@radhya/mach 1.4.27 → 1.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@radhya/mach",
-  "version": "1.4.27",
+  "version": "1.5.0",
   "description": "Mach CLI: Cloud Build Orchestrator for React Native & Expo",
   "main": "dist/index.js",
   "type": "module",

package/dist/chunk-QUHQZ26P.js

@@ -1,54 +0,0 @@
-import{a as p,g as R}from"./chunk-YZYFEHP5.js";import{log as t,spinner as M,text as D,password as pe,select as O,confirm as Ve,isCancel as v,cancel as F,intro as Ee,outro as Ne,note as Ce}from"@clack/prompts";import{log as Z,spinner as te,text as J,select as ne,isCancel as x,cancel as L,note as se,confirm as be}from"@clack/prompts";import N from"chalk";import{spawnSync as ee}from"child_process";import E from"fs";import X from"path";import ce from"os";var we="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";function ae(){let a=X.join(ce.tmpdir(),p.nameLower);E.existsSync(a)||E.mkdirSync(a,{recursive:!0});let e=X.join(a,"manage_asc_keys.rb");return E.writeFileSync(e,Buffer.from(we,"base64").toString("utf-8"),{mode:493}),e}function re(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}var fe=async a=>{let e=te(),r=a.platform,c=`./${p.configFileName}`;if(!E.existsSync(c)){Z.error(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`);return}let s=JSON.parse(E.readFileSync(c,"utf-8")),{projectId:o}=s;if(!o){Z.error(`${p.configFileName} is missing projectId.`);return}let n=a.file;if(r==="ios"&&!n){let g=await ne({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically (EAS-Style)",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F  Delete an existing Key"}]});if(x(g)){L("Operation cancelled");return}if(g==="magic"){await ve(o,s);return}if(g==="delete"){await Re(o,s);return}}if(!n){let g=r==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";se(`To submit to the ${r==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
-
-1. Open: ${N.cyan(g)}
-`+(r==="ios"?`2. Generate an "App Store Connect API Key" with ${N.bold("Admin")} role.
-3. Download the ${N.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${N.bold("JSON")} key.
-3. Download the ${N.bold(".json")} file.`),"Guided Setup"),e.start("Scanning for downloaded keys...");let d=Ze(r);if(e.stop(d.length>0?`Detected ${d.length} potential key(s)`:"No keys detected automatically"),d.length>0){let I=await ne({message:"Found these potential keys. Use one of them?",options:[...d.map(l=>({value:l.path,label:`${X.basename(l.path)} (${l.location})`})),{value:"manual",label:"Enter path manually..."}]});if(x(I)){L("Operation cancelled");return}I!=="manual"&&(n=I)}if(!n){let I=await J({message:`Paste the path to your ${r==="ios"?".p8":".json"} file:`,validate:l=>E.existsSync(l)?void 0:"File not found"});if(x(I)){L("Operation cancelled");return}n=I}}let u=a.issuerId,y=a.keyId;if(r==="ios"){if(!y&&n){let g=X.basename(n).match(/AuthKey_(.*)\.p8/);g&&(y=g[1],Z.info(`Auto-detected Key ID from filename: ${N.green(y)}`))}if(!u){let g=await J({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:d=>d.length>0?void 0:"Issuer ID is required"});if(x(g)){L("Operation cancelled");return}u=g}if(!y){let g=await J({message:"Enter App Store Connect Key ID:",validate:d=>d.length>0?void 0:"Key ID is required"});if(x(g)){L("Operation cancelled");return}y=g}}await oe(o,n,r,u,y)};async function ve(a,e){let r=te(),c=e.submit?.production?.ios?.appleId,s=e.submit?.production?.ios?.appleTeamId;if(!c){let u=await J({message:"Apple ID:",placeholder:"your-email@example.com"});if(x(u))return;c=u,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=c,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}if(!s){let u=await J({message:"Apple Team ID:",placeholder:"e.g. 4523G95823"});if(x(u))return;s=u,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=s,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}let o=await J({message:"Enter a name for the new API Key:",initialValue:`[${p.name}] Project ${a}`});if(x(o))return;r.start("Authenticating with Apple and creating API Key...");let n=ae();if(!E.existsSync(n)){Z.error(`Magic Error: Helper script not found at ${n}`);return}try{let u=ee("ruby",[n,"create",o],{env:{...re(),FASTLANE_USER:c,FASTLANE_TEAM_ID:s},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),y=u.stdout||"",g=u.stderr||"";if(g&&(g.includes("DEBUG:")||g.includes("ERROR:"))&&g.split(`
-`).forEach(S=>{S.trim()&&Z.info(N.dim(`[Ruby] ${S.trim()}`))}),u.status!==0){r.stop("Failed"),Z.error(`Magic creation failed: ${g}`);return}let d=y.match(new RegExp(`${p.jsonStartMarker}(.*)${p.jsonEndMarker}`));if(!d){r.stop("Parse Error"),Z.error("Could not parse response from Apple Portal.");return}let I=JSON.parse(d[1]),{id:l,issuerId:f,keyContent:m}=I;if(r.stop("Key Created Successfully"),Z.success(`\u2713 Created Key ID: ${N.green(l)}`),!f){se(`Your Issuer ID is shown at the top of:
-  ${N.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
-
-It looks like: ${N.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let S=await J({message:"Enter your App Store Connect Issuer ID:",validate:b=>b.trim().length>0?void 0:"Issuer ID is required"});if(x(S)){L("Operation cancelled.");return}f=S.trim()}if(m){let S=X.join(ce.tmpdir(),`AuthKey_${l}.p8`);E.writeFileSync(S,m),await oe(a,S,"ios",f,l),E.unlinkSync(S)}else{Z.warn(N.yellow("\u26A0\uFE0F  Apple did not return the private key in the response.")),se(`Download the .p8 file manually:
-
-  1. Open: ${N.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
-  2. Find Key ID: ${N.green(l)}
-  3. Click ${N.bold("Download API Key")} (only available once)
-  4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let S=await J({message:"Path to the downloaded .p8 file (drag & drop here):",validate:b=>E.existsSync(b)?void 0:"File not found"});if(x(S)){L("Operation cancelled. Credential ID was registered but key content is missing.");return}await oe(a,S,"ios",f,l)}}catch(u){r.stop("Error"),Z.error(`Error: ${u.message}`)}}async function Re(a,e){let r=te(),c=e.submit?.production?.ios?.appleId,s=e.submit?.production?.ios?.appleTeamId;if(!c){let n=await J({message:"Apple ID:"});if(x(n))return;c=n,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=c,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}if(!s){let n=await J({message:"Apple Team ID:"});if(x(n))return;s=n,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=s,E.writeFileSync(`./${p.configFileName}`,JSON.stringify(e,null,2))}r.start("Fetching existing API Keys...");let o=ae();if(!E.existsSync(o)){Z.error(`Magic Error: Helper script not found at ${o}`);return}try{let n=ee("ruby",[o,"list"],{env:{...re(),FASTLANE_USER:c,FASTLANE_TEAM_ID:s},stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(n.status!==0){r.stop("Failed"),Z.error(`Listing failed: ${n.stderr}`);return}let u=n.stdout.match(new RegExp(`${p.jsonStartMarker}(.*)${p.jsonEndMarker}`));if(!u){r.stop("Parse Error");return}let y=JSON.parse(u[1]);if(r.stop(`Found ${y.length} keys`),y.length===0){Z.info("No API Keys found on this team.");return}let g=await ne({message:"Select a key to delete from Apple Developer Portal:",options:[...y.map(l=>({value:l.id,label:`ID: ${l.id} - ${l.name} (${l.role})`})),{value:"cancel",label:"Cancel"}]});if(x(g)||g==="cancel")return;let d=await be({message:`Are you sure you want to delete Key ${g}? This cannot be undone.`});if(!d||x(d))return;r.start(`Deleting Key ${g}...`);let I=ee("ruby",[ae(),"delete",g],{env:{...re(),FASTLANE_USER:c,FASTLANE_TEAM_ID:s},stdio:"pipe",encoding:"utf-8"});I.status===0?(r.stop("Deleted"),Z.success(`\u2713 Key ${g} has been removed from Apple Portal.`)):(r.stop("Deletion Failed"),Z.error(`Error: ${I.stderr}`))}catch(n){r.stop("Error"),Z.error(`Error: ${n.message}`)}}async function oe(a,e,r,c,s){let o=te();o.start(`Uploading Service Credentials for ${r}...`);try{let n=r==="ios"?"asc_api_key":"google_service_account",u=new URL(import.meta.url),y=X.dirname(u.pathname),g=[X.join(y,"isolated-upload.js"),X.join(y,"commands","isolated-upload.js"),X.resolve(y,"../commands/isolated-upload.js"),X.resolve(process.cwd(),`node_modules/.bin/${p.nameLower}-upload`)],d="";for(let l of g)if(E.existsSync(l)){d=l;break}if(!d)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let I=ee("node",[d,a,e,n,"*","service","undefined","undefined",c||"undefined",s||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(I.status!==0){let l=I.stderr||I.stdout||"Unknown upload failure";o.stop("Upload Failed"),Z.error(N.red(`Upload Failed: ${l}`));return}I.stdout.includes("SUCCESS")?(o.stop("Upload Success"),Z.success(N.green(`\u2713 Service Credentials for ${r} uploaded successfully.`))):(o.stop("Upload Summary"),Z.warn(N.yellow(`Upload finished but success not confirmed: ${I.stdout}`)))}catch(n){o.stop("Upload Error"),Z.error(N.red(`Error: ${n.message}`))}}function Ze(a){let e=a==="ios"?".p8":".json",r=[],c=[{path:"./",label:"Project Root"},{path:X.join(ce.homedir(),"Downloads"),label:"Downloads"}];for(let s of c)if(E.existsSync(s.path))try{let o=E.readdirSync(s.path);for(let n of o)if(n.endsWith(e)){if(a==="android"&&!E.readFileSync(X.join(s.path,n),"utf8").includes("service_account")||a==="ios"&&!n.startsWith("AuthKey"))continue;r.push({path:X.join(s.path,n),location:s.label})}}catch{}return r}import Ae from"axios";import i from"chalk";import{execSync as G,spawnSync as Y}from"child_process";import le from"crypto";import A from"fs";import V from"path";import ue from"os";Ae.defaults.proxy=!1;function de(a,e){if(!A.existsSync(a))return;let r=A.readdirSync(a);for(let c of r){let s=V.join(a,c);if(A.statSync(s).isDirectory()){let n=de(s,e);if(n)return n}else if(e.test(c))return s}}function ke(a,e,r){let c=A.readFileSync(r,"utf8"),s=Math.floor(Date.now()/1e3),o=Buffer.from(JSON.stringify({alg:"ES256",kid:a,typ:"JWT"})).toString("base64url"),n=Buffer.from(JSON.stringify({iss:e,iat:s,exp:s+1200,aud:"appstoreconnect-v1"})).toString("base64url"),u=`${o}.${n}`,y=le.createSign("SHA256");y.update(u);let g=y.sign({key:c,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${u}.${g}`}async function Ge(a,e,r,c){let s=ke(e,r,c),o=(await import("axios")).default;for(let n of a)try{await o.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:n.name,udid:n.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${s}`,"Content-Type":"application/json"}}),t.info(i.dim(`  \u2713 Registered: ${n.name}`))}catch(u){let y=u.response?.data?.errors;y?.some(d=>d.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||d.detail?.toLowerCase().includes("already registered")||d.detail?.toLowerCase().includes("already exists"))?t.info(i.dim(`  Already on Portal: ${n.name}`)):t.warn(i.yellow(`  Could not register ${n.name}: ${y?.[0]?.detail||u.message}`))}}var me=async a=>{Ee(i.bgCyan.black(p.cliTag("Credentials")));let e=await O({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});v(e)&&(F("Operation cancelled"),process.exit(0));let r=await O({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(c=>!(e==="android"&&(c.value==="service"&&(c.label="Google Service Account (JSON)"),c.value==="push")))});if((v(r)||r==="exit")&&(F("Operation cancelled"),process.exit(0)),r==="back")return me(a);if(r==="setup")await Be({...a,platform:e});else if(r==="download")await Xe({...a,platform:e});else if(r==="service")await fe({platform:e});else if(r==="push")return Ce("Push Notifications management is coming soon!","Coming Soon"),me(a);Ne(i.green("Done!"))},Be=async a=>{let e=M(),r=a.platform,c=a.profile;if(!c){let u=await O({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});v(u)&&(F("Operation cancelled"),process.exit(0)),c=u}let s=`./${p.configFileName}`;if(!A.existsSync(s)){t.error(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`);return}let o=JSON.parse(A.readFileSync(s,"utf-8")),{projectId:n}=o;if(!n){t.error(`${p.configFileName} is missing projectId.`);return}a.awsProfile&&t.warn(i.yellow(`Ignoring --aws-profile. Authenticating with ${p.name} Cloud...`)),t.info(i.dim(`Setting up credentials for: ${c}`)),r==="ios"?await Fe(n,c,a,o):await xe(n,c,c==="production"?"store":"internal",a)};async function Fe(a,e,r,c){let s=r.bundleId;if(!s){let y=c.submit?.production?.ios?.bundleId||c.ios?.bundleId,g=[];try{let I=(await R.get(`/credentials/${a}`)).data.credentials||[];g=[...new Set(I.filter(l=>l.platform==="ios"&&l.bundleId&&l.bundleId!=="*").map(l=>l.bundleId))]}catch{}if(y&&!g.includes(y)&&g.unshift(y),g.length>0){let d=[...g.map(l=>({value:l,label:l,hint:l===y?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],I=await O({message:"Which Bundle ID are you setting up credentials for?",options:d});if(v(I)&&(F("Operation cancelled"),process.exit(0)),I==="__new__"){let l=await D({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:f=>f.includes(".")?void 0:"Please enter a valid Bundle ID"});v(l)&&(F("Operation cancelled"),process.exit(0)),s=l}else s=I}else{let d=await D({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:I=>I.includes(".")?void 0:"Please enter a valid Bundle ID"});v(d)&&(F("Operation cancelled"),process.exit(0)),s=d}}t.info(i.dim(`Bundle ID: ${s}`));let o=e==="production"?"store":e==="staging"?"adhoc":"development",n=c.submit?.production?.ios?.appleId;n&&t.info(i.dim(`Using Apple ID from config: ${n}`)),await $e(a,s,e,o,o==="store"?"appstore":o==="adhoc"?"adhoc":"development",r,c,n)}async function _e(a){let e="MATCH_ENCRYPTION_PASSPHRASE";try{let n=((await R.get(`/projects/${a}/secrets/export?env=development`)).data.secrets||{})[e];if(n&&!n.includes("[Decryption Failed]"))return t.info(i.dim("Using existing encryption passphrase from Dashboard")),t.info(i.cyan(`MATCH_PASSWORD: ${n}`)),n;if(n&&n.includes("[Decryption Failed]")){t.warn(i.yellow("\u26A0\uFE0F  Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),t.info(i.dim("Generating a fresh passphrase and cleaning old certificates..."));let u=le.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:u,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await R.post("/credentials/clean-match-storage",{projectId:a}),t.success(i.green("\u2713 Cleaned old certificates from storage"))}catch{}return u}}catch(s){t.info(i.dim(`Could not fetch existing passphrase from Dashboard: ${s.message}`))}let r=await O({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((v(r)||r==="cancel")&&(F("Operation cancelled"),process.exit(0)),r==="enter"){let s=await pe({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:n=>n.length>0?void 0:"Passphrase is required"});v(s)&&(F("Operation cancelled"),process.exit(0));let o=s;try{await R.post(`/projects/${a}/secrets`,{key:e,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),t.success(i.green("\u2713 Saved passphrase to Dashboard"))}catch{}return o}let c=le.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:c,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 Generated and saved encryption passphrase to Dashboard")),t.info(i.cyan(`MATCH_PASSWORD: ${c}`))}catch(s){t.warn(i.yellow(`Could not save passphrase to Dashboard: ${s.message}`))}return c}async function $e(a,e,r,c,s,o,n,u){let y=M();t.info(i.blue("Configuring iOS certificate management..."));let g;if(!u){let d=await D({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:I=>I.includes("@")?void 0:"Please enter a valid email"});v(d)&&(F("Operation cancelled"),process.exit(0)),u=d,n.submit||(n.submit={production:{ios:{}}}),n.submit.production||(n.submit.production={ios:{}}),n.submit.production.ios||(n.submit.production.ios={}),n.submit.production.ios.appleId=u,A.writeFileSync(`./${p.configFileName}`,JSON.stringify(n,null,2)),t.success(i.green("\u2713 Apple ID saved to config"))}y.start(`Fetching ${s} certificates...`);try{let d=await _e(a),I="",l="";try{let b=await R.post("/credentials/build-server-token",{projectId:a});b.data.status==="success"&&b.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=b.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=b.data.credentials.secretAccessKey,b.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=b.data.credentials.sessionToken),l=b.data.credentials.region||"ap-south-1",I=b.data.credentials.bucket||p.bucketPrefix,process.env.AWS_REGION=l,delete process.env.AWS_PROFILE)}catch(b){throw t.error(`Failed to authenticate with ${p.name} Cloud.`),b}if(!I||!l){t.error(`Failed to resolve S3 configuration from ${p.name} Cloud.`);return}let f=o.teamId||n.submit?.production?.ios?.appleTeamId;if(!f)try{let T=(await R.get(`/projects/${a}/secrets`)).data.secrets?.find(W=>W.key==="APPLE_TEAM_ID");T&&(f=T.value,t.info(i.dim(`Using Team ID from Dashboard: ${f}`)))}catch{}if(f&&f===n.submit?.production?.ios?.appleTeamId&&t.info(i.dim(`Using Apple Team ID from config: ${f}`)),!f){t.warn(i.yellow(`
-Apple Team ID is required to fetch certificates.`)),t.info(i.dim("You can find this at: https://developer.apple.com/account \u2192 Membership Details"));let b=await D({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:T=>T.length===10?void 0:"Team ID must be exactly 10 characters"});v(b)&&(F("Operation cancelled"),process.exit(0)),f=b,await Ie(a,f)}y.stop("Starting certificate sync...");let m=p.credentialsKeychain,S=p.keychainPassword;try{let T=`${process.env.HOME||"/Users/"+(process.env.USER||p.nameLower)}/Library/Keychains/${m}`;t.info(i.dim(`Ensuring keychain exists: ${m}`));try{G(`security create-keychain -p ${S} ${m} 2>/dev/null || true`),G(`security unlock-keychain -p ${S} ${m}`),G(`security set-keychain-settings ${m}`);let h=G("security list-keychains -d user").toString();if(!h.includes(m)){t.info(i.dim(`Adding ${m} to search list`));let C=[...h.replace(/"/g,"").split(`
-`).map(B=>B.trim()).filter(B=>B.length>0),T].join(" ");G(`security list-keychains -d user -s ${C}`)}}catch(h){t.warn(i.dim("Keychain setup warning (non-critical): "+h.message))}let W,H;try{let w=((await R.get(`/credentials/${a}`)).data.credentials||[]).find(C=>C.type==="asc_api_key"&&C.issuerId);if(w){let C=await R.get(`/credentials/${w.credentialId}/download`,{params:{projectId:a}});if(C.data.downloadUrl){let k=await(await import("axios")).default.get(C.data.downloadUrl,{responseType:"arraybuffer"}),P=V.join(ue.tmpdir(),`mach-asc-${Date.now()}`);A.mkdirSync(P,{recursive:!0}),g=V.join(P,`AuthKey_${w.keyId}.p8`),A.writeFileSync(g,Buffer.from(k.data)),W=w.keyId,H=w.issuerId,t.success(i.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(h){t.warn(i.dim(`Could not load ASC API key: ${h.message}. Will fall back to Apple ID auth.`))}t.info(i.dim("Generating secure P12 export password..."));let j=he();t.success(i.green("\u2713 Secure P12 password generated."));let _={...process.env,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:d,FASTLANE_USER:u,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:f,MATCH_KEYCHAIN_NAME:m,MATCH_KEYCHAIN_PASSWORD:S,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",MATCH_OUTPUT_PATH:V.join(process.cwd(),"temp_match"),MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:l,MATCH_S3_BUCKET:I,MATCH_S3_OBJECT_PREFIX:"ios-certificates/",MATCH_USERNAME:u,MATCH_APP_IDENTIFIER:e,MATCH_TYPE:s,[`${p.envPrefix}P12_PASSWORD`]:j,...g&&W&&H?{APP_STORE_CONNECT_API_KEY_KEY_ID:W,APP_STORE_CONNECT_API_KEY_ISSUER_ID:H,APP_STORE_CONNECT_API_KEY_KEY_FILEPATH:g,FASTLANE_SKIP_2FA:"1"}:{}};if(o.force){t.warn(i.yellow(`
-\u26A0\uFE0F  Force flag detected: Hard resetting ${s} certificates...`)),t.info(i.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),t.info(i.cyan(`Current MATCH_PASSWORD: ${d}`)),t.info(i.dim(`Cleaning match storage for Team ID: ${f}...`));try{(await R.post("/credentials/clean-match-storage",{projectId:a,teamId:f})).data.status==="success"&&t.success(i.green(`\u2713 Cleared S3 storage for Team ID: ${f}`))}catch(h){t.warn(i.yellow(`S3 cleanup via API failed: ${h.message}`)),t.info(i.dim("Continuing to attempt standard nuke..."))}try{G(`fastlane match nuke ${s} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:_}),t.success(i.green(`\u2713 Nuked existing ${s} credentials`))}catch{t.warn(i.yellow("Standard nuke failed (likely due to password mismatch).")),t.info(i.dim("Since S3 was cleared manually, proceeding to generation..."))}}if(s==="adhoc"||s==="development")try{t.info(i.blue("Fetching registered devices..."));let w=(await R.get("/devices")).data.devices||[];if(w.length===0)t.warn(i.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),t.info(i.dim(`Register devices with: ${p.nameLower} device register`));else{let{multiselect:C}=await import("@clack/prompts"),B=await C({message:`Select devices to include in the ${s} profile:`,options:w.map(k=>({value:k.udid,label:`${k.name} (${k.udid.substring(0,12)}...)`,hint:k.model||k.platform})),initialValues:w.map(k=>k.udid)});if(!v(B)&&B.length>0){let k=w.filter(P=>B.includes(P.udid));if(t.info(i.blue(`Registering ${k.length} device(s) on Apple Developer Portal...`)),g&&W&&H)await Ge(k,W,H,g);else{t.info(i.dim("You will be prompted for a 2FA code once \u2014 type it and press Enter."));for(let P of k){let ie=P.name.replace(/"/g,'\\"');Y(`fastlane run register_device name:"${ie}" udid:"${P.udid}"`,{shell:!0,env:_,stdio:"inherit",cwd:process.cwd()})}}t.info(i.green("\u2713 Device registration complete."))}}}catch(h){t.warn(i.yellow(`Could not fetch registered devices: ${h.message}`)),t.info(i.dim("Continuing without explicit device registration."))}try{let h=Y(`fastlane match ${s} --app_identifier "${e}" --profile_name "${p.nameLower} ${s} ${e}"`,{shell:!0,cwd:process.cwd(),env:_,stdio:"inherit",encoding:"utf-8"});if(h.status!==0){t.warn(i.yellow(`
-Certificate sync failed. Attempting to create App ID and retry...`));try{G(`fastlane produce --app_identifier "${e}" --app_name "${e}" --skip_itc`,{stdio:"inherit",env:_}),t.success(i.green("\u2713 App ID created successfully")),t.info(i.blue("Retrying certificate sync...")),h=Y(`fastlane match ${s} --app_identifier "${e}" --profile_name "${p.nameLower} ${s} ${e}"`,{shell:!0,cwd:process.cwd(),env:_,stdio:"inherit",encoding:"utf-8"})}catch{}if(h.status!==0)throw new Error("fastlane match failed")}}catch(h){t.warn(i.yellow(`
-Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),t.info(i.cyan(`Failed MATCH_PASSWORD was: ${d}`));let w=await O({message:"What would you like to do?",options:[{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal (Resolve certificate limits)",hint:"See if you have too many certificates"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(v(w)||w==="cancel")throw h;if(w==="retry_password"){t.info(i.dim(`
-You are overriding the dashboard passphrase for this session.`));let C=await pe({message:"Enter the correct MATCH_PASSWORD for this project:"});if(C&&!v(C)){d=C,t.info(i.blue("Retrying with provided passphrase...")),t.info(i.cyan(`New MATCH_PASSWORD: ${d}`));let B={..._,MATCH_PASSWORD:d};if(Y(`fastlane match ${s}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:B}).status===0)await R.post(`/projects/${a}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:d,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 Dashboard passphrase updated.")),t.info(i.cyan(`MATCH_PASSWORD: ${d}`));else throw new Error("Sync failed again with provided passphrase.")}else throw h}else if(w==="check_portal")try{let C=await ge(_,s);if(C.length>0){if(t.info(i.dim(`Found ${C.length} existing ${s} certificates on the portal.`)),await Pe(s,_,a,C)&&(t.info(i.blue("Retrying certificate sync...")),Y(`fastlane match ${s}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:_}).status!==0))throw new Error("Retry failed")}else throw t.error(i.red("No existing certificates found on portal to resolve.")),h}catch(C){throw t.warn(i.dim(`Portal check warning: ${C.message}`)),h}else throw h}t.success(i.green("\u2713 Certificates fetched and synced"));let $=V.join(process.cwd(),"temp_match"),U=V.join($,`${p.fastlanePrefix}_export.p12`),Q=de($,/\.mobileprovision$/);try{let w=`${process.env.HOME||"/Users/"+(process.env.USER||p.nameLower)}/Library/Keychains/${m}`;A.existsSync($)||A.mkdirSync($,{recursive:!0}),t.info(i.dim("Exporting certificate from keychain for dashboard upload..."));let C="",B=w;try{let P=G("security find-identity -v -p codesigning",{encoding:"utf-8"}).match(new RegExp(`"([^"]*\\(${f}\\))"`));if(P){C=P[1],t.info(i.dim(`Found identity across keychains: "${C}"`));let ie=G("security list-keychains -d user",{encoding:"utf-8"}).split(`
-`).map(K=>K.trim().replace(/^"|"$/g,"")).filter(K=>K.length>0);for(let K of ie)try{if(G(`security find-identity -v -p codesigning "${K}"`,{encoding:"utf-8"}).includes(f)){B=K,t.info(i.dim(`Identity found in keychain: ${K}`));break}}catch{}}else t.warn(i.yellow(`No identity found for team ${f} in any keychain.`))}catch{}C?(G(`security export -k "${B}" -t identities -f pkcs12 -o "${U}" -P "" "${C}"`,{stdio:"ignore"}),t.info(i.dim(`Exported identity from: ${B}`))):G(`security export -k "${w}" -t identities -f pkcs12 -o "${U}" -P ""`,{stdio:"ignore"})}catch{t.warn(i.dim("Could not export certificate from keychain."))}o.teamId&&!f&&await Ie(a,o.teamId);let q=A.existsSync(U)?U:de($,/\.p12$/);if(q&&Q){let h,w;try{let C=await ge(_,s);C.length>0&&(h=C[0].expires,w=C[0].id)}catch{t.warn(i.dim("Could not fetch expiration date or ID for dashboard record."))}await z(a,q,"ios_cert",e,c,void 0,h,o.teamId||f,w,j),await z(a,Q,"ios_profile",e,c,void 0,h,o.teamId||f),t.success(i.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"));try{A.existsSync("./temp_match")&&A.rmSync("./temp_match",{recursive:!0,force:!0})}catch{}}else t.warn(i.yellow("Certificates generated but not found in expected location.")),t.info(i.dim("Falling back to manual upload...")),await ye(a,e,c)}catch(b){y.stop("Certificate fetch failed"),t.error(i.red(`Error: ${b.message}`)),t.info(i.dim("Falling back to manual upload...")),await ye(a,e,c)}}catch(d){y.stop("iOS setup failed"),t.error(i.red(`Error: ${d.message}`))}finally{if(g)try{A.rmSync(V.dirname(g),{recursive:!0,force:!0})}catch{}}}async function Ie(a,e){try{await R.post(`/projects/${a}/secrets`,{key:"APPLE_TEAM_ID",value:e,description:"Apple Developer Team ID (used for iOS signing)"}),t.success(i.green(`\u2713 Saved Team ID ${e} to Dashboard`))}catch(r){t.warn(i.yellow(`Could not save Team ID to Dashboard: ${r.message}`))}}async function ye(a,e,r){t.info(i.yellow(`
-Manual Upload Mode`)),t.info("Please provide your certificate and provisioning profile:");let c=await D({message:"Path to .p12 certificate file:",validate:n=>A.existsSync(n)?void 0:"File not found"});v(c)&&(F("Operation cancelled"),process.exit(0));let s=await D({message:"Path to .mobileprovision file:",validate:n=>A.existsSync(n)?void 0:"File not found"});v(s)&&(F("Operation cancelled"),process.exit(0));let o=M();o.start(`Uploading to ${p.name} Dashboard...`);try{await z(a,c,"ios_cert",e,r),await z(a,s,"ios_profile",e,r),o.stop("Upload complete"),t.success(i.green("\u2713 iOS credentials uploaded successfully"))}catch(n){throw o.stop("Upload failed"),n}}async function xe(a,e,r,c){let s=M();t.step(i.blue("Android Credential Setup"));let o=c.bundleId;if(!o){let d=[];try{let l=(await R.get(`/credentials/${a}`)).data.credentials||[];d=[...new Set(l.filter(f=>f.platform==="android"&&f.bundleId&&f.bundleId!=="*").map(f=>f.bundleId))]}catch{}if(d.length>0){let I=[...d.map(f=>({value:f,label:f})),{value:"__new__",label:"+ Enter a new Package Name"}],l=await O({message:"Which Package Name are you setting up credentials for?",options:I});if(v(l)&&(F("Operation cancelled"),process.exit(0)),l==="__new__"){let f=await D({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:m=>m.includes(".")?void 0:"Please enter a valid package name"});v(f)&&(F("Operation cancelled"),process.exit(0)),o=f}else o=l}else{let I=await D({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:l=>l.includes(".")?void 0:"Please enter a valid package name"});v(I)&&(F("Operation cancelled"),process.exit(0)),o=I}}try{let l=((await R.get(`/credentials/${a}`)).data.credentials||[]).find(f=>f.platform==="android"&&f.distributionType===r&&f.bundleId===o);if(l){t.warn(i.yellow(`\u26A0\uFE0F  Existing Android credentials found for ${r}`));let f=await D({message:"What would you like to do? (use/new/cancel)",validate:m=>{let S=m.toLowerCase();if(!(S==="use"||S==="new"||S==="cancel"))return"Please type: use, new, or cancel"}});if(v(f)||f.toLowerCase()==="cancel")return;if(f.toLowerCase()==="use"){t.success(i.green("\u2713 Using existing credentials."));return}await R.delete(`/credentials/${l.credentialId}?projectId=${a}`)}}catch{}let n="./android/app/my-release-key.jks";if(A.existsSync(n)){let d=await Ve({message:"Upload existing keystore?"});if(d&&!v(d)){let I=await D({message:"Key alias:",initialValue:"my-key-alias"});if(v(I))return;let l=await pe({message:"Keystore password:"});if(v(l))return;await z(a,n,"android_keystore",o,r,I,void 0,void 0,void 0,l),t.success(i.green("\u2713 Keystore uploaded"));return}}t.info(i.blue("Generating new Android keystore..."));let u=c.keyAlias||`${p.nameLower}-${We()}`,y=he(),g=`./${p.nameLower}-${e}.jks`;A.existsSync(g)&&A.unlinkSync(g),s.start("Generating keystore...");try{let d=y.replace(/'/g,"'\\''");G(`keytool -genkeypair -v -keystore "${g}" -alias "${u}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${d}' -keypass '${d}' -dname "CN=${p.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),s.stop("Keystore generated"),await z(a,g,"android_keystore",o,r,u,void 0,void 0,void 0,y),t.success(i.green("\u2713 Android credentials uploaded successfully")),t.info(i.cyan(`Key Alias: ${u}`))}catch(d){throw s.stop("Generation failed"),new Error(`Keystore generation failed: ${d.message}`)}}async function z(a,e,r,c,s,o,n,u,y,g){let d=V.basename(e);t.info(i.dim(`Uploading ${d} (Isolated process)...`));let I=new URL(import.meta.url),l=V.dirname(I.pathname),f=V.join(l,"commands","isolated-upload.js"),m=Y("node",[f,a,e,r,c,s,o||"undefined",n||"undefined",u||"undefined",y||"undefined",g||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(m.status!==0){let S=m.stderr||m.stdout||"Unknown isolated upload failure";throw t.error(i.red(`Isolated Upload Failed: ${S}`)),new Error(S)}m.stdout.includes("SUCCESS")?t.info(i.dim(`\u2713 ${d} uploaded and registered.`)):t.warn(i.yellow(`Isolated upload finished but success not confirmed: ${m.stdout}`))}async function Xe(a){let e=M(),r=a.platform,c=`./${p.configFileName}`;if(!A.existsSync(c)){t.error(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`);return}let s=JSON.parse(A.readFileSync(c,"utf-8")),{projectId:o}=s;if(!o){t.error(`${p.configFileName} is missing projectId.`);return}try{e.start("Fetching project secrets...");let u=(await R.get(`/projects/${o}/secrets/export?env=all`)).data.secrets||{};e.stop("Secrets fetched and merged."),e.start("Fetching credentials...");let g=(await R.get(`/credentials/${o}`)).data.credentials||[];e.stop(`Found ${g.length} metadata records.`);let d=g.filter(m=>m.platform===r);if(d.length===0){t.info(`No ${r} credentials found on Dashboard.`);return}let I="./credentials.json",l={};if(A.existsSync(I))try{l=JSON.parse(A.readFileSync(I,"utf-8"))}catch{t.warn("Could not parse existing credentials.json, creating a new one.")}l[r]||(l[r]={});let f=V.join(process.cwd(),"credentials",r);A.existsSync(f)||A.mkdirSync(f,{recursive:!0});for(let m of d){e.start(`Downloading ${m.type} (${m.distributionType})...`);try{let S=await R.get(`/credentials/${m.credentialId}/download?projectId=${o}`);if(S.data.status==="success"&&S.data.downloadUrl){let b=V.join(process.cwd(),"credentials",r,m.distributionType);A.existsSync(b)||A.mkdirSync(b,{recursive:!0});let T=m.s3Key?.split(".").pop()||(m.type.includes("keystore")?"jks":m.type.includes("cert")?"p12":"mobileprovision"),W=`${m.type}.${T}`,H=V.join(b,W),j=await Ae.get(S.data.downloadUrl,{responseType:"arraybuffer"});A.writeFileSync(H,Buffer.from(j.data));let _=V.join("credentials",r,m.distributionType,W);if(r==="android"){if(m.type==="android_keystore"){let $=m.distributionType==="store"?"PRODUCTION":m.distributionType==="internal"?"STAGING":"DEVELOPMENT",U=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],Q=[`KEYSTORE_PASSWORD_${$}`,`KEYSTORE_PASSWORD_${m.distributionType.toUpperCase()}`,...U.map(C=>`KEYSTORE_PASSWORD_${C}`),"ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],q=[`KEYSTORE_ALIAS_${$}`,`KEYSTORE_ALIAS_${m.distributionType.toUpperCase()}`,...U.map(C=>`KEYSTORE_ALIAS_${C}`),"KEYSTORE_ALIAS"],h=Q.map(C=>u[C]).find(C=>!!C)||"",w=q.map(C=>u[C]).find(C=>!!C)||m.meta?.alias||"";l.android.keystore={keystorePath:_,keystorePassword:h,keyAlias:w,keyPassword:h}}}else if(r==="ios"){let $=m.distributionType==="store"?"production":m.distributionType==="adhoc"?"staging":"development";l.ios[$]||(l.ios[$]={}),m.type==="ios_cert"?(l.ios[$].certificatePath=_,l.ios[$].certificatePassword=u.IOS_P12_PASSWORD||""):m.type==="ios_profile"&&(l.ios[$].provisioningProfilePath=_)}e.stop(`\u2713 ${m.type} (${m.distributionType}) saved.`)}}catch(S){let b=S.response?.data?.message||S.message;e.stop(i.dim(`- Skipped ${m.type} (${m.distributionType}): ${b}`))}}A.writeFileSync(I,JSON.stringify(l,null,2)),t.success(i.green("\u2713 Local credentials.json updated.")),Ce("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(n){e.stop(i.red("Sync failed.")),t.error(`Error: ${n.message}`)}}function he(){let a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",e="";for(let r=0;r<24;r++)e+=a.charAt(Math.floor(Math.random()*a.length));return e}function We(a=8){let e="abcdefghijklmnopqrstuvwxyz0123456789",r="";for(let c=0;c<a;c++)r+=e.charAt(Math.floor(Math.random()*e.length));return r}async function Pe(a,e,r,c){let s=c||await ge(e,a);if(!s||s.length===0)return!1;let o=await O({message:"Select a certificate to revoke:",options:[...s.map(n=>({value:`revoke:${n.id}`,label:`Revoke: ${n.name} (${n.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return v(o)||o==="cancel"?!1:o==="nuke"?(G(`fastlane match nuke ${a}`,{stdio:"inherit",cwd:process.cwd(),env:e}),!0):typeof o=="string"&&o.startsWith("revoke:")?(await Je(e,o.split(":")[1]),!0):!1}async function ge(a,e){let r=e==="development"?"development":"distribution",c=`
-lane :${p.fastlanePrefix}_list_certs do
-  require 'spaceship'
-  require 'json'
-  begin
-    Spaceship::Portal.login(ENV['FASTLANE_USER'])
-    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
-    output = Spaceship::Portal.certificate.all.select { |c|
-      if "${r}" == "development"
-        c.type_display_id.downcase.include?("development")
-      else
-        c.type_display_id.downcase.include?("distribution") || c.type_display_id.downcase.include?("production")
-      end
-    }.map { |c| { id: c.id, name: c.name, expires: c.expires.strftime('%Y-%m-%d'), type: c.type_display_id } }
-    puts "${p.jsonStartMarker}" + output.to_json + "${p.jsonEndMarker}"
-  rescue => e
-    $stderr.puts "ERROR: #{e.message}"
-    exit 1
-  end
-end`,s=V.join(ue.tmpdir(),`/tmp/${p.nameLower}-list-certs-${Date.now()}`),o=V.join(s,"fastlane"),n=V.join(o,"Fastfile");try{A.existsSync(o)||A.mkdirSync(o,{recursive:!0}),A.writeFileSync(n,c);let y=G(`fastlane ${p.fastlanePrefix}_list_certs`,{env:{...a,CI:"1",FASTLANE_FASTFILE:n},cwd:s,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${p.jsonStartMarker}(.*)${p.jsonEndMarker}`));return y?JSON.parse(y[1]):[]}finally{A.existsSync(s)&&A.rmSync(s,{recursive:!0,force:!0})}}async function Je(a,e){let r=`
-lane :${p.fastlanePrefix}_revoke_cert do
-  require 'spaceship'
-  begin
-    Spaceship::Portal.login(ENV['FASTLANE_USER'])
-    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
-    cert = Spaceship::Portal.certificate.all.find { |c| c.id == "${e}" }
-    cert.revoke! if cert
-  rescue => e
-    $stderr.puts "ERROR: #{e.message}"
-    exit 1
-  end
-end`,c=V.join(ue.tmpdir(),`/tmp/${p.nameLower}-revoke-cert-${Date.now()}`),s=V.join(c,"fastlane"),o=V.join(s,"Fastfile");try{A.existsSync(s)||A.mkdirSync(s,{recursive:!0}),A.writeFileSync(o,r),G(`fastlane ${p.fastlanePrefix}_revoke_cert`,{env:{...a,CI:"1",FASTLANE_FASTFILE:o},cwd:c,stdio:["inherit","pipe","inherit"]})}finally{A.existsSync(c)&&A.rmSync(c,{recursive:!0,force:!0})}}export{fe as a,me as b,Be as c,Xe as d};