@radhya/mach 1.4.24 → 1.4.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,25 +1,25 @@
|
|
|
1
|
-
import{a as p,g as R}from"./chunk-YZYFEHP5.js";import{log as t,spinner as z,text as J,password as de,select as T,confirm as Re,isCancel as v,cancel as G,intro as Ze,outro as Ve,note as Ie}from"@clack/prompts";import{log as Z,spinner as ee,text as P,select as te,isCancel as _,cancel as U,note as ie,confirm as he}from"@clack/prompts";import N from"chalk";import{spawnSync as q}from"child_process";import E from"fs";import X from"path";import re from"os";var Se="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";function ne(){let a=X.join(re.tmpdir(),p.nameLower);E.existsSync(a)||E.mkdirSync(a,{recursive:!0});let e=X.join(a,"manage_asc_keys.rb");return E.writeFileSync(e,Buffer.from(Se,"base64").toString("utf-8"),{mode:493}),e}function se(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}var pe=async a=>{let e=ee(),r=a.platform,c=`./${p.configFileName}`;if(!E.existsSync(c)){Z.error(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`);return}let s=JSON.parse(E.readFileSync(c,"utf-8")),{projectId:o}=s;if(!o){Z.error(`${p.configFileName} is missing projectId.`);return}let i=a.file;if(r==="ios"&&!i){let g=await te({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically (EAS-Style)",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F Delete an existing Key"}]});if(_(g)){U("Operation cancelled");return}if(g==="magic"){await be(o,s);return}if(g==="delete"){await we(o,s);return}}if(!i){let g=r==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";ie(`To submit to the ${r==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
|
|
1
|
+
import{a as p,g as R}from"./chunk-YZYFEHP5.js";import{log as t,spinner as z,text as J,password as de,select as O,confirm as Re,isCancel as v,cancel as G,intro as Ze,outro as Ve,note as Ie}from"@clack/prompts";import{log as Z,spinner as ee,text as P,select as te,isCancel as _,cancel as K,note as ie,confirm as he}from"@clack/prompts";import k from"chalk";import{spawnSync as q}from"child_process";import E from"fs";import $ from"path";import re from"os";var Se="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";function ne(){let a=$.join(re.tmpdir(),p.nameLower);E.existsSync(a)||E.mkdirSync(a,{recursive:!0});let e=$.join(a,"manage_asc_keys.rb");return E.writeFileSync(e,Buffer.from(Se,"base64").toString("utf-8"),{mode:493}),e}function se(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}var pe=async a=>{let e=ee(),r=a.platform,c=`./${p.configFileName}`;if(!E.existsSync(c)){Z.error(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`);return}let s=JSON.parse(E.readFileSync(c,"utf-8")),{projectId:o}=s;if(!o){Z.error(`${p.configFileName} is missing projectId.`);return}let i=a.file;if(r==="ios"&&!i){let g=await te({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically (EAS-Style)",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F Delete an existing Key"}]});if(_(g)){K("Operation cancelled");return}if(g==="magic"){await be(o,s);return}if(g==="delete"){await we(o,s);return}}if(!i){let g=r==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";ie(`To submit to the ${r==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
|
|
2
2
|
|
|
3
|
-
1. Open: ${
|
|
4
|
-
`+(r==="ios"?`2. Generate an "App Store Connect API Key" with ${
|
|
5
|
-
3. Download the ${
|
|
6
|
-
3. Download the ${
|
|
7
|
-
`).forEach(S=>{S.trim()&&Z.info(
|
|
8
|
-
${
|
|
3
|
+
1. Open: ${k.cyan(g)}
|
|
4
|
+
`+(r==="ios"?`2. Generate an "App Store Connect API Key" with ${k.bold("Admin")} role.
|
|
5
|
+
3. Download the ${k.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${k.bold("JSON")} key.
|
|
6
|
+
3. Download the ${k.bold(".json")} file.`),"Guided Setup"),e.start("Scanning for downloaded keys...");let d=ve(r);if(e.stop(d.length>0?`Detected ${d.length} potential key(s)`:"No keys detected automatically"),d.length>0){let I=await te({message:"Found these potential keys. Use one of them?",options:[...d.map(l=>({value:l.path,label:`${$.basename(l.path)} (${l.location})`})),{value:"manual",label:"Enter path manually..."}]});if(_(I)){K("Operation cancelled");return}I!=="manual"&&(i=I)}if(!i){let I=await P({message:`Paste the path to your ${r==="ios"?".p8":".json"} file:`,validate:l=>E.existsSync(l)?void 0:"File not found"});if(_(I)){K("Operation cancelled");return}i=I}}let u=a.issuerId,C=a.keyId;if(r==="ios"){if(!C&&i){let g=$.basename(i).match(/AuthKey_(.*)\.p8/);g&&(C=g[1],Z.info(`Auto-detected Key ID from filename: ${k.green(C)}`))}if(!u){let g=await P({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:d=>d.length>0?void 0:"Issuer ID is required"});if(_(g)){K("Operation cancelled");return}u=g}if(!C){let g=await P({message:"Enter App Store Connect Key ID:",validate:d=>d.length>0?void 0:"Key ID is required"});if(_(g)){K("Operation cancelled");return}C=g}}await ae(o,i,r,u,C)};async function be(a,e){let r=ee(),c=e.submit?.production?.ios?.appleId,s=e.submit?.production?.ios?.appleTeamId;if(!c){let u=await P({message:"Apple ID:",placeholder:"your-email@example.com"});if(_(u))return;c=u,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=c,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}if(!s){let u=await P({message:"Apple Team ID:",placeholder:"e.g. 4523G95823"});if(_(u))return;s=u,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=s,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}let o=await P({message:"Enter a name for the new API Key:",initialValue:`[${p.name}] Project ${a}`});if(_(o))return;r.start("Authenticating with Apple and creating API Key...");let i=ne();if(!E.existsSync(i)){Z.error(`Magic Error: Helper script not found at ${i}`);return}try{let u=q("ruby",[i,"create",o],{env:{...se(),FASTLANE_USER:c,FASTLANE_TEAM_ID:s},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),C=u.stdout||"",g=u.stderr||"";if(g&&(g.includes("DEBUG:")||g.includes("ERROR:"))&&g.split(`
|
|
7
|
+
`).forEach(S=>{S.trim()&&Z.info(k.dim(`[Ruby] ${S.trim()}`))}),u.status!==0){r.stop("Failed"),Z.error(`Magic creation failed: ${g}`);return}let d=C.match(new RegExp(`${p.jsonStartMarker}(.*)${p.jsonEndMarker}`));if(!d){r.stop("Parse Error"),Z.error("Could not parse response from Apple Portal.");return}let I=JSON.parse(d[1]),{id:l,issuerId:f,keyContent:m}=I;if(r.stop("Key Created Successfully"),Z.success(`\u2713 Created Key ID: ${k.green(l)}`),!f){ie(`Your Issuer ID is shown at the top of:
|
|
8
|
+
${k.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
|
|
9
9
|
|
|
10
|
-
It looks like: ${
|
|
10
|
+
It looks like: ${k.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let S=await P({message:"Enter your App Store Connect Issuer ID:",validate:b=>b.trim().length>0?void 0:"Issuer ID is required"});if(_(S)){K("Operation cancelled.");return}f=S.trim()}if(m){let S=$.join(re.tmpdir(),`AuthKey_${l}.p8`);E.writeFileSync(S,m),await ae(a,S,"ios",f,l),E.unlinkSync(S)}else{Z.warn(k.yellow("\u26A0\uFE0F Apple did not return the private key in the response.")),ie(`Download the .p8 file manually:
|
|
11
11
|
|
|
12
|
-
1. Open: ${
|
|
13
|
-
2. Find Key ID: ${
|
|
14
|
-
3. Click ${
|
|
15
|
-
4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let S=await P({message:"Path to the downloaded .p8 file (drag & drop here):",validate:b=>E.existsSync(b)?void 0:"File not found"});if(_(S)){U("Operation cancelled. Credential ID was registered but key content is missing.");return}await ae(a,S,"ios",I,l)}}catch(u){r.stop("Error"),Z.error(`Error: ${u.message}`)}}async function we(a,e){let r=ee(),c=e.submit?.production?.ios?.appleId,s=e.submit?.production?.ios?.appleTeamId;if(!c){let i=await P({message:"Apple ID:"});if(_(i))return;c=i,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=c,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}if(!s){let i=await P({message:"Apple Team ID:"});if(_(i))return;s=i,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=s,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}r.start("Fetching existing API Keys...");let o=ne();if(!E.existsSync(o)){Z.error(`Magic Error: Helper script not found at ${o}`);return}try{let i=q("ruby",[o,"list"],{env:{...se(),FASTLANE_USER:c,FASTLANE_TEAM_ID:s},stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(i.status!==0){r.stop("Failed"),Z.error(`Listing failed: ${i.stderr}`);return}let u=i.stdout.match(new RegExp(`${p.jsonStartMarker}(.*)${p.jsonEndMarker}`));if(!u){r.stop("Parse Error");return}let C=JSON.parse(u[1]);if(r.stop(`Found ${C.length} keys`),C.length===0){Z.info("No API Keys found on this team.");return}let g=await te({message:"Select a key to delete from Apple Developer Portal:",options:[...C.map(l=>({value:l.id,label:`ID: ${l.id} - ${l.name} (${l.role})`})),{value:"cancel",label:"Cancel"}]});if(_(g)||g==="cancel")return;let d=await he({message:`Are you sure you want to delete Key ${g}? This cannot be undone.`});if(!d||_(d))return;r.start(`Deleting Key ${g}...`);let m=q("ruby",[ne(),"delete",g],{env:{...se(),FASTLANE_USER:c,FASTLANE_TEAM_ID:s},stdio:"pipe",encoding:"utf-8"});m.status===0?(r.stop("Deleted"),Z.success(`\u2713 Key ${g} has been removed from Apple Portal.`)):(r.stop("Deletion Failed"),Z.error(`Error: ${m.stderr}`))}catch(i){r.stop("Error"),Z.error(`Error: ${i.message}`)}}async function ae(a,e,r,c,s){let o=ee();o.start(`Uploading Service Credentials for ${r}...`);try{let i=r==="ios"?"asc_api_key":"google_service_account",u=new URL(import.meta.url),C=X.dirname(u.pathname),g=[X.join(C,"isolated-upload.js"),X.join(C,"commands","isolated-upload.js"),X.resolve(C,"../commands/isolated-upload.js"),X.resolve(process.cwd(),`node_modules/.bin/${p.nameLower}-upload`)],d="";for(let l of g)if(E.existsSync(l)){d=l;break}if(!d)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let m=q("node",[d,a,e,i,"*","service","undefined","undefined",c||"undefined",s||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(m.status!==0){let l=m.stderr||m.stdout||"Unknown upload failure";o.stop("Upload Failed"),Z.error(N.red(`Upload Failed: ${l}`));return}m.stdout.includes("SUCCESS")?(o.stop("Upload Success"),Z.success(N.green(`\u2713 Service Credentials for ${r} uploaded successfully.`))):(o.stop("Upload Summary"),Z.warn(N.yellow(`Upload finished but success not confirmed: ${m.stdout}`)))}catch(i){o.stop("Upload Error"),Z.error(N.red(`Error: ${i.message}`))}}function ve(a){let e=a==="ios"?".p8":".json",r=[],c=[{path:"./",label:"Project Root"},{path:X.join(re.homedir(),"Downloads"),label:"Downloads"}];for(let s of c)if(E.existsSync(s.path))try{let o=E.readdirSync(s.path);for(let i of o)if(i.endsWith(e)){if(a==="android"&&!E.readFileSync(X.join(s.path,i),"utf8").includes("service_account")||a==="ios"&&!i.startsWith("AuthKey"))continue;r.push({path:X.join(s.path,i),location:s.label})}}catch{}return r}import Ce from"axios";import n from"chalk";import{execSync as W,spawnSync as L}from"child_process";import oe from"crypto";import A from"fs";import V from"path";import ge from"os";Ce.defaults.proxy=!1;function ce(a,e){if(!A.existsSync(a))return;let r=A.readdirSync(a);for(let c of r){let s=V.join(a,c);if(A.statSync(s).isDirectory()){let i=ce(s,e);if(i)return i}else if(e.test(c))return s}}function Ee(a,e,r){let c=A.readFileSync(r,"utf8"),s=Math.floor(Date.now()/1e3),o=Buffer.from(JSON.stringify({alg:"ES256",kid:a,typ:"JWT"})).toString("base64url"),i=Buffer.from(JSON.stringify({iss:e,iat:s,exp:s+1200,aud:"appstoreconnect-v1"})).toString("base64url"),u=`${o}.${i}`,C=oe.createSign("SHA256");C.update(u);let g=C.sign({key:c,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${u}.${g}`}async function Ne(a,e,r,c){let s=Ee(e,r,c),o=(await import("axios")).default;for(let i of a)try{await o.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:i.name,udid:i.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${s}`,"Content-Type":"application/json"}}),t.info(n.dim(` \u2713 Registered: ${i.name}`))}catch(u){let C=u.response?.data?.errors;C?.some(d=>d.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||d.detail?.toLowerCase().includes("already registered")||d.detail?.toLowerCase().includes("already exists"))?t.info(n.dim(` Already on Portal: ${i.name}`)):t.warn(n.yellow(` Could not register ${i.name}: ${C?.[0]?.detail||u.message}`))}}var ue=async a=>{Ze(n.bgCyan.black(p.cliTag("Credentials")));let e=await T({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});v(e)&&(G("Operation cancelled"),process.exit(0));let r=await T({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(c=>!(e==="android"&&(c.value==="service"&&(c.label="Google Service Account (JSON)"),c.value==="push")))});if((v(r)||r==="exit")&&(G("Operation cancelled"),process.exit(0)),r==="back")return ue(a);if(r==="setup")await ke({...a,platform:e});else if(r==="download")await Xe({...a,platform:e});else if(r==="service")await pe({platform:e});else if(r==="push")return Ie("Push Notifications management is coming soon!","Coming Soon"),ue(a);Ve(n.green("Done!"))},ke=async a=>{let e=z(),r=a.platform,c=a.profile;if(!c){let u=await T({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});v(u)&&(G("Operation cancelled"),process.exit(0)),c=u}let s=`./${p.configFileName}`;if(!A.existsSync(s)){t.error(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`);return}let o=JSON.parse(A.readFileSync(s,"utf-8")),{projectId:i}=o;if(!i){t.error(`${p.configFileName} is missing projectId.`);return}a.awsProfile&&t.warn(n.yellow(`Ignoring --aws-profile. Authenticating with ${p.name} Cloud...`)),t.info(n.dim(`Setting up credentials for: ${c}`)),r==="ios"?await Ge(i,c,a,o):await _e(i,c,c==="production"?"store":"internal",a)};async function Ge(a,e,r,c){let s=r.bundleId;if(!s){let C=c.submit?.production?.ios?.bundleId||c.ios?.bundleId,g=[];try{let m=(await R.get(`/credentials/${a}`)).data.credentials||[];g=[...new Set(m.filter(l=>l.platform==="ios"&&l.bundleId&&l.bundleId!=="*").map(l=>l.bundleId))]}catch{}if(C&&!g.includes(C)&&g.unshift(C),g.length>0){let d=[...g.map(l=>({value:l,label:l,hint:l===C?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],m=await T({message:"Which Bundle ID are you setting up credentials for?",options:d});if(v(m)&&(G("Operation cancelled"),process.exit(0)),m==="__new__"){let l=await J({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:I=>I.includes(".")?void 0:"Please enter a valid Bundle ID"});v(l)&&(G("Operation cancelled"),process.exit(0)),s=l}else s=m}else{let d=await J({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:m=>m.includes(".")?void 0:"Please enter a valid Bundle ID"});v(d)&&(G("Operation cancelled"),process.exit(0)),s=d}}t.info(n.dim(`Bundle ID: ${s}`));let o=e==="production"?"store":e==="staging"?"adhoc":"development",i=c.submit?.production?.ios?.appleId;i&&t.info(n.dim(`Using Apple ID from config: ${i}`)),await Fe(a,s,e,o,o==="store"?"appstore":o==="adhoc"?"adhoc":"development",r,c,i)}async function Be(a){let e="MATCH_ENCRYPTION_PASSPHRASE";try{let i=((await R.get(`/projects/${a}/secrets/export?env=development`)).data.secrets||{})[e];if(i&&!i.includes("[Decryption Failed]"))return t.info(n.dim("Using existing encryption passphrase from Dashboard")),t.info(n.cyan(`MATCH_PASSWORD: ${i}`)),i;if(i&&i.includes("[Decryption Failed]")){t.warn(n.yellow("\u26A0\uFE0F Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),t.info(n.dim("Generating a fresh passphrase and cleaning old certificates..."));let u=oe.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:u,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(n.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await R.post("/credentials/clean-match-storage",{projectId:a}),t.success(n.green("\u2713 Cleaned old certificates from storage"))}catch{}return u}}catch(s){t.info(n.dim(`Could not fetch existing passphrase from Dashboard: ${s.message}`))}let r=await T({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((v(r)||r==="cancel")&&(G("Operation cancelled"),process.exit(0)),r==="enter"){let s=await de({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:i=>i.length>0?void 0:"Passphrase is required"});v(s)&&(G("Operation cancelled"),process.exit(0));let o=s;try{await R.post(`/projects/${a}/secrets`,{key:e,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),t.success(n.green("\u2713 Saved passphrase to Dashboard"))}catch{}return o}let c=oe.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:c,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(n.green("\u2713 Generated and saved encryption passphrase to Dashboard")),t.info(n.cyan(`MATCH_PASSWORD: ${c}`))}catch(s){t.warn(n.yellow(`Could not save passphrase to Dashboard: ${s.message}`))}return c}async function Fe(a,e,r,c,s,o,i,u){let C=z();t.info(n.blue("Configuring iOS certificate management..."));let g;if(!u){let d=await J({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:m=>m.includes("@")?void 0:"Please enter a valid email"});v(d)&&(G("Operation cancelled"),process.exit(0)),u=d,i.submit||(i.submit={production:{ios:{}}}),i.submit.production||(i.submit.production={ios:{}}),i.submit.production.ios||(i.submit.production.ios={}),i.submit.production.ios.appleId=u,A.writeFileSync(`./${p.configFileName}`,JSON.stringify(i,null,2)),t.success(n.green("\u2713 Apple ID saved to config"))}C.start(`Fetching ${s} certificates...`);try{let d=await Be(a),m="",l="";try{let b=await R.post("/credentials/build-server-token",{projectId:a});b.data.status==="success"&&b.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=b.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=b.data.credentials.secretAccessKey,b.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=b.data.credentials.sessionToken),l=b.data.credentials.region||"ap-south-1",m=b.data.credentials.bucket||p.bucketPrefix,process.env.AWS_REGION=l,delete process.env.AWS_PROFILE)}catch(b){throw t.error(`Failed to authenticate with ${p.name} Cloud.`),b}if(!m||!l){t.error(`Failed to resolve S3 configuration from ${p.name} Cloud.`);return}let I=o.teamId||i.submit?.production?.ios?.appleTeamId;if(!I)try{let D=(await R.get(`/projects/${a}/secrets`)).data.secrets?.find($=>$.key==="APPLE_TEAM_ID");D&&(I=D.value,t.info(n.dim(`Using Team ID from Dashboard: ${I}`)))}catch{}if(I&&I===i.submit?.production?.ios?.appleTeamId&&t.info(n.dim(`Using Apple Team ID from config: ${I}`)),!I){t.warn(n.yellow(`
|
|
16
|
-
Apple Team ID is required to fetch certificates.`)),t.info(n.dim("You can find this at: https://developer.apple.com/account \u2192 Membership Details"));let b=await J({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:D=>D.length===10?void 0:"Team ID must be exactly 10 characters"});v(b)&&(G("Operation cancelled"),process.exit(0)),
|
|
17
|
-
`).map(
|
|
18
|
-
\u26A0\uFE0F Force flag detected: Hard resetting ${s} certificates...`)),t.info(n.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),t.info(n.cyan(`Current MATCH_PASSWORD: ${d}`)),t.info(n.dim(`Cleaning match storage for Team ID: ${
|
|
19
|
-
Certificate sync failed. Attempting to create App ID and retry...`));try{
|
|
20
|
-
Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),t.info(n.cyan(`Failed MATCH_PASSWORD was: ${d}`));let w=await
|
|
21
|
-
You are overriding the dashboard passphrase for this session.`));let
|
|
22
|
-
Manual Upload Mode`)),t.info("Please provide your certificate and provisioning profile:");let c=await J({message:"Path to .p12 certificate file:",validate:i=>
|
|
12
|
+
1. Open: ${k.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
|
|
13
|
+
2. Find Key ID: ${k.green(l)}
|
|
14
|
+
3. Click ${k.bold("Download API Key")} (only available once)
|
|
15
|
+
4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let S=await P({message:"Path to the downloaded .p8 file (drag & drop here):",validate:b=>E.existsSync(b)?void 0:"File not found"});if(_(S)){K("Operation cancelled. Credential ID was registered but key content is missing.");return}await ae(a,S,"ios",f,l)}}catch(u){r.stop("Error"),Z.error(`Error: ${u.message}`)}}async function we(a,e){let r=ee(),c=e.submit?.production?.ios?.appleId,s=e.submit?.production?.ios?.appleTeamId;if(!c){let i=await P({message:"Apple ID:"});if(_(i))return;c=i,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=c,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}if(!s){let i=await P({message:"Apple Team ID:"});if(_(i))return;s=i,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=s,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}r.start("Fetching existing API Keys...");let o=ne();if(!E.existsSync(o)){Z.error(`Magic Error: Helper script not found at ${o}`);return}try{let i=q("ruby",[o,"list"],{env:{...se(),FASTLANE_USER:c,FASTLANE_TEAM_ID:s},stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(i.status!==0){r.stop("Failed"),Z.error(`Listing failed: ${i.stderr}`);return}let u=i.stdout.match(new RegExp(`${p.jsonStartMarker}(.*)${p.jsonEndMarker}`));if(!u){r.stop("Parse Error");return}let C=JSON.parse(u[1]);if(r.stop(`Found ${C.length} keys`),C.length===0){Z.info("No API Keys found on this team.");return}let g=await te({message:"Select a key to delete from Apple Developer Portal:",options:[...C.map(l=>({value:l.id,label:`ID: ${l.id} - ${l.name} (${l.role})`})),{value:"cancel",label:"Cancel"}]});if(_(g)||g==="cancel")return;let d=await he({message:`Are you sure you want to delete Key ${g}? This cannot be undone.`});if(!d||_(d))return;r.start(`Deleting Key ${g}...`);let I=q("ruby",[ne(),"delete",g],{env:{...se(),FASTLANE_USER:c,FASTLANE_TEAM_ID:s},stdio:"pipe",encoding:"utf-8"});I.status===0?(r.stop("Deleted"),Z.success(`\u2713 Key ${g} has been removed from Apple Portal.`)):(r.stop("Deletion Failed"),Z.error(`Error: ${I.stderr}`))}catch(i){r.stop("Error"),Z.error(`Error: ${i.message}`)}}async function ae(a,e,r,c,s){let o=ee();o.start(`Uploading Service Credentials for ${r}...`);try{let i=r==="ios"?"asc_api_key":"google_service_account",u=new URL(import.meta.url),C=$.dirname(u.pathname),g=[$.join(C,"isolated-upload.js"),$.join(C,"commands","isolated-upload.js"),$.resolve(C,"../commands/isolated-upload.js"),$.resolve(process.cwd(),`node_modules/.bin/${p.nameLower}-upload`)],d="";for(let l of g)if(E.existsSync(l)){d=l;break}if(!d)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let I=q("node",[d,a,e,i,"*","service","undefined","undefined",c||"undefined",s||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(I.status!==0){let l=I.stderr||I.stdout||"Unknown upload failure";o.stop("Upload Failed"),Z.error(k.red(`Upload Failed: ${l}`));return}I.stdout.includes("SUCCESS")?(o.stop("Upload Success"),Z.success(k.green(`\u2713 Service Credentials for ${r} uploaded successfully.`))):(o.stop("Upload Summary"),Z.warn(k.yellow(`Upload finished but success not confirmed: ${I.stdout}`)))}catch(i){o.stop("Upload Error"),Z.error(k.red(`Error: ${i.message}`))}}function ve(a){let e=a==="ios"?".p8":".json",r=[],c=[{path:"./",label:"Project Root"},{path:$.join(re.homedir(),"Downloads"),label:"Downloads"}];for(let s of c)if(E.existsSync(s.path))try{let o=E.readdirSync(s.path);for(let i of o)if(i.endsWith(e)){if(a==="android"&&!E.readFileSync($.join(s.path,i),"utf8").includes("service_account")||a==="ios"&&!i.startsWith("AuthKey"))continue;r.push({path:$.join(s.path,i),location:s.label})}}catch{}return r}import Ce from"axios";import n from"chalk";import{execSync as x,spawnSync as L}from"child_process";import oe from"crypto";import y from"fs";import V from"path";import ge from"os";Ce.defaults.proxy=!1;function ce(a,e){if(!y.existsSync(a))return;let r=y.readdirSync(a);for(let c of r){let s=V.join(a,c);if(y.statSync(s).isDirectory()){let i=ce(s,e);if(i)return i}else if(e.test(c))return s}}function Ee(a,e,r){let c=y.readFileSync(r,"utf8"),s=Math.floor(Date.now()/1e3),o=Buffer.from(JSON.stringify({alg:"ES256",kid:a,typ:"JWT"})).toString("base64url"),i=Buffer.from(JSON.stringify({iss:e,iat:s,exp:s+1200,aud:"appstoreconnect-v1"})).toString("base64url"),u=`${o}.${i}`,C=oe.createSign("SHA256");C.update(u);let g=C.sign({key:c,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${u}.${g}`}async function Ne(a,e,r,c){let s=Ee(e,r,c),o=(await import("axios")).default;for(let i of a)try{await o.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:i.name,udid:i.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${s}`,"Content-Type":"application/json"}}),t.info(n.dim(` \u2713 Registered: ${i.name}`))}catch(u){let C=u.response?.data?.errors;C?.some(d=>d.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||d.detail?.toLowerCase().includes("already registered")||d.detail?.toLowerCase().includes("already exists"))?t.info(n.dim(` Already on Portal: ${i.name}`)):t.warn(n.yellow(` Could not register ${i.name}: ${C?.[0]?.detail||u.message}`))}}var ue=async a=>{Ze(n.bgCyan.black(p.cliTag("Credentials")));let e=await O({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});v(e)&&(G("Operation cancelled"),process.exit(0));let r=await O({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(c=>!(e==="android"&&(c.value==="service"&&(c.label="Google Service Account (JSON)"),c.value==="push")))});if((v(r)||r==="exit")&&(G("Operation cancelled"),process.exit(0)),r==="back")return ue(a);if(r==="setup")await ke({...a,platform:e});else if(r==="download")await xe({...a,platform:e});else if(r==="service")await pe({platform:e});else if(r==="push")return Ie("Push Notifications management is coming soon!","Coming Soon"),ue(a);Ve(n.green("Done!"))},ke=async a=>{let e=z(),r=a.platform,c=a.profile;if(!c){let u=await O({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});v(u)&&(G("Operation cancelled"),process.exit(0)),c=u}let s=`./${p.configFileName}`;if(!y.existsSync(s)){t.error(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`);return}let o=JSON.parse(y.readFileSync(s,"utf-8")),{projectId:i}=o;if(!i){t.error(`${p.configFileName} is missing projectId.`);return}a.awsProfile&&t.warn(n.yellow(`Ignoring --aws-profile. Authenticating with ${p.name} Cloud...`)),t.info(n.dim(`Setting up credentials for: ${c}`)),r==="ios"?await Ge(i,c,a,o):await _e(i,c,c==="production"?"store":"internal",a)};async function Ge(a,e,r,c){let s=r.bundleId;if(!s){let C=c.submit?.production?.ios?.bundleId||c.ios?.bundleId,g=[];try{let I=(await R.get(`/credentials/${a}`)).data.credentials||[];g=[...new Set(I.filter(l=>l.platform==="ios"&&l.bundleId&&l.bundleId!=="*").map(l=>l.bundleId))]}catch{}if(C&&!g.includes(C)&&g.unshift(C),g.length>0){let d=[...g.map(l=>({value:l,label:l,hint:l===C?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],I=await O({message:"Which Bundle ID are you setting up credentials for?",options:d});if(v(I)&&(G("Operation cancelled"),process.exit(0)),I==="__new__"){let l=await J({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:f=>f.includes(".")?void 0:"Please enter a valid Bundle ID"});v(l)&&(G("Operation cancelled"),process.exit(0)),s=l}else s=I}else{let d=await J({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:I=>I.includes(".")?void 0:"Please enter a valid Bundle ID"});v(d)&&(G("Operation cancelled"),process.exit(0)),s=d}}t.info(n.dim(`Bundle ID: ${s}`));let o=e==="production"?"store":e==="staging"?"adhoc":"development",i=c.submit?.production?.ios?.appleId;i&&t.info(n.dim(`Using Apple ID from config: ${i}`)),await Fe(a,s,e,o,o==="store"?"appstore":o==="adhoc"?"adhoc":"development",r,c,i)}async function Be(a){let e="MATCH_ENCRYPTION_PASSPHRASE";try{let i=((await R.get(`/projects/${a}/secrets/export?env=development`)).data.secrets||{})[e];if(i&&!i.includes("[Decryption Failed]"))return t.info(n.dim("Using existing encryption passphrase from Dashboard")),t.info(n.cyan(`MATCH_PASSWORD: ${i}`)),i;if(i&&i.includes("[Decryption Failed]")){t.warn(n.yellow("\u26A0\uFE0F Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),t.info(n.dim("Generating a fresh passphrase and cleaning old certificates..."));let u=oe.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:u,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(n.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await R.post("/credentials/clean-match-storage",{projectId:a}),t.success(n.green("\u2713 Cleaned old certificates from storage"))}catch{}return u}}catch(s){t.info(n.dim(`Could not fetch existing passphrase from Dashboard: ${s.message}`))}let r=await O({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((v(r)||r==="cancel")&&(G("Operation cancelled"),process.exit(0)),r==="enter"){let s=await de({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:i=>i.length>0?void 0:"Passphrase is required"});v(s)&&(G("Operation cancelled"),process.exit(0));let o=s;try{await R.post(`/projects/${a}/secrets`,{key:e,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),t.success(n.green("\u2713 Saved passphrase to Dashboard"))}catch{}return o}let c=oe.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:c,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(n.green("\u2713 Generated and saved encryption passphrase to Dashboard")),t.info(n.cyan(`MATCH_PASSWORD: ${c}`))}catch(s){t.warn(n.yellow(`Could not save passphrase to Dashboard: ${s.message}`))}return c}async function Fe(a,e,r,c,s,o,i,u){let C=z();t.info(n.blue("Configuring iOS certificate management..."));let g;if(!u){let d=await J({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:I=>I.includes("@")?void 0:"Please enter a valid email"});v(d)&&(G("Operation cancelled"),process.exit(0)),u=d,i.submit||(i.submit={production:{ios:{}}}),i.submit.production||(i.submit.production={ios:{}}),i.submit.production.ios||(i.submit.production.ios={}),i.submit.production.ios.appleId=u,y.writeFileSync(`./${p.configFileName}`,JSON.stringify(i,null,2)),t.success(n.green("\u2713 Apple ID saved to config"))}C.start(`Fetching ${s} certificates...`);try{let d=await Be(a),I="",l="";try{let b=await R.post("/credentials/build-server-token",{projectId:a});b.data.status==="success"&&b.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=b.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=b.data.credentials.secretAccessKey,b.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=b.data.credentials.sessionToken),l=b.data.credentials.region||"ap-south-1",I=b.data.credentials.bucket||p.bucketPrefix,process.env.AWS_REGION=l,delete process.env.AWS_PROFILE)}catch(b){throw t.error(`Failed to authenticate with ${p.name} Cloud.`),b}if(!I||!l){t.error(`Failed to resolve S3 configuration from ${p.name} Cloud.`);return}let f=o.teamId||i.submit?.production?.ios?.appleTeamId;if(!f)try{let D=(await R.get(`/projects/${a}/secrets`)).data.secrets?.find(W=>W.key==="APPLE_TEAM_ID");D&&(f=D.value,t.info(n.dim(`Using Team ID from Dashboard: ${f}`)))}catch{}if(f&&f===i.submit?.production?.ios?.appleTeamId&&t.info(n.dim(`Using Apple Team ID from config: ${f}`)),!f){t.warn(n.yellow(`
|
|
16
|
+
Apple Team ID is required to fetch certificates.`)),t.info(n.dim("You can find this at: https://developer.apple.com/account \u2192 Membership Details"));let b=await J({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:D=>D.length===10?void 0:"Team ID must be exactly 10 characters"});v(b)&&(G("Operation cancelled"),process.exit(0)),f=b,await fe(a,f)}C.stop("Starting certificate sync...");let m=p.credentialsKeychain,S=p.keychainPassword;try{let D=`${process.env.HOME||"/Users/"+(process.env.USER||p.nameLower)}/Library/Keychains/${m}`;t.info(n.dim(`Ensuring keychain exists: ${m}`));try{x(`security create-keychain -p ${S} ${m} 2>/dev/null || true`),x(`security unlock-keychain -p ${S} ${m}`),x(`security set-keychain-settings ${m}`);let h=x("security list-keychains -d user").toString();if(!h.includes(m)){t.info(n.dim(`Adding ${m} to search list`));let A=[...h.replace(/"/g,"").split(`
|
|
17
|
+
`).map(X=>X.trim()).filter(X=>X.length>0),D].join(" ");x(`security list-keychains -d user -s ${A}`)}}catch(h){t.warn(n.dim("Keychain setup warning (non-critical): "+h.message))}let W,H;try{let w=((await R.get(`/credentials/${a}`)).data.credentials||[]).find(A=>A.type==="asc_api_key"&&A.issuerId);if(w){let A=await R.get(`/credentials/${w.credentialId}/download`,{params:{projectId:a}});if(A.data.downloadUrl){let N=await(await import("axios")).default.get(A.data.downloadUrl,{responseType:"arraybuffer"}),U=V.join(ge.tmpdir(),`mach-asc-${Date.now()}`);y.mkdirSync(U,{recursive:!0}),g=V.join(U,`AuthKey_${w.keyId}.p8`),y.writeFileSync(g,Buffer.from(N.data)),W=w.keyId,H=w.issuerId,t.success(n.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(h){t.warn(n.dim(`Could not load ASC API key: ${h.message}. Will fall back to Apple ID auth.`))}t.info(n.dim("Generating secure P12 export password..."));let M=Ae();t.success(n.green("\u2713 Secure P12 password generated."));let B={...process.env,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:d,FASTLANE_USER:u,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:f,MATCH_KEYCHAIN_NAME:m,MATCH_KEYCHAIN_PASSWORD:S,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",MATCH_OUTPUT_PATH:V.join(process.cwd(),"temp_match"),MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:l,MATCH_S3_BUCKET:I,MATCH_S3_OBJECT_PREFIX:"ios-certificates/",MATCH_USERNAME:u,MATCH_APP_IDENTIFIER:e,MATCH_TYPE:s,[`${p.envPrefix}P12_PASSWORD`]:M,...g&&W&&H?{APP_STORE_CONNECT_API_KEY_KEY_ID:W,APP_STORE_CONNECT_API_KEY_ISSUER_ID:H,APP_STORE_CONNECT_API_KEY_KEY_FILEPATH:g,FASTLANE_SKIP_2FA:"1"}:{}};if(o.force){t.warn(n.yellow(`
|
|
18
|
+
\u26A0\uFE0F Force flag detected: Hard resetting ${s} certificates...`)),t.info(n.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),t.info(n.cyan(`Current MATCH_PASSWORD: ${d}`)),t.info(n.dim(`Cleaning match storage for Team ID: ${f}...`));try{(await R.post("/credentials/clean-match-storage",{projectId:a,teamId:f})).data.status==="success"&&t.success(n.green(`\u2713 Cleared S3 storage for Team ID: ${f}`))}catch(h){t.warn(n.yellow(`S3 cleanup via API failed: ${h.message}`)),t.info(n.dim("Continuing to attempt standard nuke..."))}try{x(`fastlane match nuke ${s} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:B}),t.success(n.green(`\u2713 Nuked existing ${s} credentials`))}catch{t.warn(n.yellow("Standard nuke failed (likely due to password mismatch).")),t.info(n.dim("Since S3 was cleared manually, proceeding to generation..."))}}if(s==="adhoc"||s==="development")try{t.info(n.blue("Fetching registered devices..."));let w=(await R.get("/devices")).data.devices||[];if(w.length===0)t.warn(n.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),t.info(n.dim(`Register devices with: ${p.nameLower} device register`));else{let{multiselect:A}=await import("@clack/prompts"),X=await A({message:`Select devices to include in the ${s} profile:`,options:w.map(N=>({value:N.udid,label:`${N.name} (${N.udid.substring(0,12)}...)`,hint:N.model||N.platform})),initialValues:w.map(N=>N.udid)});if(!v(X)&&X.length>0){let N=w.filter(U=>X.includes(U.udid));if(t.info(n.blue(`Registering ${N.length} device(s) on Apple Developer Portal...`)),g&&W&&H)await Ne(N,W,H,g);else{t.info(n.dim("You will be prompted for a 2FA code once \u2014 type it and press Enter."));for(let U of N){let ye=U.name.replace(/"/g,'\\"');L(`fastlane run register_device name:"${ye}" udid:"${U.udid}"`,{shell:!0,env:B,stdio:"inherit",cwd:process.cwd()})}}t.info(n.green("\u2713 Device registration complete."))}}}catch(h){t.warn(n.yellow(`Could not fetch registered devices: ${h.message}`)),t.info(n.dim("Continuing without explicit device registration."))}try{let h=L(`fastlane match ${s} --app_identifier "${e}" --profile_name "${p.nameLower} ${s} ${e}"`,{shell:!0,cwd:process.cwd(),env:B,stdio:"inherit",encoding:"utf-8"});if(h.status!==0){t.warn(n.yellow(`
|
|
19
|
+
Certificate sync failed. Attempting to create App ID and retry...`));try{x(`fastlane produce --app_identifier "${e}" --app_name "${e}" --skip_itc`,{stdio:"inherit",env:B}),t.success(n.green("\u2713 App ID created successfully")),t.info(n.blue("Retrying certificate sync...")),h=L(`fastlane match ${s} --app_identifier "${e}" --profile_name "${p.nameLower} ${s} ${e}"`,{shell:!0,cwd:process.cwd(),env:B,stdio:"inherit",encoding:"utf-8"})}catch{}if(h.status!==0)throw new Error("fastlane match failed")}}catch(h){t.warn(n.yellow(`
|
|
20
|
+
Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),t.info(n.cyan(`Failed MATCH_PASSWORD was: ${d}`));let w=await O({message:"What would you like to do?",options:[{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal (Resolve certificate limits)",hint:"See if you have too many certificates"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(v(w)||w==="cancel")throw h;if(w==="retry_password"){t.info(n.dim(`
|
|
21
|
+
You are overriding the dashboard passphrase for this session.`));let A=await de({message:"Enter the correct MATCH_PASSWORD for this project:"});if(A&&!v(A)){d=A,t.info(n.blue("Retrying with provided passphrase...")),t.info(n.cyan(`New MATCH_PASSWORD: ${d}`));let X={...B,MATCH_PASSWORD:d};if(L(`fastlane match ${s}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:X}).status===0)await R.post(`/projects/${a}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:d,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(n.green("\u2713 Dashboard passphrase updated.")),t.info(n.cyan(`MATCH_PASSWORD: ${d}`));else throw new Error("Sync failed again with provided passphrase.")}else throw h}else if(w==="check_portal")try{let A=await le(B,s);if(A.length>0){if(t.info(n.dim(`Found ${A.length} existing ${s} certificates on the portal.`)),await $e(s,B,a,A)&&(t.info(n.blue("Retrying certificate sync...")),L(`fastlane match ${s}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:B}).status!==0))throw new Error("Retry failed")}else throw t.error(n.red("No existing certificates found on portal to resolve.")),h}catch(A){throw t.warn(n.dim(`Portal check warning: ${A.message}`)),h}else throw h}t.success(n.green("\u2713 Certificates fetched and synced"));let F=V.join(process.cwd(),"temp_match"),T=V.join(F,`${p.fastlanePrefix}_export.p12`),j=ce(F,/\.mobileprovision$/);try{let w=`${process.env.HOME||"/Users/"+(process.env.USER||p.nameLower)}/Library/Keychains/${m}`;y.existsSync(F)||y.mkdirSync(F,{recursive:!0}),t.info(n.dim("Exporting certificate from keychain for dashboard upload..."));let A="";try{let N=x(`security find-identity -v -p codesigning ${w}`,{encoding:"utf-8"}).match(new RegExp(`"([^"]*\\(${f}\\))"`));N&&(A=N[1],t.info(n.dim(`Exporting identity: "${A}"`)))}catch{}A?x(`security export -k ${w} -t identities -f pkcs12 -o ${T} -P "" "${A}" 2>/dev/null || security export -k ${w} -t identities -f pkcs12 -o ${T} -P ""`,{stdio:"ignore"}):x(`security export -k ${w} -t identities -f pkcs12 -o ${T} -P ""`,{stdio:"ignore"})}catch{t.warn(n.dim("Could not export certificate from keychain."))}o.teamId&&!f&&await fe(a,o.teamId);let Q=y.existsSync(T)?T:ce(F,/\.p12$/);if(Q&&j){let h,w;try{let A=await le(B,s);A.length>0&&(h=A[0].expires,w=A[0].id)}catch{t.warn(n.dim("Could not fetch expiration date or ID for dashboard record."))}await Y(a,Q,"ios_cert",e,c,void 0,h,o.teamId||f,w,M),await Y(a,j,"ios_profile",e,c,void 0,h,o.teamId||f),t.success(n.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"));try{y.existsSync("./temp_match")&&y.rmSync("./temp_match",{recursive:!0,force:!0})}catch{}}else t.warn(n.yellow("Certificates generated but not found in expected location.")),t.info(n.dim("Falling back to manual upload...")),await me(a,e,c)}catch(b){C.stop("Certificate fetch failed"),t.error(n.red(`Error: ${b.message}`)),t.info(n.dim("Falling back to manual upload...")),await me(a,e,c)}}catch(d){C.stop("iOS setup failed"),t.error(n.red(`Error: ${d.message}`))}finally{if(g)try{y.rmSync(V.dirname(g),{recursive:!0,force:!0})}catch{}}}async function fe(a,e){try{await R.post(`/projects/${a}/secrets`,{key:"APPLE_TEAM_ID",value:e,description:"Apple Developer Team ID (used for iOS signing)"}),t.success(n.green(`\u2713 Saved Team ID ${e} to Dashboard`))}catch(r){t.warn(n.yellow(`Could not save Team ID to Dashboard: ${r.message}`))}}async function me(a,e,r){t.info(n.yellow(`
|
|
22
|
+
Manual Upload Mode`)),t.info("Please provide your certificate and provisioning profile:");let c=await J({message:"Path to .p12 certificate file:",validate:i=>y.existsSync(i)?void 0:"File not found"});v(c)&&(G("Operation cancelled"),process.exit(0));let s=await J({message:"Path to .mobileprovision file:",validate:i=>y.existsSync(i)?void 0:"File not found"});v(s)&&(G("Operation cancelled"),process.exit(0));let o=z();o.start(`Uploading to ${p.name} Dashboard...`);try{await Y(a,c,"ios_cert",e,r),await Y(a,s,"ios_profile",e,r),o.stop("Upload complete"),t.success(n.green("\u2713 iOS credentials uploaded successfully"))}catch(i){throw o.stop("Upload failed"),i}}async function _e(a,e,r,c){let s=z();t.step(n.blue("Android Credential Setup"));let o=c.bundleId;if(!o){let d=[];try{let l=(await R.get(`/credentials/${a}`)).data.credentials||[];d=[...new Set(l.filter(f=>f.platform==="android"&&f.bundleId&&f.bundleId!=="*").map(f=>f.bundleId))]}catch{}if(d.length>0){let I=[...d.map(f=>({value:f,label:f})),{value:"__new__",label:"+ Enter a new Package Name"}],l=await O({message:"Which Package Name are you setting up credentials for?",options:I});if(v(l)&&(G("Operation cancelled"),process.exit(0)),l==="__new__"){let f=await J({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:m=>m.includes(".")?void 0:"Please enter a valid package name"});v(f)&&(G("Operation cancelled"),process.exit(0)),o=f}else o=l}else{let I=await J({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:l=>l.includes(".")?void 0:"Please enter a valid package name"});v(I)&&(G("Operation cancelled"),process.exit(0)),o=I}}try{let l=((await R.get(`/credentials/${a}`)).data.credentials||[]).find(f=>f.platform==="android"&&f.distributionType===r&&f.bundleId===o);if(l){t.warn(n.yellow(`\u26A0\uFE0F Existing Android credentials found for ${r}`));let f=await J({message:"What would you like to do? (use/new/cancel)",validate:m=>{let S=m.toLowerCase();if(!(S==="use"||S==="new"||S==="cancel"))return"Please type: use, new, or cancel"}});if(v(f)||f.toLowerCase()==="cancel")return;if(f.toLowerCase()==="use"){t.success(n.green("\u2713 Using existing credentials."));return}await R.delete(`/credentials/${l.credentialId}?projectId=${a}`)}}catch{}let i="./android/app/my-release-key.jks";if(y.existsSync(i)){let d=await Re({message:"Upload existing keystore?"});if(d&&!v(d)){let I=await J({message:"Key alias:",initialValue:"my-key-alias"});if(v(I))return;let l=await de({message:"Keystore password:"});if(v(l))return;await Y(a,i,"android_keystore",o,r,I,void 0,void 0,void 0,l),t.success(n.green("\u2713 Keystore uploaded"));return}}t.info(n.blue("Generating new Android keystore..."));let u=c.keyAlias||`${p.nameLower}-${Xe()}`,C=Ae(),g=`./${p.nameLower}-${e}.jks`;y.existsSync(g)&&y.unlinkSync(g),s.start("Generating keystore...");try{let d=C.replace(/'/g,"'\\''");x(`keytool -genkeypair -v -keystore "${g}" -alias "${u}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${d}' -keypass '${d}' -dname "CN=${p.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),s.stop("Keystore generated"),await Y(a,g,"android_keystore",o,r,u,void 0,void 0,void 0,C),t.success(n.green("\u2713 Android credentials uploaded successfully")),t.info(n.cyan(`Key Alias: ${u}`))}catch(d){throw s.stop("Generation failed"),new Error(`Keystore generation failed: ${d.message}`)}}async function Y(a,e,r,c,s,o,i,u,C,g){let d=V.basename(e);t.info(n.dim(`Uploading ${d} (Isolated process)...`));let I=new URL(import.meta.url),l=V.dirname(I.pathname),f=V.join(l,"commands","isolated-upload.js"),m=L("node",[f,a,e,r,c,s,o||"undefined",i||"undefined",u||"undefined",C||"undefined",g||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(m.status!==0){let S=m.stderr||m.stdout||"Unknown isolated upload failure";throw t.error(n.red(`Isolated Upload Failed: ${S}`)),new Error(S)}m.stdout.includes("SUCCESS")?t.info(n.dim(`\u2713 ${d} uploaded and registered.`)):t.warn(n.yellow(`Isolated upload finished but success not confirmed: ${m.stdout}`))}async function xe(a){let e=z(),r=a.platform,c=`./${p.configFileName}`;if(!y.existsSync(c)){t.error(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`);return}let s=JSON.parse(y.readFileSync(c,"utf-8")),{projectId:o}=s;if(!o){t.error(`${p.configFileName} is missing projectId.`);return}try{e.start("Fetching project secrets...");let u=(await R.get(`/projects/${o}/secrets/export?env=all`)).data.secrets||{};e.stop("Secrets fetched and merged."),e.start("Fetching credentials...");let g=(await R.get(`/credentials/${o}`)).data.credentials||[];e.stop(`Found ${g.length} metadata records.`);let d=g.filter(m=>m.platform===r);if(d.length===0){t.info(`No ${r} credentials found on Dashboard.`);return}let I="./credentials.json",l={};if(y.existsSync(I))try{l=JSON.parse(y.readFileSync(I,"utf-8"))}catch{t.warn("Could not parse existing credentials.json, creating a new one.")}l[r]||(l[r]={});let f=V.join(process.cwd(),"credentials",r);y.existsSync(f)||y.mkdirSync(f,{recursive:!0});for(let m of d){e.start(`Downloading ${m.type} (${m.distributionType})...`);try{let S=await R.get(`/credentials/${m.credentialId}/download?projectId=${o}`);if(S.data.status==="success"&&S.data.downloadUrl){let b=V.join(process.cwd(),"credentials",r,m.distributionType);y.existsSync(b)||y.mkdirSync(b,{recursive:!0});let D=m.s3Key?.split(".").pop()||(m.type.includes("keystore")?"jks":m.type.includes("cert")?"p12":"mobileprovision"),W=`${m.type}.${D}`,H=V.join(b,W),M=await Ce.get(S.data.downloadUrl,{responseType:"arraybuffer"});y.writeFileSync(H,Buffer.from(M.data));let B=V.join("credentials",r,m.distributionType,W);if(r==="android"){if(m.type==="android_keystore"){let F=m.distributionType==="store"?"PRODUCTION":m.distributionType==="internal"?"STAGING":"DEVELOPMENT",T=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],j=[`KEYSTORE_PASSWORD_${F}`,`KEYSTORE_PASSWORD_${m.distributionType.toUpperCase()}`,...T.map(A=>`KEYSTORE_PASSWORD_${A}`),"ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],Q=[`KEYSTORE_ALIAS_${F}`,`KEYSTORE_ALIAS_${m.distributionType.toUpperCase()}`,...T.map(A=>`KEYSTORE_ALIAS_${A}`),"KEYSTORE_ALIAS"],h=j.map(A=>u[A]).find(A=>!!A)||"",w=Q.map(A=>u[A]).find(A=>!!A)||m.meta?.alias||"";l.android.keystore={keystorePath:B,keystorePassword:h,keyAlias:w,keyPassword:h}}}else if(r==="ios"){let F=m.distributionType==="store"?"production":m.distributionType==="adhoc"?"staging":"development";l.ios[F]||(l.ios[F]={}),m.type==="ios_cert"?(l.ios[F].certificatePath=B,l.ios[F].certificatePassword=u.IOS_P12_PASSWORD||""):m.type==="ios_profile"&&(l.ios[F].provisioningProfilePath=B)}e.stop(`\u2713 ${m.type} (${m.distributionType}) saved.`)}}catch(S){let b=S.response?.data?.message||S.message;e.stop(n.dim(`- Skipped ${m.type} (${m.distributionType}): ${b}`))}}y.writeFileSync(I,JSON.stringify(l,null,2)),t.success(n.green("\u2713 Local credentials.json updated.")),Ie("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(i){e.stop(n.red("Sync failed.")),t.error(`Error: ${i.message}`)}}function Ae(){let a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",e="";for(let r=0;r<24;r++)e+=a.charAt(Math.floor(Math.random()*a.length));return e}function Xe(a=8){let e="abcdefghijklmnopqrstuvwxyz0123456789",r="";for(let c=0;c<a;c++)r+=e.charAt(Math.floor(Math.random()*e.length));return r}async function $e(a,e,r,c){let s=c||await le(e,a);if(!s||s.length===0)return!1;let o=await O({message:"Select a certificate to revoke:",options:[...s.map(i=>({value:`revoke:${i.id}`,label:`Revoke: ${i.name} (${i.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return v(o)||o==="cancel"?!1:o==="nuke"?(x(`fastlane match nuke ${a}`,{stdio:"inherit",cwd:process.cwd(),env:e}),!0):typeof o=="string"&&o.startsWith("revoke:")?(await We(e,o.split(":")[1]),!0):!1}async function le(a,e){let r=e==="development"?"development":"distribution",c=`
|
|
23
23
|
lane :${p.fastlanePrefix}_list_certs do
|
|
24
24
|
require 'spaceship'
|
|
25
25
|
require 'json'
|
|
@@ -38,7 +38,7 @@ lane :${p.fastlanePrefix}_list_certs do
|
|
|
38
38
|
$stderr.puts "ERROR: #{e.message}"
|
|
39
39
|
exit 1
|
|
40
40
|
end
|
|
41
|
-
end`,s=V.join(ge.tmpdir(),`/tmp/${p.nameLower}-list-certs-${Date.now()}`),o=V.join(s,"fastlane"),i=V.join(o,"Fastfile");try{
|
|
41
|
+
end`,s=V.join(ge.tmpdir(),`/tmp/${p.nameLower}-list-certs-${Date.now()}`),o=V.join(s,"fastlane"),i=V.join(o,"Fastfile");try{y.existsSync(o)||y.mkdirSync(o,{recursive:!0}),y.writeFileSync(i,c);let C=x(`fastlane ${p.fastlanePrefix}_list_certs`,{env:{...a,CI:"1",FASTLANE_FASTFILE:i},cwd:s,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${p.jsonStartMarker}(.*)${p.jsonEndMarker}`));return C?JSON.parse(C[1]):[]}finally{y.existsSync(s)&&y.rmSync(s,{recursive:!0,force:!0})}}async function We(a,e){let r=`
|
|
42
42
|
lane :${p.fastlanePrefix}_revoke_cert do
|
|
43
43
|
require 'spaceship'
|
|
44
44
|
begin
|
|
@@ -50,4 +50,4 @@ lane :${p.fastlanePrefix}_revoke_cert do
|
|
|
50
50
|
$stderr.puts "ERROR: #{e.message}"
|
|
51
51
|
exit 1
|
|
52
52
|
end
|
|
53
|
-
end`,c=V.join(ge.tmpdir(),`/tmp/${p.nameLower}-revoke-cert-${Date.now()}`),s=V.join(c,"fastlane"),o=V.join(s,"Fastfile");try{
|
|
53
|
+
end`,c=V.join(ge.tmpdir(),`/tmp/${p.nameLower}-revoke-cert-${Date.now()}`),s=V.join(c,"fastlane"),o=V.join(s,"Fastfile");try{y.existsSync(s)||y.mkdirSync(s,{recursive:!0}),y.writeFileSync(o,r),x(`fastlane ${p.fastlanePrefix}_revoke_cert`,{env:{...a,CI:"1",FASTLANE_FASTFILE:o},cwd:c,stdio:["inherit","pipe","inherit"]})}finally{y.existsSync(c)&&y.rmSync(c,{recursive:!0,force:!0})}}export{pe as a,ue as b,ke as c,xe as d};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
import{b as a,c as b,d as c}from"./chunk-
|
|
1
|
+
import{b as a,c as b,d as c}from"./chunk-4OALC25P.js";import"./chunk-YZYFEHP5.js";export{a as credentialsMainCommand,b as credentialsSetupCommand,c as downloadCredentialsCommand};
|
package/dist/index.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{a as ci,c as Je}from"./chunk-
|
|
2
|
+
import{a as ci,c as Je}from"./chunk-4OALC25P.js";import{a as f,b as ri,c as ue,d as si,e as gt,f as ai,g as _}from"./chunk-YZYFEHP5.js";import{Command as qr,Option as Cn}from"commander";import{configDotenv as Jr}from"dotenv";import{intro as de,outro as Tn}from"@clack/prompts";import re from"chalk";import{text as li,confirm as Nn,spinner as kn,isCancel as Ut,cancel as Xe,note as xn,outro as Ln}from"@clack/prompts";import Ze from"chalk";async function di(){try{let e=await li({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(o){if(o.length===0)return"Bucket name is required"}});Ut(e)&&(Xe("Operation cancelled."),process.exit(0));let n=await li({message:"Enter Region:",initialValue:"ap-south-1"});Ut(n)&&(Xe("Operation cancelled."),process.exit(0));let t=await Nn({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Ut(t)&&(Xe("Operation cancelled."),process.exit(0));let i=kn();i.start("Setting up hosting infrastructure...");try{let o=await _.post("/hosting/setup",{bucketName:e,region:n,createCloudFront:t});if(o.data.status!=="success")throw new Error(o.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let r=o.data,a=`Bucket Name: ${Ze.cyan(r.bucketName)}
|
|
3
3
|
`;a+=`Region: ${Ze.cyan(r.region)}
|
|
4
4
|
`,a+=`S3 Website URL: ${Ze.blue(r.s3WebsiteUrl)}`,r.cloudFrontId&&(a+=`
|
|
5
5
|
|
|
@@ -15,7 +15,7 @@ ${e.map(o=>{let r=o.path;return r=r.replace(/\/\([^)]+\)/g,""),r=r.replace(/\/\[
|
|
|
15
15
|
<priority>0.8</priority>
|
|
16
16
|
</url>`}).join(`
|
|
17
17
|
`)}
|
|
18
|
-
</urlset>`}import{randomUUID as go}from"crypto";import we from"path";import tt from"axios";import ho from"os";import{spinner as Gt,confirm as _i,isCancel as Di,log as
|
|
18
|
+
</urlset>`}import{randomUUID as go}from"crypto";import we from"path";import tt from"axios";import ho from"os";import{spinner as Gt,confirm as _i,isCancel as Di,log as w}from"@clack/prompts";import v from"chalk";import ce from"fs";import{execSync as wi}from"child_process";import vi from"adm-zip";import{spinner as Wn,log as yi}from"@clack/prompts";import Yn from"chalk";var hi=`#!/bin/bash
|
|
19
19
|
# --- Mach Cloud Build Script (Android) ---
|
|
20
20
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
|
|
21
21
|
BUILD_ID="{{BUILD_ID}}"
|
|
@@ -274,7 +274,7 @@ sudo shutdown -h now
|
|
|
274
274
|
export MACH_APP_NAME="${e.appName||"App"}"
|
|
275
275
|
export MACH_BUILD_PROFILE="${r}"
|
|
276
276
|
{{ENV_VARS}}
|
|
277
|
-
`);if(e.dryRun){yi.info("User Data Script (dry run):"),console.log(u);return}o.start("Requesting cloud build instance...");try{let p=await _.post("/builds/launch-android",{projectId:i,buildId:n,platform:e.platform,buildProfile:e.buildProfile,buildCommand:l,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:t,dryRun:e.dryRun,userDataScript:u});if(p.data.status!=="success")throw new Error(p.data.message||"Failed to launch build instance");let
|
|
277
|
+
`);if(e.dryRun){yi.info("User Data Script (dry run):"),console.log(u);return}o.start("Requesting cloud build instance...");try{let p=await _.post("/builds/launch-android",{projectId:i,buildId:n,platform:e.platform,buildProfile:e.buildProfile,buildCommand:l,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:t,dryRun:e.dryRun,userDataScript:u});if(p.data.status!=="success")throw new Error(p.data.message||"Failed to launch build instance");let h=p.data.instanceId;return o.stop("Build Started"),yi.success(Yn.green(`Build initiated on cloud instance (${h}).`)),{instanceId:h}}catch(p){o.stop("Android Build Failed");let h=p.response?.data?.message||p.message;throw new Error(`Failed to launch Android build: ${h}`)}};import{spinner as qn,log as He}from"@clack/prompts";import Te from"chalk";import Jn from"fs";import{execSync as Qe}from"child_process";var Ai=`#!/bin/bash
|
|
278
278
|
# --- Mach Cloud Build Script (iOS) ---
|
|
279
279
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
|
|
280
280
|
|
|
@@ -712,27 +712,27 @@ touch done
|
|
|
712
712
|
if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
|
|
713
713
|
curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
|
|
714
714
|
fi
|
|
715
|
-
`;var Ei=async(e,n,t={},i)=>{let o=qn();e.sshHost||(e.sshHost="localhost",He.message(Te.yellow("No SSH host provided, defaulting to localhost."))),o.start(`Connecting to remote Mac at ${Te.cyan(e.sshHost)}...`);let r=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,c=`${r}@${e.sshHost}`,s=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${c}`,l=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let d=r==="ubuntu"?"/home/ubuntu":`/Users/${r}`,u=(t.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${d}/${f.remoteWorkspacesDir}/${u}`;o.message(`Preparing stable workspace: ${p}...`),Qe(`${s} "mkdir -p ${p}"`,{stdio:"inherit"}),o.message("Transferring source code...");let
|
|
715
|
+
`;var Ei=async(e,n,t={},i)=>{let o=qn();e.sshHost||(e.sshHost="localhost",He.message(Te.yellow("No SSH host provided, defaulting to localhost."))),o.start(`Connecting to remote Mac at ${Te.cyan(e.sshHost)}...`);let r=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,c=`${r}@${e.sshHost}`,s=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${c}`,l=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let d=r==="ubuntu"?"/home/ubuntu":`/Users/${r}`,u=(t.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${d}/${f.remoteWorkspacesDir}/${u}`;o.message(`Preparing stable workspace: ${p}...`),Qe(`${s} "mkdir -p ${p}"`,{stdio:"inherit"}),o.message("Transferring source code...");let h=`/tmp/${f.nameLower}-source-${n}.zip`;Qe(`${l} ${h} ${c}:${p}/source.zip`,{stdio:"inherit"});let m=e.iosApiKeyPath?`${p}/api_key.p8`:"",y="";e.iosApiKeyPath&&(o.message("Uploading App Store Connect API key..."),Qe(`${l} ${e.iosApiKeyPath} ${c}:${m}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(y=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${m}`));let $={};if(i)try{let I=await _.post(`/builds/${i}/${n}/build-urls`,{platform:"ios"});I.data.status==="success"&&($=I.data.urls)}catch(I){He.warn(Te.yellow(`Could not fetch build URLs: ${I.message}`))}let N="";if($.credentials&&$.credentials.length>0)for(let I of $.credentials)I.type==="p12"?N+=`curl -sf -o "$CERT_DIR/${I.name}" "${I.downloadUrl}" || true
|
|
716
716
|
`:I.type==="mobileprovision"&&(N+=`curl -sf -o "$PROV_TEMP/${I.name}" "${I.downloadUrl}" || true
|
|
717
717
|
`);o.message("Generating macOS build script...");let C=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
|
|
718
718
|
`:"";if(t)for(let[I,b]of Object.entries(t)){let O=b.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");C+=`export ${I}="${O}"
|
|
719
719
|
`}let x=[C,$.logUpload?`export PRESIGNED_LOG_UPLOAD="${$.logUpload}"`:"",$.doneMarker?`export PRESIGNED_DONE_MARKER="${$.doneMarker}"`:"",$.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${$.cacheDerivedDataDownload}"`:"",$.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${$.cacheDerivedDataUpload}"`:"",$.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${$.cacheNodeModulesDownload}"`:"",$.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${$.cacheNodeModulesUpload}"`:"",$.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${$.cachePodsDownload}"`:"",$.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${$.cachePodsUpload}"`:"",$.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${$.artifactIpaUpload}"`:"",$.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${$.artifactAppZipUpload}"`:"",`export BUILD_ID="${n}"`,`export ${f.envPrefix}PROJECT_ID="${u}"`,t.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${t.MATCH_ENCRYPTION_PASSPHRASE}"`:"",t.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${t.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${f.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${f.keychainPassword}"`].filter(Boolean).join(`
|
|
720
720
|
`),H=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
|
|
721
|
-
`):"",X=Ai,
|
|
721
|
+
`):"",X=Ai,g={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":x,"{{CREDENTIAL_DOWNLOADS}}":N,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":y,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":n,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":H};Object.entries(g).forEach(([I,b])=>{X=X.split(I).join(b)});let D=`/tmp/${f.nameLower}-mac-build-${n}.sh`;if(Jn.writeFileSync(D,X),Qe(`${l} ${D} ${c}:${p}/build.sh`),o.stop("Remote script uploaded."),He.info(Te.cyan("Executing remote build. This might take a while...")),Qe(`${s} "bash ${p}/build.sh"`,{stdio:"inherit"}),o.stop("Remote build finished!"),i){o.start("Fetching artifact links...");try{let b=(await _.get(`/builds/${i}/${n}/artifacts`)).data.artifacts||[],O=e.simulator===!0;if(b.length===0&&!O)throw o.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(o.stop("Build Successful!"),b.length>0){He.success("Build Artifacts Ready:");for(let G of b)console.log(`
|
|
722
722
|
${Te.yellow(G.name)}:
|
|
723
723
|
${Te.cyan(G.downloadUrl)}`);console.log(`
|
|
724
|
-
${Te.dim("Note: Links are valid for 7 days.")}`)}else O&&He.warn("Simulator build completed. No artifacts uploaded.")}catch(I){o.stop("Could not fetch artifacts"),He.warn(Te.yellow(`Artifact listing failed: ${I.message}`))}}}catch(d){throw o.stop("iOS Build Failed"),d}};import Xn from"crypto";import et from"axios";async function Ii(e,n){try{let t=await Zn(n),o=(await et.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits`,{},{headers:{Authorization:`Bearer ${t}`,Connection:"close"}})).data.id,r=0,c=(await et.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/tracks`,{headers:{Authorization:`Bearer ${t}`,Connection:"close"}})).data.tracks||[];for(let s of c)if(s.releases){for(let l of s.releases)if(l.versionCodes)for(let d of l.versionCodes){let u=parseInt(d,10);u>r&&(r=u)}}try{let l=(await et.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/bundles`,{headers:{Authorization:`Bearer ${t}`,Connection:"close"}})).data.bundles||[];for(let d of l)d.versionCode&&d.versionCode>r&&(r=d.versionCode)}catch{}try{let l=(await et.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/apks`,{headers:{Authorization:`Bearer ${t}`,Connection:"close"}})).data.apks||[];for(let d of l)d.versionCode&&d.versionCode>r&&(r=d.versionCode)}catch{}return r}catch(t){let i=t.response?.data?.error?.message||t.message;throw new Error(`Google Play API Error: ${i}`)}}async function Zn(e){let n=Math.floor(Date.now()/1e3),t=n+3600,i={alg:"RS256",typ:"JWT"},o={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:n,exp:t,scope:"https://www.googleapis.com/auth/androidpublisher"},r=Buffer.from(JSON.stringify(i)).toString("base64url"),a=Buffer.from(JSON.stringify(o)).toString("base64url"),c=`${r}.${a}`,s=Xn.createSign("RSA-SHA256");s.update(c);let l=s.sign(e.private_key,"base64url"),d=`${c}.${l}`;return(await et.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:d},{headers:{Connection:"close"}})).data.access_token}import{spinner as ht,log as
|
|
724
|
+
${Te.dim("Note: Links are valid for 7 days.")}`)}else O&&He.warn("Simulator build completed. No artifacts uploaded.")}catch(I){o.stop("Could not fetch artifacts"),He.warn(Te.yellow(`Artifact listing failed: ${I.message}`))}}}catch(d){throw o.stop("iOS Build Failed"),d}};import Xn from"crypto";import et from"axios";async function Ii(e,n){try{let t=await Zn(n),o=(await et.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits`,{},{headers:{Authorization:`Bearer ${t}`,Connection:"close"}})).data.id,r=0,c=(await et.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/tracks`,{headers:{Authorization:`Bearer ${t}`,Connection:"close"}})).data.tracks||[];for(let s of c)if(s.releases){for(let l of s.releases)if(l.versionCodes)for(let d of l.versionCodes){let u=parseInt(d,10);u>r&&(r=u)}}try{let l=(await et.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/bundles`,{headers:{Authorization:`Bearer ${t}`,Connection:"close"}})).data.bundles||[];for(let d of l)d.versionCode&&d.versionCode>r&&(r=d.versionCode)}catch{}try{let l=(await et.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/apks`,{headers:{Authorization:`Bearer ${t}`,Connection:"close"}})).data.apks||[];for(let d of l)d.versionCode&&d.versionCode>r&&(r=d.versionCode)}catch{}return r}catch(t){let i=t.response?.data?.error?.message||t.message;throw new Error(`Google Play API Error: ${i}`)}}async function Zn(e){let n=Math.floor(Date.now()/1e3),t=n+3600,i={alg:"RS256",typ:"JWT"},o={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:n,exp:t,scope:"https://www.googleapis.com/auth/androidpublisher"},r=Buffer.from(JSON.stringify(i)).toString("base64url"),a=Buffer.from(JSON.stringify(o)).toString("base64url"),c=`${r}.${a}`,s=Xn.createSign("RSA-SHA256");s.update(c);let l=s.sign(e.private_key,"base64url"),d=`${c}.${l}`;return(await et.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:d},{headers:{Connection:"close"}})).data.access_token}import{spinner as ht,log as E,isCancel as yt,confirm as Qn,select as Ft}from"@clack/prompts";import S from"chalk";import A from"fs";import P from"path";import{execSync as F,spawn as $i}from"child_process";import Ie from"os";import eo from"crypto";var Pi=(e,n)=>n.filter(t=>A.existsSync(P.join(e,t))).reduce((t,i)=>t.update(A.readFileSync(P.join(e,i))),eo.createHash("sha256")).digest("hex").slice(0,16),to=e=>Pi(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),io=e=>Pi(e,["Podfile","Podfile.lock"]),no=e=>{let n=P.join(e,"fingerprint.json");try{return JSON.parse(A.readFileSync(n,"utf-8"))}catch{return{}}},bi=(e,n)=>{A.mkdirSync(e,{recursive:!0}),A.writeFileSync(P.join(e,"fingerprint.json"),JSON.stringify(n,null,2))},oo=7200*1e3,ro=(e,n)=>{A.mkdirSync(e,{recursive:!0});let t=P.join(e,"build.lock");if(A.existsSync(t))try{let i=JSON.parse(A.readFileSync(t,"utf-8")),o=Date.now()-(i.timestamp||0);if(o<oo)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(o/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}A.writeFileSync(t,JSON.stringify({buildId:n,pid:process.pid,timestamp:Date.now()}))},so=(e,n)=>{let t=P.join(e,"build.lock");try{A.existsSync(t)&&JSON.parse(A.readFileSync(t,"utf-8")).buildId===n&&A.unlinkSync(t)}catch{}},De=(e,n,t=process.cwd(),i={},o,r)=>new Promise((a,c)=>{let s=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",P.join(Ie.homedir(),".npm-global/bin")],d=[...(process.env.PATH||"").split(":"),...s].filter((m,y,$)=>m&&$.indexOf(m)===y).join(":");process.env[`${f.envPrefix}DEBUG`]&&console.log(S.magenta(`[${f.nameUpper}_DEBUG] Execution PATH: ${d}`));let u={...process.env,...i,PATH:d,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};o&&process.env[`${f.envPrefix}DEBUG`]&&(o(S.magenta(`[ENVIRONMENT] node: ${process.execPath}
|
|
725
725
|
`)),o(S.magenta(`[ENVIRONMENT] PATH: ${d}
|
|
726
726
|
`)),o(S.magenta(`[ENVIRONMENT] command: ${e} ${n.join(" ")}
|
|
727
|
-
`)));let p=e;if(["node","npm","npx","pod"].includes(e)){let m=P.dirname(process.execPath),
|
|
728
|
-
`)))}let
|
|
729
|
-
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),d.abort(),p&&clearInterval(p))}catch{}},5e3));let
|
|
730
|
-
`)},X=async(
|
|
731
|
-
`))}catch(
|
|
732
|
-
`)}if(await H("read_package"),e.nodeVersion){let k=process.env.NVM_DIR||P.join(
|
|
733
|
-
`),
|
|
734
|
-
`),
|
|
735
|
-
`),
|
|
727
|
+
`)));let p=e;if(["node","npm","npx","pod"].includes(e)){let m=P.dirname(process.execPath),y=P.join(m,e);A.existsSync(y)&&(p=y,o&&o(S.dim(`[EXEC] Using absolute path: ${p}
|
|
728
|
+
`)))}let h=$i(p,n,{stdio:"pipe",cwd:t,shell:!0,env:u,detached:process.platform!=="win32"});if(r){if(r.aborted){if(h.pid)try{process.kill(-h.pid,"SIGTERM")}catch{h.kill()}return c(new Error("Command aborted"))}r.addEventListener("abort",()=>{if(h.pid)try{process.kill(-h.pid,"SIGTERM")}catch{h.kill()}c(new Error("Command aborted"))})}h.stdout.on("data",m=>{let y=m.toString();process.stdout.write(y),o&&o(y)}),h.stderr.on("data",m=>{let y=m.toString();process.stderr.write(y),o&&o(y)}),h.on("close",m=>{m===0?a(m):c(new Error(`Command failed with code ${m}: ${e} ${n.join(" ")}`))}),h.on("error",m=>c(m))}),ao=e=>{let n=Math.floor(e/1e3%60),t=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),o=[];return i>0&&o.push(`${i}h`),t>0&&o.push(`${t}m`),(n>0||o.length===0)&&o.push(`${n}s`),o.join(" ")},Ge=(e,n)=>{let t=[];try{if(!A.existsSync(e))return t;let i=A.readdirSync(e);for(let o of i){let r=P.join(e,o);try{let a=A.statSync(r);if(n.some(s=>o.endsWith(s))){t.push(P.resolve(r));continue}a.isDirectory()&&(t=t.concat(Ge(r,n)))}catch{}}}catch{}return t},Ht=async(e,n,t={},i,o={})=>{let r=ht(),a=Date.now(),c=e.platform,s=e.buildProfile||"production",l=async(g,D={})=>{if(i)for(let I=1;I<=3;I++)try{await _.patch(`/builds/${i}/${n}`,{status:g,...D});return}catch(b){let O=b?.response?.data?.message||b?.message||String(b);console.error(`[reportStatus] attempt ${I}/3 failed (status=${g}): ${O}`),I<3&&await new Promise(G=>setTimeout(G,2e3))}},d=new AbortController,{signal:u}=d,p=null;i&&(p=setInterval(async()=>{try{(await _.get(`/builds/${i}/${n}`)).data.status==="cancelled"&&(E.warn(S.yellow(`
|
|
729
|
+
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),d.abort(),p&&clearInterval(p))}catch{}},5e3));let h=P.join(process.cwd(),".mach-cache"),m="setup",y="",$=null,N=async()=>{if(!y||!i)return;let g=y;y="";try{let D=g;Object.values(t).forEach(I=>{if(I&&I.length>5){let b=I.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");D=D.replace(new RegExp(b,"g"),"[SECRET]")}}),await _.post(`/builds/${i}/${n}/logs`,{log:D,step:m})}catch{}},C=async()=>{$&&(clearTimeout($),$=null),await N(),so(h,n),p&&(clearInterval(p),p=null);try{let g=P.join(Ie.tmpdir(),`${f.buildPrefix}-${n}.keychain-db`);A.existsSync(g)&&(F(`security delete-keychain "${g}"`,{stdio:"ignore"}),E.info(S.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let g=P.join(Ie.homedir(),"Library/MobileDevice/Provisioning Profiles");if(A.existsSync(g)){let D=A.readdirSync(g).filter(I=>I.includes(n)||I.startsWith(`${f.nameLower}-temp-${n}`));for(let I of D)A.unlinkSync(P.join(g,I))}}catch{}},x=async g=>{i&&(y+=g,y.length>=8192?($&&(clearTimeout($),$=null),await N()):$||($=setTimeout(()=>{$=null,N()},2e3)))},H=async g=>{m=g,await x(`[STEP_START:${g}] ${Math.floor(Date.now()/1e3)}
|
|
730
|
+
`)},X=async(g,D,I,b)=>await De(g,D,I,b,O=>{x(O)},u);E.info(S.blue(`\u{1F680} Starting local build for ${c} (${s})...`));try{ro(h,n)}catch(g){throw await l("failed",{error:g.message}),g}if(await l("building"),await H("setup"),i&&c==="ios"&&!e.simulator)try{let g=parseInt(t.BUILD_NUMBER||"0",10),D=await _.post(`/projects/${i}/next-build-number`,{platform:"ios",startFrom:g});D.data.status==="success"&&(t.BUILD_NUMBER=String(D.data.buildNumber),E.info(S.dim(`Auto build number: ${t.BUILD_NUMBER}`)),await x(`[BUILD_NUMBER] ${t.BUILD_NUMBER}
|
|
731
|
+
`))}catch(g){E.warn(S.yellow(`Could not fetch auto build number: ${g.message}`))}await H("lock"),e.developmentClient?(E.info(S.blue("\u2139\uFE0F Configuring build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(E.info(S.blue("\u2139\uFE0F Configuring build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client");try{await H("clone"),E.info(S.dim("Preparing source...")),await H("read_config");let g=P.join(process.cwd(),f.configFileName);if(A.existsSync(g)){let U=JSON.parse(A.readFileSync(g,"utf-8"))?.build?.[s]||{};await x(`[CONFIG] Profile: ${s}, distribution: ${U.distribution||"not set"}, simulator: ${U.simulator||!1}
|
|
732
|
+
`)}if(await H("read_package"),e.nodeVersion){let k=process.env.NVM_DIR||P.join(Ie.homedir(),".nvm"),U=P.join(k,"versions","node"),q;if(A.existsSync(U)){let R=A.readdirSync(U).sort().reverse(),ie=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,V=R.find(Y=>Y===ie||Y.startsWith(ie+".")||Y.startsWith(`v${e.nodeVersion}.`));V&&(q=P.join(U,V,"bin"))}if(q&&A.existsSync(q)){let R=process.env.PATH||"";process.env.PATH=`${q}:${R}`,await x(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${q}
|
|
733
|
+
`),E.info(S.green(`\u2713 Node switched to ${e.nodeVersion} (${q})`))}else await x(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
|
|
734
|
+
`),E.warn(S.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await H("deps"),r.start("Checking dependencies...");let D=no(h),I=to(process.cwd()),b=A.existsSync("node_modules"),O=A.existsSync("yarn.lock"),G=A.existsSync("bun.lockb");b&&D.node&&D.node!==I&&(r.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await x(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
|
|
735
|
+
`),A.rmSync(P.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),b=!1);let M="npm",T=["install","--prefer-offline"];O?(M="yarn",T=["install","--prefer-offline"]):G&&(M="bun",T=["install"]),b?r.stop("Cached node_modules found. Syncing dependencies..."):r.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(E.info(S.blue("Running pre-install hook...")),E.info(S.dim(`> ${e.preBuild}`)),await H("prebuild"),await X("bash",[e.preBuild],process.cwd(),t)),E.info(S.dim(`Running ${M} ${T.join(" ")}...`)),await X(M,T,process.cwd(),t),D.node=I,bi(h,D);let L=JSON.parse(A.readFileSync("package.json","utf-8")),Z=L.dependencies?.expo||L.devDependencies?.expo,K=e.iosBundleIdentifier||"",j=e.name||"";if(Z){r.start(`Enforcing ${f.name} configuration...`);let k=P.join(process.cwd(),"app.json"),U=null;if(A.existsSync(k)){U=A.readFileSync(k,"utf-8");let R=JSON.parse(U);R.expo=R.expo||{},j||(j=R.expo.name||""),c==="ios"&&!K&&(K=R.expo?.ios?.bundleIdentifier||""),e.name&&(R.expo.name=e.name),e.scheme&&(R.expo.scheme=e.scheme),c==="ios"&&e.iosBundleIdentifier?(R.expo.ios=R.expo.ios||{},R.expo.ios.bundleIdentifier=e.iosBundleIdentifier):c==="android"&&e.androidPackage&&(R.expo.android=R.expo.android||{},R.expo.android.package=e.androidPackage),A.writeFileSync(k,JSON.stringify(R,null,2))}let q=["exec","--","expo","prebuild","--platform",c,"--no-install"];try{if(await H("prebuild"),await X("npm",q,process.cwd(),t),c==="ios"&&A.existsSync("ios")){await H("pods"),E.info(S.blue("Running pod install..."));try{let R=P.resolve("ios"),ie=P.join(R,"Podfile");if(!A.existsSync(ie))throw new Error("ios/Podfile not found. Skipping pod install.");let V=A.readFileSync(ie,"utf-8"),Y=e.iosDeploymentTarget||"13.4";if(!e.developmentClient&&(E.info(S.blue("\u2139\uFE0F Patching Podfile to EXCLUDE expo-dev-client...")),V.includes("use_expo_modules!")&&!V.includes("exclude:"))){let ae=/use_expo_modules!(\s*)$/m;ae.test(V)?V=V.replace(ae,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):V=V.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let oe=`
|
|
736
736
|
installer.generated_projects.each do |project|
|
|
737
737
|
project.targets.each do |target|
|
|
738
738
|
target.build_configurations.each do |config|
|
|
@@ -745,19 +745,19 @@ ${Te.dim("Note: Links are valid for 7 days.")}`)}else O&&He.warn("Simulator buil
|
|
|
745
745
|
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${Y}'
|
|
746
746
|
end
|
|
747
747
|
end
|
|
748
|
-
`,Ee=/post_install\s+do\s+\|installer\|/;if(Ee.test(V))
|
|
749
|
-
${oe}`),
|
|
748
|
+
`,Ee=/post_install\s+do\s+\|installer\|/;if(Ee.test(V))E.info(S.dim(`Injecting deployment target (${Y}) into existing post_install hook...`)),V=V.replace(Ee,`post_install do |installer|
|
|
749
|
+
${oe}`),A.writeFileSync(ie,V);else{E.info(S.dim(`Appending new post_install hook for deployment target (${Y})...`));let ae=`
|
|
750
750
|
post_install do |installer|
|
|
751
751
|
${oe}
|
|
752
752
|
end
|
|
753
|
-
`;
|
|
754
|
-
`),
|
|
755
|
-
\u2713 Local build completed successfully in ${Se}`)),await l("building",{...K&&{bundleId:K},...j&&{appName:j}}),B.length>0&&(
|
|
756
|
-
\u{1F4E6} Generated Artifacts:`)),B.forEach(k=>{let U=P.resolve(k);
|
|
757
|
-
\u274C Build aborted.`)),await l("failed",{error:"Aborted by user"}),
|
|
758
|
-
\u2717 Local build failed: ${
|
|
759
|
-
`)[0]||"unknown"}`))}if(!q)throw new Error("Failed to import P12.");
|
|
760
|
-
`).map(se=>se.trim().replace(/^"|"$/g,"")).filter(se=>se.length>0),
|
|
753
|
+
`;A.appendFileSync(ie,ae)}let qe="/opt/homebrew/bin/pod",Lt=A.existsSync(qe)?qe:"pod",Fe=io(R);A.existsSync(P.join(R,"Pods"))&&D.pods&&D.pods!==Fe&&(await x(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
|
|
754
|
+
`),E.info(S.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),A.rmSync(P.join(R,"Pods"),{recursive:!0,force:!0})),E.info(S.dim(`Using pod command: ${Lt} in ${R}`)),await X(Lt,["install"],R,t),D.pods=Fe,bi(h,D)}catch(R){let ie=R.message||"Unknown error";E.warn(S.yellow(`Native "pod" command failed: ${ie}`)),E.info(S.dim("Falling back to npm exec pod-install...")),E.info(S.magenta(`${f.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await X("npx",["--yes","pod-install@latest","ios"],process.cwd(),t)}if(A.existsSync("ios/Pods")){E.info(S.dim("Disabling signing for Pod targets to prevent conflicts..."));try{F(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}}}finally{U&&A.writeFileSync(k,U)}r.stop(`Expo prebuild complete (${f.name} config enforced).`)}let B=[];if(c==="android")await H("build"),B=await co(e,s,t,k=>x(k),u);else if(c==="ios"){await H("signing"),E.info(S.dim("Preparing credentials..."));let k=o?.distributionType;B=await lo(e,n,s,t,i,U=>x(U),u,k,U=>H(U))}e.postBuild&&(E.info(S.blue("Running post-build hook...")),E.info(S.dim(`> ${e.postBuild}`)),await X(e.postBuild,[],process.cwd(),t));let Se=ao(Date.now()-a);if(E.success(S.green(`
|
|
755
|
+
\u2713 Local build completed successfully in ${Se}`)),await l("building",{...K&&{bundleId:K},...j&&{appName:j}}),B.length>0&&(E.info(S.cyan(`
|
|
756
|
+
\u{1F4E6} Generated Artifacts:`)),B.forEach(k=>{let U=P.resolve(k);E.info(S.dim(` - ${k}`)),E.info(S.gray(` Path: ${U}`))}),e.interactive)){let k=await Qn({message:"Install on connected device?"});if(!yt(k)&&k){if(c==="android"){let U=B.find(q=>q.endsWith(".apk"))||B[0];await po(U,q=>x(q))}else if(c==="ios"){let U=B.find(R=>R.endsWith(".ipa"))||B.find(R=>R.endsWith(".app"))||B[0],q=Oe("ios");e.simulator?await fo(U,q||"",R=>x(R)):await mo(U,q||"",R=>x(R))}}}await H("upload");let Ae=[];for(let k of B)try{let U=P.join(Ie.tmpdir(),`${n}-${P.basename(k)}`);A.copyFileSync(k,U),Ae.push(U),E.info(S.dim(` \u{1F4CB} Preserved artifact: ${P.basename(k)}`))}catch{E.warn(S.yellow(` Failed to preserve artifact: ${P.basename(k)}`))}B=Ae,E.info(S.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let k=process.cwd(),U=new Set(["node_modules"]),q=A.readdirSync(k),R=0;for(let ie of q)if(!U.has(ie)){if(ie==="ios"){let V=P.join(k,"ios"),Y=A.readdirSync(V);for(let oe of Y)if(oe!=="Pods")try{A.rmSync(P.join(V,oe),{recursive:!0,force:!0}),R++}catch{}continue}try{A.rmSync(P.join(k,ie),{recursive:!0,force:!0}),R++}catch{}}E.info(S.dim(` Cleaned ${R} items. Cached: node_modules${A.existsSync(P.join(k,"ios","Pods"))?", ios/Pods":""}`)),E.info(S.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{E.warn(S.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let U=P.join(Ie.homedir(),f.workspacesDir),q=F(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),R=parseInt(q,10)*1024;if(R<53687091200&&A.existsSync(U)){E.info(S.dim(` \u26A0\uFE0F Low disk space (${(R/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let ie=P.basename(process.cwd()),V=A.readdirSync(U).filter(Y=>Y!==ie).map(Y=>{let oe=P.join(U,Y);try{let Ee=A.statSync(oe);return Ee.isDirectory()?{name:Y,dir:oe,mtime:Ee.mtimeMs}:null}catch{return null}}).filter(Boolean);V.sort((Y,oe)=>Y.mtime-oe.mtime);for(let Y of V){if(R>=53687091200)break;try{A.rmSync(Y.dir,{recursive:!0,force:!0}),E.info(S.dim(` \u{1F5D1}\uFE0F Evicted stale workspace: ${Y.name}`));let oe=F(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(oe,10)*1024>=53687091200)break}catch{}}}}catch{}return await C(),B}catch(g){throw await C(),g.message==="Command aborted"?(E.warn(S.yellow(`
|
|
757
|
+
\u274C Build aborted.`)),await l("failed",{error:"Aborted by user"}),g):(E.error(S.red(`
|
|
758
|
+
\u2717 Local build failed: ${g.message}`)),await l("failed",{error:g.message}),g)}},co=async(e,n,t={},i,o)=>{let r=A.existsSync("android/gradlew")?"android/gradlew":A.existsSync("gradlew")?"./gradlew":null;if(!r)throw new Error("Could not find gradlew. Is this an Android project?");let a="assembleRelease";e.distribution==="store"?a="bundleRelease":e.distribution==="internal"&&(a="assembleRelease");let c=e.buildCommand||a;E.info(S.blue(`Running Android build: ${c}...`));let s=r.includes("android/")?"android":".",l=(r.includes("android/"),"./gradlew");await De(l,[c],s,t,i,o);let d=P.join(s,"app/build/outputs");return Ge(d,[".apk",".aab"])},lo=async(e,n,t,i={},o,r,a,c,s)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let l=P.resolve(process.cwd(),A.existsSync("ios")?"ios":"."),d=A.readdirSync(l),u=d.find(C=>C.endsWith(".xcworkspace")),p=d.find(C=>C.endsWith(".xcodeproj"));if(!u&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let C=F("xcode-select -p").toString().trim();E.info(S.dim(`Using Xcode at: ${C}`))}catch{E.warn(S.dim("Could not detect Xcode path."))}E.info(S.blue("Running iOS build via xcodebuild..."));let h=u?u.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),m=e.iosScheme||h||e.scheme,y=e.developmentClient?"Debug":e.iosConfiguration||"Release",$=(o||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),N=P.join(Ie.homedir(),`Library/Developer/Xcode/DerivedData/${f.nameLower}`,$);if(A.mkdirSync(N,{recursive:!0}),e.simulator){E.info(S.dim(`Building for simulator (Scheme: ${m}, Config: ${y})...`)),await De("xcodebuild",[u?"-workspace":"-project",u||p,"-scheme",m,"-configuration",y,"-sdk","iphonesimulator","-derivedDataPath",N,"CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO"],l,i,r,a);let C=P.join(N,"Build/Products",`${y}-iphonesimulator`),x=Ge(C,[".app"]);if(x.length>0){let H=x[0],X=P.basename(H,".app"),g=P.join(C,`${X}_simulator.zip`);return E.info(S.dim(`Creating simulator artifact: ${g}...`)),F(`cd "${C}" && zip -r "${g}" "${P.basename(H)}"`),[g]}return[]}else{E.info(S.dim(`Archiving (Scheme: ${m}, Config: ${y})...`));let C=P.join(l,"build.xcarchive"),x=P.join(l,"export"),H=i.IOS_DIST_P12,X=i.IOS_PROVISIONING_PROFILE,g=i.IOS_P12_PASSWORD||"",D=[],I,b,O={isAppStore:!1,isDevelopment:!1};if(H&&X){E.info(S.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let j=`${f.buildPrefix}-${n}.keychain-db`,B=P.join(Ie.tmpdir(),j),Se=f.keychainPassword;F(`security create-keychain -p "${Se}" "${B}" 2>/dev/null || true`),F(`security set-keychain-settings -t 3600 -l "${B}"`),F(`security unlock-keychain -p "${Se}" "${B}"`);let Ae=P.join(Ie.tmpdir(),`cert-${n}.p12`),k=Buffer.from(H,"base64");A.writeFileSync(Ae,k),E.info(S.dim(`P12 data size: ${k.length} bytes, first bytes: ${k.slice(0,4).toString("hex")}`)),(k.length<100||k[0]!==48)&&(E.warn(S.yellow("\u26A0\uFE0F P12 data looks corrupted or was not decrypted correctly.")),E.warn(S.yellow(" This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let U=[g,"",f.keychainPassword],q=!1;for(let se of U)try{F(`security import "${Ae}" -k "${B}" -P "${se}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),q=!0,E.info(S.dim(`\u2713 P12 imported successfully with password: ${se?"[set]":"[empty]"}`));break}catch(ae){E.info(S.dim(` P12 import attempt with password ${se?`"${se.substring(0,3)}..."`:"[empty]"} failed: ${ae.message?.split(`
|
|
759
|
+
`)[0]||"unknown"}`))}if(!q)throw new Error("Failed to import P12.");A.unlinkSync(Ae),F(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${Se}" "${B}"`);let R=F("security list-keychains -d user",{encoding:"utf-8"}).split(`
|
|
760
|
+
`).map(se=>se.trim().replace(/^"|"$/g,"")).filter(se=>se.length>0),ie=[B,...R].map(se=>`"${se}"`).join(" ");F(`security list-keychains -d user -s ${ie}`),F(`security default-keychain -s "${B}"`);let V=P.join(Ie.homedir(),"Library/MobileDevice/Provisioning Profiles");A.mkdirSync(V,{recursive:!0});let Y=Buffer.from(X,"base64"),oe=P.join(V,`${f.nameLower}-temp-${n}.mobileprovision`);A.writeFileSync(oe,Y);let Ee=Y.toString("utf-8"),qe=/<key>get-task-allow<\/key>\s*<true\/>/.test(Ee);O={isAppStore:!Ee.includes("<key>ProvisionedDevices</key>")&&!qe,isDevelopment:qe};try{let ae=F(`security cms -D -i "${oe}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=ae?ae[1]:void 0}catch{let ae=Ee.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=ae?ae[1]:void 0}b||(E.warn("Could not extract UUID from provisioning profile. Using fallback."),b=`${f.nameLower}-${n}`);let Fe=P.join(V,`${b}.mobileprovision`);A.existsSync(Fe)&&A.unlinkSync(Fe),A.renameSync(oe,Fe);try{let ae=F(`security find-identity -v -p codesigning "${B}"`,{encoding:"utf-8"}).match(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/);ae&&(I=ae[1],E.info(S.blue(`Identity auto-detected from keychain: "${I}"`)))}catch{}I||(I=O.isDevelopment?"Apple Development":"Apple Distribution",E.info(S.blue(`Identity fallback (profile heuristic): "${I}"`))),E.info(S.dim(`Profile type: ${O.isDevelopment?"Development":O.isAppStore?"App Store":"Ad-Hoc"}`)),E.info(S.dim(`Identity Detection: get-task-allow=${O.isDevelopment}, Selected Identity="${I}"`)),D.push("CODE_SIGN_STYLE=Manual"),D.push(`CODE_SIGN_IDENTITY="${I}"`),D.push(`PROVISIONING_PROFILE_SPECIFIER=${b}`),e.iosTeamId&&D.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(j){throw E.error(`Signing setup failed: ${j.message}`),j}}else D.push("-allowProvisioningUpdates"),e.iosTeamId&&D.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);s&&await s("archive"),E.info(S.blue(`Archive detected Identity: "${I}"`)),E.info(S.blue(`Archive detected UUID: "${b}"`)),await De("xcodebuild",["archive",u?"-workspace":"-project",u||p,"-scheme",m,"-configuration",y,"-archivePath",C,"-derivedDataPath",N,...D],l,i,r,a);let G;b?(O.isAppStore?G="app-store":O.isDevelopment?G="development":G="ad-hoc",E.info(S.blue(`Export method from profile: "${G}"`))):(G=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",E.warn(S.yellow(`No profile UUID detected. Export method from distribution flag: "${G}"`)));let M=e.iosExportMethod||G,T=Oe("ios"),L=P.join(l,"ExportOptions.plist"),Z=`<?xml version="1.0" encoding="UTF-8"?>
|
|
761
761
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
762
762
|
<plist version="1.0">
|
|
763
763
|
<dict>
|
|
@@ -777,46 +777,46 @@ end
|
|
|
777
777
|
<string>${b}</string>
|
|
778
778
|
</dict>`:""}
|
|
779
779
|
</dict>
|
|
780
|
-
</plist>`;if(
|
|
781
|
-
${
|
|
780
|
+
</plist>`;if(A.writeFileSync(L,Z),process.env[`${f.envPrefix}DEBUG`]&&E.info(S.magenta(`[${f.nameUpper}_DEBUG] ExportOptions.plist:
|
|
781
|
+
${Z}`)),s&&await s("export"),E.info(S.blue(`Exporting with Bundle ID: "${T}"`)),E.info(S.blue(`Exporting with Method: "${M}"`)),r){r(S.magenta(`
|
|
782
782
|
[DIAGNOSTIC] Checking available signing identities...
|
|
783
783
|
`));try{let j=F("security find-identity -v -p codesigning",{encoding:"utf-8"});r(S.magenta(`${j}
|
|
784
784
|
`))}catch(j){r(S.red(`[DIAGNOSTIC] Failed to list identities: ${j.message}
|
|
785
785
|
`))}}await De("xcodebuild",["-exportArchive","-archivePath",C,"-exportPath",x,"-exportOptionsPlist",L],l,i,r,a),s&&await s("validate");let K=Ge(x,[".ipa"]);for(let j of K)try{F(`unzip -t "${j}"`,{stdio:"pipe"}),r&&r(`[IPA VALID] ${P.basename(j)} \u2014 archive integrity OK
|
|
786
786
|
`)}catch{let Se=`IPA validation failed for ${P.basename(j)}: archive may be corrupt`;throw r&&r(`[IPA CORRUPT] ${Se}
|
|
787
|
-
`),new Error(Se)}return K}},Oe=e=>{try{let n=P.join(process.cwd(),f.configFileName);if(
|
|
788
|
-
`).slice(1).map(a=>a.trim()).filter(a=>a.length>0&&!a.startsWith("*")).map(a=>a.split(" ")[0]).length===0){
|
|
789
|
-
`).filter(s=>s.trim().length>0)}catch{}if(c.length>0){let s=await Ft({message:"Select an emulator to launch:",options:c.map(u=>({value:u,label:u}))});if(yt(s))return;t.start(`Launching emulator ${s}...`),$i(a,["-avd",s],{detached:!0,stdio:"ignore"}).unref();let l=0,d=!1;for(;l<60;){try{if(F("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),l++}if(!d)throw t.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");t.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}t.start("Installing APK on device..."),await De("adb",["install","-r",e],process.cwd(),{},n),t.stop("Installation complete.");let r=Oe("android");if(r){
|
|
790
|
-
`).find(s=>s.includes("android.intent.action.MAIN")&&s.includes("android.intent.category.LAUNCHER"))?F(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):F(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{A.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){t.stop("Installation failed."),A.error(S.red(`Failed to install APK: ${i.message}`))}},fo=async(e,n,t)=>{let i=ht();try{if(!F("xcrun simctl list devices booted").toString().includes("(Booted)")){A.warn(S.yellow("No iOS Simulator is currently booted."));let r=F("xcrun simctl list devices --json").toString(),a=JSON.parse(r).devices,c=[];Object.keys(a).forEach(u=>{a[u].forEach(p=>{p.isAvailable&&c.push({...p,runtime:u})})});let s=await Ft({message:"Select a simulator to launch:",options:c.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(yt(s))return;i.start(`Booting ${s}...`),F(`xcrun simctl boot ${s}`),F(`open -a Simulator --args -CurrentDeviceUDID ${s}`);let l=0,d=!1;for(;l<30;){try{if(F("xcrun simctl list devices booted").toString().includes(s)){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),l++}if(!d)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),await De("xcrun",["simctl","install","booted",e],process.cwd(),{},t),i.stop("Installation complete."),A.info(S.blue(`\u{1F680} Launching ${n}...`)),await De("xcrun",["simctl","launch","booted",n],process.cwd(),{},t)}catch(o){i.stop("Installation failed."),A.error(S.red(`Failed to install on Simulator: ${o.message}`))}},mo=async(e,n,t)=>{let i=ht();i.start("Scanning for connected iOS devices...");try{let o=F("xcrun devicectl list devices --json-output -").toString(),a=(JSON.parse(o).result?.devices||[]).filter(s=>s.connectionProperties?.transportType==="wired"||s.connectionProperties?.transportType==="localNetwork");if(a.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let c=a[0].identifier;if(a.length>1){i.stop();let s=await Ft({message:"Select a device to install on:",options:a.map(l=>({value:l.identifier,label:`${l.deviceProperties?.name||l.name||l.model?.name} (${l.model?.name||"iPhone"}) - ${l.identifier}`}))});if(yt(s))return;c=s,i.start(`Installing on ${c}...`)}else i.message(`Installing on ${a[0].model.name}...`);await De("xcrun",["devicectl","device","install","app","--device",c,e],process.cwd(),{},t),i.stop("Installation complete."),A.info(S.blue(`\u{1F680} Launching ${n}...`)),await De("xcrun",["devicectl","device","launch","app","--device",c,n],process.cwd(),{},t)}catch(o){i.stop("Installation failed."),A.error(S.red(`Failed to install on device: ${o.message}`)),A.info(S.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import St from"fs";function Ne(e){if(e){if(!St.existsSync(e))return null;try{return JSON.parse(St.readFileSync(e,"utf-8"))}catch{return null}}if(!St.existsSync(`./${f.configFileName}`))return null;try{return JSON.parse(St.readFileSync(`./${f.configFileName}`,"utf-8"))}catch{return null}}function Ue(e,n,t=new Set){if(t.has(n))throw new Error(`Circular inheritance detected in profile: ${n}`);t.add(n);let i=e.build?.[n];if(!i)return null;let o={...i};if(i.extends){let r=Ue(e,i.extends,t);r&&(o={...r,...i,env:{...r.env,...i.env},ios:{...r.ios,...i.ios},android:{...r.android,...i.android}})}if(o.envGroups&&Array.isArray(o.envGroups)){let r={};for(let a of o.envGroups){let c=e.envGroups?.[a];c?Object.assign(r,c):log.warn(`Environment group not found: ${a}`)}o.env={...r,...o.env}}return o}var je=(e,n=`${f.envPrefix}`)=>{let t={},i=(o,r)=>{if(o)for(let a in o){let c=o[a],s=`${r}${a.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;c!==null&&typeof c=="object"&&!Array.isArray(c)?i(c,`${s}_`):t[s]=String(c)}};return i(e,n),t};var At=async e=>{e.platform!=="android"&&e.platform!=="ios"&&(D.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let n=Gt(),t=e.buildId||go(),i=e.projectId,o=Date.now(),r=!!i,a=async c=>{if(i)try{await _.patch(`/builds/${i}/${t}`,{status:"failed",error:c})}catch{}};if(e.local&&e.buildId){e.quiet||n.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let c=await _.get(`/builds/${i}/${e.buildId}/source-url`);if(c.data.status!=="success")throw new Error("Failed to get source download URL from API");let s=await tt.get(c.data.downloadUrl,{responseType:"stream"}),l=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),d=we.join(ho.homedir(),f.workspacesDir,l);ce.mkdirSync(d,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(ce.existsSync(d)){let N=ce.readdirSync(d);for(let C of N){if(u.has(C))continue;if(C==="ios"){let H=we.join(d,"ios");try{let X=ce.readdirSync(H);for(let y of X)if(!p.has(y))try{ce.rmSync(we.join(H,y),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=we.join(d,C);try{ce.rmSync(x,{recursive:!0,force:!0})}catch{}}}let g=we.join(d,"source.zip"),m=s.data,h=ce.createWriteStream(g);await new Promise((N,C)=>{m.pipe(h),m.on("error",x=>C(x)),h.on("finish",()=>N())}),new vi(g).extractAllTo(d,!0);try{ce.unlinkSync(g)}catch{}process.chdir(d),D.info(v.green(`\u2713 Persistent workspace ready: ${d}`)),D.info(v.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${ce.existsSync(we.join(d,"node_modules"))?"\u2705":"\u274C"}, Pods=${ce.existsSync(we.join(d,"ios","Pods"))?"\u2705":"\u274C"}`)),n.stop()}catch(c){n.stop(`Failed to prepare isolated workspace: ${c.message}`),i&&await a(`Setup Error: ${c.message}`),process.exit(1)}}try{let c=e.repo;if(!c)try{c=wi("git config --get remote.origin.url").toString().trim()}catch{D.warn("Could not detect git repository URL.")}!c&&e.dryRun,c||(c="https://github.com/placeholder/repo.git"),D.info(`Build ID: ${v.cyan(t)}`);let s={},l={},d=Ne(`./${f.configFileName}`);if(d){i=d.projectId;let y=e.buildProfile||"production",w=Ue(d,y);!w&&e.buildProfile&&(D.error(`Build profile '${y}' not found in ${f.configFileName}`),process.exit(1));let I=w||{};process.env.MACH_DEBUG&&D.info(v.dim(`Build profile: ${y} | Platform: ${e.platform} | Distribution: ${I.distribution||"store"} | Environment: ${I.environment||y}`)),I.env&&(l=I.env,D.info(v.blue(`Use Build Profile: ${y}`)));let b=e.platform,O=I[b]||{},G=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=d.name,e.appName=d.name,e.androidPackage=d.android?.package,e.iosBundleIdentifier=d.ios?.bundleIdentifier,e.iosScheme=d.ios?.iosScheme,!e.nodeVersion&&d.nodeVersion&&(e.nodeVersion=d.nodeVersion);for(let L of G){let Q=O[L]!==void 0?O[L]:I[L];Q!==void 0&&e[L]===void 0&&(e[L]=Q)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let M=L=>{if(!L)return L;if(L.startsWith("scripts.")){let Q=L.split(".")[1],K=d.scripts?.[Q];if(K)return K;D.warn(`Script reference not found: ${L}`)}return L};e.buildCommand=M(e.buildCommand),e.preBuild=M(e.preBuild),e.postBuild=M(e.postBuild),!e.scheme&&d.scheme&&(e.scheme=d.scheme);let T={...je(d,f.envPrefix),...je(I,`${f.envPrefix}PROFILE_`)};s={...s,...l,...T},process.env.IOS_P12_PASSWORD&&!s.IOS_P12_PASSWORD&&(s.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!s.MATCH_PASSWORD&&(s.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&I.ios?.appleTeamId&&(e.iosTeamId=I.ios.appleTeamId),!e.iosTeamId&&d.submit?.[y]?.ios?.appleTeamId&&(e.iosTeamId=d.submit[y].ios.appleTeamId),!e.iosTeamId&&d.submit?.production?.ios?.appleTeamId&&(D.warn(v.yellow(`Check: Using 'production' Team ID for '${y}' build.`)),e.iosTeamId=d.submit.production.ios.appleTeamId),e.iosTeamId?D.info(v.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):D.warn(v.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=wi("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{D.warn("Failed to detect git branch.")}let p="1.0.0";try{ce.existsSync("./package.json")&&(p=JSON.parse(ce.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",m="Internal";e.developmentClient?m="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?m="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?m="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(m="Development");let h=e.platform==="ios"?"iOS":"Android",$=e.platform==="ios"&&e.simulator?" (Simulator)":"",N=`${h}${$} v${p} (${m})`;if(i){try{let y=e.buildProfile||"production";D.info(v.blue(`Fetching managed secrets for profile: ${y}...`));let w=e.environment||y,b=(await _.get(`/projects/${i}/secrets/export?env=${w}`)).data;b.status==="success"&&b.secrets&&(s={...s,...b.secrets},Object.keys(b.secrets).length>0&&D.info(v.magenta(`\u2713 Injected ${Object.keys(b.secrets).length} secrets from Dashboard.`)))}catch(y){D.warn(`Failed to load managed secrets from Dashboard: ${y.message}`)}try{D.info(v.blue("Fetching managed credentials..."));let y="development";e.distribution==="store"?y="store":e.distribution==="internal"&&(y=e.platform==="ios"?"adhoc":"internal"),m==="Staging"&&e.developmentClient&&(y="development");let w=await _.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:e.iosBundleIdentifier||e.androidPackage,distributionType:y}});if(w.data.status==="success"&&w.data.credentials){let I=w.data.credentials;D.info(v.magenta(`\u2713 Found ${I.length} relevant credentials.`));let b=I.filter(T=>{if(T.distributionType){let L=y==="internal"?"adhoc":y;return T.distributionType===L||T.distributionType===y}return!0});D.info(v.dim(` Filtered to ${b.length} credentials for distributionType: ${y}`));let O=!1,G=!1,M=!1;for(let T of b)if(T.downloadUrl)try{let L="",Q=5;for(;Q>0;)try{let K=await tt.get(T.downloadUrl,{responseType:"arraybuffer",timeout:3e4,headers:{Connection:"close"}});L=Buffer.from(K.data).toString("base64");break}catch(K){if(Q--,Q===0)throw K;D.warn(v.dim(` - Temporary network error downloading ${T.name}. Retrying... (${5-Q}/5)`)),await new Promise(j=>setTimeout(j,2e3))}if(T.type==="ios_cert"&&!O)s.IOS_DIST_P12=L,T.password?(s.IOS_P12_PASSWORD=T.password,D.info(v.dim(` - Injected ${T.name} as IOS_DIST_P12 with password from credential record`))):D.info(v.dim(` - Injected ${T.name} as IOS_DIST_P12`)),O=!0;else if(T.type==="ios_profile"&&!G)s.IOS_PROVISIONING_PROFILE=L,D.info(v.dim(` - Injected ${T.name} as IOS_PROVISIONING_PROFILE`)),G=!0;else if(T.type==="android_keystore"&&!M){s.ANDROID_KEYSTORE_BASE64=L;let K=T.password,j=T.alias||T.meta?.alias;if(K)s.ANDROID_KEY_PASSWORD=K,s.ANDROID_STORE_PASSWORD=K,D.info(v.dim(" - Injected keystore password from credential record"));else{let Ae=["ANDROID_KEY_PASSWORD",...[y==="store"?"PRODUCTION":y==="internal"?"STAGING":"DEVELOPMENT",y.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(k=>`KEYSTORE_PASSWORD_${k}`),"KEYSTORE_PASSWORD"].find(k=>!!s[k]);Ae&&s[Ae]&&(s.ANDROID_KEY_PASSWORD=s[Ae],s.ANDROID_STORE_PASSWORD=s[Ae])}if(j)s.ANDROID_KEY_ALIAS=j;else{let B=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(Se=>!!s[Se]);B&&(s.ANDROID_KEY_ALIAS=s[B])}D.info(v.dim(` - Injected ${T.name} as ANDROID_KEYSTORE_BASE64`)),M=!0}}catch(L){D.warn(`Failed to download credential ${T.name}: ${L.message}`)}}if(e.platform==="android"){let I=d.android?.versionCode==="auto"||d.expo?.android?.versionCode==="auto";if(e.autoVersion||I){n.start("Resolving latest versionCode from Google Play...");try{let b=(w.data.credentials||[]).find(K=>K.type==="google_service_account");if(b||(b=((await _.get(`/credentials/${i}`)).data.credentials||[]).find(j=>j.type==="google_service_account")),!b)throw new Error("Google Service Account not found. Upload it via Dashboard to use auto-versioning.");let O=await _.get(`/credentials/${b.credentialId}/download`,{params:{projectId:i}});if(O.data.status!=="success"||!O.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let M=(await tt.get(O.data.downloadUrl,{headers:{Connection:"close"}})).data,T=e.androidPackage||d.android?.package||d.expo?.android?.package||d.name,L=await Ii(T,M);if(L==null)throw new Error("Could not retrieve any version information from Google Play.");let Q=L+1;s.ANDROID_VERSION_CODE=Q.toString(),n.stop(`\u2713 Resolved versionCode: ${v.green(Q)} (Latest on Play Store: ${L})`)}catch(b){n.stop("Version resolution failed");let O=b.response?.data?.error?.message||b.message;D.warn(v.yellow(` \u26A0\uFE0F Auto-versioning failed: ${O}`)),D.warn(v.dim(' Falling back to version code from config. To fix: ensure Service Account has "View App Metadata" and "View App Information" permissions in Google Play Console.'))}}}if(e.platform==="ios"&&!e.simulator){let I=!!s.IOS_DIST_P12,b=!!s.IOS_PROVISIONING_PROFILE;if(!I||!b){let O=[...I?[]:["Distribution Certificate"],...b?[]:["Provisioning Profile"]].join(" and ");D.error(v.red(`Missing iOS credentials: ${O}`)),e.quiet&&process.exit(1);let G=e.yes||await _i({message:"Would you like to generate these credentials now?",initialValue:!0});if(G&&!Di(G))return await Je({platform:"ios",profile:g}),e.quiet||D.info(v.green("\u2713 Credentials setup complete! Restarting build phase...")),At(e);e.quiet||D.info(v.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&(e.distribution==="internal"||e.distribution==="store")&&!(!!s.ANDROID_KEYSTORE_BASE64||!!s.ANDROID_KEYSTORE)){D.error(v.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let b=e.yes||await _i({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(b&&!Di(b))return await Je({platform:"android",profile:g}),e.quiet||D.info(v.green("\u2713 Android Keystore setup complete! Restarting build phase...")),At(e);e.quiet||D.info(v.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(y){D.warn(`Failed to resolve credentials: ${y.message}`)}}let C=!!(e.local&&e.buildId),x=!!(e.local||e.sshHost),H=!x&&!C;if(C){D.info(v.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let y=await Ht({...e,interactive:!1},t,s,i,{branch:u,version:p,summary:N,buildType:m});await X(y),process.exit(0)}async function X(y){if(i&&y.length>0){let w=Gt(),I=[];e.quiet||w.start("Uploading artifacts to Dashboard...");try{for(let b of y){let O=we.basename(b),G=ce.readFileSync(b),M=we.extname(O).toLowerCase(),T="application/octet-stream",L=await _.post(`/builds/${i}/${t}/artifact-upload-url`,{fileName:O,fileType:T});if(L.data.status!=="success")throw new Error(`Failed to get upload URL for ${O}`);let Q=!1;for(let K=1;K<=3;K++)try{await tt.put(L.data.uploadUrl,G,{headers:{"Content-Type":T},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),Q=!0;break}catch(j){if(D.warn(v.yellow(`Artifact upload attempt ${K}/3 failed (${j.code||j.message})`)),K<3)await new Promise(B=>setTimeout(B,3e3*K));else throw j}Q&&I.push({name:O,url:L.data.downloadUrl,size:G.length,type:M.substring(1)})}e.quiet||w.stop("Artifacts uploaded.")}catch(b){e.quiet||w.stop("Failed to upload artifacts."),D.error(v.red(`Upload error: ${b.message}`));try{await _.patch(`/builds/${i}/${t}`,{status:"completed",artifacts:y.map(O=>we.basename(O)),endTime:Date.now()})}catch(O){D.warn(v.yellow(`Could not set fallback build status: ${O.message}`))}return}if(i&&I.length>0)try{D.info(v.cyan(`
|
|
791
|
-
\u{1F517} Download Links:`));for(let b of I)
|
|
792
|
-
\u2713 Build completed and reported to dashboard.`))}catch(b){
|
|
793
|
-
\u26A0\uFE0F Could not report to dashboard: ${b.message}`))}}else if(i)try{await _.patch(`/builds/${i}/${t}`,{status:"completed",endTime:Date.now()})}catch{}}if(x){if(
|
|
794
|
-
\u2717 Build failed: ${s.error||"Unknown error"}`)),process.exit(1);else if(o==="completed"||o==="success"){t.quiet||i.stop("Build successful!"),
|
|
795
|
-
\u2713 Build completed successfully!`));try{t.quiet||(
|
|
796
|
-
\u{1F4F1} Installation Hub:`)),
|
|
797
|
-
`);if(u.length>r){for(let p=r;p<u.length;p++)u[p].trim()&&console.log(v.dim(` ${u[p]}`));r=u.length}}}catch{}a=0}catch{a++,a>10&&(i.stop("Connection lost."),
|
|
787
|
+
`),new Error(Se)}return K}},Oe=e=>{try{let n=P.join(process.cwd(),f.configFileName);if(A.existsSync(n)){let t=JSON.parse(A.readFileSync(n,"utf-8"));if(e==="android"&&t.android?.package)return t.android.package;if(e==="ios"&&t.ios?.bundleIdentifier)return t.ios.bundleIdentifier}if(e==="android"){let t=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let i of t)if(A.existsSync(i)){let r=A.readFileSync(i,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(r)return r[1]}}else{let t=P.resolve(process.cwd(),A.existsSync("ios")?"ios":"."),i=Ge(t,["Info.plist"]).filter(a=>!a.includes("/Pods/")&&!a.includes("/build/")&&!a.includes("/DerivedData/"));i.sort((a,c)=>c.split("/").length-a.split("/").length);for(let a of i){let s=A.readFileSync(a,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(s&&!s[1].includes("$"))return s[1]}let o=Ge(t,[".xcodeproj"]);if(o.length>0){let a=P.join(o[0],"project.pbxproj");if(A.existsSync(a)){let s=A.readFileSync(a,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(s)return s[1]}}let r=["app.json","app.config.json","app.config.js","app.config.ts"];for(let a of r)if(A.existsSync(a)){let s=A.readFileSync(a,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(s)return s[1]}}}catch{return null}return null},uo=()=>{try{return F("emulator -version",{stdio:"ignore"}),"emulator"}catch{let n=Ie.homedir(),t=[P.join(n,"Library/Android/sdk/emulator/emulator"),P.join(n,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of t)if(A.existsSync(i))return i}return"emulator"},po=async(e,n)=>{let t=ht();try{if(F("adb devices").toString().split(`
|
|
788
|
+
`).slice(1).map(a=>a.trim()).filter(a=>a.length>0&&!a.startsWith("*")).map(a=>a.split(" ")[0]).length===0){E.warn(S.yellow("No Android devices or emulators found."));let a=uo(),c=[];try{c=F(`${a} -list-avds`).toString().split(`
|
|
789
|
+
`).filter(s=>s.trim().length>0)}catch{}if(c.length>0){let s=await Ft({message:"Select an emulator to launch:",options:c.map(u=>({value:u,label:u}))});if(yt(s))return;t.start(`Launching emulator ${s}...`),$i(a,["-avd",s],{detached:!0,stdio:"ignore"}).unref();let l=0,d=!1;for(;l<60;){try{if(F("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),l++}if(!d)throw t.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");t.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}t.start("Installing APK on device..."),await De("adb",["install","-r",e],process.cwd(),{},n),t.stop("Installation complete.");let r=Oe("android");if(r){E.info(S.blue(`\u{1F680} Launching ${r}...`));try{F(`adb shell dumpsys package ${r}`).toString().split(`
|
|
790
|
+
`).find(s=>s.includes("android.intent.action.MAIN")&&s.includes("android.intent.category.LAUNCHER"))?F(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):F(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{E.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){t.stop("Installation failed."),E.error(S.red(`Failed to install APK: ${i.message}`))}},fo=async(e,n,t)=>{let i=ht();try{if(!F("xcrun simctl list devices booted").toString().includes("(Booted)")){E.warn(S.yellow("No iOS Simulator is currently booted."));let r=F("xcrun simctl list devices --json").toString(),a=JSON.parse(r).devices,c=[];Object.keys(a).forEach(u=>{a[u].forEach(p=>{p.isAvailable&&c.push({...p,runtime:u})})});let s=await Ft({message:"Select a simulator to launch:",options:c.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(yt(s))return;i.start(`Booting ${s}...`),F(`xcrun simctl boot ${s}`),F(`open -a Simulator --args -CurrentDeviceUDID ${s}`);let l=0,d=!1;for(;l<30;){try{if(F("xcrun simctl list devices booted").toString().includes(s)){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),l++}if(!d)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),await De("xcrun",["simctl","install","booted",e],process.cwd(),{},t),i.stop("Installation complete."),E.info(S.blue(`\u{1F680} Launching ${n}...`)),await De("xcrun",["simctl","launch","booted",n],process.cwd(),{},t)}catch(o){i.stop("Installation failed."),E.error(S.red(`Failed to install on Simulator: ${o.message}`))}},mo=async(e,n,t)=>{let i=ht();i.start("Scanning for connected iOS devices...");try{let o=F("xcrun devicectl list devices --json-output -").toString(),a=(JSON.parse(o).result?.devices||[]).filter(s=>s.connectionProperties?.transportType==="wired"||s.connectionProperties?.transportType==="localNetwork");if(a.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let c=a[0].identifier;if(a.length>1){i.stop();let s=await Ft({message:"Select a device to install on:",options:a.map(l=>({value:l.identifier,label:`${l.deviceProperties?.name||l.name||l.model?.name} (${l.model?.name||"iPhone"}) - ${l.identifier}`}))});if(yt(s))return;c=s,i.start(`Installing on ${c}...`)}else i.message(`Installing on ${a[0].model.name}...`);await De("xcrun",["devicectl","device","install","app","--device",c,e],process.cwd(),{},t),i.stop("Installation complete."),E.info(S.blue(`\u{1F680} Launching ${n}...`)),await De("xcrun",["devicectl","device","launch","app","--device",c,n],process.cwd(),{},t)}catch(o){i.stop("Installation failed."),E.error(S.red(`Failed to install on device: ${o.message}`)),E.info(S.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import St from"fs";function Ne(e){if(e){if(!St.existsSync(e))return null;try{return JSON.parse(St.readFileSync(e,"utf-8"))}catch{return null}}if(!St.existsSync(`./${f.configFileName}`))return null;try{return JSON.parse(St.readFileSync(`./${f.configFileName}`,"utf-8"))}catch{return null}}function Ue(e,n,t=new Set){if(t.has(n))throw new Error(`Circular inheritance detected in profile: ${n}`);t.add(n);let i=e.build?.[n];if(!i)return null;let o={...i};if(i.extends){let r=Ue(e,i.extends,t);r&&(o={...r,...i,env:{...r.env,...i.env},ios:{...r.ios,...i.ios},android:{...r.android,...i.android}})}if(o.envGroups&&Array.isArray(o.envGroups)){let r={};for(let a of o.envGroups){let c=e.envGroups?.[a];c?Object.assign(r,c):log.warn(`Environment group not found: ${a}`)}o.env={...r,...o.env}}return o}var je=(e,n=`${f.envPrefix}`)=>{let t={},i=(o,r)=>{if(o)for(let a in o){let c=o[a],s=`${r}${a.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;c!==null&&typeof c=="object"&&!Array.isArray(c)?i(c,`${s}_`):t[s]=String(c)}};return i(e,n),t};var At=async e=>{e.platform!=="android"&&e.platform!=="ios"&&(w.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let n=Gt(),t=e.buildId||go(),i=e.projectId,o=Date.now(),r=!!i,a=async c=>{if(i)try{await _.patch(`/builds/${i}/${t}`,{status:"failed",error:c})}catch{}};if(e.local&&e.buildId){e.quiet||n.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let c=await _.get(`/builds/${i}/${e.buildId}/source-url`);if(c.data.status!=="success")throw new Error("Failed to get source download URL from API");let s=await tt.get(c.data.downloadUrl,{responseType:"stream"}),l=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),d=we.join(ho.homedir(),f.workspacesDir,l);ce.mkdirSync(d,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(ce.existsSync(d)){let N=ce.readdirSync(d);for(let C of N){if(u.has(C))continue;if(C==="ios"){let H=we.join(d,"ios");try{let X=ce.readdirSync(H);for(let g of X)if(!p.has(g))try{ce.rmSync(we.join(H,g),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=we.join(d,C);try{ce.rmSync(x,{recursive:!0,force:!0})}catch{}}}let h=we.join(d,"source.zip"),m=s.data,y=ce.createWriteStream(h);await new Promise((N,C)=>{m.pipe(y),m.on("error",x=>C(x)),y.on("finish",()=>N())}),new vi(h).extractAllTo(d,!0);try{ce.unlinkSync(h)}catch{}process.chdir(d),w.info(v.green(`\u2713 Persistent workspace ready: ${d}`)),w.info(v.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${ce.existsSync(we.join(d,"node_modules"))?"\u2705":"\u274C"}, Pods=${ce.existsSync(we.join(d,"ios","Pods"))?"\u2705":"\u274C"}`)),n.stop()}catch(c){n.stop(`Failed to prepare isolated workspace: ${c.message}`),i&&await a(`Setup Error: ${c.message}`),process.exit(1)}}try{let c=e.repo;if(!c)try{c=wi("git config --get remote.origin.url").toString().trim()}catch{w.warn("Could not detect git repository URL.")}!c&&e.dryRun,c||(c="https://github.com/placeholder/repo.git"),w.info(`Build ID: ${v.cyan(t)}`);let s={},l={},d=Ne(`./${f.configFileName}`);if(d){i=d.projectId;let g=e.buildProfile||"production",D=Ue(d,g);!D&&e.buildProfile&&(w.error(`Build profile '${g}' not found in ${f.configFileName}`),process.exit(1));let I=D||{};process.env.MACH_DEBUG&&w.info(v.dim(`Build profile: ${g} | Platform: ${e.platform} | Distribution: ${I.distribution||"store"} | Environment: ${I.environment||g}`)),I.env&&(l=I.env,w.info(v.blue(`Use Build Profile: ${g}`)));let b=e.platform,O=I[b]||{},G=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=d.name,e.appName=d.name,e.androidPackage=d.android?.package,e.iosBundleIdentifier=d.ios?.bundleIdentifier,e.iosScheme=d.ios?.iosScheme,!e.nodeVersion&&d.nodeVersion&&(e.nodeVersion=d.nodeVersion);for(let L of G){let Z=O[L]!==void 0?O[L]:I[L];Z!==void 0&&e[L]===void 0&&(e[L]=Z)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let M=L=>{if(!L)return L;if(L.startsWith("scripts.")){let Z=L.split(".")[1],K=d.scripts?.[Z];if(K)return K;w.warn(`Script reference not found: ${L}`)}return L};e.buildCommand=M(e.buildCommand),e.preBuild=M(e.preBuild),e.postBuild=M(e.postBuild),!e.scheme&&d.scheme&&(e.scheme=d.scheme);let T={...je(d,f.envPrefix),...je(I,`${f.envPrefix}PROFILE_`)};s={...s,...l,...T},process.env.IOS_P12_PASSWORD&&!s.IOS_P12_PASSWORD&&(s.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!s.MATCH_PASSWORD&&(s.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&I.ios?.appleTeamId&&(e.iosTeamId=I.ios.appleTeamId),!e.iosTeamId&&d.submit?.[g]?.ios?.appleTeamId&&(e.iosTeamId=d.submit[g].ios.appleTeamId),!e.iosTeamId&&d.submit?.production?.ios?.appleTeamId&&(w.warn(v.yellow(`Check: Using 'production' Team ID for '${g}' build.`)),e.iosTeamId=d.submit.production.ios.appleTeamId),e.iosTeamId?w.info(v.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):w.warn(v.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=wi("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{w.warn("Failed to detect git branch.")}let p="1.0.0";try{ce.existsSync("./package.json")&&(p=JSON.parse(ce.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let h=e.buildProfile||"production",m="Internal";e.developmentClient?m="DevelopmentClient":h.toLowerCase().includes("store")||h.toLowerCase()==="production"?m="Store":h.toLowerCase().includes("preview")||h.toLowerCase().includes("staging")?m="Staging":(h.toLowerCase().includes("development")||h.toLowerCase().includes("dev"))&&(m="Development");let y=e.platform==="ios"?"iOS":"Android",$=e.platform==="ios"&&e.simulator?" (Simulator)":"",N=`${y}${$} v${p} (${m})`;if(i){try{let g=e.buildProfile||"production";w.info(v.blue(`Fetching managed secrets for profile: ${g}...`));let D=e.environment||g,b=(await _.get(`/projects/${i}/secrets/export?env=${D}`)).data;b.status==="success"&&b.secrets&&(s={...s,...b.secrets},Object.keys(b.secrets).length>0&&w.info(v.magenta(`\u2713 Injected ${Object.keys(b.secrets).length} secrets from Dashboard.`)))}catch(g){w.warn(`Failed to load managed secrets from Dashboard: ${g.message}`)}try{w.info(v.blue("Fetching managed credentials..."));let g="development";e.distribution==="store"?g="store":e.distribution==="internal"&&(g=e.platform==="ios"?"adhoc":"internal"),m==="Staging"&&e.developmentClient&&(g="development");let D=await _.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:e.iosBundleIdentifier||e.androidPackage,distributionType:g}});if(D.data.status==="success"&&D.data.credentials){let I=D.data.credentials;w.info(v.magenta(`\u2713 Found ${I.length} relevant credentials.`));let b=I.filter(T=>{if(T.distributionType){let L=g==="internal"?"adhoc":g;return T.distributionType===L||T.distributionType===g}return!0});w.info(v.dim(` Filtered to ${b.length} credentials for distributionType: ${g}`));let O=!1,G=!1,M=!1;for(let T of b)if(T.downloadUrl)try{let L="",Z=5;for(;Z>0;)try{let K=await tt.get(T.downloadUrl,{responseType:"arraybuffer",timeout:3e4,headers:{Connection:"close"}});L=Buffer.from(K.data).toString("base64");break}catch(K){if(Z--,Z===0)throw K;w.warn(v.dim(` - Temporary network error downloading ${T.name}. Retrying... (${5-Z}/5)`)),await new Promise(j=>setTimeout(j,2e3))}if(T.type==="ios_cert"&&!O)s.IOS_DIST_P12=L,T.password?(s.IOS_P12_PASSWORD=T.password,w.info(v.dim(` - Injected ${T.name} as IOS_DIST_P12 with password from credential record`))):w.info(v.dim(` - Injected ${T.name} as IOS_DIST_P12`)),O=!0;else if(T.type==="ios_profile"&&!G)s.IOS_PROVISIONING_PROFILE=L,w.info(v.dim(` - Injected ${T.name} as IOS_PROVISIONING_PROFILE`)),G=!0;else if(T.type==="android_keystore"&&!M){s.ANDROID_KEYSTORE_BASE64=L;let K=T.password,j=T.alias||T.meta?.alias;if(K)s.ANDROID_KEY_PASSWORD=K,s.ANDROID_STORE_PASSWORD=K,w.info(v.dim(" - Injected keystore password from credential record"));else{let Ae=["ANDROID_KEY_PASSWORD",...[g==="store"?"PRODUCTION":g==="internal"?"STAGING":"DEVELOPMENT",g.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(k=>`KEYSTORE_PASSWORD_${k}`),"KEYSTORE_PASSWORD"].find(k=>!!s[k]);Ae&&s[Ae]&&(s.ANDROID_KEY_PASSWORD=s[Ae],s.ANDROID_STORE_PASSWORD=s[Ae])}if(j)s.ANDROID_KEY_ALIAS=j;else{let B=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(Se=>!!s[Se]);B&&(s.ANDROID_KEY_ALIAS=s[B])}w.info(v.dim(` - Injected ${T.name} as ANDROID_KEYSTORE_BASE64`)),M=!0}}catch(L){w.warn(`Failed to download credential ${T.name}: ${L.message}`)}}if(e.platform==="android"){let I=d.android?.versionCode==="auto"||d.expo?.android?.versionCode==="auto";if(e.autoVersion||I){n.start("Resolving latest versionCode from Google Play...");try{let b=(D.data.credentials||[]).find(K=>K.type==="google_service_account");if(b||(b=((await _.get(`/credentials/${i}`)).data.credentials||[]).find(j=>j.type==="google_service_account")),!b)throw new Error("Google Service Account not found. Upload it via Dashboard to use auto-versioning.");let O=await _.get(`/credentials/${b.credentialId}/download`,{params:{projectId:i}});if(O.data.status!=="success"||!O.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let M=(await tt.get(O.data.downloadUrl,{headers:{Connection:"close"}})).data,T=e.androidPackage||d.android?.package||d.expo?.android?.package||d.name,L=await Ii(T,M);if(L==null)throw new Error("Could not retrieve any version information from Google Play.");let Z=L+1;s.ANDROID_VERSION_CODE=Z.toString(),n.stop(`\u2713 Resolved versionCode: ${v.green(Z)} (Latest on Play Store: ${L})`)}catch(b){n.stop("Version resolution failed");let O=b.response?.data?.error?.message||b.message;w.warn(v.yellow(` \u26A0\uFE0F Auto-versioning failed: ${O}`)),w.warn(v.dim(' Falling back to version code from config. To fix: ensure Service Account has "View App Metadata" and "View App Information" permissions in Google Play Console.'))}}}if(e.platform==="ios"&&!e.simulator){let I=!!s.IOS_DIST_P12,b=!!s.IOS_PROVISIONING_PROFILE;if(!I||!b){let O=[...I?[]:["Distribution Certificate"],...b?[]:["Provisioning Profile"]].join(" and ");w.error(v.red(`Missing iOS credentials: ${O}`)),e.quiet&&process.exit(1);let G=e.yes||await _i({message:"Would you like to generate these credentials now?",initialValue:!0});if(G&&!Di(G))return await Je({platform:"ios",profile:h}),e.quiet||w.info(v.green("\u2713 Credentials setup complete! Restarting build phase...")),At(e);e.quiet||w.info(v.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&(e.distribution==="internal"||e.distribution==="store")&&!(!!s.ANDROID_KEYSTORE_BASE64||!!s.ANDROID_KEYSTORE)){w.error(v.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let b=e.yes||await _i({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(b&&!Di(b))return await Je({platform:"android",profile:h}),e.quiet||w.info(v.green("\u2713 Android Keystore setup complete! Restarting build phase...")),At(e);e.quiet||w.info(v.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(g){w.warn(`Failed to resolve credentials: ${g.message}`)}}let C=!!(e.local&&e.buildId),x=!!(e.local||e.sshHost),H=!x&&!C;if(C){w.info(v.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let g=await Ht({...e,interactive:!1},t,s,i,{branch:u,version:p,summary:N,buildType:m});await X(g),process.exit(0)}async function X(g){if(i&&g.length>0){let D=Gt(),I=[];e.quiet||D.start("Uploading artifacts to Dashboard...");try{for(let b of g){let O=we.basename(b),G=ce.readFileSync(b),M=we.extname(O).toLowerCase(),T="application/octet-stream",L=await _.post(`/builds/${i}/${t}/artifact-upload-url`,{fileName:O,fileType:T});if(L.data.status!=="success")throw new Error(`Failed to get upload URL for ${O}`);let Z=!1;for(let K=1;K<=3;K++)try{await tt.put(L.data.uploadUrl,G,{headers:{"Content-Type":T},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),Z=!0;break}catch(j){if(w.warn(v.yellow(`Artifact upload attempt ${K}/3 failed (${j.code||j.message})`)),K<3)await new Promise(B=>setTimeout(B,3e3*K));else throw j}Z&&I.push({name:O,url:L.data.downloadUrl,size:G.length,type:M.substring(1)})}e.quiet||D.stop("Artifacts uploaded.")}catch(b){e.quiet||D.stop("Failed to upload artifacts."),w.error(v.red(`Upload error: ${b.message}`));try{await _.patch(`/builds/${i}/${t}`,{status:"completed",artifacts:g.map(O=>we.basename(O)),endTime:Date.now()})}catch(O){w.warn(v.yellow(`Could not set fallback build status: ${O.message}`))}return}if(i&&I.length>0)try{w.info(v.cyan(`
|
|
791
|
+
\u{1F517} Download Links:`));for(let b of I)w.info(v.dim(` - ${b.name}: `)+v.blue.underline(b.url));await _.patch(`/builds/${i}/${t}`,{status:"success",artifacts:I,endTime:Date.now()}),w.success(v.green(`
|
|
792
|
+
\u2713 Build completed and reported to dashboard.`))}catch(b){w.warn(v.yellow(`
|
|
793
|
+
\u26A0\uFE0F Could not report to dashboard: ${b.message}`))}}else if(i)try{await _.patch(`/builds/${i}/${t}`,{status:"completed",endTime:Date.now()})}catch{}}if(x){if(w.info(v.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!r){let g=process.argv.slice(3).join(" ");await _.post("/builds",{projectId:i,buildId:t,platform:e.platform,status:"building",branch:u,version:p,summary:N,startTime:o,buildType:m,buildProfile:h,buildArgs:g,simulator:!!e.simulator})}if(e.sshHost&&e.platform==="ios"){let g=await Ei(e,t,s,i)}else{let g=await Ht({...e,interactive:!!e.local},t,s,i,{branch:u,version:p,summary:N,buildType:m});await X(g)}return}if(H&&(w.info(v.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||n.start("Zipping and uploading local source...");let g=await _.post("/builds/source-upload-url",{projectId:i,buildId:t});if(g.data.status!=="success")throw n.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");let D=new vi,I=ce.readdirSync("."),b=["node_modules",".git","dist","build","builds",".gradle",".idea","android/build","ios/build","ios/Pods",`.${f.nameLower}_cli`];for(let M of I){if(b.includes(M))continue;ce.statSync(M).isDirectory()?D.addLocalFolder(M,M):D.addLocalFile(M)}let O=D.toBuffer();e.quiet||n.message(`Uploading source (${(O.length/1024/1024).toFixed(1)} MB)...`);let G=!1;for(let M=1;M<=3;M++)try{await tt.put(g.data.uploadUrl,O,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),G=!0;break}catch(T){if(M<3)n.message(`Upload attempt ${M} failed (${T.code||T.message}), retrying...`),await new Promise(L=>setTimeout(L,2e3*M));else throw T}if(e.quiet||n.stop("Source uploaded"),i){let M=process.argv.slice(3).join(" ");await _.post("/builds",{projectId:i,buildId:t,platform:e.platform,status:"pending",branch:u,version:p,summary:N,startTime:o,buildType:m,buildProfile:h,buildArgs:M,simulator:!!e.simulator}),w.info(v.green("\u2713 Cloud build registered."))}e.platform==="android"&&await Si(e,t,s,i),e.quiet||w.info(v.cyan("\u{1F4E1} Connecting to build stream...")),await yo(i,t,e);return}}catch(c){let s=c.message||"Build failed";c.response?.data?.message?s=c.response.data.message:c.message.includes("status code 402")?s="Insufficient wallet balance. Please add credits in the Dashboard.":c.message.includes("status code 403")&&(s="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&!e.local&&await a(s),w.error(v.red(`\u2717 Build failed: ${s}`)),process.exit(1)}};async function yo(e,n,t){let i=Gt(),o="pending",r=0,a=0;for(t.quiet||i.start("Connecting to build stream...");;){try{let s=(await _.get(`/builds/${e}/${n}`)).data.build;if(s){if(o=s.status,o==="building")t.quiet||i.message("Building on M4 Mac Mini...");else if(o==="failed")t.quiet||i.stop("Build failed."),w.error(v.red(`
|
|
794
|
+
\u2717 Build failed: ${s.error||"Unknown error"}`)),process.exit(1);else if(o==="completed"||o==="success"){t.quiet||i.stop("Build successful!"),w.success(v.green(`
|
|
795
|
+
\u2713 Build completed successfully!`));try{t.quiet||(w.info(v.magenta(`
|
|
796
|
+
\u{1F4F1} Installation Hub:`)),w.info(v.dim(" - View & Install Build: ")+v.white.underline(`${ai}/build/${n}`)))}catch{}return}else if(o!=="pending"){t.quiet||i.stop(`Build status: ${o}`);return}}try{let d=(await _.get(`/builds/${e}/${n}/logs`)).data;if(d&&typeof d=="string"&&!t.quiet){let u=d.split(`
|
|
797
|
+
`);if(u.length>r){for(let p=r;p<u.length;p++)u[p].trim()&&console.log(v.dim(` ${u[p]}`));r=u.length}}}catch{}a=0}catch{a++,a>10&&(i.stop("Connection lost."),w.error(v.red(`
|
|
798
798
|
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(c=>setTimeout(c,3e3))}}import So from"http";import{execSync as Et}from"child_process";import jt from"chalk";import{log as Be}from"@clack/prompts";var It=7070;function Ao(){let e=[];try{let n=Et("adb devices -l",{stdio:"pipe"}).toString(),t=new Set;n.split(`
|
|
799
799
|
`).forEach(i=>{if(i.includes("List of devices")||!i.trim())return;let o=i.split(/\s+/);if(o.length<2||o[1]!=="device")return;let r=o[0];t.add(r);let a=i.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:a?a[1].replace(/_/g," "):r,status:"online",details:i.trim()})})}catch{}try{let n=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`,i=Et(`${n} -list-avds`,{stdio:"pipe"}).toString().split(`
|
|
800
|
-
`).filter(r=>!!r.trim()),o=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));i.forEach(r=>{o||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}if(process.platform!=="darwin")return e;try{let n=Et("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),t=JSON.parse(n);Object.entries(t.devices).forEach(([i,o])=>{o.forEach(r=>{r.isAvailable&&e.push({id:r.udid,platform:"ios",type:"simulator",name:r.name,status:r.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${r.name} (${i})`})})})}catch{}try{let n=Et("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(n).result?.devices||[]).forEach(i=>{let o=i.connectionProperties?.transportType;(o==="wired"||o==="localNetwork")&&e.push({id:i.identifier,platform:"ios",type:"physical",name:i.deviceProperties?.name||"iPhone",status:"online",details:`${i.deviceProperties?.name||"iPhone"} (${i.model?.name||i.hardwareModel||""}) - ${o}`})})}catch{}return e}async function Ri(){process.platform!=="darwin"&&Be.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=So.createServer((n,t)=>{if(t.setHeader("Access-Control-Allow-Origin","*"),t.setHeader("Access-Control-Allow-Methods","GET, OPTIONS"),t.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),n.method==="OPTIONS"){t.writeHead(204),t.end();return}let i=new URL(n.url||"/",`http://localhost:${It}`);if(n.method==="GET"&&i.pathname==="/local/devices"){try{let o=Ao();t.writeHead(200,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"success",targets:o}))}catch(o){t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"error",message:o.message}))}return}t.writeHead(404),t.end()});e.listen(It,"127.0.0.1",()=>{Be.success(jt.green(`Local device agent running on http://localhost:${It}`)),Be.info(jt.dim("Keep this running while using the Install Hub on the dashboard.")),Be.info(jt.dim("Press Ctrl+C to stop."))}),e.on("error",n=>{n.code==="EADDRINUSE"?Be.error(`Port ${It} is already in use \u2014 agent may already be running.`):Be.error(`Agent error: ${n.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as Zr}from"module";import{text as Io,password as bo,spinner as $o,isCancel as Ti}from"@clack/prompts";import zt from"chalk";import it from"fs";import Oi from"path";import Eo from"os";var Bt=Oi.join(Eo.homedir(),f.configDir),Kt=Oi.join(Bt,"config.json");function Vt(){if(!it.existsSync(Kt))return{};try{return JSON.parse(it.readFileSync(Kt,"utf-8"))}catch{return{}}}function Ci(e){it.existsSync(Bt)||it.mkdirSync(Bt,{recursive:!0});let t={...Vt(),...e};it.writeFileSync(Kt,JSON.stringify(t,null,2))}async function Ni(){let e=Vt(),n=await Io({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(o){if(o.length===0)return"Email is required!"}});if(Ti(n))return;let t=await bo({message:"Enter your password:",validate(o){if(o.length===0)return"Password is required!"}});if(Ti(t))return;let i=$o();i.start("Authenticating...");try{let r=await(await fetch(`${gt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:n,password:t})})).json();r.status==="success"&&r.user.token?(ri({id:r.user.id,email:n,token:r.user.token,refreshToken:r.user.refreshToken}),Ci({lastLoginEmail:n}),i.stop(zt.green("Login successful!"))):i.stop(zt.red("Login failed: "+(r.message||"Unknown error")))}catch(o){i.stop(zt.red("Network error: "+o.message))}}import{outro as Po,select as _o,spinner as Do,isCancel as wo}from"@clack/prompts";import bt from"chalk";import Wt from"fs";import vo from"path";async function ki(){if(!ue()){console.log(bt.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=Do();n.start("Fetching projects...");try{let{data:t}=await _.get("/projects");if(n.stop("Projects loaded."),t.status!=="success"||!t.projects||t.projects.length===0){console.log(bt.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let i=t.projects.map(u=>({value:u.projectId,label:`${u.name} (${u.slug})`})),o=await _o({message:"Select a project to link:",options:i});if(wo(o))return;let r=vo.join(process.cwd(),f.configFileName),a={};if(Wt.existsSync(r))try{a=JSON.parse(Wt.readFileSync(r,"utf-8"))}catch{}let c=t.projects.find(u=>u.projectId===o),s=a.android?.package||Oe("android"),l=a.ios?.bundleIdentifier||Oe("ios"),d={projectId:o,name:c?.name,slug:c?.slug,scheme:c?.slug?.toLowerCase()||"app",android:{package:s||""},ios:{bundleIdentifier:l||""},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:a.submit?.production?.android||{track:"internal"},ios:{ascAppId:a.submit?.production?.ios?.ascAppId||"1234567890",appleTeamId:a.submit?.production?.ios?.appleTeamId||"ABC123DEFG"}}}};Wt.writeFileSync(r,JSON.stringify(d,null,2)),Po(bt.green(`Linked to project ${d.name} (${d.slug})`))}catch(t){n.stop(bt.red("Error fetching projects: "+t.message))}}import{outro as Ro,text as $t,select as Oo,spinner as Co,isCancel as nt}from"@clack/prompts";import ot from"chalk";import To from"fs";import No from"path";import{randomUUID as ko}from"crypto";async function xi(){if(!ue()){console.log(ot.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=await $t({message:"Project Name:",placeholder:"My Awesome App",validate(c){if(c.length===0)return"Name is required!"}});if(nt(n))return;let t=await $t({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(c){if(c.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(c))return"Slug must be lowercase alphanumeric with dashes."}});if(nt(t))return;let i=await Oo({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(nt(i))return;let o="";if(i==="android"||i==="all"){let c=Oe("android");if(o=await $t({message:"Android Package Name:",initialValue:c||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Package name is required for Android!"}}),nt(o))return}let r="";if(i==="ios"||i==="all"){let c=Oe("ios");if(r=await $t({message:"iOS Bundle Identifier:",initialValue:c||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Bundle ID is required for iOS!"}}),nt(r))return}let a=Co();a.start("Creating project...");try{let c=ko(),l={projectId:c,name:n,slug:t,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:d}=await _.post("/projects",l);if(d.status==="success"){a.stop(ot.green("Project created successfully!"));let u=No.join(process.cwd(),f.configFileName);To.writeFileSync(u,JSON.stringify({projectId:c,name:n,slug:t,...o?{android:{package:o}}:{},...r?{ios:{bundleIdentifier:r}}:{},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal"},ios:{ascAppId:"1234567890",appleTeamId:"ABC123DEFG",...r?{bundleId:r}:{}}}}},null,2)),Ro(ot.green(`Initialized project ${n} and linked locally!`))}else a.stop(ot.red("creation failed: "+d.message))}catch(c){a.stop(ot.red("Network error: "+c.message))}}import{spinner as Ui,log as me}from"@clack/prompts";import Pt from"chalk";import Li from"fs";import xo from"path";async function Mi(e,n){let t=ue();if(!t){me.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let i=xo.join(process.cwd(),f.configFileName);if(!Li.existsSync(i)){me.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Li.readFileSync(i,"utf-8"))}catch{me.error(`Failed to parse ${f.configFileName}`);return}let{projectId:r}=o;if(!r){me.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await Lo(r,n,t):e==="list"?await Uo(r,t):me.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function Lo(e,n,t){if(n.length===0){me.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=Ui();i.start("Setting environment variables...");let o=0,r=0;for(let a of n){let[c,...s]=a.split("="),l=s.join("=");if(!c||l===void 0){me.warn(`Invalid format for argument: ${a}. Expected KEY=VALUE.`),r++;continue}try{let d={key:c.trim(),value:l,type:"env",environment:"global",visibility:"secret"},{data:u}=await _.post(`/projects/${e}/secrets`,d);u.status==="success"?o++:(me.error(`Failed to set ${c}: ${u.message}`),r++)}catch(d){me.error(`Network error setting ${c}: ${d.message}`),r++}}i.stop(`Set ${o} variable(s). ${r>0?`${r} failed.`:""}`)}async function Uo(e,n){let t=Ui();t.start("Fetching environment variables...");try{let{data:i}=await _.get(`/projects/${e}/secrets`);if(i.status==="success"){t.stop("Fetched variables.");let o=i.secrets||[];o.length===0?me.info("No environment variables found for this project."):(me.info(Pt.bold("Environment Variables (Global & Scoped):")),o.forEach(r=>{let a=r.visibility==="plain"?r.value:"********";console.log(` ${Pt.cyan(r.key)} = ${a} ${Pt.gray(`[${r.environment}]`)}`)}))}else t.stop(Pt.red(`Failed to fetch variables: ${i.message}`))}catch(i){t.stop("Failed to fetch variables."),me.error(`Network error: ${i.message}`)}}import{spinner as st,text as rt,select as qt,isCancel as ke,cancel as Jt}from"@clack/prompts";import ne from"chalk";import le from"fs";import Ke from"path";import{spawn as Mo,spawnSync as Fo}from"child_process";import Hi from"axios";import Xt from"os";import Ho from"crypto";async function Gi(e){let n=st(),t=ue(),i=`./${f.configFileName}`;if(!le.existsSync(i)){ge(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o=JSON.parse(le.readFileSync(i,"utf-8")),{projectId:r}=o;if(!r){ge(`${f.configFileName} is missing projectId.`);return}ve(ne.dim(`Submit for project: ${o.name||r} `));let a=e.platform;if(!a){let h=await qt({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(ke(h)){Jt("Operation cancelled");return}a=h}let c=await Go(r,a,e,t?.token);if(!c)return;ve(`Using artifact: ${ne.green(Ke.basename(c))} `),n.start("Fetching submission credentials from Dashboard...");let s;try{let N=((await _.get(`/credentials/${r}`)).data.credentials||[]).filter(C=>a==="ios"?C.type==="asc_api_key":C.type==="google_service_account");if(N.length===0){n.stop("Credentials missing"),ge(`No Service Credentials found for ${a}.`),ve(`Use '${f.nameLower} credentials:service --platform ${a}' or use the Dashboard to upload them.`);return}if(N.length===1)s=N[0],n.stop(`Using: ${s.name}`);else{n.stop("Multiple credentials found");let C=await qt({message:`Choose a ${a==="ios"?"App Store Connect":"Google Play"} credential:`,options:N.map(x=>({value:x.credentialId,label:x.name,hint:`${x.keyId?`ID: ${x.keyId}`:""} ${x.issuerId?`(Issuer: ${x.issuerId.substring(0,8)}...)`:""}`}))});if(ke(C)){Jt("Submission cancelled");return}s=N.find(x=>x.credentialId===C),ve(`Using selected: ${ne.green(s.name)}`)}}catch(h){n.stop("Failed to fetch credentials"),ge(`API Error: ${h.message} `);return}let l=le.mkdtempSync(Ke.join(Xt.tmpdir(),`${f.nameLower}-submit-`)),d=s.keyId||s.meta?.keyId,u=s.issuerId||s.meta?.issuerId,p=s.type==="asc_api_key"?`AuthKey_${d}.p8`:"service-account.json",g=Ke.join(l,p);n.start("Downloading secure key...");try{let h=await _.get(`/credentials/${s.credentialId}/download`,{params:{projectId:r}});if(h.data.status!=="success"||!h.data.downloadUrl)throw new Error("Failed to get secure download URL");let $=await Hi.get(h.data.downloadUrl,{responseType:"arraybuffer"});le.writeFileSync(g,Buffer.from($.data)),n.stop("Key downloaded to secure temp storage")}catch(h){n.stop("Download failed"),ge(`Failed to download key: ${h.message}`);try{le.rmSync(l,{recursive:!0,force:!0})}catch{}return}ve(ne.blue(`Initiating ${a==="ios"?"TestFlight":"Google Play"} submission...`));let m=a==="android"?e.track||o.submit?.production?.android?.track||"internal":void 0;try{if(a==="ios"){if(!d){let N=await rt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:C=>C.length>0?void 0:"Key ID is required"});if(ke(N))return;d=N}if(!u||u==="undefined"){let N=await rt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:C=>C.length>0?void 0:"Issuer ID is required"});if(ke(N))return;u=N}ve(`Using ASC Key ID: ${d}`),ve(`Using ASC Issuer ID: ${u}`);let h=o.ios?.bundleIdentifier,$=await jo(c,g,u,d,h);if($&&$.apiKeyJsonPath)throw ve(ne.cyan(`
|
|
800
|
+
`).filter(r=>!!r.trim()),o=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));i.forEach(r=>{o||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}if(process.platform!=="darwin")return e;try{let n=Et("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),t=JSON.parse(n);Object.entries(t.devices).forEach(([i,o])=>{o.forEach(r=>{r.isAvailable&&e.push({id:r.udid,platform:"ios",type:"simulator",name:r.name,status:r.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${r.name} (${i})`})})})}catch{}try{let n=Et("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(n).result?.devices||[]).forEach(i=>{let o=i.connectionProperties?.transportType;(o==="wired"||o==="localNetwork")&&e.push({id:i.identifier,platform:"ios",type:"physical",name:i.deviceProperties?.name||"iPhone",status:"online",details:`${i.deviceProperties?.name||"iPhone"} (${i.model?.name||i.hardwareModel||""}) - ${o}`})})}catch{}return e}async function Ri(){process.platform!=="darwin"&&Be.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=So.createServer((n,t)=>{if(t.setHeader("Access-Control-Allow-Origin","*"),t.setHeader("Access-Control-Allow-Methods","GET, OPTIONS"),t.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),n.method==="OPTIONS"){t.writeHead(204),t.end();return}let i=new URL(n.url||"/",`http://localhost:${It}`);if(n.method==="GET"&&i.pathname==="/local/devices"){try{let o=Ao();t.writeHead(200,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"success",targets:o}))}catch(o){t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"error",message:o.message}))}return}t.writeHead(404),t.end()});e.listen(It,"127.0.0.1",()=>{Be.success(jt.green(`Local device agent running on http://localhost:${It}`)),Be.info(jt.dim("Keep this running while using the Install Hub on the dashboard.")),Be.info(jt.dim("Press Ctrl+C to stop."))}),e.on("error",n=>{n.code==="EADDRINUSE"?Be.error(`Port ${It} is already in use \u2014 agent may already be running.`):Be.error(`Agent error: ${n.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as Zr}from"module";import{text as Io,password as bo,spinner as $o,isCancel as Ti}from"@clack/prompts";import zt from"chalk";import it from"fs";import Oi from"path";import Eo from"os";var Bt=Oi.join(Eo.homedir(),f.configDir),Kt=Oi.join(Bt,"config.json");function Vt(){if(!it.existsSync(Kt))return{};try{return JSON.parse(it.readFileSync(Kt,"utf-8"))}catch{return{}}}function Ci(e){it.existsSync(Bt)||it.mkdirSync(Bt,{recursive:!0});let t={...Vt(),...e};it.writeFileSync(Kt,JSON.stringify(t,null,2))}async function Ni(){let e=Vt(),n=await Io({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(o){if(o.length===0)return"Email is required!"}});if(Ti(n))return;let t=await bo({message:"Enter your password:",validate(o){if(o.length===0)return"Password is required!"}});if(Ti(t))return;let i=$o();i.start("Authenticating...");try{let r=await(await fetch(`${gt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:n,password:t})})).json();r.status==="success"&&r.user.token?(ri({id:r.user.id,email:n,token:r.user.token,refreshToken:r.user.refreshToken}),Ci({lastLoginEmail:n}),i.stop(zt.green("Login successful!"))):i.stop(zt.red("Login failed: "+(r.message||"Unknown error")))}catch(o){i.stop(zt.red("Network error: "+o.message))}}import{outro as Po,select as _o,spinner as Do,isCancel as wo}from"@clack/prompts";import bt from"chalk";import Wt from"fs";import vo from"path";async function ki(){if(!ue()){console.log(bt.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=Do();n.start("Fetching projects...");try{let{data:t}=await _.get("/projects");if(n.stop("Projects loaded."),t.status!=="success"||!t.projects||t.projects.length===0){console.log(bt.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let i=t.projects.map(u=>({value:u.projectId,label:`${u.name} (${u.slug})`})),o=await _o({message:"Select a project to link:",options:i});if(wo(o))return;let r=vo.join(process.cwd(),f.configFileName),a={};if(Wt.existsSync(r))try{a=JSON.parse(Wt.readFileSync(r,"utf-8"))}catch{}let c=t.projects.find(u=>u.projectId===o),s=a.android?.package||Oe("android"),l=a.ios?.bundleIdentifier||Oe("ios"),d={projectId:o,name:c?.name,slug:c?.slug,scheme:c?.slug?.toLowerCase()||"app",android:{package:s||""},ios:{bundleIdentifier:l||""},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:a.submit?.production?.android||{track:"internal"},ios:{ascAppId:a.submit?.production?.ios?.ascAppId||"1234567890",appleTeamId:a.submit?.production?.ios?.appleTeamId||"ABC123DEFG"}}}};Wt.writeFileSync(r,JSON.stringify(d,null,2)),Po(bt.green(`Linked to project ${d.name} (${d.slug})`))}catch(t){n.stop(bt.red("Error fetching projects: "+t.message))}}import{outro as Ro,text as $t,select as Oo,spinner as Co,isCancel as nt}from"@clack/prompts";import ot from"chalk";import To from"fs";import No from"path";import{randomUUID as ko}from"crypto";async function xi(){if(!ue()){console.log(ot.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=await $t({message:"Project Name:",placeholder:"My Awesome App",validate(c){if(c.length===0)return"Name is required!"}});if(nt(n))return;let t=await $t({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(c){if(c.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(c))return"Slug must be lowercase alphanumeric with dashes."}});if(nt(t))return;let i=await Oo({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(nt(i))return;let o="";if(i==="android"||i==="all"){let c=Oe("android");if(o=await $t({message:"Android Package Name:",initialValue:c||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Package name is required for Android!"}}),nt(o))return}let r="";if(i==="ios"||i==="all"){let c=Oe("ios");if(r=await $t({message:"iOS Bundle Identifier:",initialValue:c||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Bundle ID is required for iOS!"}}),nt(r))return}let a=Co();a.start("Creating project...");try{let c=ko(),l={projectId:c,name:n,slug:t,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:d}=await _.post("/projects",l);if(d.status==="success"){a.stop(ot.green("Project created successfully!"));let u=No.join(process.cwd(),f.configFileName);To.writeFileSync(u,JSON.stringify({projectId:c,name:n,slug:t,...o?{android:{package:o}}:{},...r?{ios:{bundleIdentifier:r}}:{},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal"},ios:{ascAppId:"1234567890",appleTeamId:"ABC123DEFG",...r?{bundleId:r}:{}}}}},null,2)),Ro(ot.green(`Initialized project ${n} and linked locally!`))}else a.stop(ot.red("creation failed: "+d.message))}catch(c){a.stop(ot.red("Network error: "+c.message))}}import{spinner as Ui,log as me}from"@clack/prompts";import Pt from"chalk";import Li from"fs";import xo from"path";async function Mi(e,n){let t=ue();if(!t){me.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let i=xo.join(process.cwd(),f.configFileName);if(!Li.existsSync(i)){me.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Li.readFileSync(i,"utf-8"))}catch{me.error(`Failed to parse ${f.configFileName}`);return}let{projectId:r}=o;if(!r){me.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await Lo(r,n,t):e==="list"?await Uo(r,t):me.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function Lo(e,n,t){if(n.length===0){me.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=Ui();i.start("Setting environment variables...");let o=0,r=0;for(let a of n){let[c,...s]=a.split("="),l=s.join("=");if(!c||l===void 0){me.warn(`Invalid format for argument: ${a}. Expected KEY=VALUE.`),r++;continue}try{let d={key:c.trim(),value:l,type:"env",environment:"global",visibility:"secret"},{data:u}=await _.post(`/projects/${e}/secrets`,d);u.status==="success"?o++:(me.error(`Failed to set ${c}: ${u.message}`),r++)}catch(d){me.error(`Network error setting ${c}: ${d.message}`),r++}}i.stop(`Set ${o} variable(s). ${r>0?`${r} failed.`:""}`)}async function Uo(e,n){let t=Ui();t.start("Fetching environment variables...");try{let{data:i}=await _.get(`/projects/${e}/secrets`);if(i.status==="success"){t.stop("Fetched variables.");let o=i.secrets||[];o.length===0?me.info("No environment variables found for this project."):(me.info(Pt.bold("Environment Variables (Global & Scoped):")),o.forEach(r=>{let a=r.visibility==="plain"?r.value:"********";console.log(` ${Pt.cyan(r.key)} = ${a} ${Pt.gray(`[${r.environment}]`)}`)}))}else t.stop(Pt.red(`Failed to fetch variables: ${i.message}`))}catch(i){t.stop("Failed to fetch variables."),me.error(`Network error: ${i.message}`)}}import{spinner as st,text as rt,select as qt,isCancel as ke,cancel as Jt}from"@clack/prompts";import ne from"chalk";import le from"fs";import Ke from"path";import{spawn as Mo,spawnSync as Fo}from"child_process";import Hi from"axios";import Xt from"os";import Ho from"crypto";async function Gi(e){let n=st(),t=ue(),i=`./${f.configFileName}`;if(!le.existsSync(i)){ge(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o=JSON.parse(le.readFileSync(i,"utf-8")),{projectId:r}=o;if(!r){ge(`${f.configFileName} is missing projectId.`);return}ve(ne.dim(`Submit for project: ${o.name||r} `));let a=e.platform;if(!a){let y=await qt({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(ke(y)){Jt("Operation cancelled");return}a=y}let c=await Go(r,a,e,t?.token);if(!c)return;ve(`Using artifact: ${ne.green(Ke.basename(c))} `),n.start("Fetching submission credentials from Dashboard...");let s;try{let N=((await _.get(`/credentials/${r}`)).data.credentials||[]).filter(C=>a==="ios"?C.type==="asc_api_key":C.type==="google_service_account");if(N.length===0){n.stop("Credentials missing"),ge(`No Service Credentials found for ${a}.`),ve(`Use '${f.nameLower} credentials:service --platform ${a}' or use the Dashboard to upload them.`);return}if(N.length===1)s=N[0],n.stop(`Using: ${s.name}`);else{n.stop("Multiple credentials found");let C=await qt({message:`Choose a ${a==="ios"?"App Store Connect":"Google Play"} credential:`,options:N.map(x=>({value:x.credentialId,label:x.name,hint:`${x.keyId?`ID: ${x.keyId}`:""} ${x.issuerId?`(Issuer: ${x.issuerId.substring(0,8)}...)`:""}`}))});if(ke(C)){Jt("Submission cancelled");return}s=N.find(x=>x.credentialId===C),ve(`Using selected: ${ne.green(s.name)}`)}}catch(y){n.stop("Failed to fetch credentials"),ge(`API Error: ${y.message} `);return}let l=le.mkdtempSync(Ke.join(Xt.tmpdir(),`${f.nameLower}-submit-`)),d=s.keyId||s.meta?.keyId,u=s.issuerId||s.meta?.issuerId,p=s.type==="asc_api_key"?`AuthKey_${d}.p8`:"service-account.json",h=Ke.join(l,p);n.start("Downloading secure key...");try{let y=await _.get(`/credentials/${s.credentialId}/download`,{params:{projectId:r}});if(y.data.status!=="success"||!y.data.downloadUrl)throw new Error("Failed to get secure download URL");let $=await Hi.get(y.data.downloadUrl,{responseType:"arraybuffer"});le.writeFileSync(h,Buffer.from($.data)),n.stop("Key downloaded to secure temp storage")}catch(y){n.stop("Download failed"),ge(`Failed to download key: ${y.message}`);try{le.rmSync(l,{recursive:!0,force:!0})}catch{}return}ve(ne.blue(`Initiating ${a==="ios"?"TestFlight":"Google Play"} submission...`));let m=a==="android"?e.track||o.submit?.production?.android?.track||"internal":void 0;try{if(a==="ios"){if(!d){let N=await rt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:C=>C.length>0?void 0:"Key ID is required"});if(ke(N))return;d=N}if(!u||u==="undefined"){let N=await rt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:C=>C.length>0?void 0:"Issuer ID is required"});if(ke(N))return;u=N}ve(`Using ASC Key ID: ${d}`),ve(`Using ASC Issuer ID: ${u}`);let y=o.ios?.bundleIdentifier,$=await jo(c,h,u,d,y);if($&&$.apiKeyJsonPath)throw ve(ne.cyan(`
|
|
801
801
|
[DIAGNOSTIC] API key written to: ${$.apiKeyJsonPath}
|
|
802
|
-
`)),new Error("fastlane pilot execution failed");Fi(`${a==="ios"?"App Store":"Google Play"} submission successful!`)}else{let
|
|
802
|
+
`)),new Error("fastlane pilot execution failed");Fi(`${a==="ios"?"App Store":"Google Play"} submission successful!`)}else{let y=o.android?.package||s.bundleId;await Bo(c,h,m,y),Fi("Google Play submission successful!")}}catch(y){ge(`Submission failed: ${y.message}`)}finally{Ko(l),c.includes(`${f.nameLower}-artifact-`)}}async function Go(e,n,t,i){let o=t.buildId?"id":t.latest?"latest":null;if(!o&&(o=await qt({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]}),ke(o)))return Jt("Operation cancelled"),null;if(o==="local"){let a=await rt({message:"Enter path to artifact (.ipa/.aab):",validate:c=>{if(!le.existsSync(c))return"File not found";if(n==="ios"&&!c.endsWith(".ipa"))return"Must be an .ipa file";if(n==="android"&&!c.endsWith(".aab"))return"Must be an .aab file"}});return ke(a)?null:a}let r=st();if(o==="latest"){r.start("Fetching latest build...");try{let a=await _.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let c=a.data.builds||[],s=c.find(m=>m.platform?.toLowerCase()===n.toLowerCase()&&m.status?.toLowerCase()==="success"&&m.buildType?.toLowerCase()==="store")||c.find(m=>m.platform?.toLowerCase()===n.toLowerCase()&&m.status?.toLowerCase()==="success");if(!s)return r.stop("No suitable build found"),ge("No successful builds found for this platform."),null;r.stop(`Found build: ${s.buildId}`);let l=s.artifacts||[];if(l.length===0||l.every(m=>!(m.url||m.downloadUrl)))try{let m=await _.get(`/builds/${e}/${s.buildId}/artifacts`);m.data.status==="success"&&m.data.artifacts?.length>0?(l=m.data.artifacts.map(y=>({...y,url:y.url||y.downloadUrl})),console.log(ne.cyan(` [RECOVERY] Fetched ${l.length} artifact(s) with download URLs.`))):console.log(ne.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(m){console.log(ne.red(` [RECOVERY] /artifacts fetch failed: ${m.message}`))}let u=n==="ios",p=l.find(m=>{let y=(m.type||"").toLowerCase(),$=(m.name||"").toLowerCase();if(console.log(ne.dim(` - Checking: ${m.name} (Type: ${m.type}, HasLink: ${!!(m.url||m.downloadUrl)})`)),y)return y===(u?"ipa":"aab");let N=u?".ipa":".aab",C=(m.url||m.downloadUrl||"").toLowerCase();return $.endsWith(N)||C.includes(N)});if(!p||!(p.url||p.downloadUrl))return ge("Build found but artifact URL is missing."),null;let h=p.url||p.downloadUrl;return await Yt(h,u?"ios":"android")}catch(a){return r.stop("Fetch failed"),ge(`API Error: ${a.message}`),null}}if(o==="id"){let a=t.buildId||await rt({message:"Enter Build ID:",validate:c=>c.length<5?"Invalid ID":void 0});if(ke(a))return null;r.start("Fetching build...");try{let c=await _.get(`/build/${a}`);if(c.data.status!=="success")throw new Error(c.data.message);let s=c.data.build;if(!s)throw new Error("Build not found");let l=n==="ios",d=s.artifacts?.find(u=>{if(u.type)return u.type===(l?"ipa":"aab");let p=l?".ipa":".aab";return u.name&&u.name.endsWith(p)||u.url&&u.url.includes(p)});return!d||!d.url?(r.stop("Missing artifact"),ge("Artifact URL not found on build record."),null):(r.stop(`Found build: ${s.buildId}`),await Yt(d.url,l?"ios":"android"))}catch(c){return r.stop("Fetch failed"),ge(c.message),null}}if(o==="url"){let a=await rt({message:"Enter Artifact URL:",validate:c=>c.startsWith("http")?void 0:"Must be a valid URL"});return ke(a)?null:await Yt(a,n)}return null}async function Yt(e,n,t=3){let i=st();i.start("Downloading artifact...");let o=le.mkdtempSync(Ke.join(Xt.tmpdir(),`${f.nameLower}-artifact-`)),r=`app.${n==="ios"?"ipa":"aab"}`,a=Ke.join(o,r);for(let c=1;c<=t;c++)try{c>1&&(i.message(`Downloading artifact (Retry ${c}/${t})...`),await new Promise(d=>setTimeout(d,2e3*c)));let s=le.createWriteStream(a),l=await Hi({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((d,u)=>{l.data.pipe(s);let p=!1;l.data.on("error",h=>{p||(p=!0,s.close(),u(h))}),s.on("finish",()=>{p||d()}),s.on("error",h=>{p||(p=!0,u(h))})}),i.stop("Download complete"),a}catch(s){if(c===t)throw i.stop("Download failed"),s}throw new Error("Download failed after retries")}async function jo(e,n,t,i,o){let r=st();if(o&&ve(`Bundled ID: ${ne.green(o)}`),!t||!i)throw ge(`Missing credentials: issuerId=${t}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=le.readFileSync(n,"utf8"),c;try{c=Ho.createPrivateKey(a).export({type:"pkcs8",format:"pem"})}catch{ve("Key normalization failed, falling back to manual re-wrapping..."),c=`-----BEGIN PRIVATE KEY-----
|
|
803
803
|
${(a.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
|
|
804
804
|
`)}
|
|
805
805
|
-----END PRIVATE KEY-----`}console.log(ne.yellow(`
|
|
806
806
|
[DIAGNOSTIC] Key ID: ${i}`)),console.log(ne.yellow(`[DIAGNOSTIC] Issuer ID: ${t}`)),console.log(ne.yellow(`[DIAGNOSTIC] Key Checksum (Start): ${c.substring(0,45).replace(/\n/g,"\\n")}`)),console.log(ne.yellow(`[DIAGNOSTIC] Key Checksum (End): ${c.substring(c.length-28).replace(/\n/g,"\\n")}
|
|
807
|
-
`)),r.start("Uploading to TestFlight (pilot)...");let s=Ke.join(Xt.tmpdir(),`api_key_${i}.json`),l={key_id:i,issuer_id:t,key:c,in_house:!1};le.writeFileSync(s,JSON.stringify(l,null,2));let d={...process.env};return new Promise((u,p)=>{let
|
|
808
|
-
`).filter(o=>o.includes(" device")).map(o=>o.split(" ")[0]);if(n.length===0)throw new Error("No Android devices or emulators found.");let t=n[0];Qt.info(ei.dim(`Opening deep link on Android Device (${t})...`));let i=`adb -s ${t} shell am start -a android.intent.action.VIEW -d "${e}"`;at(i)}catch(n){throw new Error(`Failed to launch Android: ${n.message}`)}}var qi=async e=>{xe.info(ze.blue(`Starting ${f.name} Dev Orchestrator...`));let n=Ne(),t=e.buildProfile||"development",i=n?Ue(n,t):null,o={...process.env};if(n?.projectId)try{xe.info(ze.dim(`Fetching managed secrets for profile: ${t}...`));let m=await _.get(`/projects/${n.projectId}/secrets/export?env=${t}`);m.data?.status==="success"&&m.data.secrets&&(Object.assign(o,m.data.secrets),xe.info(ze.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{xe.warn("Could not fetch managed secrets. Running with local env only.")}n&&Object.assign(o,je(n,f.envPrefix)),i&&(Object.assign(o,je(i,`${f.envPrefix}PROFILE_`)),i.env&&Object.assign(o,i.env));let r=!1;try{let m=JSON.parse(nr.readFileSync("package.json","utf-8"));r=!!(m.dependencies?.expo||m.devDependencies?.expo)}catch{xe.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let a=Number(e.port||i?.port||8081),c=await zi(a);c!==a&&xe.info(ze.yellow(`Port ${a} is busy. ${f.name} is using ${c} instead.`));let s="npx",l=[];r?(l=["expo","start","--port",String(c)],e.clear&&l.push("--clear"),e.tunnel&&l.push("--tunnel"),e.lan&&l.push("--lan"),e.localhost&&l.push("--localhost")):(l=["react-native","start","--port",String(c)],e.clear&&l.push("--clear"));let d=ir(s,l,{stdio:["inherit","pipe","pipe"],shell:!0,env:o}),u=!1,p="127.0.0.1",
|
|
809
|
-
Profile Settings:`)),pe.info(`${
|
|
810
|
-
Environment Variables:`)),Object.entries(i.env).forEach(([o,r])=>{pe.info(` ${o}=${r}`)}))):pe.warn(`Profile '${t}' not found.`),pe.info(
|
|
807
|
+
`)),r.start("Uploading to TestFlight (pilot)...");let s=Ke.join(Xt.tmpdir(),`api_key_${i}.json`),l={key_id:i,issuer_id:t,key:c,in_house:!1};le.writeFileSync(s,JSON.stringify(l,null,2));let d={...process.env};return new Promise((u,p)=>{let h=Mo("fastlane",["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:"inherit",env:d});h.on("close",m=>{if(m!==0)r.stop("Pilot failed"),u({apiKeyJsonPath:s});else{r.stop("IPA uploaded to TestFlight");try{le.unlinkSync(s)}catch{}u({apiKeyJsonPath:null})}}),h.on("error",m=>{try{le.unlinkSync(s)}catch{}r.stop("Pilot execution error"),p(m)})})}async function Bo(e,n,t="internal",i){let o=st();o.start(`Uploading to Google Play ${t} track (supply)...`);let r=["supply","--aab",e,"--json_key",n,"--track",t];if(i&&i!=="*"&&r.push("--package_name",i),Fo("fastlane",r,{stdio:"inherit",env:process.env}).status!==0)throw o.stop("Supply failed"),new Error("fastlane supply execution failed");o.stop(`AAB uploaded to ${t} track`)}function Ko(e){try{le.existsSync(e)&&le.rmSync(e,{recursive:!0,force:!0})}catch{}}function ge(e){console.log(ne.red(`\u274C ${e}`))}function ve(e){console.log(ne.gray(`\u2022 ${e}`))}function Fi(e){console.log(ne.green(`\u2713 ${e}`))}import{spinner as Vo,log as Me,outro as zo}from"@clack/prompts";import Zt from"chalk";import ji from"fs";import Wo from"path";import{execSync as Yo}from"child_process";import qo from"adm-zip";import Jo from"axios";import{randomUUID as Xo}from"crypto";async function Bi(e){Me.info(Zt.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let n=Ne();(!n||!n.projectId)&&(Me.error(`No ${f.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let t=n.projectId,i=e.branch||"production",o="1.0.0";try{o=JSON.parse(ji.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{Me.warn("Could not read package.json version. Defaulting to 1.0.0")}let r=Vo();r.start(`Compiling JavaScript bundles for OTA (Channel: ${i}, Runtime: ${o})...`);try{Yo("npx expo export --platform all",{stdio:"ignore"})}catch(l){r.stop("Compilation failed."),Me.error(`Failed to export JS bundles using Expo: ${l.message}`),process.exit(1)}r.message("Zipping artifact payload...");let a=Wo.join(process.cwd(),"dist");ji.existsSync(a)||(r.stop("Missing dist folder."),Me.error("The `dist` directory was not created. Export failed."),process.exit(1));let c=new qo;c.addLocalFolder(a,"dist");let s=c.toBuffer();r.message("Uploading payload to Mach Cloud...");try{let l=Xo(),d=await _.post("/builds/source-upload-url",{projectId:t,buildId:l});if(d.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:u,key:p}=d.data;await Jo.put(u,s,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),r.message(`Promoting Update to ${i}...`),await _.post("/updates/publish",{projectId:t,channelName:i,runtimeVersion:o,platform:"android",updateId:`${l}-android`,manifestKey:p}),await _.post("/updates/publish",{projectId:t,channelName:i,runtimeVersion:o,platform:"ios",updateId:`${l}-ios`,manifestKey:p}),r.stop("Update Live!"),zo(Zt.green(`\u2713 OTA Update natively shipped to the '${i}' channel.`)),Me.info(Zt.dim(`Any app running runtime '${o}' will download this bundle smoothly.`))}catch(l){r.stop("Update failed during Cloud Sync."),Me.error(`Upload error: ${l.message}`),process.exit(1)}}import{intro as Zo,outro as Ki,log as Ve}from"@clack/prompts";import Re from"chalk";async function Vi(){Zo(Re.blue(`${f.name} CLI - User Profile`));let e=ue();if(!e){Ve.warn(Re.yellow("You are not logged in.")),Ve.info(`Run \`${f.nameLower} login\` to authenticate.`),Ki();return}Ve.info(`${Re.bold("Logged in as:")} ${Re.green(e.email)}`);try{await _.get("/projects");let t=ue().token.split(".");if(t.length===3){let i=JSON.parse(Buffer.from(t[1],"base64").toString());if(i.exp){let o=new Date(i.exp*1e3),r=new Date,a=o.getTime()-r.getTime();if(a>0){let c=Math.round(a/6e4),s=(c/60).toFixed(1);Ve.info(`${Re.bold("Token status:")} Valid (Expires in ~${s}h / ${c}m)`)}else Ve.warn(`${Re.bold("Token status:")} ${Re.red("Expired")} (Auto-refresh failed)`)}}}catch{Ve.warn(`${Re.bold("Token status:")} ${Re.red("Unreachable")} (Session might be truly expired)${gt}`)}Ki(Re.blue("---"))}import{spawn as ir}from"child_process";import{log as xe}from"@clack/prompts";import ze from"chalk";import nr from"fs";import Qo from"net";async function er(e){return new Promise(n=>{let t=Qo.createServer();t.once("error",i=>{i.code==="EADDRINUSE"?n(!0):n(!1)}),t.once("listening",()=>{t.close(),n(!1)}),t.listen(e,"0.0.0.0")})}async function zi(e,n=20){let t=e;for(;t<e+n;){if(!await er(t))return t;t++}throw new Error(`Could not find an available port after ${n} attempts starting from ${e}.`)}import{execSync as at}from"child_process";import{log as Qt}from"@clack/prompts";import ei from"chalk";async function Wi(e){return e.platform==="ios"?Yi(e.url):tr(e.url)}async function Yi(e){try{let n=at("xcrun simctl list devices booted --json").toString(),t=JSON.parse(n),i=null;for(let o in t.devices){let r=t.devices[o].find(a=>a.state==="Booted");if(r){i=r.udid;break}}if(!i)return Qt.info(ei.dim("No booted simulator found. Launching default simulator...")),at("open -a Simulator"),await new Promise(o=>setTimeout(o,3e3)),Yi(e);Qt.info(ei.dim(`Opening deep link on iOS Simulator (${i})...`)),at(`xcrun simctl openurl ${i} "${e}"`)}catch(n){throw new Error(`Failed to launch iOS Simulator: ${n.message}`)}}async function tr(e){try{let n=at("adb devices").toString().split(`
|
|
808
|
+
`).filter(o=>o.includes(" device")).map(o=>o.split(" ")[0]);if(n.length===0)throw new Error("No Android devices or emulators found.");let t=n[0];Qt.info(ei.dim(`Opening deep link on Android Device (${t})...`));let i=`adb -s ${t} shell am start -a android.intent.action.VIEW -d "${e}"`;at(i)}catch(n){throw new Error(`Failed to launch Android: ${n.message}`)}}var qi=async e=>{xe.info(ze.blue(`Starting ${f.name} Dev Orchestrator...`));let n=Ne(),t=e.buildProfile||"development",i=n?Ue(n,t):null,o={...process.env};if(n?.projectId)try{xe.info(ze.dim(`Fetching managed secrets for profile: ${t}...`));let m=await _.get(`/projects/${n.projectId}/secrets/export?env=${t}`);m.data?.status==="success"&&m.data.secrets&&(Object.assign(o,m.data.secrets),xe.info(ze.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{xe.warn("Could not fetch managed secrets. Running with local env only.")}n&&Object.assign(o,je(n,f.envPrefix)),i&&(Object.assign(o,je(i,`${f.envPrefix}PROFILE_`)),i.env&&Object.assign(o,i.env));let r=!1;try{let m=JSON.parse(nr.readFileSync("package.json","utf-8"));r=!!(m.dependencies?.expo||m.devDependencies?.expo)}catch{xe.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let a=Number(e.port||i?.port||8081),c=await zi(a);c!==a&&xe.info(ze.yellow(`Port ${a} is busy. ${f.name} is using ${c} instead.`));let s="npx",l=[];r?(l=["expo","start","--port",String(c)],e.clear&&l.push("--clear"),e.tunnel&&l.push("--tunnel"),e.lan&&l.push("--lan"),e.localhost&&l.push("--localhost")):(l=["react-native","start","--port",String(c)],e.clear&&l.push("--clear"));let d=ir(s,l,{stdio:["inherit","pipe","pipe"],shell:!0,env:o}),u=!1,p="127.0.0.1",h=m=>{let y=m.toString(),$=y.match(/http:\/\/(.+):(\d+)/);if($&&!u&&(p=$[1],u=!0,e.ios||e.android)){let N=e.ios?"ios":"android",x=`exp+${n?.scheme||f.nameLower}://expo-development-client/?url=http%3A%2F%2F${p}%3A${c}`;xe.info(ze.magenta(`\u{1F680} ${f.name} is launching ${n?.name||"app"} on ${N==="ios"?"iOS":"Android"}...`)),Wi({platform:N,url:x}).catch(H=>xe.error(ze.red(`Launch failed: ${H.message}`)))}return y.includes("Starting project")||y.includes("Using src/app")||y.includes("Starting Metro Bundler")||y.includes("Opening exp+")||y.includes("Input is required")?null:y};return d.stdout?.on("data",m=>{let y=h(m);y&&process.stdout.write(y)}),d.stderr?.on("data",m=>{let y=h(m);y&&process.stderr.write(y)}),new Promise((m,y)=>{d.on("exit",$=>{$===0?m():y(new Error(`Dev server exited with code ${$}`))}),d.on("error",$=>{y($)})})};import{log as pe}from"@clack/prompts";import be from"chalk";var Ji=async e=>{let n=Ne();n||(pe.error(be.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let t=e.profile||"development",i=Ue(n,t);if(e.json){console.log(JSON.stringify({project:n,resolved:i},null,2));return}pe.info(be.bgBlue.white(` Resolved ${f.name} Config [${t}] `)),pe.info(be.dim("----------------------------------------")),pe.info(`${be.blue("Project ID:")} ${n.projectId}`),pe.info(`${be.blue("Name:")} ${n.name}`),pe.info(`${be.blue("Scheme:")} ${n.scheme}`),i?(pe.info(be.dim(`
|
|
809
|
+
Profile Settings:`)),pe.info(`${be.cyan("Distribution:")} ${i.distribution||"none"}`),pe.info(`${be.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(pe.info(be.dim(`
|
|
810
|
+
Environment Variables:`)),Object.entries(i.env).forEach(([o,r])=>{pe.info(` ${o}=${r}`)}))):pe.warn(`Profile '${t}' not found.`),pe.info(be.dim("----------------------------------------"))};import{log as $e,spinner as dt,text as Xi,select as Zi,confirm as or,isCancel as ct,cancel as lt,outro as ut,note as rr}from"@clack/prompts";import z from"chalk";import{execSync as sr}from"child_process";async function ar(){try{let e=sr("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}async function cr(e){let n=e.udid,t=e.name,i="";if(!n){let r=dt();r.start("Scanning for connected iOS devices...");let a=await ar();if(r.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)n=a[0].udid,t=t||a[0].name,i=a[0].model,$e.info(`Detected: ${z.bold(t)} (${z.dim(n.substring(0,12)+"...")})`);else if(a.length>1){let c=await Zi({message:"Select a device to register:",options:a.map(l=>({value:l.udid,label:`${l.name} (${l.model})`,hint:l.udid.substring(0,12)+"..."}))});if(ct(c)){lt("Cancelled");return}n=c;let s=a.find(l=>l.udid===n);t=t||s.name,i=s.model}else{$e.info(z.dim("No connected devices found. Enter UDID manually."));let c=await Xi({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(s){if(s.length<10)return"UDID seems too short"}});if(ct(c)){lt("Cancelled");return}n=c}}if(!t){let r=await Xi({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if(ct(r)){lt("Cancelled");return}t=r}let o=dt();o.start("Registering device...");try{await _.post("/devices",{udid:n,name:t,platform:"ios",model:i||void 0,addedVia:"cli"}),o.stop(z.green("Device registered!")),$e.info(` ${z.bold("Name:")} ${t}`),$e.info(` ${z.bold("UDID:")} ${z.dim(n)}`)}catch(r){o.stop(z.red("Failed to register device")),$e.error(r.response?.data?.message||r.message)}ut(z.blue("---"))}async function lr(){let e=dt();e.start("Fetching registered devices...");try{let t=(await _.get("/devices")).data.devices||[];if(e.stop(`${t.length} device(s) registered`),t.length===0){$e.info(z.dim(`No devices registered yet. Run \`${f.nameLower} device register\` to add one.`)),ut(z.blue("---"));return}let i=t.map(o=>{let r=new Date(o.createdAt).toLocaleDateString();return` ${z.bold(o.name.padEnd(24))} ${z.dim(o.udid.padEnd(28))} ${z.cyan(o.addedVia.padEnd(10))} ${z.dim(r)}`});rr(` ${z.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Via".padEnd(10)} Date
|
|
811
811
|
`+i.join(`
|
|
812
|
-
`),"Registered Devices")}catch(n){e.stop(z.red("Failed to fetch devices"))
|
|
813
|
-
`),l=Dt.relative(e,a);for(let d=0;d<s.length;d++){let u=s[d];if(!Sr(u)&&!Ar(u))for(let{id:p,pattern:
|
|
814
|
-
`),d=vt.relative(e,c);for(let u=0;u<l.length;u++){let p=l[u];rn.lastIndex=0;let
|
|
815
|
-
`),d=Ot.relative(e,c);for(let u=0;u<l.length;u++){let p=l[u],
|
|
816
|
-
`),d=Tt.relative(e,c);for(let u=0;u<l.length;u++){let p=l[u],
|
|
817
|
-
`);/__DEV__/.test(m)||t.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:t,durationMs:0}}import gn from"fs";import ii from"path";var Cr=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Tr(e){let n=[ii.join(e,"android","app","src","main","AndroidManifest.xml"),ii.join(e,"android","AndroidManifest.xml")];for(let t of n)if(gn.existsSync(t))return t;return null}async function hn(e,n){let t=[],i=1,o=Tr(e);if(!o)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let r=gn.readFileSync(o,"utf-8"),a=ii.relative(e,o),c=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,s;for(;(s=c.exec(r))!==null;){let l=s[1],d=s[2],p=d.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Cr.has(p))continue;let
|
|
812
|
+
`),"Registered Devices")}catch(n){e.stop(z.red("Failed to fetch devices")),$e.error(n.response?.data?.message||n.message)}ut(z.blue("---"))}async function dr(e){let n=e.udid;if(!n){let o=dt();o.start("Fetching registered devices...");try{let a=(await _.get("/devices")).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){$e.info(z.dim("No devices to remove.")),ut(z.blue("---"));return}let c=await Zi({message:"Select device to remove:",options:a.map(s=>({value:s.udid,label:s.name,hint:s.udid.substring(0,12)+"..."}))});if(ct(c)){lt("Cancelled");return}n=c}catch(r){o.stop(z.red("Failed to fetch devices")),$e.error(r.response?.data?.message||r.message);return}}let t=await or({message:`Remove device ${z.dim(n.substring(0,12)+"...")}?`});if(ct(t)||!t){lt("Cancelled");return}let i=dt();i.start("Removing device...");try{await _.delete(`/devices/${encodeURIComponent(n)}`),i.stop(z.green("Device removed"))}catch(o){i.stop(z.red("Failed to remove device")),$e.error(o.response?.data?.message||o.message)}ut(z.blue("---"))}async function _t(e,n){switch(e){case"register":await cr(n);break;case"list":await lr();break;case"remove":await dr(n);break;default:$e.error(`Unknown action: ${e}`)}}import{log as ye,spinner as vn}from"@clack/prompts";import _e from"chalk";import xt from"path";import mt from"fs";import Kr from"os";import Vr from"axios";var he=(r=>(r.CRITICAL="critical",r.HIGH="high",r.MEDIUM="medium",r.LOW="low",r.INFO="info",r))(he||{}),Pe=(s=>(s.PERMISSIONS="permissions",s.SECRETS="secrets",s.DEPENDENCIES="dependencies",s.STORAGE="storage",s.NETWORK="network",s.DEBUG="debug",s.MANIFEST="manifest",s.ATS="ats",s))(Pe||{});import{spinner as Sn,log as ft}from"@clack/prompts";import fe from"chalk";import{execSync as kr}from"child_process";import An from"fs";import En from"path";import Le from"fs";import pt from"path";import{execSync as ur}from"child_process";var Qi={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},pr={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function fr(e){try{let t=ur("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(t)}catch{}let n=pt.join(e,"app.json");if(Le.existsSync(n))try{let t=JSON.parse(Le.readFileSync(n,"utf-8"));return t.expo||t}catch{}return null}function mr(e){let n=[],t=pt.join(e,"node_modules");if(!Le.existsSync(t))return n;let i=/<uses-permission\s+android:name="([^"]+)"/g;function o(r,a){let c=pt.join(r,"android","src","main","AndroidManifest.xml");if(!Le.existsSync(c))return;let s=Le.readFileSync(c,"utf-8"),l;for(;(l=i.exec(s))!==null;)n.push({pkg:a,permission:l[1]});i.lastIndex=0}for(let r of Le.readdirSync(t)){if(r.startsWith("."))continue;let a=pt.join(t,r);if(r.startsWith("@")){if(!Le.statSync(a).isDirectory())continue;for(let c of Le.readdirSync(a))o(pt.join(a,c),`${r}/${c}`)}else o(a,r)}return n}async function en(e,n){let t=[],i=1,o=fr(e),r=o?.android?.permissions||[],a=o?.android?.blockedPermissions||[];for(let l of r){let d=Qi[l];d&&t.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${l.split(".").pop()} declared`,description:d.description,severity:d.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let c=mr(e);for(let{pkg:l,permission:d}of c){let u=Qi[d];u&&(a.includes(d)||r.includes(d)||t.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} injected by ${l}`,description:`${u.description}. Auto-injected via ${l} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${l}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${d}" to blockedPermissions if not needed.`,autoFixable:!0}))}let s=o?.ios?.infoPlist||{};for(let[l,d]of Object.entries(pr))l in s&&t.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${l} declared`,description:d.description,severity:d.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${l} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:t,durationMs:0}}import ti from"fs";import Dt from"path";var gr=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],hr=new Set([".ts",".tsx",".js",".jsx"]),yr=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function tn(e){let n=[],t=ti.readdirSync(e,{withFileTypes:!0});for(let i of t){if(yr.has(i.name))continue;let o=Dt.join(e,i.name);i.isDirectory()?n.push(...tn(o)):hr.has(Dt.extname(i.name))&&n.push(o)}return n}function Sr(e){let n=e.trim();return n.startsWith("//")||n.startsWith("*")||n.startsWith("/*")}function Ar(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function nn(e,n){let t=[],i=Dt.join(e,"src"),o=ti.existsSync(i)?i:e,r=tn(o);for(let a of r){let s=ti.readFileSync(a,"utf-8").split(`
|
|
813
|
+
`),l=Dt.relative(e,a);for(let d=0;d<s.length;d++){let u=s[d];if(!Sr(u)&&!Ar(u))for(let{id:p,pattern:h,severity:m,label:y}of gr)h.lastIndex=0,h.test(u)&&t.push({id:p,title:y,description:`Potential ${y.toLowerCase()} found in source code`,severity:m,category:"secrets",file:l,line:d+1,recommendation:`Move to environment variables or a secrets manager. Use \`${f.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:t,durationMs:0}}import{execSync as Er}from"child_process";var Ir={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function on(e,n){let t=[],i=1,o;try{o=Er("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(c){if(o=c.stdout||"",!o)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let r;try{r=JSON.parse(o)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let a=r.vulnerabilities||{};for(let[c,s]of Object.entries(a)){let l=Ir[s.severity]||"info",d=Array.isArray(s.via)?s.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(s.via);t.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${c} \u2014 ${s.severity}`,description:`Via: ${d}. Range: ${s.range||"unknown"}`,severity:l,category:"dependencies",recommendation:s.fixAvailable?`Run \`npm audit fix\` or update ${c} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!s.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:t,durationMs:0}}import wt from"fs";import vt from"path";var br=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,rn=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,$r=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Pr=new Set([".ts",".tsx",".js",".jsx"]),_r=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function sn(e){let n=[];if(!wt.existsSync(e))return n;let t=wt.readdirSync(e,{withFileTypes:!0});for(let i of t){if(_r.has(i.name))continue;let o=vt.join(e,i.name);i.isDirectory()?n.push(...sn(o)):Pr.has(vt.extname(i.name))&&n.push(o)}return n}async function an(e,n){let t=[],i=1,o=vt.join(e,"src"),r=wt.existsSync(o)?o:e,a=sn(r);for(let c of a){let s=wt.readFileSync(c,"utf-8");if(!$r.test(s))continue;let l=s.split(`
|
|
814
|
+
`),d=vt.relative(e,c);for(let u=0;u<l.length;u++){let p=l[u];rn.lastIndex=0;let h;for(;(h=rn.exec(p))!==null;){let m=h[1];br.test(m)&&t.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${m}"`,description:`Sensitive data key "${m}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:d,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:t,durationMs:0}}import Rt from"fs";import Ot from"path";var cn=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Dr=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,wr=new Set([".ts",".tsx",".js",".jsx"]),vr=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function ln(e){let n=[];if(!Rt.existsSync(e))return n;let t=Rt.readdirSync(e,{withFileTypes:!0});for(let i of t){if(vr.has(i.name))continue;let o=Ot.join(e,i.name);i.isDirectory()?n.push(...ln(o)):wr.has(Ot.extname(i.name))&&n.push(o)}return n}async function dn(e,n){let t=[],i=1,o=Ot.join(e,"src"),r=Rt.existsSync(o)?o:e,a=ln(r);for(let c of a){let l=Rt.readFileSync(c,"utf-8").split(`
|
|
815
|
+
`),d=Ot.relative(e,c);for(let u=0;u<l.length;u++){let p=l[u],h=p.trim();if(h.startsWith("//")||h.startsWith("*"))continue;cn.lastIndex=0;let m;for(;(m=cn.exec(p))!==null;){let y=m[1],$=Dr.test(y);t.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${$?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${y}`,severity:$?"high":"medium",category:"network",file:d,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:t,durationMs:0}}import Ct from"fs";import Tt from"path";var un=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,pn=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Rr=new Set([".ts",".tsx",".js",".jsx"]),Or=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function fn(e){let n=[];if(!Ct.existsSync(e))return n;let t=Ct.readdirSync(e,{withFileTypes:!0});for(let i of t){if(Or.has(i.name))continue;let o=Tt.join(e,i.name);i.isDirectory()?n.push(...fn(o)):Rr.has(Tt.extname(i.name))&&n.push(o)}return n}async function mn(e,n){let t=[],i=1,o=Tt.join(e,"src"),r=Ct.existsSync(o)?o:e,a=fn(r);for(let c of a){let l=Ct.readFileSync(c,"utf-8").split(`
|
|
816
|
+
`),d=Tt.relative(e,c);for(let u=0;u<l.length;u++){let p=l[u],h=p.trim();if(!(h.startsWith("//")||h.startsWith("*"))&&(un.lastIndex=0,un.test(p)&&t.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),pn.lastIndex=0,pn.test(p))){let m=l.slice(Math.max(0,u-3),u).join(`
|
|
817
|
+
`);/__DEV__/.test(m)||t.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:t,durationMs:0}}import gn from"fs";import ii from"path";var Cr=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Tr(e){let n=[ii.join(e,"android","app","src","main","AndroidManifest.xml"),ii.join(e,"android","AndroidManifest.xml")];for(let t of n)if(gn.existsSync(t))return t;return null}async function hn(e,n){let t=[],i=1,o=Tr(e);if(!o)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let r=gn.readFileSync(o,"utf-8"),a=ii.relative(e,o),c=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,s;for(;(s=c.exec(r))!==null;){let l=s[1],d=s[2],p=d.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Cr.has(p))continue;let h=/android:exported="true"/.test(d),m=/android:permission="/.test(d);h&&!m&&t.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${l}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:a,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(r)&&t.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:a,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(r)&&t.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:a,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:t,durationMs:0}}import Nt from"fs";import ni from"path";function Nr(e){let n=ni.join(e,"ios");if(!Nt.existsSync(n))return null;let t=Nt.readdirSync(n,{withFileTypes:!0});for(let i of t){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let o=ni.join(n,i.name,"Info.plist");if(Nt.existsSync(o))return o}return null}async function yn(e,n){let t=[],i=1,o=Nr(e);if(!o)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let r=Nt.readFileSync(o,"utf-8"),a=ni.relative(e,o),c=r.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(c){let s=c[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(s)&&t.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:a,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let l=s.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(l){let d=l[1].match(/<key>([^<]+)<\/key>/g);if(d)for(let u of d){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&t.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:a,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:t,durationMs:0}}var xr=[{category:"permissions",label:"Permission Audit",fn:en,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:nn,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:on,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:an,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:dn,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:mn,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:hn,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:yn,requiresPrebuild:!0}];async function In(e,n){let t=xr;n.category&&(t=t.filter(a=>a.category===n.category),t.length===0&&(ft.error(fe.red(`Unknown category: ${n.category}`)),ft.info(fe.dim(`Available: ${Object.values(Pe).join(", ")}`)),process.exit(1)));let i=t.filter(a=>!a.requiresPrebuild),o=t.filter(a=>a.requiresPrebuild),r=[];for(let a of i){let c=Sn();c.start(fe.dim(`Running ${a.label}...`));try{let s=Date.now(),l=await a.fn(e,n);l.durationMs=Date.now()-s,r.push(l);let d=l.findings.length;c.stop(d>0?fe.yellow(`${a.label} \u2014 ${d} finding(s)`):fe.green(`${a.label} \u2014 clean`))}catch(s){c.stop(fe.red(`${a.label} \u2014 error`)),r.push({category:a.category,label:a.label,findings:[],durationMs:0,error:s.message})}}if(o.length>0){let a=En.join(e,"android"),c=En.join(e,"ios"),s=An.existsSync(a)||An.existsSync(c);if(!s&&n.prebuild){n.json||ft.info(fe.dim(`
|
|
818
818
|
Running expo prebuild for deeper analysis...`));try{kr("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return ft.warn(fe.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),r}}else if(!s)return n.json||ft.info(fe.dim(`
|
|
819
|
-
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),r;for(let l of o){let d=Sn();d.start(fe.dim(`Running ${l.label}...`));try{let u=Date.now(),p=await l.fn(e,n);p.durationMs=Date.now()-u,r.push(p);let
|
|
820
|
-
`)),a.length>0){
|
|
821
|
-
`));for(let s of a)te.error(J.red(`${J.bold(s.name)} ${J.dim(`(${s.arch})`)}`)),te.info(J.dim(` PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${Pn})`))}return c.length>0&&(console.log(""),te.success(J.green(`${c.length} librar${c.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),a.length===0?(te.success(J.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(te.error(J.red.bold(`Found ${a.length} unaligned lib${a.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),te.info(J.yellow("To fix this:")),te.info(J.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),te.info(J.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),te.info(J.dim(" 3. Update third-party libraries that ship prebuilt .so files")),te.info(J.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),te.info(J.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return t.stop("Analysis failed."),te.error(J.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{Ce.rmSync(i,{recursive:!0,force:!0})}catch{}}}function jr(e){let n=Ce.openSync(e,"r");try{let t=Buffer.alloc(64);if(Ce.readSync(n,t,0,64,0),!t.subarray(0,4).equals(Gr))return null;let i=t[4]===2,o=t[5]===1,r=(p,g)=>o?p.readUInt16LE(g):p.readUInt16BE(g),a=(p,g)=>o?p.readUInt32LE(g):p.readUInt32BE(g),c=(p,g)=>Number(o?p.readBigUInt64LE(g):p.readBigUInt64BE(g)),s,l,d;i?(s=c(t,32),l=r(t,54),d=r(t,56)):(s=a(t,28),l=r(t,42),d=r(t,44));let u=null;for(let p=0;p<d;p++){let g=Buffer.alloc(l);if(Ce.readSync(n,g,0,l,s+p*l),a(g,0)!==Hr)continue;let h;i?h=c(g,48):h=a(g,28),h>0&&(u===null||h<u)&&(u=h)}return u??0}catch{return null}finally{Ce.closeSync(n)}}function Dn(e){let n=[];if(!Ce.existsSync(e))return n;let t=Ce.readdirSync(e,{withFileTypes:!0});for(let i of t){let o=Ye.join(e,i.name);i.isDirectory()?n.push(...Dn(o)):i.name.endsWith(".so")&&n.push(o)}return n}function Br(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Rn=async e=>{if(ue()||(ye.error(Pe.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await zr(e);return}let t=process.cwd(),i=xt.join(t,"package.json");mt.existsSync(i)||(ye.error(Pe.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(mt.readFileSync(i,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(ye.info(Pe.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),ye.info(Pe.dim(`Type: ${r?"Expo":"Bare React Native"}`)),ye.info(""));let a={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},c=await In(t,a);e.json?console.log(JSON.stringify($n(c,o),null,2)):bn(c,e.severity);let s=c.some(d=>d.findings.some(u=>u.severity==="critical")),l=c.some(d=>d.findings.some(u=>u.severity==="high"));(s||l)&&process.exit(1)},wn=["16kb"];async function zr(e){let n=e.category?.toLowerCase();n&&!wn.includes(n)&&(ye.error(Pe.red(`Unknown APK check category: "${n}"`)),ye.info(Pe.dim(`Available APK checks: ${wn.join(", ")}`)),process.exit(1));let t=await Wr(e.apk);t||process.exit(1);let i=!n,o=!1;(i||n==="16kb")&&(await _n(t)||(o=!0)),o&&process.exit(1)}async function Wr(e){if(e.startsWith("build:")){let t=e.slice(6);return await Yr(t)}if(e.startsWith("http://")||e.startsWith("https://"))return await On(e);let n=xt.resolve(e);return mt.existsSync(n)?n:(ye.error(Pe.red(`APK file not found: ${n}`)),null)}async function Yr(e){let n=vn();n.start(`Fetching APK from build ${e}...`);try{let t=await _.get(`/build/${e}`);if(t.data.status!=="success")throw new Error(t.data.message);let i=t.data.build;if(!i)throw new Error("Build not found");let o=i.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),ye.error(Pe.red("This build does not have an APK artifact.")),ye.info(Pe.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${i.buildId||e}`),await On(o.url))}catch(t){return n.stop("Failed to fetch build"),ye.error(Pe.red(t.message)),null}}async function On(e){let n=vn();n.start("Downloading APK...");try{let t=mt.mkdtempSync(xt.join(Kr.tmpdir(),`${f.nameLower}-audit-`)),i=xt.join(t,"app.apk"),o=await Vr.get(e,{responseType:"arraybuffer"});mt.writeFileSync(i,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return n.stop(`Downloaded APK (${r} MB)`),i}catch(t){return n.stop("Download failed"),ye.error(Pe.red(`Failed to download APK: ${t.message}`)),null}}var Xr=console.log;console.log=()=>{};Jr();console.log=Xr;de(re.bgCyan.black(f.cliTag("Production Build Orchestrator")));var Qr=Zr(import.meta.url),es=Qr("../package.json"),W=new qr;W.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(es.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);W.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await Ri()});W.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{de(re.bgCyan.black(f.cliTag("Hosting"))),await di()});W.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{de(re.bgCyan.black(f.cliTag("Sitemap Generator"))),await mi(e)});W.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Cn("--build-id <id>","Internal build ID").hideHelp()).addOption(new Cn("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,n)=>{let t=W.opts();n.yes=n.yes||t.yes,n.quiet=n.quiet||t.quiet,n.platform=e||n.platform,n.buildProfile=n.profile||n.buildProfile,n.quiet||de(re.bgCyan.black(f.cliTag("Cloud Build"))),await At(n)});W.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{de(re.bgCyan.black(f.cliTag("OTA Update"))),await Bi(e)});W.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("--track <track>","Google Play Track (internal, alpha, beta, production)","internal").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{de(re.bgCyan.black(f.cliTag("Store Submission"))),await Gi(e)});W.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{de(re.bgCyan.black(f.cliTag("Login"))),await Ni()});W.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{de(re.bgCyan.black(f.cliTag("Link Project"))),await ki()});W.command("me").description("Display currently logged in user details").action(async()=>{await Vi()});W.command("init").description(`Create a new ${f.name} Project`).action(async()=>{de(re.bgCyan.black(f.cliTag("Init Project"))),await xi()});W.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,n)=>{de(re.bgCyan.black(f.cliTag("Env Manager"))),await Mi(e,n)});W.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{de(re.bgCyan.black(f.cliTag("Dev Server"))),await qi(e)});W.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Ji(e)});W.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:n}=await import("./credentials-WL7JKLF4.js");await n(e)});W.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{de(re.bgCyan.black(f.cliTag("Credentials Setup"))),await Je(e),Tn(re.green("Done!"))});W.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").action(async e=>{de(re.bgCyan.black(f.cliTag("Service Credentials"))),await ci(e),Tn(re.green("Done!"))});var oi=W.command("device").description("Manage registered iOS test devices");oi.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await _t("register",e)});oi.command("list").description("List all registered devices").action(async()=>{await _t("list",{})});oi.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await _t("remove",e)});W.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{de(re.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await Rn(e)});var ts=new Set(["login"]);W.hook("preAction",(e,n)=>{let t=n.name();ts.has(t)||si()});W.on("command:*",()=>{console.error(`Invalid command: %s
|
|
819
|
+
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),r;for(let l of o){let d=Sn();d.start(fe.dim(`Running ${l.label}...`));try{let u=Date.now(),p=await l.fn(e,n);p.durationMs=Date.now()-u,r.push(p);let h=p.findings.length;d.stop(h>0?fe.yellow(`${l.label} \u2014 ${h} finding(s)`):fe.green(`${l.label} \u2014 clean`))}catch(u){d.stop(fe.red(`${l.label} \u2014 error`)),r.push({category:l.category,label:l.label,findings:[],durationMs:0,error:u.message})}}}return r}import te from"chalk";import{log as Q}from"@clack/prompts";var We={critical:te.bgRed.white.bold,high:te.red.bold,medium:te.yellow.bold,low:te.blue,info:te.dim},kt={critical:0,high:1,medium:2,low:3,info:4};function Lr(e,n){if(!n)return!0;let t=kt[n];return t===void 0?!0:kt[e]<=t}function bn(e,n){let t=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let a of e){let c=a.findings.filter(l=>Lr(l.severity,n));if(c.length===0&&!a.error)continue;if(Q.info(""),Q.info(te.bold(` ${a.label}`)+te.dim(` ${c.length} finding(s)`)),Q.info(te.dim(" "+"\u2500".repeat(60))),a.error){Q.error(te.red(` Error: ${a.error}`));continue}let s=[...c].sort((l,d)=>kt[l.severity]-kt[d.severity]);for(let l of s){let d=We[l.severity](` ${l.severity.toUpperCase()} `);Q.info(` ${d} ${te.bold(l.id)} ${l.title}`),Q.info(te.dim(` ${l.description}`)),l.file&&Q.info(te.dim(` File: ${l.file}${l.line?`:${l.line}`:""}`)),Q.info(te.cyan(` Fix: ${l.recommendation}`)),Q.info(""),i[l.severity]++,t++}}Q.info(""),Q.info(te.bold(" Summary")),Q.info(te.dim(" "+"\u2500".repeat(60))),Q.info(` Total: ${te.bold(String(t))} finding(s)`),Q.info(` ${We.critical(` ${i.critical} Critical `)} ${We.high(` ${i.high} High `)} ${We.medium(` ${i.medium} Medium `)} ${We.low(` ${i.low} Low `)} ${We.info(` ${i.info} Info `)}`);let o=i.critical>0,r=i.high>0;o||r?(Q.info(""),Q.error(te.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):t>0?(Q.info(""),Q.warn(te.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(Q.info(""),Q.success(te.green.bold(" PASS \u2014 no issues found")))}function $n(e,n){let t=e.flatMap(o=>o.findings),i={};for(let o of Object.values(he))i[o]=t.filter(r=>r.severity===o).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:n.name||"unknown",projectVersion:n.version||"0.0.0",summary:{total:t.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(o=>({category:o.category,label:o.label,findingCount:o.findings.length,durationMs:o.durationMs,error:o.error||null})),findings:t}}import{log as ee,spinner as Ur}from"@clack/prompts";import J from"chalk";import Ce from"fs";import Mr from"os";import Ye from"path";import{execSync as Fr}from"child_process";var Pn=16384,Hr=1,Gr=Buffer.from([127,69,76,70]);async function _n(e){ee.info(J.bold.underline("16KB Page Alignment Check")),console.log("");let n=Ye.resolve(e);if(!Ce.existsSync(n))return ee.error(J.red(`APK file not found: ${n}`)),!1;if(!n.endsWith(".apk"))return ee.error(J.red("The provided file is not an APK file.")),!1;let t=Ur();t.start("Extracting and analyzing native libraries...");let i=Ce.mkdtempSync(Ye.join(Mr.tmpdir(),"mach-16kb-"));try{try{Fr(`unzip -o -q "${n}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let o=Dn(Ye.join(i,"lib"));if(o.length===0)return t.stop("Analysis complete."),ee.info(J.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),ee.info(J.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let r=[];for(let s of o){let l=Ye.relative(i,s),d=Br(l),u=Ye.basename(s),p=jr(s);p!==null&&r.push({name:u,filePath:l,arch:d,align:p,compatible:p>=Pn})}if(t.stop("Analysis complete."),r.length===0)return ee.info(J.yellow("No valid ELF shared libraries found.")),!0;let a=r.filter(s=>!s.compatible),c=r.filter(s=>s.compatible);if(ee.info(J.dim(`Checked ${r.length} native librar${r.length===1?"y":"ies"}
|
|
820
|
+
`)),a.length>0){ee.info(J.red.bold(`Incompatible libraries:
|
|
821
|
+
`));for(let s of a)ee.error(J.red(`${J.bold(s.name)} ${J.dim(`(${s.arch})`)}`)),ee.info(J.dim(` PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${Pn})`))}return c.length>0&&(console.log(""),ee.success(J.green(`${c.length} librar${c.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),a.length===0?(ee.success(J.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(ee.error(J.red.bold(`Found ${a.length} unaligned lib${a.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),ee.info(J.yellow("To fix this:")),ee.info(J.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),ee.info(J.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),ee.info(J.dim(" 3. Update third-party libraries that ship prebuilt .so files")),ee.info(J.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),ee.info(J.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return t.stop("Analysis failed."),ee.error(J.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{Ce.rmSync(i,{recursive:!0,force:!0})}catch{}}}function jr(e){let n=Ce.openSync(e,"r");try{let t=Buffer.alloc(64);if(Ce.readSync(n,t,0,64,0),!t.subarray(0,4).equals(Gr))return null;let i=t[4]===2,o=t[5]===1,r=(p,h)=>o?p.readUInt16LE(h):p.readUInt16BE(h),a=(p,h)=>o?p.readUInt32LE(h):p.readUInt32BE(h),c=(p,h)=>Number(o?p.readBigUInt64LE(h):p.readBigUInt64BE(h)),s,l,d;i?(s=c(t,32),l=r(t,54),d=r(t,56)):(s=a(t,28),l=r(t,42),d=r(t,44));let u=null;for(let p=0;p<d;p++){let h=Buffer.alloc(l);if(Ce.readSync(n,h,0,l,s+p*l),a(h,0)!==Hr)continue;let y;i?y=c(h,48):y=a(h,28),y>0&&(u===null||y<u)&&(u=y)}return u??0}catch{return null}finally{Ce.closeSync(n)}}function Dn(e){let n=[];if(!Ce.existsSync(e))return n;let t=Ce.readdirSync(e,{withFileTypes:!0});for(let i of t){let o=Ye.join(e,i.name);i.isDirectory()?n.push(...Dn(o)):i.name.endsWith(".so")&&n.push(o)}return n}function Br(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Rn=async e=>{if(ue()||(ye.error(_e.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await zr(e);return}let t=process.cwd(),i=xt.join(t,"package.json");mt.existsSync(i)||(ye.error(_e.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(mt.readFileSync(i,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(ye.info(_e.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),ye.info(_e.dim(`Type: ${r?"Expo":"Bare React Native"}`)),ye.info(""));let a={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},c=await In(t,a);e.json?console.log(JSON.stringify($n(c,o),null,2)):bn(c,e.severity);let s=c.some(d=>d.findings.some(u=>u.severity==="critical")),l=c.some(d=>d.findings.some(u=>u.severity==="high"));(s||l)&&process.exit(1)},wn=["16kb"];async function zr(e){let n=e.category?.toLowerCase();n&&!wn.includes(n)&&(ye.error(_e.red(`Unknown APK check category: "${n}"`)),ye.info(_e.dim(`Available APK checks: ${wn.join(", ")}`)),process.exit(1));let t=await Wr(e.apk);t||process.exit(1);let i=!n,o=!1;(i||n==="16kb")&&(await _n(t)||(o=!0)),o&&process.exit(1)}async function Wr(e){if(e.startsWith("build:")){let t=e.slice(6);return await Yr(t)}if(e.startsWith("http://")||e.startsWith("https://"))return await On(e);let n=xt.resolve(e);return mt.existsSync(n)?n:(ye.error(_e.red(`APK file not found: ${n}`)),null)}async function Yr(e){let n=vn();n.start(`Fetching APK from build ${e}...`);try{let t=await _.get(`/build/${e}`);if(t.data.status!=="success")throw new Error(t.data.message);let i=t.data.build;if(!i)throw new Error("Build not found");let o=i.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),ye.error(_e.red("This build does not have an APK artifact.")),ye.info(_e.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${i.buildId||e}`),await On(o.url))}catch(t){return n.stop("Failed to fetch build"),ye.error(_e.red(t.message)),null}}async function On(e){let n=vn();n.start("Downloading APK...");try{let t=mt.mkdtempSync(xt.join(Kr.tmpdir(),`${f.nameLower}-audit-`)),i=xt.join(t,"app.apk"),o=await Vr.get(e,{responseType:"arraybuffer"});mt.writeFileSync(i,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return n.stop(`Downloaded APK (${r} MB)`),i}catch(t){return n.stop("Download failed"),ye.error(_e.red(`Failed to download APK: ${t.message}`)),null}}var Xr=console.log;console.log=()=>{};Jr();console.log=Xr;de(re.bgCyan.black(f.cliTag("Production Build Orchestrator")));var Qr=Zr(import.meta.url),es=Qr("../package.json"),W=new qr;W.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(es.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);W.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await Ri()});W.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{de(re.bgCyan.black(f.cliTag("Hosting"))),await di()});W.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{de(re.bgCyan.black(f.cliTag("Sitemap Generator"))),await mi(e)});W.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Cn("--build-id <id>","Internal build ID").hideHelp()).addOption(new Cn("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,n)=>{let t=W.opts();n.yes=n.yes||t.yes,n.quiet=n.quiet||t.quiet,n.platform=e||n.platform,n.buildProfile=n.profile||n.buildProfile,n.quiet||de(re.bgCyan.black(f.cliTag("Cloud Build"))),await At(n)});W.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{de(re.bgCyan.black(f.cliTag("OTA Update"))),await Bi(e)});W.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("--track <track>","Google Play Track (internal, alpha, beta, production)","internal").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{de(re.bgCyan.black(f.cliTag("Store Submission"))),await Gi(e)});W.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{de(re.bgCyan.black(f.cliTag("Login"))),await Ni()});W.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{de(re.bgCyan.black(f.cliTag("Link Project"))),await ki()});W.command("me").description("Display currently logged in user details").action(async()=>{await Vi()});W.command("init").description(`Create a new ${f.name} Project`).action(async()=>{de(re.bgCyan.black(f.cliTag("Init Project"))),await xi()});W.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,n)=>{de(re.bgCyan.black(f.cliTag("Env Manager"))),await Mi(e,n)});W.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{de(re.bgCyan.black(f.cliTag("Dev Server"))),await qi(e)});W.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Ji(e)});W.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:n}=await import("./credentials-XD65FANT.js");await n(e)});W.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{de(re.bgCyan.black(f.cliTag("Credentials Setup"))),await Je(e),Tn(re.green("Done!"))});W.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").action(async e=>{de(re.bgCyan.black(f.cliTag("Service Credentials"))),await ci(e),Tn(re.green("Done!"))});var oi=W.command("device").description("Manage registered iOS test devices");oi.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await _t("register",e)});oi.command("list").description("List all registered devices").action(async()=>{await _t("list",{})});oi.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await _t("remove",e)});W.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{de(re.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await Rn(e)});var ts=new Set(["login"]);W.hook("preAction",(e,n)=>{let t=n.name();ts.has(t)||si()});W.on("command:*",()=>{console.error(`Invalid command: %s
|
|
822
822
|
See --help for a list of available commands.`,W.args.join(" ")),process.exit(1)});process.argv.slice(2).length||W.help();W.parse(process.argv);
|