@radhya/mach 1.7.1 → 1.7.2

package/dist/index.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import{a as li,c as Xe}from"./chunk-SR72G3MN.js";import{a as f,b as ai,c as pe,d as ci,e as yt,f as Mt,g as D}from"./chunk-YBL2LBMW.js";import{Command as is,Option as xn}from"commander";import{configDotenv as ns}from"dotenv";import{intro as ue,outro as Ln}from"@clack/prompts";import ae from"chalk";import{text as di,confirm as Un,spinner as Mn,isCancel as Ft,cancel as Ze,note as Fn,outro as Hn}from"@clack/prompts";import Qe from"chalk";async function ui(){try{let e=await di({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(o){if(o.length===0)return"Bucket name is required"}});Ft(e)&&(Ze("Operation cancelled."),process.exit(0));let n=await di({message:"Enter Region:",initialValue:"ap-south-1"});Ft(n)&&(Ze("Operation cancelled."),process.exit(0));let i=await Un({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Ft(i)&&(Ze("Operation cancelled."),process.exit(0));let t=Mn();t.start("Setting up hosting infrastructure...");try{let o=await D.post("/hosting/setup",{bucketName:e,region:n,createCloudFront:i});if(o.data.status!=="success")throw new Error(o.data.message||"Hosting setup failed");t.stop("Hosting setup complete!");let r=o.data,c=`Bucket Name:      ${Qe.cyan(r.bucketName)}
+import{a as li,c as Xe}from"./chunk-SR72G3MN.js";import{a as f,b as ai,c as pe,d as ci,e as yt,f as Mt,g as D}from"./chunk-YBL2LBMW.js";import{Command as os,Option as Un}from"commander";import{configDotenv as rs}from"dotenv";import{intro as ue,outro as Mn}from"@clack/prompts";import ae from"chalk";import{text as di,confirm as Fn,spinner as Hn,isCancel as Ft,cancel as Ze,note as Bn,outro as Gn}from"@clack/prompts";import Qe from"chalk";async function ui(){try{let e=await di({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(o){if(o.length===0)return"Bucket name is required"}});Ft(e)&&(Ze("Operation cancelled."),process.exit(0));let n=await di({message:"Enter Region:",initialValue:"ap-south-1"});Ft(n)&&(Ze("Operation cancelled."),process.exit(0));let i=await Fn({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Ft(i)&&(Ze("Operation cancelled."),process.exit(0));let t=Hn();t.start("Setting up hosting infrastructure...");try{let o=await D.post("/hosting/setup",{bucketName:e,region:n,createCloudFront:i});if(o.data.status!=="success")throw new Error(o.data.message||"Hosting setup failed");t.stop("Hosting setup complete!");let r=o.data,c=`Bucket Name:      ${Qe.cyan(r.bucketName)}
 `;c+=`Region:           ${Qe.cyan(r.region)}
 `,c+=`S3 Website URL:   ${Qe.blue(r.s3WebsiteUrl)}`,r.cloudFrontId&&(c+=`
 
 CloudFront ID:    ${Qe.cyan(r.cloudFrontId)}`,c+=`
-CloudFront URL:   ${Qe.blue(r.cloudFrontUrl)}`),Fn(c,"Setup Complete!"),Hn("You are all set!")}catch(o){t.stop("Setup failed"),Ze(`Error: ${o.response?.data?.message||o.message}`)}}catch(e){Ze(`An unexpected error occurred: ${e.message}`)}}import{readdir as Bn,writeFile as Gn,access as jn,mkdir as Kn}from"fs/promises";import{join as pi}from"path";import{spinner as zn,text as fi,isCancel as mi,cancel as Ht,note as Vn,outro as Wn}from"@clack/prompts";import Yn from"chalk";async function Jn(){let e=["./app","./src/app"];for(let n of e)try{return await jn(n),n}catch{}return null}async function gi(e){try{let i=await Jn()||"./app",t=await fi({message:"Enter path to your app directory:",placeholder:i,initialValue:i,validate(l){if(l.length===0)return"Path is required"}});mi(t)&&(Ht("Operation cancelled."),process.exit(0));let o=await fi({message:"Enter your website base URL:",placeholder:"https://example.com",validate(l){if(l.length===0)return"Base URL is required";if(!l.startsWith("http"))return"URL must start with http:// or https://"}});mi(o)&&(Ht("Operation cancelled."),process.exit(0));let r=zn();r.start("Scanning app directory for routes...");let c=await hi(t);r.stop(`Found ${c.length} routes`);let a=qn(c,o),s=e.output||"./public/sitemap.xml";r.start(`Writing sitemap to ${s}...`);let d=s.substring(0,s.lastIndexOf("/"));if(d)try{await Kn(d,{recursive:!0})}catch{}await Gn(s,a,"utf-8"),r.stop("Sitemap generated successfully!"),Vn(`Routes included:
+CloudFront URL:   ${Qe.blue(r.cloudFrontUrl)}`),Bn(c,"Setup Complete!"),Gn("You are all set!")}catch(o){t.stop("Setup failed"),Ze(`Error: ${o.response?.data?.message||o.message}`)}}catch(e){Ze(`An unexpected error occurred: ${e.message}`)}}import{readdir as jn,writeFile as Kn,access as zn,mkdir as Vn}from"fs/promises";import{join as pi}from"path";import{spinner as Wn,text as fi,isCancel as mi,cancel as Ht,note as Yn,outro as Jn}from"@clack/prompts";import qn from"chalk";async function Xn(){let e=["./app","./src/app"];for(let n of e)try{return await zn(n),n}catch{}return null}async function gi(e){try{let i=await Xn()||"./app",t=await fi({message:"Enter path to your app directory:",placeholder:i,initialValue:i,validate(l){if(l.length===0)return"Path is required"}});mi(t)&&(Ht("Operation cancelled."),process.exit(0));let o=await fi({message:"Enter your website base URL:",placeholder:"https://example.com",validate(l){if(l.length===0)return"Base URL is required";if(!l.startsWith("http"))return"URL must start with http:// or https://"}});mi(o)&&(Ht("Operation cancelled."),process.exit(0));let r=Wn();r.start("Scanning app directory for routes...");let c=await hi(t);r.stop(`Found ${c.length} routes`);let a=Zn(c,o),s=e.output||"./public/sitemap.xml";r.start(`Writing sitemap to ${s}...`);let d=s.substring(0,s.lastIndexOf("/"));if(d)try{await Vn(d,{recursive:!0})}catch{}await Kn(s,a,"utf-8"),r.stop("Sitemap generated successfully!"),Yn(`Routes included:
 ${c.map(l=>`  \u2022 ${l.path}`).join(`
-`)}`,"Sitemap Summary"),Wn(`Sitemap saved to ${Yn.cyan(s)}`)}catch(n){Ht(`An error occurred: ${n.message}`)}}async function hi(e,n=""){let i=[];try{let t=await Bn(e,{withFileTypes:!0});for(let o of t){let r=pi(e,o.name);if(!(o.name.startsWith("_")||o.name.startsWith("."))){if(o.isDirectory()){let c=await hi(r,pi(n,o.name));i.push(...c)}else if(o.isFile()){if(o.name==="index.tsx"||o.name==="index.ts"||o.name==="index.jsx"||o.name==="index.js"){let c=n===""?"/":`/${n}`;i.push({path:c,file:r})}else if(o.name.match(/\.(tsx|ts|jsx|js)$/)&&!o.name.includes("_layout")&&!o.name.includes("+")){let c=o.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${n}/${c}`.replace(/\/+/g,"/");i.push({path:a,file:r})}}}}}catch(t){throw new Error(`Failed to scan directory ${e}: ${t.message}`)}return i}function qn(e,n){let i=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
+`)}`,"Sitemap Summary"),Jn(`Sitemap saved to ${qn.cyan(s)}`)}catch(n){Ht(`An error occurred: ${n.message}`)}}async function hi(e,n=""){let i=[];try{let t=await jn(e,{withFileTypes:!0});for(let o of t){let r=pi(e,o.name);if(!(o.name.startsWith("_")||o.name.startsWith("."))){if(o.isDirectory()){let c=await hi(r,pi(n,o.name));i.push(...c)}else if(o.isFile()){if(o.name==="index.tsx"||o.name==="index.ts"||o.name==="index.jsx"||o.name==="index.js"){let c=n===""?"/":`/${n}`;i.push({path:c,file:r})}else if(o.name.match(/\.(tsx|ts|jsx|js)$/)&&!o.name.includes("_layout")&&!o.name.includes("+")){let c=o.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${n}/${c}`.replace(/\/+/g,"/");i.push({path:a,file:r})}}}}}catch(t){throw new Error(`Failed to scan directory ${e}: ${t.message}`)}return i}function Zn(e,n){let i=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
 ${e.map(o=>{let r=o.path;return r=r.replace(/\/\([^)]+\)/g,""),r=r.replace(/\/\[.*?\]/g,"/:id"),r=r.replace(/\/+/g,"/"),r===""&&(r="/"),`  <url>
     <loc>${n}${r}</loc>
@@ -15,7 +15,7 @@ ${e.map(o=>{let r=o.path;return r=r.replace(/\/\([^)]+\)/g,""),r=r.replace(/\/\[
     <priority>0.8</priority>
   </url>`}).join(`
 `)}
-</urlset>`}import{randomUUID as So}from"crypto";import he from"path";import it from"axios";import Eo from"os";import{spinner as jt,confirm as wi,isCancel as vi,log as R}from"@clack/prompts";import w from"chalk";import oe from"fs";import{execSync as Oi}from"child_process";import Ci from"adm-zip";import{spinner as Xn,log as St}from"@clack/prompts";import Si from"chalk";import Ei from"fs";import Ai from"path";var yi=`#!/bin/bash
+</urlset>`}import{randomUUID as Ao}from"crypto";import he from"path";import it from"axios";import Io from"os";import{spinner as jt,confirm as wi,isCancel as vi,log as R}from"@clack/prompts";import w from"chalk";import oe from"fs";import{execSync as Oi}from"child_process";import Ci from"adm-zip";import{spinner as Qn,log as St}from"@clack/prompts";import Si from"chalk";import Ei from"fs";import Ai from"path";var yi=`#!/bin/bash
 # --- Mach Cloud Build Script (Android) ---
 # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
 BUILD_ID="{{BUILD_ID}}"
@@ -483,12 +483,12 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
 echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
 sleep 5
 sudo shutdown -h now
-`;var Ii=async(e,n,i={},t,o)=>{let r=Xn(),c=e.buildProfile||"production",a=c==="production",s=e.apk===!0,d=a?"bundleRelease":"assembleRelease",l=e.buildCommand||(s?"assembleRelease":d),u=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,`  curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`,"  apt-get install -y nodejs 2>&1",'  echo "[NODE] Installed Node $(node -v)"',"else",'  echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
+`;var Ii=async(e,n,i={},t,o)=>{let r=Qn(),c=e.buildProfile||"production",a=c==="production",s=e.apk===!0,d=a?"bundleRelease":"assembleRelease",l=e.buildCommand||(s?"assembleRelease":d),u=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,`  curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`,"  apt-get install -y nodejs 2>&1",'  echo "[NODE] Installed Node $(node -v)"',"else",'  echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
 `):"",p;if(o){let S=Ai.isAbsolute(o)?o:Ai.resolve(process.cwd(),o);Ei.existsSync(S)?(p=Ei.readFileSync(S,"utf-8"),St.info(Si.magenta(`\u2713 Loaded preBuild hook: ${o}`))):St.warn(`preBuild script not found at ${S} \u2014 skipping`)}let m=yi.replace(/\{\{BUILD_ID\}\}/g,n).replace(/\{\{BUILD_COMMAND\}\}/g,l).replace("{{NODE_VERSION_SETUP}}",u).replace("{{ENV_VARS}}",`
 export MACH_APP_NAME="${e.appName||"App"}"
 export MACH_BUILD_PROFILE="${c}"
 {{ENV_VARS}}
-    `);if(e.dryRun){St.info("User Data Script (dry run):"),console.log(m);return}r.start("Requesting cloud build instance...");try{let S=await D.post("/builds/launch-android",{projectId:t,buildId:n,platform:e.platform,buildProfile:e.buildProfile,buildCommand:l,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:i,dryRun:e.dryRun,userDataScript:m,preBuildScriptContent:p});if(S.data.status!=="success")throw new Error(S.data.message||"Failed to launch build instance");let $=S.data.instanceId;return r.stop("Build Started"),St.success(Si.green(`Build initiated on cloud instance (${$}).`)),{instanceId:$}}catch(S){r.stop("Android Build Failed");let $=S.response?.data?.message||S.message;throw new Error(`Failed to launch Android build: ${$}`)}};import{spinner as Zn,log as je}from"@clack/prompts";import ke from"chalk";import Qn from"fs";import{execSync as et}from"child_process";var bi=`#!/bin/bash
+    `);if(e.dryRun){St.info("User Data Script (dry run):"),console.log(m);return}r.start("Requesting cloud build instance...");try{let S=await D.post("/builds/launch-android",{projectId:t,buildId:n,platform:e.platform,buildProfile:e.buildProfile,buildCommand:l,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:i,dryRun:e.dryRun,userDataScript:m,preBuildScriptContent:p});if(S.data.status!=="success")throw new Error(S.data.message||"Failed to launch build instance");let $=S.data.instanceId;return r.stop("Build Started"),St.success(Si.green(`Build initiated on cloud instance (${$}).`)),{instanceId:$}}catch(S){r.stop("Android Build Failed");let $=S.response?.data?.message||S.message;throw new Error(`Failed to launch Android build: ${$}`)}};import{spinner as eo,log as je}from"@clack/prompts";import ke from"chalk";import to from"fs";import{execSync as et}from"child_process";var bi=`#!/bin/bash
 # --- Mach Cloud Build Script (iOS) ---
 # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
 
@@ -926,26 +926,26 @@ touch done
 if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
   curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
 fi
-`;var _i=async(e,n,i={},t)=>{let o=Zn();e.sshHost||(e.sshHost="localhost",je.message(ke.yellow("No SSH host provided, defaulting to localhost."))),o.start(`Connecting to remote Mac at ${ke.cyan(e.sshHost)}...`);let r=e.sshUser||process.env.USER||"ubuntu",c=e.sshKey,a=`${r}@${e.sshHost}`,s=`ssh ${c?`-i ${c}`:""} -o StrictHostKeyChecking=no ${a}`,d=`scp ${c?`-i ${c}`:""} -o StrictHostKeyChecking=no`;try{let l=r==="ubuntu"?"/home/ubuntu":`/Users/${r}`,u=(i.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${l}/${f.remoteWorkspacesDir}/${u}`;o.message(`Preparing stable workspace: ${p}...`),et(`${s} "mkdir -p ${p}"`,{stdio:"inherit"}),o.message("Transferring source code...");let m=`/tmp/${f.nameLower}-source-${n}.zip`;et(`${d} ${m} ${a}:${p}/source.zip`,{stdio:"inherit"});let S=e.iosApiKeyPath?`${p}/api_key.p8`:"",$="";e.iosApiKeyPath&&(o.message("Uploading App Store Connect API key..."),et(`${d} ${e.iosApiKeyPath} ${a}:${S}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&($=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${S}`));let v={};if(t)try{let A=await D.post(`/builds/${t}/${n}/build-urls`,{platform:"ios"});A.data.status==="success"&&(v=A.data.urls)}catch(A){je.warn(ke.yellow(`Could not fetch build URLs: ${A.message}`))}let O="";if(v.credentials&&v.credentials.length>0)for(let A of v.credentials)A.type==="p12"?O+=`curl -sf -o "$CERT_DIR/${A.name}" "${A.downloadUrl}" || true
+`;var _i=async(e,n,i={},t)=>{let o=eo();e.sshHost||(e.sshHost="localhost",je.message(ke.yellow("No SSH host provided, defaulting to localhost."))),o.start(`Connecting to remote Mac at ${ke.cyan(e.sshHost)}...`);let r=e.sshUser||process.env.USER||"ubuntu",c=e.sshKey,a=`${r}@${e.sshHost}`,s=`ssh ${c?`-i ${c}`:""} -o StrictHostKeyChecking=no ${a}`,d=`scp ${c?`-i ${c}`:""} -o StrictHostKeyChecking=no`;try{let l=r==="ubuntu"?"/home/ubuntu":`/Users/${r}`,u=(i.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${l}/${f.remoteWorkspacesDir}/${u}`;o.message(`Preparing stable workspace: ${p}...`),et(`${s} "mkdir -p ${p}"`,{stdio:"inherit"}),o.message("Transferring source code...");let m=`/tmp/${f.nameLower}-source-${n}.zip`;et(`${d} ${m} ${a}:${p}/source.zip`,{stdio:"inherit"});let S=e.iosApiKeyPath?`${p}/api_key.p8`:"",$="";e.iosApiKeyPath&&(o.message("Uploading App Store Connect API key..."),et(`${d} ${e.iosApiKeyPath} ${a}:${S}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&($=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${S}`));let v={};if(t)try{let A=await D.post(`/builds/${t}/${n}/build-urls`,{platform:"ios"});A.data.status==="success"&&(v=A.data.urls)}catch(A){je.warn(ke.yellow(`Could not fetch build URLs: ${A.message}`))}let O="";if(v.credentials&&v.credentials.length>0)for(let A of v.credentials)A.type==="p12"?O+=`curl -sf -o "$CERT_DIR/${A.name}" "${A.downloadUrl}" || true
 `:A.type==="mobileprovision"&&(O+=`curl -sf -o "$PROV_TEMP/${A.name}" "${A.downloadUrl}" || true
 `);o.message("Generating macOS build script...");let k=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
 `:"";if(i)for(let[A,b]of Object.entries(i)){let C=b.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");k+=`export ${A}="${C}"
 `}let x=[k,v.logUpload?`export PRESIGNED_LOG_UPLOAD="${v.logUpload}"`:"",v.doneMarker?`export PRESIGNED_DONE_MARKER="${v.doneMarker}"`:"",v.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${v.cacheDerivedDataDownload}"`:"",v.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${v.cacheDerivedDataUpload}"`:"",v.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${v.cacheNodeModulesDownload}"`:"",v.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${v.cacheNodeModulesUpload}"`:"",v.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${v.cachePodsDownload}"`:"",v.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${v.cachePodsUpload}"`:"",v.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${v.artifactIpaUpload}"`:"",v.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${v.artifactAppZipUpload}"`:"",`export BUILD_ID="${n}"`,`export ${f.envPrefix}PROJECT_ID="${u}"`,i.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${i.MATCH_ENCRYPTION_PASSPHRASE}"`:"",i.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${i.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${f.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${f.keychainPassword}"`].filter(Boolean).join(`
 `),I=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
-`):"",M=bi,g={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":x,"{{CREDENTIAL_DOWNLOADS}}":O,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":$,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":n,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":I};Object.entries(g).forEach(([A,b])=>{M=M.split(A).join(b)});let P=`/tmp/${f.nameLower}-mac-build-${n}.sh`;if(Qn.writeFileSync(P,M),et(`${d} ${P} ${a}:${p}/build.sh`),o.stop("Remote script uploaded."),je.info(ke.cyan("Executing remote build. This might take a while...")),et(`${s} "bash ${p}/build.sh"`,{stdio:"inherit"}),o.stop("Remote build finished!"),t){o.start("Fetching artifact links...");try{let b=(await D.get(`/builds/${t}/${n}/artifacts`)).data.artifacts||[],C=e.simulator===!0;if(b.length===0&&!C)throw o.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(o.stop("Build Successful!"),b.length>0){je.success("Build Artifacts Ready:");for(let H of b)console.log(`
+`):"",M=bi,g={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":x,"{{CREDENTIAL_DOWNLOADS}}":O,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":$,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":n,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":I};Object.entries(g).forEach(([A,b])=>{M=M.split(A).join(b)});let P=`/tmp/${f.nameLower}-mac-build-${n}.sh`;if(to.writeFileSync(P,M),et(`${d} ${P} ${a}:${p}/build.sh`),o.stop("Remote script uploaded."),je.info(ke.cyan("Executing remote build. This might take a while...")),et(`${s} "bash ${p}/build.sh"`,{stdio:"inherit"}),o.stop("Remote build finished!"),t){o.start("Fetching artifact links...");try{let b=(await D.get(`/builds/${t}/${n}/artifacts`)).data.artifacts||[],C=e.simulator===!0;if(b.length===0&&!C)throw o.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(o.stop("Build Successful!"),b.length>0){je.success("Build Artifacts Ready:");for(let H of b)console.log(`
 ${ke.yellow(H.name)}:
 ${ke.cyan(H.downloadUrl)}`);console.log(`
-${ke.dim("Note: Links are valid for 7 days.")}`)}else C&&je.warn("Simulator build completed. No artifacts uploaded.")}catch(A){o.stop("Could not fetch artifacts"),je.warn(ke.yellow(`Artifact listing failed: ${A.message}`))}}}catch(l){throw o.stop("iOS Build Failed"),l}};import eo from"crypto";import tt from"axios";async function $i(e,n){try{let i=await to(n),o=(await tt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.id,r=0,a=(await tt.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.tracks||[];for(let s of a)if(s.releases){for(let d of s.releases)if(d.versionCodes)for(let l of d.versionCodes){let u=parseInt(l,10);u>r&&(r=u)}}try{let d=(await tt.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.bundles||[];for(let l of d)l.versionCode&&l.versionCode>r&&(r=l.versionCode)}catch{}try{let d=(await tt.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.apks||[];for(let l of d)l.versionCode&&l.versionCode>r&&(r=l.versionCode)}catch{}return r}catch(i){let t=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${t}`)}}async function to(e){let n=Math.floor(Date.now()/1e3),i=n+3600,t={alg:"RS256",typ:"JWT"},o={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:n,exp:i,scope:"https://www.googleapis.com/auth/androidpublisher"},r=Buffer.from(JSON.stringify(t)).toString("base64url"),c=Buffer.from(JSON.stringify(o)).toString("base64url"),a=`${r}.${c}`,s=eo.createSign("RSA-SHA256");s.update(a);let d=s.sign(e.private_key,"base64url"),l=`${a}.${d}`;return(await tt.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:l},{headers:{Connection:"close"}})).data.access_token}import{spinner as Et,log as E,isCancel as At,confirm as io,select as Bt}from"@clack/prompts";import h from"chalk";import y from"fs";import _ from"path";import{execSync as G,spawn as Di}from"child_process";import be from"os";import no from"crypto";var Ri=(e,n)=>n.filter(i=>y.existsSync(_.join(e,i))).reduce((i,t)=>i.update(y.readFileSync(_.join(e,t))),no.createHash("sha256")).digest("hex").slice(0,16),oo=e=>Ri(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),ro=e=>Ri(e,["Podfile","Podfile.lock"]),so=e=>{let n=_.join(e,"fingerprint.json");try{return JSON.parse(y.readFileSync(n,"utf-8"))}catch{return{}}},Pi=(e,n)=>{y.mkdirSync(e,{recursive:!0}),y.writeFileSync(_.join(e,"fingerprint.json"),JSON.stringify(n,null,2))},ao=7200*1e3,co=(e,n)=>{y.mkdirSync(e,{recursive:!0});let i=_.join(e,"build.lock");if(y.existsSync(i))try{let t=JSON.parse(y.readFileSync(i,"utf-8")),o=Date.now()-(t.timestamp||0);if(o<ao)throw new Error(`Another build is already running for this project (build ${t.buildId}, started ${Math.round(o/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(t){if(t.message.includes("Another build"))throw t}y.writeFileSync(i,JSON.stringify({buildId:n,pid:process.pid,timestamp:Date.now()}))},lo=(e,n)=>{let i=_.join(e,"build.lock");try{y.existsSync(i)&&JSON.parse(y.readFileSync(i,"utf-8")).buildId===n&&y.unlinkSync(i)}catch{}},Re=(e,n,i=process.cwd(),t={},o,r)=>new Promise((c,a)=>{let s=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",_.join(be.homedir(),".npm-global/bin")],l=[...(process.env.PATH||"").split(":"),...s].filter((S,$,v)=>S&&v.indexOf(S)===$).join(":");process.env[`${f.envPrefix}DEBUG`]&&console.log(h.magenta(`[${f.nameUpper}_DEBUG] Execution PATH: ${l}`));let u={...process.env,...t,PATH:l,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};o&&process.env[`${f.envPrefix}DEBUG`]&&(o(h.magenta(`[ENVIRONMENT] node: ${process.execPath}
+${ke.dim("Note: Links are valid for 7 days.")}`)}else C&&je.warn("Simulator build completed. No artifacts uploaded.")}catch(A){o.stop("Could not fetch artifacts"),je.warn(ke.yellow(`Artifact listing failed: ${A.message}`))}}}catch(l){throw o.stop("iOS Build Failed"),l}};import io from"crypto";import tt from"axios";async function $i(e,n){try{let i=await no(n),o=(await tt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.id,r=0,a=(await tt.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.tracks||[];for(let s of a)if(s.releases){for(let d of s.releases)if(d.versionCodes)for(let l of d.versionCodes){let u=parseInt(l,10);u>r&&(r=u)}}try{let d=(await tt.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.bundles||[];for(let l of d)l.versionCode&&l.versionCode>r&&(r=l.versionCode)}catch{}try{let d=(await tt.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.apks||[];for(let l of d)l.versionCode&&l.versionCode>r&&(r=l.versionCode)}catch{}return r}catch(i){let t=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${t}`)}}async function no(e){let n=Math.floor(Date.now()/1e3),i=n+3600,t={alg:"RS256",typ:"JWT"},o={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:n,exp:i,scope:"https://www.googleapis.com/auth/androidpublisher"},r=Buffer.from(JSON.stringify(t)).toString("base64url"),c=Buffer.from(JSON.stringify(o)).toString("base64url"),a=`${r}.${c}`,s=io.createSign("RSA-SHA256");s.update(a);let d=s.sign(e.private_key,"base64url"),l=`${a}.${d}`;return(await tt.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:l},{headers:{Connection:"close"}})).data.access_token}import{spinner as Et,log as E,isCancel as At,confirm as oo,select as Bt}from"@clack/prompts";import h from"chalk";import y from"fs";import _ from"path";import{execSync as G,spawn as Di}from"child_process";import be from"os";import ro from"crypto";var Ri=(e,n)=>n.filter(i=>y.existsSync(_.join(e,i))).reduce((i,t)=>i.update(y.readFileSync(_.join(e,t))),ro.createHash("sha256")).digest("hex").slice(0,16),so=e=>Ri(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),ao=e=>Ri(e,["Podfile","Podfile.lock"]),co=e=>{let n=_.join(e,"fingerprint.json");try{return JSON.parse(y.readFileSync(n,"utf-8"))}catch{return{}}},Pi=(e,n)=>{y.mkdirSync(e,{recursive:!0}),y.writeFileSync(_.join(e,"fingerprint.json"),JSON.stringify(n,null,2))},lo=7200*1e3,uo=(e,n)=>{y.mkdirSync(e,{recursive:!0});let i=_.join(e,"build.lock");if(y.existsSync(i))try{let t=JSON.parse(y.readFileSync(i,"utf-8")),o=Date.now()-(t.timestamp||0);if(o<lo)throw new Error(`Another build is already running for this project (build ${t.buildId}, started ${Math.round(o/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(t){if(t.message.includes("Another build"))throw t}y.writeFileSync(i,JSON.stringify({buildId:n,pid:process.pid,timestamp:Date.now()}))},po=(e,n)=>{let i=_.join(e,"build.lock");try{y.existsSync(i)&&JSON.parse(y.readFileSync(i,"utf-8")).buildId===n&&y.unlinkSync(i)}catch{}},we=(e,n,i=process.cwd(),t={},o,r)=>new Promise((c,a)=>{let s=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",_.join(be.homedir(),".npm-global/bin")],l=[...(process.env.PATH||"").split(":"),...s].filter((S,$,v)=>S&&v.indexOf(S)===$).join(":");process.env[`${f.envPrefix}DEBUG`]&&console.log(h.magenta(`[${f.nameUpper}_DEBUG] Execution PATH: ${l}`));let u={...process.env,...t,PATH:l,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};o&&process.env[`${f.envPrefix}DEBUG`]&&(o(h.magenta(`[ENVIRONMENT] node: ${process.execPath}
 `)),o(h.magenta(`[ENVIRONMENT] PATH: ${l}
 `)),o(h.magenta(`[ENVIRONMENT] command: ${e} ${n.join(" ")}
 `)));let p=e;if(["node","npm","npx","pod"].includes(e)){let S=_.dirname(process.execPath),$=_.join(S,e);y.existsSync($)&&(p=$,o&&o(h.dim(`[EXEC] Using absolute path: ${p}
-`)))}let m=Di(p,n,{stdio:"pipe",cwd:i,shell:!0,env:u,detached:process.platform!=="win32"});if(r){if(r.aborted){if(m.pid)try{process.kill(-m.pid,"SIGTERM")}catch{m.kill()}return a(new Error("Command aborted"))}r.addEventListener("abort",()=>{if(m.pid)try{process.kill(-m.pid,"SIGTERM")}catch{m.kill()}a(new Error("Command aborted"))})}m.stdout.on("data",S=>{let $=S.toString();process.stdout.write($),o&&o($)}),m.stderr.on("data",S=>{let $=S.toString();process.stderr.write($),o&&o($)}),m.on("close",S=>{S===0?c(S):a(new Error(`Command failed with code ${S}: ${e} ${n.join(" ")}`))}),m.on("error",S=>a(S))}),uo=e=>{let n=Math.floor(e/1e3%60),i=Math.floor(e/(1e3*60)%60),t=Math.floor(e/(1e3*60*60)%24),o=[];return t>0&&o.push(`${t}h`),i>0&&o.push(`${i}m`),(n>0||o.length===0)&&o.push(`${n}s`),o.join(" ")},Ke=(e,n)=>{let i=[];try{if(!y.existsSync(e))return i;let t=y.readdirSync(e);for(let o of t){let r=_.join(e,o);try{let c=y.statSync(r);if(n.some(s=>o.endsWith(s))){i.push(_.resolve(r));continue}c.isDirectory()&&(i=i.concat(Ke(r,n)))}catch{}}}catch{}return i},Gt=async(e,n,i={},t,o={})=>{let r=Et(),c=Date.now(),a=e.platform,s=e.buildProfile||"production",d=async(g,P={})=>{if(t)for(let A=1;A<=3;A++)try{await D.patch(`/builds/${t}/${n}`,{status:g,...P});return}catch(b){let C=b?.response?.data?.message||b?.message||String(b);console.error(`[reportStatus] attempt ${A}/3 failed (status=${g}): ${C}`),A<3&&await new Promise(H=>setTimeout(H,2e3))}},l=new AbortController,{signal:u}=l,p=null;t&&(p=setInterval(async()=>{try{(await D.get(`/builds/${t}/${n}`)).data.status==="cancelled"&&(E.warn(h.yellow(`
-\u{1F6D1} Build cancelled from dashboard. Terminating...`)),l.abort(),p&&clearInterval(p))}catch{}},5e3));let m=_.join(process.cwd(),".mach-cache"),S="setup",$="",v=null,O=async()=>{if(!$||!t)return;let g=$;$="";try{let P=g;Object.values(i).forEach(A=>{if(A&&A.length>5){let b=A.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");P=P.replace(new RegExp(b,"g"),"[SECRET]")}}),await D.post(`/builds/${t}/${n}/logs`,{log:P,step:S})}catch{}},k=async()=>{v&&(clearTimeout(v),v=null),await O(),lo(m,n),p&&(clearInterval(p),p=null);try{let g=_.join(be.tmpdir(),`${f.buildPrefix}-${n}.keychain-db`);y.existsSync(g)&&(G(`security delete-keychain "${g}"`,{stdio:"ignore"}),E.info(h.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let g=_.join(be.homedir(),"Library/MobileDevice/Provisioning Profiles");if(y.existsSync(g)){let P=y.readdirSync(g).filter(A=>A.includes(n)||A.startsWith(`${f.nameLower}-temp-${n}`));for(let A of P)y.unlinkSync(_.join(g,A))}}catch{}},x=async g=>{t&&($+=g,$.length>=8192?(v&&(clearTimeout(v),v=null),await O()):v||(v=setTimeout(()=>{v=null,O()},2e3)))},I=async g=>{S=g,await x(`[STEP_START:${g}] ${Math.floor(Date.now()/1e3)}
-`)},M=async(g,P,A,b)=>await Re(g,P,A,b,C=>{x(C)},u);E.info(h.blue(`\u{1F680} Starting local build for ${a} (${s})...`));try{co(m,n)}catch(g){throw await d("failed",{error:g.message}),g}if(await d("building"),await I("setup"),t&&a==="ios"&&!e.simulator)try{let g=parseInt(i.BUILD_NUMBER||"0",10),P=await D.post(`/projects/${t}/next-build-number`,{platform:"ios",startFrom:g});P.data.status==="success"&&(i.BUILD_NUMBER=String(P.data.buildNumber),E.info(h.dim(`Auto build number: ${i.BUILD_NUMBER}`)),await x(`[BUILD_NUMBER] ${i.BUILD_NUMBER}
+`)))}let m=Di(p,n,{stdio:"pipe",cwd:i,shell:!0,env:u,detached:process.platform!=="win32"});if(r){if(r.aborted){if(m.pid)try{process.kill(-m.pid,"SIGTERM")}catch{m.kill()}return a(new Error("Command aborted"))}r.addEventListener("abort",()=>{if(m.pid)try{process.kill(-m.pid,"SIGTERM")}catch{m.kill()}a(new Error("Command aborted"))})}m.stdout.on("data",S=>{let $=S.toString();process.stdout.write($),o&&o($)}),m.stderr.on("data",S=>{let $=S.toString();process.stderr.write($),o&&o($)}),m.on("close",S=>{S===0?c(S):a(new Error(`Command failed with code ${S}: ${e} ${n.join(" ")}`))}),m.on("error",S=>a(S))}),fo=e=>{let n=Math.floor(e/1e3%60),i=Math.floor(e/(1e3*60)%60),t=Math.floor(e/(1e3*60*60)%24),o=[];return t>0&&o.push(`${t}h`),i>0&&o.push(`${i}m`),(n>0||o.length===0)&&o.push(`${n}s`),o.join(" ")},Ke=(e,n)=>{let i=[];try{if(!y.existsSync(e))return i;let t=y.readdirSync(e);for(let o of t){let r=_.join(e,o);try{let c=y.statSync(r);if(n.some(s=>o.endsWith(s))){i.push(_.resolve(r));continue}c.isDirectory()&&(i=i.concat(Ke(r,n)))}catch{}}}catch{}return i},Gt=async(e,n,i={},t,o={})=>{let r=Et(),c=Date.now(),a=e.platform,s=e.buildProfile||"production",d=async(g,P={})=>{if(t)for(let A=1;A<=3;A++)try{await D.patch(`/builds/${t}/${n}`,{status:g,...P});return}catch(b){let C=b?.response?.data?.message||b?.message||String(b);console.error(`[reportStatus] attempt ${A}/3 failed (status=${g}): ${C}`),A<3&&await new Promise(H=>setTimeout(H,2e3))}},l=new AbortController,{signal:u}=l,p=null;t&&(p=setInterval(async()=>{try{(await D.get(`/builds/${t}/${n}`)).data.status==="cancelled"&&(E.warn(h.yellow(`
+\u{1F6D1} Build cancelled from dashboard. Terminating...`)),l.abort(),p&&clearInterval(p))}catch{}},5e3));let m=_.join(process.cwd(),".mach-cache"),S="setup",$="",v=null,O=async()=>{if(!$||!t)return;let g=$;$="";try{let P=g;Object.values(i).forEach(A=>{if(A&&A.length>5){let b=A.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");P=P.replace(new RegExp(b,"g"),"[SECRET]")}}),await D.post(`/builds/${t}/${n}/logs`,{log:P,step:S})}catch{}},k=async()=>{v&&(clearTimeout(v),v=null),await O(),po(m,n),p&&(clearInterval(p),p=null);try{let g=_.join(be.tmpdir(),`${f.buildPrefix}-${n}.keychain-db`);y.existsSync(g)&&(G(`security delete-keychain "${g}"`,{stdio:"ignore"}),E.info(h.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let g=_.join(be.homedir(),"Library/MobileDevice/Provisioning Profiles");if(y.existsSync(g)){let P=y.readdirSync(g).filter(A=>A.includes(n)||A.startsWith(`${f.nameLower}-temp-${n}`));for(let A of P)y.unlinkSync(_.join(g,A))}}catch{}},x=async g=>{t&&($+=g,$.length>=8192?(v&&(clearTimeout(v),v=null),await O()):v||(v=setTimeout(()=>{v=null,O()},2e3)))},I=async g=>{S=g,await x(`[STEP_START:${g}] ${Math.floor(Date.now()/1e3)}
+`)},M=async(g,P,A,b)=>await we(g,P,A,b,C=>{x(C)},u);E.info(h.blue(`\u{1F680} Starting local build for ${a} (${s})...`));try{uo(m,n)}catch(g){throw await d("failed",{error:g.message}),g}if(await d("building"),await I("setup"),t&&a==="ios"&&!e.simulator)try{let g=parseInt(i.BUILD_NUMBER||"0",10),P=await D.post(`/projects/${t}/next-build-number`,{platform:"ios",startFrom:g});P.data.status==="success"&&(i.BUILD_NUMBER=String(P.data.buildNumber),E.info(h.dim(`Auto build number: ${i.BUILD_NUMBER}`)),await x(`[BUILD_NUMBER] ${i.BUILD_NUMBER}
 `))}catch(g){E.warn(h.yellow(`Could not fetch auto build number: ${g.message}`))}await I("lock"),e.developmentClient?(E.info(h.blue("\u2139\uFE0F  Configuring build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(E.info(h.blue("\u2139\uFE0F  Configuring build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client");try{await I("clone"),E.info(h.dim("Preparing source...")),await I("read_config");let g=_.join(process.cwd(),f.configFileName);if(y.existsSync(g)){let U=JSON.parse(y.readFileSync(g,"utf-8"))?.build?.[s]||{};await x(`[CONFIG] Profile: ${s}, distribution: ${U.distribution||"not set"}, simulator: ${U.simulator||!1}
 `)}if(await I("read_package"),e.nodeVersion){let L=process.env.NVM_DIR||_.join(be.homedir(),".nvm"),U=_.join(L,"versions","node"),q;if(y.existsSync(U)){let T=y.readdirSync(U).sort().reverse(),ne=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,V=T.find(J=>J===ne||J.startsWith(ne+".")||J.startsWith(`v${e.nodeVersion}.`));V&&(q=_.join(U,V,"bin"))}if(q&&y.existsSync(q)){let T=process.env.PATH||"";process.env.PATH=`${q}:${T}`,await x(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${q}
 `),E.info(h.green(`\u2713 Node switched to ${e.nodeVersion} (${q})`))}else await x(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
-`),E.warn(h.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await I("deps"),r.start("Checking dependencies...");let P=so(m),A=oo(process.cwd()),b=y.existsSync("node_modules"),C=y.existsSync("yarn.lock"),H=y.existsSync("bun.lockb");b&&P.node&&P.node!==A&&(r.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await x(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
+`),E.warn(h.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await I("deps"),r.start("Checking dependencies...");let P=co(m),A=so(process.cwd()),b=y.existsSync("node_modules"),C=y.existsSync("yarn.lock"),H=y.existsSync("bun.lockb");b&&P.node&&P.node!==A&&(r.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await x(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
 `),y.rmSync(_.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),b=!1);let B="npm",N=["install","--prefer-offline"];C?(B="yarn",N=["install","--prefer-offline"]):H&&(B="bun",N=["install"]),b?r.stop("Cached node_modules found. Syncing dependencies..."):r.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(E.info(h.blue("Running pre-install hook...")),E.info(h.dim(`> ${e.preBuild}`)),await I("prebuild"),await M("bash",[e.preBuild],process.cwd(),i)),E.info(h.dim(`Running ${B} ${N.join(" ")}...`)),await M(B,N,process.cwd(),i),P.node=A,Pi(m,P);let F=JSON.parse(y.readFileSync("package.json","utf-8")),Z=F.dependencies?.expo||F.devDependencies?.expo,K=e.iosBundleIdentifier||"",j=e.name||"";if(Z){r.start(`Enforcing ${f.name} configuration...`);let L=_.join(process.cwd(),"app.json"),U=null;if(y.existsSync(L)){U=y.readFileSync(L,"utf-8");let T=JSON.parse(U);T.expo=T.expo||{},j||(j=T.expo.name||""),a==="ios"&&!K&&(K=T.expo?.ios?.bundleIdentifier||""),e.name&&(T.expo.name=e.name),e.scheme&&(T.expo.scheme=e.scheme),a==="ios"&&e.iosBundleIdentifier?(T.expo.ios=T.expo.ios||{},T.expo.ios.bundleIdentifier=e.iosBundleIdentifier):a==="android"&&e.androidPackage&&(T.expo.android=T.expo.android||{},T.expo.android.package=e.androidPackage),y.writeFileSync(L,JSON.stringify(T,null,2))}let q=["exec","--","expo","prebuild","--platform",a,"--no-install"];try{if(await I("prebuild"),await M("npm",q,process.cwd(),i),a==="ios"&&y.existsSync("ios")){await I("pods"),E.info(h.blue("Running pod install..."));try{let T=_.resolve("ios"),ne=_.join(T,"Podfile");if(!y.existsSync(ne))throw new Error("ios/Podfile not found. Skipping pod install.");let V=y.readFileSync(ne,"utf-8"),J=e.iosDeploymentTarget||"13.4";if(!e.developmentClient&&(E.info(h.blue("\u2139\uFE0F  Patching Podfile to EXCLUDE expo-dev-client...")),V.includes("use_expo_modules!")&&!V.includes("exclude:"))){let le=/use_expo_modules!(\s*)$/m;le.test(V)?V=V.replace(le,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):V=V.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let se=`
       installer.generated_projects.each do |project|
         project.targets.each do |target|
@@ -964,14 +964,14 @@ ${se}`),y.writeFileSync(ne,V);else{E.info(h.dim(`Appending new post_install hook
 post_install do |installer|
 ${se}
 end
-`;y.appendFileSync(ne,le)}let qe="/opt/homebrew/bin/pod",Ut=y.existsSync(qe)?qe:"pod",Ge=ro(T);y.existsSync(_.join(T,"Pods"))&&P.pods&&P.pods!==Ge&&(await x(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
-`),E.info(h.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),y.rmSync(_.join(T,"Pods"),{recursive:!0,force:!0})),E.info(h.dim(`Using pod command: ${Ut} in ${T}`)),await M(Ut,["install"],T,i),P.pods=Ge,Pi(m,P)}catch(T){let ne=T.message||"Unknown error";E.warn(h.yellow(`Native "pod" command failed: ${ne}`)),E.info(h.dim("Falling back to npm exec pod-install...")),E.info(h.magenta(`${f.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await M("npx",["--yes","pod-install@latest","ios"],process.cwd(),i)}if(y.existsSync("ios/Pods")){E.info(h.dim("Disabling signing for Pod targets to prevent conflicts..."));try{G(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}}}finally{U&&y.writeFileSync(L,U)}r.stop(`Expo prebuild complete (${f.name} config enforced).`)}let z=[];if(a==="android")await I("build"),z=await po(e,s,i,L=>x(L),u);else if(a==="ios"){await I("signing"),E.info(h.dim("Preparing credentials..."));let L=o?.distributionType;z=await fo(e,n,s,i,t,U=>x(U),u,L,U=>I(U))}e.postBuild&&(E.info(h.blue("Running post-build hook...")),E.info(h.dim(`> ${e.postBuild}`)),await M(e.postBuild,[],process.cwd(),i));let ge=uo(Date.now()-c);if(E.success(h.green(`
+`;y.appendFileSync(ne,le)}let qe="/opt/homebrew/bin/pod",Ut=y.existsSync(qe)?qe:"pod",Ge=ao(T);y.existsSync(_.join(T,"Pods"))&&P.pods&&P.pods!==Ge&&(await x(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
+`),E.info(h.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),y.rmSync(_.join(T,"Pods"),{recursive:!0,force:!0})),E.info(h.dim(`Using pod command: ${Ut} in ${T}`)),await M(Ut,["install"],T,i),P.pods=Ge,Pi(m,P)}catch(T){let ne=T.message||"Unknown error";E.warn(h.yellow(`Native "pod" command failed: ${ne}`)),E.info(h.dim("Falling back to npm exec pod-install...")),E.info(h.magenta(`${f.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await M("npx",["--yes","pod-install@latest","ios"],process.cwd(),i)}if(y.existsSync("ios/Pods")){E.info(h.dim("Disabling signing for Pod targets to prevent conflicts..."));try{G(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}}}finally{U&&y.writeFileSync(L,U)}r.stop(`Expo prebuild complete (${f.name} config enforced).`)}let z=[];if(a==="android")await I("build"),z=await mo(e,s,i,L=>x(L),u);else if(a==="ios"){await I("signing"),E.info(h.dim("Preparing credentials..."));let L=o?.distributionType;z=await go(e,n,s,i,t,U=>x(U),u,L,U=>I(U))}e.postBuild&&(E.info(h.blue("Running post-build hook...")),E.info(h.dim(`> ${e.postBuild}`)),await M(e.postBuild,[],process.cwd(),i));let ge=fo(Date.now()-c);if(E.success(h.green(`
 \u2713 Local build completed successfully in ${ge}`)),await d("building",{...K&&{bundleId:K},...j&&{appName:j}}),z.length>0&&(E.info(h.cyan(`
-\u{1F4E6} Generated Artifacts:`)),z.forEach(L=>{let U=_.resolve(L);E.info(h.dim(`  - ${L}`)),E.info(h.gray(`    Path: ${U}`))}),e.interactive)){let L=await io({message:"Install on connected device?"});if(!At(L)&&L){if(a==="android"){let U=z.find(q=>q.endsWith(".apk"))||z[0];await go(U,q=>x(q))}else if(a==="ios"){let U=z.find(T=>T.endsWith(".ipa"))||z.find(T=>T.endsWith(".app"))||z[0],q=Ne("ios");e.simulator?await ho(U,q||"",T=>x(T)):await yo(U,q||"",T=>x(T))}}}await I("upload");let Ce=[];for(let L of z)try{let U=_.join(be.tmpdir(),`${n}-${_.basename(L)}`);y.copyFileSync(L,U),Ce.push(U),E.info(h.dim(`  \u{1F4CB} Preserved artifact: ${_.basename(L)}`))}catch{E.warn(h.yellow(`  Failed to preserve artifact: ${_.basename(L)}`))}z=Ce,E.info(h.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let L=process.cwd(),U=new Set(["node_modules"]),q=y.readdirSync(L),T=0;for(let ne of q)if(!U.has(ne)){if(ne==="ios"){let V=_.join(L,"ios"),J=y.readdirSync(V);for(let se of J)if(se!=="Pods")try{y.rmSync(_.join(V,se),{recursive:!0,force:!0}),T++}catch{}continue}try{y.rmSync(_.join(L,ne),{recursive:!0,force:!0}),T++}catch{}}E.info(h.dim(`  Cleaned ${T} items. Cached: node_modules${y.existsSync(_.join(L,"ios","Pods"))?", ios/Pods":""}`)),E.info(h.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{E.warn(h.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let U=_.join(be.homedir(),f.workspacesDir),q=G(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),T=parseInt(q,10)*1024;if(T<53687091200&&y.existsSync(U)){E.info(h.dim(`  \u26A0\uFE0F Low disk space (${(T/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let ne=_.basename(process.cwd()),V=y.readdirSync(U).filter(J=>J!==ne).map(J=>{let se=_.join(U,J);try{let Ie=y.statSync(se);return Ie.isDirectory()?{name:J,dir:se,mtime:Ie.mtimeMs}:null}catch{return null}}).filter(Boolean);V.sort((J,se)=>J.mtime-se.mtime);for(let J of V){if(T>=53687091200)break;try{y.rmSync(J.dir,{recursive:!0,force:!0}),E.info(h.dim(`  \u{1F5D1}\uFE0F Evicted stale workspace: ${J.name}`));let se=G(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(se,10)*1024>=53687091200)break}catch{}}}}catch{}return await k(),z}catch(g){throw await k(),g.message==="Command aborted"?(E.warn(h.yellow(`
+\u{1F4E6} Generated Artifacts:`)),z.forEach(L=>{let U=_.resolve(L);E.info(h.dim(`  - ${L}`)),E.info(h.gray(`    Path: ${U}`))}),e.interactive)){let L=await oo({message:"Install on connected device?"});if(!At(L)&&L){if(a==="android"){let U=z.find(q=>q.endsWith(".apk"))||z[0];await yo(U,q=>x(q))}else if(a==="ios"){let U=z.find(T=>T.endsWith(".ipa"))||z.find(T=>T.endsWith(".app"))||z[0],q=Ne("ios");e.simulator?await So(U,q||"",T=>x(T)):await Eo(U,q||"",T=>x(T))}}}await I("upload");let Ce=[];for(let L of z)try{let U=_.join(be.tmpdir(),`${n}-${_.basename(L)}`);y.copyFileSync(L,U),Ce.push(U),E.info(h.dim(`  \u{1F4CB} Preserved artifact: ${_.basename(L)}`))}catch{E.warn(h.yellow(`  Failed to preserve artifact: ${_.basename(L)}`))}z=Ce,E.info(h.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let L=process.cwd(),U=new Set(["node_modules"]),q=y.readdirSync(L),T=0;for(let ne of q)if(!U.has(ne)){if(ne==="ios"){let V=_.join(L,"ios"),J=y.readdirSync(V);for(let se of J)if(se!=="Pods")try{y.rmSync(_.join(V,se),{recursive:!0,force:!0}),T++}catch{}continue}try{y.rmSync(_.join(L,ne),{recursive:!0,force:!0}),T++}catch{}}E.info(h.dim(`  Cleaned ${T} items. Cached: node_modules${y.existsSync(_.join(L,"ios","Pods"))?", ios/Pods":""}`)),E.info(h.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{E.warn(h.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let U=_.join(be.homedir(),f.workspacesDir),q=G(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),T=parseInt(q,10)*1024;if(T<53687091200&&y.existsSync(U)){E.info(h.dim(`  \u26A0\uFE0F Low disk space (${(T/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let ne=_.basename(process.cwd()),V=y.readdirSync(U).filter(J=>J!==ne).map(J=>{let se=_.join(U,J);try{let Ie=y.statSync(se);return Ie.isDirectory()?{name:J,dir:se,mtime:Ie.mtimeMs}:null}catch{return null}}).filter(Boolean);V.sort((J,se)=>J.mtime-se.mtime);for(let J of V){if(T>=53687091200)break;try{y.rmSync(J.dir,{recursive:!0,force:!0}),E.info(h.dim(`  \u{1F5D1}\uFE0F Evicted stale workspace: ${J.name}`));let se=G(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(se,10)*1024>=53687091200)break}catch{}}}}catch{}return await k(),z}catch(g){throw await k(),g.message==="Command aborted"?(E.warn(h.yellow(`
 \u274C Build aborted.`)),await d("failed",{error:"Aborted by user"}),g):(E.error(h.red(`
-\u2717 Local build failed: ${g.message}`)),await d("failed",{error:g.message}),g)}},po=async(e,n,i={},t,o)=>{let r=y.existsSync("android/gradlew")?"android/gradlew":y.existsSync("gradlew")?"./gradlew":null;if(!r)throw new Error("Could not find gradlew. Is this an Android project?");let c="assembleRelease";e.distribution==="store"?c="bundleRelease":e.distribution==="internal"&&(c="assembleRelease");let a=e.buildCommand||c;E.info(h.blue(`Running Android build: ${a}...`));let s=r.includes("android/")?"android":".",d=(r.includes("android/"),"./gradlew"),l=[a];if(i.ANDROID_VERSION_CODE){let p=_.join(s,"app/build.gradle");if(y.existsSync(p)){let m=i.ANDROID_VERSION_CODE,S=y.readFileSync(p,"utf-8");S=S.replace(/versionCode\s+\d+/,`versionCode ${m}`),y.writeFileSync(p,S),E.info(h.green(`\u2713 Applied Android versionCode ${m}`))}l.push(`-Pandroid.injected.version.code=${i.ANDROID_VERSION_CODE}`)}await Re(d,l,s,i,t,o);let u=_.join(s,"app/build/outputs");return Ke(u,[".apk",".aab"])},fo=async(e,n,i,t={},o,r,c,a,s)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let d=_.resolve(process.cwd(),y.existsSync("ios")?"ios":"."),l=y.readdirSync(d),u=l.find(k=>k.endsWith(".xcworkspace")),p=l.find(k=>k.endsWith(".xcodeproj"));if(!u&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let k=G("xcode-select -p").toString().trim();E.info(h.dim(`Using Xcode at: ${k}`))}catch{E.warn(h.dim("Could not detect Xcode path."))}E.info(h.blue("Running iOS build via xcodebuild..."));let m=u?u.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),S=e.iosScheme||m||e.scheme,$=e.developmentClient?"Debug":e.iosConfiguration||"Release",v=(o||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),O=_.join(be.homedir(),`Library/Developer/Xcode/DerivedData/${f.nameLower}`,v);if(y.mkdirSync(O,{recursive:!0}),e.simulator){E.info(h.dim(`Building for simulator (Scheme: ${S}, Config: ${$})...`)),await Re("xcodebuild",[u?"-workspace":"-project",u||p,"-scheme",S,"-configuration",$,"-sdk","iphonesimulator","-derivedDataPath",O,"CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO"],d,t,r,c);let k=_.join(O,"Build/Products",`${$}-iphonesimulator`),x=Ke(k,[".app"]);if(x.length>0){let I=x[0],M=_.basename(I,".app"),g=_.join(k,`${M}_simulator.zip`);return E.info(h.dim(`Creating simulator artifact: ${g}...`)),G(`cd "${k}" && zip -r "${g}" "${_.basename(I)}"`),[g]}return[]}else{E.info(h.dim(`Archiving (Scheme: ${S}, Config: ${$})...`));let k=_.join(d,"build.xcarchive"),x=_.join(d,"export"),I=t.IOS_DIST_P12,M=t.IOS_PROVISIONING_PROFILE,g=t.IOS_P12_PASSWORD||"",P=[],A,b,C={isAppStore:!1,isDevelopment:!1};if(I&&M){E.info(h.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let j=`${f.buildPrefix}-${n}.keychain-db`,z=_.join(be.tmpdir(),j),ge=f.keychainPassword;G(`security create-keychain -p "${ge}" "${z}" 2>/dev/null || true`),G(`security set-keychain-settings -t 3600 -l "${z}"`),G(`security unlock-keychain -p "${ge}" "${z}"`);let Ce=_.join(be.tmpdir(),`cert-${n}.p12`),L=Buffer.from(I,"base64");y.writeFileSync(Ce,L),E.info(h.dim(`P12 data size: ${L.length} bytes, first bytes: ${L.slice(0,4).toString("hex")}`)),(L.length<100||L[0]!==48)&&(E.warn(h.yellow("\u26A0\uFE0F  P12 data looks corrupted or was not decrypted correctly.")),E.warn(h.yellow("    This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let U=[g,"",f.keychainPassword],q=!1;for(let ce of U)try{G(`security import "${Ce}" -k "${z}" -P "${ce}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),q=!0,E.info(h.dim(`\u2713 P12 imported successfully with password: ${ce?"[set]":"[empty]"}`));break}catch(le){E.info(h.dim(`  P12 import attempt with password ${ce?`"${ce.substring(0,3)}..."`:"[empty]"} failed: ${le.message?.split(`
+\u2717 Local build failed: ${g.message}`)),await d("failed",{error:g.message}),g)}},mo=async(e,n,i={},t,o)=>{let r=y.existsSync("android/gradlew")?"android/gradlew":y.existsSync("gradlew")?"./gradlew":null;if(!r)throw new Error("Could not find gradlew. Is this an Android project?");let c="assembleRelease";e.distribution==="store"?c="bundleRelease":e.distribution==="internal"&&(c="assembleRelease");let a=e.buildCommand||c;E.info(h.blue(`Running Android build: ${a}...`));let s=r.includes("android/")?"android":".",d=(r.includes("android/"),"./gradlew"),l=[a];if(i.ANDROID_VERSION_CODE){let p=_.join(s,"app/build.gradle");if(y.existsSync(p)){let m=i.ANDROID_VERSION_CODE,S=y.readFileSync(p,"utf-8");S=S.replace(/versionCode\s+\d+/,`versionCode ${m}`),y.writeFileSync(p,S),E.info(h.green(`\u2713 Applied Android versionCode ${m}`))}l.push(`-Pandroid.injected.version.code=${i.ANDROID_VERSION_CODE}`)}await we(d,l,s,i,t,o);let u=_.join(s,"app/build/outputs");return Ke(u,[".apk",".aab"])},go=async(e,n,i,t={},o,r,c,a,s)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let d=_.resolve(process.cwd(),y.existsSync("ios")?"ios":"."),l=y.readdirSync(d),u=l.find(k=>k.endsWith(".xcworkspace")),p=l.find(k=>k.endsWith(".xcodeproj"));if(!u&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let k=G("xcode-select -p").toString().trim();E.info(h.dim(`Using Xcode at: ${k}`))}catch{E.warn(h.dim("Could not detect Xcode path."))}E.info(h.blue("Running iOS build via xcodebuild..."));let m=u?u.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),S=e.iosScheme||m||e.scheme,$=e.developmentClient?"Debug":e.iosConfiguration||"Release",v=(o||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),O=_.join(be.homedir(),`Library/Developer/Xcode/DerivedData/${f.nameLower}`,v);if(y.mkdirSync(O,{recursive:!0}),e.simulator){E.info(h.dim(`Building for simulator (Scheme: ${S}, Config: ${$})...`)),await we("xcodebuild",[u?"-workspace":"-project",u||p,"-scheme",S,"-configuration",$,"-sdk","iphonesimulator","-derivedDataPath",O,"CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO"],d,t,r,c);let k=_.join(O,"Build/Products",`${$}-iphonesimulator`),x=Ke(k,[".app"]);if(x.length>0){let I=x[0],M=_.basename(I,".app"),g=_.join(k,`${M}_simulator.zip`);return E.info(h.dim(`Creating simulator artifact: ${g}...`)),G(`cd "${k}" && zip -r "${g}" "${_.basename(I)}"`),[g]}return[]}else{E.info(h.dim(`Archiving (Scheme: ${S}, Config: ${$})...`));let k=_.join(d,"build.xcarchive"),x=_.join(d,"export"),I=t.IOS_DIST_P12,M=t.IOS_PROVISIONING_PROFILE,g=t.IOS_P12_PASSWORD||"",P=[],A,b,C={isAppStore:!1,isDevelopment:!1};if(I&&M){E.info(h.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let j=`${f.buildPrefix}-${n}.keychain-db`,z=_.join(be.tmpdir(),j),ge=f.keychainPassword;G(`security create-keychain -p "${ge}" "${z}" 2>/dev/null || true`),G(`security set-keychain-settings -t 3600 -l "${z}"`),G(`security unlock-keychain -p "${ge}" "${z}"`);let Ce=_.join(be.tmpdir(),`cert-${n}.p12`),L=Buffer.from(I,"base64");y.writeFileSync(Ce,L),E.info(h.dim(`P12 data size: ${L.length} bytes, first bytes: ${L.slice(0,4).toString("hex")}`)),(L.length<100||L[0]!==48)&&(E.warn(h.yellow("\u26A0\uFE0F  P12 data looks corrupted or was not decrypted correctly.")),E.warn(h.yellow("    This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let U=[g,"",f.keychainPassword],q=!1;for(let ce of U)try{G(`security import "${Ce}" -k "${z}" -P "${ce}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),q=!0,E.info(h.dim(`\u2713 P12 imported successfully with password: ${ce?"[set]":"[empty]"}`));break}catch(le){E.info(h.dim(`  P12 import attempt with password ${ce?`"${ce.substring(0,3)}..."`:"[empty]"} failed: ${le.message?.split(`
 `)[0]||"unknown"}`))}if(!q)throw new Error("Failed to import P12.");y.unlinkSync(Ce),G(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${ge}" "${z}"`);let T=G("security list-keychains -d user",{encoding:"utf-8"}).split(`
-`).map(ce=>ce.trim().replace(/^"|"$/g,"")).filter(ce=>ce.length>0),ne=[z,...T].map(ce=>`"${ce}"`).join(" ");G(`security list-keychains -d user -s ${ne}`),G(`security default-keychain -s "${z}"`);let V=_.join(be.homedir(),"Library/MobileDevice/Provisioning Profiles");y.mkdirSync(V,{recursive:!0});let J=Buffer.from(M,"base64"),se=_.join(V,`${f.nameLower}-temp-${n}.mobileprovision`);y.writeFileSync(se,J);let Ie=J.toString("utf-8"),qe=/<key>get-task-allow<\/key>\s*<true\/>/.test(Ie);C={isAppStore:!Ie.includes("<key>ProvisionedDevices</key>")&&!qe,isDevelopment:qe};try{let le=G(`security cms -D -i "${se}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=le?le[1]:void 0}catch{let le=Ie.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=le?le[1]:void 0}b||(E.warn("Could not extract UUID from provisioning profile. Using fallback."),b=`${f.nameLower}-${n}`);let Ge=_.join(V,`${b}.mobileprovision`);y.existsSync(Ge)&&y.unlinkSync(Ge),y.renameSync(se,Ge);try{let le=G(`security find-identity -v -p codesigning "${z}"`,{encoding:"utf-8"}).match(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/);le&&(A=le[1],E.info(h.blue(`Identity auto-detected from keychain: "${A}"`)))}catch{}A||(A=C.isDevelopment?"Apple Development":"Apple Distribution",E.info(h.blue(`Identity fallback (profile heuristic): "${A}"`))),E.info(h.dim(`Profile type: ${C.isDevelopment?"Development":C.isAppStore?"App Store":"Ad-Hoc"}`)),E.info(h.dim(`Identity Detection: get-task-allow=${C.isDevelopment}, Selected Identity="${A}"`)),P.push("CODE_SIGN_STYLE=Manual"),P.push(`CODE_SIGN_IDENTITY="${A}"`),P.push(`PROVISIONING_PROFILE_SPECIFIER=${b}`),e.iosTeamId&&P.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(j){throw E.error(`Signing setup failed: ${j.message}`),j}}else P.push("-allowProvisioningUpdates"),e.iosTeamId&&P.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);s&&await s("archive"),E.info(h.blue(`Archive detected Identity: "${A}"`)),E.info(h.blue(`Archive detected UUID: "${b}"`)),await Re("xcodebuild",["archive",u?"-workspace":"-project",u||p,"-scheme",S,"-configuration",$,"-archivePath",k,"-derivedDataPath",O,...P],d,t,r,c);let H;b?(C.isAppStore?H="app-store":C.isDevelopment?H="development":H="ad-hoc",E.info(h.blue(`Export method from profile: "${H}"`))):(H=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",E.warn(h.yellow(`No profile UUID detected. Export method from distribution flag: "${H}"`)));let B=e.iosExportMethod||H,N=Ne("ios"),F=_.join(d,"ExportOptions.plist"),Z=`<?xml version="1.0" encoding="UTF-8"?>
+`).map(ce=>ce.trim().replace(/^"|"$/g,"")).filter(ce=>ce.length>0),ne=[z,...T].map(ce=>`"${ce}"`).join(" ");G(`security list-keychains -d user -s ${ne}`),G(`security default-keychain -s "${z}"`);let V=_.join(be.homedir(),"Library/MobileDevice/Provisioning Profiles");y.mkdirSync(V,{recursive:!0});let J=Buffer.from(M,"base64"),se=_.join(V,`${f.nameLower}-temp-${n}.mobileprovision`);y.writeFileSync(se,J);let Ie=J.toString("utf-8"),qe=/<key>get-task-allow<\/key>\s*<true\/>/.test(Ie);C={isAppStore:!Ie.includes("<key>ProvisionedDevices</key>")&&!qe,isDevelopment:qe};try{let le=G(`security cms -D -i "${se}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=le?le[1]:void 0}catch{let le=Ie.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=le?le[1]:void 0}b||(E.warn("Could not extract UUID from provisioning profile. Using fallback."),b=`${f.nameLower}-${n}`);let Ge=_.join(V,`${b}.mobileprovision`);y.existsSync(Ge)&&y.unlinkSync(Ge),y.renameSync(se,Ge);try{let le=G(`security find-identity -v -p codesigning "${z}"`,{encoding:"utf-8"}).match(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/);le&&(A=le[1],E.info(h.blue(`Identity auto-detected from keychain: "${A}"`)))}catch{}A||(A=C.isDevelopment?"Apple Development":"Apple Distribution",E.info(h.blue(`Identity fallback (profile heuristic): "${A}"`))),E.info(h.dim(`Profile type: ${C.isDevelopment?"Development":C.isAppStore?"App Store":"Ad-Hoc"}`)),E.info(h.dim(`Identity Detection: get-task-allow=${C.isDevelopment}, Selected Identity="${A}"`)),P.push("CODE_SIGN_STYLE=Manual"),P.push(`CODE_SIGN_IDENTITY="${A}"`),P.push(`PROVISIONING_PROFILE_SPECIFIER=${b}`),e.iosTeamId&&P.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(j){throw E.error(`Signing setup failed: ${j.message}`),j}}else P.push("-allowProvisioningUpdates"),e.iosTeamId&&P.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);s&&await s("archive"),E.info(h.blue(`Archive detected Identity: "${A}"`)),E.info(h.blue(`Archive detected UUID: "${b}"`)),await we("xcodebuild",["archive",u?"-workspace":"-project",u||p,"-scheme",S,"-configuration",$,"-archivePath",k,"-derivedDataPath",O,...P],d,t,r,c);let H;b?(C.isAppStore?H="app-store":C.isDevelopment?H="development":H="ad-hoc",E.info(h.blue(`Export method from profile: "${H}"`))):(H=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",E.warn(h.yellow(`No profile UUID detected. Export method from distribution flag: "${H}"`)));let B=e.iosExportMethod||H,N=Ne("ios"),F=_.join(d,"ExportOptions.plist"),Z=`<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
@@ -996,42 +996,42 @@ ${Z}`)),s&&await s("export"),E.info(h.blue(`Exporting with Bundle ID: "${N}"`)),
 [DIAGNOSTIC] Checking available signing identities...
 `));try{let j=G("security find-identity -v -p codesigning",{encoding:"utf-8"});r(h.magenta(`${j}
 `))}catch(j){r(h.red(`[DIAGNOSTIC] Failed to list identities: ${j.message}
-`))}}await Re("xcodebuild",["-exportArchive","-archivePath",k,"-exportPath",x,"-exportOptionsPlist",F],d,t,r,c),s&&await s("validate");let K=Ke(x,[".ipa"]);for(let j of K)try{G(`unzip -t "${j}"`,{stdio:"pipe"}),r&&r(`[IPA VALID] ${_.basename(j)} \u2014 archive integrity OK
+`))}}await we("xcodebuild",["-exportArchive","-archivePath",k,"-exportPath",x,"-exportOptionsPlist",F],d,t,r,c),s&&await s("validate");let K=Ke(x,[".ipa"]);for(let j of K)try{G(`unzip -t "${j}"`,{stdio:"pipe"}),r&&r(`[IPA VALID] ${_.basename(j)} \u2014 archive integrity OK
 `)}catch{let ge=`IPA validation failed for ${_.basename(j)}: archive may be corrupt`;throw r&&r(`[IPA CORRUPT] ${ge}
-`),new Error(ge)}return K}},Ne=e=>{try{let n=_.join(process.cwd(),f.configFileName);if(y.existsSync(n)){let i=JSON.parse(y.readFileSync(n,"utf-8"));if(e==="android"&&i.android?.package)return i.android.package;if(e==="ios"&&i.ios?.bundleIdentifier)return i.ios.bundleIdentifier}if(e==="android"){let i=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let t of i)if(y.existsSync(t)){let r=y.readFileSync(t,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(r)return r[1]}}else{let i=_.resolve(process.cwd(),y.existsSync("ios")?"ios":"."),t=Ke(i,["Info.plist"]).filter(c=>!c.includes("/Pods/")&&!c.includes("/build/")&&!c.includes("/DerivedData/"));t.sort((c,a)=>a.split("/").length-c.split("/").length);for(let c of t){let s=y.readFileSync(c,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(s&&!s[1].includes("$"))return s[1]}let o=Ke(i,[".xcodeproj"]);if(o.length>0){let c=_.join(o[0],"project.pbxproj");if(y.existsSync(c)){let s=y.readFileSync(c,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(s)return s[1]}}let r=["app.json","app.config.json","app.config.js","app.config.ts"];for(let c of r)if(y.existsSync(c)){let s=y.readFileSync(c,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(s)return s[1]}}}catch{return null}return null},mo=()=>{try{return G("emulator -version",{stdio:"ignore"}),"emulator"}catch{let n=be.homedir(),i=[_.join(n,"Library/Android/sdk/emulator/emulator"),_.join(n,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let t of i)if(y.existsSync(t))return t}return"emulator"},go=async(e,n)=>{let i=Et();try{if(G("adb devices").toString().split(`
-`).slice(1).map(c=>c.trim()).filter(c=>c.length>0&&!c.startsWith("*")).map(c=>c.split("	")[0]).length===0){E.warn(h.yellow("No Android devices or emulators found."));let c=mo(),a=[];try{a=G(`${c} -list-avds`).toString().split(`
-`).filter(s=>s.trim().length>0)}catch{}if(a.length>0){let s=await Bt({message:"Select an emulator to launch:",options:a.map(u=>({value:u,label:u}))});if(At(s))return;i.start(`Launching emulator ${s}...`),Di(c,["-avd",s],{detached:!0,stdio:"ignore"}).unref();let d=0,l=!1;for(;d<60;){try{if(G("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){l=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!l)throw i.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");i.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}i.start("Installing APK on device..."),await Re("adb",["install","-r",e],process.cwd(),{},n),i.stop("Installation complete.");let r=Ne("android");if(r){E.info(h.blue(`\u{1F680} Launching ${r}...`));try{G(`adb shell dumpsys package ${r}`).toString().split(`
-`).find(s=>s.includes("android.intent.action.MAIN")&&s.includes("android.intent.category.LAUNCHER"))?G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{E.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(t){i.stop("Installation failed."),E.error(h.red(`Failed to install APK: ${t.message}`))}},ho=async(e,n,i)=>{let t=Et();try{if(!G("xcrun simctl list devices booted").toString().includes("(Booted)")){E.warn(h.yellow("No iOS Simulator is currently booted."));let r=G("xcrun simctl list devices --json").toString(),c=JSON.parse(r).devices,a=[];Object.keys(c).forEach(u=>{c[u].forEach(p=>{p.isAvailable&&a.push({...p,runtime:u})})});let s=await Bt({message:"Select a simulator to launch:",options:a.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(At(s))return;t.start(`Booting ${s}...`),G(`xcrun simctl boot ${s}`),G(`open -a Simulator --args -CurrentDeviceUDID ${s}`);let d=0,l=!1;for(;d<30;){try{if(G("xcrun simctl list devices booted").toString().includes(s)){l=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!l)throw t.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");t.stop("Simulator booted.")}t.start("Installing on iOS Simulator..."),await Re("xcrun",["simctl","install","booted",e],process.cwd(),{},i),t.stop("Installation complete."),E.info(h.blue(`\u{1F680} Launching ${n}...`)),await Re("xcrun",["simctl","launch","booted",n],process.cwd(),{},i)}catch(o){t.stop("Installation failed."),E.error(h.red(`Failed to install on Simulator: ${o.message}`))}},yo=async(e,n,i)=>{let t=Et();t.start("Scanning for connected iOS devices...");try{let o=G("xcrun devicectl list devices --json-output -").toString(),c=(JSON.parse(o).result?.devices||[]).filter(s=>s.connectionProperties?.transportType==="wired"||s.connectionProperties?.transportType==="localNetwork");if(c.length===0)throw t.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=c[0].identifier;if(c.length>1){t.stop();let s=await Bt({message:"Select a device to install on:",options:c.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(At(s))return;a=s,t.start(`Installing on ${a}...`)}else t.message(`Installing on ${c[0].model.name}...`);await Re("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},i),t.stop("Installation complete."),E.info(h.blue(`\u{1F680} Launching ${n}...`)),await Re("xcrun",["devicectl","device","launch","app","--device",a,n],process.cwd(),{},i)}catch(o){t.stop("Installation failed."),E.error(h.red(`Failed to install on device: ${o.message}`)),E.info(h.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import It from"fs";function xe(e){if(e){if(!It.existsSync(e))return null;try{return JSON.parse(It.readFileSync(e,"utf-8"))}catch{return null}}if(!It.existsSync(`./${f.configFileName}`))return null;try{return JSON.parse(It.readFileSync(`./${f.configFileName}`,"utf-8"))}catch{return null}}function He(e,n,i=new Set){if(i.has(n))throw new Error(`Circular inheritance detected in profile: ${n}`);i.add(n);let t=e.build?.[n];if(!t)return null;let o={...t};if(t.extends){let r=He(e,t.extends,i);r&&(o={...r,...t,env:{...r.env,...t.env},ios:{...r.ios,...t.ios},android:{...r.android,...t.android}})}if(o.envGroups&&Array.isArray(o.envGroups)){let r={};for(let c of o.envGroups){let a=e.envGroups?.[c];a?Object.assign(r,a):log.warn(`Environment group not found: ${c}`)}o.env={...r,...o.env}}return o}var ze=(e,n=`${f.envPrefix}`)=>{let i={},t=(o,r)=>{if(o)for(let c in o){let a=o[c],s=`${r}${c.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;a!==null&&typeof a=="object"&&!Array.isArray(a)?t(a,`${s}_`):i[s]=String(a)}};return t(e,n),i};var bt=async e=>{e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let n=jt(),i=e.buildId||So(),t=e.projectId,o=Date.now(),r=!!t,c=async a=>{if(t)try{await D.patch(`/builds/${t}/${i}`,{status:"failed",error:a})}catch{}};if(e.local&&e.buildId){e.quiet||n.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let a=await D.get(`/builds/${t}/${e.buildId}/source-url`);if(a.data.status!=="success")throw new Error("Failed to get source download URL from API");let s=await it.get(a.data.downloadUrl,{responseType:"stream"}),d=(t||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),l=he.join(Eo.homedir(),f.workspacesDir,d);oe.mkdirSync(l,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(oe.existsSync(l)){let O=oe.readdirSync(l);for(let k of O){if(u.has(k))continue;if(k==="ios"){let I=he.join(l,"ios");try{let M=oe.readdirSync(I);for(let g of M)if(!p.has(g))try{oe.rmSync(he.join(I,g),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=he.join(l,k);try{oe.rmSync(x,{recursive:!0,force:!0})}catch{}}}let m=he.join(l,"source.zip"),S=s.data,$=oe.createWriteStream(m);await new Promise((O,k)=>{S.pipe($),S.on("error",x=>k(x)),$.on("finish",()=>O())}),new Ci(m).extractAllTo(l,!0);try{oe.unlinkSync(m)}catch{}process.chdir(l),R.info(w.green(`\u2713 Persistent workspace ready: ${l}`)),R.info(w.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${oe.existsSync(he.join(l,"node_modules"))?"\u2705":"\u274C"}, Pods=${oe.existsSync(he.join(l,"ios","Pods"))?"\u2705":"\u274C"}`)),n.stop()}catch(a){n.stop(`Failed to prepare isolated workspace: ${a.message}`),t&&await c(`Setup Error: ${a.message}`),process.exit(1)}}try{let a=e.repo;if(!a)try{a=Oi("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!a&&e.dryRun,a||(a="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${w.cyan(i)}`);let s={},d={},l=xe(`./${f.configFileName}`);if(l){t=l.projectId;let g=e.buildProfile||"production",P=He(l,g);!P&&e.buildProfile&&(R.error(`Build profile '${g}' not found in ${f.configFileName}`),process.exit(1));let A=P||{};process.env.MACH_DEBUG&&R.info(w.dim(`Build profile: ${g} | Platform: ${e.platform} | Distribution: ${A.distribution||"store"} | Environment: ${A.environment||g}`)),A.env&&(d=A.env,R.info(w.blue(`Use Build Profile: ${g}`)));let b=e.platform,C=A[b]||{},H=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=l.name,e.appName=l.name,e.androidPackage=l.android?.package,e.iosBundleIdentifier=l.ios?.bundleIdentifier,e.iosScheme=l.ios?.iosScheme,!e.nodeVersion&&l.nodeVersion&&(e.nodeVersion=l.nodeVersion);for(let F of H){let Z=C[F]!==void 0?C[F]:A[F];Z!==void 0&&e[F]===void 0&&(e[F]=Z)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let B=F=>{if(!F)return F;if(F.startsWith("scripts.")){let Z=F.split(".")[1],K=l.scripts?.[Z];if(K)return K;R.warn(`Script reference not found: ${F}`)}return F};e.buildCommand=B(e.buildCommand),e.preBuild=B(e.preBuild),e.postBuild=B(e.postBuild),!e.scheme&&l.scheme&&(e.scheme=l.scheme);let N={...ze(l,f.envPrefix),...ze(A,`${f.envPrefix}PROFILE_`)};s={...s,...d,...N},process.env.IOS_P12_PASSWORD&&!s.IOS_P12_PASSWORD&&(s.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!s.MATCH_PASSWORD&&(s.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&A.ios?.appleTeamId&&(e.iosTeamId=A.ios.appleTeamId),!e.iosTeamId&&l.submit?.[g]?.ios?.appleTeamId&&(e.iosTeamId=l.submit[g].ios.appleTeamId),!e.iosTeamId&&l.submit?.production?.ios?.appleTeamId&&(R.warn(w.yellow(`Check: Using 'production' Team ID for '${g}' build.`)),e.iosTeamId=l.submit.production.ios.appleTeamId),e.iosTeamId?R.info(w.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):R.warn(w.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=Oi("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let p="1.0.0";try{oe.existsSync("./package.json")&&(p=JSON.parse(oe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let m=e.buildProfile||"production",S="Internal";e.developmentClient?S="DevelopmentClient":m.toLowerCase().includes("store")||m.toLowerCase()==="production"?S="Store":m.toLowerCase().includes("preview")||m.toLowerCase().includes("staging")?S="Staging":(m.toLowerCase().includes("development")||m.toLowerCase().includes("dev"))&&(S="Development");let $=e.platform==="ios"?"iOS":"Android",v=e.platform==="ios"&&e.simulator?" (Simulator)":"",O=`${$}${v} v${p} (${S})`;if(nt(e,{status:"created",projectId:t,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:S,developmentClient:!!e.developmentClient,summary:O}),t){try{let g=e.buildProfile||"production";R.info(w.blue(`Fetching managed secrets for profile: ${g}...`));let P=e.environment||g,b=(await D.get(`/projects/${t}/secrets/export?env=${P}`)).data;b.status==="success"&&b.secrets&&(s={...s,...b.secrets},Object.keys(b.secrets).length>0&&R.info(w.magenta(`\u2713 Injected ${Object.keys(b.secrets).length} secrets from Dashboard.`)))}catch(g){R.warn(`Failed to load managed secrets from Dashboard: ${g.message}`)}try{R.info(w.blue("Fetching managed credentials..."));let g="development";e.distribution==="store"?g="store":e.distribution==="internal"&&(g=e.platform==="ios"?"adhoc":"internal"),S==="Staging"&&e.developmentClient&&(g="development");let P=await D.get("/credentials/resolve",{params:{projectId:t,platform:e.platform,bundleId:e.iosBundleIdentifier||e.androidPackage,distributionType:g}});if(P.data.status==="success"&&P.data.credentials){let A=P.data.credentials;R.info(w.magenta(`\u2713 Found ${A.length} relevant credentials.`));let b=A.filter(N=>{if(N.distributionType){let F=g==="internal"?"adhoc":g;return N.distributionType===F||N.distributionType===g}return!0});R.info(w.dim(`  Filtered to ${b.length} credentials for distributionType: ${g}`));let C=!1,H=!1,B=!1;for(let N of b)if(N.downloadUrl)try{let F="",Z=5;for(;Z>0;)try{let K=await it.get(N.downloadUrl,{responseType:"arraybuffer",timeout:3e4,headers:{Connection:"close"}});F=Buffer.from(K.data).toString("base64");break}catch(K){if(Z--,Z===0)throw K;R.warn(w.dim(`  - Temporary network error downloading ${N.name}. Retrying... (${5-Z}/5)`)),await new Promise(j=>setTimeout(j,2e3))}if(N.type==="ios_cert"&&!C)s.IOS_DIST_P12=F,N.password?(s.IOS_P12_PASSWORD=N.password,R.info(w.dim(`  - Injected ${N.name} as IOS_DIST_P12 with password from credential record`))):R.info(w.dim(`  - Injected ${N.name} as IOS_DIST_P12`)),C=!0;else if(N.type==="ios_profile"&&!H)s.IOS_PROVISIONING_PROFILE=F,R.info(w.dim(`  - Injected ${N.name} as IOS_PROVISIONING_PROFILE`)),H=!0;else if(N.type==="android_keystore"&&!B){s.ANDROID_KEYSTORE_BASE64=F;let K=N.keystorePassword||N.password,j=N.keyPassword||N.keystorePassword||N.password,z=N.alias||N.meta?.alias;if(K)s.ANDROID_STORE_PASSWORD=K,R.info(w.dim("  - Injected keystore password from credential record"));else{let L=["ANDROID_STORE_PASSWORD",...[g==="store"?"PRODUCTION":g==="internal"?"STAGING":"DEVELOPMENT",g.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(U=>`KEYSTORE_PASSWORD_${U}`),"KEYSTORE_PASSWORD"].find(U=>!!s[U]);L&&s[L]&&(s.ANDROID_STORE_PASSWORD=s[L])}if(j?(s.ANDROID_KEY_PASSWORD=j,R.info(w.dim("  - Injected key password from credential record"))):s.ANDROID_KEY_PASSWORD=s.ANDROID_STORE_PASSWORD||"",z)s.ANDROID_KEY_ALIAS=z;else{let ge=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(Ce=>!!s[Ce]);ge&&(s.ANDROID_KEY_ALIAS=s[ge])}R.info(w.dim(`  - Injected ${N.name} as ANDROID_KEYSTORE_BASE64`)),B=!0}}catch(F){R.warn(`Failed to download credential ${N.name}: ${F.message}`)}}if(e.platform==="android"){let A=l.android?.versionCode==="auto"||l.expo?.android?.versionCode==="auto";if(e.autoVersion||A){n.start("Resolving latest versionCode from Google Play...");try{let b=e.androidPackage||l.android?.package||l.expo?.android?.package||l.name,C=(P.data.credentials||[]).find(K=>K.type==="google_service_account"&&(!K.bundleId||K.bundleId===b));if(C||(C=((await D.get(`/credentials/${t}`)).data.credentials||[]).find(j=>j.type==="google_service_account"&&j.bundleId===b)),!C)throw new Error(`Google Service Account not found for package ${b}. Upload it under this package in Dashboard or run '${f.nameLower} credentials:service --platform android --package-name ${b}'.`);let H=await D.get(`/credentials/${C.credentialId}/download`,{params:{projectId:t}});if(H.data.status!=="success"||!H.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let N=(await it.get(H.data.downloadUrl,{headers:{Connection:"close"}})).data,F=await $i(b,N);if(F==null)throw new Error("Could not retrieve any version information from Google Play.");let Z=F+1;s.ANDROID_VERSION_CODE=Z.toString(),n.stop(`\u2713 Resolved versionCode: ${w.green(Z)} (Latest on Play Store: ${F})`)}catch(b){n.stop("Version resolution failed");let C=b.response?.data?.error?.message||b.message;throw new Error(`Auto-versioning failed: ${C}. Fix Google Play service account permissions or remove android.versionCode="auto".`)}}}if(e.platform==="ios"&&!e.simulator){let A=!!s.IOS_DIST_P12,b=!!s.IOS_PROVISIONING_PROFILE;if(!A||!b){let C=[...A?[]:["Distribution Certificate"],...b?[]:["Provisioning Profile"]].join(" and ");R.error(w.red(`Missing iOS credentials: ${C}`)),e.quiet&&process.exit(1);let H=e.yes||await wi({message:"Would you like to generate these credentials now?",initialValue:!0});if(H&&!vi(H))return await Xe({platform:"ios",profile:m}),e.quiet||R.info(w.green("\u2713 Credentials setup complete! Restarting build phase...")),bt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&(e.distribution==="internal"||e.distribution==="store")&&!(!!s.ANDROID_KEYSTORE_BASE64||!!s.ANDROID_KEYSTORE)){R.error(w.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let b=e.yes||await wi({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(b&&!vi(b))return await Xe({platform:"android",profile:m}),e.quiet||R.info(w.green("\u2713 Android Keystore setup complete! Restarting build phase...")),bt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(g){R.warn(`Failed to resolve credentials: ${g.message}`)}}let k=!!(e.local&&e.buildId),x=!!(e.local||e.sshHost),I=!x&&!k;if(k){R.info(w.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let g=await Gt({...e,interactive:!1},i,s,t,{branch:u,version:p,summary:O,buildType:S});await M(g),process.exit(0)}async function M(g){if(t&&g.length>0){let P=jt(),A=[];e.quiet||P.start("Uploading artifacts to Dashboard...");try{for(let b of g){let C=he.basename(b),H=oe.readFileSync(b),B=he.extname(C).toLowerCase(),N="application/octet-stream",F=await D.post(`/builds/${t}/${i}/artifact-upload-url`,{fileName:C,fileType:N});if(F.data.status!=="success")throw new Error(`Failed to get upload URL for ${C}`);let Z=!1;for(let K=1;K<=3;K++)try{await it.put(F.data.uploadUrl,H,{headers:{"Content-Type":N},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),Z=!0;break}catch(j){if(R.warn(w.yellow(`Artifact upload attempt ${K}/3 failed (${j.code||j.message})`)),K<3)await new Promise(z=>setTimeout(z,3e3*K));else throw j}Z&&A.push({name:C,url:F.data.downloadUrl,size:H.length,type:B.substring(1)})}e.quiet||P.stop("Artifacts uploaded.")}catch(b){e.quiet||P.stop("Failed to upload artifacts."),R.error(w.red(`Upload error: ${b.message}`));try{await D.patch(`/builds/${t}/${i}`,{status:"completed",artifacts:g.map(C=>he.basename(C)),endTime:Date.now()})}catch(C){R.warn(w.yellow(`Could not set fallback build status: ${C.message}`))}return}if(t&&A.length>0)try{R.info(w.cyan(`
+`),new Error(ge)}return K}},Ne=e=>{try{let n=_.join(process.cwd(),f.configFileName);if(y.existsSync(n)){let i=JSON.parse(y.readFileSync(n,"utf-8"));if(e==="android"&&i.android?.package)return i.android.package;if(e==="ios"&&i.ios?.bundleIdentifier)return i.ios.bundleIdentifier}if(e==="android"){let i=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let t of i)if(y.existsSync(t)){let r=y.readFileSync(t,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(r)return r[1]}}else{let i=_.resolve(process.cwd(),y.existsSync("ios")?"ios":"."),t=Ke(i,["Info.plist"]).filter(c=>!c.includes("/Pods/")&&!c.includes("/build/")&&!c.includes("/DerivedData/"));t.sort((c,a)=>a.split("/").length-c.split("/").length);for(let c of t){let s=y.readFileSync(c,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(s&&!s[1].includes("$"))return s[1]}let o=Ke(i,[".xcodeproj"]);if(o.length>0){let c=_.join(o[0],"project.pbxproj");if(y.existsSync(c)){let s=y.readFileSync(c,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(s)return s[1]}}let r=["app.json","app.config.json","app.config.js","app.config.ts"];for(let c of r)if(y.existsSync(c)){let s=y.readFileSync(c,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(s)return s[1]}}}catch{return null}return null},ho=()=>{try{return G("emulator -version",{stdio:"ignore"}),"emulator"}catch{let n=be.homedir(),i=[_.join(n,"Library/Android/sdk/emulator/emulator"),_.join(n,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let t of i)if(y.existsSync(t))return t}return"emulator"},yo=async(e,n)=>{let i=Et();try{if(G("adb devices").toString().split(`
+`).slice(1).map(c=>c.trim()).filter(c=>c.length>0&&!c.startsWith("*")).map(c=>c.split("	")[0]).length===0){E.warn(h.yellow("No Android devices or emulators found."));let c=ho(),a=[];try{a=G(`${c} -list-avds`).toString().split(`
+`).filter(s=>s.trim().length>0)}catch{}if(a.length>0){let s=await Bt({message:"Select an emulator to launch:",options:a.map(u=>({value:u,label:u}))});if(At(s))return;i.start(`Launching emulator ${s}...`),Di(c,["-avd",s],{detached:!0,stdio:"ignore"}).unref();let d=0,l=!1;for(;d<60;){try{if(G("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){l=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!l)throw i.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");i.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}i.start("Installing APK on device..."),await we("adb",["install","-r",e],process.cwd(),{},n),i.stop("Installation complete.");let r=Ne("android");if(r){E.info(h.blue(`\u{1F680} Launching ${r}...`));try{G(`adb shell dumpsys package ${r}`).toString().split(`
+`).find(s=>s.includes("android.intent.action.MAIN")&&s.includes("android.intent.category.LAUNCHER"))?G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{E.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(t){i.stop("Installation failed."),E.error(h.red(`Failed to install APK: ${t.message}`))}},So=async(e,n,i)=>{let t=Et();try{if(!G("xcrun simctl list devices booted").toString().includes("(Booted)")){E.warn(h.yellow("No iOS Simulator is currently booted."));let r=G("xcrun simctl list devices --json").toString(),c=JSON.parse(r).devices,a=[];Object.keys(c).forEach(u=>{c[u].forEach(p=>{p.isAvailable&&a.push({...p,runtime:u})})});let s=await Bt({message:"Select a simulator to launch:",options:a.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(At(s))return;t.start(`Booting ${s}...`),G(`xcrun simctl boot ${s}`),G(`open -a Simulator --args -CurrentDeviceUDID ${s}`);let d=0,l=!1;for(;d<30;){try{if(G("xcrun simctl list devices booted").toString().includes(s)){l=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!l)throw t.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");t.stop("Simulator booted.")}t.start("Installing on iOS Simulator..."),await we("xcrun",["simctl","install","booted",e],process.cwd(),{},i),t.stop("Installation complete."),E.info(h.blue(`\u{1F680} Launching ${n}...`)),await we("xcrun",["simctl","launch","booted",n],process.cwd(),{},i)}catch(o){t.stop("Installation failed."),E.error(h.red(`Failed to install on Simulator: ${o.message}`))}},Eo=async(e,n,i)=>{let t=Et();t.start("Scanning for connected iOS devices...");try{let o=G("xcrun devicectl list devices --json-output -").toString(),c=(JSON.parse(o).result?.devices||[]).filter(s=>s.connectionProperties?.transportType==="wired"||s.connectionProperties?.transportType==="localNetwork");if(c.length===0)throw t.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=c[0].identifier;if(c.length>1){t.stop();let s=await Bt({message:"Select a device to install on:",options:c.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(At(s))return;a=s,t.start(`Installing on ${a}...`)}else t.message(`Installing on ${c[0].model.name}...`);await we("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},i),t.stop("Installation complete."),E.info(h.blue(`\u{1F680} Launching ${n}...`)),await we("xcrun",["devicectl","device","launch","app","--device",a,n],process.cwd(),{},i)}catch(o){t.stop("Installation failed."),E.error(h.red(`Failed to install on device: ${o.message}`)),E.info(h.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import It from"fs";function xe(e){if(e){if(!It.existsSync(e))return null;try{return JSON.parse(It.readFileSync(e,"utf-8"))}catch{return null}}if(!It.existsSync(`./${f.configFileName}`))return null;try{return JSON.parse(It.readFileSync(`./${f.configFileName}`,"utf-8"))}catch{return null}}function He(e,n,i=new Set){if(i.has(n))throw new Error(`Circular inheritance detected in profile: ${n}`);i.add(n);let t=e.build?.[n];if(!t)return null;let o={...t};if(t.extends){let r=He(e,t.extends,i);r&&(o={...r,...t,env:{...r.env,...t.env},ios:{...r.ios,...t.ios},android:{...r.android,...t.android}})}if(o.envGroups&&Array.isArray(o.envGroups)){let r={};for(let c of o.envGroups){let a=e.envGroups?.[c];a?Object.assign(r,a):log.warn(`Environment group not found: ${c}`)}o.env={...r,...o.env}}return o}var ze=(e,n=`${f.envPrefix}`)=>{let i={},t=(o,r)=>{if(o)for(let c in o){let a=o[c],s=`${r}${c.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;a!==null&&typeof a=="object"&&!Array.isArray(a)?t(a,`${s}_`):i[s]=String(a)}};return t(e,n),i};var bt=async e=>{e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let n=jt(),i=e.buildId||Ao(),t=e.projectId,o=Date.now(),r=!!t,c=async a=>{if(t)try{await D.patch(`/builds/${t}/${i}`,{status:"failed",error:a})}catch{}};if(e.local&&e.buildId){e.quiet||n.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let a=await D.get(`/builds/${t}/${e.buildId}/source-url`);if(a.data.status!=="success")throw new Error("Failed to get source download URL from API");let s=await it.get(a.data.downloadUrl,{responseType:"stream"}),d=(t||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),l=he.join(Io.homedir(),f.workspacesDir,d);oe.mkdirSync(l,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(oe.existsSync(l)){let O=oe.readdirSync(l);for(let k of O){if(u.has(k))continue;if(k==="ios"){let I=he.join(l,"ios");try{let M=oe.readdirSync(I);for(let g of M)if(!p.has(g))try{oe.rmSync(he.join(I,g),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=he.join(l,k);try{oe.rmSync(x,{recursive:!0,force:!0})}catch{}}}let m=he.join(l,"source.zip"),S=s.data,$=oe.createWriteStream(m);await new Promise((O,k)=>{S.pipe($),S.on("error",x=>k(x)),$.on("finish",()=>O())}),new Ci(m).extractAllTo(l,!0);try{oe.unlinkSync(m)}catch{}process.chdir(l),R.info(w.green(`\u2713 Persistent workspace ready: ${l}`)),R.info(w.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${oe.existsSync(he.join(l,"node_modules"))?"\u2705":"\u274C"}, Pods=${oe.existsSync(he.join(l,"ios","Pods"))?"\u2705":"\u274C"}`)),n.stop()}catch(a){n.stop(`Failed to prepare isolated workspace: ${a.message}`),t&&await c(`Setup Error: ${a.message}`),process.exit(1)}}try{let a=e.repo;if(!a)try{a=Oi("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!a&&e.dryRun,a||(a="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${w.cyan(i)}`);let s={},d={},l=xe(`./${f.configFileName}`);if(l){t=l.projectId;let g=e.buildProfile||"production",P=He(l,g);!P&&e.buildProfile&&(R.error(`Build profile '${g}' not found in ${f.configFileName}`),process.exit(1));let A=P||{};process.env.MACH_DEBUG&&R.info(w.dim(`Build profile: ${g} | Platform: ${e.platform} | Distribution: ${A.distribution||"store"} | Environment: ${A.environment||g}`)),A.env&&(d=A.env,R.info(w.blue(`Use Build Profile: ${g}`)));let b=e.platform,C=A[b]||{},H=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=l.name,e.appName=l.name,e.androidPackage=l.android?.package,e.iosBundleIdentifier=l.ios?.bundleIdentifier,e.iosScheme=l.ios?.iosScheme,!e.nodeVersion&&l.nodeVersion&&(e.nodeVersion=l.nodeVersion);for(let F of H){let Z=C[F]!==void 0?C[F]:A[F];Z!==void 0&&e[F]===void 0&&(e[F]=Z)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let B=F=>{if(!F)return F;if(F.startsWith("scripts.")){let Z=F.split(".")[1],K=l.scripts?.[Z];if(K)return K;R.warn(`Script reference not found: ${F}`)}return F};e.buildCommand=B(e.buildCommand),e.preBuild=B(e.preBuild),e.postBuild=B(e.postBuild),!e.scheme&&l.scheme&&(e.scheme=l.scheme);let N={...ze(l,f.envPrefix),...ze(A,`${f.envPrefix}PROFILE_`)};s={...s,...d,...N},process.env.IOS_P12_PASSWORD&&!s.IOS_P12_PASSWORD&&(s.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!s.MATCH_PASSWORD&&(s.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&A.ios?.appleTeamId&&(e.iosTeamId=A.ios.appleTeamId),!e.iosTeamId&&l.submit?.[g]?.ios?.appleTeamId&&(e.iosTeamId=l.submit[g].ios.appleTeamId),!e.iosTeamId&&l.submit?.production?.ios?.appleTeamId&&(R.warn(w.yellow(`Check: Using 'production' Team ID for '${g}' build.`)),e.iosTeamId=l.submit.production.ios.appleTeamId),e.iosTeamId?R.info(w.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):R.warn(w.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=Oi("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let p="1.0.0";try{oe.existsSync("./package.json")&&(p=JSON.parse(oe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let m=e.buildProfile||"production",S="Internal";e.developmentClient?S="DevelopmentClient":m.toLowerCase().includes("store")||m.toLowerCase()==="production"?S="Store":m.toLowerCase().includes("preview")||m.toLowerCase().includes("staging")?S="Staging":(m.toLowerCase().includes("development")||m.toLowerCase().includes("dev"))&&(S="Development");let $=e.platform==="ios"?"iOS":"Android",v=e.platform==="ios"&&e.simulator?" (Simulator)":"",O=`${$}${v} v${p} (${S})`;if(nt(e,{status:"created",projectId:t,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:S,developmentClient:!!e.developmentClient,summary:O}),t){try{let g=e.buildProfile||"production";R.info(w.blue(`Fetching managed secrets for profile: ${g}...`));let P=e.environment||g,b=(await D.get(`/projects/${t}/secrets/export?env=${P}`)).data;b.status==="success"&&b.secrets&&(s={...s,...b.secrets},Object.keys(b.secrets).length>0&&R.info(w.magenta(`\u2713 Injected ${Object.keys(b.secrets).length} secrets from Dashboard.`)))}catch(g){R.warn(`Failed to load managed secrets from Dashboard: ${g.message}`)}try{R.info(w.blue("Fetching managed credentials..."));let g="development";e.distribution==="store"?g="store":e.distribution==="internal"&&(g=e.platform==="ios"?"adhoc":"internal"),S==="Staging"&&e.developmentClient&&(g="development");let P=await D.get("/credentials/resolve",{params:{projectId:t,platform:e.platform,bundleId:e.iosBundleIdentifier||e.androidPackage,distributionType:g}});if(P.data.status==="success"&&P.data.credentials){let A=P.data.credentials;R.info(w.magenta(`\u2713 Found ${A.length} relevant credentials.`));let b=A.filter(N=>{if(N.distributionType){let F=g==="internal"?"adhoc":g;return N.distributionType===F||N.distributionType===g}return!0});R.info(w.dim(`  Filtered to ${b.length} credentials for distributionType: ${g}`));let C=!1,H=!1,B=!1;for(let N of b)if(N.downloadUrl)try{let F="",Z=5;for(;Z>0;)try{let K=await it.get(N.downloadUrl,{responseType:"arraybuffer",timeout:3e4,headers:{Connection:"close"}});F=Buffer.from(K.data).toString("base64");break}catch(K){if(Z--,Z===0)throw K;R.warn(w.dim(`  - Temporary network error downloading ${N.name}. Retrying... (${5-Z}/5)`)),await new Promise(j=>setTimeout(j,2e3))}if(N.type==="ios_cert"&&!C)s.IOS_DIST_P12=F,N.password?(s.IOS_P12_PASSWORD=N.password,R.info(w.dim(`  - Injected ${N.name} as IOS_DIST_P12 with password from credential record`))):R.info(w.dim(`  - Injected ${N.name} as IOS_DIST_P12`)),C=!0;else if(N.type==="ios_profile"&&!H)s.IOS_PROVISIONING_PROFILE=F,R.info(w.dim(`  - Injected ${N.name} as IOS_PROVISIONING_PROFILE`)),H=!0;else if(N.type==="android_keystore"&&!B){s.ANDROID_KEYSTORE_BASE64=F;let K=N.keystorePassword||N.password,j=N.keyPassword||N.keystorePassword||N.password,z=N.alias||N.meta?.alias;if(K)s.ANDROID_STORE_PASSWORD=K,R.info(w.dim("  - Injected keystore password from credential record"));else{let L=["ANDROID_STORE_PASSWORD",...[g==="store"?"PRODUCTION":g==="internal"?"STAGING":"DEVELOPMENT",g.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(U=>`KEYSTORE_PASSWORD_${U}`),"KEYSTORE_PASSWORD"].find(U=>!!s[U]);L&&s[L]&&(s.ANDROID_STORE_PASSWORD=s[L])}if(j?(s.ANDROID_KEY_PASSWORD=j,R.info(w.dim("  - Injected key password from credential record"))):s.ANDROID_KEY_PASSWORD=s.ANDROID_STORE_PASSWORD||"",z)s.ANDROID_KEY_ALIAS=z;else{let ge=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(Ce=>!!s[Ce]);ge&&(s.ANDROID_KEY_ALIAS=s[ge])}R.info(w.dim(`  - Injected ${N.name} as ANDROID_KEYSTORE_BASE64`)),B=!0}}catch(F){R.warn(`Failed to download credential ${N.name}: ${F.message}`)}}if(e.platform==="android"){let A=l.android?.versionCode==="auto"||l.expo?.android?.versionCode==="auto";if(e.autoVersion||A){n.start("Resolving latest versionCode from Google Play...");try{let b=e.androidPackage||l.android?.package||l.expo?.android?.package||l.name,C=(P.data.credentials||[]).find(K=>K.type==="google_service_account"&&(!K.bundleId||K.bundleId===b));if(C||(C=((await D.get(`/credentials/${t}`)).data.credentials||[]).find(j=>j.type==="google_service_account"&&j.bundleId===b)),!C)throw new Error(`Google Service Account not found for package ${b}. Upload it under this package in Dashboard or run '${f.nameLower} credentials:service --platform android --package-name ${b}'.`);let H=await D.get(`/credentials/${C.credentialId}/download`,{params:{projectId:t}});if(H.data.status!=="success"||!H.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let N=(await it.get(H.data.downloadUrl,{headers:{Connection:"close"}})).data,F=await $i(b,N);if(F==null)throw new Error("Could not retrieve any version information from Google Play.");let Z=F+1;s.ANDROID_VERSION_CODE=Z.toString(),n.stop(`\u2713 Resolved versionCode: ${w.green(Z)} (Latest on Play Store: ${F})`)}catch(b){n.stop("Version resolution failed");let C=b.response?.data?.error?.message||b.message;throw new Error(`Auto-versioning failed: ${C}. Fix Google Play service account permissions or remove android.versionCode="auto".`)}}}if(e.platform==="ios"&&!e.simulator){let A=!!s.IOS_DIST_P12,b=!!s.IOS_PROVISIONING_PROFILE;if(!A||!b){let C=[...A?[]:["Distribution Certificate"],...b?[]:["Provisioning Profile"]].join(" and ");R.error(w.red(`Missing iOS credentials: ${C}`)),e.quiet&&process.exit(1);let H=e.yes||await wi({message:"Would you like to generate these credentials now?",initialValue:!0});if(H&&!vi(H))return await Xe({platform:"ios",profile:m}),e.quiet||R.info(w.green("\u2713 Credentials setup complete! Restarting build phase...")),bt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&(e.distribution==="internal"||e.distribution==="store")&&!(!!s.ANDROID_KEYSTORE_BASE64||!!s.ANDROID_KEYSTORE)){R.error(w.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let b=e.yes||await wi({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(b&&!vi(b))return await Xe({platform:"android",profile:m}),e.quiet||R.info(w.green("\u2713 Android Keystore setup complete! Restarting build phase...")),bt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(g){R.warn(`Failed to resolve credentials: ${g.message}`)}}let k=!!(e.local&&e.buildId),x=!!(e.local||e.sshHost),I=!x&&!k;if(k){R.info(w.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let g=await Gt({...e,interactive:!1},i,s,t,{branch:u,version:p,summary:O,buildType:S});await M(g),process.exit(0)}async function M(g){if(t&&g.length>0){let P=jt(),A=[];e.quiet||P.start("Uploading artifacts to Dashboard...");try{for(let b of g){let C=he.basename(b),H=oe.readFileSync(b),B=he.extname(C).toLowerCase(),N="application/octet-stream",F=await D.post(`/builds/${t}/${i}/artifact-upload-url`,{fileName:C,fileType:N});if(F.data.status!=="success")throw new Error(`Failed to get upload URL for ${C}`);let Z=!1;for(let K=1;K<=3;K++)try{await it.put(F.data.uploadUrl,H,{headers:{"Content-Type":N},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),Z=!0;break}catch(j){if(R.warn(w.yellow(`Artifact upload attempt ${K}/3 failed (${j.code||j.message})`)),K<3)await new Promise(z=>setTimeout(z,3e3*K));else throw j}Z&&A.push({name:C,url:F.data.downloadUrl,size:H.length,type:B.substring(1)})}e.quiet||P.stop("Artifacts uploaded.")}catch(b){e.quiet||P.stop("Failed to upload artifacts."),R.error(w.red(`Upload error: ${b.message}`));try{await D.patch(`/builds/${t}/${i}`,{status:"completed",artifacts:g.map(C=>he.basename(C)),endTime:Date.now()})}catch(C){R.warn(w.yellow(`Could not set fallback build status: ${C.message}`))}return}if(t&&A.length>0)try{R.info(w.cyan(`
 \u{1F517} Download Links:`));for(let b of A)R.info(w.dim(`  - ${b.name}: `)+w.blue.underline(b.url));await D.patch(`/builds/${t}/${i}`,{status:"success",artifacts:A,endTime:Date.now()}),nt(e,{status:"success",projectId:t,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:S,developmentClient:!!e.developmentClient,summary:O,artifacts:A}),R.success(w.green(`
 \u2713 Build completed and reported to dashboard.`))}catch(b){R.warn(w.yellow(`
-\u26A0\uFE0F Could not report to dashboard: ${b.message}`))}}else if(t)try{await D.patch(`/builds/${t}/${i}`,{status:"completed",endTime:Date.now()}),nt(e,{status:"completed",projectId:t,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:S,developmentClient:!!e.developmentClient,summary:O})}catch{}}if(x){if(R.info(w.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),t&&!r){let g=process.argv.slice(3).join(" ");await D.post("/builds",{projectId:t,buildId:i,platform:e.platform,status:"building",branch:u,version:p,summary:O,startTime:o,buildType:S,buildProfile:m,buildArgs:g,simulator:!!e.simulator,developmentClient:!!e.developmentClient})}if(e.sshHost&&e.platform==="ios"){let g=await _i(e,i,s,t)}else{let g=await Gt({...e,interactive:!!e.local},i,s,t,{branch:u,version:p,summary:O,buildType:S});await M(g)}return}if(I&&(R.info(w.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||n.start("Zipping and uploading local source...");let g=await D.post("/builds/source-upload-url",{projectId:t,buildId:i});if(g.data.status!=="success")throw n.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");let P=new Ci,A=oe.readdirSync("."),b=["node_modules",".git","dist","build","builds",".gradle",".idea","android/build","ios/build","ios/Pods",`.${f.nameLower}_cli`];for(let B of A){if(b.includes(B))continue;oe.statSync(B).isDirectory()?P.addLocalFolder(B,B):P.addLocalFile(B)}let C=P.toBuffer();e.quiet||n.message(`Uploading source (${(C.length/1024/1024).toFixed(1)} MB)...`);let H=!1;for(let B=1;B<=3;B++)try{await it.put(g.data.uploadUrl,C,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),H=!0;break}catch(N){if(B<3)n.message(`Upload attempt ${B} failed (${N.code||N.message}), retrying...`),await new Promise(F=>setTimeout(F,2e3*B));else throw N}if(e.quiet||n.stop("Source uploaded"),t){let B=process.argv.slice(3).join(" ");await D.post("/builds",{projectId:t,buildId:i,platform:e.platform,status:"pending",branch:u,version:p,summary:O,startTime:o,buildType:S,buildProfile:m,buildArgs:B,simulator:!!e.simulator,developmentClient:!!e.developmentClient}),R.info(w.green("\u2713 Cloud build registered."))}e.platform==="android"&&await Ii(e,i,s,t,e.preBuild),e.quiet||R.info(w.cyan("\u{1F4E1} Connecting to build stream...")),await Ao(t,i,e);return}}catch(a){let s=a.message||"Build failed";a.response?.data?.message?s=a.response.data.message:a.message.includes("status code 402")?s="Insufficient wallet balance. Please add credits in the Dashboard.":a.message.includes("status code 403")&&(s="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),t&&!e.local&&await c(s),R.error(w.red(`\u2717 Build failed: ${s}`)),process.exit(1)}};function Ni(e){return`${Mt}/build/${e}`}function nt(e,n){if(!e.jsonOutput)return;let i=he.resolve(e.jsonOutput),t={...n,url:n.url||Ni(n.buildId),dashboardUrl:n.dashboardUrl||Ni(n.buildId),updatedAt:new Date().toISOString()};try{let o=he.dirname(i);o&&o!=="."&&oe.mkdirSync(o,{recursive:!0}),oe.writeFileSync(i,JSON.stringify(t,null,2))}catch(o){R.warn(w.yellow(`Could not write build metadata JSON: ${o.message}`))}}async function Ao(e,n,i){let t=jt(),o="pending",r=0,c=0;for(i.quiet||t.start("Connecting to build stream...");;){try{let s=(await D.get(`/builds/${e}/${n}`)).data.build;if(s){if(o=s.status,o==="building")i.quiet||t.message("Build in progress...");else if(o==="failed")i.quiet||t.stop("Build failed."),nt(i,{status:"failed",projectId:e,buildId:n,platform:i.platform,profile:s.buildProfile,buildType:s.buildType,developmentClient:!!s.developmentClient,version:s.version,summary:s.summary,error:s.error||"Unknown error",artifacts:s.artifacts||[]}),R.error(w.red(`
+\u26A0\uFE0F Could not report to dashboard: ${b.message}`))}}else if(t)try{await D.patch(`/builds/${t}/${i}`,{status:"completed",endTime:Date.now()}),nt(e,{status:"completed",projectId:t,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:S,developmentClient:!!e.developmentClient,summary:O})}catch{}}if(x){if(R.info(w.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),t&&!r){let g=process.argv.slice(3).join(" ");await D.post("/builds",{projectId:t,buildId:i,platform:e.platform,status:"building",branch:u,version:p,summary:O,startTime:o,buildType:S,buildProfile:m,buildArgs:g,simulator:!!e.simulator,developmentClient:!!e.developmentClient})}if(e.sshHost&&e.platform==="ios"){let g=await _i(e,i,s,t)}else{let g=await Gt({...e,interactive:!!e.local},i,s,t,{branch:u,version:p,summary:O,buildType:S});await M(g)}return}if(I&&(R.info(w.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||n.start("Zipping and uploading local source...");let g=await D.post("/builds/source-upload-url",{projectId:t,buildId:i});if(g.data.status!=="success")throw n.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");let P=new Ci,A=oe.readdirSync("."),b=["node_modules",".git","dist","build","builds",".gradle",".idea","android/build","ios/build","ios/Pods",`.${f.nameLower}_cli`];for(let B of A){if(b.includes(B))continue;oe.statSync(B).isDirectory()?P.addLocalFolder(B,B):P.addLocalFile(B)}let C=P.toBuffer();e.quiet||n.message(`Uploading source (${(C.length/1024/1024).toFixed(1)} MB)...`);let H=!1;for(let B=1;B<=3;B++)try{await it.put(g.data.uploadUrl,C,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),H=!0;break}catch(N){if(B<3)n.message(`Upload attempt ${B} failed (${N.code||N.message}), retrying...`),await new Promise(F=>setTimeout(F,2e3*B));else throw N}if(e.quiet||n.stop("Source uploaded"),t){let B=process.argv.slice(3).join(" ");await D.post("/builds",{projectId:t,buildId:i,platform:e.platform,status:"pending",branch:u,version:p,summary:O,startTime:o,buildType:S,buildProfile:m,buildArgs:B,simulator:!!e.simulator,developmentClient:!!e.developmentClient}),R.info(w.green("\u2713 Cloud build registered."))}e.platform==="android"&&await Ii(e,i,s,t,e.preBuild),e.quiet||R.info(w.cyan("\u{1F4E1} Connecting to build stream...")),await bo(t,i,e);return}}catch(a){let s=a.message||"Build failed";a.response?.data?.message?s=a.response.data.message:a.message.includes("status code 402")?s="Insufficient wallet balance. Please add credits in the Dashboard.":a.message.includes("status code 403")&&(s="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),t&&!e.local&&await c(s),R.error(w.red(`\u2717 Build failed: ${s}`)),process.exit(1)}};function Ni(e){return`${Mt}/build/${e}`}function nt(e,n){if(!e.jsonOutput)return;let i=he.resolve(e.jsonOutput),t={...n,url:n.url||Ni(n.buildId),dashboardUrl:n.dashboardUrl||Ni(n.buildId),updatedAt:new Date().toISOString()};try{let o=he.dirname(i);o&&o!=="."&&oe.mkdirSync(o,{recursive:!0}),oe.writeFileSync(i,JSON.stringify(t,null,2))}catch(o){R.warn(w.yellow(`Could not write build metadata JSON: ${o.message}`))}}async function bo(e,n,i){let t=jt(),o="pending",r=0,c=0;for(i.quiet||t.start("Connecting to build stream...");;){try{let s=(await D.get(`/builds/${e}/${n}`)).data.build;if(s){if(o=s.status,o==="building")i.quiet||t.message("Build in progress...");else if(o==="failed")i.quiet||t.stop("Build failed."),nt(i,{status:"failed",projectId:e,buildId:n,platform:i.platform,profile:s.buildProfile,buildType:s.buildType,developmentClient:!!s.developmentClient,version:s.version,summary:s.summary,error:s.error||"Unknown error",artifacts:s.artifacts||[]}),R.error(w.red(`
 \u2717 Build failed: ${s.error||"Unknown error"}`)),process.exit(1);else if(o==="completed"||o==="success"){i.quiet||t.stop("Build successful!"),nt(i,{status:o,projectId:e,buildId:n,platform:i.platform,profile:s.buildProfile,buildType:s.buildType,developmentClient:!!s.developmentClient,version:s.version,summary:s.summary,artifacts:s.artifacts||[]}),R.success(w.green(`
 \u2713 Build completed successfully!`));try{i.quiet||(R.info(w.magenta(`
 \u{1F4F1} Installation Hub:`)),R.info(w.dim("  - View & Install Build: ")+w.white.underline(`${Mt}/build/${n}`)))}catch{}return}else if(o!=="pending"){i.quiet||t.stop(`Build status: ${o}`);return}}try{let l=(await D.get(`/builds/${e}/${n}/logs`)).data;if(l&&typeof l=="string"&&!i.quiet){let u=l.split(`
 `);if(u.length>r){for(let p=r;p<u.length;p++)u[p].trim()&&console.log(w.dim(`  ${u[p]}`));r=u.length}}}catch{}c=0}catch{c++,c>10&&(t.stop("Connection lost."),R.error(w.red(`
-\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(a=>setTimeout(a,3e3))}}import Io from"http";import{execSync as we}from"child_process";import Kt from"chalk";import{log as Ve}from"@clack/prompts";import bo from"axios";import Vt from"fs";import _o from"os";import zt from"path";var ot=7070;function $o(){let e=[];try{let n=we("adb devices -l",{stdio:"pipe"}).toString(),i=new Set;n.split(`
-`).forEach(t=>{if(t.includes("List of devices")||!t.trim())return;let o=t.split(/\s+/);if(o.length<2||o[1]!=="device")return;let r=o[0];i.add(r);let c=t.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:c?c[1].replace(/_/g," "):r,status:"online",details:t.trim()})})}catch{}try{let n=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`,t=we(`${n} -list-avds`,{stdio:"pipe"}).toString().split(`
-`).filter(r=>!!r.trim()),o=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));t.forEach(r=>{o||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}if(process.platform!=="darwin")return e;try{let n=we("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),i=JSON.parse(n);Object.entries(i.devices).forEach(([t,o])=>{o.forEach(r=>{r.isAvailable&&e.push({id:r.udid,platform:"ios",type:"simulator",name:r.name,status:r.state?.toLowerCase()==="booted"?"online":"offline",runtime:t,details:`${r.name} (${t})`})})})}catch{}try{let n=we("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(n).result?.devices||[]).forEach(t=>{let o=t.connectionProperties?.transportType;(o==="wired"||o==="localNetwork")&&e.push({id:t.identifier,platform:"ios",type:"physical",name:t.deviceProperties?.name||"iPhone",status:"online",details:`${t.deviceProperties?.name||"iPhone"} (${t.model?.name||t.hardwareModel||""}) - ${o}`})})}catch{}return e}async function Po(e){let n=[];for await(let i of e)n.push(Buffer.isBuffer(i)?i:Buffer.from(i));return n.length===0?{}:JSON.parse(Buffer.concat(n).toString("utf-8"))}async function Do(e,n){let i=await bo({method:"GET",url:e,responseType:"stream",timeout:12e4}),t=Vt.createWriteStream(n);i.data.pipe(t),await new Promise((o,r)=>{t.on("finish",o),t.on("error",r)})}async function Ro(e,n,i){let t=i||(n.toLowerCase().includes(".apk")?"android":"ios"),o=n.toLowerCase().includes(".ipa"),r=Vt.mkdtempSync(zt.join(_o.tmpdir(),`${ot}-install-`)),c=zt.join(r,t==="android"?"install.apk":o?"install.ipa":"install.zip");try{if(await Do(n,c),t==="android"){we(`adb -s ${JSON.stringify(e)} install -r ${JSON.stringify(c)}`,{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");we(`unzip -o ${JSON.stringify(c)} -d ${JSON.stringify(r)}`,{stdio:"pipe"});let a="";try{a=we(`find ${JSON.stringify(zt.join(r,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(a||(a=we(`find ${JSON.stringify(r)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!a)throw new Error(`No .app bundle found inside the ${o?"IPA":"archive"}.`);try{we(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch(s){try{we(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch{throw new Error(s.stderr?.toString().trim()||s.message||"iOS install failed.")}}}finally{Vt.rmSync(r,{recursive:!0,force:!0})}}async function Ti(){process.platform!=="darwin"&&Ve.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Io.createServer((i,t)=>{if(t.setHeader("Access-Control-Allow-Origin","*"),t.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),t.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){t.writeHead(204),t.end();return}let o=new URL(i.url||"/",`http://localhost:${ot}`);if(i.method==="GET"&&o.pathname==="/local/devices"){try{let r=$o();t.writeHead(200,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"success",targets:r}))}catch(r){t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"error",message:r.message}))}return}if(i.method==="POST"&&o.pathname==="/install-local"){n(i,t);return}t.writeHead(404),t.end()}),n=async(i,t)=>{try{let{deviceId:o,artifactUrl:r,platform:c}=await Po(i);if(!o||!r){t.writeHead(400,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Ro(o,r,c),t.writeHead(200,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}};e.listen(ot,"127.0.0.1",()=>{Ve.success(Kt.green(`Local device agent running on http://localhost:${ot}`)),Ve.info(Kt.dim("Keep this running while using the Install Hub on the dashboard.")),Ve.info(Kt.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?Ve.error(`Port ${ot} is already in use \u2014 agent may already be running.`):Ve.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as rs}from"module";import{text as vo,password as Oo,spinner as Co,isCancel as Li}from"@clack/prompts";import qt from"chalk";import rt from"fs";import ki from"path";import wo from"os";var Wt=ki.join(wo.homedir(),f.configDir),Yt=ki.join(Wt,"config.json");function Jt(){if(!rt.existsSync(Yt))return{};try{return JSON.parse(rt.readFileSync(Yt,"utf-8"))}catch{return{}}}function xi(e){rt.existsSync(Wt)||rt.mkdirSync(Wt,{recursive:!0});let i={...Jt(),...e};rt.writeFileSync(Yt,JSON.stringify(i,null,2))}async function Ui(){let e=Jt(),n=await vo({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(o){if(o.length===0)return"Email is required!"}});if(Li(n))return;let i=await Oo({message:"Enter your password:",validate(o){if(o.length===0)return"Password is required!"}});if(Li(i))return;let t=Co();t.start("Authenticating...");try{let r=await(await fetch(`${yt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:n,password:i})})).json();r.status==="success"&&r.user.token?(ai({id:r.user.id,email:n,token:r.user.token,refreshToken:r.user.refreshToken}),xi({lastLoginEmail:n}),t.stop(qt.green("Login successful!"))):t.stop(qt.red("Login failed: "+(r.message||"Unknown error")))}catch(o){t.stop(qt.red("Network error: "+o.message))}}import{outro as No,select as To,spinner as ko,isCancel as xo}from"@clack/prompts";import _t from"chalk";import Xt from"fs";import Lo from"path";async function Mi(){if(!pe()){console.log(_t.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=ko();n.start("Fetching projects...");try{let{data:i}=await D.get("/projects");if(n.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log(_t.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let t=i.projects.map(u=>({value:u.projectId,label:`${u.name} (${u.slug})`})),o=await To({message:"Select a project to link:",options:t});if(xo(o))return;let r=Lo.join(process.cwd(),f.configFileName),c={};if(Xt.existsSync(r))try{c=JSON.parse(Xt.readFileSync(r,"utf-8"))}catch{}let a=i.projects.find(u=>u.projectId===o),s=c.android?.package||Ne("android"),d=c.ios?.bundleIdentifier||Ne("ios"),l={projectId:o,name:a?.name,slug:a?.slug,scheme:a?.slug?.toLowerCase()||"app",android:{package:s||""},ios:{bundleIdentifier:d||""},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:c.submit?.production?.android||{track:"internal"},ios:{ascAppId:c.submit?.production?.ios?.ascAppId||"1234567890",appleTeamId:c.submit?.production?.ios?.appleTeamId||"ABC123DEFG"}}}};Xt.writeFileSync(r,JSON.stringify(l,null,2)),No(_t.green(`Linked to project ${l.name} (${l.slug})`))}catch(i){n.stop(_t.red("Error fetching projects: "+i.message))}}import{outro as Uo,text as $t,select as Mo,spinner as Fo,isCancel as st}from"@clack/prompts";import at from"chalk";import Ho from"fs";import Bo from"path";import{randomUUID as Go}from"crypto";async function Fi(){if(!pe()){console.log(at.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=await $t({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(st(n))return;let i=await $t({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(st(i))return;let t=await Mo({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(st(t))return;let o="";if(t==="android"||t==="all"){let a=Ne("android");if(o=await $t({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Package name is required for Android!"}}),st(o))return}let r="";if(t==="ios"||t==="all"){let a=Ne("ios");if(r=await $t({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Bundle ID is required for iOS!"}}),st(r))return}let c=Fo();c.start("Creating project...");try{let a=Go(),d={projectId:a,name:n,slug:i,storageType:"managed",platforms:t==="all"?["android","ios","web"]:[t]},{data:l}=await D.post("/projects",d);if(l.status==="success"){c.stop(at.green("Project created successfully!"));let u=Bo.join(process.cwd(),f.configFileName);Ho.writeFileSync(u,JSON.stringify({projectId:a,name:n,slug:i,...o?{android:{package:o}}:{},...r?{ios:{bundleIdentifier:r}}:{},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal"},ios:{ascAppId:"1234567890",appleTeamId:"ABC123DEFG",...r?{bundleId:r}:{}}}}},null,2)),Uo(at.green(`Initialized project ${n} and linked locally!`))}else c.stop(at.red("creation failed: "+l.message))}catch(a){c.stop(at.red("Network error: "+a.message))}}import{spinner as Bi,log as ye}from"@clack/prompts";import Pt from"chalk";import Hi from"fs";import jo from"path";async function Gi(e,n){let i=pe();if(!i){ye.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let t=jo.join(process.cwd(),f.configFileName);if(!Hi.existsSync(t)){ye.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Hi.readFileSync(t,"utf-8"))}catch{ye.error(`Failed to parse ${f.configFileName}`);return}let{projectId:r}=o;if(!r){ye.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await Ko(r,n,i):e==="list"?await zo(r,i):ye.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function Ko(e,n,i){if(n.length===0){ye.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let t=Bi();t.start("Setting environment variables...");let o=0,r=0;for(let c of n){let[a,...s]=c.split("="),d=s.join("=");if(!a||d===void 0){ye.warn(`Invalid format for argument: ${c}. Expected KEY=VALUE.`),r++;continue}try{let l={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await D.post(`/projects/${e}/secrets`,l);u.status==="success"?o++:(ye.error(`Failed to set ${a}: ${u.message}`),r++)}catch(l){ye.error(`Network error setting ${a}: ${l.message}`),r++}}t.stop(`Set ${o} variable(s). ${r>0?`${r} failed.`:""}`)}async function zo(e,n){let i=Bi();i.start("Fetching environment variables...");try{let{data:t}=await D.get(`/projects/${e}/secrets`);if(t.status==="success"){i.stop("Fetched variables.");let o=t.secrets||[];o.length===0?ye.info("No environment variables found for this project."):(ye.info(Pt.bold("Environment Variables (Global & Scoped):")),o.forEach(r=>{let c=r.visibility==="plain"?r.value:"********";console.log(`  ${Pt.cyan(r.key)} = ${c}  ${Pt.gray(`[${r.environment}]`)}`)}))}else i.stop(Pt.red(`Failed to fetch variables: ${t.message}`))}catch(t){i.stop("Failed to fetch variables."),ye.error(`Network error: ${t.message}`)}}import{spinner as lt,text as ct,select as Qt,isCancel as Le,cancel as ei}from"@clack/prompts";import re from"chalk";import ie from"fs";import Ue from"path";import{spawn as Ki}from"child_process";import zi from"axios";import ti from"os";import Vo from"crypto";async function Vi(e){let n=lt(),i=pe(),t=`./${f.configFileName}`;if(!ie.existsSync(t)){de(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o=JSON.parse(ie.readFileSync(t,"utf-8")),{projectId:r}=o,c=e.profile||e.buildProfile||"production";if(!r){de(`${f.configFileName} is missing projectId.`);return}ve(re.dim(`Submit for project: ${o.name||r} | Profile: ${c}`));let a=e.platform;if(!a){let O=await Qt({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Le(O)){ei("Operation cancelled");return}a=O}let s=await Yo(r,a,e,i?.token);if(!s)return;ve(`Using artifact: ${re.green(Ue.basename(s))} `);let d=a==="android"?Wo(o,c):void 0;n.start("Fetching submission credentials from Dashboard...");let l;try{let k=(await D.get(`/credentials/${r}`)).data.credentials||[];if(a==="android"&&!d){n.stop("Package name missing"),de("Could not resolve Android package name. Set android.package in mach.config.json/app.json.");return}let x=k.filter(I=>a==="ios"?I.type==="asc_api_key":I.type==="google_service_account"&&I.bundleId===d);if(x.length===0){n.stop("Credentials missing"),de(a==="android"?`No Google Play service credential found for package ${d}.`:`No Service Credentials found for ${a}.`),ve(a==="android"?`Use '${f.nameLower} credentials:service --platform android --package-name ${d}' or upload it under that package in the Dashboard.`:`Use '${f.nameLower} credentials:service --platform ${a}' or use the Dashboard to upload them.`);return}if(x.length===1)l=x[0],n.stop(`Using: ${l.name}`);else{n.stop("Multiple credentials found");let I=await Qt({message:`Choose a ${a==="ios"?"App Store Connect":"Google Play"} credential:`,options:x.map(M=>({value:M.credentialId,label:M.name,hint:`${M.keyId?`ID: ${M.keyId}`:""} ${M.issuerId?`(Issuer: ${M.issuerId.substring(0,8)}...)`:""}`}))});if(Le(I)){ei("Submission cancelled");return}l=x.find(M=>M.credentialId===I),ve(`Using selected: ${re.green(l.name)}`)}}catch(O){n.stop("Failed to fetch credentials"),de(`API Error: ${O.message} `);return}let u=ie.mkdtempSync(Ue.join(ti.tmpdir(),`${f.nameLower}-submit-`)),p=l.keyId||l.meta?.keyId,m=l.issuerId||l.meta?.issuerId,S=l.type==="asc_api_key"?`AuthKey_${p}.p8`:"service-account.json",$=Ue.join(u,S);n.start("Downloading secure key...");try{let O=await D.get(`/credentials/${l.credentialId}/download`,{params:{projectId:r}});if(O.data.status!=="success"||!O.data.downloadUrl)throw new Error("Failed to get secure download URL");let k=await zi.get(O.data.downloadUrl,{responseType:"arraybuffer"});ie.writeFileSync($,Buffer.from(k.data)),n.stop("Key downloaded to secure temp storage")}catch(O){n.stop("Download failed"),de(`Failed to download key: ${O.message}`);try{ie.rmSync(u,{recursive:!0,force:!0})}catch{}return}ve(re.blue(`Initiating ${a==="ios"?"TestFlight":"Google Play"} submission...`));let v=a==="android"?e.track||o.submit?.[c]?.android?.track||o.submit?.production?.android?.track||"internal":void 0;try{if(a==="ios"){if(!p){let x=await ct({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:I=>I.length>0?void 0:"Key ID is required"});if(Le(x))return;p=x}if(!m||m==="undefined"){let x=await ct({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:I=>I.length>0?void 0:"Issuer ID is required"});if(Le(x))return;m=x}ve(`Using ASC Key ID: ${p}`),ve(`Using ASC Issuer ID: ${m}`);let O=o.submit?.[c]?.ios?.bundleId||o.ios?.bundleIdentifier,k=await Jo(s,$,m,p,O);if(k&&k.apiKeyJsonPath)throw ve(re.cyan(`
+\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(a=>setTimeout(a,3e3))}}import _o from"http";import{execSync as _e,spawn as Ti}from"child_process";import Kt from"chalk";import{log as Ve}from"@clack/prompts";import $o from"axios";import Vt from"fs";import Po from"os";import zt from"path";var ot=7070;function Do(){let e=[];try{let n=_e("adb devices -l",{stdio:"pipe"}).toString(),i=new Set;n.split(`
+`).forEach(t=>{if(t.includes("List of devices")||!t.trim())return;let o=t.split(/\s+/);if(o.length<2||o[1]!=="device")return;let r=o[0];i.add(r);let c=t.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:c?c[1].replace(/_/g," "):r,status:"online",details:t.trim()})})}catch{}try{let n=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`,t=_e(`${n} -list-avds`,{stdio:"pipe"}).toString().split(`
+`).filter(r=>!!r.trim()),o=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));t.forEach(r=>{o||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}if(process.platform!=="darwin")return e;try{let n=_e("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),i=JSON.parse(n);Object.entries(i.devices).forEach(([t,o])=>{o.forEach(r=>{r.isAvailable&&e.push({id:r.udid,platform:"ios",type:"simulator",name:r.name,status:r.state?.toLowerCase()==="booted"?"online":"offline",runtime:t,details:`${r.name} (${t})`})})})}catch{}try{let n=_e("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(n).result?.devices||[]).forEach(t=>{let o=t.connectionProperties?.transportType;(o==="wired"||o==="localNetwork")&&e.push({id:t.identifier,platform:"ios",type:"physical",name:t.deviceProperties?.name||"iPhone",status:"online",details:`${t.deviceProperties?.name||"iPhone"} (${t.model?.name||t.hardwareModel||""}) - ${o}`})})}catch{}return e}async function ki(e){let n=[];for await(let i of e)n.push(Buffer.isBuffer(i)?i:Buffer.from(i));return n.length===0?{}:JSON.parse(Buffer.concat(n).toString("utf-8"))}async function Ro(e,n){let i=await $o({method:"GET",url:e,responseType:"stream",timeout:12e4}),t=Vt.createWriteStream(n);i.data.pipe(t),await new Promise((o,r)=>{t.on("finish",o),t.on("error",r)})}async function wo(e,n,i){let t=i||(n.toLowerCase().includes(".apk")?"android":"ios"),o=n.toLowerCase().includes(".ipa"),r=Vt.mkdtempSync(zt.join(Po.tmpdir(),`${ot}-install-`)),c=zt.join(r,t==="android"?"install.apk":o?"install.ipa":"install.zip");try{if(await Ro(n,c),t==="android"){_e(`adb -s ${JSON.stringify(e)} install -r ${JSON.stringify(c)}`,{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");_e(`unzip -o ${JSON.stringify(c)} -d ${JSON.stringify(r)}`,{stdio:"pipe"});let a="";try{a=_e(`find ${JSON.stringify(zt.join(r,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(a||(a=_e(`find ${JSON.stringify(r)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!a)throw new Error(`No .app bundle found inside the ${o?"IPA":"archive"}.`);try{_e(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch(s){try{_e(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch{throw new Error(s.stderr?.toString().trim()||s.message||"iOS install failed.")}}}finally{Vt.rmSync(r,{recursive:!0,force:!0})}}function vo(e,n){if(!e)throw new Error("Device id is required.");if(n==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return _e(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Ti("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(n==="android"){let i=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`;return Ti(i,["-avd",e],{detached:!0,stdio:"ignore"}).unref(),"Emulator booting in background..."}throw new Error("Invalid platform.")}async function xi(){process.platform!=="darwin"&&Ve.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=_o.createServer((t,o)=>{if(o.setHeader("Access-Control-Allow-Origin","*"),o.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),o.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),t.method==="OPTIONS"){o.writeHead(204),o.end();return}let r=new URL(t.url||"/",`http://localhost:${ot}`);if(t.method==="GET"&&r.pathname==="/local/devices"){try{let c=Do();o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",targets:c}))}catch(c){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:c.message}))}return}if(t.method==="POST"&&r.pathname==="/install-local"){n(t,o);return}if(t.method==="POST"&&r.pathname==="/local/boot"){i(t,o);return}o.writeHead(404),o.end()}),n=async(t,o)=>{try{let{deviceId:r,artifactUrl:c,platform:a}=await ki(t);if(!r||!c){o.writeHead(400,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await wo(r,c,a),o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",message:`Installed on ${r}`}))}catch(r){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:r.message||"Local install failed"}))}},i=async(t,o)=>{try{let{id:r,platform:c}=await ki(t),a=vo(r,c);o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",message:a}))}catch(r){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:r.message||"Local device launch failed"}))}};e.listen(ot,"127.0.0.1",()=>{Ve.success(Kt.green(`Local device agent running on http://localhost:${ot}`)),Ve.info(Kt.dim("Keep this running while using the Install Hub on the dashboard.")),Ve.info(Kt.dim("Press Ctrl+C to stop."))}),e.on("error",t=>{t.code==="EADDRINUSE"?Ve.error(`Port ${ot} is already in use \u2014 agent may already be running.`):Ve.error(`Agent error: ${t.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as as}from"module";import{text as Co,password as No,spinner as To,isCancel as Mi}from"@clack/prompts";import qt from"chalk";import rt from"fs";import Li from"path";import Oo from"os";var Wt=Li.join(Oo.homedir(),f.configDir),Yt=Li.join(Wt,"config.json");function Jt(){if(!rt.existsSync(Yt))return{};try{return JSON.parse(rt.readFileSync(Yt,"utf-8"))}catch{return{}}}function Ui(e){rt.existsSync(Wt)||rt.mkdirSync(Wt,{recursive:!0});let i={...Jt(),...e};rt.writeFileSync(Yt,JSON.stringify(i,null,2))}async function Fi(){let e=Jt(),n=await Co({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(o){if(o.length===0)return"Email is required!"}});if(Mi(n))return;let i=await No({message:"Enter your password:",validate(o){if(o.length===0)return"Password is required!"}});if(Mi(i))return;let t=To();t.start("Authenticating...");try{let r=await(await fetch(`${yt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:n,password:i})})).json();r.status==="success"&&r.user.token?(ai({id:r.user.id,email:n,token:r.user.token,refreshToken:r.user.refreshToken}),Ui({lastLoginEmail:n}),t.stop(qt.green("Login successful!"))):t.stop(qt.red("Login failed: "+(r.message||"Unknown error")))}catch(o){t.stop(qt.red("Network error: "+o.message))}}import{outro as ko,select as xo,spinner as Lo,isCancel as Uo}from"@clack/prompts";import _t from"chalk";import Xt from"fs";import Mo from"path";async function Hi(){if(!pe()){console.log(_t.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=Lo();n.start("Fetching projects...");try{let{data:i}=await D.get("/projects");if(n.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log(_t.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let t=i.projects.map(u=>({value:u.projectId,label:`${u.name} (${u.slug})`})),o=await xo({message:"Select a project to link:",options:t});if(Uo(o))return;let r=Mo.join(process.cwd(),f.configFileName),c={};if(Xt.existsSync(r))try{c=JSON.parse(Xt.readFileSync(r,"utf-8"))}catch{}let a=i.projects.find(u=>u.projectId===o),s=c.android?.package||Ne("android"),d=c.ios?.bundleIdentifier||Ne("ios"),l={projectId:o,name:a?.name,slug:a?.slug,scheme:a?.slug?.toLowerCase()||"app",android:{package:s||""},ios:{bundleIdentifier:d||""},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:c.submit?.production?.android||{track:"internal"},ios:{ascAppId:c.submit?.production?.ios?.ascAppId||"1234567890",appleTeamId:c.submit?.production?.ios?.appleTeamId||"ABC123DEFG"}}}};Xt.writeFileSync(r,JSON.stringify(l,null,2)),ko(_t.green(`Linked to project ${l.name} (${l.slug})`))}catch(i){n.stop(_t.red("Error fetching projects: "+i.message))}}import{outro as Fo,text as $t,select as Ho,spinner as Bo,isCancel as st}from"@clack/prompts";import at from"chalk";import Go from"fs";import jo from"path";import{randomUUID as Ko}from"crypto";async function Bi(){if(!pe()){console.log(at.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=await $t({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(st(n))return;let i=await $t({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(st(i))return;let t=await Ho({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(st(t))return;let o="";if(t==="android"||t==="all"){let a=Ne("android");if(o=await $t({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Package name is required for Android!"}}),st(o))return}let r="";if(t==="ios"||t==="all"){let a=Ne("ios");if(r=await $t({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Bundle ID is required for iOS!"}}),st(r))return}let c=Bo();c.start("Creating project...");try{let a=Ko(),d={projectId:a,name:n,slug:i,storageType:"managed",platforms:t==="all"?["android","ios","web"]:[t]},{data:l}=await D.post("/projects",d);if(l.status==="success"){c.stop(at.green("Project created successfully!"));let u=jo.join(process.cwd(),f.configFileName);Go.writeFileSync(u,JSON.stringify({projectId:a,name:n,slug:i,...o?{android:{package:o}}:{},...r?{ios:{bundleIdentifier:r}}:{},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal"},ios:{ascAppId:"1234567890",appleTeamId:"ABC123DEFG",...r?{bundleId:r}:{}}}}},null,2)),Fo(at.green(`Initialized project ${n} and linked locally!`))}else c.stop(at.red("creation failed: "+l.message))}catch(a){c.stop(at.red("Network error: "+a.message))}}import{spinner as ji,log as ye}from"@clack/prompts";import Pt from"chalk";import Gi from"fs";import zo from"path";async function Ki(e,n){let i=pe();if(!i){ye.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let t=zo.join(process.cwd(),f.configFileName);if(!Gi.existsSync(t)){ye.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Gi.readFileSync(t,"utf-8"))}catch{ye.error(`Failed to parse ${f.configFileName}`);return}let{projectId:r}=o;if(!r){ye.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await Vo(r,n,i):e==="list"?await Wo(r,i):ye.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function Vo(e,n,i){if(n.length===0){ye.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let t=ji();t.start("Setting environment variables...");let o=0,r=0;for(let c of n){let[a,...s]=c.split("="),d=s.join("=");if(!a||d===void 0){ye.warn(`Invalid format for argument: ${c}. Expected KEY=VALUE.`),r++;continue}try{let l={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await D.post(`/projects/${e}/secrets`,l);u.status==="success"?o++:(ye.error(`Failed to set ${a}: ${u.message}`),r++)}catch(l){ye.error(`Network error setting ${a}: ${l.message}`),r++}}t.stop(`Set ${o} variable(s). ${r>0?`${r} failed.`:""}`)}async function Wo(e,n){let i=ji();i.start("Fetching environment variables...");try{let{data:t}=await D.get(`/projects/${e}/secrets`);if(t.status==="success"){i.stop("Fetched variables.");let o=t.secrets||[];o.length===0?ye.info("No environment variables found for this project."):(ye.info(Pt.bold("Environment Variables (Global & Scoped):")),o.forEach(r=>{let c=r.visibility==="plain"?r.value:"********";console.log(`  ${Pt.cyan(r.key)} = ${c}  ${Pt.gray(`[${r.environment}]`)}`)}))}else i.stop(Pt.red(`Failed to fetch variables: ${t.message}`))}catch(t){i.stop("Failed to fetch variables."),ye.error(`Network error: ${t.message}`)}}import{spinner as lt,text as ct,select as Qt,isCancel as Le,cancel as ei}from"@clack/prompts";import re from"chalk";import ie from"fs";import Ue from"path";import{spawn as Vi}from"child_process";import Wi from"axios";import ti from"os";import Yo from"crypto";async function Yi(e){let n=lt(),i=pe(),t=`./${f.configFileName}`;if(!ie.existsSync(t)){de(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o=JSON.parse(ie.readFileSync(t,"utf-8")),{projectId:r}=o,c=e.profile||e.buildProfile||"production";if(!r){de(`${f.configFileName} is missing projectId.`);return}ve(re.dim(`Submit for project: ${o.name||r} | Profile: ${c}`));let a=e.platform;if(!a){let O=await Qt({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Le(O)){ei("Operation cancelled");return}a=O}let s=await qo(r,a,e,i?.token);if(!s)return;ve(`Using artifact: ${re.green(Ue.basename(s))} `);let d=a==="android"?Jo(o,c):void 0;n.start("Fetching submission credentials from Dashboard...");let l;try{let k=(await D.get(`/credentials/${r}`)).data.credentials||[];if(a==="android"&&!d){n.stop("Package name missing"),de("Could not resolve Android package name. Set android.package in mach.config.json/app.json.");return}let x=k.filter(I=>a==="ios"?I.type==="asc_api_key":I.type==="google_service_account"&&I.bundleId===d);if(x.length===0){n.stop("Credentials missing"),de(a==="android"?`No Google Play service credential found for package ${d}.`:`No Service Credentials found for ${a}.`),ve(a==="android"?`Use '${f.nameLower} credentials:service --platform android --package-name ${d}' or upload it under that package in the Dashboard.`:`Use '${f.nameLower} credentials:service --platform ${a}' or use the Dashboard to upload them.`);return}if(x.length===1)l=x[0],n.stop(`Using: ${l.name}`);else{n.stop("Multiple credentials found");let I=await Qt({message:`Choose a ${a==="ios"?"App Store Connect":"Google Play"} credential:`,options:x.map(M=>({value:M.credentialId,label:M.name,hint:`${M.keyId?`ID: ${M.keyId}`:""} ${M.issuerId?`(Issuer: ${M.issuerId.substring(0,8)}...)`:""}`}))});if(Le(I)){ei("Submission cancelled");return}l=x.find(M=>M.credentialId===I),ve(`Using selected: ${re.green(l.name)}`)}}catch(O){n.stop("Failed to fetch credentials"),de(`API Error: ${O.message} `);return}let u=ie.mkdtempSync(Ue.join(ti.tmpdir(),`${f.nameLower}-submit-`)),p=l.keyId||l.meta?.keyId,m=l.issuerId||l.meta?.issuerId,S=l.type==="asc_api_key"?`AuthKey_${p}.p8`:"service-account.json",$=Ue.join(u,S);n.start("Downloading secure key...");try{let O=await D.get(`/credentials/${l.credentialId}/download`,{params:{projectId:r}});if(O.data.status!=="success"||!O.data.downloadUrl)throw new Error("Failed to get secure download URL");let k=await Wi.get(O.data.downloadUrl,{responseType:"arraybuffer"});ie.writeFileSync($,Buffer.from(k.data)),n.stop("Key downloaded to secure temp storage")}catch(O){n.stop("Download failed"),de(`Failed to download key: ${O.message}`);try{ie.rmSync(u,{recursive:!0,force:!0})}catch{}return}ve(re.blue(`Initiating ${a==="ios"?"TestFlight":"Google Play"} submission...`));let v=a==="android"?e.track||o.submit?.[c]?.android?.track||o.submit?.production?.android?.track||"internal":void 0;try{if(a==="ios"){if(!p){let x=await ct({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:I=>I.length>0?void 0:"Key ID is required"});if(Le(x))return;p=x}if(!m||m==="undefined"){let x=await ct({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:I=>I.length>0?void 0:"Issuer ID is required"});if(Le(x))return;m=x}ve(`Using ASC Key ID: ${p}`),ve(`Using ASC Issuer ID: ${m}`);let O=o.submit?.[c]?.ios?.bundleId||o.ios?.bundleIdentifier,k=await Xo(s,$,m,p,O);if(k&&k.apiKeyJsonPath)throw ve(re.cyan(`
 [DIAGNOSTIC] API key written to: ${k.apiKeyJsonPath}
-`)),new Error("fastlane pilot execution failed");ji(`${a==="ios"?"App Store":"Google Play"} submission successful!`)}else await qo(s,$,v,d),ji("Google Play submission successful!")}catch(O){de(`Submission failed: ${O.message}`)}finally{Zo(u),s.includes(`${f.nameLower}-artifact-`)}}function Wo(e,n){if(e.submit?.[n]?.android?.package)return e.submit[n].android.package;if(e.android?.package)return e.android.package;if(e.expo?.android?.package)return e.expo.android.package;let i=Ue.join(process.cwd(),"app.json");if(ie.existsSync(i))try{return JSON.parse(ie.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let t=Ue.join(process.cwd(),"app.config.json");if(ie.existsSync(t))try{let o=JSON.parse(ie.readFileSync(t,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}async function Yo(e,n,i,t){let o=i.buildId?"id":i.latest?"latest":null;if(!o){let c=await Qt({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Le(c))return ei("Operation cancelled"),null;o=c}if(o==="local"){let c=await ct({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ie.existsSync(a))return"File not found";if(n==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(n==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Le(c)?null:c}let r=lt();if(o==="latest"){let c=i.profile||i.buildProfile;r.start(`Fetching latest${c?` ${c}`:""} build...`);try{let a=await D.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.builds||[],d=c?.toLowerCase(),l=I=>I.platform?.toLowerCase()===n.toLowerCase()&&I.status?.toLowerCase()==="success",u=I=>d?[I.buildProfile,I.profile,I.profileName,I.buildType].filter(Boolean).some(M=>String(M).toLowerCase()===d):!0,p=s.filter(I=>l(I)&&u(I)),m=p.find(I=>I.buildType?.toLowerCase()==="store"||I.distribution?.toLowerCase()==="store")||p[0],S=s.some(I=>I.platform?.toLowerCase()===n.toLowerCase()&&I.status?.toLowerCase()==="success");if(!m)return r.stop("No suitable build found"),de(c&&S?`No successful ${n} builds found for profile "${c}".`:"No successful builds found for this platform."),null;r.stop(`Found build: ${m.buildId}`);let $=m.artifacts||[];if($.length===0||$.every(I=>!(I.url||I.downloadUrl)))try{let I=await D.get(`/builds/${e}/${m.buildId}/artifacts`);I.data.status==="success"&&I.data.artifacts?.length>0?($=I.data.artifacts.map(M=>({...M,url:M.url||M.downloadUrl})),console.log(re.cyan(`  [RECOVERY] Fetched ${$.length} artifact(s) with download URLs.`))):console.log(re.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(I){console.log(re.red(`  [RECOVERY] /artifacts fetch failed: ${I.message}`))}let O=n==="ios",k=$.find(I=>{let M=(I.type||"").toLowerCase(),g=(I.name||"").toLowerCase();if(console.log(re.dim(`    - Checking: ${I.name} (Type: ${I.type}, HasLink: ${!!(I.url||I.downloadUrl)})`)),M)return M===(O?"ipa":"aab");let P=O?".ipa":".aab",A=(I.url||I.downloadUrl||"").toLowerCase();return g.endsWith(P)||A.includes(P)});if(!k||!(k.url||k.downloadUrl))return de("Build found but artifact URL is missing."),null;let x=k.url||k.downloadUrl;return await Zt(x,O?"ios":"android")}catch(a){return r.stop("Fetch failed"),de(`API Error: ${a.message}`),null}}if(o==="id"){let c=i.buildId||await ct({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(Le(c))return null;r.start("Fetching build...");try{let a=await D.get(`/build/${c}`);if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.build;if(!s)throw new Error("Build not found");let d=n==="ios",l=s.artifacts?.find(u=>{if(u.type)return u.type===(d?"ipa":"aab");let p=d?".ipa":".aab";return u.name&&u.name.endsWith(p)||u.url&&u.url.includes(p)});return!l||!l.url?(r.stop("Missing artifact"),de("Artifact URL not found on build record."),null):(r.stop(`Found build: ${s.buildId}`),await Zt(l.url,d?"ios":"android"))}catch(a){return r.stop("Fetch failed"),de(a.message),null}}if(o==="url"){let c=await ct({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Le(c)?null:await Zt(c,n)}return null}async function Zt(e,n,i=3){let t=lt();t.start("Downloading artifact...");let o=ie.mkdtempSync(Ue.join(ti.tmpdir(),`${f.nameLower}-artifact-`)),r=`app.${n==="ios"?"ipa":"aab"}`,c=Ue.join(o,r);for(let a=1;a<=i;a++)try{a>1&&(t.message(`Downloading artifact (Retry ${a}/${i})...`),await new Promise(l=>setTimeout(l,2e3*a)));let s=ie.createWriteStream(c),d=await zi({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((l,u)=>{d.data.pipe(s);let p=!1;d.data.on("error",m=>{p||(p=!0,s.close(),u(m))}),s.on("finish",()=>{p||l()}),s.on("error",m=>{p||(p=!0,u(m))})}),t.stop("Download complete"),c}catch(s){if(a===i)throw t.stop("Download failed"),s}throw new Error("Download failed after retries")}async function Jo(e,n,i,t,o){let r=lt();if(o&&ve(`Bundled ID: ${re.green(o)}`),!i||!t)throw de(`Missing credentials: issuerId=${i}, keyId=${t}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let c=ie.readFileSync(n,"utf8"),a;try{a=Vo.createPrivateKey(c).export({type:"pkcs8",format:"pem"})}catch{ve("Key normalization failed, falling back to manual re-wrapping..."),a=`-----BEGIN PRIVATE KEY-----
+`)),new Error("fastlane pilot execution failed");zi(`${a==="ios"?"App Store":"Google Play"} submission successful!`)}else await Zo(s,$,v,d),zi("Google Play submission successful!")}catch(O){de(`Submission failed: ${O.message}`)}finally{er(u),s.includes(`${f.nameLower}-artifact-`)}}function Jo(e,n){if(e.submit?.[n]?.android?.package)return e.submit[n].android.package;if(e.android?.package)return e.android.package;if(e.expo?.android?.package)return e.expo.android.package;let i=Ue.join(process.cwd(),"app.json");if(ie.existsSync(i))try{return JSON.parse(ie.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let t=Ue.join(process.cwd(),"app.config.json");if(ie.existsSync(t))try{let o=JSON.parse(ie.readFileSync(t,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}async function qo(e,n,i,t){let o=i.buildId?"id":i.latest?"latest":null;if(!o){let c=await Qt({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Le(c))return ei("Operation cancelled"),null;o=c}if(o==="local"){let c=await ct({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ie.existsSync(a))return"File not found";if(n==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(n==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Le(c)?null:c}let r=lt();if(o==="latest"){let c=i.profile||i.buildProfile;r.start(`Fetching latest${c?` ${c}`:""} build...`);try{let a=await D.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.builds||[],d=c?.toLowerCase(),l=I=>I.platform?.toLowerCase()===n.toLowerCase()&&I.status?.toLowerCase()==="success",u=I=>d?[I.buildProfile,I.profile,I.profileName,I.buildType].filter(Boolean).some(M=>String(M).toLowerCase()===d):!0,p=s.filter(I=>l(I)&&u(I)),m=p.find(I=>I.buildType?.toLowerCase()==="store"||I.distribution?.toLowerCase()==="store")||p[0],S=s.some(I=>I.platform?.toLowerCase()===n.toLowerCase()&&I.status?.toLowerCase()==="success");if(!m)return r.stop("No suitable build found"),de(c&&S?`No successful ${n} builds found for profile "${c}".`:"No successful builds found for this platform."),null;r.stop(`Found build: ${m.buildId}`);let $=m.artifacts||[];if($.length===0||$.every(I=>!(I.url||I.downloadUrl)))try{let I=await D.get(`/builds/${e}/${m.buildId}/artifacts`);I.data.status==="success"&&I.data.artifacts?.length>0?($=I.data.artifacts.map(M=>({...M,url:M.url||M.downloadUrl})),console.log(re.cyan(`  [RECOVERY] Fetched ${$.length} artifact(s) with download URLs.`))):console.log(re.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(I){console.log(re.red(`  [RECOVERY] /artifacts fetch failed: ${I.message}`))}let O=n==="ios",k=$.find(I=>{let M=(I.type||"").toLowerCase(),g=(I.name||"").toLowerCase();if(console.log(re.dim(`    - Checking: ${I.name} (Type: ${I.type}, HasLink: ${!!(I.url||I.downloadUrl)})`)),M)return M===(O?"ipa":"aab");let P=O?".ipa":".aab",A=(I.url||I.downloadUrl||"").toLowerCase();return g.endsWith(P)||A.includes(P)});if(!k||!(k.url||k.downloadUrl))return de("Build found but artifact URL is missing."),null;let x=k.url||k.downloadUrl;return await Zt(x,O?"ios":"android")}catch(a){return r.stop("Fetch failed"),de(`API Error: ${a.message}`),null}}if(o==="id"){let c=i.buildId||await ct({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(Le(c))return null;r.start("Fetching build...");try{let a=await D.get(`/build/${c}`);if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.build;if(!s)throw new Error("Build not found");let d=n==="ios",l=s.artifacts?.find(u=>{if(u.type)return u.type===(d?"ipa":"aab");let p=d?".ipa":".aab";return u.name&&u.name.endsWith(p)||u.url&&u.url.includes(p)});return!l||!l.url?(r.stop("Missing artifact"),de("Artifact URL not found on build record."),null):(r.stop(`Found build: ${s.buildId}`),await Zt(l.url,d?"ios":"android"))}catch(a){return r.stop("Fetch failed"),de(a.message),null}}if(o==="url"){let c=await ct({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Le(c)?null:await Zt(c,n)}return null}async function Zt(e,n,i=3){let t=lt();t.start("Downloading artifact...");let o=ie.mkdtempSync(Ue.join(ti.tmpdir(),`${f.nameLower}-artifact-`)),r=`app.${n==="ios"?"ipa":"aab"}`,c=Ue.join(o,r);for(let a=1;a<=i;a++)try{a>1&&(t.message(`Downloading artifact (Retry ${a}/${i})...`),await new Promise(l=>setTimeout(l,2e3*a)));let s=ie.createWriteStream(c),d=await Wi({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((l,u)=>{d.data.pipe(s);let p=!1;d.data.on("error",m=>{p||(p=!0,s.close(),u(m))}),s.on("finish",()=>{p||l()}),s.on("error",m=>{p||(p=!0,u(m))})}),t.stop("Download complete"),c}catch(s){if(a===i)throw t.stop("Download failed"),s}throw new Error("Download failed after retries")}async function Xo(e,n,i,t,o){let r=lt();if(o&&ve(`Bundled ID: ${re.green(o)}`),!i||!t)throw de(`Missing credentials: issuerId=${i}, keyId=${t}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let c=ie.readFileSync(n,"utf8"),a;try{a=Yo.createPrivateKey(c).export({type:"pkcs8",format:"pem"})}catch{ve("Key normalization failed, falling back to manual re-wrapping..."),a=`-----BEGIN PRIVATE KEY-----
 ${(c.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
 `)}
 -----END PRIVATE KEY-----`}console.log(re.yellow(`
 [DIAGNOSTIC] Key ID: ${t}`)),console.log(re.yellow(`[DIAGNOSTIC] Issuer ID: ${i}`)),console.log(re.yellow(`[DIAGNOSTIC] Key Checksum (Start): ${a.substring(0,45).replace(/\n/g,"\\n")}`)),console.log(re.yellow(`[DIAGNOSTIC] Key Checksum (End):   ${a.substring(a.length-28).replace(/\n/g,"\\n")}
-`)),r.start("Uploading to TestFlight (pilot)...");let s=Ue.join(ti.tmpdir(),`api_key_${t}.json`),d={key_id:t,issuer_id:i,key:a,in_house:!1};return ie.writeFileSync(s,JSON.stringify(d,null,2)),new Promise((l,u)=>{let p=Ki("fastlane",["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:"inherit",env:Wi()});p.on("close",m=>{if(m!==0)r.stop("Pilot failed"),l({apiKeyJsonPath:s});else{r.stop("IPA uploaded to TestFlight");try{ie.unlinkSync(s)}catch{}l({apiKeyJsonPath:null})}}),p.on("error",m=>{try{ie.unlinkSync(s)}catch{}r.stop("Pilot execution error"),u(m)})})}async function qo(e,n,i="internal",t){let o=lt();o.start(`Uploading to Google Play ${i} track (supply)...`);let r=["supply","--aab",e,"--json_key",n,"--track",i];t&&t!=="*"&&r.push("--package_name",t),await new Promise((c,a)=>{let s=Ki("fastlane",r,{stdio:["inherit","pipe","pipe"],env:Wi()}),d="";s.stdout.on("data",l=>{let u=l.toString();d+=u,process.stdout.write(u)}),s.stderr.on("data",l=>{let u=l.toString();d+=u,process.stderr.write(u)}),s.on("error",l=>{o.stop("Supply execution error"),a(l)}),s.on("close",l=>{if(l===0){o.stop(`AAB uploaded to ${i} track`),c();return}o.stop("Supply failed"),a(new Error(Xo(d,i,t)))})})}function Wi(){return{...process.env,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1"}}function Xo(e,n,i){if(e.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${i||"unknown"} | Track: ${n}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${f.nameLower} build --platform android --profile production --auto-version`,`Then: ${f.nameLower} submit --latest --platform android --profile production --track ${n}`].join(`
-`);let t=e.match(/Google Api Error:[^\n]+/);return t?t[0]:"fastlane supply execution failed"}function Zo(e){try{ie.existsSync(e)&&ie.rmSync(e,{recursive:!0,force:!0})}catch{}}function de(e){console.log(re.red(`\u274C ${e}`))}function ve(e){console.log(re.gray(`\u2022 ${e}`))}function ji(e){console.log(re.green(`\u2713 ${e}`))}import{spinner as Qo,log as Be,outro as er}from"@clack/prompts";import ii from"chalk";import Yi from"fs";import tr from"path";import{execSync as ir}from"child_process";import nr from"adm-zip";import or from"axios";import{randomUUID as rr}from"crypto";async function Ji(e){Be.info(ii.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let n=xe();(!n||!n.projectId)&&(Be.error(`No ${f.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let i=n.projectId,t=e.branch||"production",o="1.0.0";try{o=JSON.parse(Yi.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{Be.warn("Could not read package.json version. Defaulting to 1.0.0")}let r=Qo();r.start(`Compiling JavaScript bundles for OTA (Channel: ${t}, Runtime: ${o})...`);try{ir("npx expo export --platform all",{stdio:"ignore"})}catch(d){r.stop("Compilation failed."),Be.error(`Failed to export JS bundles using Expo: ${d.message}`),process.exit(1)}r.message("Zipping artifact payload...");let c=tr.join(process.cwd(),"dist");Yi.existsSync(c)||(r.stop("Missing dist folder."),Be.error("The `dist` directory was not created. Export failed."),process.exit(1));let a=new nr;a.addLocalFolder(c,"dist");let s=a.toBuffer();r.message("Uploading payload to Mach Cloud...");try{let d=rr(),l=await D.post("/builds/source-upload-url",{projectId:i,buildId:d});if(l.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:u,key:p}=l.data;await or.put(u,s,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),r.message(`Promoting Update to ${t}...`),await D.post("/updates/publish",{projectId:i,channelName:t,runtimeVersion:o,platform:"android",updateId:`${d}-android`,manifestKey:p}),await D.post("/updates/publish",{projectId:i,channelName:t,runtimeVersion:o,platform:"ios",updateId:`${d}-ios`,manifestKey:p}),r.stop("Update Live!"),er(ii.green(`\u2713 OTA Update natively shipped to the '${t}' channel.`)),Be.info(ii.dim(`Any app running runtime '${o}' will download this bundle smoothly.`))}catch(d){r.stop("Update failed during Cloud Sync."),Be.error(`Upload error: ${d.message}`),process.exit(1)}}import{intro as sr,outro as qi,log as We}from"@clack/prompts";import Oe from"chalk";async function Xi(){sr(Oe.blue(`${f.name} CLI - User Profile`));let e=pe();if(!e){We.warn(Oe.yellow("You are not logged in.")),We.info(`Run \`${f.nameLower} login\` to authenticate.`),qi();return}We.info(`${Oe.bold("Logged in as:")} ${Oe.green(e.email)}`);try{await D.get("/projects");let i=pe().token.split(".");if(i.length===3){let t=JSON.parse(Buffer.from(i[1],"base64").toString());if(t.exp){let o=new Date(t.exp*1e3),r=new Date,c=o.getTime()-r.getTime();if(c>0){let a=Math.round(c/6e4),s=(a/60).toFixed(1);We.info(`${Oe.bold("Token status:")} Valid (Expires in ~${s}h / ${a}m)`)}else We.warn(`${Oe.bold("Token status:")} ${Oe.red("Expired")} (Auto-refresh failed)`)}}}catch{We.warn(`${Oe.bold("Token status:")} ${Oe.red("Unreachable")} (Session might be truly expired)${yt}`)}qi(Oe.blue("---"))}import{spawn as lr}from"child_process";import{log as Me}from"@clack/prompts";import Se from"chalk";import dr from"fs";import ar from"net";async function cr(e){return new Promise(n=>{let i=ar.createServer();i.once("error",t=>{t.code==="EADDRINUSE"?n(!0):n(!1)}),i.once("listening",()=>{i.close(),n(!1)}),i.listen(e,"0.0.0.0")})}async function Zi(e,n=20){let i=e;for(;i<e+n;){if(!await cr(i))return i;i++}throw new Error(`Could not find an available port after ${n} attempts starting from ${e}.`)}var Qi=async e=>{Me.info(Se.blue(`Starting ${f.name} Dev Orchestrator...`));let n=xe(),i=e.buildProfile||"development",t=n?He(n,i):null,o={...process.env};if(n?.projectId)try{Me.info(Se.dim(`Fetching managed secrets for profile: ${i}...`));let u=await D.get(`/projects/${n.projectId}/secrets/export?env=${i}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(o,u.data.secrets),Me.info(Se.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{Me.warn("Could not fetch managed secrets. Running with local env only.")}n&&Object.assign(o,ze(n,f.envPrefix)),t&&(Object.assign(o,ze(t,`${f.envPrefix}PROFILE_`)),t.env&&Object.assign(o,t.env));let r=!1;try{let u=JSON.parse(dr.readFileSync("package.json","utf-8"));r=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{Me.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let c=Number(e.port||t?.port||8081),a=await Zi(c);a!==c&&Me.info(Se.yellow(`Port ${c} is busy. ${f.name} is using ${a} instead.`));let s=process.platform==="win32"?"npx.cmd":"npx",d=[];if(r?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),r){let u=[`${Se.cyan("i")}  open iOS simulator`,`${Se.cyan("a")}  open Android emulator/device`,`${Se.cyan("w")}  open web`,`${Se.cyan("r")}  reload app`];Me.info([Se.bold("Launch controls"),...u.map(p=>`  ${p}`),"",Se.dim("Direct launch: mach start --ios | --android | --web"),Se.dim(`Metro URL: http://localhost:${a}`)].join(`
-`))}else Me.info(Se.dim(`Metro URL: http://localhost:${a}`));let l=lr(s,d,{stdio:"inherit",env:o});return new Promise((u,p)=>{l.on("exit",m=>{m===0?u():p(new Error(`Dev server exited with code ${m}`))}),l.on("error",m=>{p(m)})})};import{log as fe}from"@clack/prompts";import _e from"chalk";var en=async e=>{let n=xe();n||(fe.error(_e.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let i=e.profile||"development",t=He(n,i);if(e.json){console.log(JSON.stringify({project:n,resolved:t},null,2));return}fe.info(_e.bgBlue.white(` Resolved ${f.name} Config [${i}] `)),fe.info(_e.dim("----------------------------------------")),fe.info(`${_e.blue("Project ID:")} ${n.projectId}`),fe.info(`${_e.blue("Name:")} ${n.name}`),fe.info(`${_e.blue("Scheme:")} ${n.scheme}`),t?(fe.info(_e.dim(`
-Profile Settings:`)),fe.info(`${_e.cyan("Distribution:")} ${t.distribution||"none"}`),fe.info(`${_e.cyan("Development Client:")} ${t.developmentClient||"false"}`),t.env&&Object.keys(t.env).length>0&&(fe.info(_e.dim(`
-Environment Variables:`)),Object.entries(t.env).forEach(([o,r])=>{fe.info(`  ${o}=${r}`)}))):fe.warn(`Profile '${i}' not found.`),fe.info(_e.dim("----------------------------------------"))};import{log as $e,spinner as pt,text as tn,select as nn,confirm as ur,isCancel as dt,cancel as ut,outro as ft,note as pr}from"@clack/prompts";import W from"chalk";import{execSync as fr}from"child_process";async function mr(){try{let e=fr("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(t=>t.connectionProperties?.transportType==="wired"||t.connectionProperties?.transportType==="localNetwork").map(t=>({udid:t.identifier,name:t.deviceProperties?.name||"Unknown Device",model:t.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}async function gr(e){let n=e.udid,i=e.name,t="";if(!n){let r=pt();r.start("Scanning for connected iOS devices...");let c=await mr();if(r.stop(c.length>0?`Found ${c.length} device(s)`:"No devices detected"),c.length===1)n=c[0].udid,i=i||c[0].name,t=c[0].model,$e.info(`Detected: ${W.bold(i)} (${W.dim(n.substring(0,12)+"...")})`);else if(c.length>1){let a=await nn({message:"Select a device to register:",options:c.map(d=>({value:d.udid,label:`${d.name} (${d.model})`,hint:d.udid.substring(0,12)+"..."}))});if(dt(a)){ut("Cancelled");return}n=a;let s=c.find(d=>d.udid===n);i=i||s.name,t=s.model}else{$e.info(W.dim("No connected devices found. Enter UDID manually."));let a=await tn({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(s){if(s.length<10)return"UDID seems too short"}});if(dt(a)){ut("Cancelled");return}n=a}}if(!i){let r=await tn({message:"Device name:",placeholder:"Nitesh's iPhone",validate(c){if(c.length===0)return"Name is required"}});if(dt(r)){ut("Cancelled");return}i=r}let o=pt();o.start("Registering device...");try{await D.post("/devices",{udid:n,name:i,platform:"ios",model:t||void 0,addedVia:"cli"}),o.stop(W.green("Device registered!")),$e.info(`  ${W.bold("Name:")} ${i}`),$e.info(`  ${W.bold("UDID:")} ${W.dim(n)}`)}catch(r){o.stop(W.red("Failed to register device")),$e.error(r.response?.data?.message||r.message)}ft(W.blue("---"))}async function hr(){let e=pt();e.start("Fetching registered devices...");try{let i=(await D.get("/devices")).data.devices||[];if(e.stop(`${i.length} device(s) registered`),i.length===0){$e.info(W.dim(`No devices registered yet. Run \`${f.nameLower} device register\` to add one.`)),ft(W.blue("---"));return}let t=i.map(o=>{let r=new Date(o.createdAt).toLocaleDateString();return`  ${W.bold(o.name.padEnd(24))} ${W.dim(o.udid.padEnd(28))} ${W.cyan(o.addedVia.padEnd(10))} ${W.dim(r)}`});pr(`  ${W.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Via".padEnd(10)} Date
+`)),r.start("Uploading to TestFlight (pilot)...");let s=Ue.join(ti.tmpdir(),`api_key_${t}.json`),d={key_id:t,issuer_id:i,key:a,in_house:!1};return ie.writeFileSync(s,JSON.stringify(d,null,2)),new Promise((l,u)=>{let p=Vi("fastlane",["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:"inherit",env:Ji()});p.on("close",m=>{if(m!==0)r.stop("Pilot failed"),l({apiKeyJsonPath:s});else{r.stop("IPA uploaded to TestFlight");try{ie.unlinkSync(s)}catch{}l({apiKeyJsonPath:null})}}),p.on("error",m=>{try{ie.unlinkSync(s)}catch{}r.stop("Pilot execution error"),u(m)})})}async function Zo(e,n,i="internal",t){let o=lt();o.start(`Uploading to Google Play ${i} track (supply)...`);let r=["supply","--aab",e,"--json_key",n,"--track",i];t&&t!=="*"&&r.push("--package_name",t),await new Promise((c,a)=>{let s=Vi("fastlane",r,{stdio:["inherit","pipe","pipe"],env:Ji()}),d="";s.stdout.on("data",l=>{let u=l.toString();d+=u,process.stdout.write(u)}),s.stderr.on("data",l=>{let u=l.toString();d+=u,process.stderr.write(u)}),s.on("error",l=>{o.stop("Supply execution error"),a(l)}),s.on("close",l=>{if(l===0){o.stop(`AAB uploaded to ${i} track`),c();return}o.stop("Supply failed"),a(new Error(Qo(d,i,t)))})})}function Ji(){return{...process.env,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1"}}function Qo(e,n,i){if(e.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${i||"unknown"} | Track: ${n}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${f.nameLower} build --platform android --profile production --auto-version`,`Then: ${f.nameLower} submit --latest --platform android --profile production --track ${n}`].join(`
+`);let t=e.match(/Google Api Error:[^\n]+/);return t?t[0]:"fastlane supply execution failed"}function er(e){try{ie.existsSync(e)&&ie.rmSync(e,{recursive:!0,force:!0})}catch{}}function de(e){console.log(re.red(`\u274C ${e}`))}function ve(e){console.log(re.gray(`\u2022 ${e}`))}function zi(e){console.log(re.green(`\u2713 ${e}`))}import{spinner as tr,log as Be,outro as ir}from"@clack/prompts";import ii from"chalk";import qi from"fs";import nr from"path";import{execSync as or}from"child_process";import rr from"adm-zip";import sr from"axios";import{randomUUID as ar}from"crypto";async function Xi(e){Be.info(ii.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let n=xe();(!n||!n.projectId)&&(Be.error(`No ${f.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let i=n.projectId,t=e.branch||"production",o="1.0.0";try{o=JSON.parse(qi.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{Be.warn("Could not read package.json version. Defaulting to 1.0.0")}let r=tr();r.start(`Compiling JavaScript bundles for OTA (Channel: ${t}, Runtime: ${o})...`);try{or("npx expo export --platform all",{stdio:"ignore"})}catch(d){r.stop("Compilation failed."),Be.error(`Failed to export JS bundles using Expo: ${d.message}`),process.exit(1)}r.message("Zipping artifact payload...");let c=nr.join(process.cwd(),"dist");qi.existsSync(c)||(r.stop("Missing dist folder."),Be.error("The `dist` directory was not created. Export failed."),process.exit(1));let a=new rr;a.addLocalFolder(c,"dist");let s=a.toBuffer();r.message("Uploading payload to Mach Cloud...");try{let d=ar(),l=await D.post("/builds/source-upload-url",{projectId:i,buildId:d});if(l.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:u,key:p}=l.data;await sr.put(u,s,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),r.message(`Promoting Update to ${t}...`),await D.post("/updates/publish",{projectId:i,channelName:t,runtimeVersion:o,platform:"android",updateId:`${d}-android`,manifestKey:p}),await D.post("/updates/publish",{projectId:i,channelName:t,runtimeVersion:o,platform:"ios",updateId:`${d}-ios`,manifestKey:p}),r.stop("Update Live!"),ir(ii.green(`\u2713 OTA Update natively shipped to the '${t}' channel.`)),Be.info(ii.dim(`Any app running runtime '${o}' will download this bundle smoothly.`))}catch(d){r.stop("Update failed during Cloud Sync."),Be.error(`Upload error: ${d.message}`),process.exit(1)}}import{intro as cr,outro as Zi,log as We}from"@clack/prompts";import Oe from"chalk";async function Qi(){cr(Oe.blue(`${f.name} CLI - User Profile`));let e=pe();if(!e){We.warn(Oe.yellow("You are not logged in.")),We.info(`Run \`${f.nameLower} login\` to authenticate.`),Zi();return}We.info(`${Oe.bold("Logged in as:")} ${Oe.green(e.email)}`);try{await D.get("/projects");let i=pe().token.split(".");if(i.length===3){let t=JSON.parse(Buffer.from(i[1],"base64").toString());if(t.exp){let o=new Date(t.exp*1e3),r=new Date,c=o.getTime()-r.getTime();if(c>0){let a=Math.round(c/6e4),s=(a/60).toFixed(1);We.info(`${Oe.bold("Token status:")} Valid (Expires in ~${s}h / ${a}m)`)}else We.warn(`${Oe.bold("Token status:")} ${Oe.red("Expired")} (Auto-refresh failed)`)}}}catch{We.warn(`${Oe.bold("Token status:")} ${Oe.red("Unreachable")} (Session might be truly expired)${yt}`)}Zi(Oe.blue("---"))}import{spawn as ur}from"child_process";import{log as Me}from"@clack/prompts";import Se from"chalk";import pr from"fs";import lr from"net";async function dr(e){return new Promise(n=>{let i=lr.createServer();i.once("error",t=>{t.code==="EADDRINUSE"?n(!0):n(!1)}),i.once("listening",()=>{i.close(),n(!1)}),i.listen(e,"0.0.0.0")})}async function en(e,n=20){let i=e;for(;i<e+n;){if(!await dr(i))return i;i++}throw new Error(`Could not find an available port after ${n} attempts starting from ${e}.`)}var tn=async e=>{Me.info(Se.blue(`Starting ${f.name} Dev Orchestrator...`));let n=xe(),i=e.buildProfile||"development",t=n?He(n,i):null,o={...process.env};if(n?.projectId)try{Me.info(Se.dim(`Fetching managed secrets for profile: ${i}...`));let u=await D.get(`/projects/${n.projectId}/secrets/export?env=${i}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(o,u.data.secrets),Me.info(Se.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{Me.warn("Could not fetch managed secrets. Running with local env only.")}n&&Object.assign(o,ze(n,f.envPrefix)),t&&(Object.assign(o,ze(t,`${f.envPrefix}PROFILE_`)),t.env&&Object.assign(o,t.env));let r=!1;try{let u=JSON.parse(pr.readFileSync("package.json","utf-8"));r=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{Me.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let c=Number(e.port||t?.port||8081),a=await en(c);a!==c&&Me.info(Se.yellow(`Port ${c} is busy. ${f.name} is using ${a} instead.`));let s=process.platform==="win32"?"npx.cmd":"npx",d=[];if(r?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),r){let u=[`${Se.cyan("i")}  open iOS simulator`,`${Se.cyan("a")}  open Android emulator/device`,`${Se.cyan("w")}  open web`,`${Se.cyan("r")}  reload app`];Me.info([Se.bold("Launch controls"),...u.map(p=>`  ${p}`),"",Se.dim("Direct launch: mach start --ios | --android | --web"),Se.dim(`Metro URL: http://localhost:${a}`)].join(`
+`))}else Me.info(Se.dim(`Metro URL: http://localhost:${a}`));let l=ur(s,d,{stdio:"inherit",env:o});return new Promise((u,p)=>{l.on("exit",m=>{m===0?u():p(new Error(`Dev server exited with code ${m}`))}),l.on("error",m=>{p(m)})})};import{log as fe}from"@clack/prompts";import $e from"chalk";var nn=async e=>{let n=xe();n||(fe.error($e.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let i=e.profile||"development",t=He(n,i);if(e.json){console.log(JSON.stringify({project:n,resolved:t},null,2));return}fe.info($e.bgBlue.white(` Resolved ${f.name} Config [${i}] `)),fe.info($e.dim("----------------------------------------")),fe.info(`${$e.blue("Project ID:")} ${n.projectId}`),fe.info(`${$e.blue("Name:")} ${n.name}`),fe.info(`${$e.blue("Scheme:")} ${n.scheme}`),t?(fe.info($e.dim(`
+Profile Settings:`)),fe.info(`${$e.cyan("Distribution:")} ${t.distribution||"none"}`),fe.info(`${$e.cyan("Development Client:")} ${t.developmentClient||"false"}`),t.env&&Object.keys(t.env).length>0&&(fe.info($e.dim(`
+Environment Variables:`)),Object.entries(t.env).forEach(([o,r])=>{fe.info(`  ${o}=${r}`)}))):fe.warn(`Profile '${i}' not found.`),fe.info($e.dim("----------------------------------------"))};import{log as Pe,spinner as pt,text as on,select as rn,confirm as fr,isCancel as dt,cancel as ut,outro as ft,note as mr}from"@clack/prompts";import W from"chalk";import{execSync as gr}from"child_process";async function hr(){try{let e=gr("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(t=>t.connectionProperties?.transportType==="wired"||t.connectionProperties?.transportType==="localNetwork").map(t=>({udid:t.identifier,name:t.deviceProperties?.name||"Unknown Device",model:t.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}async function yr(e){let n=e.udid,i=e.name,t="";if(!n){let r=pt();r.start("Scanning for connected iOS devices...");let c=await hr();if(r.stop(c.length>0?`Found ${c.length} device(s)`:"No devices detected"),c.length===1)n=c[0].udid,i=i||c[0].name,t=c[0].model,Pe.info(`Detected: ${W.bold(i)} (${W.dim(n.substring(0,12)+"...")})`);else if(c.length>1){let a=await rn({message:"Select a device to register:",options:c.map(d=>({value:d.udid,label:`${d.name} (${d.model})`,hint:d.udid.substring(0,12)+"..."}))});if(dt(a)){ut("Cancelled");return}n=a;let s=c.find(d=>d.udid===n);i=i||s.name,t=s.model}else{Pe.info(W.dim("No connected devices found. Enter UDID manually."));let a=await on({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(s){if(s.length<10)return"UDID seems too short"}});if(dt(a)){ut("Cancelled");return}n=a}}if(!i){let r=await on({message:"Device name:",placeholder:"Nitesh's iPhone",validate(c){if(c.length===0)return"Name is required"}});if(dt(r)){ut("Cancelled");return}i=r}let o=pt();o.start("Registering device...");try{await D.post("/devices",{udid:n,name:i,platform:"ios",model:t||void 0,addedVia:"cli"}),o.stop(W.green("Device registered!")),Pe.info(`  ${W.bold("Name:")} ${i}`),Pe.info(`  ${W.bold("UDID:")} ${W.dim(n)}`)}catch(r){o.stop(W.red("Failed to register device")),Pe.error(r.response?.data?.message||r.message)}ft(W.blue("---"))}async function Sr(){let e=pt();e.start("Fetching registered devices...");try{let i=(await D.get("/devices")).data.devices||[];if(e.stop(`${i.length} device(s) registered`),i.length===0){Pe.info(W.dim(`No devices registered yet. Run \`${f.nameLower} device register\` to add one.`)),ft(W.blue("---"));return}let t=i.map(o=>{let r=new Date(o.createdAt).toLocaleDateString();return`  ${W.bold(o.name.padEnd(24))} ${W.dim(o.udid.padEnd(28))} ${W.cyan(o.addedVia.padEnd(10))} ${W.dim(r)}`});mr(`  ${W.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Via".padEnd(10)} Date
 `+t.join(`
-`),"Registered Devices")}catch(n){e.stop(W.red("Failed to fetch devices")),$e.error(n.response?.data?.message||n.message)}ft(W.blue("---"))}async function yr(e){let n=e.udid;if(!n){let o=pt();o.start("Fetching registered devices...");try{let c=(await D.get("/devices")).data.devices||[];if(o.stop(`${c.length} device(s) found`),c.length===0){$e.info(W.dim("No devices to remove.")),ft(W.blue("---"));return}let a=await nn({message:"Select device to remove:",options:c.map(s=>({value:s.udid,label:s.name,hint:s.udid.substring(0,12)+"..."}))});if(dt(a)){ut("Cancelled");return}n=a}catch(r){o.stop(W.red("Failed to fetch devices")),$e.error(r.response?.data?.message||r.message);return}}let i=await ur({message:`Remove device ${W.dim(n.substring(0,12)+"...")}?`});if(dt(i)||!i){ut("Cancelled");return}let t=pt();t.start("Removing device...");try{await D.delete(`/devices/${encodeURIComponent(n)}`),t.stop(W.green("Device removed"))}catch(o){t.stop(W.red("Failed to remove device")),$e.error(o.response?.data?.message||o.message)}ft(W.blue("---"))}async function Dt(e,n){switch(e){case"register":await gr(n);break;case"list":await hr();break;case"remove":await yr(n);break;default:$e.error(`Unknown action: ${e}`)}}import{log as Ae,spinner as Nn}from"@clack/prompts";import De from"chalk";import Lt from"path";import ht from"fs";import Xr from"os";import Zr from"axios";var Ee=(r=>(r.CRITICAL="critical",r.HIGH="high",r.MEDIUM="medium",r.LOW="low",r.INFO="info",r))(Ee||{}),Pe=(s=>(s.PERMISSIONS="permissions",s.SECRETS="secrets",s.DEPENDENCIES="dependencies",s.STORAGE="storage",s.NETWORK="network",s.DEBUG="debug",s.MANIFEST="manifest",s.ATS="ats",s))(Pe||{});import{spinner as bn,log as gt}from"@clack/prompts";import me from"chalk";import{execSync as Br}from"child_process";import _n from"fs";import $n from"path";import Fe from"fs";import mt from"path";import{execSync as Sr}from"child_process";var on={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Er={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Ar(e){try{let i=Sr("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(i)}catch{}let n=mt.join(e,"app.json");if(Fe.existsSync(n))try{let i=JSON.parse(Fe.readFileSync(n,"utf-8"));return i.expo||i}catch{}return null}function Ir(e){let n=[],i=mt.join(e,"node_modules");if(!Fe.existsSync(i))return n;let t=/<uses-permission\s+android:name="([^"]+)"/g;function o(r,c){let a=mt.join(r,"android","src","main","AndroidManifest.xml");if(!Fe.existsSync(a))return;let s=Fe.readFileSync(a,"utf-8"),d;for(;(d=t.exec(s))!==null;)n.push({pkg:c,permission:d[1]});t.lastIndex=0}for(let r of Fe.readdirSync(i)){if(r.startsWith("."))continue;let c=mt.join(i,r);if(r.startsWith("@")){if(!Fe.statSync(c).isDirectory())continue;for(let a of Fe.readdirSync(c))o(mt.join(c,a),`${r}/${a}`)}else o(c,r)}return n}async function rn(e,n){let i=[],t=1,o=Ar(e),r=o?.android?.permissions||[],c=o?.android?.blockedPermissions||[];for(let d of r){let l=on[d];l&&i.push({id:`PERM-${String(t++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:l.description,severity:l.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Ir(e);for(let{pkg:d,permission:l}of a){let u=on[l];u&&(c.includes(l)||r.includes(l)||i.push({id:`PERM-${String(t++).padStart(3,"0")}`,title:`${l.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${l}" to blockedPermissions if not needed.`,autoFixable:!0}))}let s=o?.ios?.infoPlist||{};for(let[d,l]of Object.entries(Er))d in s&&i.push({id:`PERM-${String(t++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:l.description,severity:l.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:i,durationMs:0}}import ni from"fs";import Rt from"path";var br=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],_r=new Set([".ts",".tsx",".js",".jsx"]),$r=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function sn(e){let n=[],i=ni.readdirSync(e,{withFileTypes:!0});for(let t of i){if($r.has(t.name))continue;let o=Rt.join(e,t.name);t.isDirectory()?n.push(...sn(o)):_r.has(Rt.extname(t.name))&&n.push(o)}return n}function Pr(e){let n=e.trim();return n.startsWith("//")||n.startsWith("*")||n.startsWith("/*")}function Dr(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function an(e,n){let i=[],t=Rt.join(e,"src"),o=ni.existsSync(t)?t:e,r=sn(o);for(let c of r){let s=ni.readFileSync(c,"utf-8").split(`
-`),d=Rt.relative(e,c);for(let l=0;l<s.length;l++){let u=s[l];if(!Pr(u)&&!Dr(u))for(let{id:p,pattern:m,severity:S,label:$}of br)m.lastIndex=0,m.test(u)&&i.push({id:p,title:$,description:`Potential ${$.toLowerCase()} found in source code`,severity:S,category:"secrets",file:d,line:l+1,recommendation:`Move to environment variables or a secrets manager. Use \`${f.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:i,durationMs:0}}import{execSync as Rr}from"child_process";var wr={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function cn(e,n){let i=[],t=1,o;try{o=Rr("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(o=a.stdout||"",!o)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let r;try{r=JSON.parse(o)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let c=r.vulnerabilities||{};for(let[a,s]of Object.entries(c)){let d=wr[s.severity]||"info",l=Array.isArray(s.via)?s.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(s.via);i.push({id:`DEP-${String(t++).padStart(3,"0")}`,title:`${a} \u2014 ${s.severity}`,description:`Via: ${l}. Range: ${s.range||"unknown"}`,severity:d,category:"dependencies",recommendation:s.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!s.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:i,durationMs:0}}import wt from"fs";import vt from"path";var vr=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,ln=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Or=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Cr=new Set([".ts",".tsx",".js",".jsx"]),Nr=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function dn(e){let n=[];if(!wt.existsSync(e))return n;let i=wt.readdirSync(e,{withFileTypes:!0});for(let t of i){if(Nr.has(t.name))continue;let o=vt.join(e,t.name);t.isDirectory()?n.push(...dn(o)):Cr.has(vt.extname(t.name))&&n.push(o)}return n}async function un(e,n){let i=[],t=1,o=vt.join(e,"src"),r=wt.existsSync(o)?o:e,c=dn(r);for(let a of c){let s=wt.readFileSync(a,"utf-8");if(!Or.test(s))continue;let d=s.split(`
-`),l=vt.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u];ln.lastIndex=0;let m;for(;(m=ln.exec(p))!==null;){let S=m[1];vr.test(S)&&i.push({id:`STOR-${String(t++).padStart(3,"0")}`,title:`AsyncStorage used for "${S}"`,description:`Sensitive data key "${S}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:l,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:i,durationMs:0}}import Ot from"fs";import Ct from"path";var pn=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Tr=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,kr=new Set([".ts",".tsx",".js",".jsx"]),xr=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function fn(e){let n=[];if(!Ot.existsSync(e))return n;let i=Ot.readdirSync(e,{withFileTypes:!0});for(let t of i){if(xr.has(t.name))continue;let o=Ct.join(e,t.name);t.isDirectory()?n.push(...fn(o)):kr.has(Ct.extname(t.name))&&n.push(o)}return n}async function mn(e,n){let i=[],t=1,o=Ct.join(e,"src"),r=Ot.existsSync(o)?o:e,c=fn(r);for(let a of c){let d=Ot.readFileSync(a,"utf-8").split(`
-`),l=Ct.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(m.startsWith("//")||m.startsWith("*"))continue;pn.lastIndex=0;let S;for(;(S=pn.exec(p))!==null;){let $=S[1],v=Tr.test($);i.push({id:`NET-${String(t++).padStart(3,"0")}`,title:`Insecure HTTP URL${v?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${$}`,severity:v?"high":"medium",category:"network",file:l,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:i,durationMs:0}}import Nt from"fs";import Tt from"path";var gn=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,hn=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Lr=new Set([".ts",".tsx",".js",".jsx"]),Ur=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function yn(e){let n=[];if(!Nt.existsSync(e))return n;let i=Nt.readdirSync(e,{withFileTypes:!0});for(let t of i){if(Ur.has(t.name))continue;let o=Tt.join(e,t.name);t.isDirectory()?n.push(...yn(o)):Lr.has(Tt.extname(t.name))&&n.push(o)}return n}async function Sn(e,n){let i=[],t=1,o=Tt.join(e,"src"),r=Nt.existsSync(o)?o:e,c=yn(r);for(let a of c){let d=Nt.readFileSync(a,"utf-8").split(`
-`),l=Tt.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(!(m.startsWith("//")||m.startsWith("*"))&&(gn.lastIndex=0,gn.test(p)&&i.push({id:`DBG-${String(t++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:l,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),hn.lastIndex=0,hn.test(p))){let S=d.slice(Math.max(0,u-3),u).join(`
-`);/__DEV__/.test(S)||i.push({id:`DBG-${String(t++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:l,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:i,durationMs:0}}import En from"fs";import oi from"path";var Mr=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Fr(e){let n=[oi.join(e,"android","app","src","main","AndroidManifest.xml"),oi.join(e,"android","AndroidManifest.xml")];for(let i of n)if(En.existsSync(i))return i;return null}async function An(e,n){let i=[],t=1,o=Fr(e);if(!o)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let r=En.readFileSync(o,"utf-8"),c=oi.relative(e,o),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,s;for(;(s=a.exec(r))!==null;){let d=s[1],l=s[2],p=l.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Mr.has(p))continue;let m=/android:exported="true"/.test(l),S=/android:permission="/.test(l);m&&!S&&i.push({id:`MAN-${String(t++).padStart(3,"0")}`,title:`Exported ${d}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:c,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(r)&&i.push({id:`MAN-${String(t++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:c,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(r)&&i.push({id:`MAN-${String(t++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:c,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:i,durationMs:0}}import kt from"fs";import ri from"path";function Hr(e){let n=ri.join(e,"ios");if(!kt.existsSync(n))return null;let i=kt.readdirSync(n,{withFileTypes:!0});for(let t of i){if(!t.isDirectory()||t.name==="Pods"||t.name.startsWith("."))continue;let o=ri.join(n,t.name,"Info.plist");if(kt.existsSync(o))return o}return null}async function In(e,n){let i=[],t=1,o=Hr(e);if(!o)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let r=kt.readFileSync(o,"utf-8"),c=ri.relative(e,o),a=r.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let s=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(s)&&i.push({id:`ATS-${String(t++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:c,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=s.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let l=d[1].match(/<key>([^<]+)<\/key>/g);if(l)for(let u of l){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&i.push({id:`ATS-${String(t++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:c,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:i,durationMs:0}}var Gr=[{category:"permissions",label:"Permission Audit",fn:rn,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:an,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:cn,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:un,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:mn,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:Sn,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:An,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:In,requiresPrebuild:!0}];async function Pn(e,n){let i=Gr;n.category&&(i=i.filter(c=>c.category===n.category),i.length===0&&(gt.error(me.red(`Unknown category: ${n.category}`)),gt.info(me.dim(`Available: ${Object.values(Pe).join(", ")}`)),process.exit(1)));let t=i.filter(c=>!c.requiresPrebuild),o=i.filter(c=>c.requiresPrebuild),r=[];for(let c of t){let a=bn();a.start(me.dim(`Running ${c.label}...`));try{let s=Date.now(),d=await c.fn(e,n);d.durationMs=Date.now()-s,r.push(d);let l=d.findings.length;a.stop(l>0?me.yellow(`${c.label} \u2014 ${l} finding(s)`):me.green(`${c.label} \u2014 clean`))}catch(s){a.stop(me.red(`${c.label} \u2014 error`)),r.push({category:c.category,label:c.label,findings:[],durationMs:0,error:s.message})}}if(o.length>0){let c=$n.join(e,"android"),a=$n.join(e,"ios"),s=_n.existsSync(c)||_n.existsSync(a);if(!s&&n.prebuild){n.json||gt.info(me.dim(`
-Running expo prebuild for deeper analysis...`));try{Br("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return gt.warn(me.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),r}}else if(!s)return n.json||gt.info(me.dim(`
-Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),r;for(let d of o){let l=bn();l.start(me.dim(`Running ${d.label}...`));try{let u=Date.now(),p=await d.fn(e,n);p.durationMs=Date.now()-u,r.push(p);let m=p.findings.length;l.stop(m>0?me.yellow(`${d.label} \u2014 ${m} finding(s)`):me.green(`${d.label} \u2014 clean`))}catch(u){l.stop(me.red(`${d.label} \u2014 error`)),r.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return r}import te from"chalk";import{log as Q}from"@clack/prompts";var Ye={critical:te.bgRed.white.bold,high:te.red.bold,medium:te.yellow.bold,low:te.blue,info:te.dim},xt={critical:0,high:1,medium:2,low:3,info:4};function jr(e,n){if(!n)return!0;let i=xt[n];return i===void 0?!0:xt[e]<=i}function Dn(e,n){let i=0,t={critical:0,high:0,medium:0,low:0,info:0};for(let c of e){let a=c.findings.filter(d=>jr(d.severity,n));if(a.length===0&&!c.error)continue;if(Q.info(""),Q.info(te.bold(`  ${c.label}`)+te.dim(`  ${a.length} finding(s)`)),Q.info(te.dim("  "+"\u2500".repeat(60))),c.error){Q.error(te.red(`  Error: ${c.error}`));continue}let s=[...a].sort((d,l)=>xt[d.severity]-xt[l.severity]);for(let d of s){let l=Ye[d.severity](` ${d.severity.toUpperCase()} `);Q.info(`  ${l}  ${te.bold(d.id)}  ${d.title}`),Q.info(te.dim(`          ${d.description}`)),d.file&&Q.info(te.dim(`          File: ${d.file}${d.line?`:${d.line}`:""}`)),Q.info(te.cyan(`          Fix: ${d.recommendation}`)),Q.info(""),t[d.severity]++,i++}}Q.info(""),Q.info(te.bold("  Summary")),Q.info(te.dim("  "+"\u2500".repeat(60))),Q.info(`  Total: ${te.bold(String(i))} finding(s)`),Q.info(`  ${Ye.critical(` ${t.critical} Critical `)}  ${Ye.high(` ${t.high} High `)}  ${Ye.medium(` ${t.medium} Medium `)}  ${Ye.low(` ${t.low} Low `)}  ${Ye.info(` ${t.info} Info `)}`);let o=t.critical>0,r=t.high>0;o||r?(Q.info(""),Q.error(te.red.bold(`  FAIL \u2014 ${t.critical} critical, ${t.high} high issue(s) found`))):i>0?(Q.info(""),Q.warn(te.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(Q.info(""),Q.success(te.green.bold("  PASS \u2014 no issues found")))}function Rn(e,n){let i=e.flatMap(o=>o.findings),t={};for(let o of Object.values(Ee))t[o]=i.filter(r=>r.severity===o).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:n.name||"unknown",projectVersion:n.version||"0.0.0",summary:{total:i.length,...t},passed:t.critical===0&&t.high===0,checks:e.map(o=>({category:o.category,label:o.label,findingCount:o.findings.length,durationMs:o.durationMs,error:o.error||null})),findings:i}}import{log as ee,spinner as Kr}from"@clack/prompts";import X from"chalk";import Te from"fs";import zr from"os";import Je from"path";import{execSync as Vr}from"child_process";var wn=16384,Wr=1,Yr=Buffer.from([127,69,76,70]);async function vn(e){ee.info(X.bold.underline("16KB Page Alignment Check")),console.log("");let n=Je.resolve(e);if(!Te.existsSync(n))return ee.error(X.red(`APK file not found: ${n}`)),!1;if(!n.endsWith(".apk"))return ee.error(X.red("The provided file is not an APK file.")),!1;let i=Kr();i.start("Extracting and analyzing native libraries...");let t=Te.mkdtempSync(Je.join(zr.tmpdir(),"mach-16kb-"));try{try{Vr(`unzip -o -q "${n}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${t}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let o=On(Je.join(t,"lib"));if(o.length===0)return i.stop("Analysis complete."),ee.info(X.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),ee.info(X.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let r=[];for(let s of o){let d=Je.relative(t,s),l=qr(d),u=Je.basename(s),p=Jr(s);p!==null&&r.push({name:u,filePath:d,arch:l,align:p,compatible:p>=wn})}if(i.stop("Analysis complete."),r.length===0)return ee.info(X.yellow("No valid ELF shared libraries found.")),!0;let c=r.filter(s=>!s.compatible),a=r.filter(s=>s.compatible);if(ee.info(X.dim(`Checked ${r.length} native librar${r.length===1?"y":"ies"}
+`),"Registered Devices")}catch(n){e.stop(W.red("Failed to fetch devices")),Pe.error(n.response?.data?.message||n.message)}ft(W.blue("---"))}async function Er(e){let n=e.udid;if(!n){let o=pt();o.start("Fetching registered devices...");try{let c=(await D.get("/devices")).data.devices||[];if(o.stop(`${c.length} device(s) found`),c.length===0){Pe.info(W.dim("No devices to remove.")),ft(W.blue("---"));return}let a=await rn({message:"Select device to remove:",options:c.map(s=>({value:s.udid,label:s.name,hint:s.udid.substring(0,12)+"..."}))});if(dt(a)){ut("Cancelled");return}n=a}catch(r){o.stop(W.red("Failed to fetch devices")),Pe.error(r.response?.data?.message||r.message);return}}let i=await fr({message:`Remove device ${W.dim(n.substring(0,12)+"...")}?`});if(dt(i)||!i){ut("Cancelled");return}let t=pt();t.start("Removing device...");try{await D.delete(`/devices/${encodeURIComponent(n)}`),t.stop(W.green("Device removed"))}catch(o){t.stop(W.red("Failed to remove device")),Pe.error(o.response?.data?.message||o.message)}ft(W.blue("---"))}async function Dt(e,n){switch(e){case"register":await yr(n);break;case"list":await Sr();break;case"remove":await Er(n);break;default:Pe.error(`Unknown action: ${e}`)}}import{log as Ae,spinner as kn}from"@clack/prompts";import Re from"chalk";import Lt from"path";import ht from"fs";import Qr from"os";import es from"axios";var Ee=(r=>(r.CRITICAL="critical",r.HIGH="high",r.MEDIUM="medium",r.LOW="low",r.INFO="info",r))(Ee||{}),De=(s=>(s.PERMISSIONS="permissions",s.SECRETS="secrets",s.DEPENDENCIES="dependencies",s.STORAGE="storage",s.NETWORK="network",s.DEBUG="debug",s.MANIFEST="manifest",s.ATS="ats",s))(De||{});import{spinner as $n,log as gt}from"@clack/prompts";import me from"chalk";import{execSync as jr}from"child_process";import Pn from"fs";import Dn from"path";import Fe from"fs";import mt from"path";import{execSync as Ar}from"child_process";var sn={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Ir={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function br(e){try{let i=Ar("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(i)}catch{}let n=mt.join(e,"app.json");if(Fe.existsSync(n))try{let i=JSON.parse(Fe.readFileSync(n,"utf-8"));return i.expo||i}catch{}return null}function _r(e){let n=[],i=mt.join(e,"node_modules");if(!Fe.existsSync(i))return n;let t=/<uses-permission\s+android:name="([^"]+)"/g;function o(r,c){let a=mt.join(r,"android","src","main","AndroidManifest.xml");if(!Fe.existsSync(a))return;let s=Fe.readFileSync(a,"utf-8"),d;for(;(d=t.exec(s))!==null;)n.push({pkg:c,permission:d[1]});t.lastIndex=0}for(let r of Fe.readdirSync(i)){if(r.startsWith("."))continue;let c=mt.join(i,r);if(r.startsWith("@")){if(!Fe.statSync(c).isDirectory())continue;for(let a of Fe.readdirSync(c))o(mt.join(c,a),`${r}/${a}`)}else o(c,r)}return n}async function an(e,n){let i=[],t=1,o=br(e),r=o?.android?.permissions||[],c=o?.android?.blockedPermissions||[];for(let d of r){let l=sn[d];l&&i.push({id:`PERM-${String(t++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:l.description,severity:l.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=_r(e);for(let{pkg:d,permission:l}of a){let u=sn[l];u&&(c.includes(l)||r.includes(l)||i.push({id:`PERM-${String(t++).padStart(3,"0")}`,title:`${l.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${l}" to blockedPermissions if not needed.`,autoFixable:!0}))}let s=o?.ios?.infoPlist||{};for(let[d,l]of Object.entries(Ir))d in s&&i.push({id:`PERM-${String(t++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:l.description,severity:l.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:i,durationMs:0}}import ni from"fs";import Rt from"path";var $r=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Pr=new Set([".ts",".tsx",".js",".jsx"]),Dr=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function cn(e){let n=[],i=ni.readdirSync(e,{withFileTypes:!0});for(let t of i){if(Dr.has(t.name))continue;let o=Rt.join(e,t.name);t.isDirectory()?n.push(...cn(o)):Pr.has(Rt.extname(t.name))&&n.push(o)}return n}function Rr(e){let n=e.trim();return n.startsWith("//")||n.startsWith("*")||n.startsWith("/*")}function wr(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function ln(e,n){let i=[],t=Rt.join(e,"src"),o=ni.existsSync(t)?t:e,r=cn(o);for(let c of r){let s=ni.readFileSync(c,"utf-8").split(`
+`),d=Rt.relative(e,c);for(let l=0;l<s.length;l++){let u=s[l];if(!Rr(u)&&!wr(u))for(let{id:p,pattern:m,severity:S,label:$}of $r)m.lastIndex=0,m.test(u)&&i.push({id:p,title:$,description:`Potential ${$.toLowerCase()} found in source code`,severity:S,category:"secrets",file:d,line:l+1,recommendation:`Move to environment variables or a secrets manager. Use \`${f.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:i,durationMs:0}}import{execSync as vr}from"child_process";var Or={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function dn(e,n){let i=[],t=1,o;try{o=vr("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(o=a.stdout||"",!o)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let r;try{r=JSON.parse(o)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let c=r.vulnerabilities||{};for(let[a,s]of Object.entries(c)){let d=Or[s.severity]||"info",l=Array.isArray(s.via)?s.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(s.via);i.push({id:`DEP-${String(t++).padStart(3,"0")}`,title:`${a} \u2014 ${s.severity}`,description:`Via: ${l}. Range: ${s.range||"unknown"}`,severity:d,category:"dependencies",recommendation:s.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!s.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:i,durationMs:0}}import wt from"fs";import vt from"path";var Cr=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,un=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Nr=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Tr=new Set([".ts",".tsx",".js",".jsx"]),kr=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function pn(e){let n=[];if(!wt.existsSync(e))return n;let i=wt.readdirSync(e,{withFileTypes:!0});for(let t of i){if(kr.has(t.name))continue;let o=vt.join(e,t.name);t.isDirectory()?n.push(...pn(o)):Tr.has(vt.extname(t.name))&&n.push(o)}return n}async function fn(e,n){let i=[],t=1,o=vt.join(e,"src"),r=wt.existsSync(o)?o:e,c=pn(r);for(let a of c){let s=wt.readFileSync(a,"utf-8");if(!Nr.test(s))continue;let d=s.split(`
+`),l=vt.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u];un.lastIndex=0;let m;for(;(m=un.exec(p))!==null;){let S=m[1];Cr.test(S)&&i.push({id:`STOR-${String(t++).padStart(3,"0")}`,title:`AsyncStorage used for "${S}"`,description:`Sensitive data key "${S}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:l,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:i,durationMs:0}}import Ot from"fs";import Ct from"path";var mn=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,xr=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Lr=new Set([".ts",".tsx",".js",".jsx"]),Ur=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function gn(e){let n=[];if(!Ot.existsSync(e))return n;let i=Ot.readdirSync(e,{withFileTypes:!0});for(let t of i){if(Ur.has(t.name))continue;let o=Ct.join(e,t.name);t.isDirectory()?n.push(...gn(o)):Lr.has(Ct.extname(t.name))&&n.push(o)}return n}async function hn(e,n){let i=[],t=1,o=Ct.join(e,"src"),r=Ot.existsSync(o)?o:e,c=gn(r);for(let a of c){let d=Ot.readFileSync(a,"utf-8").split(`
+`),l=Ct.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(m.startsWith("//")||m.startsWith("*"))continue;mn.lastIndex=0;let S;for(;(S=mn.exec(p))!==null;){let $=S[1],v=xr.test($);i.push({id:`NET-${String(t++).padStart(3,"0")}`,title:`Insecure HTTP URL${v?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${$}`,severity:v?"high":"medium",category:"network",file:l,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:i,durationMs:0}}import Nt from"fs";import Tt from"path";var yn=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,Sn=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Mr=new Set([".ts",".tsx",".js",".jsx"]),Fr=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function En(e){let n=[];if(!Nt.existsSync(e))return n;let i=Nt.readdirSync(e,{withFileTypes:!0});for(let t of i){if(Fr.has(t.name))continue;let o=Tt.join(e,t.name);t.isDirectory()?n.push(...En(o)):Mr.has(Tt.extname(t.name))&&n.push(o)}return n}async function An(e,n){let i=[],t=1,o=Tt.join(e,"src"),r=Nt.existsSync(o)?o:e,c=En(r);for(let a of c){let d=Nt.readFileSync(a,"utf-8").split(`
+`),l=Tt.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(!(m.startsWith("//")||m.startsWith("*"))&&(yn.lastIndex=0,yn.test(p)&&i.push({id:`DBG-${String(t++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:l,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),Sn.lastIndex=0,Sn.test(p))){let S=d.slice(Math.max(0,u-3),u).join(`
+`);/__DEV__/.test(S)||i.push({id:`DBG-${String(t++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:l,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:i,durationMs:0}}import In from"fs";import oi from"path";var Hr=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Br(e){let n=[oi.join(e,"android","app","src","main","AndroidManifest.xml"),oi.join(e,"android","AndroidManifest.xml")];for(let i of n)if(In.existsSync(i))return i;return null}async function bn(e,n){let i=[],t=1,o=Br(e);if(!o)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let r=In.readFileSync(o,"utf-8"),c=oi.relative(e,o),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,s;for(;(s=a.exec(r))!==null;){let d=s[1],l=s[2],p=l.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Hr.has(p))continue;let m=/android:exported="true"/.test(l),S=/android:permission="/.test(l);m&&!S&&i.push({id:`MAN-${String(t++).padStart(3,"0")}`,title:`Exported ${d}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:c,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(r)&&i.push({id:`MAN-${String(t++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:c,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(r)&&i.push({id:`MAN-${String(t++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:c,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:i,durationMs:0}}import kt from"fs";import ri from"path";function Gr(e){let n=ri.join(e,"ios");if(!kt.existsSync(n))return null;let i=kt.readdirSync(n,{withFileTypes:!0});for(let t of i){if(!t.isDirectory()||t.name==="Pods"||t.name.startsWith("."))continue;let o=ri.join(n,t.name,"Info.plist");if(kt.existsSync(o))return o}return null}async function _n(e,n){let i=[],t=1,o=Gr(e);if(!o)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let r=kt.readFileSync(o,"utf-8"),c=ri.relative(e,o),a=r.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let s=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(s)&&i.push({id:`ATS-${String(t++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:c,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=s.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let l=d[1].match(/<key>([^<]+)<\/key>/g);if(l)for(let u of l){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&i.push({id:`ATS-${String(t++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:c,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:i,durationMs:0}}var Kr=[{category:"permissions",label:"Permission Audit",fn:an,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:ln,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:dn,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:hn,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:An,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:bn,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:_n,requiresPrebuild:!0}];async function Rn(e,n){let i=Kr;n.category&&(i=i.filter(c=>c.category===n.category),i.length===0&&(gt.error(me.red(`Unknown category: ${n.category}`)),gt.info(me.dim(`Available: ${Object.values(De).join(", ")}`)),process.exit(1)));let t=i.filter(c=>!c.requiresPrebuild),o=i.filter(c=>c.requiresPrebuild),r=[];for(let c of t){let a=$n();a.start(me.dim(`Running ${c.label}...`));try{let s=Date.now(),d=await c.fn(e,n);d.durationMs=Date.now()-s,r.push(d);let l=d.findings.length;a.stop(l>0?me.yellow(`${c.label} \u2014 ${l} finding(s)`):me.green(`${c.label} \u2014 clean`))}catch(s){a.stop(me.red(`${c.label} \u2014 error`)),r.push({category:c.category,label:c.label,findings:[],durationMs:0,error:s.message})}}if(o.length>0){let c=Dn.join(e,"android"),a=Dn.join(e,"ios"),s=Pn.existsSync(c)||Pn.existsSync(a);if(!s&&n.prebuild){n.json||gt.info(me.dim(`
+Running expo prebuild for deeper analysis...`));try{jr("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return gt.warn(me.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),r}}else if(!s)return n.json||gt.info(me.dim(`
+Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),r;for(let d of o){let l=$n();l.start(me.dim(`Running ${d.label}...`));try{let u=Date.now(),p=await d.fn(e,n);p.durationMs=Date.now()-u,r.push(p);let m=p.findings.length;l.stop(m>0?me.yellow(`${d.label} \u2014 ${m} finding(s)`):me.green(`${d.label} \u2014 clean`))}catch(u){l.stop(me.red(`${d.label} \u2014 error`)),r.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return r}import te from"chalk";import{log as Q}from"@clack/prompts";var Ye={critical:te.bgRed.white.bold,high:te.red.bold,medium:te.yellow.bold,low:te.blue,info:te.dim},xt={critical:0,high:1,medium:2,low:3,info:4};function zr(e,n){if(!n)return!0;let i=xt[n];return i===void 0?!0:xt[e]<=i}function wn(e,n){let i=0,t={critical:0,high:0,medium:0,low:0,info:0};for(let c of e){let a=c.findings.filter(d=>zr(d.severity,n));if(a.length===0&&!c.error)continue;if(Q.info(""),Q.info(te.bold(`  ${c.label}`)+te.dim(`  ${a.length} finding(s)`)),Q.info(te.dim("  "+"\u2500".repeat(60))),c.error){Q.error(te.red(`  Error: ${c.error}`));continue}let s=[...a].sort((d,l)=>xt[d.severity]-xt[l.severity]);for(let d of s){let l=Ye[d.severity](` ${d.severity.toUpperCase()} `);Q.info(`  ${l}  ${te.bold(d.id)}  ${d.title}`),Q.info(te.dim(`          ${d.description}`)),d.file&&Q.info(te.dim(`          File: ${d.file}${d.line?`:${d.line}`:""}`)),Q.info(te.cyan(`          Fix: ${d.recommendation}`)),Q.info(""),t[d.severity]++,i++}}Q.info(""),Q.info(te.bold("  Summary")),Q.info(te.dim("  "+"\u2500".repeat(60))),Q.info(`  Total: ${te.bold(String(i))} finding(s)`),Q.info(`  ${Ye.critical(` ${t.critical} Critical `)}  ${Ye.high(` ${t.high} High `)}  ${Ye.medium(` ${t.medium} Medium `)}  ${Ye.low(` ${t.low} Low `)}  ${Ye.info(` ${t.info} Info `)}`);let o=t.critical>0,r=t.high>0;o||r?(Q.info(""),Q.error(te.red.bold(`  FAIL \u2014 ${t.critical} critical, ${t.high} high issue(s) found`))):i>0?(Q.info(""),Q.warn(te.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(Q.info(""),Q.success(te.green.bold("  PASS \u2014 no issues found")))}function vn(e,n){let i=e.flatMap(o=>o.findings),t={};for(let o of Object.values(Ee))t[o]=i.filter(r=>r.severity===o).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:n.name||"unknown",projectVersion:n.version||"0.0.0",summary:{total:i.length,...t},passed:t.critical===0&&t.high===0,checks:e.map(o=>({category:o.category,label:o.label,findingCount:o.findings.length,durationMs:o.durationMs,error:o.error||null})),findings:i}}import{log as ee,spinner as Vr}from"@clack/prompts";import X from"chalk";import Te from"fs";import Wr from"os";import Je from"path";import{execSync as Yr}from"child_process";var On=16384,Jr=1,qr=Buffer.from([127,69,76,70]);async function Cn(e){ee.info(X.bold.underline("16KB Page Alignment Check")),console.log("");let n=Je.resolve(e);if(!Te.existsSync(n))return ee.error(X.red(`APK file not found: ${n}`)),!1;if(!n.endsWith(".apk"))return ee.error(X.red("The provided file is not an APK file.")),!1;let i=Vr();i.start("Extracting and analyzing native libraries...");let t=Te.mkdtempSync(Je.join(Wr.tmpdir(),"mach-16kb-"));try{try{Yr(`unzip -o -q "${n}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${t}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let o=Nn(Je.join(t,"lib"));if(o.length===0)return i.stop("Analysis complete."),ee.info(X.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),ee.info(X.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let r=[];for(let s of o){let d=Je.relative(t,s),l=Zr(d),u=Je.basename(s),p=Xr(s);p!==null&&r.push({name:u,filePath:d,arch:l,align:p,compatible:p>=On})}if(i.stop("Analysis complete."),r.length===0)return ee.info(X.yellow("No valid ELF shared libraries found.")),!0;let c=r.filter(s=>!s.compatible),a=r.filter(s=>s.compatible);if(ee.info(X.dim(`Checked ${r.length} native librar${r.length===1?"y":"ies"}
 `)),c.length>0){ee.info(X.red.bold(`Incompatible libraries:
-`));for(let s of c)ee.error(X.red(`${X.bold(s.name)} ${X.dim(`(${s.arch})`)}`)),ee.info(X.dim(`  PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${wn})`))}return a.length>0&&(console.log(""),ee.success(X.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),c.length===0?(ee.success(X.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(ee.error(X.red.bold(`Found ${c.length} unaligned lib${c.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),ee.info(X.yellow("To fix this:")),ee.info(X.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),ee.info(X.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),ee.info(X.dim("  3. Update third-party libraries that ship prebuilt .so files")),ee.info(X.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),ee.info(X.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return i.stop("Analysis failed."),ee.error(X.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{Te.rmSync(t,{recursive:!0,force:!0})}catch{}}}function Jr(e){let n=Te.openSync(e,"r");try{let i=Buffer.alloc(64);if(Te.readSync(n,i,0,64,0),!i.subarray(0,4).equals(Yr))return null;let t=i[4]===2,o=i[5]===1,r=(p,m)=>o?p.readUInt16LE(m):p.readUInt16BE(m),c=(p,m)=>o?p.readUInt32LE(m):p.readUInt32BE(m),a=(p,m)=>Number(o?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),s,d,l;t?(s=a(i,32),d=r(i,54),l=r(i,56)):(s=c(i,28),d=r(i,42),l=r(i,44));let u=null;for(let p=0;p<l;p++){let m=Buffer.alloc(d);if(Te.readSync(n,m,0,d,s+p*d),c(m,0)!==Wr)continue;let $;t?$=a(m,48):$=c(m,28),$>0&&(u===null||$<u)&&(u=$)}return u??0}catch{return null}finally{Te.closeSync(n)}}function On(e){let n=[];if(!Te.existsSync(e))return n;let i=Te.readdirSync(e,{withFileTypes:!0});for(let t of i){let o=Je.join(e,t.name);t.isDirectory()?n.push(...On(o)):t.name.endsWith(".so")&&n.push(o)}return n}function qr(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Tn=async e=>{if(pe()||(Ae.error(De.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await Qr(e);return}let i=process.cwd(),t=Lt.join(i,"package.json");ht.existsSync(t)||(Ae.error(De.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(ht.readFileSync(t,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(Ae.info(De.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),Ae.info(De.dim(`Type: ${r?"Expo":"Bare React Native"}`)),Ae.info(""));let c={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Pn(i,c);e.json?console.log(JSON.stringify(Rn(a,o),null,2)):Dn(a,e.severity);let s=a.some(l=>l.findings.some(u=>u.severity==="critical")),d=a.some(l=>l.findings.some(u=>u.severity==="high"));(s||d)&&process.exit(1)},Cn=["16kb"];async function Qr(e){let n=e.category?.toLowerCase();n&&!Cn.includes(n)&&(Ae.error(De.red(`Unknown APK check category: "${n}"`)),Ae.info(De.dim(`Available APK checks: ${Cn.join(", ")}`)),process.exit(1));let i=await es(e.apk);i||process.exit(1);let t=!n,o=!1;(t||n==="16kb")&&(await vn(i)||(o=!0)),o&&process.exit(1)}async function es(e){if(e.startsWith("build:")){let i=e.slice(6);return await ts(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await kn(e);let n=Lt.resolve(e);return ht.existsSync(n)?n:(Ae.error(De.red(`APK file not found: ${n}`)),null)}async function ts(e){let n=Nn();n.start(`Fetching APK from build ${e}...`);try{let i=await D.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let t=i.data.build;if(!t)throw new Error("Build not found");let o=t.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),Ae.error(De.red("This build does not have an APK artifact.")),Ae.info(De.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${t.buildId||e}`),await kn(o.url))}catch(i){return n.stop("Failed to fetch build"),Ae.error(De.red(i.message)),null}}async function kn(e){let n=Nn();n.start("Downloading APK...");try{let i=ht.mkdtempSync(Lt.join(Xr.tmpdir(),`${f.nameLower}-audit-`)),t=Lt.join(i,"app.apk"),o=await Zr.get(e,{responseType:"arraybuffer"});ht.writeFileSync(t,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return n.stop(`Downloaded APK (${r} MB)`),t}catch(i){return n.stop("Download failed"),Ae.error(De.red(`Failed to download APK: ${i.message}`)),null}}var os=console.log;console.log=()=>{};ns();console.log=os;ue(ae.bgCyan.black(f.cliTag("Production Build Orchestrator")));var ss=rs(import.meta.url),as=ss("../package.json"),Y=new is;Y.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(as.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);Y.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await Ti()});Y.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{ue(ae.bgCyan.black(f.cliTag("Hosting"))),await ui()});Y.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Sitemap Generator"))),await gi(e)});Y.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new xn("--build-id <id>","Internal build ID").hideHelp()).addOption(new xn("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,n)=>{let i=Y.opts();n.yes=n.yes||i.yes,n.quiet=n.quiet||i.quiet,n.platform=e||n.platform,n.buildProfile=n.profile||n.buildProfile,n.quiet||ue(ae.bgCyan.black(f.cliTag("Cloud Build"))),await bt(n)});Y.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{ue(ae.bgCyan.black(f.cliTag("OTA Update"))),await Ji(e)});Y.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Store Submission"))),await Vi(e)});Y.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Login"))),await Ui()});Y.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Link Project"))),await Mi()});Y.command("me").description("Display currently logged in user details").action(async()=>{await Xi()});Y.command("init").description(`Create a new ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Init Project"))),await Fi()});Y.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,n)=>{ue(ae.bgCyan.black(f.cliTag("Env Manager"))),await Gi(e,n)});Y.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Dev Server"))),await Qi(e)});Y.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await en(e)});Y.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:n}=await import("./credentials-5FL2C6KC.js");await n(e)});Y.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{ue(ae.bgCyan.black(f.cliTag("Credentials Setup"))),await Xe(e),Ln(ae.green("Done!"))});Y.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Service Credentials"))),await li(e),Ln(ae.green("Done!"))});var si=Y.command("device").description("Manage registered iOS test devices");si.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await Dt("register",e)});si.command("list").description("List all registered devices").action(async()=>{await Dt("list",{})});si.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await Dt("remove",e)});Y.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{ue(ae.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await Tn(e)});var cs=new Set(["login"]);Y.hook("preAction",(e,n)=>{let i=n.name();cs.has(i)||ci()});Y.on("command:*",()=>{console.error(`Invalid command: %s
+`));for(let s of c)ee.error(X.red(`${X.bold(s.name)} ${X.dim(`(${s.arch})`)}`)),ee.info(X.dim(`  PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${On})`))}return a.length>0&&(console.log(""),ee.success(X.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),c.length===0?(ee.success(X.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(ee.error(X.red.bold(`Found ${c.length} unaligned lib${c.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),ee.info(X.yellow("To fix this:")),ee.info(X.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),ee.info(X.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),ee.info(X.dim("  3. Update third-party libraries that ship prebuilt .so files")),ee.info(X.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),ee.info(X.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return i.stop("Analysis failed."),ee.error(X.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{Te.rmSync(t,{recursive:!0,force:!0})}catch{}}}function Xr(e){let n=Te.openSync(e,"r");try{let i=Buffer.alloc(64);if(Te.readSync(n,i,0,64,0),!i.subarray(0,4).equals(qr))return null;let t=i[4]===2,o=i[5]===1,r=(p,m)=>o?p.readUInt16LE(m):p.readUInt16BE(m),c=(p,m)=>o?p.readUInt32LE(m):p.readUInt32BE(m),a=(p,m)=>Number(o?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),s,d,l;t?(s=a(i,32),d=r(i,54),l=r(i,56)):(s=c(i,28),d=r(i,42),l=r(i,44));let u=null;for(let p=0;p<l;p++){let m=Buffer.alloc(d);if(Te.readSync(n,m,0,d,s+p*d),c(m,0)!==Jr)continue;let $;t?$=a(m,48):$=c(m,28),$>0&&(u===null||$<u)&&(u=$)}return u??0}catch{return null}finally{Te.closeSync(n)}}function Nn(e){let n=[];if(!Te.existsSync(e))return n;let i=Te.readdirSync(e,{withFileTypes:!0});for(let t of i){let o=Je.join(e,t.name);t.isDirectory()?n.push(...Nn(o)):t.name.endsWith(".so")&&n.push(o)}return n}function Zr(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var xn=async e=>{if(pe()||(Ae.error(Re.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await ts(e);return}let i=process.cwd(),t=Lt.join(i,"package.json");ht.existsSync(t)||(Ae.error(Re.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(ht.readFileSync(t,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(Ae.info(Re.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),Ae.info(Re.dim(`Type: ${r?"Expo":"Bare React Native"}`)),Ae.info(""));let c={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Rn(i,c);e.json?console.log(JSON.stringify(vn(a,o),null,2)):wn(a,e.severity);let s=a.some(l=>l.findings.some(u=>u.severity==="critical")),d=a.some(l=>l.findings.some(u=>u.severity==="high"));(s||d)&&process.exit(1)},Tn=["16kb"];async function ts(e){let n=e.category?.toLowerCase();n&&!Tn.includes(n)&&(Ae.error(Re.red(`Unknown APK check category: "${n}"`)),Ae.info(Re.dim(`Available APK checks: ${Tn.join(", ")}`)),process.exit(1));let i=await is(e.apk);i||process.exit(1);let t=!n,o=!1;(t||n==="16kb")&&(await Cn(i)||(o=!0)),o&&process.exit(1)}async function is(e){if(e.startsWith("build:")){let i=e.slice(6);return await ns(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await Ln(e);let n=Lt.resolve(e);return ht.existsSync(n)?n:(Ae.error(Re.red(`APK file not found: ${n}`)),null)}async function ns(e){let n=kn();n.start(`Fetching APK from build ${e}...`);try{let i=await D.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let t=i.data.build;if(!t)throw new Error("Build not found");let o=t.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),Ae.error(Re.red("This build does not have an APK artifact.")),Ae.info(Re.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${t.buildId||e}`),await Ln(o.url))}catch(i){return n.stop("Failed to fetch build"),Ae.error(Re.red(i.message)),null}}async function Ln(e){let n=kn();n.start("Downloading APK...");try{let i=ht.mkdtempSync(Lt.join(Qr.tmpdir(),`${f.nameLower}-audit-`)),t=Lt.join(i,"app.apk"),o=await es.get(e,{responseType:"arraybuffer"});ht.writeFileSync(t,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return n.stop(`Downloaded APK (${r} MB)`),t}catch(i){return n.stop("Download failed"),Ae.error(Re.red(`Failed to download APK: ${i.message}`)),null}}var ss=console.log;console.log=()=>{};rs();console.log=ss;ue(ae.bgCyan.black(f.cliTag("Production Build Orchestrator")));var cs=as(import.meta.url),ls=cs("../package.json"),Y=new os;Y.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(ls.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);Y.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await xi()});Y.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{ue(ae.bgCyan.black(f.cliTag("Hosting"))),await ui()});Y.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Sitemap Generator"))),await gi(e)});Y.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Un("--build-id <id>","Internal build ID").hideHelp()).addOption(new Un("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,n)=>{let i=Y.opts();n.yes=n.yes||i.yes,n.quiet=n.quiet||i.quiet,n.platform=e||n.platform,n.buildProfile=n.profile||n.buildProfile,n.quiet||ue(ae.bgCyan.black(f.cliTag("Cloud Build"))),await bt(n)});Y.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{ue(ae.bgCyan.black(f.cliTag("OTA Update"))),await Xi(e)});Y.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Store Submission"))),await Yi(e)});Y.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Login"))),await Fi()});Y.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Link Project"))),await Hi()});Y.command("me").description("Display currently logged in user details").action(async()=>{await Qi()});Y.command("init").description(`Create a new ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Init Project"))),await Bi()});Y.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,n)=>{ue(ae.bgCyan.black(f.cliTag("Env Manager"))),await Ki(e,n)});Y.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Dev Server"))),await tn(e)});Y.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await nn(e)});Y.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:n}=await import("./credentials-5FL2C6KC.js");await n(e)});Y.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{ue(ae.bgCyan.black(f.cliTag("Credentials Setup"))),await Xe(e),Mn(ae.green("Done!"))});Y.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Service Credentials"))),await li(e),Mn(ae.green("Done!"))});var si=Y.command("device").description("Manage registered iOS test devices");si.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await Dt("register",e)});si.command("list").description("List all registered devices").action(async()=>{await Dt("list",{})});si.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await Dt("remove",e)});Y.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{ue(ae.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await xn(e)});var ds=new Set(["login"]);Y.hook("preAction",(e,n)=>{let i=n.name();ds.has(i)||ci()});Y.on("command:*",()=>{console.error(`Invalid command: %s
 See --help for a list of available commands.`,Y.args.join(" ")),process.exit(1)});process.argv.slice(2).length||Y.help();Y.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@radhya/mach",
-  "version": "1.7.1",
+  "version": "1.7.2",
   "description": "Mach CLI: Cloud Build Orchestrator for React Native & Expo",
   "main": "dist/index.js",
   "type": "module",