@radhya/mach 1.4.7 → 1.4.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,25 +1,25 @@
|
|
|
1
|
-
import{a as d,g as R}from"./chunk-YZYFEHP5.js";import{log as t,spinner as z,text as H,password as de,select as O,confirm as Ce,isCancel as V,cancel as P,intro as Ze,outro as Ve,note as Ae}from"@clack/prompts";import{log as w,spinner as ee,text as x,select as ie,isCancel as F,cancel as D,note as se,confirm as Se}from"@clack/prompts";import E from"chalk";import{spawnSync as q}from"child_process";import Z from"fs";import X from"path";import oe from"os";var be="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";function ne(){let a=X.join(oe.tmpdir(),d.nameLower);Z.existsSync(a)||Z.mkdirSync(a,{recursive:!0});let e=X.join(a,"manage_asc_keys.rb");return Z.writeFileSync(e,Buffer.from(be,"base64").toString("utf-8"),{mode:493}),e}function ae(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}var ue=async a=>{let e=ee(),r=a.platform,o=`./${d.configFileName}`;if(!Z.existsSync(o)){w.error(`No ${d.configFileName} found. Run \`${d.nameLower} init\` or \`${d.nameLower} link\` first.`);return}let n=JSON.parse(Z.readFileSync(o,"utf-8")),{projectId:c}=n;if(!c){w.error(`${d.configFileName} is missing projectId.`);return}let s=a.file;if(r==="ios"&&!s){let l=await ie({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically (EAS-Style)",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F Delete an existing Key"}]});if(F(l)){D("Operation cancelled");return}if(l==="magic"){await we(c,n);return}if(l==="delete"){await ve(c,n);return}}if(!s){let l=r==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";se(`To submit to the ${r==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
|
|
1
|
+
import{a as d,g as R}from"./chunk-YZYFEHP5.js";import{log as t,spinner as z,text as O,password as ge,select as U,confirm as Ce,isCancel as V,cancel as J,intro as Ze,outro as Ve,note as Ae}from"@clack/prompts";import{log as w,spinner as ee,text as P,select as ie,isCancel as F,cancel as H,note as se,confirm as Se}from"@clack/prompts";import E from"chalk";import{spawnSync as q}from"child_process";import Z from"fs";import X from"path";import oe from"os";var be="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";function ne(){let a=X.join(oe.tmpdir(),d.nameLower);Z.existsSync(a)||Z.mkdirSync(a,{recursive:!0});let e=X.join(a,"manage_asc_keys.rb");return Z.writeFileSync(e,Buffer.from(be,"base64").toString("utf-8"),{mode:493}),e}function ae(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}var pe=async a=>{let e=ee(),r=a.platform,o=`./${d.configFileName}`;if(!Z.existsSync(o)){w.error(`No ${d.configFileName} found. Run \`${d.nameLower} init\` or \`${d.nameLower} link\` first.`);return}let n=JSON.parse(Z.readFileSync(o,"utf-8")),{projectId:c}=n;if(!c){w.error(`${d.configFileName} is missing projectId.`);return}let s=a.file;if(r==="ios"&&!s){let l=await ie({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically (EAS-Style)",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F Delete an existing Key"}]});if(F(l)){H("Operation cancelled");return}if(l==="magic"){await we(c,n);return}if(l==="delete"){await ve(c,n);return}}if(!s){let l=r==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";se(`To submit to the ${r==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
|
|
2
2
|
|
|
3
3
|
1. Open: ${E.cyan(l)}
|
|
4
4
|
`+(r==="ios"?`2. Generate an "App Store Connect API Key" with ${E.bold("Admin")} role.
|
|
5
5
|
3. Download the ${E.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${E.bold("JSON")} key.
|
|
6
|
-
3. Download the ${E.bold(".json")} file.`),"Guided Setup"),e.start("Scanning for downloaded keys...");let
|
|
7
|
-
`).forEach(p=>{p.trim()&&w.info(E.dim(`[Ruby] ${p.trim()}`))}),u.status!==0){r.stop("Failed"),w.error(`Magic creation failed: ${l}`);return}let
|
|
6
|
+
3. Download the ${E.bold(".json")} file.`),"Guided Setup"),e.start("Scanning for downloaded keys...");let f=Re(r);if(e.stop(f.length>0?`Detected ${f.length} potential key(s)`:"No keys detected automatically"),f.length>0){let y=await ie({message:"Found these potential keys. Use one of them?",options:[...f.map(g=>({value:g.path,label:`${X.basename(g.path)} (${g.location})`})),{value:"manual",label:"Enter path manually..."}]});if(F(y)){H("Operation cancelled");return}y!=="manual"&&(s=y)}if(!s){let y=await P({message:`Paste the path to your ${r==="ios"?".p8":".json"} file:`,validate:g=>Z.existsSync(g)?void 0:"File not found"});if(F(y)){H("Operation cancelled");return}s=y}}let u=a.issuerId,m=a.keyId;if(r==="ios"){if(!m&&s){let l=X.basename(s).match(/AuthKey_(.*)\.p8/);l&&(m=l[1],w.info(`Auto-detected Key ID from filename: ${E.green(m)}`))}if(!u){let l=await P({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:f=>f.length>0?void 0:"Issuer ID is required"});if(F(l)){H("Operation cancelled");return}u=l}if(!m){let l=await P({message:"Enter App Store Connect Key ID:",validate:f=>f.length>0?void 0:"Key ID is required"});if(F(l)){H("Operation cancelled");return}m=l}}await re(c,s,r,u,m)};async function we(a,e){let r=ee(),o=e.submit?.production?.ios?.appleId,n=e.submit?.production?.ios?.appleTeamId;if(!o){let u=await P({message:"Apple ID:",placeholder:"your-email@example.com"});if(F(u))return;o=u,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=o,Z.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}if(!n){let u=await P({message:"Apple Team ID:",placeholder:"e.g. 4523G95823"});if(F(u))return;n=u,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=n,Z.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}let c=await P({message:"Enter a name for the new API Key:",initialValue:`[${d.name}] Project ${a}`});if(F(c))return;r.start("Authenticating with Apple and creating API Key...");let s=ne();if(!Z.existsSync(s)){w.error(`Magic Error: Helper script not found at ${s}`);return}try{let u=q("ruby",[s,"create",c],{env:{...ae(),FASTLANE_USER:o,FASTLANE_TEAM_ID:n},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),m=u.stdout||"",l=u.stderr||"";if(l&&(l.includes("DEBUG:")||l.includes("ERROR:"))&&l.split(`
|
|
7
|
+
`).forEach(p=>{p.trim()&&w.info(E.dim(`[Ruby] ${p.trim()}`))}),u.status!==0){r.stop("Failed"),w.error(`Magic creation failed: ${l}`);return}let f=m.match(new RegExp(`${d.jsonStartMarker}(.*)${d.jsonEndMarker}`));if(!f){r.stop("Parse Error"),w.error("Could not parse response from Apple Portal.");return}let y=JSON.parse(f[1]),{id:g,issuerId:S,keyContent:I}=y;if(r.stop("Key Created Successfully"),w.success(`\u2713 Created Key ID: ${E.green(g)}`),!S){se(`Your Issuer ID is shown at the top of:
|
|
8
8
|
${E.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
|
|
9
9
|
|
|
10
|
-
It looks like: ${E.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let p=await
|
|
10
|
+
It looks like: ${E.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let p=await P({message:"Enter your App Store Connect Issuer ID:",validate:N=>N.trim().length>0?void 0:"Issuer ID is required"});if(F(p)){H("Operation cancelled.");return}S=p.trim()}if(I){let p=X.join(oe.tmpdir(),`AuthKey_${g}.p8`);Z.writeFileSync(p,I),await re(a,p,"ios",S,g),Z.unlinkSync(p)}else{w.warn(E.yellow("\u26A0\uFE0F Apple did not return the private key in the response.")),se(`Download the .p8 file manually:
|
|
11
11
|
|
|
12
12
|
1. Open: ${E.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
|
|
13
13
|
2. Find Key ID: ${E.green(g)}
|
|
14
14
|
3. Click ${E.bold("Download API Key")} (only available once)
|
|
15
|
-
4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let p=await x({message:"Path to the downloaded .p8 file (drag & drop here):",validate:N=>Z.existsSync(N)?void 0:"File not found"});if(F(p)){D("Operation cancelled. Credential ID was registered but key content is missing.");return}await re(a,p,"ios",S,g)}}catch(u){r.stop("Error"),w.error(`Error: ${u.message}`)}}async function ve(a,e){let r=ee(),o=e.submit?.production?.ios?.appleId,n=e.submit?.production?.ios?.appleTeamId;if(!o){let s=await x({message:"Apple ID:"});if(F(s))return;o=s,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=o,Z.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}if(!n){let s=await x({message:"Apple Team ID:"});if(F(s))return;n=s,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=n,Z.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}r.start("Fetching existing API Keys...");let c=ne();if(!Z.existsSync(c)){w.error(`Magic Error: Helper script not found at ${c}`);return}try{let s=q("ruby",[c,"list"],{env:{...ae(),FASTLANE_USER:o,FASTLANE_TEAM_ID:n},stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(s.status!==0){r.stop("Failed"),w.error(`Listing failed: ${s.stderr}`);return}let u=s.stdout.match(new RegExp(`${d.jsonStartMarker}(.*)${d.jsonEndMarker}`));if(!u){r.stop("Parse Error");return}let f=JSON.parse(u[1]);if(r.stop(`Found ${f.length} keys`),f.length===0){w.info("No API Keys found on this team.");return}let l=await ie({message:"Select a key to delete from Apple Developer Portal:",options:[...f.map(g=>({value:g.id,label:`ID: ${g.id} - ${g.name} (${g.role})`})),{value:"cancel",label:"Cancel"}]});if(F(l)||l==="cancel")return;let C=await Se({message:`Are you sure you want to delete Key ${l}? This cannot be undone.`});if(!C||F(C))return;r.start(`Deleting Key ${l}...`);let y=q("ruby",[ne(),"delete",l],{env:{...ae(),FASTLANE_USER:o,FASTLANE_TEAM_ID:n},stdio:"pipe",encoding:"utf-8"});y.status===0?(r.stop("Deleted"),w.success(`\u2713 Key ${l} has been removed from Apple Portal.`)):(r.stop("Deletion Failed"),w.error(`Error: ${y.stderr}`))}catch(s){r.stop("Error"),w.error(`Error: ${s.message}`)}}async function re(a,e,r,o,n){let c=ee();c.start(`Uploading Service Credentials for ${r}...`);try{let s=r==="ios"?"asc_api_key":"google_service_account",u=new URL(import.meta.url),f=X.dirname(u.pathname),l=[X.join(f,"isolated-upload.js"),X.join(f,"commands","isolated-upload.js"),X.resolve(f,"../commands/isolated-upload.js"),X.resolve(process.cwd(),`node_modules/.bin/${d.nameLower}-upload`)],C="";for(let g of l)if(Z.existsSync(g)){C=g;break}if(!C)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let y=q("node",[C,a,e,s,"*","service","undefined","undefined",o||"undefined",n||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(y.status!==0){let g=y.stderr||y.stdout||"Unknown upload failure";c.stop("Upload Failed"),w.error(E.red(`Upload Failed: ${g}`));return}y.stdout.includes("SUCCESS")?(c.stop("Upload Success"),w.success(E.green(`\u2713 Service Credentials for ${r} uploaded successfully.`))):(c.stop("Upload Summary"),w.warn(E.yellow(`Upload finished but success not confirmed: ${y.stdout}`)))}catch(s){c.stop("Upload Error"),w.error(E.red(`Error: ${s.message}`))}}function Re(a){let e=a==="ios"?".p8":".json",r=[],o=[{path:"./",label:"Project Root"},{path:X.join(oe.homedir(),"Downloads"),label:"Downloads"}];for(let n of o)if(Z.existsSync(n.path))try{let c=Z.readdirSync(n.path);for(let s of c)if(s.endsWith(e)){if(a==="android"&&!Z.readFileSync(X.join(n.path,s),"utf8").includes("service_account")||a==="ios"&&!s.startsWith("AuthKey"))continue;r.push({path:X.join(n.path,s),location:n.label})}}catch{}return r}import ye from"axios";import i from"chalk";import{execSync as W,spawnSync as Y}from"child_process";import pe from"crypto";import m from"fs";import v from"path";import ge from"os";ye.defaults.proxy=!1;function ce(a,e){if(!m.existsSync(a))return;let r=m.readdirSync(a);for(let o of r){let n=v.join(a,o);if(m.statSync(n).isDirectory()){let s=ce(n,e);if(s)return s}else if(e.test(o))return n}}var Ie=async a=>{Ze(i.bgCyan.black(d.cliTag("Credentials")));let e=await O({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});V(e)&&(P("Operation cancelled"),process.exit(0));let r=await O({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(o=>!(e==="android"&&(o.value==="service"&&(o.label="Google Service Account (JSON)"),o.value==="push")))});if((V(r)||r==="exit")&&(P("Operation cancelled"),process.exit(0)),r==="back")return Ie(a);if(r==="setup")await Ee({...a,platform:e});else if(r==="download")await Fe({...a,platform:e});else if(r==="service")await ue({platform:e});else if(r==="push")return Ae("Push Notifications management is coming soon!","Coming Soon"),Ie(a);Ve(i.green("Done!"))},Ee=async a=>{let e=z(),r=a.platform,o=a.profile;if(!o){let u=await O({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});V(u)&&(P("Operation cancelled"),process.exit(0)),o=u}let n=`./${d.configFileName}`;if(!m.existsSync(n)){t.error(`No ${d.configFileName} found. Run \`${d.nameLower} init\` or \`${d.nameLower} link\` first.`);return}let c=JSON.parse(m.readFileSync(n,"utf-8")),{projectId:s}=c;if(!s){t.error(`${d.configFileName} is missing projectId.`);return}a.awsProfile&&t.warn(i.yellow(`Ignoring --aws-profile. Authenticating with ${d.name} Cloud...`)),t.info(i.dim(`Setting up credentials for: ${o}`)),r==="ios"?await Ne(s,o,a,c):await Be(s,o,o==="production"?"store":"internal",a)};async function Ne(a,e,r,o){let n=r.bundleId||o.submit?.production?.ios?.bundleId||o.ios?.bundleId;if(!n){let f=await H({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:C=>C.includes(".")?void 0:"Please enter a valid Bundle ID"});V(f)&&(P("Operation cancelled"),process.exit(0)),n=f;let l=await Ce({message:`Save this Bundle ID to ${d.configFileName} for future use?`,initialValue:!0});l&&!V(l)&&(o.submit||(o.submit={production:{ios:{}}}),o.submit.production||(o.submit.production={ios:{}}),o.submit.production.ios||(o.submit.production.ios={}),o.submit.production.ios.bundleId=n,m.writeFileSync(`./${d.configFileName}`,JSON.stringify(o,null,2)),t.success(i.green("\u2713 Bundle ID saved to config")))}t.info(i.dim(`Bundle ID: ${n}`));let c=e==="production"?"store":e==="staging"?"adhoc":"development",s=o.submit?.production?.ios?.appleId;s&&t.info(i.dim(`Using Apple ID from config: ${s}`)),await ke(a,n,e,c,c==="store"?"appstore":c==="adhoc"?"adhoc":"development",r,o,s)}async function Ge(a){let e="MATCH_ENCRYPTION_PASSPHRASE";try{let s=((await R.get(`/projects/${a}/secrets/export?env=development`)).data.secrets||{})[e];if(s&&!s.includes("[Decryption Failed]"))return t.info(i.dim("Using existing encryption passphrase from Dashboard")),t.info(i.cyan(`MATCH_PASSWORD: ${s}`)),s;if(s&&s.includes("[Decryption Failed]")){t.warn(i.yellow("\u26A0\uFE0F Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),t.info(i.dim("Generating a fresh passphrase and cleaning old certificates..."));let u=pe.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:u,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await R.post("/credentials/clean-match-storage",{projectId:a}),t.success(i.green("\u2713 Cleaned old certificates from storage"))}catch{}return u}}catch(n){t.info(i.dim(`Could not fetch existing passphrase from Dashboard: ${n.message}`))}let r=await O({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((V(r)||r==="cancel")&&(P("Operation cancelled"),process.exit(0)),r==="enter"){let n=await de({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:s=>s.length>0?void 0:"Passphrase is required"});V(n)&&(P("Operation cancelled"),process.exit(0));let c=n;try{await R.post(`/projects/${a}/secrets`,{key:e,value:c,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),t.success(i.green("\u2713 Saved passphrase to Dashboard"))}catch{}return c}let o=pe.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 Generated and saved encryption passphrase to Dashboard")),t.info(i.cyan(`MATCH_PASSWORD: ${o}`))}catch(n){t.warn(i.yellow(`Could not save passphrase to Dashboard: ${n.message}`))}return o}async function ke(a,e,r,o,n,c,s,u){let f=z();if(t.info(i.blue("Configuring iOS certificate management...")),!u){let l=await H({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:C=>C.includes("@")?void 0:"Please enter a valid email"});V(l)&&(P("Operation cancelled"),process.exit(0)),u=l,s.submit||(s.submit={production:{ios:{}}}),s.submit.production||(s.submit.production={ios:{}}),s.submit.production.ios||(s.submit.production.ios={}),s.submit.production.ios.appleId=u,m.writeFileSync(`./${d.configFileName}`,JSON.stringify(s,null,2)),t.success(i.green("\u2713 Apple ID saved to config"))}f.start(`Fetching ${n} certificates...`);try{let l=await Ge(a),C="",y="";try{let p=await R.post("/credentials/build-server-token",{projectId:a});p.data.status==="success"&&p.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=p.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=p.data.credentials.secretAccessKey,p.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=p.data.credentials.sessionToken),y=p.data.credentials.region||"ap-south-1",C=p.data.credentials.bucket||d.bucketPrefix,process.env.AWS_REGION=y,delete process.env.AWS_PROFILE)}catch(p){throw t.error(`Failed to authenticate with ${d.name} Cloud.`),p}if(!C||!y){t.error(`Failed to resolve S3 configuration from ${d.name} Cloud.`);return}let g=c.teamId||s.submit?.production?.ios?.appleTeamId;if(!g)try{let N=(await R.get(`/projects/${a}/secrets`)).data.secrets?.find(J=>J.key==="APPLE_TEAM_ID");N&&(g=N.value,t.info(i.dim(`Using Team ID from Dashboard: ${g}`)))}catch{}if(g&&g===s.submit?.production?.ios?.appleTeamId&&t.info(i.dim(`Using Apple Team ID from config: ${g}`)),!g){t.warn(i.yellow(`
|
|
16
|
-
Apple Team ID is required to fetch certificates.`)),t.info(i.dim("You can find this at: https://developer.apple.com/account -> Membership Details"));let p=await
|
|
17
|
-
`).map($=>$.trim()).filter($=>$.length>0),N].join(" ");W(`security list-keychains -d user -s ${A}`)}}catch(h){t.warn(i.dim("Keychain setup warning (non-critical): "+h.message))}let
|
|
18
|
-
\u26A0\uFE0F Force flag detected: Hard resetting ${n} certificates...`)),t.info(i.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),t.info(i.cyan(`Current MATCH_PASSWORD: ${l}`)),t.info(i.dim(`Cleaning match storage for Team ID: ${g}...`));try{(await R.post("/credentials/clean-match-storage",{projectId:a,teamId:g})).data.status==="success"&&t.success(i.green(`\u2713 Cleared S3 storage for Team ID: ${g}`))}catch(h){t.warn(i.yellow(`S3 cleanup via API failed: ${h.message}`)),t.info(i.dim("Continuing to attempt standard nuke..."))}try{W(`fastlane match nuke ${n} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:
|
|
19
|
-
Certificate sync failed. Attempting to create App ID and retry...`));try{W(`fastlane produce --app_identifier "${e}" --app_name "${e}" --skip_itc`,{stdio:"inherit",env:
|
|
20
|
-
Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),t.info(i.cyan(`Failed MATCH_PASSWORD was: ${l}`));let b=await
|
|
21
|
-
You are overriding the dashboard passphrase for this session.`));let A=await
|
|
22
|
-
Manual Upload Mode`)),t.info("Please provide your certificate and provisioning profile:");let o=await
|
|
15
|
+
4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let p=await P({message:"Path to the downloaded .p8 file (drag & drop here):",validate:N=>Z.existsSync(N)?void 0:"File not found"});if(F(p)){H("Operation cancelled. Credential ID was registered but key content is missing.");return}await re(a,p,"ios",S,g)}}catch(u){r.stop("Error"),w.error(`Error: ${u.message}`)}}async function ve(a,e){let r=ee(),o=e.submit?.production?.ios?.appleId,n=e.submit?.production?.ios?.appleTeamId;if(!o){let s=await P({message:"Apple ID:"});if(F(s))return;o=s,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=o,Z.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}if(!n){let s=await P({message:"Apple Team ID:"});if(F(s))return;n=s,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=n,Z.writeFileSync(`./${d.configFileName}`,JSON.stringify(e,null,2))}r.start("Fetching existing API Keys...");let c=ne();if(!Z.existsSync(c)){w.error(`Magic Error: Helper script not found at ${c}`);return}try{let s=q("ruby",[c,"list"],{env:{...ae(),FASTLANE_USER:o,FASTLANE_TEAM_ID:n},stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(s.status!==0){r.stop("Failed"),w.error(`Listing failed: ${s.stderr}`);return}let u=s.stdout.match(new RegExp(`${d.jsonStartMarker}(.*)${d.jsonEndMarker}`));if(!u){r.stop("Parse Error");return}let m=JSON.parse(u[1]);if(r.stop(`Found ${m.length} keys`),m.length===0){w.info("No API Keys found on this team.");return}let l=await ie({message:"Select a key to delete from Apple Developer Portal:",options:[...m.map(g=>({value:g.id,label:`ID: ${g.id} - ${g.name} (${g.role})`})),{value:"cancel",label:"Cancel"}]});if(F(l)||l==="cancel")return;let f=await Se({message:`Are you sure you want to delete Key ${l}? This cannot be undone.`});if(!f||F(f))return;r.start(`Deleting Key ${l}...`);let y=q("ruby",[ne(),"delete",l],{env:{...ae(),FASTLANE_USER:o,FASTLANE_TEAM_ID:n},stdio:"pipe",encoding:"utf-8"});y.status===0?(r.stop("Deleted"),w.success(`\u2713 Key ${l} has been removed from Apple Portal.`)):(r.stop("Deletion Failed"),w.error(`Error: ${y.stderr}`))}catch(s){r.stop("Error"),w.error(`Error: ${s.message}`)}}async function re(a,e,r,o,n){let c=ee();c.start(`Uploading Service Credentials for ${r}...`);try{let s=r==="ios"?"asc_api_key":"google_service_account",u=new URL(import.meta.url),m=X.dirname(u.pathname),l=[X.join(m,"isolated-upload.js"),X.join(m,"commands","isolated-upload.js"),X.resolve(m,"../commands/isolated-upload.js"),X.resolve(process.cwd(),`node_modules/.bin/${d.nameLower}-upload`)],f="";for(let g of l)if(Z.existsSync(g)){f=g;break}if(!f)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let y=q("node",[f,a,e,s,"*","service","undefined","undefined",o||"undefined",n||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(y.status!==0){let g=y.stderr||y.stdout||"Unknown upload failure";c.stop("Upload Failed"),w.error(E.red(`Upload Failed: ${g}`));return}y.stdout.includes("SUCCESS")?(c.stop("Upload Success"),w.success(E.green(`\u2713 Service Credentials for ${r} uploaded successfully.`))):(c.stop("Upload Summary"),w.warn(E.yellow(`Upload finished but success not confirmed: ${y.stdout}`)))}catch(s){c.stop("Upload Error"),w.error(E.red(`Error: ${s.message}`))}}function Re(a){let e=a==="ios"?".p8":".json",r=[],o=[{path:"./",label:"Project Root"},{path:X.join(oe.homedir(),"Downloads"),label:"Downloads"}];for(let n of o)if(Z.existsSync(n.path))try{let c=Z.readdirSync(n.path);for(let s of c)if(s.endsWith(e)){if(a==="android"&&!Z.readFileSync(X.join(n.path,s),"utf8").includes("service_account")||a==="ios"&&!s.startsWith("AuthKey"))continue;r.push({path:X.join(n.path,s),location:n.label})}}catch{}return r}import ye from"axios";import i from"chalk";import{execSync as W,spawnSync as Y}from"child_process";import ce from"crypto";import C from"fs";import v from"path";import ue from"os";ye.defaults.proxy=!1;function le(a,e){if(!C.existsSync(a))return;let r=C.readdirSync(a);for(let o of r){let n=v.join(a,o);if(C.statSync(n).isDirectory()){let s=le(n,e);if(s)return s}else if(e.test(o))return n}}function Ee(a,e,r){let o=C.readFileSync(r,"utf8"),n=Math.floor(Date.now()/1e3),c=Buffer.from(JSON.stringify({alg:"ES256",kid:a,typ:"JWT"})).toString("base64url"),s=Buffer.from(JSON.stringify({iss:e,iat:n,exp:n+1200,aud:"appstoreconnect-v1"})).toString("base64url"),u=`${c}.${s}`,m=ce.createSign("SHA256");m.update(u);let l=m.sign({key:o,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${u}.${l}`}async function Ne(a,e,r,o){let n=Ee(e,r,o),c=(await import("axios")).default;for(let s of a)try{await c.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:s.name,udid:s.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${n}`,"Content-Type":"application/json"}}),t.info(i.dim(` \u2713 Registered: ${s.name}`))}catch(u){let m=u.response?.data?.errors;m?.some(f=>f.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||f.detail?.toLowerCase().includes("already registered")||f.detail?.toLowerCase().includes("already exists"))?t.info(i.dim(` Already on Portal: ${s.name}`)):t.warn(i.yellow(` Could not register ${s.name}: ${m?.[0]?.detail||u.message}`))}}var me=async a=>{Ze(i.bgCyan.black(d.cliTag("Credentials")));let e=await U({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});V(e)&&(J("Operation cancelled"),process.exit(0));let r=await U({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(o=>!(e==="android"&&(o.value==="service"&&(o.label="Google Service Account (JSON)"),o.value==="push")))});if((V(r)||r==="exit")&&(J("Operation cancelled"),process.exit(0)),r==="back")return me(a);if(r==="setup")await Ge({...a,platform:e});else if(r==="download")await We({...a,platform:e});else if(r==="service")await pe({platform:e});else if(r==="push")return Ae("Push Notifications management is coming soon!","Coming Soon"),me(a);Ve(i.green("Done!"))},Ge=async a=>{let e=z(),r=a.platform,o=a.profile;if(!o){let u=await U({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});V(u)&&(J("Operation cancelled"),process.exit(0)),o=u}let n=`./${d.configFileName}`;if(!C.existsSync(n)){t.error(`No ${d.configFileName} found. Run \`${d.nameLower} init\` or \`${d.nameLower} link\` first.`);return}let c=JSON.parse(C.readFileSync(n,"utf-8")),{projectId:s}=c;if(!s){t.error(`${d.configFileName} is missing projectId.`);return}a.awsProfile&&t.warn(i.yellow(`Ignoring --aws-profile. Authenticating with ${d.name} Cloud...`)),t.info(i.dim(`Setting up credentials for: ${o}`)),r==="ios"?await ke(s,o,a,c):await Xe(s,o,o==="production"?"store":"internal",a)};async function ke(a,e,r,o){let n=r.bundleId||o.submit?.production?.ios?.bundleId||o.ios?.bundleId;if(!n){let m=await O({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:f=>f.includes(".")?void 0:"Please enter a valid Bundle ID"});V(m)&&(J("Operation cancelled"),process.exit(0)),n=m;let l=await Ce({message:`Save this Bundle ID to ${d.configFileName} for future use?`,initialValue:!0});l&&!V(l)&&(o.submit||(o.submit={production:{ios:{}}}),o.submit.production||(o.submit.production={ios:{}}),o.submit.production.ios||(o.submit.production.ios={}),o.submit.production.ios.bundleId=n,C.writeFileSync(`./${d.configFileName}`,JSON.stringify(o,null,2)),t.success(i.green("\u2713 Bundle ID saved to config")))}t.info(i.dim(`Bundle ID: ${n}`));let c=e==="production"?"store":e==="staging"?"adhoc":"development",s=o.submit?.production?.ios?.appleId;s&&t.info(i.dim(`Using Apple ID from config: ${s}`)),await Fe(a,n,e,c,c==="store"?"appstore":c==="adhoc"?"adhoc":"development",r,o,s)}async function Be(a){let e="MATCH_ENCRYPTION_PASSPHRASE";try{let s=((await R.get(`/projects/${a}/secrets/export?env=development`)).data.secrets||{})[e];if(s&&!s.includes("[Decryption Failed]"))return t.info(i.dim("Using existing encryption passphrase from Dashboard")),t.info(i.cyan(`MATCH_PASSWORD: ${s}`)),s;if(s&&s.includes("[Decryption Failed]")){t.warn(i.yellow("\u26A0\uFE0F Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),t.info(i.dim("Generating a fresh passphrase and cleaning old certificates..."));let u=ce.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:u,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await R.post("/credentials/clean-match-storage",{projectId:a}),t.success(i.green("\u2713 Cleaned old certificates from storage"))}catch{}return u}}catch(n){t.info(i.dim(`Could not fetch existing passphrase from Dashboard: ${n.message}`))}let r=await U({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((V(r)||r==="cancel")&&(J("Operation cancelled"),process.exit(0)),r==="enter"){let n=await ge({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:s=>s.length>0?void 0:"Passphrase is required"});V(n)&&(J("Operation cancelled"),process.exit(0));let c=n;try{await R.post(`/projects/${a}/secrets`,{key:e,value:c,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),t.success(i.green("\u2713 Saved passphrase to Dashboard"))}catch{}return c}let o=ce.randomBytes(32).toString("base64");try{await R.post(`/projects/${a}/secrets`,{key:e,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 Generated and saved encryption passphrase to Dashboard")),t.info(i.cyan(`MATCH_PASSWORD: ${o}`))}catch(n){t.warn(i.yellow(`Could not save passphrase to Dashboard: ${n.message}`))}return o}async function Fe(a,e,r,o,n,c,s,u){let m=z();if(t.info(i.blue("Configuring iOS certificate management...")),!u){let l=await O({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:f=>f.includes("@")?void 0:"Please enter a valid email"});V(l)&&(J("Operation cancelled"),process.exit(0)),u=l,s.submit||(s.submit={production:{ios:{}}}),s.submit.production||(s.submit.production={ios:{}}),s.submit.production.ios||(s.submit.production.ios={}),s.submit.production.ios.appleId=u,C.writeFileSync(`./${d.configFileName}`,JSON.stringify(s,null,2)),t.success(i.green("\u2713 Apple ID saved to config"))}m.start(`Fetching ${n} certificates...`);try{let l=await Be(a),f="",y="";try{let p=await R.post("/credentials/build-server-token",{projectId:a});p.data.status==="success"&&p.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=p.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=p.data.credentials.secretAccessKey,p.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=p.data.credentials.sessionToken),y=p.data.credentials.region||"ap-south-1",f=p.data.credentials.bucket||d.bucketPrefix,process.env.AWS_REGION=y,delete process.env.AWS_PROFILE)}catch(p){throw t.error(`Failed to authenticate with ${d.name} Cloud.`),p}if(!f||!y){t.error(`Failed to resolve S3 configuration from ${d.name} Cloud.`);return}let g=c.teamId||s.submit?.production?.ios?.appleTeamId;if(!g)try{let N=(await R.get(`/projects/${a}/secrets`)).data.secrets?.find(x=>x.key==="APPLE_TEAM_ID");N&&(g=N.value,t.info(i.dim(`Using Team ID from Dashboard: ${g}`)))}catch{}if(g&&g===s.submit?.production?.ios?.appleTeamId&&t.info(i.dim(`Using Apple Team ID from config: ${g}`)),!g){t.warn(i.yellow(`
|
|
16
|
+
Apple Team ID is required to fetch certificates.`)),t.info(i.dim("You can find this at: https://developer.apple.com/account -> Membership Details"));let p=await O({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. 4523G95823",validate:N=>N.length===10?void 0:"Team ID must be exactly 10 characters"});V(p)&&(J("Operation cancelled"),process.exit(0)),g=p,await fe(a,g)}m.stop("Starting certificate sync...");let S=d.credentialsKeychain,I=d.keychainPassword;try{let N=`${process.env.HOME||"/Users/"+(process.env.USER||d.nameLower)}/Library/Keychains/${S}`;t.info(i.dim(`Ensuring keychain exists: ${S}`));try{W(`security create-keychain -p ${I} ${S} 2>/dev/null || true`),W(`security unlock-keychain -p ${I} ${S}`),W(`security set-keychain-settings ${S}`);let h=W("security list-keychains -d user").toString();if(!h.includes(S)){t.info(i.dim(`Adding ${S} to search list`));let A=[...h.replace(/"/g,"").split(`
|
|
17
|
+
`).map($=>$.trim()).filter($=>$.length>0),N].join(" ");W(`security list-keychains -d user -s ${A}`)}}catch(h){t.warn(i.dim("Keychain setup warning (non-critical): "+h.message))}let x,T,D;try{let b=((await R.get(`/credentials/${a}`)).data.credentials||[]).find(A=>A.type==="asc_api_key"&&A.issuerId);if(b){let A=await R.get(`/credentials/${b.credentialId}/download`,{params:{projectId:a}});if(A.data.downloadUrl){let G=await(await import("axios")).default.get(A.data.downloadUrl,{responseType:"arraybuffer"}),_=v.join(ue.tmpdir(),`mach-asc-${Date.now()}`);C.mkdirSync(_,{recursive:!0}),x=v.join(_,`AuthKey_${b.keyId}.p8`),C.writeFileSync(x,Buffer.from(G.data)),T=b.keyId,D=b.issuerId,t.success(i.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(h){t.warn(i.dim(`Could not load ASC API key: ${h.message}. Will fall back to Apple ID auth.`))}t.info(i.dim("Generating secure P12 export password..."));let M=he();t.success(i.green("\u2713 Secure P12 password generated."));let k={...process.env,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:l,FASTLANE_USER:u,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:g,MATCH_KEYCHAIN_NAME:S,MATCH_KEYCHAIN_PASSWORD:I,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",MATCH_OUTPUT_PATH:v.join(process.cwd(),"temp_match"),MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:y,MATCH_S3_BUCKET:f,MATCH_S3_OBJECT_PREFIX:"ios-certificates/",MATCH_USERNAME:u,MATCH_APP_IDENTIFIER:e,MATCH_TYPE:n,[`${d.envPrefix}P12_PASSWORD`]:M,...x&&T&&D?{APP_STORE_CONNECT_API_KEY_KEY_ID:T,APP_STORE_CONNECT_API_KEY_ISSUER_ID:D,APP_STORE_CONNECT_API_KEY_KEY_FILEPATH:x,FASTLANE_SKIP_2FA:"1"}:{}};if(c.force){t.warn(i.yellow(`
|
|
18
|
+
\u26A0\uFE0F Force flag detected: Hard resetting ${n} certificates...`)),t.info(i.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),t.info(i.cyan(`Current MATCH_PASSWORD: ${l}`)),t.info(i.dim(`Cleaning match storage for Team ID: ${g}...`));try{(await R.post("/credentials/clean-match-storage",{projectId:a,teamId:g})).data.status==="success"&&t.success(i.green(`\u2713 Cleared S3 storage for Team ID: ${g}`))}catch(h){t.warn(i.yellow(`S3 cleanup via API failed: ${h.message}`)),t.info(i.dim("Continuing to attempt standard nuke..."))}try{W(`fastlane match nuke ${n} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:k}),t.success(i.green(`\u2713 Nuked existing ${n} credentials`))}catch{t.warn(i.yellow("Standard nuke failed (likely due to password mismatch).")),t.info(i.dim("Since S3 was cleared manually, proceeding to generation..."))}}if(n==="adhoc"||n==="development")try{t.info(i.blue("Fetching registered devices..."));let b=(await R.get("/devices")).data.devices||[];if(b.length===0)t.warn(i.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),t.info(i.dim(`Register devices with: ${d.nameLower} device register`));else{let{multiselect:A}=await import("@clack/prompts"),$=await A({message:`Select devices to include in the ${n} profile:`,options:b.map(G=>({value:G.udid,label:`${G.name} (${G.udid.substring(0,12)}...)`,hint:G.model||G.platform})),initialValues:b.map(G=>G.udid)});if(!V($)&&$.length>0){let G=b.filter(_=>$.includes(_.udid));if(t.info(i.blue(`Registering ${G.length} device(s) on Apple Developer Portal...`)),x&&T&&D)await Ne(G,T,D,x);else{t.warn(i.yellow("No ASC API key available \u2014 falling back to fastlane (may require 2FA).")),t.info(i.dim("You may be prompted for a 2FA code \u2014 type it and press Enter."));for(let _ of G)try{W(`fastlane run register_device name:"${_.name}" udid:"${_.udid}"`,{env:k,stdio:"inherit",cwd:process.cwd()}),t.info(i.dim(` \u2713 Registered: ${_.name}`))}catch(te){!te.stdout?.includes("already exists")&&!te.stderr?.includes("already exists")?t.warn(i.yellow(` Could not register ${_.name}: ${te.message}`)):t.info(i.dim(` Already on Portal: ${_.name}`))}}t.info(i.green("\u2713 Device registration complete."))}}}catch(h){t.warn(i.yellow(`Could not fetch registered devices: ${h.message}`)),t.info(i.dim("Continuing without explicit device registration."))}try{let h=Y(`fastlane match ${n} --app_identifier "${e}" --profile_name "${d.nameLower} ${n} ${e}"`,{shell:!0,cwd:process.cwd(),env:k,stdio:"inherit",encoding:"utf-8"});if(h.status!==0){t.warn(i.yellow(`
|
|
19
|
+
Certificate sync failed. Attempting to create App ID and retry...`));try{W(`fastlane produce --app_identifier "${e}" --app_name "${e}" --skip_itc`,{stdio:"inherit",env:k}),t.success(i.green("\u2713 App ID created successfully")),t.info(i.blue("Retrying certificate sync...")),h=Y(`fastlane match ${n} --app_identifier "${e}" --profile_name "${d.nameLower} ${n} ${e}"`,{shell:!0,cwd:process.cwd(),env:k,stdio:"inherit",encoding:"utf-8"})}catch{}if(h.status!==0)throw new Error("fastlane match failed")}}catch(h){t.warn(i.yellow(`
|
|
20
|
+
Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),t.info(i.cyan(`Failed MATCH_PASSWORD was: ${l}`));let b=await U({message:"What would you like to do?",options:[{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal (Resolve certificate limits)",hint:"See if you have too many certificates"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(V(b)||b==="cancel")throw h;if(b==="retry_password"){t.info(i.dim(`
|
|
21
|
+
You are overriding the dashboard passphrase for this session.`));let A=await ge({message:"Enter the correct MATCH_PASSWORD for this project:"});if(A&&!V(A)){l=A,t.info(i.blue("Retrying with provided passphrase...")),t.info(i.cyan(`New MATCH_PASSWORD: ${l}`));let $={...k,MATCH_PASSWORD:l};if(Y(`fastlane match ${n}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:$}).status===0)await R.post(`/projects/${a}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:l,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),t.success(i.green("\u2713 Dashboard passphrase updated.")),t.info(i.cyan(`MATCH_PASSWORD: ${l}`));else throw new Error("Sync failed again with provided passphrase.")}else throw h}else if(b==="check_portal")try{let A=await de(k,n);if(A.length>0){if(t.info(i.dim(`Found ${A.length} existing ${n} certificates on the portal.`)),await xe(n,k,a,A)&&(t.info(i.blue("Retrying certificate sync...")),Y(`fastlane match ${n}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:k}).status!==0))throw new Error("Retry failed")}else throw t.error(i.red("No existing certificates found on portal to resolve.")),h}catch(A){throw t.warn(i.dim(`Portal check warning: ${A.message}`)),h}else throw h}t.success(i.green("\u2713 Certificates fetched and synced"));let B=v.join(process.cwd(),"temp_match"),K=v.join(B,`${d.fastlanePrefix}_export.p12`),j=le(B,/\.mobileprovision$/);try{let b=`${process.env.HOME||"/Users/"+(process.env.USER||d.nameLower)}/Library/Keychains/${S}`;C.existsSync(B)||C.mkdirSync(B,{recursive:!0}),t.info(i.dim("Exporting certificate from keychain for dashboard upload...")),W(`security export -k ${b} -t identities -f pkcs12 -o ${K} -P ""`,{stdio:"ignore"})}catch{t.warn(i.dim("Could not export certificate from keychain."))}c.teamId&&!g&&await fe(a,c.teamId);let Q=C.existsSync(K)?K:le(B,/\.p12$/);if(Q&&j){let h,b;try{let A=await de(k,n);A.length>0&&(h=A[0].expires,b=A[0].id)}catch{t.warn(i.dim("Could not fetch expiration date or ID for dashboard record."))}await L(a,Q,"ios_cert",e,o,void 0,h,c.teamId||g,b,M),await L(a,j,"ios_profile",e,o,void 0,h,c.teamId||g),t.success(i.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"));try{C.existsSync("./temp_match")&&C.rmSync("./temp_match",{recursive:!0,force:!0})}catch{}}else t.warn(i.yellow("Certificates generated but not found in expected location.")),t.info(i.dim("Falling back to manual upload...")),await Ie(a,e,o)}catch(p){m.stop("Certificate fetch failed"),t.error(i.red(`Error: ${p.message}`)),t.info(i.dim("Falling back to manual upload...")),await Ie(a,e,o)}}catch(l){m.stop("iOS setup failed"),t.error(i.red(`Error: ${l.message}`))}finally{if(ascKeyPath)try{C.rmSync(v.dirname(ascKeyPath),{recursive:!0,force:!0})}catch{}}}async function fe(a,e){try{await R.post(`/projects/${a}/secrets`,{key:"APPLE_TEAM_ID",value:e,description:"Apple Developer Team ID (used for iOS signing)"}),t.success(i.green(`\u2713 Saved Team ID ${e} to Dashboard`))}catch(r){t.warn(i.yellow(`Could not save Team ID to Dashboard: ${r.message}`))}}async function Ie(a,e,r){t.info(i.yellow(`
|
|
22
|
+
Manual Upload Mode`)),t.info("Please provide your certificate and provisioning profile:");let o=await O({message:"Path to .p12 certificate file:",validate:s=>C.existsSync(s)?void 0:"File not found"});V(o)&&(J("Operation cancelled"),process.exit(0));let n=await O({message:"Path to .mobileprovision file:",validate:s=>C.existsSync(s)?void 0:"File not found"});V(n)&&(J("Operation cancelled"),process.exit(0));let c=z();c.start(`Uploading to ${d.name} Dashboard...`);try{await L(a,o,"ios_cert",e,r),await L(a,n,"ios_profile",e,r),c.stop("Upload complete"),t.success(i.green("\u2713 iOS credentials uploaded successfully"))}catch(s){throw c.stop("Upload failed"),s}}async function Xe(a,e,r,o){let n=z();t.step(i.blue("Android Credential Setup"));try{let f=(await R.get(`/credentials/${a}`)).data.credentials||[],y=o.bundleId||"*",g=f.find(S=>S.platform==="android"&&S.distributionType===r&&(S.bundleId===y||S.bundleId==="*"||y==="*"));if(g){t.warn(i.yellow(`\u26A0\uFE0F Existing Android credentials found for ${r}`));let S=await O({message:"What would you like to do? (use/new/cancel)",validate:I=>{let p=I.toLowerCase();if(!(p==="use"||p==="new"||p==="cancel"))return"Please type: use, new, or cancel"}});if(V(S)||S.toLowerCase()==="cancel")return;if(S.toLowerCase()==="use"){t.success(i.green("\u2713 Using existing credentials."));return}await R.delete(`/credentials/${g.credentialId}?projectId=${a}`)}}catch{}let c="./android/app/my-release-key.jks";if(C.existsSync(c)){let l=await Ce({message:"Upload existing keystore?"});if(l&&!V(l)){let f=await O({message:"Key alias:",initialValue:"my-key-alias"});if(V(f))return;let y=await ge({message:"Keystore password:"});if(V(y))return;await L(a,c,"android_keystore",o.bundleId||"*",r,f,void 0,void 0,void 0,y),t.success(i.green("\u2713 Keystore uploaded"));return}}t.info(i.blue("Generating new Android keystore..."));let s=o.keyAlias||`${d.nameLower}-${$e()}`,u=he(),m=`./${d.nameLower}-${e}.jks`;C.existsSync(m)&&C.unlinkSync(m),n.start("Generating keystore...");try{let l=u.replace(/'/g,"'\\''");W(`keytool -genkeypair -v -keystore "${m}" -alias "${s}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${l}' -keypass '${l}' -dname "CN=${d.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),n.stop("Keystore generated"),await L(a,m,"android_keystore",o.bundleId||"*",r,s,void 0,void 0,void 0,u),t.success(i.green("\u2713 Android credentials uploaded successfully")),t.info(i.cyan(`Key Alias: ${s}`))}catch(l){throw n.stop("Generation failed"),new Error(`Keystore generation failed: ${l.message}`)}}async function L(a,e,r,o,n,c,s,u,m,l){let f=v.basename(e);t.info(i.dim(`Uploading ${f} (Isolated process)...`));let y=new URL(import.meta.url),g=v.dirname(y.pathname),S=v.join(g,"commands","isolated-upload.js"),I=Y("node",[S,a,e,r,o,n,c||"undefined",s||"undefined",u||"undefined",m||"undefined",l||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(I.status!==0){let p=I.stderr||I.stdout||"Unknown isolated upload failure";throw t.error(i.red(`Isolated Upload Failed: ${p}`)),new Error(p)}I.stdout.includes("SUCCESS")?t.info(i.dim(`\u2713 ${f} uploaded and registered.`)):t.warn(i.yellow(`Isolated upload finished but success not confirmed: ${I.stdout}`))}async function We(a){let e=z(),r=a.platform,o=`./${d.configFileName}`;if(!C.existsSync(o)){t.error(`No ${d.configFileName} found. Run \`${d.nameLower} init\` or \`${d.nameLower} link\` first.`);return}let n=JSON.parse(C.readFileSync(o,"utf-8")),{projectId:c}=n;if(!c){t.error(`${d.configFileName} is missing projectId.`);return}try{e.start("Fetching project secrets...");let u=(await R.get(`/projects/${c}/secrets/export?env=all`)).data.secrets||{};e.stop("Secrets fetched and merged."),e.start("Fetching credentials...");let l=(await R.get(`/credentials/${c}`)).data.credentials||[];e.stop(`Found ${l.length} metadata records.`);let f=l.filter(I=>I.platform===r);if(f.length===0){t.info(`No ${r} credentials found on Dashboard.`);return}let y="./credentials.json",g={};if(C.existsSync(y))try{g=JSON.parse(C.readFileSync(y,"utf-8"))}catch{t.warn("Could not parse existing credentials.json, creating a new one.")}g[r]||(g[r]={});let S=v.join(process.cwd(),"credentials",r);C.existsSync(S)||C.mkdirSync(S,{recursive:!0});for(let I of f){e.start(`Downloading ${I.type} (${I.distributionType})...`);try{let p=await R.get(`/credentials/${I.credentialId}/download?projectId=${c}`);if(p.data.status==="success"&&p.data.downloadUrl){let N=v.join(process.cwd(),"credentials",r,I.distributionType);C.existsSync(N)||C.mkdirSync(N,{recursive:!0});let x=I.s3Key?.split(".").pop()||(I.type.includes("keystore")?"jks":I.type.includes("cert")?"p12":"mobileprovision"),T=`${I.type}.${x}`,D=v.join(N,T),M=await ye.get(p.data.downloadUrl,{responseType:"arraybuffer"});C.writeFileSync(D,Buffer.from(M.data));let k=v.join("credentials",r,I.distributionType,T);if(r==="android"){if(I.type==="android_keystore"){let B=I.distributionType==="store"?"PRODUCTION":I.distributionType==="internal"?"STAGING":"DEVELOPMENT",K=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],j=[`KEYSTORE_PASSWORD_${B}`,`KEYSTORE_PASSWORD_${I.distributionType.toUpperCase()}`,...K.map(A=>`KEYSTORE_PASSWORD_${A}`),"ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],Q=[`KEYSTORE_ALIAS_${B}`,`KEYSTORE_ALIAS_${I.distributionType.toUpperCase()}`,...K.map(A=>`KEYSTORE_ALIAS_${A}`),"KEYSTORE_ALIAS"],h=j.map(A=>u[A]).find(A=>!!A)||"",b=Q.map(A=>u[A]).find(A=>!!A)||I.meta?.alias||"";g.android.keystore={keystorePath:k,keystorePassword:h,keyAlias:b,keyPassword:h}}}else if(r==="ios"){let B=I.distributionType==="store"?"production":I.distributionType==="adhoc"?"staging":"development";g.ios[B]||(g.ios[B]={}),I.type==="ios_cert"?(g.ios[B].certificatePath=k,g.ios[B].certificatePassword=u.IOS_P12_PASSWORD||""):I.type==="ios_profile"&&(g.ios[B].provisioningProfilePath=k)}e.stop(`\u2713 ${I.type} (${I.distributionType}) saved.`)}}catch(p){let N=p.response?.data?.message||p.message;e.stop(i.dim(`- Skipped ${I.type} (${I.distributionType}): ${N}`))}}C.writeFileSync(y,JSON.stringify(g,null,2)),t.success(i.green("\u2713 Local credentials.json updated.")),Ae("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(s){e.stop(i.red("Sync failed.")),t.error(`Error: ${s.message}`)}}function he(){let a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",e="";for(let r=0;r<24;r++)e+=a.charAt(Math.floor(Math.random()*a.length));return e}function $e(a=8){let e="abcdefghijklmnopqrstuvwxyz0123456789",r="";for(let o=0;o<a;o++)r+=e.charAt(Math.floor(Math.random()*e.length));return r}async function xe(a,e,r,o){let n=o||await de(e,a);if(!n||n.length===0)return!1;let c=await U({message:"Select a certificate to revoke:",options:[...n.map(s=>({value:`revoke:${s.id}`,label:`Revoke: ${s.name} (${s.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return V(c)||c==="cancel"?!1:c==="nuke"?(W(`fastlane match nuke ${a}`,{stdio:"inherit",cwd:process.cwd(),env:e}),!0):typeof c=="string"&&c.startsWith("revoke:")?(await _e(e,c.split(":")[1]),!0):!1}async function de(a,e){let r=e==="development"?"development":"distribution",o=`
|
|
23
23
|
lane :${d.fastlanePrefix}_list_certs do
|
|
24
24
|
require 'spaceship'
|
|
25
25
|
require 'json'
|
|
@@ -38,7 +38,7 @@ lane :${d.fastlanePrefix}_list_certs do
|
|
|
38
38
|
$stderr.puts "ERROR: #{e.message}"
|
|
39
39
|
exit 1
|
|
40
40
|
end
|
|
41
|
-
end`,n=v.join(
|
|
41
|
+
end`,n=v.join(ue.tmpdir(),`/tmp/${d.nameLower}-list-certs-${Date.now()}`),c=v.join(n,"fastlane"),s=v.join(c,"Fastfile");try{C.existsSync(c)||C.mkdirSync(c,{recursive:!0}),C.writeFileSync(s,o);let m=W(`fastlane ${d.fastlanePrefix}_list_certs`,{env:{...a,CI:"1",FASTLANE_FASTFILE:s},cwd:n,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${d.jsonStartMarker}(.*)${d.jsonEndMarker}`));return m?JSON.parse(m[1]):[]}finally{C.existsSync(n)&&C.rmSync(n,{recursive:!0,force:!0})}}async function _e(a,e){let r=`
|
|
42
42
|
lane :${d.fastlanePrefix}_revoke_cert do
|
|
43
43
|
require 'spaceship'
|
|
44
44
|
begin
|
|
@@ -50,4 +50,4 @@ lane :${d.fastlanePrefix}_revoke_cert do
|
|
|
50
50
|
$stderr.puts "ERROR: #{e.message}"
|
|
51
51
|
exit 1
|
|
52
52
|
end
|
|
53
|
-
end`,o=v.join(
|
|
53
|
+
end`,o=v.join(ue.tmpdir(),`/tmp/${d.nameLower}-revoke-cert-${Date.now()}`),n=v.join(o,"fastlane"),c=v.join(n,"Fastfile");try{C.existsSync(n)||C.mkdirSync(n,{recursive:!0}),C.writeFileSync(c,r),W(`fastlane ${d.fastlanePrefix}_revoke_cert`,{env:{...a,CI:"1",FASTLANE_FASTFILE:c},cwd:o,stdio:["inherit","pipe","inherit"]})}finally{C.existsSync(o)&&C.rmSync(o,{recursive:!0,force:!0})}}export{pe as a,me as b,Ge as c,We as d};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
import{b as a,c as b,d as c}from"./chunk-
|
|
1
|
+
import{b as a,c as b,d as c}from"./chunk-HMDVVJXG.js";import"./chunk-YZYFEHP5.js";export{a as credentialsMainCommand,b as credentialsSetupCommand,c as downloadCredentialsCommand};
|
package/dist/index.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{a as ci,c as qe}from"./chunk-
|
|
2
|
+
import{a as ci,c as qe}from"./chunk-HMDVVJXG.js";import{a as p,b as ri,c as ue,d as si,e as gt,f as ai,g as _}from"./chunk-YZYFEHP5.js";import{Command as Jr,Option as On}from"commander";import{configDotenv as qr}from"dotenv";import{intro as de,outro as Tn}from"@clack/prompts";import oe from"chalk";import{text as li,confirm as kn,spinner as Nn,isCancel as Ut,cancel as Xe,note as xn,outro as Ln}from"@clack/prompts";import Ze from"chalk";async function di(){try{let e=await li({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(o){if(o.length===0)return"Bucket name is required"}});Ut(e)&&(Xe("Operation cancelled."),process.exit(0));let n=await li({message:"Enter Region:",initialValue:"ap-south-1"});Ut(n)&&(Xe("Operation cancelled."),process.exit(0));let t=await kn({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Ut(t)&&(Xe("Operation cancelled."),process.exit(0));let i=Nn();i.start("Setting up hosting infrastructure...");try{let o=await _.post("/hosting/setup",{bucketName:e,region:n,createCloudFront:t});if(o.data.status!=="success")throw new Error(o.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let r=o.data,a=`Bucket Name: ${Ze.cyan(r.bucketName)}
|
|
3
3
|
`;a+=`Region: ${Ze.cyan(r.region)}
|
|
4
4
|
`,a+=`S3 Website URL: ${Ze.blue(r.s3WebsiteUrl)}`,r.cloudFrontId&&(a+=`
|
|
5
5
|
|
|
@@ -805,5 +805,5 @@ Environment Variables:`)),Object.entries(i.env).forEach(([o,r])=>{pe.info(` ${o
|
|
|
805
805
|
Running expo prebuild for deeper analysis...`));try{Nr("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return ft.warn(fe.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),r}}else if(!s)return n.json||ft.info(fe.dim(`
|
|
806
806
|
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),r;for(let l of o){let d=Sn();d.start(fe.dim(`Running ${l.label}...`));try{let u=Date.now(),f=await l.fn(e,n);f.durationMs=Date.now()-u,r.push(f);let y=f.findings.length;d.stop(y>0?fe.yellow(`${l.label} \u2014 ${y} finding(s)`):fe.green(`${l.label} \u2014 clean`))}catch(u){d.stop(fe.red(`${l.label} \u2014 error`)),r.push({category:l.category,label:l.label,findings:[],durationMs:0,error:u.message})}}}return r}import ee from"chalk";import{log as q}from"@clack/prompts";var Ve={critical:ee.bgRed.white.bold,high:ee.red.bold,medium:ee.yellow.bold,low:ee.blue,info:ee.dim},Nt={critical:0,high:1,medium:2,low:3,info:4};function Lr(e,n){if(!n)return!0;let t=Nt[n];return t===void 0?!0:Nt[e]<=t}function bn(e,n){let t=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let a of e){let c=a.findings.filter(l=>Lr(l.severity,n));if(c.length===0&&!a.error)continue;if(q.info(""),q.info(ee.bold(` ${a.label}`)+ee.dim(` ${c.length} finding(s)`)),q.info(ee.dim(" "+"\u2500".repeat(60))),a.error){q.error(ee.red(` Error: ${a.error}`));continue}let s=[...c].sort((l,d)=>Nt[l.severity]-Nt[d.severity]);for(let l of s){let d=Ve[l.severity](` ${l.severity.toUpperCase()} `);q.info(` ${d} ${ee.bold(l.id)} ${l.title}`),q.info(ee.dim(` ${l.description}`)),l.file&&q.info(ee.dim(` File: ${l.file}${l.line?`:${l.line}`:""}`)),q.info(ee.cyan(` Fix: ${l.recommendation}`)),q.info(""),i[l.severity]++,t++}}q.info(""),q.info(ee.bold(" Summary")),q.info(ee.dim(" "+"\u2500".repeat(60))),q.info(` Total: ${ee.bold(String(t))} finding(s)`),q.info(` ${Ve.critical(` ${i.critical} Critical `)} ${Ve.high(` ${i.high} High `)} ${Ve.medium(` ${i.medium} Medium `)} ${Ve.low(` ${i.low} Low `)} ${Ve.info(` ${i.info} Info `)}`);let o=i.critical>0,r=i.high>0;o||r?(q.info(""),q.error(ee.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):t>0?(q.info(""),q.warn(ee.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(q.info(""),q.success(ee.green.bold(" PASS \u2014 no issues found")))}function Pn(e,n){let t=e.flatMap(o=>o.findings),i={};for(let o of Object.values(he))i[o]=t.filter(r=>r.severity===o).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:n.name||"unknown",projectVersion:n.version||"0.0.0",summary:{total:t.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(o=>({category:o.category,label:o.label,findingCount:o.findings.length,durationMs:o.durationMs,error:o.error||null})),findings:t}}import{log as X,spinner as Ur}from"@clack/prompts";import Y from"chalk";import Oe from"fs";import Mr from"os";import Ye from"path";import{execSync as Fr}from"child_process";var $n=16384,Hr=1,Gr=Buffer.from([127,69,76,70]);async function _n(e){X.info(Y.bold.underline("16KB Page Alignment Check")),console.log("");let n=Ye.resolve(e);if(!Oe.existsSync(n))return X.error(Y.red(`APK file not found: ${n}`)),!1;if(!n.endsWith(".apk"))return X.error(Y.red("The provided file is not an APK file.")),!1;let t=Ur();t.start("Extracting and analyzing native libraries...");let i=Oe.mkdtempSync(Ye.join(Mr.tmpdir(),"mach-16kb-"));try{try{Fr(`unzip -o -q "${n}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let o=Dn(Ye.join(i,"lib"));if(o.length===0)return t.stop("Analysis complete."),X.info(Y.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),X.info(Y.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let r=[];for(let s of o){let l=Ye.relative(i,s),d=jr(l),u=Ye.basename(s),f=Br(s);f!==null&&r.push({name:u,filePath:l,arch:d,align:f,compatible:f>=$n})}if(t.stop("Analysis complete."),r.length===0)return X.info(Y.yellow("No valid ELF shared libraries found.")),!0;let a=r.filter(s=>!s.compatible),c=r.filter(s=>s.compatible);if(X.info(Y.dim(`Checked ${r.length} native librar${r.length===1?"y":"ies"}
|
|
807
807
|
`)),a.length>0){X.info(Y.red.bold(`Incompatible libraries:
|
|
808
|
-
`));for(let s of a)X.error(Y.red(`${Y.bold(s.name)} ${Y.dim(`(${s.arch})`)}`)),X.info(Y.dim(` PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${$n})`))}return c.length>0&&(console.log(""),X.success(Y.green(`${c.length} librar${c.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),a.length===0?(X.success(Y.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(X.error(Y.red.bold(`Found ${a.length} unaligned lib${a.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),X.info(Y.yellow("To fix this:")),X.info(Y.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),X.info(Y.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),X.info(Y.dim(" 3. Update third-party libraries that ship prebuilt .so files")),X.info(Y.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),X.info(Y.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return t.stop("Analysis failed."),X.error(Y.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{Oe.rmSync(i,{recursive:!0,force:!0})}catch{}}}function Br(e){let n=Oe.openSync(e,"r");try{let t=Buffer.alloc(64);if(Oe.readSync(n,t,0,64,0),!t.subarray(0,4).equals(Gr))return null;let i=t[4]===2,o=t[5]===1,r=(f,y)=>o?f.readUInt16LE(y):f.readUInt16BE(y),a=(f,y)=>o?f.readUInt32LE(y):f.readUInt32BE(y),c=(f,y)=>Number(o?f.readBigUInt64LE(y):f.readBigUInt64BE(y)),s,l,d;i?(s=c(t,32),l=r(t,54),d=r(t,56)):(s=a(t,28),l=r(t,42),d=r(t,44));let u=null;for(let f=0;f<d;f++){let y=Buffer.alloc(l);if(Oe.readSync(n,y,0,l,s+f*l),a(y,0)!==Hr)continue;let g;i?g=c(y,48):g=a(y,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{Oe.closeSync(n)}}function Dn(e){let n=[];if(!Oe.existsSync(e))return n;let t=Oe.readdirSync(e,{withFileTypes:!0});for(let i of t){let o=Ye.join(e,i.name);i.isDirectory()?n.push(...Dn(o)):i.name.endsWith(".so")&&n.push(o)}return n}function jr(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Rn=async e=>{if(ue()||(ye.error($e.red(`You are not logged in. Run \`${p.nameLower} login\` first.`)),process.exit(1)),e.apk){await Wr(e);return}let t=process.cwd(),i=xt.join(t,"package.json");mt.existsSync(i)||(ye.error($e.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(mt.readFileSync(i,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(ye.info($e.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),ye.info($e.dim(`Type: ${r?"Expo":"Bare React Native"}`)),ye.info(""));let a={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},c=await In(t,a);e.json?console.log(JSON.stringify(Pn(c,o),null,2)):bn(c,e.severity);let s=c.some(d=>d.findings.some(u=>u.severity==="critical")),l=c.some(d=>d.findings.some(u=>u.severity==="high"));(s||l)&&process.exit(1)},wn=["16kb"];async function Wr(e){let n=e.category?.toLowerCase();n&&!wn.includes(n)&&(ye.error($e.red(`Unknown APK check category: "${n}"`)),ye.info($e.dim(`Available APK checks: ${wn.join(", ")}`)),process.exit(1));let t=await Vr(e.apk);t||process.exit(1);let i=!n,o=!1;(i||n==="16kb")&&(await _n(t)||(o=!0)),o&&process.exit(1)}async function Vr(e){if(e.startsWith("build:")){let t=e.slice(6);return await Yr(t)}if(e.startsWith("http://")||e.startsWith("https://"))return await Cn(e);let n=xt.resolve(e);return mt.existsSync(n)?n:(ye.error($e.red(`APK file not found: ${n}`)),null)}async function Yr(e){let n=vn();n.start(`Fetching APK from build ${e}...`);try{let t=await _.get(`/build/${e}`);if(t.data.status!=="success")throw new Error(t.data.message);let i=t.data.build;if(!i)throw new Error("Build not found");let o=i.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),ye.error($e.red("This build does not have an APK artifact.")),ye.info($e.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${i.buildId||e}`),await Cn(o.url))}catch(t){return n.stop("Failed to fetch build"),ye.error($e.red(t.message)),null}}async function Cn(e){let n=vn();n.start("Downloading APK...");try{let t=mt.mkdtempSync(xt.join(Kr.tmpdir(),`${p.nameLower}-audit-`)),i=xt.join(t,"app.apk"),o=await zr.get(e,{responseType:"arraybuffer"});mt.writeFileSync(i,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return n.stop(`Downloaded APK (${r} MB)`),i}catch(t){return n.stop("Download failed"),ye.error($e.red(`Failed to download APK: ${t.message}`)),null}}var Xr=console.log;console.log=()=>{};qr();console.log=Xr;de(oe.bgCyan.black(p.cliTag("Production Build Orchestrator")));var Qr=Zr(import.meta.url),es=Qr("../package.json"),W=new Jr;W.name(p.nameLower).description(`${p.name} CLI: Powerful Cloud Infrastructure Tools`).version(es.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);W.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await Ri()});W.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{de(oe.bgCyan.black(p.cliTag("Hosting"))),await di()});W.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{de(oe.bgCyan.black(p.cliTag("Sitemap Generator"))),await mi(e)});W.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new On("--build-id <id>","Internal build ID").hideHelp()).addOption(new On("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,n)=>{let t=W.opts();n.yes=n.yes||t.yes,n.quiet=n.quiet||t.quiet,n.platform=e||n.platform,n.buildProfile=n.profile||n.buildProfile,n.quiet||de(oe.bgCyan.black(p.cliTag("Cloud Build"))),await At(n)});W.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{de(oe.bgCyan.black(p.cliTag("OTA Update"))),await ji(e)});W.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("--track <track>","Google Play Track (internal, alpha, beta, production)","internal").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{de(oe.bgCyan.black(p.cliTag("Store Submission"))),await Gi(e)});W.command("login").description(`Login to ${p.name} Dashboard`).action(async()=>{de(oe.bgCyan.black(p.cliTag("Login"))),await ki()});W.command("link").description(`Link local directory to a ${p.name} Project`).action(async()=>{de(oe.bgCyan.black(p.cliTag("Link Project"))),await Ni()});W.command("me").description("Display currently logged in user details").action(async()=>{await zi()});W.command("init").description(`Create a new ${p.name} Project`).action(async()=>{de(oe.bgCyan.black(p.cliTag("Init Project"))),await xi()});W.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,n)=>{de(oe.bgCyan.black(p.cliTag("Env Manager"))),await Mi(e,n)});W.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{de(oe.bgCyan.black(p.cliTag("Dev Server"))),await Ji(e)});W.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await qi(e)});W.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:n}=await import("./credentials-U76O6I5P.js");await n(e)});W.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{de(oe.bgCyan.black(p.cliTag("Credentials Setup"))),await qe(e),Tn(oe.green("Done!"))});W.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").action(async e=>{de(oe.bgCyan.black(p.cliTag("Service Credentials"))),await ci(e),Tn(oe.green("Done!"))});var oi=W.command("device").description("Manage registered iOS test devices");oi.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await _t("register",e)});oi.command("list").description("List all registered devices").action(async()=>{await _t("list",{})});oi.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await _t("remove",e)});W.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{de(oe.bgCyan.black(p.cliTag(e.apk?"APK Audit":"Security Audit"))),await Rn(e)});var ts=new Set(["login"]);W.hook("preAction",(e,n)=>{let t=n.name();ts.has(t)||si()});W.on("command:*",()=>{console.error(`Invalid command: %s
|
|
808
|
+
`));for(let s of a)X.error(Y.red(`${Y.bold(s.name)} ${Y.dim(`(${s.arch})`)}`)),X.info(Y.dim(` PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${$n})`))}return c.length>0&&(console.log(""),X.success(Y.green(`${c.length} librar${c.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),a.length===0?(X.success(Y.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(X.error(Y.red.bold(`Found ${a.length} unaligned lib${a.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),X.info(Y.yellow("To fix this:")),X.info(Y.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),X.info(Y.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),X.info(Y.dim(" 3. Update third-party libraries that ship prebuilt .so files")),X.info(Y.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),X.info(Y.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return t.stop("Analysis failed."),X.error(Y.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{Oe.rmSync(i,{recursive:!0,force:!0})}catch{}}}function Br(e){let n=Oe.openSync(e,"r");try{let t=Buffer.alloc(64);if(Oe.readSync(n,t,0,64,0),!t.subarray(0,4).equals(Gr))return null;let i=t[4]===2,o=t[5]===1,r=(f,y)=>o?f.readUInt16LE(y):f.readUInt16BE(y),a=(f,y)=>o?f.readUInt32LE(y):f.readUInt32BE(y),c=(f,y)=>Number(o?f.readBigUInt64LE(y):f.readBigUInt64BE(y)),s,l,d;i?(s=c(t,32),l=r(t,54),d=r(t,56)):(s=a(t,28),l=r(t,42),d=r(t,44));let u=null;for(let f=0;f<d;f++){let y=Buffer.alloc(l);if(Oe.readSync(n,y,0,l,s+f*l),a(y,0)!==Hr)continue;let g;i?g=c(y,48):g=a(y,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{Oe.closeSync(n)}}function Dn(e){let n=[];if(!Oe.existsSync(e))return n;let t=Oe.readdirSync(e,{withFileTypes:!0});for(let i of t){let o=Ye.join(e,i.name);i.isDirectory()?n.push(...Dn(o)):i.name.endsWith(".so")&&n.push(o)}return n}function jr(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Rn=async e=>{if(ue()||(ye.error($e.red(`You are not logged in. Run \`${p.nameLower} login\` first.`)),process.exit(1)),e.apk){await Wr(e);return}let t=process.cwd(),i=xt.join(t,"package.json");mt.existsSync(i)||(ye.error($e.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(mt.readFileSync(i,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(ye.info($e.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),ye.info($e.dim(`Type: ${r?"Expo":"Bare React Native"}`)),ye.info(""));let a={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},c=await In(t,a);e.json?console.log(JSON.stringify(Pn(c,o),null,2)):bn(c,e.severity);let s=c.some(d=>d.findings.some(u=>u.severity==="critical")),l=c.some(d=>d.findings.some(u=>u.severity==="high"));(s||l)&&process.exit(1)},wn=["16kb"];async function Wr(e){let n=e.category?.toLowerCase();n&&!wn.includes(n)&&(ye.error($e.red(`Unknown APK check category: "${n}"`)),ye.info($e.dim(`Available APK checks: ${wn.join(", ")}`)),process.exit(1));let t=await Vr(e.apk);t||process.exit(1);let i=!n,o=!1;(i||n==="16kb")&&(await _n(t)||(o=!0)),o&&process.exit(1)}async function Vr(e){if(e.startsWith("build:")){let t=e.slice(6);return await Yr(t)}if(e.startsWith("http://")||e.startsWith("https://"))return await Cn(e);let n=xt.resolve(e);return mt.existsSync(n)?n:(ye.error($e.red(`APK file not found: ${n}`)),null)}async function Yr(e){let n=vn();n.start(`Fetching APK from build ${e}...`);try{let t=await _.get(`/build/${e}`);if(t.data.status!=="success")throw new Error(t.data.message);let i=t.data.build;if(!i)throw new Error("Build not found");let o=i.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),ye.error($e.red("This build does not have an APK artifact.")),ye.info($e.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${i.buildId||e}`),await Cn(o.url))}catch(t){return n.stop("Failed to fetch build"),ye.error($e.red(t.message)),null}}async function Cn(e){let n=vn();n.start("Downloading APK...");try{let t=mt.mkdtempSync(xt.join(Kr.tmpdir(),`${p.nameLower}-audit-`)),i=xt.join(t,"app.apk"),o=await zr.get(e,{responseType:"arraybuffer"});mt.writeFileSync(i,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return n.stop(`Downloaded APK (${r} MB)`),i}catch(t){return n.stop("Download failed"),ye.error($e.red(`Failed to download APK: ${t.message}`)),null}}var Xr=console.log;console.log=()=>{};qr();console.log=Xr;de(oe.bgCyan.black(p.cliTag("Production Build Orchestrator")));var Qr=Zr(import.meta.url),es=Qr("../package.json"),W=new Jr;W.name(p.nameLower).description(`${p.name} CLI: Powerful Cloud Infrastructure Tools`).version(es.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);W.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await Ri()});W.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{de(oe.bgCyan.black(p.cliTag("Hosting"))),await di()});W.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{de(oe.bgCyan.black(p.cliTag("Sitemap Generator"))),await mi(e)});W.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new On("--build-id <id>","Internal build ID").hideHelp()).addOption(new On("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,n)=>{let t=W.opts();n.yes=n.yes||t.yes,n.quiet=n.quiet||t.quiet,n.platform=e||n.platform,n.buildProfile=n.profile||n.buildProfile,n.quiet||de(oe.bgCyan.black(p.cliTag("Cloud Build"))),await At(n)});W.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{de(oe.bgCyan.black(p.cliTag("OTA Update"))),await ji(e)});W.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("--track <track>","Google Play Track (internal, alpha, beta, production)","internal").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{de(oe.bgCyan.black(p.cliTag("Store Submission"))),await Gi(e)});W.command("login").description(`Login to ${p.name} Dashboard`).action(async()=>{de(oe.bgCyan.black(p.cliTag("Login"))),await ki()});W.command("link").description(`Link local directory to a ${p.name} Project`).action(async()=>{de(oe.bgCyan.black(p.cliTag("Link Project"))),await Ni()});W.command("me").description("Display currently logged in user details").action(async()=>{await zi()});W.command("init").description(`Create a new ${p.name} Project`).action(async()=>{de(oe.bgCyan.black(p.cliTag("Init Project"))),await xi()});W.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,n)=>{de(oe.bgCyan.black(p.cliTag("Env Manager"))),await Mi(e,n)});W.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{de(oe.bgCyan.black(p.cliTag("Dev Server"))),await Ji(e)});W.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await qi(e)});W.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:n}=await import("./credentials-XVEQK4PC.js");await n(e)});W.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{de(oe.bgCyan.black(p.cliTag("Credentials Setup"))),await qe(e),Tn(oe.green("Done!"))});W.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").action(async e=>{de(oe.bgCyan.black(p.cliTag("Service Credentials"))),await ci(e),Tn(oe.green("Done!"))});var oi=W.command("device").description("Manage registered iOS test devices");oi.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await _t("register",e)});oi.command("list").description("List all registered devices").action(async()=>{await _t("list",{})});oi.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await _t("remove",e)});W.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{de(oe.bgCyan.black(p.cliTag(e.apk?"APK Audit":"Security Audit"))),await Rn(e)});var ts=new Set(["login"]);W.hook("preAction",(e,n)=>{let t=n.name();ts.has(t)||si()});W.on("command:*",()=>{console.error(`Invalid command: %s
|
|
809
809
|
See --help for a list of available commands.`,W.args.join(" ")),process.exit(1)});process.argv.slice(2).length||W.help();W.parse(process.argv);
|