"/Users/"+(process.env.USER||d.nameLower)}/Library/Keychains/${y}`;t.info(i.dim(`Ensuring keychain exists: ${y}`));try{$(`security create-keychain -p ${m} ${y} 2>/dev/null || true`),$(`security unlock-keychain -p ${m} ${y}`),$(`security set-keychain-settings ${y}`);let A=$("security list-keychains -d user").toString();if(!A.includes(y)){t.info(i.dim(`Adding ${y} to search list`));let S=[...A.replace(/"/g,"").split(`
+`).map(X=>X.trim()).filter(X=>X.length>0),N].join(" ");$(`security list-keychains -d user -s ${S}`)}}catch(A){t.warn(i.dim("Keychain setup warning (non-critical): "+A.message))}let P="";try{P=(await b.get(`/projects/${a}/secrets/export?env=${r}`)).data.secrets?.IOS_P12_PASSWORD}catch{}if(!P){t.info(i.dim("Generating secure P12 export password...")),P=Ce();try{await b.post(`/projects/${a}/secrets`,{key:"IOS_P12_PASSWORD",value:P,type:"managed",description:"Password for exported iOS .p12 certificates",visibility:"secret",environment:"global"}),t.success(i.green("\u2713 Secure P12 password generated and saved."))}catch(A){t.warn(i.yellow(`Could not save P12 password to Dashboard: ${A.message}`))}}let F={...process.env,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:l,FASTLANE_USER:p,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:g,MATCH_KEYCHAIN_NAME:y,MATCH_KEYCHAIN_PASSWORD:m,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",CI:"1",MATCH_OUTPUT_PATH:G.join(process.cwd(),"temp_match"),MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:h,MATCH_S3_BUCKET:C,MATCH_S3_OBJECT_PREFIX:"ios-certificates/",MATCH_USERNAME:p,MATCH_APP_IDENTIFIER:e,MATCH_TYPE:n,[`${d.envPrefix}P12_PASSWORD`]:P};if(c.force){t.warn(i.yellow(`
+\u26A0\uFE0F  Force flag detected: Hard resetting ${n} certificates...`)),t.info(i.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),t.info(i.cyan(`Current MATCH_PASSWORD: ${l}`)),t.info(i.dim(`Cleaning match storage for Team ID: ${g}...`));try{(await b.post("/credentials/clean-match-storage",{projectId:a,teamId:g})).data.status==="success"&&t.success(i.green(`\u2713 Cleared S3 storage for Team ID: ${g}`))}catch(A){t.warn(i.yellow(`S3 cleanup via API failed: ${A.message}`)),t.info(i.dim("Continuing to attempt standard nuke..."))}try{$(`fastlane match nuke ${n} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:F}),t.success(i.green(`\u2713 Nuked existing ${n} credentials`))}catch{t.warn(i.yellow("Standard nuke failed (likely due to password mismatch).")),t.info(i.dim("Since S3 was cleared manually, proceeding to generation..."))}}if(n==="adhoc"||n==="development")try{t.info(i.blue("Fetching registered devices..."));let R=(await b.get("/devices")).data.devices||[];if(R.length===0)t.warn(i.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),t.info(i.dim(`Register devices with: ${d.nameLower} device register`));else{let{multiselect:S}=await import("@clack/prompts"),X=await S({message:`Select devices to include in the ${n} profile:`,options:R.map(B=>({value:B.udid,label:`${B.name} (${B.udid.substring(0,12)}...)`,hint:B.model||B.platform})),initialValues:R.map(B=>B.udid)});if(!V(X)&&X.length>0){let B=T();B.start("Registering devices on Apple Developer Portal...");for(let E of R.filter(z=>X.includes(z.udid)))try{$(`fastlane run register_device name:"${E.name}" udid:"${E.udid}"`,{env:F,stdio:"pipe",cwd:process.cwd()}),t.info(i.dim(`  Registered: ${E.name}`))}catch(z){!z.stdout?.includes("already exists")&&!z.stderr?.includes("already exists")?t.warn(i.yellow(`  Could not register ${E.name}: ${z.message}`)):t.info(i.dim(`  Already on Portal: ${E.name}`))}B.stop("Devices registered on Apple Developer Portal.")}}}catch(A){t.warn(i.yellow(`Could not fetch registered devices: ${A.message}`)),t.info(i.dim("Continuing without explicit device registration."))}try{let A=M(`fastlane match ${n} --app_identifier "${e}" --profile_name "${d.nameLower} ${n} ${e}"`,{shell:!0,cwd:process.cwd(),env:F,stdio:"inherit",encoding:"utf-8"});if(A.status!==0){t.warn(i.yellow(`
+Certificate sync failed. Attempting to create App ID and retry...`));try{$(`fastlane produce --app_identifier "${e}" --app_name "${e}" --skip_itc`,{stdio:"inherit",env:F}),t.success(i.green("\u2713 App ID created successfully")),t.info(i.blue("Retrying certificate sync...")),A=M(`fastlane match ${n} --app_identifier "${e}" --profile_name "${d.nameLower} ${n} ${e}"`,{shell:!0,cwd:process.cwd(),env:F,stdio:"inherit",encoding:"utf-8"})}catch{}if(A.status!==0)throw new Error("fastlane match failed")}}catch(A){t.warn(i.yellow(`
+Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),t.info(i.cyan(`Failed MATCH_PASSWORD was: ${l}`));let R=await K({message:"What would you like to do?",options:[{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal (Resolve certificate limits)",hint:"See if you have too many certificates"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(V(R)||R==="cancel")throw A;if(R==="retry_password"){t.info(i.dim(`
+You are overriding the dashboard passphrase for this session.`));let S=await pe({message:"Enter the correct MATCH_PASSWORD for this project:"});if(S&&!V(S)){l=S,t.info(i.blue("Retrying with provided passphrase...")),t.info(i.cyan(`New MATCH_PASSWORD: ${l}`));let X={...F,MATCH_PASSWORD:l};if(M(`fastlane match ${n}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:X}).status===0)await b.post(`/projects/${a}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:l,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 Dashboard passphrase updated.")),t.info(i.cyan(`MATCH_PASSWORD: ${l}`));else throw new Error("Sync failed again with provided passphrase.")}else throw A}else if(R==="check_portal")try{let S=await re(F,n);if(S.length>0){if(t.info(i.dim(`Found ${S.length} existing ${n} certificates on the portal.`)),await ke(n,F,a,S)&&(t.info(i.blue("Retrying certificate sync...")),M(`fastlane match ${n}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:F}).status!==0))throw new Error("Retry failed")}else throw t.error(i.red("No existing certificates found on portal to resolve.")),A}catch(S){throw t.warn(i.dim(`Portal check warning: ${S.message}`)),A}else throw A}t.success(i.green("\u2713 Certificates fetched and synced"));let D=G.join(process.cwd(),"temp_match"),Y=G.join(D,`${d.fastlanePrefix}_export.p12`),U=ae(D,/\.mobileprovision$/);try{let R=`${process.env.HOME||"/Users/"+(process.env.USER||d.nameLower)}/Library/Keychains/${y}`;f.existsSync(D)||f.mkdirSync(D,{recursive:!0}),t.info(i.dim("Exporting certificate from keychain for dashboard upload...")),$(`security export -k ${R} -t identities -f pkcs12 -o ${Y} -P ""`,{stdio:"ignore"})}catch{t.warn(i.dim("Could not export certificate from keychain."))}c.teamId&&!g&&await de(a,c.teamId);let x=f.existsSync(Y)?Y:ae(D,/\.p12$/);if(x&&U){let A,R;try{let S=await re(F,n);S.length>0&&(A=S[0].expires,R=S[0].id)}catch{t.warn(i.dim("Could not fetch expiration date or ID for dashboard record."))}await L(a,x,"ios_cert",e,o,void 0,A,c.teamId||g,R),await L(a,U,"ios_profile",e,o,void 0,A,c.teamId||g),t.success(i.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"));try{f.existsSync("./temp_match")&&f.rmSync("./temp_match",{recursive:!0,force:!0})}catch{}}else t.warn(i.yellow("Certificates generated but not found in expected location.")),t.info(i.dim("Falling back to manual upload...")),await ge(a,e,o)}catch(u){I.stop("Certificate fetch failed"),t.error(i.red(`Error: ${u.message}`)),t.info(i.dim("Falling back to manual upload...")),await ge(a,e,o)}}catch(l){I.stop("iOS setup failed"),t.error(i.red(`Error: ${l.message}`))}}async function de(a,e){try{await b.post(`/projects/${a}/secrets`,{key:"APPLE_TEAM_ID",value:e,description:"Apple Developer Team ID (used for iOS signing)"}),t.success(i.green(`\u2713 Saved Team ID ${e} to Dashboard`))}catch(r){t.warn(i.yellow(`Could not save Team ID to Dashboard: ${r.message}`))}}async function ge(a,e,r){t.info(i.yellow(`
+Manual Upload Mode`)),t.info("Please provide your certificate and provisioning profile:");let o=await O({message:"Path to .p12 certificate file:",validate:s=>f.existsSync(s)?void 0:"File not found"});V(o)&&(_("Operation cancelled"),process.exit(0));let n=await O({message:"Path to .mobileprovision file:",validate:s=>f.existsSync(s)?void 0:"File not found"});V(n)&&(_("Operation cancelled"),process.exit(0));let c=T();c.start(`Uploading to ${d.name} Dashboard...`);try{await L(a,o,"ios_cert",e,r),await L(a,n,"ios_profile",e,r),c.stop("Upload complete"),t.success(i.green("\u2713 iOS credentials uploaded successfully"))}catch(s){throw c.stop("Upload failed"),s}}async function Ge(a,e,r,o){let n=T();t.step(i.blue("Android Credential Setup"));try{let C=(await b.get(`/credentials/${a}`)).data.credentials||[],h=o.bundleId||"*",g=C.find(y=>y.platform==="android"&&y.distributionType===r&&(y.bundleId===h||y.bundleId==="*"||h==="*"));if(g){t.warn(i.yellow(`\u26A0\uFE0F  Existing Android credentials found for ${r}`));let y=await O({message:"What would you like to do? (use/new/cancel)",validate:m=>{let u=m.toLowerCase();if(!(u==="use"||u==="new"||u==="cancel"))return"Please type: use, new, or cancel"}});if(V(y)||y.toLowerCase()==="cancel")return;if(y.toLowerCase()==="use"){t.success(i.green("\u2713 Using existing credentials."));return}await b.delete(`/credentials/${g.credentialId}?projectId=${a}`)}}catch{}let c="./android/app/my-release-key.jks";if(f.existsSync(c)){let l=await ue({message:"Upload existing keystore?"});if(l&&!V(l)){let C=await O({message:"Key alias:",initialValue:"my-key-alias"});if(V(C))return;await L(a,c,"android_keystore",o.bundleId||"*",r,C),t.success(i.green("\u2713 Keystore uploaded"));return}}t.info(i.blue("Generating new Android keystore..."));let s=o.keyAlias||`${d.nameLower}-${Be()}`,p=Ce(),I=`./${d.nameLower}-${e}.jks`;f.existsSync(I)&&f.unlinkSync(I),n.start("Generating keystore...");try{let l=p.replace(/'/g,"'\\''");$(`keytool -genkeypair -v -keystore "${I}" -alias "${s}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${l}' -keypass '${l}' -dname "CN=${d.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),n.stop("Keystore generated"),await L(a,I,"android_keystore",o.bundleId||"*",r,s),await b.post(`/projects/${a}/secrets`,{key:`KEYSTORE_PASSWORD_${e.toUpperCase()}`,value:p,type:"managed",environment:e,visibility:"secret"}),await b.post(`/projects/${a}/secrets`,{key:`KEYSTORE_ALIAS_${e.toUpperCase()}`,value:s,type:"env",environment:e,visibility:"plain"}),t.success(i.green("\u2713 Android credentials uploaded successfully")),t.info(i.cyan(`Keystore Password: ${p}`)),t.info(i.cyan(`Key Alias: ${s}`))}catch(l){throw n.stop("Generation failed"),new Error(`Keystore generation failed: ${l.message}`)}}async function L(a,e,r,o,n,c,s,p,I){let l=G.basename(e);t.info(i.dim(`Uploading ${l} (Isolated process)...`));let C=new URL(import.meta.url),h=G.dirname(C.pathname),g=G.join(h,"commands","isolated-upload.js"),y=M("node",[g,a,e,r,o,n,c||"undefined",s||"undefined",p||"undefined",I||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(y.status!==0){let m=y.stderr||y.stdout||"Unknown isolated upload failure";throw t.error(i.red(`Isolated Upload Failed: ${m}`)),new Error(m)}y.stdout.includes("SUCCESS")?t.info(i.dim(`\u2713 ${l} uploaded and registered.`)):t.warn(i.yellow(`Isolated upload finished but success not confirmed: ${y.stdout}`))}async function Ne(a){let e=T(),r=a.platform,o=`./${d.configFileName}`;if(!f.existsSync(o)){t.error(`No ${d.configFileName} found. Run \`${d.nameLower} init\` or \`${d.nameLower} link\` first.`);return}let n=JSON.parse(f.readFileSync(o,"utf-8")),{projectId:c}=n;if(!c){t.error(`${d.configFileName} is missing projectId.`);return}try{e.start("Fetching project secrets...");let p=(await b.get(`/projects/${c}/secrets/export?env=all`)).data.secrets||{};e.stop("Secrets fetched and merged."),e.start("Fetching credentials...");let l=(await b.get(`/credentials/${c}`)).data.credentials||[];e.stop(`Found ${l.length} metadata records.`);let C=l.filter(m=>m.platform===r);if(C.length===0){t.info(`No ${r} credentials found on Dashboard.`);return}let h="./credentials.json",g={};if(f.existsSync(h))try{g=JSON.parse(f.readFileSync(h,"utf-8"))}catch{t.warn("Could not parse existing credentials.json, creating a new one.")}g[r]||(g[r]={});let y=G.join(process.cwd(),"credentials",r);f.existsSync(y)||f.mkdirSync(y,{recursive:!0});for(let m of C){e.start(`Downloading ${m.type} (${m.distributionType})...`);try{let u=await b.get(`/credentials/${m.credentialId}/download?projectId=${c}`);if(u.data.status==="success"&&u.data.downloadUrl){let N=G.join(process.cwd(),"credentials",r,m.distributionType);f.existsSync(N)||f.mkdirSync(N,{recursive:!0});let P=m.s3Key?.split(".").pop()||(m.type.includes("keystore")?"jks":m.type.includes("cert")?"p12":"mobileprovision"),F=`${m.type}.${P}`,D=G.join(N,F),Y=await Ie.get(u.data.downloadUrl,{responseType:"arraybuffer"});f.writeFileSync(D,Buffer.from(Y.data));let U=G.join("credentials",r,m.distributionType,F);if(r==="android"){if(m.type==="android_keystore"){let x=m.distributionType==="store"?"PRODUCTION":m.distributionType==="internal"?"STAGING":"DEVELOPMENT",A=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],R=[`KEYSTORE_PASSWORD_${x}`,`KEYSTORE_PASSWORD_${m.distributionType.toUpperCase()}`,...A.map(E=>`KEYSTORE_PASSWORD_${E}`),"ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],S=[`KEYSTORE_ALIAS_${x}`,`KEYSTORE_ALIAS_${m.distributionType.toUpperCase()}`,...A.map(E=>`KEYSTORE_ALIAS_${E}`),"KEYSTORE_ALIAS"],X=R.map(E=>p[E]).find(E=>!!E)||"",B=S.map(E=>p[E]).find(E=>!!E)||m.meta?.alias||"";g.android.keystore={keystorePath:U,keystorePassword:X,keyAlias:B,keyPassword:X}}}else if(r==="ios"){let x=m.distributionType==="store"?"production":m.distributionType==="adhoc"?"staging":"development";g.ios[x]||(g.ios[x]={}),m.type==="ios_cert"?(g.ios[x].certificatePath=U,g.ios[x].certificatePassword=p.IOS_P12_PASSWORD||""):m.type==="ios_profile"&&(g.ios[x].provisioningProfilePath=U)}e.stop(`\u2713 ${m.type} (${m.distributionType}) saved.`)}}catch(u){let N=u.response?.data?.message||u.message;e.stop(i.dim(`- Skipped ${m.type} (${m.distributionType}): ${N}`))}}f.writeFileSync(h,JSON.stringify(g,null,2)),t.success(i.green("\u2713 Local credentials.json updated.")),me("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(s){e.stop(i.red("Sync failed.")),t.error(`Error: ${s.message}`)}}function Ce(){let a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",e="";for(let r=0;r<24;r++)e+=a.charAt(Math.floor(Math.random()*a.length));return e}function Be(a=8){let e="abcdefghijklmnopqrstuvwxyz0123456789",r="";for(let o=0;o<a;o++)r+=e.charAt(Math.floor(Math.random()*e.length));return r}async function ke(a,e,r,o){let n=o||await re(e,a);if(!n||n.length===0)return!1;let c=await K({message:"Select a certificate to revoke:",options:[...n.map(s=>({value:`revoke:${s.id}`,label:`Revoke: ${s.name} (${s.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return V(c)||c==="cancel"?!1:c==="nuke"?($(`fastlane match nuke ${a}`,{stdio:"inherit",cwd:process.cwd(),env:e}),!0):typeof c=="string"&&c.startsWith("revoke:")?(await Fe(e,c.split(":")[1]),!0):!1}async function re(a,e){let r=e==="development"?"development":"distribution",o=`
+lane :${d.fastlanePrefix}_list_certs do
+  require 'spaceship'
+  require 'json'
+  begin
+    Spaceship::Portal.login(ENV['FASTLANE_USER'])
+    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
+    output = Spaceship::Portal.certificate.all.select { |c|
+      if "${r}" == "development"
+        c.type_display_id.downcase.include?("development")
+      else
+        c.type_display_id.downcase.include?("distribution") || c.type_display_id.downcase.include?("production")
+      end
+    }.map { |c| { id: c.id, name: c.name, expires: c.expires.strftime('%Y-%m-%d'), type: c.type_display_id } }
+    puts "${d.jsonStartMarker}" + output.to_json + "${d.jsonEndMarker}"
+  rescue => e
+    $stderr.puts "ERROR: #{e.message}"
+    exit 1
+  end
+end`,n=G.join(fe.tmpdir(),`/tmp/${d.nameLower}-list-certs-${Date.now()}`),c=G.join(n,"fastlane"),s=G.join(c,"Fastfile");try{f.existsSync(c)||f.mkdirSync(c,{recursive:!0}),f.writeFileSync(s,o);let I=$(`fastlane ${d.fastlanePrefix}_list_certs`,{env:{...a,CI:"1",FASTLANE_FASTFILE:s},cwd:n,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${d.jsonStartMarker}(.*)${d.jsonEndMarker}`));return I?JSON.parse(I[1]):[]}finally{f.existsSync(n)&&f.rmSync(n,{recursive:!0,force:!0})}}async function Fe(a,e){let r=`
+lane :${d.fastlanePrefix}_revoke_cert do
+  require 'spaceship'
+  begin
+    Spaceship::Portal.login(ENV['FASTLANE_USER'])
+    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
+    cert = Spaceship::Portal.certificate.all.find { |c| c.id == "${e}" }
+    cert.revoke! if cert
+  rescue => e
+    $stderr.puts "ERROR: #{e.message}"
+    exit 1
+  end
+end`,o=G.join(fe.tmpdir(),`/tmp/${d.nameLower}-revoke-cert-${Date.now()}`),n=G.join(o,"fastlane"),c=G.join(n,"Fastfile");try{f.existsSync(n)||f.mkdirSync(n,{recursive:!0}),f.writeFileSync(c,r),$(`fastlane ${d.fastlanePrefix}_revoke_cert`,{env:{...a,CI:"1",FASTLANE_FASTFILE:c},cwd:o,stdio:["inherit","pipe","inherit"]})}finally{f.existsSync(o)&&f.rmSync(o,{recursive:!0,force:!0})}}export{oe as a,le as b,Re as c,Ne as d};

package/dist/chunk-YZYFEHP5.js

@@ -0,0 +1,4 @@
+var n={name:"Mach",nameLower:"mach",nameUpper:"MACH",company:"Radhya Softlabs",npmScope:"@radhya",configFileName:"mach.config.json",configDir:".mach",workspacesDir:".mach-workspaces",remoteWorkspacesDir:"mach_workspaces",envPrefix:"MACH_",bucketPrefix:"mach-builds",buildPrefix:"mach-build",credentialsKeychain:"mach-credentials.keychain",keychainPassword:"mach",cliTag:e=>` Mach CLI - ${e} `,fastlanePrefix:"mach",jsonStartMarker:"___MACH_JSON_START___",jsonEndMarker:"___MACH_JSON_END___",prewarmedMarker:"/opt/mach-prewarmed"};import i from"fs";import f from"path";import h from"os";import x from"axios";var m=f.join(h.homedir(),n.configDir),u=f.join(m,"credentials.json");function k(e){i.existsSync(m)||i.mkdirSync(m,{recursive:!0}),i.writeFileSync(u,JSON.stringify(e,null,2))}function c(){if(!i.existsSync(u))return null;try{return JSON.parse(i.readFileSync(u,"utf-8"))}catch{return null}}function S(){let e=c();if(e?.token)return e;let r=process.env[`${n.envPrefix}TOKEN`];if(r)return{token:r,email:"token-auth"};console.error(`\x1B[31mAuthentication required.\x1B[0m Either:
+  1. Run \x1B[33m${n.nameLower} login\x1B[0m for interactive login
+  2. Set \x1B[33m${n.envPrefix}TOKEN\x1B[0m environment variable for CI/CD`),process.exit(1)}async function p(e){let r=c();if(!r||!r.refreshToken)return null;try{let t=await x.post(`${e}/refresh-token`,{username:r.email,refreshToken:r.refreshToken});if(t.data.status==="success"&&t.data.user){let s={...r,id:t.data.user.id||r.id,token:t.data.user.token,refreshToken:t.data.user.refreshToken||r.refreshToken};return k(s),s.token}}catch{}return null}import T from"axios";import _ from"dotenv";import d from"path";import{fileURLToPath as y}from"url";var A=d.dirname(y(import.meta.url));_.config({path:d.join(A,"../.env")});var o=process.env[`${n.envPrefix}API_URL`]||"https://mach-api.securejs.in",C=o.includes("3001")?o.replace("3001","8081"):o.replace("api.","dashboard."),$=process.env[`${n.envPrefix}DASHBOARD_URL`]||C;var a=T.create({baseURL:o,headers:{Connection:"close"}});a.interceptors.request.use(e=>{let t=c()?.token||process.env[`${n.envPrefix}TOKEN`];return t&&(e.headers.Authorization=`Bearer ${t}`),e},e=>Promise.reject(e));a.interceptors.response.use(e=>e,async e=>{let{config:r}=e;if((!e.response||e.code==="ECONNRESET"||e.code==="ETIMEDOUT")&&(!r._retryCount||r._retryCount<3)){r._retryCount=(r._retryCount||0)+1;let s=Math.pow(2,r._retryCount-1)*1e3;return console.warn(`\x1B[33m[NETWORK] Transient error (${e.code||"UNKNOWN"}). Retrying in ${s/1e3}s... (Attempt ${r._retryCount}/3)\x1B[0m`),await new Promise(l=>setTimeout(l,s)),a(r)}return Promise.reject(e)});a.interceptors.response.use(e=>e,async e=>{let r=e.config;if(e.response?.status===401&&!r._retry){if(r._retry=!0,process.env[`${n.envPrefix}TOKEN`])return console.error(`\x1B[31mAuthentication failed.\x1B[0m Your ${n.envPrefix}TOKEN may be invalid or expired.
+Generate a new token at the ${n.name} Dashboard \u2192 Settings \u2192 Access Tokens.`),Promise.reject(e);try{let s=await p(o);if(s)return r.headers.Authorization=`Bearer ${s}`,a(r)}catch(s){return Promise.reject(s)}}return Promise.reject(e)});export{n as a,k as b,c,S as d,o as e,$ as f,a as g};

package/dist/commands/isolated-upload.js

@@ -1 +1 @@
-(function(_0x117d54,_0x5a1718){function _0xa0cd1f(_0x1cc6cb,_0x1815bc){return _0xf958(_0x1cc6cb-0x6e,_0x1815bc);}const _0x464e32=_0x117d54();function _0x50f9ba(_0x25c3fa,_0x42a745){return _0xf958(_0x25c3fa-0x280,_0x42a745);}while(!![]){try{const _0x4864f0=parseInt(_0xa0cd1f(0x13c,'YkfV'))/(0x164*0x1c+0x1e56+0x1*-0x4545)*(parseInt(_0xa0cd1f(0x156,'3fUM'))/(0x6*-0x147+-0x159c+0x1d48))+-parseInt(_0x50f9ba(0x37a,'L^y5'))/(0x3*0xcc5+0x8c2+-0x2f0e)+parseInt(_0xa0cd1f(0x15d,'Bx@1'))/(0x1*0x157b+0x5f8+-0x1b6f)*(-parseInt(_0x50f9ba(0x37d,'#MmY'))/(-0x88c+0x64d+0x244*0x1))+parseInt(_0xa0cd1f(0x117,'$62x'))/(0x85d*-0x3+-0x2485+-0x157*-0x2e)+-parseInt(_0xa0cd1f(0x125,'tcxk'))/(-0x1b*-0x11+-0x4*0x881+0x6*0x560)*(parseInt(_0x50f9ba(0x32b,'lub%'))/(0x7e+-0xf03+0xe8d))+-parseInt(_0x50f9ba(0x333,'f8Zn'))/(0x1*-0x1de9+0x185d+0x595)*(parseInt(_0xa0cd1f(0x165,'^Cfe'))/(-0xb5*0x2f+-0x12*-0x34+0x1d9d))+parseInt(_0xa0cd1f(0x166,'i81#'))/(-0x1*-0x123a+-0x166b+0x43c);if(_0x4864f0===_0x5a1718)break;else _0x464e32['push'](_0x464e32['shift']());}catch(_0x3ee3ca){_0x464e32['push'](_0x464e32['shift']());}}}(_0x442c,0xcd9bc+-0x57a3+-0x216b5));function _0xf958(_0x3141a0,_0x1c7bb7){_0x3141a0=_0x3141a0-(-0x3d1*-0x7+-0x6c6+0x135*-0x10);const _0x333355=_0x442c();let _0x30218c=_0x333355[_0x3141a0];if(_0xf958['AgycpM']===undefined){var _0xe8ab12=function(_0x458fe0){const _0x2dee9f='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x2e9be5='',_0x163854='';for(let _0x145174=0x1b2e+0x2*0x85d+-0x2be8,_0x3fc6c7,_0x1996bb,_0x4d4b5e=-0x2*0xcbe+-0xd13*0x1+-0x1*-0x268f;_0x1996bb=_0x458fe0['charAt'](_0x4d4b5e++);~_0x1996bb&&(_0x3fc6c7=_0x145174%(0x2*0x839+-0x12a3+0x1*0x235)?_0x3fc6c7*(-0x1db8+-0xd21+0x2b19)+_0x1996bb:_0x1996bb,_0x145174++%(0x89*0x3d+-0x1d31+-0x58*0xa))?_0x2e9be5+=String['fromCharCode'](-0x132a+-0x1f76+0x339f&_0x3fc6c7>>(-(-0x1fe6+-0x7*0x1dc+-0x5c*-0x7d)*_0x145174&-0x1435+0xa4e+0x9ed)):0x13e6+0x2011*0x1+-0x33f7){_0x1996bb=_0x2dee9f['indexOf'](_0x1996bb);}for(let _0x1dbce0=0x186f+-0x1*0x21a9+-0x2*-0x49d,_0x3e97cd=_0x2e9be5['length'];_0x1dbce0<_0x3e97cd;_0x1dbce0++){_0x163854+='%'+('00'+_0x2e9be5['charCodeAt'](_0x1dbce0)['toString'](0x251+0x347*0x8+-0x1c79))['slice'](-(-0x41*-0x6b+0x2329*-0x1+0x800));}return decodeURIComponent(_0x163854);};const _0x37311a=function(_0x3436c4,_0x1c67fc){let _0x2f3013=[],_0x4e09fe=-0x13*-0x133+0x23*-0x12+0x1453*-0x1,_0x43c847,_0x57bb47='';_0x3436c4=_0xe8ab12(_0x3436c4);let _0x270bc3;for(_0x270bc3=-0x1a9a+-0xf93+0x2a2d;_0x270bc3<-0x7*0x4b3+0x1e00+0x3e5;_0x270bc3++){_0x2f3013[_0x270bc3]=_0x270bc3;}for(_0x270bc3=-0x8*-0x2e0+-0x2161+0x1*0xa61;_0x270bc3<0x82d+0x17be*-0x1+0x1091;_0x270bc3++){_0x4e09fe=(_0x4e09fe+_0x2f3013[_0x270bc3]+_0x1c67fc['charCodeAt'](_0x270bc3%_0x1c67fc['length']))%(-0xbcc+-0x6*0x5fd+0x56a*0x9),_0x43c847=_0x2f3013[_0x270bc3],_0x2f3013[_0x270bc3]=_0x2f3013[_0x4e09fe],_0x2f3013[_0x4e09fe]=_0x43c847;}_0x270bc3=0x9e*0x35+-0x1517*-0x1+-0x35cd,_0x4e09fe=0x520*-0x7+-0x139e+0x377e;for(let _0x372cbd=0x12ed+0x5*-0x42f+0x1fe;_0x372cbd<_0x3436c4['length'];_0x372cbd++){_0x270bc3=(_0x270bc3+(-0x13*0x5f+0x1409+-0xcfb))%(-0xb3c+-0x267d+0x32b9),_0x4e09fe=(_0x4e09fe+_0x2f3013[_0x270bc3])%(-0x303+0x1*-0x17f+0x582),_0x43c847=_0x2f3013[_0x270bc3],_0x2f3013[_0x270bc3]=_0x2f3013[_0x4e09fe],_0x2f3013[_0x4e09fe]=_0x43c847,_0x57bb47+=String['fromCharCode'](_0x3436c4['charCodeAt'](_0x372cbd)^_0x2f3013[(_0x2f3013[_0x270bc3]+_0x2f3013[_0x4e09fe])%(-0x14b7+-0x14ea+0x2aa1)]);}return _0x57bb47;};_0xf958['sjgSht']=_0x37311a,_0xf958['WemtCz']={},_0xf958['AgycpM']=!![];}const _0x4bcc7d=_0x333355[-0xdb3+0x1146+-0x393],_0x1a0d63=_0x3141a0+_0x4bcc7d,_0x3fd9a7=_0xf958['WemtCz'][_0x1a0d63];return!_0x3fd9a7?(_0xf958['gfhGiw']===undefined&&(_0xf958['gfhGiw']=!![]),_0x30218c=_0xf958['sjgSht'](_0x30218c,_0x1c7bb7),_0xf958['WemtCz'][_0x1a0d63]=_0x30218c):_0x30218c=_0x3fd9a7,_0x30218c;}import{e as _0x361ca5}from'../chunk-4ZWPER6A.js';import _0x1b8c26 from'fs';function _0x442c(){const _0x46a357=['WOldPwSaW7W','aHVdOZnGcCo2uG','EL81W5HMWQpcRvRdKCk4WO9yWPq','qx8NW5dcKW','W4NdJcNcTCorWOpdI8kuCbddVSoicW','zmkOWO7cG1i','wmkUW7FcPY4','W6pcO8o3WRis','vmoykuNcJG','WPhcJd9nWQmvBmkoWPK8uHGBzW','W6bWACo6ta','yCoRW6JdSq','nmkKW6L+EW','W6G3W43dU8ot','B8osDmo+W5a','WQxcHuxcNNhdTmkDWOfUWPi7W7a','pmo6W7S7AW','eCk9hwLP','W4qhW7FdICoi','W5ddIhG','bb/cNt0','Bmk/WO/cN0e','W67dO8ouW7pcMG','amodWP7cMq','W6ZcNg9mW7RdPhVdV2VdVWFdGq','WOtcIapdMmkB','ySoGWQ4KpCkkW45MCmkQASo+W6G','W6Hng8oZW7xcNSoQ','E8oaW4SYwW','W7vyCJNdSq','W57cT8o7WOKh','bgfYa8kD','rSoDtSoRW4y','pZhcSa','W5HdmrNdRq','F8koWO3dHYRcUt4','aHhcV3qxECkZc8o8W4fydr3cSG','W4HLWONcVG','iCo3W5W','hcn2WOpcICkrW4JcPKq9WRRdOGu','bJBdUSoW','pSkzWO3dJb0','W7ldGXZdJHC','WOhdRLijW7i','h21PfSka','kCkrW6GJqa','eHVcIdJdVq','C8oTW67dSZu','W5tcL8oaWPa','WP3cGxddUq','WPX0hSoHW7hcG8oH','rmoemq','zmoiW7xcRSoR','C8k/WP3cGq','WOZdIMKTW4q','WRm4o8ogW4K','bSkCfW','W47dNSkXF2DnW7ldNXFcOmoeWOlcJq','CdnHia','WQ/dKCocDfy','WPtcIJBdUmky','W5T5cmoMW44','W57cS8o7WRWo','omohW67cQmoQ','e3aSamkg','W6VdQmkmWPpdVCo1cmk0W4dcHmkKgmo7Dq','W57cGmkId8koWQhdGICKWRZcPSoKhtW','eHVcMIZdLa','WPpcG8kqWPldUCkgWPBdQCk1dx4DW68','iCk5W6HL','w1WPW5NdUq','FJfnWR0EW4BdTa','lSkmWOVdJbW','WOFcLW7dIhS','W7aHmvVcTG','WRFdNd0','vCkXW6a','W7XqvCohEG','WR7cU8oigbS','DCo3W6VdOIy','WOhdMhG','WPRcN8kSncO','u1RdPty','crFcGtNdIq','WO/cIXVdT2S','WOFcLq7dVW','W5VcICkBW5ddU3DXzLCtW5VcT8kg','sxuGW5xdIW','uuRdNM/cIXdcG8ocW49hlftdPG','p8kLW74','W6NcMX7cLty','WPNdUM8+W5D/ha','oSkmW5y0sW','qmoyWOtcSmkG','WQtdKuK0W6K','w2ZdUGz5','orTXf8k5WQGh','W7m4k1hcQW','W5GnW7hcPmkN'];_0x442c=function(){return _0x46a357;};return _0x442c();}import _0x2a8194 from'path';async function x(){const _0xb21969={};_0xb21969[_0x59a7ac(-0x319,'lub%')]=_0x59a7ac(-0x2d5,'XtC6')+_0x9fc4b7('E*TP',-0x16f)+_0x59a7ac(-0x2cd,'[pHg')+_0x59a7ac(-0x306,'rP%(')+_0x9fc4b7('oESs',-0x133),_0xb21969[_0x59a7ac(-0x2c3,'rP%(')]=_0x9fc4b7('$l(b',-0x160)+_0x9fc4b7('S)o]',-0x130)+_0x9fc4b7('@%Rf',-0x14a)+_0x59a7ac(-0x2c9,'(Ufs')+_0x9fc4b7('2r28',-0x131),_0xb21969[_0x59a7ac(-0x2f3,'L^y5')]=_0x59a7ac(-0x2bf,']ZpV'),_0xb21969[_0x9fc4b7('th2M',-0x158)]=function(_0x29c751,_0x107b53){return _0x29c751/_0x107b53;},_0xb21969[_0x9fc4b7('yMB]',-0x148)]=_0x9fc4b7('@%Rf',-0x16d)+_0x9fc4b7('oESs',-0x15e)+'ls';function _0x9fc4b7(_0x2c314c,_0x3cb6a9){return _0xf958(_0x3cb6a9- -0x21c,_0x2c314c);}_0xb21969[_0x9fc4b7('d3jF',-0x15c)]=function(_0x229bd0,_0x2d121f){return _0x229bd0===_0x2d121f;};function _0x59a7ac(_0x302aa4,_0x3343e5){return _0xf958(_0x302aa4- -0x3bf,_0x3343e5);}_0xb21969[_0x9fc4b7('OSO)',-0x156)]=_0x9fc4b7('Q]K8',-0x17a)+_0x59a7ac(-0x317,'jDcr'),_0xb21969[_0x59a7ac(-0x309,'S)o]')]=_0x59a7ac(-0x302,'yMB]')+'SS';const _0x5d5e4f=_0xb21969;let [_0x27c54e,_0x462628,_0x34f325,_0xf7dbea,_0x4497e3,_0x13c6ed,_0x4720a8,_0xdc63a2,_0x58cda]=process[_0x9fc4b7('Q]K8',-0x15b)][_0x59a7ac(-0x2ca,'XtC6')](-0x51*0x3e+0x263b+-0x1b1*0xb);try{let _0x1668c7=_0x2a8194[_0x59a7ac(-0x30b,']ZpV')+_0x59a7ac(-0x2d1,'583V')](_0x462628),_0x4209fc=_0x1b8c26[_0x9fc4b7('lub%',-0x138)+_0x59a7ac(-0x2c0,'jDcr')+'nc'](_0x462628),_0x2cd919=await _0x361ca5[_0x9fc4b7('T]5O',-0x121)](_0x5d5e4f[_0x59a7ac(-0x2dd,'(Ufs')],{'projectId':_0x27c54e,'fileName':_0x1668c7,'fileType':_0x5d5e4f[_0x59a7ac(-0x2f8,'583V')],'type':_0x34f325,'distributionType':_0x4497e3}),{uploadUrl:_0x539e51,key:_0x4f1aa4,fileId:_0x422902}=_0x2cd919[_0x9fc4b7('lub%',-0x152)];const _0x25659c={};_0x25659c[_0x9fc4b7('jQwk',-0x149)+_0x59a7ac(-0x2e7,'jQwk')+'pe']=_0x59a7ac(-0x318,'jDcr')+_0x9fc4b7('Iabb',-0x11e)+_0x59a7ac(-0x2d2,'W3Fp')+_0x59a7ac(-0x31b,'Bx@1')+_0x59a7ac(-0x2e4,'hkRX'),(await(await import(_0x5d5e4f[_0x59a7ac(-0x2dc,'K!Hz')]))[_0x9fc4b7('rP%(',-0x172)+'lt'][_0x9fc4b7('r2)C',-0x153)](_0x539e51,_0x4209fc,{'headers':_0x25659c,'maxContentLength':_0x5d5e4f[_0x59a7ac(-0x30e,'S)o]')](0x14c2+0x365+0x16*-0x119,-0x128a+-0x216d+0x33f7),'maxBodyLength':(-0x17be+-0xb44+0x2303)/(-0x2c4*0xb+0x18f8+0x574)}),await _0x361ca5[_0x9fc4b7('f8Zn',-0x12c)](_0x5d5e4f[_0x9fc4b7('tT1I',-0x12b)],{'projectId':_0x27c54e,'id':_0x422902,'name':_0x34f325+_0x59a7ac(-0x2e3,'2r28')+_0x4497e3,'type':_0x34f325,'bundleId':_0xf7dbea,'distributionType':_0x4497e3,'s3Key':_0x4f1aa4,'alias':_0x5d5e4f[_0x9fc4b7('S)o]',-0x13b)](_0x13c6ed,_0x5d5e4f[_0x9fc4b7('G#m1',-0x13c)])?void(-0x286+-0x19e6+-0x1c6c*-0x1):_0x13c6ed,'expiresAt':_0x5d5e4f[_0x9fc4b7('yMB]',-0x128)](_0x4720a8,_0x59a7ac(-0x2cc,'3fUM')+_0x9fc4b7('qlzI',-0x14f))?void(-0x19*0x2f+0x1*-0x1adb+0x1f72):_0x4720a8,'issuerId':_0xdc63a2===_0x5d5e4f[_0x9fc4b7('T6QE',-0x159)]?void(0x4*0x5c2+-0x1*0x11ba+-0x54e):_0xdc63a2,'keyId':_0x58cda===_0x5d5e4f[_0x9fc4b7('th2M',-0x146)]?void(-0x2*0xa6f+-0x1*0x166d+0x1*0x2b4b):_0x58cda}),console[_0x9fc4b7('$l(b',-0x11a)](_0x5d5e4f[_0x9fc4b7('tcxk',-0x16a)]),process[_0x59a7ac(-0x2d8,'[pHg')](0xc*-0x151+-0x3*0x23+-0x1035*-0x1));}catch(_0x3dd56d){_0x3dd56d[_0x9fc4b7('lub%',-0x123)+_0x9fc4b7('S)o]',-0x179)]?console[_0x59a7ac(-0x2fd,'T]5O')](_0x59a7ac(-0x31e,'Bx@1')+_0x9fc4b7('W[ov',-0x16c)+'\x20'+_0x3dd56d[_0x59a7ac(-0x2ea,'(Ufs')+_0x59a7ac(-0x313,'T]5O')][_0x9fc4b7('Q]K8',-0x137)+'s']+_0x9fc4b7('9TRk',-0x145)+JSON[_0x59a7ac(-0x2e0,'Iabb')+_0x9fc4b7('7K)6',-0x13e)](_0x3dd56d[_0x9fc4b7('d3jF',-0x119)+_0x59a7ac(-0x2be,'YkfV')][_0x59a7ac(-0x2d9,'yMB]')])):console[_0x9fc4b7('2r28',-0x161)](_0x59a7ac(-0x2f7,'T6QE')+_0x9fc4b7('I5lp',-0x14d)+_0x59a7ac(-0x30a,'T6QE')+_0x3dd56d[_0x9fc4b7('2r28',-0x151)+'ge']),process[_0x59a7ac(-0x31a,'tcxk')](0x5*0x631+-0x7*0x397+0x7*-0xd5);}}x();
+import{g as s}from"../chunk-YZYFEHP5.js";import g from"fs";import E from"path";async function S(){let[o,r,a,m,i,d,l,p,f]=process.argv.slice(2);try{let e=E.basename(r),y=g.readFileSync(r),I=await s.post("/credentials/upload-url",{projectId:o,fileName:e,fileType:"application/octet-stream",type:a,distributionType:i}),{uploadUrl:h,key:R,fileId:w}=I.data,x=(await import("axios")).default,c=!1,u=null;for(let t=1;t<=3;t++)try{t>1&&await new Promise(n=>setTimeout(n,2e3*t)),await x.put(h,y,{headers:{"Content-Type":"application/octet-stream"},maxContentLength:1/0,maxBodyLength:1/0,timeout:6e4}),c=!0;break}catch(n){u=n}if(!c)throw u;await s.post("/credentials",{projectId:o,id:w,name:`${a} - ${i}`,type:a,bundleId:m,distributionType:i,s3Key:R,alias:d==="undefined"?void 0:d,expiresAt:l==="undefined"?void 0:l,issuerId:p==="undefined"?void 0:p,keyId:f==="undefined"?void 0:f}),console.log("SUCCESS"),process.exit(0)}catch(e){e.response?console.error(`API_ERROR: ${e.response.status} - ${JSON.stringify(e.response.data)}`):console.error(`NETWORK_ERROR: ${e.message}`),process.exit(1)}}S();

package/dist/credentials-VVP34VBE.js

@@ -0,0 +1 @@
+import{b as a,c as b,d as c}from"./chunk-D7KD526W.js";import"./chunk-YZYFEHP5.js";export{a as credentialsMainCommand,b as credentialsSetupCommand,c as downloadCredentialsCommand};